@drawbridge/drawbridge-utils 0.0.143 → 0.0.145

package/dist/connections/index.js

@@ -3292,6 +3292,26 @@ var toCanonicalEmail = (value) => {
   return local + "@" + domain;
 };
 
+// lib/encrypt.js
+import crypto from "crypto";
+var ALGORITHM = "aes-256-gcm";
+var getKey = () => Buffer.from(process.env.ENCRYPT_CONNECTION_SECRET, "hex");
+var decrypt = (value) => {
+  if (typeof value !== "string") return value;
+  const [ivHex, tagHex, dataHex] = value.split(":");
+  const decipher = crypto.createDecipheriv(
+    ALGORITHM,
+    getKey(),
+    Buffer.from(ivHex, "hex")
+  );
+  decipher.setAuthTag(Buffer.from(tagHex, "hex"));
+  const result = Buffer.concat([
+    decipher.update(Buffer.from(dataHex, "hex")),
+    decipher.final()
+  ]);
+  return JSON.parse(result.toString("utf8"));
+};
+
 // lib/slugify.js
 import slug from "slugify";
 var slugify = (value, nochars = false) => {
@@ -3346,6 +3366,8 @@ var generateDiscountCode = customAlphabet2("0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ
 var ORDER_EVENT_HANDLE = slugify("drawbridge-orders");
 var REFRESH_TOKEN_FRESHNESS_BUFFER_MS = 5 * 24 * 60 * 60 * 1e3;
 var OAUTH_ERROR_SOURCE = "oauth";
+var BILLING_ERROR_SOURCE = "billing";
+var BILLING_ERROR_MESSAGE = "Order billing isn't set up for this store \u2014 reselect and approve the plan from the Shopify connection page.";
 var OAUTH_GRANT_REVOKED_CODES = ["application_cannot_be_found", "invalid_grant"];
 var inbound = {
   headers: {
@@ -3866,6 +3888,9 @@ var shopify_default2 = {
           }
         }
         const billable = (org == null ? void 0 : org.billingProvider) === "shopify" && fee > 0 && !backfill;
+        const providerRow = billable ? await read.get({ collection: "provider", query: { slug: "shopify" } }) : null;
+        const { orderEventHandle } = (providerRow == null ? void 0 : providerRow.settings) ? decrypt(providerRow.settings) : {};
+        const handle = typeof orderEventHandle === "string" && slugify(orderEventHandle) || ORDER_EVENT_HANDLE;
         if (billable && !((_f = connection2 == null ? void 0 : connection2.source) == null ? void 0 : _f.id)) {
           (_g = logger2 == null ? void 0 : logger2.error) == null ? void 0 : _g.call(logger2, new Error(
             "shopify.usage.billing.skipped on order " + orderId + ": " + Math.round(fee * 100) + " cents not billed \u2014 connection " + (connection2 == null ? void 0 : connection2.id) + " has no source.id"
@@ -3884,7 +3909,7 @@ var shopify_default2 = {
             // verify it against the transaction prefix and refuse a
             // drifted pair — idempotency keys are permanent, so a
             // mistraceable event can never be resent under its own key.
-            handle: ORDER_EVENT_HANDLE,
+            handle,
             idempotencyKey: String(orderId),
             orderDocId,
             orderId: String(orderId),
@@ -3894,7 +3919,7 @@ var shopify_default2 = {
             // here — the event handle plus the order id — and sent as the
             // event's `reference`. queue/usage.js stamps the same id onto
             // the order as billed.transaction.
-            transaction: ORDER_EVENT_HANDLE + "." + orderId,
+            transaction: handle + "." + orderId,
             value: Math.round(fee * 100)
           },
           name: "billing",
@@ -4099,6 +4124,46 @@ var shopify_default2 = {
               query: { id: connection2.id }
             });
           }
+          const hasBillingIssue = (connection2.errors || []).some((entry) => entry.source === BILLING_ERROR_SOURCE);
+          if (metered === null && !hasBillingIssue) {
+            writes.push({
+              collection: "connection",
+              data: {
+                $push: {
+                  errors: {
+                    message: BILLING_ERROR_MESSAGE,
+                    source: BILLING_ERROR_SOURCE
+                  }
+                }
+              },
+              operation: "update",
+              query: { id: connection2.id }
+            });
+          }
+          if (typeof metered === "string" && hasBillingIssue) {
+            writes.push({
+              collection: "connection",
+              data: {
+                $pull: {
+                  errors: { source: BILLING_ERROR_SOURCE }
+                }
+              },
+              operation: "update",
+              query: { id: connection2.id }
+            });
+            writes.push({
+              collection: "connection",
+              data: {
+                $set: { status: "active" }
+              },
+              operation: "update",
+              query: {
+                id: connection2.id,
+                status: "error",
+                "errors.0": { $exists: false }
+              }
+            });
+          }
           return {
             writes,
             enqueues: [{
@@ -4263,7 +4328,15 @@ var shopify_default2 = {
       { input: "text", key: "apiKey", credential: "SHOPIFY_API_KEY", label: "API key", required: true },
       { input: "password", key: "apiSecret", credential: "SHOPIFY_API_SECRET", label: "API secret", redact: true, required: true },
       { input: "text", key: "appHandle", credential: "SHOPIFY_APP_HANDLE", label: "App handle", required: true },
-      { input: "text", key: "listingUrl", credential: "SHOPIFY_APP_LISTING_URL", label: "App listing URL", required: true }
+      { input: "text", key: "listingUrl", credential: "SHOPIFY_APP_LISTING_URL", label: "App listing URL", required: true },
+      // The usage meter's event handle, when the plan config's meter ever
+      // changes: stored value overrides the built-in default
+      // (events.order.handle) at the mint point, and `format : 'slug'`
+      // normalizes it on save — a handle can carry no spaces or capitals,
+      // and classification against it is case-sensitive. Optional: empty
+      // means the default, and the sender still refuses any handle that
+      // disagrees with the transaction it minted.
+      { format: "slug", input: "text", key: "orderEventHandle", label: "Order event handle", required: false, setting: true }
     ]
   },
   // A pre-launch integration: it only surfaces once the App Store listing
@@ -4281,9 +4354,18 @@ var shopify_default2 = {
   // there is nothing further to choose. `shop` absent means the install did not
   // finish, which is a credential problem rather than a setup one, so the
   // stored status already says so.
-  // Nothing to add — no setting can make this connection unusable, so the
-  // credential's own verdict stands.
-  status: (data2) => data2 == null ? void 0 : data2.status,
+  //
+  // ONE presentation downgrade: an ACTIVE store whose approval carries no
+  // usage meter (source.metered explicitly null) PRESENTS as error, so the
+  // connections list shows the red state and the merchant knows to click in
+  // — where the Fix-order-billing card and the billing Issue explain the
+  // click. The STORED status stays active on purpose: serving and tracking
+  // gate on it, and the orders recorded while the merchant fixes the plan
+  // are the ones billed afterward.
+  status: (data2) => {
+    var _a;
+    return (data2 == null ? void 0 : data2.status) === "active" && ((_a = data2 == null ? void 0 : data2.source) == null ? void 0 : _a.metered) === null ? "error" : data2 == null ? void 0 : data2.status;
+  },
   // Step types name the CAPABILITY, not this vendor. A second store platform
   // implements the same four commerce steps, and the connection on the step
   // says which store it runs against — so a merchant sees one "Create
@@ -4405,8 +4487,9 @@ var shopify_default2 = {
       ...(data2 == null ? void 0 : data2.status) === "pending" ? [
         {
           action: "billing",
-          message: "Approve the Drawbridge plan to activate this connection. You'll confirm the pricing on Shopify, then everything else happens here.",
-          title: "Approve your plan"
+          message: "Approve the Drawbridge plan to activate this connection. You'll be asked to select a plan on Shopify, then everything else happens here.",
+          title: "Approve your plan",
+          type: "warning"
         }
       ] : [],
       // The store's ACTIVE approval carries no usage component — stamped by
@@ -4419,8 +4502,9 @@ var shopify_default2 = {
       ...(data2 == null ? void 0 : data2.status) === "active" && ((_a = data2 == null ? void 0 : data2.source) == null ? void 0 : _a.metered) === null ? [
         {
           action: "billing",
-          message: "Order billing isn't set up for this store, so campaign-attributed orders aren't being charged. Approve the updated plan to fix it \u2014 one click here, one confirmation on Shopify.",
-          title: "Fix order billing"
+          message: "Order billing isn't set up for this store, so campaign-attributed orders aren't being charged. You'll need to reselect your plan on Shopify and approve it to fix this.",
+          title: "Fix order billing",
+          type: "error"
         }
       ] : []
     ];
@@ -4429,7 +4513,7 @@ var shopify_default2 = {
 };
 
 // lib/connections/providers/webhook.js
-import crypto from "crypto";
+import crypto2 from "crypto";
 
 // lib/safe-http.js
 import dns2 from "dns";
@@ -4664,7 +4748,7 @@ var webhook_default = {
         request2.body = body;
         const outgoing = { ...headers };
         if (settings == null ? void 0 : settings.secret) {
-          outgoing["X-Drawbridge-Signature"] = "sha256=" + crypto.createHmac("sha256", settings.secret).update(JSON.stringify(body)).digest("hex");
+          outgoing["X-Drawbridge-Signature"] = "sha256=" + crypto2.createHmac("sha256", settings.secret).update(JSON.stringify(body)).digest("hex");
         }
         const response = await send2({ body, headers: outgoing, method, url });
         return { message: "Webhook POSTed to " + url + ".", request: request2, response: response || { delivered: true } };
@@ -5026,6 +5110,11 @@ var publicConnectionKeys = Object.freeze([
   "settings",
   "shop",
   "slug",
+  // Vendor identity plus the metered billing stamp — domain, id, label,
+  // metered — no credentials live here (those are the encrypted settings
+  // blob). The status and tasks hooks pivot on source.metered, so stripping
+  // it here left the presented status blind to the one state it must show.
+  "source",
   "status",
   "tasks",
   "title",

package/dist/providers.cjs

@@ -3272,6 +3272,45 @@ var toCanonicalEmail = (value) => {
   return local + "@" + domain;
 };
 
+// lib/encrypt.js
+var import_crypto2 = __toESM(require("crypto"), 1);
+
+// lib/token.js
+var import_crypto = __toESM(require("crypto"), 1);
+var generate = (bytes = 32, encoding = "base64url") => {
+  const buf = import_crypto.default.randomBytes(bytes);
+  return encoding ? buf.toString(encoding) : buf;
+};
+
+// lib/encrypt.js
+var ALGORITHM = "aes-256-gcm";
+var getKey = () => Buffer.from(process.env.ENCRYPT_CONNECTION_SECRET, "hex");
+var encrypt = (value) => {
+  const iv = generate(12, null);
+  const cipher = import_crypto2.default.createCipheriv(ALGORITHM, getKey(), iv);
+  const data2 = Buffer.concat([
+    cipher.update(JSON.stringify(value), "utf8"),
+    cipher.final()
+  ]);
+  const tag = cipher.getAuthTag();
+  return [iv, tag, data2].map((b) => b.toString("hex")).join(":");
+};
+var decrypt = (value) => {
+  if (typeof value !== "string") return value;
+  const [ivHex, tagHex, dataHex] = value.split(":");
+  const decipher = import_crypto2.default.createDecipheriv(
+    ALGORITHM,
+    getKey(),
+    Buffer.from(ivHex, "hex")
+  );
+  decipher.setAuthTag(Buffer.from(tagHex, "hex"));
+  const result = Buffer.concat([
+    decipher.update(Buffer.from(dataHex, "hex")),
+    decipher.final()
+  ]);
+  return JSON.parse(result.toString("utf8"));
+};
+
 // lib/slugify.js
 var import_slugify = __toESM(require("slugify"), 1);
 var slugify = (value, nochars = false) => {
@@ -3326,6 +3365,8 @@ var generateDiscountCode = (0, import_nanoid2.customAlphabet)("0123456789ABCDEFG
 var ORDER_EVENT_HANDLE = slugify("drawbridge-orders");
 var REFRESH_TOKEN_FRESHNESS_BUFFER_MS = 5 * 24 * 60 * 60 * 1e3;
 var OAUTH_ERROR_SOURCE = "oauth";
+var BILLING_ERROR_SOURCE = "billing";
+var BILLING_ERROR_MESSAGE = "Order billing isn't set up for this store \u2014 reselect and approve the plan from the Shopify connection page.";
 var OAUTH_GRANT_REVOKED_CODES = ["application_cannot_be_found", "invalid_grant"];
 var inbound = {
   headers: {
@@ -3846,6 +3887,9 @@ var shopify_default2 = {
           }
         }
         const billable = (org == null ? void 0 : org.billingProvider) === "shopify" && fee > 0 && !backfill;
+        const providerRow = billable ? await read.get({ collection: "provider", query: { slug: "shopify" } }) : null;
+        const { orderEventHandle } = (providerRow == null ? void 0 : providerRow.settings) ? decrypt(providerRow.settings) : {};
+        const handle = typeof orderEventHandle === "string" && slugify(orderEventHandle) || ORDER_EVENT_HANDLE;
         if (billable && !((_f = connection2 == null ? void 0 : connection2.source) == null ? void 0 : _f.id)) {
           (_g = logger2 == null ? void 0 : logger2.error) == null ? void 0 : _g.call(logger2, new Error(
             "shopify.usage.billing.skipped on order " + orderId + ": " + Math.round(fee * 100) + " cents not billed \u2014 connection " + (connection2 == null ? void 0 : connection2.id) + " has no source.id"
@@ -3864,7 +3908,7 @@ var shopify_default2 = {
             // verify it against the transaction prefix and refuse a
             // drifted pair — idempotency keys are permanent, so a
             // mistraceable event can never be resent under its own key.
-            handle: ORDER_EVENT_HANDLE,
+            handle,
             idempotencyKey: String(orderId),
             orderDocId,
             orderId: String(orderId),
@@ -3874,7 +3918,7 @@ var shopify_default2 = {
             // here — the event handle plus the order id — and sent as the
             // event's `reference`. queue/usage.js stamps the same id onto
             // the order as billed.transaction.
-            transaction: ORDER_EVENT_HANDLE + "." + orderId,
+            transaction: handle + "." + orderId,
             value: Math.round(fee * 100)
           },
           name: "billing",
@@ -4079,6 +4123,46 @@ var shopify_default2 = {
               query: { id: connection2.id }
             });
           }
+          const hasBillingIssue = (connection2.errors || []).some((entry) => entry.source === BILLING_ERROR_SOURCE);
+          if (metered === null && !hasBillingIssue) {
+            writes.push({
+              collection: "connection",
+              data: {
+                $push: {
+                  errors: {
+                    message: BILLING_ERROR_MESSAGE,
+                    source: BILLING_ERROR_SOURCE
+                  }
+                }
+              },
+              operation: "update",
+              query: { id: connection2.id }
+            });
+          }
+          if (typeof metered === "string" && hasBillingIssue) {
+            writes.push({
+              collection: "connection",
+              data: {
+                $pull: {
+                  errors: { source: BILLING_ERROR_SOURCE }
+                }
+              },
+              operation: "update",
+              query: { id: connection2.id }
+            });
+            writes.push({
+              collection: "connection",
+              data: {
+                $set: { status: "active" }
+              },
+              operation: "update",
+              query: {
+                id: connection2.id,
+                status: "error",
+                "errors.0": { $exists: false }
+              }
+            });
+          }
           return {
             writes,
             enqueues: [{
@@ -4243,7 +4327,15 @@ var shopify_default2 = {
       { input: "text", key: "apiKey", credential: "SHOPIFY_API_KEY", label: "API key", required: true },
       { input: "password", key: "apiSecret", credential: "SHOPIFY_API_SECRET", label: "API secret", redact: true, required: true },
       { input: "text", key: "appHandle", credential: "SHOPIFY_APP_HANDLE", label: "App handle", required: true },
-      { input: "text", key: "listingUrl", credential: "SHOPIFY_APP_LISTING_URL", label: "App listing URL", required: true }
+      { input: "text", key: "listingUrl", credential: "SHOPIFY_APP_LISTING_URL", label: "App listing URL", required: true },
+      // The usage meter's event handle, when the plan config's meter ever
+      // changes: stored value overrides the built-in default
+      // (events.order.handle) at the mint point, and `format : 'slug'`
+      // normalizes it on save — a handle can carry no spaces or capitals,
+      // and classification against it is case-sensitive. Optional: empty
+      // means the default, and the sender still refuses any handle that
+      // disagrees with the transaction it minted.
+      { format: "slug", input: "text", key: "orderEventHandle", label: "Order event handle", required: false, setting: true }
     ]
   },
   // A pre-launch integration: it only surfaces once the App Store listing
@@ -4261,9 +4353,18 @@ var shopify_default2 = {
   // there is nothing further to choose. `shop` absent means the install did not
   // finish, which is a credential problem rather than a setup one, so the
   // stored status already says so.
-  // Nothing to add — no setting can make this connection unusable, so the
-  // credential's own verdict stands.
-  status: (data2) => data2 == null ? void 0 : data2.status,
+  //
+  // ONE presentation downgrade: an ACTIVE store whose approval carries no
+  // usage meter (source.metered explicitly null) PRESENTS as error, so the
+  // connections list shows the red state and the merchant knows to click in
+  // — where the Fix-order-billing card and the billing Issue explain the
+  // click. The STORED status stays active on purpose: serving and tracking
+  // gate on it, and the orders recorded while the merchant fixes the plan
+  // are the ones billed afterward.
+  status: (data2) => {
+    var _a;
+    return (data2 == null ? void 0 : data2.status) === "active" && ((_a = data2 == null ? void 0 : data2.source) == null ? void 0 : _a.metered) === null ? "error" : data2 == null ? void 0 : data2.status;
+  },
   // Step types name the CAPABILITY, not this vendor. A second store platform
   // implements the same four commerce steps, and the connection on the step
   // says which store it runs against — so a merchant sees one "Create
@@ -4385,8 +4486,9 @@ var shopify_default2 = {
       ...(data2 == null ? void 0 : data2.status) === "pending" ? [
         {
           action: "billing",
-          message: "Approve the Drawbridge plan to activate this connection. You'll confirm the pricing on Shopify, then everything else happens here.",
-          title: "Approve your plan"
+          message: "Approve the Drawbridge plan to activate this connection. You'll be asked to select a plan on Shopify, then everything else happens here.",
+          title: "Approve your plan",
+          type: "warning"
         }
       ] : [],
       // The store's ACTIVE approval carries no usage component — stamped by
@@ -4399,8 +4501,9 @@ var shopify_default2 = {
       ...(data2 == null ? void 0 : data2.status) === "active" && ((_a = data2 == null ? void 0 : data2.source) == null ? void 0 : _a.metered) === null ? [
         {
           action: "billing",
-          message: "Order billing isn't set up for this store, so campaign-attributed orders aren't being charged. Approve the updated plan to fix it \u2014 one click here, one confirmation on Shopify.",
-          title: "Fix order billing"
+          message: "Order billing isn't set up for this store, so campaign-attributed orders aren't being charged. You'll need to reselect your plan on Shopify and approve it to fix this.",
+          title: "Fix order billing",
+          type: "error"
         }
       ] : []
     ];
@@ -4923,6 +5026,11 @@ var publicConnectionKeys = Object.freeze([
   "settings",
   "shop",
   "slug",
+  // Vendor identity plus the metered billing stamp — domain, id, label,
+  // metered — no credentials live here (those are the encrypted settings
+  // blob). The status and tasks hooks pivot on source.metered, so stripping
+  // it here left the presented status blind to the one state it must show.
+  "source",
   "status",
   "tasks",
   "title",
@@ -4930,45 +5038,6 @@ var publicConnectionKeys = Object.freeze([
   "warnings"
 ]);
 
-// lib/encrypt.js
-var import_crypto2 = __toESM(require("crypto"), 1);
-
-// lib/token.js
-var import_crypto = __toESM(require("crypto"), 1);
-var generate = (bytes = 32, encoding = "base64url") => {
-  const buf = import_crypto.default.randomBytes(bytes);
-  return encoding ? buf.toString(encoding) : buf;
-};
-
-// lib/encrypt.js
-var ALGORITHM = "aes-256-gcm";
-var getKey = () => Buffer.from(process.env.ENCRYPT_CONNECTION_SECRET, "hex");
-var encrypt = (value) => {
-  const iv = generate(12, null);
-  const cipher = import_crypto2.default.createCipheriv(ALGORITHM, getKey(), iv);
-  const data2 = Buffer.concat([
-    cipher.update(JSON.stringify(value), "utf8"),
-    cipher.final()
-  ]);
-  const tag = cipher.getAuthTag();
-  return [iv, tag, data2].map((b) => b.toString("hex")).join(":");
-};
-var decrypt = (value) => {
-  if (typeof value !== "string") return value;
-  const [ivHex, tagHex, dataHex] = value.split(":");
-  const decipher = import_crypto2.default.createDecipheriv(
-    ALGORITHM,
-    getKey(),
-    Buffer.from(ivHex, "hex")
-  );
-  decipher.setAuthTag(Buffer.from(tagHex, "hex"));
-  const result = Buffer.concat([
-    decipher.update(Buffer.from(dataHex, "hex")),
-    decipher.final()
-  ]);
-  return JSON.parse(result.toString("utf8"));
-};
-
 // lib/providers.js
 var providerFields = (slug2) => {
   var _a;
@@ -5008,9 +5077,10 @@ var saveProviderSettings = async ({ authenticated, clear, controller, settings,
   });
   const stored = (existing == null ? void 0 : existing.settings) ? decrypt(existing.settings) : {};
   const pasted = (value) => typeof value === "string" ? value.trim().replace(/^['"]+|['"]+$/g, "") : value;
+  const normalized = (field2, value) => field2.format === "slug" && typeof value === "string" && value ? slugify(value) : value;
   const merged = mergeSettings({
     existing: stored,
-    incoming: Object.fromEntries(fields2.map((field2) => [field2.key, pasted(settings == null ? void 0 : settings[field2.key])]))
+    incoming: Object.fromEntries(fields2.map((field2) => [field2.key, normalized(field2, pasted(settings == null ? void 0 : settings[field2.key]))]))
   });
   for (const key of Array.isArray(clear) ? clear : []) {
     if (fields2.some((field2) => field2.key === key)) delete merged[key];

package/dist/providers.d.cts

@@ -1,5 +1,6 @@
 import { connections, mergeSettings } from './connections/index.cjs';
 import { decrypt, encrypt } from './encrypt.cjs';
+import { slugify } from './slugify.cjs';
 import './connections/oauth.cjs';
 import 'node:crypto';
 import './phone.cjs';
@@ -18,8 +19,6 @@ import 'nanoid';
 import './color.cjs';
 import 'tinycolor2';
 import './email.cjs';
-import './slugify.cjs';
-import 'slugify';
 import './safe-http.cjs';
 import 'dns';
 import 'node:http';
@@ -29,6 +28,7 @@ import 'axios';
 import 'net';
 import 'crypto';
 import './token.cjs';
+import 'slugify';
 
 // DRAWBRIDGE'S OWN CREDENTIALS for a vendor, as opposed to a merchant's.
 //
@@ -202,6 +202,17 @@ const saveProviderSettings = async ({ authenticated, clear, controller, settings
 		? value.trim().replace( /^['"]+|['"]+$/g, '' )
 		: value;
 
+	// A field declared `format : 'slug'` is normalized on the way IN — a value
+	// like Shopify's meter event handle can legally hold no spaces or capitals,
+	// and classification against it is case-sensitive, so the stored copy is
+	// forced into the only shape the vendor accepts rather than trusting the
+	// admin's typing.
+	const normalized = ( field, value ) => (
+		field.format === 'slug' && typeof value === 'string' && value
+			? slugify( value )
+			: value
+	);
+
 	// mergeSettings is the blank-keeps rule, already used for merchant
 	// connection settings in route/organization-connection.js — same behaviour,
 	// one implementation. The declared-field allowlist is the part that is ours:
@@ -209,7 +220,7 @@ const saveProviderSettings = async ({ authenticated, clear, controller, settings
 	// not declare reaching the document.
 	const merged = mergeSettings({
 		existing : stored,
-		incoming : Object.fromEntries( fields.map( ( field ) => [ field.key, pasted( settings?.[ field.key ] ) ] ) )
+		incoming : Object.fromEntries( fields.map( ( field ) => [ field.key, normalized( field, pasted( settings?.[ field.key ] ) ) ] ) )
 	});
 
 	// CLEARING IS EXPLICIT, because blank already means keep and the two cannot

package/dist/providers.d.ts

@@ -1,5 +1,6 @@
 import { connections, mergeSettings } from './connections/index.js';
 import { decrypt, encrypt } from './encrypt.js';
+import { slugify } from './slugify.js';
 import './connections/oauth.js';
 import 'node:crypto';
 import './phone.js';
@@ -18,8 +19,6 @@ import 'nanoid';
 import './color.js';
 import 'tinycolor2';
 import './email.js';
-import './slugify.js';
-import 'slugify';
 import './safe-http.js';
 import 'dns';
 import 'node:http';
@@ -29,6 +28,7 @@ import 'axios';
 import 'net';
 import 'crypto';
 import './token.js';
+import 'slugify';
 
 // DRAWBRIDGE'S OWN CREDENTIALS for a vendor, as opposed to a merchant's.
 //
@@ -202,6 +202,17 @@ const saveProviderSettings = async ({ authenticated, clear, controller, settings
 		? value.trim().replace( /^['"]+|['"]+$/g, '' )
 		: value;
 
+	// A field declared `format : 'slug'` is normalized on the way IN — a value
+	// like Shopify's meter event handle can legally hold no spaces or capitals,
+	// and classification against it is case-sensitive, so the stored copy is
+	// forced into the only shape the vendor accepts rather than trusting the
+	// admin's typing.
+	const normalized = ( field, value ) => (
+		field.format === 'slug' && typeof value === 'string' && value
+			? slugify( value )
+			: value
+	);
+
 	// mergeSettings is the blank-keeps rule, already used for merchant
 	// connection settings in route/organization-connection.js — same behaviour,
 	// one implementation. The declared-field allowlist is the part that is ours:
@@ -209,7 +220,7 @@ const saveProviderSettings = async ({ authenticated, clear, controller, settings
 	// not declare reaching the document.
 	const merged = mergeSettings({
 		existing : stored,
-		incoming : Object.fromEntries( fields.map( ( field ) => [ field.key, pasted( settings?.[ field.key ] ) ] ) )
+		incoming : Object.fromEntries( fields.map( ( field ) => [ field.key, normalized( field, pasted( settings?.[ field.key ] ) ) ] ) )
 	});
 
 	// CLEARING IS EXPLICIT, because blank already means keep and the two cannot