@cavuno/board 4.15.0 → 4.18.0

package/dist/analytics.mjs

@@ -0,0 +1,199 @@
+// src/analytics/defaults.ts
+var DEFAULT_COLLECT_URL = "https://cavuno.com/api/analytics/collect";
+var DEFAULT_SCRIPT_URL = "https://cavuno.com/js/metrics.js";
+var PENDING_TENANT_ID = "boards_pending";
+var WELL_KNOWN_ANALYTICS_SCRIPT_PATH = "/.well-known/cavuno/analytics.js";
+var WELL_KNOWN_SCRIPT_PATH = WELL_KNOWN_ANALYTICS_SCRIPT_PATH;
+var WELL_KNOWN_COLLECT_PATH = "/.well-known/cavuno/collect";
+
+// src/analytics/well-known.ts
+var WELL_KNOWN_COLLECT_EVENTS_PATH = "/.well-known/cavuno/collect/v0/events";
+var CORS_HEADERS = {
+  "Access-Control-Allow-Origin": "*",
+  "Access-Control-Allow-Methods": "POST, OPTIONS",
+  "Access-Control-Allow-Headers": "Authorization, Content-Type, Accept",
+  "Access-Control-Max-Age": "86400",
+  "Cross-Origin-Resource-Policy": "cross-origin"
+};
+function stripTrailingSlash(pathname) {
+  return pathname.length > 1 && pathname.endsWith("/") ? pathname.slice(0, -1) : pathname;
+}
+function withCors(response) {
+  const headers = new Headers(response.headers);
+  for (const [key, value] of Object.entries(CORS_HEADERS)) {
+    headers.set(key, value);
+  }
+  return new Response(response.body, {
+    status: response.status,
+    statusText: response.statusText,
+    headers
+  });
+}
+function corsPreflight() {
+  return withCors(new Response(null, { status: 204 }));
+}
+async function proxyCollect(request, targetUrl) {
+  if (request.method === "OPTIONS") {
+    return corsPreflight();
+  }
+  if (request.method !== "POST") {
+    return withCors(new Response(null, { status: 405 }));
+  }
+  const headers = new Headers();
+  const authorization = request.headers.get("Authorization");
+  const contentType = request.headers.get("Content-Type");
+  const accept = request.headers.get("Accept");
+  if (authorization) headers.set("Authorization", authorization);
+  if (contentType) headers.set("Content-Type", contentType);
+  if (accept) headers.set("Accept", accept);
+  const body = await request.arrayBuffer();
+  const upstream = await fetch(targetUrl, {
+    method: "POST",
+    headers,
+    body
+  });
+  return withCors(
+    new Response(upstream.body, {
+      status: upstream.status,
+      headers: {
+        "Content-Type": upstream.headers.get("Content-Type") ?? "application/json"
+      }
+    })
+  );
+}
+async function matchAnalyticsWellKnown(request) {
+  const path = stripTrailingSlash(new URL(request.url).pathname);
+  if (path === WELL_KNOWN_ANALYTICS_SCRIPT_PATH) {
+    if (request.method !== "GET" && request.method !== "HEAD") {
+      return new Response(null, { status: 405 });
+    }
+    return Response.redirect(DEFAULT_SCRIPT_URL, 302);
+  }
+  if (path === WELL_KNOWN_COLLECT_PATH) {
+    return proxyCollect(request, DEFAULT_COLLECT_URL);
+  }
+  if (path === WELL_KNOWN_COLLECT_EVENTS_PATH) {
+    return proxyCollect(request, `${DEFAULT_COLLECT_URL}/v0/events`);
+  }
+  return null;
+}
+
+// src/analytics/index.ts
+var GLOBAL_NAME = "CavunoAnalytics";
+var installed = null;
+function getRoot() {
+  return globalThis;
+}
+function normalizeCollectUrl(url) {
+  return url.replace(/\/+$/, "");
+}
+function resolveDefaultCollectUrl() {
+  return DEFAULT_COLLECT_URL;
+}
+function resolveDefaultScriptUrl() {
+  return DEFAULT_SCRIPT_URL;
+}
+function postCollectJson(state, action, payload) {
+  const body = JSON.stringify({
+    publishableKey: state.publishableKey,
+    action,
+    payload: payload ?? {}
+  });
+  void fetch(state.collectUrl, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${state.publishableKey}`,
+      "Content-Type": "application/json",
+      Accept: "application/json"
+    },
+    body,
+    keepalive: true
+  }).catch(() => {
+  });
+}
+function exposeGlobal(state) {
+  const root = getRoot();
+  root[GLOBAL_NAME] = {
+    trackEvent(action, payload) {
+      postCollectJson(state, action, payload);
+    }
+  };
+}
+function injectScript(state, scriptUrl) {
+  const doc = getRoot().document;
+  if (!doc?.createElement) {
+    return;
+  }
+  if (doc.querySelector?.(`script[data-cavuno-analytics="1"]`)) {
+    return;
+  }
+  const el = doc.createElement("script");
+  el.defer = true;
+  el.src = scriptUrl;
+  el.setAttribute("data-cavuno-analytics", "1");
+  el.setAttribute("data-token", state.publishableKey);
+  el.setAttribute("data-host", state.collectUrl);
+  el.setAttribute("data-tenant-id", PENDING_TENANT_ID);
+  el.setAttribute("data-web-vitals", "true");
+  const head = doc.head;
+  if (head?.appendChild) {
+    head.appendChild(el);
+    return;
+  }
+  const first = doc.getElementsByTagName("script")[0];
+  first?.parentNode?.insertBefore(el, first);
+}
+function install(options) {
+  const publishableKey = options.publishableKey.trim();
+  if (!publishableKey.startsWith("pk_")) {
+    throw new Error("analytics.install requires a publishable key (pk_\u2026)");
+  }
+  const collectUrl = normalizeCollectUrl(
+    (options.collectUrl ?? resolveDefaultCollectUrl()).trim() || resolveDefaultCollectUrl()
+  );
+  const scriptUrl = (options.scriptUrl ?? resolveDefaultScriptUrl()).trim() || resolveDefaultScriptUrl();
+  installed = { publishableKey, collectUrl };
+  exposeGlobal(installed);
+  injectScript(installed, scriptUrl);
+}
+function track(action, payload) {
+  const trimmed = action.trim();
+  if (!trimmed) {
+    return;
+  }
+  const root = getRoot();
+  const globalTrack = root[GLOBAL_NAME]?.trackEvent;
+  if (typeof globalTrack === "function" && installed) {
+    globalTrack(trimmed, payload);
+    return;
+  }
+  if (!installed) {
+    return;
+  }
+  postCollectJson(installed, trimmed, payload);
+}
+var analytics = {
+  install,
+  track,
+  matchAnalyticsWellKnown,
+  DEFAULT_COLLECT_URL,
+  DEFAULT_SCRIPT_URL,
+  PENDING_TENANT_ID,
+  WELL_KNOWN_ANALYTICS_SCRIPT_PATH,
+  WELL_KNOWN_SCRIPT_PATH,
+  WELL_KNOWN_COLLECT_PATH,
+  WELL_KNOWN_COLLECT_EVENTS_PATH
+};
+export {
+  DEFAULT_COLLECT_URL,
+  DEFAULT_SCRIPT_URL,
+  PENDING_TENANT_ID,
+  WELL_KNOWN_ANALYTICS_SCRIPT_PATH,
+  WELL_KNOWN_COLLECT_EVENTS_PATH,
+  WELL_KNOWN_COLLECT_PATH,
+  WELL_KNOWN_SCRIPT_PATH,
+  analytics,
+  install,
+  matchAnalyticsWellKnown,
+  track
+};

package/dist/bin.mjs

@@ -119,11 +119,83 @@ function summarize(results) {
   };
 }
 
-// src/doctor/cookie-conformance.ts
+// src/doctor/analytics-surface.ts
 import { existsSync, readdirSync as readdirSync2, readFileSync as readFileSync2, statSync } from "fs";
 import { join, relative } from "path";
+var ANALYTICS = record("static.analytics-surface", 1);
+var SOURCE_EXT = /\.(ts|tsx|js|jsx|mjs|cjs|astro|svelte|vue|mdx)$/;
+var TEST_FILE = /\.(?:test|spec)\./;
+var FORBIDDEN = [
+  { id: "window.Tinybird", re: /\bwindow\.Tinybird\b/ },
+  { id: "@tinybirdco/flock", re: /@tinybirdco\/flock/ },
+  { id: "CAVUNO_TRACKER_TOKEN", re: /\bCAVUNO_TRACKER_TOKEN\b/ }
+];
+var SCAN_ROOTS = ["src", "app", "apps"];
+var SKIP_DIR_NAMES = /* @__PURE__ */ new Set([
+  "node_modules",
+  "dist",
+  ".git",
+  ".turbo",
+  "coverage",
+  "paraglide"
+]);
+function walkFiles(root, out) {
+  if (!existsSync(root)) return;
+  for (const entry of readdirSync2(root)) {
+    if (SKIP_DIR_NAMES.has(entry)) continue;
+    const full = join(root, entry);
+    const st = statSync(full);
+    if (st.isDirectory()) {
+      walkFiles(full, out);
+      continue;
+    }
+    if (SOURCE_EXT.test(entry) && !TEST_FILE.test(entry)) {
+      out.push(full);
+    }
+  }
+}
+function checkAnalyticsSurface(projectRoot) {
+  const files = [];
+  for (const name of SCAN_ROOTS) {
+    walkFiles(join(projectRoot, name), files);
+  }
+  if (files.length === 0) {
+    return ANALYTICS(
+      "skip",
+      "no src/, app/, or apps/ tree to scan for analytics surface"
+    );
+  }
+  const hits = [];
+  for (const file of files) {
+    let text;
+    try {
+      text = readFileSync2(file, "utf8");
+    } catch {
+      continue;
+    }
+    for (const rule of FORBIDDEN) {
+      if (rule.re.test(text)) {
+        hits.push(`${relative(projectRoot, file)}:${rule.id}`);
+      }
+    }
+  }
+  if (hits.length === 0) {
+    return ANALYTICS(
+      "pass",
+      "no Tinybird-branded analytics APIs in app source"
+    );
+  }
+  return ANALYTICS(
+    "fail",
+    `use @cavuno/board/analytics + CAVUNO_BOARD only \u2014 found ${hits.slice(0, 8).join(", ")}${hits.length > 8 ? ` (+${hits.length - 8} more)` : ""}`
+  );
+}
+
+// src/doctor/cookie-conformance.ts
+import { existsSync as existsSync2, readdirSync as readdirSync3, readFileSync as readFileSync3, statSync as statSync2 } from "fs";
+import { join as join2, relative as relative2 } from "path";
 var COOKIE = record("static.cookie-codec", 1);
-var SOURCE_EXT = /\.(ts|tsx|js|jsx|mjs|cjs|astro|svelte|vue)$/;
+var SOURCE_EXT2 = /\.(ts|tsx|js|jsx|mjs|cjs|astro|svelte|vue)$/;
 var REMEDIATION = "set cookies only through the SDK server cookie codec (buildCookie/buildClearCookie from @cavuno/board/server)";
 var SET_COOKIE_SINK = /set-cookie/i;
 var DOCUMENT_COOKIE_ASSIGN = /document\.cookie\s*\+?=(?!=)/i;
@@ -226,23 +298,23 @@ function hasGeneratedBanner(text) {
 function walkSourceFiles(dir, out) {
   let entries;
   try {
-    entries = readdirSync2(dir);
+    entries = readdirSync3(dir);
   } catch {
     return;
   }
   for (const name of entries) {
     if (name === "node_modules" || name.startsWith(".")) continue;
     if (GENERATED_DIRS.has(name) || GENERATED_FILE.test(name)) continue;
-    const full = join(dir, name);
+    const full = join2(dir, name);
     let st;
     try {
-      st = statSync(full);
+      st = statSync2(full);
     } catch {
       continue;
     }
     if (st.isDirectory()) {
       walkSourceFiles(full, out);
-    } else if (st.isFile() && SOURCE_EXT.test(name)) {
+    } else if (st.isFile() && SOURCE_EXT2.test(name)) {
       out.push(full);
     }
   }
@@ -252,8 +324,8 @@ function truncate(line, max = 120) {
   return t.length > max ? `${t.slice(0, max)}\u2026` : t;
 }
 function checkCookieCodecConformance(projectRoot) {
-  const srcDir = join(projectRoot, "src");
-  if (!existsSync(srcDir)) {
+  const srcDir = join2(projectRoot, "src");
+  if (!existsSync2(srcDir)) {
     return [
       COOKIE(
         "skip",
@@ -265,10 +337,10 @@ function checkCookieCodecConformance(projectRoot) {
   walkSourceFiles(srcDir, files);
   const findings = [];
   for (const file of files) {
-    const rel = relative(projectRoot, file).split("\\").join("/");
+    const rel = relative2(projectRoot, file).split("\\").join("/");
     let text;
     try {
-      text = readFileSync2(file, "utf8");
+      text = readFileSync3(file, "utf8");
     } catch {
       continue;
     }
@@ -528,8 +600,8 @@ async function runReadProbes(fetchImpl, frontendUrl, seo) {
 }
 
 // src/doctor/run.ts
-import { existsSync as existsSync2, readFileSync as readFileSync3 } from "fs";
-import { join as join2 } from "path";
+import { existsSync as existsSync3, readFileSync as readFileSync4 } from "fs";
+import { join as join3 } from "path";
 var STATIC_API = record("static.api", 1);
 var STATIC_BOARD = record("static.board", 1);
 var STATIC_SKILLS = record("static.skills", 1);
@@ -607,8 +679,8 @@ var SKILL_ROOTS = [
   ".cursor/skills"
 ];
 function checkSkillsFreshness(projectRoot) {
-  const roots = SKILL_ROOTS.map((root) => join2(projectRoot, root)).filter(
-    (root) => existsSync2(root)
+  const roots = SKILL_ROOTS.map((root) => join3(projectRoot, root)).filter(
+    (root) => existsSync3(root)
   );
   if (roots.length === 0) {
     return STATIC_SKILLS(
@@ -621,10 +693,10 @@ function checkSkillsFreshness(projectRoot) {
   const seen = /* @__PURE__ */ new Set();
   for (const root of roots) {
     for (const skill of corpus.skills) {
-      const copied = join2(root, skill.name, "SKILL.md");
-      if (!existsSync2(copied)) continue;
+      const copied = join3(root, skill.name, "SKILL.md");
+      if (!existsSync3(copied)) continue;
       seen.add(skill.name);
-      if (readFileSync3(copied, "utf8") !== skill.content) {
+      if (readFileSync4(copied, "utf8") !== skill.content) {
         stale.add(skill.name);
       }
     }
@@ -672,10 +744,10 @@ async function runDoctor(options) {
   } else {
     results.push(STATIC_BOARD("skip", "env checks failed \u2014 fix them first"));
   }
-  results.push(checkSkillsFreshness(options.projectRoot ?? process.cwd()));
-  results.push(
-    ...checkCookieCodecConformance(options.projectRoot ?? process.cwd())
-  );
+  const projectRoot = options.projectRoot ?? process.cwd();
+  results.push(checkSkillsFreshness(projectRoot));
+  results.push(...checkCookieCodecConformance(projectRoot));
+  results.push(checkAnalyticsSurface(projectRoot));
   results.push(
     ...options.frontendUrl ? await runReadProbes(fetchImpl, options.frontendUrl, seo) : skipReadProbes("no --frontend <url> given")
   );
@@ -683,7 +755,7 @@ async function runDoctor(options) {
 }
 
 // src/setup/run.ts
-import { cpSync, existsSync as existsSync3, mkdirSync, readFileSync as readFileSync4, rmSync } from "fs";
+import { cpSync, existsSync as existsSync4, mkdirSync, readFileSync as readFileSync5, rmSync } from "fs";
 import { dirname as dirname2, resolve as resolve2 } from "path";
 var RETIRED_SKILL_NAMES = [
   "cavuno-board-theme",
@@ -695,8 +767,8 @@ var RETIRED_SKILL_NAMES = [
 ];
 function detectFramework(cwd) {
   const pkgPath = resolve2(cwd, "package.json");
-  if (!existsSync3(pkgPath)) return null;
-  const pkg = JSON.parse(readFileSync4(pkgPath, "utf8"));
+  if (!existsSync4(pkgPath)) return null;
+  const pkg = JSON.parse(readFileSync5(pkgPath, "utf8"));
   const deps = { ...pkg.dependencies, ...pkg.devDependencies };
   if (deps["@tanstack/react-start"]) return "tanstack-start";
   return null;
@@ -711,7 +783,7 @@ function runSetup(cwd = process.cwd()) {
     resolve2(cwd, ".codex", "skills"),
     resolve2(cwd, ".cursor", "skills")
   ];
-  const existing = roots.filter((root) => existsSync3(root));
+  const existing = roots.filter((root) => existsSync4(root));
   const targetDirs = existing.length > 0 ? existing : [roots[0]];
   const copied = [];
   for (const targetDir of targetDirs) {
@@ -744,7 +816,8 @@ async function doctor(argv) {
       apiUrl: process.env.PUBLIC_CAVUNO_API_URL,
       boardKey: process.env.PUBLIC_CAVUNO_BOARD
     },
-    frontendUrl
+    frontendUrl,
+    projectRoot: process.cwd()
   });
   console.log("\n@cavuno/board doctor");
   for (const result of results) {

package/dist/{blog-B7xorPBw.d.ts → blog-1THfucKR.d.ts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-DdWB8z1Z.js';
+import { S as Schemas } from './_spec-Dk0TIRUc.js';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{blog-DopIQsKV.d.mts → blog-C04NWTh_.d.mts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-DdWB8z1Z.mjs';
+import { S as Schemas } from './_spec-Dk0TIRUc.mjs';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{board-Bpnqn4Rg.d.ts → board-CqeoQAa1.d.ts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-DdWB8z1Z.js';
-import { L as ListEnvelope, m as RelatedSearch } from './jobs-CExc4QdI.js';
+import { S as Schemas } from './_spec-Dk0TIRUc.js';
+import { L as ListEnvelope, m as RelatedSearch } from './jobs-Dvv0vX8p.js';
 
 type PublicCompany = Schemas['CompanyPublic'];
 /** A market (sector) a company operates in — name + its source slug. */

package/dist/{board-CkgTW4cC.d.mts → board-DIO9aFXx.d.mts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-DdWB8z1Z.mjs';
-import { L as ListEnvelope, m as RelatedSearch } from './jobs-Dq0TTcRf.mjs';
+import { S as Schemas } from './_spec-Dk0TIRUc.mjs';
+import { L as ListEnvelope, m as RelatedSearch } from './jobs-CVmAWGtJ.mjs';
 
 type PublicCompany = Schemas['CompanyPublic'];
 /** A market (sector) a company operates in — name + its source slug. */

package/dist/{breadcrumbs-DelEqbSz.d.ts → breadcrumbs-CCT1oC2-.d.ts}

@@ -1,5 +1,5 @@
-import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-Bpnqn4Rg.js';
-import { P as PublicJob } from './jobs-CExc4QdI.js';
+import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-CqeoQAa1.js';
+import { P as PublicJob } from './jobs-Dvv0vX8p.js';
 
 /**
  * Wire enum for `salaryTimeframe`. Defined here (not re-exported from any

package/dist/{breadcrumbs-CAppxMoS.d.mts → breadcrumbs-mE9Zsxlq.d.mts}

@@ -1,5 +1,5 @@
-import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-CkgTW4cC.mjs';
-import { P as PublicJob } from './jobs-Dq0TTcRf.mjs';
+import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-DIO9aFXx.mjs';
+import { P as PublicJob } from './jobs-CVmAWGtJ.mjs';
 
 /**
  * Wire enum for `salaryTimeframe`. Defined here (not re-exported from any