# AccessLens Job Assistant — hosted beta foundation, milestone 1

**NOT SAFE TO HOST PUBLICLY.** This is an interim local-only codebase. Login, authentication enforcement, persistent user-scoped APIs, and secure file storage are not implemented. Do not deploy it to Render or attach a public domain yet.

## Completed
- Browser agent removed from application queue and `/api/agent/start`, `/api/agent/stop`, `/api/agent/status` disabled (404).
- Manual employer-site links and queue status editing retained.
- `supabase_schema.sql` is a proposed user-owned RLS schema, not deployed.
- Original 5S code retained separately; no change to your Mac installation.

## Next implementation tasks (blockers before public URL)
1. Create Supabase project; configure invite-only auth and allowed redirect URLs; review and apply schema.
2. Add hosted frontend login/session handling, backend JWT verification and authorization on **all** API routes (including jobs and AI).
3. Replace browser-local candidate profile, queue and tracker storage with user-scoped DB APIs.
4. Private resume storage and controlled access; data deletion; limits, rate controls, privacy notice.
5. Deploy behind HTTPS and run two-user cross-account denial tests and end-to-end functional tests.

## Local smoke test
`cd accesslens-job-beta-foundation && python3 server.py`
Visit http://127.0.0.1:8780/queue.html. Do not run alongside your existing 5S server.