@stamprally/server 0.16.0 → 0.17.0

package/README.md

@@ -1,4 +1,4 @@
-# @stamprally/server v0.16.0
+# @stamprally/server v0.17.0
 
 Web Standard `Request` / `Response` handlers for server-authoritative check-ins and reward claims.
 

package/dist/index.cjs

@@ -7,7 +7,16 @@ async function executeClaimRewardTransaction(database, store, params2, mutation2
   try {
     return await database.transaction(async (transaction) => {
       const current = await store.readContext(transaction, params2);
-      const next = mutation2(current);
+      const secondaryStock = current.secondaryStock ?? null;
+      const rewardStock2 = params2.stockKey === "__shared__" ? secondaryStock : current.stock;
+      const next = mutation2({
+        ...current,
+        rewardStock: rewardStock2,
+        sharedStock: params2.stockKey === "__shared__" ? current.stock : null,
+        primaryStock: rewardStock2,
+        secondaryStock,
+        stock: current.stock
+      });
       if (next.error !== void 0) {
         await store.writeAudit(transaction, next.auditLog);
         if (params2.idempotencyKey !== void 0 && next.result !== void 0)
@@ -15,7 +24,7 @@ async function executeClaimRewardTransaction(database, store, params2, mutation2
         return { success: false, error: next.error };
       }
       if (next.nextSecondaryStock !== void 0 && store.writeSecondaryStock === void 0)
-        return { success: false, error: "INVENTORY_NOT_SUPPORTED" };
+        return { success: false, error: "INVENTORY_STORAGE_NOT_IMPLEMENTED" };
       if (next.nextStock !== null) await store.writeStock(transaction, params2, next.nextStock);
       if (next.nextSecondaryStock !== void 0 && store.writeSecondaryStock !== void 0) {
         if (next.nextSecondaryStock !== null)
@@ -146,9 +155,16 @@ var InMemoryServerPersistenceAdapter = class {
           params2.stockKey ?? params2.rewardId
         );
         const storedSecondaryStock = params2.secondaryStockKey === void 0 ? null : await this.getRewardStock(params2.rallyId, params2.secondaryStockKey);
+        const stock = storedStock ?? initialStock;
+        const secondaryStock = storedSecondaryStock ?? initialSecondaryStock;
+        const rewardStock2 = params2.stockKey === "__shared__" ? secondaryStock : stock;
+        const sharedStock2 = params2.stockKey === "__shared__" ? stock : null;
         const mutationResult = mutation2({
-          stock: storedStock ?? initialStock,
-          secondaryStock: storedSecondaryStock ?? initialSecondaryStock,
+          rewardStock: rewardStock2,
+          sharedStock: sharedStock2,
+          primaryStock: rewardStock2,
+          secondaryStock,
+          stock,
           claimCount: await this.getUserClaimCount(params2.rallyId, params2.userId, params2.rewardId),
           userState
         });
@@ -680,7 +696,18 @@ function operationStatus(result) {
   if (result.ok) return "ACCEPTED";
   return result.code === "CONFLICT" || result.code === "PERSISTENCE_FAILED" ? "RETRYABLE_ERROR" : "REJECTED_PERMANENT";
 }
-function withDirectIdentity(request) {
+function withDirectIdentity(request, authContext) {
+  if (authContext !== void 0) {
+    if (authContext.authenticatedUserId.trim() === "")
+      throw new RequestValidationException([
+        {
+          path: "authContext.authenticatedUserId",
+          message: "An authenticated userId is required.",
+          code: "REQUIRED"
+        }
+      ]);
+    return { ...request, userId: authContext.authenticatedUserId };
+  }
   if (request.userId !== void 0) return { ...request, userId: request.userId };
   if (request.anonymousSessionId !== void 0 && isUuidV4(request.anonymousSessionId))
     return { ...request, userId: request.anonymousSessionId };
@@ -810,8 +837,8 @@ var StampRallyServer = class {
       throw error;
     }
   }
-  async checkIn(request) {
-    const directRequest = withDirectIdentity(request);
+  async checkIn(request, authContext) {
+    const directRequest = withDirectIdentity(request, authContext);
     assertValidCheckInParams(directRequest, this.#config);
     const { userId } = directRequest;
     const key = `check-in:${request.rallyId}:${userId}:${request.idempotencyKey}`;
@@ -944,8 +971,8 @@ var StampRallyServer = class {
       await this.#persistence.releaseLock(request.rallyId, lockKey);
     }
   }
-  async claimReward(request) {
-    const directRequest = withDirectIdentity(request);
+  async claimReward(request, authContext) {
+    const directRequest = withDirectIdentity(request, authContext);
     assertValidClaimParams(directRequest, this.#config);
     const { userId } = directRequest;
     const key = `claim:${request.rallyId}:${userId}:${request.rewardId}:${request.idempotencyKey}`;
@@ -963,13 +990,14 @@ var StampRallyServer = class {
         now(this.#options)
       );
     const plan = inventoryPlan(this.#config, reward.id, reward.stockLimit);
-    if (rewardStock(this.#config, reward.id, reward.stockLimit) !== null && (this.#persistence.supportsRewardStock === false || typeof this.#persistence.getRewardStock !== "function"))
+    const inventoryEnabled = plan.primaryInitial !== null || plan.secondaryInitial !== void 0 && plan.secondaryInitial !== null;
+    if (inventoryEnabled && (this.#persistence.supportsRewardStock === false || typeof this.#persistence.getRewardStock !== "function" || typeof this.#persistence.executeClaimRewardTransaction !== "function"))
       return this.#rememberClaim(
         key,
         {
           ok: false,
-          code: "INVENTORY_NOT_SUPPORTED",
-          message: "This persistence adapter cannot store per-reward inventory."
+          code: "INVENTORY_STORAGE_NOT_IMPLEMENTED",
+          message: "This persistence adapter cannot atomically store inventory."
         },
         directRequest,
         now(this.#options)
@@ -1100,11 +1128,11 @@ var StampRallyServer = class {
       const response = responseHolder.value;
       if (!result.success) {
         if (response !== null && !response.ok && response.code === result.error) return response;
-        if (result.error === "INVENTORY_NOT_SUPPORTED")
+        if (result.error === "INVENTORY_STORAGE_NOT_IMPLEMENTED")
           return {
             ok: false,
-            code: "INVENTORY_NOT_SUPPORTED",
-            message: "This persistence adapter cannot store per-reward inventory."
+            code: "INVENTORY_STORAGE_NOT_IMPLEMENTED",
+            message: "This persistence adapter cannot atomically store inventory."
           };
         return {
           ok: false,
@@ -1312,6 +1340,15 @@ async function runPersistenceAdapterComplianceTests(createAdapter) {
     await adapter.getRewardStock("compliance-rally", "reward") === 0,
     "per-reward stock was not decremented atomically"
   );
+  const exhausted = await adapter.executeClaimRewardTransaction(
+    params("carol", "boundary"),
+    mutation
+  );
+  assert(!exhausted.success, "a zero-stock claim was accepted");
+  assert(
+    await adapter.getRewardStock("compliance-rally", "__shared__") === 0 && await adapter.getRewardStock("compliance-rally", "reward") === 0,
+    "zero-stock rejection did not preserve both stock boundaries"
+  );
   const idempotentAdapter = await createAdapter();
   const idempotentParams = params("alice", "same-key");
   const firstClaim = await idempotentAdapter.executeClaimRewardTransaction(
@@ -1327,6 +1364,10 @@ async function runPersistenceAdapterComplianceTests(createAdapter) {
     await idempotentAdapter.getRewardStock("compliance-rally", "__shared__") === 0,
     "idempotent retry decremented shared stock twice"
   );
+  assert(
+    await idempotentAdapter.getRewardStock("compliance-rally", "reward") === 0,
+    "idempotent retry decremented per-reward stock twice"
+  );
   const rollbackAdapter = await createAdapter();
   const rollbackParams = params("alice", "rollback");
   const rollback = await rollbackAdapter.executeClaimRewardTransaction(rollbackParams, () => {