@tokenoftrust/storefront-runner 0.1.0

package/scripts/tot-dev.mjs

@@ -0,0 +1,439 @@
+#!/usr/bin/env node
+/**
+ * `tot dev` — the developer's on-save local preview loop (the magic).
+ *
+ * Boots the storefront's `astro dev` (which already gives Vite HMR / live-reload
+ * on save) and points the browser at the developer's tenant via the DNS-free
+ * path-prefix route (`/<appDomain>/`). Edit a file under `content/<tenant>/`
+ * (home.html, pages, chrome) or the tenant theme → save → the browser reloads.
+ * Private, on-save, NO publish: product data renders from local fixtures; nothing
+ * is written to KV or shared. ("Publish" — to test/live — stays a separate,
+ * deliberate, compliance-gated step.)
+ *
+ * TWO MODES
+ *   1. MONOREPO (default): `node scripts/tot-dev.mjs <tenant>` — runs astro dev
+ *      over the in-tree colocated `tenants/<tenant>/` layout (content/, public/,
+ *      theme.json).
+ *   2. STANDALONE: `node scripts/tot-dev.mjs --workspace <checkout-path>` — the
+ *      developer has cloned their tenant's Gitea repo (a FLAT, tenant-centric
+ *      layout: `content/`, `public/`, `theme.json`, `.tot/config.json`). This mode
+ *      reads the checkout's `.tot/config.json` `mappings` and grafts each workspace
+ *      prefix into the storefront paths the app globs, then boots the same astro dev.
+ *      Edits in the CHECKOUT hot-reload via Vite. On exit the graft (and any
+ *      backed-up in-tree tenant content) is restored — the tree is left clean.
+ *      Phase-0 bridge: the platform still comes from THIS storefront checkout; the
+ *      containerized "platform baked in, tenant clone mounted" version is deferred.
+ *
+ *      WHY COPY+WATCH, NOT SYMLINK: a symlink from the in-tree path to the checkout
+ *      resolves (in Vite) to the checkout's REAL path, which is OUTSIDE the app root,
+ *      so Vite's `server.fs.allow` denies the `?raw`/glob import ("Denied ID …"). So
+ *      we COPY the checkout's files into the in-tree paths (inside the app root, which
+ *      Vite trusts) and run a recursive `fs.watch` on the checkout that re-syncs each
+ *      changed file back into the in-tree copy on save — which is what fires Vite HMR.
+ *
+ * Two things learned the hard way (see the two-liners below):
+ *   - Tenant is selected by the URL path-prefix (`/<appDomain>/`), NOT by
+ *     DEFAULT_TENANT_ID — the @astrojs/cloudflare dev runtime (workerd) reads env
+ *     from .dev.vars/bindings, so a spawned process.env var never reaches it, and
+ *     a bare `/` falls back to the first static tenant (pilot).
+ *   - `--host` is passed so the server binds all interfaces (0.0.0.0 + ::).
+ *     Without it astro/vite may bind IPv6 `::1` only, and browsers that resolve
+ *     `localhost` to IPv4 `127.0.0.1` get "unable to connect".
+ *
+ * Usage:
+ *   node scripts/tot-dev.mjs <tenant> [--port 4321]
+ *   node scripts/tot-dev.mjs bigdvapor
+ *   node scripts/tot-dev.mjs --workspace ~/tot/site [--port 4321]   (standalone)
+ *   (from a workspace dir with .tot/config.json)  node <repo>/scripts/tot-dev.mjs
+ *
+ * Ctrl-C stops the server. Exit 1 = can't resolve tenant/domain/workspace; 2 = bad usage.
+ */
+import { spawn, spawnSync } from "node:child_process";
+import {
+  readFileSync,
+  existsSync,
+  lstatSync,
+  mkdirSync,
+  renameSync,
+  rmSync,
+  cpSync,
+  watch,
+  readdirSync,
+  statSync,
+} from "node:fs";
+import { dirname, resolve, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const here = dirname(fileURLToPath(import.meta.url));
+const repoRoot = resolve(here, ".."); // scripts/ -> repo root
+
+const argv = process.argv.slice(2);
+const flag = (name, def) => {
+  const i = argv.indexOf(`--${name}`);
+  return i !== -1 && argv[i + 1] && !argv[i + 1].startsWith("--") ? argv[i + 1] : def;
+};
+
+// --- workspace (standalone) mode? --------------------------------------------
+// `--workspace <path>` points at a developer's cloned tenant repo (flat layout +
+// .tot/config.json). Absent → classic monorepo mode.
+const workspacePath = flag("workspace", null);
+
+// --- resolve the tenant + its appDomain --------------------------------------
+// In monorepo mode the workspace config (if any) is read from CWD, as before.
+// In standalone mode it comes from the checkout's .tot/config.json.
+const cfgPath = workspacePath
+  ? join(resolve(workspacePath), ".tot", "config.json")
+  : join(process.cwd(), ".tot", "config.json");
+let cfg = null;
+if (existsSync(cfgPath)) {
+  try {
+    cfg = JSON.parse(readFileSync(cfgPath, "utf8"));
+  } catch {
+    /* ignore */
+  }
+}
+
+if (workspacePath && !cfg) {
+  console.error(
+    `✗ standalone mode: no readable .tot/config.json under ${resolve(workspacePath)}\n` +
+      `  Is this a materialized tenant checkout (content/, public/, theme.json, .tot/config.json)?`,
+  );
+  process.exit(1);
+}
+
+let tenant = argv[0] && !argv[0].startsWith("--") ? argv[0] : null;
+tenant = tenant ?? cfg?.tenant ?? null;
+
+if (!tenant) {
+  console.error(
+    "usage: node scripts/tot-dev.mjs <tenant> [--port 4321]\n" +
+      "       node scripts/tot-dev.mjs --workspace <checkout-path> [--port 4321]\n" +
+      "  (or run from a workspace dir containing .tot/config.json)",
+  );
+  process.exit(2);
+}
+
+/** The path-prefix segment that selects this tenant: its registered appDomain. */
+function resolveDomain(id) {
+  // A workspace marker's `scope` carries the appDomain — but only trust it when
+  // it looks like a hostname (has a dot), since the path-prefix route only
+  // matches a domain that strictly claims the tenant (see tenantRouting.ts).
+  if (cfg?.scope && cfg.scope.includes(".")) return cfg.scope;
+  try {
+    const src = readFileSync(
+      resolve(repoRoot, "apps/storefront/src/config/tenants.ts"),
+      "utf8",
+    );
+    // Each tenant block declares tenant_id then appDomain; pair them up.
+    const re = /tenant_id:\s*"([^"]+)"[\s\S]*?appDomain:\s*"([^"]+)"/g;
+    for (let m; (m = re.exec(src)); ) if (m[1] === id) return m[2];
+  } catch {
+    /* ignore */
+  }
+  return null;
+}
+
+const domain = resolveDomain(tenant);
+if (!domain) {
+  console.error(
+    `✗ couldn't resolve a domain for "${tenant}" — is it registered in ` +
+      `apps/storefront/src/config/tenants.ts (or set as a hostname in .tot/config.json scope)?`,
+  );
+  process.exit(1);
+}
+
+// --- standalone: graft the checkout into the storefront's globbed paths -------
+// COPY the checkout's files into the in-tree paths (so Vite's fs.allow trusts them)
+// + fs.watch the checkout to re-sync each save into the in-tree copy (fires HMR).
+// Records let us undo everything on exit (leave the tree exactly as found).
+/** @type {{ target: string, backup: string|null }[]} */
+const grafts = [];
+/** @type {import("node:fs").FSWatcher[]} */
+const watchers = [];
+let cleanedUp = false;
+
+function isSymlink(p) {
+  try {
+    return lstatSync(p).isSymbolicLink();
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Move `from` → `to`, with a cross-device fallback. In the container the baked-in
+ * `tenants/<id>/` lives in a read-only overlay layer, and overlayfs can't rename a
+ * directory across the layer boundary — `renameSync` throws EXDEV. Fall back to a
+ * recursive copy + remove so the graft's move-aside/restore still works there. On
+ * macOS (same-fs) the fast rename is taken.
+ */
+function movePath(from, to) {
+  try {
+    renameSync(from, to);
+  } catch (e) {
+    if (e?.code !== "EXDEV") throw e;
+    cpSync(from, to, { recursive: true });
+    rmSync(from, { recursive: true, force: true });
+  }
+}
+
+function cleanupGrafts() {
+  if (cleanedUp) return;
+  cleanedUp = true;
+  for (const w of watchers) {
+    try {
+      w.close();
+    } catch {
+      /* best effort */
+    }
+  }
+  // Undo in reverse: remove our copied-in files, then restore any backed-up content.
+  for (const { target, backup } of grafts.reverse()) {
+    try {
+      if (existsSync(target) || isSymlink(target)) rmSync(target, { recursive: true, force: true });
+    } catch {
+      /* best effort */
+    }
+    if (backup) {
+      try {
+        movePath(backup, target);
+      } catch {
+        /* best effort */
+      }
+    }
+  }
+}
+
+/** Re-sync one changed checkout path into its in-tree copy (copy on save, remove on delete). */
+function resync(sourceRoot, targetRoot, rel) {
+  const from = rel ? join(sourceRoot, rel) : sourceRoot;
+  const to = rel ? join(targetRoot, rel) : targetRoot;
+  try {
+    if (existsSync(from)) {
+      mkdirSync(dirname(to), { recursive: true });
+      cpSync(from, to, { recursive: true });
+    } else if (existsSync(to)) {
+      rmSync(to, { recursive: true, force: true });
+    }
+  } catch (e) {
+    console.warn(`  ⚠ re-sync failed for ${rel || "(root)"}: ${e?.message}`);
+  }
+}
+
+/**
+ * Watch a checkout path (dir or single file) and invoke `onChange(rel)` on every
+ * add/change/delete, where `rel` is the source-relative path ("" for a file source).
+ *
+ * Prefers native `fs.watch` (instant, event-driven — great on macOS). Falls back to
+ * an mtime POLL loop when either (a) `CHOKIDAR_USEPOLLING` is set — the containerized
+ * `tot dev` sets it because a bind-mount often doesn't deliver inotify events across
+ * the VM/overlay boundary — or (b) native recursive watch throws, which it always
+ * does on Linux (`fs.watch(dir, {recursive:true})` is unsupported there). Dependency-
+ * free on purpose (matches the rest of the tenant tooling); returns a `{ close() }`.
+ */
+function startWatch(source, isDir, onChange) {
+  const poll = /^(1|true|yes|on)$/i.test(process.env.CHOKIDAR_USEPOLLING || "");
+  if (!poll) {
+    try {
+      return watch(source, { recursive: isDir }, (_event, filename) =>
+        onChange(isDir ? (filename ? String(filename) : "") : ""),
+      );
+    } catch (e) {
+      // Linux: recursive fs.watch is ERR_FEATURE_UNAVAILABLE_ON_PLATFORM → poll.
+      console.warn(
+        `  ⚠ native watch unavailable (${e?.code || e?.message}); falling back to polling.`,
+      );
+    }
+  }
+  const interval = Number(process.env.CHOKIDAR_INTERVAL) || 300;
+  const seenMtimes = new Map(); // relPath -> mtimeMs
+  let primed = false;
+  const scan = () => {
+    const present = new Set();
+    const visit = (absDir, relDir) => {
+      let entries;
+      try {
+        entries = readdirSync(absDir, { withFileTypes: true });
+      } catch {
+        return; // dir vanished mid-scan — a later scan reconciles it
+      }
+      for (const e of entries) {
+        const rel = relDir ? join(relDir, e.name) : e.name;
+        const abs = join(absDir, e.name);
+        if (e.isDirectory()) {
+          visit(abs, rel);
+          continue;
+        }
+        present.add(rel);
+        let m;
+        try {
+          m = statSync(abs).mtimeMs;
+        } catch {
+          continue;
+        }
+        const prev = seenMtimes.get(rel);
+        if (prev === undefined || prev !== m) {
+          seenMtimes.set(rel, m);
+          if (primed) onChange(rel);
+        }
+      }
+    };
+    if (isDir) {
+      visit(source, "");
+    } else {
+      present.add("");
+      let m;
+      try {
+        m = statSync(source).mtimeMs;
+      } catch {
+        m = undefined;
+      }
+      const prev = seenMtimes.get("");
+      if (m !== undefined && prev !== m) {
+        seenMtimes.set("", m);
+        if (primed) onChange("");
+      }
+    }
+    for (const rel of [...seenMtimes.keys()]) {
+      if (!present.has(rel)) {
+        seenMtimes.delete(rel);
+        if (primed) onChange(rel);
+      }
+    }
+    primed = true;
+  };
+  scan(); // prime the snapshot without emitting spurious initial events
+  const id = setInterval(scan, interval);
+  if (typeof id.unref === "function") id.unref();
+  return { close: () => clearInterval(id) };
+}
+
+if (workspacePath) {
+  const wsRoot = resolve(workspacePath);
+  const mappings = Array.isArray(cfg.mappings) ? cfg.mappings : [];
+  if (mappings.length === 0) {
+    console.error(`✗ .tot/config.json has no "mappings" — cannot graft the checkout.`);
+    process.exit(1);
+  }
+
+  console.log(`\n  tot dev — standalone (${tenant})`);
+  console.log(`  checkout: ${wsRoot}`);
+
+  for (const map of mappings) {
+    // `workspace` is the checkout-relative prefix (e.g. "content/", "theme.json").
+    // COLOCATION: a tenant IS the repo-root dir `tenants/<id>/`, and the checkout
+    // (a `git subtree split --prefix=tenants/<id>` of that dir) has the SAME layout
+    // at its root — so the graft is an identity map: content/ -> tenants/<id>/content/,
+    // public/ -> tenants/<id>/public/, theme.json -> tenants/<id>/theme.json. We map
+    // structurally (ignoring any legacy `repo` field in the checkout's .tot/config.json).
+    const wsRel = String(map.workspace ?? "").replace(/\/+$/, "");
+    if (!wsRel) continue;
+    const repoRel = join("tenants", tenant, wsRel);
+
+    const source = resolve(wsRoot, wsRel); // real files in the checkout
+    const target = resolve(repoRoot, repoRel); // where the app globs them
+    const isDir = map.kind !== "file";
+
+    if (!existsSync(source)) {
+      console.warn(`  ⚠ checkout has no ${wsRel} — skipping (${map.kind ?? "?"})`);
+      continue;
+    }
+
+    // Ensure the destination's parent exists (e.g. content/ or themes/tenants/).
+    mkdirSync(dirname(target), { recursive: true });
+
+    // If real in-tree content already occupies the destination, move it aside so
+    // we can restore it verbatim on exit (never destroy tracked tenant content).
+    let backup = null;
+    if (existsSync(target) || isSymlink(target)) {
+      backup = `${target}.__totdev_bak_${process.pid}`;
+      movePath(target, backup);
+    }
+
+    // COPY the checkout's files into the in-tree path (inside Vite's trusted root).
+    cpSync(source, target, { recursive: true });
+    grafts.push({ target, backup });
+
+    // WATCH the checkout for saves → re-sync into the in-tree copy → Vite HMR.
+    // `startWatch` is native-fs.watch on macOS and a polling loop in the container
+    // (Linux recursive watch is unsupported; a bind-mount may swallow inotify).
+    try {
+      const w = startWatch(source, isDir, (rel) => resync(source, target, rel));
+      watchers.push(w);
+    } catch (e) {
+      console.warn(`  ⚠ could not watch ${wsRel} (edits won't hot-reload): ${e?.message}`);
+    }
+
+    console.log(`  ↪ ${repoRel} ⇐ ${wsRel}${backup ? " (in-tree content backed up)" : ""}`);
+  }
+
+  if (grafts.length === 0) {
+    console.error(`✗ nothing to graft — the checkout had none of the mapped prefixes.`);
+    cleanupGrafts();
+    process.exit(1);
+  }
+} else if (!existsSync(resolve(repoRoot, "tenants", tenant, "content"))) {
+  console.warn(`⚠ no tenants/${tenant}/content/ found — the tenant may not be registered yet.`);
+}
+
+const port = String(flag("port", "4321"));
+const url = `http://localhost:${port}/${domain}/`;
+
+console.log(`\n  tot dev — ${tenant}`);
+console.log(`  → ${url}`);
+if (workspacePath) {
+  console.log(`  Edit files in your CHECKOUT (content/*.html, theme.json, public/…) + save → the browser reloads.`);
+} else {
+  console.log(`  Edit tenants/${tenant}/content/*.html (or the theme) + save → the browser reloads.`);
+}
+console.log(`  Private local preview — nothing is published. Server binds all interfaces (LAN-visible). Ctrl-C to stop.\n`);
+
+// --- mirror colocated tenant public/ assets into the storefront public/ dir ----
+// astro dev is exec'd directly below (bypassing the `predev` npm lifecycle), so
+// run the copy here: tenants/<id>/public/** -> apps/storefront/public/tenants/<id>/.
+// Must run AFTER any standalone graft (so a grafted checkout's public/ is mirrored).
+{
+  const r = spawnSync(
+    "node",
+    [resolve(repoRoot, "scripts/build/copy-tenant-assets.mjs")],
+    { cwd: repoRoot, stdio: "inherit" },
+  );
+  if (r.status !== 0) {
+    console.warn("  ⚠ copy-tenant-assets failed — static tenant assets may 404.");
+  }
+}
+
+// --- boot astro dev (Vite HMR); --host so IPv4 `localhost`/127.0.0.1 both work -
+// In standalone mode we MUST keep astro in the FOREGROUND, attached to this
+// process: Astro 7 auto-detects an agent-run terminal and forks the dev server to
+// a detached daemon (`astro dev stop/status`), which would make THIS process exit
+// immediately — firing our cleanup and tearing down the graft symlinks while the
+// daemon keeps serving the (restored) in-tree content. Setting ASTRO_DEV_BACKGROUND
+// tells Astro "you are already the managed child → run foreground" (see astro's
+// cli/dev/{index,background}.js), so our SIGINT/exit lifecycle and symlink cleanup
+// stay correct. Monorepo mode is left untouched (current behavior).
+// TOT_DEV_TENANT tells the inline-AI edit loop (WS5 G1 — astro.config.mjs's
+// inlineAiEditPlugin, scripts/dev/ai-edit.mjs) which tenant's content/theme to
+// read+write: one `tot dev <tenant>` run always serves exactly one tenant, so
+// there's no per-request domain lookup to do.
+const spawnEnv = workspacePath
+  ? { ...process.env, ASTRO_DEV_BACKGROUND: "1", TOT_DEV_TENANT: tenant }
+  : { ...process.env, TOT_DEV_TENANT: tenant };
+const child = spawn(
+  "pnpm",
+  ["--filter", "@tot/storefront-runner", "exec", "astro", "dev", "--port", port, "--host"],
+  { cwd: repoRoot, stdio: "inherit", env: spawnEnv },
+);
+
+// Clean up grafts on every exit path so we never leave symlinks in the tree.
+function shutdown(signal) {
+  child.kill(signal);
+}
+child.on("exit", (code) => {
+  cleanupGrafts();
+  process.exit(code ?? 0);
+});
+process.on("SIGINT", () => shutdown("SIGINT"));
+process.on("SIGTERM", () => shutdown("SIGTERM"));
+// Belt-and-suspenders: if the parent dies without the child exit firing.
+process.on("exit", cleanupGrafts);

package/tenants/bigdvapor/content/blog.json

@@ -0,0 +1,52 @@
+{
+  "posts": [
+    {
+      "title": "2016 Election",
+      "href": "/blogs/news/tagged/2016-election"
+    },
+    {
+      "title": "Aquios",
+      "href": "/blogs/news/tagged/aquios"
+    },
+    {
+      "title": "Aquios Esco Bars",
+      "href": "/blogs/news/tagged/aquios-esco-bars"
+    },
+    {
+      "title": "Article",
+      "href": "/blogs/news/tagged/article"
+    },
+    {
+      "title": "Aspire",
+      "href": "/blogs/news/tagged/aspire"
+    },
+    {
+      "title": "Aspire Atlantis",
+      "href": "/blogs/news/tagged/aspire-atlantis"
+    },
+    {
+      "title": "Aspire Premium Kit",
+      "href": "/blogs/news/tagged/aspire-premium-kit"
+    },
+    {
+      "title": "Battery",
+      "href": "/blogs/news/tagged/battery"
+    },
+    {
+      "title": "Big D Vapor",
+      "href": "/blogs/news/tagged/big-d-vapor"
+    },
+    {
+      "title": "Big Pharma",
+      "href": "/blogs/news/tagged/big-pharma"
+    },
+    {
+      "title": "Big Tobacco",
+      "href": "/blogs/news/tagged/big-tobacco"
+    },
+    {
+      "title": "biometric",
+      "href": "/blogs/news/tagged/biometric"
+    }
+  ]
+}

package/tenants/bigdvapor/content/chrome.html

@@ -0,0 +1,149 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<link rel="icon" type="image/png" href="/tenants/bigdvapor/logo-wordmark.png">
+<link rel="stylesheet" href="/tenants/bigdvapor/themes/bigd-navy.css">
+<link rel="stylesheet" href="/tenants/bigdvapor/pages/mkt.css">
+<!--PAGE_HEAD-->
+</head>
+<body>
+<a class="skip-link" href="#main">Skip to main content</a>
+
+<!-- Top FDA warning bar -->
+<div class="topbar-warning"><p>WARNING: This product contains nicotine. Nicotine is an addictive chemical.</p></div>
+
+<!-- Announcement: red scrolling marquee -->
+<div class="announce-marquee" aria-label="Free US shipping on orders over $100">
+  <div class="announce-marquee__track" aria-hidden="true">
+    <span>Free US shipping on orders over $100!</span><span>Free US shipping on orders over $100!</span><span>Free US shipping on orders over $100!</span><span>Free US shipping on orders over $100!</span>
+    <span>Free US shipping on orders over $100!</span><span>Free US shipping on orders over $100!</span><span>Free US shipping on orders over $100!</span><span>Free US shipping on orders over $100!</span>
+  </div>
+</div>
+
+<!-- Utility nav -->
+<div class="utility-nav">
+  <div class="container">
+    <ul>
+      <li><a href="/blogs/news">News</a></li>
+      <li><a href="/pages/about-us">About</a></li>
+      <li><a href="/pages/contact-us">Contact</a></li>
+      <li><a href="/blogs/news">Blog</a></li>
+      <li><a href="https://bigdcbd.com/" rel="noopener">Big D CBD</a></li>
+    </ul>
+    <div class="utility-nav__right">
+      <span class="sel">English</span>
+      <span class="sel">United States (USD $)</span>
+      <span class="social">
+        <a href="https://twitter.com/bigdvapor" aria-label="X" rel="noopener"><svg viewBox="0 0 24 24"><path d="M18.9 2H22l-7.1 8.1L23 22h-6.6l-5-6.6L5.7 22H2.6l7.6-8.7L1.5 2h6.8l4.5 6 5.1-6zm-1.2 18h1.8L7.4 3.9H5.5L17.7 20z"/></svg></a>
+        <a href="https://pinterest.com/bigdvapor" aria-label="Pinterest" rel="noopener"><svg viewBox="0 0 24 24"><path d="M12 2a10 10 0 0 0-3.6 19.3c-.1-.8-.2-2 0-2.9l1.2-5s-.3-.6-.3-1.5c0-1.4.8-2.5 1.9-2.5.9 0 1.3.7 1.3 1.5 0 .9-.6 2.2-.9 3.5-.2 1 .5 1.9 1.6 1.9 1.9 0 3.2-2.4 3.2-5.3 0-2.2-1.5-3.8-4.1-3.8-3 0-4.9 2.2-4.9 4.7 0 .9.3 1.5.7 2 .2.2.2.3.1.5l-.2.9c-.1.3-.3.4-.6.2-1.1-.5-1.7-1.9-1.7-3.1 0-2.5 2.1-5.5 6.3-5.5 3.4 0 5.6 2.4 5.6 5 0 3.5-1.9 6.1-4.8 6.1-1 0-1.9-.5-2.2-1.1l-.6 2.3c-.2.8-.7 1.7-1.1 2.3A10 10 0 1 0 12 2z"/></svg></a>
+      </span>
+    </div>
+  </div>
+</div>
+
+<!-- Header -->
+<header class="site-header">
+  <div class="container header-row">
+    <a class="brand" href="/" aria-label="Big D Vapor home"><img src="/tenants/bigdvapor/logo-wordmark.png" alt="Big D Vapor" width="1397" height="288"></a>
+    <form class="header-search" action="/search" method="get" role="search">
+      <label class="sr-only" for="hdr-q">Search for anything</label>
+      <input id="hdr-q" type="search" name="q" placeholder="Search for anything" autocomplete="off">
+      <button type="submit" aria-label="Search"><svg viewBox="0 0 24 24"><circle cx="11" cy="11" r="7"/><path d="M21 21l-4.3-4.3"/></svg></button>
+    </form>
+    <div class="header-actions">
+      <a href="/account" aria-label="Account"><svg viewBox="0 0 24 24"><circle cx="12" cy="8" r="4"/><path d="M4 21c0-4.4 3.6-7 8-7s8 2.6 8 7"/></svg></a>
+      <a class="cart" href="/cart" aria-label="Cart"><svg viewBox="0 0 24 24"><path d="M6 6h15l-1.5 9h-12z"/><circle cx="9" cy="20" r="1.4"/><circle cx="18" cy="20" r="1.4"/><path d="M6 6L5 3H2"/></svg><span class="count">0</span></a>
+      <button class="hamburger" id="hamburger" aria-label="Toggle navigation menu" aria-expanded="false" aria-controls="primaryNav"><span></span><span></span><span></span></button>
+    </div>
+  </div>
+  <nav class="primary-nav-bar" aria-label="Primary">
+    <div class="container">
+      <nav class="primary-nav" id="primaryNav">
+        <ul>
+          <li><a class="is-flag" href="/collections/texas-compliant-disposables">Texas Compliant Disposables<span class="new-badge">NEW</span></a></li>
+          <li><a href="/collections/disposables">Disposables<span class="caret">▾</span></a></li>
+          <li><a href="/collections/e-liquids">E-Liquid<span class="caret">▾</span></a></li>
+          <li><a href="/collections/devices">Devices<span class="caret">▾</span></a></li>
+          <li><a href="/collections/coils-parts">Coils &amp; Parts<span class="caret">▾</span></a></li>
+          <li><a href="/collections/nicotine-pouches">Nic Pouches</a></li>
+          <li><a href="/collections/new-products">New Products</a></li>
+          <li><a href="/collections/on-sale">On Sale</a></li>
+          <li><a href="/collections/disposables">Brands<span class="caret">▾</span></a></li>
+        </ul>
+      </nav>
+    </div>
+  </nav>
+</header>
+
+<!--PAGE_BODY-->
+
+<!-- Compliance strip -->
+<div class="compliance-strip">
+  <div class="container"><p>WARNING: This product contains nicotine. Nicotine is an addictive chemical.</p></div>
+</div>
+
+<!-- Footer -->
+<footer class="site-footer">
+  <div class="container">
+    <div class="footer-grid">
+      <div class="footer-brand">
+        <img src="/tenants/bigdvapor/logo-wordmark.png" alt="Big D Vapor" width="1397" height="288">
+        <p>hello@bigdvapor.com<br>1 (866) 746-1136</p>
+      </div>
+      <div class="footer-col">
+        <h4>Shop</h4>
+        <ul>
+          <li><a href="/collections/disposables">Disposables</a></li>
+          <li><a href="/collections/e-liquids">E-Liquid</a></li>
+          <li><a href="/collections/devices">Devices</a></li>
+          <li><a href="/collections/coils-parts">Coils &amp; Parts</a></li>
+          <li><a href="/collections/new-products">New Products</a></li>
+          <li><a href="/collections/on-sale">On Sale</a></li>
+        </ul>
+      </div>
+      <div class="footer-col">
+        <h4>Support</h4>
+        <ul>
+          <li><a href="/search">Search</a></li>
+          <li><a href="/pages/about-us">About Us</a></li>
+          <li><a href="/pages/contact-us">Contact Us</a></li>
+          <li><a href="/blogs/news">Blog</a></li>
+          <li><a href="/pages/shipping-returns">Shipping Policy</a></li>
+          <li><a href="/pages/privacy-policy">Privacy Policy</a></li>
+        </ul>
+      </div>
+      <div class="footer-col">
+        <h4>Join the Big D Community</h4>
+        <p>Stay updated on new arrivals, exclusive offers.</p>
+        <form class="footer-news" action="/api/newsletter" method="post">
+          <input type="hidden" name="source" value="footer">
+          <label class="sr-only" for="foot-email">Email</label>
+          <input id="foot-email" type="email" name="email" placeholder="Email" required>
+          <button type="submit" aria-label="Subscribe">→</button>
+        </form>
+        <div class="pay-badges" aria-label="Accepted payments">
+          <span>AMEX</span><span>Discover</span><span>Google&nbsp;Pay</span><span>Mastercard</span><span>Visa</span>
+        </div>
+      </div>
+    </div>
+    <div class="footer-warning">
+      <p><strong>WARNING:</strong> This product contains nicotine. Nicotine is an addictive chemical. Products intended for adults of legal smoking age (21+) only.</p>
+    </div>
+    <div class="footer-bottom">
+      <p>© Big D Vapor. All rights reserved.</p>
+      <p>Must be 21 or older to purchase. Not for sale to minors.</p>
+    </div>
+  </div>
+</footer>
+
+<script>
+(function () {
+  var burger = document.getElementById('hamburger');
+  var nav = document.getElementById('primaryNav');
+  if (burger && nav) burger.addEventListener('click', function () { var o = nav.classList.toggle('open'); burger.setAttribute('aria-expanded', o ? 'true' : 'false'); });
+})();
+</script>
+</body>
+</html>