@tenderprompt/cli 0.1.26 → 0.1.28

package/dist/index.js

@@ -146,6 +146,16 @@ Commands:
   tender playbooks get <id>  Fetch one remote playbook body on demand
   tender playbooks file <id> --path <path>
                              Fetch one playbook reference file on demand
+  tender connectors list     List account-level connector instances
+  tender connectors shopify create
+                             Create a merchant-owned Shopify connector
+  tender connectors shopify credentials set
+                             Store Shopify custom app credentials from stdin or env
+  tender connectors shopify app-automation-token set
+                             Store Shopify CLI deployment token from stdin or env
+  tender connectors shopify verify
+                             Exchange credentials for an Admin API access token
+  tender connectors bind     Print an app.json binding for a connector instance
   tender app list            List Tender App records visible to the current token
   tender app create --name <name>
                              Create a new Tender App in the current account
@@ -217,6 +227,12 @@ Examples:
   tender playbooks list --json
   tender playbooks get recharge-bundle-builder --json
   tender playbooks file recharge-bundle-builder --path references/recharge-payloads.md --json
+  tender connectors list --profile account --json
+  tender connectors shopify create --instance default --admin-api-version 2026-04 --shop demo.myshopify.com --profile account --json
+  printf "$SHOPIFY_CLIENT_SECRET" | tender connectors shopify credentials set conn_123 --shop demo.myshopify.com --client-id abc --client-secret-stdin --profile account --json
+  printf "$SHOPIFY_APP_AUTOMATION_TOKEN" | tender connectors shopify app-automation-token set conn_123 --token-stdin --expires-at 2026-08-22 --profile account --json
+  tender connectors shopify verify conn_123 --profile account --json
+  tender connectors bind SHOPIFY_CONNECTOR conn_123 --instance default --json
   tender app list --json
   tender app create --name "Exit Intent Widget" --json
   tender app create --name "Exit Intent Widget" --init --dir ./widget --preview --json
@@ -380,6 +396,159 @@ This command does not write playbooks to disk.
 Examples:
   tender playbooks file recharge-bundle-builder --path references/recharge-payloads.md --json`;
 }
+function connectorsHelp() {
+    return `Usage: tender connectors <command> [options]
+
+Commands:
+  tender connectors list
+                             List account-level connector instances
+  tender connectors shopify create
+                             Create a Shopify connector and setup URL
+  tender connectors shopify setup-url <connector-id>
+                             Create a fresh credential setup URL
+  tender connectors shopify credentials set <connector-id>
+                             Store custom app credentials from stdin or env
+  tender connectors shopify app-automation-token set <connector-id>
+                             Store Shopify CLI deployment token from stdin or env
+  tender connectors shopify app-automation-token delete <connector-id>
+                             Remove the stored Shopify CLI deployment token
+  tender connectors shopify verify <connector-id>
+                             Verify credentials with Shopify
+  tender connectors shopify source init <connector-id>
+                             Create/ensure internal Artifact Git Shopify app source
+  tender connectors shopify source checkout <connector-id>
+                             Checkout the connector source artifact
+  tender connectors shopify source validate <connector-id>
+                             Validate connector source with Shopify CLI
+  tender connectors shopify source deploy <connector-id>
+                             Deploy connector source with Shopify CLI
+  tender connectors shopify delete <connector-id>
+                             Disable and remove stored credentials
+  tender connectors bind <binding-name> <connector-id>
+                             Print an app.json binding for the connector instance
+
+Examples:
+  tender connectors list --profile account --json
+  tender connectors shopify create --instance default --admin-api-version 2026-04 --shop demo.myshopify.com --profile account --json
+  printf "$SHOPIFY_CLIENT_SECRET" | tender connectors shopify credentials set conn_123 --shop demo.myshopify.com --client-id abc --client-secret-stdin --profile account --json
+  printf "$SHOPIFY_APP_AUTOMATION_TOKEN" | tender connectors shopify app-automation-token set conn_123 --token-stdin --expires-at 2026-08-22 --profile account --json
+  tender connectors shopify verify conn_123 --profile account --json
+  tender connectors shopify source init conn_123 --dir ./shopify-app --client-id abc --tender-app-url https://example.tenderprompt.app/client.js --tender-element tender-widget --profile account --json
+  tender connectors shopify source validate conn_123 --dir ./shopify-app --execute --json
+  SHOPIFY_APP_AUTOMATION_TOKEN=shpat_... tender connectors shopify source deploy conn_123 --dir ./shopify-app --confirm deploy --json
+  tender connectors bind SHOPIFY_CONNECTOR conn_123 --instance default --json`;
+}
+function connectorsShopifyCreateHelp() {
+    return `Usage: tender connectors shopify create [--instance <id>] [--label <text>] [--app-name <text>] [--admin-api-version <version>] [--shop <myshopify-domain>] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Creates a merchant-owned Shopify connector record and returns a setup URL for
+secure credential capture.
+
+Examples:
+  tender connectors shopify create --instance default --admin-api-version 2026-04 --shop demo.myshopify.com --profile account --json`;
+}
+function connectorsShopifySetupUrlHelp() {
+    return `Usage: tender connectors shopify setup-url <connector-id> [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Creates a fresh one-time credential setup URL for an existing connector.
+
+Examples:
+  tender connectors shopify setup-url conn_123 --profile account --json`;
+}
+function connectorsShopifyCredentialsSetHelp() {
+    return `Usage: tender connectors shopify credentials set <connector-id> --shop <myshopify-domain> --client-id <id> (--client-secret-stdin | --client-secret-env <name>) [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Stores credentials without printing the client secret. Prefer stdin or an env
+var so shell history does not capture the secret.
+
+Examples:
+  printf "$SHOPIFY_CLIENT_SECRET" | tender connectors shopify credentials set conn_123 --shop demo.myshopify.com --client-id abc --client-secret-stdin --profile account --json
+  SHOPIFY_CLIENT_SECRET=shpss_123 tender connectors shopify credentials set conn_123 --shop demo.myshopify.com --client-id abc --client-secret-env SHOPIFY_CLIENT_SECRET --profile account --json`;
+}
+function connectorsShopifyAppAutomationTokenSetHelp() {
+    return `Usage: tender connectors shopify app-automation-token set <connector-id> (--token-stdin | --token-env <name>) [--expires-at <date-or-iso>] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Stores a Shopify App Automation Token for non-interactive Shopify CLI deploys.
+This token is separate from the connector's Admin API runtime credentials.
+
+Examples:
+  printf "$SHOPIFY_APP_AUTOMATION_TOKEN" | tender connectors shopify app-automation-token set conn_123 --token-stdin --expires-at 2026-08-22 --profile account --json
+  tender connectors shopify app-automation-token set conn_123 --token-env SHOPIFY_APP_AUTOMATION_TOKEN --expires-at 2026-08-22 --profile account --json`;
+}
+function connectorsShopifyAppAutomationTokenDeleteHelp() {
+    return `Usage: tender connectors shopify app-automation-token delete <connector-id> --confirm delete [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Removes the stored Shopify App Automation Token metadata and secret.
+
+Examples:
+  tender connectors shopify app-automation-token delete conn_123 --confirm delete --profile account --json`;
+}
+function connectorsShopifyVerifyHelp() {
+    return `Usage: tender connectors shopify verify <connector-id> [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Exchanges the stored client ID and secret through Shopify's client credentials
+grant and stores the returned Admin API access token.
+
+Examples:
+  tender connectors shopify verify conn_123 --profile account --json`;
+}
+function connectorsShopifySourceInitHelp() {
+    return `Usage: tender connectors shopify source init <connector-id> --dir <path> --client-id <shopify-client-id> --tender-app-url <client.js-url> --tender-element <custom-element> [--source-name <name>] [--artifact-id <id>] [--public-id <id>] [--theme-extension-handle <handle>] [--theme-extension-uid <uid>] [--block-name <name>] [--scopes <csv>] [--force] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Creates or reuses an internal Tender source artifact for the merchant-owned
+Shopify app, checks it out to --dir, writes non-secret Shopify app source,
+commits it, pushes it to Artifact Git, and records sourceArtifactId on the
+connector. The generated source includes shopify.app.toml, dog-profile app-owned
+custom data definitions, and a Theme App Extension app-block template.
+
+Examples:
+  tender connectors shopify source init conn_123 --dir ./shopify-app --client-id abc --tender-app-url https://example.tenderprompt.app/client.js --tender-element tender-widget --profile account --json`;
+}
+function connectorsShopifySourceCheckoutHelp() {
+    return `Usage: tender connectors shopify source checkout <connector-id> --dir <path> [--remote <name>] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Checks out the connector's internal Shopify source artifact and configures the
+Tender Artifact Git remote.
+
+Examples:
+  tender connectors shopify source checkout conn_123 --dir ./shopify-app --profile account --json`;
+}
+function connectorsShopifySourceValidateHelp() {
+    return `Usage: tender connectors shopify source validate <connector-id> [--dir <path>] [--client-id <shopify-client-id>] [--execute] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Without --execute, prints the exact Shopify CLI validation command. With
+--execute, runs npx --yes @shopify/cli@latest app config validate.
+
+Examples:
+  tender connectors shopify source validate conn_123 --dir ./shopify-app --execute --json`;
+}
+function connectorsShopifySourceDeployHelp() {
+    return `Usage: tender connectors shopify source deploy <connector-id> [--dir <path>] [--client-id <shopify-client-id>] [--version <tag>] [--message <text>] [--source-control-url <url>] [--allow-deletes] [--confirm deploy] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Without --confirm deploy, prints the exact Shopify CLI deployment command. With
+--confirm deploy, runs npx --yes @shopify/cli@latest app deploy. Set
+SHOPIFY_APP_AUTOMATION_TOKEN in the environment for non-interactive deploys.
+
+Examples:
+  SHOPIFY_APP_AUTOMATION_TOKEN=shpat_... tender connectors shopify source deploy conn_123 --dir ./shopify-app --version dog-profile-smoke --confirm deploy --json`;
+}
+function connectorsShopifyDeleteHelp() {
+    return `Usage: tender connectors shopify delete <connector-id> --confirm delete [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+
+Disables a connector and removes its stored credentials.
+
+Examples:
+  tender connectors shopify delete conn_123 --confirm delete --profile account --json`;
+}
+function connectorsBindHelp() {
+    return `Usage: tender connectors bind <binding-name> <connector-id> --instance <id> [--label <text>] [--json]
+
+Prints the app.json binding snippet a Tender App can opt into. The app receives
+the binding at runtime as env.<binding-name>.
+
+Examples:
+  tender connectors bind SHOPIFY_CONNECTOR conn_123 --instance default --json`;
+}
 function appHelp() {
     return `Usage: tender app <command> [options]
 
@@ -1307,6 +1476,47 @@ function tenderCliCapabilities() {
             persistence: 'session_only',
             writesToCheckout: false,
         },
+        connectors: {
+            mode: 'tenant_owned_platform_bindings',
+            listCommand: 'tender connectors list --profile account --json',
+            bindCommand: 'tender connectors bind <binding-name> <connector-id> --instance <instance-id> --json',
+            shopify: {
+                playbookId: 'shopify-connector-custom-app',
+                playbookCommand: 'tender playbooks get shopify-connector-custom-app --json',
+                customerMetadataPlaybookCommand: 'tender playbooks get shopify-connector-customer-metadata-widget --json',
+                whatItIs: 'A merchant-owned Shopify custom app exposed to Tender apps through an explicit platform connector binding.',
+                whenToUse: [
+                    'Shopify Admin GraphQL reads or writes',
+                    'customer metafields or customer-linked metaobjects',
+                    'app-owned custom data definitions',
+                    'Theme App Extension app blocks',
+                    'privileged background Shopify work that browser code cannot safely perform',
+                ],
+                whenNotToUse: [
+                    'pure frontend widgets',
+                    'Tender analytics only',
+                    'public Shopify data already present on the page',
+                    'client-side event publishing without Admin API writes',
+                ],
+                binding: {
+                    name: 'SHOPIFY_CONNECTOR',
+                    source: 'platform:shopify_connector',
+                    interface: 'ShopifyConnector',
+                    callShape: 'await this.env.SHOPIFY_CONNECTOR.invoke("shopify.graphql", { query, variables })',
+                },
+                sourceProject: {
+                    durableIdentity: 'connector.sourceProject.sourceArtifactId',
+                    targetPackId: 'shopify-connector-source',
+                    visibility: 'internal_source_artifact_not_customer_facing_app',
+                },
+                guardrails: [
+                    'Use the account profile because connectors are account-level resources.',
+                    'Use minimum Shopify scopes for the requested job.',
+                    'Never commit client secrets, Admin API tokens, app automation tokens, Tender tokens, or customer data exports.',
+                    'Do not create bindings/<id>/ files for Shopify connectors; use the platform connector source in app.json.',
+                ],
+            },
+        },
         analyticsAuthoring: {
             command: ANALYTICS_AUTHORING_COMMAND,
             playbookId: ANALYTICS_AUTHORING_PLAYBOOK_ID,
@@ -1333,6 +1543,8 @@ function tenderCliCapabilities() {
                 'tender app db --help',
                 'tender app bindings outbound --help',
                 'tender app outbound-auth --help',
+                'tender connectors --help',
+                'tender connectors shopify source init --help',
             ],
         },
         workflows: [
@@ -1358,6 +1570,23 @@ function tenderCliCapabilities() {
                     'Do not write fetched playbook contents into the checkout or install them as skills.',
                 ],
             },
+            {
+                name: 'shopify_connector_discovery',
+                when: 'When a Tender App needs Shopify Admin API access, customer metadata, app blocks, app-owned custom data, or a merchant-owned Shopify custom app.',
+                commands: [
+                    'tender capabilities --json',
+                    'tender playbooks list --json',
+                    'tender playbooks get shopify-connector-custom-app --json',
+                    'tender connectors list --profile account --json',
+                    'tender connectors bind SHOPIFY_CONNECTOR <connector-id> --instance default --json',
+                ],
+                notes: [
+                    'Connectors are tenant-owned platform bindings, not generated binding workers.',
+                    'The merchant owns the Shopify custom app; Tender stores connector credentials and app source metadata.',
+                    'Use connector.sourceProject.sourceArtifactId as the durable Shopify app source identity.',
+                    'Fetch shopify-connector-customer-metadata-widget when the requested job involves customer metafields, metaobjects, or profile writes.',
+                ],
+            },
             {
                 name: 'create_new_app_with_preview',
                 when: 'When the user wants a new Tender App that is immediately visible.',
@@ -3077,643 +3306,682 @@ function parseShareCommonArgs(args, startIndex) {
     }
     return { baseUrl, flagToken, profileName, json, remaining };
 }
-function parseShareCreateArgs(args) {
-    if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'app share create' };
-    }
-    const artifactId = args[0];
-    if (!artifactId || artifactId.startsWith('-')) {
-        throw new TenderCliUsageError('app id is required. Example: tender app share create <app-id> --json');
-    }
-    const parsed = parseShareCommonArgs(args, 1);
-    let expires = '7d';
-    let claims = 1;
-    for (let index = 0; index < parsed.remaining.length; index += 1) {
-        const arg = parsed.remaining[index];
-        if (arg === '--expires') {
-            expires = parseRequiredFlagValue(parsed.remaining[index + 1], '--expires');
+function parseConnectorsCommonArgs(args, startIndex) {
+    let baseUrl = null;
+    let flagToken = null;
+    let profileName = null;
+    let json = false;
+    const remaining = [];
+    for (let index = startIndex; index < args.length; index += 1) {
+        const arg = args[index];
+        if (arg === '--json') {
+            json = true;
+            continue;
+        }
+        if (arg === '--base-url') {
+            baseUrl = parseBaseUrlFlag(args, index);
             index += 1;
             continue;
         }
-        if (arg === '--claims') {
-            claims = parsePositiveIntegerFlag(parsed.remaining[index + 1], '--claims');
+        if (arg === '--token') {
+            flagToken = parseTokenFlag(args, index);
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown app share create option: ${arg}`);
+        if (arg === '--profile') {
+            profileName = parseProfileName(args[index + 1], '--profile');
+            index += 1;
+            continue;
+        }
+        remaining.push(arg);
     }
-    return { command: 'app share create', artifactId, expires, claims, ...parsed };
+    return { baseUrl, flagToken, profileName, json, remaining };
 }
-function parseShareInspectArgs(args) {
-    if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'app share inspect' };
+function parseConnectorId(value, usage) {
+    if (!value || value.startsWith('-')) {
+        throw new TenderCliUsageError(`connector id is required. Example: ${usage}`);
     }
-    const token = args[0];
-    if (!token || token.startsWith('-')) {
-        throw new TenderCliUsageError('share token is required. Example: tender app share inspect <token> --json');
+    return value;
+}
+function parseConnectorInstanceId(value) {
+    const normalized = (value ?? 'default').trim().toLowerCase();
+    if (!/^[a-z0-9][a-z0-9_-]{0,63}$/.test(normalized)) {
+        throw new TenderCliUsageError('--instance must start with a letter or number and contain only lowercase letters, numbers, underscores, or dashes.');
     }
-    const parsed = parseShareCommonArgs(args, 1);
-    if (parsed.remaining.length > 0) {
-        throw new TenderCliUsageError(`Unknown app share inspect option: ${parsed.remaining[0]}`);
+    return normalized;
+}
+function parseBindingName(value) {
+    if (!value || value.startsWith('-')) {
+        throw new TenderCliUsageError('binding name is required. Example: tender connectors bind SHOPIFY_CONNECTOR conn_123 --instance default --json');
     }
-    return { command: 'app share inspect', token, ...parsed };
+    if (!/^[A-Z][A-Z0-9_]{0,79}$/.test(value)) {
+        throw new TenderCliUsageError('binding name must look like SHOPIFY_CONNECTOR.');
+    }
+    return value;
 }
-function parseShareRevokeArgs(args) {
+function parseConnectorsListArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'app share revoke' };
-    }
-    const shareId = args[0];
-    if (!shareId || shareId.startsWith('-')) {
-        throw new TenderCliUsageError('share id is required. Example: tender app share revoke <share-id> --json');
+        return { command: 'help', topic: 'connectors list' };
     }
-    const parsed = parseShareCommonArgs(args, 1);
+    const parsed = parseConnectorsCommonArgs(args, 0);
     if (parsed.remaining.length > 0) {
-        throw new TenderCliUsageError(`Unknown app share revoke option: ${parsed.remaining[0]}`);
+        throw new TenderCliUsageError(`Unknown connectors list option: ${parsed.remaining[0]}`);
     }
-    return { command: 'app share revoke', shareId, ...parsed };
+    return { command: 'connectors list', ...parsed };
 }
-function parseClaimArgs(args) {
+function parseConnectorsShopifyCreateArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'app claim' };
-    }
-    const token = args[0];
-    if (!token || token.startsWith('-')) {
-        throw new TenderCliUsageError('share token is required. Example: tender app claim <token> --dir ./widget');
+        return { command: 'help', topic: 'connectors shopify create' };
     }
-    const parsed = parseShareCommonArgs(args, 1);
-    let dir = null;
-    let name = null;
-    let confirm = null;
+    const parsed = parseConnectorsCommonArgs(args, 0);
+    let instanceId = 'default';
+    let label = null;
+    let appName = null;
+    let adminApiVersion = null;
+    let shopDomain = null;
     for (let index = 0; index < parsed.remaining.length; index += 1) {
         const arg = parsed.remaining[index];
-        if (arg === '--dir') {
-            dir = parseRequiredFlagValue(parsed.remaining[index + 1], '--dir');
+        if (arg === '--instance') {
+            instanceId = parseConnectorInstanceId(parsed.remaining[index + 1]);
             index += 1;
             continue;
         }
-        if (arg === '--name') {
-            name = parseRequiredFlagValue(parsed.remaining[index + 1], '--name');
+        if (arg === '--label') {
+            label = parseRequiredFlagValue(parsed.remaining[index + 1], '--label');
             index += 1;
             continue;
         }
-        if (arg === '--confirm') {
-            confirm = parseRequiredFlagValue(parsed.remaining[index + 1], '--confirm');
+        if (arg === '--app-name') {
+            appName = parseRequiredFlagValue(parsed.remaining[index + 1], '--app-name');
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown app claim option: ${arg}`);
-    }
-    if (!dir) {
-        throw new TenderCliUsageError('--dir is required. Example: tender app claim tok_share_123 --dir ./widget');
+        if (arg === '--admin-api-version') {
+            adminApiVersion = parseRequiredFlagValue(parsed.remaining[index + 1], '--admin-api-version');
+            index += 1;
+            continue;
+        }
+        if (arg === '--shop') {
+            shopDomain = parseRequiredFlagValue(parsed.remaining[index + 1], '--shop');
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown connectors shopify create option: ${arg}`);
     }
-    return { command: 'app claim', token, dir, name, confirm, ...parsed };
+    return {
+        command: 'connectors shopify create',
+        instanceId,
+        label,
+        appName,
+        adminApiVersion,
+        shopDomain,
+        ...parsed,
+    };
 }
-function parseArtifactsInitArgs(args) {
+function parseConnectorsShopifySetupUrlArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'app init' };
+        return { command: 'help', topic: 'connectors shopify setup-url' };
     }
-    const artifactId = args[0];
-    if (!artifactId || artifactId.startsWith('-')) {
-        throw new TenderCliUsageError('app id is required. Example: tender app init <app-id> --dir ./widget --json');
+    const connectorId = parseConnectorId(args[0], 'tender connectors shopify setup-url <connector-id> --json');
+    const parsed = parseConnectorsCommonArgs(args, 1);
+    if (parsed.remaining.length > 0) {
+        throw new TenderCliUsageError(`Unknown connectors shopify setup-url option: ${parsed.remaining[0]}`);
     }
-    let dir = '.';
-    let remoteName = 'tender';
-    let baseUrl = null;
-    let flagToken = null;
-    let profileName = null;
-    let ttl = '7d';
-    let scaffold = 'server-backed';
-    let preview = false;
-    let dryRun = false;
-    let force = false;
-    let json = false;
-    for (let index = 1; index < args.length; index += 1) {
-        const arg = args[index];
-        if (arg === '--json') {
-            json = true;
-            continue;
-        }
-        if (arg === '--dry-run') {
-            dryRun = true;
-            continue;
-        }
-        if (arg === '--force') {
-            force = true;
-            continue;
-        }
-        if (arg === '--preview') {
-            preview = true;
-            continue;
-        }
-        if (arg === '--no-scaffold') {
-            scaffold = 'none';
-            continue;
-        }
-        if (arg === '--dir') {
-            const value = args[index + 1];
-            if (!value || value.startsWith('-')) {
-                throw new TenderCliUsageError('--dir requires a path.');
-            }
-            dir = value;
+    return { command: 'connectors shopify setup-url', connectorId, ...parsed };
+}
+function parseConnectorsShopifyCredentialsSetArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'connectors shopify credentials set' };
+    }
+    const connectorId = parseConnectorId(args[0], 'tender connectors shopify credentials set <connector-id> --shop <domain> --client-id <id> --client-secret-stdin --json');
+    const parsed = parseConnectorsCommonArgs(args, 1);
+    let shopDomain = null;
+    let clientId = null;
+    let clientSecretSource = null;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === '--shop') {
+            shopDomain = parseRequiredFlagValue(parsed.remaining[index + 1], '--shop');
             index += 1;
             continue;
         }
-        if (arg === '--remote') {
-            remoteName = parseRemoteName(args[index + 1]);
+        if (arg === '--client-id') {
+            clientId = parseRequiredFlagValue(parsed.remaining[index + 1], '--client-id');
             index += 1;
             continue;
         }
-        if (arg === '--base-url') {
-            baseUrl = parseBaseUrlFlag(args, index);
-            index += 1;
+        if (arg === '--client-secret-stdin') {
+            clientSecretSource = { kind: 'stdin' };
             continue;
         }
-        if (arg === '--token') {
-            flagToken = parseTokenFlag(args, index);
+        if (arg === '--client-secret-env') {
+            clientSecretSource = {
+                kind: 'env',
+                name: parseRequiredFlagValue(parsed.remaining[index + 1], '--client-secret-env'),
+            };
             index += 1;
             continue;
         }
-        if (arg === '--profile') {
-            profileName = parseProfileName(args[index + 1], '--profile');
-            index += 1;
+        throw new TenderCliUsageError(`Unknown connectors shopify credentials set option: ${arg}`);
+    }
+    if (!shopDomain) {
+        throw new TenderCliUsageError('--shop is required. Example: tender connectors shopify credentials set conn_123 --shop demo.myshopify.com --client-id abc --client-secret-stdin --json');
+    }
+    if (!clientId) {
+        throw new TenderCliUsageError('--client-id is required. Example: tender connectors shopify credentials set conn_123 --shop demo.myshopify.com --client-id abc --client-secret-stdin --json');
+    }
+    if (!clientSecretSource) {
+        throw new TenderCliUsageError('--client-secret-stdin or --client-secret-env is required.');
+    }
+    return {
+        command: 'connectors shopify credentials set',
+        connectorId,
+        shopDomain,
+        clientId,
+        clientSecretSource,
+        ...parsed,
+    };
+}
+function parseConnectorsShopifyAppAutomationTokenSetArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'connectors shopify app-automation-token set' };
+    }
+    const connectorId = parseConnectorId(args[0], 'tender connectors shopify app-automation-token set <connector-id> --token-stdin --json');
+    const parsed = parseConnectorsCommonArgs(args, 1);
+    let tokenSource = null;
+    let expiresAt = null;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === '--token-stdin') {
+            tokenSource = { kind: 'stdin' };
             continue;
         }
-        if (arg === '--ttl') {
-            ttl = parseTtl(args[index + 1]);
+        if (arg === '--token-env') {
+            tokenSource = {
+                kind: 'env',
+                name: parseRequiredFlagValue(parsed.remaining[index + 1], '--token-env'),
+            };
             index += 1;
             continue;
         }
-        if (arg === '--scaffold') {
-            scaffold = parseScaffoldTemplate(args[index + 1]);
+        if (arg === '--expires-at') {
+            expiresAt = parseRequiredFlagValue(parsed.remaining[index + 1], '--expires-at');
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown app init option: ${arg}`);
+        throw new TenderCliUsageError(`Unknown connectors shopify app-automation-token set option: ${arg}`);
+    }
+    if (!tokenSource) {
+        throw new TenderCliUsageError('--token-stdin or --token-env is required.');
     }
     return {
-        command: 'app init',
-        artifactId,
-        dir,
-        remoteName,
-        baseUrl,
-        flagToken,
-        profileName,
-        ttl,
-        scaffold,
-        preview,
-        dryRun,
-        force,
-        json,
+        command: 'connectors shopify app-automation-token set',
+        connectorId,
+        tokenSource,
+        expiresAt,
+        ...parsed,
     };
 }
-function parseContextFetchArgs(args) {
+function parseConnectorsShopifyAppAutomationTokenDeleteArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'app context fetch' };
-    }
-    const artifactId = args[0];
-    if (!artifactId || artifactId.startsWith('-')) {
-        throw new TenderCliUsageError('app id is required. Example: tender app context fetch <app-id> --dir ./widget --json');
+        return { command: 'help', topic: 'connectors shopify app-automation-token delete' };
     }
-    let dir = '.';
-    let baseUrl = null;
-    let flagToken = null;
-    let profileName = null;
-    let dryRun = false;
-    let force = false;
-    let json = false;
-    for (let index = 1; index < args.length; index += 1) {
-        const arg = args[index];
-        if (arg === '--json') {
-            json = true;
-            continue;
-        }
-        if (arg === '--dry-run') {
-            dryRun = true;
-            continue;
-        }
-        if (arg === '--force') {
-            force = true;
-            continue;
-        }
-        if (arg === '--dir') {
-            const value = args[index + 1];
-            if (!value || value.startsWith('-')) {
-                throw new TenderCliUsageError('--dir requires a path.');
-            }
-            dir = value;
-            index += 1;
-            continue;
-        }
-        if (arg === '--base-url') {
-            baseUrl = parseBaseUrlFlag(args, index);
-            index += 1;
-            continue;
-        }
-        if (arg === '--token') {
-            flagToken = parseTokenFlag(args, index);
-            index += 1;
-            continue;
-        }
-        if (arg === '--profile') {
-            profileName = parseProfileName(args[index + 1], '--profile');
+    const connectorId = parseConnectorId(args[0], 'tender connectors shopify app-automation-token delete <connector-id> --confirm delete --json');
+    const parsed = parseConnectorsCommonArgs(args, 1);
+    let confirm = null;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === '--confirm') {
+            confirm = parseRequiredFlagValue(parsed.remaining[index + 1], '--confirm');
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown context fetch option: ${arg}`);
+        throw new TenderCliUsageError(`Unknown connectors shopify app-automation-token delete option: ${arg}`);
     }
     return {
-        command: 'app context fetch',
-        artifactId,
-        dir,
-        baseUrl,
-        flagToken,
-        profileName,
-        dryRun,
-        force,
-        json,
+        command: 'connectors shopify app-automation-token delete',
+        connectorId,
+        confirm,
+        ...parsed,
     };
 }
-function parseContextStatusArgs(args) {
+function parseConnectorsShopifyVerifyArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'app context status' };
+        return { command: 'help', topic: 'connectors shopify verify' };
     }
-    const artifactId = args[0];
-    if (!artifactId || artifactId.startsWith('-')) {
-        throw new TenderCliUsageError('app id is required. Example: tender app context status <app-id> --dir ./widget --json');
+    const connectorId = parseConnectorId(args[0], 'tender connectors shopify verify <connector-id> --json');
+    const parsed = parseConnectorsCommonArgs(args, 1);
+    if (parsed.remaining.length > 0) {
+        throw new TenderCliUsageError(`Unknown connectors shopify verify option: ${parsed.remaining[0]}`);
     }
-    let dir = '.';
-    let baseUrl = null;
-    let flagToken = null;
-    let profileName = null;
-    let json = false;
-    for (let index = 1; index < args.length; index += 1) {
-        const arg = args[index];
-        if (arg === '--json') {
-            json = true;
-            continue;
-        }
+    return { command: 'connectors shopify verify', connectorId, ...parsed };
+}
+function parseConnectorsShopifySourceInitArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'connectors shopify source init' };
+    }
+    const connectorId = parseConnectorId(args[0], 'tender connectors shopify source init <connector-id> --dir ./shopify-app --client-id abc --tender-app-url https://example.tenderprompt.app/client.js --tender-element tender-widget --json');
+    const parsed = parseConnectorsCommonArgs(args, 1);
+    let dir = null;
+    let clientId = null;
+    let sourceName = null;
+    let tenderAppUrl = null;
+    let tenderElement = null;
+    let artifactId = null;
+    let publicId = null;
+    let themeExtensionHandle = 'tender-widget';
+    let themeExtensionUid = null;
+    let blockName = 'Tender Prompt Widget';
+    let scopes = null;
+    let force = false;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
         if (arg === '--dir') {
-            const value = args[index + 1];
-            if (!value || value.startsWith('-')) {
-                throw new TenderCliUsageError('--dir requires a path.');
-            }
-            dir = value;
+            dir = parseRequiredFlagValue(parsed.remaining[index + 1], '--dir');
             index += 1;
             continue;
         }
-        if (arg === '--base-url') {
-            baseUrl = parseBaseUrlFlag(args, index);
+        if (arg === '--client-id') {
+            clientId = parseRequiredFlagValue(parsed.remaining[index + 1], '--client-id');
             index += 1;
             continue;
         }
-        if (arg === '--token') {
-            flagToken = parseTokenFlag(args, index);
+        if (arg === '--source-name') {
+            sourceName = parseRequiredFlagValue(parsed.remaining[index + 1], '--source-name');
             index += 1;
             continue;
         }
-        if (arg === '--profile') {
-            profileName = parseProfileName(args[index + 1], '--profile');
+        if (arg === '--tender-app-url') {
+            tenderAppUrl = parseRequiredFlagValue(parsed.remaining[index + 1], '--tender-app-url');
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown context status option: ${arg}`);
-    }
-    return {
-        command: 'app context status',
-        artifactId,
-        dir,
-        baseUrl,
-        flagToken,
-        profileName,
-        json,
-    };
-}
-function parseContextRefreshArgs(args) {
-    if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'app context refresh' };
-    }
-    const artifactId = args[0];
-    if (!artifactId || artifactId.startsWith('-')) {
-        throw new TenderCliUsageError('app id is required. Example: tender app context refresh <app-id> --dir ./widget --dry-run --json');
-    }
-    let dir = '.';
-    let baseUrl = null;
-    let flagToken = null;
-    let profileName = null;
-    let dryRun = false;
-    let force = false;
-    let json = false;
-    for (let index = 1; index < args.length; index += 1) {
-        const arg = args[index];
-        if (arg === '--json') {
-            json = true;
+        if (arg === '--tender-element') {
+            tenderElement = parseRequiredFlagValue(parsed.remaining[index + 1], '--tender-element');
+            index += 1;
             continue;
         }
-        if (arg === '--dry-run') {
-            dryRun = true;
+        if (arg === '--artifact-id') {
+            artifactId = parseRequiredFlagValue(parsed.remaining[index + 1], '--artifact-id');
+            index += 1;
             continue;
         }
-        if (arg === '--force') {
-            force = true;
+        if (arg === '--public-id') {
+            publicId = parseRequiredFlagValue(parsed.remaining[index + 1], '--public-id');
+            index += 1;
             continue;
         }
-        if (arg === '--dir') {
-            const value = args[index + 1];
-            if (!value || value.startsWith('-')) {
-                throw new TenderCliUsageError('--dir requires a path.');
-            }
-            dir = value;
+        if (arg === '--theme-extension-handle') {
+            themeExtensionHandle = parseRequiredFlagValue(parsed.remaining[index + 1], '--theme-extension-handle');
             index += 1;
             continue;
         }
-        if (arg === '--base-url') {
-            baseUrl = parseBaseUrlFlag(args, index);
+        if (arg === '--theme-extension-uid') {
+            themeExtensionUid = parseRequiredFlagValue(parsed.remaining[index + 1], '--theme-extension-uid');
             index += 1;
             continue;
         }
-        if (arg === '--token') {
-            flagToken = parseTokenFlag(args, index);
+        if (arg === '--block-name') {
+            blockName = parseRequiredFlagValue(parsed.remaining[index + 1], '--block-name');
             index += 1;
             continue;
         }
-        if (arg === '--profile') {
-            profileName = parseProfileName(args[index + 1], '--profile');
+        if (arg === '--scopes') {
+            scopes = parseRequiredFlagValue(parsed.remaining[index + 1], '--scopes');
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown context refresh option: ${arg}`);
+        if (arg === '--force') {
+            force = true;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown connectors shopify source init option: ${arg}`);
+    }
+    if (!dir) {
+        throw new TenderCliUsageError('--dir is required. Example: tender connectors shopify source init conn_123 --dir ./shopify-app --client-id abc --tender-app-url https://example.tenderprompt.app/client.js --tender-element tender-widget --json');
+    }
+    if (!clientId) {
+        throw new TenderCliUsageError('--client-id is required because Tender stores only the non-secret client ID prefix.');
+    }
+    if (!tenderAppUrl) {
+        throw new TenderCliUsageError('--tender-app-url is required. Pass the Tender app client.js URL to load in the app block.');
+    }
+    if (!tenderElement) {
+        throw new TenderCliUsageError('--tender-element is required. Pass the Tender custom element tag to mount in Shopify.');
     }
     return {
-        command: 'app context refresh',
-        artifactId,
+        command: 'connectors shopify source init',
+        connectorId,
         dir,
-        baseUrl,
-        flagToken,
-        profileName,
-        dryRun,
+        clientId,
+        sourceName,
+        template: 'dog-profile',
+        tenderAppUrl,
+        tenderElement,
+        artifactId,
+        publicId,
+        themeExtensionHandle,
+        themeExtensionUid,
+        blockName,
+        scopes,
         force,
-        json,
+        ...parsed,
     };
 }
-function parseMemoryCommonArgs(args) {
-    let dir = '.';
-    let artifactId = null;
+function parseConnectorsShopifySourceCheckoutArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'connectors shopify source checkout' };
+    }
+    const connectorId = parseConnectorId(args[0], 'tender connectors shopify source checkout <connector-id> --dir ./shopify-app --json');
+    const parsed = parseConnectorsCommonArgs(args, 1);
+    let dir = null;
     let remoteName = 'tender';
-    let json = false;
-    const remaining = [];
-    for (let index = 0; index < args.length; index += 1) {
-        const arg = args[index];
-        if (arg === '--json') {
-            json = true;
-            continue;
-        }
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
         if (arg === '--dir') {
-            dir = parseRequiredFlagValue(args[index + 1], '--dir');
-            index += 1;
-            continue;
-        }
-        if (arg === '--artifact') {
-            artifactId = parseRequiredFlagValue(args[index + 1], '--artifact');
+            dir = parseRequiredFlagValue(parsed.remaining[index + 1], '--dir');
             index += 1;
             continue;
         }
         if (arg === '--remote') {
-            remoteName = parseRemoteName(args[index + 1]);
+            remoteName = parseRemoteName(parsed.remaining[index + 1]);
             index += 1;
             continue;
         }
-        remaining.push(arg);
+        throw new TenderCliUsageError(`Unknown connectors shopify source checkout option: ${arg}`);
     }
-    return { dir, artifactId, remoteName, json, remaining };
+    if (!dir) {
+        throw new TenderCliUsageError('--dir is required. Example: tender connectors shopify source checkout conn_123 --dir ./shopify-app --json');
+    }
+    return { command: 'connectors shopify source checkout', connectorId, dir, remoteName, ...parsed };
 }
-function parseMemoryStartArgs(args) {
+function parseConnectorsShopifySourceValidateArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'memory start' };
+        return { command: 'help', topic: 'connectors shopify source validate' };
     }
-    const parsed = parseMemoryCommonArgs(args);
-    let summary = '';
-    let body = null;
+    const connectorId = parseConnectorId(args[0], 'tender connectors shopify source validate <connector-id> --dir ./shopify-app --execute --json');
+    const parsed = parseConnectorsCommonArgs(args, 1);
+    let dir = '.';
+    let clientId = null;
+    let execute = false;
     for (let index = 0; index < parsed.remaining.length; index += 1) {
         const arg = parsed.remaining[index];
-        if (arg === '--summary') {
-            summary = parseRequiredFlagValue(parsed.remaining[index + 1], '--summary');
+        if (arg === '--execute') {
+            execute = true;
+            continue;
+        }
+        if (arg === '--dir') {
+            dir = parseRequiredFlagValue(parsed.remaining[index + 1], '--dir');
             index += 1;
             continue;
         }
-        if (arg === '--body') {
-            body = parseRequiredFlagValue(parsed.remaining[index + 1], '--body');
+        if (arg === '--client-id') {
+            clientId = parseRequiredFlagValue(parsed.remaining[index + 1], '--client-id');
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown memory start option: ${arg}`);
-    }
-    if (!summary.trim()) {
-        throw new TenderCliUsageError('memory start requires --summary.\nNext: tender memory start --summary "Current user goal"');
+        throw new TenderCliUsageError(`Unknown connectors shopify source validate option: ${arg}`);
     }
-    return { command: 'memory start', summary, body, ...parsed };
+    return { command: 'connectors shopify source validate', connectorId, dir, clientId, execute, ...parsed };
 }
-function parseMemoryAddArgs(args) {
+function parseConnectorsShopifySourceDeployArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'memory add' };
+        return { command: 'help', topic: 'connectors shopify source deploy' };
     }
-    const parsed = parseMemoryCommonArgs(args);
-    let kind = 'note';
-    let summary = '';
-    let body = null;
-    const tags = [];
+    const connectorId = parseConnectorId(args[0], 'tender connectors shopify source deploy <connector-id> --dir ./shopify-app --confirm deploy --json');
+    const parsed = parseConnectorsCommonArgs(args, 1);
+    let dir = '.';
+    let clientId = null;
+    let version = null;
+    let message = null;
+    let sourceControlUrl = null;
+    let allowDeletes = false;
+    let confirm = null;
     for (let index = 0; index < parsed.remaining.length; index += 1) {
         const arg = parsed.remaining[index];
-        if (arg === '--kind') {
-            kind = parseRequiredFlagValue(parsed.remaining[index + 1], '--kind');
+        if (arg === '--allow-deletes') {
+            allowDeletes = true;
+            continue;
+        }
+        if (arg === '--dir') {
+            dir = parseRequiredFlagValue(parsed.remaining[index + 1], '--dir');
             index += 1;
             continue;
         }
-        if (arg === '--summary') {
-            summary = parseRequiredFlagValue(parsed.remaining[index + 1], '--summary');
+        if (arg === '--client-id') {
+            clientId = parseRequiredFlagValue(parsed.remaining[index + 1], '--client-id');
             index += 1;
             continue;
         }
-        if (arg === '--body') {
-            body = parseRequiredFlagValue(parsed.remaining[index + 1], '--body');
+        if (arg === '--version') {
+            version = parseRequiredFlagValue(parsed.remaining[index + 1], '--version');
             index += 1;
             continue;
         }
-        if (arg === '--tag') {
-            tags.push(parseRequiredFlagValue(parsed.remaining[index + 1], '--tag'));
+        if (arg === '--message') {
+            message = parseRequiredFlagValue(parsed.remaining[index + 1], '--message');
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown memory add option: ${arg}`);
+        if (arg === '--source-control-url') {
+            sourceControlUrl = parseRequiredFlagValue(parsed.remaining[index + 1], '--source-control-url');
+            index += 1;
+            continue;
+        }
+        if (arg === '--confirm') {
+            confirm = parseRequiredFlagValue(parsed.remaining[index + 1], '--confirm');
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown connectors shopify source deploy option: ${arg}`);
     }
-    return { command: 'memory add', kind, summary, body, tags, ...parsed };
+    return { command: 'connectors shopify source deploy', connectorId, dir, clientId, version, message, sourceControlUrl, allowDeletes, confirm, ...parsed };
 }
-function parseMemoryHandoffArgs(args) {
+function parseConnectorsShopifyDeleteArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'memory handoff' };
+        return { command: 'help', topic: 'connectors shopify delete' };
     }
-    const parsed = parseMemoryCommonArgs(args);
-    let reason = null;
-    let summary = null;
-    let body = null;
+    const connectorId = parseConnectorId(args[0], 'tender connectors shopify delete <connector-id> --confirm delete --json');
+    const parsed = parseConnectorsCommonArgs(args, 1);
+    let confirm = null;
     for (let index = 0; index < parsed.remaining.length; index += 1) {
         const arg = parsed.remaining[index];
-        if (arg === '--reason') {
-            reason = parseRequiredFlagValue(parsed.remaining[index + 1], '--reason');
+        if (arg === '--confirm') {
+            confirm = parseRequiredFlagValue(parsed.remaining[index + 1], '--confirm');
             index += 1;
             continue;
         }
-        if (arg === '--summary') {
-            summary = parseRequiredFlagValue(parsed.remaining[index + 1], '--summary');
+        throw new TenderCliUsageError(`Unknown connectors shopify delete option: ${arg}`);
+    }
+    return { command: 'connectors shopify delete', connectorId, confirm, ...parsed };
+}
+function parseConnectorsBindArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'connectors bind' };
+    }
+    const bindingName = parseBindingName(args[0]);
+    const connectorId = parseConnectorId(args[1], 'tender connectors bind SHOPIFY_CONNECTOR conn_123 --instance default --json');
+    let instanceId = 'default';
+    let label = null;
+    let json = false;
+    for (let index = 2; index < args.length; index += 1) {
+        const arg = args[index];
+        if (arg === '--json') {
+            json = true;
+            continue;
+        }
+        if (arg === '--instance') {
+            instanceId = parseConnectorInstanceId(args[index + 1]);
             index += 1;
             continue;
         }
-        if (arg === '--body') {
-            body = parseRequiredFlagValue(parsed.remaining[index + 1], '--body');
+        if (arg === '--label') {
+            label = parseRequiredFlagValue(args[index + 1], '--label');
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown memory handoff option: ${arg}`);
+        throw new TenderCliUsageError(`Unknown connectors bind option: ${arg}`);
     }
-    return { command: 'memory handoff', reason, summary, body, ...parsed };
+    return { command: 'connectors bind', bindingName, connectorId, instanceId, label, json };
 }
-function parseMemoryShowArgs(args) {
+function parseShareCreateArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'memory show' };
+        return { command: 'help', topic: 'app share create' };
     }
-    const parsed = parseMemoryCommonArgs(args);
-    let commitSha = null;
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith('-')) {
+        throw new TenderCliUsageError('app id is required. Example: tender app share create <app-id> --json');
+    }
+    const parsed = parseShareCommonArgs(args, 1);
+    let expires = '7d';
+    let claims = 1;
     for (let index = 0; index < parsed.remaining.length; index += 1) {
         const arg = parsed.remaining[index];
-        if (arg === '--commit') {
-            commitSha = parseRequiredFlagValue(parsed.remaining[index + 1], '--commit');
+        if (arg === '--expires') {
+            expires = parseRequiredFlagValue(parsed.remaining[index + 1], '--expires');
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown memory show option: ${arg}`);
+        if (arg === '--claims') {
+            claims = parsePositiveIntegerFlag(parsed.remaining[index + 1], '--claims');
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown app share create option: ${arg}`);
     }
-    return { command: 'memory show', commitSha, ...parsed };
+    return { command: 'app share create', artifactId, expires, claims, ...parsed };
 }
-function parseMemoryBriefArgs(args) {
+function parseShareInspectArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'memory brief' };
+        return { command: 'help', topic: 'app share inspect' };
     }
-    const parsed = parseMemoryCommonArgs(args);
-    let limit = 12;
-    for (let index = 0; index < parsed.remaining.length; index += 1) {
-        const arg = parsed.remaining[index];
-        if (arg === '--limit') {
-            limit = parsePositiveIntegerFlag(parsed.remaining[index + 1], '--limit');
-            index += 1;
-            continue;
-        }
-        throw new TenderCliUsageError(`Unknown memory brief option: ${arg}`);
+    const token = args[0];
+    if (!token || token.startsWith('-')) {
+        throw new TenderCliUsageError('share token is required. Example: tender app share inspect <token> --json');
     }
-    return { command: 'memory brief', limit, ...parsed };
+    const parsed = parseShareCommonArgs(args, 1);
+    if (parsed.remaining.length > 0) {
+        throw new TenderCliUsageError(`Unknown app share inspect option: ${parsed.remaining[0]}`);
+    }
+    return { command: 'app share inspect', token, ...parsed };
 }
-function parseMemoryFlushArgs(args) {
+function parseShareRevokeArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'memory flush' };
+        return { command: 'help', topic: 'app share revoke' };
     }
-    const parsed = parseMemoryCommonArgs(args);
+    const shareId = args[0];
+    if (!shareId || shareId.startsWith('-')) {
+        throw new TenderCliUsageError('share id is required. Example: tender app share revoke <share-id> --json');
+    }
+    const parsed = parseShareCommonArgs(args, 1);
     if (parsed.remaining.length > 0) {
-        throw new TenderCliUsageError(`Unknown memory flush option: ${parsed.remaining[0]}`);
+        throw new TenderCliUsageError(`Unknown app share revoke option: ${parsed.remaining[0]}`);
     }
-    return { command: 'memory flush', ...parsed };
+    return { command: 'app share revoke', shareId, ...parsed };
 }
-function parseMemoryExportArgs(args) {
+function parseClaimArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'memory export' };
+        return { command: 'help', topic: 'app claim' };
     }
-    const parsed = parseMemoryCommonArgs(args);
-    let format = null;
-    let commitSha = null;
+    const token = args[0];
+    if (!token || token.startsWith('-')) {
+        throw new TenderCliUsageError('share token is required. Example: tender app claim <token> --dir ./widget');
+    }
+    const parsed = parseShareCommonArgs(args, 1);
+    let dir = null;
+    let name = null;
+    let confirm = null;
     for (let index = 0; index < parsed.remaining.length; index += 1) {
         const arg = parsed.remaining[index];
-        if (arg === '--format') {
-            const value = parseRequiredFlagValue(parsed.remaining[index + 1], '--format');
-            if (value !== 'jsonl') {
-                throw new TenderCliUsageError(`Unsupported memory export format: ${value}.\nNext: tender memory export --format jsonl --dir ${parsed.dir}`);
-            }
-            format = value;
+        if (arg === '--dir') {
+            dir = parseRequiredFlagValue(parsed.remaining[index + 1], '--dir');
             index += 1;
             continue;
         }
-        if (arg === '--commit') {
-            commitSha = parseRequiredFlagValue(parsed.remaining[index + 1], '--commit');
+        if (arg === '--name') {
+            name = parseRequiredFlagValue(parsed.remaining[index + 1], '--name');
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown memory export option: ${arg}`);
-    }
-    if (format === null) {
-        throw new TenderCliUsageError(`memory export requires --format jsonl.\nNext: tender memory export --format jsonl --dir ${parsed.dir}`);
-    }
-    return { command: 'memory export', format, commitSha, ...parsed };
-}
-function parseTokenProfile(value) {
-    if (value === 'edit-preview' || value === 'publish' || value === 'create' || value === 'db-read') {
-        return value;
-    }
-    throw new TenderCliUsageError('--profile must be one of edit-preview, publish, create, or db-read.');
-}
-function parsePositiveIntegerFlag(value, flag) {
-    const parsed = Number(value);
-    if (!Number.isInteger(parsed) || parsed <= 0) {
-        throw new TenderCliUsageError(`${flag} requires a positive integer.`);
+        if (arg === '--confirm') {
+            confirm = parseRequiredFlagValue(parsed.remaining[index + 1], '--confirm');
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown app claim option: ${arg}`);
     }
-    return parsed;
-}
-function parseNonNegativeIntegerFlag(value, flag) {
-    const parsed = Number(value);
-    if (!Number.isInteger(parsed) || parsed < 0) {
-        throw new TenderCliUsageError(`${flag} requires a non-negative integer.`);
+    if (!dir) {
+        throw new TenderCliUsageError('--dir is required. Example: tender app claim tok_share_123 --dir ./widget');
     }
-    return parsed;
+    return { command: 'app claim', token, dir, name, confirm, ...parsed };
 }
-function parseAuthLoginArgs(args) {
+function parseArtifactsInitArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'auth login' };
+        return { command: 'help', topic: 'app init' };
     }
-    let device = false;
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith('-')) {
+        throw new TenderCliUsageError('app id is required. Example: tender app init <app-id> --dir ./widget --json');
+    }
+    let dir = '.';
+    let remoteName = 'tender';
     let baseUrl = null;
-    let tokenProfile = 'edit-preview';
-    let saveProfile = DEFAULT_PROFILE_NAME;
-    let artifactId = null;
+    let flagToken = null;
+    let profileName = null;
     let ttl = '7d';
+    let scaffold = 'server-backed';
+    let preview = false;
+    let dryRun = false;
+    let force = false;
     let json = false;
-    let noPoll = false;
-    let pollTimeoutSeconds = 600;
-    for (let index = 0; index < args.length; index += 1) {
+    for (let index = 1; index < args.length; index += 1) {
         const arg = args[index];
-        if (arg === '--device') {
-            device = true;
-            continue;
-        }
         if (arg === '--json') {
             json = true;
             continue;
         }
-        if (arg === '--no-poll') {
-            noPoll = true;
+        if (arg === '--dry-run') {
+            dryRun = true;
             continue;
         }
-        if (arg === '--base-url') {
-            baseUrl = parseBaseUrlFlag(args, index);
+        if (arg === '--force') {
+            force = true;
+            continue;
+        }
+        if (arg === '--preview') {
+            preview = true;
+            continue;
+        }
+        if (arg === '--no-scaffold') {
+            scaffold = 'none';
+            continue;
+        }
+        if (arg === '--dir') {
+            const value = args[index + 1];
+            if (!value || value.startsWith('-')) {
+                throw new TenderCliUsageError('--dir requires a path.');
+            }
+            dir = value;
             index += 1;
             continue;
         }
-        if (arg === '--profile') {
-            tokenProfile = parseTokenProfile(args[index + 1]);
+        if (arg === '--remote') {
+            remoteName = parseRemoteName(args[index + 1]);
             index += 1;
             continue;
         }
-        if (arg === '--save-profile') {
-            saveProfile = parseProfileName(args[index + 1], '--save-profile');
+        if (arg === '--base-url') {
+            baseUrl = parseBaseUrlFlag(args, index);
             index += 1;
             continue;
         }
-        if (arg === '--artifact') {
-            artifactId = parseProfileName(args[index + 1], '--artifact');
+        if (arg === '--token') {
+            flagToken = parseTokenFlag(args, index);
+            index += 1;
+            continue;
+        }
+        if (arg === '--profile') {
+            profileName = parseProfileName(args[index + 1], '--profile');
             index += 1;
             continue;
         }
@@ -3722,72 +3990,124 @@ function parseAuthLoginArgs(args) {
             index += 1;
             continue;
         }
-        if (arg === '--poll-timeout') {
-            pollTimeoutSeconds = parsePositiveIntegerFlag(args[index + 1], '--poll-timeout');
+        if (arg === '--scaffold') {
+            scaffold = parseScaffoldTemplate(args[index + 1]);
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown auth login option: ${arg}`);
-    }
-    if (!device) {
-        throw new TenderCliUsageError('auth login currently requires --device. Example: tender auth login --device --profile edit-preview --artifact artifact_123');
-    }
-    if (tokenProfile === 'create' && artifactId) {
-        throw new TenderCliUsageError('--profile create must be account-scoped; remove --artifact.');
-    }
-    if (tokenProfile === 'db-read' && !artifactId) {
-        throw new TenderCliUsageError('--profile db-read requires --artifact <artifact-id>.');
+        throw new TenderCliUsageError(`Unknown app init option: ${arg}`);
     }
     return {
-        command: 'auth login',
-        baseUrl,
-        device,
-        tokenProfile,
-        saveProfile,
+        command: 'app init',
         artifactId,
+        dir,
+        remoteName,
+        baseUrl,
+        flagToken,
+        profileName,
         ttl,
+        scaffold,
+        preview,
+        dryRun,
+        force,
         json,
-        noPoll,
-        pollTimeoutSeconds,
     };
 }
-function parseAuthStatusArgs(args) {
+function parseContextFetchArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'auth status' };
+        return { command: 'help', topic: 'app context fetch' };
+    }
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith('-')) {
+        throw new TenderCliUsageError('app id is required. Example: tender app context fetch <app-id> --dir ./widget --json');
     }
+    let dir = '.';
+    let baseUrl = null;
+    let flagToken = null;
     let profileName = null;
+    let dryRun = false;
+    let force = false;
     let json = false;
-    for (let index = 0; index < args.length; index += 1) {
+    for (let index = 1; index < args.length; index += 1) {
         const arg = args[index];
         if (arg === '--json') {
             json = true;
             continue;
         }
+        if (arg === '--dry-run') {
+            dryRun = true;
+            continue;
+        }
+        if (arg === '--force') {
+            force = true;
+            continue;
+        }
+        if (arg === '--dir') {
+            const value = args[index + 1];
+            if (!value || value.startsWith('-')) {
+                throw new TenderCliUsageError('--dir requires a path.');
+            }
+            dir = value;
+            index += 1;
+            continue;
+        }
+        if (arg === '--base-url') {
+            baseUrl = parseBaseUrlFlag(args, index);
+            index += 1;
+            continue;
+        }
+        if (arg === '--token') {
+            flagToken = parseTokenFlag(args, index);
+            index += 1;
+            continue;
+        }
         if (arg === '--profile') {
             profileName = parseProfileName(args[index + 1], '--profile');
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown auth status option: ${arg}`);
+        throw new TenderCliUsageError(`Unknown context fetch option: ${arg}`);
     }
     return {
-        command: 'auth status',
+        command: 'app context fetch',
+        artifactId,
+        dir,
+        baseUrl,
+        flagToken,
         profileName,
+        dryRun,
+        force,
         json,
     };
 }
-function parsePlaybooksCommonArgs(args, startIndex) {
+function parseContextStatusArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'app context status' };
+    }
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith('-')) {
+        throw new TenderCliUsageError('app id is required. Example: tender app context status <app-id> --dir ./widget --json');
+    }
+    let dir = '.';
     let baseUrl = null;
     let flagToken = null;
     let profileName = null;
     let json = false;
-    const extras = [];
-    for (let index = startIndex; index < args.length; index += 1) {
+    for (let index = 1; index < args.length; index += 1) {
         const arg = args[index];
         if (arg === '--json') {
             json = true;
             continue;
         }
+        if (arg === '--dir') {
+            const value = args[index + 1];
+            if (!value || value.startsWith('-')) {
+                throw new TenderCliUsageError('--dir requires a path.');
+            }
+            dir = value;
+            index += 1;
+            continue;
+        }
         if (arg === '--base-url') {
             baseUrl = parseBaseUrlFlag(args, index);
             index += 1;
@@ -3803,93 +4123,91 @@ function parsePlaybooksCommonArgs(args, startIndex) {
             index += 1;
             continue;
         }
-        extras.push(arg);
-    }
-    return { baseUrl, flagToken, profileName, json, extras };
-}
-function parsePlaybooksListArgs(args) {
-    if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'playbooks list' };
-    }
-    const parsed = parsePlaybooksCommonArgs(args, 0);
-    if (parsed.extras.length > 0) {
-        throw new TenderCliUsageError(`Unknown playbooks list option: ${parsed.extras[0]}`);
-    }
-    return {
-        command: 'playbooks list',
-        baseUrl: parsed.baseUrl,
-        flagToken: parsed.flagToken,
-        profileName: parsed.profileName,
-        json: parsed.json,
-    };
-}
-function parsePlaybooksGetArgs(args) {
-    if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'playbooks get' };
-    }
-    const playbookId = args[0];
-    if (!playbookId || playbookId.startsWith('-')) {
-        throw new TenderCliUsageError('playbook id is required. Example: tender playbooks get recharge-bundle-builder --json');
-    }
-    const parsed = parsePlaybooksCommonArgs(args, 1);
-    if (parsed.extras.length > 0) {
-        throw new TenderCliUsageError(`Unknown playbooks get option: ${parsed.extras[0]}`);
+        throw new TenderCliUsageError(`Unknown context status option: ${arg}`);
     }
     return {
-        command: 'playbooks get',
-        playbookId,
-        baseUrl: parsed.baseUrl,
-        flagToken: parsed.flagToken,
-        profileName: parsed.profileName,
-        json: parsed.json,
+        command: 'app context status',
+        artifactId,
+        dir,
+        baseUrl,
+        flagToken,
+        profileName,
+        json,
     };
 }
-function parsePlaybooksFileArgs(args) {
+function parseContextRefreshArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'playbooks file' };
+        return { command: 'help', topic: 'app context refresh' };
     }
-    const playbookId = args[0];
-    if (!playbookId || playbookId.startsWith('-')) {
-        throw new TenderCliUsageError('playbook id is required. Example: tender playbooks file recharge-bundle-builder --path references/recharge-payloads.md --json');
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith('-')) {
+        throw new TenderCliUsageError('app id is required. Example: tender app context refresh <app-id> --dir ./widget --dry-run --json');
     }
-    let filePath = null;
-    const rest = [];
+    let dir = '.';
+    let baseUrl = null;
+    let flagToken = null;
+    let profileName = null;
+    let dryRun = false;
+    let force = false;
+    let json = false;
     for (let index = 1; index < args.length; index += 1) {
         const arg = args[index];
-        if (arg === '--path') {
+        if (arg === '--json') {
+            json = true;
+            continue;
+        }
+        if (arg === '--dry-run') {
+            dryRun = true;
+            continue;
+        }
+        if (arg === '--force') {
+            force = true;
+            continue;
+        }
+        if (arg === '--dir') {
             const value = args[index + 1];
             if (!value || value.startsWith('-')) {
-                throw new TenderCliUsageError('--path requires a playbook reference path.');
+                throw new TenderCliUsageError('--dir requires a path.');
             }
-            filePath = value;
+            dir = value;
             index += 1;
             continue;
         }
-        rest.push(arg);
-    }
-    const parsed = parsePlaybooksCommonArgs(rest, 0);
-    if (parsed.extras.length > 0) {
-        throw new TenderCliUsageError(`Unknown playbooks file option: ${parsed.extras[0]}`);
-    }
-    if (!filePath) {
-        throw new TenderCliUsageError('--path is required. Example: tender playbooks file recharge-bundle-builder --path references/recharge-payloads.md --json');
+        if (arg === '--base-url') {
+            baseUrl = parseBaseUrlFlag(args, index);
+            index += 1;
+            continue;
+        }
+        if (arg === '--token') {
+            flagToken = parseTokenFlag(args, index);
+            index += 1;
+            continue;
+        }
+        if (arg === '--profile') {
+            profileName = parseProfileName(args[index + 1], '--profile');
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown context refresh option: ${arg}`);
     }
     return {
-        command: 'playbooks file',
-        playbookId,
-        filePath,
-        baseUrl: parsed.baseUrl,
-        flagToken: parsed.flagToken,
-        profileName: parsed.profileName,
-        json: parsed.json,
+        command: 'app context refresh',
+        artifactId,
+        dir,
+        baseUrl,
+        flagToken,
+        profileName,
+        dryRun,
+        force,
+        json,
     };
 }
-function parseGenerateEnvTypesArgs(args) {
-    if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'app generate-env-types' };
-    }
+function parseMemoryCommonArgs(args) {
     let dir = '.';
+    let artifactId = null;
+    let remoteName = 'tender';
     let json = false;
+    const remaining = [];
     for (let index = 0; index < args.length; index += 1) {
         const arg = args[index];
         if (arg === '--json') {
@@ -3897,187 +4215,320 @@ function parseGenerateEnvTypesArgs(args) {
             continue;
         }
         if (arg === '--dir') {
-            const value = args[index + 1];
-            if (!value) {
-                throw new TenderCliUsageError('--dir requires a path.');
-            }
-            dir = value;
+            dir = parseRequiredFlagValue(args[index + 1], '--dir');
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown generate-env-types option: ${arg}`);
+        if (arg === '--artifact') {
+            artifactId = parseRequiredFlagValue(args[index + 1], '--artifact');
+            index += 1;
+            continue;
+        }
+        if (arg === '--remote') {
+            remoteName = parseRemoteName(args[index + 1]);
+            index += 1;
+            continue;
+        }
+        remaining.push(arg);
     }
-    return {
-        command: 'app generate-env-types',
-        dir,
-        json,
-    };
+    return { dir, artifactId, remoteName, json, remaining };
 }
-function parseAnalyticsRange(value) {
-    if (!value || value.startsWith('-')) {
-        throw new TenderCliUsageError('--range requires 7d, 30d, 90d, or YYYY-MM-DD..YYYY-MM-DD.');
+function parseMemoryStartArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'memory start' };
     }
-    if (value === '7d' || value === '30d' || value === '90d') {
-        return value;
+    const parsed = parseMemoryCommonArgs(args);
+    let summary = '';
+    let body = null;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === '--summary') {
+            summary = parseRequiredFlagValue(parsed.remaining[index + 1], '--summary');
+            index += 1;
+            continue;
+        }
+        if (arg === '--body') {
+            body = parseRequiredFlagValue(parsed.remaining[index + 1], '--body');
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown memory start option: ${arg}`);
     }
-    if (/^\d{4}-\d{2}-\d{2}\.\.\d{4}-\d{2}-\d{2}$/.test(value)) {
-        return value;
+    if (!summary.trim()) {
+        throw new TenderCliUsageError('memory start requires --summary.\nNext: tender memory start --summary "Current user goal"');
     }
-    throw new TenderCliUsageError('--range must be 7d, 30d, 90d, or YYYY-MM-DD..YYYY-MM-DD.');
+    return { command: 'memory start', summary, body, ...parsed };
 }
-function parseSpecPath(value) {
-    if (!value || (value !== '-' && value.startsWith('-'))) {
-        throw new TenderCliUsageError('--spec requires a JSON file path or - for stdin.');
+function parseMemoryAddArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'memory add' };
     }
-    return value;
-}
-function parseRequiredFlagValue(value, flag) {
-    if (!value || value.startsWith('-')) {
-        throw new TenderCliUsageError(`${flag} requires a value.`);
+    const parsed = parseMemoryCommonArgs(args);
+    let kind = 'note';
+    let summary = '';
+    let body = null;
+    const tags = [];
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === '--kind') {
+            kind = parseRequiredFlagValue(parsed.remaining[index + 1], '--kind');
+            index += 1;
+            continue;
+        }
+        if (arg === '--summary') {
+            summary = parseRequiredFlagValue(parsed.remaining[index + 1], '--summary');
+            index += 1;
+            continue;
+        }
+        if (arg === '--body') {
+            body = parseRequiredFlagValue(parsed.remaining[index + 1], '--body');
+            index += 1;
+            continue;
+        }
+        if (arg === '--tag') {
+            tags.push(parseRequiredFlagValue(parsed.remaining[index + 1], '--tag'));
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown memory add option: ${arg}`);
     }
-    return value;
+    return { command: 'memory add', kind, summary, body, tags, ...parsed };
 }
-function parseCapabilitiesArgs(args) {
+function parseMemoryHandoffArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'capabilities' };
+        return { command: 'help', topic: 'memory handoff' };
     }
-    let json = false;
-    for (const arg of args) {
-        if (arg === '--json') {
-            json = true;
+    const parsed = parseMemoryCommonArgs(args);
+    let reason = null;
+    let summary = null;
+    let body = null;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === '--reason') {
+            reason = parseRequiredFlagValue(parsed.remaining[index + 1], '--reason');
+            index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown capabilities option: ${arg}`);
+        if (arg === '--summary') {
+            summary = parseRequiredFlagValue(parsed.remaining[index + 1], '--summary');
+            index += 1;
+            continue;
+        }
+        if (arg === '--body') {
+            body = parseRequiredFlagValue(parsed.remaining[index + 1], '--body');
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown memory handoff option: ${arg}`);
     }
-    return { command: 'capabilities', json };
+    return { command: 'memory handoff', reason, summary, body, ...parsed };
 }
-function parseVersionArgs(args) {
+function parseMemoryShowArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'version' };
+        return { command: 'help', topic: 'memory show' };
     }
-    let json = false;
-    for (const arg of args) {
-        if (arg === '--json') {
-            json = true;
+    const parsed = parseMemoryCommonArgs(args);
+    let commitSha = null;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === '--commit') {
+            commitSha = parseRequiredFlagValue(parsed.remaining[index + 1], '--commit');
+            index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown version option: ${arg}`);
+        throw new TenderCliUsageError(`Unknown memory show option: ${arg}`);
     }
-    return { command: 'version', json };
+    return { command: 'memory show', commitSha, ...parsed };
 }
-function parseBindingId(value) {
-    if (!value || value.startsWith('-')) {
-        throw new TenderCliUsageError('--id requires a binding id.');
+function parseMemoryBriefArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'memory brief' };
     }
-    if (!/^[a-z][a-z0-9-]*$/.test(value)) {
-        throw new TenderCliUsageError('--id must start with a lowercase letter and contain only lowercase letters, numbers, and dashes. Example: shopify-api');
+    const parsed = parseMemoryCommonArgs(args);
+    let limit = 12;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === '--limit') {
+            limit = parsePositiveIntegerFlag(parsed.remaining[index + 1], '--limit');
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown memory brief option: ${arg}`);
     }
-    return value;
+    return { command: 'memory brief', limit, ...parsed };
 }
-function parseAllowedHost(value) {
-    if (!value || value.startsWith('-')) {
-        throw new TenderCliUsageError('--host requires a hostname.');
+function parseMemoryFlushArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'memory flush' };
     }
-    if (value.length === 0 ||
-        value.includes('/') ||
-        value.includes(':') ||
-        value.includes('?') ||
-        value.includes('#') ||
-        value.includes('*') ||
-        value !== value.toLowerCase()) {
-        throw new TenderCliUsageError('--host must be an explicit lowercase hostname without protocol, wildcard, path, query, or port. Example: api.example.com');
+    const parsed = parseMemoryCommonArgs(args);
+    if (parsed.remaining.length > 0) {
+        throw new TenderCliUsageError(`Unknown memory flush option: ${parsed.remaining[0]}`);
     }
-    return value;
+    return { command: 'memory flush', ...parsed };
 }
-function parseEnvBindingName(value) {
-    if (!value || value.startsWith('-')) {
-        throw new TenderCliUsageError('--name requires an env binding name.');
+function parseMemoryExportArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'memory export' };
     }
-    if (!/^[A-Z][A-Z0-9_]*$/.test(value)) {
-        throw new TenderCliUsageError('--name must be UPPER_SNAKE_CASE. Example: SHOPIFY_API');
+    const parsed = parseMemoryCommonArgs(args);
+    let format = null;
+    let commitSha = null;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === '--format') {
+            const value = parseRequiredFlagValue(parsed.remaining[index + 1], '--format');
+            if (value !== 'jsonl') {
+                throw new TenderCliUsageError(`Unsupported memory export format: ${value}.\nNext: tender memory export --format jsonl --dir ${parsed.dir}`);
+            }
+            format = value;
+            index += 1;
+            continue;
+        }
+        if (arg === '--commit') {
+            commitSha = parseRequiredFlagValue(parsed.remaining[index + 1], '--commit');
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown memory export option: ${arg}`);
     }
-    return value;
+    if (format === null) {
+        throw new TenderCliUsageError(`memory export requires --format jsonl.\nNext: tender memory export --format jsonl --dir ${parsed.dir}`);
+    }
+    return { command: 'memory export', format, commitSha, ...parsed };
 }
-function parseTypeName(value, flag) {
-    if (!value || value.startsWith('-')) {
-        throw new TenderCliUsageError(`${flag} requires a TypeScript type name.`);
+function parseTokenProfile(value) {
+    if (value === 'edit-preview' || value === 'publish' || value === 'create' || value === 'db-read') {
+        return value;
     }
-    if (!/^[A-Z][A-Za-z0-9]*$/.test(value)) {
-        throw new TenderCliUsageError(`${flag} must be a PascalCase TypeScript type name. Example: ShopifyApiBinding`);
+    throw new TenderCliUsageError('--profile must be one of edit-preview, publish, create, or db-read.');
+}
+function parsePositiveIntegerFlag(value, flag) {
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed) || parsed <= 0) {
+        throw new TenderCliUsageError(`${flag} requires a positive integer.`);
     }
-    return value;
+    return parsed;
 }
-function parseBindingsOutboundArgs(args) {
+function parseNonNegativeIntegerFlag(value, flag) {
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed) || parsed < 0) {
+        throw new TenderCliUsageError(`${flag} requires a non-negative integer.`);
+    }
+    return parsed;
+}
+function parseAuthLoginArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'app bindings outbound' };
+        return { command: 'help', topic: 'auth login' };
     }
-    let id = null;
-    let host = null;
-    let name = null;
-    let label = null;
-    let interfaceName = null;
-    let dryRun = false;
+    let device = false;
+    let baseUrl = null;
+    let tokenProfile = 'edit-preview';
+    let saveProfile = DEFAULT_PROFILE_NAME;
+    let artifactId = null;
+    let ttl = '7d';
     let json = false;
+    let noPoll = false;
+    let pollTimeoutSeconds = 600;
     for (let index = 0; index < args.length; index += 1) {
         const arg = args[index];
+        if (arg === '--device') {
+            device = true;
+            continue;
+        }
         if (arg === '--json') {
             json = true;
             continue;
         }
-        if (arg === '--dry-run') {
-            dryRun = true;
+        if (arg === '--no-poll') {
+            noPoll = true;
             continue;
         }
-        if (arg === '--id') {
-            id = parseBindingId(args[index + 1]);
+        if (arg === '--base-url') {
+            baseUrl = parseBaseUrlFlag(args, index);
             index += 1;
             continue;
         }
-        if (arg === '--host') {
-            host = parseAllowedHost(args[index + 1]);
+        if (arg === '--profile') {
+            tokenProfile = parseTokenProfile(args[index + 1]);
             index += 1;
             continue;
         }
-        if (arg === '--name') {
-            name = parseEnvBindingName(args[index + 1]);
+        if (arg === '--save-profile') {
+            saveProfile = parseProfileName(args[index + 1], '--save-profile');
             index += 1;
             continue;
         }
-        if (arg === '--label') {
-            label = parseRequiredFlagValue(args[index + 1], '--label');
+        if (arg === '--artifact') {
+            artifactId = parseProfileName(args[index + 1], '--artifact');
             index += 1;
             continue;
         }
-        if (arg === '--interface') {
-            interfaceName = parseTypeName(args[index + 1], '--interface');
+        if (arg === '--ttl') {
+            ttl = parseTtl(args[index + 1]);
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown bindings outbound option: ${arg}`);
+        if (arg === '--poll-timeout') {
+            pollTimeoutSeconds = parsePositiveIntegerFlag(args[index + 1], '--poll-timeout');
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown auth login option: ${arg}`);
     }
-    if (!id || !host) {
-        throw new TenderCliUsageError('--id and --host are required. Example: tender app bindings outbound --id shopify --host admin.shopify.com --dry-run --json');
+    if (!device) {
+        throw new TenderCliUsageError('auth login currently requires --device. Example: tender auth login --device --profile edit-preview --artifact artifact_123');
     }
-    if (!dryRun) {
-        throw new TenderCliUsageError('bindings outbound currently requires --dry-run. Example: tender app bindings outbound --id shopify --host admin.shopify.com --dry-run --json');
+    if (tokenProfile === 'create' && artifactId) {
+        throw new TenderCliUsageError('--profile create must be account-scoped; remove --artifact.');
+    }
+    if (tokenProfile === 'db-read' && !artifactId) {
+        throw new TenderCliUsageError('--profile db-read requires --artifact <artifact-id>.');
     }
     return {
-        command: 'app bindings outbound',
-        id,
-        host,
-        name,
-        label,
-        interfaceName,
-        dryRun,
+        command: 'auth login',
+        baseUrl,
+        device,
+        tokenProfile,
+        saveProfile,
+        artifactId,
+        ttl,
         json,
+        noPoll,
+        pollTimeoutSeconds,
     };
 }
-function parseAnalyticsCommonArgs(args, startIndex) {
+function parseAuthStatusArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'auth status' };
+    }
+    let profileName = null;
+    let json = false;
+    for (let index = 0; index < args.length; index += 1) {
+        const arg = args[index];
+        if (arg === '--json') {
+            json = true;
+            continue;
+        }
+        if (arg === '--profile') {
+            profileName = parseProfileName(args[index + 1], '--profile');
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown auth status option: ${arg}`);
+    }
+    return {
+        command: 'auth status',
+        profileName,
+        json,
+    };
+}
+function parsePlaybooksCommonArgs(args, startIndex) {
     let baseUrl = null;
     let flagToken = null;
     let profileName = null;
     let json = false;
-    const remaining = [];
+    const extras = [];
     for (let index = startIndex; index < args.length; index += 1) {
         const arg = args[index];
         if (arg === '--json') {
@@ -4099,90 +4550,143 @@ function parseAnalyticsCommonArgs(args, startIndex) {
             index += 1;
             continue;
         }
-        remaining.push(arg);
+        extras.push(arg);
     }
-    return { baseUrl, flagToken, profileName, json, remaining };
+    return { baseUrl, flagToken, profileName, json, extras };
 }
-function parseAnalyticsSummaryArgs(args) {
+function parsePlaybooksListArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'app analytics summary' };
+        return { command: 'help', topic: 'playbooks list' };
     }
-    const artifactId = args[0];
-    if (!artifactId || artifactId.startsWith('-')) {
-        throw new TenderCliUsageError('app id is required. Example: tender app analytics summary <app-id> --range 30d --json');
+    const parsed = parsePlaybooksCommonArgs(args, 0);
+    if (parsed.extras.length > 0) {
+        throw new TenderCliUsageError(`Unknown playbooks list option: ${parsed.extras[0]}`);
     }
-    const parsed = parseAnalyticsCommonArgs(args, 1);
-    let range = '7d';
-    for (let index = 0; index < parsed.remaining.length; index += 1) {
-        const arg = parsed.remaining[index];
-        if (arg === '--range') {
-            range = parseAnalyticsRange(parsed.remaining[index + 1]);
-            index += 1;
-            continue;
-        }
-        throw new TenderCliUsageError(`Unknown analytics summary option: ${arg}`);
+    return {
+        command: 'playbooks list',
+        baseUrl: parsed.baseUrl,
+        flagToken: parsed.flagToken,
+        profileName: parsed.profileName,
+        json: parsed.json,
+    };
+}
+function parsePlaybooksGetArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'playbooks get' };
     }
-    return { command: 'app analytics summary', artifactId, range, ...parsed };
+    const playbookId = args[0];
+    if (!playbookId || playbookId.startsWith('-')) {
+        throw new TenderCliUsageError('playbook id is required. Example: tender playbooks get recharge-bundle-builder --json');
+    }
+    const parsed = parsePlaybooksCommonArgs(args, 1);
+    if (parsed.extras.length > 0) {
+        throw new TenderCliUsageError(`Unknown playbooks get option: ${parsed.extras[0]}`);
+    }
+    return {
+        command: 'playbooks get',
+        playbookId,
+        baseUrl: parsed.baseUrl,
+        flagToken: parsed.flagToken,
+        profileName: parsed.profileName,
+        json: parsed.json,
+    };
 }
-function parseAnalyticsQueryArgs(args) {
+function parsePlaybooksFileArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'app analytics query' };
+        return { command: 'help', topic: 'playbooks file' };
     }
-    const artifactId = args[0];
-    if (!artifactId || artifactId.startsWith('-')) {
-        throw new TenderCliUsageError('app id is required. Example: tender app analytics query <app-id> --spec chart.json --json');
+    const playbookId = args[0];
+    if (!playbookId || playbookId.startsWith('-')) {
+        throw new TenderCliUsageError('playbook id is required. Example: tender playbooks file recharge-bundle-builder --path references/recharge-payloads.md --json');
     }
-    const parsed = parseAnalyticsCommonArgs(args, 1);
-    let specPath = null;
-    for (let index = 0; index < parsed.remaining.length; index += 1) {
-        const arg = parsed.remaining[index];
-        if (arg === '--spec') {
-            specPath = parseSpecPath(parsed.remaining[index + 1]);
+    let filePath = null;
+    const rest = [];
+    for (let index = 1; index < args.length; index += 1) {
+        const arg = args[index];
+        if (arg === '--path') {
+            const value = args[index + 1];
+            if (!value || value.startsWith('-')) {
+                throw new TenderCliUsageError('--path requires a playbook reference path.');
+            }
+            filePath = value;
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown analytics query option: ${arg}`);
+        rest.push(arg);
     }
-    if (!specPath) {
-        throw new TenderCliUsageError('--spec is required. Example: tender app analytics query artifact_123 --spec chart.json --json');
+    const parsed = parsePlaybooksCommonArgs(rest, 0);
+    if (parsed.extras.length > 0) {
+        throw new TenderCliUsageError(`Unknown playbooks file option: ${parsed.extras[0]}`);
     }
-    return { command: 'app analytics query', artifactId, specPath, ...parsed };
+    if (!filePath) {
+        throw new TenderCliUsageError('--path is required. Example: tender playbooks file recharge-bundle-builder --path references/recharge-payloads.md --json');
+    }
+    return {
+        command: 'playbooks file',
+        playbookId,
+        filePath,
+        baseUrl: parsed.baseUrl,
+        flagToken: parsed.flagToken,
+        profileName: parsed.profileName,
+        json: parsed.json,
+    };
 }
-function parseAnalyticsCapabilitiesArgs(args) {
+function parseGenerateEnvTypesArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'app analytics capabilities' };
-    }
-    const artifactId = args[0];
-    if (!artifactId || artifactId.startsWith('-')) {
-        throw new TenderCliUsageError('app id is required. Example: tender app analytics capabilities <app-id> --include-catalog --json');
+        return { command: 'help', topic: 'app generate-env-types' };
     }
-    const parsed = parseAnalyticsCommonArgs(args, 1);
-    let range = '7d';
-    let includeCatalog = false;
-    for (let index = 0; index < parsed.remaining.length; index += 1) {
-        const arg = parsed.remaining[index];
-        if (arg === '--include-catalog') {
-            includeCatalog = true;
+    let dir = '.';
+    let json = false;
+    for (let index = 0; index < args.length; index += 1) {
+        const arg = args[index];
+        if (arg === '--json') {
+            json = true;
             continue;
         }
-        if (arg === '--range') {
-            range = parseAnalyticsRange(parsed.remaining[index + 1]);
+        if (arg === '--dir') {
+            const value = args[index + 1];
+            if (!value) {
+                throw new TenderCliUsageError('--dir requires a path.');
+            }
+            dir = value;
             index += 1;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown analytics capabilities option: ${arg}`);
+        throw new TenderCliUsageError(`Unknown generate-env-types option: ${arg}`);
     }
     return {
-        command: 'app analytics capabilities',
-        artifactId,
-        includeCatalog,
-        range,
-        ...parsed,
+        command: 'app generate-env-types',
+        dir,
+        json,
     };
 }
-function parseAnalyticsAuthoringArgs(args) {
+function parseAnalyticsRange(value) {
+    if (!value || value.startsWith('-')) {
+        throw new TenderCliUsageError('--range requires 7d, 30d, 90d, or YYYY-MM-DD..YYYY-MM-DD.');
+    }
+    if (value === '7d' || value === '30d' || value === '90d') {
+        return value;
+    }
+    if (/^\d{4}-\d{2}-\d{2}\.\.\d{4}-\d{2}-\d{2}$/.test(value)) {
+        return value;
+    }
+    throw new TenderCliUsageError('--range must be 7d, 30d, 90d, or YYYY-MM-DD..YYYY-MM-DD.');
+}
+function parseSpecPath(value) {
+    if (!value || (value !== '-' && value.startsWith('-'))) {
+        throw new TenderCliUsageError('--spec requires a JSON file path or - for stdin.');
+    }
+    return value;
+}
+function parseRequiredFlagValue(value, flag) {
+    if (!value || value.startsWith('-')) {
+        throw new TenderCliUsageError(`${flag} requires a value.`);
+    }
+    return value;
+}
+function parseCapabilitiesArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'app analytics authoring' };
+        return { command: 'help', topic: 'capabilities' };
     }
     let json = false;
     for (const arg of args) {
@@ -4190,49 +4694,292 @@ function parseAnalyticsAuthoringArgs(args) {
             json = true;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown analytics authoring option: ${arg}`);
+        throw new TenderCliUsageError(`Unknown capabilities option: ${arg}`);
     }
-    return { command: 'app analytics authoring', json };
+    return { command: 'capabilities', json };
 }
-function parseAnalyticsSuggestionsArgs(args) {
+function parseVersionArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'app analytics suggestions' };
-    }
-    const artifactId = args[0];
-    if (!artifactId || artifactId.startsWith('-')) {
-        throw new TenderCliUsageError('app id is required. Example: tender app analytics suggestions <app-id> --range 30d --json');
+        return { command: 'help', topic: 'version' };
     }
-    const parsed = parseAnalyticsCommonArgs(args, 1);
-    let range = '7d';
-    for (let index = 0; index < parsed.remaining.length; index += 1) {
-        const arg = parsed.remaining[index];
-        if (arg === '--range') {
-            range = parseAnalyticsRange(parsed.remaining[index + 1]);
-            index += 1;
+    let json = false;
+    for (const arg of args) {
+        if (arg === '--json') {
+            json = true;
             continue;
         }
-        throw new TenderCliUsageError(`Unknown analytics suggestions option: ${arg}`);
+        throw new TenderCliUsageError(`Unknown version option: ${arg}`);
     }
-    return { command: 'app analytics suggestions', artifactId, range, ...parsed };
+    return { command: 'version', json };
 }
-function parseAnalyticsSteps(value) {
-    const raw = parseRequiredFlagValue(value, '--steps');
-    const steps = raw
-        .split(',')
-        .map((step) => step.trim())
-        .filter((step) => step.length > 0);
-    if (steps.length < 2 || steps.length > 25 || new Set(steps).size !== steps.length) {
-        throw new TenderCliUsageError('--steps must contain 2-25 unique comma-separated flow steps.');
+function parseBindingId(value) {
+    if (!value || value.startsWith('-')) {
+        throw new TenderCliUsageError('--id requires a binding id.');
     }
-    return steps;
+    if (!/^[a-z][a-z0-9-]*$/.test(value)) {
+        throw new TenderCliUsageError('--id must start with a lowercase letter and contain only lowercase letters, numbers, and dashes. Example: shopify-api');
+    }
+    return value;
 }
-function parseAnalyticsExactFunnelArgs(args) {
-    if (args.includes('--help') || args.includes('-h')) {
-        return { command: 'help', topic: 'app analytics exact-funnel' };
+function parseAllowedHost(value) {
+    if (!value || value.startsWith('-')) {
+        throw new TenderCliUsageError('--host requires a hostname.');
     }
-    const artifactId = args[0];
-    if (!artifactId || artifactId.startsWith('-')) {
-        throw new TenderCliUsageError('app id is required. Example: tender app analytics exact-funnel <app-id> --flow checkout_flow --steps started,completed --range 30d --json');
+    if (value.length === 0 ||
+        value.includes('/') ||
+        value.includes(':') ||
+        value.includes('?') ||
+        value.includes('#') ||
+        value.includes('*') ||
+        value !== value.toLowerCase()) {
+        throw new TenderCliUsageError('--host must be an explicit lowercase hostname without protocol, wildcard, path, query, or port. Example: api.example.com');
+    }
+    return value;
+}
+function parseEnvBindingName(value) {
+    if (!value || value.startsWith('-')) {
+        throw new TenderCliUsageError('--name requires an env binding name.');
+    }
+    if (!/^[A-Z][A-Z0-9_]*$/.test(value)) {
+        throw new TenderCliUsageError('--name must be UPPER_SNAKE_CASE. Example: SHOPIFY_API');
+    }
+    return value;
+}
+function parseTypeName(value, flag) {
+    if (!value || value.startsWith('-')) {
+        throw new TenderCliUsageError(`${flag} requires a TypeScript type name.`);
+    }
+    if (!/^[A-Z][A-Za-z0-9]*$/.test(value)) {
+        throw new TenderCliUsageError(`${flag} must be a PascalCase TypeScript type name. Example: ShopifyApiBinding`);
+    }
+    return value;
+}
+function parseBindingsOutboundArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'app bindings outbound' };
+    }
+    let id = null;
+    let host = null;
+    let name = null;
+    let label = null;
+    let interfaceName = null;
+    let dryRun = false;
+    let json = false;
+    for (let index = 0; index < args.length; index += 1) {
+        const arg = args[index];
+        if (arg === '--json') {
+            json = true;
+            continue;
+        }
+        if (arg === '--dry-run') {
+            dryRun = true;
+            continue;
+        }
+        if (arg === '--id') {
+            id = parseBindingId(args[index + 1]);
+            index += 1;
+            continue;
+        }
+        if (arg === '--host') {
+            host = parseAllowedHost(args[index + 1]);
+            index += 1;
+            continue;
+        }
+        if (arg === '--name') {
+            name = parseEnvBindingName(args[index + 1]);
+            index += 1;
+            continue;
+        }
+        if (arg === '--label') {
+            label = parseRequiredFlagValue(args[index + 1], '--label');
+            index += 1;
+            continue;
+        }
+        if (arg === '--interface') {
+            interfaceName = parseTypeName(args[index + 1], '--interface');
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown bindings outbound option: ${arg}`);
+    }
+    if (!id || !host) {
+        throw new TenderCliUsageError('--id and --host are required. Example: tender app bindings outbound --id shopify --host admin.shopify.com --dry-run --json');
+    }
+    if (!dryRun) {
+        throw new TenderCliUsageError('bindings outbound currently requires --dry-run. Example: tender app bindings outbound --id shopify --host admin.shopify.com --dry-run --json');
+    }
+    return {
+        command: 'app bindings outbound',
+        id,
+        host,
+        name,
+        label,
+        interfaceName,
+        dryRun,
+        json,
+    };
+}
+function parseAnalyticsCommonArgs(args, startIndex) {
+    let baseUrl = null;
+    let flagToken = null;
+    let profileName = null;
+    let json = false;
+    const remaining = [];
+    for (let index = startIndex; index < args.length; index += 1) {
+        const arg = args[index];
+        if (arg === '--json') {
+            json = true;
+            continue;
+        }
+        if (arg === '--base-url') {
+            baseUrl = parseBaseUrlFlag(args, index);
+            index += 1;
+            continue;
+        }
+        if (arg === '--token') {
+            flagToken = parseTokenFlag(args, index);
+            index += 1;
+            continue;
+        }
+        if (arg === '--profile') {
+            profileName = parseProfileName(args[index + 1], '--profile');
+            index += 1;
+            continue;
+        }
+        remaining.push(arg);
+    }
+    return { baseUrl, flagToken, profileName, json, remaining };
+}
+function parseAnalyticsSummaryArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'app analytics summary' };
+    }
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith('-')) {
+        throw new TenderCliUsageError('app id is required. Example: tender app analytics summary <app-id> --range 30d --json');
+    }
+    const parsed = parseAnalyticsCommonArgs(args, 1);
+    let range = '7d';
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === '--range') {
+            range = parseAnalyticsRange(parsed.remaining[index + 1]);
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown analytics summary option: ${arg}`);
+    }
+    return { command: 'app analytics summary', artifactId, range, ...parsed };
+}
+function parseAnalyticsQueryArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'app analytics query' };
+    }
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith('-')) {
+        throw new TenderCliUsageError('app id is required. Example: tender app analytics query <app-id> --spec chart.json --json');
+    }
+    const parsed = parseAnalyticsCommonArgs(args, 1);
+    let specPath = null;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === '--spec') {
+            specPath = parseSpecPath(parsed.remaining[index + 1]);
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown analytics query option: ${arg}`);
+    }
+    if (!specPath) {
+        throw new TenderCliUsageError('--spec is required. Example: tender app analytics query artifact_123 --spec chart.json --json');
+    }
+    return { command: 'app analytics query', artifactId, specPath, ...parsed };
+}
+function parseAnalyticsCapabilitiesArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'app analytics capabilities' };
+    }
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith('-')) {
+        throw new TenderCliUsageError('app id is required. Example: tender app analytics capabilities <app-id> --include-catalog --json');
+    }
+    const parsed = parseAnalyticsCommonArgs(args, 1);
+    let range = '7d';
+    let includeCatalog = false;
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === '--include-catalog') {
+            includeCatalog = true;
+            continue;
+        }
+        if (arg === '--range') {
+            range = parseAnalyticsRange(parsed.remaining[index + 1]);
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown analytics capabilities option: ${arg}`);
+    }
+    return {
+        command: 'app analytics capabilities',
+        artifactId,
+        includeCatalog,
+        range,
+        ...parsed,
+    };
+}
+function parseAnalyticsAuthoringArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'app analytics authoring' };
+    }
+    let json = false;
+    for (const arg of args) {
+        if (arg === '--json') {
+            json = true;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown analytics authoring option: ${arg}`);
+    }
+    return { command: 'app analytics authoring', json };
+}
+function parseAnalyticsSuggestionsArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'app analytics suggestions' };
+    }
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith('-')) {
+        throw new TenderCliUsageError('app id is required. Example: tender app analytics suggestions <app-id> --range 30d --json');
+    }
+    const parsed = parseAnalyticsCommonArgs(args, 1);
+    let range = '7d';
+    for (let index = 0; index < parsed.remaining.length; index += 1) {
+        const arg = parsed.remaining[index];
+        if (arg === '--range') {
+            range = parseAnalyticsRange(parsed.remaining[index + 1]);
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown analytics suggestions option: ${arg}`);
+    }
+    return { command: 'app analytics suggestions', artifactId, range, ...parsed };
+}
+function parseAnalyticsSteps(value) {
+    const raw = parseRequiredFlagValue(value, '--steps');
+    const steps = raw
+        .split(',')
+        .map((step) => step.trim())
+        .filter((step) => step.length > 0);
+    if (steps.length < 2 || steps.length > 25 || new Set(steps).size !== steps.length) {
+        throw new TenderCliUsageError('--steps must contain 2-25 unique comma-separated flow steps.');
+    }
+    return steps;
+}
+function parseAnalyticsExactFunnelArgs(args) {
+    if (args.includes('--help') || args.includes('-h')) {
+        return { command: 'help', topic: 'app analytics exact-funnel' };
+    }
+    const artifactId = args[0];
+    if (!artifactId || artifactId.startsWith('-')) {
+        throw new TenderCliUsageError('app id is required. Example: tender app analytics exact-funnel <app-id> --flow checkout_flow --steps started,completed --range 30d --json');
     }
     const parsed = parseAnalyticsCommonArgs(args, 1);
     let range = '7d';
@@ -6022,7 +6769,67 @@ function parseTenderArgs(args) {
         }
         throw new TenderCliUsageError(`Unknown playbooks command: ${args[1]}`);
     }
-    if (args[0] === 'apps') {
+    if (args[0] === 'connectors') {
+        if (args[1] === undefined || args[1] === '--help' || args[1] === '-h') {
+            return { command: 'help', topic: 'connectors' };
+        }
+        if (args[1] === 'list') {
+            return parseConnectorsListArgs(args.slice(2));
+        }
+        if (args[1] === 'bind') {
+            return parseConnectorsBindArgs(args.slice(2));
+        }
+        if (args[1] === 'shopify') {
+            if (args[2] === undefined || args[2] === '--help' || args[2] === '-h') {
+                return { command: 'help', topic: 'connectors shopify' };
+            }
+            if (args[2] === 'create') {
+                return parseConnectorsShopifyCreateArgs(args.slice(3));
+            }
+            if (args[2] === 'setup-url') {
+                return parseConnectorsShopifySetupUrlArgs(args.slice(3));
+            }
+            if (args[2] === 'credentials' && (args[3] === undefined || args[3] === '--help' || args[3] === '-h')) {
+                return { command: 'help', topic: 'connectors shopify credentials set' };
+            }
+            if (args[2] === 'credentials' && args[3] === 'set') {
+                return parseConnectorsShopifyCredentialsSetArgs(args.slice(4));
+            }
+            if (args[2] === 'app-automation-token' && (args[3] === undefined || args[3] === '--help' || args[3] === '-h')) {
+                return { command: 'help', topic: 'connectors shopify app-automation-token set' };
+            }
+            if (args[2] === 'app-automation-token' && args[3] === 'set') {
+                return parseConnectorsShopifyAppAutomationTokenSetArgs(args.slice(4));
+            }
+            if (args[2] === 'app-automation-token' && args[3] === 'delete') {
+                return parseConnectorsShopifyAppAutomationTokenDeleteArgs(args.slice(4));
+            }
+            if (args[2] === 'verify') {
+                return parseConnectorsShopifyVerifyArgs(args.slice(3));
+            }
+            if (args[2] === 'source' && (args[3] === undefined || args[3] === '--help' || args[3] === '-h')) {
+                return { command: 'help', topic: 'connectors shopify source init' };
+            }
+            if (args[2] === 'source' && args[3] === 'init') {
+                return parseConnectorsShopifySourceInitArgs(args.slice(4));
+            }
+            if (args[2] === 'source' && args[3] === 'checkout') {
+                return parseConnectorsShopifySourceCheckoutArgs(args.slice(4));
+            }
+            if (args[2] === 'source' && args[3] === 'validate') {
+                return parseConnectorsShopifySourceValidateArgs(args.slice(4));
+            }
+            if (args[2] === 'source' && args[3] === 'deploy') {
+                return parseConnectorsShopifySourceDeployArgs(args.slice(4));
+            }
+            if (args[2] === 'delete') {
+                return parseConnectorsShopifyDeleteArgs(args.slice(3));
+            }
+            throw new TenderCliUsageError(`Unknown connectors shopify command: ${args[2]}`);
+        }
+        throw new TenderCliUsageError(`Unknown connectors command: ${args[1]}`);
+    }
+    if (args[0] === 'apps') {
         throw new TenderCliUsageError('Unknown command: apps. Use `tender app ...` for Tender App workflows.');
     }
     if (args[0] !== 'app') {
@@ -6738,6 +7545,27 @@ async function requestPlaybooksApi(input) {
     }
     return payload;
 }
+async function requestConnectorsApi(input) {
+    const suffix = input.connectorsPath ? `/${input.connectorsPath.replace(/^\/+/, '')}` : '';
+    const response = await input.fetcher(`${input.baseUrl}/api/account/connectors${suffix}`, {
+        method: input.method,
+        headers: {
+            authorization: `Bearer ${input.token}`,
+            accept: 'application/json',
+            ...(input.body === undefined ? {} : { 'content-type': 'application/json' }),
+        },
+        body: input.body === undefined ? undefined : JSON.stringify(input.body),
+    });
+    const payload = response.status === 204 ? { ok: true } : await parseJsonResponse(response);
+    if (!response.ok || !payload?.ok) {
+        const reasonCode = (typeof payload?.reasonCode === 'string' && payload.reasonCode) || `http_${response.status}`;
+        const message = (typeof payload?.message === 'string' && payload.message) ||
+            (typeof payload?.reasonCode === 'string' && payload.reasonCode) ||
+            `Connector request failed with HTTP ${response.status}.`;
+        throw new Error([message, `Reason: ${reasonCode}.`, 'Example: tender connectors list --profile account --json.'].join('\n'));
+    }
+    return payload;
+}
 function dbCorrectedExample(artifactId, dbPath) {
     if (dbPath === 'capabilities') {
         return `tender app db capabilities ${artifactId} --json`;
@@ -8159,9 +8987,16 @@ async function runGitCommand(input) {
 function shellQuote(value) {
     return `'${value.replaceAll("'", "'\\''")}'`;
 }
+function currentCliCredentialHelperCommandParts() {
+    const scriptPath = process.argv[1];
+    if (!scriptPath) {
+        return ['tender'];
+    }
+    return [process.execPath, scriptPath];
+}
 function createCredentialHelperCommand(input) {
     const parts = [
-        'tender',
+        ...currentCliCredentialHelperCommandParts().map(shellQuote),
         'app',
         'git',
         'credential',
@@ -9866,228 +10701,1349 @@ async function runMemoryBrief(command, io, runtime) {
         repoPath,
         runner: commandRunnerForMemory(runtime),
     });
-    const latestSummary = [...entries].reverse().find((entry) => entry.kind === 'summary') ?? null;
-    const unresolved = entries
-        .filter((entry) => entry.status === 'open' || entry.kind === 'failure' || entry.kind === 'open_question' || entry.kind === 'support_handoff')
-        .slice(-command.limit);
-    const briefEntries = latestSummary ? [latestSummary, ...unresolved.filter((entry) => entry.entryId !== latestSummary.entryId)] : unresolved;
+    const latestSummary = [...entries].reverse().find((entry) => entry.kind === 'summary') ?? null;
+    const unresolved = entries
+        .filter((entry) => entry.status === 'open' || entry.kind === 'failure' || entry.kind === 'open_question' || entry.kind === 'support_handoff')
+        .slice(-command.limit);
+    const briefEntries = latestSummary ? [latestSummary, ...unresolved.filter((entry) => entry.entryId !== latestSummary.entryId)] : unresolved;
+    const result = {
+        ok: true,
+        command: command.command,
+        ref: ARTIFACT_MEMORY_NOTES_REF,
+        entries: briefEntries,
+    };
+    if (command.json) {
+        io.stdout(JSON.stringify(result, null, 2));
+    }
+    else {
+        io.stdout(briefEntries.length > 0 ? briefEntries.map(formatArtifactMemoryEntry).join('\n') : 'No artifact memory brief is available yet.');
+    }
+    return 0;
+}
+async function runMemoryFlush(command, io, runtime) {
+    const sync = await pushArtifactMemoryNotes({
+        repoPath: path.resolve(command.dir),
+        remoteName: command.remoteName,
+        runner: commandRunnerForMemory(runtime),
+    });
+    const next = sync.status === 'failed'
+        ? `tender memory flush --dir ${command.dir} --remote ${command.remoteName}`
+        : sync.status === 'not_configured'
+            ? memoryRecoveryForArtifact(command.artifactId, command.dir)
+            : null;
+    const result = {
+        ok: sync.status === 'pushed',
+        command: command.command,
+        memorySync: sync,
+        next,
+    };
+    if (command.json) {
+        io.stdout(JSON.stringify(result, null, 2));
+    }
+    else {
+        io.stdout([
+            `memory_sync: ${sync.status}`,
+            sync.error ? `error: ${sync.error}` : null,
+            result.next ? `next: ${result.next}` : null,
+        ]
+            .filter((line) => Boolean(line))
+            .join('\n'));
+    }
+    return sync.status === 'pushed' ? 0 : 1;
+}
+async function runMemoryExport(command, io, runtime) {
+    const entries = await readArtifactMemoryEntries({
+        repoPath: path.resolve(command.dir),
+        commitSha: command.commitSha,
+        runner: commandRunnerForMemory(runtime),
+    });
+    if (command.format === 'jsonl') {
+        io.stdout(entries.map((entry) => JSON.stringify(entry)).join('\n'));
+        return 0;
+    }
+    throw new TenderCliUsageError(`Unsupported memory export format: ${command.format}.\nNext: tender memory export --format jsonl --dir ${command.dir}`);
+}
+async function readLocalChangedFiles(input) {
+    const result = await runGitCommand({
+        runtime: input.runtime,
+        cwd: input.repoPath,
+        args: ['status', '--porcelain'],
+        allowFailure: true,
+    });
+    if (result.exitCode !== 0) {
+        return [];
+    }
+    return result.stdout
+        .split(/\r?\n/)
+        .map((line) => line.slice(3).trim())
+        .filter(Boolean)
+        .slice(0, 50);
+}
+async function appendAutomaticMemory(input) {
+    try {
+        return await appendArtifactMemoryNote({
+            repoPath: input.repoPath,
+            artifactId: input.artifactId,
+            kind: input.kind,
+            summary: input.summary,
+            body: input.body,
+            tags: input.tags,
+            severity: input.severity,
+            status: input.status,
+            related: input.related,
+            source: {
+                actor: 'cli',
+                command: input.summary,
+            },
+            runner: commandRunnerForMemory(input.runtime),
+            now: input.runtime.now,
+        });
+    }
+    catch (error) {
+        return {
+            error: error instanceof Error ? error.message : String(error),
+            next: `tender memory add --dir ${input.repoPath} --artifact ${input.artifactId} --kind ${input.kind} --summary ${JSON.stringify(input.summary)}`,
+        };
+    }
+}
+async function flushAutomaticMemory(input) {
+    return pushArtifactMemoryNotes({
+        repoPath: input.repoPath,
+        remoteName: input.remoteName,
+        runner: commandRunnerForMemory(input.runtime),
+    });
+}
+async function resolveAnalyticsCredentials(command, runtime) {
+    return await resolveApiCredentials({
+        baseUrl: command.baseUrl,
+        flagToken: command.flagToken,
+        profileName: command.profileName,
+        env: runtime.env ?? process.env,
+    });
+}
+async function resolvePlaybooksCredentials(command, runtime) {
+    try {
+        return await resolveApiCredentials({
+            baseUrl: command.baseUrl,
+            flagToken: command.flagToken,
+            profileName: command.profileName,
+            env: runtime.env ?? process.env,
+        });
+    }
+    catch (error) {
+        if (error instanceof TenderCliUsageError) {
+            throw new TenderCliUsageError([
+                'Playbooks require Tender authentication.',
+                'Run `tender auth login --device --profile edit-preview --save-profile agent --ttl 7d --json`, set TENDER_API_TOKEN, or pass --token <token>.',
+            ].join('\n'));
+        }
+        throw error;
+    }
+}
+async function resolveDbCredentials(command, runtime) {
+    return await resolveApiCredentials({
+        baseUrl: command.baseUrl,
+        flagToken: command.flagToken,
+        profileName: command.profileName,
+        env: runtime.env ?? process.env,
+    });
+}
+function validateDbSql(sql) {
+    if (!sql.trim()) {
+        throw new TenderCliUsageError('SQL statement is required.');
+    }
+    const byteLength = new TextEncoder().encode(sql).byteLength;
+    if (byteLength > DB_SQL_STATEMENT_MAX_BYTES) {
+        throw new TenderCliUsageError(`SQL statement is limited to ${DB_SQL_STATEMENT_MAX_BYTES} bytes.`);
+    }
+}
+async function readDbSql(command, runtime) {
+    const sql = command.sqlSource.kind === 'inline'
+        ? command.sqlSource.value
+        : command.sqlSource.value === '-'
+            ? runtime.stdin
+            : await readFile(path.resolve(command.sqlSource.value), 'utf8');
+    if (!sql) {
+        throw new TenderCliUsageError('--file - requires SQL on stdin.');
+    }
+    validateDbSql(sql);
+    return sql;
+}
+function printDbPayload(command, io, payload, fallbackLines) {
+    if (command.json) {
+        io.stdout(JSON.stringify(payload, null, 2));
+    }
+    else {
+        io.stdout(fallbackLines.join('\n'));
+    }
+}
+function printPlaybooksPayload(command, io, payload, fallback) {
+    if (command.json) {
+        io.stdout(JSON.stringify(payload, null, 2));
+    }
+    else {
+        io.stdout(fallback);
+    }
+}
+async function runPlaybooksList(command, io, runtime) {
+    const credentials = await resolvePlaybooksCredentials(command, runtime);
+    const payload = await requestPlaybooksApi({
+        playbooksPath: 'list',
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+    });
+    const playbooks = Array.isArray(payload.playbooks) ? payload.playbooks : [];
+    printPlaybooksPayload(command, io, payload, playbooks
+        .map((playbook) => (isCliJsonRecord(playbook) ? `${String(playbook.id ?? '')}\t${String(playbook.description ?? '')}` : ''))
+        .filter(Boolean)
+        .join('\n') || 'No Tender Prompt playbooks found.');
+    return 0;
+}
+async function runPlaybooksGet(command, io, runtime) {
+    const credentials = await resolvePlaybooksCredentials(command, runtime);
+    const payload = await requestPlaybooksApi({
+        playbooksPath: 'get',
+        playbookId: command.playbookId,
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+    });
+    printPlaybooksPayload(command, io, payload, typeof payload.body === 'string' ? payload.body : JSON.stringify(payload, null, 2));
+    return 0;
+}
+async function runPlaybooksFile(command, io, runtime) {
+    const credentials = await resolvePlaybooksCredentials(command, runtime);
+    const payload = await requestPlaybooksApi({
+        playbooksPath: 'file',
+        playbookId: command.playbookId,
+        filePath: command.filePath,
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+    });
+    printPlaybooksPayload(command, io, payload, typeof payload.content === 'string' ? payload.content : JSON.stringify(payload, null, 2));
+    return 0;
+}
+async function resolveConnectorsCredentials(command, runtime) {
+    try {
+        return await resolveApiCredentials({
+            baseUrl: command.baseUrl,
+            flagToken: command.flagToken,
+            profileName: command.profileName,
+            env: runtime.env ?? process.env,
+        });
+    }
+    catch (error) {
+        if (error instanceof TenderCliUsageError) {
+            throw new TenderCliUsageError([
+                'Connectors require Tender account authentication.',
+                'Run `tender auth login --device --profile create --ttl 7d --save-profile account --json`, set TENDER_API_TOKEN, or pass --token <token>.',
+            ].join('\n'));
+        }
+        throw error;
+    }
+}
+function printConnectorsPayload(command, io, payload, fallbackLines) {
+    if (command.json) {
+        io.stdout(JSON.stringify(payload, null, 2));
+    }
+    else {
+        io.stdout(fallbackLines.join('\n'));
+    }
+}
+function readConnectorArray(payload) {
+    return Array.isArray(payload.connectors) ? payload.connectors.filter(isCliJsonRecord) : [];
+}
+async function runConnectorsList(command, io, runtime) {
+    const credentials = await resolveConnectorsCredentials(command, runtime);
+    const payload = await requestConnectorsApi({
+        connectorsPath: '',
+        method: 'GET',
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+    });
+    const connectors = readConnectorArray(payload);
+    printConnectorsPayload(command, io, payload, connectors.length > 0
+        ? connectors.map((connector) => {
+            return [
+                String(connector.connectorId ?? ''),
+                String(connector.instanceId ?? ''),
+                String(connector.status ?? ''),
+                String(connector.adminApiVersion ?? ''),
+                String(connector.shopDomain ?? ''),
+                connector.hasAppAutomationToken ? 'app_automation_token:stored' : 'app_automation_token:missing',
+            ].join('\t');
+        })
+        : ['No connectors found.']);
+    return 0;
+}
+async function runConnectorsShopifyCreate(command, io, runtime) {
+    const credentials = await resolveConnectorsCredentials(command, runtime);
+    const payload = await requestConnectorsApi({
+        connectorsPath: '',
+        method: 'POST',
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+        body: {
+            type: 'shopify',
+            instanceId: command.instanceId,
+            ...(command.label ? { label: command.label } : {}),
+            ...(command.appName ? { appName: command.appName } : {}),
+            ...(command.adminApiVersion ? { adminApiVersion: command.adminApiVersion } : {}),
+            ...(command.shopDomain ? { shopDomain: command.shopDomain } : {}),
+        },
+    });
+    const connector = isCliJsonRecord(payload.connector) ? payload.connector : {};
+    printConnectorsPayload(command, io, payload, [
+        `connector_id: ${String(connector.connectorId ?? '')}`,
+        `instance: ${String(connector.instanceId ?? command.instanceId)}`,
+        `status: ${String(connector.status ?? '')}`,
+        `admin_api_version: ${String(connector.adminApiVersion ?? command.adminApiVersion ?? '')}`,
+        `setup_url: ${String(payload.setupUrl ?? '')}`,
+    ]);
+    return 0;
+}
+async function runConnectorsShopifySetupUrl(command, io, runtime) {
+    const credentials = await resolveConnectorsCredentials(command, runtime);
+    const payload = await requestConnectorsApi({
+        connectorsPath: `${encodeURIComponent(command.connectorId)}/setup-sessions`,
+        method: 'POST',
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+    });
+    printConnectorsPayload(command, io, payload, [
+        `connector_id: ${command.connectorId}`,
+        `setup_url: ${String(payload.setupUrl ?? '')}`,
+    ]);
+    return 0;
+}
+function readClientSecret(command, runtime) {
+    if (command.clientSecretSource.kind === 'stdin') {
+        const secret = (runtime.stdin ?? '').trim();
+        if (!secret) {
+            throw new TenderCliUsageError('--client-secret-stdin requires a non-empty secret on stdin.');
+        }
+        return secret;
+    }
+    const secret = runtime.env?.[command.clientSecretSource.name] ?? process.env[command.clientSecretSource.name];
+    if (!secret?.trim()) {
+        throw new TenderCliUsageError(`Environment variable ${command.clientSecretSource.name} is empty or unset.`);
+    }
+    return secret.trim();
+}
+function readAppAutomationToken(command, runtime) {
+    if (command.tokenSource.kind === 'stdin') {
+        const token = (runtime.stdin ?? '').trim();
+        if (!token) {
+            throw new TenderCliUsageError('--token-stdin requires a non-empty token on stdin.');
+        }
+        return token;
+    }
+    const token = runtime.env?.[command.tokenSource.name] ?? process.env[command.tokenSource.name];
+    if (!token?.trim()) {
+        throw new TenderCliUsageError(`Environment variable ${command.tokenSource.name} is empty or unset.`);
+    }
+    return token.trim();
+}
+async function runConnectorsShopifyCredentialsSet(command, io, runtime) {
+    const credentials = await resolveConnectorsCredentials(command, runtime);
+    const clientSecret = readClientSecret(command, runtime);
+    const payload = await requestConnectorsApi({
+        connectorsPath: `${encodeURIComponent(command.connectorId)}/credentials`,
+        method: 'POST',
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+        body: {
+            shopDomain: command.shopDomain,
+            clientId: command.clientId,
+            clientSecret,
+        },
+    });
+    const connector = isCliJsonRecord(payload.connector) ? payload.connector : {};
+    printConnectorsPayload(command, io, payload, [
+        `connector_id: ${String(connector.connectorId ?? command.connectorId)}`,
+        `status: ${String(connector.status ?? '')}`,
+        `shop: ${String(connector.shopDomain ?? command.shopDomain)}`,
+        `client_id_prefix: ${String(connector.clientIdPrefix ?? '')}`,
+    ]);
+    return 0;
+}
+async function runConnectorsShopifyAppAutomationTokenSet(command, io, runtime) {
+    const credentials = await resolveConnectorsCredentials(command, runtime);
+    const appAutomationToken = readAppAutomationToken(command, runtime);
+    const payload = await requestConnectorsApi({
+        connectorsPath: `${encodeURIComponent(command.connectorId)}/app-automation-token`,
+        method: 'POST',
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+        body: {
+            appAutomationToken,
+            ...(command.expiresAt ? { expiresAt: command.expiresAt } : {}),
+        },
+    });
+    const connector = isCliJsonRecord(payload.connector) ? payload.connector : {};
+    printConnectorsPayload(command, io, payload, [
+        `connector_id: ${String(connector.connectorId ?? command.connectorId)}`,
+        `app_automation_token: ${connector.hasAppAutomationToken ? 'stored' : 'missing'}`,
+        `app_automation_token_expires_at: ${String(connector.appAutomationTokenExpiresAt ?? '')}`,
+    ]);
+    return 0;
+}
+async function runConnectorsShopifyAppAutomationTokenDelete(command, io, runtime) {
+    if (command.confirm !== 'delete') {
+        throw new TenderCliUsageError('--confirm delete is required. Example: tender connectors shopify app-automation-token delete conn_123 --confirm delete --json');
+    }
+    const credentials = await resolveConnectorsCredentials(command, runtime);
+    const payload = await requestConnectorsApi({
+        connectorsPath: `${encodeURIComponent(command.connectorId)}/app-automation-token`,
+        method: 'DELETE',
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+    });
+    const connector = isCliJsonRecord(payload.connector) ? payload.connector : {};
+    printConnectorsPayload(command, io, payload, [
+        `connector_id: ${String(connector.connectorId ?? command.connectorId)}`,
+        'app_automation_token: deleted',
+    ]);
+    return 0;
+}
+async function runConnectorsShopifyVerify(command, io, runtime) {
+    const credentials = await resolveConnectorsCredentials(command, runtime);
+    const payload = await requestConnectorsApi({
+        connectorsPath: `${encodeURIComponent(command.connectorId)}/verify`,
+        method: 'POST',
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+    });
+    const connector = isCliJsonRecord(payload.connector) ? payload.connector : {};
+    const scopes = Array.isArray(connector.scopes) ? connector.scopes.join(',') : '';
+    printConnectorsPayload(command, io, payload, [
+        `connector_id: ${String(connector.connectorId ?? command.connectorId)}`,
+        `status: ${String(connector.status ?? '')}`,
+        `shop: ${String(connector.shopDomain ?? '')}`,
+        `scopes: ${scopes}`,
+    ]);
+    return 0;
+}
+function requireShopifySourceString(value, fallback = '') {
+    return typeof value === 'string' && value.trim() ? value.trim() : fallback;
+}
+function normalizeTenderElementTag(value) {
+    const normalized = value.trim().toLowerCase();
+    if (!/^[a-z][a-z0-9]*(?:-[a-z0-9]+)+$/.test(normalized)) {
+        throw new TenderCliUsageError('--tender-element must be a valid custom element tag, for example tender-dog-profile.');
+    }
+    return normalized;
+}
+function normalizeThemeExtensionHandle(value) {
+    const normalized = value.trim().toLowerCase();
+    if (!/^[a-z0-9][a-z0-9-]{0,63}$/.test(normalized)) {
+        throw new TenderCliUsageError('--theme-extension-handle must contain only lowercase letters, numbers, and dashes.');
+    }
+    return normalized;
+}
+function tomlString(value) {
+    return JSON.stringify(value);
+}
+function uniqueSortedScopes(scopes) {
+    return [...new Set(scopes.map((scope) => scope.trim()).filter(Boolean))].sort();
+}
+function parseScopeCsv(value) {
+    return uniqueSortedScopes((value ?? '').split(/[,\s]+/));
+}
+function defaultDogProfileScopes(connectorScopes, override) {
+    if (override) {
+        return parseScopeCsv(override);
+    }
+    const fromConnector = Array.isArray(connectorScopes) ? connectorScopes.filter((scope) => typeof scope === 'string') : [];
+    return uniqueSortedScopes([
+        ...fromConnector,
+        'read_customers',
+        'write_customers',
+        'read_metaobject_definitions',
+        'write_metaobject_definitions',
+        'read_metaobjects',
+        'write_metaobjects',
+    ]);
+}
+function tenderWidgetAssetJs() {
+    return `(function () {
+  const loader = (window.TenderPromptBlockLoader ||= {});
+  loader.scripts ||= new Map();
+  loader.stylesheets ||= new Map();
+
+  function loadScript(src) {
+    if (!src) return Promise.reject(new Error("Missing Tender runtime URL"));
+
+    const existing = loader.scripts.get(src);
+    if (existing) return existing.promise;
+
+    const promise = new Promise((resolve, reject) => {
+      const script = document.createElement("script");
+      script.type = "module";
+      script.src = src;
+      script.onload = resolve;
+      script.onerror = () => reject(new Error(\`Failed to load \${src}\`));
+      document.head.appendChild(script);
+    });
+
+    loader.scripts.set(src, { status: "loading", promise });
+    promise.then(
+      () => loader.scripts.set(src, { status: "loaded", promise }),
+      () => loader.scripts.delete(src),
+    );
+
+    return promise;
+  }
+
+  function preloadStylesheet(src) {
+    if (!src) return Promise.resolve();
+    const existing = loader.stylesheets.get(src);
+    if (existing) return existing.promise;
+
+    const promise = new Promise((resolve) => {
+      const link = document.createElement("link");
+      link.rel = "preload";
+      link.as = "style";
+      link.href = src;
+      link.onload = resolve;
+      link.onerror = resolve;
+      document.head.appendChild(link);
+    });
+
+    loader.stylesheets.set(src, { status: "loading", promise });
+    promise.then(() => loader.stylesheets.set(src, { status: "loaded", promise }));
+    return promise;
+  }
+
+  function afterFrame(callback) {
+    requestAnimationFrame(() => requestAnimationFrame(callback));
+  }
+
+  function stylesheetLoaded(href) {
+    return performance.getEntriesByName(href).some((entry) => entry.responseEnd > 0);
+  }
+
+  function waitForWidgetPaintReady(widget, stylesheetUrl) {
+    const stylesheetHref = stylesheetUrl ? new URL(stylesheetUrl, document.baseURI).href : null;
+
+    return new Promise((resolve) => {
+      let settled = false;
+      let noShadowTimer = null;
+      let rootWithoutStylesheetTimer = null;
+      const finish = () => {
+        if (settled) return;
+        settled = true;
+        clearInterval(interval);
+        clearTimeout(timeout);
+        clearTimeout(noShadowTimer);
+        clearTimeout(rootWithoutStylesheetTimer);
+        afterFrame(resolve);
+      };
+
+      const check = () => {
+        const root = widget.shadowRoot;
+        if (!root) {
+          noShadowTimer ||= setTimeout(finish, 350);
+          return;
+        }
+
+        clearTimeout(noShadowTimer);
+        const links = Array.from(root.querySelectorAll('link[rel="stylesheet"]'));
+        const stylesheet = stylesheetHref
+          ? links.find((link) => link.href === stylesheetHref)
+          : links[0];
+
+        if (!stylesheet) {
+          rootWithoutStylesheetTimer ||= setTimeout(finish, 500);
+          return;
+        }
+
+        clearTimeout(rootWithoutStylesheetTimer);
+        if (stylesheet.sheet || stylesheetLoaded(stylesheet.href)) {
+          finish();
+          return;
+        }
+
+        stylesheet.addEventListener("load", finish, { once: true });
+        stylesheet.addEventListener("error", finish, { once: true });
+      };
+
+      const interval = setInterval(check, 25);
+      const timeout = setTimeout(finish, 2200);
+      check();
+    });
+  }
+
+  function revealWidget(mount, widget) {
+    const placeholder = mount.querySelector("[data-tender-placeholder]");
+    widget.style.visibility = "";
+    widget.style.position = "";
+    widget.style.inset = "";
+    widget.style.pointerEvents = "";
+    placeholder?.remove();
+    mount.dataset.tenderReady = "true";
+    mount.setAttribute("aria-busy", "false");
+  }
+
+  class TenderPromptWidgetBlock extends HTMLElement {
+    connectedCallback() {
+      this.mount();
+    }
+
+    async mount() {
+      const mount = this.querySelector("[data-tender-mount]");
+      const elementTag = this.dataset.tenderElementTag;
+      if (!mount || !elementTag || mount.dataset.tenderMounted === "true") return;
+
+      mount.setAttribute("aria-busy", "true");
+      preloadStylesheet(this.dataset.stylesheetUrl);
+      await loadScript(this.dataset.tenderRuntimeSrc);
+      await Promise.race([
+        customElements.whenDefined(elementTag),
+        new Promise((resolve) => setTimeout(resolve, 1000)),
+      ]);
+
+      const widget = document.createElement(elementTag);
+      for (const [key, value] of Object.entries(this.dataset)) {
+        if (value == null || key === "tenderRuntimeSrc" || key === "tenderElementTag") continue;
+        widget.dataset[key] = value;
+      }
+
+      widget.style.visibility = "hidden";
+      widget.style.position = "absolute";
+      widget.style.inset = "0";
+      widget.style.pointerEvents = "none";
+      mount.appendChild(widget);
+      mount.dataset.tenderMounted = "true";
+      await waitForWidgetPaintReady(widget, this.dataset.stylesheetUrl);
+      revealWidget(mount, widget);
+    }
+  }
+
+  if (!customElements.get("tender-prompt-widget-block")) {
+    customElements.define("tender-prompt-widget-block", TenderPromptWidgetBlock);
+  }
+})();
+`;
+}
+function buildShopifySourceFiles(input) {
+    const appName = requireShopifySourceString(input.connector.appName, 'Tender Prompt Apps');
+    const adminApiVersion = requireShopifySourceString(input.connector.adminApiVersion, '2026-04');
+    const shopDomain = requireShopifySourceString(input.connector.shopDomain);
+    const tenderElement = normalizeTenderElementTag(input.tenderElement);
+    const extensionHandle = normalizeThemeExtensionHandle(input.themeExtensionHandle);
+    const scopes = defaultDogProfileScopes(input.connector.scopes, input.scopes);
+    const artifactId = input.artifactId ?? 'artifact_replace_me';
+    const publicId = input.publicId ?? 'tender-widget';
+    const stylesheetUrl = new URL('./styles.css', input.tenderAppUrl).href;
+    const blockName = input.blockName.trim().slice(0, 120) || 'Tender Prompt Widget';
+    const connectorManifest = {
+        version: 1,
+        kind: 'shopify_connector_source',
+        connectorId: input.connectorId,
+        instanceId: requireShopifySourceString(input.connector.instanceId, 'default'),
+        template: input.template,
+        shopDomain: shopDomain || null,
+        adminApiVersion,
+        clientId: input.clientId,
+        themeExtensionHandle: extensionHandle,
+        tender: {
+            artifactId,
+            publicId,
+            elementTag: tenderElement,
+            runtimeUrl: input.tenderAppUrl,
+            stylesheetUrl,
+        },
+        secrets: {
+            clientSecret: 'stored in Tender connector credentials, not in this source tree',
+            appAutomationToken: 'store in SHOPIFY_APP_AUTOMATION_TOKEN or Tender connector secret store, not in git',
+        },
+    };
+    const shopifyAppToml = `# Merchant-owned Shopify app source generated by Tender Prompt.
+# Do not commit client secrets or app automation tokens.
+
+client_id = ${tomlString(input.clientId)}
+name = ${tomlString(appName)}
+application_url = "https://shopify.dev/apps/default-app-home"
+embedded = true
+
+[access_scopes]
+scopes = ${tomlString(scopes.join(','))}
+
+[auth]
+redirect_urls = [ "https://shopify.dev/apps/default-app-home/api/auth" ]
+
+[webhooks]
+api_version = ${tomlString(adminApiVersion)}
+
+[build]
+automatically_update_urls_on_dev = true
+
+[metaobjects.app.dog_profile]
+name = "Dog profile"
+display_name_field = "dog_name"
+access.admin = "merchant_read_write"
+
+[metaobjects.app.dog_profile.fields.dog_name]
+name = "Dog name"
+type = "single_line_text_field"
+required = true
+
+[metaobjects.app.dog_profile.fields.preferences]
+name = "Preferences"
+type = "json"
+
+[customer.metafields.app.dog_profile]
+name = "Dog profile"
+type = "metaobject_reference<$app:dog_profile>"
+access.admin = "merchant_read_write"
+`;
+    const extensionToml = [
+        `name = ${tomlString(extensionHandle)}`,
+        'type = "theme"',
+        input.themeExtensionUid ? `uid = ${tomlString(input.themeExtensionUid)}` : null,
+        '',
+    ]
+        .filter((line) => line !== null)
+        .join('\n');
+    const liquid = `{% doc %}
+  Tender Prompt app block generated from connector ${input.connectorId}.
+
+  The block loads one Tender runtime script and mounts the configured Tender
+  custom element. Keep merchant-editable copy and version pins in block settings.
+{% enddoc %}
+
+{% liquid
+  assign artifact_id = block.settings.artifact_id | default: ${tomlString(artifactId)}
+  assign widget_version = block.settings.widget_version | default: 'latest'
+
+  case widget_version
+    else
+      assign runtime_src = ${tomlString(input.tenderAppUrl)}
+      assign stylesheet_src = ${tomlString(stylesheetUrl)}
+  endcase
+%}
+
+<tender-prompt-widget-block
+  {{ block.shopify_attributes }}
+  class="tender-prompt-widget-block tender-prompt-widget-block--{{ block.settings.tone }}"
+  data-tender-artifact-id="{{ artifact_id | escape }}"
+  data-tender-public-id="{{ block.settings.public_id | escape }}"
+  data-tender-version="{{ widget_version | escape }}"
+  data-tender-runtime-src="{{ runtime_src | escape }}"
+  data-stylesheet-url="{{ stylesheet_src | escape }}"
+  data-tender-element-tag="{{ block.settings.element_tag | escape }}"
+  data-tender-mode="shopify_app_block"
+  data-surface="shopify_theme_app_extension"
+  data-tender-block-id="{{ block.id | escape }}"
+  data-tender-shop-domain="{{ shop.permanent_domain | escape }}"
+  data-tender-heading="{{ block.settings.heading | escape }}"
+  data-tender-intro="{{ block.settings.intro | escape }}"
+  data-tender-tone="{{ block.settings.tone | escape }}"
+  {% if customer %}
+    data-tender-customer-id="{{ customer.id }}"
+  {% endif %}
+  {% if product %}
+    data-tender-product-id="{{ product.id }}"
+    data-tender-product-handle="{{ product.handle | escape }}"
+  {% endif %}
+>
+  <div data-tender-mount style="position: relative;">
+    <div
+      data-tender-placeholder
+      style="box-sizing: border-box; display: grid; gap: 14px; min-height: 260px; padding: 28px; border: 1px solid rgba(0,0,0,.12); border-radius: 8px; background: rgba(255,255,255,.78); color: currentColor;"
+    >
+      <div style="display: grid; gap: 8px;">
+        <p style="margin: 0; font: inherit; font-weight: 700;">{{ block.settings.heading }}</p>
+        <p style="margin: 0; max-width: 42rem; opacity: .72;">{{ block.settings.intro }}</p>
+      </div>
+      <div style="display: grid; gap: 10px;" aria-hidden="true">
+        <span style="display: block; width: 52%; height: 12px; border-radius: 999px; background: rgba(0,0,0,.10);"></span>
+        <span style="display: block; width: 100%; height: 44px; border-radius: 8px; background: rgba(0,0,0,.07);"></span>
+        <span style="display: block; width: 88%; height: 44px; border-radius: 8px; background: rgba(0,0,0,.07);"></span>
+      </div>
+    </div>
+  </div>
+</tender-prompt-widget-block>
+
+{% schema %}
+{
+  "name": ${JSON.stringify(blockName)},
+  "target": "section",
+  "javascript": "tender-widget.js",
+  "settings": [
+    {
+      "type": "text",
+      "id": "element_tag",
+      "label": "Tender custom element",
+      "default": ${JSON.stringify(tenderElement)}
+    },
+    {
+      "type": "text",
+      "id": "artifact_id",
+      "label": "Tender artifact ID",
+      "default": ${JSON.stringify(artifactId)}
+    },
+    {
+      "type": "text",
+      "id": "public_id",
+      "label": "Tender public ID",
+      "default": ${JSON.stringify(publicId)}
+    },
+    {
+      "type": "select",
+      "id": "widget_version",
+      "label": "Widget version",
+      "options": [
+        { "value": "latest", "label": "Latest published version" }
+      ],
+      "default": "latest"
+    },
+    {
+      "type": "inline_richtext",
+      "id": "heading",
+      "label": "Heading",
+      "default": "Tell us about your customer"
+    },
+    {
+      "type": "text",
+      "id": "intro",
+      "label": "Intro",
+      "default": "Answer a few quick questions and keep your profile up to date."
+    },
+    {
+      "type": "select",
+      "id": "tone",
+      "label": "Tone",
+      "options": [
+        { "value": "default", "label": "Default" },
+        { "value": "subtle", "label": "Subtle" },
+        { "value": "contrast", "label": "Contrast" }
+      ],
+      "default": "default"
+    }
+  ]
+}
+{% endschema %}
+`;
+    const readme = `# ${appName}
+
+This is the merchant-owned Shopify app source generated by Tender Prompt for
+connector \`${input.connectorId}\`.
+
+## What lives here
+
+- \`shopify.app.toml\`: Shopify app configuration, scopes, and app-owned dog-profile custom data definitions.
+- \`extensions/${extensionHandle}\`: Theme App Extension with a Tender app block.
+- \`connector.json\`: Non-secret Tender metadata that maps this source tree back to the connector.
+
+## Secrets
+
+Do not commit the Shopify client secret, Admin API token, or App Automation
+Token. Runtime credentials stay in the Tender connector secret store. Deployment
+uses \`SHOPIFY_APP_AUTOMATION_TOKEN\` at command time.
+
+## Validate
+
+\`\`\`sh
+npx --yes @shopify/cli@latest app config validate --path . --json
+\`\`\`
+
+## Deploy
+
+\`\`\`sh
+SHOPIFY_APP_AUTOMATION_TOKEN=... npx --yes @shopify/cli@latest app deploy --path . --allow-updates --version tender-widget
+\`\`\`
+`;
+    return {
+        extensionHandle,
+        manifest: connectorManifest,
+        files: new Map([
+            ['.gitignore', '.shopify/\nnode_modules/\n.env\n.env.*\n'],
+            ['README.md', readme],
+            ['connector.json', `${JSON.stringify(connectorManifest, null, 2)}\n`],
+            ['shopify.app.toml', shopifyAppToml],
+            [`extensions/${extensionHandle}/shopify.extension.toml`, extensionToml],
+            [`extensions/${extensionHandle}/blocks/tender_widget.liquid`, liquid],
+            [`extensions/${extensionHandle}/assets/tender-widget.js`, tenderWidgetAssetJs()],
+            [`extensions/${extensionHandle}/locales/en.default.json`, `${JSON.stringify({ tender: { block: { name: blockName } } }, null, 2)}\n`],
+        ]),
+    };
+}
+async function fileExists(filePath) {
+    try {
+        await readFile(filePath, 'utf8');
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function writeShopifySourceFiles(input) {
+    const written = [];
+    for (const [relativePath, content] of input.files.entries()) {
+        const absolutePath = path.join(input.dir, relativePath);
+        if (!input.force && (await fileExists(absolutePath))) {
+            throw new TenderCliUsageError(`Refusing to overwrite ${relativePath}. Pass --force to regenerate.`);
+        }
+        await mkdir(path.dirname(absolutePath), { recursive: true });
+        await writeFile(absolutePath, content, 'utf8');
+        written.push(relativePath);
+    }
+    return written;
+}
+const SHOPIFY_CONNECTOR_SOURCE_TARGET_PACK_ID = 'shopify-connector-source';
+const SHOPIFY_CONNECTOR_SOURCE_TARGET_PACK_VERSION = '1';
+function readConnectorSourceArtifactId(connector) {
+    const sourceProject = isCliJsonRecord(connector.sourceProject) ? connector.sourceProject : null;
+    const sourceArtifactId = typeof sourceProject?.sourceArtifactId === 'string' ? sourceProject.sourceArtifactId.trim() : '';
+    return sourceArtifactId || null;
+}
+function defaultShopifySourceName(connector) {
+    const appName = typeof connector.appName === 'string' && connector.appName.trim() ? connector.appName.trim() : 'Tender Prompt Apps';
+    return `${appName} Shopify Source`.slice(0, 120);
+}
+async function requestConnector(command, runtime) {
+    const credentials = await resolveConnectorsCredentials(command, runtime);
+    const payload = await requestConnectorsApi({
+        connectorsPath: encodeURIComponent(command.connectorId),
+        method: 'GET',
+        baseUrl: credentials.baseUrl,
+        token: credentials.token,
+        fetcher: runtime.fetcher ?? fetch,
+    });
+    const connector = isCliJsonRecord(payload.connector) ? payload.connector : {};
+    return { credentials, payload, connector };
+}
+async function createShopifySourceArtifact(input) {
+    const response = await input.fetcher(`${input.credentials.baseUrl}/api/v1/artifacts`, {
+        method: 'POST',
+        headers: {
+            authorization: `Bearer ${input.credentials.token}`,
+            'content-type': 'application/json',
+        },
+        body: JSON.stringify({
+            name: input.name,
+            targetPackId: SHOPIFY_CONNECTOR_SOURCE_TARGET_PACK_ID,
+            targetPackVersion: SHOPIFY_CONNECTOR_SOURCE_TARGET_PACK_VERSION,
+        }),
+    });
+    const payload = await parseJsonResponse(response);
+    if (!response.ok || !payload?.ok || !payload.artifact?.artifactId) {
+        throw new Error(payload?.message ?? payload?.reasonCode ?? `Connector source artifact create failed with HTTP ${response.status}.`);
+    }
+    return payload.artifact;
+}
+async function patchConnectorSourceProject(input) {
+    const sourceProject = {
+        version: 1,
+        kind: 'shopify_app_source',
+        sourceArtifactId: input.sourceArtifactId,
+        template: input.template,
+        updatedAt: input.updatedAt,
+    };
+    const payload = await requestConnectorsApi({
+        connectorsPath: encodeURIComponent(input.connectorId),
+        method: 'PATCH',
+        baseUrl: input.credentials.baseUrl,
+        token: input.credentials.token,
+        fetcher: input.fetcher,
+        body: { sourceProject },
+    });
+    return { payload, sourceProject };
+}
+async function ensureConnectorSourceArtifact(input) {
+    const existingSourceArtifactId = readConnectorSourceArtifactId(input.connector);
+    if (existingSourceArtifactId) {
+        return {
+            sourceArtifactId: existingSourceArtifactId,
+            artifact: null,
+            created: false,
+        };
+    }
+    const artifact = await createShopifySourceArtifact({
+        name: input.command.sourceName?.trim() || defaultShopifySourceName(input.connector),
+        credentials: input.credentials,
+        fetcher: input.fetcher,
+    });
+    return {
+        sourceArtifactId: artifact.artifactId,
+        artifact,
+        created: true,
+    };
+}
+async function setupSourceArtifactCheckout(input) {
+    const root = path.resolve(input.dir);
+    const git = await requestGitRemoteLease({
+        artifactId: input.artifactId,
+        ttl: '7d',
+        baseUrl: input.credentials.baseUrl,
+        token: input.credentials.token,
+        fetcher: input.fetcher,
+    });
+    const helper = createCredentialHelperCommand({
+        artifactId: input.artifactId,
+        baseUrl: input.credentials.baseUrl,
+        profileName: input.credentials.profileName,
+        ttl: '7d',
+        remoteUrl: git.remoteUrl,
+    });
+    await mkdir(root, { recursive: true });
+    const gitState = await runGitCommand({
+        runtime: input.runtime,
+        cwd: root,
+        args: ['rev-parse', '--is-inside-work-tree'],
+        allowFailure: true,
+    });
+    if (gitState.exitCode !== 0) {
+        await runGitCommand({
+            runtime: input.runtime,
+            cwd: root,
+            args: ['init', '-b', git.defaultBranch],
+        });
+    }
+    await applyGitSetup({
+        runtime: input.runtime,
+        root,
+        remoteName: input.remoteName,
+        remoteUrl: git.remoteUrl,
+        credentialHelper: helper,
+    });
+    const sourceCheckout = await maybeCheckoutInitialArtifactSource({
+        runtime: input.runtime,
+        root,
+        remoteName: input.remoteName,
+        defaultBranch: git.defaultBranch,
+    });
+    return {
+        root,
+        git,
+        sourceCheckout,
+        remoteName: input.remoteName,
+        credentialHelper: helper,
+    };
+}
+async function commitAndPushSourceFiles(input) {
+    const paths = [...new Set(input.paths)].sort();
+    if (paths.length === 0) {
+        return {
+            attempted: false,
+            committed: false,
+            pushed: false,
+            skippedReason: 'no_files',
+            commitSha: null,
+        };
+    }
+    const status = await runGitCommand({
+        runtime: input.runtime,
+        cwd: input.dir,
+        args: ['status', '--porcelain', '--', ...paths],
+    });
+    if (!status.stdout.trim()) {
+        if (input.pushCleanHead) {
+            const commitShaResult = await runGitCommand({
+                runtime: input.runtime,
+                cwd: input.dir,
+                args: ['rev-parse', 'HEAD'],
+            });
+            await runGitCommand({
+                runtime: input.runtime,
+                cwd: input.dir,
+                args: ['push', input.remoteName, input.defaultBranch],
+            });
+            return {
+                attempted: true,
+                committed: false,
+                pushed: true,
+                skippedReason: 'clean_head_pushed',
+                commitSha: commitShaResult.stdout.trim() || null,
+            };
+        }
+        return {
+            attempted: true,
+            committed: false,
+            pushed: false,
+            skippedReason: 'no_changes',
+            commitSha: null,
+        };
+    }
+    await runGitCommand({
+        runtime: input.runtime,
+        cwd: input.dir,
+        args: ['add', '--', ...paths],
+    });
+    await runGitCommand({
+        runtime: input.runtime,
+        cwd: input.dir,
+        args: ['commit', '-m', 'Update Shopify connector source'],
+    });
+    const commitShaResult = await runGitCommand({
+        runtime: input.runtime,
+        cwd: input.dir,
+        args: ['rev-parse', 'HEAD'],
+    });
+    await runGitCommand({
+        runtime: input.runtime,
+        cwd: input.dir,
+        args: ['push', input.remoteName, input.defaultBranch],
+    });
+    return {
+        attempted: true,
+        committed: true,
+        pushed: true,
+        skippedReason: null,
+        commitSha: commitShaResult.stdout.trim() || null,
+    };
+}
+function shopifyValidateArgs(input) {
+    return [
+        '--yes',
+        '@shopify/cli@latest',
+        'app',
+        'config',
+        'validate',
+        '--path',
+        input.dir,
+        '--json',
+        ...(input.clientId ? ['--client-id', input.clientId] : []),
+    ];
+}
+function shopifyDeployArgs(input) {
+    return [
+        '--yes',
+        '@shopify/cli@latest',
+        'app',
+        'deploy',
+        '--path',
+        input.dir,
+        input.allowDeletes ? '--allow-deletes' : '--allow-updates',
+        ...(input.clientId ? ['--client-id', input.clientId] : []),
+        ...(input.version ? ['--version', input.version] : []),
+        ...(input.message ? ['--message', input.message] : []),
+        ...(input.sourceControlUrl ? ['--source-control-url', input.sourceControlUrl] : []),
+    ];
+}
+function commandLine(command, args) {
+    return [command, ...args.map(shellQuote)].join(' ');
+}
+async function runNpxCommand(input) {
+    const runner = input.runtime.commandRunner ?? defaultCommandRunner;
+    const result = await runner('npx', input.args, { cwd: input.cwd });
+    if (result.exitCode !== 0) {
+        throw new Error([`npx ${input.args.join(' ')} failed with exit code ${result.exitCode}.`, result.stderr.trim() || result.stdout.trim()].filter(Boolean).join('\n'));
+    }
+    return result;
+}
+async function runConnectorsShopifySourceInit(command, io, runtime) {
+    const fetcher = runtime.fetcher ?? fetch;
+    const { credentials, payload, connector } = await requestConnector(command, runtime);
+    const sourceArtifact = await ensureConnectorSourceArtifact({
+        command,
+        connector,
+        credentials,
+        fetcher,
+    });
+    const checkout = await setupSourceArtifactCheckout({
+        artifactId: sourceArtifact.sourceArtifactId,
+        dir: command.dir,
+        remoteName: 'tender',
+        credentials,
+        runtime,
+        fetcher,
+    });
+    const dir = path.resolve(command.dir);
+    const source = buildShopifySourceFiles({
+        connectorId: command.connectorId,
+        connector,
+        clientId: command.clientId,
+        template: command.template,
+        tenderAppUrl: command.tenderAppUrl,
+        tenderElement: command.tenderElement,
+        artifactId: command.artifactId,
+        publicId: command.publicId,
+        themeExtensionHandle: command.themeExtensionHandle,
+        themeExtensionUid: command.themeExtensionUid,
+        blockName: command.blockName,
+        scopes: command.scopes,
+    });
+    const files = await writeShopifySourceFiles({ dir, files: source.files, force: command.force });
+    const gitCommit = await commitAndPushSourceFiles({
+        dir,
+        paths: files,
+        remoteName: checkout.remoteName,
+        defaultBranch: checkout.git.defaultBranch,
+        pushCleanHead: sourceArtifact.created || command.force,
+        runtime,
+    });
+    const patched = await patchConnectorSourceProject({
+        connectorId: command.connectorId,
+        sourceArtifactId: sourceArtifact.sourceArtifactId,
+        template: command.template,
+        credentials,
+        fetcher,
+        updatedAt: runtime.now ? runtime.now() : Date.now(),
+    });
     const result = {
         ok: true,
         command: command.command,
-        ref: ARTIFACT_MEMORY_NOTES_REF,
-        entries: briefEntries,
+        connectorId: command.connectorId,
+        sourceArtifactId: sourceArtifact.sourceArtifactId,
+        sourceArtifactCreated: sourceArtifact.created,
+        sourceArtifact: sourceArtifact.artifact,
+        dir,
+        files,
+        sourceProject: patched.sourceProject,
+        connector: patched.payload.connector ?? payload.connector ?? null,
+        git: {
+            remoteName: checkout.remoteName,
+            remoteUrl: checkout.git.remoteUrl,
+            defaultBranch: checkout.git.defaultBranch,
+            sourceCheckout: checkout.sourceCheckout,
+            commit: gitCommit,
+        },
+        validateCommand: commandLine('npx', shopifyValidateArgs({ dir, clientId: command.clientId })),
+        deployCommand: commandLine('npx', shopifyDeployArgs({ dir, clientId: command.clientId, version: 'tender-widget', message: null, sourceControlUrl: null, allowDeletes: false })),
     };
-    if (command.json) {
-        io.stdout(JSON.stringify(result, null, 2));
-    }
-    else {
-        io.stdout(briefEntries.length > 0 ? briefEntries.map(formatArtifactMemoryEntry).join('\n') : 'No artifact memory brief is available yet.');
-    }
+    printConnectorsPayload(command, io, result, [
+        `connector_id: ${command.connectorId}`,
+        `source_artifact_id: ${sourceArtifact.sourceArtifactId}`,
+        `source_dir: ${dir}`,
+        `files: ${files.length}`,
+        `git_pushed: ${gitCommit.pushed ? 'true' : 'false'}`,
+        `next_validate: ${result.validateCommand}`,
+    ]);
     return 0;
 }
-async function runMemoryFlush(command, io, runtime) {
-    const sync = await pushArtifactMemoryNotes({
-        repoPath: path.resolve(command.dir),
+async function runConnectorsShopifySourceCheckout(command, io, runtime) {
+    const fetcher = runtime.fetcher ?? fetch;
+    const { credentials, connector } = await requestConnector(command, runtime);
+    const sourceArtifactId = readConnectorSourceArtifactId(connector);
+    if (!sourceArtifactId) {
+        throw new TenderCliUsageError('Connector does not have a source artifact yet. Run tender connectors shopify source init <connector-id> --dir ./shopify-app first.');
+    }
+    const checkout = await setupSourceArtifactCheckout({
+        artifactId: sourceArtifactId,
+        dir: command.dir,
         remoteName: command.remoteName,
-        runner: commandRunnerForMemory(runtime),
+        credentials,
+        runtime,
+        fetcher,
     });
-    const next = sync.status === 'failed'
-        ? `tender memory flush --dir ${command.dir} --remote ${command.remoteName}`
-        : sync.status === 'not_configured'
-            ? memoryRecoveryForArtifact(command.artifactId, command.dir)
-            : null;
     const result = {
-        ok: sync.status === 'pushed',
+        ok: true,
         command: command.command,
-        memorySync: sync,
-        next,
+        connectorId: command.connectorId,
+        sourceArtifactId,
+        dir: checkout.root,
+        remoteName: checkout.remoteName,
+        remoteUrl: checkout.git.remoteUrl,
+        defaultBranch: checkout.git.defaultBranch,
+        sourceCheckout: checkout.sourceCheckout,
     };
-    if (command.json) {
-        io.stdout(JSON.stringify(result, null, 2));
-    }
-    else {
-        io.stdout([
-            `memory_sync: ${sync.status}`,
-            sync.error ? `error: ${sync.error}` : null,
-            result.next ? `next: ${result.next}` : null,
-        ]
-            .filter((line) => Boolean(line))
-            .join('\n'));
-    }
-    return sync.status === 'pushed' ? 0 : 1;
-}
-async function runMemoryExport(command, io, runtime) {
-    const entries = await readArtifactMemoryEntries({
-        repoPath: path.resolve(command.dir),
-        commitSha: command.commitSha,
-        runner: commandRunnerForMemory(runtime),
-    });
-    if (command.format === 'jsonl') {
-        io.stdout(entries.map((entry) => JSON.stringify(entry)).join('\n'));
-        return 0;
-    }
-    throw new TenderCliUsageError(`Unsupported memory export format: ${command.format}.\nNext: tender memory export --format jsonl --dir ${command.dir}`);
-}
-async function readLocalChangedFiles(input) {
-    const result = await runGitCommand({
-        runtime: input.runtime,
-        cwd: input.repoPath,
-        args: ['status', '--porcelain'],
-        allowFailure: true,
-    });
-    if (result.exitCode !== 0) {
-        return [];
-    }
-    return result.stdout
-        .split(/\r?\n/)
-        .map((line) => line.slice(3).trim())
-        .filter(Boolean)
-        .slice(0, 50);
-}
-async function appendAutomaticMemory(input) {
-    try {
-        return await appendArtifactMemoryNote({
-            repoPath: input.repoPath,
-            artifactId: input.artifactId,
-            kind: input.kind,
-            summary: input.summary,
-            body: input.body,
-            tags: input.tags,
-            severity: input.severity,
-            status: input.status,
-            related: input.related,
-            source: {
-                actor: 'cli',
-                command: input.summary,
-            },
-            runner: commandRunnerForMemory(input.runtime),
-            now: input.runtime.now,
-        });
-    }
-    catch (error) {
-        return {
-            error: error instanceof Error ? error.message : String(error),
-            next: `tender memory add --dir ${input.repoPath} --artifact ${input.artifactId} --kind ${input.kind} --summary ${JSON.stringify(input.summary)}`,
-        };
-    }
-}
-async function flushAutomaticMemory(input) {
-    return pushArtifactMemoryNotes({
-        repoPath: input.repoPath,
-        remoteName: input.remoteName,
-        runner: commandRunnerForMemory(input.runtime),
-    });
-}
-async function resolveAnalyticsCredentials(command, runtime) {
-    return await resolveApiCredentials({
-        baseUrl: command.baseUrl,
-        flagToken: command.flagToken,
-        profileName: command.profileName,
-        env: runtime.env ?? process.env,
-    });
+    printConnectorsPayload(command, io, result, [
+        `connector_id: ${command.connectorId}`,
+        `source_artifact_id: ${sourceArtifactId}`,
+        `source_dir: ${checkout.root}`,
+        `remote: ${checkout.remoteName}`,
+    ]);
+    return 0;
 }
-async function resolvePlaybooksCredentials(command, runtime) {
-    try {
-        return await resolveApiCredentials({
-            baseUrl: command.baseUrl,
-            flagToken: command.flagToken,
-            profileName: command.profileName,
-            env: runtime.env ?? process.env,
-        });
+async function runConnectorsShopifySourceValidate(command, io, runtime) {
+    const { connector } = await requestConnector(command, runtime);
+    const sourceArtifactId = readConnectorSourceArtifactId(connector);
+    if (!sourceArtifactId) {
+        throw new TenderCliUsageError('Connector does not have a source artifact yet. Run tender connectors shopify source init <connector-id> --dir ./shopify-app first.');
     }
-    catch (error) {
-        if (error instanceof TenderCliUsageError) {
-            throw new TenderCliUsageError([
-                'Playbooks require Tender authentication.',
-                'Run `tender auth login --device --profile edit-preview --save-profile agent --ttl 7d --json`, set TENDER_API_TOKEN, or pass --token <token>.',
-            ].join('\n'));
+    const dir = path.resolve(command.dir);
+    const args = shopifyValidateArgs({ dir, clientId: command.clientId });
+    const required = ['shopify.app.toml', 'connector.json'];
+    for (const file of required) {
+        if (!(await fileExists(path.join(dir, file)))) {
+            throw new TenderCliUsageError(`Missing ${file}. Run tender connectors shopify source init first.`);
         }
-        throw error;
-    }
-}
-async function resolveDbCredentials(command, runtime) {
-    return await resolveApiCredentials({
-        baseUrl: command.baseUrl,
-        flagToken: command.flagToken,
-        profileName: command.profileName,
-        env: runtime.env ?? process.env,
-    });
-}
-function validateDbSql(sql) {
-    if (!sql.trim()) {
-        throw new TenderCliUsageError('SQL statement is required.');
-    }
-    const byteLength = new TextEncoder().encode(sql).byteLength;
-    if (byteLength > DB_SQL_STATEMENT_MAX_BYTES) {
-        throw new TenderCliUsageError(`SQL statement is limited to ${DB_SQL_STATEMENT_MAX_BYTES} bytes.`);
-    }
-}
-async function readDbSql(command, runtime) {
-    const sql = command.sqlSource.kind === 'inline'
-        ? command.sqlSource.value
-        : command.sqlSource.value === '-'
-            ? runtime.stdin
-            : await readFile(path.resolve(command.sqlSource.value), 'utf8');
-    if (!sql) {
-        throw new TenderCliUsageError('--file - requires SQL on stdin.');
-    }
-    validateDbSql(sql);
-    return sql;
-}
-function printDbPayload(command, io, payload, fallbackLines) {
-    if (command.json) {
-        io.stdout(JSON.stringify(payload, null, 2));
     }
-    else {
-        io.stdout(fallbackLines.join('\n'));
+    if (!command.execute) {
+        printConnectorsPayload(command, io, { ok: true, dryRun: true, command: command.command, connectorId: command.connectorId, sourceArtifactId, dir, shopifyCommand: commandLine('npx', args) }, [`connector_id: ${command.connectorId}`, `source_artifact_id: ${sourceArtifactId}`, `source_dir: ${dir}`, `shopify_command: ${commandLine('npx', args)}`]);
+        return 0;
     }
+    const result = await runNpxCommand({ args, cwd: dir, runtime });
+    printConnectorsPayload(command, io, { ok: true, command: command.command, connectorId: command.connectorId, sourceArtifactId, dir, exitCode: result.exitCode, stdout: result.stdout, stderr: result.stderr }, [`connector_id: ${command.connectorId}`, `source_artifact_id: ${sourceArtifactId}`, `source_dir: ${dir}`, 'validation: passed']);
+    return 0;
 }
-function printPlaybooksPayload(command, io, payload, fallback) {
-    if (command.json) {
-        io.stdout(JSON.stringify(payload, null, 2));
+async function runConnectorsShopifySourceDeploy(command, io, runtime) {
+    const { connector } = await requestConnector(command, runtime);
+    const sourceArtifactId = readConnectorSourceArtifactId(connector);
+    if (!sourceArtifactId) {
+        throw new TenderCliUsageError('Connector does not have a source artifact yet. Run tender connectors shopify source init <connector-id> --dir ./shopify-app first.');
     }
-    else {
-        io.stdout(fallback);
+    const dir = path.resolve(command.dir);
+    const args = shopifyDeployArgs({
+        dir,
+        clientId: command.clientId,
+        version: command.version,
+        message: command.message,
+        sourceControlUrl: command.sourceControlUrl,
+        allowDeletes: command.allowDeletes,
+    });
+    if (command.confirm !== 'deploy') {
+        printConnectorsPayload(command, io, { ok: true, dryRun: true, command: command.command, connectorId: command.connectorId, sourceArtifactId, dir, shopifyCommand: commandLine('npx', args), confirmRequired: 'deploy' }, [`connector_id: ${command.connectorId}`, `source_artifact_id: ${sourceArtifactId}`, `source_dir: ${dir}`, `shopify_command: ${commandLine('npx', args)}`, 'confirm_required: --confirm deploy']);
+        return 0;
     }
-}
-async function runPlaybooksList(command, io, runtime) {
-    const credentials = await resolvePlaybooksCredentials(command, runtime);
-    const payload = await requestPlaybooksApi({
-        playbooksPath: 'list',
-        baseUrl: credentials.baseUrl,
-        token: credentials.token,
-        fetcher: runtime.fetcher ?? fetch,
-    });
-    const playbooks = Array.isArray(payload.playbooks) ? payload.playbooks : [];
-    printPlaybooksPayload(command, io, payload, playbooks
-        .map((playbook) => (isCliJsonRecord(playbook) ? `${String(playbook.id ?? '')}\t${String(playbook.description ?? '')}` : ''))
-        .filter(Boolean)
-        .join('\n') || 'No Tender Prompt playbooks found.');
+    const result = await runNpxCommand({ args, cwd: dir, runtime });
+    printConnectorsPayload(command, io, { ok: true, command: command.command, connectorId: command.connectorId, sourceArtifactId, dir, exitCode: result.exitCode, stdout: result.stdout, stderr: result.stderr }, [`connector_id: ${command.connectorId}`, `source_artifact_id: ${sourceArtifactId}`, `source_dir: ${dir}`, 'deploy: completed']);
     return 0;
 }
-async function runPlaybooksGet(command, io, runtime) {
-    const credentials = await resolvePlaybooksCredentials(command, runtime);
-    const payload = await requestPlaybooksApi({
-        playbooksPath: 'get',
-        playbookId: command.playbookId,
+async function runConnectorsShopifyDelete(command, io, runtime) {
+    if (command.confirm !== 'delete') {
+        throw new TenderCliUsageError('--confirm delete is required. Example: tender connectors shopify delete conn_123 --confirm delete --json');
+    }
+    const credentials = await resolveConnectorsCredentials(command, runtime);
+    const payload = await requestConnectorsApi({
+        connectorsPath: encodeURIComponent(command.connectorId),
+        method: 'DELETE',
         baseUrl: credentials.baseUrl,
         token: credentials.token,
         fetcher: runtime.fetcher ?? fetch,
     });
-    printPlaybooksPayload(command, io, payload, typeof payload.body === 'string' ? payload.body : JSON.stringify(payload, null, 2));
+    printConnectorsPayload(command, io, { ...payload, connectorId: command.connectorId }, [`connector_id: ${command.connectorId}`, 'status: deleted']);
     return 0;
 }
-async function runPlaybooksFile(command, io, runtime) {
-    const credentials = await resolvePlaybooksCredentials(command, runtime);
-    const payload = await requestPlaybooksApi({
-        playbooksPath: 'file',
-        playbookId: command.playbookId,
-        filePath: command.filePath,
-        baseUrl: credentials.baseUrl,
-        token: credentials.token,
-        fetcher: runtime.fetcher ?? fetch,
-    });
-    printPlaybooksPayload(command, io, payload, typeof payload.content === 'string' ? payload.content : JSON.stringify(payload, null, 2));
+function runConnectorsBind(command, io) {
+    const binding = {
+        id: `shopify-${command.instanceId}`,
+        label: command.label ?? (command.instanceId === 'default' ? 'Shopify connector' : `Shopify connector (${command.instanceId})`),
+        name: command.bindingName,
+        source: `platform:shopify_connector/${command.instanceId}`,
+        interface: 'ShopifyConnector',
+        metadata: {
+            connectorId: command.connectorId,
+        },
+    };
+    const payload = {
+        ok: true,
+        command: command.command,
+        connectorId: command.connectorId,
+        instanceId: command.instanceId,
+        binding,
+        appJsonPatch: {
+            bindingsAppend: binding,
+        },
+    };
+    if (command.json) {
+        io.stdout(JSON.stringify(payload, null, 2));
+    }
+    else {
+        io.stdout(JSON.stringify(binding, null, 2));
+    }
     return 0;
 }
 async function runDbCapabilities(command, io, runtime) {
@@ -11032,6 +12988,51 @@ export async function runTenderCli(args, io = {
             else if (command.topic === 'playbooks file') {
                 io.stdout(playbooksFileHelp());
             }
+            else if (command.topic === 'connectors') {
+                io.stdout(connectorsHelp());
+            }
+            else if (command.topic === 'connectors list') {
+                io.stdout(connectorsHelp());
+            }
+            else if (command.topic === 'connectors shopify') {
+                io.stdout(connectorsHelp());
+            }
+            else if (command.topic === 'connectors shopify create') {
+                io.stdout(connectorsShopifyCreateHelp());
+            }
+            else if (command.topic === 'connectors shopify setup-url') {
+                io.stdout(connectorsShopifySetupUrlHelp());
+            }
+            else if (command.topic === 'connectors shopify credentials set') {
+                io.stdout(connectorsShopifyCredentialsSetHelp());
+            }
+            else if (command.topic === 'connectors shopify app-automation-token set') {
+                io.stdout(connectorsShopifyAppAutomationTokenSetHelp());
+            }
+            else if (command.topic === 'connectors shopify app-automation-token delete') {
+                io.stdout(connectorsShopifyAppAutomationTokenDeleteHelp());
+            }
+            else if (command.topic === 'connectors shopify verify') {
+                io.stdout(connectorsShopifyVerifyHelp());
+            }
+            else if (command.topic === 'connectors shopify source init') {
+                io.stdout(connectorsShopifySourceInitHelp());
+            }
+            else if (command.topic === 'connectors shopify source checkout') {
+                io.stdout(connectorsShopifySourceCheckoutHelp());
+            }
+            else if (command.topic === 'connectors shopify source validate') {
+                io.stdout(connectorsShopifySourceValidateHelp());
+            }
+            else if (command.topic === 'connectors shopify source deploy') {
+                io.stdout(connectorsShopifySourceDeployHelp());
+            }
+            else if (command.topic === 'connectors shopify delete') {
+                io.stdout(connectorsShopifyDeleteHelp());
+            }
+            else if (command.topic === 'connectors bind') {
+                io.stdout(connectorsBindHelp());
+            }
             else if (command.topic === 'auth') {
                 io.stdout(authHelp());
             }
@@ -11259,6 +13260,45 @@ export async function runTenderCli(args, io = {
         if (command.command === 'playbooks file') {
             return await runPlaybooksFile(command, io, runtime);
         }
+        if (command.command === 'connectors list') {
+            return await runConnectorsList(command, io, runtime);
+        }
+        if (command.command === 'connectors shopify create') {
+            return await runConnectorsShopifyCreate(command, io, runtime);
+        }
+        if (command.command === 'connectors shopify setup-url') {
+            return await runConnectorsShopifySetupUrl(command, io, runtime);
+        }
+        if (command.command === 'connectors shopify credentials set') {
+            return await runConnectorsShopifyCredentialsSet(command, io, runtime);
+        }
+        if (command.command === 'connectors shopify app-automation-token set') {
+            return await runConnectorsShopifyAppAutomationTokenSet(command, io, runtime);
+        }
+        if (command.command === 'connectors shopify app-automation-token delete') {
+            return await runConnectorsShopifyAppAutomationTokenDelete(command, io, runtime);
+        }
+        if (command.command === 'connectors shopify verify') {
+            return await runConnectorsShopifyVerify(command, io, runtime);
+        }
+        if (command.command === 'connectors shopify source init') {
+            return await runConnectorsShopifySourceInit(command, io, runtime);
+        }
+        if (command.command === 'connectors shopify source checkout') {
+            return await runConnectorsShopifySourceCheckout(command, io, runtime);
+        }
+        if (command.command === 'connectors shopify source validate') {
+            return await runConnectorsShopifySourceValidate(command, io, runtime);
+        }
+        if (command.command === 'connectors shopify source deploy') {
+            return await runConnectorsShopifySourceDeploy(command, io, runtime);
+        }
+        if (command.command === 'connectors shopify delete') {
+            return await runConnectorsShopifyDelete(command, io, runtime);
+        }
+        if (command.command === 'connectors bind') {
+            return runConnectorsBind(command, io);
+        }
         if (command.command === 'app list') {
             return await runArtifactsList(command, io, runtime);
         }
@@ -11425,7 +13465,7 @@ export async function runTenderCli(args, io = {
     }
     catch (error) {
         if (args.includes('--json') &&
-            ((args[0] === 'app' && (args[1] === 'db' || (args[1] === 'agent' && args[2] === 'heartbeat'))) || args[0] === 'playbooks')) {
+            ((args[0] === 'app' && (args[1] === 'db' || (args[1] === 'agent' && args[2] === 'heartbeat'))) || args[0] === 'playbooks' || args[0] === 'connectors')) {
             io.stdout(JSON.stringify(cliErrorPayload(error, args, command), null, 2));
             return error instanceof TenderCliUsageError ? 2 : 1;
         }
@@ -11439,13 +13479,23 @@ function hasFlagValue(args, flag, value) {
     return args.some((arg, index) => (arg === flag && args[index + 1] === value) || arg === `${flag}=${value}`);
 }
 export function shouldReadEntrypointStdin(args) {
-    return (args[0] === 'app' &&
-        ((args[1] === 'git' && args[2] === 'credential') ||
-            (args[1] === 'analytics' && hasFlagValue(args, '--spec', '-')) ||
-            (args[1] === 'agent' && args[2] === 'heartbeat' && hasFlagValue(args, '--input', '-')) ||
-            (args[1] === 'db' && (args[2] === 'resources' || args[2] === 'widgets') && hasFlagValue(args, '--spec', '-')) ||
-            (args[1] === 'db' && args[2] === 'resources' && hasFlagValue(args, '--view', '-')) ||
-            (args[1] === 'db' && args[2] === 'query' && hasFlagValue(args, '--file', '-'))));
+    return ((args[0] === 'connectors' &&
+        args[1] === 'shopify' &&
+        args[2] === 'credentials' &&
+        args[3] === 'set' &&
+        args.includes('--client-secret-stdin')) ||
+        (args[0] === 'connectors' &&
+            args[1] === 'shopify' &&
+            args[2] === 'app-automation-token' &&
+            args[3] === 'set' &&
+            args.includes('--token-stdin')) ||
+        (args[0] === 'app' &&
+            ((args[1] === 'git' && args[2] === 'credential') ||
+                (args[1] === 'analytics' && hasFlagValue(args, '--spec', '-')) ||
+                (args[1] === 'agent' && args[2] === 'heartbeat' && hasFlagValue(args, '--input', '-')) ||
+                (args[1] === 'db' && (args[2] === 'resources' || args[2] === 'widgets') && hasFlagValue(args, '--spec', '-')) ||
+                (args[1] === 'db' && args[2] === 'resources' && hasFlagValue(args, '--view', '-')) ||
+                (args[1] === 'db' && args[2] === 'query' && hasFlagValue(args, '--file', '-')))));
 }
 async function readEntrypointStdin() {
     if (process.stdin.isTTY) {