Smaller bundle

[gonzaloriestra]

WHY are these changes introduced?

The CLI bundle is larger than necessary.

WHAT is this pull request doing?

Reduces CLI bundle size by ~55% (62 MB → 28 MB)

• Enable minifyWhitespace and minifyIdentifiers in esbuild (previously only minifySyntax was on)
• Exclude source map files from the npm package via !/dist/**/*.map in files (maps are still generated for Observe)
• Replace brotli JS package with native zlib.brotliCompressSync
• Simplify entry point to ['./src/index.ts'] instead of globbing all .ts files

How to test your changes?

• pnpm bundle-for-release and check dist folder
• npm i -g --@shopify:registry=https://registry.npmjs.org @0.0.0-snapshot-20260318104923
• shopify app deploy (exercises brotli compression)

Measuring impact

How do we know this change was effective? Please choose one:

• n/a - this doesn't need measurement, e.g. a linting rule or a bug-fix
• Existing analytics will cater for this addition
• PR includes analytics changes to measure impact

Checklist

• I've considered possible cross-platform impacts (Mac, Linux, Windows)
• I've considered possible documentation changes

[gonzaloriestra]

/snapit

[github-actions]

Coverage report

St.❔	Category	Percentage	Covered / Total
🟢	Statements	82.73%	14566/17607
🟡	Branches	75.15%	7228/9618
🟢	Functions	82.03%	3701/4512
🟢	Lines	83.18%	13768/16553

Test suite run success

3806 tests passing in 1462 suites.

Report generated by 🧪jest coverage report action from 195248b

[gonzaloriestra]

/snapit

[github-actions]

🫰✨ Thanks @gonzaloriestra! Your snapshot has been published to npm.

Test the snapshot by installing your package globally:

npm i -g --@shopify:registry=https://registry.npmjs.org @shopify/cli@0.0.0-snapshot-20260313171105

Caution

After installing, validate the version by running shopify version in your terminal.
If the versions don't match, you might have multiple global instances installed.
Use which shopify to find out which one you are running and uninstall it.

[gonzaloriestra]

/snapit

[github-actions]

🫰✨ Thanks @gonzaloriestra! Your snapshot has been published to npm.

Test the snapshot by installing your package globally:

npm i -g --@shopify:registry=https://registry.npmjs.org @shopify/cli@0.0.0-snapshot-20260317160706

Caution

After installing, validate the version by running shopify version in your terminal.
If the versions don't match, you might have multiple global instances installed.
Use which shopify to find out which one you are running and uninstall it.

[gonzaloriestra]

/snapit

[github-actions]

🫰✨ Thanks @gonzaloriestra! Your snapshot has been published to npm.

Test the snapshot by installing your package globally:

npm i -g --@shopify:registry=https://registry.npmjs.org @shopify/cli@0.0.0-snapshot-20260318104923

Caution

After installing, validate the version by running shopify version in your terminal.
If the versions don't match, you might have multiple global instances installed.
Use which shopify to find out which one you are running and uninstall it.

[github-actions]

We detected some changes at packages/*/src and there are no updates in the .changeset.
If the changes are user-facing, run pnpm changeset add to track your changes and include them in the next release CHANGELOG.

Caution

DO NOT create changesets for features which you do not wish to be included in the public changelog of the next CLI release.

[craigmichaelmartin]

So cool! Thank you for leading these autoresearch improvements!!

[dmerand]

I love this approach overall! Review found a couple of concerns worth addressing prior to shipping.

[dmerand]

The change from globbing all .ts files to a single "./src/index.ts" entry point breaks the oclif hooks configuration.

The Problem

The oclif configuration in packages/cli/package.json expects these hook files:

"hooks": {
  "prerun": "./dist/hooks/prerun.js",
  "postrun": "./dist/hooks/postrun.js"
}

These source files exist:

• packages/cli/src/hooks/prerun.ts
• packages/cli/src/hooks/postrun.ts

However, packages/cli/src/index.ts does NOT import or export these hooks. They are meant to be standalone files per oclif convention.

Impact

With the old config (entryPoints: ["./src/**/*.ts"]):

• esbuild finds all .ts files via glob
• Creates corresponding .js files maintaining directory structure
• Outputs dist/hooks/prerun.js and dist/hooks/postrun.js ✅

With the new config (entryPoints: ["./src/index.ts"]):

• esbuild only bundles what's reachable from index.ts
• Since prerun/postrun aren't imported by index.ts, they're unreachable
• No dist/hooks/prerun.js or dist/hooks/postrun.js files are created ❌
• oclif will fail when trying to load these hooks at runtime

Fix Options

1. Keep the glob pattern: entryPoints: ["./src/**/*.ts"]
2. Add explicit entry points: entryPoints: ["./src/index.ts", "./src/hooks/prerun.ts", "./src/hooks/postrun.ts"]
3. Import/export the hooks in index.ts (not recommended - they're meant to be separate files per oclif convention)

[dmerand]

(Ref Line 56) 🐛 Bug: The configuration uses sourcemap: true, which generates inline sourcemaps embedded directly in the .js files rather than separate .map files. This means the !/dist/**/*.map exclusion in package.json has no effect, and sourcemaps are shipped to npm users inside the bundles, directly contradicting the PR's goal of reducing bundle size by ~55%. An earlier commit noted that disabling sourcemaps saved 35,752 KB.

Suggestion:

Suggested change

	sourcemap: 'external',

This will generate separate .map files that can be uploaded to Observe while being excluded from the npm package via the existing !/dist/**/*.map pattern.