@mondaydotcomorg/z2h-cli 0.15.2-feat-eitantsh-z2h-admin-panel-package-0b3010b → 0.16.0

package/dist/esm/util/broker/app.mjs

@@ -1,5 +1,7 @@
 import { brokerBaseUrl, routingHeaders } from '../../constants.mjs';
 import { readZthAuth } from '../auth/auth-store.mjs';
+import { info } from '../logger.mjs';
+import { resolveAppVisibility } from '../prompt-visibility.mjs';
 
 /**
  * Fetches a single app's current state from the broker.
@@ -23,5 +25,46 @@ async function fetchApp(appName) {
     }
     return res.json();
 }
+async function registerApp(appName, token, version, entry, visibility, gitRemote) {
+    const res = await fetch(`${brokerBaseUrl()}/z2h-cli/apps/register`, {
+        method: 'POST',
+        headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json', ...routingHeaders() },
+        body: JSON.stringify({ appName, version, entry, visibility, gitRemote }),
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`App registration failed (${res.status}): ${text.slice(0, 1024)}`);
+    }
+}
+/** Releases a new version onto an app that already exists. */
+async function updateApp(appName, token, version, entry, gitRemote) {
+    const res = await fetch(`${brokerBaseUrl()}/z2h-cli/apps/update`, {
+        method: 'POST',
+        headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json', ...routingHeaders() },
+        body: JSON.stringify({ appName, version, entry, gitRemote }),
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`App update failed (${res.status}): ${text.slice(0, 1024)}`);
+    }
+}
+/**
+ * v1 creates the app row (+ owner grant, prompting for visibility); later
+ * versions release onto it via update instead — the two are separate
+ * endpoints, so this picks based on the version it's handed. Shared by
+ * deploy and preview so this branching logic lives in exactly one place.
+ */
+async function registerOrUpdateApp(opts) {
+    const { appName, token, nextVersion, entry, gitRemote } = opts;
+    if (nextVersion === 1) {
+        const visibility = await resolveAppVisibility(appName);
+        info(`registering "${appName}" → v${nextVersion} (${visibility})`);
+        await registerApp(appName, token, nextVersion, entry, visibility, gitRemote);
+    }
+    else {
+        info(`updating "${appName}" → v${nextVersion}`);
+        await updateApp(appName, token, nextVersion, entry, gitRemote);
+    }
+}
 
-export { fetchApp };
+export { fetchApp, registerOrUpdateApp };

package/dist/esm/util/prompt-visibility.d.ts

@@ -0,0 +1,2 @@
+export declare function resolveAppVisibility(appName: string): Promise<'public' | 'private'>;
+//# sourceMappingURL=prompt-visibility.d.ts.map

package/dist/esm/util/prompt-visibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-visibility.d.ts","sourceRoot":"","sources":["../../../src/util/prompt-visibility.ts"],"names":[],"mappings":"AAMA,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAWzF"}

package/dist/esm/util/prompt-visibility.mjs

@@ -0,0 +1,19 @@
+import { createInterface } from 'node:readline';
+import { getOutputMode } from './logger.mjs';
+
+// First registration only: decide whether the app is born public or private. The
+// choice is passed to the register endpoint (default private). Non-interactive
+// runs (--json or no TTY) always default to private.
+async function resolveAppVisibility(appName) {
+    if (getOutputMode() === 'json' || !process.stdout.isTTY) {
+        return 'private';
+    }
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    const answer = await new Promise(resolve => {
+        rl.question(`Make "${appName}" public to all monday.com employees? (y/N) `, resolve);
+    });
+    rl.close();
+    return answer.trim().toLowerCase() === 'y' ? 'public' : 'private';
+}
+
+export { resolveAppVisibility };

package/dist/index.js

@@ -4,7 +4,6 @@ const path = require('node:path');
 const commander = require('commander');
 const execa = require('execa');
 const util_workspace = require('./util/workspace.js');
-const commands_dev = require('./commands/dev.js');
 const commands_build = require('./commands/build.js');
 const commands_clean = require('./commands/clean.js');
 const commands_deploy = require('./commands/deploy.js');
@@ -85,18 +84,6 @@ async function main() {
             await util_logger.fail(`build failed: ${err.message}`, { command: 'build' }, 2);
         }
     });
-    program
-        .command('dev')
-        .description('Start the Trident dev server against .zth/ with native Vite HMR')
-        .option('--open', 'open the browser automatically when the dev server is ready')
-        .action(async (opts) => {
-        try {
-            await commands_dev.devCommand(opts);
-        }
-        catch (err) {
-            await util_logger.fail(`dev failed: ${err.message}`, { command: 'dev' }, 2);
-        }
-    });
     program
         .command('clean')
         .description('Delete <consumer>/.zth/ and <consumer>/build/')
@@ -112,16 +99,23 @@ async function main() {
         .command('deploy')
         .description('Build, upload to S3, and register the app with the Z2H backend')
         .option('--dry-run', 'print what would happen without uploading anything')
+        .option('--preview [previewId]', 'build an ephemeral, shareable preview instead of deploying — no git required, no deploy lock, never touches the live version; pass an existing previewId to update it instead of minting a new one')
+        .option('--open', 'open the resulting app/preview URL in the browser on success')
         .option('--remote <type>', 'First deploy only: source control remote to initialise — s3 (shared storage) or github (your repo). Error if the app already has a git remote.')
         .option('--repo-url <url>', 'First deploy only: GitHub repo URL — required when --remote=github. Error if the app already has a git remote.')
         .action(async (opts) => {
         try {
-            await util_tracker.trackDuration('z2h_app_deploy_success', () => commands_deploy.deployCommand(opts), {
+            await util_tracker.trackDuration(opts.preview ? 'z2h_app_preview_success' : 'z2h_app_deploy_success', () => commands_deploy.deployCommand({
+                ...opts,
+                preview: Boolean(opts.preview),
+                previewId: typeof opts.preview === 'string' ? opts.preview : undefined,
+            }), {
                 app_name: util_appName.getCwdAppName(),
             });
         }
         catch (err) {
-            await util_logger.fail(`deploy failed: ${err.message}`, { command: 'deploy' }, 2);
+            const label = opts.preview ? 'preview' : 'deploy';
+            await util_logger.fail(`${label} failed: ${err.message}`, { command: label }, 2);
         }
     });
     program

package/dist/migrations/006-remove-start-script.d.ts

@@ -0,0 +1,3 @@
+import type { Tree } from '@nx/devkit';
+export default function removeStartScript(tree: Tree): void;
+//# sourceMappingURL=006-remove-start-script.d.ts.map

package/dist/migrations/006-remove-start-script.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"006-remove-start-script.d.ts","sourceRoot":"","sources":["../../src/migrations/006-remove-start-script.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAMvC,MAAM,CAAC,OAAO,UAAU,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAiB1D"}

package/dist/migrations/006-remove-start-script.js

@@ -0,0 +1,24 @@
+Object.defineProperties(exports, { __esModule: { value: true }, [Symbol.toStringTag]: { value: 'Module' } });
+
+// `dev` is gone from the CLI (superseded by `deploy --preview`), so any
+// consumer's `start` script still pointing at it is now a dangling command.
+// Only removes the exact value the template ever wrote — leaves a
+// consumer-customized `start` script alone.
+function removeStartScript(tree) {
+    for (const entry of tree.children('.')) {
+        if (entry.startsWith('.')) {
+            continue;
+        }
+        const pkgPath = `${entry}/package.json`;
+        if (!tree.exists(pkgPath)) {
+            continue;
+        }
+        const pkg = JSON.parse(tree.read(pkgPath, 'utf-8'));
+        if (pkg.scripts?.start === 'z2h-cli dev') {
+            delete pkg.scripts.start;
+            tree.write(pkgPath, JSON.stringify(pkg, null, 2) + '\n');
+        }
+    }
+}
+
+exports.default = removeStartScript;

package/dist/util/__tests__/app-name.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=app-name.test.d.ts.map

package/dist/util/__tests__/app-name.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-name.test.d.ts","sourceRoot":"","sources":["../../../src/util/__tests__/app-name.test.ts"],"names":[],"mappings":""}

package/dist/util/app-name.d.ts

@@ -10,4 +10,21 @@ export declare function getCwdAppName(): string | undefined;
  * emitted bundle is `MF-mf-<app>`).
  */
 export declare function mfAppName(name: string): string;
+/**
+ * Validates a de-scoped, kebab-case app name against every rule shared by
+ * `create` and `deploy` (incl. `deploy --preview`) — pattern, reserved
+ * platform names, and the preview-prefix reservation. Throws with a
+ * friendly message on the first violation.
+ */
+export declare function validateAppName(appName: string): void;
+/**
+ * Builds the slug for a preview's synthetic RDS app row:
+ * `zth-preview-<shortid>-<realAppName>`, pre-`mf-`-prefixing. Uniqueness
+ * comes entirely from `shortId` (derived from the previewId, already a
+ * randomUUID() — 32 bits of entropy); truncating the human-readable tail to
+ * fit the cap is safe on its own, a shortId collision is astronomically
+ * unlikely at POC scale and would just 409 on registerApp for a retry.
+ */
+export declare function buildPreviewSlug(appName: string, previewId: string): string;
+export declare function isPreviewAppName(appName: string): boolean;
 //# sourceMappingURL=app-name.d.ts.map

package/dist/util/app-name.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-name.d.ts","sourceRoot":"","sources":["../../src/util/app-name.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,wBAAgB,aAAa,IAAI,MAAM,GAAG,SAAS,CAMlD;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C"}
+{"version":3,"file":"app-name.d.ts","sourceRoot":"","sources":["../../src/util/app-name.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,wBAAgB,aAAa,IAAI,MAAM,GAAG,SAAS,CAMlD;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAOD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAiBrD;AAMD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAM3E;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEzD"}

package/dist/util/app-name.js

@@ -1,6 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
-const fs = require('node:fs');
+const node_fs = require('node:fs');
+const constants = require('../constants.js');
 
 /**
  * Strip any npm scope (`@scope/`) from a package name.
@@ -11,7 +12,7 @@ function cleanAppName(name) {
 }
 function getCwdAppName() {
     try {
-        return JSON.parse(fs.readFileSync('package.json', 'utf8')).name;
+        return JSON.parse(node_fs.readFileSync('package.json', 'utf8')).name;
     }
     catch {
         return undefined;
@@ -25,7 +26,53 @@ function getCwdAppName() {
 function mfAppName(name) {
     return `mf-${cleanAppName(name)}`;
 }
+// Names reserved by the host MF (mf-bigbrain-zth) for platform pages under
+// /bigbrain-vibe/<name>. Creating an app with one of these would shadow the
+// platform page in the URL, so we refuse upfront.
+const RESERVED_APP_NAMES = new Set(['generate-z2h-token']);
+/**
+ * Validates a de-scoped, kebab-case app name against every rule shared by
+ * `create` and `deploy` (incl. `deploy --preview`) — pattern, reserved
+ * platform names, and the preview-prefix reservation. Throws with a
+ * friendly message on the first violation.
+ */
+function validateAppName(appName) {
+    if (RESERVED_APP_NAMES.has(appName)) {
+        throw new Error(`App name "${appName}" is reserved by the Z2H host for a platform page under /bigbrain-vibe/${appName}. Pick a different name.`);
+    }
+    if (!constants.APP_NAME_PATTERN.test(appName)) {
+        throw new Error(`App name "${appName}" is invalid. Use lowercase kebab-case (a-z, 0-9, -), ` +
+            `2-50 chars, starting with a letter.`);
+    }
+    if (appName.startsWith(constants.PREVIEW_APP_NAME_PREFIX)) {
+        throw new Error(`App names starting with "${constants.PREVIEW_APP_NAME_PREFIX}" are reserved for the ephemeral preview mechanism. Pick a different name.`);
+    }
+}
+// Preview slugs are capped here so the mf-prefixed name (`mf-` + slug) stays
+// within APP_NAME_PATTERN's 50-char limit (3 chars reserved for `mf-`).
+const PREVIEW_SLUG_MAX_LEN = 47;
+/**
+ * Builds the slug for a preview's synthetic RDS app row:
+ * `zth-preview-<shortid>-<realAppName>`, pre-`mf-`-prefixing. Uniqueness
+ * comes entirely from `shortId` (derived from the previewId, already a
+ * randomUUID() — 32 bits of entropy); truncating the human-readable tail to
+ * fit the cap is safe on its own, a shortId collision is astronomically
+ * unlikely at POC scale and would just 409 on registerApp for a retry.
+ */
+function buildPreviewSlug(appName, previewId) {
+    const shortId = previewId.replace(/-/g, '').slice(0, 8);
+    const base = `${constants.PREVIEW_APP_NAME_PREFIX}${shortId}-${cleanAppName(appName)}`;
+    // Trailing hyphens are stripped post-slice — a cut that lands right after a
+    // hyphen in appName would otherwise leave one dangling.
+    return base.slice(0, PREVIEW_SLUG_MAX_LEN).replace(/-+$/, '');
+}
+function isPreviewAppName(appName) {
+    return appName.startsWith(`mf-${constants.PREVIEW_APP_NAME_PREFIX}`);
+}
 
+exports.buildPreviewSlug = buildPreviewSlug;
 exports.cleanAppName = cleanAppName;
 exports.getCwdAppName = getCwdAppName;
+exports.isPreviewAppName = isPreviewAppName;
 exports.mfAppName = mfAppName;
+exports.validateAppName = validateAppName;

package/dist/util/auth/broker-credential-provider.d.ts

@@ -8,12 +8,14 @@ export declare const DEPLOY_VERSION_PATH = "/z2h-cli/apps/version";
  */
 export declare function fetchDeployVersion(appName: string): Promise<number>;
 /**
- * AWS SDK credential provider that fetches short-lived deploy credentials
- * from the bigbrain-zth STS broker for a specific version. Credentials are
- * cached in memory until 5 minutes before expiry; concurrent calls share a
- * single in-flight fetch.
+ * AWS SDK credential provider that fetches short-lived credentials from the
+ * bigbrain-zth STS broker, scoped to `appName` — or, when `previewId` is
+ * given, to a single `previews/<appName>/<previewId>/*` slot instead of the
+ * full deploy path. Credentials are cached in memory until 5 minutes before
+ * expiry; concurrent calls share a single in-flight fetch.
  */
-export declare function brokerCredentialProvider({ appName }: {
+export declare function brokerCredentialProvider({ appName, previewId, }: {
     appName: string;
+    previewId?: string;
 }): AwsCredentialIdentityProvider;
 //# sourceMappingURL=broker-credential-provider.d.ts.map

package/dist/util/auth/broker-credential-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"broker-credential-provider.d.ts","sourceRoot":"","sources":["../../../src/util/auth/broker-credential-provider.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAyB,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAE3F,eAAO,MAAM,eAAe,6BAA6B,CAAC;AAC1D,eAAO,MAAM,mBAAmB,0BAA0B,CAAC;AA4C3D;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAUzE;AAuBD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,EAAE,OAAO,EAAE,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,6BAA6B,CAuBxG"}
+{"version":3,"file":"broker-credential-provider.d.ts","sourceRoot":"","sources":["../../../src/util/auth/broker-credential-provider.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAyB,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAE3F,eAAO,MAAM,eAAe,6BAA6B,CAAC;AAC1D,eAAO,MAAM,mBAAmB,0BAA0B,CAAC;AA4C3D;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAUzE;AA4DD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,OAAO,EACP,SAAS,GACV,EAAE;IACD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,6BAA6B,CAIhC"}

package/dist/util/auth/broker-credential-provider.js

@@ -47,31 +47,33 @@ async function fetchDeployVersion(appName) {
     const body = (await res.json());
     return body.version ?? 0;
 }
-async function fetchStsOnce(appName) {
-    const res = await postToBroker(STS_BROKER_PATH, { appName });
+async function requestSts(path, body, errorLabel) {
+    const res = await postToBroker(path, body);
     assertBrokerOk(res);
     if (!res.ok) {
         const text = await res.text();
-        throw new Error(`Z2H deploy broker returned ${res.status}: ${text.slice(0, 1024)}`);
+        throw new Error(`Z2H ${errorLabel} broker returned ${res.status}: ${text.slice(0, 1024)}`);
     }
-    const body = (await res.json());
-    if (!body.accessKeyId || !body.secretAccessKey || !body.sessionToken || !body.expiration) {
-        throw new Error('Z2H deploy broker response missing required credential fields');
+    const responseBody = (await res.json());
+    if (!responseBody.accessKeyId ||
+        !responseBody.secretAccessKey ||
+        !responseBody.sessionToken ||
+        !responseBody.expiration) {
+        throw new Error(`Z2H ${errorLabel} broker response missing required credential fields`);
     }
     return {
-        accessKeyId: body.accessKeyId,
-        secretAccessKey: body.secretAccessKey,
-        sessionToken: body.sessionToken,
-        expiration: new Date(body.expiration),
+        accessKeyId: responseBody.accessKeyId,
+        secretAccessKey: responseBody.secretAccessKey,
+        sessionToken: responseBody.sessionToken,
+        expiration: new Date(responseBody.expiration),
     };
 }
 /**
- * AWS SDK credential provider that fetches short-lived deploy credentials
- * from the bigbrain-zth STS broker for a specific version. Credentials are
- * cached in memory until 5 minutes before expiry; concurrent calls share a
- * single in-flight fetch.
+ * Wraps a raw STS fetch in the shared cache/coalescing state machine:
+ * credentials are cached in memory until 5 minutes before expiry, and
+ * concurrent calls share a single in-flight fetch.
  */
-function brokerCredentialProvider({ appName }) {
+function createCachedCredentialProvider(fetchOnce) {
     let cached;
     let inflight;
     return async () => {
@@ -82,7 +84,7 @@ function brokerCredentialProvider({ appName }) {
         if (inflight) {
             return inflight;
         }
-        inflight = fetchStsOnce(appName)
+        inflight = fetchOnce()
             .then(credentials => {
             cached = credentials;
             return credentials;
@@ -93,6 +95,16 @@ function brokerCredentialProvider({ appName }) {
         return inflight;
     };
 }
+/**
+ * AWS SDK credential provider that fetches short-lived credentials from the
+ * bigbrain-zth STS broker, scoped to `appName` — or, when `previewId` is
+ * given, to a single `previews/<appName>/<previewId>/*` slot instead of the
+ * full deploy path. Credentials are cached in memory until 5 minutes before
+ * expiry; concurrent calls share a single in-flight fetch.
+ */
+function brokerCredentialProvider({ appName, previewId, }) {
+    return createCachedCredentialProvider(() => requestSts(STS_BROKER_PATH, { appName, previewId }, previewId ? 'preview' : 'deploy'));
+}
 
 exports.DEPLOY_VERSION_PATH = DEPLOY_VERSION_PATH;
 exports.STS_BROKER_PATH = STS_BROKER_PATH;

package/dist/util/broker/__tests__/app.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=app.test.d.ts.map

package/dist/util/broker/__tests__/app.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.test.d.ts","sourceRoot":"","sources":["../../../../src/util/broker/__tests__/app.test.ts"],"names":[],"mappings":""}

package/dist/util/broker/app.d.ts

@@ -1,3 +1,4 @@
+import type { ManifestEntry } from '../manifest';
 export interface AppInfo {
     appName: string;
     version: number;
@@ -11,4 +12,18 @@ export interface AppInfo {
  * Returns null if the app has never been deployed (404).
  */
 export declare function fetchApp(appName: string): Promise<AppInfo | null>;
+export interface RegisterOrUpdateOptions {
+    appName: string;
+    token: string;
+    nextVersion: number;
+    entry: ManifestEntry;
+    gitRemote: string;
+}
+/**
+ * v1 creates the app row (+ owner grant, prompting for visibility); later
+ * versions release onto it via update instead — the two are separate
+ * endpoints, so this picks based on the version it's handed. Shared by
+ * deploy and preview so this branching logic lives in exactly one place.
+ */
+export declare function registerOrUpdateApp(opts: RegisterOrUpdateOptions): Promise<void>;
 //# sourceMappingURL=app.d.ts.map

package/dist/util/broker/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/util/broker/app.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAiBvE"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/util/broker/app.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAiBvE;AAwCD,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAWtF"}

package/dist/util/broker/app.js

@@ -2,6 +2,8 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
 const constants = require('../../constants.js');
 const util_auth_authStore = require('../auth/auth-store.js');
+const util_logger = require('../logger.js');
+const util_promptVisibility = require('../prompt-visibility.js');
 
 /**
  * Fetches a single app's current state from the broker.
@@ -25,5 +27,47 @@ async function fetchApp(appName) {
     }
     return res.json();
 }
+async function registerApp(appName, token, version, entry, visibility, gitRemote) {
+    const res = await fetch(`${constants.brokerBaseUrl()}/z2h-cli/apps/register`, {
+        method: 'POST',
+        headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json', ...constants.routingHeaders() },
+        body: JSON.stringify({ appName, version, entry, visibility, gitRemote }),
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`App registration failed (${res.status}): ${text.slice(0, 1024)}`);
+    }
+}
+/** Releases a new version onto an app that already exists. */
+async function updateApp(appName, token, version, entry, gitRemote) {
+    const res = await fetch(`${constants.brokerBaseUrl()}/z2h-cli/apps/update`, {
+        method: 'POST',
+        headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json', ...constants.routingHeaders() },
+        body: JSON.stringify({ appName, version, entry, gitRemote }),
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`App update failed (${res.status}): ${text.slice(0, 1024)}`);
+    }
+}
+/**
+ * v1 creates the app row (+ owner grant, prompting for visibility); later
+ * versions release onto it via update instead — the two are separate
+ * endpoints, so this picks based on the version it's handed. Shared by
+ * deploy and preview so this branching logic lives in exactly one place.
+ */
+async function registerOrUpdateApp(opts) {
+    const { appName, token, nextVersion, entry, gitRemote } = opts;
+    if (nextVersion === 1) {
+        const visibility = await util_promptVisibility.resolveAppVisibility(appName);
+        util_logger.info(`registering "${appName}" → v${nextVersion} (${visibility})`);
+        await registerApp(appName, token, nextVersion, entry, visibility, gitRemote);
+    }
+    else {
+        util_logger.info(`updating "${appName}" → v${nextVersion}`);
+        await updateApp(appName, token, nextVersion, entry, gitRemote);
+    }
+}
 
 exports.fetchApp = fetchApp;
+exports.registerOrUpdateApp = registerOrUpdateApp;

package/dist/util/prompt-visibility.d.ts

@@ -0,0 +1,2 @@
+export declare function resolveAppVisibility(appName: string): Promise<'public' | 'private'>;
+//# sourceMappingURL=prompt-visibility.d.ts.map

package/dist/util/prompt-visibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-visibility.d.ts","sourceRoot":"","sources":["../../src/util/prompt-visibility.ts"],"names":[],"mappings":"AAMA,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAWzF"}

package/dist/util/prompt-visibility.js

@@ -0,0 +1,21 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const node_readline = require('node:readline');
+const util_logger = require('./logger.js');
+
+// First registration only: decide whether the app is born public or private. The
+// choice is passed to the register endpoint (default private). Non-interactive
+// runs (--json or no TTY) always default to private.
+async function resolveAppVisibility(appName) {
+    if (util_logger.getOutputMode() === 'json' || !process.stdout.isTTY) {
+        return 'private';
+    }
+    const rl = node_readline.createInterface({ input: process.stdin, output: process.stdout });
+    const answer = await new Promise(resolve => {
+        rl.question(`Make "${appName}" public to all monday.com employees? (y/N) `, resolve);
+    });
+    rl.close();
+    return answer.trim().toLowerCase() === 'y' ? 'public' : 'private';
+}
+
+exports.resolveAppVisibility = resolveAppVisibility;

package/migrations.json

@@ -24,6 +24,11 @@
       "version": "0.11.5",
       "description": "Fix shadow .zth/package.json trident-toolkit \"*\" → workspace-root pinned range to prevent react version conflict",
       "migrate": "./dist/migrations/005-fix-shadow-toolkit-wildcard"
+    },
+    "remove-start-script": {
+      "version": "0.15.3",
+      "description": "Remove the start script (z2h-cli dev) from consumer package.json — dev is gone, superseded by deploy --preview",
+      "migrate": "./dist/migrations/006-remove-start-script"
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mondaydotcomorg/z2h-cli",
-  "version": "0.15.2-feat-eitantsh-z2h-admin-panel-package-0b3010b",
+  "version": "0.16.0",
   "bin": "./bin/z2h-cli.js",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/src/commands/__tests__/create.test.ts

@@ -68,6 +68,11 @@ describe('create', () => {
     await expect(createCommand('1starts-with-digit')).rejects.toThrow(/lowercase kebab-case/);
   });
 
+  it('rejects app names starting with the reserved preview prefix', async () => {
+    await makeWorkspace(tmp);
+    await expect(createCommand('zth-preview-my-app')).rejects.toThrow(/reserved for the ephemeral preview mechanism/);
+  });
+
   it('refuses when the target app dir already exists and is non-empty', async () => {
     await makeWorkspace(tmp);
     const appDir = path.join(tmp, 'demo-app');