@mondaydotcomorg/z2h-cli 0.25.9 → 0.26.0

package/dist/esm/index.mjs

@@ -11,6 +11,8 @@ import { deleteCommand } from './commands/delete.mjs';
 import { grantCommand, revokeCommand, transferOwnerCommand } from './commands/grant.mjs';
 import { createWorkspaceCommand } from './commands/create-workspace.mjs';
 import { createCommand } from './commands/create.mjs';
+import { generateCommand } from './commands/generate.mjs';
+import { templatesCommand } from './commands/templates.mjs';
 import { generateZ2HTokenCommand } from './commands/generate-z2h-token.mjs';
 import { migrateCommand } from './commands/migrate.mjs';
 import { tagCommand } from './commands/tag.mjs';
@@ -90,6 +92,7 @@ async function main() {
         .option('--remote <type>', 'First deploy only: source control remote to initialise — s3 (shared storage, recommended, auto-backed-up) or github (manage it yourself in your own repo). Error if the app already has a git remote.')
         .option('--repo-url <url>', 'First deploy only: GitHub repo URL — required when --remote=github. Error if the app already has a git remote.')
         .option('--description <text>', 'short (<=200 char) description of the app')
+        .option('--prebuilt-dir <path>', 'internal — used by `generate-app-template`: skip the build step and deploy this already-built directory as-is')
         .action(runCommand({
         // A preview is a real deploy for observability, tracked as its own event since
         // the command name alone (`deploy`) can't distinguish it from a live deploy.
@@ -117,7 +120,7 @@ async function main() {
         .action(runCommand({}, (opts) => generateZ2HTokenCommand(opts)));
     program
         .command('create <app-name>')
-        .description(`Scaffold a new Z2H consumer app inside ${getWorkspaceHome()}/`)
+        .description(`Scaffold a blank Z2H consumer app inside ${getWorkspaceHome()}/ using a built-in template (default | html-embed). If a catalog template already fits what you're building, use \`generate-app-template\` instead.`)
         .option('--template <name>', 'Template name (default | html-embed)')
         .option('--html-file <path>', 'Path to an HTML file to embed (implies --template html-embed)')
         .option('--remote <type>', 'Source control remote: s3 (shared storage, recommended, auto-backed-up) or github (manage it yourself in your own repo)')
@@ -129,6 +132,18 @@ async function main() {
             remote: opts.remote ?? 'unknown',
         }),
     }, (appName, opts) => createCommand(appName, opts)));
+    program
+        .command('templates')
+        .description("List the BigBrain Studio (Z2H) template catalog — id, title, description, and each template's widget schema")
+        .action(runCommand({}, () => templatesCommand()));
+    program
+        .command('generate-app-template <app-name>')
+        .description(`Scaffold + preview a Z2H app/dashboard from a templates catalog entry inside ${getWorkspaceHome()}/ — copies a prebuilt template, patches in real widget data, and deploys a preview. No build, no yarn install, no live deploy — run \`z2h-cli deploy\` yourself from the app dir once you're happy with it.`)
+        .requiredOption('--template <id>', 'catalog template id — see `z2h-cli templates --json`')
+        .requiredOption('--input <json>', "JSON string — shape is template-defined, validated wholesale against the template's configSchema (see `z2h-cli templates --json`)")
+        .action(runCommand({
+        data: ([appName, opts]) => ({ app_name: appName, template: opts.template }),
+    }, (appName, opts) => generateCommand(appName, opts)));
     program
         .command('edit <app-name>')
         .description(`Pull the latest version of an app into ${getWorkspaceHome()}/<app-name>, cloning it first if needed`)

package/dist/esm/util/dashboard-templates/load-catalog.d.ts

@@ -0,0 +1,22 @@
+export type ValidateConfigResult = {
+    success: true;
+    data: unknown;
+} | {
+    success: false;
+    error: string;
+};
+export interface DashboardTemplateEntry {
+    id: string;
+    title: string;
+    description: string;
+    /** Absolute path to this template's dir — source + its already-built .zth/build. */
+    templateDir: string;
+    /** JSON Schema for this template's whole `--input` config object — shape is template-defined. */
+    configSchema: Record<string, unknown>;
+    /** Validates --input against this template's actual zod schema — the JSON Schema above is
+     *  display-only (catalog listing), this is what `generate` really validates against. */
+    validateConfig: (input: unknown) => ValidateConfigResult;
+}
+export declare function findTemplate(id: string): DashboardTemplateEntry;
+export declare function loadDashboardTemplatesCatalog(): DashboardTemplateEntry[];
+//# sourceMappingURL=load-catalog.d.ts.map

package/dist/esm/util/dashboard-templates/load-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-catalog.d.ts","sourceRoot":"","sources":["../../../../src/util/dashboard-templates/load-catalog.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,oBAAoB,GAAG;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAExG,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,WAAW,EAAE,MAAM,CAAC;IACpB,iGAAiG;IACjG,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC;4FACwF;IACxF,cAAc,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,oBAAoB,CAAC;CAC1D;AA+BD,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,sBAAsB,CAQ/D;AAED,wBAAgB,6BAA6B,IAAI,sBAAsB,EAAE,CAoBxE"}

package/dist/esm/util/dashboard-templates/load-catalog.mjs

@@ -0,0 +1,55 @@
+import path from 'node:path';
+import fs from 'node:fs';
+import { createRequire } from 'node:module';
+import { z } from 'zod';
+
+// Each template defines its catalog metadata and its config shape once, in template.ts (compiled
+// to dist/template.js by dashboard-templates' build script) — the JSON Schema used for catalog
+// listing is derived from its zod configSchema here rather than hand-duplicated as a separate JSON
+// literal, and --input validation goes through the same zod schema directly (see validateConfig),
+// so the schema and the TS types templates' own hooks import can never drift apart.
+function loadTemplateModule(templateDir) {
+    const templateModulePath = path.join(templateDir, 'dist', 'template.js');
+    const { template, configSchema } = createRequire(import.meta.url)(templateModulePath);
+    return {
+        template,
+        // draft-7 is arbitrary here (nothing re-validates against it) — just a reasonably standard,
+        // widely-understood dialect for whatever reads `templates --json`'s output.
+        configSchema: z.toJSONSchema(configSchema, { target: 'draft-7' }),
+        validateConfig: input => {
+            const result = configSchema.safeParse(input);
+            return result.success
+                ? { success: true, data: result.data }
+                : { success: false, error: z.prettifyError(result.error) };
+        },
+    };
+}
+function findTemplate(id) {
+    const templates = loadDashboardTemplatesCatalog();
+    const template = templates.find(t => t.id === id);
+    if (!template) {
+        const known = templates.map(t => t.id).join(', ') || '(none)';
+        throw new Error(`Unknown template "${id}". Available: ${known}.`);
+    }
+    return template;
+}
+function loadDashboardTemplatesCatalog() {
+    const catalogDir = path.dirname(createRequire(import.meta.url).resolve('@mondaydotcomorg/z2h-dashboard-templates/package.json'));
+    const templatesRoot = path.join(catalogDir, 'templates');
+    if (!fs.existsSync(templatesRoot)) {
+        return [];
+    }
+    return fs
+        .readdirSync(templatesRoot, { withFileTypes: true })
+        .filter(entry => entry.isDirectory())
+        .flatMap(entry => {
+        const templateDir = path.join(templatesRoot, entry.name);
+        if (!fs.existsSync(path.join(templateDir, 'template.ts'))) {
+            return [];
+        }
+        const { template, configSchema, validateConfig } = loadTemplateModule(templateDir);
+        return [{ ...template, templateDir, configSchema, validateConfig }];
+    });
+}
+
+export { findTemplate, loadDashboardTemplatesCatalog };

package/dist/esm/util/dashboard-templates/patch-bundle.d.ts

@@ -0,0 +1,12 @@
+export type PatchedConfig = Record<string, unknown>;
+export declare function patchOneFile(src: string, config: PatchedConfig): string | null;
+/**
+ * Reads a built `.zth/build` directory, patches every MF entrypoint's config-object literal
+ * in place with real data, and writes the result to `outDir` (does NOT mutate `sourceBuildDir`
+ * — safe to call against a shared/reused prebuilt bundle). Throws if the placeholder shape
+ * isn't found in ANY entrypoint, since that means the anchor is stale and nothing was patched.
+ */
+export declare function patchBuiltBundle(sourceBuildDir: string, outDir: string, config: PatchedConfig): {
+    patchedFiles: string[];
+};
+//# sourceMappingURL=patch-bundle.d.ts.map

package/dist/esm/util/dashboard-templates/patch-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch-bundle.d.ts","sourceRoot":"","sources":["../../../../src/util/dashboard-templates/patch-bundle.ts"],"names":[],"mappings":"AAwBA,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAoDpD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAO9E;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,GACpB;IAAE,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CA+B5B"}

package/dist/esm/util/dashboard-templates/patch-bundle.mjs

@@ -0,0 +1,108 @@
+import fs from 'node:fs';
+import path from 'node:path';
+
+// Swaps a template's placeholder config object directly into an ALREADY-BUILT MF bundle by
+// string-patching the minified JS, instead of rerunning `z2h-cli build`. The config object is
+// marked by a `/*! Z2H_CONFIG_V1 */` comment immediately before it — comments are inert to a
+// minifier's dead-code elimination (unlike an object property, which gets stripped the moment
+// nothing in the app statically reads it — see this package's README for how that bit us), and
+// Terser's default `output.comments` setting (`some`) specifically preserves "bang" comments
+// (`/*!` ...) while dropping ordinary ones, which is why the marker must use that exact form.
+//
+// Anchor is shape-agnostic by design: every template in @mondaydotcomorg/z2h-dashboard-templates'
+// catalog must place this comment directly before its OWN placeholder config object, regardless
+// of that template's real configSchema (which varies per template — title+widgets for one
+// template, something else entirely for another) — see that package's README for the contract.
+// This is the one constant every template shares, so this file needs no per-template logic and
+// never reads any of the config's fields itself.
+// Comment content collapses whitespace during minification (`/*!Z2H_CONFIG_V1*/` is also valid),
+// hence \s* rather than a literal single space.
+const ANCHOR_RE = /\/\*!\s*Z2H_CONFIG_V1\s*\*\//;
+// The anchor comment sits immediately before the config object (`= /*! Z2H_CONFIG_V1 */ {...}`),
+// so unlike a property-based anchor nested inside the object, this never needs to scan backward
+// to find where the object starts — just forward from the end of the comment match to the next
+// "{", then a standard string-aware brace-depth scan to its matching "}".
+function findObjectAfterAnchor(src, anchorEnd) {
+    let start = anchorEnd;
+    while (start < src.length && src[start] !== '{') {
+        start++;
+    }
+    if (start >= src.length) {
+        throw new Error('patch-bundle: no "{" found after the anchor comment — anchor may be stale');
+    }
+    let braceDepth = 0;
+    let inString = false;
+    let quoteChar = '';
+    let end = -1;
+    for (let i = start; i < src.length; i++) {
+        const ch = src[i];
+        const prev = src[i - 1];
+        if (inString) {
+            if (ch === quoteChar && prev !== '\\') {
+                inString = false;
+            }
+            continue;
+        }
+        if (ch === '"' || ch === "'") {
+            inString = true;
+            quoteChar = ch;
+            continue;
+        }
+        if (ch === '{') {
+            braceDepth++;
+        }
+        else if (ch === '}') {
+            braceDepth--;
+            if (braceDepth === 0) {
+                end = i;
+                break;
+            }
+        }
+    }
+    if (end === -1) {
+        throw new Error('patch-bundle: could not find matching "}" for the config object — malformed scan');
+    }
+    return { start, end: end + 1 };
+}
+// Finds the anchor comment and swaps its immediately-following object literal wholesale. Returns
+// null if this particular source doesn't contain the anchor (not every MF entrypoint does; the
+// caller decides whether that's fatal).
+function patchOneFile(src, config) {
+    const match = ANCHOR_RE.exec(src);
+    if (match === null) {
+        return null;
+    }
+    const { start, end } = findObjectAfterAnchor(src, match.index + match[0].length);
+    return src.slice(0, start) + JSON.stringify(config) + src.slice(end);
+}
+/**
+ * Reads a built `.zth/build` directory, patches every MF entrypoint's config-object literal
+ * in place with real data, and writes the result to `outDir` (does NOT mutate `sourceBuildDir`
+ * — safe to call against a shared/reused prebuilt bundle). Throws if the placeholder shape
+ * isn't found in ANY entrypoint, since that means the anchor is stale and nothing was patched.
+ */
+function patchBuiltBundle(sourceBuildDir, outDir, config) {
+    const manifestPath = path.join(sourceBuildDir, 'asset-manifest.json');
+    const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));
+    const jsEntries = [...manifest.entrypoints, ...manifest.nonExternalsEntrypoints].filter(f => f.endsWith('.js'));
+    fs.rmSync(outDir, { recursive: true, force: true });
+    fs.cpSync(sourceBuildDir, outDir, { recursive: true });
+    const patchedFiles = [];
+    for (const rel of jsEntries) {
+        const outPath = path.join(outDir, rel);
+        const src = fs.readFileSync(outPath, 'utf8');
+        const patched = patchOneFile(src, config);
+        if (patched === null) {
+            continue;
+        }
+        new Function(patched); // throws SyntaxError if the patch produced malformed JS — fail loud, not silently
+        fs.writeFileSync(outPath, patched);
+        patchedFiles.push(rel);
+    }
+    if (patchedFiles.length === 0) {
+        throw new Error(`patch-bundle: patched 0 of ${jsEntries.length} entrypoint(s) — anchor ${ANCHOR_RE} not found in any of them`);
+    }
+    return { patchedFiles };
+}
+
+export { patchBuiltBundle, patchOneFile };

package/dist/index.js

@@ -11,6 +11,8 @@ const commands_delete = require('./commands/delete.js');
 const commands_grant = require('./commands/grant.js');
 const commands_createWorkspace = require('./commands/create-workspace.js');
 const commands_create = require('./commands/create.js');
+const commands_generate = require('./commands/generate.js');
+const commands_templates = require('./commands/templates.js');
 const commands_generateZ2hToken = require('./commands/generate-z2h-token.js');
 const commands_migrate = require('./commands/migrate.js');
 const commands_tag = require('./commands/tag.js');
@@ -96,6 +98,7 @@ async function main() {
         .option('--remote <type>', 'First deploy only: source control remote to initialise — s3 (shared storage, recommended, auto-backed-up) or github (manage it yourself in your own repo). Error if the app already has a git remote.')
         .option('--repo-url <url>', 'First deploy only: GitHub repo URL — required when --remote=github. Error if the app already has a git remote.')
         .option('--description <text>', 'short (<=200 char) description of the app')
+        .option('--prebuilt-dir <path>', 'internal — used by `generate-app-template`: skip the build step and deploy this already-built directory as-is')
         .action(util_runCommand.runCommand({
         // A preview is a real deploy for observability, tracked as its own event since
         // the command name alone (`deploy`) can't distinguish it from a live deploy.
@@ -123,7 +126,7 @@ async function main() {
         .action(util_runCommand.runCommand({}, (opts) => commands_generateZ2hToken.generateZ2HTokenCommand(opts)));
     program
         .command('create <app-name>')
-        .description(`Scaffold a new Z2H consumer app inside ${util_workspace.getWorkspaceHome()}/`)
+        .description(`Scaffold a blank Z2H consumer app inside ${util_workspace.getWorkspaceHome()}/ using a built-in template (default | html-embed). If a catalog template already fits what you're building, use \`generate-app-template\` instead.`)
         .option('--template <name>', 'Template name (default | html-embed)')
         .option('--html-file <path>', 'Path to an HTML file to embed (implies --template html-embed)')
         .option('--remote <type>', 'Source control remote: s3 (shared storage, recommended, auto-backed-up) or github (manage it yourself in your own repo)')
@@ -135,6 +138,18 @@ async function main() {
             remote: opts.remote ?? 'unknown',
         }),
     }, (appName, opts) => commands_create.createCommand(appName, opts)));
+    program
+        .command('templates')
+        .description("List the BigBrain Studio (Z2H) template catalog — id, title, description, and each template's widget schema")
+        .action(util_runCommand.runCommand({}, () => commands_templates.templatesCommand()));
+    program
+        .command('generate-app-template <app-name>')
+        .description(`Scaffold + preview a Z2H app/dashboard from a templates catalog entry inside ${util_workspace.getWorkspaceHome()}/ — copies a prebuilt template, patches in real widget data, and deploys a preview. No build, no yarn install, no live deploy — run \`z2h-cli deploy\` yourself from the app dir once you're happy with it.`)
+        .requiredOption('--template <id>', 'catalog template id — see `z2h-cli templates --json`')
+        .requiredOption('--input <json>', "JSON string — shape is template-defined, validated wholesale against the template's configSchema (see `z2h-cli templates --json`)")
+        .action(util_runCommand.runCommand({
+        data: ([appName, opts]) => ({ app_name: appName, template: opts.template }),
+    }, (appName, opts) => commands_generate.generateCommand(appName, opts)));
     program
         .command('edit <app-name>')
         .description(`Pull the latest version of an app into ${util_workspace.getWorkspaceHome()}/<app-name>, cloning it first if needed`)

package/dist/util/app-name.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
-const node_fs = require('node:fs');
+const fs = require('node:fs');
 const constants = require('../constants.js');
 
 /**
@@ -12,7 +12,7 @@ function cleanAppName(name) {
 }
 function getCwdAppName() {
     try {
-        return JSON.parse(node_fs.readFileSync('package.json', 'utf8')).name;
+        return JSON.parse(fs.readFileSync('package.json', 'utf8')).name;
     }
     catch {
         return undefined;

package/dist/util/dashboard-templates/load-catalog.d.ts

@@ -0,0 +1,22 @@
+export type ValidateConfigResult = {
+    success: true;
+    data: unknown;
+} | {
+    success: false;
+    error: string;
+};
+export interface DashboardTemplateEntry {
+    id: string;
+    title: string;
+    description: string;
+    /** Absolute path to this template's dir — source + its already-built .zth/build. */
+    templateDir: string;
+    /** JSON Schema for this template's whole `--input` config object — shape is template-defined. */
+    configSchema: Record<string, unknown>;
+    /** Validates --input against this template's actual zod schema — the JSON Schema above is
+     *  display-only (catalog listing), this is what `generate` really validates against. */
+    validateConfig: (input: unknown) => ValidateConfigResult;
+}
+export declare function findTemplate(id: string): DashboardTemplateEntry;
+export declare function loadDashboardTemplatesCatalog(): DashboardTemplateEntry[];
+//# sourceMappingURL=load-catalog.d.ts.map

package/dist/util/dashboard-templates/load-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-catalog.d.ts","sourceRoot":"","sources":["../../../src/util/dashboard-templates/load-catalog.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,oBAAoB,GAAG;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAExG,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,WAAW,EAAE,MAAM,CAAC;IACpB,iGAAiG;IACjG,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC;4FACwF;IACxF,cAAc,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,oBAAoB,CAAC;CAC1D;AA+BD,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,sBAAsB,CAQ/D;AAED,wBAAgB,6BAA6B,IAAI,sBAAsB,EAAE,CAoBxE"}

package/dist/util/dashboard-templates/load-catalog.js

@@ -0,0 +1,64 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const path = require('node:path');
+const fs = require('node:fs');
+const node_module = require('node:module');
+const zod = require('zod');
+
+var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
+const _interopDefault = e => e && e.__esModule ? e : { default: e };
+
+const path__default = /*#__PURE__*/_interopDefault(path);
+const fs__default = /*#__PURE__*/_interopDefault(fs);
+
+// Each template defines its catalog metadata and its config shape once, in template.ts (compiled
+// to dist/template.js by dashboard-templates' build script) — the JSON Schema used for catalog
+// listing is derived from its zod configSchema here rather than hand-duplicated as a separate JSON
+// literal, and --input validation goes through the same zod schema directly (see validateConfig),
+// so the schema and the TS types templates' own hooks import can never drift apart.
+function loadTemplateModule(templateDir) {
+    const templateModulePath = path__default.default.join(templateDir, 'dist', 'template.js');
+    const { template, configSchema } = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('util/dashboard-templates/load-catalog.js', document.baseURI).href)))(templateModulePath);
+    return {
+        template,
+        // draft-7 is arbitrary here (nothing re-validates against it) — just a reasonably standard,
+        // widely-understood dialect for whatever reads `templates --json`'s output.
+        configSchema: zod.z.toJSONSchema(configSchema, { target: 'draft-7' }),
+        validateConfig: input => {
+            const result = configSchema.safeParse(input);
+            return result.success
+                ? { success: true, data: result.data }
+                : { success: false, error: zod.z.prettifyError(result.error) };
+        },
+    };
+}
+function findTemplate(id) {
+    const templates = loadDashboardTemplatesCatalog();
+    const template = templates.find(t => t.id === id);
+    if (!template) {
+        const known = templates.map(t => t.id).join(', ') || '(none)';
+        throw new Error(`Unknown template "${id}". Available: ${known}.`);
+    }
+    return template;
+}
+function loadDashboardTemplatesCatalog() {
+    const catalogDir = path__default.default.dirname(node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('util/dashboard-templates/load-catalog.js', document.baseURI).href))).resolve('@mondaydotcomorg/z2h-dashboard-templates/package.json'));
+    const templatesRoot = path__default.default.join(catalogDir, 'templates');
+    if (!fs__default.default.existsSync(templatesRoot)) {
+        return [];
+    }
+    return fs__default.default
+        .readdirSync(templatesRoot, { withFileTypes: true })
+        .filter(entry => entry.isDirectory())
+        .flatMap(entry => {
+        const templateDir = path__default.default.join(templatesRoot, entry.name);
+        if (!fs__default.default.existsSync(path__default.default.join(templateDir, 'template.ts'))) {
+            return [];
+        }
+        const { template, configSchema, validateConfig } = loadTemplateModule(templateDir);
+        return [{ ...template, templateDir, configSchema, validateConfig }];
+    });
+}
+
+exports.findTemplate = findTemplate;
+exports.loadDashboardTemplatesCatalog = loadDashboardTemplatesCatalog;

package/dist/util/dashboard-templates/patch-bundle.d.ts

@@ -0,0 +1,12 @@
+export type PatchedConfig = Record<string, unknown>;
+export declare function patchOneFile(src: string, config: PatchedConfig): string | null;
+/**
+ * Reads a built `.zth/build` directory, patches every MF entrypoint's config-object literal
+ * in place with real data, and writes the result to `outDir` (does NOT mutate `sourceBuildDir`
+ * — safe to call against a shared/reused prebuilt bundle). Throws if the placeholder shape
+ * isn't found in ANY entrypoint, since that means the anchor is stale and nothing was patched.
+ */
+export declare function patchBuiltBundle(sourceBuildDir: string, outDir: string, config: PatchedConfig): {
+    patchedFiles: string[];
+};
+//# sourceMappingURL=patch-bundle.d.ts.map

package/dist/util/dashboard-templates/patch-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch-bundle.d.ts","sourceRoot":"","sources":["../../../src/util/dashboard-templates/patch-bundle.ts"],"names":[],"mappings":"AAwBA,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAoDpD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAO9E;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,GACpB;IAAE,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CA+B5B"}

package/dist/util/dashboard-templates/patch-bundle.js

@@ -0,0 +1,116 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const fs = require('node:fs');
+const path = require('node:path');
+
+const _interopDefault = e => e && e.__esModule ? e : { default: e };
+
+const fs__default = /*#__PURE__*/_interopDefault(fs);
+const path__default = /*#__PURE__*/_interopDefault(path);
+
+// Swaps a template's placeholder config object directly into an ALREADY-BUILT MF bundle by
+// string-patching the minified JS, instead of rerunning `z2h-cli build`. The config object is
+// marked by a `/*! Z2H_CONFIG_V1 */` comment immediately before it — comments are inert to a
+// minifier's dead-code elimination (unlike an object property, which gets stripped the moment
+// nothing in the app statically reads it — see this package's README for how that bit us), and
+// Terser's default `output.comments` setting (`some`) specifically preserves "bang" comments
+// (`/*!` ...) while dropping ordinary ones, which is why the marker must use that exact form.
+//
+// Anchor is shape-agnostic by design: every template in @mondaydotcomorg/z2h-dashboard-templates'
+// catalog must place this comment directly before its OWN placeholder config object, regardless
+// of that template's real configSchema (which varies per template — title+widgets for one
+// template, something else entirely for another) — see that package's README for the contract.
+// This is the one constant every template shares, so this file needs no per-template logic and
+// never reads any of the config's fields itself.
+// Comment content collapses whitespace during minification (`/*!Z2H_CONFIG_V1*/` is also valid),
+// hence \s* rather than a literal single space.
+const ANCHOR_RE = /\/\*!\s*Z2H_CONFIG_V1\s*\*\//;
+// The anchor comment sits immediately before the config object (`= /*! Z2H_CONFIG_V1 */ {...}`),
+// so unlike a property-based anchor nested inside the object, this never needs to scan backward
+// to find where the object starts — just forward from the end of the comment match to the next
+// "{", then a standard string-aware brace-depth scan to its matching "}".
+function findObjectAfterAnchor(src, anchorEnd) {
+    let start = anchorEnd;
+    while (start < src.length && src[start] !== '{') {
+        start++;
+    }
+    if (start >= src.length) {
+        throw new Error('patch-bundle: no "{" found after the anchor comment — anchor may be stale');
+    }
+    let braceDepth = 0;
+    let inString = false;
+    let quoteChar = '';
+    let end = -1;
+    for (let i = start; i < src.length; i++) {
+        const ch = src[i];
+        const prev = src[i - 1];
+        if (inString) {
+            if (ch === quoteChar && prev !== '\\') {
+                inString = false;
+            }
+            continue;
+        }
+        if (ch === '"' || ch === "'") {
+            inString = true;
+            quoteChar = ch;
+            continue;
+        }
+        if (ch === '{') {
+            braceDepth++;
+        }
+        else if (ch === '}') {
+            braceDepth--;
+            if (braceDepth === 0) {
+                end = i;
+                break;
+            }
+        }
+    }
+    if (end === -1) {
+        throw new Error('patch-bundle: could not find matching "}" for the config object — malformed scan');
+    }
+    return { start, end: end + 1 };
+}
+// Finds the anchor comment and swaps its immediately-following object literal wholesale. Returns
+// null if this particular source doesn't contain the anchor (not every MF entrypoint does; the
+// caller decides whether that's fatal).
+function patchOneFile(src, config) {
+    const match = ANCHOR_RE.exec(src);
+    if (match === null) {
+        return null;
+    }
+    const { start, end } = findObjectAfterAnchor(src, match.index + match[0].length);
+    return src.slice(0, start) + JSON.stringify(config) + src.slice(end);
+}
+/**
+ * Reads a built `.zth/build` directory, patches every MF entrypoint's config-object literal
+ * in place with real data, and writes the result to `outDir` (does NOT mutate `sourceBuildDir`
+ * — safe to call against a shared/reused prebuilt bundle). Throws if the placeholder shape
+ * isn't found in ANY entrypoint, since that means the anchor is stale and nothing was patched.
+ */
+function patchBuiltBundle(sourceBuildDir, outDir, config) {
+    const manifestPath = path__default.default.join(sourceBuildDir, 'asset-manifest.json');
+    const manifest = JSON.parse(fs__default.default.readFileSync(manifestPath, 'utf8'));
+    const jsEntries = [...manifest.entrypoints, ...manifest.nonExternalsEntrypoints].filter(f => f.endsWith('.js'));
+    fs__default.default.rmSync(outDir, { recursive: true, force: true });
+    fs__default.default.cpSync(sourceBuildDir, outDir, { recursive: true });
+    const patchedFiles = [];
+    for (const rel of jsEntries) {
+        const outPath = path__default.default.join(outDir, rel);
+        const src = fs__default.default.readFileSync(outPath, 'utf8');
+        const patched = patchOneFile(src, config);
+        if (patched === null) {
+            continue;
+        }
+        new Function(patched); // throws SyntaxError if the patch produced malformed JS — fail loud, not silently
+        fs__default.default.writeFileSync(outPath, patched);
+        patchedFiles.push(rel);
+    }
+    if (patchedFiles.length === 0) {
+        throw new Error(`patch-bundle: patched 0 of ${jsEntries.length} entrypoint(s) — anchor ${ANCHOR_RE} not found in any of them`);
+    }
+    return { patchedFiles };
+}
+
+exports.patchBuiltBundle = patchBuiltBundle;
+exports.patchOneFile = patchOneFile;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mondaydotcomorg/z2h-cli",
-  "version": "0.25.9",
+  "version": "0.26.0",
   "bin": "./bin/z2h-cli.js",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -51,6 +51,7 @@
   ],
   "dependencies": {
     "@aws-sdk/client-s3": "^3.706.0",
+    "@mondaydotcomorg/z2h-dashboard-templates": "^0.3.0",
     "@mondaydotcomorg/z2h-shared-utils": "^0.4.3",
     "chokidar": "^3.6.0",
     "commander": "^12.1.0",
@@ -62,7 +63,8 @@
     "p-map": "^7.0.2",
     "picocolors": "^1.1.1",
     "semver": "^7.6.0",
-    "tsx": "^4.19.2"
+    "tsx": "^4.19.2",
+    "zod": "^4.1.11"
   },
   "devDependencies": {
     "@mondaydotcomorg/trident-library": "^1.2.7",

package/src/commands/deploy.ts

@@ -1,5 +1,6 @@
 import os from 'node:os';
-import { ensureDir, readJson } from 'fs-extra';
+import path from 'node:path';
+import { copy, ensureDir, readJson } from 'fs-extra';
 import { info, warn, output, getOutputMode } from '../util/logger';
 import { resolveConsumerPaths } from '../shadow/paths';
 import { fetchAppTags, fetchTagCatalog, setAppTags } from '../util/tags';
@@ -27,7 +28,7 @@ import { deployBackend } from './backend';
 import { buildCommand } from './build';
 import { promptForTags } from './tag';
 import type { ConsumerPaths, DeployFailureReason } from '../types';
-import type { ManifestEntry } from '../util/manifest';
+import type { ManifestEntry, AssetManifestFile } from '../util/manifest';
 
 /** Who is publishing this version — the machine identity, else the OS user. */
 function whoDeployed(): string {
@@ -42,6 +43,10 @@ export interface DeployOptions {
   preview?: boolean;
   open?: boolean;
   description?: string;
+  // Used by `generate-app-template`: skip `buildCommand()` entirely and reuse this
+  // already-built (string-patched) directory as the shadow build output instead. Only ever
+  // populated by the generate pipeline — never set on a normal human/CI deploy.
+  prebuiltDir?: string;
 }
 
 interface DeployContext {
@@ -91,8 +96,16 @@ async function buildAndStamp(opts: {
   publicUrl: string;
   nextVersion: number;
   gitRemote: string;
+  prebuiltDir?: string;
 }): Promise<ManifestEntry> {
-  const { assetManifest } = await buildCommand({ publicUrl: opts.publicUrl });
+  let assetManifest: AssetManifestFile;
+  if (opts.prebuiltDir) {
+    info(`skipping build — reusing prebuilt bundle from ${opts.prebuiltDir}`);
+    await copy(opts.prebuiltDir, opts.paths.shadowBuild, { overwrite: true });
+    assetManifest = await readJson(path.join(opts.paths.shadowBuild, 'asset-manifest.json'));
+  } else {
+    ({ assetManifest } = await buildCommand({ publicUrl: opts.publicUrl }));
+  }
   const deployedBy = whoDeployed();
 
   return {
@@ -156,7 +169,13 @@ async function deployPreview({ paths, consumerName, appName, token, opts }: Depl
   const nextVersion = (await fetchDeployVersion(previewAppName)) + 1;
 
   info('building');
-  const entry = await buildAndStamp({ paths, publicUrl: url, nextVersion, gitRemote: '' });
+  const entry = await buildAndStamp({
+    paths,
+    publicUrl: url,
+    nextVersion,
+    gitRemote: '',
+    prebuiltDir: opts.prebuiltDir,
+  });
 
   info('getting sts credentials');
   const creds = await brokerCredentialProvider({ appName: previewAppName, previewId })();
@@ -245,7 +264,7 @@ async function deployLive({ paths, consumerName, appName, token, opts }: DeployC
   const url = `${BUCKET_READ_DNS_URL}/${keyPrefix}`;
 
   info('building');
-  const entry = await buildAndStamp({ paths, publicUrl: url, nextVersion, gitRemote });
+  const entry = await buildAndStamp({ paths, publicUrl: url, nextVersion, gitRemote, prebuiltDir: opts.prebuiltDir });
 
   if (opts.dryRun) {
     output(`[z2h-cli] dry-run: would upload to s3://${BUCKET_WRITE_NAME}/${keyPrefix}/ as v${version}`, {