@tokenoftrust/storefront-runner 2.0.54 → 2.0.56

package/apps/storefront/public/js/dashboard-team.js

@@ -128,7 +128,56 @@
   function showMsg(kind, text) {
     const el = $("msg");
     el.className = "msg " + kind;
-    el.textContent = text;
+    el.replaceChildren();
+    if (typeof text === "string") {
+      el.textContent = text;
+      return;
+    }
+    if (text && text.nodeType) el.appendChild(text);
+  }
+
+  function showProvisionPrompt(message) {
+    const wrap = document.createElement("div");
+    const line = document.createElement("p");
+    line.style.margin = "0 0 .6rem";
+    line.textContent = message || "This store's repo isn't provisioned yet.";
+    const btn = document.createElement("button");
+    btn.type = "button";
+    btn.id = "provisionBtn";
+    btn.className = "secondary";
+    btn.textContent = "Provision now?";
+    btn.title = "Create the store repo on this environment, then retry the invite";
+    btn.addEventListener("click", () => provisionStore(btn));
+    wrap.appendChild(line);
+    wrap.appendChild(btn);
+    showMsg("err", wrap);
+  }
+
+  async function provisionStore(btn) {
+    if (btn) btn.disabled = true;
+    showMsg("", "Provisioning store repo…");
+    try {
+      const res = await fetch("/api/grants/provision-store", {
+        method: "POST",
+        headers: { "content-type": "application/json", accept: "application/json" },
+        body: JSON.stringify({ tenant, confirm: true }),
+      });
+      const body = await res.json().catch(() => ({}));
+      if (res.ok) {
+        const created = body.created ? "created" : "already present";
+        showMsg(
+          "ok",
+          "Store repo " + created + " for " + (body.tenant || tenant) +
+            ". Click Send invite again.",
+        );
+      } else {
+        showMsg("err", body.error || ("Provision failed (HTTP " + res.status + ")."));
+      }
+    } catch (e) {
+      showMsg("err", "Provision failed: " + (e && e.message ? e.message : e));
+    } finally {
+      if (btn) btn.disabled = false;
+    }
   }
 
   async function invite() {
@@ -161,6 +210,11 @@
         $("email").value = "";
         if (noteEl) noteEl.value = "";
         loadMembers();
+      } else if (
+        res.status === 409 &&
+        (body.code === "store-not-provisioned" || body.reason === "storeNotProvisioned")
+      ) {
+        showProvisionPrompt(body.error);
       } else {
         showMsg("err", body.error || ("Invite failed (HTTP " + res.status + ")."));
       }

package/apps/storefront/public/shared/commerce-chrome.css

@@ -1,40 +1,10 @@
-/* ============================================================================
-   Shared commerce-chrome stylesheet — ONE platform-shipped, token-driven layer
-   (workstream shared-ecommerce-widgets, unit F2 `shared-chrome-css`).
+/* Shared commerce chrome. Theme values come from the token contract in
+   docs/architecture/token-contract.md; tenant-private brand variables and
+   hard-coded brand colors do not belong here. Dark surfaces derive from
+   --color-text and --color-primary-contrast.
 
-   Generalizes the divergent per-tenant `public/pages/mkt.css` files (some tenants
-   shared a byte-identical base sheet; others carried a richer variant with .mega /
-   .member-cue / .announce-bar / .age-gate / .trust-marks) into a SINGLE stylesheet
-   every storefront links and themes via
-   tokens only. Per decisions raw-chrome-single-stylesheet + materialization-compat.
-
-   CONTRACT-TOKEN-ONLY (docs/architecture/token-contract.md, unit F1). Every value
-   here reads the shared `--color-*` / `--font-*` / `--radius-*` / `--shadow-*` /
-   `--container-max` vocabulary and NO tenant-private brand var (never `--navy`,
-   `--brand-red`, unprefixed `--sale`/`--ink`/`--surface`), and no hard-coded brand
-   hex. On-dark surfaces (footer, age-gate overlay, cat cards) derive from
-   `--color-text` (the deep ink surface) + `--color-primary-contrast` via
-   `color-mix`, so a tenant reskins the whole chrome by supplying tokens/aliases.
-
-   Token mapping from the old per-tenant vars (applied by the integration units
-   that alias each tenant's brand vocabulary onto the contract):
-     --navy / --brand-red  -> --color-primary        (nav active, cart, CTA fill)
-     --navy-dark           -> --color-primary-hover
-     --sale                -> --color-sale           (flag / NEW / marquee emphasis)
-     --surface / --surface-2 / --border / --muted -> --color-{surface,surface-2,border,muted}
-     --ink / --ink-2       -> --color-text
-     --brand-blue          -> --color-accent         (member cue, promo/trust spark)
-     --container           -> --container-max
-     footer / age-gate ink surfaces -> --color-text (+ --color-primary-contrast)
-
-   DELIVERY: platform static asset, served at /shared/commerce-chrome.css (root,
-   global — like /brand, /js). It is a LINKED sheet, not inline: commerce routes
-   (/products, /collections) carry linked <link> sheets but strip inline <style>,
-   which is exactly the PVC breakage this closes. The canonical chrome partial (F3)
-   links it; per-tenant chrome retires its copied mkt.css at integration (I1/I2/I3).
-   rawMarketingHtml.prefixTenantLinks exempts /shared/ so the link survives
-   path-prefix tenant routing (as it already does for /tenants/).
-   ========================================================================== */
+   This linked platform asset is served at /shared/commerce-chrome.css.
+   rawMarketingHtml.prefixTenantLinks leaves /shared/ paths unprefixed. */
 
 /* --- Layout --------------------------------------------------------------- */
 /* Clip (not hidden) so a closed off-canvas mobile drawer never creates a
@@ -132,7 +102,7 @@ body { overflow-x: clip; }
 .site-header { position: sticky; top: 0; z-index: 100; background: var(--color-surface); border-bottom: 1px solid var(--color-border); }
 .site-header .header-row { gap: clamp(12px, 3vw, 40px); }
 .header-row { display: flex; flex-wrap: wrap; align-items: center; gap: clamp(12px, 2.5vw, 32px); padding-block: 14px; }
-/* Logo: image mark (bigd/giant) or text wordmark (PVC) both supported. */
+/* Logo: image mark and text wordmark are both supported. */
 /* object-fit is load-bearing, not polish: with height pinned and width auto, a logo whose
    box is capped by max-width is otherwise STRETCHED to fill it. Measured 2026-09-21 on a
    real tenant: a 500x196 logo (ratio 2.55) rendered at 154x34 (ratio 4.53) on mobile.
@@ -196,11 +166,11 @@ body { overflow-x: clip; }
 /* --- Primary nav + mega-menu ---------------------------------------------- */
 .primary-nav { flex: 1; }
 .primary-nav > ul { display: flex; flex-wrap: wrap; align-items: center; gap: clamp(10px, 1.6vw, 22px); }
-/* Flat links (bigd/giant) */
+/* Flat primary links */
 .primary-nav a { font-weight: 600; font-size: .92rem; color: var(--color-text); padding: 6px 2px; border-bottom: 2px solid transparent; transition: color .15s, border-color .15s; }
 .primary-nav a:hover { color: var(--color-primary); border-color: var(--color-primary); }
 .primary-nav a.is-flag { color: var(--color-sale); }
-/* Nav items with dropdowns (PVC mega) */
+/* Nav items with dropdowns */
 .primary-nav .nav-item { position: relative; }
 .primary-nav .nav-item > a { display: inline-flex; align-items: center; gap: 5px; font-weight: 600; font-size: .92rem; color: var(--color-text); padding: 14px 2px; border-bottom: 2px solid transparent; transition: color .15s, border-color .15s; }
 .primary-nav .nav-item > a:hover, .primary-nav .nav-item:focus-within > a { color: var(--color-primary); border-color: var(--color-primary); }
@@ -211,7 +181,7 @@ body { overflow-x: clip; }
   display: inline-block; background: var(--color-sale); color: var(--color-primary-contrast); font-size: .58rem; font-weight: 800;
   letter-spacing: .06em; padding: 2px 5px; border-radius: var(--radius-sm); margin-left: 6px; vertical-align: middle;
 }
-/* Second-row nav bar (bigd) + nav-bar container (PVC) */
+/* Second-row nav bar and its container */
 .primary-nav-bar { border-top: 1px solid var(--color-border); background: var(--color-surface); }
 .primary-nav-bar .container { padding-block: 4px; }
 .primary-nav-bar .primary-nav > ul { gap: clamp(10px, 1.4vw, 20px); }
@@ -352,7 +322,7 @@ a.article-card__tag:hover { text-decoration: underline; }
 .footer-col ul { display: flex; flex-direction: column; gap: 9px; }
 .footer-col a { color: color-mix(in srgb, var(--color-primary-contrast) 78%, transparent); font-size: .92rem; }
 .footer-col a:hover { color: var(--color-primary-contrast); text-decoration: underline; }
-/* Newsletter signup (PVC) */
+/* Newsletter signup */
 .footer-news { margin-top: 14px; }
 .footer-news__row { display: flex; gap: 8px; }
 .footer-news input[type="email"] { flex: 1; min-width: 0; border: 1px solid color-mix(in srgb, var(--color-primary-contrast) 22%, transparent); border-radius: var(--radius-md); padding: 10px 12px; font-size: .88rem; background: color-mix(in srgb, var(--color-text) 88%, var(--color-primary-contrast)); color: var(--color-primary-contrast); }
@@ -391,7 +361,7 @@ a.article-card__tag:hover { text-decoration: underline; }
 }
 .pay-badges { display: flex; flex-wrap: wrap; gap: 8px; margin-top: 16px; }
 .pay-badges span { font-size: .62rem; font-weight: 700; letter-spacing: .04em; color: color-mix(in srgb, var(--color-primary-contrast) 82%, transparent); border: 1px solid color-mix(in srgb, var(--color-primary-contrast) 22%, transparent); border-radius: var(--radius-sm); padding: 4px 7px; }
-/* Trust marks strip (PVC) */
+/* Trust marks strip */
 .trust-marks { display: flex; flex-wrap: wrap; gap: 8px 18px; margin-top: 30px; padding-top: 20px; border-top: 1px solid color-mix(in srgb, var(--color-primary-contrast) 12%, transparent); }
 .trust-marks span { display: inline-flex; align-items: center; gap: 7px; font-size: .82rem; font-weight: 600; color: color-mix(in srgb, var(--color-primary-contrast) 82%, transparent); }
 .trust-marks svg { width: 17px; height: 17px; stroke: var(--color-accent); fill: none; stroke-width: 1.8; }

package/apps/storefront/src/config/staffProvisionProjection.ts

@@ -0,0 +1,24 @@
+/**
+ * TENANT_CACHE projection for staff/operator store provision.
+ *
+ * Lives under src/config so pages/lib may call it without crossing the
+ * tenancy-resolver-fence (only config/middleware may import kvTenantResolver).
+ */
+import type { TenantConfig } from "@tot/public-runtime";
+import { putTenant } from "@/config/kvTenantResolver";
+
+export async function projectProvisionedTenant(
+  kv: KVNamespace,
+  config: TenantConfig,
+  repoMeta: { owner: string; repo: string; cloneUrl: string | null },
+): Promise<void> {
+  await putTenant(kv, config);
+  await kv.put(
+    `repo:${config.tenant_id}`,
+    JSON.stringify({
+      owner: repoMeta.owner,
+      repo: repoMeta.repo,
+      cloneUrl: repoMeta.cloneUrl,
+    }),
+  );
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "2.0.54",
+  "version": "2.0.56",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",

package/packages/public-runtime/src/activity/catalog.ts

@@ -479,6 +479,14 @@ export const ACTION_CATALOG = {
     argsAllow: ["resource", "capability"], renderedAllow: [],
     desc: "A ToT-staff operator entered a vendor tenant (impersonation boundary).",
   },
+  "dashboard.store_provision": {
+    // grants/provision-store.ts — "Provision now?" from the Team invite dead-end when
+    // the store repo is not yet provisioned. Same near-side admission as team-invite
+    // (membership → merchant/dev, staff selection → admin). Args are counts/ids only.
+    actors: ["admin", "merchant", "dev"], source: "ui", sinks: LIFECYCLE,
+    argsAllow: ["resource"], renderedAllow: ["created", "repo"],
+    desc: "A store's forge repo was provisioned from the Team console.",
+  },
   "cache.purged": {
     // cache-purge.ts — bumps a tenant's edge page-cache version (the ETL load step calls
     // it per tenant post-migration). Bearer-secret service call (no session) → emitted