@cavuno/board 4.0.0 → 4.2.0

package/dist/server.d.ts

@@ -1,9 +1,9 @@
 import { BoardSdk } from './index.js';
-import './_spec-GVe6WAfT.js';
-import './search-DdsniXQv.js';
-import './board-DUhgiacm.js';
-import './jobs-QrbXOYB9.js';
-import './blog-BsmKizpd.js';
+import './_spec-BnoxU-iR.js';
+import './search-Cskh-neW.js';
+import './board-4vXzYDL3.js';
+import './jobs-B8DNWEir.js';
+import './blog-D-PYhejB.js';
 
 /**
  * Session cookie codec — pure (no framework imports, no node imports) so it

package/dist/sitemap.d.mts

@@ -1,9 +1,9 @@
 import { BoardSdk } from './index.mjs';
-import './_spec-GVe6WAfT.mjs';
-import './search-Cr4noJJZ.mjs';
-import './board-GGWJ4coe.mjs';
-import './jobs-BuLpV8iy.mjs';
-import './blog-Cf64mI8A.mjs';
+import './_spec-BnoxU-iR.mjs';
+import './search-Cs7d8y1k.mjs';
+import './board-CvBkK7my.mjs';
+import './jobs-aTp9uC3a.mjs';
+import './blog-DoAOCg-d.mjs';
 
 /**
  * Sitemap primitives — the pure XML + bucket-filename logic behind a board

package/dist/sitemap.d.ts

@@ -1,9 +1,9 @@
 import { BoardSdk } from './index.js';
-import './_spec-GVe6WAfT.js';
-import './search-DdsniXQv.js';
-import './board-DUhgiacm.js';
-import './jobs-QrbXOYB9.js';
-import './blog-BsmKizpd.js';
+import './_spec-BnoxU-iR.js';
+import './search-Cskh-neW.js';
+import './board-4vXzYDL3.js';
+import './jobs-B8DNWEir.js';
+import './blog-D-PYhejB.js';
 
 /**
  * Sitemap primitives — the pure XML + bucket-filename logic behind a board

package/dist/suggest.d.mts

@@ -1,5 +1,5 @@
-import { h as SuggestionItem, b as SearchSuggestQuery, F as FetchOptions, g as SuggestResult } from './search-Cr4noJJZ.mjs';
-import './_spec-GVe6WAfT.mjs';
+import { h as SuggestionItem, b as SearchSuggestQuery, F as FetchOptions, g as SuggestResult } from './search-Cs7d8y1k.mjs';
+import './_spec-BnoxU-iR.mjs';
 
 /**
  * `@cavuno/board/suggest` — framework-agnostic headless search-suggest

package/dist/suggest.d.ts

@@ -1,5 +1,5 @@
-import { h as SuggestionItem, b as SearchSuggestQuery, F as FetchOptions, g as SuggestResult } from './search-DdsniXQv.js';
-import './_spec-GVe6WAfT.js';
+import { h as SuggestionItem, b as SearchSuggestQuery, F as FetchOptions, g as SuggestResult } from './search-Cskh-neW.js';
+import './_spec-BnoxU-iR.js';
 
 /**
  * `@cavuno/board/suggest` — framework-agnostic headless search-suggest

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cavuno/board",
-  "version": "4.0.0",
+  "version": "4.2.0",
   "description": "Build custom job boards and careers pages with Cavuno’s TypeScript SDK.",
   "keywords": [
     "api-client",

package/skills/cavuno-board-api-client/SKILL.md

@@ -60,6 +60,48 @@ A module-scoped client is safe for concurrent SSR requests when it uses the serv
 
 **Complete when:** a shared server client contains no per-user state and each authenticated request supplies its own headers.
 
+## Record marketing consent for the signed-in person
+
+Marketing consent is a property of the board user, never a guest capture. The
+frontend owns the checkbox wording and the privacy-policy link — render your
+own copy beside the control; the API records the decision, not the prose.
+Leave any checkbox unticked by default and call nothing while it stays
+unticked: absence of a record means no consent, never a default.
+
+At sign-up, pass the tick through the register body so consent is recorded in
+the same transaction that creates the user:
+
+```ts snippet
+await board.auth.register({
+  role: 'candidate',
+  method: 'emailpass',
+  email: form.email,
+  password: form.password,
+  displayName: form.displayName,
+  marketingConsent: form.marketingChecked,
+});
+```
+
+Later, read or change only the signed-in person's own consent through the
+authenticated `me` namespace. There is intentionally no email parameter, so a
+frontend cannot target another person. Withdrawal is always an explicit POST —
+never a state-changing GET, which mail scanners would follow.
+
+```ts snippet
+const current = await board.me.marketingConsent.retrieve();
+if (current?.status !== 'granted') {
+  await board.me.marketingConsent.grant();
+}
+await board.me.marketingConsent.withdraw();
+```
+
+Call `grant()` only from a surface that displayed your disclosure wording.
+Both calls are idempotent: repeating one changes nothing and emits no event.
+
+**Complete when:** the checkbox defaults to unticked, unticked submits
+nothing, grant is only reachable beside rendered disclosure copy, and
+withdrawal is never implemented as a state-changing GET.
+
 ## Use the escape hatch for an untyped endpoint
 
 `board.client.fetch<T>(path, options)` keeps the full request pipeline while providing a response type locally.

package/skills/cavuno-board-seo/SKILL.md

@@ -19,6 +19,18 @@ Read the matching reference completely before implementing that page:
 
 For a page that combines branches, read every matching reference.
 
+## Favicons and board logo
+
+Brand identity — not SEO builders. Read them from `board.context()`:
+
+```ts
+const { logoUrl, icons } = await board.context();
+// logoUrl — board logo
+// icons.ico / .svg / .appleTouch / .icon192 / .icon512 / .iconMaskable512
+```
+
+`board.seo()` is infra tokens only (ads, IndexNow, verification, canonical base, optional `manifest.name`).
+
 Sitemaps and robots.txt use `cavuno-board-sitemap`. The host app owns OG-image
 generation and its route map. `listingHead` receives app-owned title and
 meta description copy; the SDK never composes those sentences or joins

package/skills/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "4.0.0",
+  "version": "4.2.0",
   "skills": [
     {
       "name": "cavuno-board-account",