meta-sovereign 0.51.2 → 0.53.0

package/README.hi.md

@@ -6,13 +6,13 @@ meta-sovereign **किसी व्यक्ति या संगठन क
 
 ### किसके लिए
 
-| कौन / क्या            | meta-sovereign कैसे मदद करता है                                                                                                                            |
-| --------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| **व्यक्ति**           | सभी चैट एक जगह, लंबे समय से चुप लोगों से फिर जुड़ना, जो कहा गया वह याद रखना (तथ्य), हर जॉब साइट पर एक जैसा CV।                                             |
-| **बिक्री**            | हर नेटवर्क के लीड एक CRM में, नियम से ऑडियंस, mass-personal outreach जिसमें हर संदेश एक ही बार और शालीनता से जाता है, फ़ॉलो-अप, तेज़ उत्तर।                |
-| **मार्केटिंग**        | ऑडियंस को broadcast, Telegram चैनल, LinkedIn और X पर पोस्ट, community सदस्य हमेशा ताज़ा, एक opt-out सूची जिसे हर स्वचालित भेजना मानता है।                  |
-| **उपयोगकर्ता सहायता** | हर आने वाले संदेश के लिए एक Operator कतार, VK community या Telegram Business खाते से उत्तर, सुरक्षित ड्राफ़्ट के रूप में auto-reply, तथ्यों का ज्ञान-आधार। |
-| **संगठन**             | ब्रांड, दुकान या प्रोजेक्ट के लिए वही उपकरण: उसके खाते, उसके संपर्क, उसका डेटा उसकी अपनी मशीन पर। टीम मोड (कई ऑपरेटर) रोडमैप में है।                       |
+| कौन / क्या            | meta-sovereign कैसे मदद करता है                                                                                                                       |
+| --------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------- |
+| **व्यक्ति**           | सभी चैट एक जगह, लंबे समय से चुप लोगों से फिर जुड़ना, जो कहा गया वह याद रखना (तथ्य), हर जॉब साइट पर एक जैसा CV।                                        |
+| **बिक्री**            | हर नेटवर्क के लीड एक CRM में, नियम से ऑडियंस, mass-personal outreach जिसमें हर संदेश एक ही बार और शालीनता से जाता है, फ़ॉलो-अप, तेज़ उत्तर।           |
+| **मार्केटिंग**        | ऑडियंस को broadcast, Telegram चैनल, LinkedIn और X पर पोस्ट, community सदस्य हमेशा ताज़ा, एक opt-out सूची जिसे हर स्वचालित भेजना मानता है।             |
+| **उपयोगकर्ता सहायता** | अपठित बातचीत के लिए एक Operator कतार, VK community या Telegram Business खाते से उत्तर, सुरक्षित ड्राफ़्ट के रूप में auto-reply, तथ्यों का ज्ञान-आधार। |
+| **संगठन**             | ब्रांड, दुकान या प्रोजेक्ट के लिए वही उपकरण: उसके खाते, उसके संपर्क, उसका डेटा उसकी अपनी मशीन पर। टीम मोड (कई ऑपरेटर) रोडमैप में है।                  |
 
 हर परिदृश्य के लिए आज क्या चलता है, क्या आंशिक है और आगे क्या है — रोडमैप में: [`docs/ROADMAP.hi.md`](docs/ROADMAP.hi.md)।
 
@@ -86,6 +86,7 @@ SPA server को इस क्रम में चुनता है ([`js/src
 
 - **Outreach, broadcast और ऑटोमेशन**: किसे, कब, किन शर्तों पर और किस पाठ से लिखना है; कौन क्या पाएगा इसका preview; डिफ़ॉल्ट रूप से सुरक्षित ड्राफ़्ट, या quiet hours, हर चैट का cooldown, दैनिक सीमा और opt-out सूची के साथ धीमी गति से स्वचालित भेजना। हर स्वचालित भेजना एक ही outbox से जाता है: अधिक से अधिक एक बार, और अस्पष्ट परिणाम अपने आप दोहराया नहीं जाता ([`docs/USER-GUIDE.hi.md`](docs/USER-GUIDE.hi.md), §11)।
 - **Operator कतार और उत्तर**: अपठित संदेश चैट-दर-चैट, आपके पिछले उत्तरों से सुझाव (Tab एक चुनता है), पैटर्न और उत्तर के रूप, मिलते संदेश पर auto-reply।
+- **कार्य खाते**: Upwork, Fiverr, PeoplePerHour और Wellfound के लिए अलग ब्राउज़र विंडो में मैन्युअल साइन-इन, स्थायी सत्र और स्थानीय प्रोफ़ाइल स्नैपशॉट Connections और Profile में उपलब्ध हैं। यह शुरुआती समर्थन है; [गाइड](docs/WORK-ACCOUNTS.md) देखें।
 - **व्यवसाय और community खाते**: VK community token Bots Long Poll चलाता है; Telegram Business के quick replies, स्वागत और अनुपस्थिति संदेश, कार्य-समय और chatbots।
 - **स्मृति**: बातचीत से निकाले गए `प्रश्न → उत्तर` तथ्य, चैट में जाँच के साथ।
 - **अभिवादन**: VK, Telegram, WhatsApp, Messenger, X और ईमेल पर "hi" या स्टिकर से बातचीत शुरू करें, [konard/vk-bot](https://github.com/konard/vk-bot) की तरह ([`docs/GREETINGS.hi.md`](docs/GREETINGS.hi.md))।

package/README.md

@@ -6,13 +6,13 @@ meta-sovereign represents **a person or an organisation online**. Connect Telegr
 
 ### Built for
 
-| Who / what        | How meta-sovereign helps                                                                                                                                         |
-| ----------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| **Individuals**   | All your chats in one place, reconnect with people gone quiet, remember what was said (facts), one CV on every job site.                                         |
-| **Sales**         | Leads from every network in one CRM, audiences by rule, mass-personal outreach that sends each message once and politely, follow-ups, fast replies.              |
-| **Marketing**     | Broadcasts to audiences, posts to Telegram channels, LinkedIn and X, community members kept fresh, an opt-out list every automated send honours.                 |
-| **User support**  | One Operator queue for every incoming message, answers from a VK community or Telegram Business account, auto-replies as safe drafts, a knowledge base of facts. |
-| **Organisations** | The same tools for a brand, a shop or a project: its accounts, its contacts, its data on its own machine. Team mode (several operators) is on the roadmap.       |
+| Who / what        | How meta-sovereign helps                                                                                                                                      |
+| ----------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| **Individuals**   | All your chats in one place, reconnect with people gone quiet, remember what was said (facts), one CV on every job site.                                      |
+| **Sales**         | Leads from every network in one CRM, audiences by rule, mass-personal outreach that sends each message once and politely, follow-ups, fast replies.           |
+| **Marketing**     | Broadcasts to audiences, posts to Telegram channels, LinkedIn and X, community members kept fresh, an opt-out list every automated send honours.              |
+| **User support**  | One Operator queue of unread conversations, answers from a VK community or Telegram Business account, auto-replies as safe drafts, a knowledge base of facts. |
+| **Organisations** | The same tools for a brand, a shop or a project: its accounts, its contacts, its data on its own machine. Team mode (several operators) is on the roadmap.    |
 
 What works for each scenario today, what is partial and what comes next is in the roadmap: [`docs/ROADMAP.md`](docs/ROADMAP.md).
 
@@ -85,6 +85,7 @@ The full user-facing flow — install nothing, install Rust server, install JS s
 - **Contact imports**: preview and import macOS Contacts (including synced iCloud accounts) or vCard exports from any platform; repeated imports keep stable identities. The directory updates during sync and includes people without messages. See [contact imports](docs/CONTACTS-IMPORT.md).
 
 - **Outreach, broadcasts and automations**: who to message, when, on what conditions and with which text; a preview of who gets what; safe drafts by default or paced auto-send with quiet hours, a per-chat cooldown, daily caps and an opt-out list. Every automated send goes through one outbox, so it happens at most once and an unclear result is never retried by itself ([`docs/USER-GUIDE.md` §11](docs/USER-GUIDE.md#11-automations-message-people-by-rule-safely)).
+- **Work accounts**: manual sign-in and saved profile snapshots for Upwork, Fiverr, PeoplePerHour and Wellfound in Connections and Profile. [Setup and initial support limits](docs/WORK-ACCOUNTS.md).
 - **Operator queue and replies**: walk unread messages chat by chat, reply suggestions from your own past answers (Tab takes one), patterns and reply variations, auto-replies on a matching message.
 - **Business and community accounts**: a VK community token runs the Bots Long Poll; Telegram Business quick replies, greeting and away messages, hours and chatbots.
 - **Memory**: structured `question → answer` facts captured from conversations, checked in the chat.

package/README.ru.md

@@ -6,13 +6,13 @@ meta-sovereign представляет **человека или организ
 
 ### Для кого
 
-| Кто / что       | Чем помогает meta-sovereign                                                                                                                                              |
-| --------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
-| **Люди**        | Все чаты в одном месте, возобновить общение с теми, кто давно молчит, помнить, что было сказано (факты), одно резюме на всех сайтах вакансий.                            |
-| **Продажи**     | Лиды из всех сетей в одной CRM, аудитории по правилам, массово-персональные рассылки, где каждое сообщение уходит один раз и вежливо, follow-up, быстрые ответы.         |
-| **Маркетинг**   | Рассылки по аудиториям, посты в каналы Telegram, LinkedIn и X, актуальные участники сообществ, список отписавшихся, который соблюдает каждая автоматическая отправка.    |
-| **Поддержка**   | Одна очередь оператора для всех входящих, ответы от имени сообщества VK или аккаунта Telegram Business, автоответы как безопасные черновики, база знаний из фактов.      |
-| **Организации** | Те же инструменты для бренда, магазина или проекта: его аккаунты, его контакты, его данные на его компьютере. Командный режим (несколько операторов) — в дорожной карте. |
+| Кто / что       | Чем помогает meta-sovereign                                                                                                                                                  |
+| --------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| **Люди**        | Все чаты в одном месте, возобновить общение с теми, кто давно молчит, помнить, что было сказано (факты), одно резюме на всех сайтах вакансий.                                |
+| **Продажи**     | Лиды из всех сетей в одной CRM, аудитории по правилам, массово-персональные рассылки, где каждое сообщение уходит один раз и вежливо, follow-up, быстрые ответы.             |
+| **Маркетинг**   | Рассылки по аудиториям, посты в каналы Telegram, LinkedIn и X, актуальные участники сообществ, список отписавшихся, который соблюдает каждая автоматическая отправка.        |
+| **Поддержка**   | Одна очередь оператора для непрочитанных диалогов, ответы от имени сообщества VK или аккаунта Telegram Business, автоответы как безопасные черновики, база знаний из фактов. |
+| **Организации** | Те же инструменты для бренда, магазина или проекта: его аккаунты, его контакты, его данные на его компьютере. Командный режим (несколько операторов) — в дорожной карте.     |
 
 Что уже работает для каждого сценария, что частично и что дальше — в дорожной карте: [`docs/ROADMAP.ru.md`](docs/ROADMAP.ru.md).
 
@@ -86,6 +86,7 @@ SPA выбирает сервер в таком порядке ([`js/src/web/dis
 
 - **Рассылки, broadcast и автоматизации**: кому писать, когда, при каких условиях и каким текстом; предпросмотр, кто что получит; по умолчанию безопасные черновики или отправка с паузами, тихими часами, перерывом для каждого чата, дневными лимитами и списком отписавшихся. Каждая автоматическая отправка идёт через один outbox: не больше одного раза, а неясный результат сам не повторяется ([`docs/USER-GUIDE.ru.md`](docs/USER-GUIDE.ru.md), §11).
 - **Очередь оператора и ответы**: непрочитанные сообщения чат за чатом, подсказки ответов из ваших прошлых ответов (Tab берёт подсказку), паттерны и варианты ответов, автоответы на подходящее сообщение.
+- **Рабочие аккаунты**: ручной вход в Upwork, Fiverr, PeoplePerHour и Wellfound в отдельном окне браузера, сохранение сессии и локального снимка профиля в Подключениях и Профиле. Это начальная поддержка; см. [руководство](docs/WORK-ACCOUNTS.md).
 - **Аккаунты бизнеса и сообществ**: токен сообщества VK запускает Bots Long Poll; Telegram Business: быстрые ответы, приветствие и сообщение об отсутствии, часы работы, чат-боты.
 - **Память**: структурированные факты `вопрос → ответ` из разговоров, с проверкой прямо в чате.
 - **Приветствия**: начинать диалоги в VK, Telegram, WhatsApp, Messenger, X и почте с «привет» или стикера, как [konard/vk-bot](https://github.com/konard/vk-bot) ([`docs/GREETINGS.ru.md`](docs/GREETINGS.ru.md)).

package/README.zh.md

@@ -11,7 +11,7 @@ meta-sovereign 在网上**代表一个人或一个组织**。连接 Telegram、V
 | **个人**     | 所有聊天集中一处，重新联系久未联系的人，记住说过的话（事实），在每个招聘网站上保持同一份简历。                           |
 | **销售**     | 来自每个网络的潜在客户汇入一个 CRM，按规则划分受众，大规模个性化外联（每条消息只发一次、礼貌有节奏），跟进，快速回复。   |
 | **市场营销** | 向受众群发，在 Telegram 频道、LinkedIn 和 X 发帖，社区成员保持最新，每次自动发送都遵守退订名单。                         |
-| **用户支持** | 所有来信进入一个 Operator 队列，以 VK 社区或 Telegram Business 账号回复，自动回复以安全草稿形式出现，事实构成知识库。    |
+| **用户支持** | 未读会话进入一个 Operator 队列，以 VK 社区或 Telegram Business 账号回复，自动回复以安全草稿形式出现，事实构成知识库。    |
 | **组织**     | 同样的工具服务于品牌、店铺或项目：它的账号、它的联系人、它的数据都在它自己的电脑上。团队模式（多名操作员）已列入路线图。 |
 
 每个场景今天能用什么、哪些是部分支持、下一步做什么，请见路线图：[`docs/ROADMAP.zh.md`](docs/ROADMAP.zh.md)。
@@ -86,6 +86,7 @@ SPA 按以下顺序选择服务器（[`js/src/web/discover.js`](js/src/web/disco
 
 - **外联、群发与自动化**：给谁发、何时发、在什么条件下发、发什么内容；预览谁会收到什么；默认生成安全草稿，或按节奏自动发送，并有安静时段、每个聊天的冷却期、每日上限和退订名单。每次自动发送都经过同一个发件箱：最多发送一次，结果不明时不会自行重试（[`docs/USER-GUIDE.zh.md`](docs/USER-GUIDE.zh.md) 第 11 节）。
 - **Operator 队列与回复**：逐个聊天处理未读消息，根据您以往的回答给出回复建议（按 Tab 采用），模式与回复变体，对匹配消息自动回复。
+- **工作账户**：在 Connections 和 Profile 中打开独立浏览器窗口，手动登录 Upwork、Fiverr、PeoplePerHour 和 Wellfound，保留会话并保存本地资料快照。这是初步支持；见[指南](docs/WORK-ACCOUNTS.md)。
 - **企业与社区账号**：VK 社区令牌运行 Bots Long Poll；Telegram Business 的快捷回复、问候与离开消息、营业时间和聊天机器人。
 - **记忆**：从对话中提取结构化的 `问题 → 答案` 事实，并可在聊天中核对。
 - **问候**：像 [konard/vk-bot](https://github.com/konard/vk-bot) 一样，在 VK、Telegram、WhatsApp、Messenger、X 和电子邮件中用一句“你好”或问候贴纸开启对话（[`docs/GREETINGS.zh.md`](docs/GREETINGS.zh.md)）。

package/js/src/cli/trust-commands.js

@@ -25,6 +25,31 @@ export const TRUST_HELP = `  trust         [--store=<dir>] [--remove=true]
 const enabled = (value, fallback = true) =>
   value === undefined ? fallback : String(value) !== 'false';
 
+/** A locked device keeps its identity: retry only this temporary OS refusal. */
+export const waitForLocalCertificate = async (
+  create,
+  log,
+  pause = () => new Promise((resolve) => globalThis.setTimeout(resolve, 5000))
+) => {
+  let announced = false;
+  for (;;) {
+    try {
+      return await create();
+    } catch (error) {
+      if (error.code !== 'DEVICE_KEY_LOCKED') {
+        throw error;
+      }
+      if (!announced) {
+        log(
+          'Waiting for this Mac to be unlocked to access its protected TLS key…'
+        );
+        announced = true;
+      }
+      await pause();
+    }
+  }
+};
+
 /** Ask macOS to evaluate this exact leaf certificate for local TLS only. */
 export const certificateIsTrusted = (
   certPath,
@@ -64,11 +89,13 @@ export const setupLocalCertificate = async (args, log, options = {}) => {
     return null;
   }
   const storeDir = args.store ?? defaultStoreDir();
-  const protector =
-    enabled(args['hardware-key']) && platform === 'darwin'
-      ? await deviceProtector(storeDir)
-      : null;
-  const local = await load(storeDir, { protector });
+  const local = await waitForLocalCertificate(async () => {
+    const protector =
+      enabled(args['hardware-key']) && platform === 'darwin'
+        ? await deviceProtector(storeDir)
+        : null;
+    return load(storeDir, { protector });
+  }, log);
   log(`local TLS identity (SHA-256) → ${local.fingerprint}`);
   log(`local TLS key protection → ${local.protection}`);
   if (platform !== 'darwin' || trusted(local.certPath)) {

package/js/src/marketplaces/catalogue.js

@@ -0,0 +1,79 @@
+// Issue #42: initial sign-in/profile support, separate from messaging adapters.
+// Login and challenges are completed by the person in an app-owned browser.
+export const MARKETPLACES = Object.freeze({
+  upwork: {
+    label: 'Upwork',
+    hosts: ['www.upwork.com', 'upwork.com'],
+    loginUrl: 'https://www.upwork.com/ab/account-security/login',
+    profilePath: '^/(?:freelancers/(?:~[^/]+|settings/profile)|fl/[^/]+)/?$',
+    docsUrl:
+      'https://support.upwork.com/hc/en-us/articles/360016252373-How-to-build-your-freelancer-profile-the-essentials',
+  },
+  fiverr: {
+    label: 'Fiverr',
+    hosts: ['www.fiverr.com', 'fiverr.com'],
+    loginUrl: 'https://www.fiverr.com/login',
+    profilePath: '^/(?:[a-zA-Z0-9_]{2,32}|users/[a-zA-Z0-9_]{2,32})/?$',
+    docsUrl:
+      'https://help.fiverr.com/hc/en-us/articles/360010558598-Creating-editing-your-freelancer-profile',
+  },
+  peopleperhour: {
+    label: 'PeoplePerHour',
+    hosts: ['www.peopleperhour.com', 'peopleperhour.com'],
+    loginUrl: 'https://www.peopleperhour.com/site/login',
+    profilePath: '^/(?:freelancer|buyer|profile)/[^?#]+/?$',
+    docsUrl:
+      'https://support.peopleperhour.com/hc/en-us/articles/115016023568-Create-a-buyer-account',
+  },
+  wellfound: {
+    label: 'Wellfound',
+    hosts: ['wellfound.com', 'www.wellfound.com'],
+    loginUrl: 'https://wellfound.com/login',
+    profilePath: '^/(?:u/[^/]+|profile(?:/edit)?)/?$',
+    docsUrl: 'https://help.wellfound.com/article/758-profiles',
+  },
+});
+
+const NON_PROFILE = new Set([
+  'login',
+  'signup',
+  'join',
+  'search',
+  'categories',
+  'seller_dashboard',
+  'settings',
+  'users',
+  'dashboard',
+  'logout',
+  'contact',
+  'about',
+  'terms',
+  'privacy',
+]);
+
+/** Accept only an HTTPS profile URL on this service, never a redirect query. */
+export const marketplaceProfileUrl = (id, value) => {
+  const provider = MARKETPLACES[id];
+  try {
+    const url = new URL(value);
+    if (
+      !provider ||
+      url.protocol !== 'https:' ||
+      url.username ||
+      url.password ||
+      url.port ||
+      !provider.hosts.includes(url.hostname) ||
+      NON_PROFILE.has(url.pathname.replace(/^\/|\/$/g, '')) ||
+      !new RegExp(provider.profilePath).test(url.pathname)
+    ) {
+      return null;
+    }
+    url.search = '';
+    url.hash = '';
+    return url.href;
+  } catch {
+    return null;
+  }
+};
+
+export const marketplaceProfileId = (id) => `account:marketplace:${id}`;

package/js/src/marketplaces/profile-page.js

@@ -0,0 +1,118 @@
+// Runs only on the page the person explicitly chose to save as their profile.
+// Reads named profile fields, never cookies, storage, passwords or hidden inputs.
+export const captureProfilePage = () => {
+  const visible = (node) => {
+    if (
+      !node?.getClientRects().length ||
+      node.closest('[hidden], [aria-hidden="true"]')
+    ) {
+      return false;
+    }
+    const style = globalThis.getComputedStyle(node);
+    return style.visibility === 'visible' && style.opacity !== '0';
+  };
+  const text = (selectors) => {
+    for (const selector of selectors) {
+      const node = globalThis.document.querySelector(selector);
+      if (visible(node) && node.type !== 'password') {
+        const value = String(node.value ?? node.textContent ?? '').trim();
+        if (value) {
+          return value;
+        }
+      }
+    }
+    return '';
+  };
+  const nodes = [];
+  for (const script of globalThis.document.querySelectorAll(
+    'script[type="application/ld+json"]'
+  )) {
+    try {
+      const json = JSON.parse(script.textContent);
+      for (const item of Array.isArray(json) ? json : [json]) {
+        nodes.push(
+          item,
+          ...(Array.isArray(item?.['@graph']) ? item['@graph'] : [])
+        );
+      }
+    } catch {
+      /* A malformed unrelated script is not profile data. */
+    }
+  }
+  const findPerson = () => {
+    const type = (node, wanted) => [node?.['@type']].flat().includes(wanted);
+    const page = nodes.find((node) => type(node, 'ProfilePage'));
+    return page?.mainEntity && type(page.mainEntity, 'Person')
+      ? page.mainEntity
+      : nodes.find(
+          (node) =>
+            type(node, 'Person') &&
+            node.url &&
+            String(node.url).split(/[?#]/)[0].replace(/\/$/, '') ===
+              globalThis.location.href.split(/[?#]/)[0].replace(/\/$/, '')
+        );
+  };
+  const person = findPerson();
+  const name =
+    person?.name ||
+    text([
+      '[data-test="profile-name"]',
+      '[data-testid="profile-name"]',
+      '[data-testid="display-name"]',
+      '[data-qa="profile-name"]',
+      'main [itemprop="name"]',
+      '[itemprop="name"]',
+      'input[name="name"]',
+      'input[name="fullName"]',
+      'input[autocomplete="name"]',
+      'input[name="user[name]"]',
+      'h1',
+    ]);
+  const headline =
+    person?.jobTitle ||
+    text([
+      '[data-test="profile-title"]',
+      '[data-testid="profile-title"]',
+      '[itemprop="jobTitle"]',
+      '[data-test="headline"]',
+    ]);
+  const bio =
+    person?.description ||
+    text([
+      '[data-test="profile-description"]',
+      '[data-testid="profile-description"]',
+      '[itemprop="description"]',
+    ]);
+  const skills = [
+    ...globalThis.document.querySelectorAll(
+      '[data-test="skills"] li, [data-testid="skills"] li, [itemprop="skills"]'
+    ),
+  ]
+    .filter(visible)
+    .map((node) => node.textContent.trim());
+  // Positive evidence is recorded as an observation, never inferred from a URL.
+  const signInObserved = [
+    ...globalThis.document.querySelectorAll('a, button'),
+  ].some(
+    (node) =>
+      visible(node) &&
+      /^(?:sign out|log out|logout)$/i.test(node.textContent.trim())
+  );
+  return {
+    challenge:
+      /just a moment|attention required|access denied|verify.*human|security check/i.test(
+        globalThis.document.title
+      ) ||
+      [
+        ...globalThis.document.querySelectorAll(
+          '#challenge-running, #cf-challenge-running, #challenge-stage, #px-captcha'
+        ),
+      ].some(visible),
+    url: globalThis.location.href,
+    name,
+    headline,
+    bio,
+    skills,
+    signInObserved,
+  };
+};

package/js/src/marketplaces/sessions.js

@@ -0,0 +1,184 @@
+import path from 'node:path';
+import { promises as fs } from 'node:fs';
+import { openBrowserSession } from '../cv/browser.js';
+import {
+  MARKETPLACES,
+  marketplaceProfileId,
+  marketplaceProfileUrl,
+} from './catalogue.js';
+import { captureProfilePage } from './profile-page.js';
+
+const failure = (code) => Object.assign(new Error(code), { code });
+const field = (value, length) =>
+  typeof value === 'string' ? value.trim().slice(0, length) : '';
+
+/** Whitelist stored/displayed identity fields, dropping all other page data. */
+export const cleanMarketplaceProfile = (id, data, now) => {
+  const url = marketplaceProfileUrl(id, data?.url);
+  const name = field(data?.name, 160).replace(/\s+/g, ' ');
+  if (
+    data?.challenge === true ||
+    !url ||
+    !name ||
+    /^(?:sign in|log in|login|welcome back|loading|verify|just a moment|your profile$|my profile$|profile$|edit profile$)/i.test(
+      name
+    )
+  ) {
+    throw failure('needs-profile');
+  }
+  return {
+    name,
+    url,
+    headline: field(data.headline, 300),
+    bio: field(data.bio, 5000),
+    skills: Array.isArray(data.skills)
+      ? data.skills
+          .slice(0, 64)
+          .map((skill) => field(skill, 100))
+          .filter(Boolean)
+      : [],
+    capturedAt: now.toISOString(),
+    signInObservedAt: data.signInObserved === true ? now.toISOString() : null,
+  };
+};
+
+export const createMarketplaceSessions = ({
+  store,
+  storeDir,
+  openSession = openBrowserSession,
+  clock = () => new Date(),
+}) => {
+  const sessions = new Map();
+  const opening = new Map();
+  let stopping = false;
+  const providerOf = (id) => {
+    if (!Object.hasOwn(MARKETPLACES, id)) {
+      throw failure('unknown-marketplace');
+    }
+    return MARKETPLACES[id];
+  };
+  const status = async (id) => {
+    const provider = providerOf(id);
+    const session = sessions.get(id);
+    const open = Boolean(session && !session.page.isClosed?.());
+    if (session && !open) {
+      sessions.delete(id);
+      await session.close().catch(() => {});
+    }
+    const saved = (await store.get(marketplaceProfileId(id)))?.profile;
+    let profile = null;
+    if (saved) {
+      try {
+        profile = cleanMarketplaceProfile(
+          id,
+          { ...saved, signInObserved: Boolean(saved.signInObservedAt) },
+          new Date(saved.capturedAt)
+        );
+      } catch {
+        /* Do not expose malformed or non-profile records. */
+      }
+    }
+    return {
+      id,
+      label: provider.label,
+      open,
+      opening: opening.has(id),
+      profile,
+    };
+  };
+  const launch = async (id) => {
+    const provider = providerOf(id);
+    const profileDir = path.join(storeDir, 'browser-profiles', id);
+    await fs.mkdir(profileDir, { recursive: true, mode: 0o700 });
+    const session = await openSession({
+      platform: id,
+      profileDir,
+      headless: false,
+      locale: 'en-US',
+    });
+    try {
+      const saved = (await store.get(marketplaceProfileId(id)))?.profile;
+      await session.page.goto(
+        marketplaceProfileUrl(id, saved?.url) ?? provider.loginUrl,
+        { waitUntil: 'domcontentloaded', timeout: 30_000 }
+      );
+      sessions.set(id, session);
+    } catch (error) {
+      await session.close().catch(() => {});
+      throw error;
+    }
+  };
+  const open = async (id) => {
+    providerOf(id);
+    if (stopping) {
+      throw failure('server-stopping');
+    }
+    if (opening.has(id)) {
+      await opening.get(id);
+      return status(id);
+    }
+    if ((await status(id)).open) {
+      await sessions.get(id)?.page.bringToFront?.();
+      return status(id);
+    }
+    // Recheck after the asynchronous status read: concurrent requests share it.
+    if (!opening.has(id)) {
+      const pending = launch(id);
+      opening.set(id, pending);
+    }
+    try {
+      await opening.get(id);
+    } finally {
+      opening.delete(id);
+    }
+    return status(id);
+  };
+  const close = async (id) => {
+    providerOf(id);
+    await opening.get(id)?.catch(() => {});
+    const session = sessions.get(id);
+    sessions.delete(id);
+    await session?.close();
+    return status(id);
+  };
+  const capture = async (id) => {
+    providerOf(id);
+    const session = sessions.get(id);
+    if (!session || session.page.isClosed?.()) {
+      throw failure('session-closed');
+    }
+    const before = marketplaceProfileUrl(id, session.page.url());
+    if (!before) {
+      throw failure('needs-profile');
+    }
+    const data = await session.page.evaluate(captureProfilePage);
+    if (
+      marketplaceProfileUrl(id, session.page.url()) !== before ||
+      marketplaceProfileUrl(id, data?.url) !== before
+    ) {
+      throw failure('page-changed');
+    }
+    const profile = cleanMarketplaceProfile(id, data, clock());
+    await store.put({
+      id: marketplaceProfileId(id),
+      kind: 'marketplace-profile',
+      source: id,
+      tokens: ['account', 'marketplace', id],
+      profile,
+    });
+    return status(id);
+  };
+  return {
+    status,
+    open,
+    close,
+    capture,
+    list: () => Promise.all(Object.keys(MARKETPLACES).map(status)),
+    stop: async () => {
+      stopping = true;
+      await Promise.allSettled(
+        [...new Set([...opening.keys(), ...sessions.keys()])].map(close)
+      );
+    },
+  };
+};

package/js/src/server/index.js

@@ -94,6 +94,7 @@ import { handleChatRoutes } from './routes-chat.js';
 import { createClinkReplyStore } from '../replies/reply-store-clink.js';
 import { handleAutoImportRoutes } from './routes-auto-import.js';
 import { handleWhatsAppRoutes } from './routes-whatsapp.js';
+import { handleMarketplaceRoutes } from './routes-marketplaces.js';
 import { profileDirIn } from '../sources/whatsapp-web-signin.js';
 import { handleTelegramRoutes } from './routes-telegram.js';
 import { handleMessageRoutes } from './routes-messages.js';
@@ -628,6 +629,7 @@ const routeOn = async (store, req, res, ctx, url, p) => {
     () => ctx.clientLog?.(req, res, p, ctx) ?? false,
     () => handleAutoImportRoutes(store, req, res, p, ctx),
     () => handleWhatsAppRoutes(store, req, res, p, ctx),
+    () => handleMarketplaceRoutes(store, req, res, p, ctx),
     () => handleArchiveUpload(store, req, res, p, ctx),
     () => handlePullRoutes(store, req, res, p, ctx),
     () => handleTelegramRoutes(req, res, p, ctx),
@@ -960,7 +962,10 @@ export const startServer = async ({
         bus?.close();
         ctx.replies.close().catch(() => {});
         ctx.closeAutomations().catch(() => {});
-        const jobsDone = ctx.stopJobs();
+        const jobsDone = Promise.allSettled([
+          ctx.stopJobs(),
+          ctx.marketplaceSessions?.stop(),
+        ]);
         ctx.chatIndex.close();
         stopAll(telegramAccount, ctx.telegramAccounts, ctx.telegramExtras);
         wsHandle?.close();

package/js/src/server/local-key.js

@@ -11,8 +11,19 @@ import { compileSwiftHelper } from './native-helper.js';
 const SOURCE = fileURLToPath(
   new URL('./local-key-enclave.swift', import.meta.url)
 );
-const failure = (message) =>
-  Object.assign(new Error(message), { code: 'DEVICE_KEY_UNAVAILABLE' });
+const failure = (message, code = 'DEVICE_KEY_UNAVAILABLE') =>
+  Object.assign(new Error(message), { code });
+
+/** OSStatus -25308 is a temporarily inaccessible key, not another device. */
+export const deviceKeyFailure = (stderr) =>
+  /OSStatus error -25308/.test(String(stderr))
+    ? failure(
+        'Unlock this Mac to access its device-protected TLS key.',
+        'DEVICE_KEY_LOCKED'
+      )
+    : failure(
+        'The TLS key cannot be unlocked by this Mac. Unlock the original device; copied keys cannot be used on another computer.'
+      );
 
 /** Compile our small CryptoKit helper locally, once per source revision. */
 const helper = async (storeDir, run) => {
@@ -47,9 +58,7 @@ export const createDeviceKeyProtector = async (
       maxBuffer: 64 * 1024,
     });
     if (result.status !== 0) {
-      throw failure(
-        'The TLS key cannot be unlocked by this Mac. Unlock the original device; copied keys cannot be used on another computer.'
-      );
+      throw deviceKeyFailure(result.stderr);
     }
     return JSON.parse(result.stdout);
   };