@tokenoftrust/storefront-runner 1.4.2-rc.0 → 2.0.1

package/apps/storefront/src/lib/blog/collection.ts

@@ -1,4 +1,16 @@
+import { tenantDirSegment } from "@tot/public-runtime";
 import type { AuthorBio, BlogPost, BlogPostSummary, PostStatus } from "./types.js";
+import type { ContentProvider } from "../storyblok/provider.js";
+
+type ArtifactSource = Pick<ContentProvider, "readArtifact" | "listArtifactPaths">;
+function canReadArtifacts(value: ArtifactSource | undefined): value is ArtifactSource {
+  return typeof value?.listArtifactPaths === "function" && typeof value.readArtifact === "function";
+}
+export interface CollectionReadOptions {
+  includeUnpublished?: boolean;
+  now?: string;
+  content?: ArtifactSource;
+}
 
 /** A blog collection = a route base + a per-tenant content dir. */
 export interface Collection {
@@ -10,15 +22,24 @@ export interface Collection {
 // collection id are both path segments filtered at call time. The derived index
 // is the set of `posts/*.json` files — there is no hand-maintained index.json.
 const postGlobs = import.meta.glob<BlogPost>(
-  "../../../../../tenants/*/content/*/posts/*.json",
+  [
+    "../../../../../tenants/*/content/*/posts/*.json",
+    "../../../../../tenants/e2e/*/content/*/posts/*.json",
+  ],
   { import: "default" },
 );
 const redirectGlobs = import.meta.glob<Record<string, string>>(
-  "../../../../../tenants/*/content/*/redirects.json",
+  [
+    "../../../../../tenants/*/content/*/redirects.json",
+    "../../../../../tenants/e2e/*/content/*/redirects.json",
+  ],
   { import: "default" },
 );
 const authorsGlobs = import.meta.glob<Record<string, AuthorBio>>(
-  "../../../../../tenants/*/content/*/authors.json",
+  [
+    "../../../../../tenants/*/content/*/authors.json",
+    "../../../../../tenants/e2e/*/content/*/authors.json",
+  ],
   { import: "default" },
 );
 
@@ -117,7 +138,7 @@ function normalize(raw: BlogPost): BlogPost {
 }
 
 function postsPrefix(tenantId: string, collection: string): string {
-  return `/tenants/${tenantId}/content/${collection}/posts/`;
+  return `${tenantDirSegment(tenantId)}content/${collection}/posts/`;
 }
 
 function toSummary(p: BlogPost): BlogPostSummary {
@@ -147,9 +168,22 @@ function toSummary(p: BlogPost): BlogPostSummary {
  * the same glob the index is built from (no per-tenant config needed). Sorted for
  * a stable admin ordering. A tenant with no blog content returns `[]`.
  */
-export function listCollections(tenantId: string): string[] {
-  const marker = `/tenants/${tenantId}/content/`;
+export async function listCollections(
+  tenantId: string,
+  content?: ArtifactSource,
+): Promise<string[]> {
+  const marker = `${tenantDirSegment(tenantId)}content/`;
   const collections = new Set<string>();
+  const runtimePaths = canReadArtifacts(content)
+    ? await content.listArtifactPaths("")
+    : null;
+  if (runtimePaths !== null) {
+    for (const path of runtimePaths) {
+      const match = /^([^/]+)\/posts\/[^/]+\.json$/.exec(path);
+      if (match?.[1] && SEGMENT_RE.test(match[1])) collections.add(match[1]);
+    }
+    return [...collections].sort();
+  }
   for (const key of Object.keys(postGlobs)) {
     const at = key.indexOf(marker);
     if (at < 0) continue;
@@ -168,12 +202,33 @@ export function listCollections(tenantId: string): string[] {
 export async function listPosts(
   tenantId: string,
   collection: string,
-  opts?: { includeUnpublished?: boolean; now?: string },
+  opts?: CollectionReadOptions,
 ): Promise<BlogPostSummary[]> {
   if (!SEGMENT_RE.test(collection)) return [];
   const prefix = postsPrefix(tenantId, collection);
-  const keys = Object.keys(postGlobs).filter((key) => key.includes(prefix));
-  const posts = (await Promise.all(keys.map((key) => postGlobs[key]!()))).map(normalize);
+  const runtimeContent = canReadArtifacts(opts?.content) ? opts.content : null;
+  const runtimePaths = runtimeContent
+    ? await runtimeContent.listArtifactPaths(`${collection}/posts/`)
+    : null;
+  const posts = runtimePaths !== null
+    ? (await Promise.all(
+        runtimePaths
+          .filter((path) => path.endsWith(".json"))
+          .map(async (path) => {
+            const raw = await runtimeContent?.readArtifact(path);
+            if (!raw) return null;
+            try {
+              return normalize(JSON.parse(raw) as BlogPost);
+            } catch {
+              return null;
+            }
+          }),
+      )).filter((post): post is BlogPost => post !== null)
+    : (await Promise.all(
+        Object.keys(postGlobs)
+          .filter((key) => key.includes(prefix))
+          .map((key) => postGlobs[key]!()),
+      )).map(normalize);
   const includeUnpublished = opts?.includeUnpublished ?? false;
   const now = opts?.now ?? new Date().toISOString();
   return posts
@@ -191,9 +246,23 @@ export async function getPost(
   tenantId: string,
   collection: string,
   slug: string,
-  opts?: { includeUnpublished?: boolean; now?: string },
+  opts?: CollectionReadOptions,
 ): Promise<BlogPost | null> {
   if (!SEGMENT_RE.test(collection) || !SLUG_RE.test(slug)) return null;
+  if (canReadArtifacts(opts?.content)) {
+    const paths = await opts.content.listArtifactPaths(`${collection}/posts/`);
+    const raw = await opts.content.readArtifact(`${collection}/posts/${slug}.json`);
+    if (raw) {
+      try {
+        const post = normalize(JSON.parse(raw) as BlogPost);
+        if (!(opts.includeUnpublished ?? false) && !isVisibleOnLive(post, opts.now)) return null;
+        return post;
+      } catch {
+        return null;
+      }
+    }
+    if (paths !== null) return null;
+  }
   const key = Object.keys(postGlobs).find(
     (candidate) =>
       candidate.includes(postsPrefix(tenantId, collection)) && candidate.endsWith(`/${slug}.json`),
@@ -215,7 +284,7 @@ export async function listTranslations(
   tenantId: string,
   collection: string,
   translationGroupId: string,
-  opts?: { includeUnpublished?: boolean; now?: string },
+  opts?: CollectionReadOptions,
 ): Promise<BlogPostSummary[]> {
   if (!translationGroupId) return [];
   const posts = await listPosts(tenantId, collection, opts);
@@ -233,7 +302,7 @@ export async function getTranslations(
   tenantId: string,
   collection: string,
   slug: string,
-  opts?: { includeUnpublished?: boolean; now?: string },
+  opts?: CollectionReadOptions,
 ): Promise<BlogPostSummary[]> {
   const post = await getPost(tenantId, collection, slug, opts);
   if (!post) return [];
@@ -252,9 +321,10 @@ export async function relatedPosts(
   collection: string,
   slug: string,
   n = 3,
+  content?: ArtifactSource,
 ): Promise<BlogPostSummary[]> {
-  const pool = (await listPosts(tenantId, collection)).filter((p) => p.slug !== slug);
-  const current = await getPost(tenantId, collection, slug);
+  const pool = (await listPosts(tenantId, collection, { content })).filter((p) => p.slug !== slug);
+  const current = await getPost(tenantId, collection, slug, { content });
   const category = current?.categories[0];
   const result = category ? pool.filter((p) => p.categories.includes(category)) : [];
   for (const p of pool) {
@@ -268,9 +338,10 @@ export async function resolveRedirect(
   tenantId: string,
   collection: string,
   slug: string,
+  content?: ArtifactSource,
 ): Promise<string | null> {
   if (!SEGMENT_RE.test(collection)) return null;
-  const redirects = await getRedirects(tenantId, collection);
+  const redirects = await getRedirects(tenantId, collection, content);
   return redirects[slug] ?? null;
 }
 
@@ -282,11 +353,24 @@ export async function resolveRedirect(
 export async function getRedirects(
   tenantId: string,
   collection: string,
+  content?: ArtifactSource,
 ): Promise<Record<string, string>> {
   if (!SEGMENT_RE.test(collection)) return {};
+  if (canReadArtifacts(content)) {
+    const paths = await content.listArtifactPaths(`${collection}/`);
+    const raw = await content.readArtifact(`${collection}/redirects.json`);
+    if (raw) {
+      try {
+        return JSON.parse(raw) as Record<string, string>;
+      } catch {
+        return {};
+      }
+    }
+    if (paths !== null) return {};
+  }
   const key = Object.keys(redirectGlobs).find(
     (candidate) =>
-      candidate.includes(`/tenants/${tenantId}/content/${collection}/`) &&
+      candidate.includes(`${tenantDirSegment(tenantId)}content/${collection}/`) &&
       candidate.endsWith("/redirects.json"),
   );
   if (!key) return {};
@@ -301,11 +385,24 @@ export async function getRedirects(
 export async function getAuthors(
   tenantId: string,
   collection: string,
+  content?: ArtifactSource,
 ): Promise<Record<string, AuthorBio>> {
   if (!SEGMENT_RE.test(collection)) return {};
+  if (canReadArtifacts(content)) {
+    const paths = await content.listArtifactPaths(`${collection}/`);
+    const raw = await content.readArtifact(`${collection}/authors.json`);
+    if (raw) {
+      try {
+        return JSON.parse(raw) as Record<string, AuthorBio>;
+      } catch {
+        return {};
+      }
+    }
+    if (paths !== null) return {};
+  }
   const key = Object.keys(authorsGlobs).find(
     (candidate) =>
-      candidate.includes(`/tenants/${tenantId}/content/${collection}/`) &&
+      candidate.includes(`${tenantDirSegment(tenantId)}content/${collection}/`) &&
       candidate.endsWith("/authors.json"),
   );
   if (!key) return {};

package/apps/storefront/src/lib/blog/markdown.ts

@@ -1,6 +1,6 @@
 /**
  * Minimal, dependency-free Markdown -> sanitized HTML for the admin blog editor
- * (B3.4 of docs/plans/2026-08-21-blog-platform-workstream.md). The storefront
+ * (see docs/plans/2026-08-21-blog-platform-workstream.md). The storefront
  * ships no markdown library (see the "No new deps" convention in §1), and the
  * migration package's `sanitize-html` is a node-only devtool — so authoring from
  * the admin gets this small hand-rolled renderer instead.

package/apps/storefront/src/lib/blog/provider.ts

@@ -3,41 +3,108 @@
 // derived engine lives in ./collection.ts and powers `the-build` + any new
 // collection; switching `/blog` onto it is a later migration once order is
 // encoded as data (see B0.1 §"/blog migration caution").
+import { tenantDirSegment } from "@tot/public-runtime";
 import type { BlogPost, BlogPostSummary } from "./types.js";
+import type { ContentProvider } from "../storyblok/provider.js";
 
+type ArtifactSource = Pick<ContentProvider, "readArtifact" | "listArtifactPaths">;
+
+function canReadArtifacts(value: ArtifactSource | undefined): value is ArtifactSource {
+  return typeof value?.listArtifactPaths === "function" && typeof value.readArtifact === "function";
+}
+
+// Both tenant tiers: real at `tenants/<id>/`, platform test one level deeper at
+// `tenants/e2e/<id>/`. `tenantDirSegment` is the one inverse used to look a
+// tenant's keys back up.
 const indexGlobs = import.meta.glob<BlogPostSummary[]>(
-  "../../../../../tenants/*/content/blog/index.json",
+  [
+    "../../../../../tenants/*/content/blog/index.json",
+    "../../../../../tenants/e2e/*/content/blog/index.json",
+  ],
   { import: "default" },
 );
 const postGlobs = import.meta.glob<BlogPost>(
-  "../../../../../tenants/*/content/blog/posts/*.json",
+  [
+    "../../../../../tenants/*/content/blog/posts/*.json",
+    "../../../../../tenants/e2e/*/content/blog/posts/*.json",
+  ],
   { import: "default" },
 );
 const redirectGlobs = import.meta.glob<Record<string, string>>(
-  "../../../../../tenants/*/content/blog/redirects.json",
+  [
+    "../../../../../tenants/*/content/blog/redirects.json",
+    "../../../../../tenants/e2e/*/content/blog/redirects.json",
+  ],
   { import: "default" },
 );
 
 function tenantKey(keys: string[], tenantId: string, suffix: string): string | undefined {
-  const segment = `/tenants/${tenantId}/content/blog/`;
+  const segment = `${tenantDirSegment(tenantId)}content/blog/`;
   return keys.find((key) => key.includes(segment) && key.endsWith(suffix));
 }
 
-export async function listBlogPosts(tenantId: string): Promise<BlogPostSummary[]> {
+export async function listBlogPosts(
+  tenantId: string,
+  source?: ArtifactSource,
+): Promise<BlogPostSummary[]> {
+  if (canReadArtifacts(source)) {
+    const paths = await source.listArtifactPaths("blog/");
+    const raw = await source.readArtifact("blog/index.json");
+    if (raw) {
+      try {
+        return JSON.parse(raw) as BlogPostSummary[];
+      } catch {
+        return [];
+      }
+    }
+    if (paths !== null) return [];
+  }
   const key = tenantKey(Object.keys(indexGlobs), tenantId, "/index.json")
-    ?? Object.keys(indexGlobs).find((candidate) => candidate.includes(`/tenants/${tenantId}/content/blog/index.json`));
+    ?? Object.keys(indexGlobs).find((candidate) => candidate.includes(`${tenantDirSegment(tenantId)}content/blog/index.json`));
   return key ? indexGlobs[key]!() : [];
 }
 
-export async function getBlogPost(tenantId: string, slug: string): Promise<BlogPost | null> {
+export async function getBlogPost(
+  tenantId: string,
+  slug: string,
+  source?: ArtifactSource,
+): Promise<BlogPost | null> {
   if (!/^[a-z0-9][a-z0-9-]*$/.test(slug)) return null;
+  if (canReadArtifacts(source)) {
+    const paths = await source.listArtifactPaths("blog/posts/");
+    const raw = await source.readArtifact(`blog/posts/${slug}.json`);
+    if (raw) {
+      try {
+        return JSON.parse(raw) as BlogPost;
+      } catch {
+        return null;
+      }
+    }
+    if (paths !== null) return null;
+  }
   const key = tenantKey(Object.keys(postGlobs), tenantId, `/posts/${slug}.json`);
   return key ? postGlobs[key]!() : null;
 }
 
-export async function resolveBlogRedirect(tenantId: string, slug: string): Promise<string | null> {
+export async function resolveBlogRedirect(
+  tenantId: string,
+  slug: string,
+  source?: ArtifactSource,
+): Promise<string | null> {
+  if (canReadArtifacts(source)) {
+    const paths = await source.listArtifactPaths("blog/");
+    const raw = await source.readArtifact("blog/redirects.json");
+    if (raw) {
+      try {
+        return (JSON.parse(raw) as Record<string, string>)[slug] ?? null;
+      } catch {
+        return null;
+      }
+    }
+    if (paths !== null) return null;
+  }
   const key = tenantKey(Object.keys(redirectGlobs), tenantId, "/redirects.json")
-    ?? Object.keys(redirectGlobs).find((candidate) => candidate.includes(`/tenants/${tenantId}/content/blog/redirects.json`));
+    ?? Object.keys(redirectGlobs).find((candidate) => candidate.includes(`${tenantDirSegment(tenantId)}content/blog/redirects.json`));
   if (!key) return null;
   const redirects = await redirectGlobs[key]!();
   return redirects[slug] ?? null;

package/apps/storefront/src/lib/blog/types.ts

@@ -5,7 +5,7 @@ export interface BlogImage {
   height?: number;
 }
 
-export type PostStatus = "draft" | "published" | "unlisted" | "scheduled"; // "scheduled" added in B3.1
+export type PostStatus = "draft" | "published" | "unlisted" | "scheduled";
 
 /**
  * Per-post entitlement gate — who may read the body. Orthogonal to `PostStatus`
@@ -29,17 +29,17 @@ export interface BlogPostSummary {
   tags: string[];
   featuredImage?: BlogImage;
   status: PostStatus; // seeded/legacy posts without this field default to "published"
-  scheduledAt?: string; // ISO date; when status === "scheduled", the post goes live once this instant has passed (B3.1)
-  canonicalUrl?: string; // syndication override (B1.6)
-  inLanguage?: string; // default "en" (B1.6)
-  access?: BlogAccess; // entitlement gate; default "public". Orthogonal to `status` (B4.0)
-  translationGroupId?: string; // stable id shared by every language variant of one article; absent = singleton (I1)
+  scheduledAt?: string; // ISO date; when status === "scheduled", the post goes live once this instant has passed
+  canonicalUrl?: string; // syndication override
+  inLanguage?: string; // default "en"
+  access?: BlogAccess; // entitlement gate; default "public". Orthogonal to `status`
+  translationGroupId?: string; // stable id shared by every language variant of one article; absent = singleton
 }
 
 export interface BlogPost extends BlogPostSummary {
   oldSlugs: string[];
   contentHtml: string;
-  // Markdown source for the admin editor (B3.4). When present, `contentHtml` is
+  // Markdown source for the admin editor. When present, `contentHtml` is
   // its rendered output; migrated/legacy posts may carry only `contentHtml`.
   bodyMarkdown?: string;
 }
@@ -55,6 +55,6 @@ export interface AuthorBio {
   title?: string; // role/title, e.g. "Founder"
   avatar?: string; // image path (site-relative or absolute)
   url?: string; // personal/site URL
-  sameAs?: string[]; // social profile URLs — E-E-A-T signal (feeds Person.sameAs, B1.6)
-  twitter?: string; // handle, e.g. "@ada" (feeds twitter:creator, B1.6)
+  sameAs?: string[]; // social profile URLs — E-E-A-T signal (feeds Person.sameAs)
+  twitter?: string; // handle, e.g. "@ada" (feeds twitter:creator)
 }

package/apps/storefront/src/lib/chrome/examples/tokenoftrust.chrome-assignments.example.json

@@ -0,0 +1,6 @@
+{
+  "assignments": {
+    "/contact/contact-sales": { "headerVariant": "minimal" },
+    "/contact/contact-sales/thank-you": { "headerVariant": "minimal" }
+  }
+}

package/apps/storefront/src/lib/chrome/examples/tokenoftrust.chrome.example.json

@@ -0,0 +1,79 @@
+{
+  "lang": "en",
+  "head": {
+    "favicon": "/tenants/tokenoftrust.com/favicon.png",
+    "themeStylesheets": ["/tenants/tokenoftrust.com/themes/tot-navy.css"]
+  },
+  "sharedMarketingCss": true,
+  "header": {
+    "variant": "primary",
+    "brand": {
+      "href": "/",
+      "label": "Token of Trust",
+      "logo": {
+        "src": "/tenants/tokenoftrust.com/logo-wordmark.png",
+        "alt": "Token of Trust",
+        "width": 180,
+        "height": 32
+      }
+    },
+    "nav": [
+      { "id": "nav-platform", "label": "Platform", "href": "/#platform" },
+      { "id": "nav-industries", "label": "Industries", "href": "/#industries" },
+      { "id": "nav-resources", "label": "Resources", "href": "https://help.tokenoftrust.com", "external": true },
+      { "id": "nav-pricing", "label": "Pricing", "href": "https://tokenoftrust.com/pricing/", "external": true },
+      { "id": "nav-login", "label": "Login", "href": "https://app.tokenoftrust.com", "external": true }
+    ],
+    "ctas": [
+      { "id": "cta-book-demo", "label": "Book Demo", "href": "https://tokenoftrust.com/contact/", "variant": "secondary" },
+      { "id": "cta-start-free", "label": "Start For Free", "href": "https://app.tokenoftrust.com", "variant": "primary" }
+    ]
+  },
+  "footer": {
+    "variant": "default",
+    "brand": {
+      "text": "Customer verification and compliance for regulated ecommerce. 200+ countries. We will never sell your data."
+    },
+    "columns": [
+      {
+        "title": "Platform",
+        "links": [
+          { "id": "ftr-platform-idv", "label": "Identity Verification", "href": "/#platform" },
+          { "id": "ftr-platform-age", "label": "Age Assurance", "href": "/#platform" },
+          { "id": "ftr-platform-fraud", "label": "Fraud Prevention", "href": "/#platform" },
+          { "id": "ftr-platform-evidence", "label": "Compliance Evidence", "href": "/#platform" },
+          { "id": "ftr-platform-aml", "label": "AML · PACT Act · Tax", "href": "/#platform" }
+        ]
+      },
+      {
+        "title": "Industries",
+        "links": [
+          { "id": "ftr-industries-alcohol", "label": "Alcohol", "href": "/#industries" },
+          { "id": "ftr-industries-vape", "label": "Tobacco & Vape", "href": "/#industries" },
+          { "id": "ftr-industries-age-restricted", "label": "Age-Restricted Goods", "href": "/#industries" },
+          { "id": "ftr-industries-marketplaces", "label": "Marketplaces", "href": "/#industries" }
+        ]
+      },
+      {
+        "title": "Company",
+        "links": [
+          { "id": "ftr-company-pricing", "label": "Pricing", "href": "https://tokenoftrust.com/pricing/", "external": true },
+          { "id": "ftr-company-contact", "label": "Contact Sales", "href": "https://tokenoftrust.com/contact/", "external": true },
+          { "id": "ftr-company-resources", "label": "Resources", "href": "https://help.tokenoftrust.com", "external": true },
+          { "id": "ftr-company-login", "label": "Login", "href": "https://app.tokenoftrust.com", "external": true }
+        ]
+      },
+      {
+        "title": "Legal",
+        "links": [
+          { "id": "ftr-legal-privacy", "label": "Privacy Policy", "href": "https://tokenoftrust.com/privacy/", "external": true },
+          { "id": "ftr-legal-terms", "label": "Terms", "href": "https://tokenoftrust.com/terms/", "external": true }
+        ]
+      }
+    ],
+    "social": [],
+    "bottom": {
+      "note": "GDPR · CCPA · PIPEDA compliant. 256-bit SSL. We will never sell your data."
+    }
+  }
+}