Chargeback Dispute

// Inside your order-confirmation handler, after the charge succeeds.
// `shield` is the scored result the shared waitForScore helper returns.
async function recordOrder(order, shield) {
  await db.orders.update(order.id, {
    // The identity stamp you will replay if this charge is ever disputed.
    shield_visitor_id: shield.visitorID, // VisitorID for this visit
    shield_device_id:  shield.deviceID,  // server-derived, durable, browser-bound
    shield_user_hid:   shield.userHID,   // the hashed account id you passed in
    shield_score:      shield.score,     // 0 to 100 at buy time
    shield_country:    shield.country,   // IP country at buy time
    shield_request_id: shield.requestID, // ties back to the exact identification
  });
}

// `dispute` carries the order id your processor (Stripe, Adyen, etc.) reported.
async function buildEvidence(dispute) {
  const order = await db.orders.get(dispute.orderId);

  const domain = 'myshop.com';
  const secret = process.env.SHIELDLABS_SECRET;

  // Pull this account's visit history, newest first. Search by user_hid to
  // capture the account, or by device_id to capture the exact device.
  // Each returned row bills 1 request; an empty result still bills 1.
  const res = await fetch(
    `https://api.shieldlabs.ai/${domain}:${secret}` +
    `/history/user_hid/${order.shield_user_hid}?limit=50`
  );
  const snapshots = await res.json(); // [] when nothing matches

  // Keep the visits that share the disputed order's device. Same DeviceID
  // across purchases is the continuity claim your representment makes.
  const sameDevice = snapshots.filter(
    (s) => s.DeviceID === order.shield_device_id
  );

  return sameDevice.map((s) => ({
    when:     s.LastRequestTime,
    device:   s.DeviceID,
    visitor:  s.VisitorID,
    country:  s.Country,
    score:    s.Score,    // a clean score here strengthens the case
    browser:  s.Browser,
    device_type: s.DeviceType,
  }));
}