v3.4.2

What's Changed

Metadata-only release so npm picks up the homepage and keywords from #53:

• homepage → https://jobappagent.com
• Keywords expanded for discovery (job search, ATS, agent skill, privacy, etc.)

No runtime behavior changes vs 3.4.1.

v3.4.1 — Shared private cloud state

What's Changed

• feat: share private job-agent state across trusted hosts by @vaibhavarora14 in #46

Full Changelog: v3.4.0...v3.4.1

v3.4.0 — Discovery coverage and usage analytics controls

JobAgent rounds now record discovery coverage across multiple relevant sources before completion, while keeping application selection based on fit.

• Attempt at least three distinct sources, with at least one successful search. Record observed access blockers and continue through accessible alternatives.
• Track discovery sources independently from the application platform. Explain concentration when one discovery source supplies over 60% of confirmed submissions.
• Add round source --stdin and source coverage in round status, plus bounded coverage analytics. Private evidence and application attribution stay local.
• Add disclosed, default-enabled sharing of explicitly saved profile name/email with private usage analytics. The first disclosure command sends no identity. Use telemetry identity disable for anonymous future usage or telemetry disable to stop all analytics. Identity opt-out rotates the analytics ID.
• Verify source coverage through installation of the packed npm artifact.

Update the installed skill with:

npx --yes job-application-agent@3.4.0 install

Previously completed rounds remain historical. Open rounds must satisfy coverage and attribution before completion. Search evidence is agent-reported; these checks do not independently verify browser activity.

v3.3.0 — Linux Secret Service support

What's changed

• Linux now stores candidate profiles securely through the freedesktop Secret Service API via secret-tool.
• Missing libsecret-tools, unavailable DBus/keyring sessions, and missing profiles produce distinct actionable errors.
• Oversized UTF-8 profiles are rejected before Secret Service can truncate them, preserving the previously stored profile.
• README and skill documentation cover Linux installation and headless keyring setup.
• CI now runs an end-to-end Linux profile lifecycle against a real DBus and GNOME Keyring session.

Thanks to @devroy10 for the original Linux implementation in #29.

Fixes #23.

Full changelog: v3.2.1...v3.3.0

v3.2.1 — Isolated community test traffic

Prevents repository test runs from reaching the production community job relay and rejects reserved example-domain fixtures at the shared validation boundary.

v3.2.0 — Automatic community job logging

Confirmed applications can now be shared automatically as privacy-safe community job leads. This release adds direct and provider links, local retry/backfill receipts, explicit sharing controls, reviewed publication, and the public community job feed.

v3.1.2 — Community job sources

Community source discovery is now available to every installation.

• Adds the packaged global discovery catalog and maintainer-reviewed community registry
• Shares repeatable public job sources into a private moderation queue by default
• Keeps one-off jobs, referral links, candidate data, and contributor identifiers private
• Adds source attribution, moderation, privacy validation, and cross-platform tests

The production relay and D1 migration were deployed and verified before this release.

v3.0.1 — Direct résumé uploads

Agents now resolve the canonical résumé path through the CLI and use the browser’s privileged path-based upload capability before falling back to Finder or Explorer. Uploads are verified after ATS parsing, with regression coverage for the skill contract and CLI path command.

v3.0.0 — Agent-agnostic install for any coding agent

Use it with any Agent Skills-compatible coding agent

npx job-application-agent@latest install

This release installs the skill to the vendor-neutral ~/.agents/skills path so Cursor, Codex, Claude Code, and other Agent Skills-compatible agents can pick it up — not just Codex.

Highlights

• canonical install under ~/.agents/skills, with optional copies into existing vendor skill directories
• existing Codex installs migrate without deleting candidate data
• profiles stored in OS-backed secrets (macOS Keychain, or Windows Credential Manager + DPAPI)
• README, SHARE_PROMPT, and SKILL.md wording is agent-neutral; the Codex-only agent manifest is gone

v2.0.4

Improves anonymous telemetry delivery reliability for the public usage dashboard.