What’s new in Diiirect

find-shell sweep — Career Compass, verified-skills CTA, LinkedIn OAuth-only, KYC fixes

apply-inline CORS route — context + authed apply for the www inline widget

sanitize screening answers server-side against the job's question_list

Saved tab reads default shortlist + flag-gated 'View all shortlists'

consolidate loose WIP — recruiter page, badges/verify, matchday, share-profile

embeddable verified badges (10×) + portal config/branding/monitoring fixes

maskable + plated icons, manifest shortcuts, iOS standalone meta

application context (screening answers) on shortlist items

default-list lib + quick-save actions; bookmarks → shortlists

HubSpot-style contact card with provenance gating

Shared with you — grant on open + index groups

universal SaveToShortlistButton + mounts; land T8/T9/T10 pure modules

10x rate-limit console — fleet stuck-user view, stats, inline + bulk reset

4-stage / 5-step talent onboarding step model + legacy mapping

5-step application page switch + legacy mapping; 4-stage rail restyle

admin rate-limit console action layer

admin signup analytics by type + fold Candidates into Talent pool

applicant contact-channels helper (manual-only phone)

candidate action toolbar (save/email/whatsapp/call/note/schedule)

candidate detail record layout (activity-first, overview in right column)

global rate-limits Operations dashboard

inert-by-default demographic self-ID write action

opportunity feed UI — talent For-you tab + interest manager, recruiter opportunities page (flag-gated)

opportunity matcher + feed queries, interest actions with auto-seed, daily digest cron

per-user rate-limit registry + durable resume-upload counter helpers

per-user rate-limits admin panel + throttled header flag

recruiter page polish — design, Pro branding, join-the-bench, docs

register counsel-gated demographic-self-id flag (default OFF)

show subtle build version on auth pages

StartStep composite — sources + goals + discovery on one screen

SubmitStep with inline phone gate + counsel-gated SelfIdCard; forest extraction stage; proficiency-tinted review chips

talent find-dashboard visual overhaul — mission-control hero, flat zones, motion

two-column login/signup with animated talent-face mosaic

WorkStep — rate hero + merged preferences, conservative market rate band

auth front door — single woff2 font loader, immutable asset caching, skeletons + entrance motion, taller auth buttons

normalizer parity (non-string ids/labels) + inline avatar crash

admin job-templates read via service-role client + identity stitch

admin workspace detail — status-accurate banner, live activity log, linked creator, avatar fallback

align IndexNow trigger label to underscore convention

allowlist webapp-mailbox namespace for the client intl provider

assessments platform-admin gate uses hook-derived checkIsAdmin

close signup privilege escalations + harden account/workspace creation

floor talent-wall tile size so float rounding never drops a column

gap-proof the talent wall + re-curate faces to professional set

keep the build-version marker on login/signup after split-layout swap

overshoot the talent-wall grid so a gap is impossible by construction

reconcile recruiter page with staging package APIs post-merge

register opportunity-feed flag in barrel; sync flag + signup tests

resolve applicant identity for hiring-side viewers + stage-gated disclosure

stamp stepModelV2 via direct JSONB merge (revalidatePath is illegal in render); grant compliance service_role table privileges

portal overhaul — mission-control dashboard, unified opportunities feed, pipeline board, bench, ledger, analytics

www roleApply question-stepper + inline-apply copy (EN+ES)

talent inbox overhaul — copy-address chips, live folders, quick actions, inline reply

LinkedIn-only analyze path + honest source rows; de-box StartStep sources

1 security hardening fix

seed Adzuna searches from our role taxonomy + evergreen aliases

seed verified SmartRecruiters + Recruitee crawl targets, enable freshness SLA

smartrecruiters + recruitee + adzuna-jobs inbound adapters with query-seeded Adzuna sync

carry screening_questions from public_jobs into the Job type

quick-apply screening-question stepper + answers/note forwarding

signed-in inline apply — questions answered on the role page

apply_url falls back to canonical posting URL (feed outbound link must not be null)

JobShapedPosting + fixtures carry screeningQuestions

re-arm the inline context load on StrictMode cleanup

show the applied state on role pages for signed-in users

admin per-client apply + global Inngest backfill

core lib — client, extract, download, apply (23 tests)

import brand colors into career-page settings

keyless brand-color derivation from the logo (saturated-dominant), closes #5439fd #635bff

previewBrand + applyBrandForWorkspace actions + flag

shared BrandPreviewCard component (bilingual)

system-health registry entry + env docs

website field + brand preview in workspace creation

add sync-run ledger tables + bump fn (phase 1)

broadcast sync-run changes to admin realtime topic (phase 1)

error-cause classification (phase 1)

inngest sync-run orchestrator + event (phase 1, task 9)

keyset paginators for sync (phase 1, task 6)

live sync cockpit UI + dashboard mount (phase 1, tasks 11-13)

local<->HubSpot mapping store (phase 1, task 7a)

one-way object syncers (phase 1, task 7b)

run-store ledger CRUD (phase 1)

surface run history on the dashboard (phase 1)

sync ledger types (phase 1)

sync orchestrator sequencer (phase 1, task 8)

sync trigger/cancel/read server actions (phase 1, task 10)

wire steady-state incremental push (phase 1, task 14)

brand_color falls back accent→dark when no explicit brand color, closes #ff7a59

harden CDN tier + reject non-image downloads

dashboard no longer advertises the deleted 5-min cron (phase 1, task 15b)

career-intent intake + evidence-grounded AI coach + consent-gated comp disclosure (field-encrypted → quarantined market_db)

Phase 1 foundation — registry, ledger, writer, read helpers, backfill

Phase 3 cookie CMP — shared consent cookie, consent-gated analytics, granular banners (webapp+www), server persistence + association

Phase 4 privacy center — /privacy settings, cookie prefs, consent history + receipt download

Phase 5 admin console — publish version (atomic RPC + hash), coverage stats, evidence export

Phase 6 mobile — self-service RPC, launch re-acceptance gate, privacy screen

re-acceptance screen Max upgrade — inline terms, read-gating, engagement evidence, change summary

jurisdiction×engagement fiscal/payout requirement engine + structured tax-form cards (W-8BEN-E)

talent saved searches + alert digests (marketplace schema + inngest)

job-seeker find dashboard — next-best-action, funnel, profile-strength layout, make-public; find-shell routing/guard

shared shell-agnostic JobDetailView (save/share/follow/status) across find + classic shells

wire SES talent inbox into find shell + dev mailbox switcher

editorial redesign of public talent profile + profile-view analytics

embedded Resume studio in Find shell — 3 templates, talent-only voice; admin export dropdown; dialog removed

find-shell arms for earnings, timers, documents, verified-skills, certifications

find-shell nested arms — contracts/tasks/assessments (P2t)

find-shell verification arm (P4)

in-house X transport + per-platform social routing + modality-A fallback

in-house X transport + per-platform social routing + modality-A fallback

make-an-offer modal — engagement-first 2-step flow (CoR / AOR / EOR)

profile-share analytics — flat StatBand, i18n, deduped heading

rebuild CV export dialog on server preview; swap talent + admin consumers

redesign share-profile popover as a calling card

repoint every find-origin link into the find shell (P5)

resume studio truth-telling toggles, monogram photo fallback, iconized include panel, seeded demo avatars

resume studio v3 — exact sections semantics, filename composer, export history; fix sticky action overlap

resume studio v4 — saved default configuration (jsonb + action) and AI-readable Markdown page option

resume studio v5 — projects/testimonials sections, raw Markdown export, page count, photo + QR/profile-link toggles

scheduling calendar UX — real calendar colors, provider marks, green availability + grid freeze fix

server-side CV render engine — one template, brand+simple variants, bilingual

talent analytics — flat Section zones page skeleton

talent analytics compact empty/error states with CTAs

talent analytics insight strip + intelligent zero-state (X3/X4)

talent analytics metrics as flat StatBand

talent share-profile control — public link, live CV PDF, token-gated email invites

unify talent find/profile onto the classic profile module (P3)

X1 on-brand data-viz theme for talent analytics charts

X2+X5 analytics stat-band sparklines, delta chip, period coherence

drop 134 server actions to clear the Vercel 2048 route cap

ring-fence profile snapshot in apply-core + application page

analytics period selector keeps slug; compact device/activity empty states

close 6 live-tested assessment-flow gaps + timed/proctored runner UX

correct tab title for invited viewers of private profiles

defer talent analytics Postgres awaits into a Suspense child

donut slices 7-8 stay moss-scale (X1 review fix)

integrations hub — recover from hung connect-session requests

offer creation — insert workspace_id and align payloads with marketplace enums

route-budget gate counts server actions (the real cap driver)

route-budget gate only blocks on authoritative entry counts

talent analytics design-elevation pass

talent shell gate enforces everywhere; analytics joins the find shell

five UX papercuts from the evergreen→talent E2E audit

analytics profile-views zone

analytics skill-assessments zone

assessment score-history chart

conditional work & earnings zone

getTalentRecentAttempts loader

getTalentScoreHistory loader

hasWorkData earnings-zone gate

job-seeker analytics insights

job-seeker analytics stat band

profile-views trend chart

reassemble analytics as job-seeker view; retire tracker zones

scheduling section redesign, Pro-gating, calendar + booking fixes

request-memoize analytics reads (dedupe per-page queries)

activity project, wallet eligibility, billing + talent-discovery search PII scoping

analytics review polish — time-axis score chart, dedupe attempt reads, shared window const, truncate, dead-code sweep

score-history module is server-only, not a server-action file

candidate runner design overhaul — cover page, modality medallions, recorder console, CEFR band scale

design overhaul — review console + talent results section

directory invitations + template difficulty + exam-center directory/CTA polish

expand English written CEFR bank to 30 items + enable 10-of-30 pool rotation

Phase 2 core — CEFR dimensions, apply-gate pending state, talent results history, cost/confidence honesty

scoring-sweep indexes + authoring audit triggers

atomic proctoring merge RPC + email-keyed start limiter

cover survey+game kinds in library records; gate test fixtures carry pendingReview

distribution-link page joins the canonical .page frame

compliance checklist + offer-signing adjustments

localize the client calendar-settings wizard (EN + ES)

talent analytics redesign + profile-share keys (en/es)

'Worth confirming' AI clarifying questions in prefill review

collect intended salary (yearly↔monthly) on the rate step

consolidated review + grouped rate/preferences steps (components)

flag résumé ↔ LinkedIn identity mismatch in prefill review

polish LinkedIn connect step — branded, animated, responsive

rate step as two engagement cards — "By the hour" vs "By the year"

wire consolidated flow — 24 steps -> 11

include webapp-assessments in the client message subset

6 security hardening fixes

/changelog version tags link to their GitHub release

hero release pill shows "N days ago", swaps to "see what's new" on hover

pizza-night speakers & sponsors sub-pages with split pizza hero

subtle recency on /changelog — '· 2 hours ago' beside dates

unify + polish legal pages — shared active-highlighting TOC, fix header/TOC alignment, privacy onto legal system

'Email me a code' — thread a Turnstile token through the apply OTP

/intelligence region matrix — blended cells only, one row per region

hint readers fall back to hostname-derived env when build env is absent

pizza-night sub-hero nav clearance + locale-aware sponsor deck links

version badge takes the semver-newest of build version and changelog tag

anonymous quick-apply backend (public-apply route + shell talent + claim email)

flag-gated popup bridge + applied-hint channel + bridge redesign + segmented tabs

momentum-apply platform layer — staging tokens, session hint, events, i18n, auto-prescreen migration

post-apply continuity — onboarding context banner, applied-aware dock, handoff attribution

terminal-state engine — one shared ending, claim-in-place, enrichment chips, momentum applies

admin-requested + policy-gated identity verification (Didit)

momentum-apply — band passthrough, staged uploads, pre-build, rescue, Interview-now, session hint, embed apply

triple-check remediation — rate limits, email pinning, popup coherence, talent withdraw

capture ad-hoc conversion_events columns as a migration + UUID workspace_id

broaden professional-title validation + talent e2e fixtures

company identity in the header + in-place sign-out (no app bounce)

email-code door on the profile apply path (no login link, no OAuth needed)

embedded two-path RoleApplyWidget on role pages, closes #role-apply

momentum-apply widget v2/v3 — staged uploads, résumé-first flag, session hint, embed apply, homepage logos

smart signed-in apply state — no recap, continue-as card, sign-out escape

Phase 1 — shared @diiirect/tracking package + cross-domain www capture

Phase 2 — first+last touch persistence + conversion ledger fix

Phase 2 — last-touch capture (_diiirect_attr_last cookie)

density switch (dots ↔ details) + hover previews

independent show/hide toggles for richer event types

make calendar events clickable to their detail

move filters into the rail + richer, less-boxy design

show the dot hover preview on keyboard focus too

surface the recruiter party on the client contract detail

adverse-impact four-fifths report job + admin panel (SP4 task 4)

compliance schema — isolated demographics + adverse-impact reports + contests (SP4 task 1)

contest-this-result appeal flow + human-review task (SP4 task 6)

human-review gate helper + per-result explainability (SP4 task 5)

pure four-fifths adverse-impact math (SP4 task 3)

add client-documents feature flag (default off)

candidate-profile + contract-area send triggers

client Documents hub + flag-gated nav item

DocuSeal builder token minting

DocuSeal client + provider standalone submission

DocuSeal webhook reconciliation for sent_documents

PDF upload + DocuSeal builder embed (Task 12b)

pure helpers for recipient/submitter/template resolution

pure helpers for recipient/submitter/template resolution

send flow (template source) + template enumeration

sendDocument engine

sent_documents ledger repo

sent-document notifications + branded email

honest degree fallback (other) + Spanish degree phrases

university acronym aliases + startYear plumb-through

canonical company graph — ingest positions, company resolution, work-history link

providers keep per-position company identifiers

deterministic hourly-rate estimation (config, not prompt)

flag-gated two-step transcribe->infer pipeline in extract-resume

golden-set eval harness + nightly workflow

transcribe+infer passes with evidence gate; escalation model -> sonnet-4.5

transcript/inference schemas + evidence-span verification

shared slugifyName + toDisplayName helpers

canonical role + seniority at submit, backfill script, Deel payload alignment

deterministic EN+ES seniority parser

ensureHostProfile — idempotent draft booking-page provisioner

lazy-provision + pre-filled draft booking-page UX (bilingual)

name-derived unique booking-slug generator

merge talent AI engine overhaul — resolver cascade, extraction v2, canonical roles, employers graph, education fidelity

derive the onboarding bio from the brief (Phase 2)

evidence-gated Talent Brief foundation (Phase 1)

outcome-loop ranking priors (Phase 4)

per-job pitch from the brief on the client match view (Phase 3)

shared event calendar + talent agenda view

surface the event calendar in the find-shell

actionable setup cards on the Scheduling tab

Calendly-grade calendar onboarding step

move booking-link management into the find shell

resolve candidate screening answers across key shapes

repair post-rebuild schema drift surfacing as nightly prod errors

bump sent_documents migration +1s to avoid version collision

institution = school name only (education match-rate regression)

rejected-alias guard + v2 review-apply caps + university-aliases policy roles

trim title lookup keys so padded titles still resolve

collapse routes under Vercel 2048 cap (was 2071)

open the workspace to under-review talent with a status banner

profile-strength card on find dashboard

profile-strength feature flag + i18n keys

profile-strength server loader

profile-strength v2 — 22-item granular scoring model

profile-strength v2 UI — per-item breakdown + new signals

profile-strength v2 UI — per-item breakdown + new signals

pure profile-strength scorer

add Documents entry to the classic talent nav

guarantee profile-strength loader never throws

keep the classic shell gated on the application status page

race-safe onboarding progress get-or-create

type the profile-strength existence probe against the schema-union client

flag-gated Draft agreement action on placements

enforce cache-before-spend on the batch-enrich path

rebuild stale-profile refresh cron on source_records freshness, gated off

stop writing generated full_name column in persist-graph profile upsert

stop writing generated is_current column in persist-graph positions

talent scoring pillar — SP1 foundation + SP2 modality/data-model + admin backfill

explicit Added state, ranked results, prop-gated required toggle + supply + suggestions

gate punctuation-stripped ranking fallback to prevent short-residue pollution

job titles keep their catalog UUID + ranked search module

brand the embedded signing form + pre-fill + reference doc

DocuSeal 3-way send for staffing agreements

embed DocuSeal signing in-platform (no docuseal.com redirect)

in-app document-fields editor (records + JSONB)

recruiter 3-party staffing agreement — foundation (gated)

recruiter staffing agreement authoring action (gated)

resolve DocuSeal document fields from records + JSONB overrides

signing view — constrain the document, add a metadata + actions rail

staffing send-trigger + 3-way signing completion

vendor-agnostic signed-document ownership (own the artifact → R2)

getJobTitles lookup endpoint

one-off PDF/DOCX/HTML submissions in the client

centralize field resolution in prepare() — fixes blank docs on primary path

handle the 'not sent for signature' edge case gracefully

parse DocuSeal create-submission response + never crash the send

paginate getJobTitles via cursor + numeric id (verified vs sandbox)

admin sidebar IA nav + section keys

localize skills onboarding step (SkillsQuestion + SkillRow, EN+ES)

localize work-experience, education and final-review onboarding steps (EN+ES)

friendly <firstname>-<random> handle generator

new talent default mailboxes use firstname-random handle

auto-provision the talent booking page (draft) at submit

redesign analyze-step loading experience

redesign LinkedIn step — recommended nudge, real logo, mobile-first

redesign talent calendar step — two-step flow, brand marks, soft OAuth errors

resume-only extraction review card (provenance parity)

live password-mismatch feedback on the signup form

analyze slow-state skip escape + correct uploading label

analyze-step slow-scan UX + LinkedIn photo switcher

final-review edit links point at correct steps via named STEP constants

guarantee an AI-written bio on the LinkedIn prefill path

resume-only review — degree localization corruption + fetch dead-end

submit path honors 'other' degree instead of silently persisting bachelor

use durable R2 LinkedIn photo + fix avatar re-crop

valid HTML + timezone-safe dates across the talent wizard

6 security hardening fixes

Better Stack status announcement bar with nav offset

revamp changelog with cadence toggle, activity graph, and tooltips

gate /open-company behind a flag + add Vercel Flags discovery endpoint

ActivityTimeline feed (day groups, filters, search, infinite scroll)

audit triggers for bookings + interview_feedback (timeline)

event copy map + timeline i18n (en/es)

getWorkspaceActivity read API (keyset pagination + filters)

Inngest projector audit.events -> activity.events (cron + backfill)

pure audit-row -> semantic-event projector

realtime timeline inserts (publication migration + hook)

Phase 1 — console primitives + batched per-agent reads

Phase 2 — agent detail becomes the live console, closes #agent-settings

Phase 3 — agents list becomes the portfolio

Phase 4 — dashboard operations console

Phase 5 — inbox contact names + inline triage

Phase 6 — sending-account health

name the hiring company in the candidate confirmation email

brand-aligned, email-client-safe send-email-hook rendering, closes #0E1F17 #C1FF00

add client-dashboard-command-center flag

funnel-stage computation with stuck-counts

mount pulse strip + funnel + activity timeline behind flag

PulseStrip + FunnelBand components

inline re-match editor + actionable catalog status on step 13

rankSimilarSkills fuzzy catalog suggester

SkillRow with inline re-match editor + clear status

three-state skill review model (matched/needs-match/custom)

billing entitlement gating + usage metering for Modality B

engagement-metrics poll cron (Phase 2 Task 5b)

P3c — client connect-your-socials UI + server actions

Phase 2 Task 1 — Ayrshare aggregator transport + gated-platform adapters

Phase 3 Task 5 — client social compose surface (Modality B)

Phase 3A — per-workspace connection storage + provider registration

Phase 3B — connection lifecycle health sweep + worker error-marking

memoize closest-match suggestions + mobile/a11y polish

address final-branch-review findings

advance projector mark on non-recruiting batches + surface advanceState errors, closes hi#water

expose the activity schema to PostgREST

grant service_role on the activity schema

service_role grants + non-partial idempotency index

strip backslash + PostgREST metachars in search sanitiser

track + reorder the activity-feed migrations for the user-detail overhaul

inbox-filters test fixture for ConversationListItem contactName + channel

disable Postmark tracking for auth hook

i18n aria-label + a11y fixes for pulse/funnel

apply review fixes to Ayrshare aggregator transport

P3b review — 403/forbidden auth classifier + checked health-sweep update

P3c review — bluesky token encoding, vendor isolation, connectionId, role gate

P3d review — type-safe workspace branding extraction (no lying cast)

viewer-aware profile gate + leaner connection checks, closes 642/#646

pin /identityMe + /verificationReport to current API versions

7 security hardening fixes

polish GTM Night NYC + pizza Buenos Aires event pages

refresh GTM Night social previews

make Integration A (global CRM sync) work in private-app-token mode