Add supermodel share command (#56)

* Add supermodel share command and POST /v1/share API method

supermodel share runs the same health audit pipeline and uploads the
rendered Markdown report to the Supermodel API, returning a public URL
and a ready-to-paste README badge:

  Report: https://supermodeltools.com/s/abc123

  Add this badge to your README:

  [![Supermodel](https://img.shields.io/badge/supermodel-HEALTHY-blueviolet)](…)

Implementation:
- api.ShareRequest / ShareResponse types in internal/api/types.go
- api.Client.Share() method using the existing request() helper
- jsonBody() helper for JSON POST bodies
- cmd/share.go wires the command; reuses resolveAuditDir, shareAnalyze,
  and runImpactForShare (same pattern as cmd/audit.go)

Note: requires POST /v1/share endpoint on the backend to return URLs.

Closes #52

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* Fix staticcheck SA5011: add return after t.Fatal in tests

Staticcheck cannot see that t.Fatal halts goroutine execution, so it
flags the nil-checked pointer accesses immediately after as potential
nil dereferences. Adding unreachable return statements satisfies it.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: greynewell

cmd/share.go

@@ -0,0 +1,140 @@
+package cmd
+
+import (
+	"bytes"
+	"context"
+	"fmt"
+	"os"
+	"time"
+
+	"github.com/spf13/cobra"
+
+	"github.com/supermodeltools/cli/internal/api"
+	"github.com/supermodeltools/cli/internal/audit"
+	"github.com/supermodeltools/cli/internal/cache"
+	"github.com/supermodeltools/cli/internal/config"
+)
+
+func init() {
+	var dir string
+
+	c := &cobra.Command{
+		Use:   "share",
+		Short: "Upload your codebase health report and get a public URL",
+		Long: `Runs a health audit and uploads the report to supermodeltools.com,
+returning a short public URL you can share or embed as a README badge.
+
+Example:
+
+  supermodel share
+  supermodel share --dir ./path/to/project`,
+		RunE: func(cmd *cobra.Command, _ []string) error {
+			return runShare(cmd, dir)
+		},
+		SilenceUsage: true,
+	}
+
+	c.Flags().StringVar(&dir, "dir", "", "project directory (default: current working directory)")
+	rootCmd.AddCommand(c)
+}
+
+func runShare(cmd *cobra.Command, dir string) error {
+	rootDir, projectName, err := resolveAuditDir(dir)
+	if err != nil {
+		return err
+	}
+
+	cfg, err := config.Load()
+	if err != nil {
+		return err
+	}
+
+	// Run the full audit pipeline.
+	ir, err := shareAnalyze(cmd, cfg, rootDir, projectName)
+	if err != nil {
+		return err
+	}
+
+	report := audit.Analyze(ir, projectName)
+
+	impact, err := runImpactForShare(cmd, cfg, rootDir)
+	if err != nil {
+		fmt.Fprintf(cmd.ErrOrStderr(), "Warning: impact analysis unavailable: %v\n", err)
+	} else {
+		audit.EnrichWithImpact(report, impact)
+	}
+
+	// Render to Markdown.
+	var buf bytes.Buffer
+	audit.RenderHealth(&buf, report)
+
+	// Upload and get public URL.
+	client := api.New(cfg)
+	ctx, cancel := context.WithTimeout(context.Background(), 2*time.Minute)
+	defer cancel()
+
+	fmt.Fprintln(cmd.ErrOrStderr(), "Uploading report…")
+	url, err := client.Share(ctx, api.ShareRequest{
+		ProjectName: projectName,
+		Status:      string(report.Status),
+		Content:     buf.String(),
+	})
+	if err != nil {
+		return fmt.Errorf("upload failed: %w", err)
+	}
+
+	fmt.Fprintf(cmd.OutOrStdout(), "\n  Report: %s\n\n", url)
+	fmt.Fprintf(cmd.OutOrStdout(), "  Add this badge to your README:\n\n")
+	fmt.Fprintf(cmd.OutOrStdout(),
+		"  [![Supermodel](https://img.shields.io/badge/supermodel-%s-blueviolet)](%s)\n\n",
+		report.Status, url)
+
+	return nil
+}
+
+func shareAnalyze(cmd *cobra.Command, cfg *config.Config, rootDir, projectName string) (*api.SupermodelIR, error) {
+	if err := cfg.RequireAPIKey(); err != nil {
+		return nil, err
+	}
+
+	fmt.Fprintln(cmd.ErrOrStderr(), "Creating repository archive…")
+	zipPath, err := audit.CreateZip(rootDir)
+	if err != nil {
+		return nil, fmt.Errorf("create archive: %w", err)
+	}
+	defer func() { _ = os.Remove(zipPath) }()
+
+	hash, err := cache.HashFile(zipPath)
+	if err != nil {
+		return nil, fmt.Errorf("hash archive: %w", err)
+	}
+
+	client := api.New(cfg)
+	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Minute)
+	defer cancel()
+
+	fmt.Fprintf(cmd.ErrOrStderr(), "Analyzing %s…\n", projectName)
+	return client.AnalyzeDomains(ctx, zipPath, "share-"+hash[:16])
+}
+
+func runImpactForShare(cmd *cobra.Command, cfg *config.Config, rootDir string) (*api.ImpactResult, error) {
+	zipPath, err := audit.CreateZip(rootDir)
+	if err != nil {
+		return nil, err
+	}
+	defer func() { _ = os.Remove(zipPath) }()
+
+	hash, err := cache.HashFile(zipPath)
+	if err != nil {
+		return nil, err
+	}
+
+	client := api.New(cfg)
+	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Minute)
+	defer cancel()
+
+	fmt.Fprintln(cmd.ErrOrStderr(), "Running impact analysis…")
+	return client.Impact(ctx, zipPath, "share-impact-"+hash[:16], "", "")
+}
+
+// resolveAuditDir and findGitRoot are defined in cmd/audit.go (same package).

internal/api/client.go

@@ -368,6 +368,22 @@ func (c *Client) DisplayGraph(ctx context.Context, repoID, idempotencyKey string
 	return &g, nil
 }
 
+// Share uploads a rendered report and returns a public URL.
+func (c *Client) Share(ctx context.Context, req ShareRequest) (string, error) {
+	var resp ShareResponse
+	if err := c.request(ctx, "POST", "/v1/share", "application/json",
+		jsonBody(req), "", &resp); err != nil {
+		return "", err
+	}
+	return resp.URL, nil
+}
+
+// jsonBody encodes v as JSON and returns it as an io.Reader.
+func jsonBody(v any) io.Reader {
+	b, _ := json.Marshal(v)
+	return bytes.NewReader(b)
+}
+
 func (c *Client) request(ctx context.Context, method, path, contentType string, body io.Reader, idempotencyKey string, out any) error {
 	req, err := http.NewRequestWithContext(ctx, method, c.baseURL+path, body)
 	if err != nil {

internal/api/types.go

@@ -323,6 +323,18 @@ type CrossDomainDependency struct {
 	TargetDomain string `json:"targetDomain"`
 }
 
+// ShareRequest is the payload for POST /v1/share.
+type ShareRequest struct {
+	ProjectName string `json:"project_name"`
+	Status      string `json:"status"`
+	Content     string `json:"content"` // rendered Markdown report
+}
+
+// ShareResponse is returned by POST /v1/share.
+type ShareResponse struct {
+	URL string `json:"url"`
+}
+
 // Error represents a non-2xx response from the API.
 type Error struct {
 	StatusCode int    `json:"-"`

internal/cache/cache_test.go

@@ -107,6 +107,7 @@ func TestGetPut_RoundTrip(t *testing.T) {
 	}
 	if got == nil {
 		t.Fatal("Get returned nil after Put")
+		return
 	}
 	if len(got.Nodes) != 1 || got.Nodes[0].ID != "n1" {
 		t.Errorf("round-trip nodes: got %v", got.Nodes)

internal/restore/restore_test.go

@@ -619,6 +619,7 @@ func TestFromSupermodelIR_Empty(t *testing.T) {
 	g := FromSupermodelIR(&api.SupermodelIR{}, "empty")
 	if g == nil {
 		t.Fatal("returned nil")
+		return
 	}
 	if g.Name != "empty" {
 		t.Errorf("name: got %q", g.Name)