Inventory Sync

Tick off each step as you go. Steps marked auto are detected from this dashboard's own status and can't be ticked by hand. Secret values are never entered into this app — only set them via the wrangler CLI or the Cloudflare dashboard.

1. Push this repo to your own GitHub repository.
2. Create the D1 database.

   wrangler d1 create sync-app-db

3. Add the D1 binding to apps/backend/wrangler.jsonc, then deploy the backend Worker once by hand (a one-off — the repository doesn't exist as a live Worker yet for Actions to update).

   cd apps/backend
   wrangler deploy

4. Set the Worker secrets. Run each command and paste the value when prompted — it is never typed into this dashboard or committed to the repo.

   wrangler secret put SHOPIFY_CLIENT_ID
   wrangler secret put SHOPIFY_CLIENT_SECRET
   wrangler secret put APP_ENCRYPTION_KEY
   wrangler secret put RESEND_API_KEY        # optional: failure emails
   wrangler secret put CLOUDFLARE_API_TOKEN  # optional: usage stats panel

5. Make future commits deploy the Worker automatically. In GitHub, go to the repo's Settings → Secrets and variables → Actions and add two repository secrets: CLOUDFLARE_API_TOKEN (an API token scoped to Workers Scripts: Edit and Account: Read — create one at the Cloudflare dashboard under My Profile → API Tokens) and CLOUDFLARE_ACCOUNT_ID (found on the Cloudflare dashboard's Workers & Pages overview page). These are GitHub secrets, separate from the Worker secrets above — despite the shared name, this CLOUDFLARE_API_TOKEN lives in GitHub, not on the Worker. Once both are added, every push to main that touches apps/backend runs .github/workflows/deploy-worker.yml and deploys automatically — no more manual wrangler deploy.
6. In the Cloudflare dashboard, create a Pages project connected to this GitHub repo (build output apps/pages/public), and add the BACKEND service binding pointing at the Worker. Pages deploys this frontend automatically on every push once connected — no separate workflow needed for it.
7. Create/configure the Shopify app: app URL is this dashboard, redirect URL is /api/shopify/callback, scopes are read_products, read_inventory, write_inventory only.
8. Cloudflare Access confirmed on this dashboard auto
9. Backend configuration ready auto
10. Responsibility acknowledgement accepted auto
11. Shopify connected auto

Checking backend configuration…

Live writes are blocked until this acknowledgement is accepted.

Enter the permanent Shopify store hostname. No store is preconfigured.