{
  "slug": "shopify-theme-pull-and-push-can-use-matching-store-auth-sessions-612b1de2f43f",
  "title": "shopify theme pull and push can use matching store auth sessions",
  "tools": [
    "shopify"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-07-06T16:56:33.000Z",
  "announced_at": "2026-07-06T16:56:33.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When pulling or pushing a theme, if no `--password` is provided and a cached store-auth session matches the target store, run the theme command without `--password` to use that session’s Admin API token. An explicit `--password` takes precedence. [Release note](https://github.com/Shopify/cli/releases/tag/4.4.0)",
    "examples": [
      "shopify theme pull --store <store.myshopify.com> --theme <theme-id-or-name>",
      "shopify theme push --store <store.myshopify.com> --theme <theme-id-or-name>",
      "shopify store auth --store <store.myshopify.com> --scopes <comma-separated-admin-api-scopes>"
    ],
    "gotchas": [
      "Version: 4.4.0",
      "--store <value>: Theme commands: target store URL; supply the store matching the cached session. Store auth: required; the store’s myshopify.com domain.",
      "--theme <value>: Theme ID or remote theme name; use to select the target theme for a non-interactive command.",
      "--password <value>: Theme Access password or Admin API token. The release note says an explicit value takes precedence over cached store auth.",
      "--scopes <value> (required): Comma-separated Admin API scopes to request when creating the stored store-auth token.",
      "Prerequisite: A cached `shopify store auth` session must match the target store for theme pull/push to use its Admin API token when `--password` is omitted.",
      "Prerequisite: `shopify store auth` stores an online access token for later reuse; rerun it if the token is missing, expired, or lacks needed scopes.",
      "The store-auth session must match the store.",
      "An explicit `--password` takes precedence over the cached store-auth token.",
      "Multi-environment theme configs can omit `password` when the matching store-auth cache session satisfies the requirement."
    ]
  },
  "why_it_matters": "Pull or push a theme for a store with a matching cached store-auth session and no theme password configured.",
  "before": "Authenticate theme commands through normal theme authentication; cached store-auth Admin API tokens were not used as a fallback.",
  "sources": [
    "https://github.com/Shopify/cli/releases/tag/4.4.0",
    "https://github.com/Shopify/cli/pull/7783",
    "https://shopify.dev/docs/api/shopify-cli/theme/theme-pull",
    "https://shopify.dev/docs/api/shopify-cli/theme/theme-push",
    "https://shopify.dev/docs/api/shopify-cli/store/store-auth"
  ],
  "rank": 0.93023,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave2a-20261017",
    "verdict_id": "wave2a-20261017:wave2a-20261017-6148374bb900d529-5:gate",
    "evidence_hash": "b3174bbe0c432619f4aeafa67227b20250a2f7c4280a3bc8d63d72da602167cd"
  },
  "review": {
    "draft_hash": "fa9c874a5ef54c2e01c184a72e8dc42385738876ffdb9ca68f8356cfb3e1c602",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave2a-20261017:gate",
    "reason": "3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.93 >= 0.9; 2 needed) and Jev gave 0.60 (>= 0.6 needed)."
  }
}