@cavuno/board 4.64.0 → 4.66.0

package/CHANGELOG.md

@@ -3,6 +3,63 @@
 This changelog records changes that affect Board API compatibility, exported
 types, runtime behavior, or supported integration patterns.
 
+## 4.66.0 — 2026-11-11
+
+- Embedded checkout for paid job postings: send `checkoutUiMode:
+  'embedded_page'` to `board.jobPosting.submit` and a paid plan returns
+  `status: 'embedded_checkout'` with the `clientSecret`, publishable key and
+  connected account to mount Stripe Embedded Checkout. `hosted_page` stays
+  the default.
+- New `board.jobPosting.getCheckout(sessionId)` reads a posting's checkout
+  outcome: `awaiting_payment`, `processing`, `paid`, `payment_failed` or
+  `canceled`, with `jobStatus` and, once live, `jobUrl`. It answers
+  `GET /boards/{identifier}/job-postings/checkout/{sessionId}`, and an unknown
+  session returns `job_posting_checkout_not_found`.
+- Categories carry `totalJobCount`, the published jobs on the category or any
+  subcategory, each job once. `board.taxonomy.categories.list` accepts
+  `sort: 'totalJobCount'`, which also lists a parent with no jobs of its own.
+  A parent category is listed while any subcategory has published jobs.
+- `GET`, `PUT` and `DELETE /sdk-frontend` register the URL your own frontend
+  serves the board on, so board links, auth emails, OAuth completion and
+  checkout returns point at it.
+- `GET /contacts`, `GET /contacts/{id}`, `GET /contacts/{id}/emails` and
+  `GET /contacts/{id}/activity` read the board's contacts, their emails and
+  their activity.
+- `GET /domains/{id}/dns` checks a domain's live DNS records.
+- `GET /settings` and `PATCH /settings` take `mcpEnabled` and
+  `mcpDisabledTools`, to switch the board's MCP server off or leave out
+  individual tools.
+- `GET /taxonomies/retag` and `POST /taxonomies/retag` re-tag live jobs (or,
+  for markets, companies with live jobs) against a list the board manages,
+  once every 24 hours per list. `/taxonomies/settings` takes
+  `listDescription`, one sentence on what each list means.
+
+## 4.65.0 — 2026-11-09
+
+- Board MCP server: every board on a plan with API access serves a public,
+  read-only MCP server that AI assistants can use to search its jobs and
+  companies. The Board API answers it at `POST /boards/{identifier}/mcp`,
+  with a setup page at `GET /boards/{identifier}/mcp/docs`, an MCP Server
+  Card at `GET /boards/{identifier}/mcp/server-card` and an AI Catalog at
+  `GET /boards/{identifier}/mcp/ai-catalog`.
+- New entry point `@cavuno/board/mcp` with `createMcpHandler({ board })`,
+  which serves the board's MCP server on your own domain. Mount it at
+  `/mcp`, `/mcp/*` and `/.well-known/ai-catalog.json`; any other path
+  below `/mcp` answers 404.
+- `board.context()` returns `features.mcp`, true when the board serves its
+  MCP server, so a frontend can link to its setup page.
+- `GET /subscribers/count` returns `subscribers`, the count shown on the
+  dashboard: unique people who currently receive job alerts, job matches
+  or both.
+- A marketing suppression's `reason` can be `spam_report`.
+- `GET /boards/{identifier}/blog/posts` returns `count`, the total published
+  posts in the list across every page, for the whole blog, one tag or one
+  author. Pass it as `totalPosts` to `createAuthorProfileJsonLd`.
+- `createBlogArticleJsonLd` takes `authorProfileUrl`, the first author's
+  profile page URL. The Article `author` then carries the same `@id` and
+  `url` as the `Person` that `createAuthorProfileJsonLd` declares on that
+  page.
+
 ## 4.64.0 — 2026-11-05
 
 - Tip jar: tippers can cover the card fee. `board.tipJar.get` returns

package/dist/{_spec-D1Qg_Twd.d.mts → _spec-DBI6azWs.d.mts}

@@ -225,6 +225,26 @@ interface components {
             /** @description The board-access grant. Send it as the `X-Board-Access` header on subsequent content reads to pass the password wall. */
             token: string;
         };
+        /** @description An AI Catalog listing the board's MCP Server Card, for discovery from the board's domain alone. */
+        BoardAiCatalog: {
+            /**
+             * @description The AI Catalog format version.
+             * @enum {string}
+             */
+            specVersion: "1.0";
+            /** @description One entry: the board's MCP server. */
+            entries: {
+                /** @description The server's catalog identifier, `urn:air:<host>:mcp:jobs`, where `<host>` is the board's public host without a leading `www.`. */
+                identifier: string;
+                /**
+                 * @description The entry is an MCP Server Card.
+                 * @enum {string}
+                 */
+                type: "application/mcp-server-card+json";
+                /** @description Where to fetch the Server Card: `/mcp/server-card` on the board's own host. */
+                url: string;
+            }[];
+        };
         BoardAuthConsumeMagicLinkBody: {
             token: string;
         };
@@ -408,6 +428,40 @@ interface components {
             definition: components["schemas"]["CustomFieldDefinition"];
         };
         BoardJobFormField: components["schemas"]["BoardFormBuiltinField"] | components["schemas"]["BoardJobFormCustomField"] | components["schemas"]["BoardJobFormCollectionField"];
+        /** @description An MCP Server Card (SEP-2127): what an assistant needs to find and connect to the server before it connects. It lists no tools; `tools/list` on the server does. */
+        BoardMcpServerCard: {
+            /** @description The Server Card JSON Schema this document follows: `https://static.modelcontextprotocol.io/schemas/v1/server-card.schema.json`. */
+            $schema: string;
+            /** @description The server's name in reverse-DNS form, from the board's public host: `jobs.example.com` is `com.example.jobs/jobs`. A leading `www.` is dropped. */
+            name: string;
+            /** @description The server version, the same one `initialize` reports in `serverInfo`. */
+            version: string;
+            /** @description The board name, cut to 100 characters. */
+            title?: string;
+            /** @description What the server does, in at most 100 characters. */
+            description: string;
+            /** @description The server's setup page on the board's host, `/mcp/docs`. */
+            websiteUrl: string;
+            /** @description The board's square app icons when it has them, otherwise its logo. Absent when the board has neither. */
+            icons?: {
+                /** @description Absolute URL of the icon image. */
+                src: string;
+                /** @description The image type, when known (`image/png`). */
+                mimeType?: string;
+                /** @description The pixel sizes, when known (`512x512`). */
+                sizes?: string[];
+            }[];
+            /** @description Where to connect: one Streamable HTTP endpoint. */
+            remotes: {
+                /**
+                 * @description The transport: stateless Streamable HTTP.
+                 * @enum {string}
+                 */
+                type: "streamable-http";
+                /** @description The server URL, `/mcp` on the board's own host. */
+                url: string;
+            }[];
+        };
         BoardProfileFormCollectionField: {
             /**
              * @description discriminator enum property added by openapi-typescript
@@ -1160,6 +1214,11 @@ interface components {
                 }[];
             };
             colorMode?: string;
+            /**
+             * @description How a paid plan is checked out. `hosted_page` (the default) returns `status: checkout` with a Stripe-hosted `checkoutUrl`. `embedded_page` returns `status: embedded_checkout` with a client secret to mount Stripe Embedded Checkout on your own page; cards complete in place, and payment methods that need a redirect return to the board origin's `/post/success`.
+             * @enum {string}
+             */
+            checkoutUiMode?: "hosted_page" | "embedded_page";
         };
         CreatePipelineStageBody: {
             /** @description The job whose pipeline gains the stage. */
@@ -1992,6 +2051,24 @@ interface components {
             object: "job_posting_billing_verification";
             success: boolean;
         };
+        JobPostingCheckoutStatus: {
+            /** @enum {string} */
+            object: "job_posting_checkout_status";
+            /**
+             * @description `awaiting_payment` until Stripe confirms the payment to Cavuno, usually within seconds (poll briefly), `processing` while a delayed payment such as a bank debit clears (days), `paid` once it has, `payment_failed` when that delayed payment failed (the job stays a draft until a new checkout is paid), `canceled` when the checkout expired unpaid.
+             * @enum {string}
+             */
+            status: "awaiting_payment" | "processing" | "paid" | "payment_failed" | "canceled";
+            jobId: string;
+            jobTitle: string;
+            /**
+             * @description `published` once the job is live, `pending_approval` while the board reviews it, `unpublished` otherwise (before payment, or taken down).
+             * @enum {string}
+             */
+            jobStatus: "published" | "pending_approval" | "unpublished";
+            /** @description `published` only: the job's public URL on the board. */
+            jobUrl: string | null;
+        };
         JobPostingLogo: {
             /** @enum {string} */
             object: "job_posting_logo";
@@ -2031,6 +2108,19 @@ interface components {
             status: "checkout";
             checkoutUrl: string;
             jobId: string;
+        } | {
+            /** @enum {string} */
+            object: "job_posting_result";
+            /** @enum {string} */
+            status: "embedded_checkout";
+            /** @description The Checkout Session client secret for `stripe.initEmbeddedCheckout`. The session expires after 24 hours unless paid. */
+            clientSecret: string;
+            sessionId: string;
+            /** @description The board's connected Stripe account; pass it as `stripeAccount` to `loadStripe`. */
+            stripeAccountId: string;
+            /** @description The Stripe publishable key for `loadStripe`. */
+            publishableKey: string;
+            jobId: string;
         } | {
             /** @enum {string} */
             object: "job_posting_result";
@@ -2219,7 +2309,7 @@ interface components {
             status: "granted" | "withdrawn";
             source: string;
             /** @enum {string|null} */
-            reason: "person_request" | "operator_request" | "account_deleted" | null;
+            reason: "person_request" | "operator_request" | "account_deleted" | "spam_report" | null;
             /** Format: date-time */
             grantedAt: string | null;
             /** Format: date-time */
@@ -2826,6 +2916,8 @@ interface components {
                 contactPage: boolean;
                 /** @description Whether `GET /v1/boards/{identifier}/places/suggest` suggests any place on this board (cities, towns and suburbs beyond the board's own places). When `false` it returns an empty list: offer only the board's places (`GET /places?q=`) and do not call it. */
                 placeSuggestions: boolean;
+                /** @description Whether the board serves its public MCP server, which AI assistants connect to at `/mcp` on the board's own host, with a setup page for job seekers at `/mcp/docs`. `true` on a paid board that is not password-protected and has not turned the server off. Show a link to `/mcp/docs` (for example in the footer) only when `true`. */
+                mcp: boolean;
             };
             /**
              * @description How the operator charges employers for the candidate directory. `paid_messaging` leaves profiles fully visible and spends a credit on a first cold message; `paid_unlocks_and_messaging` also redacts directory cards and gates the opaque `/p/{id}` profile route behind an unlock credit. `null` means the operator has not chosen explicitly, in which case infer it from the published `talent_access` plans: any plan granting profile unlocks means `paid_unlocks_and_messaging`, otherwise `paid_messaging`. The paywall is inert regardless when the board publishes no talent plan. An anonymous viewer has no entitlement read to derive this from, so it ships here rather than only on `me/talent-access`.
@@ -3506,8 +3598,10 @@ interface components {
             canonicalSlug: string;
             /** @description Board-language name with source-name fallback. */
             displayName: string;
-            /** @description Live published-job count for this term on the board. Maintained as jobs publish and expire — not a tally of the current list page. */
+            /** @description Live published-job count for this term on the board. Maintained as jobs publish and expire — not a tally of the current list page. For a category, only jobs tagged with the category itself, so a parent whose jobs all sit on its children has `0`; see `totalJobCount`. */
             jobCount: number;
+            /** @description Live jobs on this category or any descendant, each job once. Present on categories; equals `jobCount` for a category with no children. Absent on skills. */
+            totalJobCount?: number;
         };
         PublicVerifyBoardPasswordBody: {
             /** @description The board password. */

package/dist/{_spec-D1Qg_Twd.d.ts → _spec-DBI6azWs.d.ts}

@@ -225,6 +225,26 @@ interface components {
             /** @description The board-access grant. Send it as the `X-Board-Access` header on subsequent content reads to pass the password wall. */
             token: string;
         };
+        /** @description An AI Catalog listing the board's MCP Server Card, for discovery from the board's domain alone. */
+        BoardAiCatalog: {
+            /**
+             * @description The AI Catalog format version.
+             * @enum {string}
+             */
+            specVersion: "1.0";
+            /** @description One entry: the board's MCP server. */
+            entries: {
+                /** @description The server's catalog identifier, `urn:air:<host>:mcp:jobs`, where `<host>` is the board's public host without a leading `www.`. */
+                identifier: string;
+                /**
+                 * @description The entry is an MCP Server Card.
+                 * @enum {string}
+                 */
+                type: "application/mcp-server-card+json";
+                /** @description Where to fetch the Server Card: `/mcp/server-card` on the board's own host. */
+                url: string;
+            }[];
+        };
         BoardAuthConsumeMagicLinkBody: {
             token: string;
         };
@@ -408,6 +428,40 @@ interface components {
             definition: components["schemas"]["CustomFieldDefinition"];
         };
         BoardJobFormField: components["schemas"]["BoardFormBuiltinField"] | components["schemas"]["BoardJobFormCustomField"] | components["schemas"]["BoardJobFormCollectionField"];
+        /** @description An MCP Server Card (SEP-2127): what an assistant needs to find and connect to the server before it connects. It lists no tools; `tools/list` on the server does. */
+        BoardMcpServerCard: {
+            /** @description The Server Card JSON Schema this document follows: `https://static.modelcontextprotocol.io/schemas/v1/server-card.schema.json`. */
+            $schema: string;
+            /** @description The server's name in reverse-DNS form, from the board's public host: `jobs.example.com` is `com.example.jobs/jobs`. A leading `www.` is dropped. */
+            name: string;
+            /** @description The server version, the same one `initialize` reports in `serverInfo`. */
+            version: string;
+            /** @description The board name, cut to 100 characters. */
+            title?: string;
+            /** @description What the server does, in at most 100 characters. */
+            description: string;
+            /** @description The server's setup page on the board's host, `/mcp/docs`. */
+            websiteUrl: string;
+            /** @description The board's square app icons when it has them, otherwise its logo. Absent when the board has neither. */
+            icons?: {
+                /** @description Absolute URL of the icon image. */
+                src: string;
+                /** @description The image type, when known (`image/png`). */
+                mimeType?: string;
+                /** @description The pixel sizes, when known (`512x512`). */
+                sizes?: string[];
+            }[];
+            /** @description Where to connect: one Streamable HTTP endpoint. */
+            remotes: {
+                /**
+                 * @description The transport: stateless Streamable HTTP.
+                 * @enum {string}
+                 */
+                type: "streamable-http";
+                /** @description The server URL, `/mcp` on the board's own host. */
+                url: string;
+            }[];
+        };
         BoardProfileFormCollectionField: {
             /**
              * @description discriminator enum property added by openapi-typescript
@@ -1160,6 +1214,11 @@ interface components {
                 }[];
             };
             colorMode?: string;
+            /**
+             * @description How a paid plan is checked out. `hosted_page` (the default) returns `status: checkout` with a Stripe-hosted `checkoutUrl`. `embedded_page` returns `status: embedded_checkout` with a client secret to mount Stripe Embedded Checkout on your own page; cards complete in place, and payment methods that need a redirect return to the board origin's `/post/success`.
+             * @enum {string}
+             */
+            checkoutUiMode?: "hosted_page" | "embedded_page";
         };
         CreatePipelineStageBody: {
             /** @description The job whose pipeline gains the stage. */
@@ -1992,6 +2051,24 @@ interface components {
             object: "job_posting_billing_verification";
             success: boolean;
         };
+        JobPostingCheckoutStatus: {
+            /** @enum {string} */
+            object: "job_posting_checkout_status";
+            /**
+             * @description `awaiting_payment` until Stripe confirms the payment to Cavuno, usually within seconds (poll briefly), `processing` while a delayed payment such as a bank debit clears (days), `paid` once it has, `payment_failed` when that delayed payment failed (the job stays a draft until a new checkout is paid), `canceled` when the checkout expired unpaid.
+             * @enum {string}
+             */
+            status: "awaiting_payment" | "processing" | "paid" | "payment_failed" | "canceled";
+            jobId: string;
+            jobTitle: string;
+            /**
+             * @description `published` once the job is live, `pending_approval` while the board reviews it, `unpublished` otherwise (before payment, or taken down).
+             * @enum {string}
+             */
+            jobStatus: "published" | "pending_approval" | "unpublished";
+            /** @description `published` only: the job's public URL on the board. */
+            jobUrl: string | null;
+        };
         JobPostingLogo: {
             /** @enum {string} */
             object: "job_posting_logo";
@@ -2031,6 +2108,19 @@ interface components {
             status: "checkout";
             checkoutUrl: string;
             jobId: string;
+        } | {
+            /** @enum {string} */
+            object: "job_posting_result";
+            /** @enum {string} */
+            status: "embedded_checkout";
+            /** @description The Checkout Session client secret for `stripe.initEmbeddedCheckout`. The session expires after 24 hours unless paid. */
+            clientSecret: string;
+            sessionId: string;
+            /** @description The board's connected Stripe account; pass it as `stripeAccount` to `loadStripe`. */
+            stripeAccountId: string;
+            /** @description The Stripe publishable key for `loadStripe`. */
+            publishableKey: string;
+            jobId: string;
         } | {
             /** @enum {string} */
             object: "job_posting_result";
@@ -2219,7 +2309,7 @@ interface components {
             status: "granted" | "withdrawn";
             source: string;
             /** @enum {string|null} */
-            reason: "person_request" | "operator_request" | "account_deleted" | null;
+            reason: "person_request" | "operator_request" | "account_deleted" | "spam_report" | null;
             /** Format: date-time */
             grantedAt: string | null;
             /** Format: date-time */
@@ -2826,6 +2916,8 @@ interface components {
                 contactPage: boolean;
                 /** @description Whether `GET /v1/boards/{identifier}/places/suggest` suggests any place on this board (cities, towns and suburbs beyond the board's own places). When `false` it returns an empty list: offer only the board's places (`GET /places?q=`) and do not call it. */
                 placeSuggestions: boolean;
+                /** @description Whether the board serves its public MCP server, which AI assistants connect to at `/mcp` on the board's own host, with a setup page for job seekers at `/mcp/docs`. `true` on a paid board that is not password-protected and has not turned the server off. Show a link to `/mcp/docs` (for example in the footer) only when `true`. */
+                mcp: boolean;
             };
             /**
              * @description How the operator charges employers for the candidate directory. `paid_messaging` leaves profiles fully visible and spends a credit on a first cold message; `paid_unlocks_and_messaging` also redacts directory cards and gates the opaque `/p/{id}` profile route behind an unlock credit. `null` means the operator has not chosen explicitly, in which case infer it from the published `talent_access` plans: any plan granting profile unlocks means `paid_unlocks_and_messaging`, otherwise `paid_messaging`. The paywall is inert regardless when the board publishes no talent plan. An anonymous viewer has no entitlement read to derive this from, so it ships here rather than only on `me/talent-access`.
@@ -3506,8 +3598,10 @@ interface components {
             canonicalSlug: string;
             /** @description Board-language name with source-name fallback. */
             displayName: string;
-            /** @description Live published-job count for this term on the board. Maintained as jobs publish and expire — not a tally of the current list page. */
+            /** @description Live published-job count for this term on the board. Maintained as jobs publish and expire — not a tally of the current list page. For a category, only jobs tagged with the category itself, so a parent whose jobs all sit on its children has `0`; see `totalJobCount`. */
             jobCount: number;
+            /** @description Live jobs on this category or any descendant, each job once. Present on categories; equals `jobCount` for a category with no children. Absent on skills. */
+            totalJobCount?: number;
         };
         PublicVerifyBoardPasswordBody: {
             /** @description The board password. */

package/dist/{blog-Dp2jAVVM.d.ts → blog--VKuBIdw.d.ts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-D1Qg_Twd.js';
+import { S as Schemas } from './_spec-DBI6azWs.js';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{blog-e0YbZBjg.d.mts → blog-Bx-rjH4V.d.mts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-D1Qg_Twd.mjs';
+import { S as Schemas } from './_spec-DBI6azWs.mjs';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{board-Cc3wbTKI.d.mts → board-BsUhxdjL.d.mts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-D1Qg_Twd.mjs';
-import { L as ListEnvelope, v as RelatedSearch, b as CustomFieldFilter, O as ObjectReferenceFilter, a as JobCapability } from './jobs-CClqlUld.mjs';
+import { S as Schemas } from './_spec-DBI6azWs.mjs';
+import { L as ListEnvelope, v as RelatedSearch, b as CustomFieldFilter, O as ObjectReferenceFilter, a as JobCapability } from './jobs-qoVMh_Zd.mjs';
 
 type PublicCompany = Schemas['CompanyPublic'];
 /**

package/dist/{board-BeNZLOYC.d.ts → board-USJ9ZZab.d.ts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-D1Qg_Twd.js';
-import { L as ListEnvelope, v as RelatedSearch, b as CustomFieldFilter, O as ObjectReferenceFilter, a as JobCapability } from './jobs-D04ngjCP.js';
+import { S as Schemas } from './_spec-DBI6azWs.js';
+import { L as ListEnvelope, v as RelatedSearch, b as CustomFieldFilter, O as ObjectReferenceFilter, a as JobCapability } from './jobs-Dyj1HZ8W.js';
 
 type PublicCompany = Schemas['CompanyPublic'];
 /**

package/dist/{breadcrumbs-C5WjB8jm.d.mts → breadcrumbs-BVN_gIJq.d.mts}

@@ -1,5 +1,5 @@
-import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-Cc3wbTKI.mjs';
-import { P as PublicJob } from './jobs-CClqlUld.mjs';
+import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-BsUhxdjL.mjs';
+import { P as PublicJob } from './jobs-qoVMh_Zd.mjs';
 
 /**
  * Wire enum for `salaryTimeframe`. Defined here (not re-exported from any

package/dist/{breadcrumbs-BOFeIYEX.d.ts → breadcrumbs-maV86vZP.d.ts}

@@ -1,5 +1,5 @@
-import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-BeNZLOYC.js';
-import { P as PublicJob } from './jobs-D04ngjCP.js';
+import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-USJ9ZZab.js';
+import { P as PublicJob } from './jobs-Dyj1HZ8W.js';
 
 /**
  * Wire enum for `salaryTimeframe`. Defined here (not re-exported from any