@tokenoftrust/storefront-runner 2.2.15 → 2.2.17

package/apps/storefront/integrations/lifecycle-host-asset.mjs

@@ -21,7 +21,8 @@
  * passes — the client pass included — runs with `build.ssr === true`, so a Vite plugin
  * cannot tell them apart, while `config.build.client` says it outright.
  */
-import { mkdir, writeFile } from "node:fs/promises";
+import { createHash } from "node:crypto";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { createRequire } from "node:module";
 import { dirname } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -29,6 +30,7 @@ import {
   LIFECYCLE_HOST_ASSET_PATH,
   LIFECYCLE_HOST_COMPATIBILITY_ASSET_PATHS,
 } from "@tot/public-runtime/integration/lifecycle-host-asset";
+import { decideLifecycleHostLock, formatLifecycleHostLockReport } from "../../../scripts/lib/lifecycle-host-lock.mjs";
 
 const HOST_ASSET_PATHS = Object.freeze([
   ...LIFECYCLE_HOST_COMPATIBILITY_ASSET_PATHS,
@@ -42,6 +44,11 @@ const HOST_ENTRY = fileURLToPath(
   ),
 );
 
+const LOCK_URL = new URL(
+  "../../../packages/public-runtime/src/integration/lifecycle-host-asset.lock.json",
+  import.meta.url,
+);
+
 /**
  * Bundle the host to a single self-contained ES module.
  *
@@ -124,6 +131,30 @@ export function lifecycleHostAsset() {
         if (!clientDir) throw new Error("the lifecycle host has no resolved client output dir");
         const outputDir = clientDir;
         const code = await bundleLifecycleHost();
+        const hash = createHash("sha256").update(code, "utf8").digest("hex");
+
+        // Every HOST_ASSET_PATH is served under an `immutable, max-age=1yr` Cache-Control
+        // (scripts/publish/lib/s3-publish.mjs PLATFORM_ASSET_PREFIX) — once published, a
+        // path's bytes may never change, or visitors who already cached it are stuck on
+        // stale tracking/consent behavior for up to a year with nothing to notice it. This
+        // is the guard for that: refuse the build rather than silently rewrite a path that
+        // already shipped different bytes.
+        const lock = JSON.parse(await readFile(LOCK_URL, "utf8"));
+        const decision = decideLifecycleHostLock(
+          lock,
+          HOST_ASSET_PATHS.map((assetPath) => ({ assetPath, hash })),
+        );
+        if (!decision.ok) {
+          throw new Error(formatLifecycleHostLockReport(decision));
+        }
+        if (JSON.stringify(decision.nextLock) !== JSON.stringify(lock)) {
+          await writeFile(LOCK_URL, `${JSON.stringify(decision.nextLock, null, 2)}\n`, "utf8");
+          logger.warn(
+            "lifecycle host lock recorded a new path — commit " +
+              "packages/public-runtime/src/integration/lifecycle-host-asset.lock.json",
+          );
+        }
+
         await Promise.all(HOST_ASSET_PATHS.map(async (assetPath) => {
           const target = fileURLToPath(new URL(assetPath, outputDir));
           await mkdir(dirname(target), { recursive: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "2.2.15",
+  "version": "2.2.17",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",

package/packages/public-runtime/src/integration/lifecycle-host-asset.lock.json

@@ -0,0 +1,4 @@
+{
+  "platform/lifecycle/v2/boot.mjs": "ed2c69b80fb2e1472d0b19631efec5ccb26a395a5f4820a54f55435deca6eb46",
+  "platform/lifecycle/v3/boot.mjs": "ed2c69b80fb2e1472d0b19631efec5ccb26a395a5f4820a54f55435deca6eb46"
+}