Shopify unfulfilled high-risk order fraud review gate

id: shopify-high-risk-order-fraud-review-gate
namespace: company.ecommerce

inputs:
  - id: shopify_shop_name
    type: STRING
    displayName: Shopify Shop Name
    defaults: "my-ecommerce-store"
    description: Shopify store domain slug (e.g. 'my-ecommerce-store' for
      my-ecommerce-store.myshopify.com).

  - id: api_version
    type: STRING
    displayName: Shopify Admin API Version
    defaults: "2024-07"
    description: Supported Shopify GraphQL Admin API version string (e.g. '2024-07'
      or '2024-10').

  - id: max_allowed_high_risk_orders
    type: INT
    displayName: Maximum Allowed High-Risk Orders
    defaults: 0
    description: Tolerance threshold for high-risk unfulfilled orders before
      triggering an alert. Defaults to 0 to catch every fraudulent attempt.

  - id: fail_on_detected_fraud
    type: BOOL
    displayName: Fail on Detected Fraud
    defaults: true
    description: Whether to fail execution when high-risk orders are detected to
      block downstream 3PL warehouse fulfillment pipelines.

triggers:
  - id: recurring_fraud_sweep
    type: io.kestra.plugin.core.trigger.Schedule
    description: Frequent 15-minute fraud inspection sweep to intercept high-risk
      orders before fulfillment. Shipped disabled by default.
    cron: "*/15 * * * *"
    disabled: true
    inputs:
      shopify_shop_name: "my-ecommerce-store"
      max_allowed_high_risk_orders: 0

tasks:
  - id: fetch_high_risk_orders
    type: io.kestra.plugin.graphql.Request
    description: Query Shopify Admin GraphQL API for unfulfilled orders evaluated as
      high fraud risk by Shopify Fraud Analysis.
    uri: "https://{{ inputs.shopify_shop_name }}.myshopify.com/admin/api/{{
      inputs.api_version }}/graphql.json"
    headers:
      X-Shopify-Access-Token: "{{ secret('SHOPIFY_ACCESS_TOKEN') }}"
      User-Agent: "Kestra-Shopify-Fraud-Sentinel/1.0"
    failOnGraphQLErrors: false
    query: |
      query HighRiskUnfulfilledOrders {
        orders(first: 25, query: "fulfillment_status:unfulfilled risk_level:high") {
          edges {
            node {
              id
              name
              createdAt
              totalPriceSet {
                shopMoney {
                  amount
                  currencyCode
                }
              }
              customer {
                displayName
                email
              }
              riskLevel
            }
          }
        }
      }
    options:
      allowFailed: true

  - id: evaluate_fraud_risk
    type: io.kestra.plugin.core.flow.If
    description: Evaluate whether active unfulfilled high-risk orders exceed the
      tolerance threshold.
    condition: "{{ outputs.fetch_high_risk_orders.body is defined and
      outputs.fetch_high_risk_orders.body.orders is defined and
      ((outputs.fetch_high_risk_orders.body.orders.edges | length) >
      inputs.max_allowed_high_risk_orders) }}"
    then:
      - id: alert_fraud_incident
        type: io.kestra.plugin.slack.notifications.SlackIncomingWebhook
        description: Dispatch urgent Slack notification to Merchant Fraud Operations
          with order IDs, totals, and customer details.
        url: "{{ secret('SLACK_WEBHOOK_URL') }}"
        payload: |
          {
            "text": "🚨 *SHOPIFY FRAUD ALERT: High-Risk Unfulfilled Orders Intercepted* 🚨\n\n*Store:* `{{ inputs.shopify_shop_name }}`\n*Flagged Orders Count:* {{ outputs.fetch_high_risk_orders.body.orders.edges | length }}\n\n*Orders Requiring Review:*\n{{ outputs.fetch_high_risk_orders.body.orders.edges | jq('[.[].node | \"• Order *\" + .name + \"* (\" + .totalPriceSet.shopMoney.amount + \" \" + .totalPriceSet.shopMoney.currencyCode + \") - Customer: \" + (.customer.displayName // \"Guest\") + \" (\" + (.customer.email // \"no email\") + \")\"] | join(\"\\n\")') | first }}\n\n*Execution ID:* {{ execution.id }}\n*Action Required:* Review fraud indicators in Shopify Admin before releasing fulfillment."
          }

      - id: check_fail_policy
        type: io.kestra.plugin.core.flow.If
        description: Halt pipeline when fail_on_detected_fraud is enabled to prevent
          warehouse fulfillment.
        condition: "{{ inputs.fail_on_detected_fraud }}"
        then:
          - id: halt_fulfillment_gate
            type: io.kestra.plugin.core.execution.Fail
            description: Fail execution to gate downstream automated 3PL shipping
              integrations.
    else:
      - id: log_orders_clean
        type: io.kestra.plugin.core.log.Log
        description: Log clean status when zero high-risk unfulfilled orders are present.
        message: "HEALTHY: Zero unfulfilled high-risk orders detected on store {{
          inputs.shopify_shop_name }}."

  - id: log_audit_summary
    type: io.kestra.plugin.core.log.Log
    description: Record final audit metrics for merchant security compliance.
    message: "Shopify fraud audit completed for {{ inputs.shopify_shop_name }}.
      Total high-risk orders intercepted: {{ outputs.fetch_high_risk_orders.body
      is defined and outputs.fetch_high_risk_orders.body.orders is defined ?
      (outputs.fetch_high_risk_orders.body.orders.edges | length) : 0 }}."

errors:
  - id: alert_on_audit_error
    type: io.kestra.plugin.slack.notifications.SlackIncomingWebhook
    description: Alert E-commerce Ops channel if Shopify Admin API request fails or
      credentials expire.
    url: "{{ secret('SLACK_WEBHOOK_URL') }}"
    payload: |
      {
        "text": "⚠️ *Shopify Fraud Sentinel Error*: Execution `{{ execution.id }}` failed to query store `{{ inputs.shopify_shop_name }}`. Verify SHOPIFY_ACCESS_TOKEN validity."
      }

outputs:
  - id: status
    type: STRING
    value: "{{ outputs.fetch_high_risk_orders.body is defined and
      outputs.fetch_high_risk_orders.body.orders is defined and
      ((outputs.fetch_high_risk_orders.body.orders.edges | length) >
      inputs.max_allowed_high_risk_orders) ? 'FRAUD_DETECTED' : 'HEALTHY' }}"
  - id: high_risk_orders_count
    type: INT
    value: "{{ outputs.fetch_high_risk_orders.body is defined and
      outputs.fetch_high_risk_orders.body.orders is defined ?
      (outputs.fetch_high_risk_orders.body.orders.edges | length) : 0 }}"