Predict the blast radius before the merge.
Paste a git diff, or fire a preset. IBM Bob Shell runs the cascade-architect instructions server-side, streams stdout/stderr over SSE, and validates the fenced JSON before it hits the impact table.
cp .env.example .env.localWorks with any public GitHub pull request (paste the PR URL). Fetches the full unified diff plus up to 10 changed-file snapshots from the PR head via /api/github. Private repos need a token with repo scope. Then Run cascade sends diff + snippets to Bob Shell (bob CLI + BOBSHELL_API_KEY).
Auth signature change
verifyToken return type flips from boolean to object — every caller silently bypasses auth.
Env var silent rename
SMTP_SERVER → MAIL_HOST in code, but .env / docker-compose still ship SMTP_SERVER. Production email dies silently.
Safe internal refactor
calculateTax keeps its signature but now rounds to 2 decimals. Only behaviour, not contract.