Improved job applications, recruiter tools, and brand customization

apply-inline CORS route — context + authed apply for the www inline widget

sanitize screening answers server-side against the job's question_list

Saved tab reads default shortlist + flag-gated 'View all shortlists'

consolidate loose WIP — recruiter page, badges/verify, matchday, share-profile

embeddable verified badges (10×) + portal config/branding/monitoring fixes

maskable + plated icons, manifest shortcuts, iOS standalone meta

application context (screening answers) on shortlist items

default-list lib + quick-save actions; bookmarks → shortlists

HubSpot-style contact card with provenance gating

Shared with you — grant on open + index groups

universal SaveToShortlistButton + mounts; land T8/T9/T10 pure modules

10x rate-limit console — fleet stuck-user view, stats, inline + bulk reset

4-stage / 5-step talent onboarding step model + legacy mapping

5-step application page switch + legacy mapping; 4-stage rail restyle

admin rate-limit console action layer

admin signup analytics by type + fold Candidates into Talent pool

applicant contact-channels helper (manual-only phone)

candidate action toolbar (save/email/whatsapp/call/note/schedule)

candidate detail record layout (activity-first, overview in right column)

global rate-limits Operations dashboard

inert-by-default demographic self-ID write action

opportunity feed UI — talent For-you tab + interest manager, recruiter opportunities page (flag-gated)

opportunity matcher + feed queries, interest actions with auto-seed, daily digest cron

per-user rate-limit registry + durable resume-upload counter helpers

per-user rate-limits admin panel + throttled header flag

recruiter page polish — design, Pro branding, join-the-bench, docs

register counsel-gated demographic-self-id flag (default OFF)

show subtle build version on auth pages

StartStep composite — sources + goals + discovery on one screen

SubmitStep with inline phone gate + counsel-gated SelfIdCard; forest extraction stage; proficiency-tinted review chips

talent find-dashboard visual overhaul — mission-control hero, flat zones, motion

two-column login/signup with animated talent-face mosaic

WorkStep — rate hero + merged preferences, conservative market rate band

auth front door — single woff2 font loader, immutable asset caching, skeletons + entrance motion, taller auth buttons

normalizer parity (non-string ids/labels) + inline avatar crash

admin job-templates read via service-role client + identity stitch

admin workspace detail — status-accurate banner, live activity log, linked creator, avatar fallback

align IndexNow trigger label to underscore convention

allowlist webapp-mailbox namespace for the client intl provider

assessments platform-admin gate uses hook-derived checkIsAdmin

close signup privilege escalations + harden account/workspace creation

floor talent-wall tile size so float rounding never drops a column

gap-proof the talent wall + re-curate faces to professional set

keep the build-version marker on login/signup after split-layout swap

overshoot the talent-wall grid so a gap is impossible by construction

reconcile recruiter page with staging package APIs post-merge

register opportunity-feed flag in barrel; sync flag + signup tests

resolve applicant identity for hiring-side viewers + stage-gated disclosure

stamp stepModelV2 via direct JSONB merge (revalidatePath is illegal in render); grant compliance service_role table privileges

portal overhaul — mission-control dashboard, unified opportunities feed, pipeline board, bench, ledger, analytics

www roleApply question-stepper + inline-apply copy (EN+ES)

talent inbox overhaul — copy-address chips, live folders, quick actions, inline reply

LinkedIn-only analyze path + honest source rows; de-box StartStep sources

1 security hardening fix

seed Adzuna searches from our role taxonomy + evergreen aliases

seed verified SmartRecruiters + Recruitee crawl targets, enable freshness SLA

smartrecruiters + recruitee + adzuna-jobs inbound adapters with query-seeded Adzuna sync

carry screening_questions from public_jobs into the Job type

quick-apply screening-question stepper + answers/note forwarding

signed-in inline apply — questions answered on the role page

apply_url falls back to canonical posting URL (feed outbound link must not be null)

JobShapedPosting + fixtures carry screeningQuestions

re-arm the inline context load on StrictMode cleanup

show the applied state on role pages for signed-in users

admin per-client apply + global Inngest backfill

core lib — client, extract, download, apply (23 tests)

import brand colors into career-page settings

keyless brand-color derivation from the logo (saturated-dominant), closes #5439fd #635bff

previewBrand + applyBrandForWorkspace actions + flag

shared BrandPreviewCard component (bilingual)

system-health registry entry + env docs

website field + brand preview in workspace creation

add sync-run ledger tables + bump fn (phase 1)

broadcast sync-run changes to admin realtime topic (phase 1)

error-cause classification (phase 1)

inngest sync-run orchestrator + event (phase 1, task 9)

keyset paginators for sync (phase 1, task 6)

live sync cockpit UI + dashboard mount (phase 1, tasks 11-13)

local<->HubSpot mapping store (phase 1, task 7a)

one-way object syncers (phase 1, task 7b)

run-store ledger CRUD (phase 1)

surface run history on the dashboard (phase 1)

sync ledger types (phase 1)

sync orchestrator sequencer (phase 1, task 8)

sync trigger/cancel/read server actions (phase 1, task 10)

wire steady-state incremental push (phase 1, task 14)

brand_color falls back accent→dark when no explicit brand color, closes #ff7a59

harden CDN tier + reject non-image downloads

dashboard no longer advertises the deleted 5-min cron (phase 1, task 15b)