v1.9 Commerce OS

Status: Accepted on Solana devnet

Release: v1.9.0-devnet.3

Accepted: 2026-07-12

SDK: @velapay/sdk@0.5.0

Outcome

v1.9 turned the existing merchant surfaces into a connected Commerce OS. A merchant can create a standalone invoice or direct payment, send hosted checkout, verify settlement on Solana, generate a receipt, reconcile customer history, issue partial or full refunds, export accounting records, and grant read-only auditor access without manual database joins.

Delivered

• Canonical Payment Intents for one-time payments, separate from subscription Checkout Sessions.
• Hosted /pay/:id checkout with merchant identity, QR/reference, wallet action, polling, expiry, and receipt return.
• Strict devnet RPC verification for public SPL and Token-2022 transfers, including Token-2022 transfer-fee handling and payer derivation.
• Standalone invoices with decimal display input and invoice-backed intent reuse.
• Merchant-signed, non-custodial full and partial refunds with reservation safety, retry, cancellation, and reconciliation.
• Idempotent payment receipts, refund receipts, credit notes, and document URLs.
• Customer Vault, unified payments, bounded CSV exports, auditor ZIP, and immutable audit logs.
• DNS domain challenge, SIWS wallet verification, redirect allowlists, and verified payee presentation.
• Session-or-API-key commerce authentication, scoped keys, first-class auditor role, transactional outbox, retries, replay, and event-ID deduplication.

Acceptance Evidence

The release gate passed fresh migration and Drizzle parity checks, dashboard and Worker tests/builds, Commerce OS Playwright workflows, mocked RPC verifier fixtures, local-validator SPL and Token-2022 integration tests, checkout bundle budgets, SDK tests/build, and webhook tests/build.

Remote acceptance proved valid direct and invoice-backed Token-2022 payments, payer derivation, atomic business updates, partial and remaining refunds, over-refund rejection, receipt and credit-note PDFs, normalized exports, correct commerce webhook delivery, and auditor mutation denial.

The detailed resource inventory, checksums, Worker versions, transaction signatures, feature flags, and rollback state remain in vela-dashboard/docs/runbooks/v1.9-devnet-rollout-report.md.

Boundaries

• Devnet only; no mainnet Commerce OS deployment exists.
• Only public privacy mode executes.
• C-SPL execution and private refunds are not shipped.
• Terminal, Blinks, mass payouts, escrow, VelaPay Pages, and fresh one-time addresses remain deferred.
• Vela Protocol remains Token-2022-only. Commerce OS accepts public SPL and Token-2022 transfer rails around that protocol.

Navigation

• ← v1.8 Advanced Billing Features
• Commerce OS Architecture →
• ← Back to Overview