# RoleWright

> RoleWright is an invite-based AI application workspace for focused job seekers.

RoleWright helps job seekers save job listings, score role fit against a profile, tailor resumes and cover letters, track application status, and submit through a controlled browser workflow that pauses when human judgment is needed.

## Primary Pages

- [Home](https://rolewright.com/) - Product overview, demo, pricing, and beta access.
- [Privacy](https://rolewright.com/privacy) - Privacy policy for account, profile, application, and browser workflow data.
- [Terms](https://rolewright.com/terms) - Service terms.
- [Refunds](https://rolewright.com/refunds) - Refund and cancellation policy.
- [App](https://rolewright.com/app) - Authenticated RoleWright workspace.

## Product Capabilities

- Save job listings from the web or from a manually supplied posting.
- Score fit between a role and the user's master profile.
- Generate role-specific resume and cover-letter drafts.
- Track applications, submit readiness, credits, and status.
- Assist browser-based submission while stopping for auth gates, captchas, ambiguous fields, and other human-review points.

## Agent Access

RoleWright does not provide an anonymous or open API. Approved users can generate a private token in the authenticated app settings.
Tokens are scoped. The minimal external API uses `agent_read` for application read operations and `agent_write` for saving manually supplied jobs. The Chrome browser relay uses the separate `extension` scope. Agent API calls are rate limited and audited with metadata only; request payloads are not stored in the audit log.

Machine-readable metadata:

- [AI manifest](https://rolewright.com/.well-known/ai-plugin.json)
- [Agent API OpenAPI schema](https://rolewright.com/openapi-agent-v0.yaml)
- [Agent capability catalog](https://rolewright.com/agent-capabilities.json)

Authenticated Agent API base URL:

```text
https://rolewright.com/app/api/agent/v0
```

Current minimal API capabilities:

- `GET /me` - describe the authenticated user, token kind, and capability catalog.
- `GET /applications` - list the user's applications.
- `GET /applications/:id` - read one user-owned application and its fit/posting summary.
- `POST /jobs` - save a manually supplied job for review and optional fit scoring.

The Agent API cannot submit applications, operate the browser relay, change billing, edit settings, write profile data, access admin data, or mass-apply to jobs.

## Safety Policy

RoleWright is built for focused applications, not spam. Submission remains reviewable and user-controlled. Tokens should be treated like credentials and revoked from Settings if exposed.