@tokenoftrust/storefront-runner 6.3.3 → 6.3.5

package/apps/storefront/src/components/catalog/storefront/islands/RecentlyViewed.tsx

@@ -1,14 +1,15 @@
 /**
  * Recently viewed (Shopify-style discovery rail). A small client island that
  * records the current product to localStorage on a PDP and renders the rest as
- * a quiet strip. No server round-trip — snapshots are self-contained, so it
- * works against fixtures or live ToT identically. Renders nothing until it has
- * something to show (no layout shift, no empty state noise).
+ * a quiet strip. History is namespaced by the trusted tenant prop. A missing
+ * tenant renders nothing and does not touch storage. Entries render only when
+ * the current tenant's catalog index lists their handle.
  */
 import { useEffect, useState } from "preact/hooks";
+import { loadCatalogIndex } from "@/lib/catalog/shared/catalogQueryView";
 import { formatPrice } from "@/lib/content/shared/format";
 import { placeholderDataUri, isUsableImageUrl } from "@/lib/content/shared/placeholder";
-import { withClientBase } from "@/lib/publication/shared/basePath";
+import { clientBasePath, withClientBase } from "@/lib/publication/shared/basePath";
 
 export interface RVItem {
   handle: string;
@@ -22,59 +23,75 @@ export interface RVItem {
 }
 
 interface Props {
+  /** Trusted renderer tenant. Missing context renders nothing and touches no storage. */
+  tenant?: string;
   /** When set (on a PDP), this product is recorded and excluded from the rail. */
   current?: RVItem;
   locale: string;
   title?: string;
   max?: number;
+  /** Style-guide samples. Rendered only when `tenant` is absent, and never stored. */
+  preview?: RVItem[];
 }
 
-const KEY = "tot:recently-viewed";
+const LEGACY_KEY = "tot:recently-viewed";
 const CAP = 12;
 
-function read(): RVItem[] {
+function tenantKey(tenant: string): string {
+  return `${LEGACY_KEY}:${tenant}`;
+}
+
+function isItem(value: unknown): value is RVItem {
+  if (!value || typeof value !== "object") return false;
+  const item = value as Partial<RVItem>;
+  return typeof item.handle === "string" && item.handle.length > 0
+    && typeof item.title === "string"
+    && typeof item.price === "number" && Number.isFinite(item.price)
+    && typeof item.currency === "string" && item.currency.length > 0
+    && (item.vendor === undefined || typeof item.vendor === "string")
+    && (item.img === undefined || typeof item.img === "string")
+    && (item.rehosted === undefined || typeof item.rehosted === "boolean")
+    && typeof item.seed === "string";
+}
+
+function readStored(tenant: string): RVItem[] {
   try {
-    const raw = localStorage.getItem(KEY);
+    const raw = localStorage.getItem(tenantKey(tenant));
     if (!raw) return [];
     const arr = JSON.parse(raw);
-    return Array.isArray(arr) ? (arr as RVItem[]) : [];
+    return Array.isArray(arr) ? arr.filter(isItem) : [];
   } catch (error) {
-    // Corrupt JSON or blocked storage is an empty rail. Any other failure is a bug.
     if (error instanceof SyntaxError) return [];
     if (typeof DOMException !== "undefined" && error instanceof DOMException) return [];
     throw error;
   }
 }
 
-export default function RecentlyViewed({
-  current,
-  locale,
-  title = "Recently viewed",
-  max = 5,
-}: Props) {
-  const [items, setItems] = useState<RVItem[]>([]);
-
-  useEffect(() => {
-    let list = read();
-    if (current) {
-      list = [current, ...list.filter((i) => i.handle !== current.handle)].slice(
-        0,
-        CAP,
-      );
-      try {
-        localStorage.setItem(KEY, JSON.stringify(list));
-      } catch {
-        /* storage full / disabled — degrade silently */
-      }
-    }
-    // Exclude the current product from what we *show*.
-    setItems(
-      list.filter((i) => i.handle !== current?.handle).slice(0, max),
-    );
-  }, [current?.handle]);
+function writeStored(tenant: string, list: RVItem[]): void {
+  try {
+    localStorage.setItem(tenantKey(tenant), JSON.stringify(list));
+  } catch {
+    /* storage full / disabled — degrade silently */
+  }
+}
 
-  if (items.length === 0) return null;
+function discardLegacy(): void {
+  try {
+    localStorage.removeItem(LEGACY_KEY);
+  } catch {
+    /* blocked storage — the legacy key is still never read */
+  }
+}
 
+function Rail({
+  items,
+  locale,
+  title,
+}: {
+  items: RVItem[];
+  locale: string;
+  title: string;
+}) {
   return (
     <section
       class="container-prose border-t border-[var(--color-border)] py-12"
@@ -123,3 +140,60 @@ export default function RecentlyViewed({
     </section>
   );
 }
+
+export default function RecentlyViewed({
+  tenant,
+  current,
+  locale,
+  title = "Recently viewed",
+  max = 5,
+  preview,
+}: Props) {
+  const scope = tenant && tenant.length > 0 ? tenant : "";
+  const [shown, setShown] = useState<{ tenant: string; items: RVItem[] } | null>(null);
+  const visible = shown && shown.tenant === scope ? shown.items : [];
+
+  useEffect(() => {
+    if (!scope) return;
+    let cancelled = false;
+    const list = current
+      ? [current, ...readStored(scope).filter((item) => item.handle !== current.handle)].slice(0, CAP)
+      : readStored(scope);
+    if (current) writeStored(scope, list);
+    discardLegacy();
+    const candidates = list.filter((item) => item.handle !== current?.handle);
+    loadCatalogIndex(clientBasePath()).then((index) => {
+      if (cancelled) return;
+      if (!Array.isArray(index?.products)) throw new Error("catalog index: products");
+      const handles = new Set(index.products.flatMap((product) =>
+        typeof product?.handle === "string" && product.handle ? [product.handle] : []));
+      setShown({
+        tenant: scope,
+        items: candidates.filter((item) => handles.has(item.handle)).slice(0, max),
+      });
+    }).catch(() => {
+      if (!cancelled) setShown({ tenant: scope, items: [] });
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [
+    scope,
+    max,
+    current?.handle,
+    current?.title,
+    current?.price,
+    current?.currency,
+    current?.vendor,
+    current?.img,
+    current?.rehosted,
+    current?.seed,
+  ]);
+
+  if (!scope) {
+    const samples = (preview ?? []).filter(isItem).slice(0, max);
+    return samples.length > 0 ? <Rail items={samples} locale={locale} title={title} /> : null;
+  }
+  if (visible.length === 0) return null;
+  return <Rail items={visible} locale={locale} title={title} />;
+}

package/apps/storefront/src/lib/catalog/shared/catalogQueryView.ts

@@ -43,18 +43,22 @@ export function searchFromIndex(index: CatalogIndex, q: string, limit = SEARCH_R
     .filter(Boolean);
 }
 
-let indexRequest: Promise<CatalogIndex> | null = null;
+const indexRequests = new Map<string, Promise<CatalogIndex>>();
 
-/** Fetch the tenant's catalog index once per page (`base` is the tenant's client base path). */
+/** Fetch the tenant's catalog index once per base path. A second tenant does not reuse the first. */
 export function loadCatalogIndex(base: string): Promise<CatalogIndex> {
-  indexRequest ??= fetch(`${base.replace(/\/+$/, "")}${CATALOG_INDEX_PATH}`, {
+  const key = base.replace(/\/+$/, "");
+  const cached = indexRequests.get(key);
+  if (cached) return cached;
+  const pending = fetch(`${key}${CATALOG_INDEX_PATH}`, {
     headers: { Accept: "application/json" },
   }).then((res) => {
     if (!res.ok) throw new Error(`catalog index: HTTP ${res.status}`);
     return res.json() as Promise<CatalogIndex>;
   });
-  indexRequest.catch(() => {
-    indexRequest = null;
+  pending.catch(() => {
+    if (indexRequests.get(key) === pending) indexRequests.delete(key);
   });
-  return indexRequest;
+  indexRequests.set(key, pending);
+  return pending;
 }

package/apps/storefront/src/lib/integrations/apps/scopes.ts

@@ -2,7 +2,7 @@
  * Scope validation — the compliance-floor gate for Storefront Private Apps.
  * See `docs/private-apps/feature-brief.md` §"The
  * compliance floor" and the machine-readable contract:
- *   - `docs/private-apps/contract/scopes.json` — the 8-scope V1 catalog.
+ *   - `docs/private-apps/contract/scopes.json` — the 10-scope V1 catalog.
  *   - `docs/private-apps/contract/forbidden-scopes.json` — the 8 ids that map
  *     to floor clauses (`checkout:mutate`, `tax:mutate`, …) and must NEVER be
  *     grantable.
@@ -28,6 +28,8 @@ export const V1_SCOPES = [
   "reports:read",
   "attribution:write",
   "widgets:launch",
+  "fulfillment:process",
+  "orders:read:recipient",
 ] as const;
 export type V1Scope = (typeof V1_SCOPES)[number];
 

package/apps/storefront/src/lib/integrations/webhooks/deliveryStore.ts

@@ -50,7 +50,9 @@ export type WebhookTopic =
   | "order.created"
   | "order.fulfilled"
   | "customer.marketing_consent.updated"
-  | "attribution.finalized";
+  | "attribution.finalized"
+  | "fulfillment.assignment.created"
+  | "fulfillment.assignment.updated";
 
 /** Mirrors `Delivery.state` in `docs/private-apps/contract/openapi.yaml` EXACTLY. */
 export type DeliveryState = "pending" | "retrying" | "delivered" | "dead-lettered";

package/apps/storefront/src/lib/integrations/webhooks/events.ts

@@ -29,6 +29,8 @@ export const TOPIC_REQUIRED_SCOPE: Record<WebhookTopic, string | null> = {
   "order.fulfilled": "orders:webhook",
   "customer.marketing_consent.updated": "customers:read:minimal",
   "attribution.finalized": "attribution:write",
+  "fulfillment.assignment.created": "fulfillment:process",
+  "fulfillment.assignment.updated": "fulfillment:process",
 };
 
 /** `type`'s reverse-DNS prefix (asyncapi.yaml `CloudEventEnvelope.type`). */

package/apps/storefront/src/pages/products/[handle].astro

@@ -626,6 +626,7 @@ const structuredData = {
   {/* Recently viewed (client island; records this product, shows the rest). */}
   <RecentlyViewed
     client:idle
+    tenant={tenant.tenant_id}
     locale={tenant.locale}
     current={{
       handle: product.handle,

package/apps/storefront/src/pages/style-guide/[tenant]/[theme].astro

@@ -1443,9 +1443,9 @@ const componentVarsInline = [
           <MobileNav client:idle nav={sampleMobileNav} announcement="Free US shipping on orders over $100" />
         </div>
 
-        <p class="sg-cap" style="margin:22px 0 8px">RecentlyViewed — localStorage discovery rail, seeded here for preview (renders empty on a real first visit until a product is viewed)</p>
-        <script is:inline nonce={cspNonce} set:html={`localStorage.setItem("tot:recently-viewed", ${JSON.stringify(JSON.stringify(sampleRecentlyViewed))}); localStorage.setItem("tot:wishlist", ${JSON.stringify(JSON.stringify(sampleRecentlyViewed.slice(0, 2)))});`} />
-        <RecentlyViewed client:idle locale="en-US" />
+        <p class="sg-cap" style="margin:22px 0 8px">RecentlyViewed — localStorage discovery rail. These samples are preview-only and are not stored.</p>
+        <script is:inline nonce={cspNonce} set:html={`localStorage.setItem("tot:wishlist", ${JSON.stringify(JSON.stringify(sampleRecentlyViewed.slice(0, 2)))});`} />
+        <RecentlyViewed client:idle locale="en-US" preview={sampleRecentlyViewed} />
 
         <p class="sg-cap" style="margin:22px 0 8px">SavedList — the <code>/saved</code> wishlist, seeded here for preview (empty state shown until an item is saved)</p>
         <SavedList client:only="preact" locale="en-US" />

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenoftrust/storefront-runner",
-  "version": "6.3.3",
+  "version": "6.3.5",
   "license": "SEE LICENSE IN LICENSE",
   "description": "World-shareable storefront runner: multi-tenant renderer on Astro/Cloudflare. No control plane.",
   "packageManager": "pnpm@11.9.0",