@tokenoftrust/storefront-runner 2.4.47 → 2.4.49

package/apps/storefront/migrations-apps/0016_scrappy_commerce_contract.sql

@@ -0,0 +1,166 @@
+-- Commerce orders, inbox/outbox, allocations, label purchases, and shipment audit.
+-- Tenant and stage are on every row. Money is integer minor units.
+-- The SQL directory is the apply set. One transaction per file.
+CREATE TABLE `scrappy_commerce_orders` (
+  `tenant_id` text NOT NULL,
+  `stage` text NOT NULL CHECK (stage IN ('preview', 'publication')),
+  `order_id` text NOT NULL,
+  `source` text NOT NULL,
+  `source_order_id` text NOT NULL,
+  `currency` text NOT NULL,
+  `placed_at` text NOT NULL,
+  `payment_state` text NOT NULL CHECK (payment_state IN ('UNKNOWN', 'pending', 'authorized', 'captured', 'capture_unknown', 'voided', 'refund_requested', 'refunded', 'refund_unknown')),
+  `compliance_state` text NOT NULL CHECK (compliance_state IN ('UNKNOWN', 'pending', 'fresh', 'stale', 'unreadable', 'refused')),
+  `stock_state` text NOT NULL CHECK (stock_state IN ('UNKNOWN', 'unallocated', 'reserved', 'confirmed', 'released', 'expired')),
+  `fulfillment_state` text NOT NULL CHECK (fulfillment_state IN ('UNKNOWN', 'held', 'ready', 'handed_off', 'cancelled')),
+  `label_state` text NOT NULL CHECK (label_state IN ('UNKNOWN', 'none', 'intent', 'purchased', 'printed', 'void_requested', 'voided')),
+  `amount_minor` integer NOT NULL CHECK (amount_minor >= 0),
+  `event_version` integer NOT NULL CHECK (event_version >= 1),
+  PRIMARY KEY (`tenant_id`, `stage`, `order_id`)
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `uq_scrappy_commerce_source_order`
+  ON `scrappy_commerce_orders` (`tenant_id`, `stage`, `source`, `source_order_id`);
+--> statement-breakpoint
+CREATE TABLE `scrappy_order_addresses` (
+  `tenant_id` text NOT NULL,
+  `stage` text NOT NULL CHECK (stage IN ('preview', 'publication')),
+  `order_id` text NOT NULL,
+  `address_json` text NOT NULL,
+  PRIMARY KEY (`tenant_id`, `stage`, `order_id`),
+  FOREIGN KEY (`tenant_id`, `stage`, `order_id`) REFERENCES `scrappy_commerce_orders` (`tenant_id`, `stage`, `order_id`)
+);
+--> statement-breakpoint
+CREATE TABLE `scrappy_commerce_inbox` (
+  `tenant_id` text NOT NULL,
+  `stage` text NOT NULL CHECK (stage IN ('preview', 'publication')),
+  `source` text NOT NULL,
+  `source_event_id` text NOT NULL,
+  `event_version` integer NOT NULL CHECK (event_version >= 1),
+  `idempotency_key` text NOT NULL,
+  `payload_digest` text NOT NULL,
+  `received_at` text NOT NULL,
+  PRIMARY KEY (`tenant_id`, `stage`, `source`, `source_event_id`)
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `uq_scrappy_inbox_idempotency`
+  ON `scrappy_commerce_inbox` (`tenant_id`, `stage`, `idempotency_key`);
+--> statement-breakpoint
+CREATE TABLE `scrappy_commerce_outbox` (
+  `outbox_id` text NOT NULL,
+  `tenant_id` text NOT NULL,
+  `stage` text NOT NULL CHECK (stage IN ('preview', 'publication')),
+  `order_id` text NOT NULL,
+  `source` text NOT NULL,
+  `source_event_id` text NOT NULL,
+  `event_version` integer NOT NULL CHECK (event_version >= 1),
+  `event_type` text NOT NULL,
+  `payload` text NOT NULL,
+  `available_at` text NOT NULL,
+  `attempt_count` integer NOT NULL DEFAULT 0 CHECK (attempt_count >= 0),
+  `state` text NOT NULL CHECK (state IN ('pending', 'delivered', 'dead')),
+  PRIMARY KEY (`outbox_id`),
+  UNIQUE (`tenant_id`, `stage`, `source`, `source_event_id`)
+);
+--> statement-breakpoint
+CREATE INDEX `idx_scrappy_outbox_due`
+  ON `scrappy_commerce_outbox` (`state`, `available_at`);
+--> statement-breakpoint
+CREATE TABLE `scrappy_allocations` (
+  `tenant_id` text NOT NULL,
+  `stage` text NOT NULL CHECK (stage IN ('preview', 'publication')),
+  `order_id` text NOT NULL,
+  `sku` text NOT NULL,
+  `location_id` text NOT NULL,
+  `quantity` integer NOT NULL CHECK (quantity > 0),
+  `state` text NOT NULL CHECK (state IN ('reserved', 'confirmed', 'released', 'expired')),
+  PRIMARY KEY (`tenant_id`, `stage`, `order_id`, `sku`, `location_id`),
+  FOREIGN KEY (`tenant_id`, `stage`, `order_id`) REFERENCES `scrappy_commerce_orders` (`tenant_id`, `stage`, `order_id`)
+);
+--> statement-breakpoint
+CREATE TABLE `scrappy_final_cart_authorizations` (
+  `tenant_id` text NOT NULL,
+  `stage` text NOT NULL CHECK (stage IN ('preview', 'publication')),
+  `authorization_id` text NOT NULL,
+  `cart_digest` text NOT NULL,
+  `expires_at` text NOT NULL,
+  `state` text NOT NULL CHECK (state IN ('active', 'consumed', 'expired', 'denied')),
+  PRIMARY KEY (`tenant_id`, `stage`, `authorization_id`)
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `uq_scrappy_active_final_cart`
+  ON `scrappy_final_cart_authorizations` (`tenant_id`, `stage`, `cart_digest`)
+  WHERE `state` = 'active';
+--> statement-breakpoint
+CREATE TABLE `scrappy_provider_operations` (
+  `tenant_id` text NOT NULL,
+  `stage` text NOT NULL CHECK (stage IN ('preview', 'publication')),
+  `provider` text NOT NULL,
+  `purchase_id` text NOT NULL,
+  `order_id` text NOT NULL,
+  `kind` text NOT NULL CHECK (kind IN ('label_purchase', 'payment_capture', 'refund')),
+  `outcome` text NOT NULL CHECK (outcome IN ('intent', 'accepted', 'unknown', 'voided', 'refunded')),
+  `amount_minor` integer NOT NULL CHECK (amount_minor >= 0),
+  PRIMARY KEY (`tenant_id`, `stage`, `provider`, `purchase_id`),
+  FOREIGN KEY (`tenant_id`, `stage`, `order_id`) REFERENCES `scrappy_commerce_orders` (`tenant_id`, `stage`, `order_id`)
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `uq_scrappy_open_label_purchase`
+  ON `scrappy_provider_operations` (`tenant_id`, `stage`, `order_id`)
+  WHERE `kind` = 'label_purchase' AND `outcome` IN ('intent', 'accepted', 'unknown');
+--> statement-breakpoint
+CREATE TABLE `scrappy_shipments` (
+  `tenant_id` text NOT NULL,
+  `stage` text NOT NULL CHECK (stage IN ('preview', 'publication')),
+  `order_id` text NOT NULL,
+  `scope` text NOT NULL CHECK (scope = 'whole-order'),
+  `label_purchase_state` text NOT NULL CHECK (label_purchase_state IN ('none', 'intent', 'purchased', 'void_requested', 'voided', 'unknown')),
+  `label_print_state` text NOT NULL CHECK (label_print_state IN ('none', 'printed')),
+  `handoff_state` text NOT NULL CHECK (handoff_state IN ('none', 'handed_off', 'unknown')),
+  CHECK (handoff_state = 'none' OR label_purchase_state = 'purchased'),
+  CHECK (label_print_state = 'none' OR label_purchase_state = 'purchased'),
+  PRIMARY KEY (`tenant_id`, `stage`, `order_id`),
+  FOREIGN KEY (`tenant_id`, `stage`, `order_id`) REFERENCES `scrappy_commerce_orders` (`tenant_id`, `stage`, `order_id`)
+);
+--> statement-breakpoint
+CREATE TABLE `scrappy_shipment_audit` (
+  `audit_id` text NOT NULL,
+  `tenant_id` text NOT NULL,
+  `stage` text NOT NULL CHECK (stage IN ('preview', 'publication')),
+  `order_id` text NOT NULL,
+  `at` text NOT NULL,
+  `actor_id` text NOT NULL,
+  `kind` text NOT NULL,
+  `from_state` text NOT NULL,
+  `to_state` text NOT NULL,
+  PRIMARY KEY (`audit_id`),
+  FOREIGN KEY (`tenant_id`, `stage`, `order_id`) REFERENCES `scrappy_commerce_orders` (`tenant_id`, `stage`, `order_id`)
+);
+--> statement-breakpoint
+CREATE TRIGGER `scrappy_shipment_audit_no_update`
+BEFORE UPDATE ON `scrappy_shipment_audit`
+BEGIN
+  SELECT RAISE(ABORT, 'append-only');
+END;
+--> statement-breakpoint
+CREATE TRIGGER `scrappy_shipment_audit_no_delete`
+BEFORE DELETE ON `scrappy_shipment_audit`
+BEGIN
+  SELECT RAISE(ABORT, 'append-only');
+END;
+--> statement-breakpoint
+CREATE TABLE `scrappy_caller_replay` (
+  `tenant_id` text NOT NULL,
+  `stage` text NOT NULL CHECK (stage IN ('preview', 'publication')),
+  `issuer` text NOT NULL,
+  `jti` text NOT NULL,
+  `seen_at` text NOT NULL,
+  PRIMARY KEY (`tenant_id`, `stage`, `issuer`, `jti`)
+);
+--> statement-breakpoint
+CREATE TABLE `scrappy_sweep_cursor` (
+  `tenant_id` text NOT NULL,
+  `stage` text NOT NULL CHECK (stage IN ('preview', 'publication')),
+  `cursor` text NOT NULL,
+  PRIMARY KEY (`tenant_id`, `stage`)
+);

package/apps/storefront/src/lib/http/fetchTransport.ts

@@ -45,7 +45,12 @@ export class FetchHttpTransport implements HttpTransport, HttpGetTransport {
   async post(url: string, headers: Record<string, string>, body: unknown): Promise<HttpResponseLike> {
     const res = await fetch(url, {
       method: "POST",
-      headers: { ...this.defaultHeaders, ...headers },
+      // `post()` always JSON.stringify()s the body below, so every call sends JSON —
+      // declare it by default rather than leaving a caller that forgets its own
+      // `content-type` to silently send an unparseable body (the receiving server's
+      // JSON body-parser skips a request with no/wrong content-type and sees an empty
+      // body). A per-call or per-transport header of the same name still wins.
+      headers: { "content-type": "application/json", ...this.defaultHeaders, ...headers },
       body: JSON.stringify(body),
       signal: this.signal(),
     });

package/apps/storefront/src/lib/http/mcpServiceCall.ts

@@ -80,6 +80,9 @@ export async function callMcpService(req: McpServiceRequest): Promise<McpService
     );
     return { kind: "misconfigured", status: res.status, reason };
   }
-  if (res.status < 200 || res.status >= 300) return { kind: "http-error", status: res.status };
+  if (res.status < 200 || res.status >= 300) {
+    console.error(`[mcp-service-seam] ${req.method} ${req.path} answered ${res.status}`);
+    return { kind: "http-error", status: res.status };
+  }
   return { kind: "ok", status: res.status, json: () => res.json() };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "2.4.47",
+  "version": "2.4.49",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",