careervivid 2.1.21 → 2.1.29

package/dist/agent/QueryEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"QueryEngine.d.ts","sourceRoot":"","sources":["../../src/agent/QueryEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,uBAAuB,EAAE,OAAO,EAAQ,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,IAAI,EAAsB,MAAM,WAAW,CAAC;AASrD,qFAAqF;AACrF,eAAO,MAAM,0BAA0B,QAAsC,CAAC;AAC9E,mFAAmF;AACnF,eAAO,MAAM,kBAAkB,QAAoC,CAAC;AASpE,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gEAAgE;IAChE,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,0FAA0F;IAC1F,UAAU,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,uBAAuB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACtE,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,IAAI,CAAC;IACvD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACjC,kDAAkD;IAClD,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,wEAAwE;IACxE,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAyCD;;;;GAIG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,EAAE,CAAc;IACxB,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,eAAe,CAAU;IACjC,OAAO,CAAC,gBAAgB,CAAS;gBAErB,OAAO,GAAE,kBAAuB;IAyBrC,UAAU,IAAI,OAAO,EAAE;IAIvB,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE;IAIpC,8CAA8C;IACvC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE;IAW7B,OAAO,CAAC,mBAAmB;YAcb,YAAY;YAOZ,gBAAgB;IA6DjB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IAqG5E;;;;OAIG;IACU,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;CAoHtF"}
+{"version":3,"file":"QueryEngine.d.ts","sourceRoot":"","sources":["../../src/agent/QueryEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,uBAAuB,EAAE,OAAO,EAAQ,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,IAAI,EAAsB,MAAM,WAAW,CAAC;AASrD,qFAAqF;AACrF,eAAO,MAAM,0BAA0B,QAAsC,CAAC;AAC9E,mFAAmF;AACnF,eAAO,MAAM,kBAAkB,QAAoC,CAAC;AASpE,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gEAAgE;IAChE,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,0FAA0F;IAC1F,UAAU,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,uBAAuB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACtE,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,IAAI,CAAC;IACvD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACjC,kDAAkD;IAClD,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,wEAAwE;IACxE,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAwED;;;;GAIG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,EAAE,CAAc;IACxB,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,eAAe,CAAU;IACjC,OAAO,CAAC,gBAAgB,CAAS;gBAErB,OAAO,GAAE,kBAAuB;IAyBrC,UAAU,IAAI,OAAO,EAAE;IAIvB,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE;IAIpC,8CAA8C;IACvC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE;IAW7B,OAAO,CAAC,mBAAmB;YAcb,YAAY;YAOZ,gBAAgB;IA6DjB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IAqG5E;;;;OAIG;IACU,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;CAoHtF"}

package/dist/agent/QueryEngine.js

@@ -18,14 +18,39 @@ function isRetryableError(e) {
     // Google GenAI errors often have a status field
     if (e?.status && RETRYABLE_STATUS_CODES.has(e.status))
         return true;
-    if (e?.message && /rate.?limit|quota|too.?many.?requests|service.?unavailable/i.test(e.message))
+    if (e?.message && /rate.?limit|quota|too.?many.?requests|service.?unavailable|429/i.test(e.message))
         return true;
     return false;
 }
+/** Parse the retryDelay (in seconds) from a Gemini 429 error message or details array. */
+function extractRetryDelayMs(e) {
+    // Try structured errorDetails array first (e.g. RetryInfo proto)
+    if (Array.isArray(e?.errorDetails)) {
+        for (const detail of e.errorDetails) {
+            const delay = detail?.retryDelay;
+            if (delay) {
+                // "16s" or "16.44s" → milliseconds
+                const secs = parseFloat(String(delay).replace('s', ''));
+                if (!isNaN(secs))
+                    return Math.ceil(secs * 1000);
+            }
+        }
+    }
+    // Fallback: parse from error message string ("Please retry in 16.44s")
+    if (e?.message) {
+        const match = e.message.match(/retry\s*in\s*([\d.]+)\s*s/i);
+        if (match) {
+            const secs = parseFloat(match[1]);
+            if (!isNaN(secs))
+                return Math.ceil(secs * 1000);
+        }
+    }
+    return null;
+}
 async function sleep(ms) {
     return new Promise(resolve => setTimeout(resolve, ms));
 }
-async function retryWithBackoff(fn, maxRetries = 3, baseDelayMs = 1000) {
+async function retryWithBackoff(fn, maxRetries = 5, baseDelayMs = 5000) {
     for (let attempt = 0; attempt <= maxRetries; attempt++) {
         try {
             return await fn();
@@ -33,8 +58,15 @@ async function retryWithBackoff(fn, maxRetries = 3, baseDelayMs = 1000) {
         catch (e) {
             if (attempt === maxRetries || !isRetryableError(e))
                 throw e;
-            const delay = baseDelayMs * Math.pow(2, attempt);
-            await sleep(delay);
+            // Honour the server-requested retry delay if present, use exponential backoff as floor
+            const serverDelayMs = extractRetryDelayMs(e);
+            const exponentialDelay = baseDelayMs * Math.pow(2, attempt);
+            const delayMs = Math.max(serverDelayMs ?? 0, exponentialDelay);
+            // Add ±10% jitter to avoid thundering-herd on shared quota
+            const jitter = delayMs * 0.1 * (Math.random() * 2 - 1);
+            const finalDelay = Math.ceil(delayMs + jitter);
+            console.error(`\n⏳  Rate limited (attempt ${attempt + 1}/${maxRetries}). Retrying in ${(finalDelay / 1000).toFixed(1)}s…`);
+            await sleep(finalDelay);
         }
     }
     // TypeScript requires this even though it's unreachable

package/dist/agent/agentAuditLog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentAuditLog.d.ts","sourceRoot":"","sources":["../../src/agent/agentAuditLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAYH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,OAAO,CAAC;CACb;AAID,eAAO,IAAI,UAAU,QAA2B,CAAC;AAoCjD,sFAAsF;AACtF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAGpE;AA8BD,wBAAgB,QAAQ,CAAC,KAAK,EAAE;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CA8BP;AAyJD,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAMnD;AAID,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgDhB"}
+{"version":3,"file":"agentAuditLog.d.ts","sourceRoot":"","sources":["../../src/agent/agentAuditLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAYH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,OAAO,CAAC;CACb;AAID,eAAO,IAAI,UAAU,QAA2B,CAAC;AA0CjD,sFAAsF;AACtF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAGpE;AA8BD,wBAAgB,QAAQ,CAAC,KAAK,EAAE;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CA8BP;AA8KD,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAMnD;AAID,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsEhB"}

package/dist/agent/agentAuditLog.js

@@ -20,7 +20,7 @@ import { appendFileSync, existsSync, mkdirSync } from "fs";
 import { resolve } from "path";
 import { homedir } from "os";
 import { randomUUID } from "crypto";
-import { saveSessionMemory } from "./memory.js";
+import { saveSessionMemory, saveCodingSession } from "./memory.js";
 // ── Session-level state ───────────────────────────────────────────────────────
 export let SESSION_ID = randomUUID().slice(0, 8);
 const pendingFirestore = [];
@@ -38,6 +38,8 @@ const sessionState = {
     coverLetters: [],
     interviewPrep: [],
     facts: {},
+    filesChanged: [],
+    lastBuilt: "",
 };
 /** Call once at startup so the session summary records the correct mode and model. */
 export function initSessionContext(mode, model) {
@@ -196,6 +198,26 @@ function extractSessionFacts(tool, args, result) {
             addHighlight(`Auto-filled application: ${company} (${role})`);
             break;
         }
+        // ── Coding file tools ───────────────────────────────────────────────────────────────────
+        case "write_file": {
+            const filePath = String(args.path || "");
+            if (filePath && !sessionState.filesChanged.includes(filePath)) {
+                sessionState.filesChanged.push(filePath);
+            }
+            // Track what was built from the path name
+            const fileName = filePath.split("/").pop() || filePath;
+            sessionState.lastBuilt = fileName;
+            addHighlight(`Created/wrote: ${filePath}`);
+            break;
+        }
+        case "patch_file": {
+            const filePath = String(args.path || "");
+            if (filePath && !sessionState.filesChanged.includes(filePath)) {
+                sessionState.filesChanged.push(filePath);
+            }
+            addHighlight(`Patched: ${filePath} (lines ${args.start_line}–${args.end_line})`);
+            break;
+        }
         default:
             break;
     }
@@ -274,6 +296,28 @@ export async function writeSessionSummary(stats) {
                 facts: sessionState.facts,
             };
             saveSessionMemory(memoryInput);
+            // ── For coding mode: also save the fast pick-up file ──────────────────
+            if (sessionState.mode === "coding" && sessionState.filesChanged.length > 0) {
+                const { execSync } = await import("child_process");
+                let branch = "";
+                try {
+                    branch = execSync("git branch --show-current", { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+                }
+                catch { /* no git */ }
+                const summaryParts = sessionState.highlights.slice(0, 5).map(h => h.outcome);
+                const summary = summaryParts.length > 0
+                    ? summaryParts.join(" · ")
+                    : `Coding session — ${stats.turns} turns, ${sessionState.filesChanged.length} file(s) changed.`;
+                saveCodingSession({
+                    cwd: process.cwd(),
+                    savedAt: new Date().toISOString(),
+                    mode: "coding",
+                    summary,
+                    filesChanged: sessionState.filesChanged,
+                    lastBuilt: sessionState.lastBuilt,
+                    branch,
+                });
+            }
         }
         catch { /* memory write failure is non-fatal */ }
     }

package/dist/agent/instructions.d.ts

@@ -14,6 +14,7 @@
 export declare const baseIdentity: string;
 export declare const RESUME_SECTION: string;
 export declare const CODING_SECTION: string;
+export declare const BROWSER_CODING_SECTION: string;
 export declare const JOBS_TOOLS_SECTION: string;
 export declare const JOBS_HARNESS: string;
 export declare const GREETING_PROTOCOL: string;

package/dist/agent/instructions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instructions.d.ts","sourceRoot":"","sources":["../../src/agent/instructions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAsCH,mFAAmF;AACnF,eAAO,MAAM,YAAY,QAAsB,CAAC;AAMhD,eAAO,MAAM,cAAc,QAcnB,CAAC;AAMT,eAAO,MAAM,cAAc,QAqCnB,CAAC;AAMT,eAAO,MAAM,kBAAkB,QA0DvB,CAAC;AAMT,eAAO,MAAM,YAAY,QA6CjB,CAAC;AAMT,eAAO,MAAM,iBAAiB,QAuBtB,CAAC;AAOT;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE;IACzC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,MAAM,CAqCT"}
+{"version":3,"file":"instructions.d.ts","sourceRoot":"","sources":["../../src/agent/instructions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAsCH,mFAAmF;AACnF,eAAO,MAAM,YAAY,QAAsB,CAAC;AAMhD,eAAO,MAAM,cAAc,QAcnB,CAAC;AAMT,eAAO,MAAM,cAAc,QAqDnB,CAAC;AAMT,eAAO,MAAM,sBAAsB,QAiD3B,CAAC;AAMT,eAAO,MAAM,kBAAkB,QA0DvB,CAAC;AAMT,eAAO,MAAM,YAAY,QA6CjB,CAAC;AAMT,eAAO,MAAM,iBAAiB,QAuBtB,CAAC;AAOT;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE;IACzC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,MAAM,CAsCT"}

package/dist/agent/instructions.js

@@ -68,40 +68,109 @@ You have access to the **get_resume** tool which fetches the user's live CareerV
 export const CODING_SECTION = `
 ## Coding Agent Mode
 
-You have access to file I/O, shell execution, and codebase search tools.
+You are a fully autonomous software engineering agent — equivalent to Antigravity or Claude Code.
+You write production-ready code directly to local files on disk using your file tools.
 
-### ⚠️ File Access Scope (STRICT — do not bypass)
+### ⚠️ Critical: Write Code to Files — Never to Articles
 
-You operate with least-privilege file access. This is enforced at the tool level and cannot be overridden.
+When a user asks you to build something, create a feature, write a script, or fix a bug:
+1. **USE write_file** to create actual code files in the user's working directory.
+2. **USE patch_file** to surgically edit existing files without rewriting them.
+3. **NEVER use publish_article** to output code. publish_article is ONLY for publishing markdown content to the CareerVivid community blog.
+4. **NEVER just show the user a code block** in the chat and say "here you go". Always write the file.
 
-**READ access** is limited to:
-- \`career-vivid/\` — your job tracker data, résumé drafts, and career pipeline files
-- \`cli/\` — the CLI source code (your own code)
-- \`tmp/\` or \`/tmp/\` — temporary scratch files
+### Your Execution Loop (follow this exactly)
 
-**WRITE access** is limited to:
-- \`career-vivid/\` — ONLY the career data directory you own
-- \`tmp/\` or \`/tmp/\` — temporary scratch files
+1. **Orient** — Call list_directory or get_file_tree on the relevant directory to understand the project structure.
+2. **Read** — Call read_file on any existing files you need to understand before modifying them.
+3. **Plan** — Emit a concise "Plan:" (2–5 bullets: what files you will create/change and why).
+4. **Execute** — Call write_file or patch_file to create/modify every file in the plan.
+5. **Verify** — Run the compiler or tests via run_command (e.g., \`tsc --noEmit\`, \`npm test\`, \`python -c "import script"\`).
+6. **Fix** — If verification fails, read the error, patch the file, re-verify. Loop until clean.
+7. **Report** — Summarise what was created or changed, with the exact file paths.
 
-**NEVER attempt to read or write:**
-- \`src/\` — web app source code (React, components, pages)
-- \`functions/\` — Firebase Cloud Functions source
-- \`next-app/\` — Next.js application source
-- Any file outside your allowed prefixes
+### File Access
 
-If a task requires modifying web app code (\`src/\`, \`functions/\`, etc.), tell the user to make that change in their editor. Your role is career data management, not application development.
+You have full read and write access to any file in the user's working directory EXCEPT:
+- \`.env\` / \`.env.*\` files — contains secrets, never read or write these
+- \`node_modules/\` — managed by npm, never write here
+- \`.git/\` — git internals, use run_command for git operations
 
-### Workflow
-1. Read relevant files first (read_file). Never overwrite blindly.
-2. Emit a short "Plan:" describing files you will touch and the approach.
-3. Write data using write_file or patch_file (career-vivid/ only).
-4. Verify with run_command (read-only commands like cat, ls, grep).
-5. Fix errors and loop until clean; summarise all changes made.
+### Code Quality Standards
 
-### Code Quality
-- TypeScript with strict types. Avoid \`any\` unless unavoidable.
-- Follow existing code style. Add JSDoc to public APIs.
-- Short, single-responsibility functions. Self-documenting names.
+- **TypeScript/JavaScript**: Strict types, no implicit \`any\`, ESM imports, JSDoc on public APIs.
+- **Python**: Type hints, docstrings on public functions, PEP8.
+- **All languages**: Follow existing code style in the project. Keep functions small and single-responsibility.
+- Read the existing file style before writing new code in that file.
+
+### Shell Commands
+
+Use run_command for:
+- Compiling: \`tsc --noEmit\`, \`npm run build\`, \`python -m py_compile\`
+- Testing: \`npm test\`, \`pytest\`, \`go test ./...\`
+- Formatting/linting: \`npm run lint\`, \`black .\`, \`gofmt\`
+- Git: \`git status\`, \`git diff\`, \`git log --oneline -10\`
+- Reading output: \`cat file\`, \`ls -la\`, \`grep -rn pattern dir/\`
+
+### What You Must Never Do
+
+- ❌ Show a code block in the chat and say "paste this" — always write the file
+- ❌ Call publish_article with code content
+- ❌ Ask "would you like me to write this file?" — just write it
+- ❌ Write to .env, node_modules/, or .git/
+`.trim();
+// ---------------------------------------------------------------------------
+// §3b — Browser debugging section (added in --coding mode)
+// ---------------------------------------------------------------------------
+export const BROWSER_CODING_SECTION = `
+## Browser Debugging Tools
+
+You have a full browser automation suite for debugging web apps during development.
+Use these tools when the user asks you to:
+- Inspect a running local dev server (localhost:3000, :8080, etc.)
+- Debug a visual layout bug, broken UI, or rendering error
+- Check what the browser actually shows vs. what the code produces
+- Verify an HTML/CSS/JS project looks correct after generating it
+- Watch live errors or network failures in a running app
+
+### Browser Debug Workflow
+
+1. **browser_navigate** — Open the local server URL (e.g., \`http://localhost:3000\`)
+2. **browser_state** — Read the page structure and all interactive elements
+3. **browser_screenshot** — Visually inspect layout (returns description of current view)
+4. **browser_scroll** — Scroll to reveal below-the-fold content
+5. **browser_click** — Interact with elements by their index number from browser_state
+6. **run_command** — Check server logs, console output, or network errors in parallel
+7. **patch_file** — Fix the issue in the source file
+8. **browser_navigate** (reload) — Verify the fix
+
+### When to use browser tools vs. run_command
+
+| Use browser tools when…          | Use run_command when…              |
+|-----------------------------------|------------------------------------|
+| Visual / layout bug               | Compile error or type error        |
+| JS runtime error in the browser   | Test suite failure                 |
+| Form or interaction doesn't work  | Lint warning                       |
+| Need to see what page renders     | File system inspection (ls, cat)   |
+| Verifying CSS / responsive design | Running build scripts              |
+
+### Browser Tool Quick Reference
+
+- **browser_navigate(url)** — Go to a URL
+- **browser_state()** — Get page title, URL, and numbered interactive element list
+- **browser_click(element_index)** — Click by index from browser_state
+- **browser_type(element_index, text)** — Type into a field
+- **browser_scroll(direction, amount)** — Scroll up/down
+- **browser_screenshot()** — Capture current view
+- **browser_wait(seconds)** — Wait for async content to load
+- **browser_close()** — Close the browser when done
+
+### Rules
+
+- Always call browser_state() after navigating to get the current element list
+- Use browser_wait() after actions that trigger page loads or AJAX calls
+- When you find a bug visually, fix it in the source file with patch_file, then reload
+- Do NOT use browser_autofill_application in coding mode — that is for job applications only
 `.trim();
 // ---------------------------------------------------------------------------
 // §4 — Jobs tools reference (appended in --jobs mode)
@@ -279,6 +348,7 @@ export function buildSystemPrompt(options) {
     return [
         baseIdentity,
         CODING_SECTION,
+        BROWSER_CODING_SECTION,
         ...memorySections,
         GREETING_PROTOCOL,
     ].join("\n\n---\n\n");

package/dist/agent/memory.d.ts

@@ -152,4 +152,32 @@ export declare function buildSessionSummary(opts: SessionSummaryInput): string;
  * Append a session summary to the memory file, merge into KB, compact if needed.
  */
 export declare function saveSessionMemory(opts: SessionSummaryInput): void;
+export interface CodingSessionData {
+    /** Absolute path of the working directory when the session ended */
+    cwd: string;
+    /** ISO timestamp of when the session was saved */
+    savedAt: string;
+    /** Persona mode ("coding", "resume", etc.) */
+    mode: string;
+    /** Human-readable summary of what happened in the session */
+    summary: string;
+    /** Files the agent wrote or patched during the session */
+    filesChanged: string[];
+    /** Short description of the last thing that was built/created */
+    lastBuilt: string;
+    /** Git branch active during the session (empty if no git repo) */
+    branch: string;
+}
+/**
+ * Load the last coding session from ~/.careervivid/coding-session.md.
+ * Returns null if the file does not exist or cannot be parsed.
+ * Intentionally synchronous — called at startup before the agent loop.
+ */
+export declare function loadCodingSession(): CodingSessionData | null;
+/**
+ * Save the current coding session to ~/.careervivid/coding-session.md.
+ * Overwrites the previous entry — only the most recent session is kept here.
+ * Full history is preserved in memory.md via saveSessionMemory().
+ */
+export declare function saveCodingSession(data: CodingSessionData): void;
 //# sourceMappingURL=memory.d.ts.map

package/dist/agent/memory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../src/agent/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAgCH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAK,MAAM,CAAC;IAChB,IAAI,EAAK,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,kFAAkF;IAClF,WAAW,EAAM,MAAM,EAAE,CAAC;IAC1B,4BAA4B;IAC5B,WAAW,EAAM,MAAM,EAAE,CAAC;IAC1B,oCAAoC;IACpC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iCAAiC;IACjC,YAAY,EAAK;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3E,2BAA2B;IAC3B,aAAa,EAAI,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,6CAA6C;IAC7C,WAAW,EAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzF,8BAA8B;IAC9B,YAAY,EAAK,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5E,0BAA0B;IAC1B,aAAa,EAAI,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAC5E,iDAAiD;IACjD,MAAM,EAAW,MAAM,EAAE,CAAC;IAC1B,iEAAiE;IACjE,KAAK,EAAY,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,iCAAiC;IACjC,SAAS,EAAQ,MAAM,CAAC;CACzB;AAMD,wBAAgB,UAAU,IAAI,MAAM,CAOnC;AAuPD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CA6EzC;AAGD;;;GAGG;AACH,eAAO,MAAM,cAAc,QAwBnB,CAAC;AAOT,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAc,MAAM,CAAC;IAC1B,SAAS,EAAU,MAAM,CAAC;IAC1B,UAAU,EAAS,gBAAgB,EAAE,CAAC;IACtC,IAAI,EAAe,MAAM,CAAC;IAC1B,KAAK,EAAc,MAAM,CAAC;IAE1B,WAAW,CAAC,EAAO,MAAM,EAAE,CAAC;IAC5B,WAAW,CAAC,EAAO,MAAM,EAAE,CAAC;IAC5B,eAAe,CAAC,EAAG,MAAM,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAY,MAAM,EAAE,CAAC;IAC5B,cAAc,CAAC,EAAI,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAC,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAQ,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3F,YAAY,CAAC,EAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9E,aAAa,CAAC,EAAK,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAC9E,KAAK,CAAC,EAAa,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,CAAC,EAAW,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CA8CrE;AAsBD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAUjE"}
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../src/agent/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAgCH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAK,MAAM,CAAC;IAChB,IAAI,EAAK,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,kFAAkF;IAClF,WAAW,EAAM,MAAM,EAAE,CAAC;IAC1B,4BAA4B;IAC5B,WAAW,EAAM,MAAM,EAAE,CAAC;IAC1B,oCAAoC;IACpC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iCAAiC;IACjC,YAAY,EAAK;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3E,2BAA2B;IAC3B,aAAa,EAAI,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,6CAA6C;IAC7C,WAAW,EAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzF,8BAA8B;IAC9B,YAAY,EAAK,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5E,0BAA0B;IAC1B,aAAa,EAAI,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAC5E,iDAAiD;IACjD,MAAM,EAAW,MAAM,EAAE,CAAC;IAC1B,iEAAiE;IACjE,KAAK,EAAY,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,iCAAiC;IACjC,SAAS,EAAQ,MAAM,CAAC;CACzB;AAMD,wBAAgB,UAAU,IAAI,MAAM,CAOnC;AAuPD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CA6EzC;AAGD;;;GAGG;AACH,eAAO,MAAM,cAAc,QAwBnB,CAAC;AAOT,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAc,MAAM,CAAC;IAC1B,SAAS,EAAU,MAAM,CAAC;IAC1B,UAAU,EAAS,gBAAgB,EAAE,CAAC;IACtC,IAAI,EAAe,MAAM,CAAC;IAC1B,KAAK,EAAc,MAAM,CAAC;IAE1B,WAAW,CAAC,EAAO,MAAM,EAAE,CAAC;IAC5B,WAAW,CAAC,EAAO,MAAM,EAAE,CAAC;IAC5B,eAAe,CAAC,EAAG,MAAM,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAY,MAAM,EAAE,CAAC;IAC5B,cAAc,CAAC,EAAI,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAC,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAQ,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3F,YAAY,CAAC,EAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9E,aAAa,CAAC,EAAK,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAC9E,KAAK,CAAC,EAAa,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,CAAC,EAAW,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CA8CrE;AAsBD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAUjE;AAQD,MAAM,WAAW,iBAAiB;IAChC,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;IACZ,kDAAkD;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,iBAAiB,GAAG,IAAI,CAU5D;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI,CA4B/D"}

package/dist/agent/memory.js

@@ -462,3 +462,62 @@ export function saveSessionMemory(opts) {
     const updated = compactMemory(base + "\n" + entry);
     saveMemory(updated);
 }
+// =============================================================================
+// Coding session file — fast persona-specific pick-up context
+// =============================================================================
+const CODING_SESSION_FILE = join(MEMORY_DIR, "coding-session.md");
+/**
+ * Load the last coding session from ~/.careervivid/coding-session.md.
+ * Returns null if the file does not exist or cannot be parsed.
+ * Intentionally synchronous — called at startup before the agent loop.
+ */
+export function loadCodingSession() {
+    if (!existsSync(CODING_SESSION_FILE))
+        return null;
+    try {
+        const raw = readFileSync(CODING_SESSION_FILE, "utf-8").trim();
+        const match = raw.match(/<!-- CODING_SESSION_START -->([\s\S]*?)<!-- CODING_SESSION_END -->/);
+        if (!match)
+            return null;
+        return JSON.parse(match[1].trim());
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Save the current coding session to ~/.careervivid/coding-session.md.
+ * Overwrites the previous entry — only the most recent session is kept here.
+ * Full history is preserved in memory.md via saveSessionMemory().
+ */
+export function saveCodingSession(data) {
+    try {
+        if (!existsSync(MEMORY_DIR))
+            mkdirSync(MEMORY_DIR, { recursive: true });
+        const filesList = data.filesChanged.length > 0
+            ? "## Files Changed\n" + data.filesChanged.map(f => `- \`${f}\``).join("\n")
+            : "";
+        const content = [
+            "# Last Coding Session",
+            "",
+            "> Auto-saved by cv agent --coding. Do not edit manually.",
+            "",
+            `**Saved:** ${data.savedAt}`,
+            `**Directory:** \`${data.cwd}\``,
+            `**Branch:** ${data.branch || "(no git)"}`,
+            "",
+            "## Summary",
+            data.summary,
+            "",
+            filesList,
+            "",
+            "<!-- CODING_SESSION_START -->",
+            JSON.stringify(data, null, 2),
+            "<!-- CODING_SESSION_END -->",
+        ].join("\n");
+        writeFileSync(CODING_SESSION_FILE, content, "utf-8");
+    }
+    catch {
+        // Non-fatal — session save failure must never crash the agent
+    }
+}

package/dist/agent/tools/coding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coding.d.ts","sourceRoot":"","sources":["../../../src/agent/tools/coding.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAyGlC,iBAAS,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAG3C;AAMD,eAAO,MAAM,YAAY,EAAE,IAqC1B,CAAC;AAMF,eAAO,MAAM,aAAa,EAAE,IA0B3B,CAAC;AAMF,eAAO,MAAM,aAAa,EAAE,IA+C3B,CAAC;AAMF,eAAO,MAAM,iBAAiB,EAAE,IA8C/B,CAAC;AAMF,eAAO,MAAM,eAAe,EAAE,IA8C7B,CAAC;AAMF,eAAO,MAAM,cAAc,EAAE,IAmD5B,CAAC;AAEF,iEAAiE;AACjE,wBAAgB,yBAAyB,IAAI,IAAI,CAQhD;AAMD,eAAO,MAAM,eAAe,EAAE,IAkD7B,CAAC;AAMF,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,EAAE,IAAI,EAQlC,CAAC;AAEF,OAAO,EAAE,aAAa,EAAE,CAAC"}
+{"version":3,"file":"coding.d.ts","sourceRoot":"","sources":["../../../src/agent/tools/coding.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAmGlC,iBAAS,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAG3C;AAMD,eAAO,MAAM,YAAY,EAAE,IAqC1B,CAAC;AAMF,eAAO,MAAM,aAAa,EAAE,IA0B3B,CAAC;AAMF,eAAO,MAAM,aAAa,EAAE,IA+C3B,CAAC;AAMF,eAAO,MAAM,iBAAiB,EAAE,IA8C/B,CAAC;AAMF,eAAO,MAAM,eAAe,EAAE,IA8C7B,CAAC;AAMF,eAAO,MAAM,cAAc,EAAE,IAmD5B,CAAC;AAEF,iEAAiE;AACjE,wBAAgB,yBAAyB,IAAI,IAAI,CAQhD;AAMD,eAAO,MAAM,eAAe,EAAE,IAkD7B,CAAC;AAMF,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,EAAE,IAAI,EAQlC,CAAC;AAEF,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/agent/tools/coding.js

@@ -5,45 +5,38 @@ import { Type } from '@google/genai';
 // ============================================================================
 // Path-based Access Control (Least Privilege)
 // ============================================================================
+// ============================================================================
+// Path-based Access Control
+// ============================================================================
 /**
- * Directories the agent is ALLOWED to READ.
- * These are relative to the repo root (process.cwd()) or absolute paths the agent owns.
- */
-const READ_ALLOWED_PREFIXES = [
-    // Agent's own data & config
-    'career-vivid/', // job tracker CSV, résumé drafts, career data
-    'cli/', // CLI source — agent may read its own code
-    // Scratch / temporary outputs produced by the agent
-    'tmp/',
-    '/tmp/',
-    // User's home config file is read by loadConfig() — not by read_file tool
-];
-/**
- * Directories the agent is ALLOWED to WRITE.
- * This is intentionally much narrower than the read list.
- * Source code (src/, functions/, next-app/) is completely off-limits.
+ * In coding mode the agent operates like a real coding assistant (Antigravity-style).
+ * It can read and write files anywhere in the working directory tree.
+ *
+ * Hard-blocked regardless of mode:
+ *   - .env / .env.* files  (secrets)
+ *   - node_modules/        (package artifacts — use npm install)
+ *   - .git/                (git internals)
  */
-const WRITE_ALLOWED_PREFIXES = [
-    'career-vivid/', // job tracker CSV, résumé drafts — the only structured data the agent owns
-    'tmp/',
-    '/tmp/',
+const HARD_BLOCKED_PATTERNS = [
+    /\/\.env(\.\w+)?$/, // .env, .env.local, .env.production, etc.
+    /\/node_modules\//, // node_modules anywhere in path
+    /\/\.git\//, // .git internals
 ];
+function isHardBlocked(absPath) {
+    return HARD_BLOCKED_PATTERNS.some(re => re.test(absPath));
+}
 /**
- * Resolve a raw path argument and check it against an allowlist.
- * @throws if the resolved path falls outside every allowed prefix.
+ * Resolve a raw path argument and enforce hard-block rules.
+ * @throws if the path matches a hard-blocked pattern.
  */
-function guardPath(rawPath, allowedPrefixes, mode) {
+function guardPath(rawPath, _allowedPrefixes, mode) {
     const cwd = process.cwd();
     const absPath = normalize(resolve(rawPath));
-    const allowed = allowedPrefixes.some(prefix => {
-        const fullPrefix = prefix.startsWith('/') ? normalize(prefix) : normalize(join(cwd, prefix));
-        return absPath.startsWith(fullPrefix);
-    });
-    if (!allowed) {
+    if (isHardBlocked(absPath)) {
         const rel = relative(cwd, absPath);
-        throw new Error(`⛔ Access denied: ${mode} access to "${rel}" is not permitted.\n` +
-            `The agent can only ${mode} files inside: ${allowedPrefixes.join(', ')}\n` +
-            `To access this file, use your editor or the CareerVivid web app.`);
+        throw new Error(`⛔ Access denied: ${mode} access to "${rel}" is blocked for safety.\n` +
+            `Blocked paths: .env files, node_modules/, .git/\n` +
+            `Edit secrets manually in your editor.`);
     }
     return absPath;
 }
@@ -122,7 +115,7 @@ export const readFileTool = {
         required: ['path'],
     },
     execute: async (args) => {
-        const absPath = guardPath(args.path, READ_ALLOWED_PREFIXES, 'read');
+        const absPath = guardPath(args.path, [], 'read');
         if (!existsSync(absPath)) {
             throw new Error(`File not found: ${absPath}`);
         }
@@ -159,7 +152,7 @@ export const writeFileTool = {
         required: ['path', 'content'],
     },
     execute: async (args) => {
-        const absPath = guardPath(args.path, WRITE_ALLOWED_PREFIXES, 'write');
+        const absPath = guardPath(args.path, [], 'write');
         mkdirSync(dirname(absPath), { recursive: true });
         writeFileSync(absPath, args.content, 'utf-8');
         const lines = args.content.split('\n').length;
@@ -196,7 +189,7 @@ export const patchFileTool = {
         required: ['path', 'start_line', 'end_line', 'new_content'],
     },
     execute: async (args) => {
-        const absPath = guardPath(args.path, WRITE_ALLOWED_PREFIXES, 'write');
+        const absPath = guardPath(args.path, [], 'write');
         if (!existsSync(absPath))
             throw new Error(`File not found: ${absPath}`);
         const lines = readFileSync(absPath, 'utf-8').split('\n');

package/dist/commands/agent/engineResolver.js

@@ -50,6 +50,6 @@ export function printBanner(options, selectedProvider, selectedModel, _thinkingB
     else {
         console.log(chalk.dim(`  Provider: ${selectedProvider}  ·  Model: ${selectedModel}  [0 credits]`));
     }
-    const modeLabel = options.jobs ? "Jobs & Applications" : options.resume ? "Resume" : "General";
+    const modeLabel = options.resume ? "Resume" : options.coding ? "Coding" : "Jobs & Applications";
     console.log(chalk.dim(`  Mode: ${modeLabel}  ·  Type 'exit' to quit  ·  /help for commands.\n`));
 }

package/dist/commands/agent/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/agent/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,QA6IpD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/agent/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAcpC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,QAqJpD"}

package/dist/commands/agent/index.js

@@ -6,6 +6,7 @@ import { getTools } from "./toolRegistry.js";
 import { getSystemInstruction, buildEngine, printBanner } from "./engineResolver.js";
 import { askLoop } from "./repl.js";
 import { initSessionContext } from "../../agent/agentAuditLog.js";
+import { resolvePersona } from "./personas.js";
 const { prompt } = pkg;
 export function registerAgentCommand(program) {
     const agentCmd = program
@@ -13,7 +14,7 @@ export function registerAgentCommand(program) {
         .description("Start an interactive autonomous AI agent in your terminal.")
         .option("--coding", "Enable full coding tool suite (file I/O, shell, search).")
         .option("--resume", "Add resume tools — load and discuss your CareerVivid resume.")
-        .option("--jobs", "Add job-hunting tools — search jobs, save to tracker, update statuses.")
+        .option("--jobs", "Add job-hunting tools (default — enabled automatically).")
         .option("--flash", "Use gemini-3-flash-preview — latest flash model (fast, 1 credit/turn).")
         .option("--pro", "Use gemini-3.1-pro-preview with thinking mode (recommended for complex tasks).")
         .option("--think <budget>", "Enable Gemini thinking mode with the given token budget (e.g. 8192).", parseInt)
@@ -24,6 +25,11 @@ export function registerAgentCommand(program) {
         .option("--api-key <key>", "BYO API key for this session (not saved).")
         .option("--base-url <url>", "Custom OpenAI-compatible base URL.")
         .action(async (options) => {
+        // Jobs mode is the primary entry point — always enabled unless an explicit
+        // alternate mode flag (--resume, --coding) was passed.
+        if (!options.resume && !options.coding) {
+            options.jobs = true;
+        }
         const cvApiKey = getApiKey();
         const project = options.project ?? process.env.GOOGLE_CLOUD_PROJECT;
         const wantsCareerVividCloud = !options.provider || options.provider === "careervivid";
@@ -114,10 +120,11 @@ export function registerAgentCommand(program) {
         }
         const engine = buildEngine(selectedProvider, selectedModel, systemInstruction, tools, thinkingBudget, includeThoughts, cvApiKey, geminiApiKey, project);
         printBanner(options, selectedProvider, selectedModel, thinkingBudget);
-        // ── Record session context for memory ────────────────────────────────────────────────
-        const agentMode = options.jobs ? "jobs" : options.resume ? "resume" : "coding";
+        const agentMode = options.resume ? "resume" : options.coding ? "coding" : "jobs";
         initSessionContext(agentMode, selectedModel);
-        await askLoop(engine, options, selectedProvider, selectedModel, cvApiKey, systemInstruction, tools);
+        // Resolve the active persona — drives menu, pick-up prompt, and context
+        const persona = resolvePersona(options);
+        await askLoop(engine, options, selectedProvider, selectedModel, cvApiKey, systemInstruction, tools, persona);
     });
     agentCmd.command("config")
         .description("Configure the default LLM provider for cv agent")

package/dist/commands/agent/personas.d.ts

@@ -0,0 +1,41 @@
+/**
+ * personas.ts — Extensible Persona Registry for cv agent
+ *
+ * Each persona defines:
+ *   - id:             unique key (matches the CLI flag name)
+ *   - label:          human-readable name shown in the banner
+ *   - menuItems:      first-turn autocomplete menu entries
+ *   - pickUpPrompt:   the system message injected when the user chooses
+ *                     "Pick up where we left off" — workspace-aware, not job-aware
+ *   - contextGather:  async function returning a markdown context snapshot
+ *                     of the current environment relevant to this persona
+ *
+ * ── Adding a new persona ──────────────────────────────────────────────────────
+ * 1. Add a new PersonaDefinition entry in PERSONAS below.
+ * 2. Register the matching --flag in index.ts (one line).
+ * 3. Done. The menu, context, and system prompt routing all work automatically.
+ */
+export interface PersonaDefinition {
+    id: string;
+    label: string;
+    /** Displayed in the first-turn autocomplete menu */
+    menuItems: string[];
+    /**
+     * Optional per-item prompt overrides.
+     * Key = exact menu item string. Value = the prompt sent to the agent.
+     * Items without an entry get the default emoji-stripped text.
+     */
+    menuPrompts?: Record<string, string>;
+    /** Used as the agent prompt when "Pick up where we left off" is selected */
+    pickUpPrompt: string;
+    /** Gathers live workspace context for the pick-up prompt */
+    contextGather: () => Promise<string>;
+}
+/**
+ * Resolve the active PersonaDefinition from the CLI options object.
+ * Falls back to the jobs persona.
+ */
+export declare function resolvePersona(options: Record<string, any>): PersonaDefinition;
+/** All registered personas — useful for dynamic --help generation. */
+export declare const ALL_PERSONAS: PersonaDefinition[];
+//# sourceMappingURL=personas.d.ts.map

package/dist/commands/agent/personas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"personas.d.ts","sourceRoot":"","sources":["../../../src/commands/agent/personas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAOH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,aAAa,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACtC;AAwTD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,iBAAiB,CAK9E;AAED,sEAAsE;AACtE,eAAO,MAAM,YAAY,qBAA6B,CAAC"}