Skip to content

Canonical vs Cloned Working Copies

This audit was performed on a workspace where two copies of someli-api and someli-platform coexist:

/home/nino/src/someli/someli-api          (canonical working copy — kept by the engineer doing the audit)
/home/nino/src/someli/someli-platform     (canonical working copy)
/home/nino/src/someli/someli-gh/someli-api      (fresh clone from GitHub at audit time)
/home/nino/src/someli/someli-gh/someli-platform (fresh clone from GitHub at audit time)

The someli-gh/* clones were taken on 2026-05-17 to feed this audit. The other working copies have been on the engineer's machine longer and contain extra non-tracked files (.env, scratch images, the doc/ tree, CLAUDE.md).

someli-platform
Canonical HEAD 380b2144 (2026-03-12) on main
Cloned HEAD 380b2144 (2026-03-12) on main
Verdict Identical. The clone matches the canonical commit byte-for-byte for tracked files.

Differences observed are all untracked working-tree extras in the canonical copy:

  • CLAUDE.md, doc/, .env, .env~ — local-only files
  • polotno-bundle.css, polotno-bundle.css.map, polotno-bundle.js, polotno-bundle.js.map — build output kept locally
  • polotno-editor/.env, polotno-editor/.parcel-cache, polotno-editor/.yarnrc — local-only
  • static/sw.js — generated service worker
  • .yarnrc — local-only

No tracked source files differ.

someli-api
Canonical HEAD 8825ecdd "Merge branch 'uat_api' into main" (2026-03-12) on main
Cloned HEAD d02e2141 "Merge pull request #1618 from Someli-ai/new/axios_version_changes1" (2026-04-16) on main
Verdict Cloned is 7 commits ahead of canonical. The clone is the more recent state and should be preferred for audit.

The 7 new commits in the clone:

d02e2141 Merge pull request #1618 from Someli-ai/new/axios_version_changes1
56e2fcd0 fix: update axios dependency version to 1.15.0
e4fa35db fix: update publish key retrieval to use configuration file
33940689 fix: correct uid extraction logic in PDF generation process
f2ad2f45 feat: refactor codeChild iteration to use for loop and add debug logging
80a90d67 fix: simplify image source assignment by removing unnecessary base64 conversion
a956405d feat: add support for retrieving images from the Image Library in PDF generation

These manifest as three concrete file diffs:

  1. package.json — single-line change, axios ^1.9.0 → ^1.15.0.
  2. job_carousel_pdf.js — 55 lines of diff. The PDF-generation worker now correctly extracts uid, falls back to the Image Library for image lookups, and uses a for loop instead of an inadvertent .forEach over child nodes.
  3. slack_notifications_post_disconnect.js — small refactor: PUBLISH_KEY now comes from ./conf (i.e., the configured conf.js module that loads .env) instead of process.env.PUBLISH_KEY directly. A console.log("Slack notification service started…") was added.

The canonical also has the usual untracked working-tree extras (CLAUDE.md, doc/, .env, .yarnrc, image scratch files, routes/temp_video_* Polotno scratch directories).

Implication for the documentation

The audit was performed against the clones in /home/nino/src/someli/someli-gh/*, which represent the GitHub-main state at clone time. Where this documentation cites file paths, it cites them under someli-gh/<repo>/….

The audit content (now organised under someli-doc/audit/someli-api/ and someli-doc/audit/someli-platform/ — separate from the cloned source repos) was authored against slightly-older snapshots: 8825ecdd for someli-api and 380b2144 for someli-platform. For someli-platform, that matches the clone exactly. For someli-api, the docs may not yet reflect the 7 new commits listed above (specifically the PDF-generation and conf.PUBLISH_KEY changes); when you re-verify, add those to the relevant docs.