peregrine/CHANGELOG.md

Changelog

All notable changes to Peregrine are documented here. Format follows Keep a Changelog.

---

[Unreleased]

---

[0.9.4] — 2026-05-08

Added

• Messages view — expandable email timeline — click any email item to lazy-load and read the full body inline (HTML stripped to plain text via DOMParser). Bodies are fetched on-demand via the new GET /api/contacts/{id} endpoint to avoid loading 50KB+ email bodies on every page view.
• Messages view — compose bar — action buttons (Log call, Log note, Use template, Draft reply with LLM, Call via Osprey) moved from the always-visible header into a sticky bottom compose bar triggered by a ＋ New toggle. Reduces visual clutter when just reading the thread.
• Home view — "Skip review" checkbox — when adding jobs by URL, a checkbox (default on) sends them directly to the Apply queue, bypassing Job Review.
• ContactsView — sync status — shows last completed sync time and a spinner when an email sync is running.
• imap_sync: Indeed alert parser — parse_indeed_alert() extracts job title, company, location, salary, and canonical URL from Indeed Job Alert digest emails.
• scrape_url: Oracle HCM support — Playwright-based scraper for Oracle HCM CandidateExperience portals (React SPAs requiring JS execution).
• manage.sh — compose engine auto-detection (docker compose / podman compose / podman-compose), build command, and cloud/demo stack shortcuts.
• theme.css — --color-overlay token for modal/dialog backdrops.

Fixed

• Messages view layout — changed height: 100% to height: 100dvh with a mobile override for the 56px tab bar. height: 100% was resolving to "shrink-wrap" because .app-main has no explicit height; compose bar is now correctly pinned to the bottom.
• Accessibility: danger button contrast — btn--danger used color: white on --app-accent (Talon Orange), yielding 2.8:1 contrast (fails WCAG AA 4.5:1 for normal text). Fixed to color: var(--app-accent-text) (dark navy, 5.5:1).
• Accessibility: warning badge contrast — tab-badge in Job Review used color: white on --color-warning (amber). Same fix applied.
• Theme: Interviews signal banners — hardcoded rgba(245,158,11,…) / rgba(39,174,…) / rgba(192,57,…) replaced with color-mix() against --color-warning/success/error.
• Theme: Interviews signal count — color: #e67e22 hardcode replaced with var(--app-accent).
• Theme: References academic tag chip — color: #7c3aed hardcode replaced with var(--status-synced); background uses color-mix() with the same token.
• Theme: Interviews signal-move button — color: #fff on --color-primary fails in dark mode (light green bg); fixed to var(--color-text-inverse).
• Modal backdrops — rgba(0,0,0,0.5) replaced with var(--color-overlay) for theme consistency.

---

[0.9.3] — 2026-05-05

Added

• Editable resume review — proposed summary and experience bullets in the review modal are now editable text areas. Edits flow through apply_review_decisions() and override the LLM output in the final resume struct. Preview textarea in Apply Workspace is also editable, with manual changes preserved through the approve step via preview_text_override.

Fixed

• Double bullets in resume optimizer — _section_text_for_prompt now strips existing bullet characters before prefixing with •, and _reparse_experience_bullets uses a greedy strip regex so • • patterns can no longer survive parsing.
• Asterisk markup in summary — added _clean_summary_markup() to strip LLM-generated markdown bullet chars (*, -, etc.) from career summary output; injected no-markdown rule into the LLM prompt's CRITICAL RULES list.
• Light theme dark CSS bleed — peregrine.css media dark override now scoped to :root:not([data-theme]) (auto mode only) instead of :root:not([data-theme="hacker"]). Fixes dark navy --app-primary-light/--app-accent-light bleeding into light themes (light, solarized-light, colorblind) on dark-OS machines.

---

[0.9.2] — 2026-05-02

Added

• Cover letter training export (#111) — opt-in consent gate (training_export_opt_in in user.yaml, default off) lets users export applied-job cover letters as Alpaca-format JSONL for local fine-tuning. Per-job exclude/restore curation in Settings → Fine-Tune. Streaming JSONL download merges DB pairs with any previously uploaded file pairs. Cloud fine-tune Phase 2 stub (501) reserved for cf-orch integration.
• WizardTrainingStep — new onboarding consent step inserted between Resume and Identity; skippable, opt-in default off, cloud-aware privacy copy.
• a11y: confirmed-state toggle (no optimistic DOM divergence), visible Premium tier gate with upgrade link, aria-live region on pairs list, cloud-aware consent copy.

---

[0.9.0] — 2026-04-20

Added

• Messaging tab (#74) — per-job communication timeline replacing /contacts. Unified view of IMAP emails (job_contacts) and manually logged entries (messages). Log calls and in-person notes with timestamp. Message template library with 4 built-in templates (follow-up, thank-you, accommodation request, withdrawal) and user-created templates with {{token}} substitution. LLM draft reply for inbound emails (BYOK-unlockable, BSL 1.1). Draft approval flow with inline editing and one-click clipboard copy. Osprey IVR stub button (Phase 2 placeholder with easter egg). migrations/008_messaging.sql.
• Public demo experience (#103) — full read-only demo mode at demo.circuitforge.tech/peregrine. IS_DEMO=true write-blocks all mutating API endpoints with a toast notification. Ephemeral seed data via tmpfs + demo/seed.sql (resets on container start). WelcomeModal on first visit (localStorage-gated). Per-view HintChips guiding new users through the job search flow (localStorage-dismissed). DemoBanner with accessible CTA buttons (WCAG-compliant contrast in light and dark themes). migrations/006_missing_columns.sql.
• References tracker and recommendation letter system (#96) — track professional references and generate LLM-drafted recommendation request letters.
• Shadow listing detector — flags duplicate or aggregator-reposted job listings.
• Hired feedback widget — capture post-hire notes and retrospective feedback on jobs.
• Interview prep Q&A — LLM-generated practice questions for the selected job.
• Resume library ↔ profile sync — POST /api/resumes/{id}/apply-to-profile pushes a library resume into the active profile; PUT /api/settings/resume syncs edits back to the default library entry. ResumeSyncConfirmModal shows a before/after diff. ResumeProfileView extended with career summary, education, and achievements sections. migrations/007_resume_sync.sql adds synced_at to resumes.
• Plausible analytics — lightweight privacy-preserving analytics in Vue SPA and docs.
• cf_text / cf_voice LLM backends — wire trunk service backends in llm.yaml.
• Mission alignment domains — load preferred company domains from config/mission_domains.yaml rather than hardcoded values.
• GitHub Actions CI — workflow for public credibility badge (ci.yml).
• CF_APP_NAME cloud annotation — coordinator pipeline attribution for multi-product cloud deployments.

Changed

• /contacts route now redirects to /messages; nav item renamed "Messages" → "Contacts" label removed. ContactsView.vue preserved for reference, router points to MessagingView.
• Survey /analyze endpoint is now fully async via the task queue (no blocking LLM call on the request thread).
• nginx config adds /peregrine/ base-path routing for subdirectory deployments.
• compose.demo.yml updated for Vue/FastAPI architecture with tmpfs demo volume.

Fixed

• Tier bypass and draft body persistence after page navigation.
• canDraftLlm cleanup and message list limit cap.
• DemoBanner button contrast — semantic surface token instead of hardcoded white.
• Period split in profile_to_library now handles ISO date strings containing hyphens.
• Cloud startup sweeps all user DBs for pending migrations on deploy.
• Resume import strips CID glyph references via resume_parser extractors.
• Survey and interview tests updated for hired_feedback column and async analyze flow.

---

[0.8.6] — 2026-04-12

Added

• Resume Review Modal — paged tabbed dialog replaces the inline resume review section in the Apply workspace. Pages through Skills diff, Summary diff, one page per experience entry, and a Confirm summary. Color-coded tab status: unvisited (gray), in-progress (indigo), accepted (green), partial (amber), skipped (slate). Full ARIA tabs pattern with focus trap and Teleport to body.
• Resume Library — new /resumes page for managing saved resumes. Two-column layout: list sidebar + full-text preview pane. Supports import (.txt, .pdf, .docx, .odt, .yaml), rename (Edit), set as default, download (txt/pdf/yaml), and delete (guarded: disabled when only resume or is default). 5 MB upload limit.
• ResumeLibraryCard — compact widget shown above the ATS Resume Optimizer in the Apply workspace. Displays the currently active resume for the job (job-specific or global default), with Switch and Manage deep links.
• Resume library API — GET/POST /api/resumes, GET/PATCH/DELETE /api/resumes/{id}, POST /api/resumes/{id}/set-default, POST /api/resumes/import, GET/PATCH /api/jobs/{job_id}/resume. approve_resume extended with save_to_library + resume_name params to save optimized resumes directly.
• resumes DB migration — migrations/005_resumes_table.sql adds resumes table (10 columns) and resume_id FK on jobs.
• Resumes nav link — Document icon entry added after Apply in the main nav.

Changed

• Resume optimizer "Awaiting review" state now triggers the Review Modal instead of rendering an inline diff; save-to-library checkbox and name input surfaced on the preview confirmation step.

---

[0.8.5] — 2026-04-02

Added

• Vue onboarding wizard — 7-step first-run setup replaces the Streamlit wizard in the Vue SPA: Hardware detection → Tier → Resume upload/build → Identity → Inference & API keys → Search preferences → Integrations. Progress saves to user.yaml on every step; crash-recovery resumes from the last completed step.
• Wizard API endpoints — GET /api/wizard/status, POST /api/wizard/step, GET /api/wizard/hardware, POST /api/wizard/inference/test, POST /api/wizard/complete. Inference test always soft-fails so Ollama being unreachable never blocks setup completion.
• Cloud auto-skip — cloud instances automatically complete steps 1 (hardware), 2 (tier), and 5 (inference) and drop the user directly on the Resume step.
• wizardGuard router gate — all Vue routes require wizard completion; completed users are bounced away from /setup to /.
• Chip-input search step — job titles and locations entered as press-Enter/comma chips; validates at least one title before advancing.
• Integrations tile grid — optional step 7 shows Notion, Calendar, Slack, Discord, Drive with paid-tier badges; skippable on Finish.

Fixed

• User config isolation: dangerous fallback removed — _user_yaml_path() fell back to /devl/job-seeker/config/user.yaml (legacy profile) when user.yaml didn't exist at the expected path; new users now get an empty dict instead of another user's data. Affects profile, resume, search, and all wizard endpoints.
• Resume path not user-isolated — RESUME_PATH = Path("config/plain_text_resume.yaml") was a relative CWD path shared across all users. Replaced with _resume_path() derived from _user_yaml_path() / STAGING_DB.
• Resume upload silently returned empty data — upload_resume was passing a file path string to structure_resume() which expects raw text; now reads bytes and dispatches to the correct extractor (extract_text_from_pdf / _docx / _odt).
• Wizard resume step read wrong envelope field — WizardResumeStep.vue read data.experience but the upload response wraps parsed data under data.data.

---

[0.8.4] — 2026-04-02

Fixed

• Cloud: cover letter used wrong user's profile — generate_cover_letter.generate() loaded _profile from the global config/user.yaml at module import time, so all cloud users got the default user's name, voice, and mission preferences in their generated letters. generate() now accepts a user_yaml_path parameter; task_runner derives it from the per-user config directory (db_path/../config/user.yaml) and passes it through. _build_system_context, _build_mission_notes, detect_mission_alignment, build_prompt, and _trim_to_letter_end all accept a profile override so the per-call profile is used end-to-end without breaking CLI mode.
• Apply Workspace: hardcoded config paths in cloud mode — 4_Apply.py was loading _USER_YAML and RESUME_YAML from the repo-root config/ before resolve_session() ran, so cloud users saw the global (Meg's) resume in the Apply tab. Both paths now derive from get_config_dir() after session resolution.

Changed

• Vue SPA open to all tiers — Vue 3 frontend is no longer gated behind the beta flag; all tier users can switch to the Vue UI from Settings.
• LLM model candidates — vllm backend now tries Qwen2.5-3B first, Phi-4-mini as fallback (was reversed). cf_orch allocation block added to vllm config.
• Preflight — removed vllm from Docker adoption list; vllm is now managed entirely by cf-orch and should not be stubbed by preflight.

---

[0.8.3] — 2026-04-01

Fixed

• CI: Forgejo auth — GitHub Actions pip install was failing to fetch circuitforge-core from the private Forgejo VCS URL. Added FORGEJO_TOKEN repository secret and a git config insteadOf step to inject credentials before pip install.
• CI: settings API tests — 6 test_dev_api_settings PUT/POST tests were returning HTTP 500 in CI because _user_yaml_path() read the module-level DB_PATH constant (frozen at import time), so monkeypatch.setenv("STAGING_DB") had no effect. Fixed by reading os.environ at call time.

---

[0.8.2] — 2026-04-01

Fixed

• CI pipeline — pip install -r requirements.txt was failing in GitHub Actions because -e ../circuitforge-core requires a sibling directory that doesn't exist in a single-repo checkout. Replaced with a git+https:// VCS URL fallback; Dockerfile.cfcore still installs from the local COPY to avoid redundant network fetches during Docker builds.
• Vue-nav reload loop — sync_ui_cookie() was calling window.parent.location.reload() on every render when user.yaml has ui_preference: vue but no Caddy proxy is in the traffic path (test instances, bare Docker). Gated the reload on PEREGRINE_CADDY_PROXY=1; instances without the env var set the cookie silently and skip the reload.

Changed

• cfcore VRAM lease integration — the task scheduler now acquires a VRAM lease from the cf-orch coordinator before running a batch of LLM tasks and releases it when the batch completes. Visible in the coordinator dashboard at :7700.
• CF_ORCH_URL env var — scheduler reads coordinator address from CF_ORCH_URL (default http://localhost:7700); set to http://host.docker.internal:7700 in Docker compose files so containers can reach the host coordinator.
• All compose files on Dockerfile.cfcore — compose.yml, compose.cloud.yml, and compose.test-cfcore.yml all use the parent-context build. build: . is removed from compose.yml.

---

[0.8.1] — 2026-04-01

Fixed

• Job title suggester silent failure — when the LLM returned empty arrays or non-JSON text, the spinner would complete with zero UI feedback. Now shows an explicit "No new suggestions found" info message with a resume-upload hint for new users who haven't uploaded a resume yet.
• Suggester exception handling — catch Exception instead of only RuntimeError so connection errors and FileNotFoundError (missing llm.yaml) surface as error messages rather than crashing the page silently.

Added

• Dockerfile.cfcore — parent-context Dockerfile that copies circuitforge-core/ alongside peregrine/ before pip install, resolving the -e ../circuitforge-core editable requirement inside Docker.
• compose.test-cfcore.yml — single-user test instance on port 8516 for smoke-testing cfcore shim integration before promoting to the cloud instance.

---

[0.8.0] — 2026-04-01

Added

• ATS Resume Optimizer (gap report free; LLM rewrite paid+)

  • scripts/resume_optimizer.py — full pipeline: TF-IDF gap extraction → prioritize_gaps → rewrite_for_ats → hallucination guard (anchor-set diffing on employers, institutions, and dates)
  • scripts/db.py — optimized_resume + ats_gap_report columns; save_optimized_resume / get_optimized_resume helpers
  • GET /api/jobs/{id}/resume_optimizer — fetch gap report + rewrite
  • POST /api/jobs/{id}/resume_optimizer/generate — queue rewrite task
  • GET /api/jobs/{id}/resume_optimizer/task — poll task status
  • web/src/components/ResumeOptimizerPanel.vue — gap report (all tiers), LLM rewrite section (paid+), hallucination warning badge, .txt download
  • ResumeOptimizerPanel integrated into ApplyWorkspace

• Vue SPA full merge (closes #8) — feature/vue-spa merged to main

  • dev-api.py — full FastAPI backend (settings, jobs, interviews, prep, survey, digest, resume optimizer); cloud session middleware (JWT → per-user SQLite); BYOK credential store
  • dev_api.py — symlink → dev-api.py for importable module alias
  • scripts/job_ranker.py — two-stage ranking for /api/jobs/stack
  • scripts/credential_store.py — per-user BYOK API key management
  • scripts/user_profile.py — load_user_profile / save_user_profile
  • web/src/components/TaskIndicator.vue + web/src/stores/tasks.ts — live background task queue display
  • web/public/ — peregrine logo assets (SVG + PNG)

• API test suite — 5 new test modules (622 tests total)

  • tests/test_dev_api_settings.py (38 tests)
  • tests/test_dev_api_interviews.py, test_dev_api_prep.py, test_dev_api_survey.py, test_dev_api_digest.py

Fixed

• Cloud DB routing — app/pages/1_Job_Review.py, 5_Interviews.py, 6_Interview_Prep.py, 7_Survey.py were hardcoding DEFAULT_DB; now use get_db_path() for correct per-user routing in cloud mode (#24)
• Test isolation — importlib.reload(dev_api) in digest/interviews fixtures reset all module globals, silently breaking monkeypatch.setattr in subsequent test files; replaced with targeted monkeypatch.setattr(dev_api, "DB_PATH", tmp_db) (#26)

---

[0.7.0] — 2026-03-22

Added

• Vue 3 SPA — beta access for paid tier — The new Vue 3 frontend (built with Vite + UnoCSS) is now merged into main and available to paid-tier subscribers as an opt-in beta. The Streamlit UI remains the default and will continue to receive full support.

  • web/ — full Vue 3 SPA source (components, stores, router, composables, views) from feature/vue-spa
  • web/src/components/ClassicUIButton.vue — one-click switch back to the Classic (Streamlit) UI; sets prgn_ui=streamlit cookie and appends ?prgn_switch=streamlit so user.yaml stays in sync
  • web/src/composables/useFeatureFlag.ts — reads prgn_demo_tier cookie for demo toolbar visual consistency (display-only, not an authoritative gate)

• UI switcher — Reddit-style opt-in to the Vue SPA with durable preference persistence and graceful fallback.

  • app/components/ui_switcher.py — sync_ui_cookie(), switch_ui(), render_banner(), render_settings_toggle()
  • scripts/user_profile.py — ui_preference field (streamlit | vue, default: streamlit) with round-trip save()
  • app/wizard/tiers.py — vue_ui_beta: "paid" feature key; demo_tier keyword arg on can_use() for thread-safe demo mode simulation
  • Banner (dismissible, paid tier only) + Settings → System → Deployment toggle
  • Caddy cookie routing: prgn_ui=vue → nginx Vue SPA; absent/streamlit → Streamlit. 502 fallback clears cookie and redirects with ?ui_fallback=1

• Demo toolbar — slim full-width tier-simulation bar for DEMO_MODE instances. Free / Paid / Premium pills let demo visitors explore all feature tiers without an account. Persists via prgn_demo_tier cookie. Default: Paid (most compelling first impression). app/components/demo_toolbar.py

• Docker web service — multi-stage nginx container serving the Vue SPA dist/ build. Added to compose.yml (port 8506), compose.demo.yml (port 8507), compose.cloud.yml (port 8508). manage.sh build now includes the web service alongside app.

Changed

• Caddy routing — menagerie.circuitforge.tech and demo.circuitforge.tech peregrine blocks now inspect the prgn_ui cookie and fan-out to the Vue SPA service or Streamlit accordingly.

---

[0.6.2] — 2026-03-18

Added

• Playwright E2E test harness — smoke + interaction test suite covering all three Peregrine instances (demo / cloud / local). Navigates every page, checks for DOM errors on load, clicks every interactable element, diffs errors before/after each click, and XFAIL-marks expected demo-mode failures so neutering-guard regressions are surfaced as XPASSes. Screenshots on failure.
  • tests/e2e/test_smoke.py — page-load error detection
  • tests/e2e/test_interactions.py — full click-through with XFAIL/XPASS bucketing
  • tests/e2e/conftest.py — Streamlit-aware wait helpers, error scanner, fixtures
  • tests/e2e/models.py — ErrorRecord, ModeConfig, diff_errors
  • tests/e2e/modes/ — per-mode configs (demo / cloud / local)
  • tests/e2e/pages/ — page objects for all 7 pages including Settings tabs

Fixed

• Demo: "Discovery failed" error on Home page load — task_runner.py now checks DEMO_MODE before importing discover.py; returns a friendly error immediately instead of crashing on missing search_profiles.yaml (#21)
• Demo: silent st.error() in collapsed Practice Q&A expander — Interview Prep no longer auto-triggers the LLM on page render in demo mode; shows an st.info placeholder instead, eliminating the hidden error element (#22)
• Cloud: auth wall shown to E2E test browser — cloud_session.py now falls back to the Cookie header when X-CF-Session is absent (direct access without Caddy). Playwright's set_extra_http_headers() does not propagate to WebSocket handshakes; cookies do. Test harness uses ctx.add_cookies().
• E2E error scanner returned empty text for collapsed expanders — switched from inner_text() (respects CSS display:none) to text_content() so errors inside collapsed Streamlit expanders are captured with their full text.

---

[0.6.1] — 2026-03-16

Fixed

• Keyword suggestions not visible on first render — ✨ Suggest in Settings → Search now calls st.rerun() after storing results; chips appear immediately without requiring a tab switch (#18)
• Wizard identity step required manual re-entry of resume data — step 4 (Identity) now prefills name, email, and phone from the parsed resume when those fields are blank; existing saved values are not overwritten (#17)
• "Send to Notion" hardcoded on Home dashboard — sync section now shows the connected provider name, or a "Set up a sync integration" prompt with a Settings link when no integration is configured (#16)
• test_generate_calls_llm_router flaky in full suite — resolved by queue optimizer merge; mock state pollution eliminated (#12)

---

[0.6.0] — 2026-03-16

Added

• Calendar integration — push interview events to Apple Calendar (CalDAV) or Google Calendar directly from the Interviews kanban. Idempotent: a second push updates the existing event rather than creating a duplicate. Button shows "📅 Add to Calendar" on first push and "🔄 Update Calendar" thereafter. Event title: {Stage}: {Job Title} @ {Company}; 1hr duration at noon UTC; job URL and company research brief included in event description.
  • scripts/calendar_push.py — push/update orchestration
  • scripts/integrations/apple_calendar.py — create_event() / update_event() via caldav + icalendar
  • scripts/integrations/google_calendar.py — create_event() / update_event() via google-api-python-client (service account); test() now makes a real API call
  • scripts/db.py — calendar_event_id TEXT column (auto-migration) + set_calendar_event_id() helper
  • environment.yml — pin caldav>=1.3, icalendar>=5.0, google-api-python-client>=2.0, google-auth>=2.0

---

[0.4.1] — 2026-03-13

Added

• LinkedIn profile import — one-click import from a public LinkedIn profile URL (Playwright headless Chrome, no login required) or from a LinkedIn data export zip. Staged to linkedin_stage.json so the profile is parsed once and reused across sessions without repeated network requests. Available on all tiers including Free.
  • scripts/linkedin_utils.py — HTML parser with ordered CSS selector fallbacks; extracts name, experience, education, skills, certifications, summary
  • scripts/linkedin_scraper.py — Playwright URL scraper + export zip CSV parser; atomic staging file write; URL validation; robust error handling
  • scripts/linkedin_parser.py — staging file reader; re-runs HTML parser on stored raw HTML so selector improvements apply without re-scraping
  • app/components/linkedin_import.py — shared Streamlit widget (status bar, preview, URL import, advanced zip upload) used by both wizard and Settings
  • Wizard step 3: new "🔗 LinkedIn" tab alongside Upload and Build Manually
  • Settings → Resume Profile: collapsible "Import from LinkedIn" expander
  • Dockerfile: Playwright Chromium install added to Docker image

Fixed

• Cloud mode perpetual onboarding loop — wizard gate in app.py now reads get_config_dir()/user.yaml (per-user in cloud, repo-level locally) instead of a hardcoded repo path; completing the wizard now correctly exits it in cloud mode
• Cloud resume YAML path — wizard step 3 writes resume to per-user CONFIG_DIR instead of the shared repo config/ (would have merged all cloud users' data)
• Cloud session redirect — missing/invalid session token now JS-redirects to circuitforge.tech/login instead of showing a raw error message
• Removed remaining AIHawk UI references (Home.py, 4_Apply.py, migrate.py)

---

[0.3.0] — 2026-03-06

Added

• Feedback button — in-app issue reporting with screenshot paste support; posts directly to Forgejo as structured issues; available from sidebar on all pages (app/feedback.py, scripts/feedback_api.py, app/components/paste_image.py)
• BYOK cloud backend detection — scripts/byok_guard.py: pure Python detection engine with full unit test coverage (18 tests); classifies backends as cloud or local based on type, base_url heuristic, and opt-out local: true flag
• BYOK activation warning — one-time acknowledgment required in Settings when a new cloud LLM backend is enabled; shows data inventory (what leaves your machine, what stays local), provider policy links; ack state persisted to config/user.yaml under byok_acknowledged_backends
• Sidebar cloud LLM indicator — amber badge on every page when any cloud backend is active; links to Settings; disappears when reverted to local-only config
• LLM suggest: search terms — three-angle analysis from resume (job titles, skills keywords, and exclude terms to filter irrelevant listings)
• LLM suggest: resume keywords — skills gap analysis against job descriptions
• LLM Suggest button in Settings → Search → Skills & Keywords section
• Backup/restore script (scripts/backup.py) — multi-instance and legacy support
• PRIVACY.md — short-form privacy notice linked from Settings

Changed

• Settings save button for LLM Backends now gates on cloud acknowledgment before writing config/llm.yaml

Fixed

• Settings widget crash on certain rerun paths
• Docker service controls in Settings → System tab
• DEFAULT_DB now respects STAGING_DB environment variable (was silently ignoring it)
• generate() in cover letter refinement now correctly passes max_tokens kwarg

Security / Privacy

• Full test suite anonymized — fictional "Alex Rivera" replaces all real personal data in test fixtures (tests/test_cover_letter.py, test_imap_sync.py, test_classifier_adapters.py, test_db.py)
• Complete PII scrub from git history: real name, email address, and phone number removed from all 161 commits across both branches via git filter-repo

---

[0.2.0] — 2026-02-26

Added

• Cover letter iterative refinement: "Refine with Feedback" expander in Apply Workspace; generate() accepts previous_result/feedback; task params passed through submit_task
• Expanded first-run wizard: 7-step onboarding with GPU detection, tier selection, resume upload/parsing, LLM inference test, search profile builder, integration cards
• Tier system: free / paid / premium feature gates (app/wizard/tiers.py)
• 13 integration drivers: Notion, Google Sheets, Airtable, Google Drive, Dropbox, OneDrive, MEGA, Nextcloud, Google Calendar, Apple Calendar, Slack, Discord, Home Assistant — with auto-discovery registry
• Resume parser: PDF (pdfplumber) and DOCX (python-docx) + LLM structuring
• wizard_generate background task type with iterative refinement (feedback loop)
• Dismissible setup banners on Home page (13 contextual prompts)
• Developer tab in Settings: tier override selectbox and wizard reset button
• Integrations tab in Settings: connect / test / disconnect all 12 non-Notion drivers
• HuggingFace token moved to Developer tab
• params column in background_tasks for wizard task payloads
• wizard_complete, wizard_step, tier, dev_tier_override, dismissed_banners, effective_tier added to UserProfile
• MkDocs documentation site (Material theme, 20 pages)
• LICENSE-MIT and LICENSE-BSL, CONTRIBUTING.md, CHANGELOG.md

Changed

• app.py wizard gate now checks wizard_complete flag in addition to file existence
• Settings tabs reorganised: Integrations tab added, Developer tab conditionally shown
• HF token removed from Services tab (now Developer-only)

Removed

• Dead app/pages/3_Resume_Editor.py (functionality lives in Settings → Resume Profile)

---

[0.1.0] — 2026-02-01

Added

• Initial release: JobSpy discovery pipeline, SQLite staging, Streamlit UI
• Job Review, Apply Workspace, Interviews kanban, Interview Prep, Survey Assistant
• LLM router with fallback chain (Ollama, vLLM, Claude Code wrapper, Anthropic)
• Notion sync, email sync with IMAP classifier, company research with SearXNG
• Background task runner with daemon threads
• Vision service (moondream2) for survey screenshot analysis
• Adzuna, The Ladders, and Craigslist custom board scrapers
• Docker Compose profiles: remote, cpu, single-gpu, dual-gpu
• setup.sh cross-platform dependency installer
• scripts/preflight.py and scripts/migrate.py