@tokenoftrust/storefront-runner 6.3.2 → 6.3.3

package/apps/storefront/src/lib/commerce/refusalSentence.ts

@@ -0,0 +1,52 @@
+/** One shopper-readable sentence for every final-cart refusal finding. Closed text only; never cart or tenant data. */
+export const GENERIC_REFUSAL_SENTENCE = "We couldn't confirm your order right now. Please review your cart and try again, or contact the store if it keeps happening.";
+
+const SENTENCES: Readonly<Record<string, string>> = {
+  "tenant-not-admitted": "This store isn't set up to accept orders yet. Please contact the store for help.",
+  "tenant-unregistered": "This store isn't set up to accept orders yet. Please contact the store for help.",
+  "shared-store-unavailable": "Checkout is temporarily unavailable. Please try again later.",
+  "checkout-unconfigured": "Checkout isn't set up for this store yet. Please contact the store for help.",
+  "tenant-own-store": "This store checks out through its own payment page, so this cart can't be confirmed here.",
+  "caller-unconfigured": "Checkout is temporarily unavailable. Please try again later.",
+  "store-unconfigured": "Checkout is temporarily unavailable. Please try again later.",
+  "config-unreadable": "Checkout is temporarily unavailable. Please try again later.",
+  "catalog-unavailable": "We couldn't load the product catalog. Please try again in a moment.",
+  "checkout-requirements-unreadable": "Checkout is temporarily unavailable. Please try again later.",
+  "authority-error": "Something went wrong confirming your order. Please try again.",
+  "authority-unavailable": "We couldn't check stock for your cart right now. Please try again in a moment.",
+  "malformed-request": "We couldn't read your cart. Please return to the cart and try again.",
+  "catalog-cart-mismatch": "Something in your cart is no longer available as listed. Please review your cart and try again.",
+  "catalog-not-authority": "Something in your cart is no longer available as listed. Please review your cart and try again.",
+  "shipping-unavailable": "We couldn't work out shipping for your cart. Please review your cart and try again.",
+  "shipping-changed": "Shipping for your cart has changed. Please review your cart and try again.",
+  "stock-unavailable": "One or more items in your cart are out of stock.",
+  "stock-unknown": "We couldn't confirm stock for your cart. Please try again in a moment.",
+  "provider-cart-conflict": "Your cart changed in another window. Please reload the cart and try again.",
+  "provider-cart-changed": "Your cart changed since it was checked. Please review your cart and try again.",
+  "admission-consumed": "This cart has already been used for an order. Please start a new cart.",
+  "admission-expired": "Your cart check expired. Please return to the cart and try again.",
+  "evidence-expired": "Your cart check expired. Please return to the cart and try again.",
+  "tenant-changed": "Your cart changed since it was checked. Please review your cart and try again.",
+  "stage-changed": "Your cart changed since it was checked. Please review your cart and try again.",
+  "currency-changed": "The currency for your cart changed. Please review your cart and try again.",
+  "destination-changed": "Your shipping destination changed. Please review your cart and try again.",
+  "product-changed": "Your cart changed since it was checked. Please review your cart and try again.",
+  "price-changed": "A price in your cart changed. Please review your cart and try again.",
+  "quantity-changed": "A quantity in your cart changed. Please review your cart and try again.",
+  "evidence-window-changed": "Your cart check expired. Please return to the cart and try again.",
+  "cart-unbound": "Your cart changed since it was checked. Please review your cart and try again.",
+  "verification-seam-absent": "We couldn't verify your age and eligibility right now. Please try again in a moment.",
+  "verification-provider-unconfigured": "Age verification isn't available for this store right now. Please contact the store for help.",
+  "verification-refused": "Your order can't be completed because it didn't pass the store's eligibility checks.",
+  "payment-reconcile": "We couldn't confirm payment for your order. Please try again.",
+  "payment-refused": "Payment for your order couldn't be confirmed. Please try again.",
+  "fulfillment-refused": "This order can't be fulfilled as requested. Please review your cart and try again.",
+};
+
+/** The sentence for a finding; unknown findings, including a bare code, get the generic sentence. */
+export function refusalSentence(finding: string): string {
+  if (Object.hasOwn(SENTENCES, finding)) return SENTENCES[finding]!;
+  if (finding.startsWith("verification-refused:")) return SENTENCES["verification-refused"]!;
+  if (finding.startsWith("evidence-")) return "We couldn't confirm the checks for your order right now. Please try again in a moment.";
+  return GENERIC_REFUSAL_SENTENCE;
+}

package/apps/storefront/src/pages/api/commerce/final-cart-authorization.ts

@@ -23,6 +23,7 @@ import { DeclaredTenantConfigUnreadError, withDeclaredTenantConfig } from "@/con
 import { resolveStoreCurrency } from "@tot/public-runtime/declared-tenant-config";
 import { createContentProvider } from "@/lib/content/storyblok/provider";
 import { createToTClient } from "@/lib/catalog/tot/ToTClient";
+import { refusalSentence } from "@/lib/commerce/refusalSentence";
 export const prerender = false;
 const HEX = /^[a-f0-9]{64}$/;
 /** The shopper's verification correlation handle, as the signed `verification` cart option carries it. */
@@ -30,7 +31,7 @@ const VERIFICATION_REF = /^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,199}$/;
 function json(body: unknown, status = 200): Response {
   return new Response(JSON.stringify(body), { status, headers: { "content-type": "application/json; charset=utf-8", "cache-control": "no-store" } });
 }
-function deny(finding: string, status = 409, owner?: string): Response { return json({ ok: false, finding, ...(owner ? { owner } : {}) }, status); }
+function deny(finding: string, status = 409, owner?: string): Response { return json({ ok: false, finding, message: refusalSentence(finding), ...(owner ? { owner } : {}) }, status); }
 /**
  * Which check refused, and on which cart line (its index in the presented snapshot). Logged on
  * the decision line only: closed check names and an index, never a SKU, price or cart value.
@@ -329,7 +330,7 @@ async function authorize(context: APIContext): Promise<Response> {
     trustedIssuers: issuers, expectedAudience: audience, activeKids, stockTracked, authorities });
   if (!decision.ok) {
     if (decision.finding.startsWith("verification-refused") && (seamView.flavors || seamView.lines)) {
-      return json({ ok: false, finding: decision.finding,
+      return json({ ok: false, finding: decision.finding, message: refusalSentence(decision.finding),
         ...(decision.finding === "verification-refused:flavored_prohibited" && seamView.flavors ? { flavors: seamView.flavors } : {}),
         ...(seamView.lines ? { lines: seamView.lines } : {}) }, 409);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "6.3.2",
+  "version": "6.3.3",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",