@cavuno/board 1.24.0 → 1.26.0

package/dist/theme.d.mts

@@ -0,0 +1,63 @@
+/**
+ * `@cavuno/board/theme` — board theme → shadcn CSS-variable overrides
+ * (ADR-0057).
+ *
+ * The board's stored theme (16 semantic colors × light/dark from
+ * `board.context().theme`) is mapped onto the canonical shadcn token
+ * vocabulary and emitted as overrides of the app's theme block. One
+ * contract, two consumers: the dashboard edits the board theme, and agents
+ * restyle through the standard shadcn theme file — both end up in the same
+ * tokens. The hosted board renders the same 16 source colors through its
+ * own token system; a coverage golden in-monorepo asserts neither side
+ * silently drops a color key.
+ *
+ * A null theme emits nothing — the app's static default theme applies
+ * untouched.
+ */
+/** The 16 board color keys (the wire ships them as an open record). */
+declare const BOARD_COLOR_KEYS: readonly ["brandColor", "buttonPrimary", "buttonPrimaryText", "buttonDanger", "background", "surfaceBackground", "mutedBackground", "highlightBackground", "text", "textSubtle", "textMuted", "textDisabled", "textError", "border", "contrastBackground", "contrastText"];
+type BoardColorKey = (typeof BOARD_COLOR_KEYS)[number];
+/**
+ * Structural input — satisfied by the SDK's `PublicBoardTheme` (whose color
+ * records are open on the wire) and any narrowed server copy.
+ */
+interface ThemeInput {
+    mode: string;
+    schemeId: string;
+    typography: {
+        fontSans: string;
+        fontHeading?: string | null;
+    };
+    colors: {
+        light?: Record<string, unknown>;
+        dark?: Record<string, unknown>;
+    };
+}
+/**
+ * Render the board theme as `:root` (+ `.dark`) CSS-variable overrides.
+ * Inject once at the app shell, after the static theme stylesheet.
+ *
+ * @example
+ * const css = boardThemeToCss((await board.context()).theme);
+ */
+declare function boardThemeToCss(theme: ThemeInput | null): string;
+/** The board's color-scheme preference; unknown/absent → `system`. */
+declare function themeMode(theme: ThemeInput | null): 'light' | 'dark' | 'system';
+/**
+ * Theme font key → Google Fonts family slug, transcribed from the hosted
+ * board's `theme-fonts-metadata.ts` (golden-tested against it). The wire's
+ * `typography.fontSans` is an internal KEY (`'source-sans-pro'`), and the
+ * Google family is not always a re-casing of it (`source-sans-pro` →
+ * `Source+Sans+3`) — never build a font request from the raw key.
+ */
+declare const THEME_FONT_GOOGLE_FAMILIES: Record<string, string>;
+/**
+ * The CSS `font-family` name the Google stylesheet registers for a font key
+ * — the name `--font-sans` must reference for the loaded font to apply
+ * (e.g. `'source-sans-pro'` → `"Source Sans 3"`).
+ */
+declare function themeFontFamily(fontKey: string): string;
+/** One Google Fonts request covering the sans + heading families. */
+declare function googleFontsUrl(theme: ThemeInput | null): string | null;
+
+export { BOARD_COLOR_KEYS, type BoardColorKey, THEME_FONT_GOOGLE_FAMILIES, type ThemeInput, boardThemeToCss, googleFontsUrl, themeFontFamily, themeMode };

package/dist/theme.d.ts

@@ -0,0 +1,63 @@
+/**
+ * `@cavuno/board/theme` — board theme → shadcn CSS-variable overrides
+ * (ADR-0057).
+ *
+ * The board's stored theme (16 semantic colors × light/dark from
+ * `board.context().theme`) is mapped onto the canonical shadcn token
+ * vocabulary and emitted as overrides of the app's theme block. One
+ * contract, two consumers: the dashboard edits the board theme, and agents
+ * restyle through the standard shadcn theme file — both end up in the same
+ * tokens. The hosted board renders the same 16 source colors through its
+ * own token system; a coverage golden in-monorepo asserts neither side
+ * silently drops a color key.
+ *
+ * A null theme emits nothing — the app's static default theme applies
+ * untouched.
+ */
+/** The 16 board color keys (the wire ships them as an open record). */
+declare const BOARD_COLOR_KEYS: readonly ["brandColor", "buttonPrimary", "buttonPrimaryText", "buttonDanger", "background", "surfaceBackground", "mutedBackground", "highlightBackground", "text", "textSubtle", "textMuted", "textDisabled", "textError", "border", "contrastBackground", "contrastText"];
+type BoardColorKey = (typeof BOARD_COLOR_KEYS)[number];
+/**
+ * Structural input — satisfied by the SDK's `PublicBoardTheme` (whose color
+ * records are open on the wire) and any narrowed server copy.
+ */
+interface ThemeInput {
+    mode: string;
+    schemeId: string;
+    typography: {
+        fontSans: string;
+        fontHeading?: string | null;
+    };
+    colors: {
+        light?: Record<string, unknown>;
+        dark?: Record<string, unknown>;
+    };
+}
+/**
+ * Render the board theme as `:root` (+ `.dark`) CSS-variable overrides.
+ * Inject once at the app shell, after the static theme stylesheet.
+ *
+ * @example
+ * const css = boardThemeToCss((await board.context()).theme);
+ */
+declare function boardThemeToCss(theme: ThemeInput | null): string;
+/** The board's color-scheme preference; unknown/absent → `system`. */
+declare function themeMode(theme: ThemeInput | null): 'light' | 'dark' | 'system';
+/**
+ * Theme font key → Google Fonts family slug, transcribed from the hosted
+ * board's `theme-fonts-metadata.ts` (golden-tested against it). The wire's
+ * `typography.fontSans` is an internal KEY (`'source-sans-pro'`), and the
+ * Google family is not always a re-casing of it (`source-sans-pro` →
+ * `Source+Sans+3`) — never build a font request from the raw key.
+ */
+declare const THEME_FONT_GOOGLE_FAMILIES: Record<string, string>;
+/**
+ * The CSS `font-family` name the Google stylesheet registers for a font key
+ * — the name `--font-sans` must reference for the loaded font to apply
+ * (e.g. `'source-sans-pro'` → `"Source Sans 3"`).
+ */
+declare function themeFontFamily(fontKey: string): string;
+/** One Google Fonts request covering the sans + heading families. */
+declare function googleFontsUrl(theme: ThemeInput | null): string | null;
+
+export { BOARD_COLOR_KEYS, type BoardColorKey, THEME_FONT_GOOGLE_FAMILIES, type ThemeInput, boardThemeToCss, googleFontsUrl, themeFontFamily, themeMode };

package/dist/theme.js

@@ -0,0 +1,149 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/theme/index.ts
+var theme_exports = {};
+__export(theme_exports, {
+  BOARD_COLOR_KEYS: () => BOARD_COLOR_KEYS,
+  THEME_FONT_GOOGLE_FAMILIES: () => THEME_FONT_GOOGLE_FAMILIES,
+  boardThemeToCss: () => boardThemeToCss,
+  googleFontsUrl: () => googleFontsUrl,
+  themeFontFamily: () => themeFontFamily,
+  themeMode: () => themeMode
+});
+module.exports = __toCommonJS(theme_exports);
+var BOARD_COLOR_KEYS = [
+  "brandColor",
+  "buttonPrimary",
+  "buttonPrimaryText",
+  "buttonDanger",
+  "background",
+  "surfaceBackground",
+  "mutedBackground",
+  "highlightBackground",
+  "text",
+  "textSubtle",
+  "textMuted",
+  "textDisabled",
+  "textError",
+  "border",
+  "contrastBackground",
+  "contrastText"
+];
+function color(colors, key) {
+  const value = colors[key];
+  return typeof value === "string" && value ? value : void 0;
+}
+function tokenLines(colors) {
+  const lines = [];
+  const set = (token, value) => {
+    if (value) lines.push(`  --${token}: ${value};`);
+  };
+  set("background", color(colors, "background"));
+  set("foreground", color(colors, "text"));
+  set("card", color(colors, "surfaceBackground"));
+  set("card-foreground", color(colors, "text"));
+  set("popover", color(colors, "surfaceBackground"));
+  set("popover-foreground", color(colors, "text"));
+  set("primary", color(colors, "buttonPrimary"));
+  set("primary-foreground", color(colors, "buttonPrimaryText"));
+  set("secondary", color(colors, "mutedBackground"));
+  set("secondary-foreground", color(colors, "text"));
+  set("muted", color(colors, "mutedBackground"));
+  set("muted-foreground", color(colors, "textMuted"));
+  set("accent", color(colors, "highlightBackground"));
+  set("accent-foreground", color(colors, "text"));
+  set(
+    "destructive",
+    color(colors, "buttonDanger") ?? color(colors, "textError")
+  );
+  set("border", color(colors, "border"));
+  set("input", color(colors, "border"));
+  set("ring", color(colors, "brandColor") ?? color(colors, "buttonPrimary"));
+  set("contrast-background", color(colors, "contrastBackground"));
+  set("contrast-foreground", color(colors, "contrastText"));
+  set("foreground-subtle", color(colors, "textSubtle"));
+  set("foreground-disabled", color(colors, "textDisabled"));
+  set("foreground-error", color(colors, "textError"));
+  return lines;
+}
+function boardThemeToCss(theme) {
+  if (!theme) return "";
+  const light = tokenLines(theme.colors.light ?? {});
+  const dark = tokenLines(theme.colors.dark ?? {});
+  const fontSans = theme.typography?.fontSans;
+  if (fontSans) {
+    light.push(
+      `  --font-sans: '${themeFontFamily(fontSans)}', ui-sans-serif, system-ui, sans-serif;`
+    );
+  }
+  const blocks = [];
+  if (light.length > 0) blocks.push(`:root {
+${light.join("\n")}
+}`);
+  if (dark.length > 0) blocks.push(`.dark {
+${dark.join("\n")}
+}`);
+  return blocks.join("\n\n");
+}
+function themeMode(theme) {
+  if (!theme) return "system";
+  return theme.mode === "light" || theme.mode === "dark" ? theme.mode : "system";
+}
+var THEME_FONT_GOOGLE_FAMILIES = {
+  "be-vietnam-pro": "Be+Vietnam+Pro",
+  inter: "Inter",
+  "plus-jakarta-sans": "Plus+Jakarta+Sans",
+  "dm-sans": "DM+Sans",
+  "public-sans": "Public+Sans",
+  figtree: "Figtree",
+  "work-sans": "Work+Sans",
+  "open-sans": "Open+Sans",
+  poppins: "Poppins",
+  hind: "Hind",
+  lexend: "Lexend",
+  "fira-sans": "Fira+Sans",
+  manrope: "Manrope",
+  "source-sans-pro": "Source+Sans+3",
+  outfit: "Outfit",
+  "space-grotesk": "Space+Grotesk",
+  geist: "Geist",
+  "source-serif-4": "Source+Serif+4",
+  lora: "Lora",
+  "crimson-pro": "Crimson+Pro"
+};
+function googleFamily(fontKey) {
+  return THEME_FONT_GOOGLE_FAMILIES[fontKey] ?? encodeURIComponent(fontKey).replaceAll("%20", "+");
+}
+function themeFontFamily(fontKey) {
+  return googleFamily(fontKey).replaceAll("+", " ");
+}
+function googleFontsUrl(theme) {
+  if (!theme) return null;
+  const families = /* @__PURE__ */ new Set();
+  if (theme.typography?.fontSans) {
+    families.add(googleFamily(theme.typography.fontSans));
+  }
+  if (theme.typography?.fontHeading) {
+    families.add(googleFamily(theme.typography.fontHeading));
+  }
+  if (families.size === 0) return null;
+  const params = [...families].map((f) => `family=${f}:wght@400;500;600;700`).join("&");
+  return `https://fonts.googleapis.com/css2?${params}&display=swap`;
+}

package/dist/theme.mjs

@@ -0,0 +1,128 @@
+// src/theme/index.ts
+var BOARD_COLOR_KEYS = [
+  "brandColor",
+  "buttonPrimary",
+  "buttonPrimaryText",
+  "buttonDanger",
+  "background",
+  "surfaceBackground",
+  "mutedBackground",
+  "highlightBackground",
+  "text",
+  "textSubtle",
+  "textMuted",
+  "textDisabled",
+  "textError",
+  "border",
+  "contrastBackground",
+  "contrastText"
+];
+function color(colors, key) {
+  const value = colors[key];
+  return typeof value === "string" && value ? value : void 0;
+}
+function tokenLines(colors) {
+  const lines = [];
+  const set = (token, value) => {
+    if (value) lines.push(`  --${token}: ${value};`);
+  };
+  set("background", color(colors, "background"));
+  set("foreground", color(colors, "text"));
+  set("card", color(colors, "surfaceBackground"));
+  set("card-foreground", color(colors, "text"));
+  set("popover", color(colors, "surfaceBackground"));
+  set("popover-foreground", color(colors, "text"));
+  set("primary", color(colors, "buttonPrimary"));
+  set("primary-foreground", color(colors, "buttonPrimaryText"));
+  set("secondary", color(colors, "mutedBackground"));
+  set("secondary-foreground", color(colors, "text"));
+  set("muted", color(colors, "mutedBackground"));
+  set("muted-foreground", color(colors, "textMuted"));
+  set("accent", color(colors, "highlightBackground"));
+  set("accent-foreground", color(colors, "text"));
+  set(
+    "destructive",
+    color(colors, "buttonDanger") ?? color(colors, "textError")
+  );
+  set("border", color(colors, "border"));
+  set("input", color(colors, "border"));
+  set("ring", color(colors, "brandColor") ?? color(colors, "buttonPrimary"));
+  set("contrast-background", color(colors, "contrastBackground"));
+  set("contrast-foreground", color(colors, "contrastText"));
+  set("foreground-subtle", color(colors, "textSubtle"));
+  set("foreground-disabled", color(colors, "textDisabled"));
+  set("foreground-error", color(colors, "textError"));
+  return lines;
+}
+function boardThemeToCss(theme) {
+  if (!theme) return "";
+  const light = tokenLines(theme.colors.light ?? {});
+  const dark = tokenLines(theme.colors.dark ?? {});
+  const fontSans = theme.typography?.fontSans;
+  if (fontSans) {
+    light.push(
+      `  --font-sans: '${themeFontFamily(fontSans)}', ui-sans-serif, system-ui, sans-serif;`
+    );
+  }
+  const blocks = [];
+  if (light.length > 0) blocks.push(`:root {
+${light.join("\n")}
+}`);
+  if (dark.length > 0) blocks.push(`.dark {
+${dark.join("\n")}
+}`);
+  return blocks.join("\n\n");
+}
+function themeMode(theme) {
+  if (!theme) return "system";
+  return theme.mode === "light" || theme.mode === "dark" ? theme.mode : "system";
+}
+var THEME_FONT_GOOGLE_FAMILIES = {
+  "be-vietnam-pro": "Be+Vietnam+Pro",
+  inter: "Inter",
+  "plus-jakarta-sans": "Plus+Jakarta+Sans",
+  "dm-sans": "DM+Sans",
+  "public-sans": "Public+Sans",
+  figtree: "Figtree",
+  "work-sans": "Work+Sans",
+  "open-sans": "Open+Sans",
+  poppins: "Poppins",
+  hind: "Hind",
+  lexend: "Lexend",
+  "fira-sans": "Fira+Sans",
+  manrope: "Manrope",
+  "source-sans-pro": "Source+Sans+3",
+  outfit: "Outfit",
+  "space-grotesk": "Space+Grotesk",
+  geist: "Geist",
+  "source-serif-4": "Source+Serif+4",
+  lora: "Lora",
+  "crimson-pro": "Crimson+Pro"
+};
+function googleFamily(fontKey) {
+  return THEME_FONT_GOOGLE_FAMILIES[fontKey] ?? encodeURIComponent(fontKey).replaceAll("%20", "+");
+}
+function themeFontFamily(fontKey) {
+  return googleFamily(fontKey).replaceAll("+", " ");
+}
+function googleFontsUrl(theme) {
+  if (!theme) return null;
+  const families = /* @__PURE__ */ new Set();
+  if (theme.typography?.fontSans) {
+    families.add(googleFamily(theme.typography.fontSans));
+  }
+  if (theme.typography?.fontHeading) {
+    families.add(googleFamily(theme.typography.fontHeading));
+  }
+  if (families.size === 0) return null;
+  const params = [...families].map((f) => `family=${f}:wght@400;500;600;700`).join("&");
+  return `https://fonts.googleapis.com/css2?${params}&display=swap`;
+}
+export {
+  BOARD_COLOR_KEYS,
+  THEME_FONT_GOOGLE_FAMILIES,
+  boardThemeToCss,
+  googleFontsUrl,
+  themeFontFamily,
+  themeMode
+};

package/package.json

@@ -1,8 +1,9 @@
 {
   "name": "@cavuno/board",
-  "version": "1.24.0",
+  "version": "1.26.0",
   "description": "Typed isomorphic client for the Cavuno Board API",
   "license": "MIT",
+  "type": "commonjs",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/wollemiahq/cavuno.git",
@@ -29,6 +30,36 @@
         "default": "./dist/index.js"
       }
     },
+    "./format": {
+      "import": {
+        "types": "./dist/format.d.mts",
+        "default": "./dist/format.mjs"
+      },
+      "require": {
+        "types": "./dist/format.d.ts",
+        "default": "./dist/format.js"
+      }
+    },
+    "./filters": {
+      "import": {
+        "types": "./dist/filters.d.mts",
+        "default": "./dist/filters.mjs"
+      },
+      "require": {
+        "types": "./dist/filters.d.ts",
+        "default": "./dist/filters.js"
+      }
+    },
+    "./theme": {
+      "import": {
+        "types": "./dist/theme.d.mts",
+        "default": "./dist/theme.mjs"
+      },
+      "require": {
+        "types": "./dist/theme.d.ts",
+        "default": "./dist/theme.js"
+      }
+    },
     "./skills": {
       "import": {
         "types": "./dist/skills.d.mts",
@@ -49,19 +80,23 @@
     "access": "public"
   },
   "scripts": {
-    "build": "tsup",
+    "build": "rm -rf dist && tsup",
     "clean": "git clean -xdf .turbo dist node_modules src/generated",
     "typecheck": "tsgo --noEmit && tsgo --noEmit -p tsconfig.node.json",
     "test": "vitest run",
+    "check:publish": "publint --strict && attw --pack . --profile node16",
     "gen:types": "tsx scripts/gen-types.ts",
+    "check:types": "OPENAPI_URL=spec/openapi.snapshot.json tsx scripts/gen-types.ts && git diff --exit-code -- src/generated/openapi-types.ts",
     "gen:skills-manifest": "tsx scripts/generate-skills-manifest.ts",
     "assert-publish-target": "node -e \"const p=require('./package.json'); if(p.name!=='@cavuno/board'){throw new Error('Refusing to publish: package.json name is '+p.name+', expected @cavuno/board')}; if(p.private){throw new Error('Refusing to publish: package.json has private:true')}\"",
     "prepublishOnly": "pnpm run assert-publish-target && pnpm run gen:skills-manifest && pnpm run build"
   },
   "devDependencies": {
+    "@arethetypeswrong/cli": "^0.18.2",
     "@kit/tsconfig": "workspace:*",
     "@types/node": "catalog:",
     "openapi-typescript": "^7.6.0",
+    "publint": "^0.3.12",
     "tsup": "^8.4.0",
     "tsx": "^4.19.2",
     "vitest": "^2.1.9"

package/skills/cavuno-board-account/SKILL.md

@@ -0,0 +1,147 @@
+---
+name: cavuno-board-account
+description: Candidate account self-service with the @cavuno/board SDK — me.retrieve/delete, the candidate profile (merge-patch update, handle availability), experience/education CRUD, skills/languages full-replace, avatar upload, resume upload with async parse polling, and notification preferences plus the anonymous token unsubscribe. Use when building account, profile-edit, onboarding, or notification-settings pages for a signed-in board user.
+---
+
+# Candidate account self-service
+
+Everything the signed-in candidate manages about themselves lives under `board.me`. Every call here requires a board-user bearer token — in the browser the SDK reads it from `auth.storage` after login; on the server pass it per call via `options.headers` (see `cavuno-board-auth` for the httpOnly-cookie pattern). The one exception is the anonymous token unsubscribe at the end.
+
+## When to use
+
+- Account page: show the signed-in user, delete the account.
+- Profile editor: bio/headline/handle, experience, education, skills, languages, avatar.
+- Resume-driven onboarding (upload → parse → auto-populated profile).
+- Email notification settings + the unsubscribe link in emails.
+
+## When not to use
+
+- Login/registration/tokens — `cavuno-board-auth`.
+- Applications and saved jobs — `cavuno-board-applications`.
+- The employer facet (`me.companies.*`), messaging (`me.conversations.*`), job alerts (`me.alerts.*`).
+
+Out of scope — do not invent exports: the SDK ships no form components, file-picker UI, or upload widgets; the host app owns all UI and cookie plumbing.
+
+## Account: retrieve and delete
+
+```ts snippet
+const me = await board.me.retrieve(); // the authenticated BoardUser
+await board.me.delete(); // 204 — synchronous, irreversible cascade
+```
+
+`delete` removes the account and all dependent data (profile, collections, saved jobs, alerts, avatar/resume files). Gate it behind an explicit confirmation.
+
+## Profile: retrieve, update, handle availability
+
+The profile is a singleton. `update` is a merge-patch — omitted fields stay unchanged.
+
+```ts snippet
+const profile = await board.me.profile.retrieve();
+profile.handle; profile.headline; profile.jobSearchStatus;
+
+await board.me.profile.update({
+  headline: 'Staff Engineer',
+  jobSearchStatus: 'open_to_offers',
+  profileVisibility: 'public',
+});
+
+const { available } = await board.me.profile.handleAvailable('jane');
+```
+
+`handleAvailable` is advisory (my current handle counts as available); `update` re-checks on write.
+
+## Experience and education: per-entry CRUD
+
+Both collections are id-keyed CRUD; updates are merge-patch. `createExperience` requires `title`, `companyName`, `startDate`; `createEducation` requires `institutionName`.
+
+```ts snippet
+const { data: entries } = await board.me.profile.listExperience();
+const entry = await board.me.profile.createExperience({
+  title: 'Staff Engineer',
+  companyName: 'Acme',
+  startDate: '2022-01',
+});
+await board.me.profile.updateExperience(entry.id, { endDate: '2025-06' });
+await board.me.profile.deleteExperience(entry.id);
+// Education mirrors this: listEducation / createEducation /
+// updateEducation(id, body) / deleteEducation(id).
+```
+
+## Skills and languages: PUT full-replace
+
+`updateSkills` / `updateLanguages` replace the **whole set** — there is no add/remove-one endpoint. Sending only the new item wipes the rest. Round-trip the current list:
+
+```ts snippet
+const current = await board.me.profile.listSkills();
+await board.me.profile.updateSkills({
+  skills: [...current.data.map((s) => s.name), 'TypeScript'], // ordered names
+});
+
+await board.me.profile.updateLanguages({
+  languages: [{ name: 'English', proficiency: 'native' }],
+});
+```
+
+Both return the full updated list envelope, so you can render straight from the response.
+
+## Avatar upload
+
+Pass a `Blob`/`File` — the SDK builds the multipart `FormData` (field `file`). JPEG/PNG/WebP, ≤ 5 MB.
+
+```ts snippet
+const { avatarUrl } = await board.me.profile.uploadAvatar(file);
+```
+
+## Resume: upload, then poll the parse
+
+`upload` starts an **async parse** that auto-populates the profile. It returns the resume with `parseStatus: 'parsing'` — poll `retrieve()` until `parsed` or `failed`, then re-read `profile.*` for the populated fields. Options: `keepResumeOnFile`, `importMode: 'append_only' | 'replace_all'`, `confirmReplaceAll`.
+
+```ts snippet
+let resume = await board.me.resume.upload(file, { keepResumeOnFile: true });
+// Bounded poll — a stuck parse job must not hang the UI forever.
+const MAX_POLLS = 30; // ~60s at 2s cadence
+for (let i = 0; resume.parseStatus === 'parsing' && i < MAX_POLLS; i++) {
+  await new Promise((r) => setTimeout(r, 2000));
+  resume = await board.me.resume.retrieve();
+}
+if (resume.parseStatus === 'parsed') {
+  const profile = await board.me.profile.retrieve(); // auto-populated
+} else if (resume.parseStatus === 'failed') {
+  resume.parseFailureReason; // surface it
+} else {
+  // still 'parsing' after the window: show "taking longer than usual",
+  // keep the manual profile editor usable — never block on the parse.
+}
+```
+
+`resume.file` holds the stored file (`url` is a short-lived signed download URL). `parseStatus` is `null` when no parse has run. `board.me.resume.delete()` removes the stored file and withdraws keep-on-file consent — parsed profile fields stay.
+
+## Notification preferences + anonymous unsubscribe
+
+Two channels today: `messageEmails` and `applicationEmails`. `update` toggles one and returns the full updated set.
+
+```ts snippet
+const { data: prefs } = await board.me.notificationPreferences.retrieve();
+await board.me.notificationPreferences.update({
+  channel: 'messageEmails',
+  subscribed: false,
+});
+```
+
+The one-click unsubscribe link in emails is **anonymous** — no session; the HMAC token is the authorization. All three fields come from the link's query string; resolves void (204):
+
+```ts snippet
+await board.me.notificationPreferences.unsubscribeWithToken({
+  boardUserId,
+  channel: 'applicationEmails',
+  token,
+});
+```
+
+## Verify
+
+- [ ] A profile `update` followed by `retrieve` shows the new field values.
+- [ ] Adding a skill preserves the existing ones (the full-replace round-trip is in place).
+- [ ] After `uploadAvatar`, the returned `avatarUrl` renders.
+- [ ] Resume upload reaches `parsed` (or surfaces `failed` + `parseFailureReason`), and the profile shows parsed data.
+- [ ] The email unsubscribe link works in a logged-out browser.