@minnovate/shadow-publisher 0.17.2 → 0.18.1

package/dist/claude/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "git-publisher",
   "displayName": "Git Publisher",
-  "version": "0.17.2",
+  "version": "0.18.1",
   "description": "Publish an app folder's Git history to the serverless Git publishing backend and keep it updated (\"publish my app\", \"update my app\", \"fetch the engineered version\").",
   "author": { "name": "git-publisher project" },
   "keywords": ["git", "publish", "deploy", "serverless"]

package/dist/claude/plugin/skills/publish-app/SKILL.md

@@ -203,6 +203,10 @@ following, for when the person asks not to wait.
     moment between the merge and the publish. Run `publisher sync . --json` once more
     (`publication.next.command` says the same).
   - `REF_FORBIDDEN`: the user may not publish this branch; tell them which branch and stop.
+    When it comes as `error.code` with a `hint`, a limit of the organization refused it: tell them
+    the reason and whom to ask that the `hint` gives, and stop.
+    When `error.details.feature` names a feature, that feature is off for the organization: pass on
+    the `hint` as it is, and stop. Nobody in the organization can turn it on, so name nobody to ask.
   - `MISSING_OBJECTS`: the local copy is incomplete (for example a shallow clone). Tell the user to
     publish from a complete copy: `publisher checkout <new folder> --repo <id>`.
   - `LIMIT_EXCEEDED`, `PACK_INVALID`: quote the message; suggest removing very large files from the

package/dist/claude/plugin/skills/sync-app/SKILL.md

@@ -50,7 +50,8 @@ publisher answer <question id>=<value> --json
 
 A value that is not an option is refused before anything is sent; `error.details.questions` lists
 the choices. Exit 4 means this sign-in may not answer (an owner or admin can, or the app's creator for the
-first preparation after an adoption); exit 3 means ask
+first preparation after an adoption); when it carries a `hint`, a limit refused it, so tell them the reason
+and whom to ask that the `hint` gives. Exit 3 means ask
 again. Then `publisher follow . --publication <id> --until-change --timeout 100 --json` to see it go live, telling them each step as `publish-app` step 4 says.
 
 ## When it did not go live because of a fault on our side
@@ -74,7 +75,7 @@ publisher history --json                  # the versions that went live, newest
 publisher go-back <version> --json        # ask the person first; puts that version's code back
 publisher suggestions --json              # what colleagues asked for, still open
 publisher suggestion decline <id> --json  # when the person does not want one
-publisher share invited --add ann@example.com --json   # who can open it
+publisher share emails --add ann@example.com --json   # who can open it
 publisher columns <id> --json             # the column names of connected data, before code reads it
 publisher data add <sheet link> --app <app> --name "<name>" --json   # a Google sheet the app reads
 publisher data remove <id> --app <app> --json                        # the app stops reading that data
@@ -90,7 +91,7 @@ terminal, do what it says with the command that does the same thing:
 | `app_history` / `go_back`         | `publisher history --json` / `publisher go-back <version> --json` |
 | `list_starters` / `use_starter`   | `publisher starters` / `publisher start <starter>`              |
 | `resolve_suggestion`              | `publisher suggestion done\|decline <id> --json`               |
-| `share_app`                       | `publisher share <access> --json`                               |
+| `share_app`                       | `publisher share <app-rule> --json`                             |
 | `list_apps`                       | `publisher list --json`                                         |
 | `data_columns`                    | `publisher columns <id> --json`                                 |
 | `connect_data_source`             | `publisher data add <sheet link> --app <app> --name "<name>" --json` |

package/dist/publisher.cjs

@@ -226,7 +226,7 @@ var PublisherError = class _PublisherError extends Error {
   }
 };
 
-// ../../../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/util.js
+// ../../../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/util.js
 function getEnumValues(entries) {
   const numericValues = Object.values(entries).filter((v) => typeof v === "number");
   const values = Object.entries(entries).filter(([k, _]) => numericValues.indexOf(+k) === -1).map(([_, v]) => v);
@@ -461,6 +461,18 @@ function prefixIssues(path, issues) {
 function unwrapMessage(message) {
   return typeof message === "string" ? message : message?.message;
 }
+function sizeCaps(defChecks) {
+  const caps = [];
+  for (const ch of defChecks ?? []) {
+    const d = ch._zod.def;
+    if (!/_(length|size)$|_equals$/.test(d.check))
+      break;
+    const max = d.maximum ?? d.length ?? d.size;
+    if (max >= 0)
+      caps.push([max, ch]);
+  }
+  return caps;
+}
 function attachSchema(issues, start2, inst) {
   var _a2;
   for (let i = start2; i < issues.length; i++) {
@@ -636,7 +648,7 @@ function installLazyProp(inst, key, make, enumerable) {
   });
 }
 
-// ../../../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/core.js
+// ../../../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/core.js
 var _a;
 var _zodDesc = { value: void 0, enumerable: false };
 var _E = "captureStackTrace" in Error ? Error : null;
@@ -748,7 +760,7 @@ function config(newConfig) {
   return globalConfig;
 }
 
-// ../../../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/errors.js
+// ../../../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/errors.js
 function _getMessage() {
   const internals = this._zod;
   internals.message ?? (internals.message = JSON.stringify(internals.def, jsonStringifyReplacer, 2));
@@ -793,7 +805,7 @@ var $ZodRealError = $constructor("$ZodError", initializer, void 0, {
   Parent: Error
 });
 
-// ../../../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/parse.js
+// ../../../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/parse.js
 var _parse = (_Err) => {
   const fn = (schema, value, _ctx, _params) => {
     const ctx = _ctx ? { ..._ctx, async: false } : { async: false };
@@ -864,7 +876,7 @@ var _safeParseAsync = (_Err) => async (schema, value, _ctx) => {
 };
 var safeParseAsync = /* @__PURE__ */ _safeParseAsync($ZodRealError);
 
-// ../../../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/regexes.js
+// ../../../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/regexes.js
 var duration = /^P(?:(\d+W)|(?!.*W)(?=\d|T\d)(\d+Y)?(\d+M)?(\d+D)?(T(?=\d)(\d+H)?(\d+M)?(\d+([.,]\d+)?S)?)?)$/;
 var httpProtocol = /^https?$/;
 var dateSource = `(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))`;
@@ -892,7 +904,7 @@ var anyString = /^[\s\S]{0,}$/;
 var number = /^-?\d+(?:\.\d+)?$/;
 var boolean = /^(?:true|false)$/i;
 
-// ../../../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/checks.js
+// ../../../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/checks.js
 var $ZodCheck = /* @__PURE__ */ $constructor("$ZodCheck", (inst, def) => {
   var _a2;
   inst._zod ?? (inst._zod = {});
@@ -1081,14 +1093,14 @@ var $ZodCheckRegex = /* @__PURE__ */ $constructor("$ZodCheckRegex", (inst, def)
   };
 });
 
-// ../../../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/versions.js
+// ../../../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/versions.js
 var version = {
   major: 4,
   minor: 6,
-  patch: 5
+  patch: 7
 };
 
-// ../../../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/schemas.js
+// ../../../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/schemas.js
 var $ZodType = /* @__PURE__ */ $constructor("$ZodType", (inst, def) => {
   var _a2;
   inst ?? (inst = {});
@@ -1423,6 +1435,29 @@ var $ZodUnknown = /* @__PURE__ */ $constructor("$ZodUnknown", (inst, def) => {
   $ZodType.init(inst, def);
   inst._zod.parse = (payload) => payload;
 });
+function capSize(inst, size) {
+  const caps = sizeCaps(inst._zod.def.checks);
+  if (!caps.length)
+    return;
+  const cap = Math.min(...caps.map((c) => c[0]));
+  const parse3 = inst._zod.parse;
+  inst._zod.parse = (payload, ctx) => {
+    const n = size(payload.value);
+    if (n > cap && !ctx?.skipChecks && ctx?.direction !== "backward") {
+      for (const [max, ch] of sizeCaps(inst._zod.def.checks)) {
+        if (n > max && ch._zod.def.when(payload)) {
+          const start2 = payload.issues.length;
+          ch._zod.check(payload);
+          payload.issues[start2].continue = false;
+          attachSchema(payload.issues, start2, inst);
+          return payload;
+        }
+      }
+    }
+    return parse3(payload, ctx);
+  };
+}
+var arraySize = (input) => Array.isArray(input) ? input.length : -1;
 function handleArrayResult(result, final, index) {
   if (result.issues.length) {
     final.issues.push(...prefixIssues(index, result.issues));
@@ -1466,6 +1501,7 @@ var $ZodArray = /* @__PURE__ */ $constructor("$ZodArray", (inst, def) => {
     }
     return payload;
   };
+  capSize(inst, arraySize);
 });
 function handlePropertyResult(result, final, key, input, optin, optout) {
   const isPresent = key in input;
@@ -2098,7 +2134,7 @@ function handleRefineResult(result, payload, input, inst) {
   }
 }
 
-// ../../../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/locales/en.js
+// ../../../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/locales/en.js
 var error = () => {
   const Sizable = {
     string: { unit: "characters", verb: "to have" },
@@ -2223,7 +2259,7 @@ function en_default() {
   };
 }
 
-// ../../../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/core/api.js
+// ../../../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/api.js
 function snapshotChecks(def) {
   if (def.checks)
     def.checks = [...def.checks];
@@ -2369,7 +2405,7 @@ function _refine(Class, fn, _params) {
   return schema;
 }
 
-// ../../../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/mini/schemas.js
+// ../../../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/mini/schemas.js
 var ZodMiniType = /* @__PURE__ */ $constructor("ZodMiniType", (inst, def) => {
   if (!inst._zod)
     throw new Error("Uninitialized schema in ZodMiniType.");
@@ -2614,7 +2650,7 @@ function refine(fn, _params = {}) {
   return _refine(ZodMiniCustom, fn, _params);
 }
 
-// ../../../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/mini/iso.js
+// ../../../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/mini/iso.js
 var iso_exports = {};
 __export(iso_exports, {
   ZodMiniISODate: () => ZodMiniISODate,
@@ -5185,7 +5221,7 @@ var PortalSession = class {
           continue;
         }
       }
-      return { ...answer2, merged: answer2.status === 403 ? mergedSay(answer2.body) : null };
+      return { ...answer2, say: answer2.status === 403 ? mergedSay(answer2.body) ?? featureOffSay(answer2.body) : null };
     }
   }
 };
@@ -5219,6 +5255,21 @@ function mergedSay(body) {
   const say = isRecord(details) ? details["say"] : void 0;
   return typeof say === "string" && say !== "" ? say : null;
 }
+var TERMINAL_FEATURE = "terminal";
+function featureOffSay(body) {
+  const error2 = isRecord(body) ? body["error"] : void 0;
+  if (!isRecord(error2) || error2["code"] !== "feature-unavailable") {
+    return null;
+  }
+  return featureOffWords(isRecord(error2["details"]) ? error2["details"]["feature"] : void 0);
+}
+function featureOffWords(feature) {
+  if (feature === TERMINAL_FEATURE) {
+    return "The publisher command is not available for this organization, and nobody in it can turn it on.";
+  }
+  const named = typeof feature === "string" && feature !== "" ? ` (the feature "${feature}")` : "";
+  return `This is not available for this organization${named}, and nobody in it can turn it on.`;
+}
 
 // ../client/src/portal-refusal.ts
 function portalRefusalCode(body) {
@@ -5235,6 +5286,16 @@ function portalRefusalCode(body) {
   const { code, message } = error2;
   return typeof code === "string" && code !== "" && typeof message === "string" ? code : null;
 }
+function portalRefusalLimit(body) {
+  const error2 = isRecord(body) ? body["error"] : null;
+  const details = isRecord(error2) ? error2["details"] : null;
+  if (!isRecord(details)) {
+    return null;
+  }
+  const text = (value) => typeof value === "string" && value !== "" ? value : null;
+  const limit = { permission: text(details["permission"]), reason: text(details["reason"]), contact: text(details["contact"]) };
+  return limit.permission === null && limit.reason === null && limit.contact === null ? null : limit;
+}
 
 // ../client/src/application.ts
 var APPLICATION_CREATION = "application-creation";
@@ -5258,7 +5319,12 @@ async function createApplication(input, opts) {
       throw new PublisherError("UNAUTHORIZED", 'the portal did not accept this credential; run "publisher login" again');
     }
     if (answer2.status === 403) {
-      throw new PublisherError("FORBIDDEN", answer2.merged ?? `the portal refused to make an application here (${code || "forbidden"})`);
+      const limit = portalRefusalLimit(answer2.body);
+      throw new PublisherError(
+        "FORBIDDEN",
+        answer2.say ?? `the portal refused to make an application here (${limit?.permission ?? (code || "forbidden")})`,
+        limit === null ? {} : { details: limit }
+      );
     }
     if (answer2.status === 409 && REFUSALS[code] !== void 0) {
       throw new PublisherError(REFUSALS[code], `the portal refused the repository (${code})`, { details: { portal: code } });
@@ -5491,7 +5557,7 @@ async function followRun(input, opts) {
       return { kind: "unavailable", reason: "no-route" };
     }
     if (answer2.status === 403) {
-      return { kind: "forbidden", say: answer2.merged };
+      return { kind: "forbidden", say: answer2.say, limit: portalRefusalLimit(answer2.body) };
     }
     if (answer2.status === 200) {
       const run2 = soleRun(answer2.body);
@@ -5601,7 +5667,7 @@ async function call(input, opts, body) {
     return { kind: "unauthorized" };
   }
   if (answer2.status === 403) {
-    return { kind: "forbidden", say: answer2.merged };
+    return { kind: "forbidden", say: answer2.say, limit: portalRefusalLimit(answer2.body) };
   }
   if (answer2.status === 409) {
     return { kind: "moved-on" };
@@ -5706,7 +5772,7 @@ async function runCreatorTool(input, opts) {
     return { kind: "unauthorized" };
   }
   if (answer2.status === 403) {
-    return { kind: "forbidden", say: answer2.merged };
+    return { kind: "forbidden", say: answer2.say, limit: portalRefusalLimit(answer2.body) };
   }
   if (answer2.status === 404) {
     return { kind: "unavailable", detail: "the portal does not serve this tool" };
@@ -5719,7 +5785,8 @@ async function runCreatorTool(input, opts) {
     return { kind: "malformed", detail: "an answer with no say and next" };
   }
   const { say, next, isError, ...fields } = body;
-  return { kind: "answer", answer: { say, next, isError: isError === true, fields } };
+  const told = isError === true && fields["code"] === "feature-unavailable" ? featureOffWords(fields["feature"]) : say;
+  return { kind: "answer", answer: { say: told, next, isError: isError === true, fields } };
 }
 
 // ../client/src/onboard.ts
@@ -6997,6 +7064,30 @@ async function discoverEndpoint(portal, fetchImpl = fetch) {
   return endpoint;
 }
 
+// src/limited.ts
+var REFUSED = /* @__PURE__ */ new Set(["REF_FORBIDDEN", "FORBIDDEN"]);
+var Limited = class _Limited {
+  /** The lines for a refusal with `code` and `details`, or null when it is not a permission's or names no reason and no contact. */
+  static hint(code, details) {
+    const feature = details?.["feature"];
+    if (REFUSED.has(code) && typeof feature === "string" && feature !== "") {
+      return featureOffWords(feature);
+    }
+    const lines = REFUSED.has(code) ? _Limited.lines(details) : [];
+    return lines.length === 0 ? null : lines.join("\n  ");
+  }
+  /** The same words in one line, for a sentence that a 403 ends, such as the one `follow` relays; '' for none. */
+  static inline(details) {
+    return _Limited.lines(details).join(" ");
+  }
+  static lines(details) {
+    const text = (value) => typeof value === "string" && value.trim() !== "" ? value.trim() : null;
+    const reason = text(details?.["reason"]);
+    const contact = text(details?.["contact"]);
+    return [reason === null ? null : `The organization's reason: ${reason}`, contact === null ? null : `Ask ${contact}.`].filter((line) => line !== null);
+  }
+};
+
 // src/portal.ts
 var confirmed = /* @__PURE__ */ new Map();
 async function confirmedPortal(endpoint, opts = {}) {
@@ -7235,8 +7326,11 @@ function progressHint(r, portal, answerable = false) {
       return inPortal(portal, "Published. This portal cannot show progress in the terminal yet.", "Follow it");
     case "unauthorized":
       return inPortal(portal, "Published, but the portal did not accept this sign-in (run publisher login).", "Follow it");
-    case "forbidden":
-      return inPortal(portal, r.say === null ? "Published, but the portal would not show this sign-in the run." : `Published. ${r.say}`, "Follow it");
+    case "forbidden": {
+      const limited = Limited.inline(r.limit);
+      const lead = r.say === null ? "Published, but the portal would not show this sign-in the run." : `Published. ${r.say}`;
+      return inPortal(portal, limited === "" ? lead : `${lead} ${limited}`, "Follow it");
+    }
     case "malformed":
       return inPortal(portal, `Published, but the portal's answer about the run could not be read (${r.detail}).`, "Follow it");
   }
@@ -7922,7 +8016,7 @@ async function questionAt(p, endpoint, repoId, opts = {}) {
   if ("reason" in at) {
     return at;
   }
-  return shown(at.portal, await p.readPreparation({ portal: at.portal, repoId }));
+  return shown(at.portal, await p.readPreparation({ portal: at.portal, repoId }), REFUSED2.read);
 }
 async function answerAt(p, endpoint, repoId, specs, opts = {}) {
   const answers = parseSpecs(specs);
@@ -7930,7 +8024,7 @@ async function answerAt(p, endpoint, repoId, specs, opts = {}) {
   if ("reason" in at) {
     return at;
   }
-  const read2 = shown(at.portal, await p.readPreparation({ portal: at.portal, repoId }));
+  const read2 = shown(at.portal, await p.readPreparation({ portal: at.portal, repoId }), REFUSED2.read);
   if (read2.kind !== "view") {
     return read2;
   }
@@ -7949,7 +8043,7 @@ async function answerAt(p, endpoint, repoId, specs, opts = {}) {
       throw new PublisherError("INVALID_REQUEST", `"${value}" is not one of ${values.join(", ")} for "${id}"`, { details: { questions: read2.questions } });
     }
   }
-  return shown(at.portal, await p.answerPreparation({ portal: at.portal, repoId, id: read2.preparation.id, revision: read2.preparation.revision, answers }));
+  return shown(at.portal, await p.answerPreparation({ portal: at.portal, repoId, id: read2.preparation.id, revision: read2.preparation.revision, answers }), REFUSED2.answer);
 }
 async function retryAt(p, endpoint, repoId, opts = {}) {
   const read2 = await questionAt(p, endpoint, repoId, opts);
@@ -7962,7 +8056,7 @@ async function retryAt(p, endpoint, repoId, opts = {}) {
   if (!read2.preparation.canRetry) {
     throw new PublisherError("LOCAL_STATE", "this version cannot be tried again: only one that stopped because of a fault on our side can, three times at most");
   }
-  const tried = shown(read2.portal, await p.retryPreparation({ portal: read2.portal, repoId, id: read2.preparation.id, revision: read2.preparation.revision }));
+  const tried = shown(read2.portal, await p.retryPreparation({ portal: read2.portal, repoId, id: read2.preparation.id, revision: read2.preparation.revision }), REFUSED2.retry);
   return tried.kind === "view" ? { ...tried, hint: "It is being tried again. Run: publisher follow, or watch it in the portal." } : tried;
 }
 function parseSpecs(specs) {
@@ -7995,7 +8089,12 @@ async function portalAt(endpoint, opts) {
       };
   }
 }
-function shown(portal, r) {
+var REFUSED2 = {
+  read: "the portal will not show this sign-in the preparation in this organization",
+  answer: "the portal will not let this sign-in answer for this organization (an owner or admin can, or the app's creator for the first preparation after an adoption)",
+  retry: "the portal will not let this sign-in try it again in this organization (an owner or admin can, or the app's creator, except for the first preparation after an adoption)"
+};
+function shown(portal, r, refused) {
   switch (r.kind) {
     case "view": {
       const { questions, ...preparation } = r.view;
@@ -8008,10 +8107,7 @@ function shown(portal, r) {
     case "unauthorized":
       throw new PublisherError("UNAUTHORIZED", "the portal did not accept this sign-in; run publisher login");
     case "forbidden":
-      throw new PublisherError(
-        "FORBIDDEN",
-        r.say ?? "the portal will not let this sign-in answer for this organization (an owner or admin can, or the app's creator for the first preparation after an adoption)"
-      );
+      throw new PublisherError("FORBIDDEN", r.say ?? refused, r.limit === null ? {} : { details: r.limit });
     case "unavailable":
       throw new PublisherError("UNAVAILABLE", `the portal could not be asked: ${r.detail}`, { retryable: true });
     case "malformed":
@@ -8094,7 +8190,11 @@ async function creatorTool(p, endpoint, tool, args, opts = {}) {
     case "unauthorized":
       throw new PublisherError("UNAUTHORIZED", "the portal did not accept this sign-in; run publisher login");
     case "forbidden":
-      throw new PublisherError("FORBIDDEN", result.say ?? "the portal will not let this sign-in do that in this organization");
+      throw new PublisherError(
+        "FORBIDDEN",
+        result.say ?? "the portal will not let this sign-in do that in this organization",
+        result.limit === null ? {} : { details: result.limit }
+      );
     case "unavailable":
       throw new PublisherError("UNAVAILABLE", `the portal could not be asked: ${result.detail}`, { retryable: true });
     case "malformed":
@@ -8177,15 +8277,23 @@ var columns = {
   git: false,
   run: (inv) => run(inv, void 0, "data_columns", inv.cmd[1] === void 0 ? {} : { id: inv.cmd[1] })
 };
+var APP_RULES = ["members", "emails", "link"];
+function shareArgs(cmd, app, add, remove) {
+  return { app, appRule: appRuleOf(cmd), add, remove };
+}
+function appRuleOf(cmd) {
+  const named = APP_RULES.find((rule) => rule === cmd[1]);
+  if (named === void 0) {
+    throw new PublisherError("INVALID_REQUEST", "share takes members, emails or link");
+  }
+  return named;
+}
 var share = {
   git: false,
   async run(inv) {
-    const access2 = inv.cmd[1];
-    if (access2 === void 0) {
-      throw new PublisherError("INVALID_REQUEST", "share takes organization, invited or anyone-with-link");
-    }
+    appRuleOf(inv.cmd);
     const { dir, app } = await folderApp(inv);
-    return run(inv, dir, "share_app", { app, access: access2, add: listFlag(inv, "add"), remove: listFlag(inv, "remove") });
+    return run(inv, dir, "share_app", shareArgs(inv.cmd, app, listFlag(inv, "add"), listFlag(inv, "remove")));
   }
 };
 function dataCall(cmd, app, name) {
@@ -8566,7 +8674,7 @@ Usage:
                                                         (the data and who can open the app stay as they are)
   publisher suggestions                                 what colleagues suggested for this folder's app, still open
   publisher suggestion done|decline <id> [--run <id>]   close one; sync --answers <id> closes it with that publication
-  publisher share organization|invited|anyone-with-link [--add <emails>] [--remove <emails>]
+  publisher share members|emails|link [--add <emails>] [--remove <emails>]
                                                         who can open this folder's app; new invitees get the link by mail
   publisher columns [<id>]                              the column names of connected data, for the code that reads it;
                                                         its first rows only to an owner or admin who allowed that
@@ -8667,7 +8775,7 @@ main(process.argv.slice(2)).then(
   (e) => {
     const json = process.argv.includes("--json");
     if (e instanceof PublisherError) {
-      const moved = Moved.hint(e.code, e.details);
+      const moved = Moved.hint(e.code, e.details) ?? Limited.hint(e.code, e.details);
       const payload = { error: { code: e.code, message: e.message, retryable: e.retryable, details: e.details ?? null }, ...moved === null ? {} : { hint: moved } };
       const hint = e.code === "NETWORK" ? `
   if this folder's service moved, "publisher doctor" says where to` : moved === null ? "" : `

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minnovate/shadow-publisher",
-  "version": "0.17.2",
+  "version": "0.18.1",
   "description": "publisher: publish an app's Git history to the serverless Git backend",
   "license": "Apache-2.0",
   "type": "module",