terminalhire 0.1.0

package/install.js

@@ -0,0 +1,275 @@
+#!/usr/bin/env node
+/**
+ * install.js — v3 installer for jpi
+ *
+ * What it does:
+ *   1. Prints a full v3 disclosure (local-first, pull model, named buyer, lead payload)
+ *   2. Requires explicit "yes" before touching any system file
+ *   3. Backs up ~/.claude/settings.json
+ *   4. Merges a statusLine entry pointing to bin/jpi.js (nudge only, no egress)
+ *   5. Registers 'jpi' bin in PATH if npm global bin is writable
+ *   6. Supports --uninstall
+ *   7. Idempotent: safe to run multiple times
+ *
+ * Usage:
+ *   node install.js
+ *   node install.js --uninstall
+ */
+
+import { readFileSync, writeFileSync, copyFileSync, existsSync, mkdirSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { createInterface } from 'node:readline';
+import { spawnSync } from 'node:child_process';
+
+const __dirname = fileURLToPath(new URL('.', import.meta.url));
+// Resolve the nudge bin robustly: prefer the bundled dist output (published package),
+// fall back to the legacy bin/ path for in-workspace / development installs.
+const _distBin = resolve(join(__dirname, 'dist', 'bin', 'jpi.js'));
+const _legacyBin = resolve(join(__dirname, 'bin', 'jpi.js'));
+const BIN_PATH = existsSync(_distBin) ? _distBin : _legacyBin;
+const SETTINGS_PATH = join(homedir(), '.claude', 'settings.json');
+const SETTINGS_DIR = dirname(SETTINGS_PATH);
+const UNINSTALL = process.argv.includes('--uninstall');
+
+// ── Helpers ───────────────────────────────────────────────────────────────────
+
+function readSettings() {
+  if (!existsSync(SETTINGS_PATH)) return {};
+  try {
+    return JSON.parse(readFileSync(SETTINGS_PATH, 'utf8'));
+  } catch {
+    console.error('Error: ~/.claude/settings.json exists but is not valid JSON.');
+    console.error('Please fix it manually before running this installer.');
+    process.exit(1);
+  }
+}
+
+function backupSettings() {
+  if (!existsSync(SETTINGS_PATH)) return;
+  const ts = new Date().toISOString().replace(/[:.]/g, '-');
+  const backupPath = `${SETTINGS_PATH}.terminalhire-backup-${ts}`;
+  copyFileSync(SETTINGS_PATH, backupPath);
+  console.log(`  Backed up settings to: ${backupPath}`);
+}
+
+function writeSettings(settings) {
+  mkdirSync(SETTINGS_DIR, { recursive: true });
+  writeFileSync(SETTINGS_PATH, JSON.stringify(settings, null, 2) + '\n', 'utf8');
+}
+
+function ask(question) {
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  return new Promise(resolve => {
+    rl.question(question, answer => {
+      rl.close();
+      resolve(answer.trim().toLowerCase());
+    });
+  });
+}
+
+function buildStatusLineEntry(binPath) {
+  return `node ${binPath}`;
+}
+
+// ── Install ───────────────────────────────────────────────────────────────────
+
+async function install() {
+  console.log('');
+  console.log('┌─────────────────────────────────────────────────────────────────┐');
+  console.log('│             terminalhire v3.1 — local-first job matching         │');
+  console.log('│          Pull your matches. Your profile stays on-device.       │');
+  console.log('└─────────────────────────────────────────────────────────────────┘');
+  console.log('');
+  console.log('DISCLOSURE — read before installing');
+  console.log('');
+  console.log('HOW IT WORKS (v3 pull model):');
+  console.log('  1. `terminalhire jobs` downloads an anonymous job index from the server');
+  console.log('     (GET /api/index — no dev data in the request).');
+  console.log('  2. Matching runs LOCALLY against an encrypted profile on your device.');
+  console.log('  3. The status bar shows a once-per-session nudge if matches exist.');
+  console.log('     It reads nothing from disk and makes zero network calls.');
+  console.log('');
+  console.log('YOUR LOCAL PROFILE (~/.terminalhire/profile.enc):');
+  console.log('  • Encrypted at rest with AES-256-GCM (Node built-in crypto).');
+  console.log('  • Key stored at ~/.terminalhire/key (0600) or OS keychain if keytar is installed.');
+  console.log('  • Accumulates closed-vocab skill tags from your personal project sessions.');
+  console.log('  • Employer-repo sessions contribute LANGUAGE TAGS ONLY (e.g. "typescript").');
+  console.log('    Fine-grained framework/infra tags are excluded in employer context.');
+  console.log('  • NEVER leaves your machine except in a consented lead payload (see below).');
+  console.log('');
+  console.log('WHAT LEAVES YOUR MACHINE:');
+  console.log('  • GET /api/index — anonymous. No dev data. No cookies.');
+  console.log('  • POST /api/lead — ONLY when you explicitly type "yes" to a named-entity');
+  console.log('    consent prompt for a SPECIFIC role. The prompt names the buyer as');
+  console.log('    "Coastal Recruiting LLC" and shows you the EXACT fields being sent.');
+  console.log('    Install does NOT equal consent. Each lead is a separate decision.');
+  console.log('');
+  console.log('GITHUB (optional — public data only):');
+  console.log('  • Scope: read:user + public repos. NEVER private-repo scopes.');
+  console.log('  • Token encrypted at ~/.terminalhire/github-token.enc (same AES-256-GCM).');
+  console.log('  • GitHub data enriches your LOCAL profile — no data leaves the machine');
+  console.log('    unless you consent to include GitHub fields in a specific terminalhire lead.');
+  console.log('');
+  console.log('LEAD PAYLOAD (what is sent on consent — nothing else):');
+  console.log('  {');
+  console.log('    opportunityId,     // the specific job id you consented for');
+  console.log('    buyerId,           // "coastal"');
+  console.log('    buyerLegalName,    // "Coastal Recruiting LLC"');
+  console.log('    approvedFields: {');
+  console.log('      skillTags,       // your closed-vocab skill tags');
+  console.log('      seniorityBand,   // optional');
+  console.log('      displayName,     // optional, only if you set it in your profile');
+  console.log('      contactEmail,    // optional, only if you set it in your profile');
+  console.log('      note,            // optional, typed at consent time');
+  console.log('      github: {        // optional, ONLY if GitHub connected AND you say "yes"');
+  console.log('        login,         //   your GitHub username');
+  console.log('        profileUrl,    //   https://github.com/<login>');
+  console.log('        topLanguages,  //   top public repo languages');
+  console.log('        publicRepos,   //   public repo count');
+  console.log('      }');
+  console.log('    },');
+  console.log('    consentText,       // verbatim text you approved');
+  console.log('    createdAt          // ISO timestamp');
+  console.log('  }');
+  console.log('');
+  console.log('APPLY-DIRECT vs BUYER-LEAD:');
+  console.log('  Most roles in the index are "apply-direct" — jpi opens the employer URL.');
+  console.log('  NO data is sent for apply-direct roles. Only Coastal-repped roles');
+  console.log('  offer the named-entity consent flow.');
+  console.log('');
+  console.log('HOW TO DISABLE / DELETE:');
+  console.log('  • Uninstall statusLine:  node install.js --uninstall');
+  console.log('  • Delete local profile:  terminalhire profile --delete');
+  console.log('  • Clear GitHub token:    terminalhire logout');
+  console.log('  • Wipe everything:       rm -rf ~/.terminalhire');
+  console.log('');
+
+  const installAnswer = await ask('Install terminalhire v3.1? Type "yes" to continue: ');
+  if (installAnswer !== 'yes') {
+    console.log('\nAborted — nothing was changed.');
+    process.exit(0);
+  }
+
+  console.log('');
+  const settings = readSettings();
+
+  if (settings.statusLine === buildStatusLineEntry(BIN_PATH)) {
+    console.log('Already installed.');
+  } else {
+    if (settings.statusLine) {
+      console.log(`  Note: replacing existing statusLine: ${settings.statusLine}`);
+    }
+    backupSettings();
+    settings.statusLine = buildStatusLineEntry(BIN_PATH);
+    writeSettings(settings);
+    console.log('  Written statusLine to ~/.claude/settings.json');
+  }
+
+  // ── GitHub onboarding step ─────────────────────────────────────────────────
+  console.log('');
+  console.log('┌─────────────────────────────────────────────────────────────────┐');
+  console.log('│  RECOMMENDED: Sign in with GitHub for instant, accurate matches │');
+  console.log('│                                                                  │');
+  console.log('│  terminalhire uses your PUBLIC GitHub profile (scope: read:user) to:│');
+  console.log('│   • Infer skill tags from public repo languages + topics         │');
+  console.log('│   • Estimate seniority from account age + contribution volume    │');
+  console.log('│   • Pre-fill identity fields (name, public email if set)         │');
+  console.log('│                                                                  │');
+  console.log('│  Your token is encrypted locally. No data leaves your machine   │');
+  console.log('│  until you explicitly consent to share it in a specific lead.   │');
+  console.log('│  Scope: read:user — public repos only. NEVER private repos.     │');
+  console.log('└─────────────────────────────────────────────────────────────────┘');
+  console.log('');
+
+  const githubAnswer = await ask(
+    'Sign in with GitHub now? [Y/n/skip] (Enter = yes, "skip" or "n" = stay local): '
+  );
+  const doGitHub = githubAnswer === '' || githubAnswer === 'y' || githubAnswer === 'yes';
+
+  if (doGitHub) {
+    console.log('');
+    console.log('  Starting GitHub device flow...');
+    const _loginDistPath = resolve(join(__dirname, 'dist', 'bin', 'jpi-login.js'));
+    const _loginLegacyPath = resolve(join(__dirname, 'bin', 'jpi-login.js'));
+    const loginScript = existsSync(_loginDistPath) ? _loginDistPath : _loginLegacyPath;
+    const child = spawnSync(process.execPath, [loginScript, 'login'], {
+      stdio: ['inherit', 'inherit', 'inherit'],
+      env: process.env,
+    });
+    if (child.status !== 0) {
+      console.log('');
+      console.log('  GitHub sign-in did not complete. You can run `terminalhire login` any time.');
+    }
+  } else {
+    console.log('');
+    console.log('  Staying local-only. You can sign in any time with: terminalhire login');
+    console.log('  Your profile will still accumulate tags from personal project sessions.');
+  }
+
+  console.log('');
+  console.log('Done. Restart Claude Code to activate the status bar nudge.');
+  console.log('');
+  console.log('  Status bar format (once per session, only when matches exist):');
+  console.log('    ✦ N roles match your current work — run: terminalhire jobs');
+  console.log('');
+  console.log('  Commands:');
+  console.log('    terminalhire login            — sign in with GitHub (enriches profile instantly)');
+  console.log('    terminalhire logout           — clear GitHub token');
+  console.log('    terminalhire jobs             — fetch index, match locally, browse roles');
+  console.log('    terminalhire profile --show   — inspect your encrypted profile');
+  console.log('    terminalhire profile --edit   — set displayName, contactEmail, prefs');
+  console.log('    terminalhire profile --delete — wipe profile and key');
+  console.log('');
+}
+
+// ── Uninstall ─────────────────────────────────────────────────────────────────
+
+async function uninstall() {
+  console.log('');
+  console.log('terminalhire uninstall');
+  console.log('');
+
+  const settings = readSettings();
+
+  if (!settings.statusLine) {
+    console.log('No statusLine entry found — nothing to remove.');
+    process.exit(0);
+  }
+
+  console.log(`  Current statusLine: ${settings.statusLine}`);
+  const answer = await ask('Remove this entry? Type "yes" to continue: ');
+  if (answer !== 'yes') {
+    console.log('\nAborted — nothing was changed.');
+    process.exit(0);
+  }
+
+  console.log('');
+  backupSettings();
+  delete settings.statusLine;
+  writeSettings(settings);
+
+  console.log('  Removed statusLine from ~/.claude/settings.json');
+  console.log('');
+  console.log('  Your profile is untouched. To also delete it:');
+  console.log('    terminalhire profile --delete');
+  console.log('    rm -rf ~/.terminalhire');
+  console.log('');
+  console.log('Done.');
+  console.log('');
+}
+
+// ── Entry ─────────────────────────────────────────────────────────────────────
+
+if (UNINSTALL) {
+  uninstall().catch(err => {
+    console.error('Uninstall error:', err.message);
+    process.exit(1);
+  });
+} else {
+  install().catch(err => {
+    console.error('Install error:', err.message);
+    process.exit(1);
+  });
+}

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "terminalhire",
+  "version": "0.1.0",
+  "description": "Local-first job matching for developers — Claude Code statusLine integration",
+  "type": "module",
+  "engines": {
+    "node": ">=18"
+  },
+  "bin": {
+    "terminalhire": "./dist/bin/jpi-dispatch.js",
+    "th": "./dist/bin/jpi-dispatch.js"
+  },
+  "files": [
+    "dist",
+    "fixtures",
+    "install.js",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "prepublishOnly": "npm run build",
+    "install-hook": "node install.js"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "terminalhire",
+    "jobs",
+    "developer",
+    "claude",
+    "claude-code",
+    "job-matching",
+    "local-first"
+  ],
+  "author": "staqs",
+  "license": "MIT",
+  "devDependencies": {
+    "tsup": "^8.5.1",
+    "@types/node": "^20.12.0",
+    "typescript": "^5.4.5"
+  }
+}