jobhunt-kit 0.3.0 → 0.5.0

package/.claude-plugin/marketplace.json

@@ -8,7 +8,7 @@
       "name": "jobhunt-kit",
       "source": "./plugins/jobhunt-kit",
       "description": "Candidate intake, resume review, Hirify search and local tracking",
-      "version": "0.3.0"
+      "version": "0.5.0"
     }
   ]
 }

package/README.md

@@ -7,7 +7,7 @@ npx jobhunt-kit install
 Поиск работы вместе с AI-агентом: профиль кандидата, проверка резюме, подбор вакансий
 через Hirify, сопроводительные письма и история откликов.
 
-Нужны **Node.js 24+ и Codex или Claude Code**. Установщик предложит выбрать
+Нужны **Node.js 24+ и агент с поддержкой навыков**. Установщик предложит выбрать
 агентов и область установки: рабочая папка или глобально для пользователя.
 При установке в рабочую папку он создаст `my-jobhunt`, установит зависимости
 и подключит навык к выбранным агентам. Другой путь: `install ./my-folder`.
@@ -55,6 +55,11 @@ npx jobhunt-kit profile check
 npx jobhunt-kit search
 npx jobhunt-kit track
 npx jobhunt-kit report
+npx jobhunt-kit recover inspect
+npx jobhunt-kit recover packet <attempt_id>
+npx jobhunt-kit backup ../jobhunt-backup
+npx jobhunt-kit backup-verify ../jobhunt-backup
+npx jobhunt-kit privacy map
 ```
 
 `resume` извлекает текст PDF, DOCX, TXT или Markdown и готовит материалы для проверки
@@ -77,28 +82,68 @@ npx jobhunt-kit report
 | `reports/latest.md` | Сводный отчёт |
 
 Папка `local/` исключена из Git. Храните личные файлы в ней; для резервной копии
-сохраняйте всю папку при остановленных процессах. Данные на диске не зашифрованы.
+используйте `backup` и затем `backup-verify`. Restore принимает только проверяемую
+копию, требует точное подтверждение и предварительно делает сырой quarantine-снимок,
+который сохраняется даже тогда, когда текущие JSON или SQLite уже повреждены.
+Restore и очистка history всегда отзывают auto-разрешение и подтверждение профиля.
+Данные на диске не зашифрованы.
+
+`doctor` проверяет JSON Schema профиля/policy, SQLite integrity и foreign keys,
+незавершённые поиски/отправки и журнал атомарных файловых операций. `privacy map`
+показывает размещение PII; `privacy export`, `redact` и `purge` дают контролируемый
+экспорт и удаление. Redact/purge требуют точных подтверждений, а purge не запускается
+без отдельной резервной копии.
 
 ## Выбор агентов
 
 Без интерактивных вопросов:
 
 ```sh
-npx jobhunt-kit install --agents codex,claude
-npx jobhunt-kit install --agents codex
-npx jobhunt-kit install --agents claude --scope global
+npx jobhunt-kit install --agents codex,cursor,gemini
+npx jobhunt-kit install --agents all
+npx jobhunt-kit install --providers opencode,pi --scope global
+npx jobhunt-kit agents
 ```
 
-В режиме `project` навыки устанавливаются в созданную рабочую папку:
-Codex — `.agents/skills/jobhunt-kit`, Claude Code — `.claude/skills/jobhunt-kit`.
-В режиме `global` используются те же каталоги в домашней папке пользователя;
-рабочая папка и профиль создаются позже при обращении к агенту.
+В режиме `project` навык устанавливается в созданную рабочую папку,
+в режиме `global` — в домашнюю папку пользователя.
+
+| Агент | Значение `--agents` | Рабочая папка | Глобально (от `~`) |
+|---|---|---|---|
+| Codex | `codex` | `.agents/skills/` | `.agents/skills/` |
+| Claude Code | `claude` | `.claude/skills/` | `.claude/skills/` |
+| Cursor | `cursor` | `.cursor/skills/` | `.cursor/skills/` |
+| Gemini CLI | `gemini` | `.gemini/skills/` | `.gemini/skills/` |
+| GitHub Copilot | `github` | `.github/skills/` | `.copilot/skills/` |
+| OpenCode | `opencode` | `.opencode/skills/` | `.config/opencode/skills/` |
+| Antigravity | `antigravity` | `.agent/skills/` | `.gemini/config/skills/` |
+| Pi | `pi` | `.pi/skills/` | `.pi/agent/skills/` |
+| Grok Build | `grok` | `.grok/skills/` | `.grok/skills/` |
+| Hermes Agent | `hermes` | `.hermes/skills/` | `.hermes/skills/` |
+| DeepSeek Harness | `dsh` | `.dsh/skills/` | `.dsh/skills/` |
+| Kiro | `kiro` | `.kiro/skills/` | `.kiro/skills/` |
+| Qoder | `qoder` | `.qoder/skills/` | `.qoder/skills/` |
+| Trae | `trae` | `.trae/skills/` | `.trae/skills/` |
+| Trae CN | `trae-cn` | `.trae-cn/skills/` | `.trae-cn/skills/` |
+| Rovo Dev | `rovo-dev` | `.rovodev/skills/` | `.rovodev/skills/` |
+| Mistral Vibe | `vibe` | `.vibe/skills/` | `.vibe/skills/` |
+| Veto | `veto` | — | `.veto/skills/` |
+
+В каждом каталоге создаётся отдельная папка `jobhunt-kit` с навыком и его ресурсами.
+`--agents all` выбирает всех агентов для указанной области; Veto доступен только
+глобально. `--providers` — синоним `--agents`. Можно использовать имена
+`copilot`, `claude-code`, `deepseek` и `grok-build`.
+
+OpenCode учитывает `OPENCODE_CONFIG_DIR` и `XDG_CONFIG_HOME`; Hermes и DeepSeek —
+`HERMES_HOME` и `DSH_HOME`. Глобальные пути должны находиться в домашней папке.
+При установке Hermes в проект выполните `hermes skills trust` в рабочей папке.
+В остальных агентах при необходимости включите поддержку навыков и доверие к проекту.
 
 После установки откройте новую сессию и попросите использовать **jobhunt-kit**.
 В Claude Code можно вызвать `/jobhunt-kit`. Отдельные команды marketplace
 и `--plugin-dir` для этого способа не нужны.
 
-`--yes` выбирает обнаруженных агентов (или обоих, если ничего не обнаружено)
+`--yes` выбирает обнаруженных агентов (или Codex и Claude Code, если ничего не обнаружено)
 и область `project`. Обнаружение использует каталоги агентов, а не запускает их.
 Для скриптов задавайте `--agents` и `--scope` явно.
 
@@ -112,12 +157,14 @@ Codex — `.agents/skills/jobhunt-kit`, Claude Code — `.claude/skills/jobhunt-
 npm ci --ignore-scripts
 npm test
 npm run check
+npm run pack:smoke
 ```
 
 Тесты работают с вымышленными данными и не отправляют реальные отклики.
 
 Руководства: [формат данных](plugins/jobhunt-kit/references/storage.md),
 [проверка резюме](plugins/jobhunt-kit/references/resume-guidance.md),
-[сопроводительные письма](plugins/jobhunt-kit/references/cover-guidance.md).
+[сопроводительные письма](plugins/jobhunt-kit/references/cover-guidance.md),
+[карта приватных данных](plugins/jobhunt-kit/references/privacy.md).
 
 Автор этого шаблона никак не аффилирован с Hirify.

package/bin/agents.mjs

@@ -0,0 +1,66 @@
+import { existsSync } from 'node:fs';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+
+// Directory conventions checked against Impeccable's providers.rs and README.
+export const AGENTS = [
+  {id:'codex', name:'Codex', dir:'.agents', detect:'.codex', aliases:['agents']},
+  {id:'claude', name:'Claude Code', dir:'.claude', aliases:['claude-code']},
+  {id:'cursor', name:'Cursor', dir:'.cursor'},
+  {id:'gemini', name:'Gemini CLI', dir:'.gemini'},
+  {id:'github', name:'GitHub Copilot', dir:'.github', global:'.copilot/skills', detect:'.copilot', aliases:['copilot']},
+  {id:'opencode', name:'OpenCode', dir:'.opencode', global:'.config/opencode/skills'},
+  {id:'antigravity', name:'Antigravity', dir:'.agent', global:'.gemini/config/skills', aliases:['agent']},
+  {id:'pi', name:'Pi', dir:'.pi', global:'.pi/agent/skills'},
+  {id:'grok', name:'Grok Build', dir:'.grok', aliases:['grok-build','xai']},
+  {id:'hermes', name:'Hermes Agent', dir:'.hermes'},
+  {id:'dsh', name:'DeepSeek Harness', dir:'.dsh', aliases:['deepseek','deepseek-harness']},
+  {id:'kiro', name:'Kiro', dir:'.kiro'},
+  {id:'qoder', name:'Qoder', dir:'.qoder'},
+  {id:'trae', name:'Trae', dir:'.trae'},
+  {id:'trae-cn', name:'Trae CN', dir:'.trae-cn'},
+  {id:'rovo-dev', name:'Rovo Dev', dir:'.rovodev', aliases:['rovodev']},
+  {id:'vibe', name:'Mistral Vibe', dir:'.vibe'},
+  {id:'veto', name:'Veto', dir:'.veto', globalOnly:true}
+];
+
+export function parseAgents(value) {
+  const selected = value.split(',').map(x => x.trim().toLowerCase().replace(/^\./,''));
+  if (selected.length === 1 && selected[0] === 'all') return AGENTS.map(a=>a.id);
+  return [...new Set(selected.map(id => {
+    const found=AGENTS.find(a=>a.id===id || a.aliases?.includes(id));
+    if (!found) throw new Error(`Choose agents: ${AGENTS.map(a=>a.id).join(', ')} (or all)`);
+    return found.id;
+  }))];
+}
+
+export function skillDirectory(id, {scope, home, cwd, env = process.env}) {
+  const agent=AGENTS.find(a=>a.id===id);
+  if (!agent) throw new Error(`Unknown agent: ${id}`);
+  if (scope==='project') {
+    if (agent.globalOnly) throw new Error(`${agent.name} supports --scope global only`);
+    return join(cwd,agent.dir,'skills','jobhunt-kit');
+  }
+  let folder=join(home, agent.global || join(agent.dir,'skills'));
+  if (id==='opencode') {
+    if (env.OPENCODE_CONFIG_DIR) folder=join(resolve(cwd,env.OPENCODE_CONFIG_DIR),'skills');
+    else if (env.XDG_CONFIG_HOME) folder=join(resolve(cwd,env.XDG_CONFIG_HOME),'opencode','skills');
+  }
+  const override=id==='hermes' ? env.HERMES_HOME : id==='dsh' ? env.DSH_HOME : null;
+  if (override) folder=join(resolve(cwd,override),'skills');
+  const delta=relative(resolve(home),resolve(folder));
+  if (isAbsolute(delta) || delta==='..' || delta.startsWith(`..${sep}`)) {
+    throw new Error(`${agent.name}: global configuration path must be inside the home directory: ${folder}`);
+  }
+  return join(folder,'jobhunt-kit');
+}
+
+export function detectAgents({home,cwd,env=process.env}) {
+  return AGENTS.filter(a=>{
+    const project=a.id==='github' ? join(cwd,'.github/skills') : join(cwd,a.dir);
+    let global;
+    try { global=dirname(dirname(skillDirectory(a.id,{scope:'global',home,cwd,env}))); }
+    catch { global=null; }
+    return (!a.globalOnly && existsSync(project)) || global && existsSync(global)
+      || a.detect && existsSync(join(home,a.detect));
+  }).map(a=>a.id);
+}

package/bin/install-options.mjs

@@ -1,40 +1,38 @@
 import { parseArgs } from 'node:util';
 import { createInterface } from 'node:readline/promises';
-import { existsSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { join } from 'node:path';
+import { AGENTS, detectAgents, parseAgents } from './agents.mjs';
+export { parseAgents } from './agents.mjs';
 
-export function parseAgents(value) {
-  const agents = [...new Set(value.split(',').map(x => x.trim().toLowerCase()))];
-  if (!agents.length || agents.some(x => !['codex', 'claude'].includes(x))) {
-    throw new Error('Choose agents: codex, claude or codex,claude');
-  }
-  return agents;
-}
-
-export async function installOptions(args, { input = process.stdin, output = process.stdout, home = homedir(), cwd = process.cwd(), ask } = {}) {
+export async function installOptions(args, { input = process.stdin, output = process.stdout, home = homedir(), cwd = process.cwd(), env = process.env, ask } = {}) {
   const {values, positionals} = parseArgs({args, allowPositionals: true, options: {
-    agents: {type:'string'}, scope: {type:'string'}, yes: {type:'boolean', short:'y'}
+    agents: {type:'string'}, providers: {type:'string'}, scope: {type:'string'}, yes: {type:'boolean', short:'y'}
   }});
   if (positionals.length > 1) throw new Error('Expected at most one destination folder');
-  let agents = values.agents ? parseAgents(values.agents) : null;
+  if (values.agents && values.providers) throw new Error('Use either --agents or --providers');
+  const selection = values.agents ?? values.providers;
+  let agents = selection !== undefined ? parseAgents(selection) : null;
+  let allSelected = selection?.trim().toLowerCase()==='all';
   let scope = values.scope;
   if (scope && !['project','global'].includes(scope)) throw new Error('Scope must be project or global');
-  const detected = ['codex','claude'].filter(a => existsSync(join(home, `.${a}`)) || existsSync(join(cwd, a === 'codex' ? '.agents' : '.claude')));
+  const detected = detectAgents({home,cwd,env});
   const defaults = detected.length ? detected : ['codex','claude'];
   let terminal;
   try {
-    if (!agents && !values.yes || !scope && !values.yes && !values.agents) {
+    if (!agents && !values.yes || !scope && !values.yes && selection === undefined) {
       if (!ask && (!input.isTTY || !output.isTTY)) throw new Error('Non-interactive install: pass --agents codex,claude --scope project, or --yes');
       if (!ask) {
         terminal = createInterface({input, output});
         ask = question => terminal.question(question);
         terminal.on('SIGINT', () => terminal.close());
       }
-      output.write(`\nJobhunt Kit\nDetected: ${detected.join(', ') || 'none'}\n`);
+      output.write(`\nJobhunt Kit\n${AGENTS.map(a=>`${a.id}: ${a.name}${a.globalOnly?' (global only)':''}`).join('\n')}\nDetected: ${detected.join(', ') || 'none'}\n`);
       while (!agents) {
-        const answer = await ask(`Agents — codex, claude, or codex,claude [${defaults.join(',')}]: `);
-        try { agents = parseAgents(answer.trim() || defaults.join(',')); }
+        const answer = await ask(`Agents — comma-separated names or all [${defaults.join(',')}]: `);
+        try {
+          const chosen = answer.trim() || defaults.join(',');
+          agents = parseAgents(chosen); allSelected=chosen.toLowerCase()==='all';
+        }
         catch (e) { output.write(`${e.message}\n`); }
       }
       while (!scope) {
@@ -46,6 +44,11 @@ export async function installOptions(args, { input = process.stdin, output = pro
   } finally { terminal?.close(); }
   scope ||= 'project';
   agents ||= defaults;
+  if (scope==='project') {
+    const globalOnly = agents.filter(id=>AGENTS.find(a=>a.id===id).globalOnly);
+    if (allSelected) agents=agents.filter(id=>!globalOnly.includes(id));
+    else if (globalOnly.length) throw new Error(`${globalOnly.join(', ')} requires --scope global`);
+  }
   if (scope === 'global' && positionals.length) throw new Error('Global installation does not take a workspace folder');
   return {destination: positionals[0] || './my-jobhunt', agents, scope};
 }

package/bin/jobhunt-kit.mjs

@@ -1,15 +1,20 @@
 #!/usr/bin/env node
 import { copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, writeFileSync, realpathSync } from 'node:fs';
-import { dirname, join, relative, resolve } from 'node:path';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { spawnSync } from 'node:child_process';
 import { homedir } from 'node:os';
 import { installOptions } from './install-options.mjs';
+import { AGENTS, skillDirectory } from './agents.mjs';
 
 const SOURCE = resolve(dirname(fileURLToPath(import.meta.url)), '..');
 const roots = ['bin', 'installer-assets', 'plugins/jobhunt-kit', 'scripts', 'tests',
   'AGENTS.md', 'CLAUDE.md', 'README.md', 'package.json',
   '.agents/plugins/marketplace.json', '.claude-plugin/marketplace.json'];
+export function pathInside(parent, child, pathApi = { relative, isAbsolute, sep }) {
+  const delta = pathApi.relative(parent, child);
+  return delta === '' || (!pathApi.isAbsolute(delta) && delta !== '..' && !delta.startsWith(`..${pathApi.sep}`));
+}
 function collect(path) {
   const stat = lstatSync(path);
   if (stat.isSymbolicLink()) throw new Error(`Symlink in template: ${path}`);
@@ -26,13 +31,13 @@ function noSymlinks(path) {
     current = parent;
   }
 }
-export function install(destination, { source = SOURCE, installDependencies = true, agents = [], scope = 'project', home = homedir() } = {}) {
+export function install(destination, { source = SOURCE, installDependencies = true, agents = [], scope = 'project', home = homedir(), env = process.env } = {}) {
   if (Number(process.versions.node.split('.')[0]) < 24) throw new Error('Node.js 24 or newer is required');
-  if (!['project', 'global'].includes(scope) || agents.some(a => !['codex', 'claude'].includes(a))) throw new Error('Invalid installation scope or agents');
+  if (!['project', 'global'].includes(scope) || agents.some(a => !AGENTS.some(p=>p.id===a))) throw new Error('Invalid installation scope or agents');
   if (scope === 'global' && !agents.length) throw new Error('Global installation requires at least one agent');
   const target = resolve(scope === 'global' ? home : destination);
   source = resolve(source);
-  if (target === source || !relative(source, target).startsWith('..')) throw new Error('Choose a destination outside the installer package');
+  if (pathInside(source, target)) throw new Error('Choose a destination outside the installer package');
   const files = new Map();
   if (scope === 'project') {
     for (const root of roots) for (const path of collect(join(source, root))) files.set(relative(source, path), path);
@@ -43,7 +48,7 @@ export function install(destination, { source = SOURCE, installDependencies = tr
   }
   const destinations = [];
   for (const agent of [...new Set(agents)]) {
-    const native = join(agent === 'codex' ? '.agents' : '.claude', 'skills', 'jobhunt-kit');
+    const native = relative(target,skillDirectory(agent,{scope,home:resolve(home),cwd:scope==='project'?target:process.cwd(),env}));
     destinations.push({agent, path: join(target, native)});
     files.set(join(native, 'SKILL.md'), join(source, 'installer-assets/native-SKILL.md'));
     const plugin = join(source, 'plugins/jobhunt-kit');
@@ -87,8 +92,13 @@ export function install(destination, { source = SOURCE, installDependencies = tr
   return { directory: target, copied: pending.length, dependencies_installed: installDependencies, scope, agents: destinations };
 }
 export async function main(args) {
+  if (args[0] === 'agents') {
+    if (args.length!==1) throw new Error('Usage: jobhunt-kit agents');
+    console.log(AGENTS.map(a=>`${a.id.padEnd(14)} ${a.name}${a.globalOnly?' (global only)':''}`).join('\n'));
+    return;
+  }
   if (args.length === 0 || args.includes('--help') || args.includes('-h')) {
-    console.log('Usage: jobhunt-kit <command> [arguments] [--workspace dir | --data dir]\n\ninstall [directory]              Choose agents and install (default: ./my-jobhunt)\n  --agents codex,claude          Select agents without prompts\n  --scope project|global        Workspace skills or user-wide skills\n  --yes, -y                     Use detected agents and project scope\ninit <directory>                 Alias with an explicit destination\nprofile init|show|check          Initialize/view/validate local profile\nprofile save --input file        Save profile and clear confirmation\nprofile confirm --note text      Record explicit candidate confirmation\nresume [file]                   Import file, fingerprint and mechanical checks\nresume check|reviewed            Inspect file / record agent review (--input file)\nsearch [plan]                   Prepare context for agent; no live search\nsearch start|event|record|finish  Persist search operations (--input file)\napply preview|export|begin slug  Review/export/reserve application\napply prepare|approve|send|finish|resolve --input file\ntrack list|show slug|status slug --input file\nhistory | runs | report          Inspect history or generate Markdown report\npolicy show|set --input file     Inspect/set application policy\nschedule --input file            Generate scheduler prompt; does not schedule\ndoctor                          Check local setup without network\n\nNode.js 24+ required. Default data: ./local/jobhunt-kit. Only apply send performs a live application call.');
+    console.log('Usage: jobhunt-kit <command> [arguments] [--workspace dir | --data dir]\n\ninstall [directory]              Choose agents and install (default: ./my-jobhunt)\n  --agents codex,cursor,...      Select agents (or all); --providers is an alias\n  agents                        List supported agents\n  --scope project|global        Workspace skills or user-wide skills\n  --yes, -y                     Use detected agents and project scope\ninit <directory>                 Alias with an explicit destination\nprofile init|show|check          Initialize/view/validate local profile\nprofile save --input file        Save profile and clear confirmation\nprofile confirm --note text      Record explicit candidate confirmation\nresume [file]                   Import file, fingerprint and mechanical checks\nresume check|reviewed            Inspect file / record agent review (--input file)\nsearch [plan]                   Prepare context for agent; no live search\nsearch start|event|record|finish  Persist search operations (--input file)\napply preview|export|begin slug  Review/export/reserve application\napply prepare|approve|send|finish|resolve --input file\ntrack list|show slug|status slug --input file\nhistory | runs | report          Inspect history or generate Markdown report\npolicy show|set --input file     Inspect/set application policy\nschedule --input file            Generate scheduler prompt; does not schedule\nbackup/backup-verify <directory> Create or verify a local backup\nrestore --input file            Restore after exact typed confirmation\nrecover inspect|apply|packet    Inspect, resolve, or recreate an attempt packet\nprivacy map|export|redact|purge Inspect, export or remove local PII\ndoctor                          Check schemas, database and recovery state without network\n\nNode.js 24+ required. Default data: ./local/jobhunt-kit. Only apply send performs a live application call.');
     return;
   }
   if (!['init', 'install'].includes(args[0])) {
@@ -107,6 +117,7 @@ export async function main(args) {
   const result = install(options.destination, options);
   console.log(`\nJobhunt Kit ready: ${result.directory}\nCopied files: ${result.copied}`);
   for (const agent of result.agents) console.log(`${agent.agent}: ${agent.path}`);
+  if (result.scope==='project' && result.agents.some(a=>a.agent==='hermes')) console.log('Hermes: run hermes skills trust from this workspace before using project skills.');
   console.log(result.scope === 'global' ? 'Open your working folder in a new agent session.' : 'Open this folder in a new agent session.');
   console.log('Ask: use jobhunt-kit to initialize my job search profile.\nNo profile, schedule, search or application was created.');
 }

package/installer-assets/gitignore.txt

@@ -20,3 +20,4 @@ local/
 __pycache__/
 .tmp/
 *.tgz
+plan/

package/installer-assets/runtime-lock.json

@@ -1,13 +1,14 @@
 {
   "name": "jobhunt-kit-plugin",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "jobhunt-kit-plugin",
-      "version": "0.3.0",
+      "version": "0.5.0",
       "dependencies": {
+        "ajv": "8.20.0",
         "hirify-cli": "0.4.5",
         "mammoth": "1.12.2",
         "pdf-parse": "2.4.5"
@@ -224,6 +225,22 @@
         "node": ">=10.0.0"
       }
     },
+    "node_modules/ajv": {
+      "version": "8.20.0",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.20.0.tgz",
+      "integrity": "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==",
+      "license": "MIT",
+      "dependencies": {
+        "fast-deep-equal": "^3.1.3",
+        "fast-uri": "^3.0.1",
+        "json-schema-traverse": "^1.0.0",
+        "require-from-string": "^2.0.2"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/epoberezkin"
+      }
+    },
     "node_modules/argparse": {
       "version": "1.0.10",
       "resolved": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz",
@@ -280,6 +297,28 @@
         "underscore": "^1.13.1"
       }
     },
+    "node_modules/fast-deep-equal": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
+      "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
+      "license": "MIT"
+    },
+    "node_modules/fast-uri": {
+      "version": "3.1.7",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.7.tgz",
+      "integrity": "sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/fastify"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/fastify"
+        }
+      ],
+      "license": "BSD-3-Clause"
+    },
     "node_modules/hirify-cli": {
       "version": "0.4.5",
       "resolved": "https://registry.npmjs.org/hirify-cli/-/hirify-cli-0.4.5.tgz",
@@ -310,6 +349,12 @@
       "integrity": "sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ==",
       "license": "MIT"
     },
+    "node_modules/json-schema-traverse": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
+      "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
+      "license": "MIT"
+    },
     "node_modules/jszip": {
       "version": "3.10.1",
       "resolved": "https://registry.npmjs.org/jszip/-/jszip-3.10.1.tgz",
@@ -440,6 +485,15 @@
         "util-deprecate": "~1.0.1"
       }
     },
+    "node_modules/require-from-string": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz",
+      "integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
     "node_modules/safe-buffer": {
       "version": "5.1.2",
       "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",

package/installer-assets/workspace-lock.json

@@ -1,13 +1,14 @@
 {
   "name": "jobhunt-kit",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "jobhunt-kit",
-      "version": "0.3.0",
+      "version": "0.5.0",
       "dependencies": {
+        "ajv": "8.20.0",
         "hirify-cli": "0.4.5",
         "mammoth": "1.12.2",
         "pdf-parse": "2.4.5"
@@ -227,6 +228,22 @@
         "node": ">=10.0.0"
       }
     },
+    "node_modules/ajv": {
+      "version": "8.20.0",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.20.0.tgz",
+      "integrity": "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==",
+      "license": "MIT",
+      "dependencies": {
+        "fast-deep-equal": "^3.1.3",
+        "fast-uri": "^3.0.1",
+        "json-schema-traverse": "^1.0.0",
+        "require-from-string": "^2.0.2"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/epoberezkin"
+      }
+    },
     "node_modules/argparse": {
       "version": "1.0.10",
       "resolved": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz",
@@ -283,6 +300,28 @@
         "underscore": "^1.13.1"
       }
     },
+    "node_modules/fast-deep-equal": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
+      "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
+      "license": "MIT"
+    },
+    "node_modules/fast-uri": {
+      "version": "3.1.7",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.7.tgz",
+      "integrity": "sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/fastify"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/fastify"
+        }
+      ],
+      "license": "BSD-3-Clause"
+    },
     "node_modules/hirify-cli": {
       "version": "0.4.5",
       "resolved": "https://registry.npmjs.org/hirify-cli/-/hirify-cli-0.4.5.tgz",
@@ -313,6 +352,12 @@
       "integrity": "sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ==",
       "license": "MIT"
     },
+    "node_modules/json-schema-traverse": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
+      "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
+      "license": "MIT"
+    },
     "node_modules/jszip": {
       "version": "3.10.1",
       "resolved": "https://registry.npmjs.org/jszip/-/jszip-3.10.1.tgz",
@@ -443,6 +488,15 @@
         "util-deprecate": "~1.0.1"
       }
     },
+    "node_modules/require-from-string": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz",
+      "integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
     "node_modules/safe-buffer": {
       "version": "5.1.2",
       "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jobhunt-kit",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "bin": {
     "jobhunt-kit": "bin/jobhunt-kit.mjs"
   },
@@ -19,12 +19,14 @@
     "hirify": "hirify",
     "test": "node --test tests/*.test.mjs",
     "check": "node scripts/check-package.mjs",
+    "pack:smoke": "node scripts/pack-smoke.mjs",
     "prepublishOnly": "npm test && npm run check"
   },
   "engines": {
     "node": ">=24.0.0"
   },
   "dependencies": {
+    "ajv": "8.20.0",
     "hirify-cli": "0.4.5",
     "mammoth": "1.12.2",
     "pdf-parse": "2.4.5"

package/plugins/jobhunt-kit/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "jobhunt-kit",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "Reusable candidate intake, resume review, Hirify search and local application tracking",
   "author": {
     "name": "Jobhunt Kit contributors"

package/plugins/jobhunt-kit/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "jobhunt-kit",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "Reusable candidate intake, resume review, Hirify search and local application tracking",
   "author": {
     "name": "Jobhunt Kit contributors"