@cavuno/board 4.12.0 → 4.14.0

package/CHANGELOG.md

@@ -3,6 +3,45 @@
 This changelog records changes that affect Board API compatibility, exported
 types, runtime behavior, or supported integration patterns.
 
+## 4.14.0 — 2026-08-29
+
+- **Talent lists**: `board.me.companies.talentLists` (`list` / `create` /
+  `update` / `remove`). Company-owned saved predicates over the talent
+  directory. `filters` reuse the frozen `/talent` query (`q`, `skill`,
+  `jobSearchStatus`, `languages`, `openToRelocate`, `place`, `sort`,
+  `seniority`, `permitCountry`, `interestedRole`). Optional `job` binds a
+  list to one company job; pass `job: null` on update to unbind. Approved
+  members share the same lists.
+- **Sourced candidates**: `board.me.companies.sourcedCandidates` (`list` /
+  `add` / `remove` / `convert`). Per-job membership rail. Saving a candidate
+  always writes here. `convert` creates a pipeline application with source
+  `sourced` (hidden from the candidate until they apply themselves).
+  `stage: 'applied'` aliases to `review`. A board without a native pipeline
+  raises `sourced_convert_unavailable` (409). `add` is idempotent
+  (`created: false` on a second save).
+- **Error codes**: `talent_list_not_found`, `sourced_candidate_not_found`,
+  and `sourced_convert_unavailable` join `BOARD_API_ERROR_CODES`.
+- **`board.auth.verifyWorkEmail({ token })`**: confirm an employer
+  work-email token without a session (`POST /auth/verify-work-email`).
+  `board.me.companies.workEmail.confirm(slug, { token })` is deprecated —
+  `slug` is ignored; the token alone identifies the membership.
+- **OAuth employer sign-up**: `getOAuthAuthorizationUrl(provider, { role:
+  'employer' })` creates an employer profile for a new user. The role is
+  fixed at authorize time and cannot be changed on the callback. Defaults
+  to `candidate`.
+
+## 4.13.0 — 2026-08-28
+
+- **`board.context().contact.legalName`**: the operating company's registered
+  legal name, or `null` when unset. Use it as the JobPosting
+  `hiringOrganization` name when a job has no company of its own, ahead of the
+  board name — that is the order the hosted board emits, so a headless board
+  produces identical structured data. `buildJobPostingJsonLd` reads it from
+  `contact.legalName` automatically; a top-level `legalName` is also accepted.
+- **Candidate profile visibility default**: a board can set the visibility new
+  candidate profiles start with, rather than every profile defaulting the same
+  way.
+
 ## 4.12.0 — 2026-08-28
 
 - **`resolveApplyDecision`**: the apply-decision ladder now takes the board's

package/dist/{_spec-ChuT3QX8.d.mts → _spec-CzS_E61o.d.mts}

@@ -63,6 +63,10 @@ interface components {
             /** @description The note text. */
             body: string;
         };
+        AddSourcedCandidateBody: {
+            job: string;
+            candidateBoardUserId: string;
+        };
         Alert: {
             /** @description Job-alert preference ID. Also the path key. */
             id: string;
@@ -674,6 +678,9 @@ interface components {
             object: "conversation_ref";
             conversationId: string | null;
         };
+        ConvertSourcedCandidateBody: {
+            stage: string;
+        };
         CreateApplyApprovalBody: {
             sessionKey: string;
         };
@@ -819,6 +826,11 @@ interface components {
             /** @description The stage label. */
             label: string;
         };
+        CreateTalentListBody: {
+            name: string;
+            filters?: components["schemas"]["TalentListFilters"];
+            job?: string;
+        };
         CustomFieldDefinition: {
             /** @description Immutable per-board slug used as the key in a job’s `customFieldValues`. */
             key: string;
@@ -1893,6 +1905,8 @@ interface components {
             contact: {
                 /** @description Public contact email (render as `mailto:`). Operator-set in settings › Contact & company details. */
                 email: string | null;
+                /** @description The operating company's registered legal name, or `null` when unset. Use it as the JobPosting `hiringOrganization` name when a job has no company of its own, ahead of the board name — that is the order the hosted board emits, so a headless board produces identical structured data. */
+                legalName: string | null;
                 /** @description Company website URL, sanitized to absolute http(s). Null when unset or non-http(s). */
                 websiteUrl: string | null;
                 /** @description X (Twitter) profile URL, normalized from the stored handle. */
@@ -2558,6 +2572,14 @@ interface components {
             boardMedianMax: number | null;
             currency: string;
         };
+        SourcedCandidate: {
+            id: string;
+            /** @enum {string} */
+            object: "sourced_candidate";
+            candidate: components["schemas"]["TalentDirectoryEntry"];
+            sourcedAt: number;
+            sourcedBy: string;
+        };
         StartAboutApplicationBody: {
             applicationId: string;
             body: string;
@@ -2672,6 +2694,31 @@ interface components {
                 endDate: string | null;
             }[];
         };
+        TalentList: {
+            id: string;
+            /** @enum {string} */
+            object: "talent_list";
+            name: string;
+            filters: components["schemas"]["TalentListFilters"];
+            jobId: string | null;
+            createdBy: string;
+            createdAt: number;
+            updatedAt: number;
+        };
+        TalentListFilters: {
+            q?: string;
+            skill?: string;
+            /** @enum {string} */
+            jobSearchStatus?: "actively_looking" | "open_to_offers" | "not_looking";
+            languages?: string[];
+            openToRelocate?: boolean;
+            place?: string;
+            /** @enum {string} */
+            sort?: "relevance" | "newest";
+            seniority?: string;
+            permitCountry?: string;
+            interestedRole?: string;
+        };
         TalentProfile: {
             /** @enum {string} */
             object: "talent_profile";
@@ -3015,6 +3062,11 @@ interface components {
         UpdateSkillsBody: {
             skills: string[];
         };
+        UpdateTalentListBody: {
+            name?: string;
+            filters?: components["schemas"]["TalentListFilters"];
+            job?: string | unknown | unknown;
+        };
         VerifyEmailOtpBody: {
             code: string;
         };

package/dist/{_spec-ChuT3QX8.d.ts → _spec-CzS_E61o.d.ts}

@@ -63,6 +63,10 @@ interface components {
             /** @description The note text. */
             body: string;
         };
+        AddSourcedCandidateBody: {
+            job: string;
+            candidateBoardUserId: string;
+        };
         Alert: {
             /** @description Job-alert preference ID. Also the path key. */
             id: string;
@@ -674,6 +678,9 @@ interface components {
             object: "conversation_ref";
             conversationId: string | null;
         };
+        ConvertSourcedCandidateBody: {
+            stage: string;
+        };
         CreateApplyApprovalBody: {
             sessionKey: string;
         };
@@ -819,6 +826,11 @@ interface components {
             /** @description The stage label. */
             label: string;
         };
+        CreateTalentListBody: {
+            name: string;
+            filters?: components["schemas"]["TalentListFilters"];
+            job?: string;
+        };
         CustomFieldDefinition: {
             /** @description Immutable per-board slug used as the key in a job’s `customFieldValues`. */
             key: string;
@@ -1893,6 +1905,8 @@ interface components {
             contact: {
                 /** @description Public contact email (render as `mailto:`). Operator-set in settings › Contact & company details. */
                 email: string | null;
+                /** @description The operating company's registered legal name, or `null` when unset. Use it as the JobPosting `hiringOrganization` name when a job has no company of its own, ahead of the board name — that is the order the hosted board emits, so a headless board produces identical structured data. */
+                legalName: string | null;
                 /** @description Company website URL, sanitized to absolute http(s). Null when unset or non-http(s). */
                 websiteUrl: string | null;
                 /** @description X (Twitter) profile URL, normalized from the stored handle. */
@@ -2558,6 +2572,14 @@ interface components {
             boardMedianMax: number | null;
             currency: string;
         };
+        SourcedCandidate: {
+            id: string;
+            /** @enum {string} */
+            object: "sourced_candidate";
+            candidate: components["schemas"]["TalentDirectoryEntry"];
+            sourcedAt: number;
+            sourcedBy: string;
+        };
         StartAboutApplicationBody: {
             applicationId: string;
             body: string;
@@ -2672,6 +2694,31 @@ interface components {
                 endDate: string | null;
             }[];
         };
+        TalentList: {
+            id: string;
+            /** @enum {string} */
+            object: "talent_list";
+            name: string;
+            filters: components["schemas"]["TalentListFilters"];
+            jobId: string | null;
+            createdBy: string;
+            createdAt: number;
+            updatedAt: number;
+        };
+        TalentListFilters: {
+            q?: string;
+            skill?: string;
+            /** @enum {string} */
+            jobSearchStatus?: "actively_looking" | "open_to_offers" | "not_looking";
+            languages?: string[];
+            openToRelocate?: boolean;
+            place?: string;
+            /** @enum {string} */
+            sort?: "relevance" | "newest";
+            seniority?: string;
+            permitCountry?: string;
+            interestedRole?: string;
+        };
         TalentProfile: {
             /** @enum {string} */
             object: "talent_profile";
@@ -3015,6 +3062,11 @@ interface components {
         UpdateSkillsBody: {
             skills: string[];
         };
+        UpdateTalentListBody: {
+            name?: string;
+            filters?: components["schemas"]["TalentListFilters"];
+            job?: string | unknown | unknown;
+        };
         VerifyEmailOtpBody: {
             code: string;
         };

package/dist/{blog-VbcrwKk9.d.ts → blog-CtRz0ZlI.d.ts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-ChuT3QX8.js';
+import { S as Schemas } from './_spec-CzS_E61o.js';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{blog-BB_l6xes.d.mts → blog-D4R04cZP.d.mts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-ChuT3QX8.mjs';
+import { S as Schemas } from './_spec-CzS_E61o.mjs';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{board-CWQjFHWJ.d.ts → board-CXE7dnk9.d.mts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-ChuT3QX8.js';
-import { L as ListEnvelope, m as RelatedSearch } from './jobs-CsoxD0mU.js';
+import { S as Schemas } from './_spec-CzS_E61o.mjs';
+import { L as ListEnvelope, m as RelatedSearch } from './jobs-CsrNGyvS.mjs';
 
 type PublicCompany = Schemas['CompanyPublic'];
 /** A market (sector) a company operates in — name + its source slug. */

package/dist/{board-BJCKz-Is.d.mts → board-MqLMXY48.d.ts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-ChuT3QX8.mjs';
-import { L as ListEnvelope, m as RelatedSearch } from './jobs-CV41Msa7.mjs';
+import { S as Schemas } from './_spec-CzS_E61o.js';
+import { L as ListEnvelope, m as RelatedSearch } from './jobs-DDJDUH3q.js';
 
 type PublicCompany = Schemas['CompanyPublic'];
 /** A market (sector) a company operates in — name + its source slug. */

package/dist/{breadcrumbs-6TB8Lw-C.d.ts → breadcrumbs-DdEy2bpQ.d.ts}

@@ -1,5 +1,5 @@
-import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-CWQjFHWJ.js';
-import { P as PublicJob } from './jobs-CsoxD0mU.js';
+import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-MqLMXY48.js';
+import { P as PublicJob } from './jobs-DDJDUH3q.js';
 
 /**
  * Wire enum for `salaryTimeframe`. Defined here (not re-exported from any
@@ -91,9 +91,6 @@ declare function formatSalaryRange(language: string, min: number | null, max: nu
  *
  * Named exclusions (hosted behaviours with no wire twin, recorded in the
  * public API contract):
- *   - `board.companyLegalName` — hosted falls back to it for the
- *     organization name between `company.name` and `board.name`; the wire
- *     board context does not expose it.
  *   - `board.companyWebsiteUrl` — hosted falls back to it for `sameAs` when
  *     the company has no website; not on the wire.
  *   - the hosted `job.place`/`locationLabel` jobLocation fallback (used when
@@ -103,7 +100,22 @@ declare function formatSalaryRange(language: string, min: number | null, max: nu
 
 type JsonLdObject = Record<string, unknown>;
 /** The only board fields JSON-LD needs — keeps callers' shapes flexible. */
-type JsonLdBoard = Pick<PublicBoard, 'name' | 'logoUrl'>;
+type JsonLdBoard = Pick<PublicBoard, 'name' | 'logoUrl'> & {
+    /**
+     * The operating company's registered name, used as the organization name
+     * for a job with no company of its own — ahead of the board's display
+     * name, matching the hosted board.
+     *
+     * Read from `contact.legalName`, which is where `board.context()` puts it,
+     * so passing the context object straight through (the documented call
+     * shape) just works. `legalName` at the top level is accepted too, for
+     * callers that flatten the board into their own view model.
+     */
+    contact?: {
+        legalName?: string | null;
+    } | null;
+    legalName?: string | null;
+};
 /**
  * Worldwide-remote jobs must still emit `applicantLocationRequirements`
  * next to TELECOMMUTE (Google requires a location signal), so the hosted

package/dist/{breadcrumbs-BoIXFh0q.d.mts → breadcrumbs-bbEYB2CD.d.mts}

@@ -1,5 +1,5 @@
-import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-BJCKz-Is.mjs';
-import { P as PublicJob } from './jobs-CV41Msa7.mjs';
+import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-CXE7dnk9.mjs';
+import { P as PublicJob } from './jobs-CsrNGyvS.mjs';
 
 /**
  * Wire enum for `salaryTimeframe`. Defined here (not re-exported from any
@@ -91,9 +91,6 @@ declare function formatSalaryRange(language: string, min: number | null, max: nu
  *
  * Named exclusions (hosted behaviours with no wire twin, recorded in the
  * public API contract):
- *   - `board.companyLegalName` — hosted falls back to it for the
- *     organization name between `company.name` and `board.name`; the wire
- *     board context does not expose it.
  *   - `board.companyWebsiteUrl` — hosted falls back to it for `sameAs` when
  *     the company has no website; not on the wire.
  *   - the hosted `job.place`/`locationLabel` jobLocation fallback (used when
@@ -103,7 +100,22 @@ declare function formatSalaryRange(language: string, min: number | null, max: nu
 
 type JsonLdObject = Record<string, unknown>;
 /** The only board fields JSON-LD needs — keeps callers' shapes flexible. */
-type JsonLdBoard = Pick<PublicBoard, 'name' | 'logoUrl'>;
+type JsonLdBoard = Pick<PublicBoard, 'name' | 'logoUrl'> & {
+    /**
+     * The operating company's registered name, used as the organization name
+     * for a job with no company of its own — ahead of the board's display
+     * name, matching the hosted board.
+     *
+     * Read from `contact.legalName`, which is where `board.context()` puts it,
+     * so passing the context object straight through (the documented call
+     * shape) just works. `legalName` at the top level is accepted too, for
+     * callers that flatten the board into their own view model.
+     */
+    contact?: {
+        legalName?: string | null;
+    } | null;
+    legalName?: string | null;
+};
 /**
  * Worldwide-remote jobs must still emit `applicantLocationRequirements`
  * next to TELECOMMUTE (Google requires a location signal), so the hosted