@shopify/create-app 3.91.1 → 3.92.1

package/dist/{chunk-NTSWA5QE.js → chunk-6VIP6FXG.js}

@@ -2,12 +2,12 @@ import {
   CLI_KIT_VERSION,
   jsonOutputEnabled,
   z
-} from "./chunk-XKZES4F6.js";
+} from "./chunk-CCWLFNWN.js";
 import {
   cacheRetrieve,
   cacheStore,
   versionSatisfies
-} from "./chunk-7WLIB5CO.js";
+} from "./chunk-QZMFOTZO.js";
 import {
   AbortSilentError,
   exec,
@@ -16,7 +16,7 @@ import {
   renderError,
   renderInfo,
   renderWarning
-} from "./chunk-NSOYPXEP.js";
+} from "./chunk-RIXXPHKS.js";
 import {
   init_cjs_shims
 } from "./chunk-PKR7KJ6P.js";
@@ -84,7 +84,7 @@ async function showNotificationsIfNeeded(currentSurfaces, environment = process.
       throw new AbortSilentError();
     let errorMessage = `Error showing notifications: ${error.message}`;
     outputDebug(errorMessage);
-    let { sendErrorToBugsnag } = await import("./error-handler-LIQZ7B4V.js");
+    let { sendErrorToBugsnag } = await import("./error-handler-SDB6N5WP.js");
     await sendErrorToBugsnag(errorMessage, "unexpected_error");
   }
 }
@@ -174,4 +174,4 @@ export {
   showNotificationsIfNeeded,
   fetchNotificationsInBackground
 };
-//# sourceMappingURL=chunk-NTSWA5QE.js.map
+//# sourceMappingURL=chunk-6VIP6FXG.js.map

package/dist/{chunk-XKZES4F6.js → chunk-CCWLFNWN.js}

@@ -4,18 +4,21 @@ import {
   formDataToBlob
 } from "./chunk-VBBBCVMH.js";
 import {
+  Environment,
   cacheRetrieveOrRepopulate,
   getCurrentSessionId,
   getPackageManager,
   getSessions,
+  isLocalEnvironment,
   packageManagerFromUserAgent,
   removeCurrentSessionId,
   removeSessions,
   runWithRateLimit,
+  serviceEnvironment,
   setCurrentSessionId,
   setSessions,
   timeIntervalToMilliseconds
-} from "./chunk-7WLIB5CO.js";
+} from "./chunk-QZMFOTZO.js";
 import {
   AbortError,
   AbortSilentError,
@@ -100,10 +103,10 @@ import {
   stringifyMessage,
   systemEnvironmentVariables,
   themeToken
-} from "./chunk-NSOYPXEP.js";
+} from "./chunk-RIXXPHKS.js";
 import {
   require_lib
-} from "./chunk-D7M6DPGX.js";
+} from "./chunk-Z4EMJFGP.js";
 import {
   cwd,
   isAbsolutePath,
@@ -111,7 +114,7 @@ import {
   normalizePath,
   relativePath,
   sniffForJson
-} from "./chunk-Y2JP6WFP.js";
+} from "./chunk-CFNYEDC6.js";
 import {
   require_once
 } from "./chunk-SHWOPMLQ.js";
@@ -48071,12 +48074,19 @@ function maxRequestTimeForNetworkCallsMs(environment = getEnvironmentVariables()
   return maxRequestTime && !isNaN(Number(maxRequestTime)) ? Number(maxRequestTime) : 30 * 1e3;
 }
 
+// ../cli-kit/dist/private/node/api/urls.js
+init_cjs_shims();
+function sanitizeURL(url4) {
+  let parsedUrl = new URL(url4);
+  return parsedUrl.searchParams.has("subject_token") && parsedUrl.searchParams.set("subject_token", "****"), parsedUrl.searchParams.has("token") && parsedUrl.searchParams.set("token", "****"), parsedUrl.toString();
+}
+
 // ../cli-kit/dist/private/node/api/headers.js
 init_cjs_shims();
 
 // ../cli-kit/dist/public/common/version.js
 init_cjs_shims();
-var CLI_KIT_VERSION = "3.91.1";
+var CLI_KIT_VERSION = "3.92.1";
 
 // ../cli-kit/dist/private/node/api/headers.js
 import https from "https";
@@ -48120,13 +48130,6 @@ async function httpsAgent() {
   });
 }
 
-// ../cli-kit/dist/private/node/api/urls.js
-init_cjs_shims();
-function sanitizeURL(url4) {
-  let parsedUrl = new URL(url4);
-  return parsedUrl.searchParams.has("subject_token") && parsedUrl.searchParams.set("subject_token", "****"), parsedUrl.searchParams.has("token") && parsedUrl.searchParams.set("token", "****"), parsedUrl.toString();
-}
-
 // ../cli-kit/dist/private/node/api.js
 init_cjs_shims();
 
@@ -49839,52 +49842,6 @@ init_cjs_shims();
 // ../cli-kit/dist/private/node/session.js
 init_cjs_shims();
 
-// ../cli-kit/dist/private/node/session/identity.js
-init_cjs_shims();
-
-// ../cli-kit/dist/private/node/context/service.js
-init_cjs_shims();
-var Environment;
-(function(Environment2) {
-  Environment2.Local = "local", Environment2.Production = "production";
-})(Environment || (Environment = {}));
-function serviceEnvironment(env = process.env) {
-  return env[environmentVariables.serviceEnv] === "local" ? Environment.Local : Environment.Production;
-}
-function isLocalEnvironment(env = process.env) {
-  return serviceEnvironment(env) === Environment.Local;
-}
-
-// ../cli-kit/dist/private/node/session/identity.js
-function clientId() {
-  let environment = serviceEnvironment();
-  return environment === Environment.Local ? "e5380e02-312a-7408-5718-e07017e9cf52" : environment === Environment.Production ? "fbdb2649-e327-4907-8f67-908d24cfd7e3" : "e5380e02-312a-7408-5718-e07017e9cf52";
-}
-function applicationId(api) {
-  switch (api) {
-    case "admin": {
-      let environment = serviceEnvironment();
-      return environment === Environment.Local ? "e92482cebb9bfb9fb5a0199cc770fde3de6c8d16b798ee73e36c9d815e070e52" : environment === Environment.Production ? "7ee65a63608843c577db8b23c4d7316ea0a01bd2f7594f8a9c06ea668c1b775c" : "e92482cebb9bfb9fb5a0199cc770fde3de6c8d16b798ee73e36c9d815e070e52";
-    }
-    case "partners": {
-      let environment = serviceEnvironment();
-      return environment === Environment.Local ? "df89d73339ac3c6c5f0a98d9ca93260763e384d51d6038da129889c308973978" : environment === Environment.Production ? "271e16d403dfa18082ffb3d197bd2b5f4479c3fc32736d69296829cbb28d41a6" : "df89d73339ac3c6c5f0a98d9ca93260763e384d51d6038da129889c308973978";
-    }
-    case "storefront-renderer": {
-      let environment = serviceEnvironment();
-      return environment === Environment.Local ? "46f603de-894f-488d-9471-5b721280ff49" : environment === Environment.Production ? "ee139b3d-5861-4d45-b387-1bc3ada7811c" : "46f603de-894f-488d-9471-5b721280ff49";
-    }
-    case "business-platform": {
-      let environment = serviceEnvironment();
-      return environment === Environment.Local ? "ace6dc89-b526-456d-a942-4b8ef6acda4b" : environment === Environment.Production ? "32ff8ee5-82b8-4d93-9f8a-c6997cefb7dc" : "ace6dc89-b526-456d-a942-4b8ef6acda4b";
-    }
-    case "app-management":
-      return serviceEnvironment() === Environment.Production ? "7ee65a63608843c577db8b23c4d7316ea0a01bd2f7594f8a9c06ea668c1b775c" : "e92482cebb9bfb9fb5a0199cc770fde3de6c8d16b798ee73e36c9d815e070e52";
-    default:
-      throw new BugError(`Application id for API of type: ${api}`);
-  }
-}
-
 // ../cli-kit/dist/private/node/session/validate.js
 init_cjs_shims();
 
@@ -52858,30 +52815,11 @@ function validateScopes(requestedScopes, identity) {
   let currentScopes = identity.scopes;
   return firstPartyDev() !== currentScopes.includes("employee") ? !1 : requestedScopes.every((scope) => currentScopes.includes(scope));
 }
-async function validateSession(scopes, applications, session) {
-  if (!session || !validateScopes(scopes, session.identity))
+async function validateSession(scopes, session) {
+  if (!session || !validateScopes(scopes, session.identity) || !validateCachedIdentityTokenStructure(session.identity))
     return "needs_full_auth";
-  let tokensAreExpired = isTokenExpired(session.identity);
-  if (applications.partnersApi) {
-    let appId = applicationId("partners"), token = session.applications[appId];
-    tokensAreExpired = tokensAreExpired || isTokenExpired(token);
-  }
-  if (applications.appManagementApi) {
-    let appId = applicationId("app-management"), token = session.applications[appId];
-    tokensAreExpired = tokensAreExpired || isTokenExpired(token);
-  }
-  if (applications.storefrontRendererApi) {
-    let appId = applicationId("storefront-renderer"), token = session.applications[appId];
-    tokensAreExpired = tokensAreExpired || isTokenExpired(token);
-  }
-  if (applications.adminApi) {
-    let appId = applicationId("admin"), realAppId = `${applications.adminApi.storeFqdn}-${appId}`, token = session.applications[realAppId];
-    tokensAreExpired = tokensAreExpired || isTokenExpired(token);
-  }
-  return outputDebug(`- Token validation -> It's expired: ${tokensAreExpired}`), validateCachedIdentityTokenStructure(session.identity) ? tokensAreExpired ? "needs_refresh" : "ok" : "needs_full_auth";
-}
-function isTokenExpired(token) {
-  return token ? token.expiresAt < expireThreshold() : !0;
+  let expired = session.identity.expiresAt < expireThreshold();
+  return outputDebug(`- Token validation -> It's expired: ${expired}`), expired ? "needs_refresh" : "ok";
 }
 function expireThreshold() {
   return new Date(Date.now() + sessionConstants.expirationTimeMarginInMinutes * 60 * 1e3);
@@ -52893,10 +52831,6 @@ function allDefaultScopes(extraScopes = []) {
   let scopes = allAPIs.map((api) => defaultApiScopes(api)).flat();
   return scopes = ["openid", ...scopes, ...extraScopes].map(scopeTransform), Array.from(new Set(scopes));
 }
-function apiScopes(api, extraScopes = []) {
-  let scopes = [...defaultApiScopes(api), ...extraScopes.map(scopeTransform)].map(scopeTransform);
-  return Array.from(new Set(scopes));
-}
 function tokenExchangeScopes(api) {
   switch (api) {
     case "partners":
@@ -52953,6 +52887,37 @@ function scopeTransform(scope) {
 // ../cli-kit/dist/private/node/session/exchange.js
 init_cjs_shims();
 
+// ../cli-kit/dist/private/node/session/identity.js
+init_cjs_shims();
+function clientId() {
+  let environment = serviceEnvironment();
+  return environment === Environment.Local ? "e5380e02-312a-7408-5718-e07017e9cf52" : environment === Environment.Production ? "fbdb2649-e327-4907-8f67-908d24cfd7e3" : "e5380e02-312a-7408-5718-e07017e9cf52";
+}
+function applicationId(api) {
+  switch (api) {
+    case "admin": {
+      let environment = serviceEnvironment();
+      return environment === Environment.Local ? "e92482cebb9bfb9fb5a0199cc770fde3de6c8d16b798ee73e36c9d815e070e52" : environment === Environment.Production ? "7ee65a63608843c577db8b23c4d7316ea0a01bd2f7594f8a9c06ea668c1b775c" : "e92482cebb9bfb9fb5a0199cc770fde3de6c8d16b798ee73e36c9d815e070e52";
+    }
+    case "partners": {
+      let environment = serviceEnvironment();
+      return environment === Environment.Local ? "df89d73339ac3c6c5f0a98d9ca93260763e384d51d6038da129889c308973978" : environment === Environment.Production ? "271e16d403dfa18082ffb3d197bd2b5f4479c3fc32736d69296829cbb28d41a6" : "df89d73339ac3c6c5f0a98d9ca93260763e384d51d6038da129889c308973978";
+    }
+    case "storefront-renderer": {
+      let environment = serviceEnvironment();
+      return environment === Environment.Local ? "46f603de-894f-488d-9471-5b721280ff49" : environment === Environment.Production ? "ee139b3d-5861-4d45-b387-1bc3ada7811c" : "46f603de-894f-488d-9471-5b721280ff49";
+    }
+    case "business-platform": {
+      let environment = serviceEnvironment();
+      return environment === Environment.Local ? "ace6dc89-b526-456d-a942-4b8ef6acda4b" : environment === Environment.Production ? "32ff8ee5-82b8-4d93-9f8a-c6997cefb7dc" : "ace6dc89-b526-456d-a942-4b8ef6acda4b";
+    }
+    case "app-management":
+      return serviceEnvironment() === Environment.Production ? "7ee65a63608843c577db8b23c4d7316ea0a01bd2f7594f8a9c06ea668c1b775c" : "e92482cebb9bfb9fb5a0199cc770fde3de6c8d16b798ee73e36c9d815e070e52";
+    default:
+      throw new BugError(`Application id for API of type: ${api}`);
+  }
+}
+
 // ../cli-kit/dist/public/node/context/fqdn.js
 init_cjs_shims();
 
@@ -52969,12 +52934,9 @@ function assertCompatibleEnvironment() {
 
 // ../cli-kit/dist/public/node/vendor/dev_server/dev-server.js
 init_cjs_shims();
-import fs4 from "node:fs";
 
 // ../cli-kit/dist/public/node/vendor/dev_server/dev-server-2024.js
 init_cjs_shims();
-var ni = __toESM(require_network_interfaces(), 1);
-import fs2 from "node:fs";
 
 // ../cli-kit/dist/public/node/vendor/dev_server/network/index.js
 init_cjs_shims();
@@ -53036,6 +52998,8 @@ function fallbackCheckPort(address, port, timeout) {
 }
 
 // ../cli-kit/dist/public/node/vendor/dev_server/dev-server-2024.js
+var ni = __toESM(require_network_interfaces(), 1);
+import fs2 from "node:fs";
 var NON_SHOP_PREFIXES = ["app", "dev", "shopify"], BACKEND_PORT = 8080;
 function createServer(projectName) {
   return {
@@ -53089,8 +53053,8 @@ var assertRunningOverride;
 
 // ../cli-kit/dist/public/node/vendor/dev_server/dev-server-2016.js
 init_cjs_shims();
-import fs3 from "fs";
 import * as os from "node:os";
+import fs3 from "fs";
 function createServer2(projectName) {
   return {
     host: (options2 = {}) => host2(projectName, options2),
@@ -53118,6 +53082,7 @@ function getAddrPort(name) {
 var assertRunningOverride2;
 
 // ../cli-kit/dist/public/node/vendor/dev_server/dev-server.js
+import fs4 from "node:fs";
 var DevServer = class {
   constructor(projectName) {
     if (this.projectName = projectName, projectName === "shopify")
@@ -53249,7 +53214,7 @@ var ok = (value) => new Ok(value), err = (err2) => new Err(err2), Ok = class {
     return ok(this.value);
   }
 }, Err = class {
-  // eslint-disable-next-line node/handle-callback-err
+  // eslint-disable-next-line n/handle-callback-err
   constructor(error) {
     this.error = error;
   }
@@ -53394,22 +53359,6 @@ var InvalidGrantError = class extends import_ts_error.ExtendableError {
 }, InvalidRequestError = class extends import_ts_error.ExtendableError {
 }, InvalidTargetError = class extends AbortError {
 };
-async function exchangeAccessForApplicationTokens(identityToken, scopes, store2) {
-  let token = identityToken.accessToken, [partners, storefront, businessPlatform, admin, appManagement] = await Promise.all([
-    requestAppToken("partners", token, scopes.partners),
-    requestAppToken("storefront-renderer", token, scopes.storefront),
-    requestAppToken("business-platform", token, scopes.businessPlatform),
-    store2 ? requestAppToken("admin", token, scopes.admin, store2) : {},
-    requestAppToken("app-management", token, scopes.appManagement)
-  ]);
-  return {
-    ...partners,
-    ...storefront,
-    ...businessPlatform,
-    ...admin,
-    ...appManagement
-  };
-}
 async function refreshAccessToken(currentToken) {
   let clientId2 = clientId(), params = {
     grant_type: "refresh_token",
@@ -53475,8 +53424,13 @@ function tokenRequestErrorHandler({ error, store: store2 }) {
 async function tokenRequest(params) {
   let fqdn = await identityFqdn(), url4 = new URL(`https://${fqdn}/oauth/token`);
   url4.search = new URLSearchParams(Object.entries(params)).toString();
-  let res = await shopifyFetch(url4.href, { method: "POST" }), payload = await res.json();
-  return res.ok ? ok(payload) : err({ error: payload.error, store: params.store });
+  let res = await shopifyFetch(url4.href, { method: "POST" });
+  try {
+    let responseText = await res.text(), payload = JSON.parse(responseText);
+    return res.ok ? ok(payload) : err({ error: payload.error, store: params.store });
+  } catch (error) {
+    throw error instanceof SyntaxError ? new AbortError(`Received invalid response from authentication service (HTTP ${res.status}).`, "The response could not be parsed as JSON. The service may be temporarily unavailable. Please try again.") : error;
+  }
 }
 function buildIdentityToken(result, existingUserId, existingAlias) {
   let userId2 = existingUserId ?? (result.id_token ? decodeJwt(result.id_token).sub : void 0);
@@ -53704,10 +53658,14 @@ async function ensureAuthenticatedAdminAsApp(storeFqdn, clientId2, clientSecret)
       "Content-Type": "application/json"
     },
     body: JSON.stringify(bodyData)
-  }, "slow-request");
+  }, "slow-request"), body = await tokenResponse.text();
   if (tokenResponse.status === 400)
-    throw (await tokenResponse.text()).includes("app_not_installed") ? new AbortError(outputContent`App is not installed on ${outputToken.green(storeFqdn)}. Try running ${outputToken.genericShellCommand("shopify app dev")} to connect your app to the shop.`) : new AbortError(`Failed to get access token for app ${clientId2} on store ${storeFqdn}: ${tokenResponse.statusText}`);
-  return { token: (await tokenResponse.json()).access_token, storeFqdn };
+    throw body.includes("app_not_installed") ? new AbortError(outputContent`App is not installed on ${outputToken.green(storeFqdn)}. Try running ${outputToken.genericShellCommand("shopify app dev")} to connect your app to the shop.`) : new AbortError(`Failed to get access token for app ${clientId2} on store ${storeFqdn}: ${tokenResponse.statusText}`);
+  try {
+    return { token: JSON.parse(body).access_token, storeFqdn };
+  } catch (error) {
+    throw error instanceof SyntaxError ? new AbortError(`Received invalid response from admin authentication service (HTTP ${tokenResponse.status}).`, "The response could not be parsed as JSON. The service may be temporarily unavailable. Please try again.") : error;
+  }
 }
 
 // ../cli-kit/dist/public/common/object.js
@@ -53720,7 +53678,7 @@ function unionArrayStrategy(destinationArray, sourceArray) {
 }
 
 // ../cli-kit/dist/public/common/object.js
-var import_deepmerge = __toESM(require_cjs()), import_pickBy = __toESM(require_pickBy()), import_mapValues = __toESM(require_mapValues()), import_isEqual = __toESM(require_isEqual()), import_differenceWith = __toESM(require_differenceWith()), import_fromPairs = __toESM(require_fromPairs()), import_toPairs = __toESM(require_toPairs()), import_get = __toESM(require_get()), import_set = __toESM(require_set()), import_unset = __toESM(require_unset()), import_isEmpty = __toESM(require_isEmpty());
+var import_deepmerge = __toESM(require_cjs(), 1), import_pickBy = __toESM(require_pickBy(), 1), import_mapValues = __toESM(require_mapValues(), 1), import_isEqual = __toESM(require_isEqual(), 1), import_differenceWith = __toESM(require_differenceWith(), 1), import_fromPairs = __toESM(require_fromPairs(), 1), import_toPairs = __toESM(require_toPairs(), 1), import_get = __toESM(require_get(), 1), import_set = __toESM(require_set(), 1), import_unset = __toESM(require_unset(), 1), import_isEmpty = __toESM(require_isEmpty(), 1);
 function deepMergeObjects(lhs, rhs, arrayMergeStrategy = unionArrayStrategy) {
   return (0, import_deepmerge.default)(lhs, rhs, { arrayMerge: arrayMergeStrategy });
 }
@@ -53973,7 +53931,7 @@ function earliestDateTimeAfter(afterTime, dates) {
 }
 
 // ../cli-kit/dist/public/node/api/partners.js
-var import_bottleneck = __toESM(require_lib4()), limiter = new import_bottleneck.default({
+var import_bottleneck = __toESM(require_lib4(), 1), limiter = new import_bottleneck.default({
   minTime: 150,
   maxConcurrent: 10
 });
@@ -54138,7 +54096,7 @@ ${outputToken.json(scopes)}
 For applications:
 ${outputToken.json(applications)}
 `);
-  let validationResult = await validateSession(scopes, applications, currentSession), newSession = {};
+  let validationResult = await validateSession(scopes, currentSession), newSession = {};
   if (validationResult === "needs_full_auth")
     await throwOnNoPrompt(noPrompt), outputDebug(outputContent`Initiating the full authentication flow...`), newSession = await executeCompleteFlow(applications);
   else if (validationResult === "needs_refresh" || forceRefresh) {
@@ -54167,7 +54125,7 @@ async function throwOnNoPrompt(noPrompt) {
 The CLI is currently unable to prompt for reauthentication.`, "Restart the CLI process you were running. If in an interactive terminal, you will be prompted to reauthenticate. If in a non-interactive terminal, ensure the correct credentials are available in the program environment.");
 }
 async function executeCompleteFlow(applications) {
-  let scopes = getFlattenScopes(applications), exchangeScopes = getExchangeScopes(applications), store2 = applications.adminApi?.storeFqdn;
+  let scopes = getFlattenScopes(applications);
   firstPartyDev() && (outputDebug(outputContent`Authenticating as Shopify Employee...`), scopes.push("employee"));
   let identityToken, identityTokenInformation = getIdentityTokenInformation();
   if (identityTokenInformation)
@@ -54177,63 +54135,37 @@ async function executeCompleteFlow(applications) {
     let deviceAuth = await requestDeviceAuthorization(scopes);
     outputDebug(outputContent`Starting polling for the identity token...`), identityToken = await pollForDeviceAuthorization(deviceAuth.deviceCode, deviceAuth.interval);
   }
-  outputDebug(outputContent`CLI token received. Exchanging it for application tokens...`);
-  let result = await exchangeAccessForApplicationTokens(identityToken, exchangeScopes, store2), businessPlatformToken = result[applicationId("business-platform")]?.accessToken, alias = await fetchEmail(businessPlatformToken) ?? identityToken.userId, session = {
+  outputDebug(outputContent`CLI token received (PCAT). Using it directly for API access...`);
+  let alias = await fetchEmail(identityToken.accessToken) ?? identityToken.userId, session = {
     identity: {
       ...identityToken,
       alias
     },
-    applications: result
+    applications: {}
   };
   return outputCompleted("Logged in."), session;
 }
-async function refreshTokens(session, applications) {
-  let identityToken = await refreshAccessToken(session.identity), exchangeScopes = getExchangeScopes(applications), applicationTokens = await exchangeAccessForApplicationTokens(identityToken, exchangeScopes, applications.adminApi?.storeFqdn);
+async function refreshTokens(session, _applications) {
   return {
-    identity: identityToken,
-    applications: applicationTokens
+    identity: await refreshAccessToken(session.identity),
+    applications: {}
   };
 }
 async function tokensFor(applications, session) {
-  let tokens = {
-    userId: session.identity.userId
+  let token = session.identity.accessToken;
+  return {
+    userId: session.identity.userId,
+    admin: applications.adminApi ? { token, storeFqdn: applications.adminApi.storeFqdn } : void 0,
+    partners: applications.partnersApi ? token : void 0,
+    storefront: applications.storefrontRendererApi ? token : void 0,
+    businessPlatform: applications.businessPlatformApi ? token : void 0,
+    appManagement: applications.appManagementApi ? token : void 0
   };
-  if (applications.adminApi) {
-    let appId = applicationId("admin"), realAppId = `${applications.adminApi.storeFqdn}-${appId}`, token = session.applications[realAppId]?.accessToken;
-    token && (tokens.admin = { token, storeFqdn: applications.adminApi.storeFqdn });
-  }
-  if (applications.partnersApi) {
-    let appId = applicationId("partners");
-    tokens.partners = session.applications[appId]?.accessToken;
-  }
-  if (applications.storefrontRendererApi) {
-    let appId = applicationId("storefront-renderer");
-    tokens.storefront = session.applications[appId]?.accessToken;
-  }
-  if (applications.businessPlatformApi) {
-    let appId = applicationId("business-platform");
-    tokens.businessPlatform = session.applications[appId]?.accessToken;
-  }
-  if (applications.appManagementApi) {
-    let appId = applicationId("app-management");
-    tokens.appManagement = session.applications[appId]?.accessToken;
-  }
-  return tokens;
 }
 function getFlattenScopes(apps) {
   let admin = apps.adminApi?.scopes ?? [], partner = apps.partnersApi?.scopes ?? [], storefront = apps.storefrontRendererApi?.scopes ?? [], businessPlatform = apps.businessPlatformApi?.scopes ?? [], appManagement = apps.appManagementApi?.scopes ?? [], requestedScopes = [...admin, ...partner, ...storefront, ...businessPlatform, ...appManagement];
   return allDefaultScopes(requestedScopes);
 }
-function getExchangeScopes(apps) {
-  let adminScope = apps.adminApi?.scopes ?? [], partnerScope = apps.partnersApi?.scopes ?? [], storefrontScopes = apps.storefrontRendererApi?.scopes ?? [], businessPlatformScopes = apps.businessPlatformApi?.scopes ?? [], appManagementScopes = apps.appManagementApi?.scopes ?? [];
-  return {
-    admin: apiScopes("admin", adminScope),
-    partners: apiScopes("partners", partnerScope),
-    storefront: apiScopes("storefront-renderer", storefrontScopes),
-    businessPlatform: apiScopes("business-platform", businessPlatformScopes),
-    appManagement: apiScopes("app-management", appManagementScopes)
-  };
-}
 function buildIdentityTokenFromEnv(scopes, identityTokenInformation) {
   return {
     ...identityTokenInformation,
@@ -54318,8 +54250,6 @@ init_cjs_shims();
 
 // ../cli-kit/dist/public/node/vendor/otel-js/export/InstantaneousMetricReader.js
 init_cjs_shims();
-var import_sdk_metrics = __toESM(require_src3(), 1), import_core = __toESM(require_src(), 1);
-init_esm();
 
 // ../cli-kit/dist/public/node/vendor/otel-js/utils/throttle.js
 init_cjs_shims();
@@ -54338,16 +54268,14 @@ function throttle(func, wait, { leading = !0, trailing = !0 } = {}) {
 }
 
 // ../cli-kit/dist/public/node/vendor/otel-js/export/InstantaneousMetricReader.js
+var import_sdk_metrics = __toESM(require_src3(), 1), import_core = __toESM(require_src(), 1);
+init_esm();
 var InstantaneousMetricReader = class extends import_sdk_metrics.MetricReader {
   constructor({ exporter, throttleLimit }) {
     super({
       aggregationSelector: exporter.selectAggregation?.bind(exporter),
       aggregationTemporalitySelector: exporter.selectAggregationTemporality?.bind(exporter)
-    }), this._exporter = exporter, this.onForceFlush = throttle(
-      // eslint-disable-next-line @typescript-eslint/unbound-method
-      this.onForceFlush,
-      throttleLimit
-    );
+    }), this._exporter = exporter, this.onForceFlush = throttle(this.onForceFlush, throttleLimit);
   }
   async onForceFlush() {
     let { resourceMetrics, errors } = await this.collect({});
@@ -54392,7 +54320,6 @@ var DefaultMeterProvider = class extends import_sdk_metrics2.MeterProvider {
 
 // ../cli-kit/dist/public/node/vendor/otel-js/service/BaseOtelService/BaseOtelService.js
 init_cjs_shims();
-var import_sdk_metrics3 = __toESM(require_src3(), 1);
 
 // ../cli-kit/dist/public/node/vendor/otel-js/utils/validators.js
 init_cjs_shims();
@@ -54404,9 +54331,16 @@ function isValidMetricName(value) {
 }
 
 // ../cli-kit/dist/public/node/vendor/otel-js/service/BaseOtelService/BaseOtelService.js
-var instrumentationScope = "opentelemetry-js-shopify-web", BaseOtelService = class {
+var import_sdk_metrics3 = __toESM(require_src3(), 1), instrumentationScope = "opentelemetry-js-shopify-web", BaseOtelService = class {
   /**
    * Bootstraps an Otel exporter which can send Otel metrics to a dedicated Shopify supported collector endpoint.
+   *
+   * @param root0
+   * @param root0.serviceName
+   * @param root0.prefixMetric
+   * @param root0.metrics
+   * @param root0.onRecord
+   * @param root0.meterProvider
    */
   constructor({ serviceName, prefixMetric = !1, metrics: metrics2 = {}, onRecord, meterProvider }) {
     if (this.metrics = /* @__PURE__ */ new Map(), this.recordListeners = /* @__PURE__ */ new Set(), !serviceName)
@@ -54486,6 +54420,17 @@ init_esm();
 var DefaultOtelService = class extends BaseOtelService {
   /**
    * Bootstraps an Otel exporter which can send Otel metrics to a dedicated Shopify supported collector endpoint.
+   *
+   * @param root0
+   * @param root0.throttleLimit
+   * @param root0.env
+   * @param root0.serviceName
+   * @param root0.prefixMetric
+   * @param root0.metrics
+   * @param root0.onRecord
+   * @param root0.meterProvider
+   * @param root0.useXhr
+   * @param root0.otelEndpoint
    */
   constructor({
     throttleLimit = 5e3,
@@ -54878,7 +54823,6 @@ export {
   shopifyFetch,
   fanoutHooks,
   getListOfTunnelPlugins,
-  serviceEnvironment,
   z,
   DevServerCore,
   partnersFqdn,
@@ -54955,4 +54899,4 @@ mime-types/index.js:
    * MIT Licensed
    *)
 */
-//# sourceMappingURL=chunk-XKZES4F6.js.map
+//# sourceMappingURL=chunk-CCWLFNWN.js.map

package/dist/{chunk-Y2JP6WFP.js → chunk-CFNYEDC6.js}

@@ -122,6 +122,15 @@ var _EXTNAME_RE = /.(\.[^./]+)$/, extname = function(p) {
 var basename = function(p, extension) {
   let lastSegment = normalizeWindowsPath(p).split("/").pop();
   return extension && lastSegment.endsWith(extension) ? lastSegment.slice(0, -extension.length) : lastSegment;
+}, parse = function(p) {
+  let root = normalizeWindowsPath(p).split("/").shift() || "/", base = basename(p), extension = extname(base);
+  return {
+    root,
+    dir: dirname(p),
+    base,
+    ext: extension,
+    name: base.slice(0, base.length - extension.length)
+  };
 };
 
 // ../cli-kit/dist/public/node/path.js
@@ -150,6 +159,9 @@ function basename2(path2, ext) {
 function extname2(path2) {
   return extname(path2);
 }
+function parsePath(path2) {
+  return parse(path2);
+}
 function relativizePath(path2, dir = cwd2()) {
   let result = (0, import_commondir.default)([path2, dir]), relativePath2 = relative(dir, path2), relativeComponents = relativePath2.split("/").filter((component) => component === "..").length;
   return result === "/" || relativePath2 === "" || relativeComponents > 2 ? path2 : relativePath2;
@@ -186,6 +198,7 @@ export {
   dirname2 as dirname,
   basename2 as basename,
   extname2 as extname,
+  parsePath,
   relativizePath,
   isSubpath,
   moduleDirectory,
@@ -193,4 +206,4 @@ export {
   sniffForPath,
   sniffForJson
 };
-//# sourceMappingURL=chunk-Y2JP6WFP.js.map
+//# sourceMappingURL=chunk-CFNYEDC6.js.map

package/dist/{chunk-VGSXEE45.js → chunk-QYFBWGDH.js}

@@ -1,13 +1,13 @@
 import {
   getNextDeprecationDate,
   reportAnalyticsEvent
-} from "./chunk-XKZES4F6.js";
+} from "./chunk-CCWLFNWN.js";
 import {
   addSensitiveMetadata,
   getAllSensitiveMetadata,
   outputDebug,
   renderWarning
-} from "./chunk-NSOYPXEP.js";
+} from "./chunk-RIXXPHKS.js";
 import {
   init_cjs_shims
 } from "./chunk-PKR7KJ6P.js";
@@ -75,4 +75,4 @@ export {
   postRunHookHasCompleted,
   hook
 };
-//# sourceMappingURL=chunk-VGSXEE45.js.map
+//# sourceMappingURL=chunk-QYFBWGDH.js.map