Unofficial Tracker

Every change to Shopify's App Bridge, tracked automatically.

No changelog, no versioning — just a minified app-bridge.js shipped to CDN and a prayer. We reverse-engineer every build so you don't have to.

Get notified How it works

Changelog

6 entries

b3f8e93d

Internal refactoring of private field utilities with a minor defensive hasOwnProperty improvement.

  • The private field access guard in _utilities.js was updated to use {}.hasOwnProperty.call instead of Object.prototype.hasOwnProperty.call, making it more resilient to prototype pollution.
  • Internal private field helpers were renamed and reorganized in _utilities.js: the counter variable and key-creation and field-check functions swapped names.
  • _bootstrap.js was updated to call the renamed private field helpers privateKeyCounter and checkPrivateField consistently.
Files 3
+18 -18
e35faefd

Several modules broadened protocol support from Shopify-only to all protocols, with minor error tracking improvements.

  • toast.show and toast.hide switched from SHOPIFY_PROTOCOLS to ALL_PROTOCOLS, enabling them to work across all protocol environments.
  • sidekick.registerToolHandler and sidekick.registerContextCallback switched from SHOPIFY_PROTOCOLS to ALL_PROTOCOLS.
  • tools.register, tools.unregister, and tools.clear switched from SHOPIFY_PROTOCOLS to ALL_PROTOCOLS.
Files 20
+66 -67
16 modified
07f68577

Added mobile safe area inset support via a CSS custom property when the MobileBridgeNext flag is enabled.

  • Bootstrap now injects a --shopify-safe-area-inset-bottom CSS custom property initialized to 0px when the MobileBridgeNext feature flag is active.
  • The safe area inset bottom value is automatically subscribed to from the host and kept in sync as a CSS variable on the root element.
  • A body::after pseudo-element is added to reserve physical space at the bottom of the page equal to the safe area inset height.
Files 6
+43 -30
3 modified
d934d47f

The fetch module gained extensionOriginFetch support, and several modules narrowed their protocol scope to Shopify-only contexts.

  • The fetch module now supports an extensionOriginFetch handler that routes requests through a custom fetch implementation when available, affecting both initial and retry-on-session requests.
  • The toast module's show and hide methods now only activate in Shopify protocol contexts, replacing the previous all-protocols behavior.
  • The tools module's register, unregister, and clear methods now scope exclusively to Shopify protocols.
Files 24
+140 -188
20 modified
cdc43ba6

This build introduces first-class support for app intents — apps can now read structured intent data from the URL, respond to intents with ok/error/closed outcomes, and detect intent context via `environment.intent`. Two new modules (`analytics` and `tools`) were added, and the title bar gains support for `<s-button-group>` elements.

  • Two new modules registered: `analytics.js` and `tools.js`
  • `intents` module: new `api.data.intent` property that parses and exposes structured intent payload (`type`, `action`, `data`) from the URL's `intent` query parameter
  • `intents` module: new `api.intents.response` object with `ok()`, `error()`, and `closed()` methods for sending a response back to the intent caller (only exposed when an intent is present)
Files 26
+825 -709
21 modified
55c89da0

Initial baseline capture of Shopify's App Bridge CDN bundle. This is the first tracked build — all 38 modules and 4 infrastructure files have been deminified and catalogued.

  • Captured 34 feature modules including navigation, fetch, save-bar, toast, resource-picker, and POS
  • Identified 4 infrastructure files: bootstrap, utilities, remote-ui (RPC), and web-vitals
  • Bundle size: 88.5 KB minified, expanding to ~167 KB deminified across 38 files
+33 new