Session 45: Snapshot pipeline + GameCard swap + live ticker (2100 tests)

The on-demand "Read" grade model is RETIRED. A scheduled pipeline pre-grades the
slate, locks grades to the line, tracks movement; the dashboard shows them already
there. Orchestrates existing services — nothing rebuilt.

- snapshotService.runSnapshot(sport): getOdds → gradeAndCacheSlate → classify
  archetype per player → lock gradedAt → line deltas vs previous snapshot → write
  snapshot:{sport}:latest/previous + grades:{sport} → ticker events. Fully
  injectable, zero-network unit tests. runAllSnapshots = cron entrypoint.
- Internal trigger POST /api/internal/snapshot/:sport + /all (requireInternalAuth).
  In-process cron (SNAPSHOT_CRON=1, UTC 14,19,22,1,3) in server.js, no new dep.
- Public reads: GET /api/snapshot/:sport (cache-only) + GET /api/ticker (merges
  TICKER_MANUAL pins) + Next proxies.
- GameCard swap: live Slate renders vyndr/GameCard (legacy kept for types only),
  overlays locked grades onto game props → player name once + archetype badge +
  "Graded Xh ago at -115 · Current 2.5 · ▲ TOWARD +1.0". Ungraded → "Awaiting next
  scan", NO Read button. On-demand onGrade flow deleted.
- Ticker polls /api/ticker every 30s, graceful fallback to hardcoded items.
- NBA/WNBA: espnStatsAdapter free fallback (defensive parse → found:false on shape
  mismatch) wired into resolvePlayerStats after the offline Python service.

Env: PROPLINE_API_KEY_1/2/3, VYNDR_INTERNAL_KEY, SNAPSHOT_CRON=1, TICKER_MANUAL.
Backend 2061 -> 2100 tests (+39), 173 suites. Web build clean (exit 0).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

src/routes/snapshot.js

@@ -0,0 +1,38 @@
+'use strict';
+
+/**
+ * GET /api/snapshot/:sport (Session 45) — the latest pre-graded slate.
+ *
+ * Public, cache-only read of `snapshot:{sport}:latest` (enriched grades with
+ * archetype + gradedAt, plus line deltas). Falls back to the `grades:{sport}`
+ * envelope when no snapshot has run yet. NEVER triggers a snapshot (that's the
+ * internal cron's job) — so it can't drain the PropLine quota.
+ */
+
+const express = require('express');
+const { createRateLimit } = require('../middleware/rateLimit');
+const { cacheGet } = require('../utils/redis');
+
+const router = express.Router();
+router.use(createRateLimit({ windowMs: 60_000, max: 60 }));
+
+router.get('/:sport', async (req, res) => {
+  const sport = String(req.params.sport || '').toLowerCase();
+  try {
+    const snap = await cacheGet(`snapshot:${sport}:latest`);
+    if (snap && Array.isArray(snap.grades)) {
+      res.set('Cache-Control', 'public, max-age=30');
+      return res.json({ sport, updated_at: snap.updated_at, grades: snap.grades, deltas: snap.deltas || [] });
+    }
+    // Fallback: the grades envelope (no deltas yet).
+    const env = await cacheGet(`grades:${sport}`);
+    const grades = env && Array.isArray(env.grades) ? env.grades : [];
+    res.set('Cache-Control', 'public, max-age=30');
+    return res.json({ sport, updated_at: env && env.updated_at, grades, deltas: [] });
+  } catch (err) {
+    console.error('[snapshot]', err.message);
+    return res.status(200).json({ sport, grades: [], deltas: [] });
+  }
+});
+
+module.exports = router;