@mondaydotcomorg/z2h-cli 0.10.0 → 0.11.0

package/dist/commands/__tests__/edit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=edit.test.d.ts.map

package/dist/commands/__tests__/edit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"edit.test.d.ts","sourceRoot":"","sources":["../../../src/commands/__tests__/edit.test.ts"],"names":[],"mappings":""}

package/dist/commands/create.d.ts

@@ -1,5 +1,5 @@
-export declare const REMOTE_TYPES: readonly ["s3", "github"];
-export type RemoteType = (typeof REMOTE_TYPES)[number];
+import { REMOTE_TYPES, type RemoteType } from '../util/git/remote-options';
+export { REMOTE_TYPES, type RemoteType };
 export interface CreateOptions {
     template?: string;
     htmlFile?: string;

package/dist/commands/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/commands/create.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,YAAY,2BAA4B,CAAC;AACtD,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AA6BD,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoH5F"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/commands/create.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,KAAK,UAAU,EAA2C,MAAM,4BAA4B,CAAC;AAKpH,OAAO,EAAE,YAAY,EAAE,KAAK,UAAU,EAAE,CAAC;AAEzC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AA6BD,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkG5F"}

package/dist/commands/create.js

@@ -6,18 +6,18 @@ const fs = require('fs-extra');
 const util_logger = require('../util/logger.js');
 const util_workspace = require('../util/workspace.js');
 const util_templates = require('../util/templates.js');
-const util_manifest = require('../util/manifest.js');
-const util_appName = require('../util/app-name.js');
 const constants = require('../constants.js');
 const util_npm_install = require('../util/npm/install.js');
 const util_git_repo = require('../util/git/repo.js');
-const commands_build = require('./build.js');
+const util_git_remoteOptions = require('../util/git/remote-options.js');
+const util_broker_app = require('../util/broker/app.js');
+const util_appName = require('../util/app-name.js');
+const shadow_prepare = require('../shadow/prepare.js');
 
 const _interopDefault = e => e && e.__esModule ? e : { default: e };
 
 const path__default = /*#__PURE__*/_interopDefault(path);
 
-const REMOTE_TYPES = ['s3', 'github'];
 // Names reserved by the host MF (mf-bigbrain-zth) for platform pages under
 // /bigbrain-vibe/<name>. Creating an app with one of these would shadow the
 // platform page in the URL, so we refuse upfront.
@@ -57,15 +57,7 @@ async function createCommand(appName, opts = {}) {
             `2-50 chars, starting with a letter.`);
     }
     // Validate --remote up front before any file I/O.
-    if (!opts.remote) {
-        throw new Error('--remote is required. Use --remote=s3 (shared storage) or --remote=github (your GitHub repo).');
-    }
-    if (!REMOTE_TYPES.includes(opts.remote)) {
-        throw new Error(`Unknown remote "${opts.remote}". Use ${REMOTE_TYPES.join(' or ')}.`);
-    }
-    if (opts.remote === 'github' && !opts.repoUrl) {
-        throw new Error('--repo-url is required when using --remote=github.');
-    }
+    util_git_remoteOptions.validateRemoteOptions(opts, true);
     // Resolve template.
     // `--html-file` implies `--template html-embed` unless the user already picked one.
     const template = (opts.template ?? (opts.htmlFile ? 'html-embed' : 'default'));
@@ -80,9 +72,9 @@ async function createCommand(appName, opts = {}) {
     if (!(await isDirEmpty(appDir))) {
         throw new Error(`${appDir} is non-empty. Pick a different name or wipe it first.`);
     }
-    // Check for manifest collision (network call — after all local checks).
-    const manifest = await util_manifest.readManifest();
-    if (manifest[util_appName.mfAppName(appName)]) {
+    // Check the broker — fail fast if the app is already registered.
+    const existing = await util_broker_app.fetchApp(util_appName.mfAppName(appName));
+    if (existing) {
         throw new Error(`An app named "${appName}" already exists in the Z2H registry. Pick a different name.`);
     }
     // Compute substitutions.
@@ -109,28 +101,16 @@ async function createCommand(appName, opts = {}) {
         await fs.copy(opts.htmlFile, path__default.default.join(appDir, 'src', 'page.html'));
     }
     util_logger.info(`initializing git repo for ${appName}...`);
-    let gitRemote;
-    if (opts.remote === 's3') {
-        gitRemote = util_git_repo.defaultS3Remote(appName);
-    }
-    else {
-        gitRemote = opts.repoUrl;
-    }
+    const gitRemote = util_git_remoteOptions.resolveRemoteUrl(opts.remote, appName, opts.repoUrl);
     await util_git_repo.initRepo(appDir, gitRemote);
     util_logger.info(`installing dependencies for ${appName}...`);
     await util_npm_install.runYarnInstall({ cwd: workspace });
-    // build/dev/deploy all locate the consumer via process.cwd() — chdir before calling them.
-    const prevCwd = process.cwd();
+    // Best-effort workspace wiring (.zth shadow). Non-fatal — dev/deploy re-run it.
     try {
-        util_logger.info(`pre-building ${appName}`);
-        process.chdir(appDir);
-        await commands_build.buildCommand();
-    }
-    catch {
-        util_logger.warn(`pre-build failed. No worries — it will run again when needed.`);
+        await shadow_prepare.prepareShadow(appDir);
     }
-    finally {
-        process.chdir(prevCwd);
+    catch (err) {
+        util_logger.warn(`prepare shadow failed: ${err.message} — it will run again when needed.`);
     }
     util_logger.output(`[z2h-cli] app ready at ${appDir}`, {
         ok: true,
@@ -142,5 +122,5 @@ async function createCommand(appName, opts = {}) {
     });
 }
 
-exports.REMOTE_TYPES = REMOTE_TYPES;
+exports.REMOTE_TYPES = util_git_remoteOptions.REMOTE_TYPES;
 exports.createCommand = createCommand;

package/dist/commands/deploy.d.ts

@@ -1,6 +1,9 @@
+import { type RemoteType } from '../util/git/remote-options';
 export interface DeployOptions {
     dryRun?: boolean;
     json?: boolean;
+    remote?: RemoteType;
+    repoUrl?: string;
 }
 export declare function deployCommand(opts?: DeployOptions): Promise<void>;
 //# sourceMappingURL=deploy.d.ts.map

package/dist/commands/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAGD,wBAAsB,aAAa,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0F3E"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,UAAU,EAA2C,MAAM,4BAA4B,CAAC;AAItG,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAGD,wBAAsB,aAAa,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmJ3E"}

package/dist/commands/deploy.js

@@ -2,17 +2,21 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
 const path = require('node:path');
 const os = require('node:os');
+const node_readline = require('node:readline');
 const fs = require('fs-extra');
 const util_logger = require('../util/logger.js');
 const shadow_paths = require('../shadow/paths.js');
-const util_manifest = require('../util/manifest.js');
 const util_s3_upload = require('../util/s3/upload.js');
 const constants = require('../constants.js');
-const util_s3_client = require('../util/s3/client.js');
+const util_auth_brokerCredentialProvider = require('../util/auth/broker-credential-provider.js');
 const util_auth_authStore = require('../util/auth/auth-store.js');
 const util_appName = require('../util/app-name.js');
-const commands_build = require('./build.js');
+const util_machineIdentity = require('../util/machine-identity.js');
 const util_git_repo = require('../util/git/repo.js');
+const util_git_gitEnv = require('../util/git/git-env.js');
+const util_git_remoteOptions = require('../util/git/remote-options.js');
+const util_s3_client = require('../util/s3/client.js');
+const commands_build = require('./build.js');
 
 const _interopDefault = e => e && e.__esModule ? e : { default: e };
 
@@ -33,11 +37,42 @@ async function deployCommand(opts = {}) {
     // Validate the user's deploy token is on disk before doing any expensive
     // work. Throws Z2hAuthMissingError with a remediation hint if not.
     const { token } = await util_auth_authStore.readZthAuth();
-    util_s3_client.setupS3Client({ appName });
+    let gitRemote = await util_git_repo.getRemoteUrl(process.cwd());
+    if (gitRemote) {
+        if (opts.remote || opts.repoUrl) {
+            throw new Error(`--remote and --repo-url only apply on the first deploy of an app with no git remote.\n` +
+                `This app already tracks source at: ${gitRemote}`);
+        }
+    }
+    else {
+        if (!opts.remote) {
+            throw new Error(`This app has no git remote. On first deploy, tell Z2H how to track source:\n\n` +
+                `  z2h-cli deploy --remote s3 (default)\n` +
+                `      Stores source history in S3 alongside your app. No extra setup.\n\n` +
+                `  z2h-cli deploy --remote github --repo-url https://github.com/org/repo.git\n` +
+                `      Uses an existing GitHub repo (must exist before deploying).`);
+        }
+        util_git_remoteOptions.validateRemoteOptions(opts);
+        // Pass the raw consumer name (not the mf-prefixed appName) so defaultS3Remote
+        // produces the correct s3://bucket/mf-<name>/git path without double prefix.
+        const remote = util_git_remoteOptions.resolveRemoteUrl(opts.remote, consumerPkg.name, opts.repoUrl);
+        util_logger.info(`initializing git repo with ${opts.remote} remote...`);
+        await util_git_repo.initRepo(process.cwd(), remote);
+        gitRemote = remote;
+    }
+    const version = await util_auth_brokerCredentialProvider.fetchDeployVersion(appName);
+    const nextVersion = version + 1;
+    const gitEnv = await util_git_gitEnv.resolveGitEnv(appName, gitRemote);
+    // Sync git first so a divergence (GitConflictError) stops us.
+    // The skill commits the working tree (with an LLM-authored message) before
+    // invoking deploy, so the tree should be clean here.
+    if (gitRemote) {
+        await util_git_repo.guardCleanTree(process.cwd());
+        util_logger.info('syncing with git remote');
+        await util_git_repo.pullAndResolve(process.cwd(), gitEnv);
+    }
     util_logger.info('reading current Z2H manifest');
-    const manifest = await util_manifest.readManifest();
-    const version = util_manifest.nextVersion(manifest, appName);
-    const keyPrefix = `${appName}/${version}`;
+    const keyPrefix = `${appName}/${nextVersion}`;
     const url = `${constants.BUCKET_READ_DNS_URL}/${keyPrefix}`;
     util_logger.info('building');
     await commands_build.buildCommand({ json: opts.json, publicUrl: url });
@@ -50,11 +85,10 @@ async function deployCommand(opts = {}) {
         throw new Error(`Missing asset-manifest.json at ${assetManifestPath}.`);
     }
     const assetManifest = (await fs.readJson(assetManifestPath));
-    const deployedBy = os__default.default.userInfo().username;
-    const gitRemote = await util_git_repo.getRemoteUrl(process.cwd());
+    const deployedBy = util_machineIdentity.getMachineAppName() ?? os__default.default.userInfo().username;
     const entry = {
         ...assetManifest,
-        version,
+        version: nextVersion,
         url,
         deployedBy,
         gitRemote,
@@ -72,14 +106,34 @@ async function deployCommand(opts = {}) {
         });
         return;
     }
+    // lock → git push → bundle upload → manifest PUT (the manifest write is the single commit point).
     try {
-        // Lock is acquired here — uploadDir triggers the STS credential provider on first S3 call
+        // Acquire the deploy lock explicitly. Done after the build
+        // so the lock hold stays tiny — it wraps only push → upload → manifest.
+        // A 409 here means someone else is mid-deploy;
+        const creds = await util_auth_brokerCredentialProvider.brokerCredentialProvider({ appName })();
+        util_s3_client.setupS3Client(creds);
+        await acquireDeployLock(appName, token);
+        // Push before any S3 write so a rejected push (someone deployed during our
+        // build) stops the deploy before the bundle/manifest go live
+        if (gitRemote) {
+            util_logger.info('pushing to git remote');
+            await util_git_repo.pushToRemote(process.cwd(), gitEnv);
+        }
         util_logger.info(`uploading build → s3://${constants.BUCKET_WRITE_NAME}/${keyPrefix}/`);
         await util_s3_upload.uploadDir(paths.shadowBuild, keyPrefix);
-        util_logger.info(`updating manifest entry "${appName}" → v${version}`);
-        await util_manifest.writeManifest(util_manifest.upsertEntry(manifest, appName, entry));
-        util_logger.info(`registering app "${appName}" → v${version}`);
-        await registerApp(appName, token, version, entry);
+        // v1 creates the app row (+ owner grant); later versions release onto it.
+        // The two are separate endpoints, so the CLI picks based on the version it
+        // was handed.
+        if (nextVersion === 1) {
+            const visibility = await resolveFirstDeployVisibility(appName, opts.json);
+            util_logger.info(`registering app "${appName}" → v${nextVersion} (${visibility})`);
+            await registerApp(appName, token, nextVersion, entry, visibility, gitRemote);
+        }
+        else {
+            util_logger.info(`releasing "${appName}" → v${nextVersion}`);
+            await updateApp(appName, token, nextVersion, entry);
+        }
     }
     finally {
         await releaseLockBestEffort(appName, token);
@@ -88,10 +142,10 @@ async function deployCommand(opts = {}) {
     // before looking it up in the manifest. So the user-facing URL must use
     // the consumer's de-scoped package name (no `mf-` prefix, no `@scope/`).
     const liveUrl = `https://bigbrain.me/bigbrain-vibe/${util_appName.cleanAppName(consumerPkg.name)}`;
-    util_logger.output(`[z2h-cli] deployed ✅\n  app:     ${appName}\n  version: ${version}\n  open:    ${liveUrl}`, {
+    util_logger.output(`[z2h-cli] deployed ✅\n  app:     ${appName}\n  version: ${nextVersion}\n  open:    ${liveUrl}`, {
         ok: true,
         appName,
-        version,
+        version: nextVersion,
         bucket: constants.BUCKET_WRITE_NAME,
         keyPrefix,
         url,
@@ -99,25 +153,71 @@ async function deployCommand(opts = {}) {
         entry,
     });
 }
-async function registerApp(appName, token, version, entry) {
+async function registerApp(appName, token, version, entry, visibility, gitRemote) {
     const res = await fetch(`${constants.brokerBaseUrl()}/z2h-cli/apps/register`, {
         method: 'POST',
-        headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json' },
-        body: JSON.stringify({ appName, version, entry }),
+        headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json', ...constants.routingHeaders() },
+        body: JSON.stringify({ appName, version, entry, visibility, gitRemote }),
     });
     if (!res.ok) {
         const text = await res.text();
         throw new Error(`App registration failed (${res.status}): ${text.slice(0, 1024)}`);
     }
 }
-// best-effort — the 5-min TTL backstop handles failures
+// Acquire the per-app deploy lock. Throws a friendly error on 409 (someone else is deploying)
+// so the deploy stops and the caller can retry; the backend TTL backstops a crashed holder.
+async function acquireDeployLock(appName, token) {
+    const res = await fetch(`${constants.brokerBaseUrl()}/z2h-cli/lock/acquire`, {
+        method: 'POST',
+        headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json', ...constants.routingHeaders() },
+        body: JSON.stringify({ appName }),
+    });
+    if (res.status === 409) {
+        throw new Error(`Someone is deploying "${appName}" right now — try again in a moment.`);
+    }
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`Failed to acquire deploy lock (${res.status}): ${text.slice(0, 512)}`);
+    }
+    util_logger.info(`deploy lock acquired for ${appName}`);
+}
+async function updateApp(appName, token, version, entry) {
+    const res = await fetch(`${constants.brokerBaseUrl()}/z2h-cli/apps/update`, {
+        method: 'POST',
+        headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json', ...constants.routingHeaders() },
+        body: JSON.stringify({ appName, version, entry }),
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`App update failed (${res.status}): ${text.slice(0, 1024)}`);
+    }
+}
+// First deploy only: decide whether the app is born public or private. The
+// choice is passed to the register endpoint (default private). Non-interactive
+// runs (--json or no TTY) always default to private.
+async function resolveFirstDeployVisibility(appName, json) {
+    if (json || !process.stdout.isTTY) {
+        return 'private';
+    }
+    const rl = node_readline.createInterface({ input: process.stdin, output: process.stdout });
+    const answer = await new Promise(resolve => {
+        rl.question(`Make "${appName}" public to all monday.com employees? (y/N) `, resolve);
+    });
+    rl.close();
+    return answer.trim().toLowerCase() === 'y' ? 'public' : 'private';
+}
+// best-effort — the 2-min TTL backstop handles failures
 async function releaseLockBestEffort(appName, token) {
     try {
-        await fetch(`${constants.brokerBaseUrl()}/z2h-cli/lock/release`, {
+        const res = await fetch(`${constants.brokerBaseUrl()}/z2h-cli/lock/release`, {
             method: 'POST',
-            headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json' },
+            headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json', ...constants.routingHeaders() },
             body: JSON.stringify({ appName }),
         });
+        if (!res.ok) {
+            util_logger.warn(`failed to release lock for ${appName} (${res.status})`);
+            return;
+        }
         util_logger.info(`lock released for ${appName}`);
     }
     catch {

package/dist/commands/edit.d.ts

@@ -0,0 +1,5 @@
+export interface EditOptions {
+    json?: boolean;
+}
+export declare function editCommand(appName: string, opts?: EditOptions): Promise<void>;
+//# sourceMappingURL=edit.d.ts.map

package/dist/commands/edit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"edit.d.ts","sourceRoot":"","sources":["../../src/commands/edit.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA+CxF"}

package/dist/commands/edit.js

@@ -0,0 +1,61 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const path = require('node:path');
+const fs = require('fs-extra');
+const util_logger = require('../util/logger.js');
+const util_workspace = require('../util/workspace.js');
+const util_appName = require('../util/app-name.js');
+const util_broker_app = require('../util/broker/app.js');
+const util_git_gitEnv = require('../util/git/git-env.js');
+const util_git_repo = require('../util/git/repo.js');
+const util_npm_install = require('../util/npm/install.js');
+const shadow_prepare = require('../shadow/prepare.js');
+
+const _interopDefault = e => e && e.__esModule ? e : { default: e };
+
+const path__default = /*#__PURE__*/_interopDefault(path);
+
+async function editCommand(appName, opts = {}) {
+    if (opts.json) {
+        util_logger.setOutputMode('json');
+    }
+    const workspace = await util_workspace.assertWorkspace();
+    const mfName = util_appName.mfAppName(appName);
+    const app = await util_broker_app.fetchApp(mfName);
+    if (!app?.gitRemote) {
+        util_logger.output(`[z2h-cli] ${appName} was deployed without git tracking — run "z2h-cli deploy" to set up a git remote`, {
+            ok: true,
+            appName,
+        });
+        return;
+    }
+    const { gitRemote } = app;
+    const gitEnv = await util_git_gitEnv.resolveGitEnv(mfName, gitRemote);
+    const appDir = path__default.default.join(workspace, appName);
+    const hasLocal = await fs.pathExists(appDir);
+    if (!hasLocal) {
+        util_logger.info(`cloning ${appName}...`);
+        await util_git_repo.cloneRepo(gitRemote, appDir, gitEnv);
+        util_logger.info(`installing dependencies for ${appName}...`);
+        await util_npm_install.runYarnInstall({ cwd: workspace });
+        // Best-effort workspace wiring (.zth shadow). Non-fatal — dev/deploy re-run it.
+        try {
+            await shadow_prepare.prepareShadow(appDir);
+        }
+        catch (err) {
+            util_logger.warn(`prepare shadow failed: ${err.message} — it will run again when needed.`);
+        }
+    }
+    else {
+        util_logger.info(`pulling latest ${appName}...`);
+        await util_git_repo.pullAndResolve(appDir, gitEnv);
+    }
+    util_logger.output(`[z2h-cli] ${appName} is ready at ${appDir}`, {
+        ok: true,
+        appDir,
+        appName,
+        gitRemote,
+    });
+}
+
+exports.editCommand = editCommand;

package/dist/commands/grant.d.ts

@@ -0,0 +1,12 @@
+export interface GrantOptions {
+    public?: boolean;
+    level?: 'owner' | 'editor' | 'viewer';
+    json?: boolean;
+}
+export declare function grantCommand(email: string | undefined, opts: GrantOptions): Promise<void>;
+export declare function revokeCommand(email: string | undefined, opts: GrantOptions): Promise<void>;
+export interface TransferOwnerOptions {
+    json?: boolean;
+}
+export declare function transferOwnerCommand(email: string | undefined, opts: TransferOwnerOptions): Promise<void>;
+//# sourceMappingURL=grant.d.ts.map

package/dist/commands/grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.d.ts","sourceRoot":"","sources":["../../src/commands/grant.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACtC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAkBD,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA+B/F;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BhG;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB/G"}

package/dist/commands/grant.js

@@ -0,0 +1,94 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const util_logger = require('../util/logger.js');
+const util_appName = require('../util/app-name.js');
+const constants = require('../constants.js');
+const util_auth_authStore = require('../util/auth/auth-store.js');
+
+async function postGrant(appName, token, body) {
+    const res = await fetch(`${constants.brokerBaseUrl()}/z2h-apps/${appName}/grants`, {
+        method: 'POST',
+        headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json', ...constants.routingHeaders() },
+        body: JSON.stringify(body),
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`Grant failed (${res.status}): ${text.slice(0, 1024)}`);
+    }
+}
+async function grantCommand(email, opts) {
+    if (opts.json) {
+        util_logger.setOutputMode('json');
+    }
+    if (!opts.public && !email) {
+        throw new Error('Specify what to grant — e.g. --public or provide an email');
+    }
+    const level = opts.level ?? 'viewer';
+    if (!['owner', 'editor', 'viewer'].includes(level)) {
+        throw new Error(`Invalid --level "${level}". Must be owner, editor, or viewer`);
+    }
+    const appName = util_appName.mfAppName(util_appName.getCwdAppName());
+    const { token } = await util_auth_authStore.readZthAuth();
+    if (email) {
+        await postGrant(appName, token, { type: 'user', value: email, accessLevel: level });
+    }
+    if (opts.public) {
+        await postGrant(appName, token, { type: 'global', accessLevel: 'viewer' });
+    }
+    const parts = [];
+    if (email) {
+        parts.push(`${email} (${level})`);
+    }
+    if (opts.public) {
+        parts.push('public');
+    }
+    util_logger.output(`[z2h-cli] "${appName}" granted to: ${parts.join(', ')}`, { ok: true, appName, granted: parts });
+}
+async function revokeCommand(email, opts) {
+    if (opts.json) {
+        util_logger.setOutputMode('json');
+    }
+    if (!opts.public && !email) {
+        throw new Error('Specify what to revoke — e.g. --public or provide an email');
+    }
+    const appName = util_appName.mfAppName(util_appName.getCwdAppName());
+    const { token } = await util_auth_authStore.readZthAuth();
+    const target = email ? `user/${encodeURIComponent(email)}` : 'global';
+    const res = await fetch(`${constants.brokerBaseUrl()}/z2h-apps/${appName}/grants/${target}`, {
+        method: 'DELETE',
+        headers: { Authorization: `Bearer ${token}`, ...constants.routingHeaders() },
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`Revoke failed (${res.status}): ${text.slice(0, 1024)}`);
+    }
+    const revoked = email ?? 'public';
+    const msg = email
+        ? `[z2h-cli] "${appName}" access revoked from ${email}`
+        : `[z2h-cli] "${appName}" is now private (owners/admins only)`;
+    util_logger.output(msg, { ok: true, appName, revoked });
+}
+async function transferOwnerCommand(email, opts) {
+    if (opts.json) {
+        util_logger.setOutputMode('json');
+    }
+    if (!email) {
+        throw new Error('Specify the new owner — e.g. z2h-cli transfer-owner someone@monday.com');
+    }
+    const appName = util_appName.mfAppName(util_appName.getCwdAppName());
+    const { token } = await util_auth_authStore.readZthAuth();
+    const res = await fetch(`${constants.brokerBaseUrl()}/z2h-apps/${appName}/transfer-owner`, {
+        method: 'POST',
+        headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json', ...constants.routingHeaders() },
+        body: JSON.stringify({ email }),
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`Transfer owner failed (${res.status}): ${text.slice(0, 1024)}`);
+    }
+    util_logger.output(`[z2h-cli] "${appName}" ownership transferred to ${email}`, { ok: true, appName, newOwner: email });
+}
+
+exports.grantCommand = grantCommand;
+exports.revokeCommand = revokeCommand;
+exports.transferOwnerCommand = transferOwnerCommand;

package/dist/constants.d.ts

@@ -23,6 +23,7 @@ export declare const DEFAULT_BROKER_BASE_URL = "https://bigbrain-zth.bigbrain.me
  * STS credential provider and the npm-broker registry URL.
  */
 export declare function brokerBaseUrl(): string;
+export declare function routingHeaders(): Record<string, string>;
 export declare const NPM_BROKER_PATH = "/z2h-cli/npm";
 export declare const BROKER_NPM_SCOPE = "@mondaydotcomorg";
 export declare const PUBLIC_NPM_REGISTRY_URL = "https://registry.npmjs.org/";

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,eAAO,MAAM,eAAe,SAAS,CAAC;AAGtC,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAGjD,CAAC;AAQF,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAElD,CAAC;AAMF,eAAO,MAAM,QAAQ,QAAQ,CAAC;AAC9B,eAAO,MAAM,QAAQ,QAAQ,CAAC;AAG9B,eAAO,MAAM,iBAAiB,UAAY,CAAC;AAQ3C,eAAO,MAAM,iBAAiB,qCAAqC,CAAC;AACpE,eAAO,MAAM,MAAM,cAAc,CAAC;AAClC,eAAO,MAAM,gBAAgB,wEAA4D,CAAC;AAE1F,eAAO,MAAM,oBAAoB,2BAA2B,CAAC;AAC7D,eAAO,MAAM,mBAAmB,+CAAgD,CAAC;AAKjF,eAAO,MAAM,YAAY,cAAc,CAAC;AACxC,eAAO,MAAM,iBAAiB,yDAA2C,CAAC;AAM1E,eAAO,MAAM,gBAAgB,QAA2B,CAAC;AAKzD,eAAO,MAAM,uBAAuB,qCAAqC,CAAC;AAE1E;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAKD,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAG9C,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAGnD,eAAO,MAAM,uBAAuB,gCAAgC,CAAC;AAMrE,eAAO,MAAM,iBAAiB,EAAG,eAAwB,CAAC;AAE1D;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,eAAO,MAAM,eAAe,SAAS,CAAC;AAGtC,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAGjD,CAAC;AAQF,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAElD,CAAC;AAMF,eAAO,MAAM,QAAQ,QAAQ,CAAC;AAC9B,eAAO,MAAM,QAAQ,QAAQ,CAAC;AAG9B,eAAO,MAAM,iBAAiB,UAAY,CAAC;AAQ3C,eAAO,MAAM,iBAAiB,qCAAqC,CAAC;AACpE,eAAO,MAAM,MAAM,cAAc,CAAC;AAClC,eAAO,MAAM,gBAAgB,wEAA4D,CAAC;AAE1F,eAAO,MAAM,oBAAoB,2BAA2B,CAAC;AAC7D,eAAO,MAAM,mBAAmB,+CAAgD,CAAC;AAKjF,eAAO,MAAM,YAAY,cAAc,CAAC;AACxC,eAAO,MAAM,iBAAiB,yDAA2C,CAAC;AAM1E,eAAO,MAAM,gBAAgB,QAA2B,CAAC;AAKzD,eAAO,MAAM,uBAAuB,qCAAqC,CAAC;AAE1E;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAID,wBAAgB,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGvD;AAKD,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAG9C,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAGnD,eAAO,MAAM,uBAAuB,gCAAgC,CAAC;AAMrE,eAAO,MAAM,iBAAiB,EAAG,eAAwB,CAAC;AAE1D;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C"}

package/dist/constants.js

@@ -60,6 +60,12 @@ const DEFAULT_BROKER_BASE_URL = 'https://bigbrain-zth.bigbrain.me';
 function brokerBaseUrl() {
     return process.env.Z2H_BROKER_BASE_URL || DEFAULT_BROKER_BASE_URL;
 }
+// Returns Baggage header for monday-mirror routing when Z2H_ROUTING_KEY is set.
+// No-op in production (returns {}) — only activates when the env var is set.
+function routingHeaders() {
+    const key = process.env.Z2H_ROUTING_KEY;
+    return key ? { Baggage: `routingKey=${key}` } : {};
+}
 // The authenticated npm reverse-proxy is mounted here on the broker. Only the
 // `@mondaydotcomorg` scope is served; everything else resolves from npmjs
 // directly. See docs/superpowers/specs/2026-06-03-npm-brokering-design.md §3.
@@ -104,3 +110,4 @@ exports.SHADOW_SCRIPTS = SHADOW_SCRIPTS;
 exports.Z2H_NPM_TOKEN_ENV = Z2H_NPM_TOKEN_ENV;
 exports.brokerBaseUrl = brokerBaseUrl;
 exports.brokerNpmRegistryUrl = brokerNpmRegistryUrl;
+exports.routingHeaders = routingHeaders;

package/dist/esm/commands/__tests__/edit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=edit.test.d.ts.map

package/dist/esm/commands/__tests__/edit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"edit.test.d.ts","sourceRoot":"","sources":["../../../../src/commands/__tests__/edit.test.ts"],"names":[],"mappings":""}

package/dist/esm/commands/create.d.ts

@@ -1,5 +1,5 @@
-export declare const REMOTE_TYPES: readonly ["s3", "github"];
-export type RemoteType = (typeof REMOTE_TYPES)[number];
+import { REMOTE_TYPES, type RemoteType } from '../util/git/remote-options';
+export { REMOTE_TYPES, type RemoteType };
 export interface CreateOptions {
     template?: string;
     htmlFile?: string;

package/dist/esm/commands/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/commands/create.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,YAAY,2BAA4B,CAAC;AACtD,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AA6BD,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoH5F"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/commands/create.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,KAAK,UAAU,EAA2C,MAAM,4BAA4B,CAAC;AAKpH,OAAO,EAAE,YAAY,EAAE,KAAK,UAAU,EAAE,CAAC;AAEzC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AA6BD,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkG5F"}