@mondaydotcomorg/z2h-cli 0.7.2 → 0.9.1

package/dist/esm/commands/deploy.mjs

@@ -1,17 +1,18 @@
 import path from 'node:path';
 import os from 'node:os';
 import { readJson, pathExists } from 'fs-extra';
-import { setOutputMode, info, output } from '../util/logger.mjs';
+import { setOutputMode, info, output, warn } from '../util/logger.mjs';
 import { resolveConsumerPaths } from '../shadow/paths.mjs';
 import { readManifest, nextVersion, writeManifest, upsertEntry } from '../util/manifest.mjs';
 import { uploadDir } from '../util/s3/upload.mjs';
-import { BUCKET_WRITE_NAME, BUCKET_READ_DNS_URL } from '../constants.mjs';
+import { BUCKET_WRITE_NAME, brokerBaseUrl, BUCKET_READ_DNS_URL } from '../constants.mjs';
 import { setupS3Client } from '../util/s3/client.mjs';
 import { readZthAuth } from '../util/auth/auth-store.mjs';
 import { mfAppName, cleanAppName } from '../util/app-name.mjs';
 import { buildCommand } from './build.mjs';
 
-async function deployCommand(opts) {
+// Should be run from the consumer app directory — uses process.cwd() to locate it.
+async function deployCommand(opts = {}) {
     if (opts.json) {
         setOutputMode('json');
     }
@@ -23,7 +24,7 @@ async function deployCommand(opts) {
     const appName = mfAppName(consumerPkg.name);
     // Validate the user's deploy token is on disk before doing any expensive
     // work. Throws Z2hAuthMissingError with a remediation hint if not.
-    await readZthAuth();
+    const { token } = await readZthAuth();
     setupS3Client({ appName });
     info('reading current Z2H manifest');
     const manifest = await readManifest();
@@ -61,10 +62,18 @@ async function deployCommand(opts) {
         });
         return;
     }
-    info(`uploading build → s3://${BUCKET_WRITE_NAME}/${keyPrefix}/`);
-    await uploadDir(paths.shadowBuild, keyPrefix);
-    info(`updating manifest entry "${appName}" → v${version}`);
-    await writeManifest(upsertEntry(manifest, appName, entry));
+    try {
+        // Lock is acquired here — uploadDir triggers the STS credential provider on first S3 call
+        info(`uploading build → s3://${BUCKET_WRITE_NAME}/${keyPrefix}/`);
+        await uploadDir(paths.shadowBuild, keyPrefix);
+        info(`updating manifest entry "${appName}" → v${version}`);
+        await writeManifest(upsertEntry(manifest, appName, entry));
+        info(`registering app "${appName}" → v${version}`);
+        await registerApp(appName, token, version, entry);
+    }
+    finally {
+        await releaseLockBestEffort(appName, token);
+    }
     // The host MF parses the app name from the URL and prepends `mf-` itself
     // before looking it up in the manifest. So the user-facing URL must use
     // the consumer's de-scoped package name (no `mf-` prefix, no `@scope/`).
@@ -80,5 +89,30 @@ async function deployCommand(opts) {
         entry,
     });
 }
+async function registerApp(appName, token, version, entry) {
+    const res = await fetch(`${brokerBaseUrl()}/z2h-cli/apps/register`, {
+        method: 'POST',
+        headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json' },
+        body: JSON.stringify({ appName, version, entry }),
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`App registration failed (${res.status}): ${text.slice(0, 1024)}`);
+    }
+}
+// best-effort — the 5-min TTL backstop handles failures
+async function releaseLockBestEffort(appName, token) {
+    try {
+        await fetch(`${brokerBaseUrl()}/z2h-cli/lock/release`, {
+            method: 'POST',
+            headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json' },
+            body: JSON.stringify({ appName }),
+        });
+        info(`lock released for ${appName}`);
+    }
+    catch {
+        warn(`failed to release lock for ${appName}`);
+    }
+}
 
 export { deployCommand };

package/dist/esm/commands/dev.d.ts

@@ -1,5 +1,5 @@
 export interface DevOptions {
     json?: boolean;
 }
-export declare function devCommand(opts: DevOptions): Promise<void>;
+export declare function devCommand(opts?: DevOptions): Promise<void>;
 //# sourceMappingURL=dev.d.ts.map

package/dist/esm/commands/dev.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dev.d.ts","sourceRoot":"","sources":["../../../src/commands/dev.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAID,wBAAsB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAuEhE"}
+{"version":3,"file":"dev.d.ts","sourceRoot":"","sources":["../../../src/commands/dev.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAKD,wBAAsB,UAAU,CAAC,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA0ErE"}

package/dist/esm/commands/dev.mjs

@@ -9,7 +9,8 @@ import { ensureConsumerPkg } from '../shadow/consumer-pkg.mjs';
 import { syncShadow } from '../shadow/sync.mjs';
 
 const TRIDENT_READY_PATTERN = /Server started at/i;
-async function devCommand(opts) {
+// Should be run from the consumer app directory — uses process.cwd() to locate it.
+async function devCommand(opts = {}) {
     if (opts.json) {
         setOutputMode('json');
     }
@@ -23,6 +24,9 @@ async function devCommand(opts) {
     const server = execa('yarn', ['start'], {
         cwd: ctx.paths.shadowDir,
         stdio: ['inherit', 'pipe', 'inherit'],
+        // Trident requires NPM_TOKEN to be set or it refuses to start; 'FAKE_TOKEN' satisfies the check without real credentials.
+        // we always pass a fake token for same behavior for all users (no matter if they have a token or not)
+        env: { ...process.env, NPM_TOKEN: 'FAKE_TOKEN' },
     });
     const pidFile = path.join(ctx.paths.shadowDir, 'dev.pid');
     if (server.pid) {

package/dist/esm/commands/migrate.d.ts

@@ -2,5 +2,5 @@ export interface MigrateOptions {
     dryRun?: boolean;
     json?: boolean;
 }
-export declare function migrateCommand(cliVersion: string, opts: MigrateOptions): Promise<void>;
+export declare function migrateCommand(cliVersion: string, opts?: MigrateOptions): Promise<void>;
 //# sourceMappingURL=migrate.d.ts.map

package/dist/esm/commands/migrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../src/commands/migrate.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAM5F"}
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../src/commands/migrate.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAMjG"}

package/dist/esm/commands/migrate.mjs

@@ -1,7 +1,7 @@
 import { setOutputMode } from '../util/logger.mjs';
 import { autoMigrate } from '../migrations/auto-migrate.mjs';
 
-async function migrateCommand(cliVersion, opts) {
+async function migrateCommand(cliVersion, opts = {}) {
     if (opts.json) {
         setOutputMode('json');
     }

package/dist/esm/index.mjs

@@ -19,7 +19,10 @@ const { version } = createRequire(import.meta.url)('../package.json');
 const UPDATE_SCRIPT = path.join(os.homedir(), 'Development', 'bigbrain-z2h', 'z2h', 'setup', 'update.sh');
 function selfUpdate() {
     try {
-        execa('bash', [UPDATE_SCRIPT], { detached: true, stdio: 'ignore' }).unref();
+        execa('bash', [UPDATE_SCRIPT], {
+            detached: true,
+            stdio: 'ignore',
+        }).unref();
     }
     catch (err) {
         errorLog(`Z2H auto-update failed to start: ${err.message}`);

package/dist/esm/migrations/auto-migrate.mjs

@@ -1,5 +1,5 @@
-import path from 'node:path';
 import { createRequire } from 'node:module';
+import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { pathExists, readJson, writeJson, writeFile } from 'fs-extra';
 import { execa } from 'execa';

package/dist/esm/templates/app/claude-settings.mjs

@@ -9,7 +9,7 @@ var hooks = {
 			hooks: [
 				{
 					type: "command",
-					command: "if [ -f .zth/dev.pid ]; then kill $(cat .zth/dev.pid) 2>/dev/null; rm .zth/dev.pid; fi"
+					command: "if [ -f .zth/dev.pid ]; then PGID=$(ps -o pgid= -p $(cat .zth/dev.pid) 2>/dev/null | tr -d ' '); [ -n \"$PGID\" ] && kill -- -$PGID 2>/dev/null; rm -f .zth/dev.pid; fi"
 				}
 			]
 		}

package/dist/esm/util/git/__tests__/repo.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=repo.test.d.ts.map

package/dist/esm/util/git/__tests__/repo.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.test.d.ts","sourceRoot":"","sources":["../../../../../src/util/git/__tests__/repo.test.ts"],"names":[],"mappings":""}

package/dist/esm/util/git/repo.d.ts

@@ -0,0 +1,12 @@
+export declare class GitConflictError extends Error {
+    constructor(message: string);
+}
+export declare function defaultS3Remote(app: string): string;
+export declare function initAndPush(dir: string, remote: string): Promise<void>;
+export declare function cloneRepo(remote: string, dir: string): Promise<void>;
+export declare function safeBackupIfDirty(dir: string): Promise<void>;
+export declare function pullAndResolve(dir: string): Promise<void>;
+export declare function remoteHead(dir: string): Promise<string>;
+export declare function localHead(dir: string): Promise<string>;
+export declare function commitDetailedAndPush(dir: string, version: number): Promise<void>;
+//# sourceMappingURL=repo.d.ts.map

package/dist/esm/util/git/repo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.d.ts","sourceRoot":"","sources":["../../../../src/util/git/repo.ts"],"names":[],"mappings":"AAKA,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAID,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO5E;AAED,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1E;AAED,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAclE;AAED,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAS/D;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO7D;AAED,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG5D;AAED,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASvF"}

package/dist/esm/util/git/repo.mjs

@@ -0,0 +1,105 @@
+import path from 'node:path';
+import fs from 'fs-extra';
+import { execa } from 'execa';
+import { BUCKET_WRITE_NAME } from '../../constants.mjs';
+
+class GitConflictError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'GitConflictError';
+    }
+}
+const REQUIRED_GITIGNORE_ENTRIES = ['node_modules/', '.zth/', 'build/'];
+function defaultS3Remote(app) {
+    return `s3://${BUCKET_WRITE_NAME}/${app}/git`;
+}
+async function initAndPush(dir, remote) {
+    await ensureGitignore(dir);
+    await execa('git', ['init', '-b', 'master'], { cwd: dir });
+    await execa('git', ['add', '.'], { cwd: dir });
+    await execa('git', ['commit', '-m', 'Initial commit'], { cwd: dir });
+    await execa('git', ['remote', 'add', 'origin', remote], { cwd: dir });
+    await execa('git', ['push', '-u', 'origin', 'master'], { cwd: dir });
+}
+async function cloneRepo(remote, dir) {
+    await execa('git', ['clone', remote, dir]);
+}
+async function safeBackupIfDirty(dir) {
+    let status;
+    try {
+        ({ stdout: status } = await execa('git', ['status', '--porcelain'], { cwd: dir }));
+    }
+    catch {
+        return;
+    }
+    if (!status.trim()) {
+        return;
+    }
+    const sha = await localHead(dir).catch(() => 'unknown');
+    const appName = path.basename(dir);
+    const backupDir = path.join(path.dirname(dir), `${appName}.backup-${sha}`);
+    await fs.copy(dir, backupDir, { overwrite: false });
+}
+async function pullAndResolve(dir) {
+    try {
+        await execa('git', ['pull', '--ff-only'], { cwd: dir });
+    }
+    catch {
+        // TODO(Phase 7): safeBackupIfDirty(dir) → resolveDivergence(dir) instead of throwing
+        throw new GitConflictError('This app changed while you were working — please re-open it to get the latest version.');
+    }
+}
+async function remoteHead(dir) {
+    const { stdout } = await execa('git', ['ls-remote', 'origin', 'refs/heads/master'], { cwd: dir });
+    const sha = stdout.split('\t')[0]?.trim();
+    if (!sha) {
+        throw new Error('could not read remote head — is the remote reachable?');
+    }
+    return sha;
+}
+async function localHead(dir) {
+    const { stdout } = await execa('git', ['rev-parse', 'HEAD'], { cwd: dir });
+    return stdout.trim();
+}
+async function commitDetailedAndPush(dir, version) {
+    const message = await buildCommitMessage(dir, version);
+    await execa('git', ['add', '.'], { cwd: dir });
+    await execa('git', ['commit', '-m', message], { cwd: dir });
+    try {
+        await execa('git', ['push'], { cwd: dir });
+    }
+    catch {
+        throw new GitConflictError('push rejected — remote has new commits');
+    }
+}
+async function buildCommitMessage(dir, version) {
+    // TODO(Phase 7): replace with LLM-generated summary using git diff + commit messages
+    const { stdout } = await execa('git', ['status', '--short'], { cwd: dir });
+    const files = stdout
+        .split('\n')
+        .map(line => line.slice(3).trim())
+        .filter(Boolean);
+    const fileList = files.length
+        ? files.slice(0, 5).join(', ') + (files.length > 5 ? ` (+${files.length - 5} more)` : '')
+        : 'no changes';
+    return `v${version}: deploy — ${fileList}`;
+}
+async function ensureGitignore(dir) {
+    const gitignorePath = path.join(dir, '.gitignore');
+    let content = '';
+    try {
+        content = await fs.readFile(gitignorePath, 'utf8');
+    }
+    catch {
+        // file doesn't exist yet
+    }
+    const lines = content.split('\n').map(l => l.trim());
+    const missing = REQUIRED_GITIGNORE_ENTRIES.filter(entry => !lines.includes(entry));
+    if (missing.length === 0) {
+        return;
+    }
+    const separator = content && !content.endsWith('\n') ? '\n' : '';
+    await fs.outputFile(gitignorePath, content + separator + missing.join('\n') + '\n');
+}
+
+export { GitConflictError, cloneRepo, commitDetailedAndPush, defaultS3Remote, initAndPush, localHead, pullAndResolve, remoteHead, safeBackupIfDirty };

package/dist/esm/util/manifest.d.ts

@@ -18,6 +18,7 @@ export interface AssetManifestFile {
     nonExternalsEntrypoints?: string[];
     scriptType?: 'module' | 'classic';
     mfs?: string[];
+    gitRemote: string;
 }
 export interface ManifestEntry extends AssetManifestFile {
     version: number;

package/dist/esm/util/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/util/manifest.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,OAAO,CAAC;IACpB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAClC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,aAAc,SAAQ,iBAAiB;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAErD,wBAAsB,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,CAQtD;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,UAI1D;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,QAAQ,CAE3F;AAED,wBAAsB,aAAa,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAWrE"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/util/manifest.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,OAAO,CAAC;IACpB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAClC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAc,SAAQ,iBAAiB;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAErD,wBAAsB,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,CAQtD;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,UAI1D;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,QAAQ,CAE3F;AAED,wBAAsB,aAAa,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAWrE"}

package/dist/index.js

@@ -25,7 +25,10 @@ const { version } = node_module.createRequire((typeof document === 'undefined' ?
 const UPDATE_SCRIPT = path__default.default.join(os__default.default.homedir(), 'Development', 'bigbrain-z2h', 'z2h', 'setup', 'update.sh');
 function selfUpdate() {
     try {
-        execa.execa('bash', [UPDATE_SCRIPT], { detached: true, stdio: 'ignore' }).unref();
+        execa.execa('bash', [UPDATE_SCRIPT], {
+            detached: true,
+            stdio: 'ignore',
+        }).unref();
     }
     catch (err) {
         util_logger.errorLog(`Z2H auto-update failed to start: ${err.message}`);

package/dist/migrations/auto-migrate.js

@@ -1,9 +1,9 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
-const path = require('node:path');
 const node_module = require('node:module');
+const path = require('node:path');
 const node_url = require('node:url');
-const fsExtra = require('fs-extra');
+const fs = require('fs-extra');
 const execa = require('execa');
 const semver = require('semver');
 const util_logger = require('../util/logger.js');
@@ -20,11 +20,11 @@ const NX_JSON_CONTENT = '{\n  "extends": "@mondaydotcomorg/trident-monorepo/pres
 // ─── Helpers ───
 async function readState(workspaceHome) {
     const statePath = path__default.default.join(workspaceHome, STATE_FILE);
-    if (!(await fsExtra.pathExists(statePath))) {
+    if (!(await fs.pathExists(statePath))) {
         return null;
     }
     try {
-        return (await fsExtra.readJson(statePath));
+        return (await fs.readJson(statePath));
     }
     catch {
         return null;
@@ -32,7 +32,7 @@ async function readState(workspaceHome) {
 }
 async function writeState(workspaceHome, state) {
     const statePath = path__default.default.join(workspaceHome, STATE_FILE);
-    await fsExtra.writeJson(statePath, state, { spaces: 2 });
+    await fs.writeJson(statePath, state, { spaces: 2 });
 }
 async function yarnInstall(workspaceHome, context) {
     util_logger.info(`${context} — running yarn install...`);
@@ -69,11 +69,11 @@ function isNxAvailable(workspaceHome) {
 async function ensureWorkspaceNx(workspaceHome) {
     const nxJsonPath = path__default.default.join(workspaceHome, 'nx.json');
     const pkgPath = path__default.default.join(workspaceHome, 'package.json');
-    if (!(await fsExtra.pathExists(nxJsonPath))) {
-        await fsExtra.writeFile(nxJsonPath, NX_JSON_CONTENT);
+    if (!(await fs.pathExists(nxJsonPath))) {
+        await fs.writeFile(nxJsonPath, NX_JSON_CONTENT);
         util_logger.info('added nx.json to workspace');
     }
-    const pkg = (await fsExtra.readJson(pkgPath));
+    const pkg = (await fs.readJson(pkgPath));
     if (!pkg.devDependencies?.['@mondaydotcomorg/trident-monorepo']) {
         pkg.devDependencies = pkg.devDependencies ?? {};
         pkg.devDependencies['@mondaydotcomorg/trident-monorepo'] = await getLatestTrientMonorepoVersion();
@@ -82,7 +82,7 @@ async function ensureWorkspaceNx(workspaceHome) {
         pkg.scripts = pkg.scripts ?? {};
         pkg.scripts.nx = 'nx';
     }
-    await fsExtra.writeJson(pkgPath, pkg, { spaces: 2 });
+    await fs.writeJson(pkgPath, pkg, { spaces: 2 });
     // Only install if NX isn't already importable from the workspace
     if (!isNxAvailable(workspaceHome)) {
         const ok = await yarnInstall(workspaceHome, 'NX not found, installing');
@@ -110,11 +110,11 @@ async function autoMigrate(cliVersion, dryRun = false) {
     // migrations.json is at the package root — two dirs up from dist/migrations/
     const thisDir = path__default.default.dirname(node_url.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('migrations/auto-migrate.js', document.baseURI).href))));
     const migrationsJsonPath = path__default.default.resolve(thisDir, '..', '..', 'migrations.json');
-    if (!(await fsExtra.pathExists(migrationsJsonPath))) {
+    if (!(await fs.pathExists(migrationsJsonPath))) {
         util_logger.warn('migrations.json not found — skipping migrations');
         return;
     }
-    const migrationsJson = (await fsExtra.readJson(migrationsJsonPath));
+    const migrationsJson = (await fs.readJson(migrationsJsonPath));
     // Filter to pending migrations (version > lastVersion AND <= cliVersion).
     // CONVENTION: a migration's `version` field must equal the CLI release it
     // ships with (not the feature branch version). This ensures the `gt` check

package/dist/shadow/consumer-pkg.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
-const fsExtra = require('fs-extra');
+const fs = require('fs-extra');
 
 /**
  * The consumer pkg is a thin manifest. Z2H apps live inside a yarn
@@ -15,7 +15,7 @@ async function ensureConsumerPkg(pkgPath, pkg) {
         return { changed: false, pkg };
     }
     const next = { ...pkg, private: true };
-    await fsExtra.writeJson(pkgPath, next, { spaces: 2 });
+    await fs.writeJson(pkgPath, next, { spaces: 2 });
     return { changed: true, pkg: next };
 }
 

package/dist/shadow/gitignore.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
 const path = require('node:path');
-const fsExtra = require('fs-extra');
+const fs = require('fs-extra');
 const constants = require('../constants.js');
 
 const _interopDefault = e => e && e.__esModule ? e : { default: e };
@@ -16,8 +16,8 @@ const path__default = /*#__PURE__*/_interopDefault(path);
 async function ensureGitignore(consumerDir) {
     const gitignorePath = path__default.default.join(consumerDir, '.gitignore');
     let body = '';
-    if (await fsExtra.pathExists(gitignorePath)) {
-        body = await fsExtra.readFile(gitignorePath, 'utf8');
+    if (await fs.pathExists(gitignorePath)) {
+        body = await fs.readFile(gitignorePath, 'utf8');
     }
     const existing = new Set(body
         .split('\n')
@@ -29,7 +29,7 @@ async function ensureGitignore(consumerDir) {
     }
     const prefix = body.length && !body.endsWith('\n') ? '\n' : '';
     const block = `${prefix}\n# z2h-cli\n${missing.join('\n')}\n`;
-    await fsExtra.writeFile(gitignorePath, body + block);
+    await fs.writeFile(gitignorePath, body + block);
 }
 
 exports.ensureGitignore = ensureGitignore;

package/dist/shadow/merge-package-json.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
 const crypto = require('node:crypto');
-const fsExtra = require('fs-extra');
+const fs = require('fs-extra');
 const constants = require('../constants.js');
 const util_appName = require('../util/app-name.js');
 
@@ -59,7 +59,7 @@ function hashConsumerDeps(consumer) {
         .digest('hex');
 }
 async function writeShadowPkg(shadowPkgPath, shadow) {
-    await fsExtra.writeJson(shadowPkgPath, shadow, { spaces: 2 });
+    await fs.writeJson(shadowPkgPath, shadow, { spaces: 2 });
 }
 
 exports.buildShadowPkg = buildShadowPkg;

package/dist/shadow/metadata.js

@@ -1,20 +1,20 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
-const fsExtra = require('fs-extra');
+const fs = require('fs-extra');
 
 async function readMetadata(paths) {
-    if (!(await fsExtra.pathExists(paths.shadowMetadata))) {
+    if (!(await fs.pathExists(paths.shadowMetadata))) {
         return null;
     }
     try {
-        return (await fsExtra.readJson(paths.shadowMetadata));
+        return (await fs.readJson(paths.shadowMetadata));
     }
     catch {
         return null;
     }
 }
 async function writeMetadata(paths, meta) {
-    await fsExtra.writeJson(paths.shadowMetadata, meta, { spaces: 2 });
+    await fs.writeJson(paths.shadowMetadata, meta, { spaces: 2 });
 }
 
 exports.readMetadata = readMetadata;

package/dist/shadow/prepare.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
-const fsExtra = require('fs-extra');
+const fs = require('fs-extra');
 const util_logger = require('../util/logger.js');
 const util_appName = require('../util/app-name.js');
 const shadow_paths = require('./paths.js');
@@ -13,13 +13,13 @@ const shadow_sync = require('./sync.js');
 
 async function prepareShadow() {
     const paths = shadow_paths.resolveConsumerPaths(process.cwd());
-    if (!(await fsExtra.pathExists(paths.consumerPkg))) {
+    if (!(await fs.pathExists(paths.consumerPkg))) {
         throw new Error(`No package.json found in ${paths.consumerDir}`);
     }
-    if (!(await fsExtra.pathExists(paths.consumerSrcEntry))) {
+    if (!(await fs.pathExists(paths.consumerSrcEntry))) {
         throw new Error(`Consumer must have src/index.tsx (in ${paths.consumerDir})`);
     }
-    const rawConsumerPkg = (await fsExtra.readJson(paths.consumerPkg));
+    const rawConsumerPkg = (await fs.readJson(paths.consumerPkg));
     if (!rawConsumerPkg.name) {
         throw new Error('Consumer package.json must have a "name" field');
     }
@@ -29,7 +29,7 @@ async function prepareShadow() {
         util_logger.info(`ensured consumer pkg shape at ${paths.consumerPkg}`);
     }
     await shadow_gitignore.ensureGitignore(paths.consumerDir);
-    await fsExtra.ensureDir(paths.shadowDir);
+    await fs.ensureDir(paths.shadowDir);
     const metadata = await resolvePortAndMetadata(paths, appName);
     const port = metadata.port;
     util_logger.info(`preparing shadow at ${paths.shadowDir} (port ${port})`);

package/dist/shadow/scaffold.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
 const path = require('node:path');
-const fsExtra = require('fs-extra');
+const fs = require('fs-extra');
 
 const _interopDefault = e => e && e.__esModule ? e : { default: e };
 
@@ -110,14 +110,14 @@ const TSCONFIG_TEMPLATE = {
  * shadow dir is a deterministic function of the CLI version — no drift.
  */
 async function scaffoldShadow(paths, appName, port) {
-    await fsExtra.ensureDir(paths.shadowSrc);
-    await fsExtra.writeFile(paths.shadowWrapper, WRAPPER_TEMPLATE);
-    await fsExtra.writeFile(paths.shadowTridentrc, tridentrcTemplate(appName, port));
-    await fsExtra.writeFile(paths.shadowNvmrc, `${process.version}\n`);
-    await fsExtra.writeFile(paths.shadowDts, dtsFileTemplate());
-    await fsExtra.writeJson(paths.shadowTsconfig, TSCONFIG_TEMPLATE, { spaces: 2 });
+    await fs.ensureDir(paths.shadowSrc);
+    await fs.writeFile(paths.shadowWrapper, WRAPPER_TEMPLATE);
+    await fs.writeFile(paths.shadowTridentrc, tridentrcTemplate(appName, port));
+    await fs.writeFile(paths.shadowNvmrc, `${process.version}\n`);
+    await fs.writeFile(paths.shadowDts, dtsFileTemplate());
+    await fs.writeJson(paths.shadowTsconfig, TSCONFIG_TEMPLATE, { spaces: 2 });
     // Drop a stub README so contributors who open .zth/ know what they're looking at.
-    await fsExtra.writeFile(path__default.default.join(paths.shadowDir, 'README.md'), '# .zth/\nGenerated by z2h-cli. Do not edit — run `z2h-cli build` or `z2h-cli dev` to refresh.\n');
+    await fs.writeFile(path__default.default.join(paths.shadowDir, 'README.md'), '# .zth/\nGenerated by z2h-cli. Do not edit — run `z2h-cli build` or `z2h-cli dev` to refresh.\n');
 }
 
 exports.scaffoldShadow = scaffoldShadow;

package/dist/shadow/sync.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
-const fsExtra = require('fs-extra');
+const fs = require('fs-extra');
 const util_logger = require('../util/logger.js');
 const util_npm_install = require('../util/npm/install.js');
 const shadow_mergePackageJson = require('./merge-package-json.js');
@@ -15,14 +15,14 @@ async function syncShadow(paths, consumerPkg) {
     const shadow = shadow_mergePackageJson.buildShadowPkg(consumerPkg);
     await shadow_mergePackageJson.writeShadowPkg(paths.shadowPkg, shadow);
     const newHash = shadow_mergePackageJson.hashConsumerDeps(consumerPkg);
-    const oldHash = (await fsExtra.pathExists(paths.shadowDepsHash)) ? await fsExtra.readFile(paths.shadowDepsHash, 'utf8') : null;
+    const oldHash = (await fs.pathExists(paths.shadowDepsHash)) ? await fs.readFile(paths.shadowDepsHash, 'utf8') : null;
     if (oldHash !== newHash) {
         util_logger.info(oldHash ? 'consumer deps changed — yarn install' : 'first run — yarn install');
         // Yarn 4 is cache-first and non-interactive by default in non-TTY
         // contexts, so plain `yarn install` is all we need. runYarnInstall injects
         // the npm-broker token, preflights auth, and re-auths on a broker 401.
         await util_npm_install.runYarnInstall({ cwd: paths.consumerDir });
-        await fsExtra.writeFile(paths.shadowDepsHash, newHash);
+        await fs.writeFile(paths.shadowDepsHash, newHash);
     }
 }
 

package/dist/templates/app/claude-settings.js

@@ -11,7 +11,7 @@ var hooks = {
 			hooks: [
 				{
 					type: "command",
-					command: "if [ -f .zth/dev.pid ]; then kill $(cat .zth/dev.pid) 2>/dev/null; rm .zth/dev.pid; fi"
+					command: "if [ -f .zth/dev.pid ]; then PGID=$(ps -o pgid= -p $(cat .zth/dev.pid) 2>/dev/null | tr -d ' '); [ -n \"$PGID\" ] && kill -- -$PGID 2>/dev/null; rm -f .zth/dev.pid; fi"
 				}
 			]
 		}

package/dist/util/auth/auth-store.js

@@ -2,7 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
 const path = require('node:path');
 const os = require('node:os');
-const fsExtra = require('fs-extra');
+const fs = require('fs-extra');
 
 const _interopDefault = e => e && e.__esModule ? e : { default: e };
 
@@ -23,10 +23,10 @@ class Z2hAuthMissingError extends Error {
     }
 }
 async function readZthAuth() {
-    if (!(await fsExtra.pathExists(Z2H_AUTH_FILE))) {
+    if (!(await fs.pathExists(Z2H_AUTH_FILE))) {
         throw new Z2hAuthMissingError(Z2H_AUTH_FILE);
     }
-    const parsed = (await fsExtra.readJson(Z2H_AUTH_FILE));
+    const parsed = (await fs.readJson(Z2H_AUTH_FILE));
     if (!parsed.token) {
         throw new Error(`${Z2H_AUTH_FILE} is missing a "token" string field.`);
     }
@@ -43,7 +43,7 @@ async function readZthAuth() {
  */
 function tryReadAuthTokenSync() {
     try {
-        const parsed = fsExtra.readJsonSync(Z2H_AUTH_FILE);
+        const parsed = fs.readJsonSync(Z2H_AUTH_FILE);
         return parsed?.token ?? null;
     }
     catch {