@tokenoftrust/storefront-runner 2.4.57 → 2.4.59

package/apps/storefront/src/lib/fulfillment/fulfillmentService.ts

@@ -399,7 +399,6 @@ export function decideFulfillmentAccess(input: {
   const stage = commerceStageForEnv(input.customizationEnv);
   if (!stage) return { ok: false, status: 409, code: "stage-unknown" };
   const host = input.hostResource.trim();
-  if (!isOpaqueId(host) && host.length === 0) return { ok: false, status: 403, code: "denied" };
   if (!host) return { ok: false, status: 403, code: "denied" };
   if (input.bodyTenantId && input.bodyTenantId !== host) return { ok: false, status: 403, code: "denied" };
   if (!input.subject || !isOpaqueId(input.subject)) return { ok: false, status: 403, code: "denied" };
@@ -1094,8 +1093,7 @@ export class FulfillmentService {
   private async write(statements: readonly SqlStatement[]): Promise<number[] | null> {
     try {
       return await this.db.batch(statements);
-    } catch (error) {
-      if (error instanceof Error && error.message === "storage") return null;
+    } catch {
       return null;
     }
   }

package/apps/storefront/src/lib/inventory/allocations.ts

@@ -18,8 +18,6 @@ import {
 
 export const RESERVATION_AUTHORITY_HEADER = "x-tot-reservation-authority";
 export const RESERVATION_AUTHORITY_NONE = "none";
-/** Catalog `available` / `quantity` never authorizes a hold. */
-export const CATALOG_IS_RESERVATION_AUTHORITY = false;
 export const VERIFICATION_PROVIDER_OWNER = "tot-9577-tot-verification-provider";
 
 const SKU_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,80}$/;
@@ -137,9 +135,6 @@ export function mirrorOnHand(sku: string, locationId: string): number | null {
 }
 
 export function reservationAuthorityHeader(): typeof RESERVATION_AUTHORITY_NONE {
-  if (CATALOG_IS_RESERVATION_AUTHORITY) {
-    throw new Error("catalog availability is not reservation authority");
-  }
   return RESERVATION_AUTHORITY_NONE;
 }
 
@@ -217,13 +212,7 @@ export function d1CommerceRunner(db: D1CommerceDatabase): StatementRunner {
       return asRows(await db.prepare(sql).bind(...params).all());
     },
     async batch(statements) {
-      if (!db.batch) {
-        const results: Record<string, unknown>[][] = [];
-        for (const statement of statements) {
-          results.push(asRows(await db.prepare(statement.sql).bind(...statement.params).all()));
-        }
-        return results;
-      }
+      if (!db.batch) throw new Error("D1 batch is required");
       const bound: unknown[] = statements.map((statement) => db.prepare(statement.sql).bind(...statement.params));
       const results = await db.batch(bound);
       return results.map((result) => asRows(result));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "2.4.57",
+  "version": "2.4.59",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",