job-forge 2.0.3 → 2.1.0

package/.cursor/rules/main.mdc

@@ -300,6 +300,8 @@ When a form says "enter the code we sent to your email", you MUST retrieve the c
 | Workday | `from:myworkday newer_than:10m` |
 | Lever | `from:lever newer_than:10m` |
 | Ashby | `from:ashby newer_than:10m` |
+| SmartRecruiters | `from:smartrecruiters newer_than:10m` |
+| Aggregator redirect (WeWorkRemotely / RemoteOK) | Detect the underlying ATS from the post-redirect URL, then use that row's sender query |
 | Unknown | `newer_than:10m subject:(verify OR code OR confirm)` |
 
 **Rules:**

package/AGENTS.md

@@ -295,6 +295,8 @@ When a form says "enter the code we sent to your email", you MUST retrieve the c
 | Workday | `from:myworkday newer_than:10m` |
 | Lever | `from:lever newer_than:10m` |
 | Ashby | `from:ashby newer_than:10m` |
+| SmartRecruiters | `from:smartrecruiters newer_than:10m` |
+| Aggregator redirect (WeWorkRemotely / RemoteOK) | Detect the underlying ATS from the post-redirect URL, then use that row's sender query |
 | Unknown | `newer_than:10m subject:(verify OR code OR confirm)` |
 
 **Rules:**

package/CLAUDE.md

@@ -295,6 +295,8 @@ When a form says "enter the code we sent to your email", you MUST retrieve the c
 | Workday | `from:myworkday newer_than:10m` |
 | Lever | `from:lever newer_than:10m` |
 | Ashby | `from:ashby newer_than:10m` |
+| SmartRecruiters | `from:smartrecruiters newer_than:10m` |
+| Aggregator redirect (WeWorkRemotely / RemoteOK) | Detect the underlying ATS from the post-redirect URL, then use that row's sender query |
 | Unknown | `newer_than:10m subject:(verify OR code OR confirm)` |
 
 **Rules:**

package/docs/ARCHITECTURE.md

@@ -53,8 +53,8 @@ The skill router (`.opencode/skills/job-forge.md`) loads mode and data files on
 
 ```
                     ┌─────────────────────────────────┐
-                    │         opencode Agent        │
-                    │   (reads OPENCODE.md + modes/*.md) │
+                    │            Agent                │
+                    │   (reads AGENTS.md + modes/*.md) │
                     └──────────┬──────────────────────┘
                                │
             ┌──────────────────┼──────────────────────┐
@@ -85,7 +85,7 @@ The skill router (`.opencode/skills/job-forge.md`) loads mode and data files on
 
 ## Modes (`modes/`)
 
-Markdown mode files in `modes/` define how the opencode workflow behaves together with the root `OPENCODE.md`. **`_shared.md`** is the shared layer (archetypes, scoring dimensions, negotiation scaffolding); the rest align with `/job-forge` command entry points listed in `OPENCODE.md`.
+Markdown mode files in `modes/` define how the workflow behaves together with the root `AGENTS.md`. **`_shared.md`** is the shared layer (archetypes, scoring dimensions, negotiation scaffolding); the rest align with `/job-forge` command entry points listed in `AGENTS.md`.
 
 | File | Focus |
 |------|--------|
@@ -124,7 +124,7 @@ For customization (archetypes, weights, tone), start with `_shared.md` and [CUST
 5. **Score**: Weighted average across 10 dimensions (1-5)
 6. **Report**: Save as `reports/{num}-{company}-{date}.md`
 7. **PDF**: Generate ATS-optimized CV (`generate-pdf.mjs`)
-8. **Track**: Write one TSV per evaluation under `batch/tracker-additions/` (see [OPENCODE.md](../OPENCODE.md) TSV layout); fold rows into `data/applications.md` with `npm run merge` / `merge-tracker.mjs` when you are ready (not automatic in every workflow)
+8. **Track**: Write one TSV per evaluation under `batch/tracker-additions/` (see [AGENTS.md](../AGENTS.md) TSV layout); fold rows into `data/applications.md` with `npm run merge` / `merge-tracker.mjs` when you are ready (not automatic in every workflow)
 
 ## Batch Processing
 

package/iso/instructions.md

@@ -295,6 +295,8 @@ When a form says "enter the code we sent to your email", you MUST retrieve the c
 | Workday | `from:myworkday newer_than:10m` |
 | Lever | `from:lever newer_than:10m` |
 | Ashby | `from:ashby newer_than:10m` |
+| SmartRecruiters | `from:smartrecruiters newer_than:10m` |
+| Aggregator redirect (WeWorkRemotely / RemoteOK) | Detect the underlying ATS from the post-redirect URL, then use that row's sender query |
 | Unknown | `newer_than:10m subject:(verify OR code OR confirm)` |
 
 **Rules:**

package/modes/README.md

@@ -1,9 +1,9 @@
 # Modes
 
-Markdown prompts used with opencode together with the root [`OPENCODE.md`](../OPENCODE.md). Each file aligns with a `/job-forge …` entry point or shared behavior described there.
+Markdown prompts used together with the root [`AGENTS.md`](../AGENTS.md). Each file aligns with a `/job-forge …` entry point or shared behavior described there.
 
 - **`_shared.md`** — Archetypes, scoring dimensions, negotiation scaffolding. Edit this first when you change how offers are classified or weighted.
-- **Per-command files** — Each `*.md` here pairs with a `/job-forge …` entry in [`OPENCODE.md`](../OPENCODE.md). How modes connect to batch, tracker, and scripts is spelled out in [**Architecture — Modes**](../docs/ARCHITECTURE.md#modes-modes).
+- **Per-command files** — Each `*.md` here pairs with a `/job-forge …` entry in [`AGENTS.md`](../AGENTS.md). How modes connect to batch, tracker, and scripts is spelled out in [**Architecture — Modes**](../docs/ARCHITECTURE.md#modes-modes).
 
 | File | Role |
 |------|------|

package/modes/apply.md

@@ -276,10 +276,12 @@ Check for an OTP gate after the candidate (or Geometra) submits — the major po
 | `lever`      | `from:lever newer_than:10m` |
 | `ashby`      | `from:ashby newer_than:10m` |
 | `workable`   | `from:workable newer_than:10m` |
+| `smartrecruiters` | `from:smartrecruiters newer_than:10m` |
+| `wwr` / `remoteok` | Follow the apply redirect to the underlying ATS, re-detect the host, then use that row's query. Aggregators do not send OTP emails themselves. |
 | `builtin`    | `from:builtin newer_than:10m` |
 | `custom` / `unknown` / missing | `newer_than:10m subject:(verify OR code OR confirm)` |
 
-**Fallback when `ats` is missing** (legacy pipeline entries with no `| ats=` suffix, or scan-output without an `ats` column): infer from the URL host — `*.greenhouse.io` → `greenhouse`; `jobs.ashbyhq.com` → `ashby`; `jobs.lever.co` → `lever`; `*.myworkdayjobs.com` → `workday`; `apply.workable.com` / `jobs.workable.com` → `workable`; `builtin.com` → `builtin`; otherwise use the generic `verify OR code OR confirm` subject query.
+**Fallback when `ats` is missing** (legacy pipeline entries with no `| ats=` suffix, or scan-output without an `ats` column): infer from the URL host — `*.greenhouse.io` → `greenhouse`; `jobs.ashbyhq.com` → `ashby`; `jobs.lever.co` → `lever`; `*.myworkdayjobs.com` → `workday`; `apply.workable.com` / `jobs.workable.com` → `workable`; `api.smartrecruiters.com` / `jobs.smartrecruiters.com` → `smartrecruiters`; `weworkremotely.com` → `wwr`; `remoteok.com` → `remoteok`; `builtin.com` → `builtin`; otherwise use the generic `verify OR code OR confirm` subject query.
 
 **Before reporting the submission as failed, always check Gmail.** A "submit did nothing" outcome usually means a silent OTP step — not a real failure.
 

package/modes/scan.md

@@ -34,9 +34,88 @@ Read `portals.yml` which contains:
 
 **Every company MUST have a `careers_url` in portals.yml.** If it doesn't, search for it once, save it, and use it in future scans.
 
-### Use Level 2 — Greenhouse API (COMPLEMENTARY)
-
-For companies using Greenhouse, the JSON API (`boards-api.greenhouse.io/v1/boards/{slug}/jobs`) returns clean structured data. Use as a quick complement to Level 1 — it's faster than Geometra but only works with Greenhouse.
+### Use Level 2 — ATS / Aggregator APIs (COMPLEMENTARY)
+
+For companies using an ATS or aggregator that exposes a public JSON/RSS API, fetch structured data directly. APIs are faster than Geometra and harder to hallucinate (the response is load-bearing — record IDs verbatim from the response, never reconstruct them). Use as a complement to Level 1.
+
+Supported API shapes:
+
+#### Greenhouse (JSON, per-company board)
+
+- **Endpoint**: `https://boards-api.greenhouse.io/v1/boards/{slug}/jobs`
+- **Method**: `GET` (plain, no auth)
+- **Shape**: `{ jobs: [{ id, title, absolute_url, updated_at, location: { name } }, ...] }`
+- **Canonical URL to record**: `https://job-boards.greenhouse.io/{slug}/jobs/{id}` — do NOT use `absolute_url` when it points to a customer-skinned front-end (see Verification section below).
+- **ats**: `greenhouse`
+
+#### Ashby (JSON, per-company board)
+
+- **Endpoint**: `https://api.ashbyhq.com/posting-api/job-board/{slug}?includeCompensation=true`
+- **Method**: `GET`
+- **Shape**: `{ jobs: [{ id, title, jobUrl, publishedDate, locationName, employmentType, department, team, compensation }] }`
+- **Canonical URL to record**: use the returned `jobUrl` (format `https://jobs.ashbyhq.com/{slug}/{uuid}`).
+- **ats**: `ashby`
+
+#### Lever (JSON, per-company board)
+
+- **Endpoint**: `https://api.lever.co/v0/postings/{slug}?mode=json`
+- **Method**: `GET`
+- **Shape**: array of postings `[{ id, text, hostedUrl, createdAt, categories: { commitment, department, location, team } }, ...]`
+- **Canonical URL to record**: `hostedUrl` (format `https://jobs.lever.co/{slug}/{uuid}`).
+- **ats**: `lever`
+
+#### Workday (JSON, per-tenant + site — FINICKY)
+
+- **Endpoint**: `https://{subdomain}.{pod}.myworkdayjobs.com/wday/cxs/{tenant}/{site}/jobs`
+  - `subdomain` = the Workday tenant hostname prefix (e.g. `nvidia`, `salesforce`, `adobe`, `shopify`).
+  - `pod` = the Workday data-center pod segment (varies: `wd1`, `wd3`, `wd5`). The hostname in `careers_url` reveals which.
+  - `tenant` = repeats the company slug in the path (usually equal to `subdomain`, but not always).
+  - `site` = the public site name exposed by the tenant (e.g. `NVIDIAExternalCareerSite`, `External`, `ShopifyCareerSite`). Read it from the tenant's HTML landing page if unknown.
+- **Method**: `POST` with JSON body:
+  ```json
+  {"appliedFacets": {}, "limit": 20, "offset": 0, "searchText": ""}
+  ```
+- **Required headers**: `Content-Type: application/json`, `Accept: application/json`. Some tenants reject requests without a realistic `User-Agent` — set one if the response is 403.
+- **Shape**: `{ jobPostings: [{ title, externalPath, postedOn, locationsText, bulletFields }, ...], total }`
+- **Canonical URL to record**: `https://{subdomain}.{pod}.myworkdayjobs.com/{site}{externalPath}` (note: `externalPath` already starts with `/job/...` — do NOT prepend an extra `/`).
+- **Pagination**: increment `offset` by `limit` (20) until `jobPostings.length < limit` or `offset >= total`.
+- **ats**: `workday`
+- **Fallback**: Workday APIs are brittle — tenants occasionally block POST from data-center IPs, change `site` names silently, or return empty `jobPostings` while the HTML page shows listings. If the POST fails or returns 0 jobs on a tenant that Level 1 confirmed has listings, fall back to Level 1 (Geometra scraping the `careers_url`). Treat Workday as Level 2 with a guaranteed Level 1 fallback.
+
+#### SmartRecruiters (JSON, per-company postings)
+
+- **Endpoint**: `https://api.smartrecruiters.com/v1/companies/{company}/postings`
+- **Method**: `GET` (plain, no auth)
+- **Shape**: `{ content: [{ id, name, refNumber, jobAdUrl, releasedDate, location: { city, country, remote }, company: { identifier, name }, department }], totalFound, offset, limit }`
+- **Canonical URL to record**: use `jobAdUrl` when present, otherwise `https://jobs.smartrecruiters.com/{company}/{id}`.
+- **Pagination**: pass `?offset=N&limit=100` (max 100). Loop until `offset + content.length >= totalFound`.
+- **ats**: `smartrecruiters`
+
+#### WeWorkRemotely (RSS, cross-company aggregator)
+
+- **Endpoints** (one per category — enable the ones matching your target roles):
+  - `https://weworkremotely.com/categories/remote-programming-jobs.rss`
+  - `https://weworkremotely.com/categories/remote-devops-sysadmin-jobs.rss`
+  - `https://weworkremotely.com/categories/remote-product-jobs.rss`
+  - `https://weworkremotely.com/categories/remote-design-jobs.rss`
+  - `https://weworkremotely.com/categories/all-other-remote-jobs.rss`
+- **Method**: `GET` — returns RSS 2.0 XML.
+- **Shape**: `<rss><channel><item><title>{company}: {role}</title><link>https://weworkremotely.com/remote-jobs/{slug}</link><pubDate>...</pubDate><region>...</region></item></channel></rss>`
+- **Company/role extraction**: split `<title>` on the first `: ` — left side is company, right side is role. Fallback to the whole title as role if there is no `: `.
+- **Canonical URL to record**: the `<link>` verbatim (format `https://weworkremotely.com/remote-jobs/{slug}`).
+- **Cross-company note**: WeWorkRemotely is NOT per-company — it aggregates postings from hundreds of companies. Scan it via the `cross_company_feeds` section in `portals.yml`, not `tracked_companies`.
+- **ats**: `wwr` (aggregator). The underlying company's ATS is unknown at scan time — downstream evaluators follow the link and re-detect.
+
+#### RemoteOK (JSON, cross-company aggregator)
+
+- **Endpoint**: `https://remoteok.com/api`
+- **Method**: `GET` — returns a JSON array. The **first element is a legal/disclaimer object** (no `id`, has `legal`) — skip it. The remaining 100 entries are postings.
+- **Required headers**: `User-Agent: Mozilla/5.0 ...` — RemoteOK returns 403 without a browser-like UA.
+- **Shape** (per posting after skip): `{ id, slug, company, company_logo, position, description, tags: [string], date, epoch, url, apply_url, location, salary_min, salary_max }`
+- **Canonical URL to record**: `url` (format `https://remoteok.com/remote-jobs/{id}-{slug}`).
+- **Filtering**: RemoteOK feeds are broad — use `tags` for pre-filter (e.g. `tags` contains `"engineer"` or `"ai"`) before passing through `title_filter`.
+- **Cross-company note**: same as WeWorkRemotely — configure via `cross_company_feeds`, not `tracked_companies`.
+- **ats**: `remoteok` (aggregator).
 
 ### Use Level 3 — WebSearch Queries (BROAD DISCOVERY)
 
@@ -44,7 +123,7 @@ The `search_queries` with `site:` filters cover portals broadly (all Ashby board
 
 **Execution priority:**
 1. Level 1: Geometra → all `tracked_companies` with `careers_url`
-2. Level 2: API → all `tracked_companies` with `api:`
+2. Level 2: API → all `tracked_companies` with `api:` (Greenhouse / Ashby / Lever / Workday / SmartRecruiters) AND all `cross_company_feeds` with `enabled: true` (WeWorkRemotely / RemoteOK)
 3. Level 3: WebSearch → all `search_queries` with `enabled: true`
 
 The levels are additive — all are executed, results are merged and deduplicated.
@@ -65,15 +144,26 @@ The levels are additive — all are executed, results are merged and deduplicate
    f. Accumulate in candidates list
    g. If `careers_url` fails (404, redirect), try `scan_query` as fallback and note for URL update
 
-5. **Level 2 — Greenhouse APIs** (WebFetch can batch freely — it's cheap and doesn't use Geometra sessions):
-   For each company in `tracked_companies` with `api:` defined and `enabled: true`:
-   a. WebFetch the API URL → JSON with job list
-   b. For each job extract: `{title, url, company, gh_slug, gh_id, updated_at}`
-      - **`url`**: ALWAYS record the canonical Greenhouse URL: `https://job-boards.greenhouse.io/{gh_slug}/jobs/{gh_id}`. Do **NOT** use `absolute_url` when it points to a customer-skinned front-end (e.g. `pinterestcareers.com/jobs/?gh_jid=N`, `okta.com/company/careers/opportunity/N`, `samsara.com/company/careers/roles/N`, `zoominfo.com/careers?gh_jid=N`, `collibra.com/.../?gh_jid=N`, `careers.toasttab.com/jobs?gh_jid=N`, `careers.airbnb.com/positions/N`, `coinbase.com/careers/positions/N`, `instacart.careers/job/?gh_jid=N`, `pinterestcareers.com/jobs/?gh_jid=N`). These customer front-ends return shells or 403 to bots and cause downstream WebFetch-based verification to wrongly mark the role CLOSED.
-      - **`gh_slug`**: the Greenhouse board slug (from the API URL that was fetched).
-      - **`gh_id`**: `jobs[].id` from the API response.
-      - **`updated_at`**: `jobs[].updated_at` — record for staleness detection (skip if older than 90 days, flag if older than 30).
-   c. Accumulate in candidates list (dedup with Level 1). The pipeline.md entry MUST carry `| gh={gh_slug}/{gh_id}` at the end of the metadata so downstream evaluators can fall back to `https://boards-api.greenhouse.io/v1/boards/{gh_slug}/jobs/{gh_id}` when the canonical URL renders as a shell.
+5. **Level 2 — ATS / Aggregator APIs** (WebFetch can batch freely — it's cheap and doesn't use Geometra sessions):
+
+   **5a. Per-company APIs** — for each company in `tracked_companies` with `api:` defined and `enabled: true`:
+   a. WebFetch (or `fetch` for Workday, which needs POST) the API URL per the endpoint shape documented above.
+   b. Extract per-posting `{title, url, company, updated_at, ats}` plus ATS-specific IDs:
+      - **Greenhouse** → also record `gh_slug`, `gh_id`. URL MUST be canonical `https://job-boards.greenhouse.io/{gh_slug}/jobs/{gh_id}` — do **NOT** use `absolute_url` when it points to a customer-skinned front-end (e.g. `pinterestcareers.com/jobs/?gh_jid=N`, `okta.com/company/careers/opportunity/N`, `samsara.com/company/careers/roles/N`, `zoominfo.com/careers?gh_jid=N`, `collibra.com/.../?gh_jid=N`, `careers.toasttab.com/jobs?gh_jid=N`, `careers.airbnb.com/positions/N`, `coinbase.com/careers/positions/N`, `instacart.careers/job/?gh_jid=N`). These customer front-ends return shells or 403 to bots and cause downstream WebFetch-based verification to wrongly mark the role CLOSED.
+      - **Ashby** → record the returned `jobUrl`.
+      - **Lever** → record the returned `hostedUrl`.
+      - **Workday** → build URL as `https://{subdomain}.{pod}.myworkdayjobs.com/{site}{externalPath}`. If the POST fails, DROP that tenant's API attempt and fall back to Level 1 for that company — do NOT fabricate postings.
+      - **SmartRecruiters** → record `jobAdUrl` (fallback: `https://jobs.smartrecruiters.com/{company}/{id}`).
+      - **`updated_at`**: use `updated_at` (Greenhouse) / `publishedDate` (Ashby) / `createdAt` (Lever) / `postedOn` (Workday) / `releasedDate` (SmartRecruiters) — record for staleness detection (skip if older than 90 days, flag if older than 30).
+   c. Accumulate in candidates list (dedup with Level 1). The pipeline.md entry MUST carry `| ats={type}` at the end, and for Greenhouse ALSO `| gh={gh_slug}/{gh_id}` so downstream evaluators can fall back to `https://boards-api.greenhouse.io/v1/boards/{gh_slug}/jobs/{gh_id}` when the canonical URL renders as a shell.
+
+   **5b. Cross-company aggregator feeds** — for each feed in `cross_company_feeds` with `enabled: true`:
+   a. WebFetch the RSS (WeWorkRemotely) or JSON (RemoteOK) endpoint per the shape documented above.
+   b. Parse each entry to `{title, url, company, ats, updated_at}`:
+      - **WeWorkRemotely** → split `<title>` on the first `: ` to separate company from role; `<link>` → url; `<pubDate>` → updated_at.
+      - **RemoteOK** → skip the first element (legal disclaimer); from each remaining entry take `company`, `position`, `url`, `date`.
+   c. Apply the feed's `tag_filter` / `category_filter` before the global `title_filter` — aggregators have much higher volume than per-company APIs.
+   d. Accumulate in candidates list (dedup with Level 1 + 5a).
 
 6. **Level 3 — WebSearch queries** (WebSearch is parallel-safe; batch freely):
    For each query in `search_queries` with `enabled: true`:
@@ -106,10 +196,14 @@ The levels are additive — all are executed, results are merged and deduplicate
    - When a fuzzy match is found but the URL is new, log it as `skipped_repost` (not `skipped_dup`) with a note referencing the original entry number.
 
 8. **For each new offer that passes filters**:
-   a. Add to `pipeline.md` section "Pending": `- [ ] {url} | {company} | {title} | ats={ats}` — the `| ats={type}` suffix is REQUIRED for every entry (values: `greenhouse`, `ashby`, `workable`, `lever`, `workday`, `builtin`, `custom`, `unknown`). When the offer came from the Greenhouse API (Level 2), ALSO append `| gh={gh_slug}/{gh_id}` so downstream verification can hit the JSON endpoint. Example entries:
+   a. Add to `pipeline.md` section "Pending": `- [ ] {url} | {company} | {title} | ats={ats}` — the `| ats={type}` suffix is REQUIRED for every entry (values: `greenhouse`, `ashby`, `workable`, `lever`, `workday`, `smartrecruiters`, `wwr`, `remoteok`, `builtin`, `custom`, `unknown`). When the offer came from the Greenhouse API (Level 2), ALSO append `| gh={gh_slug}/{gh_id}` so downstream verification can hit the JSON endpoint. Example entries:
       - `- [ ] https://job-boards.greenhouse.io/webflow/jobs/7689676 | Webflow | Lead AI Engineer | ats=greenhouse | gh=webflow/7689676`
       - `- [ ] https://jobs.ashbyhq.com/everai/abc-123 | EverAI | Senior AI PM | ats=ashby`
       - `- [ ] https://jobs.lever.co/temporal/xyz | Temporal | Product Manager - AI | ats=lever`
+      - `- [ ] https://nvidia.wd5.myworkdayjobs.com/NVIDIAExternalCareerSite/job/US-CA-Santa-Clara/Senior-AI-Engineer_JR123456 | NVIDIA | Senior AI Engineer | ats=workday`
+      - `- [ ] https://jobs.smartrecruiters.com/Visa1/744000012345678 | Visa | Staff ML Engineer | ats=smartrecruiters`
+      - `- [ ] https://weworkremotely.com/remote-jobs/acme-senior-platform-engineer | Acme | Senior Platform Engineer | ats=wwr`
+      - `- [ ] https://remoteok.com/remote-jobs/12345-senior-ai-engineer-acme | Acme | Senior AI Engineer | ats=remoteok`
    b. Record in `scan-history.tsv`: `{url}\t{date}\t{query_name}\t{title}\t{company}\tadded`
 
 9. **Offers filtered by title**: record in `scan-history.tsv` with status `skipped_title`
@@ -158,10 +252,10 @@ Scan mode MUST write its ranked candidate list to a file, not just return it in
 | 2    | EverAI  | ashby      | Senior AI PM     | -       | -       | https://jobs.ashbyhq.com/everai/abc-123 | 2026-04-15 |
 | ... | ... | ... | ... | ... | ... | ... | ... |
 
-**`ats` values** (one of): `greenhouse`, `ashby`, `workable`, `lever`, `workday`, `builtin`, `custom`, `unknown`. Every row MUST populate this column — it's what the apply subagent uses to pick the correct Gmail OTP sender query.
+**`ats` values** (one of): `greenhouse`, `ashby`, `workable`, `lever`, `workday`, `smartrecruiters`, `wwr`, `remoteok`, `builtin`, `custom`, `unknown`. Every row MUST populate this column — it's what the apply subagent uses to pick the correct Gmail OTP sender query. The `wwr` and `remoteok` values identify aggregator postings whose real underlying ATS is only known after the redirect is followed — downstream evaluators re-detect and may rewrite to the underlying ATS.
 
 Every row MUST have:
-- `ats` — the ATS platform hosting the posting. Inferred from the canonical URL host (e.g. `boards-api.greenhouse.io` / `job-boards.greenhouse.io` → `greenhouse`; `jobs.ashbyhq.com` → `ashby`; `jobs.lever.co` → `lever`; `myworkdayjobs.com` / `.wd5.myworkdayjobs.com` → `workday`; `apply.workable.com` / `jobs.workable.com` → `workable`; `builtin.com/jobs/` → `builtin`; company-own domains → `custom`; anything indeterminate → `unknown`).
+- `ats` — the ATS platform hosting the posting. Inferred from the canonical URL host (e.g. `boards-api.greenhouse.io` / `job-boards.greenhouse.io` → `greenhouse`; `jobs.ashbyhq.com` → `ashby`; `jobs.lever.co` → `lever`; `*.myworkdayjobs.com` (any `wd1`/`wd3`/`wd5` pod) → `workday`; `apply.workable.com` / `jobs.workable.com` → `workable`; `api.smartrecruiters.com` / `jobs.smartrecruiters.com` → `smartrecruiters`; `weworkremotely.com` → `wwr`; `remoteok.com` → `remoteok`; `builtin.com/jobs/` → `builtin`; company-own domains → `custom`; anything indeterminate → `unknown`).
 - `url` in canonical form. For Greenhouse use `https://job-boards.greenhouse.io/{gh_slug}/jobs/{gh_id}` (matching the suffix in `data/pipeline.md`). For other ATSes use the platform's native URL (do not rewrite).
 - `updated_at` in `YYYY-MM-DD` form (the most recent `updated_at` in the API response, or scan date when the source has no such field).
 
@@ -214,6 +308,8 @@ Each company in `tracked_companies` MUST have a `careers_url` — the direct URL
 - **Ashby:** `https://jobs.ashbyhq.com/{slug}`
 - **Greenhouse:** `https://job-boards.greenhouse.io/{slug}` or `https://job-boards.eu.greenhouse.io/{slug}`
 - **Lever:** `https://jobs.lever.co/{slug}`
+- **Workday:** `https://{subdomain}.{pod}.myworkdayjobs.com/{site}` (pod = `wd1`/`wd3`/`wd5`/..., varies by tenant data center; site is tenant-defined, e.g. `External`, `NVIDIAExternalCareerSite`)
+- **SmartRecruiters:** `https://careers.smartrecruiters.com/{company}` (human-facing) / `https://api.smartrecruiters.com/v1/companies/{company}/postings` (API)
 - **Custom:** The company's own URL (e.g., `https://openai.com/careers`)
 
 **If `careers_url` doesn't exist** for a company:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "job-forge",
-  "version": "2.0.3",
+  "version": "2.1.0",
   "description": "AI-powered job search pipeline built on opencode",
   "type": "module",
   "bin": {

package/templates/portals.example.yml

@@ -406,6 +406,36 @@ search_queries:
 # Companies whose career pages are checked directly.
 # scan_method: geometra (default), websearch, greenhouse_api
 # For Greenhouse companies, add api: field for faster structured JSON access.
+#
+# Per-ATS api: field shapes (see modes/scan.md for full endpoint docs):
+#
+#   Greenhouse:     api: https://boards-api.greenhouse.io/v1/boards/{slug}/jobs
+#   Ashby:          api: https://api.ashbyhq.com/posting-api/job-board/{slug}?includeCompensation=true
+#   Lever:          api: https://api.lever.co/v0/postings/{slug}?mode=json
+#   SmartRecruiters: api: https://api.smartrecruiters.com/v1/companies/{company}/postings
+#   Workday:        api_type: workday  (requires workday_subdomain, workday_pod, workday_tenant, workday_site)
+#
+# Workday schema (finicky — POST with JSON body, tenant + site vary per company):
+#   - name: NVIDIA
+#     careers_url: https://nvidia.wd5.myworkdayjobs.com/NVIDIAExternalCareerSite
+#     api_type: workday
+#     workday_subdomain: nvidia                  # hostname prefix
+#     workday_pod: wd5                           # data-center pod (wd1/wd3/wd5/...)
+#     workday_tenant: nvidia                     # usually same as subdomain
+#     workday_site: NVIDIAExternalCareerSite     # public site name — read from careers_url path
+#     tags: ["chips", "ai-lab", "us"]
+#     enabled: true
+#
+#   Built API URL: https://{subdomain}.{pod}.myworkdayjobs.com/wday/cxs/{tenant}/{site}/jobs
+#   POST body:     {"appliedFacets": {}, "limit": 20, "offset": 0, "searchText": ""}
+#
+# SmartRecruiters schema (simple GET):
+#   - name: Visa
+#     careers_url: https://careers.smartrecruiters.com/Visa1
+#     api: https://api.smartrecruiters.com/v1/companies/Visa1/postings
+#     ats: smartrecruiters
+#     tags: ["fintech", "enterprise", "us"]
+#     enabled: true
 
 tracked_companies:
 
@@ -3138,3 +3168,80 @@ tracked_companies:
     notes: "TypeScript ORM. Remote."
     tags: ["developer-tools", "open-source", "remote-first"]
     enabled: true
+
+# -- Cross-company aggregator feeds --
+# Aggregator boards that expose a single feed covering hundreds of companies.
+# Unlike tracked_companies, these are NOT per-company — the scanner pulls the
+# whole feed, applies a pre-filter (category / tags), then runs each posting
+# through the global title_filter above.
+#
+# Types:
+#   - weworkremotely  → RSS 2.0 XML per category
+#   - remoteok        → JSON array, first element is a legal disclaimer (skipped)
+#
+# See modes/scan.md → "Level 2 — ATS / Aggregator APIs" for full shape docs.
+
+cross_company_feeds:
+
+  # -- We Work Remotely (RSS per category) --
+  # Feed IDs map to https://weworkremotely.com/categories/{id}.rss
+  - name: WeWorkRemotely — Programming
+    type: weworkremotely
+    feed: remote-programming-jobs
+    url: https://weworkremotely.com/categories/remote-programming-jobs.rss
+    # Optional pre-filter applied BEFORE title_filter. Drops obviously
+    # off-target entries without cluttering scan-history.
+    category_filter:
+      positive: []   # empty = accept all from this feed
+      negative: ["WordPress", "PHP", "Shopify Theme"]
+    enabled: true
+
+  - name: WeWorkRemotely — DevOps & SysAdmin
+    type: weworkremotely
+    feed: remote-devops-sysadmin-jobs
+    url: https://weworkremotely.com/categories/remote-devops-sysadmin-jobs.rss
+    enabled: true
+
+  - name: WeWorkRemotely — Product
+    type: weworkremotely
+    feed: remote-product-jobs
+    url: https://weworkremotely.com/categories/remote-product-jobs.rss
+    enabled: true
+
+  - name: WeWorkRemotely — All Other
+    type: weworkremotely
+    feed: all-other-remote-jobs
+    url: https://weworkremotely.com/categories/all-other-remote-jobs.rss
+    # This category is very broad — start disabled, enable if signal is good.
+    enabled: false
+
+  # -- RemoteOK (single JSON feed, filter by tags) --
+  # One endpoint, 100 newest postings. Filter by tags BEFORE title_filter,
+  # otherwise you burn the title_filter pass on ~80% irrelevant rows.
+  - name: RemoteOK — AI & Engineering
+    type: remoteok
+    url: https://remoteok.com/api
+    # Required — RemoteOK returns 403 without a browser-like UA.
+    user_agent: "Mozilla/5.0 (compatible; JobForgeScanner/1.0; +https://github.com/razroo/JobForge)"
+    # Pre-filter on entry.tags (case-insensitive substring match against the
+    # array). Row passes if ANY positive matches AND NO negative matches.
+    tag_filter:
+      positive:
+        - "engineer"
+        - "engineering"
+        - "ai"
+        - "ml"
+        - "llm"
+        - "python"
+        - "golang"
+        - "typescript"
+        - "devops"
+        - "platform"
+        - "product manager"
+      negative:
+        - "wordpress"
+        - "php"
+        - "marketing"
+        - "sales"
+        - "customer support"
+    enabled: true