@tenderprompt/cli 0.1.29 → 0.1.31

package/README.md

@@ -60,6 +60,7 @@ tender --version
 tender capabilities --json
 
 tender auth login --device --profile edit-preview --artifact artifact_123 --ttl 7d
+tender auth login --device --profile create --shopify-store tender-prompt --json
 
 tender app init artifact_123 --dir ./widget --preview --json
 

package/dist/index.js

@@ -295,18 +295,21 @@ Commands:
 Examples:
   tender auth login --device --profile edit-preview --artifact artifact_123 --ttl 7d
   tender auth login --device --profile publish --artifact artifact_123 --ttl 7d --save-profile publish
+  tender auth login --device --profile create --shopify-store tender-prompt --json
   tender auth status --json`;
 }
 function authLoginHelp() {
-    return `Usage: tender auth login --device [--base-url <url>] [--profile <edit-preview|publish|create|db-read>] [--artifact <artifact-id>] [--ttl <7d|14d|30d>] [--save-profile <name>] [--no-poll] [--json]
+    return `Usage: tender auth login --device [--base-url <url>] [--shopify-store <store>] [--shopify-app-url <url>] [--profile <edit-preview|publish|create|db-read>] [--artifact <artifact-id>] [--ttl <7d|14d|30d>] [--save-profile <name>] [--no-poll] [--json]
 
 Options:
   --device                 Use the OAuth device-code flow.
   --base-url <url>         Tender base URL. Defaults to TENDER_BASE_URL or https://app.tenderprompt.com.
+  --shopify-store <store>  Approve the device code in Shopify Admin for this store handle.
+  --shopify-app-url <url>  Approve the device code through a Tender Prompt Shopify App Home URL.
   --profile <value>        Token permission profile: edit-preview, publish, create, or db-read. Defaults to edit-preview.
   --artifact <artifact-id> Scope the token to one artifact. Required for normal edit-preview agent work.
   --ttl <value>            Token lifetime: 7d, 14d, or 30d. Defaults to 7d.
-  --save-profile <name>    Local config profile name. Defaults to default.
+  --save-profile <name>    Local config profile name. Defaults to default, or shopify-<store> with Shopify approval.
   --no-poll                Print the verification URL and exit without waiting for approval.
   --json                   Emit stable JSON for coding agents.
 
@@ -314,6 +317,7 @@ Examples:
   tender auth login --device --profile edit-preview --artifact artifact_123 --ttl 7d
   tender auth login --device --profile publish --artifact artifact_123 --ttl 7d --save-profile publish --json
   tender auth login --device --profile create --ttl 7d --save-profile account
+  tender auth login --device --profile create --shopify-store tender-prompt --json
   tender auth login --device --profile db-read --artifact artifact_123 --ttl 7d --save-profile db`;
 }
 function authStatusHelp() {
@@ -2033,8 +2037,38 @@ function normalizeStoredProfile(value) {
         permissions: Array.isArray(record.permissions)
             ? record.permissions.filter((permission) => typeof permission === 'string')
             : undefined,
+        ...normalizeStoredShopifyContext(record),
     };
 }
+function normalizeStoredShopifyContext(record) {
+    const shopifyAppUrl = typeof record.shopifyAppUrl === 'string' ? record.shopifyAppUrl : null;
+    if (shopifyAppUrl) {
+        try {
+            const parsed = parseShopifyAppUrl(shopifyAppUrl, 'profile.shopifyAppUrl');
+            return {
+                shopifyAppUrl: parsed.appUrl,
+                shopifyStore: parsed.store,
+            };
+        }
+        catch {
+            return {};
+        }
+    }
+    const shopifyStore = typeof record.shopifyStore === 'string' ? record.shopifyStore : null;
+    if (shopifyStore) {
+        try {
+            const store = parseShopifyStoreHandle(shopifyStore, 'profile.shopifyStore');
+            return {
+                shopifyAppUrl: shopifyAppUrlForStore(store),
+                shopifyStore: store,
+            };
+        }
+        catch {
+            return {};
+        }
+    }
+    return {};
+}
 function normalizeConfig(value) {
     if (!value || typeof value !== 'object' || Array.isArray(value)) {
         return {};
@@ -2131,6 +2165,60 @@ function parseBaseUrlFlag(args, index) {
     }
     return normalizeBaseUrl(value);
 }
+function parseShopifyStoreHandle(value, flag) {
+    if (!value || value.startsWith('-')) {
+        throw new TenderCliUsageError(`${flag} requires a Shopify Admin store handle.`);
+    }
+    const normalized = value.trim().toLowerCase();
+    if (!/^[a-z0-9][a-z0-9-]*$/.test(normalized)) {
+        throw new TenderCliUsageError(`${flag} must be a Shopify Admin store handle, such as tender-prompt.`);
+    }
+    return normalized;
+}
+function shopifyAppUrlForStore(store) {
+    return `https://admin.shopify.com/store/${store}/apps/tender-prompt/shopify`;
+}
+function parseShopifyAppUrl(value, flag) {
+    if (!value || value.startsWith('-')) {
+        throw new TenderCliUsageError(`${flag} requires a Shopify Admin App Home URL.`);
+    }
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new TenderCliUsageError(`${flag} requires a valid Shopify Admin App Home URL.`);
+    }
+    if (url.protocol !== 'https:' || url.hostname !== 'admin.shopify.com') {
+        throw new TenderCliUsageError(`${flag} must start with https://admin.shopify.com/.`);
+    }
+    const parts = url.pathname.split('/').filter(Boolean);
+    const deviceSuffix = parts[5] === 'device' ? parts[5] : null;
+    if ((parts.length !== 5 && !(parts.length === 6 && deviceSuffix)) ||
+        parts[0] !== 'store' ||
+        parts[2] !== 'apps' ||
+        parts[4] !== 'shopify') {
+        throw new TenderCliUsageError(`${flag} must look like https://admin.shopify.com/store/<store>/apps/tender-prompt/shopify.`);
+    }
+    if (url.search || url.hash) {
+        throw new TenderCliUsageError(`${flag} should not include a query string or hash.`);
+    }
+    const store = parseShopifyStoreHandle(parts[1], flag);
+    const appHandle = parseShopifyStoreHandle(parts[3], flag);
+    return {
+        store,
+        appUrl: `https://admin.shopify.com/store/${store}/apps/${appHandle}/shopify`,
+    };
+}
+function parseShopifyAppUrlFlag(args, index) {
+    return parseShopifyAppUrl(args[index + 1], '--shopify-app-url');
+}
+function shopifyDeviceVerificationUri(shopifyAppUrl) {
+    return `${shopifyAppUrl.replace(/\/+$/, '')}/device`;
+}
+function shopifyDeviceVerificationUrl(input) {
+    return `${shopifyDeviceVerificationUri(input.shopifyAppUrl)}?user_code=${encodeURIComponent(input.userCode)}`;
+}
 function parseTokenFlag(args, index) {
     const value = args[index + 1];
     if (!value || value.startsWith('-')) {
@@ -4397,8 +4485,11 @@ function parseAuthLoginArgs(args) {
     }
     let device = false;
     let baseUrl = null;
+    let shopifyAppUrl = null;
+    let shopifyStore = null;
     let tokenProfile = 'edit-preview';
     let saveProfile = DEFAULT_PROFILE_NAME;
+    let saveProfileExplicit = false;
     let artifactId = null;
     let ttl = '7d';
     let json = false;
@@ -4423,6 +4514,25 @@ function parseAuthLoginArgs(args) {
             index += 1;
             continue;
         }
+        if (arg === '--shopify-store') {
+            if (shopifyAppUrl) {
+                throw new TenderCliUsageError('--shopify-store cannot be combined with --shopify-app-url.');
+            }
+            shopifyStore = parseShopifyStoreHandle(args[index + 1], '--shopify-store');
+            shopifyAppUrl = shopifyAppUrlForStore(shopifyStore);
+            index += 1;
+            continue;
+        }
+        if (arg === '--shopify-app-url') {
+            if (shopifyAppUrl) {
+                throw new TenderCliUsageError('--shopify-app-url cannot be combined with --shopify-store.');
+            }
+            const parsed = parseShopifyAppUrlFlag(args, index);
+            shopifyStore = parsed.store;
+            shopifyAppUrl = parsed.appUrl;
+            index += 1;
+            continue;
+        }
         if (arg === '--profile') {
             tokenProfile = parseTokenProfile(args[index + 1]);
             index += 1;
@@ -4430,6 +4540,7 @@ function parseAuthLoginArgs(args) {
         }
         if (arg === '--save-profile') {
             saveProfile = parseProfileName(args[index + 1], '--save-profile');
+            saveProfileExplicit = true;
             index += 1;
             continue;
         }
@@ -4459,9 +4570,14 @@ function parseAuthLoginArgs(args) {
     if (tokenProfile === 'db-read' && !artifactId) {
         throw new TenderCliUsageError('--profile db-read requires --artifact <artifact-id>.');
     }
+    if (shopifyStore && !saveProfileExplicit) {
+        saveProfile = `shopify-${shopifyStore}`;
+    }
     return {
         command: 'auth login',
         baseUrl,
+        shopifyAppUrl,
+        shopifyStore,
         device,
         tokenProfile,
         saveProfile,
@@ -8145,6 +8261,8 @@ async function runAuthStatus(command, io, runtime) {
             artifactId: profile?.artifactId ?? null,
             permissions: profile?.permissions ?? [],
             expiresAt: formatExpiry(profile?.expiresAt),
+            shopifyAppUrl: profile?.shopifyAppUrl ?? null,
+            shopifyStore: profile?.shopifyStore ?? null,
         };
         if (command.json) {
             io.stdout(JSON.stringify(result, null, 2));
@@ -8159,6 +8277,7 @@ async function runAuthStatus(command, io, runtime) {
                 `app_id: ${profile.artifactId ?? '(account)'}`,
                 `permissions: ${(profile.permissions ?? []).join(' ') || '(unknown)'}`,
                 `expires_at: ${formatExpiry(profile.expiresAt) ?? '(unknown)'}`,
+                `shopify_app_url: ${profile.shopifyAppUrl ?? '(none)'}`,
             ].join('\n'));
         }
         else {
@@ -8203,6 +8322,8 @@ async function runAuthStatus(command, io, runtime) {
         artifactId: profile?.artifactId ?? null,
         permissions: profile?.permissions ?? [],
         expiresAt: formatExpiry(profile?.expiresAt),
+        shopifyAppUrl: profile?.shopifyAppUrl ?? null,
+        shopifyStore: profile?.shopifyStore ?? null,
     };
     if (command.json) {
         io.stdout(JSON.stringify(result, null, 2));
@@ -8217,6 +8338,7 @@ async function runAuthStatus(command, io, runtime) {
             `app_id: ${profile.artifactId ?? '(account)'}`,
             `permissions: ${(profile.permissions ?? []).join(' ') || '(unknown)'}`,
             `expires_at: ${formatExpiry(profile.expiresAt) ?? '(unknown)'}`,
+            `shopify_app_url: ${profile.shopifyAppUrl ?? '(none)'}`,
         ].join('\n'));
     }
     else {
@@ -8233,7 +8355,11 @@ async function runAuthLogin(command, io, runtime) {
     const fetcher = runtime.fetcher ?? fetch;
     const sleeper = runtime.sleeper ?? ((milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)));
     const now = runtime.now ?? Date.now;
-    const baseUrl = command.baseUrl ?? readDefaultBaseUrl(env);
+    const config = await readConfig(env);
+    const existingProfile = config.profiles?.[command.saveProfile] ?? null;
+    const baseUrl = command.baseUrl ?? existingProfile?.baseUrl ?? readDefaultBaseUrl(env);
+    const shopifyAppUrl = command.shopifyAppUrl ?? existingProfile?.shopifyAppUrl ?? null;
+    const shopifyStore = command.shopifyStore ?? existingProfile?.shopifyStore ?? null;
     const deviceResponse = await fetcher(`${baseUrl}/oauth/device/code`, {
         method: 'POST',
         headers: {
@@ -8249,15 +8375,24 @@ async function runAuthLogin(command, io, runtime) {
     if (!deviceResponse.ok || !devicePayload?.device_code || !devicePayload.user_code || !devicePayload.verification_uri_complete) {
         throw new Error(devicePayload?.error_description ?? devicePayload?.error ?? `Device authorization failed with HTTP ${deviceResponse.status}.`);
     }
+    const verificationUriComplete = shopifyAppUrl
+        ? shopifyDeviceVerificationUrl({
+            shopifyAppUrl,
+            userCode: devicePayload.user_code,
+        })
+        : devicePayload.verification_uri_complete;
+    const verificationUri = shopifyAppUrl ? shopifyDeviceVerificationUri(shopifyAppUrl) : devicePayload.verification_uri;
     const pendingResult = {
         ok: true,
         command: command.command,
         baseUrl,
+        shopifyAppUrl,
+        shopifyStore,
         profile: command.tokenProfile,
         saveProfile: command.saveProfile,
         userCode: devicePayload.user_code,
-        verificationUri: devicePayload.verification_uri,
-        verificationUriComplete: devicePayload.verification_uri_complete,
+        verificationUri,
+        verificationUriComplete,
         expiresIn: devicePayload.expires_in ?? null,
         interval: devicePayload.interval ?? null,
     };
@@ -8266,13 +8401,13 @@ async function runAuthLogin(command, io, runtime) {
             io.stdout(JSON.stringify(pendingResult, null, 2));
         }
         else {
-            io.stdout([`verification_url: ${devicePayload.verification_uri_complete}`, `user_code: ${devicePayload.user_code}`].join('\n'));
+            io.stdout([`verification_url: ${verificationUriComplete}`, `user_code: ${devicePayload.user_code}`].join('\n'));
         }
         return 0;
     }
     if (!command.json) {
         io.stdout([
-            `Open this URL to approve Tender CLI access: ${devicePayload.verification_uri_complete}`,
+            `Open this URL to approve Tender CLI access: ${verificationUriComplete}`,
             `User code: ${devicePayload.user_code}`,
         ].join('\n'));
     }
@@ -8293,7 +8428,6 @@ async function runAuthLogin(command, io, runtime) {
         });
         const tokenPayload = await parseJsonResponse(tokenResponse);
         if (tokenResponse.ok && tokenPayload?.access_token) {
-            const config = await readConfig(env);
             const profiles = config.profiles ?? {};
             profiles[command.saveProfile] = {
                 baseUrl,
@@ -8303,6 +8437,8 @@ async function runAuthLogin(command, io, runtime) {
                 artifactId: tokenPayload.artifact_id,
                 expiresAt: tokenPayload.expires_at,
                 permissions: splitScope(tokenPayload.scope),
+                ...(shopifyAppUrl ? { shopifyAppUrl } : {}),
+                ...(shopifyStore ? { shopifyStore } : {}),
             };
             await writeConfig(env, {
                 ...config,
@@ -8320,6 +8456,8 @@ async function runAuthLogin(command, io, runtime) {
                 artifactId: tokenPayload.artifact_id ?? null,
                 permissions: splitScope(tokenPayload.scope),
                 expiresAt: formatExpiry(tokenPayload.expires_at),
+                shopifyAppUrl,
+                shopifyStore,
                 configPath: readConfigPath(env),
             };
             if (command.json) {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@tenderprompt/cli",
-	"version": "0.1.29",
+	"version": "0.1.31",
 	"type": "module",
 	"bin": {
 		"tender": "bin/tender.js"
@@ -23,7 +23,7 @@
 		"prepack": "yarn build"
 	},
 	"dependencies": {
-		"@tenderprompt/tender-app-validator": "0.1.4"
+		"@tenderprompt/tender-app-validator": "0.1.5"
 	},
 	"engines": {
 		"node": ">=20"