@cavuno/board 1.38.0 → 1.40.0

package/dist/server.d.ts

@@ -1,7 +1,9 @@
 import { BoardSdk } from './index.js';
-import './jobs-DMH3Ytoq.js';
-import './board-tV-zcaHs.js';
-import './salaries-CaGlcCC6.js';
+import './_spec-DRbgPIlN.js';
+import './search-BalPAS0P.js';
+import './board-BxPUtrOl.js';
+import './jobs-DAGAVHQL.js';
+import './salaries-cqb78kg0.js';
 
 /**
  * Session cookie codec — pure (no framework imports, no node imports) so it
@@ -75,6 +77,56 @@ declare function safeRedirectPath(path: string | undefined | null, defaultPath?:
  */
 declare function currentPathFromReferer(referer: string | null): string;
 
+/**
+ * MIG-10 (added scope) — keep `<slug>.cavuno.app` live after a custom-domain
+ * cutover by 308-redirecting to the board's canonical custom domain.
+ *
+ * ## Where this lives (DEVIATION LOUDLY)
+ * **Serving-side, not the dispatch edge.** Production hostname→worker
+ * routing is the WFP dispatch Worker's KV map (`hostname → workerName`
+ * only — see `docs/recipes/ops/wfp-dispatch-custom-domain.md` and
+ * `createWfpReleaseDeploy` / `deterministicWorkerName`). That edge has
+ * **no board domain data** (no Convex, no primaryDomain). Inventing a
+ * second edge datastore for canonical hosts is forbidden by the ticket.
+ *
+ * Data source: the board's public context already carries
+ * `primaryDomain: string | null` (`GET /v1/boards/:id` via
+ * `serializeBoardContext`). The starter loads context for every request
+ * (theme, features, analytics) — reuse that field. When `primaryDomain`
+ * is set, a request whose Host is a `*.cavuno.app` serving host 308s to
+ * `https://<primaryDomain><path+query>` in **one hop**. Domainless boards
+ * (`primaryDomain === null`) keep **serving** from cavuno.app (no redirect).
+ *
+ * Wire this helper into the starter's root middleware / entry (the
+ * migration starter's host check) with `Response.redirect(url, 308)`.
+ * Pure so unit tests pin behaviour without a Worker runtime.
+ *
+ * Pattern: Vercel `*.vercel.app` / GitHub `github.io` permanent fallback
+ * origin — SEO-neutral 308 to the canonical production host.
+ */
+/**
+ * True when the request host is a cavuno.app board-serving host
+ * (slug or board-hash subdomain), not the apex and not a preview host
+ * we deliberately leave alone.
+ */
+declare function isCavunoAppServingHost(hostname: string): boolean;
+/**
+ * When a custom-domain board is hit on its cavuno.app fallback origin,
+ * return the one-hop 308 Location to the canonical custom domain.
+ * Domainless boards (no primaryDomain) return null — serve in place.
+ */
+declare function getCavunoAppCanonicalRedirectUrl(params: {
+    currentHost: string | null;
+    /**
+     * From `board.context().primaryDomain` — the board's active primary
+     * custom domain hostname, or null when domainless.
+     */
+    primaryDomain: string | null | undefined;
+    /** Full request URL or path+query; path+query is preserved on the hop. */
+    requestUrl?: string | null;
+    defaultPath?: string;
+}): string | null;
+
 /**
  * Single-flight session refresh — dedupes concurrent refreshes for the same
  * session WITHIN one process/isolate (the rotation race, ADR-0057 wart #4,
@@ -109,4 +161,4 @@ declare function currentPathFromReferer(referer: string | null): string;
  */
 declare function createSessionRefresher(board: Pick<BoardSdk, 'auth' | 'client'>): (session: BoardSession) => Promise<BoardSession | null>;
 
-export { BOARD_ACCESS_COOKIE_NAME, type BoardSession, SESSION_COOKIE_NAME, clearGrantCookie, clearSessionCookie, createSessionRefresher, currentPathFromReferer, grantCookieName, isExpiringSoon, parseGrantCookie, parseSessionCookie, safeRedirectPath, serializeGrantCookie, serializeSessionCookie, sessionCookieName };
+export { BOARD_ACCESS_COOKIE_NAME, type BoardSession, SESSION_COOKIE_NAME, clearGrantCookie, clearSessionCookie, createSessionRefresher, currentPathFromReferer, getCavunoAppCanonicalRedirectUrl, grantCookieName, isCavunoAppServingHost, isExpiringSoon, parseGrantCookie, parseSessionCookie, safeRedirectPath, serializeGrantCookie, serializeSessionCookie, sessionCookieName };

package/dist/server.js

@@ -26,7 +26,9 @@ __export(server_exports, {
   clearSessionCookie: () => clearSessionCookie,
   createSessionRefresher: () => createSessionRefresher,
   currentPathFromReferer: () => currentPathFromReferer,
+  getCavunoAppCanonicalRedirectUrl: () => getCavunoAppCanonicalRedirectUrl,
   grantCookieName: () => grantCookieName,
+  isCavunoAppServingHost: () => isCavunoAppServingHost,
   isExpiringSoon: () => isExpiringSoon,
   parseGrantCookie: () => parseGrantCookie,
   parseSessionCookie: () => parseSessionCookie,
@@ -154,6 +156,45 @@ function currentPathFromReferer(referer) {
   }
 }
 
+// src/server/canonical-host-redirect.ts
+var CAVUNO_APP_SERVING_SUFFIX = ".cavuno.app";
+function normalizeHostname(host) {
+  if (!host) return "";
+  return host.toLowerCase().split(":")[0] ?? "";
+}
+function extractPathAndSearch(url) {
+  if (!url) return "/";
+  try {
+    const parsed = new URL(url, "https://placeholder.invalid");
+    return `${parsed.pathname}${parsed.search}` || "/";
+  } catch {
+    return "/";
+  }
+}
+function isCavunoAppServingHost(hostname) {
+  const h = hostname.toLowerCase();
+  if (!h.endsWith(CAVUNO_APP_SERVING_SUFFIX)) return false;
+  if (h === "cavuno.app") return false;
+  if (h.startsWith("preview-")) return false;
+  return true;
+}
+function getCavunoAppCanonicalRedirectUrl(params) {
+  const { currentHost, primaryDomain, requestUrl, defaultPath = "/" } = params;
+  const canonical = primaryDomain?.trim().toLowerCase().replace(/\.+$/, "");
+  if (!canonical) {
+    return null;
+  }
+  const hostname = normalizeHostname(currentHost);
+  if (!hostname || !isCavunoAppServingHost(hostname)) {
+    return null;
+  }
+  if (hostname === canonical) {
+    return null;
+  }
+  const path = requestUrl != null && requestUrl !== "" ? extractPathAndSearch(requestUrl) : defaultPath;
+  return `https://${canonical}${path.startsWith("/") ? path : `/${path}`}`;
+}
+
 // src/errors.ts
 function isBoardApiError(e) {
   return e instanceof Error && e.name === "BoardApiError" && typeof e.status === "number" && typeof e.code === "string";

package/dist/server.mjs

@@ -115,6 +115,45 @@ function currentPathFromReferer(referer) {
   }
 }
 
+// src/server/canonical-host-redirect.ts
+var CAVUNO_APP_SERVING_SUFFIX = ".cavuno.app";
+function normalizeHostname(host) {
+  if (!host) return "";
+  return host.toLowerCase().split(":")[0] ?? "";
+}
+function extractPathAndSearch(url) {
+  if (!url) return "/";
+  try {
+    const parsed = new URL(url, "https://placeholder.invalid");
+    return `${parsed.pathname}${parsed.search}` || "/";
+  } catch {
+    return "/";
+  }
+}
+function isCavunoAppServingHost(hostname) {
+  const h = hostname.toLowerCase();
+  if (!h.endsWith(CAVUNO_APP_SERVING_SUFFIX)) return false;
+  if (h === "cavuno.app") return false;
+  if (h.startsWith("preview-")) return false;
+  return true;
+}
+function getCavunoAppCanonicalRedirectUrl(params) {
+  const { currentHost, primaryDomain, requestUrl, defaultPath = "/" } = params;
+  const canonical = primaryDomain?.trim().toLowerCase().replace(/\.+$/, "");
+  if (!canonical) {
+    return null;
+  }
+  const hostname = normalizeHostname(currentHost);
+  if (!hostname || !isCavunoAppServingHost(hostname)) {
+    return null;
+  }
+  if (hostname === canonical) {
+    return null;
+  }
+  const path = requestUrl != null && requestUrl !== "" ? extractPathAndSearch(requestUrl) : defaultPath;
+  return `https://${canonical}${path.startsWith("/") ? path : `/${path}`}`;
+}
+
 // src/errors.ts
 function isBoardApiError(e) {
   return e instanceof Error && e.name === "BoardApiError" && typeof e.status === "number" && typeof e.code === "string";
@@ -172,7 +211,9 @@ export {
   clearSessionCookie,
   createSessionRefresher,
   currentPathFromReferer,
+  getCavunoAppCanonicalRedirectUrl,
   grantCookieName,
+  isCavunoAppServingHost,
   isExpiringSoon,
   parseGrantCookie,
   parseSessionCookie,

package/dist/sitemap.d.mts

@@ -1,7 +1,9 @@
 import { BoardSdk } from './index.mjs';
-import './jobs-DMH3Ytoq.mjs';
-import './board-CBry4f7H.mjs';
-import './salaries-01g4wK8y.mjs';
+import './_spec-DRbgPIlN.mjs';
+import './search-DYUQzCq_.mjs';
+import './board-DCiNpgFf.mjs';
+import './jobs-DhePKSRe.mjs';
+import './salaries-D6SUVMmt.mjs';
 
 /**
  * Sitemap primitives — the pure XML + bucket-filename logic behind a board

package/dist/sitemap.d.ts

@@ -1,7 +1,9 @@
 import { BoardSdk } from './index.js';
-import './jobs-DMH3Ytoq.js';
-import './board-tV-zcaHs.js';
-import './salaries-CaGlcCC6.js';
+import './_spec-DRbgPIlN.js';
+import './search-BalPAS0P.js';
+import './board-BxPUtrOl.js';
+import './jobs-DAGAVHQL.js';
+import './salaries-cqb78kg0.js';
 
 /**
  * Sitemap primitives — the pure XML + bucket-filename logic behind a board

package/dist/suggest.d.mts

@@ -0,0 +1,70 @@
+import { S as SuggestionItem, a as SearchSuggestQuery, F as FetchOptions, b as SuggestResult } from './search-DYUQzCq_.mjs';
+import './_spec-DRbgPIlN.mjs';
+
+/**
+ * `@cavuno/board/suggest` — framework-agnostic headless search-suggest
+ * controller (Algolia autocomplete-core pattern).
+ *
+ * Owns debounce, abort, and stale-drop so tenant frontends don't re-invent
+ * them. Patches ship via npm update. Zero runtime deps; isomorphic
+ * (`globalThis` timers only — never `window`/`document`).
+ *
+ * The ONE permitted view-level filter is excluding currently-applied company
+ * slugs from results (type `company` only). Wire data is never reshaped
+ * otherwise — order stays server-ranked.
+ */
+
+interface SuggestControllerOptions {
+    /** Minimum characters before querying (default 2 — hosted parity). */
+    minChars?: number;
+    /** Debounce for setQuery → request (default 250ms). */
+    debounceMs?: number;
+    /** Server `limit` passed through (1–25). */
+    limit?: number;
+}
+type SuggestStatus = 'idle' | 'loading' | 'ready' | 'error';
+interface SuggestState {
+    readonly query: string;
+    /**
+     * Server-ranked items. Previous items are RETAINED while a new request
+     * is loading (no flash-to-empty — hosted behavior).
+     */
+    readonly items: readonly SuggestionItem[];
+    /**
+     * `'loading'` from the moment a qualifying query is set (debounce window
+     * included) until that query's request settles. `'idle'` only when the
+     * query is empty/below minChars. `'ready'` / `'error'` after settle.
+     */
+    readonly status: SuggestStatus;
+    readonly error: unknown;
+}
+interface SuggestController {
+    setQuery(query: string): void;
+    /** Company slugs to hide from results (e.g. the currently-applied filter). */
+    setExcludedCompanySlugs(slugs: readonly string[]): void;
+    getState(): SuggestState;
+    /** Returns an unsubscribe function. Compatible with useSyncExternalStore. */
+    subscribe(listener: () => void): () => void;
+    dispose(): void;
+}
+type SuggestBoard = {
+    search: {
+        suggest(q?: SearchSuggestQuery, o?: FetchOptions): Promise<SuggestResult>;
+    };
+};
+/**
+ * Create a headless suggest controller bound to a board client (or any
+ * object exposing `search.suggest`).
+ *
+ * @example
+ * import { createBoardClient } from '@cavuno/board';
+ * import { createSuggestController } from '@cavuno/board/suggest';
+ *
+ * const board = createBoardClient({ board: 'pk_…' });
+ * const suggest = createSuggestController(board);
+ * suggest.subscribe(() => render(suggest.getState()));
+ * suggest.setQuery('acme');
+ */
+declare function createSuggestController(board: SuggestBoard, options?: SuggestControllerOptions): SuggestController;
+
+export { type SuggestController, type SuggestControllerOptions, type SuggestState, type SuggestStatus, createSuggestController };

package/dist/suggest.d.ts

@@ -0,0 +1,70 @@
+import { S as SuggestionItem, a as SearchSuggestQuery, F as FetchOptions, b as SuggestResult } from './search-BalPAS0P.js';
+import './_spec-DRbgPIlN.js';
+
+/**
+ * `@cavuno/board/suggest` — framework-agnostic headless search-suggest
+ * controller (Algolia autocomplete-core pattern).
+ *
+ * Owns debounce, abort, and stale-drop so tenant frontends don't re-invent
+ * them. Patches ship via npm update. Zero runtime deps; isomorphic
+ * (`globalThis` timers only — never `window`/`document`).
+ *
+ * The ONE permitted view-level filter is excluding currently-applied company
+ * slugs from results (type `company` only). Wire data is never reshaped
+ * otherwise — order stays server-ranked.
+ */
+
+interface SuggestControllerOptions {
+    /** Minimum characters before querying (default 2 — hosted parity). */
+    minChars?: number;
+    /** Debounce for setQuery → request (default 250ms). */
+    debounceMs?: number;
+    /** Server `limit` passed through (1–25). */
+    limit?: number;
+}
+type SuggestStatus = 'idle' | 'loading' | 'ready' | 'error';
+interface SuggestState {
+    readonly query: string;
+    /**
+     * Server-ranked items. Previous items are RETAINED while a new request
+     * is loading (no flash-to-empty — hosted behavior).
+     */
+    readonly items: readonly SuggestionItem[];
+    /**
+     * `'loading'` from the moment a qualifying query is set (debounce window
+     * included) until that query's request settles. `'idle'` only when the
+     * query is empty/below minChars. `'ready'` / `'error'` after settle.
+     */
+    readonly status: SuggestStatus;
+    readonly error: unknown;
+}
+interface SuggestController {
+    setQuery(query: string): void;
+    /** Company slugs to hide from results (e.g. the currently-applied filter). */
+    setExcludedCompanySlugs(slugs: readonly string[]): void;
+    getState(): SuggestState;
+    /** Returns an unsubscribe function. Compatible with useSyncExternalStore. */
+    subscribe(listener: () => void): () => void;
+    dispose(): void;
+}
+type SuggestBoard = {
+    search: {
+        suggest(q?: SearchSuggestQuery, o?: FetchOptions): Promise<SuggestResult>;
+    };
+};
+/**
+ * Create a headless suggest controller bound to a board client (or any
+ * object exposing `search.suggest`).
+ *
+ * @example
+ * import { createBoardClient } from '@cavuno/board';
+ * import { createSuggestController } from '@cavuno/board/suggest';
+ *
+ * const board = createBoardClient({ board: 'pk_…' });
+ * const suggest = createSuggestController(board);
+ * suggest.subscribe(() => render(suggest.getState()));
+ * suggest.setQuery('acme');
+ */
+declare function createSuggestController(board: SuggestBoard, options?: SuggestControllerOptions): SuggestController;
+
+export { type SuggestController, type SuggestControllerOptions, type SuggestState, type SuggestStatus, createSuggestController };

package/dist/suggest.js

@@ -0,0 +1,165 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/suggest/index.ts
+var suggest_exports = {};
+__export(suggest_exports, {
+  createSuggestController: () => createSuggestController
+});
+module.exports = __toCommonJS(suggest_exports);
+var DEFAULT_MIN_CHARS = 2;
+var DEFAULT_DEBOUNCE_MS = 250;
+function isAbortError(error) {
+  return typeof DOMException !== "undefined" && error instanceof DOMException && error.name === "AbortError" || error instanceof Error && error.name === "AbortError";
+}
+function applyExclusions(items, excluded) {
+  if (excluded.size === 0) return items.slice();
+  return items.filter(
+    (item) => !(item.type === "company" && excluded.has(item.slug.toLowerCase()))
+  );
+}
+function createSuggestController(board, options) {
+  const minChars = options?.minChars ?? DEFAULT_MIN_CHARS;
+  const debounceMs = options?.debounceMs ?? DEFAULT_DEBOUNCE_MS;
+  const limit = options?.limit;
+  let disposed = false;
+  let state = {
+    query: "",
+    items: [],
+    status: "idle",
+    error: null
+  };
+  let rawItems = [];
+  let excluded = /* @__PURE__ */ new Set();
+  let sequence = 0;
+  let timer = null;
+  let abortController = null;
+  const listeners = /* @__PURE__ */ new Set();
+  function notify() {
+    for (const listener of listeners) listener();
+  }
+  function setState(next) {
+    state = next;
+    notify();
+  }
+  function cancelTimer() {
+    if (timer !== null) {
+      globalThis.clearTimeout(timer);
+      timer = null;
+    }
+  }
+  function abortInFlight() {
+    if (abortController) {
+      abortController.abort();
+      abortController = null;
+    }
+  }
+  function runRequest(query) {
+    const seq = ++sequence;
+    abortInFlight();
+    const controller = new AbortController();
+    abortController = controller;
+    const suggestQuery = { q: query };
+    if (limit !== void 0) suggestQuery.limit = limit;
+    void board.search.suggest(suggestQuery, { signal: controller.signal }).then((result) => {
+      if (disposed || seq !== sequence) return;
+      abortController = null;
+      rawItems = result.items;
+      setState({
+        query: state.query,
+        items: applyExclusions(rawItems, excluded),
+        status: "ready",
+        error: null
+      });
+    }).catch((error) => {
+      if (disposed || seq !== sequence) return;
+      if (isAbortError(error)) return;
+      abortController = null;
+      setState({
+        query: state.query,
+        items: state.items,
+        status: "error",
+        error
+      });
+    });
+  }
+  return {
+    setQuery(query) {
+      if (disposed) return;
+      const trimmed = query.trim();
+      cancelTimer();
+      if (trimmed.length < minChars) {
+        sequence += 1;
+        abortInFlight();
+        rawItems = [];
+        setState({
+          query,
+          items: [],
+          status: "idle",
+          error: null
+        });
+        return;
+      }
+      sequence += 1;
+      abortInFlight();
+      setState({
+        query,
+        items: state.items,
+        status: "loading",
+        error: null
+      });
+      timer = globalThis.setTimeout(() => {
+        timer = null;
+        if (disposed) return;
+        runRequest(trimmed);
+      }, debounceMs);
+    },
+    setExcludedCompanySlugs(slugs) {
+      if (disposed) return;
+      excluded = new Set(
+        slugs.map((s) => s.trim().toLowerCase()).filter(Boolean)
+      );
+      setState({
+        query: state.query,
+        items: applyExclusions(rawItems, excluded),
+        status: state.status,
+        error: state.error
+      });
+    },
+    getState() {
+      return state;
+    },
+    subscribe(listener) {
+      if (disposed) return () => {
+      };
+      listeners.add(listener);
+      return () => {
+        listeners.delete(listener);
+      };
+    },
+    dispose() {
+      if (disposed) return;
+      disposed = true;
+      cancelTimer();
+      abortInFlight();
+      sequence += 1;
+      listeners.clear();
+    }
+  };
+}

package/dist/suggest.mjs

@@ -0,0 +1,144 @@
+// src/suggest/index.ts
+var DEFAULT_MIN_CHARS = 2;
+var DEFAULT_DEBOUNCE_MS = 250;
+function isAbortError(error) {
+  return typeof DOMException !== "undefined" && error instanceof DOMException && error.name === "AbortError" || error instanceof Error && error.name === "AbortError";
+}
+function applyExclusions(items, excluded) {
+  if (excluded.size === 0) return items.slice();
+  return items.filter(
+    (item) => !(item.type === "company" && excluded.has(item.slug.toLowerCase()))
+  );
+}
+function createSuggestController(board, options) {
+  const minChars = options?.minChars ?? DEFAULT_MIN_CHARS;
+  const debounceMs = options?.debounceMs ?? DEFAULT_DEBOUNCE_MS;
+  const limit = options?.limit;
+  let disposed = false;
+  let state = {
+    query: "",
+    items: [],
+    status: "idle",
+    error: null
+  };
+  let rawItems = [];
+  let excluded = /* @__PURE__ */ new Set();
+  let sequence = 0;
+  let timer = null;
+  let abortController = null;
+  const listeners = /* @__PURE__ */ new Set();
+  function notify() {
+    for (const listener of listeners) listener();
+  }
+  function setState(next) {
+    state = next;
+    notify();
+  }
+  function cancelTimer() {
+    if (timer !== null) {
+      globalThis.clearTimeout(timer);
+      timer = null;
+    }
+  }
+  function abortInFlight() {
+    if (abortController) {
+      abortController.abort();
+      abortController = null;
+    }
+  }
+  function runRequest(query) {
+    const seq = ++sequence;
+    abortInFlight();
+    const controller = new AbortController();
+    abortController = controller;
+    const suggestQuery = { q: query };
+    if (limit !== void 0) suggestQuery.limit = limit;
+    void board.search.suggest(suggestQuery, { signal: controller.signal }).then((result) => {
+      if (disposed || seq !== sequence) return;
+      abortController = null;
+      rawItems = result.items;
+      setState({
+        query: state.query,
+        items: applyExclusions(rawItems, excluded),
+        status: "ready",
+        error: null
+      });
+    }).catch((error) => {
+      if (disposed || seq !== sequence) return;
+      if (isAbortError(error)) return;
+      abortController = null;
+      setState({
+        query: state.query,
+        items: state.items,
+        status: "error",
+        error
+      });
+    });
+  }
+  return {
+    setQuery(query) {
+      if (disposed) return;
+      const trimmed = query.trim();
+      cancelTimer();
+      if (trimmed.length < minChars) {
+        sequence += 1;
+        abortInFlight();
+        rawItems = [];
+        setState({
+          query,
+          items: [],
+          status: "idle",
+          error: null
+        });
+        return;
+      }
+      sequence += 1;
+      abortInFlight();
+      setState({
+        query,
+        items: state.items,
+        status: "loading",
+        error: null
+      });
+      timer = globalThis.setTimeout(() => {
+        timer = null;
+        if (disposed) return;
+        runRequest(trimmed);
+      }, debounceMs);
+    },
+    setExcludedCompanySlugs(slugs) {
+      if (disposed) return;
+      excluded = new Set(
+        slugs.map((s) => s.trim().toLowerCase()).filter(Boolean)
+      );
+      setState({
+        query: state.query,
+        items: applyExclusions(rawItems, excluded),
+        status: state.status,
+        error: state.error
+      });
+    },
+    getState() {
+      return state;
+    },
+    subscribe(listener) {
+      if (disposed) return () => {
+      };
+      listeners.add(listener);
+      return () => {
+        listeners.delete(listener);
+      };
+    },
+    dispose() {
+      if (disposed) return;
+      disposed = true;
+      cancelTimer();
+      abortInFlight();
+      sequence += 1;
+      listeners.clear();
+    }
+  };
+}
+export {
+  createSuggestController
+};