trackly-cli 0.22.2 → 0.23.0

package/README.md

@@ -7,7 +7,7 @@
 
 The only job tracking CLI built for AI agents.
 
-Search 250K+ jobs across 5,400+ companies and 40+ ATS types. Track applications, get AI-powered recommendations, and manage your job search -- from the terminal or through Claude, ChatGPT, Cursor, and other MCP-compatible AI agents.
+Search Thousands of jobs across Thousands of companies and 40+ ATS types. Track applications, get AI-powered recommendations, and manage your job search -- from the terminal or through Claude, ChatGPT, Cursor, and other MCP-compatible AI agents.
 
 ## Two ways to connect
 
@@ -35,7 +35,7 @@ trackly jobs --function product
 
 ## At a Glance
 
-5,400+ companies | 250K+ jobs | 40+ ATS types | CLI + MCP | 58 local + 55 hosted MCP tools
+Thousands of companies | Thousands of jobs | 40+ ATS types | CLI + MCP | 58 local + 55 hosted MCP tools
 
 ## CLI Commands
 
@@ -351,15 +351,12 @@ job-search and application set plus `get_more_tools`, which lets agents report
 a missing capability. Run `trackly mcp` or use
 `trackly agent setup --client claude`.
 
-MCP usage analytics are on by default and relay through Trackly so the free
-service can be debugged and improved. They exclude résumé text, profile answers,
-demographic or work-authorization answers, and application notes. Client attribution
-uses a fixed family label; errors use categories, and search text is retained only
-as length. Raw queries and conversation text are excluded. Turn off future
-collection with **Share usage analytics** in Account Settings. Operators may also
-disable local MCP instrumentation with `TRACKLY_MCP_ANALYTICS_DISABLED=1` (or
-`TRACKLY_MCP_ANALYTICS_ENABLED=0`); the account setting remains authoritative
-for authenticated backend capture.
+MCP usage analytics are part of the free Trackly service and relay through
+Trackly so it can be debugged and improved; there is no account-level opt-out.
+They exclude résumé text, profile answers, demographic or work-authorization
+answers, and application notes. Client attribution uses a fixed family label;
+errors use categories, and search text is retained only as length. Raw queries
+and conversation text are excluded.
 
 **How do I use Claude Code for job hunting?**
 
@@ -367,7 +364,7 @@ Add trackly as an MCP server in Claude Code. Then ask questions naturally: "Find
 
 **What are the best CLI tools for job search?**
 
-trackly-cli is the first dedicated job tracking CLI. It provides direct terminal access to 250K+ jobs across 5,400+ companies, with filters for job function, location, and work modality. It also integrates with AI agents via the Model Context Protocol (MCP).
+trackly-cli is the first dedicated job tracking CLI. It provides direct terminal access to Thousands of jobs across Thousands of companies, with filters for job function, location, and work modality. It also integrates with AI agents via the Model Context Protocol (MCP).
 
 ## Security
 

package/contracts/trackly-apply-contract-history.json

@@ -47,5 +47,8 @@
   },
   "3.9.2": {
     "contractSha256": "d3a82489330d0b0062a1baec8d226b510628accc434731136dca9951ec64c302"
+  },
+  "3.9.3": {
+    "contractSha256": "0773b7fef8ac012fe028c7e61ecf00272122949290fe35f01aa577f63a4f01df"
   }
 }

package/contracts/trackly-apply-tools.json

@@ -1,5 +1,5 @@
 {
-  "contractVersion": "3.9.2",
+  "contractVersion": "3.9.3",
   "constants": {
     "applyExecutionProtocolVersion": "trackly-apply-execution/v3",
     "applyAccessKnowledgeOrderingVersion": 3,
@@ -73,7 +73,7 @@
     "trackly_get_application_profile": "{includeSensitive:z.boolean().optional(),provider:z.string().max(100).optional(),companyId:z.string().max(100).optional(),jurisdiction:iso3166Alpha2Schema.optional(),office:officeScopeSchema.optional()}",
     "trackly_get_profile_onboarding": "{}",
     "trackly_update_application_profile": "{expectedRevision:z.number().int().min(1),source:z.enum(['web','ios','macos','codex','claude','mcp']).optional(),changes:z.array(z.discriminatedUnion('scope',[z.object({key:z.string().min(1).max(200),state:z.enum(['unknown','answered','intentionally_blank','declined']),value:z.any().optional(),scope:z.literal('global'),questionLabel:z.string().max(1000).optional()}),z.object({key:z.string().min(1).max(200),state:z.enum(['unknown','answered','intentionally_blank','declined']),value:z.any().optional(),scope:z.literal('provider'),scopeValue:z.string().min(1).max(200),questionLabel:z.string().max(1000).optional()}),z.object({key:z.string().min(1).max(200),state:z.enum(['unknown','answered','intentionally_blank','declined']),value:z.any().optional(),scope:z.literal('company'),scopeValue:z.string().min(1).max(200),questionLabel:z.string().max(1000).optional()}),z.object({key:z.string().min(1).max(200),state:z.enum(['unknown','answered','intentionally_blank','declined']),value:z.any().optional(),scope:z.literal('jurisdiction'),scopeValue:iso3166Alpha2Schema,questionLabel:z.string().max(1000).optional()}),z.object({key:z.string().min(1).max(200),state:z.enum(['unknown','answered','intentionally_blank','declined']),value:z.any().optional(),scope:z.literal('office'),scopeValue:officeScopeSchema,questionLabel:z.string().max(1000).optional()})])).max(100).optional(),education:z.array(z.object({school:z.string().min(1).max(500),degree:z.string().max(500).nullable().optional(),fieldOfStudy:z.string().max(500).nullable().optional(),gpa:z.string().max(50).nullable().optional(),startDate:z.string().max(50).nullable().optional(),endDate:z.string().max(50).nullable().optional()})).max(20).optional(),confirmProfile:z.boolean().optional(),sensitiveStorageConsent:z.boolean().optional(),sensitiveRevocationConfirmToken:z.string().regex(/^[a-f0-9]{64}$/).optional()}",
-    "trackly_start_apply_execution": "{mode:z.literal('complete_next_n_accessible'),target:z.number().int().min(1).max(APPLY_EXECUTION_MAX_TARGET),idempotencyKey:z.string().min(16).max(200).regex(SAFE_IDEMPOTENCY_KEY)}",
+    "trackly_start_apply_execution": "{mode:z.literal('complete_next_n_accessible'),target:z.number().int().min(1).max(APPLY_EXECUTION_MAX_TARGET),jobIds:z.array(z.number().int().min(1)).min(1).max(APPLY_EXECUTION_MAX_TARGET).refine((ids)=>newSet(ids).size===ids.length,{message:'jobIdsmustbeunique'}).optional(),idempotencyKey:z.string().min(16).max(200).regex(SAFE_IDEMPOTENCY_KEY)}",
     "trackly_get_active_apply_execution": "{}",
     "trackly_get_apply_execution": "{executionId:z.number().int().min(1)}",
     "trackly_list_recoverable_apply_executions": "{}",

package/docs/trackly-tools.md

@@ -72,7 +72,7 @@ API-key creation attempts.
 
 ### Available Tools
 
-- **get_more_tools** — Report what the agent wanted to do when no Trackly tool fit, so Trackly can improve its MCP surface. The tool is always available; report delivery is best-effort and occurs only when usage analytics are enabled.
+- **get_more_tools** — Report what the agent wanted to do when no Trackly tool fit, so Trackly can improve its MCP surface. The tool is always available; report delivery is best-effort.
 - **trackly_search_jobs** — Search/filter jobs. A successful page may have `total: null`, `pagination.total: null` and `countStatus: "unavailable"` when its total cannot be computed. The returned jobs remain valid: explain `countGuidance`, use `hasMore` and pagination to continue, and avoid retrying just to obtain a total. Zero is a known count; null is unknown. Genuine page failures remain tool errors.
   - `function` (one value) or `jobFunctions` (nonempty array, OR; use one spelling only). The 14 values are: `product`, `engineering`, `design`, `data`, `marketing`, `sales`, `partnerships`, `finance`, `strategy`, `operations`, `people`, `legal`, `support`, `other`
   - `region`: nonempty array of `us`, `europe`, `latam`, `middle_east`, `asia`, `africa`, `canada`, `oceania`, `remote`, `unknown`, combined with OR. Use instead of `locationFilter`; unlike its legacy list form, this supports US plus other regions.
@@ -124,7 +124,7 @@ Actual failures retain `isError: true`, HTTP status when available, a closed `ca
 - **trackly_get_application_profile** — Get the versioned, scoped application profile.
 - **trackly_get_profile_onboarding** — Get backend-owned questions plus only missing/unconfirmed answers.
 - **trackly_update_application_profile** — Save explicit answer states with optimistic concurrency and global/provider/company scope. Setting `sensitiveStorageConsent=false` is destructive and requires a second call echoing the `sensitiveRevocationConfirmToken` from the returned challenge.
-- **trackly_start_apply_execution** — Start a server-owned `complete_next_n_accessible` execution with a target from 1–20, then consume the returned authoritative `progress` and `nextAction` before doing browser work.
+- **trackly_start_apply_execution** — Start a server-owned `complete_next_n_accessible` execution with a target from 1–20. For explicitly selected jobs, pass their exact ordered `jobIds` and set `target` to the list length; no unrelated replacements are allowed. Omit `jobIds` only for a requested recent-first queue target. Consume authoritative `progress` and `nextAction` before browser work; never retry a rejected exact selection as count-only.
 - **trackly_get_active_apply_execution** — Recover the active execution before legacy batch recovery.
 - **trackly_get_apply_execution** — Read an execution's latest current-wave identity and authoritative aggregate progress funnel.
 - **trackly_list_recoverable_apply_executions** — List a bounded, value-free menu of exact recovery candidates after local context loss.

package/lib/agent.js

@@ -8,7 +8,7 @@ const { spawnSync } = require('node:child_process');
 const { apiRequest, downloadFile, getConfigPaths, hasAuth, maintenanceOutput } = require('./client');
 const { version: PACKAGE_VERSION } = require('../package.json');
 const { contractVersion: MCP_CONTRACT_VERSION } = require('../contracts/trackly-apply-tools.json');
-const SKILL_VERSION = '4.9.2';
+const SKILL_VERSION = '4.9.3';
 const SKILL_POLICY_REVISION = SKILL_VERSION;
 const CLI_USER_AGENT = `trackly-cli/${PACKAGE_VERSION}`;
 const MCP_USER_AGENT = `trackly-mcp/${PACKAGE_VERSION}`;

package/lib/client.js

@@ -11,7 +11,11 @@ const APPLY_CONTRACT = require('../contracts/trackly-apply-tools.json');
 const DEFAULT_CONFIG_DIR = path.join(os.homedir(), '.trackly');
 const DEFAULT_BASE_URL = 'https://closeai.mba';
 const DEFAULT_HTTP_TIMEOUT_MS = 30000;
-const ANALYTICS_PREFERENCE_SYNC_TIMEOUT_MS = 1500;
+// Retired local analytics opt-out marker. Usage analytics are part of the free
+// product and cannot be turned off from the account, so older installs that
+// persisted this key must resume capture: it is ignored on load and dropped on
+// every save.
+const RETIRED_ANALYTICS_OPT_OUT_KEY = 'mcpAnalyticsOptOut';
 const LOCAL_HOSTNAMES = new Set(['localhost', '127.0.0.1', '::1']);
 const MAINTENANCE_CODE = 'maintenance_mode';
 const LEGACY_MAINTENANCE_CODE = 'planned_maintenance';
@@ -68,14 +72,23 @@ function loadConfig() {
     }
     throw error;
   }
+  let parsed;
   try {
-    return JSON.parse(raw);
+    parsed = JSON.parse(raw);
   } catch (error) {
     if (error instanceof SyntaxError) {
       throw new TracklyConfigError(`Trackly config is invalid JSON. Fix or delete ${file}.`);
     }
     throw error;
   }
+  return withoutRetiredKeys(parsed);
+}
+
+function withoutRetiredKeys(config) {
+  if (!isRecord(config) || !Object.hasOwn(config, RETIRED_ANALYTICS_OPT_OUT_KEY)) return config;
+  const next = { ...config };
+  delete next[RETIRED_ANALYTICS_OPT_OUT_KEY];
+  return next;
 }
 
 function ensureConfigDir() {
@@ -95,7 +108,7 @@ function saveConfig(config) {
   // a zero-byte or partial config.json, and the next CLI invocation silently loses all auth.
   // Temp file is created mode 0600 so tokens are never world-readable, even briefly.
   const tmp = `${file}.tmp.${process.pid}`;
-  fs.writeFileSync(tmp, JSON.stringify(config, null, 2), { mode: 0o600 });
+  fs.writeFileSync(tmp, JSON.stringify(withoutRetiredKeys(config), null, 2), { mode: 0o600 });
   try { fs.chmodSync(tmp, 0o600); } catch (e) {}
   try {
     fs.renameSync(tmp, file);
@@ -108,25 +121,6 @@ function saveConfig(config) {
 }
 
 function clearConfig() {
-  let config = {};
-  try {
-    const loaded = loadConfig();
-    if (loaded && typeof loaded === 'object' && !Array.isArray(loaded)) config = loaded;
-  } catch {
-    // Logout must still remove an invalid or unreadable credential file. The
-    // opt-out can be preserved only when the existing config is recoverable.
-  }
-  // A logout clears credentials and endpoint overrides, but the content-free
-  // analytics opt-out must continue suppressing anonymous MCP lifecycle events.
-  if (config.mcpAnalyticsOptOut === true) {
-    try {
-      saveConfig({ mcpAnalyticsOptOut: true });
-      return;
-    } catch {
-      // Preserving the marker is best-effort. A disk/write failure must never
-      // leave credentials behind, so fall through to unlinking the old file.
-    }
-  }
   const { file } = getConfigPaths();
   try { fs.unlinkSync(file); } catch (e) {}
 }
@@ -135,13 +129,6 @@ function isRecord(value) {
   return Boolean(value && typeof value === 'object' && !Array.isArray(value));
 }
 
-function hasAuthenticationInConfig(config) {
-  return Boolean(
-    (process.env.TRACKLY_API_KEY || '').trim()
-    || (isRecord(config) && (config.apiKey || config.token || config.refreshToken))
-  );
-}
-
 function configAfterCredentialRemoval(config, scope) {
   const next = isRecord(config) ? { ...config } : {};
   if (scope === 'all' || scope === 'apiKey') delete next.apiKey;
@@ -152,81 +139,14 @@ function configAfterCredentialRemoval(config, scope) {
   return next;
 }
 
-async function resolveAnalyticsOptOutBeforeCredentialLoss(
-  request = apiRequest,
-  timeoutMs = ANALYTICS_PREFERENCE_SYNC_TIMEOUT_MS
-) {
-  const controller = new AbortController();
-  let timeout;
-  try {
-    const preference = await Promise.race([
-      Promise.resolve().then(() => request(
-        'GET',
-        '/api/jobscout/analytics-preference',
-        null,
-        false,
-        true,
-        null,
-        null,
-        { signal: controller.signal, timeoutMs }
-      )),
-      new Promise((_, reject) => {
-        timeout = setTimeout(() => {
-          controller.abort();
-          reject(new Error('analytics_preference_sync_timeout'));
-        }, timeoutMs);
-      }),
-    ]);
-    if (typeof preference?.shareUsageAnalytics !== 'boolean') {
-      throw new Error('analytics_preference_invalid');
-    }
-    return preference.shareUsageAnalytics === false;
-  } catch {
-    // Fail closed: if the authoritative preference cannot be read before the
-    // final credential disappears, suppress future anonymous MCP capture.
-    return true;
-  } finally {
-    clearTimeout(timeout);
-  }
-}
-
-async function synchronizeAnalyticsPreferenceBeforeLogout(
-  request = apiRequest,
-  options = {}
-) {
-  const timeoutMs = options.timeoutMs ?? ANALYTICS_PREFERENCE_SYNC_TIMEOUT_MS;
-  try {
-    if (!hasAuth()) return;
-  } catch {
-    // A corrupt or unreadable config must never prevent logout. clearConfig()
-    // owns the best-effort removal path and will run immediately afterward.
+async function removeCredentials({ scope = 'all' } = {}) {
+  if (scope === 'all') {
+    // Logout clears credentials, endpoint overrides and every other config key.
+    const { file } = getConfigPaths();
+    try { fs.unlinkSync(file); } catch (_) {}
     return;
   }
-  const optedOut = await resolveAnalyticsOptOutBeforeCredentialLoss(request, timeoutMs);
-  let config = {};
-  try {
-    const loaded = loadConfig();
-    if (loaded && typeof loaded === 'object' && !Array.isArray(loaded)) config = loaded;
-  } catch {
-    // Environment-provided authentication can still make the preference
-    // request valid when the on-disk config is corrupt. Replace only the
-    // recoverable analytics marker and let clearConfig() remove credentials.
-  }
-  if (optedOut) config.mcpAnalyticsOptOut = true;
-  else delete config.mcpAnalyticsOptOut;
-  try {
-    saveConfig(config);
-  } catch {
-    // Analytics synchronization is best-effort and must never block logout.
-  }
-}
 
-async function removeCredentials({
-  scope = 'all',
-  request = apiRequest,
-  timeoutMs = ANALYTICS_PREFERENCE_SYNC_TIMEOUT_MS,
-  preferenceUnavailable = false,
-} = {}) {
   let config = {};
   try {
     const loaded = loadConfig();
@@ -236,36 +156,7 @@ async function removeCredentials({
     // path below. There is no safe credential state to preserve from it.
   }
 
-  let next = configAfterCredentialRemoval(config, scope);
-  const removesEphemeralCredential = scope === 'all'
-    && Boolean((process.env.TRACKLY_API_KEY || '').trim());
-  const removesFinalCredential = removesEphemeralCredential
-    || (hasAuthenticationInConfig(config) && !hasAuthenticationInConfig(next));
-
-  if (removesFinalCredential) {
-    const optedOut = preferenceUnavailable
-      ? true
-      : await resolveAnalyticsOptOutBeforeCredentialLoss(request, timeoutMs);
-    if (optedOut) next.mcpAnalyticsOptOut = true;
-    else delete next.mcpAnalyticsOptOut;
-  }
-
-  if (scope === 'all') {
-    // Preserve logout's historical behavior of clearing endpoint overrides and
-    // all future config keys, with only the anonymous opt-out allowed through.
-    if (next.mcpAnalyticsOptOut === true) {
-      try {
-        saveConfig({ mcpAnalyticsOptOut: true });
-        return;
-      } catch {
-        // Credential removal wins over marker preservation on write failure.
-      }
-    }
-    const { file } = getConfigPaths();
-    try { fs.unlinkSync(file); } catch (_) {}
-    return;
-  }
-
+  const next = configAfterCredentialRemoval(config, scope);
   if (Object.keys(next).length === 0) {
     const { file } = getConfigPaths();
     try { fs.unlinkSync(file); } catch (_) {}
@@ -661,9 +552,8 @@ async function _doRefresh() {
     // every subsequent 401. Without this, a backend that signals failure via JSON instead of
     // a 4xx status would leave the user stuck in a doomed-refresh loop forever.
     // Use the centralized OAuth-only removal — NOT clearConfig() — so the user's
-    // baseUrl, apiKey, and other persisted settings survive a token expiry while
-    // final-credential loss still preserves the analytics preference safely.
-    try { await removeCredentials({ scope: 'oauth', preferenceUnavailable: true }); } catch (_) {}
+    // baseUrl, apiKey, and other persisted settings survive a token expiry.
+    try { await removeCredentials({ scope: 'oauth' }); } catch (_) {}
   } catch (e) {
     if (isMaintenanceError(e)) {
       throw e;
@@ -675,7 +565,7 @@ async function _doRefresh() {
     // purge the token. Surgical OAuth-only clear preserves baseUrl + apiKey + timeout overrides.
     const status = e && typeof e.status === 'number' ? e.status : null;
     if (status === 400 || status === 401 || status === 403) {
-      try { await removeCredentials({ scope: 'oauth', preferenceUnavailable: true }); } catch (_) {}
+      try { await removeCredentials({ scope: 'oauth' }); } catch (_) {}
     }
   }
   return null;
@@ -1024,7 +914,6 @@ module.exports = {
   refreshAccessToken,
   removeCredentials,
   saveConfig,
-  synchronizeAnalyticsPreferenceBeforeLogout,
   CONFIG_DIR: DEFAULT_CONFIG_DIR,
   CONFIG_FILE: path.join(DEFAULT_CONFIG_DIR, 'config.json'),
 };

package/mcp/analytics.js

@@ -7,9 +7,7 @@ const {
   ensureSecureUrl,
   getRequestHeaders,
   hasAuth,
-  loadConfig,
   normalizeEndpoint,
-  saveConfig,
 } = require('../lib/client');
 
 const DEFAULT_SHUTDOWN_TIMEOUT_MS = 2_000;
@@ -23,7 +21,6 @@ const MAX_SANITIZE_STRING_LENGTH = 4_096;
 const AUTHENTICATED_RELAY_PATH = '/api/jobscout/mcp-analytics';
 const ANONYMOUS_RELAY_PATH = '/api/jobscout/mcp-analytics/anonymous';
 const ANALYTICS_PREFERENCE_PATH = '/api/jobscout/analytics-preference';
-const ANALYTICS_OPT_OUT_CONFIG_KEY = 'mcpAnalyticsOptOut';
 const MCP_ANALYTICS_USER_AGENT = `trackly-mcp-analytics/${PACKAGE_VERSION}`;
 const REDACTED = '[redacted]';
 const TRUE_VALUES = new Set(['1', 'true', 'yes', 'on', 'enabled']);
@@ -217,6 +214,9 @@ function truthy(value) {
   return TRUE_VALUES.has(String(value || '').trim().toLowerCase());
 }
 
+// Internal test/CI isolation only (keeps the repo's own smoke and package
+// tests from sending real analytics). Not a user setting: usage analytics are
+// part of the free product and there is no user opt-out.
 function isMcpAnalyticsEnabled(env = process.env) {
   if (truthy(env.TRACKLY_MCP_ANALYTICS_DISABLED)) return false;
   if (env.TRACKLY_MCP_ANALYTICS_ENABLED !== undefined
@@ -713,41 +713,13 @@ function runtimeEventProperties(env = process.env) {
 
 function createBackendRelay(options = {}) {
   const fetchImpl = options.fetch || globalThis.fetch;
-  const loadConfigImpl = options.loadConfig || loadConfig;
-  const saveConfigImpl = options.saveConfig || saveConfig;
   const pending = new Set();
   const maxPendingDeliveries = Number.isSafeInteger(options.maxPendingDeliveries)
     && options.maxPendingDeliveries > 0
     ? options.maxPendingDeliveries
     : DEFAULT_MAX_PENDING_DELIVERIES;
-  let cachedOptOut = readCachedAnalyticsOptOut();
   let preferenceLookup = null;
 
-  function readCachedAnalyticsOptOut() {
-    try {
-      return loadConfigImpl()[ANALYTICS_OPT_OUT_CONFIG_KEY] === true;
-    } catch {
-      return true;
-    }
-  }
-
-  function persistCachedAnalyticsOptOut(optedOut) {
-    cachedOptOut = optedOut;
-    try {
-      const config = loadConfigImpl();
-      if (optedOut && config[ANALYTICS_OPT_OUT_CONFIG_KEY] === true) return;
-      if (optedOut) config[ANALYTICS_OPT_OUT_CONFIG_KEY] = true;
-      else if (Object.hasOwn(config, ANALYTICS_OPT_OUT_CONFIG_KEY)) {
-        delete config[ANALYTICS_OPT_OUT_CONFIG_KEY];
-      } else {
-        return;
-      }
-      saveConfigImpl(config);
-    } catch {
-      // The in-memory privacy gate remains authoritative for this process.
-    }
-  }
-
   function authenticatedRequestContext() {
     const headers = getRequestHeaders(false, MCP_ANALYTICS_USER_AGENT);
     const authorization = headers.Authorization;
@@ -789,7 +761,6 @@ function createBackendRelay(options = {}) {
         throw new Error('analytics_preference_invalid');
       }
       if (!isCurrentAuthenticatedContext(authContext.key)) return false;
-      persistCachedAnalyticsOptOut(!preference.shareUsageAnalytics);
       return preference.shareUsageAnalytics;
     })().catch(() => false).finally(() => {
       if (preferenceLookup === lookup) preferenceLookup = null;
@@ -805,12 +776,6 @@ function createBackendRelay(options = {}) {
       const authContext = authenticated ? authenticatedRequestContext() : null;
       if (authenticated && !authContext) return;
       if (!authenticated && !ANONYMOUS_RELAY_EVENTS.has(event.event)) return;
-      // Another MCP process can persist an opt-out before this process loses
-      // authentication. Refresh the anonymous gate from disk before every
-      // unauthenticated delivery, while preserving a known in-memory opt-out
-      // if its earlier persistence attempt failed.
-      if (!authenticated) cachedOptOut ||= readCachedAnalyticsOptOut();
-      if (!authenticated && cachedOptOut) return;
       if (pending.size >= maxPendingDeliveries) return;
 
       const endpoint = authenticated ? AUTHENTICATED_RELAY_PATH : ANONYMOUS_RELAY_PATH;

package/mcp/apply-tools.js

@@ -976,13 +976,18 @@ function registerApplyTools(
 
   server.tool(
     'trackly_start_apply_execution',
-    'Start a server-owned execution that keeps selecting from one recent-first Check Later snapshot until the requested number of accessible forms is durably ready for manual review. Consume the returned authoritative progress and nextAction immediately; never infer the first wave or next step locally.',
+    'Start a server-owned no-submit execution. For named or explicitly selected jobs, supply their exact ordered jobIds and set target to their count; no replacement outside that set is allowed. Omit jobIds only for a user-requested recent-first queue target. Consume authoritative progress and nextAction; never fall back to count-only after an exact selection is rejected.',
     {
       mode: z.literal('complete_next_n_accessible'),
       target: z.number().int().min(1).max(APPLY_EXECUTION_MAX_TARGET),
+      jobIds: z.array(z.number().int().min(1)).min(1).max(APPLY_EXECUTION_MAX_TARGET)
+        .refine((ids) => new Set(ids).size === ids.length, { message: 'jobIds must be unique' }).optional(),
       idempotencyKey: z.string().min(16).max(200).regex(SAFE_IDEMPOTENCY_KEY),
     },
     wrapTool(async ({ idempotencyKey, ...body }) => {
+      if (body.jobIds !== undefined && body.target !== body.jobIds.length) {
+        throw new Error('target must equal the jobIds selection length.');
+      }
       const rawResponse = await applyControlRequest(
         'POST', '/api/jobscout/apply/executions', body, idempotencyKey,
       );

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "trackly-cli",
-  "version": "0.22.2",
+  "version": "0.23.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "trackly-cli",
-      "version": "0.22.2",
+      "version": "0.23.0",
       "license": "MIT",
       "dependencies": {
         "@modelcontextprotocol/sdk": "1.32.1",
@@ -95,9 +95,9 @@
       }
     },
     "node_modules/@hono/node-server": {
-      "version": "2.0.12",
-      "resolved": "https://registry.npmjs.org/@hono/node-server/-/node-server-2.0.12.tgz",
-      "integrity": "sha512-eWpQYr67tqJLeaSUl0Q+TquuYfUdTibpOJlUMV2FfUP7+KqCC5TufnwnlXL6mobZBJbGAYRd7ZvEBDCbLInjhg==",
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/@hono/node-server/-/node-server-2.1.3.tgz",
+      "integrity": "sha512-TA//nWMqPhbfdfneACk6t5a9eqbS9lABEPyKn0/xZTah3H3U2XaVg85rJFl0/Fyit0I552YDHgXGVSf3GwqbUw==",
       "license": "MIT",
       "engines": {
         "node": ">=20"

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "trackly-cli",
-  "version": "0.22.2",
+  "version": "0.23.0",
   "mcpName": "io.github.trackly-app/trackly",
-  "description": "Search 250K+ jobs across 5,400+ companies with the Trackly CLI and MCP server for Claude, ChatGPT, Codex and Cursor. Filter by role, location, salary and sponsorship; track jobs and prepare applications.",
+  "description": "Search Thousands of jobs across Thousands of companies with the Trackly CLI and MCP server for Claude, ChatGPT, Codex and Cursor. Filter by role, location, salary and sponsorship; track jobs and prepare applications.",
   "bin": {
     "trackly": "./bin/trackly"
   },
@@ -82,7 +82,7 @@
     "node": "^20.20.0 || >=22.22.0"
   },
   "overrides": {
-    "@hono/node-server": "2.0.12",
+    "@hono/node-server": "2.1.3",
     "fast-uri": "3.1.9",
     "ip-address": "10.7.4",
     "qs": "6.16.1",

package/server.json

@@ -2,7 +2,7 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.trackly-app/trackly",
   "title": "Trackly CLI",
-  "description": "Search 250K+ jobs, 5,400+ companies. MCP for Claude, ChatGPT, Codex and Cursor.",
+  "description": "Search Thousands of jobs, Thousands of companies. MCP for Claude, ChatGPT, Codex and Cursor.",
   "repository": {
     "url": "https://github.com/trackly-app/trackly-cli",
     "source": "github"
@@ -17,12 +17,12 @@
       ]
     }
   ],
-  "version": "0.22.2",
+  "version": "0.23.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "trackly-cli",
-      "version": "0.22.2",
+      "version": "0.23.0",
       "runtimeHint": "npx",
       "runtimeArguments": [
         {

package/skills/trackly-apply/SKILL.md

@@ -11,7 +11,7 @@ Before application work, read [onboarding guidance](references/onboarding.md). G
 
 ## Skill version
 
-Skill version: `4.9.2`. Before browser readiness read [references/handoff-compatibility.md](references/handoff-compatibility.md). This policy takes precedence over returned-persistence-receipt or finalizer requirements elsewhere when using the documented markHandoff path. Other review and safety gates remain unchanged.
+Skill version: `4.9.3`. Before browser readiness read [references/handoff-compatibility.md](references/handoff-compatibility.md). This policy takes precedence over returned-persistence-receipt or finalizer requirements elsewhere when using the documented markHandoff path. Other review and safety gates remain unchanged.
 
 ## Non-negotiable rules
 
@@ -41,7 +41,7 @@ value-free phase receipt with `scripts/validate-phase-checkpoint.js` before
 claiming that phase complete.
 Read [references/legal-clarifications.md](references/legal-clarifications.md) when a form asks for a legal, regulatory, consent, or employer-relationship decision.
 
-1. Call `trackly_get_apply_protocol`. Skill 4.9.2 requires protocol 3.7.0 or newer for new reliability work. Protocol 3.2 remains valid only for an already-active explicit legacy single run; an already-active explicit 3.2 single run may finish through its legacy path. Preserve the protocol's documented recovery paths for already-active older work. Require `compatibleSkillMajor: 4` and `compatibleSkillMinimumVersion` no newer than this installed skill. Reject an older or incompatible version for new work and report that the backend must finish updating or `trackly agent setup` must update the skill. Protocol 3.2 added exact-origin trust for jobs Trackly ingested directly from employer careers sources; do not recreate the retired ownership-timestamp gate in the client.
+1. Call `trackly_get_apply_protocol`. Skill 4.9.3 requires protocol 3.7.0 or newer for new reliability work. Protocol 3.2 remains valid only for an already-active explicit legacy single run; an already-active explicit 3.2 single run may finish through its legacy path. Preserve the protocol's documented recovery paths for already-active older work. Require `compatibleSkillMajor: 4` and `compatibleSkillMinimumVersion` no newer than this installed skill. Reject an older or incompatible version for new work and report that the backend must finish updating or `trackly agent setup` must update the skill. Protocol 3.2 added exact-origin trust for jobs Trackly ingested directly from employer careers sources; do not recreate the retired ownership-timestamp gate in the client.
 2. Call `trackly_get_profile_onboarding` or fetch both the profile schema and application profile. When present, render `schema.screens` in ascending `order` as one grouped question packet per screen. Within a screen, preserve category `order` and then field `order`; use each field's user-facing `rationale` when the user asks why it is needed. Ask only unknown or confirmation-needed fields and honor `consistencyRules` before submitting profile changes, resolving contradictions with the user instead of guessing. When `schema.screens` is absent on a legacy backend, fall back to the existing category-based onboarding behavior. Treat `completeness.percent` as required onboarding readiness only. Use `coverage.missingReusableKeys` to explain reusable optional gaps, while `coverage.contextualKeys` are intentionally asked only on the relevant employer form. Do not claim that 100% required completeness answers every possible application question.
 3. Save answers with `trackly_update_application_profile`:
    - Use `answered`, `intentionally_blank`, `declined`, or `unknown` exactly.
@@ -59,6 +59,7 @@ Read [references/legal-clarifications.md](references/legal-clarifications.md) wh
    - Infer a direct prior-employer answer of No only when the profile explicitly marks history complete, the target and backend-confirmed aliases are absent, and the question is limited to direct employment. Ask for subsidiary, affiliate, acquisition, contractor, or otherwise ambiguous relationships.
 4. Require the one-time profile confirmation, complete education entries, and default-resume metadata before browser work. Do not prepare or upload the resume when the form has no attachment control.
 5. For every protocol 3.4 or newer request, call `trackly_get_active_apply_execution` before legacy recovery. Resume execution work only when the response says `active: true`. A response with `preserved: true` and `active: false` exposes a stopped, closed, or otherwise terminal execution only for read-only reconciliation. Never fetch its compact snapshot, continue its wave, mutate its members, or interpret historical `currentlyFilling` or reservation counts as current work; require `progress.nextAction: none`. Only with protocol 3.5 or newer and an enabled compact-snapshot capability may an active recovery or new execution call `trackly_get_apply_execution_snapshot`, using only the current member IDs, profile keys needed by the visible forms, and actual browser surface. An already-active protocol 3.4 execution is read-only legacy recovery: use only its published get or stop operations, never call the 3.5-only snapshot, resume, approval, advance, or disposition tools, and never mutate its browser forms. For protocol 3.5 or newer, treat snapshot `mutable` and `allowedOperations` values as authoritative. Never mutate or reopen authentication, account-creation, OTP, pre-form-CAPTCHA, or manual-only members. Only an explicit user request may call `trackly_resume_parked_apply_member`; the returned member still requires a fresh non-mutating probe before private data or form mutation. Resume unresolved waves in ascending order only for `active: true` and obey the server `nextAction` and funnel. Never reconstruct progress or choose replacements locally. Treat backend `achievementCount`, target-capped `completed`, `targetReached`, and `nextAction` as authoritative. `durablyReviewReady` and `submitted` remain current operator projections and must never be added together by the client to reconstruct cumulative completion. Let the backend own reservations, capacity, attempted-job deduplication, immutable waves, and advancement. Continue until `targetReached`, `queueExhausted`, a blocking `nextAction`, or the user stops.
+   - For named jobs or an explicit selected set, resolve the exact Trackly job IDs and send their ordered `jobIds` to `trackly_start_apply_execution`, with `target` equal to that list length. The server must freeze only that set; blocked or inaccessible members never authorize unrelated replacements. Retain the original start idempotency key for an exact replay. A matching count alone never proves an active execution matches the selection. If the server cannot verify the exact selection, stop and explain the scope conflict; never omit `jobIds`, reorder the saved queue, or use count-only start as a fallback. Changing an active target still requires the existing explicit stop/change confirmation.
    - After full local context loss with no active execution, call `trackly_list_recoverable_apply_executions`. For every distinct returned `jobId`, call `trackly_get_job`, bind that Trackly-owned job record to the returned `candidateId`, and show the user its company, role, requisition identity when available, source-execution identity, and `accessKnowledge` scheduling reason when present; do not identify candidates from chat, tab order, search results, or page copy. A missing or mismatched Trackly job record blocks confirmation. An active personal deferment on any confirmed candidate blocks recovery until that deferment is cleared. Require explicit confirmation of one exact candidate set, then call `trackly_recover_exact_apply_members` with that source execution, snapshot hash, and only those candidate IDs. Verify `assertedCandidateIds`, `eligibleCandidateIds`, and the eligibility candidate IDs each contain exactly the confirmed set with no duplicates. Never add substitutes, newly saved jobs, or merely similar roles. Curated or historical walls stay in the exact recovered set as parked members and still require explicit resume plus a fresh probe.
    - Exact recovery restores server lineage only. Treat tab restored, form state restored, and mutation authority restored as three independent receipts. Bind every recovered surface with a fresh recovery binding and inspection epoch, revalidate the full form, and preserve every user-edited or unknown non-empty value before any write. Earlier-epoch browser, field, upload, integrity, and submission evidence cannot authorize the recovered form.
    - Every compact snapshot request must contain a non-empty list of only the current member IDs. Never request an empty or inferred all-members projection.
@@ -87,7 +88,7 @@ Read [references/legal-clarifications.md](references/legal-clarifications.md) wh
    - For each fixed batch member, preserve an explicit job ID -> application run ID -> browser tab mapping. Complete the full start -> conditional resume preparation/confirmation/verification when an upload control exists -> form completion -> `review_ready` lifecycle for every member. A review-ready run does not block the next member. Never submit any of them.
 6. When the selected job or current fixed batch member has no `runId`, call `trackly_start_apply_run` with the complete `batchId`, `memberId`, `expectedMemberVersion`, `expectedInspectionEpoch`, and `leaseToken` returned by Trackly. This is the sanctioned idempotent lookup for a recovered member whose `runId` is absent; call it with the exact recovered binding and Trackly will reuse the bound active run. When the member already has a `runId`, do not call `trackly_start_apply_run` in this or any subsequent start step: reuse that exact run and bind or recover its browser surface through `trackly_bind_apply_surface` as required. Never create a replacement run because browser control was interrupted.
    - If a bound start returns a transport failure, a non-access HTTP 5xx response, or an error explicitly marked `retryable: true`, preserve the frozen member and browser state. Refetch the active batch, renew its lease, and retry the same complete binding once. Classify the retry response independently with these same rules: route canonical `maintenance_mode` or legacy `planned_maintenance` directly through **Resume after maintenance**; surface controlled-access/request errors marked `retryable: false` and every other HTTP 4xx response unchanged; only a second transport failure, non-access HTTP 5xx response, or explicitly retryable error becomes `backend_run_start_unavailable`. Route maintenance on either attempt without consuming or relabeling the retry, and never relabel a permanent retry response as an outage. For `backend_run_start_unavailable`, continue other members and report a Trackly control-plane failure. Do not call `trackly_checkpoint_apply_batch` for this condition because start failure has not produced the required run ID. The unchanged frozen member is the durable resume point. Never switch that frozen member to an unbound legacy run or blame the employer form.
-   - Require `run.protocolVersion` to be 3.1.0 or newer and to share protocol major 3 with the fetched protocol. A new reliability execution member requires 3.7.0 or newer; already-active older work may use only the recovery path published by its fetched protocol. Never continue a pre-evidence 3.0.x run under skill 4.9.2. Preserve that run instead of starting a replacement, record it `blocked` with a value-free protocol-upgrade reason when possible, and tell the user the saved job can be retried only after the stale run is cleared through Trackly's supported lifecycle. Stop and refetch the protocol and active execution or batch if support level, execution mode, provider, required scenarios, authorized origin policy, member version, or inspection epoch changes after run creation.
+   - Require `run.protocolVersion` to be 3.1.0 or newer and to share protocol major 3 with the fetched protocol. A new reliability execution member requires 3.7.0 or newer; already-active older work may use only the recovery path published by its fetched protocol. Never continue a pre-evidence 3.0.x run under skill 4.9.3. Preserve that run instead of starting a replacement, record it `blocked` with a value-free protocol-upgrade reason when possible, and tell the user the saved job can be retried only after the stale run is cleared through Trackly's supported lifecycle. Stop and refetch the protocol and active execution or batch if support level, execution mode, provider, required scenarios, authorized origin policy, member version, or inspection epoch changes after run creation.
    - In guided mode, inspect the page before preparing any resume bytes. Confirm the employer, role, HTTPS origin, reachable review path, semantic controls, whether an attachment control exists, and absence of a credential, verification, CAPTCHA, or submit-only wall. A missing file input is not itself a blocker; skip the resume path when the application has no attachment control. Any other failed precondition is an execution blocker, not permission to improvise.
 7. Pass the browser readiness gate before preparing resume bytes:
    - Use semantic browser control through Codex in-app browser controls, Chrome MCP/extension browser control, or Claude in Chrome.

package/skills/trackly-apply/references/batch-orchestration.md

@@ -24,6 +24,7 @@ runs remain recovery-only compatibility paths.
   active execution first or start one with target 1–20. Continue through its
   original recent-first Check Later snapshot until N forms are durably ready
   for manual review, the snapshot is exhausted, or the user stops it.
+- A request naming specific jobs means only those jobs. Resolve their Trackly IDs, pass the exact ordered `jobIds` with `target` equal to their count, and preserve that immutable selection through retries and later waves. Never fill unrelated jobs to replace blocked selected members. Keep the original idempotency key for an exact start replay; a changed key or set cannot authorize resuming a different active execution. A rejected selection must not fall back to a count-only start or queue reordering.
 - “Inspect the next N records” means a fixed immutable batch of exactly those
   queue records. Never replenish or replace that inspection batch.
 - A saved/check-later job is already approved. Neither mode rescans fit.