trackly-cli 0.22.2 → 0.22.3

package/README.md

@@ -7,7 +7,7 @@
 
 The only job tracking CLI built for AI agents.
 
-Search 250K+ jobs across 5,400+ companies and 40+ ATS types. Track applications, get AI-powered recommendations, and manage your job search -- from the terminal or through Claude, ChatGPT, Cursor, and other MCP-compatible AI agents.
+Search Thousands of jobs across Thousands of companies and 40+ ATS types. Track applications, get AI-powered recommendations, and manage your job search -- from the terminal or through Claude, ChatGPT, Cursor, and other MCP-compatible AI agents.
 
 ## Two ways to connect
 
@@ -35,7 +35,7 @@ trackly jobs --function product
 
 ## At a Glance
 
-5,400+ companies | 250K+ jobs | 40+ ATS types | CLI + MCP | 58 local + 55 hosted MCP tools
+Thousands of companies | Thousands of jobs | 40+ ATS types | CLI + MCP | 58 local + 55 hosted MCP tools
 
 ## CLI Commands
 
@@ -351,15 +351,12 @@ job-search and application set plus `get_more_tools`, which lets agents report
 a missing capability. Run `trackly mcp` or use
 `trackly agent setup --client claude`.
 
-MCP usage analytics are on by default and relay through Trackly so the free
-service can be debugged and improved. They exclude résumé text, profile answers,
-demographic or work-authorization answers, and application notes. Client attribution
-uses a fixed family label; errors use categories, and search text is retained only
-as length. Raw queries and conversation text are excluded. Turn off future
-collection with **Share usage analytics** in Account Settings. Operators may also
-disable local MCP instrumentation with `TRACKLY_MCP_ANALYTICS_DISABLED=1` (or
-`TRACKLY_MCP_ANALYTICS_ENABLED=0`); the account setting remains authoritative
-for authenticated backend capture.
+MCP usage analytics are part of the free Trackly service and relay through
+Trackly so it can be debugged and improved; there is no account-level opt-out.
+They exclude résumé text, profile answers, demographic or work-authorization
+answers, and application notes. Client attribution uses a fixed family label;
+errors use categories, and search text is retained only as length. Raw queries
+and conversation text are excluded.
 
 **How do I use Claude Code for job hunting?**
 
@@ -367,7 +364,7 @@ Add trackly as an MCP server in Claude Code. Then ask questions naturally: "Find
 
 **What are the best CLI tools for job search?**
 
-trackly-cli is the first dedicated job tracking CLI. It provides direct terminal access to 250K+ jobs across 5,400+ companies, with filters for job function, location, and work modality. It also integrates with AI agents via the Model Context Protocol (MCP).
+trackly-cli is the first dedicated job tracking CLI. It provides direct terminal access to Thousands of jobs across Thousands of companies, with filters for job function, location, and work modality. It also integrates with AI agents via the Model Context Protocol (MCP).
 
 ## Security
 

package/docs/trackly-tools.md

@@ -72,7 +72,7 @@ API-key creation attempts.
 
 ### Available Tools
 
-- **get_more_tools** — Report what the agent wanted to do when no Trackly tool fit, so Trackly can improve its MCP surface. The tool is always available; report delivery is best-effort and occurs only when usage analytics are enabled.
+- **get_more_tools** — Report what the agent wanted to do when no Trackly tool fit, so Trackly can improve its MCP surface. The tool is always available; report delivery is best-effort.
 - **trackly_search_jobs** — Search/filter jobs. A successful page may have `total: null`, `pagination.total: null` and `countStatus: "unavailable"` when its total cannot be computed. The returned jobs remain valid: explain `countGuidance`, use `hasMore` and pagination to continue, and avoid retrying just to obtain a total. Zero is a known count; null is unknown. Genuine page failures remain tool errors.
   - `function` (one value) or `jobFunctions` (nonempty array, OR; use one spelling only). The 14 values are: `product`, `engineering`, `design`, `data`, `marketing`, `sales`, `partnerships`, `finance`, `strategy`, `operations`, `people`, `legal`, `support`, `other`
   - `region`: nonempty array of `us`, `europe`, `latam`, `middle_east`, `asia`, `africa`, `canada`, `oceania`, `remote`, `unknown`, combined with OR. Use instead of `locationFilter`; unlike its legacy list form, this supports US plus other regions.

package/lib/client.js

@@ -11,7 +11,11 @@ const APPLY_CONTRACT = require('../contracts/trackly-apply-tools.json');
 const DEFAULT_CONFIG_DIR = path.join(os.homedir(), '.trackly');
 const DEFAULT_BASE_URL = 'https://closeai.mba';
 const DEFAULT_HTTP_TIMEOUT_MS = 30000;
-const ANALYTICS_PREFERENCE_SYNC_TIMEOUT_MS = 1500;
+// Retired local analytics opt-out marker. Usage analytics are part of the free
+// product and cannot be turned off from the account, so older installs that
+// persisted this key must resume capture: it is ignored on load and dropped on
+// every save.
+const RETIRED_ANALYTICS_OPT_OUT_KEY = 'mcpAnalyticsOptOut';
 const LOCAL_HOSTNAMES = new Set(['localhost', '127.0.0.1', '::1']);
 const MAINTENANCE_CODE = 'maintenance_mode';
 const LEGACY_MAINTENANCE_CODE = 'planned_maintenance';
@@ -68,14 +72,23 @@ function loadConfig() {
     }
     throw error;
   }
+  let parsed;
   try {
-    return JSON.parse(raw);
+    parsed = JSON.parse(raw);
   } catch (error) {
     if (error instanceof SyntaxError) {
       throw new TracklyConfigError(`Trackly config is invalid JSON. Fix or delete ${file}.`);
     }
     throw error;
   }
+  return withoutRetiredKeys(parsed);
+}
+
+function withoutRetiredKeys(config) {
+  if (!isRecord(config) || !Object.hasOwn(config, RETIRED_ANALYTICS_OPT_OUT_KEY)) return config;
+  const next = { ...config };
+  delete next[RETIRED_ANALYTICS_OPT_OUT_KEY];
+  return next;
 }
 
 function ensureConfigDir() {
@@ -95,7 +108,7 @@ function saveConfig(config) {
   // a zero-byte or partial config.json, and the next CLI invocation silently loses all auth.
   // Temp file is created mode 0600 so tokens are never world-readable, even briefly.
   const tmp = `${file}.tmp.${process.pid}`;
-  fs.writeFileSync(tmp, JSON.stringify(config, null, 2), { mode: 0o600 });
+  fs.writeFileSync(tmp, JSON.stringify(withoutRetiredKeys(config), null, 2), { mode: 0o600 });
   try { fs.chmodSync(tmp, 0o600); } catch (e) {}
   try {
     fs.renameSync(tmp, file);
@@ -108,25 +121,6 @@ function saveConfig(config) {
 }
 
 function clearConfig() {
-  let config = {};
-  try {
-    const loaded = loadConfig();
-    if (loaded && typeof loaded === 'object' && !Array.isArray(loaded)) config = loaded;
-  } catch {
-    // Logout must still remove an invalid or unreadable credential file. The
-    // opt-out can be preserved only when the existing config is recoverable.
-  }
-  // A logout clears credentials and endpoint overrides, but the content-free
-  // analytics opt-out must continue suppressing anonymous MCP lifecycle events.
-  if (config.mcpAnalyticsOptOut === true) {
-    try {
-      saveConfig({ mcpAnalyticsOptOut: true });
-      return;
-    } catch {
-      // Preserving the marker is best-effort. A disk/write failure must never
-      // leave credentials behind, so fall through to unlinking the old file.
-    }
-  }
   const { file } = getConfigPaths();
   try { fs.unlinkSync(file); } catch (e) {}
 }
@@ -135,13 +129,6 @@ function isRecord(value) {
   return Boolean(value && typeof value === 'object' && !Array.isArray(value));
 }
 
-function hasAuthenticationInConfig(config) {
-  return Boolean(
-    (process.env.TRACKLY_API_KEY || '').trim()
-    || (isRecord(config) && (config.apiKey || config.token || config.refreshToken))
-  );
-}
-
 function configAfterCredentialRemoval(config, scope) {
   const next = isRecord(config) ? { ...config } : {};
   if (scope === 'all' || scope === 'apiKey') delete next.apiKey;
@@ -152,81 +139,14 @@ function configAfterCredentialRemoval(config, scope) {
   return next;
 }
 
-async function resolveAnalyticsOptOutBeforeCredentialLoss(
-  request = apiRequest,
-  timeoutMs = ANALYTICS_PREFERENCE_SYNC_TIMEOUT_MS
-) {
-  const controller = new AbortController();
-  let timeout;
-  try {
-    const preference = await Promise.race([
-      Promise.resolve().then(() => request(
-        'GET',
-        '/api/jobscout/analytics-preference',
-        null,
-        false,
-        true,
-        null,
-        null,
-        { signal: controller.signal, timeoutMs }
-      )),
-      new Promise((_, reject) => {
-        timeout = setTimeout(() => {
-          controller.abort();
-          reject(new Error('analytics_preference_sync_timeout'));
-        }, timeoutMs);
-      }),
-    ]);
-    if (typeof preference?.shareUsageAnalytics !== 'boolean') {
-      throw new Error('analytics_preference_invalid');
-    }
-    return preference.shareUsageAnalytics === false;
-  } catch {
-    // Fail closed: if the authoritative preference cannot be read before the
-    // final credential disappears, suppress future anonymous MCP capture.
-    return true;
-  } finally {
-    clearTimeout(timeout);
-  }
-}
-
-async function synchronizeAnalyticsPreferenceBeforeLogout(
-  request = apiRequest,
-  options = {}
-) {
-  const timeoutMs = options.timeoutMs ?? ANALYTICS_PREFERENCE_SYNC_TIMEOUT_MS;
-  try {
-    if (!hasAuth()) return;
-  } catch {
-    // A corrupt or unreadable config must never prevent logout. clearConfig()
-    // owns the best-effort removal path and will run immediately afterward.
+async function removeCredentials({ scope = 'all' } = {}) {
+  if (scope === 'all') {
+    // Logout clears credentials, endpoint overrides and every other config key.
+    const { file } = getConfigPaths();
+    try { fs.unlinkSync(file); } catch (_) {}
     return;
   }
-  const optedOut = await resolveAnalyticsOptOutBeforeCredentialLoss(request, timeoutMs);
-  let config = {};
-  try {
-    const loaded = loadConfig();
-    if (loaded && typeof loaded === 'object' && !Array.isArray(loaded)) config = loaded;
-  } catch {
-    // Environment-provided authentication can still make the preference
-    // request valid when the on-disk config is corrupt. Replace only the
-    // recoverable analytics marker and let clearConfig() remove credentials.
-  }
-  if (optedOut) config.mcpAnalyticsOptOut = true;
-  else delete config.mcpAnalyticsOptOut;
-  try {
-    saveConfig(config);
-  } catch {
-    // Analytics synchronization is best-effort and must never block logout.
-  }
-}
 
-async function removeCredentials({
-  scope = 'all',
-  request = apiRequest,
-  timeoutMs = ANALYTICS_PREFERENCE_SYNC_TIMEOUT_MS,
-  preferenceUnavailable = false,
-} = {}) {
   let config = {};
   try {
     const loaded = loadConfig();
@@ -236,36 +156,7 @@ async function removeCredentials({
     // path below. There is no safe credential state to preserve from it.
   }
 
-  let next = configAfterCredentialRemoval(config, scope);
-  const removesEphemeralCredential = scope === 'all'
-    && Boolean((process.env.TRACKLY_API_KEY || '').trim());
-  const removesFinalCredential = removesEphemeralCredential
-    || (hasAuthenticationInConfig(config) && !hasAuthenticationInConfig(next));
-
-  if (removesFinalCredential) {
-    const optedOut = preferenceUnavailable
-      ? true
-      : await resolveAnalyticsOptOutBeforeCredentialLoss(request, timeoutMs);
-    if (optedOut) next.mcpAnalyticsOptOut = true;
-    else delete next.mcpAnalyticsOptOut;
-  }
-
-  if (scope === 'all') {
-    // Preserve logout's historical behavior of clearing endpoint overrides and
-    // all future config keys, with only the anonymous opt-out allowed through.
-    if (next.mcpAnalyticsOptOut === true) {
-      try {
-        saveConfig({ mcpAnalyticsOptOut: true });
-        return;
-      } catch {
-        // Credential removal wins over marker preservation on write failure.
-      }
-    }
-    const { file } = getConfigPaths();
-    try { fs.unlinkSync(file); } catch (_) {}
-    return;
-  }
-
+  const next = configAfterCredentialRemoval(config, scope);
   if (Object.keys(next).length === 0) {
     const { file } = getConfigPaths();
     try { fs.unlinkSync(file); } catch (_) {}
@@ -661,9 +552,8 @@ async function _doRefresh() {
     // every subsequent 401. Without this, a backend that signals failure via JSON instead of
     // a 4xx status would leave the user stuck in a doomed-refresh loop forever.
     // Use the centralized OAuth-only removal — NOT clearConfig() — so the user's
-    // baseUrl, apiKey, and other persisted settings survive a token expiry while
-    // final-credential loss still preserves the analytics preference safely.
-    try { await removeCredentials({ scope: 'oauth', preferenceUnavailable: true }); } catch (_) {}
+    // baseUrl, apiKey, and other persisted settings survive a token expiry.
+    try { await removeCredentials({ scope: 'oauth' }); } catch (_) {}
   } catch (e) {
     if (isMaintenanceError(e)) {
       throw e;
@@ -675,7 +565,7 @@ async function _doRefresh() {
     // purge the token. Surgical OAuth-only clear preserves baseUrl + apiKey + timeout overrides.
     const status = e && typeof e.status === 'number' ? e.status : null;
     if (status === 400 || status === 401 || status === 403) {
-      try { await removeCredentials({ scope: 'oauth', preferenceUnavailable: true }); } catch (_) {}
+      try { await removeCredentials({ scope: 'oauth' }); } catch (_) {}
     }
   }
   return null;
@@ -1024,7 +914,6 @@ module.exports = {
   refreshAccessToken,
   removeCredentials,
   saveConfig,
-  synchronizeAnalyticsPreferenceBeforeLogout,
   CONFIG_DIR: DEFAULT_CONFIG_DIR,
   CONFIG_FILE: path.join(DEFAULT_CONFIG_DIR, 'config.json'),
 };

package/mcp/analytics.js

@@ -7,9 +7,7 @@ const {
   ensureSecureUrl,
   getRequestHeaders,
   hasAuth,
-  loadConfig,
   normalizeEndpoint,
-  saveConfig,
 } = require('../lib/client');
 
 const DEFAULT_SHUTDOWN_TIMEOUT_MS = 2_000;
@@ -23,7 +21,6 @@ const MAX_SANITIZE_STRING_LENGTH = 4_096;
 const AUTHENTICATED_RELAY_PATH = '/api/jobscout/mcp-analytics';
 const ANONYMOUS_RELAY_PATH = '/api/jobscout/mcp-analytics/anonymous';
 const ANALYTICS_PREFERENCE_PATH = '/api/jobscout/analytics-preference';
-const ANALYTICS_OPT_OUT_CONFIG_KEY = 'mcpAnalyticsOptOut';
 const MCP_ANALYTICS_USER_AGENT = `trackly-mcp-analytics/${PACKAGE_VERSION}`;
 const REDACTED = '[redacted]';
 const TRUE_VALUES = new Set(['1', 'true', 'yes', 'on', 'enabled']);
@@ -217,6 +214,9 @@ function truthy(value) {
   return TRUE_VALUES.has(String(value || '').trim().toLowerCase());
 }
 
+// Internal test/CI isolation only (keeps the repo's own smoke and package
+// tests from sending real analytics). Not a user setting: usage analytics are
+// part of the free product and there is no user opt-out.
 function isMcpAnalyticsEnabled(env = process.env) {
   if (truthy(env.TRACKLY_MCP_ANALYTICS_DISABLED)) return false;
   if (env.TRACKLY_MCP_ANALYTICS_ENABLED !== undefined
@@ -713,41 +713,13 @@ function runtimeEventProperties(env = process.env) {
 
 function createBackendRelay(options = {}) {
   const fetchImpl = options.fetch || globalThis.fetch;
-  const loadConfigImpl = options.loadConfig || loadConfig;
-  const saveConfigImpl = options.saveConfig || saveConfig;
   const pending = new Set();
   const maxPendingDeliveries = Number.isSafeInteger(options.maxPendingDeliveries)
     && options.maxPendingDeliveries > 0
     ? options.maxPendingDeliveries
     : DEFAULT_MAX_PENDING_DELIVERIES;
-  let cachedOptOut = readCachedAnalyticsOptOut();
   let preferenceLookup = null;
 
-  function readCachedAnalyticsOptOut() {
-    try {
-      return loadConfigImpl()[ANALYTICS_OPT_OUT_CONFIG_KEY] === true;
-    } catch {
-      return true;
-    }
-  }
-
-  function persistCachedAnalyticsOptOut(optedOut) {
-    cachedOptOut = optedOut;
-    try {
-      const config = loadConfigImpl();
-      if (optedOut && config[ANALYTICS_OPT_OUT_CONFIG_KEY] === true) return;
-      if (optedOut) config[ANALYTICS_OPT_OUT_CONFIG_KEY] = true;
-      else if (Object.hasOwn(config, ANALYTICS_OPT_OUT_CONFIG_KEY)) {
-        delete config[ANALYTICS_OPT_OUT_CONFIG_KEY];
-      } else {
-        return;
-      }
-      saveConfigImpl(config);
-    } catch {
-      // The in-memory privacy gate remains authoritative for this process.
-    }
-  }
-
   function authenticatedRequestContext() {
     const headers = getRequestHeaders(false, MCP_ANALYTICS_USER_AGENT);
     const authorization = headers.Authorization;
@@ -789,7 +761,6 @@ function createBackendRelay(options = {}) {
         throw new Error('analytics_preference_invalid');
       }
       if (!isCurrentAuthenticatedContext(authContext.key)) return false;
-      persistCachedAnalyticsOptOut(!preference.shareUsageAnalytics);
       return preference.shareUsageAnalytics;
     })().catch(() => false).finally(() => {
       if (preferenceLookup === lookup) preferenceLookup = null;
@@ -805,12 +776,6 @@ function createBackendRelay(options = {}) {
       const authContext = authenticated ? authenticatedRequestContext() : null;
       if (authenticated && !authContext) return;
       if (!authenticated && !ANONYMOUS_RELAY_EVENTS.has(event.event)) return;
-      // Another MCP process can persist an opt-out before this process loses
-      // authentication. Refresh the anonymous gate from disk before every
-      // unauthenticated delivery, while preserving a known in-memory opt-out
-      // if its earlier persistence attempt failed.
-      if (!authenticated) cachedOptOut ||= readCachedAnalyticsOptOut();
-      if (!authenticated && cachedOptOut) return;
       if (pending.size >= maxPendingDeliveries) return;
 
       const endpoint = authenticated ? AUTHENTICATED_RELAY_PATH : ANONYMOUS_RELAY_PATH;

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "trackly-cli",
-  "version": "0.22.2",
+  "version": "0.22.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "trackly-cli",
-      "version": "0.22.2",
+      "version": "0.22.3",
       "license": "MIT",
       "dependencies": {
         "@modelcontextprotocol/sdk": "1.32.1",

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "trackly-cli",
-  "version": "0.22.2",
+  "version": "0.22.3",
   "mcpName": "io.github.trackly-app/trackly",
-  "description": "Search 250K+ jobs across 5,400+ companies with the Trackly CLI and MCP server for Claude, ChatGPT, Codex and Cursor. Filter by role, location, salary and sponsorship; track jobs and prepare applications.",
+  "description": "Search Thousands of jobs across Thousands of companies with the Trackly CLI and MCP server for Claude, ChatGPT, Codex and Cursor. Filter by role, location, salary and sponsorship; track jobs and prepare applications.",
   "bin": {
     "trackly": "./bin/trackly"
   },

package/server.json

@@ -2,7 +2,7 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.trackly-app/trackly",
   "title": "Trackly CLI",
-  "description": "Search 250K+ jobs, 5,400+ companies. MCP for Claude, ChatGPT, Codex and Cursor.",
+  "description": "Search Thousands of jobs, Thousands of companies. MCP for Claude, ChatGPT, Codex and Cursor.",
   "repository": {
     "url": "https://github.com/trackly-app/trackly-cli",
     "source": "github"
@@ -17,12 +17,12 @@
       ]
     }
   ],
-  "version": "0.22.2",
+  "version": "0.22.3",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "trackly-cli",
-      "version": "0.22.2",
+      "version": "0.22.3",
       "runtimeHint": "npx",
       "runtimeArguments": [
         {