@cavuno/board 4.4.1 → 4.6.0

package/CHANGELOG.md

@@ -3,6 +3,37 @@
 This changelog records changes that affect Board API compatibility, exported
 types, runtime behavior, or supported integration patterns.
 
+## 4.6.0 — 2026-08-22
+
+- **`board.me.recommendedJobs.list`**: personalized jobs for the signed-in
+  candidate, best match first. Each item wraps the same slim `job_card` the
+  jobs list returns. The response never includes scores, weights, or ranker
+  identity. Empty list means there is no usable profile signal yet — drive a
+  resume-upload CTA from `board.me.profile` / `board.me.resume`. Exported
+  types: `RecommendedJob`, `RecommendedJobsListQuery`. Documented in the
+  account skill and [How to show job matches](https://cavuno.com/docs/sdk/cookbook/recommended-jobs).
+
+## 4.5.0 — 2026-08-21
+
+- **Board-user account self-service**: signed-in board users manage their own
+  account over the API. New `board.me` verbs and `/v1/boards/{identifier}/me/*`
+  endpoints: `updatePassword`, `requestEmailChange` / `confirmEmailChange`
+  (verify-then-switch), and account deletion. The `board_user` resource now
+  exposes `hasPassword` so headless frontends can decide between change-password
+  and set-password flows.
+- **Company team management**: `board.me.companies` gains members and invites —
+  list members, change a member's role (`admin` / `member`), remove a member,
+  create / list / revoke email invites (7-day links), accept an invite, and
+  `leave(slug)` (`DELETE .../me/companies/{slug}/membership`). A company always
+  keeps at least one admin: the API answers `409 last_admin` when an action
+  would strand it.
+- **Analytics**: apply-clicks and job-visitors reporting can group by
+  first-touch channel, and apply-click rows carry `jobSlug`.
+- **Company blocklist**: endpoints for blocking a company from automated
+  sourcing so imports and aggregation cannot reintroduce it.
+- **Fix**: salary formatting falls back cleanly when the runtime lacks
+  `Intl.NumberFormat.formatRange`.
+
 ## 4.4.1 — 2026-08-10
 
 - **SDK installation documentation**: The npm and GitHub README now presents

package/dist/{_spec-COlkrizX.d.mts → _spec-Dm-1AieO.d.mts}

@@ -1,5 +1,8 @@
 interface components {
     schemas: {
+        AcceptCompanyMemberInviteBody: {
+            token: string;
+        };
         AccessCheckoutBody: {
             /**
              * @description The offer tier to purchase (from `GET /paywall/offers/enabled`).
@@ -262,6 +265,8 @@ interface components {
             email: string;
             displayName: string | null;
             emailVerified: boolean;
+            /** @description Whether the account has a password credential. False for OAuth/magic-link-only accounts; frontends use it to offer change-password vs set-password (the set flow is POST /auth/forgot-password). */
+            hasPassword: boolean;
         };
         BulkMoveApplicantsBody: {
             applicationIds: string[];
@@ -404,6 +409,34 @@ interface components {
             /** @description Source slug for the market. Use it as the `:market` segment of the market-scoped company browse. */
             slug: string;
         };
+        CompanyMember: {
+            id: string;
+            /** @enum {string} */
+            object: "company_member";
+            boardUserId: string;
+            displayName: string | null;
+            email: string;
+            /** @enum {string} */
+            role: "admin" | "member";
+            approvedBy: string | null;
+            /** Format: date-time */
+            createdAt: string;
+        };
+        CompanyMemberInvite: {
+            id: string;
+            /** @enum {string} */
+            object: "company_member_invite";
+            email: string;
+            /** Format: date-time */
+            createdAt: string;
+            /** Format: date-time */
+            expiresAt: string;
+        };
+        CompanyMemberInviteAcceptance: {
+            /** @enum {string} */
+            object: "company_member_invite_acceptance";
+            companySlug: string;
+        };
         CompanyMembership: {
             id: string;
             /** @enum {string} */
@@ -558,6 +591,9 @@ interface components {
             /** @description Live published-job count for this company on the board. */
             jobCount: number;
         };
+        ConfirmEmailChangeBody: {
+            token: string;
+        };
         ConfirmWorkEmailBody: {
             token: string;
         };
@@ -618,6 +654,10 @@ interface components {
             /** @description URL-friendly slug for the company. Auto-generated from `name` when omitted. */
             slug?: string;
         };
+        CreateCompanyMemberInviteBody: {
+            /** Format: email */
+            email: string;
+        };
         CreateEducationBody: {
             institutionName: string;
             institutionUrl?: string;
@@ -1973,7 +2013,7 @@ interface components {
             remoteOption: "on_site" | "hybrid" | "remote" | null;
             /** @description Display region label for remote jobs (e.g. "United States", "Worldwide"); `null` for non-remote jobs. */
             remoteLocationLabel: string | null;
-            /** @description Structured twin of `remoteLocationLabel`’s "Worldwide" case: `true` when the remote permit selection is unrestricted (explicit worldwide, or no constraint), `false` for a constrained remote job, `null` for non-remote jobs. Word it from your own catalog instead of matching the board-language label string. */
+            /** @description Structured twin of `remoteLocationLabel`’s "Worldwide" case: `true` when the job explicitly declares an unrestricted (worldwide) permit, `false` for a constrained remote job, `null` when the job declares no remote scope at all AND for non-remote jobs. A job that declares nothing is unknown, not worldwide — do not treat `null` as unrestricted. Word it from your own catalog instead of matching the board-language label string. */
             remoteWorldwide: boolean | null;
             /** @description ISO 3166-1 alpha-2 codes the remote permit selection covers (derived expansion, mirroring the job detail field of the same name). Empty for worldwide/unconstrained and non-remote jobs. */
             remoteWorkPermitCountryCodes: string[];
@@ -1982,6 +2022,8 @@ interface components {
             salaryCurrency: string | null;
             salaryTimeframe: string | null;
             isFeatured: boolean;
+            /** @description True when this listing is a Forager CPC / partner-feed ad persisted on the board. */
+            isSponsored: boolean;
             /** @description Plain-text card teaser derived from the job description (HTML stripped, first sentence / word-boundary cut). `null` when there is nothing honest to show. Always present — independent of the `?fields=+description` opt-in for the long-form HTML body. Prefer this over requesting `+description` for list/card renders. */
             summary: string | null;
             locationLabel: string | null;
@@ -2125,6 +2167,11 @@ interface components {
             /** Format: date-time */
             markedAt: string;
         };
+        RecommendedJob: {
+            /** @enum {string} */
+            object: "recommended_job";
+            job: components["schemas"]["PublicJobCard"];
+        };
         RedirectResolution: {
             /** @enum {string} */
             object: "redirect_resolution";
@@ -2154,6 +2201,10 @@ interface components {
             reason: "spam" | "harassment" | "misrepresentation" | "other";
             freeText?: string;
         };
+        RequestEmailChangeBody: {
+            /** Format: email */
+            email: string;
+        };
         Resume: {
             /** @enum {string} */
             object: "resume";
@@ -2730,6 +2781,10 @@ interface components {
             jobSearchStatusVisibleTo?: "everyone" | "employers_only";
             openToRelocate?: boolean;
         };
+        UpdateCompanyMemberRoleBody: {
+            /** @enum {string} */
+            role: "admin" | "member";
+        };
         UpdateEducationBody: {
             institutionName?: string;
             institutionUrl?: string;
@@ -2775,6 +2830,11 @@ interface components {
             channel: "messageEmails" | "applicationEmails";
             subscribed: boolean;
         };
+        UpdatePasswordBody: {
+            currentPassword: string;
+            /** @description Minimum 8 characters. */
+            newPassword: string;
+        };
         UpdatePipelineStageBody: {
             label?: string;
             hidden?: boolean;

package/dist/{_spec-COlkrizX.d.ts → _spec-Dm-1AieO.d.ts}

@@ -1,5 +1,8 @@
 interface components {
     schemas: {
+        AcceptCompanyMemberInviteBody: {
+            token: string;
+        };
         AccessCheckoutBody: {
             /**
              * @description The offer tier to purchase (from `GET /paywall/offers/enabled`).
@@ -262,6 +265,8 @@ interface components {
             email: string;
             displayName: string | null;
             emailVerified: boolean;
+            /** @description Whether the account has a password credential. False for OAuth/magic-link-only accounts; frontends use it to offer change-password vs set-password (the set flow is POST /auth/forgot-password). */
+            hasPassword: boolean;
         };
         BulkMoveApplicantsBody: {
             applicationIds: string[];
@@ -404,6 +409,34 @@ interface components {
             /** @description Source slug for the market. Use it as the `:market` segment of the market-scoped company browse. */
             slug: string;
         };
+        CompanyMember: {
+            id: string;
+            /** @enum {string} */
+            object: "company_member";
+            boardUserId: string;
+            displayName: string | null;
+            email: string;
+            /** @enum {string} */
+            role: "admin" | "member";
+            approvedBy: string | null;
+            /** Format: date-time */
+            createdAt: string;
+        };
+        CompanyMemberInvite: {
+            id: string;
+            /** @enum {string} */
+            object: "company_member_invite";
+            email: string;
+            /** Format: date-time */
+            createdAt: string;
+            /** Format: date-time */
+            expiresAt: string;
+        };
+        CompanyMemberInviteAcceptance: {
+            /** @enum {string} */
+            object: "company_member_invite_acceptance";
+            companySlug: string;
+        };
         CompanyMembership: {
             id: string;
             /** @enum {string} */
@@ -558,6 +591,9 @@ interface components {
             /** @description Live published-job count for this company on the board. */
             jobCount: number;
         };
+        ConfirmEmailChangeBody: {
+            token: string;
+        };
         ConfirmWorkEmailBody: {
             token: string;
         };
@@ -618,6 +654,10 @@ interface components {
             /** @description URL-friendly slug for the company. Auto-generated from `name` when omitted. */
             slug?: string;
         };
+        CreateCompanyMemberInviteBody: {
+            /** Format: email */
+            email: string;
+        };
         CreateEducationBody: {
             institutionName: string;
             institutionUrl?: string;
@@ -1973,7 +2013,7 @@ interface components {
             remoteOption: "on_site" | "hybrid" | "remote" | null;
             /** @description Display region label for remote jobs (e.g. "United States", "Worldwide"); `null` for non-remote jobs. */
             remoteLocationLabel: string | null;
-            /** @description Structured twin of `remoteLocationLabel`’s "Worldwide" case: `true` when the remote permit selection is unrestricted (explicit worldwide, or no constraint), `false` for a constrained remote job, `null` for non-remote jobs. Word it from your own catalog instead of matching the board-language label string. */
+            /** @description Structured twin of `remoteLocationLabel`’s "Worldwide" case: `true` when the job explicitly declares an unrestricted (worldwide) permit, `false` for a constrained remote job, `null` when the job declares no remote scope at all AND for non-remote jobs. A job that declares nothing is unknown, not worldwide — do not treat `null` as unrestricted. Word it from your own catalog instead of matching the board-language label string. */
             remoteWorldwide: boolean | null;
             /** @description ISO 3166-1 alpha-2 codes the remote permit selection covers (derived expansion, mirroring the job detail field of the same name). Empty for worldwide/unconstrained and non-remote jobs. */
             remoteWorkPermitCountryCodes: string[];
@@ -1982,6 +2022,8 @@ interface components {
             salaryCurrency: string | null;
             salaryTimeframe: string | null;
             isFeatured: boolean;
+            /** @description True when this listing is a Forager CPC / partner-feed ad persisted on the board. */
+            isSponsored: boolean;
             /** @description Plain-text card teaser derived from the job description (HTML stripped, first sentence / word-boundary cut). `null` when there is nothing honest to show. Always present — independent of the `?fields=+description` opt-in for the long-form HTML body. Prefer this over requesting `+description` for list/card renders. */
             summary: string | null;
             locationLabel: string | null;
@@ -2125,6 +2167,11 @@ interface components {
             /** Format: date-time */
             markedAt: string;
         };
+        RecommendedJob: {
+            /** @enum {string} */
+            object: "recommended_job";
+            job: components["schemas"]["PublicJobCard"];
+        };
         RedirectResolution: {
             /** @enum {string} */
             object: "redirect_resolution";
@@ -2154,6 +2201,10 @@ interface components {
             reason: "spam" | "harassment" | "misrepresentation" | "other";
             freeText?: string;
         };
+        RequestEmailChangeBody: {
+            /** Format: email */
+            email: string;
+        };
         Resume: {
             /** @enum {string} */
             object: "resume";
@@ -2730,6 +2781,10 @@ interface components {
             jobSearchStatusVisibleTo?: "everyone" | "employers_only";
             openToRelocate?: boolean;
         };
+        UpdateCompanyMemberRoleBody: {
+            /** @enum {string} */
+            role: "admin" | "member";
+        };
         UpdateEducationBody: {
             institutionName?: string;
             institutionUrl?: string;
@@ -2775,6 +2830,11 @@ interface components {
             channel: "messageEmails" | "applicationEmails";
             subscribed: boolean;
         };
+        UpdatePasswordBody: {
+            currentPassword: string;
+            /** @description Minimum 8 characters. */
+            newPassword: string;
+        };
         UpdatePipelineStageBody: {
             label?: string;
             hidden?: boolean;

package/dist/{blog-CgA_ljHa.d.ts → blog-BvyEW4bf.d.ts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-COlkrizX.js';
+import { S as Schemas } from './_spec-Dm-1AieO.js';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{blog-DO8Yn21_.d.mts → blog-C5g0Tt8w.d.mts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-COlkrizX.mjs';
+import { S as Schemas } from './_spec-Dm-1AieO.mjs';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{board-D51C3gB5.d.ts → board-CW3qMKdu.d.ts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-COlkrizX.js';
-import { L as ListEnvelope, m as RelatedSearch } from './jobs-DOF3QXdq.js';
+import { S as Schemas } from './_spec-Dm-1AieO.js';
+import { L as ListEnvelope, m as RelatedSearch } from './jobs-f-n4_rrz.js';
 
 type PublicCompany = Schemas['CompanyPublic'];
 /** A market (sector) a company operates in — name + its source slug. */

package/dist/{board-JgFR-2UW.d.mts → board-CemD1yEl.d.mts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-COlkrizX.mjs';
-import { L as ListEnvelope, m as RelatedSearch } from './jobs-C1Mxty1n.mjs';
+import { S as Schemas } from './_spec-Dm-1AieO.mjs';
+import { L as ListEnvelope, m as RelatedSearch } from './jobs-B0phTsdB.mjs';
 
 type PublicCompany = Schemas['CompanyPublic'];
 /** A market (sector) a company operates in — name + its source slug. */

package/dist/{breadcrumbs-_QzN4nEk.d.ts → breadcrumbs-BRHiWWSf.d.ts}

@@ -1,5 +1,5 @@
-import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-D51C3gB5.js';
-import { P as PublicJob } from './jobs-DOF3QXdq.js';
+import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-CW3qMKdu.js';
+import { P as PublicJob } from './jobs-f-n4_rrz.js';
 
 /**
  * Wire enum for `salaryTimeframe`. Defined here (not re-exported from any

package/dist/{breadcrumbs-zAN2biAq.d.mts → breadcrumbs-Bgmklae3.d.mts}

@@ -1,5 +1,5 @@
-import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-JgFR-2UW.mjs';
-import { P as PublicJob } from './jobs-C1Mxty1n.mjs';
+import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-CemD1yEl.mjs';
+import { P as PublicJob } from './jobs-B0phTsdB.mjs';
 
 /**
  * Wire enum for `salaryTimeframe`. Defined here (not re-exported from any