@mondaydotcomorg/z2h-cli 0.32.2 → 0.33.1

package/src/index.ts

@@ -9,6 +9,7 @@ import { cleanCommand } from './commands/clean';
 import { deployCommand } from './commands/deploy';
 import { deleteCommand } from './commands/delete';
 import { grantCommand, revokeCommand, transferOwnerCommand } from './commands/grant';
+import { listCustomIntegrationsCommand, removeCustomIntegrationCommand } from './commands/custom-integrations';
 import { createWorkspaceCommand } from './commands/create-workspace';
 import { createCommand, CreateOptions } from './commands/create';
 import { generateCommand, GenerateOptions } from './commands/generate';
@@ -260,6 +261,16 @@ async function main(): Promise<void> {
     .description('Transfer ownership of the current app to another monday.com user')
     .action(runCommand({}, (email: string | undefined) => transferOwnerCommand(email)));
 
+  program
+    .command('custom-integration:list')
+    .description("List the current app's registered custom integrations (never shows the PAT)")
+    .action(runCommand({}, () => listCustomIntegrationsCommand()));
+
+  program
+    .command('custom-integration:remove <name>')
+    .description('Remove a registered custom integration from the current app')
+    .action(runCommand({}, (name: string) => removeCustomIntegrationCommand(name)));
+
   program
     .command('delete')
     .description('Permanently delete the current app and take it offline (owners/admins only)')
@@ -268,7 +279,7 @@ async function main(): Promise<void> {
 
   const backend = program
     .command('backend')
-    .description("Inspect the app's backend: validate handler sources or invoke a deployed handler by name");
+    .description("Inspect the app's backend: validate handler sources or run a handler from the working tree");
 
   backend
     .command('validate')
@@ -280,15 +291,21 @@ async function main(): Promise<void> {
   backend
     .command('invoke <handlerName>')
     .description(
-      'Invoke a deployed backend handler by name (the filename without .ts) — mainly for testing a handler without going through the frontend'
+      "Run backend/handlers/<handlerName>.js from the working tree — not the deployed handler — against the app's real " +
+        'channels (real db data, real monday calls), and print a trace of every channel call and the ' +
+        'result. Nothing is deployed. Exits 1 when the handler fails.'
+    )
+    .option('--input <json>', 'JSON passed to the handler as ctx.input (what the frontend would send)')
+    .option(
+      '--code <source>',
+      'run this source instead of backend/handlers/<handlerName>.js — <handlerName> is then just a label'
     )
-    .option('--input <json>', 'JSON payload passed as ctx.input')
     .action(
       runCommand(
         {
           data: ([handlerName]: [string, unknown]) => ({ app_name: getCwdAppName(), handler: handlerName }),
         },
-        (handlerName: string, opts: { input?: string }) => backendInvokeCommand(handlerName, opts)
+        (handlerName: string, opts: { input?: string; code?: string }) => backendInvokeCommand(handlerName, opts)
       )
     );
 
@@ -319,7 +336,9 @@ void main()
     if (getOutputMode() === 'human') {
       selfUpdate();
     }
-    process.exit(0);
+    // A command can finish normally and still report a non-zero code (e.g.
+    // `backend invoke` when the handler failed) via process.exitCode.
+    process.exit(process.exitCode ?? 0);
   })
   .catch(async (err: unknown) => {
     const errorMsg = err instanceof Error ? err.message : String(err);

package/src/util/app-name.ts

@@ -29,7 +29,7 @@ export function mfAppName(name: string): string {
 // Names reserved by the host MF (mf-bigbrain-zth) for platform pages under
 // /bigbrain-vibe/<name>. Creating an app with one of these would shadow the
 // platform page in the URL, so we refuse upfront.
-const RESERVED_APP_NAMES = new Set(['generate-z2h-token']);
+const RESERVED_APP_NAMES = new Set(['generate-z2h-token', 'set-custom-integration']);
 
 /**
  * Validates a de-scoped, kebab-case app name against every rule shared by

package/src/util/broker/__tests__/app.test.ts

@@ -60,6 +60,38 @@ describe('registerOrUpdateApp', () => {
     });
   });
 
+  it('forwards masterAppName on registration only', async () => {
+    const fetchMock = mockFetchOnce();
+
+    await registerOrUpdateApp({
+      appName: 'mf-zth-preview-abc-my-app',
+      token: 'jwt',
+      nextVersion: 1,
+      entry: ENTRY,
+      gitRemote: '',
+      masterAppName: 'mf-my-app',
+    });
+
+    const [, init] = fetchMock.mock.calls[0] as [string, RequestInit];
+    expect(JSON.parse(init.body as string)).toMatchObject({ masterAppName: 'mf-my-app' });
+  });
+
+  it('does not send masterAppName on update — the link is immutable after registration', async () => {
+    const fetchMock = mockFetchOnce();
+
+    await registerOrUpdateApp({
+      appName: 'mf-zth-preview-abc-my-app',
+      token: 'jwt',
+      nextVersion: 2,
+      entry: ENTRY,
+      gitRemote: '',
+      masterAppName: 'mf-my-app',
+    });
+
+    const [, init] = fetchMock.mock.calls[0] as [string, RequestInit];
+    expect(JSON.parse(init.body as string)).not.toHaveProperty('masterAppName');
+  });
+
   it('updates (not registers) when nextVersion > 1, without prompting for visibility', async () => {
     const fetchMock = mockFetchOnce();
 

package/src/util/broker/app.ts

@@ -115,7 +115,10 @@ export interface RegisterOrUpdateOptions {
   gitRemote: string;
   integrations?: string[];
   description?: string;
-  /** For a preview app's first registration, the real app it previews. Ignored past v1. */
+  /**
+   * The base app a preview is for, sent only on first registration — the link
+   * is set once and is immutable thereafter, so a later update doesn't need it.
+   */
   masterAppName?: string;
 }