@shopify/create-app 4.7.0 → 4.8.0

package/dist/{analytics-CVOS4X5D.js → analytics-AHLA7AZS.js}

@@ -6,25 +6,25 @@ import {
   recordTiming,
   reportAnalyticsEvent,
   sendAnalyticsEventFromStdin
-} from "./chunk-B7LXQVGX.js";
+} from "./chunk-GUL6X3Z6.js";
 import "./chunk-MSED5ZFM.js";
-import "./chunk-HHKEZAAX.js";
+import "./chunk-VQXC5OD5.js";
 import "./chunk-G53O4PDO.js";
-import "./chunk-ZPNNBR5Z.js";
-import "./chunk-5LLHAM5N.js";
-import "./chunk-TGZSJFOF.js";
-import "./chunk-JMC4PKOZ.js";
-import "./chunk-YYJ6EVI6.js";
-import "./chunk-LEQAULOW.js";
+import "./chunk-PPYQMZDW.js";
+import "./chunk-RY5EN24F.js";
+import "./chunk-SSXHJVVE.js";
+import "./chunk-E3Q2X4JT.js";
+import "./chunk-OAQSBAWF.js";
+import "./chunk-6P5SC4GZ.js";
 import "./chunk-CM6ALOD7.js";
 import "./chunk-E43EDJOG.js";
 import "./chunk-ODCXYGJ2.js";
 import "./chunk-LBXDGVFS.js";
 import "./chunk-JGGOQOPO.js";
 import "./chunk-OQ3KXXGH.js";
-import "./chunk-VJHCFG5K.js";
-import "./chunk-PK2M5CKS.js";
-import "./chunk-X2X377NR.js";
+import "./chunk-NSZGKXWF.js";
+import "./chunk-YZ4NVX3R.js";
+import "./chunk-CVCLWDTQ.js";
 import "./chunk-7OHJH7BF.js";
 import "./chunk-HNIAZN6U.js";
 import "./chunk-C3J4HVUN.js";
@@ -41,4 +41,4 @@ export {
   reportAnalyticsEvent,
   sendAnalyticsEventFromStdin
 };
-//# sourceMappingURL=analytics-CVOS4X5D.js.map
+//# sourceMappingURL=analytics-AHLA7AZS.js.map

package/dist/{analytics-A7XUM3DE.js → analytics-WH2T6QX3.js}

@@ -2,25 +2,25 @@ import {
   getEnvironmentData,
   getSensitiveEnvironmentData,
   startAnalytics
-} from "./chunk-B7LXQVGX.js";
+} from "./chunk-GUL6X3Z6.js";
 import "./chunk-MSED5ZFM.js";
-import "./chunk-HHKEZAAX.js";
+import "./chunk-VQXC5OD5.js";
 import "./chunk-G53O4PDO.js";
-import "./chunk-ZPNNBR5Z.js";
-import "./chunk-5LLHAM5N.js";
-import "./chunk-TGZSJFOF.js";
-import "./chunk-JMC4PKOZ.js";
-import "./chunk-YYJ6EVI6.js";
-import "./chunk-LEQAULOW.js";
+import "./chunk-PPYQMZDW.js";
+import "./chunk-RY5EN24F.js";
+import "./chunk-SSXHJVVE.js";
+import "./chunk-E3Q2X4JT.js";
+import "./chunk-OAQSBAWF.js";
+import "./chunk-6P5SC4GZ.js";
 import "./chunk-CM6ALOD7.js";
 import "./chunk-E43EDJOG.js";
 import "./chunk-ODCXYGJ2.js";
 import "./chunk-LBXDGVFS.js";
 import "./chunk-JGGOQOPO.js";
 import "./chunk-OQ3KXXGH.js";
-import "./chunk-VJHCFG5K.js";
-import "./chunk-PK2M5CKS.js";
-import "./chunk-X2X377NR.js";
+import "./chunk-NSZGKXWF.js";
+import "./chunk-YZ4NVX3R.js";
+import "./chunk-CVCLWDTQ.js";
 import "./chunk-7OHJH7BF.js";
 import "./chunk-HNIAZN6U.js";
 import "./chunk-C3J4HVUN.js";
@@ -33,4 +33,4 @@ export {
   getSensitiveEnvironmentData,
   startAnalytics
 };
-//# sourceMappingURL=analytics-A7XUM3DE.js.map
+//# sourceMappingURL=analytics-WH2T6QX3.js.map

package/dist/{chunk-AOCVCJS6.js → chunk-2NFHHUNB.js}

@@ -1,18 +1,18 @@
 import {
   renderWarning
-} from "./chunk-TGZSJFOF.js";
+} from "./chunk-SSXHJVVE.js";
 import {
   addSensitiveMetadata
-} from "./chunk-YYJ6EVI6.js";
+} from "./chunk-OAQSBAWF.js";
 import {
   AbortError
-} from "./chunk-LEQAULOW.js";
+} from "./chunk-6P5SC4GZ.js";
 import {
   fileExists,
   findPathUp,
   readFile,
   writeFile
-} from "./chunk-PK2M5CKS.js";
+} from "./chunk-YZ4NVX3R.js";
 import {
   cwd
 } from "./chunk-C3J4HVUN.js";
@@ -1623,7 +1623,7 @@ function encodeToml(content) {
 }
 
 // ../cli-kit/dist/public/node/toml/toml-file.js
-var import_toml_patch = __toESM(require_toml_patch()), TomlFileError = class extends AbortError {
+var import_toml_patch = __toESM(require_toml_patch(), 1), TomlFileError = class extends AbortError {
   path;
   constructor(path, message) {
     super(message), this.name = "TomlFileError", this.path = path;
@@ -1768,10 +1768,11 @@ async function environmentFilePath(fileName, options) {
 }
 
 export {
+  decodeToml,
   require_toml_patch,
   TomlFileError,
   TomlFile,
   loadEnvironment,
   environmentFilePath
 };
-//# sourceMappingURL=chunk-AOCVCJS6.js.map
+//# sourceMappingURL=chunk-2NFHHUNB.js.map

package/dist/{chunk-XYNOPL42.js → chunk-3A6RVZAX.js}

@@ -1,7 +1,7 @@
 import {
   captureOutput,
   require_lib
-} from "./chunk-TGZSJFOF.js";
+} from "./chunk-SSXHJVVE.js";
 import {
   require_semver
 } from "./chunk-OQ3KXXGH.js";
@@ -52,4 +52,4 @@ export {
   isPreReleaseVersion,
   isMajorVersionChange
 };
-//# sourceMappingURL=chunk-XYNOPL42.js.map
+//# sourceMappingURL=chunk-3A6RVZAX.js.map

package/dist/{chunk-LEQAULOW.js → chunk-6P5SC4GZ.js}

@@ -5,7 +5,7 @@ import {
   TokenizedString,
   stringifyMessage,
   tokenItemToString
-} from "./chunk-PK2M5CKS.js";
+} from "./chunk-YZ4NVX3R.js";
 import {
   normalizePath
 } from "./chunk-C3J4HVUN.js";
@@ -102,7 +102,7 @@ async function handler(error) {
     let maybeError = error;
     fatal = new BugError(maybeError?.message ?? "Unknown error"), maybeError?.stack && (fatal.stack = maybeError?.stack);
   }
-  let { renderFatalError } = await import("./ui-UAVSRCJ7.js");
+  let { renderFatalError } = await import("./ui-OLUB3ODI.js");
   return renderFatalError(fatal), Promise.resolve(error);
 }
 function errorMapper(error) {
@@ -136,7 +136,7 @@ function isExpectedApiError(error) {
   if (typeof candidate.response != "object" || candidate.response === null || candidate.request === void 0)
     return !1;
   let status = candidate.response.status;
-  return status === 401 || status === 429 ? !0 : hasRateLimitCode(candidate.response.errors);
+  return status === 401 || status === 429 || status === 502 || status === 503 || status === 504 ? !0 : hasRateLimitCode(candidate.response.errors);
 }
 function cleanSingleStackTracePath(filePath) {
   return normalizePath(filePath).replace("file:/", "/").replace(/^\/?[A-Z]:/, "");
@@ -176,4 +176,4 @@ export {
   shouldReportErrorAsUnexpected,
   cleanSingleStackTracePath
 };
-//# sourceMappingURL=chunk-LEQAULOW.js.map
+//# sourceMappingURL=chunk-6P5SC4GZ.js.map

package/dist/{chunk-X2X377NR.js → chunk-CVCLWDTQ.js}

@@ -174,11 +174,11 @@ var environmentVariables = {
 import { randomUUID } from "crypto";
 import { homedir as homedir2, networkInterfaces } from "os";
 async function lazyFileExists(path2) {
-  let { fileExists } = await import("./fs-ZG73KWF7.js");
+  let { fileExists } = await import("./fs-7VPG5DKY.js");
   return fileExists(path2);
 }
 async function lazyExec(command, args) {
-  let { exec } = await import("./system-KQM7CSD6.js");
+  let { exec } = await import("./system-M2MQLB2V.js");
   await exec(command, args);
 }
 function isTerminalInteractive() {
@@ -298,4 +298,4 @@ export {
   getThemeKitAccessDomain,
   opentelemetryDomain
 };
-//# sourceMappingURL=chunk-X2X377NR.js.map
+//# sourceMappingURL=chunk-CVCLWDTQ.js.map

package/dist/{chunk-JMC4PKOZ.js → chunk-E3Q2X4JT.js}

@@ -7,7 +7,7 @@ import {
 import {
   outputContent,
   outputDebug
-} from "./chunk-PK2M5CKS.js";
+} from "./chunk-YZ4NVX3R.js";
 import {
   __commonJS,
   __require,
@@ -1383,9 +1383,16 @@ function makeUsernameFromId(userId) {
 }
 
 export {
+  require_cross_spawn,
+  stripFinalNewline,
+  npmRunPathEnv,
+  onetime_default,
   require_signal_exit,
+  isStream,
+  isWritableStream,
+  require_merge_stream,
   execa,
   username,
   platformAndArch
 };
-//# sourceMappingURL=chunk-JMC4PKOZ.js.map
+//# sourceMappingURL=chunk-E3Q2X4JT.js.map

package/dist/{chunk-B7LXQVGX.js → chunk-GUL6X3Z6.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-MSED5ZFM.js";
 import {
   CLI_KIT_VERSION
-} from "./chunk-HHKEZAAX.js";
+} from "./chunk-VQXC5OD5.js";
 import {
   FormData,
   fetch_blob_default,
@@ -12,7 +12,7 @@ import {
 import {
   getPackageManager,
   packageManagerFromUserAgent
-} from "./chunk-ZPNNBR5Z.js";
+} from "./chunk-PPYQMZDW.js";
 import {
   Environment,
   cacheRetrieveOrRepopulate,
@@ -27,7 +27,7 @@ import {
   setCurrentSessionId,
   setSessions,
   timeIntervalToMilliseconds
-} from "./chunk-5LLHAM5N.js";
+} from "./chunk-RY5EN24F.js";
 import {
   isCI,
   isWsl,
@@ -35,17 +35,17 @@ import {
   require_baseForOwn,
   require_stacktracey,
   sleep
-} from "./chunk-TGZSJFOF.js";
+} from "./chunk-SSXHJVVE.js";
 import {
   platformAndArch
-} from "./chunk-JMC4PKOZ.js";
+} from "./chunk-E3Q2X4JT.js";
 import {
   addPublicMetadata,
   addSensitiveMetadata,
   getAllPublicMetadata,
   getAllSensitiveMetadata,
   runWithTimer
-} from "./chunk-YYJ6EVI6.js";
+} from "./chunk-OAQSBAWF.js";
 import {
   AbortError,
   AbortSilentError,
@@ -60,7 +60,7 @@ import {
   isPermissionCode,
   isRateLimitCode,
   shouldReportErrorAsUnexpected
-} from "./chunk-LEQAULOW.js";
+} from "./chunk-6P5SC4GZ.js";
 import {
   require_lib
 } from "./chunk-E43EDJOG.js";
@@ -108,7 +108,7 @@ import {
   slugify,
   stringifyMessage,
   uniq
-} from "./chunk-PK2M5CKS.js";
+} from "./chunk-YZ4NVX3R.js";
 import {
   alwaysLogAnalytics,
   alwaysLogMetrics,
@@ -126,7 +126,7 @@ import {
   sessionConstants,
   systemEnvironmentVariables,
   themeToken
-} from "./chunk-X2X377NR.js";
+} from "./chunk-CVCLWDTQ.js";
 import {
   isTruthy
 } from "./chunk-HNIAZN6U.js";
@@ -62335,6 +62335,9 @@ init_cjs_shims();
 // ../cli-kit/dist/public/node/crypto.js
 init_cjs_shims();
 import crypto from "crypto";
+function sha256(str) {
+  return crypto.createHash("sha256").update(str).digest();
+}
 function hashString(str) {
   return crypto.createHash("sha1").update(str).digest("hex");
 }
@@ -64488,7 +64491,7 @@ async function sendAnalyticsEvent(payload, skipMonorailAnalytics, skipMetricAnal
 }
 async function sendAnalyticsEventFromStdin() {
   try {
-    let { readStdinString } = await import("./system-KQM7CSD6.js"), payloadStr = await readStdinString();
+    let { readStdinString } = await import("./system-M2MQLB2V.js"), payloadStr = await readStdinString();
     if (payloadStr === void 0)
       throw new Error("No analytics payload received from stdin");
     let { payload, skipMonorailAnalytics, skipMetricAnalytics } = JSON.parse(payloadStr);
@@ -64522,12 +64525,12 @@ async function reportAnalyticsEvent(options2) {
       outputDebug(outputContent`Skipping command analytics, payload: ${outputToken.json(payload)}`);
       return;
     }
-    let [{ platformAndArch: platformAndArch2 }, { isInsideContainer }] = await Promise.all([import("./os-XDQECFDE.js"), import("./system-KQM7CSD6.js")]), sendInBackground = !commandStartOptions?.requiresSyncAnalytics && platformAndArch2().platform !== "windows" && !ciPlatform().isCI && !isInsideContainer();
+    let [{ platformAndArch: platformAndArch2 }, { isInsideContainer }] = await Promise.all([import("./os-GA2QX6HG.js"), import("./system-M2MQLB2V.js")]), sendInBackground = !commandStartOptions?.requiresSyncAnalytics && platformAndArch2().platform !== "windows" && !ciPlatform().isCI && !isInsideContainer();
     if (outputDebug(outputContent`Sending command analytics${sendInBackground ? " in background" : ""}, payload: ${outputToken.json(payload)}`), !sendInBackground) {
       await sendAnalyticsEvent(payload, skipMonorailAnalytics, skipMetricAnalytics);
       return;
     }
-    let { exec } = await import("./system-KQM7CSD6.js"), argv = process.argv;
+    let { exec } = await import("./system-M2MQLB2V.js"), argv = process.argv;
     if (!argv[1])
       return;
     let nodeBinary = process.execPath, args = [argv[1], "send-analytics"], analyticsProcess = exec(nodeBinary, args, {
@@ -64592,7 +64595,7 @@ async function buildPayload({ config, errorMessage: errorMessage2, exitMode }) {
   }), sanitizePayload2(payload);
 }
 function sanitizePayload2(payload) {
-  let sanitizedPayloadString = JSON.stringify(payload).replace(/shptka_\w*/g, "*****").replace(/(--store-password(?:=|\s+))(?:"[^"]*"|'[^']*'|[^\s"]+)/g, "$1*****").replace(/((?:store-password|SHOPIFY_FLAG_STORE_PASSWORD)\\?":\\?")[^"\\]*/g, "$1*****");
+  let sanitizedPayloadString = JSON.stringify(payload).replace(/shptka_\w*/g, "*****").replace(/(--store-password(?:=|\s+))(?:\\"[^"\\]*\\"|'[^']*'|(?:\\.|[^\s"\\])+)/g, "$1*****").replace(/((?:store-password|SHOPIFY_FLAG_STORE_PASSWORD)\\?":\\?")[^"\\]*/g, "$1*****").replace(/(--signup(?:=|\s+))(?:\\"[^"\\]*\\"|'[^']*'|(?:\\.|[^\s"\\])+)/g, "$1*****").replace(/((?:signup|SHOPIFY_FLAG_SIGNUP)\\?":\\?")[^"\\]*/g, "$1*****").replace(/(?<![\w-])(signup=)[^&\s"'\\]+/g, "$1*****");
   return JSON.parse(sanitizedPayloadString);
 }
 function recordTiming2(eventName) {
@@ -65720,7 +65723,7 @@ function unionArrayStrategy(destinationArray, sourceArray) {
 }
 
 // ../cli-kit/dist/public/common/object.js
-var import_deepmerge = __toESM(require_cjs()), import_pickBy = __toESM(require_pickBy()), import_mapValues = __toESM(require_mapValues()), import_isEqual = __toESM(require_isEqual()), import_differenceWith = __toESM(require_differenceWith()), import_fromPairs = __toESM(require_fromPairs()), import_toPairs = __toESM(require_toPairs()), import_get = __toESM(require_get()), import_set = __toESM(require_set()), import_unset = __toESM(require_unset()), import_isEmpty = __toESM(require_isEmpty());
+var import_deepmerge = __toESM(require_cjs(), 1), import_pickBy = __toESM(require_pickBy(), 1), import_mapValues = __toESM(require_mapValues(), 1), import_isEqual = __toESM(require_isEqual(), 1), import_differenceWith = __toESM(require_differenceWith(), 1), import_fromPairs = __toESM(require_fromPairs(), 1), import_toPairs = __toESM(require_toPairs(), 1), import_get = __toESM(require_get(), 1), import_set = __toESM(require_set(), 1), import_unset = __toESM(require_unset(), 1), import_isEmpty = __toESM(require_isEmpty(), 1);
 function deepMergeObjects(lhs, rhs, arrayMergeStrategy = unionArrayStrategy) {
   return (0, import_deepmerge.default)(lhs, rhs, { arrayMerge: arrayMergeStrategy });
 }
@@ -66256,6 +66259,7 @@ function flagIncluded(flag, commandClass) {
 }
 
 export {
+  sha256,
   hashString,
   fileHash,
   randomUUID,
@@ -66357,4 +66361,4 @@ mime-types/index.js:
    * MIT Licensed
    *)
 */
-//# sourceMappingURL=chunk-B7LXQVGX.js.map
+//# sourceMappingURL=chunk-GUL6X3Z6.js.map

package/dist/{chunk-A67PO4UO.js → chunk-KZ2RPAZP.js}

@@ -1,6 +1,6 @@
 import {
   treeKill
-} from "./chunk-VJHCFG5K.js";
+} from "./chunk-NSZGKXWF.js";
 import {
   init_cjs_shims
 } from "./chunk-3XNI6LP4.js";
@@ -26,22 +26,22 @@ function waitForPostRunHookAndExit() {
 }
 var hook = async ({ config, Command }) => {
   await detectStopCommand(Command);
-  let metadata = await import("./metadata-4WOIDT2F.js"), { commandStartOptions } = metadata.getAllSensitiveMetadata();
+  let metadata = await import("./metadata-OKIQD7J3.js"), { commandStartOptions } = metadata.getAllSensitiveMetadata();
   commandStartOptions && await metadata.addSensitiveMetadata(() => ({
     commandStartOptions: {
       ...commandStartOptions,
       endTime: (/* @__PURE__ */ new Date()).getTime()
     }
   }));
-  let { postrun: deprecationsHook } = await import("./deprecations-37ZUNG4Z.js");
+  let { postrun: deprecationsHook } = await import("./deprecations-LQ5N6NY5.js");
   deprecationsHook(Command);
-  let { outputDebug } = await import("./output-2RGSJNA6.js"), command = Command.id.replace(/:/g, " ");
+  let { outputDebug } = await import("./output-67BVQSOH.js"), command = Command.id.replace(/:/g, " ");
   outputDebug(`Completed command ${command}`), !command.includes("notifications") && !command.includes("upgrade") && !command.includes("send-analytics") && await autoUpgradeIfNeeded();
-  let { reportAnalyticsEvent } = await import("./analytics-CVOS4X5D.js");
+  let { reportAnalyticsEvent } = await import("./analytics-AHLA7AZS.js");
   await reportAnalyticsEvent({ config, exitMode: "ok" }), postRunHookCompleted = !0;
 };
 async function autoUpgradeIfNeeded() {
-  let { versionToAutoUpgrade, warnIfUpgradeAvailable } = await import("./upgrade-QE6OI6PW.js"), newerVersion = versionToAutoUpgrade();
+  let { versionToAutoUpgrade, warnIfUpgradeAvailable } = await import("./upgrade-VWPCOMAW.js"), newerVersion = versionToAutoUpgrade();
   if (!newerVersion) {
     await warnIfUpgradeAvailable();
     return;
@@ -49,7 +49,7 @@ async function autoUpgradeIfNeeded() {
   if (process.env.SHOPIFY_CLI_FORCE_AUTO_UPGRADE === "1")
     await performAutoUpgrade(newerVersion);
   else {
-    let { runAtMinimumInterval } = await import("./conf-store-NT7HUXZL.js");
+    let { runAtMinimumInterval } = await import("./conf-store-J42SBUP3.js");
     await runAtMinimumInterval("auto-upgrade", { days: 1 }, async () => {
       await performAutoUpgrade(newerVersion);
     });
@@ -57,11 +57,11 @@ async function autoUpgradeIfNeeded() {
 }
 async function performAutoUpgrade(newerVersion) {
   let [{ CLI_KIT_VERSION }, { isMajorVersionChange }, { outputWarn, outputDebug }, { getOutputUpdateCLIReminder, runCLIUpgrade, hasBlockingAutoUpgradeNotification }, metadata] = await Promise.all([
-    import("./version-AALUTWIR.js"),
-    import("./version-6CVFB4SF.js"),
-    import("./output-2RGSJNA6.js"),
-    import("./upgrade-QE6OI6PW.js"),
-    import("./metadata-4WOIDT2F.js")
+    import("./version-BHYDBL3M.js"),
+    import("./version-HXW64FOP.js"),
+    import("./output-67BVQSOH.js"),
+    import("./upgrade-VWPCOMAW.js"),
+    import("./metadata-OKIQD7J3.js")
   ]);
   if (isMajorVersionChange(CLI_KIT_VERSION, newerVersion)) {
     outputWarn(getOutputUpdateCLIReminder(newerVersion, !0)), await metadata.addPublicMetadata(() => ({
@@ -81,8 +81,8 @@ async function performAutoUpgrade(newerVersion) {
     let errorMessage = `Auto-upgrade failed: ${error}`;
     outputDebug(errorMessage), outputWarn(getOutputUpdateCLIReminder(newerVersion)), await metadata.addPublicMetadata(() => ({ env_auto_upgrade_success: !1 }));
     let [{ sendErrorToBugsnag }, { inferPackageManagerForGlobalCLI }] = await Promise.all([
-      import("./error-handler-GGBOXL7F.js"),
-      import("./is-global-DL3ZQWOO.js")
+      import("./error-handler-HDQAL5WF.js"),
+      import("./is-global-NIA2NILS.js")
     ]), enrichedError = Object.assign(new Error(errorMessage), {
       packageManager: inferPackageManagerForGlobalCLI(),
       platform: process.platform,
@@ -96,7 +96,7 @@ async function detectStopCommand(commandClass) {
   if (commandClass && "analyticsStopCommand" in commandClass && typeof commandClass.analyticsStopCommand == "function") {
     let stopCommand = commandClass.analyticsStopCommand();
     if (stopCommand) {
-      let metadata = await import("./metadata-4WOIDT2F.js"), { commandStartOptions } = metadata.getAllSensitiveMetadata();
+      let metadata = await import("./metadata-OKIQD7J3.js"), { commandStartOptions } = metadata.getAllSensitiveMetadata();
       if (!commandStartOptions)
         return;
       await metadata.addSensitiveMetadata(() => ({
@@ -114,4 +114,4 @@ export {
   waitForPostRunHookAndExit,
   hook
 };
-//# sourceMappingURL=chunk-A67PO4UO.js.map
+//# sourceMappingURL=chunk-KZ2RPAZP.js.map

package/dist/{chunk-VJHCFG5K.js → chunk-NSZGKXWF.js}

@@ -1,6 +1,6 @@
 import {
   outputDebug
-} from "./chunk-PK2M5CKS.js";
+} from "./chunk-YZ4NVX3R.js";
 import {
   init_cjs_shims
 } from "./chunk-3XNI6LP4.js";
@@ -96,4 +96,4 @@ function buildProcessTree(parentPid, tree, pidsToProcess, spawnChildProcessesLis
 export {
   treeKill
 };
-//# sourceMappingURL=chunk-VJHCFG5K.js.map
+//# sourceMappingURL=chunk-NSZGKXWF.js.map

package/dist/{chunk-FU4STSWX.js → chunk-NVF7ENTS.js}

@@ -2,29 +2,29 @@ import {
   external_exports,
   fetch,
   jsonOutputEnabled
-} from "./chunk-B7LXQVGX.js";
+} from "./chunk-GUL6X3Z6.js";
 import {
   CLI_KIT_VERSION
-} from "./chunk-HHKEZAAX.js";
+} from "./chunk-VQXC5OD5.js";
 import {
   versionSatisfies
-} from "./chunk-ZPNNBR5Z.js";
+} from "./chunk-PPYQMZDW.js";
 import {
   cacheRetrieve,
   cacheStore
-} from "./chunk-5LLHAM5N.js";
+} from "./chunk-RY5EN24F.js";
 import {
   exec,
   renderError,
   renderInfo,
   renderWarning
-} from "./chunk-TGZSJFOF.js";
+} from "./chunk-SSXHJVVE.js";
 import {
   AbortSilentError
-} from "./chunk-LEQAULOW.js";
+} from "./chunk-6P5SC4GZ.js";
 import {
   outputDebug
-} from "./chunk-PK2M5CKS.js";
+} from "./chunk-YZ4NVX3R.js";
 import {
   isTruthy
 } from "./chunk-HNIAZN6U.js";
@@ -58,19 +58,23 @@ var URL = "https://cdn.shopify.com/static/cli/notifications.json", EMPTY_CACHE_M
   "hydrogen:init",
   "cache:clear",
   "send-analytics"
-];
+], LOOPBACK_HOSTNAMES = ["127.0.0.1", "localhost", "::1", "[::1]"];
 function url() {
   let envUrl = process.env.SHOPIFY_CLI_NOTIFICATIONS_URL;
   if (envUrl)
     try {
-      if (new globalThis.URL(envUrl).protocol === "https:")
+      let parsedUrl = new globalThis.URL(envUrl);
+      if (isAllowedNotificationsUrl(parsedUrl))
         return envUrl;
-      outputDebug(`The notifications URL provided via SHOPIFY_CLI_NOTIFICATIONS_URL (${envUrl}) is not secure (https). Falling back to default.`);
+      outputDebug(`The notifications URL provided via SHOPIFY_CLI_NOTIFICATIONS_URL (${envUrl}) must use https, or http with a loopback host. Falling back to default.`);
     } catch {
       outputDebug(`The notifications URL provided via SHOPIFY_CLI_NOTIFICATIONS_URL (${envUrl}) is not a valid URL. Falling back to default.`);
     }
   return URL;
 }
+function isAllowedNotificationsUrl(parsedUrl) {
+  return parsedUrl.protocol === "https:" ? !0 : parsedUrl.protocol === "http:" && LOOPBACK_HOSTNAMES.includes(parsedUrl.hostname);
+}
 var NotificationSchema = external_exports.object({
   id: external_exports.string(),
   message: external_exports.string(),
@@ -105,7 +109,7 @@ async function showNotificationsIfNeeded(currentSurfaces, environment = process.
       throw new AbortSilentError();
     let errorMessage = `Error showing notifications: ${error.message}`;
     outputDebug(errorMessage);
-    let { sendErrorToBugsnag } = await import("./error-handler-GGBOXL7F.js");
+    let { sendErrorToBugsnag } = await import("./error-handler-HDQAL5WF.js");
     await sendErrorToBugsnag(errorMessage, "unexpected_error");
   }
 }
@@ -219,4 +223,4 @@ export {
   filterNotifications,
   stringifyFilters
 };
-//# sourceMappingURL=chunk-FU4STSWX.js.map
+//# sourceMappingURL=chunk-NVF7ENTS.js.map

package/dist/{chunk-YYJ6EVI6.js → chunk-OAQSBAWF.js}

@@ -1,6 +1,6 @@
 import {
   isUnitTest
-} from "./chunk-X2X377NR.js";
+} from "./chunk-CVCLWDTQ.js";
 import {
   init_cjs_shims
 } from "./chunk-3XNI6LP4.js";
@@ -32,7 +32,7 @@ function createRuntimeMetadataContainer(defaultPublicMetadata = {}) {
       try {
         await getAndSet();
       } catch (error) {
-        let { sendErrorToBugsnag } = await import("./error-handler-GGBOXL7F.js");
+        let { sendErrorToBugsnag } = await import("./error-handler-HDQAL5WF.js");
         await sendErrorToBugsnag(error, "unexpected_error");
       }
   }, durationStack = [];
@@ -75,4 +75,4 @@ export {
   addSensitiveMetadata,
   runWithTimer
 };
-//# sourceMappingURL=chunk-YYJ6EVI6.js.map
+//# sourceMappingURL=chunk-OAQSBAWF.js.map

package/dist/{chunk-ZPNNBR5Z.js → chunk-PPYQMZDW.js}

@@ -1,18 +1,18 @@
 import {
   cacheRetrieve,
   cacheRetrieveOrRepopulate
-} from "./chunk-5LLHAM5N.js";
+} from "./chunk-RY5EN24F.js";
 import {
   AbortController,
   exec
-} from "./chunk-TGZSJFOF.js";
+} from "./chunk-SSXHJVVE.js";
 import {
   runWithTimer
-} from "./chunk-YYJ6EVI6.js";
+} from "./chunk-OAQSBAWF.js";
 import {
   AbortError,
   BugError
-} from "./chunk-LEQAULOW.js";
+} from "./chunk-6P5SC4GZ.js";
 import {
   require_semver
 } from "./chunk-OQ3KXXGH.js";
@@ -27,7 +27,7 @@ import {
   outputToken,
   readFile,
   writeFile
-} from "./chunk-PK2M5CKS.js";
+} from "./chunk-YZ4NVX3R.js";
 import {
   dirname,
   joinPath
@@ -344,4 +344,4 @@ export {
   writePackageJSON,
   inferPackageManager
 };
-//# sourceMappingURL=chunk-ZPNNBR5Z.js.map
+//# sourceMappingURL=chunk-PPYQMZDW.js.map

package/dist/{chunk-5LLHAM5N.js → chunk-RY5EN24F.js}

@@ -1,7 +1,7 @@
 import {
   AbortError,
   BugError
-} from "./chunk-LEQAULOW.js";
+} from "./chunk-6P5SC4GZ.js";
 import {
   mimicFunction
 } from "./chunk-CM6ALOD7.js";
@@ -13,12 +13,12 @@ import {
   outputContent,
   outputDebug,
   unixFileIsOwnedByCurrentUser
-} from "./chunk-PK2M5CKS.js";
+} from "./chunk-YZ4NVX3R.js";
 import {
   envPaths,
   environmentVariables,
   isUnitTest
-} from "./chunk-X2X377NR.js";
+} from "./chunk-CVCLWDTQ.js";
 import {
   dirname
 } from "./chunk-C3J4HVUN.js";
@@ -6114,4 +6114,4 @@ export {
   getCachedPartnerAccountStatus,
   setCachedPartnerAccountStatus
 };
-//# sourceMappingURL=chunk-5LLHAM5N.js.map
+//# sourceMappingURL=chunk-RY5EN24F.js.map