@cavuno/board 2.0.3 → 3.0.0

package/CHANGELOG.md

@@ -3,6 +3,37 @@
 This changelog records changes that affect Board API compatibility, exported
 types, runtime behavior, or supported integration patterns.
 
+## 3.0.0 — 2026-08-03
+
+- Removed runtime theme data from `board.context()` and removed the
+  `PublicBoardTheme` type and `@cavuno/board/theme` export. Applications now
+  own their presentation tokens and styling independently of Board API data.
+- Retired the Cavuno theme skill and the bundled TanStack Start flavor. The
+  framework-neutral SDK skills were rewritten around concrete integration
+  tasks, with clearer names for API client setup, server sessions, search
+  suggestions, and public job posting.
+
+## 2.1.0 — 2026-08-01
+
+- Removed private starter-repository links from the public SDK documentation.
+- Repaired the audited public-repository export metadata and standalone
+  package lockfile used by trusted publishing.
+
+## 2.0.5 — 2026-07-30
+
+- Added the optional `correction` object to board job catalog responses. It is
+  present only when a free-text search that matched nothing was silently
+  retried with one misspelled word corrected; `data` and `count` then belong to
+  the corrected query. Absent on every other response, so existing consumers
+  are unaffected.
+
+## 2.0.4 — 2026-07-24
+
+- Aligned npm, GitHub, README, and website metadata around building custom job
+  boards and careers pages with Cavuno’s TypeScript SDK.
+- Made the private Cavuno source the canonical input to audited public
+  repository synchronization and trusted npm publishing.
+
 ## 2.0.3 — 2026-07-24
 
 - Added verifiable npm provenance generated from the public Cavuno SDK source

package/CONTRIBUTING.md

@@ -23,14 +23,3 @@ the documented Board API.
 
 By submitting a contribution, you agree that it may be distributed under the
 MIT License and that you have the right to submit it.
-
-## Releases
-
-Releases are published from `main` by the repository's `Publish to npm`
-workflow. Maintainers update the package version and changelog in a pull
-request, merge it after CI passes, and then run the publishing workflow from
-`main`.
-
-The workflow uses npm trusted publishing with short-lived GitHub Actions
-credentials. Published packages include provenance linking the npm artifact to
-the public source commit and workflow that produced it.

package/README.md

@@ -1,9 +1,10 @@
 # Cavuno Board SDK
 
-`@cavuno/board` is the official typed, isomorphic client for the
-[Cavuno job board platform](https://cavuno.com) Board API—the headless toolkit
-for building fully custom job board frontends. It has zero runtime dependencies
-and runs in browsers, Node.js 20 or newer, and Cloudflare Workers.
+Build custom job boards and careers pages with Cavuno’s TypeScript SDK.
+
+`@cavuno/board` is a typed, isomorphic client for the
+[Cavuno job board platform](https://cavuno.com) Board API. It has zero runtime
+dependencies and runs in browsers, Node.js 20 or newer, and Cloudflare Workers.
 
 You bring the framework and own the layout; the SDK brings the job board:
 jobs and search, companies, salaries, blog, board-user auth, saved jobs,
@@ -37,7 +38,7 @@ const board = createBoardClient({
   board: process.env.PUBLIC_CAVUNO_BOARD!, // pk_… publishable key
 });
 
-const { name, theme, features } = await board.context();
+const { name, language, features } = await board.context();
 const page = await board.jobs.list({ limit: 20 });
 const job = await board.jobs.retrieve('senior-chef');
 
@@ -93,7 +94,7 @@ SDK doesn't cover yet.
 - OpenAPI document: `GET https://api.cavuno.com/v1/openapi.json`
 - Source: <https://github.com/wollemiahq/cavuno-sdk>
 - Issues: <https://github.com/wollemiahq/cavuno-sdk/issues>
-- Reference starter (TanStack Start on Cloudflare Workers):
-  <https://github.com/wollemiahq/cavuno-board-starter>
+- Clone-and-own TanStack Start + shadcn/ui template:
+  <https://github.com/wollemiahq/cavuno-tanstack-start-shadcn-job-board-template>
 
 MIT © Wollemia

package/dist/{_spec-BKtVFcV9.d.mts → _spec-nkWAraS0.d.mts}

@@ -1674,22 +1674,6 @@ interface components {
                 linkedInPartnerId: string | null;
                 cookieConsentRequired: boolean;
             };
-            theme: {
-                mode: string;
-                schemeId: string;
-                typography: {
-                    fontSans: string;
-                    fontHeading?: string | null;
-                };
-                colors: {
-                    light: {
-                        [key: string]: unknown;
-                    };
-                    dark: {
-                        [key: string]: unknown;
-                    };
-                };
-            } | null;
             /** @description Operator-defined custom job-field definitions, in display order. Board-wide; the frontend uses these to render and localize each job's opaque `customFieldValues`. Empty when the board defines none. Display-only: not filterable or searchable in v1. */
             customFields: components["schemas"]["CustomFieldDefinition"][];
             /** @description Stored operator label overrides by config group (`jobCardLabels`, `navLabels`, `breadcrumbsLabels`, …): plain-text chrome copy to merge over the `@cavuno/board` `uiCopy(language)` catalog via `uiCopy(language, labels)`. Empty object when the board stores none. */
@@ -1842,12 +1826,12 @@ interface components {
             company: components["schemas"]["JobCompany"];
             /** @description Physical office locations associated with the job. */
             officeLocations: components["schemas"]["JobOfficeLocation"][];
-            /** @description Resolved job categories (slug + board display name): same shape as the card; names joined server-side. */
+            /** @description Resolved job categories (slug + board display name): same shape as the card; names joined server-side. Guaranteed resolvable: every emitted slug resolves via `GET /v1/boards/:identifier/categories/:slug` — consumers never need to re-verify before linking. */
             categories: {
                 slug: string;
                 name: string;
             }[];
-            /** @description Resolved job skills (slug + board display name). */
+            /** @description Resolved job skills (slug + board display name). Guaranteed resolvable: every emitted slug resolves via `GET /v1/boards/:identifier/skills/:slug` — consumers never need to re-verify before linking. */
             skills: {
                 slug: string;
                 name: string;
@@ -1947,10 +1931,12 @@ interface components {
                 name: string;
                 logoUrl: string | null;
             } | null;
+            /** @description Job categories (slug + board display name). Guaranteed resolvable: every emitted slug resolves via `GET /v1/boards/:identifier/categories/:slug`. */
             categories: {
                 slug: string;
                 name: string;
             }[];
+            /** @description Job skills (slug + board display name). Guaranteed resolvable: every emitted slug resolves via `GET /v1/boards/:identifier/skills/:slug`. */
             skills: {
                 slug: string;
                 name: string;

package/dist/{_spec-BKtVFcV9.d.ts → _spec-nkWAraS0.d.ts}

@@ -1674,22 +1674,6 @@ interface components {
                 linkedInPartnerId: string | null;
                 cookieConsentRequired: boolean;
             };
-            theme: {
-                mode: string;
-                schemeId: string;
-                typography: {
-                    fontSans: string;
-                    fontHeading?: string | null;
-                };
-                colors: {
-                    light: {
-                        [key: string]: unknown;
-                    };
-                    dark: {
-                        [key: string]: unknown;
-                    };
-                };
-            } | null;
             /** @description Operator-defined custom job-field definitions, in display order. Board-wide; the frontend uses these to render and localize each job's opaque `customFieldValues`. Empty when the board defines none. Display-only: not filterable or searchable in v1. */
             customFields: components["schemas"]["CustomFieldDefinition"][];
             /** @description Stored operator label overrides by config group (`jobCardLabels`, `navLabels`, `breadcrumbsLabels`, …): plain-text chrome copy to merge over the `@cavuno/board` `uiCopy(language)` catalog via `uiCopy(language, labels)`. Empty object when the board stores none. */
@@ -1842,12 +1826,12 @@ interface components {
             company: components["schemas"]["JobCompany"];
             /** @description Physical office locations associated with the job. */
             officeLocations: components["schemas"]["JobOfficeLocation"][];
-            /** @description Resolved job categories (slug + board display name): same shape as the card; names joined server-side. */
+            /** @description Resolved job categories (slug + board display name): same shape as the card; names joined server-side. Guaranteed resolvable: every emitted slug resolves via `GET /v1/boards/:identifier/categories/:slug` — consumers never need to re-verify before linking. */
             categories: {
                 slug: string;
                 name: string;
             }[];
-            /** @description Resolved job skills (slug + board display name). */
+            /** @description Resolved job skills (slug + board display name). Guaranteed resolvable: every emitted slug resolves via `GET /v1/boards/:identifier/skills/:slug` — consumers never need to re-verify before linking. */
             skills: {
                 slug: string;
                 name: string;
@@ -1947,10 +1931,12 @@ interface components {
                 name: string;
                 logoUrl: string | null;
             } | null;
+            /** @description Job categories (slug + board display name). Guaranteed resolvable: every emitted slug resolves via `GET /v1/boards/:identifier/categories/:slug`. */
             categories: {
                 slug: string;
                 name: string;
             }[];
+            /** @description Job skills (slug + board display name). Guaranteed resolvable: every emitted slug resolves via `GET /v1/boards/:identifier/skills/:slug`. */
             skills: {
                 slug: string;
                 name: string;

package/dist/bin.mjs

@@ -4,7 +4,7 @@
 var DEFAULT_CAVUNO_API_URL = "https://api.cavuno.com";
 
 // src/skills.ts
-import { readFileSync } from "fs";
+import { readdirSync, readFileSync } from "fs";
 import { dirname, resolve } from "path";
 import { fileURLToPath } from "url";
 function packageRoot() {
@@ -21,13 +21,21 @@ function loadSkillCorpus(baseDir) {
   const manifest = loadSkillManifest(baseDir);
   return {
     version: manifest.version,
-    skills: manifest.skills.map((skill) => ({
-      ...skill,
-      content: readFileSync(
-        resolveFromPackageRoot(skill.path, baseDir),
-        "utf8"
-      )
-    }))
+    skills: manifest.skills.map((skill) => {
+      const skillPath = resolveFromPackageRoot(skill.path, baseDir);
+      const skillDir = dirname(skillPath);
+      const references = readdirSync(skillDir, { withFileTypes: true }).filter(
+        (entry) => entry.isFile() && entry.name !== "SKILL.md" && entry.name.endsWith(".md")
+      ).map((entry) => ({
+        path: entry.name,
+        content: readFileSync(resolve(skillDir, entry.name), "utf8")
+      })).sort((a, b) => a.path.localeCompare(b.path));
+      return {
+        ...skill,
+        content: readFileSync(skillPath, "utf8"),
+        references
+      };
+    })
   };
 }
 
@@ -105,7 +113,7 @@ function summarize(results) {
 }
 
 // src/doctor/cookie-conformance.ts
-import { existsSync, readdirSync, readFileSync as readFileSync2, statSync } from "fs";
+import { existsSync, readdirSync as readdirSync2, readFileSync as readFileSync2, statSync } from "fs";
 import { join, relative } from "path";
 var COOKIE = record("static.cookie-codec", 1);
 var SOURCE_EXT = /\.(ts|tsx|js|jsx|mjs|cjs|astro|svelte|vue)$/;
@@ -211,7 +219,7 @@ function hasGeneratedBanner(text) {
 function walkSourceFiles(dir, out) {
   let entries;
   try {
-    entries = readdirSync(dir);
+    entries = readdirSync2(dir);
   } catch {
     return;
   }
@@ -394,42 +402,9 @@ async function runReadProbes(fetchImpl, frontendUrl) {
   ];
 }
 
-// src/doctor/theme.ts
-import { createHash } from "crypto";
+// src/doctor/run.ts
 import { existsSync as existsSync2, readFileSync as readFileSync3 } from "fs";
 import { join as join2 } from "path";
-var THEME = record("static.theme", 1);
-function checkThemeFreshness(projectRoot) {
-  const tokensPath = join2(projectRoot, "src/tokens.css");
-  if (!existsSync2(tokensPath)) {
-    return [
-      THEME(
-        "skip",
-        "no src/tokens.css \u2014 local theme freshness check not applicable"
-      )
-    ];
-  }
-  const tokensHash = createHash("sha256").update(readFileSync3(tokensPath, "utf8"), "utf8").digest("hex");
-  const resolvedPath = join2(projectRoot, "src/theme/resolved.ts");
-  const resolvedHash = existsSync2(resolvedPath) ? readFileSync3(resolvedPath, "utf8").match(
-    /tokensHash = '([0-9a-f]{64})'/
-  )?.[1] ?? null : null;
-  if (resolvedHash !== tokensHash) {
-    return [
-      THEME(
-        "fail",
-        `src/theme/resolved.ts is ${resolvedHash ? "stale" : "missing"} \u2014 run \`npm run gen:theme\` (OG images render from it)`
-      )
-    ];
-  }
-  return [
-    THEME("pass", `tokens.css \u21C4 resolved module (${tokensHash.slice(0, 12)}\u2026)`)
-  ];
-}
-
-// src/doctor/run.ts
-import { existsSync as existsSync3, readFileSync as readFileSync4 } from "fs";
-import { join as join3 } from "path";
 var STATIC_API = record("static.api", 1);
 var STATIC_BOARD = record("static.board", 1);
 var STATIC_SKILLS = record("static.skills", 1);
@@ -485,8 +460,8 @@ var SKILL_ROOTS = [
   ".cursor/skills"
 ];
 function checkSkillsFreshness(projectRoot) {
-  const roots = SKILL_ROOTS.map((root) => join3(projectRoot, root)).filter(
-    (root) => existsSync3(root)
+  const roots = SKILL_ROOTS.map((root) => join2(projectRoot, root)).filter(
+    (root) => existsSync2(root)
   );
   if (roots.length === 0) {
     return STATIC_SKILLS(
@@ -499,10 +474,10 @@ function checkSkillsFreshness(projectRoot) {
   const seen = /* @__PURE__ */ new Set();
   for (const root of roots) {
     for (const skill of corpus.skills) {
-      const copied = join3(root, skill.name, "SKILL.md");
-      if (!existsSync3(copied)) continue;
+      const copied = join2(root, skill.name, "SKILL.md");
+      if (!existsSync2(copied)) continue;
       seen.add(skill.name);
-      if (readFileSync4(copied, "utf8") !== skill.content) {
+      if (readFileSync3(copied, "utf8") !== skill.content) {
         stale.add(skill.name);
       }
     }
@@ -546,7 +521,6 @@ async function runDoctor(options) {
     results.push(STATIC_BOARD("skip", "env checks failed \u2014 fix them first"));
   }
   results.push(checkSkillsFreshness(options.projectRoot ?? process.cwd()));
-  results.push(...checkThemeFreshness(options.projectRoot ?? process.cwd()));
   results.push(
     ...checkCookieCodecConformance(options.projectRoot ?? process.cwd())
   );
@@ -557,12 +531,20 @@ async function runDoctor(options) {
 }
 
 // src/setup/run.ts
-import { cpSync, existsSync as existsSync4, mkdirSync, readFileSync as readFileSync5 } from "fs";
+import { cpSync, existsSync as existsSync3, mkdirSync, readFileSync as readFileSync4, rmSync } from "fs";
 import { dirname as dirname2, resolve as resolve2 } from "path";
+var RETIRED_SKILL_NAMES = [
+  "cavuno-board-theme",
+  "cavuno-board-tanstack-start",
+  "cavuno-board-client",
+  "cavuno-board-server",
+  "cavuno-board-suggest",
+  "cavuno-board-job-posting"
+];
 function detectFramework(cwd) {
   const pkgPath = resolve2(cwd, "package.json");
-  if (!existsSync4(pkgPath)) return null;
-  const pkg = JSON.parse(readFileSync5(pkgPath, "utf8"));
+  if (!existsSync3(pkgPath)) return null;
+  const pkg = JSON.parse(readFileSync4(pkgPath, "utf8"));
   const deps = { ...pkg.dependencies, ...pkg.devDependencies };
   if (deps["@tanstack/react-start"]) return "tanstack-start";
   return null;
@@ -570,20 +552,21 @@ function detectFramework(cwd) {
 function runSetup(cwd = process.cwd()) {
   const manifest = loadSkillManifest();
   const framework = detectFramework(cwd);
-  const chosen = manifest.skills.filter(
-    (skill) => skill.category === "core" || skill.framework === framework
-  );
+  const chosen = manifest.skills.filter((skill) => skill.category === "core");
   const roots = [
     resolve2(cwd, ".agents", "skills"),
     resolve2(cwd, ".claude", "skills"),
     resolve2(cwd, ".codex", "skills"),
     resolve2(cwd, ".cursor", "skills")
   ];
-  const existing = roots.filter((root) => existsSync4(root));
+  const existing = roots.filter((root) => existsSync3(root));
   const targetDirs = existing.length > 0 ? existing : [roots[0]];
   const copied = [];
   for (const targetDir of targetDirs) {
     mkdirSync(targetDir, { recursive: true });
+    for (const name of RETIRED_SKILL_NAMES) {
+      rmSync(resolve2(targetDir, name), { recursive: true, force: true });
+    }
     for (const skill of chosen) {
       const sourceDir = dirname2(resolveFromPackageRoot(skill.path));
       const destDir = resolve2(targetDir, skill.name);

package/dist/{board-3Xj_Y-Tx.d.ts → board-NE98PlwN.d.ts}

@@ -1,9 +1,8 @@
-import { S as Schemas } from './_spec-BKtVFcV9.js';
+import { S as Schemas } from './_spec-nkWAraS0.js';
 
 type PublicBoard = Schemas['PublicBoardContext'];
 type PublicBoardFeatures = PublicBoard['features'];
 type PublicBoardAnalytics = PublicBoard['analytics'];
-type PublicBoardTheme = NonNullable<PublicBoard['theme']>;
 /**
  * An operator-defined custom job-field definition. Board-wide;
  * use it to render and localize a job's opaque `customFieldValues` (resolve
@@ -14,4 +13,4 @@ type CustomFieldDefinition = Schemas['CustomFieldDefinition'];
 type CustomFieldType = CustomFieldDefinition['type'];
 type CustomFieldOption = Schemas['CustomFieldOption'];
 
-export type { CustomFieldDefinition as C, PublicBoard as P, CustomFieldOption as a, CustomFieldType as b, PublicBoardAnalytics as c, PublicBoardFeatures as d, PublicBoardTheme as e };
+export type { CustomFieldDefinition as C, PublicBoard as P, CustomFieldOption as a, CustomFieldType as b, PublicBoardAnalytics as c, PublicBoardFeatures as d };

package/dist/{board-pNN710Zc.d.mts → board-muu8BI8P.d.mts}

@@ -1,9 +1,8 @@
-import { S as Schemas } from './_spec-BKtVFcV9.mjs';
+import { S as Schemas } from './_spec-nkWAraS0.mjs';
 
 type PublicBoard = Schemas['PublicBoardContext'];
 type PublicBoardFeatures = PublicBoard['features'];
 type PublicBoardAnalytics = PublicBoard['analytics'];
-type PublicBoardTheme = NonNullable<PublicBoard['theme']>;
 /**
  * An operator-defined custom job-field definition. Board-wide;
  * use it to render and localize a job's opaque `customFieldValues` (resolve
@@ -14,4 +13,4 @@ type CustomFieldDefinition = Schemas['CustomFieldDefinition'];
 type CustomFieldType = CustomFieldDefinition['type'];
 type CustomFieldOption = Schemas['CustomFieldOption'];
 
-export type { CustomFieldDefinition as C, PublicBoard as P, CustomFieldOption as a, CustomFieldType as b, PublicBoardAnalytics as c, PublicBoardFeatures as d, PublicBoardTheme as e };
+export type { CustomFieldDefinition as C, PublicBoard as P, CustomFieldOption as a, CustomFieldType as b, PublicBoardAnalytics as c, PublicBoardFeatures as d };

package/dist/doctor.js

@@ -49,13 +49,21 @@ function loadSkillCorpus(baseDir) {
   const manifest = loadSkillManifest(baseDir);
   return {
     version: manifest.version,
-    skills: manifest.skills.map((skill) => ({
-      ...skill,
-      content: (0, import_node_fs.readFileSync)(
-        resolveFromPackageRoot(skill.path, baseDir),
-        "utf8"
-      )
-    }))
+    skills: manifest.skills.map((skill) => {
+      const skillPath = resolveFromPackageRoot(skill.path, baseDir);
+      const skillDir = (0, import_node_path.dirname)(skillPath);
+      const references = (0, import_node_fs.readdirSync)(skillDir, { withFileTypes: true }).filter(
+        (entry) => entry.isFile() && entry.name !== "SKILL.md" && entry.name.endsWith(".md")
+      ).map((entry) => ({
+        path: entry.name,
+        content: (0, import_node_fs.readFileSync)((0, import_node_path.resolve)(skillDir, entry.name), "utf8")
+      })).sort((a, b) => a.path.localeCompare(b.path));
+      return {
+        ...skill,
+        content: (0, import_node_fs.readFileSync)(skillPath, "utf8"),
+        references
+      };
+    })
   };
 }
 
@@ -422,42 +430,9 @@ async function runReadProbes(fetchImpl, frontendUrl) {
   ];
 }
 
-// src/doctor/theme.ts
-var import_node_crypto = require("crypto");
+// src/doctor/run.ts
 var import_node_fs3 = require("fs");
 var import_node_path3 = require("path");
-var THEME = record("static.theme", 1);
-function checkThemeFreshness(projectRoot) {
-  const tokensPath = (0, import_node_path3.join)(projectRoot, "src/tokens.css");
-  if (!(0, import_node_fs3.existsSync)(tokensPath)) {
-    return [
-      THEME(
-        "skip",
-        "no src/tokens.css \u2014 local theme freshness check not applicable"
-      )
-    ];
-  }
-  const tokensHash = (0, import_node_crypto.createHash)("sha256").update((0, import_node_fs3.readFileSync)(tokensPath, "utf8"), "utf8").digest("hex");
-  const resolvedPath = (0, import_node_path3.join)(projectRoot, "src/theme/resolved.ts");
-  const resolvedHash = (0, import_node_fs3.existsSync)(resolvedPath) ? (0, import_node_fs3.readFileSync)(resolvedPath, "utf8").match(
-    /tokensHash = '([0-9a-f]{64})'/
-  )?.[1] ?? null : null;
-  if (resolvedHash !== tokensHash) {
-    return [
-      THEME(
-        "fail",
-        `src/theme/resolved.ts is ${resolvedHash ? "stale" : "missing"} \u2014 run \`npm run gen:theme\` (OG images render from it)`
-      )
-    ];
-  }
-  return [
-    THEME("pass", `tokens.css \u21C4 resolved module (${tokensHash.slice(0, 12)}\u2026)`)
-  ];
-}
-
-// src/doctor/run.ts
-var import_node_fs4 = require("fs");
-var import_node_path4 = require("path");
 var STATIC_API = record("static.api", 1);
 var STATIC_BOARD = record("static.board", 1);
 var STATIC_SKILLS = record("static.skills", 1);
@@ -513,8 +488,8 @@ var SKILL_ROOTS = [
   ".cursor/skills"
 ];
 function checkSkillsFreshness(projectRoot) {
-  const roots = SKILL_ROOTS.map((root) => (0, import_node_path4.join)(projectRoot, root)).filter(
-    (root) => (0, import_node_fs4.existsSync)(root)
+  const roots = SKILL_ROOTS.map((root) => (0, import_node_path3.join)(projectRoot, root)).filter(
+    (root) => (0, import_node_fs3.existsSync)(root)
   );
   if (roots.length === 0) {
     return STATIC_SKILLS(
@@ -527,10 +502,10 @@ function checkSkillsFreshness(projectRoot) {
   const seen = /* @__PURE__ */ new Set();
   for (const root of roots) {
     for (const skill of corpus.skills) {
-      const copied = (0, import_node_path4.join)(root, skill.name, "SKILL.md");
-      if (!(0, import_node_fs4.existsSync)(copied)) continue;
+      const copied = (0, import_node_path3.join)(root, skill.name, "SKILL.md");
+      if (!(0, import_node_fs3.existsSync)(copied)) continue;
       seen.add(skill.name);
-      if ((0, import_node_fs4.readFileSync)(copied, "utf8") !== skill.content) {
+      if ((0, import_node_fs3.readFileSync)(copied, "utf8") !== skill.content) {
         stale.add(skill.name);
       }
     }
@@ -574,7 +549,6 @@ async function runDoctor(options) {
     results.push(STATIC_BOARD("skip", "env checks failed \u2014 fix them first"));
   }
   results.push(checkSkillsFreshness(options.projectRoot ?? process.cwd()));
-  results.push(...checkThemeFreshness(options.projectRoot ?? process.cwd()));
   results.push(
     ...checkCookieCodecConformance(options.projectRoot ?? process.cwd())
   );

package/dist/doctor.mjs

@@ -2,7 +2,7 @@
 var DEFAULT_CAVUNO_API_URL = "https://api.cavuno.com";
 
 // src/skills.ts
-import { readFileSync } from "fs";
+import { readdirSync, readFileSync } from "fs";
 import { dirname, resolve } from "path";
 import { fileURLToPath } from "url";
 function packageRoot() {
@@ -19,13 +19,21 @@ function loadSkillCorpus(baseDir) {
   const manifest = loadSkillManifest(baseDir);
   return {
     version: manifest.version,
-    skills: manifest.skills.map((skill) => ({
-      ...skill,
-      content: readFileSync(
-        resolveFromPackageRoot(skill.path, baseDir),
-        "utf8"
-      )
-    }))
+    skills: manifest.skills.map((skill) => {
+      const skillPath = resolveFromPackageRoot(skill.path, baseDir);
+      const skillDir = dirname(skillPath);
+      const references = readdirSync(skillDir, { withFileTypes: true }).filter(
+        (entry) => entry.isFile() && entry.name !== "SKILL.md" && entry.name.endsWith(".md")
+      ).map((entry) => ({
+        path: entry.name,
+        content: readFileSync(resolve(skillDir, entry.name), "utf8")
+      })).sort((a, b) => a.path.localeCompare(b.path));
+      return {
+        ...skill,
+        content: readFileSync(skillPath, "utf8"),
+        references
+      };
+    })
   };
 }
 
@@ -103,7 +111,7 @@ function summarize(results) {
 }
 
 // src/doctor/cookie-conformance.ts
-import { existsSync, readdirSync, readFileSync as readFileSync2, statSync } from "fs";
+import { existsSync, readdirSync as readdirSync2, readFileSync as readFileSync2, statSync } from "fs";
 import { join, relative } from "path";
 var COOKIE = record("static.cookie-codec", 1);
 var SOURCE_EXT = /\.(ts|tsx|js|jsx|mjs|cjs|astro|svelte|vue)$/;
@@ -209,7 +217,7 @@ function hasGeneratedBanner(text) {
 function walkSourceFiles(dir, out) {
   let entries;
   try {
-    entries = readdirSync(dir);
+    entries = readdirSync2(dir);
   } catch {
     return;
   }
@@ -392,42 +400,9 @@ async function runReadProbes(fetchImpl, frontendUrl) {
   ];
 }
 
-// src/doctor/theme.ts
-import { createHash } from "crypto";
+// src/doctor/run.ts
 import { existsSync as existsSync2, readFileSync as readFileSync3 } from "fs";
 import { join as join2 } from "path";
-var THEME = record("static.theme", 1);
-function checkThemeFreshness(projectRoot) {
-  const tokensPath = join2(projectRoot, "src/tokens.css");
-  if (!existsSync2(tokensPath)) {
-    return [
-      THEME(
-        "skip",
-        "no src/tokens.css \u2014 local theme freshness check not applicable"
-      )
-    ];
-  }
-  const tokensHash = createHash("sha256").update(readFileSync3(tokensPath, "utf8"), "utf8").digest("hex");
-  const resolvedPath = join2(projectRoot, "src/theme/resolved.ts");
-  const resolvedHash = existsSync2(resolvedPath) ? readFileSync3(resolvedPath, "utf8").match(
-    /tokensHash = '([0-9a-f]{64})'/
-  )?.[1] ?? null : null;
-  if (resolvedHash !== tokensHash) {
-    return [
-      THEME(
-        "fail",
-        `src/theme/resolved.ts is ${resolvedHash ? "stale" : "missing"} \u2014 run \`npm run gen:theme\` (OG images render from it)`
-      )
-    ];
-  }
-  return [
-    THEME("pass", `tokens.css \u21C4 resolved module (${tokensHash.slice(0, 12)}\u2026)`)
-  ];
-}
-
-// src/doctor/run.ts
-import { existsSync as existsSync3, readFileSync as readFileSync4 } from "fs";
-import { join as join3 } from "path";
 var STATIC_API = record("static.api", 1);
 var STATIC_BOARD = record("static.board", 1);
 var STATIC_SKILLS = record("static.skills", 1);
@@ -483,8 +458,8 @@ var SKILL_ROOTS = [
   ".cursor/skills"
 ];
 function checkSkillsFreshness(projectRoot) {
-  const roots = SKILL_ROOTS.map((root) => join3(projectRoot, root)).filter(
-    (root) => existsSync3(root)
+  const roots = SKILL_ROOTS.map((root) => join2(projectRoot, root)).filter(
+    (root) => existsSync2(root)
   );
   if (roots.length === 0) {
     return STATIC_SKILLS(
@@ -497,10 +472,10 @@ function checkSkillsFreshness(projectRoot) {
   const seen = /* @__PURE__ */ new Set();
   for (const root of roots) {
     for (const skill of corpus.skills) {
-      const copied = join3(root, skill.name, "SKILL.md");
-      if (!existsSync3(copied)) continue;
+      const copied = join2(root, skill.name, "SKILL.md");
+      if (!existsSync2(copied)) continue;
       seen.add(skill.name);
-      if (readFileSync4(copied, "utf8") !== skill.content) {
+      if (readFileSync3(copied, "utf8") !== skill.content) {
         stale.add(skill.name);
       }
     }
@@ -544,7 +519,6 @@ async function runDoctor(options) {
     results.push(STATIC_BOARD("skip", "env checks failed \u2014 fix them first"));
   }
   results.push(checkSkillsFreshness(options.projectRoot ?? process.cwd()));
-  results.push(...checkThemeFreshness(options.projectRoot ?? process.cwd()));
   results.push(
     ...checkCookieCodecConformance(options.projectRoot ?? process.cwd())
   );

package/dist/filters.d.mts

@@ -1,6 +1,6 @@
 import { B as BoardLabelOverrides } from './ui-copy-CCkz6CVF.mjs';
-import { J as JobSort, E as EmploymentType, R as RemoteOption, S as Seniority } from './jobs-k84C0v_8.mjs';
-import './_spec-BKtVFcV9.mjs';
+import { J as JobSort, E as EmploymentType, R as RemoteOption, S as Seniority } from './jobs-lVvKCBCU.mjs';
+import './_spec-nkWAraS0.mjs';
 
 declare const REMOTE_OPTIONS: readonly RemoteOption[];
 /**

package/dist/filters.d.ts

@@ -1,6 +1,6 @@
 import { B as BoardLabelOverrides } from './ui-copy-CCkz6CVF.js';
-import { J as JobSort, E as EmploymentType, R as RemoteOption, S as Seniority } from './jobs-C4qRfCdP.js';
-import './_spec-BKtVFcV9.js';
+import { J as JobSort, E as EmploymentType, R as RemoteOption, S as Seniority } from './jobs-BiEvL9d7.js';
+import './_spec-nkWAraS0.js';
 
 declare const REMOTE_OPTIONS: readonly RemoteOption[];
 /**