@tokenoftrust/storefront-runner 2.4.66 → 2.4.67

package/apps/storefront/src/components/islands/VariantSelector.tsx

@@ -477,12 +477,11 @@ export default function VariantSelector({
         </div>
       </div>
 
-      {/* Add to cart. With a wired checkout store this is a real checkout form —
-          loader.js turns the submit into the cart drawer + hosted checkout. The
-          product fields are server-pre-signed (tamper-proof); the quantity
-          rides along as the selected stepper value. Without a store (marketing
-          tenant / signed mode missing secret) it degrades to a disabled
-          placeholder. */}
+      {/* Add to cart. With a wired checkout store the form action is the
+          checkout-handoff commerce route (`/api/commerce/checkout-handoff`).
+          Product fields are server-pre-signed; the quantity is the selected
+          stepper value. Without a store (marketing tenant, or signed mode with
+          no cart secret) the control is a disabled placeholder. */}
       {checkoutCart ? (
         <div class="flex flex-col gap-1.5">
           <form

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "2.4.66",
+  "version": "2.4.67",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",

package/packages/public-runtime/src/checkout.ts

@@ -110,13 +110,13 @@ export interface BuildVariantCartPayloadOptions {
   secret?: string;
   purchaseOption?: ProductPurchaseOption;
   /**
-   * The member-adjusted EFFECTIVE price to sign, computed server-side via
-   * membership.ts `priceForPurchaseOption` for the shopper's resolved eligibility.
-   * When set it REPLACES the list/subscription price as the single signed source
-   * of truth, so a given price is only ever valid for the member context it was
-   * signed under (see {@link ../membership.ts buildMemberSignedCartPayload}).
-   * Absent → the list/subscription price (anonymous shopper). Never a client-
-   * supplied value: only the server, holding the cart secret, ever signs it.
+   * Member-adjusted effective price to sign. `buildMemberSignedCartPayload`
+   * in membership.ts runs `priceForPurchaseOption` for this request's resolved
+   * eligibility and passes that price here. `buildVariantCartPayload` signs it
+   * in place of the list or subscription price, so the signature matches only
+   * that member context. Absent, the list or subscription price is signed for
+   * an anonymous shopper. The client never supplies this value; only the
+   * server, holding the cart secret, signs it.
    */
   signedPrice?: number;
   /**