terminalhire 0.42.0 → 0.42.2

package/dist/bin/claim-push-bg.js

@@ -166,8 +166,24 @@ function nextPolledState(from, observed) {
 function nowISO() {
   return (/* @__PURE__ */ new Date()).toISOString();
 }
+function defangText(s) {
+  return typeof s === "string" ? s.replace(WHITESPACE_CONTROLS, " ").replace(CONTROL_CHARS, "") : s;
+}
+function finiteAmount(a) {
+  if (typeof a === "number") return Number.isFinite(a) ? a : null;
+  if (typeof a !== "string" || a.trim() === "") return null;
+  const n = Number(a);
+  return Number.isFinite(n) ? n : null;
+}
 function normalizeClaim(c) {
-  return { ...c, kind: c.kind ?? "bounty", policy: c.policy ?? null };
+  return {
+    ...c,
+    kind: c.kind ?? "bounty",
+    policy: c.policy ?? null,
+    title: defangText(c.title),
+    repoFullName: defangText(c.repoFullName),
+    amountUSD: finiteAmount(c.amountUSD)
+  };
 }
 function readClaims() {
   try {
@@ -289,7 +305,7 @@ function acceptedPRRate(claims = readClaims()) {
   const merged = claims.filter((c) => c.state === "merged").length;
   return { merged, total, rate: total === 0 ? 0 : merged / total };
 }
-var TERMINALHIRE_DIR3, CLAIMS_FILE, LOCK_DIR, LOCK_STALE_MS, LOCK_RETRY_MS, LOCK_TIMEOUT_MS, CLAIM_STATES, PUSHED_CLAIM_FIELDS, TERMINAL_STATES, POLL_TRANSITIONS;
+var TERMINALHIRE_DIR3, CLAIMS_FILE, LOCK_DIR, LOCK_STALE_MS, LOCK_RETRY_MS, LOCK_TIMEOUT_MS, CLAIM_STATES, PUSHED_CLAIM_FIELDS, TERMINAL_STATES, POLL_TRANSITIONS, WHITESPACE_CONTROLS, CONTROL_CHARS;
 var init_claims = __esm({
   "src/claims.ts"() {
     "use strict";
@@ -345,6 +361,8 @@ var init_claims = __esm({
       ]),
       submitted: /* @__PURE__ */ new Set(["claimed", "working", "in-review", "ready"])
     };
+    WHITESPACE_CONTROLS = /[\t\n\v\f\r]+/g;
+    CONTROL_CHARS = /[\x00-\x1f\x7f-\x9f]/g;
   }
 });
 

package/dist/bin/jpi-bounties.js

@@ -11338,8 +11338,24 @@ function nextPolledState(from, observed) {
 function nowISO2() {
   return (/* @__PURE__ */ new Date()).toISOString();
 }
+function defangText(s) {
+  return typeof s === "string" ? s.replace(WHITESPACE_CONTROLS2, " ").replace(CONTROL_CHARS2, "") : s;
+}
+function finiteAmount(a) {
+  if (typeof a === "number") return Number.isFinite(a) ? a : null;
+  if (typeof a !== "string" || a.trim() === "") return null;
+  const n = Number(a);
+  return Number.isFinite(n) ? n : null;
+}
 function normalizeClaim(c) {
-  return { ...c, kind: c.kind ?? "bounty", policy: c.policy ?? null };
+  return {
+    ...c,
+    kind: c.kind ?? "bounty",
+    policy: c.policy ?? null,
+    title: defangText(c.title),
+    repoFullName: defangText(c.repoFullName),
+    amountUSD: finiteAmount(c.amountUSD)
+  };
 }
 function readClaims() {
   try {
@@ -11461,7 +11477,7 @@ function acceptedPRRate(claims = readClaims()) {
   const merged = claims.filter((c) => c.state === "merged").length;
   return { merged, total, rate: total === 0 ? 0 : merged / total };
 }
-var TERMINALHIRE_DIR5, CLAIMS_FILE, LOCK_DIR, LOCK_STALE_MS, LOCK_RETRY_MS, LOCK_TIMEOUT_MS, CLAIM_STATES, PUSHED_CLAIM_FIELDS, TERMINAL_STATES, POLL_TRANSITIONS;
+var TERMINALHIRE_DIR5, CLAIMS_FILE, LOCK_DIR, LOCK_STALE_MS, LOCK_RETRY_MS, LOCK_TIMEOUT_MS, CLAIM_STATES, PUSHED_CLAIM_FIELDS, TERMINAL_STATES, POLL_TRANSITIONS, WHITESPACE_CONTROLS2, CONTROL_CHARS2;
 var init_claims = __esm({
   "src/claims.ts"() {
     "use strict";
@@ -11517,6 +11533,8 @@ var init_claims = __esm({
       ]),
       submitted: /* @__PURE__ */ new Set(["claimed", "working", "in-review", "ready"])
     };
+    WHITESPACE_CONTROLS2 = /[\t\n\v\f\r]+/g;
+    CONTROL_CHARS2 = /[\x00-\x1f\x7f-\x9f]/g;
   }
 });
 
@@ -11731,17 +11749,38 @@ var init_founder_paid_badge = __esm({
 
 // bin/jpi-bounties.js
 init_src();
-init_cache_store();
 import { readFileSync as readFileSync7 } from "fs";
 import { join as join10 } from "path";
 import { homedir as homedir7 } from "os";
 import { createInterface } from "readline";
 
+// ../../packages/core/src/payout-split.ts
+var PLATFORM_TAKE_BPS = 1e3;
+function platformFeeCents(totalCents) {
+  return Math.ceil(totalCents * PLATFORM_TAKE_BPS / 1e4);
+}
+function developerShareCents(totalCents) {
+  return totalCents - platformFeeCents(totalCents);
+}
+function formatCents(cents) {
+  return cents % 100 === 0 ? `$${cents / 100}` : `$${(cents / 100).toFixed(2)}`;
+}
+
+// bin/jpi-bounties.js
+init_cache_store();
+
 // bin/sanitize.js
+var WHITESPACE_CONTROLS = /[\t\n\v\f\r]+/g;
 var CONTROL_CHARS = /[\x00-\x1f\x7f-\x9f]/g;
 function sanitizeText(s) {
   if (s == null) return "";
-  return String(s).replace(CONTROL_CHARS, "");
+  return String(s).replace(WHITESPACE_CONTROLS, " ").replace(CONTROL_CHARS, "");
+}
+function formatUsd(a) {
+  if (typeof a === "number") return Number.isFinite(a) ? "$" + a.toLocaleString() : "$\u2014";
+  if (typeof a !== "string" || a.trim() === "") return "$\u2014";
+  const n = Number(a);
+  return Number.isFinite(n) ? "$" + n.toLocaleString() : "$\u2014";
 }
 function safeHttpUrl(url) {
   if (url == null) return null;
@@ -11814,13 +11853,33 @@ function prompt(question) {
   });
 }
 function formatAmount(b) {
-  return b.amountUSD != null ? "$" + b.amountUSD.toLocaleString() : "$\u2014";
+  return formatUsd(b.amountUSD);
 }
 var EFFORT_LABEL = {
   small: "small (~\xBD day)",
   medium: "medium (~1 day)",
   large: "large (multi-day)"
 };
+function founderClaimBlurb(amountUSD, paidWork) {
+  if (paidWork === false) {
+    return "Claim it from here \u2014 this posting records a credential for the work, not a payment. Take it for the credential, not the money.";
+  }
+  if (paidWork !== true) {
+    return "Claim it from here \u2014 this listing is missing its payment status, so it is not safe to say whether the work pays. Try `terminalhire refresh`; if it is still missing, do not count on being paid for this one.";
+  }
+  let share = "";
+  if (typeof amountUSD === "number" && Number.isFinite(amountUSD) && amountUSD > 0) {
+    share = ` You'd receive ${formatCents(developerShareCents(Math.round(amountUSD * 100)))} of the ${formatCents(Math.round(amountUSD * 100))} posted; terminalhire keeps 10%.`;
+  }
+  return `Claim it from here \u2014 the founder pays through terminalhire rather than off-platform, and their acceptance is what triggers your payout.${share}`;
+}
+function founderClaimBlock(job) {
+  const ref = opportunityShortToken(job.id);
+  return `
+${founderClaimBlurb(job.bounty?.amountUSD, job.bounty?.paidWork)}
+  terminalhire claim ${ref}
+  ${sanitizeText(job.bounty?.claimUrl ?? job.url)}`;
+}
 function printBounty(i, job, score, reason, matchedTags, claimedIds = /* @__PURE__ */ new Set(), continuityNote = null) {
   const b = job.bounty ?? {};
   const stars = b.repoStars != null ? ` \xB7 ${b.repoStars}\u2605` : "";
@@ -11963,7 +12022,9 @@ async function run() {
           const rows = founderRows2(surface, "bounties");
           console.log("\n\u26A1 Your TerminalHire postings\n");
           if (!rows.length) {
-            console.log("  No current posting data. Run `terminalhire refresh`, or lead with work:");
+            console.log(
+              "  No current posting data. Run `terminalhire refresh`, or lead with work:"
+            );
             console.log("  terminalhire config set lead dev\n");
           } else {
             rows.forEach((row, index) => {
@@ -11972,7 +12033,9 @@ async function run() {
               );
             });
             console.log("\n  Review and act: https://terminalhire.com/dashboard?tab=postings");
-            console.log("  Lead with developer bounties instead: terminalhire config set lead dev\n");
+            console.log(
+              "  Lead with developer bounties instead: terminalhire config set lead dev\n"
+            );
           }
           return;
         }
@@ -12047,6 +12110,10 @@ Enter a number to open a bounty's claim page, or press Enter to exit: `
     const idx = parseInt(pick, 10) - 1;
     if (Number.isNaN(idx) || idx < 0 || idx >= shown.length) return;
     const chosen = shown[idx];
+    if (chosen.bounty?.bountySource === "founder") {
+      console.log(founderClaimBlock(chosen));
+      return;
+    }
     console.log(
       `
 Open this to claim/work the bounty (you go straight to the source \u2014 we never touch payment):
@@ -12062,6 +12129,8 @@ export {
   classifyEmptyStatus,
   continuityNoteForRow,
   filterPaidVisibility,
+  founderClaimBlock,
+  founderClaimBlurb,
   getBounties,
   isPinnedFounderBounty,
   printBounty,

package/dist/bin/jpi-claim.js

@@ -10638,8 +10638,24 @@ function nextPolledState(from, observed) {
 function nowISO() {
   return (/* @__PURE__ */ new Date()).toISOString();
 }
+function defangText(s) {
+  return typeof s === "string" ? s.replace(WHITESPACE_CONTROLS2, " ").replace(CONTROL_CHARS2, "") : s;
+}
+function finiteAmount(a) {
+  if (typeof a === "number") return Number.isFinite(a) ? a : null;
+  if (typeof a !== "string" || a.trim() === "") return null;
+  const n = Number(a);
+  return Number.isFinite(n) ? n : null;
+}
 function normalizeClaim(c) {
-  return { ...c, kind: c.kind ?? "bounty", policy: c.policy ?? null };
+  return {
+    ...c,
+    kind: c.kind ?? "bounty",
+    policy: c.policy ?? null,
+    title: defangText(c.title),
+    repoFullName: defangText(c.repoFullName),
+    amountUSD: finiteAmount(c.amountUSD)
+  };
 }
 function readClaims() {
   try {
@@ -10761,7 +10777,7 @@ function acceptedPRRate(claims = readClaims()) {
   const merged = claims.filter((c) => c.state === "merged").length;
   return { merged, total, rate: total === 0 ? 0 : merged / total };
 }
-var TERMINALHIRE_DIR2, CLAIMS_FILE, LOCK_DIR, LOCK_STALE_MS, LOCK_RETRY_MS, LOCK_TIMEOUT_MS, CLAIM_STATES, PUSHED_CLAIM_FIELDS, TERMINAL_STATES, POLL_TRANSITIONS;
+var TERMINALHIRE_DIR2, CLAIMS_FILE, LOCK_DIR, LOCK_STALE_MS, LOCK_RETRY_MS, LOCK_TIMEOUT_MS, CLAIM_STATES, PUSHED_CLAIM_FIELDS, TERMINAL_STATES, POLL_TRANSITIONS, WHITESPACE_CONTROLS2, CONTROL_CHARS2;
 var init_claims = __esm({
   "src/claims.ts"() {
     "use strict";
@@ -10817,6 +10833,8 @@ var init_claims = __esm({
       ]),
       submitted: /* @__PURE__ */ new Set(["claimed", "working", "in-review", "ready"])
     };
+    WHITESPACE_CONTROLS2 = /[\t\n\v\f\r]+/g;
+    CONTROL_CHARS2 = /[\x00-\x1f\x7f-\x9f]/g;
   }
 });
 
@@ -26134,10 +26152,17 @@ function openInBrowser(url) {
 }
 
 // bin/sanitize.js
+var WHITESPACE_CONTROLS = /[\t\n\v\f\r]+/g;
 var CONTROL_CHARS = /[\x00-\x1f\x7f-\x9f]/g;
 function sanitizeText(s) {
   if (s == null) return "";
-  return String(s).replace(CONTROL_CHARS, "");
+  return String(s).replace(WHITESPACE_CONTROLS, " ").replace(CONTROL_CHARS, "");
+}
+function formatUsd(a) {
+  if (typeof a === "number") return Number.isFinite(a) ? "$" + a.toLocaleString() : "$\u2014";
+  if (typeof a !== "string" || a.trim() === "") return "$\u2014";
+  const n = Number(a);
+  return Number.isFinite(n) ? "$" + n.toLocaleString() : "$\u2014";
 }
 
 // src/policy-acks.ts
@@ -27064,7 +27089,7 @@ async function pollPR(prUrl) {
   }
 }
 function fmtAmount(a) {
-  return a != null ? "$" + a.toLocaleString() : "$\u2014";
+  return formatUsd(a);
 }
 function fmtClaimAmount(c) {
   return c.kind === "contribution" ? "contribution" : fmtAmount(c.amountUSD);
@@ -27205,8 +27230,15 @@ async function resolveBounty(arg) {
   return {
     bountyId,
     indexNativeId,
-    title,
-    repoFullName,
+    // DEFANGED HERE, at the one place every tier of this resolver converges.
+    // `claims.ts` cleans what comes OUT of the local store, which covers every later
+    // read — but this object is printed (the preview card, the record card) and
+    // handed to `recordClaim` BEFORE any store exists for it, so on a claim's first
+    // use the store boundary has not run yet. `repoFullName` also goes on to be
+    // interpolated into GitHub API URLs from here. Found by a cross-model review of
+    // TERM-380; the store fix alone left this path open.
+    title: sanitizeText(title),
+    repoFullName: repoFullName == null ? repoFullName : sanitizeText(repoFullName),
     issueUrl,
     amountUSD,
     source,
@@ -28402,7 +28434,7 @@ function startableRow(c) {
 }
 async function pickStartableClaim(claims, { prompt = ask, isTTY = process.stdin.isTTY } = {}) {
   const active = claims.listClaims({ active: true });
-  await syncFounderApprovals(claims, active);
+  const { approvalsChecked, approvalsUnavailable } = await syncFounderApprovals(claims, active);
   const startable = claims.listClaims({ active: true }).filter((c) => c.state === "claimed");
   if (startable.length === 0) {
     console.log("No claims ready to start. Claim one first:  terminalhire claim <ref>");
@@ -28430,23 +28462,24 @@ Which one? (1-${startable.length}, or q to quit) `);
 Nothing started \u2014 '${answer}' is not one of 1-${startable.length}.`);
     return null;
   }
-  return startable[n - 1].id;
+  return { id: startable[n - 1].id, approvalsChecked, approvalsUnavailable };
 }
 async function cmdStart(id, flags = {}) {
   const claims = await Promise.resolve().then(() => (init_claims(), claims_exports));
+  let approvalsChecked = false;
+  let approvalsUnavailable = false;
   if (!id) {
     const picked = await pickStartableClaim(claims);
     if (!picked) return;
-    id = picked;
+    ({ id, approvalsChecked, approvalsUnavailable } = picked);
   }
   let claim = claims.findClaim(id);
   if (!claim) {
     console.error(`terminalhire claim: no claim with id '${id}'.`);
     process.exit(1);
   }
-  let approvalsChecked = false;
   if (claim.approval?.state === "pending") {
-    ({ approvalsChecked } = await syncFounderApprovals(claims, [claim]));
+    ({ approvalsChecked, approvalsUnavailable } = await syncFounderApprovals(claims, [claim]));
     claim = claims.findClaim(id);
   }
   if (claim.worktreePath) {
@@ -28473,6 +28506,10 @@ ${sanitizeText(claim.title)}`);
     console.log("  same way.");
     if (shouldStatePending(claim, approvalsChecked)) {
       console.log("\n  Access is pending \u2014 the founder has not approved your claim yet.");
+    } else if (approvalsUnavailable) {
+      console.log(
+        "\n  Terminalhire could not check approvals right now; local state was preserved.\n  The next step below still works \u2014 it asks the server directly."
+      );
     }
     printNextSteps([claim]);
     return;
@@ -28724,10 +28761,10 @@ var CLAIM_EVENT_LABEL = {
   rejected: "the founder rejected"
 };
 var LINE_BREAKS = /\r\n|[\r\n\v\f\u0085\u2028\u2029]/;
-var CONTROL_CHARS2 = /[\u0000-\u001F\u007F-\u009F]/g;
+var CONTROL_CHARS3 = /[\u0000-\u001F\u007F-\u009F]/g;
 function terminalSafeLines(raw) {
   if (typeof raw !== "string" || raw === "") return [];
-  return raw.split(LINE_BREAKS).map((l) => l.replace(CONTROL_CHARS2, ""));
+  return raw.split(LINE_BREAKS).map((l) => l.replace(CONTROL_CHARS3, ""));
 }
 function terminalSafeInline(raw) {
   return terminalSafeLines(raw).join(" ");

package/dist/bin/jpi-contribute.js

@@ -3617,8 +3617,24 @@ function nextPolledState(from, observed) {
 function nowISO2() {
   return (/* @__PURE__ */ new Date()).toISOString();
 }
+function defangText(s) {
+  return typeof s === "string" ? s.replace(WHITESPACE_CONTROLS2, " ").replace(CONTROL_CHARS2, "") : s;
+}
+function finiteAmount(a) {
+  if (typeof a === "number") return Number.isFinite(a) ? a : null;
+  if (typeof a !== "string" || a.trim() === "") return null;
+  const n = Number(a);
+  return Number.isFinite(n) ? n : null;
+}
 function normalizeClaim(c) {
-  return { ...c, kind: c.kind ?? "bounty", policy: c.policy ?? null };
+  return {
+    ...c,
+    kind: c.kind ?? "bounty",
+    policy: c.policy ?? null,
+    title: defangText(c.title),
+    repoFullName: defangText(c.repoFullName),
+    amountUSD: finiteAmount(c.amountUSD)
+  };
 }
 function readClaims() {
   try {
@@ -3740,7 +3756,7 @@ function acceptedPRRate(claims = readClaims()) {
   const merged = claims.filter((c) => c.state === "merged").length;
   return { merged, total, rate: total === 0 ? 0 : merged / total };
 }
-var TERMINALHIRE_DIR7, CLAIMS_FILE, LOCK_DIR, LOCK_STALE_MS, LOCK_RETRY_MS, LOCK_TIMEOUT_MS, CLAIM_STATES, PUSHED_CLAIM_FIELDS, TERMINAL_STATES, POLL_TRANSITIONS;
+var TERMINALHIRE_DIR7, CLAIMS_FILE, LOCK_DIR, LOCK_STALE_MS, LOCK_RETRY_MS, LOCK_TIMEOUT_MS, CLAIM_STATES, PUSHED_CLAIM_FIELDS, TERMINAL_STATES, POLL_TRANSITIONS, WHITESPACE_CONTROLS2, CONTROL_CHARS2;
 var init_claims = __esm({
   "src/claims.ts"() {
     "use strict";
@@ -3796,6 +3812,8 @@ var init_claims = __esm({
       ]),
       submitted: /* @__PURE__ */ new Set(["claimed", "working", "in-review", "ready"])
     };
+    WHITESPACE_CONTROLS2 = /[\t\n\v\f\r]+/g;
+    CONTROL_CHARS2 = /[\x00-\x1f\x7f-\x9f]/g;
   }
 });
 
@@ -3879,10 +3897,11 @@ function isContributeEnabled() {
 init_state_dir();
 
 // bin/sanitize.js
+var WHITESPACE_CONTROLS = /[\t\n\v\f\r]+/g;
 var CONTROL_CHARS = /[\x00-\x1f\x7f-\x9f]/g;
 function sanitizeText(s) {
   if (s == null) return "";
-  return String(s).replace(CONTROL_CHARS, "");
+  return String(s).replace(WHITESPACE_CONTROLS, " ").replace(CONTROL_CHARS, "");
 }
 function safeHttpUrl(url) {
   if (url == null) return null;

package/dist/bin/jpi-devs.js

@@ -11053,10 +11053,11 @@ function excludeOwnCard(results, ownLogin) {
 }
 
 // bin/sanitize.js
+var WHITESPACE_CONTROLS = /[\t\n\v\f\r]+/g;
 var CONTROL_CHARS = /[\x00-\x1f\x7f-\x9f]/g;
 function sanitizeText(s) {
   if (s == null) return "";
-  return String(s).replace(CONTROL_CHARS, "");
+  return String(s).replace(WHITESPACE_CONTROLS, " ").replace(CONTROL_CHARS, "");
 }
 function safeHttpUrl(url) {
   if (url == null) return null;