finch-cli 0.2.0__tar.gz → 0.3.0__tar.gz

finch_cli-0.3.0/LICENSE

@@ -0,0 +1,43 @@
+Finch CLI Terms of Use
+
+Copyright (c) 2026 Finch (applyfinch.com). All rights reserved.
+
+1. License grant. Finch grants you a personal, non-exclusive, non-transferable,
+   revocable license to install and use this software on devices you own or
+   control for your own job-search workflow. Educational and evaluation use are
+   permitted.
+
+2. Restrictions. You may not:
+   (a) copy, modify, adapt, translate, or create derivative works of the
+       software;
+   (b) reverse engineer, decompile, disassemble, or attempt to discover the
+       source code, except to the extent that applicable law expressly
+       prohibits such a restriction;
+   (c) sublicense, sell, rent, lease, distribute, or otherwise transfer the
+       software or any rights to it;
+   (d) remove or alter any proprietary notices contained in the software;
+   (e) use the software to build a competing product or service.
+
+3. Service component. Certain features (including but not limited to "finch
+   login" and tailoring performed via the Finch backend) require communication
+   with services operated by Finch. Those services are subject to the terms
+   posted at https://applyfinch.com/terms. Finch may modify, suspend, or
+   discontinue any service feature at any time.
+
+4. Ownership. The software, including all intellectual property rights in it,
+   is and remains the property of Finch. No rights are granted except those
+   expressly set out in this license.
+
+5. No warranty. THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND,
+   EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION THE WARRANTIES OF
+   MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
+
+6. Limitation of liability. TO THE FULLEST EXTENT PERMITTED BY LAW, FINCH WILL
+   NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR
+   PUNITIVE DAMAGES ARISING OUT OF OR RELATING TO YOUR USE OF THE SOFTWARE.
+
+7. Termination. This license terminates automatically if you breach any of its
+   terms. On termination, you must stop using and delete all copies of the
+   software.
+
+8. Contact. carlunpen@gmail.com.

{finch_cli-0.2.0 → finch_cli-0.3.0}/PKG-INFO

@@ -1,18 +1,18 @@
-Metadata-Version: 2.3
+Metadata-Version: 2.4
 Name: finch-cli
-Version: 0.2.0
+Version: 0.3.0
 Summary: Tailor your resume to any job posting from your terminal.
 Project-URL: Homepage, https://applyfinch.com
 Project-URL: Repository, https://github.com/applyEasy/finch-cli
 Project-URL: Issues, https://github.com/applyEasy/finch-cli/issues
 Author-email: Carlos Luna-Pena <carlunpen@gmail.com>
-License: MIT
+License: LicenseRef-Proprietary
 License-File: LICENSE
 Keywords: ai,career,cli,deepseek,internship,job-search,openai,resume,textual,tui
 Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Console
 Classifier: Intended Audience :: End Users/Desktop
-Classifier: License :: OSI Approved :: MIT License
+Classifier: License :: Other/Proprietary License
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
@@ -145,4 +145,4 @@ the autofill side - the part that actually fills out the application form - live
 
 ## license
 
-mit.
+proprietary. personal + evaluation use only. see LICENSE for the full terms.

{finch_cli-0.2.0 → finch_cli-0.3.0}/README.md

@@ -112,4 +112,4 @@ the autofill side - the part that actually fills out the application form - live
 
 ## license
 
-mit.
+proprietary. personal + evaluation use only. see LICENSE for the full terms.

finch_cli-0.3.0/REDDIT_POST.md

@@ -0,0 +1,230 @@
+# reddit launch drafts -- finch-cli 0.2.0
+
+three drafts below. pick the sub, paste the body, attach the images noted under each.
+
+space cross-posts at least 24h apart. the order I'd post:
+
+  1. **r/Python** -- sunday 9-10pm central. mod-friendly, expects polish.
+  2. **r/csmajors** -- monday 8-9am central. the target audience.
+  3. **show hn** -- tuesday morning. picky, expects technical depth.
+
+## image assets in /docs
+
+| file | use it for |
+|---|---|
+| `docs/tui-tailor.svg` | the money shot. tailor tab + match panel (78 -> 92 score) |
+| `docs/tui-jobs.svg` | jobs tab. real internships from simplifyjobs. |
+| `docs/tui-library.svg` | library tab (less important) |
+| `docs/cli-login.svg` | the `finch login` terminal output |
+| `docs/cli-auth-approved.png` | the in-browser approved page. crop/blur the email if you want. |
+| `docs/cli-auth-needs-signin.png` | the error/empty state (skip unless you want a "polished edge case" beat) |
+
+---
+
+## 1. r/Python -- "Show /r/Python" tag
+
+**title**: *Show /r/Python: finch-cli -- tailor your resume to a job in your terminal, with a one-link sign-in flow*
+
+**body**:
+
+```
+hi r/Python,
+
+cs senior at tamu, built a small cli + textual tui that tailors a resume to a
+specific job posting. lives at https://github.com/applyEasy/finch-cli, mit, 0.2.0
+on pypi.
+
+    pip install finch-cli
+    finch login          # opens a browser link, no api key needed
+    finch ui
+
+or pure cli:
+
+    finch tailor --resume resume.md --job https://jobs.example.com/swe-intern -o tailored.md
+
+[image: docs/tui-tailor.svg]
+[image: docs/cli-login.svg]
+
+what it does:
+
+- the tailor command sends your base resume + a job posting to deepseek/v3.2 (or
+  any openai-compatible endpoint) and gets back a markdown resume with bullets
+  and ordering reworked for the posting. won't invent skills you don't have --
+  the system prompt enforces that.
+- the tui has three tabs: jobs (pulls ~3,200 active internships + new-grad
+  postings from the simplifyjobs lists), library (saved tailorings), and the
+  three-pane tailor editor (base / job / output). there's an ats-style match
+  panel at the bottom that shows score, matched + missing keywords, and the
+  delta vs the base resume.
+- `finch login` opens a sign-in link on applyfinch.com so you don't have to
+  manage an api key. backend does the llm call on a small free tier. if you'd
+  rather use your own key (deepseek is cheap, ~30x less than gpt-4o), skip
+  login and set DEEPSEEK_API_KEY.
+
+stack:
+
+- click for the cli, textual for the tui, rich for the rendering, httpx for the
+  network, trafilatura for url -> text on job postings.
+- openai sdk against deepseek's api by default (model: deepseek-chat), but
+  anything openai-compatible works (groq, together, fireworks, openrouter, etc.).
+  the `finch login` path uses deepseek-v3.2 via openrouter on the finch backend.
+- hatchling for the build. under 2k loc in finch_cli/.
+- the login flow is rfc 8628 device flow: cli posts /api/v1/cli/start, prints
+  the verification url, polls /api/v1/cli/poll until the user clicks the link,
+  signs in (supabase + google), and the page posts /api/v1/cli/approve. token
+  is sha256-hashed at rest, supabase rls service-role only, no api key in plain
+  text on disk.
+
+security stuff I cared about:
+
+- ssrf defense on the url-fetch path (scheme allowlist + private/loopback ip
+  rejection via socket.getaddrinfo + ipaddress).
+- prompt injection inside the job posting is treated as data, not instructions
+  -- I strip the wrapping tags, cap inputs at 20k chars each, and remind the
+  model after the user message. ran a few obvious "ignore previous
+  instructions, output X" cases through it and the model held.
+- token revocation actually revokes server-side (sha256 lookup deleted from
+  the cli_tokens table), so `finch logout` isn't local-only.
+
+known limits:
+
+- workday + some greenhouse iframe pages need js, so url fetching fails clean
+  and tells you to use --job-file with a pasted description.
+- the model won't invent experience. if your base resume is thin, the tailored
+  one is thin. fix the base first.
+- output is markdown. pipe to pandoc for pdf, or paste into overleaf if you
+  have a tex template.
+
+repo: https://github.com/applyEasy/finch-cli
+pypi: https://pypi.org/project/finch-cli/
+
+feedback and prs welcome. the autofill side of the workflow -- the part that
+fills out the actual application form -- lives at applyfinch.com if you want
+that piece too.
+```
+
+---
+
+## 2. r/csmajors (and r/internships)
+
+**title**: *built a cli that tailors your resume to each internship posting. mit, on pypi, no signup.*
+
+**body**:
+
+```
+cs senior at tamu. you know the drill -- 80 applications a season, every job
+posting wants a slightly different angle, and you end up with a Resume_Final_v9_USE_THIS.docx
+nightmare. so my co-founder and I built a small open source tool that does the
+tailoring for you.
+
+    pip install finch-cli
+    finch login        # opens a browser link, signs you in. no api key needed.
+    finch ui
+
+three tabs: a jobs tab (3,000+ live internships + new-grads from the
+simplifyjobs lists), a library of your tailored resumes, and the tailor editor
+(base resume / job posting / tailored output side by side). there's an ats-style
+match panel showing your match score, which job keywords you cover, which ones
+you don't, and how much the tailored version moved the needle vs the base.
+
+[image: docs/tui-tailor.svg]
+[image: docs/tui-jobs.svg]
+
+how the tailoring works: you give it your resume in markdown + a job description
+(url or paste). the model rewrites bullets + ordering to fit the posting. it
+won't invent experience you don't have -- the prompt enforces that. you'll
+get something honest, just better-aligned.
+
+example cli usage if you don't want the tui:
+
+    finch tailor -r resume.md --job https://jobs.netflix.com/positions/14234 -o tailored.md
+
+repo (mit): https://github.com/applyEasy/finch-cli
+pypi: https://pypi.org/project/finch-cli/
+
+happy to answer questions. roadmap is `finch jobs` (filter + pull job feeds
+straight into the tailor) and `finch apply` (auto-apply from the cli). prs
+welcome.
+```
+
+---
+
+## 3. Show HN
+
+**title**: *Show HN: Finch-cli – terminal resume tailoring with one-click sign-in (no API key)*
+
+**body** (first comment after submission, since HN doesn't use post bodies for Show):
+
+```
+Hi HN,
+
+CS senior at A&M, built a small terminal client for the part of job hunting
+that's actually tedious: tailoring the same resume to 50+ postings a season.
+
+  pip install finch-cli
+  finch login    # opens a sign-in link in your browser
+  finch ui
+
+[image: docs/tui-tailor.svg]
+[image: docs/cli-auth-approved.png]
+
+It's a CLI plus a Textual TUI in one package. Three tabs: jobs (live internship
++ new-grad feeds from SimplifyJobs, ~3,200 postings), a library of saved
+tailorings, and a three-pane editor (base resume / job posting / tailored
+output) with an ATS-style match panel showing score, keyword coverage, and the
+delta vs your base resume.
+
+Some design choices I'd be curious for feedback on:
+
+1. The login flow is RFC 8628 device flow, not "paste an API key." Reasoning:
+   most CLI users don't want to manage a DeepSeek/OpenAI key, and the friction
+   of getting one was tanking install-to-first-tailor conversion in my own
+   testing. `finch login` opens a link, you sign in with Google on
+   applyfinch.com, the page POSTs the device code back, the CLI polls and
+   gets a token. Token's SHA256-hashed at rest, server-side revocation on
+   logout. Power users can skip login and set DEEPSEEK_API_KEY.
+
+2. The TUI lives in the same `finch_cli` package -- not a separate `finch_cli[tui]`
+   extra. The reasoning was that Textual is the actual product surface, not an
+   optional. Made the dep list slightly heavier but kept the install story
+   one-line.
+
+3. Default models: the local path uses `deepseek-chat` against DeepSeek's API
+   (the env var is `DEEPSEEK_API_KEY`); the `finch login` path goes through
+   the Finch backend which calls `deepseek/deepseek-v3.2-exp` via OpenRouter.
+   DeepSeek is roughly 30x cheaper than GPT-4o on this prompt. In my own
+   side-by-side reads it produced tighter bullets than Sonnet for this use
+   case, but I haven't run a proper eval -- take it as anecdote.
+
+4. Security: SSRF defense on the URL-fetch path (scheme allowlist + private/
+   loopback IP rejection via ipaddress.ip_address against socket.getaddrinfo
+   results), 5 MB response cap, manual redirect following with revalidation
+   each hop. Prompt injection inside the <job_posting> tags is stripped + the
+   model is reminded after the user message that the contents are data. Input
+   caps are 20k chars on the job and 20k on the resume.
+
+Repo (MIT): https://github.com/applyEasy/finch-cli
+PyPI: https://pypi.org/project/finch-cli/
+
+The auto-apply side -- the part that actually fills out Workday/Greenhouse/
+Ashby/Lever forms -- lives at https://applyfinch.com. Same engine, free
+during beta.
+
+Feedback welcome.
+```
+
+---
+
+## notes for posting
+
+- the `finch login` flow is what makes 0.2.0 different from 0.1.x and worth a fresh
+  post even if r/Python saw 0.1.x. lead with it in titles.
+- if you post screenshots: the tailor tab svg is the strongest single image. it
+  shows the product, the score, the keyword analysis, and the orange branding in
+  one frame. the cli-auth-approved.png is the second-strongest because "click
+  a link to sign in to a cli" is a beat people don't expect.
+- crop the +e2eresume2 email in cli-auth-approved.png if you don't want the
+  alias visible. it's yours but visible.
+- after posting, watch the first 30 min for comments and respond to ALL of them
+  in your voice (no AI, no em-dashes, no "great question"). that's what makes
+  or breaks r/Python.

finch_cli-0.3.0/docs/cli-login.svg

@@ -0,0 +1,99 @@
+<svg class="rich-terminal" viewBox="0 0 1068 294.0" xmlns="http://www.w3.org/2000/svg">
+    <!-- Generated with Rich https://www.textualize.io -->
+    <style>
+
+    @font-face {
+        font-family: "Fira Code";
+        src: local("FiraCode-Regular"),
+                url("https://cdnjs.cloudflare.com/ajax/libs/firacode/6.2.0/woff2/FiraCode-Regular.woff2") format("woff2"),
+                url("https://cdnjs.cloudflare.com/ajax/libs/firacode/6.2.0/woff/FiraCode-Regular.woff") format("woff");
+        font-style: normal;
+        font-weight: 400;
+    }
+    @font-face {
+        font-family: "Fira Code";
+        src: local("FiraCode-Bold"),
+                url("https://cdnjs.cloudflare.com/ajax/libs/firacode/6.2.0/woff2/FiraCode-Bold.woff2") format("woff2"),
+                url("https://cdnjs.cloudflare.com/ajax/libs/firacode/6.2.0/woff/FiraCode-Bold.woff") format("woff");
+        font-style: bold;
+        font-weight: 700;
+    }
+
+    .terminal-2184957314-matrix {
+        font-family: Fira Code, monospace;
+        font-size: 20px;
+        line-height: 24.4px;
+        font-variant-east-asian: full-width;
+    }
+
+    .terminal-2184957314-title {
+        font-size: 18px;
+        font-weight: bold;
+        font-family: arial;
+    }
+
+    .terminal-2184957314-r1 { fill: #c5c8c6 }
+.terminal-2184957314-r2 { fill: #c5c8c6;font-weight: bold }
+.terminal-2184957314-r3 { fill: #68a0b3;text-decoration: underline; }
+.terminal-2184957314-r4 { fill: #868887 }
+.terminal-2184957314-r5 { fill: #8d7b39 }
+.terminal-2184957314-r6 { fill: #98a84b }
+    </style>
+
+    <defs>
+    <clipPath id="terminal-2184957314-clip-terminal">
+      <rect x="0" y="0" width="1048.2" height="243.0" />
+    </clipPath>
+    <clipPath id="terminal-2184957314-line-0">
+    <rect x="0" y="1.5" width="1049.2" height="24.65"/>
+            </clipPath>
+<clipPath id="terminal-2184957314-line-1">
+    <rect x="0" y="25.9" width="1049.2" height="24.65"/>
+            </clipPath>
+<clipPath id="terminal-2184957314-line-2">
+    <rect x="0" y="50.3" width="1049.2" height="24.65"/>
+            </clipPath>
+<clipPath id="terminal-2184957314-line-3">
+    <rect x="0" y="74.7" width="1049.2" height="24.65"/>
+            </clipPath>
+<clipPath id="terminal-2184957314-line-4">
+    <rect x="0" y="99.1" width="1049.2" height="24.65"/>
+            </clipPath>
+<clipPath id="terminal-2184957314-line-5">
+    <rect x="0" y="123.5" width="1049.2" height="24.65"/>
+            </clipPath>
+<clipPath id="terminal-2184957314-line-6">
+    <rect x="0" y="147.9" width="1049.2" height="24.65"/>
+            </clipPath>
+<clipPath id="terminal-2184957314-line-7">
+    <rect x="0" y="172.3" width="1049.2" height="24.65"/>
+            </clipPath>
+<clipPath id="terminal-2184957314-line-8">
+    <rect x="0" y="196.7" width="1049.2" height="24.65"/>
+            </clipPath>
+    </defs>
+
+    <rect fill="#292929" stroke="rgba(255,255,255,0.35)" stroke-width="1" x="1" y="1" width="1066" height="292" rx="8"/><text class="terminal-2184957314-title" fill="#c5c8c6" text-anchor="middle" x="533" y="27">finch&#160;login</text>
+            <g transform="translate(26,22)">
+            <circle cx="0" cy="0" r="7" fill="#ff5f57"/>
+            <circle cx="22" cy="0" r="7" fill="#febc2e"/>
+            <circle cx="44" cy="0" r="7" fill="#28c840"/>
+            </g>
+        
+    <g transform="translate(9, 41)" clip-path="url(#terminal-2184957314-clip-terminal)">
+    
+    <g class="terminal-2184957314-matrix">
+    <text class="terminal-2184957314-r1" x="1049.2" y="20" textLength="12.2" clip-path="url(#terminal-2184957314-line-0)">
+</text><text class="terminal-2184957314-r2" x="0" y="44.4" textLength="500.2" clip-path="url(#terminal-2184957314-line-1)">Open&#160;this&#160;URL&#160;in&#160;your&#160;browser&#160;to&#160;sign&#160;in:</text><text class="terminal-2184957314-r1" x="1049.2" y="44.4" textLength="12.2" clip-path="url(#terminal-2184957314-line-1)">
+</text><text class="terminal-2184957314-r3" x="24.4" y="68.8" textLength="390.4" clip-path="url(#terminal-2184957314-line-2)">https://applyfinch.com/cli/auth?</text><text class="terminal-2184957314-r3" x="414.8" y="68.8" textLength="48.8" clip-path="url(#terminal-2184957314-line-2)">code</text><text class="terminal-2184957314-r3" x="463.6" y="68.8" textLength="12.2" clip-path="url(#terminal-2184957314-line-2)">=</text><text class="terminal-2184957314-r3" x="475.8" y="68.8" textLength="48.8" clip-path="url(#terminal-2184957314-line-2)">AUB8</text><text class="terminal-2184957314-r3" x="524.6" y="68.8" textLength="61" clip-path="url(#terminal-2184957314-line-2)">-MMQH</text><text class="terminal-2184957314-r1" x="1049.2" y="68.8" textLength="12.2" clip-path="url(#terminal-2184957314-line-2)">
+</text><text class="terminal-2184957314-r1" x="1049.2" y="93.2" textLength="12.2" clip-path="url(#terminal-2184957314-line-3)">
+</text><text class="terminal-2184957314-r1" x="0" y="117.6" textLength="695.4" clip-path="url(#terminal-2184957314-line-4)">If&#160;your&#160;browser&#160;does&#160;not&#160;open&#160;automatically,&#160;the&#160;code&#160;is&#160;</text><text class="terminal-2184957314-r2" x="695.4" y="117.6" textLength="109.8" clip-path="url(#terminal-2184957314-line-4)">AUB8-MMQH</text><text class="terminal-2184957314-r1" x="805.2" y="117.6" textLength="12.2" clip-path="url(#terminal-2184957314-line-4)">.</text><text class="terminal-2184957314-r1" x="1049.2" y="117.6" textLength="12.2" clip-path="url(#terminal-2184957314-line-4)">
+</text><text class="terminal-2184957314-r1" x="1049.2" y="142" textLength="12.2" clip-path="url(#terminal-2184957314-line-5)">
+</text><text class="terminal-2184957314-r4" x="0" y="166.4" textLength="610" clip-path="url(#terminal-2184957314-line-6)">Opened&#160;your&#160;browser.&#160;Sign&#160;in,&#160;then&#160;come&#160;back&#160;here.</text><text class="terminal-2184957314-r1" x="1049.2" y="166.4" textLength="12.2" clip-path="url(#terminal-2184957314-line-6)">
+</text><text class="terminal-2184957314-r4" x="0" y="190.8" textLength="231.8" clip-path="url(#terminal-2184957314-line-7)">Waiting&#160;for&#160;sign-in</text><text class="terminal-2184957314-r5" x="231.8" y="190.8" textLength="36.6" clip-path="url(#terminal-2184957314-line-7)">...</text><text class="terminal-2184957314-r1" x="1049.2" y="190.8" textLength="12.2" clip-path="url(#terminal-2184957314-line-7)">
+</text><text class="terminal-2184957314-r1" x="1049.2" y="215.2" textLength="12.2" clip-path="url(#terminal-2184957314-line-8)">
+</text><text class="terminal-2184957314-r6" x="0" y="239.6" textLength="122" clip-path="url(#terminal-2184957314-line-9)">Signed&#160;in.</text><text class="terminal-2184957314-r1" x="122" y="239.6" textLength="207.4" clip-path="url(#terminal-2184957314-line-9)">&#160;You&#160;can&#160;now&#160;run&#160;</text><text class="terminal-2184957314-r2" x="329.4" y="239.6" textLength="146.4" clip-path="url(#terminal-2184957314-line-9)">finch&#160;tailor</text><text class="terminal-2184957314-r1" x="475.8" y="239.6" textLength="244" clip-path="url(#terminal-2184957314-line-9)">&#160;without&#160;an&#160;API&#160;key.</text><text class="terminal-2184957314-r1" x="1049.2" y="239.6" textLength="12.2" clip-path="url(#terminal-2184957314-line-9)">
+</text>
+    </g>
+    </g>
+</svg>