Server-side PostgreSQL Access

The Shopify app sends authenticated requests to the Next.js backend. The backend resolves the shop's database assignment through Firebase Data Connect and retrieves its database credentials from Google Secret Manager.

Product data is read and written directly through PostgreSQL connections. Runtime transactions select the shop's role and schema; a separate provisioning login owns schemas and handles their creation and maintenance. Database credentials are never sent to the browser.