terminalhire 0.2.4 → 0.2.5

package/dist/bin/jpi-dispatch.js

@@ -2959,8 +2959,9 @@ __export(jpi_sync_exports, {
 });
 import { readFileSync as readFileSync9, writeFileSync as writeFileSync7, mkdirSync as mkdirSync7, existsSync as existsSync7, rmSync as rmSync2 } from "fs";
 import { join as join9 } from "path";
-import { homedir as homedir7 } from "os";
+import { homedir as homedir7, hostname as osHostname } from "os";
 import { createInterface as createInterface4 } from "readline";
+import { spawn } from "child_process";
 function ask2(question) {
   const rl = createInterface4({ input: process.stdin, output: process.stdout });
   return new Promise((res) => {
@@ -3003,14 +3004,14 @@ function buildConsentFields(profile) {
   }
   return fields;
 }
-function renderConsentCard(fields) {
+function renderPreview(fields) {
   console.log("");
   console.log("\u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
   console.log("\u2502   terminalhire \u2014 sync your profile (Tier-1, opt-in)            \u2502");
   console.log("\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
   console.log("");
-  console.log("  You are about to send the following data to");
-  console.log("  staqs (terminalhire.com):");
+  console.log("  The following data will be shared with staqs (terminalhire.com)");
+  console.log("  AFTER you authorize + consent in the browser:");
   console.log("");
   for (const f of fields) {
     const shown = Array.isArray(f.value) ? JSON.stringify(f.value) : String(f.value ?? "(not set)");
@@ -3029,6 +3030,30 @@ function renderConsentCard(fields) {
   console.log("  This is NOT required to use terminalhire.");
   console.log("");
 }
+function openInBrowser(url) {
+  let cmd;
+  let args2;
+  if (process.platform === "darwin") {
+    cmd = "open";
+    args2 = [url];
+  } else if (process.platform === "win32") {
+    cmd = "cmd";
+    args2 = ["/c", "start", "", url];
+  } else {
+    cmd = "xdg-open";
+    args2 = [url];
+  }
+  try {
+    const child = spawn(cmd, args2, { stdio: "ignore", detached: true });
+    child.on("error", () => {
+    });
+    child.unref();
+  } catch {
+  }
+}
+function sleep2(ms) {
+  return new Promise((res) => setTimeout(res, ms));
+}
 async function runPush() {
   const { readProfile: readProfile2 } = await Promise.resolve().then(() => (init_profile(), profile_exports));
   const profile = await readProfile2();
@@ -3040,15 +3065,91 @@ async function runPush() {
     process.exit(1);
   }
   const fields = buildConsentFields(profile);
-  renderConsentCard(fields);
-  let consentConfirmed = false;
-  const answer = await ask2('  Sync your profile to staqs (terminalhire.com)? Type "yes" to continue: ');
-  if (answer === "yes") {
-    consentConfirmed = true;
-  }
-  if (!consentConfirmed) {
-    console.log("\n  Aborted \u2014 nothing was sent.\n");
-    process.exit(0);
+  renderPreview(fields);
+  await new Promise((resolve2) => {
+    const rl = createInterface4({ input: process.stdin, output: process.stdout });
+    rl.question(
+      "  Press Enter to open your browser to authorize + consent (or Ctrl-C to cancel)... ",
+      () => {
+        rl.close();
+        resolve2();
+      }
+    );
+  });
+  console.log("");
+  console.log("  Starting browser verification...");
+  let begin;
+  try {
+    const r = await fetch(`${SYNC_BASE}/api/profile-sync/begin`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ hostname: osHostname() }),
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!r.ok) {
+      let detail = "";
+      try {
+        detail = (await r.json())?.message || "";
+      } catch {
+      }
+      console.error(`
+  Could not start sync: /api/profile-sync/begin returned ${r.status}. ${detail}`);
+      if (r.status === 503) console.error("  (Tier-1 sync is not enabled on the server yet.)");
+      process.exit(1);
+    }
+    begin = await r.json();
+  } catch (err) {
+    console.error(`
+  Could not start sync: ${err instanceof Error ? err.message : String(err)}`);
+    process.exit(1);
+  }
+  const { challenge, verifyUrl } = begin || {};
+  if (!challenge || !verifyUrl) {
+    console.error("\n  Could not start sync: malformed begin response.");
+    process.exit(1);
+  }
+  console.log("");
+  console.log("  Open this URL in your browser to authorize + consent:");
+  console.log(`    ${verifyUrl}`);
+  console.log("");
+  console.log("  (Attempting to open it automatically...)");
+  openInBrowser(verifyUrl);
+  console.log("  Waiting for browser verification...");
+  const deadline = Date.now() + POLL_TIMEOUT_MS;
+  let proofToken = null;
+  while (Date.now() < deadline) {
+    await sleep2(POLL_INTERVAL_MS);
+    let statusRes;
+    try {
+      statusRes = await fetch(
+        `${SYNC_BASE}/api/profile-sync/status?challenge=${encodeURIComponent(challenge)}`,
+        { signal: AbortSignal.timeout(1e4) }
+      );
+    } catch {
+      continue;
+    }
+    if (!statusRes.ok) {
+      if (statusRes.status === 503) {
+        console.error("\n  Tier-1 sync is not enabled on the server yet.\n");
+        process.exit(1);
+      }
+      continue;
+    }
+    let body;
+    try {
+      body = await statusRes.json();
+    } catch {
+      continue;
+    }
+    if (body && body.status === "verified" && body.proofToken) {
+      proofToken = body.proofToken;
+      break;
+    }
+  }
+  if (!proofToken) {
+    console.error("\n  Timed out waiting for browser verification (10 min).");
+    console.error("  Re-run `terminalhire sync --push` to try again.\n");
+    process.exit(1);
   }
   const consentedAt = (/* @__PURE__ */ new Date()).toISOString();
   const consentToken = {
@@ -3067,14 +3168,14 @@ async function runPush() {
   };
   const priorMarker = readMarker();
   const rowToken = priorMarker && priorMarker.deleteToken ? priorMarker.deleteToken : null;
-  const requestBody = { consentToken, profile: payloadProfile };
+  const requestBody = { consentToken, profile: payloadProfile, proofToken };
   if (rowToken) {
     requestBody.rowToken = rowToken;
   }
-  console.log("\n  Sending one-time snapshot...");
+  console.log("\n  Verified. Sending one-time snapshot...");
   let res;
   try {
-    res = await fetch(`${API_URL2}/api/profile-sync`, {
+    res = await fetch(`${SYNC_BASE}/api/profile-sync`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(requestBody),
@@ -3097,7 +3198,7 @@ async function runPush() {
       console.error("  (Tier-1 sync is not enabled on the server yet.)");
     }
     if (res.status === 403) {
-      console.error("  (This GitHub login was already claimed by a different push.)");
+      console.error("  (Ownership proof rejected, expired, or already used \u2014 re-run sync --push.)");
     }
     process.exit(1);
   }
@@ -3214,13 +3315,16 @@ async function run7() {
   console.log("  This is NOT required to use terminalhire.");
   console.log("");
 }
-var TH_DIR3, TIER1_MARKER, API_URL2, CONSENT_VERSION;
+var TH_DIR3, TIER1_MARKER, API_URL2, SYNC_BASE, POLL_INTERVAL_MS, POLL_TIMEOUT_MS, CONSENT_VERSION;
 var init_jpi_sync = __esm({
   "bin/jpi-sync.js"() {
     "use strict";
     TH_DIR3 = process.env["TERMINALHIRE_DIR"] || join9(homedir7(), ".terminalhire");
     TIER1_MARKER = join9(TH_DIR3, "tier1.json");
     API_URL2 = process.env["TERMINALHIRE_API_URL"] || process.env["JPI_API_URL"] || "https://terminalhire.com";
+    SYNC_BASE = "https://www.terminalhire.com";
+    POLL_INTERVAL_MS = 2e3;
+    POLL_TIMEOUT_MS = 10 * 60 * 1e3;
     CONSENT_VERSION = 1;
   }
 });
@@ -3234,7 +3338,7 @@ import { existsSync as existsSync8 } from "fs";
 import { join as join10, resolve } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import { createInterface as createInterface5 } from "readline";
-import { spawnSync, spawn } from "child_process";
+import { spawnSync, spawn as spawn2 } from "child_process";
 import { homedir as homedir8 } from "os";
 function ask3(question) {
   const rl = createInterface5({ input: process.stdin, output: process.stdout });

package/dist/bin/jpi-sync.js

@@ -691,11 +691,15 @@ var init_profile = __esm({
 // bin/jpi-sync.js
 import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2, existsSync as existsSync2, rmSync } from "fs";
 import { join as join3 } from "path";
-import { homedir as homedir2 } from "os";
+import { homedir as homedir2, hostname as osHostname } from "os";
 import { createInterface } from "readline";
+import { spawn } from "child_process";
 var TH_DIR = process.env["TERMINALHIRE_DIR"] || join3(homedir2(), ".terminalhire");
 var TIER1_MARKER = join3(TH_DIR, "tier1.json");
 var API_URL = process.env["TERMINALHIRE_API_URL"] || process.env["JPI_API_URL"] || "https://terminalhire.com";
+var SYNC_BASE = "https://www.terminalhire.com";
+var POLL_INTERVAL_MS = 2e3;
+var POLL_TIMEOUT_MS = 10 * 60 * 1e3;
 var CONSENT_VERSION = 1;
 function ask(question) {
   const rl = createInterface({ input: process.stdin, output: process.stdout });
@@ -739,14 +743,14 @@ function buildConsentFields(profile) {
   }
   return fields;
 }
-function renderConsentCard(fields) {
+function renderPreview(fields) {
   console.log("");
   console.log("\u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
   console.log("\u2502   terminalhire \u2014 sync your profile (Tier-1, opt-in)            \u2502");
   console.log("\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
   console.log("");
-  console.log("  You are about to send the following data to");
-  console.log("  staqs (terminalhire.com):");
+  console.log("  The following data will be shared with staqs (terminalhire.com)");
+  console.log("  AFTER you authorize + consent in the browser:");
   console.log("");
   for (const f of fields) {
     const shown = Array.isArray(f.value) ? JSON.stringify(f.value) : String(f.value ?? "(not set)");
@@ -765,6 +769,30 @@ function renderConsentCard(fields) {
   console.log("  This is NOT required to use terminalhire.");
   console.log("");
 }
+function openInBrowser(url) {
+  let cmd;
+  let args;
+  if (process.platform === "darwin") {
+    cmd = "open";
+    args = [url];
+  } else if (process.platform === "win32") {
+    cmd = "cmd";
+    args = ["/c", "start", "", url];
+  } else {
+    cmd = "xdg-open";
+    args = [url];
+  }
+  try {
+    const child = spawn(cmd, args, { stdio: "ignore", detached: true });
+    child.on("error", () => {
+    });
+    child.unref();
+  } catch {
+  }
+}
+function sleep(ms) {
+  return new Promise((res) => setTimeout(res, ms));
+}
 async function runPush() {
   const { readProfile: readProfile2 } = await Promise.resolve().then(() => (init_profile(), profile_exports));
   const profile = await readProfile2();
@@ -776,15 +804,91 @@ async function runPush() {
     process.exit(1);
   }
   const fields = buildConsentFields(profile);
-  renderConsentCard(fields);
-  let consentConfirmed = false;
-  const answer = await ask('  Sync your profile to staqs (terminalhire.com)? Type "yes" to continue: ');
-  if (answer === "yes") {
-    consentConfirmed = true;
-  }
-  if (!consentConfirmed) {
-    console.log("\n  Aborted \u2014 nothing was sent.\n");
-    process.exit(0);
+  renderPreview(fields);
+  await new Promise((resolve) => {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    rl.question(
+      "  Press Enter to open your browser to authorize + consent (or Ctrl-C to cancel)... ",
+      () => {
+        rl.close();
+        resolve();
+      }
+    );
+  });
+  console.log("");
+  console.log("  Starting browser verification...");
+  let begin;
+  try {
+    const r = await fetch(`${SYNC_BASE}/api/profile-sync/begin`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ hostname: osHostname() }),
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!r.ok) {
+      let detail = "";
+      try {
+        detail = (await r.json())?.message || "";
+      } catch {
+      }
+      console.error(`
+  Could not start sync: /api/profile-sync/begin returned ${r.status}. ${detail}`);
+      if (r.status === 503) console.error("  (Tier-1 sync is not enabled on the server yet.)");
+      process.exit(1);
+    }
+    begin = await r.json();
+  } catch (err) {
+    console.error(`
+  Could not start sync: ${err instanceof Error ? err.message : String(err)}`);
+    process.exit(1);
+  }
+  const { challenge, verifyUrl } = begin || {};
+  if (!challenge || !verifyUrl) {
+    console.error("\n  Could not start sync: malformed begin response.");
+    process.exit(1);
+  }
+  console.log("");
+  console.log("  Open this URL in your browser to authorize + consent:");
+  console.log(`    ${verifyUrl}`);
+  console.log("");
+  console.log("  (Attempting to open it automatically...)");
+  openInBrowser(verifyUrl);
+  console.log("  Waiting for browser verification...");
+  const deadline = Date.now() + POLL_TIMEOUT_MS;
+  let proofToken = null;
+  while (Date.now() < deadline) {
+    await sleep(POLL_INTERVAL_MS);
+    let statusRes;
+    try {
+      statusRes = await fetch(
+        `${SYNC_BASE}/api/profile-sync/status?challenge=${encodeURIComponent(challenge)}`,
+        { signal: AbortSignal.timeout(1e4) }
+      );
+    } catch {
+      continue;
+    }
+    if (!statusRes.ok) {
+      if (statusRes.status === 503) {
+        console.error("\n  Tier-1 sync is not enabled on the server yet.\n");
+        process.exit(1);
+      }
+      continue;
+    }
+    let body;
+    try {
+      body = await statusRes.json();
+    } catch {
+      continue;
+    }
+    if (body && body.status === "verified" && body.proofToken) {
+      proofToken = body.proofToken;
+      break;
+    }
+  }
+  if (!proofToken) {
+    console.error("\n  Timed out waiting for browser verification (10 min).");
+    console.error("  Re-run `terminalhire sync --push` to try again.\n");
+    process.exit(1);
   }
   const consentedAt = (/* @__PURE__ */ new Date()).toISOString();
   const consentToken = {
@@ -803,14 +907,14 @@ async function runPush() {
   };
   const priorMarker = readMarker();
   const rowToken = priorMarker && priorMarker.deleteToken ? priorMarker.deleteToken : null;
-  const requestBody = { consentToken, profile: payloadProfile };
+  const requestBody = { consentToken, profile: payloadProfile, proofToken };
   if (rowToken) {
     requestBody.rowToken = rowToken;
   }
-  console.log("\n  Sending one-time snapshot...");
+  console.log("\n  Verified. Sending one-time snapshot...");
   let res;
   try {
-    res = await fetch(`${API_URL}/api/profile-sync`, {
+    res = await fetch(`${SYNC_BASE}/api/profile-sync`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(requestBody),
@@ -833,7 +937,7 @@ async function runPush() {
       console.error("  (Tier-1 sync is not enabled on the server yet.)");
     }
     if (res.status === 403) {
-      console.error("  (This GitHub login was already claimed by a different push.)");
+      console.error("  (Ownership proof rejected, expired, or already used \u2014 re-run sync --push.)");
     }
     process.exit(1);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "terminalhire",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "description": "Local-first job matching for developers — ambient job matches in the Claude Code spinner. Matching runs on your machine; your profile never leaves it.",
   "repository": {
     "type": "git",