@tokenoftrust/storefront-runner 3.12.1 → 3.12.2

package/apps/storefront/src/config/tenants.ts

@@ -41,10 +41,12 @@ export const HOME_TENANT: TenantConfig = {
   siteType: "marketing",
 };
 
-// Generic SAMPLE tenant — a placeholder regulated store used to demonstrate the
-// compliance affordance (age-gate + nicotine warning) WITHOUT any real merchant.
-// Routed at /sample-store.example/. Content comes from the developer's grafted
-// checkout (tenants/sample-store.example/); with none present it degrades to the
+// Generic SAMPLE tenant — the public fallback renderer's regulated store.
+// Its page bands come from the same complianceSections() gates as a primary
+// vape-nicotine-us tenant (nicotine warning, shipping restriction, age gate,
+// excise disclosure). No real merchant. Routed at /sample-store.example/.
+// Content comes from the developer's grafted checkout
+// (tenants/sample-store.example/); with none present it degrades to the
 // default scope, and the compliance overlay still renders from this config.
 export const SAMPLE_TENANT: TenantConfig = {
   tenant_id: "sample-store.example",
@@ -62,14 +64,22 @@ export const SAMPLE_TENANT: TenantConfig = {
     repo: "sample-store.example",
     defaultBranch: "main",
   })],
-  // Regulated-store demo: shows the 21+/PACT compliance gate is CONFIG-driven.
+  // Same section inputs as a primary vape-nicotine-us commerce tenant.
+  // pactAct stays unset: the primary page does not emit that band unless the
+  // flag is set. ruleProfile selects the checkout ruleset only.
   compliance: {
+    ruleProfile: "vape-nicotine-us",
     minAge: 21,
     nicotineWarning: true,
     shippingRestriction:
       "Adult signature (21+) required on delivery. Some destinations are restricted — verified at checkout.",
   },
-  siteType: "marketing",
+  capabilities: {
+    cartCheckout: { enabled: true },
+    ageVerification: { enabled: true },
+    exciseTax: { enabled: true },
+  },
+  siteType: "commerce",
 };
 
 const REGISTRY: TenantConfig[] = [HOME_TENANT, SAMPLE_TENANT];

package/apps/storefront/src/layouts/Layout.astro

@@ -20,6 +20,7 @@ import PactActNotice from "@/components/compliance/storefront/compliance/PactAct
 import ShippingRestrictionNotice from "@/components/compliance/storefront/compliance/ShippingRestrictionNotice.astro";
 import ExciseTaxNotice from "@/components/compliance/storefront/compliance/ExciseTaxNotice.astro";
 import { EXCISE_TAX_DISCLOSURE_TEXT } from "@/lib/compliance/rawComplianceNotices";
+import { complianceSections } from "@/lib/compliance/complianceSections";
 import IsolatedAgeGate from "@/components/compliance/storefront/islands/IsolatedAgeGate.tsx";
 import AuthBadge from "@/components/access/storefront/auth/AuthBadge.astro";
 import { referenceTheme } from "@/themes/reference";
@@ -215,6 +216,12 @@ if (chromeHtml && chromeHtml.includes(CHROME_BODY_MARKER)) {
 }
 
 const compliance = tenant.compliance;
+const sections = complianceSections({
+  compliance,
+  ageVerificationEnabled: capabilities.ageVerification.enabled,
+  exciseTaxEnabled: capabilities.exciseTax.enabled,
+  catalog: features.catalog,
+});
 const cartHref = managedCartHref(Astro.locals.commerce);
 
 // Site-chrome data resolution (chrome/* is the canonical, prop-driven
@@ -368,7 +375,7 @@ const footerWidgets = await renderWidgetSlot(
 
     <AuthBadge />
 
-    {compliance?.nicotineWarning && <NicotineWarning variant="bar" declaration={compliance.nicotineWarning} />}
+    {sections.includes("nicotine-warning") && compliance?.nicotineWarning && <NicotineWarning variant="bar" declaration={compliance.nicotineWarning} />}
 
     {sharedChrome ? (
       <Fragment set:html={sharedChrome.header} />
@@ -406,8 +413,12 @@ const footerWidgets = await renderWidgetSlot(
       <slot />
     </main>
 
-    <PactActNotice enabled={compliance?.pactAct} minAge={compliance?.minAge} variant="footer" />
-    <ShippingRestrictionNotice text={compliance?.shippingRestriction} />
+    {sections.includes("pact-act") && (
+      <PactActNotice enabled={compliance?.pactAct} minAge={compliance?.minAge} variant="footer" />
+    )}
+    {sections.includes("shipping-restriction") && (
+      <ShippingRestrictionNotice text={compliance?.shippingRestriction} />
+    )}
 
     {sharedChrome ? (
       <>
@@ -460,7 +471,7 @@ const footerWidgets = await renderWidgetSlot(
       </div>
     ))}
 
-    {capabilities.ageVerification.enabled && compliance?.minAge && (
+    {sections.includes("age-gate") && capabilities.ageVerification.enabled && compliance?.minAge && (
       <IsolatedAgeGate
         client:only="preact"
         minAge={compliance.minAge}
@@ -477,7 +488,7 @@ const footerWidgets = await renderWidgetSlot(
     {/* Excise tax (Track B) — when enabled for this environment, the excise line
         is calculated + added inside the managed cart. This is the storefront's
         honest shopper-facing signal of it. */}
-    {capabilities.exciseTax.enabled && features.catalog && (
+    {sections.includes("excise-tax") && capabilities.exciseTax.enabled && features.catalog && (
       <ExciseTaxNotice variant="footer" config={{ note: EXCISE_TAX_DISCLOSURE_TEXT }} />
     )}
 

package/apps/storefront/src/lib/compliance/complianceSections.ts

@@ -0,0 +1,113 @@
+/**
+ * The page compliance bands, in document order.
+ *
+ * Layout.astro (primary) and the public fallback renderer (the sanitized
+ * sample tenant in the published runner) both decide which bands to emit from
+ * this list. `ruleProfile` selects the checkout ruleset; it does not add a
+ * band. A vape-nicotine-us store shows pact-act only when `compliance.pactAct`
+ * is set, the same gate the primary tenants use today.
+ */
+import {
+  resolveCapabilities,
+  resolveTenantFeatures,
+  type ComplianceConfig,
+  type TenantConfig,
+} from "@tot/public-runtime";
+import {
+  exciseTaxNoticeHtml,
+  nicotineWarningBarHtml,
+  pactActNoticeHtml,
+  shippingRestrictionNoticeHtml,
+  type RawComplianceChromeInput,
+} from "./rawComplianceNotices";
+
+export const COMPLIANCE_SECTION_IDS = [
+  "nicotine-warning",
+  "pact-act",
+  "shipping-restriction",
+  "age-gate",
+  "excise-tax",
+] as const;
+
+export type ComplianceSectionId = (typeof COMPLIANCE_SECTION_IDS)[number];
+
+export interface ComplianceSectionInput {
+  compliance?: ComplianceConfig | null;
+  ageVerificationEnabled: boolean;
+  exciseTaxEnabled: boolean;
+  catalog: boolean;
+}
+
+/** Bands Layout.astro mounts, under the same conditions, in document order. */
+export function complianceSections(input: ComplianceSectionInput): ComplianceSectionId[] {
+  const compliance = input.compliance;
+  const sections: ComplianceSectionId[] = [];
+  if (compliance?.nicotineWarning) sections.push("nicotine-warning");
+  if (compliance?.pactAct) sections.push("pact-act");
+  if (compliance?.shippingRestriction) sections.push("shipping-restriction");
+  if (input.ageVerificationEnabled && compliance?.minAge) sections.push("age-gate");
+  if (input.exciseTaxEnabled && input.catalog) sections.push("excise-tax");
+  return sections;
+}
+
+/**
+ * A primary vape-nicotine-us tenant as the registry declares one: the profile,
+ * 21+, the nicotine warning, a shipping line, commerce (catalog on), and the
+ * three capabilities. `pactAct` stays unset, so the list has no pact-act band.
+ */
+export const VAPE_NICOTINE_US_PRIMARY: ComplianceSectionInput = {
+  compliance: {
+    ruleProfile: "vape-nicotine-us",
+    minAge: 21,
+    nicotineWarning: true,
+    shippingRestriction:
+      "Adult signature (21+) required on delivery. Some destinations are restricted — verified at checkout.",
+  },
+  ageVerificationEnabled: true,
+  exciseTaxEnabled: true,
+  catalog: true,
+};
+
+export function vapeNicotineUsSections(): ComplianceSectionId[] {
+  return complianceSections(VAPE_NICOTINE_US_PRIMARY);
+}
+
+/** Raw-HTML injection for the bands in `sections`. Age-gate is not injectable. */
+export function rawComplianceChrome(
+  sections: readonly ComplianceSectionId[],
+  notices: RawComplianceChromeInput,
+): { top: string; bottom: string } {
+  const on = (id: ComplianceSectionId) => sections.includes(id);
+  const top = on("nicotine-warning") && notices.nicotineWarning
+    ? nicotineWarningBarHtml(notices.nicotineWarning)
+    : "";
+  let bottom = "";
+  if (on("pact-act") && notices.pactAct) bottom += pactActNoticeHtml(notices.minAge);
+  if (on("shipping-restriction")) bottom += shippingRestrictionNoticeHtml(notices.shippingRestriction);
+  if (on("excise-tax") && notices.exciseTaxEnabled) bottom += exciseTaxNoticeHtml();
+  return { top, bottom };
+}
+
+/** The same bands Layout would mount for this tenant, as raw-HTML chrome. */
+export function complianceChromeForTenant(
+  tenant: Pick<TenantConfig, "compliance" | "siteType" | "capabilities" | "features">,
+): { top: string; bottom: string } {
+  const capabilities = resolveCapabilities(tenant);
+  const features = resolveTenantFeatures(tenant);
+  const notices: RawComplianceChromeInput = {
+    nicotineWarning: tenant.compliance?.nicotineWarning,
+    pactAct: !!tenant.compliance?.pactAct,
+    minAge: tenant.compliance?.minAge,
+    shippingRestriction: tenant.compliance?.shippingRestriction,
+    exciseTaxEnabled: capabilities.exciseTax.enabled && features.catalog,
+  };
+  return rawComplianceChrome(
+    complianceSections({
+      compliance: tenant.compliance,
+      ageVerificationEnabled: capabilities.ageVerification.enabled,
+      exciseTaxEnabled: capabilities.exciseTax.enabled,
+      catalog: features.catalog,
+    }),
+    notices,
+  );
+}

package/apps/storefront/src/pages/[...slug].astro

@@ -14,7 +14,7 @@ import { breadcrumbLd } from "@/lib/content/shared/jsonld";
 import { truncate } from "@/lib/content/shared/format";
 import { faqFromHtml, faqFromSections } from "@/lib/content/seo/faqItems";
 import { rawHtmlPolicy, rawHtmlResponse, rawPageCanonicalUrl } from "@/lib/content/shared/rawMarketingHtml";
-import { renderRawComplianceTop, renderRawComplianceBottom } from "@/lib/compliance/rawComplianceNotices";
+import { complianceSections, rawComplianceChrome } from "@/lib/compliance/complianceSections";
 import { styleGuideAliasRewrite } from "@/lib/content/shared/styleGuidePaths";
 import { getBlogSettings } from "@/lib/content/blog/provider.js";
 import { loadBlogPostViewV1, type BlogPostViewPropsV1 } from "@/lib/content/blog/postView.js";
@@ -85,6 +85,12 @@ if (!blogPostProps) {
       shippingRestriction: tenant.compliance?.shippingRestriction,
       exciseTaxEnabled: capabilities.exciseTax.enabled && features.catalog,
     };
+    const complianceChrome = rawComplianceChrome(complianceSections({
+      compliance: tenant.compliance,
+      ageVerificationEnabled: capabilities.ageVerification.enabled,
+      exciseTaxEnabled: capabilities.exciseTax.enabled,
+      catalog: features.catalog,
+    }), notices);
     return rawHtmlResponse(rawHtml, {
       nonce: Astro.locals.cspNonce,
       basePath,
@@ -93,8 +99,8 @@ if (!blogPostProps) {
       plan: Astro.locals.integrationPlan,
       consentSnapshot: Astro.locals.consentSnapshot,
       canonicalUrl: rawPageCanonicalUrl(canonicalBase, slug),
-      complianceTop: rawPolicy.regulated ? renderRawComplianceTop(notices) : undefined,
-      complianceBottom: rawPolicy.regulated ? renderRawComplianceBottom(notices) : undefined,
+      complianceTop: complianceChrome.top || undefined,
+      complianceBottom: complianceChrome.bottom || undefined,
     });
   }
 

package/apps/storefront/src/pages/index.astro

@@ -20,7 +20,7 @@ import MarketingBlocks from "@/components/content/storefront/marketing/Marketing
 import TierCards from "@/components/membership/storefront/membership/TierCards.astro";
 import { withBase } from "@/lib/publication/shared/basePath";
 import { rawHtmlPolicy, rawHtmlResponse } from "@/lib/content/shared/rawMarketingHtml";
-import { renderRawComplianceTop, renderRawComplianceBottom } from "@/lib/compliance/rawComplianceNotices";
+import { complianceSections, rawComplianceChrome } from "@/lib/compliance/complianceSections";
 import AppWidgetFrame from "@/components/integrations/storefront/apps/AppWidgetFrame.astro";
 import { getRegistryService } from "@/lib/integrations/apps/registryAccess.js";
 import { renderWidgetSlot } from "@/lib/integrations/apps/widgets/renderSlot.js";
@@ -73,6 +73,12 @@ if (rawHtml && rawPolicy.allowed) {
     shippingRestriction: tenant.compliance?.shippingRestriction,
     exciseTaxEnabled: capabilities.exciseTax.enabled && features.catalog,
   };
+  const complianceChrome = rawComplianceChrome(complianceSections({
+    compliance: tenant.compliance,
+    ageVerificationEnabled: capabilities.ageVerification.enabled,
+    exciseTaxEnabled: capabilities.exciseTax.enabled,
+    catalog: features.catalog,
+  }), notices);
   return rawHtmlResponse(rawHtml, {
     nonce: Astro.locals.cspNonce,
     basePath,
@@ -81,8 +87,8 @@ if (rawHtml && rawPolicy.allowed) {
     plan: Astro.locals.integrationPlan,
     consentSnapshot: Astro.locals.consentSnapshot,
     canonicalUrl: new URL("/", canonicalBase + "/").toString(),
-    complianceTop: rawPolicy.regulated ? renderRawComplianceTop(notices) : undefined,
-    complianceBottom: rawPolicy.regulated ? renderRawComplianceBottom(notices) : undefined,
+    complianceTop: complianceChrome.top || undefined,
+    complianceBottom: complianceChrome.bottom || undefined,
   });
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "3.12.1",
+  "version": "3.12.2",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",