Gatekpr

A Rust-native platform that validates Shopify and WooCommerce apps against official approval requirements. Provides CLI, REST API, MCP server, and AI agent integration.

Features

• 110+ Validation Rules across webhooks, API usage, billing, security, OAuth, data protection, checkout, performance, and themes
• Multi-Platform: Shopify and WooCommerce support
• Multi-Language Parsing: JavaScript, TypeScript, Ruby, Python, PHP via tree-sitter
• Semantic Search: RAG-powered documentation search with Qdrant (17 collections)
• LLM Analysis: GLM 4.7 primary with Claude fallback, circuit breaker pattern
• Multi-Tenant SaaS: JWT auth, Stripe billing, email notifications
• MCP Integration: Tools for Claude Code, Windsurf, OpenCode
• Production Ready: Fly.io deployment, OpenTelemetry tracing, rate limiting

Architecture

gatekpr/
├── crates/
│   ├── core/           # Shared types, traits, HTTP client, formatting
│   ├── config/         # Configuration management
│   ├── patterns/       # Reusable patterns (retry, circuit breaker)
│   ├── rate-limiter/   # Standalone rate limiting crate
│   ├── parsers/        # Multi-language code parsing (tree-sitter)
│   ├── validators/     # Rule engine with pattern matching
│   ├── vector/         # Qdrant client, embedding registry
│   ├── db/             # SQLite with SQLx + query helpers
│   ├── rig-agent/      # LLM orchestration with circuit breaker
│   ├── opencode/       # OpenCode CLI client for RAG enrichment
│   ├── email/          # SMTP email with MJML templates
│   ├── billing/        # Stripe billing integration
│   ├── monitoring/     # Health checks, deprecation tracking
│   ├── mcp-server/     # MCP protocol server for AI agents
│   ├── cli/            # Command-line interface
│   ├── api/            # REST API (Axum)
│   └── ingestion/      # Documentation crawler
├── rules/              # Validation rules (TOML)
├── migrations/         # SQLx database migrations
├── packages/           # Distribution wrappers (npm, PyPI, RubyGems, Composer)
├── HomebrewFormula/    # Homebrew formula
└── tests/              # Integration tests

Installation

# From crates.io
cargo install gatekpr-cli

# From source
cargo install --git https://github.com/umerkhan95/gatekpr.git gatekpr-cli

Quick Start

Prerequisites

• Rust 1.75+
• SQLite 3.x (bundled via SQLx)

Build from source

git clone https://github.com/umerkhan95/shopify-app-approver.git
cd shopify-app-approver
cargo build --release

CLI

# Validate a Shopify app
cargo run -p gatekpr-cli -- check ./path/to/app

# Remote validation via API
cargo run -p gatekpr-cli -- check ./path/to/app --server https://gatekpr.fly.dev

# Search documentation
cargo run -p gatekpr-cli -- docs search "GDPR webhooks"

# List validation rules
cargo run -p gatekpr-cli -- rules list

API Server

export JWT_SECRET="your-secret-key-at-least-32-characters"
cargo run -p gatekpr-api
# Server starts at http://localhost:3000

MCP Server

cargo run -p gatekpr-mcp-server

# With RAG support
OPENAI_API_KEY=your-key QDRANT_URL=http://localhost:6333 cargo run -p gatekpr-mcp-server

Configure in Claude Code (~/.claude/settings.json):

{
  "mcpServers": {
    "gatekpr": {
      "command": "/path/to/gatekpr-mcp-server"
    }
  }
}

API Endpoints

Authentication

Validation

Reviews

Billing (Stripe)

Documentation

Validation Rules

Environment Variables

Deployment

Production runs on Fly.io. See DEPLOYMENT.md for full details.

# Deploy API
flyctl deploy --config fly.production.toml --app gatekpr

# Deploy Qdrant
flyctl deploy --config fly.qdrant.production.toml --app gatekpr-qdrant

# Health check
curl https://gatekpr.fly.dev/health

Development

# Run tests
cargo test --workspace

# Format
cargo fmt --all

# Lint
cargo clippy --workspace -- -D warnings

CI Pipeline

CI runs on every push to main:

• Format - cargo fmt --check
• Check - cargo check --workspace
• Clippy - cargo clippy -- -D warnings
• Test - cargo test --workspace

Release builds and Docker images are produced by release.yml on version tags (v*).

License

MIT