Add store-auth source and auto fallback to store list

[dmerand]

Summary

Add the --from source selector and auto fallback to shopify store list on top of #7709.

Demo:

Screen Recording 2026-06-05 at 11.08.13 AM.mov (uploaded via Graphite)

Scope

• add --from auto | organization | store-auth (default auto)
• add store-auth source, backed by listStoredStoreAuthSummaries(), rendered as Subdomain | Connected; its JSON carries only store + connectedAt (no user id / email)
• make auto prefer your Shopify organization and fall back to locally stored store auth whenever the organization can't be listed for the current CLI session (not signed in, session not resolvable, reauthentication required, or any auth/network/listing error)
• keep --from organization strict: no fallback, original error surfaced
• thread noPrompt through ensureAuthenticatedBusinessPlatform() so auto can probe without prompting
• carry --organization-id through auto/organization; reject it with --from store-auth; an unknown org id is a hard error in every mode (no silent fallback)
• extend the 250 cap + truncation warning to the store-auth source; sort store-auth newest-first by connected date

Contract

• result discriminant is organization | store-auth; no "Business Platform" wording in the command contract or output
• every organization-listing failure is classified unavailable (original error preserved) so auto always falls back while --from organization rethrows

Smoke checks

• logged out, store list → falls back to store-auth, exits 0
• store list --from store-auth → local store auth table, exits 0
• store list --from organization → strict, surfaces the failure

[dmerand]

Warning

This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
Learn more

• Add store-auth source and auto fallback to store list #7714 👈 (View in Graphite)
• Introduce local store auth summary API #7709
• Add store list for organization stores #7708
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[nickwesselman]

/snapit

[github-actions]

🫰✨ Thanks @nickwesselman! Your snapshot has been published to npm.

Test the snapshot by installing your package globally:

pnpm i -g --@shopify:registry=https://registry.npmjs.org @shopify/cli@0.0.0-snapshot-20260605172558

Caution

After installing, validate the version by running shopify version in your terminal.
If the versions don't match, you might have multiple global instances installed.
Use which shopify to find out which one you are running and uninstall it.

[github-actions]

Differences in type declarations

We detected differences in the type declarations generated by Typescript for this branch compared to the baseline ('main' branch). Please, review them to ensure they are backward-compatible. Here are some important things to keep in mind:

• Some seemingly private modules might be re-exported through public modules.
• If the branch is behind main you might see odd diffs, rebase main into this branch.

New type declarations

We found no new type declarations in this PR

Existing type declarations

packages/cli-kit/dist/public/node/session.d.ts

@@ -119,9 +119,10 @@ export declare function ensureAuthenticatedThemes(store: string, password: strin
  * Ensure that we have a valid session to access the Business Platform API.
  *
  * @param scopes - Optional array of extra scopes to authenticate with.
+ * @param options - Optional auth behavior overrides such as .
  * @returns The access token for the Business Platform API.
  */
-export declare function ensureAuthenticatedBusinessPlatform(scopes?: BusinessPlatformScope[]): Promise<string>;
+export declare function ensureAuthenticatedBusinessPlatform(scopes?: BusinessPlatformScope[], options?: EnsureAuthenticatedAdditionalOptions): Promise<string>;
 /**
  * Logout from Shopify.
  *