@tokenoftrust/storefront-runner 2.0.55 → 2.0.56

package/apps/storefront/public/js/dashboard-team.js

@@ -128,7 +128,56 @@
   function showMsg(kind, text) {
     const el = $("msg");
     el.className = "msg " + kind;
-    el.textContent = text;
+    el.replaceChildren();
+    if (typeof text === "string") {
+      el.textContent = text;
+      return;
+    }
+    if (text && text.nodeType) el.appendChild(text);
+  }
+
+  function showProvisionPrompt(message) {
+    const wrap = document.createElement("div");
+    const line = document.createElement("p");
+    line.style.margin = "0 0 .6rem";
+    line.textContent = message || "This store's repo isn't provisioned yet.";
+    const btn = document.createElement("button");
+    btn.type = "button";
+    btn.id = "provisionBtn";
+    btn.className = "secondary";
+    btn.textContent = "Provision now?";
+    btn.title = "Create the store repo on this environment, then retry the invite";
+    btn.addEventListener("click", () => provisionStore(btn));
+    wrap.appendChild(line);
+    wrap.appendChild(btn);
+    showMsg("err", wrap);
+  }
+
+  async function provisionStore(btn) {
+    if (btn) btn.disabled = true;
+    showMsg("", "Provisioning store repo…");
+    try {
+      const res = await fetch("/api/grants/provision-store", {
+        method: "POST",
+        headers: { "content-type": "application/json", accept: "application/json" },
+        body: JSON.stringify({ tenant, confirm: true }),
+      });
+      const body = await res.json().catch(() => ({}));
+      if (res.ok) {
+        const created = body.created ? "created" : "already present";
+        showMsg(
+          "ok",
+          "Store repo " + created + " for " + (body.tenant || tenant) +
+            ". Click Send invite again.",
+        );
+      } else {
+        showMsg("err", body.error || ("Provision failed (HTTP " + res.status + ")."));
+      }
+    } catch (e) {
+      showMsg("err", "Provision failed: " + (e && e.message ? e.message : e));
+    } finally {
+      if (btn) btn.disabled = false;
+    }
   }
 
   async function invite() {
@@ -161,6 +210,11 @@
         $("email").value = "";
         if (noteEl) noteEl.value = "";
         loadMembers();
+      } else if (
+        res.status === 409 &&
+        (body.code === "store-not-provisioned" || body.reason === "storeNotProvisioned")
+      ) {
+        showProvisionPrompt(body.error);
       } else {
         showMsg("err", body.error || ("Invite failed (HTTP " + res.status + ")."));
       }

package/apps/storefront/src/config/staffProvisionProjection.ts

@@ -0,0 +1,24 @@
+/**
+ * TENANT_CACHE projection for staff/operator store provision.
+ *
+ * Lives under src/config so pages/lib may call it without crossing the
+ * tenancy-resolver-fence (only config/middleware may import kvTenantResolver).
+ */
+import type { TenantConfig } from "@tot/public-runtime";
+import { putTenant } from "@/config/kvTenantResolver";
+
+export async function projectProvisionedTenant(
+  kv: KVNamespace,
+  config: TenantConfig,
+  repoMeta: { owner: string; repo: string; cloneUrl: string | null },
+): Promise<void> {
+  await putTenant(kv, config);
+  await kv.put(
+    `repo:${config.tenant_id}`,
+    JSON.stringify({
+      owner: repoMeta.owner,
+      repo: repoMeta.repo,
+      cloneUrl: repoMeta.cloneUrl,
+    }),
+  );
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "2.0.55",
+  "version": "2.0.56",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",

package/packages/public-runtime/src/activity/catalog.ts

@@ -479,6 +479,14 @@ export const ACTION_CATALOG = {
     argsAllow: ["resource", "capability"], renderedAllow: [],
     desc: "A ToT-staff operator entered a vendor tenant (impersonation boundary).",
   },
+  "dashboard.store_provision": {
+    // grants/provision-store.ts — "Provision now?" from the Team invite dead-end when
+    // the store repo is not yet provisioned. Same near-side admission as team-invite
+    // (membership → merchant/dev, staff selection → admin). Args are counts/ids only.
+    actors: ["admin", "merchant", "dev"], source: "ui", sinks: LIFECYCLE,
+    argsAllow: ["resource"], renderedAllow: ["created", "repo"],
+    desc: "A store's forge repo was provisioned from the Team console.",
+  },
   "cache.purged": {
     // cache-purge.ts — bumps a tenant's edge page-cache version (the ETL load step calls
     // it per tenant post-migration). Bearer-secret service call (no session) → emitted