@tokenoftrust/cli 2.4.16 → 2.4.17

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/cli",
-  "version": "2.4.16",
+  "version": "2.4.17",
   "description": "Token of Trust developer CLI — clone a tenant store, run it locally with save→reload, and submit it for preview. Installs the `tot` command.",
   "license": "Apache-2.0",
   "author": "Token of Trust",

package/src/commands/report.mjs

@@ -222,6 +222,9 @@ export function readStoreState(statePath) {
     lifecycle: state?.lifecycle ?? "hot-standby",
     commerceSync: state?.commerceSync ?? {},
     goLive: state?.goLive ?? {},
+    // Absent/empty reads as "no open requests recorded", never as "nothing needed" — see
+    // newMigrationState() in agency-kit/tools/lib/migration-state-template.mjs.
+    merchantRequests: Array.isArray(state?.merchantRequests) ? state.merchantRequests : [],
   };
 }
 
@@ -295,7 +298,7 @@ export function run(argv, ctx, io = {}) {
   }
 
   const baseline = readJson(args.baseline ? resolve(args.baseline) : join(store, ".tot", "lighthouse-source-baseline.json"));
-  const { addOns, lifecycle, commerceSync, goLive } = readStoreState(
+  const { addOns, lifecycle, commerceSync, goLive, merchantRequests } = readStoreState(
     args.state ? resolve(args.state) : join(store, ".tot", "migration-state.json"),
   );
   const generatedAt = evidence.generatedAt ?? now();
@@ -313,6 +316,7 @@ export function run(argv, ctx, io = {}) {
     baselineCapturedAt: baseline?.capturedAt ?? null,
     commerceSync,
     goLive,
+    merchantRequests,
   });
   const outPath = resolve(args.out ?? join(pagesDir, "go-live-report.md"));
   mkdirSync(dirname(outPath), { recursive: true });

package/src/go-live-report.mjs

@@ -511,6 +511,20 @@ export function summariseByProfile(pages) {
   }).filter((p) => p.dimensions.length > 0);
 }
 
+/**
+ * Open merchant requests, split into the ones that block go-live and everything else. A request
+ * is "open" while its status is `open` or `requested` — `received`/`declined`/`not-needed` are
+ * settled and drop out of both lists. Pure, so the report's go/no-go language stays testable.
+ * @param {{ id: string, ask: string, why: string, blocks?: string[], sensitive?: boolean, channel?: string, status: string }[]} requests
+ */
+export function openMerchantRequests(requests = []) {
+  const open = requests.filter((r) => r.status === "open" || r.status === "requested");
+  return {
+    open,
+    blockingGoLive: open.filter((r) => (r.blocks ?? []).includes("go-live")),
+  };
+}
+
 /** The whole report. Pure: every input is data, so the output is testable byte-for-byte. */
 export function buildGoLiveReport(input) {
   const {
@@ -524,7 +538,12 @@ export function buildGoLiveReport(input) {
     commerceSync = {},
     // Recorded go-live checklist confirmations, keyed by GO_LIVE_CHECKLIST.key.
     goLive = {},
+    // Things we are waiting on the MERCHANT for (a credential, a decision, a fix to their own
+    // content) — the other direction from `checks`, which is what WE have open. Absent/empty
+    // reads as "no open requests recorded", never as "nothing needed".
+    merchantRequests = [],
   } = input;
+  const { open: openMerchant, blockingGoLive } = openMerchantRequests(merchantRequests);
 
   const parity = summariseParity(pages);
   const { confirmed, risks, hotStandby } = classifyChecks(checks, { lifecycle });
@@ -828,7 +847,17 @@ export function buildGoLiveReport(input) {
 
   out.push("### Blocks Storefront go-live");
   out.push("");
-  if (goLiveRisks.length === 0) {
+  // An open merchant request that names "go-live" in its `blocks` list is a go-live blocker by
+  // the same rule as any other open item here — recording it anywhere else (only in "Waiting on
+  // the merchant") would let the verdict read READY while something is still outstanding.
+  const merchantGoLiveRows = blockingGoLive.map((r) => [
+    r.ask,
+    r.why,
+    r.sensitive
+      ? `Needs you — have the merchant send it via ${r.channel ?? "(no channel recorded)"}.`
+      : "Needs you — see **Waiting on the merchant** below.",
+  ]);
+  if (goLiveRisks.length === 0 && merchantGoLiveRows.length === 0) {
     out.push("**Nothing.** Every go-live check passed.");
   } else {
     out.push(hotStandby
@@ -838,12 +867,35 @@ export function buildGoLiveReport(input) {
       : "_These must clear before the domain moves._");
     out.push("");
     out.push(table(
-      goLiveRisks.map((c) => [c.area, whyItMatters(c), whoCloses(c)]),
+      [...goLiveRisks.map((c) => [c.area, whyItMatters(c), whoCloses(c)]), ...merchantGoLiveRows],
       ["Area", "Why it matters", "What closes it"],
     ));
   }
   out.push("");
 
+  // ---- What we are waiting on the MERCHANT for — the other direction from everything above,
+  // which is work WE have open. Printed even when empty-but-for-blockers would read clean, since
+  // a non-blocking open ask (an analytics id, a review-access email) is still something the
+  // merchant needs to see asked for in plain language, not buried in an internal tracker.
+  if (openMerchant.length > 0) {
+    out.push("## Waiting on the merchant");
+    out.push("");
+    out.push("_These need something from you, not from us — a credential, a decision, or a fix "
+      + "to your own content. Nothing below is stored as a secret: a sensitive item records only "
+      + "that we asked and that we received it._");
+    out.push("");
+    out.push(table(
+      openMerchant.map((r) => [
+        r.ask,
+        r.why,
+        r.sensitive ? `Send via ${r.channel ?? "(no channel recorded)"}` : (r.channel ? `Via ${r.channel}` : "Let us know"),
+        (r.blocks ?? []).includes("go-live") ? "**go-live**" : ((r.blocks ?? []).join(", ") || "—"),
+      ]),
+      ["What we need", "Why", "How to send it", "Blocks"],
+    ));
+    out.push("");
+  }
+
   // COMMERCE READINESS IS PART OF GO-LIVE, not a section of its own. It was a separate heading
   // listing the same kind of thing — work that must be closed before the store can open — so a
   // reader had to hold two lists and de-duplicate them mentally. One list, one place.