Aven — AI-Powered Job Application Tracker & Career Workspace
<p align="center">
<strong>Organize your applications. Accelerate your career.</strong><br>
<em>An intelligent career operations cockpit designed to take you from discovery to signed offer.</em>
</p>
<p align="center">
<img src="https://img.shields.io/badge/Next.js%2016-App%20Router-black?style=for-the-badge&logo=next.js" alt="Next.js 16" />
<img src="https://img.shields.io/badge/React%2019-Modern%20UI-61DAFB?style=for-the-badge&logo=react&logoColor=black" alt="React 19" />
<img src="https://img.shields.io/badge/Tailwind_CSS%20v4-Styling-38B2AC?style=for-the-badge&logo=tailwind-css" alt="Tailwind CSS v4" />
<img src="https://img.shields.io/badge/Supabase-Auth%20%7C%20Database%20%7C%20Storage-3ECF8E?style=for-the-badge&logo=supabase" alt="Supabase" />
<img src="https://img.shields.io/badge/OpenRouter-Vision%20%26%20Reasoning%20AI-6366F1?style=for-the-badge" alt="OpenRouter AI" />
<img src="https://img.shields.io/badge/Security-AES--256--GCM%20%26%20RBAC-red?style=for-the-badge" alt="Security" />
</p>
🌟 Executive Summary
Aven is a personal career operations workspace built for modern job seekers. Instead of wrestling with fragmented spreadsheets, lost bookmarks, forgotten follow-ups, and generic cover letters, Aven centralizes the entire job acquisition lifecycle into an automated workspace.
Aven combines computer vision, LLM-driven job extraction, automated resume matching, streaming personalized email outreach, interview preparation with role-specific MCQs, and real-time pipeline analytics alongside an enterprise-grade audit & admin center.
🗺️ Architectural Workflow & State Machine
Aven enforces a strict separation of concerns between Opportunity Discovery (Jobs Pipeline) and Application Lifecycle:
flowchart TD
subgraph Discovery["1. Opportunity Discovery & Ingestion"]
A[Job Posting Screenshot] -->|Vision LLM| B(Automated AI Extraction)
M[Manual Entry] --> B
B --> C[(Structured Job Record)]
C --> D[AI Resume Fit Analysis]
D -->|0-100 Score + Reasoning| E{Match Quality}
end
subgraph Pipeline["2. Pre-Application Pipeline"]
E --> F[Saved]
F --> G[Interested]
G --> H[Preparing]
end
subgraph Application["3. Application & Outreach"]
H -->|Direct / Email| I[AI Email Composer]
I -->|AES-256 Decrypt + SMTP| J[Direct Email Dispatch + PDF Attachment]
J --> K[(Application Created)]
end
subgraph Lifecycle["4. Application Lifecycle Tracking"]
K --> L[Draft]
L --> M1[Submitted]
M1 --> N[Acknowledged]
N --> O[Interview]
O --> P[Offer]
P --> Q[Accepted]
N -.-> R[Rejected]
N -.-> S[Withdrawn]
end
subgraph InterviewPrep["5. Interview Prep & Scheduling"]
O --> T[1-Click Google Calendar Sync]
O --> U[Role-Specific MCQ Mock Exam]
U --> V[Performance Analytics & Review]
end
⚡ Core Feature Highlights
1. 📷 Multi-Image AI Screenshot Ingestion
- Drop & Extract: Paste or upload up to 6 screenshots of long job posts from LinkedIn, Indeed, Glassdoor, or company boards.
- Vision-Powered Extraction: Multimodal vision AI analyzes the screenshots as a cohesive batch and extracts clean, structured attributes:
- Role Title, Company Name, and Headquarters / Workplace Location
- Compensation & Salary ranges
- Work Mode (
remote, hybrid, onsite) and Employment Type (Full-time, Contract, Internship, etc.)
- Application deadlines, direct portal URLs, and application email addresses
- Custom categorized requirements, benefits, and qualification bullet points.
- Automatic Lifecycle Cleanup: Temporary uploaded screenshots are securely stored in signed buckets and deleted upon parsing completion.
2. 🎯 Intelligent Resume Matching & Fit Scoring
- In-Browser PDF Parsing: Resumes are parsed locally using
pdfjs-dist, maintaining low latency and zero server-side PDF conversion overhead.
- Structured Semantic Extraction: AI parses uploaded resumes into structured skills, career history, education milestones, and executive summaries.
- Dynamic 0–100% Fit Engine: Automatically cross-references job requirements against all uploaded resumes in your repository:
- Generates a weighted match percentage.
- Highlights specific alignment rationale and potential skill gaps.
- Identifies which resume version in your library offers the highest probability of success for each role.
3. ✉️ AI Cold Outreach & In-App SMTP Delivery
- Real-Time Streaming Generation: Watch the AI draft personalized outreach in real-time using server-sent events (SSE).
- Context-Aware Composition: Synthesizes the job posting nuances, applicant headline, and default resume experiences into a punchy, targeted email.
- Strict Spam Filter Avoidance: Enforces plain-text deliverability principles—stripping spam trigger words, all-caps formatting, and promotional language.
- Encrypted SMTP Dispatch: Configure Gmail or custom SMTP credentials once. Passwords are encrypted at rest using authenticated AES-256-GCM. Send applications directly from Aven with your tailored PDF resume attached.
- Complete Communication History: Full audit trail of dispatched emails per job listing, tracking sent dates, recipients, and delivery states.
4. 🧠 Interactive MCQ Interview Prep Engine
- Role-Tailored Question Bank: Automatically generates 12 bespoke, multi-difficulty multiple choice questions (MCQs) for any role in the interview stage.
- Domain-Specific Scenarios: Questions balance core technical fundamentals, real-world troubleshooting, and behavioral judgment tailored to the exact job description.
- Timed In-App Exam Simulator: Interactive quiz UI with progress indicators, option selectors, immediate scoring, and in-depth explanations for every answer choice.
- Historical Performance Tracking: Track test attempts, average scores, and best performances over time to monitor readiness before the real conversation.
5. 📅 Interview Management & 1-Click Calendar Integration
- Round Tracking: Manage phone screens, technical interviews, panel presentations, behavioral rounds, and executive chats.
- Interviewer & Logistics Logging: Keep interviewer names, contact info, virtual meeting URLs, and interview notes organized.
- One-Click Calendar Sync: Generates formatted Google Calendar events with start/end time calculations, role metadata, and meeting URLs pre-filled.
6. 📊 Visual Career Intelligence Cockpit
Aven transforms everyday job search activities into rich analytical insights powered by Recharts:
- Pipeline Stage Distribution: Visual breakdown of opportunities across pre-application and application stages.
- Match Score Distribution: High, medium, and low profile alignment curves.
- Application & Interview Velocity: 30-day historical time-series comparing sent applications against interview invites.
- Time Analytics: Mean time to apply, average turnaround time to first interview, and detection of longest-pending opportunities.
- Source & Market Breakdowns: Comprehensive distribution graphs for job boards, remote vs. onsite preferences, and employment categories.
7. 🛡️ Enterprise-Grade RBAC & Admin Command Center
Aven incorporates administrative tools and server-side role security:
- Server-Only Role Enforcement: User roles (
user | admin) and suspension states are strictly verified server-side and never exposed in client JWTs or cookies.
- Real-Time System Audit Trail: Complete immutable audit logging of system events (
activity_logs) capturing actors, actions, target resources, metadata, and normalized IP addresses.
- Granular AI Usage Telemetry: Tracks every LLM interaction across models, input/output token consumption, cached token hits, execution duration, and estimated API expenditure in USD.
- User Governance: Full administrative user directory with user drill-downs, instantaneous access suspension/banning, and administrative role promotions.
🏛️ Pipeline vs. Application Lifecycle Model
Aven separates early stage prospecting from actual committed applications to maintain accurate funnel metrics:
| Domain | Entity | Available States | Description |
|---|
| Pipeline | jobs | saved<br>interested<br>preparing | Pre-application prospecting. Tracks positions found online before any official outreach has been initiated. |
| Lifecycle | applications | draft<br>submitted<br>acknowledged<br>interview<br>offer<br>accepted<br>rejected<br>withdrawn | Formal application record. Tracks live submissions, feedback cycles, interview schedules, and offers. |
| Comms | application_emails | sent<br>failed<br>bounced | Historical record of direct SMTP transmissions containing subject, body, and attached resumes. |
| Prep | interviews & mcq_results | scheduled<br>completed<br>cancelled<br>rescheduled | Logistics, interview notes, meeting links, and corresponding MCQ mock test records. |
🔒 Security & Privacy Architecture
Client Browser
│
▼
┌────────────────────────────────────────────────────────┐
│ Edge Proxy / Next.js Middleware │
│ ├─ Authenticates session with Supabase SSR │
│ ├─ Reads user role & ban status directly from DB │
│ ├─ Blocks banned accounts from all protected routes │
│ └─ Enforces strict /admin/* boundary for admins only │
└────────────────────────────────────────────────────────┘
│
▼
┌────────────────────────────────────────────────────────┐
│ Next.js Server Actions & API Routes │
│ ├─ Defense-in-depth: Re-verifies auth & ban status │
│ ├─ Audited: Calls logResourceActivity() on mutation │
│ ├─ AI Audited: Calls logAiUsage() on every model call │
│ └─ Decrypts SMTP secrets in isolated server memory │
└────────────────────────────────────────────────────────┘
│
▼
┌────────────────────────────────────────────────────────┐
│ Supabase PostgreSQL (Row-Level Security) │
│ ├─ RLS: Users can only select/insert/update own rows │
│ ├─ Security Definer helper: public.is_admin() │
│ └─ Storage: User-scoped isolated document buckets │
└────────────────────────────────────────────────────────┘
- Defense in Depth: Every server action re-verifies authentication, user suspension states, and resource ownership independently of route middleware.
- Zero Token Leakage: Administrative roles and status indicators are evaluated inside secure server contexts; no privileged claims exist in client storage or public URLs.
- Encrypted Secrets: External SMTP passwords (such as Google App Passwords) are encrypted using authenticated AES-256-GCM with unique initialization vectors (IVs) and authentication tags before persistence.
- Row-Level Security (RLS): Database tables enforce strict Postgres RLS policies, utilizing stable
SECURITY DEFINER routines to prevent recursive policy evaluations while isolating multi-tenant data.
💻 Technology Stack
| Layer | Technology | Purpose |
|---|
| Framework | Next.js 16 (App Router) | Modern server components, streaming SSR, and server actions |
| Runtime & Language | React 19 / TypeScript 5 | Concurrent UI rendering and end-to-end type safety |
| Styling & Motion | Tailwind CSS v4 / Motion | Utility-first responsive design, modern animations, and micro-interactions |
| UI Components | shadcn/ui / Base UI | Accessible, composable primitives with Lucide icons and Sonner notifications |
| Database & Auth | Supabase | PostgreSQL with RLS, SSR session management, and secure document storage |
| AI / Multimodal | OpenRouter SDK & REST | Multimodal vision analysis, semantic resume structuring, and streaming email generation |
| Data Visualization | Recharts | Responsive charting for funnel distributions, timelines, and metrics |
| Client PDF Extraction | PDF.js (pdfjs-dist) | Client-side text parsing for resumes via isolated web worker |
| Email Engine | Nodemailer | Direct SMTP dispatch with PDF attachment streaming |
| Cryptography | Node crypto (aes-256-gcm) | Cryptographic protection for user credentials stored at rest |
🎨 Design Philosophy & UX
- Focus & Flow: High-density data presentation paired with generous white space and rounded cards (
rounded-4xl) for a clean, cohesive appearance.
- Theme-First Adaptability: First-class support for System, Dark, and Light visual modes with seamless contrast transitions.
- Instantaneous Feedback: Optimistic UI patterns, streaming text generation, contextual skeleton loaders, and non-blocking toast notifications.
- Responsive Architecture: Fully responsive layout adapting from mobile application viewports to multi-column desktop control centers.
<p align="center">
<strong>Aven</strong> — Turning application chaos into career momentum.
</p>
