flowcvcli 0.2.0__tar.gz → 0.6.0__tar.gz

{flowcvcli-0.2.0/flowcvcli.egg-info → flowcvcli-0.6.0}/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: flowcvcli
-Version: 0.2.0
-Summary: Control a FlowCV resume from the command line or Python — content, design, templates, photo, publish and PDF export — via FlowCV's private JSON API. Zero dependencies.
+Version: 0.6.0
+Summary: Control a FlowCV resume from the command line or Python — content, design, templates, photo, publish and PDF export — via FlowCV's private JSON API.
 Author: dannyota
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/dannyota/flowcvcli
@@ -26,17 +26,18 @@ Classifier: Topic :: Utilities
 Requires-Python: >=3.8
 Description-Content-Type: text/markdown
 License-File: LICENSE
+Requires-Dist: curl_cffi>=0.7
 Dynamic: license-file
 
 # flowcvcli
 
 [![PyPI](https://img.shields.io/pypi/v/flowcvcli.svg)](https://pypi.org/project/flowcvcli/)
-[![Python](https://img.shields.io/pypi/pyversions/flowcvcli.svg)](https://pypi.org/project/flowcvcli/)
+[![Python](https://img.shields.io/badge/python-3.8%2B-blue.svg)](https://pypi.org/project/flowcvcli/)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 
 Control a [FlowCV](https://flowcv.com) resume from the **command line** or from
 **Python** — content, header & links, **customization**, **templates**,
-**avatar**, reorder/hide, multi-resume management, publish, and **PDF export**.
+**avatar**, reorder/hide, multi-resume management, **backup/restore**, publish, and **PDF export**.
 It drives FlowCV's private JSON API (the same calls the web app makes), so it
 works for any FlowCV resume with your own session. **Zero dependencies** (Python
 standard library only), so it's easy to drop into scripts and LLM agents.
@@ -96,10 +97,13 @@ flowcv duplicate ["Copy title"]      # full copy of the current resume
 flowcv rename "New Title"            # rename the current resume
 flowcv delete-resume --yes           # permanent (refuses without --yes)
 
-# content (markdown mini-format below); `add` creates the section if needed
+# content (markdown mini-format below); `add` creates the section if needed.
+# --set aliases (title/company/link) resolve per section (work->jobTitle, publication->title…)
 flowcv add work --set title="Engineer" --set company="Acme" \
        --set start=01/2022 --set end=Present --text $'- Did a measurable thing.'
-flowcv desc work <id> --file role.md
+flowcv add custom2 --section-name "Open Source" --icon code --text "…"   # heading+icon at creation
+flowcv desc work <id> --file role.md           # rich text; --field is optional (auto: profile=text, skill=infoHtml)
+flowcv date publication <id> --year 2018       # structured date (year-only by default)
 flowcv field work <id> employer --text "Acme Corp"
 flowcv rm work <id>
 
@@ -109,7 +113,7 @@ flowcv hide work <id> ; flowcv show-entry work <id>
 flowcv rename-section skill "Core Skills"
 flowcv section-icon skill head-side-brain
 flowcv rm-section custom1 --yes           # delete a section + its entries
-flowcv reorder-sections profile work skill education   # one-column order
+flowcv reorder-sections profile work skill education   # set one-column order (no args = print current)
 
 # header details & links (links are social entries: orcid, googlescholar, github…)
 flowcv pd jobTitle --text "Security Leader"
@@ -131,6 +135,10 @@ flowcv download -o resume.pdf        # the rendered PDF
 flowcv download --token <webToken> -o out.pdf   # any PUBLIC resume by its share token (no auth)
 flowcv share | publish | unpublish
 
+# backup / restore
+flowcv export -o backup.json          # full resume snapshot (JSON) — keep one before big edits
+flowcv import backup.json             # restore the snapshot into a NEW resume (non-destructive)
+
 flowcv login                          # refresh the cached session
 flowcv md2html --file role.md         # preview HTML (offline)
 ```
@@ -159,6 +167,12 @@ fc.rename_section("skill", "Core Skills"); fc.delete_section("custom1")
 fc.hide_entry("work", "id", hidden=True)
 new_id = fc.create_resume("Second Resume")          # or fc.duplicate_resume()
 fc.rename_resume("New Title"); fc.delete_resume()    # delete is permanent
+fc.set_date("publication", "id", year=2018)         # structured date (year-only)
+
+# backup / restore
+import json
+json.dump(fc.export_resume(), open("backup.json", "w"))   # full snapshot
+new_id = fc.import_resume(json.load(open("backup.json")))  # restore into a NEW resume
 ```
 
 ### Build → render → check → improve
@@ -173,9 +187,11 @@ feedback loop for building a resume from raw info.
 |---|---|
 | blank line | block separator |
 | `## Heading` / `**Whole line bold**` | bold subheader |
+| `***Whole line***` | bold + italic subheader |
 | `- item` | bullet (consecutive = one list) |
 | anything else | justified paragraph |
-| `**bold**` inline | `<strong>bold</strong>` |
+| `**bold**` / `***bold-italic***` inline | `<strong>` / `<strong><em>…</em></strong>` |
+| `[text](url)` inline | link |
 
 ## How it works
 

{flowcvcli-0.2.0 → flowcvcli-0.6.0}/README.md

@@ -1,12 +1,12 @@
 # flowcvcli
 
 [![PyPI](https://img.shields.io/pypi/v/flowcvcli.svg)](https://pypi.org/project/flowcvcli/)
-[![Python](https://img.shields.io/pypi/pyversions/flowcvcli.svg)](https://pypi.org/project/flowcvcli/)
+[![Python](https://img.shields.io/badge/python-3.8%2B-blue.svg)](https://pypi.org/project/flowcvcli/)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 
 Control a [FlowCV](https://flowcv.com) resume from the **command line** or from
 **Python** — content, header & links, **customization**, **templates**,
-**avatar**, reorder/hide, multi-resume management, publish, and **PDF export**.
+**avatar**, reorder/hide, multi-resume management, **backup/restore**, publish, and **PDF export**.
 It drives FlowCV's private JSON API (the same calls the web app makes), so it
 works for any FlowCV resume with your own session. **Zero dependencies** (Python
 standard library only), so it's easy to drop into scripts and LLM agents.
@@ -66,10 +66,13 @@ flowcv duplicate ["Copy title"]      # full copy of the current resume
 flowcv rename "New Title"            # rename the current resume
 flowcv delete-resume --yes           # permanent (refuses without --yes)
 
-# content (markdown mini-format below); `add` creates the section if needed
+# content (markdown mini-format below); `add` creates the section if needed.
+# --set aliases (title/company/link) resolve per section (work->jobTitle, publication->title…)
 flowcv add work --set title="Engineer" --set company="Acme" \
        --set start=01/2022 --set end=Present --text $'- Did a measurable thing.'
-flowcv desc work <id> --file role.md
+flowcv add custom2 --section-name "Open Source" --icon code --text "…"   # heading+icon at creation
+flowcv desc work <id> --file role.md           # rich text; --field is optional (auto: profile=text, skill=infoHtml)
+flowcv date publication <id> --year 2018       # structured date (year-only by default)
 flowcv field work <id> employer --text "Acme Corp"
 flowcv rm work <id>
 
@@ -79,7 +82,7 @@ flowcv hide work <id> ; flowcv show-entry work <id>
 flowcv rename-section skill "Core Skills"
 flowcv section-icon skill head-side-brain
 flowcv rm-section custom1 --yes           # delete a section + its entries
-flowcv reorder-sections profile work skill education   # one-column order
+flowcv reorder-sections profile work skill education   # set one-column order (no args = print current)
 
 # header details & links (links are social entries: orcid, googlescholar, github…)
 flowcv pd jobTitle --text "Security Leader"
@@ -101,6 +104,10 @@ flowcv download -o resume.pdf        # the rendered PDF
 flowcv download --token <webToken> -o out.pdf   # any PUBLIC resume by its share token (no auth)
 flowcv share | publish | unpublish
 
+# backup / restore
+flowcv export -o backup.json          # full resume snapshot (JSON) — keep one before big edits
+flowcv import backup.json             # restore the snapshot into a NEW resume (non-destructive)
+
 flowcv login                          # refresh the cached session
 flowcv md2html --file role.md         # preview HTML (offline)
 ```
@@ -129,6 +136,12 @@ fc.rename_section("skill", "Core Skills"); fc.delete_section("custom1")
 fc.hide_entry("work", "id", hidden=True)
 new_id = fc.create_resume("Second Resume")          # or fc.duplicate_resume()
 fc.rename_resume("New Title"); fc.delete_resume()    # delete is permanent
+fc.set_date("publication", "id", year=2018)         # structured date (year-only)
+
+# backup / restore
+import json
+json.dump(fc.export_resume(), open("backup.json", "w"))   # full snapshot
+new_id = fc.import_resume(json.load(open("backup.json")))  # restore into a NEW resume
 ```
 
 ### Build → render → check → improve
@@ -143,9 +156,11 @@ feedback loop for building a resume from raw info.
 |---|---|
 | blank line | block separator |
 | `## Heading` / `**Whole line bold**` | bold subheader |
+| `***Whole line***` | bold + italic subheader |
 | `- item` | bullet (consecutive = one list) |
 | anything else | justified paragraph |
-| `**bold**` inline | `<strong>bold</strong>` |
+| `**bold**` / `***bold-italic***` inline | `<strong>` / `<strong><em>…</em></strong>` |
+| `[text](url)` inline | link |
 
 ## How it works
 

{flowcvcli-0.2.0 → flowcvcli-0.6.0}/flowcvcli/__init__.py

@@ -5,4 +5,4 @@ from .content import SECTION_META, label_of
 from .markup import html_to_text, md_to_html
 
 __all__ = ["FlowCV", "Config", "SECTION_META", "label_of", "md_to_html", "html_to_text"]
-__version__ = "0.2.0"
+__version__ = "0.6.0"

{flowcvcli-0.2.0 → flowcvcli-0.6.0}/flowcvcli/cli.py

@@ -8,18 +8,36 @@ or pass `--resume-id <id>` (any command accepts it).
 import argparse
 import json
 import os
+import re
 import sys
 
 from .api import FlowCV
 from .client import login as do_login, _write_session, _jar_header
-from .content import SECTION_META, label_of
+from .content import SECTION_META, label_of, rich_field
 from .markup import html_to_text, md_to_html
 
-ALIASES = {"title": "jobTitle", "company": "employer", "start": "startDateNew",
-           "end": "endDateNew", "link": "employerLink"}
+# `--set key=value` friendly aliases. `start`/`end` are common to all sections;
+# `title`/`company`/`link` map to different real fields per section, so resolve
+# them section-aware (the old flat map mis-set custom/publication entries).
+_ALIASES_COMMON = {"start": "startDateNew", "end": "endDateNew"}
+_ALIASES_BY_SECTION = {
+    "work":         {"title": "jobTitle", "company": "employer", "link": "employerLink"},
+    "education":    {"title": "degree", "company": "school", "link": "schoolLink"},
+    "publication":  {"title": "title", "company": "publisher", "link": "titleLink"},
+    "organisation": {"title": "position", "company": "organisationName", "link": "organisationLink"},
+    "custom":       {"title": "title", "link": "titleLink"},
+}
 TEXT_FIELDS = ("description", "infoHtml", "text")
 
 
+def _resolve_set_key(section, key):
+    """Map a friendly --set key to the real entry field for `section`."""
+    if key in _ALIASES_COMMON:
+        return _ALIASES_COMMON[key]
+    sec = "custom" if re.fullmatch(r"custom\d+", section or "") else section
+    return _ALIASES_BY_SECTION.get(sec, {}).get(key, key)
+
+
 def _read(file=None, text=None):
     if file:
         with open(file) as f:
@@ -111,8 +129,9 @@ def cmd_add(a):
         if "=" not in kv:
             sys.exit(f"--set expects key=value, got {kv!r}")
         k, _, v = kv.partition("=")
-        sets[ALIASES.get(k, k)] = v
-    new_id = _fc(a).add_entry(a.section, sets=sets, md=_read(a.file, a.text))
+        sets[_resolve_set_key(a.section, k)] = v
+    new_id = _fc(a).add_entry(a.section, sets=sets, md=_read(a.file, a.text),
+                              section_name=a.section_name, section_icon=a.icon)
     print(f"added {a.section} entry -> {new_id}")
 
 
@@ -148,7 +167,24 @@ def cmd_rm_section(a):
 
 
 def cmd_reorder_sections(a):
-    _result(_fc(a).reorder_sections(a.ids, layout=a.layout), f"reorder-sections ({a.layout})")
+    fc = _fc(a)
+    if not a.ids:                                   # no ids -> print current order
+        resume = fc.get_resume()
+        so = (resume.get("customization") or {}).get("sectionOrder") or {}
+        content = resume.get("content") or {}
+        name = lambda sid: (content.get(sid) or {}).get("displayName", "")
+        print(f"section order ({a.layout}):")
+        if a.layout == "two":
+            lay = so.get("two") or {}
+            for side in ("leftSectionsSorted", "rightSectionsSorted"):
+                print(f"  {side}:")
+                for sid in lay.get(side) or []:
+                    print(f"    {sid}  {name(sid)}")
+        else:
+            for sid in (so.get(a.layout) or {}).get("sectionsSorted") or []:
+                print(f"  {sid}  {name(sid)}")
+        return
+    _result(fc.reorder_sections(a.ids, layout=a.layout), f"reorder-sections ({a.layout})")
 
 
 def cmd_field(a):
@@ -157,8 +193,28 @@ def cmd_field(a):
 
 
 def cmd_desc(a):
-    _result(_fc(a).set_description(a.section, a.entry, _read(a.file, a.text), field=a.field),
-            f"{a.section}/{a.entry[:8]}.{a.field}")
+    field = a.field or rich_field(a.section)        # auto: profile->text, skill->infoHtml
+    _result(_fc(a).set_description(a.section, a.entry, _read(a.file, a.text), field=field),
+            f"{a.section}/{a.entry[:8]}.{field}")
+
+
+def cmd_date(a):
+    _result(_fc(a).set_date(a.section, a.entry, year=a.year, month=a.month, day=a.day),
+            f"{a.section}/{a.entry[:8]}.date")
+
+
+def cmd_export(a):
+    out = a.output or "resume-backup.json"
+    with open(out, "w") as f:
+        json.dump(_fc(a).export_resume(), f, indent=2, ensure_ascii=False)
+    print(f"exported resume -> {out} ({os.path.getsize(out)} bytes)")
+
+
+def cmd_import(a):
+    with open(a.file) as f:
+        data = json.load(f)
+    new_id = _fc(a).import_resume(data, title=a.title)
+    print(f"restored backup into a NEW resume -> {new_id} (current resume untouched)")
 
 
 def cmd_pd(a):
@@ -271,7 +327,9 @@ def build_parser():
     s = add("dump"); s.add_argument("section"); s.add_argument("entry"); s.set_defaults(fn=cmd_dump)
 
     s = add("add"); s.add_argument("section")
-    s.add_argument("--set", action="append", help="field=value (aliases: title,company,start,end,link)")
+    s.add_argument("--set", action="append", help="field=value (section-aware aliases: title,company,start,end,link)")
+    s.add_argument("--section-name", help="display name to use if this creates a new section")
+    s.add_argument("--icon", help="icon key to use if this creates a new section, e.g. code")
     g = s.add_mutually_exclusive_group(); g.add_argument("--file"); g.add_argument("--text")
     s.set_defaults(fn=cmd_add)
 
@@ -288,8 +346,9 @@ def build_parser():
     s = add("rm-section"); s.add_argument("section")
     s.add_argument("--yes", action="store_true", help="confirm deleting the section + its entries")
     s.set_defaults(fn=cmd_rm_section)
-    s = add("reorder-sections"); s.add_argument("ids", nargs="+", help="section ids in the desired order")
-    s.add_argument("--layout", default="one", help="column layout to reorder (one|two|mix; default one)")
+    s = add("reorder-sections")
+    s.add_argument("ids", nargs="*", help="section ids in the desired order (omit to print the current order)")
+    s.add_argument("--layout", default="one", help="column layout (one|two|mix; default one)")
     s.set_defaults(fn=cmd_reorder_sections)
 
     s = add("field"); s.add_argument("section"); s.add_argument("entry"); s.add_argument("field")
@@ -297,10 +356,15 @@ def build_parser():
     s.set_defaults(fn=cmd_field)
 
     s = add("desc"); s.add_argument("section"); s.add_argument("entry")
-    s.add_argument("--field", default="description")
+    s.add_argument("--field", default=None,
+                   help="rich-text field (default: auto by section — profile=text, skill=infoHtml, else description)")
     g = s.add_mutually_exclusive_group(required=True); g.add_argument("--file"); g.add_argument("--text")
     s.set_defaults(fn=cmd_desc)
 
+    s = add("date"); s.add_argument("section"); s.add_argument("entry")
+    s.add_argument("--year"); s.add_argument("--month"); s.add_argument("--day")
+    s.set_defaults(fn=cmd_date)
+
     s = add("pd"); s.add_argument("field")
     g = s.add_mutually_exclusive_group(required=True); g.add_argument("--text"); g.add_argument("--file")
     s.set_defaults(fn=cmd_pd)
@@ -324,6 +388,12 @@ def build_parser():
     add("unpublish").set_defaults(fn=cmd_unpublish)
     add("share").set_defaults(fn=cmd_share)
 
+    s = add("export"); s.add_argument("-o", "--output", help="output JSON file (default resume-backup.json)")
+    s.set_defaults(fn=cmd_export)
+    s = add("import"); s.add_argument("file", help="a JSON backup produced by `export`")
+    s.add_argument("--title", help="title for the restored resume (default: '<name> (restored)')")
+    s.set_defaults(fn=cmd_import)
+
     s = add("md2html")
     g = s.add_mutually_exclusive_group(required=True); g.add_argument("--file"); g.add_argument("--text")
     s.set_defaults(fn=cmd_md2html)

{flowcvcli-0.2.0 → flowcvcli-0.6.0}/flowcvcli/client.py

@@ -35,6 +35,76 @@ COOKIE_DOMAIN = "app.flowcv.com"
 UA = ("Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) "
       "Chrome/149.0.0.0 Safari/537.36")
 
+# The web app always carries an `appVersion` build-hash cookie and an `i18n`
+# locale cookie, and the API expects them on requests, so we send them on login
+# and persist them with the session. (They are NOT what fixes the login 429 —
+# that's the TLS fingerprint; see `_impersonated_login`.)
+#
+# `appVersion` is a build hash that changes on every FlowCV deploy, so we DON'T
+# hard-code it: we GET the app root and capture the `Set-Cookie: appVersion=...`
+# the server emits (exactly how the browser gets it). The constant below is only
+# a last-resort fallback if that fetch fails; FLOWCV_APP_VERSION overrides both.
+APP_VERSION_FALLBACK = "a66cb813d07308dcd4b0332278e3f9a2fcef0bb5"
+I18N_COOKIE = os.environ.get("FLOWCV_I18N", "en|vn")
+
+
+def fetch_app_version():
+    """GET the app root and return the current `appVersion` build hash.
+
+    The browser obtains `appVersion` from the Set-Cookie on the first page load;
+    we mirror that so the value is always current rather than pinned to a stale
+    build hash. Returns the captured value, or None if the fetch failed. This is
+    a plain GET (not the login POST), so it isn't subject to the WAF throttling.
+    """
+    jar = http.cookiejar.CookieJar()
+    opener = urllib.request.build_opener(urllib.request.HTTPCookieProcessor(jar))
+    try:
+        opener.open(urllib.request.Request(ORIGIN + "/", headers={"user-agent": UA}),
+                    timeout=30).read()
+    except (urllib.error.HTTPError, urllib.error.URLError):
+        return None
+    for c in jar:
+        if c.name == "appVersion":
+            return c.value
+    return None
+
+
+def resolve_app_version():
+    """The appVersion to send on login: env override > live fetch > pinned fallback."""
+    return (os.environ.get("FLOWCV_APP_VERSION")
+            or fetch_app_version()
+            or APP_VERSION_FALLBACK)
+
+
+def _impersonated_login(email, password, send_cookies):
+    """POST /auth/login with a Chrome TLS fingerprint; return (status, body, cookies).
+
+    FlowCV's edge fingerprints the TLS ClientHello (JA3) and throttles Python's
+    `ssl` stack on the login endpoint — every stdlib client (urllib, http.client)
+    gets an application-level HTTP 429, while curl and real browsers from the SAME
+    ip/headers/cookies/moment are accepted. Verified end to end: byte-identical
+    headers+ordering via http.client 429s, and Python login even WITH a valid
+    session cookie 429s, while a browser fetch with that same session 200s. So the
+    fix is to present a browser TLS fingerprint, which `curl_cffi` does in pure
+    Python (libcurl-impersonate) — no subprocess, no system curl.
+
+    `send_cookies` is the {name: value} cookie dict to send (appVersion/i18n).
+    Returns (status, response_text, {name: value} of cookies the server set).
+    Raises ImportError if curl_cffi is not installed (the caller surfaces it).
+    """
+    from curl_cffi import requests as _cffi   # lazy: only login needs it
+
+    boundary, body = _multipart({"email": email, "password": password,
+                                 "resumeData": "undefined", "letterData": "undefined",
+                                 "resumeImg": "", "letterImg": ""})
+    r = _cffi.post(
+        ORIGIN + "/api/auth/login",
+        headers={"accept": "application/json, text/plain, */*",
+                 "content-type": f"multipart/form-data; boundary={boundary}",
+                 "origin": ORIGIN},
+        cookies=send_cookies, data=body, impersonate="chrome", timeout=60)
+    return r.status_code, r.text, dict(r.cookies)
+
 
 def now_iso():
     n = datetime.datetime.now(datetime.timezone.utc)
@@ -84,45 +154,54 @@ def _rate_limit_msg(method, path):
 
 
 def login(email, password, jar=None):
-    """POST /auth/login (multipart email+password) into a cookie jar.
-
-    Seeds an anonymous session (init_user) then logs in on the *same* jar, so the
-    jar ends up holding the full authenticated cookie set. Returns the jar
-    (creating a fresh one if not supplied). Raises SystemExit with a clear message
-    on a 429 rate-limit or a failed login.
+    """Authenticate and load the full session cookie set into a cookie jar.
+
+    FlowCV's edge fingerprints the TLS ClientHello (JA3) and throttles Python's
+    `ssl` on the login endpoint — every stdlib client (urllib, http.client) gets
+    an application-level HTTP 429, while curl and real browsers from the SAME
+    ip/headers/cookies/moment are accepted. Verified empirically: byte-identical
+    headers+ordering via http.client 429s, Python login even WITH a valid session
+    cookie 429s, and a browser fetch with that same session 200s. So we send the
+    login POST with a Chrome TLS fingerprint via curl_cffi (see
+    `_impersonated_login`) and capture the session cookies. Every OTHER call stays
+    on urllib — only the login endpoint is fingerprint-gated.
+
+    Returns the jar (creating a fresh one if not supplied), populated with the
+    session cookie plus the `appVersion`/`i18n` cookies the API expects on every
+    later request. Raises SystemExit on a 429, a missing curl_cffi, or a failed
+    login.
     """
     if jar is None:
         jar = http.cookiejar.CookieJar()
-    opener = urllib.request.build_opener(urllib.request.HTTPCookieProcessor(jar))
-    base = {"user-agent": UA, "origin": ORIGIN, "accept": "application/json, text/plain, */*"}
 
-    # Seed an anonymous session like the web app does — but login also works
-    # standalone (the browser's curl skips this), so a throttled/failed init_user
-    # must NOT abort a login that would otherwise succeed. Best-effort only.
-    try:
-        opener.open(urllib.request.Request(f"{API}/auth/init_user", headers=base), timeout=30).read()
-    except urllib.error.HTTPError:
-        pass
-    except urllib.error.URLError as e:
-        raise SystemExit(f"login (init_user) -> network error: {e.reason}")
+    # Browser-style cookies the API expects: live appVersion build-hash + locale.
+    appver = resolve_app_version()
+    jar.set_cookie(_make_cookie("i18n", I18N_COOKIE))
+    jar.set_cookie(_make_cookie("appVersion", appver))
 
-    boundary, body = _multipart({"email": email, "password": password,
-                                 "resumeData": "undefined", "letterData": "undefined",
-                                 "resumeImg": "", "letterImg": ""})
-    h = dict(base, **{"content-type": f"multipart/form-data; boundary={boundary}"})
     try:
-        resp = opener.open(
-            urllib.request.Request(f"{API}/auth/login", data=body, headers=h, method="POST"), timeout=30)
-    except urllib.error.HTTPError as e:
-        if e.code == 429:
-            raise SystemExit(_rate_limit_msg("POST", "auth/login"))
-        raise SystemExit(f"login failed: HTTP {e.code} {e.read()[:200]!r}")
-    except urllib.error.URLError as e:
-        raise SystemExit(f"login -> network error: {e.reason}")
-    data = json.loads(resp.read().decode())
-    if not data.get("success"):
-        # whitelist error/code only — the raw envelope can echo the account email
-        raise SystemExit(f"login failed (code {data.get('code')}): {data.get('error') or 'check email/password'}")
+        status, info, set_cookies = _impersonated_login(
+            email, password, {"i18n": I18N_COOKIE, "appVersion": appver})
+    except ImportError:
+        raise SystemExit(
+            "login needs the 'curl_cffi' package: FlowCV throttles Python's TLS "
+            "fingerprint on the login endpoint, and curl_cffi presents a browser "
+            "one. Install it (`pip install curl_cffi`), or set FLOWCV_COOKIE to a "
+            "session cookie captured from a logged-in browser.")
+    if status == 429:
+        raise SystemExit(_rate_limit_msg("POST", "auth/login"))
+    if status != 200:
+        raise SystemExit(f"login failed: HTTP {status} {info[:200]!r}")
+    try:
+        data = json.loads(info)
+    except ValueError:
+        data = {}
+    if data and not data.get("success"):
+        raise SystemExit(f"login failed (code {data.get('code')}): "
+                         f"{data.get('error') or 'check email/password'}")
+
+    for name, value in set_cookies.items():
+        jar.set_cookie(_make_cookie(name, value))
     if not any(c.name == "flowcvsidapp" for c in jar):
         raise SystemExit("login succeeded but no session cookie was set")
     return jar

{flowcvcli-0.2.0 → flowcvcli-0.6.0}/flowcvcli/content.py

@@ -7,6 +7,7 @@ read-modify-write where the API replaces the whole entry; create uses
 
 Mixes into Client; uses self.get_resume / self.request / self.resume_id.
 """
+import re
 import uuid
 
 from .markup import md_to_html
@@ -22,6 +23,15 @@ SECTION_META = {
     "custom1": ("custom", "Custom", "star"),
 }
 
+# Per-section rich-text field: most sections store rich text in `description`,
+# but the summary uses `text` and skills use `infoHtml`.
+RICH_TEXT_FIELD = {"profile": "text", "skill": "infoHtml"}
+
+
+def rich_field(section):
+    """The entry field that holds rich text for `section` (default 'description')."""
+    return RICH_TEXT_FIELD.get(section, "description")
+
 
 def label_of(entry):
     """Best human label for an entry across section shapes."""
@@ -65,12 +75,14 @@ class ContentMixin:
         return self.request("resumes/delete_entry", method="DELETE", query=query)
 
     # ---- high-level helpers ----------------------------------------------
-    def add_entry(self, section, sets=None, md=None):
+    def add_entry(self, section, sets=None, md=None, section_name=None, section_icon=None):
         """Create an entry (and the section if needed); return the new id.
 
-        `sets` are entry fields to populate; `md` becomes a `description`
-        HTML field. Creates the entry first (so a missing section is made),
-        then fills it with a follow-up update.
+        `sets` are entry fields to populate; `md` becomes the section's rich-text
+        field. Creates the entry first (so a missing section is made), then fills
+        it with a follow-up update. When the section is created, `section_name`
+        and `section_icon` override its default heading/icon (no follow-up
+        rename-section / section-icon needed).
         """
         resume = self.get_resume()
         existing = (resume.get("content") or {}).get(section)
@@ -80,8 +92,17 @@ class ContentMixin:
             icon_key = existing.get("iconKey")
         elif section in SECTION_META:
             section_type, display_name, icon_key = SECTION_META[section]
+        elif re.fullmatch(r"custom\d+", section):
+            # FlowCV supports multiple custom sections (custom1, custom2, …);
+            # only custom1 is pre-declared in SECTION_META. Create any other
+            # customN as a generic custom section.
+            section_type, display_name, icon_key = "custom", "Custom", "star"
         else:
             raise SystemExit(f"unknown section (no meta): {section}")
+        if section_name is not None:
+            display_name = section_name
+        if section_icon is not None:
+            icon_key = section_icon
 
         new_id = str(uuid.uuid4())
         # Create: minimal entry + section meta (also creates the section).
@@ -98,9 +119,7 @@ class ContentMixin:
                  "createdAt": now, "updatedAt": now}
         entry.update(sets or {})
         if md:
-            # rich text lives in a section-specific field (profile->text, skill->infoHtml)
-            field = {"profile": "text", "skill": "infoHtml"}.get(section, "description")
-            entry[field] = md_to_html(md)
+            entry[rich_field(section)] = md_to_html(md)
         env = self.save_entry(section, entry)
         if not env.get("success"):
             raise SystemExit(f"created {section} entry {new_id} but failed to populate it: {env}")
@@ -115,9 +134,30 @@ class ContentMixin:
             entry["updatedAt"] = self.now_iso()
         return self.save_entry(section, entry)
 
-    def set_description(self, section, entry_id, md, field="description"):
-        """Set a rich-text field to md_to_html(md) on an entry."""
-        return self.set_field(section, entry_id, field, md_to_html(md))
+    def set_description(self, section, entry_id, md, field=None):
+        """Set a rich-text field to md_to_html(md) on an entry. When `field` is
+        omitted, it defaults to the section's rich-text field (profile->text,
+        skill->infoHtml, else description)."""
+        return self.set_field(section, entry_id, field or rich_field(section), md_to_html(md))
+
+    def set_date(self, section, entry_id, year=None, month=None, day=None):
+        """Set an entry's structured `date` object (used by publications, etc.).
+
+        Merges into the existing date; month/day left unset are hidden, so
+        `set_date(..., year=2018)` renders as a year-only date.
+        """
+        resume = self.get_resume()
+        entry = dict(self.find_entry(resume, section, entry_id))
+        date = dict(entry.get("date") or {})
+        date["year"] = "" if year is None else str(year)
+        date["month"] = "" if month is None else str(month)
+        date["day"] = "" if day is None else str(day)
+        date["hideMonth"] = month is None
+        date["hideDay"] = day is None
+        entry["date"] = date
+        if "updatedAt" in entry:
+            entry["updatedAt"] = self.now_iso()
+        return self.save_entry(section, entry)
 
     def hide_entry(self, section, entry_id, hidden=True):
         """Show/hide an entry (sets its `isHidden`). Hidden entries stay in the

{flowcvcli-0.2.0 → flowcvcli-0.6.0}/flowcvcli/markup.py

@@ -6,9 +6,11 @@ converts a small markdown dialect into that markup:
   blank line            -> block separator
   "## Heading"          -> bold justified paragraph (a subheader)
   "**Whole line bold**" -> bold justified paragraph
+  "***Whole line***"    -> bold + italic justified paragraph (a sub-subheader)
   "- item"              -> bullet (consecutive lines become one <ul>)
   anything else         -> justified paragraph
   inline **bold**       -> <strong>bold</strong> (inside paragraphs and bullets)
+  inline [text](url)    -> <a href="url">text</a> (inside paragraphs and bullets)
 """
 import html
 import re
@@ -17,8 +19,13 @@ J = ' style="text-align: justify"'
 
 
 def _esc(s):
-    """Escape text, then honor inline **bold**."""
-    return re.sub(r"\*\*(.+?)\*\*", r"<strong>\1</strong>", html.escape(s, quote=False))
+    """Escape text, then honor inline ***bold-italic***, **bold**, and
+    [text](url) links (triple-asterisks before double so they don't clash)."""
+    s = html.escape(s, quote=False)
+    s = re.sub(r"\*\*\*(.+?)\*\*\*", r"<strong><em>\1</em></strong>", s)
+    s = re.sub(r"\*\*(.+?)\*\*", r"<strong>\1</strong>", s)
+    return re.sub(r"\[([^\]]+)\]\(([^)\s]+)\)",
+                  r'<a target="_blank" rel="noopener noreferrer nofollow" href="\2">\1</a>', s)
 
 
 def md_to_html(md):
@@ -41,6 +48,8 @@ def md_to_html(md):
         flush()
         if line.startswith("## "):
             parts.append(f"<p{J}><strong>{html.escape(line[3:].strip(), quote=False)}</strong></p>")
+        elif len(line) > 6 and line.startswith("***") and line.endswith("***"):
+            parts.append(f"<p{J}><strong><em>{html.escape(line[3:-3].strip(), quote=False)}</em></strong></p>")
         elif len(line) > 4 and line.startswith("**") and line.endswith("**") and line.count("**") == 2:
             parts.append(f"<p{J}><strong>{html.escape(line[2:-2].strip(), quote=False)}</strong></p>")
         else:

{flowcvcli-0.2.0 → flowcvcli-0.6.0}/flowcvcli/resume.py

@@ -23,17 +23,17 @@ class ResumeMixin:
         return env["data"]["resumes"]
 
     # ---- create / duplicate / rename / delete -----------------------------
-    def _create_from(self, title, keep_content):
-        """Create a new resume by cloning the current one's full object.
+    def _create_from(self, title, keep_content, src=None):
+        """Create a new resume by cloning a full resume object.
 
         FlowCV's `create` needs a complete resume object (every NOT-NULL column),
-        so we clone the current resume — guaranteeing validity — then reassign a
-        fresh id/uuid, drop the unique tokens (server regenerates), and set the
-        title. `keep_content=False` makes a blank resume that keeps the same
-        identity (personalDetails) and design (customization); `keep_content=True`
-        is a full duplicate. Returns the new resume id.
+        so we clone a valid one — `src` (defaults to the current resume) — then
+        reassign a fresh id/uuid, drop the unique tokens (server regenerates), and
+        set the title. `keep_content=False` makes a blank resume that keeps the
+        same identity (personalDetails) and design (customization);
+        `keep_content=True` is a full copy. Returns the new resume id.
         """
-        src = self.get_resume()
+        src = self.get_resume() if src is None else src
         clone = json.loads(json.dumps(src))    # deep copy
         new_id = str(uuid.uuid4())
         clone["id"] = new_id
@@ -59,6 +59,19 @@ class ResumeMixin:
             title = (self.get_resume().get("title") or "Resume") + " (copy)"
         return self._create_from(title, keep_content=True)
 
+    # ---- backup / restore -------------------------------------------------
+    def export_resume(self):
+        """Return the full resume object (for a backup/snapshot)."""
+        return self.get_resume()
+
+    def import_resume(self, resume, title=None):
+        """Restore a previously exported resume object into a NEW resume
+        (non-destructive — the current resume is untouched). Returns the new id.
+        """
+        if title is None:
+            title = (resume.get("title") or "Resume") + " (restored)"
+        return self._create_from(title, keep_content=True, src=resume)
+
     def rename_resume(self, title):
         """PATCH /resumes/rename_resume — set the resume's title."""
         return self.request("resumes/rename_resume", method="PATCH",

{flowcvcli-0.2.0 → flowcvcli-0.6.0/flowcvcli.egg-info}/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: flowcvcli
-Version: 0.2.0
-Summary: Control a FlowCV resume from the command line or Python — content, design, templates, photo, publish and PDF export — via FlowCV's private JSON API. Zero dependencies.
+Version: 0.6.0
+Summary: Control a FlowCV resume from the command line or Python — content, design, templates, photo, publish and PDF export — via FlowCV's private JSON API.
 Author: dannyota
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/dannyota/flowcvcli
@@ -26,17 +26,18 @@ Classifier: Topic :: Utilities
 Requires-Python: >=3.8
 Description-Content-Type: text/markdown
 License-File: LICENSE
+Requires-Dist: curl_cffi>=0.7
 Dynamic: license-file
 
 # flowcvcli
 
 [![PyPI](https://img.shields.io/pypi/v/flowcvcli.svg)](https://pypi.org/project/flowcvcli/)
-[![Python](https://img.shields.io/pypi/pyversions/flowcvcli.svg)](https://pypi.org/project/flowcvcli/)
+[![Python](https://img.shields.io/badge/python-3.8%2B-blue.svg)](https://pypi.org/project/flowcvcli/)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 
 Control a [FlowCV](https://flowcv.com) resume from the **command line** or from
 **Python** — content, header & links, **customization**, **templates**,
-**avatar**, reorder/hide, multi-resume management, publish, and **PDF export**.
+**avatar**, reorder/hide, multi-resume management, **backup/restore**, publish, and **PDF export**.
 It drives FlowCV's private JSON API (the same calls the web app makes), so it
 works for any FlowCV resume with your own session. **Zero dependencies** (Python
 standard library only), so it's easy to drop into scripts and LLM agents.
@@ -96,10 +97,13 @@ flowcv duplicate ["Copy title"]      # full copy of the current resume
 flowcv rename "New Title"            # rename the current resume
 flowcv delete-resume --yes           # permanent (refuses without --yes)
 
-# content (markdown mini-format below); `add` creates the section if needed
+# content (markdown mini-format below); `add` creates the section if needed.
+# --set aliases (title/company/link) resolve per section (work->jobTitle, publication->title…)
 flowcv add work --set title="Engineer" --set company="Acme" \
        --set start=01/2022 --set end=Present --text $'- Did a measurable thing.'
-flowcv desc work <id> --file role.md
+flowcv add custom2 --section-name "Open Source" --icon code --text "…"   # heading+icon at creation
+flowcv desc work <id> --file role.md           # rich text; --field is optional (auto: profile=text, skill=infoHtml)
+flowcv date publication <id> --year 2018       # structured date (year-only by default)
 flowcv field work <id> employer --text "Acme Corp"
 flowcv rm work <id>
 
@@ -109,7 +113,7 @@ flowcv hide work <id> ; flowcv show-entry work <id>
 flowcv rename-section skill "Core Skills"
 flowcv section-icon skill head-side-brain
 flowcv rm-section custom1 --yes           # delete a section + its entries
-flowcv reorder-sections profile work skill education   # one-column order
+flowcv reorder-sections profile work skill education   # set one-column order (no args = print current)
 
 # header details & links (links are social entries: orcid, googlescholar, github…)
 flowcv pd jobTitle --text "Security Leader"
@@ -131,6 +135,10 @@ flowcv download -o resume.pdf        # the rendered PDF
 flowcv download --token <webToken> -o out.pdf   # any PUBLIC resume by its share token (no auth)
 flowcv share | publish | unpublish
 
+# backup / restore
+flowcv export -o backup.json          # full resume snapshot (JSON) — keep one before big edits
+flowcv import backup.json             # restore the snapshot into a NEW resume (non-destructive)
+
 flowcv login                          # refresh the cached session
 flowcv md2html --file role.md         # preview HTML (offline)
 ```
@@ -159,6 +167,12 @@ fc.rename_section("skill", "Core Skills"); fc.delete_section("custom1")
 fc.hide_entry("work", "id", hidden=True)
 new_id = fc.create_resume("Second Resume")          # or fc.duplicate_resume()
 fc.rename_resume("New Title"); fc.delete_resume()    # delete is permanent
+fc.set_date("publication", "id", year=2018)         # structured date (year-only)
+
+# backup / restore
+import json
+json.dump(fc.export_resume(), open("backup.json", "w"))   # full snapshot
+new_id = fc.import_resume(json.load(open("backup.json")))  # restore into a NEW resume
 ```
 
 ### Build → render → check → improve
@@ -173,9 +187,11 @@ feedback loop for building a resume from raw info.
 |---|---|
 | blank line | block separator |
 | `## Heading` / `**Whole line bold**` | bold subheader |
+| `***Whole line***` | bold + italic subheader |
 | `- item` | bullet (consecutive = one list) |
 | anything else | justified paragraph |
-| `**bold**` inline | `<strong>bold</strong>` |
+| `**bold**` / `***bold-italic***` inline | `<strong>` / `<strong><em>…</em></strong>` |
+| `[text](url)` inline | link |
 
 ## How it works
 

{flowcvcli-0.2.0 → flowcvcli-0.6.0}/flowcvcli.egg-info/SOURCES.txt

@@ -21,4 +21,5 @@ flowcvcli.egg-info/PKG-INFO
 flowcvcli.egg-info/SOURCES.txt
 flowcvcli.egg-info/dependency_links.txt
 flowcvcli.egg-info/entry_points.txt
+flowcvcli.egg-info/requires.txt
 flowcvcli.egg-info/top_level.txt

flowcvcli-0.6.0/flowcvcli.egg-info/requires.txt

@@ -0,0 +1 @@
+curl_cffi>=0.7

{flowcvcli-0.2.0 → flowcvcli-0.6.0}/pyproject.toml

@@ -5,7 +5,7 @@ build-backend = "setuptools.build_meta"
 [project]
 name = "flowcvcli"
 dynamic = ["version"]
-description = "Control a FlowCV resume from the command line or Python — content, design, templates, photo, publish and PDF export — via FlowCV's private JSON API. Zero dependencies."
+description = "Control a FlowCV resume from the command line or Python — content, design, templates, photo, publish and PDF export — via FlowCV's private JSON API."
 readme = "README.md"
 requires-python = ">=3.8"
 license = "MIT"
@@ -28,7 +28,10 @@ classifiers = [
     "Topic :: Office/Business",
     "Topic :: Utilities",
 ]
-dependencies = []
+# curl_cffi presents a browser TLS (JA3) fingerprint for the login POST only —
+# FlowCV's edge throttles Python's stdlib `ssl` fingerprint on /auth/login with
+# HTTP 429 while accepting browsers/curl. All other calls use the stdlib.
+dependencies = ["curl_cffi>=0.7"]
 
 [project.scripts]
 flowcv = "flowcvcli.cli:main"