job-pro 1.0.37 → 1.0.39

package/dist/alibaba.js

@@ -502,7 +502,8 @@ export async function fetchApplicationSchema(postId) {
             applyUrl,
             submitEndpoint: "https://campus-talent.alibaba.com/campus/applyPosition.json",
             submitKind: "multipart-session",
-            submitNotes: "Alibaba — POST /campus/applyPosition.json with session cookie. Alipay OAuth gates the session. Endpoint inferred; needs validation.",
+            endpointVerified: true,
+            submitNotes: "Alibaba — POST /campus/applyPosition.json with session cookie. Alipay OAuth gates the session. Endpoint anon-probed → HTTP 403 (auth gate, not 404 — confirms real route). Body shape still needs validation against a real candidate session.",
         }),
     };
 }

package/dist/apply.js

@@ -409,6 +409,7 @@ export function buildBespokeApplySchema(cfg) {
         submit_method: cfg.submitEndpoint ? "POST" : undefined,
         submit_kind: cfg.submitKind ?? "multipart-session",
         submit_notes: cfg.submitNotes,
+        endpoint_verified: cfg.endpointVerified,
         questions: [...standard, ...(cfg.extraQuestions ?? [])],
     };
 }

package/dist/moka.js

@@ -444,12 +444,15 @@ export function createAdapter(cfg) {
                 submit_endpoint: "https://app.mokahr.com/api/outer/ats-apply/website/apply",
                 submit_method: "POST",
                 submit_kind: "moka-aes",
+                endpoint_verified: true,
                 submit_notes: "Moka apply flow: GET /api/get_job_apply_form (questions) → " +
                     "POST /applicant-limit-check (rate-limit) → POST /getValidateConfig + " +
                     "/sendApplyValidateSmsCode (if SMS required) → POST /website/apply with " +
                     "AES-128-CBC envelope {data, necromancer} (same encryption as the read-side " +
-                    "list endpoint). Requires candidate session — capture via extension/, drop " +
-                    "session.json under ~/.jobpro/. Multi-step submitter wires in next iteration.",
+                    "list endpoint). Endpoint URL anon-probed (returns the AES envelope rather " +
+                    "than HTML fallthrough — confirms it's the real route, not a guess). " +
+                    "Requires candidate session — capture via extension/, drop session.json " +
+                    "under ~/.jobpro/.",
                 questions,
             },
         };

package/dist/pdd.js

@@ -607,7 +607,8 @@ export async function fetchApplicationSchema(postId) {
             applyUrl,
             submitEndpoint: "https://careers.pinduoduo.com/api/recruit/v1/position/apply",
             submitKind: "multipart-session",
-            submitNotes: "PDD — POST /api/recruit/v1/position/apply with session cookie. Endpoint inferred; needs validation.",
+            endpointVerified: true,
+            submitNotes: "PDD — POST /api/recruit/v1/position/apply with session cookie. Endpoint anon-probed → returns {error_code: 40003} (real business error, not 404) — route confirmed; body shape still needs validation.",
         }),
     };
 }

package/dist/sf.js

@@ -303,7 +303,7 @@ export async function fetchApplicationSchema(postId) {
             applyUrl,
             submitEndpoint: "https://campus.sf-express.com/api/web/position/apply",
             submitKind: "multipart-session",
-            submitNotes: "SF Express — POST /api/web/position/apply with cr-service header + GeeTest captcha + session cookie. Endpoint inferred; needs validation.",
+            submitNotes: "SF Express — POST /api/web/position/apply with cr-service header + GeeTest captcha + session cookie. Endpoint anon-probed → 404; the apply route lives somewhere else (likely behind login). The detail endpoint at /api/web/position/findById/<id> is real (see fetchPositionDetail), but the apply path needs real-browser recon.",
         }),
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "job-pro",
-  "version": "1.0.37",
+  "version": "1.0.39",
   "description": "Query Chinese big-tech campus recruiting from your terminal. 50 companies, all 50 live. 46 via each company's own API; the 4 with no public canonical feed (Hikvision, CICC, Cainiao, WeBank) surfaced via Liepin as a clearly-labeled third-party fallback. No signup, no token, no server.",
   "homepage": "https://job.ha7ch.com",
   "repository": "https://github.com/HA7CH/job-pro",