@shopify/cli-kit 4.5.1 → 4.6.0

package/dist/private/node/analytics/error-grouping.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Structured signals extracted from an error, used to group it into a meaningful Bugsnag bucket.
+ *
+ * These are read from the *original* typed error (before it is flattened to a generic `Error`
+ * for reporting), so we group on facts the error already carries rather than by re-parsing a
+ * stringified message.
+ */
+interface ErrorGroupingSignals {
+    httpStatus?: number;
+    code?: string;
+    errorClass?: string;
+}
+/**
+ * The fully resolved grouping decision for an error: the Bugsnag grouping hash (or `undefined` to
+ * fall back to stack-trace grouping), the semantic category, and the structured signals that drove
+ * the decision. The reporter uses a single resolution for both `event.groupingHash` and the
+ * `error_grouping` metadata so they can never disagree.
+ */
+interface ResolvedErrorGrouping {
+    hash?: string;
+    category?: string;
+    signals: ErrorGroupingSignals;
+}
+/**
+ * Extracts structured grouping signals from an error object.
+ *
+ * Only assigns a field when a value is actually present, so the result can be safely merged over
+ * message-derived signals without an explicit `undefined` erasing a recovered value.
+ *
+ * @param error - The original error (any type).
+ * @returns The HTTP status, GraphQL error code, and error class name when available.
+ */
+export declare function errorGroupingSignals(error: unknown): ErrorGroupingSignals;
+/**
+ * Resolves the full grouping decision for an error: hash, category, and the signals behind it.
+ *
+ * Categories are resolved structured-first (HTTP status / GraphQL code), falling back to the
+ * shared keyword categorizer only for untyped errors. When no meaningful category can be
+ * resolved, `hash` is `undefined` so the caller leaves `event.groupingHash` unset and Bugsnag's
+ * default stack-trace grouping applies — this avoids merging genuinely distinct unknown bugs.
+ *
+ * @param error - The original error (any type).
+ * @param sliceName - The product slice (`app`, `theme`, `store`, `hydrogen`, or `cli`).
+ * @returns The resolved hash (or `undefined`), category, and structured signals.
+ */
+export declare function resolveErrorGrouping(error: unknown, sliceName: string): ResolvedErrorGrouping;
+/**
+ * Builds a Bugsnag grouping hash of the form `${slice}:${category}:${signature}`.
+ *
+ * Thin wrapper over {@link resolveErrorGrouping} for callers that only need the hash.
+ *
+ * @param error - The original error (any type).
+ * @param sliceName - The product slice (`app`, `theme`, `store`, `hydrogen`, or `cli`).
+ * @returns The grouping hash, or `undefined` to fall back to stack-trace grouping.
+ */
+export declare function errorGroupingHash(error: unknown, sliceName: string): string | undefined;
+export {};

package/dist/private/node/analytics/error-grouping.js

@@ -0,0 +1,191 @@
+import { categorizeError, ErrorCategory, formatErrorMessage } from './error-categorizer.js';
+import { graphQLErrorCodes, isPermissionCode, isRateLimitCode } from './graphql-error-codes.js';
+import { GraphQLClientError } from '../api/headers.js';
+import { slugify } from '../../../public/common/string.js';
+import { ClientError } from 'graphql-request';
+/**
+ * Extracts structured grouping signals from an error object.
+ *
+ * Only assigns a field when a value is actually present, so the result can be safely merged over
+ * message-derived signals without an explicit `undefined` erasing a recovered value.
+ *
+ * @param error - The original error (any type).
+ * @returns The HTTP status, GraphQL error code, and error class name when available.
+ */
+export function errorGroupingSignals(error) {
+    const signals = {};
+    if (error instanceof Error) {
+        signals.errorClass = error.constructor.name;
+    }
+    // GraphQLClientError (handleErrors: true, status < 500) preserves the status and errors array.
+    if (error instanceof GraphQLClientError) {
+        if (error.statusCode !== undefined)
+            signals.httpStatus = error.statusCode;
+        const code = routableCode(error.errors);
+        if (code !== undefined)
+            signals.code = code;
+        return signals;
+    }
+    // Raw graphql-request ClientError (handleErrors: false) exposes the full response.
+    if (error instanceof ClientError) {
+        const status = error.response?.status;
+        if (status !== undefined)
+            signals.httpStatus = status;
+        const code = routableCode(error.response?.errors);
+        if (code !== undefined)
+            signals.code = code;
+    }
+    return signals;
+}
+/**
+ * Resolves the full grouping decision for an error: hash, category, and the signals behind it.
+ *
+ * Categories are resolved structured-first (HTTP status / GraphQL code), falling back to the
+ * shared keyword categorizer only for untyped errors. When no meaningful category can be
+ * resolved, `hash` is `undefined` so the caller leaves `event.groupingHash` unset and Bugsnag's
+ * default stack-trace grouping applies — this avoids merging genuinely distinct unknown bugs.
+ *
+ * @param error - The original error (any type).
+ * @param sliceName - The product slice (`app`, `theme`, `store`, `hydrogen`, or `cli`).
+ * @returns The resolved hash (or `undefined`), category, and structured signals.
+ */
+export function resolveErrorGrouping(error, sliceName) {
+    const message = errorMessage(error);
+    // Object signals are authoritative; message-derived signals fill gaps (e.g. 5xx errors that the
+    // API layer flattens into an AbortError, dropping the structured status field). Merge field by
+    // field so an absent object signal never clobbers one recovered from the message.
+    const fromError = errorGroupingSignals(error);
+    const fromMessage = signalsFromMessage(message);
+    const signals = {
+        httpStatus: fromError.httpStatus ?? fromMessage.httpStatus,
+        code: fromError.code ?? fromMessage.code,
+        errorClass: fromError.errorClass ?? fromMessage.errorClass,
+    };
+    const structuredCategory = categoryFromSignals(signals);
+    if (structuredCategory) {
+        return {
+            hash: `${sliceName}:${structuredCategory}:${structuredSignature(signals)}`,
+            category: structuredCategory,
+            signals,
+        };
+    }
+    const groupingError = new Error(stripJsonDump(message));
+    const category = categorizeError(groupingError);
+    if (category === ErrorCategory.Unknown) {
+        return { hash: undefined, category: undefined, signals };
+    }
+    const categoryName = category.toLowerCase();
+    return {
+        hash: `${sliceName}:${categoryName}:${formatErrorMessage(groupingError, category)}`,
+        category: categoryName,
+        signals,
+    };
+}
+/**
+ * Builds a Bugsnag grouping hash of the form `${slice}:${category}:${signature}`.
+ *
+ * Thin wrapper over {@link resolveErrorGrouping} for callers that only need the hash.
+ *
+ * @param error - The original error (any type).
+ * @param sliceName - The product slice (`app`, `theme`, `store`, `hydrogen`, or `cli`).
+ * @returns The grouping hash, or `undefined` to fall back to stack-trace grouping.
+ */
+export function errorGroupingHash(error, sliceName) {
+    return resolveErrorGrouping(error, sliceName).hash;
+}
+/**
+ * Resolves a semantic category from structured signals using an explicit decision table.
+ *
+ * Precedence is deliberate:
+ * - rate limit (`THROTTLED`/`429` code or HTTP 429) wins first — it is the most actionable bucket.
+ * - HTTP 401 is authoritative for `authentication`: a request the server rejected as
+ *   unauthenticated is an authentication problem even if a GraphQL code also reports access-denied.
+ *   `ACCESS_DENIED` in practice pairs with HTTP 403, which is handled by the permission branch.
+ * - 403 / `ACCESS_DENIED` (incl. nested App Management `access_denied`) → `permission`.
+ *
+ * Returns `undefined` when no structured signal is present.
+ */
+function categoryFromSignals(signals) {
+    const { httpStatus, code } = signals;
+    if (isRateLimitCode(code) || httpStatus === 429)
+        return 'rate_limit';
+    if (httpStatus === 401)
+        return 'authentication';
+    if (httpStatus === 403 || isPermissionCode(code))
+        return 'permission';
+    if (httpStatus !== undefined && httpStatus >= 500)
+        return 'server';
+    return undefined;
+}
+/**
+ * Builds a stable, low-cardinality signature slug from structured signals.
+ */
+function structuredSignature(signals) {
+    const parts = [];
+    if (signals.httpStatus !== undefined)
+        parts.push(`http-${signals.httpStatus}`);
+    if (signals.code)
+        parts.push(signals.code);
+    if (parts.length === 0 && signals.errorClass)
+        parts.push(signals.errorClass);
+    return slugify(parts.join('-')).slice(0, 50);
+}
+/**
+ * Recovers structured signals from an error message string. Handles both error shapes seen from
+ * the API layer: graphql-request's `GraphQL Error (Code: NNN): {json}` and the cli-kit wrapper's
+ * `... responded unsuccessfully with the HTTP status NNN ...`.
+ */
+function signalsFromMessage(message) {
+    const signals = {};
+    const statusMatch = message.match(/HTTP status (\d{3})/i) ?? message.match(/\(Code: (\d{3})\)/i);
+    if (statusMatch?.[1])
+        signals.httpStatus = Number(statusMatch[1]);
+    const payload = parseEmbeddedJson(message);
+    if (signals.httpStatus === undefined && payload?.response?.status !== undefined) {
+        signals.httpStatus = payload.response.status;
+    }
+    const code = routableCode(payload?.response?.errors);
+    if (code !== undefined)
+        signals.code = code;
+    return signals;
+}
+/**
+ * Parses the JSON blob embedded in a graphql-request ClientError message, if present.
+ */
+function parseEmbeddedJson(message) {
+    const jsonStart = message.indexOf('{');
+    if (jsonStart === -1)
+        return undefined;
+    try {
+        return JSON.parse(message.slice(jsonStart));
+        // eslint-disable-next-line no-catch-all/no-catch-all
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Picks the most routing-relevant code from a GraphQL `errors` value.
+ *
+ * Scans every error (not just the first) and prefers a code we route on — a rate-limit code, then
+ * a permission code — so a benign leading code can't mask a `THROTTLED` or `ACCESS_DENIED` further
+ * down the array. Falls back to the first code present for visibility.
+ */
+function routableCode(errors) {
+    const codes = graphQLErrorCodes(errors);
+    return codes.find(isRateLimitCode) ?? codes.find(isPermissionCode) ?? codes[0];
+}
+/**
+ * Strips a trailing JSON dump (`...: {json}`) from a message so the keyword categorizer sees the
+ * human-readable prefix rather than the serialized request/response (which contains the literal
+ * `request`, mis-routing to the network category).
+ */
+function stripJsonDump(message) {
+    return message.split(': {')[0] ?? message;
+}
+function errorMessage(error) {
+    if (error instanceof Error)
+        return error.message;
+    return typeof error === 'string' ? error : '';
+}
+//# sourceMappingURL=error-grouping.js.map

package/dist/private/node/analytics/error-grouping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-grouping.js","sourceRoot":"","sources":["../../../../src/private/node/analytics/error-grouping.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,eAAe,EAAE,aAAa,EAAE,kBAAkB,EAAC,MAAM,wBAAwB,CAAA;AACzF,OAAO,EAAC,iBAAiB,EAAE,gBAAgB,EAAE,eAAe,EAAC,MAAM,0BAA0B,CAAA;AAC7F,OAAO,EAAC,kBAAkB,EAAC,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAC,OAAO,EAAC,MAAM,kCAAkC,CAAA;AACxD,OAAO,EAAC,WAAW,EAAC,MAAM,iBAAiB,CAAA;AA2B3C;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,OAAO,GAAyB,EAAE,CAAA;IAExC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAA;IAC7C,CAAC;IAED,+FAA+F;IAC/F,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAA;QACzE,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACvC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAA;QAC3C,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,mFAAmF;IACnF,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAA;QACrC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,UAAU,GAAG,MAAM,CAAA;QACrD,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QACjD,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAA;IAC7C,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,SAAiB;IACpE,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IACnC,gGAAgG;IAChG,+FAA+F;IAC/F,kFAAkF;IAClF,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAA;IAC7C,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAyB;QACpC,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,WAAW,CAAC,UAAU;QAC1D,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI;QACxC,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,WAAW,CAAC,UAAU;KAC3D,CAAA;IAED,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;IACvD,IAAI,kBAAkB,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,GAAG,SAAS,IAAI,kBAAkB,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE;YAC1E,QAAQ,EAAE,kBAAkB;YAC5B,OAAO;SACR,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAA;IACvD,MAAM,QAAQ,GAAG,eAAe,CAAC,aAAa,CAAC,CAAA;IAC/C,IAAI,QAAQ,KAAK,aAAa,CAAC,OAAO,EAAE,CAAC;QACvC,OAAO,EAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAC,CAAA;IACxD,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAA;IAC3C,OAAO;QACL,IAAI,EAAE,GAAG,SAAS,IAAI,YAAY,IAAI,kBAAkB,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE;QACnF,QAAQ,EAAE,YAAY;QACtB,OAAO;KACR,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,SAAiB;IACjE,OAAO,oBAAoB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,IAAI,CAAA;AACpD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,mBAAmB,CAAC,OAA6B;IACxD,MAAM,EAAC,UAAU,EAAE,IAAI,EAAC,GAAG,OAAO,CAAA;IAElC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,YAAY,CAAA;IACpE,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,gBAAgB,CAAA;IAC/C,IAAI,UAAU,KAAK,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAA;IACrE,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAA;IAElE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,OAA6B;IACxD,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IAC9E,IAAI,OAAO,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IAE5E,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,OAAO,GAAyB,EAAE,CAAA;IAExC,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAChG,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;IAEjE,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC1C,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;QAChF,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAA;IAC9C,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IACpD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAA;IAE3C,OAAO,OAAO,CAAA;AAChB,CAAC;AASD;;GAEG;AACH,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACtC,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IAEtC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAA2B,CAAA;QACrE,qDAAqD;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,MAAe;IACnC,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;IACvC,OAAO,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAA;AAChF,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAA;AAC3C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAA;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;AAC/C,CAAC","sourcesContent":["import {categorizeError, ErrorCategory, formatErrorMessage} from './error-categorizer.js'\nimport {graphQLErrorCodes, isPermissionCode, isRateLimitCode} from './graphql-error-codes.js'\nimport {GraphQLClientError} from '../api/headers.js'\nimport {slugify} from '../../../public/common/string.js'\nimport {ClientError} from 'graphql-request'\n\n/**\n * Structured signals extracted from an error, used to group it into a meaningful Bugsnag bucket.\n *\n * These are read from the *original* typed error (before it is flattened to a generic `Error`\n * for reporting), so we group on facts the error already carries rather than by re-parsing a\n * stringified message.\n */\ninterface ErrorGroupingSignals {\n  httpStatus?: number\n  code?: string\n  errorClass?: string\n}\n\n/**\n * The fully resolved grouping decision for an error: the Bugsnag grouping hash (or `undefined` to\n * fall back to stack-trace grouping), the semantic category, and the structured signals that drove\n * the decision. The reporter uses a single resolution for both `event.groupingHash` and the\n * `error_grouping` metadata so they can never disagree.\n */\ninterface ResolvedErrorGrouping {\n  hash?: string\n  category?: string\n  signals: ErrorGroupingSignals\n}\n\n/**\n * Extracts structured grouping signals from an error object.\n *\n * Only assigns a field when a value is actually present, so the result can be safely merged over\n * message-derived signals without an explicit `undefined` erasing a recovered value.\n *\n * @param error - The original error (any type).\n * @returns The HTTP status, GraphQL error code, and error class name when available.\n */\nexport function errorGroupingSignals(error: unknown): ErrorGroupingSignals {\n  const signals: ErrorGroupingSignals = {}\n\n  if (error instanceof Error) {\n    signals.errorClass = error.constructor.name\n  }\n\n  // GraphQLClientError (handleErrors: true, status < 500) preserves the status and errors array.\n  if (error instanceof GraphQLClientError) {\n    if (error.statusCode !== undefined) signals.httpStatus = error.statusCode\n    const code = routableCode(error.errors)\n    if (code !== undefined) signals.code = code\n    return signals\n  }\n\n  // Raw graphql-request ClientError (handleErrors: false) exposes the full response.\n  if (error instanceof ClientError) {\n    const status = error.response?.status\n    if (status !== undefined) signals.httpStatus = status\n    const code = routableCode(error.response?.errors)\n    if (code !== undefined) signals.code = code\n  }\n\n  return signals\n}\n\n/**\n * Resolves the full grouping decision for an error: hash, category, and the signals behind it.\n *\n * Categories are resolved structured-first (HTTP status / GraphQL code), falling back to the\n * shared keyword categorizer only for untyped errors. When no meaningful category can be\n * resolved, `hash` is `undefined` so the caller leaves `event.groupingHash` unset and Bugsnag's\n * default stack-trace grouping applies — this avoids merging genuinely distinct unknown bugs.\n *\n * @param error - The original error (any type).\n * @param sliceName - The product slice (`app`, `theme`, `store`, `hydrogen`, or `cli`).\n * @returns The resolved hash (or `undefined`), category, and structured signals.\n */\nexport function resolveErrorGrouping(error: unknown, sliceName: string): ResolvedErrorGrouping {\n  const message = errorMessage(error)\n  // Object signals are authoritative; message-derived signals fill gaps (e.g. 5xx errors that the\n  // API layer flattens into an AbortError, dropping the structured status field). Merge field by\n  // field so an absent object signal never clobbers one recovered from the message.\n  const fromError = errorGroupingSignals(error)\n  const fromMessage = signalsFromMessage(message)\n  const signals: ErrorGroupingSignals = {\n    httpStatus: fromError.httpStatus ?? fromMessage.httpStatus,\n    code: fromError.code ?? fromMessage.code,\n    errorClass: fromError.errorClass ?? fromMessage.errorClass,\n  }\n\n  const structuredCategory = categoryFromSignals(signals)\n  if (structuredCategory) {\n    return {\n      hash: `${sliceName}:${structuredCategory}:${structuredSignature(signals)}`,\n      category: structuredCategory,\n      signals,\n    }\n  }\n\n  const groupingError = new Error(stripJsonDump(message))\n  const category = categorizeError(groupingError)\n  if (category === ErrorCategory.Unknown) {\n    return {hash: undefined, category: undefined, signals}\n  }\n\n  const categoryName = category.toLowerCase()\n  return {\n    hash: `${sliceName}:${categoryName}:${formatErrorMessage(groupingError, category)}`,\n    category: categoryName,\n    signals,\n  }\n}\n\n/**\n * Builds a Bugsnag grouping hash of the form `${slice}:${category}:${signature}`.\n *\n * Thin wrapper over {@link resolveErrorGrouping} for callers that only need the hash.\n *\n * @param error - The original error (any type).\n * @param sliceName - The product slice (`app`, `theme`, `store`, `hydrogen`, or `cli`).\n * @returns The grouping hash, or `undefined` to fall back to stack-trace grouping.\n */\nexport function errorGroupingHash(error: unknown, sliceName: string): string | undefined {\n  return resolveErrorGrouping(error, sliceName).hash\n}\n\n/**\n * Resolves a semantic category from structured signals using an explicit decision table.\n *\n * Precedence is deliberate:\n * - rate limit (`THROTTLED`/`429` code or HTTP 429) wins first — it is the most actionable bucket.\n * - HTTP 401 is authoritative for `authentication`: a request the server rejected as\n *   unauthenticated is an authentication problem even if a GraphQL code also reports access-denied.\n *   `ACCESS_DENIED` in practice pairs with HTTP 403, which is handled by the permission branch.\n * - 403 / `ACCESS_DENIED` (incl. nested App Management `access_denied`) → `permission`.\n *\n * Returns `undefined` when no structured signal is present.\n */\nfunction categoryFromSignals(signals: ErrorGroupingSignals): string | undefined {\n  const {httpStatus, code} = signals\n\n  if (isRateLimitCode(code) || httpStatus === 429) return 'rate_limit'\n  if (httpStatus === 401) return 'authentication'\n  if (httpStatus === 403 || isPermissionCode(code)) return 'permission'\n  if (httpStatus !== undefined && httpStatus >= 500) return 'server'\n\n  return undefined\n}\n\n/**\n * Builds a stable, low-cardinality signature slug from structured signals.\n */\nfunction structuredSignature(signals: ErrorGroupingSignals): string {\n  const parts: string[] = []\n  if (signals.httpStatus !== undefined) parts.push(`http-${signals.httpStatus}`)\n  if (signals.code) parts.push(signals.code)\n  if (parts.length === 0 && signals.errorClass) parts.push(signals.errorClass)\n\n  return slugify(parts.join('-')).slice(0, 50)\n}\n\n/**\n * Recovers structured signals from an error message string. Handles both error shapes seen from\n * the API layer: graphql-request's `GraphQL Error (Code: NNN): {json}` and the cli-kit wrapper's\n * `... responded unsuccessfully with the HTTP status NNN ...`.\n */\nfunction signalsFromMessage(message: string): ErrorGroupingSignals {\n  const signals: ErrorGroupingSignals = {}\n\n  const statusMatch = message.match(/HTTP status (\\d{3})/i) ?? message.match(/\\(Code: (\\d{3})\\)/i)\n  if (statusMatch?.[1]) signals.httpStatus = Number(statusMatch[1])\n\n  const payload = parseEmbeddedJson(message)\n  if (signals.httpStatus === undefined && payload?.response?.status !== undefined) {\n    signals.httpStatus = payload.response.status\n  }\n  const code = routableCode(payload?.response?.errors)\n  if (code !== undefined) signals.code = code\n\n  return signals\n}\n\ninterface EmbeddedGraphQLPayload {\n  response?: {\n    status?: number\n    errors?: unknown\n  }\n}\n\n/**\n * Parses the JSON blob embedded in a graphql-request ClientError message, if present.\n */\nfunction parseEmbeddedJson(message: string): EmbeddedGraphQLPayload | undefined {\n  const jsonStart = message.indexOf('{')\n  if (jsonStart === -1) return undefined\n\n  try {\n    return JSON.parse(message.slice(jsonStart)) as EmbeddedGraphQLPayload\n    // eslint-disable-next-line no-catch-all/no-catch-all\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Picks the most routing-relevant code from a GraphQL `errors` value.\n *\n * Scans every error (not just the first) and prefers a code we route on — a rate-limit code, then\n * a permission code — so a benign leading code can't mask a `THROTTLED` or `ACCESS_DENIED` further\n * down the array. Falls back to the first code present for visibility.\n */\nfunction routableCode(errors: unknown): string | undefined {\n  const codes = graphQLErrorCodes(errors)\n  return codes.find(isRateLimitCode) ?? codes.find(isPermissionCode) ?? codes[0]\n}\n\n/**\n * Strips a trailing JSON dump (`...: {json}`) from a message so the keyword categorizer sees the\n * human-readable prefix rather than the serialized request/response (which contains the literal\n * `request`, mis-routing to the network category).\n */\nfunction stripJsonDump(message: string): string {\n  return message.split(': {')[0] ?? message\n}\n\nfunction errorMessage(error: unknown): string {\n  if (error instanceof Error) return error.message\n  return typeof error === 'string' ? error : ''\n}\n"]}

package/dist/private/node/analytics/graphql-error-codes.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Pure helpers for reading routing-relevant codes out of a GraphQL error response.
+ *
+ * This module is intentionally dependency-free: it is imported by both the grouping logic
+ * (`error-grouping.ts`) and the crash-report suppression logic (`../../public/node/error.ts`).
+ * `error.ts` cannot import `error-grouping.ts` directly — that would create an
+ * `error.ts → headers.ts → error.ts` import cycle — so the shared scanning logic lives here,
+ * where it imports nothing from cli-kit.
+ */
+/**
+ * Collects every routing-relevant code from a GraphQL `errors` value.
+ *
+ * Scans *all* errors (not just the first), reading both the top-level `extensions.code` and the
+ * nested App Management shape `extensions.app_errors.errors[].category`. The API can also return
+ * `errors` as a string (e.g. some 401s), which yields no codes.
+ *
+ * @param errors - The `errors` value from a GraphQL response (array, string, or undefined).
+ * @returns Every string code/category found, in document order.
+ */
+export declare function graphQLErrorCodes(errors: unknown): string[];
+/**
+ * Whether a single code is a rate-limit signal (`THROTTLED` or `429`).
+ *
+ * Mirrors the established shape detected by `errorsIncludeStatus429` in `private/node/api.ts`,
+ * where `extensions.code === '429'` signals rate limiting even at HTTP 200.
+ */
+export declare function isRateLimitCode(code: string | undefined): boolean;
+/**
+ * Whether a single code/category is a permission / access-denied signal.
+ */
+export declare function isPermissionCode(code: string | undefined): boolean;
+/**
+ * Whether any GraphQL error carries a rate-limit code. Convenience for suppression logic that only
+ * needs a boolean over the raw `errors` value.
+ *
+ * @param errors - The `errors` value from a GraphQL response.
+ * @returns True when a rate-limit code is present in any error.
+ */
+export declare function hasRateLimitCode(errors: unknown): boolean;

package/dist/private/node/analytics/graphql-error-codes.js

@@ -0,0 +1,73 @@
+/**
+ * Pure helpers for reading routing-relevant codes out of a GraphQL error response.
+ *
+ * This module is intentionally dependency-free: it is imported by both the grouping logic
+ * (`error-grouping.ts`) and the crash-report suppression logic (`../../public/node/error.ts`).
+ * `error.ts` cannot import `error-grouping.ts` directly — that would create an
+ * `error.ts → headers.ts → error.ts` import cycle — so the shared scanning logic lives here,
+ * where it imports nothing from cli-kit.
+ */
+/** GraphQL `extensions.code` values we treat as rate limiting. */
+const RATE_LIMIT_CODES = new Set(['THROTTLED', '429']);
+/**
+ * GraphQL `extensions.code` values (and nested App Management `app_errors` categories) we treat as
+ * a permission / access-denied signal. The top-level admin code is `ACCESS_DENIED`; the App
+ * Management nested shape uses the lowercase category `access_denied`.
+ */
+const PERMISSION_CODES = new Set(['ACCESS_DENIED', 'access_denied']);
+/**
+ * Collects every routing-relevant code from a GraphQL `errors` value.
+ *
+ * Scans *all* errors (not just the first), reading both the top-level `extensions.code` and the
+ * nested App Management shape `extensions.app_errors.errors[].category`. The API can also return
+ * `errors` as a string (e.g. some 401s), which yields no codes.
+ *
+ * @param errors - The `errors` value from a GraphQL response (array, string, or undefined).
+ * @returns Every string code/category found, in document order.
+ */
+export function graphQLErrorCodes(errors) {
+    if (!Array.isArray(errors))
+        return [];
+    return errors.flatMap((entry) => {
+        const found = [];
+        const error = entry;
+        const code = error?.extensions?.code;
+        if (typeof code === 'string')
+            found.push(code);
+        const appErrors = error?.extensions?.app_errors?.errors;
+        if (Array.isArray(appErrors)) {
+            for (const appError of appErrors) {
+                const category = appError?.category;
+                if (typeof category === 'string')
+                    found.push(category);
+            }
+        }
+        return found;
+    });
+}
+/**
+ * Whether a single code is a rate-limit signal (`THROTTLED` or `429`).
+ *
+ * Mirrors the established shape detected by `errorsIncludeStatus429` in `private/node/api.ts`,
+ * where `extensions.code === '429'` signals rate limiting even at HTTP 200.
+ */
+export function isRateLimitCode(code) {
+    return code !== undefined && RATE_LIMIT_CODES.has(code);
+}
+/**
+ * Whether a single code/category is a permission / access-denied signal.
+ */
+export function isPermissionCode(code) {
+    return code !== undefined && PERMISSION_CODES.has(code);
+}
+/**
+ * Whether any GraphQL error carries a rate-limit code. Convenience for suppression logic that only
+ * needs a boolean over the raw `errors` value.
+ *
+ * @param errors - The `errors` value from a GraphQL response.
+ * @returns True when a rate-limit code is present in any error.
+ */
+export function hasRateLimitCode(errors) {
+    return graphQLErrorCodes(errors).some(isRateLimitCode);
+}
+//# sourceMappingURL=graphql-error-codes.js.map

package/dist/private/node/analytics/graphql-error-codes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql-error-codes.js","sourceRoot":"","sources":["../../../../src/private/node/analytics/graphql-error-codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,kEAAkE;AAClE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAA;AAEtD;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,CAAA;AAEpE;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAe;IAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAA;IAErC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,MAAM,KAAK,GAAG,KAAqF,CAAA;QAEnG,MAAM,IAAI,GAAG,KAAK,EAAE,UAAU,EAAE,IAAI,CAAA;QACpC,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE9C,MAAM,SAAS,GAAG,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAA;QACvD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAI,QAA6C,EAAE,QAAQ,CAAA;gBACzE,IAAI,OAAO,QAAQ,KAAK,QAAQ;oBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACxD,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAA;IACd,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAwB;IACtD,OAAO,IAAI,KAAK,SAAS,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAwB;IACvD,OAAO,IAAI,KAAK,SAAS,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAe;IAC9C,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;AACxD,CAAC","sourcesContent":["/**\n * Pure helpers for reading routing-relevant codes out of a GraphQL error response.\n *\n * This module is intentionally dependency-free: it is imported by both the grouping logic\n * (`error-grouping.ts`) and the crash-report suppression logic (`../../public/node/error.ts`).\n * `error.ts` cannot import `error-grouping.ts` directly — that would create an\n * `error.ts → headers.ts → error.ts` import cycle — so the shared scanning logic lives here,\n * where it imports nothing from cli-kit.\n */\n\n/** GraphQL `extensions.code` values we treat as rate limiting. */\nconst RATE_LIMIT_CODES = new Set(['THROTTLED', '429'])\n\n/**\n * GraphQL `extensions.code` values (and nested App Management `app_errors` categories) we treat as\n * a permission / access-denied signal. The top-level admin code is `ACCESS_DENIED`; the App\n * Management nested shape uses the lowercase category `access_denied`.\n */\nconst PERMISSION_CODES = new Set(['ACCESS_DENIED', 'access_denied'])\n\n/**\n * Collects every routing-relevant code from a GraphQL `errors` value.\n *\n * Scans *all* errors (not just the first), reading both the top-level `extensions.code` and the\n * nested App Management shape `extensions.app_errors.errors[].category`. The API can also return\n * `errors` as a string (e.g. some 401s), which yields no codes.\n *\n * @param errors - The `errors` value from a GraphQL response (array, string, or undefined).\n * @returns Every string code/category found, in document order.\n */\nexport function graphQLErrorCodes(errors: unknown): string[] {\n  if (!Array.isArray(errors)) return []\n\n  return errors.flatMap((entry) => {\n    const found: string[] = []\n    const error = entry as {extensions?: {code?: unknown; app_errors?: {errors?: unknown}}} | undefined\n\n    const code = error?.extensions?.code\n    if (typeof code === 'string') found.push(code)\n\n    const appErrors = error?.extensions?.app_errors?.errors\n    if (Array.isArray(appErrors)) {\n      for (const appError of appErrors) {\n        const category = (appError as {category?: unknown} | undefined)?.category\n        if (typeof category === 'string') found.push(category)\n      }\n    }\n\n    return found\n  })\n}\n\n/**\n * Whether a single code is a rate-limit signal (`THROTTLED` or `429`).\n *\n * Mirrors the established shape detected by `errorsIncludeStatus429` in `private/node/api.ts`,\n * where `extensions.code === '429'` signals rate limiting even at HTTP 200.\n */\nexport function isRateLimitCode(code: string | undefined): boolean {\n  return code !== undefined && RATE_LIMIT_CODES.has(code)\n}\n\n/**\n * Whether a single code/category is a permission / access-denied signal.\n */\nexport function isPermissionCode(code: string | undefined): boolean {\n  return code !== undefined && PERMISSION_CODES.has(code)\n}\n\n/**\n * Whether any GraphQL error carries a rate-limit code. Convenience for suppression logic that only\n * needs a boolean over the raw `errors` value.\n *\n * @param errors - The `errors` value from a GraphQL response.\n * @returns True when a rate-limit code is present in any error.\n */\nexport function hasRateLimitCode(errors: unknown): boolean {\n  return graphQLErrorCodes(errors).some(isRateLimitCode)\n}\n"]}

package/dist/private/node/api/headers.js

@@ -1,5 +1,5 @@
 import { CLI_KIT_VERSION } from '../../../public/common/version.js';
-import { firstPartyDev, isUnitTest, isVerbose } from '../../../public/node/context/local.js';
+import { isUnitTest, isVerbose } from '../../../public/node/context/local.js';
 import { AbortError } from '../../../public/node/error.js';
 import https from 'https';
 class RequestClientError extends AbortError {
@@ -49,7 +49,6 @@ export function buildHeaders(token) {
         // 'Sec-CH-UA': secCHUA, This header requires the Git sha.
         'Sec-CH-UA-PLATFORM': process.platform,
         'Content-Type': 'application/json',
-        ...(firstPartyDev() && { 'X-Shopify-Cli-Employee': '1' }),
     };
     if (token) {
         const authString = token.match(/^shp(at|ua|ca|tka)/) ? token : `Bearer ${token}`;

package/dist/private/node/api/headers.js.map

@@ -1 +1 @@
-{"version":3,"file":"headers.js","sourceRoot":"","sources":["../../../../src/private/node/api/headers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,eAAe,EAAC,MAAM,mCAAmC,CAAA;AACjE,OAAO,EAAC,aAAa,EAAE,UAAU,EAAE,SAAS,EAAC,MAAM,uCAAuC,CAAA;AAC1F,OAAO,EAAC,UAAU,EAAC,MAAM,+BAA+B,CAAA;AACxD,OAAO,KAAK,MAAM,OAAO,CAAA;AAEzB,MAAM,kBAAmB,SAAQ,UAAU;IAEzC,YAAmB,OAAe,EAAE,UAAkB;QACpD,MAAM,UAAU,GACd,UAAU,KAAK,GAAG;YAChB,CAAC,CAAC,oFAAoF;YACtF,CAAC,CAAC,SAAS,CAAA;QACf,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;QAC1B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;IAC9B,CAAC;CACF;AACD,MAAM,OAAO,kBAAmB,SAAQ,kBAAkB;IAIxD,8DAA8D;IAC9D,YAAmB,OAAe,EAAE,UAAkB,EAAE,MAAc;QACpE,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAA;IACxB,CAAC;CACF;AAED,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;AAE5F;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA+B;IACpE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClC,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,SAAS,GAA2B,EAAE,CAAA;IAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACtC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9F,SAAS,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAE,CAAA;QACtC,CAAC;IACH,CAAC,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;SAC1B,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACd,OAAO,MAAM,MAAM,KAAK,SAAS,CAAC,MAAM,CAAC,EAAE,CAAA;IAC7C,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,MAAM,SAAS,GAAG,kBAAkB,eAAe,EAAE,CAAA;IAErD,MAAM,OAAO,GAA2B;QACtC,YAAY,EAAE,SAAS;QACvB,YAAY,EAAE,YAAY;QAC1B,0DAA0D;QAC1D,oBAAoB,EAAE,OAAO,CAAC,QAAQ;QACtC,cAAc,EAAE,kBAAkB;QAClC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAC,wBAAwB,EAAE,GAAG,EAAC,CAAC;KACxD,CAAA;IACD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAA;QAEhF,OAAO,CAAC,aAAa,GAAG,UAAU,CAAA;QAClC,OAAO,CAAC,wBAAwB,CAAC,GAAG,UAAU,CAAA;IAChD,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC;QACrB,kBAAkB,EAAE,IAAI;QACxB,SAAS,EAAE,IAAI;KAChB,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import {CLI_KIT_VERSION} from '../../../public/common/version.js'\nimport {firstPartyDev, isUnitTest, isVerbose} from '../../../public/node/context/local.js'\nimport {AbortError} from '../../../public/node/error.js'\nimport https from 'https'\n\nclass RequestClientError extends AbortError {\n  statusCode: number\n  public constructor(message: string, statusCode: number) {\n    const tryMessage =\n      statusCode === 403\n        ? 'Ensure you are using the correct account. You can switch with `shopify auth login`'\n        : undefined\n    super(message, tryMessage)\n    this.statusCode = statusCode\n  }\n}\nexport class GraphQLClientError extends RequestClientError {\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  errors?: any[]\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  public constructor(message: string, statusCode: number, errors?: any[]) {\n    super(message, statusCode)\n    this.errors = errors\n    this.stack = undefined\n  }\n}\n\nconst SENSITIVE_HEADERS = ['token', 'authorization', 'subject_token', 'cookie', 'signature']\n\n/**\n * Removes the sensitive data from the headers and outputs them as a string.\n * @param headers - HTTP headers.\n * @returns A sanitized version of the headers as a string.\n */\nexport function sanitizedHeadersOutput(headers: Record<string, string>): string {\n  if (!isVerbose() && !isUnitTest()) {\n    return ''\n  }\n\n  const sanitized: Record<string, string> = {}\n  Object.keys(headers).forEach((header) => {\n    if (SENSITIVE_HEADERS.find((keyword) => header.toLowerCase().includes(keyword)) === undefined) {\n      sanitized[header] = headers[header]!\n    }\n  })\n  return Object.keys(sanitized)\n    .map((header) => {\n      return ` - ${header}: ${sanitized[header]}`\n    })\n    .join('\\n')\n}\n\nexport function buildHeaders(token?: string): Record<string, string> {\n  const userAgent = `Shopify CLI; v=${CLI_KIT_VERSION}`\n\n  const headers: Record<string, string> = {\n    'User-Agent': userAgent,\n    'Keep-Alive': 'timeout=30',\n    // 'Sec-CH-UA': secCHUA, This header requires the Git sha.\n    'Sec-CH-UA-PLATFORM': process.platform,\n    'Content-Type': 'application/json',\n    ...(firstPartyDev() && {'X-Shopify-Cli-Employee': '1'}),\n  }\n  if (token) {\n    const authString = token.match(/^shp(at|ua|ca|tka)/) ? token : `Bearer ${token}`\n\n    headers.authorization = authString\n    headers['X-Shopify-Access-Token'] = authString\n  }\n\n  return headers\n}\n\n/**\n * This utility function returns the https.Agent to use for a given service.\n */\nexport async function httpsAgent(): Promise<https.Agent> {\n  return new https.Agent({\n    rejectUnauthorized: true,\n    keepAlive: true,\n  })\n}\n"]}
+{"version":3,"file":"headers.js","sourceRoot":"","sources":["../../../../src/private/node/api/headers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,eAAe,EAAC,MAAM,mCAAmC,CAAA;AACjE,OAAO,EAAC,UAAU,EAAE,SAAS,EAAC,MAAM,uCAAuC,CAAA;AAC3E,OAAO,EAAC,UAAU,EAAC,MAAM,+BAA+B,CAAA;AACxD,OAAO,KAAK,MAAM,OAAO,CAAA;AAEzB,MAAM,kBAAmB,SAAQ,UAAU;IAEzC,YAAmB,OAAe,EAAE,UAAkB;QACpD,MAAM,UAAU,GACd,UAAU,KAAK,GAAG;YAChB,CAAC,CAAC,oFAAoF;YACtF,CAAC,CAAC,SAAS,CAAA;QACf,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;QAC1B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;IAC9B,CAAC;CACF;AACD,MAAM,OAAO,kBAAmB,SAAQ,kBAAkB;IAIxD,8DAA8D;IAC9D,YAAmB,OAAe,EAAE,UAAkB,EAAE,MAAc;QACpE,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAA;IACxB,CAAC;CACF;AAED,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;AAE5F;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA+B;IACpE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClC,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,SAAS,GAA2B,EAAE,CAAA;IAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACtC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9F,SAAS,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAE,CAAA;QACtC,CAAC;IACH,CAAC,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;SAC1B,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACd,OAAO,MAAM,MAAM,KAAK,SAAS,CAAC,MAAM,CAAC,EAAE,CAAA;IAC7C,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,MAAM,SAAS,GAAG,kBAAkB,eAAe,EAAE,CAAA;IAErD,MAAM,OAAO,GAA2B;QACtC,YAAY,EAAE,SAAS;QACvB,YAAY,EAAE,YAAY;QAC1B,0DAA0D;QAC1D,oBAAoB,EAAE,OAAO,CAAC,QAAQ;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAA;IACD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAA;QAEhF,OAAO,CAAC,aAAa,GAAG,UAAU,CAAA;QAClC,OAAO,CAAC,wBAAwB,CAAC,GAAG,UAAU,CAAA;IAChD,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC;QACrB,kBAAkB,EAAE,IAAI;QACxB,SAAS,EAAE,IAAI;KAChB,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import {CLI_KIT_VERSION} from '../../../public/common/version.js'\nimport {isUnitTest, isVerbose} from '../../../public/node/context/local.js'\nimport {AbortError} from '../../../public/node/error.js'\nimport https from 'https'\n\nclass RequestClientError extends AbortError {\n  statusCode: number\n  public constructor(message: string, statusCode: number) {\n    const tryMessage =\n      statusCode === 403\n        ? 'Ensure you are using the correct account. You can switch with `shopify auth login`'\n        : undefined\n    super(message, tryMessage)\n    this.statusCode = statusCode\n  }\n}\nexport class GraphQLClientError extends RequestClientError {\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  errors?: any[]\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  public constructor(message: string, statusCode: number, errors?: any[]) {\n    super(message, statusCode)\n    this.errors = errors\n    this.stack = undefined\n  }\n}\n\nconst SENSITIVE_HEADERS = ['token', 'authorization', 'subject_token', 'cookie', 'signature']\n\n/**\n * Removes the sensitive data from the headers and outputs them as a string.\n * @param headers - HTTP headers.\n * @returns A sanitized version of the headers as a string.\n */\nexport function sanitizedHeadersOutput(headers: Record<string, string>): string {\n  if (!isVerbose() && !isUnitTest()) {\n    return ''\n  }\n\n  const sanitized: Record<string, string> = {}\n  Object.keys(headers).forEach((header) => {\n    if (SENSITIVE_HEADERS.find((keyword) => header.toLowerCase().includes(keyword)) === undefined) {\n      sanitized[header] = headers[header]!\n    }\n  })\n  return Object.keys(sanitized)\n    .map((header) => {\n      return ` - ${header}: ${sanitized[header]}`\n    })\n    .join('\\n')\n}\n\nexport function buildHeaders(token?: string): Record<string, string> {\n  const userAgent = `Shopify CLI; v=${CLI_KIT_VERSION}`\n\n  const headers: Record<string, string> = {\n    'User-Agent': userAgent,\n    'Keep-Alive': 'timeout=30',\n    // 'Sec-CH-UA': secCHUA, This header requires the Git sha.\n    'Sec-CH-UA-PLATFORM': process.platform,\n    'Content-Type': 'application/json',\n  }\n  if (token) {\n    const authString = token.match(/^shp(at|ua|ca|tka)/) ? token : `Bearer ${token}`\n\n    headers.authorization = authString\n    headers['X-Shopify-Access-Token'] = authString\n  }\n\n  return headers\n}\n\n/**\n * This utility function returns the https.Agent to use for a given service.\n */\nexport async function httpsAgent(): Promise<https.Agent> {\n  return new https.Agent({\n    rejectUnauthorized: true,\n    keepAlive: true,\n  })\n}\n"]}

package/dist/private/node/constants.d.ts

@@ -6,7 +6,6 @@ export declare const environmentVariables: {
     doctor: string;
     enableCliRedirect: string;
     env: string;
-    firstPartyDev: string;
     noAnalytics: string;
     optOutInstrumentation: string;
     appAutomationToken: string;
@@ -31,7 +30,6 @@ export declare const environmentVariables: {
     otelURL: string;
     themeKitAccessDomain: string;
     json: string;
-    neverUsePartnersApi: string;
     skipNetworkLevelRetry: string;
     maxRequestTimeForNetworkCalls: string;
     disableImportScanning: string;

package/dist/private/node/constants.js

@@ -16,7 +16,6 @@ export const environmentVariables = {
     doctor: 'SHOPIFY_CLI_DOCTOR',
     enableCliRedirect: 'SHOPIFY_CLI_ENABLE_CLI_REDIRECT',
     env: 'SHOPIFY_CLI_ENV',
-    firstPartyDev: 'SHOPIFY_CLI_1P_DEV',
     noAnalytics: 'SHOPIFY_CLI_NO_ANALYTICS',
     optOutInstrumentation: 'OPT_OUT_INSTRUMENTATION',
     appAutomationToken: 'SHOPIFY_APP_AUTOMATION_TOKEN',
@@ -42,7 +41,6 @@ export const environmentVariables = {
     otelURL: 'SHOPIFY_CLI_OTEL_EXPORTER_OTLP_ENDPOINT',
     themeKitAccessDomain: 'SHOPIFY_CLI_THEME_KIT_ACCESS_DOMAIN',
     json: 'SHOPIFY_FLAG_JSON',
-    neverUsePartnersApi: 'SHOPIFY_CLI_NEVER_USE_PARTNERS_API',
     skipNetworkLevelRetry: 'SHOPIFY_CLI_SKIP_NETWORK_LEVEL_RETRY',
     maxRequestTimeForNetworkCalls: 'SHOPIFY_CLI_MAX_REQUEST_TIME_FOR_NETWORK_CALLS',
     disableImportScanning: 'SHOPIFY_CLI_DISABLE_IMPORT_SCANNING',

package/dist/private/node/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/private/node/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAC,MAAM,2BAA2B,CAAA;AAClD,OAAO,QAAQ,MAAM,WAAW,CAAA;AAEhC,MAAM,UAAU,GAAG,aAAa,CAAA;AAEhC,MAAM,WAAW,GAAG,GAAG,EAAE;IACvB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;IACjE,OAAO,QAAQ,CAAC,UAAU,CAAC,CAAC,KAAK,CAAA;AACnC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,EAAE;IAC7B,OAAO,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG,CAAA;AACjC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,kBAAkB,EAAE,kCAAkC;IACtD,gBAAgB,EAAE,gCAAgC;IAClD,UAAU,EAAE,yBAAyB;IACrC,MAAM,EAAE,oBAAoB;IAC5B,iBAAiB,EAAE,iCAAiC;IACpD,GAAG,EAAE,iBAAiB;IACtB,aAAa,EAAE,oBAAoB;IACnC,WAAW,EAAE,0BAA0B;IACvC,qBAAqB,EAAE,yBAAyB;IAChD,kBAAkB,EAAE,8BAA8B;IAClD,aAAa,EAAE,4BAA4B;IAC3C,SAAS,EAAE,qBAAqB;IAChC,UAAU,EAAE,qBAAqB;IACjC,eAAe,EAAE,+BAA+B;IAChD,YAAY,EAAE,eAAe;IAC7B,UAAU,EAAE,yBAAyB;IACrC,QAAQ,EAAE,mBAAmB;IAC7B,OAAO,EAAE,sBAAsB;IAC/B,mEAAmE;IACnE,UAAU,EAAE,YAAY;IACxB,aAAa,EAAE,gBAAgB;IAC/B,6BAA6B,EAAE,0CAA0C;IACzE,MAAM,EAAE,sBAAsB;IAC9B,UAAU,EAAE,aAAa;IACzB,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,eAAe;IAC5B,YAAY,EAAE,0BAA0B;IACxC,aAAa,EAAE,4BAA4B;IAC3C,YAAY,EAAE,2BAA2B;IACzC,OAAO,EAAE,yCAAyC;IAClD,oBAAoB,EAAE,qCAAqC;IAC3D,IAAI,EAAE,mBAAmB;IACzB,mBAAmB,EAAE,oCAAoC;IACzD,qBAAqB,EAAE,sCAAsC;IAC7D,6BAA6B,EAAE,gDAAgD;IAC/E,qBAAqB,EAAE,qCAAqC;CAC7D,CAAA;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG,kCAAkC,CAAA;AAE7E,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,WAAW,EAAE,cAAc;CAC5B,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,WAAW,EAAE;QACX,GAAG,EAAE,kBAAkB;KACxB;IACD,WAAW,EAAE;QACX,KAAK,EAAE;YACL,IAAI,EAAE,GAAG,EAAE;gBACT,OAAO,WAAW,EAAE,CAAA;YACtB,CAAC;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,GAAG,EAAE;oBACT,OAAO,QAAQ,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAA;gBAC1C,CAAC;gBACD,QAAQ,EAAE,GAAG,EAAE;oBACb,OAAO,QAAQ,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAA;gBACtD,CAAC;aACF;SACF;KACF;CACF,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,6BAA6B,EAAE,CAAC;CACjC,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,kCAAkC,CAAA;AAE/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAC,IAAI,EAAE,CAAC,EAAC,EAAC,CAAA;AAElE,MAAM,CAAC,MAAM,oBAAoB,GAC/B,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,IAAI,2BAA2B,CAAA","sourcesContent":["import {joinPath} from '../../public/node/path.js'\nimport envPaths from 'env-paths'\n\nconst identifier = 'shopify-cli'\n\nconst cacheFolder = () => {\n  if (process.env.XDG_CACHE_HOME) return process.env.XDG_CACHE_HOME\n  return envPaths(identifier).cache\n}\n\nexport const logsFolder = () => {\n  return envPaths(identifier).log\n}\n\nexport const environmentVariables = {\n  alwaysLogAnalytics: 'SHOPIFY_CLI_ALWAYS_LOG_ANALYTICS',\n  alwaysLogMetrics: 'SHOPIFY_CLI_ALWAYS_LOG_METRICS',\n  deviceAuth: 'SHOPIFY_CLI_DEVICE_AUTH',\n  doctor: 'SHOPIFY_CLI_DOCTOR',\n  enableCliRedirect: 'SHOPIFY_CLI_ENABLE_CLI_REDIRECT',\n  env: 'SHOPIFY_CLI_ENV',\n  firstPartyDev: 'SHOPIFY_CLI_1P_DEV',\n  noAnalytics: 'SHOPIFY_CLI_NO_ANALYTICS',\n  optOutInstrumentation: 'OPT_OUT_INSTRUMENTATION',\n  appAutomationToken: 'SHOPIFY_APP_AUTOMATION_TOKEN',\n  partnersToken: 'SHOPIFY_CLI_PARTNERS_TOKEN',\n  runAsUser: 'SHOPIFY_RUN_AS_USER',\n  serviceEnv: 'SHOPIFY_SERVICE_ENV',\n  skipCliRedirect: 'SHOPIFY_CLI_SKIP_CLI_REDIRECT',\n  spinInstance: 'SPIN_INSTANCE',\n  themeToken: 'SHOPIFY_CLI_THEME_TOKEN',\n  unitTest: 'SHOPIFY_UNIT_TEST',\n  verbose: 'SHOPIFY_FLAG_VERBOSE',\n  // Variables to detect if the CLI is running in a cloud environment\n  codespaces: 'CODESPACES',\n  codespaceName: 'CODESPACE_NAME',\n  codespacePortForwardingDomain: 'GITHUB_CODESPACES_PORT_FORWARDING_DOMAIN',\n  gitpod: 'GITPOD_WORKSPACE_URL',\n  cloudShell: 'CLOUD_SHELL',\n  spinAppPort: 'SERVER_PORT',\n  spinAppHost: 'SPIN_APP_HOST',\n  organization: 'SHOPIFY_CLI_ORGANIZATION',\n  identityToken: 'SHOPIFY_CLI_IDENTITY_TOKEN',\n  refreshToken: 'SHOPIFY_CLI_REFRESH_TOKEN',\n  otelURL: 'SHOPIFY_CLI_OTEL_EXPORTER_OTLP_ENDPOINT',\n  themeKitAccessDomain: 'SHOPIFY_CLI_THEME_KIT_ACCESS_DOMAIN',\n  json: 'SHOPIFY_FLAG_JSON',\n  neverUsePartnersApi: 'SHOPIFY_CLI_NEVER_USE_PARTNERS_API',\n  skipNetworkLevelRetry: 'SHOPIFY_CLI_SKIP_NETWORK_LEVEL_RETRY',\n  maxRequestTimeForNetworkCalls: 'SHOPIFY_CLI_MAX_REQUEST_TIME_FOR_NETWORK_CALLS',\n  disableImportScanning: 'SHOPIFY_CLI_DISABLE_IMPORT_SCANNING',\n}\n\nexport const defaultThemeKitAccessDomain = 'theme-kit-access.shopifyapps.com'\n\nexport const systemEnvironmentVariables = {\n  backendPort: 'BACKEND_PORT',\n}\n\nexport const pathConstants = {\n  executables: {\n    dev: '/opt/dev/bin/dev',\n  },\n  directories: {\n    cache: {\n      path: () => {\n        return cacheFolder()\n      },\n      vendor: {\n        path: () => {\n          return joinPath(cacheFolder(), 'vendor')\n        },\n        binaries: () => {\n          return joinPath(cacheFolder(), 'vendor', 'binaries')\n        },\n      },\n    },\n  },\n}\n\nexport const sessionConstants = {\n  expirationTimeMarginInMinutes: 4,\n}\n\nexport const bugsnagApiKey = '9e1e6889176fd0c795d5c659225e0fae'\n\nexport const reportingRateLimit = {limit: 300, timeout: {days: 1}}\n\nexport const themeKitAccessDomain =\n  process.env[environmentVariables.themeKitAccessDomain] ?? defaultThemeKitAccessDomain\n"]}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/private/node/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAC,MAAM,2BAA2B,CAAA;AAClD,OAAO,QAAQ,MAAM,WAAW,CAAA;AAEhC,MAAM,UAAU,GAAG,aAAa,CAAA;AAEhC,MAAM,WAAW,GAAG,GAAG,EAAE;IACvB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;IACjE,OAAO,QAAQ,CAAC,UAAU,CAAC,CAAC,KAAK,CAAA;AACnC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,EAAE;IAC7B,OAAO,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG,CAAA;AACjC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,kBAAkB,EAAE,kCAAkC;IACtD,gBAAgB,EAAE,gCAAgC;IAClD,UAAU,EAAE,yBAAyB;IACrC,MAAM,EAAE,oBAAoB;IAC5B,iBAAiB,EAAE,iCAAiC;IACpD,GAAG,EAAE,iBAAiB;IACtB,WAAW,EAAE,0BAA0B;IACvC,qBAAqB,EAAE,yBAAyB;IAChD,kBAAkB,EAAE,8BAA8B;IAClD,aAAa,EAAE,4BAA4B;IAC3C,SAAS,EAAE,qBAAqB;IAChC,UAAU,EAAE,qBAAqB;IACjC,eAAe,EAAE,+BAA+B;IAChD,YAAY,EAAE,eAAe;IAC7B,UAAU,EAAE,yBAAyB;IACrC,QAAQ,EAAE,mBAAmB;IAC7B,OAAO,EAAE,sBAAsB;IAC/B,mEAAmE;IACnE,UAAU,EAAE,YAAY;IACxB,aAAa,EAAE,gBAAgB;IAC/B,6BAA6B,EAAE,0CAA0C;IACzE,MAAM,EAAE,sBAAsB;IAC9B,UAAU,EAAE,aAAa;IACzB,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,eAAe;IAC5B,YAAY,EAAE,0BAA0B;IACxC,aAAa,EAAE,4BAA4B;IAC3C,YAAY,EAAE,2BAA2B;IACzC,OAAO,EAAE,yCAAyC;IAClD,oBAAoB,EAAE,qCAAqC;IAC3D,IAAI,EAAE,mBAAmB;IACzB,qBAAqB,EAAE,sCAAsC;IAC7D,6BAA6B,EAAE,gDAAgD;IAC/E,qBAAqB,EAAE,qCAAqC;CAC7D,CAAA;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG,kCAAkC,CAAA;AAE7E,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,WAAW,EAAE,cAAc;CAC5B,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,WAAW,EAAE;QACX,GAAG,EAAE,kBAAkB;KACxB;IACD,WAAW,EAAE;QACX,KAAK,EAAE;YACL,IAAI,EAAE,GAAG,EAAE;gBACT,OAAO,WAAW,EAAE,CAAA;YACtB,CAAC;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,GAAG,EAAE;oBACT,OAAO,QAAQ,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAA;gBAC1C,CAAC;gBACD,QAAQ,EAAE,GAAG,EAAE;oBACb,OAAO,QAAQ,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAA;gBACtD,CAAC;aACF;SACF;KACF;CACF,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,6BAA6B,EAAE,CAAC;CACjC,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,kCAAkC,CAAA;AAE/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAC,IAAI,EAAE,CAAC,EAAC,EAAC,CAAA;AAElE,MAAM,CAAC,MAAM,oBAAoB,GAC/B,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,IAAI,2BAA2B,CAAA","sourcesContent":["import {joinPath} from '../../public/node/path.js'\nimport envPaths from 'env-paths'\n\nconst identifier = 'shopify-cli'\n\nconst cacheFolder = () => {\n  if (process.env.XDG_CACHE_HOME) return process.env.XDG_CACHE_HOME\n  return envPaths(identifier).cache\n}\n\nexport const logsFolder = () => {\n  return envPaths(identifier).log\n}\n\nexport const environmentVariables = {\n  alwaysLogAnalytics: 'SHOPIFY_CLI_ALWAYS_LOG_ANALYTICS',\n  alwaysLogMetrics: 'SHOPIFY_CLI_ALWAYS_LOG_METRICS',\n  deviceAuth: 'SHOPIFY_CLI_DEVICE_AUTH',\n  doctor: 'SHOPIFY_CLI_DOCTOR',\n  enableCliRedirect: 'SHOPIFY_CLI_ENABLE_CLI_REDIRECT',\n  env: 'SHOPIFY_CLI_ENV',\n  noAnalytics: 'SHOPIFY_CLI_NO_ANALYTICS',\n  optOutInstrumentation: 'OPT_OUT_INSTRUMENTATION',\n  appAutomationToken: 'SHOPIFY_APP_AUTOMATION_TOKEN',\n  partnersToken: 'SHOPIFY_CLI_PARTNERS_TOKEN',\n  runAsUser: 'SHOPIFY_RUN_AS_USER',\n  serviceEnv: 'SHOPIFY_SERVICE_ENV',\n  skipCliRedirect: 'SHOPIFY_CLI_SKIP_CLI_REDIRECT',\n  spinInstance: 'SPIN_INSTANCE',\n  themeToken: 'SHOPIFY_CLI_THEME_TOKEN',\n  unitTest: 'SHOPIFY_UNIT_TEST',\n  verbose: 'SHOPIFY_FLAG_VERBOSE',\n  // Variables to detect if the CLI is running in a cloud environment\n  codespaces: 'CODESPACES',\n  codespaceName: 'CODESPACE_NAME',\n  codespacePortForwardingDomain: 'GITHUB_CODESPACES_PORT_FORWARDING_DOMAIN',\n  gitpod: 'GITPOD_WORKSPACE_URL',\n  cloudShell: 'CLOUD_SHELL',\n  spinAppPort: 'SERVER_PORT',\n  spinAppHost: 'SPIN_APP_HOST',\n  organization: 'SHOPIFY_CLI_ORGANIZATION',\n  identityToken: 'SHOPIFY_CLI_IDENTITY_TOKEN',\n  refreshToken: 'SHOPIFY_CLI_REFRESH_TOKEN',\n  otelURL: 'SHOPIFY_CLI_OTEL_EXPORTER_OTLP_ENDPOINT',\n  themeKitAccessDomain: 'SHOPIFY_CLI_THEME_KIT_ACCESS_DOMAIN',\n  json: 'SHOPIFY_FLAG_JSON',\n  skipNetworkLevelRetry: 'SHOPIFY_CLI_SKIP_NETWORK_LEVEL_RETRY',\n  maxRequestTimeForNetworkCalls: 'SHOPIFY_CLI_MAX_REQUEST_TIME_FOR_NETWORK_CALLS',\n  disableImportScanning: 'SHOPIFY_CLI_DISABLE_IMPORT_SCANNING',\n}\n\nexport const defaultThemeKitAccessDomain = 'theme-kit-access.shopifyapps.com'\n\nexport const systemEnvironmentVariables = {\n  backendPort: 'BACKEND_PORT',\n}\n\nexport const pathConstants = {\n  executables: {\n    dev: '/opt/dev/bin/dev',\n  },\n  directories: {\n    cache: {\n      path: () => {\n        return cacheFolder()\n      },\n      vendor: {\n        path: () => {\n          return joinPath(cacheFolder(), 'vendor')\n        },\n        binaries: () => {\n          return joinPath(cacheFolder(), 'vendor', 'binaries')\n        },\n      },\n    },\n  },\n}\n\nexport const sessionConstants = {\n  expirationTimeMarginInMinutes: 4,\n}\n\nexport const bugsnagApiKey = '9e1e6889176fd0c795d5c659225e0fae'\n\nexport const reportingRateLimit = {limit: 300, timeout: {days: 1}}\n\nexport const themeKitAccessDomain =\n  process.env[environmentVariables.themeKitAccessDomain] ?? defaultThemeKitAccessDomain\n"]}

package/dist/private/node/content-tokens.js

@@ -49,8 +49,7 @@ export class JsonContentToken extends ContentToken {
 }
 export class LinesDiffContentToken extends ContentToken {
     output() {
-        return this.value
-            .map((part) => {
+        return this.value.flatMap((part) => {
             if (part.added) {
                 return part.value
                     .split(/\n/)
@@ -70,8 +69,7 @@ export class LinesDiffContentToken extends ContentToken {
             else {
                 return part.value;
             }
-        })
-            .flat();
+        });
     }
 }
 export class ColorContentToken extends ContentToken {

package/dist/private/node/content-tokens.js.map

@@ -1 +1 @@
-{"version":3,"file":"content-tokens.js","sourceRoot":"","sources":["../../../src/private/node/content-tokens.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,6BAA6B,CAAA;AAChD,OAAO,EAAgB,gBAAgB,EAAC,MAAM,6BAA6B,CAAA;AAC3E,OAAO,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAA;AACxD,OAAO,WAAW,MAAM,cAAc,CAAA;AACtC,OAAO,kBAAkB,MAAM,qBAAqB,CAAA;AACpD,OAAO,GAAG,MAAM,YAAY,CAAA;AAG5B,MAAM,OAAgB,YAAY;IAGhC,YAAY,KAAQ;QAClB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;CAGF;AAED,MAAM,OAAO,eAAgB,SAAQ,YAAoB;IACvD,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,YAA2B;IAI/D,YAAY,KAAoB,EAAE,IAAa,EAAE,QAAiB;QAChE,KAAK,CAAC,KAAK,CAAC,CAAA;QACZ,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAA;QAC3C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAC1B,CAAC;IAED,MAAM;QACJ,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAA;QAC3B,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,GAAG,IAAI,CAAA;QAC9E,IAAI,kBAAkB,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACpC,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAA;IACzC,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,YAA2B;IAClE,MAAM;QACJ,OAAO,KAAK,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAA;IACpE,CAAC;CACF;AAED,8DAA8D;AAC9D,MAAM,OAAO,gBAAiB,SAAQ,YAAiB;IACrD,MAAM;QACJ,IAAI,CAAC;YACH,OAAO,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;YAC9C,qDAAqD;QACvD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACpE,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,YAAsB;IAC/D,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK;aACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,KAAK;qBACd,KAAK,CAAC,IAAI,CAAC;qBACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;qBAC7B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;oBACZ,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAA;gBACpC,CAAC,CAAC,CAAA;YACN,CAAC;iBAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC,KAAK;qBACd,KAAK,CAAC,IAAI,CAAC;qBACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;qBAC7B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;oBACZ,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAA;gBACtC,CAAC,CAAC,CAAA;YACN,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,KAAK,CAAA;YACnB,CAAC;QACH,CAAC,CAAC;aACD,IAAI,EAAE,CAAA;IACX,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,YAA2B;IAGhE,YAAY,KAAoB,EAAE,KAA+B;QAC/D,KAAK,CAAC,KAAK,CAAC,CAAA;QACZ,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACjD,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,YAA2B;IAChE,MAAM;QACJ,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5D,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,YAA2B;IAC/D,MAAM;QACJ,OAAO,cAAc,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACrD,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,YAA2B;IAClE,MAAM;QACJ,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5D,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,YAA2B;IACrE,MAAM;QACJ,OAAO,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACvD,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,YAA2B;IACjE,MAAM;QACJ,OAAO,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACpD,CAAC;CACF","sourcesContent":["import colors from '../../public/node/colors.js'\nimport {OutputMessage, stringifyMessage} from '../../public/node/output.js'\nimport {relativizePath} from '../../public/node/path.js'\nimport ansiEscapes from 'ansi-escapes'\nimport supportsHyperlinks from 'supports-hyperlinks'\nimport cjs from 'color-json'\nimport type {Change} from 'diff'\n\nexport abstract class ContentToken<T> {\n  value: T\n\n  constructor(value: T) {\n    this.value = value\n  }\n\n  abstract output(): string | string[]\n}\n\nexport class RawContentToken extends ContentToken<string> {\n  output(): string {\n    return this.value\n  }\n}\n\nexport class LinkContentToken extends ContentToken<OutputMessage> {\n  link: string\n  fallback: string | undefined\n\n  constructor(value: OutputMessage, link?: string, fallback?: string) {\n    super(value)\n    this.link = link ?? stringifyMessage(value)\n    this.fallback = fallback\n  }\n\n  output() {\n    const text = colors.green(stringifyMessage(this.value))\n    const url = this.link ?? ''\n    const defaultFallback = this.value === this.link ? text : `${text} ( ${url} )`\n    if (supportsHyperlinks.stdout) {\n      return ansiEscapes.link(text, url)\n    }\n    return this.fallback ?? defaultFallback\n  }\n}\n\nexport class CommandContentToken extends ContentToken<OutputMessage> {\n  output(): string {\n    return `\\`${colors.magentaBright(stringifyMessage(this.value))}\\``\n  }\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport class JsonContentToken extends ContentToken<any> {\n  output(): string {\n    try {\n      return cjs(stringifyMessage(this.value) ?? {})\n      // eslint-disable-next-line no-catch-all/no-catch-all\n    } catch (_) {\n      return JSON.stringify(stringifyMessage(this.value) ?? {}, null, 2)\n    }\n  }\n}\n\nexport class LinesDiffContentToken extends ContentToken<Change[]> {\n  output(): string[] {\n    return this.value\n      .map((part) => {\n        if (part.added) {\n          return part.value\n            .split(/\\n/)\n            .filter((line) => line !== '')\n            .map((line) => {\n              return colors.green(`+ ${line}\\n`)\n            })\n        } else if (part.removed) {\n          return part.value\n            .split(/\\n/)\n            .filter((line) => line !== '')\n            .map((line) => {\n              return colors.magenta(`- ${line}\\n`)\n            })\n        } else {\n          return part.value\n        }\n      })\n      .flat()\n  }\n}\n\nexport class ColorContentToken extends ContentToken<OutputMessage> {\n  color: (text: string) => string\n\n  constructor(value: OutputMessage, color: (text: string) => string) {\n    super(value)\n    this.color = color\n  }\n\n  output(): string {\n    return this.color(stringifyMessage(this.value))\n  }\n}\n\nexport class ErrorContentToken extends ContentToken<OutputMessage> {\n  output(): string {\n    return colors.bold.redBright(stringifyMessage(this.value))\n  }\n}\n\nexport class PathContentToken extends ContentToken<OutputMessage> {\n  output(): string {\n    return relativizePath(stringifyMessage(this.value))\n  }\n}\n\nexport class HeadingContentToken extends ContentToken<OutputMessage> {\n  output(): string {\n    return colors.bold.underline(stringifyMessage(this.value))\n  }\n}\n\nexport class SubHeadingContentToken extends ContentToken<OutputMessage> {\n  output(): string {\n    return colors.underline(stringifyMessage(this.value))\n  }\n}\n\nexport class ItalicContentToken extends ContentToken<OutputMessage> {\n  output(): string {\n    return colors.italic(stringifyMessage(this.value))\n  }\n}\n"]}
+{"version":3,"file":"content-tokens.js","sourceRoot":"","sources":["../../../src/private/node/content-tokens.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,6BAA6B,CAAA;AAChD,OAAO,EAAgB,gBAAgB,EAAC,MAAM,6BAA6B,CAAA;AAC3E,OAAO,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAA;AACxD,OAAO,WAAW,MAAM,cAAc,CAAA;AACtC,OAAO,kBAAkB,MAAM,qBAAqB,CAAA;AACpD,OAAO,GAAG,MAAM,YAAY,CAAA;AAG5B,MAAM,OAAgB,YAAY;IAGhC,YAAY,KAAQ;QAClB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;CAGF;AAED,MAAM,OAAO,eAAgB,SAAQ,YAAoB;IACvD,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,YAA2B;IAI/D,YAAY,KAAoB,EAAE,IAAa,EAAE,QAAiB;QAChE,KAAK,CAAC,KAAK,CAAC,CAAA;QACZ,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAA;QAC3C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAC1B,CAAC;IAED,MAAM;QACJ,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAA;QAC3B,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,GAAG,IAAI,CAAA;QAC9E,IAAI,kBAAkB,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACpC,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAA;IACzC,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,YAA2B;IAClE,MAAM;QACJ,OAAO,KAAK,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAA;IACpE,CAAC;CACF;AAED,8DAA8D;AAC9D,MAAM,OAAO,gBAAiB,SAAQ,YAAiB;IACrD,MAAM;QACJ,IAAI,CAAC;YACH,OAAO,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;YAC9C,qDAAqD;QACvD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACpE,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,YAAsB;IAC/D,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YACjC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,KAAK;qBACd,KAAK,CAAC,IAAI,CAAC;qBACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;qBAC7B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;oBACZ,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAA;gBACpC,CAAC,CAAC,CAAA;YACN,CAAC;iBAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC,KAAK;qBACd,KAAK,CAAC,IAAI,CAAC;qBACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;qBAC7B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;oBACZ,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAA;gBACtC,CAAC,CAAC,CAAA;YACN,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,KAAK,CAAA;YACnB,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,YAA2B;IAGhE,YAAY,KAAoB,EAAE,KAA+B;QAC/D,KAAK,CAAC,KAAK,CAAC,CAAA;QACZ,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACjD,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,YAA2B;IAChE,MAAM;QACJ,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5D,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,YAA2B;IAC/D,MAAM;QACJ,OAAO,cAAc,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACrD,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,YAA2B;IAClE,MAAM;QACJ,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5D,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,YAA2B;IACrE,MAAM;QACJ,OAAO,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACvD,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,YAA2B;IACjE,MAAM;QACJ,OAAO,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACpD,CAAC;CACF","sourcesContent":["import colors from '../../public/node/colors.js'\nimport {OutputMessage, stringifyMessage} from '../../public/node/output.js'\nimport {relativizePath} from '../../public/node/path.js'\nimport ansiEscapes from 'ansi-escapes'\nimport supportsHyperlinks from 'supports-hyperlinks'\nimport cjs from 'color-json'\nimport type {Change} from 'diff'\n\nexport abstract class ContentToken<T> {\n  value: T\n\n  constructor(value: T) {\n    this.value = value\n  }\n\n  abstract output(): string | string[]\n}\n\nexport class RawContentToken extends ContentToken<string> {\n  output(): string {\n    return this.value\n  }\n}\n\nexport class LinkContentToken extends ContentToken<OutputMessage> {\n  link: string\n  fallback: string | undefined\n\n  constructor(value: OutputMessage, link?: string, fallback?: string) {\n    super(value)\n    this.link = link ?? stringifyMessage(value)\n    this.fallback = fallback\n  }\n\n  output() {\n    const text = colors.green(stringifyMessage(this.value))\n    const url = this.link ?? ''\n    const defaultFallback = this.value === this.link ? text : `${text} ( ${url} )`\n    if (supportsHyperlinks.stdout) {\n      return ansiEscapes.link(text, url)\n    }\n    return this.fallback ?? defaultFallback\n  }\n}\n\nexport class CommandContentToken extends ContentToken<OutputMessage> {\n  output(): string {\n    return `\\`${colors.magentaBright(stringifyMessage(this.value))}\\``\n  }\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport class JsonContentToken extends ContentToken<any> {\n  output(): string {\n    try {\n      return cjs(stringifyMessage(this.value) ?? {})\n      // eslint-disable-next-line no-catch-all/no-catch-all\n    } catch (_) {\n      return JSON.stringify(stringifyMessage(this.value) ?? {}, null, 2)\n    }\n  }\n}\n\nexport class LinesDiffContentToken extends ContentToken<Change[]> {\n  output(): string[] {\n    return this.value.flatMap((part) => {\n      if (part.added) {\n        return part.value\n          .split(/\\n/)\n          .filter((line) => line !== '')\n          .map((line) => {\n            return colors.green(`+ ${line}\\n`)\n          })\n      } else if (part.removed) {\n        return part.value\n          .split(/\\n/)\n          .filter((line) => line !== '')\n          .map((line) => {\n            return colors.magenta(`- ${line}\\n`)\n          })\n      } else {\n        return part.value\n      }\n    })\n  }\n}\n\nexport class ColorContentToken extends ContentToken<OutputMessage> {\n  color: (text: string) => string\n\n  constructor(value: OutputMessage, color: (text: string) => string) {\n    super(value)\n    this.color = color\n  }\n\n  output(): string {\n    return this.color(stringifyMessage(this.value))\n  }\n}\n\nexport class ErrorContentToken extends ContentToken<OutputMessage> {\n  output(): string {\n    return colors.bold.redBright(stringifyMessage(this.value))\n  }\n}\n\nexport class PathContentToken extends ContentToken<OutputMessage> {\n  output(): string {\n    return relativizePath(stringifyMessage(this.value))\n  }\n}\n\nexport class HeadingContentToken extends ContentToken<OutputMessage> {\n  output(): string {\n    return colors.bold.underline(stringifyMessage(this.value))\n  }\n}\n\nexport class SubHeadingContentToken extends ContentToken<OutputMessage> {\n  output(): string {\n    return colors.underline(stringifyMessage(this.value))\n  }\n}\n\nexport class ItalicContentToken extends ContentToken<OutputMessage> {\n  output(): string {\n    return colors.italic(stringifyMessage(this.value))\n  }\n}\n"]}

package/dist/private/node/session/scopes.js

@@ -1,5 +1,6 @@
 import { allAPIs } from '../api.js';
 import { BugError } from '../../../public/node/error.js';
+import { uniq } from '../../../public/common/array.js';
 /**
  * Generate a flat array with all the default scopes for all the APIs plus
  * any custom scope defined by the user.
@@ -7,9 +8,9 @@ import { BugError } from '../../../public/node/error.js';
  * @returns Array of scopes
  */
 export function allDefaultScopes(extraScopes = []) {
-    let scopes = allAPIs.map((api) => defaultApiScopes(api)).flat();
-    scopes = ['openid', ...scopes, ...extraScopes].map(scopeTransform);
-    return Array.from(new Set(scopes));
+    const scopes = allAPIs.flatMap((api) => defaultApiScopes(api));
+    const allScopes = ['openid', ...scopes, ...extraScopes].map(scopeTransform);
+    return uniq(allScopes);
 }
 /**
  * Generate a flat array with the default scopes for the given API plus
@@ -19,8 +20,8 @@ export function allDefaultScopes(extraScopes = []) {
  * @returns Array of scopes
  */
 export function apiScopes(api, extraScopes = []) {
-    const scopes = [...defaultApiScopes(api), ...extraScopes.map(scopeTransform)].map(scopeTransform);
-    return Array.from(new Set(scopes));
+    const scopes = [...defaultApiScopes(api), ...extraScopes].map(scopeTransform);
+    return uniq(scopes);
 }
 /**
  * Returns specific scopes required for token exchange with the given API.

package/dist/private/node/session/scopes.js.map

@@ -1 +1 @@
-{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../../../../src/private/node/session/scopes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,OAAO,EAAM,MAAM,WAAW,CAAA;AACtC,OAAO,EAAC,QAAQ,EAAC,MAAM,+BAA+B,CAAA;AAEtD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,cAAwB,EAAE;IACzD,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC/D,MAAM,GAAG,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IAClE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;AACpC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,GAAQ,EAAE,cAAwB,EAAE;IAC5D,MAAM,MAAM,GAAG,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IACjG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAQ;IAC1C,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,UAAU;YACb,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;QAChC,KAAK,gBAAgB;YACnB,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAA;QAC3C,KAAK,mBAAmB;YACtB,OAAO,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAA;QACzC,KAAK,OAAO,CAAC;QACb,KAAK,qBAAqB;YACxB,MAAM,IAAI,QAAQ,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAA;IACtE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAQ;IAChC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO;YACV,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAA;QAC9C,KAAK,qBAAqB;YACxB,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;QAChC,KAAK,UAAU;YACb,OAAO,CAAC,KAAK,CAAC,CAAA;QAChB,KAAK,mBAAmB;YACtB,OAAO,CAAC,cAAc,EAAE,kBAAkB,EAAE,uBAAuB,CAAC,CAAA;QACtE,KAAK,gBAAgB;YACnB,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAC3B;YACE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,iDAAiD,CAAA;QAC1D,KAAK,QAAQ;YACX,OAAO,gDAAgD,CAAA;QACzD,KAAK,cAAc;YACjB,OAAO,2EAA2E,CAAA;QACpF,KAAK,KAAK;YACR,OAAO,sDAAsD,CAAA;QAC/D,KAAK,UAAU;YACb,OAAO,gEAAgE,CAAA;QACzE,KAAK,cAAc;YACjB,OAAO,oDAAoD,CAAA;QAC7D,KAAK,kBAAkB;YACrB,OAAO,4DAA4D,CAAA;QACrE,KAAK,uBAAuB;YAC1B,OAAO,iEAAiE,CAAA;QAC1E,KAAK,gBAAgB;YACnB,OAAO,uDAAuD,CAAA;QAChE;YACE,OAAO,KAAK,CAAA;IAChB,CAAC;AACH,CAAC","sourcesContent":["import {allAPIs, API} from '../api.js'\nimport {BugError} from '../../../public/node/error.js'\n\n/**\n * Generate a flat array with all the default scopes for all the APIs plus\n * any custom scope defined by the user.\n * @param extraScopes - custom user-defined scopes\n * @returns Array of scopes\n */\nexport function allDefaultScopes(extraScopes: string[] = []): string[] {\n  let scopes = allAPIs.map((api) => defaultApiScopes(api)).flat()\n  scopes = ['openid', ...scopes, ...extraScopes].map(scopeTransform)\n  return Array.from(new Set(scopes))\n}\n\n/**\n * Generate a flat array with the default scopes for the given API plus\n * any custom scope defined by the user\n * @param api - API to get the scopes for\n * @param extraScopes - custom user-defined scopes\n * @returns Array of scopes\n */\nexport function apiScopes(api: API, extraScopes: string[] = []): string[] {\n  const scopes = [...defaultApiScopes(api), ...extraScopes.map(scopeTransform)].map(scopeTransform)\n  return Array.from(new Set(scopes))\n}\n\n/**\n * Returns specific scopes required for token exchange with the given API.\n * @param api - API to get the scopes for\n * @returns Array of transformed scopes\n */\nexport function tokenExchangeScopes(api: API): string[] {\n  switch (api) {\n    case 'partners':\n      return [scopeTransform('cli')]\n    case 'app-management':\n      return [scopeTransform('app-management')]\n    case 'business-platform':\n      return [scopeTransform('destinations')]\n    case 'admin':\n    case 'storefront-renderer':\n      throw new BugError(`API not supported for token exchange: ${api}`)\n  }\n}\n\nfunction defaultApiScopes(api: API): string[] {\n  switch (api) {\n    case 'admin':\n      return ['graphql', 'themes', 'collaborator']\n    case 'storefront-renderer':\n      return ['devtools', 'graphql']\n    case 'partners':\n      return ['cli']\n    case 'business-platform':\n      return ['destinations', 'store-management', 'on-demand-user-access']\n    case 'app-management':\n      return ['app-management']\n    default:\n      throw new BugError(`Unknown API: ${api}`)\n  }\n}\n\nfunction scopeTransform(scope: string): string {\n  switch (scope) {\n    case 'graphql':\n      return 'https://api.shopify.com/auth/shop.admin.graphql'\n    case 'themes':\n      return 'https://api.shopify.com/auth/shop.admin.themes'\n    case 'collaborator':\n      return 'https://api.shopify.com/auth/partners.collaborator-relationships.readonly'\n    case 'cli':\n      return 'https://api.shopify.com/auth/partners.app.cli.access'\n    case 'devtools':\n      return 'https://api.shopify.com/auth/shop.storefront-renderer.devtools'\n    case 'destinations':\n      return 'https://api.shopify.com/auth/destinations.readonly'\n    case 'store-management':\n      return 'https://api.shopify.com/auth/organization.store-management'\n    case 'on-demand-user-access':\n      return 'https://api.shopify.com/auth/organization.on-demand-user-access'\n    case 'app-management':\n      return 'https://api.shopify.com/auth/organization.apps.manage'\n    default:\n      return scope\n  }\n}\n"]}
+{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../../../../src/private/node/session/scopes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,OAAO,EAAM,MAAM,WAAW,CAAA;AACtC,OAAO,EAAC,QAAQ,EAAC,MAAM,+BAA+B,CAAA;AACtD,OAAO,EAAC,IAAI,EAAC,MAAM,iCAAiC,CAAA;AAEpD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,cAAwB,EAAE;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9D,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IAC3E,OAAO,IAAI,CAAC,SAAS,CAAC,CAAA;AACxB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,GAAQ,EAAE,cAAwB,EAAE;IAC5D,MAAM,MAAM,GAAG,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IAC7E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAA;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAQ;IAC1C,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,UAAU;YACb,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;QAChC,KAAK,gBAAgB;YACnB,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAA;QAC3C,KAAK,mBAAmB;YACtB,OAAO,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAA;QACzC,KAAK,OAAO,CAAC;QACb,KAAK,qBAAqB;YACxB,MAAM,IAAI,QAAQ,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAA;IACtE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAQ;IAChC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO;YACV,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAA;QAC9C,KAAK,qBAAqB;YACxB,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;QAChC,KAAK,UAAU;YACb,OAAO,CAAC,KAAK,CAAC,CAAA;QAChB,KAAK,mBAAmB;YACtB,OAAO,CAAC,cAAc,EAAE,kBAAkB,EAAE,uBAAuB,CAAC,CAAA;QACtE,KAAK,gBAAgB;YACnB,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAC3B;YACE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,iDAAiD,CAAA;QAC1D,KAAK,QAAQ;YACX,OAAO,gDAAgD,CAAA;QACzD,KAAK,cAAc;YACjB,OAAO,2EAA2E,CAAA;QACpF,KAAK,KAAK;YACR,OAAO,sDAAsD,CAAA;QAC/D,KAAK,UAAU;YACb,OAAO,gEAAgE,CAAA;QACzE,KAAK,cAAc;YACjB,OAAO,oDAAoD,CAAA;QAC7D,KAAK,kBAAkB;YACrB,OAAO,4DAA4D,CAAA;QACrE,KAAK,uBAAuB;YAC1B,OAAO,iEAAiE,CAAA;QAC1E,KAAK,gBAAgB;YACnB,OAAO,uDAAuD,CAAA;QAChE;YACE,OAAO,KAAK,CAAA;IAChB,CAAC;AACH,CAAC","sourcesContent":["import {allAPIs, API} from '../api.js'\nimport {BugError} from '../../../public/node/error.js'\nimport {uniq} from '../../../public/common/array.js'\n\n/**\n * Generate a flat array with all the default scopes for all the APIs plus\n * any custom scope defined by the user.\n * @param extraScopes - custom user-defined scopes\n * @returns Array of scopes\n */\nexport function allDefaultScopes(extraScopes: string[] = []): string[] {\n  const scopes = allAPIs.flatMap((api) => defaultApiScopes(api))\n  const allScopes = ['openid', ...scopes, ...extraScopes].map(scopeTransform)\n  return uniq(allScopes)\n}\n\n/**\n * Generate a flat array with the default scopes for the given API plus\n * any custom scope defined by the user\n * @param api - API to get the scopes for\n * @param extraScopes - custom user-defined scopes\n * @returns Array of scopes\n */\nexport function apiScopes(api: API, extraScopes: string[] = []): string[] {\n  const scopes = [...defaultApiScopes(api), ...extraScopes].map(scopeTransform)\n  return uniq(scopes)\n}\n\n/**\n * Returns specific scopes required for token exchange with the given API.\n * @param api - API to get the scopes for\n * @returns Array of transformed scopes\n */\nexport function tokenExchangeScopes(api: API): string[] {\n  switch (api) {\n    case 'partners':\n      return [scopeTransform('cli')]\n    case 'app-management':\n      return [scopeTransform('app-management')]\n    case 'business-platform':\n      return [scopeTransform('destinations')]\n    case 'admin':\n    case 'storefront-renderer':\n      throw new BugError(`API not supported for token exchange: ${api}`)\n  }\n}\n\nfunction defaultApiScopes(api: API): string[] {\n  switch (api) {\n    case 'admin':\n      return ['graphql', 'themes', 'collaborator']\n    case 'storefront-renderer':\n      return ['devtools', 'graphql']\n    case 'partners':\n      return ['cli']\n    case 'business-platform':\n      return ['destinations', 'store-management', 'on-demand-user-access']\n    case 'app-management':\n      return ['app-management']\n    default:\n      throw new BugError(`Unknown API: ${api}`)\n  }\n}\n\nfunction scopeTransform(scope: string): string {\n  switch (scope) {\n    case 'graphql':\n      return 'https://api.shopify.com/auth/shop.admin.graphql'\n    case 'themes':\n      return 'https://api.shopify.com/auth/shop.admin.themes'\n    case 'collaborator':\n      return 'https://api.shopify.com/auth/partners.collaborator-relationships.readonly'\n    case 'cli':\n      return 'https://api.shopify.com/auth/partners.app.cli.access'\n    case 'devtools':\n      return 'https://api.shopify.com/auth/shop.storefront-renderer.devtools'\n    case 'destinations':\n      return 'https://api.shopify.com/auth/destinations.readonly'\n    case 'store-management':\n      return 'https://api.shopify.com/auth/organization.store-management'\n    case 'on-demand-user-access':\n      return 'https://api.shopify.com/auth/organization.on-demand-user-access'\n    case 'app-management':\n      return 'https://api.shopify.com/auth/organization.apps.manage'\n    default:\n      return scope\n  }\n}\n"]}