Add store list for organization stores

Add `shopify store list`, listing the stores in the Shopify organizations
available to the current CLI account (backed by Business Platform internally).

- Discover organizations and query each one's newest stores (a single
  server-sorted page), in bounded-concurrency batches, then merge and cap to the
  250 most recent across organizations; warn on stderr when truncated.
- Optional --organization-id to scope to a single organization.
- Output {stores, source} as JSON; render Subdomain | Name | Type | Created as a table.
- Add shared helpers: cli-kit extractSubdomain + formatShortDate, a store/store-type
  module (shared with store info), and harden the CLI session read against malformed JSON.

Author: dmerand

.changeset/store-list-bp-auto.md

@@ -0,0 +1,8 @@
+---
+'@shopify/cli': minor
+'@shopify/store': minor
+'@shopify/organizations': minor
+'@shopify/cli-kit': patch
+---
+
+Add `shopify store list` to list the stores in the Shopify organizations available to the current CLI account. When some organization lookups fail, the command returns the successful organizations with a warning and failure details for the skipped ones.

docs-shopify.dev/commands/interfaces/store-list.interface.ts

@@ -0,0 +1,30 @@
+// This is an autogenerated file. Don't edit this file manually.
+/**
+ * The following flags are available for the `store list` command:
+ * @publicDocs
+ */
+export interface storelist {
+  /**
+   * Output the result as JSON. Automatically disables color output.
+   * @environment SHOPIFY_FLAG_JSON
+   */
+  '-j, --json'?: ''
+
+  /**
+   * Disable color output.
+   * @environment SHOPIFY_FLAG_NO_COLOR
+   */
+  '--no-color'?: ''
+
+  /**
+   * List stores for a single organization, by ID.
+   * @environment SHOPIFY_FLAG_ORGANIZATION_ID
+   */
+  '--organization-id <value>'?: string
+
+  /**
+   * Increase the verbosity of the output.
+   * @environment SHOPIFY_FLAG_VERBOSE
+   */
+  '--verbose'?: ''
+}

docs-shopify.dev/generated/generated_docs_data_v2.json

@@ -4339,6 +4339,53 @@
       "value": "export interface storeinfo {\n  /**\n   * Output the result as JSON. Automatically disables color output.\n   * @environment SHOPIFY_FLAG_JSON\n   */\n  '-j, --json'?: ''\n\n  /**\n   * Disable color output.\n   * @environment SHOPIFY_FLAG_NO_COLOR\n   */\n  '--no-color'?: ''\n\n  /**\n   * The myshopify.com domain of the store.\n   * @environment SHOPIFY_FLAG_STORE\n   */\n  '-s, --store <value>': string\n\n  /**\n   * Increase the verbosity of the output.\n   * @environment SHOPIFY_FLAG_VERBOSE\n   */\n  '--verbose'?: ''\n}"
     }
   },
+  "storelist": {
+    "docs-shopify.dev/commands/interfaces/store-list.interface.ts": {
+      "filePath": "docs-shopify.dev/commands/interfaces/store-list.interface.ts",
+      "name": "storelist",
+      "description": "The following flags are available for the `store list` command:",
+      "isPublicDocs": true,
+      "members": [
+        {
+          "filePath": "docs-shopify.dev/commands/interfaces/store-list.interface.ts",
+          "syntaxKind": "PropertySignature",
+          "name": "--no-color",
+          "value": "''",
+          "description": "Disable color output.",
+          "isOptional": true,
+          "environmentValue": "SHOPIFY_FLAG_NO_COLOR"
+        },
+        {
+          "filePath": "docs-shopify.dev/commands/interfaces/store-list.interface.ts",
+          "syntaxKind": "PropertySignature",
+          "name": "--organization-id <value>",
+          "value": "string",
+          "description": "List stores for a single organization, by ID.",
+          "isOptional": true,
+          "environmentValue": "SHOPIFY_FLAG_ORGANIZATION_ID"
+        },
+        {
+          "filePath": "docs-shopify.dev/commands/interfaces/store-list.interface.ts",
+          "syntaxKind": "PropertySignature",
+          "name": "--verbose",
+          "value": "''",
+          "description": "Increase the verbosity of the output.",
+          "isOptional": true,
+          "environmentValue": "SHOPIFY_FLAG_VERBOSE"
+        },
+        {
+          "filePath": "docs-shopify.dev/commands/interfaces/store-list.interface.ts",
+          "syntaxKind": "PropertySignature",
+          "name": "-j, --json",
+          "value": "''",
+          "description": "Output the result as JSON. Automatically disables color output.",
+          "isOptional": true,
+          "environmentValue": "SHOPIFY_FLAG_JSON"
+        }
+      ],
+      "value": "export interface storelist {\n  /**\n   * Output the result as JSON. Automatically disables color output.\n   * @environment SHOPIFY_FLAG_JSON\n   */\n  '-j, --json'?: ''\n\n  /**\n   * Disable color output.\n   * @environment SHOPIFY_FLAG_NO_COLOR\n   */\n  '--no-color'?: ''\n\n  /**\n   * List stores for a single organization, by ID.\n   * @environment SHOPIFY_FLAG_ORGANIZATION_ID\n   */\n  '--organization-id <value>'?: string\n\n  /**\n   * Increase the verbosity of the output.\n   * @environment SHOPIFY_FLAG_VERBOSE\n   */\n  '--verbose'?: ''\n}"
+    }
+  },
   "themecheck": {
     "docs-shopify.dev/commands/interfaces/theme-check.interface.ts": {
       "filePath": "docs-shopify.dev/commands/interfaces/theme-check.interface.ts",

packages/cli-kit/src/private/node/session/store.test.ts

@@ -71,6 +71,36 @@ describe('session store', () => {
       // Then
       expect(result).toEqual(mockSessions)
     })
+
+    test('returns undefined and discards malformed JSON session content', async () => {
+      // Given
+      vi.mocked(getSessions).mockReturnValue('{not valid json')
+
+      // When
+      const result = await fetch()
+
+      // Then
+      expect(result).toBeUndefined()
+      expect(removeSessions).toHaveBeenCalled()
+      expect(removeCurrentSessionId).toHaveBeenCalled()
+    })
+
+    test('rethrows non-SyntaxError parse failures without discarding sessions', async () => {
+      // Given
+      vi.mocked(getSessions).mockReturnValue(JSON.stringify(mockSessions))
+      vi.mocked(removeSessions).mockClear()
+      vi.mocked(removeCurrentSessionId).mockClear()
+      const parseSpy = vi.spyOn(JSON, 'parse').mockImplementation(() => {
+        throw new Error('unexpected parse failure')
+      })
+
+      // Then
+      await expect(fetch()).rejects.toThrow('unexpected parse failure')
+      expect(removeSessions).not.toHaveBeenCalled()
+      expect(removeCurrentSessionId).not.toHaveBeenCalled()
+
+      parseSpy.mockRestore()
+    })
   })
 
   describe('remove', () => {

packages/cli-kit/src/private/node/session/store.ts

@@ -23,7 +23,16 @@ export async function fetch(): Promise<Sessions | undefined> {
   if (!content) {
     return undefined
   }
-  const contentJson = JSON.parse(content)
+
+  let contentJson: unknown
+  try {
+    contentJson = JSON.parse(content)
+  } catch (error) {
+    if (!(error instanceof SyntaxError)) throw error
+    await remove()
+    return undefined
+  }
+
   const parsedSessions = await SessionsSchema.safeParseAsync(contentJson)
   if (parsedSessions.success) {
     return parsedSessions.data

packages/cli-kit/src/public/common/string.test.ts

@@ -1,6 +1,7 @@
 import {
   formatDate,
   formatLocalDate,
+  formatShortDate,
   getRandomName,
   joinWithAnd,
   linesToColumns,
@@ -108,6 +109,24 @@ describe('formatDate', () => {
   })
 })
 
+describe('formatShortDate', () => {
+  test('formats an ISO timestamp as MMM DD, YYYY in UTC', () => {
+    expect(formatShortDate('2026-05-22T16:26:20Z')).toBe('May 22, 2026')
+  })
+
+  test('zero-pads the day and uses UTC', () => {
+    expect(formatShortDate('2026-01-05T23:59:59Z')).toBe('Jan 05, 2026')
+  })
+
+  test('accepts a Date instance', () => {
+    expect(formatShortDate(new Date('2025-12-15T12:00:00Z'))).toBe('Dec 15, 2025')
+  })
+
+  test('returns an empty string for an unparseable value', () => {
+    expect(formatShortDate('not-a-date')).toBe('')
+  })
+})
+
 describe('formatLocalDate', () => {
   test('formats an ISO date string to local date string', () => {
     // Given

packages/cli-kit/src/public/common/string.ts

@@ -375,6 +375,24 @@ export function formatLocalDate(dateString: string): string {
   return formatDate(localDate)
 }
 
+const SHORT_DATE_MONTHS = ['Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug', 'Sep', 'Oct', 'Nov', 'Dec']
+
+/**
+ * Formats a date as a short calendar date like "May 22, 2026" (`MMM DD, YYYY`) in UTC.
+ *
+ * UTC keeps the output deterministic regardless of the machine timezone. Returns an empty string
+ * when the value cannot be parsed into a valid date.
+ *
+ * @param value - A Date, epoch milliseconds, or a date string such as an ISO 8601 timestamp.
+ * @returns The formatted date, or an empty string when the value is invalid.
+ */
+export function formatShortDate(value: Date | number | string): string {
+  const date = value instanceof Date ? value : new Date(value)
+  if (Number.isNaN(date.getTime())) return ''
+
+  return `${SHORT_DATE_MONTHS[date.getUTCMonth()]} ${String(date.getUTCDate()).padStart(2, '0')}, ${date.getUTCFullYear()}`
+}
+
 /**
  * Given a list of items, it returns a string with the items joined by commas and the last item joined by "and".
  * All items are wrapped in double quotes.

packages/cli-kit/src/public/common/url.test.ts

@@ -1,4 +1,4 @@
-import {extractHost, extractMyshopifyHandle, isValidURL, safeParseURL} from './url.js'
+import {extractHost, extractMyshopifyHandle, extractSubdomain, isValidURL, safeParseURL} from './url.js'
 import {describe, expect, test} from 'vitest'
 
 describe('isValidURL', () => {
@@ -67,6 +67,11 @@ describe('extractHost', () => {
     expect(extractHost('shop.myshopify.com/admin')).toBe('shop.myshopify.com')
   })
 
+  test('returns the host for a bare host with a port (opaque URL guard)', () => {
+    expect(extractHost('my-shop.shop.dev:9292/admin')).toBe('my-shop.shop.dev')
+    expect(extractHost('localhost:3000')).toBe('localhost')
+  })
+
   test('returns undefined for null/undefined/empty input', () => {
     expect(extractHost(null)).toBeUndefined()
     expect(extractHost(undefined)).toBeUndefined()
@@ -88,3 +93,23 @@ describe('extractMyshopifyHandle', () => {
     expect(extractMyshopifyHandle(undefined)).toBeUndefined()
   })
 })
+
+describe('extractSubdomain', () => {
+  test('extracts the first label from a myshopify.com host', () => {
+    expect(extractSubdomain('https://my-shop.myshopify.com')).toBe('my-shop')
+  })
+
+  test('extracts the first label from non-myshopify hosts (local dev)', () => {
+    expect(extractSubdomain('my-shop.my.shop.dev')).toBe('my-shop')
+    expect(extractSubdomain('https://acme.shop.dev/admin')).toBe('acme')
+  })
+
+  test('extracts the first label from a bare host with a port', () => {
+    expect(extractSubdomain('my-shop.shop.dev:9292/admin')).toBe('my-shop')
+  })
+
+  test('returns undefined for null/undefined input', () => {
+    expect(extractSubdomain(null)).toBeUndefined()
+    expect(extractSubdomain(undefined)).toBeUndefined()
+  })
+})

packages/cli-kit/src/public/common/url.ts

@@ -40,9 +40,17 @@ export function safeParseURL(url: string): URL | undefined {
 export function extractHost(value: string | null | undefined): string | undefined {
   if (!value) return undefined
   const lowered = value.toLowerCase()
-  const parsed = safeParseURL(lowered)
-  if (parsed) return parsed.hostname
-  return lowered.replace(/^https?:\/\//, '').split('/')[0]
+  // A bare `host:port` (e.g. `my-shop.shop.dev:9292`) parses as an opaque URL whose hostname is
+  // empty (the host is read as the scheme), so try parsing with an explicit scheme as well and only
+  // accept a non-empty hostname.
+  for (const candidate of [lowered, `https://${lowered}`]) {
+    const hostname = safeParseURL(candidate)?.hostname
+    if (hostname) return hostname
+  }
+  // Never return an empty string: callers using `extractHost(value) ?? value` must keep the input.
+  const fallback = lowered.replace(/^https?:\/\//, '').split('/')[0]
+  if (fallback) return fallback
+  return undefined
 }
 
 /**
@@ -57,3 +65,17 @@ export function extractMyshopifyHandle(value: string | null | undefined): string
   const match = host.match(/^([^.]+)\.myshopify\.com$/)
   return match ? match[1] : undefined
 }
+
+/**
+ * Extracts the leading subdomain label from a URL or host, across environments — e.g.
+ * `acme.myshopify.com`, `acme.shop.dev`, or local development hosts — rather than assuming a
+ * `*.myshopify.com` domain.
+ *
+ * @param value - A URL or host string, possibly null/undefined.
+ * @returns The first DNS label, or undefined when no host can be extracted.
+ */
+export function extractSubdomain(value: string | null | undefined): string | undefined {
+  const host = extractHost(value)
+  if (!host) return undefined
+  return host.split('.')[0]
+}

packages/cli/README.md

@@ -79,6 +79,7 @@
 * [`shopify store auth`](#shopify-store-auth)
 * [`shopify store execute`](#shopify-store-execute)
 * [`shopify store info`](#shopify-store-info)
+* [`shopify store list`](#shopify-store-list)
 * [`shopify theme check`](#shopify-theme-check)
 * [`shopify theme console`](#shopify-theme-console)
 * [`shopify theme delete`](#shopify-theme-delete)
@@ -2206,6 +2207,41 @@ EXAMPLES
   $ shopify store info --store shop.myshopify.com --json
 ```
 
+## `shopify store list`
+
+List stores in a Shopify organization.
+
+```
+USAGE
+  $ shopify store list [-j] [--no-color] [--organization-id <value>] [--verbose]
+
+FLAGS
+  -j, --json                     [env: SHOPIFY_FLAG_JSON] Output the result as JSON. Automatically disables color
+                                 output.
+      --no-color                 [env: SHOPIFY_FLAG_NO_COLOR] Disable color output.
+      --organization-id=<value>  [env: SHOPIFY_FLAG_ORGANIZATION_ID] Filters the store list by organization. If omitted
+                                 and you belong to more than one organization, you will be prompted to choose one.
+      --verbose                  [env: SHOPIFY_FLAG_VERBOSE] Increase the verbosity of the output.
+
+DESCRIPTION
+  List stores in a Shopify organization.
+
+  Lists stores in a Shopify organization available to the current CLI account.
+
+  When more than one organization is available, the command prompts you to pick one unless you provide
+  `--organization-id`.
+  In non-interactive environments, provide `--organization-id`.
+
+  Run `shopify organization list` to find organization IDs.
+
+EXAMPLES
+  $ shopify store list
+
+  $ shopify store list --organization-id 1234567
+
+  $ shopify store list --json
+```
+
 ## `shopify theme check`
 
 Validate the theme.