@cavuno/board 4.59.1 → 4.61.0

package/dist/index.mjs

@@ -46,7 +46,7 @@ function toSearchParams(query) {
 }
 
 // src/version.ts
-var SDK_VERSION = "4.59.1";
+var SDK_VERSION = "4.61.0";
 
 // src/client.ts
 function isRawBody(body) {
@@ -414,6 +414,22 @@ function authNamespace(client, board = "") {
         body
       });
     },
+    /**
+     * Confirm a profile item's email-domain check with the token from the
+     * emailed link. No session required: the single-use token is the
+     * authorization. Returns the item, now verified. Any rejected token is a
+     * 401 `BoardApiError`; start the check again to recover.
+     *
+     * @example
+     * const item = await board.auth.verifyItemEmail({ token });
+     */
+    verifyItemEmail(body, options) {
+      return client.fetch("/auth/verify-item-email", {
+        ...options,
+        method: "POST",
+        body
+      });
+    },
     /**
      * Verify the signed-in board user's email with the 6-digit code from the
      * verification email (requires the bearer). Resolves void (204); an
@@ -945,7 +961,11 @@ function jobAlertsNamespace(client) {
         query
       });
     },
-    /** Deactivate a subscription via the HMAC manage token. */
+    /**
+     * Deactivate a subscription via the HMAC manage token. Spread
+     * `parseJobAlertUnsubscribeParams(url)` into the input to record which
+     * digest the subscriber unsubscribed from.
+     */
     unsubscribe(input, options) {
       return client.fetch("/job-alerts/unsubscribe", {
         ...options,
@@ -953,6 +973,19 @@ function jobAlertsNamespace(client) {
         body: input
       });
     },
+    /**
+     * Record a visitor opening a job from a digest email. Call it once on a
+     * job page load whose URL carries the digest params
+     * (`parseJobAlertClickParams(url)` returns them). Resolves with a uniform
+     * `accepted` receipt; the click is recorded after the response.
+     */
+    recordClick(input, options) {
+      return client.fetch("/job-alerts/clicks", {
+        ...options,
+        method: "POST",
+        body: input
+      });
+    },
     /** Re-activate a previously unsubscribed subscription via the manage token. */
     resubscribe(input, options) {
       return client.fetch("/job-alerts/resubscribe", {
@@ -1411,6 +1444,71 @@ function meNamespace(client) {
           { ...options, method: "PUT", body }
         );
       },
+      /**
+       * List the verification status of the items on my profile (experience,
+       * education and collection entries). Items not listed are unverified.
+       *
+       * @example
+       * const { data } = await board.me.profile.listVerifications();
+       */
+      listVerifications(options) {
+        return client.fetch(
+          "/me/profile/verifications",
+          options
+        );
+      },
+      /**
+       * Ask the board team to verify one item on my profile. It becomes
+       * `pending` until they decide.
+       *
+       * @example
+       * await board.me.profile.submitVerification({
+       *   itemKey: 'experience:abc123',
+       * });
+       */
+      submitVerification(body, options) {
+        return client.fetch("/me/profile/verifications", {
+          ...options,
+          method: "POST",
+          body
+        });
+      },
+      /**
+       * Start an email-domain check of one item on my profile: a 6-digit code
+       * and a link go to an address at the item's domain (for example a work
+       * email at a current employer's website domain). Confirm with
+       * `confirmEmailDomainVerification` or `board.auth.verifyItemEmail`.
+       * `sent` is false when an email for the item went out under a minute
+       * ago and nothing new was sent.
+       *
+       * @example
+       * const check = await board.me.profile.submitEmailDomainVerification({
+       *   itemKey: 'experience:abc123',
+       *   email: 'me@acme.com',
+       * });
+       */
+      submitEmailDomainVerification(body, options) {
+        return client.fetch(
+          "/me/profile/verifications/email-domain",
+          { ...options, method: "POST", body }
+        );
+      },
+      /**
+       * Confirm an email-domain check with the 6-digit code from the email.
+       * Returns the item, now verified; the emailed link stops working.
+       *
+       * @example
+       * await board.me.profile.confirmEmailDomainVerification({
+       *   itemKey: 'experience:abc123',
+       *   code: '123456',
+       * });
+       */
+      confirmEmailDomainVerification(body, options) {
+        return client.fetch(
+          "/me/profile/verifications/email-domain/confirm",
+          { ...options, method: "POST", body }
+        );
+      },
       /**
        * Check whether a handle is available for me on this board (my own
        * current handle counts as available). Advisory — `update` re-checks.
@@ -1585,6 +1683,20 @@ function meNamespace(client) {
           { ...options, method: "PUT", body }
         );
       },
+      /** List the verification status of the items on one of my companies. */
+      listVerifications(slug, options) {
+        return client.fetch(
+          `/me/companies/${encodeURIComponent(slug)}/verifications`,
+          options
+        );
+      },
+      /** Ask the board team to verify one item on one of my companies. */
+      submitVerification(slug, body, options) {
+        return client.fetch(
+          `/me/companies/${encodeURIComponent(slug)}/verifications`,
+          { ...options, method: "POST", body }
+        );
+      },
       /**
        * Search companies on this board to claim.
        *
@@ -4038,6 +4150,44 @@ function resolveApplyAction(state) {
   return action.kind === "sign-in" ? { kind: "sign-in" } : action;
 }
 
+// src/job-alert-links.ts
+var ID = /^[0-9A-Za-z]{16,64}$/;
+var EMAIL_ID = /^[0-9a-f]{16}$/;
+var MATCHER_VERSION = /^[a-z0-9-]{1,64}$/;
+var POSITION = /^[1-9][0-9]{0,2}$/;
+var MAX_POSITION = 100;
+function searchParamsOf(url) {
+  if (url instanceof URLSearchParams) return url;
+  if (url instanceof URL) return url.searchParams;
+  if (url.startsWith("?") || !url.includes("/") && url.includes("=")) {
+    return new URLSearchParams(url);
+  }
+  try {
+    return new URL(url, "https://board.invalid").searchParams;
+  } catch {
+    return new URLSearchParams();
+  }
+}
+function parseJobAlertClickParams(url) {
+  const params = searchParamsOf(url);
+  const alertId = params.get("ja_alert") ?? "";
+  const emailId = params.get("ja_email") ?? "";
+  const positionRaw = params.get("ja_pos") ?? "";
+  const matcherVersion = params.get("ja_mv") ?? "";
+  const position = POSITION.test(positionRaw) ? Number(positionRaw) : NaN;
+  if (!ID.test(alertId) || !EMAIL_ID.test(emailId) || !MATCHER_VERSION.test(matcherVersion) || !(position >= 1 && position <= MAX_POSITION)) {
+    return null;
+  }
+  return { alertId, emailId, position, matcherVersion };
+}
+function parseJobAlertUnsubscribeParams(url) {
+  const params = searchParamsOf(url);
+  const alertId = params.get("ja_alert") ?? "";
+  const emailId = params.get("ja_email") ?? "";
+  if (!ID.test(alertId) || !EMAIL_ID.test(emailId)) return null;
+  return { alertId, emailId };
+}
+
 // src/index.ts
 function createBoardClient(options) {
   const client = new BoardClient({
@@ -4133,6 +4283,8 @@ export {
   isValidationError,
   lastOwnMessageId,
   paginate,
+  parseJobAlertClickParams,
+  parseJobAlertUnsubscribeParams,
   parseOAuthCompletion,
   resolveApplyAction,
   resolveApplyDecision,

package/dist/{jobs-Di0L5sM1.d.ts → jobs-BwxCoTRJ.d.ts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-DZV8ME1P.js';
+import { S as Schemas } from './_spec-B6YOcfhm.js';
 
 /**
  * Optional pagination metadata returned by Board API list operations.

package/dist/{jobs-DfMyFAYs.d.mts → jobs-DrDmqiBb.d.mts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-DZV8ME1P.mjs';
+import { S as Schemas } from './_spec-B6YOcfhm.mjs';
 
 /**
  * Optional pagination metadata returned by Board API list operations.

package/dist/{search-1pxkvj_I.d.mts → search-CbGEG89W.d.mts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-DZV8ME1P.mjs';
+import { S as Schemas } from './_spec-B6YOcfhm.mjs';
 
 type Awaitable<T> = T | Promise<T>;
 /**

package/dist/{search-BPnMYVa7.d.ts → search-D4Uo2bRh.d.ts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-DZV8ME1P.js';
+import { S as Schemas } from './_spec-B6YOcfhm.js';
 
 type Awaitable<T> = T | Promise<T>;
 /**

package/dist/{seo-DFPj-7Rl.d.ts → seo-CnqvU41p.d.ts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-DZV8ME1P.js';
+import { S as Schemas } from './_spec-B6YOcfhm.js';
 
 /**
  * The public SEO-infra payload (`board.seo()`) — platform infrastructure a

package/dist/{seo-CJtLrGD_.d.mts → seo-DiJBveAA.d.mts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-DZV8ME1P.mjs';
+import { S as Schemas } from './_spec-B6YOcfhm.mjs';
 
 /**
  * The public SEO-infra payload (`board.seo()`) — platform infrastructure a

package/dist/seo-files.d.mts

@@ -1,5 +1,5 @@
-import { B as BoardSeo } from './seo-CJtLrGD_.mjs';
-import './_spec-DZV8ME1P.mjs';
+import { B as BoardSeo } from './seo-DiJBveAA.mjs';
+import './_spec-B6YOcfhm.mjs';
 
 /**
  * `@cavuno/board/seo-files` — platform-owned crawler/identity file bodies

package/dist/seo-files.d.ts

@@ -1,5 +1,5 @@
-import { B as BoardSeo } from './seo-DFPj-7Rl.js';
-import './_spec-DZV8ME1P.js';
+import { B as BoardSeo } from './seo-CnqvU41p.js';
+import './_spec-B6YOcfhm.js';
 
 /**
  * `@cavuno/board/seo-files` — platform-owned crawler/identity file bodies

package/dist/seo.d.mts

@@ -1,9 +1,9 @@
-import { P as PublicBlogPostSummary, B as BlogAuthorEmbed } from './blog-BfVuJQvO.mjs';
-import { e as JsonLdObject } from './breadcrumbs-BOM71gXT.mjs';
-export { A as ALL_COUNTRY_CODES, B as BreadcrumbItemInput, g as FaqItem, J as JobBreadcrumb, h as JsonLdBoard, N as NumberNotation, i as SENIORITY_ORDER, j as SalaryFaqEntry, k as SalaryJsonLdOptions, l as SalaryOccupationListOptions, b as buildJobBreadcrumbs, m as buildSalaryFaq, o as companyCategorySalaryJsonLd, p as companySalaryJsonLd, q as createBreadcrumbJsonLd, r as createJobPostingJsonLd, s as crossAxisSalaryJsonLd, t as faqJsonLd, c as formatSalaryStat, d as formatSalaryStatRange, u as itemListJsonLd, v as locationSalaryJsonLd, n as normalizeWebsiteUrl, w as skillSalaryJsonLd, x as sortBySeniority, y as titleSalaryJsonLd } from './breadcrumbs-BOM71gXT.mjs';
-import './_spec-DZV8ME1P.mjs';
-import './board-gmV8MoLW.mjs';
-import './jobs-DfMyFAYs.mjs';
+import { P as PublicBlogPostSummary, B as BlogAuthorEmbed } from './blog-BazgjIMl.mjs';
+import { e as JsonLdObject } from './breadcrumbs-DxlE86G-.mjs';
+export { A as ALL_COUNTRY_CODES, B as BreadcrumbItemInput, g as FaqItem, J as JobBreadcrumb, h as JsonLdBoard, N as NumberNotation, i as SENIORITY_ORDER, j as SalaryFaqEntry, k as SalaryJsonLdOptions, l as SalaryOccupationListOptions, b as buildJobBreadcrumbs, m as buildSalaryFaq, o as companyCategorySalaryJsonLd, p as companySalaryJsonLd, q as createBreadcrumbJsonLd, r as createJobPostingJsonLd, s as crossAxisSalaryJsonLd, t as faqJsonLd, c as formatSalaryStat, d as formatSalaryStatRange, u as itemListJsonLd, v as locationSalaryJsonLd, n as normalizeWebsiteUrl, w as skillSalaryJsonLd, x as sortBySeniority, y as titleSalaryJsonLd } from './breadcrumbs-DxlE86G-.mjs';
+import './_spec-B6YOcfhm.mjs';
+import './board-BwOeOQ6v.mjs';
+import './jobs-DrDmqiBb.mjs';
 
 /**
  * Blog structured data on the `@cavuno/board` wire types, transcribed from

package/dist/seo.d.ts

@@ -1,9 +1,9 @@
-import { P as PublicBlogPostSummary, B as BlogAuthorEmbed } from './blog-CLVfmknV.js';
-import { e as JsonLdObject } from './breadcrumbs-dTn6GsKo.js';
-export { A as ALL_COUNTRY_CODES, B as BreadcrumbItemInput, g as FaqItem, J as JobBreadcrumb, h as JsonLdBoard, N as NumberNotation, i as SENIORITY_ORDER, j as SalaryFaqEntry, k as SalaryJsonLdOptions, l as SalaryOccupationListOptions, b as buildJobBreadcrumbs, m as buildSalaryFaq, o as companyCategorySalaryJsonLd, p as companySalaryJsonLd, q as createBreadcrumbJsonLd, r as createJobPostingJsonLd, s as crossAxisSalaryJsonLd, t as faqJsonLd, c as formatSalaryStat, d as formatSalaryStatRange, u as itemListJsonLd, v as locationSalaryJsonLd, n as normalizeWebsiteUrl, w as skillSalaryJsonLd, x as sortBySeniority, y as titleSalaryJsonLd } from './breadcrumbs-dTn6GsKo.js';
-import './_spec-DZV8ME1P.js';
-import './board-Cl6cfS-a.js';
-import './jobs-Di0L5sM1.js';
+import { P as PublicBlogPostSummary, B as BlogAuthorEmbed } from './blog-Iz3vKyol.js';
+import { e as JsonLdObject } from './breadcrumbs-pccdTbvQ.js';
+export { A as ALL_COUNTRY_CODES, B as BreadcrumbItemInput, g as FaqItem, J as JobBreadcrumb, h as JsonLdBoard, N as NumberNotation, i as SENIORITY_ORDER, j as SalaryFaqEntry, k as SalaryJsonLdOptions, l as SalaryOccupationListOptions, b as buildJobBreadcrumbs, m as buildSalaryFaq, o as companyCategorySalaryJsonLd, p as companySalaryJsonLd, q as createBreadcrumbJsonLd, r as createJobPostingJsonLd, s as crossAxisSalaryJsonLd, t as faqJsonLd, c as formatSalaryStat, d as formatSalaryStatRange, u as itemListJsonLd, v as locationSalaryJsonLd, n as normalizeWebsiteUrl, w as skillSalaryJsonLd, x as sortBySeniority, y as titleSalaryJsonLd } from './breadcrumbs-pccdTbvQ.js';
+import './_spec-B6YOcfhm.js';
+import './board-Bd7H1jwl.js';
+import './jobs-BwxCoTRJ.js';
 
 /**
  * Blog structured data on the `@cavuno/board` wire types, transcribed from

package/dist/server.d.mts

@@ -1,10 +1,10 @@
 import { BoardSdk } from './index.mjs';
-import './_spec-DZV8ME1P.mjs';
-import './search-1pxkvj_I.mjs';
-import './jobs-DfMyFAYs.mjs';
-import './board-gmV8MoLW.mjs';
-import './seo-CJtLrGD_.mjs';
-import './blog-BfVuJQvO.mjs';
+import './_spec-B6YOcfhm.mjs';
+import './search-CbGEG89W.mjs';
+import './jobs-DrDmqiBb.mjs';
+import './board-BwOeOQ6v.mjs';
+import './seo-DiJBveAA.mjs';
+import './blog-BazgjIMl.mjs';
 
 /**
  * Session cookie codec — pure (no framework imports, no node imports) so it

package/dist/server.d.ts

@@ -1,10 +1,10 @@
 import { BoardSdk } from './index.js';
-import './_spec-DZV8ME1P.js';
-import './search-BPnMYVa7.js';
-import './jobs-Di0L5sM1.js';
-import './board-Cl6cfS-a.js';
-import './seo-DFPj-7Rl.js';
-import './blog-CLVfmknV.js';
+import './_spec-B6YOcfhm.js';
+import './search-D4Uo2bRh.js';
+import './jobs-BwxCoTRJ.js';
+import './board-Bd7H1jwl.js';
+import './seo-CnqvU41p.js';
+import './blog-Iz3vKyol.js';
 
 /**
  * Session cookie codec — pure (no framework imports, no node imports) so it

package/dist/sitemap.d.mts

@@ -1,10 +1,10 @@
 import { BoardSdk } from './index.mjs';
-import './_spec-DZV8ME1P.mjs';
-import './search-1pxkvj_I.mjs';
-import './jobs-DfMyFAYs.mjs';
-import './board-gmV8MoLW.mjs';
-import './seo-CJtLrGD_.mjs';
-import './blog-BfVuJQvO.mjs';
+import './_spec-B6YOcfhm.mjs';
+import './search-CbGEG89W.mjs';
+import './jobs-DrDmqiBb.mjs';
+import './board-BwOeOQ6v.mjs';
+import './seo-DiJBveAA.mjs';
+import './blog-BazgjIMl.mjs';
 
 /**
  * Sitemap primitives — the pure XML + bucket-filename logic behind a board

package/dist/sitemap.d.ts

@@ -1,10 +1,10 @@
 import { BoardSdk } from './index.js';
-import './_spec-DZV8ME1P.js';
-import './search-BPnMYVa7.js';
-import './jobs-Di0L5sM1.js';
-import './board-Cl6cfS-a.js';
-import './seo-DFPj-7Rl.js';
-import './blog-CLVfmknV.js';
+import './_spec-B6YOcfhm.js';
+import './search-D4Uo2bRh.js';
+import './jobs-BwxCoTRJ.js';
+import './board-Bd7H1jwl.js';
+import './seo-CnqvU41p.js';
+import './blog-Iz3vKyol.js';
 
 /**
  * Sitemap primitives — the pure XML + bucket-filename logic behind a board

package/dist/suggest.d.mts

@@ -1,5 +1,5 @@
-import { h as SuggestionItem, b as SearchSuggestQuery, F as FetchOptions, g as SuggestResult } from './search-1pxkvj_I.mjs';
-import './_spec-DZV8ME1P.mjs';
+import { h as SuggestionItem, b as SearchSuggestQuery, F as FetchOptions, g as SuggestResult } from './search-CbGEG89W.mjs';
+import './_spec-B6YOcfhm.mjs';
 
 /**
  * `@cavuno/board/suggest` — framework-agnostic headless search-suggest

package/dist/suggest.d.ts

@@ -1,5 +1,5 @@
-import { h as SuggestionItem, b as SearchSuggestQuery, F as FetchOptions, g as SuggestResult } from './search-BPnMYVa7.js';
-import './_spec-DZV8ME1P.js';
+import { h as SuggestionItem, b as SearchSuggestQuery, F as FetchOptions, g as SuggestResult } from './search-D4Uo2bRh.js';
+import './_spec-B6YOcfhm.js';
 
 /**
  * `@cavuno/board/suggest` — framework-agnostic headless search-suggest

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cavuno/board",
-  "version": "4.59.1",
+  "version": "4.61.0",
   "description": "Build custom job boards and careers pages with Cavuno’s TypeScript SDK.",
   "keywords": [
     "api-client",
@@ -233,7 +233,7 @@
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "^0.18.2",
-    "@playwright/test": "^1.59.1",
+    "@playwright/test": "^1.64.1",
     "@types/node": "24.9.1",
     "esbuild": "^0.27.7",
     "parse5": "7.3.0",

package/skills/cavuno-board-job-alerts/SKILL.md

@@ -108,6 +108,36 @@ await board.jobAlerts.updatePreference({
 });
 ```
 
+## Anonymous lane: digest engagement
+
+Digest job links open your job page with `ja_alert`, `ja_email`, `ja_pos` and `ja_mv`. Report the click from the job page's server code, once per full `GET` (not on prefetches or `HEAD`), and forward the visitor's user agent so crawlers and link scanners are left out. `recordClick` always resolves with `status: 'accepted'`; never block the page on it.
+
+Digest manage and unsubscribe links carry `ja_alert` and `ja_email`. Spread them into `unsubscribe` to attribute the unsubscribe to that email; a link without them returns `null`, which spreads to nothing.
+
+```ts snippet
+import {
+  parseJobAlertClickParams,
+  parseJobAlertUnsubscribeParams,
+} from '@cavuno/board';
+
+const click = parseJobAlertClickParams(request.url);
+if (click) {
+  await board.jobAlerts
+    .recordClick({
+      ...click,
+      jobId: job.id,
+      userAgent: request.headers.get('user-agent') ?? undefined,
+    })
+    .catch(() => undefined);
+}
+
+await board.jobAlerts.unsubscribe({
+  subscriptionId,
+  token,
+  ...parseJobAlertUnsubscribeParams(request.url),
+});
+```
+
 ## Signed-in lane
 
 Authenticated alerts use `placeIds`, while anonymous alerts use `placeSlugs`. Create and update accept the same `AlertBody`; update is a full replacement.
@@ -150,6 +180,7 @@ Removal is the signed-in lane's stop action; there is no pause state.
 - Anonymous subscribe sends `consent: true` and reveals no subscription existence.
 - The confirm UI handles all four statuses, including resend after expiry.
 - Manage reads use `subscription`; manage writes use `subscriptionId`.
+- Job pages opened from a digest call `recordClick` once, server-side, with the visitor's user agent; the unsubscribe passes the link's `ja_*` attribution.
 - Editing one field preserves every other field in both full-replace APIs.
 - UI promises only weekly delivery filtered by job function, place, and remote option.
 

package/skills/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "4.59.1",
+  "version": "4.61.0",
   "skills": [
     {
       "name": "cavuno-board-account",