@tokenoftrust/storefront-runner 2.0.17 → 2.0.18

package/packages/public-runtime/tests/fixtures/publication-spaces/mounted-public.json

@@ -0,0 +1,38 @@
+{
+  "version": 1,
+  "id": "articles",
+  "tenant": "fixture.example",
+  "source": {
+    "forge": "fixture",
+    "repo": "fixture-publications",
+    "defaultBranch": "main"
+  },
+  "routes": {
+    "canonicalMount": "/blog",
+    "aliases": [
+      {
+        "from": "/the-build",
+        "behavior": "redirect-308",
+        "to": "/blog"
+      }
+    ]
+  },
+  "visibility": "public",
+  "authorization": {
+    "policy": "public"
+  },
+  "discovery": {
+    "sitemap": true,
+    "feeds": true,
+    "publicSearch": true,
+    "llms": true
+  },
+  "assets": {
+    "namespace": "articles",
+    "access": "public"
+  },
+  "renderer": {
+    "contractVersion": "storefront-v1",
+    "themeContractVersion": "theme-v1"
+  }
+}

package/packages/public-runtime/tests/fixtures/publication-spaces/normalized-mounts.json

@@ -0,0 +1,39 @@
+[
+  {
+    "version": 1,
+    "tenant": "fixture.example",
+    "spaceId": "knowledge",
+    "kind": "canonical",
+    "mount": "/knowledge",
+    "canonicalMount": "/knowledge",
+    "behavior": "render"
+  },
+  {
+    "version": 1,
+    "tenant": "fixture.example",
+    "spaceId": "articles",
+    "kind": "alias",
+    "mount": "/the-build",
+    "canonicalMount": "/blog",
+    "behavior": "redirect-308",
+    "redirectTo": "/blog"
+  },
+  {
+    "version": 1,
+    "tenant": "fixture.example",
+    "spaceId": "articles",
+    "kind": "canonical",
+    "mount": "/blog",
+    "canonicalMount": "/blog",
+    "behavior": "render"
+  },
+  {
+    "version": 1,
+    "tenant": "fixture.example",
+    "spaceId": "root",
+    "kind": "canonical",
+    "mount": "/",
+    "canonicalMount": "/",
+    "behavior": "render"
+  }
+]

package/packages/public-runtime/tests/fixtures/publication-spaces/ref.json

@@ -0,0 +1,5 @@
+{
+  "version": 1,
+  "tenant": "fixture.example",
+  "spaceId": "articles"
+}

package/packages/public-runtime/tests/fixtures/publication-spaces/root-public.json

@@ -0,0 +1,31 @@
+{
+  "version": 1,
+  "id": "root",
+  "tenant": "fixture.example",
+  "source": {
+    "forge": "fixture",
+    "repo": "fixture.example",
+    "defaultBranch": "main"
+  },
+  "routes": {
+    "canonicalMount": "/"
+  },
+  "visibility": "public",
+  "authorization": {
+    "policy": "public"
+  },
+  "discovery": {
+    "sitemap": true,
+    "feeds": true,
+    "publicSearch": true,
+    "llms": true
+  },
+  "assets": {
+    "namespace": "root",
+    "access": "public"
+  },
+  "renderer": {
+    "contractVersion": "storefront-v1",
+    "themeContractVersion": "theme-v1"
+  }
+}

package/packages/public-runtime/tests/fixtures/publication-versions/articles-v1.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": 1,
+  "versionId": "pv_articles-version-0001",
+  "tenant": "fixture.example",
+  "spaceId": "articles",
+  "source": {
+    "forge": "fixture",
+    "repo": "fixture-publications",
+    "commitSha": "3333333333333333333333333333333333333333"
+  },
+  "renderer": {
+    "contractVersion": "storefront-v1",
+    "themeContractVersion": "theme-v1"
+  },
+  "artifactDigest": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "createdAt": "2026-09-01T12:02:00.000Z",
+  "metadata": {
+    "buildId": "build-articles-0001"
+  }
+}

package/packages/public-runtime/tests/fixtures/publication-versions/articles-v2.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": 1,
+  "versionId": "pv_articles-version-0002",
+  "tenant": "fixture.example",
+  "spaceId": "articles",
+  "source": {
+    "forge": "fixture",
+    "repo": "fixture-publications",
+    "commitSha": "4444444444444444444444444444444444444444"
+  },
+  "renderer": {
+    "contractVersion": "storefront-v1",
+    "themeContractVersion": "theme-v1"
+  },
+  "artifactDigest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+  "createdAt": "2026-09-01T12:03:00.000Z",
+  "metadata": {
+    "buildId": "build-articles-0002"
+  }
+}

package/packages/public-runtime/tests/fixtures/publication-versions/internal-v1.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": 1,
+  "versionId": "pv_knowledge-version-0001",
+  "tenant": "fixture.example",
+  "spaceId": "knowledge",
+  "source": {
+    "forge": "fixture",
+    "repo": "fixture-private-publications",
+    "commitSha": "5555555555555555555555555555555555555555"
+  },
+  "renderer": {
+    "contractVersion": "storefront-v1",
+    "themeContractVersion": "theme-v1"
+  },
+  "artifactDigest": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+  "createdAt": "2026-09-01T12:04:00.000Z",
+  "metadata": {
+    "buildId": "build-knowledge-0001"
+  }
+}

package/packages/public-runtime/tests/fixtures/publication-versions/live-pointer.json

@@ -0,0 +1,11 @@
+{
+  "schemaVersion": 1,
+  "tenant": "fixture.example",
+  "spaceId": "articles",
+  "channel": "live",
+  "revision": 1,
+  "versionId": "pv_articles-version-0001",
+  "sourceSha": "3333333333333333333333333333333333333333",
+  "artifactDigest": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "updatedAt": "2026-09-01T12:05:00.000Z"
+}

package/packages/public-runtime/tests/fixtures/publication-versions/live-transition-request.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": 1,
+  "transitionId": "activate-articles-0001",
+  "operation": "activate",
+  "tenant": "fixture.example",
+  "spaceId": "articles",
+  "channel": "live",
+  "targetVersionId": "pv_articles-version-0001",
+  "expectedSourceSha": "3333333333333333333333333333333333333333",
+  "expectedArtifactDigest": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "expectedRevision": 0,
+  "principal": "publisher.fixture",
+  "occurredAt": "2026-09-01T12:05:00.000Z"
+}

package/packages/public-runtime/tests/fixtures/publication-versions/live-transition.json

@@ -0,0 +1,17 @@
+{
+  "schemaVersion": 1,
+  "transitionId": "activate-articles-0001",
+  "operation": "activate",
+  "tenant": "fixture.example",
+  "spaceId": "articles",
+  "channel": "live",
+  "previous": null,
+  "next": {
+    "revision": 1,
+    "versionId": "pv_articles-version-0001",
+    "sourceSha": "3333333333333333333333333333333333333333",
+    "artifactDigest": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+  },
+  "principal": "publisher.fixture",
+  "occurredAt": "2026-09-01T12:05:00.000Z"
+}

package/packages/public-runtime/tests/fixtures/publication-versions/root-v1.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": 1,
+  "versionId": "pv_root-version-0001",
+  "tenant": "fixture.example",
+  "spaceId": "root",
+  "source": {
+    "forge": "fixture",
+    "repo": "fixture.example",
+    "commitSha": "1111111111111111111111111111111111111111"
+  },
+  "renderer": {
+    "contractVersion": "storefront-v1",
+    "themeContractVersion": "theme-v1"
+  },
+  "artifactDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "createdAt": "2026-09-01T12:00:00.000Z",
+  "metadata": {
+    "buildId": "build-root-0001"
+  }
+}

package/packages/public-runtime/tests/fixtures/publication-versions/root-v2.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": 1,
+  "versionId": "pv_root-version-0002",
+  "tenant": "fixture.example",
+  "spaceId": "root",
+  "source": {
+    "forge": "fixture",
+    "repo": "fixture.example",
+    "commitSha": "2222222222222222222222222222222222222222"
+  },
+  "renderer": {
+    "contractVersion": "storefront-v1",
+    "themeContractVersion": "theme-v1"
+  },
+  "artifactDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "createdAt": "2026-09-01T12:01:00.000Z",
+  "metadata": {
+    "buildId": "build-root-0002"
+  }
+}

package/scripts/dev/ai-edit.mjs

@@ -25,6 +25,7 @@ import { createMcpClient } from "../../packages/cli/src/mcp.mjs";
 import { resolveDeveloperSession, AuthUnavailableError } from "../../packages/cli/src/auth.mjs";
 import { applyUnifiedDiff } from "./unified-diff.mjs";
 import { tenantDirSegments } from "../lib/tenant-dirs.mjs";
+import { recordDiagnostic } from "../../packages/cli/src/diagnostics.mjs";
 
 const DEFAULT_MCP_URL = "https://mcp.tokenoftrust.com";
 
@@ -83,7 +84,7 @@ async function resolveClient(mcpBaseUrl) {
  * not-configured all come back as `{ ok:false, status, message }`).
  */
 export async function handleAiEdit({ repoRoot, tenantId, prompt, mcpBaseUrl }, deps = {}) {
-  const { resolveClientImpl = resolveClient } = deps;
+  const { resolveClientImpl = resolveClient, env = process.env } = deps;
   const paths = tenantPaths(repoRoot, tenantId);
   const files = [
     { path: "content/home.html", content: readFileIfPresent(paths.home) },
@@ -98,14 +99,26 @@ export async function handleAiEdit({ repoRoot, tenantId, prompt, mcpBaseUrl }, d
   try {
     client = await resolveClientImpl(mcpBaseUrl);
   } catch (e) {
-    return { ok: false, status: "unauthenticated", message: e.message };
+    const diagnostic = recordDiagnostic(e, {
+      command: "dev-ai-edit", operation: "session_initialize", required: true,
+    }, env);
+    return {
+      ok: false, status: "unauthenticated", message: e.message,
+      diagnosticId: diagnostic.diagnosticId,
+    };
   }
 
   let result;
   try {
     result = await client.callTool("content_edit", { prompt, files });
   } catch (e) {
-    return { ok: false, status: "error", message: e.message };
+    const diagnostic = recordDiagnostic(e, {
+      command: "dev-ai-edit", operation: "content_edit", required: true,
+    }, env);
+    return {
+      ok: false, status: "error", message: e.message,
+      diagnosticId: diagnostic.diagnosticId,
+    };
   }
   if (result?.status && result.status !== "ok") {
     return { ok: false, status: result.status, message: result.message || "content_edit refused the request." };

package/scripts/dev/port-check.mjs

@@ -18,19 +18,34 @@ import net from "node:net";
  * @param {number} port
  * @returns {Promise<boolean>}
  */
-export function isPortFree(port) {
+/**
+ * @param {number} port
+ * @param {string | undefined} [host]
+ * @param {boolean} [unsupportedIsFree]
+ */
+function canBind(port, host = undefined, unsupportedIsFree = false) {
   return new Promise((resolve) => {
     const srv = net.createServer();
-    srv.once("error", () => resolve(false));
+    srv.once("error", (error) => {
+      const code = /** @type {NodeJS.ErrnoException} */ (error).code;
+      const unsupported = code === "EAFNOSUPPORT" || code === "EADDRNOTAVAIL";
+      resolve(unsupportedIsFree && unsupported);
+    });
     srv.once("listening", () => srv.close(() => resolve(true)));
     try {
-      srv.listen(port);
+      srv.listen({ port, ...(host ? { host } : {}) });
     } catch {
       resolve(false);
     }
   });
 }
 
+export async function isPortFree(port) {
+  if (!(await canBind(port))) return false;
+  if (!(await canBind(port, "127.0.0.1"))) return false;
+  return canBind(port, "::1", true);
+}
+
 /**
  * The first free port at or after `preferred` (scanning upward). Lets `tot dev`
  * boot on a busy default port by moving to the next open one and printing it —

package/scripts/dev/publish.mjs

@@ -32,6 +32,7 @@ import { matchesWriteAllowlist } from "./safe-path.mjs";
 import { resolveTenantSourceRoot } from "./tenant-source-root.mjs";
 import { createMcpClient } from "../../packages/cli/src/mcp.mjs";
 import { resolveDeveloperSession, AuthUnavailableError } from "../../packages/cli/src/auth.mjs";
+import { recordDiagnostic } from "../../packages/cli/src/diagnostics.mjs";
 
 const DEFAULT_MCP_URL = "https://mcp.tokenoftrust.com";
 
@@ -90,13 +91,26 @@ export async function publishFile(env, sourceRoot, tenantId, relPath, deps = {})
     session = await (deps.resolveSession || resolveDeveloperSession)(client, env);
     await client.initialize();
   } catch (e) {
+    const diagnostic = recordDiagnostic(e, {
+      command: "dev-publish", operation: "session_initialize", required: true,
+    }, env);
     if (e instanceof AuthUnavailableError) {
       return {
         status: 503,
-        json: { ok: false, status: "not_signed_in", message: `${e.message}${e.hint ? ` — ${e.hint}` : ""}` },
+        json: {
+          ok: false, status: "not_signed_in",
+          message: `${e.message}${e.hint ? ` — ${e.hint}` : ""}`,
+          diagnosticId: diagnostic.diagnosticId,
+        },
       };
     }
-    return { status: 502, json: { ok: false, status: "error", message: String(e?.message || e) } };
+    return {
+      status: 502,
+      json: {
+        ok: false, status: "error", message: String(e?.message || e),
+        diagnosticId: diagnostic.diagnosticId,
+      },
+    };
   }
 
   const repo = `${tenantId}-main`;
@@ -127,7 +141,16 @@ export async function publishFile(env, sourceRoot, tenantId, relPath, deps = {})
       },
     };
   } catch (e) {
-    return { status: 502, json: { ok: false, status: "error", message: String(e?.message || e) } };
+    const diagnostic = recordDiagnostic(e, {
+      command: "dev-publish", operation: "candidate_open", required: true,
+    }, env);
+    return {
+      status: 502,
+      json: {
+        ok: false, status: "error", message: String(e?.message || e),
+        diagnosticId: diagnostic.diagnosticId,
+      },
+    };
   }
 }
 

package/scripts/tenant/validate.mjs

@@ -738,7 +738,12 @@ export function discoverTenantIds() {
 
 // --- link / asset extraction -------------------------------------------------
 const HREF_RE = /\bhref\s*=\s*"([^"]*)"/gi;
-const SRC_RE = /\b(?:src|srcset)\s*=\s*"([^"]*)"/gi;
+const SRC_RE = /\bsrc\s*=\s*"([^"]*)"/gi;
+// `srcset` carries a comma-separated list of `url descriptor` pairs (e.g.
+// "a.webp 480w, b.webp 800w"), not a single URL — each candidate must be split
+// off its descriptor before being checked as an asset. Mirrors
+// scripts/publish/lib/asset-reachability.mjs's srcset handling.
+const SRCSET_RE = /\bsrcset\s*=\s*"([^"]*)"/gi;
 const STYLE_OPEN_WITH_ATTRS_RE = /<style\s+[^>]*>/i;
 /** An in-page skip link: an anchor to a #main-ish target, or one carrying a skip class. */
 const SKIP_LINK_RE = /<a\b[^>]*(?:class="[^"]*\bskip[-\w]*\b[^"]*"|href="#(?:main|content|main-content)\b")/i;
@@ -981,6 +986,14 @@ export function validateTenant(tenantDir, opts = {}) {
       const f = checkAsset(m[1].trim(), r, publicDir, opts.tenantId || config?.tenant);
       if (f) findings.push(f);
     }
+    for (const m of html.matchAll(SRCSET_RE)) {
+      for (const candidate of m[1].split(",")) {
+        const url = candidate.trim().split(/\s+/)[0];
+        if (!url) continue;
+        const f = checkAsset(url, r, publicDir, opts.tenantId || config?.tenant);
+        if (f) findings.push(f);
+      }
+    }
   }
 
   // 5. git conflict markers — advisory (never blocks), but LOUD: a half-resolved