MattssonandClaude Fable 5
c187fabf92
* feat(shopify): Shopify order/refund feed into the transactions inbox
New extensions/general/shopify feed extension, modeled on the WooCommerce
feed: connect a Shopify store with Dev Dashboard custom-app client
credentials (client credentials grant, ~24h tokens, never stored), then a
nightly cron + manual sync imports paid orders and refunds via the GraphQL
Admin API (pinned 2026-07) into the transactions inbox on clearing account
1584. Feed-only: nothing auto-books. Zero PII fields are queried, keeping
the app outside Shopify's protected customer data program.
- shopify_connections migration (RLS, revoke-never-delete, encrypted
client id/secret) + shopify_sync capability and bank_sync-mirrored
backfill
- frozen external_id scheme shopify_{shop_domain}_order|refund_{id},
scoped on the shop domain so reconnects never re-import
- cursor sync on updated_at windows with 24h overlap, lock-date drop at
map time, ingest-failure cursor floor, deadline stop-and-resume,
revoked-credential flip
- /import card + settings panel, sv/en i18n, cron 03:15 in vercel.json +
regenerated Docker crontabs, logo, events, panel registry
- 65 unit tests + pg-real RLS test; extensions.schema.json enum also
gains the missing stripe entry (pre-existing drift)
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
* fix(shopify): review findings from PR 1474
- token exchange: a 429 that survives every retry is throttling, not a
credential failure; stop remapping retryable 4xx to 401 so sustained
throttling can no longer flip the connection to revoked and delete the
stored credentials (CodeRabbit critical)
- order sync: advance a scanned-through watermark (run start, capped by
the failure floor) after a fully-listed window, so empty first runs and
quiet stores rotate to the back of the cron's oldest-first selection
instead of permanently occupying the 50-connection batch (CodeRabbit
major, starvation)
- add handler-level tests for the orders cron route (auth 401, disabled
503, unconfigured no-op, query failure, capability skip, happy path,
per-connection failure isolation, revoked marking)
- add 401 tests for /sync, /transaction-sync and /disconnect; pin the
cursor floor rule with a two-order page; stub the encryption key via
vi.stubEnv
- note in the panel description (sv/en) that orders can mix VAT rates and
must be split at booking (Swedish review advisory)
- DECISIONS.md: wrap underscore identifiers in backticks (MD037)
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
33 lines
1005 B
TypeScript
33 lines
1005 B
TypeScript
import type { Extension } from '@/lib/extensions/types'
|
|
import { shopifyApiRoutes } from './api-routes'
|
|
|
|
/**
|
|
* Shopify extension
|
|
*
|
|
* Connects a company's Shopify store via a merchant-created Dev Dashboard
|
|
* custom app (client credentials grant; the revealable shpat_ token flow was
|
|
* discontinued 2026-01-01) and imports the store's paid orders and refunds
|
|
* into the transactions inbox as a bank-style feed on the 1584 cash account.
|
|
* Feed-only (same doctrine as the Stripe and WooCommerce feeds): nothing is
|
|
* auto-booked, and Shopify Payments payout/fee reconciliation is out of
|
|
* scope for now (phase 2).
|
|
*
|
|
* Required environment variables:
|
|
* - SHOPIFY_CREDENTIALS_ENCRYPTION_KEY (at-rest key for client id/secret)
|
|
*/
|
|
export const shopifyExtension: Extension = {
|
|
id: 'shopify',
|
|
name: 'Shopify',
|
|
version: '1.0.0',
|
|
sector: 'general',
|
|
|
|
settingsPanel: {
|
|
label: 'Shopify',
|
|
path: '/import?mode=shopify',
|
|
},
|
|
|
|
apiRoutes: shopifyApiRoutes,
|
|
}
|
|
|
|
export default shopifyExtension
|