Änderungsprotokoll

All notable changes to this project are documented in this file.

[2026-03-08]

Added

• Scheduled analytics cleanup command (app:prune-analytics-data) to prune stale public page views and scrub sensitive external application tracking fields.
• Regression coverage for signed public resume access, CV extraction consent, analytics cleanup, and minimized external application tracking data.
• Extended analytics cleanup coverage for blog engagements, event views, and employer analytics session metadata.
• Signed outbound warning flow for external job applications and event registrations.
• Regression coverage for non-owner team management restrictions, outbound redirect signatures, and constrained admin resume downloads.

Changed

• Public resume sharing now uses signed URLs, while employer CV database views render under employer access controls instead of redirecting to a public profile URL.
• CV uploads now use a private filesystem path and AI extraction requires explicit user consent in resume import and optional consent in onboarding/profile CV updates.
• Public analytics retention now prunes old public_page_views records after 90 days.
• Blog engagement, event view, and employer analytics session identifiers are now stored as HMAC hashes instead of raw session or visitor values.
• External job and event URLs now require HTTPS validation across Livewire and Filament entry points and route through a signed warning page before leaving the platform.
• Resume and CV download controllers now resolve files only from approved disk/prefix combinations instead of probing public storage.

Fixed

• Redacted candidate email, phone, street address, postcode, and social links from public resume views while preserving full contact data for authorized employer CV access.
• Minimized public analytics storage by masking IP addresses, hashing visitor identifiers, dropping raw referrer/session/user-agent data, and avoiding raw query parameter storage.
• External application tracking now avoids persisting raw user-agent data, masks stored IP addresses, and strips session identifiers from metadata.
• Event view tracking now stores referrer host and hashed session identifiers instead of attempting to persist raw client metadata.
• Team management actions now enforce company-owner access in the Livewire component as well as the route middleware.

[2026-02-22]

Added

• Public changelog page at /changelog with footer navigation under Resources.
• Employer-side AI draft assistant on job create/edit forms with optional instruction input.
• Structured AI job draft agent for generating role description sections (about role, responsibilities, requirements, nice-to-have, and offer details).
• Feature coverage for employer AI draft generation flows.
• One-off cleanup command to remove deprecated global job AI summary fields (app:cleanup-global-job-ai-insights).
• Employer CV Database feature tests for profile visibility and filtering behavior.
• Employer CV Database saved recruiter filters (save, reuse, and delete).
• Employer CV Database sort options: Recently updated, Newest, and Most skills match.
• Direct Contact Candidate action on CV Database profile cards.
• Applicant profile-view notifications when employers open candidate profiles from CV Database.

Changed

• AI job insights storage migrated from global job-level fields to user-scoped records (user_job_ai_insights) so generated results are private per logged-in user.
• Public job AI insight generation now dispatches locale-aware queued jobs per user and persists only successful non-fallback outputs.
• AI insight rendering now requires authenticated users and shows user-specific content only.
• Public job cards and home featured cards now use View Details CTAs and expose match percentage badges for applicants.
• Job details AI panel now supports collapse/expand interaction.
• AI output language now follows page locale consistently (English/German without mixed-language sections).
• DeepSeek routing aligned to deepseek-chat when configured with deepseek-reasoner alias in current service settings.
• Employer CV Database page now uses real searchable candidate profile data with keyword and industry filters, open-to-work filter, dynamic stats, and pagination.
• Employer CV Database page now surfaces a visible premium feature badge in the active experience.
• Employer CV Database search area is now more compact, with saved filter chips always visible and a simplified save-filter input row.
• Employer CV Database filter layout further refined for usability: full-width keyword search priority and improved Open to work only checkbox alignment.

Fixed

• Removed stale "generating" cache collisions by keying AI generation state per job and user.
• Prevented generic placeholder AI output from being persisted when job descriptions are insufficient or contain dummy content.
• Resolved timeout parameter misuse on unsupported agent prompt signatures.
• Reduced cross-user data leakage risk by eliminating shared AI summary persistence on job_listings.
• CV Database industry filtering behavior hardened for stored profile industry JSON formats.
• Applicant profile view tracking now sends notifications when employers open profiles from CV Database (with anti-spam throttling).
• Invited employer proxy accounts no longer receive applicant onboarding welcome emails after registration; employer invite registrations now receive a workspace-focused employer welcome message.

[2026-02-21]

Added

• External application click tracking with follow-up reminder scheduling (3-day and 7-day checkpoints).
• Applicant-side external apply confirmation action (I applied) that records completion events.
• Employer notification settings page with follow-up reminder opt-out controls.
• Saved searches with instant alert capability and hourly processing command.
• Trust system foundations: verified employer flag, public verified badges, job abuse reporting, and listing flagging.
• Employer analytics extensions: views, apply rate, time-to-hire, and source performance.
• Job match scoring with applicant-facing match percentage and fit reasons.
• AI hiring insights scaffolding for job summaries, interview prep content, and candidate highlights.
• Smarter employer job posting flow with reusable templates and salary guidance hints.

Changed

• External application links now route through tracked redirect endpoints instead of direct external URLs.
• Notification preference defaults expanded for applicant/employer external follow-up reminders.
• Public jobs UI now includes save search action and more applicant workflow controls.

Fixed

• I applied now behaves idempotently and stores a single confirmation event per applicant/job.
• Report abuse now prevents duplicate reports from the same user for the same listing.
• Existing notification preference hook in NewApplicationReceived aligned with preference key method contract.

Notes

• New database migrations were introduced for tracking events, reminders, trust/reporting, saved searches, and AI insight fields.
• Run migrations before using these features.

[2026-02-14]

Added

• Enhanced admin dashboard engagement widget with public traffic, shares, blog engagement, and response-time metrics.
• New Filament dashboard coverage test for operational and engagement stats rendering.

Changed

• Admin dashboard stats structure expanded to include events, subscriptions, CV-access, and open-to-work profile signals.
• Top companies dashboard table widget now spans full width for improved layout consistency.

Fixed

• Application widget status badge mapping aligned with real application statuses (applied, in_review, interviewing, offer, rejected).
• Latest applications ordering now uses applied_at consistently.

[2026-02-13]

Added

• Invite-based employer onboarding.
• Manual subscription approval flow for employer accounts.

[2026-02-12]

Added

• Content editor layout for job content pages.

Fixed

• Employer package access issues.

[2026-02-08]

Added

• Inline content editor support for development workflows.

Fixed

• Event gallery embed rendering issues.

[2026-02-07]

Added

• Help Center page and role-specific public pages.
• Profile update improvements with additional profile fields.

Changed

• Public page styling and layout refinements.

Fixed

• Newsletter subscription visibility logic for already-subscribed users.

[2026-02-06]

Fixed

• Regressions in job apply flow.
• Stripe webhook processing issues.
• Reminder behavior issues.
• CV download issues.

[2026-02-02]

Added

• Event management system with Stripe integration.
• "Open to work" status toggle for candidates.
• "Actively hiring" status toggle for employers.

Changed

• Optimized repository tracking and ignore rules.

[2026-02-01]

Added

• Event management feature design documentation.
• Event models and migrations (Phase 1 foundation).
• Automatic CV extraction persistence.
• New resume templates.
• Profile display enrichments (photos and expanded contact details).

[2026-01-31]

Added

• Employer CV database functionality with profile search and access notifications.
• Resume builder functionality with CV extraction support.
• Multiple resume templates.
• New profile data models for education and work experience.
• Filament user management resources.
• Admin dashboard widgets and new admin pages.
• Profile and application resources with relation managers.
• Locale persistence using cookies.
• Language switcher UI improvements.
• Extended email testing command options.
• New email-related skills and custom email templates.
• Additional sign-in translation keys and updated login header copy.

Changed

• Mail template alignment updates (header, wrapper, footer centered).
• Company management refactors in admin resources.
• AI skill configuration cleanup and refactor.

[2026-01-30]

Added

• Employer dashboard.
• Company management features.
• Job posting features.
• Application tracking features.
• Employer-to-applicant direct contact functionality.
• Applicant notifications for application status changes.

[2026-01-29]

Added

• Job lifecycle management.
• Job view tracking.
• Industry categorization.
• Applicant job recommendations.
• User notification preferences.
• New notification types and related console commands.
• "Coming Soon" sidebar section and translations.
• Authentication and maintenance page translations.
• Welcome-page language switching buttons.
• New application config and rebuild script updates.

Changed

• Livewire components and localization refinements.
• AI composition pattern skill definitions cleanup.

[2026-01-28]

Added

• Initial project commit.