@tenderprompt/cli 0.1.16 → 0.1.18

package/README.md

@@ -39,6 +39,8 @@ session:
 - inspect artifact-scoped analytics without SQL or platform credentials
 - inspect artifact-scoped app database tables, schema, and bounded read-only
   query output
+- share app setup between Tender accounts without copying customer data,
+  analytics history, app database rows, secrets, or release history
 - run server-validated chart specs and export aggregate rows
 - generate starter analytics suggestions
 - create, list, update, and delete saved analytics dashboards and charts, with
@@ -129,6 +131,9 @@ tender capabilities --json
 tender app list --json
 tender app create --name "Exit Intent Widget" --json
 tender app create --name "Exit Intent Widget" --init --dir ./widget --preview --json
+tender app share create artifact_123 --expires 7d --claims 1 --json
+tender app share inspect tok_share_123 --json
+tender app claim tok_share_123 --dir ./widget --confirm source-and-setup --json
 tender app update artifact_123 --name "Sale Widget" --json
 tender app init artifact_123 --dir ./widget --preview --json
 tender app bindings outbound --id shopify --host admin.shopify.com --dry-run --json
@@ -145,6 +150,30 @@ tender app db query artifact_123 --env published --sql "select * from votes limi
 tender app db query artifact_123 --env published --sql "select * from votes order by created_at" --limit 50 --offset 50 --json
 ```
 
+## Shared app setup
+
+Use this for agency-to-customer or collaborator handoffs where the recipient
+should get the source and reusable setup, not the source account's data.
+
+Agency side:
+
+```bash
+tender app share create artifact_123 --expires 7d --claims 1 --json
+```
+
+Recipient side:
+
+```bash
+tender app share inspect tok_share_123 --json
+tender app claim tok_share_123 --dir ./exit-intent-widget
+tender app claim tok_share_123 --dir ./exit-intent-widget --confirm source-and-setup --json
+```
+
+Claim copies source code, app setup, and analytics dashboard/chart definitions.
+It does not copy analytics events, aggregates, exports, app database rows,
+secrets, environment values, release history, or ongoing access to the source
+artifact.
+
 ## Analytics
 
 Analytics commands are artifact-scoped and go through Tender's server-side

package/dist/index.js

@@ -11,7 +11,7 @@ const CLI_PACKAGE_NAME = "@tenderprompt/cli";
 const UNKNOWN_CLI_VERSION = "0.0.0";
 const RECOMMENDED_TENDER_PROMPT_SKILL = {
     name: "tender-prompt",
-    version: "0.1.2",
+    version: "0.1.4",
     source: "git@github.com:tenderprompt/skills.git",
     path: "skills/tender-prompt/SKILL.md",
     updateHint: "Refresh the tender-prompt skill from git@github.com:tenderprompt/skills.git when the local skill version is older.",
@@ -82,11 +82,19 @@ Commands:
   tender auth login --device
                              Authorize this machine with a browser-approved device flow
   tender auth status         Show whether a Tender API token is available
+  tender playbooks list      List remote Tender Prompt playbook metadata
+  tender playbooks get <id>  Fetch one remote playbook body on demand
+  tender playbooks file <id> --path <path>
+                             Fetch one playbook reference file on demand
   tender app list            List Tender App records visible to the current token
   tender app create --name <name>
                              Create a new Tender App in the current account
   tender app update <app-id> --name <name>
                              Update app metadata
+  tender app share create <app-id>
+                             Create a claimable app setup share token
+  tender app claim <token>
+                             Claim shared app setup into the current account
   tender app init <app-id>
                              Bootstrap a checkout for local agent work
   tender app validate <app-id>
@@ -134,10 +142,15 @@ Examples:
   tender capabilities --json
   tender auth login --device --profile edit-preview --artifact artifact_123 --ttl 7d
   tender auth status --json
+  tender playbooks list --json
+  tender playbooks get recharge-bundle-builder --json
+  tender playbooks file recharge-bundle-builder --path references/recharge-payloads.md --json
   tender app list --json
   tender app create --name "Exit Intent Widget" --json
   tender app create --name "Exit Intent Widget" --init --dir ./widget --preview --json
   tender app update artifact_123 --name "Sale Widget" --json
+  tender app share create artifact_123 --expires 7d --claims 1 --json
+  tender app claim tok_share_123 --dir ./widget --confirm source-and-setup --json
   tender app init artifact_123 --dir ./widget --preview --json
   tender app validate artifact_123 --json
   tender app build artifact_123 --commit $(git rev-parse HEAD) --json
@@ -203,6 +216,49 @@ Examples:
   tender auth status
   tender auth status --profile publish --json`;
 }
+function playbooksHelp() {
+    return `Usage: tender playbooks <command> [options]
+
+Commands:
+  tender playbooks list
+                             List remote playbook metadata only
+  tender playbooks get <playbook-id>
+                             Fetch one playbook body and reference index
+  tender playbooks file <playbook-id> --path <path>
+                             Fetch one playbook reference file
+
+Examples:
+  tender playbooks list --json
+  tender playbooks get recharge-bundle-builder --json
+  tender playbooks file recharge-bundle-builder --path references/recharge-payloads.md --json`;
+}
+function playbooksListHelp() {
+    return `Usage: tender playbooks list [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Lists compact metadata for all remote Tender Prompt playbooks. This command
+does not write playbooks to disk.
+
+Examples:
+  tender playbooks list --json`;
+}
+function playbooksGetHelp() {
+    return `Usage: tender playbooks get <playbook-id> [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Fetches one remote playbook body plus a reference-file index. This command
+prints session-only context and does not write to the checkout.
+
+Examples:
+  tender playbooks get recharge-bundle-builder --json`;
+}
+function playbooksFileHelp() {
+    return `Usage: tender playbooks file <playbook-id> --path <references/file.md> [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Fetches one playbook reference file. Paths are limited to references/*.md.
+This command does not write playbooks to disk.
+
+Examples:
+  tender playbooks file recharge-bundle-builder --path references/recharge-payloads.md --json`;
+}
 function appHelp() {
     return `Usage: tender app <command> [options]
 
@@ -212,6 +268,14 @@ Commands:
                              Create a new Tender App, optionally initialize source, and preview
   tender app update <app-id> --name <name>
                              Update app metadata
+  tender app share create <app-id>
+                             Create a claimable app setup share token
+  tender app share inspect <token>
+                             Inspect a shared app setup token without claiming it
+  tender app share revoke <share-id>
+                             Revoke a shared app setup token
+  tender app claim <token>
+                             Claim shared app setup into the current account
   tender app init <app-id>
                              Bootstrap context files and the tender Git remote
   tender app validate <app-id>
@@ -281,6 +345,9 @@ Examples:
   tender app create --name "Exit Intent Widget" --json
   tender app create --name "Exit Intent Widget" --init --dir ./widget --preview --json
   tender app update artifact_123 --name "Sale Widget" --json
+  tender app share create artifact_123 --expires 7d --claims 1 --json
+  tender app share inspect tok_share_123 --json
+  tender app claim tok_share_123 --dir ./widget --confirm source-and-setup --json
   tender app init artifact_123 --dir ./widget --preview --json
   tender app validate artifact_123 --json
   tender app build artifact_123 --commit $(git rev-parse HEAD) --json
@@ -316,6 +383,53 @@ Examples:
   tender app doctor --json
   tender app git remote artifact_123 --ttl 7d --json`;
 }
+function appShareHelp() {
+    return `Usage: tender app share <command> [options]
+
+Commands:
+  tender app share create <app-id>    Create a claimable app setup token
+  tender app share inspect <token>    Inspect token metadata before claiming
+  tender app share revoke <share-id>  Revoke a share token
+
+Examples:
+  tender app share create artifact_123 --expires 7d --claims 1 --json
+  tender app share inspect tok_share_123 --json
+  tender app share revoke app_setup_share_123 --json`;
+}
+function appShareCreateHelp() {
+    return `Usage: tender app share create <app-id> [--expires <7d|24h>] [--claims <n>] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Creates a claimable app setup token. The share includes source code, app setup,
+and analytics dashboard/chart definitions. It does not include customer data,
+analytics history, app database rows, secrets, or release history.
+
+Examples:
+  tender app share create artifact_123 --expires 7d --claims 1 --json`;
+}
+function appShareInspectHelp() {
+    return `Usage: tender app share inspect <token> [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Examples:
+  tender app share inspect tok_share_123 --json`;
+}
+function appShareRevokeHelp() {
+    return `Usage: tender app share revoke <share-id> [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Examples:
+  tender app share revoke app_setup_share_123 --json`;
+}
+function appClaimHelp() {
+    return `Usage: tender app claim <token> --dir <path> [--name <name>] [--confirm source-and-setup] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Claims shared app setup into the authenticated Tender account, creates a new app,
+materializes source files into the local directory, and configures the Tender Git
+remote. Without --confirm source-and-setup, the command only previews what will
+happen.
+
+Examples:
+  tender app claim tok_share_123 --dir ./exit-intent-widget
+  tender app claim tok_share_123 --dir ./exit-intent-widget --confirm source-and-setup --json`;
+}
 function capabilitiesHelp() {
     return `Usage: tender capabilities [--json]
 
@@ -722,7 +836,7 @@ Options:
   --token <token>    Tender API token. Precedence: --token, explicit --profile, TENDER_API_TOKEN, saved default profile.
   --profile <name>   Local config profile name. Defaults to the saved default profile.
   --ttl <value>      Deprecated for Tender-hosted Git remotes; accepted for compatibility.
-  --json             Emit stable JSON for coding agents.
+  --json             Emit stable JSON for coding agents without printing Git passwords.
 
 Examples:
   tender app git remote artifact_123 --ttl 7d --json
@@ -748,11 +862,12 @@ Examples:
   tender app git setup artifact_123 --dir ./widget --dry-run --json`;
 }
 function gitCredentialHelp() {
-    return `Usage: tender app git credential <app-id> [get|store|erase] [--base-url <url>] [--token <token>] [--profile <name>] [--ttl <7d|14d|30d>] [--remote-url <url>]
+    return `Usage: tender app git credential <app-id> [get|store|erase] [--base-url <url>] [--token <token>] [--profile <name>] [--ttl <7d|14d|30d>] [--remote-url <url>] [--json]
 
 This command is intended for Git's credential.helper protocol. It prints a
-Tender API-token username/password pair only for matching get requests. Do not
-run it manually unless you are debugging Git credential-helper behavior.
+username/password pair only for matching get requests. Do not run it manually
+unless you are debugging Git credential-helper behavior.
+JSON output reports whether a password is available without printing it.
 
 Examples:
   tender app git credential artifact_123 get
@@ -916,6 +1031,14 @@ function tenderCliCapabilities() {
             latestRunner: "npm exec --yes @tenderprompt/cli@latest --",
         },
         recommendedSkill: RECOMMENDED_TENDER_PROMPT_SKILL,
+        playbooks: {
+            mode: "remote_progressive_disclosure",
+            metadataCommand: "tender playbooks list --json",
+            entryCommand: "tender playbooks get <playbook-id> --json",
+            fileCommand: "tender playbooks file <playbook-id> --path <path> --json",
+            persistence: "session_only",
+            writesToCheckout: false,
+        },
         description: "Agent-safe Tender App source, lifecycle, analytics, and local scaffold controls.",
         discovery: {
             primary: "npm exec --yes @tenderprompt/cli@latest -- capabilities --json",
@@ -923,8 +1046,11 @@ function tenderCliCapabilities() {
                 "tender --version",
                 "tender --help",
                 "tender auth --help",
+                "tender playbooks --help",
                 "tender app --help",
                 "tender app agent heartbeat --help",
+                "tender app share --help",
+                "tender app claim --help",
                 "tender app analytics --help",
                 "tender app db --help",
                 "tender app bindings outbound --help",
@@ -939,6 +1065,20 @@ function tenderCliCapabilities() {
                     "tender auth login --device --profile edit-preview --artifact <artifact-id> --ttl 7d --json",
                 ],
             },
+            {
+                name: "playbook_discovery",
+                when: "Before planning non-trivial Tender App or widget work.",
+                commands: [
+                    "tender playbooks list --json",
+                    "tender playbooks get <playbook-id> --json",
+                    "tender playbooks file <playbook-id> --path references/<file>.md --json",
+                ],
+                notes: [
+                    "List returns metadata only; use it to decide whether a playbook is relevant.",
+                    "Fetch full playbooks and reference files only on demand.",
+                    "Do not write fetched playbook contents into the checkout or install them as skills.",
+                ],
+            },
             {
                 name: "create_new_app_with_preview",
                 when: "When the user wants a new Tender App that is immediately visible.",
@@ -964,6 +1104,20 @@ function tenderCliCapabilities() {
                     "Use context fetch only when you already have a checkout and only need AGENTS.md, skills, or Tender context refreshed.",
                 ],
             },
+            {
+                name: "share_app_setup_handoff",
+                when: "When handing off source code and reusable app setup between Tender accounts without copying data.",
+                commands: [
+                    "tender app share create <artifact-id> --expires 7d --claims 1 --json",
+                    "tender app share inspect <token> --json",
+                    "tender app claim <token> --dir <dir> --confirm source-and-setup --json",
+                ],
+                notes: [
+                    "Share app setup copies source files, app setup, and analytics dashboard/chart definitions.",
+                    "It never copies customer data, analytics history, app database rows, secrets, release history, or source account access.",
+                    "Run claim without --confirm first when the user wants a preview of what will happen.",
+                ],
+            },
             {
                 name: "local_edit_preview_publish",
                 when: "When editing app source from a local checkout.",
@@ -1057,6 +1211,24 @@ function tenderCliCapabilities() {
                 requiresAuth: false,
                 writes: false,
             },
+            {
+                command: "tender playbooks list --json",
+                purpose: "List remote Tender Prompt playbook metadata without fetching full bodies.",
+                requiresAuth: true,
+                writes: false,
+            },
+            {
+                command: "tender playbooks get <playbook-id> --json",
+                purpose: "Fetch one remote playbook body plus its reference index.",
+                requiresAuth: true,
+                writes: false,
+            },
+            {
+                command: "tender playbooks file <playbook-id> --path references/<file>.md --json",
+                purpose: "Fetch one playbook reference file on demand.",
+                requiresAuth: true,
+                writes: false,
+            },
             {
                 command: "tender app create --name <name> --init --dir <dir> --preview --json",
                 purpose: "Create a new Tender App, initialize API-derived source in a local checkout, push it, and request a preview build.",
@@ -1071,6 +1243,24 @@ function tenderCliCapabilities() {
                 writes: true,
                 dryRun: true,
             },
+            {
+                command: "tender app share create <artifact-id> --expires 7d --claims 1 --json",
+                purpose: "Create a claimable app setup token that includes source/setup definitions but no app data.",
+                requiresAuth: true,
+                writes: true,
+            },
+            {
+                command: "tender app share inspect <token> --json",
+                purpose: "Inspect a shared app setup token before claiming it.",
+                requiresAuth: true,
+                writes: false,
+            },
+            {
+                command: "tender app claim <token> --dir <dir> --confirm source-and-setup --json",
+                purpose: "Create a new account-owned app from shared source/setup and materialize its source locally.",
+                requiresAuth: true,
+                writes: true,
+            },
             {
                 command: "tender app agent heartbeat <artifact-id> --source codex --status working --summary <text> --json",
                 purpose: "Send a concise workspace feedback update from a coding agent.",
@@ -2326,6 +2516,128 @@ function parseArtifactsUpdateArgs(args) {
         json,
     };
 }
+function parseShareCommonArgs(args, startIndex) {
+    let baseUrl = null;
+    let flagToken = null;
+    let profileName = null;
+    let json = false;
+    const remaining = [];
+    for (let index = startIndex; index < args.length; index += 1) {
+        const arg = args[index];
+        if (arg === "--json") {
+            json = true;
+            continue;
+        }
+        if (arg === "--base-url") {
+            baseUrl = parseBaseUrlFlag(args, index);
+            index += 1;
+            continue;
+        }
+        if (arg === "--token") {
+            flagToken = parseTokenFlag(args, index);
+            index += 1;
+            continue;
+        }
+        if (arg === "--profile") {
+            profileName = parseProfileName(args[index + 1], "--profile");
+            index += 1;
+            continue;
+        }
+        remaining.push(arg);
+    }
+    return { baseUrl, flagToken, profileName, json, remaining };
+}
+function parseShareCreateArgs(args) {
+    if (args.includes("--help") || args.includes("-h")) {
+        return { command: "help", topic: "app share create" };
+    }
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith("-")) {
+        throw new TenderCliUsageError("app id is required. Example: tender app share create <app-id> --json");
+    }
+    const parsed = parseShareCommonArgs(args, 1);
+    let expires = "7d";
+    let claims = 1;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === "--expires") {
+            expires = parseRequiredFlagValue(parsed.remaining[index + 1], "--expires");
+            index += 1;
+            continue;
+        }
+        if (arg === "--claims") {
+            claims = parsePositiveIntegerFlag(parsed.remaining[index + 1], "--claims");
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown app share create option: ${arg}`);
+    }
+    return { command: "app share create", artifactId, expires, claims, ...parsed };
+}
+function parseShareInspectArgs(args) {
+    if (args.includes("--help") || args.includes("-h")) {
+        return { command: "help", topic: "app share inspect" };
+    }
+    const token = args[0];
+    if (!token || token.startsWith("-")) {
+        throw new TenderCliUsageError("share token is required. Example: tender app share inspect <token> --json");
+    }
+    const parsed = parseShareCommonArgs(args, 1);
+    if (parsed.remaining.length > 0) {
+        throw new TenderCliUsageError(`Unknown app share inspect option: ${parsed.remaining[0]}`);
+    }
+    return { command: "app share inspect", token, ...parsed };
+}
+function parseShareRevokeArgs(args) {
+    if (args.includes("--help") || args.includes("-h")) {
+        return { command: "help", topic: "app share revoke" };
+    }
+    const shareId = args[0];
+    if (!shareId || shareId.startsWith("-")) {
+        throw new TenderCliUsageError("share id is required. Example: tender app share revoke <share-id> --json");
+    }
+    const parsed = parseShareCommonArgs(args, 1);
+    if (parsed.remaining.length > 0) {
+        throw new TenderCliUsageError(`Unknown app share revoke option: ${parsed.remaining[0]}`);
+    }
+    return { command: "app share revoke", shareId, ...parsed };
+}
+function parseClaimArgs(args) {
+    if (args.includes("--help") || args.includes("-h")) {
+        return { command: "help", topic: "app claim" };
+    }
+    const token = args[0];
+    if (!token || token.startsWith("-")) {
+        throw new TenderCliUsageError("share token is required. Example: tender app claim <token> --dir ./widget");
+    }
+    const parsed = parseShareCommonArgs(args, 1);
+    let dir = null;
+    let name = null;
+    let confirm = null;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === "--dir") {
+            dir = parseRequiredFlagValue(parsed.remaining[index + 1], "--dir");
+            index += 1;
+            continue;
+        }
+        if (arg === "--name") {
+            name = parseRequiredFlagValue(parsed.remaining[index + 1], "--name");
+            index += 1;
+            continue;
+        }
+        if (arg === "--confirm") {
+            confirm = parseRequiredFlagValue(parsed.remaining[index + 1], "--confirm");
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown app claim option: ${arg}`);
+    }
+    if (!dir) {
+        throw new TenderCliUsageError("--dir is required. Example: tender app claim tok_share_123 --dir ./widget");
+    }
+    return { command: "app claim", token, dir, name, confirm, ...parsed };
+}
 function parseArtifactsInitArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
         return { command: "help", topic: "app init" };
@@ -2742,6 +3054,114 @@ function parseAuthStatusArgs(args) {
         json,
     };
 }
+function parsePlaybooksCommonArgs(args, startIndex) {
+    let baseUrl = null;
+    let flagToken = null;
+    let profileName = null;
+    let json = false;
+    const extras = [];
+    for (let index = startIndex; index < args.length; index += 1) {
+        const arg = args[index];
+        if (arg === "--json") {
+            json = true;
+            continue;
+        }
+        if (arg === "--base-url") {
+            baseUrl = parseBaseUrlFlag(args, index);
+            index += 1;
+            continue;
+        }
+        if (arg === "--token") {
+            flagToken = parseTokenFlag(args, index);
+            index += 1;
+            continue;
+        }
+        if (arg === "--profile") {
+            profileName = parseProfileName(args[index + 1], "--profile");
+            index += 1;
+            continue;
+        }
+        extras.push(arg);
+    }
+    return { baseUrl, flagToken, profileName, json, extras };
+}
+function parsePlaybooksListArgs(args) {
+    if (args.includes("--help") || args.includes("-h")) {
+        return { command: "help", topic: "playbooks list" };
+    }
+    const parsed = parsePlaybooksCommonArgs(args, 0);
+    if (parsed.extras.length > 0) {
+        throw new TenderCliUsageError(`Unknown playbooks list option: ${parsed.extras[0]}`);
+    }
+    return {
+        command: "playbooks list",
+        baseUrl: parsed.baseUrl,
+        flagToken: parsed.flagToken,
+        profileName: parsed.profileName,
+        json: parsed.json,
+    };
+}
+function parsePlaybooksGetArgs(args) {
+    if (args.includes("--help") || args.includes("-h")) {
+        return { command: "help", topic: "playbooks get" };
+    }
+    const playbookId = args[0];
+    if (!playbookId || playbookId.startsWith("-")) {
+        throw new TenderCliUsageError("playbook id is required. Example: tender playbooks get recharge-bundle-builder --json");
+    }
+    const parsed = parsePlaybooksCommonArgs(args, 1);
+    if (parsed.extras.length > 0) {
+        throw new TenderCliUsageError(`Unknown playbooks get option: ${parsed.extras[0]}`);
+    }
+    return {
+        command: "playbooks get",
+        playbookId,
+        baseUrl: parsed.baseUrl,
+        flagToken: parsed.flagToken,
+        profileName: parsed.profileName,
+        json: parsed.json,
+    };
+}
+function parsePlaybooksFileArgs(args) {
+    if (args.includes("--help") || args.includes("-h")) {
+        return { command: "help", topic: "playbooks file" };
+    }
+    const playbookId = args[0];
+    if (!playbookId || playbookId.startsWith("-")) {
+        throw new TenderCliUsageError("playbook id is required. Example: tender playbooks file recharge-bundle-builder --path references/recharge-payloads.md --json");
+    }
+    let filePath = null;
+    const rest = [];
+    for (let index = 1; index < args.length; index += 1) {
+        const arg = args[index];
+        if (arg === "--path") {
+            const value = args[index + 1];
+            if (!value || value.startsWith("-")) {
+                throw new TenderCliUsageError("--path requires a playbook reference path.");
+            }
+            filePath = value;
+            index += 1;
+            continue;
+        }
+        rest.push(arg);
+    }
+    const parsed = parsePlaybooksCommonArgs(rest, 0);
+    if (parsed.extras.length > 0) {
+        throw new TenderCliUsageError(`Unknown playbooks file option: ${parsed.extras[0]}`);
+    }
+    if (!filePath) {
+        throw new TenderCliUsageError("--path is required. Example: tender playbooks file recharge-bundle-builder --path references/recharge-payloads.md --json");
+    }
+    return {
+        command: "playbooks file",
+        playbookId,
+        filePath,
+        baseUrl: parsed.baseUrl,
+        flagToken: parsed.flagToken,
+        profileName: parsed.profileName,
+        json: parsed.json,
+    };
+}
 function parseGenerateEnvTypesArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
         return { command: "help", topic: "app generate-env-types" };
@@ -4193,6 +4613,21 @@ function parseTenderArgs(args) {
         }
         throw new TenderCliUsageError(`Unknown auth command: ${args[1]}`);
     }
+    if (args[0] === "playbooks") {
+        if (args[1] === undefined || args[1] === "--help" || args[1] === "-h") {
+            return { command: "help", topic: "playbooks" };
+        }
+        if (args[1] === "list") {
+            return parsePlaybooksListArgs(args.slice(2));
+        }
+        if (args[1] === "get") {
+            return parsePlaybooksGetArgs(args.slice(2));
+        }
+        if (args[1] === "file") {
+            return parsePlaybooksFileArgs(args.slice(2));
+        }
+        throw new TenderCliUsageError(`Unknown playbooks command: ${args[1]}`);
+    }
     if (args[0] === "apps") {
         throw new TenderCliUsageError("Unknown command: apps. Use `tender app ...` for Tender App workflows.");
     }
@@ -4215,6 +4650,27 @@ function parseTenderArgs(args) {
         if (resourceArgs[1] === "update") {
             return parseArtifactsUpdateArgs(resourceArgs.slice(2));
         }
+        if (resourceArgs[1] === "share" &&
+            (resourceArgs[2] === undefined ||
+                resourceArgs[2] === "--help" ||
+                resourceArgs[2] === "-h")) {
+            return { command: "help", topic: "app share" };
+        }
+        if (resourceArgs[1] === "share" && resourceArgs[2] === "create") {
+            return parseShareCreateArgs(resourceArgs.slice(3));
+        }
+        if (resourceArgs[1] === "share" && resourceArgs[2] === "inspect") {
+            return parseShareInspectArgs(resourceArgs.slice(3));
+        }
+        if (resourceArgs[1] === "share" && resourceArgs[2] === "revoke") {
+            return parseShareRevokeArgs(resourceArgs.slice(3));
+        }
+        if (resourceArgs[1] === "share") {
+            throw new TenderCliUsageError(`Unknown app share command: ${resourceArgs[2]}`);
+        }
+        if (resourceArgs[1] === "claim") {
+            return parseClaimArgs(resourceArgs.slice(2));
+        }
         if (resourceArgs[1] === "init") {
             return parseArtifactsInitArgs(resourceArgs.slice(2));
         }
@@ -4808,6 +5264,40 @@ async function requestDbApi(input) {
     }
     return payload;
 }
+function encodePathSegments(filePath) {
+    return filePath.split("/").map(encodeURIComponent).join("/");
+}
+async function requestPlaybooksApi(input) {
+    const suffix = input.playbooksPath === "list"
+        ? ""
+        : input.playbooksPath === "get"
+            ? `/${encodeURIComponent(input.playbookId)}`
+            : `/${encodeURIComponent(input.playbookId)}/files/${encodePathSegments(input.filePath)}`;
+    const response = await input.fetcher(`${input.baseUrl}/api/v1/playbooks${suffix}`, {
+        method: "GET",
+        headers: {
+            authorization: `Bearer ${input.token}`,
+            accept: "application/json",
+        },
+    });
+    const payload = await parseJsonResponse(response);
+    if (!response.ok || !payload) {
+        const reasonCode = (typeof payload?.reasonCode === "string" && payload.reasonCode) ||
+            `http_${response.status}`;
+        const message = (typeof payload?.message === "string" && payload.message) ||
+            (typeof payload?.reasonCode === "string" && payload.reasonCode) ||
+            `Playbooks request failed with HTTP ${response.status}.`;
+        const authHint = response.status === 401
+            ? "\nAuthenticate first: tender auth login --device --profile edit-preview --save-profile agent --ttl 7d --json"
+            : "";
+        throw new Error([
+            message,
+            `Reason: ${reasonCode}.`,
+            "Example: tender playbooks list --profile agent --json.",
+        ].join("\n") + authHint);
+    }
+    return payload;
+}
 function dbCorrectedExample(artifactId, dbPath) {
     if (dbPath === "capabilities") {
         return `tender app db capabilities ${artifactId} --json`;
@@ -5961,6 +6451,262 @@ async function runArtifactsUpdate(command, io, runtime) {
     }
     return 0;
 }
+async function runShareCreate(command, io, runtime) {
+    const credentials = await resolveApiCredentials({
+        baseUrl: command.baseUrl,
+        flagToken: command.flagToken,
+        profileName: command.profileName,
+        env: runtime.env ?? process.env,
+    });
+    const response = await (runtime.fetcher ?? fetch)(`${credentials.baseUrl}/api/v1/artifacts/${encodeURIComponent(command.artifactId)}/share`, {
+        method: "POST",
+        headers: {
+            authorization: `Bearer ${credentials.token}`,
+            "content-type": "application/json",
+        },
+        body: JSON.stringify({
+            expiresIn: command.expires,
+            claims: command.claims,
+        }),
+    });
+    const payload = await parseJsonResponse(response);
+    if (!response.ok || !payload?.ok || !payload.share || !payload.token) {
+        throw new Error(payload?.message ??
+            payload?.reasonCode ??
+            `App setup share request failed with HTTP ${response.status}.`);
+    }
+    const result = {
+        ok: true,
+        command: command.command,
+        baseUrl: credentials.baseUrl,
+        authSource: credentials.source,
+        profile: credentials.profileName,
+        share: payload.share,
+        token: payload.token,
+        claimCommand: payload.claimCommand,
+    };
+    if (command.json) {
+        io.stdout(JSON.stringify(result, null, 2));
+    }
+    else {
+        io.stdout([
+            `Created share token for "${payload.share.sourceAppName ?? command.artifactId}".`,
+            "",
+            "Includes:",
+            "- Source code",
+            "- App setup",
+            "- Analytics dashboard and chart definitions",
+            "",
+            "Excludes:",
+            "- Customer data",
+            "- Analytics history",
+            "- App database data",
+            "- Secrets",
+            "- Release history",
+            "",
+            "Share this command:",
+            "",
+            `  ${payload.claimCommand ?? `tender app claim ${payload.token} --dir .`}`,
+            "",
+            `Expires: ${payload.share.expiresAt ?? ""}`,
+            `Claims remaining: ${payload.share.claimsRemaining ?? command.claims}`,
+        ].join("\n"));
+    }
+    return 0;
+}
+async function runShareInspect(command, io, runtime) {
+    const credentials = await resolveApiCredentials({
+        baseUrl: command.baseUrl,
+        flagToken: command.flagToken,
+        profileName: command.profileName,
+        env: runtime.env ?? process.env,
+    });
+    const response = await (runtime.fetcher ?? fetch)(`${credentials.baseUrl}/api/v1/app-shares/${encodeURIComponent(command.token)}`, {
+        headers: {
+            authorization: `Bearer ${credentials.token}`,
+        },
+    });
+    const payload = await parseJsonResponse(response);
+    if (!response.ok || !payload?.ok || !payload.share) {
+        throw new Error(payload?.message ??
+            payload?.reasonCode ??
+            `App setup share inspect failed with HTTP ${response.status}.`);
+    }
+    if (command.json) {
+        io.stdout(JSON.stringify({ command: command.command, ...payload }, null, 2));
+    }
+    else {
+        io.stdout([
+            `App: ${payload.share.sourceAppName ?? payload.share.sourceArtifactId ?? "Shared app"}`,
+            `Expires: ${payload.share.expiresAt ?? ""}`,
+            `Claims remaining: ${payload.share.claimsRemaining ?? 0}`,
+            `Claimable: ${payload.claimable ? "yes" : "no"}`,
+        ].join("\n"));
+    }
+    return 0;
+}
+async function runShareRevoke(command, io, runtime) {
+    const credentials = await resolveApiCredentials({
+        baseUrl: command.baseUrl,
+        flagToken: command.flagToken,
+        profileName: command.profileName,
+        env: runtime.env ?? process.env,
+    });
+    const response = await (runtime.fetcher ?? fetch)(`${credentials.baseUrl}/api/v1/app-shares/${encodeURIComponent(command.shareId)}/revoke`, {
+        method: "POST",
+        headers: {
+            authorization: `Bearer ${credentials.token}`,
+        },
+    });
+    const payload = await parseJsonResponse(response);
+    if (!response.ok || !payload?.ok || !payload.share) {
+        throw new Error(payload?.message ??
+            payload?.reasonCode ??
+            `App setup share revoke failed with HTTP ${response.status}.`);
+    }
+    if (command.json) {
+        io.stdout(JSON.stringify({ ok: true, command: command.command, share: payload.share }, null, 2));
+    }
+    else {
+        io.stdout(`revoked: ${payload.share.id}`);
+    }
+    return 0;
+}
+async function runClaim(command, io, runtime) {
+    const credentials = await resolveApiCredentials({
+        baseUrl: command.baseUrl,
+        flagToken: command.flagToken,
+        profileName: command.profileName,
+        env: runtime.env ?? process.env,
+    });
+    const response = await (runtime.fetcher ?? fetch)(`${credentials.baseUrl}/api/v1/app-shares/${encodeURIComponent(command.token)}/claim`, {
+        method: "POST",
+        headers: {
+            authorization: `Bearer ${credentials.token}`,
+            "content-type": "application/json",
+        },
+        body: JSON.stringify({
+            name: command.name,
+            confirm: command.confirm,
+        }),
+    });
+    const payload = await parseJsonResponse(response);
+    if (!response.ok || !payload?.ok) {
+        throw new Error(payload?.message ??
+            payload?.reasonCode ??
+            `App setup claim failed with HTTP ${response.status}.`);
+    }
+    if (payload.requiresConfirmation) {
+        if (command.json) {
+            io.stdout(JSON.stringify({ command: command.command, ...payload }, null, 2));
+        }
+        else {
+            io.stdout([
+                `Claim "${payload.share?.sourceAppName ?? "shared app setup"}"?`,
+                "",
+                "This creates a new app owned by the current Tender account.",
+                "",
+                "Will copy:",
+                "- Source code",
+                "- App setup",
+                "- Analytics dashboard and chart definitions",
+                "",
+                "Will not copy:",
+                "- Customer data",
+                "- Analytics history",
+                "- App database data",
+                "- Secrets",
+                "- Release history",
+                "",
+                `Continue with: tender app claim ${command.token} --dir ${command.dir} --confirm source-and-setup`,
+            ].join("\n"));
+        }
+        return 0;
+    }
+    if (!payload.artifact) {
+        throw new Error("App setup claim response did not include a destination app.");
+    }
+    const root = path.resolve(command.dir);
+    await mkdir(root, { recursive: true });
+    const plannedFiles = await planSourceFiles({
+        root,
+        files: payload.sourceFiles ?? [],
+        force: false,
+    });
+    const conflicts = plannedFiles.filter((file) => file.action === "conflict");
+    if (conflicts.length > 0) {
+        throw new TenderCliUsageError(`Claim target has ${conflicts.length} conflicting files. Choose an empty --dir or resolve: ${conflicts.map((file) => file.path).join(", ")}`);
+    }
+    for (const file of plannedFiles) {
+        if (file.action !== "create" && file.action !== "overwrite") {
+            continue;
+        }
+        await mkdir(path.dirname(file.absolutePath), { recursive: true });
+        await writeFile(file.absolutePath, file.content);
+    }
+    const gitStdout = [];
+    await runGitSetup({
+        command: "app git setup",
+        artifactId: payload.artifact.artifactId,
+        dir: root,
+        remoteName: "tender",
+        baseUrl: credentials.baseUrl,
+        flagToken: command.flagToken,
+        profileName: credentials.profileName,
+        ttl: "7d",
+        dryRun: false,
+        json: true,
+    }, {
+        stdout: (message) => gitStdout.push(message),
+        stderr: io.stderr,
+    }, runtime);
+    const result = {
+        ok: true,
+        command: command.command,
+        baseUrl: credentials.baseUrl,
+        authSource: credentials.source,
+        profile: credentials.profileName,
+        appId: payload.artifact.artifactId,
+        artifact: payload.artifact,
+        dir: root,
+        copied: payload.copied,
+        notCopied: payload.notCopied,
+        files: plannedFiles.map((file) => ({ path: file.path, action: file.action })),
+        git: gitStdout.join("\n").trim() ? JSON.parse(gitStdout.join("\n")) : null,
+        nextCommands: payload.nextCommands,
+    };
+    if (command.json) {
+        io.stdout(JSON.stringify(result, null, 2));
+    }
+    else {
+        io.stdout([
+            "Claimed shared app setup.",
+            "",
+            "Created:",
+            `  App: ${payload.artifact.name}`,
+            `  ID: ${payload.artifact.artifactId}`,
+            `  Local checkout: ${root}`,
+            "",
+            "Copied:",
+            `  Source files: ${payload.copied?.sourceFiles ?? plannedFiles.length}`,
+            `  Analytics dashboards: ${payload.copied?.analyticsDashboards ?? 0}`,
+            `  Analytics charts: ${payload.copied?.analyticsCharts ?? 0}`,
+            "",
+            "Not copied:",
+            "  Usage data",
+            "  App database rows",
+            "  Secrets",
+            "  Release history",
+            "",
+            "Next:",
+            `  cd ${command.dir}`,
+            `  tender app doctor --dir .`,
+            `  git push tender main`,
+            `  tender app preview ${payload.artifact.artifactId} --stream`,
+        ].join("\n"));
+    }
+    return 0;
+}
 function defaultCommandRunner(command, args, options) {
     return new Promise((resolve, reject) => {
         const child = spawn(command, args, {
@@ -6241,7 +6987,11 @@ async function maybeSeedInitialArtifactGitCommit(input) {
     };
 }
 async function requestGitRemoteLease(input) {
-    const url = `${input.baseUrl}/api/v1/artifacts/${encodeURIComponent(input.artifactId)}/git/remote?ttl=${encodeURIComponent(input.ttl)}`;
+    const params = new URLSearchParams({ ttl: input.ttl });
+    if (input.includeCredential) {
+        params.set("credential", "1");
+    }
+    const url = `${input.baseUrl}/api/v1/artifacts/${encodeURIComponent(input.artifactId)}/git/remote?${params.toString()}`;
     const response = await input.fetcher(url, {
         headers: {
             authorization: `Bearer ${input.token}`,
@@ -6404,28 +7154,41 @@ async function runGitCredential(command, io, runtime) {
         baseUrl: credentials.baseUrl,
         token: credentials.token,
         fetcher: runtime.fetcher ?? fetch,
+        includeCredential: true,
     });
+    const credentialPassword = git.token?.password ?? null;
+    const credentialUsername = git.token?.username ?? git.authentication?.username ?? "tender";
+    if (!credentialPassword) {
+        if (command.json) {
+            io.stdout(JSON.stringify({
+                ok: false,
+                command: command.command,
+                artifactId: command.artifactId,
+                remoteUrl: git.remoteUrl,
+                reasonCode: "git_credential_unavailable",
+                passwordAvailable: false,
+            }, null, 2));
+        }
+        else {
+            io.stderr("Tender Git credential is unavailable. Refresh the Git setup so the helper can request a scoped Git credential.");
+        }
+        return 1;
+    }
     if (command.json) {
         io.stdout(JSON.stringify({
             ok: true,
             command: command.command,
             artifactId: command.artifactId,
             remoteUrl: git.remoteUrl,
-            username: git.token?.username ?? git.authentication?.username ?? "tender",
-            password: git.token?.password ??
-                (git.authentication?.mode === "tender-api-token"
-                    ? credentials.token
-                    : ""),
+            username: credentialUsername,
+            passwordAvailable: true,
             expiresAt: git.token?.expiresAt ?? null,
         }, null, 2));
     }
     else {
         io.stdout([
-            `username=${git.token?.username ?? git.authentication?.username ?? "tender"}`,
-            `password=${git.token?.password ??
-                (git.authentication?.mode === "tender-api-token"
-                    ? credentials.token
-                    : "")}`,
+            `username=${credentialUsername}`,
+            `password=${credentialPassword}`,
         ].join("\n"));
     }
     return 0;
@@ -7358,7 +8121,7 @@ async function runGitRemote(command, io, runtime) {
         scope: git.scope,
         authentication: git.authentication?.mode ?? "artifacts-token",
         username: git.token?.username ?? git.authentication?.username ?? "tender",
-        password: git.token?.password ?? null,
+        passwordAvailable: Boolean(git.token?.password),
         expiresAt: git.token?.expiresAt ?? null,
     };
     if (command.json) {
@@ -7370,10 +8133,8 @@ async function runGitRemote(command, io, runtime) {
             `default_branch: ${result.defaultBranch}`,
             `authentication: ${result.authentication}`,
             `username: ${result.username}`,
+            `password_available: ${result.passwordAvailable ? "true" : "false"}`,
         ];
-        if (result.password) {
-            lines.push(`password: ${result.password}`);
-        }
         if (result.expiresAt) {
             lines.push(`expires_at: ${result.expiresAt}`);
         }
@@ -7389,6 +8150,25 @@ async function resolveAnalyticsCredentials(command, runtime) {
         env: runtime.env ?? process.env,
     });
 }
+async function resolvePlaybooksCredentials(command, runtime) {
+    try {
+        return await resolveApiCredentials({
+            baseUrl: command.baseUrl,
+            flagToken: command.flagToken,
+            profileName: command.profileName,
+            env: runtime.env ?? process.env,
+        });
+    }
+    catch (error) {
+        if (error instanceof TenderCliUsageError) {
+            throw new TenderCliUsageError([
+                "Playbooks require Tender authentication.",
+                "Run `tender auth login --device --profile edit-preview --save-profile agent --ttl 7d --json`, set TENDER_API_TOKEN, or pass --token <token>.",
+            ].join("\n"));
+        }
+        throw error;
+    }
+}
 async function resolveDbCredentials(command, runtime) {
     return await resolveApiCredentials({
         baseUrl: command.baseUrl,
@@ -7426,6 +8206,58 @@ function printDbPayload(command, io, payload, fallbackLines) {
         io.stdout(fallbackLines.join("\n"));
     }
 }
+function printPlaybooksPayload(command, io, payload, fallback) {
+    if (command.json) {
+        io.stdout(JSON.stringify(payload, null, 2));
+    }
+    else {
+        io.stdout(fallback);
+    }
+}
+async function runPlaybooksList(command, io, runtime) {
+    const credentials = await resolvePlaybooksCredentials(command, runtime);
+    const payload = await requestPlaybooksApi({
+        playbooksPath: "list",
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+    });
+    const playbooks = Array.isArray(payload.playbooks) ? payload.playbooks : [];
+    printPlaybooksPayload(command, io, payload, playbooks
+        .map((playbook) => isCliJsonRecord(playbook)
+        ? `${String(playbook.id ?? "")}\t${String(playbook.description ?? "")}`
+        : "")
+        .filter(Boolean)
+        .join("\n") || "No Tender Prompt playbooks found.");
+    return 0;
+}
+async function runPlaybooksGet(command, io, runtime) {
+    const credentials = await resolvePlaybooksCredentials(command, runtime);
+    const payload = await requestPlaybooksApi({
+        playbooksPath: "get",
+        playbookId: command.playbookId,
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+    });
+    printPlaybooksPayload(command, io, payload, typeof payload.body === "string" ? payload.body : JSON.stringify(payload, null, 2));
+    return 0;
+}
+async function runPlaybooksFile(command, io, runtime) {
+    const credentials = await resolvePlaybooksCredentials(command, runtime);
+    const payload = await requestPlaybooksApi({
+        playbooksPath: "file",
+        playbookId: command.playbookId,
+        filePath: command.filePath,
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+    });
+    printPlaybooksPayload(command, io, payload, typeof payload.content === "string"
+        ? payload.content
+        : JSON.stringify(payload, null, 2));
+    return 0;
+}
 async function runDbCapabilities(command, io, runtime) {
     const credentials = await resolveDbCredentials(command, runtime);
     const payload = await requestDbApi({
@@ -8042,6 +8874,18 @@ export async function runTenderCli(args, io = {
             else if (command.topic === "auth status") {
                 io.stdout(authStatusHelp());
             }
+            else if (command.topic === "playbooks") {
+                io.stdout(playbooksHelp());
+            }
+            else if (command.topic === "playbooks list") {
+                io.stdout(playbooksListHelp());
+            }
+            else if (command.topic === "playbooks get") {
+                io.stdout(playbooksGetHelp());
+            }
+            else if (command.topic === "playbooks file") {
+                io.stdout(playbooksFileHelp());
+            }
             else if (command.topic === "auth") {
                 io.stdout(authHelp());
             }
@@ -8051,6 +8895,21 @@ export async function runTenderCli(args, io = {
             else if (command.topic === "app update") {
                 io.stdout(artifactsUpdateHelp());
             }
+            else if (command.topic === "app share") {
+                io.stdout(appShareHelp());
+            }
+            else if (command.topic === "app share create") {
+                io.stdout(appShareCreateHelp());
+            }
+            else if (command.topic === "app share inspect") {
+                io.stdout(appShareInspectHelp());
+            }
+            else if (command.topic === "app share revoke") {
+                io.stdout(appShareRevokeHelp());
+            }
+            else if (command.topic === "app claim") {
+                io.stdout(appClaimHelp());
+            }
             else if (command.topic === "app init") {
                 io.stdout(artifactsInitHelp());
             }
@@ -8194,6 +9053,15 @@ export async function runTenderCli(args, io = {
         if (command.command === "auth status") {
             return await runAuthStatus(command, io, runtime);
         }
+        if (command.command === "playbooks list") {
+            return await runPlaybooksList(command, io, runtime);
+        }
+        if (command.command === "playbooks get") {
+            return await runPlaybooksGet(command, io, runtime);
+        }
+        if (command.command === "playbooks file") {
+            return await runPlaybooksFile(command, io, runtime);
+        }
         if (command.command === "app list") {
             return await runArtifactsList(command, io, runtime);
         }
@@ -8260,6 +9128,18 @@ export async function runTenderCli(args, io = {
         if (command.command === "app analytics query") {
             return await runAnalyticsQuery(command, io, runtime);
         }
+        if (command.command === "app share create") {
+            return await runShareCreate(command, io, runtime);
+        }
+        if (command.command === "app share inspect") {
+            return await runShareInspect(command, io, runtime);
+        }
+        if (command.command === "app share revoke") {
+            return await runShareRevoke(command, io, runtime);
+        }
+        if (command.command === "app claim") {
+            return await runClaim(command, io, runtime);
+        }
         if (command.command === "app analytics capabilities") {
             return await runAnalyticsCapabilities(command, io, runtime);
         }
@@ -8318,8 +9198,10 @@ export async function runTenderCli(args, io = {
     }
     catch (error) {
         if (args.includes("--json") &&
-            args[0] === "app" &&
-            (args[1] === "db" || (args[1] === "agent" && args[2] === "heartbeat"))) {
+            ((args[0] === "app" &&
+                (args[1] === "db" ||
+                    (args[1] === "agent" && args[2] === "heartbeat"))) ||
+                args[0] === "playbooks")) {
             io.stdout(JSON.stringify(cliErrorPayload(error, args, command), null, 2));
             return error instanceof TenderCliUsageError ? 2 : 1;
         }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@tenderprompt/cli",
-	"version": "0.1.16",
+	"version": "0.1.18",
 	"type": "module",
 	"bin": {
 		"tender": "bin/tender.js"