@stamprally/server 0.16.0 → 0.18.0

package/dist/index.d.cts

@@ -2,6 +2,16 @@ import * as _stamprally_core from '@stamprally/core';
 import { UserRallyState, AdminRallyConfig } from '@stamprally/core';
 export { UserRallyState } from '@stamprally/core';
 
+/** Authentication already verified by the host application's middleware. */
+interface TrustedAuthContext {
+    readonly authenticatedUserId: string;
+    readonly isAnonymous?: boolean;
+    readonly sessionId?: string;
+    readonly claims?: Record<string, unknown>;
+}
+/** @deprecated Use TrustedAuthContext. */
+type AuthenticationContext = TrustedAuthContext;
+
 interface UserClaimRecord {
     readonly rallyId: string;
     readonly userId: string;
@@ -39,6 +49,16 @@ interface ClaimRewardTransactionMutation {
     /** A domain rejection is committed as an audit/idempotency record without mutations. */
     readonly error?: string;
 }
+interface ClaimRewardMutationContext {
+    readonly rewardStock: number | null;
+    readonly sharedStock: number | null;
+    readonly primaryStock: number | null;
+    readonly secondaryStock: number | null;
+    /** @deprecated Use rewardStock. */
+    readonly stock: number | null;
+    readonly claimCount: number;
+    readonly userState: UserRallyState;
+}
 interface CheckInTransactionParams {
     readonly rallyId: string;
     readonly userId: string;
@@ -67,17 +87,14 @@ interface ServerPersistenceAdapter {
      * Atomically commits stock, user state, claim count, audit log, and idempotency data.
      * Adapters must roll back every write when the callback or any commit operation fails.
      */
-    executeClaimRewardTransaction(params: ClaimRewardTransactionParams, mutation: (current: {
-        readonly stock: number | null;
-        readonly secondaryStock: number | null;
-        readonly claimCount: number;
-        readonly userState: UserRallyState;
-    }) => ClaimRewardTransactionMutation): Promise<{
+    executeClaimRewardTransaction(params: ClaimRewardTransactionParams, mutation: (current: ClaimRewardMutationContext) => ClaimRewardTransactionMutation): Promise<{
         readonly success: boolean;
         readonly error?: string;
     }>;
     /** Set false when the adapter cannot persist per-reward inventory atomically. */
     readonly supportsRewardStock?: boolean;
+    /** Must be true when a claim plan uses `secondaryStockKey`. */
+    readonly supportsSecondaryStock?: boolean;
     acquireLock(rallyId: string, lockKey: string, ttlMs: number): Promise<boolean>;
     releaseLock(rallyId: string, lockKey: string): Promise<void>;
     getRewardStock(rallyId: string, rewardId: string): Promise<number | null>;
@@ -101,7 +118,8 @@ interface InMemoryServerPersistenceOptions {
 }
 declare class InMemoryServerPersistenceAdapter implements ServerPersistenceAdapter {
     #private;
-    readonly supportsRewardStock = true;
+    readonly supportsRewardStock: boolean;
+    readonly supportsSecondaryStock: boolean;
     constructor(options?: InMemoryServerPersistenceOptions);
     acquireLock(rallyId: string, key: string, ttlMs: number): Promise<boolean>;
     releaseLock(rallyId: string, key: string): Promise<void>;
@@ -111,12 +129,7 @@ declare class InMemoryServerPersistenceAdapter implements ServerPersistenceAdapt
         remainingStock: number;
     }>;
     restoreRewardStock(rallyId: string, rewardId: string, count?: number): Promise<void>;
-    executeClaimRewardTransaction(params: ClaimRewardTransactionParams, mutation: (current: {
-        readonly stock: number | null;
-        readonly secondaryStock: number | null;
-        readonly claimCount: number;
-        readonly userState: UserRallyState;
-    }) => ClaimRewardTransactionMutation): Promise<{
+    executeClaimRewardTransaction(params: ClaimRewardTransactionParams, mutation: (current: ClaimRewardMutationContext) => ClaimRewardTransactionMutation): Promise<{
         readonly success: boolean;
         readonly error?: string;
     }>;
@@ -175,11 +188,7 @@ interface SqlClaimRewardStore<Tx> {
  * while unexpected write failures reject the transaction and roll everything
  * back.
  */
-declare function executeClaimRewardTransaction<Tx>(database: SqlTransactionDatabase<Tx>, store: SqlClaimRewardStore<Tx>, params: ClaimRewardTransactionParams, mutation: (current: {
-    readonly stock: number | null;
-    readonly claimCount: number;
-    readonly userState: UserRallyState;
-}) => ClaimRewardTransactionMutation): Promise<{
+declare function executeClaimRewardTransaction<Tx>(database: SqlTransactionDatabase<Tx>, store: SqlClaimRewardStore<Tx>, params: ClaimRewardTransactionParams, mutation: (current: ClaimRewardMutationContext) => ClaimRewardTransactionMutation): Promise<{
     readonly success: boolean;
     readonly error?: string;
 }>;
@@ -263,14 +272,14 @@ declare class StampRallyServer {
     handleCheckIn(request: Request): Promise<Response>;
     handleClaimReward(request: Request): Promise<Response>;
     handleSync(request: Request): Promise<Response>;
-    checkIn(request: CheckInRequest): Promise<CheckInResponse>;
-    claimReward(request: ClaimRewardRequest): Promise<ClaimResponse>;
-    sync(rallyId: string, userId: string): Promise<UserRallyState>;
+    checkIn(request: CheckInRequest, authContext?: TrustedAuthContext): Promise<CheckInResponse>;
+    claimReward(request: ClaimRewardRequest, authContext?: TrustedAuthContext): Promise<ClaimResponse>;
+    sync(rallyId: string, identity: string | TrustedAuthContext): Promise<UserRallyState>;
     syncProgress(request: {
         readonly rallyId: string;
         readonly userId?: string;
         readonly anonymousSessionId?: string;
-    }): Promise<UserRallyState>;
+    }, authContext: TrustedAuthContext): Promise<UserRallyState>;
 }
 
 /**
@@ -323,13 +332,10 @@ type CheckInResponse = {
 interface ServerOptions {
     readonly lockTtlMs?: number;
     readonly idempotencyTtlMs?: number;
-    readonly authenticate?: (request: Request) => Promise<string | AuthenticationContext | null> | string | AuthenticationContext | null;
+    readonly authenticate?: (request: Request) => Promise<string | TrustedAuthContext | null> | string | TrustedAuthContext | null;
     readonly customValidators?: Readonly<Record<string, _stamprally_core.Validator>>;
     readonly now?: () => string;
     readonly anonymousPolicy?: "session_scoped" | "reject" | "shared_global_opt_in_insecure";
 }
-interface AuthenticationContext {
-    readonly authenticatedUserId: string;
-}
 
-export { type AuditLog, type AuthenticationContext, type CheckInRequest, type CheckInResponse, type CheckInTransactionMutation, type CheckInTransactionParams, type ClaimRewardRequest, type ClaimRewardTransactionMutation, type ClaimRewardTransactionParams, InMemoryServerPersistenceAdapter, type InMemoryServerPersistenceOptions, type RedisMultiExecutor, type RequestValidationError, RequestValidationException, type RequestValidationResult, type ServerOptions, type ServerPersistenceAdapter, type SqlCheckInStore, type SqlClaimRewardStore, type SqlTransactionDatabase, StampRallyServer, type SyncOperationStatus, type UserClaimRecord, assertValidCheckInParams, assertValidClaimParams, assertValidSyncParams, executeCheckInTransaction, executeClaimRewardTransaction, executeRedisTransaction, runPersistenceAdapterComplianceTests, validateCheckInRequest, validateClaimRewardRequest, validateSyncRequest };
+export { type AuditLog, type AuthenticationContext, type CheckInRequest, type CheckInResponse, type CheckInTransactionMutation, type CheckInTransactionParams, type ClaimRewardMutationContext, type ClaimRewardRequest, type ClaimRewardTransactionMutation, type ClaimRewardTransactionParams, InMemoryServerPersistenceAdapter, type InMemoryServerPersistenceOptions, type RedisMultiExecutor, type RequestValidationError, RequestValidationException, type RequestValidationResult, type ServerOptions, type ServerPersistenceAdapter, type SqlCheckInStore, type SqlClaimRewardStore, type SqlTransactionDatabase, StampRallyServer, type SyncOperationStatus, type TrustedAuthContext, type UserClaimRecord, assertValidCheckInParams, assertValidClaimParams, assertValidSyncParams, executeCheckInTransaction, executeClaimRewardTransaction, executeRedisTransaction, runPersistenceAdapterComplianceTests, validateCheckInRequest, validateClaimRewardRequest, validateSyncRequest };

package/dist/index.d.ts

@@ -2,6 +2,16 @@ import * as _stamprally_core from '@stamprally/core';
 import { UserRallyState, AdminRallyConfig } from '@stamprally/core';
 export { UserRallyState } from '@stamprally/core';
 
+/** Authentication already verified by the host application's middleware. */
+interface TrustedAuthContext {
+    readonly authenticatedUserId: string;
+    readonly isAnonymous?: boolean;
+    readonly sessionId?: string;
+    readonly claims?: Record<string, unknown>;
+}
+/** @deprecated Use TrustedAuthContext. */
+type AuthenticationContext = TrustedAuthContext;
+
 interface UserClaimRecord {
     readonly rallyId: string;
     readonly userId: string;
@@ -39,6 +49,16 @@ interface ClaimRewardTransactionMutation {
     /** A domain rejection is committed as an audit/idempotency record without mutations. */
     readonly error?: string;
 }
+interface ClaimRewardMutationContext {
+    readonly rewardStock: number | null;
+    readonly sharedStock: number | null;
+    readonly primaryStock: number | null;
+    readonly secondaryStock: number | null;
+    /** @deprecated Use rewardStock. */
+    readonly stock: number | null;
+    readonly claimCount: number;
+    readonly userState: UserRallyState;
+}
 interface CheckInTransactionParams {
     readonly rallyId: string;
     readonly userId: string;
@@ -67,17 +87,14 @@ interface ServerPersistenceAdapter {
      * Atomically commits stock, user state, claim count, audit log, and idempotency data.
      * Adapters must roll back every write when the callback or any commit operation fails.
      */
-    executeClaimRewardTransaction(params: ClaimRewardTransactionParams, mutation: (current: {
-        readonly stock: number | null;
-        readonly secondaryStock: number | null;
-        readonly claimCount: number;
-        readonly userState: UserRallyState;
-    }) => ClaimRewardTransactionMutation): Promise<{
+    executeClaimRewardTransaction(params: ClaimRewardTransactionParams, mutation: (current: ClaimRewardMutationContext) => ClaimRewardTransactionMutation): Promise<{
         readonly success: boolean;
         readonly error?: string;
     }>;
     /** Set false when the adapter cannot persist per-reward inventory atomically. */
     readonly supportsRewardStock?: boolean;
+    /** Must be true when a claim plan uses `secondaryStockKey`. */
+    readonly supportsSecondaryStock?: boolean;
     acquireLock(rallyId: string, lockKey: string, ttlMs: number): Promise<boolean>;
     releaseLock(rallyId: string, lockKey: string): Promise<void>;
     getRewardStock(rallyId: string, rewardId: string): Promise<number | null>;
@@ -101,7 +118,8 @@ interface InMemoryServerPersistenceOptions {
 }
 declare class InMemoryServerPersistenceAdapter implements ServerPersistenceAdapter {
     #private;
-    readonly supportsRewardStock = true;
+    readonly supportsRewardStock: boolean;
+    readonly supportsSecondaryStock: boolean;
     constructor(options?: InMemoryServerPersistenceOptions);
     acquireLock(rallyId: string, key: string, ttlMs: number): Promise<boolean>;
     releaseLock(rallyId: string, key: string): Promise<void>;
@@ -111,12 +129,7 @@ declare class InMemoryServerPersistenceAdapter implements ServerPersistenceAdapt
         remainingStock: number;
     }>;
     restoreRewardStock(rallyId: string, rewardId: string, count?: number): Promise<void>;
-    executeClaimRewardTransaction(params: ClaimRewardTransactionParams, mutation: (current: {
-        readonly stock: number | null;
-        readonly secondaryStock: number | null;
-        readonly claimCount: number;
-        readonly userState: UserRallyState;
-    }) => ClaimRewardTransactionMutation): Promise<{
+    executeClaimRewardTransaction(params: ClaimRewardTransactionParams, mutation: (current: ClaimRewardMutationContext) => ClaimRewardTransactionMutation): Promise<{
         readonly success: boolean;
         readonly error?: string;
     }>;
@@ -175,11 +188,7 @@ interface SqlClaimRewardStore<Tx> {
  * while unexpected write failures reject the transaction and roll everything
  * back.
  */
-declare function executeClaimRewardTransaction<Tx>(database: SqlTransactionDatabase<Tx>, store: SqlClaimRewardStore<Tx>, params: ClaimRewardTransactionParams, mutation: (current: {
-    readonly stock: number | null;
-    readonly claimCount: number;
-    readonly userState: UserRallyState;
-}) => ClaimRewardTransactionMutation): Promise<{
+declare function executeClaimRewardTransaction<Tx>(database: SqlTransactionDatabase<Tx>, store: SqlClaimRewardStore<Tx>, params: ClaimRewardTransactionParams, mutation: (current: ClaimRewardMutationContext) => ClaimRewardTransactionMutation): Promise<{
     readonly success: boolean;
     readonly error?: string;
 }>;
@@ -263,14 +272,14 @@ declare class StampRallyServer {
     handleCheckIn(request: Request): Promise<Response>;
     handleClaimReward(request: Request): Promise<Response>;
     handleSync(request: Request): Promise<Response>;
-    checkIn(request: CheckInRequest): Promise<CheckInResponse>;
-    claimReward(request: ClaimRewardRequest): Promise<ClaimResponse>;
-    sync(rallyId: string, userId: string): Promise<UserRallyState>;
+    checkIn(request: CheckInRequest, authContext?: TrustedAuthContext): Promise<CheckInResponse>;
+    claimReward(request: ClaimRewardRequest, authContext?: TrustedAuthContext): Promise<ClaimResponse>;
+    sync(rallyId: string, identity: string | TrustedAuthContext): Promise<UserRallyState>;
     syncProgress(request: {
         readonly rallyId: string;
         readonly userId?: string;
         readonly anonymousSessionId?: string;
-    }): Promise<UserRallyState>;
+    }, authContext: TrustedAuthContext): Promise<UserRallyState>;
 }
 
 /**
@@ -323,13 +332,10 @@ type CheckInResponse = {
 interface ServerOptions {
     readonly lockTtlMs?: number;
     readonly idempotencyTtlMs?: number;
-    readonly authenticate?: (request: Request) => Promise<string | AuthenticationContext | null> | string | AuthenticationContext | null;
+    readonly authenticate?: (request: Request) => Promise<string | TrustedAuthContext | null> | string | TrustedAuthContext | null;
     readonly customValidators?: Readonly<Record<string, _stamprally_core.Validator>>;
     readonly now?: () => string;
     readonly anonymousPolicy?: "session_scoped" | "reject" | "shared_global_opt_in_insecure";
 }
-interface AuthenticationContext {
-    readonly authenticatedUserId: string;
-}
 
-export { type AuditLog, type AuthenticationContext, type CheckInRequest, type CheckInResponse, type CheckInTransactionMutation, type CheckInTransactionParams, type ClaimRewardRequest, type ClaimRewardTransactionMutation, type ClaimRewardTransactionParams, InMemoryServerPersistenceAdapter, type InMemoryServerPersistenceOptions, type RedisMultiExecutor, type RequestValidationError, RequestValidationException, type RequestValidationResult, type ServerOptions, type ServerPersistenceAdapter, type SqlCheckInStore, type SqlClaimRewardStore, type SqlTransactionDatabase, StampRallyServer, type SyncOperationStatus, type UserClaimRecord, assertValidCheckInParams, assertValidClaimParams, assertValidSyncParams, executeCheckInTransaction, executeClaimRewardTransaction, executeRedisTransaction, runPersistenceAdapterComplianceTests, validateCheckInRequest, validateClaimRewardRequest, validateSyncRequest };
+export { type AuditLog, type AuthenticationContext, type CheckInRequest, type CheckInResponse, type CheckInTransactionMutation, type CheckInTransactionParams, type ClaimRewardMutationContext, type ClaimRewardRequest, type ClaimRewardTransactionMutation, type ClaimRewardTransactionParams, InMemoryServerPersistenceAdapter, type InMemoryServerPersistenceOptions, type RedisMultiExecutor, type RequestValidationError, RequestValidationException, type RequestValidationResult, type ServerOptions, type ServerPersistenceAdapter, type SqlCheckInStore, type SqlClaimRewardStore, type SqlTransactionDatabase, StampRallyServer, type SyncOperationStatus, type TrustedAuthContext, type UserClaimRecord, assertValidCheckInParams, assertValidClaimParams, assertValidSyncParams, executeCheckInTransaction, executeClaimRewardTransaction, executeRedisTransaction, runPersistenceAdapterComplianceTests, validateCheckInRequest, validateClaimRewardRequest, validateSyncRequest };

package/dist/index.js

@@ -5,7 +5,16 @@ async function executeClaimRewardTransaction(database, store, params2, mutation2
   try {
     return await database.transaction(async (transaction) => {
       const current = await store.readContext(transaction, params2);
-      const next = mutation2(current);
+      const secondaryStock = current.secondaryStock ?? null;
+      const rewardStock2 = params2.stockKey === "__shared__" ? secondaryStock : current.stock;
+      const next = mutation2({
+        ...current,
+        rewardStock: rewardStock2,
+        sharedStock: params2.stockKey === "__shared__" ? current.stock : null,
+        primaryStock: rewardStock2,
+        secondaryStock,
+        stock: current.stock
+      });
       if (next.error !== void 0) {
         await store.writeAudit(transaction, next.auditLog);
         if (params2.idempotencyKey !== void 0 && next.result !== void 0)
@@ -13,7 +22,7 @@ async function executeClaimRewardTransaction(database, store, params2, mutation2
         return { success: false, error: next.error };
       }
       if (next.nextSecondaryStock !== void 0 && store.writeSecondaryStock === void 0)
-        return { success: false, error: "INVENTORY_NOT_SUPPORTED" };
+        return { success: false, error: "INVENTORY_STORAGE_NOT_IMPLEMENTED" };
       if (next.nextStock !== null) await store.writeStock(transaction, params2, next.nextStock);
       if (next.nextSecondaryStock !== void 0 && store.writeSecondaryStock !== void 0) {
         if (next.nextSecondaryStock !== null)
@@ -67,6 +76,7 @@ async function executeRedisTransaction(redis, queue) {
 // src/persistence.ts
 var InMemoryServerPersistenceAdapter = class {
   supportsRewardStock = true;
+  supportsSecondaryStock = true;
   #locks = /* @__PURE__ */ new Map();
   #idempotent = /* @__PURE__ */ new Map();
   #states = /* @__PURE__ */ new Map();
@@ -144,9 +154,16 @@ var InMemoryServerPersistenceAdapter = class {
           params2.stockKey ?? params2.rewardId
         );
         const storedSecondaryStock = params2.secondaryStockKey === void 0 ? null : await this.getRewardStock(params2.rallyId, params2.secondaryStockKey);
+        const stock = storedStock ?? initialStock;
+        const secondaryStock = storedSecondaryStock ?? initialSecondaryStock;
+        const rewardStock2 = params2.stockKey === "__shared__" ? secondaryStock : stock;
+        const sharedStock2 = params2.stockKey === "__shared__" ? stock : null;
         const mutationResult = mutation2({
-          stock: storedStock ?? initialStock,
-          secondaryStock: storedSecondaryStock ?? initialSecondaryStock,
+          rewardStock: rewardStock2,
+          sharedStock: sharedStock2,
+          primaryStock: rewardStock2,
+          secondaryStock,
+          stock,
           claimCount: await this.getUserClaimCount(params2.rallyId, params2.userId, params2.rewardId),
           userState
         });
@@ -624,26 +641,41 @@ function initialState(config, userId, timestamp) {
     updatedAt: timestamp
   };
 }
-function rewardStock(config, rewardId, stockLimit) {
-  const configured = config.inventory?.[rewardId];
+function rewardStock(config, reward) {
+  const stockLimit = reward.stockLimit;
+  const key = reward.stockKey ?? reward.id;
+  const configured = key === "__shared__" ? config.inventory?.sharedStock : config.inventory?.[key];
   if (stockLimit === void 0) return configured ?? null;
   if (configured === void 0) return stockLimit;
   return Math.min(stockLimit, configured);
 }
 function sharedStock(config) {
-  return config.inventory?.sharedStock ?? config.inventory?.global ?? null;
+  return config.inventory?.sharedStock ?? null;
 }
 function inventoryPlan(config, rewardId, stockLimit) {
-  const individual = rewardStock(config, rewardId, stockLimit);
+  const reward = config.rewards.find((item) => item.id === rewardId);
+  const individual = reward === void 0 ? stockLimit ?? null : rewardStock(config, reward);
   const shared = sharedStock(config);
+  const explicitPrimaryKey = reward?.stockKey;
+  const explicitSecondaryKey = reward?.secondaryStockKey;
   if (config.inventoryMode === "shared" && shared !== null) {
     return {
-      primaryKey: "__shared__",
-      primaryInitial: shared,
-      ...individual === null ? {} : { secondaryKey: rewardId, secondaryInitial: individual }
+      primaryKey: explicitPrimaryKey ?? "__shared__",
+      primaryInitial: explicitPrimaryKey === void 0 ? shared : individual,
+      ...explicitSecondaryKey !== void 0 ? {
+        secondaryKey: explicitSecondaryKey,
+        secondaryInitial: config.inventory?.[explicitSecondaryKey] ?? individual
+      } : individual === null ? {} : { secondaryKey: rewardId, secondaryInitial: individual }
     };
   }
-  return { primaryKey: rewardId, primaryInitial: individual };
+  return {
+    primaryKey: explicitPrimaryKey ?? rewardId,
+    primaryInitial: individual,
+    ...explicitSecondaryKey === void 0 ? {} : {
+      secondaryKey: explicitSecondaryKey,
+      secondaryInitial: config.inventory?.[explicitSecondaryKey] ?? null
+    }
+  };
 }
 function getProof(context) {
   return context.type === "qr" ? context.token : context.type === "passcode" ? context.code : context.type === "gps" ? { latitude: context.latitude, longitude: context.longitude } : context.type === "nfc" ? context.tagId : context.value;
@@ -678,7 +710,18 @@ function operationStatus(result) {
   if (result.ok) return "ACCEPTED";
   return result.code === "CONFLICT" || result.code === "PERSISTENCE_FAILED" ? "RETRYABLE_ERROR" : "REJECTED_PERMANENT";
 }
-function withDirectIdentity(request) {
+function withDirectIdentity(request, authContext) {
+  if (authContext !== void 0) {
+    if (authContext.authenticatedUserId.trim() === "")
+      throw new RequestValidationException([
+        {
+          path: "authContext.authenticatedUserId",
+          message: "An authenticated userId is required.",
+          code: "REQUIRED"
+        }
+      ]);
+    return { ...request, userId: authContext.authenticatedUserId };
+  }
   if (request.userId !== void 0) return { ...request, userId: request.userId };
   if (request.anonymousSessionId !== void 0 && isUuidV4(request.anonymousSessionId))
     return { ...request, userId: request.anonymousSessionId };
@@ -794,22 +837,28 @@ var StampRallyServer = class {
         401
       );
     const sessionId = request.headers.get("x-anonymous-session-id");
+    const authContext = {
+      authenticatedUserId: userId,
+      ...sessionId === null ? {} : { isAnonymous: true, sessionId }
+    };
     try {
       return json({
         ok: true,
-        state: await this.syncProgress({
-          rallyId: body.data.rallyId,
-          userId,
-          ...sessionId === null ? {} : { anonymousSessionId: sessionId }
-        })
+        state: await this.syncProgress(
+          {
+            rallyId: body.data.rallyId,
+            ...sessionId === null ? {} : { anonymousSessionId: sessionId }
+          },
+          authContext
+        )
       });
     } catch (error) {
       if (error instanceof RequestValidationException) return validationResponse(error.errors);
       throw error;
     }
   }
-  async checkIn(request) {
-    const directRequest = withDirectIdentity(request);
+  async checkIn(request, authContext) {
+    const directRequest = withDirectIdentity(request, authContext);
     assertValidCheckInParams(directRequest, this.#config);
     const { userId } = directRequest;
     const key = `check-in:${request.rallyId}:${userId}:${request.idempotencyKey}`;
@@ -942,8 +991,8 @@ var StampRallyServer = class {
       await this.#persistence.releaseLock(request.rallyId, lockKey);
     }
   }
-  async claimReward(request) {
-    const directRequest = withDirectIdentity(request);
+  async claimReward(request, authContext) {
+    const directRequest = withDirectIdentity(request, authContext);
     assertValidClaimParams(directRequest, this.#config);
     const { userId } = directRequest;
     const key = `claim:${request.rallyId}:${userId}:${request.rewardId}:${request.idempotencyKey}`;
@@ -961,13 +1010,16 @@ var StampRallyServer = class {
         now(this.#options)
       );
     const plan = inventoryPlan(this.#config, reward.id, reward.stockLimit);
-    if (rewardStock(this.#config, reward.id, reward.stockLimit) !== null && (this.#persistence.supportsRewardStock === false || typeof this.#persistence.getRewardStock !== "function"))
+    if (plan.secondaryKey !== void 0 && this.#persistence.supportsSecondaryStock !== true)
+      throw new Error("SECONDARY_STOCK_UNSUPPORTED");
+    const inventoryEnabled = plan.primaryInitial !== null || plan.secondaryInitial !== void 0 && plan.secondaryInitial !== null;
+    if (inventoryEnabled && (this.#persistence.supportsRewardStock === false || typeof this.#persistence.getRewardStock !== "function" || typeof this.#persistence.executeClaimRewardTransaction !== "function"))
       return this.#rememberClaim(
         key,
         {
           ok: false,
-          code: "INVENTORY_NOT_SUPPORTED",
-          message: "This persistence adapter cannot store per-reward inventory."
+          code: "INVENTORY_STORAGE_NOT_IMPLEMENTED",
+          message: "This persistence adapter cannot atomically store inventory."
         },
         directRequest,
         now(this.#options)
@@ -994,7 +1046,7 @@ var StampRallyServer = class {
           rewardId: reward.id,
           stockKey: plan.primaryKey,
           ...plan.secondaryKey === void 0 ? {} : { secondaryStockKey: plan.secondaryKey },
-          rewardStockLimit: rewardStock(this.#config, reward.id, reward.stockLimit),
+          rewardStockLimit: rewardStock(this.#config, reward),
           sharedStockLimit: this.#config.inventoryMode === "shared" ? sharedStock(this.#config) : null,
           initialStock: plan.primaryInitial,
           ...plan.secondaryInitial === void 0 ? {} : { initialSecondaryStock: plan.secondaryInitial },
@@ -1098,11 +1150,11 @@ var StampRallyServer = class {
       const response = responseHolder.value;
       if (!result.success) {
         if (response !== null && !response.ok && response.code === result.error) return response;
-        if (result.error === "INVENTORY_NOT_SUPPORTED")
+        if (result.error === "INVENTORY_STORAGE_NOT_IMPLEMENTED")
           return {
             ok: false,
-            code: "INVENTORY_NOT_SUPPORTED",
-            message: "This persistence adapter cannot store per-reward inventory."
+            code: "INVENTORY_STORAGE_NOT_IMPLEMENTED",
+            message: "This persistence adapter cannot atomically store inventory."
           };
         return {
           ok: false,
@@ -1126,21 +1178,24 @@ var StampRallyServer = class {
       await this.#persistence.releaseLock(request.rallyId, lockKey);
     }
   }
-  async sync(rallyId, userId) {
+  async sync(rallyId, identity) {
+    const userId = typeof identity === "string" ? identity : identity.authenticatedUserId;
     assertValidSyncParams({ rallyId, userId }, this.#config);
     const state2 = await this.#persistence.getUserState(rallyId, userId) ?? initialState(this.#config, userId, now(this.#options));
     return this.#attachInventory(state2);
   }
-  async syncProgress(request) {
-    const directRequest = withDirectIdentity(request);
+  async syncProgress(request, authContext) {
+    const directRequest = withDirectIdentity(request, authContext);
     assertValidSyncParams(directRequest, this.#config);
-    return this.sync(directRequest.rallyId, directRequest.userId);
+    return this.sync(directRequest.rallyId, authContext);
   }
   async #attachInventory(state2) {
     const rewardRemaining = {};
     for (const reward of this.#config.rewards) {
       const plan = inventoryPlan(this.#config, reward.id, reward.stockLimit);
       if (plan.secondaryKey !== void 0) {
+        if (this.#persistence.supportsSecondaryStock !== true)
+          throw new Error("SECONDARY_STOCK_UNSUPPORTED");
         const stock = await this.#persistence.getRewardStock(state2.rallyId, plan.secondaryKey);
         const remaining = stock ?? plan.secondaryInitial ?? null;
         if (remaining !== null) rewardRemaining[reward.id] = Math.max(0, remaining);
@@ -1310,6 +1365,15 @@ async function runPersistenceAdapterComplianceTests(createAdapter) {
     await adapter.getRewardStock("compliance-rally", "reward") === 0,
     "per-reward stock was not decremented atomically"
   );
+  const exhausted = await adapter.executeClaimRewardTransaction(
+    params("carol", "boundary"),
+    mutation
+  );
+  assert(!exhausted.success, "a zero-stock claim was accepted");
+  assert(
+    await adapter.getRewardStock("compliance-rally", "__shared__") === 0 && await adapter.getRewardStock("compliance-rally", "reward") === 0,
+    "zero-stock rejection did not preserve both stock boundaries"
+  );
   const idempotentAdapter = await createAdapter();
   const idempotentParams = params("alice", "same-key");
   const firstClaim = await idempotentAdapter.executeClaimRewardTransaction(
@@ -1325,6 +1389,10 @@ async function runPersistenceAdapterComplianceTests(createAdapter) {
     await idempotentAdapter.getRewardStock("compliance-rally", "__shared__") === 0,
     "idempotent retry decremented shared stock twice"
   );
+  assert(
+    await idempotentAdapter.getRewardStock("compliance-rally", "reward") === 0,
+    "idempotent retry decremented per-reward stock twice"
+  );
   const rollbackAdapter = await createAdapter();
   const rollbackParams = params("alice", "rollback");
   const rollback = await rollbackAdapter.executeClaimRewardTransaction(rollbackParams, () => {