terminalhire 0.2.4 → 0.3.0

package/dist/bin/jpi-dispatch.js

@@ -101,7 +101,7 @@ async function runDeviceFlow() {
     await writeGitHubToken(MOCK_TOKEN);
     return MOCK_LOGIN;
   }
-  const clientId = process.env["GITHUB_DEVICE_CLIENT_ID"] ?? process.env["GITHUB_CLIENT_ID"] ?? DEV_PLACEHOLDER_CLIENT_ID;
+  const clientId = process.env["GITHUB_DEVICE_CLIENT_ID"] ?? process.env["GITHUB_CLIENT_ID"] ?? BAKED_IN_CLIENT_ID;
   if (clientId === "Iv1.PLACEHOLDER_REGISTER_YOUR_APP") {
     console.warn("\nWarning: GITHUB_CLIENT_ID env var looks like a placeholder.");
     console.warn("Remove it to use the baked-in client ID, or set it to your own OAuth App Client ID.\n");
@@ -124,7 +124,7 @@ async function runDeviceFlow() {
   console.log("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
   console.log(`  1. Open: ${deviceData.verification_uri}`);
   console.log(`  2. Enter code: ${deviceData.user_code}`);
-  console.log('  3. Authorize "jpi" (scope: read:user \u2014 public data only)');
+  console.log('  3. Authorize "Terminalhire" (scope: read:user \u2014 public data only)');
   console.log("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
   console.log("  Waiting for authorization...");
   console.log("");
@@ -204,7 +204,7 @@ async function resolveStoredLogin() {
 function sleep(ms) {
   return new Promise((resolve2) => setTimeout(resolve2, ms));
 }
-var TERMINALHIRE_DIR, TOKEN_FILE, KEY_FILE, ALGO, KEY_BYTES, IV_BYTES, GITHUB_SCOPE, DEVICE_CODE_URL, ACCESS_TOKEN_URL, DEV_PLACEHOLDER_CLIENT_ID, MOCK_TOKEN, MOCK_LOGIN;
+var TERMINALHIRE_DIR, TOKEN_FILE, KEY_FILE, ALGO, KEY_BYTES, IV_BYTES, GITHUB_SCOPE, DEVICE_CODE_URL, ACCESS_TOKEN_URL, BAKED_IN_CLIENT_ID, MOCK_TOKEN, MOCK_LOGIN;
 var init_github_auth = __esm({
   "src/github-auth.ts"() {
     "use strict";
@@ -217,234 +217,376 @@ var init_github_auth = __esm({
     GITHUB_SCOPE = "read:user";
     DEVICE_CODE_URL = "https://github.com/login/device/code";
     ACCESS_TOKEN_URL = "https://github.com/login/oauth/access_token";
-    DEV_PLACEHOLDER_CLIENT_ID = "Ov23lignE2ZSBe0J3a6B";
+    BAKED_IN_CLIENT_ID = "Ov23lignE2ZSBe0J3a6B";
     MOCK_TOKEN = "mock-github-token-jpi-dev";
     MOCK_LOGIN = "janedev";
   }
 });
 
 // ../../packages/core/src/types.ts
+function isBounty(job) {
+  return job.source === "bounty" && job.bounty != null;
+}
 var init_types = __esm({
   "../../packages/core/src/types.ts"() {
     "use strict";
   }
 });
 
-// ../../packages/core/src/vocabulary.ts
+// ../../packages/core/src/vocab/graph.data.ts
+var VOCAB_NODES;
+var init_graph_data = __esm({
+  "../../packages/core/src/vocab/graph.data.ts"() {
+    "use strict";
+    VOCAB_NODES = [
+      // ── Languages ─────────────────────────────────────────────────────────────
+      { id: "javascript", synonyms: ["js"], related: [{ to: "typescript", w: 0.6 }] },
+      { id: "typescript", parents: ["javascript"], synonyms: ["ts"] },
+      { id: "python", synonyms: ["py"] },
+      { id: "go", synonyms: ["golang"] },
+      { id: "rust" },
+      { id: "java", related: [{ to: "kotlin", w: 0.45 }, { to: "scala", w: 0.4 }] },
+      { id: "ruby" },
+      { id: "elixir" },
+      { id: "scala", related: [{ to: "java", w: 0.4 }] },
+      { id: "kotlin", related: [{ to: "java", w: 0.45 }] },
+      { id: "swift" },
+      { id: "cpp", synonyms: ["c++"] },
+      { id: "csharp", synonyms: ["c#"] },
+      { id: "php" },
+      { id: "haskell" },
+      { id: "clojure" },
+      { id: "r" },
+      { id: "dart" },
+      // ── Frontend ──────────────────────────────────────────────────────────────
+      {
+        id: "react",
+        parents: ["javascript"],
+        synonyms: ["reactjs"],
+        related: [{ to: "nextjs", w: 0.55 }, { to: "vue", w: 0.4 }, { to: "svelte", w: 0.4 }, { to: "solidjs", w: 0.5 }, { to: "angular", w: 0.35 }]
+      },
+      { id: "nextjs", parents: ["react"], synonyms: ["next", "next.js"], related: [{ to: "remix", w: 0.5 }] },
+      { id: "vue", parents: ["javascript"], synonyms: ["vue.js"], related: [{ to: "nuxt", w: 0.6 }] },
+      { id: "nuxt", parents: ["vue"], synonyms: ["nuxt.js"] },
+      { id: "svelte", parents: ["javascript"], related: [{ to: "sveltekit", w: 0.65 }] },
+      { id: "sveltekit", parents: ["svelte"] },
+      { id: "angular", parents: ["typescript"], synonyms: ["angular.js", "angularjs"] },
+      { id: "solidjs", parents: ["javascript"] },
+      { id: "remix", parents: ["react"], synonyms: ["remix.run"] },
+      { id: "astro", parents: ["javascript"], related: [{ to: "nextjs", w: 0.4 }] },
+      { id: "qwik", parents: ["javascript"] },
+      { id: "tailwind", parents: ["css"], synonyms: ["tailwindcss", "tw"] },
+      { id: "css" },
+      { id: "html" },
+      { id: "redux", parents: ["react"] },
+      { id: "vite", parents: ["frontend"] },
+      { id: "webpack", parents: ["frontend"] },
+      { id: "storybook", parents: ["frontend"] },
+      // ── Backend frameworks / runtimes ───────────────────────────────────────────
+      {
+        id: "nodejs",
+        parents: ["javascript"],
+        synonyms: ["node", "node.js"],
+        related: [{ to: "express", w: 0.5 }, { to: "fastify", w: 0.45 }, { to: "nestjs", w: 0.45 }]
+      },
+      { id: "express", parents: ["nodejs"], synonyms: ["express.js", "expressjs"], related: [{ to: "fastify", w: 0.5 }] },
+      { id: "fastify", parents: ["nodejs"] },
+      { id: "nestjs", parents: ["nodejs"], synonyms: ["nest", "nest.js"] },
+      { id: "hono", parents: ["nodejs"] },
+      { id: "deno", parents: ["javascript"], related: [{ to: "nodejs", w: 0.5 }, { to: "bun", w: 0.5 }] },
+      { id: "bun", parents: ["javascript"], related: [{ to: "nodejs", w: 0.5 }] },
+      { id: "django", parents: ["python"], related: [{ to: "flask", w: 0.5 }, { to: "fastapi", w: 0.45 }] },
+      { id: "fastapi", parents: ["python"], related: [{ to: "flask", w: 0.55 }, { to: "django", w: 0.45 }] },
+      { id: "flask", parents: ["python"] },
+      { id: "rails", parents: ["ruby"], synonyms: ["ruby-on-rails", "ror"] },
+      { id: "spring", parents: ["java"], synonyms: ["spring-boot", "springboot"] },
+      { id: "actix", parents: ["rust"] },
+      { id: "gin", parents: ["go"] },
+      { id: "phoenix", parents: ["elixir"] },
+      { id: "laravel", parents: ["php"] },
+      { id: "dotnet", parents: ["csharp"], synonyms: [".net", "asp.net", "dotnet-core"] },
+      // ── Infrastructure & DevOps ─────────────────────────────────────────────────
+      { id: "kubernetes", synonyms: ["k8s", "kube"], related: [{ to: "docker", w: 0.5 }, { to: "helm", w: 0.55 }, { to: "terraform", w: 0.4 }, { to: "argocd", w: 0.45 }] },
+      { id: "docker", parents: ["devops"], related: [{ to: "kubernetes", w: 0.5 }] },
+      { id: "terraform", synonyms: ["tf"], related: [{ to: "pulumi", w: 0.55 }, { to: "ansible", w: 0.4 }, { to: "aws", w: 0.4 }] },
+      { id: "pulumi", related: [{ to: "terraform", w: 0.55 }] },
+      { id: "ansible" },
+      { id: "aws", synonyms: ["amazon-web-services"], related: [{ to: "gcp", w: 0.4 }, { to: "azure", w: 0.4 }] },
+      { id: "gcp", synonyms: ["google-cloud", "google-cloud-platform"], related: [{ to: "aws", w: 0.4 }, { to: "azure", w: 0.4 }] },
+      { id: "azure", synonyms: ["microsoft-azure"], related: [{ to: "aws", w: 0.4 }] },
+      { id: "ci-cd", synonyms: ["cicd", "jenkins", "circleci", "circle-ci", "travis"], related: [{ to: "github-actions", w: 0.6 }, { to: "gitlab-ci", w: 0.6 }] },
+      { id: "github-actions", parents: ["ci-cd"], synonyms: ["github-action"] },
+      { id: "gitlab-ci", parents: ["ci-cd"], synonyms: ["gitlab"] },
+      { id: "linux" },
+      { id: "nginx" },
+      { id: "prometheus", parents: ["observability"], related: [{ to: "grafana", w: 0.6 }] },
+      { id: "grafana", parents: ["observability"] },
+      { id: "datadog", parents: ["observability"] },
+      { id: "opentelemetry", parents: ["observability"], synonyms: ["otel"] },
+      { id: "vercel", related: [{ to: "netlify", w: 0.5 }, { to: "nextjs", w: 0.4 }] },
+      { id: "netlify" },
+      { id: "fly", synonyms: ["fly.io"], related: [{ to: "railway", w: 0.5 }, { to: "render", w: 0.5 }] },
+      { id: "railway", related: [{ to: "render", w: 0.5 }] },
+      { id: "render" },
+      { id: "cloudflare", synonyms: ["cloudflare-workers"] },
+      { id: "helm", parents: ["kubernetes"] },
+      { id: "argocd", parents: ["kubernetes"] },
+      { id: "serverless", parents: ["devops"] },
+      // ── Databases & storage ─────────────────────────────────────────────────────
+      { id: "postgresql", synonyms: ["postgres", "pg"], related: [{ to: "mysql", w: 0.45 }, { to: "sqlite", w: 0.4 }] },
+      { id: "mysql", related: [{ to: "postgresql", w: 0.45 }] },
+      { id: "sqlite" },
+      { id: "mongodb", synonyms: ["mongo"] },
+      { id: "redis", related: [{ to: "caching", w: 0.5 }] },
+      { id: "elasticsearch", synonyms: ["elastic"], related: [{ to: "search", w: 0.55 }] },
+      { id: "kafka", synonyms: ["apache-kafka"], related: [{ to: "rabbitmq", w: 0.5 }, { to: "message-queue", w: 0.55 }] },
+      { id: "rabbitmq", related: [{ to: "message-queue", w: 0.55 }] },
+      { id: "cassandra" },
+      { id: "dynamodb", parents: ["aws"] },
+      { id: "snowflake", parents: ["data-engineering"], related: [{ to: "clickhouse", w: 0.4 }] },
+      { id: "clickhouse", parents: ["data-engineering"], related: [{ to: "duckdb", w: 0.35 }] },
+      { id: "duckdb", parents: ["data-engineering"] },
+      { id: "supabase", related: [{ to: "postgresql", w: 0.5 }, { to: "neon", w: 0.4 }] },
+      { id: "planetscale", related: [{ to: "mysql", w: 0.5 }] },
+      { id: "neon", related: [{ to: "postgresql", w: 0.5 }] },
+      { id: "turso", related: [{ to: "sqlite", w: 0.5 }] },
+      { id: "cockroachdb", related: [{ to: "postgresql", w: 0.45 }] },
+      { id: "prisma", parents: ["backend"], synonyms: ["@prisma/client"], related: [{ to: "drizzle", w: 0.5 }, { to: "typeorm", w: 0.45 }, { to: "sequelize", w: 0.4 }] },
+      { id: "drizzle", synonyms: ["drizzle-orm"], related: [{ to: "prisma", w: 0.5 }] },
+      { id: "sequelize", related: [{ to: "typeorm", w: 0.4 }] },
+      { id: "typeorm", related: [{ to: "prisma", w: 0.45 }] },
+      { id: "sqlalchemy", parents: ["python"] },
+      // ── Data engineering & ML ───────────────────────────────────────────────────
+      { id: "data-engineering", synonyms: ["data-eng"], related: [{ to: "spark", w: 0.5 }, { to: "airflow", w: 0.5 }, { to: "dbt", w: 0.45 }] },
+      { id: "spark", parents: ["data-engineering"], synonyms: ["apache-spark"] },
+      { id: "airflow", parents: ["data-engineering"], synonyms: ["apache-airflow"] },
+      { id: "dbt", parents: ["data-engineering"] },
+      { id: "ml", synonyms: ["machine-learning"], related: [{ to: "pytorch", w: 0.5 }, { to: "tensorflow", w: 0.5 }, { to: "scikit-learn", w: 0.5 }] },
+      { id: "llm", parents: ["ml"], synonyms: ["llms", "genai", "generative-ai"], related: [{ to: "langchain", w: 0.5 }, { to: "rag", w: 0.55 }, { to: "openai", w: 0.45 }, { to: "anthropic", w: 0.45 }] },
+      { id: "pytorch", parents: ["ml"], synonyms: ["torch"], related: [{ to: "tensorflow", w: 0.5 }] },
+      { id: "tensorflow", parents: ["ml"], synonyms: ["keras", "tf-keras"] },
+      { id: "pandas", parents: ["python"], related: [{ to: "numpy", w: 0.6 }] },
+      { id: "numpy", parents: ["python"] },
+      { id: "scikit-learn", parents: ["ml"], synonyms: ["sklearn"] },
+      { id: "jupyter", parents: ["python"] },
+      { id: "langchain", parents: ["llm"], synonyms: ["llamaindex"] },
+      { id: "huggingface", parents: ["ml"], synonyms: ["hugging-face"] },
+      { id: "openai", parents: ["llm"] },
+      { id: "anthropic", parents: ["llm"], synonyms: ["claude"] },
+      { id: "rag", parents: ["llm"], synonyms: ["retrieval-augmented-generation"] },
+      { id: "mlops", parents: ["ml"], related: [{ to: "devops", w: 0.4 }] },
+      // ── Mobile ──────────────────────────────────────────────────────────────────
+      { id: "mobile", related: [{ to: "ios", w: 0.5 }, { to: "android", w: 0.5 }] },
+      { id: "ios", parents: ["mobile", "swift"], related: [{ to: "android", w: 0.4 }] },
+      { id: "android", parents: ["mobile"], related: [{ to: "kotlin", w: 0.4 }] },
+      { id: "swiftui", parents: ["ios", "swift"] },
+      { id: "react-native", parents: ["mobile", "react"], synonyms: ["reactnative"], related: [{ to: "flutter", w: 0.4 }, { to: "expo", w: 0.6 }] },
+      { id: "flutter", parents: ["mobile", "dart"] },
+      { id: "expo", parents: ["react-native"] },
+      { id: "kotlin-multiplatform", parents: ["mobile", "kotlin"], synonyms: ["kmp"] },
+      // ── Domains / capabilities ──────────────────────────────────────────────────
+      { id: "frontend", related: [{ to: "react", w: 0.4 }, { to: "css", w: 0.3 }] },
+      { id: "backend", related: [{ to: "api-design", w: 0.4 }, { to: "microservices", w: 0.4 }] },
+      { id: "devops", related: [{ to: "kubernetes", w: 0.4 }, { to: "ci-cd", w: 0.4 }, { to: "docker", w: 0.4 }] },
+      { id: "authentication", synonyms: ["auth", "jwt", "saml", "passport", "auth0", "clerk", "nextauth"], related: [{ to: "oauth", w: 0.6 }, { to: "security", w: 0.5 }] },
+      { id: "oauth", parents: ["authentication"], synonyms: ["oauth2", "oidc"], related: [{ to: "security", w: 0.4 }] },
+      { id: "security", related: [{ to: "authentication", w: 0.5 }] },
+      { id: "payments", synonyms: ["stripe", "braintree", "paddle", "lemonsqueezy", "@stripe/stripe-js"], related: [{ to: "billing", w: 0.6 }] },
+      { id: "billing", synonyms: ["recurly", "chargebee"] },
+      { id: "api-design", synonyms: ["rest", "restful", "rest-api"], related: [{ to: "graphql", w: 0.4 }, { to: "grpc", w: 0.4 }, { to: "backend", w: 0.4 }] },
+      { id: "graphql", synonyms: ["gql"], related: [{ to: "trpc", w: 0.4 }] },
+      { id: "trpc", related: [{ to: "graphql", w: 0.4 }] },
+      { id: "grpc", synonyms: ["grpc-web"], related: [{ to: "microservices", w: 0.3 }] },
+      { id: "microservices" },
+      { id: "websockets", synonyms: ["ws", "socket.io"], related: [{ to: "realtime", w: 0.6 }] },
+      { id: "realtime", synonyms: ["real-time"] },
+      { id: "message-queue", synonyms: ["mq"] },
+      { id: "caching", synonyms: ["cache"] },
+      { id: "search", synonyms: ["full-text-search"] },
+      { id: "observability", synonyms: ["o11y"], related: [{ to: "monitoring", w: 0.6 }] },
+      { id: "monitoring", related: [{ to: "prometheus", w: 0.4 }] },
+      { id: "testing", related: [{ to: "unit-testing", w: 0.5 }, { to: "e2e-testing", w: 0.5 }] },
+      { id: "unit-testing", parents: ["testing"] },
+      { id: "e2e-testing", parents: ["testing"], synonyms: ["e2e", "end-to-end-testing"] },
+      { id: "jest", parents: ["testing"], related: [{ to: "vitest", w: 0.6 }, { to: "mocha", w: 0.5 }] },
+      { id: "vitest", parents: ["testing"], related: [{ to: "jest", w: 0.6 }] },
+      { id: "playwright", parents: ["e2e-testing"], related: [{ to: "cypress", w: 0.6 }] },
+      { id: "cypress", parents: ["e2e-testing"] },
+      { id: "mocha", parents: ["testing"] },
+      { id: "pytest", parents: ["testing", "python"] },
+      { id: "accessibility", synonyms: ["a11y"] },
+      { id: "seo" },
+      { id: "performance", synonyms: ["perf", "web-performance"] }
+    ];
+  }
+});
+
+// ../../packages/core/src/vocab/closure.ts
+function round3(n) {
+  return Math.round(n * 1e3) / 1e3;
+}
+function validateGraph(nodes) {
+  const ids = /* @__PURE__ */ new Set();
+  for (const n of nodes) {
+    if (ids.has(n.id)) throw new Error(`vocab: duplicate id "${n.id}"`);
+    ids.add(n.id);
+  }
+  const seenAlias = /* @__PURE__ */ new Map();
+  for (const n of nodes) {
+    for (const p of n.parents ?? []) {
+      if (p === n.id) throw new Error(`vocab: "${n.id}" lists itself as a parent`);
+      if (!ids.has(p)) throw new Error(`vocab: "${n.id}" parent "${p}" is not a defined id`);
+    }
+    for (const e of n.related ?? []) {
+      if (e.to === n.id) throw new Error(`vocab: "${n.id}" relates to itself`);
+      if (!ids.has(e.to)) throw new Error(`vocab: "${n.id}" related "${e.to}" is not a defined id`);
+      if (!(e.w > 0 && e.w <= 1)) throw new Error(`vocab: "${n.id}"\u2192"${e.to}" weight ${e.w} out of (0,1]`);
+    }
+    for (const s of n.synonyms ?? []) {
+      const alias = s.toLowerCase();
+      if (ids.has(alias)) throw new Error(`vocab: synonym "${alias}" collides with a canonical id`);
+      const prev = seenAlias.get(alias);
+      if (prev && prev !== n.id) throw new Error(`vocab: synonym "${alias}" maps to both "${prev}" and "${n.id}"`);
+      seenAlias.set(alias, n.id);
+    }
+  }
+  const visiting = /* @__PURE__ */ new Set();
+  const done = /* @__PURE__ */ new Set();
+  const parentMap = new Map(nodes.map((n) => [n.id, n.parents ?? []]));
+  const walk = (id, path) => {
+    if (done.has(id)) return;
+    if (visiting.has(id)) throw new Error(`vocab: parent cycle ${[...path, id].join(" \u2192 ")}`);
+    visiting.add(id);
+    for (const p of parentMap.get(id) ?? []) walk(p, [...path, id]);
+    visiting.delete(id);
+    done.add(id);
+  };
+  for (const n of nodes) walk(n.id, []);
+}
+function buildAdjacency(nodes) {
+  const adj = /* @__PURE__ */ new Map();
+  const add = (from, to, w) => {
+    let m = adj.get(from);
+    if (!m) adj.set(from, m = /* @__PURE__ */ new Map());
+    if (w > (m.get(to) ?? 0)) m.set(to, w);
+  };
+  for (const n of nodes) {
+    for (const p of n.parents ?? []) {
+      add(n.id, p, PARENT_UP);
+      add(p, n.id, PARENT_DOWN);
+    }
+    for (const e of n.related ?? []) {
+      add(n.id, e.to, e.w);
+      add(e.to, n.id, e.w);
+    }
+  }
+  return adj;
+}
+function closureFrom(source, adj) {
+  const best = /* @__PURE__ */ new Map();
+  for (const [t, w] of adj.get(source) ?? []) {
+    if (w >= DECAY_FLOOR) best.set(t, { w: round3(w), via: t });
+  }
+  const settled = /* @__PURE__ */ new Set([source]);
+  while (true) {
+    let u;
+    let uw = 0;
+    for (const [t, e] of best) {
+      if (!settled.has(t) && e.w > uw) {
+        u = t;
+        uw = e.w;
+      }
+    }
+    if (!u) break;
+    settled.add(u);
+    const via = best.get(u).via;
+    for (const [t, we] of adj.get(u) ?? []) {
+      if (settled.has(t)) continue;
+      const cand = round3(uw * we);
+      if (cand >= DECAY_FLOOR && cand > (best.get(t)?.w ?? 0)) {
+        best.set(t, { w: cand, via });
+      }
+    }
+  }
+  best.delete(source);
+  return best;
+}
+function buildGraph(nodes) {
+  validateGraph(nodes);
+  const ids = new Set(nodes.map((n) => n.id));
+  const synonyms = /* @__PURE__ */ new Map();
+  for (const n of nodes) {
+    for (const s of n.synonyms ?? []) synonyms.set(s.toLowerCase(), n.id);
+  }
+  const adj = buildAdjacency(nodes);
+  const closure = /* @__PURE__ */ new Map();
+  for (const n of nodes) closure.set(n.id, closureFrom(n.id, adj));
+  return { ids, synonyms, closure };
+}
+var PARENT_UP, PARENT_DOWN, DECAY_FLOOR;
+var init_closure = __esm({
+  "../../packages/core/src/vocab/closure.ts"() {
+    "use strict";
+    PARENT_UP = 0.6;
+    PARENT_DOWN = 0.35;
+    DECAY_FLOOR = 0.25;
+  }
+});
+
+// ../../packages/core/src/vocab/types.ts
+var init_types2 = __esm({
+  "../../packages/core/src/vocab/types.ts"() {
+    "use strict";
+  }
+});
+
+// ../../packages/core/src/vocab/index.ts
 function normalize(tokens) {
   const result = /* @__PURE__ */ new Set();
   for (const raw of tokens) {
     const lower = raw.toLowerCase().trim();
-    if (VOCAB_SET.has(lower)) {
+    if (GRAPH.ids.has(lower)) {
       result.add(lower);
       continue;
     }
-    const mapped = SYNONYMS[lower];
-    if (mapped && VOCAB_SET.has(mapped)) {
-      result.add(mapped);
-    }
+    const mapped = GRAPH.synonyms.get(lower);
+    if (mapped) result.add(mapped);
   }
   return Array.from(result);
 }
-var VOCABULARY, SYNONYMS, VOCAB_SET;
+function expandWeighted(tags, graph = GRAPH) {
+  const out = /* @__PURE__ */ new Map();
+  const put = (tag, weight, via) => {
+    const ex = out.get(tag);
+    if (!ex || weight > ex.weight) out.set(tag, { tag, weight, via });
+  };
+  for (const t of tags) {
+    put(t, 1, t);
+    const near = graph.closure.get(t);
+    if (near) for (const [n, edge] of near) put(n, edge.w, t);
+  }
+  return out;
+}
+var GRAPH, VOCABULARY, SYNONYMS;
+var init_vocab = __esm({
+  "../../packages/core/src/vocab/index.ts"() {
+    "use strict";
+    init_graph_data();
+    init_closure();
+    init_types2();
+    init_closure();
+    init_graph_data();
+    GRAPH = buildGraph(VOCAB_NODES);
+    VOCABULARY = [...GRAPH.ids];
+    SYNONYMS = Object.fromEntries(GRAPH.synonyms);
+  }
+});
+
+// ../../packages/core/src/vocabulary.ts
 var init_vocabulary = __esm({
   "../../packages/core/src/vocabulary.ts"() {
     "use strict";
-    VOCABULARY = [
-      // Languages
-      "typescript",
-      "javascript",
-      "python",
-      "go",
-      "rust",
-      "java",
-      "ruby",
-      "elixir",
-      "scala",
-      "kotlin",
-      "swift",
-      "cpp",
-      "csharp",
-      "php",
-      "haskell",
-      "clojure",
-      "r",
-      // Frontend frameworks / libs
-      "react",
-      "nextjs",
-      "vue",
-      "nuxt",
-      "svelte",
-      "angular",
-      "solidjs",
-      "tailwind",
-      "css",
-      "html",
-      "graphql",
-      "trpc",
-      // Backend frameworks
-      "nodejs",
-      "express",
-      "fastify",
-      "nestjs",
-      "django",
-      "fastapi",
-      "flask",
-      "rails",
-      "spring",
-      "actix",
-      "gin",
-      "phoenix",
-      "laravel",
-      "dotnet",
-      // Infrastructure & DevOps
-      "kubernetes",
-      "docker",
-      "terraform",
-      "aws",
-      "gcp",
-      "azure",
-      "ci-cd",
-      "github-actions",
-      "linux",
-      "nginx",
-      "pulumi",
-      "ansible",
-      "prometheus",
-      "grafana",
-      "datadog",
-      "opentelemetry",
-      // Data & ML
-      "postgresql",
-      "mysql",
-      "sqlite",
-      "mongodb",
-      "redis",
-      "elasticsearch",
-      "kafka",
-      "rabbitmq",
-      "data-engineering",
-      "spark",
-      "airflow",
-      "dbt",
-      "ml",
-      "llm",
-      "pytorch",
-      "tensorflow",
-      "pandas",
-      "numpy",
-      // Domains / capabilities
-      "oauth",
-      "authentication",
-      "security",
-      "payments",
-      "billing",
-      "frontend",
-      "backend",
-      "devops",
-      "mobile",
-      "ios",
-      "android",
-      "api-design",
-      "microservices",
-      "websockets",
-      "testing",
-      "accessibility",
-      "seo",
-      "performance",
-      "observability",
-      "search",
-      "realtime"
-    ];
-    SYNONYMS = {
-      // Kubernetes aliases
-      "k8s": "kubernetes",
-      "kube": "kubernetes",
-      // Auth / identity
-      "passport": "authentication",
-      "oauth2": "oauth",
-      "oidc": "oauth",
-      "jwt": "authentication",
-      "saml": "authentication",
-      "auth0": "authentication",
-      "clerk": "authentication",
-      "nextauth": "authentication",
-      // Payments
-      "@stripe/stripe-js": "payments",
-      "stripe": "payments",
-      "braintree": "payments",
-      "paddle": "payments",
-      "lemonsqueezy": "payments",
-      "recurly": "billing",
-      "chargebee": "billing",
-      // Framework / lib aliases
-      "next": "nextjs",
-      "next.js": "nextjs",
-      "nuxt.js": "nuxt",
-      "vue.js": "vue",
-      "angular.js": "angular",
-      "angularjs": "angular",
-      "express.js": "express",
-      "expressjs": "express",
-      "fastapi": "fastapi",
-      "nest": "nestjs",
-      "nest.js": "nestjs",
-      "sveltekit": "svelte",
-      // Language aliases
-      "ts": "typescript",
-      "js": "javascript",
-      "py": "python",
-      "golang": "go",
-      "c++": "cpp",
-      "c#": "csharp",
-      ".net": "dotnet",
-      "asp.net": "dotnet",
-      // DB aliases
-      "postgres": "postgresql",
-      "pg": "postgresql",
-      "mongo": "mongodb",
-      "elastic": "elasticsearch",
-      // Cloud aliases
-      "amazon web services": "aws",
-      "google cloud": "gcp",
-      "google cloud platform": "gcp",
-      "microsoft azure": "azure",
-      // CI/CD aliases
-      "github actions": "github-actions",
-      "circle ci": "ci-cd",
-      "circleci": "ci-cd",
-      "jenkins": "ci-cd",
-      "gitlab ci": "ci-cd",
-      "travis": "ci-cd",
-      // Mobile
-      "react native": "mobile",
-      "flutter": "mobile",
-      "expo": "mobile",
-      // AI / ML
-      "openai": "llm",
-      "anthropic": "llm",
-      "langchain": "llm",
-      "llamaindex": "llm",
-      "hugging face": "ml",
-      "huggingface": "ml",
-      "scikit-learn": "ml",
-      "sklearn": "ml",
-      // Data pipeline
-      "apache kafka": "kafka",
-      "apache spark": "spark",
-      "apache airflow": "airflow",
-      // Misc
-      "tailwindcss": "tailwind",
-      "tw": "tailwind",
-      "gql": "graphql",
-      "ws": "websockets",
-      "socket.io": "websockets",
-      "jest": "testing",
-      "vitest": "testing",
-      "playwright": "testing",
-      "cypress": "testing"
-    };
-    VOCAB_SET = new Set(VOCABULARY);
+    init_vocab();
   }
 });
 
@@ -465,6 +607,7 @@ function computeIdf(jobs) {
   return idf;
 }
 function inferSeniority(title) {
+  if (!ENG_TITLE.test(title)) return void 0;
   for (const [re, level] of SENIORITY_PATTERNS) {
     if (re.test(title)) return level;
   }
@@ -478,15 +621,15 @@ function seniorityScore(fp, job) {
   const got = SENIORITY_RANK[jobLevel] ?? 1;
   const delta = Math.abs(wanted - got);
   if (delta === 0) return 1;
-  if (delta === 1) return 0.5;
-  return 0.2;
+  if (delta === 1) return 0.7;
+  return 0.4;
 }
-function recencyScore(postedAt) {
+function recencyScore(postedAt, now) {
   if (!postedAt) return 0.75;
-  const ageDays = (Date.now() - new Date(postedAt).getTime()) / 864e5;
-  if (ageDays < 7) return 1;
-  if (ageDays < 30) return 0.9;
-  if (ageDays < 90) return 0.75;
+  const ageDays2 = (now - new Date(postedAt).getTime()) / 864e5;
+  if (ageDays2 < 7) return 1;
+  if (ageDays2 < 30) return 0.9;
+  if (ageDays2 < 90) return 0.75;
   return 0.6;
 }
 function passesFilters(fp, job) {
@@ -501,52 +644,73 @@ function passesFilters(fp, job) {
   }
   return true;
 }
-function buildReason(matchedTags) {
-  if (matchedTags.length === 0) return "No direct skill overlap found.";
-  const top = matchedTags.slice(0, 3);
-  const rest = matchedTags.length - top.length;
+function buildReason(details) {
+  if (details.length === 0) return "No direct skill overlap found.";
+  const render = (d) => !d.via || d.via === d.tag ? d.tag : `${d.via}\u2192${d.tag} (${d.weight})`;
+  const top = details.slice(0, 3).map(render);
+  const rest = details.length - top.length;
   const listed = top.join(", ");
   if (rest === 0) return `Matched on ${listed}.`;
   return `Matched on ${listed} + ${rest} more skill${rest > 1 ? "s" : ""}.`;
 }
-function match(fp, jobs, limit = 5) {
+function harmonicMean(a, b) {
+  if (a <= 0 || b <= 0) return 0;
+  return 2 * a * b / (a + b);
+}
+function match(fp, jobs, limit = 5, now = Date.now()) {
   const idf = computeIdf(jobs);
-  const fpTagSet = new Set(fp.skillTags);
-  const maxTagScore = fp.skillTags.reduce((acc, t) => acc + (idf.get(t) ?? 1), 0);
+  const idfOf = (t) => idf.get(t) ?? 0;
+  const expanded = expandWeighted(fp.skillTags);
+  const maxDevScore = fp.skillTags.reduce((acc, t) => acc + idfOf(t), 0);
   const candidates = jobs.filter((j) => passesFilters(fp, j));
   const scored = candidates.map((job) => {
-    const jobTagSet = new Set(job.tags);
-    const matched = [];
-    let tagScore2 = 0;
-    for (const tag of fpTagSet) {
-      if (jobTagSet.has(tag)) {
-        const w = idf.get(tag) ?? 1;
-        tagScore2 += w;
-        matched.push(tag);
+    const details = [];
+    let jobMatchScore = 0;
+    let jobMaxScore = 0;
+    const devCovByTag = /* @__PURE__ */ new Map();
+    for (const tag of job.tags) {
+      const w = idfOf(tag);
+      jobMaxScore += w;
+      const hit = expanded.get(tag);
+      if (hit) {
+        const credit = Math.pow(hit.weight, SHARPEN);
+        jobMatchScore += w * credit;
+        details.push({ tag, weight: hit.weight, via: hit.via });
+        if (credit > (devCovByTag.get(hit.via) ?? 0)) devCovByTag.set(hit.via, credit);
       }
     }
-    const normTagScore = maxTagScore > 0 ? tagScore2 / maxTagScore : 0;
-    matched.sort((a, b) => (idf.get(b) ?? 1) - (idf.get(a) ?? 1));
+    let devScore = 0;
+    for (const t of fp.skillTags) devScore += idfOf(t) * (devCovByTag.get(t) ?? 0);
+    const devCov = maxDevScore > 0 ? Math.min(1, devScore / maxDevScore) : 0;
+    const jobCov = jobMaxScore > 0 ? Math.min(1, jobMatchScore / jobMaxScore) : 0;
+    const tagComponent = harmonicMean(devCov, jobCov);
+    if (tagComponent === 0) return null;
+    details.sort((a, b) => idfOf(b.tag) * b.weight - idfOf(a.tag) * a.weight);
     const sScore = seniorityScore(fp, job);
-    const rScore = recencyScore(job.postedAt);
-    const score = normTagScore * 0.6 + sScore * 0.25 + rScore * 0.15;
+    const rScore = recencyScore(job.postedAt, now);
+    const score = tagComponent * 0.6 + sScore * 0.25 + rScore * 0.15;
+    const matchedTags = [...new Set(details.map((d) => d.via ?? d.tag))];
     return {
       job,
       score: Math.round(score * 1e3) / 1e3,
-      matchedTags: matched,
-      reason: buildReason(matched)
+      matchedTags,
+      matchDetails: details,
+      reason: buildReason(details)
     };
   });
-  return scored.sort((a, b) => b.score - a.score).slice(0, limit);
+  return scored.filter((r) => r !== null && r.score >= MIN_SCORE).sort((a, b) => b.score - a.score).slice(0, limit);
 }
 function matchOne(fp, job) {
   const results = match(fp, [job], 1);
   return results.length > 0 ? results[0] : null;
 }
-var SENIORITY_RANK, SENIORITY_PATTERNS;
+var MIN_SCORE, SHARPEN, SENIORITY_RANK, SENIORITY_PATTERNS, ENG_TITLE;
 var init_matcher = __esm({
   "../../packages/core/src/matcher.ts"() {
     "use strict";
+    init_vocabulary();
+    MIN_SCORE = 0.15;
+    SHARPEN = 1.6;
     SENIORITY_RANK = {
       junior: 0,
       mid: 1,
@@ -559,6 +723,7 @@ var init_matcher = __esm({
       [/\bjunior\b|\bjr\.?\b|\bentry[\s-]?level\b/i, "junior"],
       [/\bmid[\s-]?level\b|\bmid\b/i, "mid"]
     ];
+    ENG_TITLE = /\b(engineer|engineering|developer|dev|swe|sde|programmer|architect)\b/i;
   }
 });
 
@@ -899,6 +1064,33 @@ var init_himalayas = __esm({
   }
 });
 
+// ../../packages/core/src/feeds/entities.ts
+function fromCodePoint(cp) {
+  if (!Number.isFinite(cp) || cp < 0 || cp > 1114111) return "";
+  try {
+    return String.fromCodePoint(cp);
+  } catch {
+    return "";
+  }
+}
+function decodeEntities(input) {
+  if (!input || !input.includes("&")) return input;
+  return input.replace(/&#(\d+);/g, (_, n) => fromCodePoint(parseInt(n, 10))).replace(/&#[xX]([0-9a-fA-F]+);/g, (_, h) => fromCodePoint(parseInt(h, 16))).replace(/&(lt|gt|quot|apos|nbsp);/g, (_, name) => NAMED[name] ?? `&${name};`).replace(/&amp;/g, "&");
+}
+var NAMED;
+var init_entities = __esm({
+  "../../packages/core/src/feeds/entities.ts"() {
+    "use strict";
+    NAMED = {
+      lt: "<",
+      gt: ">",
+      quot: '"',
+      apos: "'",
+      nbsp: " "
+    };
+  }
+});
+
 // ../../packages/core/src/feeds/wwr.ts
 function tokenize5(text) {
   return text.toLowerCase().replace(/[^a-z0-9.\-+#]/g, " ").split(/\s+/).filter(Boolean);
@@ -922,9 +1114,9 @@ function parseRss(xml) {
   for (const block of itemBlocks) {
     const get = (tag) => {
       const cdataMatch = block.match(new RegExp(`<${tag}[^>]*><!\\[CDATA\\[([\\s\\S]*?)\\]\\]><\\/${tag}>`, "i"));
-      if (cdataMatch) return cdataMatch[1].trim();
+      if (cdataMatch) return decodeEntities(cdataMatch[1].trim());
       const plainMatch = block.match(new RegExp(`<${tag}[^>]*>([\\s\\S]*?)<\\/${tag}>`, "i"));
-      return plainMatch?.[1].trim() ?? "";
+      return decodeEntities(plainMatch?.[1].trim() ?? "");
     };
     const rawTitle = get("title");
     const colonIdx = rawTitle.indexOf(":");
@@ -951,6 +1143,7 @@ var init_wwr = __esm({
   "../../packages/core/src/feeds/wwr.ts"() {
     "use strict";
     init_vocabulary();
+    init_entities();
     WWR_RSS_URL = "https://weworkremotely.com/remote-jobs.rss";
     wwr = {
       source: "wwr",
@@ -989,7 +1182,7 @@ function tokenize6(text) {
   return text.toLowerCase().replace(/[^a-z0-9.\-+#]/g, " ").split(/\s+/).filter(Boolean);
 }
 function stripHtml2(html) {
-  return html.replace(/<p>/gi, " ").replace(/<[^>]*>/g, "").replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&#x27;/g, "'").replace(/\s+/g, " ").trim();
+  return decodeEntities(html.replace(/<p>/gi, " ").replace(/<[^>]*>/g, "")).replace(/\s+/g, " ").trim();
 }
 function extractUrl(text) {
   const match2 = text.match(/https?:\/\/[^\s<>"']+/);
@@ -1043,6 +1236,7 @@ var init_hn = __esm({
   "../../packages/core/src/feeds/hn.ts"() {
     "use strict";
     init_vocabulary();
+    init_entities();
     ALGOLIA_SEARCH = "https://hn.algolia.com/api/v1/search?query=Ask+HN%3A+Who+is+Hiring%3F&tags=story,ask_hn&hitsPerPage=1";
     ALGOLIA_ITEMS = "https://hn.algolia.com/api/v1/items/";
     hn = {
@@ -1079,7 +1273,198 @@ var init_hn = __esm({
   }
 });
 
+// ../../packages/core/src/feeds/bounty-gate.ts
+function ageDays(createdAtIso) {
+  const created = Date.parse(createdAtIso);
+  if (!Number.isFinite(created)) return 0;
+  return (Date.now() - created) / (1e3 * 60 * 60 * 24);
+}
+function passesMaturityGate(repo) {
+  if (repo.archived || repo.disabled) return false;
+  if (repo.stargazers < MIN_REPO_STARS) return false;
+  if (ageDays(repo.createdAt) < MIN_REPO_AGE_DAYS) return false;
+  return true;
+}
+var DEFAULT_BOUNTY_REPOS, MAX_BOUNTIES_PER_REPO, MIN_REPO_STARS, MIN_REPO_AGE_DAYS;
+var init_bounty_gate = __esm({
+  "../../packages/core/src/feeds/bounty-gate.ts"() {
+    "use strict";
+    DEFAULT_BOUNTY_REPOS = [
+      "tenstorrent/tt-metal",
+      "sequelize/sequelize",
+      "commaai/opendbc",
+      "aragon/hack",
+      "spacemeshos/app",
+      "archestra-ai/archestra",
+      "boundlessfi/boundless",
+      "ucfopen/Obojobo",
+      "widgetti/ipyvolume",
+      "moorcheh-ai/memanto",
+      "PrismarineJS/mineflayer"
+    ];
+    MAX_BOUNTIES_PER_REPO = 10;
+    MIN_REPO_STARS = 5;
+    MIN_REPO_AGE_DAYS = 30;
+  }
+});
+
+// ../../packages/core/src/feeds/github-bounties.ts
+function authHeaders() {
+  const token = process.env["GITHUB_TOKEN"] ?? process.env["GH_TOKEN"];
+  const h = {
+    Accept: "application/vnd.github+json",
+    "User-Agent": "terminalhire",
+    "X-GitHub-Api-Version": "2022-11-28"
+  };
+  if (token) h["Authorization"] = `Bearer ${token}`;
+  return h;
+}
+function tokenize7(text) {
+  return text.toLowerCase().replace(/[^a-z0-9.\-+#]/g, " ").split(/\s+/).filter(Boolean);
+}
+function parseAmountUSD(text) {
+  const m = text.match(/\$\s?([0-9][0-9,]*(?:\.[0-9]+)?)\s?([kK])?/);
+  if (!m) return void 0;
+  let n = parseFloat(m[1].replace(/,/g, ""));
+  if (m[2]) n *= 1e3;
+  if (!Number.isFinite(n) || n <= 0 || n > 1e6) return void 0;
+  return Math.round(n);
+}
+function effortFromAmount(amount) {
+  if (amount == null) return void 0;
+  if (amount <= 500) return "small";
+  if (amount <= 2e3) return "medium";
+  return "large";
+}
+function labelNames(issue) {
+  return (issue.labels ?? []).map((l) => typeof l === "string" ? l : l.name ?? "").filter(Boolean);
+}
+function isBountyIssue(issue) {
+  if (issue.pull_request) return false;
+  const labels = labelNames(issue);
+  if (labels.some((n) => BOUNTY_LABEL_RE.test(n))) return true;
+  return /bounty/i.test(issue.title) && parseAmountUSD(issue.title) != null;
+}
+async function ghJson(path) {
+  let res;
+  try {
+    res = await fetch(`${GITHUB_API}${path}`, { headers: authHeaders() });
+  } catch (err) {
+    console.warn(`[github-bounties] network error ${path} \u2014`, err);
+    return null;
+  }
+  if (res.status === 403 && res.headers.get("x-ratelimit-remaining") === "0") {
+    console.warn("[github-bounties] rate-limited (set GITHUB_TOKEN for 5000/hr)");
+    return null;
+  }
+  if (!res.ok) {
+    console.warn(`[github-bounties] HTTP ${res.status} ${path}`);
+    return null;
+  }
+  try {
+    return await res.json();
+  } catch {
+    return null;
+  }
+}
+async function fetchCommentAmount(repoFullName, issueNumber) {
+  const comments = await ghJson(
+    `/repos/${repoFullName}/issues/${issueNumber}/comments?per_page=30`
+  );
+  if (!comments) return void 0;
+  for (const c of comments) {
+    const body = c.body ?? "";
+    if (BOUNTY_LABEL_RE.test(body)) {
+      const amt = parseAmountUSD(body);
+      if (amt != null) return amt;
+    }
+  }
+  return void 0;
+}
+async function fetchRepoBounties(repoFullName) {
+  const repo = await ghJson(`/repos/${repoFullName}`);
+  if (!repo) return [];
+  const meta = {
+    fullName: repo.full_name,
+    stargazers: repo.stargazers_count,
+    createdAt: repo.created_at,
+    archived: repo.archived,
+    disabled: repo.disabled
+  };
+  if (!passesMaturityGate(meta)) {
+    console.info(`[github-bounties] ${repoFullName}: failed maturity gate, skipping`);
+    return [];
+  }
+  const issues = await ghJson(`/repos/${repoFullName}/issues?state=open&per_page=100`);
+  if (!issues) return [];
+  const bounties = issues.filter(isBountyIssue).slice(0, MAX_BOUNTIES_PER_REPO);
+  const owner = repo.owner.login;
+  return Promise.all(bounties.map(async (issue) => {
+    const title = decodeEntities(issue.title).trim();
+    const body = issue.body ? decodeEntities(issue.body) : "";
+    const amountUSD = parseAmountUSD(title) ?? parseAmountUSD(body) ?? await fetchCommentAmount(repoFullName, issue.number);
+    const labels = labelNames(issue);
+    const tags = normalize(tokenize7([title, labels.join(" "), body.slice(0, 2e3)].join(" ")));
+    return {
+      id: `bounty:${repoFullName}#${issue.number}`,
+      source: "bounty",
+      title,
+      company: owner,
+      url: issue.html_url,
+      remote: true,
+      location: "Remote",
+      tags,
+      roleType: "freelance",
+      postedAt: issue.created_at,
+      applyMode: "direct",
+      bounty: {
+        amountUSD,
+        estimatedEffort: effortFromAmount(amountUSD),
+        bountySource: "github",
+        claimUrl: issue.html_url,
+        repoFullName,
+        repoStars: repo.stargazers_count,
+        issueBody: body.slice(0, 1e3) || void 0
+      },
+      raw: issue
+    };
+  }));
+}
+var GITHUB_API, BOUNTY_LABEL_RE, githubBounties;
+var init_github_bounties = __esm({
+  "../../packages/core/src/feeds/github-bounties.ts"() {
+    "use strict";
+    init_vocabulary();
+    init_entities();
+    init_bounty_gate();
+    GITHUB_API = "https://api.github.com";
+    BOUNTY_LABEL_RE = /bounty|reward|funded|💎|💰/i;
+    githubBounties = {
+      source: "bounty",
+      async fetch(opts) {
+        const repos = opts?.slugs && opts.slugs.length > 0 ? opts.slugs : DEFAULT_BOUNTY_REPOS;
+        console.info(`[github-bounties] scanning ${repos.length} repos`);
+        const settled = await Promise.allSettled(repos.map(fetchRepoBounties));
+        const jobs = [];
+        let failures = 0;
+        for (const r of settled) {
+          if (r.status === "fulfilled") jobs.push(...r.value);
+          else {
+            failures++;
+            console.warn("[github-bounties] repo fetch rejected:", r.reason);
+          }
+        }
+        console.info(`[github-bounties] total: ${jobs.length} bounties, ${failures} repo failures`);
+        return jobs;
+      }
+    };
+  }
+});
+
 // ../../packages/core/src/feeds/index.ts
+async function aggregateBounties(opts) {
+  return githubBounties.fetch({ slugs: opts?.repos });
+}
 function flattenTiers(t) {
   return [.../* @__PURE__ */ new Set([...t.bigco, ...t.scaleup, ...t.startup])];
 }
@@ -1112,6 +1497,19 @@ async function aggregate(opts) {
       }
     }
   }
+  if (opts?.includeBounties !== false) {
+    try {
+      const bounties = await githubBounties.fetch({ slugs: opts?.slugs?.["bounty"], limit });
+      for (const b of bounties) {
+        if (!seen.has(b.id)) {
+          seen.add(b.id);
+          jobs.push(b);
+        }
+      }
+    } catch (err) {
+      console.warn("[feeds] bounties failed:", err);
+    }
+  }
   return jobs;
 }
 var FEEDS, GREENHOUSE_SLUGS_BY_TIER, ASHBY_SLUGS_BY_TIER, LEVER_SLUGS_BY_TIER, DEFAULT_GREENHOUSE_SLUGS, DEFAULT_ASHBY_SLUGS, DEFAULT_LEVER_SLUGS;
@@ -1124,6 +1522,8 @@ var init_feeds = __esm({
     init_himalayas();
     init_wwr();
     init_hn();
+    init_github_bounties();
+    init_bounty_gate();
     FEEDS = [greenhouse, ashby, lever, himalayas, wwr, hn];
     GREENHOUSE_SLUGS_BY_TIER = {
       bigco: [
@@ -1233,72 +1633,78 @@ var init_feeds = __esm({
   }
 });
 
-// ../../packages/core/src/coastal.ts
+// ../../packages/core/src/partners.ts
 import { readFileSync as readFileSync2 } from "fs";
 import { join as join2 } from "path";
 import { fileURLToPath } from "url";
 function resolveDataPath() {
   try {
     const dir = fileURLToPath(new URL("../../../data", import.meta.url));
-    return join2(dir, "coastal-roles.json");
+    return join2(dir, "partner-roles.json");
   } catch {
-    return join2(process.cwd(), "data", "coastal-roles.json");
+    return join2(process.cwd(), "data", "partner-roles.json");
   }
 }
-function loadCoastalRoles() {
+function loadPartnerRoles() {
   const filePath = resolveDataPath();
   try {
     const raw = readFileSync2(filePath, "utf-8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed)) {
-      console.warn("[coastal] coastal-roles.json is not an array \u2014 skipping");
+      console.warn("[partners] partner-roles.json is not an array \u2014 skipping");
       return [];
     }
     const valid = [];
     for (const entry of parsed) {
-      if (typeof entry === "object" && entry !== null && typeof entry.id === "string" && entry.applyMode === "buyer-lead" && entry.buyer === "coastal") {
+      const e = entry;
+      if (typeof entry === "object" && entry !== null && typeof e.id === "string" && e.applyMode === "buyer-lead" && typeof e.buyer === "string" && e.buyer.length > 0) {
         valid.push(entry);
       } else {
-        console.warn("[coastal] Skipping malformed role entry:", entry);
+        console.warn("[partners] Skipping malformed role entry:", entry);
       }
     }
     return valid;
   } catch (err) {
     if (err.code === "ENOENT") {
-      console.warn(`[coastal] data/coastal-roles.json not found at ${filePath} \u2014 no Coastal roles loaded`);
+      console.warn(`[partners] data/partner-roles.json not found at ${filePath} \u2014 no partner roles loaded`);
     } else {
-      console.warn("[coastal] Failed to load coastal-roles.json:", err);
+      console.warn("[partners] Failed to load partner-roles.json:", err);
     }
     return [];
   }
 }
-var COASTAL_BUYER;
-var init_coastal = __esm({
-  "../../packages/core/src/coastal.ts"() {
+function getBuyer(id) {
+  return BUYER_REGISTRY[id];
+}
+var EXAMPLE_BUYER, BUYER_REGISTRY;
+var init_partners = __esm({
+  "../../packages/core/src/partners.ts"() {
     "use strict";
-    COASTAL_BUYER = {
-      id: "coastal",
-      legalName: "Coastal Recruiting LLC",
-      matchCriteria: {
-        roleTypes: ["full_time"]
-      }
+    EXAMPLE_BUYER = {
+      id: "northstar",
+      legalName: "Northstar Talent Partners",
+      matchCriteria: { roleTypes: ["full_time"] }
+    };
+    BUYER_REGISTRY = {
+      [EXAMPLE_BUYER.id]: EXAMPLE_BUYER
     };
   }
 });
 
 // ../../packages/core/src/indexer.ts
 async function buildIndex(opts) {
-  const includeCoastal = opts?.includeCoastal ?? true;
+  const includePartners = opts?.includePartners ?? true;
   const publicJobs = await aggregate(opts);
   const allJobs = [...publicJobs];
-  if (includeCoastal) {
-    const coastalJobs = loadCoastalRoles();
-    const seen = new Set(publicJobs.map((j) => j.id));
-    for (const job of coastalJobs) {
-      if (!seen.has(job.id)) {
-        seen.add(job.id);
-        allJobs.push(job);
-      }
+  const seen = new Set(publicJobs.map((j) => j.id));
+  const partnerJobs = [
+    ...includePartners ? loadPartnerRoles() : [],
+    ...opts?.partnerRoles ?? []
+  ];
+  for (const job of partnerJobs) {
+    if (!seen.has(job.id)) {
+      seen.add(job.id);
+      allJobs.push(job);
     }
   }
   const jobs = allJobs.map(({ raw: _raw, ...rest }) => rest);
@@ -1311,7 +1717,7 @@ var init_indexer = __esm({
   "../../packages/core/src/indexer.ts"() {
     "use strict";
     init_feeds();
-    init_coastal();
+    init_partners();
   }
 });
 
@@ -1393,8 +1799,7 @@ function inferSeniority2(p) {
   if (ageYears >= 9 && (p.publicRepos >= 40 || p.followers >= 500)) return "staff";
   if (ageYears >= 5 && (p.publicRepos >= 20 || p.followers >= 100)) return "senior";
   if (ageYears >= 2 && p.publicRepos >= 5) return "mid";
-  if (ageYears < 2 || p.publicRepos < 5) return "junior";
-  return void 0;
+  return "junior";
 }
 function githubToFingerprint(p) {
   const rawTokens = [
@@ -1417,30 +1822,42 @@ var init_github = __esm({
 var src_exports = {};
 __export(src_exports, {
   ASHBY_SLUGS_BY_TIER: () => ASHBY_SLUGS_BY_TIER,
-  COASTAL_BUYER: () => COASTAL_BUYER,
+  DECAY_FLOOR: () => DECAY_FLOOR,
   DEFAULT_ASHBY_SLUGS: () => DEFAULT_ASHBY_SLUGS,
+  DEFAULT_BOUNTY_REPOS: () => DEFAULT_BOUNTY_REPOS,
   DEFAULT_GREENHOUSE_SLUGS: () => DEFAULT_GREENHOUSE_SLUGS,
   DEFAULT_LEVER_SLUGS: () => DEFAULT_LEVER_SLUGS,
+  EXAMPLE_BUYER: () => EXAMPLE_BUYER,
   FEEDS: () => FEEDS,
+  GRAPH: () => GRAPH,
   GREENHOUSE_SLUGS_BY_TIER: () => GREENHOUSE_SLUGS_BY_TIER,
   LEVER_SLUGS_BY_TIER: () => LEVER_SLUGS_BY_TIER,
   SYNONYMS: () => SYNONYMS,
   VOCABULARY: () => VOCABULARY,
+  VOCAB_NODES: () => VOCAB_NODES,
   aggregate: () => aggregate,
+  aggregateBounties: () => aggregateBounties,
   ashby: () => ashby,
+  buildGraph: () => buildGraph,
   buildIndex: () => buildIndex,
   buildReason: () => buildReason,
+  expandWeighted: () => expandWeighted,
   fetchGitHubProfile: () => fetchGitHubProfile,
   flattenTiers: () => flattenTiers,
+  getBuyer: () => getBuyer,
+  githubBounties: () => githubBounties,
   githubToFingerprint: () => githubToFingerprint,
   greenhouse: () => greenhouse,
   himalayas: () => himalayas,
   hn: () => hn,
+  isBounty: () => isBounty,
   lever: () => lever,
-  loadCoastalRoles: () => loadCoastalRoles,
+  loadPartnerRoles: () => loadPartnerRoles,
   match: () => match,
   matchOne: () => matchOne,
   normalize: () => normalize,
+  passesMaturityGate: () => passesMaturityGate,
+  validateGraph: () => validateGraph,
   wwr: () => wwr
 });
 var init_src = __esm({
@@ -1451,7 +1868,7 @@ var init_src = __esm({
     init_matcher();
     init_feeds();
     init_indexer();
-    init_coastal();
+    init_partners();
     init_github();
   }
 });
@@ -1550,10 +1967,10 @@ function migrateTagWeights(profile) {
   if (!profile.tagWeights) {
     profile.tagWeights = {};
   }
-  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const seed = profile.updatedAt ?? (/* @__PURE__ */ new Date()).toISOString();
   for (const tag of profile.skillTags) {
     if (!profile.tagWeights[tag]) {
-      profile.tagWeights[tag] = { count: 1, firstSeen: now, lastSeen: now, sessions: 1 };
+      profile.tagWeights[tag] = { count: 1, firstSeen: seed, lastSeen: seed, sessions: 1 };
     }
   }
 }
@@ -1579,7 +1996,7 @@ async function writeProfile(profile) {
   const blob = encrypt2(JSON.stringify(profile), key);
   writeFileSync2(PROFILE_FILE, JSON.stringify(blob, null, 2), { encoding: "utf8" });
 }
-function accumulateSession(profile, tags, isEmployerContext2, inferredSeniority) {
+function accumulateSession(profile, tags, isEmployerContext2, inferredSeniority, seniorityIsAuthoritative = false) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
   let filtered = normalize(tags);
   if (isEmployerContext2) {
@@ -1597,7 +2014,9 @@ function accumulateSession(profile, tags, isEmployerContext2, inferredSeniority)
     }
   }
   if (inferredSeniority && !isEmployerContext2) {
-    profile.seniority = inferredSeniority;
+    if (seniorityIsAuthoritative || !profile.github) {
+      profile.seniority = inferredSeniority;
+    }
   }
 }
 async function accumulateTags(rawTokens, isEmployerContext2, inferredSeniority) {
@@ -1605,12 +2024,14 @@ async function accumulateTags(rawTokens, isEmployerContext2, inferredSeniority)
   accumulateSession(profile, rawTokens, isEmployerContext2, inferredSeniority);
   await writeProfile(profile);
 }
-function accumulateGitHubTags(profile, tags) {
+function accumulateGitHubTags(profile, tags, inferredSeniority) {
   accumulateSession(
     profile,
     tags,
     /* isEmployerContext */
-    false
+    false,
+    inferredSeniority,
+    true
   );
 }
 async function listSavedJobs() {
@@ -1726,20 +2147,17 @@ async function runLogin() {
     if (process.env["TERMINALHIRE_GITHUB_MOCK"] === "1" || process.env["TERMINALHIRE_GITHUB_MOCK"] === "1" || process.env["JPI_GITHUB_MOCK"] === "1") {
       const { createRequire: createRequire2 } = await import("module");
       const { fileURLToPath: fileURLToPath7 } = await import("url");
-      const { join: join14, dirname: dirname3 } = await import("path");
+      const { join: join15, dirname: dirname3 } = await import("path");
       const __dirname6 = fileURLToPath7(new URL(".", import.meta.url));
-      const fixturePath = join14(__dirname6, "../../fixtures/github-sample.json");
-      const { readFileSync: readFileSync13 } = await import("fs");
-      ghProfile = JSON.parse(readFileSync13(fixturePath, "utf8"));
+      const fixturePath = join15(__dirname6, "../../fixtures/github-sample.json");
+      const { readFileSync: readFileSync14 } = await import("fs");
+      ghProfile = JSON.parse(readFileSync14(fixturePath, "utf8"));
     } else {
       ghProfile = await fetchGitHubProfile2(login, token);
     }
     const fragment = githubToFingerprint2(ghProfile);
     const profile = await readProfile2();
-    accumulateGitHubTags2(profile, fragment.skillTags);
-    if (fragment.seniorityBand && !profile.seniority) {
-      profile.seniority = fragment.seniorityBand;
-    }
+    accumulateGitHubTags2(profile, fragment.skillTags, fragment.seniorityBand);
     if (!profile.displayName && ghProfile.name) {
       profile.displayName = ghProfile.name;
     }
@@ -1975,7 +2393,9 @@ async function run2() {
     }
     console.log(`Fetching job index from ${API_URL}/api/index...`);
     const index = await fetchIndex();
-    const jobs = index.jobs ?? [];
+    const allListings = index.jobs ?? [];
+    const jobs = allListings.filter((j) => j.source !== "bounty");
+    const bountyCount = allListings.length - jobs.length;
     if (jobs.length === 0) {
       console.log("No jobs in index. Try again later.");
       return;
@@ -2001,6 +2421,12 @@ async function run2() {
     for (let i = 0; i < results.length; i++) {
       printResult(i, results[i]);
     }
+    if (bountyCount > 0) {
+      console.log(
+        `
+\u26A1 ${bountyCount} bount${bountyCount === 1 ? "y" : "ies"} you could knock out today \u2014 run: terminalhire bounties`
+      );
+    }
     if (!process.stdin.isTTY) {
       return;
     }
@@ -2034,7 +2460,7 @@ var init_jpi_jobs = __esm({
     TERMINALHIRE_DIR3 = join4(homedir3(), ".terminalhire");
     INDEX_CACHE_FILE = join4(TERMINALHIRE_DIR3, "index-cache.json");
     INDEX_TTL_MS = 15 * 60 * 1e3;
-    API_URL = process.env["TERMINALHIRE_API_URL"] ?? process.env["TERMINALHIRE_API_URL"] ?? process.env["JPI_API_URL"] ?? "https://terminalhire.com";
+    API_URL = process.env["TERMINALHIRE_API_URL"] ?? process.env["JPI_API_URL"] ?? "https://terminalhire.com";
     DEFAULT_LIMIT = 10;
     args = process.argv.slice(2);
     limitArg = args.indexOf("--limit");
@@ -2044,25 +2470,163 @@ var init_jpi_jobs = __esm({
   }
 });
 
-// bin/jpi-profile.js
-var jpi_profile_exports = {};
-__export(jpi_profile_exports, {
+// bin/jpi-bounties.js
+var jpi_bounties_exports = {};
+__export(jpi_bounties_exports, {
   run: () => run3
 });
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync4, mkdirSync as mkdirSync4 } from "fs";
+import { join as join5 } from "path";
+import { homedir as homedir4 } from "os";
 import { createInterface as createInterface2 } from "readline";
+function readIndexCache2() {
+  try {
+    const entry = JSON.parse(readFileSync5(INDEX_CACHE_FILE2, "utf8"));
+    if (Date.now() - entry.ts < INDEX_TTL_MS2) return entry.index;
+    return null;
+  } catch {
+    return null;
+  }
+}
+function writeIndexCache2(index) {
+  mkdirSync4(TERMINALHIRE_DIR4, { recursive: true });
+  writeFileSync4(INDEX_CACHE_FILE2, JSON.stringify({ ts: Date.now(), index }), "utf8");
+}
+async function fetchIndex2() {
+  const cached = readIndexCache2();
+  if (cached) return cached;
+  const res = await fetch(`${API_URL2}/api/index`, { signal: AbortSignal.timeout(1e4) });
+  if (!res.ok) throw new Error(`/api/index returned ${res.status}`);
+  const index = await res.json();
+  writeIndexCache2(index);
+  return index;
+}
 function prompt2(question) {
   const rl = createInterface2({ input: process.stdin, output: process.stdout });
   return new Promise((resolve2) => {
     rl.question(question, (answer) => {
       rl.close();
-      resolve2(answer.trim());
+      resolve2(answer.trim().toLowerCase());
     });
   });
 }
+function formatAmount(b) {
+  return b.amountUSD != null ? "$" + b.amountUSD.toLocaleString() : "$\u2014";
+}
+function linkTitle2(title, url) {
+  const isTTY = process.stdout.isTTY;
+  const noColor = process.env["NO_COLOR"] !== void 0;
+  if (isTTY && !noColor && url) return `\x1B]8;;${url}\x1B\\${title}\x1B]8;;\x1B\\`;
+  return url ? `${title} (${url})` : title;
+}
+function printBounty(i, job, score, reason, matchedTags) {
+  const b = job.bounty ?? {};
+  const stars = b.repoStars != null ? ` \xB7 ${b.repoStars}\u2605` : "";
+  const effort = b.estimatedEffort ? ` \xB7 ${EFFORT_LABEL[b.estimatedEffort]}` : "";
+  const scoreStr = score > 0 ? ` \xB7 match ${Math.round(score * 100)}%` : "";
+  console.log(`
+${i + 1}. ${linkTitle2(job.title, job.url)}`);
+  console.log(`   ${formatAmount(b)}${effort} \xB7 ${b.repoFullName ?? job.company}${stars}${scoreStr}`);
+  if (reason) console.log(`   ${reason}`);
+  if (matchedTags && matchedTags.length) console.log(`   Tags matched: ${matchedTags.slice(0, 5).join(", ")}`);
+  console.log(`   id: ${job.id}`);
+  console.log(`   Claim: ${b.claimUrl ?? job.url}`);
+}
 async function run3() {
+  try {
+    console.log(`Fetching bounty index from ${API_URL2}/api/index...`);
+    const index = await fetchIndex2();
+    let bounties = (index.jobs ?? []).filter((j) => j.source === "bounty");
+    if (PRICED_ONLY) bounties = bounties.filter((j) => j.bounty?.amountUSD != null);
+    if (bounties.length === 0) {
+      console.log("\nNo bounties available right now. Try again later \u2014 supply refreshes through the day.");
+      return;
+    }
+    const ranked = /* @__PURE__ */ new Map();
+    try {
+      const { readProfile: readProfile2, profileToFingerprint: profileToFingerprint2 } = await Promise.resolve().then(() => (init_profile(), profile_exports));
+      const { match: match2 } = await Promise.resolve().then(() => (init_src(), src_exports));
+      const profile = await readProfile2();
+      if (profile.skillTags.length > 0) {
+        const fp = profileToFingerprint2(profile);
+        for (const r of match2(fp, bounties, bounties.length)) {
+          ranked.set(r.job.id, { score: r.score, reason: r.reason, matchedTags: r.matchedTags });
+        }
+      }
+    } catch {
+    }
+    const score = (j) => ranked.get(j.id)?.score ?? 0;
+    const amt = (j) => j.bounty?.amountUSD ?? -1;
+    bounties.sort((a, b) => score(b) - score(a) || amt(b) - amt(a));
+    const shown = SHOW_ALL2 ? bounties : bounties.slice(0, LIMIT2);
+    const matchedCount = bounties.filter((j) => score(j) > 0).length;
+    console.log(
+      `
+\u26A1 ${bounties.length} bount${bounties.length === 1 ? "y" : "ies"} you could knock out` + (matchedCount ? ` \u2014 ${matchedCount} matched to your profile` : "") + ` (local rank \u2014 no data sent)
+`
+    );
+    for (let i = 0; i < shown.length; i++) {
+      const r = ranked.get(shown[i].id);
+      printBounty(i, shown[i], r?.score ?? 0, r?.reason, r?.matchedTags);
+    }
+    if (!SHOW_ALL2 && bounties.length > shown.length) {
+      console.log(`
+\u2026and ${bounties.length - shown.length} more \u2014 run with --all to see every bounty.`);
+    }
+    if (!process.stdin.isTTY) return;
+    console.log("\n" + "\u2500".repeat(70));
+    const pick = await prompt2(`
+Enter a number to open a bounty's claim page, or press Enter to exit: `);
+    const idx = parseInt(pick, 10) - 1;
+    if (Number.isNaN(idx) || idx < 0 || idx >= shown.length) return;
+    const chosen = shown[idx];
+    console.log(
+      `
+Open this to claim/work the bounty (you go straight to the source \u2014 we never touch payment):
+  ${chosen.bounty?.claimUrl ?? chosen.url}`
+    );
+  } catch (err) {
+    console.error("terminalhire bounties error:", err.message ?? err);
+    process.exit(1);
+  }
+}
+var TERMINALHIRE_DIR4, INDEX_CACHE_FILE2, INDEX_TTL_MS2, API_URL2, DEFAULT_LIMIT2, args2, limitArg2, LIMIT2, PRICED_ONLY, SHOW_ALL2, EFFORT_LABEL;
+var init_jpi_bounties = __esm({
+  "bin/jpi-bounties.js"() {
+    "use strict";
+    TERMINALHIRE_DIR4 = join5(homedir4(), ".terminalhire");
+    INDEX_CACHE_FILE2 = join5(TERMINALHIRE_DIR4, "index-cache.json");
+    INDEX_TTL_MS2 = 15 * 60 * 1e3;
+    API_URL2 = process.env["TERMINALHIRE_API_URL"] ?? process.env["JPI_API_URL"] ?? "https://terminalhire.com";
+    DEFAULT_LIMIT2 = 15;
+    args2 = process.argv.slice(2);
+    limitArg2 = args2.indexOf("--limit");
+    LIMIT2 = limitArg2 !== -1 ? parseInt(args2[limitArg2 + 1] ?? "15", 10) : DEFAULT_LIMIT2;
+    PRICED_ONLY = args2.includes("--priced");
+    SHOW_ALL2 = args2.includes("--all");
+    EFFORT_LABEL = { small: "small (~\xBD day)", medium: "medium (~1 day)", large: "large (multi-day)" };
+  }
+});
+
+// bin/jpi-profile.js
+var jpi_profile_exports = {};
+__export(jpi_profile_exports, {
+  run: () => run4
+});
+import { createInterface as createInterface3 } from "readline";
+function prompt3(question) {
+  const rl = createInterface3({ input: process.stdin, output: process.stdout });
+  return new Promise((resolve2) => {
+    rl.question(question, (answer) => {
+      rl.close();
+      resolve2(answer.trim());
+    });
+  });
+}
+async function run4() {
   const { readProfile: readProfile2, writeProfile: writeProfile2, deleteProfile: deleteProfile2 } = await Promise.resolve().then(() => (init_profile(), profile_exports));
-  const args2 = process.argv.slice(2);
-  if (args2.includes("--show")) {
+  const args3 = process.argv.slice(2);
+  if (args3.includes("--show")) {
     const profile = await readProfile2();
     console.log("\n\u2726 terminalhire local profile (encrypted at rest \u2014 shown here for your review only)\n");
     console.log("  Skill tags:      " + (profile.skillTags.length > 0 ? profile.skillTags.join(", ") : "(none yet)"));
@@ -2092,9 +2656,9 @@ async function run3() {
     console.log("\nThis profile NEVER leaves your machine except in a consented lead payload.");
     return;
   }
-  if (args2.includes("--delete")) {
+  if (args3.includes("--delete")) {
     console.log("\nThis will permanently delete your local terminalhire profile and encryption key.");
-    const answer = await prompt2('Type "yes" to confirm: ');
+    const answer = await prompt3('Type "yes" to confirm: ');
     if (answer !== "yes") {
       console.log("Aborted.");
       process.exit(0);
@@ -2103,17 +2667,17 @@ async function run3() {
     console.log("Profile and key deleted from ~/.terminalhire/");
     return;
   }
-  if (args2.includes("--edit")) {
+  if (args3.includes("--edit")) {
     const profile = await readProfile2();
     console.log("\n\u2726 terminalhire profile editor (press Enter to keep current value)\n");
-    const name = await prompt2(`Display name [${profile.displayName ?? "not set"}]: `);
+    const name = await prompt3(`Display name [${profile.displayName ?? "not set"}]: `);
     if (name) profile.displayName = name;
-    const email = await prompt2(`Contact email [${profile.contactEmail ?? "not set"}]: `);
+    const email = await prompt3(`Contact email [${profile.contactEmail ?? "not set"}]: `);
     if (email) profile.contactEmail = email;
-    const remote = await prompt2(`Remote only? (y/n) [${profile.remoteOnly ? "y" : "n"}]: `);
+    const remote = await prompt3(`Remote only? (y/n) [${profile.remoteOnly ? "y" : "n"}]: `);
     if (remote === "y") profile.remoteOnly = true;
     if (remote === "n") profile.remoteOnly = false;
-    const floor = await prompt2(`Comp floor USD [${profile.compFloorUsd ?? "not set"}]: `);
+    const floor = await prompt3(`Comp floor USD [${profile.compFloorUsd ?? "not set"}]: `);
     if (floor && !isNaN(parseInt(floor, 10))) profile.compFloorUsd = parseInt(floor, 10);
     await writeProfile2(profile);
     console.log("\nProfile updated (encrypted at ~/.terminalhire/profile.enc)");
@@ -2132,84 +2696,106 @@ var signal_exports = {};
 __export(signal_exports, {
   extractFingerprint: () => extractFingerprint
 });
-import { readFileSync as readFileSync5, readdirSync } from "fs";
-import { execSync } from "child_process";
-import { join as join5 } from "path";
-function safeExec(cmd) {
+import { readFileSync as readFileSync6, readdirSync } from "fs";
+import { execFileSync } from "child_process";
+import { join as join6 } from "path";
+function safeGit(args3, cwd) {
   try {
-    return execSync(cmd, { timeout: 2e3, stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
+    return execFileSync("git", ["-C", cwd, ...args3], {
+      timeout: 2e3,
+      stdio: ["ignore", "pipe", "ignore"]
+    }).toString().trim();
   } catch {
     return "";
   }
 }
 function isEmployerContext(cwd) {
-  const remote = safeExec('git -C "' + cwd + '" remote get-url origin 2>/dev/null');
+  const inRepo = safeGit(["rev-parse", "--is-inside-work-tree"], cwd);
+  if (inRepo !== "true") return false;
+  const remote = safeGit(["remote", "get-url", "origin"], cwd);
   if (remote) {
-    try {
-      const sshMatch = remote.match(/^git@([^:]+):/);
-      const httpsMatch = remote.match(/^https?:\/\/([^/]+)/);
-      const host = (sshMatch?.[1] ?? httpsMatch?.[1] ?? "").toLowerCase();
-      if (host && !PERSONAL_GIT_HOSTS.has(host)) {
-        return true;
-      }
-    } catch {
-    }
-  }
-  const email = safeExec('git -C "' + cwd + '" config user.email 2>/dev/null');
-  if (email) {
-    const domain = email.split("@")[1]?.toLowerCase() ?? "";
-    if (domain && !PERSONAL_EMAIL_DOMAINS.has(domain)) {
-      return true;
-    }
-  }
+    const sshMatch = remote.match(/^git@([^:]+):/);
+    const httpsMatch = remote.match(/^https?:\/\/([^/]+)/);
+    const host = (sshMatch?.[1] ?? httpsMatch?.[1] ?? "").toLowerCase();
+    if (host) return !PERSONAL_GIT_HOSTS.has(host);
+  }
+  const email = safeGit(["config", "user.email"], cwd);
+  const domain = email.split("@")[1]?.toLowerCase() ?? "";
+  if (domain) return !PERSONAL_EMAIL_DOMAINS.has(domain);
   return false;
 }
 function readJsonSafe(path) {
   try {
-    return JSON.parse(readFileSync5(path, "utf8"));
+    return JSON.parse(readFileSync6(path, "utf8"));
   } catch {
     return null;
   }
 }
 function readFileSafe(path) {
   try {
-    return readFileSync5(path, "utf8");
+    return readFileSync6(path, "utf8");
   } catch {
     return "";
   }
 }
 function tokensFromPackageJson(cwd) {
-  const pkg = readJsonSafe(join5(cwd, "package.json"));
+  const pkg = readJsonSafe(join6(cwd, "package.json"));
   if (!pkg || typeof pkg !== "object") return [];
   const p = pkg;
   const deps = {
     ...typeof p["dependencies"] === "object" ? p["dependencies"] : {},
-    ...typeof p["devDependencies"] === "object" ? p["devDependencies"] : {}
+    ...typeof p["devDependencies"] === "object" ? p["devDependencies"] : {},
+    ...typeof p["peerDependencies"] === "object" ? p["peerDependencies"] : {}
   };
   return Object.keys(deps);
 }
+function workspaceMemberDirs(cwd) {
+  const dirs = [cwd];
+  for (const group of ["apps", "packages"]) {
+    try {
+      const groupDir = join6(cwd, group);
+      for (const e of readdirSync(groupDir, { withFileTypes: true })) {
+        if (e.isDirectory() && !e.isSymbolicLink()) dirs.push(join6(groupDir, e.name));
+      }
+    } catch {
+    }
+  }
+  return dirs;
+}
 function tokensFromRequirementsTxt(cwd) {
-  const content = readFileSafe(join5(cwd, "requirements.txt"));
+  const content = readFileSafe(join6(cwd, "requirements.txt"));
   if (!content) return [];
   return content.split("\n").map((l) => l.trim().split(/[>=<!\[;]/)[0].trim().toLowerCase()).filter(Boolean);
 }
 function tokensFromGoMod(cwd) {
-  const content = readFileSafe(join5(cwd, "go.mod"));
-  if (!content) return ["go"];
+  const content = readFileSafe(join6(cwd, "go.mod"));
+  if (!content) return [];
   const requires = Array.from(content.matchAll(/^\s+([^\s]+)\s+v/gm)).map((m) => m[1].split("/").pop() ?? "").filter(Boolean);
   return ["go", ...requires];
 }
 function tokensFromCargoToml(cwd) {
-  const content = readFileSafe(join5(cwd, "Cargo.toml"));
+  const content = readFileSafe(join6(cwd, "Cargo.toml"));
   if (!content) return [];
-  const deps = Array.from(content.matchAll(/^([a-zA-Z0-9_-]+)\s*=/gm)).map((m) => m[1].toLowerCase());
+  const deps = [];
+  let inDeps = false;
+  for (const line of content.split("\n")) {
+    const trimmed = line.trim();
+    const section = trimmed.match(/^\[([^\]]+)\]/);
+    if (section) {
+      inDeps = /(^|\.)(dependencies|dev-dependencies|build-dependencies)$/.test(section[1].trim());
+      continue;
+    }
+    if (!inDeps) continue;
+    const key = trimmed.match(/^([a-zA-Z0-9_-]+)\s*=/);
+    if (key) deps.push(key[1].toLowerCase());
+  }
   return ["rust", ...deps];
 }
 function tokensFromFileExtensions(cwd) {
   const tokens = [];
   const scanDirs = [cwd];
   try {
-    const srcDir = join5(cwd, "src");
+    const srcDir = join6(cwd, "src");
     readdirSync(srcDir);
     scanDirs.push(srcDir);
   } catch {
@@ -2242,11 +2828,7 @@ function inferSeniority3(rawTokens) {
     "opentelemetry",
     "prometheus",
     "grafana",
-    "microservices",
-    "api-design",
-    "security",
-    "oauth",
-    "payments"
+    "microservices"
   ]);
   const midSignals = /* @__PURE__ */ new Set([
     "docker",
@@ -2256,7 +2838,11 @@ function inferSeniority3(rawTokens) {
     "postgresql",
     "redis",
     "graphql",
-    "trpc"
+    "trpc",
+    "api-design",
+    "security",
+    "oauth",
+    "payments"
   ]);
   const normalized = new Set(normalize(rawTokens));
   const seniorHits = [...normalized].filter((t) => seniorSignals.has(t)).length;
@@ -2267,13 +2853,16 @@ function inferSeniority3(rawTokens) {
 }
 function extractFingerprint(cwd) {
   const employer = isEmployerContext(cwd);
-  const rawTokens = [
-    ...tokensFromPackageJson(cwd),
-    ...tokensFromRequirementsTxt(cwd),
-    ...tokensFromGoMod(cwd),
-    ...tokensFromCargoToml(cwd),
-    ...tokensFromFileExtensions(cwd)
-  ];
+  const rawTokens = [];
+  for (const dir of workspaceMemberDirs(cwd)) {
+    rawTokens.push(
+      ...tokensFromPackageJson(dir),
+      ...tokensFromRequirementsTxt(dir),
+      ...tokensFromGoMod(dir),
+      ...tokensFromCargoToml(dir),
+      ...tokensFromFileExtensions(dir)
+    );
+  }
   let skillTags = normalize(rawTokens);
   if (employer) {
     skillTags = skillTags.filter((t) => LANGUAGE_TAGS2.has(t));
@@ -2367,13 +2956,13 @@ var init_signal = __esm({
 // bin/jpi-learn.js
 var jpi_learn_exports = {};
 __export(jpi_learn_exports, {
-  run: () => run4
+  run: () => run5
 });
-async function run4() {
+async function run5() {
   try {
-    const args2 = process.argv.slice(2);
-    const cwdIdx = args2.indexOf("--cwd");
-    const cwd = cwdIdx !== -1 && args2[cwdIdx + 1] ? args2[cwdIdx + 1] : process.cwd();
+    const args3 = process.argv.slice(2);
+    const cwdIdx = args3.indexOf("--cwd");
+    const cwd = cwdIdx !== -1 && args3[cwdIdx + 1] ? args3[cwdIdx + 1] : process.cwd();
     const { extractFingerprint: extractFingerprint2 } = await Promise.resolve().then(() => (init_signal(), signal_exports));
     const { readProfile: readProfile2, writeProfile: writeProfile2, accumulateSession: accumulateSession2 } = await Promise.resolve().then(() => (init_profile(), profile_exports));
     const fingerprint = extractFingerprint2(cwd);
@@ -2396,7 +2985,7 @@ var init_jpi_learn = __esm({
     "use strict";
     isMain = process.argv[1]?.endsWith("jpi-learn.js") || process.argv[1]?.endsWith("jpi-learn");
     if (isMain) {
-      run4();
+      run5();
     }
   }
 });
@@ -2404,23 +2993,23 @@ var init_jpi_learn = __esm({
 // bin/jpi-config.js
 var jpi_config_exports = {};
 __export(jpi_config_exports, {
-  run: () => run5
+  run: () => run6
 });
-import { readFileSync as readFileSync6, writeFileSync as writeFileSync4, mkdirSync as mkdirSync4, existsSync as existsSync4 } from "fs";
-import { join as join6 } from "path";
-import { homedir as homedir4 } from "os";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync5, mkdirSync as mkdirSync5, existsSync as existsSync4 } from "fs";
+import { join as join7 } from "path";
+import { homedir as homedir5 } from "os";
 function readConfig() {
   try {
     if (!existsSync4(CONFIG_FILE)) return { ...DEFAULT_CONFIG };
-    return { ...DEFAULT_CONFIG, ...JSON.parse(readFileSync6(CONFIG_FILE, "utf8")) };
+    return { ...DEFAULT_CONFIG, ...JSON.parse(readFileSync7(CONFIG_FILE, "utf8")) };
   } catch {
     return { ...DEFAULT_CONFIG };
   }
 }
 function writeConfig(patch) {
-  mkdirSync4(TERMINALHIRE_DIR4, { recursive: true });
+  mkdirSync5(TERMINALHIRE_DIR5, { recursive: true });
   const merged = { ...readConfig(), ...patch };
-  writeFileSync4(CONFIG_FILE, JSON.stringify(merged, null, 2) + "\n", "utf8");
+  writeFileSync5(CONFIG_FILE, JSON.stringify(merged, null, 2) + "\n", "utf8");
 }
 function parseNudgeMode(raw) {
   if (raw === "session" || raw === "always") return raw;
@@ -2428,9 +3017,9 @@ function parseNudgeMode(raw) {
   if (m && parseInt(m[1], 10) >= 1) return raw;
   return null;
 }
-async function run5() {
-  const args2 = process.argv.slice(2);
-  const filtered = args2[0] === "config" ? args2.slice(1) : args2;
+async function run6() {
+  const args3 = process.argv.slice(2);
+  const filtered = args3[0] === "config" ? args3.slice(1) : args3;
   if (filtered.includes("--show") || filtered.length === 0) {
     const cfg = readConfig();
     const envOverride = process.env["TERMINALHIRE_NUDGE"];
@@ -2471,12 +3060,12 @@ async function run5() {
   console.error("       terminalhire config --show");
   process.exit(1);
 }
-var TERMINALHIRE_DIR4, CONFIG_FILE, DEFAULT_CONFIG;
+var TERMINALHIRE_DIR5, CONFIG_FILE, DEFAULT_CONFIG;
 var init_jpi_config = __esm({
   "bin/jpi-config.js"() {
     "use strict";
-    TERMINALHIRE_DIR4 = join6(homedir4(), ".terminalhire");
-    CONFIG_FILE = join6(TERMINALHIRE_DIR4, "config.json");
+    TERMINALHIRE_DIR5 = join7(homedir5(), ".terminalhire");
+    CONFIG_FILE = join7(TERMINALHIRE_DIR5, "config.json");
     DEFAULT_CONFIG = { nudge: "session" };
   }
 });
@@ -2499,25 +3088,25 @@ __export(spinner_exports, {
   readSpinnerConfig: () => readSpinnerConfig
 });
 import {
-  readFileSync as readFileSync7,
-  writeFileSync as writeFileSync5,
+  readFileSync as readFileSync8,
+  writeFileSync as writeFileSync6,
   existsSync as existsSync5,
-  mkdirSync as mkdirSync5,
+  mkdirSync as mkdirSync6,
   renameSync
 } from "fs";
-import { join as join7, dirname } from "path";
-import { homedir as homedir5 } from "os";
+import { join as join8, dirname } from "path";
+import { homedir as homedir6 } from "os";
 function readJson(path, fallback) {
   try {
-    return existsSync5(path) ? JSON.parse(readFileSync7(path, "utf8")) : fallback;
+    return existsSync5(path) ? JSON.parse(readFileSync8(path, "utf8")) : fallback;
   } catch {
     return fallback;
   }
 }
 function atomicWriteJson(path, obj) {
-  mkdirSync5(dirname(path), { recursive: true });
+  mkdirSync6(dirname(path), { recursive: true });
   const tmp = `${path}.tmp-${process.pid}`;
-  writeFileSync5(tmp, JSON.stringify(obj, null, 2) + "\n", "utf8");
+  writeFileSync6(tmp, JSON.stringify(obj, null, 2) + "\n", "utf8");
   renameSync(tmp, path);
 }
 function titleCase(s) {
@@ -2748,10 +3337,10 @@ var TH_DIR, CLAUDE_SETTINGS, CONFIG_FILE2, SPINNER_STATE_FILE, SPINNER_DEFAULTS,
 var init_spinner = __esm({
   "bin/spinner.js"() {
     "use strict";
-    TH_DIR = process.env["TERMINALHIRE_DIR"] || join7(homedir5(), ".terminalhire");
-    CLAUDE_SETTINGS = process.env["TERMINALHIRE_CLAUDE_SETTINGS"] || join7(homedir5(), ".claude", "settings.json");
-    CONFIG_FILE2 = join7(TH_DIR, "config.json");
-    SPINNER_STATE_FILE = join7(TH_DIR, "spinner-state.json");
+    TH_DIR = process.env["TERMINALHIRE_DIR"] || join8(homedir6(), ".terminalhire");
+    CLAUDE_SETTINGS = process.env["TERMINALHIRE_CLAUDE_SETTINGS"] || join8(homedir6(), ".claude", "settings.json");
+    CONFIG_FILE2 = join8(TH_DIR, "config.json");
+    SPINNER_STATE_FILE = join8(TH_DIR, "spinner-state.json");
     SPINNER_DEFAULTS = { enabled: false, mode: "append", max: 6, frequency: "sometimes" };
     VERB_INTROS = ["Matched:", "You\u2019d fit:", "Worth a look:", "On your radar:", "Fits your stack:"];
   }
@@ -2760,29 +3349,29 @@ var init_spinner = __esm({
 // bin/jpi-spinner.js
 var jpi_spinner_exports = {};
 __export(jpi_spinner_exports, {
-  run: () => run6
+  run: () => run7
 });
 import {
-  readFileSync as readFileSync8,
-  writeFileSync as writeFileSync6,
+  readFileSync as readFileSync9,
+  writeFileSync as writeFileSync7,
   copyFileSync,
   existsSync as existsSync6,
-  mkdirSync as mkdirSync6
+  mkdirSync as mkdirSync7
 } from "fs";
-import { join as join8 } from "path";
-import { homedir as homedir6 } from "os";
-import { createInterface as createInterface3 } from "readline";
+import { join as join9 } from "path";
+import { homedir as homedir7 } from "os";
+import { createInterface as createInterface4 } from "readline";
 function readConfig2() {
   try {
-    return existsSync6(CONFIG_FILE3) ? JSON.parse(readFileSync8(CONFIG_FILE3, "utf8")) : {};
+    return existsSync6(CONFIG_FILE3) ? JSON.parse(readFileSync9(CONFIG_FILE3, "utf8")) : {};
   } catch {
     return {};
   }
 }
 function writeConfig2(patch) {
-  mkdirSync6(TH_DIR2, { recursive: true });
+  mkdirSync7(TH_DIR2, { recursive: true });
   const merged = { ...readConfig2(), ...patch };
-  writeFileSync6(CONFIG_FILE3, JSON.stringify(merged, null, 2) + "\n", "utf8");
+  writeFileSync7(CONFIG_FILE3, JSON.stringify(merged, null, 2) + "\n", "utf8");
 }
 function backupSettings() {
   if (!existsSync6(SETTINGS_PATH)) return null;
@@ -2792,7 +3381,7 @@ function backupSettings() {
   return backupPath;
 }
 function ask(question) {
-  const rl = createInterface3({ input: process.stdin, output: process.stdout });
+  const rl = createInterface4({ input: process.stdin, output: process.stdout });
   return new Promise((res) => {
     rl.question(question, (answer) => {
       rl.close();
@@ -2802,20 +3391,20 @@ function ask(question) {
 }
 function readTopMatches() {
   try {
-    const c = JSON.parse(readFileSync8(CACHE_FILE, "utf8"));
+    const c = JSON.parse(readFileSync9(CACHE_FILE, "utf8"));
     return Array.isArray(c.topMatches) ? c.topMatches : [];
   } catch {
     return [];
   }
 }
-async function run6() {
-  const args2 = process.argv.slice(2).filter((a) => a !== "spinner");
-  const has = (f) => args2.includes(f);
+async function run7() {
+  const args3 = process.argv.slice(2).filter((a) => a !== "spinner");
+  const has = (f) => args3.includes(f);
   const val = (f) => {
-    const i = args2.indexOf(f);
-    return i >= 0 ? args2[i + 1] : void 0;
+    const i = args3.indexOf(f);
+    return i >= 0 ? args3[i + 1] : void 0;
   };
-  if (has("--show") || args2.length === 0) {
+  if (has("--show") || args3.length === 0) {
     const sc = readSpinnerConfig();
     console.log("");
     console.log("terminalhire spinner \u2014 job matches in the Claude Code spinner line");
@@ -2945,24 +3534,25 @@ var init_jpi_spinner = __esm({
   "bin/jpi-spinner.js"() {
     "use strict";
     init_spinner();
-    TH_DIR2 = process.env["TERMINALHIRE_DIR"] || join8(homedir6(), ".terminalhire");
-    CONFIG_FILE3 = join8(TH_DIR2, "config.json");
-    SETTINGS_PATH = process.env["TERMINALHIRE_CLAUDE_SETTINGS"] || join8(homedir6(), ".claude", "settings.json");
-    CACHE_FILE = join8(TH_DIR2, "index-cache.json");
+    TH_DIR2 = process.env["TERMINALHIRE_DIR"] || join9(homedir7(), ".terminalhire");
+    CONFIG_FILE3 = join9(TH_DIR2, "config.json");
+    SETTINGS_PATH = process.env["TERMINALHIRE_CLAUDE_SETTINGS"] || join9(homedir7(), ".claude", "settings.json");
+    CACHE_FILE = join9(TH_DIR2, "index-cache.json");
   }
 });
 
 // bin/jpi-sync.js
 var jpi_sync_exports = {};
 __export(jpi_sync_exports, {
-  run: () => run7
+  run: () => run8
 });
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync7, mkdirSync as mkdirSync7, existsSync as existsSync7, rmSync as rmSync2 } from "fs";
-import { join as join9 } from "path";
-import { homedir as homedir7 } from "os";
-import { createInterface as createInterface4 } from "readline";
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync8, mkdirSync as mkdirSync8, existsSync as existsSync7, rmSync as rmSync2 } from "fs";
+import { join as join10 } from "path";
+import { homedir as homedir8, hostname as osHostname } from "os";
+import { createInterface as createInterface5 } from "readline";
+import { spawn } from "child_process";
 function ask2(question) {
-  const rl = createInterface4({ input: process.stdin, output: process.stdout });
+  const rl = createInterface5({ input: process.stdin, output: process.stdout });
   return new Promise((res) => {
     rl.question(question, (answer) => {
       rl.close();
@@ -2972,14 +3562,14 @@ function ask2(question) {
 }
 function readMarker() {
   try {
-    return existsSync7(TIER1_MARKER) ? JSON.parse(readFileSync9(TIER1_MARKER, "utf8")) : null;
+    return existsSync7(TIER1_MARKER) ? JSON.parse(readFileSync10(TIER1_MARKER, "utf8")) : null;
   } catch {
     return null;
   }
 }
 function writeMarker(marker) {
-  mkdirSync7(TH_DIR3, { recursive: true });
-  writeFileSync7(TIER1_MARKER, JSON.stringify(marker, null, 2) + "\n", "utf8");
+  mkdirSync8(TH_DIR3, { recursive: true });
+  writeFileSync8(TIER1_MARKER, JSON.stringify(marker, null, 2) + "\n", "utf8");
 }
 function clearMarker() {
   try {
@@ -3003,14 +3593,14 @@ function buildConsentFields(profile) {
   }
   return fields;
 }
-function renderConsentCard(fields) {
+function renderPreview(fields) {
   console.log("");
   console.log("\u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
   console.log("\u2502   terminalhire \u2014 sync your profile (Tier-1, opt-in)            \u2502");
   console.log("\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
   console.log("");
-  console.log("  You are about to send the following data to");
-  console.log("  staqs (terminalhire.com):");
+  console.log("  The following data will be shared with staqs (terminalhire.com)");
+  console.log("  AFTER you authorize + consent in the browser:");
   console.log("");
   for (const f of fields) {
     const shown = Array.isArray(f.value) ? JSON.stringify(f.value) : String(f.value ?? "(not set)");
@@ -3029,6 +3619,30 @@ function renderConsentCard(fields) {
   console.log("  This is NOT required to use terminalhire.");
   console.log("");
 }
+function openInBrowser(url) {
+  let cmd;
+  let args3;
+  if (process.platform === "darwin") {
+    cmd = "open";
+    args3 = [url];
+  } else if (process.platform === "win32") {
+    cmd = "cmd";
+    args3 = ["/c", "start", "", url];
+  } else {
+    cmd = "xdg-open";
+    args3 = [url];
+  }
+  try {
+    const child = spawn(cmd, args3, { stdio: "ignore", detached: true });
+    child.on("error", () => {
+    });
+    child.unref();
+  } catch {
+  }
+}
+function sleep2(ms) {
+  return new Promise((res) => setTimeout(res, ms));
+}
 async function runPush() {
   const { readProfile: readProfile2 } = await Promise.resolve().then(() => (init_profile(), profile_exports));
   const profile = await readProfile2();
@@ -3040,15 +3654,91 @@ async function runPush() {
     process.exit(1);
   }
   const fields = buildConsentFields(profile);
-  renderConsentCard(fields);
-  let consentConfirmed = false;
-  const answer = await ask2('  Sync your profile to staqs (terminalhire.com)? Type "yes" to continue: ');
-  if (answer === "yes") {
-    consentConfirmed = true;
-  }
-  if (!consentConfirmed) {
-    console.log("\n  Aborted \u2014 nothing was sent.\n");
-    process.exit(0);
+  renderPreview(fields);
+  await new Promise((resolve2) => {
+    const rl = createInterface5({ input: process.stdin, output: process.stdout });
+    rl.question(
+      "  Press Enter to open your browser to authorize + consent (or Ctrl-C to cancel)... ",
+      () => {
+        rl.close();
+        resolve2();
+      }
+    );
+  });
+  console.log("");
+  console.log("  Starting browser verification...");
+  let begin;
+  try {
+    const r = await fetch(`${SYNC_BASE}/api/profile-sync/begin`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ hostname: osHostname() }),
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!r.ok) {
+      let detail = "";
+      try {
+        detail = (await r.json())?.message || "";
+      } catch {
+      }
+      console.error(`
+  Could not start sync: /api/profile-sync/begin returned ${r.status}. ${detail}`);
+      if (r.status === 503) console.error("  (Tier-1 sync is not enabled on the server yet.)");
+      process.exit(1);
+    }
+    begin = await r.json();
+  } catch (err) {
+    console.error(`
+  Could not start sync: ${err instanceof Error ? err.message : String(err)}`);
+    process.exit(1);
+  }
+  const { challenge, verifyUrl } = begin || {};
+  if (!challenge || !verifyUrl) {
+    console.error("\n  Could not start sync: malformed begin response.");
+    process.exit(1);
+  }
+  console.log("");
+  console.log("  Open this URL in your browser to authorize + consent:");
+  console.log(`    ${verifyUrl}`);
+  console.log("");
+  console.log("  (Attempting to open it automatically...)");
+  openInBrowser(verifyUrl);
+  console.log("  Waiting for browser verification...");
+  const deadline = Date.now() + POLL_TIMEOUT_MS;
+  let proofToken = null;
+  while (Date.now() < deadline) {
+    await sleep2(POLL_INTERVAL_MS);
+    let statusRes;
+    try {
+      statusRes = await fetch(
+        `${SYNC_BASE}/api/profile-sync/status?challenge=${encodeURIComponent(challenge)}`,
+        { signal: AbortSignal.timeout(1e4) }
+      );
+    } catch {
+      continue;
+    }
+    if (!statusRes.ok) {
+      if (statusRes.status === 503) {
+        console.error("\n  Tier-1 sync is not enabled on the server yet.\n");
+        process.exit(1);
+      }
+      continue;
+    }
+    let body;
+    try {
+      body = await statusRes.json();
+    } catch {
+      continue;
+    }
+    if (body && body.status === "verified" && body.proofToken) {
+      proofToken = body.proofToken;
+      break;
+    }
+  }
+  if (!proofToken) {
+    console.error("\n  Timed out waiting for browser verification (10 min).");
+    console.error("  Re-run `terminalhire sync --push` to try again.\n");
+    process.exit(1);
   }
   const consentedAt = (/* @__PURE__ */ new Date()).toISOString();
   const consentToken = {
@@ -3067,14 +3757,14 @@ async function runPush() {
   };
   const priorMarker = readMarker();
   const rowToken = priorMarker && priorMarker.deleteToken ? priorMarker.deleteToken : null;
-  const requestBody = { consentToken, profile: payloadProfile };
+  const requestBody = { consentToken, profile: payloadProfile, proofToken };
   if (rowToken) {
     requestBody.rowToken = rowToken;
   }
-  console.log("\n  Sending one-time snapshot...");
+  console.log("\n  Verified. Sending one-time snapshot...");
   let res;
   try {
-    res = await fetch(`${API_URL2}/api/profile-sync`, {
+    res = await fetch(`${SYNC_BASE}/api/profile-sync`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(requestBody),
@@ -3097,7 +3787,7 @@ async function runPush() {
       console.error("  (Tier-1 sync is not enabled on the server yet.)");
     }
     if (res.status === 403) {
-      console.error("  (This GitHub login was already claimed by a different push.)");
+      console.error("  (Ownership proof rejected, expired, or already used \u2014 re-run sync --push.)");
     }
     process.exit(1);
   }
@@ -3164,7 +3854,7 @@ async function runDelete() {
   console.log("\n  Requesting deletion...");
   let res;
   try {
-    res = await fetch(`${API_URL2}/api/profile-sync`, {
+    res = await fetch(`${API_URL3}/api/profile-sync`, {
       method: "DELETE",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ consentToken, login, deleteToken }),
@@ -3188,9 +3878,9 @@ async function runDelete() {
   clearMarker();
   console.log("\n  Synced profile deleted and local marker cleared.\n");
 }
-async function run7() {
-  const args2 = process.argv.slice(2).filter((a) => a !== "sync");
-  const has = (f) => args2.includes(f);
+async function run8() {
+  const args3 = process.argv.slice(2).filter((a) => a !== "sync");
+  const has = (f) => args3.includes(f);
   if (has("--push") || has("--enable")) {
     await runPush();
     return;
@@ -3214,13 +3904,16 @@ async function run7() {
   console.log("  This is NOT required to use terminalhire.");
   console.log("");
 }
-var TH_DIR3, TIER1_MARKER, API_URL2, CONSENT_VERSION;
+var TH_DIR3, TIER1_MARKER, API_URL3, SYNC_BASE, POLL_INTERVAL_MS, POLL_TIMEOUT_MS, CONSENT_VERSION;
 var init_jpi_sync = __esm({
   "bin/jpi-sync.js"() {
     "use strict";
-    TH_DIR3 = process.env["TERMINALHIRE_DIR"] || join9(homedir7(), ".terminalhire");
-    TIER1_MARKER = join9(TH_DIR3, "tier1.json");
-    API_URL2 = process.env["TERMINALHIRE_API_URL"] || process.env["JPI_API_URL"] || "https://terminalhire.com";
+    TH_DIR3 = process.env["TERMINALHIRE_DIR"] || join10(homedir8(), ".terminalhire");
+    TIER1_MARKER = join10(TH_DIR3, "tier1.json");
+    API_URL3 = process.env["TERMINALHIRE_API_URL"] || process.env["JPI_API_URL"] || "https://terminalhire.com";
+    SYNC_BASE = "https://www.terminalhire.com";
+    POLL_INTERVAL_MS = 2e3;
+    POLL_TIMEOUT_MS = 10 * 60 * 1e3;
     CONSENT_VERSION = 1;
   }
 });
@@ -3228,16 +3921,16 @@ var init_jpi_sync = __esm({
 // bin/jpi-init.js
 var jpi_init_exports = {};
 __export(jpi_init_exports, {
-  run: () => run8
+  run: () => run9
 });
 import { existsSync as existsSync8 } from "fs";
-import { join as join10, resolve } from "path";
+import { join as join11, resolve } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
-import { createInterface as createInterface5 } from "readline";
-import { spawnSync, spawn } from "child_process";
-import { homedir as homedir8 } from "os";
+import { createInterface as createInterface6 } from "readline";
+import { spawnSync, spawn as spawn2 } from "child_process";
+import { homedir as homedir9 } from "os";
 function ask3(question) {
-  const rl = createInterface5({ input: process.stdin, output: process.stdout });
+  const rl = createInterface6({ input: process.stdin, output: process.stdout });
   return new Promise((resolve2) => {
     rl.question(question, (answer) => {
       rl.close();
@@ -3246,18 +3939,18 @@ function ask3(question) {
   });
 }
 function resolveScript(name) {
-  const distPath = resolve(join10(__dirname2, "..", "..", "dist", "bin", `${name}.js`));
-  const legacyPath = resolve(join10(__dirname2, `${name}.js`));
+  const distPath = resolve(join11(__dirname2, "..", "..", "dist", "bin", `${name}.js`));
+  const legacyPath = resolve(join11(__dirname2, `${name}.js`));
   return existsSync8(distPath) ? distPath : legacyPath;
 }
 function resolveInstallJs() {
-  const fromDist = resolve(join10(__dirname2, "..", "..", "install.js"));
-  const fromBin = resolve(join10(__dirname2, "..", "install.js"));
+  const fromDist = resolve(join11(__dirname2, "..", "..", "install.js"));
+  const fromBin = resolve(join11(__dirname2, "..", "install.js"));
   if (existsSync8(fromDist)) return fromDist;
   if (existsSync8(fromBin)) return fromBin;
   return fromBin;
 }
-async function run8() {
+async function run9() {
   console.log("");
   console.log("\u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
   console.log("\u2502           terminalhire init \u2014 one-command onboarding            \u2502");
@@ -3360,17 +4053,17 @@ var init_jpi_init = __esm({
 // bin/jpi-refresh.js
 var jpi_refresh_exports = {};
 __export(jpi_refresh_exports, {
-  run: () => run9
+  run: () => run10
 });
-import { readFileSync as readFileSync10, writeFileSync as writeFileSync8, existsSync as existsSync9, mkdirSync as mkdirSync8 } from "fs";
-import { join as join11 } from "path";
-import { homedir as homedir9 } from "os";
+import { readFileSync as readFileSync11, writeFileSync as writeFileSync9, existsSync as existsSync9, mkdirSync as mkdirSync9 } from "fs";
+import { join as join12 } from "path";
+import { homedir as homedir10 } from "os";
 import { fileURLToPath as fileURLToPath4 } from "url";
-async function run9() {
+async function run10() {
   try {
     let index;
     try {
-      const res = await fetch(`${API_URL3}/api/index`, {
+      const res = await fetch(`${API_URL4}/api/index`, {
         signal: AbortSignal.timeout(15e3),
         headers: { "Accept": "application/json" }
       });
@@ -3408,14 +4101,14 @@ async function run9() {
       }
     } catch {
     }
-    mkdirSync8(TERMINALHIRE_DIR5, { recursive: true });
+    mkdirSync9(TERMINALHIRE_DIR6, { recursive: true });
     const cacheEntry = {
       ts: Date.now(),
       index,
       matchCount,
       topMatches
     };
-    writeFileSync8(INDEX_CACHE_FILE2, JSON.stringify(cacheEntry), "utf8");
+    writeFileSync9(INDEX_CACHE_FILE3, JSON.stringify(cacheEntry), "utf8");
     try {
       const {
         readSpinnerConfig: readSpinnerConfig2,
@@ -3442,7 +4135,7 @@ async function run9() {
         const verbs = buildSpinnerPool2(ranked, sc.max, { sessionTags, frequency: sc.frequency });
         if (verbs.length > 0) applySpinnerVerbs2(verbs, sc.mode);
         else clearSpinnerVerbs2();
-        const tips = buildTips2(ranked, API_URL3, 8);
+        const tips = buildTips2(ranked, API_URL4, 8);
         if (tips.length > 0) applySpinnerTips2(tips);
         else clearSpinnerTips2();
       } else {
@@ -3459,30 +4152,30 @@ async function run9() {
     process.exit(1);
   }
 }
-var __dirname3, TERMINALHIRE_DIR5, INDEX_CACHE_FILE2, API_URL3;
+var __dirname3, TERMINALHIRE_DIR6, INDEX_CACHE_FILE3, API_URL4;
 var init_jpi_refresh = __esm({
   "bin/jpi-refresh.js"() {
     "use strict";
     __dirname3 = fileURLToPath4(new URL(".", import.meta.url));
-    TERMINALHIRE_DIR5 = join11(homedir9(), ".terminalhire");
-    INDEX_CACHE_FILE2 = join11(TERMINALHIRE_DIR5, "index-cache.json");
-    API_URL3 = process.env["TERMINALHIRE_API_URL"] ?? process.env["JPI_API_URL"] ?? "https://terminalhire.com";
+    TERMINALHIRE_DIR6 = join12(homedir10(), ".terminalhire");
+    INDEX_CACHE_FILE3 = join12(TERMINALHIRE_DIR6, "index-cache.json");
+    API_URL4 = process.env["TERMINALHIRE_API_URL"] ?? process.env["JPI_API_URL"] ?? "https://terminalhire.com";
   }
 });
 
 // bin/jpi-save.js
 var jpi_save_exports = {};
 __export(jpi_save_exports, {
-  run: () => run10
+  run: () => run11
 });
-import { readFileSync as readFileSync11, existsSync as existsSync10 } from "fs";
-import { join as join12 } from "path";
-import { homedir as homedir10 } from "os";
+import { readFileSync as readFileSync12, existsSync as existsSync10 } from "fs";
+import { join as join13 } from "path";
+import { homedir as homedir11 } from "os";
 import { fileURLToPath as fileURLToPath5 } from "url";
 function findJobInCache(jobId) {
   try {
-    if (!existsSync10(INDEX_CACHE_FILE3)) return null;
-    const raw = readFileSync11(INDEX_CACHE_FILE3, "utf8");
+    if (!existsSync10(INDEX_CACHE_FILE4)) return null;
+    const raw = readFileSync12(INDEX_CACHE_FILE4, "utf8");
     const entry = JSON.parse(raw);
     const jobs = entry?.index?.jobs ?? [];
     return jobs.find((j) => j.id === jobId) ?? null;
@@ -3551,7 +4244,7 @@ async function cmdUnsave(jobId) {
     process.exit(1);
   }
 }
-async function run10() {
+async function run11() {
   const verb = process.argv[2];
   const jobId = process.argv[3];
   try {
@@ -3570,31 +4263,31 @@ async function run10() {
     process.exit(1);
   }
 }
-var __dirname4, TERMINALHIRE_DIR6, INDEX_CACHE_FILE3;
+var __dirname4, TERMINALHIRE_DIR7, INDEX_CACHE_FILE4;
 var init_jpi_save = __esm({
   "bin/jpi-save.js"() {
     "use strict";
     __dirname4 = fileURLToPath5(new URL(".", import.meta.url));
-    TERMINALHIRE_DIR6 = join12(homedir10(), ".terminalhire");
-    INDEX_CACHE_FILE3 = join12(TERMINALHIRE_DIR6, "index-cache.json");
+    TERMINALHIRE_DIR7 = join13(homedir11(), ".terminalhire");
+    INDEX_CACHE_FILE4 = join13(TERMINALHIRE_DIR7, "index-cache.json");
   }
 });
 
 // bin/jpi-dispatch.js
 import { fileURLToPath as fileURLToPath6 } from "url";
-import { join as join13, dirname as dirname2 } from "path";
-import { existsSync as existsSync11, readFileSync as readFileSync12 } from "fs";
+import { join as join14, dirname as dirname2 } from "path";
+import { existsSync as existsSync11, readFileSync as readFileSync13 } from "fs";
 import { createRequire } from "module";
 var __dirname5 = fileURLToPath6(new URL(".", import.meta.url));
 function readPackageVersion() {
   try {
     const candidates = [
-      join13(__dirname5, "..", "..", "package.json"),
-      join13(__dirname5, "..", "package.json")
+      join14(__dirname5, "..", "..", "package.json"),
+      join14(__dirname5, "..", "package.json")
     ];
     for (const p of candidates) {
       if (existsSync11(p)) {
-        const pkg = JSON.parse(readFileSync12(p, "utf8"));
+        const pkg = JSON.parse(readFileSync13(p, "utf8"));
         if (pkg.version) return pkg.version;
       }
     }
@@ -3605,7 +4298,7 @@ function readPackageVersion() {
 var firstArg = process.argv[2];
 if (!firstArg && !process.stdin.isTTY) {
   const { default: childProcess } = await import("child_process");
-  const nudgeScript = join13(__dirname5, "jpi.js");
+  const nudgeScript = join14(__dirname5, "jpi.js");
   const child = childProcess.spawnSync(process.execPath, [nudgeScript], {
     stdio: ["inherit", "inherit", "inherit"]
   });
@@ -3622,6 +4315,8 @@ if (!firstArg || firstArg === "help" || firstArg === "--help" || firstArg === "-
   console.log("  terminalhire jobs                           Fetch job index, match locally, browse roles");
   console.log("  terminalhire jobs --limit N                 Show top N results (default: 10)");
   console.log("  terminalhire jobs --remote-only             Filter to remote roles only");
+  console.log("  terminalhire bounties                       Day-sized paid tasks you can knock out today");
+  console.log("  terminalhire bounties --priced              Only bounties with a known $ amount");
   console.log("  terminalhire profile --show                 Display your encrypted local profile");
   console.log("  terminalhire profile --edit                 Set displayName, contactEmail, prefs");
   console.log("  terminalhire profile --delete               Wipe profile and encryption key from disk");
@@ -3668,6 +4363,12 @@ if (firstArg === "jobs") {
   await mod.run();
   process.exit(0);
 }
+if (firstArg === "bounties") {
+  process.argv.splice(2, 1);
+  const mod = await Promise.resolve().then(() => (init_jpi_bounties(), jpi_bounties_exports));
+  await mod.run();
+  process.exit(0);
+}
 if (firstArg === "profile") {
   const mod = await Promise.resolve().then(() => (init_jpi_profile(), jpi_profile_exports));
   await mod.run();