@tenderprompt/cli 0.1.27 → 0.1.29

package/dist/index.d.ts

@@ -9,9 +9,11 @@ type TenderCliRuntime = {
     sleeper?: (milliseconds: number) => Promise<void>;
     now?: () => number;
     stdin?: string;
-    commandRunner?: (command: string, args: string[], options: {
-        cwd: string;
-    }) => Promise<TenderCommandResult>;
+    commandRunner?: (command: string, args: string[], options: TenderCommandOptions) => Promise<TenderCommandResult>;
+};
+type TenderCommandOptions = {
+    cwd: string;
+    env?: NodeJS.ProcessEnv | Record<string, string | undefined>;
 };
 type TenderCommandResult = {
     exitCode: number;

package/dist/index.js

@@ -95,6 +95,14 @@ class TenderCliUsageError extends Error {
         this.name = 'TenderCliUsageError';
     }
 }
+class TenderCliGuidedUsageError extends TenderCliUsageError {
+    nextAction;
+    constructor(message, nextAction) {
+        super(message);
+        this.name = 'TenderCliGuidedUsageError';
+        this.nextAction = nextAction;
+    }
+}
 class TenderCliAnalyticsApiError extends Error {
     reasonCode;
     scope;
@@ -121,6 +129,18 @@ class TenderCliDbApiError extends Error {
         this.nextAction = nextAction;
     }
 }
+class TenderCliConnectorsApiError extends Error {
+    reasonCode;
+    status;
+    payload;
+    constructor(message, reasonCode, status, payload = null) {
+        super(message);
+        this.name = 'TenderCliConnectorsApiError';
+        this.reasonCode = reasonCode;
+        this.status = status;
+        this.payload = payload;
+    }
+}
 const DEFAULT_PROFILE_NAME = 'default';
 const DEFAULT_BASE_URL = 'https://app.tenderprompt.com';
 const ARTIFACT_SOURCE_EXPORT_MAX_FILES = 1000;
@@ -433,9 +453,9 @@ Examples:
   printf "$SHOPIFY_CLIENT_SECRET" | tender connectors shopify credentials set conn_123 --shop demo.myshopify.com --client-id abc --client-secret-stdin --profile account --json
   printf "$SHOPIFY_APP_AUTOMATION_TOKEN" | tender connectors shopify app-automation-token set conn_123 --token-stdin --expires-at 2026-08-22 --profile account --json
   tender connectors shopify verify conn_123 --profile account --json
-  tender connectors shopify source init conn_123 --dir ./shopify-app --client-id abc --tender-app-url https://example.tenderprompt.app/client.js --tender-element tender-widget --profile account --json
-  tender connectors shopify source validate --dir ./shopify-app --execute --json
-  SHOPIFY_APP_AUTOMATION_TOKEN=shpat_... tender connectors shopify source deploy --dir ./shopify-app --confirm deploy --json
+  tender connectors shopify source init conn_123 --dir ./shopify-app --client-id abc --profile account --json
+  tender connectors shopify source validate conn_123 --dir ./shopify-app --execute --json
+  tender connectors shopify source deploy conn_123 --dir ./shopify-app --confirm deploy --profile account --json
   tender connectors bind SHOPIFY_CONNECTOR conn_123 --instance default --json`;
 }
 function connectorsShopifyCreateHelp() {
@@ -493,16 +513,19 @@ Examples:
   tender connectors shopify verify conn_123 --profile account --json`;
 }
 function connectorsShopifySourceInitHelp() {
-    return `Usage: tender connectors shopify source init <connector-id> --dir <path> --client-id <shopify-client-id> --tender-app-url <client.js-url> --tender-element <custom-element> [--source-name <name>] [--artifact-id <id>] [--public-id <id>] [--theme-extension-handle <handle>] [--theme-extension-uid <uid>] [--block-name <name>] [--scopes <csv>] [--force] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
+    return `Usage: tender connectors shopify source init <connector-id> --dir <path> --client-id <shopify-client-id> [--source-name <name>] [--scopes <csv>] [--force] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
 
 Creates or reuses an internal Tender source artifact for the merchant-owned
-Shopify app, checks it out to --dir, writes non-secret Shopify app source,
-commits it, pushes it to Artifact Git, and records sourceArtifactId on the
-connector. The generated source includes shopify.app.toml, dog-profile app-owned
-custom data definitions, and a Theme App Extension app-block template.
+Shopify app, checks it out to --dir, writes a minimal non-secret Shopify app
+source tree, commits it, pushes it to Artifact Git, and records
+sourceArtifactId on the connector.
+
+The CLI bootstraps and deploys source. App blocks, web pixels, customer
+metadata definitions, and app-owned GraphQL resources are source edits guided by
+playbooks, not source init flags.
 
 Examples:
-  tender connectors shopify source init conn_123 --dir ./shopify-app --client-id abc --tender-app-url https://example.tenderprompt.app/client.js --tender-element tender-widget --profile account --json`;
+  tender connectors shopify source init conn_123 --dir ./shopify-app --client-id abc --profile account --json`;
 }
 function connectorsShopifySourceCheckoutHelp() {
     return `Usage: tender connectors shopify source checkout <connector-id> --dir <path> [--remote <name>] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
@@ -526,11 +549,13 @@ function connectorsShopifySourceDeployHelp() {
     return `Usage: tender connectors shopify source deploy <connector-id> [--dir <path>] [--client-id <shopify-client-id>] [--version <tag>] [--message <text>] [--source-control-url <url>] [--allow-deletes] [--confirm deploy] [--base-url <url>] [--token <token>] [--profile <name>] [--json]
 
 Without --confirm deploy, prints the exact Shopify CLI deployment command. With
---confirm deploy, runs npx --yes @shopify/cli@latest app deploy. Set
-SHOPIFY_APP_AUTOMATION_TOKEN in the environment for non-interactive deploys.
+--confirm deploy, runs npx --yes @shopify/cli@latest app deploy. If
+SHOPIFY_APP_AUTOMATION_TOKEN is not set locally, the CLI requests the
+connector's stored App Automation Token and injects it only into the spawned
+Shopify CLI child process.
 
 Examples:
-  SHOPIFY_APP_AUTOMATION_TOKEN=shpat_... tender connectors shopify source deploy conn_123 --dir ./shopify-app --version dog-profile-smoke --confirm deploy --json`;
+  tender connectors shopify source deploy conn_123 --dir ./shopify-app --version connector-source-smoke --confirm deploy --profile account --json`;
 }
 function connectorsShopifyDeleteHelp() {
     return `Usage: tender connectors shopify delete <connector-id> --confirm delete [--base-url <url>] [--token <token>] [--profile <name>] [--json]
@@ -1476,6 +1501,51 @@ function tenderCliCapabilities() {
             persistence: 'session_only',
             writesToCheckout: false,
         },
+        connectors: {
+            mode: 'tenant_owned_platform_bindings',
+            listCommand: 'tender connectors list --profile account --json',
+            bindCommand: 'tender connectors bind <binding-name> <connector-id> --instance <instance-id> --json',
+            shopify: {
+                playbookId: 'shopify-connector-custom-app',
+                playbookCommand: 'tender playbooks get shopify-connector-custom-app --json',
+                customerMetadataPlaybookCommand: 'tender playbooks get shopify-connector-customer-metadata-widget --json',
+                whatItIs: 'A merchant-owned Shopify custom app exposed to Tender apps through an explicit platform connector binding.',
+                whenToUse: [
+                    'Shopify Admin GraphQL reads or writes',
+                    'customer metafields or customer-linked metaobjects',
+                    'app-owned custom data definitions',
+                    'Theme App Extension app blocks',
+                    'privileged background Shopify work that browser code cannot safely perform',
+                ],
+                whenNotToUse: [
+                    'pure frontend widgets',
+                    'Tender analytics only',
+                    'public Shopify data already present on the page',
+                    'client-side event publishing without Admin API writes',
+                ],
+                binding: {
+                    name: 'SHOPIFY_CONNECTOR',
+                    source: 'platform:shopify_connector',
+                    interface: 'ShopifyConnector',
+                    callShape: 'await this.env.SHOPIFY_CONNECTOR.invoke("shopify.graphql", { query, variables })',
+                },
+                sourceProject: {
+                    durableIdentity: 'connector.sourceProject.sourceArtifactId',
+                    targetPackId: 'shopify-connector-source',
+                    visibility: 'internal_source_artifact_not_customer_facing_app',
+                },
+                sourceModel: {
+                    cliOwns: ['source artifact lifecycle', 'checkout', 'Shopify CLI validate/deploy forwarding'],
+                    playbooksOwn: ['Theme App Extension app blocks', 'web pixels', 'customer metadata definitions', 'Admin GraphQL resource shape'],
+                },
+                guardrails: [
+                    'Use the account profile because connectors are account-level resources.',
+                    'Use minimum Shopify scopes for the requested job.',
+                    'Never commit client secrets, Admin API tokens, app automation tokens, Tender tokens, or customer data exports.',
+                    'Do not create bindings/<id>/ files for Shopify connectors; use the platform connector source in app.json.',
+                ],
+            },
+        },
         analyticsAuthoring: {
             command: ANALYTICS_AUTHORING_COMMAND,
             playbookId: ANALYTICS_AUTHORING_PLAYBOOK_ID,
@@ -1502,6 +1572,8 @@ function tenderCliCapabilities() {
                 'tender app db --help',
                 'tender app bindings outbound --help',
                 'tender app outbound-auth --help',
+                'tender connectors --help',
+                'tender connectors shopify source init --help',
             ],
         },
         workflows: [
@@ -1527,6 +1599,24 @@ function tenderCliCapabilities() {
                     'Do not write fetched playbook contents into the checkout or install them as skills.',
                 ],
             },
+            {
+                name: 'shopify_connector_discovery',
+                when: 'When a Tender App needs Shopify Admin API access, customer metadata, app blocks, app-owned custom data, or a merchant-owned Shopify custom app.',
+                commands: [
+                    'tender capabilities --json',
+                    'tender playbooks list --json',
+                    'tender playbooks get shopify-connector-custom-app --json',
+                    'tender connectors list --profile account --json',
+                    'tender connectors bind SHOPIFY_CONNECTOR <connector-id> --instance default --json',
+                ],
+                notes: [
+                    'Connectors are tenant-owned platform bindings, not generated binding workers.',
+                    'The merchant owns the Shopify custom app; Tender stores connector credentials and app source metadata.',
+                    'Use connector.sourceProject.sourceArtifactId as the durable Shopify app source identity.',
+                    'Use source init for bootstrap only; app blocks, pixels, metadata definitions, and Admin GraphQL operations are source edits guided by playbooks.',
+                    'Fetch shopify-connector-customer-metadata-widget when the requested job involves customer metafields, metaobjects, or profile writes.',
+                ],
+            },
             {
                 name: 'create_new_app_with_preview',
                 when: 'When the user wants a new Tender App that is immediately visible.',
@@ -3500,18 +3590,11 @@ function parseConnectorsShopifySourceInitArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {
         return { command: 'help', topic: 'connectors shopify source init' };
     }
-    const connectorId = parseConnectorId(args[0], 'tender connectors shopify source init <connector-id> --dir ./shopify-app --client-id abc --tender-app-url https://example.tenderprompt.app/client.js --tender-element tender-widget --json');
+    const connectorId = parseConnectorId(args[0], 'tender connectors shopify source init <connector-id> --dir ./shopify-app --client-id abc --json');
     const parsed = parseConnectorsCommonArgs(args, 1);
     let dir = null;
     let clientId = null;
     let sourceName = null;
-    let tenderAppUrl = null;
-    let tenderElement = null;
-    let artifactId = null;
-    let publicId = null;
-    let themeExtensionHandle = 'tender-widget';
-    let themeExtensionUid = null;
-    let blockName = 'Tender Prompt Widget';
     let scopes = null;
     let force = false;
     for (let index = 0; index < parsed.remaining.length; index += 1) {
@@ -3531,41 +3614,6 @@ function parseConnectorsShopifySourceInitArgs(args) {
             index += 1;
             continue;
         }
-        if (arg === '--tender-app-url') {
-            tenderAppUrl = parseRequiredFlagValue(parsed.remaining[index + 1], '--tender-app-url');
-            index += 1;
-            continue;
-        }
-        if (arg === '--tender-element') {
-            tenderElement = parseRequiredFlagValue(parsed.remaining[index + 1], '--tender-element');
-            index += 1;
-            continue;
-        }
-        if (arg === '--artifact-id') {
-            artifactId = parseRequiredFlagValue(parsed.remaining[index + 1], '--artifact-id');
-            index += 1;
-            continue;
-        }
-        if (arg === '--public-id') {
-            publicId = parseRequiredFlagValue(parsed.remaining[index + 1], '--public-id');
-            index += 1;
-            continue;
-        }
-        if (arg === '--theme-extension-handle') {
-            themeExtensionHandle = parseRequiredFlagValue(parsed.remaining[index + 1], '--theme-extension-handle');
-            index += 1;
-            continue;
-        }
-        if (arg === '--theme-extension-uid') {
-            themeExtensionUid = parseRequiredFlagValue(parsed.remaining[index + 1], '--theme-extension-uid');
-            index += 1;
-            continue;
-        }
-        if (arg === '--block-name') {
-            blockName = parseRequiredFlagValue(parsed.remaining[index + 1], '--block-name');
-            index += 1;
-            continue;
-        }
         if (arg === '--scopes') {
             scopes = parseRequiredFlagValue(parsed.remaining[index + 1], '--scopes');
             index += 1;
@@ -3578,31 +3626,17 @@ function parseConnectorsShopifySourceInitArgs(args) {
         throw new TenderCliUsageError(`Unknown connectors shopify source init option: ${arg}`);
     }
     if (!dir) {
-        throw new TenderCliUsageError('--dir is required. Example: tender connectors shopify source init conn_123 --dir ./shopify-app --client-id abc --tender-app-url https://example.tenderprompt.app/client.js --tender-element tender-widget --json');
+        throw new TenderCliUsageError('--dir is required. Example: tender connectors shopify source init conn_123 --dir ./shopify-app --client-id abc --json');
     }
     if (!clientId) {
         throw new TenderCliUsageError('--client-id is required because Tender stores only the non-secret client ID prefix.');
     }
-    if (!tenderAppUrl) {
-        throw new TenderCliUsageError('--tender-app-url is required. Pass the Tender app client.js URL to load in the app block.');
-    }
-    if (!tenderElement) {
-        throw new TenderCliUsageError('--tender-element is required. Pass the Tender custom element tag to mount in Shopify.');
-    }
     return {
         command: 'connectors shopify source init',
         connectorId,
         dir,
         clientId,
         sourceName,
-        template: 'dog-profile',
-        tenderAppUrl,
-        tenderElement,
-        artifactId,
-        publicId,
-        themeExtensionHandle,
-        themeExtensionUid,
-        blockName,
         scopes,
         force,
         ...parsed,
@@ -7502,7 +7536,7 @@ async function requestConnectorsApi(input) {
         const message = (typeof payload?.message === 'string' && payload.message) ||
             (typeof payload?.reasonCode === 'string' && payload.reasonCode) ||
             `Connector request failed with HTTP ${response.status}.`;
-        throw new Error([message, `Reason: ${reasonCode}.`, 'Example: tender connectors list --profile account --json.'].join('\n'));
+        throw new TenderCliConnectorsApiError([message, `Reason: ${reasonCode}.`, 'Example: tender connectors list --profile account --json.'].join('\n'), reasonCode, response.status, payload ?? null);
     }
     return payload;
 }
@@ -8898,6 +8932,7 @@ function defaultCommandRunner(command, args, options) {
     return new Promise((resolve, reject) => {
         const child = spawn(command, args, {
             cwd: options.cwd,
+            ...(options.env ? { env: options.env } : {}),
             stdio: ['ignore', 'pipe', 'pipe'],
         });
         const stdout = [];
@@ -11076,20 +11111,6 @@ async function runConnectorsShopifyVerify(command, io, runtime) {
 function requireShopifySourceString(value, fallback = '') {
     return typeof value === 'string' && value.trim() ? value.trim() : fallback;
 }
-function normalizeTenderElementTag(value) {
-    const normalized = value.trim().toLowerCase();
-    if (!/^[a-z][a-z0-9]*(?:-[a-z0-9]+)+$/.test(normalized)) {
-        throw new TenderCliUsageError('--tender-element must be a valid custom element tag, for example tender-dog-profile.');
-    }
-    return normalized;
-}
-function normalizeThemeExtensionHandle(value) {
-    const normalized = value.trim().toLowerCase();
-    if (!/^[a-z0-9][a-z0-9-]{0,63}$/.test(normalized)) {
-        throw new TenderCliUsageError('--theme-extension-handle must contain only lowercase letters, numbers, and dashes.');
-    }
-    return normalized;
-}
 function tomlString(value) {
     return JSON.stringify(value);
 }
@@ -11099,107 +11120,30 @@ function uniqueSortedScopes(scopes) {
 function parseScopeCsv(value) {
     return uniqueSortedScopes((value ?? '').split(/[,\s]+/));
 }
-function defaultDogProfileScopes(connectorScopes, override) {
+function defaultShopifySourceScopes(connectorScopes, override) {
     if (override) {
         return parseScopeCsv(override);
     }
     const fromConnector = Array.isArray(connectorScopes) ? connectorScopes.filter((scope) => typeof scope === 'string') : [];
-    return uniqueSortedScopes([
-        ...fromConnector,
-        'read_customers',
-        'write_customers',
-        'read_metaobject_definitions',
-        'write_metaobject_definitions',
-        'read_metaobjects',
-        'write_metaobjects',
-    ]);
-}
-function tenderWidgetAssetJs() {
-    return `(function () {
-  const loader = (window.TenderPromptBlockLoader ||= { scripts: new Map() });
-
-  function loadScript(src) {
-    if (!src) return Promise.reject(new Error("Missing Tender runtime URL"));
-
-    const existing = loader.scripts.get(src);
-    if (existing) return existing.promise;
-
-    const promise = new Promise((resolve, reject) => {
-      const script = document.createElement("script");
-      script.type = "module";
-      script.src = src;
-      script.onload = resolve;
-      script.onerror = () => reject(new Error(\`Failed to load \${src}\`));
-      document.head.appendChild(script);
-    });
-
-    loader.scripts.set(src, { status: "loading", promise });
-    promise.then(
-      () => loader.scripts.set(src, { status: "loaded", promise }),
-      () => loader.scripts.delete(src),
-    );
-
-    return promise;
-  }
-
-  class TenderPromptWidgetBlock extends HTMLElement {
-    connectedCallback() {
-      this.mount();
-    }
-
-    async mount() {
-      const mount = this.querySelector("[data-tender-mount]");
-      const elementTag = this.dataset.tenderElementTag;
-      if (!mount || !elementTag || mount.dataset.tenderMounted === "true") return;
-
-      await loadScript(this.dataset.tenderRuntimeSrc);
-
-      const widget = document.createElement(elementTag);
-      for (const [key, value] of Object.entries(this.dataset)) {
-        if (value == null || key === "tenderRuntimeSrc" || key === "tenderElementTag") continue;
-        widget.dataset[key] = value;
-      }
-
-      mount.replaceChildren(widget);
-      mount.dataset.tenderMounted = "true";
-    }
-  }
-
-  if (!customElements.get("tender-prompt-widget-block")) {
-    customElements.define("tender-prompt-widget-block", TenderPromptWidgetBlock);
-  }
-})();
-`;
+    return uniqueSortedScopes(fromConnector);
 }
 function buildShopifySourceFiles(input) {
     const appName = requireShopifySourceString(input.connector.appName, 'Tender Prompt Apps');
     const adminApiVersion = requireShopifySourceString(input.connector.adminApiVersion, '2026-04');
     const shopDomain = requireShopifySourceString(input.connector.shopDomain);
-    const tenderElement = normalizeTenderElementTag(input.tenderElement);
-    const extensionHandle = normalizeThemeExtensionHandle(input.themeExtensionHandle);
-    const scopes = defaultDogProfileScopes(input.connector.scopes, input.scopes);
-    const artifactId = input.artifactId ?? 'artifact_replace_me';
-    const publicId = input.publicId ?? 'tender-widget';
-    const blockName = input.blockName.trim().slice(0, 120) || 'Tender Prompt Widget';
+    const scopes = defaultShopifySourceScopes(input.connector.scopes, input.scopes);
     const connectorManifest = {
         version: 1,
         kind: 'shopify_connector_source',
         connectorId: input.connectorId,
         instanceId: requireShopifySourceString(input.connector.instanceId, 'default'),
-        template: input.template,
         shopDomain: shopDomain || null,
         adminApiVersion,
         clientId: input.clientId,
-        themeExtensionHandle: extensionHandle,
-        tender: {
-            artifactId,
-            publicId,
-            elementTag: tenderElement,
-            runtimeUrl: input.tenderAppUrl,
-        },
+        scopes,
         secrets: {
             clientSecret: 'stored in Tender connector credentials, not in this source tree',
-            appAutomationToken: 'store in SHOPIFY_APP_AUTOMATION_TOKEN or Tender connector secret store, not in git',
+            appAutomationToken: 'stored in Tender connector secret store, not in this source tree',
         },
     };
     const shopifyAppToml = `# Merchant-owned Shopify app source generated by Tender Prompt.
@@ -11221,157 +11165,31 @@ api_version = ${tomlString(adminApiVersion)}
 
 [build]
 automatically_update_urls_on_dev = true
-
-[metaobjects.app.dog_profile]
-name = "Dog profile"
-display_name_field = "dog_name"
-access.admin = "merchant_read_write"
-
-[metaobjects.app.dog_profile.fields.dog_name]
-name = "Dog name"
-type = "single_line_text_field"
-required = true
-
-[metaobjects.app.dog_profile.fields.preferences]
-name = "Preferences"
-type = "json"
-
-[customer.metafields.app.dog_profile]
-name = "Dog profile"
-type = "metaobject_reference<$app:dog_profile>"
-access.admin = "merchant_read_write"
-`;
-    const extensionToml = [
-        `name = ${tomlString(extensionHandle)}`,
-        'type = "theme"',
-        input.themeExtensionUid ? `uid = ${tomlString(input.themeExtensionUid)}` : null,
-        '',
-    ]
-        .filter((line) => line !== null)
-        .join('\n');
-    const liquid = `{% doc %}
-  Tender Prompt app block generated from connector ${input.connectorId}.
-
-  The block loads one Tender runtime script and mounts the configured Tender
-  custom element. Keep merchant-editable copy and version pins in block settings.
-{% enddoc %}
-
-{% liquid
-  assign artifact_id = block.settings.artifact_id | default: ${tomlString(artifactId)}
-  assign runtime_src = block.settings.runtime_src | default: ${tomlString(input.tenderAppUrl)}
-  assign widget_version = block.settings.widget_version | default: 'latest'
-%}
-
-<tender-prompt-widget-block
-  {{ block.shopify_attributes }}
-  class="tender-prompt-widget-block tender-prompt-widget-block--{{ block.settings.tone }}"
-  data-tender-artifact-id="{{ artifact_id | escape }}"
-  data-tender-public-id="{{ block.settings.public_id | escape }}"
-  data-tender-version="{{ widget_version | escape }}"
-  data-tender-runtime-src="{{ runtime_src | escape }}"
-  data-tender-element-tag="{{ block.settings.element_tag | escape }}"
-  data-tender-mode="shopify_app_block"
-  data-surface="shopify_theme_app_extension"
-  data-tender-block-id="{{ block.id | escape }}"
-  data-tender-shop-domain="{{ shop.permanent_domain | escape }}"
-  data-tender-heading="{{ block.settings.heading | escape }}"
-  data-tender-intro="{{ block.settings.intro | escape }}"
-  data-tender-tone="{{ block.settings.tone | escape }}"
-  {% if customer %}
-    data-tender-customer-id="{{ customer.id }}"
-  {% endif %}
-  {% if product %}
-    data-tender-product-id="{{ product.id }}"
-    data-tender-product-handle="{{ product.handle | escape }}"
-  {% endif %}
->
-  <div data-tender-mount>
-    <p>{{ block.settings.heading }}</p>
-  </div>
-</tender-prompt-widget-block>
-
-{% schema %}
-{
-  "name": ${JSON.stringify(blockName)},
-  "target": "section",
-  "javascript": "tender-widget.js",
-  "settings": [
-    {
-      "type": "text",
-      "id": "runtime_src",
-      "label": "Tender runtime URL",
-      "default": ${JSON.stringify(input.tenderAppUrl)}
-    },
-    {
-      "type": "text",
-      "id": "element_tag",
-      "label": "Tender custom element",
-      "default": ${JSON.stringify(tenderElement)}
-    },
-    {
-      "type": "text",
-      "id": "artifact_id",
-      "label": "Tender artifact ID",
-      "default": ${JSON.stringify(artifactId)}
-    },
-    {
-      "type": "text",
-      "id": "public_id",
-      "label": "Tender public ID",
-      "default": ${JSON.stringify(publicId)}
-    },
-    {
-      "type": "select",
-      "id": "widget_version",
-      "label": "Widget version",
-      "options": [
-        { "value": "latest", "label": "Latest published version" }
-      ],
-      "default": "latest"
-    },
-    {
-      "type": "inline_richtext",
-      "id": "heading",
-      "label": "Heading",
-      "default": "Tell us about your customer"
-    },
-    {
-      "type": "text",
-      "id": "intro",
-      "label": "Intro",
-      "default": "Answer a few quick questions and keep your profile up to date."
-    },
-    {
-      "type": "select",
-      "id": "tone",
-      "label": "Tone",
-      "options": [
-        { "value": "default", "label": "Default" },
-        { "value": "subtle", "label": "Subtle" },
-        { "value": "contrast", "label": "Contrast" }
-      ],
-      "default": "default"
-    }
-  ]
-}
-{% endschema %}
 `;
     const readme = `# ${appName}
 
-This is the merchant-owned Shopify app source generated by Tender Prompt for
+This is the merchant-owned Shopify app source bootstrapped by Tender Prompt for
 connector \`${input.connectorId}\`.
 
 ## What lives here
 
-- \`shopify.app.toml\`: Shopify app configuration, scopes, and app-owned dog-profile custom data definitions.
-- \`extensions/${extensionHandle}\`: Theme App Extension with a Tender app block.
-- \`connector.json\`: Non-secret Tender metadata that maps this source tree back to the connector.
+- \`shopify.app.toml\`: Shopify app configuration and reviewed Admin API scopes.
+- \`connector.json\`: Non-secret Tender metadata that maps this source tree back
+  to the connector.
+
+## Add capabilities
+
+This bootstrap intentionally does not generate app blocks, web pixels, customer
+metadata definitions, or app-owned GraphQL resources. Add those as source edits
+using the Shopify connector playbooks so the source tree stays the durable
+record of what the merchant-owned app actually contains.
 
 ## Secrets
 
 Do not commit the Shopify client secret, Admin API token, or App Automation
 Token. Runtime credentials stay in the Tender connector secret store. Deployment
-uses \`SHOPIFY_APP_AUTOMATION_TOKEN\` at command time.
+uses the connector's stored App Automation Token and passes it only to the
+spawned Shopify CLI child process.
 
 ## Validate
 
@@ -11382,21 +11200,16 @@ npx --yes @shopify/cli@latest app config validate --path . --json
 ## Deploy
 
 \`\`\`sh
-SHOPIFY_APP_AUTOMATION_TOKEN=... npx --yes @shopify/cli@latest app deploy --path . --allow-updates --version tender-widget
+tender connectors shopify source deploy ${input.connectorId} --dir . --confirm deploy --profile account --json
 \`\`\`
 `;
     return {
-        extensionHandle,
         manifest: connectorManifest,
         files: new Map([
             ['.gitignore', '.shopify/\nnode_modules/\n.env\n.env.*\n'],
             ['README.md', readme],
             ['connector.json', `${JSON.stringify(connectorManifest, null, 2)}\n`],
             ['shopify.app.toml', shopifyAppToml],
-            [`extensions/${extensionHandle}/shopify.extension.toml`, extensionToml],
-            [`extensions/${extensionHandle}/blocks/tender_widget.liquid`, liquid],
-            [`extensions/${extensionHandle}/assets/tender-widget.js`, tenderWidgetAssetJs()],
-            [`extensions/${extensionHandle}/locales/en.default.json`, `${JSON.stringify({ tender: { block: { name: blockName } } }, null, 2)}\n`],
         ]),
     };
 }
@@ -11469,7 +11282,6 @@ async function patchConnectorSourceProject(input) {
         version: 1,
         kind: 'shopify_app_source',
         sourceArtifactId: input.sourceArtifactId,
-        template: input.template,
         updatedAt: input.updatedAt,
     };
     const payload = await requestConnectorsApi({
@@ -11656,13 +11468,117 @@ function shopifyDeployArgs(input) {
 function commandLine(command, args) {
     return [command, ...args.map(shellQuote)].join(' ');
 }
+function redactSensitiveText(value, secrets = []) {
+    let redacted = value;
+    for (const secret of secrets) {
+        if (secret) {
+            redacted = redacted.split(secret).join('[REDACTED]');
+        }
+    }
+    return redacted
+        .replace(/shpat_[A-Za-z0-9_:-]+/g, 'shpat_[REDACTED]')
+        .replace(/\b(SHOPIFY_APP_AUTOMATION_TOKEN\s*[=:]\s*)([^\s'"]+)/gi, '$1[REDACTED]')
+        .replace(/\b(authorization\s*[:=]\s*(?:Bearer\s+)?)([^\s'"]+)/gi, '$1[REDACTED]')
+        .replace(/\b(x-shopify-access-token\s*[:=]\s*)([^\s'"]+)/gi, '$1[REDACTED]');
+}
 async function runNpxCommand(input) {
     const runner = input.runtime.commandRunner ?? defaultCommandRunner;
-    const result = await runner('npx', input.args, { cwd: input.cwd });
-    if (result.exitCode !== 0) {
-        throw new Error([`npx ${input.args.join(' ')} failed with exit code ${result.exitCode}.`, result.stderr.trim() || result.stdout.trim()].filter(Boolean).join('\n'));
+    const result = await runner('npx', input.args, {
+        cwd: input.cwd,
+        ...(input.env ? { env: input.env } : {}),
+    });
+    const redactedResult = {
+        ...result,
+        stdout: redactSensitiveText(result.stdout, input.redactions),
+        stderr: redactSensitiveText(result.stderr, input.redactions),
+    };
+    if (redactedResult.exitCode !== 0) {
+        throw new Error([
+            `npx ${input.args.join(' ')} failed with exit code ${redactedResult.exitCode}.`,
+            redactedResult.stderr.trim() || redactedResult.stdout.trim(),
+        ]
+            .filter(Boolean)
+            .join('\n'));
+    }
+    return redactedResult;
+}
+async function fetchShopifyDeployToken(input) {
+    const payload = await requestConnectorsApi({
+        connectorsPath: `${encodeURIComponent(input.connectorId)}/shopify/deploy-token`,
+        method: 'POST',
+        baseUrl: input.credentials.baseUrl,
+        token: input.credentials.token,
+        fetcher: input.fetcher,
+        body: {
+            sourceArtifactId: input.sourceArtifactId,
+            ...(input.version ? { version: input.version } : {}),
+        },
+    });
+    if (typeof payload.token !== 'string' || !payload.token.trim()) {
+        throw new TenderCliUsageError('Tender did not return a Shopify deploy token. Re-run connector setup or store an App Automation Token.');
+    }
+    return {
+        token: payload.token.trim(),
+        expiresAt: typeof payload.expiresAt === 'number' ? payload.expiresAt : null,
+    };
+}
+function localShopifyDeployToken(runtime) {
+    const env = runtime.env ?? process.env;
+    const token = env.SHOPIFY_APP_AUTOMATION_TOKEN;
+    return token?.trim() ? token.trim() : null;
+}
+function childShopifyDeployEnv(runtime, token) {
+    return {
+        ...process.env,
+        ...(runtime.env ?? {}),
+        SHOPIFY_APP_AUTOMATION_TOKEN: token,
+    };
+}
+function connectorsProfileFlag(command) {
+    return command.profileName ? `--profile ${command.profileName}` : '--profile account';
+}
+function shopifyDeployTokenRecoveryMessage(command, reasonCode) {
+    const profileFlag = connectorsProfileFlag(command);
+    return [
+        reasonCode === 'shopify_deploy_token_expired'
+            ? 'The connector stored Shopify App Automation Token is expired.'
+            : 'The connector does not have a stored Shopify App Automation Token for source deploys.',
+        `Store a fresh token: printf "$SHOPIFY_APP_AUTOMATION_TOKEN" | tender connectors shopify app-automation-token set ${command.connectorId} --token-stdin ${profileFlag} --json`,
+        `Setup URL: tender connectors shopify setup-url ${command.connectorId} ${profileFlag} --json`,
+        'Fallback: export SHOPIFY_APP_AUTOMATION_TOKEN locally before running source deploy.',
+    ].join('\n');
+}
+async function resolveShopifyDeployTokenEnvironment(input) {
+    const localToken = localShopifyDeployToken(input.runtime);
+    if (localToken) {
+        return {
+            env: childShopifyDeployEnv(input.runtime, localToken),
+            redactions: [localToken],
+            source: 'local-env',
+        };
+    }
+    try {
+        const handoff = await fetchShopifyDeployToken({
+            connectorId: input.command.connectorId,
+            sourceArtifactId: input.sourceArtifactId,
+            version: input.command.version,
+            credentials: input.credentials,
+            fetcher: input.fetcher,
+        });
+        return {
+            env: childShopifyDeployEnv(input.runtime, handoff.token),
+            redactions: [handoff.token],
+            source: 'stored-connector-token',
+        };
+    }
+    catch (error) {
+        if (error instanceof TenderCliConnectorsApiError &&
+            (error.reasonCode === 'shopify_deploy_token_required' || error.reasonCode === 'shopify_deploy_token_expired')) {
+            const recovery = shopifyDeployTokenRecoveryMessage(input.command, error.reasonCode);
+            throw new TenderCliGuidedUsageError(recovery, recovery);
+        }
+        throw error;
     }
-    return result;
 }
 async function runConnectorsShopifySourceInit(command, io, runtime) {
     const fetcher = runtime.fetcher ?? fetch;
@@ -11686,14 +11602,6 @@ async function runConnectorsShopifySourceInit(command, io, runtime) {
         connectorId: command.connectorId,
         connector,
         clientId: command.clientId,
-        template: command.template,
-        tenderAppUrl: command.tenderAppUrl,
-        tenderElement: command.tenderElement,
-        artifactId: command.artifactId,
-        publicId: command.publicId,
-        themeExtensionHandle: command.themeExtensionHandle,
-        themeExtensionUid: command.themeExtensionUid,
-        blockName: command.blockName,
         scopes: command.scopes,
     });
     const files = await writeShopifySourceFiles({ dir, files: source.files, force: command.force });
@@ -11708,7 +11616,6 @@ async function runConnectorsShopifySourceInit(command, io, runtime) {
     const patched = await patchConnectorSourceProject({
         connectorId: command.connectorId,
         sourceArtifactId: sourceArtifact.sourceArtifactId,
-        template: command.template,
         credentials,
         fetcher,
         updatedAt: runtime.now ? runtime.now() : Date.now(),
@@ -11732,7 +11639,7 @@ async function runConnectorsShopifySourceInit(command, io, runtime) {
             commit: gitCommit,
         },
         validateCommand: commandLine('npx', shopifyValidateArgs({ dir, clientId: command.clientId })),
-        deployCommand: commandLine('npx', shopifyDeployArgs({ dir, clientId: command.clientId, version: 'tender-widget', message: null, sourceControlUrl: null, allowDeletes: false })),
+        deployCommand: commandLine('npx', shopifyDeployArgs({ dir, clientId: command.clientId, version: 'connector-source', message: null, sourceControlUrl: null, allowDeletes: false })),
     };
     printConnectorsPayload(command, io, result, [
         `connector_id: ${command.connectorId}`,
@@ -11741,6 +11648,7 @@ async function runConnectorsShopifySourceInit(command, io, runtime) {
         `files: ${files.length}`,
         `git_pushed: ${gitCommit.pushed ? 'true' : 'false'}`,
         `next_validate: ${result.validateCommand}`,
+        'next_source_edits: add app blocks, pixels, or metadata definitions from playbooks',
     ]);
     return 0;
 }
@@ -11801,7 +11709,8 @@ async function runConnectorsShopifySourceValidate(command, io, runtime) {
     return 0;
 }
 async function runConnectorsShopifySourceDeploy(command, io, runtime) {
-    const { connector } = await requestConnector(command, runtime);
+    const fetcher = runtime.fetcher ?? fetch;
+    const { credentials, connector } = await requestConnector(command, runtime);
     const sourceArtifactId = readConnectorSourceArtifactId(connector);
     if (!sourceArtifactId) {
         throw new TenderCliUsageError('Connector does not have a source artifact yet. Run tender connectors shopify source init <connector-id> --dir ./shopify-app first.');
@@ -11819,7 +11728,14 @@ async function runConnectorsShopifySourceDeploy(command, io, runtime) {
         printConnectorsPayload(command, io, { ok: true, dryRun: true, command: command.command, connectorId: command.connectorId, sourceArtifactId, dir, shopifyCommand: commandLine('npx', args), confirmRequired: 'deploy' }, [`connector_id: ${command.connectorId}`, `source_artifact_id: ${sourceArtifactId}`, `source_dir: ${dir}`, `shopify_command: ${commandLine('npx', args)}`, 'confirm_required: --confirm deploy']);
         return 0;
     }
-    const result = await runNpxCommand({ args, cwd: dir, runtime });
+    const deployToken = await resolveShopifyDeployTokenEnvironment({
+        command,
+        sourceArtifactId,
+        credentials,
+        runtime,
+        fetcher,
+    });
+    const result = await runNpxCommand({ args, cwd: dir, runtime, env: deployToken.env, redactions: deployToken.redactions });
     printConnectorsPayload(command, io, { ok: true, command: command.command, connectorId: command.connectorId, sourceArtifactId, dir, exitCode: result.exitCode, stdout: result.stdout, stderr: result.stderr }, [`connector_id: ${command.connectorId}`, `source_artifact_id: ${sourceArtifactId}`, `source_dir: ${dir}`, 'deploy: completed']);
     return 0;
 }
@@ -12662,7 +12578,7 @@ function cliErrorMessage(error) {
     return String(error);
 }
 function cliErrorCode(error) {
-    if (error instanceof TenderCliDbApiError || error instanceof TenderCliAnalyticsApiError) {
+    if (error instanceof TenderCliDbApiError || error instanceof TenderCliAnalyticsApiError || error instanceof TenderCliConnectorsApiError) {
         return error.reasonCode;
     }
     if (error && typeof error === 'object' && 'code' in error) {
@@ -12737,6 +12653,9 @@ function exampleForError(error, args, command) {
     return dbPath ? dbCorrectedExample(artifactId, dbPath) : null;
 }
 function nextActionForError(error) {
+    if (error instanceof TenderCliGuidedUsageError) {
+        return error.nextAction;
+    }
     return error instanceof TenderCliDbApiError ? error.nextAction : null;
 }
 function cliErrorPayload(error, args, command) {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@tenderprompt/cli",
-	"version": "0.1.27",
+	"version": "0.1.29",
 	"type": "module",
 	"bin": {
 		"tender": "bin/tender.js"