terminalhire 0.42.6 → 0.42.8

package/README.md

@@ -1,6 +1,6 @@
 # terminalhire — your code is your résumé
 
-Local-first job + bounty matching, and a verifiable **Proof of Work** credential earned from PRs that maintainers who aren't you merged into established repos — checkable on GitHub, impossible to self-report. Your profile never leaves your machine.
+Job + bounty matching in the terminal, and a **Proof of Work** credential earned from PRs that maintainers who aren't you merged into established repos — checkable on GitHub, impossible to self-report. Claim a scoped bounty and get paid when the poster accepts it.
 
 **Domain:** [terminalhire.com](https://terminalhire.com)
 
@@ -57,10 +57,10 @@ terminalhire trajectory         # trajectory from your local Claude Code corpus
 terminalhire trajectory --export  # write a derived score + Markdown to ~/.terminalhire/
 terminalhire trajectory --inward  # also show private rework/recovery (never exported)
 
-terminalhire devs               # opted-in peers & founders — profile never leaves your machine
+terminalhire devs               # opted-in peers & founders — matched on your machine
 terminalhire intro <login>      # request a double-opt-in intro (typed-yes consent)
 terminalhire inbox              # unread chats, connections & pending intros in one place
-terminalhire mcp --print-config # local-first match + claim-record MCP config for AI hosts
+terminalhire mcp --print-config # match + claim-record MCP config for AI hosts
 
 terminalhire profile --show     # inspect your encrypted local profile (incl. GitHub fields)
 terminalhire profile --edit     # set displayName, contactEmail, prefs
@@ -84,18 +84,19 @@ This runs the **GitHub OAuth Device Flow**:
 
 ### What GitHub enriches
 
-| Signal | Source |
-|---|---|
-| Skill tags | Repo languages + repo topics, filtered through `vocabulary.normalize()` |
+| Signal             | Source                                                                               |
+| ------------------ | ------------------------------------------------------------------------------------ |
+| Skill tags         | Repo languages + repo topics, filtered through `vocabulary.normalize()`              |
 | Seniority estimate | Account age × (repos + followers) per [documented thresholds](#seniority-thresholds) |
-| Display name | `user.name` if not already set in profile |
-| Contact email | `user.email` if public and not already set in profile |
+| Display name       | `user.name` if not already set in profile                                            |
+| Contact email      | `user.email` if public and not already set in profile                                |
 
 ### Public scope guarantee
 
 Scope requested: **`read:user`** — public profile + public repos only.
 
 **Private-repo scopes are NEVER requested.** This means:
+
 - No employer-IP risk from private repos.
 - No code, secrets, or private file access.
 - Only what is already publicly visible on your GitHub profile.
@@ -199,13 +200,13 @@ GitHub (optional enrichment):
 
 ## Privacy
 
-| What happens locally | What crosses the wire |
-|---|---|
-| Profile accumulated from personal project sessions | GET /api/index — anonymous, no dev data |
-| Closed-vocab skill tags + seniority (encrypted at rest) | POST /api/lead — ONLY after explicit per-role "yes" consent |
-| GitHub token + public profile data (encrypted at rest) | GitHub fields in lead — ONLY after consent AND GitHub is connected |
-| Employer-repo sessions: language tags only | Nothing else |
-| git email domain + remote host (employer detection only) | |
+| What happens locally                                     | What crosses the wire                                              |
+| -------------------------------------------------------- | ------------------------------------------------------------------ |
+| Profile accumulated from personal project sessions       | GET /api/index — anonymous, no dev data                            |
+| Closed-vocab skill tags + seniority (encrypted at rest)  | POST /api/lead — ONLY after explicit per-role "yes" consent        |
+| GitHub token + public profile data (encrypted at rest)   | GitHub fields in lead — ONLY after consent AND GitHub is connected |
+| Employer-repo sessions: language tags only               | Nothing else                                                       |
+| git email domain + remote host (employer detection only) |                                                                    |
 
 **Employer-repo exclusion (default on):** if `git config user.email` is a corporate domain or `git remote` points to a non-personal host, only language-level tags (`typescript`, `python`, …) accumulate. Fine-grained framework/infra tags are excluded. The flag `hasEmployerSessions` is recorded locally but never emitted.
 
@@ -280,9 +281,9 @@ Typing anything other than `y` or `yes` aborts with no network call.
 
 ## Apply modes
 
-| `applyMode` | What happens when you select a role |
-|---|---|
-| `direct` | Opens the employer's public URL in your terminal. No data sent. |
+| `applyMode`  | What happens when you select a role                                       |
+| ------------ | ------------------------------------------------------------------------- |
+| `direct`     | Opens the employer's public URL in your terminal. No data sent.           |
 | `buyer-lead` | Triggers the named-entity consent flow above. Nothing sent without "yes". |
 
 The two modes are never silently conflated.
@@ -295,13 +296,57 @@ node test/zero-egress.test.js
 
 ## Environment variables
 
-| Variable | Default | Description |
-|---|---|---|
-| `TERMINALHIRE_API_URL` | `https://terminalhire.com` | Base URL for `/api/index` and `/api/lead` (also accepts legacy `JPI_API_URL`) |
-| `GITHUB_CLIENT_ID` | _(required for real OAuth)_ | GitHub OAuth App client ID (device flow) |
-| `GITHUB_CLIENT_SECRET` | _(optional)_ | GitHub OAuth App client secret (public apps omit this) |
-| `GITHUB_DEVICE_CLIENT_ID` | _(falls back to `GITHUB_CLIENT_ID`)_ | Device-flow specific client ID if different |
-| `TERMINALHIRE_GITHUB_MOCK` | `0` | Set to `1` to skip real OAuth and use the fixture (dev/CI); also accepts legacy `JPI_GITHUB_MOCK` |
+| Variable                   | Default                              | Description                                                                                                                                                    |
+| -------------------------- | ------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `TERMINALHIRE_API_URL`     | `https://terminalhire.com`           | Base URL for **every** server call — reads, login/OAuth and background syncs alike (also accepts legacy `JPI_API_URL`). **Allowlisted hosts only** — see below |
+| `GITHUB_CLIENT_ID`         | _(required for real OAuth)_          | GitHub OAuth App client ID (device flow)                                                                                                                       |
+| `GITHUB_CLIENT_SECRET`     | _(optional)_                         | GitHub OAuth App client secret (public apps omit this)                                                                                                         |
+| `GITHUB_DEVICE_CLIENT_ID`  | _(falls back to `GITHUB_CLIENT_ID`)_ | Device-flow specific client ID if different                                                                                                                    |
+| `TERMINALHIRE_GITHUB_MOCK` | `0`                                  | Set to `1` to skip real OAuth and use the fixture (dev/CI); also accepts legacy `JPI_GITHUB_MOCK`                                                              |
+
+### Pointing the CLI at a non-production server
+
+`TERMINALHIRE_API_URL` is resolved once, in `src/api-base.ts`, and every call site
+uses that one answer — so reads and writes can no longer disagree about which
+environment you are on.
+
+The override is an **allowlist**, not a free-form URL, because this same base decides
+where your push token is presented. Only these are accepted:
+
+| Host                                         | Scheme  | Extra flag                       |
+| -------------------------------------------- | ------- | -------------------------------- |
+| `terminalhire.com`, `www.terminalhire.com`\* | `https` | —                                |
+| `dev.terminalhire.com`                       | `https` | —                                |
+| `localhost`, `127.0.0.1` (any port)          | `http`  | `TERMINALHIRE_ALLOW_LOCAL_API=1` |
+
+\* `www` is rewritten to the apex — its 301 strips the session cookie.
+
+Anything else — an unknown host, the wrong scheme, embedded credentials, a string
+that will not parse — makes the command **refuse to run**. It does not quietly fall
+back to production: a typo'd override that resolved to prod is how a developer ends up
+pushing claims at the real database while believing they are in a sandbox. It never
+falls back to the host you named either, so a poisoned shell profile cannot redirect
+you. Loopback without the opt-in is refused for the same reason: the URL alone must
+not be enough to make ambient refresh present the persisted prod session to a local
+listener.
+
+**Browser sign-in uses a narrower allowlist.** `login`, `link`, `sync` and the claim
+verification flows accept only `https://terminalhire.com` and
+`https://dev.terminalhire.com`. Loopback OAuth requires both
+`TERMINALHIRE_ALLOW_LOCAL_API=1` and `TERMINALHIRE_ALLOW_LOCAL_OAUTH=1`. Point at
+`https://dev.terminalhire.com` for an end-to-end login against the shared-dev stack.
+
+Note that `~/.terminalhire` is keyed per machine, not per origin: the web session,
+push token and consent markers are **shared** with production. The credential-bearing
+commands warn about this on stderr when a non-prod base is active.
+
+When a non-production base is active, every command prints one line to stderr:
+
+```
+[dev → dev.terminalhire.com]
+```
+
+No marker means you are talking to production.
 
 ## File layout
 
@@ -326,13 +371,13 @@ apps/cli/
 
 ## How data is used: local default vs consented lead
 
-| Data | Default (local-enrichment) | Opt-in (consented lead) |
-|---|---|---|
-| Skill tags | Stored encrypted locally, used for local matching only | Included in `approvedFields.skillTags` on "yes" |
-| Seniority | Stored encrypted locally | Included in `approvedFields.seniorityBand` on "yes" |
-| Display name | Stored encrypted locally (pre-filled from GitHub if public) | Included if set and "yes" |
-| Contact email | Stored encrypted locally (pre-filled from GitHub public email) | Included if set and "yes" |
-| GitHub login / profileUrl | Stored in `profile.github` on `terminalhire login` | Included in `approvedFields.github` ONLY on "yes" |
-| GitHub topLanguages | Used locally for tag inference (closed vocab) | Included in `approvedFields.github` ONLY on "yes" |
-| GitHub token | Encrypted at `~/.terminalhire/github-token.enc` | Never sent |
-| Private repos | Never accessed (scope: read:user) | N/A |
+| Data                      | Default (local-enrichment)                                     | Opt-in (consented lead)                             |
+| ------------------------- | -------------------------------------------------------------- | --------------------------------------------------- |
+| Skill tags                | Stored encrypted locally, used for local matching only         | Included in `approvedFields.skillTags` on "yes"     |
+| Seniority                 | Stored encrypted locally                                       | Included in `approvedFields.seniorityBand` on "yes" |
+| Display name              | Stored encrypted locally (pre-filled from GitHub if public)    | Included if set and "yes"                           |
+| Contact email             | Stored encrypted locally (pre-filled from GitHub public email) | Included if set and "yes"                           |
+| GitHub login / profileUrl | Stored in `profile.github` on `terminalhire login`             | Included in `approvedFields.github` ONLY on "yes"   |
+| GitHub topLanguages       | Used locally for tag inference (closed vocab)                  | Included in `approvedFields.github` ONLY on "yes"   |
+| GitHub token              | Encrypted at `~/.terminalhire/github-token.enc`                | Never sent                                          |
+| Private repos             | Never accessed (scope: read:user)                              | N/A                                                 |

package/dist/bin/approved-claims-sync.js

@@ -1,5 +1,97 @@
+// src/api-base.ts
+var PROD_API_BASE = "https://terminalhire.com";
+var DEV_API_BASE = "https://dev.terminalhire.com";
+var ApiBaseError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ApiBaseError";
+  }
+};
+var ALLOWED_HOSTS = {
+  "terminalhire.com": "https:",
+  "www.terminalhire.com": "https:",
+  "dev.terminalhire.com": "https:",
+  localhost: "http:",
+  "127.0.0.1": "http:"
+};
+var ALLOW_LOCAL_API_KEY = "TERMINALHIRE_ALLOW_LOCAL_API";
+var ALLOWED_DESCRIPTION = [
+  PROD_API_BASE,
+  DEV_API_BASE,
+  `http://localhost:<port> (requires ${ALLOW_LOCAL_API_KEY}=1)`,
+  `http://127.0.0.1:<port> (requires ${ALLOW_LOCAL_API_KEY}=1)`
+].join(", ");
+var CANONICAL_REWRITES = {
+  "www.terminalhire.com": PROD_API_BASE
+};
+var ENV_KEYS = ["TERMINALHIRE_API_URL", "JPI_API_URL"];
+function sanitizeOverrideForError(raw) {
+  try {
+    const url = new URL(raw);
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+      return `(disallowed scheme: ${url.protocol.slice(0, -1)})`;
+    }
+    if (url.username !== "" || url.password !== "") {
+      return `${url.protocol}//***@${url.host}`;
+    }
+    return url.origin;
+  } catch {
+    return "(unparseable override)";
+  }
+}
+function isLoopbackOrigin(origin) {
+  try {
+    const host = new URL(origin).hostname;
+    return host === "localhost" || host === "127.0.0.1";
+  } catch {
+    return false;
+  }
+}
+function localApiAllowed(env) {
+  return env[ALLOW_LOCAL_API_KEY] === "1";
+}
+function resolveApiBase(env = process.env) {
+  for (const key of ENV_KEYS) {
+    const raw = env[key];
+    if (typeof raw !== "string") continue;
+    const trimmed = raw.trim();
+    if (trimmed === "") continue;
+    const normalized = normalizeOverride(trimmed);
+    if (normalized === null) {
+      throw new ApiBaseError(
+        `terminalhire: ${key}=${sanitizeOverrideForError(trimmed)} is not an allowed API host (allowed: ${ALLOWED_DESCRIPTION}). Refusing to continue so we do not silently hit production.`
+      );
+    }
+    if (isLoopbackOrigin(normalized) && !localApiAllowed(env)) {
+      throw new ApiBaseError(
+        `terminalhire: ${key}=${normalized} is a loopback origin. Set ${ALLOW_LOCAL_API_KEY}=1 to talk to a local web app on purpose. Refusing so stored credentials cannot be exfiltrated to localhost by a poisoned override.`
+      );
+    }
+    return normalized;
+  }
+  return PROD_API_BASE;
+}
+function normalizeOverride(raw) {
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    return null;
+  }
+  if (url.username !== "" || url.password !== "") return null;
+  const expectedProtocol = ALLOWED_HOSTS[url.hostname];
+  if (expectedProtocol === void 0) return null;
+  if (url.protocol !== expectedProtocol) return null;
+  if (url.hostname !== "localhost" && url.hostname !== "127.0.0.1" && url.port !== "") {
+    return null;
+  }
+  const rewrite = CANONICAL_REWRITES[url.hostname];
+  if (rewrite !== void 0) return rewrite;
+  return url.origin;
+}
+
 // bin/approved-claims-sync.js
-var CLAIM_SYNC_BASE = "https://terminalhire.com";
+var CLAIM_SYNC_BASE = resolveApiBase();
 function approvalsSyncGate({ autoMarkerExists, tokenFileExists }) {
   if (!autoMarkerExists || !tokenFileExists) return { sync: false, reason: "not-opted-in" };
   return { sync: true, reason: "ok" };

package/dist/bin/cache-store.js

@@ -77,7 +77,11 @@ function updateIndexCache(patch) {
   renameSync(tmp, INDEX_CACHE_FILE);
   return entry;
 }
+function writeIndexCache(index) {
+  return updateIndexCache({ index, indexETag: "" });
+}
 export {
   readCacheEntry,
-  updateIndexCache
+  updateIndexCache,
+  writeIndexCache
 };

package/dist/bin/claim-push-bg.js

@@ -509,11 +509,125 @@ function decrypt(blob, key) {
 
 // bin/claim-push-bg.js
 init_state_dir();
+
+// src/api-base.ts
+var PROD_API_BASE = "https://terminalhire.com";
+var DEV_API_BASE = "https://dev.terminalhire.com";
+var ApiBaseError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ApiBaseError";
+  }
+};
+var ALLOWED_HOSTS = {
+  "terminalhire.com": "https:",
+  "www.terminalhire.com": "https:",
+  "dev.terminalhire.com": "https:",
+  localhost: "http:",
+  "127.0.0.1": "http:"
+};
+var ALLOW_LOCAL_API_KEY = "TERMINALHIRE_ALLOW_LOCAL_API";
+var ALLOWED_DESCRIPTION = [
+  PROD_API_BASE,
+  DEV_API_BASE,
+  `http://localhost:<port> (requires ${ALLOW_LOCAL_API_KEY}=1)`,
+  `http://127.0.0.1:<port> (requires ${ALLOW_LOCAL_API_KEY}=1)`
+].join(", ");
+var CANONICAL_REWRITES = {
+  "www.terminalhire.com": PROD_API_BASE
+};
+var ENV_KEYS = ["TERMINALHIRE_API_URL", "JPI_API_URL"];
+function sanitizeOverrideForError(raw) {
+  try {
+    const url = new URL(raw);
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+      return `(disallowed scheme: ${url.protocol.slice(0, -1)})`;
+    }
+    if (url.username !== "" || url.password !== "") {
+      return `${url.protocol}//***@${url.host}`;
+    }
+    return url.origin;
+  } catch {
+    return "(unparseable override)";
+  }
+}
+function isLoopbackOrigin(origin) {
+  try {
+    const host = new URL(origin).hostname;
+    return host === "localhost" || host === "127.0.0.1";
+  } catch {
+    return false;
+  }
+}
+function localApiAllowed(env) {
+  return env[ALLOW_LOCAL_API_KEY] === "1";
+}
+function resolveApiBase(env = process.env) {
+  for (const key of ENV_KEYS) {
+    const raw = env[key];
+    if (typeof raw !== "string") continue;
+    const trimmed = raw.trim();
+    if (trimmed === "") continue;
+    const normalized = normalizeOverride(trimmed);
+    if (normalized === null) {
+      throw new ApiBaseError(
+        `terminalhire: ${key}=${sanitizeOverrideForError(trimmed)} is not an allowed API host (allowed: ${ALLOWED_DESCRIPTION}). Refusing to continue so we do not silently hit production.`
+      );
+    }
+    if (isLoopbackOrigin(normalized) && !localApiAllowed(env)) {
+      throw new ApiBaseError(
+        `terminalhire: ${key}=${normalized} is a loopback origin. Set ${ALLOW_LOCAL_API_KEY}=1 to talk to a local web app on purpose. Refusing so stored credentials cannot be exfiltrated to localhost by a poisoned override.`
+      );
+    }
+    return normalized;
+  }
+  return PROD_API_BASE;
+}
+function resolveApiBaseOrProd(env = process.env) {
+  try {
+    return resolveApiBase(env);
+  } catch {
+    return PROD_API_BASE;
+  }
+}
+function normalizeOverride(raw) {
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    return null;
+  }
+  if (url.username !== "" || url.password !== "") return null;
+  const expectedProtocol = ALLOWED_HOSTS[url.hostname];
+  if (expectedProtocol === void 0) return null;
+  if (url.protocol !== expectedProtocol) return null;
+  if (url.hostname !== "localhost" && url.hostname !== "127.0.0.1" && url.port !== "") {
+    return null;
+  }
+  const rewrite = CANONICAL_REWRITES[url.hostname];
+  if (rewrite !== void 0) return rewrite;
+  return url.origin;
+}
+function isNonProdApiBase(base = resolveApiBaseOrProd()) {
+  return base !== PROD_API_BASE;
+}
+function warnSharedCredentialsIfNonProd(base, stream = process.stderr) {
+  if (!isNonProdApiBase(base)) return;
+  try {
+    stream.write(
+      "terminalhire: non-prod API base \u2014 using the same local session/push credentials as prod; do not mix environments casually.\n"
+    );
+  } catch {
+  }
+}
+
+// bin/claim-push-bg.js
 var TERMINALHIRE_DIR4 = process.env.TERMINALHIRE_DIR || join5(homedir4(), ".terminalhire");
 var CLAIM_PUSH_AUTO_MARKER = join5(TERMINALHIRE_DIR4, "claim-push-auto.json");
 var CLAIM_PUSH_TOKEN_FILE = join5(TERMINALHIRE_DIR4, "claim-push-token.enc");
 var CLAIM_PUSH_MANUAL_MARKER = join5(TERMINALHIRE_DIR4, "claim-push.json");
-var CLAIM_SYNC_BASE = "https://terminalhire.com";
+var CLAIM_SYNC_BASE = resolveApiBase();
+warnSharedCredentialsIfNonProd(CLAIM_SYNC_BASE);
 var AUTO_CONSENT_VERSION = 3;
 var AUTO_PUSH_THROTTLE_MS = 24 * 60 * 60 * 1e3;
 async function writePushTokenEnc(rawToken) {

package/dist/bin/directory.js

@@ -53,12 +53,104 @@ function ensureStateDir(dir) {
   }
 }
 
+// src/api-base.ts
+var PROD_API_BASE = "https://terminalhire.com";
+var DEV_API_BASE = "https://dev.terminalhire.com";
+var ApiBaseError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ApiBaseError";
+  }
+};
+var ALLOWED_HOSTS = {
+  "terminalhire.com": "https:",
+  "www.terminalhire.com": "https:",
+  "dev.terminalhire.com": "https:",
+  localhost: "http:",
+  "127.0.0.1": "http:"
+};
+var ALLOW_LOCAL_API_KEY = "TERMINALHIRE_ALLOW_LOCAL_API";
+var ALLOWED_DESCRIPTION = [
+  PROD_API_BASE,
+  DEV_API_BASE,
+  `http://localhost:<port> (requires ${ALLOW_LOCAL_API_KEY}=1)`,
+  `http://127.0.0.1:<port> (requires ${ALLOW_LOCAL_API_KEY}=1)`
+].join(", ");
+var CANONICAL_REWRITES = {
+  "www.terminalhire.com": PROD_API_BASE
+};
+var ENV_KEYS = ["TERMINALHIRE_API_URL", "JPI_API_URL"];
+function sanitizeOverrideForError(raw) {
+  try {
+    const url = new URL(raw);
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+      return `(disallowed scheme: ${url.protocol.slice(0, -1)})`;
+    }
+    if (url.username !== "" || url.password !== "") {
+      return `${url.protocol}//***@${url.host}`;
+    }
+    return url.origin;
+  } catch {
+    return "(unparseable override)";
+  }
+}
+function isLoopbackOrigin(origin) {
+  try {
+    const host = new URL(origin).hostname;
+    return host === "localhost" || host === "127.0.0.1";
+  } catch {
+    return false;
+  }
+}
+function localApiAllowed(env) {
+  return env[ALLOW_LOCAL_API_KEY] === "1";
+}
+function resolveApiBase(env = process.env) {
+  for (const key of ENV_KEYS) {
+    const raw = env[key];
+    if (typeof raw !== "string") continue;
+    const trimmed = raw.trim();
+    if (trimmed === "") continue;
+    const normalized = normalizeOverride(trimmed);
+    if (normalized === null) {
+      throw new ApiBaseError(
+        `terminalhire: ${key}=${sanitizeOverrideForError(trimmed)} is not an allowed API host (allowed: ${ALLOWED_DESCRIPTION}). Refusing to continue so we do not silently hit production.`
+      );
+    }
+    if (isLoopbackOrigin(normalized) && !localApiAllowed(env)) {
+      throw new ApiBaseError(
+        `terminalhire: ${key}=${normalized} is a loopback origin. Set ${ALLOW_LOCAL_API_KEY}=1 to talk to a local web app on purpose. Refusing so stored credentials cannot be exfiltrated to localhost by a poisoned override.`
+      );
+    }
+    return normalized;
+  }
+  return PROD_API_BASE;
+}
+function normalizeOverride(raw) {
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    return null;
+  }
+  if (url.username !== "" || url.password !== "") return null;
+  const expectedProtocol = ALLOWED_HOSTS[url.hostname];
+  if (expectedProtocol === void 0) return null;
+  if (url.protocol !== expectedProtocol) return null;
+  if (url.hostname !== "localhost" && url.hostname !== "127.0.0.1" && url.port !== "") {
+    return null;
+  }
+  const rewrite = CANONICAL_REWRITES[url.hostname];
+  if (rewrite !== void 0) return rewrite;
+  return url.origin;
+}
+
 // bin/directory.js
 var TERMINALHIRE_DIR = process.env.TERMINALHIRE_DIR || join(homedir(), ".terminalhire");
 var DIRECTORY_CACHE_FILE = join(TERMINALHIRE_DIR, "directory-cache.json");
 var PROJECT_FILE = join(TERMINALHIRE_DIR, "project.json");
 var INDEX_TTL_MS = 15 * 60 * 1e3;
-var API_URL = process.env["TERMINALHIRE_API_URL"] ?? process.env["JPI_API_URL"] ?? "https://terminalhire.com";
+var API_URL = resolveApiBase();
 function readDirectoryCache() {
   try {
     const entry = JSON.parse(readFileSync(DIRECTORY_CACHE_FILE, "utf8"));

package/dist/bin/founder-note-sync.js

@@ -0,0 +1,161 @@
+// src/api-base.ts
+var PROD_API_BASE = "https://terminalhire.com";
+var DEV_API_BASE = "https://dev.terminalhire.com";
+var ApiBaseError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ApiBaseError";
+  }
+};
+var ALLOWED_HOSTS = {
+  "terminalhire.com": "https:",
+  "www.terminalhire.com": "https:",
+  "dev.terminalhire.com": "https:",
+  localhost: "http:",
+  "127.0.0.1": "http:"
+};
+var ALLOW_LOCAL_API_KEY = "TERMINALHIRE_ALLOW_LOCAL_API";
+var ALLOWED_DESCRIPTION = [
+  PROD_API_BASE,
+  DEV_API_BASE,
+  `http://localhost:<port> (requires ${ALLOW_LOCAL_API_KEY}=1)`,
+  `http://127.0.0.1:<port> (requires ${ALLOW_LOCAL_API_KEY}=1)`
+].join(", ");
+var CANONICAL_REWRITES = {
+  "www.terminalhire.com": PROD_API_BASE
+};
+var ENV_KEYS = ["TERMINALHIRE_API_URL", "JPI_API_URL"];
+function sanitizeOverrideForError(raw) {
+  try {
+    const url = new URL(raw);
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+      return `(disallowed scheme: ${url.protocol.slice(0, -1)})`;
+    }
+    if (url.username !== "" || url.password !== "") {
+      return `${url.protocol}//***@${url.host}`;
+    }
+    return url.origin;
+  } catch {
+    return "(unparseable override)";
+  }
+}
+function isLoopbackOrigin(origin) {
+  try {
+    const host = new URL(origin).hostname;
+    return host === "localhost" || host === "127.0.0.1";
+  } catch {
+    return false;
+  }
+}
+function localApiAllowed(env) {
+  return env[ALLOW_LOCAL_API_KEY] === "1";
+}
+function resolveApiBase(env = process.env) {
+  for (const key of ENV_KEYS) {
+    const raw = env[key];
+    if (typeof raw !== "string") continue;
+    const trimmed = raw.trim();
+    if (trimmed === "") continue;
+    const normalized = normalizeOverride(trimmed);
+    if (normalized === null) {
+      throw new ApiBaseError(
+        `terminalhire: ${key}=${sanitizeOverrideForError(trimmed)} is not an allowed API host (allowed: ${ALLOWED_DESCRIPTION}). Refusing to continue so we do not silently hit production.`
+      );
+    }
+    if (isLoopbackOrigin(normalized) && !localApiAllowed(env)) {
+      throw new ApiBaseError(
+        `terminalhire: ${key}=${normalized} is a loopback origin. Set ${ALLOW_LOCAL_API_KEY}=1 to talk to a local web app on purpose. Refusing so stored credentials cannot be exfiltrated to localhost by a poisoned override.`
+      );
+    }
+    return normalized;
+  }
+  return PROD_API_BASE;
+}
+function normalizeOverride(raw) {
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    return null;
+  }
+  if (url.username !== "" || url.password !== "") return null;
+  const expectedProtocol = ALLOWED_HOSTS[url.hostname];
+  if (expectedProtocol === void 0) return null;
+  if (url.protocol !== expectedProtocol) return null;
+  if (url.hostname !== "localhost" && url.hostname !== "127.0.0.1" && url.port !== "") {
+    return null;
+  }
+  const rewrite = CANONICAL_REWRITES[url.hostname];
+  if (rewrite !== void 0) return rewrite;
+  return url.origin;
+}
+
+// bin/founder-note-sync.js
+var CLAIM_SYNC_BASE = resolveApiBase();
+async function fetchFounderNotes(pushToken, fetchImpl = fetch) {
+  if (typeof pushToken !== "string" || pushToken.length === 0) return null;
+  try {
+    const res = await fetchImpl(`${CLAIM_SYNC_BASE}/api/claim/notes`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ pushToken }),
+      signal: AbortSignal.timeout(15e3)
+    });
+    if (!res?.ok) return null;
+    const body = await res.json();
+    if (!body || !Array.isArray(body.notes)) return null;
+    const notes = body.notes.filter(
+      (n) => n && typeof n.claimId === "string" && n.claimId !== "" && typeof n.note === "string" && n.note !== "" && typeof n.at === "string" && (n.kind === "founder_note" || n.kind === "feedback")
+    );
+    return { notes, latestAt: typeof body.latestAt === "string" ? body.latestAt : null };
+  } catch {
+    return null;
+  }
+}
+function noteKey(note) {
+  return `${note.claimId}@${note.at}`;
+}
+function computeFounderNotes(notes, previous) {
+  const keys = Array.isArray(notes) ? notes.map(noteKey) : [];
+  const prior = previous && Array.isArray(previous.seen) ? new Set(previous.seen) : /* @__PURE__ */ new Set();
+  const seen = keys.filter((k) => prior.has(k));
+  return { count: keys.length - seen.length, seen };
+}
+function acknowledgeFounderNotes(notes) {
+  const keys = Array.isArray(notes) ? notes.map(noteKey) : [];
+  return { count: 0, seen: keys };
+}
+async function syncFounderNotes({
+  readAutoMarker,
+  readPushTokenEnc,
+  readPrevious,
+  fetchImpl = fetch,
+  timeoutMs = 15e3
+} = {}) {
+  try {
+    const marker = readAutoMarker();
+    const token = await readPushTokenEnc();
+    if (!marker || !token) return null;
+    const answer = await fetchFounderNotes(
+      token,
+      (url, init) => fetchImpl(url, { ...init, signal: AbortSignal.timeout(timeoutMs) })
+    );
+    if (!answer) return null;
+    return computeFounderNotes(answer.notes, readPrevious());
+  } catch {
+    return null;
+  }
+}
+function formatNote(note) {
+  const label = note.kind === "feedback" ? "changes requested" : "note";
+  return `  ${note.at.slice(0, 16).replace("T", " ")}  [${label}]  ${note.claimId}
+    ${note.note.split("\n").join("\n    ")}`;
+}
+export {
+  acknowledgeFounderNotes,
+  computeFounderNotes,
+  fetchFounderNotes,
+  formatNote,
+  noteKey,
+  syncFounderNotes
+};