@tokenoftrust/storefront-runner 2.4.65 → 2.4.67

package/apps/storefront/src/components/islands/VariantSelector.tsx

@@ -477,12 +477,11 @@ export default function VariantSelector({
         </div>
       </div>
 
-      {/* Add to cart. With a wired checkout store this is a real checkout form —
-          loader.js turns the submit into the cart drawer + hosted checkout. The
-          product fields are server-pre-signed (tamper-proof); the quantity
-          rides along as the selected stepper value. Without a store (marketing
-          tenant / signed mode missing secret) it degrades to a disabled
-          placeholder. */}
+      {/* Add to cart. With a wired checkout store the form action is the
+          checkout-handoff commerce route (`/api/commerce/checkout-handoff`).
+          Product fields are server-pre-signed; the quantity is the selected
+          stepper value. Without a store (marketing tenant, or signed mode with
+          no cart secret) the control is a disabled placeholder. */}
       {checkoutCart ? (
         <div class="flex flex-col gap-1.5">
           <form

package/apps/storefront/src/lib/webhooks/getDispatcher.ts

@@ -66,9 +66,7 @@ export class CommerceAlarmDispatcher {
 }
 
 export async function getReliableDispatcher(): Promise<CommerceAlarmDispatcher | Response> {
-  const scheduler = await readEnv("SCRAPPY_COMMERCE_SCHEDULER");
-  if (scheduler !== COMMERCE_SCHEDULER) return json({ error: "commerce scheduler not configured" }, 503);
   const d1 = await readD1("STOREFRONT_APPS_DB");
   if (!d1) return json({ error: "commerce scheduler not configured" }, 503);
-  return new CommerceAlarmDispatcher(fromD1(d1), scheduler);
+  return new CommerceAlarmDispatcher(fromD1(d1), COMMERCE_SCHEDULER);
 }

package/apps/storefront/src/pages/api/admin/commerce-readiness.ts

@@ -11,7 +11,6 @@
 import type { APIContext } from "astro";
 import { requireAdminApiEntry } from "@/lib/auth/adminApiGuard";
 import { workerCommit } from "@/lib/activity/workerCommit";
-import { readEnv } from "@/lib/env";
 import {
   COMMERCE_SCHEDULER,
   actorMayCommand,
@@ -107,8 +106,7 @@ export function admitAdminReplay(input: {
 export async function GET(context: APIContext): Promise<Response> {
   const access = await requireAdminApiEntry(context, { requireOwner: true });
   if (!access.ok) return json({ ok: false, reason: access.reason }, access.status);
-  const scheduler = await readEnv("SCRAPPY_COMMERCE_SCHEDULER");
-  return json({ ok: true, report: projectAdminReadiness({ scheduler, deployedSha: workerCommit() }) });
+  return json({ ok: true, report: projectAdminReadiness({ scheduler: COMMERCE_SCHEDULER, deployedSha: workerCommit() }) });
 }
 
 export async function POST(context: APIContext): Promise<Response> {
@@ -133,13 +131,12 @@ export async function POST(context: APIContext): Promise<Response> {
   if (!OPAQUE.test(record.orderId) || !OPAQUE.test(record.sourceEventId)) return json({ ok: false, reason: "refused" }, 400);
   const decision = admitAdminReplay({ tenantId: context.locals.tenant.tenant_id, stage, kind });
   if (!decision.admitted) return json({ ok: false, reason: decision.reason }, 403);
-  const scheduler = await readEnv("SCRAPPY_COMMERCE_SCHEDULER");
   return json({
     ok: true,
     admitted: true,
     durableWrite: false,
     command: "reconcile",
     reason: decision.reason,
-    report: projectAdminReadiness({ scheduler, deployedSha: workerCommit() }),
+    report: projectAdminReadiness({ scheduler: COMMERCE_SCHEDULER, deployedSha: workerCommit() }),
   });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "2.4.65",
+  "version": "2.4.67",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",

package/packages/public-runtime/src/checkout.ts

@@ -110,13 +110,13 @@ export interface BuildVariantCartPayloadOptions {
   secret?: string;
   purchaseOption?: ProductPurchaseOption;
   /**
-   * The member-adjusted EFFECTIVE price to sign, computed server-side via
-   * membership.ts `priceForPurchaseOption` for the shopper's resolved eligibility.
-   * When set it REPLACES the list/subscription price as the single signed source
-   * of truth, so a given price is only ever valid for the member context it was
-   * signed under (see {@link ../membership.ts buildMemberSignedCartPayload}).
-   * Absent → the list/subscription price (anonymous shopper). Never a client-
-   * supplied value: only the server, holding the cart secret, ever signs it.
+   * Member-adjusted effective price to sign. `buildMemberSignedCartPayload`
+   * in membership.ts runs `priceForPurchaseOption` for this request's resolved
+   * eligibility and passes that price here. `buildVariantCartPayload` signs it
+   * in place of the list or subscription price, so the signature matches only
+   * that member context. Absent, the list or subscription price is signed for
+   * an anonymous shopper. The client never supplies this value; only the
+   * server, holding the cart secret, signs it.
    */
   signedPrice?: number;
   /**