@hadoku/jobplatform-worker 2.32.36 → 2.32.38

package/dist/index.js

@@ -532,6 +532,14 @@ const JobSummarySchema = z.object({
   vote: z.union([z.literal(1), z.literal(-1)]).nullable().optional(),
   vote_reasons: z.array(z.string()).optional()
 }).openapi("JobSummary");
+const PrioritySchema = z.union([z.literal(1), z.literal(2), z.literal(3)]);
+const TrackingSchema = z.object({
+  notes: z.string().nullable(),
+  priority: PrioritySchema.nullable(),
+  follow_up_at: z.string().nullable(),
+  contact_name: z.string().nullable(),
+  contact_email: z.string().nullable()
+}).openapi("Tracking");
 const JobDetailSchema = JobSummarySchema.extend({
   /**
    * Whether the form runner has an adapter for this posting. A PREDICTION
@@ -562,7 +570,9 @@ const JobDetailSchema = JobSummarySchema.extend({
   department: z.string().nullable(),
   scraper_used: z.string().nullable(),
   run_id: z.string().nullable(),
-  state_updated_at: z.string().nullable()
+  state_updated_at: z.string().nullable(),
+  /** V5 tracking; null when the caller has no state for this posting (or is anonymous). */
+  tracking: TrackingSchema.nullable()
 }).openapi("JobDetail");
 const FEEDBACK_REASONS = [
   // downvote-flavored
@@ -998,7 +1008,6 @@ const AddJobEventSchema = z.object({
   /** When it happened; defaults to now. */
   occurred_at: WhenSchema.optional()
 }).openapi("AddJobEvent");
-const PrioritySchema = z.union([z.literal(1), z.literal(2), z.literal(3)]);
 const SetTrackingSchema = z.object({
   notes: z.string().max(NOTE_MAX).nullable().optional(),
   priority: PrioritySchema.nullable().optional(),
@@ -1008,13 +1017,6 @@ const SetTrackingSchema = z.object({
 }).refine((o) => Object.values(o).some((v) => v !== void 0), {
   message: "name at least one field to change"
 }).openapi("SetTracking");
-const TrackingSchema = z.object({
-  notes: z.string().nullable(),
-  priority: PrioritySchema.nullable(),
-  follow_up_at: z.string().nullable(),
-  contact_name: z.string().nullable(),
-  contact_email: z.string().nullable()
-}).openapi("Tracking");
 const TrackingResponseSchema = S(
   z.object({ job_id: z.string(), tracking: TrackingSchema })
 ).openapi("TrackingResponse");
@@ -2579,6 +2581,74 @@ function scheduleRankBuild(c, db, profileId, profile) {
     rebuildRank(db, profileId, profile).finally(() => building.delete(profileId))
   );
 }
+function normalizeWorkplaceType(wt) {
+  if (wt === "on_site") return "onsite";
+  return wt;
+}
+function insertJobStatement(db, job, { source, board_slug, now }) {
+  const workplaceType = normalizeWorkplaceType(job.workplace_type);
+  const structuredMin = job.salary?.min ?? null;
+  const structuredMax = job.salary?.max ?? null;
+  const prose = structuredMin === null && structuredMax === null ? parseSalaryRange(job.description) : null;
+  const salaryMin = structuredMin ?? prose?.min ?? null;
+  const salaryMax = structuredMax ?? prose?.max ?? null;
+  const parsed = parseAtsSlug(job.url);
+  const ats = parsed.ats ?? (board_slug ? source : null);
+  const slug2 = board_slug ?? parsed.slug;
+  const slugSource = slug2 === null ? null : board_slug ? "scraped" : "guessed";
+  const role = classifyRole(job.title, job.description);
+  return db.prepare(
+    `INSERT OR IGNORE INTO jobs (
+				id, url, source_site, title, company, location,
+				job_type, workplace_type, salary_min, salary_max,
+				description, posted_date, application_url, department,
+				scraper_used, raw, scraped_at, last_seen_at, ats, slug,
+				role_track, role_level, slug_source, geo_keys
+			) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+  ).bind(
+    job.id,
+    job.url,
+    job.source_site,
+    job.title,
+    job.company,
+    job.location,
+    job.job_type,
+    workplaceType,
+    salaryMin,
+    salaryMax,
+    job.description,
+    job.posted_date ?? null,
+    job.application_url ?? null,
+    job.department ?? null,
+    job.scraper_used ?? null,
+    JSON.stringify(job.raw),
+    now,
+    now,
+    ats,
+    slug2,
+    role.track,
+    role.level,
+    slugSource,
+    geoKeys(job.location)
+  );
+}
+async function rankNewJobs(db) {
+  const ranked = await db.prepare("SELECT profile_id, criteria_hash, max_job_rowid FROM job_profile_rank_state").all();
+  if (ranked.results.length === 0) return;
+  const head2 = await jobsHead(db);
+  for (const state of ranked.results) {
+    const from = Number(state.max_job_rowid);
+    if (from >= head2) continue;
+    const profile = await loadScorableProfile(db, state.profile_id);
+    if (criteriaHash(profile) !== state.criteria_hash) continue;
+    const rows = await db.prepare(
+      `SELECT id, title, location, workplace_type, salary_max, role_level
+				 FROM jobs WHERE rowid > ? AND rowid <= ?`
+    ).bind(from, head2).all();
+    await writeRanks(db, state.profile_id, profile, rows.results);
+    await markRankBuilt(db, state.profile_id, profile, head2);
+  }
+}
 const app$4 = new OpenAPIHono();
 const CULL_DAYS = 60;
 const CULL_BATCH = 500;
@@ -2612,23 +2682,6 @@ async function stripStaleDescriptions(db) {
   ).bind(cutoff, cutoff).run();
   return res.meta?.changes ?? 0;
 }
-async function rankNewJobs(db) {
-  const ranked = await db.prepare("SELECT profile_id, criteria_hash, max_job_rowid FROM job_profile_rank_state").all();
-  if (ranked.results.length === 0) return;
-  const head2 = await jobsHead(db);
-  for (const state of ranked.results) {
-    const from = Number(state.max_job_rowid);
-    if (from >= head2) continue;
-    const profile = await loadScorableProfile(db, state.profile_id);
-    if (criteriaHash(profile) !== state.criteria_hash) continue;
-    const rows = await db.prepare(
-      `SELECT id, title, location, workplace_type, salary_max, role_level
-				 FROM jobs WHERE rowid > ? AND rowid <= ?`
-    ).bind(from, head2).all();
-    await writeRanks(db, state.profile_id, profile, rows.results);
-    await markRankBuilt(db, state.profile_id, profile, head2);
-  }
-}
 app$4.use("/ingest", requireMinTier("friend"));
 app$4.use("/ingest/backfill-slugs", requireMinTier("friend"));
 app$4.use("/ingest/backfill-roles", requireMinTier("friend"));
@@ -2638,10 +2691,6 @@ app$4.use("/ingest/cull", requireMinTier("friend"));
 app$4.use("/ingest/rebuild-rank", requireMinTier("friend"));
 app$4.use("/ingest/reconcile-mail", requireMinTier("friend"));
 app$4.use("/directives", requireMinTier("friend"));
-function normalizeWorkplaceType(wt) {
-  if (wt === "on_site") return "onsite";
-  return wt;
-}
 const ingestRoute = createRoute({
   method: "post",
   path: "/ingest",
@@ -2665,53 +2714,7 @@ app$4.openapi(ingestRoute, async (c) => {
   const { jobs, batch_number, is_final, source, board_slug } = c.req.valid("json");
   const db = c.env.JOB_PLATFORM_DB;
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  const stmts = jobs.map((job) => {
-    const workplaceType = normalizeWorkplaceType(job.workplace_type);
-    const structuredMin = job.salary?.min ?? null;
-    const structuredMax = job.salary?.max ?? null;
-    const prose = structuredMin === null && structuredMax === null ? parseSalaryRange(job.description) : null;
-    const salaryMin = structuredMin ?? prose?.min ?? null;
-    const salaryMax = structuredMax ?? prose?.max ?? null;
-    const parsed = parseAtsSlug(job.url);
-    const ats = parsed.ats ?? (board_slug ? source : null);
-    const slug2 = board_slug ?? parsed.slug;
-    const slugSource = slug2 === null ? null : board_slug ? "scraped" : "guessed";
-    const role = classifyRole(job.title, job.description);
-    return db.prepare(
-      `INSERT OR IGNORE INTO jobs (
-					id, url, source_site, title, company, location,
-					job_type, workplace_type, salary_min, salary_max,
-					description, posted_date, application_url, department,
-					scraper_used, raw, scraped_at, last_seen_at, ats, slug,
-					role_track, role_level, slug_source, geo_keys
-				) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
-    ).bind(
-      job.id,
-      job.url,
-      job.source_site,
-      job.title,
-      job.company,
-      job.location,
-      job.job_type,
-      workplaceType,
-      salaryMin,
-      salaryMax,
-      job.description,
-      job.posted_date ?? null,
-      job.application_url ?? null,
-      job.department ?? null,
-      job.scraper_used ?? null,
-      JSON.stringify(job.raw),
-      now,
-      now,
-      ats,
-      slug2,
-      role.track,
-      role.level,
-      slugSource,
-      geoKeys(job.location)
-    );
-  });
+  const stmts = jobs.map((job) => insertJobStatement(db, job, { source, board_slug, now }));
   const inserted = [];
   startTime(c, "insert");
   for (let i = 0; i < stmts.length; i += INGEST_BATCH_CHUNK) {
@@ -3399,6 +3402,34 @@ async function triggerSearch(env) {
     );
   }
 }
+function scraperMessage(body) {
+  try {
+    const parsed = JSON.parse(body);
+    if (typeof parsed.detail === "string") return parsed.detail;
+    if (typeof parsed.error?.message === "string") return parsed.error.message;
+  } catch {
+  }
+  return null;
+}
+async function extractPosting(env, url, greenhouseSlug) {
+  const response = await scraperFetch(env, "/api/v1/jobboards/extract", {
+    method: "POST",
+    body: JSON.stringify(greenhouseSlug ? { url, greenhouse_slug: greenhouseSlug } : { url })
+  });
+  const text = await response.text();
+  if (!response.ok) {
+    throw new ScraperClientError(
+      scraperMessage(text) ?? `scraper /extract returned ${response.status}`,
+      response.status,
+      text
+    );
+  }
+  const json = JSON.parse(text);
+  if (!json.success || !json.data) {
+    throw new ScraperClientError("scraper /extract reported failure", 502, text);
+  }
+  return json.data;
+}
 const app$3 = new OpenAPIHono();
 app$3.use("/profiles", requireMinTier("friend"));
 app$3.use("/profiles/*", requireMinTier("friend"));
@@ -4425,42 +4456,354 @@ function applyTier(applicationUrl, ats) {
   if (KNOWN_UNSUPPORTED.some((h) => host === h || host.endsWith(`.${h}`))) return "unsupported";
   return "unknown";
 }
-function registerDetailRoute(app2) {
+const IDENTITY_ERRORS = {
+  404: {
+    description: "No such owner name, or no such job",
+    content: { "application/json": { schema: IdentityErrorResponseSchema } }
+  },
+  409: {
+    description: "That owner name has never signed in, or the posting is not in the pipeline",
+    content: { "application/json": { schema: IdentityErrorResponseSchema } }
+  },
+  503: {
+    description: "Identity could not be resolved right now — retry",
+    content: { "application/json": { schema: IdentityErrorResponseSchema } }
+  }
+};
+const FORBIDDEN$1 = {
+  description: "Forbidden",
+  content: { "application/json": { schema: IdentityErrorResponseSchema } }
+};
+const EVENT_COLS = "id, job_id, kind, from_state, to_state, note, occurred_at, created_at";
+const TRACKING_COLS = "notes, priority, follow_up_at, contact_name, contact_email";
+function stateOrNull(v) {
+  const s = asJobStateRead(v);
+  return s === "new" ? null : s;
+}
+function toEvent(r) {
+  return {
+    ...r,
+    kind: r.kind,
+    from_state: stateOrNull(r.from_state),
+    to_state: stateOrNull(r.to_state)
+  };
+}
+function asPriority(p) {
+  return p === 1 || p === 2 || p === 3 ? p : null;
+}
+function toTracking(r) {
+  return {
+    notes: r.notes,
+    priority: asPriority(r.priority),
+    follow_up_at: r.follow_up_at,
+    contact_name: r.contact_name,
+    contact_email: r.contact_email
+  };
+}
+function notInPipeline(id) {
+  return {
+    success: false,
+    error: "Conflict",
+    message: `Job '${id}' is not in your pipeline — set its state first (PUT /jobs/${id}/state)`
+  };
+}
+function jobNotFound(id) {
+  return { success: false, error: "Not found", message: `Job '${id}' not found` };
+}
+async function stateOf(db, jobId, userId) {
+  const row = await db.prepare(
+    `SELECT j.id, js.state FROM jobs j
+			 LEFT JOIN job_states js ON js.job_id = j.id AND js.user_id = ?
+			 WHERE j.id = ?`
+  ).bind(userId, jobId).first();
+  if (!row) return "missing";
+  return row.state ? "tracked" : "untracked";
+}
+function registerPipelineRoutes(app2) {
+  app2.get("/pipeline", gateAuthed);
+  app2.patch("/jobs/:id/tracking", gateAuthed);
+  app2.get("/jobs/:id/events", gateAuthed);
+  app2.post("/jobs/:id/events", gateAuthed);
+  app2.delete("/jobs/:id/events/:eventId", gateAuthed);
   app2.openapi(
     createRoute({
       method: "get",
-      path: "/jobs/{id}",
-      tags: ["Jobs"],
-      summary: "Get full job detail",
+      path: "/pipeline",
+      tags: ["Pipeline"],
+      summary: "Every posting in the caller's pipeline, most recently changed first",
       request: {
-        params: z.object({ id: z.string() }),
-        query: z.object({
-          profile_id: z.string().optional().openapi({ description: "Include score for this profile" })
+        query: ownerNameQuery.extend({
+          include_dismissed: z.enum(["true", "false"]).optional().openapi({
+            description: "Dismissed postings are left out unless this is true."
+          })
         })
       },
       responses: {
         200: {
-          description: "Job detail",
-          content: { "application/json": { schema: JobResponseSchema } }
+          description: "Pipeline",
+          content: { "application/json": { schema: PipelineResponseSchema } }
         },
-        404: {
-          description: "Not found",
-          content: { "application/json": { schema: ErrorResponseSchema } }
-        }
+        403: FORBIDDEN$1,
+        ...IDENTITY_ERRORS
+      }
+    }),
+    async (c) => {
+      const { ownerName, include_dismissed } = c.req.valid("query");
+      const who = await effectiveUserId(c, ownerName);
+      if (isEffectiveUserError(who)) return c.json(who.error.body, who.error.status);
+      const dismissed = include_dismissed === "true" ? "" : "AND js.state != 'dismissed'";
+      const rows = await c.env.JOB_PLATFORM_DB.prepare(
+        `SELECT js.job_id, j.title, j.company, j.location, j.workplace_type,
+				        j.salary_min, j.salary_max, j.url, j.posted_date,
+				        js.state, js.updated_at, js.variant_slug,
+				        js.notes, js.priority, js.follow_up_at, js.contact_name, js.contact_email,
+				        ap.status AS application_status,
+				        (SELECT MIN(e.occurred_at) FROM job_events e
+				          WHERE e.job_id = js.job_id AND e.user_id = js.user_id
+				            AND e.kind = 'state' AND e.to_state = 'applied') AS applied_at,
+				        (SELECT MAX(e.occurred_at) FROM job_events e
+				          WHERE e.job_id = js.job_id AND e.user_id = js.user_id) AS last_event_at
+				 FROM job_states js
+				 JOIN jobs j ON j.id = js.job_id
+				 LEFT JOIN applications ap ON ap.job_id = js.job_id AND ap.user_id = js.user_id
+				 WHERE js.user_id = ? ${dismissed}
+				 ORDER BY js.updated_at DESC`
+      ).bind(who.userId).all();
+      const items = rows.results.flatMap((r) => {
+        const state = stateOrNull(r.state);
+        if (!state) return [];
+        return [
+          {
+            job_id: r.job_id,
+            title: r.title,
+            company: r.company,
+            location: r.location,
+            workplace_type: r.workplace_type,
+            salary_min: r.salary_min,
+            salary_max: r.salary_max,
+            url: r.url,
+            posted_date: r.posted_date,
+            state,
+            updated_at: r.updated_at,
+            tracking: toTracking(r),
+            variant_slug: r.variant_slug,
+            application_status: asApplicationStatus(r.application_status),
+            applied_at: r.applied_at,
+            last_event_at: r.last_event_at
+          }
+        ];
+      });
+      return c.json({ success: true, data: { items } }, 200);
+    }
+  );
+  app2.openapi(
+    createRoute({
+      method: "patch",
+      path: "/jobs/{id}/tracking",
+      tags: ["Pipeline"],
+      summary: "Change what the caller tracks about one application; null clears a field",
+      request: {
+        params: z.object({ id: z.string() }),
+        query: ownerNameQuery,
+        body: { content: { "application/json": { schema: SetTrackingSchema } } }
+      },
+      responses: {
+        200: {
+          description: "Tracking after the change",
+          content: { "application/json": { schema: TrackingResponseSchema } }
+        },
+        403: FORBIDDEN$1,
+        ...IDENTITY_ERRORS
       }
     }),
     async (c) => {
       const { id } = c.req.valid("param");
-      const { profile_id } = c.req.valid("query");
+      const { ownerName } = c.req.valid("query");
+      const body = c.req.valid("json");
+      const who = await effectiveUserId(c, ownerName);
+      if (isEffectiveUserError(who)) return c.json(who.error.body, who.error.status);
       const db = c.env.JOB_PLATFORM_DB;
-      const row = await db.prepare("SELECT * FROM jobs WHERE id = ?").bind(id).first();
-      if (!row) {
-        return c.json(
-          { success: false, error: "Not found", message: `Job '${id}' not found` },
-          404
-        );
-      }
-      let score = 0;
+      const sets = [];
+      const binds = [];
+      for (const col of [
+        "notes",
+        "priority",
+        "follow_up_at",
+        "contact_name",
+        "contact_email"
+      ]) {
+        const v = body[col];
+        if (v === void 0) continue;
+        sets.push(`${col} = ?`);
+        binds.push(typeof v === "string" && v.trim() === "" ? null : v);
+      }
+      const now = (/* @__PURE__ */ new Date()).toISOString();
+      const row = await db.prepare(
+        `UPDATE job_states SET ${sets.join(", ")}, updated_at = ?
+					 WHERE job_id = ? AND user_id = ?
+					 RETURNING ${TRACKING_COLS}`
+      ).bind(...binds, now, id, who.userId).first();
+      if (!row) {
+        const s = await stateOf(db, id, who.userId);
+        return s === "missing" ? c.json(jobNotFound(id), 404) : c.json(notInPipeline(id), 409);
+      }
+      return c.json(
+        { success: true, data: { job_id: id, tracking: toTracking(row) } },
+        200
+      );
+    }
+  );
+  app2.openapi(
+    createRoute({
+      method: "get",
+      path: "/jobs/{id}/events",
+      tags: ["Pipeline"],
+      summary: "One posting's timeline for the caller, oldest first",
+      request: { params: z.object({ id: z.string() }), query: ownerNameQuery },
+      responses: {
+        200: {
+          description: "Timeline (empty for a posting with none)",
+          content: { "application/json": { schema: JobEventsResponseSchema } }
+        },
+        403: FORBIDDEN$1,
+        ...IDENTITY_ERRORS
+      }
+    }),
+    async (c) => {
+      const { id } = c.req.valid("param");
+      const { ownerName } = c.req.valid("query");
+      const who = await effectiveUserId(c, ownerName);
+      if (isEffectiveUserError(who)) return c.json(who.error.body, who.error.status);
+      const rows = await c.env.JOB_PLATFORM_DB.prepare(
+        `SELECT ${EVENT_COLS} FROM job_events
+				 WHERE job_id = ? AND user_id = ?
+				 ORDER BY occurred_at, id`
+      ).bind(id, who.userId).all();
+      return c.json({ success: true, data: { events: rows.results.map(toEvent) } }, 200);
+    }
+  );
+  app2.openapi(
+    createRoute({
+      method: "post",
+      path: "/jobs/{id}/events",
+      tags: ["Pipeline"],
+      summary: "Log something that happened on one application",
+      request: {
+        params: z.object({ id: z.string() }),
+        query: ownerNameQuery,
+        body: { content: { "application/json": { schema: AddJobEventSchema } } }
+      },
+      responses: {
+        201: {
+          description: "Logged",
+          content: { "application/json": { schema: JobEventResponseSchema } }
+        },
+        403: FORBIDDEN$1,
+        ...IDENTITY_ERRORS
+      }
+    }),
+    async (c) => {
+      const { id } = c.req.valid("param");
+      const { ownerName } = c.req.valid("query");
+      const body = c.req.valid("json");
+      const who = await effectiveUserId(c, ownerName);
+      if (isEffectiveUserError(who)) return c.json(who.error.body, who.error.status);
+      const db = c.env.JOB_PLATFORM_DB;
+      const s = await stateOf(db, id, who.userId);
+      if (s === "missing") return c.json(jobNotFound(id), 404);
+      if (s === "untracked") return c.json(notInPipeline(id), 409);
+      const now = (/* @__PURE__ */ new Date()).toISOString();
+      const occurred = body.occurred_at ? new Date(
+        body.occurred_at.length === 10 ? `${body.occurred_at}T00:00:00Z` : body.occurred_at
+      ).toISOString() : now;
+      const row = await db.prepare(
+        `INSERT INTO job_events
+					   (job_id, user_id, kind, from_state, to_state, note, occurred_at, created_at)
+					 VALUES (?, ?, ?, NULL, NULL, ?, ?, ?)
+					 RETURNING ${EVENT_COLS}`
+      ).bind(id, who.userId, body.kind, body.note, occurred, now).first();
+      if (!row) throw new Error("job_events INSERT … RETURNING returned no row");
+      return c.json({ success: true, data: { event: toEvent(row) } }, 201);
+    }
+  );
+  app2.openapi(
+    createRoute({
+      method: "delete",
+      path: "/jobs/{id}/events/{eventId}",
+      tags: ["Pipeline"],
+      summary: "Remove a note/interview/contact/follow-up the caller logged",
+      request: {
+        params: z.object({ id: z.string(), eventId: z.coerce.number().int().positive() }),
+        query: ownerNameQuery
+      },
+      responses: {
+        200: {
+          description: "Removed (or already absent)",
+          content: {
+            "application/json": {
+              schema: z.object({
+                success: z.literal(true),
+                data: z.object({ id: z.number().int(), deleted: z.boolean() })
+              }).openapi("DeleteJobEventResponse")
+            }
+          }
+        },
+        403: FORBIDDEN$1,
+        ...IDENTITY_ERRORS
+      }
+    }),
+    async (c) => {
+      const { id, eventId } = c.req.valid("param");
+      const { ownerName } = c.req.valid("query");
+      const who = await effectiveUserId(c, ownerName);
+      if (isEffectiveUserError(who)) return c.json(who.error.body, who.error.status);
+      const res = await c.env.JOB_PLATFORM_DB.prepare(
+        `DELETE FROM job_events
+				 WHERE id = ? AND job_id = ? AND user_id = ? AND kind != 'state'`
+      ).bind(eventId, id, who.userId).run();
+      return c.json(
+        { success: true, data: { id: eventId, deleted: (res.meta?.changes ?? 0) > 0 } },
+        200
+      );
+    }
+  );
+}
+function registerDetailRoute(app2) {
+  app2.openapi(
+    createRoute({
+      method: "get",
+      path: "/jobs/{id}",
+      tags: ["Jobs"],
+      summary: "Get full job detail",
+      request: {
+        params: z.object({ id: z.string() }),
+        query: z.object({
+          profile_id: z.string().optional().openapi({ description: "Include score for this profile" })
+        })
+      },
+      responses: {
+        200: {
+          description: "Job detail",
+          content: { "application/json": { schema: JobResponseSchema } }
+        },
+        404: {
+          description: "Not found",
+          content: { "application/json": { schema: ErrorResponseSchema } }
+        }
+      }
+    }),
+    async (c) => {
+      const { id } = c.req.valid("param");
+      const { profile_id } = c.req.valid("query");
+      const db = c.env.JOB_PLATFORM_DB;
+      const row = await db.prepare("SELECT * FROM jobs WHERE id = ?").bind(id).first();
+      if (!row) {
+        return c.json(
+          { success: false, error: "Not found", message: `Job '${id}' not found` },
+          404
+        );
+      }
+      let score = 0;
       let score_breakdown = { ...ZERO_BREAKDOWN };
       const roleLevel = asRoleLevel(row.role_level ?? null);
       if (profile_id) {
@@ -4482,6 +4825,7 @@ function registerDetailRoute(app2) {
       const userId = await maybeUserId(c);
       let state = null;
       let stateUpdatedAt = null;
+      let tracking = null;
       let applyVerified = false;
       if (userId && row.ats && row.slug) {
         const proven = await db.prepare(
@@ -4503,12 +4847,15 @@ function registerDetailRoute(app2) {
       let applicationStatus = null;
       if (userId) {
         const [stateRes, appRes] = await db.batch([
-          db.prepare("SELECT state, updated_at FROM job_states WHERE job_id = ? AND user_id = ?").bind(id, userId),
+          db.prepare(
+            `SELECT state, updated_at, ${TRACKING_COLS} FROM job_states WHERE job_id = ? AND user_id = ?`
+          ).bind(id, userId),
           db.prepare("SELECT status FROM applications WHERE job_id = ? AND user_id = ?").bind(id, userId)
         ]);
         const stateRow = stateRes.results[0];
         state = asJobStateRead(stateRow?.state);
         stateUpdatedAt = stateRow?.updated_at ?? null;
+        tracking = stateRow ? toTracking(stateRow) : null;
         const appRow = appRes.results[0];
         applicationStatus = appRow?.status ?? null;
       }
@@ -4544,7 +4891,8 @@ function registerDetailRoute(app2) {
         score_breakdown,
         state,
         application_status: asApplicationStatus(applicationStatus),
-        state_updated_at: stateUpdatedAt
+        state_updated_at: stateUpdatedAt,
+        tracking
       };
       return c.json({ success: true, data: { job } }, 200);
     }
@@ -5797,7 +6145,7 @@ async function delistedReason(db, jobId) {
   if (newest - seen <= DELISTED_LAG_MS) return null;
   return `this posting has not appeared in a scrape of the ${job.ats} board '${job.slug}' since ${job.last_seen_at}, while other jobs on that board were seen as recently as ${board.newest} — it looks taken down`;
 }
-const FORBIDDEN$1 = {
+const FORBIDDEN = {
   success: false,
   error: "Forbidden",
   message: "Authentication required"
@@ -6096,7 +6444,7 @@ function registerApplicationRoutes(app2) {
     }),
     async (c) => {
       const userId = await maybeUserId(c);
-      if (!userId) return c.json(FORBIDDEN$1, 403);
+      if (!userId) return c.json(FORBIDDEN, 403);
       const { id } = c.req.valid("param");
       const db = c.env.JOB_PLATFORM_DB;
       const existing = await db.prepare("SELECT * FROM applications WHERE id = ? AND user_id = ?").bind(id, userId).first();
@@ -6340,13 +6688,17 @@ function registerFillRoutes(app2) {
     );
   });
 }
-const IDENTITY_ERRORS = {
+const ERRORS$1 = {
+  403: {
+    description: "Forbidden",
+    content: { "application/json": { schema: IdentityErrorResponseSchema } }
+  },
   404: {
-    description: "No such owner name, or no such job",
+    description: "No such owner name",
     content: { "application/json": { schema: IdentityErrorResponseSchema } }
   },
   409: {
-    description: "That owner name has never signed in, or the posting is not in the pipeline",
+    description: "That owner name has never signed in",
     content: { "application/json": { schema: IdentityErrorResponseSchema } }
   },
   503: {
@@ -6354,326 +6706,10 @@ const IDENTITY_ERRORS = {
     content: { "application/json": { schema: IdentityErrorResponseSchema } }
   }
 };
-const FORBIDDEN = {
-  description: "Forbidden",
-  content: { "application/json": { schema: IdentityErrorResponseSchema } }
-};
-const EVENT_COLS = "id, job_id, kind, from_state, to_state, note, occurred_at, created_at";
-const TRACKING_COLS = "notes, priority, follow_up_at, contact_name, contact_email";
-function stateOrNull(v) {
-  const s = asJobStateRead(v);
-  return s === "new" ? null : s;
-}
-function toEvent(r) {
-  return {
-    ...r,
-    kind: r.kind,
-    from_state: stateOrNull(r.from_state),
-    to_state: stateOrNull(r.to_state)
-  };
-}
-function asPriority(p) {
-  return p === 1 || p === 2 || p === 3 ? p : null;
-}
-function toTracking(r) {
-  return {
-    notes: r.notes,
-    priority: asPriority(r.priority),
-    follow_up_at: r.follow_up_at,
-    contact_name: r.contact_name,
-    contact_email: r.contact_email
-  };
-}
-function notInPipeline(id) {
-  return {
-    success: false,
-    error: "Conflict",
-    message: `Job '${id}' is not in your pipeline — set its state first (PUT /jobs/${id}/state)`
-  };
-}
-function jobNotFound(id) {
-  return { success: false, error: "Not found", message: `Job '${id}' not found` };
-}
-async function stateOf(db, jobId, userId) {
-  const row = await db.prepare(
-    `SELECT j.id, js.state FROM jobs j
-			 LEFT JOIN job_states js ON js.job_id = j.id AND js.user_id = ?
-			 WHERE j.id = ?`
-  ).bind(userId, jobId).first();
-  if (!row) return "missing";
-  return row.state ? "tracked" : "untracked";
-}
-function registerPipelineRoutes(app2) {
-  app2.get("/pipeline", gateAuthed);
-  app2.patch("/jobs/:id/tracking", gateAuthed);
-  app2.get("/jobs/:id/events", gateAuthed);
-  app2.post("/jobs/:id/events", gateAuthed);
-  app2.delete("/jobs/:id/events/:eventId", gateAuthed);
-  app2.openapi(
-    createRoute({
-      method: "get",
-      path: "/pipeline",
-      tags: ["Pipeline"],
-      summary: "Every posting in the caller's pipeline, most recently changed first",
-      request: {
-        query: ownerNameQuery.extend({
-          include_dismissed: z.enum(["true", "false"]).optional().openapi({
-            description: "Dismissed postings are left out unless this is true."
-          })
-        })
-      },
-      responses: {
-        200: {
-          description: "Pipeline",
-          content: { "application/json": { schema: PipelineResponseSchema } }
-        },
-        403: FORBIDDEN,
-        ...IDENTITY_ERRORS
-      }
-    }),
-    async (c) => {
-      const { ownerName, include_dismissed } = c.req.valid("query");
-      const who = await effectiveUserId(c, ownerName);
-      if (isEffectiveUserError(who)) return c.json(who.error.body, who.error.status);
-      const dismissed = include_dismissed === "true" ? "" : "AND js.state != 'dismissed'";
-      const rows = await c.env.JOB_PLATFORM_DB.prepare(
-        `SELECT js.job_id, j.title, j.company, j.location, j.workplace_type,
-				        j.salary_min, j.salary_max, j.url, j.posted_date,
-				        js.state, js.updated_at, js.variant_slug,
-				        js.notes, js.priority, js.follow_up_at, js.contact_name, js.contact_email,
-				        ap.status AS application_status,
-				        (SELECT MIN(e.occurred_at) FROM job_events e
-				          WHERE e.job_id = js.job_id AND e.user_id = js.user_id
-				            AND e.kind = 'state' AND e.to_state = 'applied') AS applied_at,
-				        (SELECT MAX(e.occurred_at) FROM job_events e
-				          WHERE e.job_id = js.job_id AND e.user_id = js.user_id) AS last_event_at
-				 FROM job_states js
-				 JOIN jobs j ON j.id = js.job_id
-				 LEFT JOIN applications ap ON ap.job_id = js.job_id AND ap.user_id = js.user_id
-				 WHERE js.user_id = ? ${dismissed}
-				 ORDER BY js.updated_at DESC`
-      ).bind(who.userId).all();
-      const items = rows.results.flatMap((r) => {
-        const state = stateOrNull(r.state);
-        if (!state) return [];
-        return [
-          {
-            job_id: r.job_id,
-            title: r.title,
-            company: r.company,
-            location: r.location,
-            workplace_type: r.workplace_type,
-            salary_min: r.salary_min,
-            salary_max: r.salary_max,
-            url: r.url,
-            posted_date: r.posted_date,
-            state,
-            updated_at: r.updated_at,
-            tracking: toTracking(r),
-            variant_slug: r.variant_slug,
-            application_status: asApplicationStatus(r.application_status),
-            applied_at: r.applied_at,
-            last_event_at: r.last_event_at
-          }
-        ];
-      });
-      return c.json({ success: true, data: { items } }, 200);
-    }
-  );
-  app2.openapi(
-    createRoute({
-      method: "patch",
-      path: "/jobs/{id}/tracking",
-      tags: ["Pipeline"],
-      summary: "Change what the caller tracks about one application; null clears a field",
-      request: {
-        params: z.object({ id: z.string() }),
-        query: ownerNameQuery,
-        body: { content: { "application/json": { schema: SetTrackingSchema } } }
-      },
-      responses: {
-        200: {
-          description: "Tracking after the change",
-          content: { "application/json": { schema: TrackingResponseSchema } }
-        },
-        403: FORBIDDEN,
-        ...IDENTITY_ERRORS
-      }
-    }),
-    async (c) => {
-      const { id } = c.req.valid("param");
-      const { ownerName } = c.req.valid("query");
-      const body = c.req.valid("json");
-      const who = await effectiveUserId(c, ownerName);
-      if (isEffectiveUserError(who)) return c.json(who.error.body, who.error.status);
-      const db = c.env.JOB_PLATFORM_DB;
-      const sets = [];
-      const binds = [];
-      for (const col of [
-        "notes",
-        "priority",
-        "follow_up_at",
-        "contact_name",
-        "contact_email"
-      ]) {
-        const v = body[col];
-        if (v === void 0) continue;
-        sets.push(`${col} = ?`);
-        binds.push(typeof v === "string" && v.trim() === "" ? null : v);
-      }
-      const now = (/* @__PURE__ */ new Date()).toISOString();
-      const row = await db.prepare(
-        `UPDATE job_states SET ${sets.join(", ")}, updated_at = ?
-					 WHERE job_id = ? AND user_id = ?
-					 RETURNING ${TRACKING_COLS}`
-      ).bind(...binds, now, id, who.userId).first();
-      if (!row) {
-        const s = await stateOf(db, id, who.userId);
-        return s === "missing" ? c.json(jobNotFound(id), 404) : c.json(notInPipeline(id), 409);
-      }
-      return c.json(
-        { success: true, data: { job_id: id, tracking: toTracking(row) } },
-        200
-      );
-    }
-  );
-  app2.openapi(
-    createRoute({
-      method: "get",
-      path: "/jobs/{id}/events",
-      tags: ["Pipeline"],
-      summary: "One posting's timeline for the caller, oldest first",
-      request: { params: z.object({ id: z.string() }), query: ownerNameQuery },
-      responses: {
-        200: {
-          description: "Timeline (empty for a posting with none)",
-          content: { "application/json": { schema: JobEventsResponseSchema } }
-        },
-        403: FORBIDDEN,
-        ...IDENTITY_ERRORS
-      }
-    }),
-    async (c) => {
-      const { id } = c.req.valid("param");
-      const { ownerName } = c.req.valid("query");
-      const who = await effectiveUserId(c, ownerName);
-      if (isEffectiveUserError(who)) return c.json(who.error.body, who.error.status);
-      const rows = await c.env.JOB_PLATFORM_DB.prepare(
-        `SELECT ${EVENT_COLS} FROM job_events
-				 WHERE job_id = ? AND user_id = ?
-				 ORDER BY occurred_at, id`
-      ).bind(id, who.userId).all();
-      return c.json({ success: true, data: { events: rows.results.map(toEvent) } }, 200);
-    }
-  );
-  app2.openapi(
-    createRoute({
-      method: "post",
-      path: "/jobs/{id}/events",
-      tags: ["Pipeline"],
-      summary: "Log something that happened on one application",
-      request: {
-        params: z.object({ id: z.string() }),
-        query: ownerNameQuery,
-        body: { content: { "application/json": { schema: AddJobEventSchema } } }
-      },
-      responses: {
-        201: {
-          description: "Logged",
-          content: { "application/json": { schema: JobEventResponseSchema } }
-        },
-        403: FORBIDDEN,
-        ...IDENTITY_ERRORS
-      }
-    }),
-    async (c) => {
-      const { id } = c.req.valid("param");
-      const { ownerName } = c.req.valid("query");
-      const body = c.req.valid("json");
-      const who = await effectiveUserId(c, ownerName);
-      if (isEffectiveUserError(who)) return c.json(who.error.body, who.error.status);
-      const db = c.env.JOB_PLATFORM_DB;
-      const s = await stateOf(db, id, who.userId);
-      if (s === "missing") return c.json(jobNotFound(id), 404);
-      if (s === "untracked") return c.json(notInPipeline(id), 409);
-      const now = (/* @__PURE__ */ new Date()).toISOString();
-      const occurred = body.occurred_at ? new Date(
-        body.occurred_at.length === 10 ? `${body.occurred_at}T00:00:00Z` : body.occurred_at
-      ).toISOString() : now;
-      const row = await db.prepare(
-        `INSERT INTO job_events
-					   (job_id, user_id, kind, from_state, to_state, note, occurred_at, created_at)
-					 VALUES (?, ?, ?, NULL, NULL, ?, ?, ?)
-					 RETURNING ${EVENT_COLS}`
-      ).bind(id, who.userId, body.kind, body.note, occurred, now).first();
-      if (!row) throw new Error("job_events INSERT … RETURNING returned no row");
-      return c.json({ success: true, data: { event: toEvent(row) } }, 201);
-    }
-  );
-  app2.openapi(
-    createRoute({
-      method: "delete",
-      path: "/jobs/{id}/events/{eventId}",
-      tags: ["Pipeline"],
-      summary: "Remove a note/interview/contact/follow-up the caller logged",
-      request: {
-        params: z.object({ id: z.string(), eventId: z.coerce.number().int().positive() }),
-        query: ownerNameQuery
-      },
-      responses: {
-        200: {
-          description: "Removed (or already absent)",
-          content: {
-            "application/json": {
-              schema: z.object({
-                success: z.literal(true),
-                data: z.object({ id: z.number().int(), deleted: z.boolean() })
-              }).openapi("DeleteJobEventResponse")
-            }
-          }
-        },
-        403: FORBIDDEN,
-        ...IDENTITY_ERRORS
-      }
-    }),
-    async (c) => {
-      const { id, eventId } = c.req.valid("param");
-      const { ownerName } = c.req.valid("query");
-      const who = await effectiveUserId(c, ownerName);
-      if (isEffectiveUserError(who)) return c.json(who.error.body, who.error.status);
-      const res = await c.env.JOB_PLATFORM_DB.prepare(
-        `DELETE FROM job_events
-				 WHERE id = ? AND job_id = ? AND user_id = ? AND kind != 'state'`
-      ).bind(eventId, id, who.userId).run();
-      return c.json(
-        { success: true, data: { id: eventId, deleted: (res.meta?.changes ?? 0) > 0 } },
-        200
-      );
-    }
-  );
-}
-const ERRORS$1 = {
-  403: {
-    description: "Forbidden",
-    content: { "application/json": { schema: IdentityErrorResponseSchema } }
-  },
-  404: {
-    description: "No such owner name",
-    content: { "application/json": { schema: IdentityErrorResponseSchema } }
-  },
-  409: {
-    description: "That owner name has never signed in",
-    content: { "application/json": { schema: IdentityErrorResponseSchema } }
-  },
-  503: {
-    description: "Identity could not be resolved right now — retry",
-    content: { "application/json": { schema: IdentityErrorResponseSchema } }
-  }
-};
-function registerBlockedRoutes(app2) {
-  app2.get("/blocked-companies", gateAuthed);
-  app2.put("/blocked-companies", gateAuthed);
-  app2.delete("/blocked-companies", gateAuthed);
+function registerBlockedRoutes(app2) {
+  app2.get("/blocked-companies", gateAuthed);
+  app2.put("/blocked-companies", gateAuthed);
+  app2.delete("/blocked-companies", gateAuthed);
   app2.openapi(
     createRoute({
       method: "get",
@@ -7099,6 +7135,175 @@ function registerLocationsRoute(app2) {
     }
   );
 }
+const ImportJobSchema = z.object({
+  url: z.string().trim().url().max(2e3),
+  /** Where it lands in the pipeline when it is new to the caller. */
+  state: JobStateSchema.exclude(["dismissed"]).default("saved")
+}).openapi("ImportJob");
+const ImportedSchema = z.object({
+  success: z.literal(true),
+  data: z.object({
+    job: z.object({
+      id: z.string(),
+      title: z.string(),
+      company: z.string(),
+      location: z.string(),
+      url: z.string()
+    }),
+    /** The posting was new to the corpus (false: it was already there). */
+    created: z.boolean(),
+    /** The caller's state for it now. */
+    state: JobStateSchema,
+    /** The caller already tracked it, so its state was left alone. */
+    already_tracked: z.boolean()
+  })
+}).openapi("ImportedJob");
+function failure(status, message) {
+  return {
+    success: false,
+    error: status === 422 ? "Unprocessable" : "Bad gateway",
+    message
+  };
+}
+const JOB_COLS = "id, title, company, location, url";
+async function greenhouseSlugFor(db, url) {
+  const parsed = new URL(url);
+  if (!parsed.searchParams.has("gh_jid")) return void 0;
+  const prefix = `${parsed.protocol}//${parsed.host}/`;
+  const row = await db.prepare(
+    `SELECT slug FROM jobs
+			 WHERE url >= ? AND url < ? AND ats = 'greenhouse' AND slug IS NOT NULL
+			   AND slug_source = 'scraped'
+			 LIMIT 1`
+  ).bind(prefix, `${prefix.slice(0, -1)}0`).first();
+  return row?.slug;
+}
+function registerImportRoute(app2) {
+  app2.post("/jobs/import", gateAuthed);
+  app2.openapi(
+    createRoute({
+      method: "post",
+      path: "/jobs/import",
+      tags: ["Pipeline"],
+      summary: "Import a posting from its URL into the corpus and the caller’s pipeline",
+      request: {
+        query: ownerNameQuery,
+        body: { content: { "application/json": { schema: ImportJobSchema } } }
+      },
+      responses: {
+        200: {
+          description: "Imported (or found, and added to the pipeline)",
+          content: { "application/json": { schema: ImportedSchema } }
+        },
+        403: {
+          description: "Forbidden",
+          content: { "application/json": { schema: IdentityErrorResponseSchema } }
+        },
+        404: {
+          description: "The board no longer lists that posting, or no such owner name",
+          content: { "application/json": { schema: IdentityErrorResponseSchema } }
+        },
+        409: {
+          description: "That owner name has never signed in",
+          content: { "application/json": { schema: IdentityErrorResponseSchema } }
+        },
+        422: {
+          description: "No posting could be read from that page (or it is a LinkedIn URL)",
+          content: { "application/json": { schema: ErrorResponseSchema } }
+        },
+        502: {
+          description: "The site, or the scraper, could not be reached",
+          content: { "application/json": { schema: ErrorResponseSchema } }
+        },
+        503: {
+          description: "Identity could not be resolved right now — retry",
+          content: { "application/json": { schema: IdentityErrorResponseSchema } }
+        }
+      }
+    }),
+    async (c) => {
+      const { url, state } = c.req.valid("json");
+      const { ownerName } = c.req.valid("query");
+      const who = await effectiveUserId(c, ownerName);
+      if (isEffectiveUserError(who)) return c.json(who.error.body, who.error.status);
+      const db = c.env.JOB_PLATFORM_DB;
+      let row = await db.prepare(`SELECT ${JOB_COLS} FROM jobs WHERE url = ?`).bind(url).first();
+      let created = false;
+      if (!row) {
+        let extracted;
+        try {
+          extracted = await extractPosting(c.env, url, await greenhouseSlugFor(db, url));
+        } catch (err) {
+          if (!(err instanceof ScraperClientError)) throw err;
+          if (err.status === 404) {
+            return c.json(
+              { success: false, error: "Not found", message: err.message },
+              404
+            );
+          }
+          if (err.status === 400 || err.status === 422) {
+            return c.json(failure(422, err.message), 422);
+          }
+          return c.json(failure(502, `Could not read that posting: ${err.message}`), 502);
+        }
+        const job = IngestJobSchema.safeParse(extracted.job);
+        if (!job.success) {
+          return c.json(
+            failure(
+              502,
+              `The scraper returned a posting this API cannot store: ${job.error.message}`
+            ),
+            502
+          );
+        }
+        const now2 = (/* @__PURE__ */ new Date()).toISOString();
+        const [res] = await db.batch([
+          insertJobStatement(db, job.data, {
+            source: extracted.ats ?? "import",
+            board_slug: extracted.board_slug ?? void 0,
+            now: now2
+          })
+        ]);
+        created = (res.meta?.changes ?? 0) > 0;
+        row = await db.prepare(`SELECT ${JOB_COLS} FROM jobs WHERE url = ? OR id = ? LIMIT 1`).bind(job.data.url, job.data.id).first();
+        if (!row) throw new Error(`import: ${job.data.id} neither inserted nor found`);
+        if (created) await rankNewJobs(db);
+      }
+      const prev = await db.prepare("SELECT state FROM job_states WHERE job_id = ? AND user_id = ?").bind(row.id, who.userId).first();
+      if (prev) {
+        const kept = JobStateSchema.safeParse(prev.state);
+        return c.json(
+          {
+            success: true,
+            data: {
+              job: row,
+              created,
+              state: kept.success ? kept.data : state,
+              already_tracked: true
+            }
+          },
+          200
+        );
+      }
+      const now = (/* @__PURE__ */ new Date()).toISOString();
+      await db.batch([
+        db.prepare(
+          `INSERT INTO job_events (job_id, user_id, kind, from_state, to_state, occurred_at, created_at)
+						 SELECT ?, ?, 'state', NULL, ?, ?, ?
+						 WHERE NOT EXISTS (SELECT 1 FROM job_states WHERE job_id = ? AND user_id = ?)`
+        ).bind(row.id, who.userId, state, now, now, row.id, who.userId),
+        db.prepare(
+          `INSERT INTO job_states (job_id, user_id, state, updated_at) VALUES (?, ?, ?, ?)
+						 ON CONFLICT (job_id, user_id) DO NOTHING`
+        ).bind(row.id, who.userId, state, now)
+      ]);
+      return c.json(
+        { success: true, data: { job: row, created, state, already_tracked: false } },
+        200
+      );
+    }
+  );
+}
 const app$2 = new OpenAPIHono();
 registerFeedRoute(app$2);
 registerPreflightRoute(app$2);
@@ -7114,6 +7319,7 @@ registerFillRoutes(app$2);
 registerBlockedRoutes(app$2);
 registerInsightsRoute(app$2);
 registerLocationsRoute(app$2);
+registerImportRoute(app$2);
 registerAnswerRoutes(app$2);
 registerOwnerRoutes(app$2);
 const jobRoutes = app$2;