@mondaydotcomorg/z2h-cli 0.23.1 → 0.24.1

package/dist/commands/__tests__/generate-z2h-token.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=generate-z2h-token.test.d.ts.map

package/dist/commands/__tests__/generate-z2h-token.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-z2h-token.test.d.ts","sourceRoot":"","sources":["../../../src/commands/__tests__/generate-z2h-token.test.ts"],"names":[],"mappings":""}

package/dist/commands/__tests__/migrate.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=migrate.test.d.ts.map

package/dist/commands/__tests__/migrate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.test.d.ts","sourceRoot":"","sources":["../../../src/commands/__tests__/migrate.test.ts"],"names":[],"mappings":""}

package/dist/commands/generate-z2h-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate-z2h-token.d.ts","sourceRoot":"","sources":["../../src/commands/generate-z2h-token.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,sBAAsB,yDAAyD,CAAC;AAC7F,eAAO,MAAM,mBAAmB,SAAU,CAAC;AAE3C,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAwDD,wBAAsB,uBAAuB,CAAC,IAAI,GAAE,uBAA4B,GAAG,OAAO,CAAC,IAAI,CAAC,CA2B/F"}
+{"version":3,"file":"generate-z2h-token.d.ts","sourceRoot":"","sources":["../../src/commands/generate-z2h-token.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,sBAAsB,yDAAyD,CAAC;AAC7F,eAAO,MAAM,mBAAmB,SAAU,CAAC;AAE3C,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAwED,wBAAsB,uBAAuB,CAAC,IAAI,GAAE,uBAA4B,GAAG,OAAO,CAAC,IAAI,CAAC,CA2B/F"}

package/dist/commands/generate-z2h-token.js

@@ -15,6 +15,9 @@ const DEFAULT_TOKEN_PAGE_URL = 'https://bigbrain.me/bigbrain-vibe/generate-z2h-t
 const LOOPBACK_TIMEOUT_MS = 120_000;
 async function promptForToken() {
     const rl = readline__default.default.createInterface({ input: node_process.stdin, output: node_process.stdout });
+    // Raw mode disables ISIG, so Ctrl-C never becomes a signal here. readline delivers the
+    // ^C byte as this event, and with no listener it only pauses. Exit code 130 is 128+SIGINT.
+    rl.on('SIGINT', () => process.exit(130));
     try {
         const raw = await rl.question('Paste your token here, then press Enter:\n> ');
         return raw.trim();
@@ -51,13 +54,23 @@ async function runLoopbackFlow(pageUrl) {
         util_logger.warn('could not auto-open the browser. please visit the URL above manually.');
     }
     util_logger.info('waiting for the page to send the token (Ctrl+C to fall back to manual paste)…');
+    // A SIGINT listener suppresses Node's default termination while it is attached. That is
+    // what turns the Ctrl+C offered above into the manual-paste fallback instead of a killed
+    // CLI. The finally below detaches it, so it covers only this wait.
+    let stopListening = () => { };
+    const cancelled = new Promise(resolve => {
+        const onSigint = () => resolve(null);
+        process.once('SIGINT', onSigint);
+        stopListening = () => process.removeListener('SIGINT', onSigint);
+    });
+    // `close()` below rejects a still-pending wait. Swallow it here so the loser of the race
+    // never becomes an unhandled rejection, which Node turns into a crash.
+    const arrived = loopback.waitForToken(LOOPBACK_TIMEOUT_MS).catch(() => null);
     try {
-        return await loopback.waitForToken(LOOPBACK_TIMEOUT_MS);
-    }
-    catch {
-        return null;
+        return await Promise.race([arrived, cancelled]);
     }
     finally {
+        stopListening();
         loopback.close();
     }
 }

package/dist/commands/migrate.d.ts

@@ -1,3 +1,4 @@
+export declare function baseVersion(version: string): string;
 export interface MigrateOptions {
     dryRun?: boolean;
 }

package/dist/commands/migrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/commands/migrate.ts"],"names":[],"mappings":"AA6CA,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkGjG"}
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/commands/migrate.ts"],"names":[],"mappings":"AA4BA,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMnD;AAqBD,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmGjG"}

package/dist/commands/migrate.js

@@ -16,6 +16,15 @@ const semver__default = /*#__PURE__*/_interopDefault(semver);
 
 const STATE_FILE = '.z2h-migrations-state.json';
 // ─── Helpers ───
+// A prerelease sorts BELOW its own release under plain semver ordering, so
+// comparing raw beta versions here would skip migrations the beta introduced.
+function baseVersion(version) {
+    const parsed = semver__default.default.parse(version);
+    if (!parsed) {
+        throw new Error(`invalid semver version: ${version}`);
+    }
+    return `${parsed.major}.${parsed.minor}.${parsed.patch}`;
+}
 async function readMigrationState(workspaceHome) {
     const statePath = path__default.default.join(workspaceHome, STATE_FILE);
     if (!(await fs.pathExists(statePath))) {
@@ -40,11 +49,12 @@ async function migrateCommand(cliVersion, opts = {}) {
     }
     const state = await readMigrationState(workspaceHome);
     const lastVersion = state?.lastMigratedVersion ?? '0.0.0';
-    if (!semver__default.default.gt(cliVersion, lastVersion)) {
+    const targetVersion = baseVersion(cliVersion);
+    if (!semver__default.default.gt(targetVersion, lastVersion)) {
         util_logger.info('workspace is up to date — no migrations pending');
         return;
     }
-    util_logger.info(`migrating workspace from v${lastVersion} → v${cliVersion}...`);
+    util_logger.info(`migrating workspace from v${lastVersion} → v${targetVersion}...`);
     // migrations.json is at the package root — two dirs up from dist/migrations/
     const thisDir = path__default.default.dirname(node_url.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('commands/migrate.js', document.baseURI).href))));
     const migrationsJsonPath = path__default.default.resolve(thisDir, '..', '..', 'migrations.json');
@@ -53,12 +63,12 @@ async function migrateCommand(cliVersion, opts = {}) {
         return;
     }
     const migrationsJson = (await fs.readJson(migrationsJsonPath));
-    // Filter to pending migrations (version > lastVersion AND <= cliVersion).
+    // Filter to pending migrations (version > lastVersion AND <= targetVersion).
     // CONVENTION: a migration's `version` field must equal the CLI release it
     // ships with (not the feature branch version). This ensures the `gt` check
     // always catches a migration on the exact upgrade that introduces it.
     const pending = Object.entries(migrationsJson.migrations)
-        .filter(([, entry]) => semver__default.default.gt(entry.version, lastVersion) && semver__default.default.lte(entry.version, cliVersion))
+        .filter(([, entry]) => semver__default.default.gt(entry.version, lastVersion) && semver__default.default.lte(entry.version, targetVersion))
         .sort(([, a], [, b]) => semver__default.default.compare(a.version, b.version));
     if (opts.dryRun) {
         util_logger.info(`${pending.length} pending migration(s) (dry-run — no changes will be applied):`);
@@ -68,7 +78,7 @@ async function migrateCommand(cliVersion, opts = {}) {
         return;
     }
     if (pending.length === 0) {
-        await writeMigrationState(workspaceHome, { lastMigratedVersion: cliVersion });
+        await writeMigrationState(workspaceHome, { lastMigratedVersion: targetVersion });
         return;
     }
     const nxReady = await util_workspace.ensureWorkspaceNx(workspaceHome);
@@ -108,8 +118,9 @@ async function migrateCommand(cliVersion, opts = {}) {
     if (needsInstall) {
         await util_workspace.runYarnInstall(workspaceHome, 'package.json changed');
     }
-    await writeMigrationState(workspaceHome, { lastMigratedVersion: cliVersion });
+    await writeMigrationState(workspaceHome, { lastMigratedVersion: targetVersion });
     util_logger.info('workspace migrations complete.');
 }
 
+exports.baseVersion = baseVersion;
 exports.migrateCommand = migrateCommand;

package/dist/commands/tag.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tag.d.ts","sourceRoot":"","sources":["../../src/commands/tag.ts"],"names":[],"mappings":"AAMA,OAAO,EAML,KAAK,MAAM,EACX,KAAK,YAAY,EAClB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,UAAU;IACzB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB;AAgCD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA0ClH;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA4B5F"}
+{"version":3,"file":"tag.d.ts","sourceRoot":"","sources":["../../src/commands/tag.ts"],"names":[],"mappings":"AAMA,OAAO,EAML,KAAK,MAAM,EACX,KAAK,YAAY,EAClB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,UAAU;IACzB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB;AAgCD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA6ClH;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA4B5F"}

package/dist/commands/tag.js

@@ -46,6 +46,9 @@ async function resolveAppSlug(appArg) {
  */
 async function promptForTags(appSlug, catalog, current) {
     const rl = readline__default.default.createInterface({ input: node_process.stdin, output: node_process.stdout });
+    // Raw mode disables ISIG, so Ctrl-C never becomes a signal here. readline delivers the
+    // ^C byte as this event, and with no listener it only pauses. Exit code 130 is 128+SIGINT.
+    rl.on('SIGINT', () => process.exit(130));
     const selected = [];
     try {
         util_logger.info(`Tagging "${appSlug}".`);

package/dist/esm/commands/__tests__/generate-z2h-token.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=generate-z2h-token.test.d.ts.map

package/dist/esm/commands/__tests__/generate-z2h-token.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-z2h-token.test.d.ts","sourceRoot":"","sources":["../../../../src/commands/__tests__/generate-z2h-token.test.ts"],"names":[],"mappings":""}

package/dist/esm/commands/__tests__/migrate.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=migrate.test.d.ts.map

package/dist/esm/commands/__tests__/migrate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.test.d.ts","sourceRoot":"","sources":["../../../../src/commands/__tests__/migrate.test.ts"],"names":[],"mappings":""}

package/dist/esm/commands/generate-z2h-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate-z2h-token.d.ts","sourceRoot":"","sources":["../../../src/commands/generate-z2h-token.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,sBAAsB,yDAAyD,CAAC;AAC7F,eAAO,MAAM,mBAAmB,SAAU,CAAC;AAE3C,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAwDD,wBAAsB,uBAAuB,CAAC,IAAI,GAAE,uBAA4B,GAAG,OAAO,CAAC,IAAI,CAAC,CA2B/F"}
+{"version":3,"file":"generate-z2h-token.d.ts","sourceRoot":"","sources":["../../../src/commands/generate-z2h-token.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,sBAAsB,yDAAyD,CAAC;AAC7F,eAAO,MAAM,mBAAmB,SAAU,CAAC;AAE3C,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAwED,wBAAsB,uBAAuB,CAAC,IAAI,GAAE,uBAA4B,GAAG,OAAO,CAAC,IAAI,CAAC,CA2B/F"}

package/dist/esm/commands/generate-z2h-token.mjs

@@ -9,6 +9,9 @@ const DEFAULT_TOKEN_PAGE_URL = 'https://bigbrain.me/bigbrain-vibe/generate-z2h-t
 const LOOPBACK_TIMEOUT_MS = 120_000;
 async function promptForToken() {
     const rl = readline.createInterface({ input: stdin, output: stdout });
+    // Raw mode disables ISIG, so Ctrl-C never becomes a signal here. readline delivers the
+    // ^C byte as this event, and with no listener it only pauses. Exit code 130 is 128+SIGINT.
+    rl.on('SIGINT', () => process.exit(130));
     try {
         const raw = await rl.question('Paste your token here, then press Enter:\n> ');
         return raw.trim();
@@ -45,13 +48,23 @@ async function runLoopbackFlow(pageUrl) {
         warn('could not auto-open the browser. please visit the URL above manually.');
     }
     info('waiting for the page to send the token (Ctrl+C to fall back to manual paste)…');
+    // A SIGINT listener suppresses Node's default termination while it is attached. That is
+    // what turns the Ctrl+C offered above into the manual-paste fallback instead of a killed
+    // CLI. The finally below detaches it, so it covers only this wait.
+    let stopListening = () => { };
+    const cancelled = new Promise(resolve => {
+        const onSigint = () => resolve(null);
+        process.once('SIGINT', onSigint);
+        stopListening = () => process.removeListener('SIGINT', onSigint);
+    });
+    // `close()` below rejects a still-pending wait. Swallow it here so the loser of the race
+    // never becomes an unhandled rejection, which Node turns into a crash.
+    const arrived = loopback.waitForToken(LOOPBACK_TIMEOUT_MS).catch(() => null);
     try {
-        return await loopback.waitForToken(LOOPBACK_TIMEOUT_MS);
-    }
-    catch {
-        return null;
+        return await Promise.race([arrived, cancelled]);
     }
     finally {
+        stopListening();
         loopback.close();
     }
 }

package/dist/esm/commands/migrate.d.ts

@@ -1,3 +1,4 @@
+export declare function baseVersion(version: string): string;
 export interface MigrateOptions {
     dryRun?: boolean;
 }

package/dist/esm/commands/migrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../src/commands/migrate.ts"],"names":[],"mappings":"AA6CA,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkGjG"}
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../src/commands/migrate.ts"],"names":[],"mappings":"AA4BA,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMnD;AAqBD,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmGjG"}

package/dist/esm/commands/migrate.mjs

@@ -8,6 +8,15 @@ import { getWorkspaceHome, isZ2hWorkspace, ensureWorkspaceNx, runYarnInstall } f
 
 const STATE_FILE = '.z2h-migrations-state.json';
 // ─── Helpers ───
+// A prerelease sorts BELOW its own release under plain semver ordering, so
+// comparing raw beta versions here would skip migrations the beta introduced.
+function baseVersion(version) {
+    const parsed = semver.parse(version);
+    if (!parsed) {
+        throw new Error(`invalid semver version: ${version}`);
+    }
+    return `${parsed.major}.${parsed.minor}.${parsed.patch}`;
+}
 async function readMigrationState(workspaceHome) {
     const statePath = path.join(workspaceHome, STATE_FILE);
     if (!(await pathExists(statePath))) {
@@ -32,11 +41,12 @@ async function migrateCommand(cliVersion, opts = {}) {
     }
     const state = await readMigrationState(workspaceHome);
     const lastVersion = state?.lastMigratedVersion ?? '0.0.0';
-    if (!semver.gt(cliVersion, lastVersion)) {
+    const targetVersion = baseVersion(cliVersion);
+    if (!semver.gt(targetVersion, lastVersion)) {
         info('workspace is up to date — no migrations pending');
         return;
     }
-    info(`migrating workspace from v${lastVersion} → v${cliVersion}...`);
+    info(`migrating workspace from v${lastVersion} → v${targetVersion}...`);
     // migrations.json is at the package root — two dirs up from dist/migrations/
     const thisDir = path.dirname(fileURLToPath(import.meta.url));
     const migrationsJsonPath = path.resolve(thisDir, '..', '..', 'migrations.json');
@@ -45,12 +55,12 @@ async function migrateCommand(cliVersion, opts = {}) {
         return;
     }
     const migrationsJson = (await readJson(migrationsJsonPath));
-    // Filter to pending migrations (version > lastVersion AND <= cliVersion).
+    // Filter to pending migrations (version > lastVersion AND <= targetVersion).
     // CONVENTION: a migration's `version` field must equal the CLI release it
     // ships with (not the feature branch version). This ensures the `gt` check
     // always catches a migration on the exact upgrade that introduces it.
     const pending = Object.entries(migrationsJson.migrations)
-        .filter(([, entry]) => semver.gt(entry.version, lastVersion) && semver.lte(entry.version, cliVersion))
+        .filter(([, entry]) => semver.gt(entry.version, lastVersion) && semver.lte(entry.version, targetVersion))
         .sort(([, a], [, b]) => semver.compare(a.version, b.version));
     if (opts.dryRun) {
         info(`${pending.length} pending migration(s) (dry-run — no changes will be applied):`);
@@ -60,7 +70,7 @@ async function migrateCommand(cliVersion, opts = {}) {
         return;
     }
     if (pending.length === 0) {
-        await writeMigrationState(workspaceHome, { lastMigratedVersion: cliVersion });
+        await writeMigrationState(workspaceHome, { lastMigratedVersion: targetVersion });
         return;
     }
     const nxReady = await ensureWorkspaceNx(workspaceHome);
@@ -100,8 +110,8 @@ async function migrateCommand(cliVersion, opts = {}) {
     if (needsInstall) {
         await runYarnInstall(workspaceHome, 'package.json changed');
     }
-    await writeMigrationState(workspaceHome, { lastMigratedVersion: cliVersion });
+    await writeMigrationState(workspaceHome, { lastMigratedVersion: targetVersion });
     info('workspace migrations complete.');
 }
 
-export { migrateCommand };
+export { baseVersion, migrateCommand };

package/dist/esm/commands/tag.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tag.d.ts","sourceRoot":"","sources":["../../../src/commands/tag.ts"],"names":[],"mappings":"AAMA,OAAO,EAML,KAAK,MAAM,EACX,KAAK,YAAY,EAClB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,UAAU;IACzB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB;AAgCD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA0ClH;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA4B5F"}
+{"version":3,"file":"tag.d.ts","sourceRoot":"","sources":["../../../src/commands/tag.ts"],"names":[],"mappings":"AAMA,OAAO,EAML,KAAK,MAAM,EACX,KAAK,YAAY,EAClB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,UAAU;IACzB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB;AAgCD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA6ClH;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA4B5F"}

package/dist/esm/commands/tag.mjs

@@ -40,6 +40,9 @@ async function resolveAppSlug(appArg) {
  */
 async function promptForTags(appSlug, catalog, current) {
     const rl = readline.createInterface({ input: stdin, output: stdout });
+    // Raw mode disables ISIG, so Ctrl-C never becomes a signal here. readline delivers the
+    // ^C byte as this event, and with no listener it only pauses. Exit code 130 is 128+SIGINT.
+    rl.on('SIGINT', () => process.exit(130));
     const selected = [];
     try {
         info(`Tagging "${appSlug}".`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mondaydotcomorg/z2h-cli",
-  "version": "0.23.1",
+  "version": "0.24.1",
   "bin": "./bin/z2h-cli.js",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/src/commands/__tests__/generate-z2h-token.test.ts

@@ -0,0 +1,140 @@
+import readline from 'node:readline/promises';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+
+import { generateZ2HTokenCommand } from '../generate-z2h-token';
+import { startLoopbackServer } from '../../util/auth/loopback-server';
+import { writeZthAuth } from '../../util/auth/write-auth';
+import { openInBrowser } from '../../util/open-browser';
+import { setOutputMode } from '../../util/logger';
+
+vi.mock('node:readline/promises', () => ({
+  default: { createInterface: vi.fn() },
+}));
+vi.mock('../../util/auth/loopback-server', () => ({ startLoopbackServer: vi.fn() }));
+vi.mock('../../util/auth/write-auth', async importOriginal => ({
+  ...(await importOriginal<typeof import('../../util/auth/write-auth')>()),
+  writeZthAuth: vi.fn().mockResolvedValue({ filePath: '/tmp/auth.json' }),
+}));
+vi.mock('../../util/open-browser', () => ({ openInBrowser: vi.fn().mockResolvedValue(undefined) }));
+
+const PASTED_TOKEN = 'aaa.bbb.ccc';
+
+/**
+ * Mirrors the real LoopbackHandle contract: `close()` rejects a wait that never
+ * received a token. A race that leaves that rejection unhandled crashes the process
+ * under Node's default unhandled-rejection policy, so the fake must reproduce it.
+ */
+function fakeLoopback() {
+  let rejectPending: ((err: Error) => void) | null = null;
+  const close = vi.fn(() => {
+    rejectPending?.(new Error('Loopback server closed before token arrived'));
+    rejectPending = null;
+  });
+  return {
+    callbackUrl: 'http://127.0.0.1:1234/token',
+    waitForToken: vi.fn(
+      () =>
+        new Promise<string>((_res, rej) => {
+          rejectPending = rej;
+        })
+    ),
+    close,
+  };
+}
+
+describe('generate-z2h-token: Ctrl+C falls back to manual paste', () => {
+  let question: ReturnType<typeof vi.fn>;
+  let rlClose: ReturnType<typeof vi.fn>;
+  let rlOn: ReturnType<typeof vi.fn>;
+  const unhandled: unknown[] = [];
+  const onUnhandled = (err: unknown) => unhandled.push(err);
+
+  beforeEach(() => {
+    vi.clearAllMocks();
+    unhandled.length = 0;
+    process.on('unhandledRejection', onUnhandled);
+    setOutputMode('json');
+    question = vi.fn().mockResolvedValue(PASTED_TOKEN);
+    rlClose = vi.fn();
+    rlOn = vi.fn();
+    vi.mocked(readline.createInterface).mockReturnValue({
+      question,
+      close: rlClose,
+      on: rlOn,
+    } as unknown as ReturnType<typeof readline.createInterface>);
+    vi.mocked(startLoopbackServer).mockResolvedValue(fakeLoopback());
+    vi.mocked(writeZthAuth).mockResolvedValue({ filePath: '/tmp/auth.json' });
+    vi.mocked(openInBrowser).mockResolvedValue(undefined);
+    vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
+  });
+
+  afterEach(() => {
+    process.removeListener('unhandledRejection', onUnhandled);
+    setOutputMode('human');
+    vi.mocked(process.stdout.write).mockRestore();
+  });
+
+  it('cancels the loopback wait on SIGINT and saves the pasted token instead', async () => {
+    const done = generateZ2HTokenCommand();
+    // Let runLoopbackFlow reach its wait and attach the listener before interrupting.
+    await vi.waitFor(() => expect(process.listenerCount('SIGINT')).toBeGreaterThan(0));
+    process.emit('SIGINT');
+
+    await done;
+
+    expect(question).toHaveBeenCalledOnce();
+    expect(writeZthAuth).toHaveBeenCalledWith({ token: PASTED_TOKEN });
+  });
+
+  it('detaches its SIGINT listener so a later Ctrl+C is not swallowed', async () => {
+    const before = process.listenerCount('SIGINT');
+    const done = generateZ2HTokenCommand();
+    await vi.waitFor(() => expect(process.listenerCount('SIGINT')).toBe(before + 1));
+    process.emit('SIGINT');
+    await done;
+
+    expect(process.listenerCount('SIGINT')).toBe(before);
+  });
+
+  it('never leaves the losing race branch as an unhandled rejection', async () => {
+    const done = generateZ2HTokenCommand();
+    await vi.waitFor(() => expect(process.listenerCount('SIGINT')).toBeGreaterThan(0));
+    process.emit('SIGINT');
+    await done;
+    // close() rejected the pending wait; that rejection must already be swallowed.
+    await new Promise(r => setImmediate(r));
+
+    expect(unhandled).toEqual([]);
+  });
+
+  it('still uses the loopback token when one arrives before any Ctrl+C', async () => {
+    const handle = fakeLoopback();
+    handle.waitForToken.mockResolvedValue('xxx.yyy.zzz');
+    vi.mocked(startLoopbackServer).mockResolvedValue(handle);
+
+    await generateZ2HTokenCommand();
+
+    expect(question).not.toHaveBeenCalled();
+    expect(writeZthAuth).toHaveBeenCalledWith({ token: 'xxx.yyy.zzz' });
+  });
+
+  it('--no-browser skips the loopback entirely and prompts straight away', async () => {
+    await generateZ2HTokenCommand({ noBrowser: true });
+
+    expect(startLoopbackServer).not.toHaveBeenCalled();
+    expect(openInBrowser).not.toHaveBeenCalled();
+    expect(question).toHaveBeenCalledOnce();
+  });
+
+  // Raw mode swallows Ctrl-C unless the interface itself listens, so the prompt must
+  // register a handler or the CLI hangs there with no way out.
+  it('makes Ctrl-C exit the paste prompt instead of pausing it', async () => {
+    await generateZ2HTokenCommand({ noBrowser: true });
+
+    expect(rlOn).toHaveBeenCalledWith('SIGINT', expect.any(Function));
+    const exit = vi.spyOn(process, 'exit').mockImplementation((() => undefined) as never);
+    rlOn.mock.calls.find(([event]) => event === 'SIGINT')?.[1]();
+    expect(exit).toHaveBeenCalledWith(130);
+    exit.mockRestore();
+  });
+});

package/src/commands/__tests__/migrate.test.ts

@@ -0,0 +1,34 @@
+import { describe, it, expect } from 'vitest';
+import semver from 'semver';
+import { baseVersion } from '../migrate';
+
+describe('baseVersion', () => {
+  it('strips prerelease + build metadata down to major.minor.patch', () => {
+    expect(baseVersion('0.23.0-feat-faster-deploy-abc1234')).toBe('0.23.0');
+  });
+
+  it('is a no-op on an already-plain release version', () => {
+    expect(baseVersion('0.23.0')).toBe('0.23.0');
+  });
+
+  it('throws on an invalid version string rather than silently misbehaving', () => {
+    expect(() => baseVersion('not-a-version')).toThrow(/invalid semver/);
+  });
+});
+
+describe('prerelease migration gating (regression for the bug baseVersion fixes)', () => {
+  const MIGRATION_VERSION = '0.23.0';
+  const BETA_CLI_VERSION = '0.23.0-feat-faster-deploy-abc1234';
+
+  it('demonstrates the bug: a prerelease sorts BELOW its own release under plain semver.lte', () => {
+    expect(semver.lte(MIGRATION_VERSION, BETA_CLI_VERSION)).toBe(false);
+  });
+
+  it('the fix: comparing against the coerced base version includes it correctly', () => {
+    expect(semver.lte(MIGRATION_VERSION, baseVersion(BETA_CLI_VERSION))).toBe(true);
+  });
+
+  it('a migration registered at a later version than the beta build is still correctly excluded', () => {
+    expect(semver.lte('0.24.0', baseVersion(BETA_CLI_VERSION))).toBe(false);
+  });
+});

package/src/commands/generate-z2h-token.ts

@@ -22,6 +22,9 @@ export interface GenerateZ2HTokenOptions {
 
 async function promptForToken(): Promise<string> {
   const rl = readline.createInterface({ input: stdin, output: stdout });
+  // Raw mode disables ISIG, so Ctrl-C never becomes a signal here. readline delivers the
+  // ^C byte as this event, and with no listener it only pauses. Exit code 130 is 128+SIGINT.
+  rl.on('SIGINT', () => process.exit(130));
   try {
     const raw = await rl.question('Paste your token here, then press Enter:\n> ');
     return raw.trim();
@@ -65,11 +68,24 @@ async function runLoopbackFlow(pageUrl: string): Promise<string | null> {
 
   info('waiting for the page to send the token (Ctrl+C to fall back to manual paste)…');
 
+  // A SIGINT listener suppresses Node's default termination while it is attached. That is
+  // what turns the Ctrl+C offered above into the manual-paste fallback instead of a killed
+  // CLI. The finally below detaches it, so it covers only this wait.
+  let stopListening = (): void => {};
+  const cancelled = new Promise<null>(resolve => {
+    const onSigint = (): void => resolve(null);
+    process.once('SIGINT', onSigint);
+    stopListening = () => process.removeListener('SIGINT', onSigint);
+  });
+
+  // `close()` below rejects a still-pending wait. Swallow it here so the loser of the race
+  // never becomes an unhandled rejection, which Node turns into a crash.
+  const arrived = loopback.waitForToken(LOOPBACK_TIMEOUT_MS).catch(() => null);
+
   try {
-    return await loopback.waitForToken(LOOPBACK_TIMEOUT_MS);
-  } catch {
-    return null;
+    return await Promise.race([arrived, cancelled]);
   } finally {
+    stopListening();
     loopback.close();
   }
 }

package/src/commands/migrate.ts

@@ -24,6 +24,16 @@ interface MigrationsJson {
 
 // ─── Helpers ───
 
+// A prerelease sorts BELOW its own release under plain semver ordering, so
+// comparing raw beta versions here would skip migrations the beta introduced.
+export function baseVersion(version: string): string {
+  const parsed = semver.parse(version);
+  if (!parsed) {
+    throw new Error(`invalid semver version: ${version}`);
+  }
+  return `${parsed.major}.${parsed.minor}.${parsed.patch}`;
+}
+
 async function readMigrationState(workspaceHome: string): Promise<MigrationState | null> {
   const statePath = path.join(workspaceHome, STATE_FILE);
   if (!(await pathExists(statePath))) {
@@ -56,13 +66,14 @@ export async function migrateCommand(cliVersion: string, opts: MigrateOptions =
 
   const state = await readMigrationState(workspaceHome);
   const lastVersion = state?.lastMigratedVersion ?? '0.0.0';
+  const targetVersion = baseVersion(cliVersion);
 
-  if (!semver.gt(cliVersion, lastVersion)) {
+  if (!semver.gt(targetVersion, lastVersion)) {
     info('workspace is up to date — no migrations pending');
     return;
   }
 
-  info(`migrating workspace from v${lastVersion} → v${cliVersion}...`);
+  info(`migrating workspace from v${lastVersion} → v${targetVersion}...`);
 
   // migrations.json is at the package root — two dirs up from dist/migrations/
   const thisDir = path.dirname(fileURLToPath(import.meta.url));
@@ -75,12 +86,12 @@ export async function migrateCommand(cliVersion: string, opts: MigrateOptions =
 
   const migrationsJson = (await readJson(migrationsJsonPath)) as MigrationsJson;
 
-  // Filter to pending migrations (version > lastVersion AND <= cliVersion).
+  // Filter to pending migrations (version > lastVersion AND <= targetVersion).
   // CONVENTION: a migration's `version` field must equal the CLI release it
   // ships with (not the feature branch version). This ensures the `gt` check
   // always catches a migration on the exact upgrade that introduces it.
   const pending = Object.entries(migrationsJson.migrations)
-    .filter(([, entry]) => semver.gt(entry.version, lastVersion) && semver.lte(entry.version, cliVersion))
+    .filter(([, entry]) => semver.gt(entry.version, lastVersion) && semver.lte(entry.version, targetVersion))
     .sort(([, a], [, b]) => semver.compare(a.version, b.version));
 
   if (opts.dryRun) {
@@ -92,7 +103,7 @@ export async function migrateCommand(cliVersion: string, opts: MigrateOptions =
   }
 
   if (pending.length === 0) {
-    await writeMigrationState(workspaceHome, { lastMigratedVersion: cliVersion });
+    await writeMigrationState(workspaceHome, { lastMigratedVersion: targetVersion });
     return;
   }
 
@@ -143,6 +154,6 @@ export async function migrateCommand(cliVersion: string, opts: MigrateOptions =
     await runYarnInstall(workspaceHome, 'package.json changed');
   }
 
-  await writeMigrationState(workspaceHome, { lastMigratedVersion: cliVersion });
+  await writeMigrationState(workspaceHome, { lastMigratedVersion: targetVersion });
   info('workspace migrations complete.');
 }

package/src/commands/tag.ts

@@ -56,6 +56,9 @@ async function resolveAppSlug(appArg?: string): Promise<string> {
  */
 export async function promptForTags(appSlug: string, catalog: CatalogEntry[], current: AppTag[]): Promise<string[]> {
   const rl = readline.createInterface({ input: stdin, output: stdout });
+  // Raw mode disables ISIG, so Ctrl-C never becomes a signal here. readline delivers the
+  // ^C byte as this event, and with no listener it only pauses. Exit code 130 is 128+SIGINT.
+  rl.on('SIGINT', () => process.exit(130));
   const selected: string[] = [];
   try {
     info(`Tagging "${appSlug}".`);