@cavuno/board 4.30.0 → 4.31.1

package/dist/index.d.ts

@@ -1,13 +1,13 @@
-import { S as Schemas, c as components } from './_spec-CuSpfit_.js';
-import { F as FetchOptions, S as StorageMode, B as BoardRequest, A as Awaitable, L as Logger, a as BoardClient, b as SearchSuggestQuery } from './search-B2LdM6bj.js';
-export { c as ACCESS_TOKEN_KEY, d as BOARD_ACCESS_GRANT_KEY, C as CompanySuggestion, e as CustomStorage, M as MarketSuggestion, R as REFRESH_TOKEN_KEY, f as SearchSuggestType, g as SuggestResult, h as SuggestionItem, T as TermSuggestion } from './search-B2LdM6bj.js';
-import { c as CompaniesListQuery, d as CompanyListEnvelope, e as CompaniesSearchBody, f as CompanyJobsListQuery, g as CompanySimilarQuery, h as CompanyMarketsListQuery, i as SalaryDetailQuery } from './board-t_j16FrX.js';
-export { B as BoardFormBuiltinField, j as BoardFormField, k as BoardFormLayout, l as BoardFormLockReason, m as BoardJobFormField, n as BoardProfileFormField, a as CompanyCategorySalary, o as CompanyMarket, p as CompanyMarketRef, b as CompanySalary, q as CompanySalarySummary, C as CustomFieldDefinition, r as CustomFieldOption, s as CustomFieldType, L as LocationSalaryDetail, t as LocationSkillsIndex, u as LocationTitlesIndex, P as PublicBoard, v as PublicBoardAds, w as PublicBoardAnalytics, x as PublicBoardFeatures, y as PublicBoardJobForm, z as PublicCompany, A as PublicCompanyDetail, D as PublicCompanyMembership, E as SalaryCompany, F as SalaryLocation, G as SalarySkill, H as SalaryTitle, I as SkillLocationSalary, J as SkillLocationsIndex, S as SkillSalaryDetail, K as TitleLocationSalary, M as TitleLocationsIndex, T as TitleSalaryDetail } from './board-t_j16FrX.js';
-export { B as BoardSeo } from './seo-BPDNxOiZ.js';
-import { R as RemoteOption, E as EmploymentType, S as Seniority, a as CustomFieldFilter, O as ObjectReferenceFilter, L as ListEnvelope, b as JobCollectionChoiceQuery, c as JobsListQuery, d as JobCardListEnvelope, e as JobsSearchBody, f as JobCardSearchEnvelope, g as JobsSimilarQuery, h as SearchEnvelope } from './jobs-CErce8Tw.js';
-export { i as CustomFieldValue, C as CustomFieldValues, j as CustomFilterValue, k as EducationRequirement, l as JobCatalogPagination, m as JobCollectionChoiceList, n as JobCollectionFieldDefinition, o as JobCompany, J as JobSort, p as OfficeLocation, q as OffsetPagination, P as PublicJob, r as PublicJobCard, s as RelatedSearch, t as RemotePermit, u as RemoteTimezone, v as ResolvedJobCollectionField, w as StorefrontPagination } from './jobs-CErce8Tw.js';
-import { a as BlogPostsListQuery, b as BlogSimilarQuery, c as BlogSearchBody } from './blog-CvQeoBc8.js';
-export { B as BlogAuthorEmbed, d as BlogTagEmbed, e as PublicBlogAdjacentPosts, f as PublicBlogAuthor, g as PublicBlogPost, P as PublicBlogPostSummary, h as PublicBlogTag } from './blog-CvQeoBc8.js';
+import { S as Schemas, c as components } from './_spec-BD5My4zL.js';
+import { F as FetchOptions, S as StorageMode, B as BoardRequest, A as Awaitable, L as Logger, a as BoardClient, b as SearchSuggestQuery } from './search-CqPIHkv8.js';
+export { c as ACCESS_TOKEN_KEY, d as BOARD_ACCESS_GRANT_KEY, C as CompanySuggestion, e as CustomStorage, M as MarketSuggestion, R as REFRESH_TOKEN_KEY, f as SearchSuggestType, g as SuggestResult, h as SuggestionItem, T as TermSuggestion } from './search-CqPIHkv8.js';
+import { c as CompaniesListQuery, d as CompanyListEnvelope, e as CompaniesSearchBody, f as CompanyJobsListQuery, g as CompanySimilarQuery, h as CompanyMarketsListQuery, i as SalaryDetailQuery } from './board-CF66EdYi.js';
+export { B as BoardFormBuiltinField, j as BoardFormField, k as BoardFormLayout, l as BoardFormLockReason, m as BoardJobFormField, n as BoardProfileFormField, o as BoardRoleSignIn, p as BoardSignInSsoConnection, a as CompanyCategorySalary, q as CompanyMarket, r as CompanyMarketRef, b as CompanySalary, s as CompanySalarySummary, C as CustomFieldDefinition, t as CustomFieldOption, u as CustomFieldType, L as LocationSalaryDetail, v as LocationSkillsIndex, w as LocationTitlesIndex, P as PublicBoard, x as PublicBoardAds, y as PublicBoardAnalytics, z as PublicBoardFeatures, A as PublicBoardJobForm, D as PublicBoardSignIn, E as PublicCompany, F as PublicCompanyDetail, G as PublicCompanyMembership, H as SalaryCompany, I as SalaryLocation, J as SalarySkill, K as SalaryTitle, M as SkillLocationSalary, N as SkillLocationsIndex, S as SkillSalaryDetail, O as TitleLocationSalary, Q as TitleLocationsIndex, T as TitleSalaryDetail } from './board-CF66EdYi.js';
+export { B as BoardSeo } from './seo-C-NQ0T9w.js';
+import { R as RemoteOption, E as EmploymentType, S as Seniority, a as CustomFieldFilter, O as ObjectReferenceFilter, L as ListEnvelope, b as JobCollectionChoiceQuery, c as JobsListQuery, d as JobCardListEnvelope, e as JobsSearchBody, f as JobCardSearchEnvelope, g as JobsSimilarQuery, h as SearchEnvelope } from './jobs-BbtjrUo2.js';
+export { i as CustomFieldValue, C as CustomFieldValues, j as CustomFilterValue, k as EducationRequirement, l as JobCatalogPagination, m as JobCollectionChoiceList, n as JobCollectionFieldDefinition, o as JobCompany, J as JobSort, p as OfficeLocation, q as OffsetPagination, P as PublicJob, r as PublicJobCard, s as RelatedSearch, t as RemotePermit, u as RemoteTimezone, v as ResolvedJobCollectionField, w as StorefrontPagination } from './jobs-BbtjrUo2.js';
+import { a as BlogPostsListQuery, b as BlogSimilarQuery, c as BlogSearchBody } from './blog-CcLmN5Tw.js';
+export { B as BlogAuthorEmbed, d as BlogTagEmbed, e as PublicBlogAdjacentPosts, f as PublicBlogAuthor, g as PublicBlogPost, P as PublicBlogPostSummary, h as PublicBlogTag } from './blog-CcLmN5Tw.js';
 
 /**
  * Well-known `<domain>_<snake_reason>` codes the Board API sends, grouped by
@@ -20,7 +20,7 @@ export { B as BlogAuthorEmbed, d as BlogTagEmbed, e as PublicBlogAdjacentPosts,
  * `unknown_error` is SDK-synthesized when a response carries no parseable
  * envelope.
  */
-declare const BOARD_API_ERROR_CODES: readonly ["internal_error", "validation_bad_request", "validation_payload_too_large", "rate_limited", "rate_limit_unavailable", "search_unavailable", "search_filter_unavailable", "too_many_filter_values", "pagination_invalid_cursor", "pagination_offset_too_large", "auth_unauthenticated", "auth_forbidden", "plan_upgrade_required", "unknown_error", "boards_not_found", "board_page_not_found", "board_auth_account_not_found", "board_auth_email_taken", "board_auth_invalid_credentials", "board_auth_invalid_token", "board_auth_registration_disabled", "board_auth_token_expired", "invalid_current_password", "no_password", "same_email", "email_taken", "invalid_token", "board_password_required", "board_password_invalid", "jobs_not_found", "jobs_invalid_filter", "categories_not_found", "skills_not_found", "places_not_found", "locations_invalid_id", "locations_unavailable", "companies_not_found", "company_markets_not_found", "company_salary_not_found", "company_category_salary_not_found", "salaries_title_not_found", "salaries_skill_not_found", "salaries_location_not_found", "salaries_title_location_not_found", "salaries_skill_location_not_found", "blog_post_not_found", "blog_author_not_found", "blog_tag_not_found", "talent_not_found", "talent_directory_not_found", "talent_directory_restricted", "job_recommendations_not_found", "recommended_talent_not_found", "job_alert_not_found", "job_alerts_disabled", "candidate_alert_limit_reached", "candidate_alert_not_found", "candidate_entry_not_found", "candidate_handle_taken", "candidate_job_not_found", "candidate_notification_preference_paused", "candidate_profile_required", "resume_invalid_file", "resume_upload_forbidden", "applications_external_apply_only", "applications_country_not_allowed", "applications_guest_not_allowed", "applications_job_not_found", "applications_not_found", "applications_resume_invalid_file", "applications_unprocessable", "messaging_application_not_found", "messaging_application_not_linked", "messaging_blocked", "messaging_cannot_block_self", "messaging_cold_rule", "messaging_conversation_not_found", "messaging_disabled", "messaging_edit_window_expired", "messaging_message_deleted", "messaging_message_not_found", "messaging_not_author", "messaging_not_participant", "messaging_not_permitted", "messaging_not_recipient", "messaging_rate_limited", "messaging_recipient_not_found", "messaging_recipient_not_open", "messaging_unsend_window_expired", "employer_applicant_not_found", "employer_ats_unprocessable", "employer_checkout_failed", "employer_company_exists", "employer_free_email_website", "employer_company_name_taken", "employer_company_not_found", "employer_job_not_found", "employer_job_slug_taken", "employer_jobs_quota_exceeded", "membership_required", "employer_not_member", "employer_payment_required", "employer_pipeline_stage_not_found", "employer_member_not_found", "employer_invite_not_found", "not_company_admin", "not_company_member", "company_deletion_disabled", "last_admin", "already_member", "already_invited", "invalid_email", "invite_email_mismatch", "candidate_role", "job_not_published", "talent_list_not_found", "sourced_candidate_not_found", "sourced_convert_unavailable", "candidate_paywall_access_required", "paywall_already_active", "paywall_disabled", "paywall_invalid_checkout_session", "paywall_no_candidate_profile", "paywall_no_recurring_subscription", "paywall_offer_not_found", "talent_access_unavailable", "company_required", "already_on_plan", "talent_access_required", "messaging_talent_access_required", "stripe_not_connected", "membership_plan_not_found", "membership_seat_taken", "job_posting_logo_lookup_unavailable", "job_posting_logo_not_found", "job_posting_rejected"];
+declare const BOARD_API_ERROR_CODES: readonly ["internal_error", "validation_bad_request", "validation_payload_too_large", "rate_limited", "rate_limit_unavailable", "search_unavailable", "search_filter_unavailable", "too_many_filter_values", "pagination_invalid_cursor", "pagination_offset_too_large", "auth_unauthenticated", "auth_forbidden", "plan_upgrade_required", "unknown_error", "boards_not_found", "board_page_not_found", "board_auth_account_not_found", "board_auth_email_taken", "board_auth_invalid_credentials", "board_auth_invalid_token", "board_auth_registration_disabled", "board_auth_token_expired", "board_development_origin_not_allowed_for_email", "board_development_origin_not_registered", "board_development_origin_requires_publishable_key", "sso_required", "board_auth_method_unavailable", "board_auth_sso_connection_not_found", "board_auth_sso_role_unavailable", "board_auth_sso_provider_unavailable", "board_auth_sso_browser_mismatch", "board_auth_sso_not_provisioned", "board_auth_sso_identity_linked_elsewhere", "invalid_current_password", "no_password", "same_email", "email_taken", "invalid_token", "board_password_required", "board_password_invalid", "jobs_not_found", "jobs_invalid_filter", "categories_not_found", "skills_not_found", "places_not_found", "locations_invalid_id", "locations_unavailable", "companies_not_found", "company_markets_not_found", "company_salary_not_found", "company_category_salary_not_found", "salaries_title_not_found", "salaries_skill_not_found", "salaries_location_not_found", "salaries_title_location_not_found", "salaries_skill_location_not_found", "blog_post_not_found", "blog_author_not_found", "blog_tag_not_found", "feeds_not_found", "feed_not_ready", "talent_not_found", "talent_directory_not_found", "talent_directory_restricted", "job_recommendations_not_found", "recommended_talent_not_found", "job_alert_not_found", "job_alerts_disabled", "candidate_alert_limit_reached", "candidate_alert_not_found", "candidate_entry_not_found", "candidate_handle_taken", "candidate_job_not_found", "candidate_notification_preference_paused", "candidate_profile_required", "resume_invalid_file", "resume_upload_forbidden", "applications_external_apply_only", "applications_country_not_allowed", "applications_guest_not_allowed", "applications_job_not_found", "applications_not_found", "applications_resume_invalid_file", "applications_unprocessable", "messaging_application_not_found", "messaging_application_not_linked", "messaging_blocked", "messaging_cannot_block_self", "messaging_cold_rule", "messaging_conversation_not_found", "messaging_disabled", "messaging_edit_window_expired", "messaging_message_deleted", "messaging_message_not_found", "messaging_not_author", "messaging_not_participant", "messaging_not_permitted", "messaging_not_recipient", "messaging_rate_limited", "messaging_recipient_not_found", "messaging_recipient_not_open", "messaging_unsend_window_expired", "employer_applicant_not_found", "employer_ats_unprocessable", "employer_checkout_failed", "employer_company_exists", "employer_free_email_website", "employer_company_name_taken", "employer_company_not_found", "employer_job_not_found", "employer_job_slug_taken", "employer_jobs_quota_exceeded", "membership_required", "employer_not_member", "employer_payment_required", "employer_pipeline_stage_not_found", "employer_member_not_found", "employer_invite_not_found", "not_company_admin", "not_company_member", "company_deletion_disabled", "last_admin", "already_member", "already_invited", "invalid_email", "invite_email_mismatch", "candidate_role", "job_not_published", "talent_list_not_found", "sourced_candidate_not_found", "sourced_convert_unavailable", "candidate_paywall_access_required", "paywall_already_active", "paywall_disabled", "paywall_invalid_checkout_session", "paywall_no_candidate_profile", "paywall_no_recurring_subscription", "paywall_offer_not_found", "talent_access_unavailable", "company_required", "already_on_plan", "talent_access_required", "messaging_talent_access_required", "stripe_not_connected", "membership_plan_not_found", "membership_seat_taken", "job_posting_logo_lookup_unavailable", "job_posting_logo_not_found", "job_posting_rejected"];
 /**
  * The known code set plus open string — new codes ship additively within v1,
  * so exhaustive narrowing is intentionally impossible.
@@ -87,6 +87,58 @@ declare function isConflict(e: unknown): e is BoardApiError;
  * (or omit website), not retry the same domain.
  */
 declare function isFreeEmailWebsiteError(e: unknown): e is BoardApiError;
+/** Built-in sign-in method keys, as used in `signIn.<role>.methods`. */
+type BuiltInSignInMethod = 'password' | 'magicLink' | 'google' | 'linkedin';
+/**
+ * What a role can sign in with instead, from
+ * `board_auth_method_unavailable` → `details.availableMethods`.
+ */
+interface AvailableSignInMethods {
+    /**
+     * Built-in methods switched on for the role. Kept open: new method keys
+     * may ship, so ignore any you do not render.
+     */
+    methods: Array<BuiltInSignInMethod | (string & {})>;
+    /** SSO connections switched on for the role. */
+    ssoConnectionIds: string[];
+}
+/** @deprecated Use isSignInMethodUnavailable and details.availableMethods. */
+declare function isSsoRequired(e: unknown): e is BoardApiError & {
+    details: {
+        connectionIds: string[];
+    };
+};
+/**
+ * The sign-in method is switched off for the role being signed into
+ * (`board_auth_method_unavailable`, 403). Password, magic link, Google,
+ * LinkedIn and SSO can each be switched off per role, so any sign-in call
+ * may be refused. `details.availableMethods` lists what the role can use
+ * instead: built-in `methods` and `ssoConnectionIds` — match the ids
+ * against `signIn.<role>.ssoConnections` from `board.context()`. Both lists
+ * are empty when the role has no way to sign in.
+ *
+ * @example
+ * try {
+ *   await board.auth.login({ email, password });
+ * } catch (e) {
+ *   if (isSignInMethodUnavailable(e)) {
+ *     const { methods, ssoConnectionIds } = e.details.availableMethods;
+ *     showSignInOptions(methods, ssoConnectionIds);
+ *   } else throw e;
+ * }
+ */
+declare function isSignInMethodUnavailable(e: unknown): e is BoardApiError & {
+    details: {
+        availableMethods: AvailableSignInMethods;
+    };
+};
+/**
+ * An SSO link-proof link was opened in a different browser than the one
+ * that started the sign-in (`board_auth_sso_browser_mismatch`, 403). Ask
+ * the user to open the link on the device where they started signing in;
+ * the emailed link stays usable there.
+ */
+declare function isSsoBrowserMismatch(e: unknown): e is BoardApiError;
 
 /** The minimal page shape every v1 list/search envelope satisfies. */
 interface PageShape {
@@ -150,7 +202,7 @@ declare function paginate<Q extends Record<string, unknown>, P extends PageShape
  * constant because the package is platform-neutral and cannot read
  * package.json at runtime.
  */
-declare const SDK_VERSION = "4.30.0";
+declare const SDK_VERSION = "4.31.1";
 
 type SavedJob = Schemas['SavedJob'];
 type SavedJobsListQuery = {
@@ -605,6 +657,126 @@ declare function resolveApplyDecision(state: ApplyDecisionState): ApplyAction;
  */
 declare function resolveApplyAction(state: Omit<ApplyDecisionState, 'registrationWall' | 'allowGuestApply'>): ApplyAction;
 
+/**
+ * Helpers for the pages a headless board serves around an OAuth or SSO
+ * sign-in: `/auth/oauth-complete` (where the provider round trip lands) and
+ * `/auth/sign-in?error=…` (where it lands on failure). Pure and
+ * framework-neutral; nothing here performs a request or navigates.
+ */
+type SignInRole = 'candidate' | 'employer';
+/**
+ * `error=` codes a sign-in redirect can land on `/auth/sign-in` with. Google
+ * and LinkedIn use the `oauth_*` codes, SSO connections the `sso_*` ones;
+ * `role_disabled` comes from either. `method_unavailable` means the method
+ * is switched off for the user's role: offer the methods listed in
+ * `signIn.<role>` from `board.context()` instead. Kept open like
+ * `BoardApiErrorCode`: new codes may ship, so render a generic message for
+ * anything unlisted.
+ */
+declare const SIGN_IN_REDIRECT_ERROR_CODES: readonly ["oauth_cancelled", "oauth_failed", "oauth_email_unverified", "role_disabled", "method_unavailable", "sso_required", "sso_state_invalid", "sso_cancelled", "sso_failed", "sso_connection_unavailable", "sso_not_provisioned", "sso_email_required", "sso_account_disabled", "sso_identity_linked_elsewhere", "sso_link_proof_rate_limited", "sso_development_origin_not_allowed_for_email"];
+type SignInRedirectErrorCode = (typeof SIGN_IN_REDIRECT_ERROR_CODES)[number] | (string & {});
+/**
+ * What a completion URL asks the page to do.
+ *
+ * - `token`: exchange it with `board.auth.exchangeOAuth({ token })`.
+ * - `link_proof_sent`: the provider did not vouch for the email of an
+ *   existing account, so a confirmation email is on its way. Keep the secret established before authorization in this browser and
+ *   tell the user to check their inbox.
+ * - `link_proof`: the user opened that email. Call
+ *   `board.auth.consumeSsoLinkProof` with `linkProof` and the stored binding.
+ * - `error`: the sign-in failed with `error` (see
+ *   `SIGN_IN_REDIRECT_ERROR_CODES`).
+ * - `invalid`: none of the above; show a generic failure.
+ *
+ * `returnTo` is always a same-origin path (`/` when absent or unsafe), so it
+ * is safe to redirect to.
+ */
+type OAuthCompletion = {
+    kind: 'token';
+    token: string;
+    /** `google`, `linkedin` or `sso`; `null` when absent. */
+    method: string | null;
+    role: SignInRole | null;
+    returnTo: string;
+    /** True when this sign-in created the account. */
+    isNewUser: boolean;
+} | {
+    kind: 'link_proof_sent';
+    linkProofBinding: string;
+    role: SignInRole | null;
+    returnTo: string;
+} | {
+    kind: 'link_proof';
+    linkProof: string;
+    role: SignInRole | null;
+    returnTo: string;
+} | {
+    kind: 'error';
+    error: SignInRedirectErrorCode;
+    returnTo: string;
+} | {
+    kind: 'invalid';
+    returnTo: string;
+};
+/**
+ * Read the query of an `/auth/oauth-complete` (or `/auth/sign-in?error=`)
+ * request into one discriminated result. Accepts `URLSearchParams`, a full
+ * URL or query string, or a plain record (framework search-param objects).
+ *
+ * @example
+ * const completion = parseOAuthCompletion(new URL(request.url).searchParams);
+ * switch (completion.kind) {
+ *   case 'token':
+ *     await board.auth.exchangeOAuth({ token: completion.token });
+ *     return redirect(completion.returnTo);
+ *   case 'link_proof_sent':
+ *     // Keep the secret established before authorization. Never save URL bindings.
+ *     return showCheckYourEmail();
+ *   // …
+ * }
+ */
+declare function parseOAuthCompletion(input: URLSearchParams | string | Record<string, string | undefined>): OAuthCompletion;
+/**
+ * Browser-secret retention from initiation: ten minutes for authorization
+ * plus fifteen minutes for a proof email issued at callback. This does not
+ * extend the proof token's own fifteen-minute validity.
+ */
+declare const SSO_LINK_PROOF_BINDING_TTL_MS: number;
+/** The subset of Web Storage the binding store needs. */
+interface BindingStorage {
+    getItem(key: string): string | null;
+    setItem(key: string, value: string): void;
+    removeItem(key: string): void;
+}
+interface SsoLinkProofBindingStore {
+    /** Establish a random secret in this browser BEFORE requesting authorization. */
+    begin(): string;
+    /** @deprecated Completion URLs cannot install or replace the initiating browser secret. */
+    save(linkProofBinding: string): void;
+    /** The stored binding, or `null` when absent or older than 25 minutes from initiation. */
+    read(): string | null;
+    /** Forget the binding (after the proof is consumed). */
+    clear(): void;
+}
+/**
+ * Where the browser that started an SSO sign-in keeps its link-proof
+ * secret before authorization and until the user opens the confirmation email.
+ * Uses `localStorage` by default, because the email link usually opens in a
+ * new tab (which `sessionStorage` would not share). Scoped per board, expires
+ * 25 minutes after initiation to cover authorization and the later proof email.
+ * Where storage is unavailable (server rendering, blocked storage), `begin()`
+ * refuses before authorization and `read()` returns `null`. The proof token
+ * itself remains valid for fifteen minutes after it is issued at callback.
+ *
+ * @example
+ * // Before requesting authorization (the SDK does this automatically):
+ * ssoLinkProofBindingStore(boardKey).begin();
+ */
+declare function ssoLinkProofBindingStore(board: string, options?: {
+    storage?: BindingStorage;
+    now?: () => number;
+}): SsoLinkProofBindingStore;
+
 type BoardUser = Schemas['BoardUser'];
 type BoardAuthSession = Schemas['BoardAuthSession'];
 type RegisterBody = Schemas['BoardAuthRegisterBody'];
@@ -627,9 +799,45 @@ type OAuthAuthorizationQuery = {
      * role is fixed at authorize time and cannot be changed on the callback.
      */
     role?: 'candidate' | 'employer';
+    /**
+     * Complete sign-in on one of the board's development origins instead of
+     * its production origin, for example `window.location.origin` while you
+     * run the frontend on `http://localhost:5173`. The origin must be
+     * registered for the board (Settings → SDK → Development origins, or the
+     * Operator API); otherwise the call fails with
+     * `board_development_origin_not_registered`. Only accepted when the client
+     * identifies the board with a publishable key (`pk_...`); otherwise the
+     * call fails with `board_development_origin_requires_publishable_key`.
+     */
+    developmentOrigin?: string;
 };
 type OAuthAuthorizationUrl = Schemas['BoardAuthOAuthAuthorizationUrl'];
 type OAuthExchangeBody = Schemas['BoardAuthOAuthExchangeBody'];
+type SsoAuthorizationQuery = {
+    /** SHA-256 hex of a secret already established in the initiating browser. The browser SDK supplies this automatically; server callers must retain the raw secret securely for completion. */
+    browserBindingHash?: string;
+    /** Board-relative path to land on after sign-in; defaults to `/`. */
+    returnTo?: string;
+    /**
+     * Role being signed into; defaults to `candidate`. Also the role profile
+     * created when the sign-in makes a NEW user.
+     */
+    role?: 'candidate' | 'employer';
+    /**
+     * Complete sign-in on one of the board's development origins instead of
+     * its production origin, for example `window.location.origin` while you
+     * run the frontend on `http://localhost:5173`. Same rules as
+     * `OAuthAuthorizationQuery.developmentOrigin`: the origin must be
+     * registered for the board, and the client must identify the board with a
+     * publishable key (`pk_...`). When an existing account has to confirm its
+     * inbox first, the confirmation email is an email link, so it can only
+     * target a localhost development origin; elsewhere that sign-in lands on
+     * `/auth/sign-in?error=sso_development_origin_not_allowed_for_email`.
+     */
+    developmentOrigin?: string;
+};
+type SsoAuthorizationUrl = Schemas['BoardAuthSsoAuthorizationUrl'];
+type SsoLinkProofBody = Schemas['BoardAuthSsoLinkProofBody'];
 
 type EmbedJobsQuery = {
     /** Free-text search query, up to 200 characters. */
@@ -1027,6 +1235,10 @@ declare function createBoardClient(options: CreateBoardClientOptions): {
         posting: {
             requiresMembership: boolean;
         };
+        signIn: {
+            candidate: components["schemas"]["BoardRoleSignIn"];
+            employer: components["schemas"]["BoardRoleSignIn"];
+        };
         analytics: {
             ga4MeasurementId: string | null;
             gtmId: string | null;
@@ -1746,6 +1958,19 @@ declare function createBoardClient(options: CreateBoardClientOptions): {
             boardUser: components["schemas"]["BoardUser"];
             isNewUser?: boolean;
         }>;
+        getSsoAuthorizationUrl(connectionId: string, query?: SsoAuthorizationQuery, options?: FetchOptions): Promise<{
+            object: "sso_authorization_url";
+            connectionId: string;
+            authorizeUrl: string;
+        }>;
+        consumeSsoLinkProof(body: SsoLinkProofBody, options?: FetchOptions): Promise<{
+            object: "board_auth_session";
+            accessToken: string;
+            refreshToken: string;
+            expiresAt: number;
+            boardUser: components["schemas"]["BoardUser"];
+            isNewUser?: boolean;
+        }>;
     };
     me: {
         retrieve(query?: Record<string, never>, options?: FetchOptions): Promise<{
@@ -3791,4 +4016,4 @@ declare function createBoardClient(options: CreateBoardClientOptions): {
 };
 type BoardSdk = ReturnType<typeof createBoardClient>;
 
-export { type AcceptCompanyMemberInviteBody, type AccessCheckoutBody, type AccessCheckoutSession, type AccessCheckoutSessionState, type AccessGrant, type AccessPortalBody, type AccessPortalSession, type AddApplicantNoteBody, type AddSourcedCandidateBody, type Alert, type AlertBody, type Application, type ApplicationsListQuery, type ApplyAction, type ApplyApprovalPlan, type ApplyApprovalReceipt, type ApplyBody, type ApplyDecisionState, type ApplyIntent, type AudienceAttribution, Awaitable, BOARD_API_ERROR_CODES, type Block, type BlockStatus, type BlockUserBody, type BlockedUser, BlogPostsListQuery, BlogSearchBody, BlogSimilarQuery, type BoardAccessGrant, BoardApiError, type BoardApiErrorCode, type BoardAuthSession, BoardClient, BoardRequest, type BoardSdk, type BoardSitemapBucketSummary, type BoardSitemapIndex, type BoardUser, type BulkMoveApplicantsBody, type BulkRejectApplicantsBody, type CandidateAvatar, type CandidateEducation, type CandidateExperience, type CandidateLanguage, type CandidateProfile, type CandidateSkill, type ClaimableCompany, CompaniesListQuery, CompaniesSearchBody, type CompanyBillingPortalBody, type CompanyBillingPortalSession, CompanyJobsListQuery, CompanyListEnvelope, CompanyMarketsListQuery, type CompanyMember, type CompanyMemberInvite, type CompanyMemberInviteAcceptance, type CompanyMembership, CompanySimilarQuery, type ConfirmEmailChangeBody, type ConfirmWorkEmailBody, type ConsumeMagicLinkBody, type Conversation, type ConversationArchive, type ConversationDetail, type ConversationRef, type ConversationsListQuery, type ConvertSourcedCandidateBody, type CreateAlertBody, type CreateApplyApprovalBody, type CreateApplyIntentBody, type CreateBoardClientOptions, type CreateCompanyBody, type CreateCompanyMemberInviteBody, type CreateEducationBody, type CreateEmployerJobBody, type CreateExperienceBody, type CreateJobPostingInput, type CreatePipelineStageBody, type CreateTalentListBody, CustomFieldFilter, type EditMessageBody, type EmbedJobsQuery, type EmployerApplicant, type EmployerBillingOption, type EmployerCheckout, type EmployerCheckoutBody, type EmployerCompany, type EmployerCompanySearchQuery, type EmployerJob, type EmployerJobStat, type EmployerJobStatsPoint, type EmployerJobStatsTimeseriesQuery, type EmployerJobSummary, type EmployerJobsListQuery, type EmployerPipeline, type EmployerPipelineQuery, type EmployerPipelineStage, type EmployerProfileStats, type EmployerProfileViewsPoint, type EmployerProfileViewsTimeseriesQuery, EmploymentType, FetchOptions, type FindExistingConversationQuery, type ForgotPasswordBody, type HandleAvailability, type JobAlertConfirmation, type JobAlertDeletePreferenceInput, type JobAlertFiltersInput, type JobAlertFrequency, type JobAlertManageQuery, type JobAlertManageResult, type JobAlertManageState, type JobAlertManageTokenInput, type JobAlertPreference, type JobAlertRemoteOption, type JobAlertResendResult, type JobAlertStoredFilters, type JobAlertSubscribeInput, type JobAlertSubscription, type JobAlertUpdatePreferenceInput, JobCardListEnvelope, JobCardSearchEnvelope, JobCollectionChoiceQuery, type JobPostingBillingOptions, type JobPostingBillingVerification, type JobPostingLogoResult, type JobPostingPlan, type JobPostingResult, JobsListQuery, JobsSearchBody, JobsSimilarQuery, ListEnvelope, type LocationResolveInput, type LocationSearchQuery, Logger, type LoginBody, type LogoutBody, type MarketingConsent, type MembershipCheckoutBody, type MembershipCheckoutSession, type MembershipCheckoutSessionState, type Message, type ModerationReport, type MoveApplicantStageBody, type NotificationPreference, type OAuthAuthorizationQuery, type OAuthAuthorizationUrl, type OAuthExchangeBody, type OAuthProvider, ObjectReferenceFilter, type Paginator, type PaywallOffer, type PaywallOfferListEnvelope, type PlacesListQuery, type Plan, type PlanListEnvelope, type PlansListQuery, type ProfileChoiceList, type ProfileChoiceQuery, type ProfileFieldEntity, type ProfileFieldValues, type ProfileObjectReferenceSelectionWrite, type ProfileObjectReferences, type PublicLocation, type PublicPlace, type PublicProfileFields, type PublicTaxonomyTerm, type ReadReceipt, type RecommendedJob, type RecommendedJobsListQuery, type RecommendedTalent, type RecommendedTalentListQuery, type RedirectResolution, type RefreshBody, type RegisterBody, RemoteOption, type RemotePermitTaxonomyEntry, type ReorderPipelineStagesBody, type ReplaceProfileObjectReferencesBody, type ReplyBody, type ReportBody, type RequestEmailChangeBody, type RequestMagicLinkBody, type ResetPasswordBody, type Resume, type ResumeUploadOptions, SDK_VERSION, SalaryDetailQuery, type SalesLedPlan, type SalesLedPlanListEnvelope, type SaveJobBody, type SavedJob, type SavedJobsListQuery, SearchEnvelope, SearchSuggestQuery, type SendWorkEmailBody, Seniority, type SitemapEntriesEnvelope, type SitemapEntriesQuery, type SitemapEntry, type SourcedCandidate, type StartAboutApplicationBody, type StartConversationBody, StorageMode, type TalentAccess, type TalentAccessCheckoutBody, type TalentAccessCheckoutSession, type TalentAccessCheckoutSessionState, type TalentAccessClaim, type TalentAccessClaimBody, type TalentAccessUpgrade, type TalentAccessUpgradeBody, type TalentCandidateAccess, type TalentDirectoryEntry, type TalentDirectoryListEnvelope, type TalentDirectoryQuery, type TalentList, type TalentListFilters, type TalentProfile, type TalentUnlock, type TalentUnlockBody, type TaxonomyGeo, type TaxonomyListQuery, type TaxonomyResolution, type ThreadMessagesQuery, type UnreadCount, type UnsubscribeBody, type UpdateApplicationFactsBody, type UpdateCandidateProfileBody, type UpdateCompanyMemberRoleBody, type UpdateEducationBody, type UpdateEmployerCompanyBody, type UpdateEmployerJobBody, type UpdateExperienceBody, type UpdateLanguagesBody, type UpdateNotificationPreferenceBody, type UpdatePasswordBody, type UpdatePipelineStageBody, type UpdateProfileFieldValuesBody, type UpdateSkillsBody, type UpdateTalentListBody, type VerifyEmailBody, createBoardClient, isBoardApiError, isBoardPasswordRequired, isColdRule, isConflict, isForbidden, isFreeEmailWebsiteError, isNotFound, isOwnMessage, isRateLimited, isSafeApplicationUrl, isUnauthorized, isValidationError, lastOwnMessageId, paginate, resolveApplyAction, resolveApplyDecision };
+export { type AcceptCompanyMemberInviteBody, type AccessCheckoutBody, type AccessCheckoutSession, type AccessCheckoutSessionState, type AccessGrant, type AccessPortalBody, type AccessPortalSession, type AddApplicantNoteBody, type AddSourcedCandidateBody, type Alert, type AlertBody, type Application, type ApplicationsListQuery, type ApplyAction, type ApplyApprovalPlan, type ApplyApprovalReceipt, type ApplyBody, type ApplyDecisionState, type ApplyIntent, type AudienceAttribution, type AvailableSignInMethods, Awaitable, BOARD_API_ERROR_CODES, type BindingStorage, type Block, type BlockStatus, type BlockUserBody, type BlockedUser, BlogPostsListQuery, BlogSearchBody, BlogSimilarQuery, type BoardAccessGrant, BoardApiError, type BoardApiErrorCode, type BoardAuthSession, BoardClient, BoardRequest, type BoardSdk, type BoardSitemapBucketSummary, type BoardSitemapIndex, type BoardUser, type BuiltInSignInMethod, type BulkMoveApplicantsBody, type BulkRejectApplicantsBody, type CandidateAvatar, type CandidateEducation, type CandidateExperience, type CandidateLanguage, type CandidateProfile, type CandidateSkill, type ClaimableCompany, CompaniesListQuery, CompaniesSearchBody, type CompanyBillingPortalBody, type CompanyBillingPortalSession, CompanyJobsListQuery, CompanyListEnvelope, CompanyMarketsListQuery, type CompanyMember, type CompanyMemberInvite, type CompanyMemberInviteAcceptance, type CompanyMembership, CompanySimilarQuery, type ConfirmEmailChangeBody, type ConfirmWorkEmailBody, type ConsumeMagicLinkBody, type Conversation, type ConversationArchive, type ConversationDetail, type ConversationRef, type ConversationsListQuery, type ConvertSourcedCandidateBody, type CreateAlertBody, type CreateApplyApprovalBody, type CreateApplyIntentBody, type CreateBoardClientOptions, type CreateCompanyBody, type CreateCompanyMemberInviteBody, type CreateEducationBody, type CreateEmployerJobBody, type CreateExperienceBody, type CreateJobPostingInput, type CreatePipelineStageBody, type CreateTalentListBody, CustomFieldFilter, type EditMessageBody, type EmbedJobsQuery, type EmployerApplicant, type EmployerBillingOption, type EmployerCheckout, type EmployerCheckoutBody, type EmployerCompany, type EmployerCompanySearchQuery, type EmployerJob, type EmployerJobStat, type EmployerJobStatsPoint, type EmployerJobStatsTimeseriesQuery, type EmployerJobSummary, type EmployerJobsListQuery, type EmployerPipeline, type EmployerPipelineQuery, type EmployerPipelineStage, type EmployerProfileStats, type EmployerProfileViewsPoint, type EmployerProfileViewsTimeseriesQuery, EmploymentType, FetchOptions, type FindExistingConversationQuery, type ForgotPasswordBody, type HandleAvailability, type JobAlertConfirmation, type JobAlertDeletePreferenceInput, type JobAlertFiltersInput, type JobAlertFrequency, type JobAlertManageQuery, type JobAlertManageResult, type JobAlertManageState, type JobAlertManageTokenInput, type JobAlertPreference, type JobAlertRemoteOption, type JobAlertResendResult, type JobAlertStoredFilters, type JobAlertSubscribeInput, type JobAlertSubscription, type JobAlertUpdatePreferenceInput, JobCardListEnvelope, JobCardSearchEnvelope, JobCollectionChoiceQuery, type JobPostingBillingOptions, type JobPostingBillingVerification, type JobPostingLogoResult, type JobPostingPlan, type JobPostingResult, JobsListQuery, JobsSearchBody, JobsSimilarQuery, ListEnvelope, type LocationResolveInput, type LocationSearchQuery, Logger, type LoginBody, type LogoutBody, type MarketingConsent, type MembershipCheckoutBody, type MembershipCheckoutSession, type MembershipCheckoutSessionState, type Message, type ModerationReport, type MoveApplicantStageBody, type NotificationPreference, type OAuthAuthorizationQuery, type OAuthAuthorizationUrl, type OAuthCompletion, type OAuthExchangeBody, type OAuthProvider, ObjectReferenceFilter, type Paginator, type PaywallOffer, type PaywallOfferListEnvelope, type PlacesListQuery, type Plan, type PlanListEnvelope, type PlansListQuery, type ProfileChoiceList, type ProfileChoiceQuery, type ProfileFieldEntity, type ProfileFieldValues, type ProfileObjectReferenceSelectionWrite, type ProfileObjectReferences, type PublicLocation, type PublicPlace, type PublicProfileFields, type PublicTaxonomyTerm, type ReadReceipt, type RecommendedJob, type RecommendedJobsListQuery, type RecommendedTalent, type RecommendedTalentListQuery, type RedirectResolution, type RefreshBody, type RegisterBody, RemoteOption, type RemotePermitTaxonomyEntry, type ReorderPipelineStagesBody, type ReplaceProfileObjectReferencesBody, type ReplyBody, type ReportBody, type RequestEmailChangeBody, type RequestMagicLinkBody, type ResetPasswordBody, type Resume, type ResumeUploadOptions, SDK_VERSION, SIGN_IN_REDIRECT_ERROR_CODES, SSO_LINK_PROOF_BINDING_TTL_MS, SalaryDetailQuery, type SalesLedPlan, type SalesLedPlanListEnvelope, type SaveJobBody, type SavedJob, type SavedJobsListQuery, SearchEnvelope, SearchSuggestQuery, type SendWorkEmailBody, Seniority, type SignInRedirectErrorCode, type SignInRole, type SitemapEntriesEnvelope, type SitemapEntriesQuery, type SitemapEntry, type SourcedCandidate, type SsoAuthorizationQuery, type SsoAuthorizationUrl, type SsoLinkProofBindingStore, type SsoLinkProofBody, type StartAboutApplicationBody, type StartConversationBody, StorageMode, type TalentAccess, type TalentAccessCheckoutBody, type TalentAccessCheckoutSession, type TalentAccessCheckoutSessionState, type TalentAccessClaim, type TalentAccessClaimBody, type TalentAccessUpgrade, type TalentAccessUpgradeBody, type TalentCandidateAccess, type TalentDirectoryEntry, type TalentDirectoryListEnvelope, type TalentDirectoryQuery, type TalentList, type TalentListFilters, type TalentProfile, type TalentUnlock, type TalentUnlockBody, type TaxonomyGeo, type TaxonomyListQuery, type TaxonomyResolution, type ThreadMessagesQuery, type UnreadCount, type UnsubscribeBody, type UpdateApplicationFactsBody, type UpdateCandidateProfileBody, type UpdateCompanyMemberRoleBody, type UpdateEducationBody, type UpdateEmployerCompanyBody, type UpdateEmployerJobBody, type UpdateExperienceBody, type UpdateLanguagesBody, type UpdateNotificationPreferenceBody, type UpdatePasswordBody, type UpdatePipelineStageBody, type UpdateProfileFieldValuesBody, type UpdateSkillsBody, type UpdateTalentListBody, type VerifyEmailBody, createBoardClient, isBoardApiError, isBoardPasswordRequired, isColdRule, isConflict, isForbidden, isFreeEmailWebsiteError, isNotFound, isOwnMessage, isRateLimited, isSafeApplicationUrl, isSignInMethodUnavailable, isSsoBrowserMismatch, isSsoRequired, isUnauthorized, isValidationError, lastOwnMessageId, paginate, parseOAuthCompletion, resolveApplyAction, resolveApplyDecision, ssoLinkProofBindingStore };