I’ve created another thread to ask Shopify to fix a gap in the offline-token migration:
When cycling legacy → expiring tokens, Shopify destroys the old token in the same request that issues the new pair. If an app never persisted the new tokens (lost response, worker crash, DB write, same class of failure they already fixed for refresh), that merchant is permanently orphaned until they reopen the app. No server-side recovery.