Add dedicated app and store GraphiQL commands

[gonzaloriestra]

WHY are these changes introduced?

Developers should be able to open an authenticated local GraphiQL session directly from the CLI to work against a store or app.

WHAT is this pull request doing?

Adds two dedicated commands:

• shopify app graphiql: opens Admin API GraphiQL for the linked app and selected store using the app client-credentials flow.
• shopify store graphiql: opens Admin API GraphiQL for a store using authentication created by shopify store auth.

How to test your changes?

• shopify app graphiql --store shop.myshopify.com --> opens app-backed GraphiQL
• shopify app graphiql --store shop.myshopify.com --port 9123 --> opens app-backed GraphiQL on the requested local port
• shopify app devstill allows to open graphiql by pressing g
• shopify store auth --store shop.myshopify.com --scopes read_products,write_products
• shopify store graphiql --store shop.myshopify.com --> opens store-auth GraphiQL with mutations blocked
• shopify store graphiql --store shop.myshopify.com --allow-mutations --> opens store-auth GraphiQL allowing mutations

Post-release steps

Merge documentation PR

Checklist

• I've considered possible cross-platform impacts (Mac, Linux, Windows)
• I've considered possible documentation changes
• I've considered analytics changes to measure impact
• The change is user-facing — I've identified the correct bump type (patch for bug fixes · minor for new features · major for breaking changes) and added a changeset with pnpm changeset add

[gonzaloriestra]

• Add dedicated app and store GraphiQL commands #7382 👈 (View in Graphite)
• Make GraphiQL server auth-agnostic #7380 : 1 other dependent PR (#7381 )
• Extract GraphiQL server to @shopify/cli-kit #7379
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[gonzaloriestra]

/snapit

[gonzaloriestra]

/snapit

[gonzaloriestra]

/snapit

[github-actions]

🫰✨ Thanks @gonzaloriestra! Your snapshot has been published to npm.

Test the snapshot by installing your package globally:

pnpm i -g --@shopify:registry=https://registry.npmjs.org @shopify/cli@0.0.0-snapshot-20260424091951

Caution

After installing, validate the version by running shopify version in your terminal.
If the versions don't match, you might have multiple global instances installed.
Use which shopify to find out which one you are running and uninstall it.

[github-actions]

This PR seems inactive. If it's still relevant, please add a comment saying so. Otherwise, take no action.
→ If there's no activity within a week, then a bot will automatically close this.
Thanks for helping to improve Shopify's dev tooling and experience.

[gonzaloriestra]

/snapit

[github-actions]

🫰✨ Thanks @gonzaloriestra! Your snapshot has been published to npm.

Test the snapshot by installing your package globally:

pnpm i -g --@shopify:registry=https://registry.npmjs.org @shopify/cli@0.0.0-snapshot-20260612141153

Caution

After installing, validate the version by running shopify version in your terminal.
If the versions don't match, you might have multiple global instances installed.
Use which shopify to find out which one you are running and uninstall it.

[gonzaloriestra]

/snapit

[github-actions]

🫰✨ Thanks @gonzaloriestra! Your snapshot has been published to npm.

Test the snapshot by installing your package globally:

pnpm i -g --@shopify:registry=https://registry.npmjs.org @shopify/cli@0.0.0-snapshot-20260703101206

Caution

After installing, validate the version by running shopify version in your terminal.
If the versions don't match, you might have multiple global instances installed.
Use which shopify to find out which one you are running and uninstall it.

[github-actions]

Differences in type declarations

We detected differences in the type declarations generated by Typescript for this branch compared to the baseline ('main' branch). Please, review them to ensure they are backward-compatible. Here are some important things to keep in mind:

• Some seemingly private modules might be re-exported through public modules.
• If the branch is behind main you might see odd diffs, rebase main into this branch.

New type declarations

packages/cli-kit/dist/public/node/graphiql/session.d.ts

import { GraphiQLAppContext, TokenProvider } from './server.js';
import { AbortSignal } from '../abort.js';
import { OutputMessage } from '../output.js';
import { Writable } from 'stream';
export interface BuildGraphiQLUrlOptions {
    port: number;
    key: string;
    query?: string;
    variables?: string;
    apiVersion?: string;
}
export interface RunGraphiQLSessionOptions {
    storeFqdn: string;
    tokenProvider: TokenProvider;
    key: string;
    port?: number;
    query?: string;
    variables?: string;
    apiVersion?: string;
    appContext?: GraphiQLAppContext;
    protectMutations?: boolean;
    additionalReadyMessages?: OutputMessage[];
    abortSignal?: AbortSignal;
    stdout?: Writable;
}
/**
 * Generates a random key suitable for authenticating a single local GraphiQL session.
 *
 * @returns A 64-character hex string.
 */
export declare function generateRandomGraphiQLKey(): string;
/**
 * Builds the browser URL for a local GraphiQL session.
 *
 * @param options - The local port, key, and optional query string fields to prefill.
 * @returns The fully-qualified local GraphiQL URL.
 */
export declare function buildGraphiQLUrl(options: BuildGraphiQLUrlOptions): string;
/**
 * Runs a local GraphiQL session until the user interrupts it or the supplied abort signal fires.
 *
 * @param options - The server, authentication, URL prefill, and output options for the session.
 */
export declare function runGraphiQLSession(options: RunGraphiQLSessionOptions): Promise<void>;
/**
 * Resolves when the process receives SIGINT or when the supplied abort signal fires.
 *
 * @param externalSignal - Optional signal used by tests or callers to stop the session.
 */
export declare function waitForGraphiQLAbort(externalSignal?: AbortSignal): Promise<void>;

Existing type declarations

We found no diffs with existing type declarations

[isaacroldan]

Tophatted and working as expected 👌