terminalhire 0.42.6 → 0.42.7

package/README.md

@@ -1,6 +1,6 @@
 # terminalhire — your code is your résumé
 
-Local-first job + bounty matching, and a verifiable **Proof of Work** credential earned from PRs that maintainers who aren't you merged into established repos — checkable on GitHub, impossible to self-report. Your profile never leaves your machine.
+Job + bounty matching in the terminal, and a **Proof of Work** credential earned from PRs that maintainers who aren't you merged into established repos — checkable on GitHub, impossible to self-report. Claim a scoped bounty and get paid when the poster accepts it.
 
 **Domain:** [terminalhire.com](https://terminalhire.com)
 
@@ -57,10 +57,10 @@ terminalhire trajectory         # trajectory from your local Claude Code corpus
 terminalhire trajectory --export  # write a derived score + Markdown to ~/.terminalhire/
 terminalhire trajectory --inward  # also show private rework/recovery (never exported)
 
-terminalhire devs               # opted-in peers & founders — profile never leaves your machine
+terminalhire devs               # opted-in peers & founders — matched on your machine
 terminalhire intro <login>      # request a double-opt-in intro (typed-yes consent)
 terminalhire inbox              # unread chats, connections & pending intros in one place
-terminalhire mcp --print-config # local-first match + claim-record MCP config for AI hosts
+terminalhire mcp --print-config # match + claim-record MCP config for AI hosts
 
 terminalhire profile --show     # inspect your encrypted local profile (incl. GitHub fields)
 terminalhire profile --edit     # set displayName, contactEmail, prefs
@@ -84,18 +84,19 @@ This runs the **GitHub OAuth Device Flow**:
 
 ### What GitHub enriches
 
-| Signal | Source |
-|---|---|
-| Skill tags | Repo languages + repo topics, filtered through `vocabulary.normalize()` |
+| Signal             | Source                                                                               |
+| ------------------ | ------------------------------------------------------------------------------------ |
+| Skill tags         | Repo languages + repo topics, filtered through `vocabulary.normalize()`              |
 | Seniority estimate | Account age × (repos + followers) per [documented thresholds](#seniority-thresholds) |
-| Display name | `user.name` if not already set in profile |
-| Contact email | `user.email` if public and not already set in profile |
+| Display name       | `user.name` if not already set in profile                                            |
+| Contact email      | `user.email` if public and not already set in profile                                |
 
 ### Public scope guarantee
 
 Scope requested: **`read:user`** — public profile + public repos only.
 
 **Private-repo scopes are NEVER requested.** This means:
+
 - No employer-IP risk from private repos.
 - No code, secrets, or private file access.
 - Only what is already publicly visible on your GitHub profile.
@@ -199,13 +200,13 @@ GitHub (optional enrichment):
 
 ## Privacy
 
-| What happens locally | What crosses the wire |
-|---|---|
-| Profile accumulated from personal project sessions | GET /api/index — anonymous, no dev data |
-| Closed-vocab skill tags + seniority (encrypted at rest) | POST /api/lead — ONLY after explicit per-role "yes" consent |
-| GitHub token + public profile data (encrypted at rest) | GitHub fields in lead — ONLY after consent AND GitHub is connected |
-| Employer-repo sessions: language tags only | Nothing else |
-| git email domain + remote host (employer detection only) | |
+| What happens locally                                     | What crosses the wire                                              |
+| -------------------------------------------------------- | ------------------------------------------------------------------ |
+| Profile accumulated from personal project sessions       | GET /api/index — anonymous, no dev data                            |
+| Closed-vocab skill tags + seniority (encrypted at rest)  | POST /api/lead — ONLY after explicit per-role "yes" consent        |
+| GitHub token + public profile data (encrypted at rest)   | GitHub fields in lead — ONLY after consent AND GitHub is connected |
+| Employer-repo sessions: language tags only               | Nothing else                                                       |
+| git email domain + remote host (employer detection only) |                                                                    |
 
 **Employer-repo exclusion (default on):** if `git config user.email` is a corporate domain or `git remote` points to a non-personal host, only language-level tags (`typescript`, `python`, …) accumulate. Fine-grained framework/infra tags are excluded. The flag `hasEmployerSessions` is recorded locally but never emitted.
 
@@ -280,9 +281,9 @@ Typing anything other than `y` or `yes` aborts with no network call.
 
 ## Apply modes
 
-| `applyMode` | What happens when you select a role |
-|---|---|
-| `direct` | Opens the employer's public URL in your terminal. No data sent. |
+| `applyMode`  | What happens when you select a role                                       |
+| ------------ | ------------------------------------------------------------------------- |
+| `direct`     | Opens the employer's public URL in your terminal. No data sent.           |
 | `buyer-lead` | Triggers the named-entity consent flow above. Nothing sent without "yes". |
 
 The two modes are never silently conflated.
@@ -295,13 +296,13 @@ node test/zero-egress.test.js
 
 ## Environment variables
 
-| Variable | Default | Description |
-|---|---|---|
-| `TERMINALHIRE_API_URL` | `https://terminalhire.com` | Base URL for `/api/index` and `/api/lead` (also accepts legacy `JPI_API_URL`) |
-| `GITHUB_CLIENT_ID` | _(required for real OAuth)_ | GitHub OAuth App client ID (device flow) |
-| `GITHUB_CLIENT_SECRET` | _(optional)_ | GitHub OAuth App client secret (public apps omit this) |
-| `GITHUB_DEVICE_CLIENT_ID` | _(falls back to `GITHUB_CLIENT_ID`)_ | Device-flow specific client ID if different |
-| `TERMINALHIRE_GITHUB_MOCK` | `0` | Set to `1` to skip real OAuth and use the fixture (dev/CI); also accepts legacy `JPI_GITHUB_MOCK` |
+| Variable                   | Default                              | Description                                                                                       |
+| -------------------------- | ------------------------------------ | ------------------------------------------------------------------------------------------------- |
+| `TERMINALHIRE_API_URL`     | `https://terminalhire.com`           | Base URL for `/api/index` and `/api/lead` (also accepts legacy `JPI_API_URL`)                     |
+| `GITHUB_CLIENT_ID`         | _(required for real OAuth)_          | GitHub OAuth App client ID (device flow)                                                          |
+| `GITHUB_CLIENT_SECRET`     | _(optional)_                         | GitHub OAuth App client secret (public apps omit this)                                            |
+| `GITHUB_DEVICE_CLIENT_ID`  | _(falls back to `GITHUB_CLIENT_ID`)_ | Device-flow specific client ID if different                                                       |
+| `TERMINALHIRE_GITHUB_MOCK` | `0`                                  | Set to `1` to skip real OAuth and use the fixture (dev/CI); also accepts legacy `JPI_GITHUB_MOCK` |
 
 ## File layout
 
@@ -326,13 +327,13 @@ apps/cli/
 
 ## How data is used: local default vs consented lead
 
-| Data | Default (local-enrichment) | Opt-in (consented lead) |
-|---|---|---|
-| Skill tags | Stored encrypted locally, used for local matching only | Included in `approvedFields.skillTags` on "yes" |
-| Seniority | Stored encrypted locally | Included in `approvedFields.seniorityBand` on "yes" |
-| Display name | Stored encrypted locally (pre-filled from GitHub if public) | Included if set and "yes" |
-| Contact email | Stored encrypted locally (pre-filled from GitHub public email) | Included if set and "yes" |
-| GitHub login / profileUrl | Stored in `profile.github` on `terminalhire login` | Included in `approvedFields.github` ONLY on "yes" |
-| GitHub topLanguages | Used locally for tag inference (closed vocab) | Included in `approvedFields.github` ONLY on "yes" |
-| GitHub token | Encrypted at `~/.terminalhire/github-token.enc` | Never sent |
-| Private repos | Never accessed (scope: read:user) | N/A |
+| Data                      | Default (local-enrichment)                                     | Opt-in (consented lead)                             |
+| ------------------------- | -------------------------------------------------------------- | --------------------------------------------------- |
+| Skill tags                | Stored encrypted locally, used for local matching only         | Included in `approvedFields.skillTags` on "yes"     |
+| Seniority                 | Stored encrypted locally                                       | Included in `approvedFields.seniorityBand` on "yes" |
+| Display name              | Stored encrypted locally (pre-filled from GitHub if public)    | Included if set and "yes"                           |
+| Contact email             | Stored encrypted locally (pre-filled from GitHub public email) | Included if set and "yes"                           |
+| GitHub login / profileUrl | Stored in `profile.github` on `terminalhire login`             | Included in `approvedFields.github` ONLY on "yes"   |
+| GitHub topLanguages       | Used locally for tag inference (closed vocab)                  | Included in `approvedFields.github` ONLY on "yes"   |
+| GitHub token              | Encrypted at `~/.terminalhire/github-token.enc`                | Never sent                                          |
+| Private repos             | Never accessed (scope: read:user)                              | N/A                                                 |

package/dist/bin/cache-store.js

@@ -77,7 +77,11 @@ function updateIndexCache(patch) {
   renameSync(tmp, INDEX_CACHE_FILE);
   return entry;
 }
+function writeIndexCache(index) {
+  return updateIndexCache({ index, indexETag: "" });
+}
 export {
   readCacheEntry,
-  updateIndexCache
+  updateIndexCache,
+  writeIndexCache
 };

package/dist/bin/jpi-bounties.js

@@ -10540,7 +10540,8 @@ var init_state_dir = __esm({
 var cache_store_exports = {};
 __export(cache_store_exports, {
   readCacheEntry: () => readCacheEntry,
-  updateIndexCache: () => updateIndexCache
+  updateIndexCache: () => updateIndexCache,
+  writeIndexCache: () => writeIndexCache
 });
 import { readFileSync as readFileSync2, writeFileSync, renameSync } from "fs";
 import { join as join2 } from "path";
@@ -10566,6 +10567,9 @@ function updateIndexCache(patch) {
   renameSync(tmp, INDEX_CACHE_FILE);
   return entry;
 }
+function writeIndexCache(index) {
+  return updateIndexCache({ index, indexETag: "" });
+}
 var TERMINALHIRE_DIR, INDEX_CACHE_FILE, SCHEMA_VERSION2, tmpCounter;
 var init_cache_store = __esm({
   "bin/cache-store.js"() {
@@ -10861,6 +10865,7 @@ __export(profile_exports, {
   accumulateTags: () => accumulateTags,
   addSavedJob: () => addSavedJob,
   deleteProfile: () => deleteProfile,
+  isBlankProfile: () => isBlankProfile,
   listSavedJobs: () => listSavedJobs,
   profileToFingerprint: () => profileToFingerprint,
   readProfile: () => readProfile,
@@ -10901,6 +10906,17 @@ function migrateTagWeights(profile) {
     }
   }
 }
+function isBlankProfile(profile) {
+  if (profile.skillTags.length > 0) return false;
+  if (Object.keys(profile.tagWeights).length > 0) return false;
+  for (const [key, value] of Object.entries(profile)) {
+    if (DERIVED_KEYS.has(key)) continue;
+    if (value === void 0 || value === null) continue;
+    if (Array.isArray(value) && value.length === 0) continue;
+    return false;
+  }
+  return true;
+}
 async function readProfile() {
   const parsed = await profileStore.read();
   migrateTagWeights(parsed);
@@ -10985,7 +11001,7 @@ function profileToFingerprint(profile) {
     }
   };
 }
-var TERMINALHIRE_DIR3, PROFILE_FILE, profileStore, LANGUAGE_TAGS, MIN_FINGERPRINT_SCORE;
+var TERMINALHIRE_DIR3, PROFILE_FILE, profileStore, DERIVED_KEYS, LANGUAGE_TAGS, MIN_FINGERPRINT_SCORE;
 var init_profile = __esm({
   "src/profile.ts"() {
     "use strict";
@@ -10997,6 +11013,13 @@ var init_profile = __esm({
       blank: blankProfile,
       keyPolicy: "keytar-first-file-fallback"
     });
+    DERIVED_KEYS = /* @__PURE__ */ new Set([
+      "version",
+      "updatedAt",
+      "skillTags",
+      "tagWeights",
+      "hasEmployerSessions"
+    ]);
     LANGUAGE_TAGS = /* @__PURE__ */ new Set([
       "typescript",
       "javascript",
@@ -11836,9 +11859,6 @@ function readIndexCache() {
     return null;
   }
 }
-function writeIndexCache(index) {
-  updateIndexCache({ index, indexETag: "" });
-}
 async function fetchIndex() {
   const cached = readIndexCache();
   if (cached) return cached;

package/dist/bin/jpi-chat.js

@@ -5591,6 +5591,7 @@ __export(profile_exports, {
   accumulateTags: () => accumulateTags,
   addSavedJob: () => addSavedJob,
   deleteProfile: () => deleteProfile,
+  isBlankProfile: () => isBlankProfile,
   listSavedJobs: () => listSavedJobs,
   profileToFingerprint: () => profileToFingerprint,
   readProfile: () => readProfile,
@@ -5631,6 +5632,17 @@ function migrateTagWeights(profile) {
     }
   }
 }
+function isBlankProfile(profile) {
+  if (profile.skillTags.length > 0) return false;
+  if (Object.keys(profile.tagWeights).length > 0) return false;
+  for (const [key, value] of Object.entries(profile)) {
+    if (DERIVED_KEYS.has(key)) continue;
+    if (value === void 0 || value === null) continue;
+    if (Array.isArray(value) && value.length === 0) continue;
+    return false;
+  }
+  return true;
+}
 async function readProfile() {
   const parsed = await profileStore.read();
   migrateTagWeights(parsed);
@@ -5715,7 +5727,7 @@ function profileToFingerprint(profile) {
     }
   };
 }
-var TERMINALHIRE_DIR7, PROFILE_FILE, profileStore, LANGUAGE_TAGS, MIN_FINGERPRINT_SCORE;
+var TERMINALHIRE_DIR7, PROFILE_FILE, profileStore, DERIVED_KEYS, LANGUAGE_TAGS, MIN_FINGERPRINT_SCORE;
 var init_profile = __esm({
   "src/profile.ts"() {
     "use strict";
@@ -5727,6 +5739,13 @@ var init_profile = __esm({
       blank: blankProfile,
       keyPolicy: "keytar-first-file-fallback"
     });
+    DERIVED_KEYS = /* @__PURE__ */ new Set([
+      "version",
+      "updatedAt",
+      "skillTags",
+      "tagWeights",
+      "hasEmployerSessions"
+    ]);
     LANGUAGE_TAGS = /* @__PURE__ */ new Set([
       "typescript",
       "javascript",
@@ -5821,6 +5840,7 @@ function defaultIntroDeps() {
         });
       });
     },
+    isTTY: () => Boolean(process.stdin.isTTY),
     fetchImpl: (...args) => globalThis.fetch(...args),
     openBrowser: (url) => {
       void Promise.resolve().then(() => (init_open_url(), open_url_exports)).then((m) => m.openInBrowser(url)).catch(() => {
@@ -5859,7 +5879,9 @@ async function runIntroRequest(args, overrides) {
   const deps = { ...defaultIntroDeps(), ...overrides };
   const targetLogin = args.targetLogin?.trim().replace(/^@/, "");
   if (!targetLogin) {
-    deps.errorLog('\n  Usage: terminalhire intro <github-login> [--note "..."] [--contact <email>] [--name "..."]\n');
+    deps.errorLog(
+      '\n  Usage: terminalhire intro <github-login> [--note "..."] [--contact <email>] [--name "..."]\n'
+    );
     deps.exit(1);
     return;
   }
@@ -5886,7 +5908,16 @@ async function runIntroRequest(args, overrides) {
     note: args.note
   });
   renderConsentCard(payload, deps);
-  const answer = await deps.prompt('  Type "yes" to send this intro request (anything else cancels): ');
+  if (!deps.isTTY()) {
+    deps.errorLog(
+      "\n  stdin is not interactive \u2014 re-run `terminalhire intro` in a real terminal to confirm.\n"
+    );
+    deps.exit(1);
+    return;
+  }
+  const answer = await deps.prompt(
+    '  Type "yes" to send this intro request (anything else cancels): '
+  );
   if (answer !== "yes") {
     deps.log("\n  Cancelled \u2014 nothing was sent.\n");
     deps.exit(0);
@@ -5954,9 +5985,13 @@ async function runIntroRequest(args, overrides) {
   } catch {
   }
   if (deduped) {
-    deps.log(`
-  You already have a pending intro request to @${targetLogin} \u2014 nothing new was sent.`);
-    deps.log("  They can accept it any time from `terminalhire intro --list` or their dashboard.\n");
+    deps.log(
+      `
+  You already have a pending intro request to @${targetLogin} \u2014 nothing new was sent.`
+    );
+    deps.log(
+      "  They can accept it any time from `terminalhire intro --list` or their dashboard.\n"
+    );
   } else if (notified) {
     deps.log(`
   Intro request sent to @${targetLogin}. They will see only your public login`);
@@ -6001,9 +6036,11 @@ async function runIntroDecision(args, overrides) {
     try {
       intros = await fetchIntros(deps, cookie);
     } catch (err) {
-      deps.errorLog(`
+      deps.errorLog(
+        `
   Could not look up the request: ${err instanceof Error ? err.message : String(err)}
-`);
+`
+      );
       deps.exit(1);
       return;
     }
@@ -6018,8 +6055,10 @@ async function runIntroDecision(args, overrides) {
       return;
     }
     if (matches.length > 1) {
-      deps.errorLog(`
-  ${matches.length} pending requests from @${handle} \u2014 ${args.action === "accept" ? "accepting" : "declining"} one (the rest are redundant duplicates).`);
+      deps.errorLog(
+        `
+  ${matches.length} pending requests from @${handle} \u2014 ${args.action === "accept" ? "accepting" : "declining"} one (the rest are redundant duplicates).`
+      );
     }
     id = matches[0].id;
   }
@@ -6041,7 +6080,16 @@ async function runIntroDecision(args, overrides) {
     }
     deps.log("  Nothing else is shared. Declining shares nothing.");
     deps.log("");
-    const answer = await deps.prompt('  Type "yes" to accept and share your contact (anything else cancels): ');
+    if (!deps.isTTY()) {
+      deps.errorLog(
+        "\n  stdin is not interactive \u2014 re-run `terminalhire intro --accept` in a real terminal to confirm.\n"
+      );
+      deps.exit(1);
+      return;
+    }
+    const answer = await deps.prompt(
+      '  Type "yes" to accept and share your contact (anything else cancels): '
+    );
     if (answer !== "yes") {
       deps.log("\n  Cancelled \u2014 nothing was sent.\n");
       deps.exit(0);
@@ -6138,7 +6186,9 @@ async function runIntroList(overrides) {
   switch (result.status) {
     case "no-session":
       deps.log("\n  No linked web session found on this machine.");
-      deps.log("  Run `terminalhire link` to connect this terminal to your account, then re-run.\n");
+      deps.log(
+        "  Run `terminalhire link` to connect this terminal to your account, then re-run.\n"
+      );
       deps.exit(0);
       return;
     case "expired":

package/dist/bin/jpi-claim.js

@@ -25186,6 +25186,7 @@ __export(profile_exports, {
   accumulateTags: () => accumulateTags,
   addSavedJob: () => addSavedJob,
   deleteProfile: () => deleteProfile,
+  isBlankProfile: () => isBlankProfile,
   listSavedJobs: () => listSavedJobs,
   profileToFingerprint: () => profileToFingerprint,
   readProfile: () => readProfile,
@@ -25226,6 +25227,17 @@ function migrateTagWeights(profile) {
     }
   }
 }
+function isBlankProfile(profile) {
+  if (profile.skillTags.length > 0) return false;
+  if (Object.keys(profile.tagWeights).length > 0) return false;
+  for (const [key, value] of Object.entries(profile)) {
+    if (DERIVED_KEYS.has(key)) continue;
+    if (value === void 0 || value === null) continue;
+    if (Array.isArray(value) && value.length === 0) continue;
+    return false;
+  }
+  return true;
+}
 async function readProfile() {
   const parsed = await profileStore.read();
   migrateTagWeights(parsed);
@@ -25310,7 +25322,7 @@ function profileToFingerprint(profile) {
     }
   };
 }
-var TERMINALHIRE_DIR7, PROFILE_FILE, profileStore, LANGUAGE_TAGS, MIN_FINGERPRINT_SCORE;
+var TERMINALHIRE_DIR7, PROFILE_FILE, profileStore, DERIVED_KEYS, LANGUAGE_TAGS, MIN_FINGERPRINT_SCORE;
 var init_profile = __esm({
   "src/profile.ts"() {
     "use strict";
@@ -25322,6 +25334,13 @@ var init_profile = __esm({
       blank: blankProfile,
       keyPolicy: "keytar-first-file-fallback"
     });
+    DERIVED_KEYS = /* @__PURE__ */ new Set([
+      "version",
+      "updatedAt",
+      "skillTags",
+      "tagWeights",
+      "hasEmployerSessions"
+    ]);
     LANGUAGE_TAGS = /* @__PURE__ */ new Set([
       "typescript",
       "javascript",
@@ -25890,7 +25909,8 @@ var init_approved_claims_badge = __esm({
 var cache_store_exports = {};
 __export(cache_store_exports, {
   readCacheEntry: () => readCacheEntry,
-  updateIndexCache: () => updateIndexCache
+  updateIndexCache: () => updateIndexCache,
+  writeIndexCache: () => writeIndexCache
 });
 import { readFileSync as readFileSync10, writeFileSync as writeFileSync9, renameSync as renameSync5 } from "fs";
 import { join as join16 } from "path";
@@ -25916,6 +25936,9 @@ function updateIndexCache(patch) {
   renameSync5(tmp, INDEX_CACHE_FILE);
   return entry;
 }
+function writeIndexCache(index) {
+  return updateIndexCache({ index, indexETag: "" });
+}
 var TERMINALHIRE_DIR10, INDEX_CACHE_FILE, SCHEMA_VERSION2, tmpCounter;
 var init_cache_store = __esm({
   "bin/cache-store.js"() {
@@ -28849,6 +28872,7 @@ function renderRunView(run2, message) {
   }
   if (run2.previewUrl) lines.push(`  preview:    ${terminalSafeInline(run2.previewUrl)}`);
   if (run2.roundTrips != null) lines.push(`  round trips: ${run2.roundTrips}`);
+  if (run2.passMeaning) lines.push(`  ${terminalSafeInline(run2.passMeaning)}`);
   if (run2.logTail) {
     lines.push("  \u2500\u2500 log tail \u2500\u2500");
     for (const l of terminalSafeLines(run2.logTail)) lines.push(`  \u2502 ${l}`);
@@ -28914,8 +28938,7 @@ async function watchRunsLoop({
   for (let i = 1; i <= attempts; i++) {
     const r = await fetchOnce();
     if (r.kind === "refusal") {
-      log(`terminalhire claim: ${renderServerRefusal(r.status, r.body)}`);
-      return { outcome: "refused" };
+      return { outcome: "refused", status: r.status, body: r.body };
     }
     if (r.kind === "network") {
       log(`  (attempt ${i}/${attempts}: terminalhire unreachable \u2014 ${r.error}; retrying)`);
@@ -29139,7 +29162,12 @@ async function cmdRuns(id, flags = {}) {
       `  Watching CI for ${id} \u2014 up to ${RUNS_POLL_ATTEMPTS} checks, one every ${Math.round(RUNS_POLL_INTERVAL_MS / 1e3)}s.`
     );
     const out = await watchRunsLoop({ id, fetchOnce });
-    if (out.outcome === "refused") process.exit(1);
+    if (out.outcome === "refused") {
+      if (!retireRevokedReadCredential(out.status, out.body, "reading CI results")) {
+        console.error(`terminalhire claim: ${renderServerRefusal(out.status, out.body)}`);
+      }
+      process.exit(1);
+    }
     return;
   }
   const r = await fetchOnce();

package/dist/bin/jpi-config.js

@@ -114,7 +114,8 @@ var init_founder_paid_badge = __esm({
 var cache_store_exports = {};
 __export(cache_store_exports, {
   readCacheEntry: () => readCacheEntry,
-  updateIndexCache: () => updateIndexCache
+  updateIndexCache: () => updateIndexCache,
+  writeIndexCache: () => writeIndexCache
 });
 import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, renameSync } from "fs";
 import { join as join2 } from "path";
@@ -140,6 +141,9 @@ function updateIndexCache(patch) {
   renameSync(tmp, INDEX_CACHE_FILE);
   return entry;
 }
+function writeIndexCache(index) {
+  return updateIndexCache({ index, indexETag: "" });
+}
 var TERMINALHIRE_DIR2, INDEX_CACHE_FILE, SCHEMA_VERSION, tmpCounter;
 var init_cache_store = __esm({
   "bin/cache-store.js"() {

package/dist/bin/jpi-contribute.js

@@ -2854,6 +2854,7 @@ __export(profile_exports, {
   accumulateTags: () => accumulateTags,
   addSavedJob: () => addSavedJob,
   deleteProfile: () => deleteProfile,
+  isBlankProfile: () => isBlankProfile,
   listSavedJobs: () => listSavedJobs,
   profileToFingerprint: () => profileToFingerprint,
   readProfile: () => readProfile,
@@ -2894,6 +2895,17 @@ function migrateTagWeights(profile) {
     }
   }
 }
+function isBlankProfile(profile) {
+  if (profile.skillTags.length > 0) return false;
+  if (Object.keys(profile.tagWeights).length > 0) return false;
+  for (const [key, value] of Object.entries(profile)) {
+    if (DERIVED_KEYS.has(key)) continue;
+    if (value === void 0 || value === null) continue;
+    if (Array.isArray(value) && value.length === 0) continue;
+    return false;
+  }
+  return true;
+}
 async function readProfile() {
   const parsed = await profileStore.read();
   migrateTagWeights(parsed);
@@ -2978,7 +2990,7 @@ function profileToFingerprint(profile) {
     }
   };
 }
-var TERMINALHIRE_DIR4, PROFILE_FILE, profileStore, LANGUAGE_TAGS, MIN_FINGERPRINT_SCORE;
+var TERMINALHIRE_DIR4, PROFILE_FILE, profileStore, DERIVED_KEYS, LANGUAGE_TAGS, MIN_FINGERPRINT_SCORE;
 var init_profile = __esm({
   "src/profile.ts"() {
     "use strict";
@@ -2990,6 +3002,13 @@ var init_profile = __esm({
       blank: blankProfile,
       keyPolicy: "keytar-first-file-fallback"
     });
+    DERIVED_KEYS = /* @__PURE__ */ new Set([
+      "version",
+      "updatedAt",
+      "skillTags",
+      "tagWeights",
+      "hasEmployerSessions"
+    ]);
     LANGUAGE_TAGS = /* @__PURE__ */ new Set([
       "typescript",
       "javascript",
@@ -3854,6 +3873,9 @@ function updateIndexCache(patch) {
   renameSync(tmp, INDEX_CACHE_FILE);
   return entry;
 }
+function writeIndexCache(index) {
+  return updateIndexCache({ index, indexETag: "" });
+}
 
 // src/config.ts
 init_state_dir();
@@ -4157,9 +4179,6 @@ function readIndexCache() {
     return null;
   }
 }
-function writeIndexCache(index) {
-  updateIndexCache({ index, indexETag: "" });
-}
 async function fetchIndex(fetchImpl, useCache = true) {
   if (useCache) {
     const cached = readIndexCache();

package/dist/bin/jpi-devs.js

@@ -10809,6 +10809,7 @@ __export(profile_exports, {
   accumulateTags: () => accumulateTags,
   addSavedJob: () => addSavedJob,
   deleteProfile: () => deleteProfile,
+  isBlankProfile: () => isBlankProfile,
   listSavedJobs: () => listSavedJobs,
   profileToFingerprint: () => profileToFingerprint,
   readProfile: () => readProfile,
@@ -10849,6 +10850,17 @@ function migrateTagWeights(profile) {
     }
   }
 }
+function isBlankProfile(profile) {
+  if (profile.skillTags.length > 0) return false;
+  if (Object.keys(profile.tagWeights).length > 0) return false;
+  for (const [key, value] of Object.entries(profile)) {
+    if (DERIVED_KEYS.has(key)) continue;
+    if (value === void 0 || value === null) continue;
+    if (Array.isArray(value) && value.length === 0) continue;
+    return false;
+  }
+  return true;
+}
 async function readProfile() {
   const parsed = await profileStore.read();
   migrateTagWeights(parsed);
@@ -10933,7 +10945,7 @@ function profileToFingerprint(profile) {
     }
   };
 }
-var TERMINALHIRE_DIR3, PROFILE_FILE, profileStore, LANGUAGE_TAGS, MIN_FINGERPRINT_SCORE;
+var TERMINALHIRE_DIR3, PROFILE_FILE, profileStore, DERIVED_KEYS, LANGUAGE_TAGS, MIN_FINGERPRINT_SCORE;
 var init_profile = __esm({
   "src/profile.ts"() {
     "use strict";
@@ -10945,6 +10957,13 @@ var init_profile = __esm({
       blank: blankProfile,
       keyPolicy: "keytar-first-file-fallback"
     });
+    DERIVED_KEYS = /* @__PURE__ */ new Set([
+      "version",
+      "updatedAt",
+      "skillTags",
+      "tagWeights",
+      "hasEmployerSessions"
+    ]);
     LANGUAGE_TAGS = /* @__PURE__ */ new Set([
       "typescript",
       "javascript",