@cavuno/board 1.39.0 → 1.40.0

package/dist/index.js

@@ -312,7 +312,7 @@ async function clearSession(storage) {
 }
 
 // src/version.ts
-var SDK_VERSION = "1.39.0";
+var SDK_VERSION = "1.40.0";
 
 // src/client.ts
 function isRawBody(body) {
@@ -1398,6 +1398,20 @@ function meNamespace(client) {
           { ...options, method: "DELETE" }
         );
       },
+      /**
+       * Retrieve my full editable company profile (summary, socials, logo,
+       * description) — the read half of `update`, for pre-populating an edit
+       * form. Requires an approved membership.
+       *
+       * @example
+       * const company = await board.me.companies.retrieve('acme');
+       */
+      retrieve(slug, options) {
+        return client.fetch(
+          `/me/companies/${encodeURIComponent(slug)}`,
+          options
+        );
+      },
       /**
        * Edit my company profile (merge-patch — omitted fields stay
        * unchanged). Requires an approved membership. Returns the company.
@@ -1411,6 +1425,22 @@ function meNamespace(client) {
           { ...options, method: "PATCH", body }
         );
       },
+      /**
+       * Upload + attach my company logo (JPEG/PNG/WebP/GIF, ≤2 MB) via a single
+       * multipart POST. Requires an approved membership. Returns the updated
+       * company with its new `logoUrl`.
+       *
+       * @example
+       * const company = await board.me.companies.uploadLogo('acme', file);
+       */
+      uploadLogo(slug, file, options) {
+        const form = new FormData();
+        form.append("file", file);
+        return client.fetch(
+          `/me/companies/${encodeURIComponent(slug)}/logo`,
+          { ...options, method: "POST", body: form }
+        );
+      },
       /** The work-email verification state machine for a pending claim. */
       workEmail: {
         /**
@@ -1736,6 +1766,25 @@ function meNamespace(client) {
         }
       }
     },
+    /**
+     * The viewer's talent entitlement on this board (CAV-243) — "does this
+     * employer have talent access?" for gating a Message-vs-upsell CTA.
+     * Candidates and unaffiliated viewers get `hasTalentAccess: false`.
+     *
+     * @example
+     * const { hasTalentAccess } = await board.me.talentAccess.retrieve();
+     */
+    talentAccess: {
+      /**
+       * Retrieve the viewer's talent entitlement. Never cache — per-user.
+       *
+       * @example
+       * const access = await board.me.talentAccess.retrieve();
+       */
+      retrieve(options) {
+        return client.fetch("/me/talent-access", options);
+      }
+    },
     /**
      * The authenticated board user's job-alert preferences (ADR-0053) —
      * a collection (up to 10). Creating one is active immediately (no

package/dist/index.mjs

@@ -265,7 +265,7 @@ async function clearSession(storage) {
 }
 
 // src/version.ts
-var SDK_VERSION = "1.39.0";
+var SDK_VERSION = "1.40.0";
 
 // src/client.ts
 function isRawBody(body) {
@@ -1351,6 +1351,20 @@ function meNamespace(client) {
           { ...options, method: "DELETE" }
         );
       },
+      /**
+       * Retrieve my full editable company profile (summary, socials, logo,
+       * description) — the read half of `update`, for pre-populating an edit
+       * form. Requires an approved membership.
+       *
+       * @example
+       * const company = await board.me.companies.retrieve('acme');
+       */
+      retrieve(slug, options) {
+        return client.fetch(
+          `/me/companies/${encodeURIComponent(slug)}`,
+          options
+        );
+      },
       /**
        * Edit my company profile (merge-patch — omitted fields stay
        * unchanged). Requires an approved membership. Returns the company.
@@ -1364,6 +1378,22 @@ function meNamespace(client) {
           { ...options, method: "PATCH", body }
         );
       },
+      /**
+       * Upload + attach my company logo (JPEG/PNG/WebP/GIF, ≤2 MB) via a single
+       * multipart POST. Requires an approved membership. Returns the updated
+       * company with its new `logoUrl`.
+       *
+       * @example
+       * const company = await board.me.companies.uploadLogo('acme', file);
+       */
+      uploadLogo(slug, file, options) {
+        const form = new FormData();
+        form.append("file", file);
+        return client.fetch(
+          `/me/companies/${encodeURIComponent(slug)}/logo`,
+          { ...options, method: "POST", body: form }
+        );
+      },
       /** The work-email verification state machine for a pending claim. */
       workEmail: {
         /**
@@ -1689,6 +1719,25 @@ function meNamespace(client) {
         }
       }
     },
+    /**
+     * The viewer's talent entitlement on this board (CAV-243) — "does this
+     * employer have talent access?" for gating a Message-vs-upsell CTA.
+     * Candidates and unaffiliated viewers get `hasTalentAccess: false`.
+     *
+     * @example
+     * const { hasTalentAccess } = await board.me.talentAccess.retrieve();
+     */
+    talentAccess: {
+      /**
+       * Retrieve the viewer's talent entitlement. Never cache — per-user.
+       *
+       * @example
+       * const access = await board.me.talentAccess.retrieve();
+       */
+      retrieve(options) {
+        return client.fetch("/me/talent-access", options);
+      }
+    },
     /**
      * The authenticated board user's job-alert preferences (ADR-0053) —
      * a collection (up to 10). Creating one is active immediately (no

package/dist/{jobs-CLLIvtMc.d.ts → jobs-DAGAVHQL.d.ts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-DxC1ze93.js';
+import { S as Schemas } from './_spec-DRbgPIlN.js';
 
 /**
  * Stripe-shaped success envelopes (`01-conventions.md` §5.1). The

package/dist/{jobs-DPPA1Nev.d.mts → jobs-DhePKSRe.d.mts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-DxC1ze93.mjs';
+import { S as Schemas } from './_spec-DRbgPIlN.mjs';
 
 /**
  * Stripe-shaped success envelopes (`01-conventions.md` §5.1). The

package/dist/{salaries-Rb5h_eVZ.d.mts → salaries-D6SUVMmt.d.mts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-DxC1ze93.mjs';
-import { L as ListEnvelope, m as RelatedSearch } from './jobs-DPPA1Nev.mjs';
+import { S as Schemas } from './_spec-DRbgPIlN.mjs';
+import { L as ListEnvelope, m as RelatedSearch } from './jobs-DhePKSRe.mjs';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{salaries-DK4RnJnw.d.ts → salaries-cqb78kg0.d.ts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-DxC1ze93.js';
-import { L as ListEnvelope, m as RelatedSearch } from './jobs-CLLIvtMc.js';
+import { S as Schemas } from './_spec-DRbgPIlN.js';
+import { L as ListEnvelope, m as RelatedSearch } from './jobs-DAGAVHQL.js';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{search-DBoMM-gE.d.ts → search-BalPAS0P.d.ts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-DxC1ze93.js';
+import { S as Schemas } from './_spec-DRbgPIlN.js';
 
 type Awaitable<T> = T | Promise<T>;
 /**

package/dist/{search-CqBa1Qc4.d.mts → search-DYUQzCq_.d.mts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-DxC1ze93.mjs';
+import { S as Schemas } from './_spec-DRbgPIlN.mjs';
 
 type Awaitable<T> = T | Promise<T>;
 /**

package/dist/seo.d.mts

@@ -1,8 +1,8 @@
-import { P as PublicBlogPostSummary, B as BlogAuthorEmbed, C as CompanyCategorySalary, a as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './salaries-Rb5h_eVZ.mjs';
-import { P as PublicBoard } from './board-CqYibYUA.mjs';
-import { P as PublicJob } from './jobs-DPPA1Nev.mjs';
+import { P as PublicBlogPostSummary, B as BlogAuthorEmbed, C as CompanyCategorySalary, a as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './salaries-D6SUVMmt.mjs';
+import { P as PublicBoard } from './board-DCiNpgFf.mjs';
+import { P as PublicJob } from './jobs-DhePKSRe.mjs';
 import { B as BoardLabelOverrides } from './ui-copy-CKfFTtLk.mjs';
-import './_spec-DxC1ze93.mjs';
+import './_spec-DRbgPIlN.mjs';
 
 /**
  * Google for Jobs `JobPosting` structured data on the `@cavuno/board` wire

package/dist/seo.d.ts

@@ -1,8 +1,8 @@
-import { P as PublicBlogPostSummary, B as BlogAuthorEmbed, C as CompanyCategorySalary, a as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './salaries-DK4RnJnw.js';
-import { P as PublicBoard } from './board-RfZEAJse.js';
-import { P as PublicJob } from './jobs-CLLIvtMc.js';
+import { P as PublicBlogPostSummary, B as BlogAuthorEmbed, C as CompanyCategorySalary, a as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './salaries-cqb78kg0.js';
+import { P as PublicBoard } from './board-BxPUtrOl.js';
+import { P as PublicJob } from './jobs-DAGAVHQL.js';
 import { B as BoardLabelOverrides } from './ui-copy-CKfFTtLk.js';
-import './_spec-DxC1ze93.js';
+import './_spec-DRbgPIlN.js';
 
 /**
  * Google for Jobs `JobPosting` structured data on the `@cavuno/board` wire

package/dist/server.d.mts

@@ -1,9 +1,9 @@
 import { BoardSdk } from './index.mjs';
-import './_spec-DxC1ze93.mjs';
-import './search-CqBa1Qc4.mjs';
-import './board-CqYibYUA.mjs';
-import './jobs-DPPA1Nev.mjs';
-import './salaries-Rb5h_eVZ.mjs';
+import './_spec-DRbgPIlN.mjs';
+import './search-DYUQzCq_.mjs';
+import './board-DCiNpgFf.mjs';
+import './jobs-DhePKSRe.mjs';
+import './salaries-D6SUVMmt.mjs';
 
 /**
  * Session cookie codec — pure (no framework imports, no node imports) so it
@@ -77,6 +77,56 @@ declare function safeRedirectPath(path: string | undefined | null, defaultPath?:
  */
 declare function currentPathFromReferer(referer: string | null): string;
 
+/**
+ * MIG-10 (added scope) — keep `<slug>.cavuno.app` live after a custom-domain
+ * cutover by 308-redirecting to the board's canonical custom domain.
+ *
+ * ## Where this lives (DEVIATION LOUDLY)
+ * **Serving-side, not the dispatch edge.** Production hostname→worker
+ * routing is the WFP dispatch Worker's KV map (`hostname → workerName`
+ * only — see `docs/recipes/ops/wfp-dispatch-custom-domain.md` and
+ * `createWfpReleaseDeploy` / `deterministicWorkerName`). That edge has
+ * **no board domain data** (no Convex, no primaryDomain). Inventing a
+ * second edge datastore for canonical hosts is forbidden by the ticket.
+ *
+ * Data source: the board's public context already carries
+ * `primaryDomain: string | null` (`GET /v1/boards/:id` via
+ * `serializeBoardContext`). The starter loads context for every request
+ * (theme, features, analytics) — reuse that field. When `primaryDomain`
+ * is set, a request whose Host is a `*.cavuno.app` serving host 308s to
+ * `https://<primaryDomain><path+query>` in **one hop**. Domainless boards
+ * (`primaryDomain === null`) keep **serving** from cavuno.app (no redirect).
+ *
+ * Wire this helper into the starter's root middleware / entry (the
+ * migration starter's host check) with `Response.redirect(url, 308)`.
+ * Pure so unit tests pin behaviour without a Worker runtime.
+ *
+ * Pattern: Vercel `*.vercel.app` / GitHub `github.io` permanent fallback
+ * origin — SEO-neutral 308 to the canonical production host.
+ */
+/**
+ * True when the request host is a cavuno.app board-serving host
+ * (slug or board-hash subdomain), not the apex and not a preview host
+ * we deliberately leave alone.
+ */
+declare function isCavunoAppServingHost(hostname: string): boolean;
+/**
+ * When a custom-domain board is hit on its cavuno.app fallback origin,
+ * return the one-hop 308 Location to the canonical custom domain.
+ * Domainless boards (no primaryDomain) return null — serve in place.
+ */
+declare function getCavunoAppCanonicalRedirectUrl(params: {
+    currentHost: string | null;
+    /**
+     * From `board.context().primaryDomain` — the board's active primary
+     * custom domain hostname, or null when domainless.
+     */
+    primaryDomain: string | null | undefined;
+    /** Full request URL or path+query; path+query is preserved on the hop. */
+    requestUrl?: string | null;
+    defaultPath?: string;
+}): string | null;
+
 /**
  * Single-flight session refresh — dedupes concurrent refreshes for the same
  * session WITHIN one process/isolate (the rotation race, ADR-0057 wart #4,
@@ -111,4 +161,4 @@ declare function currentPathFromReferer(referer: string | null): string;
  */
 declare function createSessionRefresher(board: Pick<BoardSdk, 'auth' | 'client'>): (session: BoardSession) => Promise<BoardSession | null>;
 
-export { BOARD_ACCESS_COOKIE_NAME, type BoardSession, SESSION_COOKIE_NAME, clearGrantCookie, clearSessionCookie, createSessionRefresher, currentPathFromReferer, grantCookieName, isExpiringSoon, parseGrantCookie, parseSessionCookie, safeRedirectPath, serializeGrantCookie, serializeSessionCookie, sessionCookieName };
+export { BOARD_ACCESS_COOKIE_NAME, type BoardSession, SESSION_COOKIE_NAME, clearGrantCookie, clearSessionCookie, createSessionRefresher, currentPathFromReferer, getCavunoAppCanonicalRedirectUrl, grantCookieName, isCavunoAppServingHost, isExpiringSoon, parseGrantCookie, parseSessionCookie, safeRedirectPath, serializeGrantCookie, serializeSessionCookie, sessionCookieName };

package/dist/server.d.ts

@@ -1,9 +1,9 @@
 import { BoardSdk } from './index.js';
-import './_spec-DxC1ze93.js';
-import './search-DBoMM-gE.js';
-import './board-RfZEAJse.js';
-import './jobs-CLLIvtMc.js';
-import './salaries-DK4RnJnw.js';
+import './_spec-DRbgPIlN.js';
+import './search-BalPAS0P.js';
+import './board-BxPUtrOl.js';
+import './jobs-DAGAVHQL.js';
+import './salaries-cqb78kg0.js';
 
 /**
  * Session cookie codec — pure (no framework imports, no node imports) so it
@@ -77,6 +77,56 @@ declare function safeRedirectPath(path: string | undefined | null, defaultPath?:
  */
 declare function currentPathFromReferer(referer: string | null): string;
 
+/**
+ * MIG-10 (added scope) — keep `<slug>.cavuno.app` live after a custom-domain
+ * cutover by 308-redirecting to the board's canonical custom domain.
+ *
+ * ## Where this lives (DEVIATION LOUDLY)
+ * **Serving-side, not the dispatch edge.** Production hostname→worker
+ * routing is the WFP dispatch Worker's KV map (`hostname → workerName`
+ * only — see `docs/recipes/ops/wfp-dispatch-custom-domain.md` and
+ * `createWfpReleaseDeploy` / `deterministicWorkerName`). That edge has
+ * **no board domain data** (no Convex, no primaryDomain). Inventing a
+ * second edge datastore for canonical hosts is forbidden by the ticket.
+ *
+ * Data source: the board's public context already carries
+ * `primaryDomain: string | null` (`GET /v1/boards/:id` via
+ * `serializeBoardContext`). The starter loads context for every request
+ * (theme, features, analytics) — reuse that field. When `primaryDomain`
+ * is set, a request whose Host is a `*.cavuno.app` serving host 308s to
+ * `https://<primaryDomain><path+query>` in **one hop**. Domainless boards
+ * (`primaryDomain === null`) keep **serving** from cavuno.app (no redirect).
+ *
+ * Wire this helper into the starter's root middleware / entry (the
+ * migration starter's host check) with `Response.redirect(url, 308)`.
+ * Pure so unit tests pin behaviour without a Worker runtime.
+ *
+ * Pattern: Vercel `*.vercel.app` / GitHub `github.io` permanent fallback
+ * origin — SEO-neutral 308 to the canonical production host.
+ */
+/**
+ * True when the request host is a cavuno.app board-serving host
+ * (slug or board-hash subdomain), not the apex and not a preview host
+ * we deliberately leave alone.
+ */
+declare function isCavunoAppServingHost(hostname: string): boolean;
+/**
+ * When a custom-domain board is hit on its cavuno.app fallback origin,
+ * return the one-hop 308 Location to the canonical custom domain.
+ * Domainless boards (no primaryDomain) return null — serve in place.
+ */
+declare function getCavunoAppCanonicalRedirectUrl(params: {
+    currentHost: string | null;
+    /**
+     * From `board.context().primaryDomain` — the board's active primary
+     * custom domain hostname, or null when domainless.
+     */
+    primaryDomain: string | null | undefined;
+    /** Full request URL or path+query; path+query is preserved on the hop. */
+    requestUrl?: string | null;
+    defaultPath?: string;
+}): string | null;
+
 /**
  * Single-flight session refresh — dedupes concurrent refreshes for the same
  * session WITHIN one process/isolate (the rotation race, ADR-0057 wart #4,
@@ -111,4 +161,4 @@ declare function currentPathFromReferer(referer: string | null): string;
  */
 declare function createSessionRefresher(board: Pick<BoardSdk, 'auth' | 'client'>): (session: BoardSession) => Promise<BoardSession | null>;
 
-export { BOARD_ACCESS_COOKIE_NAME, type BoardSession, SESSION_COOKIE_NAME, clearGrantCookie, clearSessionCookie, createSessionRefresher, currentPathFromReferer, grantCookieName, isExpiringSoon, parseGrantCookie, parseSessionCookie, safeRedirectPath, serializeGrantCookie, serializeSessionCookie, sessionCookieName };
+export { BOARD_ACCESS_COOKIE_NAME, type BoardSession, SESSION_COOKIE_NAME, clearGrantCookie, clearSessionCookie, createSessionRefresher, currentPathFromReferer, getCavunoAppCanonicalRedirectUrl, grantCookieName, isCavunoAppServingHost, isExpiringSoon, parseGrantCookie, parseSessionCookie, safeRedirectPath, serializeGrantCookie, serializeSessionCookie, sessionCookieName };

package/dist/server.js

@@ -26,7 +26,9 @@ __export(server_exports, {
   clearSessionCookie: () => clearSessionCookie,
   createSessionRefresher: () => createSessionRefresher,
   currentPathFromReferer: () => currentPathFromReferer,
+  getCavunoAppCanonicalRedirectUrl: () => getCavunoAppCanonicalRedirectUrl,
   grantCookieName: () => grantCookieName,
+  isCavunoAppServingHost: () => isCavunoAppServingHost,
   isExpiringSoon: () => isExpiringSoon,
   parseGrantCookie: () => parseGrantCookie,
   parseSessionCookie: () => parseSessionCookie,
@@ -154,6 +156,45 @@ function currentPathFromReferer(referer) {
   }
 }
 
+// src/server/canonical-host-redirect.ts
+var CAVUNO_APP_SERVING_SUFFIX = ".cavuno.app";
+function normalizeHostname(host) {
+  if (!host) return "";
+  return host.toLowerCase().split(":")[0] ?? "";
+}
+function extractPathAndSearch(url) {
+  if (!url) return "/";
+  try {
+    const parsed = new URL(url, "https://placeholder.invalid");
+    return `${parsed.pathname}${parsed.search}` || "/";
+  } catch {
+    return "/";
+  }
+}
+function isCavunoAppServingHost(hostname) {
+  const h = hostname.toLowerCase();
+  if (!h.endsWith(CAVUNO_APP_SERVING_SUFFIX)) return false;
+  if (h === "cavuno.app") return false;
+  if (h.startsWith("preview-")) return false;
+  return true;
+}
+function getCavunoAppCanonicalRedirectUrl(params) {
+  const { currentHost, primaryDomain, requestUrl, defaultPath = "/" } = params;
+  const canonical = primaryDomain?.trim().toLowerCase().replace(/\.+$/, "");
+  if (!canonical) {
+    return null;
+  }
+  const hostname = normalizeHostname(currentHost);
+  if (!hostname || !isCavunoAppServingHost(hostname)) {
+    return null;
+  }
+  if (hostname === canonical) {
+    return null;
+  }
+  const path = requestUrl != null && requestUrl !== "" ? extractPathAndSearch(requestUrl) : defaultPath;
+  return `https://${canonical}${path.startsWith("/") ? path : `/${path}`}`;
+}
+
 // src/errors.ts
 function isBoardApiError(e) {
   return e instanceof Error && e.name === "BoardApiError" && typeof e.status === "number" && typeof e.code === "string";

package/dist/server.mjs

@@ -115,6 +115,45 @@ function currentPathFromReferer(referer) {
   }
 }
 
+// src/server/canonical-host-redirect.ts
+var CAVUNO_APP_SERVING_SUFFIX = ".cavuno.app";
+function normalizeHostname(host) {
+  if (!host) return "";
+  return host.toLowerCase().split(":")[0] ?? "";
+}
+function extractPathAndSearch(url) {
+  if (!url) return "/";
+  try {
+    const parsed = new URL(url, "https://placeholder.invalid");
+    return `${parsed.pathname}${parsed.search}` || "/";
+  } catch {
+    return "/";
+  }
+}
+function isCavunoAppServingHost(hostname) {
+  const h = hostname.toLowerCase();
+  if (!h.endsWith(CAVUNO_APP_SERVING_SUFFIX)) return false;
+  if (h === "cavuno.app") return false;
+  if (h.startsWith("preview-")) return false;
+  return true;
+}
+function getCavunoAppCanonicalRedirectUrl(params) {
+  const { currentHost, primaryDomain, requestUrl, defaultPath = "/" } = params;
+  const canonical = primaryDomain?.trim().toLowerCase().replace(/\.+$/, "");
+  if (!canonical) {
+    return null;
+  }
+  const hostname = normalizeHostname(currentHost);
+  if (!hostname || !isCavunoAppServingHost(hostname)) {
+    return null;
+  }
+  if (hostname === canonical) {
+    return null;
+  }
+  const path = requestUrl != null && requestUrl !== "" ? extractPathAndSearch(requestUrl) : defaultPath;
+  return `https://${canonical}${path.startsWith("/") ? path : `/${path}`}`;
+}
+
 // src/errors.ts
 function isBoardApiError(e) {
   return e instanceof Error && e.name === "BoardApiError" && typeof e.status === "number" && typeof e.code === "string";
@@ -172,7 +211,9 @@ export {
   clearSessionCookie,
   createSessionRefresher,
   currentPathFromReferer,
+  getCavunoAppCanonicalRedirectUrl,
   grantCookieName,
+  isCavunoAppServingHost,
   isExpiringSoon,
   parseGrantCookie,
   parseSessionCookie,

package/dist/sitemap.d.mts

@@ -1,9 +1,9 @@
 import { BoardSdk } from './index.mjs';
-import './_spec-DxC1ze93.mjs';
-import './search-CqBa1Qc4.mjs';
-import './board-CqYibYUA.mjs';
-import './jobs-DPPA1Nev.mjs';
-import './salaries-Rb5h_eVZ.mjs';
+import './_spec-DRbgPIlN.mjs';
+import './search-DYUQzCq_.mjs';
+import './board-DCiNpgFf.mjs';
+import './jobs-DhePKSRe.mjs';
+import './salaries-D6SUVMmt.mjs';
 
 /**
  * Sitemap primitives — the pure XML + bucket-filename logic behind a board

package/dist/sitemap.d.ts

@@ -1,9 +1,9 @@
 import { BoardSdk } from './index.js';
-import './_spec-DxC1ze93.js';
-import './search-DBoMM-gE.js';
-import './board-RfZEAJse.js';
-import './jobs-CLLIvtMc.js';
-import './salaries-DK4RnJnw.js';
+import './_spec-DRbgPIlN.js';
+import './search-BalPAS0P.js';
+import './board-BxPUtrOl.js';
+import './jobs-DAGAVHQL.js';
+import './salaries-cqb78kg0.js';
 
 /**
  * Sitemap primitives — the pure XML + bucket-filename logic behind a board

package/dist/suggest.d.mts

@@ -1,5 +1,5 @@
-import { S as SuggestionItem, a as SearchSuggestQuery, F as FetchOptions, b as SuggestResult } from './search-CqBa1Qc4.mjs';
-import './_spec-DxC1ze93.mjs';
+import { S as SuggestionItem, a as SearchSuggestQuery, F as FetchOptions, b as SuggestResult } from './search-DYUQzCq_.mjs';
+import './_spec-DRbgPIlN.mjs';
 
 /**
  * `@cavuno/board/suggest` — framework-agnostic headless search-suggest

package/dist/suggest.d.ts

@@ -1,5 +1,5 @@
-import { S as SuggestionItem, a as SearchSuggestQuery, F as FetchOptions, b as SuggestResult } from './search-DBoMM-gE.js';
-import './_spec-DxC1ze93.js';
+import { S as SuggestionItem, a as SearchSuggestQuery, F as FetchOptions, b as SuggestResult } from './search-BalPAS0P.js';
+import './_spec-DRbgPIlN.js';
 
 /**
  * `@cavuno/board/suggest` — framework-agnostic headless search-suggest

package/dist/theme.d.mts

@@ -40,6 +40,54 @@ interface ThemeInput {
  * lives in exactly one place.
  */
 declare function isSafeThemeColorValue(value: string): boolean;
+/**
+ * Email-safe snapshot keys (platform brand snapshot / MIG-04).
+ * Light-only subset consumed by Convex email branding.
+ */
+type EmailSafeSnapshotColorKey = 'buttonPrimary' | 'buttonPrimaryText' | 'background' | 'mutedBackground' | 'border' | 'text' | 'textMuted' | 'brandColor';
+/**
+ * Inverse of the email-safe subset of `tokenLines`: for each snapshot
+ * color key, the ordered list of CSS custom property names (no `--`)
+ * that may supply it. First PRESENT property wins when DIFFERENT CSS
+ * names map to one snapshot key (e.g. muted > secondary for
+ * mutedBackground). Within one CSS property name, multi-`:root` cascade
+ * is last-wins and is resolved before this table is consulted.
+ *
+ * Additive export for the platform brand-snapshot deriver (MIG-04) —
+ * keeps the CSS ↔ board contract next to its forward twin.
+ */
+declare const EMAIL_SAFE_SNAPSHOT_FROM_CSS: {
+    readonly [K in EmailSafeSnapshotColorKey]: readonly string[];
+};
+/**
+ * Board key → CSS custom property name(s) (no `--` prefix).
+ *
+ * The forward write contract for the builder theme tab (MIG-05) and the
+ * emission table for `boardThemeToCss` / `tokenLines` — one table, so a
+ * tab edit and a render path cannot drift. When a board key fans out to
+ * several CSS names (e.g. `text` → foreground + card-foreground + …),
+ * a single tab edit writes every name with the same hex value.
+ *
+ * Fallbacks that only apply at *emit* time when a preferred key is
+ * absent (`destructive` ← buttonDanger ?? textError; `ring` ← brandColor
+ * ?? buttonPrimary) stay in `tokenLines` — they are not owned write
+ * targets of the fallback key.
+ */
+declare const BOARD_COLOR_TO_CSS_TOKENS: {
+    readonly [K in BoardColorKey]: readonly string[];
+};
+/**
+ * CSS custom property names (no `--`) that fan out from *optional*
+ * ColorTokensSchema keys (`textSubtle`, `textDisabled`). Production
+ * starter `tokens.css` may omit these declarations; the builder theme
+ * batch lane SKIPS missing optional declarations rather than escalating
+ * the whole preset to the model (MIG-05). Required declarations still
+ * escalate on absence — never invent (L5-B).
+ */
+declare const OPTIONAL_THEME_DECLARATIONS: readonly ["foreground-subtle", "foreground-disabled"];
+type OptionalThemeDeclaration = (typeof OPTIONAL_THEME_DECLARATIONS)[number];
+/** True when a CSS custom property name (with or without `--`) is optional. */
+declare function isOptionalThemeDeclaration(token: string): boolean;
 /**
  * Render the board theme as `:root` (+ `.dark`) CSS-variable overrides.
  * Inject once at the app shell, after the static theme stylesheet.
@@ -67,4 +115,4 @@ declare function themeFontFamily(fontKey: string): string;
 /** One Google Fonts request covering the sans + heading families. */
 declare function googleFontsUrl(theme: ThemeInput | null): string | null;
 
-export { BOARD_COLOR_KEYS, type BoardColorKey, THEME_FONT_GOOGLE_FAMILIES, type ThemeInput, boardThemeToCss, googleFontsUrl, isSafeThemeColorValue, themeFontFamily, themeMode };
+export { BOARD_COLOR_KEYS, BOARD_COLOR_TO_CSS_TOKENS, type BoardColorKey, EMAIL_SAFE_SNAPSHOT_FROM_CSS, type EmailSafeSnapshotColorKey, OPTIONAL_THEME_DECLARATIONS, type OptionalThemeDeclaration, THEME_FONT_GOOGLE_FAMILIES, type ThemeInput, boardThemeToCss, googleFontsUrl, isOptionalThemeDeclaration, isSafeThemeColorValue, themeFontFamily, themeMode };