@tokenoftrust/storefront-runner 2.0.8 → 2.0.10

package/apps/storefront/src/lib/tot/syncState.ts

@@ -0,0 +1,109 @@
+/**
+ * Worker-side reader for the durable per-tenant catalog sync state (hsby-B1).
+ * The migration CLI writes one JSON document per tenant scope at
+ * out/catalog/<scope>/sync-state.json (packages/migration/src/load/sync-state.ts,
+ * `SyncStateStore`/`nextSyncState`) — this module is the Worker's read side of
+ * that same file, via the same Vite glob mechanism `ToTClient.ts` uses for
+ * products.json/collections.json/reviews.json. OPTIONAL: a tenant with no
+ * recorded sync (or one migrated before hsby-B1 landed) just gets `null`.
+ *
+ * This is intentionally a thin, standalone read — not wired into `ToTClient`,
+ * since not every caller needs sync provenance. hsby-B3's readiness projection
+ * is the expected first consumer.
+ */
+
+/** Mirrors packages/migration/src/load/sync-state.ts's `SourcePlatform`. */
+export type SyncStateSourcePlatform =
+  | "shopify-admin"
+  | "shopify-public"
+  | "fixtures"
+  | "existing";
+
+/** Mirrors packages/migration/src/load/sync-state.ts's `FidelityLevel`. */
+export type SyncStateFidelityLevel = "full" | "reduced" | "unknown";
+
+export interface SyncStateFidelity {
+  level: SyncStateFidelityLevel;
+  note: string;
+  missing: string[];
+}
+
+export interface SyncStateSourceMode {
+  platform: SyncStateSourcePlatform;
+  mode: "full" | "incremental";
+  fullSweepOnly: boolean;
+}
+
+export interface SyncStateEntity {
+  checksums: Record<string, string>;
+  lastUpdatedAt: string | null;
+}
+
+/** Mirrors packages/migration/src/load/sync-state.ts's `EntityChangeSet`. */
+export interface SyncStateEntityChangeSet {
+  added: string[];
+  updated: string[];
+  removed: string[];
+  unchanged: number;
+}
+
+/** Mirrors packages/migration/src/load/sync-state.ts's `SweepChanges`. */
+export interface SyncStateSweepChanges {
+  computedAt: string;
+  mode: "full" | "incremental";
+  removalsAssessed: boolean;
+  fullSweepOnly: boolean;
+  products: SyncStateEntityChangeSet;
+  collections: SyncStateEntityChangeSet;
+}
+
+/** The on-disk shape written by the migration CLI (schema "tot.sync-state/1"). */
+export interface CatalogSyncState {
+  schema: string;
+  tenantId: string;
+  scope: string;
+  source: SyncStateSourceMode;
+  fidelity: SyncStateFidelity;
+  lastSyncAt: string | null;
+  products: SyncStateEntity;
+  collections: SyncStateEntity;
+  /**
+   * The content-hash delta of the most recent sweep. Optional: a catalog
+   * migrated before hsby-B2 (change detection) has no `lastChanges`.
+   */
+  lastChanges?: SyncStateSweepChanges;
+}
+
+// Vite resolves this glob at build time and bundles every tenant's sync-state
+// document, so the Worker has no runtime filesystem dependency — same pattern
+// as productGlobs/collectionGlobs/reviewGlobs in ToTClient.ts.
+const syncStateGlobs = import.meta.glob<CatalogSyncState>(
+  "../../../../../packages/migration/out/catalog/*/sync-state.json",
+  { import: "default" },
+);
+
+const syncStateCacheByScope = new Map<string, CatalogSyncState | null>();
+
+/** Pick the glob entry for a tenant scope (matches .../catalog/<scope>/file). */
+function pickByScope(scope: string): (() => Promise<CatalogSyncState>) | null {
+  const suffix = `/catalog/${scope}/`;
+  const key = Object.keys(syncStateGlobs).find((k) => k.includes(suffix));
+  return (key ? syncStateGlobs[key] : null) ?? null;
+}
+
+/**
+ * The tenant's durable sync state, or null when none was ever recorded (no
+ * migration run yet, or a pre-hsby-B1 catalog). Never throws.
+ */
+export async function getSyncState(scope: string): Promise<CatalogSyncState | null> {
+  if (syncStateCacheByScope.has(scope)) return syncStateCacheByScope.get(scope)!;
+  const loader = pickByScope(scope);
+  const state = loader ? await loader() : null;
+  syncStateCacheByScope.set(scope, state);
+  return state;
+}
+
+/** Test seam: drop the per-isolate cache. */
+export function clearSyncStateCache(): void {
+  syncStateCacheByScope.clear();
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "2.0.8",
+  "version": "2.0.10",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",

package/packages/public-runtime/src/customization-reconcile.ts

@@ -90,7 +90,21 @@ export interface PreviewState {
    * post-hoc merge sets it, after `reportPreviewEvidence` computes it. Absent and
    * `null` both mean "no verdict yet"; callers should treat them the same.
    */
-  evidence?: { checks: PreviewStateEvidenceCheck[]; promotable: boolean; generatedAt: string } | null;
+  evidence?: {
+    checks: PreviewStateEvidenceCheck[];
+    promotable: boolean;
+    generatedAt: string;
+    /**
+     * Set when the MCP `change_report_evidence` push for this verdict failed —
+     * `promotable` above is already forced `false` in that case (fail-closed: MCP
+     * has no evidence for this commit, so the local record must not claim
+     * shippability the other source of truth doesn't share). Mirrors
+     * `ReviewEnvironmentEvidence.pushFailed` (candidate-index.ts).
+     */
+    pushFailed?: boolean;
+    /** The push failure's error message, when `pushFailed` is true. */
+    pushError?: string;
+  } | null;
 }
 
 export function previewStateKey(tenantId: string): string {

package/packages/public-runtime/src/evidence.ts

@@ -9,16 +9,16 @@
  * See `epics/dev-loop.md` (D4 + the MCP-foundations block).
  */
 
-// NOTE (2026-08): a v2 `assets_materialized` check was briefly added here and REVERTED —
-// the deployed tot-mcp evidence validator pins `contract_version:1` + a 7-id enum and
-// REJECTED every v2 report (".contract_version should be equal to constant; .checks[7].id
-// should be equal to one of the allowed values"), silently dropping the evidence push so
-// `preview_status` hung `pending` on every reconcile. The reconcile STILL fetch-verifies
-// the served asset subtree (verify-assets.ts) and surfaces the result in the reconcile
-// trace ("assets-verified" marker) — that regression guard is intact. Re-add the
-// `assets_materialized` check id here + bump to 2 ONLY in lockstep with tot-mcp accepting
-// contract_version 2 (and mirroring the evidence-url CRC). Until then this stays v1.
-export const EVIDENCE_CONTRACT_VERSION = 1;
+// v2 (2026-08): added the `assets_materialized` check — reconcile now fetch-verifies
+// that a version's public/app asset subtree actually SERVES (the pagination-truncation
+// class of silent drop, fb-1787794734109-hjru1k, reported success + promotable while
+// the newest asset subtree 404'd). GRANDFATHER: a consumer must treat an
+// already-passed v1 report as still valid — the new check is version-gated, so a v1
+// report (which cannot carry it) is never retroactively failed for its absence. The
+// promote-gate addition (`assets_materialized` → REQUIRED_FOR_PROMOTE) is
+// version-gated to v2 on the CONSUMER (tot-mcp); this producer emits the check but
+// leaves REQUIRED_FOR_PROMOTE unchanged so a v1-shaped promote rule still holds.
+export const EVIDENCE_CONTRACT_VERSION = 2;
 
 /** The per-check verdicts. `skip` = not applicable / not yet measured. */
 export const EVIDENCE_STATUSES = ["pass", "warn", "fail", "skip"] as const;
@@ -37,7 +37,10 @@ export const EVIDENCE_CHECK_IDS = [
   "json_ld",
   "sitemap",
   "cutover_crawl",
-  // (v2 `assets_materialized` intentionally omitted — see EVIDENCE_CONTRACT_VERSION note.)
+  // v2: did this version's public/app asset subtree actually materialize + serve
+  // (fetch-verified against R2 at the published versionId). Fail-closed — a silent
+  // drop (pagination truncation, a failed ingest) reads `fail`, never a vacuous pass.
+  "assets_materialized",
 ] as const;
 export type EvidenceCheckId = (typeof EVIDENCE_CHECK_IDS)[number];
 

package/pnpm-workspace.yaml

@@ -1,9 +1,6 @@
 packages:
   - "apps/*"
   - "packages/*"
-allowBuilds:
-  esbuild: set this to true or false
-  workerd: set this to true or false
 linkWorkspacePackages: true
 onlyBuiltDependencies:
   - esbuild

package/scripts/tenant/materialize-tenant-content.mjs

@@ -38,6 +38,12 @@
  *   node scripts/tenant/materialize-tenant-content.mjs --check-pinned [--expect-ref <sha>] [--allow-unpinned]
  *       # stricter deploy gate: verify populated AND materialized from Gitea at a
  *       # PINNED ref (.materialized.json present, pinned, on the expected ref); no network
+ *   node scripts/tenant/materialize-tenant-content.mjs --check-pinned --verify-fresh
+ *       # opt-in NETWORK addition to --check-pinned: for any stamp pinned to a
+ *       # MOVABLE ref (a branch name, or an unpinned default-branch materialize),
+ *       # resolve that ref's CURRENT tip on Gitea and refuse if the stamped sha no
+ *       # longer matches it (`git ls-remote`, no clone). A stamp pinned to an exact
+ *       # commit SHA is frozen by design and can never be "stale" under this check.
  *
  * Auth (never logged; tokens are redacted from every error):
  *   TENANT_GIT_BASE   clone base. Default https://git.tokenoftrust.com/storefront
@@ -71,6 +77,7 @@ const repoRoot = resolve(here, "..", "..");
 
 export const MANIFEST_PATH = "tenants/.gitea-tenants.json";
 const TENANT_ID_RE = /^[a-z0-9][a-z0-9.-]{1,60}[a-z0-9]$/;
+const FULL_SHA_RE = /^[0-9a-f]{40}$/i;
 const DEFAULT_GIT_BASE = "https://git.tokenoftrust.com/storefront";
 
 /** Load the Gitea-tenant manifest. Returns { tenants: { <id>: { repo } } }. */
@@ -380,9 +387,87 @@ export function checkPinned(
   return { ok: problems.length === 0, problems };
 }
 
-/** Human-readable refusal for a failed `checkPinned` (shared by the CLI + the
- * build-time guard). `problems` is checkPinned().problems; `expectRef` is echoed
- * into the off-ref explanation when set. */
+/**
+ * `--verify-fresh` (opt-in, NETWORK): the one thing `checkPinned` deliberately cannot tell you —
+ * whether a pinned stamp is still current. `checkPinned` only proves the stamp is pinned to SOME
+ * ref (and, with `expectRef`, that it matches a caller-supplied value); it never talks to Gitea,
+ * so a stamp pinned to a MOVABLE ref (a branch name, or an unpinned default-branch materialize)
+ * can silently drift arbitrarily far behind that ref's current tip and keep passing forever.
+ *
+ * A stamp pinned to an exact commit SHA is excluded on purpose: that's a deliberate promotion to
+ * an immutable commit, frozen by design, and is never "stale" — re-promoting to a newer commit is
+ * a separate, explicit act (a fresh `--ref <sha>` materialize), not something this check should
+ * flag as a problem.
+ *
+ * For each in-scope tenant with a stamp, resolves the stamped ref's CURRENT tip via
+ * `git ls-remote` (no clone) and compares it to the stamped sha. Requires read access to Gitea —
+ * same TENANT_GIT_USER/TENANT_GIT_TOKEN as materializeTenant. Tenants that already fail
+ * `checkPinned` (absent/missing/unpinned-without-allowUnpinned/off-ref) are left to those
+ * existing reasons and skipped here to avoid double-reporting the same tenant.
+ *
+ * Returns { ok, problems: [{ tenant, reason }] } where reason ∈ "unreachable" | "stale":
+ *   unreachable   the live tip could not be resolved (network/auth failure, deleted ref, etc.) —
+ *                 never treated as fresh; an unreachable Gitea must not silently pass this gate.
+ *   stale         the stamped sha no longer matches the ref's live tip.
+ *
+ * @param {string} [root]
+ * @param {object} [opts]
+ * @param {string} [opts.gitBase]
+ * @param {string} [opts.user]
+ * @param {string} [opts.token]
+ * @param {string[]|null} [opts.onlyTenants]
+ */
+export function checkFresh(
+  root = repoRoot,
+  {
+    gitBase = DEFAULT_GIT_BASE,
+    user = process.env.TENANT_GIT_USER,
+    token = process.env.TENANT_GIT_TOKEN,
+    onlyTenants = null,
+  } = {},
+) {
+  const manifest = loadManifest(root);
+  const problems = [];
+  const scope = onlyTenants ? new Set(onlyTenants) : null;
+  for (const tenant of Object.keys(manifest.tenants)) {
+    if (scope && !scope.has(tenant)) continue;
+    const stampPath = join(root, "tenants", tenant, ".materialized.json");
+    if (!existsSync(stampPath)) continue; // checkPinned already reports absent/missing
+    let stamp;
+    try {
+      stamp = JSON.parse(readFileSync(stampPath, "utf8"));
+    } catch {
+      continue; // checkPinned already reports this as "missing"
+    }
+    const sha = typeof stamp.sha === "string" ? stamp.sha : "";
+    const rawRef = typeof stamp.ref === "string" ? stamp.ref : "";
+    if (!sha || !FULL_SHA_RE.test(sha)) continue; // no usable sha to compare — leave to checkPinned
+    if (FULL_SHA_RE.test(rawRef)) continue; // pinned to an exact commit — frozen by design
+    const movableRef = rawRef === "" || rawRef === "(default branch)" ? "HEAD" : rawRef;
+    const repo = manifest.tenants[tenant]?.repo ?? tenant;
+    const cloneUrl = buildCloneUrl({ base: gitBase, repo, user, token });
+    let liveSha = "";
+    try {
+      const out = execFileSync("git", ["ls-remote", cloneUrl, movableRef], {
+        stdio: ["ignore", "pipe", "pipe"],
+      }).toString();
+      liveSha = (out.split(/\s+/)[0] || "").trim();
+    } catch {
+      problems.push({ tenant, reason: "unreachable" });
+      continue;
+    }
+    if (!FULL_SHA_RE.test(liveSha)) {
+      problems.push({ tenant, reason: "unreachable" });
+      continue;
+    }
+    if (liveSha !== sha) problems.push({ tenant, reason: "stale" });
+  }
+  return { ok: problems.length === 0, problems };
+}
+
+/** Human-readable refusal for a failed `checkPinned` (+ optional `checkFresh`) run (shared by
+ * the CLI + the build-time guard). `problems` is checkPinned().problems, optionally concatenated
+ * with checkFresh().problems; `expectRef` is echoed into the off-ref explanation when set. */
 export function describePinnedProblems(problems, /** @type {string|null} */ expectRef = null) {
   const how = {
     absent: "not materialized (no tenant content on disk at all)",
@@ -390,6 +475,8 @@ export function describePinnedProblems(problems, /** @type {string|null} */ expe
     unpinned:
       "materialized from the tenant repo's DEFAULT branch (no pinned ref) — may be stale",
     "off-ref": `materialized at a different ref than expected (${expectRef})`,
+    stale: "pinned ref's live Gitea tip has moved past the materialized sha — re-materialize",
+    unreachable: "could not resolve the tenant repo's live tip (network/auth failure)",
   };
   return (
     "REFUSING: tenant content is not materialized from Gitea at a pinned ref.\n" +
@@ -438,6 +525,7 @@ function parseArgs(argv) {
     checkPinned: false,
     expectRef: null,
     allowUnpinned: false,
+    verifyFresh: false,
     help: false,
   };
   for (let i = 0; i < argv.length; i++) {
@@ -449,11 +537,15 @@ function parseArgs(argv) {
     else if (t === "--check-pinned") a.checkPinned = true;
     else if (t === "--expect-ref") a.expectRef = argv[++i];
     else if (t === "--allow-unpinned") a.allowUnpinned = true;
+    else if (t === "--verify-fresh") a.verifyFresh = true;
     else if (t === "--help" || t === "-h") a.help = true;
     else if (!t.startsWith("--") && !a.tenant) a.tenant = t;
     else throw new Error(`unknown argument: ${t}`);
   }
   if (a.remote && a.all) throw new Error("--remote targets ONE tenant; not valid with --all");
+  if (a.verifyFresh && !a.checkPinned) {
+    throw new Error("--verify-fresh is only valid with --check-pinned");
+  }
   return a;
 }
 
@@ -463,6 +555,8 @@ const USAGE = `materialize-tenant-content — populate tenants/<id>/ from its Gi
   node scripts/tenant/materialize-tenant-content.mjs --all
   node scripts/tenant/materialize-tenant-content.mjs --check
   node scripts/tenant/materialize-tenant-content.mjs --check-pinned [--expect-ref <sha>] [--allow-unpinned]
+  node scripts/tenant/materialize-tenant-content.mjs --check-pinned --verify-fresh
+      # opt-in NETWORK addition: refuse if a movable-ref stamp's sha is behind Gitea's live tip
 
   env: TENANT_GIT_BASE (default ${DEFAULT_GIT_BASE}), TENANT_GIT_USER, TENANT_GIT_TOKEN`;
 
@@ -486,15 +580,21 @@ function main() {
     return;
   }
   if (args.checkPinned) {
-    const { ok, problems } = checkPinned(repoRoot, {
+    const { problems } = checkPinned(repoRoot, {
       expectRef: args.expectRef,
       allowUnpinned: args.allowUnpinned,
     });
-    if (!ok) {
-      console.error(describePinnedProblems(problems, args.expectRef));
+    const freshProblems = args.verifyFresh ? checkFresh(repoRoot, { gitBase }).problems : [];
+    const allProblems = [...problems, ...freshProblems];
+    if (allProblems.length > 0) {
+      console.error(describePinnedProblems(allProblems, args.expectRef));
       process.exit(1);
     }
-    console.log("All Gitea-classified tenants materialized from Gitea at a pinned ref.");
+    console.log(
+      args.verifyFresh
+        ? "All Gitea-classified tenants materialized from Gitea at a pinned ref, verified fresh against the live tip."
+        : "All Gitea-classified tenants materialized from Gitea at a pinned ref.",
+    );
     return;
   }
   const manifest = loadManifest();

package/apps/storefront/.astro/content.d.ts

@@ -1,159 +0,0 @@
-declare module 'astro:content' {
-	export interface RenderResult {
-		Content: import('astro/runtime/server/index.js').AstroComponentFactory;
-		headings: import('astro').MarkdownHeading[];
-		remarkPluginFrontmatter: Record<string, any>;
-	}
-	interface Render {
-		'.md': Promise<RenderResult>;
-	}
-
-	export interface RenderedContent {
-		html: string;
-		metadata?: {
-			imagePaths: Array<string>;
-			[key: string]: unknown;
-		};
-	}
-
-	type Flatten<T> = T extends { [K: string]: infer U } ? U : never;
-
-	export type CollectionKey = keyof DataEntryMap;
-	export type CollectionEntry<C extends CollectionKey> = Flatten<DataEntryMap[C]>;
-
-	type AllValuesOf<T> = T extends any ? T[keyof T] : never;
-
-	export type ReferenceDataEntry<
-		C extends CollectionKey,
-		E extends keyof DataEntryMap[C] = string,
-	> = {
-		collection: C;
-		id: E;
-	};
-
-	export type ReferenceLiveEntry<C extends keyof LiveContentConfig['collections']> = {
-		collection: C;
-		id: string;
-	};
-
-	export function getCollection<C extends keyof DataEntryMap, E extends CollectionEntry<C>>(
-		collection: C,
-		filter?: (entry: CollectionEntry<C>) => entry is E,
-	): Promise<E[]>;
-	export function getCollection<C extends keyof DataEntryMap>(
-		collection: C,
-		filter?: (entry: CollectionEntry<C>) => unknown,
-	): Promise<CollectionEntry<C>[]>;
-
-	export function getLiveCollection<C extends keyof LiveContentConfig['collections']>(
-		collection: C,
-		filter?: LiveLoaderCollectionFilterType<C>,
-	): Promise<
-		import('astro').LiveDataCollectionResult<LiveLoaderDataType<C>, LiveLoaderErrorType<C>>
-	>;
-
-	export function getEntry<
-		C extends keyof DataEntryMap,
-		E extends keyof DataEntryMap[C] | (string & {}),
-	>(
-		entry: ReferenceDataEntry<C, E>,
-	): E extends keyof DataEntryMap[C]
-		? Promise<DataEntryMap[C][E]>
-		: Promise<CollectionEntry<C> | undefined>;
-	export function getEntry<
-		C extends keyof DataEntryMap,
-		E extends keyof DataEntryMap[C] | (string & {}),
-	>(
-		collection: C,
-		id: E,
-	): E extends keyof DataEntryMap[C]
-		? string extends keyof DataEntryMap[C]
-			? Promise<DataEntryMap[C][E]> | undefined
-			: Promise<DataEntryMap[C][E]>
-		: Promise<CollectionEntry<C> | undefined>;
-	export function getLiveEntry<C extends keyof LiveContentConfig['collections']>(
-		collection: C,
-		filter: string | LiveLoaderEntryFilterType<C>,
-	): Promise<import('astro').LiveDataEntryResult<LiveLoaderDataType<C>, LiveLoaderErrorType<C>>>;
-
-	/** Resolve an array of entry references from the same collection */
-	export function getEntries<C extends keyof DataEntryMap>(
-		entries: ReferenceDataEntry<C, keyof DataEntryMap[C]>[],
-	): Promise<CollectionEntry<C>[]>;
-
-	export function render<C extends keyof DataEntryMap>(
-		entry: DataEntryMap[C][string],
-	): Promise<RenderResult>;
-
-	export function render<C extends keyof LiveContentConfig['collections']>(
-		entry: import('astro').LiveDataEntry<LiveLoaderDataType<C>>,
-	): Promise<RenderResult>;
-
-	export function reference<
-		C extends
-			| keyof DataEntryMap
-			// Allow generic `string` to avoid excessive type errors in the config
-			// if `dev` is not running to update as you edit.
-			// Invalid collection names will be caught at build time.
-			| (string & {}),
-	>(
-		collection: C,
-	): import('astro/zod').ZodPipe<
-		import('astro/zod').ZodString,
-		import('astro/zod').ZodTransform<
-			C extends keyof DataEntryMap
-				? {
-						collection: C;
-						id: string;
-					}
-				: never,
-			string
-		>
-	>;
-
-	type ReturnTypeOrOriginal<T> = T extends (...args: any[]) => infer R ? R : T;
-	type InferEntrySchema<C extends keyof DataEntryMap> = import('astro/zod').infer<
-		ReturnTypeOrOriginal<Required<ContentConfig['collections'][C]>['schema']>
-	>;
-	type ExtractLoaderConfig<T> = T extends { loader: infer L } ? L : never;
-	type InferLoaderSchema<
-		C extends keyof DataEntryMap,
-		L = ExtractLoaderConfig<ContentConfig['collections'][C]>,
-	> = L extends { schema: import('astro/zod').ZodSchema }
-		? import('astro/zod').infer<L['schema']>
-		: any;
-
-	type DataEntryMap = {
-		
-	};
-
-	type ExtractLoaderTypes<T> = T extends import('astro/loaders').LiveLoader<
-		infer TData,
-		infer TEntryFilter,
-		infer TCollectionFilter,
-		infer TError
-	>
-		? { data: TData; entryFilter: TEntryFilter; collectionFilter: TCollectionFilter; error: TError }
-		: { data: never; entryFilter: never; collectionFilter: never; error: never };
-	type ExtractEntryFilterType<T> = ExtractLoaderTypes<T>['entryFilter'];
-	type ExtractCollectionFilterType<T> = ExtractLoaderTypes<T>['collectionFilter'];
-	type ExtractErrorType<T> = ExtractLoaderTypes<T>['error'];
-	type ExtractDataType<T> = ExtractLoaderTypes<T>['data'];
-
-	type LiveLoaderDataType<C extends keyof LiveContentConfig['collections']> =
-		LiveContentConfig['collections'][C]['schema'] extends undefined
-			? ExtractDataType<LiveContentConfig['collections'][C]['loader']>
-			: import('astro/zod').infer<
-					Exclude<LiveContentConfig['collections'][C]['schema'], undefined>
-				>;
-	type LiveLoaderEntryFilterType<C extends keyof LiveContentConfig['collections']> =
-		ExtractEntryFilterType<LiveContentConfig['collections'][C]['loader']>;
-	type LiveLoaderCollectionFilterType<C extends keyof LiveContentConfig['collections']> =
-		ExtractCollectionFilterType<LiveContentConfig['collections'][C]['loader']>;
-	type LiveLoaderErrorType<C extends keyof LiveContentConfig['collections']> = ExtractErrorType<
-		LiveContentConfig['collections'][C]['loader']
-	>;
-
-	export type ContentConfig = never;
-	export type LiveContentConfig = never;
-}

package/apps/storefront/.astro/integrations/_astrojs_cloudflare/cloudflare.d.ts

@@ -1 +0,0 @@
-/// <reference types="@astrojs/cloudflare/types.d.ts" />

package/apps/storefront/.astro/types.d.ts

@@ -1,3 +0,0 @@
-/// <reference types="astro/client" />
-/// <reference path="integrations/_astrojs_cloudflare/cloudflare.d.ts" />
-/// <reference path="content.d.ts" />

package/apps/storefront/node_modules/.bin/acorn

@@ -1,43 +0,0 @@
-#!/bin/sh
-basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
-basedir_win="$basedir"
-exe=""
-msys=""
-
-case `uname -a` in
-  *CYGWIN*|*MINGW*|*MSYS*)
-    if command -v cygpath > /dev/null 2>&1; then
-      basedir_win=`cygpath -w "$basedir"`
-    fi
-    exe=".exe"
-    msys="true"
-  ;;
-  *WSL2*)
-    if command -v wslpath > /dev/null 2>&1; then
-      basedir_win="$(wslpath -w "$basedir" 2> /dev/null)"
-      if [ $? -ne 0 ] || [ -z "$basedir_win" ]; then
-        basedir_win="$basedir"
-      else
-        exe=".exe"
-      fi
-    fi
-  ;;
-esac
-
-if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/home/runner/work/storefront/storefront/storefront-runner-dist/node_modules/.pnpm/acorn@8.18.0/node_modules/acorn/node_modules:/home/runner/work/storefront/storefront/storefront-runner-dist/node_modules/.pnpm/acorn@8.18.0/node_modules:/home/runner/work/storefront/storefront/storefront-runner-dist/node_modules/.pnpm/node_modules"
-else
-  export NODE_PATH="/home/runner/work/storefront/storefront/storefront-runner-dist/node_modules/.pnpm/acorn@8.18.0/node_modules/acorn/node_modules:/home/runner/work/storefront/storefront/storefront-runner-dist/node_modules/.pnpm/acorn@8.18.0/node_modules:/home/runner/work/storefront/storefront/storefront-runner-dist/node_modules/.pnpm/node_modules:$NODE_PATH"
-fi
-if [ -n "$exe" ] && [ -x "$basedir/node.exe" ]; then
-  exec "$basedir/node.exe"  "$basedir_win/../../../../node_modules/.pnpm/acorn@8.18.0/node_modules/acorn/bin/acorn" "$@"
-elif [ -x "$basedir/node" ]; then
-  exec "$basedir/node"  "$basedir/../../../../node_modules/.pnpm/acorn@8.18.0/node_modules/acorn/bin/acorn" "$@"
-elif command -v node >/dev/null 2>&1; then
-  exec node  "$basedir/../../../../node_modules/.pnpm/acorn@8.18.0/node_modules/acorn/bin/acorn" "$@"
-elif [ -n "$exe" ] && command -v node.exe >/dev/null 2>&1; then
-  exec node.exe  "$basedir_win/../../../../node_modules/.pnpm/acorn@8.18.0/node_modules/acorn/bin/acorn" "$@"
-else
-  exec node  "$basedir/../../../../node_modules/.pnpm/acorn@8.18.0/node_modules/acorn/bin/acorn" "$@"
-fi
-# cmd-shim-target=/home/runner/work/storefront/storefront/storefront-runner-dist/node_modules/.pnpm/acorn@8.18.0/node_modules/acorn/bin/acorn

package/apps/storefront/node_modules/.bin/astro

@@ -1,43 +0,0 @@
-#!/bin/sh
-basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
-basedir_win="$basedir"
-exe=""
-msys=""
-
-case `uname -a` in
-  *CYGWIN*|*MINGW*|*MSYS*)
-    if command -v cygpath > /dev/null 2>&1; then
-      basedir_win=`cygpath -w "$basedir"`
-    fi
-    exe=".exe"
-    msys="true"
-  ;;
-  *WSL2*)
-    if command -v wslpath > /dev/null 2>&1; then
-      basedir_win="$(wslpath -w "$basedir" 2> /dev/null)"
-      if [ $? -ne 0 ] || [ -z "$basedir_win" ]; then
-        basedir_win="$basedir"
-      else
-        exe=".exe"
-      fi
-    fi
-  ;;
-esac
-
-if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/home/runner/work/storefront/storefront/storefront-runner-dist/node_modules/.pnpm/astro@7.2.10_@emnapi+core@1.11.1_@emnapi+runtime@1.11.3_@types+node@26.4.1_jiti@2.7.0_tsx@4.23.13_yaml@2.9.0/node_modules/astro/node_modules:/home/runner/work/storefront/storefront/storefront-runner-dist/node_modules/.pnpm/astro@7.2.10_@emnapi+core@1.11.1_@emnapi+runtime@1.11.3_@types+node@26.4.1_jiti@2.7.0_tsx@4.23.13_yaml@2.9.0/node_modules:/home/runner/work/storefront/storefront/storefront-runner-dist/node_modules/.pnpm/node_modules"
-else
-  export NODE_PATH="/home/runner/work/storefront/storefront/storefront-runner-dist/node_modules/.pnpm/astro@7.2.10_@emnapi+core@1.11.1_@emnapi+runtime@1.11.3_@types+node@26.4.1_jiti@2.7.0_tsx@4.23.13_yaml@2.9.0/node_modules/astro/node_modules:/home/runner/work/storefront/storefront/storefront-runner-dist/node_modules/.pnpm/astro@7.2.10_@emnapi+core@1.11.1_@emnapi+runtime@1.11.3_@types+node@26.4.1_jiti@2.7.0_tsx@4.23.13_yaml@2.9.0/node_modules:/home/runner/work/storefront/storefront/storefront-runner-dist/node_modules/.pnpm/node_modules:$NODE_PATH"
-fi
-if [ -n "$exe" ] && [ -x "$basedir/node.exe" ]; then
-  exec "$basedir/node.exe"  "$basedir_win/../astro/bin/astro.mjs" "$@"
-elif [ -x "$basedir/node" ]; then
-  exec "$basedir/node"  "$basedir/../astro/bin/astro.mjs" "$@"
-elif command -v node >/dev/null 2>&1; then
-  exec node  "$basedir/../astro/bin/astro.mjs" "$@"
-elif [ -n "$exe" ] && command -v node.exe >/dev/null 2>&1; then
-  exec node.exe  "$basedir_win/../astro/bin/astro.mjs" "$@"
-else
-  exec node  "$basedir/../astro/bin/astro.mjs" "$@"
-fi
-# cmd-shim-target=/home/runner/work/storefront/storefront/storefront-runner-dist/apps/storefront/node_modules/astro/bin/astro.mjs