@gafj/gafj 0.1.1 → 0.1.2

package/README.md

@@ -28,7 +28,7 @@ Status: phases 1 through 6 built and tested (82 public tests on the synthetic ca
 - Bullet register (screen 6): `house_rules.bullet_register` is `result_first` (default, RAS), `action_first`, or `posting`; it travels in the resume packet's HOUSE RULES and `core/rules/resume.md` says what each means. Same facts, same claims, same gate; only word order.
 - Backup folder (screen 6): `config.backup_dir`, meant for a synced folder (Drive, OneDrive, Dropbox); `store/backup_dir.js` writes dated consistent copies there (`gafj backup`, the Back up now button, and one a day at `serve` start), keeps the newest 14, never prunes a pre-restore copy, and refuses the data folder itself. The live store never goes to a synced folder.
 - Hosted tier (plan W, gates 2 and 4 as code): `http/hosted.js` runs the same routes, screens, and doors behind a Google sign-in with one store per user under `<root>/tenants/<uid>/`; the session names the uid, the uid names the folder, and no query spans tenants (`test/hosted.test.js` drives every parameterized route as user B with user A's ids and expects 404 and no leaked text). Provider keys, MCP config, and the restore test are 404 for hosted users; the model is reached through the relay with a service key and the uid (`x-gafj-service`, `x-gafj-uid`; the relay's second auth path), never a stored user token. `/account/export` streams a restorable backup, `/account/delete` removes the folder and every session. `http/identity.js` verifies Firebase ID tokens with node:crypto against Google's JWK set, no SDK. `ui/hosted/signin.html` is the one page with a loosened CSP (Firebase Auth from gstatic). `gafj serve-hosted` is configured by environment only; `deploy/hosted/` holds the Dockerfile and fly.toml; `functions/relay/deploy.js` builds the relay with Firebase Admin, Stripe, and the Anthropic SDK and `functions/index.js` exports it as `relay`. Nothing is deployed; `docs/operator-setup.md` is the list of what only the operator can do.
-- `bin/cli.js`: `migrate`, `import`, `snapshot`, `review`, `lint`, `list`, `score-freeze`, `packet`, `ingest`, `render`, `export`, `backup`, `restore`, `mcp`, `print-mcp-config`, `serve`, `url`, `rotate-token`, `install-startup`, `allow-host`, `init`, `onboard`; every other command names its phase and exits
+- `bin/cli.js`: `start` (the one command: candidate if none, then url or serve), `migrate`, `import`, `snapshot`, `review`, `lint`, `list`, `score-freeze`, `packet`, `ingest`, `render`, `export`, `backup`, `restore`, `mcp`, `print-mcp-config`, `serve`, `url`, `rotate-token`, `install-startup`, `allow-host`, `init`, `onboard`; every other command names its phase and exits
 
 Onboarding another candidate, phase 5b:
 

package/bin/cli.js

@@ -39,6 +39,7 @@ const COMMANDS = {
   render: "write a passed document as Markdown: render --document <id> [--out <dir>]",
   list: "list ids: list postings|applications|interviews|documents|runs",
   mcp: "run the stdio MCP server for Claude Desktop or Claude Code (stdout is the wire)",
+  start: "the one command: creates your candidate the first time (asks your name), then opens the app: start [--name <name>]",
   serve: "run the local UI server on 127.0.0.1: serve [--port <n>] [--force] [--no-open]",
   url: "print a fresh launch URL for the running server (and open the browser): url [--no-open] [--host <allowed host>] [--qr]",
   "allow-host": "let a local HTTPS proxy front the server for your phone: allow-host <name.tail1234.ts.net> | allow-host --remove <name>",
@@ -487,10 +488,35 @@ async function main(argv) {
     } finally { db.close(); }
   }
 
+  if (cmd === "start") {
+    // One command for a new user and for every day after: make the candidate if there is none (asking the
+    // name once), then open the app: a fresh launch link if the server is up, otherwise serve.
+    const { readLock, pidAlive } = require("../http/server");
+    if (!cfg.candidate_id) {
+      let name = opts.name ? String(opts.name) : "";
+      if (!name && process.stdin.isTTY) {
+        const rl = require("readline").createInterface({ input: process.stdin, output: process.stdout });
+        name = await new Promise((resolve) => rl.question("Your name, as it should appear on a resume: ", (a) => { rl.close(); resolve(String(a || "").trim()); }));
+      }
+      name = name || "Candidate";
+      const db = openStore(home);
+      try {
+        const id = ulid(Date.now());
+        db.prepare("INSERT INTO candidate (id, name, created_at) VALUES (?, ?, ?)").run(id, name, nowIso());
+        cfg.candidate_id = id;
+        writeConfig(home.dir, cfg);
+        require("../store/onboarding").openBatch(db, { candidate_id: id, now: nowIso(), actor: ACTOR("start") });
+      } finally { db.close(); }
+      out(`welcome, ${name}. Your data lives in ${home.dir}`);
+    }
+    const lock = readLock(home.dir);
+    return main(lock && pidAlive(lock.pid) ? ["url"] : ["serve"]);
+  }
+
   if (cmd === "serve") {
     const { createServer, ensureSessionToken, readLock, writeLock, removeLock, pidAlive } = require("../http/server");
     const pkg = require("../package.json");
-    if (!cfg.candidate_id) { process.stderr.write("no candidate yet; run gafj import first\n"); process.exit(2); }
+    if (!cfg.candidate_id) { process.stderr.write("no candidate yet; run gafj start\n"); process.exit(2); }
     const lock = readLock(home.dir);
     if (lock && pidAlive(lock.pid) && !opts.force) {
       out(`gafj serve is already running (pid ${lock.pid}) at http://127.0.0.1:${lock.port}; run "gafj url" for a launch link, or serve --force`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gafj/gafj",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "GAF-J: a local campaign engine for job search. One SQLite file, one ingest door, your own AI subscription.",
   "homepage": "https://gaf-j.com",
   "repository": {