v0.4.2

Job Application MCP v0.4.2

This is unsigned alpha software, not a production release.
Windows SmartScreen will warn because the project does not yet have
a trusted code-signing certificate. Verify SHA256SUMS.txt before
installing. Free community core only — Pro/hosted services are not
yet enabled.

Downloads

• Windows installer — *-Setup.exe (standalone; no Node.js install required)
• macOS — *.dmg (standalone)
• Linux — *.AppImage (standalone)
• Chrome extension — job-application-mcp-extension.zip (load unpacked in chrome://extensions)
• Core build — job-application-mcp-core-dist.zip (for stdio MCP clients)
• Checksums — SHA256SUMS.txt

Standalone desktop app. The installer bundles the HTTP bridge
(a single self-contained file) and runs it on Electron's own Node
runtime — no system Node.js is required. It only reads local
data; submission stays manual.

See the README for setup.
See CHANGELOG.md for changes.

What's Changed

• Recover foundation and prepare v0.4.2 Windows alpha by @firyomaefx in #2

New Contributors

• @firyomaefx made their first contribution in #2

Full Changelog: v0.1.3...v0.4.2

v0.4.1 — Windows portable + one-click installer

v0.4.1 — Windows portable + one-click installer

Two Windows builds you can run today, no install required for the portable one.

Downloads

File	What it is	How to use
Job Application MCP 0.4.1.exe	Portable — single self-extracting exe	Download and run from anywhere. No install. Extracts to a temp folder and launches.
Job Application MCP Setup 0.4.1.exe	One-click NSIS installer	Download and run — single click installs per-user (no install-directory wizard).

⚠️ Unsigned build. We don't have a code-signing certificate yet, so Windows
SmartScreen will show a warning on first run. Click "More info" → "Run anyway".
This is expected and documented (packaging/README.md); nothing is wrong with the file.

What changed

• Portable .exe (new portable target) — run without install.
• One-click NSIS installer (nsis.oneClick: true) — single-click per-user install. The MSIX target was dropped (enterprise MSIX needs a code-signing cert).
• App icon generated by a dependency-free script (desktop/build-icon.js); the NSIS installer shows it.
• win.signAndEditExecutable: false so the build skips the winCodeSign toolset (whose extraction needs Windows symlink privilege a normal user account doesn't have). The build is unsigned as a result.

Cosmetic note

Because the executable-icon step (rcedit) is part of the skipped signing step, the portable .exe and the installed app .exe keep Electron's default icon. The NSIS installer itself uses our icon. Setting the .exe icon requires either a code-signing certificate or building with symlink privilege (admin / Developer Mode) — the same gap already noted in packaging/README.md.

Verify

• npm run typecheck ✅ · npm test → 134 pass ✅ · npm run build ✅ · npm run bundle:bridge ✅
• Portable exe launch smoke-tested (process spawns, runs, exits cleanly).
• No schema/data changes; tool count unchanged (41); no new runtime egress.

Full changelog

See CHANGELOG.md.

🤖 Generated with Claude Code

v0.1.3 — production-readiness hardening (standalone desktop)

Job Application MCP v0.1.3

This is alpha software. Free community core only — Pro/hosted services are not yet enabled.

Production-readiness hardening (Cycle 2 audit)

• Standalone desktop app. The Windows installer, macOS DMG, and Linux
  AppImage no longer require Node.js on your PATH. The HTTP bridge is bundled
  into a single self-contained file and run on Electron's own Node runtime.
• Prompt-injection hardening. AI prompts treat job/CV content as
  untrusted (wrapped in <untrusted> delimiters); a malicious job
  description can no longer inject instructions.
• Claude cost controls. AI calls measure usage/cost, enforce a monthly
  spend cap (JOB_MCP_AI_MONTHLY_LIMIT_USD, default $20), retry with backoff,
  rate-limit, and gracefully fall back to the local heuristic draft on
  failure — no debit, workflow continues.
• Approval-gated submission recording. A submission can only be recorded
  (never performed) after a full validation gate and a short-lived single-use
  approval token. New tools request_approval and confirm_submission.
• Local backup/restore (backup_data / list_backups / restore_data).
• Entitlement-activity log; local data preserved across upgrade/downgrade/expiry.
• Form-field classification is now a pure, tested module shared by the
  autofill tool and the extension.
• Schema v3 (additive). Tool count 23 → 28. Test suite 40 → 72 (all green).

Downloads

• Windows installer — Job.Application.MCP.Setup.0.1.3.exe (standalone; no Node.js install required)
• macOS — Job.Application.MCP-0.1.3-arm64.dmg (standalone)
• Linux — Job.Application.MCP-0.1.3.AppImage (standalone)
• Chrome extension — job-application-mcp-extension.zip (load unpacked in chrome://extensions)
• Core build — job-application-mcp-core-dist.zip (for stdio MCP clients)

Standalone desktop app. The installer bundles the HTTP bridge (a single
self-contained file) and runs it on Electron's own Node runtime — no system
Node.js is required. It only reads local data; submission stays manual.

See the README for setup.
See CHANGELOG.md for the full changelog.

v0.1.2

Job Application MCP v0.1.2

This is alpha software. Free community core only — Pro/hosted
services are not yet enabled.

Downloads

• Windows installer — *-Setup.exe
• macOS — *.dmg
• Linux — *.AppImage
• Chrome extension — job-application-mcp-extension.zip (load unpacked in chrome://extensions)
• Core build — job-application-mcp-core-dist.zip (for stdio MCP clients)

Desktop installer is a developer preview. It launches the
Electron shell and spawns the local HTTP bridge via node, so it
requires Node.js on PATH and a built project. It does not bundle
the server. For a stable experience, run the stdio core or HTTP
bridge directly.

See the README for setup.
See CHANGELOG.md for changes.

Full Changelog: v0.1.1...v0.1.2