DinkusKit Registry Commerce Contract

Consuming @smokyco.bsky.social/dinkus-commerce (r_gshdrqaldna3r7sn) public catalog, media, policies, and guest cart.

When COMMERCE_ENABLED=1 is configured, the storefront dispatches public GET requests to /_emdash/api/plugins/r_gshdrqaldna3r7sn/catalog/public and catalog/public/item without forwarding visitor cookies or query secrets. Duplicate editorial slug or commerce_item_id bindings are automatically excluded so ambiguous bindings never become purchasable.

The guest cart stores only untrusted product IDs and integer quantities (1–99) under dinkus.guest-cart.v1 in localStorage. Current prices and sellability are re-queried on the server via /api/cart, and checkout remains closed unless GET checkout/guest/readiness returns supported test readiness.