@mondaydotcomorg/z2h-cli 0.15.2 → 0.17.0

package/src/util/broker/app.ts

@@ -1,5 +1,8 @@
 import { brokerBaseUrl, routingHeaders } from '../../constants';
 import { readZthAuth } from '../auth/auth-store';
+import { info } from '../logger';
+import { resolveAppVisibility } from '../prompt-visibility';
+import type { ManifestEntry } from '../manifest';
 
 export interface AppInfo {
   appName: string;
@@ -32,3 +35,68 @@ export async function fetchApp(appName: string): Promise<AppInfo | null> {
   }
   return res.json() as Promise<AppInfo>;
 }
+
+async function registerApp(
+  appName: string,
+  token: string,
+  version: number,
+  entry: ManifestEntry,
+  visibility: 'public' | 'private',
+  gitRemote: string
+): Promise<void> {
+  const res = await fetch(`${brokerBaseUrl()}/z2h-cli/apps/register`, {
+    method: 'POST',
+    headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json', ...routingHeaders() },
+    body: JSON.stringify({ appName, version, entry, visibility, gitRemote }),
+  });
+  if (!res.ok) {
+    const text = await res.text();
+    throw new Error(`App registration failed (${res.status}): ${text.slice(0, 1024)}`);
+  }
+}
+
+/** Releases a new version onto an app that already exists. */
+async function updateApp(
+  appName: string,
+  token: string,
+  version: number,
+  entry: ManifestEntry,
+  gitRemote: string
+): Promise<void> {
+  const res = await fetch(`${brokerBaseUrl()}/z2h-cli/apps/update`, {
+    method: 'POST',
+    headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json', ...routingHeaders() },
+    body: JSON.stringify({ appName, version, entry, gitRemote }),
+  });
+  if (!res.ok) {
+    const text = await res.text();
+    throw new Error(`App update failed (${res.status}): ${text.slice(0, 1024)}`);
+  }
+}
+
+export interface RegisterOrUpdateOptions {
+  appName: string;
+  token: string;
+  nextVersion: number;
+  entry: ManifestEntry;
+  gitRemote: string;
+}
+
+/**
+ * v1 creates the app row (+ owner grant, prompting for visibility); later
+ * versions release onto it via update instead — the two are separate
+ * endpoints, so this picks based on the version it's handed. Shared by
+ * deploy and preview so this branching logic lives in exactly one place.
+ */
+export async function registerOrUpdateApp(opts: RegisterOrUpdateOptions): Promise<void> {
+  const { appName, token, nextVersion, entry, gitRemote } = opts;
+
+  if (nextVersion === 1) {
+    const visibility = await resolveAppVisibility(appName);
+    info(`registering "${appName}" → v${nextVersion} (${visibility})`);
+    await registerApp(appName, token, nextVersion, entry, visibility, gitRemote);
+  } else {
+    info(`updating "${appName}" → v${nextVersion}`);
+    await updateApp(appName, token, nextVersion, entry, gitRemote);
+  }
+}

package/src/util/prompt-visibility.ts

@@ -0,0 +1,18 @@
+import { createInterface } from 'node:readline';
+import { getOutputMode } from './logger';
+
+// First registration only: decide whether the app is born public or private. The
+// choice is passed to the register endpoint (default private). Non-interactive
+// runs (--json or no TTY) always default to private.
+export async function resolveAppVisibility(appName: string): Promise<'public' | 'private'> {
+  if (getOutputMode() === 'json' || !process.stdout.isTTY) {
+    return 'private';
+  }
+
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  const answer = await new Promise<string>(resolve => {
+    rl.question(`Make "${appName}" public to all monday.com employees? (y/N) `, resolve);
+  });
+  rl.close();
+  return answer.trim().toLowerCase() === 'y' ? 'public' : 'private';
+}

package/dist/commands/dev.d.ts

@@ -1,5 +0,0 @@
-export interface DevOptions {
-    open?: boolean;
-}
-export declare function devCommand(opts?: DevOptions): Promise<void>;
-//# sourceMappingURL=dev.d.ts.map

package/dist/commands/dev.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dev.d.ts","sourceRoot":"","sources":["../../src/commands/dev.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAKD,wBAAsB,UAAU,CAAC,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAyErE"}

package/dist/commands/dev.js

@@ -1,92 +0,0 @@
-Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-
-const path = require('node:path');
-const fs$1 = require('node:fs');
-const fs = require('fs-extra');
-const chokidar = require('chokidar');
-const execa = require('execa');
-const util_logger = require('../util/logger.js');
-const shadow_prepare = require('../shadow/prepare.js');
-const shadow_consumerPkg = require('../shadow/consumer-pkg.js');
-const shadow_sync = require('../shadow/sync.js');
-const util_openBrowser = require('../util/open-browser.js');
-
-const _interopDefault = e => e && e.__esModule ? e : { default: e };
-
-const path__default = /*#__PURE__*/_interopDefault(path);
-const fs__default = /*#__PURE__*/_interopDefault(fs$1);
-
-const TRIDENT_READY_PATTERN = /Server started at/i;
-// Should be run from the consumer app directory — uses process.cwd() to locate it.
-async function devCommand(opts = {}) {
-    const ctx = await shadow_prepare.prepareShadow();
-    const { port } = ctx;
-    const url = `https://bigbrain.me/bigbrain-vibe/${ctx.appName}?zth_local=${port}`;
-    util_logger.info('starting z2h app');
-    // stdout is piped so we can detect trident's ready banner before printing
-    // our own ready line. stdin/stderr stay inherited so colored errors and
-    // interactive prompts still flow naturally.
-    const server = execa.execa('yarn', ['start'], {
-        cwd: ctx.paths.shadowDir,
-        stdio: ['inherit', 'pipe', 'inherit'],
-        // Trident requires NPM_TOKEN to be set or it refuses to start; 'FAKE_TOKEN' satisfies the check without real credentials.
-        // we always pass a fake token for same behavior for all users (no matter if they have a token or not)
-        env: { ...process.env, NPM_TOKEN: 'FAKE_TOKEN' },
-    });
-    const pidFile = path__default.default.join(ctx.paths.shadowDir, 'dev.pid');
-    if (server.pid) {
-        await fs.writeFile(pidFile, String(server.pid));
-    }
-    const cleanupPid = () => {
-        try {
-            fs__default.default.unlinkSync(pidFile);
-        }
-        catch (_) {
-            // file already gone — ignore
-        }
-    };
-    server.on('exit', cleanupPid);
-    process.on('exit', cleanupPid);
-    process.on('SIGINT', () => {
-        server.kill();
-        process.exit(0);
-    });
-    process.on('SIGTERM', () => {
-        server.kill();
-        process.exit(0);
-    });
-    let readyPrinted = false;
-    server.stdout?.on('data', (chunk) => {
-        process.stdout.write(chunk);
-        if (!readyPrinted && TRIDENT_READY_PATTERN.test(chunk.toString())) {
-            readyPrinted = true;
-            util_logger.output(`\n[z2h-cli] ready — open:\n  ${url}\n`, {
-                ok: true,
-                appName: ctx.appName,
-                port,
-                url,
-            });
-            if (opts.open) {
-                void util_openBrowser.openInBrowser(url);
-            }
-        }
-    });
-    // Only watch consumer package.json. Source changes flow through Vite's
-    // native import graph — the wrapper imports consumer src via relative
-    // path, so Vite's HMR picks up edits without any rsync.
-    const pkgWatcher = chokidar.watch(ctx.paths.consumerPkg, { ignoreInitial: true });
-    pkgWatcher.on('change', async () => {
-        util_logger.warn('consumer package.json changed — re-checking deps');
-        try {
-            const raw = (await fs.readJson(ctx.paths.consumerPkg));
-            const { pkg } = await shadow_consumerPkg.ensureConsumerPkg(ctx.paths.consumerPkg, raw);
-            await shadow_sync.syncShadow(ctx.paths, pkg);
-        }
-        catch (err) {
-            util_logger.errorLog(`re-prepare failed: ${err.message}`);
-        }
-    });
-    await server;
-}
-
-exports.devCommand = devCommand;

package/dist/esm/commands/dev.d.ts

@@ -1,5 +0,0 @@
-export interface DevOptions {
-    open?: boolean;
-}
-export declare function devCommand(opts?: DevOptions): Promise<void>;
-//# sourceMappingURL=dev.d.ts.map

package/dist/esm/commands/dev.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dev.d.ts","sourceRoot":"","sources":["../../../src/commands/dev.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAKD,wBAAsB,UAAU,CAAC,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAyErE"}

package/dist/esm/commands/dev.mjs

@@ -1,85 +0,0 @@
-import path from 'node:path';
-import fs from 'node:fs';
-import { writeFile, readJson } from 'fs-extra';
-import { watch } from 'chokidar';
-import { execa } from 'execa';
-import { info, output, warn, errorLog } from '../util/logger.mjs';
-import { prepareShadow } from '../shadow/prepare.mjs';
-import { ensureConsumerPkg } from '../shadow/consumer-pkg.mjs';
-import { syncShadow } from '../shadow/sync.mjs';
-import { openInBrowser } from '../util/open-browser.mjs';
-
-const TRIDENT_READY_PATTERN = /Server started at/i;
-// Should be run from the consumer app directory — uses process.cwd() to locate it.
-async function devCommand(opts = {}) {
-    const ctx = await prepareShadow();
-    const { port } = ctx;
-    const url = `https://bigbrain.me/bigbrain-vibe/${ctx.appName}?zth_local=${port}`;
-    info('starting z2h app');
-    // stdout is piped so we can detect trident's ready banner before printing
-    // our own ready line. stdin/stderr stay inherited so colored errors and
-    // interactive prompts still flow naturally.
-    const server = execa('yarn', ['start'], {
-        cwd: ctx.paths.shadowDir,
-        stdio: ['inherit', 'pipe', 'inherit'],
-        // Trident requires NPM_TOKEN to be set or it refuses to start; 'FAKE_TOKEN' satisfies the check without real credentials.
-        // we always pass a fake token for same behavior for all users (no matter if they have a token or not)
-        env: { ...process.env, NPM_TOKEN: 'FAKE_TOKEN' },
-    });
-    const pidFile = path.join(ctx.paths.shadowDir, 'dev.pid');
-    if (server.pid) {
-        await writeFile(pidFile, String(server.pid));
-    }
-    const cleanupPid = () => {
-        try {
-            fs.unlinkSync(pidFile);
-        }
-        catch (_) {
-            // file already gone — ignore
-        }
-    };
-    server.on('exit', cleanupPid);
-    process.on('exit', cleanupPid);
-    process.on('SIGINT', () => {
-        server.kill();
-        process.exit(0);
-    });
-    process.on('SIGTERM', () => {
-        server.kill();
-        process.exit(0);
-    });
-    let readyPrinted = false;
-    server.stdout?.on('data', (chunk) => {
-        process.stdout.write(chunk);
-        if (!readyPrinted && TRIDENT_READY_PATTERN.test(chunk.toString())) {
-            readyPrinted = true;
-            output(`\n[z2h-cli] ready — open:\n  ${url}\n`, {
-                ok: true,
-                appName: ctx.appName,
-                port,
-                url,
-            });
-            if (opts.open) {
-                void openInBrowser(url);
-            }
-        }
-    });
-    // Only watch consumer package.json. Source changes flow through Vite's
-    // native import graph — the wrapper imports consumer src via relative
-    // path, so Vite's HMR picks up edits without any rsync.
-    const pkgWatcher = watch(ctx.paths.consumerPkg, { ignoreInitial: true });
-    pkgWatcher.on('change', async () => {
-        warn('consumer package.json changed — re-checking deps');
-        try {
-            const raw = (await readJson(ctx.paths.consumerPkg));
-            const { pkg } = await ensureConsumerPkg(ctx.paths.consumerPkg, raw);
-            await syncShadow(ctx.paths, pkg);
-        }
-        catch (err) {
-            errorLog(`re-prepare failed: ${err.message}`);
-        }
-    });
-    await server;
-}
-
-export { devCommand };

package/src/commands/dev.ts

@@ -1,93 +0,0 @@
-import path from 'node:path';
-import fs from 'node:fs';
-import { readJson, writeFile } from 'fs-extra';
-import { watch } from 'chokidar';
-import { execa } from 'execa';
-import { info, warn, errorLog, output } from '../util/logger';
-import { prepareShadow } from '../shadow/prepare';
-import { ensureConsumerPkg } from '../shadow/consumer-pkg';
-import { syncShadow } from '../shadow/sync';
-import { openInBrowser } from '../util/open-browser';
-import type { ConsumerPkg } from '../types';
-
-export interface DevOptions {
-  open?: boolean;
-}
-
-const TRIDENT_READY_PATTERN = /Server started at/i;
-
-// Should be run from the consumer app directory — uses process.cwd() to locate it.
-export async function devCommand(opts: DevOptions = {}): Promise<void> {
-  const ctx = await prepareShadow();
-  const { port } = ctx;
-  const url = `https://bigbrain.me/bigbrain-vibe/${ctx.appName}?zth_local=${port}`;
-
-  info('starting z2h app');
-  // stdout is piped so we can detect trident's ready banner before printing
-  // our own ready line. stdin/stderr stay inherited so colored errors and
-  // interactive prompts still flow naturally.
-  const server = execa('yarn', ['start'], {
-    cwd: ctx.paths.shadowDir,
-    stdio: ['inherit', 'pipe', 'inherit'],
-    // Trident requires NPM_TOKEN to be set or it refuses to start; 'FAKE_TOKEN' satisfies the check without real credentials.
-    // we always pass a fake token for same behavior for all users (no matter if they have a token or not)
-    env: { ...process.env, NPM_TOKEN: 'FAKE_TOKEN' },
-  });
-
-  const pidFile = path.join(ctx.paths.shadowDir, 'dev.pid');
-  if (server.pid) {
-    await writeFile(pidFile, String(server.pid));
-  }
-
-  const cleanupPid = () => {
-    try {
-      fs.unlinkSync(pidFile);
-    } catch (_) {
-      // file already gone — ignore
-    }
-  };
-  server.on('exit', cleanupPid);
-  process.on('exit', cleanupPid);
-  process.on('SIGINT', () => {
-    server.kill();
-    process.exit(0);
-  });
-  process.on('SIGTERM', () => {
-    server.kill();
-    process.exit(0);
-  });
-
-  let readyPrinted = false;
-  server.stdout?.on('data', (chunk: Buffer) => {
-    process.stdout.write(chunk);
-    if (!readyPrinted && TRIDENT_READY_PATTERN.test(chunk.toString())) {
-      readyPrinted = true;
-      output(`\n[z2h-cli] ready — open:\n  ${url}\n`, {
-        ok: true,
-        appName: ctx.appName,
-        port,
-        url,
-      });
-      if (opts.open) {
-        void openInBrowser(url);
-      }
-    }
-  });
-
-  // Only watch consumer package.json. Source changes flow through Vite's
-  // native import graph — the wrapper imports consumer src via relative
-  // path, so Vite's HMR picks up edits without any rsync.
-  const pkgWatcher = watch(ctx.paths.consumerPkg, { ignoreInitial: true });
-  pkgWatcher.on('change', async () => {
-    warn('consumer package.json changed — re-checking deps');
-    try {
-      const raw = (await readJson(ctx.paths.consumerPkg)) as ConsumerPkg;
-      const { pkg } = await ensureConsumerPkg(ctx.paths.consumerPkg, raw);
-      await syncShadow(ctx.paths, pkg);
-    } catch (err) {
-      errorLog(`re-prepare failed: ${(err as Error).message}`);
-    }
-  });
-
-  await server;
-}