@cavuno/board 4.15.0 → 4.16.0

package/dist/doctor.js

@@ -147,11 +147,83 @@ function summarize(results) {
   };
 }
 
-// src/doctor/cookie-conformance.ts
+// src/doctor/analytics-surface.ts
 var import_node_fs2 = require("fs");
 var import_node_path2 = require("path");
+var ANALYTICS = record("static.analytics-surface", 1);
+var SOURCE_EXT = /\.(ts|tsx|js|jsx|mjs|cjs|astro|svelte|vue|mdx)$/;
+var TEST_FILE = /\.(?:test|spec)\./;
+var FORBIDDEN = [
+  { id: "window.Tinybird", re: /\bwindow\.Tinybird\b/ },
+  { id: "@tinybirdco/flock", re: /@tinybirdco\/flock/ },
+  { id: "CAVUNO_TRACKER_TOKEN", re: /\bCAVUNO_TRACKER_TOKEN\b/ }
+];
+var SCAN_ROOTS = ["src", "app", "apps"];
+var SKIP_DIR_NAMES = /* @__PURE__ */ new Set([
+  "node_modules",
+  "dist",
+  ".git",
+  ".turbo",
+  "coverage",
+  "paraglide"
+]);
+function walkFiles(root, out) {
+  if (!(0, import_node_fs2.existsSync)(root)) return;
+  for (const entry of (0, import_node_fs2.readdirSync)(root)) {
+    if (SKIP_DIR_NAMES.has(entry)) continue;
+    const full = (0, import_node_path2.join)(root, entry);
+    const st = (0, import_node_fs2.statSync)(full);
+    if (st.isDirectory()) {
+      walkFiles(full, out);
+      continue;
+    }
+    if (SOURCE_EXT.test(entry) && !TEST_FILE.test(entry)) {
+      out.push(full);
+    }
+  }
+}
+function checkAnalyticsSurface(projectRoot) {
+  const files = [];
+  for (const name of SCAN_ROOTS) {
+    walkFiles((0, import_node_path2.join)(projectRoot, name), files);
+  }
+  if (files.length === 0) {
+    return ANALYTICS(
+      "skip",
+      "no src/, app/, or apps/ tree to scan for analytics surface"
+    );
+  }
+  const hits = [];
+  for (const file of files) {
+    let text;
+    try {
+      text = (0, import_node_fs2.readFileSync)(file, "utf8");
+    } catch {
+      continue;
+    }
+    for (const rule of FORBIDDEN) {
+      if (rule.re.test(text)) {
+        hits.push(`${(0, import_node_path2.relative)(projectRoot, file)}:${rule.id}`);
+      }
+    }
+  }
+  if (hits.length === 0) {
+    return ANALYTICS(
+      "pass",
+      "no Tinybird-branded analytics APIs in app source"
+    );
+  }
+  return ANALYTICS(
+    "fail",
+    `use @cavuno/board/analytics + CAVUNO_BOARD only \u2014 found ${hits.slice(0, 8).join(", ")}${hits.length > 8 ? ` (+${hits.length - 8} more)` : ""}`
+  );
+}
+
+// src/doctor/cookie-conformance.ts
+var import_node_fs3 = require("fs");
+var import_node_path3 = require("path");
 var COOKIE = record("static.cookie-codec", 1);
-var SOURCE_EXT = /\.(ts|tsx|js|jsx|mjs|cjs|astro|svelte|vue)$/;
+var SOURCE_EXT2 = /\.(ts|tsx|js|jsx|mjs|cjs|astro|svelte|vue)$/;
 var REMEDIATION = "set cookies only through the SDK server cookie codec (buildCookie/buildClearCookie from @cavuno/board/server)";
 var SET_COOKIE_SINK = /set-cookie/i;
 var DOCUMENT_COOKIE_ASSIGN = /document\.cookie\s*\+?=(?!=)/i;
@@ -254,23 +326,23 @@ function hasGeneratedBanner(text) {
 function walkSourceFiles(dir, out) {
   let entries;
   try {
-    entries = (0, import_node_fs2.readdirSync)(dir);
+    entries = (0, import_node_fs3.readdirSync)(dir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name === "node_modules" || name.startsWith(".")) continue;
     if (GENERATED_DIRS.has(name) || GENERATED_FILE.test(name)) continue;
-    const full = (0, import_node_path2.join)(dir, name);
+    const full = (0, import_node_path3.join)(dir, name);
     let st;
     try {
-      st = (0, import_node_fs2.statSync)(full);
+      st = (0, import_node_fs3.statSync)(full);
     } catch {
       continue;
     }
     if (st.isDirectory()) {
       walkSourceFiles(full, out);
-    } else if (st.isFile() && SOURCE_EXT.test(name)) {
+    } else if (st.isFile() && SOURCE_EXT2.test(name)) {
       out.push(full);
     }
   }
@@ -280,8 +352,8 @@ function truncate(line, max = 120) {
   return t.length > max ? `${t.slice(0, max)}\u2026` : t;
 }
 function checkCookieCodecConformance(projectRoot) {
-  const srcDir = (0, import_node_path2.join)(projectRoot, "src");
-  if (!(0, import_node_fs2.existsSync)(srcDir)) {
+  const srcDir = (0, import_node_path3.join)(projectRoot, "src");
+  if (!(0, import_node_fs3.existsSync)(srcDir)) {
     return [
       COOKIE(
         "skip",
@@ -293,10 +365,10 @@ function checkCookieCodecConformance(projectRoot) {
   walkSourceFiles(srcDir, files);
   const findings = [];
   for (const file of files) {
-    const rel = (0, import_node_path2.relative)(projectRoot, file).split("\\").join("/");
+    const rel = (0, import_node_path3.relative)(projectRoot, file).split("\\").join("/");
     let text;
     try {
-      text = (0, import_node_fs2.readFileSync)(file, "utf8");
+      text = (0, import_node_fs3.readFileSync)(file, "utf8");
     } catch {
       continue;
     }
@@ -556,8 +628,8 @@ async function runReadProbes(fetchImpl, frontendUrl, seo) {
 }
 
 // src/doctor/run.ts
-var import_node_fs3 = require("fs");
-var import_node_path3 = require("path");
+var import_node_fs4 = require("fs");
+var import_node_path4 = require("path");
 var STATIC_API = record("static.api", 1);
 var STATIC_BOARD = record("static.board", 1);
 var STATIC_SKILLS = record("static.skills", 1);
@@ -635,8 +707,8 @@ var SKILL_ROOTS = [
   ".cursor/skills"
 ];
 function checkSkillsFreshness(projectRoot) {
-  const roots = SKILL_ROOTS.map((root) => (0, import_node_path3.join)(projectRoot, root)).filter(
-    (root) => (0, import_node_fs3.existsSync)(root)
+  const roots = SKILL_ROOTS.map((root) => (0, import_node_path4.join)(projectRoot, root)).filter(
+    (root) => (0, import_node_fs4.existsSync)(root)
   );
   if (roots.length === 0) {
     return STATIC_SKILLS(
@@ -649,10 +721,10 @@ function checkSkillsFreshness(projectRoot) {
   const seen = /* @__PURE__ */ new Set();
   for (const root of roots) {
     for (const skill of corpus.skills) {
-      const copied = (0, import_node_path3.join)(root, skill.name, "SKILL.md");
-      if (!(0, import_node_fs3.existsSync)(copied)) continue;
+      const copied = (0, import_node_path4.join)(root, skill.name, "SKILL.md");
+      if (!(0, import_node_fs4.existsSync)(copied)) continue;
       seen.add(skill.name);
-      if ((0, import_node_fs3.readFileSync)(copied, "utf8") !== skill.content) {
+      if ((0, import_node_fs4.readFileSync)(copied, "utf8") !== skill.content) {
         stale.add(skill.name);
       }
     }
@@ -700,10 +772,10 @@ async function runDoctor(options) {
   } else {
     results.push(STATIC_BOARD("skip", "env checks failed \u2014 fix them first"));
   }
-  results.push(checkSkillsFreshness(options.projectRoot ?? process.cwd()));
-  results.push(
-    ...checkCookieCodecConformance(options.projectRoot ?? process.cwd())
-  );
+  const projectRoot = options.projectRoot ?? process.cwd();
+  results.push(checkSkillsFreshness(projectRoot));
+  results.push(...checkCookieCodecConformance(projectRoot));
+  results.push(checkAnalyticsSurface(projectRoot));
   results.push(
     ...options.frontendUrl ? await runReadProbes(fetchImpl, options.frontendUrl, seo) : skipReadProbes("no --frontend <url> given")
   );

package/dist/doctor.mjs

@@ -117,11 +117,83 @@ function summarize(results) {
   };
 }
 
-// src/doctor/cookie-conformance.ts
+// src/doctor/analytics-surface.ts
 import { existsSync, readdirSync as readdirSync2, readFileSync as readFileSync2, statSync } from "fs";
 import { join, relative } from "path";
+var ANALYTICS = record("static.analytics-surface", 1);
+var SOURCE_EXT = /\.(ts|tsx|js|jsx|mjs|cjs|astro|svelte|vue|mdx)$/;
+var TEST_FILE = /\.(?:test|spec)\./;
+var FORBIDDEN = [
+  { id: "window.Tinybird", re: /\bwindow\.Tinybird\b/ },
+  { id: "@tinybirdco/flock", re: /@tinybirdco\/flock/ },
+  { id: "CAVUNO_TRACKER_TOKEN", re: /\bCAVUNO_TRACKER_TOKEN\b/ }
+];
+var SCAN_ROOTS = ["src", "app", "apps"];
+var SKIP_DIR_NAMES = /* @__PURE__ */ new Set([
+  "node_modules",
+  "dist",
+  ".git",
+  ".turbo",
+  "coverage",
+  "paraglide"
+]);
+function walkFiles(root, out) {
+  if (!existsSync(root)) return;
+  for (const entry of readdirSync2(root)) {
+    if (SKIP_DIR_NAMES.has(entry)) continue;
+    const full = join(root, entry);
+    const st = statSync(full);
+    if (st.isDirectory()) {
+      walkFiles(full, out);
+      continue;
+    }
+    if (SOURCE_EXT.test(entry) && !TEST_FILE.test(entry)) {
+      out.push(full);
+    }
+  }
+}
+function checkAnalyticsSurface(projectRoot) {
+  const files = [];
+  for (const name of SCAN_ROOTS) {
+    walkFiles(join(projectRoot, name), files);
+  }
+  if (files.length === 0) {
+    return ANALYTICS(
+      "skip",
+      "no src/, app/, or apps/ tree to scan for analytics surface"
+    );
+  }
+  const hits = [];
+  for (const file of files) {
+    let text;
+    try {
+      text = readFileSync2(file, "utf8");
+    } catch {
+      continue;
+    }
+    for (const rule of FORBIDDEN) {
+      if (rule.re.test(text)) {
+        hits.push(`${relative(projectRoot, file)}:${rule.id}`);
+      }
+    }
+  }
+  if (hits.length === 0) {
+    return ANALYTICS(
+      "pass",
+      "no Tinybird-branded analytics APIs in app source"
+    );
+  }
+  return ANALYTICS(
+    "fail",
+    `use @cavuno/board/analytics + CAVUNO_BOARD only \u2014 found ${hits.slice(0, 8).join(", ")}${hits.length > 8 ? ` (+${hits.length - 8} more)` : ""}`
+  );
+}
+
+// src/doctor/cookie-conformance.ts
+import { existsSync as existsSync2, readdirSync as readdirSync3, readFileSync as readFileSync3, statSync as statSync2 } from "fs";
+import { join as join2, relative as relative2 } from "path";
 var COOKIE = record("static.cookie-codec", 1);
-var SOURCE_EXT = /\.(ts|tsx|js|jsx|mjs|cjs|astro|svelte|vue)$/;
+var SOURCE_EXT2 = /\.(ts|tsx|js|jsx|mjs|cjs|astro|svelte|vue)$/;
 var REMEDIATION = "set cookies only through the SDK server cookie codec (buildCookie/buildClearCookie from @cavuno/board/server)";
 var SET_COOKIE_SINK = /set-cookie/i;
 var DOCUMENT_COOKIE_ASSIGN = /document\.cookie\s*\+?=(?!=)/i;
@@ -224,23 +296,23 @@ function hasGeneratedBanner(text) {
 function walkSourceFiles(dir, out) {
   let entries;
   try {
-    entries = readdirSync2(dir);
+    entries = readdirSync3(dir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name === "node_modules" || name.startsWith(".")) continue;
     if (GENERATED_DIRS.has(name) || GENERATED_FILE.test(name)) continue;
-    const full = join(dir, name);
+    const full = join2(dir, name);
     let st;
     try {
-      st = statSync(full);
+      st = statSync2(full);
     } catch {
       continue;
     }
     if (st.isDirectory()) {
       walkSourceFiles(full, out);
-    } else if (st.isFile() && SOURCE_EXT.test(name)) {
+    } else if (st.isFile() && SOURCE_EXT2.test(name)) {
       out.push(full);
     }
   }
@@ -250,8 +322,8 @@ function truncate(line, max = 120) {
   return t.length > max ? `${t.slice(0, max)}\u2026` : t;
 }
 function checkCookieCodecConformance(projectRoot) {
-  const srcDir = join(projectRoot, "src");
-  if (!existsSync(srcDir)) {
+  const srcDir = join2(projectRoot, "src");
+  if (!existsSync2(srcDir)) {
     return [
       COOKIE(
         "skip",
@@ -263,10 +335,10 @@ function checkCookieCodecConformance(projectRoot) {
   walkSourceFiles(srcDir, files);
   const findings = [];
   for (const file of files) {
-    const rel = relative(projectRoot, file).split("\\").join("/");
+    const rel = relative2(projectRoot, file).split("\\").join("/");
     let text;
     try {
-      text = readFileSync2(file, "utf8");
+      text = readFileSync3(file, "utf8");
     } catch {
       continue;
     }
@@ -526,8 +598,8 @@ async function runReadProbes(fetchImpl, frontendUrl, seo) {
 }
 
 // src/doctor/run.ts
-import { existsSync as existsSync2, readFileSync as readFileSync3 } from "fs";
-import { join as join2 } from "path";
+import { existsSync as existsSync3, readFileSync as readFileSync4 } from "fs";
+import { join as join3 } from "path";
 var STATIC_API = record("static.api", 1);
 var STATIC_BOARD = record("static.board", 1);
 var STATIC_SKILLS = record("static.skills", 1);
@@ -605,8 +677,8 @@ var SKILL_ROOTS = [
   ".cursor/skills"
 ];
 function checkSkillsFreshness(projectRoot) {
-  const roots = SKILL_ROOTS.map((root) => join2(projectRoot, root)).filter(
-    (root) => existsSync2(root)
+  const roots = SKILL_ROOTS.map((root) => join3(projectRoot, root)).filter(
+    (root) => existsSync3(root)
   );
   if (roots.length === 0) {
     return STATIC_SKILLS(
@@ -619,10 +691,10 @@ function checkSkillsFreshness(projectRoot) {
   const seen = /* @__PURE__ */ new Set();
   for (const root of roots) {
     for (const skill of corpus.skills) {
-      const copied = join2(root, skill.name, "SKILL.md");
-      if (!existsSync2(copied)) continue;
+      const copied = join3(root, skill.name, "SKILL.md");
+      if (!existsSync3(copied)) continue;
       seen.add(skill.name);
-      if (readFileSync3(copied, "utf8") !== skill.content) {
+      if (readFileSync4(copied, "utf8") !== skill.content) {
         stale.add(skill.name);
       }
     }
@@ -670,10 +742,10 @@ async function runDoctor(options) {
   } else {
     results.push(STATIC_BOARD("skip", "env checks failed \u2014 fix them first"));
   }
-  results.push(checkSkillsFreshness(options.projectRoot ?? process.cwd()));
-  results.push(
-    ...checkCookieCodecConformance(options.projectRoot ?? process.cwd())
-  );
+  const projectRoot = options.projectRoot ?? process.cwd();
+  results.push(checkSkillsFreshness(projectRoot));
+  results.push(...checkCookieCodecConformance(projectRoot));
+  results.push(checkAnalyticsSurface(projectRoot));
   results.push(
     ...options.frontendUrl ? await runReadProbes(fetchImpl, options.frontendUrl, seo) : skipReadProbes("no --frontend <url> given")
   );

package/dist/index.d.mts

@@ -143,7 +143,7 @@ declare function paginate<Q extends Record<string, unknown>, P extends PageShape
  * constant because the package is platform-neutral and cannot read
  * package.json at runtime.
  */
-declare const SDK_VERSION = "4.15.0";
+declare const SDK_VERSION = "4.16.0";
 
 type SavedJob = Schemas['SavedJob'];
 type SavedJobsListQuery = {

package/dist/index.d.ts

@@ -143,7 +143,7 @@ declare function paginate<Q extends Record<string, unknown>, P extends PageShape
  * constant because the package is platform-neutral and cannot read
  * package.json at runtime.
  */
-declare const SDK_VERSION = "4.15.0";
+declare const SDK_VERSION = "4.16.0";
 
 type SavedJob = Schemas['SavedJob'];
 type SavedJobsListQuery = {

package/dist/index.js

@@ -347,7 +347,7 @@ async function clearSession(storage) {
 }
 
 // src/version.ts
-var SDK_VERSION = "4.15.0";
+var SDK_VERSION = "4.16.0";
 
 // src/client.ts
 function isRawBody(body) {

package/dist/index.mjs

@@ -39,7 +39,7 @@ function toSearchParams(query) {
 }
 
 // src/version.ts
-var SDK_VERSION = "4.15.0";
+var SDK_VERSION = "4.16.0";
 
 // src/client.ts
 function isRawBody(body) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cavuno/board",
-  "version": "4.15.0",
+  "version": "4.16.0",
   "description": "Build custom job boards and careers pages with Cavuno’s TypeScript SDK.",
   "keywords": [
     "api-client",
@@ -154,6 +154,16 @@
         "default": "./dist/well-known.js"
       }
     },
+    "./analytics": {
+      "import": {
+        "types": "./dist/analytics.d.mts",
+        "default": "./dist/analytics.mjs"
+      },
+      "require": {
+        "types": "./dist/analytics.d.ts",
+        "default": "./dist/analytics.js"
+      }
+    },
     "./seo-files": {
       "import": {
         "types": "./dist/seo-files.d.mts",

package/skills/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "4.15.0",
+  "version": "4.16.0",
   "skills": [
     {
       "name": "cavuno-board-account",