@hostwebhook/node-types 1.61.0 → 1.63.0

package/dist/connections.js

@@ -18,7 +18,7 @@ exports.isNodeType = isNodeType;
 const PROCESSING_OUTPUTS = [
     'webhook', 'router', 'filter', 'transform', 'cache', 'code', 'rateLimiter',
     'aggregator', 'conditional', 'delay', 'schemaValidator', 'split', 'markdown', 'fileTransform', 'limit',
-    'emailAction', 'gmailAction', 'httpAction', 'mongoAction', 'postgresAction', 'notificationAction', 'sheetsAction', 'calendarAction', 'docsAction', 'driveAction', 'firecrawlAction', 'telegramAction', 'whatsappAction', 'discordAction', 'slackAction', 'googleContactsAction', 'googleAnalyticsAction', 'notionAction', 'vectorStore', 'rssAction', 'socialMediaAction', 'mailchimpAction', 'loop',
+    'emailAction', 'gmailAction', 'httpAction', 'mongoAction', 'postgresAction', 'notificationAction', 'sheetsAction', 'calendarAction', 'docsAction', 'driveAction', 'firecrawlAction', 'telegramAction', 'whatsappAction', 'discordAction', 'slackAction', 'googleContactsAction', 'googleAnalyticsAction', 'notionAction', 'vectorStore', 'rssAction', 'socialMediaAction', 'mailchimpAction', 'shopifyAction', 'loop',
 ];
 /** Standard processing input sources */
 const STANDARD_INPUTS = [
@@ -26,7 +26,7 @@ const STANDARD_INPUTS = [
     'cache', 'code', 'rateLimiter', 'aggregator', 'conditional', 'delay', 'schemaValidator', 'split', 'loop', 'markdown', 'fileTransform', 'limit',
 ];
 /** Action nodes that can chain (non-terminal) */
-const CHAINABLE_ACTIONS = ['httpAction', 'mongoAction', 'postgresAction', 'sheetsAction', 'calendarAction', 'docsAction', 'driveAction', 'firecrawlAction', 'telegramAction', 'whatsappAction', 'discordAction', 'slackAction', 'googleContactsAction', 'googleAnalyticsAction', 'notionAction', 'vectorStore', 'rssAction', 'socialMediaAction', 'mailchimpAction'];
+const CHAINABLE_ACTIONS = ['httpAction', 'mongoAction', 'postgresAction', 'sheetsAction', 'calendarAction', 'docsAction', 'driveAction', 'firecrawlAction', 'telegramAction', 'whatsappAction', 'discordAction', 'slackAction', 'googleContactsAction', 'googleAnalyticsAction', 'notionAction', 'vectorStore', 'rssAction', 'socialMediaAction', 'mailchimpAction', 'shopifyAction'];
 /** Full input list for action nodes (standard + chainable actions) */
 const ACTION_INPUTS = [...STANDARD_INPUTS, ...CHAINABLE_ACTIONS];
 exports.NODE_CONNECTIONS = {
@@ -78,6 +78,7 @@ exports.NODE_CONNECTIONS = {
     discordAction: { acceptsInputFrom: ACTION_INPUTS, canOutputTo: PROCESSING_OUTPUTS },
     slackAction: { acceptsInputFrom: ACTION_INPUTS, canOutputTo: PROCESSING_OUTPUTS },
     mailchimpAction: { acceptsInputFrom: ACTION_INPUTS, canOutputTo: PROCESSING_OUTPUTS },
+    shopifyAction: { acceptsInputFrom: ACTION_INPUTS, canOutputTo: PROCESSING_OUTPUTS },
     googleContactsAction: { acceptsInputFrom: ACTION_INPUTS, canOutputTo: PROCESSING_OUTPUTS },
     googleAnalyticsAction: { acceptsInputFrom: ACTION_INPUTS, canOutputTo: PROCESSING_OUTPUTS },
     notionAction: { acceptsInputFrom: ACTION_INPUTS, canOutputTo: PROCESSING_OUTPUTS },

package/dist/credentials.js

@@ -74,6 +74,45 @@ exports.CREDENTIAL_TYPES = [
     // autorización al pulsar Submit; la revisión de 5-10 días es para salir en
     // su galería, o sea para que te encuentren, no para que funcione.
     { type: 'notion_oauth' },
+    // El OAuth de HostWebhook contra Mailchimp.
+    //
+    // Faltaba, y el síntoma no señalaba aquí. La api ya tenía el flujo entero
+    // —`mailchimp-oauth.service.ts`, su controlador, su DTO y sus presets— y el
+    // usuario autorizaba bien; lo que moría era el `create` de la credencial:
+    //
+    //   ERROR [CredentialsController] Mailchimp OAuth callback failed:
+    //   Credential validation failed: type: `mailchimp_oauth2` is not a valid
+    //   enum value for path `type`.
+    //
+    // Porque de esta lista salen las DOS validaciones que ve ese documento: el
+    // `enum` de Mongoose en `credential.entity.ts` y el `@IsIn` del DTO. La api
+    // declaraba el string por su cuenta (`MAILCHIMP_CREDENTIAL_TYPE`) sin
+    // anotarlo `: CredentialType`, así que TypeScript lo dio por bueno y sólo
+    // reventó en producción, contra un cliente que no podía conectar su cuenta.
+    //
+    // Lleva `_oauth2` y no `_oauth` —al revés que `notion_oauth`— porque ése es
+    // el string que la api ya guarda y que el dashboard ya filtra en
+    // `components/triggers/registry.tsx` (`scopeFilter: "mailchimp_oauth2"`).
+    // Renombrarlo ahora rompería las credenciales que hayan llegado a existir:
+    // el `type` es la clave por la que los nodos las referencian.
+    { type: 'mailchimp_oauth2' },
+    // El OAuth de HostWebhook contra Shopify.
+    //
+    // Se anota aquí ANTES de escribir el servicio, precisamente por lo que
+    // cuenta el bloque de Mailchimp de arriba: la api puede tener el flujo
+    // entero y bien, y aun así el `create` de la credencial muere con un enum
+    // de Mongoose que TypeScript no ve. Es el mismo agujero, y ya sabemos que
+    // no avisa al compilar.
+    //
+    // Lleva `_oauth2` por coherencia con `mailchimp_oauth2`, y porque el
+    // `scopeFilter` del dashboard filtra por esta cadena exacta.
+    //
+    // Una nota sobre lo que este tipo GUARDA, que aquí no se ve: el dominio de
+    // la tienda (`{shop}.myshopify.com`) viaja DENTRO del blob cifrado, igual
+    // que el `dc` de Mailchimp. Es parte del host de toda llamada y de la URL
+    // de autorización, así que una credencial de Shopify sin su dominio es
+    // inservible — no un detalle de presentación.
+    { type: 'shopify_oauth2' },
 ];
 /**
  * Plain string array — what the Mongoose `enum` field and the

package/dist/dispatch.js

@@ -53,6 +53,7 @@ exports.NODE_DISPATCH = {
     whatsappAction: { service: 'whatsappActionsService', collection: 'whatsappactions', hasFilters: true, outputFields: ['outputNodes'], customDispatch: true, pipelineDispatch: 'excluded' },
     discordAction: { service: 'discordActionsService', collection: 'discordactions', hasFilters: true, outputFields: ['outputNodes'], customDispatch: true, pipelineDispatch: 'excluded' },
     mailchimpAction: { service: 'mailchimpActionsService', collection: 'mailchimpactions', hasFilters: true, outputFields: ['outputNodes'], customDispatch: true, pipelineDispatch: 'excluded' },
+    shopifyAction: { service: 'shopifyActionsService', collection: 'shopifyactions', hasFilters: true, outputFields: ['outputNodes'], customDispatch: true, pipelineDispatch: 'excluded' },
     slackAction: { service: 'slackActionsService', collection: 'slackactions', hasFilters: true, outputFields: ['outputNodes'], customDispatch: true, pipelineDispatch: 'excluded' },
     googleContactsAction: { service: 'googleContactsActionsService', collection: 'googlecontactsactions', hasFilters: true, outputFields: ['outputNodes'], customDispatch: true, pipelineDispatch: 'excluded' },
     googleAnalyticsAction: { service: 'googleAnalyticsActionsService', collection: 'googleanalyticsactions', hasFilters: true, outputFields: ['outputNodes'], customDispatch: true, pipelineDispatch: 'excluded' },

package/dist/index.d.ts

@@ -26,6 +26,8 @@ export { DISCORD_OPERATIONS, DISCORD_OPERATION_SPECS, isDiscordOperation, } from
 export type { DiscordOperation, DiscordParamSpec, DiscordOperationSpec, } from './discord-operations';
 export { MAILCHIMP_OPERATIONS, MAILCHIMP_OPERATION_SPECS, MAILCHIMP_CONTACT_STATUSES, isMailchimpOperation, } from './mailchimp-operations';
 export type { MailchimpOperation, MailchimpContactStatus, MailchimpParamSpec, MailchimpOperationSpec, } from './mailchimp-operations';
+export { SHOPIFY_OPERATIONS, SHOPIFY_OPERATION_SPECS, SHOPIFY_TAGGABLE_RESOURCES, SHOPIFY_SEARCHABLE_RESOURCES, isShopifyOperation, } from './shopify-operations';
+export type { ShopifyOperation, ShopifyTaggableResource, ShopifySearchableResource, ShopifyParamSpec, ShopifyOperationSpec, } from './shopify-operations';
 export { SLACK_OPERATIONS, SLACK_OPERATION_SPECS, isSlackOperation, } from './slack-operations';
 export type { SlackOperation, SlackParamSpec, SlackOperationSpec, } from './slack-operations';
 export { SHEETS_OPERATIONS, SHEETS_OPERATION_SPECS, isSheetsOperation, } from './sheets-operations';

package/dist/index.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DRIVE_OPERATION_SPECS = exports.DRIVE_OPERATIONS = exports.GOOGLE_CALENDAR_TOOLKIT_BY_TOOL_NAME = exports.GOOGLE_CALENDAR_TOOLKIT_SPECS = exports.isGoogleCalendarOperation = exports.GOOGLE_CALENDAR_OPERATION_SPECS = exports.GOOGLE_CALENDAR_OPERATIONS = exports.isGmailOperation = exports.resolveGmailSendFields = exports.GMAIL_SEND_LEGACY_FIELDS = exports.NATIVE_EMAIL_TOOLKIT_BY_TOOL_NAME = exports.GMAIL_TOOLKIT_BY_TOOL_NAME = exports.NATIVE_EMAIL_TOOLKIT_SPECS = exports.GMAIL_SEND_AND_WAIT_TOOL_SPEC = exports.GMAIL_ALL_TOOLKIT_SPECS = exports.GMAIL_TOOLKIT_SPECS = exports.GMAIL_TOOLKIT_OPERATIONS = exports.GMAIL_DROPDOWN_OPERATIONS = exports.GMAIL_OPERATION_GROUPS = exports.GMAIL_OPERATION_SPECS = exports.GMAIL_OPERATIONS = exports.versionCatalogErrors = exports.fieldsLost = exports.fieldsLostBetween = exports.currentVersion = exports.versionSpec = exports.versionsOf = exports.isVersioned = exports.NODE_TYPE_TO_PREFIX = exports.PREFIX_TO_NODE_TYPE = exports.NODE_STATE_KEYS = exports.NODE_COLORS = exports.NODE_DETAIL_PATHS = exports.getNodeRegistryEntry = exports.NODE_REGISTRY = exports.getNodeDispatchConfig = exports.getAllNodeCollections = exports.NODE_DISPATCH = exports.resolveNodeId = exports.PREFIX_TO_TYPE = exports.NODE_UI = exports.ALL_NODE_TYPES = exports.isNodeType = exports.isTerminal = exports.canSendToNodes = exports.canReceiveFromNodes = exports.canReceiveFrom = exports.NODE_CONNECTIONS = exports.iterableMeta = exports.singleMeta = void 0;
-exports.DOCS_OPERATION_SPECS = exports.DOCS_OPERATIONS = exports.isMongoOperation = exports.MONGO_OPERATION_SPECS = exports.MONGO_OPERATIONS = exports.isPostgresOperation = exports.POSTGRES_OPERATION_SPECS = exports.POSTGRES_MODES = exports.POSTGRES_OPERATIONS = exports.isNotionOperation = exports.NOTION_DROPDOWN_OPERATIONS = exports.NOTION_OPERATION_SPECS = exports.NOTION_OPERATIONS = exports.isGoogleAnalyticsOperation = exports.GOOGLE_ANALYTICS_DROPDOWN_OPERATIONS = exports.GOOGLE_ANALYTICS_OPERATION_SPECS = exports.GOOGLE_ANALYTICS_OPERATIONS = exports.isGoogleContactsOperation = exports.GOOGLE_CONTACTS_DEFAULT_PERSON_FIELDS = exports.GOOGLE_CONTACTS_OPERATION_GROUPS = exports.GOOGLE_CONTACTS_OPERATION_SPECS = exports.GOOGLE_CONTACTS_OPERATIONS_V2 = exports.GOOGLE_CONTACTS_OPERATIONS_V1 = exports.GOOGLE_CONTACTS_OPERATIONS = exports.SHEETS_TOOLKIT_DEFAULTABLE = exports.SHEETS_TOOLKIT_BY_TOOL_NAME = exports.SHEETS_TOOLKIT_SPECS = exports.isSheetsOperation = exports.SHEETS_OPERATION_SPECS = exports.SHEETS_OPERATIONS = exports.isSlackOperation = exports.SLACK_OPERATION_SPECS = exports.SLACK_OPERATIONS = exports.isMailchimpOperation = exports.MAILCHIMP_CONTACT_STATUSES = exports.MAILCHIMP_OPERATION_SPECS = exports.MAILCHIMP_OPERATIONS = exports.isDiscordOperation = exports.DISCORD_OPERATION_SPECS = exports.DISCORD_OPERATIONS = exports.isWhatsAppOperation = exports.WHATSAPP_OPERATIONS = exports.TELEGRAM_TOOLKIT_BY_TOOL_NAME = exports.TELEGRAM_TOOLKIT_SPECS = exports.isTelegramOperation = exports.TELEGRAM_OPERATION_SPECS = exports.TELEGRAM_OPERATIONS = exports.DRIVE_TOOLKIT_BY_TOOL_NAME = exports.DRIVE_TOOLKIT_SPECS = exports.isDriveOperation = void 0;
-exports.isCredentialType = exports.getCredentialType = exports.credentialTypeValues = exports.CREDENTIAL_TYPE_VALUES = exports.CREDENTIAL_TYPES = exports.getModelLabel = exports.getDefaultModel = exports.getModelsFor = exports.MODEL_CONTEXT_WINDOWS = exports.LLM_MODELS = exports.LLM_PROVIDERS = exports.DOCS_TOOLKIT_DEFAULTABLE = exports.DOCS_TOOLKIT_BY_TOOL_NAME = exports.DOCS_TOOLKIT_SPECS = exports.isDocsOperation = void 0;
+exports.isPostgresOperation = exports.POSTGRES_OPERATION_SPECS = exports.POSTGRES_MODES = exports.POSTGRES_OPERATIONS = exports.isNotionOperation = exports.NOTION_DROPDOWN_OPERATIONS = exports.NOTION_OPERATION_SPECS = exports.NOTION_OPERATIONS = exports.isGoogleAnalyticsOperation = exports.GOOGLE_ANALYTICS_DROPDOWN_OPERATIONS = exports.GOOGLE_ANALYTICS_OPERATION_SPECS = exports.GOOGLE_ANALYTICS_OPERATIONS = exports.isGoogleContactsOperation = exports.GOOGLE_CONTACTS_DEFAULT_PERSON_FIELDS = exports.GOOGLE_CONTACTS_OPERATION_GROUPS = exports.GOOGLE_CONTACTS_OPERATION_SPECS = exports.GOOGLE_CONTACTS_OPERATIONS_V2 = exports.GOOGLE_CONTACTS_OPERATIONS_V1 = exports.GOOGLE_CONTACTS_OPERATIONS = exports.SHEETS_TOOLKIT_DEFAULTABLE = exports.SHEETS_TOOLKIT_BY_TOOL_NAME = exports.SHEETS_TOOLKIT_SPECS = exports.isSheetsOperation = exports.SHEETS_OPERATION_SPECS = exports.SHEETS_OPERATIONS = exports.isSlackOperation = exports.SLACK_OPERATION_SPECS = exports.SLACK_OPERATIONS = exports.isShopifyOperation = exports.SHOPIFY_SEARCHABLE_RESOURCES = exports.SHOPIFY_TAGGABLE_RESOURCES = exports.SHOPIFY_OPERATION_SPECS = exports.SHOPIFY_OPERATIONS = exports.isMailchimpOperation = exports.MAILCHIMP_CONTACT_STATUSES = exports.MAILCHIMP_OPERATION_SPECS = exports.MAILCHIMP_OPERATIONS = exports.isDiscordOperation = exports.DISCORD_OPERATION_SPECS = exports.DISCORD_OPERATIONS = exports.isWhatsAppOperation = exports.WHATSAPP_OPERATIONS = exports.TELEGRAM_TOOLKIT_BY_TOOL_NAME = exports.TELEGRAM_TOOLKIT_SPECS = exports.isTelegramOperation = exports.TELEGRAM_OPERATION_SPECS = exports.TELEGRAM_OPERATIONS = exports.DRIVE_TOOLKIT_BY_TOOL_NAME = exports.DRIVE_TOOLKIT_SPECS = exports.isDriveOperation = void 0;
+exports.isCredentialType = exports.getCredentialType = exports.credentialTypeValues = exports.CREDENTIAL_TYPE_VALUES = exports.CREDENTIAL_TYPES = exports.getModelLabel = exports.getDefaultModel = exports.getModelsFor = exports.MODEL_CONTEXT_WINDOWS = exports.LLM_MODELS = exports.LLM_PROVIDERS = exports.DOCS_TOOLKIT_DEFAULTABLE = exports.DOCS_TOOLKIT_BY_TOOL_NAME = exports.DOCS_TOOLKIT_SPECS = exports.isDocsOperation = exports.DOCS_OPERATION_SPECS = exports.DOCS_OPERATIONS = exports.isMongoOperation = exports.MONGO_OPERATION_SPECS = exports.MONGO_OPERATIONS = void 0;
 var types_1 = require("./types");
 Object.defineProperty(exports, "singleMeta", { enumerable: true, get: function () { return types_1.singleMeta; } });
 Object.defineProperty(exports, "iterableMeta", { enumerable: true, get: function () { return types_1.iterableMeta; } });
@@ -92,6 +92,12 @@ Object.defineProperty(exports, "MAILCHIMP_OPERATIONS", { enumerable: true, get:
 Object.defineProperty(exports, "MAILCHIMP_OPERATION_SPECS", { enumerable: true, get: function () { return mailchimp_operations_1.MAILCHIMP_OPERATION_SPECS; } });
 Object.defineProperty(exports, "MAILCHIMP_CONTACT_STATUSES", { enumerable: true, get: function () { return mailchimp_operations_1.MAILCHIMP_CONTACT_STATUSES; } });
 Object.defineProperty(exports, "isMailchimpOperation", { enumerable: true, get: function () { return mailchimp_operations_1.isMailchimpOperation; } });
+var shopify_operations_1 = require("./shopify-operations");
+Object.defineProperty(exports, "SHOPIFY_OPERATIONS", { enumerable: true, get: function () { return shopify_operations_1.SHOPIFY_OPERATIONS; } });
+Object.defineProperty(exports, "SHOPIFY_OPERATION_SPECS", { enumerable: true, get: function () { return shopify_operations_1.SHOPIFY_OPERATION_SPECS; } });
+Object.defineProperty(exports, "SHOPIFY_TAGGABLE_RESOURCES", { enumerable: true, get: function () { return shopify_operations_1.SHOPIFY_TAGGABLE_RESOURCES; } });
+Object.defineProperty(exports, "SHOPIFY_SEARCHABLE_RESOURCES", { enumerable: true, get: function () { return shopify_operations_1.SHOPIFY_SEARCHABLE_RESOURCES; } });
+Object.defineProperty(exports, "isShopifyOperation", { enumerable: true, get: function () { return shopify_operations_1.isShopifyOperation; } });
 var slack_operations_1 = require("./slack-operations");
 Object.defineProperty(exports, "SLACK_OPERATIONS", { enumerable: true, get: function () { return slack_operations_1.SLACK_OPERATIONS; } });
 Object.defineProperty(exports, "SLACK_OPERATION_SPECS", { enumerable: true, get: function () { return slack_operations_1.SLACK_OPERATION_SPECS; } });

package/dist/registry.js

@@ -273,6 +273,16 @@ exports.NODE_REGISTRY = {
         // light canvas. The brand value (#ffe01b) reads as a highlighter there.
         color: '#c9a227', testable: true,
     },
+    shopifyAction: {
+        type: 'shopifyAction', prefix: 'shp', label: 'Shopify',
+        group: 'Actions', detailPath: '/dashboard/shopify-actions', apiPath: '/shopify-actions',
+        stateKey: 'shopifyActions', allStateKey: 'allShopifyActions',
+        // Shopify's green, abierto un punto. El de marca (#008060) es más oscuro
+        // que cualquier otro color de este registro y se hunde contra el lienzo
+        // en modo oscuro; éste sigue leyéndose como Shopify y aguanta en los dos
+        // temas. Mismo criterio que el amarillo de Mailchimp, al revés.
+        color: '#0a9e70', testable: true,
+    },
     telegramAction: {
         type: 'telegramAction', prefix: 'tg', label: 'Telegram Action',
         group: 'Actions', detailPath: '/dashboard/telegram-actions', apiPath: '/telegram-actions',

package/dist/shopify-operations.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Shopify Admin API operations — single source of truth across the api, the
+ * dashboard and downstream consumers (MCP server).
+ *
+ * ## Four, out of several hundred
+ *
+ * The Admin API has hundreds of mutations. This node exposes four, and the
+ * choice is argued in `api/docs/ADR-0007-shopify.md`: a menu of everything is
+ * how a node becomes unusable, and these four cover what people actually
+ * automate — put a customer in the store, tag something, sync stock, and read
+ * back what the store already knows.
+ *
+ * Product creation and order fulfilment were considered and left out of v1.
+ * A product means variants, media and prices; a fulfilment means a location, a
+ * fulfilment service and a state machine. Each is a configuration surface of
+ * its own, not a field.
+ *
+ * ## GraphQL only, and the version is not ours to drift on
+ *
+ * REST went legacy in October 2024 and public apps have been GraphQL-only
+ * since April 2025, so there is no REST path here to fall back to. Every
+ * `apiRoute` below is a GraphQL mutation or query name, checkable against
+ * `shopify.dev/docs/api/admin-graphql`. The API version lives in ONE constant
+ * on the api side (`SHOPIFY_API_VERSION`) — never interpolated per call site.
+ *
+ * ## What was verified, and what was not (2026-08-25)
+ *
+ * Checked against the Admin GraphQL reference, not from memory:
+ *
+ * - `tagsAdd(id: ID!, tags: [String!]!)` and `tagsRemove` with the same
+ *   shape. Both accept Order, DraftOrder, Customer, Product, Article and
+ *   DiscountNode.
+ * - `customerCreate(input: CustomerInput!)` and `customerUpdate(input:
+ *   CustomerInput!)` — for the update, **the id goes inside the input**, not
+ *   as a sibling argument.
+ * - `inventoryAdjustQuantities(input: InventoryAdjustQuantitiesInput!)`, whose
+ *   input requires `reason`, `name` and a `changes[]` of
+ *   `{ delta, inventoryItemId, locationId }`.
+ *
+ * ⚠️ **NOT verified, and deliberately left loose below** — do not turn either
+ * into a hard-coded dropdown until someone reads the enumeration:
+ *
+ * - The full vocabulary of `reason`. Only `"correction"` is documented by
+ *   example.
+ * - The full vocabulary of `name`. Only `"available"` is documented by
+ *   example; the docs mention `on_hand` moving as a consequence, which is not
+ *   the same as it being a valid input.
+ * - The exact search syntax for finding a customer by email
+ *   (`customers(query: "email:…")`). It is the obvious shape and almost
+ *   certainly right, which is exactly why it is worth confirming rather than
+ *   assuming.
+ *
+ * ⚠️ **`@idempotent` is mandatory.** As of API version 2026-04,
+ * `inventoryAdjustQuantities` must be sent with the `@idempotent` directive
+ * and an idempotency key. A stock adjustment is the one operation here where a
+ * silent retry is a real inventory error, so this is not boilerplate.
+ */
+export declare const SHOPIFY_OPERATIONS: readonly ["upsertCustomer", "setTags", "adjustInventory", "findRecords"];
+export type ShopifyOperation = (typeof SHOPIFY_OPERATIONS)[number];
+/** Type guard — for DTOs and AI tool calls, where the input is untrusted. */
+export declare function isShopifyOperation(value: unknown): value is ShopifyOperation;
+/**
+ * The resources `tagsAdd` / `tagsRemove` accept. Taken from the mutation
+ * reference — this list is the API's, not a subset we chose.
+ *
+ * `article` and `discountNode` are left out of the node's own picker on
+ * purpose: neither is something a HostWebhook flow tags in practice, and every
+ * extra option is a field the user has to read past.
+ */
+export declare const SHOPIFY_TAGGABLE_RESOURCES: readonly ["order", "customer", "product", "draftOrder"];
+export type ShopifyTaggableResource = (typeof SHOPIFY_TAGGABLE_RESOURCES)[number];
+/** What `findRecords` can read back. */
+export declare const SHOPIFY_SEARCHABLE_RESOURCES: readonly ["orders", "customers", "products"];
+export type ShopifySearchableResource = (typeof SHOPIFY_SEARCHABLE_RESOURCES)[number];
+export interface ShopifyParamSpec {
+    /** Field key — also the property name on operationConfig. */
+    name: string;
+    label: string;
+    /** Param type, so the dashboard renders the right control. `location` is a
+     *  picker backed by a live lookup of the store's locations; `gid` is a
+     *  Shopify global id, which is almost always templated from the payload
+     *  rather than typed. */
+    type: 'gid' | 'location' | 'email' | 'string' | 'number' | 'tags' | 'taggableResource' | 'searchableResource' | 'json' | 'boolean';
+    required?: boolean;
+    description: string;
+    placeholder?: string;
+}
+export interface ShopifyOperationSpec {
+    label: string;
+    description: string;
+    /** The GraphQL operation this maps to, so the mapping is checkable. */
+    apiRoute: string;
+    params: ShopifyParamSpec[];
+}
+export declare const SHOPIFY_OPERATION_SPECS: Record<ShopifyOperation, ShopifyOperationSpec>;

package/dist/shopify-operations.js

@@ -0,0 +1,263 @@
+"use strict";
+/**
+ * Shopify Admin API operations — single source of truth across the api, the
+ * dashboard and downstream consumers (MCP server).
+ *
+ * ## Four, out of several hundred
+ *
+ * The Admin API has hundreds of mutations. This node exposes four, and the
+ * choice is argued in `api/docs/ADR-0007-shopify.md`: a menu of everything is
+ * how a node becomes unusable, and these four cover what people actually
+ * automate — put a customer in the store, tag something, sync stock, and read
+ * back what the store already knows.
+ *
+ * Product creation and order fulfilment were considered and left out of v1.
+ * A product means variants, media and prices; a fulfilment means a location, a
+ * fulfilment service and a state machine. Each is a configuration surface of
+ * its own, not a field.
+ *
+ * ## GraphQL only, and the version is not ours to drift on
+ *
+ * REST went legacy in October 2024 and public apps have been GraphQL-only
+ * since April 2025, so there is no REST path here to fall back to. Every
+ * `apiRoute` below is a GraphQL mutation or query name, checkable against
+ * `shopify.dev/docs/api/admin-graphql`. The API version lives in ONE constant
+ * on the api side (`SHOPIFY_API_VERSION`) — never interpolated per call site.
+ *
+ * ## What was verified, and what was not (2026-08-25)
+ *
+ * Checked against the Admin GraphQL reference, not from memory:
+ *
+ * - `tagsAdd(id: ID!, tags: [String!]!)` and `tagsRemove` with the same
+ *   shape. Both accept Order, DraftOrder, Customer, Product, Article and
+ *   DiscountNode.
+ * - `customerCreate(input: CustomerInput!)` and `customerUpdate(input:
+ *   CustomerInput!)` — for the update, **the id goes inside the input**, not
+ *   as a sibling argument.
+ * - `inventoryAdjustQuantities(input: InventoryAdjustQuantitiesInput!)`, whose
+ *   input requires `reason`, `name` and a `changes[]` of
+ *   `{ delta, inventoryItemId, locationId }`.
+ *
+ * ⚠️ **NOT verified, and deliberately left loose below** — do not turn either
+ * into a hard-coded dropdown until someone reads the enumeration:
+ *
+ * - The full vocabulary of `reason`. Only `"correction"` is documented by
+ *   example.
+ * - The full vocabulary of `name`. Only `"available"` is documented by
+ *   example; the docs mention `on_hand` moving as a consequence, which is not
+ *   the same as it being a valid input.
+ * - The exact search syntax for finding a customer by email
+ *   (`customers(query: "email:…")`). It is the obvious shape and almost
+ *   certainly right, which is exactly why it is worth confirming rather than
+ *   assuming.
+ *
+ * ⚠️ **`@idempotent` is mandatory.** As of API version 2026-04,
+ * `inventoryAdjustQuantities` must be sent with the `@idempotent` directive
+ * and an idempotency key. A stock adjustment is the one operation here where a
+ * silent retry is a real inventory error, so this is not boilerplate.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SHOPIFY_OPERATION_SPECS = exports.SHOPIFY_SEARCHABLE_RESOURCES = exports.SHOPIFY_TAGGABLE_RESOURCES = exports.SHOPIFY_OPERATIONS = void 0;
+exports.isShopifyOperation = isShopifyOperation;
+exports.SHOPIFY_OPERATIONS = [
+    'upsertCustomer',
+    'setTags',
+    'adjustInventory',
+    'findRecords',
+];
+/** Type guard — for DTOs and AI tool calls, where the input is untrusted. */
+function isShopifyOperation(value) {
+    return (typeof value === 'string' &&
+        exports.SHOPIFY_OPERATIONS.includes(value));
+}
+/**
+ * The resources `tagsAdd` / `tagsRemove` accept. Taken from the mutation
+ * reference — this list is the API's, not a subset we chose.
+ *
+ * `article` and `discountNode` are left out of the node's own picker on
+ * purpose: neither is something a HostWebhook flow tags in practice, and every
+ * extra option is a field the user has to read past.
+ */
+exports.SHOPIFY_TAGGABLE_RESOURCES = [
+    'order',
+    'customer',
+    'product',
+    'draftOrder',
+];
+/** What `findRecords` can read back. */
+exports.SHOPIFY_SEARCHABLE_RESOURCES = [
+    'orders',
+    'customers',
+    'products',
+];
+exports.SHOPIFY_OPERATION_SPECS = {
+    upsertCustomer: {
+        label: 'Add or update customer',
+        description: 'Look the customer up by email, then create them or update the fields you set.',
+        apiRoute: 'mutation customerCreate / customerUpdate (lookup by email first)',
+        params: [
+            {
+                name: 'email',
+                label: 'Email address',
+                type: 'email',
+                required: true,
+                description: 'Identifies the customer. This is what decides between creating and updating — there is no separate "id" to keep.',
+                placeholder: '{{payload.email}}',
+            },
+            {
+                name: 'firstName',
+                label: 'First name',
+                type: 'string',
+                description: 'Left untouched on an existing customer if you leave it empty.',
+                placeholder: '{{payload.firstName}}',
+            },
+            {
+                name: 'lastName',
+                label: 'Last name',
+                type: 'string',
+                description: 'Left untouched on an existing customer if you leave it empty.',
+                placeholder: '{{payload.lastName}}',
+            },
+            {
+                name: 'phone',
+                label: 'Phone',
+                type: 'string',
+                description: 'Shopify wants it in E.164 (+52…). A malformed number fails the whole mutation, not just the field.',
+            },
+            {
+                name: 'tags',
+                label: 'Tags',
+                type: 'tags',
+                description: 'Tags to set on the customer. Note these REPLACE the customer tags — to add without losing the existing ones, use the tag operation instead.',
+            },
+            {
+                name: 'note',
+                label: 'Note',
+                type: 'string',
+                description: 'Internal note, visible to staff in the Shopify admin.',
+            },
+            {
+                name: 'emailMarketingConsent',
+                label: 'Email marketing consent',
+                type: 'json',
+                description: 'Leave this EMPTY unless the customer actually consented. Omitting it leaves their consent exactly as it was; writing a subscribed state for someone who never opted in is a legal problem, not a technical one. Shape: {"marketingState":"SUBSCRIBED","marketingOptInLevel":"SINGLE_OPT_IN"}.',
+            },
+        ],
+    },
+    setTags: {
+        label: 'Add or remove tags',
+        description: 'Tag an order, a customer or a product. Adding and removing are separate calls, so one node does one of the two.',
+        apiRoute: 'mutation tagsAdd / tagsRemove',
+        params: [
+            {
+                name: 'resource',
+                label: 'What to tag',
+                type: 'taggableResource',
+                required: true,
+                description: 'Shopify tags many resource types through the same mutation; this only picks which id you are passing.',
+            },
+            {
+                name: 'resourceId',
+                label: 'Resource id',
+                type: 'gid',
+                required: true,
+                description: 'The Shopify global id, e.g. gid://shopify/Order/1234. A Shopify trigger gives you this directly in the payload.',
+                placeholder: '{{payload.admin_graphql_api_id}}',
+            },
+            {
+                name: 'tags',
+                label: 'Tags',
+                type: 'tags',
+                required: true,
+                description: 'One or more tags.',
+            },
+            {
+                name: 'remove',
+                label: 'Remove instead of add',
+                type: 'boolean',
+                description: 'Off adds the tags (tagsAdd); on removes them (tagsRemove). Unlike Mailchimp, Shopify cannot do both in one call.',
+            },
+        ],
+    },
+    adjustInventory: {
+        label: 'Adjust inventory',
+        description: 'Move stock by a delta at one location. For the case where the real stock lives in another system.',
+        apiRoute: 'mutation inventoryAdjustQuantities',
+        params: [
+            {
+                name: 'inventoryItemId',
+                label: 'Inventory item id',
+                type: 'gid',
+                required: true,
+                description: 'gid://shopify/InventoryItem/1234. This is the inventory item, NOT the product or the variant — a variant points at one.',
+                placeholder: '{{payload.inventory_item_id}}',
+            },
+            {
+                name: 'locationId',
+                label: 'Location',
+                type: 'location',
+                required: true,
+                description: 'Which location the stock moves at. A store with one location still has to name it.',
+            },
+            {
+                name: 'delta',
+                label: 'Change by',
+                type: 'number',
+                required: true,
+                description: 'A DELTA, not a total. 5 adds five units and -5 removes five. Sending the absolute stock level here is the mistake that silently multiplies inventory.',
+                placeholder: '{{payload.delta}}',
+            },
+            {
+                name: 'name',
+                label: 'Quantity type',
+                type: 'string',
+                required: true,
+                description: 'Which quantity is being changed. "available" is the documented value; check the reference before using another.',
+                placeholder: 'available',
+            },
+            {
+                name: 'reason',
+                label: 'Reason',
+                type: 'string',
+                required: true,
+                description: 'Why the stock moved — it lands in the store\'s inventory history. "correction" is the documented value; check the reference before using another.',
+                placeholder: 'correction',
+            },
+            {
+                name: 'referenceDocumentUri',
+                label: 'Reference',
+                type: 'string',
+                description: 'Optional audit-trail link back to whatever caused the change, so someone reading Shopify\'s inventory history can find it.',
+            },
+        ],
+    },
+    findRecords: {
+        label: 'Find orders, customers or products',
+        description: 'Read back what the store knows, to enrich a payload that came from somewhere else.',
+        apiRoute: 'query orders / customers / products (with search syntax)',
+        params: [
+            {
+                name: 'resource',
+                label: 'What to look for',
+                type: 'searchableResource',
+                required: true,
+                description: 'Which collection to search.',
+            },
+            {
+                name: 'query',
+                label: 'Search',
+                type: 'string',
+                required: true,
+                description: 'Shopify search syntax, e.g. email:someone@example.com or financial_status:paid. Empty would return the newest records, which is rarely what anyone means.',
+                placeholder: 'email:{{payload.email}}',
+            },
+            {
+                name: 'first',
+                label: 'How many',
+                type: 'number',
+                description: 'Defaults to 1, which is the enrichment case. Asking for many costs more against the query-cost budget, not more calls.',
+                placeholder: '1',
+            },
+        ],
+    },
+};

package/dist/types.d.ts

@@ -1,5 +1,5 @@
 /** All valid node type identifiers */
-export type NodeType = 'webhook' | 'scheduledWorkflow' | 'chatTrigger' | 'trigger' | 'voiceAgent' | 'filter' | 'transform' | 'schemaValidator' | 'conditional' | 'delay' | 'rateLimiter' | 'aggregator' | 'cache' | 'code' | 'ai' | 'merge' | 'approval' | 'split' | 'loop' | 'markdown' | 'fileTransform' | 'limit' | 'router' | 'emailAction' | 'gmailAction' | 'httpAction' | 'mongoAction' | 'postgresAction' | 'notificationAction' | 'sheetsAction' | 'calendarAction' | 'docsAction' | 'driveAction' | 'firecrawlAction' | 'telegramAction' | 'whatsappAction' | 'discordAction' | 'slackAction' | 'googleContactsAction' | 'googleAnalyticsAction' | 'notionAction' | 'vectorStore' | 'rssAction' | 'socialMediaAction' | 'mailchimpAction' | 'stickyNote';
+export type NodeType = 'webhook' | 'scheduledWorkflow' | 'chatTrigger' | 'trigger' | 'voiceAgent' | 'filter' | 'transform' | 'schemaValidator' | 'conditional' | 'delay' | 'rateLimiter' | 'aggregator' | 'cache' | 'code' | 'ai' | 'merge' | 'approval' | 'split' | 'loop' | 'markdown' | 'fileTransform' | 'limit' | 'router' | 'emailAction' | 'gmailAction' | 'httpAction' | 'mongoAction' | 'postgresAction' | 'notificationAction' | 'sheetsAction' | 'calendarAction' | 'docsAction' | 'driveAction' | 'firecrawlAction' | 'telegramAction' | 'whatsappAction' | 'discordAction' | 'slackAction' | 'googleContactsAction' | 'googleAnalyticsAction' | 'notionAction' | 'vectorStore' | 'rssAction' | 'socialMediaAction' | 'mailchimpAction' | 'shopifyAction' | 'stickyNote';
 /** Node role in the pipeline */
 export type NodeRole = 'source' | 'processing' | 'flowControl' | 'routing' | 'action' | 'monitoring';
 /** Handle positions on the canvas node */

package/dist/ui.js

@@ -76,6 +76,7 @@ exports.NODE_UI = {
     whatsappAction: { fromNodes: true, toNodes: true, inputHandles: ['left'], dotHandles: { input: ['left-in'], output: ['right-out'] }, special: { loopBackAllowed: true, routerTargetLabel: 'whatsapp' } },
     discordAction: { fromNodes: true, toNodes: true, inputHandles: ['left'], dotHandles: { input: ['left-in'], output: ['right-out'] }, special: { loopBackAllowed: true, routerTargetLabel: 'discord' } },
     mailchimpAction: { fromNodes: true, toNodes: true, inputHandles: ['left'], dotHandles: { input: ['left-in'], output: ['right-out'] }, special: { loopBackAllowed: true, routerTargetLabel: 'mailchimp' } },
+    shopifyAction: { fromNodes: true, toNodes: true, inputHandles: ['left'], dotHandles: { input: ['left-in'], output: ['right-out'] }, special: { loopBackAllowed: true, routerTargetLabel: 'shopify' } },
     slackAction: { fromNodes: true, toNodes: true, inputHandles: ['left'], dotHandles: { input: ['left-in'], output: ['right-out'] }, special: { loopBackAllowed: true, routerTargetLabel: 'slack' } },
     googleContactsAction: { fromNodes: true, toNodes: true, inputHandles: ['left'], dotHandles: { input: ['left-in'], output: ['right-out'] }, special: { loopBackAllowed: true } },
     googleAnalyticsAction: { fromNodes: true, toNodes: true, inputHandles: ['left'], dotHandles: { input: ['left-in'], output: ['right-out'] }, special: { loopBackAllowed: true } },
@@ -100,6 +101,7 @@ exports.PREFIX_TO_TYPE = [
     { prefix: 'dc-', type: 'discordAction', canvasType: 'discordAction' },
     { prefix: 'sl-', type: 'slackAction', canvasType: 'slackAction' },
     { prefix: 'mc-', type: 'mailchimpAction', canvasType: 'mailchimpAction' },
+    { prefix: 'shp-', type: 'shopifyAction', canvasType: 'shopifyAction' },
     { prefix: 'gc-', type: 'googleContactsAction', canvasType: 'googleContactsAction' },
     { prefix: 'gaa-', type: 'googleAnalyticsAction', canvasType: 'googleAnalyticsAction' },
     { prefix: 'ntn-', type: 'notionAction', canvasType: 'notionAction' },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hostwebhook/node-types",
-  "version": "1.61.0",
+  "version": "1.63.0",
   "description": "Shared node type definitions, connection rules, and dispatch config for HostWebhook",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",