@cavuno/board 4.8.0 → 4.10.0

package/dist/bin.mjs

@@ -109,7 +109,14 @@ function summarize(results) {
   const passed = results.filter((r) => r.status === "pass").map((r) => r.id);
   const failed = results.filter((r) => r.status === "fail").map((r) => r.id);
   const skipped = results.filter((r) => r.status === "skip").map((r) => r.id);
-  return { exitCode: failed.length > 0 ? 1 : 0, passed, failed, skipped };
+  const warned = results.filter((r) => r.status === "warn").map((r) => r.id);
+  return {
+    exitCode: failed.length > 0 ? 1 : 0,
+    passed,
+    failed,
+    skipped,
+    warned
+  };
 }
 
 // src/doctor/cookie-conformance.ts
@@ -284,7 +291,7 @@ function checkCookieCodecConformance(projectRoot) {
 }
 
 // src/doctor/probe.ts
-var FETCH_TIMEOUT_MS = 1e4;
+var FETCH_TIMEOUT_MS = 6e4;
 async function probe(fetchImpl, url) {
   try {
     const response = await fetchImpl(url, {
@@ -310,7 +317,11 @@ var READ = {
   jobs: record("read.jobs", 2),
   jsonld: record("read.jsonld", 2),
   sitemap: record("read.sitemap", 2),
-  robots: record("read.robots", 2)
+  robots: record("read.robots", 2),
+  adsTxt: record("read.adsTxt", 2),
+  indexNow: record("read.indexNow", 2),
+  googleVerification: record("read.googleVerification", 2),
+  oauthCallback: record("read.oauthCallback", 2)
 };
 function skipReadProbes(reason) {
   return Object.values(READ).map((make) => make("skip", reason));
@@ -366,7 +377,11 @@ async function probeSitemap(fetchImpl, base) {
   }
   let urls = doc.urls;
   if (doc.kind === "index") {
-    const child = await probe(fetchImpl, onFrontend(base, urls[0]));
+    const childUrl = onFrontend(base, urls[0]);
+    let child = await probe(fetchImpl, childUrl);
+    if (!child.ok && (child.status === 503 || child.status === 0)) {
+      child = await probe(fetchImpl, childUrl);
+    }
     const childDoc = child.ok ? parseSitemap(child.body) : null;
     if (!childDoc || childDoc.urls.length === 0) {
       return READ.sitemap(
@@ -380,14 +395,109 @@ async function probeSitemap(fetchImpl, base) {
   const sample = await probe(fetchImpl, sampleUrl);
   return sample.ok ? READ.sitemap("pass", `${urls.length} entries; sample page resolves`) : READ.sitemap("fail", `sitemap page ${sampleUrl} \u2192 HTTP ${sample.status}`);
 }
-async function runReadProbes(fetchImpl, frontendUrl) {
+function scoreRobots(robots, seo) {
+  if (!robots.ok) {
+    return READ.robots("fail", `robots.txt HTTP ${robots.status}`);
+  }
+  const missing = [];
+  if (!/user-agent\s*:/i.test(robots.body)) missing.push("User-agent");
+  if (!robots.body.includes("Disallow: /go/")) missing.push("Disallow: /go/");
+  if (seo) {
+    const canonicalBase = seo.canonicalBase.replace(/\/+$/, "");
+    const sitemapLine = `Sitemap: ${canonicalBase}/sitemap.xml`;
+    if (!robots.body.includes(sitemapLine)) missing.push(sitemapLine);
+  }
+  if (missing.includes("User-agent")) {
+    return READ.robots(
+      "fail",
+      "robots.txt returned 200 but has no User-agent directive"
+    );
+  }
+  return missing.length === 0 ? READ.robots("pass", "present") : READ.robots(
+    "warn",
+    `robots.txt is missing ${missing.join(", ")} (hosted boards emit it)`
+  );
+}
+function configuredText(value) {
+  return typeof value === "string" && value.length > 0 ? value : null;
+}
+function scoreOptionalTextFile(options) {
+  const { make, label, path, seo, probed } = options;
+  if (seo == null) {
+    return make("skip", "board seo not fetched");
+  }
+  const expected = configuredText(options.configured);
+  if (expected !== null) {
+    if (!probed.ok) {
+      return make("fail", `${path} HTTP ${probed.status}`);
+    }
+    if (probed.body.trimEnd() === expected.trimEnd()) {
+      return make("pass", `${label} matches dashboard`);
+    }
+    return make("fail", `${path} body does not match dashboard ${label}`);
+  }
+  if (probed.status === 404) {
+    return make("pass", "unconfigured; 404 as expected");
+  }
+  if (probed.status === 200) {
+    return make(
+      "warn",
+      `${label} served but not configured in dashboard \u2014 clone leftover?`
+    );
+  }
+  return make("fail", `${path} HTTP ${probed.status}`);
+}
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function hasGoogleSiteVerificationMeta(html, token) {
+  const escaped = escapeRegExp(token);
+  const quoted = `["']${escaped}["']`;
+  const name = `name\\s*=\\s*["']google-site-verification["']`;
+  const content = `content\\s*=\\s*${quoted}`;
+  return new RegExp(`<meta\\b[^>]*\\b${name}[^>]*\\b${content}`, "i").test(html) || new RegExp(`<meta\\b[^>]*\\b${content}[^>]*\\b${name}`, "i").test(html);
+}
+function scoreGoogleVerification(homeHtml, seo) {
+  if (seo == null) {
+    return READ.googleVerification("skip", "board seo not fetched");
+  }
+  const token = configuredText(seo.googleSiteVerification);
+  if (token === null) {
+    return READ.googleVerification("skip", "no token configured");
+  }
+  return hasGoogleSiteVerificationMeta(homeHtml, token) ? READ.googleVerification("pass", "google-site-verification meta present") : READ.googleVerification(
+    "fail",
+    "home HTML is missing the google-site-verification meta tag"
+  );
+}
+var OAUTH_PROVIDERS = ["google", "linkedin"];
+function scoreOAuthCallback(probed) {
+  const broken = OAUTH_PROVIDERS.filter(
+    (provider) => !(probed[provider].status === 400 && /missing code or state/i.test(probed[provider].body))
+  );
+  return broken.length === 0 ? READ.oauthCallback("pass", "callback paths reach the hosted app") : READ.oauthCallback(
+    "warn",
+    `${broken.map((p) => `/api/board-auth/oauth/${p}/callback \u2192 HTTP ${probed[p].status}`).join(", ")} \u2014 only matters if you registered this domain's callback with the provider: forward the path to cavuno.com, or register https://cavuno.com/api/board-auth/oauth/{provider}/callback instead`
+  );
+}
+async function runReadProbes(fetchImpl, frontendUrl, seo) {
   const base = frontendUrl.replace(/\/$/, "");
-  const [home, jobsAndJsonLd, sitemap, robots] = await Promise.all([
-    probe(fetchImpl, base),
-    probeJobsAndJsonLd(fetchImpl, base),
-    probeSitemap(fetchImpl, base),
-    probe(fetchImpl, `${base}/robots.txt`)
-  ]);
+  const home = await probe(fetchImpl, base);
+  const jobsAndJsonLd = await probeJobsAndJsonLd(fetchImpl, base);
+  const sitemap = await probeSitemap(fetchImpl, base);
+  const robots = await probe(fetchImpl, `${base}/robots.txt`);
+  const adsTxt = await probe(fetchImpl, `${base}/ads.txt`);
+  const indexNow = await probe(fetchImpl, `${base}/indexnow-key.txt`);
+  const oauthCallback = {
+    google: await probe(
+      fetchImpl,
+      `${base}/api/board-auth/oauth/google/callback`
+    ),
+    linkedin: await probe(
+      fetchImpl,
+      `${base}/api/board-auth/oauth/linkedin/callback`
+    )
+  };
   return [
     home.ok && /<(html|body|div|main)[\s>]/i.test(home.body) ? READ.home("pass", "home renders") : READ.home(
       "fail",
@@ -395,10 +505,25 @@ async function runReadProbes(fetchImpl, frontendUrl) {
     ),
     ...jobsAndJsonLd,
     sitemap,
-    robots.ok && /user-agent\s*:/i.test(robots.body) ? READ.robots("pass", "present") : READ.robots(
-      "fail",
-      robots.ok ? "robots.txt returned 200 but has no User-agent directive" : `robots.txt HTTP ${robots.status}`
-    )
+    scoreRobots(robots, seo),
+    scoreOptionalTextFile({
+      make: READ.adsTxt,
+      label: "ads.txt",
+      path: "/ads.txt",
+      seo,
+      configured: seo?.adsTxt,
+      probed: adsTxt
+    }),
+    scoreOptionalTextFile({
+      make: READ.indexNow,
+      label: "indexnow-key.txt",
+      path: "/indexnow-key.txt",
+      seo,
+      configured: seo?.indexNowKey,
+      probed: indexNow
+    }),
+    scoreGoogleVerification(home.body, seo),
+    scoreOAuthCallback(oauthCallback)
   ];
 }
 
@@ -454,6 +579,28 @@ async function checkBoardResolves(fetchImpl, env) {
   }
   return STATIC_BOARD("pass", "publishable key resolves the board");
 }
+async function fetchBoardSeo(fetchImpl, env) {
+  const result = await probe(
+    fetchImpl,
+    `${apiBase(env.apiUrl)}/v1/boards/${encodeURIComponent(env.boardKey)}/seo`
+  );
+  if (!result.ok) return null;
+  try {
+    const parsed = JSON.parse(result.body);
+    if (typeof parsed !== "object" || parsed === null) return null;
+    const rec = parsed;
+    if (typeof rec.canonicalBase !== "string") return null;
+    const asNullableString = (value) => value === null || typeof value === "string" ? value : null;
+    return {
+      canonicalBase: rec.canonicalBase,
+      adsTxt: asNullableString(rec.adsTxt),
+      indexNowKey: asNullableString(rec.indexNowKey),
+      googleSiteVerification: asNullableString(rec.googleSiteVerification)
+    };
+  } catch {
+    return null;
+  }
+}
 var SKILL_ROOTS = [
   ".claude/skills",
   ".agents/skills",
@@ -515,8 +662,13 @@ async function runDoctor(options) {
   } else {
     results.push(STATIC_API("skip", "PUBLIC_CAVUNO_API_URL not set"));
   }
+  let seo = null;
   if (envOk) {
-    results.push(await checkBoardResolves(fetchImpl, env));
+    const boardResult = await checkBoardResolves(fetchImpl, env);
+    results.push(boardResult);
+    if (boardResult.status === "pass") {
+      seo = await fetchBoardSeo(fetchImpl, env);
+    }
   } else {
     results.push(STATIC_BOARD("skip", "env checks failed \u2014 fix them first"));
   }
@@ -525,7 +677,7 @@ async function runDoctor(options) {
     ...checkCookieCodecConformance(options.projectRoot ?? process.cwd())
   );
   results.push(
-    ...options.frontendUrl ? await runReadProbes(fetchImpl, options.frontendUrl) : skipReadProbes("no --frontend <url> given")
+    ...options.frontendUrl ? await runReadProbes(fetchImpl, options.frontendUrl, seo) : skipReadProbes("no --frontend <url> given")
   );
   return { results, summary: summarize(results) };
 }
@@ -596,18 +748,21 @@ async function doctor(argv) {
   });
   console.log("\n@cavuno/board doctor");
   for (const result of results) {
-    const mark = result.status === "pass" ? "\u2713" : result.status === "fail" ? "\u2717" : "\u2212";
+    const mark = result.status === "pass" ? "\u2713" : result.status === "fail" ? "\u2717" : result.status === "warn" ? "!" : "\u2212";
     console.log(
       `  ${mark} [tier ${result.tier}] ${result.id} \u2014 ${result.detail}`
     );
   }
   console.log(
     `
-${summary.passed.length} passed, ${summary.failed.length} failed, ${summary.skipped.length} skipped`
+${summary.passed.length} passed, ${summary.failed.length} failed, ${summary.skipped.length} skipped, ${summary.warned.length} warned`
   );
   if (summary.skipped.length > 0) {
     console.log(`  Skipped (NOT verified): ${summary.skipped.join(", ")}`);
   }
+  if (summary.warned.length > 0) {
+    console.log(`  Warned: ${summary.warned.join(", ")}`);
+  }
   if (!frontendUrl) {
     console.log(
       "  Pass --frontend <url> to run the read probes against your board frontend."

package/dist/{blog-DbFr4VPW.d.mts → blog-C_xXYOxc.d.mts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-DePC7a05.mjs';
+import { S as Schemas } from './_spec-BwUP7Wni.mjs';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{blog-ummlt6Uq.d.ts → blog-DC4BfQqF.d.ts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-DePC7a05.js';
+import { S as Schemas } from './_spec-BwUP7Wni.js';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{board-zWyHbyi4.d.ts → board-CG8rDGTY.d.mts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-DePC7a05.js';
-import { L as ListEnvelope, m as RelatedSearch } from './jobs-twt5TO9l.js';
+import { S as Schemas } from './_spec-BwUP7Wni.mjs';
+import { L as ListEnvelope, m as RelatedSearch } from './jobs-BToqhRuU.mjs';
 
 type PublicCompany = Schemas['CompanyPublic'];
 /** A market (sector) a company operates in — name + its source slug. */
@@ -98,6 +98,8 @@ type SalaryDetailQuery = {
 type PublicBoard = Schemas['PublicBoardContext'];
 type PublicBoardFeatures = PublicBoard['features'];
 type PublicBoardAnalytics = PublicBoard['analytics'];
+type PublicBoardAds = PublicBoard['ads'];
+type PublicBoardJobForm = PublicBoard['jobForm'];
 /**
  * An operator-defined custom field definition. Board-wide and
  * model-scoped under `board.context().customFields` (today only `job`);
@@ -109,4 +111,4 @@ type CustomFieldDefinition = Schemas['CustomFieldDefinition'];
 type CustomFieldType = CustomFieldDefinition['type'];
 type CustomFieldOption = Schemas['CustomFieldOption'];
 
-export type { TitleLocationSalary as A, TitleLocationsIndex as B, CustomFieldDefinition as C, LocationSalaryDetail as L, PublicBoard as P, SkillSalaryDetail as S, TitleSalaryDetail as T, CompanyCategorySalary as a, CompanySalary as b, CompaniesListQuery as c, CompanyListEnvelope as d, CompaniesSearchBody as e, CompanyJobsListQuery as f, CompanySimilarQuery as g, CompanyMarketsListQuery as h, SalaryDetailQuery as i, CompanyMarket as j, CompanyMarketRef as k, CompanySalarySummary as l, CustomFieldOption as m, CustomFieldType as n, LocationSkillsIndex as o, LocationTitlesIndex as p, PublicBoardAnalytics as q, PublicBoardFeatures as r, PublicCompany as s, PublicCompanyDetail as t, SalaryCompany as u, SalaryLocation as v, SalarySkill as w, SalaryTitle as x, SkillLocationSalary as y, SkillLocationsIndex as z };
+export type { SkillLocationSalary as A, SkillLocationsIndex as B, CustomFieldDefinition as C, TitleLocationSalary as D, TitleLocationsIndex as E, LocationSalaryDetail as L, PublicBoard as P, SkillSalaryDetail as S, TitleSalaryDetail as T, CompanyCategorySalary as a, CompanySalary as b, CompaniesListQuery as c, CompanyListEnvelope as d, CompaniesSearchBody as e, CompanyJobsListQuery as f, CompanySimilarQuery as g, CompanyMarketsListQuery as h, SalaryDetailQuery as i, CompanyMarket as j, CompanyMarketRef as k, CompanySalarySummary as l, CustomFieldOption as m, CustomFieldType as n, LocationSkillsIndex as o, LocationTitlesIndex as p, PublicBoardAds as q, PublicBoardAnalytics as r, PublicBoardFeatures as s, PublicBoardJobForm as t, PublicCompany as u, PublicCompanyDetail as v, SalaryCompany as w, SalaryLocation as x, SalarySkill as y, SalaryTitle as z };

package/dist/{board-DxTMBgIf.d.mts → board-zdQ875ck.d.ts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-DePC7a05.mjs';
-import { L as ListEnvelope, m as RelatedSearch } from './jobs-DTLDt57G.mjs';
+import { S as Schemas } from './_spec-BwUP7Wni.js';
+import { L as ListEnvelope, m as RelatedSearch } from './jobs-B-uO7ffG.js';
 
 type PublicCompany = Schemas['CompanyPublic'];
 /** A market (sector) a company operates in — name + its source slug. */
@@ -98,6 +98,8 @@ type SalaryDetailQuery = {
 type PublicBoard = Schemas['PublicBoardContext'];
 type PublicBoardFeatures = PublicBoard['features'];
 type PublicBoardAnalytics = PublicBoard['analytics'];
+type PublicBoardAds = PublicBoard['ads'];
+type PublicBoardJobForm = PublicBoard['jobForm'];
 /**
  * An operator-defined custom field definition. Board-wide and
  * model-scoped under `board.context().customFields` (today only `job`);
@@ -109,4 +111,4 @@ type CustomFieldDefinition = Schemas['CustomFieldDefinition'];
 type CustomFieldType = CustomFieldDefinition['type'];
 type CustomFieldOption = Schemas['CustomFieldOption'];
 
-export type { TitleLocationSalary as A, TitleLocationsIndex as B, CustomFieldDefinition as C, LocationSalaryDetail as L, PublicBoard as P, SkillSalaryDetail as S, TitleSalaryDetail as T, CompanyCategorySalary as a, CompanySalary as b, CompaniesListQuery as c, CompanyListEnvelope as d, CompaniesSearchBody as e, CompanyJobsListQuery as f, CompanySimilarQuery as g, CompanyMarketsListQuery as h, SalaryDetailQuery as i, CompanyMarket as j, CompanyMarketRef as k, CompanySalarySummary as l, CustomFieldOption as m, CustomFieldType as n, LocationSkillsIndex as o, LocationTitlesIndex as p, PublicBoardAnalytics as q, PublicBoardFeatures as r, PublicCompany as s, PublicCompanyDetail as t, SalaryCompany as u, SalaryLocation as v, SalarySkill as w, SalaryTitle as x, SkillLocationSalary as y, SkillLocationsIndex as z };
+export type { SkillLocationSalary as A, SkillLocationsIndex as B, CustomFieldDefinition as C, TitleLocationSalary as D, TitleLocationsIndex as E, LocationSalaryDetail as L, PublicBoard as P, SkillSalaryDetail as S, TitleSalaryDetail as T, CompanyCategorySalary as a, CompanySalary as b, CompaniesListQuery as c, CompanyListEnvelope as d, CompaniesSearchBody as e, CompanyJobsListQuery as f, CompanySimilarQuery as g, CompanyMarketsListQuery as h, SalaryDetailQuery as i, CompanyMarket as j, CompanyMarketRef as k, CompanySalarySummary as l, CustomFieldOption as m, CustomFieldType as n, LocationSkillsIndex as o, LocationTitlesIndex as p, PublicBoardAds as q, PublicBoardAnalytics as r, PublicBoardFeatures as s, PublicBoardJobForm as t, PublicCompany as u, PublicCompanyDetail as v, SalaryCompany as w, SalaryLocation as x, SalarySkill as y, SalaryTitle as z };

package/dist/{breadcrumbs-P4qh0zML.d.mts → breadcrumbs-BK7AqNp2.d.mts}

@@ -1,5 +1,5 @@
-import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-DxTMBgIf.mjs';
-import { P as PublicJob } from './jobs-DTLDt57G.mjs';
+import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-CG8rDGTY.mjs';
+import { P as PublicJob } from './jobs-BToqhRuU.mjs';
 
 /**
  * Wire enum for `salaryTimeframe`. Defined here (not re-exported from any

package/dist/{breadcrumbs-kbmspmfk.d.ts → breadcrumbs-qs9DC0yh.d.ts}

@@ -1,5 +1,5 @@
-import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-zWyHbyi4.js';
-import { P as PublicJob } from './jobs-twt5TO9l.js';
+import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-zdQ875ck.js';
+import { P as PublicJob } from './jobs-B-uO7ffG.js';
 
 /**
  * Wire enum for `salaryTimeframe`. Defined here (not re-exported from any