@tokenoftrust/storefront-runner 2.4.12 → 2.4.14

package/agency-kit/tools/lib/catalog-model/model.mjs

@@ -91,6 +91,15 @@ export const CATALOG_MODEL = {
       "locale?": "string",
       accepted_at: "string",
       facts: "CatalogFact[]",
+      "setup_policy?": "CatalogSetupProvenance",
+    },
+  },
+  CatalogSetupPriceAcceptance: { fields: { engine_version: "string", policy_revision: "number", value: "number", input: "Record<string, unknown>" } },
+  CatalogSetupSkuAcceptance: { fields: { engine_version: "string", policy_revision: "number", value: "string", input: "Record<string, unknown>" } },
+  CatalogSetupProvenance: {
+    fields: {
+      tenant_id: "string", currency: "Currency",
+      "pricing?": "CatalogSetupPriceAcceptance", "sku?": "CatalogSetupSkuAcceptance",
     },
   },
   CatalogOverrideField: { alias: '"title" | "description_html" | "images" | "vendor" | "product_type"' },

package/apps/storefront/src/components/islands/VariantSelector.tsx

@@ -29,6 +29,23 @@ import { priceForPurchaseOption } from "@tot/public-runtime";
 import { formatPrice } from "@/lib/format";
 import { useCheckoutHandoffCorrelation } from "@/components/islands/useCheckoutHandoffCorrelation";
 
+export type PublicSelectorVariant = Pick<CatalogVariant,
+  "id" | "sku" | "price" | "compare_at_price" | "option_values" | "inventory" | "image_id">;
+
+/** An explicit allowlist also excludes future internal variant fields from Astro hydration. */
+export function publicSelectorVariants(variants: readonly CatalogVariant[]): PublicSelectorVariant[] {
+  return variants.map((variant) => ({
+    id: variant.id,
+    ...(variant.sku !== undefined ? { sku: variant.sku } : {}),
+    price: variant.price,
+    ...(variant.compare_at_price !== undefined ? { compare_at_price: variant.compare_at_price } : {}),
+    option_values: { ...variant.option_values },
+    inventory: { available: variant.inventory.available,
+      ...(variant.inventory.quantity !== undefined ? { quantity: variant.inventory.quantity } : {}) },
+    ...(variant.image_id !== undefined ? { image_id: variant.image_id } : {}),
+  }));
+}
+
 interface OptionDef {
   name: string;
   position: number;
@@ -36,7 +53,7 @@ interface OptionDef {
 }
 
 interface Props {
-  variants: CatalogVariant[];
+  variants: PublicSelectorVariant[];
   options: OptionDef[];
   currency: string;
   locale?: string;
@@ -77,14 +94,14 @@ const LOW_STOCK_THRESHOLD = 5;
 
 type Selection = Record<string, string>;
 
-function variantMatches(v: CatalogVariant, sel: Selection): boolean {
+function variantMatches(v: PublicSelectorVariant, sel: Selection): boolean {
   return Object.entries(sel).every(([name, value]) => v.option_values[name] === value);
 }
 
 function findVariant(
-  variants: CatalogVariant[],
+  variants: PublicSelectorVariant[],
   sel: Selection,
-): CatalogVariant | undefined {
+): PublicSelectorVariant | undefined {
   return variants.find((v) => variantMatches(v, sel));
 }
 

package/apps/storefront/src/lib/admin/productsTabClient.ts

@@ -14,7 +14,7 @@ interface UpdatesResponse {
   ok: boolean;
   message?: string;
   updates: Array<{ title: string; acceptedRevisionId: string; latestRevisionId: string }>;
-  unchecked?: string[];
+  unavailable?: Array<{ title: string; message: string }>;
   request?: Record<string, unknown>;
   plan: { products: UpdatePlanProduct[] } | null;
   planFailure?: { message?: string; pinFailures?: Array<{ message: string }> };
@@ -81,8 +81,8 @@ export function initProductsTab(root: HTMLElement): void {
         return;
       }
       const nodes: Node[] = [];
-      if (body.unchecked?.length) {
-        nodes.push(el("p", { class: "subtle" }, `${body.unchecked.length} listed package(s) could not be checked against the catalog's latest revision.`));
+      if (body.unavailable?.length) {
+        nodes.push(el("p", { class: "subtle" }, `Not checked: ${body.unavailable.map((u) => `${u.title} (${u.message})`).join("; ")}.`));
       }
       if (body.updates.length === 0) {
         nodes.push(el("p", {}, "Every listed package is at the catalog's latest revision."));

package/apps/storefront/src/lib/apps/orders/foxyOrderClient.ts

@@ -124,7 +124,9 @@ export class HttpFoxyOrderClient implements FoxyOrderClient {
     if (!config.apiKey) throw new FoxyOrderClientError("foxyOrderClient: FOXY_ORDER_API_KEY is not configured");
     this.baseUrl = config.baseUrl.replace(/\/+$/, "");
     this.apiKey = config.apiKey;
-    this.fetchImpl = config.fetchImpl ?? fetch;
+    // Called unbound: the Workers runtime refuses fetch invoked with any `this` but the global.
+    const doFetch = config.fetchImpl ?? fetch;
+    this.fetchImpl = (input, init) => doFetch(input, init);
     this.timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;
   }
 

package/apps/storefront/src/pages/products/[handle].astro

@@ -12,7 +12,7 @@ import Badge from "@/components/Badge.astro";
 import ProductCard from "@/components/ProductCard.astro";
 import Section from "@/components/Section.astro";
 import ImageGallery from "@/components/islands/ImageGallery.tsx";
-import VariantSelector from "@/components/islands/VariantSelector.tsx";
+import VariantSelector, { publicSelectorVariants } from "@/components/islands/VariantSelector.tsx";
 import CheckoutComplianceGate from "@/components/islands/CheckoutComplianceGate.tsx";
 import RecentlyViewed from "@/components/islands/RecentlyViewed.tsx";
 import NicotineWarning from "@/components/compliance/NicotineWarning.astro";
@@ -361,7 +361,7 @@ const jsonLd = [productJsonLd, breadcrumbLd(crumbs, canonicalBase)];
       <div class="mt-7">
         <VariantSelector
           client:load
-          variants={product.variants}
+          variants={publicSelectorVariants(product.variants)}
           options={product.options}
           currency={product.price_range.currency}
           locale={tenant.locale}

package/apps/storefront/src/pages/style-guide/[tenant]/[theme].astro

@@ -68,7 +68,7 @@ import HowItWorksSteps from "@/components/subscription/HowItWorksSteps.astro";
 import SavingsExplainer from "@/components/subscription/SavingsExplainer.astro";
 import ManageSubscriptionEntry from "@/components/subscription/ManageSubscriptionEntry.astro";
 import AgeGate from "@/components/islands/AgeGate.tsx";
-import VariantSelector from "@/components/islands/VariantSelector.tsx";
+import VariantSelector, { publicSelectorVariants } from "@/components/islands/VariantSelector.tsx";
 import QuickView from "@/components/islands/QuickView.tsx";
 import SearchTypeahead from "@/components/islands/SearchTypeahead.tsx";
 import MobileNav from "@/components/islands/MobileNav.tsx";
@@ -1424,7 +1424,7 @@ const componentVarsInline = [
         <p class="sg-cap" style="margin:22px 0 8px">VariantSelector — PDP option picker (radiogroup + live price/SKU/stock region)</p>
         <VariantSelector
           client:load
-          variants={sampleFromProduct.variants}
+          variants={publicSelectorVariants(sampleFromProduct.variants)}
           options={sampleFromProduct.options}
           currency={sampleFromProduct.price_range.currency}
           locale="en-US"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "2.4.12",
+  "version": "2.4.14",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",

package/packages/public-runtime/src/product.ts

@@ -168,6 +168,31 @@ export interface CatalogLink {
   /** ISO 8601. */
   accepted_at: string;
   facts: CatalogFact[];
+  /** Server-verified defaults adopted by the merchant; replayable without the current policy. */
+  setup_policy?: CatalogSetupProvenance;
+}
+
+export interface CatalogSetupPriceAcceptance {
+  engine_version: string;
+  policy_revision: number;
+  value: number;
+  /** Producer schema validated settings, source facts and resolved sample. */
+  input: Record<string, unknown>;
+}
+
+export interface CatalogSetupSkuAcceptance {
+  engine_version: string;
+  policy_revision: number;
+  value: string;
+  /** Producer schema validated settings and identity/attribute inputs. */
+  input: Record<string, unknown>;
+}
+
+export interface CatalogSetupProvenance {
+  tenant_id: string;
+  currency: Currency;
+  pricing?: CatalogSetupPriceAcceptance;
+  sku?: CatalogSetupSkuAcceptance;
 }
 
 /** Product fields a merchant set away from the accepted catalog content. */