@tokenoftrust/storefront-runner 2.4.36 → 2.4.38

package/apps/storefront/src/components/islands/CheckoutComplianceGate.tsx

@@ -375,17 +375,20 @@ export default function CheckoutComplianceGate({ preflightUrl, minAge }: Props)
 
   return (
     <div
-      class="fixed inset-0 z-[110] grid place-items-center bg-[color-mix(in_srgb,var(--color-text)_75%,transparent)] p-5 backdrop-blur-sm"
+      class="fixed inset-0 z-[110] bg-[color-mix(in_srgb,var(--color-text)_75%,transparent)] backdrop-blur-sm"
       role="dialog"
       aria-modal="true"
       aria-labelledby="cgate-title"
       onClick={(e) => {
-        if (e.target === e.currentTarget) close();
+        if (e.target === e.currentTarget || (e.target as HTMLElement).hasAttribute("data-viewport-frame")) close();
       }}
     >
+      {/* The fixed box is the LAYOUT viewport, which content wider than a phone
+          stretches; place the dialog in a frame sized to what the visitor sees. */}
+      <div data-viewport-frame class="absolute left-0 top-0 flex h-[100svh] w-[100vw] overflow-y-auto p-5">
       <div
         ref={dialogRef}
-        class="w-[min(32rem,100%)] rounded-[var(--radius-lg)] bg-[var(--color-surface)] p-7 text-left shadow-[var(--shadow-lg)]"
+        class="m-auto w-[min(32rem,100%)] rounded-[var(--radius-lg)] bg-[var(--color-surface)] p-7 text-left shadow-[var(--shadow-lg)]"
       >
         <p class="eyebrow eyebrow--tick mb-3 w-fit">Compliance check</p>
         <h2 id="cgate-title" class="display-sm">
@@ -606,6 +609,7 @@ export default function CheckoutComplianceGate({ preflightUrl, minAge }: Props)
           </button>
         </div>
       </div>
+      </div>
     </div>
   );
 }

package/apps/storefront/src/components/islands/IsolatedAgeGate.tsx

@@ -118,6 +118,7 @@ export function isolateAgeGateBackground(host: HTMLElement): BackgroundIsolation
 }
 
 const HOST_MARKER = "data-tot-compliance";
+const HOST_MOVES_PER_TASK = 20;
 let mountedHost: HTMLElement | null = null;
 const HOST_STYLE_FLOOR = {
   all: "initial",
@@ -221,6 +222,25 @@ export function mountIsolatedAgeGate({ minAge, brand, tenantId, presentation }:
   // writes exactly what this observer watches, so it runs disconnected: a repair
   // that is not perfectly idempotent can never re-trigger itself and spin the
   // main thread in an unbounded microtask loop.
+  //
+  // Another script that also keeps itself last in <body> would answer every move
+  // with one of its own, and two observers can ping-pong forever without either
+  // re-triggering itself. Moves are budgeted per task; past the budget the repair
+  // yields to the event loop and resumes on the next task.
+  let active = true;
+  let moves = 0;
+  let resumeScheduled = false;
+  const spendMove = () => {
+    if (!resumeScheduled) {
+      resumeScheduled = true;
+      setTimeout(() => {
+        resumeScheduled = false;
+        moves = 0;
+        if (active) ensure();
+      }, 0);
+    }
+    return ++moves <= HOST_MOVES_PER_TASK;
+  };
   const observeHost = () => {
     observer.observe(document.body, { childList: true });
     observer.observe(host, {
@@ -231,7 +251,7 @@ export function mountIsolatedAgeGate({ minAge, brand, tenantId, presentation }:
   const ensure = () => {
     observer.disconnect();
     try {
-      if (!host.isConnected || document.body.lastElementChild !== host) {
+      if ((!host.isConnected || document.body.lastElementChild !== host) && spendMove()) {
         // Moving the host blurs whatever the gate had focused; give it back so a
         // keyboard visitor is never stranded by a script appending to <body>.
         const focused = shadow.activeElement as HTMLElement | null;
@@ -249,6 +269,7 @@ export function mountIsolatedAgeGate({ minAge, brand, tenantId, presentation }:
   observeHost();
 
   return () => {
+    active = false;
     observer.disconnect();
     stylesheetObserver.disconnect();
     backgroundIsolation?.release();

package/apps/storefront/src/components/islands/MobileNav.tsx

@@ -167,7 +167,9 @@ export default function MobileNav({ nav, announcement, currentPath }: Props) {
 
       {open && (
         <div
-          class="fixed inset-0 z-50"
+          // Sized to what the visitor sees, not `inset-0`: on a phone the fixed box is the
+          // layout viewport, which wide page content stretches past the screen's edge.
+          class="fixed left-0 top-0 z-50 h-[100dvh] w-[100vw]"
           // eslint-disable-next-line jsx-a11y/no-noninteractive-element-interactions
           onKeyDown={onKeyDown}
         >

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "2.4.36",
+  "version": "2.4.38",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",

package/packages/public-runtime/src/activity/catalog.ts

@@ -150,7 +150,7 @@ export const ACTION_CATALOG = {
   },
   "preview.build.completed": {
     actors: ["system"], source: "server", sinks: LIFECYCLE,
-    argsAllow: ["changeId", "result"], renderedAllow: [],
+    argsAllow: ["changeId", "result", "prNumber", "headSource", "forgeOpenVerified", "terminalSource"], renderedAllow: [],
     desc: "A preview build finished (result: ok|failed).",
   },
   "preview.override": {
@@ -176,7 +176,7 @@ export const ACTION_CATALOG = {
     // A reconcile reached a terminal state (reconciled|blocked|failed). Low
     // volume, high value → timelined for the ops UI.
     actors: ["system"], source: "server", sinks: LIFECYCLE,
-    argsAllow: ["changeId", "result", "evidenceStatus", "evidencePushError"], renderedAllow: [],
+    argsAllow: ["changeId", "result", "evidenceStatus", "evidencePushError", "prNumber", "forgeOpenVerified", "terminalSource"], renderedAllow: [],
     desc: "A candidate reconcile reached a terminal state.",
   },
   "candidate.closed": {
@@ -185,7 +185,7 @@ export const ACTION_CATALOG = {
     // unmerged), so the row leaves the operator's review queue. Low volume (one
     // per PR close), high value — the end-of-life marker for a candidate's timeline.
     actors: ["system"], source: "server", sinks: LIFECYCLE,
-    argsAllow: ["changeId", "merged", "result", "status"], renderedAllow: [],
+    argsAllow: ["changeId", "merged", "result", "status", "prNumber"], renderedAllow: [],
     desc: "A merged/closed PR webhook transitioned a candidate to a terminal state.",
   },
   "prebuild.dispatched": {