Can I vibe code FraudBlock?

Build a serverless Node.js application (compatible with Cloudflare Workers or AWS Lambda) that acts as an automated high-risk order cancellation system for a Shopify store.

1. SYSTEM ARCHITECTURE & TRIGGER:
- Listen to Shopify HTTP POST webhooks for the `orders/create` event.
- Verify the HMAC header `X-Shopify-Hmac-SHA256` using the store client secret to ensure request authenticity.
- Enqueue a delayed task (or set a 5-second timeout) to allow Shopify's native Fraud Analysis engine to populate the order's risk assessment.

2. SHOPIFY API INTEGRATION:
- Query the Shopify Admin GraphQL API endpoint `order(id: $id) { id displayFinancialStatus risks { recommendation score } }`.
- Alternatively, call REST API `GET /admin/api/2024-01/orders/{order_id}/risks.json`.
- Evaluate the risk payload: if `recommendation` equals `CANCEL` or risk level is `HIGH`, trigger auto-cancellation.

3. CANCELLATION EXECUTION:
- Execute GraphQL mutation `orderCancel(orderId: $id, reason: FRAUD, restock: true, staffNote: "Auto-cancelled by custom Fraud Worker due to High Risk flag")`.
- Ensure the payment is voided/refunded automatically according to Shopify's default cancellation behavior.
- Send an internal alert (e.g., via Slack Webhook or Telegram Bot) containing the order ID, customer email, total value, and risk score.

4. FAILURE HANDLING & LOGGING:
- Implement idempotent execution using KV or Redis: store `order_id` for 24 hours to prevent duplicate processing.
- Handle API rate limits (HTTP 429) using exponential backoff retry.
- Log all actions (passed, cancelled, failed) to a simple database or logging service like Axiom.

5. OUT OF SCOPE:
- Custom machine learning risk scoring. Rely entirely on Shopify's native risk flags.
- Frontend app store UI; configure settings via environment variables (e.g., `RESTOCK_ITEMS=true`, `CANCEL_THRESHOLD=HIGH`).

$ each button prefixes agent-specific run instructions · build your own product, never copy proprietary code, trademarks or designs