Call Analyst — Engineering Hub

One place for everything, Pablo. The refactor is shipped to prod and the AWS/auth plan is ready for your input. Five deep-dives below; the short version is right here.

The five pages

All behind the Daxos gate (password daxos2027 — one entry unlocks all of them for a year).

Start here (suggested order)

1. The refactor summary ↓ (this page) — what just changed in the codebase and why it matters for your work.
2. Build Docs — how the product is wired today (the thing the AWS work plugs into).
3. Auth / AWS Plan — the concrete Cognito/CDK/Stripe plan; the 5 open questions at the bottom are what we decide Saturday.
4. Reference as needed: your AWS proposal, the refactor plan, the progress log.

🚀 The refactor — what just shipped

Before → after

Why it's safe (verified 4 ways)

• Byte-for-byte identical — the split files re-concatenate to the original monolith exactly (reconstruction proof). It's the same code, reorganized into files.
• Pre-flight agent: GO — syntax, change-scope, no secret literals, asset refs resolve (7/7).
• Staged on the real consumer-testing host first — live check PASS, 27/27 assets.
• Prod verified live + an adversarial 39-click sweep — zero JS errors, all cross-module globals present, every surface opens.

The core split — the one genuinely risky part

The 20k→modules split was mechanical because each piece was already its own <script>. But the 5,810-line core was one atomic block — cutting it creates new boundaries. We ran an AST dependency analysis first and proved the core has zero load-time forward references, which is what made splitting it at section seams safe. We didn't guess; we proved it, then re-verified at runtime.

Two bugs caught before shipping

What this means for your work

The frontend is now reviewable and modular, and the serverless functions are untouched and isolated — they're the exact seam where your Cognito JWT-verify swaps in (replacing the Supabase token check). The module split is the foundation the AWS migration builds on. call-analyst-pwa/ARCHITECTURE.md is the map.

Decided vs open

Two small follow-ups

• Activate CI — move ci/smoke.yml → .github/workflows/ via the GitHub web UI (30s; the token can't push workflow files), or send a workflow-scoped token.
• Rotate the Resend key — it was caught in a comment and removed before merge, but it's in git history, so swap it for a fresh one when convenient. Nothing waits on this.
• Internal builds (analyst.daxos.us) untouched — still on the stale internal branch; they work, but main is now ahead. Collapsing that drift is the segregation end-state above.

Quick reference