Fix: guard rewriteConfiguration against non-array and nullish config values

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: lizkenyon

.changeset/chilly-glasses-fetch.md

@@ -0,0 +1,5 @@
+---
+'@shopify/app': patch
+---
+
+Fix crash "config2.map is not a function" in `rewriteConfiguration` when writing app configuration with unvalidated data (e.g., from third-party templates without `client_id`)

packages/app/src/cli/services/app/write-app-configuration-file.test.ts

@@ -1,8 +1,9 @@
-import {writeAppConfigurationFile} from './write-app-configuration-file.js'
+import {rewriteConfiguration, writeAppConfigurationFile} from './write-app-configuration-file.js'
 import {DEFAULT_CONFIG, buildVersionedAppSchema} from '../../models/app/app.test-data.js'
 import {CurrentAppConfiguration} from '../../models/app/app.js'
 import {inTemporaryDirectory, readFile} from '@shopify/cli-kit/node/fs'
 import {joinPath} from '@shopify/cli-kit/node/path'
+import {zod} from '@shopify/cli-kit/node/schema'
 import {describe, expect, test} from 'vitest'
 
 const FULL_CONFIGURATION = {
@@ -151,3 +152,29 @@ url = "https://example.com/prefs"
     })
   })
 })
+
+describe('rewriteConfiguration', () => {
+  test('handles undefined config for an optional array schema wrapped in effects', () => {
+    const schema = zod.array(zod.string()).optional().transform((val) => val)
+
+    expect(rewriteConfiguration(schema, undefined)).toBeUndefined()
+  })
+
+  test('handles null config for an array schema', () => {
+    const schema = zod.array(zod.string())
+
+    expect(rewriteConfiguration(schema, null)).toBeUndefined()
+  })
+
+  test('handles undefined config for an object schema', () => {
+    const schema = zod.object({name: zod.string()}).optional()
+
+    expect(rewriteConfiguration(schema, undefined)).toBeUndefined()
+  })
+
+  test('passes through non-array value when schema expects an array', () => {
+    const schema = zod.array(zod.string())
+
+    expect(rewriteConfiguration(schema, 'not-an-array')).toBe('not-an-array')
+  })
+})

packages/app/src/cli/services/app/write-app-configuration-file.ts

@@ -27,10 +27,12 @@ export async function writeAppConfigurationFile(
 
 export const rewriteConfiguration = <T extends zod.ZodTypeAny>(schema: T, config: unknown): unknown => {
   if (schema === null || schema === undefined) return null
+  if (config === null || config === undefined) return undefined
   if (schema instanceof zod.ZodNullable || schema instanceof zod.ZodOptional)
     return rewriteConfiguration(schema.unwrap(), config)
   if (schema instanceof zod.ZodArray) {
-    return (config as unknown[]).map((item) => rewriteConfiguration(schema.element, item))
+    if (!Array.isArray(config)) return config
+    return config.map((item) => rewriteConfiguration(schema.element, item))
   }
   if (schema instanceof zod.ZodEffects) {
     return rewriteConfiguration(schema._def.schema, config)