@osva-ai/connector-shopify 0.0.0-stage → 0.1.0

package/README.md

@@ -1,3 +1,188 @@
-# Temporary Holding Version
+# @osva-ai/connector-shopify
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+OSVA Connector Profile V1 **read-only** MCP connector for Shopify Admin GraphQL.
+
+This package is developed in the [osva-connectors](https://github.com/Osva-AI/osva-connectors) monorepo. It is **not** published to npm from this README alone.
+
+## Capabilities
+
+Seven MCP tools:
+
+| Tool                            | Purpose                                      |
+| ------------------------------- | -------------------------------------------- |
+| `shopify.shop.get`              | Shop metadata                                |
+| `shopify.product.list`          | Product list with search + cursor pagination |
+| `shopify.product.get`           | Single product summary                       |
+| `shopify.order.list`            | Non-PII order list                           |
+| `shopify.order.get`             | Non-PII order detail                         |
+| `shopify.inventory.levels.list` | Inventory levels (scoped)                    |
+| `shopify.location.list`         | Fulfillment locations (no addresses)         |
+
+Supported Admin API version default: **`2026-10`** (override with `OSVA_CONNECTOR_SHOPIFY_API_VERSION`).
+
+## Setup
+
+### Environment variables
+
+| Variable                              | Required | Description                                                                                  |
+| ------------------------------------- | -------- | -------------------------------------------------------------------------------------------- |
+| `OSVA_CONNECTOR_SHOPIFY_SHOP`         | Yes      | Store handle (`my-store`) or `my-store.myshopify.com` (HTTPS URL without path also accepted) |
+| `OSVA_CONNECTOR_SHOPIFY_ACCESS_TOKEN` | Yes      | Admin API access token from your Shopify app                                                 |
+| `OSVA_CONNECTOR_SHOPIFY_API_VERSION`  | No       | `YYYY-MM` version (default `2026-10`)                                                        |
+| `OSVA_CONNECTOR_SHOPIFY_TIMEOUT_MS`   | No       | Per-request deadline in ms (default `30000`, min `1000`, max `120000`)                       |
+
+Configure a custom app or dev store app in the [Shopify Dev Dashboard](https://shopify.dev/docs/apps/build/dev-dashboard), install it on the target store, and copy the **Admin API access token** for server-to-server use. This connector does not implement OAuth or multi-merchant onboarding.
+
+### MCP client configuration (stdio)
+
+After npm install (see [Package installation](#package-installation)):
+
+```json
+{
+  "mcpServers": {
+    "osva-shopify": {
+      "command": "npx",
+      "args": ["-y", "@osva-ai/connector-shopify"],
+      "env": {
+        "OSVA_CONNECTOR_SHOPIFY_SHOP": "your-store",
+        "OSVA_CONNECTOR_SHOPIFY_ACCESS_TOKEN": "shpat_…"
+      }
+    }
+  }
+}
+```
+
+Local monorepo development:
+
+```json
+{
+  "command": "node",
+  "args": ["packages/shopify/dist/stdio.js"]
+}
+```
+
+## Required Shopify scopes (verified against Admin GraphQL)
+
+| Tool                                          | Minimum Admin API scopes                                                                                                         |
+| --------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------- |
+| `shopify.shop.get`                            | Valid Admin API access token for an installed app (no catalog/order scope required for the `shop` query itself)                  |
+| `shopify.product.list`, `shopify.product.get` | **`read_products`**                                                                                                              |
+| `shopify.order.list`, `shopify.order.get`     | **`read_orders`** (and **`read_all_orders`** if you need more than the default ~60-day order window — requires Shopify approval) |
+| `shopify.inventory.levels.list`               | **`read_inventory`** (prefer over `read_products` alone for inventory level connections)                                         |
+| `shopify.location.list`                       | **`read_locations`**                                                                                                             |
+
+### Order access limitations (Shopify-side)
+
+- [Protected customer data](https://shopify.dev/docs/apps/launch/protected-customer-data) rules apply regardless of connector output shaping.
+- Without **`read_all_orders`**, Shopify may only expose recent orders (~60 days). Missing scope or protected-data restrictions surface as sanitized `FORBIDDEN` / empty results on Shopify’s side, not as fabricated connector data.
+- This connector **omits** customer names, emails, phones, addresses, and payment instruments from normalized outputs. That reduces MCP exposure but does **not** remove compliance obligations on your app.
+
+Permission failures map to sanitized `UNAUTHORIZED`, `FORBIDDEN`, `NOT_FOUND`, or `RATE_LIMITED` errors (no tokens or raw provider stacks).
+
+## Tool contracts
+
+### `shopify.shop.get`
+
+- **Input:** `{}`
+- **Output:** `id`, `name`, `myshopifyDomain`, `currencyCode`, `ianaTimezone`
+
+### `shopify.product.list`
+
+- **Input:** `limit` (default 25, max 100), optional `cursor`, optional `query` (max 256 chars)
+- **Output:** `products[]`, `pageInfo` (`hasNextPage`, `endCursor` when applicable)
+- Each product includes a **bounded variant preview** (`variants`, `variantsPreviewComplete`).
+
+### `shopify.product.get`
+
+- **Input:** `id` (`gid://shopify/Product/…`)
+- **Output:** Product summary, `description`, `tags`, bounded `variants`, `variantsPreviewComplete`
+- No unrestricted metafields.
+
+### `shopify.order.list`
+
+- **Input:** `limit`, optional `cursor`, optional `query`
+- **Output:** `orders[]`, `pageInfo`
+- Order fields: `id`, `name`, timestamps, `displayFinancialStatus`, `displayFulfillmentStatus`, `totalPrice`, `currencyCode`
+
+### `shopify.order.get`
+
+- **Input:** `id` (`gid://shopify/Order/…`)
+- **Output:** Order summary, `subtotalPrice`, `totalTax`, bounded `lineItems`, `lineItemsPreviewComplete`
+
+### `shopify.inventory.levels.list`
+
+- **Input:** optional `locationId`, optional `inventoryItemId` (**at least one required**), `limit`, optional `cursor`
+- **Output:** `inventoryLevels[]` (`inventoryItemId`, `locationId`, `available` when Shopify returns an `available` quantity name, `quantities[]`), `pageInfo`
+- Uses Shopify `inventoryLevels` connections on `Location` or `InventoryItem` (no global unscoped traversal).
+
+### `shopify.location.list`
+
+- **Input:** `limit`, optional `cursor`
+- **Output:** `locations[]` (`id`, `name`, `isActive`, `fulfillsOnlineOrders`), `pageInfo` (physical addresses omitted)
+
+## Pagination and truncation
+
+**Shopify pagination (provider):**
+
+- Cursor-based GraphQL (`pageInfo.hasNextPage`, `pageInfo.endCursor`).
+- Max **100** top-level nodes per call.
+- Cursors are opaque strings ≤ 512 characters; malformed cursors are rejected at input validation.
+- Each tool performs **one** Shopify GraphQL request per invocation (no recursive auto-fetch).
+
+**Connector-side output truncation (distinct from Shopify pagination):**
+
+- If normalizing the full provider page would exceed the structured output budget, the connector may return a prefix of list items and set `productsTruncated`, `ordersTruncated`, `locationsTruncated`, or `inventoryLevelsTruncated` to `true`.
+- `pageInfo` still reflects Shopify’s connection for the fetched page; truncation flags mean the **returned array** was shortened for MCP size limits.
+
+**Nested previews (not full Shopify pagination):**
+
+- **Variants:** up to **10** per product (`variantsPreviewComplete`).
+- **Line items:** up to **25** per order (`lineItemsPreviewComplete`).
+
+## Output budgets and data safety
+
+- Structured MCP JSON per tool is capped at **256 KiB** (`JSON.stringify` UTF-8 length).
+- Raw HTTP bodies are capped at **2 MiB** before parsing.
+- Long provider strings are truncated with explicit `*Truncated` flags where applicable.
+- Resource IDs, handles, and cursors are not silently truncated.
+- Missing or mistyped provider fields throw `PROVIDER_ERROR` rather than inventing defaults (except explicit nulls such as `available: null` when Shopify omits an `available` quantity).
+- All Shopify content is treated as untrusted (including prompt-injection-like text in titles/descriptions).
+- Read-only: GraphQL documents are fixed queries; no mutations.
+
+## Timeouts, throttling, and retries
+
+- **Deadline:** `OSVA_CONNECTOR_SHOPIFY_TIMEOUT_MS` applies to the entire GraphQL operation, including at most **one** read-only retry and its backoff.
+- **Cancellation:** MCP abort signals propagate to in-flight HTTP requests and retry delays.
+- **GraphQL Admin throttling:** Shopify reports `THROTTLED` in the JSON body (HTTP `200`). The connector parses `extensions.cost.throttleStatus` when present and maps throttle errors to `RATE_LIMITED`.
+- **HTTP `429`:** Rare for GraphQL Admin but handled; may occur on some platform limits. Mapped to `RATE_LIMITED`.
+- **Read-only retry (bounded):** On `THROTTLED` / HTTP `429` / HTTP 5xx, the connector performs **at most one** retry after **~1 second** (Shopify’s documented recommendation). No retry on auth, validation, oversize responses, or cancellation. No generic retry framework.
+
+## Security boundaries
+
+- Only **`*.myshopify.com`** hosts (or canonical store handles) are allowed; no arbitrary endpoints, ports, paths, or IP literals.
+- Access tokens are never logged or returned in errors (`shpat_…` patterns are redacted).
+- Errors avoid raw provider exception text and credential-bearing headers.
+
+## Package installation
+
+From the monorepo root (verification only; does not publish):
+
+```bash
+pnpm test:package-acceptance:shopify
+```
+
+This builds a production tarball, installs it in a temp directory **outside** the repo (no workspace symlinks), verifies npm bin metadata and Node shebang on `dist/stdio.js`, resolves `@osva-ai/connector-sdk` from the registry, and runs MCP smoke tests (`initialize`, `tools/list` for all seven tools, input schemas, missing-config exit, invalid input handling, clean stdout).
+
+Hermetic GraphQL behavior (pagination, throttling, cancellation, PII exclusion, large responses) is covered by Vitest against a loopback fake HTTP provider — not by the packaged smoke script and **not** against production Shopify.
+
+## Local development
+
+```bash
+pnpm install
+pnpm --filter @osva-ai/connector-shopify test
+pnpm --filter @osva-ai/connector-shopify build
+```
+
+## License
+
+Apache-2.0

package/dist/config.d.ts

@@ -0,0 +1,3 @@
+import { type ShopifyConfig } from "./schemas.js";
+export declare function loadShopifyConfig(env?: NodeJS.ProcessEnv): ShopifyConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAWA,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAoBvE,wBAAgB,iBAAiB,CAC/B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,aAAa,CAuDf"}

package/dist/config.js

@@ -0,0 +1,48 @@
+import { ConnectorSdkError } from "@osva-ai/connector-sdk";
+import { DEFAULT_API_VERSION, DEFAULT_REQUEST_TIMEOUT_MS, SHOPIFY_ACCESS_TOKEN_ENV, SHOPIFY_API_VERSION_ENV, SHOPIFY_SHOP_ENV, SHOPIFY_TIMEOUT_MS_ENV, } from "./constants.js";
+import { buildGraphqlEndpoint, parseShopHost } from "./parse-shop-host.js";
+import { shopifyConfigSchema } from "./schemas.js";
+function readBoundedInt(raw, fallback, label) {
+    if (raw === undefined || raw.trim().length === 0) {
+        return fallback;
+    }
+    const value = Number(raw.trim());
+    if (!Number.isInteger(value)) {
+        throw new ConnectorSdkError("CONFIGURATION_ERROR", `${label} must be an integer.`);
+    }
+    return value;
+}
+export function loadShopifyConfig(env = process.env) {
+    const rawShop = env[SHOPIFY_SHOP_ENV];
+    const rawToken = env[SHOPIFY_ACCESS_TOKEN_ENV];
+    if (rawShop === undefined || rawShop.trim().length === 0) {
+        throw new ConnectorSdkError("CONFIGURATION_ERROR", "Shopify shop is not configured.");
+    }
+    if (rawToken === undefined || rawToken.trim().length === 0) {
+        throw new ConnectorSdkError("CONFIGURATION_ERROR", "Shopify access token is not configured.");
+    }
+    let myshopifyDomain;
+    try {
+        myshopifyDomain = parseShopHost(rawShop).myshopifyDomain;
+    }
+    catch {
+        throw new ConnectorSdkError("CONFIGURATION_ERROR", "Shopify shop identifier is not valid.");
+    }
+    const apiVersionRaw = env[SHOPIFY_API_VERSION_ENV];
+    const apiVersion = apiVersionRaw === undefined || apiVersionRaw.trim().length === 0
+        ? DEFAULT_API_VERSION
+        : apiVersionRaw.trim();
+    const requestTimeoutMs = readBoundedInt(env[SHOPIFY_TIMEOUT_MS_ENV], DEFAULT_REQUEST_TIMEOUT_MS, "Request timeout");
+    const parsed = shopifyConfigSchema.safeParse({
+        myshopifyDomain,
+        accessToken: rawToken.trim(),
+        apiVersion,
+        requestTimeoutMs,
+        graphqlEndpoint: buildGraphqlEndpoint(myshopifyDomain, apiVersion),
+    });
+    if (!parsed.success) {
+        throw new ConnectorSdkError("CONFIGURATION_ERROR", "Shopify connector configuration is invalid.");
+    }
+    return parsed.data;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAsB,MAAM,cAAc,CAAC;AAEvE,SAAS,cAAc,CACrB,GAAuB,EACvB,QAAgB,EAChB,KAAa;IAEb,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,iBAAiB,CACzB,qBAAqB,EACrB,GAAG,KAAK,sBAAsB,CAC/B,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAE/C,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,iBAAiB,CACzB,qBAAqB,EACrB,iCAAiC,CAClC,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,iBAAiB,CACzB,qBAAqB,EACrB,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IAED,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CACzB,qBAAqB,EACrB,uCAAuC,CACxC,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACnD,MAAM,UAAU,GACd,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAC9D,CAAC,CAAC,mBAAmB;QACrB,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IAE3B,MAAM,gBAAgB,GAAG,cAAc,CACrC,GAAG,CAAC,sBAAsB,CAAC,EAC3B,0BAA0B,EAC1B,iBAAiB,CAClB,CAAC;IAEF,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC;QAC3C,eAAe;QACf,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE;QAC5B,UAAU;QACV,gBAAgB;QAChB,eAAe,EAAE,oBAAoB,CAAC,eAAe,EAAE,UAAU,CAAC;KACnE,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,iBAAiB,CACzB,qBAAqB,EACrB,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/dist/connector.d.ts

@@ -0,0 +1,8 @@
+import { type DefinedConnector } from "@osva-ai/connector-sdk";
+import type { ShopifyClient } from "./shopify-client.js";
+export interface CreateShopifyConnectorOptions {
+    readonly client: ShopifyClient;
+    readonly accessToken?: string;
+}
+export declare function createShopifyConnector(options: CreateShopifyConnectorOptions): DefinedConnector;
+//# sourceMappingURL=connector.d.ts.map

package/dist/connector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../src/connector.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAwBhC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAkBzD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAUD,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,6BAA6B,GACrC,gBAAgB,CA6LlB"}

package/dist/connector.js

@@ -0,0 +1,200 @@
+import { defineConnector, defineTool, ConnectorSdkError, } from "@osva-ai/connector-sdk";
+import { CONNECTOR_KEY, CONNECTOR_NAME, CONNECTOR_VERSION, SHOPIFY_INVENTORY_LEVELS_LIST_TOOL, SHOPIFY_LOCATION_LIST_TOOL, SHOPIFY_ORDER_GET_TOOL, SHOPIFY_ORDER_LIST_TOOL, SHOPIFY_PRODUCT_GET_TOOL, SHOPIFY_PRODUCT_LIST_TOOL, SHOPIFY_SHOP_GET_TOOL, } from "./constants.js";
+import { mapShopifyError } from "./map-shopify-error.js";
+import { mapInventoryLevelsResponse, mapLocationListResponse, mapOrderGetResponse, mapOrderListResponse, mapProductGetResponse, mapProductListResponse, mapShopGetResponse, } from "./normalize-shopify.js";
+import { inventoryLevelsListInputJsonSchema, inventoryLevelsListInputSchema, locationListInputJsonSchema, locationListInputSchema, orderGetInputJsonSchema, orderGetInputSchema, orderListInputJsonSchema, orderListInputSchema, productGetInputJsonSchema, productGetInputSchema, productListInputJsonSchema, productListInputSchema, shopGetInputJsonSchema, shopGetInputSchema, } from "./tool-schemas.js";
+function invalidInputError() {
+    return new ConnectorSdkError("INVALID_INPUT", "Invalid tool input.");
+}
+function mapError(error, accessToken) {
+    return mapShopifyError(error, { accessToken });
+}
+export function createShopifyConnector(options) {
+    const accessToken = options.accessToken;
+    return defineConnector({
+        key: CONNECTOR_KEY,
+        name: CONNECTOR_NAME,
+        description: "Shopify Admin API read-only connector for OSVA Connector Profile V1 (shop metadata, products, non-PII orders, inventory levels, and locations). Tool authorization is enforced by OSVA ToolPolicy; Shopify access scopes and protected customer data rules remain the primary authorization layers on the provider side.",
+        version: CONNECTOR_VERSION,
+        tools: [
+            defineTool({
+                name: SHOPIFY_SHOP_GET_TOOL,
+                description: "Returns basic shop metadata (read-only). Requires read access to shop settings.",
+                inputSchema: shopGetInputJsonSchema,
+                handler: async (input, context) => {
+                    const parsed = shopGetInputSchema.safeParse(input);
+                    if (!parsed.success) {
+                        throw invalidInputError();
+                    }
+                    try {
+                        const data = await options.client.getShop({
+                            signal: context.signal,
+                        });
+                        return mapShopGetResponse(data);
+                    }
+                    catch (error) {
+                        throw mapError(error, accessToken);
+                    }
+                },
+            }),
+            defineTool({
+                name: SHOPIFY_PRODUCT_LIST_TOOL,
+                description: "Lists products with cursor pagination and an optional bounded Shopify search query. Variant data is a bounded preview (not guaranteed complete). Does not return unrestricted metafields.",
+                inputSchema: productListInputJsonSchema,
+                handler: async (input, context) => {
+                    const parsed = productListInputSchema.safeParse(input);
+                    if (!parsed.success) {
+                        throw invalidInputError();
+                    }
+                    try {
+                        const data = await options.client.listProducts({
+                            limit: parsed.data.limit,
+                            ...(parsed.data.cursor !== undefined
+                                ? { cursor: parsed.data.cursor }
+                                : {}),
+                            ...(parsed.data.query !== undefined
+                                ? { query: parsed.data.query }
+                                : {}),
+                            signal: context.signal,
+                        });
+                        return mapProductListResponse(data);
+                    }
+                    catch (error) {
+                        throw mapError(error, accessToken);
+                    }
+                },
+            }),
+            defineTool({
+                name: SHOPIFY_PRODUCT_GET_TOOL,
+                description: "Returns a single product summary with bounded variant preview (read-only). Does not return unrestricted metafields.",
+                inputSchema: productGetInputJsonSchema,
+                handler: async (input, context) => {
+                    const parsed = productGetInputSchema.safeParse(input);
+                    if (!parsed.success) {
+                        throw invalidInputError();
+                    }
+                    try {
+                        const data = await options.client.getProduct({
+                            id: parsed.data.id,
+                            signal: context.signal,
+                        });
+                        return mapProductGetResponse(data);
+                    }
+                    catch (error) {
+                        throw mapError(error, accessToken);
+                    }
+                },
+            }),
+            defineTool({
+                name: SHOPIFY_ORDER_LIST_TOOL,
+                description: "Lists orders with cursor pagination and an optional bounded search query. Returns non-PII financial and fulfillment summaries only (no customer names, emails, phones, addresses, or payment instruments).",
+                inputSchema: orderListInputJsonSchema,
+                handler: async (input, context) => {
+                    const parsed = orderListInputSchema.safeParse(input);
+                    if (!parsed.success) {
+                        throw invalidInputError();
+                    }
+                    try {
+                        const data = await options.client.listOrders({
+                            limit: parsed.data.limit,
+                            ...(parsed.data.cursor !== undefined
+                                ? { cursor: parsed.data.cursor }
+                                : {}),
+                            ...(parsed.data.query !== undefined
+                                ? { query: parsed.data.query }
+                                : {}),
+                            signal: context.signal,
+                        });
+                        return mapOrderListResponse(data);
+                    }
+                    catch (error) {
+                        throw mapError(error, accessToken);
+                    }
+                },
+            }),
+            defineTool({
+                name: SHOPIFY_ORDER_GET_TOOL,
+                description: "Returns a non-PII order summary with totals, statuses, and a bounded line-item preview. Protected customer data and order-history scope restrictions may still apply on Shopify's side.",
+                inputSchema: orderGetInputJsonSchema,
+                handler: async (input, context) => {
+                    const parsed = orderGetInputSchema.safeParse(input);
+                    if (!parsed.success) {
+                        throw invalidInputError();
+                    }
+                    try {
+                        const data = await options.client.getOrder({
+                            id: parsed.data.id,
+                            signal: context.signal,
+                        });
+                        return mapOrderGetResponse(data);
+                    }
+                    catch (error) {
+                        throw mapError(error, accessToken);
+                    }
+                },
+            }),
+            defineTool({
+                name: SHOPIFY_INVENTORY_LEVELS_LIST_TOOL,
+                description: "Lists inventory levels scoped by locationId or inventoryItemId (at least one required). Quantities include available and selected safe inventory states. Uses Shopify inventoryLevels connections (no global unscoped traversal).",
+                inputSchema: inventoryLevelsListInputJsonSchema,
+                handler: async (input, context) => {
+                    const parsed = inventoryLevelsListInputSchema.safeParse(input);
+                    if (!parsed.success) {
+                        throw invalidInputError();
+                    }
+                    try {
+                        const data = await options.client.listInventoryLevels({
+                            ...(parsed.data.locationId !== undefined
+                                ? { locationId: parsed.data.locationId }
+                                : {}),
+                            ...(parsed.data.inventoryItemId !== undefined
+                                ? { inventoryItemId: parsed.data.inventoryItemId }
+                                : {}),
+                            limit: parsed.data.limit,
+                            ...(parsed.data.cursor !== undefined
+                                ? { cursor: parsed.data.cursor }
+                                : {}),
+                            signal: context.signal,
+                        });
+                        return mapInventoryLevelsResponse(data, {
+                            ...(parsed.data.locationId !== undefined
+                                ? { locationId: parsed.data.locationId }
+                                : {}),
+                            ...(parsed.data.inventoryItemId !== undefined
+                                ? { inventoryItemId: parsed.data.inventoryItemId }
+                                : {}),
+                        });
+                    }
+                    catch (error) {
+                        throw mapError(error, accessToken);
+                    }
+                },
+            }),
+            defineTool({
+                name: SHOPIFY_LOCATION_LIST_TOOL,
+                description: "Lists fulfillment locations without physical address fields (read-only).",
+                inputSchema: locationListInputJsonSchema,
+                handler: async (input, context) => {
+                    const parsed = locationListInputSchema.safeParse(input);
+                    if (!parsed.success) {
+                        throw invalidInputError();
+                    }
+                    try {
+                        const data = await options.client.listLocations({
+                            limit: parsed.data.limit,
+                            ...(parsed.data.cursor !== undefined
+                                ? { cursor: parsed.data.cursor }
+                                : {}),
+                            signal: context.signal,
+                        });
+                        return mapLocationListResponse(data);
+                    }
+                    catch (error) {
+                        throw mapError(error, accessToken);
+                    }
+                },
+            }),
+        ],
+    });
+}
+//# sourceMappingURL=connector.js.map

package/dist/connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.js","sourceRoot":"","sources":["../src/connector.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,UAAU,EACV,iBAAiB,GAElB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,kCAAkC,EAClC,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,kCAAkC,EAClC,8BAA8B,EAC9B,2BAA2B,EAC3B,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAO3B,SAAS,iBAAiB;IACxB,OAAO,IAAI,iBAAiB,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,WAAoB;IACpD,OAAO,eAAe,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAsC;IAEtC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAExC,OAAO,eAAe,CAAC;QACrB,GAAG,EAAE,aAAa;QAClB,IAAI,EAAE,cAAc;QACpB,WAAW,EACT,0TAA0T;QAC5T,OAAO,EAAE,iBAAiB;QAC1B,KAAK,EAAE;YACL,UAAU,CAAC;gBACT,IAAI,EAAE,qBAAqB;gBAC3B,WAAW,EACT,iFAAiF;gBACnF,WAAW,EAAE,sBAAsB;gBACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBAChC,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACpB,MAAM,iBAAiB,EAAE,CAAC;oBAC5B,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;4BACxC,MAAM,EAAE,OAAO,CAAC,MAAM;yBACvB,CAAC,CAAC;wBACH,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;oBAClC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;aACF,CAAC;YACF,UAAU,CAAC;gBACT,IAAI,EAAE,yBAAyB;gBAC/B,WAAW,EACT,2LAA2L;gBAC7L,WAAW,EAAE,0BAA0B;gBACvC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBAChC,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACpB,MAAM,iBAAiB,EAAE,CAAC;oBAC5B,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;4BAC7C,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;4BACxB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS;gCAClC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE;gCAChC,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;gCACjC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE;gCAC9B,CAAC,CAAC,EAAE,CAAC;4BACP,MAAM,EAAE,OAAO,CAAC,MAAM;yBACvB,CAAC,CAAC;wBACH,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;oBACtC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;aACF,CAAC;YACF,UAAU,CAAC;gBACT,IAAI,EAAE,wBAAwB;gBAC9B,WAAW,EACT,qHAAqH;gBACvH,WAAW,EAAE,yBAAyB;gBACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBAChC,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACpB,MAAM,iBAAiB,EAAE,CAAC;oBAC5B,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;4BAC3C,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;4BAClB,MAAM,EAAE,OAAO,CAAC,MAAM;yBACvB,CAAC,CAAC;wBACH,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC;oBACrC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;aACF,CAAC;YACF,UAAU,CAAC;gBACT,IAAI,EAAE,uBAAuB;gBAC7B,WAAW,EACT,4MAA4M;gBAC9M,WAAW,EAAE,wBAAwB;gBACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBAChC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACpB,MAAM,iBAAiB,EAAE,CAAC;oBAC5B,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;4BAC3C,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;4BACxB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS;gCAClC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE;gCAChC,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;gCACjC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE;gCAC9B,CAAC,CAAC,EAAE,CAAC;4BACP,MAAM,EAAE,OAAO,CAAC,MAAM;yBACvB,CAAC,CAAC;wBACH,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;oBACpC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;aACF,CAAC;YACF,UAAU,CAAC;gBACT,IAAI,EAAE,sBAAsB;gBAC5B,WAAW,EACT,yLAAyL;gBAC3L,WAAW,EAAE,uBAAuB;gBACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBAChC,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACpB,MAAM,iBAAiB,EAAE,CAAC;oBAC5B,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;4BACzC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;4BAClB,MAAM,EAAE,OAAO,CAAC,MAAM;yBACvB,CAAC,CAAC;wBACH,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;oBACnC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;aACF,CAAC;YACF,UAAU,CAAC;gBACT,IAAI,EAAE,kCAAkC;gBACxC,WAAW,EACT,mOAAmO;gBACrO,WAAW,EAAE,kCAAkC;gBAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBAChC,MAAM,MAAM,GAAG,8BAA8B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACpB,MAAM,iBAAiB,EAAE,CAAC;oBAC5B,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;4BACpD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS;gCACtC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE;gCACxC,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS;gCAC3C,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE;gCAClD,CAAC,CAAC,EAAE,CAAC;4BACP,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;4BACxB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS;gCAClC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE;gCAChC,CAAC,CAAC,EAAE,CAAC;4BACP,MAAM,EAAE,OAAO,CAAC,MAAM;yBACvB,CAAC,CAAC;wBACH,OAAO,0BAA0B,CAAC,IAAI,EAAE;4BACtC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS;gCACtC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE;gCACxC,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS;gCAC3C,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE;gCAClD,CAAC,CAAC,EAAE,CAAC;yBACR,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;aACF,CAAC;YACF,UAAU,CAAC;gBACT,IAAI,EAAE,0BAA0B;gBAChC,WAAW,EACT,0EAA0E;gBAC5E,WAAW,EAAE,2BAA2B;gBACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBAChC,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACpB,MAAM,iBAAiB,EAAE,CAAC;oBAC5B,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;4BAC9C,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;4BACxB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS;gCAClC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE;gCAChC,CAAC,CAAC,EAAE,CAAC;4BACP,MAAM,EAAE,OAAO,CAAC,MAAM;yBACvB,CAAC,CAAC;wBACH,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC;oBACvC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;aACF,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/constants.d.ts

@@ -0,0 +1,31 @@
+export declare const CONNECTOR_KEY = "osva-connector-shopify";
+export declare const CONNECTOR_NAME = "OSVA Shopify Connector";
+export declare const CONNECTOR_VERSION = "0.1.0";
+export declare const SHOPIFY_SHOP_GET_TOOL = "shopify.shop.get";
+export declare const SHOPIFY_PRODUCT_LIST_TOOL = "shopify.product.list";
+export declare const SHOPIFY_PRODUCT_GET_TOOL = "shopify.product.get";
+export declare const SHOPIFY_ORDER_LIST_TOOL = "shopify.order.list";
+export declare const SHOPIFY_ORDER_GET_TOOL = "shopify.order.get";
+export declare const SHOPIFY_INVENTORY_LEVELS_LIST_TOOL = "shopify.inventory.levels.list";
+export declare const SHOPIFY_LOCATION_LIST_TOOL = "shopify.location.list";
+export declare const SHOPIFY_SHOP_ENV = "OSVA_CONNECTOR_SHOPIFY_SHOP";
+export declare const SHOPIFY_ACCESS_TOKEN_ENV = "OSVA_CONNECTOR_SHOPIFY_ACCESS_TOKEN";
+export declare const SHOPIFY_API_VERSION_ENV = "OSVA_CONNECTOR_SHOPIFY_API_VERSION";
+export declare const SHOPIFY_TIMEOUT_MS_ENV = "OSVA_CONNECTOR_SHOPIFY_TIMEOUT_MS";
+export declare const DEFAULT_API_VERSION = "2026-10";
+export declare const DEFAULT_REQUEST_TIMEOUT_MS = 30000;
+export declare const MIN_REQUEST_TIMEOUT_MS = 1000;
+export declare const MAX_REQUEST_TIMEOUT_MS = 120000;
+export declare const LIST_DEFAULT_LIMIT = 25;
+export declare const LIST_MAX_LIMIT = 100;
+export declare const MAX_CURSOR_LENGTH = 512;
+export declare const MAX_SHOPIFY_SEARCH_QUERY_LENGTH = 256;
+export declare const VARIANTS_PREVIEW_MAX = 10;
+export declare const LINE_ITEMS_PREVIEW_MAX = 25;
+/** Maximum raw HTTP response bytes read before JSON parsing. */
+export declare const MAX_HTTP_RESPONSE_BYTES = 2097152;
+/** Read-only GraphQL: at most one retry after throttle/transient 5xx (Shopify recommends ~1s backoff). */
+export declare const READ_ONLY_GRAPHQL_MAX_RETRIES = 1;
+export declare const READ_ONLY_GRAPHQL_RETRY_DELAY_MS = 1000;
+export { OUTPUT_MAX_GID_LENGTH, OUTPUT_MAX_HANDLE_LENGTH, OUTPUT_MAX_ISO_TIMESTAMP, OUTPUT_MAX_MONEY_AMOUNT_LENGTH, OUTPUT_MAX_PRODUCT_TITLE, OUTPUT_MAX_SEARCH_QUERY, OUTPUT_MAX_SHOP_NAME, OUTPUT_MAX_SKU_LENGTH, OUTPUT_MAX_STRUCTURED_JSON_BYTES, OUTPUT_MAX_TIMEZONE_LENGTH, OUTPUT_MAX_VENDOR_LENGTH, } from "./output-budget.js";
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,2BAA2B,CAAC;AACtD,eAAO,MAAM,cAAc,2BAA2B,CAAC;AACvD,eAAO,MAAM,iBAAiB,UAAU,CAAC;AAEzC,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AACxD,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAChE,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAC9D,eAAO,MAAM,uBAAuB,uBAAuB,CAAC;AAC5D,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAC1D,eAAO,MAAM,kCAAkC,kCACd,CAAC;AAClC,eAAO,MAAM,0BAA0B,0BAA0B,CAAC;AAElE,eAAO,MAAM,gBAAgB,gCAAgC,CAAC;AAC9D,eAAO,MAAM,wBAAwB,wCAAwC,CAAC;AAC9E,eAAO,MAAM,uBAAuB,uCAAuC,CAAC;AAC5E,eAAO,MAAM,sBAAsB,sCAAsC,CAAC;AAE1E,eAAO,MAAM,mBAAmB,YAAY,CAAC;AAC7C,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,eAAO,MAAM,sBAAsB,OAAQ,CAAC;AAC5C,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAE9C,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,cAAc,MAAM,CAAC;AAClC,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,eAAO,MAAM,+BAA+B,MAAM,CAAC;AAEnD,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,gEAAgE;AAChE,eAAO,MAAM,uBAAuB,UAAY,CAAC;AAEjD,0GAA0G;AAC1G,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAC/C,eAAO,MAAM,gCAAgC,OAAQ,CAAC;AAEtD,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,8BAA8B,EAC9B,wBAAwB,EACxB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,gCAAgC,EAChC,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,oBAAoB,CAAC"}

package/dist/constants.js

@@ -0,0 +1,31 @@
+export const CONNECTOR_KEY = "osva-connector-shopify";
+export const CONNECTOR_NAME = "OSVA Shopify Connector";
+export const CONNECTOR_VERSION = "0.1.0";
+export const SHOPIFY_SHOP_GET_TOOL = "shopify.shop.get";
+export const SHOPIFY_PRODUCT_LIST_TOOL = "shopify.product.list";
+export const SHOPIFY_PRODUCT_GET_TOOL = "shopify.product.get";
+export const SHOPIFY_ORDER_LIST_TOOL = "shopify.order.list";
+export const SHOPIFY_ORDER_GET_TOOL = "shopify.order.get";
+export const SHOPIFY_INVENTORY_LEVELS_LIST_TOOL = "shopify.inventory.levels.list";
+export const SHOPIFY_LOCATION_LIST_TOOL = "shopify.location.list";
+export const SHOPIFY_SHOP_ENV = "OSVA_CONNECTOR_SHOPIFY_SHOP";
+export const SHOPIFY_ACCESS_TOKEN_ENV = "OSVA_CONNECTOR_SHOPIFY_ACCESS_TOKEN";
+export const SHOPIFY_API_VERSION_ENV = "OSVA_CONNECTOR_SHOPIFY_API_VERSION";
+export const SHOPIFY_TIMEOUT_MS_ENV = "OSVA_CONNECTOR_SHOPIFY_TIMEOUT_MS";
+export const DEFAULT_API_VERSION = "2026-10";
+export const DEFAULT_REQUEST_TIMEOUT_MS = 30_000;
+export const MIN_REQUEST_TIMEOUT_MS = 1_000;
+export const MAX_REQUEST_TIMEOUT_MS = 120_000;
+export const LIST_DEFAULT_LIMIT = 25;
+export const LIST_MAX_LIMIT = 100;
+export const MAX_CURSOR_LENGTH = 512;
+export const MAX_SHOPIFY_SEARCH_QUERY_LENGTH = 256;
+export const VARIANTS_PREVIEW_MAX = 10;
+export const LINE_ITEMS_PREVIEW_MAX = 25;
+/** Maximum raw HTTP response bytes read before JSON parsing. */
+export const MAX_HTTP_RESPONSE_BYTES = 2_097_152;
+/** Read-only GraphQL: at most one retry after throttle/transient 5xx (Shopify recommends ~1s backoff). */
+export const READ_ONLY_GRAPHQL_MAX_RETRIES = 1;
+export const READ_ONLY_GRAPHQL_RETRY_DELAY_MS = 1_000;
+export { OUTPUT_MAX_GID_LENGTH, OUTPUT_MAX_HANDLE_LENGTH, OUTPUT_MAX_ISO_TIMESTAMP, OUTPUT_MAX_MONEY_AMOUNT_LENGTH, OUTPUT_MAX_PRODUCT_TITLE, OUTPUT_MAX_SEARCH_QUERY, OUTPUT_MAX_SHOP_NAME, OUTPUT_MAX_SKU_LENGTH, OUTPUT_MAX_STRUCTURED_JSON_BYTES, OUTPUT_MAX_TIMEZONE_LENGTH, OUTPUT_MAX_VENDOR_LENGTH, } from "./output-budget.js";
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG,wBAAwB,CAAC;AACtD,MAAM,CAAC,MAAM,cAAc,GAAG,wBAAwB,CAAC;AACvD,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAEzC,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AACxD,MAAM,CAAC,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AAChE,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAC9D,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAC5D,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAC1D,MAAM,CAAC,MAAM,kCAAkC,GAC7C,+BAA+B,CAAC;AAClC,MAAM,CAAC,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAElE,MAAM,CAAC,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAC9D,MAAM,CAAC,MAAM,wBAAwB,GAAG,qCAAqC,CAAC;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,oCAAoC,CAAC;AAC5E,MAAM,CAAC,MAAM,sBAAsB,GAAG,mCAAmC,CAAC;AAE1E,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAC;AAC7C,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AACjD,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAC5C,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE9C,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AACrC,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC;AAClC,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAG,CAAC;AAEnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAEzC,gEAAgE;AAChE,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAEjD,0GAA0G;AAC1G,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAC/C,MAAM,CAAC,MAAM,gCAAgC,GAAG,KAAK,CAAC;AAEtD,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,8BAA8B,EAC9B,wBAAwB,EACxB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,gCAAgC,EAChC,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,oBAAoB,CAAC"}

package/dist/gid.d.ts

@@ -0,0 +1,9 @@
+export type ShopifyGidResource = "Product" | "Order" | "Location" | "InventoryItem";
+export declare const GID_INPUT_PATTERN: {
+    readonly product: RegExp;
+    readonly order: RegExp;
+    readonly location: RegExp;
+    readonly inventoryItem: RegExp;
+};
+export declare function parseShopifyGid(raw: string, resource: ShopifyGidResource): string;
+//# sourceMappingURL=gid.d.ts.map

package/dist/gid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gid.d.ts","sourceRoot":"","sources":["../src/gid.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,kBAAkB,GAC5B,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,eAAe,CAAC;AAKrD,eAAO,MAAM,iBAAiB;;;;;CAKpB,CAAC;AAEX,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,CAsBR"}

package/dist/gid.js

@@ -0,0 +1,24 @@
+import { ConnectorSdkError } from "@osva-ai/connector-sdk";
+const GID_PREFIX = "gid://shopify/";
+const GID_PATTERN = /^gid:\/\/shopify\/(Product|Order|Location|InventoryItem)\/\d+$/;
+export const GID_INPUT_PATTERN = {
+    product: /^gid:\/\/shopify\/Product\/\d+$/,
+    order: /^gid:\/\/shopify\/Order\/\d+$/,
+    location: /^gid:\/\/shopify\/Location\/\d+$/,
+    inventoryItem: /^gid:\/\/shopify\/InventoryItem\/\d+$/,
+};
+export function parseShopifyGid(raw, resource) {
+    const trimmed = raw.trim();
+    if (trimmed.length === 0 || trimmed.length > 128) {
+        throw new ConnectorSdkError("INVALID_INPUT", "Invalid Shopify resource ID.");
+    }
+    if (!GID_PATTERN.test(trimmed)) {
+        throw new ConnectorSdkError("INVALID_INPUT", "Invalid Shopify resource ID.");
+    }
+    const expectedPrefix = `${GID_PREFIX}${resource}/`;
+    if (!trimmed.startsWith(expectedPrefix)) {
+        throw new ConnectorSdkError("INVALID_INPUT", "Invalid Shopify resource ID.");
+    }
+    return trimmed;
+}
+//# sourceMappingURL=gid.js.map

package/dist/gid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gid.js","sourceRoot":"","sources":["../src/gid.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAKpC,MAAM,WAAW,GACf,gEAAgE,CAAC;AAEnE,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,OAAO,EAAE,iCAAiC;IAC1C,KAAK,EAAE,+BAA+B;IACtC,QAAQ,EAAE,kCAAkC;IAC5C,aAAa,EAAE,uCAAuC;CAC9C,CAAC;AAEX,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,QAA4B;IAE5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACjD,MAAM,IAAI,iBAAiB,CACzB,eAAe,EACf,8BAA8B,CAC/B,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,iBAAiB,CACzB,eAAe,EACf,8BAA8B,CAC/B,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,GAAG,UAAU,GAAG,QAAQ,GAAG,CAAC;IACnD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,iBAAiB,CACzB,eAAe,EACf,8BAA8B,CAC/B,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/graphql/queries.d.ts

@@ -0,0 +1,10 @@
+/** Fixed Admin GraphQL documents (connector-owned, read-only). */
+export declare const SHOP_GET_QUERY = "#graphql\n  query OsvaShopGet {\n    shop {\n      id\n      name\n      myshopifyDomain\n      currencyCode\n      ianaTimezone\n    }\n  }\n";
+export declare const PRODUCT_LIST_QUERY = "#graphql\n  query OsvaProductList($first: Int!, $after: String, $query: String) {\n    products(first: $first, after: $after, query: $query) {\n      nodes {\n        id\n        title\n        handle\n        status\n        vendor\n        productType\n        createdAt\n        updatedAt\n        variants(first: 10) {\n          nodes {\n            id\n            title\n            sku\n            price\n          }\n          pageInfo {\n            hasNextPage\n          }\n        }\n      }\n      pageInfo {\n        hasNextPage\n        endCursor\n      }\n    }\n  }\n";
+export declare const PRODUCT_GET_QUERY = "#graphql\n  query OsvaProductGet($id: ID!) {\n    product(id: $id) {\n      id\n      title\n      handle\n      status\n      vendor\n      productType\n      createdAt\n      updatedAt\n      description\n      tags\n      variants(first: 10) {\n        nodes {\n          id\n          title\n          sku\n          price\n        }\n        pageInfo {\n          hasNextPage\n        }\n      }\n    }\n  }\n";
+export declare const ORDER_LIST_QUERY = "#graphql\n  query OsvaOrderList($first: Int!, $after: String, $query: String) {\n    orders(first: $first, after: $after, query: $query) {\n      nodes {\n        id\n        name\n        createdAt\n        updatedAt\n        displayFinancialStatus\n        displayFulfillmentStatus\n        currentTotalPriceSet {\n          shopMoney {\n            amount\n            currencyCode\n          }\n        }\n      }\n      pageInfo {\n        hasNextPage\n        endCursor\n      }\n    }\n  }\n";
+export declare const ORDER_GET_QUERY = "#graphql\n  query OsvaOrderGet($id: ID!) {\n    order(id: $id) {\n      id\n      name\n      createdAt\n      updatedAt\n      displayFinancialStatus\n      displayFulfillmentStatus\n      currencyCode\n      currentTotalPriceSet {\n        shopMoney {\n          amount\n          currencyCode\n        }\n      }\n      currentSubtotalPriceSet {\n        shopMoney {\n          amount\n        }\n      }\n      currentTotalTaxSet {\n        shopMoney {\n          amount\n        }\n      }\n      lineItems(first: 25) {\n        nodes {\n          id\n          name\n          quantity\n          currentQuantity\n          sku\n        }\n        pageInfo {\n          hasNextPage\n        }\n      }\n    }\n  }\n";
+export declare const LOCATION_LIST_QUERY = "#graphql\n  query OsvaLocationList($first: Int!, $after: String) {\n    locations(first: $first, after: $after) {\n      nodes {\n        id\n        name\n        isActive\n        fulfillsOnlineOrders\n      }\n      pageInfo {\n        hasNextPage\n        endCursor\n      }\n    }\n  }\n";
+export declare const INVENTORY_LEVELS_BY_LOCATION_QUERY = "#graphql\n  query OsvaInventoryLevelsByLocation($locationId: ID!, $first: Int!, $after: String) {\n    location(id: $locationId) {\n      id\n      inventoryLevels(first: $first, after: $after) {\n        nodes {\n          id\n          item {\n            id\n          }\n          location {\n            id\n          }\n          quantities(names: [\"available\", \"on_hand\", \"committed\", \"incoming\", \"reserved\"]) {\n            name\n            quantity\n          }\n        }\n        pageInfo {\n          hasNextPage\n          endCursor\n        }\n      }\n    }\n  }\n";
+export declare const INVENTORY_LEVELS_BY_ITEM_QUERY = "#graphql\n  query OsvaInventoryLevelsByItem($inventoryItemId: ID!, $first: Int!, $after: String) {\n    inventoryItem(id: $inventoryItemId) {\n      id\n      inventoryLevels(first: $first, after: $after) {\n        nodes {\n          id\n          item {\n            id\n          }\n          location {\n            id\n          }\n          quantities(names: [\"available\", \"on_hand\", \"committed\", \"incoming\", \"reserved\"]) {\n            name\n            quantity\n          }\n        }\n        pageInfo {\n          hasNextPage\n          endCursor\n        }\n      }\n    }\n  }\n";
+//# sourceMappingURL=queries.d.ts.map

package/dist/graphql/queries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queries.d.ts","sourceRoot":"","sources":["../../src/graphql/queries.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAElE,eAAO,MAAM,cAAc,mJAU1B,CAAC;AAEF,eAAO,MAAM,kBAAkB,+kBA8B9B,CAAC;AAEF,eAAO,MAAM,iBAAiB,maA0B7B,CAAC;AAEF,eAAO,MAAM,gBAAgB,ufAuB5B,CAAC;AAEF,eAAO,MAAM,eAAe,stBAwC3B,CAAC;AAEF,eAAO,MAAM,mBAAmB,ySAe/B,CAAC;AAEF,eAAO,MAAM,kCAAkC,mlBAyB9C,CAAC;AAEF,eAAO,MAAM,8BAA8B,8lBAyB1C,CAAC"}