@tenderprompt/cli 0.1.17 → 0.1.18

package/README.md

@@ -39,6 +39,8 @@ session:
 - inspect artifact-scoped analytics without SQL or platform credentials
 - inspect artifact-scoped app database tables, schema, and bounded read-only
   query output
+- share app setup between Tender accounts without copying customer data,
+  analytics history, app database rows, secrets, or release history
 - run server-validated chart specs and export aggregate rows
 - generate starter analytics suggestions
 - create, list, update, and delete saved analytics dashboards and charts, with
@@ -129,6 +131,9 @@ tender capabilities --json
 tender app list --json
 tender app create --name "Exit Intent Widget" --json
 tender app create --name "Exit Intent Widget" --init --dir ./widget --preview --json
+tender app share create artifact_123 --expires 7d --claims 1 --json
+tender app share inspect tok_share_123 --json
+tender app claim tok_share_123 --dir ./widget --confirm source-and-setup --json
 tender app update artifact_123 --name "Sale Widget" --json
 tender app init artifact_123 --dir ./widget --preview --json
 tender app bindings outbound --id shopify --host admin.shopify.com --dry-run --json
@@ -145,6 +150,30 @@ tender app db query artifact_123 --env published --sql "select * from votes limi
 tender app db query artifact_123 --env published --sql "select * from votes order by created_at" --limit 50 --offset 50 --json
 ```
 
+## Shared app setup
+
+Use this for agency-to-customer or collaborator handoffs where the recipient
+should get the source and reusable setup, not the source account's data.
+
+Agency side:
+
+```bash
+tender app share create artifact_123 --expires 7d --claims 1 --json
+```
+
+Recipient side:
+
+```bash
+tender app share inspect tok_share_123 --json
+tender app claim tok_share_123 --dir ./exit-intent-widget
+tender app claim tok_share_123 --dir ./exit-intent-widget --confirm source-and-setup --json
+```
+
+Claim copies source code, app setup, and analytics dashboard/chart definitions.
+It does not copy analytics events, aggregates, exports, app database rows,
+secrets, environment values, release history, or ongoing access to the source
+artifact.
+
 ## Analytics
 
 Analytics commands are artifact-scoped and go through Tender's server-side

package/dist/index.js

@@ -91,6 +91,10 @@ Commands:
                              Create a new Tender App in the current account
   tender app update <app-id> --name <name>
                              Update app metadata
+  tender app share create <app-id>
+                             Create a claimable app setup share token
+  tender app claim <token>
+                             Claim shared app setup into the current account
   tender app init <app-id>
                              Bootstrap a checkout for local agent work
   tender app validate <app-id>
@@ -145,6 +149,8 @@ Examples:
   tender app create --name "Exit Intent Widget" --json
   tender app create --name "Exit Intent Widget" --init --dir ./widget --preview --json
   tender app update artifact_123 --name "Sale Widget" --json
+  tender app share create artifact_123 --expires 7d --claims 1 --json
+  tender app claim tok_share_123 --dir ./widget --confirm source-and-setup --json
   tender app init artifact_123 --dir ./widget --preview --json
   tender app validate artifact_123 --json
   tender app build artifact_123 --commit $(git rev-parse HEAD) --json
@@ -262,6 +268,14 @@ Commands:
                              Create a new Tender App, optionally initialize source, and preview
   tender app update <app-id> --name <name>
                              Update app metadata
+  tender app share create <app-id>
+                             Create a claimable app setup share token
+  tender app share inspect <token>
+                             Inspect a shared app setup token without claiming it
+  tender app share revoke <share-id>
+                             Revoke a shared app setup token
+  tender app claim <token>
+                             Claim shared app setup into the current account
   tender app init <app-id>
                              Bootstrap context files and the tender Git remote
   tender app validate <app-id>
@@ -331,6 +345,9 @@ Examples:
   tender app create --name "Exit Intent Widget" --json
   tender app create --name "Exit Intent Widget" --init --dir ./widget --preview --json
   tender app update artifact_123 --name "Sale Widget" --json
+  tender app share create artifact_123 --expires 7d --claims 1 --json
+  tender app share inspect tok_share_123 --json
+  tender app claim tok_share_123 --dir ./widget --confirm source-and-setup --json
   tender app init artifact_123 --dir ./widget --preview --json
   tender app validate artifact_123 --json
   tender app build artifact_123 --commit $(git rev-parse HEAD) --json
@@ -366,6 +383,53 @@ Examples:
   tender app doctor --json
   tender app git remote artifact_123 --ttl 7d --json`;
 }
+function appShareHelp() {
+    return `Usage: tender app share <command> [options]
+
+Commands:
+  tender app share create <app-id>    Create a claimable app setup token
+  tender app share inspect <token>    Inspect token metadata before claiming
+  tender app share revoke <share-id>  Revoke a share token
+
+Examples:
+  tender app share create artifact_123 --expires 7d --claims 1 --json
+  tender app share inspect tok_share_123 --json
+  tender app share revoke app_setup_share_123 --json`;
+}
+function appShareCreateHelp() {
+    return `Usage: tender app share create <app-id> [--expires <7d|24h>] [--claims <n>] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Creates a claimable app setup token. The share includes source code, app setup,
+and analytics dashboard/chart definitions. It does not include customer data,
+analytics history, app database rows, secrets, or release history.
+
+Examples:
+  tender app share create artifact_123 --expires 7d --claims 1 --json`;
+}
+function appShareInspectHelp() {
+    return `Usage: tender app share inspect <token> [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Examples:
+  tender app share inspect tok_share_123 --json`;
+}
+function appShareRevokeHelp() {
+    return `Usage: tender app share revoke <share-id> [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Examples:
+  tender app share revoke app_setup_share_123 --json`;
+}
+function appClaimHelp() {
+    return `Usage: tender app claim <token> --dir <path> [--name <name>] [--confirm source-and-setup] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Claims shared app setup into the authenticated Tender account, creates a new app,
+materializes source files into the local directory, and configures the Tender Git
+remote. Without --confirm source-and-setup, the command only previews what will
+happen.
+
+Examples:
+  tender app claim tok_share_123 --dir ./exit-intent-widget
+  tender app claim tok_share_123 --dir ./exit-intent-widget --confirm source-and-setup --json`;
+}
 function capabilitiesHelp() {
     return `Usage: tender capabilities [--json]
 
@@ -772,7 +836,7 @@ Options:
   --token <token>    Tender API token. Precedence: --token, explicit --profile, TENDER_API_TOKEN, saved default profile.
   --profile <name>   Local config profile name. Defaults to the saved default profile.
   --ttl <value>      Deprecated for Tender-hosted Git remotes; accepted for compatibility.
-  --json             Emit stable JSON for coding agents.
+  --json             Emit stable JSON for coding agents without printing Git passwords.
 
 Examples:
   tender app git remote artifact_123 --ttl 7d --json
@@ -798,11 +862,12 @@ Examples:
   tender app git setup artifact_123 --dir ./widget --dry-run --json`;
 }
 function gitCredentialHelp() {
-    return `Usage: tender app git credential <app-id> [get|store|erase] [--base-url <url>] [--token <token>] [--profile <name>] [--ttl <7d|14d|30d>] [--remote-url <url>]
+    return `Usage: tender app git credential <app-id> [get|store|erase] [--base-url <url>] [--token <token>] [--profile <name>] [--ttl <7d|14d|30d>] [--remote-url <url>] [--json]
 
 This command is intended for Git's credential.helper protocol. It prints a
-Tender API-token username/password pair only for matching get requests. Do not
-run it manually unless you are debugging Git credential-helper behavior.
+username/password pair only for matching get requests. Do not run it manually
+unless you are debugging Git credential-helper behavior.
+JSON output reports whether a password is available without printing it.
 
 Examples:
   tender app git credential artifact_123 get
@@ -984,6 +1049,8 @@ function tenderCliCapabilities() {
                 "tender playbooks --help",
                 "tender app --help",
                 "tender app agent heartbeat --help",
+                "tender app share --help",
+                "tender app claim --help",
                 "tender app analytics --help",
                 "tender app db --help",
                 "tender app bindings outbound --help",
@@ -1037,6 +1104,20 @@ function tenderCliCapabilities() {
                     "Use context fetch only when you already have a checkout and only need AGENTS.md, skills, or Tender context refreshed.",
                 ],
             },
+            {
+                name: "share_app_setup_handoff",
+                when: "When handing off source code and reusable app setup between Tender accounts without copying data.",
+                commands: [
+                    "tender app share create <artifact-id> --expires 7d --claims 1 --json",
+                    "tender app share inspect <token> --json",
+                    "tender app claim <token> --dir <dir> --confirm source-and-setup --json",
+                ],
+                notes: [
+                    "Share app setup copies source files, app setup, and analytics dashboard/chart definitions.",
+                    "It never copies customer data, analytics history, app database rows, secrets, release history, or source account access.",
+                    "Run claim without --confirm first when the user wants a preview of what will happen.",
+                ],
+            },
             {
                 name: "local_edit_preview_publish",
                 when: "When editing app source from a local checkout.",
@@ -1162,6 +1243,24 @@ function tenderCliCapabilities() {
                 writes: true,
                 dryRun: true,
             },
+            {
+                command: "tender app share create <artifact-id> --expires 7d --claims 1 --json",
+                purpose: "Create a claimable app setup token that includes source/setup definitions but no app data.",
+                requiresAuth: true,
+                writes: true,
+            },
+            {
+                command: "tender app share inspect <token> --json",
+                purpose: "Inspect a shared app setup token before claiming it.",
+                requiresAuth: true,
+                writes: false,
+            },
+            {
+                command: "tender app claim <token> --dir <dir> --confirm source-and-setup --json",
+                purpose: "Create a new account-owned app from shared source/setup and materialize its source locally.",
+                requiresAuth: true,
+                writes: true,
+            },
             {
                 command: "tender app agent heartbeat <artifact-id> --source codex --status working --summary <text> --json",
                 purpose: "Send a concise workspace feedback update from a coding agent.",
@@ -2417,6 +2516,128 @@ function parseArtifactsUpdateArgs(args) {
         json,
     };
 }
+function parseShareCommonArgs(args, startIndex) {
+    let baseUrl = null;
+    let flagToken = null;
+    let profileName = null;
+    let json = false;
+    const remaining = [];
+    for (let index = startIndex; index < args.length; index += 1) {
+        const arg = args[index];
+        if (arg === "--json") {
+            json = true;
+            continue;
+        }
+        if (arg === "--base-url") {
+            baseUrl = parseBaseUrlFlag(args, index);
+            index += 1;
+            continue;
+        }
+        if (arg === "--token") {
+            flagToken = parseTokenFlag(args, index);
+            index += 1;
+            continue;
+        }
+        if (arg === "--profile") {
+            profileName = parseProfileName(args[index + 1], "--profile");
+            index += 1;
+            continue;
+        }
+        remaining.push(arg);
+    }
+    return { baseUrl, flagToken, profileName, json, remaining };
+}
+function parseShareCreateArgs(args) {
+    if (args.includes("--help") || args.includes("-h")) {
+        return { command: "help", topic: "app share create" };
+    }
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith("-")) {
+        throw new TenderCliUsageError("app id is required. Example: tender app share create <app-id> --json");
+    }
+    const parsed = parseShareCommonArgs(args, 1);
+    let expires = "7d";
+    let claims = 1;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === "--expires") {
+            expires = parseRequiredFlagValue(parsed.remaining[index + 1], "--expires");
+            index += 1;
+            continue;
+        }
+        if (arg === "--claims") {
+            claims = parsePositiveIntegerFlag(parsed.remaining[index + 1], "--claims");
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown app share create option: ${arg}`);
+    }
+    return { command: "app share create", artifactId, expires, claims, ...parsed };
+}
+function parseShareInspectArgs(args) {
+    if (args.includes("--help") || args.includes("-h")) {
+        return { command: "help", topic: "app share inspect" };
+    }
+    const token = args[0];
+    if (!token || token.startsWith("-")) {
+        throw new TenderCliUsageError("share token is required. Example: tender app share inspect <token> --json");
+    }
+    const parsed = parseShareCommonArgs(args, 1);
+    if (parsed.remaining.length > 0) {
+        throw new TenderCliUsageError(`Unknown app share inspect option: ${parsed.remaining[0]}`);
+    }
+    return { command: "app share inspect", token, ...parsed };
+}
+function parseShareRevokeArgs(args) {
+    if (args.includes("--help") || args.includes("-h")) {
+        return { command: "help", topic: "app share revoke" };
+    }
+    const shareId = args[0];
+    if (!shareId || shareId.startsWith("-")) {
+        throw new TenderCliUsageError("share id is required. Example: tender app share revoke <share-id> --json");
+    }
+    const parsed = parseShareCommonArgs(args, 1);
+    if (parsed.remaining.length > 0) {
+        throw new TenderCliUsageError(`Unknown app share revoke option: ${parsed.remaining[0]}`);
+    }
+    return { command: "app share revoke", shareId, ...parsed };
+}
+function parseClaimArgs(args) {
+    if (args.includes("--help") || args.includes("-h")) {
+        return { command: "help", topic: "app claim" };
+    }
+    const token = args[0];
+    if (!token || token.startsWith("-")) {
+        throw new TenderCliUsageError("share token is required. Example: tender app claim <token> --dir ./widget");
+    }
+    const parsed = parseShareCommonArgs(args, 1);
+    let dir = null;
+    let name = null;
+    let confirm = null;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === "--dir") {
+            dir = parseRequiredFlagValue(parsed.remaining[index + 1], "--dir");
+            index += 1;
+            continue;
+        }
+        if (arg === "--name") {
+            name = parseRequiredFlagValue(parsed.remaining[index + 1], "--name");
+            index += 1;
+            continue;
+        }
+        if (arg === "--confirm") {
+            confirm = parseRequiredFlagValue(parsed.remaining[index + 1], "--confirm");
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown app claim option: ${arg}`);
+    }
+    if (!dir) {
+        throw new TenderCliUsageError("--dir is required. Example: tender app claim tok_share_123 --dir ./widget");
+    }
+    return { command: "app claim", token, dir, name, confirm, ...parsed };
+}
 function parseArtifactsInitArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
         return { command: "help", topic: "app init" };
@@ -4429,6 +4650,27 @@ function parseTenderArgs(args) {
         if (resourceArgs[1] === "update") {
             return parseArtifactsUpdateArgs(resourceArgs.slice(2));
         }
+        if (resourceArgs[1] === "share" &&
+            (resourceArgs[2] === undefined ||
+                resourceArgs[2] === "--help" ||
+                resourceArgs[2] === "-h")) {
+            return { command: "help", topic: "app share" };
+        }
+        if (resourceArgs[1] === "share" && resourceArgs[2] === "create") {
+            return parseShareCreateArgs(resourceArgs.slice(3));
+        }
+        if (resourceArgs[1] === "share" && resourceArgs[2] === "inspect") {
+            return parseShareInspectArgs(resourceArgs.slice(3));
+        }
+        if (resourceArgs[1] === "share" && resourceArgs[2] === "revoke") {
+            return parseShareRevokeArgs(resourceArgs.slice(3));
+        }
+        if (resourceArgs[1] === "share") {
+            throw new TenderCliUsageError(`Unknown app share command: ${resourceArgs[2]}`);
+        }
+        if (resourceArgs[1] === "claim") {
+            return parseClaimArgs(resourceArgs.slice(2));
+        }
         if (resourceArgs[1] === "init") {
             return parseArtifactsInitArgs(resourceArgs.slice(2));
         }
@@ -6209,6 +6451,262 @@ async function runArtifactsUpdate(command, io, runtime) {
     }
     return 0;
 }
+async function runShareCreate(command, io, runtime) {
+    const credentials = await resolveApiCredentials({
+        baseUrl: command.baseUrl,
+        flagToken: command.flagToken,
+        profileName: command.profileName,
+        env: runtime.env ?? process.env,
+    });
+    const response = await (runtime.fetcher ?? fetch)(`${credentials.baseUrl}/api/v1/artifacts/${encodeURIComponent(command.artifactId)}/share`, {
+        method: "POST",
+        headers: {
+            authorization: `Bearer ${credentials.token}`,
+            "content-type": "application/json",
+        },
+        body: JSON.stringify({
+            expiresIn: command.expires,
+            claims: command.claims,
+        }),
+    });
+    const payload = await parseJsonResponse(response);
+    if (!response.ok || !payload?.ok || !payload.share || !payload.token) {
+        throw new Error(payload?.message ??
+            payload?.reasonCode ??
+            `App setup share request failed with HTTP ${response.status}.`);
+    }
+    const result = {
+        ok: true,
+        command: command.command,
+        baseUrl: credentials.baseUrl,
+        authSource: credentials.source,
+        profile: credentials.profileName,
+        share: payload.share,
+        token: payload.token,
+        claimCommand: payload.claimCommand,
+    };
+    if (command.json) {
+        io.stdout(JSON.stringify(result, null, 2));
+    }
+    else {
+        io.stdout([
+            `Created share token for "${payload.share.sourceAppName ?? command.artifactId}".`,
+            "",
+            "Includes:",
+            "- Source code",
+            "- App setup",
+            "- Analytics dashboard and chart definitions",
+            "",
+            "Excludes:",
+            "- Customer data",
+            "- Analytics history",
+            "- App database data",
+            "- Secrets",
+            "- Release history",
+            "",
+            "Share this command:",
+            "",
+            `  ${payload.claimCommand ?? `tender app claim ${payload.token} --dir .`}`,
+            "",
+            `Expires: ${payload.share.expiresAt ?? ""}`,
+            `Claims remaining: ${payload.share.claimsRemaining ?? command.claims}`,
+        ].join("\n"));
+    }
+    return 0;
+}
+async function runShareInspect(command, io, runtime) {
+    const credentials = await resolveApiCredentials({
+        baseUrl: command.baseUrl,
+        flagToken: command.flagToken,
+        profileName: command.profileName,
+        env: runtime.env ?? process.env,
+    });
+    const response = await (runtime.fetcher ?? fetch)(`${credentials.baseUrl}/api/v1/app-shares/${encodeURIComponent(command.token)}`, {
+        headers: {
+            authorization: `Bearer ${credentials.token}`,
+        },
+    });
+    const payload = await parseJsonResponse(response);
+    if (!response.ok || !payload?.ok || !payload.share) {
+        throw new Error(payload?.message ??
+            payload?.reasonCode ??
+            `App setup share inspect failed with HTTP ${response.status}.`);
+    }
+    if (command.json) {
+        io.stdout(JSON.stringify({ command: command.command, ...payload }, null, 2));
+    }
+    else {
+        io.stdout([
+            `App: ${payload.share.sourceAppName ?? payload.share.sourceArtifactId ?? "Shared app"}`,
+            `Expires: ${payload.share.expiresAt ?? ""}`,
+            `Claims remaining: ${payload.share.claimsRemaining ?? 0}`,
+            `Claimable: ${payload.claimable ? "yes" : "no"}`,
+        ].join("\n"));
+    }
+    return 0;
+}
+async function runShareRevoke(command, io, runtime) {
+    const credentials = await resolveApiCredentials({
+        baseUrl: command.baseUrl,
+        flagToken: command.flagToken,
+        profileName: command.profileName,
+        env: runtime.env ?? process.env,
+    });
+    const response = await (runtime.fetcher ?? fetch)(`${credentials.baseUrl}/api/v1/app-shares/${encodeURIComponent(command.shareId)}/revoke`, {
+        method: "POST",
+        headers: {
+            authorization: `Bearer ${credentials.token}`,
+        },
+    });
+    const payload = await parseJsonResponse(response);
+    if (!response.ok || !payload?.ok || !payload.share) {
+        throw new Error(payload?.message ??
+            payload?.reasonCode ??
+            `App setup share revoke failed with HTTP ${response.status}.`);
+    }
+    if (command.json) {
+        io.stdout(JSON.stringify({ ok: true, command: command.command, share: payload.share }, null, 2));
+    }
+    else {
+        io.stdout(`revoked: ${payload.share.id}`);
+    }
+    return 0;
+}
+async function runClaim(command, io, runtime) {
+    const credentials = await resolveApiCredentials({
+        baseUrl: command.baseUrl,
+        flagToken: command.flagToken,
+        profileName: command.profileName,
+        env: runtime.env ?? process.env,
+    });
+    const response = await (runtime.fetcher ?? fetch)(`${credentials.baseUrl}/api/v1/app-shares/${encodeURIComponent(command.token)}/claim`, {
+        method: "POST",
+        headers: {
+            authorization: `Bearer ${credentials.token}`,
+            "content-type": "application/json",
+        },
+        body: JSON.stringify({
+            name: command.name,
+            confirm: command.confirm,
+        }),
+    });
+    const payload = await parseJsonResponse(response);
+    if (!response.ok || !payload?.ok) {
+        throw new Error(payload?.message ??
+            payload?.reasonCode ??
+            `App setup claim failed with HTTP ${response.status}.`);
+    }
+    if (payload.requiresConfirmation) {
+        if (command.json) {
+            io.stdout(JSON.stringify({ command: command.command, ...payload }, null, 2));
+        }
+        else {
+            io.stdout([
+                `Claim "${payload.share?.sourceAppName ?? "shared app setup"}"?`,
+                "",
+                "This creates a new app owned by the current Tender account.",
+                "",
+                "Will copy:",
+                "- Source code",
+                "- App setup",
+                "- Analytics dashboard and chart definitions",
+                "",
+                "Will not copy:",
+                "- Customer data",
+                "- Analytics history",
+                "- App database data",
+                "- Secrets",
+                "- Release history",
+                "",
+                `Continue with: tender app claim ${command.token} --dir ${command.dir} --confirm source-and-setup`,
+            ].join("\n"));
+        }
+        return 0;
+    }
+    if (!payload.artifact) {
+        throw new Error("App setup claim response did not include a destination app.");
+    }
+    const root = path.resolve(command.dir);
+    await mkdir(root, { recursive: true });
+    const plannedFiles = await planSourceFiles({
+        root,
+        files: payload.sourceFiles ?? [],
+        force: false,
+    });
+    const conflicts = plannedFiles.filter((file) => file.action === "conflict");
+    if (conflicts.length > 0) {
+        throw new TenderCliUsageError(`Claim target has ${conflicts.length} conflicting files. Choose an empty --dir or resolve: ${conflicts.map((file) => file.path).join(", ")}`);
+    }
+    for (const file of plannedFiles) {
+        if (file.action !== "create" && file.action !== "overwrite") {
+            continue;
+        }
+        await mkdir(path.dirname(file.absolutePath), { recursive: true });
+        await writeFile(file.absolutePath, file.content);
+    }
+    const gitStdout = [];
+    await runGitSetup({
+        command: "app git setup",
+        artifactId: payload.artifact.artifactId,
+        dir: root,
+        remoteName: "tender",
+        baseUrl: credentials.baseUrl,
+        flagToken: command.flagToken,
+        profileName: credentials.profileName,
+        ttl: "7d",
+        dryRun: false,
+        json: true,
+    }, {
+        stdout: (message) => gitStdout.push(message),
+        stderr: io.stderr,
+    }, runtime);
+    const result = {
+        ok: true,
+        command: command.command,
+        baseUrl: credentials.baseUrl,
+        authSource: credentials.source,
+        profile: credentials.profileName,
+        appId: payload.artifact.artifactId,
+        artifact: payload.artifact,
+        dir: root,
+        copied: payload.copied,
+        notCopied: payload.notCopied,
+        files: plannedFiles.map((file) => ({ path: file.path, action: file.action })),
+        git: gitStdout.join("\n").trim() ? JSON.parse(gitStdout.join("\n")) : null,
+        nextCommands: payload.nextCommands,
+    };
+    if (command.json) {
+        io.stdout(JSON.stringify(result, null, 2));
+    }
+    else {
+        io.stdout([
+            "Claimed shared app setup.",
+            "",
+            "Created:",
+            `  App: ${payload.artifact.name}`,
+            `  ID: ${payload.artifact.artifactId}`,
+            `  Local checkout: ${root}`,
+            "",
+            "Copied:",
+            `  Source files: ${payload.copied?.sourceFiles ?? plannedFiles.length}`,
+            `  Analytics dashboards: ${payload.copied?.analyticsDashboards ?? 0}`,
+            `  Analytics charts: ${payload.copied?.analyticsCharts ?? 0}`,
+            "",
+            "Not copied:",
+            "  Usage data",
+            "  App database rows",
+            "  Secrets",
+            "  Release history",
+            "",
+            "Next:",
+            `  cd ${command.dir}`,
+            `  tender app doctor --dir .`,
+            `  git push tender main`,
+            `  tender app preview ${payload.artifact.artifactId} --stream`,
+        ].join("\n"));
+    }
+    return 0;
+}
 function defaultCommandRunner(command, args, options) {
     return new Promise((resolve, reject) => {
         const child = spawn(command, args, {
@@ -6489,7 +6987,11 @@ async function maybeSeedInitialArtifactGitCommit(input) {
     };
 }
 async function requestGitRemoteLease(input) {
-    const url = `${input.baseUrl}/api/v1/artifacts/${encodeURIComponent(input.artifactId)}/git/remote?ttl=${encodeURIComponent(input.ttl)}`;
+    const params = new URLSearchParams({ ttl: input.ttl });
+    if (input.includeCredential) {
+        params.set("credential", "1");
+    }
+    const url = `${input.baseUrl}/api/v1/artifacts/${encodeURIComponent(input.artifactId)}/git/remote?${params.toString()}`;
     const response = await input.fetcher(url, {
         headers: {
             authorization: `Bearer ${input.token}`,
@@ -6652,28 +7154,41 @@ async function runGitCredential(command, io, runtime) {
         baseUrl: credentials.baseUrl,
         token: credentials.token,
         fetcher: runtime.fetcher ?? fetch,
+        includeCredential: true,
     });
+    const credentialPassword = git.token?.password ?? null;
+    const credentialUsername = git.token?.username ?? git.authentication?.username ?? "tender";
+    if (!credentialPassword) {
+        if (command.json) {
+            io.stdout(JSON.stringify({
+                ok: false,
+                command: command.command,
+                artifactId: command.artifactId,
+                remoteUrl: git.remoteUrl,
+                reasonCode: "git_credential_unavailable",
+                passwordAvailable: false,
+            }, null, 2));
+        }
+        else {
+            io.stderr("Tender Git credential is unavailable. Refresh the Git setup so the helper can request a scoped Git credential.");
+        }
+        return 1;
+    }
     if (command.json) {
         io.stdout(JSON.stringify({
             ok: true,
             command: command.command,
             artifactId: command.artifactId,
             remoteUrl: git.remoteUrl,
-            username: git.token?.username ?? git.authentication?.username ?? "tender",
-            password: git.token?.password ??
-                (git.authentication?.mode === "tender-api-token"
-                    ? credentials.token
-                    : ""),
+            username: credentialUsername,
+            passwordAvailable: true,
             expiresAt: git.token?.expiresAt ?? null,
         }, null, 2));
     }
     else {
         io.stdout([
-            `username=${git.token?.username ?? git.authentication?.username ?? "tender"}`,
-            `password=${git.token?.password ??
-                (git.authentication?.mode === "tender-api-token"
-                    ? credentials.token
-                    : "")}`,
+            `username=${credentialUsername}`,
+            `password=${credentialPassword}`,
         ].join("\n"));
     }
     return 0;
@@ -7606,7 +8121,7 @@ async function runGitRemote(command, io, runtime) {
         scope: git.scope,
         authentication: git.authentication?.mode ?? "artifacts-token",
         username: git.token?.username ?? git.authentication?.username ?? "tender",
-        password: git.token?.password ?? null,
+        passwordAvailable: Boolean(git.token?.password),
         expiresAt: git.token?.expiresAt ?? null,
     };
     if (command.json) {
@@ -7618,10 +8133,8 @@ async function runGitRemote(command, io, runtime) {
             `default_branch: ${result.defaultBranch}`,
             `authentication: ${result.authentication}`,
             `username: ${result.username}`,
+            `password_available: ${result.passwordAvailable ? "true" : "false"}`,
         ];
-        if (result.password) {
-            lines.push(`password: ${result.password}`);
-        }
         if (result.expiresAt) {
             lines.push(`expires_at: ${result.expiresAt}`);
         }
@@ -8382,6 +8895,21 @@ export async function runTenderCli(args, io = {
             else if (command.topic === "app update") {
                 io.stdout(artifactsUpdateHelp());
             }
+            else if (command.topic === "app share") {
+                io.stdout(appShareHelp());
+            }
+            else if (command.topic === "app share create") {
+                io.stdout(appShareCreateHelp());
+            }
+            else if (command.topic === "app share inspect") {
+                io.stdout(appShareInspectHelp());
+            }
+            else if (command.topic === "app share revoke") {
+                io.stdout(appShareRevokeHelp());
+            }
+            else if (command.topic === "app claim") {
+                io.stdout(appClaimHelp());
+            }
             else if (command.topic === "app init") {
                 io.stdout(artifactsInitHelp());
             }
@@ -8600,6 +9128,18 @@ export async function runTenderCli(args, io = {
         if (command.command === "app analytics query") {
             return await runAnalyticsQuery(command, io, runtime);
         }
+        if (command.command === "app share create") {
+            return await runShareCreate(command, io, runtime);
+        }
+        if (command.command === "app share inspect") {
+            return await runShareInspect(command, io, runtime);
+        }
+        if (command.command === "app share revoke") {
+            return await runShareRevoke(command, io, runtime);
+        }
+        if (command.command === "app claim") {
+            return await runClaim(command, io, runtime);
+        }
         if (command.command === "app analytics capabilities") {
             return await runAnalyticsCapabilities(command, io, runtime);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@tenderprompt/cli",
-	"version": "0.1.17",
+	"version": "0.1.18",
 	"type": "module",
 	"bin": {
 		"tender": "bin/tender.js"