@cavuno/board 2.0.0 → 2.0.2

package/CHANGELOG.md

@@ -0,0 +1,26 @@
+# Changelog
+
+This changelog records changes that affect Board API compatibility, exported
+types, runtime behavior, or supported integration patterns.
+
+## 2.0.2 — 2026-07-24
+
+- Changed the public contact address to `hi@cavuno.com`.
+- Simplified repository documentation for external contributors.
+
+## 2.0.1 — 2026-07-24
+
+- Pointed npm and support links to the standalone Cavuno SDK repository.
+- Added the public license, trademark notice, security policy, contributing
+  guide, and this consumer-facing changelog to the npm package.
+- Improved package discovery metadata and linked directly to the
+  [Cavuno SDK documentation](https://cavuno.com/docs/sdk).
+
+## 2.0.0 — 2026-07-23
+
+- Limited generated types to the public Board API and its referenced schemas.
+- Removed service-specific diagnostic probes and write-based doctor checks.
+- Preserved the public client, formatting, filters, SEO, sitemap, routing,
+  authentication, candidate, employer, checkout, and job-board integration
+  surfaces.
+- Added standalone package and repository validation.

package/CONTRIBUTING.md

@@ -0,0 +1,25 @@
+# Contributing
+
+Thank you for helping improve the Cavuno Board SDK.
+
+## Before opening a change
+
+- Search existing issues and pull requests.
+- Open an issue first for significant behavior or interface changes.
+- Never commit API keys, access tokens, customer data, non-public information,
+  vulnerability details, or generated artifacts from an unreviewed
+  specification.
+
+## Development
+
+1. Use a supported Node.js version.
+2. Install dependencies with `pnpm install`.
+3. Generate types only from the public Board API projection.
+4. Build with `pnpm build`.
+5. Run `pnpm test`, `pnpm typecheck`, and `pnpm check:publish`.
+
+Keep changes focused and add tests for changed behavior. SDK methods must use
+the documented Board API.
+
+By submitting a contribution, you agree that it may be distributed under the
+MIT License and that you have the right to submit it.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Wollemia
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,8 +1,9 @@
-# @cavuno/board
+# Cavuno Board SDK
 
-Typed, isomorphic client for the [Cavuno](https://cavuno.com) Board API —
-the headless toolkit for building fully custom job board frontends. Zero
-dependencies; runs in the browser, Node ≥ 20, and Cloudflare Workers.
+`@cavuno/board` is the official typed, isomorphic client for the
+[Cavuno job board platform](https://cavuno.com) Board API—the headless toolkit
+for building fully custom job board frontends. It has zero runtime dependencies
+and runs in browsers, Node.js 20 or newer, and Cloudflare Workers.
 
 You bring the framework and own the layout; the SDK brings the job board:
 jobs and search, companies, salaries, blog, board-user auth, saved jobs,
@@ -86,9 +87,13 @@ SDK doesn't cover yet.
 
 ## Docs
 
-- SDK guides and reference: https://cavuno.com/docs/sdk
-- The OpenAPI document: `GET https://api.cavuno.com/v1/openapi.json`
+- Cavuno: <https://cavuno.com>
+- SDK guides and reference: <https://cavuno.com/docs/sdk>
+- API documentation: <https://cavuno.com/docs/api>
+- OpenAPI document: `GET https://api.cavuno.com/v1/openapi.json`
+- Source: <https://github.com/wollemiahq/cavuno-sdk>
+- Issues: <https://github.com/wollemiahq/cavuno-sdk/issues>
 - Reference starter (TanStack Start on Cloudflare Workers):
-  https://github.com/wollemiahq/cavuno-board-starter
+  <https://github.com/wollemiahq/cavuno-board-starter>
 
 MIT © Wollemia

package/SECURITY.md

@@ -0,0 +1,28 @@
+# Security policy
+
+## Supported versions
+
+Security fixes are released for the latest published major version. Upgrade to
+the latest release before reporting an issue that may already be fixed.
+
+## Reporting a vulnerability
+
+Do not open a public issue for a suspected vulnerability.
+
+Email hi@cavuno.com with:
+
+- the affected package and version;
+- a clear description of the impact;
+- reproduction steps or a minimal proof of concept; and
+- any suggested remediation or disclosure deadline.
+
+Do not include live API keys, access tokens, customer data, or other secrets.
+Use synthetic data and revoke any credential accidentally exposed during
+testing.
+
+We will acknowledge a report as soon as practical, keep you informed while it
+is investigated, and coordinate disclosure after a fix is available. Please
+allow reasonable time for remediation before publishing details.
+
+Testing must stay within accounts and boards you own or are authorized to use.
+Do not disrupt service, access other users' data, or use social engineering.

package/TRADEMARKS.md

@@ -0,0 +1,16 @@
+# Trademarks
+
+The MIT License applies to the software in this repository. It does not grant
+permission to use Cavuno's names, logos, domains, product appearance, or other
+brand features.
+
+“Cavuno”, the Cavuno logo, and related product names are trademarks of
+Wollemia. You may use the Cavuno name accurately to describe compatibility,
+integration, or use of this software—for example, “SDK for Cavuno”—provided
+that you do not imply endorsement, sponsorship, or that your project is an
+official Cavuno product.
+
+Do not use Cavuno branding in a project name, package name, domain, social
+account, or logo in a way that could confuse people about its source.
+
+For permission beyond these nominative uses, contact hi@cavuno.com.