wiki-plugin-shoppe 0.0.1

package/CLAUDE.md

@@ -0,0 +1,125 @@
+# wiki-plugin-shoppe — Developer Documentation
+
+Multi-tenant digital goods shoppe for Federated Wiki, powered by Sanora.
+
+## Architecture
+
+Follows the Service-Bundling Plugin Pattern. Each tenant (seller/creator) gets their own Sanora user account, identified by a UUID and an 8-emoji emojicode (same format as BDO: 3 base + 5 unique from the EMOJI_PALETTE).
+
+### Tenant Identity
+
+Each tenant has:
+- **UUID** — their Sanora user UUID
+- **Emojicode** — 8-emoji human-readable identifier (e.g. `🛍️🎨🎁🌟💎🐉📚🔥`)
+
+The first 3 emoji are fixed per wiki instance (`SHOPPE_BASE_EMOJI`, default `🛍️🎨🎁`). The last 5 are unique per tenant.
+
+### Tenant Lifecycle
+
+1. Wiki owner registers a tenant: `POST /plugin/shoppe/register { name }`
+   - Plugin creates a Sanora user for the tenant
+   - Generates emojicode, stores `{ uuid, emojicode, name, keys }` in `.shoppe-tenants.json`
+   - Returns `{ uuid, emojicode }` — tenant puts these in their `manifest.json`
+2. Tenant builds their archive (see format below)
+3. Tenant drags archive onto the wiki plugin widget
+4. Plugin verifies `uuid + emojicode`, processes all goods into Sanora
+5. Shoppe accessible at `/plugin/shoppe/:uuid` or `/plugin/shoppe/:emojicode`
+
+## Archive Format
+
+```
+my-shoppe.zip
+  manifest.json           ← required: { uuid, emojicode, name }
+  books/
+    My Novel.epub
+    Technical Guide.pdf
+  music/
+    My Album/             ← album = subfolder
+      cover.jpg
+      01-track.mp3
+      02-track.mp3
+    Standalone Track.mp3  ← standalone track = file directly in music/
+  posts/
+    2025-01-hello-world.md
+    2025-02-another-post.md
+  albums/
+    Vacation 2025/        ← photo album = subfolder
+      photo1.jpg
+      photo2.jpg
+  products/
+    T-Shirt/              ← product = subfolder with cover + info.json
+      cover.jpg
+      info.json
+```
+
+### manifest.json
+
+```json
+{
+  "uuid": "your-uuid-from-registration",
+  "emojicode": "🛍️🎨🎁🌟💎🐉📚🔥",
+  "name": "My Shoppe"
+}
+```
+
+### products/*/info.json
+
+```json
+{
+  "title": "Planet Nine T-Shirt",
+  "description": "Comfortable cotton tee with logo",
+  "price": 25,
+  "shipping": 5
+}
+```
+
+## Routes
+
+| Method | Path | Auth | Description |
+|--------|------|------|-------------|
+| `POST` | `/plugin/shoppe/register` | Owner | Register new tenant |
+| `GET`  | `/plugin/shoppe/tenants` | Owner | List all tenants |
+| `POST` | `/plugin/shoppe/upload` | UUID+emojicode in archive | Upload goods archive |
+| `GET`  | `/plugin/shoppe/:id` | Public | Shoppe HTML page |
+| `GET`  | `/plugin/shoppe/:id/goods` | Public | Goods JSON |
+| `GET`  | `/plugin/shoppe/:id/goods?category=books` | Public | Filtered goods JSON |
+
+`:id` accepts either UUID or emojicode.
+
+## Configuration
+
+```bash
+# Base emoji for all tenant emojicodes on this wiki (default: 🛍️🎨🎁)
+export SHOPPE_BASE_EMOJI="🏪🎪🎁"
+
+# Sanora port (default: 7243)
+export SANORA_PORT=7243
+```
+
+## Supported File Types
+
+| Category | Extensions |
+|----------|-----------|
+| Books    | .epub, .pdf, .mobi, .azw, .azw3 |
+| Music    | .mp3, .flac, .m4a, .ogg, .wav |
+| Posts    | .md |
+| Albums   | .jpg, .jpeg, .png, .gif, .webp, .svg |
+| Products | .jpg/.png cover + info.json |
+
+## Storage
+
+Tenant registry: `.shoppe-tenants.json` (gitignored — contains private keys)
+
+Each tenant's goods are stored in Sanora under their own UUID.
+
+## Dependencies
+
+```json
+{
+  "adm-zip": "^0.5.10",
+  "form-data": "^4.0.0",
+  "multer": "^1.4.5-lts.1",
+  "node-fetch": "^2.6.1",
+  "sessionless-node": "^0.9.12"
+}
+```

package/client/client.js

@@ -0,0 +1,207 @@
+(function() {
+
+  window.plugins.shoppe = {
+    emit: function($item, item) {
+      const div = $item[0];
+      div.innerHTML = `
+        <div class="shoppe-widget">
+          <style>
+            .shoppe-widget { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif; max-width: 700px; margin: 0 auto; }
+            .shoppe-drop { border: 2px dashed #ccc; border-radius: 14px; padding: 40px 24px; text-align: center; cursor: pointer; transition: border-color 0.2s, background 0.2s; background: #fafafa; }
+            .shoppe-drop.dragover { border-color: #0066cc; background: #e8f0fe; }
+            .shoppe-drop-icon { font-size: 48px; margin-bottom: 12px; }
+            .shoppe-drop h3 { font-size: 18px; font-weight: 600; margin-bottom: 6px; color: #1d1d1f; }
+            .shoppe-drop p { font-size: 13px; color: #888; margin-bottom: 16px; }
+            .shoppe-btn { display: inline-block; padding: 10px 22px; border-radius: 20px; font-size: 14px; font-weight: 600; cursor: pointer; border: none; transition: background 0.15s; }
+            .shoppe-btn-blue { background: #0066cc; color: white; }
+            .shoppe-btn-blue:hover { background: #0055aa; }
+            .shoppe-btn-green { background: #10b981; color: white; }
+            .shoppe-btn-green:hover { background: #059669; }
+            .shoppe-section { margin-top: 20px; }
+            .shoppe-section h4 { font-size: 13px; font-weight: 600; color: #888; text-transform: uppercase; letter-spacing: 0.5px; margin-bottom: 10px; }
+            .shoppe-tenant { display: flex; align-items: center; justify-content: space-between; background: white; border: 1px solid #eee; border-radius: 10px; padding: 12px 16px; margin-bottom: 8px; }
+            .shoppe-tenant-info { display: flex; flex-direction: column; gap: 2px; }
+            .shoppe-tenant-name { font-weight: 600; font-size: 14px; }
+            .shoppe-tenant-code { font-size: 16px; letter-spacing: 3px; }
+            .shoppe-tenant-link { font-size: 13px; color: #0066cc; text-decoration: none; }
+            .shoppe-tenant-link:hover { text-decoration: underline; }
+            .shoppe-status { margin-top: 14px; border-radius: 10px; padding: 14px 18px; font-size: 14px; }
+            .shoppe-status.info    { background: #e8f0fe; color: #1a56db; }
+            .shoppe-status.success { background: #d1fae5; color: #065f46; }
+            .shoppe-status.error   { background: #fee2e2; color: #991b1b; }
+            .shoppe-register { display: flex; gap: 8px; margin-top: 12px; }
+            .shoppe-register input { flex: 1; padding: 9px 14px; border: 1px solid #ddd; border-radius: 8px; font-size: 14px; }
+            .shoppe-result-counts { margin-top: 8px; font-size: 13px; opacity: 0.8; }
+          </style>
+
+          <!-- Drop zone -->
+          <div class="shoppe-drop" id="shoppe-drop">
+            <div class="shoppe-drop-icon">🛍️</div>
+            <h3>Drop your shoppe archive here</h3>
+            <p>Drag and drop a .zip archive, or click to browse.<br>Archive must contain manifest.json with your uuid and emojicode.</p>
+            <button class="shoppe-btn shoppe-btn-blue" id="shoppe-browse-btn">Choose Archive</button>
+            <input type="file" id="shoppe-file-input" accept=".zip" style="display:none">
+          </div>
+
+          <!-- Register section -->
+          <div class="shoppe-section">
+            <h4>Register New Shoppe</h4>
+            <div class="shoppe-register">
+              <input type="text" id="shoppe-name-input" placeholder="Shoppe name (e.g. Zach's Art Store)">
+              <button class="shoppe-btn shoppe-btn-green" id="shoppe-register-btn">Register</button>
+            </div>
+          </div>
+
+          <!-- Tenant list -->
+          <div class="shoppe-section" id="shoppe-tenants-section">
+            <h4>Active Shoppes</h4>
+            <div id="shoppe-tenants-list"><em style="font-size:13px;color:#999">Loading...</em></div>
+          </div>
+
+          <!-- Status -->
+          <div id="shoppe-status" style="display:none"></div>
+        </div>
+      `;
+
+      setupShoppeListeners(div);
+      loadTenants(div);
+    },
+
+    bind: function($item, item) {}
+  };
+
+  function setupShoppeListeners(container) {
+    const drop = container.querySelector('#shoppe-drop');
+    const fileInput = container.querySelector('#shoppe-file-input');
+    const browseBtn = container.querySelector('#shoppe-browse-btn');
+    const registerBtn = container.querySelector('#shoppe-register-btn');
+    const nameInput = container.querySelector('#shoppe-name-input');
+
+    // Browse button
+    browseBtn.addEventListener('click', () => fileInput.click());
+
+    // File selected via browser
+    fileInput.addEventListener('change', e => {
+      const file = e.target.files[0];
+      if (file) uploadArchive(file, container);
+    });
+
+    // Drag and drop
+    drop.addEventListener('dragover', e => {
+      e.preventDefault();
+      drop.classList.add('dragover');
+    });
+    drop.addEventListener('dragleave', () => drop.classList.remove('dragover'));
+    drop.addEventListener('drop', e => {
+      e.preventDefault();
+      drop.classList.remove('dragover');
+      const file = e.dataTransfer.files[0];
+      if (file && file.name.endsWith('.zip')) {
+        uploadArchive(file, container);
+      } else {
+        showStatus(container, 'Please drop a .zip archive', 'error');
+      }
+    });
+
+    // Register
+    registerBtn.addEventListener('click', async () => {
+      const name = nameInput.value.trim();
+      if (!name) { showStatus(container, 'Enter a shoppe name first', 'error'); return; }
+      registerBtn.disabled = true;
+      registerBtn.textContent = 'Registering...';
+      try {
+        const resp = await fetch('/plugin/shoppe/register', {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ name })
+        });
+        const result = await resp.json();
+        if (result.success) {
+          nameInput.value = '';
+          showStatus(container,
+            `✅ Registered! UUID: <code>${result.tenant.uuid}</code><br>Emojicode: <strong>${result.tenant.emojicode}</strong><br>Put these in your manifest.json`,
+            'success');
+          loadTenants(container);
+        } else {
+          throw new Error(result.error || 'Registration failed');
+        }
+      } catch (err) {
+        showStatus(container, `❌ ${err.message}`, 'error');
+      } finally {
+        registerBtn.disabled = false;
+        registerBtn.textContent = 'Register';
+      }
+    });
+  }
+
+  async function uploadArchive(file, container) {
+    showStatus(container, `⏳ Uploading and processing <strong>${file.name}</strong>...`, 'info');
+
+    const form = new FormData();
+    form.append('archive', file);
+
+    try {
+      const resp = await fetch('/plugin/shoppe/upload', { method: 'POST', body: form });
+      const result = await resp.json();
+
+      if (result.success) {
+        const r = result.results;
+        const counts = [
+          r.books.length    && `📚 ${r.books.length} book${r.books.length !== 1 ? 's' : ''}`,
+          r.music.length    && `🎵 ${r.music.length} music item${r.music.length !== 1 ? 's' : ''}`,
+          r.posts.length    && `📝 ${r.posts.length} post${r.posts.length !== 1 ? 's' : ''}`,
+          r.albums.length   && `🖼️ ${r.albums.length} album${r.albums.length !== 1 ? 's' : ''}`,
+          r.products.length && `📦 ${r.products.length} product${r.products.length !== 1 ? 's' : ''}`
+        ].filter(Boolean).join(', ') || 'nothing uploaded';
+
+        showStatus(container,
+          `✅ Uploaded for <strong>${result.tenant.name}</strong> ${result.tenant.emojicode}<br>
+           <div class="shoppe-result-counts">${counts}</div>
+           <a href="/plugin/shoppe/${result.tenant.uuid}" target="_blank" style="display:inline-block;margin-top:10px;color:#0066cc;">View shoppe →</a>`,
+          'success');
+        loadTenants(container);
+      } else {
+        throw new Error(result.error || 'Upload failed');
+      }
+    } catch (err) {
+      showStatus(container, `❌ ${err.message}`, 'error');
+    }
+  }
+
+  async function loadTenants(container) {
+    const list = container.querySelector('#shoppe-tenants-list');
+    if (!list) return;
+    try {
+      const resp = await fetch('/plugin/shoppe/tenants');
+      if (!resp.ok) {
+        list.innerHTML = '<em style="font-size:13px;color:#999">Not available (owner only)</em>';
+        return;
+      }
+      const result = await resp.json();
+      if (!result.success || result.tenants.length === 0) {
+        list.innerHTML = '<em style="font-size:13px;color:#999">No shoppes registered yet.</em>';
+        return;
+      }
+      list.innerHTML = result.tenants.map(t => `
+        <div class="shoppe-tenant">
+          <div class="shoppe-tenant-info">
+            <span class="shoppe-tenant-name">${t.name}</span>
+            <span class="shoppe-tenant-code">${t.emojicode}</span>
+            <code style="font-size:11px;color:#888">${t.uuid}</code>
+          </div>
+          <a class="shoppe-tenant-link" href="${t.url}" target="_blank">View shoppe →</a>
+        </div>
+      `).join('');
+    } catch (err) {
+      list.innerHTML = '<em style="font-size:13px;color:#999">Could not load tenants.</em>';
+    }
+  }
+
+  function showStatus(container, html, type) {
+    const el = container.querySelector('#shoppe-status');
+    el.className = `shoppe-status ${type}`;
+    el.innerHTML = html;
+    el.style.display = 'block';
+  }
+
+})();

package/factory.json

@@ -0,0 +1,5 @@
+{
+  "name": "Shoppe",
+  "title": "Multi-Tenant Digital Goods Shoppe",
+  "category": "content"
+}

package/index.js

@@ -0,0 +1 @@
+module.exports = require('./server/server.js');

package/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "wiki-plugin-shoppe",
+  "version": "0.0.1",
+  "description": "Multi-tenant digital goods shoppe for federated wiki, powered by Sanora",
+  "keywords": [
+    "wiki",
+    "federated",
+    "shoppe",
+    "storefront",
+    "planet-nine",
+    "sanora"
+  ],
+  "license": "MIT",
+  "author": "planetnineisaspaceship",
+  "type": "commonjs",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "dependencies": {
+    "adm-zip": "^0.5.10",
+    "form-data": "^4.0.0",
+    "multer": "^1.4.5-lts.1",
+    "node-fetch": "^2.6.1",
+    "sessionless-node": "^0.9.12"
+  }
+}

package/server/server.js

@@ -0,0 +1,625 @@
+(function() {
+const fs = require('fs');
+const path = require('path');
+const fetch = require('node-fetch');
+const multer = require('multer');
+const FormData = require('form-data');
+const AdmZip = require('adm-zip');
+const sessionless = require('sessionless-node');
+
+const SANORA_PORT = process.env.SANORA_PORT || 7243;
+const SHOPPE_BASE_EMOJI = process.env.SHOPPE_BASE_EMOJI || '🛍️🎨🎁';
+
+const TENANTS_FILE = path.join(__dirname, '../.shoppe-tenants.json');
+const TMP_DIR = '/tmp/shoppe-uploads';
+
+// Same diverse palette as BDO emojicoding
+const EMOJI_PALETTE = [
+  '🌟', '🌙', '🌍', '🌊', '🔥', '💎', '🎨', '🎭', '🎪', '🎯',
+  '🎲', '🎸', '🎹', '🎺', '🎻', '🏆', '🏹', '🏺', '🏰', '🏔',
+  '🐉', '🐙', '🐚', '🐝', '🐞', '🐢', '🐳', '🐺', '🐻', '🐼',
+  '👑', '👒', '👓', '👔', '👕', '💀', '💡', '💣', '💫', '💰',
+  '💼', '📌', '📍', '📎', '📐', '📑', '📕', '📗', '📘', '📙',
+  '📚', '📝', '📡', '📢', '📣', '📦', '📧', '📨', '📬', '📮',
+  '🔑', '🔒', '🔓', '🔔', '🔨', '🔩', '🔪', '🔫', '🔮', '🔱',
+  '🕐', '🕑', '🕒', '🕓', '🕔', '🕕', '🕖', '🕗', '🕘', '🕙',
+  '🗝', '🗡', '🗿', '😀', '😁', '😂', '😃', '😄', '😅', '😆',
+  '🙂', '🙃', '🙄', '🚀', '🚁', '🚂', '🚃', '🚄', '🚅', '🚆'
+];
+
+const BOOK_EXTS  = new Set(['.epub', '.pdf', '.mobi', '.azw', '.azw3']);
+const MUSIC_EXTS = new Set(['.mp3', '.flac', '.m4a', '.ogg', '.wav']);
+const IMAGE_EXTS = new Set(['.jpg', '.jpeg', '.png', '.gif', '.webp', '.svg']);
+
+// ============================================================
+// TENANT MANAGEMENT
+// ============================================================
+
+function loadTenants() {
+  if (!fs.existsSync(TENANTS_FILE)) return {};
+  try {
+    return JSON.parse(fs.readFileSync(TENANTS_FILE, 'utf8'));
+  } catch (err) {
+    console.warn('[shoppe] Failed to load tenants:', err.message);
+    return {};
+  }
+}
+
+function saveTenants(tenants) {
+  fs.writeFileSync(TENANTS_FILE, JSON.stringify(tenants, null, 2));
+}
+
+function generateEmojicode(tenants) {
+  const base = [...SHOPPE_BASE_EMOJI].slice(0, 3).join('');
+  const existing = new Set(Object.values(tenants).map(t => t.emojicode));
+  for (let i = 0; i < 100; i++) {
+    const shuffled = [...EMOJI_PALETTE].sort(() => Math.random() - 0.5);
+    const code = base + shuffled.slice(0, 5).join('');
+    if (!existing.has(code)) return code;
+  }
+  throw new Error('Failed to generate unique emojicode after 100 attempts');
+}
+
+async function registerTenant(name) {
+  const tenants = loadTenants();
+
+  // Create a dedicated Sanora user for this tenant
+  const keys = await sessionless.generateKeys(() => {}, () => null);
+  const timestamp = Date.now().toString();
+  const message = timestamp + keys.pubKey;
+  const signature = await sessionless.sign(message, keys.privateKey);
+
+  const resp = await fetch(`http://localhost:${SANORA_PORT}/user/create`, {
+    method: 'PUT',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ timestamp, pubKey: keys.pubKey, signature })
+  });
+
+  const sanoraUser = await resp.json();
+  if (sanoraUser.error) throw new Error(`Sanora: ${sanoraUser.error}`);
+
+  const emojicode = generateEmojicode(tenants);
+
+  const tenant = {
+    uuid: sanoraUser.uuid,
+    emojicode,
+    name: name || 'Unnamed Shoppe',
+    keys,
+    sanoraUser,
+    createdAt: Date.now()
+  };
+
+  tenants[sanoraUser.uuid] = tenant;
+  saveTenants(tenants);
+
+  console.log(`[shoppe] Registered tenant: "${name}" ${emojicode} (${sanoraUser.uuid})`);
+  return { uuid: sanoraUser.uuid, emojicode, name: tenant.name };
+}
+
+function getTenantByIdentifier(identifier) {
+  const tenants = loadTenants();
+  if (tenants[identifier]) return tenants[identifier];
+  return Object.values(tenants).find(t => t.emojicode === identifier) || null;
+}
+
+// ============================================================
+// SANORA API HELPERS
+// ============================================================
+
+function getMimeType(filename) {
+  const ext = path.extname(filename).toLowerCase();
+  return ({
+    '.epub': 'application/epub+zip',
+    '.pdf':  'application/pdf',
+    '.mobi': 'application/x-mobipocket-ebook',
+    '.mp3':  'audio/mpeg',
+    '.flac': 'audio/flac',
+    '.m4a':  'audio/mp4',
+    '.ogg':  'audio/ogg',
+    '.wav':  'audio/wav',
+    '.md':   'text/markdown',
+    '.jpg':  'image/jpeg',
+    '.jpeg': 'image/jpeg',
+    '.png':  'image/png',
+    '.gif':  'image/gif',
+    '.webp': 'image/webp',
+    '.svg':  'image/svg+xml'
+  })[ext] || 'application/octet-stream';
+}
+
+async function sanoraCreateProduct(tenant, title, category, description, price, shipping, tags) {
+  const { uuid, keys } = tenant;
+  const timestamp = Date.now().toString();
+  const safePrice = price || 0;
+  const message = timestamp + uuid + title + (description || '') + safePrice;
+
+  sessionless.getKeys = () => keys;
+  const signature = await sessionless.sign(message);
+
+  const resp = await fetch(
+    `http://localhost:${SANORA_PORT}/user/${uuid}/product/${encodeURIComponent(title)}`,
+    {
+      method: 'PUT',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        timestamp,
+        pubKey: keys.pubKey,
+        signature,
+        description: description || '',
+        price: safePrice,
+        shipping: shipping || 0,
+        category,
+        tags: tags || category
+      })
+    }
+  );
+
+  const product = await resp.json();
+  if (product.error) throw new Error(`Create product failed: ${product.error}`);
+  return product;
+}
+
+async function sanoraUploadArtifact(tenant, title, fileBuffer, filename, artifactType) {
+  const { uuid, keys } = tenant;
+  const timestamp = Date.now().toString();
+  sessionless.getKeys = () => keys;
+  const message = timestamp + uuid + title;
+  const signature = await sessionless.sign(message);
+
+  const form = new FormData();
+  form.append('artifact', fileBuffer, { filename, contentType: getMimeType(filename) });
+
+  const resp = await fetch(
+    `http://localhost:${SANORA_PORT}/user/${uuid}/product/${encodeURIComponent(title)}/artifact`,
+    {
+      method: 'PUT',
+      headers: {
+        'x-pn-artifact-type': artifactType,
+        'x-pn-timestamp': timestamp,
+        'x-pn-signature': signature,
+        ...form.getHeaders()
+      },
+      body: form
+    }
+  );
+
+  const result = await resp.json();
+  if (result.error) throw new Error(`Artifact upload failed: ${result.error}`);
+  return result;
+}
+
+async function sanoraUploadImage(tenant, title, imageBuffer, filename) {
+  const { uuid, keys } = tenant;
+  const timestamp = Date.now().toString();
+  sessionless.getKeys = () => keys;
+  const message = timestamp + uuid + title;
+  const signature = await sessionless.sign(message);
+
+  const form = new FormData();
+  form.append('image', imageBuffer, { filename, contentType: getMimeType(filename) });
+
+  const resp = await fetch(
+    `http://localhost:${SANORA_PORT}/user/${uuid}/product/${encodeURIComponent(title)}/image`,
+    {
+      method: 'PUT',
+      headers: {
+        'x-pn-timestamp': timestamp,
+        'x-pn-signature': signature,
+        ...form.getHeaders()
+      },
+      body: form
+    }
+  );
+
+  const result = await resp.json();
+  if (result.error) throw new Error(`Image upload failed: ${result.error}`);
+  return result;
+}
+
+// ============================================================
+// ARCHIVE PROCESSING
+// ============================================================
+
+async function processArchive(zipPath) {
+  const zip = new AdmZip(zipPath);
+  const tmpDir = path.join(TMP_DIR, `extract-${Date.now()}`);
+  zip.extractAllTo(tmpDir, true);
+
+  try {
+    // Read and validate manifest
+    const manifestPath = path.join(tmpDir, 'manifest.json');
+    if (!fs.existsSync(manifestPath)) {
+      throw new Error('Archive is missing manifest.json');
+    }
+
+    const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));
+    if (!manifest.uuid || !manifest.emojicode) {
+      throw new Error('manifest.json must contain uuid and emojicode');
+    }
+
+    const tenant = getTenantByIdentifier(manifest.uuid);
+    if (!tenant) throw new Error(`Unknown UUID: ${manifest.uuid}`);
+    if (tenant.emojicode !== manifest.emojicode) {
+      throw new Error('emojicode does not match registered tenant');
+    }
+
+    const results = { books: [], music: [], posts: [], albums: [], products: [] };
+
+    // ---- books/ ----
+    const booksDir = path.join(tmpDir, 'books');
+    if (fs.existsSync(booksDir)) {
+      for (const file of fs.readdirSync(booksDir)) {
+        if (!BOOK_EXTS.has(path.extname(file).toLowerCase())) continue;
+        const title = path.basename(file, path.extname(file));
+        try {
+          const buf = fs.readFileSync(path.join(booksDir, file));
+          await sanoraCreateProduct(tenant, title, 'book', `Book: ${title}`, 0, 0, 'book');
+          await sanoraUploadArtifact(tenant, title, buf, file, 'ebook');
+          results.books.push({ title });
+          console.log(`[shoppe]   📚 book: ${title}`);
+        } catch (err) {
+          console.warn(`[shoppe]   ⚠️  book ${file}: ${err.message}`);
+        }
+      }
+    }
+
+    // ---- music/ ----
+    // Albums are subfolders; standalone files are individual tracks
+    const musicDir = path.join(tmpDir, 'music');
+    if (fs.existsSync(musicDir)) {
+      for (const entry of fs.readdirSync(musicDir)) {
+        const entryPath = path.join(musicDir, entry);
+        const stat = fs.statSync(entryPath);
+
+        if (stat.isDirectory()) {
+          // Album
+          const albumName = entry;
+          const tracks = fs.readdirSync(entryPath).filter(f => MUSIC_EXTS.has(path.extname(f).toLowerCase()));
+          const covers = fs.readdirSync(entryPath).filter(f => IMAGE_EXTS.has(path.extname(f).toLowerCase()));
+          try {
+            await sanoraCreateProduct(tenant, albumName, 'music', `Album: ${albumName}`, 0, 0, 'music,album');
+            if (covers.length > 0) {
+              const coverBuf = fs.readFileSync(path.join(entryPath, covers[0]));
+              await sanoraUploadImage(tenant, albumName, coverBuf, covers[0]);
+            }
+            for (const track of tracks) {
+              const buf = fs.readFileSync(path.join(entryPath, track));
+              await sanoraUploadArtifact(tenant, albumName, buf, track, 'audio');
+            }
+            results.music.push({ title: albumName, type: 'album', tracks: tracks.length });
+            console.log(`[shoppe]   🎵 album: ${albumName} (${tracks.length} tracks)`);
+          } catch (err) {
+            console.warn(`[shoppe]   ⚠️  album ${albumName}: ${err.message}`);
+          }
+        } else if (MUSIC_EXTS.has(path.extname(entry).toLowerCase())) {
+          // Standalone track
+          const title = path.basename(entry, path.extname(entry));
+          try {
+            const buf = fs.readFileSync(entryPath);
+            await sanoraCreateProduct(tenant, title, 'music', `Track: ${title}`, 0, 0, 'music,track');
+            await sanoraUploadArtifact(tenant, title, buf, entry, 'audio');
+            results.music.push({ title, type: 'track' });
+            console.log(`[shoppe]   🎵 track: ${title}`);
+          } catch (err) {
+            console.warn(`[shoppe]   ⚠️  track ${entry}: ${err.message}`);
+          }
+        }
+      }
+    }
+
+    // ---- posts/ ----
+    const postsDir = path.join(tmpDir, 'posts');
+    if (fs.existsSync(postsDir)) {
+      for (const file of fs.readdirSync(postsDir)) {
+        if (!file.endsWith('.md')) continue;
+        const title = path.basename(file, '.md');
+        try {
+          const buf = fs.readFileSync(path.join(postsDir, file));
+          const firstLine = buf.toString('utf8').split('\n')[0].replace(/^#+\s*/, '');
+          await sanoraCreateProduct(tenant, title, 'post', firstLine || title, 0, 0, 'post,blog');
+          await sanoraUploadArtifact(tenant, title, buf, file, 'text');
+          results.posts.push({ title });
+          console.log(`[shoppe]   📝 post: ${title}`);
+        } catch (err) {
+          console.warn(`[shoppe]   ⚠️  post ${file}: ${err.message}`);
+        }
+      }
+    }
+
+    // ---- albums/ ----
+    // Each subfolder is a photo album
+    const albumsDir = path.join(tmpDir, 'albums');
+    if (fs.existsSync(albumsDir)) {
+      for (const entry of fs.readdirSync(albumsDir)) {
+        const entryPath = path.join(albumsDir, entry);
+        if (!fs.statSync(entryPath).isDirectory()) continue;
+        const images = fs.readdirSync(entryPath).filter(f => IMAGE_EXTS.has(path.extname(f).toLowerCase()));
+        try {
+          await sanoraCreateProduct(tenant, entry, 'album', `Photo album: ${entry}`, 0, 0, 'album,photos');
+          if (images.length > 0) {
+            const coverBuf = fs.readFileSync(path.join(entryPath, images[0]));
+            await sanoraUploadImage(tenant, entry, coverBuf, images[0]);
+          }
+          for (const img of images) {
+            const buf = fs.readFileSync(path.join(entryPath, img));
+            await sanoraUploadArtifact(tenant, entry, buf, img, 'image');
+          }
+          results.albums.push({ title: entry, images: images.length });
+          console.log(`[shoppe]   🖼️  album: ${entry} (${images.length} images)`);
+        } catch (err) {
+          console.warn(`[shoppe]   ⚠️  album ${entry}: ${err.message}`);
+        }
+      }
+    }
+
+    // ---- products/ ----
+    // Each subfolder is a physical product with cover.jpg + info.json
+    const productsDir = path.join(tmpDir, 'products');
+    if (fs.existsSync(productsDir)) {
+      for (const entry of fs.readdirSync(productsDir)) {
+        const entryPath = path.join(productsDir, entry);
+        if (!fs.statSync(entryPath).isDirectory()) continue;
+        try {
+          const infoPath = path.join(entryPath, 'info.json');
+          const info = fs.existsSync(infoPath)
+            ? JSON.parse(fs.readFileSync(infoPath, 'utf8'))
+            : {};
+          const title = info.title || entry;
+          const description = info.description || '';
+          const price = info.price || 0;
+          const shipping = info.shipping || 0;
+
+          await sanoraCreateProduct(tenant, title, 'product', description, price, shipping, 'product,physical');
+
+          const images = fs.readdirSync(entryPath).filter(f => IMAGE_EXTS.has(path.extname(f).toLowerCase()));
+          if (images.length > 0) {
+            const coverBuf = fs.readFileSync(path.join(entryPath, images[0]));
+            await sanoraUploadImage(tenant, title, coverBuf, images[0]);
+          }
+
+          results.products.push({ title, price, shipping });
+          console.log(`[shoppe]   📦 product: ${title} ($${price} + $${shipping} shipping)`);
+        } catch (err) {
+          console.warn(`[shoppe]   ⚠️  product ${entry}: ${err.message}`);
+        }
+      }
+    }
+
+    return {
+      tenant: { uuid: tenant.uuid, emojicode: tenant.emojicode, name: tenant.name },
+      results
+    };
+
+  } finally {
+    try { fs.rmSync(tmpDir, { recursive: true }); } catch (e) {}
+  }
+}
+
+// ============================================================
+// PORTFOLIO PAGE GENERATION
+// ============================================================
+
+async function getShoppeGoods(tenant) {
+  const resp = await fetch(`http://localhost:${SANORA_PORT}/products/${tenant.uuid}`);
+  const products = await resp.json();
+
+  const goods = { books: [], music: [], posts: [], albums: [], products: [] };
+
+  for (const [title, product] of Object.entries(products)) {
+    const item = {
+      title: product.title || title,
+      description: product.description || '',
+      price: product.price || 0,
+      shipping: product.shipping || 0,
+      image: product.image ? `http://localhost:${SANORA_PORT}/images/${product.image}` : null,
+      url: `http://localhost:${SANORA_PORT}/products/${tenant.uuid}/${encodeURIComponent(title)}`
+    };
+    const bucket = goods[product.category];
+    if (bucket) bucket.push(item);
+    else goods.products.push(item);
+  }
+
+  return goods;
+}
+
+const CATEGORY_EMOJI = { book: '📚', music: '🎵', post: '📝', album: '🖼️', product: '📦' };
+
+function renderCards(items, category) {
+  if (items.length === 0) {
+    return '<p class="empty">Nothing here yet.</p>';
+  }
+  return items.map(item => {
+    const imgHtml = item.image
+      ? `<div class="card-img"><img src="${item.image}" alt="" loading="lazy"></div>`
+      : `<div class="card-img-placeholder">${CATEGORY_EMOJI[category] || '🎁'}</div>`;
+    const priceHtml = (item.price > 0 || category === 'product')
+      ? `<div class="price">$${item.price}${item.shipping ? ` <span class="shipping">+ $${item.shipping} shipping</span>` : ''}</div>`
+      : '';
+    return `
+      <div class="card" onclick="window.open('${item.url}','_blank')">
+        ${imgHtml}
+        <div class="card-body">
+          <div class="card-title">${item.title}</div>
+          ${item.description ? `<div class="card-desc">${item.description}</div>` : ''}
+          ${priceHtml}
+        </div>
+      </div>`;
+  }).join('');
+}
+
+function generateShoppeHTML(tenant, goods) {
+  const total = Object.values(goods).flat().length;
+  const tabs = [
+    { id: 'all', label: 'All', count: total, always: true },
+    { id: 'books',    label: '📚 Books',    count: goods.books.length },
+    { id: 'music',    label: '🎵 Music',    count: goods.music.length },
+    { id: 'posts',    label: '📝 Posts',    count: goods.posts.length },
+    { id: 'albums',   label: '🖼️ Albums',   count: goods.albums.length },
+    { id: 'products', label: '📦 Products', count: goods.products.length }
+  ]
+    .filter(t => t.always || t.count > 0)
+    .map((t, i) => `<div class="tab${i === 0 ? ' active' : ''}" onclick="show('${t.id}',this)">${t.label} <span class="badge">${t.count}</span></div>`)
+    .join('');
+
+  const allItems = [...goods.books, ...goods.music, ...goods.posts, ...goods.albums, ...goods.products];
+
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>${tenant.name}</title>
+  <style>
+    *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+    body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif; background: #f5f5f7; color: #1d1d1f; }
+    header { background: linear-gradient(135deg, #1a1a2e 0%, #16213e 50%, #0f3460 100%); color: white; padding: 48px 24px 40px; text-align: center; }
+    .emojicode { font-size: 30px; letter-spacing: 6px; margin-bottom: 14px; }
+    header h1 { font-size: 38px; font-weight: 700; margin-bottom: 6px; }
+    .count { opacity: 0.65; font-size: 15px; }
+    nav { display: flex; overflow-x: auto; background: white; border-bottom: 1px solid #ddd; padding: 0 20px; gap: 0; }
+    .tab { padding: 14px 18px; cursor: pointer; font-size: 14px; font-weight: 500; white-space: nowrap; border-bottom: 2px solid transparent; color: #555; transition: color 0.15s, border-color 0.15s; }
+    .tab:hover { color: #0066cc; }
+    .tab.active { color: #0066cc; border-bottom-color: #0066cc; }
+    .badge { background: #e8f0fe; color: #0066cc; border-radius: 10px; padding: 1px 7px; font-size: 11px; margin-left: 5px; }
+    main { max-width: 1200px; margin: 0 auto; padding: 36px 24px; }
+    .section { display: none; }
+    .section.active { display: block; }
+    .grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(230px, 1fr)); gap: 20px; }
+    .card { background: white; border-radius: 14px; overflow: hidden; box-shadow: 0 2px 8px rgba(0,0,0,0.07); cursor: pointer; transition: transform 0.18s, box-shadow 0.18s; }
+    .card:hover { transform: translateY(-3px); box-shadow: 0 8px 24px rgba(0,0,0,0.12); }
+    .card-img img { width: 100%; height: 190px; object-fit: cover; display: block; }
+    .card-img-placeholder { height: 110px; display: flex; align-items: center; justify-content: center; font-size: 44px; background: #f0f0f7; }
+    .card-body { padding: 16px; }
+    .card-title { font-size: 15px; font-weight: 600; margin-bottom: 5px; line-height: 1.3; }
+    .card-desc { font-size: 13px; color: #666; margin-bottom: 8px; overflow: hidden; display: -webkit-box; -webkit-line-clamp: 2; -webkit-box-orient: vertical; }
+    .price { font-size: 15px; font-weight: 700; color: #0066cc; }
+    .shipping { font-size: 12px; font-weight: 400; color: #888; }
+    .empty { color: #999; text-align: center; padding: 60px 0; font-size: 15px; }
+  </style>
+</head>
+<body>
+  <header>
+    <div class="emojicode">${tenant.emojicode}</div>
+    <h1>${tenant.name}</h1>
+    <div class="count">${total} item${total !== 1 ? 's' : ''}</div>
+  </header>
+  <nav>${tabs}</nav>
+  <main>
+    <div id="all" class="section active"><div class="grid">${renderCards(allItems, 'all')}</div></div>
+    <div id="books" class="section"><div class="grid">${renderCards(goods.books, 'book')}</div></div>
+    <div id="music" class="section"><div class="grid">${renderCards(goods.music, 'music')}</div></div>
+    <div id="posts" class="section"><div class="grid">${renderCards(goods.posts, 'post')}</div></div>
+    <div id="albums" class="section"><div class="grid">${renderCards(goods.albums, 'album')}</div></div>
+    <div id="products" class="section"><div class="grid">${renderCards(goods.products, 'product')}</div></div>
+  </main>
+  <script>
+    function show(id, tab) {
+      document.querySelectorAll('.section').forEach(s => s.classList.remove('active'));
+      document.querySelectorAll('.tab').forEach(t => t.classList.remove('active'));
+      document.getElementById(id).classList.add('active');
+      tab.classList.add('active');
+    }
+  </script>
+</body>
+</html>`;
+}
+
+// ============================================================
+// EXPRESS ROUTES
+// ============================================================
+
+async function startServer(params) {
+  const app = params.app;
+
+  if (!fs.existsSync(TMP_DIR)) fs.mkdirSync(TMP_DIR, { recursive: true });
+  console.log('🛍️  wiki-plugin-shoppe starting...');
+
+  const owner = (req, res, next) => {
+    if (!app.securityhandler.isAuthorized(req)) {
+      return res.status(401).json({ error: 'must be owner' });
+    }
+    return next();
+  };
+
+  const upload = multer({
+    dest: TMP_DIR,
+    limits: { fileSize: 500 * 1024 * 1024 } // 500 MB
+  });
+
+  // Register a new tenant (owner only)
+  app.post('/plugin/shoppe/register', owner, async (req, res) => {
+    try {
+      const tenant = await registerTenant(req.body.name);
+      res.json({ success: true, tenant });
+    } catch (err) {
+      console.error('[shoppe] register error:', err);
+      res.status(500).json({ success: false, error: err.message });
+    }
+  });
+
+  // List all tenants (owner only)
+  app.get('/plugin/shoppe/tenants', owner, (req, res) => {
+    const tenants = loadTenants();
+    const safe = Object.values(tenants).map(({ uuid, emojicode, name, createdAt }) => ({
+      uuid, emojicode, name, createdAt,
+      url: `/plugin/shoppe/${uuid}`
+    }));
+    res.json({ success: true, tenants: safe });
+  });
+
+  // Upload goods archive (auth via manifest uuid+emojicode)
+  app.post('/plugin/shoppe/upload', upload.single('archive'), async (req, res) => {
+    try {
+      if (!req.file) {
+        return res.status(400).json({ success: false, error: 'No archive uploaded' });
+      }
+      console.log('[shoppe] Processing archive:', req.file.originalname);
+      const result = await processArchive(req.file.path);
+      res.json({ success: true, ...result });
+    } catch (err) {
+      console.error('[shoppe] upload error:', err);
+      res.status(500).json({ success: false, error: err.message });
+    } finally {
+      if (req.file && fs.existsSync(req.file.path)) {
+        try { fs.unlinkSync(req.file.path); } catch (e) {}
+      }
+    }
+  });
+
+  // Goods JSON (public)
+  app.get('/plugin/shoppe/:identifier/goods', async (req, res) => {
+    try {
+      const tenant = getTenantByIdentifier(req.params.identifier);
+      if (!tenant) return res.status(404).json({ error: 'Shoppe not found' });
+      const goods = await getShoppeGoods(tenant);
+      const cat = req.query.category;
+      res.json({ success: true, goods: (cat && goods[cat]) ? goods[cat] : goods });
+    } catch (err) {
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  // Shoppe HTML page (public)
+  app.get('/plugin/shoppe/:identifier', async (req, res) => {
+    try {
+      const tenant = getTenantByIdentifier(req.params.identifier);
+      if (!tenant) return res.status(404).send('<h1>Shoppe not found</h1>');
+      const goods = await getShoppeGoods(tenant);
+      res.set('Content-Type', 'text/html');
+      res.send(generateShoppeHTML(tenant, goods));
+    } catch (err) {
+      console.error('[shoppe] page error:', err);
+      res.status(500).send(`<h1>Error</h1><p>${err.message}</p>`);
+    }
+  });
+
+  console.log('✅ wiki-plugin-shoppe ready!');
+  console.log('   POST /plugin/shoppe/register        — register tenant (owner)');
+  console.log('   GET  /plugin/shoppe/tenants         — list tenants (owner)');
+  console.log('   POST /plugin/shoppe/upload          — upload goods archive');
+  console.log('   GET  /plugin/shoppe/:id             — shoppe page');
+  console.log('   GET  /plugin/shoppe/:id/goods       — goods JSON');
+}
+
+module.exports = { startServer };
+}).call(this);