@cavuno/board 4.8.0 → 4.10.0

package/CHANGELOG.md

@@ -3,6 +3,54 @@
 This changelog records changes that affect Board API compatibility, exported
 types, runtime behavior, or supported integration patterns.
 
+## 4.10.0 — 2026-08-28
+
+- **Employer talent-access paywall** (a different buyer from the candidate
+  paywall): `board.me.talentAccess` gains `retrieveCandidate`, `checkout`
+  (connected-account embedded mount kit, `origin: talent_access`),
+  `retrieveCheckout`, `unlock` (idempotent credit spend), and `upgrade`
+  (in-place plan swap; never a second checkout). `retrieve()` now also
+  returns `accessModel`, `companyId`, `unlockCreditsRemaining`,
+  `messageCreditsRemaining`, and `hasUnlimitedMessages`.
+- **Company billing portal**: `board.me.companies.billingPortal.create(slug)`
+  mints a Stripe Customer Portal session covering every subscription on the
+  company's Stripe customer (job posting + talent access).
+- **Public talent reads**: `TalentDirectoryEntry` and `TalentProfile` gain
+  `id` (the board-user id, the opaque `/p/{id}` route key). When a board
+  sells profile unlocks, list and retrieve-by-id responses are redacted for
+  viewers without entitlement; retrieve-by-handle stays the named-route
+  share bypass.
+- **Error codes**: `talent_access_unavailable`, `company_required`,
+  `already_on_plan`, `talent_access_required`,
+  `messaging_talent_access_required`, and `stripe_not_connected` join
+  `BOARD_API_ERROR_CODES`.
+- **New skill** `cavuno-board-talent-access` covering the full employer
+  flow (CTA gating, checkout, unlock, upgrade, portal, message credits).
+
+## 4.9.0 — 2026-08-27
+
+- **`@cavuno/board/seo-files`**: new dependency-free subpath with
+  `robotsResponse`, `adsTxtResponse`, `indexNowResponse`, and
+  `googleSiteVerificationMeta`. Headless frontends serve `robots.txt`,
+  `ads.txt`, and `indexnow-key.txt` byte-identically to hosted boards from
+  `board.seo()`; the robots body now includes `Disallow: /go/` and
+  `Disallow: /t/` like hosted boards.
+- **Doctor**: `--frontend` probes gained `read.adsTxt`, `read.indexNow`,
+  `read.googleVerification`, and `read.oauthCallback`, and `read.robots` now
+  checks the `Sitemap:` line and `/go/` disallow. Results gained an additive
+  `warn` status (`DoctorSummary.warned`) that never fails the run; a file that
+  is served while unconfigured in the dashboard, or a missing OAuth callback
+  forward, warns instead of failing. Read probes run serially and retry a
+  503 child sitemap once.
+- **`board.context()`**: exposes `ads` (`enabled`, `clientId`) and
+  `jobForm` visibility, typed as `PublicBoardAds` and `PublicBoardJobForm`.
+  Employer companies expose `deletionEnabled`.
+- **Taxonomy lists** accept `sort: 'jobCount'` to order collections by live
+  job count.
+- **Generated types** cover the `candidate.profile.updated` webhook event
+  and the operator candidate sync resources (`CandidateSyncSnapshot`,
+  `CandidateReconcileResult`, and related bodies).
+
 ## 4.8.0 — 2026-08-23
 
 - **Country-gated Apply flows**: compatible starters can use

package/dist/{_spec-DePC7a05.d.mts → _spec-BwUP7Wni.d.mts}

@@ -381,6 +381,14 @@ interface components {
             slug: string;
             website: string | null;
         };
+        CompanyBillingPortalBody: {
+            returnPath?: string;
+        };
+        CompanyBillingPortalSession: {
+            /** @enum {string} */
+            object: "portal_session";
+            url: string;
+        };
         CompanyCategorySalary: {
             /** @enum {string} */
             object: "company_category_salary";
@@ -961,6 +969,8 @@ interface components {
             linkedinUrl: string | null;
             facebookUrl: string | null;
             logoUrl: string | null;
+            /** @description Whether company admins may delete this company. Mirrors the board Features toggle `employerCompanyDeletionEnabled`. Absent board config defaults to `true`. When `false`, DELETE returns 403 `company_deletion_disabled` and clients should hide the danger zone. */
+            deletionEnabled: boolean;
         };
         EmployerCreateJobBody: {
             /** @description Long-form description of the role. Up to 25,000 characters. */
@@ -1616,6 +1626,7 @@ interface components {
             /** @enum {string} */
             channel: "messageEmails" | "applicationEmails" | "recommendedJobEmails";
             subscribed: boolean;
+            waitlisted: boolean;
             updatedAt: number | null;
         };
         PaywallOffer: {
@@ -1789,6 +1800,10 @@ interface components {
             showCavunoBranding: boolean;
             features: {
                 jobAlerts: boolean;
+                /** @description Whether personalized candidate job recommendations are available on this board. Absent board config defaults to `true`. */
+                jobRecommendationsEnabled: boolean;
+                /** @description Whether the board-level Recommended talent toggle is enabled. The endpoint additionally requires the Candidate area and a non-off talent directory. Absent board config defaults to `false`. */
+                recommendedTalentEnabled: boolean;
                 candidates: boolean;
                 employers: boolean;
                 blog: boolean;
@@ -1814,11 +1829,37 @@ interface components {
                 linkedInPartnerId: string | null;
                 cookieConsentRequired: boolean;
             };
+            /** @description Public AdSense switch + publisher id from board advertising settings. Not the slot map (Puck/Cavuno placements) and not `ads.txt` (`board.seo()`). */
+            ads: {
+                /** @description Whether AdSense is turned on for this board (Settings → Advertising). Headless frontends render their own placements only when this is true and `clientId` is a valid `ca-pub-` publisher id. Per-placement slot ids are not on this resource — applications own geometry. */
+                enabled: boolean;
+                /** @description AdSense publisher id (`ca-pub-` + 16 digits), or null when ads are off or the stored value is malformed. Already public on hosted pages as `data-ad-client`. */
+                clientId: string | null;
+            };
             /** @description Operator-defined custom field definitions keyed by model (currently only `job`). Each key holds that model's definitions in display order. Company and talent keys are added when those models ship. The frontend uses these to render and localize each record's opaque `customFieldValues`. Display-only: not filterable or searchable in v1. */
             customFields: {
                 /** @description This model's custom-field definitions in display order. Empty when the board defines none for the model. */
                 job: components["schemas"]["CustomFieldDefinition"][];
             };
+            /** @description Built-in job-form field visibility from Settings → Job form. Does not include custom fields (`customFields.job`) or operator-only constraints (required, bounds, allowlists). */
+            jobForm: {
+                salary: {
+                    /** @description Whether salary is captured on posting forms and shown on public job cards. Absent board config defaults to `true`. */
+                    visible: boolean;
+                };
+                seniority: {
+                    /** @description Whether seniority is captured on posting forms. Absent board config defaults to `true`. */
+                    visible: boolean;
+                };
+                location: {
+                    /** @description Whether office location is captured on posting forms. Absent board config defaults to `true`. */
+                    visible: boolean;
+                };
+                sponsorship: {
+                    /** @description Whether visa sponsorship is captured on posting forms. Absent board config defaults to `true`. */
+                    visible: boolean;
+                };
+            };
             /** @description Operator-authored contact and social identity (settings › Contact & company details). Extracted from the former `footer` group in 4.0.0: contact is identity data, not layout. Brand/social URLs are sanitized to absolute http(s). */
             contact: {
                 /** @description Public contact email (render as `mailto:`). Operator-set in settings › Contact & company details. */
@@ -2195,6 +2236,8 @@ interface components {
             canonicalSlug: string;
             /** @description Board-language name with source-name fallback. */
             displayName: string;
+            /** @description Live published-job count for this term on the board. Maintained as jobs publish and expire — not a tally of the current list page. */
+            jobCount: number;
         };
         PublicVerifyBoardPasswordBody: {
             /** @description The board password. */
@@ -2528,14 +2571,52 @@ interface components {
             isEmployer: boolean;
             /** @description Whether this board sells talent access (a public `talent_access` plan exists). When `false` the talent surfaces are not credit-gated for employers. */
             paywallActive: boolean;
-            /** @description The CTA answer: the viewer is an approved employer AND either the board has no talent paywall or one of their companies holds an active talent_access subscription or a succeeded credit pack. Always `false` for candidates; anonymous viewers get 401. */
+            /** @description The CTA answer: the viewer is an approved employer AND either the board has no talent paywall or one of their companies holds an active talent_access subscription or a succeeded credit pack. Always `false` for candidates; anonymous viewers get 401. Never cached. */
             hasTalentAccess: boolean;
             /** @description True when any active talent_access subscription carries the unlimited profile-unlock sentinel on its feature snapshot. */
             hasUnlimitedUnlocks: boolean;
+            /**
+             * @description `none` when the paywall is off. Otherwise the board charging model: paid messaging only, or paid unlocks and messaging. Inferred from public plan unlock credits when the stored config is unset.
+             * @enum {string}
+             */
+            accessModel: "none" | "paid_messaging" | "paid_unlocks_and_messaging";
+            /** @description The approved company to charge checkout/unlock against when the viewer has exactly one membership. `null` when they have none or more than one (pass `companyId` on write). */
+            companyId: string | null;
+            /** @description Summed finite remaining profile-unlock credits across the viewer’s companies. `0` when unlimited or when they hold no spendable credits. */
+            unlockCreditsRemaining: number;
+            /** @description Summed finite remaining first-message credits. `0` when unlimited or when they hold no spendable credits. */
+            messageCreditsRemaining: number;
+            /** @description True when any active talent_access subscription carries the unlimited message-credit sentinel. */
+            hasUnlimitedMessages: boolean;
+        };
+        TalentAccessCheckoutBody: {
+            planId: string;
+            returnPath: string;
+            /** @enum {string} */
+            colorMode: "light" | "dark";
+            companyId?: string;
+        };
+        TalentAccessUpgradeBody: {
+            planId: string;
+            companyId?: string;
+        };
+        TalentCandidateAccess: {
+            /** @enum {string} */
+            object: "talent_candidate_access";
+            candidateId: string;
+            companyId: string | null;
+            alreadyUnlocked: boolean;
+            unlockCreditsRemaining: number;
+            messageCreditsRemaining: number;
+            hasUnlimitedUnlocks: boolean;
+            hasUnlimitedMessages: boolean;
+            hasActiveTalentSubscription: boolean;
         };
         TalentDirectoryEntry: {
             /** @enum {string} */
             object: "talent_directory_entry";
+            /** @description The candidate’s board-user id. When a public talent_access plan exists, directory cards link to the opaque `/p/{id}` route so profile unlocks can apply. The named `/p/{handle}` route is the share bypass. */
+            id: string;
             handle: string | null;
             displayName: string | null;
             headline: string | null;
@@ -2565,6 +2646,8 @@ interface components {
         TalentProfile: {
             /** @enum {string} */
             object: "talent_profile";
+            /** @description The candidate’s board-user id. The opaque talent-paywall route key (`/p/{id}`); `handle` is the named-share bypass. */
+            id: string;
             handle: string | null;
             displayName: string | null;
             headline: string | null;
@@ -2614,6 +2697,22 @@ interface components {
                 proficiency: string;
             }[];
         };
+        TalentUnlock: {
+            /** @enum {string} */
+            object: "talent_unlock";
+            alreadyUnlocked: boolean;
+            unlockCreditsRemaining: number | null;
+        };
+        TalentUnlockBody: {
+            candidateId: string;
+            companyId?: string;
+        };
+        TalentUpgrade: {
+            /** @enum {string} */
+            object: "talent_upgrade";
+            /** @enum {boolean} */
+            ok: true;
+        };
         /** @description Geo for place resolutions; `null` for category/skill. */
         TaxonomyGeo: {
             lat: number | null;

package/dist/{_spec-DePC7a05.d.ts → _spec-BwUP7Wni.d.ts}

@@ -381,6 +381,14 @@ interface components {
             slug: string;
             website: string | null;
         };
+        CompanyBillingPortalBody: {
+            returnPath?: string;
+        };
+        CompanyBillingPortalSession: {
+            /** @enum {string} */
+            object: "portal_session";
+            url: string;
+        };
         CompanyCategorySalary: {
             /** @enum {string} */
             object: "company_category_salary";
@@ -961,6 +969,8 @@ interface components {
             linkedinUrl: string | null;
             facebookUrl: string | null;
             logoUrl: string | null;
+            /** @description Whether company admins may delete this company. Mirrors the board Features toggle `employerCompanyDeletionEnabled`. Absent board config defaults to `true`. When `false`, DELETE returns 403 `company_deletion_disabled` and clients should hide the danger zone. */
+            deletionEnabled: boolean;
         };
         EmployerCreateJobBody: {
             /** @description Long-form description of the role. Up to 25,000 characters. */
@@ -1616,6 +1626,7 @@ interface components {
             /** @enum {string} */
             channel: "messageEmails" | "applicationEmails" | "recommendedJobEmails";
             subscribed: boolean;
+            waitlisted: boolean;
             updatedAt: number | null;
         };
         PaywallOffer: {
@@ -1789,6 +1800,10 @@ interface components {
             showCavunoBranding: boolean;
             features: {
                 jobAlerts: boolean;
+                /** @description Whether personalized candidate job recommendations are available on this board. Absent board config defaults to `true`. */
+                jobRecommendationsEnabled: boolean;
+                /** @description Whether the board-level Recommended talent toggle is enabled. The endpoint additionally requires the Candidate area and a non-off talent directory. Absent board config defaults to `false`. */
+                recommendedTalentEnabled: boolean;
                 candidates: boolean;
                 employers: boolean;
                 blog: boolean;
@@ -1814,11 +1829,37 @@ interface components {
                 linkedInPartnerId: string | null;
                 cookieConsentRequired: boolean;
             };
+            /** @description Public AdSense switch + publisher id from board advertising settings. Not the slot map (Puck/Cavuno placements) and not `ads.txt` (`board.seo()`). */
+            ads: {
+                /** @description Whether AdSense is turned on for this board (Settings → Advertising). Headless frontends render their own placements only when this is true and `clientId` is a valid `ca-pub-` publisher id. Per-placement slot ids are not on this resource — applications own geometry. */
+                enabled: boolean;
+                /** @description AdSense publisher id (`ca-pub-` + 16 digits), or null when ads are off or the stored value is malformed. Already public on hosted pages as `data-ad-client`. */
+                clientId: string | null;
+            };
             /** @description Operator-defined custom field definitions keyed by model (currently only `job`). Each key holds that model's definitions in display order. Company and talent keys are added when those models ship. The frontend uses these to render and localize each record's opaque `customFieldValues`. Display-only: not filterable or searchable in v1. */
             customFields: {
                 /** @description This model's custom-field definitions in display order. Empty when the board defines none for the model. */
                 job: components["schemas"]["CustomFieldDefinition"][];
             };
+            /** @description Built-in job-form field visibility from Settings → Job form. Does not include custom fields (`customFields.job`) or operator-only constraints (required, bounds, allowlists). */
+            jobForm: {
+                salary: {
+                    /** @description Whether salary is captured on posting forms and shown on public job cards. Absent board config defaults to `true`. */
+                    visible: boolean;
+                };
+                seniority: {
+                    /** @description Whether seniority is captured on posting forms. Absent board config defaults to `true`. */
+                    visible: boolean;
+                };
+                location: {
+                    /** @description Whether office location is captured on posting forms. Absent board config defaults to `true`. */
+                    visible: boolean;
+                };
+                sponsorship: {
+                    /** @description Whether visa sponsorship is captured on posting forms. Absent board config defaults to `true`. */
+                    visible: boolean;
+                };
+            };
             /** @description Operator-authored contact and social identity (settings › Contact & company details). Extracted from the former `footer` group in 4.0.0: contact is identity data, not layout. Brand/social URLs are sanitized to absolute http(s). */
             contact: {
                 /** @description Public contact email (render as `mailto:`). Operator-set in settings › Contact & company details. */
@@ -2195,6 +2236,8 @@ interface components {
             canonicalSlug: string;
             /** @description Board-language name with source-name fallback. */
             displayName: string;
+            /** @description Live published-job count for this term on the board. Maintained as jobs publish and expire — not a tally of the current list page. */
+            jobCount: number;
         };
         PublicVerifyBoardPasswordBody: {
             /** @description The board password. */
@@ -2528,14 +2571,52 @@ interface components {
             isEmployer: boolean;
             /** @description Whether this board sells talent access (a public `talent_access` plan exists). When `false` the talent surfaces are not credit-gated for employers. */
             paywallActive: boolean;
-            /** @description The CTA answer: the viewer is an approved employer AND either the board has no talent paywall or one of their companies holds an active talent_access subscription or a succeeded credit pack. Always `false` for candidates; anonymous viewers get 401. */
+            /** @description The CTA answer: the viewer is an approved employer AND either the board has no talent paywall or one of their companies holds an active talent_access subscription or a succeeded credit pack. Always `false` for candidates; anonymous viewers get 401. Never cached. */
             hasTalentAccess: boolean;
             /** @description True when any active talent_access subscription carries the unlimited profile-unlock sentinel on its feature snapshot. */
             hasUnlimitedUnlocks: boolean;
+            /**
+             * @description `none` when the paywall is off. Otherwise the board charging model: paid messaging only, or paid unlocks and messaging. Inferred from public plan unlock credits when the stored config is unset.
+             * @enum {string}
+             */
+            accessModel: "none" | "paid_messaging" | "paid_unlocks_and_messaging";
+            /** @description The approved company to charge checkout/unlock against when the viewer has exactly one membership. `null` when they have none or more than one (pass `companyId` on write). */
+            companyId: string | null;
+            /** @description Summed finite remaining profile-unlock credits across the viewer’s companies. `0` when unlimited or when they hold no spendable credits. */
+            unlockCreditsRemaining: number;
+            /** @description Summed finite remaining first-message credits. `0` when unlimited or when they hold no spendable credits. */
+            messageCreditsRemaining: number;
+            /** @description True when any active talent_access subscription carries the unlimited message-credit sentinel. */
+            hasUnlimitedMessages: boolean;
+        };
+        TalentAccessCheckoutBody: {
+            planId: string;
+            returnPath: string;
+            /** @enum {string} */
+            colorMode: "light" | "dark";
+            companyId?: string;
+        };
+        TalentAccessUpgradeBody: {
+            planId: string;
+            companyId?: string;
+        };
+        TalentCandidateAccess: {
+            /** @enum {string} */
+            object: "talent_candidate_access";
+            candidateId: string;
+            companyId: string | null;
+            alreadyUnlocked: boolean;
+            unlockCreditsRemaining: number;
+            messageCreditsRemaining: number;
+            hasUnlimitedUnlocks: boolean;
+            hasUnlimitedMessages: boolean;
+            hasActiveTalentSubscription: boolean;
         };
         TalentDirectoryEntry: {
             /** @enum {string} */
             object: "talent_directory_entry";
+            /** @description The candidate’s board-user id. When a public talent_access plan exists, directory cards link to the opaque `/p/{id}` route so profile unlocks can apply. The named `/p/{handle}` route is the share bypass. */
+            id: string;
             handle: string | null;
             displayName: string | null;
             headline: string | null;
@@ -2565,6 +2646,8 @@ interface components {
         TalentProfile: {
             /** @enum {string} */
             object: "talent_profile";
+            /** @description The candidate’s board-user id. The opaque talent-paywall route key (`/p/{id}`); `handle` is the named-share bypass. */
+            id: string;
             handle: string | null;
             displayName: string | null;
             headline: string | null;
@@ -2614,6 +2697,22 @@ interface components {
                 proficiency: string;
             }[];
         };
+        TalentUnlock: {
+            /** @enum {string} */
+            object: "talent_unlock";
+            alreadyUnlocked: boolean;
+            unlockCreditsRemaining: number | null;
+        };
+        TalentUnlockBody: {
+            candidateId: string;
+            companyId?: string;
+        };
+        TalentUpgrade: {
+            /** @enum {string} */
+            object: "talent_upgrade";
+            /** @enum {boolean} */
+            ok: true;
+        };
         /** @description Geo for place resolutions; `null` for category/skill. */
         TaxonomyGeo: {
             lat: number | null;