@tenderprompt/cli 0.1.29 → 0.1.30

package/README.md

@@ -60,6 +60,7 @@ tender --version
 tender capabilities --json
 
 tender auth login --device --profile edit-preview --artifact artifact_123 --ttl 7d
+tender auth login --device --profile create --shopify-store tender-prompt --json
 
 tender app init artifact_123 --dir ./widget --preview --json
 

package/dist/index.js

@@ -295,18 +295,21 @@ Commands:
 Examples:
   tender auth login --device --profile edit-preview --artifact artifact_123 --ttl 7d
   tender auth login --device --profile publish --artifact artifact_123 --ttl 7d --save-profile publish
+  tender auth login --device --profile create --shopify-store tender-prompt --json
   tender auth status --json`;
 }
 function authLoginHelp() {
-    return `Usage: tender auth login --device [--base-url <url>] [--profile <edit-preview|publish|create|db-read>] [--artifact <artifact-id>] [--ttl <7d|14d|30d>] [--save-profile <name>] [--no-poll] [--json]
+    return `Usage: tender auth login --device [--base-url <url>] [--shopify-store <store>] [--shopify-app-url <url>] [--profile <edit-preview|publish|create|db-read>] [--artifact <artifact-id>] [--ttl <7d|14d|30d>] [--save-profile <name>] [--no-poll] [--json]
 
 Options:
   --device                 Use the OAuth device-code flow.
   --base-url <url>         Tender base URL. Defaults to TENDER_BASE_URL or https://app.tenderprompt.com.
+  --shopify-store <store>  Approve the device code in Shopify Admin for this store handle.
+  --shopify-app-url <url>  Approve the device code through a Tender Prompt Shopify App Home URL.
   --profile <value>        Token permission profile: edit-preview, publish, create, or db-read. Defaults to edit-preview.
   --artifact <artifact-id> Scope the token to one artifact. Required for normal edit-preview agent work.
   --ttl <value>            Token lifetime: 7d, 14d, or 30d. Defaults to 7d.
-  --save-profile <name>    Local config profile name. Defaults to default.
+  --save-profile <name>    Local config profile name. Defaults to default, or shopify-<store> with Shopify approval.
   --no-poll                Print the verification URL and exit without waiting for approval.
   --json                   Emit stable JSON for coding agents.
 
@@ -314,6 +317,7 @@ Examples:
   tender auth login --device --profile edit-preview --artifact artifact_123 --ttl 7d
   tender auth login --device --profile publish --artifact artifact_123 --ttl 7d --save-profile publish --json
   tender auth login --device --profile create --ttl 7d --save-profile account
+  tender auth login --device --profile create --shopify-store tender-prompt --json
   tender auth login --device --profile db-read --artifact artifact_123 --ttl 7d --save-profile db`;
 }
 function authStatusHelp() {
@@ -2131,6 +2135,55 @@ function parseBaseUrlFlag(args, index) {
     }
     return normalizeBaseUrl(value);
 }
+function parseShopifyStoreHandle(value, flag) {
+    if (!value || value.startsWith('-')) {
+        throw new TenderCliUsageError(`${flag} requires a Shopify Admin store handle.`);
+    }
+    const normalized = value.trim().toLowerCase();
+    if (!/^[a-z0-9][a-z0-9-]*$/.test(normalized)) {
+        throw new TenderCliUsageError(`${flag} must be a Shopify Admin store handle, such as tender-prompt.`);
+    }
+    return normalized;
+}
+function shopifyAppUrlForStore(store) {
+    return `https://admin.shopify.com/store/${store}/apps/tender-prompt/shopify`;
+}
+function parseShopifyAppUrlFlag(args, index) {
+    const value = args[index + 1];
+    if (!value || value.startsWith('-')) {
+        throw new TenderCliUsageError('--shopify-app-url requires a Shopify Admin App Home URL.');
+    }
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new TenderCliUsageError('--shopify-app-url requires a valid Shopify Admin App Home URL.');
+    }
+    if (url.protocol !== 'https:' || url.hostname !== 'admin.shopify.com') {
+        throw new TenderCliUsageError('--shopify-app-url must start with https://admin.shopify.com/.');
+    }
+    const parts = url.pathname.split('/').filter(Boolean);
+    const deviceSuffix = parts[5] === 'device' ? parts[5] : null;
+    if ((parts.length !== 5 && !(parts.length === 6 && deviceSuffix)) ||
+        parts[0] !== 'store' ||
+        parts[2] !== 'apps' ||
+        parts[4] !== 'shopify') {
+        throw new TenderCliUsageError('--shopify-app-url must look like https://admin.shopify.com/store/<store>/apps/tender-prompt/shopify.');
+    }
+    if (url.search || url.hash) {
+        throw new TenderCliUsageError('--shopify-app-url should not include a query string or hash.');
+    }
+    const store = parseShopifyStoreHandle(parts[1], '--shopify-app-url');
+    const appHandle = parseShopifyStoreHandle(parts[3], '--shopify-app-url');
+    return {
+        store,
+        appUrl: `https://admin.shopify.com/store/${store}/apps/${appHandle}/shopify`,
+    };
+}
+function shopifyDeviceVerificationUrl(input) {
+    return `${input.shopifyAppUrl.replace(/\/+$/, '')}/device?user_code=${encodeURIComponent(input.userCode)}`;
+}
 function parseTokenFlag(args, index) {
     const value = args[index + 1];
     if (!value || value.startsWith('-')) {
@@ -4397,8 +4450,11 @@ function parseAuthLoginArgs(args) {
     }
     let device = false;
     let baseUrl = null;
+    let shopifyAppUrl = null;
+    let shopifyStore = null;
     let tokenProfile = 'edit-preview';
     let saveProfile = DEFAULT_PROFILE_NAME;
+    let saveProfileExplicit = false;
     let artifactId = null;
     let ttl = '7d';
     let json = false;
@@ -4423,6 +4479,25 @@ function parseAuthLoginArgs(args) {
             index += 1;
             continue;
         }
+        if (arg === '--shopify-store') {
+            if (shopifyAppUrl) {
+                throw new TenderCliUsageError('--shopify-store cannot be combined with --shopify-app-url.');
+            }
+            shopifyStore = parseShopifyStoreHandle(args[index + 1], '--shopify-store');
+            shopifyAppUrl = shopifyAppUrlForStore(shopifyStore);
+            index += 1;
+            continue;
+        }
+        if (arg === '--shopify-app-url') {
+            if (shopifyAppUrl) {
+                throw new TenderCliUsageError('--shopify-app-url cannot be combined with --shopify-store.');
+            }
+            const parsed = parseShopifyAppUrlFlag(args, index);
+            shopifyStore = parsed.store;
+            shopifyAppUrl = parsed.appUrl;
+            index += 1;
+            continue;
+        }
         if (arg === '--profile') {
             tokenProfile = parseTokenProfile(args[index + 1]);
             index += 1;
@@ -4430,6 +4505,7 @@ function parseAuthLoginArgs(args) {
         }
         if (arg === '--save-profile') {
             saveProfile = parseProfileName(args[index + 1], '--save-profile');
+            saveProfileExplicit = true;
             index += 1;
             continue;
         }
@@ -4459,9 +4535,14 @@ function parseAuthLoginArgs(args) {
     if (tokenProfile === 'db-read' && !artifactId) {
         throw new TenderCliUsageError('--profile db-read requires --artifact <artifact-id>.');
     }
+    if (shopifyStore && !saveProfileExplicit) {
+        saveProfile = `shopify-${shopifyStore}`;
+    }
     return {
         command: 'auth login',
         baseUrl,
+        shopifyAppUrl,
+        shopifyStore,
         device,
         tokenProfile,
         saveProfile,
@@ -8249,15 +8330,24 @@ async function runAuthLogin(command, io, runtime) {
     if (!deviceResponse.ok || !devicePayload?.device_code || !devicePayload.user_code || !devicePayload.verification_uri_complete) {
         throw new Error(devicePayload?.error_description ?? devicePayload?.error ?? `Device authorization failed with HTTP ${deviceResponse.status}.`);
     }
+    const verificationUriComplete = command.shopifyAppUrl
+        ? shopifyDeviceVerificationUrl({
+            shopifyAppUrl: command.shopifyAppUrl,
+            userCode: devicePayload.user_code,
+        })
+        : devicePayload.verification_uri_complete;
+    const verificationUri = command.shopifyAppUrl ? `${command.shopifyAppUrl}/device` : devicePayload.verification_uri;
     const pendingResult = {
         ok: true,
         command: command.command,
         baseUrl,
+        shopifyAppUrl: command.shopifyAppUrl,
+        shopifyStore: command.shopifyStore,
         profile: command.tokenProfile,
         saveProfile: command.saveProfile,
         userCode: devicePayload.user_code,
-        verificationUri: devicePayload.verification_uri,
-        verificationUriComplete: devicePayload.verification_uri_complete,
+        verificationUri,
+        verificationUriComplete,
         expiresIn: devicePayload.expires_in ?? null,
         interval: devicePayload.interval ?? null,
     };
@@ -8266,13 +8356,13 @@ async function runAuthLogin(command, io, runtime) {
             io.stdout(JSON.stringify(pendingResult, null, 2));
         }
         else {
-            io.stdout([`verification_url: ${devicePayload.verification_uri_complete}`, `user_code: ${devicePayload.user_code}`].join('\n'));
+            io.stdout([`verification_url: ${verificationUriComplete}`, `user_code: ${devicePayload.user_code}`].join('\n'));
         }
         return 0;
     }
     if (!command.json) {
         io.stdout([
-            `Open this URL to approve Tender CLI access: ${devicePayload.verification_uri_complete}`,
+            `Open this URL to approve Tender CLI access: ${verificationUriComplete}`,
             `User code: ${devicePayload.user_code}`,
         ].join('\n'));
     }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@tenderprompt/cli",
-	"version": "0.1.29",
+	"version": "0.1.30",
 	"type": "module",
 	"bin": {
 		"tender": "bin/tender.js"
@@ -23,7 +23,7 @@
 		"prepack": "yarn build"
 	},
 	"dependencies": {
-		"@tenderprompt/tender-app-validator": "0.1.4"
+		"@tenderprompt/tender-app-validator": "0.1.5"
 	},
 	"engines": {
 		"node": ">=20"