@tokenoftrust/storefront-runner 3.10.2 → 3.10.3

package/apps/storefront/src/lib/checkout/commerce/finalCartAuthorization.ts

@@ -2,6 +2,8 @@
  * Final-cart authorization decision. Payment is admitted only when the caller
  * token, the bound cart, fresh evidence, the verification seam, and mirror stock
  * all agree. Catalog availability and a browser confirmation are not authority.
+ * A tenant that declares no inventory provider does not track stock: its stock
+ * evidence is `not-required` and its holds carry no balance.
  */
 import {
   admitCallerToken,
@@ -43,6 +45,11 @@ export interface FinalCartRequest {
   trustedIssuers: readonly string[];
   expectedAudience: string;
   activeKids: readonly string[];
+  /**
+   * False only when the tenant declares no inventory provider; `authorities` is read otherwise.
+   * Anything but an explicit `false` counts as tracked, so a caller that omits it fails closed.
+   */
+  stockTracked: boolean;
   authorities: readonly unknown[];
   payment?: PaymentState;
   stock?: StockState;
@@ -90,11 +97,11 @@ function cartFinding(quoted: FinalCartBinding, presented: FinalCartBinding, rout
   return null;
 }
 
-function evidenceFinding(evidence: CommerceEvidence | null): string | null {
+function evidenceFinding(evidence: CommerceEvidence | null, stockTracked: boolean): string | null {
   if (!evidence) return "missing-evidence";
   for (const field of EVIDENCE_FIELDS) {
     const state: EvidenceState | string = evidence[field];
-    if (state === "fresh" || (field !== "stock" && state === "not-required")) continue;
+    if (state === "fresh" || (state === "not-required" && (field !== "stock" || !stockTracked))) continue;
     if (state === "UNKNOWN") return `evidence-${field}-unknown`;
     if (state === "stale" || state === "unreadable" || state === "absent") return `evidence-${field}-${state}`;
     return `evidence-${field}-unreadable`;
@@ -157,7 +164,8 @@ export async function evaluateFinalCart(input: FinalCartRequest): Promise<FinalC
 
   if (input.presented.lines.length < 1) return { ok: false, finding: "malformed-request" };
 
-  const evidence = evidenceFinding(input.evidence);
+  const stockTracked = input.stockTracked !== false;
+  const evidence = evidenceFinding(input.evidence, stockTracked);
   if (evidence) return { ok: false, finding: evidence };
 
   const expiresAt = earlierExpiry(input.presented.verificationExpiresAt, input.presented.taxExpiresAt);
@@ -205,6 +213,10 @@ export async function evaluateFinalCart(input: FinalCartRequest): Promise<FinalC
   const holds: ReserveHold[] = [];
   for (const sku of [...quantities.keys()].sort()) {
     const quantity = quantities.get(sku)!;
+    if (!stockTracked) {
+      holds.push({ sku, locationId: "unspecified", quantity, onHand: 0 });
+      continue;
+    }
     const named =
       input.authorities.find((value) => {
         if (!value || typeof value !== "object") return false;

package/apps/storefront/src/lib/inventory/allocations.ts

@@ -88,6 +88,11 @@ export interface ReserveInput {
   admissionStatement?: SqlStatement;
   /** Immutable provider identity, claimed atomically with its receipt and holds. */
   providerCart?: { provider: "foxycart"; id: string; digest: string; expectedAuthorizationId?: string };
+  /**
+   * The tenant declares no inventory provider: each hold records the order's units so payment
+   * confirmation and release work unchanged, but no balance bounds it.
+   */
+  stockUntracked?: boolean;
 }
 
 export type ReserveResult =
@@ -255,17 +260,28 @@ function reserveShape(input: ReserveInput): ReserveResult | null {
 }
 
 function allocationInsert(input: ReserveInput, hold: ReserveHold, seenAt: string): SqlStatement {
-  return {
-    sql: `INSERT INTO scrappy_allocations (tenant_id, stage, order_id, sku, location_id, quantity, state)
-      SELECT ?, ?, ?, ?, ?, ?, 'reserved'
-      WHERE (
+  const bound = input.stockUntracked ? "" : `(
         SELECT COALESCE(SUM(quantity), 0) FROM scrappy_allocations
         WHERE tenant_id = ? AND stage = ? AND sku = ? AND location_id = ? AND state IN ('reserved', 'confirmed')
       ) + ? <= ${input.admissionStatement
         ? `(SELECT COALESCE(SUM(quantity_delta), 0) FROM commerce_inventory_movements
             WHERE tenant_id = ? AND stage = ? AND sku = ? AND location_id = ?)`
         : "?"}
-      AND NOT EXISTS (
+      AND `;
+  const boundParams = input.stockUntracked ? [] : [
+    input.tenantId,
+    input.stage,
+    hold.sku,
+    hold.locationId,
+    hold.quantity,
+    ...(input.admissionStatement
+      ? [input.tenantId, input.stage, hold.sku, hold.locationId]
+      : [hold.onHand]),
+  ];
+  return {
+    sql: `INSERT INTO scrappy_allocations (tenant_id, stage, order_id, sku, location_id, quantity, state)
+      SELECT ?, ?, ?, ?, ?, ?, 'reserved'
+      WHERE ${bound}NOT EXISTS (
         SELECT 1 FROM scrappy_allocations
         WHERE tenant_id = ? AND stage = ? AND order_id = ? AND sku = ? AND location_id = ?
           AND state IN ('reserved', 'confirmed')
@@ -292,14 +308,7 @@ function allocationInsert(input: ReserveInput, hold: ReserveHold, seenAt: string
       hold.sku,
       hold.locationId,
       hold.quantity,
-      input.tenantId,
-      input.stage,
-      hold.sku,
-      hold.locationId,
-      hold.quantity,
-      ...(input.admissionStatement
-        ? [input.tenantId, input.stage, hold.sku, hold.locationId]
-        : [hold.onHand]),
+      ...boundParams,
       input.tenantId,
       input.stage,
       input.orderId,

package/apps/storefront/src/pages/api/commerce/final-cart-authorization.ts

@@ -233,12 +233,17 @@ async function authorize(context: APIContext): Promise<Response> {
   const requirements = await readCheckoutRequirements(tenant.tenant_id, contentEnv);
   if (!requirements) return deny("checkout-requirements-unreadable", 503);
   const policy = testStoreEvidencePolicy(requirements);
+  // Stock is tracked only for a tenant that declares the `mirror` provider. An undeclared tenant
+  // has no balance to read, so its stock evidence is honestly `not-required`, not a refusal.
+  const stockTracked = tenant.inventory?.provider === "mirror";
   const authorities = [];
-  for (const sku of new Set(snapshot.lines.map(line => line.sku))) {
-    authorities.push(await readMirrorStock(queryable, { tenantId: snapshot.tenantId, stage: snapshot.stage, sku, locationId: "unspecified", now, maxAgeMs: 15 * 60_000 }));
+  if (stockTracked) {
+    for (const sku of new Set(snapshot.lines.map(line => line.sku))) {
+      authorities.push(await readMirrorStock(queryable, { tenantId: snapshot.tenantId, stage: snapshot.stage, sku, locationId: "unspecified", now, maxAgeMs: 15 * 60_000 }));
+    }
   }
   const stockExpiry = Math.min(...authorities.flatMap(authority => authority ? [Date.parse(authority.asOf) + 15 * 60_000] : []));
-  const evidence: CommerceEvidence = { verification: "absent", tax: "absent", risk: "absent", stock: "fresh" };
+  const evidence: CommerceEvidence = { verification: "absent", tax: "absent", risk: "absent", stock: stockTracked ? "fresh" : "not-required" };
   const expiresAt = existing?.expiresAt ?? new Date(Math.min(Date.now() + 5 * 60_000, stockExpiry)).toISOString();
   const provenance = {} as CommerceEvidenceProvenance;
   for (const field of ["verification", "tax", "risk"] as const) {
@@ -247,7 +252,9 @@ async function authorize(context: APIContext): Promise<Response> {
       provenance[field] = { requirement: "not-required", state: "not-required", source: SHARED_STORE_POLICY_SOURCE, policyRevision: SHARED_STORE_POLICY_REVISION, expiresAt };
     }
   }
-  provenance.stock = { requirement: "required", state: "satisfied", source: "tenant-inventory-movements", policyRevision: "mirror-v1", expiresAt };
+  provenance.stock = stockTracked
+    ? { requirement: "required", state: "satisfied", source: "tenant-inventory-movements", policyRevision: "mirror-v1", expiresAt }
+    : { requirement: "not-required", state: "not-required", source: "tenant-inventory-undeclared", policyRevision: "untracked-v1", expiresAt };
   const presented: FinalCartBinding = { tenantId: snapshot.tenantId, stage: snapshot.stage, currency: snapshot.currency, lines: snapshot.lines,
     destinationDigest: snapshot.destinationDigest, verificationExpiresAt: expiresAt, taxExpiresAt: expiresAt };
   const seamView = await seam(authorityContext, snapshot, selected, policy);
@@ -257,7 +264,7 @@ async function authorize(context: APIContext): Promise<Response> {
   }
   const decision = await evaluateFinalCart({ now, routedTenantId: commerceTenantId(tenant), quoted: presented, presented, evidence,
     seam: seamView, catalogAvailable: true, browserConfirmed: false, token,
-    trustedIssuers: issuers, expectedAudience: audience, activeKids, authorities });
+    trustedIssuers: issuers, expectedAudience: audience, activeKids, stockTracked, authorities });
   if (!decision.ok) {
     if (decision.finding === "verification-refused:flavored_prohibited" && seamView.flavors) {
       return json({ ok: false, finding: decision.finding, flavors: seamView.flavors }, 409);
@@ -269,7 +276,7 @@ async function authorize(context: APIContext): Promise<Response> {
   const cartDigest = existing?.cartDigest ?? await digest(`commerce-provider-cart-v1\n${snapshot.providerCartId}\n${snapshot.providerCartDigest}`);
   const reserved = await reserveAllocation(d1CommerceRunner(database), { tenantId: decision.tenantId, stage: decision.stage, orderId: authorizationId,
     cartDigest, expiresAt: decision.expiresAt, now, currency: snapshot.currency, amountMinor: snapshot.totals.totalMinor,
-    issuer: decision.issuer, jti: decision.jti, holds: decision.holds,
+    issuer: decision.issuer, jti: decision.jti, holds: decision.holds, stockUntracked: !stockTracked,
     providerCart: { provider: snapshot.provider, id: snapshot.providerCartId, digest: snapshot.providerCartDigest, expectedAuthorizationId: snapshot.expectedAuthorizationId },
     admissionStatement: admissionSnapshotStatement({ ...snapshot, authorizationId, cartDigest, evidence, provenance, expiresAt: decision.expiresAt, now }),
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "3.10.2",
+  "version": "3.10.3",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",

package/packages/public-runtime/src/checkout-orders.ts

@@ -401,7 +401,7 @@ export type CallerTokenRefusal =
   | "stage";
 
 export function evidencePermitsRelease(evidence: CommerceEvidence): boolean {
-  return evidence.stock === "fresh" && (["verification", "tax", "risk"] as const)
+  return (["verification", "tax", "risk", "stock"] as const)
     .every(field => evidence[field] === "fresh" || evidence[field] === "not-required");
 }