@tokenoftrust/storefront-runner 1.3.4-rc.4 → 1.4.0

package/tenants/home/public/pages/storefront.css

@@ -1,3 +1,26 @@
+/* Self-hosted web fonts (audit finding 6) — replaces the render-blocking
+   third-party Google Fonts stylesheet formerly linked in content/home.html.
+   woff2 vendored under /tenants/home/fonts/ (from @fontsource, latin +
+   latin-ext subsets); font-display: swap preserved. Same-origin => CSP 'self'. */
+@font-face{font-family:'Plus Jakarta Sans';font-style:normal;font-display:swap;font-weight:500;src:url(/tenants/home/fonts/plus-jakarta-sans-latin-ext-500-normal.woff2) format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}
+@font-face{font-family:'Plus Jakarta Sans';font-style:normal;font-display:swap;font-weight:500;src:url(/tenants/home/fonts/plus-jakarta-sans-latin-500-normal.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}
+@font-face{font-family:'Plus Jakarta Sans';font-style:normal;font-display:swap;font-weight:600;src:url(/tenants/home/fonts/plus-jakarta-sans-latin-ext-600-normal.woff2) format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}
+@font-face{font-family:'Plus Jakarta Sans';font-style:normal;font-display:swap;font-weight:600;src:url(/tenants/home/fonts/plus-jakarta-sans-latin-600-normal.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}
+@font-face{font-family:'Plus Jakarta Sans';font-style:normal;font-display:swap;font-weight:700;src:url(/tenants/home/fonts/plus-jakarta-sans-latin-ext-700-normal.woff2) format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}
+@font-face{font-family:'Plus Jakarta Sans';font-style:normal;font-display:swap;font-weight:700;src:url(/tenants/home/fonts/plus-jakarta-sans-latin-700-normal.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}
+@font-face{font-family:'Plus Jakarta Sans';font-style:normal;font-display:swap;font-weight:800;src:url(/tenants/home/fonts/plus-jakarta-sans-latin-ext-800-normal.woff2) format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}
+@font-face{font-family:'Plus Jakarta Sans';font-style:normal;font-display:swap;font-weight:800;src:url(/tenants/home/fonts/plus-jakarta-sans-latin-800-normal.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}
+@font-face{font-family:'Inter';font-style:normal;font-display:swap;font-weight:400;src:url(/tenants/home/fonts/inter-latin-ext-400-normal.woff2) format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}
+@font-face{font-family:'Inter';font-style:normal;font-display:swap;font-weight:400;src:url(/tenants/home/fonts/inter-latin-400-normal.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}
+@font-face{font-family:'Inter';font-style:normal;font-display:swap;font-weight:500;src:url(/tenants/home/fonts/inter-latin-ext-500-normal.woff2) format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}
+@font-face{font-family:'Inter';font-style:normal;font-display:swap;font-weight:500;src:url(/tenants/home/fonts/inter-latin-500-normal.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}
+@font-face{font-family:'Inter';font-style:normal;font-display:swap;font-weight:600;src:url(/tenants/home/fonts/inter-latin-ext-600-normal.woff2) format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}
+@font-face{font-family:'Inter';font-style:normal;font-display:swap;font-weight:600;src:url(/tenants/home/fonts/inter-latin-600-normal.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}
+@font-face{font-family:'JetBrains Mono';font-style:normal;font-display:swap;font-weight:400;src:url(/tenants/home/fonts/jetbrains-mono-latin-ext-400-normal.woff2) format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}
+@font-face{font-family:'JetBrains Mono';font-style:normal;font-display:swap;font-weight:400;src:url(/tenants/home/fonts/jetbrains-mono-latin-400-normal.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}
+@font-face{font-family:'JetBrains Mono';font-style:normal;font-display:swap;font-weight:500;src:url(/tenants/home/fonts/jetbrains-mono-latin-ext-500-normal.woff2) format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}
+@font-face{font-family:'JetBrains Mono';font-style:normal;font-display:swap;font-weight:500;src:url(/tenants/home/fonts/jetbrains-mono-latin-500-normal.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}
+
 /* Storefront by Token of Trust — early-access landing page.
  * Ported from the approved prototype; served at /tenants/home/pages/storefront.css
  * (mirrored from tenants/home/public/ by scripts/build/copy-tenant-assets.mjs).

package/apps/storefront/src/lib/dev/hostedCockpit.ts

@@ -1,169 +0,0 @@
-/**
- * Shared auth + tenant + provider resolution for the hosted /dev cockpit's
- * /api/dev/* routes (cp-tree, cp-file, cp-write, and cp-diff/cp-locate landing
- * on top). Mirrors /api/content-edit/ai-edit's gate exactly: a signed-in
- * developer session with a real capability, resolving only the session's OWN
- * tenant — never a caller-supplied one. See decision
- * architecture-environment-aware-cockpit (workstream tot-lime-cloud-dev-cockpit).
- *
- * Also carries the path resolution + draft-overlay helpers shared by
- * cp-file/cp-write/cp-diff, so the three routes agree on exactly one
- * definition of "the writable surface" and "the developer's current value for
- * a path" (draft-if-present else published) rather than three copies drifting.
- */
-import type { APIContext } from "astro";
-import { readViewerSession } from "@/lib/auth/route";
-import { json } from "@/lib/grants/route.js";
-import { readEnv, readKv } from "@/lib/env";
-import { resolvePreviewTenant } from "@/config/previewTenantLookup";
-import { createContentProvider, type ContentProvider } from "@/lib/storyblok/provider";
-import { readPublishedArtifact, themeArtifactPath } from "@tot/public-runtime";
-import type { TenantConfig } from "@tot/public-runtime";
-import {
-  DEV_DRAFT_COOKIE,
-  DEV_DRAFT_TTL_SECONDS,
-  devDraftKey,
-  signDevDraftToken,
-  verifyDevDraftToken,
-} from "@/lib/dev/devDraft";
-
-export interface CockpitContext {
-  tenant: TenantConfig;
-  provider: ContentProvider;
-  kvGet: (key: string) => Promise<string | null>;
-  kvPut: ((key: string, value: string, opts: { expirationTtl: number }) => Promise<void>) | null;
-  draftSecret: string | null;
-}
-
-/** Resolved context, or a Response the caller should return as-is (401/403). */
-export async function resolveCockpitContext(
-  context: APIContext,
-): Promise<CockpitContext | Response> {
-  const session = await readViewerSession({ cookies: context.cookies });
-  if (!session) return json({ ok: false, message: "sign in required" }, 401);
-  if (!session.capability || session.capability === "none") {
-    return json({ ok: false, message: "no developer capability on this account" }, 403);
-  }
-
-  // The tenant is the session's OWN store (first membership, else the session's
-  // primary resource) — the same resolution /dev renders with and ai-edit.ts
-  // authenticates edits against. No caller-supplied tenant is ever honored.
-  const wanted = (session.tenants?.[0]?.resource ?? session.resource ?? "").toLowerCase();
-  const tenant = wanted ? await resolvePreviewTenant(wanted) : null;
-  if (!tenant) return json({ ok: false, message: "no store linked to this account" }, 403);
-
-  const kv = await readKv("TENANT_CACHE");
-  const kvGet = kv ? (key: string) => kv.get(key) : async () => null;
-  const kvPut = kv
-    ? (key: string, value: string, opts: { expirationTtl: number }) => kv.put(key, value, opts)
-    : null;
-  const draftSecret = (await readEnv("CUSTOMIZATION_PREVIEW_SECRET")) ?? null;
-  const provider = createContentProvider(tenant, kv ? { get: kvGet, env: "live" } : undefined);
-
-  return { tenant, provider, kvGet, kvPut, draftSecret };
-}
-
-export function isCockpitContext(v: CockpitContext | Response): v is CockpitContext {
-  return !(v instanceof Response);
-}
-
-// ---------------------------------------------------------------------------
-// The writable surface: content/home.html, content/pages-html/<slug>.html,
-// theme.json — exactly scripts/dev/safe-path.mjs's WRITE_ALLOWLIST, mirrored
-// here since the hosted Worker has no filesystem to check it against.
-// ---------------------------------------------------------------------------
-
-const PAGE_HTML_RE = /^content\/pages-html\/([^\0]+)\.html$/;
-
-export function pageSlugForPath(path: string): string | null {
-  return PAGE_HTML_RE.exec(path)?.[1] ?? null;
-}
-
-export function isWritablePath(path: string): boolean {
-  return path === "content/home.html" || path === "theme.json" || PAGE_HTML_RE.test(path);
-}
-
-export function languageForPath(path: string): string | null {
-  if (path === "theme.json") return "json";
-  if (path === "content/home.html" || PAGE_HTML_RE.test(path)) return "html";
-  return null;
-}
-
-/** The PUBLISHED value for one of the three writable-surface paths, or null if unknown/absent. */
-export async function readPublishedPath(ctx: CockpitContext, path: string): Promise<string | null> {
-  if (path === "content/home.html") return ctx.provider.getHomeHtml();
-  if (path === "theme.json") {
-    return readPublishedArtifact(ctx.kvGet, ctx.tenant.tenant_id, "live", themeArtifactPath(ctx.tenant.tenant_id));
-  }
-  const slug = pageSlugForPath(path);
-  if (slug) return ctx.provider.getPageHtml(slug);
-  return null;
-}
-
-/**
- * Deterministic small hash, standing in for the local file-writer's mtimeMs as
- * an opaque "version" the client round-trips as `baseVersion` (C6 stale-write
- * guard) — there's no filesystem here to stat. null in, null out (mirrors the
- * local contract's `current: null` for "doesn't exist yet").
- */
-export function contentVersion(content: string | null): number | null {
-  if (content === null) return null;
-  let h = 0x811c9dc5;
-  for (let i = 0; i < content.length; i++) {
-    h ^= content.charCodeAt(i);
-    h = Math.imul(h, 0x01000193);
-  }
-  return h >>> 0;
-}
-
-export interface DraftState {
-  /** The developer's existing draft id if their cookie verifies for this tenant, else a fresh one. */
-  draftId: string;
-  /** Draft-overlay value for `path` if one exists, else null. */
-  draftContent: string | null;
-}
-
-/** Resolve (or mint) this request's draft id + this path's current draft-overlay value, if any. */
-export async function resolveDraftState(
-  context: APIContext,
-  ctx: CockpitContext,
-  path: string,
-): Promise<DraftState> {
-  const nowSeconds = Math.floor(Date.now() / 1000);
-  const priorCookie = context.cookies.get(DEV_DRAFT_COOKIE)?.value ?? null;
-  const priorClaims =
-    priorCookie && ctx.draftSecret ? await verifyDevDraftToken(ctx.draftSecret, priorCookie, nowSeconds) : null;
-  const draftId =
-    priorClaims?.tenantId === ctx.tenant.tenant_id ? priorClaims.draftId : crypto.randomUUID();
-  const draftContent = await ctx.kvGet(devDraftKey(ctx.tenant.tenant_id, draftId, path));
-  return { draftId, draftContent };
-}
-
-/** The value the developer currently sees for `path`: their draft if present, else published. */
-export async function readEffectivePath(
-  context: APIContext,
-  ctx: CockpitContext,
-  path: string,
-): Promise<{ content: string | null; draftId: string }> {
-  const { draftId, draftContent } = await resolveDraftState(context, ctx, path);
-  if (draftContent !== null) return { content: draftContent, draftId };
-  return { content: await readPublishedPath(ctx, path), draftId };
-}
-
-/** (Re)issue the signed draft cookie so the middleware overlay + this route's own reads see it. */
-export async function setDraftCookie(
-  context: APIContext,
-  ctx: CockpitContext,
-  draftId: string,
-): Promise<void> {
-  if (!ctx.draftSecret) return;
-  const nowSeconds = Math.floor(Date.now() / 1000);
-  const token = await signDevDraftToken(ctx.draftSecret, ctx.tenant.tenant_id, draftId, DEV_DRAFT_TTL_SECONDS, nowSeconds);
-  context.cookies.set(DEV_DRAFT_COOKIE, token, {
-    httpOnly: true,
-    secure: true,
-    sameSite: "lax",
-    path: "/",
-    maxAge: DEV_DRAFT_TTL_SECONDS,
-  });
-}