docs(evidence): re-verify /health surface and signup intake labels (2026-08-21)

.lane/reports/docs-health-surface-website-appraisal-rereverify-2026-08-21-lane1.md

@@ -0,0 +1,68 @@
+# Lane 1 — Live /health surface and signup intake labels — re-verify (2026-08-21)
+
+Branch: `docs/health-surface-website-appraisal-rereverify-2026-08-21-lane1`
+Item: `a3ab4b7420` — "[unreviewed-by-opus] The live worker /health surface
+still reports `surface:"agent-desk"` and the signup intake so"
+
+## Outcome: CLOSED — the failure mode is gone on current main and live
+
+The item's failure mode — `/health` reporting `surface:"agent-desk"` and the
+signup intake labeled the same — does not occur on the current head
+(`92d55c3`, fetched fresh from `origin/main`) or on the live deployment as
+probed 2026-08-21. The fix (PR #164, `aeb34a9`, merged 2026-08-13) is already
+in `origin/main`; the prior receipt
+(`docs/evidence/health-surface-website-appraisal-rereverify-2026-08-14.md`)
+closed the same state against `533ee19`, and this re-verify confirms the
+guarantee held through the current head. This lane delivers a dated receipt
+on the current head so the tracker cannot re-open the item by drift, the same
+pattern the 2026-08-14 lane used.
+
+## Source checks on current main (92d55c3)
+
+1. `npm run check` → exit 0 ("TinyStudio.io checks passed."), including the
+   `surface: APPRAISAL_SURFACE` guard in `scripts/check-site.mjs`.
+2. `npm test` → exit 0, 126 pass / 0 fail across all suites.
+   - `scripts/test-agent-worker.mjs` "worker /health names the current
+     Website Appraisal surface, not the retired Agent Desk": asserts
+     `body.surface === "website-appraisal"` and `!== "agent-desk"`.
+   - Same file, signup-intake test: current-intake `INSERT INTO
+     email_signups` carries `"website-appraisal"` and explicitly
+     `notEqual "agent-self-serve"`.
+   - Same file, "worker /health verdict keys off the current intake path":
+     verdict depends only on `email_signups`, not the retired
+     `agent_runs`/`agent_usage_limits` tables or the AI binding.
+   - Legacy path keeps its own label: `/api/agent-audit` rows still carry
+     `agent-self-serve` (tested).
+3. Source: `src/worker.js` — `APPRAISAL_SURFACE = "website-appraisal"`
+   (line 114); `/api/signups` saves via
+   `saveEmailSignup(request, env, url, email, APPRAISAL_SURFACE, website)`
+   (line 454); `/health` reports `surface: APPRAISAL_SURFACE` (line 1341).
+   The retired label appears only on the legacy `/api/agent-audit` path
+   (lines 521, 1215).
+
+## Live probes 2026-08-21
+
+- `GET https://tinystudio.io/health` → 200:
+  `{"ok":true,"service":"tinystudio-io-public","surface":"website-appraisal","db":"configured","checks":{"db":true,"signupsTable":true,...}}`
+- `GET https://app.tinystudio.io/health` → retired-app 410 page pointing at
+  The Website Appraisal (no live /health on the retired host).
+- `GET https://api.tinystudio.io/health` → retired-API JSON naming The
+  Website Appraisal as the current offer.
+
+## Files touched
+
+- `docs/evidence/health-surface-website-appraisal-rereverify-2026-08-21.md`
+  — the dated evidence receipt on the current head, mirroring the
+  structure of the 2026-08-14 receipt with today's source checks and live
+  probes.
+- `.lane/reports/docs-health-surface-website-appraisal-rereverify-2026-08-21-lane1.md`
+  — this lane report (lane-unique path; no shared report file touched).
+
+No shared report files (`.lane/report.md`, `docs/status.md`) were written.
+No production code changed: the fix already landed via PR #164; this lane's
+deliverable is the re-verification receipt.
+
+## Closeout
+
+Item `a3ab4b7420` is closed: `/health` and the signup intake report
+`website-appraisal` on current main and live. PR opened for the receipt.

docs/evidence/health-surface-website-appraisal-rereverify-2026-08-21.md

@@ -0,0 +1,94 @@
+# Live /health surface and signup intake — re-verify against current main and live
+
+Date: 2026-08-21
+Scope: the review-queue item "[unreviewed-by-opus] The live worker /health
+surface still reports `surface:"agent-desk"` and the signup intake so". This
+receipt re-verifies the item's guarantee against the current `origin/main`
+head (92d55c3, "fix(check): guard the apple touch icon on every served page,
+and re-verify finding 98a7bf8e08fc (2026-08-20) (#256)") and the live
+deployment of that head. It is source-evidence plus live probes of the
+deployed Worker.
+
+## Summary
+
+The failure mode the item describes — the live worker `/health` surface
+reporting `surface:"agent-desk"`, with the signup intake labeled the same —
+**no longer occurs, on source and on the live site**. The fix is already
+merged in `origin/main`: PR #164 (`aeb34a9`, merged 2026-08-13) labeled the
+current `/health` surface and the `/api/signups` intake as The Website
+Appraisal (`website-appraisal`), never the retired Agent Desk. This is the
+second re-verification of that state (first receipt:
+`docs/evidence/health-surface-website-appraisal-rereverify-2026-08-14.md`,
+closed against `533ee19` and live 2026-08-14); the guarantee still holds on
+the current head and on the live deployment.
+
+Two source guards enforce the guarantee, and both pass on the current head:
+
+- `scripts/test-agent-worker.mjs` — "worker /health names the current Website
+  Appraisal surface, not the retired Agent Desk" asserts
+  `body.surface === "website-appraisal"` and `!== "agent-desk"`; the
+  signup-intake test asserts the `email_signups` row carries
+  `website-appraisal`, never `agent-self-serve`.
+- `src/worker.js` — the intake handler saves signups with the
+  `APPRAISAL_SURFACE` (`"website-appraisal"`) constant and `/health` reports
+  `surface: APPRAISAL_SURFACE`; the retired `agent-self-serve` label survives
+  only on the legacy `/api/agent-audit` path.
+
+Live probes 2026-08-21 confirm the deployed Worker serves the fixed labels.
+
+## Source checks on the current head (92d55c3)
+
+1. `npm run check` passes (exit 0): the site source guard is green,
+   including the `surface: APPRAISAL_SURFACE` guard
+   (`scripts/check-site.mjs`).
+2. `npm test` passes (exit 0): the full worker/UI/heading/sitemap suites are
+   green. The `/health` and intake tests specifically pass:
+   - "worker /health names the current Website Appraisal surface, not the
+     retired Agent Desk" — asserts `body.surface === "website-appraisal"`
+     and `body.surface !== "agent-desk"`.
+   - "worker /health verdict keys off the current intake path, not the
+     retired Agent Desk machinery" — asserts the verdict depends only on the
+     `email_signups` table, not the retired `agent_runs`/`agent_usage_limits`
+     tables or the AI binding.
+   - "signup handler accepts a bare-domain website with a test email and
+     stores the normalized URL" — asserts the current-intake
+     `INSERT INTO email_signups` carries `"website-appraisal"` in the source
+     column and explicitly `notEqual "agent-self-serve"`.
+3. The legacy `/api/agent-audit` path alone keeps the retired label: the
+   "legacy /api/agent-audit still labels its rows with the retired
+   self-serve source" test asserts `agent-self-serve` on that path.
+
+## Live re-verification 2026-08-21
+
+Direct probes of the deployed Worker:
+
+- `GET https://tinystudio.io/health` → 200:
+  `{"ok":true,"service":"tinystudio-io-public","surface":"website-appraisal","db":"configured","checks":{"db":true,"signupsTable":true,"ai":true,"agentRunsTable":true,"usageLimitsTable":true},...}`
+- `GET https://app.tinystudio.io/health` → serves the retired-app 410 page
+  (the retired host no longer exposes a live /health; the retraction page
+  points at The Website Appraisal).
+- `GET https://api.tinystudio.io/health` → retired-API JSON naming The
+  Website Appraisal as the current offer.
+
+The apex `/health` — the surface the item flags — reports
+`surface:"website-appraisal"` with `ok:true`.
+
+## Limitation
+
+This is a live-deployment measurement, not a CI gate on the deployed Worker.
+The regression guard lives in `scripts/test-agent-worker.mjs`, which fails
+`npm test` if `/health` ever names anything but the current offer or if the
+current intake's signup rows carry the retired label; `npm run check` and
+`npm test` both pass on the current head, and the live probes match the
+source.
+
+## Closeout
+
+The item as stated — the live worker `/health` still reporting
+`surface:"agent-desk"` and the signup intake so — is **closed against
+current main and live**: the code-side fix (PR #164, `aeb34a9`, merged
+2026-08-13) is in `origin/main`, the worker tests and site guard enforce the
+label on both `/health` and the current intake, and the deployed site's
+`/health` reports `surface:"website-appraisal"` with `ok:true` as probed
+2026-08-21. The receipt now records the closeout on the current head so the
+item cannot be re-opened by tracker drift.