last30days v4.0.0

Before you upgrade: sidecar cookies now need consent

On Linux, Mac mini, and Darwin sink hosts, the agentcookie sidecar no longer reads X cookies just because it is installed. If you rely on it, set AGENTCOOKIE=on (or an affirmative BROWSER_CONSENT) in ~/.config/last30days/.env. Explicit refusals still win, and direct AUTH_TOKEN + CT0 credentials keep working. /last30days doctor tells you when an installed sidecar needs the opt-in. Thanks to @vincentkoc (#1365, landed in #1440).

What's new

• Secret Signals in plain words. Patent and jobs signals are two sentences: what the filing or role is, and what it could mean. A patent shows up only when it is out of character for the company or describes a product it hasn't shipped, and the two strongest candidates are checked on the web first (#1427, #1428).
• Company-run job boards. A company report now reads the company's own careers site, either directly (Amazon, Apple, Google, IBM, Eightfold boards for Microsoft, Qualcomm, and Netflix) or by detecting its hiring platform (Oracle, JPMorgan, Dell, AMD, Adobe, Cisco, Disney, Salesforce, Intel, and others). Sites with only a job sitemap get a titles-only digest. Set LAST30DAYS_JOBS_RESPECT_ROBOTS=1 to honor robots.txt (#1428, #1431).
• Gemini model pins. A stale LAST30DAYS_PLANNER_MODEL or LAST30DAYS_RERANK_MODEL pin warns and falls back instead of failing, and Gemini 4+ is accepted. Thanks to @SajjadPSavoji (#1430, landed in #1439).
• Grok Bot run fixes. --as-of set to today is a live run, an outdated Digg helper reports its upgrade command, a missing stock helper is named, and post-write checks no longer delete required sections (#1427).

Contributors

Thank you @vincentkoc and @SajjadPSavoji.

What's Changed

• fix: show patent signals only when surprising, and fix the Grok Bot run by @mvanhorn in #1427
• feat: plain-words Secret Signals and company-run job boards by @mvanhorn in #1428
• feat(jobs): read company boards by hiring platform, with a sitemap tier and fall-through by @mvanhorn in #1431
• fix(providers): accept Gemini 4+ and fall back from stale model pins (from #1430 by @SajjadPSavoji) by @mvanhorn in #1439
• docs: README tracks the v4 pipeline by @mvanhorn in #1441
• fix(agentcookie): require positive consent for sidecar cookie reads (from #1365 by @vincentkoc) by @mvanhorn in #1440
• chore(release): bump version to 4.0.0 by @github-actions[bot] in #1442

Full Changelog: v3.39.0...v4.0.0