alinaqi/claude-bootstrap
Overview
This skill provides an opinionated, security-first starter for building Shopify apps with Remix, the Shopify App framework, Admin GraphQL API, and checkout UI extensions. It focuses on spec-driven initialization, session storage with Prisma, GDPR webhook handling, and a Polaris-based admin UI. Use it to scaffold a production-ready app structure and implement secure API, webhook, and extension patterns quickly.
How this skill works
The skill scaffolds a Remix app configured for Shopify: authentication flows, Prisma session storage, Admin API helpers, and webhook routes for lifecycle and GDPR events. It wires Shopify CLI configuration (shopify.app.toml), registers required webhooks, enforces authenticated admin loaders/actions, and provides example GraphQL queries, mutations, and metafield helpers. A Polaris layout and checkout extension template are included to speed UI and extension development.
When to use it
- Starting a new Shopify app using Remix and TypeScript/JavaScript.
- You need secure, production-ready auth and session handling (Prisma session storage).
- Implementing Admin GraphQL operations and metafield-based app settings.
- Adding checkout UI or theme extensions alongside an embedded admin UI.
- Preparing an app for App Store approval with GDPR and lifecycle webhooks.
Best practices
- Keep Shopify API keys and secrets in environment variables and do not commit them.
- Use Prisma session storage and delete sessions on app/uninstall webhooks to avoid stale data.
- Handle GDPR webhooks explicitly: customers/data_request, customers/redact, shop/redact.
- Prefer GraphQL Admin API (remove REST) and centralize queries/mutations with error handling for userErrors.
- Use Polaris for consistent embedded admin UI and store settings as JSON metafields for portability.
Example use cases
- Scaffold a Remix-based Shopify app that authenticates shops and exposes a settings page stored in shop metafields.
- Implement product listing and creation using Admin GraphQL queries and mutations wrapped with loader/action patterns.
- Add a checkout UI extension to customize cart experience, bundled under extensions/ with shopify.extension.toml.
- Respond to app/uninstalled webhook to remove sessions and perform cleanup for App Store compliance.
- Implement GDPR webhook handlers to return/delete customer data and remove app-related metafields on shop/redact.
FAQ
Yes. The scaffold supports JavaScript or TypeScript templates; examples show TypeScript-friendly patterns and Prisma usage.
Is GDPR handling required to publish the app?
Yes. Shopify requires GDPR webhook handlers for customers/data_request, customers/redact, and shop/redact before App Store approval.
Can I use REST instead of GraphQL?
The opinionated config favors GraphQL (removeRest: true) for admin operations, but you can adapt the setup to use REST if needed.
11 skills
This skill guides you to scaffold, configure, and develop Shopify apps with Remix, Admin API, and checkout extensions end-to-end.
This skill enforces rigorous TypeScript strict mode and eslint-driven quality for reliable, secure project initialization and maintainable code.
This skill helps you design secure, scalable Firebase apps with Firestore, authentication, storage, and rules by applying best practices for data modeling and
This skill enforces mandatory automated code reviews before commits and deploys, improving security, quality, and reliability across projects.
This skill enforces universal coding patterns and TDD workflows to keep code simple, readable, and maintainable across projects.
This skill verifies generated UI meets accessibility standards through a pragmatic checklist of visibility, contrast, focus, and responsive targets.
This skill helps you manage WooCommerce stores by interacting with products, orders, customers, and webhooks via REST API.
This skill helps you implement React Native patterns and platform-specific code with clean architecture and reusable components.
This skill helps you build reliable, installable PWAs by guiding offline caching, service workers, and manifest setup for fast, secure experiences.
This skill helps you bootstrap Android Kotlin projects with Coroutines, Hilt, Jetpack Compose, and clean architecture patterns.
This skill helps you implement PostHog analytics for event tracking, user identification, feature flags, and dashboards to measure product value.
