@tenderprompt/cli 0.1.25 → 0.1.26

package/README.md

@@ -39,6 +39,8 @@ session:
 - inspect artifact-scoped analytics without SQL or platform credentials
 - inspect artifact-scoped app database tables, schema, and bounded read-only
   query output
+- create private app admin dashboard, resource, view, and widget definitions
+  from structured app database specs
 - share app setup between Tender accounts without copying customer data,
   analytics history, app database rows, secrets, or release history
 - run server-validated chart specs and export aggregate rows
@@ -156,6 +158,11 @@ tender app db tables artifact_123 --env published --json
 tender app db schema artifact_123 --env published --table votes --json
 tender app db query artifact_123 --env published --sql "select * from votes limit 20" --json
 tender app db query artifact_123 --env published --sql "select * from votes order by created_at" --limit 50 --offset 50 --json
+tender app db dashboards artifact_123 --create "App admin" --default-env published --dry-run --json
+tender app db resources suggest artifact_123 --env published --json
+tender app db dashboards render artifact_123 --dashboard app_db_dashboard_123 --env published --json
+tender app db resources create artifact_123 --dashboard app_db_dashboard_123 --spec resource.json --dry-run --json
+tender app db widgets create artifact_123 --dashboard app_db_dashboard_123 --title "Total signups" --spec widget.json --dry-run --json
 ```
 
 ## Shared app setup
@@ -340,6 +347,26 @@ Client and server limits include a 100 KB statement cap and at most 100 bound
 parameters. The server enforces the final policy, row limits, response limits,
 artifact scope, and audit logging.
 
+Private app admin dashboards are definition-only in the CLI. Use the same
+artifact-scoped `db-read` profile to save dashboards, table-backed resources,
+saved views, and widgets; raw app rows stay in the generated app database.
+Logged-in users can open saved dashboards at `/#/workspace/<artifact-id>/admin`.
+
+```bash
+tender app db resources suggest artifact_123 --profile db --env published --json
+tender app db dashboards artifact_123 --profile db --create "Coffee Matcher Admin" --default-env published --json
+tender app db resources create artifact_123 --profile db --dashboard app_db_dashboard_123 --spec resource.json --view recent.json --json
+tender app db widgets create artifact_123 --profile db --dashboard app_db_dashboard_123 --title "Votes by choice" --spec widget.json --json
+tender app db dashboards render artifact_123 --profile db --dashboard app_db_dashboard_123 --env published --json
+```
+
+Suggested app database resources may include `dateRange: { "source":
+"dashboard", "column": "created_at" }` so saved admin dashboards behave like a
+Grafana dashboard: one top-level date range applies to charts and tables by
+default, while resource filters stay available for local drill-downs. Use
+`dateRange: { "source": "off" }` or a fixed override only for panels that should
+not follow the dashboard date range.
+
 ## Safety Model
 
 - Local agents run in the user's environment, not in Tender.

package/dist/index.js

@@ -189,6 +189,8 @@ Commands:
                              Describe app database query limits and policy
   tender app db query <app-id> --env <preview|published> --sql <sql>
                              Run one read-only app database query
+  tender app db dashboards <app-id>
+                             List or create private app admin dashboards
   tender app context fetch <app-id>
                              Fetch managed agent context into a checkout
   tender app context status <app-id>
@@ -451,6 +453,12 @@ Commands:
                              Show table and index schema for one table
   tender app db query <app-id> --env <preview|published> --sql <sql>
                              Run one read-only app database query
+  tender app db dashboards <app-id>
+                             List or create private app admin dashboards
+  tender app db resources create <app-id>
+                             Add a table-backed dashboard resource
+  tender app db widgets create <app-id>
+                             Add a saved dashboard widget
   tender app context fetch <app-id>
                              Fetch AGENTS.md, skills, and Tender project context
   tender app context status <app-id>
@@ -792,12 +800,27 @@ Commands:
                                       Show schema for one table
   tender app db query <app-id> --env <preview|published>
                                       Run one read-only SQL query
+  tender app db dashboards <app-id>
+                                      List or create private app admin dashboards
+  tender app db resources suggest <app-id>
+                                      Suggest private app admin resources from schema
+  tender app db dashboards render <app-id>
+                                      Render saved private app admin queries
+  tender app db resources create <app-id>
+                                      Add a table-backed dashboard resource from JSON
+  tender app db widgets create <app-id>
+                                      Add a saved dashboard widget from JSON
 
 Examples:
   tender app db capabilities artifact_123 --json
   tender app db tables artifact_123 --env published --json
   tender app db schema artifact_123 --env published --table votes --json
   tender app db query artifact_123 --env published --sql "select * from votes limit 20" --json
+  tender app db resources suggest artifact_123 --env published --json
+  tender app db dashboards artifact_123 --create "Coffee Matcher Admin" --json
+  tender app db dashboards render artifact_123 --dashboard app_db_dashboard_123 --env published --json
+  tender app db resources create artifact_123 --dashboard app_db_dashboard_123 --spec resource.json --json
+  tender app db widgets create artifact_123 --dashboard app_db_dashboard_123 --title "Total signups" --spec widget.json --json
   tender app db query artifact_123 --env published --file ./debug.sql --param active --limit 50 --json`;
 }
 function dbCapabilitiesHelp() {
@@ -837,6 +860,38 @@ Examples:
   tender app db query artifact_123 --env published --file ./debug.sql --limit 50 --offset 100 --json
   tender app db query artifact_123 --env published --file - --json < debug.sql`;
 }
+function dbDashboardsHelp() {
+    return `Usage: tender app db dashboards <app-id> [--create <name>] [--default-env <preview|published>] [--dry-run] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Examples:
+  tender app db dashboards artifact_123 --json
+  tender app db dashboards artifact_123 --create "Coffee Matcher Admin" --default-env published --json`;
+}
+function dbDashboardsRenderHelp() {
+    return `Usage: tender app db dashboards render <app-id> --dashboard <dashboard-id> --env <preview|published> [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Examples:
+  tender app db dashboards render artifact_123 --dashboard app_db_dashboard_123 --env published --json`;
+}
+function dbResourcesSuggestHelp() {
+    return `Usage: tender app db resources suggest <app-id> --env <preview|published> [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Examples:
+  tender app db resources suggest artifact_123 --env published --json`;
+}
+function dbResourcesCreateHelp() {
+    return `Usage: tender app db resources create <app-id> --dashboard <dashboard-id> --spec <resource.json|-> [--view <view.json|->] [--dry-run] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Examples:
+  tender app db resources create artifact_123 --dashboard app_db_dashboard_123 --spec resource.json --json
+  tender app db resources create artifact_123 --dashboard app_db_dashboard_123 --spec resource.json --view needs-review.json --json`;
+}
+function dbWidgetsCreateHelp() {
+    return `Usage: tender app db widgets create <app-id> --dashboard <dashboard-id> --title <title> --spec <widget.json|-> [--dry-run] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Examples:
+  tender app db widgets create artifact_123 --dashboard app_db_dashboard_123 --title "Total signups" --spec widget.json --json`;
+}
 function artifactsListHelp() {
     return `Usage: tender app list [--base-url <url>] [--token <token>] [--profile <name>] [--json]
 
@@ -1408,11 +1463,14 @@ function tenderCliCapabilities() {
                     'tender app db schema <artifact-id> --env published --table <table-name> --profile db --json',
                     'tender app db query <artifact-id> --env published --sql "select * from <table-name> limit 20" --profile db --json',
                     'tender app db query <artifact-id> --env published --file ./debug.sql --profile db --json',
+                    'tender app db resources suggest <artifact-id> --env published --profile db --json',
+                    'tender app db dashboards render <artifact-id> --dashboard <dashboard-id> --env published --profile db --json',
                 ],
                 notes: [
                     'The CLI only accepts artifact ids. It never accepts tenant ids, runner names, provider account ids, or runtime storage identifiers.',
                     'Read-only policy is enforced by the server before the runtime shim executes SQL.',
                     'Use --file - to pipe SQL from stdin without prompts.',
+                    'Use resources suggest and dashboards render for private operator/admin surfaces instead of building database tables into shopper UI.',
                 ],
             },
             {
@@ -1611,6 +1669,39 @@ function tenderCliCapabilities() {
                 requiresAuth: true,
                 writes: false,
             },
+            {
+                command: 'tender app db resources suggest <artifact-id> --env published --json',
+                purpose: 'Suggest private app admin resources, saved views, and widgets from app database schema and samples.',
+                requiresAuth: true,
+                writes: false,
+            },
+            {
+                command: 'tender app db dashboards <artifact-id> --create "App admin" --dry-run --json',
+                purpose: 'Preview or create a private app database dashboard definition for one artifact.',
+                requiresAuth: true,
+                writes: true,
+                dryRun: true,
+            },
+            {
+                command: 'tender app db dashboards render <artifact-id> --dashboard <dashboard-id> --env published --json',
+                purpose: 'Render saved private app admin resource and widget queries for completion proof.',
+                requiresAuth: true,
+                writes: false,
+            },
+            {
+                command: 'tender app db resources create <artifact-id> --dashboard <dashboard-id> --spec resource.json --dry-run --json',
+                purpose: 'Preview or save a table-backed resource definition for a private app admin dashboard.',
+                requiresAuth: true,
+                writes: true,
+                dryRun: true,
+            },
+            {
+                command: 'tender app db widgets create <artifact-id> --dashboard <dashboard-id> --title <title> --spec widget.json --dry-run --json',
+                purpose: 'Preview or save a bounded widget definition for a private app admin dashboard.',
+                requiresAuth: true,
+                writes: true,
+                dryRun: true,
+            },
         ],
         security: [
             'Prefer artifact-scoped device tokens.',
@@ -5414,6 +5505,239 @@ function parseDbQueryArgs(args) {
         ...parsed,
     };
 }
+function parseDbDashboardsArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'app db dashboards' };
+    }
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith('-')) {
+        throw new TenderCliUsageError('app id is required. Example: tender app db dashboards <app-id> --json');
+    }
+    const parsed = parseDbCommonArgs(args, 1);
+    let name = null;
+    let defaultEnvironment = null;
+    let dryRun = false;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        const defaultEnvAssignment = parseFlagAssignment(arg, '--default-env');
+        if (defaultEnvAssignment !== null) {
+            defaultEnvironment = parseDbEnvironment(defaultEnvAssignment);
+            continue;
+        }
+        if (arg === '--create') {
+            name = parseRequiredFlagValue(parsed.remaining[index + 1], '--create');
+            index += 1;
+            continue;
+        }
+        if (arg === '--default-env') {
+            defaultEnvironment = parseDbEnvironment(parsed.remaining[index + 1]);
+            index += 1;
+            continue;
+        }
+        if (arg === '--dry-run') {
+            dryRun = true;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown app db dashboards option: ${arg}`);
+    }
+    if (dryRun && !name) {
+        throw new TenderCliUsageError('--dry-run is only valid with --create. Example: tender app db dashboards artifact_123 --create "App admin" --dry-run --json');
+    }
+    return { command: 'app db dashboards', artifactId, name, defaultEnvironment, dryRun, ...parsed };
+}
+function parseDbDashboardsRenderArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'app db dashboards render' };
+    }
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith('-')) {
+        throw new TenderCliUsageError('app id is required. Example: tender app db dashboards render <app-id> --dashboard app_db_dashboard_123 --env published --json');
+    }
+    const parsed = parseDbCommonArgs(args, 1);
+    let dashboardId = null;
+    let environment = null;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        const dashboardAssignment = parseFlagAssignment(arg, '--dashboard');
+        if (dashboardAssignment !== null) {
+            dashboardId = parseRequiredFlagValue(dashboardAssignment, '--dashboard');
+            continue;
+        }
+        const envAssignment = parseFlagAssignment(arg, '--env');
+        if (envAssignment !== null) {
+            environment = parseDbEnvironment(envAssignment);
+            continue;
+        }
+        if (arg === '--dashboard') {
+            dashboardId = parseRequiredFlagValue(parsed.remaining[index + 1], '--dashboard');
+            index += 1;
+            continue;
+        }
+        if (arg === '--env') {
+            environment = parseDbEnvironment(parsed.remaining[index + 1]);
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown app db dashboards render option: ${arg}`);
+    }
+    if (!dashboardId) {
+        throw new TenderCliUsageError('--dashboard is required. Example: tender app db dashboards render artifact_123 --dashboard app_db_dashboard_123 --env published --json');
+    }
+    if (!environment) {
+        throw new TenderCliUsageError('--env is required. Example: tender app db dashboards render artifact_123 --dashboard app_db_dashboard_123 --env published --json');
+    }
+    return { command: 'app db dashboards render', artifactId, dashboardId, environment, ...parsed };
+}
+function parseDbResourcesSuggestArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'app db resources suggest' };
+    }
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith('-')) {
+        throw new TenderCliUsageError('app id is required. Example: tender app db resources suggest <app-id> --env published --json');
+    }
+    const parsed = parseDbCommonArgs(args, 1);
+    let environment = null;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        const envAssignment = parseFlagAssignment(arg, '--env');
+        if (envAssignment !== null) {
+            environment = parseDbEnvironment(envAssignment);
+            continue;
+        }
+        if (arg === '--env') {
+            environment = parseDbEnvironment(parsed.remaining[index + 1]);
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown app db resources suggest option: ${arg}`);
+    }
+    if (!environment) {
+        throw new TenderCliUsageError('--env is required. Example: tender app db resources suggest artifact_123 --env published --json');
+    }
+    return { command: 'app db resources suggest', artifactId, environment, ...parsed };
+}
+function parseDbResourcesCreateArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'app db resources create' };
+    }
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith('-')) {
+        throw new TenderCliUsageError('app id is required. Example: tender app db resources create <app-id> --dashboard app_db_dashboard_123 --spec resource.json --json');
+    }
+    const parsed = parseDbCommonArgs(args, 1);
+    let dashboardId = null;
+    let specPath = null;
+    const viewPaths = [];
+    let dryRun = false;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        const dashboardAssignment = parseFlagAssignment(arg, '--dashboard');
+        if (dashboardAssignment !== null) {
+            dashboardId = parseRequiredFlagValue(dashboardAssignment, '--dashboard');
+            continue;
+        }
+        const specAssignment = parseFlagAssignment(arg, '--spec');
+        if (specAssignment !== null) {
+            specPath = parseSpecPath(specAssignment);
+            continue;
+        }
+        const viewAssignment = parseFlagAssignment(arg, '--view');
+        if (viewAssignment !== null) {
+            viewPaths.push(parseSpecPath(viewAssignment));
+            continue;
+        }
+        if (arg === '--dashboard') {
+            dashboardId = parseRequiredFlagValue(parsed.remaining[index + 1], '--dashboard');
+            index += 1;
+            continue;
+        }
+        if (arg === '--spec') {
+            specPath = parseSpecPath(parsed.remaining[index + 1]);
+            index += 1;
+            continue;
+        }
+        if (arg === '--view') {
+            viewPaths.push(parseSpecPath(parsed.remaining[index + 1]));
+            index += 1;
+            continue;
+        }
+        if (arg === '--dry-run') {
+            dryRun = true;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown app db resources create option: ${arg}`);
+    }
+    if (!dashboardId) {
+        throw new TenderCliUsageError('--dashboard is required. Example: tender app db resources create artifact_123 --dashboard app_db_dashboard_123 --spec resource.json --json');
+    }
+    if (!specPath) {
+        throw new TenderCliUsageError('--spec is required. Example: tender app db resources create artifact_123 --dashboard app_db_dashboard_123 --spec resource.json --json');
+    }
+    return { command: 'app db resources create', artifactId, dashboardId, specPath, viewPaths, dryRun, ...parsed };
+}
+function parseDbWidgetsCreateArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'app db widgets create' };
+    }
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith('-')) {
+        throw new TenderCliUsageError('app id is required. Example: tender app db widgets create <app-id> --dashboard app_db_dashboard_123 --title "Total signups" --spec widget.json --json');
+    }
+    const parsed = parseDbCommonArgs(args, 1);
+    let dashboardId = null;
+    let title = null;
+    let specPath = null;
+    let dryRun = false;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        const dashboardAssignment = parseFlagAssignment(arg, '--dashboard');
+        if (dashboardAssignment !== null) {
+            dashboardId = parseRequiredFlagValue(dashboardAssignment, '--dashboard');
+            continue;
+        }
+        const titleAssignment = parseFlagAssignment(arg, '--title');
+        if (titleAssignment !== null) {
+            title = parseRequiredFlagValue(titleAssignment, '--title');
+            continue;
+        }
+        const specAssignment = parseFlagAssignment(arg, '--spec');
+        if (specAssignment !== null) {
+            specPath = parseSpecPath(specAssignment);
+            continue;
+        }
+        if (arg === '--dashboard') {
+            dashboardId = parseRequiredFlagValue(parsed.remaining[index + 1], '--dashboard');
+            index += 1;
+            continue;
+        }
+        if (arg === '--title') {
+            title = parseRequiredFlagValue(parsed.remaining[index + 1], '--title');
+            index += 1;
+            continue;
+        }
+        if (arg === '--spec') {
+            specPath = parseSpecPath(parsed.remaining[index + 1]);
+            index += 1;
+            continue;
+        }
+        if (arg === '--dry-run') {
+            dryRun = true;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown app db widgets create option: ${arg}`);
+    }
+    if (!dashboardId) {
+        throw new TenderCliUsageError('--dashboard is required. Example: tender app db widgets create artifact_123 --dashboard app_db_dashboard_123 --title "Total signups" --spec widget.json --json');
+    }
+    if (!title) {
+        throw new TenderCliUsageError('--title is required. Example: tender app db widgets create artifact_123 --dashboard app_db_dashboard_123 --title "Total signups" --spec widget.json --json');
+    }
+    if (!specPath) {
+        throw new TenderCliUsageError('--spec is required. Example: tender app db widgets create artifact_123 --dashboard app_db_dashboard_123 --title "Total signups" --spec widget.json --json');
+    }
+    return { command: 'app db widgets create', artifactId, dashboardId, title, specPath, dryRun, ...parsed };
+}
 const AGENT_HEARTBEAT_SOURCE_VALUES = new Set(['codex', 'claude-code', 'tender-cli', 'git', 'other']);
 const AGENT_HEARTBEAT_STATUS_VALUES = new Set(['connected', 'working', 'waiting_for_user', 'needs_attention']);
 const AGENT_HEARTBEAT_PHASE_VALUES = new Set([
@@ -5859,6 +6183,31 @@ function parseTenderArgs(args) {
         if (resourceArgs[1] === 'db' && resourceArgs[2] === 'query') {
             return parseDbQueryArgs(resourceArgs.slice(3));
         }
+        if (resourceArgs[1] === 'db' && resourceArgs[2] === 'dashboards' && resourceArgs[3] === 'render') {
+            return parseDbDashboardsRenderArgs(resourceArgs.slice(4));
+        }
+        if (resourceArgs[1] === 'db' && resourceArgs[2] === 'dashboards') {
+            return parseDbDashboardsArgs(resourceArgs.slice(3));
+        }
+        if (resourceArgs[1] === 'db' &&
+            resourceArgs[2] === 'resources' &&
+            (resourceArgs[3] === undefined || resourceArgs[3] === '--help' || resourceArgs[3] === '-h')) {
+            return { command: 'help', topic: 'app db resources create' };
+        }
+        if (resourceArgs[1] === 'db' && resourceArgs[2] === 'resources' && resourceArgs[3] === 'suggest') {
+            return parseDbResourcesSuggestArgs(resourceArgs.slice(4));
+        }
+        if (resourceArgs[1] === 'db' && resourceArgs[2] === 'resources' && resourceArgs[3] === 'create') {
+            return parseDbResourcesCreateArgs(resourceArgs.slice(4));
+        }
+        if (resourceArgs[1] === 'db' &&
+            resourceArgs[2] === 'widgets' &&
+            (resourceArgs[3] === undefined || resourceArgs[3] === '--help' || resourceArgs[3] === '-h')) {
+            return { command: 'help', topic: 'app db widgets create' };
+        }
+        if (resourceArgs[1] === 'db' && resourceArgs[2] === 'widgets' && resourceArgs[3] === 'create') {
+            return parseDbWidgetsCreateArgs(resourceArgs.slice(4));
+        }
         if (resourceArgs[1] === 'db') {
             throw new TenderCliUsageError(`Unknown app db command: ${resourceArgs[2]}`);
         }
@@ -6300,6 +6649,66 @@ async function requestDbApi(input) {
     }
     return payload;
 }
+function appDbDashboardApiSuffix(input) {
+    if (input.path === 'dashboards') {
+        return '';
+    }
+    if (input.path === 'suggest') {
+        return '/suggest';
+    }
+    if (!input.dashboardId) {
+        throw new TenderCliUsageError('--dashboard is required.');
+    }
+    if (input.path === 'dashboard') {
+        return `/${encodeURIComponent(input.dashboardId)}`;
+    }
+    if (input.path === 'resources') {
+        return `/${encodeURIComponent(input.dashboardId)}/resources`;
+    }
+    if (input.path === 'resourceQuery') {
+        if (!input.resourceId) {
+            throw new TenderCliUsageError('--resource is required.');
+        }
+        return `/${encodeURIComponent(input.dashboardId)}/resources/${encodeURIComponent(input.resourceId)}/query`;
+    }
+    if (input.path === 'widgets') {
+        return `/${encodeURIComponent(input.dashboardId)}/widgets`;
+    }
+    if (!input.widgetId) {
+        throw new TenderCliUsageError('--widget is required.');
+    }
+    return `/${encodeURIComponent(input.dashboardId)}/widgets/${encodeURIComponent(input.widgetId)}/query`;
+}
+async function requestAppDbDashboardApi(input) {
+    const suffix = appDbDashboardApiSuffix(input);
+    const response = await input.fetcher(`${input.baseUrl}/api/v1/artifacts/${encodeURIComponent(input.artifactId)}/app-db-dashboards${suffix}`, {
+        method: input.method,
+        headers: {
+            authorization: `Bearer ${input.token}`,
+            accept: 'application/json',
+            ...(input.body === undefined ? {} : { 'content-type': 'application/json' }),
+        },
+        body: input.body === undefined ? undefined : JSON.stringify(input.body),
+    });
+    const payload = await parseJsonResponse(response);
+    if (!response.ok || !payload?.ok) {
+        const reasonCode = (typeof payload?.reasonCode === 'string' && payload.reasonCode) || `http_${response.status}`;
+        const message = (typeof payload?.message === 'string' && payload.message) ||
+            (typeof payload?.reasonCode === 'string' && payload.reasonCode) ||
+            `App database dashboard request failed with HTTP ${response.status}.`;
+        const example = appDbDashboardCorrectedExample(input.artifactId, input.path);
+        throw new TenderCliDbApiError([
+            message,
+            `Scope: artifact ${input.artifactId}, app-db-dashboards.`,
+            `Reason: ${reasonCode}.`,
+            `Example: ${example}.`,
+        ].join('\n'), reasonCode, {
+            artifactId: input.artifactId,
+            surface: 'db/dashboards',
+        }, example);
+    }
+    return payload;
+}
 function encodePathSegments(filePath) {
     return filePath.split('/').map(encodeURIComponent).join('/');
 }
@@ -6341,6 +6750,21 @@ function dbCorrectedExample(artifactId, dbPath) {
     }
     return `tender app db query ${artifactId} --env published --sql "select * from <table-name> limit 20" --json`;
 }
+function appDbDashboardCorrectedExample(artifactId, path) {
+    if (path === 'suggest') {
+        return `tender app db resources suggest ${artifactId} --env published --json`;
+    }
+    if (path === 'dashboard' || path === 'resourceQuery' || path === 'widgetQuery') {
+        return `tender app db dashboards render ${artifactId} --dashboard app_db_dashboard_123 --env published --json`;
+    }
+    if (path === 'resources') {
+        return `tender app db resources create ${artifactId} --dashboard app_db_dashboard_123 --spec resource.json --json`;
+    }
+    if (path === 'widgets') {
+        return `tender app db widgets create ${artifactId} --dashboard app_db_dashboard_123 --title "Total signups" --spec widget.json --json`;
+    }
+    return `tender app db dashboards ${artifactId} --json`;
+}
 function analyticsCorrectedExample(artifactId, analyticsPath) {
     if (analyticsPath === 'capabilities') {
         return `tender app analytics capabilities ${artifactId} --include-catalog --range 30d --json`;
@@ -9755,6 +10179,310 @@ async function runDbQuery(command, io, runtime) {
     ]);
     return 0;
 }
+async function runDbDashboards(command, io, runtime) {
+    if (command.name && command.dryRun) {
+        const payload = {
+            ok: true,
+            dryRun: true,
+            artifactId: command.artifactId,
+            request: {
+                name: command.name,
+                defaultEnvironment: command.defaultEnvironment ?? 'published',
+            },
+        };
+        printDbPayload(command, io, payload, [`app_id: ${command.artifactId}`, `name: ${command.name}`, 'dry_run: true']);
+        return 0;
+    }
+    const credentials = await resolveDbCredentials(command, runtime);
+    const payload = await requestAppDbDashboardApi({
+        artifactId: command.artifactId,
+        path: 'dashboards',
+        method: command.name ? 'POST' : 'GET',
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+        body: command.name
+            ? {
+                name: command.name,
+                defaultEnvironment: command.defaultEnvironment ?? 'published',
+            }
+            : undefined,
+    });
+    const dashboards = Array.isArray(payload.dashboards) ? payload.dashboards : [];
+    printDbPayload(command, io, payload, [
+        `app_id: ${command.artifactId}`,
+        command.name
+            ? `dashboard_id: ${String(payload.dashboard?.id ?? '')}`
+            : `dashboards: ${dashboards.length}`,
+    ]);
+    return 0;
+}
+function isAppDbRecord(value) {
+    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+function appDbRecordArray(value) {
+    return Array.isArray(value) ? value.filter(isAppDbRecord) : [];
+}
+function appDbStringField(record, field) {
+    const value = record[field];
+    return typeof value === 'string' && value.trim() ? value : null;
+}
+function appDbResourcePageSize(resource) {
+    const spec = isAppDbRecord(resource.spec) ? resource.spec : null;
+    const pageSize = spec && typeof spec.pageSize === 'number' && Number.isInteger(spec.pageSize) ? spec.pageSize : 50;
+    return Math.min(Math.max(pageSize, 1), 50);
+}
+function appDbDateRangeDays(value) {
+    if (value === 'last_7_days') {
+        return 7;
+    }
+    if (value === 'last_90_days') {
+        return 90;
+    }
+    return 30;
+}
+function appDbDashboardDateRangeRequest(dashboard, now) {
+    const spec = isAppDbRecord(dashboard.spec) ? dashboard.spec : {};
+    const controls = isAppDbRecord(spec.controls) ? spec.controls : {};
+    const dateRange = isAppDbRecord(controls.dateRange) ? controls.dateRange : {};
+    const enabled = dateRange.enabled === undefined ? true : dateRange.enabled === true;
+    const defaultRange = dateRange.defaultRange ?? 'last_30_days';
+    if (enabled &&
+        isAppDbRecord(defaultRange) &&
+        defaultRange.type === 'fixed' &&
+        (typeof defaultRange.start === 'string' || typeof defaultRange.start === 'number') &&
+        (typeof defaultRange.end === 'string' || typeof defaultRange.end === 'number')) {
+        return { start: defaultRange.start, end: defaultRange.end };
+    }
+    const preset = typeof defaultRange === 'string' ? defaultRange : 'last_30_days';
+    if (!enabled || preset === 'all_time') {
+        return null;
+    }
+    const end = new Date(now);
+    const start = new Date(end);
+    start.setDate(start.getDate() - (appDbDateRangeDays(preset) - 1));
+    return {
+        start: start.toISOString().slice(0, 10),
+        end: end.toISOString().slice(0, 10),
+    };
+}
+async function runDbResourcesSuggest(command, io, runtime) {
+    const credentials = await resolveDbCredentials(command, runtime);
+    const payload = await requestAppDbDashboardApi({
+        artifactId: command.artifactId,
+        path: 'suggest',
+        method: 'POST',
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+        body: { environment: command.environment },
+    });
+    const resources = Array.isArray(payload.resources) ? payload.resources : [];
+    printDbPayload(command, io, payload, [
+        `app_id: ${command.artifactId}`,
+        `environment: ${command.environment}`,
+        `suggested_resources: ${resources.length}`,
+    ]);
+    return 0;
+}
+async function runDbDashboardsRender(command, io, runtime) {
+    const credentials = await resolveDbCredentials(command, runtime);
+    const dashboardPayload = await requestAppDbDashboardApi({
+        artifactId: command.artifactId,
+        path: 'dashboard',
+        dashboardId: command.dashboardId,
+        method: 'GET',
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+    });
+    const dashboard = isAppDbRecord(dashboardPayload.dashboard) ? dashboardPayload.dashboard : {};
+    const dateRange = appDbDashboardDateRangeRequest(dashboard, runtime.now ? runtime.now() : Date.now());
+    const resources = appDbRecordArray(dashboard.resources).slice(0, 6);
+    const widgets = appDbRecordArray(dashboard.widgets).slice(0, 12);
+    const resourceResults = [];
+    for (const resource of resources) {
+        const resourceId = appDbStringField(resource, 'id');
+        if (!resourceId) {
+            continue;
+        }
+        const views = [
+            { viewId: null, name: 'Default' },
+            ...appDbRecordArray(resource.views)
+                .slice(0, 4)
+                .map((view) => ({
+                viewId: appDbStringField(view, 'id'),
+                name: appDbStringField(view, 'name') ?? 'Saved view',
+            }))
+                .filter((view) => view.viewId !== null),
+        ];
+        const viewResults = [];
+        for (const view of views) {
+            const result = await requestAppDbDashboardApi({
+                artifactId: command.artifactId,
+                path: 'resourceQuery',
+                dashboardId: command.dashboardId,
+                resourceId,
+                method: 'POST',
+                baseUrl: credentials.baseUrl,
+                token: credentials.token,
+                fetcher: runtime.fetcher ?? fetch,
+                body: {
+                    environment: command.environment,
+                    ...(view.viewId ? { viewId: view.viewId } : {}),
+                    ...(dateRange ? { dateRange } : {}),
+                    limit: appDbResourcePageSize(resource),
+                    offset: 0,
+                },
+            });
+            viewResults.push({
+                viewId: view.viewId,
+                name: view.name,
+                result,
+            });
+        }
+        resourceResults.push({
+            resourceId,
+            label: appDbStringField(resource, 'label') ?? resourceId,
+            views: viewResults,
+        });
+    }
+    const widgetResults = [];
+    for (const widget of widgets) {
+        const widgetId = appDbStringField(widget, 'id');
+        if (!widgetId) {
+            continue;
+        }
+        const spec = isAppDbRecord(widget.spec) ? widget.spec : null;
+        const specLimit = spec && typeof spec.limit === 'number' && Number.isInteger(spec.limit) ? spec.limit : 20;
+        const result = await requestAppDbDashboardApi({
+            artifactId: command.artifactId,
+            path: 'widgetQuery',
+            dashboardId: command.dashboardId,
+            widgetId,
+            method: 'POST',
+            baseUrl: credentials.baseUrl,
+            token: credentials.token,
+            fetcher: runtime.fetcher ?? fetch,
+            body: {
+                environment: command.environment,
+                ...(dateRange ? { dateRange } : {}),
+                limit: Math.min(Math.max(specLimit, 1), 50),
+                offset: 0,
+            },
+        });
+        widgetResults.push({
+            widgetId,
+            title: appDbStringField(widget, 'title') ?? widgetId,
+            result,
+        });
+    }
+    const payload = {
+        ok: true,
+        artifactId: command.artifactId,
+        environment: command.environment,
+        dashboard,
+        resources: resourceResults,
+        widgets: widgetResults,
+    };
+    printDbPayload(command, io, payload, [
+        `app_id: ${command.artifactId}`,
+        `dashboard_id: ${command.dashboardId}`,
+        `environment: ${command.environment}`,
+        `resources_rendered: ${resourceResults.length}`,
+        `widgets_rendered: ${widgetResults.length}`,
+    ]);
+    return 0;
+}
+async function readJsonSpecFile(input) {
+    return readAnalyticsSpec({
+        specPath: input.specPath,
+        stdin: input.stdin,
+    });
+}
+async function runDbResourcesCreate(command, io, runtime) {
+    const spec = await readJsonSpecFile({
+        specPath: command.specPath,
+        stdin: runtime.stdin,
+    });
+    const views = [];
+    for (const viewPath of command.viewPaths) {
+        views.push({
+            spec: await readJsonSpecFile({
+                specPath: viewPath,
+                stdin: runtime.stdin,
+            }),
+        });
+    }
+    const body = {
+        spec,
+        ...(views.length > 0 ? { views } : {}),
+    };
+    if (command.dryRun) {
+        printDbPayload(command, io, {
+            ok: true,
+            dryRun: true,
+            artifactId: command.artifactId,
+            dashboardId: command.dashboardId,
+            request: body,
+        }, [`app_id: ${command.artifactId}`, `dashboard_id: ${command.dashboardId}`, 'dry_run: true']);
+        return 0;
+    }
+    const credentials = await resolveDbCredentials(command, runtime);
+    const payload = await requestAppDbDashboardApi({
+        artifactId: command.artifactId,
+        path: 'resources',
+        dashboardId: command.dashboardId,
+        method: 'POST',
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+        body,
+    });
+    printDbPayload(command, io, payload, [
+        `app_id: ${command.artifactId}`,
+        `dashboard_id: ${command.dashboardId}`,
+        `resource_id: ${String(payload.resource?.id ?? '')}`,
+    ]);
+    return 0;
+}
+async function runDbWidgetsCreate(command, io, runtime) {
+    const spec = await readJsonSpecFile({
+        specPath: command.specPath,
+        stdin: runtime.stdin,
+    });
+    const body = {
+        title: command.title,
+        spec,
+    };
+    if (command.dryRun) {
+        printDbPayload(command, io, {
+            ok: true,
+            dryRun: true,
+            artifactId: command.artifactId,
+            dashboardId: command.dashboardId,
+            request: body,
+        }, [`app_id: ${command.artifactId}`, `dashboard_id: ${command.dashboardId}`, `title: ${command.title}`, 'dry_run: true']);
+        return 0;
+    }
+    const credentials = await resolveDbCredentials(command, runtime);
+    const payload = await requestAppDbDashboardApi({
+        artifactId: command.artifactId,
+        path: 'widgets',
+        dashboardId: command.dashboardId,
+        method: 'POST',
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+        body,
+    });
+    printDbPayload(command, io, payload, [
+        `app_id: ${command.artifactId}`,
+        `dashboard_id: ${command.dashboardId}`,
+        `widget_id: ${String(payload.widget?.id ?? '')}`,
+    ]);
+    return 0;
+}
 async function runAnalyticsSummary(command, io, runtime) {
     const credentials = await resolveAnalyticsCredentials(command, runtime);
     const payload = await requestAnalyticsApi({
@@ -10466,6 +11194,21 @@ export async function runTenderCli(args, io = {
             else if (command.topic === 'app db query') {
                 io.stdout(dbQueryHelp());
             }
+            else if (command.topic === 'app db dashboards') {
+                io.stdout(dbDashboardsHelp());
+            }
+            else if (command.topic === 'app db dashboards render') {
+                io.stdout(dbDashboardsRenderHelp());
+            }
+            else if (command.topic === 'app db resources suggest') {
+                io.stdout(dbResourcesSuggestHelp());
+            }
+            else if (command.topic === 'app db resources create') {
+                io.stdout(dbResourcesCreateHelp());
+            }
+            else if (command.topic === 'app db widgets create') {
+                io.stdout(dbWidgetsCreateHelp());
+            }
             else if (command.topic === 'app') {
                 io.stdout(appHelp());
             }
@@ -10657,6 +11400,21 @@ export async function runTenderCli(args, io = {
         if (command.command === 'app db query') {
             return await runDbQuery(command, io, runtime);
         }
+        if (command.command === 'app db dashboards') {
+            return await runDbDashboards(command, io, runtime);
+        }
+        if (command.command === 'app db resources suggest') {
+            return await runDbResourcesSuggest(command, io, runtime);
+        }
+        if (command.command === 'app db dashboards render') {
+            return await runDbDashboardsRender(command, io, runtime);
+        }
+        if (command.command === 'app db resources create') {
+            return await runDbResourcesCreate(command, io, runtime);
+        }
+        if (command.command === 'app db widgets create') {
+            return await runDbWidgetsCreate(command, io, runtime);
+        }
         if (command.command === 'app git remote') {
             return await runGitRemote(command, io, runtime);
         }
@@ -10685,6 +11443,8 @@ export function shouldReadEntrypointStdin(args) {
         ((args[1] === 'git' && args[2] === 'credential') ||
             (args[1] === 'analytics' && hasFlagValue(args, '--spec', '-')) ||
             (args[1] === 'agent' && args[2] === 'heartbeat' && hasFlagValue(args, '--input', '-')) ||
+            (args[1] === 'db' && (args[2] === 'resources' || args[2] === 'widgets') && hasFlagValue(args, '--spec', '-')) ||
+            (args[1] === 'db' && args[2] === 'resources' && hasFlagValue(args, '--view', '-')) ||
             (args[1] === 'db' && args[2] === 'query' && hasFlagValue(args, '--file', '-'))));
 }
 async function readEntrypointStdin() {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@tenderprompt/cli",
-	"version": "0.1.25",
+	"version": "0.1.26",
 	"type": "module",
 	"bin": {
 		"tender": "bin/tender.js"