Use crawler signatures

[graygilmore]

Summary

Adds support for Shopify-managed storefront request headers during local theme development in an effort to eliminate legitimate CLI users being flagged as a bot.

• fetches reusable headers during theme dev startup when available
• sends them with storefront render, proxy, session-cookie, and password-check requests
• wires the same behavior into theme app extension previews
• keeps this best-effort so local development continues if the headers cannot be fetched

Note

Does not work in combination with the --password flag.

[graygilmore]

/snapit

[github-actions]

🫰✨ Thanks @graygilmore! Your snapshot has been published to npm.

Test the snapshot by installing your package globally:

pnpm i -g --@shopify:registry=https://registry.npmjs.org @shopify/cli@0.0.0-snapshot-20260702204507

Caution

After installing, validate the version by running shopify version in your terminal.
If the versions don't match, you might have multiple global instances installed.
Use which shopify to find out which one you are running and uninstall it.

[graygilmore]

We need to define these types ourselves because these fields are hidden and only available to our client so they don't get automatically generated like our other GraphQL queries/mutations do.

[graygilmore]

Run these both at the same time since one doesn't block the other.

[graygilmore]

This proxy handles a few kinds of requests so we only want to add the headers when the hosts match.

[github-actions]

Differences in type declarations

We detected differences in the type declarations generated by Typescript for this branch compared to the baseline ('main' branch). Please, review them to ensure they are backward-compatible. Here are some important things to keep in mind:

• Some seemingly private modules might be re-exported through public modules.
• If the branch is behind main you might see odd diffs, rebase main into this branch.

New type declarations

We found no new type declarations in this PR

Existing type declarations

packages/cli-kit/dist/public/node/api/admin.d.ts

@@ -9,9 +9,10 @@ import { TypedDocumentNode } from '@graphql-typed-document-node/core';
  * @param query - GraphQL query to execute.
  * @param session - Shopify admin session including token and Store FQDN.
  * @param variables - GraphQL variables to pass to the query.
+ * @param version - API version.
  * @returns The response of the query of generic type <T>.
  */
-export declare function adminRequest<T>(query: string, session: AdminSession, variables?: GraphQLVariables): Promise<T>;
+export declare function adminRequest<T>(query: string, session: AdminSession, variables?: GraphQLVariables, version?: string): Promise<T>;
 export interface AdminRequestOptions<TResult, TVariables extends Variables> {
     /** GraphQL query to execute. */
     query: TypedDocumentNode<TResult, TVariables>;

[EvilGenius13]

Ran the latest snap build confirmed everything is still working and can find the necessary info in our logs. 🚀 Thanks for the PR @graygilmore