@cavuno/board 4.16.0 → 4.19.0

package/CHANGELOG.md

@@ -3,6 +3,40 @@
 This changelog records changes that affect Board API compatibility, exported
 types, runtime behavior, or supported integration patterns.
 
+## 4.19.0 — 2026-09-02
+
+- **`board.sitemap()` / `board.sitemap.entries(bucket, { limit, cursor })`**:
+  new namespace over `GET /sitemap` and `GET /sitemap/{bucket}`. The board
+  publishes its complete sitemap — every bucket with an entry count, and each
+  bucket's board-relative `path` + `lastModified` entries, cursor-paged up to
+  1000 per page — so a headless frontend reproduces the hosted sitemap exactly
+  (cross-axis salary pages, jobs place × category / skill pages, markets)
+  without enumerating the catalog itself.
+- **`@cavuno/board/sitemap` walker**: `listedBuckets` and `buildBucketUrls`
+  now read the published sitemap first and fall back to the previous
+  per-family enumeration only when the API answers 404. A sitemap build drops
+  from ~25 catalog reads to a handful of cached reads. All existing exports
+  are unchanged.
+- **`board.companies.markets({ cursor })`**: the unsearched market list is
+  now paginated (`hasMore` / `nextCursor` are real; use `paginate()`). With
+  `search` it remains a top-N preview. `CompanyMarketsListQuery` gains `cursor`.
+
+## 4.18.0 — 2026-09-02
+
+- **`board.auth.requestMagicLink({ intent: 'sign_in' })`**: new optional
+  `intent` on `POST /auth/magic-link`. Pass `'sign_in'` from a sign-in form so
+  an unknown email is refused with 404 `board_auth_account_not_found` instead
+  of silently minting a candidate sign-up token. Omit it to keep the previous
+  sign-in-or-sign-up behaviour. Any other value is a 400.
+- **`BOARD_API_ERROR_CODES`**: adds `board_auth_account_not_found`.
+
+## 4.17.0 — 2026-08-31
+
+- **`EmployerPipelineStage.systemStage`**: a closed set of pipeline literals —
+  `shortlisted`, `contacted`, `replied`, `review`, `offer`, `hired`,
+  `rejected`, or `null` — instead of an open string. `applied` remains a
+  list-query alias for `review`, not a `systemStage` value.
+
 ## 4.16.0 — 2026-08-31
 
 - **`@cavuno/board/analytics`**: new subpath with `install({ publishableKey })`

package/dist/{_spec-DdWB8z1Z.d.mts → _spec-DyTPJbIZ.d.mts}

@@ -249,6 +249,11 @@ interface components {
             email: string;
             /** @description Optional same-origin path to carry through the email link. */
             returnTo?: string;
+            /**
+             * @description Pass `sign_in` from a sign-in form: an unknown email returns 404 `board_auth_account_not_found` and nothing is minted or sent; existing users are unchanged. Omit it for today’s behaviour (existing users get a sign-in token; unknown emails get a candidate sign-up token when candidate registration is enabled).
+             * @enum {string}
+             */
+            intent?: "sign_in";
         };
         BoardAuthResetPasswordBody: {
             token: string;
@@ -290,6 +295,20 @@ interface components {
                 name: string;
             };
         };
+        BoardSitemap: {
+            /** @enum {string} */
+            object: "board_sitemap";
+            /** @description The buckets the board publishes, in the canonical bucket order. Empty buckets are omitted — exactly the set the hosted `/sitemap.xml` index lists. */
+            buckets: components["schemas"]["BoardSitemapBucketSummary"][];
+        };
+        BoardSitemapBucketSummary: {
+            /** @description Bucket name — pass it to `GET /boards/:identifier/sitemap/{bucket}` to read its entries. */
+            bucket: string;
+            /** @description Number of entries in the bucket. */
+            count: number;
+            /** @description ISO 8601 timestamp of the newest content in the bucket, when the board tracks one. */
+            lastModified?: string;
+        };
         BoardUser: {
             /** @description Board user ID. */
             id: string;
@@ -1054,7 +1073,7 @@ interface components {
             inOfficePeriod?: "per_week" | "per_month" | "per_year";
             /** @description How often the candidate must be in-office over `inOfficePeriod`. */
             inOfficeFrequency?: number;
-            /** @description Physical office locations associated with the job. Each entry is forward-geocoded server-side; a country mismatch returns `400 jobs_unresolvable_location`. */
+            /** @description Physical office locations associated with the job. Prefer `{query: "City, Country"}` for free-form input; `{city, country, region?, locality?}` is also accepted when you already have structured fields. Each entry is resolved server-side; a country mismatch returns `400 jobs_unresolvable_location`. */
             officeLocations?: components["schemas"]["JobOfficeLocationInput"][];
             /** @description The job title. */
             title: string;
@@ -1211,8 +1230,11 @@ interface components {
             object: "employer_pipeline_stage";
             jobId: string;
             label: string;
-            /** @description The stable system meaning (`review`/`offer`/`hired`/`rejected`), or `null` for a custom employer stage. */
-            systemStage: string | null;
+            /**
+             * @description The stable system meaning, or `null` for a custom employer stage.
+             * @enum {string|null}
+             */
+            systemStage: "shortlisted" | "contacted" | "replied" | "review" | "offer" | "hired" | "rejected" | null;
             isProtected: boolean;
             hidden: boolean;
             position: number;
@@ -1299,7 +1321,7 @@ interface components {
             inOfficePeriod?: "per_week" | "per_month" | "per_year";
             /** @description How often the candidate must be in-office over `inOfficePeriod`. */
             inOfficeFrequency?: number;
-            /** @description Physical office locations associated with the job. Each entry is forward-geocoded server-side; a country mismatch returns `400 jobs_unresolvable_location`. */
+            /** @description Physical office locations associated with the job. Prefer `{query: "City, Country"}` for free-form input; `{city, country, region?, locality?}` is also accepted when you already have structured fields. Each entry is resolved server-side; a country mismatch returns `400 jobs_unresolvable_location`. */
             officeLocations?: components["schemas"]["JobOfficeLocationInput"][];
             /** @description The job title. */
             title?: string;
@@ -1355,6 +1377,9 @@ interface components {
             displayName: string | null;
         };
         JobOfficeLocationInput: {
+            /** @description Free-form location string (e.g. `"Berlin, Germany"`, `"Utrecht, Netherlands"`, `"Mountain View, California, USA"`). Resolved server-side; rejected when no high-confidence match is found. */
+            query: string;
+        } | {
             /** @description Neighborhood or sub-locality. */
             locality?: string;
             /** @description City. */
@@ -1363,9 +1388,6 @@ interface components {
             region?: string;
             /** @description ISO 3166-1 alpha-2 country code OR recognized country name/alias. Aliases are normalized to canonical alpha-2 server-side (e.g. `US`, `USA`, `United States` → `US`; `UK`, `GB`, `United Kingdom` → `GB`). */
             country: string;
-        } | {
-            /** @description Free-form location string (e.g. `"Berlin, Germany"`, `"Mountain View, California, USA"`). Mapbox parses + ranks candidates server-side; rejects on low confidence. */
-            query: string;
         };
         JobPostingBillingOptions: {
             /** @enum {string} */
@@ -2443,6 +2465,14 @@ interface components {
             /** Format: email */
             workEmail: string;
         };
+        SitemapEntry: {
+            /** @enum {string} */
+            object: "sitemap_entry";
+            /** @description Board-relative path, always starting with `/`. Prefix it with your own origin to build the absolute URL — the API never returns the hosted origin. */
+            path: string;
+            /** @description ISO 8601 timestamp of the entry, when one is known. */
+            lastModified?: string;
+        };
         SkillLocationSalary: {
             /** @enum {string} */
             object: "skill_location_salary";
@@ -2597,9 +2627,13 @@ interface components {
         StartConversationBody: {
             candidateBoardUserId: string;
             body: string;
+            /** @description Optional job id. When set, this send is from that job pipeline and may auto-advance Shortlisted to Contacted. */
+            job?: string;
         } | {
             candidateHandle: string;
             body: string;
+            /** @description Optional job id. When set, this send is from that job pipeline and may auto-advance Shortlisted to Contacted. */
+            job?: string;
         };
         SuggestResult: {
             /** @enum {string} */

package/dist/{_spec-DdWB8z1Z.d.ts → _spec-DyTPJbIZ.d.ts}

@@ -249,6 +249,11 @@ interface components {
             email: string;
             /** @description Optional same-origin path to carry through the email link. */
             returnTo?: string;
+            /**
+             * @description Pass `sign_in` from a sign-in form: an unknown email returns 404 `board_auth_account_not_found` and nothing is minted or sent; existing users are unchanged. Omit it for today’s behaviour (existing users get a sign-in token; unknown emails get a candidate sign-up token when candidate registration is enabled).
+             * @enum {string}
+             */
+            intent?: "sign_in";
         };
         BoardAuthResetPasswordBody: {
             token: string;
@@ -290,6 +295,20 @@ interface components {
                 name: string;
             };
         };
+        BoardSitemap: {
+            /** @enum {string} */
+            object: "board_sitemap";
+            /** @description The buckets the board publishes, in the canonical bucket order. Empty buckets are omitted — exactly the set the hosted `/sitemap.xml` index lists. */
+            buckets: components["schemas"]["BoardSitemapBucketSummary"][];
+        };
+        BoardSitemapBucketSummary: {
+            /** @description Bucket name — pass it to `GET /boards/:identifier/sitemap/{bucket}` to read its entries. */
+            bucket: string;
+            /** @description Number of entries in the bucket. */
+            count: number;
+            /** @description ISO 8601 timestamp of the newest content in the bucket, when the board tracks one. */
+            lastModified?: string;
+        };
         BoardUser: {
             /** @description Board user ID. */
             id: string;
@@ -1054,7 +1073,7 @@ interface components {
             inOfficePeriod?: "per_week" | "per_month" | "per_year";
             /** @description How often the candidate must be in-office over `inOfficePeriod`. */
             inOfficeFrequency?: number;
-            /** @description Physical office locations associated with the job. Each entry is forward-geocoded server-side; a country mismatch returns `400 jobs_unresolvable_location`. */
+            /** @description Physical office locations associated with the job. Prefer `{query: "City, Country"}` for free-form input; `{city, country, region?, locality?}` is also accepted when you already have structured fields. Each entry is resolved server-side; a country mismatch returns `400 jobs_unresolvable_location`. */
             officeLocations?: components["schemas"]["JobOfficeLocationInput"][];
             /** @description The job title. */
             title: string;
@@ -1211,8 +1230,11 @@ interface components {
             object: "employer_pipeline_stage";
             jobId: string;
             label: string;
-            /** @description The stable system meaning (`review`/`offer`/`hired`/`rejected`), or `null` for a custom employer stage. */
-            systemStage: string | null;
+            /**
+             * @description The stable system meaning, or `null` for a custom employer stage.
+             * @enum {string|null}
+             */
+            systemStage: "shortlisted" | "contacted" | "replied" | "review" | "offer" | "hired" | "rejected" | null;
             isProtected: boolean;
             hidden: boolean;
             position: number;
@@ -1299,7 +1321,7 @@ interface components {
             inOfficePeriod?: "per_week" | "per_month" | "per_year";
             /** @description How often the candidate must be in-office over `inOfficePeriod`. */
             inOfficeFrequency?: number;
-            /** @description Physical office locations associated with the job. Each entry is forward-geocoded server-side; a country mismatch returns `400 jobs_unresolvable_location`. */
+            /** @description Physical office locations associated with the job. Prefer `{query: "City, Country"}` for free-form input; `{city, country, region?, locality?}` is also accepted when you already have structured fields. Each entry is resolved server-side; a country mismatch returns `400 jobs_unresolvable_location`. */
             officeLocations?: components["schemas"]["JobOfficeLocationInput"][];
             /** @description The job title. */
             title?: string;
@@ -1355,6 +1377,9 @@ interface components {
             displayName: string | null;
         };
         JobOfficeLocationInput: {
+            /** @description Free-form location string (e.g. `"Berlin, Germany"`, `"Utrecht, Netherlands"`, `"Mountain View, California, USA"`). Resolved server-side; rejected when no high-confidence match is found. */
+            query: string;
+        } | {
             /** @description Neighborhood or sub-locality. */
             locality?: string;
             /** @description City. */
@@ -1363,9 +1388,6 @@ interface components {
             region?: string;
             /** @description ISO 3166-1 alpha-2 country code OR recognized country name/alias. Aliases are normalized to canonical alpha-2 server-side (e.g. `US`, `USA`, `United States` → `US`; `UK`, `GB`, `United Kingdom` → `GB`). */
             country: string;
-        } | {
-            /** @description Free-form location string (e.g. `"Berlin, Germany"`, `"Mountain View, California, USA"`). Mapbox parses + ranks candidates server-side; rejects on low confidence. */
-            query: string;
         };
         JobPostingBillingOptions: {
             /** @enum {string} */
@@ -2443,6 +2465,14 @@ interface components {
             /** Format: email */
             workEmail: string;
         };
+        SitemapEntry: {
+            /** @enum {string} */
+            object: "sitemap_entry";
+            /** @description Board-relative path, always starting with `/`. Prefix it with your own origin to build the absolute URL — the API never returns the hosted origin. */
+            path: string;
+            /** @description ISO 8601 timestamp of the entry, when one is known. */
+            lastModified?: string;
+        };
         SkillLocationSalary: {
             /** @enum {string} */
             object: "skill_location_salary";
@@ -2597,9 +2627,13 @@ interface components {
         StartConversationBody: {
             candidateBoardUserId: string;
             body: string;
+            /** @description Optional job id. When set, this send is from that job pipeline and may auto-advance Shortlisted to Contacted. */
+            job?: string;
         } | {
             candidateHandle: string;
             body: string;
+            /** @description Optional job id. When set, this send is from that job pipeline and may auto-advance Shortlisted to Contacted. */
+            job?: string;
         };
         SuggestResult: {
             /** @enum {string} */

package/dist/{blog-DopIQsKV.d.mts → blog-Cdw6_ocq.d.mts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-DdWB8z1Z.mjs';
+import { S as Schemas } from './_spec-DyTPJbIZ.mjs';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{blog-B7xorPBw.d.ts → blog-vDgRPBAK.d.ts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-DdWB8z1Z.js';
+import { S as Schemas } from './_spec-DyTPJbIZ.js';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{board-CkgTW4cC.d.mts → board-CLDHd9N_.d.mts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-DdWB8z1Z.mjs';
-import { L as ListEnvelope, m as RelatedSearch } from './jobs-Dq0TTcRf.mjs';
+import { S as Schemas } from './_spec-DyTPJbIZ.mjs';
+import { L as ListEnvelope, m as RelatedSearch } from './jobs-Bnx1B6at.mjs';
 
 type PublicCompany = Schemas['CompanyPublic'];
 /** A market (sector) a company operates in — name + its source slug. */
@@ -52,8 +52,15 @@ type CompanySimilarQuery = {
 };
 type CompanyMarket = Schemas['CompanyMarket'];
 type CompanyMarketsListQuery = {
-    /** 1–200, default 100 (a top-by-company-count preview). */
+    /** Page size, 1–200 (default 100). */
     limit?: number;
+    /**
+     * Opaque forward cursor from a previous response's `nextCursor`. The
+     * unsearched list is fully paginated (walk it with `paginate` to enumerate
+     * every market); a `search` call returns one preview page with
+     * `hasMore: false`, so the cursor does not apply there.
+     */
+    cursor?: string;
     search?: string;
 };
 type CompaniesSearchBody = Schemas['PublicCompaniesSearchBody'];

package/dist/{board-Bpnqn4Rg.d.ts → board-DpDCNMJD.d.ts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-DdWB8z1Z.js';
-import { L as ListEnvelope, m as RelatedSearch } from './jobs-CExc4QdI.js';
+import { S as Schemas } from './_spec-DyTPJbIZ.js';
+import { L as ListEnvelope, m as RelatedSearch } from './jobs-Bwl7pKKg.js';
 
 type PublicCompany = Schemas['CompanyPublic'];
 /** A market (sector) a company operates in — name + its source slug. */
@@ -52,8 +52,15 @@ type CompanySimilarQuery = {
 };
 type CompanyMarket = Schemas['CompanyMarket'];
 type CompanyMarketsListQuery = {
-    /** 1–200, default 100 (a top-by-company-count preview). */
+    /** Page size, 1–200 (default 100). */
     limit?: number;
+    /**
+     * Opaque forward cursor from a previous response's `nextCursor`. The
+     * unsearched list is fully paginated (walk it with `paginate` to enumerate
+     * every market); a `search` call returns one preview page with
+     * `hasMore: false`, so the cursor does not apply there.
+     */
+    cursor?: string;
     search?: string;
 };
 type CompaniesSearchBody = Schemas['PublicCompaniesSearchBody'];

package/dist/{breadcrumbs-CAppxMoS.d.mts → breadcrumbs-CKtVWTOB.d.mts}

@@ -1,5 +1,5 @@
-import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-CkgTW4cC.mjs';
-import { P as PublicJob } from './jobs-Dq0TTcRf.mjs';
+import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-CLDHd9N_.mjs';
+import { P as PublicJob } from './jobs-Bnx1B6at.mjs';
 
 /**
  * Wire enum for `salaryTimeframe`. Defined here (not re-exported from any

package/dist/{breadcrumbs-DelEqbSz.d.ts → breadcrumbs-CYT3HxfO.d.ts}

@@ -1,5 +1,5 @@
-import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-Bpnqn4Rg.js';
-import { P as PublicJob } from './jobs-CExc4QdI.js';
+import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-DpDCNMJD.js';
+import { P as PublicJob } from './jobs-Bwl7pKKg.js';
 
 /**
  * Wire enum for `salaryTimeframe`. Defined here (not re-exported from any