@tenderprompt/cli 0.1.6 → 0.1.8

package/dist/index.js

@@ -20,6 +20,8 @@ function rootHelp() {
     return `Usage: tender <command> [options]
 
 Commands:
+  tender capabilities --json
+                             Describe the CLI command surface for coding agents
   tender auth login --device
                              Authorize this machine with a browser-approved device flow
   tender auth status         Show whether a Tender API token is available
@@ -58,16 +60,16 @@ Commands:
                              Report whether managed context is stale
   tender app context refresh <app-id>
                              Refresh managed context files
+  tender app bindings outbound --id <id> --host <host> --dry-run
+                             Preview files for an outbound HTTP binding
   tender app git setup <app-id>
                              Configure a checkout to push to the app remote
   tender app doctor          Validate a local Tender App checkout
   tender app generate-env-types
                              Regenerate src/env.d.ts from app.json and bindings
 
-Compatibility:
-  tender artifacts ...       Legacy alias for Tender App commands
-
 Examples:
+  tender capabilities --json
   tender auth login --device --profile edit-preview --artifact artifact_123 --ttl 7d
   tender auth status --json
   tender app list --json
@@ -86,6 +88,7 @@ Examples:
   tender app context fetch artifact_123 --dir ./widget --dry-run --json
   tender app context status artifact_123 --dir ./widget --json
   tender app context refresh artifact_123 --dir ./widget --dry-run --json
+  tender app bindings outbound --id shopify --host admin.shopify.com --dry-run --json
   tender app git setup artifact_123 --dir ./widget --json
   tender app doctor --dir ./widget
   tender app generate-env-types --dir ./widget --json
@@ -175,6 +178,8 @@ Commands:
                              Show managed context freshness for a checkout
   tender app context refresh <app-id>
                              Refresh managed context files in a checkout
+  tender app bindings outbound --id <id> --host <host> --dry-run
+                             Preview files for an outbound HTTP binding
   tender app git setup <app-id>
                              Configure the tender Git remote and credential helper
   tender app doctor          Validate local context, TypeScript scaffold, and Tender App rules
@@ -205,17 +210,21 @@ Examples:
   tender app context fetch artifact_123 --dir ./widget --dry-run --json
   tender app context status artifact_123 --dir ./widget --json
   tender app context refresh artifact_123 --dir ./widget --dry-run --json
+  tender app bindings outbound --id shopify --host admin.shopify.com --dry-run --json
   tender app git setup artifact_123 --dir ./widget --json
   tender app doctor --dir ./widget
   tender app generate-env-types --dir ./widget --json
   tender app doctor --json
   tender app git remote artifact_123 --ttl 7d --json`;
 }
-function artifactsHelp() {
-    return `${appHelp()}
+function capabilitiesHelp() {
+    return `Usage: tender capabilities [--json]
+
+Describes the Tender CLI surface for coding agents. Use this first instead of
+copying long command lists into skill prompts.
 
-Legacy alias:
-  tender artifacts ... continues to work for existing automation. Prefer tender app ... for new workflows.`;
+Examples:
+  tender capabilities --json`;
 }
 function analyticsHelp() {
     return `Usage: tender app analytics <command> <app-id> [options]
@@ -441,6 +450,26 @@ Examples:
   tender app generate-env-types --dir ./widget
   tender app generate-env-types --dir ./widget --json`;
 }
+function bindingsOutboundHelp() {
+    return `Usage: tender app bindings outbound --id <id> --host <host> --dry-run [--name <ENV_NAME>] [--label <label>] [--interface <TypeName>] [--json]
+
+Preview the file shape for an outbound HTTP binding. App server code cannot call
+third-party internet URLs directly; external APIs, OAuth/token exchanges,
+webhooks, and secrets must go through bindings.
+
+Options:
+  --id <id>              Binding id and directory name, for example shopify-api.
+  --host <host>          Explicit lowercase host without protocol, wildcard, path, query, or port.
+  --name <ENV_NAME>      App env binding name. Defaults to the id converted to UPPER_SNAKE.
+  --label <label>        Human label for app.json. Defaults to a title-cased id.
+  --interface <TypeName> TypeScript interface and worker class name. Defaults to a PascalCase id plus Binding.
+  --dry-run              Required. Prints files and app.json binding entry without writing.
+  --json                 Emit stable JSON for coding agents.
+
+Examples:
+  tender app bindings outbound --id shopify --host admin.shopify.com --dry-run --json
+  tender app bindings outbound --id yotpo-api --host api.yotpo.com --name YOTPO --label "Yotpo API" --dry-run --json`;
+}
 function gitRemoteHelp() {
     return `Usage: tender app git remote <app-id> [--base-url <url>] [--token <token>] [--profile <name>] [--ttl <7d|14d|30d>] [--json]
 
@@ -605,6 +634,149 @@ Options:
 Examples:
   tender app publish watch artifact_123 --job job_123 --stream --json`;
 }
+function tenderCliCapabilities() {
+    return {
+        ok: true,
+        surface: "tender_cli",
+        description: "Agent-safe Tender App source, lifecycle, analytics, and local scaffold controls.",
+        discovery: {
+            primary: "tender capabilities --json",
+            layeredHelp: [
+                "tender --help",
+                "tender auth --help",
+                "tender app --help",
+                "tender app analytics --help",
+                "tender app bindings outbound --help",
+            ],
+        },
+        workflows: [
+            {
+                name: "authenticate",
+                when: "Before reading or changing remote Tender App records.",
+                commands: [
+                    "tender auth status --json",
+                    "tender auth login --device --profile edit-preview --artifact <artifact-id> --ttl 7d --json",
+                ],
+            },
+            {
+                name: "clone_or_bootstrap_existing_app",
+                when: "When the user wants to download or work on an existing app locally.",
+                commands: [
+                    "tender app init <artifact-id> --dir <dir> --dry-run --json",
+                    "tender app init <artifact-id> --dir <dir> --json",
+                ],
+                notes: [
+                    "init is the normal clone/bootstrap command.",
+                    "If the app already has artifact Git source, init fetches it and configures the tender remote.",
+                    "If no artifact Git source exists yet, init writes managed context/scaffold files and configures the tender remote.",
+                    "Use context fetch only when you already have a checkout and only need AGENTS.md, skills, or Tender context refreshed.",
+                ],
+            },
+            {
+                name: "local_edit_preview_publish",
+                when: "When editing app source from a local checkout.",
+                commands: [
+                    "tender app doctor --dir <dir> --json",
+                    "tender app git setup <artifact-id> --dir <dir> --dry-run --json",
+                    "git push tender main",
+                    "tender app preview <artifact-id> --commit $(git rev-parse HEAD) --stream --json",
+                    "tender app publish <artifact-id> --dry-run --json",
+                    "tender app publish <artifact-id> --commit $(git rev-parse HEAD) --confirm publish --stream --json",
+                ],
+                notes: [
+                    "Publishing is production-facing and requires explicit user intent.",
+                ],
+            },
+            {
+                name: "analytics_agent_loop",
+                when: "When understanding app analytics or creating saved charts.",
+                commands: [
+                    "tender app analytics capabilities <artifact-id> --include-catalog --range 30d --json",
+                    "tender app analytics query <artifact-id> --spec chart.json --json",
+                    "tender app analytics export query <artifact-id> --spec chart.json --format csv",
+                    "tender app analytics dashboards <artifact-id> --create \"Agent dashboard\" --dry-run --json",
+                    "tender app analytics charts create <artifact-id> --dashboard <dashboard-id> --title <title> --spec chart.json --dry-run --json",
+                ],
+                notes: [
+                    "Combine CLI capabilities with local source inspection of analytics calls.",
+                    "Validate chart specs with query before saving charts.",
+                ],
+            },
+            {
+                name: "outbound_http_binding",
+                when: "When app code needs external APIs, OAuth/token exchange, webhooks, provider SDKs, or secrets.",
+                commands: [
+                    "tender app bindings outbound --id <id> --host <host> --dry-run --json",
+                    "tender app generate-env-types --dir <dir> --json",
+                    "tender app doctor --dir <dir> --json",
+                ],
+                notes: [
+                    "src/server.ts cannot call third-party internet URLs directly.",
+                    "Outbound calls are blocked unless they go through a binding with outbound:http and explicit allowedHosts.",
+                ],
+            },
+        ],
+        commands: [
+            {
+                command: "tender capabilities --json",
+                purpose: "Discover this CLI surface in a machine-readable shape.",
+                requiresAuth: false,
+                writes: false,
+            },
+            {
+                command: "tender app init <artifact-id> --dir <dir> --json",
+                purpose: "Clone/bootstrap an existing Tender App checkout and configure context plus the tender Git remote.",
+                requiresAuth: true,
+                writes: true,
+                dryRun: true,
+            },
+            {
+                command: "tender app context fetch <artifact-id> --dir <dir> --json",
+                purpose: "Fetch managed AGENTS.md, skills, and Tender context into an existing checkout.",
+                requiresAuth: true,
+                writes: true,
+                dryRun: true,
+            },
+            {
+                command: "tender app bindings outbound --id <id> --host <host> --dry-run --json",
+                purpose: "Preview app.json and binding files for an outbound HTTP integration.",
+                requiresAuth: false,
+                writes: false,
+            },
+            {
+                command: "tender app analytics capabilities <artifact-id> --include-catalog --range 30d --json",
+                purpose: "Discover artifact-scoped analytics commands, chart specs, saved dashboards, and bounded observed catalog.",
+                requiresAuth: true,
+                writes: false,
+            },
+        ],
+        security: [
+            "Prefer artifact-scoped device tokens.",
+            "Do not write Tender tokens into the project checkout.",
+            "Do not call Tender HTTP APIs directly from agent workflows.",
+            "Do not put third-party fetch calls in src/server.ts; use outbound bindings.",
+            "Do not request direct query credentials or raw SQL for analytics.",
+        ],
+    };
+}
+function runCapabilities(command, io) {
+    const payload = tenderCliCapabilities();
+    if (command.json) {
+        io.stdout(JSON.stringify(payload, null, 2));
+    }
+    else {
+        io.stdout([
+            "Tender CLI capabilities",
+            "",
+            "Start with:",
+            "  tender capabilities --json",
+            "",
+            "Useful next help topics:",
+            ...payload.discovery.layeredHelp.map((topic) => `  ${topic}`),
+        ].join("\n"));
+    }
+    return 0;
+}
 function normalizeBaseUrl(value) {
     return (value ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
 }
@@ -746,7 +918,7 @@ function parseTtl(value) {
 }
 function parseGitRemoteArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts git remote" };
+        return { command: "help", topic: "app git remote" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -786,7 +958,7 @@ function parseGitRemoteArgs(args) {
         throw new TenderCliUsageError(`Unknown git remote option: ${arg}`);
     }
     return {
-        command: "artifacts git remote",
+        command: "app git remote",
         artifactId,
         baseUrl,
         flagToken,
@@ -806,7 +978,7 @@ function parseRemoteName(value) {
 }
 function parseGitSetupArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts git setup" };
+        return { command: "help", topic: "app git setup" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -867,7 +1039,7 @@ function parseGitSetupArgs(args) {
         throw new TenderCliUsageError(`Unknown git setup option: ${arg}`);
     }
     return {
-        command: "artifacts git setup",
+        command: "app git setup",
         artifactId,
         dir,
         remoteName,
@@ -899,7 +1071,7 @@ function isGitCredentialOperation(value) {
 }
 function parseGitCredentialArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts git credential" };
+        return { command: "help", topic: "app git credential" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -960,7 +1132,7 @@ function parseGitCredentialArgs(args) {
         throw new TenderCliUsageError(`Unknown git credential option: ${arg}`);
     }
     return {
-        command: "artifacts git credential",
+        command: "app git credential",
         artifactId,
         operation,
         baseUrl,
@@ -973,7 +1145,7 @@ function parseGitCredentialArgs(args) {
 }
 function parseValidateArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts validate" };
+        return { command: "help", topic: "app validate" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -1012,7 +1184,7 @@ function parseValidateArgs(args) {
         throw new TenderCliUsageError(`Unknown validate option: ${arg}`);
     }
     return {
-        command: "artifacts validate",
+        command: "app validate",
         artifactId,
         baseUrl,
         flagToken,
@@ -1023,7 +1195,7 @@ function parseValidateArgs(args) {
 }
 function parseBuildArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts build" };
+        return { command: "help", topic: "app build" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -1072,7 +1244,7 @@ function parseBuildArgs(args) {
         throw new TenderCliUsageError(`Unknown build option: ${arg}`);
     }
     return {
-        command: "artifacts build",
+        command: "app build",
         artifactId,
         commitSha,
         baseUrl,
@@ -1084,7 +1256,7 @@ function parseBuildArgs(args) {
 }
 function parsePreviewRebuildArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts preview rebuild" };
+        return { command: "help", topic: "app preview rebuild" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -1133,7 +1305,7 @@ function parsePreviewRebuildArgs(args) {
         throw new TenderCliUsageError(`Unknown preview rebuild option: ${arg}`);
     }
     return {
-        command: "artifacts preview rebuild",
+        command: "app preview rebuild",
         artifactId,
         commitSha,
         baseUrl,
@@ -1211,7 +1383,7 @@ function readPreviewLookupOptions(input) {
 }
 function parsePreviewStatusArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts preview status" };
+        return { command: "help", topic: "app preview status" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -1226,7 +1398,7 @@ function parsePreviewStatusArgs(args) {
         throw new TenderCliUsageError("preview status does not support --stream. Use tender app preview watch.");
     }
     return {
-        command: "artifacts preview status",
+        command: "app preview status",
         artifactId,
         commitSha: options.commitSha,
         jobId: options.jobId,
@@ -1238,7 +1410,7 @@ function parsePreviewStatusArgs(args) {
 }
 function parsePreviewWatchArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts preview watch" };
+        return { command: "help", topic: "app preview watch" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -1250,7 +1422,7 @@ function parsePreviewWatchArgs(args) {
         commandName: "preview watch",
     });
     return {
-        command: "artifacts preview watch",
+        command: "app preview watch",
         artifactId,
         commitSha: options.commitSha,
         jobId: options.jobId,
@@ -1263,7 +1435,7 @@ function parsePreviewWatchArgs(args) {
 }
 function parsePublishArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts publish" };
+        return { command: "help", topic: "app publish" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -1340,7 +1512,7 @@ function parsePublishArgs(args) {
         throw new TenderCliUsageError("publish requires --dry-run or --confirm publish.");
     }
     return {
-        command: "artifacts publish",
+        command: "app publish",
         artifactId,
         commitSha,
         baseUrl,
@@ -1410,7 +1582,7 @@ function readPublishJobLookupOptions(input) {
 }
 function parsePublishStatusArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts publish status" };
+        return { command: "help", topic: "app publish status" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -1425,7 +1597,7 @@ function parsePublishStatusArgs(args) {
         throw new TenderCliUsageError("publish status does not support --stream. Use tender app publish watch.");
     }
     return {
-        command: "artifacts publish status",
+        command: "app publish status",
         artifactId,
         jobId: options.jobId,
         baseUrl: options.baseUrl,
@@ -1436,7 +1608,7 @@ function parsePublishStatusArgs(args) {
 }
 function parsePublishWatchArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts publish watch" };
+        return { command: "help", topic: "app publish watch" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -1448,7 +1620,7 @@ function parsePublishWatchArgs(args) {
         commandName: "publish watch",
     });
     return {
-        command: "artifacts publish watch",
+        command: "app publish watch",
         artifactId,
         jobId: options.jobId,
         baseUrl: options.baseUrl,
@@ -1460,7 +1632,7 @@ function parsePublishWatchArgs(args) {
 }
 function parseArtifactsListArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts list" };
+        return { command: "help", topic: "app list" };
     }
     let baseUrl = null;
     let flagToken = null;
@@ -1490,7 +1662,7 @@ function parseArtifactsListArgs(args) {
         throw new TenderCliUsageError(`Unknown app list option: ${arg}`);
     }
     return {
-        command: "artifacts list",
+        command: "app list",
         baseUrl,
         flagToken,
         profileName,
@@ -1499,7 +1671,7 @@ function parseArtifactsListArgs(args) {
 }
 function parseArtifactsCreateArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts create" };
+        return { command: "help", topic: "app create" };
     }
     let name = "";
     let targetPackId = null;
@@ -1562,7 +1734,7 @@ function parseArtifactsCreateArgs(args) {
         throw new TenderCliUsageError("--name is required. Example: tender app create --name \"Exit Intent Widget\" --json");
     }
     return {
-        command: "artifacts create",
+        command: "app create",
         name: name.trim(),
         targetPackId,
         targetPackVersion,
@@ -1574,7 +1746,7 @@ function parseArtifactsCreateArgs(args) {
 }
 function parseArtifactsUpdateArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts update" };
+        return { command: "help", topic: "app update" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -1621,7 +1793,7 @@ function parseArtifactsUpdateArgs(args) {
         throw new TenderCliUsageError("--name is required. Example: tender app update artifact_123 --name \"Sale Widget\" --json");
     }
     return {
-        command: "artifacts update",
+        command: "app update",
         artifactId,
         name: name.trim(),
         baseUrl,
@@ -1632,7 +1804,7 @@ function parseArtifactsUpdateArgs(args) {
 }
 function parseArtifactsInitArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts init" };
+        return { command: "help", topic: "app init" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -1698,7 +1870,7 @@ function parseArtifactsInitArgs(args) {
         throw new TenderCliUsageError(`Unknown app init option: ${arg}`);
     }
     return {
-        command: "artifacts init",
+        command: "app init",
         artifactId,
         dir,
         remoteName,
@@ -1713,7 +1885,7 @@ function parseArtifactsInitArgs(args) {
 }
 function parseContextFetchArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts context fetch" };
+        return { command: "help", topic: "app context fetch" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -1767,7 +1939,7 @@ function parseContextFetchArgs(args) {
         throw new TenderCliUsageError(`Unknown context fetch option: ${arg}`);
     }
     return {
-        command: "artifacts context fetch",
+        command: "app context fetch",
         artifactId,
         dir,
         baseUrl,
@@ -1780,7 +1952,7 @@ function parseContextFetchArgs(args) {
 }
 function parseContextStatusArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts context status" };
+        return { command: "help", topic: "app context status" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -1824,7 +1996,7 @@ function parseContextStatusArgs(args) {
         throw new TenderCliUsageError(`Unknown context status option: ${arg}`);
     }
     return {
-        command: "artifacts context status",
+        command: "app context status",
         artifactId,
         dir,
         baseUrl,
@@ -1835,7 +2007,7 @@ function parseContextStatusArgs(args) {
 }
 function parseContextRefreshArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts context refresh" };
+        return { command: "help", topic: "app context refresh" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -1889,7 +2061,7 @@ function parseContextRefreshArgs(args) {
         throw new TenderCliUsageError(`Unknown context refresh option: ${arg}`);
     }
     return {
-        command: "artifacts context refresh",
+        command: "app context refresh",
         artifactId,
         dir,
         baseUrl,
@@ -2020,7 +2192,7 @@ function parseAuthStatusArgs(args) {
 }
 function parseGenerateEnvTypesArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts generate-env-types" };
+        return { command: "help", topic: "app generate-env-types" };
     }
     let dir = ".";
     let json = false;
@@ -2042,7 +2214,7 @@ function parseGenerateEnvTypesArgs(args) {
         throw new TenderCliUsageError(`Unknown generate-env-types option: ${arg}`);
     }
     return {
-        command: "artifacts generate-env-types",
+        command: "app generate-env-types",
         dir,
         json,
     };
@@ -2071,6 +2243,127 @@ function parseRequiredFlagValue(value, flag) {
     }
     return value;
 }
+function parseCapabilitiesArgs(args) {
+    if (args.includes("--help") || args.includes("-h")) {
+        return { command: "help", topic: "capabilities" };
+    }
+    let json = false;
+    for (const arg of args) {
+        if (arg === "--json") {
+            json = true;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown capabilities option: ${arg}`);
+    }
+    return { command: "capabilities", json };
+}
+function parseBindingId(value) {
+    if (!value || value.startsWith("-")) {
+        throw new TenderCliUsageError("--id requires a binding id.");
+    }
+    if (!/^[a-z][a-z0-9-]*$/.test(value)) {
+        throw new TenderCliUsageError("--id must start with a lowercase letter and contain only lowercase letters, numbers, and dashes. Example: shopify-api");
+    }
+    return value;
+}
+function parseAllowedHost(value) {
+    if (!value || value.startsWith("-")) {
+        throw new TenderCliUsageError("--host requires a hostname.");
+    }
+    if (value.length === 0 ||
+        value.includes("/") ||
+        value.includes(":") ||
+        value.includes("?") ||
+        value.includes("#") ||
+        value.includes("*") ||
+        value !== value.toLowerCase()) {
+        throw new TenderCliUsageError("--host must be an explicit lowercase hostname without protocol, wildcard, path, query, or port. Example: api.example.com");
+    }
+    return value;
+}
+function parseEnvBindingName(value) {
+    if (!value || value.startsWith("-")) {
+        throw new TenderCliUsageError("--name requires an env binding name.");
+    }
+    if (!/^[A-Z][A-Z0-9_]*$/.test(value)) {
+        throw new TenderCliUsageError("--name must be UPPER_SNAKE_CASE. Example: SHOPIFY_API");
+    }
+    return value;
+}
+function parseTypeName(value, flag) {
+    if (!value || value.startsWith("-")) {
+        throw new TenderCliUsageError(`${flag} requires a TypeScript type name.`);
+    }
+    if (!/^[A-Z][A-Za-z0-9]*$/.test(value)) {
+        throw new TenderCliUsageError(`${flag} must be a PascalCase TypeScript type name. Example: ShopifyApiBinding`);
+    }
+    return value;
+}
+function parseBindingsOutboundArgs(args) {
+    if (args.includes("--help") || args.includes("-h")) {
+        return { command: "help", topic: "app bindings outbound" };
+    }
+    let id = null;
+    let host = null;
+    let name = null;
+    let label = null;
+    let interfaceName = null;
+    let dryRun = false;
+    let json = false;
+    for (let index = 0; index < args.length; index += 1) {
+        const arg = args[index];
+        if (arg === "--json") {
+            json = true;
+            continue;
+        }
+        if (arg === "--dry-run") {
+            dryRun = true;
+            continue;
+        }
+        if (arg === "--id") {
+            id = parseBindingId(args[index + 1]);
+            index += 1;
+            continue;
+        }
+        if (arg === "--host") {
+            host = parseAllowedHost(args[index + 1]);
+            index += 1;
+            continue;
+        }
+        if (arg === "--name") {
+            name = parseEnvBindingName(args[index + 1]);
+            index += 1;
+            continue;
+        }
+        if (arg === "--label") {
+            label = parseRequiredFlagValue(args[index + 1], "--label");
+            index += 1;
+            continue;
+        }
+        if (arg === "--interface") {
+            interfaceName = parseTypeName(args[index + 1], "--interface");
+            index += 1;
+            continue;
+        }
+        throw new TenderCliUsageError(`Unknown bindings outbound option: ${arg}`);
+    }
+    if (!id || !host) {
+        throw new TenderCliUsageError("--id and --host are required. Example: tender app bindings outbound --id shopify --host admin.shopify.com --dry-run --json");
+    }
+    if (!dryRun) {
+        throw new TenderCliUsageError("bindings outbound currently requires --dry-run. Example: tender app bindings outbound --id shopify --host admin.shopify.com --dry-run --json");
+    }
+    return {
+        command: "app bindings outbound",
+        id,
+        host,
+        name,
+        label,
+        interfaceName,
+        dryRun,
+        json,
+    };
+}
 function parseAnalyticsCommonArgs(args, startIndex) {
     let baseUrl = null;
     let flagToken = null;
@@ -2104,7 +2397,7 @@ function parseAnalyticsCommonArgs(args, startIndex) {
 }
 function parseAnalyticsSummaryArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts analytics summary" };
+        return { command: "help", topic: "app analytics summary" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -2121,11 +2414,11 @@ function parseAnalyticsSummaryArgs(args) {
         }
         throw new TenderCliUsageError(`Unknown analytics summary option: ${arg}`);
     }
-    return { command: "artifacts analytics summary", artifactId, range, ...parsed };
+    return { command: "app analytics summary", artifactId, range, ...parsed };
 }
 function parseAnalyticsQueryArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts analytics query" };
+        return { command: "help", topic: "app analytics query" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -2145,11 +2438,11 @@ function parseAnalyticsQueryArgs(args) {
     if (!specPath) {
         throw new TenderCliUsageError("--spec is required. Example: tender app analytics query artifact_123 --spec chart.json --json");
     }
-    return { command: "artifacts analytics query", artifactId, specPath, ...parsed };
+    return { command: "app analytics query", artifactId, specPath, ...parsed };
 }
 function parseAnalyticsCapabilitiesArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts analytics capabilities" };
+        return { command: "help", topic: "app analytics capabilities" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -2172,7 +2465,7 @@ function parseAnalyticsCapabilitiesArgs(args) {
         throw new TenderCliUsageError(`Unknown analytics capabilities option: ${arg}`);
     }
     return {
-        command: "artifacts analytics capabilities",
+        command: "app analytics capabilities",
         artifactId,
         includeCatalog,
         range,
@@ -2181,7 +2474,7 @@ function parseAnalyticsCapabilitiesArgs(args) {
 }
 function parseAnalyticsSuggestionsArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts analytics suggestions" };
+        return { command: "help", topic: "app analytics suggestions" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -2198,11 +2491,11 @@ function parseAnalyticsSuggestionsArgs(args) {
         }
         throw new TenderCliUsageError(`Unknown analytics suggestions option: ${arg}`);
     }
-    return { command: "artifacts analytics suggestions", artifactId, range, ...parsed };
+    return { command: "app analytics suggestions", artifactId, range, ...parsed };
 }
 function parseAnalyticsDashboardsArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts analytics dashboards" };
+        return { command: "help", topic: "app analytics dashboards" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -2227,11 +2520,11 @@ function parseAnalyticsDashboardsArgs(args) {
     if (dryRun && !name) {
         throw new TenderCliUsageError("--dry-run is only valid with --create. Example: tender app analytics dashboards artifact_123 --create \"Agent dashboard\" --dry-run --json");
     }
-    return { command: "artifacts analytics dashboards", artifactId, name, dryRun, ...parsed };
+    return { command: "app analytics dashboards", artifactId, name, dryRun, ...parsed };
 }
 function parseAnalyticsExportCatalogArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts analytics export catalog" };
+        return { command: "help", topic: "app analytics export catalog" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -2259,7 +2552,7 @@ function parseAnalyticsExportCatalogArgs(args) {
         throw new TenderCliUsageError(`Unknown analytics export catalog option: ${arg}`);
     }
     return {
-        command: "artifacts analytics export catalog",
+        command: "app analytics export catalog",
         artifactId,
         format,
         range,
@@ -2268,7 +2561,7 @@ function parseAnalyticsExportCatalogArgs(args) {
 }
 function parseAnalyticsExportQueryArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts analytics export query" };
+        return { command: "help", topic: "app analytics export query" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -2299,7 +2592,7 @@ function parseAnalyticsExportQueryArgs(args) {
         throw new TenderCliUsageError("--spec is required. Example: tender app analytics export query artifact_123 --spec chart.json --format csv");
     }
     return {
-        command: "artifacts analytics export query",
+        command: "app analytics export query",
         artifactId,
         specPath,
         format,
@@ -2308,7 +2601,7 @@ function parseAnalyticsExportQueryArgs(args) {
 }
 function parseAnalyticsChartsCreateArgs(args) {
     if (args.includes("--help") || args.includes("-h")) {
-        return { command: "help", topic: "artifacts analytics charts create" };
+        return { command: "help", topic: "app analytics charts create" };
     }
     const artifactId = args[0];
     if (!artifactId || artifactId.startsWith("-")) {
@@ -2346,7 +2639,7 @@ function parseAnalyticsChartsCreateArgs(args) {
         throw new TenderCliUsageError("--dashboard, --title, and --spec are required. Example: tender app analytics charts create artifact_123 --dashboard analytics_dashboard_123 --title \"Signup funnel\" --spec chart.json --json");
     }
     return {
-        command: "artifacts analytics charts create",
+        command: "app analytics charts create",
         artifactId,
         dashboardId,
         title,
@@ -2359,6 +2652,9 @@ function parseTenderArgs(args) {
     if (args.length === 0 || args[0] === "--help" || args[0] === "-h") {
         return { command: "help", topic: "root" };
     }
+    if (args[0] === "capabilities") {
+        return parseCapabilitiesArgs(args.slice(1));
+    }
     if (args[0] === "auth") {
         if (args[1] === undefined || args[1] === "--help" || args[1] === "-h") {
             return { command: "help", topic: "auth" };
@@ -2374,15 +2670,14 @@ function parseTenderArgs(args) {
     if (args[0] === "apps") {
         throw new TenderCliUsageError("Unknown command: apps. Use `tender app ...` for Tender App workflows.");
     }
-    if (args[0] !== "artifacts" && args[0] !== "app") {
+    if (args[0] !== "app") {
         throw new TenderCliUsageError(`Unknown command: ${args[0]}`);
     }
     const resourceArgs = normalizeAppArgs(args);
-    const resourceName = args[0] === "app" ? "app" : "artifacts";
     if (resourceArgs[1] === undefined ||
         resourceArgs[1] === "--help" ||
         resourceArgs[1] === "-h") {
-        return { command: "help", topic: "artifacts" };
+        return { command: "help", topic: "app" };
     }
     if (resourceArgs[1] !== "doctor") {
         if (resourceArgs[1] === "list") {
@@ -2406,11 +2701,20 @@ function parseTenderArgs(args) {
         if (resourceArgs[1] === "context" && resourceArgs[2] === "refresh") {
             return parseContextRefreshArgs(resourceArgs.slice(3));
         }
+        if (resourceArgs[1] === "bindings" && resourceArgs[2] === "outbound") {
+            return parseBindingsOutboundArgs(resourceArgs.slice(3));
+        }
+        if (resourceArgs[1] === "bindings" &&
+            (resourceArgs[2] === undefined ||
+                resourceArgs[2] === "--help" ||
+                resourceArgs[2] === "-h")) {
+            return { command: "help", topic: "app bindings outbound" };
+        }
         if (resourceArgs[1] === "analytics" &&
             (resourceArgs[2] === undefined ||
                 resourceArgs[2] === "--help" ||
                 resourceArgs[2] === "-h")) {
-            return { command: "help", topic: "artifacts analytics" };
+            return { command: "help", topic: "app analytics" };
         }
         if (resourceArgs[1] === "analytics" && resourceArgs[2] === "summary") {
             return parseAnalyticsSummaryArgs(resourceArgs.slice(3));
@@ -2432,7 +2736,7 @@ function parseTenderArgs(args) {
             (resourceArgs[3] === undefined ||
                 resourceArgs[3] === "--help" ||
                 resourceArgs[3] === "-h")) {
-            return { command: "help", topic: "artifacts analytics export" };
+            return { command: "help", topic: "app analytics export" };
         }
         if (resourceArgs[1] === "analytics" &&
             resourceArgs[2] === "export" &&
@@ -2453,7 +2757,7 @@ function parseTenderArgs(args) {
             (resourceArgs[2] === undefined ||
                 resourceArgs[2] === "--help" ||
                 resourceArgs[2] === "-h")) {
-            return { command: "help", topic: "artifacts" };
+            return { command: "help", topic: "app" };
         }
         if (resourceArgs[1] === "git" && resourceArgs[2] === "remote") {
             return parseGitRemoteArgs(resourceArgs.slice(3));
@@ -2486,7 +2790,7 @@ function parseTenderArgs(args) {
             (resourceArgs[2] === undefined ||
                 resourceArgs[2] === "--help" ||
                 resourceArgs[2] === "-h")) {
-            return { command: "help", topic: "artifacts" };
+            return { command: "help", topic: "app" };
         }
         if (resourceArgs[1] === "publish" && resourceArgs[2] === "status") {
             return parsePublishStatusArgs(resourceArgs.slice(3));
@@ -2501,13 +2805,13 @@ function parseTenderArgs(args) {
             (resourceArgs[2] === undefined ||
                 resourceArgs[2] === "--help" ||
                 resourceArgs[2] === "-h")) {
-            return { command: "help", topic: "artifacts" };
+            return { command: "help", topic: "app" };
         }
-        throw new TenderCliUsageError(`Unknown ${resourceName} command: ${resourceArgs[1]}`);
+        throw new TenderCliUsageError(`Unknown app command: ${resourceArgs[1]}`);
     }
     const rest = resourceArgs.slice(2);
     if (rest.includes("--help") || rest.includes("-h")) {
-        return { command: "help", topic: "artifacts doctor" };
+        return { command: "help", topic: "app doctor" };
     }
     let dir = ".";
     let json = false;
@@ -2529,7 +2833,7 @@ function parseTenderArgs(args) {
         throw new TenderCliUsageError(`Unknown doctor option: ${arg}`);
     }
     return {
-        command: "artifacts doctor",
+        command: "app doctor",
         dir,
         json,
     };
@@ -2545,9 +2849,9 @@ function normalizeAppArgs(args) {
         args[2] !== "watch" &&
         args[2] !== "--help" &&
         args[2] !== "-h") {
-        return ["artifacts", "preview", "rebuild", ...args.slice(2)];
+        return ["app", "preview", "rebuild", ...args.slice(2)];
     }
-    return ["artifacts", ...args.slice(1)];
+    return args;
 }
 function formatDoctorHuman(result) {
     if (result.diagnostics.length === 0) {
@@ -2659,6 +2963,98 @@ async function runGenerateEnvTypes(command, io) {
     }
     return 0;
 }
+function titleCaseBindingId(id) {
+    return id
+        .split("-")
+        .filter(Boolean)
+        .map((part) => `${part.slice(0, 1).toUpperCase()}${part.slice(1)}`)
+        .join(" ");
+}
+function pascalCaseBindingId(id) {
+    return id
+        .split("-")
+        .filter(Boolean)
+        .map((part) => `${part.slice(0, 1).toUpperCase()}${part.slice(1)}`)
+        .join("");
+}
+function envNameFromBindingId(id) {
+    return id.toUpperCase().replaceAll("-", "_");
+}
+function createOutboundBindingShape(command) {
+    const interfaceName = command.interfaceName ?? `${pascalCaseBindingId(command.id)}Binding`;
+    const label = command.label ?? titleCaseBindingId(command.id);
+    const name = command.name ?? envNameFromBindingId(command.id);
+    const bindingDirectory = `bindings/${command.id}`;
+    const bindingJson = {
+        id: command.id,
+        entry: "src/worker.ts",
+        entrypoint: interfaceName,
+        interface: interfaceName,
+        permissions: ["outbound:http"],
+        allowedHosts: [command.host],
+    };
+    const appJsonBinding = {
+        id: command.id,
+        label,
+        name,
+        source: bindingDirectory,
+        interface: interfaceName,
+    };
+    const interfaceSource = `export interface ${interfaceName} {\n  request(input: RequestInfo | URL, init?: RequestInit): Promise<Response>;\n}\n`;
+    const workerSource = `import { WorkerEntrypoint } from "cloudflare:workers";\n\nexport class ${interfaceName} extends WorkerEntrypoint {\n  async request(input: RequestInfo | URL, init?: RequestInit): Promise<Response> {\n    const url = typeof input === "string" || input instanceof URL ? new URL(input) : new URL(input.url);\n    if (url.hostname !== "${command.host}") {\n      throw new Error("Host is not allowed for this binding.");\n    }\n    return fetch(url, init);\n  }\n}\n`;
+    return {
+        ok: true,
+        command: command.command,
+        dryRun: command.dryRun,
+        binding: {
+            id: command.id,
+            name,
+            label,
+            interface: interfaceName,
+            allowedHosts: [command.host],
+            permissions: ["outbound:http"],
+        },
+        appJsonBinding,
+        files: [
+            {
+                path: `${bindingDirectory}/binding.json`,
+                content: `${JSON.stringify(bindingJson, null, 2)}\n`,
+            },
+            {
+                path: `${bindingDirectory}/interface.d.ts`,
+                content: interfaceSource,
+            },
+            {
+                path: `${bindingDirectory}/src/worker.ts`,
+                content: workerSource,
+            },
+        ],
+        next: [
+            "Add appJsonBinding to app.json bindings[].",
+            `Call this binding from src/server.ts through env.${name}; do not fetch third-party URLs directly from src/server.ts.`,
+            "Run tender app generate-env-types --dir . --json.",
+            "Run tender app doctor --dir . --json.",
+        ],
+    };
+}
+function runBindingsOutbound(command, io) {
+    const payload = createOutboundBindingShape(command);
+    if (command.json) {
+        io.stdout(JSON.stringify(payload, null, 2));
+    }
+    else {
+        io.stdout([
+            `Outbound binding dry run: ${payload.binding.id}`,
+            `app.json binding name: ${payload.binding.name}`,
+            `allowed host: ${payload.binding.allowedHosts.join(", ")}`,
+            "files:",
+            ...payload.files.map((file) => `  ${file.path}`),
+            "next:",
+            ...payload.next.map((step) => `  ${step}`),
+        ].join("\n"));
+    }
+    return 0;
+}
 async function parseJsonResponse(response) {
     return (await response.json().catch(() => null));
 }
@@ -4972,7 +5368,10 @@ export async function runTenderCli(args, io = {
     try {
         const command = parseTenderArgs(args);
         if (command.command === "help") {
-            if (command.topic === "auth login") {
+            if (command.topic === "capabilities") {
+                io.stdout(capabilitiesHelp());
+            }
+            else if (command.topic === "auth login") {
                 io.stdout(authLoginHelp());
             }
             else if (command.topic === "auth status") {
@@ -4981,189 +5380,198 @@ export async function runTenderCli(args, io = {
             else if (command.topic === "auth") {
                 io.stdout(authHelp());
             }
-            else if (command.topic === "artifacts create") {
+            else if (command.topic === "app create") {
                 io.stdout(artifactsCreateHelp());
             }
-            else if (command.topic === "artifacts update") {
+            else if (command.topic === "app update") {
                 io.stdout(artifactsUpdateHelp());
             }
-            else if (command.topic === "artifacts init") {
+            else if (command.topic === "app init") {
                 io.stdout(artifactsInitHelp());
             }
-            else if (command.topic === "artifacts doctor") {
+            else if (command.topic === "app doctor") {
                 io.stdout(doctorHelp());
             }
-            else if (command.topic === "artifacts generate-env-types") {
+            else if (command.topic === "app generate-env-types") {
                 io.stdout(generateEnvTypesHelp());
             }
-            else if (command.topic === "artifacts list") {
+            else if (command.topic === "app list") {
                 io.stdout(artifactsListHelp());
             }
-            else if (command.topic === "artifacts context fetch") {
+            else if (command.topic === "app context fetch") {
                 io.stdout(artifactsContextFetchHelp());
             }
-            else if (command.topic === "artifacts context status") {
+            else if (command.topic === "app context status") {
                 io.stdout(artifactsContextStatusHelp());
             }
-            else if (command.topic === "artifacts context refresh") {
+            else if (command.topic === "app context refresh") {
                 io.stdout(artifactsContextRefreshHelp());
             }
-            else if (command.topic === "artifacts git setup") {
+            else if (command.topic === "app bindings outbound") {
+                io.stdout(bindingsOutboundHelp());
+            }
+            else if (command.topic === "app git setup") {
                 io.stdout(gitSetupHelp());
             }
-            else if (command.topic === "artifacts git credential") {
+            else if (command.topic === "app git credential") {
                 io.stdout(gitCredentialHelp());
             }
-            else if (command.topic === "artifacts git remote") {
+            else if (command.topic === "app git remote") {
                 io.stdout(gitRemoteHelp());
             }
-            else if (command.topic === "artifacts validate") {
+            else if (command.topic === "app validate") {
                 io.stdout(validateHelp());
             }
-            else if (command.topic === "artifacts build") {
+            else if (command.topic === "app build") {
                 io.stdout(buildHelp());
             }
-            else if (command.topic === "artifacts preview rebuild") {
+            else if (command.topic === "app preview rebuild") {
                 io.stdout(previewRebuildHelp());
             }
-            else if (command.topic === "artifacts preview status") {
+            else if (command.topic === "app preview status") {
                 io.stdout(previewStatusHelp());
             }
-            else if (command.topic === "artifacts preview watch") {
+            else if (command.topic === "app preview watch") {
                 io.stdout(previewWatchHelp());
             }
-            else if (command.topic === "artifacts publish") {
+            else if (command.topic === "app publish") {
                 io.stdout(publishHelp());
             }
-            else if (command.topic === "artifacts publish status") {
+            else if (command.topic === "app publish status") {
                 io.stdout(publishStatusHelp());
             }
-            else if (command.topic === "artifacts publish watch") {
+            else if (command.topic === "app publish watch") {
                 io.stdout(publishWatchHelp());
             }
-            else if (command.topic === "artifacts analytics") {
+            else if (command.topic === "app analytics") {
                 io.stdout(analyticsHelp());
             }
-            else if (command.topic === "artifacts analytics summary") {
+            else if (command.topic === "app analytics summary") {
                 io.stdout(analyticsSummaryHelp());
             }
-            else if (command.topic === "artifacts analytics query") {
+            else if (command.topic === "app analytics query") {
                 io.stdout(analyticsQueryHelp());
             }
-            else if (command.topic === "artifacts analytics capabilities") {
+            else if (command.topic === "app analytics capabilities") {
                 io.stdout(analyticsCapabilitiesHelp());
             }
-            else if (command.topic === "artifacts analytics suggestions") {
+            else if (command.topic === "app analytics suggestions") {
                 io.stdout(analyticsSuggestionsHelp());
             }
-            else if (command.topic === "artifacts analytics dashboards") {
+            else if (command.topic === "app analytics dashboards") {
                 io.stdout(analyticsDashboardsHelp());
             }
-            else if (command.topic === "artifacts analytics export") {
+            else if (command.topic === "app analytics export") {
                 io.stdout(analyticsExportHelp());
             }
-            else if (command.topic === "artifacts analytics export catalog") {
+            else if (command.topic === "app analytics export catalog") {
                 io.stdout(analyticsExportCatalogHelp());
             }
-            else if (command.topic === "artifacts analytics export query") {
+            else if (command.topic === "app analytics export query") {
                 io.stdout(analyticsExportQueryHelp());
             }
-            else if (command.topic === "artifacts analytics charts create") {
+            else if (command.topic === "app analytics charts create") {
                 io.stdout(analyticsChartsCreateHelp());
             }
-            else if (command.topic === "artifacts") {
-                io.stdout(artifactsHelp());
+            else if (command.topic === "app") {
+                io.stdout(appHelp());
             }
             else {
                 io.stdout(rootHelp());
             }
             return 0;
         }
+        if (command.command === "capabilities") {
+            return runCapabilities(command, io);
+        }
         if (command.command === "auth login") {
             return await runAuthLogin(command, io, runtime);
         }
         if (command.command === "auth status") {
             return await runAuthStatus(command, io, runtime);
         }
-        if (command.command === "artifacts list") {
+        if (command.command === "app list") {
             return await runArtifactsList(command, io, runtime);
         }
-        if (command.command === "artifacts create") {
+        if (command.command === "app create") {
             return await runArtifactsCreate(command, io, runtime);
         }
-        if (command.command === "artifacts update") {
+        if (command.command === "app update") {
             return await runArtifactsUpdate(command, io, runtime);
         }
-        if (command.command === "artifacts init") {
+        if (command.command === "app init") {
             return await runArtifactsInit(command, io, runtime);
         }
-        if (command.command === "artifacts generate-env-types") {
+        if (command.command === "app generate-env-types") {
             return await runGenerateEnvTypes(command, io);
         }
-        if (command.command === "artifacts context fetch") {
+        if (command.command === "app context fetch") {
             return await runContextFetch(command, io, runtime);
         }
-        if (command.command === "artifacts context status") {
+        if (command.command === "app context status") {
             return await runContextStatus(command, io, runtime);
         }
-        if (command.command === "artifacts context refresh") {
+        if (command.command === "app context refresh") {
             return await runContextFetch(command, io, runtime);
         }
-        if (command.command === "artifacts git setup") {
+        if (command.command === "app bindings outbound") {
+            return runBindingsOutbound(command, io);
+        }
+        if (command.command === "app git setup") {
             return await runGitSetup(command, io, runtime);
         }
-        if (command.command === "artifacts git credential") {
+        if (command.command === "app git credential") {
             return await runGitCredential(command, io, runtime);
         }
-        if (command.command === "artifacts validate") {
+        if (command.command === "app validate") {
             return await runValidate(command, io, runtime);
         }
-        if (command.command === "artifacts build") {
+        if (command.command === "app build") {
             return await runBuild(command, io, runtime);
         }
-        if (command.command === "artifacts preview rebuild") {
+        if (command.command === "app preview rebuild") {
             return await runPreviewRebuild(command, io, runtime);
         }
-        if (command.command === "artifacts preview status") {
+        if (command.command === "app preview status") {
             return await runPreviewStatus(command, io, runtime);
         }
-        if (command.command === "artifacts preview watch") {
+        if (command.command === "app preview watch") {
             return await runPreviewWatch(command, io, runtime);
         }
-        if (command.command === "artifacts publish") {
+        if (command.command === "app publish") {
             return await runPublish(command, io, runtime);
         }
-        if (command.command === "artifacts publish status") {
+        if (command.command === "app publish status") {
             return await runPublishStatus(command, io, runtime);
         }
-        if (command.command === "artifacts publish watch") {
+        if (command.command === "app publish watch") {
             return await runPublishWatch(command, io, runtime);
         }
-        if (command.command === "artifacts analytics summary") {
+        if (command.command === "app analytics summary") {
             return await runAnalyticsSummary(command, io, runtime);
         }
-        if (command.command === "artifacts analytics query") {
+        if (command.command === "app analytics query") {
             return await runAnalyticsQuery(command, io, runtime);
         }
-        if (command.command === "artifacts analytics capabilities") {
+        if (command.command === "app analytics capabilities") {
             return await runAnalyticsCapabilities(command, io, runtime);
         }
-        if (command.command === "artifacts analytics suggestions") {
+        if (command.command === "app analytics suggestions") {
             return await runAnalyticsSuggestions(command, io, runtime);
         }
-        if (command.command === "artifacts analytics dashboards") {
+        if (command.command === "app analytics dashboards") {
             return await runAnalyticsDashboards(command, io, runtime);
         }
-        if (command.command === "artifacts analytics export catalog") {
+        if (command.command === "app analytics export catalog") {
             return await runAnalyticsExportCatalog(command, io, runtime);
         }
-        if (command.command === "artifacts analytics export query") {
+        if (command.command === "app analytics export query") {
             return await runAnalyticsExportQuery(command, io, runtime);
         }
-        if (command.command === "artifacts analytics charts create") {
+        if (command.command === "app analytics charts create") {
             return await runAnalyticsChartsCreate(command, io, runtime);
         }
-        if (command.command === "artifacts git remote") {
+        if (command.command === "app git remote") {
             return await runGitRemote(command, io, runtime);
         }
         return await runDoctor(command, io);
@@ -5176,7 +5584,7 @@ export async function runTenderCli(args, io = {
 }
 const currentFile = fileURLToPath(import.meta.url);
 function shouldReadEntrypointStdin(args) {
-    return ((args[0] === "artifacts" || args[0] === "app") &&
+    return (args[0] === "app" &&
         ((args[1] === "git" && args[2] === "credential") ||
             (args[1] === "analytics" && args.includes("--spec") && args.includes("-"))));
 }