@cavuno/board 4.30.0 → 4.31.1

package/CHANGELOG.md

@@ -3,6 +3,37 @@
 This changelog records changes that affect Board API compatibility, exported
 types, runtime behavior, or supported integration patterns.
 
+## 4.31.1 — 2026-10-01
+
+- `createSessionRefresher` no longer shares an in-flight refresh between
+  requests. On Cloudflare Workers, a refresh started by a request that was
+  then cancelled could stay pending forever, and later requests for that
+  session waited on it. Each call now performs its own refresh; the refresh
+  endpoint returns the same successor refresh token for a token re-presented
+  within a short grace window, so concurrent refreshes converge on one
+  session. To avoid duplicate refresh calls, collapse them within a single
+  incoming request, never across requests.
+
+- The attribution check counts a footer backlink that React streams in a late
+  Suspense segment as visible, matching how browsers and crawlers render it.
+
+## 4.31.0 — 2026-10-01
+
+- Board SSO supports candidate and employer sign-in through OpenID Connect and
+  OAuth providers. Frontends can start sign-in, complete a one-time handoff, and
+  verify an emailed proof, with completion bound to the browser that started it.
+  Board context exposes the available sign-in methods for each role.
+
+- Development origins support local and preview frontends without changing the
+  board's public address. Employer accounts can be deactivated and reactivated
+  through the Board API.
+
+- Publish XML job feeds on your board's own domain for job aggregators, with
+  filters, directly posted or published job selection, and tagged job links.
+
+- PATCH requests can clear author links, canonical URLs, and seniority values.
+  External apply intents respect the board's registration wall.
+
 ## 4.30.0 — 2026-09-29
 
 - Company profiles and board settings can include an Instagram profile link.

package/dist/{_spec-CuSpfit_.d.mts → _spec-BD5My4zL.d.mts}

@@ -208,6 +208,8 @@ interface components {
         BoardAuthForgotPasswordBody: {
             /** Format: email */
             email: string;
+            /** @description Send the email link to this development origin instead of the board's production origin, for example `http://localhost:5173` while testing a self-hosted frontend. Only accepted with a publishable-key (`pk_...`) identifier (else 400 `board_development_origin_requires_publishable_key`), and only for a localhost development origin: email links can be requested for anyone's address, so a registered https preview returns 400 `board_development_origin_not_allowed_for_email`. It must be one of the board's development origins; otherwise the request fails with 400 `board_development_origin_not_registered`. */
+            developmentOrigin?: string;
         };
         BoardAuthLoginBody: {
             /** Format: email */
@@ -227,6 +229,8 @@ interface components {
         };
         BoardAuthOAuthExchangeBody: {
             token: string;
+            /** @description For SSO, the random secret established in the initiating browser before requesting authorization. Required for SSO tokens; never read it from a completion URL. */
+            browserBinding?: string;
         };
         BoardAuthRefreshBody: {
             refreshToken: string;
@@ -250,6 +254,8 @@ interface components {
             audienceAttribution?: components["schemas"]["AudienceAttribution"];
             /** @description True only when the person ticked a marketing checkbox your UI displayed with its disclosure wording. Omit when no checkbox was shown; false and absent both record nothing. */
             marketingConsent?: boolean;
+            /** @description Send the email link to this development origin instead of the board's production origin, for example `http://localhost:5173` while testing a self-hosted frontend. Only accepted with a publishable-key (`pk_...`) identifier (else 400 `board_development_origin_requires_publishable_key`), and only for a localhost development origin: email links can be requested for anyone's address, so a registered https preview returns 400 `board_development_origin_not_allowed_for_email`. It must be one of the board's development origins; otherwise the request fails with 400 `board_development_origin_not_registered`. */
+            developmentOrigin?: string;
         };
         BoardAuthRequestMagicLinkBody: {
             audienceAttribution?: components["schemas"]["AudienceAttribution"];
@@ -262,6 +268,8 @@ interface components {
              * @enum {string}
              */
             intent?: "sign_in";
+            /** @description Send the email link to this development origin instead of the board's production origin, for example `http://localhost:5173` while testing a self-hosted frontend. Only accepted with a publishable-key (`pk_...`) identifier (else 400 `board_development_origin_requires_publishable_key`), and only for a localhost development origin: email links can be requested for anyone's address, so a registered https preview returns 400 `board_development_origin_not_allowed_for_email`. It must be one of the board's development origins; otherwise the request fails with 400 `board_development_origin_not_registered`. */
+            developmentOrigin?: string;
         };
         BoardAuthResetPasswordBody: {
             token: string;
@@ -281,9 +289,30 @@ interface components {
             /** @description Present on OAuth exchange and magic-link consume. True when this exchange created the board user account (candidate or employer); false when it authenticated an existing account. */
             isNewUser?: boolean;
         };
+        BoardAuthSsoAuthorizationUrl: {
+            /** @enum {string} */
+            object: "sso_authorization_url";
+            /** @description The SSO connection ID. */
+            connectionId: string;
+            /** Format: uri */
+            authorizeUrl: string;
+        };
+        BoardAuthSsoLinkProofBody: {
+            /** @description The `linkProof` token from the emailed link. */
+            token: string;
+            /** @description The random secret established in the initiating browser BEFORE authorization. Completion URLs contain only its hash; never save their `linkProofBinding` as the secret. Without the matching value the proof is refused with `board_auth_sso_browser_mismatch`. */
+            browserBinding?: string;
+        };
         BoardAuthVerifyEmailBody: {
             token: string;
         };
+        BoardContact: {
+            /** @enum {string} */
+            object: "board_contact";
+            /** @description Whether visitors can send the board team a message. */
+            enabled: boolean;
+            boardName: string;
+        };
         BoardFormBuiltinField: {
             /**
              * @description discriminator enum property added by openapi-typescript
@@ -367,6 +396,19 @@ interface components {
             definition: components["schemas"]["ProfileCustomFieldDefinition"];
         };
         BoardProfileFormField: components["schemas"]["BoardFormBuiltinField"] | components["schemas"]["BoardProfileFormCustomField"] | components["schemas"]["BoardProfileFormCollectionField"];
+        BoardRoleSignIn: {
+            /** @description Deprecated: true when only SSO connections are available. Inspect methods and ssoConnections instead. */
+            ssoRequired: boolean;
+            /** @description Which built-in sign-in methods are switched on for this role. All `false` when sign-in for the role is switched off. All `false` with SSO connections listed means the role signs in only with SSO. */
+            methods: {
+                password: boolean;
+                magicLink: boolean;
+                google: boolean;
+                linkedin: boolean;
+            };
+            /** @description SSO connections switched on for this role, in the order the operator created them. */
+            ssoConnections: components["schemas"]["BoardSignInSsoConnection"][];
+        };
         BoardSeo: {
             /** @enum {string} */
             object: "board_seo";
@@ -386,6 +428,19 @@ interface components {
                 name: string;
             };
         };
+        BoardSignInSsoConnection: {
+            /** @description SSO connection ID. Pass it to `GET /boards/{identifier}/auth/sso/{connectionId}` to start sign-in. */
+            id: string;
+            /** @description Operator-chosen display name of the identity provider, e.g. "Acme Members". Render the button as "Continue with {label}". */
+            label: string;
+            /** @description Absolute URL of the provider logo, or `null` when unset. */
+            logoUrl: string | null;
+            /**
+             * @description Deprecated: infer SSO-only sign-in from methods and ssoConnections.
+             * @enum {string}
+             */
+            mode: "available" | "required";
+        };
         BoardSitemap: {
             /** @enum {string} */
             object: "board_sitemap";
@@ -758,6 +813,22 @@ interface components {
         ConfirmWorkEmailBody: {
             token: string;
         };
+        ContactSubmission: {
+            /** @enum {string} */
+            object: "contact_submission";
+            /** @enum {boolean} */
+            success: true;
+        };
+        ContactSubmissionBody: {
+            name: string;
+            /** Format: email */
+            email: string;
+            subject: string;
+            body: string;
+            /** Format: uuid */
+            requestId: string;
+            website?: string;
+        };
         Conversation: {
             id: string;
             /** @enum {string} */
@@ -2225,6 +2296,11 @@ interface components {
                 /** @description Whether posting a job on this board requires an active membership. When `true`, render the join gate in place of the anonymous post form: the platform rejects a create from a company with no contributing assignment (`membership_required`). Absent board config defaults to `false`. This flag is board policy and is safe to read anonymously; a signed-in employer's own standing rides their company billing options. */
                 requiresMembership: boolean;
             };
+            /** @description Sign-in options per role: the built-in methods and SSO connections switched on for that role. Render the sign-in page from this instead of hard-coding providers; any other method is refused with `board_auth_method_unavailable`. */
+            signIn: {
+                candidate: components["schemas"]["BoardRoleSignIn"];
+                employer: components["schemas"]["BoardRoleSignIn"];
+            };
             analytics: {
                 ga4MeasurementId: string | null;
                 gtmId: string | null;

package/dist/{_spec-CuSpfit_.d.ts → _spec-BD5My4zL.d.ts}

@@ -208,6 +208,8 @@ interface components {
         BoardAuthForgotPasswordBody: {
             /** Format: email */
             email: string;
+            /** @description Send the email link to this development origin instead of the board's production origin, for example `http://localhost:5173` while testing a self-hosted frontend. Only accepted with a publishable-key (`pk_...`) identifier (else 400 `board_development_origin_requires_publishable_key`), and only for a localhost development origin: email links can be requested for anyone's address, so a registered https preview returns 400 `board_development_origin_not_allowed_for_email`. It must be one of the board's development origins; otherwise the request fails with 400 `board_development_origin_not_registered`. */
+            developmentOrigin?: string;
         };
         BoardAuthLoginBody: {
             /** Format: email */
@@ -227,6 +229,8 @@ interface components {
         };
         BoardAuthOAuthExchangeBody: {
             token: string;
+            /** @description For SSO, the random secret established in the initiating browser before requesting authorization. Required for SSO tokens; never read it from a completion URL. */
+            browserBinding?: string;
         };
         BoardAuthRefreshBody: {
             refreshToken: string;
@@ -250,6 +254,8 @@ interface components {
             audienceAttribution?: components["schemas"]["AudienceAttribution"];
             /** @description True only when the person ticked a marketing checkbox your UI displayed with its disclosure wording. Omit when no checkbox was shown; false and absent both record nothing. */
             marketingConsent?: boolean;
+            /** @description Send the email link to this development origin instead of the board's production origin, for example `http://localhost:5173` while testing a self-hosted frontend. Only accepted with a publishable-key (`pk_...`) identifier (else 400 `board_development_origin_requires_publishable_key`), and only for a localhost development origin: email links can be requested for anyone's address, so a registered https preview returns 400 `board_development_origin_not_allowed_for_email`. It must be one of the board's development origins; otherwise the request fails with 400 `board_development_origin_not_registered`. */
+            developmentOrigin?: string;
         };
         BoardAuthRequestMagicLinkBody: {
             audienceAttribution?: components["schemas"]["AudienceAttribution"];
@@ -262,6 +268,8 @@ interface components {
              * @enum {string}
              */
             intent?: "sign_in";
+            /** @description Send the email link to this development origin instead of the board's production origin, for example `http://localhost:5173` while testing a self-hosted frontend. Only accepted with a publishable-key (`pk_...`) identifier (else 400 `board_development_origin_requires_publishable_key`), and only for a localhost development origin: email links can be requested for anyone's address, so a registered https preview returns 400 `board_development_origin_not_allowed_for_email`. It must be one of the board's development origins; otherwise the request fails with 400 `board_development_origin_not_registered`. */
+            developmentOrigin?: string;
         };
         BoardAuthResetPasswordBody: {
             token: string;
@@ -281,9 +289,30 @@ interface components {
             /** @description Present on OAuth exchange and magic-link consume. True when this exchange created the board user account (candidate or employer); false when it authenticated an existing account. */
             isNewUser?: boolean;
         };
+        BoardAuthSsoAuthorizationUrl: {
+            /** @enum {string} */
+            object: "sso_authorization_url";
+            /** @description The SSO connection ID. */
+            connectionId: string;
+            /** Format: uri */
+            authorizeUrl: string;
+        };
+        BoardAuthSsoLinkProofBody: {
+            /** @description The `linkProof` token from the emailed link. */
+            token: string;
+            /** @description The random secret established in the initiating browser BEFORE authorization. Completion URLs contain only its hash; never save their `linkProofBinding` as the secret. Without the matching value the proof is refused with `board_auth_sso_browser_mismatch`. */
+            browserBinding?: string;
+        };
         BoardAuthVerifyEmailBody: {
             token: string;
         };
+        BoardContact: {
+            /** @enum {string} */
+            object: "board_contact";
+            /** @description Whether visitors can send the board team a message. */
+            enabled: boolean;
+            boardName: string;
+        };
         BoardFormBuiltinField: {
             /**
              * @description discriminator enum property added by openapi-typescript
@@ -367,6 +396,19 @@ interface components {
             definition: components["schemas"]["ProfileCustomFieldDefinition"];
         };
         BoardProfileFormField: components["schemas"]["BoardFormBuiltinField"] | components["schemas"]["BoardProfileFormCustomField"] | components["schemas"]["BoardProfileFormCollectionField"];
+        BoardRoleSignIn: {
+            /** @description Deprecated: true when only SSO connections are available. Inspect methods and ssoConnections instead. */
+            ssoRequired: boolean;
+            /** @description Which built-in sign-in methods are switched on for this role. All `false` when sign-in for the role is switched off. All `false` with SSO connections listed means the role signs in only with SSO. */
+            methods: {
+                password: boolean;
+                magicLink: boolean;
+                google: boolean;
+                linkedin: boolean;
+            };
+            /** @description SSO connections switched on for this role, in the order the operator created them. */
+            ssoConnections: components["schemas"]["BoardSignInSsoConnection"][];
+        };
         BoardSeo: {
             /** @enum {string} */
             object: "board_seo";
@@ -386,6 +428,19 @@ interface components {
                 name: string;
             };
         };
+        BoardSignInSsoConnection: {
+            /** @description SSO connection ID. Pass it to `GET /boards/{identifier}/auth/sso/{connectionId}` to start sign-in. */
+            id: string;
+            /** @description Operator-chosen display name of the identity provider, e.g. "Acme Members". Render the button as "Continue with {label}". */
+            label: string;
+            /** @description Absolute URL of the provider logo, or `null` when unset. */
+            logoUrl: string | null;
+            /**
+             * @description Deprecated: infer SSO-only sign-in from methods and ssoConnections.
+             * @enum {string}
+             */
+            mode: "available" | "required";
+        };
         BoardSitemap: {
             /** @enum {string} */
             object: "board_sitemap";
@@ -758,6 +813,22 @@ interface components {
         ConfirmWorkEmailBody: {
             token: string;
         };
+        ContactSubmission: {
+            /** @enum {string} */
+            object: "contact_submission";
+            /** @enum {boolean} */
+            success: true;
+        };
+        ContactSubmissionBody: {
+            name: string;
+            /** Format: email */
+            email: string;
+            subject: string;
+            body: string;
+            /** Format: uuid */
+            requestId: string;
+            website?: string;
+        };
         Conversation: {
             id: string;
             /** @enum {string} */
@@ -2225,6 +2296,11 @@ interface components {
                 /** @description Whether posting a job on this board requires an active membership. When `true`, render the join gate in place of the anonymous post form: the platform rejects a create from a company with no contributing assignment (`membership_required`). Absent board config defaults to `false`. This flag is board policy and is safe to read anonymously; a signed-in employer's own standing rides their company billing options. */
                 requiresMembership: boolean;
             };
+            /** @description Sign-in options per role: the built-in methods and SSO connections switched on for that role. Render the sign-in page from this instead of hard-coding providers; any other method is refused with `board_auth_method_unavailable`. */
+            signIn: {
+                candidate: components["schemas"]["BoardRoleSignIn"];
+                employer: components["schemas"]["BoardRoleSignIn"];
+            };
             analytics: {
                 ga4MeasurementId: string | null;
                 gtmId: string | null;

package/dist/bin.mjs

@@ -8249,8 +8249,29 @@ var NON_RENDERED = /* @__PURE__ */ new Set([
 function attribute(node, name) {
   return node.attrs.find((attr) => attr.name === name)?.value;
 }
-function hidden(node) {
-  if (NON_RENDERED.has(node.tagName) || attribute(node, "hidden") !== void 0 || attribute(node, "inert") !== void 0 || attribute(node, "aria-hidden")?.toLowerCase() === "true")
+var STREAMED_REVEAL = /\$R[CR]\(\s*"[^"]+"\s*,\s*"([^"]+)"|\$RS\(\s*"([^"]+)"/g;
+function revealedSegmentIds(root) {
+  const ids = /* @__PURE__ */ new Set();
+  function visit(node) {
+    if ("tagName" in node && node.tagName === "script") {
+      for (const child of node.childNodes) {
+        if (child.nodeName !== "#text") continue;
+        const text = child.value;
+        for (const match of text.matchAll(STREAMED_REVEAL)) {
+          ids.add(match[1] ?? match[2]);
+        }
+      }
+      return;
+    }
+    if ("childNodes" in node) node.childNodes.forEach(visit);
+  }
+  visit(root);
+  return ids;
+}
+function hidden(node, revealed) {
+  const id = attribute(node, "id");
+  const streamedSegment = node.tagName === "div" && id !== void 0 && revealed.has(id);
+  if (NON_RENDERED.has(node.tagName) || attribute(node, "hidden") !== void 0 && !streamedSegment || attribute(node, "inert") !== void 0 || attribute(node, "aria-hidden")?.toLowerCase() === "true")
     return true;
   const style = (attribute(node, "style") ?? "").replace(
     /\/\*[\s\S]*?\*\//g,
@@ -8263,24 +8284,26 @@ function hidden(node) {
     return property === "display" && value === "none" || property === "visibility" && ["hidden", "collapse"].includes(value) || property === "opacity" && value !== "" && Number(value.replace(/%$/, "")) === 0;
   });
 }
-function hasContent(node) {
+function hasContent(node, revealed) {
   if (node.nodeName === "#text")
     return /\S/.test(node.value);
   if ("tagName" in node) {
-    if (hidden(node)) return false;
+    if (hidden(node, revealed)) return false;
     if (node.tagName === "img") return Boolean(attribute(node, "alt")?.trim());
     if (node.tagName === "svg" && attribute(node, "aria-label")?.trim())
       return true;
   }
-  return "childNodes" in node && node.childNodes.some(hasContent);
+  return "childNodes" in node && node.childNodes.some((child) => hasContent(child, revealed));
 }
 function hasCrawlableCavunoBacklink(html) {
+  const root = parse(html);
+  const revealed = revealedSegmentIds(root);
   function visit(node) {
     if ("tagName" in node) {
-      if (hidden(node)) return false;
+      if (hidden(node, revealed)) return false;
       if (node.tagName === "a") {
         const href = attribute(node, "href");
-        if (href !== void 0 && hasContent(node)) {
+        if (href !== void 0 && hasContent(node, revealed)) {
           try {
             const url = new URL(href);
             if (["http:", "https:"].includes(url.protocol) && ["cavuno.com", "www.cavuno.com"].includes(url.hostname))
@@ -8292,7 +8315,7 @@ function hasCrawlableCavunoBacklink(html) {
     }
     return "childNodes" in node && node.childNodes.some(visit);
   }
-  return visit(parse(html));
+  return visit(root);
 }
 
 // src/doctor/read.ts

package/dist/{blog-CvQeoBc8.d.ts → blog-CcLmN5Tw.d.ts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-CuSpfit_.js';
+import { S as Schemas } from './_spec-BD5My4zL.js';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{blog-21XnewAu.d.mts → blog-Dh-Ru5QZ.d.mts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-CuSpfit_.mjs';
+import { S as Schemas } from './_spec-BD5My4zL.mjs';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{board-t_j16FrX.d.ts → board-BRWS1m6D.d.mts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-CuSpfit_.js';
-import { L as ListEnvelope, s as RelatedSearch, a as CustomFieldFilter, O as ObjectReferenceFilter } from './jobs-CErce8Tw.js';
+import { S as Schemas } from './_spec-BD5My4zL.mjs';
+import { L as ListEnvelope, s as RelatedSearch, a as CustomFieldFilter, O as ObjectReferenceFilter } from './jobs-BPTMfkal.mjs';
 
 type PublicCompany = Schemas['CompanyPublic'];
 /** A market (sector) a company operates in — name + its source slug. */
@@ -123,6 +123,19 @@ type PublicBoardFeatures = PublicBoard['features'];
 type PublicBoardAnalytics = PublicBoard['analytics'];
 type PublicBoardAds = PublicBoard['ads'];
 type PublicBoardJobForm = PublicBoard['jobForm'];
+/**
+ * Sign-in options per role from `board.context().signIn`: which built-in
+ * methods to offer and the board's SSO connections. Render the sign-in page
+ * from this instead of hard-coding providers.
+ */
+type PublicBoardSignIn = PublicBoard['signIn'];
+/** One role's sign-in options (`signIn.candidate` / `signIn.employer`). */
+type BoardRoleSignIn = Schemas['BoardRoleSignIn'];
+/**
+ * An SSO connection offered to a role. Start sign-in with
+ * `board.auth.getSsoAuthorizationUrl(connection.id, { role })`.
+ */
+type BoardSignInSsoConnection = Schemas['BoardSignInSsoConnection'];
 /**
  * The operator's job, company and talent forms from
  * `board.context().forms`: one ordered field list per form. Render each list
@@ -152,4 +165,4 @@ type CustomFieldDefinition = Schemas['CustomFieldDefinition'];
 type CustomFieldType = CustomFieldDefinition['type'];
 type CustomFieldOption = Schemas['CustomFieldOption'];
 
-export type { PublicCompanyDetail as A, BoardFormBuiltinField as B, CustomFieldDefinition as C, PublicCompanyMembership as D, SalaryCompany as E, SalaryLocation as F, SalarySkill as G, SalaryTitle as H, SkillLocationSalary as I, SkillLocationsIndex as J, TitleLocationSalary as K, LocationSalaryDetail as L, TitleLocationsIndex as M, PublicBoard as P, SkillSalaryDetail as S, TitleSalaryDetail as T, CompanyCategorySalary as a, CompanySalary as b, CompaniesListQuery as c, CompanyListEnvelope as d, CompaniesSearchBody as e, CompanyJobsListQuery as f, CompanySimilarQuery as g, CompanyMarketsListQuery as h, SalaryDetailQuery as i, BoardFormField as j, BoardFormLayout as k, BoardFormLockReason as l, BoardJobFormField as m, BoardProfileFormField as n, CompanyMarket as o, CompanyMarketRef as p, CompanySalarySummary as q, CustomFieldOption as r, CustomFieldType as s, LocationSkillsIndex as t, LocationTitlesIndex as u, PublicBoardAds as v, PublicBoardAnalytics as w, PublicBoardFeatures as x, PublicBoardJobForm as y, PublicCompany as z };
+export type { PublicBoardJobForm as A, BoardFormBuiltinField as B, CustomFieldDefinition as C, PublicBoardSignIn as D, PublicCompany as E, PublicCompanyDetail as F, PublicCompanyMembership as G, SalaryCompany as H, SalaryLocation as I, SalarySkill as J, SalaryTitle as K, LocationSalaryDetail as L, SkillLocationSalary as M, SkillLocationsIndex as N, TitleLocationSalary as O, PublicBoard as P, TitleLocationsIndex as Q, SkillSalaryDetail as S, TitleSalaryDetail as T, CompanyCategorySalary as a, CompanySalary as b, CompaniesListQuery as c, CompanyListEnvelope as d, CompaniesSearchBody as e, CompanyJobsListQuery as f, CompanySimilarQuery as g, CompanyMarketsListQuery as h, SalaryDetailQuery as i, BoardFormField as j, BoardFormLayout as k, BoardFormLockReason as l, BoardJobFormField as m, BoardProfileFormField as n, BoardRoleSignIn as o, BoardSignInSsoConnection as p, CompanyMarket as q, CompanyMarketRef as r, CompanySalarySummary as s, CustomFieldOption as t, CustomFieldType as u, LocationSkillsIndex as v, LocationTitlesIndex as w, PublicBoardAds as x, PublicBoardAnalytics as y, PublicBoardFeatures as z };

package/dist/{board-VrjkKuZ-.d.mts → board-CF66EdYi.d.ts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-CuSpfit_.mjs';
-import { L as ListEnvelope, s as RelatedSearch, a as CustomFieldFilter, O as ObjectReferenceFilter } from './jobs-h-ewgbXn.mjs';
+import { S as Schemas } from './_spec-BD5My4zL.js';
+import { L as ListEnvelope, s as RelatedSearch, a as CustomFieldFilter, O as ObjectReferenceFilter } from './jobs-BbtjrUo2.js';
 
 type PublicCompany = Schemas['CompanyPublic'];
 /** A market (sector) a company operates in — name + its source slug. */
@@ -123,6 +123,19 @@ type PublicBoardFeatures = PublicBoard['features'];
 type PublicBoardAnalytics = PublicBoard['analytics'];
 type PublicBoardAds = PublicBoard['ads'];
 type PublicBoardJobForm = PublicBoard['jobForm'];
+/**
+ * Sign-in options per role from `board.context().signIn`: which built-in
+ * methods to offer and the board's SSO connections. Render the sign-in page
+ * from this instead of hard-coding providers.
+ */
+type PublicBoardSignIn = PublicBoard['signIn'];
+/** One role's sign-in options (`signIn.candidate` / `signIn.employer`). */
+type BoardRoleSignIn = Schemas['BoardRoleSignIn'];
+/**
+ * An SSO connection offered to a role. Start sign-in with
+ * `board.auth.getSsoAuthorizationUrl(connection.id, { role })`.
+ */
+type BoardSignInSsoConnection = Schemas['BoardSignInSsoConnection'];
 /**
  * The operator's job, company and talent forms from
  * `board.context().forms`: one ordered field list per form. Render each list
@@ -152,4 +165,4 @@ type CustomFieldDefinition = Schemas['CustomFieldDefinition'];
 type CustomFieldType = CustomFieldDefinition['type'];
 type CustomFieldOption = Schemas['CustomFieldOption'];
 
-export type { PublicCompanyDetail as A, BoardFormBuiltinField as B, CustomFieldDefinition as C, PublicCompanyMembership as D, SalaryCompany as E, SalaryLocation as F, SalarySkill as G, SalaryTitle as H, SkillLocationSalary as I, SkillLocationsIndex as J, TitleLocationSalary as K, LocationSalaryDetail as L, TitleLocationsIndex as M, PublicBoard as P, SkillSalaryDetail as S, TitleSalaryDetail as T, CompanyCategorySalary as a, CompanySalary as b, CompaniesListQuery as c, CompanyListEnvelope as d, CompaniesSearchBody as e, CompanyJobsListQuery as f, CompanySimilarQuery as g, CompanyMarketsListQuery as h, SalaryDetailQuery as i, BoardFormField as j, BoardFormLayout as k, BoardFormLockReason as l, BoardJobFormField as m, BoardProfileFormField as n, CompanyMarket as o, CompanyMarketRef as p, CompanySalarySummary as q, CustomFieldOption as r, CustomFieldType as s, LocationSkillsIndex as t, LocationTitlesIndex as u, PublicBoardAds as v, PublicBoardAnalytics as w, PublicBoardFeatures as x, PublicBoardJobForm as y, PublicCompany as z };
+export type { PublicBoardJobForm as A, BoardFormBuiltinField as B, CustomFieldDefinition as C, PublicBoardSignIn as D, PublicCompany as E, PublicCompanyDetail as F, PublicCompanyMembership as G, SalaryCompany as H, SalaryLocation as I, SalarySkill as J, SalaryTitle as K, LocationSalaryDetail as L, SkillLocationSalary as M, SkillLocationsIndex as N, TitleLocationSalary as O, PublicBoard as P, TitleLocationsIndex as Q, SkillSalaryDetail as S, TitleSalaryDetail as T, CompanyCategorySalary as a, CompanySalary as b, CompaniesListQuery as c, CompanyListEnvelope as d, CompaniesSearchBody as e, CompanyJobsListQuery as f, CompanySimilarQuery as g, CompanyMarketsListQuery as h, SalaryDetailQuery as i, BoardFormField as j, BoardFormLayout as k, BoardFormLockReason as l, BoardJobFormField as m, BoardProfileFormField as n, BoardRoleSignIn as o, BoardSignInSsoConnection as p, CompanyMarket as q, CompanyMarketRef as r, CompanySalarySummary as s, CustomFieldOption as t, CustomFieldType as u, LocationSkillsIndex as v, LocationTitlesIndex as w, PublicBoardAds as x, PublicBoardAnalytics as y, PublicBoardFeatures as z };

package/dist/{breadcrumbs-BpONykkn.d.mts → breadcrumbs-AEupw3fi.d.mts}

@@ -1,5 +1,5 @@
-import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-VrjkKuZ-.mjs';
-import { P as PublicJob } from './jobs-h-ewgbXn.mjs';
+import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-BRWS1m6D.mjs';
+import { P as PublicJob } from './jobs-BPTMfkal.mjs';
 
 /**
  * Wire enum for `salaryTimeframe`. Defined here (not re-exported from any

package/dist/{breadcrumbs-CJ5eu_ye.d.ts → breadcrumbs-Bu1lN6qA.d.ts}

@@ -1,5 +1,5 @@
-import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-t_j16FrX.js';
-import { P as PublicJob } from './jobs-CErce8Tw.js';
+import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-CF66EdYi.js';
+import { P as PublicJob } from './jobs-BbtjrUo2.js';
 
 /**
  * Wire enum for `salaryTimeframe`. Defined here (not re-exported from any