@tokenoftrust/storefront-runner 2.4.55 → 2.4.57

package/apps/storefront/package.json

@@ -48,6 +48,7 @@
     "drizzle-kit": "^0.31.10",
     "drizzle-orm": "^0.45.2",
     "esbuild": "0.28.1",
+    "happy-dom": "20.11.2",
     "tsx": "^4.22.4",
     "typescript": "^5.6.3",
     "vitest": "2.1.8",

package/apps/storefront/src/pages/api/admin/commerce-readiness.ts

@@ -0,0 +1,145 @@
+/**
+ * GET/POST /api/admin/commerce-readiness
+ *
+ * Phase 1: the client fulfills in their own carrier account. This route reports
+ * whether order and payment reconcile has been exercised. It does not read an
+ * order row, write a payment, or call a carrier. Postage is not a result.
+ *
+ * The exercised comparison is scripts/commerce/scrappy-reconcile.mjs. This
+ * surface has no ledger, so configured, absent, and unreadable stay unhealthy.
+ */
+import type { APIContext } from "astro";
+import { requireAdminApiEntry } from "@/lib/auth/adminApiGuard";
+import { workerCommit } from "@/lib/activity/workerCommit";
+import { readEnv } from "@/lib/env";
+import {
+  COMMERCE_SCHEDULER,
+  actorMayCommand,
+  decideCommerceCommand,
+  type CommerceEvidence,
+  type CommerceStage,
+} from "@tot/public-runtime";
+
+export const prerender = false;
+
+const JSON_HEADERS = {
+  "content-type": "application/json; charset=utf-8",
+  "cache-control": "no-store",
+  "x-robots-tag": "noindex, nofollow",
+};
+
+const READINESS = ["configured-only", "exercised", "stale", "failed", "absent", "unreadable"] as const;
+type Readiness = (typeof READINESS)[number];
+
+export interface CommerceReadinessReport {
+  schema: "scrappy-reconcile-v1";
+  readiness: Readiness;
+  healthy: boolean;
+  sourceSha: string | null;
+  deployedSha: string | null;
+  watermark: { asOf: string; source: { cursor: string | null }; tot: { cursor: string | null } } | null;
+  orderCount: number | null;
+  capturedMinor: number | null;
+  refundedMinor: number | null;
+  labelAndPostageCompared: false;
+  discrepancies: { code: string; id: string; owner: string }[] | null;
+  owner: "owner";
+}
+
+const EVIDENCE: CommerceEvidence = { verification: "UNKNOWN", tax: "UNKNOWN", risk: "UNKNOWN", stock: "UNKNOWN" };
+const REPLAY_KEYS = new Set(["kind", "orderId", "sourceEventId", "stage"]);
+const OPAQUE = /^[A-Za-z0-9:_-]{1,80}$/;
+
+function json(body: unknown, status = 200): Response {
+  return new Response(JSON.stringify(body), { status, headers: JSON_HEADERS });
+}
+
+export function projectAdminReadiness(input: {
+  scheduler: string | undefined;
+  deployedSha: string;
+}): CommerceReadinessReport {
+  const configured = input.scheduler === COMMERCE_SCHEDULER;
+  const deployedSha = input.deployedSha.length > 0 ? input.deployedSha : null;
+  const readiness: Readiness = deployedSha === null ? "unreadable" : configured ? "configured-only" : "absent";
+  return {
+    schema: "scrappy-reconcile-v1",
+    readiness,
+    healthy: false,
+    sourceSha: null,
+    deployedSha,
+    watermark: null,
+    orderCount: null,
+    capturedMinor: null,
+    refundedMinor: null,
+    labelAndPostageCompared: false,
+    discrepancies: readiness === "unreadable" ? null : [],
+    owner: "owner",
+  };
+}
+
+function replayStage(value: unknown): CommerceStage | null {
+  return value === "preview" || value === "publication" ? value : null;
+}
+
+export function admitAdminReplay(input: {
+  tenantId: string;
+  stage: CommerceStage;
+  kind: "order" | "refund";
+}): { admitted: boolean; reason: "admitted" | "denied" | "refused" } {
+  const actor = { role: "owner" as const, tenantId: input.tenantId, stage: input.stage };
+  const resource = { tenantId: input.tenantId, stage: input.stage };
+  if (!actorMayCommand(actor, resource)) return { admitted: false, reason: "denied" };
+  const decision = decideCommerceCommand({
+    command: "reconcile",
+    payment: input.kind === "refund" ? "refund_unknown" : "captured",
+    stock: "UNKNOWN",
+    fulfillment: "UNKNOWN",
+    label: "none",
+    evidence: EVIDENCE,
+    providerOutcome: null,
+  });
+  if (!decision.admit || decision.restock !== false || decision.blindRepurchase !== false) {
+    return { admitted: false, reason: "refused" };
+  }
+  return { admitted: true, reason: "admitted" };
+}
+
+export async function GET(context: APIContext): Promise<Response> {
+  const access = await requireAdminApiEntry(context, { requireOwner: true });
+  if (!access.ok) return json({ ok: false, reason: access.reason }, access.status);
+  const scheduler = await readEnv("SCRAPPY_COMMERCE_SCHEDULER");
+  return json({ ok: true, report: projectAdminReadiness({ scheduler, deployedSha: workerCommit() }) });
+}
+
+export async function POST(context: APIContext): Promise<Response> {
+  const access = await requireAdminApiEntry(context, { requireOwner: true });
+  if (!access.ok) return json({ ok: false, reason: access.reason }, access.status);
+  const text = await context.request.text();
+  if (text.length > 2000) return json({ ok: false, reason: "refused" }, 400);
+  let body: unknown;
+  try {
+    body = JSON.parse(text);
+  } catch {
+    return json({ ok: false, reason: "refused" }, 400);
+  }
+  if (body === null || typeof body !== "object" || Array.isArray(body)) return json({ ok: false, reason: "refused" }, 400);
+  const record = body as Record<string, unknown>;
+  if (Object.keys(record).some((key) => !REPLAY_KEYS.has(key))) return json({ ok: false, reason: "refused" }, 400);
+  const stage = replayStage(record.stage);
+  const kind = record.kind === "order" || record.kind === "refund" ? record.kind : null;
+  if (!stage || !kind || typeof record.orderId !== "string" || typeof record.sourceEventId !== "string") {
+    return json({ ok: false, reason: "refused" }, 400);
+  }
+  if (!OPAQUE.test(record.orderId) || !OPAQUE.test(record.sourceEventId)) return json({ ok: false, reason: "refused" }, 400);
+  const decision = admitAdminReplay({ tenantId: context.locals.tenant.tenant_id, stage, kind });
+  if (!decision.admitted) return json({ ok: false, reason: decision.reason }, 403);
+  const scheduler = await readEnv("SCRAPPY_COMMERCE_SCHEDULER");
+  return json({
+    ok: true,
+    admitted: true,
+    durableWrite: false,
+    command: "reconcile",
+    reason: decision.reason,
+    report: projectAdminReadiness({ scheduler, deployedSha: workerCommit() }),
+  });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "2.4.55",
+  "version": "2.4.57",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",

package/pnpm-lock.runner.yaml

@@ -87,7 +87,7 @@ importers:
         version: 4.12.1(playwright-core@1.61.1)
       '@cloudflare/vitest-pool-workers':
         specifier: 0.12.21
-        version: 0.12.21(@vitest/runner@2.1.9)(@vitest/snapshot@2.1.9)(vitest@2.1.8(@types/node@24.13.3)(happy-dom@20.10.6)(lightningcss@1.32.0))
+        version: 0.12.21(@vitest/runner@2.1.9)(@vitest/snapshot@2.1.9)(vitest@2.1.8(@types/node@24.13.3)(happy-dom@20.11.2)(lightningcss@1.32.0))
       '@playwright/test':
         specifier: ^1.61.1
         version: 1.61.1
@@ -106,6 +106,9 @@ importers:
       esbuild:
         specifier: 0.28.1
         version: 0.28.1
+      happy-dom:
+        specifier: 20.11.2
+        version: 20.11.2
       tsx:
         specifier: ^4.22.4
         version: 4.22.4
@@ -114,7 +117,7 @@ importers:
         version: 5.9.3
       vitest:
         specifier: 2.1.8
-        version: 2.1.8(@types/node@24.13.3)(happy-dom@20.10.6)(lightningcss@1.32.0)
+        version: 2.1.8(@types/node@24.13.3)(happy-dom@20.11.2)(lightningcss@1.32.0)
       wrangler:
         specifier: ^4.105.0
         version: 4.105.0
@@ -139,7 +142,7 @@ importers:
         version: 5.9.3
       vitest:
         specifier: ^2.1.8
-        version: 2.1.8(@types/node@24.13.3)(happy-dom@20.10.6)(lightningcss@1.32.0)
+        version: 2.1.8(@types/node@24.13.3)(happy-dom@20.11.2)(lightningcss@1.32.0)
 
 packages:
 
@@ -2789,8 +2792,8 @@ packages:
   h3@1.15.11:
     resolution: {integrity: sha512-L3THSe2MPeBwgIZVSH5zLdBBU90TOxarvhK9d04IDY2AmVS8j2Jz2LIWtwsGOU3lu2I5jCN7FNvVfY2+XyF+mg==}
 
-  happy-dom@20.10.6:
-    resolution: {integrity: sha512-6QD0ilzDDt93tX44y8tbmZdAcdTRYDhUP+Asgi6pC8Pp5IA3cvaZGyoVN/EGtlq9ziT65iPuBBn3ASLr6hCgVw==}
+  happy-dom@20.11.2:
+    resolution: {integrity: sha512-7MB+bJLkxu3SowAfBJbjW+c55kNz5tkR45gu2qzrxznezhLeN5YIlJbwUgSzlGc+qWoZ8Ykg71H5ezz69xixrw==}
     engines: {node: '>=20.0.0'}
 
   has-flag@4.0.0:
@@ -4437,14 +4440,14 @@ snapshots:
       - utf-8-validate
       - workerd
 
-  '@cloudflare/vitest-pool-workers@0.12.21(@vitest/runner@2.1.9)(@vitest/snapshot@2.1.9)(vitest@2.1.8(@types/node@24.13.3)(happy-dom@20.10.6)(lightningcss@1.32.0))':
+  '@cloudflare/vitest-pool-workers@0.12.21(@vitest/runner@2.1.9)(@vitest/snapshot@2.1.9)(vitest@2.1.8(@types/node@24.13.3)(happy-dom@20.11.2)(lightningcss@1.32.0))':
     dependencies:
       '@vitest/runner': 2.1.9
       '@vitest/snapshot': 2.1.9
       cjs-module-lexer: 1.4.3
       esbuild: 0.27.3
       miniflare: 4.20260310.0
-      vitest: 2.1.8(@types/node@24.13.3)(happy-dom@20.10.6)(lightningcss@1.32.0)
+      vitest: 2.1.8(@types/node@24.13.3)(happy-dom@20.11.2)(lightningcss@1.32.0)
       wrangler: 4.72.0
     transitivePeerDependencies:
       - '@cloudflare/workers-types'
@@ -5372,11 +5375,11 @@ snapshots:
       '@tiptap/extension-text': 3.27.1(@tiptap/core@3.27.1(@tiptap/pm@3.27.1))
       '@tiptap/extension-text-style': 3.27.1(@tiptap/core@3.27.1(@tiptap/pm@3.27.1))
       '@tiptap/extension-underline': 3.27.1(@tiptap/core@3.27.1(@tiptap/pm@3.27.1))
-      '@tiptap/html': 3.27.1(@tiptap/core@3.27.1(@tiptap/pm@3.27.1))(@tiptap/pm@3.27.1)(happy-dom@20.10.6)
+      '@tiptap/html': 3.27.1(@tiptap/core@3.27.1(@tiptap/pm@3.27.1))(@tiptap/pm@3.27.1)(happy-dom@20.11.2)
       '@tiptap/pm': 3.27.1
       '@tiptap/suggestion': 3.27.1(@floating-ui/dom@1.7.6)(@tiptap/core@3.27.1(@tiptap/pm@3.27.1))(@tiptap/pm@3.27.1)
       emojibase: 17.0.0
-      happy-dom: 20.10.6
+      happy-dom: 20.11.2
       markdown-it: 14.2.0
     transitivePeerDependencies:
       - '@floating-ui/dom'
@@ -5558,11 +5561,11 @@ snapshots:
     dependencies:
       '@tiptap/core': 3.27.1(@tiptap/pm@3.27.1)
 
-  '@tiptap/html@3.27.1(@tiptap/core@3.27.1(@tiptap/pm@3.27.1))(@tiptap/pm@3.27.1)(happy-dom@20.10.6)':
+  '@tiptap/html@3.27.1(@tiptap/core@3.27.1(@tiptap/pm@3.27.1))(@tiptap/pm@3.27.1)(happy-dom@20.11.2)':
     dependencies:
       '@tiptap/core': 3.27.1(@tiptap/pm@3.27.1)
       '@tiptap/pm': 3.27.1
-      happy-dom: 20.10.6
+      happy-dom: 20.11.2
 
   '@tiptap/pm@3.27.1':
     dependencies:
@@ -6349,7 +6352,7 @@ snapshots:
       ufo: 1.6.4
       uncrypto: 0.1.3
 
-  happy-dom@20.10.6:
+  happy-dom@20.11.2:
     dependencies:
       '@types/node': 24.13.3
       '@types/whatwg-mimetype': 3.0.2
@@ -7330,7 +7333,7 @@ snapshots:
     optionalDependencies:
       vite: 8.1.0(@types/node@24.13.3)(esbuild@0.28.1)(jiti@2.7.0)(tsx@4.22.4)(yaml@2.9.0)
 
-  vitest@2.1.8(@types/node@24.13.3)(happy-dom@20.10.6)(lightningcss@1.32.0):
+  vitest@2.1.8(@types/node@24.13.3)(happy-dom@20.11.2)(lightningcss@1.32.0):
     dependencies:
       '@vitest/expect': 2.1.8
       '@vitest/mocker': 2.1.8(vite@5.4.21(@types/node@24.13.3)(lightningcss@1.32.0))
@@ -7354,7 +7357,7 @@ snapshots:
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/node': 24.13.3
-      happy-dom: 20.10.6
+      happy-dom: 20.11.2
     transitivePeerDependencies:
       - less
       - lightningcss