v4.2.0

What's Changed

• Add pinned local Claude plugin packaging by @devag7 in #47
• feat: reusable evidence and application drafts by @devag7 in #50

Full Changelog: v4.1.2...v4.2.0

4.2.0: reusable evidence and application drafts

Reuse a small library of your own facts, explicitly map them to job requirements, and request reviewable resume bullets and a cover-letter draft. Selected statements retain their exact evidence/source labels and requirement links; unrelated facts stay out and unanswered requirements stay visible. Old worksheet calls remain compatible.

These local tools do not require LinkedIn login or a paid model API. They do not fetch resume files, store a library, fill forms, upload resumes or submit applications. Facts remain user-supplied and unverified; review the draft against your records before using it.

Workflow and synthetic request · Release proof

Verified core release

All four destinations are independently verified: npm, public GitHub Packages, active MCP Registry entry, and this finalized Release/tag. GitHub Packages still requires authentication for downloads.

The core source/tag remains bf729d63a72bdced8bda09407520dc2aea3d31f6. Npm archive SHA-256: cd6ab6df8df54236e953de6a6f8cf7cf095746da5d92fbe1727e7228d2d44b0a. Two registry signatures and two attestations verify its source and producer. The original visibility failure remains preserved; same-source recovery skipped another upload and passed all ten jobs.

Optional local Claude packages

• Unsigned Claude Desktop MCPB · checksum. SHA-256: d53f67ef5a226b96003baf9b157f8e5efa8449ec65eed1813d911296c6887109.
• Local Claude plugin ZIP · checksum. SHA-256: 17980a241c2bac77a8296b4ac8e8f3e001368c9baa6a9ede681c740aca64605e.

Public downloads and GitHub asset digests were verified against the reviewed files on October 29, 2026. A fresh advisory lookup of the actual dependencies inside both archives reported zero findings. Both wrap the exact verified public core. Staged/unpacked 24-tool discovery, cold status, input bounds, draft generation and unused-fact isolation pass. Review the unsigned local-code warning: these packages run Node with your computer user's permissions. SDK checks and static manifest validation do not establish native installation, live LinkedIn use or directory approval. No native install or account access was performed during this release. The Desktop extension and local plugin are different installation formats.

Reviewed wrapper source · Current Claude installation/directory research

The full roadmap remains open: research briefs, application submission, native/live first use, coordinated erasure and provider/directory grants are not delivered by this update. Recorded volunteer attempts remain zero, not a success rate. No mandatory maintainer service expense was added.