@mondaydotcomorg/z2h-cli 0.13.0 → 0.13.2

package/dist/commands/delete.d.ts

@@ -0,0 +1,6 @@
+export interface DeleteOptions {
+    yes?: boolean;
+    json?: boolean;
+}
+export declare function deleteCommand(opts?: DeleteOptions): Promise<void>;
+//# sourceMappingURL=delete.d.ts.map

package/dist/commands/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../src/commands/delete.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAkBD,wBAAsB,aAAa,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmC3E"}

package/dist/commands/delete.js

@@ -0,0 +1,53 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const node_readline = require('node:readline');
+const util_logger = require('../util/logger.js');
+const util_appName = require('../util/app-name.js');
+const constants = require('../constants.js');
+const util_auth_authStore = require('../util/auth/auth-store.js');
+
+// Type-the-app-name confirmation. The caller must retype the de-scoped app
+// name (what they see in the URL) to guard against accidental deletes.
+async function confirmByName(appSlug) {
+    const rl = node_readline.createInterface({ input: process.stdin, output: process.stderr });
+    const answer = await new Promise(resolve => {
+        rl.question(`This permanently deletes "${appSlug}" and takes it offline. This cannot be undone.\n` +
+            `Type the app name to confirm: `, resolve);
+    });
+    rl.close();
+    return answer.trim() === appSlug;
+}
+// Should be run from the consumer app directory — uses process.cwd() to locate it.
+async function deleteCommand(opts = {}) {
+    if (opts.json) {
+        util_logger.setOutputMode('json');
+    }
+    const cwdName = util_appName.getCwdAppName();
+    if (!cwdName) {
+        throw new Error('Run this from inside a consumer app directory (the one with your package.json).');
+    }
+    const appSlug = util_appName.cleanAppName(cwdName); // user-facing name (matches the bigbrain.me URL)
+    const appName = util_appName.mfAppName(cwdName); // canonical mf- bundle name the backend keys on
+    // Confirmation. --json is always non-interactive, so it requires --yes.
+    if (!opts.yes) {
+        if (opts.json || !process.stdin.isTTY) {
+            throw new Error('Refusing to delete without confirmation — pass --yes to delete non-interactively.');
+        }
+        if (!(await confirmByName(appSlug))) {
+            throw new Error(`Name did not match "${appSlug}" — aborted, nothing was deleted.`);
+        }
+    }
+    const { token } = await util_auth_authStore.readZthAuth();
+    util_logger.info(`deleting "${appName}"`);
+    const res = await fetch(`${constants.brokerBaseUrl()}/z2h-apps/${encodeURIComponent(appName)}`, {
+        method: 'DELETE',
+        headers: { Authorization: `Bearer ${token}`, ...constants.routingHeaders() },
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`Delete failed (${res.status}): ${text.slice(0, 1024)}`);
+    }
+    util_logger.output(`[z2h-cli] "${appName}" deleted ✅ — it is now offline.`, { ok: true, appName, deleted: true });
+}
+
+exports.deleteCommand = deleteCommand;

package/dist/commands/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,UAAU,EAA2C,MAAM,4BAA4B,CAAC;AAItG,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAGD,wBAAsB,aAAa,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmJ3E"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,UAAU,EAA2C,MAAM,4BAA4B,CAAC;AAKtG,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAGD,wBAAsB,aAAa,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuJ3E"}

package/dist/commands/deploy.js

@@ -6,6 +6,7 @@ const node_readline = require('node:readline');
 const fs = require('fs-extra');
 const util_logger = require('../util/logger.js');
 const shadow_paths = require('../shadow/paths.js');
+const util_tags = require('../util/tags.js');
 const util_s3_upload = require('../util/s3/upload.js');
 const constants = require('../constants.js');
 const util_auth_brokerCredentialProvider = require('../util/auth/broker-credential-provider.js');
@@ -16,6 +17,7 @@ const util_git_repo = require('../util/git/repo.js');
 const util_git_gitEnv = require('../util/git/git-env.js');
 const util_git_remoteOptions = require('../util/git/remote-options.js');
 const util_s3_client = require('../util/s3/client.js');
+const commands_tag = require('./tag.js');
 const commands_build = require('./build.js');
 
 const _interopDefault = e => e && e.__esModule ? e : { default: e };
@@ -138,6 +140,9 @@ async function deployCommand(opts = {}) {
     finally {
         await releaseLockBestEffort(appName, token);
     }
+    // Tags are a post-deploy concern: the S3 upload has already succeeded, so a
+    // tag failure never fails the deploy (handled inside).
+    await handleDeployTags(appName);
     // The host MF parses the app name from the URL and prepends `mf-` itself
     // before looking it up in the manifest. So the user-facing URL must use
     // the consumer's de-scoped package name (no `mf-` prefix, no `@scope/`).
@@ -164,6 +169,27 @@ async function registerApp(appName, token, version, entry, visibility, gitRemote
         throw new Error(`App registration failed (${res.status}): ${text.slice(0, 1024)}`);
     }
 }
+const TAG_NUDGE = "run 'z2h-cli tag' to categorize this app (app type & team)";
+async function handleDeployTags(appSlug) {
+    try {
+        const interactive = util_logger.getOutputMode() === 'human' && Boolean(process.stdin.isTTY);
+        if (!interactive) {
+            util_logger.info(TAG_NUDGE);
+            return;
+        }
+        const current = await util_tags.fetchAppTags(appSlug);
+        if (current.length > 0) {
+            return; // already tagged — don't prompt on every redeploy
+        }
+        const catalog = await util_tags.fetchTagCatalog();
+        const selected = await commands_tag.promptForTags(appSlug, catalog, current);
+        const tags = await util_tags.setAppTags(appSlug, selected);
+        util_logger.info(tags.length > 0 ? `tags set: ${tags.map(t => t.name).join(', ')}` : TAG_NUDGE);
+    }
+    catch (err) {
+        util_logger.warn(`could not update tags: ${err.message}`);
+    }
+}
 // Acquire the per-app deploy lock. Throws a friendly error on 409 (someone else is deploying)
 // so the deploy stops and the caller can retry; the backend TTL backstops a crashed holder.
 async function acquireDeployLock(appName, token) {

package/dist/commands/tag.d.ts

@@ -0,0 +1,14 @@
+import { type AppTag, type CatalogEntry } from '../util/tags';
+export interface TagOptions {
+    /** Repeatable `--tag` — sets the full tag set non-interactively. */
+    tag?: string[];
+    json?: boolean;
+}
+/**
+ * Closed-list prompt: one numbered pick per dimension (app type, team). Enter
+ * keeps the current value for that dimension (or skips it if unset). Returns
+ * the full replacement set of tag names.
+ */
+export declare function promptForTags(appSlug: string, catalog: CatalogEntry[], current: AppTag[]): Promise<string[]>;
+export declare function tagCommand(appArg: string | undefined, opts: TagOptions): Promise<void>;
+//# sourceMappingURL=tag.d.ts.map

package/dist/commands/tag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tag.d.ts","sourceRoot":"","sources":["../../src/commands/tag.ts"],"names":[],"mappings":"AAMA,OAAO,EAML,KAAK,MAAM,EACX,KAAK,YAAY,EAClB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,UAAU;IACzB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAgCD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA0ClH;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAgC5F"}

package/dist/commands/tag.js

@@ -0,0 +1,114 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const readline = require('node:readline/promises');
+const node_process = require('node:process');
+const fs = require('fs-extra');
+const shadow_paths = require('../shadow/paths.js');
+const util_appName = require('../util/app-name.js');
+const util_logger = require('../util/logger.js');
+const util_tags = require('../util/tags.js');
+
+const _interopDefault = e => e && e.__esModule ? e : { default: e };
+
+const readline__default = /*#__PURE__*/_interopDefault(readline);
+
+/** Render an app's tags as `name (Type), ...` — or `(none)`. */
+function formatTags(tags) {
+    return tags.map(t => `${t.name} (${util_tags.TAG_TYPE_LABELS[t.type]})`).join(', ') || '(none)';
+}
+/**
+ * Resolve the target app name: an explicit arg wins, else the consumer
+ * package.json `name` in the cwd. Normalized to the `mf-` bundle name the
+ * broker stores (via `mfAppName`), so the server finds the app.
+ */
+async function resolveAppSlug(appArg) {
+    if (appArg) {
+        return util_appName.mfAppName(appArg);
+    }
+    const paths = shadow_paths.resolveConsumerPaths(process.cwd());
+    let pkg;
+    try {
+        pkg = (await fs.readJson(paths.consumerPkg));
+    }
+    catch {
+        throw new Error('Could not read a consumer package.json in the current directory. ' +
+            'Either cd into your app folder or pass an app name: z2h-cli tag <app-name>.');
+    }
+    if (!pkg.name) {
+        throw new Error('Consumer package.json must have a "name" field (or pass an app name argument).');
+    }
+    return util_appName.mfAppName(pkg.name);
+}
+/**
+ * Closed-list prompt: one numbered pick per dimension (app type, team). Enter
+ * keeps the current value for that dimension (or skips it if unset). Returns
+ * the full replacement set of tag names.
+ */
+async function promptForTags(appSlug, catalog, current) {
+    const rl = readline__default.default.createInterface({ input: node_process.stdin, output: node_process.stdout });
+    const selected = [];
+    try {
+        util_logger.info(`Tagging "${appSlug}".`);
+        for (const type of util_tags.TAG_TYPES) {
+            const options = catalog.filter(t => t.type === type);
+            if (options.length === 0) {
+                continue;
+            }
+            const currentName = current.find(c => c.type === type)?.name;
+            const label = util_tags.TAG_TYPE_LABELS[type];
+            util_logger.info(`\n${label}${currentName ? ` (current: ${currentName})` : ''}:`);
+            options.forEach((o, i) => util_logger.info(`  ${i + 1}) ${o.name}`));
+            const raw = await rl.question(`Pick a ${label} (number or name; Enter to ${currentName ? 'keep current' : 'skip'}):\n> `);
+            const trimmed = raw.trim();
+            if (!trimmed) {
+                if (currentName) {
+                    selected.push(currentName);
+                }
+                continue;
+            }
+            // Accept either the 1-based number or the tag name (case-insensitive).
+            const idx = Number(trimmed) - 1;
+            const byNumber = Number.isInteger(idx) && idx >= 0 && idx < options.length ? options[idx] : undefined;
+            const chosen = byNumber ?? options.find(o => o.name.toLowerCase() === trimmed.toLowerCase());
+            if (chosen) {
+                selected.push(chosen.name);
+            }
+            else {
+                util_logger.info(`Invalid choice "${trimmed}" — ${currentName ? 'keeping current' : 'skipping'} ${label}.`);
+                if (currentName) {
+                    selected.push(currentName);
+                }
+            }
+        }
+        return selected;
+    }
+    finally {
+        rl.close();
+    }
+}
+async function tagCommand(appArg, opts) {
+    if (opts.json) {
+        util_logger.setOutputMode('json');
+    }
+    const appSlug = await resolveAppSlug(appArg);
+    // Non-interactive write: `--tag` flags set the full set directly.
+    if (opts.tag && opts.tag.length > 0) {
+        const tags = await util_tags.setAppTags(appSlug, opts.tag);
+        util_logger.output(`[z2h-cli] tags for "${appSlug}": ${formatTags(tags)}`, { ok: true, appName: appSlug, tags });
+        return;
+    }
+    const [catalog, current] = await Promise.all([util_tags.fetchTagCatalog(), util_tags.fetchAppTags(appSlug)]);
+    // Read-only listing: agents (`--json`) and any non-TTY caller get the catalog
+    // + current tags without a prompt — then they set tags via `--tag`. This also
+    // avoids hanging on `readline` when no human is attached to stdin.
+    if (opts.json || !process.stdin.isTTY) {
+        util_logger.output(`[z2h-cli] "${appSlug}"\n  catalog: ${catalog.map(t => `${t.name} (${util_tags.TAG_TYPE_LABELS[t.type]})`).join(', ') || '(none)'}\n  current: ${formatTags(current)}`, { ok: true, appName: appSlug, catalog, current });
+        return;
+    }
+    const selected = await promptForTags(appSlug, catalog, current);
+    const tags = await util_tags.setAppTags(appSlug, selected);
+    util_logger.output(`[z2h-cli] tags for "${appSlug}": ${formatTags(tags)}`, { ok: true, appName: appSlug, tags });
+}
+
+exports.promptForTags = promptForTags;
+exports.tagCommand = tagCommand;

package/dist/esm/commands/delete.d.ts

@@ -0,0 +1,6 @@
+export interface DeleteOptions {
+    yes?: boolean;
+    json?: boolean;
+}
+export declare function deleteCommand(opts?: DeleteOptions): Promise<void>;
+//# sourceMappingURL=delete.d.ts.map

package/dist/esm/commands/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../src/commands/delete.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAkBD,wBAAsB,aAAa,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmC3E"}

package/dist/esm/commands/delete.mjs

@@ -0,0 +1,51 @@
+import { createInterface } from 'node:readline';
+import { setOutputMode, info, output } from '../util/logger.mjs';
+import { getCwdAppName, cleanAppName, mfAppName } from '../util/app-name.mjs';
+import { brokerBaseUrl, routingHeaders } from '../constants.mjs';
+import { readZthAuth } from '../util/auth/auth-store.mjs';
+
+// Type-the-app-name confirmation. The caller must retype the de-scoped app
+// name (what they see in the URL) to guard against accidental deletes.
+async function confirmByName(appSlug) {
+    const rl = createInterface({ input: process.stdin, output: process.stderr });
+    const answer = await new Promise(resolve => {
+        rl.question(`This permanently deletes "${appSlug}" and takes it offline. This cannot be undone.\n` +
+            `Type the app name to confirm: `, resolve);
+    });
+    rl.close();
+    return answer.trim() === appSlug;
+}
+// Should be run from the consumer app directory — uses process.cwd() to locate it.
+async function deleteCommand(opts = {}) {
+    if (opts.json) {
+        setOutputMode('json');
+    }
+    const cwdName = getCwdAppName();
+    if (!cwdName) {
+        throw new Error('Run this from inside a consumer app directory (the one with your package.json).');
+    }
+    const appSlug = cleanAppName(cwdName); // user-facing name (matches the bigbrain.me URL)
+    const appName = mfAppName(cwdName); // canonical mf- bundle name the backend keys on
+    // Confirmation. --json is always non-interactive, so it requires --yes.
+    if (!opts.yes) {
+        if (opts.json || !process.stdin.isTTY) {
+            throw new Error('Refusing to delete without confirmation — pass --yes to delete non-interactively.');
+        }
+        if (!(await confirmByName(appSlug))) {
+            throw new Error(`Name did not match "${appSlug}" — aborted, nothing was deleted.`);
+        }
+    }
+    const { token } = await readZthAuth();
+    info(`deleting "${appName}"`);
+    const res = await fetch(`${brokerBaseUrl()}/z2h-apps/${encodeURIComponent(appName)}`, {
+        method: 'DELETE',
+        headers: { Authorization: `Bearer ${token}`, ...routingHeaders() },
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`Delete failed (${res.status}): ${text.slice(0, 1024)}`);
+    }
+    output(`[z2h-cli] "${appName}" deleted ✅ — it is now offline.`, { ok: true, appName, deleted: true });
+}
+
+export { deleteCommand };

package/dist/esm/commands/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../../src/commands/deploy.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,UAAU,EAA2C,MAAM,4BAA4B,CAAC;AAItG,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAGD,wBAAsB,aAAa,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmJ3E"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../../src/commands/deploy.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,UAAU,EAA2C,MAAM,4BAA4B,CAAC;AAKtG,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAGD,wBAAsB,aAAa,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuJ3E"}

package/dist/esm/commands/deploy.mjs

@@ -2,8 +2,9 @@ import path from 'node:path';
 import os from 'node:os';
 import { createInterface } from 'node:readline';
 import { readJson, pathExists } from 'fs-extra';
-import { setOutputMode, info, output, warn } from '../util/logger.mjs';
+import { setOutputMode, info, output, getOutputMode, warn } from '../util/logger.mjs';
 import { resolveConsumerPaths } from '../shadow/paths.mjs';
+import { fetchAppTags, fetchTagCatalog, setAppTags } from '../util/tags.mjs';
 import { uploadDir } from '../util/s3/upload.mjs';
 import { BUCKET_WRITE_NAME, brokerBaseUrl, routingHeaders, BUCKET_READ_DNS_URL } from '../constants.mjs';
 import { fetchDeployVersion, brokerCredentialProvider } from '../util/auth/broker-credential-provider.mjs';
@@ -14,6 +15,7 @@ import { getRemoteUrl, initRepo, guardCleanTree, pullAndResolve, pushToRemote }
 import { resolveGitEnv } from '../util/git/git-env.mjs';
 import { validateRemoteOptions, resolveRemoteUrl } from '../util/git/remote-options.mjs';
 import { setupS3Client } from '../util/s3/client.mjs';
+import { promptForTags } from './tag.mjs';
 import { buildCommand } from './build.mjs';
 
 // Should be run from the consumer app directory — uses process.cwd() to locate it.
@@ -131,6 +133,9 @@ async function deployCommand(opts = {}) {
     finally {
         await releaseLockBestEffort(appName, token);
     }
+    // Tags are a post-deploy concern: the S3 upload has already succeeded, so a
+    // tag failure never fails the deploy (handled inside).
+    await handleDeployTags(appName);
     // The host MF parses the app name from the URL and prepends `mf-` itself
     // before looking it up in the manifest. So the user-facing URL must use
     // the consumer's de-scoped package name (no `mf-` prefix, no `@scope/`).
@@ -157,6 +162,27 @@ async function registerApp(appName, token, version, entry, visibility, gitRemote
         throw new Error(`App registration failed (${res.status}): ${text.slice(0, 1024)}`);
     }
 }
+const TAG_NUDGE = "run 'z2h-cli tag' to categorize this app (app type & team)";
+async function handleDeployTags(appSlug) {
+    try {
+        const interactive = getOutputMode() === 'human' && Boolean(process.stdin.isTTY);
+        if (!interactive) {
+            info(TAG_NUDGE);
+            return;
+        }
+        const current = await fetchAppTags(appSlug);
+        if (current.length > 0) {
+            return; // already tagged — don't prompt on every redeploy
+        }
+        const catalog = await fetchTagCatalog();
+        const selected = await promptForTags(appSlug, catalog, current);
+        const tags = await setAppTags(appSlug, selected);
+        info(tags.length > 0 ? `tags set: ${tags.map(t => t.name).join(', ')}` : TAG_NUDGE);
+    }
+    catch (err) {
+        warn(`could not update tags: ${err.message}`);
+    }
+}
 // Acquire the per-app deploy lock. Throws a friendly error on 409 (someone else is deploying)
 // so the deploy stops and the caller can retry; the backend TTL backstops a crashed holder.
 async function acquireDeployLock(appName, token) {

package/dist/esm/commands/tag.d.ts

@@ -0,0 +1,14 @@
+import { type AppTag, type CatalogEntry } from '../util/tags';
+export interface TagOptions {
+    /** Repeatable `--tag` — sets the full tag set non-interactively. */
+    tag?: string[];
+    json?: boolean;
+}
+/**
+ * Closed-list prompt: one numbered pick per dimension (app type, team). Enter
+ * keeps the current value for that dimension (or skips it if unset). Returns
+ * the full replacement set of tag names.
+ */
+export declare function promptForTags(appSlug: string, catalog: CatalogEntry[], current: AppTag[]): Promise<string[]>;
+export declare function tagCommand(appArg: string | undefined, opts: TagOptions): Promise<void>;
+//# sourceMappingURL=tag.d.ts.map

package/dist/esm/commands/tag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tag.d.ts","sourceRoot":"","sources":["../../../src/commands/tag.ts"],"names":[],"mappings":"AAMA,OAAO,EAML,KAAK,MAAM,EACX,KAAK,YAAY,EAClB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,UAAU;IACzB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAgCD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA0ClH;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAgC5F"}

package/dist/esm/commands/tag.mjs

@@ -0,0 +1,107 @@
+import readline from 'node:readline/promises';
+import { stdin, stdout } from 'node:process';
+import { readJson } from 'fs-extra';
+import { resolveConsumerPaths } from '../shadow/paths.mjs';
+import { mfAppName } from '../util/app-name.mjs';
+import { info, setOutputMode, output } from '../util/logger.mjs';
+import { TAG_TYPES, TAG_TYPE_LABELS, setAppTags, fetchTagCatalog, fetchAppTags } from '../util/tags.mjs';
+
+/** Render an app's tags as `name (Type), ...` — or `(none)`. */
+function formatTags(tags) {
+    return tags.map(t => `${t.name} (${TAG_TYPE_LABELS[t.type]})`).join(', ') || '(none)';
+}
+/**
+ * Resolve the target app name: an explicit arg wins, else the consumer
+ * package.json `name` in the cwd. Normalized to the `mf-` bundle name the
+ * broker stores (via `mfAppName`), so the server finds the app.
+ */
+async function resolveAppSlug(appArg) {
+    if (appArg) {
+        return mfAppName(appArg);
+    }
+    const paths = resolveConsumerPaths(process.cwd());
+    let pkg;
+    try {
+        pkg = (await readJson(paths.consumerPkg));
+    }
+    catch {
+        throw new Error('Could not read a consumer package.json in the current directory. ' +
+            'Either cd into your app folder or pass an app name: z2h-cli tag <app-name>.');
+    }
+    if (!pkg.name) {
+        throw new Error('Consumer package.json must have a "name" field (or pass an app name argument).');
+    }
+    return mfAppName(pkg.name);
+}
+/**
+ * Closed-list prompt: one numbered pick per dimension (app type, team). Enter
+ * keeps the current value for that dimension (or skips it if unset). Returns
+ * the full replacement set of tag names.
+ */
+async function promptForTags(appSlug, catalog, current) {
+    const rl = readline.createInterface({ input: stdin, output: stdout });
+    const selected = [];
+    try {
+        info(`Tagging "${appSlug}".`);
+        for (const type of TAG_TYPES) {
+            const options = catalog.filter(t => t.type === type);
+            if (options.length === 0) {
+                continue;
+            }
+            const currentName = current.find(c => c.type === type)?.name;
+            const label = TAG_TYPE_LABELS[type];
+            info(`\n${label}${currentName ? ` (current: ${currentName})` : ''}:`);
+            options.forEach((o, i) => info(`  ${i + 1}) ${o.name}`));
+            const raw = await rl.question(`Pick a ${label} (number or name; Enter to ${currentName ? 'keep current' : 'skip'}):\n> `);
+            const trimmed = raw.trim();
+            if (!trimmed) {
+                if (currentName) {
+                    selected.push(currentName);
+                }
+                continue;
+            }
+            // Accept either the 1-based number or the tag name (case-insensitive).
+            const idx = Number(trimmed) - 1;
+            const byNumber = Number.isInteger(idx) && idx >= 0 && idx < options.length ? options[idx] : undefined;
+            const chosen = byNumber ?? options.find(o => o.name.toLowerCase() === trimmed.toLowerCase());
+            if (chosen) {
+                selected.push(chosen.name);
+            }
+            else {
+                info(`Invalid choice "${trimmed}" — ${currentName ? 'keeping current' : 'skipping'} ${label}.`);
+                if (currentName) {
+                    selected.push(currentName);
+                }
+            }
+        }
+        return selected;
+    }
+    finally {
+        rl.close();
+    }
+}
+async function tagCommand(appArg, opts) {
+    if (opts.json) {
+        setOutputMode('json');
+    }
+    const appSlug = await resolveAppSlug(appArg);
+    // Non-interactive write: `--tag` flags set the full set directly.
+    if (opts.tag && opts.tag.length > 0) {
+        const tags = await setAppTags(appSlug, opts.tag);
+        output(`[z2h-cli] tags for "${appSlug}": ${formatTags(tags)}`, { ok: true, appName: appSlug, tags });
+        return;
+    }
+    const [catalog, current] = await Promise.all([fetchTagCatalog(), fetchAppTags(appSlug)]);
+    // Read-only listing: agents (`--json`) and any non-TTY caller get the catalog
+    // + current tags without a prompt — then they set tags via `--tag`. This also
+    // avoids hanging on `readline` when no human is attached to stdin.
+    if (opts.json || !process.stdin.isTTY) {
+        output(`[z2h-cli] "${appSlug}"\n  catalog: ${catalog.map(t => `${t.name} (${TAG_TYPE_LABELS[t.type]})`).join(', ') || '(none)'}\n  current: ${formatTags(current)}`, { ok: true, appName: appSlug, catalog, current });
+        return;
+    }
+    const selected = await promptForTags(appSlug, catalog, current);
+    const tags = await setAppTags(appSlug, selected);
+    output(`[z2h-cli] tags for "${appSlug}": ${formatTags(tags)}`, { ok: true, appName: appSlug, tags });
+}
+
+export { promptForTags, tagCommand };

package/dist/esm/index.mjs

@@ -8,11 +8,13 @@ import { devCommand } from './commands/dev.mjs';
 import { buildCommand } from './commands/build.mjs';
 import { cleanCommand } from './commands/clean.mjs';
 import { deployCommand } from './commands/deploy.mjs';
+import { deleteCommand } from './commands/delete.mjs';
 import { grantCommand, revokeCommand, transferOwnerCommand } from './commands/grant.mjs';
 import { createWorkspaceCommand } from './commands/create-workspace.mjs';
 import { createCommand } from './commands/create.mjs';
 import { generateZ2HTokenCommand } from './commands/generate-z2h-token.mjs';
 import { migrateCommand } from './commands/migrate.mjs';
+import { tagCommand } from './commands/tag.mjs';
 import { editCommand } from './commands/edit.mjs';
 import { fail, errorLog, getOutputMode } from './util/logger.mjs';
 import { trackDuration } from './util/tracker.mjs';
@@ -37,6 +39,10 @@ function stripConflictingEnvVars() {
         delete process.env[name];
     }
 }
+/** commander collector for a repeatable `--tag` option. */
+function collectTag(value, previous) {
+    return previous.concat(value);
+}
 async function main() {
     stripConflictingEnvVars();
     const program = new Command();
@@ -109,6 +115,21 @@ async function main() {
             await fail(`deploy failed: ${err.message}`, { command: 'deploy' }, 2);
         }
     });
+    program
+        .command('tag [app-name]')
+        .description("Set an app's category tags — app type & team (interactive unless --tag or --json is given)")
+        .option('--tag <tag>', 'set a tag (repeatable); full-replaces the tag set non-interactively', collectTag, [])
+        .option('--json', "read-only: print the popular catalog + the app's current tags as JSON (no prompt)")
+        .action(async (appName, opts) => {
+        try {
+            await trackDuration('z2h_app_tag_success', () => tagCommand(appName, opts), {
+                app_name: appName ?? getCwdAppName(),
+            });
+        }
+        catch (err) {
+            await fail(`tag failed: ${err.message}`, { command: 'tag' }, 1);
+        }
+    });
     program
         .command('create-workspace')
         .description(`Bootstrap the ${getWorkspaceHome()}/ yarn workspace (one-time setup)`)
@@ -208,6 +229,21 @@ async function main() {
             await fail(`transfer-owner failed: ${err.message}`, { command: 'transfer-owner' }, 1);
         }
     });
+    program
+        .command('delete')
+        .description('Permanently delete the current app and take it offline (owners/admins only)')
+        .option('--yes', 'skip the confirmation prompt (required for --json / non-interactive)')
+        .option('--json', 'emit structured JSON on stdout')
+        .action(async (opts) => {
+        try {
+            await trackDuration('z2h_app_delete_success', () => deleteCommand(opts), {
+                app_name: getCwdAppName(),
+            });
+        }
+        catch (err) {
+            await fail(`delete failed: ${err.message}`, { command: 'delete' }, 1);
+        }
+    });
     program
         .command('migrate')
         .description('Run pending workspace migrations')

package/dist/esm/util/git/repo.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repo.d.ts","sourceRoot":"","sources":["../../../../src/util/git/repo.ts"],"names":[],"mappings":"AAkBA,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAKD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAsB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOzE;AAED,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAI3E;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK/D;AAED,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG5G;AAED,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAclE;AAED,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAe7F;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB3F;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO7D;AAED,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG5D"}
+{"version":3,"file":"repo.d.ts","sourceRoot":"","sources":["../../../../src/util/git/repo.ts"],"names":[],"mappings":"AAkBA,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAKD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAsB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOzE;AAED,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAI3E;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK/D;AAED,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG5G;AAED,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAclE;AAED,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CA2B7F;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB3F;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO7D;AAED,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG5D"}

package/dist/esm/util/git/repo.mjs

@@ -69,6 +69,16 @@ async function safeBackupIfDirty(dir) {
 }
 async function pullAndResolve(dir, env) {
     const gitEnv = env ? { ...process.env, ...env } : undefined;
+    // If the remote has no master branch there's nothing to pull — treat it as a
+    // first deploy and let the subsequent push create it. This covers a brand-new
+    // remote as well as one whose objects were removed (e.g. the app was deleted,
+    // wiping its S3 git prefix), which would otherwise surface as a bogus conflict.
+    const hasRemoteMaster = await execGit(['ls-remote', '--heads', 'origin', 'master'], dir, gitEnv)
+        .then(r => Boolean(r.stdout.trim()))
+        .catch(() => false);
+    if (!hasRemoteMaster) {
+        return;
+    }
     try {
         await execGit(['pull', '--ff-only'], dir, gitEnv);
     }

package/dist/esm/util/tags.d.ts

@@ -0,0 +1,24 @@
+/** The dimension a tag categorizes an app by. */
+export type TagType = 'app_type' | 'team';
+/** The tag dimensions, in prompt order. */
+export declare const TAG_TYPES: TagType[];
+/** Human labels for each dimension (CLI prompts / output). */
+export declare const TAG_TYPE_LABELS: Record<TagType, string>;
+/** A catalog entry: one selectable tag with its dimension + global usage count. */
+export interface CatalogEntry {
+    name: string;
+    type: TagType;
+    count: number;
+}
+/** A tag assigned to an app — name + dimension. */
+export interface AppTag {
+    name: string;
+    type: TagType;
+}
+/** The full closed tag catalog (app types + teams), with usage counts. */
+export declare function fetchTagCatalog(): Promise<CatalogEntry[]>;
+/** Tags currently assigned to an app (bare slug). */
+export declare function fetchAppTags(appSlug: string): Promise<AppTag[]>;
+/** Full-replace an app's tag set; returns the resulting tags. */
+export declare function setAppTags(appSlug: string, tags: string[]): Promise<AppTag[]>;
+//# sourceMappingURL=tags.d.ts.map

package/dist/esm/util/tags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tags.d.ts","sourceRoot":"","sources":["../../../src/util/tags.ts"],"names":[],"mappings":"AAGA,iDAAiD;AACjD,MAAM,MAAM,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;AAE1C,2CAA2C;AAC3C,eAAO,MAAM,SAAS,EAAE,OAAO,EAAyB,CAAC;AAEzD,8DAA8D;AAC9D,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAGnD,CAAC;AAEF,mFAAmF;AACnF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,mDAAmD;AACnD,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;CACf;AAgDD,0EAA0E;AAC1E,wBAAsB,eAAe,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAI/D;AAED,qDAAqD;AACrD,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAIrE;AAED,iEAAiE;AACjE,wBAAsB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAInF"}