@cavuno/board 4.9.0 → 4.11.0

package/CHANGELOG.md

@@ -3,6 +3,37 @@
 This changelog records changes that affect Board API compatibility, exported
 types, runtime behavior, or supported integration patterns.
 
+## 4.11.0 — 2026-08-28
+
+- **`BoardAuthSession.isNewUser`**: optional boolean on OAuth exchange and
+  magic-link consume. True when the exchange created the board user account
+  (candidate or employer); false when it authenticated an existing account.
+  Login, register, and refresh omit the field.
+
+## 4.10.0 — 2026-08-28
+
+- **Employer talent-access paywall** (a different buyer from the candidate
+  paywall): `board.me.talentAccess` gains `retrieveCandidate`, `checkout`
+  (connected-account embedded mount kit, `origin: talent_access`),
+  `retrieveCheckout`, `unlock` (idempotent credit spend), and `upgrade`
+  (in-place plan swap; never a second checkout). `retrieve()` now also
+  returns `accessModel`, `companyId`, `unlockCreditsRemaining`,
+  `messageCreditsRemaining`, and `hasUnlimitedMessages`.
+- **Company billing portal**: `board.me.companies.billingPortal.create(slug)`
+  mints a Stripe Customer Portal session covering every subscription on the
+  company's Stripe customer (job posting + talent access).
+- **Public talent reads**: `TalentDirectoryEntry` and `TalentProfile` gain
+  `id` (the board-user id, the opaque `/p/{id}` route key). When a board
+  sells profile unlocks, list and retrieve-by-id responses are redacted for
+  viewers without entitlement; retrieve-by-handle stays the named-route
+  share bypass.
+- **Error codes**: `talent_access_unavailable`, `company_required`,
+  `already_on_plan`, `talent_access_required`,
+  `messaging_talent_access_required`, and `stripe_not_connected` join
+  `BOARD_API_ERROR_CODES`.
+- **New skill** `cavuno-board-talent-access` covering the full employer
+  flow (CTA gating, checkout, unlock, upgrade, portal, message credits).
+
 ## 4.9.0 — 2026-08-27
 
 - **`@cavuno/board/seo-files`**: new dependency-free subpath with

package/dist/{_spec-B9Ah8dNs.d.mts → _spec-Ck02NvUF.d.mts}

@@ -261,6 +261,8 @@ interface components {
             /** @description Access-token expiry, epoch milliseconds. */
             expiresAt: number;
             boardUser: components["schemas"]["BoardUser"];
+            /** @description Present on OAuth exchange and magic-link consume. True when this exchange created the board user account (candidate or employer); false when it authenticated an existing account. */
+            isNewUser?: boolean;
         };
         BoardAuthVerifyEmailBody: {
             token: string;
@@ -381,6 +383,14 @@ interface components {
             slug: string;
             website: string | null;
         };
+        CompanyBillingPortalBody: {
+            returnPath?: string;
+        };
+        CompanyBillingPortalSession: {
+            /** @enum {string} */
+            object: "portal_session";
+            url: string;
+        };
         CompanyCategorySalary: {
             /** @enum {string} */
             object: "company_category_salary";
@@ -1814,6 +1824,11 @@ interface components {
                 /** @description Whether applicant↔employer messaging is enabled on the board. `false` means the `me/conversations` route family rejects with `messaging_disabled` (403). Hide inbox/dock/Message CTAs. */
                 messaging: boolean;
             };
+            /**
+             * @description How the operator charges employers for the candidate directory. `paid_messaging` leaves profiles fully visible and spends a credit on a first cold message; `paid_unlocks_and_messaging` also redacts directory cards and gates the opaque `/p/{id}` profile route behind an unlock credit. `null` means the operator has not chosen explicitly, in which case infer it from the published `talent_access` plans: any plan granting profile unlocks means `paid_unlocks_and_messaging`, otherwise `paid_messaging`. The paywall is inert regardless when the board publishes no talent plan. An anonymous viewer has no entitlement read to derive this from, so it ships here rather than only on `me/talent-access`.
+             * @enum {string|null}
+             */
+            talentAccessModel: "paid_messaging" | "paid_unlocks_and_messaging" | null;
             analytics: {
                 ga4MeasurementId: string | null;
                 gtmId: string | null;
@@ -2563,14 +2578,52 @@ interface components {
             isEmployer: boolean;
             /** @description Whether this board sells talent access (a public `talent_access` plan exists). When `false` the talent surfaces are not credit-gated for employers. */
             paywallActive: boolean;
-            /** @description The CTA answer: the viewer is an approved employer AND either the board has no talent paywall or one of their companies holds an active talent_access subscription or a succeeded credit pack. Always `false` for candidates; anonymous viewers get 401. */
+            /** @description The CTA answer: the viewer is an approved employer AND either the board has no talent paywall or one of their companies holds an active talent_access subscription or a succeeded credit pack. Always `false` for candidates; anonymous viewers get 401. Never cached. */
             hasTalentAccess: boolean;
             /** @description True when any active talent_access subscription carries the unlimited profile-unlock sentinel on its feature snapshot. */
             hasUnlimitedUnlocks: boolean;
+            /**
+             * @description `none` when the paywall is off. Otherwise the board charging model: paid messaging only, or paid unlocks and messaging. Inferred from public plan unlock credits when the stored config is unset.
+             * @enum {string}
+             */
+            accessModel: "none" | "paid_messaging" | "paid_unlocks_and_messaging";
+            /** @description The approved company to charge checkout/unlock against when the viewer has exactly one membership. `null` when they have none or more than one (pass `companyId` on write). */
+            companyId: string | null;
+            /** @description Summed finite remaining profile-unlock credits across the viewer’s companies. `0` when unlimited or when they hold no spendable credits. */
+            unlockCreditsRemaining: number;
+            /** @description Summed finite remaining first-message credits. `0` when unlimited or when they hold no spendable credits. */
+            messageCreditsRemaining: number;
+            /** @description True when any active talent_access subscription carries the unlimited message-credit sentinel. */
+            hasUnlimitedMessages: boolean;
+        };
+        TalentAccessCheckoutBody: {
+            planId: string;
+            returnPath: string;
+            /** @enum {string} */
+            colorMode: "light" | "dark";
+            companyId?: string;
+        };
+        TalentAccessUpgradeBody: {
+            planId: string;
+            companyId?: string;
+        };
+        TalentCandidateAccess: {
+            /** @enum {string} */
+            object: "talent_candidate_access";
+            candidateId: string;
+            companyId: string | null;
+            alreadyUnlocked: boolean;
+            unlockCreditsRemaining: number;
+            messageCreditsRemaining: number;
+            hasUnlimitedUnlocks: boolean;
+            hasUnlimitedMessages: boolean;
+            hasActiveTalentSubscription: boolean;
         };
         TalentDirectoryEntry: {
             /** @enum {string} */
             object: "talent_directory_entry";
+            /** @description The candidate’s board-user id. When a public talent_access plan exists, directory cards link to the opaque `/p/{id}` route so profile unlocks can apply. The named `/p/{handle}` route is the share bypass. */
+            id: string;
             handle: string | null;
             displayName: string | null;
             headline: string | null;
@@ -2600,6 +2653,8 @@ interface components {
         TalentProfile: {
             /** @enum {string} */
             object: "talent_profile";
+            /** @description The candidate’s board-user id. The opaque talent-paywall route key (`/p/{id}`); `handle` is the named-share bypass. */
+            id: string;
             handle: string | null;
             displayName: string | null;
             headline: string | null;
@@ -2649,6 +2704,22 @@ interface components {
                 proficiency: string;
             }[];
         };
+        TalentUnlock: {
+            /** @enum {string} */
+            object: "talent_unlock";
+            alreadyUnlocked: boolean;
+            unlockCreditsRemaining: number | null;
+        };
+        TalentUnlockBody: {
+            candidateId: string;
+            companyId?: string;
+        };
+        TalentUpgrade: {
+            /** @enum {string} */
+            object: "talent_upgrade";
+            /** @enum {boolean} */
+            ok: true;
+        };
         /** @description Geo for place resolutions; `null` for category/skill. */
         TaxonomyGeo: {
             lat: number | null;

package/dist/{_spec-B9Ah8dNs.d.ts → _spec-Ck02NvUF.d.ts}

@@ -261,6 +261,8 @@ interface components {
             /** @description Access-token expiry, epoch milliseconds. */
             expiresAt: number;
             boardUser: components["schemas"]["BoardUser"];
+            /** @description Present on OAuth exchange and magic-link consume. True when this exchange created the board user account (candidate or employer); false when it authenticated an existing account. */
+            isNewUser?: boolean;
         };
         BoardAuthVerifyEmailBody: {
             token: string;
@@ -381,6 +383,14 @@ interface components {
             slug: string;
             website: string | null;
         };
+        CompanyBillingPortalBody: {
+            returnPath?: string;
+        };
+        CompanyBillingPortalSession: {
+            /** @enum {string} */
+            object: "portal_session";
+            url: string;
+        };
         CompanyCategorySalary: {
             /** @enum {string} */
             object: "company_category_salary";
@@ -1814,6 +1824,11 @@ interface components {
                 /** @description Whether applicant↔employer messaging is enabled on the board. `false` means the `me/conversations` route family rejects with `messaging_disabled` (403). Hide inbox/dock/Message CTAs. */
                 messaging: boolean;
             };
+            /**
+             * @description How the operator charges employers for the candidate directory. `paid_messaging` leaves profiles fully visible and spends a credit on a first cold message; `paid_unlocks_and_messaging` also redacts directory cards and gates the opaque `/p/{id}` profile route behind an unlock credit. `null` means the operator has not chosen explicitly, in which case infer it from the published `talent_access` plans: any plan granting profile unlocks means `paid_unlocks_and_messaging`, otherwise `paid_messaging`. The paywall is inert regardless when the board publishes no talent plan. An anonymous viewer has no entitlement read to derive this from, so it ships here rather than only on `me/talent-access`.
+             * @enum {string|null}
+             */
+            talentAccessModel: "paid_messaging" | "paid_unlocks_and_messaging" | null;
             analytics: {
                 ga4MeasurementId: string | null;
                 gtmId: string | null;
@@ -2563,14 +2578,52 @@ interface components {
             isEmployer: boolean;
             /** @description Whether this board sells talent access (a public `talent_access` plan exists). When `false` the talent surfaces are not credit-gated for employers. */
             paywallActive: boolean;
-            /** @description The CTA answer: the viewer is an approved employer AND either the board has no talent paywall or one of their companies holds an active talent_access subscription or a succeeded credit pack. Always `false` for candidates; anonymous viewers get 401. */
+            /** @description The CTA answer: the viewer is an approved employer AND either the board has no talent paywall or one of their companies holds an active talent_access subscription or a succeeded credit pack. Always `false` for candidates; anonymous viewers get 401. Never cached. */
             hasTalentAccess: boolean;
             /** @description True when any active talent_access subscription carries the unlimited profile-unlock sentinel on its feature snapshot. */
             hasUnlimitedUnlocks: boolean;
+            /**
+             * @description `none` when the paywall is off. Otherwise the board charging model: paid messaging only, or paid unlocks and messaging. Inferred from public plan unlock credits when the stored config is unset.
+             * @enum {string}
+             */
+            accessModel: "none" | "paid_messaging" | "paid_unlocks_and_messaging";
+            /** @description The approved company to charge checkout/unlock against when the viewer has exactly one membership. `null` when they have none or more than one (pass `companyId` on write). */
+            companyId: string | null;
+            /** @description Summed finite remaining profile-unlock credits across the viewer’s companies. `0` when unlimited or when they hold no spendable credits. */
+            unlockCreditsRemaining: number;
+            /** @description Summed finite remaining first-message credits. `0` when unlimited or when they hold no spendable credits. */
+            messageCreditsRemaining: number;
+            /** @description True when any active talent_access subscription carries the unlimited message-credit sentinel. */
+            hasUnlimitedMessages: boolean;
+        };
+        TalentAccessCheckoutBody: {
+            planId: string;
+            returnPath: string;
+            /** @enum {string} */
+            colorMode: "light" | "dark";
+            companyId?: string;
+        };
+        TalentAccessUpgradeBody: {
+            planId: string;
+            companyId?: string;
+        };
+        TalentCandidateAccess: {
+            /** @enum {string} */
+            object: "talent_candidate_access";
+            candidateId: string;
+            companyId: string | null;
+            alreadyUnlocked: boolean;
+            unlockCreditsRemaining: number;
+            messageCreditsRemaining: number;
+            hasUnlimitedUnlocks: boolean;
+            hasUnlimitedMessages: boolean;
+            hasActiveTalentSubscription: boolean;
         };
         TalentDirectoryEntry: {
             /** @enum {string} */
             object: "talent_directory_entry";
+            /** @description The candidate’s board-user id. When a public talent_access plan exists, directory cards link to the opaque `/p/{id}` route so profile unlocks can apply. The named `/p/{handle}` route is the share bypass. */
+            id: string;
             handle: string | null;
             displayName: string | null;
             headline: string | null;
@@ -2600,6 +2653,8 @@ interface components {
         TalentProfile: {
             /** @enum {string} */
             object: "talent_profile";
+            /** @description The candidate’s board-user id. The opaque talent-paywall route key (`/p/{id}`); `handle` is the named-share bypass. */
+            id: string;
             handle: string | null;
             displayName: string | null;
             headline: string | null;
@@ -2649,6 +2704,22 @@ interface components {
                 proficiency: string;
             }[];
         };
+        TalentUnlock: {
+            /** @enum {string} */
+            object: "talent_unlock";
+            alreadyUnlocked: boolean;
+            unlockCreditsRemaining: number | null;
+        };
+        TalentUnlockBody: {
+            candidateId: string;
+            companyId?: string;
+        };
+        TalentUpgrade: {
+            /** @enum {string} */
+            object: "talent_upgrade";
+            /** @enum {boolean} */
+            ok: true;
+        };
         /** @description Geo for place resolutions; `null` for category/skill. */
         TaxonomyGeo: {
             lat: number | null;

package/dist/{blog-BmqWfLZi.d.mts → blog-CZUXieNu.d.mts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-B9Ah8dNs.mjs';
+import { S as Schemas } from './_spec-Ck02NvUF.mjs';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{blog-bh07fZ8Q.d.ts → blog-ClwNmr_N.d.ts}

@@ -1,4 +1,4 @@
-import { S as Schemas } from './_spec-B9Ah8dNs.js';
+import { S as Schemas } from './_spec-Ck02NvUF.js';
 
 /** Author shape embedded on posts (no `object` discriminator). */
 type BlogAuthorEmbed = Schemas['PublicBlogAuthorEmbed'];

package/dist/{board-De8nLbk7.d.ts → board-6XZx1x5M.d.ts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-B9Ah8dNs.js';
-import { L as ListEnvelope, m as RelatedSearch } from './jobs-Iv6Wkvvf.js';
+import { S as Schemas } from './_spec-Ck02NvUF.js';
+import { L as ListEnvelope, m as RelatedSearch } from './jobs-3BAwXBxR.js';
 
 type PublicCompany = Schemas['CompanyPublic'];
 /** A market (sector) a company operates in — name + its source slug. */

package/dist/{board-B4jLqmxn.d.mts → board-wHyyyAhT.d.mts}

@@ -1,5 +1,5 @@
-import { S as Schemas } from './_spec-B9Ah8dNs.mjs';
-import { L as ListEnvelope, m as RelatedSearch } from './jobs-B7q3BgIK.mjs';
+import { S as Schemas } from './_spec-Ck02NvUF.mjs';
+import { L as ListEnvelope, m as RelatedSearch } from './jobs-iG5udM2R.mjs';
 
 type PublicCompany = Schemas['CompanyPublic'];
 /** A market (sector) a company operates in — name + its source slug. */

package/dist/{breadcrumbs-B1HVufC7.d.ts → breadcrumbs-CPaEpS6h.d.ts}

@@ -1,5 +1,5 @@
-import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-De8nLbk7.js';
-import { P as PublicJob } from './jobs-Iv6Wkvvf.js';
+import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-6XZx1x5M.js';
+import { P as PublicJob } from './jobs-3BAwXBxR.js';
 
 /**
  * Wire enum for `salaryTimeframe`. Defined here (not re-exported from any

package/dist/{breadcrumbs-BVQL2dNY.d.mts → breadcrumbs-DJjtyjlf.d.mts}

@@ -1,5 +1,5 @@
-import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-B4jLqmxn.mjs';
-import { P as PublicJob } from './jobs-B7q3BgIK.mjs';
+import { P as PublicBoard, a as CompanyCategorySalary, b as CompanySalary, L as LocationSalaryDetail, S as SkillSalaryDetail, T as TitleSalaryDetail } from './board-wHyyyAhT.mjs';
+import { P as PublicJob } from './jobs-iG5udM2R.mjs';
 
 /**
  * Wire enum for `salaryTimeframe`. Defined here (not re-exported from any