Read-only WIT commerce hooks

manifest.json defines all four native commerce hooks: price, discount, shipping and validation. Its commerceHooks.source uses the checked-in Component Model example and typed WIT contract. It reads bounded cart/product/app record snapshots, returns typed decisions and has no network, SQL, filesystem, WASI or arbitrary core mutation capability. The actual native money/tax/FX owner calculates returned amounts. This fixture is deliberately synthetic, not an economic recommendation or a replacement payment provider.

Import the manifest through package review in a private test shop, then add the fixture mug to a cart. Inspect appHookOutcomes, quote changes and a reviewed checkout/order. Compilation and probing happen before checkout transactions; fuel, memory, table, stack, epoch and process admission limits bound execution.

python3 scripts/verify_integration.py --only app_components checks all four quote outcomes, reviewed checkout and idempotent order persistence, foreign shop isolation, malformed ABI and malicious host-call loops. See the canonical hook contract.