@cavuno/board 1.44.0 → 2.0.1

package/dist/bin.mjs

@@ -189,6 +189,25 @@ function isOffendingSink(lines, index) {
   if (!hasCookieWriteSink(stripped)) return false;
   return DOMAIN_SCOPE.test(statementWindow(lines, index));
 }
+var GENERATED_DIRS = /* @__PURE__ */ new Set([
+  "paraglide",
+  "generated",
+  "_generated",
+  "__generated__"
+]);
+var GENERATED_FILE = /\.gen\.(?:ts|tsx|js|jsx|mjs|cjs)$/;
+var GENERATED_BANNER = /@generated|generated by|generated from|auto-?generated|do not edit|don't edit/i;
+var BANNER_SCAN_LINES = 5;
+function hasGeneratedBanner(text) {
+  const lines = text.split(/\r?\n/);
+  const limit = Math.min(lines.length, BANNER_SCAN_LINES);
+  for (let i = 0; i < limit; i += 1) {
+    const line = lines[i];
+    if (!isCommentLine(line)) return false;
+    if (GENERATED_BANNER.test(line)) return true;
+  }
+  return false;
+}
 function walkSourceFiles(dir, out) {
   let entries;
   try {
@@ -198,6 +217,7 @@ function walkSourceFiles(dir, out) {
   }
   for (const name of entries) {
     if (name === "node_modules" || name.startsWith(".")) continue;
+    if (GENERATED_DIRS.has(name) || GENERATED_FILE.test(name)) continue;
     const full = join(dir, name);
     let st;
     try {
@@ -237,6 +257,7 @@ function checkCookieCodecConformance(projectRoot) {
     } catch {
       continue;
     }
+    if (hasGeneratedBanner(text)) continue;
     const lines = text.split(/\r?\n/);
     for (let i = 0; i < lines.length; i += 1) {
       if (!isOffendingSink(lines, i)) continue;
@@ -247,7 +268,7 @@ function checkCookieCodecConformance(projectRoot) {
     return [
       COOKIE(
         "pass",
-        "no domain-scoped Set-Cookie or document.cookie writes in src/"
+        "no domain-scoped Set-Cookie or document.cookie writes in app-authored src/ (generated output skipped)"
       )
     ];
   }
@@ -373,86 +394,18 @@ async function runReadProbes(fetchImpl, frontendUrl) {
   ];
 }
 
-// src/doctor/sandbox.ts
-var SANDBOX_GATE = record("sandbox.persona-gate", 1);
-var EXPECTED_PERSONA_COUNT = 8;
-function skipSandboxPersonaGate(reason) {
-  return SANDBOX_GATE("skip", reason);
-}
-async function checkSandboxPersonaGate(fetchImpl, env, boardContext) {
-  if (boardContext === null) {
-    return SANDBOX_GATE(
-      "skip",
-      "board did not resolve \u2014 fix static.board first"
-    );
-  }
-  const url = `${apiBase(env.apiUrl)}/v1/boards/${encodeURIComponent(env.boardKey)}/sandbox/personas`;
-  const result = await probe(fetchImpl, url);
-  if (boardContext.sandbox !== true) {
-    return result.status === 404 ? SANDBOX_GATE(
-      "pass",
-      "sandbox persona endpoint refuses (404) on a non-sandbox board"
-    ) : SANDBOX_GATE(
-      "fail",
-      `sandbox persona endpoint is reachable on a NON-sandbox board (HTTP ${result.status}) \u2014 the capability gate is not holding`
-    );
-  }
-  if (!result.ok) {
-    return SANDBOX_GATE(
-      "fail",
-      `sandbox persona roster did not resolve (HTTP ${result.status}) \u2014 the persona seed may have failed`
-    );
-  }
-  let personas;
-  let password;
-  try {
-    const parsed = JSON.parse(result.body);
-    personas = parsed.personas;
-    password = parsed.password;
-  } catch {
-    return SANDBOX_GATE(
-      "fail",
-      "sandbox persona endpoint returned 200 but not JSON \u2014 proxy or captive portal in the way?"
-    );
-  }
-  if (!Array.isArray(personas) || personas.length !== EXPECTED_PERSONA_COUNT) {
-    return SANDBOX_GATE(
-      "fail",
-      `expected ${EXPECTED_PERSONA_COUNT} personas, got ${Array.isArray(personas) ? personas.length : "a non-array"} \u2014 the persona seed is incomplete`
-    );
-  }
-  const unseeded = personas.filter((persona) => persona.seeded !== true);
-  if (unseeded.length > 0) {
-    const ids = unseeded.map((persona) => typeof persona.id === "string" ? persona.id : "?").join(", ");
-    return SANDBOX_GATE(
-      "fail",
-      `${unseeded.length} of ${EXPECTED_PERSONA_COUNT} personas are not seeded on the board (${ids}) \u2014 the persona seed failed or was purged; run POST /v1/boards/{key}/sandbox/reseed to restore the roster`
-    );
-  }
-  if (typeof password !== "string" || password.length === 0) {
-    return SANDBOX_GATE(
-      "fail",
-      "roster present but the published password is missing"
-    );
-  }
-  return SANDBOX_GATE(
-    "pass",
-    `sandbox roster complete and seeded (${EXPECTED_PERSONA_COUNT} personas)`
-  );
-}
-
 // src/doctor/theme.ts
 import { createHash } from "crypto";
 import { existsSync as existsSync2, readFileSync as readFileSync3 } from "fs";
 import { join as join2 } from "path";
 var THEME = record("static.theme", 1);
-function checkThemeFreshness(projectRoot, context) {
+function checkThemeFreshness(projectRoot) {
   const tokensPath = join2(projectRoot, "src/tokens.css");
   if (!existsSync2(tokensPath)) {
     return [
       THEME(
         "skip",
-        "board is not tokens-migrated (ADR-0065) \u2014 no src/tokens.css"
+        "no src/tokens.css \u2014 local theme freshness check not applicable"
       )
     ];
   }
@@ -469,232 +422,9 @@ function checkThemeFreshness(projectRoot, context) {
       )
     ];
   }
-  if (!context) {
-    return [
-      THEME(
-        "skip",
-        "local derivations fresh; platform snapshot unverified \u2014 board context unavailable"
-      )
-    ];
-  }
-  if (context.themeSnapshotHash !== tokensHash) {
-    return [
-      THEME(
-        "fail",
-        `platform theme snapshot is ${context.themeSnapshotHash ? "stale" : "missing"} \u2014 emails render ${context.themeSnapshotHash ? "an old" : "the legacy"} theme; sync it: \`npm run gen:theme -- --payload | npx convex run boards/themeSnapshot:sync\``
-      )
-    ];
-  }
   return [
-    THEME(
-      "pass",
-      `tokens.css \u21C4 resolved module \u21C4 platform snapshot (${tokensHash.slice(0, 12)}\u2026)`
-    )
-  ];
-}
-
-// src/doctor/writes.ts
-var WRITE = {
-  board: record("write.board", 3),
-  register: record("write.register", 3),
-  login: record("write.login", 3),
-  email: record("write.email", 3),
-  apply: record("write.apply", 3),
-  alert: record("write.alert", 3)
-};
-var DEPENDENT_CHECKS = [
-  WRITE.register,
-  WRITE.login,
-  WRITE.email,
-  WRITE.apply,
-  WRITE.alert
-];
-function skipWriteProbes(reason) {
-  return Object.values(WRITE).map((make) => make("skip", reason));
-}
-var FETCH_TIMEOUT_MS2 = 1e4;
-var RESEND_API_BASE = "https://api.resend.com";
-async function request(fetchImpl, url, init) {
-  try {
-    const response = await fetchImpl(url, {
-      signal: AbortSignal.timeout(FETCH_TIMEOUT_MS2),
-      ...init
-    });
-    let json = null;
-    try {
-      json = await response.json();
-    } catch {
-      json = null;
-    }
-    return { ok: response.ok, status: response.status, json };
-  } catch (error) {
-    return {
-      ok: false,
-      status: 0,
-      json: { error: error instanceof Error ? error.message : String(error) }
-    };
-  }
-}
-function post(fetchImpl, url, body, bearer) {
-  return request(fetchImpl, url, {
-    method: "POST",
-    headers: {
-      "content-type": "application/json",
-      accept: "application/json",
-      ...bearer ? { authorization: `Bearer ${bearer}` } : {}
-    },
-    body: JSON.stringify(body)
-  });
-}
-var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
-async function observeVerificationEmail(fetchImpl, apiKey, recipient, pollMs, timeoutMs) {
-  const deadline = Date.now() + timeoutMs;
-  const subjectMarker = `[To: ${recipient}]`;
-  do {
-    const list = await request(
-      fetchImpl,
-      `${RESEND_API_BASE}/emails?limit=20`,
-      {
-        headers: { authorization: `Bearer ${apiKey}` }
-      }
-    );
-    if (!list.ok) {
-      return WRITE.email(
-        "fail",
-        `Resend list returned HTTP ${list.status} \u2014 wrong RESEND_API_KEY?`
-      );
-    }
-    const items = list.json?.data ?? [];
-    const match = items.find(
-      (item) => item.subject?.includes(subjectMarker) || item.to?.includes(recipient)
-    );
-    if (match) {
-      return WRITE.email(
-        "pass",
-        `verification send observed in Resend for ${recipient}`
-      );
-    }
-    await sleep(pollMs);
-  } while (Date.now() < deadline);
-  return WRITE.email(
-    "fail",
-    `no verification send for ${recipient} appeared in Resend within ${timeoutMs}ms`
-  );
-}
-async function runWriteProbes(options) {
-  const { fetchImpl } = options;
-  const base = `${apiBase(options.env.apiUrl)}/v1/boards/${encodeURIComponent(options.env.boardKey)}`;
-  const nonce = options.nonce ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}`;
-  const email = `doctor+${nonce}@cavuno.com`;
-  const password = `doctor-probe-${nonce}-A1!`;
-  let context = options.boardContext ?? null;
-  if (context === null) {
-    const r = await request(fetchImpl, base);
-    if (!r.ok) {
-      return [
-        WRITE.board("fail", `board context did not resolve (HTTP ${r.status})`),
-        ...DEPENDENT_CHECKS.map(
-          (make) => make("skip", "not run \u2014 the write gate failed (see write.board)")
-        )
-      ];
-    }
-    context = r.json ?? {};
-  }
-  if (context.sandbox !== true) {
-    return [
-      WRITE.board(
-        "fail",
-        "refusing write probes: this board is not the platform sandbox (`sandbox` is not true) \u2014 point PUBLIC_CAVUNO_BOARD at the sandbox pk_"
-      ),
-      ...DEPENDENT_CHECKS.map(
-        (make) => make("skip", "not run \u2014 the write gate failed (see write.board)")
-      )
-    ];
-  }
-  const results = [
-    WRITE.board("pass", "board is the platform sandbox")
+    THEME("pass", `tokens.css \u21C4 resolved module (${tokensHash.slice(0, 12)}\u2026)`)
   ];
-  const registered = await post(fetchImpl, `${base}/auth/register`, {
-    role: "candidate",
-    method: "emailpass",
-    email,
-    password,
-    displayName: "Doctor Probe"
-  });
-  const sessionOk = (r) => r.ok && typeof r.json?.accessToken === "string";
-  results.push(
-    sessionOk(registered) ? WRITE.register("pass", `candidate registered (${email})`) : WRITE.register(
-      "fail",
-      `register returned HTTP ${registered.status}` + (registered.status === 429 ? " \u2014 rate-limited: register allows 5 signups / 15 min per IP; wait before rerunning" : "")
-    )
-  );
-  let accessToken = null;
-  if (sessionOk(registered)) {
-    const login = await post(fetchImpl, `${base}/auth/login`, {
-      email,
-      password
-    });
-    if (sessionOk(login)) {
-      accessToken = login.json.accessToken;
-      results.push(WRITE.login("pass", "emailpass login returns a session"));
-    } else {
-      results.push(WRITE.login("fail", `login returned HTTP ${login.status}`));
-    }
-  } else {
-    results.push(WRITE.login("skip", "not run \u2014 register failed"));
-  }
-  if (!sessionOk(registered)) {
-    results.push(WRITE.email("skip", "not run \u2014 register failed"));
-  } else if (!options.resendApiKey) {
-    results.push(
-      WRITE.email(
-        "skip",
-        "RESEND_API_KEY not set \u2014 the verification send was NOT verified (platform-operator check)"
-      )
-    );
-  } else {
-    results.push(
-      await observeVerificationEmail(
-        fetchImpl,
-        options.resendApiKey,
-        email,
-        options.emailPollMs ?? 2e3,
-        options.emailTimeoutMs ?? 3e4
-      )
-    );
-  }
-  if (!accessToken) {
-    results.push(WRITE.apply("skip", "not run \u2014 no session (see above)"));
-  } else {
-    const listing = await request(fetchImpl, `${base}/jobs?limit=1`);
-    const card = listing.json?.data?.[0];
-    if (!listing.ok || !card?.slug) {
-      results.push(
-        WRITE.apply(
-          "fail",
-          listing.ok ? "the board has no jobs to apply to \u2014 is the sandbox seeded?" : `jobs listing returned HTTP ${listing.status}`
-        )
-      );
-    } else {
-      const applied = await post(
-        fetchImpl,
-        `${base}/jobs/${encodeURIComponent(card.slug)}/apply`,
-        {},
-        accessToken
-      );
-      results.push(
-        applied.ok && typeof applied.json?.id === "string" ? WRITE.apply("pass", `applied to ${card.slug}`) : WRITE.apply("fail", `apply returned HTTP ${applied.status}`)
-      );
-    }
-  }
-  const alert = await post(fetchImpl, `${base}/job-alerts`, {
-    email,
-    consent: true
-  });
-  results.push(
-    alert.ok ? WRITE.alert("pass", "job-alert subscription accepted") : WRITE.alert("fail", `job-alerts returned HTTP ${alert.status}`)
-  );
-  return results;
 }
 
 // src/doctor/run.ts
@@ -733,31 +463,21 @@ async function checkBoardResolves(fetchImpl, env) {
     `${apiBase(env.apiUrl)}/v1/boards/${encodeURIComponent(env.boardKey)}`
   );
   if (!result.ok) {
-    return {
-      result: STATIC_BOARD(
-        "fail",
-        `board did not resolve for this key (HTTP ${result.status}) \u2014 revoked or wrong key?`
-      ),
-      context: null
-    };
+    return STATIC_BOARD(
+      "fail",
+      `board did not resolve for this key (HTTP ${result.status}) \u2014 revoked or wrong key?`
+    );
   }
-  let parsed = null;
   try {
-    parsed = JSON.parse(result.body);
+    const parsed = JSON.parse(result.body);
     if (typeof parsed !== "object" || parsed === null) throw new Error("shape");
   } catch {
-    return {
-      result: STATIC_BOARD(
-        "fail",
-        "board endpoint returned 200 but not JSON \u2014 proxy or captive portal in the way?"
-      ),
-      context: null
-    };
+    return STATIC_BOARD(
+      "fail",
+      "board endpoint returned 200 but not JSON \u2014 proxy or captive portal in the way?"
+    );
   }
-  return {
-    result: STATIC_BOARD("pass", "publishable key resolves the board"),
-    context: parsed
-  };
+  return STATIC_BOARD("pass", "publishable key resolves the board");
 }
 var SKILL_ROOTS = [
   ".claude/skills",
@@ -820,46 +540,19 @@ async function runDoctor(options) {
   } else {
     results.push(STATIC_API("skip", "PUBLIC_CAVUNO_API_URL not set"));
   }
-  let boardContext = null;
   if (envOk) {
-    const resolved = await checkBoardResolves(fetchImpl, env);
-    boardContext = resolved.context;
-    results.push(resolved.result);
+    results.push(await checkBoardResolves(fetchImpl, env));
   } else {
     results.push(STATIC_BOARD("skip", "env checks failed \u2014 fix them first"));
   }
   results.push(checkSkillsFreshness(options.projectRoot ?? process.cwd()));
-  results.push(
-    ...checkThemeFreshness(options.projectRoot ?? process.cwd(), boardContext)
-  );
+  results.push(...checkThemeFreshness(options.projectRoot ?? process.cwd()));
   results.push(
     ...checkCookieCodecConformance(options.projectRoot ?? process.cwd())
   );
-  results.push(
-    envOk ? await checkSandboxPersonaGate(fetchImpl, env, boardContext) : skipSandboxPersonaGate("env checks failed \u2014 fix them first")
-  );
   results.push(
     ...options.frontendUrl ? await runReadProbes(fetchImpl, options.frontendUrl) : skipReadProbes("no --frontend <url> given")
   );
-  if (!options.sandbox) {
-    results.push(
-      ...skipWriteProbes(
-        "write probes not enabled \u2014 run with --sandbox against the platform sandbox"
-      )
-    );
-  } else if (!envOk) {
-    results.push(...skipWriteProbes("env checks failed \u2014 fix them first"));
-  } else {
-    results.push(
-      ...await runWriteProbes({
-        env,
-        fetchImpl,
-        resendApiKey: options.resendApiKey,
-        nonce: options.writeProbeNonce,
-        boardContext
-      })
-    );
-  }
   return { results, summary: summarize(results) };
 }
 
@@ -911,11 +604,7 @@ async function doctor(argv) {
       apiUrl: process.env.PUBLIC_CAVUNO_API_URL,
       boardKey: process.env.PUBLIC_CAVUNO_BOARD
     },
-    frontendUrl,
-    // Tier-3 write probes: opt-in via --sandbox, and refused server-side
-    // unless the resolved board is platform-marked test (writes.ts gate).
-    sandbox: argv.includes("--sandbox"),
-    resendApiKey: process.env.RESEND_API_KEY
+    frontendUrl
   });
   console.log("\n@cavuno/board doctor");
   for (const result of results) {

package/dist/{board-DZCw7A6P.d.ts → board-DKXyxwNN.d.ts}

@@ -1,11 +1,11 @@
-import { S as Schemas } from './_spec-CoL3oYpG.js';
+import { S as Schemas } from './_spec-sW85fuvT.js';
 
 type PublicBoard = Schemas['PublicBoardContext'];
 type PublicBoardFeatures = PublicBoard['features'];
 type PublicBoardAnalytics = PublicBoard['analytics'];
 type PublicBoardTheme = NonNullable<PublicBoard['theme']>;
 /**
- * An operator-defined custom job-field definition (CAV-294). Board-wide;
+ * An operator-defined custom job-field definition. Board-wide;
  * use it to render and localize a job's opaque `customFieldValues` (resolve
  * option `key`s → labels, honour field `type` and display order). Shared with
  * the Operator API's custom-field surface (one canonical schema).

package/dist/{board-BwFW1aU2.d.mts → board-QFeHT4UN.d.mts}

@@ -1,11 +1,11 @@
-import { S as Schemas } from './_spec-CoL3oYpG.mjs';
+import { S as Schemas } from './_spec-sW85fuvT.mjs';
 
 type PublicBoard = Schemas['PublicBoardContext'];
 type PublicBoardFeatures = PublicBoard['features'];
 type PublicBoardAnalytics = PublicBoard['analytics'];
 type PublicBoardTheme = NonNullable<PublicBoard['theme']>;
 /**
- * An operator-defined custom job-field definition (CAV-294). Board-wide;
+ * An operator-defined custom job-field definition. Board-wide;
  * use it to render and localize a job's opaque `customFieldValues` (resolve
  * option `key`s → labels, honour field `type` and display order). Shared with
  * the Operator API's custom-field surface (one canonical schema).

package/dist/doctor.d.mts

@@ -1,5 +1,5 @@
 /**
- * Doctor check primitives (ADR-0058 Wave B): the pure logic behind
+ * Doctor check primitives: the pure logic behind
  * `npx @cavuno/board doctor` — env validation, JSON-LD extraction,
  * sitemap parsing, and the pass/fail/skip summary. Everything here is
  * synchronous and I/O-free so it unit-tests without a network; the
@@ -8,8 +8,8 @@
 type CheckStatus = 'pass' | 'fail' | 'skip';
 interface CheckResult {
     id: string;
-    /** 1 static · 2 read probes · 3 write probes (sandbox-only). */
-    tier: 1 | 2 | 3;
+    /** 1 static · 2 read probes. */
+    tier: 1 | 2;
     status: CheckStatus;
     detail: string;
 }
@@ -25,13 +25,9 @@ interface DoctorSummary {
 }
 
 /**
- * Doctor orchestrator (ADR-0058 Wave B): tier-1 static checks (this
- * file), tier-2 read probes (read.ts), and opt-in tier-3 write probes
- * (writes.ts — sandbox-only, gated on the board context's `sandbox`
- * flag). Each tier is a run/skip module pair dispatched the same way, so
- * every check always appears in the results — unrun checks SKIP loudly,
- * nothing silently vanishes. Fetch is injected for tests; the CLI passes
- * global fetch.
+ * Public project diagnostics: static configuration checks and optional read
+ * probes against the consumer's frontend. The command is intentionally
+ * non-destructive and needs no Cavuno operator credentials.
  */
 interface RunDoctorOptions {
     env: DoctorEnv;
@@ -40,15 +36,6 @@ interface RunDoctorOptions {
     /** Consumer project root for the skills-freshness check. Default: cwd. */
     projectRoot?: string;
     fetchImpl?: typeof fetch;
-    /**
-     * Enable tier-3 write probes (`--sandbox`). The probes themselves gate
-     * on the resolved board's `sandbox` flag; this option only opts in.
-     */
-    sandbox?: boolean;
-    /** Platform-operator Resend credential for the email-boundary check. */
-    resendApiKey?: string;
-    /** Test override for the per-run probe identity. */
-    writeProbeNonce?: string;
 }
 interface DoctorRun {
     results: CheckResult[];

package/dist/doctor.d.ts

@@ -1,5 +1,5 @@
 /**
- * Doctor check primitives (ADR-0058 Wave B): the pure logic behind
+ * Doctor check primitives: the pure logic behind
  * `npx @cavuno/board doctor` — env validation, JSON-LD extraction,
  * sitemap parsing, and the pass/fail/skip summary. Everything here is
  * synchronous and I/O-free so it unit-tests without a network; the
@@ -8,8 +8,8 @@
 type CheckStatus = 'pass' | 'fail' | 'skip';
 interface CheckResult {
     id: string;
-    /** 1 static · 2 read probes · 3 write probes (sandbox-only). */
-    tier: 1 | 2 | 3;
+    /** 1 static · 2 read probes. */
+    tier: 1 | 2;
     status: CheckStatus;
     detail: string;
 }
@@ -25,13 +25,9 @@ interface DoctorSummary {
 }
 
 /**
- * Doctor orchestrator (ADR-0058 Wave B): tier-1 static checks (this
- * file), tier-2 read probes (read.ts), and opt-in tier-3 write probes
- * (writes.ts — sandbox-only, gated on the board context's `sandbox`
- * flag). Each tier is a run/skip module pair dispatched the same way, so
- * every check always appears in the results — unrun checks SKIP loudly,
- * nothing silently vanishes. Fetch is injected for tests; the CLI passes
- * global fetch.
+ * Public project diagnostics: static configuration checks and optional read
+ * probes against the consumer's frontend. The command is intentionally
+ * non-destructive and needs no Cavuno operator credentials.
  */
 interface RunDoctorOptions {
     env: DoctorEnv;
@@ -40,15 +36,6 @@ interface RunDoctorOptions {
     /** Consumer project root for the skills-freshness check. Default: cwd. */
     projectRoot?: string;
     fetchImpl?: typeof fetch;
-    /**
-     * Enable tier-3 write probes (`--sandbox`). The probes themselves gate
-     * on the resolved board's `sandbox` flag; this option only opts in.
-     */
-    sandbox?: boolean;
-    /** Platform-operator Resend credential for the email-boundary check. */
-    resendApiKey?: string;
-    /** Test override for the per-run probe identity. */
-    writeProbeNonce?: string;
 }
 interface DoctorRun {
     results: CheckResult[];