job-forge 2.14.7 → 2.14.9

package/modes/apply.md

@@ -16,8 +16,8 @@ Live application assistant. Reads the active application form in Chrome (via Geo
 - [H4] Before dispatching the first subagent in a multi-job run, the orchestrator MUST call `geometra_list_sessions` then `geometra_disconnect({closeBrowser: true})`. Every dispatch-round, no exceptions.
   why: prior aborted subagents leave Chromium sessions stuck in the pool; next `geometra_connect` fails with "Not connected" (see root `[H3]`)
 
-- [H5] Max 2 parallel `task` dispatches per round. For N jobs, run `ceil(N/2)` sequential rounds of 2. Never emit 3+ dispatches in a single message.
-  why: free-tier rate limits + subagent post-cleanup cost; racing more than 2 reliably loses at least one result (see root `[H1]`)
+- [H5] Max 2 parallel `task` dispatches per round. For N jobs, run `ceil(N/2)` sequential rounds of 2. Never emit 3+ dispatches in a single message. Do not start the next round until both current-round subagents return final outcomes (`APPLIED`, `APPLY FAILED`, `SKIP`, `Discarded`, or a written TSV path); task/session ids are only launch receipts.
+  why: free-tier rate limits + subagent post-cleanup cost; racing more than 2 reliably loses at least one result (see root `[H1]`). A 2026-04-25 OpenCode trace launched round 2 while round 1 was still running, then lost two fallback recoveries
 
 ## Defaults
 
@@ -42,8 +42,14 @@ Live application assistant. Reads the active application form in Chrome (via Geo
 - [D6] Use `fieldLabel` over `fieldId` everywhere it works.
   why: labels are stable across DOM refreshes; IDs are regenerated
 
-- [D7] If the orchestrator's task prompt includes a `proxy` object (sourced from `config/profile.yml`), pass it verbatim into every `geometra_connect` call — including Call 3 of the recovery sequence. If absent, run without one; never invent a proxy URL.
-  why: class-B Ashby / Cloudflare-fronted portals need a residential outbound IP; the fix is wired in Geometra MCP v1.59.0 but the orchestrator owns the config pipe. See "BYO Residential Proxy" in iso/instructions.md.
+- [D7] If the orchestrator says a proxy is configured, read the top-level `proxy:` block from `config/profile.yml` and pass that object into every `geometra_connect` call — including Call 3 of the recovery sequence. If the task prompt includes a legacy inline `proxy` object, pass it through, but do not echo credentials in status text. If absent, run without one; never invent a proxy URL.
+  why: class-B Ashby / Cloudflare-fronted portals need a residential outbound IP; the fix is wired in Geometra MCP v1.59.0 but the orchestrator owns the config pipe. See "BYO Residential Proxy" in modes/reference-portals.md.
+
+- [D8] Upgrade application routing to `@general-paid` when the offer score is ≥ 4.0/5, the user flags "top-tier", "dream job", or "high-stakes", or the candidate is late-stage/post-screen.
+  why: form-fill flows are 6+ steps; free-tier sometimes aborts mid-flow on large Greenhouse/Workday schemas; paid tier has more headroom
+
+- [D9] If an upgraded `@general-paid` subagent fails with provider-side errors, re-dispatch the same URL once on `@general-free` before marking FAILED. Provider-side errors include Venice, Diem, Chutes, HTTP 402/429, insufficient credits/funds/balance, overload, and temporarily unavailable.
+  why: OpenCode paid-tier routing can still use free OpenRouter model IDs; backend pool limits are not evidence that a procedural free-tier worker cannot complete the same form after preflight gates pass
 
 ## Procedure
 
@@ -54,14 +60,16 @@ Live application assistant. Reads the active application form in Chrome (via Geo
 5. Compare role on screen vs evaluated role [D3].
 6. If different, pause for the candidate's decision [D3].
 7. Before dispatch, run Geometra cleanup [H4] and location filter [D1].
-8. Extract form questions; classify each Section-G vs new.
-9. Generate answers from Block B + Block F + Section G + JD.
-10. Submit as ONE `run_actions` call [H1] using labels [D6] with `imeFriendly: true` [D4].
-11. On session error, run the 4-step recovery; only one retry [H2].
-12. On OTP prompt, fetch the code from Gmail via `gmail_get_message`.
-13. Submit the OTP with `geometra_fill_otp` and click Submit.
-14. Write outcome as `batch/tracker-additions/*.tsv` [H3].
-15. Cap parallelism at 2 per round [H5]; one in-flight per company.
+8. Route high-stakes applications through `@general-paid` [D8].
+9. Extract form questions; classify each Section-G vs new.
+10. Generate answers from Block B + Block F + Section G + JD.
+11. Submit as ONE `run_actions` call [H1] using labels [D6] with `imeFriendly: true` [D4].
+12. On session error, run the 4-step recovery; only one retry [H2].
+13. On upgraded-provider failure, downgrade once to `@general-free` [D9].
+14. On OTP prompt, fetch the code from Gmail via `gmail_get_message`.
+15. Submit the OTP with `geometra_fill_otp` and click Submit.
+16. Write outcome as `batch/tracker-additions/*.tsv` [H3].
+17. Cap parallelism at 2 per round [H5]; one in-flight per company.
 
 ## Routing
 
@@ -107,6 +115,13 @@ Sections below are the detailed runbooks, decision tables, and portal-specific e
 
 **DO NOT dispatch 3+ `task` calls in one message.** Two is the absolute ceiling. This is non-negotiable, even when the user asks for "apply to 10 jobs" — that becomes 5 rounds of 2, not one message with 10 dispatches.
 
+**A task/session id is not a result.** If OpenCode gives you a `ses_...`
+id or title after dispatch, do not treat that as the subagent return.
+Do not create another `task` to check it. Stop the round, report the
+in-flight ids, and resume only after a real outcome is visible in the
+subagent return or in an authoritative file (`batch/tracker-additions/`,
+`batch/tracker-additions/merged/`, or the day file).
+
 For a single application interactively, carry on in the current session — the rule targets multi-job loops.
 
 ## Apply Preflight — Location Filter (orchestrator runs before dispatch)
@@ -168,7 +183,8 @@ Step 4  — For round in ceil(N/2):
             # ONE message, 1 or 2 task() calls. Never 3.
             task(apply to pair[0])
             task(apply to pair[1])  # only if pair has 2
-            # WAIT for both returns. Do not proceed until both done.
+            # WAIT for both final outcomes. A session id is not completion.
+            # Do not dispatch round N+1 while round N is still in flight.
 Step 5  — Between rounds: geometra_list_sessions() + geometra_disconnect({closeBrowser: true})
 Step 6  — Reconcile outcomes (Hard Limit #6):
             bash: npx job-forge merge       # TSVs → day file

package/modes/reference-geometra.md

@@ -188,7 +188,8 @@ Step 2:  geometra_disconnect({ closeBrowser: true })
 Step 3:  geometra_connect({ pageUrl: "<the URL the orchestrator gave you>", isolated: true, headless: true, slowMo: 350 })
 ```
 
-**If the orchestrator passed a `proxy` object in the task prompt** (sourced from `config/profile.yml`), add it to Step 3:
+**If the orchestrator says proxy is configured,** read the top-level
+`proxy:` block from `config/profile.yml` and add it to Step 3:
 
 ```
 Step 3:  geometra_connect({
@@ -197,7 +198,7 @@ Step 3:  geometra_connect({
          })
 ```
 
-Pass the proxy object through unchanged. Do NOT paraphrase or drop fields — `username`/`password`/`bypass` are optional, so only include what the orchestrator gave you. See the "BYO Residential Proxy" reference section for the why.
+Pass the proxy object through unchanged. Do NOT paraphrase or drop fields — `username`/`password`/`bypass` are optional, so only include what exists in `config/profile.yml`. Do not echo proxy credentials in status text. See the "BYO Residential Proxy" reference section for the why.
 
 **DO NOT** skip Step 1 or Step 2. **DO NOT** think about whether it's needed. **DO NOT** look at `geometra_list_sessions` output and reason about it — just always call `geometra_disconnect({ closeBrowser: true })` next. The disconnect is a no-op if the pool is empty, and a poison-cure if it isn't.
 

package/modes/reference-portals.md

@@ -75,16 +75,17 @@ See `config/profile.example.yml` for the commented-out template.
 
 **Orchestrator responsibilities:**
 
-1. On session start, read `config/profile.yml` once. If a `proxy:` block is present, capture it as the `PROXY_CONFIG` for the session.
-2. When dispatching any subagent whose work involves a `geometra_connect` call, include `PROXY_CONFIG` verbatim in the task prompt. Example dispatch prompt line: "Pass `proxy: { server: ..., username: ..., password: ..., bypass: ... }` to every `geometra_connect` call you make."
-3. When the orchestrator itself opens a Chromium session (single-application interactive flow), include the same `proxy` object in its own `geometra_connect` call.
+1. On session start, read `config/profile.yml` once. If a `proxy:` block is present, remember that a proxy is configured, but do not paste username/password values into task prompts or user-visible status.
+2. When dispatching any subagent whose work involves a `geometra_connect` call, tell it to read `config/profile.yml` and pass the top-level `proxy:` block to every `geometra_connect` call. Example dispatch prompt line: "Proxy is configured; read `config/profile.yml` and pass its top-level `proxy:` object to every `geometra_connect` call."
+3. When the orchestrator itself opens a Chromium session (single-application interactive flow), include the same `proxy` object from `config/profile.yml` in its own `geometra_connect` call.
 4. If `proxy:` is absent from `profile.yml`, skip the param entirely. Do NOT invent a proxy URL or leave a stale placeholder.
 
 **Subagent responsibilities:**
 
-1. If the task prompt includes a `proxy` object, pass it through to `geometra_connect` and any `geometra_prepare_browser` calls unchanged.
-2. If the task prompt does NOT include a proxy object, run without one.
-3. Never second-guess the proxy field — if the orchestrator sourced it from `profile.yml`, it's authoritative.
+1. If the task prompt says proxy is configured, read `config/profile.yml` and pass the top-level `proxy:` object through to `geometra_connect` and any `geometra_prepare_browser` calls unchanged.
+2. If the task prompt includes a legacy inline `proxy` object, pass it through unchanged, but never print the credentials back in status text.
+3. If the task prompt does NOT mention a proxy and `config/profile.yml` has no `proxy:` block, run without one.
+4. Never second-guess the proxy field — if it comes from `profile.yml`, it's authoritative.
 
 ### When proxy use is load-bearing
 

package/opencode.json

@@ -50,6 +50,20 @@
       "environment": {
         "DISABLE_HTTP": "true"
       }
+    },
+    "state-trace": {
+      "type": "local",
+      "command": [
+        "uvx",
+        "--from",
+        "state-trace[mcp]",
+        "state-trace-mcp"
+      ],
+      "environment": {
+        "STATE_TRACE_STORAGE_PATH": ".state-trace/memory.db",
+        "STATE_TRACE_NAMESPACE": "job-forge",
+        "STATE_TRACE_CAPACITY_LIMIT": "256"
+      }
     }
   },
   "plugin": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "job-forge",
-  "version": "2.14.7",
+  "version": "2.14.9",
   "description": "AI-powered job search pipeline built on opencode",
   "type": "module",
   "bin": {
@@ -28,6 +28,7 @@
     "test:agentmd:baseline": "agentmd test iso/instructions.md --fixtures fixtures/instructions.yml --via claude-code --model claude-haiku-4-5 --concurrency 2 --trials 3 --format json --out fixtures/baseline.json",
     "test:agentmd:apply": "agentmd test modes/apply.md --fixtures fixtures/modes/apply.yml --via claude-code --model claude-haiku-4-5 --concurrency 2 --trials 3",
     "lint:agentmd:modes": "agentmd lint modes/apply.md",
+    "smoke:iso": "iso plan . && iso build . --dry-run && iso-route verify models.yaml && node scripts/check-iso-smoke.mjs . && JOBFORGE_ROOT=$PWD iso-eval run fixtures/iso-smoke/eval.yml",
     "build:config": "iso build .",
     "prepack": "iso build .",
     "release:check-source": "node ./scripts/release/check-source.mjs",
@@ -87,10 +88,12 @@
     "playwright": "^1.58.1"
   },
   "devDependencies": {
+    "@razroo/agentmd": "^0.3.0",
     "@razroo/iso": "^0.2.5",
+    "@razroo/iso-eval": "^0.4.0",
     "@razroo/iso-harness": "^0.6.1",
-    "@razroo/iso-route": "^0.5.2",
-    "@razroo/iso-trace": "^0.3.1",
+    "@razroo/iso-route": "^0.5.3",
+    "@razroo/iso-trace": "^0.4.0",
     "@razroo/opencode-model-fallback": "^0.3.1"
   }
 }

package/scripts/check-iso-smoke.mjs

@@ -0,0 +1,43 @@
+#!/usr/bin/env node
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+
+const root = resolve(process.argv[2] ?? ".");
+const files = {
+  instructions: readFileSync(resolve(root, "iso/instructions.md"), "utf8"),
+  apply: readFileSync(resolve(root, "modes/apply.md"), "utf8"),
+  models: readFileSync(resolve(root, "models.yaml"), "utf8"),
+  config: readFileSync(resolve(root, "iso/config.json"), "utf8"),
+};
+
+const checks = [
+  ["root defines H1-H7", () => every(files.instructions, ["[H1]", "[H2]", "[H3]", "[H4]", "[H5]", "[H6]", "[H7]"])],
+  ["H1 caps dispatches at 2", () => /Max 2 parallel `task` dispatches/.test(files.instructions)],
+  ["H2 checks all duplicate sources", () => every(files.instructions, ["data/pipeline.md", "data/applications/*.md", "batch/tracker-additions/*.tsv", "batch/tracker-additions/merged/*.tsv"])],
+  ["H3 names Geometra cleanup calls", () => every(files.instructions, ["geometra_list_sessions", "geometra_disconnect({closeBrowser: true})"])],
+  ["H4 blocks orchestrator form filling", () => every(files.instructions, ["MUST NOT call `geometra_fill_form`", "`geometra_run_actions`", "`geometra_fill_otp`"])],
+  ["H5 blocks same-company concurrent retry", () => every(files.instructions, ["Re-dispatch the same company only AFTER", "previous subagent returns"])],
+  ["H6 requires merge and verify", () => every(files.instructions, ["batch/tracker-additions/*.tsv", "npx job-forge merge", "npx job-forge verify"])],
+  ["H7 distrusts subagent prose", () => every(files.instructions, ["must originate from a file", "not from prior subagent prose"])],
+  ["shared prompt points to on-demand references", () => every(files.instructions, ["modes/{mode}.md", "modes/reference-setup.md", "modes/reference-portals.md", "modes/reference-geometra.md"])],
+  ["apply mode owns high-stakes upgrade", () => every(files.apply, ["[D8]", "@general-paid", "4.0/5", "high-stakes"])],
+  ["apply mode owns provider downgrade", () => every(files.apply, ["[D9]", "@general-free", "HTTP 402/429", "insufficient credits/funds/balance"])],
+  ["models policy extends free OpenRouter preset", () => /extends:\s*openrouter-free/.test(files.models)],
+  ["OpenCode fallback plugin is configured", () => every(files.config, ["opencodeModelFallback", "@razroo/opencode-model-fallback"])],
+];
+
+const failures = checks
+  .filter(([, check]) => !check())
+  .map(([name]) => name);
+
+if (failures.length > 0) {
+  console.error("JobForge iso smoke failed:");
+  for (const failure of failures) console.error(`- ${failure}`);
+  process.exit(1);
+}
+
+console.log(`JobForge iso smoke passed (${checks.length} checks).`);
+
+function every(source, needles) {
+  return needles.every((needle) => source.includes(needle));
+}