Shopify app spec

// Inside your Shopify App backend route (Remix / Node / Cloudflare Worker)
const shopperId =
  req.headers.get("x-shopify-customer-id") ||
  req.headers.get("cf-connecting-ip") ||
  req.headers.get("x-forwarded-for")?.split(",")[0]?.trim() ||
  "anon_shopper";

const gateRes = await fetch("https://getgated.ai/v1/check", {
  method: "POST",
  headers: {
    "Authorization": `Bearer ${process.env.M6L_GATE_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    user: shopperId,
    input: shopperMessage,
    messages: conversationHistory.length,
    context_chars: JSON.stringify(conversationHistory).length,
    feature: "shopify_storefront_chat",
    anonymous: !req.headers.get("x-shopify-customer-id"),
  }),
  signal: AbortSignal.timeout(400), // Fail-open after 400ms
}).catch(() => null);

if (gateRes && gateRes.ok) {
  const verdict = await gateRes.json();
  if (!verdict.allow) {
    return Response.json({
      reply: verdict.message || "I can only assist with questions about our products, orders, and store policies.",
      blocked_by_gate: true,
    });
  }
}