@cavuno/board 4.64.0 → 4.65.0

package/dist/index.d.ts

@@ -1,13 +1,13 @@
-import { S as Schemas, c as components } from './_spec-D1Qg_Twd.js';
-import { F as FetchOptions, S as StorageMode, B as BoardRequest, A as Awaitable, L as Logger, a as BoardClient, b as SearchSuggestQuery } from './search-DZeNdYN6.js';
-export { c as ACCESS_TOKEN_KEY, d as BOARD_ACCESS_GRANT_KEY, C as CompanySuggestion, e as CustomStorage, M as MarketSuggestion, R as REFRESH_TOKEN_KEY, f as SearchSuggestType, g as SuggestResult, h as SuggestionItem, T as TermSuggestion } from './search-DZeNdYN6.js';
-import { L as ListEnvelope, R as RemoteOption, E as EmploymentType, S as Seniority, a as JobCapability, b as CustomFieldFilter, O as ObjectReferenceFilter, c as JobCollectionChoiceQuery, d as JobsListQuery, e as JobCardListEnvelope, f as JobRetrieveQuery, g as JobsSearchBody, h as JobCardSearchEnvelope, i as JobsSimilarQuery, j as SearchEnvelope } from './jobs-D04ngjCP.js';
-export { k as CustomFieldValue, C as CustomFieldValues, l as CustomFilterValue, m as EducationRequirement, n as JobCatalogPagination, o as JobCollectionChoiceList, p as JobCollectionFieldDefinition, q as JobCompany, r as JobCustomEmploymentType, J as JobSort, s as OfficeLocation, t as OffsetPagination, P as PublicJob, u as PublicJobCard, v as RelatedSearch, w as RemotePermit, x as RemoteTimezone, y as ResolvedJobCollectionField, z as StorefrontPagination } from './jobs-D04ngjCP.js';
-import { c as CompaniesListQuery, d as CompanyListEnvelope, e as CompaniesSearchBody, f as CompanyJobsListQuery, g as CompanySimilarQuery, h as CompanyMarketsListQuery, i as SalaryDetailQuery, b as CompanySalary } from './board-BeNZLOYC.js';
-export { B as BoardCustomEmploymentType, j as BoardFormBuiltinField, k as BoardFormField, l as BoardFormLayout, m as BoardFormLockReason, n as BoardJobFormField, o as BoardProfileFormField, p as BoardRoleSignIn, q as BoardSignInSsoConnection, a as CompanyCategorySalary, r as CompanyMarket, s as CompanyMarketRef, t as CompanySalarySummary, C as CustomFieldDefinition, u as CustomFieldOption, v as CustomFieldType, L as LocationSalaryDetail, w as LocationSkillsIndex, x as LocationTitlesIndex, P as PublicBoard, y as PublicBoardAds, z as PublicBoardAnalytics, A as PublicBoardFeatures, D as PublicBoardJobForm, E as PublicBoardSignIn, F as PublicCompany, G as PublicCompanyDetail, H as PublicCompanyMembership, I as SalaryCompany, J as SalaryLocation, K as SalarySkill, M as SalaryTitle, N as SkillLocationSalary, O as SkillLocationsIndex, S as SkillSalaryDetail, Q as TitleLocationSalary, R as TitleLocationsIndex, T as TitleSalaryDetail } from './board-BeNZLOYC.js';
-export { B as BoardSeo } from './seo-DLoyZRTo.js';
-import { a as BlogPostsListQuery, b as BlogSimilarQuery, c as BlogSearchBody } from './blog-Dp2jAVVM.js';
-export { B as BlogAuthorEmbed, d as BlogTagEmbed, e as PublicBlogAdjacentPosts, f as PublicBlogAuthor, g as PublicBlogPost, P as PublicBlogPostSummary, h as PublicBlogTag } from './blog-Dp2jAVVM.js';
+import { S as Schemas, c as components } from './_spec-CIufstif.js';
+import { F as FetchOptions, S as StorageMode, B as BoardRequest, A as Awaitable, L as Logger, a as BoardClient, b as SearchSuggestQuery } from './search-B7x4qt9A.js';
+export { c as ACCESS_TOKEN_KEY, d as BOARD_ACCESS_GRANT_KEY, C as CompanySuggestion, e as CustomStorage, M as MarketSuggestion, R as REFRESH_TOKEN_KEY, f as SearchSuggestType, g as SuggestResult, h as SuggestionItem, T as TermSuggestion } from './search-B7x4qt9A.js';
+import { L as ListEnvelope, R as RemoteOption, E as EmploymentType, S as Seniority, a as JobCapability, b as CustomFieldFilter, O as ObjectReferenceFilter, c as JobCollectionChoiceQuery, d as JobsListQuery, e as JobCardListEnvelope, f as JobRetrieveQuery, g as JobsSearchBody, h as JobCardSearchEnvelope, i as JobsSimilarQuery, j as SearchEnvelope } from './jobs-DM_QMccX.js';
+export { k as CustomFieldValue, C as CustomFieldValues, l as CustomFilterValue, m as EducationRequirement, n as JobCatalogPagination, o as JobCollectionChoiceList, p as JobCollectionFieldDefinition, q as JobCompany, r as JobCustomEmploymentType, J as JobSort, s as OfficeLocation, t as OffsetPagination, P as PublicJob, u as PublicJobCard, v as RelatedSearch, w as RemotePermit, x as RemoteTimezone, y as ResolvedJobCollectionField, z as StorefrontPagination } from './jobs-DM_QMccX.js';
+import { c as CompaniesListQuery, d as CompanyListEnvelope, e as CompaniesSearchBody, f as CompanyJobsListQuery, g as CompanySimilarQuery, h as CompanyMarketsListQuery, i as SalaryDetailQuery, b as CompanySalary } from './board-iCHYuNhr.js';
+export { B as BoardCustomEmploymentType, j as BoardFormBuiltinField, k as BoardFormField, l as BoardFormLayout, m as BoardFormLockReason, n as BoardJobFormField, o as BoardProfileFormField, p as BoardRoleSignIn, q as BoardSignInSsoConnection, a as CompanyCategorySalary, r as CompanyMarket, s as CompanyMarketRef, t as CompanySalarySummary, C as CustomFieldDefinition, u as CustomFieldOption, v as CustomFieldType, L as LocationSalaryDetail, w as LocationSkillsIndex, x as LocationTitlesIndex, P as PublicBoard, y as PublicBoardAds, z as PublicBoardAnalytics, A as PublicBoardFeatures, D as PublicBoardJobForm, E as PublicBoardSignIn, F as PublicCompany, G as PublicCompanyDetail, H as PublicCompanyMembership, I as SalaryCompany, J as SalaryLocation, K as SalarySkill, M as SalaryTitle, N as SkillLocationSalary, O as SkillLocationsIndex, S as SkillSalaryDetail, Q as TitleLocationSalary, R as TitleLocationsIndex, T as TitleSalaryDetail } from './board-iCHYuNhr.js';
+export { B as BoardSeo } from './seo-C1Br7ygq.js';
+import { a as BlogPostsListQuery, b as BlogSimilarQuery, c as BlogSearchBody } from './blog-DuNJLfIh.js';
+export { B as BlogAuthorEmbed, d as BlogTagEmbed, e as PublicBlogAdjacentPosts, f as PublicBlogAuthor, g as PublicBlogPost, P as PublicBlogPostSummary, h as PublicBlogTag } from './blog-DuNJLfIh.js';
 
 /**
  * Well-known `<domain>_<snake_reason>` codes the Board API sends, grouped by
@@ -202,7 +202,7 @@ declare function paginate<Q extends Record<string, unknown>, P extends PageShape
  * constant because the package is platform-neutral and cannot read
  * package.json at runtime.
  */
-declare const SDK_VERSION = "4.64.0";
+declare const SDK_VERSION = "4.65.0";
 
 type SavedJob = Schemas['SavedJob'];
 type SavedJobsListQuery = {
@@ -1613,6 +1613,7 @@ declare function createBoardClient(options: CreateBoardClientOptions): {
             messaging: boolean;
             contactPage: boolean;
             placeSuggestions: boolean;
+            mcp: boolean;
         };
         talentAccessModel: "paid_messaging" | "paid_unlocks_and_messaging" | null;
         posting: {
@@ -3795,7 +3796,7 @@ declare function createBoardClient(options: CreateBoardClientOptions): {
                 object: "marketing_consent";
                 status: "granted" | "withdrawn";
                 source: string;
-                reason: "person_request" | "operator_request" | "account_deleted" | null;
+                reason: "person_request" | "operator_request" | "account_deleted" | "spam_report" | null;
                 grantedAt: string | null;
                 withdrawnAt: string | null;
                 revision: number;
@@ -3805,7 +3806,7 @@ declare function createBoardClient(options: CreateBoardClientOptions): {
                 object: "marketing_consent";
                 status: "granted" | "withdrawn";
                 source: string;
-                reason: "person_request" | "operator_request" | "account_deleted" | null;
+                reason: "person_request" | "operator_request" | "account_deleted" | "spam_report" | null;
                 grantedAt: string | null;
                 withdrawnAt: string | null;
                 revision: number;
@@ -3815,7 +3816,7 @@ declare function createBoardClient(options: CreateBoardClientOptions): {
                 object: "marketing_consent";
                 status: "granted" | "withdrawn";
                 source: string;
-                reason: "person_request" | "operator_request" | "account_deleted" | null;
+                reason: "person_request" | "operator_request" | "account_deleted" | "spam_report" | null;
                 grantedAt: string | null;
                 withdrawnAt: string | null;
                 revision: number;

package/dist/index.js

@@ -441,7 +441,7 @@ async function clearSession(storage) {
 }
 
 // src/version.ts
-var SDK_VERSION = "4.64.0";
+var SDK_VERSION = "4.65.0";
 
 // src/client.ts
 function isRawBody(body) {

package/dist/index.mjs

@@ -1,3 +1,6 @@
+import {
+  DEFAULT_CAVUNO_API_URL
+} from "./chunk-RDHHRDKN.mjs";
 import {
   ACCESS_TOKEN_KEY,
   BOARD_ACCESS_GRANT_KEY,
@@ -46,7 +49,7 @@ function toSearchParams(query) {
 }
 
 // src/version.ts
-var SDK_VERSION = "4.64.0";
+var SDK_VERSION = "4.65.0";
 
 // src/client.ts
 function isRawBody(body) {
@@ -150,9 +153,6 @@ var BoardClient = class {
   }
 };
 
-// src/constants.ts
-var DEFAULT_CAVUNO_API_URL = "https://api.cavuno.com";
-
 // src/sso.ts
 var SIGN_IN_REDIRECT_ERROR_CODES = [
   "oauth_cancelled",

package/dist/{jobs-CClqlUld.d.mts → jobs-CbXbDBij.d.mts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-D1Qg_Twd.mjs';
+import { S as Schemas } from './_spec-CIufstif.mjs';
 
 /**
  * Optional pagination metadata returned by Board API list operations.

package/dist/{jobs-D04ngjCP.d.ts → jobs-DM_QMccX.d.ts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-D1Qg_Twd.js';
+import { S as Schemas } from './_spec-CIufstif.js';
 
 /**
  * Optional pagination metadata returned by Board API list operations.

package/dist/mcp.d.mts

@@ -0,0 +1,52 @@
+/**
+ * The board's public MCP server on a self-hosted board's own host.
+ *
+ * Mount the handler at `/mcp`, `/mcp/*` and `/.well-known/ai-catalog.json`.
+ * It forwards to the Board API's `POST /v1/boards/{board}/mcp` and its
+ * `GET /v1/boards/{board}/mcp/docs`, `/mcp/server-card` and `/mcp/ai-catalog`,
+ * the same endpoints Cavuno-hosted boards answer from, so the tools, limits,
+ * setup page and discovery documents stay identical everywhere:
+ *
+ * - `POST /mcp` is the stateless Streamable HTTP transport.
+ * - A browser opening `/mcp` is sent to `/mcp/docs`; any other method is 405.
+ * - `GET|HEAD /mcp/docs` is the HTML setup page listed in AI directories.
+ * - `GET|HEAD /mcp/server-card` is the MCP Server Card: the server's name,
+ *   version and URL, for an assistant to read before it connects.
+ * - `GET|HEAD /.well-known/ai-catalog.json` is the AI Catalog listing that
+ *   card, so an assistant can find the server from the board's domain alone.
+ *
+ * Only the MCP transport headers are forwarded: no cookies and no
+ * authorization, because every tool is an anonymous read. The Board API's
+ * per-visitor limit sees this server's address, so it applies to all of the
+ * board's MCP traffic together.
+ *
+ * Framework-portable: standard Request in, standard Response out.
+ */
+interface CreateMcpHandlerConfig {
+    /**
+     * The board's publishable key (`pk_…`). Job and company links in tool
+     * results then point at the key's own origin, this board.
+     */
+    board: string;
+    /** Board API origin. Defaults to `https://api.cavuno.com`. */
+    baseUrl?: string;
+}
+/**
+ * Create the `(request) => Response` handler for `/mcp`, `/mcp/docs`,
+ * `/mcp/server-card` and `/.well-known/ai-catalog.json`.
+ *
+ * @example
+ * // Next.js App Router: app/mcp/[[...path]]/route.ts and
+ * // app/.well-known/ai-catalog.json/route.ts, both exporting:
+ * import { createMcpHandler } from '@cavuno/board/mcp';
+ *
+ * const handler = createMcpHandler({
+ *   board: process.env.NEXT_PUBLIC_CAVUNO_BOARD_KEY!,
+ * });
+ * export const GET = handler;
+ * export const HEAD = handler;
+ * export const POST = handler;
+ */
+declare function createMcpHandler(config: CreateMcpHandlerConfig): (request: Request) => Promise<Response>;
+
+export { type CreateMcpHandlerConfig, createMcpHandler };

package/dist/mcp.d.ts

@@ -0,0 +1,52 @@
+/**
+ * The board's public MCP server on a self-hosted board's own host.
+ *
+ * Mount the handler at `/mcp`, `/mcp/*` and `/.well-known/ai-catalog.json`.
+ * It forwards to the Board API's `POST /v1/boards/{board}/mcp` and its
+ * `GET /v1/boards/{board}/mcp/docs`, `/mcp/server-card` and `/mcp/ai-catalog`,
+ * the same endpoints Cavuno-hosted boards answer from, so the tools, limits,
+ * setup page and discovery documents stay identical everywhere:
+ *
+ * - `POST /mcp` is the stateless Streamable HTTP transport.
+ * - A browser opening `/mcp` is sent to `/mcp/docs`; any other method is 405.
+ * - `GET|HEAD /mcp/docs` is the HTML setup page listed in AI directories.
+ * - `GET|HEAD /mcp/server-card` is the MCP Server Card: the server's name,
+ *   version and URL, for an assistant to read before it connects.
+ * - `GET|HEAD /.well-known/ai-catalog.json` is the AI Catalog listing that
+ *   card, so an assistant can find the server from the board's domain alone.
+ *
+ * Only the MCP transport headers are forwarded: no cookies and no
+ * authorization, because every tool is an anonymous read. The Board API's
+ * per-visitor limit sees this server's address, so it applies to all of the
+ * board's MCP traffic together.
+ *
+ * Framework-portable: standard Request in, standard Response out.
+ */
+interface CreateMcpHandlerConfig {
+    /**
+     * The board's publishable key (`pk_…`). Job and company links in tool
+     * results then point at the key's own origin, this board.
+     */
+    board: string;
+    /** Board API origin. Defaults to `https://api.cavuno.com`. */
+    baseUrl?: string;
+}
+/**
+ * Create the `(request) => Response` handler for `/mcp`, `/mcp/docs`,
+ * `/mcp/server-card` and `/.well-known/ai-catalog.json`.
+ *
+ * @example
+ * // Next.js App Router: app/mcp/[[...path]]/route.ts and
+ * // app/.well-known/ai-catalog.json/route.ts, both exporting:
+ * import { createMcpHandler } from '@cavuno/board/mcp';
+ *
+ * const handler = createMcpHandler({
+ *   board: process.env.NEXT_PUBLIC_CAVUNO_BOARD_KEY!,
+ * });
+ * export const GET = handler;
+ * export const HEAD = handler;
+ * export const POST = handler;
+ */
+declare function createMcpHandler(config: CreateMcpHandlerConfig): (request: Request) => Promise<Response>;
+
+export { type CreateMcpHandlerConfig, createMcpHandler };

package/dist/mcp.js

@@ -0,0 +1,150 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/mcp/index.ts
+var mcp_exports = {};
+__export(mcp_exports, {
+  createMcpHandler: () => createMcpHandler
+});
+module.exports = __toCommonJS(mcp_exports);
+
+// src/constants.ts
+var DEFAULT_CAVUNO_API_URL = "https://api.cavuno.com";
+
+// src/mcp/create-mcp-handler.ts
+var DOCUMENT_UPSTREAMS = [
+  ["/mcp/docs", "mcp/docs"],
+  ["/mcp/server-card", "mcp/server-card"],
+  ["/.well-known/ai-catalog.json", "mcp/ai-catalog"]
+];
+var MAX_BODY_BYTES = 64 * 1024;
+var UPSTREAM_TIMEOUT_MS = 3e4;
+var FORWARDED_HEADERS = [
+  "content-type",
+  "accept",
+  "mcp-protocol-version",
+  "user-agent"
+];
+function jsonRpcError(status, message, headers = {}) {
+  return new Response(
+    JSON.stringify({
+      jsonrpc: "2.0",
+      id: null,
+      error: { code: -32e3, message }
+    }),
+    {
+      status,
+      headers: { "content-type": "application/json", ...headers }
+    }
+  );
+}
+async function readCappedBody(request) {
+  if (Number(request.headers.get("content-length")) > MAX_BODY_BYTES) {
+    return null;
+  }
+  if (!request.body) return new Uint8Array();
+  const reader = request.body.getReader();
+  const chunks = [];
+  let size = 0;
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    size += value.byteLength;
+    if (size > MAX_BODY_BYTES) {
+      await reader.cancel();
+      return null;
+    }
+    chunks.push(value);
+  }
+  const body = new Uint8Array(size);
+  let offset = 0;
+  for (const chunk of chunks) {
+    body.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  return body;
+}
+function createMcpHandler(config) {
+  const base = `${(config.baseUrl ?? DEFAULT_CAVUNO_API_URL).replace(/\/+$/, "")}/v1/boards/${encodeURIComponent(config.board)}`;
+  return async function mcpHandler(request) {
+    const { pathname } = new URL(request.url);
+    const path = pathname.replace(/\/+$/, "");
+    const method = request.method;
+    let upstream;
+    const document = DOCUMENT_UPSTREAMS.find(
+      ([suffix]) => path.endsWith(suffix)
+    );
+    if (document) {
+      if (method !== "GET" && method !== "HEAD") {
+        return new Response(null, {
+          status: 405,
+          headers: { allow: "GET, HEAD" }
+        });
+      }
+      upstream = `${base}/${document[1]}`;
+    } else if (!path.endsWith("/mcp")) {
+      return new Response(null, { status: 404 });
+    } else {
+      const accept = request.headers.get("accept") ?? "";
+      if (method === "GET" && accept.includes("text/html") && !accept.includes("text/event-stream")) {
+        return new Response(null, {
+          status: 302,
+          headers: { location: `${path}/docs`, "cache-control": "no-store" }
+        });
+      }
+      if (method !== "POST") {
+        return jsonRpcError(405, "Method not allowed.", { allow: "POST" });
+      }
+      upstream = `${base}/mcp`;
+    }
+    let body;
+    if (method === "POST") {
+      const read = await readCappedBody(request);
+      if (!read) return jsonRpcError(413, "Request body too large.");
+      body = read;
+    }
+    const headers = new Headers();
+    for (const name of FORWARDED_HEADERS) {
+      const value = request.headers.get(name);
+      if (value) headers.set(name, value);
+    }
+    let response;
+    try {
+      response = await fetch(upstream, {
+        method,
+        headers,
+        body,
+        redirect: "manual",
+        signal: AbortSignal.timeout(UPSTREAM_TIMEOUT_MS)
+      });
+    } catch {
+      return jsonRpcError(503, "The board MCP server is unavailable.", {
+        "retry-after": "30"
+      });
+    }
+    const outHeaders = new Headers(response.headers);
+    outHeaders.delete("set-cookie");
+    outHeaders.delete("content-encoding");
+    outHeaders.delete("content-length");
+    return new Response(response.body, {
+      status: response.status,
+      headers: outHeaders
+    });
+  };
+}

package/dist/mcp.mjs

@@ -0,0 +1,128 @@
+import {
+  DEFAULT_CAVUNO_API_URL
+} from "./chunk-RDHHRDKN.mjs";
+
+// src/mcp/create-mcp-handler.ts
+var DOCUMENT_UPSTREAMS = [
+  ["/mcp/docs", "mcp/docs"],
+  ["/mcp/server-card", "mcp/server-card"],
+  ["/.well-known/ai-catalog.json", "mcp/ai-catalog"]
+];
+var MAX_BODY_BYTES = 64 * 1024;
+var UPSTREAM_TIMEOUT_MS = 3e4;
+var FORWARDED_HEADERS = [
+  "content-type",
+  "accept",
+  "mcp-protocol-version",
+  "user-agent"
+];
+function jsonRpcError(status, message, headers = {}) {
+  return new Response(
+    JSON.stringify({
+      jsonrpc: "2.0",
+      id: null,
+      error: { code: -32e3, message }
+    }),
+    {
+      status,
+      headers: { "content-type": "application/json", ...headers }
+    }
+  );
+}
+async function readCappedBody(request) {
+  if (Number(request.headers.get("content-length")) > MAX_BODY_BYTES) {
+    return null;
+  }
+  if (!request.body) return new Uint8Array();
+  const reader = request.body.getReader();
+  const chunks = [];
+  let size = 0;
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    size += value.byteLength;
+    if (size > MAX_BODY_BYTES) {
+      await reader.cancel();
+      return null;
+    }
+    chunks.push(value);
+  }
+  const body = new Uint8Array(size);
+  let offset = 0;
+  for (const chunk of chunks) {
+    body.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  return body;
+}
+function createMcpHandler(config) {
+  const base = `${(config.baseUrl ?? DEFAULT_CAVUNO_API_URL).replace(/\/+$/, "")}/v1/boards/${encodeURIComponent(config.board)}`;
+  return async function mcpHandler(request) {
+    const { pathname } = new URL(request.url);
+    const path = pathname.replace(/\/+$/, "");
+    const method = request.method;
+    let upstream;
+    const document = DOCUMENT_UPSTREAMS.find(
+      ([suffix]) => path.endsWith(suffix)
+    );
+    if (document) {
+      if (method !== "GET" && method !== "HEAD") {
+        return new Response(null, {
+          status: 405,
+          headers: { allow: "GET, HEAD" }
+        });
+      }
+      upstream = `${base}/${document[1]}`;
+    } else if (!path.endsWith("/mcp")) {
+      return new Response(null, { status: 404 });
+    } else {
+      const accept = request.headers.get("accept") ?? "";
+      if (method === "GET" && accept.includes("text/html") && !accept.includes("text/event-stream")) {
+        return new Response(null, {
+          status: 302,
+          headers: { location: `${path}/docs`, "cache-control": "no-store" }
+        });
+      }
+      if (method !== "POST") {
+        return jsonRpcError(405, "Method not allowed.", { allow: "POST" });
+      }
+      upstream = `${base}/mcp`;
+    }
+    let body;
+    if (method === "POST") {
+      const read = await readCappedBody(request);
+      if (!read) return jsonRpcError(413, "Request body too large.");
+      body = read;
+    }
+    const headers = new Headers();
+    for (const name of FORWARDED_HEADERS) {
+      const value = request.headers.get(name);
+      if (value) headers.set(name, value);
+    }
+    let response;
+    try {
+      response = await fetch(upstream, {
+        method,
+        headers,
+        body,
+        redirect: "manual",
+        signal: AbortSignal.timeout(UPSTREAM_TIMEOUT_MS)
+      });
+    } catch {
+      return jsonRpcError(503, "The board MCP server is unavailable.", {
+        "retry-after": "30"
+      });
+    }
+    const outHeaders = new Headers(response.headers);
+    outHeaders.delete("set-cookie");
+    outHeaders.delete("content-encoding");
+    outHeaders.delete("content-length");
+    return new Response(response.body, {
+      status: response.status,
+      headers: outHeaders
+    });
+  };
+}
+export {
+  createMcpHandler
+};

package/dist/{search-DZeNdYN6.d.ts → search-B7x4qt9A.d.ts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-D1Qg_Twd.js';
+import { S as Schemas } from './_spec-CIufstif.js';
 
 type Awaitable<T> = T | Promise<T>;
 /**

package/dist/{search-BtrwcLkc.d.mts → search-PrqcJMft.d.mts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-D1Qg_Twd.mjs';
+import { S as Schemas } from './_spec-CIufstif.mjs';
 
 type Awaitable<T> = T | Promise<T>;
 /**

package/dist/{seo-DLoyZRTo.d.ts → seo-C1Br7ygq.d.ts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-D1Qg_Twd.js';
+import { S as Schemas } from './_spec-CIufstif.js';
 
 /**
  * The public SEO-infra payload (`board.seo()`) — platform infrastructure a

package/dist/seo-files.d.mts

@@ -1,5 +1,5 @@
-import { B as BoardSeo } from './seo-LfpgbdnO.mjs';
-import './_spec-D1Qg_Twd.mjs';
+import { B as BoardSeo } from './seo-ohehUCzN.mjs';
+import './_spec-CIufstif.mjs';
 
 /**
  * `@cavuno/board/seo-files` — platform-owned crawler/identity file bodies

package/dist/seo-files.d.ts

@@ -1,5 +1,5 @@
-import { B as BoardSeo } from './seo-DLoyZRTo.js';
-import './_spec-D1Qg_Twd.js';
+import { B as BoardSeo } from './seo-C1Br7ygq.js';
+import './_spec-CIufstif.js';
 
 /**
  * `@cavuno/board/seo-files` — platform-owned crawler/identity file bodies

package/dist/{seo-LfpgbdnO.d.mts → seo-ohehUCzN.d.mts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-D1Qg_Twd.mjs';
+import { S as Schemas } from './_spec-CIufstif.mjs';
 
 /**
  * The public SEO-infra payload (`board.seo()`) — platform infrastructure a

package/dist/seo.d.mts

@@ -1,9 +1,9 @@
-import { P as PublicBlogPostSummary, B as BlogAuthorEmbed } from './blog-e0YbZBjg.mjs';
-import { e as JsonLdObject } from './breadcrumbs-C5WjB8jm.mjs';
-export { A as ALL_COUNTRY_CODES, B as BreadcrumbItemInput, g as FaqItem, J as JobBreadcrumb, h as JsonLdBoard, N as NumberNotation, i as SENIORITY_ORDER, j as SalaryFaqEntry, k as SalaryJsonLdOptions, l as SalaryOccupationListOptions, b as buildJobBreadcrumbs, m as buildSalaryFaq, o as companyCategorySalaryJsonLd, p as companySalaryJsonLd, q as createBreadcrumbJsonLd, r as createJobPostingJsonLd, s as crossAxisSalaryJsonLd, t as faqJsonLd, c as formatSalaryStat, d as formatSalaryStatRange, u as itemListJsonLd, v as locationSalaryJsonLd, n as normalizeWebsiteUrl, w as skillSalaryJsonLd, x as sortBySeniority, y as titleSalaryJsonLd } from './breadcrumbs-C5WjB8jm.mjs';
-import './_spec-D1Qg_Twd.mjs';
-import './board-Cc3wbTKI.mjs';
-import './jobs-CClqlUld.mjs';
+import { P as PublicBlogPostSummary, B as BlogAuthorEmbed } from './blog-teDJ9KaO.mjs';
+import { e as JsonLdObject } from './breadcrumbs-Bt3oNIAx.mjs';
+export { A as ALL_COUNTRY_CODES, B as BreadcrumbItemInput, g as FaqItem, J as JobBreadcrumb, h as JsonLdBoard, N as NumberNotation, i as SENIORITY_ORDER, j as SalaryFaqEntry, k as SalaryJsonLdOptions, l as SalaryOccupationListOptions, b as buildJobBreadcrumbs, m as buildSalaryFaq, o as companyCategorySalaryJsonLd, p as companySalaryJsonLd, q as createBreadcrumbJsonLd, r as createJobPostingJsonLd, s as crossAxisSalaryJsonLd, t as faqJsonLd, c as formatSalaryStat, d as formatSalaryStatRange, u as itemListJsonLd, v as locationSalaryJsonLd, n as normalizeWebsiteUrl, w as skillSalaryJsonLd, x as sortBySeniority, y as titleSalaryJsonLd } from './breadcrumbs-Bt3oNIAx.mjs';
+import './_spec-CIufstif.mjs';
+import './board-DZNCHGgl.mjs';
+import './jobs-CbXbDBij.mjs';
 
 /**
  * Blog structured data on the `@cavuno/board` wire types, transcribed from
@@ -28,13 +28,24 @@ type ArticleJsonLdPost = Pick<PublicBlogPostSummary, 'title' | 'customExcerpt' |
  * first, then `ogImageUrl` — pass your page's OG image URL (hosted passes
  * its generated `/blog/:slug/og` card; OG generation itself is app-owned
  * per ).
+ *
+ * Pass `authorProfileUrl` (the first author's profile page URL) so the
+ * `author` is the same `Person` (`@id` + `url`) that
+ * `createAuthorProfileJsonLd` declares on that page. Without it the author
+ * carries only a name and their website, and nothing links the post to the
+ * profile.
  */
-declare function createBlogArticleJsonLd({ post, boardName, permalink, ogImageUrl, }: {
+declare function createBlogArticleJsonLd({ post, boardName, permalink, ogImageUrl, authorProfileUrl, }: {
     post: ArticleJsonLdPost;
     boardName: string;
     permalink: string;
     /** Fallback image when the post has no cover, e.g. your generated OG card URL. */
     ogImageUrl?: string | null;
+    /**
+     * Absolute canonical URL of the first author's profile page: the
+     * `canonical` you pass to `createAuthorProfileJsonLd` on that page.
+     */
+    authorProfileUrl?: string | null;
 }): JsonLdObject;
 /**
  * `ProfilePage` for a blog author page — the hosted shape: a `Person` main
@@ -55,6 +66,10 @@ declare function createAuthorProfileJsonLd({ author, canonical, description, ori
     origin: string | null;
     /** The author's recent posts (newest first) — the builder keeps the first 5. */
     posts: Pick<PublicBlogPostSummary, 'title' | 'slug' | 'publishedAt'>[];
+    /**
+     * The author's total published post count: the posts list `count` for
+     * `authorSlug`, not the length of one page.
+     */
     totalPosts: number;
 }): JsonLdObject | null;
 

package/dist/seo.d.ts

@@ -1,9 +1,9 @@
-import { P as PublicBlogPostSummary, B as BlogAuthorEmbed } from './blog-Dp2jAVVM.js';
-import { e as JsonLdObject } from './breadcrumbs-BOFeIYEX.js';
-export { A as ALL_COUNTRY_CODES, B as BreadcrumbItemInput, g as FaqItem, J as JobBreadcrumb, h as JsonLdBoard, N as NumberNotation, i as SENIORITY_ORDER, j as SalaryFaqEntry, k as SalaryJsonLdOptions, l as SalaryOccupationListOptions, b as buildJobBreadcrumbs, m as buildSalaryFaq, o as companyCategorySalaryJsonLd, p as companySalaryJsonLd, q as createBreadcrumbJsonLd, r as createJobPostingJsonLd, s as crossAxisSalaryJsonLd, t as faqJsonLd, c as formatSalaryStat, d as formatSalaryStatRange, u as itemListJsonLd, v as locationSalaryJsonLd, n as normalizeWebsiteUrl, w as skillSalaryJsonLd, x as sortBySeniority, y as titleSalaryJsonLd } from './breadcrumbs-BOFeIYEX.js';
-import './_spec-D1Qg_Twd.js';
-import './board-BeNZLOYC.js';
-import './jobs-D04ngjCP.js';
+import { P as PublicBlogPostSummary, B as BlogAuthorEmbed } from './blog-DuNJLfIh.js';
+import { e as JsonLdObject } from './breadcrumbs-DYGo0yB9.js';
+export { A as ALL_COUNTRY_CODES, B as BreadcrumbItemInput, g as FaqItem, J as JobBreadcrumb, h as JsonLdBoard, N as NumberNotation, i as SENIORITY_ORDER, j as SalaryFaqEntry, k as SalaryJsonLdOptions, l as SalaryOccupationListOptions, b as buildJobBreadcrumbs, m as buildSalaryFaq, o as companyCategorySalaryJsonLd, p as companySalaryJsonLd, q as createBreadcrumbJsonLd, r as createJobPostingJsonLd, s as crossAxisSalaryJsonLd, t as faqJsonLd, c as formatSalaryStat, d as formatSalaryStatRange, u as itemListJsonLd, v as locationSalaryJsonLd, n as normalizeWebsiteUrl, w as skillSalaryJsonLd, x as sortBySeniority, y as titleSalaryJsonLd } from './breadcrumbs-DYGo0yB9.js';
+import './_spec-CIufstif.js';
+import './board-iCHYuNhr.js';
+import './jobs-DM_QMccX.js';
 
 /**
  * Blog structured data on the `@cavuno/board` wire types, transcribed from
@@ -28,13 +28,24 @@ type ArticleJsonLdPost = Pick<PublicBlogPostSummary, 'title' | 'customExcerpt' |
  * first, then `ogImageUrl` — pass your page's OG image URL (hosted passes
  * its generated `/blog/:slug/og` card; OG generation itself is app-owned
  * per ).
+ *
+ * Pass `authorProfileUrl` (the first author's profile page URL) so the
+ * `author` is the same `Person` (`@id` + `url`) that
+ * `createAuthorProfileJsonLd` declares on that page. Without it the author
+ * carries only a name and their website, and nothing links the post to the
+ * profile.
  */
-declare function createBlogArticleJsonLd({ post, boardName, permalink, ogImageUrl, }: {
+declare function createBlogArticleJsonLd({ post, boardName, permalink, ogImageUrl, authorProfileUrl, }: {
     post: ArticleJsonLdPost;
     boardName: string;
     permalink: string;
     /** Fallback image when the post has no cover, e.g. your generated OG card URL. */
     ogImageUrl?: string | null;
+    /**
+     * Absolute canonical URL of the first author's profile page: the
+     * `canonical` you pass to `createAuthorProfileJsonLd` on that page.
+     */
+    authorProfileUrl?: string | null;
 }): JsonLdObject;
 /**
  * `ProfilePage` for a blog author page — the hosted shape: a `Person` main
@@ -55,6 +66,10 @@ declare function createAuthorProfileJsonLd({ author, canonical, description, ori
     origin: string | null;
     /** The author's recent posts (newest first) — the builder keeps the first 5. */
     posts: Pick<PublicBlogPostSummary, 'title' | 'slug' | 'publishedAt'>[];
+    /**
+     * The author's total published post count: the posts list `count` for
+     * `authorSlug`, not the length of one page.
+     */
     totalPosts: number;
 }): JsonLdObject | null;