@tokenoftrust/storefront-runner 2.5.6 → 3.0.1

package/packages/public-runtime/src/capabilities.ts

@@ -23,6 +23,7 @@
  * ArtifactPath)` overrides the build-time `TenantConfig.capabilities` default.
  */
 import type { TenantConfig } from "./tenant.js";
+import { resolveObligationIds } from "./compliance-obligations.js";
 
 export interface CapabilityState {
   enabled: boolean;
@@ -70,24 +71,26 @@ export function capabilitiesArtifactPath(tenantId: string): string {
 /**
  * Resolve the non-negotiable compliance floor for a tenant. This is intentionally
  * narrower than feature defaults: it says only what MUST remain on for the site
- * to be publishable.
+ * to be publishable. Each capability is required exactly when the obligation
+ * registry (`resolveObligationIds`) applies the duty it serves.
  */
 export function resolveComplianceObligations(
   tenant: Pick<TenantConfig, "compliance" | "siteType">,
 ): CapabilityObligations {
+  const owed = new Set(resolveObligationIds(tenant));
   return {
     cartCheckout: { required: false },
-    ageVerification: tenant.compliance?.minAge
+    ageVerification: owed.has("age_gate")
       ? {
           required: true,
-          reason: `Tenant requires age/identity verification for ${tenant.compliance.minAge}+ access.`,
+          reason: `Tenant requires age/identity verification for ${tenant.compliance?.minAge}+ access.`,
         }
       : { required: false },
-    exciseTax: tenant.compliance?.nicotineWarning
+    exciseTax: owed.has("excise")
       ? {
           required: true,
           reason:
-            "Tenant sells nicotine/vape products and must keep excise-tax collection enabled at checkout.",
+            "Tenant sells excise-taxed products (`compliance.nicotineWarning` or `compliance.exciseTax`) and must keep excise-tax collection enabled at checkout.",
         }
       : { required: false },
   };
@@ -130,18 +133,18 @@ export function resolveCapabilities(
   override?: Partial<CapabilityConfig> | null,
 ): CapabilityConfig {
   const c = tenant.capabilities;
+  const owed = new Set(resolveObligationIds(tenant));
   const base: CapabilityConfig = {
     // Commerce tenants get a cart by default; marketing tenants don't.
     cartCheckout: {
       enabled: c?.cartCheckout?.enabled ?? tenant.siteType !== "marketing",
     },
-    // Regulated tenants (an age minimum) verify by default.
+    // A tenant that owes a duty has the capability serving it on by default.
     ageVerification: {
-      enabled: c?.ageVerification?.enabled ?? !!tenant.compliance?.minAge,
+      enabled: c?.ageVerification?.enabled ?? owed.has("age_gate"),
     },
-    // Nicotine/vape tenants collect excise by default.
     exciseTax: {
-      enabled: c?.exciseTax?.enabled ?? !!tenant.compliance?.nicotineWarning,
+      enabled: c?.exciseTax?.enabled ?? owed.has("excise"),
     },
   };
   const requested = override