terminalhire 0.2.0 → 0.2.2

package/dist/bin/jpi-dispatch.js

@@ -1461,13 +1461,13 @@ async function removeSavedJob(id) {
   return true;
 }
 async function deleteProfile() {
-  const { rmSync: rmSync2 } = await import("fs");
+  const { rmSync: rmSync3 } = await import("fs");
   try {
-    rmSync2(PROFILE_FILE);
+    rmSync3(PROFILE_FILE);
   } catch {
   }
   try {
-    rmSync2(KEY_FILE2);
+    rmSync3(KEY_FILE2);
   } catch {
   }
 }
@@ -1553,11 +1553,11 @@ async function runLogin() {
     if (process.env["TERMINALHIRE_GITHUB_MOCK"] === "1" || process.env["TERMINALHIRE_GITHUB_MOCK"] === "1" || process.env["JPI_GITHUB_MOCK"] === "1") {
       const { createRequire: createRequire2 } = await import("module");
       const { fileURLToPath: fileURLToPath7 } = await import("url");
-      const { join: join13, dirname: dirname3 } = await import("path");
+      const { join: join14, dirname: dirname3 } = await import("path");
       const __dirname6 = fileURLToPath7(new URL(".", import.meta.url));
-      const fixturePath = join13(__dirname6, "../../fixtures/github-sample.json");
-      const { readFileSync: readFileSync12 } = await import("fs");
-      ghProfile = JSON.parse(readFileSync12(fixturePath, "utf8"));
+      const fixturePath = join14(__dirname6, "../../fixtures/github-sample.json");
+      const { readFileSync: readFileSync13 } = await import("fs");
+      ghProfile = JSON.parse(readFileSync13(fixturePath, "utf8"));
     } else {
       ghProfile = await fetchGitHubProfile2(login, token);
     }
@@ -2474,10 +2474,12 @@ function clearSpinnerVerbs() {
   }
   return { cleared: true, keptUserVerbs };
 }
-function buildTips(topMatches, baseUrl, max = 3) {
+function buildTips(topMatches, baseUrl, max = 8) {
   const base = String(baseUrl || "https://terminalhire.com").replace(/\/+$/, "");
   const out = [];
-  const seen = /* @__PURE__ */ new Set();
+  const seenRole = /* @__PURE__ */ new Set();
+  const perCompany = /* @__PURE__ */ new Map();
+  const COMPANY_CAP = 2;
   for (const m of Array.isArray(topMatches) ? topMatches : []) {
     if (!m || !m.title || !m.company || !m.id) continue;
     const idx = String(m.id).indexOf(":");
@@ -2485,14 +2487,20 @@ function buildTips(topMatches, baseUrl, max = 3) {
     const source = String(m.id).slice(0, idx);
     const ext = String(m.id).slice(idx + 1);
     if (!source || !ext) continue;
-    const key = `${source}/${ext}`;
-    if (seen.has(key)) continue;
-    seen.add(key);
-    let title = String(m.title).trim().replace(/\s+/g, " ");
+    const companyRaw = String(m.company).trim().replace(/\s+/g, " ");
+    const titleRaw = String(m.title).trim().replace(/\s+/g, " ");
+    const roleKey = `${titleRaw.toLowerCase()}@${companyRaw.toLowerCase()}`;
+    const coKey = companyRaw.toLowerCase();
+    if (seenRole.has(roleKey)) continue;
+    if ((perCompany.get(coKey) || 0) >= COMPANY_CAP) continue;
+    seenRole.add(roleKey);
+    perCompany.set(coKey, (perCompany.get(coKey) || 0) + 1);
+    let title = titleRaw;
     if (title.length > 34) title = title.slice(0, 33).trimEnd() + "\u2026";
-    const company = titleCase(String(m.company).trim().replace(/\s+/g, " "));
+    const company = titleCase(companyRaw);
     const pct = Math.max(1, Math.min(99, Math.round((Number(m.score) || 0) * 100)));
-    const url = `${base}/j/${source}/${encodeURIComponent(ext)}`;
+    const token = Buffer.from(String(m.id)).toString("base64url");
+    const url = `${base}/j/${token}`;
     out.push(`\u2197 ${title} @ ${company} \xB7 ${pct}% \u2014 ${url}`);
     if (out.length >= max) break;
   }
@@ -2743,19 +2751,292 @@ var init_jpi_spinner = __esm({
   }
 });
 
+// bin/jpi-sync.js
+var jpi_sync_exports = {};
+__export(jpi_sync_exports, {
+  run: () => run7
+});
+import { readFileSync as readFileSync9, writeFileSync as writeFileSync7, mkdirSync as mkdirSync7, existsSync as existsSync7, rmSync as rmSync2 } from "fs";
+import { join as join9 } from "path";
+import { homedir as homedir7 } from "os";
+import { createInterface as createInterface4 } from "readline";
+function ask2(question) {
+  const rl = createInterface4({ input: process.stdin, output: process.stdout });
+  return new Promise((res) => {
+    rl.question(question, (answer) => {
+      rl.close();
+      res(answer.trim().toLowerCase());
+    });
+  });
+}
+function readMarker() {
+  try {
+    return existsSync7(TIER1_MARKER) ? JSON.parse(readFileSync9(TIER1_MARKER, "utf8")) : null;
+  } catch {
+    return null;
+  }
+}
+function writeMarker(marker) {
+  mkdirSync7(TH_DIR3, { recursive: true });
+  writeFileSync7(TIER1_MARKER, JSON.stringify(marker, null, 2) + "\n", "utf8");
+}
+function clearMarker() {
+  try {
+    rmSync2(TIER1_MARKER);
+  } catch {
+  }
+}
+function buildConsentFields(profile) {
+  const gh = profile.github || {};
+  const fields = [
+    { key: "login", label: "GitHub login", value: gh.login },
+    { key: "publicEmail", label: "Public email", value: gh.publicEmail || null },
+    { key: "topLanguages", label: "Top languages", value: gh.topLanguages || [] },
+    { key: "skillTags", label: "Skill tags", value: profile.skillTags || [] }
+  ];
+  if (profile.displayName) {
+    fields.push({ key: "displayName", label: "Display name", value: profile.displayName });
+  }
+  if (profile.contactEmail) {
+    fields.push({ key: "contactEmail", label: "Contact email", value: profile.contactEmail });
+  }
+  return fields;
+}
+function renderConsentCard(fields) {
+  console.log("");
+  console.log("\u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
+  console.log("\u2502   terminalhire \u2014 sync your profile (Tier-1, opt-in)            \u2502");
+  console.log("\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
+  console.log("");
+  console.log("  You are about to send the following data to");
+  console.log("  staqs (terminalhire.com):");
+  console.log("");
+  for (const f of fields) {
+    const shown = Array.isArray(f.value) ? JSON.stringify(f.value) : String(f.value ?? "(not set)");
+    console.log(`    ${f.label.padEnd(16)}: ${shown}`);
+  }
+  console.log("");
+  console.log("  What is NEVER sent:");
+  console.log("    - Private repos, employer repos, raw code");
+  console.log("    - Employer-repo-derived tags (filtered at source)");
+  console.log("    - Session history, file paths, project names");
+  console.log("");
+  console.log("  This is a ONE-TIME snapshot. Nothing is sent automatically;");
+  console.log("  re-run `terminalhire sync --push` to update it later.");
+  console.log("  Delete it any time: terminalhire sync --delete");
+  console.log("");
+  console.log("  This is NOT required to use terminalhire.");
+  console.log("");
+}
+async function runPush() {
+  const { readProfile: readProfile2 } = await Promise.resolve().then(() => (init_profile(), profile_exports));
+  const profile = await readProfile2();
+  if (!profile.github || !profile.github.login) {
+    console.log("");
+    console.log("  No GitHub data in your local profile yet.");
+    console.log("  Run `terminalhire login` first, then re-run `terminalhire sync --push`.");
+    console.log("");
+    process.exit(1);
+  }
+  const fields = buildConsentFields(profile);
+  renderConsentCard(fields);
+  let consentConfirmed = false;
+  const answer = await ask2('  Sync your profile to staqs (terminalhire.com)? Type "yes" to continue: ');
+  if (answer === "yes") {
+    consentConfirmed = true;
+  }
+  if (!consentConfirmed) {
+    console.log("\n  Aborted \u2014 nothing was sent.\n");
+    process.exit(0);
+  }
+  const consentedAt = (/* @__PURE__ */ new Date()).toISOString();
+  const consentToken = {
+    consentedAt,
+    version: CONSENT_VERSION,
+    fields: fields.map((f) => f.key)
+  };
+  const payloadProfile = {
+    login: profile.github.login,
+    name: profile.displayName || null,
+    publicEmail: profile.github.publicEmail || null,
+    topLanguages: profile.github.topLanguages || [],
+    skillTags: profile.skillTags || [],
+    displayName: profile.displayName || null,
+    contactEmail: profile.contactEmail || null
+  };
+  const priorMarker = readMarker();
+  const rowToken = priorMarker && priorMarker.deleteToken ? priorMarker.deleteToken : null;
+  const requestBody = { consentToken, profile: payloadProfile };
+  if (rowToken) {
+    requestBody.rowToken = rowToken;
+  }
+  console.log("\n  Sending one-time snapshot...");
+  let res;
+  try {
+    res = await fetch(`${API_URL2}/api/profile-sync`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(requestBody),
+      signal: AbortSignal.timeout(1e4)
+    });
+  } catch (err) {
+    console.error(`
+  Sync failed: ${err instanceof Error ? err.message : String(err)}`);
+    process.exit(1);
+  }
+  if (!res.ok) {
+    let detail = "";
+    try {
+      detail = (await res.json())?.message || "";
+    } catch {
+    }
+    console.error(`
+  Sync failed: /api/profile-sync returned ${res.status}. ${detail}`);
+    if (res.status === 503) {
+      console.error("  (Tier-1 sync is not enabled on the server yet.)");
+    }
+    if (res.status === 403) {
+      console.error("  (This GitHub login was already claimed by a different push.)");
+    }
+    process.exit(1);
+  }
+  let deleteToken = null;
+  try {
+    deleteToken = (await res.json())?.deleteToken || null;
+  } catch {
+  }
+  writeMarker({ consentedAt, login: profile.github.login, deleteToken });
+  console.log("\n  Profile synced. A local consent marker was written to ~/.terminalhire/tier1.json");
+  console.log("  Delete your synced profile any time: terminalhire sync --delete\n");
+}
+function runStatus() {
+  const marker = readMarker();
+  console.log("");
+  if (marker && marker.consentedAt) {
+    console.log("  Tier-1 sync: CONSENTED (local marker present)");
+    console.log(`    login:       ${marker.login || "(unknown)"}`);
+    console.log(`    consented at: ${marker.consentedAt}`);
+    console.log("");
+    console.log("  This reflects your local marker only (no network call was made).");
+    console.log("  Update: terminalhire sync --push   |   Delete: terminalhire sync --delete");
+  } else {
+    console.log("  Tier-1 sync: NOT CONSENTED (no local marker).");
+    console.log("  Your profile has not been synced. Enable: terminalhire sync --push");
+  }
+  console.log("");
+}
+async function runDelete() {
+  const marker = readMarker();
+  console.log("");
+  console.log("  This will hard-delete your synced profile from staqs (terminalhire.com)");
+  console.log("  and remove the local consent marker. There is no soft-delete.");
+  console.log("");
+  const answer = await ask2('  Delete your synced profile? Type "yes" to confirm: ');
+  if (answer !== "yes") {
+    console.log("\n  Aborted \u2014 nothing was deleted.\n");
+    process.exit(0);
+  }
+  let login = marker && marker.login ? marker.login : null;
+  if (!login) {
+    const { readProfile: readProfile2 } = await Promise.resolve().then(() => (init_profile(), profile_exports));
+    const profile = await readProfile2();
+    login = profile.github && profile.github.login ? profile.github.login : null;
+  }
+  if (!login) {
+    console.log("\n  No github login to delete (no marker, no GitHub profile). Clearing local marker.\n");
+    clearMarker();
+    process.exit(0);
+  }
+  const deleteToken = marker && marker.deleteToken ? marker.deleteToken : null;
+  if (!deleteToken) {
+    console.log("\n  No delete token found in ~/.terminalhire/tier1.json.");
+    console.log("  Deletion must be run from the machine that originally pushed your profile");
+    console.log("  (the delete token is stored there), or re-run `terminalhire sync --push`");
+    console.log("  first to obtain a fresh token, then `terminalhire sync --delete`.\n");
+    process.exit(1);
+  }
+  const consentToken = {
+    consentedAt: marker && marker.consentedAt || (/* @__PURE__ */ new Date()).toISOString(),
+    version: CONSENT_VERSION,
+    fields: ["login"]
+  };
+  console.log("\n  Requesting deletion...");
+  let res;
+  try {
+    res = await fetch(`${API_URL2}/api/profile-sync`, {
+      method: "DELETE",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ consentToken, login, deleteToken }),
+      signal: AbortSignal.timeout(1e4)
+    });
+  } catch (err) {
+    console.error(`
+  Delete failed: ${err instanceof Error ? err.message : String(err)}`);
+    console.error("  Local marker NOT cleared (server state unknown). Re-run to retry.\n");
+    process.exit(1);
+  }
+  if (!res.ok) {
+    console.error(`
+  Delete failed: /api/profile-sync returned ${res.status}.`);
+    if (res.status === 503) {
+      console.error("  (Tier-1 sync is not enabled on the server yet.) Clearing local marker.");
+      clearMarker();
+    }
+    process.exit(1);
+  }
+  clearMarker();
+  console.log("\n  Synced profile deleted and local marker cleared.\n");
+}
+async function run7() {
+  const args2 = process.argv.slice(2).filter((a) => a !== "sync");
+  const has = (f) => args2.includes(f);
+  if (has("--push") || has("--enable")) {
+    await runPush();
+    return;
+  }
+  if (has("--status")) {
+    runStatus();
+    return;
+  }
+  if (has("--delete")) {
+    await runDelete();
+    return;
+  }
+  console.log("");
+  console.log("  terminalhire sync \u2014 opt-in Tier-1 profile sync (one-time snapshot)");
+  console.log("");
+  console.log('  terminalhire sync --push     Send your profile (shows a consent card, requires typed "yes")');
+  console.log("  terminalhire sync --status   Show whether you have consented (local read only)");
+  console.log("  terminalhire sync --delete   Hard-delete your synced profile (revocation)");
+  console.log("");
+  console.log('  Your profile is NEVER sent without an explicit typed "yes".');
+  console.log("  This is NOT required to use terminalhire.");
+  console.log("");
+}
+var TH_DIR3, TIER1_MARKER, API_URL2, CONSENT_VERSION;
+var init_jpi_sync = __esm({
+  "bin/jpi-sync.js"() {
+    "use strict";
+    TH_DIR3 = process.env["TERMINALHIRE_DIR"] || join9(homedir7(), ".terminalhire");
+    TIER1_MARKER = join9(TH_DIR3, "tier1.json");
+    API_URL2 = process.env["TERMINALHIRE_API_URL"] || process.env["JPI_API_URL"] || "https://terminalhire.com";
+    CONSENT_VERSION = 1;
+  }
+});
+
 // bin/jpi-init.js
 var jpi_init_exports = {};
 __export(jpi_init_exports, {
-  run: () => run7
+  run: () => run8
 });
-import { existsSync as existsSync7 } from "fs";
-import { join as join9, resolve } from "path";
+import { existsSync as existsSync8 } from "fs";
+import { join as join10, resolve } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
-import { createInterface as createInterface4 } from "readline";
+import { createInterface as createInterface5 } from "readline";
 import { spawnSync, spawn } from "child_process";
-import { homedir as homedir7 } from "os";
-function ask2(question) {
-  const rl = createInterface4({ input: process.stdin, output: process.stdout });
+import { homedir as homedir8 } from "os";
+function ask3(question) {
+  const rl = createInterface5({ input: process.stdin, output: process.stdout });
   return new Promise((resolve2) => {
     rl.question(question, (answer) => {
       rl.close();
@@ -2764,18 +3045,18 @@ function ask2(question) {
   });
 }
 function resolveScript(name) {
-  const distPath = resolve(join9(__dirname2, "..", "..", "dist", "bin", `${name}.js`));
-  const legacyPath = resolve(join9(__dirname2, `${name}.js`));
-  return existsSync7(distPath) ? distPath : legacyPath;
+  const distPath = resolve(join10(__dirname2, "..", "..", "dist", "bin", `${name}.js`));
+  const legacyPath = resolve(join10(__dirname2, `${name}.js`));
+  return existsSync8(distPath) ? distPath : legacyPath;
 }
 function resolveInstallJs() {
-  const fromDist = resolve(join9(__dirname2, "..", "..", "install.js"));
-  const fromBin = resolve(join9(__dirname2, "..", "install.js"));
-  if (existsSync7(fromDist)) return fromDist;
-  if (existsSync7(fromBin)) return fromBin;
+  const fromDist = resolve(join10(__dirname2, "..", "..", "install.js"));
+  const fromBin = resolve(join10(__dirname2, "..", "install.js"));
+  if (existsSync8(fromDist)) return fromDist;
+  if (existsSync8(fromBin)) return fromBin;
   return fromBin;
 }
-async function run7() {
+async function run8() {
   console.log("");
   console.log("\u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
   console.log("\u2502           terminalhire init \u2014 one-command onboarding            \u2502");
@@ -2797,7 +3078,7 @@ async function run7() {
   console.log("  GitHub data enriches your local profile. Nothing leaves your machine");
   console.log("  until you explicitly consent to a specific lead.");
   console.log("");
-  const githubAnswer = await ask2("Sign in with GitHub now? [Y/n] (Enter = yes, n = stay local): ");
+  const githubAnswer = await ask3("Sign in with GitHub now? [Y/n] (Enter = yes, n = stay local): ");
   const doGitHub = githubAnswer === "" || githubAnswer === "y" || githubAnswer === "yes";
   if (doGitHub) {
     console.log("");
@@ -2878,17 +3159,17 @@ var init_jpi_init = __esm({
 // bin/jpi-refresh.js
 var jpi_refresh_exports = {};
 __export(jpi_refresh_exports, {
-  run: () => run8
+  run: () => run9
 });
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync7, existsSync as existsSync8, mkdirSync as mkdirSync7 } from "fs";
-import { join as join10 } from "path";
-import { homedir as homedir8 } from "os";
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync8, existsSync as existsSync9, mkdirSync as mkdirSync8 } from "fs";
+import { join as join11 } from "path";
+import { homedir as homedir9 } from "os";
 import { fileURLToPath as fileURLToPath4 } from "url";
-async function run8() {
+async function run9() {
   try {
     let index;
     try {
-      const res = await fetch(`${API_URL2}/api/index`, {
+      const res = await fetch(`${API_URL3}/api/index`, {
         signal: AbortSignal.timeout(15e3),
         headers: { "Accept": "application/json" }
       });
@@ -2915,7 +3196,7 @@ async function run8() {
         const fp = profileToFingerprint2(profile);
         const results = match2(fp, jobs, jobs.length);
         matchCount = results.length;
-        topMatches = results.slice(0, 8).map((r) => ({
+        topMatches = results.slice(0, 25).map((r) => ({
           id: r.job.id,
           title: r.job.title,
           company: r.job.company,
@@ -2926,14 +3207,14 @@ async function run8() {
       }
     } catch {
     }
-    mkdirSync7(TERMINALHIRE_DIR5, { recursive: true });
+    mkdirSync8(TERMINALHIRE_DIR5, { recursive: true });
     const cacheEntry = {
       ts: Date.now(),
       index,
       matchCount,
       topMatches
     };
-    writeFileSync7(INDEX_CACHE_FILE2, JSON.stringify(cacheEntry), "utf8");
+    writeFileSync8(INDEX_CACHE_FILE2, JSON.stringify(cacheEntry), "utf8");
     try {
       const {
         readSpinnerConfig: readSpinnerConfig2,
@@ -2960,7 +3241,7 @@ async function run8() {
         const verbs = buildSpinnerPool2(ranked, sc.max, { sessionTags, frequency: sc.frequency });
         if (verbs.length > 0) applySpinnerVerbs2(verbs, sc.mode);
         else clearSpinnerVerbs2();
-        const tips = buildTips2(ranked, API_URL2, 3);
+        const tips = buildTips2(ranked, API_URL3, 8);
         if (tips.length > 0) applySpinnerTips2(tips);
         else clearSpinnerTips2();
       } else {
@@ -2977,30 +3258,30 @@ async function run8() {
     process.exit(1);
   }
 }
-var __dirname3, TERMINALHIRE_DIR5, INDEX_CACHE_FILE2, API_URL2;
+var __dirname3, TERMINALHIRE_DIR5, INDEX_CACHE_FILE2, API_URL3;
 var init_jpi_refresh = __esm({
   "bin/jpi-refresh.js"() {
     "use strict";
     __dirname3 = fileURLToPath4(new URL(".", import.meta.url));
-    TERMINALHIRE_DIR5 = join10(homedir8(), ".terminalhire");
-    INDEX_CACHE_FILE2 = join10(TERMINALHIRE_DIR5, "index-cache.json");
-    API_URL2 = process.env["TERMINALHIRE_API_URL"] ?? process.env["JPI_API_URL"] ?? "https://terminalhire.com";
+    TERMINALHIRE_DIR5 = join11(homedir9(), ".terminalhire");
+    INDEX_CACHE_FILE2 = join11(TERMINALHIRE_DIR5, "index-cache.json");
+    API_URL3 = process.env["TERMINALHIRE_API_URL"] ?? process.env["JPI_API_URL"] ?? "https://terminalhire.com";
   }
 });
 
 // bin/jpi-save.js
 var jpi_save_exports = {};
 __export(jpi_save_exports, {
-  run: () => run9
+  run: () => run10
 });
-import { readFileSync as readFileSync10, existsSync as existsSync9 } from "fs";
-import { join as join11 } from "path";
-import { homedir as homedir9 } from "os";
+import { readFileSync as readFileSync11, existsSync as existsSync10 } from "fs";
+import { join as join12 } from "path";
+import { homedir as homedir10 } from "os";
 import { fileURLToPath as fileURLToPath5 } from "url";
 function findJobInCache(jobId) {
   try {
-    if (!existsSync9(INDEX_CACHE_FILE3)) return null;
-    const raw = readFileSync10(INDEX_CACHE_FILE3, "utf8");
+    if (!existsSync10(INDEX_CACHE_FILE3)) return null;
+    const raw = readFileSync11(INDEX_CACHE_FILE3, "utf8");
     const entry = JSON.parse(raw);
     const jobs = entry?.index?.jobs ?? [];
     return jobs.find((j) => j.id === jobId) ?? null;
@@ -3069,7 +3350,7 @@ async function cmdUnsave(jobId) {
     process.exit(1);
   }
 }
-async function run9() {
+async function run10() {
   const verb = process.argv[2];
   const jobId = process.argv[3];
   try {
@@ -3093,26 +3374,26 @@ var init_jpi_save = __esm({
   "bin/jpi-save.js"() {
     "use strict";
     __dirname4 = fileURLToPath5(new URL(".", import.meta.url));
-    TERMINALHIRE_DIR6 = join11(homedir9(), ".terminalhire");
-    INDEX_CACHE_FILE3 = join11(TERMINALHIRE_DIR6, "index-cache.json");
+    TERMINALHIRE_DIR6 = join12(homedir10(), ".terminalhire");
+    INDEX_CACHE_FILE3 = join12(TERMINALHIRE_DIR6, "index-cache.json");
   }
 });
 
 // bin/jpi-dispatch.js
 import { fileURLToPath as fileURLToPath6 } from "url";
-import { join as join12, dirname as dirname2 } from "path";
-import { existsSync as existsSync10, readFileSync as readFileSync11 } from "fs";
+import { join as join13, dirname as dirname2 } from "path";
+import { existsSync as existsSync11, readFileSync as readFileSync12 } from "fs";
 import { createRequire } from "module";
 var __dirname5 = fileURLToPath6(new URL(".", import.meta.url));
 function readPackageVersion() {
   try {
     const candidates = [
-      join12(__dirname5, "..", "..", "package.json"),
-      join12(__dirname5, "..", "package.json")
+      join13(__dirname5, "..", "..", "package.json"),
+      join13(__dirname5, "..", "package.json")
     ];
     for (const p of candidates) {
-      if (existsSync10(p)) {
-        const pkg = JSON.parse(readFileSync11(p, "utf8"));
+      if (existsSync11(p)) {
+        const pkg = JSON.parse(readFileSync12(p, "utf8"));
         if (pkg.version) return pkg.version;
       }
     }
@@ -3123,7 +3404,7 @@ function readPackageVersion() {
 var firstArg = process.argv[2];
 if (!firstArg && !process.stdin.isTTY) {
   const { default: childProcess } = await import("child_process");
-  const nudgeScript = join12(__dirname5, "jpi.js");
+  const nudgeScript = join13(__dirname5, "jpi.js");
   const child = childProcess.spawnSync(process.execPath, [nudgeScript], {
     stdio: ["inherit", "inherit", "inherit"]
   });
@@ -3154,6 +3435,9 @@ if (!firstArg || firstArg === "help" || firstArg === "--help" || firstArg === "-
   console.log("  terminalhire save <jobId>                   Save a job locally (id shown in `jobs` output)");
   console.log("  terminalhire saved                          List all locally-saved jobs");
   console.log("  terminalhire unsave <jobId>                 Remove a saved job");
+  console.log("  terminalhire sync --push                    Opt-in: send your profile to staqs (typed-yes consent)");
+  console.log("  terminalhire sync --status                  Show whether you have consented (local read only)");
+  console.log("  terminalhire sync --delete                  Hard-delete your synced profile (revocation)");
   console.log("");
   console.log("Install / uninstall the Claude Code statusLine nudge:");
   console.log("  terminalhire init               (preferred \u2014 full guided onboarding)");
@@ -3163,6 +3447,7 @@ if (!firstArg || firstArg === "help" || firstArg === "--help" || firstArg === "-
   console.log("Privacy: your profile never leaves your device.");
   console.log("  GET /api/index   \u2014 anonymous index download (no dev data)");
   console.log("  POST /api/lead   \u2014 only after explicit per-role named-entity consent");
+  console.log("  POST /api/profile-sync \u2014 only via `terminalhire sync --push` with a typed-yes consent token");
   console.log("  GitHub token     \u2014 encrypted at ~/.terminalhire/github-token.enc, scope: read:user");
   console.log("");
   process.exit(0);
@@ -3202,6 +3487,11 @@ if (firstArg === "spinner") {
   await mod.run();
   process.exit(0);
 }
+if (firstArg === "sync") {
+  const mod = await Promise.resolve().then(() => (init_jpi_sync(), jpi_sync_exports));
+  await mod.run();
+  process.exit(0);
+}
 if (firstArg === "init") {
   const mod = await Promise.resolve().then(() => (init_jpi_init(), jpi_init_exports));
   await mod.run();

package/dist/bin/jpi-refresh.js

@@ -1471,10 +1471,12 @@ function clearSpinnerVerbs() {
   }
   return { cleared: true, keptUserVerbs };
 }
-function buildTips(topMatches, baseUrl, max = 3) {
+function buildTips(topMatches, baseUrl, max = 8) {
   const base = String(baseUrl || "https://terminalhire.com").replace(/\/+$/, "");
   const out = [];
-  const seen = /* @__PURE__ */ new Set();
+  const seenRole = /* @__PURE__ */ new Set();
+  const perCompany = /* @__PURE__ */ new Map();
+  const COMPANY_CAP = 2;
   for (const m of Array.isArray(topMatches) ? topMatches : []) {
     if (!m || !m.title || !m.company || !m.id) continue;
     const idx = String(m.id).indexOf(":");
@@ -1482,14 +1484,20 @@ function buildTips(topMatches, baseUrl, max = 3) {
     const source = String(m.id).slice(0, idx);
     const ext = String(m.id).slice(idx + 1);
     if (!source || !ext) continue;
-    const key = `${source}/${ext}`;
-    if (seen.has(key)) continue;
-    seen.add(key);
-    let title = String(m.title).trim().replace(/\s+/g, " ");
+    const companyRaw = String(m.company).trim().replace(/\s+/g, " ");
+    const titleRaw = String(m.title).trim().replace(/\s+/g, " ");
+    const roleKey = `${titleRaw.toLowerCase()}@${companyRaw.toLowerCase()}`;
+    const coKey = companyRaw.toLowerCase();
+    if (seenRole.has(roleKey)) continue;
+    if ((perCompany.get(coKey) || 0) >= COMPANY_CAP) continue;
+    seenRole.add(roleKey);
+    perCompany.set(coKey, (perCompany.get(coKey) || 0) + 1);
+    let title = titleRaw;
     if (title.length > 34) title = title.slice(0, 33).trimEnd() + "\u2026";
-    const company = titleCase(String(m.company).trim().replace(/\s+/g, " "));
+    const company = titleCase(companyRaw);
     const pct = Math.max(1, Math.min(99, Math.round((Number(m.score) || 0) * 100)));
-    const url = `${base}/j/${source}/${encodeURIComponent(ext)}`;
+    const token = Buffer.from(String(m.id)).toString("base64url");
+    const url = `${base}/j/${token}`;
     out.push(`\u2197 ${title} @ ${company} \xB7 ${pct}% \u2014 ${url}`);
     if (out.length >= max) break;
   }
@@ -1822,7 +1830,7 @@ async function run() {
         const fp = profileToFingerprint2(profile);
         const results = match2(fp, jobs, jobs.length);
         matchCount = results.length;
-        topMatches = results.slice(0, 8).map((r) => ({
+        topMatches = results.slice(0, 25).map((r) => ({
           id: r.job.id,
           title: r.job.title,
           company: r.job.company,
@@ -1867,7 +1875,7 @@ async function run() {
         const verbs = buildSpinnerPool2(ranked, sc.max, { sessionTags, frequency: sc.frequency });
         if (verbs.length > 0) applySpinnerVerbs2(verbs, sc.mode);
         else clearSpinnerVerbs2();
-        const tips = buildTips2(ranked, API_URL, 3);
+        const tips = buildTips2(ranked, API_URL, 8);
         if (tips.length > 0) applySpinnerTips2(tips);
         else clearSpinnerTips2();
       } else {