@tokenoftrust/storefront-runner 2.0.40 → 2.0.42

package/scripts/tenant/validate.mjs

@@ -30,6 +30,15 @@ import { dirname, resolve, join, relative } from "node:path";
 import { fileURLToPath } from "node:url";
 import { KNOWN_EMBEDS, lintTenantEmbeds } from "./lint-embeds.mjs";
 import { listTenantDirIds, tenantDirSegments } from "../lib/tenant-dirs.mjs";
+import {
+  BLOCK_PALETTE_SUPPORTED_CONTRACTS,
+  FEATURED_PRODUCT_PRESENTATIONS,
+  PROMO_TILE_PRESENTATIONS,
+  isSafeRehostedAssetPath,
+  isSafeRehostedAssetPathForTenant,
+  isSafeStorefrontHref,
+} from "../../packages/public-runtime/src/extension-contract-values.mjs";
+import { validateVisualParityClosure } from "../../packages/cli/src/visual-parity.mjs";
 
 /** Catalogued embed slugs a tenant may opt into (mirror of EMBED_PROVIDERS). */
 const KNOWN_EMBED_SLUGS = new Set(KNOWN_EMBEDS.map((p) => p.slug));
@@ -43,6 +52,8 @@ const NUL = String.fromCharCode(0);
 // --- findings model ----------------------------------------------------------
 const ERROR = "error";
 const WARN = "warn";
+const mergeFindings = (...groups) => [...new Map(groups.flat().map((item) => [JSON.stringify(item), item])).values()]
+  .sort((a, b) => `${a.file}\0${a.rule}\0${a.message}`.localeCompare(`${b.file}\0${b.rule}\0${b.message}`));
 /** @typedef {{level:string, rule:string, file:string, message:string, fix?:string}} Finding */
 
 function mk(level, rule, file, message, fix) {
@@ -166,8 +177,8 @@ function validateRawHtmlBody(html) {
 // `@tot/public-runtime` package at runtime — this is a copy. Parity test:
 // packages/public-runtime/tests/chrome-config-shape-parity.test.ts. Kept in
 // step with packages/cli/src/validate.mjs's identical copy.
-const CHROME_HEADER_VARIANTS = new Set(["primary", "minimal"]);
-const CHROME_FOOTER_VARIANTS = new Set(["default"]);
+const CHROME_HEADER_VARIANTS = new Set(["primary", "minimal", "compact-centered"]);
+const CHROME_FOOTER_VARIANTS = new Set(["default", "light-collapsible"]);
 /**
  * The declarative-interaction-tracking rule, mirrored: every actionable item —
  * an object carrying both `id` and `href` — declares EXACTLY ONE of a non-empty
@@ -302,10 +313,11 @@ function validateScriptsDoc(doc, file, config) {
   return out;
 }
 
-const SUPPORTED_BLOCK_CONTRACTS = new Set(["block-palette@1", "block-palette@2", "block-palette@3"]);
+const SUPPORTED_BLOCK_CONTRACTS = new Set(BLOCK_PALETTE_SUPPORTED_CONTRACTS);
 const KNOWN_BLOCKS = new Set([
   "hero",
   "promo_tiles",
+  "trust_strip",
   "featured_collections",
   "featured_products",
   "membership_band",
@@ -325,6 +337,7 @@ const KNOWN_BLOCKS = new Set([
 const REQUIRED_BLOCK_PROPS = {
   hero: ["headline"],
   promo_tiles: ["tiles"],
+  trust_strip: ["items"],
   featured_collections: ["handles"],
   membership_band: ["tiers"],
   editorial: ["title"],
@@ -352,6 +365,7 @@ const PRODUCT_SOURCE_KEYS = new Set([
   "recentlyViewed",
 ]);
 const PRODUCT_SOURCE_SHORTCUTS = new Set(["featured", "newest", "bestSelling", "onSale"]);
+const PROMO_TILE_PRESENTATION_SET = new Set(PROMO_TILE_PRESENTATIONS);
 
 function validateProductSource(value, file, at) {
   const out = [];
@@ -387,7 +401,124 @@ function validateProductSource(value, file, at) {
   return out;
 }
 
-function validateHomeDoc(doc, file) {
+function validateVisualAsset(value, file, at, out, tenantId) {
+  const safe = tenantId
+    ? isSafeRehostedAssetPathForTenant(value, tenantId)
+    : isSafeRehostedAssetPath(value);
+  if (!safe) {
+    out.push(mk(ERROR, "asset-path", file, `${at} must be a /shared/... asset or belong to the active tenant`));
+  }
+}
+
+function validatePromoTiles(block, file, at, out, tenantId) {
+  if (block.presentation !== undefined && !PROMO_TILE_PRESENTATION_SET.has(block.presentation)) {
+    out.push(mk(ERROR, "block-prop", file, `${at}.presentation must be overlay, portrait-cards, editorial-cards, or logo-strip`));
+  }
+  if (!Array.isArray(block.tiles)) {
+    out.push(mk(ERROR, "block-prop", file, `${at}.tiles must be an array`));
+    return;
+  }
+  block.tiles.forEach((tile, index) => {
+    const tileAt = `${at}.tiles[${index}]`;
+    if (tile == null || typeof tile !== "object" || Array.isArray(tile)) {
+      out.push(mk(ERROR, "block-prop", file, `${tileAt} must be an object`));
+      return;
+    }
+    for (const prop of ["label", "href"]) {
+      if (typeof tile[prop] !== "string" || !tile[prop].trim()) {
+        out.push(mk(ERROR, "block-prop", file, `${tileAt}.${prop} must be a non-empty string`));
+      }
+    }
+    for (const prop of ["imageAlt", "meta"]) {
+      if (tile[prop] !== undefined && typeof tile[prop] !== "string") {
+        out.push(mk(ERROR, "block-prop", file, `${tileAt}.${prop} must be a string`));
+      }
+    }
+    if (tile.image !== undefined) validateVisualAsset(tile.image, file, `${tileAt}.image`, out, tenantId);
+    if (typeof tile.href === "string" && !isSafeStorefrontHref(tile.href)) {
+      out.push(mk(ERROR, "navigation-href", file, `${tileAt}.href must be a same-storefront root-relative path`));
+    }
+    if ((block.presentation ?? "overlay") !== "overlay" && tile.image === undefined) {
+      out.push(mk(ERROR, "block-required", file, `${tileAt}.image is required for ${block.presentation}`));
+    }
+  });
+  if ((block.ctaLabel === undefined) !== (block.ctaHref === undefined)) {
+    out.push(mk(ERROR, "block-required", file, `${at}.ctaLabel and ${at}.ctaHref must be supplied together`));
+  }
+  for (const prop of ["ctaLabel", "ctaHref"]) {
+    if (block[prop] !== undefined && (typeof block[prop] !== "string" || !block[prop].trim())) {
+      out.push(mk(ERROR, "block-prop", file, `${at}.${prop} must be a non-empty string`));
+    }
+  }
+  if (typeof block.ctaHref === "string" && !isSafeStorefrontHref(block.ctaHref)) {
+    out.push(mk(ERROR, "navigation-href", file, `${at}.ctaHref must be a same-storefront root-relative path`));
+  }
+}
+
+function validateHeroSlides(slides, file, at, out, tenantId) {
+  if (!Array.isArray(slides) || slides.length === 0) { out.push(mk(ERROR, "block-prop", file, `${at}.slides must be a non-empty array`)); return; }
+  slides.forEach((slide, index) => {
+    const slideAt = `${at}.slides[${index}]`;
+    if (slide == null || typeof slide !== "object" || Array.isArray(slide)) { out.push(mk(ERROR, "block-prop", file, `${slideAt} must be an object`)); return; }
+    for (const prop of ["image", "imageAlt"]) if (typeof slide[prop] !== "string" || !slide[prop].trim()) out.push(mk(ERROR, "block-required", file, `${slideAt}.${prop} must be a non-empty string`));
+    validateVisualAsset(slide.image, file, `${slideAt}.image`, out, tenantId);
+    for (const prop of ["headline", "ctaLabel", "ctaHref"]) if (slide[prop] !== undefined && (typeof slide[prop] !== "string" || !slide[prop].trim())) out.push(mk(ERROR, "block-prop", file, `${slideAt}.${prop} must be a non-empty string`));
+    if ((slide.ctaLabel === undefined) !== (slide.ctaHref === undefined)) out.push(mk(ERROR, "block-required", file, `${slideAt}.ctaLabel and ${slideAt}.ctaHref must be supplied together`));
+    if (typeof slide.ctaHref === "string" && !isSafeStorefrontHref(slide.ctaHref)) out.push(mk(ERROR, "navigation-href", file, `${slideAt}.ctaHref must be a same-storefront root-relative path`));
+  });
+}
+
+function validateTrustStrip(block, file, at, out, tenantId) {
+  if (!Array.isArray(block.items)) {
+    out.push(mk(ERROR, "block-prop", file, `${at}.items must be an array`));
+    return;
+  }
+  block.items.forEach((item, index) => {
+    const itemAt = `${at}.items[${index}]`;
+    if (item == null || typeof item !== "object" || Array.isArray(item) || !["claim", "rating"].includes(item.kind)) {
+      out.push(mk(ERROR, "block-prop", file, `${itemAt}.kind must be claim or rating`));
+      return;
+    }
+    if (item.kind === "claim") {
+      if (typeof item.label !== "string" || !item.label.trim()) {
+        out.push(mk(ERROR, "block-prop", file, `${itemAt}.label must be a non-empty string`));
+      }
+      if (item.icon !== undefined) validateVisualAsset(item.icon, file, `${itemAt}.icon`, out, tenantId);
+      if (item.iconAlt !== undefined && typeof item.iconAlt !== "string") {
+        out.push(mk(ERROR, "block-prop", file, `${itemAt}.iconAlt must be a string`));
+      }
+    } else if (
+      typeof item.average !== "number" || item.average <= 0 || item.average > 5 ||
+      typeof item.count !== "number" || item.count <= 0
+    ) {
+      out.push(mk(ERROR, "block-prop", file, `${itemAt} requires average 1–5 and a positive count`));
+    }
+  });
+}
+
+function validateFaq(block, file, at, out) {
+  if (block.lede !== undefined && (typeof block.lede !== "string" || !block.lede.trim())) {
+    out.push(mk(ERROR, "block-prop", file, `${at}.lede must be a non-empty plain-text string`));
+  }
+  if (!Array.isArray(block.items)) {
+    out.push(mk(ERROR, "block-prop", file, `${at}.items must be an array`));
+    return;
+  }
+  block.items.forEach((item, index) => {
+    const itemAt = `${at}.items[${index}]`;
+    if (item == null || typeof item !== "object" || Array.isArray(item)) {
+      out.push(mk(ERROR, "block-prop", file, `${itemAt} must be an object`));
+      return;
+    }
+    for (const prop of ["q", "a"]) {
+      if (typeof item[prop] !== "string" || !item[prop].trim()) {
+        out.push(mk(ERROR, "block-prop", file, `${itemAt}.${prop} must be a non-empty string`));
+      }
+    }
+  });
+}
+
+function validateHomeDoc(doc, file, tenantId) {
   const out = [];
   if (doc == null || typeof doc !== "object" || Array.isArray(doc)) {
     return [mk(ERROR, "home-root", file, "home.json must be a JSON object")];
@@ -417,6 +548,9 @@ function validateHomeDoc(doc, file) {
     for (const prop of REQUIRED_BLOCK_PROPS[component] || []) {
       if (block[prop] === undefined) out.push(mk(ERROR, "block-required", file, `${at} (${component}) is missing "${prop}"`));
     }
+    if (component === "featured_collections" && (!Array.isArray(block.handles) || !block.handles.every((v) => typeof v === "string"))) {
+      out.push(mk(ERROR, "block-prop", file, `${at}.handles must be a string array`));
+    }
     if (component === "featured_products") {
       if (block.source !== undefined) out.push(...validateProductSource(block.source, file, at));
       if (block.handles !== undefined && (!Array.isArray(block.handles) || !block.handles.every((v) => typeof v === "string"))) {
@@ -425,7 +559,21 @@ function validateHomeDoc(doc, file) {
       if (block.limit !== undefined && typeof block.limit !== "number") {
         out.push(mk(ERROR, "block-prop", file, `${at}.limit must be a number`));
       }
+      if (block.presentation !== undefined && !FEATURED_PRODUCT_PRESENTATIONS.includes(block.presentation)) out.push(mk(ERROR, "block-prop", file, `${at}.presentation must be grid or carousel`));
     }
+    if (component === "hero" && block.image !== undefined) {
+      validateVisualAsset(block.image, file, `${at}.image`, out, tenantId);
+    }
+    if (component === "hero" && block.slides !== undefined) validateHeroSlides(block.slides, file, at, out, tenantId);
+    if (component === "editorial" && block.image !== undefined) {
+      validateVisualAsset(block.image, file, `${at}.image`, out, tenantId);
+      if (typeof block.imageAlt !== "string") {
+        out.push(mk(ERROR, "block-required", file, `${at}.imageAlt is required when ${at}.image is supplied`));
+      }
+    }
+    if (component === "promo_tiles") validatePromoTiles(block, file, at, out, tenantId);
+    if (component === "trust_strip") validateTrustStrip(block, file, at, out, tenantId);
+    if (component === "faq") validateFaq(block, file, at, out);
   });
   return out;
 }
@@ -856,6 +1004,7 @@ export function validateTenant(tenantDir, opts = {}) {
     );
   }
   const scope = opts.scope || config?.scope;
+  const activeTenantId = opts.tenantId || scope || config?.tenant;
   // platform-route awareness: which framework routes the host platform owns for this tenant
   const mode = opts.mode === "workspace" ? "workspace" : "monorepo";
   const hostIsPlatform = mode === "monorepo" || config?.hostPlatform === "tot-storefront";
@@ -914,7 +1063,7 @@ export function validateTenant(tenantDir, opts = {}) {
       if (error) {
         findings.push(mk(ERROR, "content-json-parse", `content/${name}`, `invalid JSON: ${error} (fails the build)`));
       } else if (name === "home.json") {
-        findings.push(...validateHomeDoc(value, "content/home.json"));
+        findings.push(...validateHomeDoc(value, "content/home.json", activeTenantId));
       } else if (name === "chrome.json") {
         findings.push(...findDuplicateCtaIds(value, "content/chrome.json"));
         if (opts.previousChromeJson != null) {
@@ -1114,7 +1263,7 @@ function resolveTenantDir(argv) {
     if (!dir) return { error: "--workspace requires a path" };
     return { dir: resolve(dir), tenantId: null };
   }
-  const id = argv.find((a) => !a.startsWith("--"));
+  const id = argv.find((a, index) => !a.startsWith("--") && argv[index - 1] !== "--profile");
   if (!id) return { error: "usage: node scripts/tenant/validate.mjs <tenant> | --workspace <dir> [--json]" };
   return { dir: tenantDir(id), tenantId: id };
 }
@@ -1123,6 +1272,12 @@ const isMain = resolve(process.argv[1] || "") === resolve(fileURLToPath(import.m
 if (isMain) {
   const argv = process.argv.slice(2);
   const asJson = argv.includes("--json");
+  const profileIndex = argv.indexOf("--profile");
+  const profile = profileIndex === -1 ? null : argv[profileIndex + 1];
+  if (profileIndex !== -1 && profile !== "visual-parity") {
+    console.error("usage: --profile visual-parity");
+    process.exit(2);
+  }
   const { dir, tenantId, error } = resolveTenantDir(argv);
   if (error) {
     console.error(error);
@@ -1134,14 +1289,22 @@ if (isMain) {
     process.exit(2);
   }
   const mode = argv.includes("--workspace") ? "workspace" : "monorepo";
-  const { ok, findings } = validateTenant(dir, { tenantId: tenantId ?? undefined, mode });
+  const baseline = validateTenant(dir, { tenantId: tenantId ?? undefined, mode });
+  const result = profile === "visual-parity"
+    ? (() => {
+      const parity = validateVisualParityClosure(dir, { tenantId: tenantId ?? undefined });
+      const findings = mergeFindings(baseline.findings, parity.findings);
+      return { ok: !findings.some((item) => item.level === ERROR), findings };
+    })()
+    : baseline;
+  const { ok, findings } = result;
   if (asJson) {
     console.log(JSON.stringify({ ok, findings }, null, 2));
     process.exit(ok ? 0 : 1);
   }
   const errors = findings.filter((f) => f.level === ERROR);
   const warns = findings.filter((f) => f.level === WARN);
-  console.log(`\ntot validate — ${tenantId ?? dir}\n`);
+  console.log(`\ntot validate${profile ? ` --profile ${profile}` : ""} — ${tenantId ?? dir}\n`);
   // Named, grouped callouts FIRST — see printLoudAdvisories above.
   printLoudAdvisories(findings, { log: (s) => console.log(s) });
   for (const f of findings) {

package/apps/storefront/src/lib/cfImage.ts

@@ -1,55 +0,0 @@
-/**
- * Cloudflare Image Resizing URL helpers (Epic Phase-2 D2).
- *
- * Rehosted product images live in the PRODUCT_IMAGES R2 bucket, which does NOT
- * transform on a `?width=` query the way Shopify's CDN does. Cloudflare Image
- * Resizing — the `/cdn-cgi/image/<options>/<source>` path, run at the zone edge —
- * resizes AND reformats (`format=auto` → AVIF/WebP where supported) any same-zone
- * or allowlisted source.
- *
- * We emit ROOT-RELATIVE `/cdn-cgi/image/...` URLs so they resolve against
- * whichever zone is serving the page (and an extracted/self-hosted tenant's zone
- * too — no hardcoded host). Referenced (non-rehosted) Shopify CDN URLs keep their
- * native `?width=` scheme in Img.astro, since Shopify already resizes those — no
- * need to route them back through our resizer.
- */
-export interface CfImageOpts {
-  width: number;
-  height?: number;
-  fit?: "cover" | "contain" | "scale-down" | "crop" | "pad";
-  format?: "auto" | "avif" | "webp";
-  quality?: number;
-}
-
-/** The responsive widths we generate, in CSS px. */
-export const CF_IMAGE_WIDTHS = [320, 480, 640, 960, 1280, 1600] as const;
-
-/** Build a single `/cdn-cgi/image/...` URL for a source image. */
-export function cfImageUrl(src: string, opts: CfImageOpts): string {
-  const options = [
-    `width=${Math.round(opts.width)}`,
-    opts.height ? `height=${Math.round(opts.height)}` : null,
-    `fit=${opts.fit ?? "cover"}`,
-    `format=${opts.format ?? "auto"}`,
-    `quality=${opts.quality ?? 82}`,
-  ]
-    .filter(Boolean)
-    .join(",");
-  // Cloudflare accepts both absolute source URLs and same-zone paths verbatim
-  // after the options segment.
-  return `/cdn-cgi/image/${options}/${src}`;
-}
-
-/**
- * Build a `srcset` of resized variants up to ~2x the display width, so the
- * browser picks the right density. `displayWidth` is the intrinsic/layout width.
- */
-export function cfImageSrcset(
-  src: string,
-  displayWidth: number,
-  opts: Omit<CfImageOpts, "width"> = {},
-): string {
-  const widths = CF_IMAGE_WIDTHS.filter((w) => w <= displayWidth * 2);
-  const list = widths.length ? widths : [displayWidth];
-  return list.map((w) => `${cfImageUrl(src, { ...opts, width: w })} ${w}w`).join(", ");
-}

package/apps/storefront/src/workers/pruneRollupWorker.ts

@@ -1,120 +0,0 @@
-/**
- * The scheduled Cloudflare Worker entry for `dt-prune-and-rollup`.
- *
- * A SEPARATE, DEDICATED Worker script from the Astro-adapted storefront
- * Worker — deliberately, not a `scheduled` export bolted onto the Astro
- * entry. The @astrojs/cloudflare adapter OWNS `dist/server/entry.mjs` and
- * bakes its target environment in at BUILD time via `CLOUDFLARE_ENV`
- * (`wrangler.toml`'s own "DEPLOY FOOTGUN" comment); the documented way to add
- * a non-`fetch` handler there is a custom entrypoint that re-imports the
- * adapter's generated `handle()`, which would make this cron trigger's
- * correctness depend on the SAME footgun-prone build/deploy sequencing as
- * the whole storefront. This module instead has nothing to do with Astro at
- * all — it is a plain `ExportedHandler` deployed under its own Worker name
- * (`wrangler.prune-rollup.toml`, `[triggers]` below), reusing the tracking
- * library's already-built, framework-agnostic pieces
- * (`lib/tracking/pruneRollup.ts`, `d1Control.ts`, `interactionStore.ts`).
- * There is no other scheduled-Worker precedent in this repo to follow; this
- * is the first one, chosen to keep the footgun-prone Astro deploy path
- * completely untouched.
- *
- * BINDINGS (declared in `wrangler.prune-rollup.toml`, not this file):
- *   - `STOREFRONT_APPS_DB` — the SAME shared D1 database the main storefront
- *     Worker binds, for the `tracking_tenant_databases` directory.
- *   - `INTERACTION_ANALYTICS` — the SAME Analytics Engine dataset the main
- *     Worker writes rollups to.
- *   - `CF_ACCOUNT_ID` / `TRACKING_D1_API_TOKEN` (secret) — D1 REST
- *     credentials for reaching each tenant's OWN database (Worker bindings
- *     are static; a per-tenant database can only be addressed over the D1
- *     HTTP API, same reasoning as `d1Control.ts`'s module doc).
- *   - `TRACKING_D1_NAME_PREFIX` (optional) — unused by this worker directly,
- *     kept only for parity/documentation; the prune sweep addresses tenants
- *     by `database_uuid` from the directory, never by re-deriving the name.
- */
-import type { Queryable } from "../lib/d1/catalog.js";
-import type { D1Like } from "../lib/d1/catalog.js";
-import { fromD1 } from "../lib/d1/catalog.js";
-import type { AnalyticsEngineLike } from "../lib/activity/store.js";
-import type { D1ControlConfig } from "../lib/tracking/d1Control.js";
-import { runPruneSweep, type PruneSweepResult } from "../lib/tracking/pruneRollup.js";
-
-/** The env bindings this Worker needs — a local, minimal slice (this repo
- *  does not take a `@cloudflare/workers-types` dependency; see `d1Control.ts`
- *  and `activity/store.ts` for the same convention). */
-export interface PruneRollupEnv {
-  STOREFRONT_APPS_DB: D1Like;
-  INTERACTION_ANALYTICS?: AnalyticsEngineLike;
-  CF_ACCOUNT_ID?: string;
-  TRACKING_D1_API_TOKEN?: string;
-  /** Tenants processed per invocation; overridable for a slower/faster cron. */
-  PRUNE_BATCH_SIZE?: string;
-}
-
-/** The minimal slice of Cloudflare's `ScheduledController` this handler uses. */
-export interface ScheduledControllerLike {
-  scheduledTime: number;
-}
-
-/** The minimal slice of Cloudflare's `ExecutionContext` this handler uses. */
-export interface ExecutionContextLike {
-  waitUntil(promise: Promise<unknown>): void;
-}
-
-/** Build the D1 REST control config from env, or undefined when unconfigured
- *  (mirrors `d1Control.ts`'s `readD1Control()` "skip, never fail" posture). */
-function controlFromEnv(env: PruneRollupEnv): D1ControlConfig | undefined {
-  if (!env.CF_ACCOUNT_ID || !env.TRACKING_D1_API_TOKEN) return undefined;
-  return { accountId: env.CF_ACCOUNT_ID, apiToken: env.TRACKING_D1_API_TOKEN };
-}
-
-/**
- * The pure orchestration the `scheduled` export below delegates to — kept
- * separate so it is callable/testable without a real `ScheduledController`.
- * Never throws: a misconfigured environment (no D1 REST credentials) logs
- * and no-ops rather than failing the cron invocation.
- */
-export async function handleScheduledPrune(
-  env: PruneRollupEnv,
-  now: string = new Date().toISOString(),
-): Promise<PruneSweepResult | undefined> {
-  const control = controlFromEnv(env);
-  if (!control) {
-    console.error(
-      "[tracking:prune] skipped — CF_ACCOUNT_ID/TRACKING_D1_API_TOKEN not configured",
-    );
-    return undefined;
-  }
-
-  const apps: Queryable = fromD1(env.STOREFRONT_APPS_DB);
-  const batchSize = env.PRUNE_BATCH_SIZE ? Number.parseInt(env.PRUNE_BATCH_SIZE, 10) : undefined;
-
-  const result = await runPruneSweep({
-    apps,
-    control,
-    analytics: env.INTERACTION_ANALYTICS,
-    now,
-    ...(batchSize && Number.isFinite(batchSize) ? { batchSize } : {}),
-  });
-
-  console.info(
-    `[tracking:prune] swept ${result.tenantsSwept} tenant(s), pruned ${result.totalPrunedRows} row(s), ` +
-      `wrote ${result.totalAggregatesWritten} aggregate(s)`,
-  );
-  return result;
-}
-
-export default {
-  async scheduled(
-    controller: ScheduledControllerLike,
-    env: PruneRollupEnv,
-    ctx: ExecutionContextLike,
-  ): Promise<void> {
-    ctx.waitUntil(
-      handleScheduledPrune(env, new Date(controller.scheduledTime).toISOString()).catch((err) => {
-        console.error(
-          `[tracking:prune] sweep threw: ${err instanceof Error ? err.message : String(err)}`,
-        );
-      }),
-    );
-  },
-};

package/tenants/home/public/js/storefront.js

@@ -1,129 +0,0 @@
-/* Storefront early-access landing — interactions.
- * Served at /tenants/home/js/storefront.js (mirrored from tenants/home/public/).
- */
-(function () {
-  // 1) comparison expand/collapse
-  document.querySelectorAll(".cmp .top").forEach(function (btn) {
-    btn.addEventListener("click", function () {
-      const card = btn.closest(".cmp"), open = card.getAttribute("aria-expanded") === "true";
-      card.setAttribute("aria-expanded", open ? "false" : "true");
-      btn.setAttribute("aria-expanded", open ? "false" : "true");
-    });
-  });
-
-  // 2) persona tabs
-  const tabs = document.querySelectorAll(".seg [data-persona]");
-  const panels = document.querySelectorAll(".ppanel");
-  tabs.forEach(function (tab) {
-    tab.addEventListener("click", function () {
-      const who = tab.getAttribute("data-persona");
-      tabs.forEach(function (t) { t.setAttribute("aria-selected", t === tab ? "true" : "false"); });
-      panels.forEach(function (p) { p.classList.toggle("on", p.getAttribute("data-panel") === who); });
-    });
-  });
-
-  // ---- request-access modal --------------------------------------------------
-  // Board address the mailto: fallback targets (mirrors the server route's
-  // recipient). Kept in sync with apps/storefront/src/pages/api/request-access.ts.
-  const BOARD_EMAIL = "darrin84+l6gajmvvoo1x4edew5qs@boards.trello.com";
-  const modal = document.getElementById("ra-modal");
-  const form = modal && modal.querySelector("form.ra");
-
-  function openModal() {
-    if (!modal) return;
-    modal.classList.remove("done");
-    if (form) form.classList.remove("has-error");
-    modal.classList.add("on");
-    document.body.style.overflow = "hidden";
-    const first = modal.querySelector("input[name=email]");
-    if (first) setTimeout(function () { first.focus(); }, 40);
-  }
-  function closeModal() {
-    if (!modal) return;
-    modal.classList.remove("on");
-    document.body.style.overflow = "";
-  }
-
-  // Any element pointing at #request opens the modal instead of jumping.
-  document.querySelectorAll('a[href="#request"]').forEach(function (a) {
-    a.addEventListener("click", function (e) {
-      e.preventDefault();
-      openModal();
-    });
-  });
-  if (modal) {
-    modal.querySelectorAll("[data-close]").forEach(function (el) {
-      el.addEventListener("click", closeModal);
-    });
-    document.addEventListener("keydown", function (e) {
-      if (e.key === "Escape" && modal.classList.contains("on")) closeModal();
-    });
-  }
-
-  function mailtoFallback(fields) {
-    const lines = [
-      "First name: " + fields.firstName,
-      "Last name: " + fields.lastName,
-      "Email: " + fields.email,
-      fields.phone ? "Phone: " + fields.phone : null,
-      fields.details ? "\nDetails:\n" + fields.details : null,
-    ].filter(Boolean).join("\n");
-    const subject = "Early-access request — " + fields.firstName + " " + fields.lastName;
-    return "mailto:" + BOARD_EMAIL + "?subject=" + encodeURIComponent(subject) + "&body=" + encodeURIComponent(lines);
-  }
-
-  if (form) {
-    form.addEventListener("submit", async function (e) {
-      e.preventDefault();
-      form.classList.remove("has-error");
-      const fd = new FormData(form);
-      const fields = {
-        email: String(fd.get("email") || "").trim(),
-        firstName: String(fd.get("firstName") || "").trim(),
-        lastName: String(fd.get("lastName") || "").trim(),
-        phone: String(fd.get("phone") || "").trim(),
-        details: String(fd.get("details") || "").trim(),
-      };
-
-      const btn = form.querySelector("button[type=submit]");
-      const label = btn ? btn.textContent : "";
-      if (btn) { btn.disabled = true; btn.textContent = "Sending…"; }
-
-      try {
-        const res = await fetch("/api/request-access", {
-          method: "POST",
-          headers: { "content-type": "application/json", accept: "application/json" },
-          body: JSON.stringify(fields),
-        });
-        const data = await res.json().catch(function () { return {}; });
-        if (res.ok && data && data.ok) {
-          // If the endpoint couldn't send server-side yet, it hands back a
-          // mailto: so the request is never dropped on the floor.
-          if (data.fallback === "mailto") {
-            window.location.href = data.mailto || mailtoFallback(fields);
-          }
-          modal.classList.add("done");
-        } else {
-          throw new Error((data && data.error) || "send_failed");
-        }
-      } catch (err) {
-        // Never a dead form: offer the mailto: as a client-side last resort.
-        // Built with DOM methods (no innerHTML) so field values can't inject markup.
-        form.classList.add("has-error");
-        const errEl = form.querySelector(".err");
-        if (errEl) {
-          errEl.textContent = "Something went wrong. ";
-          const link = document.createElement("a");
-          link.href = mailtoFallback(fields);
-          link.style.color = "inherit";
-          link.style.textDecoration = "underline";
-          link.textContent = "Email us directly";
-          errEl.appendChild(link);
-          errEl.appendChild(document.createTextNode(" and we'll take it from there."));
-        }
-      } finally {
-        if (btn) { btn.disabled = false; btn.textContent = label; }
-      }
-    });
-  }
-})();