@tokenoftrust/storefront-runner 0.1.0

package/apps/storefront/migrations/meta/0001_snapshot.json

@@ -0,0 +1,347 @@
+{
+  "id": "408adb62-118e-4ad2-8e29-e30d1c924f04",
+  "prevId": "3667f8d8-a1ba-49ac-809a-c06004bad5d6",
+  "version": "6",
+  "dialect": "sqlite",
+  "tables": {
+    "collections": {
+      "name": "collections",
+      "columns": {
+        "handle": {
+          "name": "handle",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "title": {
+          "name": "title",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "position": {
+          "name": "position",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 99
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "customization_pointers": {
+      "name": "customization_pointers",
+      "columns": {
+        "tenant_id": {
+          "name": "tenant_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "rev": {
+          "name": "rev",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "live": {
+          "name": "live",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "test": {
+          "name": "test",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "customization_versions": {
+      "name": "customization_versions",
+      "columns": {
+        "tenant_id": {
+          "name": "tenant_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "path": {
+          "name": "path",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "version_id": {
+          "name": "version_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "size": {
+          "name": "size",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "content": {
+          "name": "content",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "customization_versions_tenant_id_path_version_id_pk": {
+          "columns": [
+            "tenant_id",
+            "path",
+            "version_id"
+          ],
+          "name": "customization_versions_tenant_id_path_version_id_pk"
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "product_collections": {
+      "name": "product_collections",
+      "columns": {
+        "handle": {
+          "name": "handle",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "collection": {
+          "name": "collection",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {
+        "idx_pc_collection": {
+          "name": "idx_pc_collection",
+          "columns": [
+            "collection"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "product_facets": {
+      "name": "product_facets",
+      "columns": {
+        "handle": {
+          "name": "handle",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {
+        "idx_pf_name": {
+          "name": "idx_pf_name",
+          "columns": [
+            "name",
+            "value"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "products": {
+      "name": "products",
+      "columns": {
+        "handle": {
+          "name": "handle",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "title": {
+          "name": "title",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "vendor": {
+          "name": "vendor",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "product_type": {
+          "name": "product_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'[]'"
+        },
+        "description_text": {
+          "name": "description_text",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "''"
+        },
+        "price_min": {
+          "name": "price_min",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "price_max": {
+          "name": "price_max",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "currency": {
+          "name": "currency",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "image": {
+          "name": "image",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "available": {
+          "name": "available",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "position": {
+          "name": "position",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    }
+  },
+  "views": {},
+  "enums": {},
+  "_meta": {
+    "columns": {},
+    "schemas": {},
+    "tables": {}
+  },
+  "internal": {
+    "indexes": {}
+  }
+}

package/apps/storefront/migrations/meta/_journal.json

@@ -0,0 +1,20 @@
+{
+  "version": "7",
+  "dialect": "sqlite",
+  "entries": [
+    {
+      "idx": 0,
+      "version": "6",
+      "when": 1782682889991,
+      "tag": "0000_baseline",
+      "breakpoints": true
+    },
+    {
+      "idx": 1,
+      "version": "6",
+      "when": 1782682914716,
+      "tag": "0001_products_fts",
+      "breakpoints": true
+    }
+  ]
+}

package/apps/storefront/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@tot/storefront-runner",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "description": "Token of Trust storefront RUNNER — source-available multi-tenant renderer (control plane carved out).",
+  "scripts": {
+    "copy-tenant-assets": "node ../../scripts/build/copy-tenant-assets.mjs",
+    "predev": "node ../../scripts/build/copy-tenant-assets.mjs",
+    "dev": "astro dev",
+    "start": "astro dev",
+    "prebuild": "node ../../scripts/build/copy-tenant-assets.mjs",
+    "build": "astro build",
+    "preview": "wrangler dev ./dist/_worker.js/index.js",
+    "typecheck": "astro check && tsc --noEmit",
+    "astro": "astro",
+    "test": "NODE_OPTIONS=--experimental-sqlite vitest run"
+  },
+  "dependencies": {
+    "@astrojs/cloudflare": "^14.0.1",
+    "@astrojs/preact": "^6.0.0",
+    "@storyblok/astro": "^10.0.0",
+    "@tailwindcss/vite": "^4.3.1",
+    "@tot/public-runtime": "workspace:*",
+    "astro": "^7.0.3",
+    "fuse.js": "^7.4.2",
+    "jose": "^6.2.3",
+    "preact": "^10.29.2",
+    "tailwindcss": "^4.3.1"
+  },
+  "devDependencies": {
+    "@astrojs/check": "^0.9.4",
+    "dependency-cruiser": "^18.0.0",
+    "drizzle-kit": "^0.31.10",
+    "drizzle-orm": "^0.45.2",
+    "typescript": "^5.6.3",
+    "vitest": "2.1.8",
+    "wrangler": "^4.105.0"
+  },
+  "license": "SEE LICENSE IN LICENSE"
+}

package/apps/storefront/public/brand/northwind-logo-dark.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="180" height="32" viewBox="0 0 180 32">
+  <text x="0" y="25" font-family="Space Grotesk, system-ui, sans-serif" font-size="26" font-weight="700" fill="#1C2624" letter-spacing="-1">Northwind</text>
+  <circle cx="170" cy="8" r="4" fill="#B5612F"/>
+</svg>

package/apps/storefront/public/brand/northwind-logo-light.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="180" height="32" viewBox="0 0 180 32">
+  <text x="0" y="25" font-family="Space Grotesk, system-ui, sans-serif" font-size="26" font-weight="700" fill="#F4F1EA" letter-spacing="-1">Northwind</text>
+  <circle cx="170" cy="8" r="4" fill="#B5612F"/>
+</svg>

package/apps/storefront/public/brand/northwind-og.svg

@@ -0,0 +1,13 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="630" viewBox="0 0 1200 630">
+  <defs>
+    <linearGradient id="bg" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0%" stop-color="#1F3A34"/>
+      <stop offset="100%" stop-color="#16241F"/>
+    </linearGradient>
+  </defs>
+  <rect width="1200" height="630" fill="url(#bg)"/>
+  <text x="80" y="300" font-family="Space Grotesk, system-ui, sans-serif" font-size="118" font-weight="700" fill="#F4F1EA" letter-spacing="-3">Northwind</text>
+  <text x="84" y="380" font-family="Space Grotesk, system-ui, sans-serif" font-size="118" font-weight="700" fill="#B5612F" letter-spacing="-3">grey season.</text>
+  <text x="84" y="470" font-family="ui-monospace, monospace" font-size="26" fill="#F4F1EA" opacity="0.7" letter-spacing="4">CONSIDERED APPAREL &amp; HOME GOODS</text>
+  <circle cx="1090" cy="120" r="14" fill="#B5612F"/>
+</svg>

package/apps/storefront/public/favicon.svg

@@ -0,0 +1,5 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">
+  <rect width="32" height="32" rx="6" fill="#1F3A34"/>
+  <path d="M9 23V9h2.4l9.2 10.2V9H23v14h-2.4L11.4 12.8V23H9z" fill="#F4F1EA"/>
+  <circle cx="24" cy="9" r="2" fill="#B5612F"/>
+</svg>

package/apps/storefront/public/js/dashboard-team.js

@@ -0,0 +1,147 @@
+/**
+ * Client behavior for /dashboard/<appDomain>/team (#8425 Stage 0).
+ *
+ * Served as a STATIC same-origin file (public/) and referenced via
+ * <script src="/js/dashboard-team.js">, so the strict production CSP allows it via
+ * `script-src 'self'` — no nonce, no per-build hash. (An inline <script> here is
+ * blocked: Astro's `is:inline` drops the templated nonce, and a processed inline
+ * script needs its content-hash pinned in cspStaticHashes on every change. An
+ * external 'self' file avoids both.)
+ *
+ * The tenant appDomain is read from the members-table `data-tenant` attribute (no
+ * server-injected values), so this file is fully static.
+ */
+(function () {
+  const $ = (id) => document.getElementById(id);
+  const membersBody = $("members");
+  if (!membersBody) return;
+  const tenant = membersBody.dataset.tenant;
+
+  function renderMembers(members) {
+    membersBody.replaceChildren();
+    if (!members || !members.length) {
+      const tr = document.createElement("tr");
+      const td = document.createElement("td");
+      td.colSpan = 3; td.className = "muted";
+      td.textContent = "No developers invited yet.";
+      tr.appendChild(td); membersBody.appendChild(tr);
+      return;
+    }
+    for (const m of members) {
+      const tr = document.createElement("tr");
+      const dev = document.createElement("td");
+      dev.textContent = m.developer;
+      const roles = document.createElement("td");
+      roles.textContent = (m.roles || []).join(", ") || "developer";
+      const act = document.createElement("td");
+      act.className = "act";
+      const btn = document.createElement("button");
+      btn.type = "button";
+      btn.className = "rowbtn";
+      btn.textContent = "Resend invite";
+      btn.title = "Re-send the sign-in email to " + m.developer;
+      btn.addEventListener("click", () => resend(m.developer, btn));
+      act.appendChild(btn);
+      tr.appendChild(dev); tr.appendChild(roles); tr.appendChild(act);
+      membersBody.appendChild(tr);
+    }
+  }
+
+  async function resend(email, btn) {
+    if (btn) btn.disabled = true;
+    showMsg("", "Re-sending the sign-in email to " + email + "…");
+    try {
+      const res = await fetch("/api/grants/team-invite", {
+        method: "POST",
+        headers: { "content-type": "application/json", accept: "application/json" },
+        body: JSON.stringify({ tenant, email }),
+      });
+      const body = await res.json().catch(() => ({}));
+      if (res.ok) {
+        showMsg("ok", "Re-sent the sign-in email to " + (body.developer || email) + ".");
+      } else {
+        showMsg("err", body.error || ("Couldn't resend (HTTP " + res.status + ")."));
+      }
+    } catch (e) {
+      showMsg("err", "Couldn't resend: " + (e && e.message ? e.message : e));
+    } finally {
+      if (btn) btn.disabled = false;
+    }
+  }
+
+  function renderError(msg) {
+    membersBody.replaceChildren();
+    const tr = document.createElement("tr");
+    const td = document.createElement("td");
+    td.colSpan = 2; td.className = "muted";
+    td.textContent = msg;
+    tr.appendChild(td); membersBody.appendChild(tr);
+  }
+
+  async function loadMembers() {
+    try {
+      const res = await fetch("/api/grants/team-members?tenant=" + encodeURIComponent(tenant), {
+        headers: { accept: "application/json" },
+      });
+      const body = await res.json().catch(() => ({}));
+      if (res.ok) renderMembers(body.members);
+      else renderError(body.error || ("Couldn't load members (HTTP " + res.status + ")."));
+    } catch (e) {
+      renderError("Couldn't load members: " + (e && e.message ? e.message : e));
+    }
+  }
+
+  function showMsg(kind, text) {
+    const el = $("msg");
+    el.className = "msg " + kind;
+    el.textContent = text;
+  }
+
+  async function invite() {
+    const email = $("email").value.trim();
+    if (!email) { showMsg("err", "Enter a developer email."); return; }
+    const btn = $("inviteBtn");
+    btn.disabled = true;
+    showMsg("", "Sending…");
+    try {
+      // The role selector is present only for ToT staff (#8453); members are
+      // developer-only. tot20 ignores a non-staff role, so sending it is harmless.
+      const roleEl = $("role");
+      const role = roleEl && roleEl.value ? roleEl.value : undefined;
+      const noteEl = $("note");
+      const note = noteEl && noteEl.value.trim() ? noteEl.value.trim() : undefined;
+      const payload = { tenant, email };
+      if (role) payload.role = role;
+      if (note) payload.note = note;
+      const res = await fetch("/api/grants/team-invite", {
+        method: "POST",
+        headers: { "content-type": "application/json", accept: "application/json" },
+        body: JSON.stringify(payload),
+      });
+      const body = await res.json().catch(() => ({}));
+      if (res.ok) {
+        const already = body.changed === false;
+        showMsg("ok", (already ? "Already a developer — re-sent the sign-in email to " : "Invited ") + (body.developer || email) + ".");
+        $("email").value = "";
+        if (noteEl) noteEl.value = "";
+        loadMembers();
+      } else {
+        showMsg("err", body.error || ("Invite failed (HTTP " + res.status + ")."));
+      }
+    } catch (e) {
+      showMsg("err", "Invite failed: " + (e && e.message ? e.message : e));
+    } finally {
+      btn.disabled = false;
+    }
+  }
+
+  // The invite form now shows for members AND ToT staff (#8453), but wire the invite
+  // handlers only when the form is present (defensive). The members list always loads.
+  const inviteBtn = $("inviteBtn");
+  const emailInput = $("email");
+  if (inviteBtn && emailInput) {
+    inviteBtn.addEventListener("click", invite);
+    emailInput.addEventListener("keydown", (e) => { if (e.key === "Enter") invite(); });
+  }
+  loadMembers();
+})();