@gafj/gafj 0.1.17 → 0.1.20

package/core/rules/extract.md

@@ -22,6 +22,10 @@ The ownership verb is the lead verb of the wording, in the form the source uses.
 
 The bullet or sentence that states the result, verbatim; usually one, at most three when the source states the same result more than once. The first wording is the one you would recommend. Never repeat a wording across records. Keep the source's punctuation.
 
+## The header
+
+The candidate's name, email, phone, city and state, LinkedIn, and website go in `contact`, each quoted from the source; leave out any the source does not show.
+
 ## The other sections
 
 Education, volunteer and community work, awards, certifications and licences, memberships and affiliations go in `entries`, one each, never as accomplishments. `org` is the school, organisation, or issuer as written; `title` the degree, role, award, or credential as written; `dates` as written; `detail` one quoted line if the source gives one (honours, GPA, a description). Quote each; leave out what the source does not state. Employment itself is not an entry: it is carried by the accomplishments' company, role, and dates.

package/core/schemas/extract.js

@@ -25,6 +25,8 @@ module.exports = obj({
     scope: ATOM,
     tags: arr(str("identifier", { max: 40 }), 0, 8),
   }, ["title", "company", "role", "wordings"]), 1, 40),
+  // the header: whatever the source states, quoted
+  contact: obj({ name: ATOM, email: ATOM, phone: ATOM, location: ATOM, linkedin: ATOM, website: ATOM }, []),
   // the resume's other sections, each an org, a title, dates, and one line of detail, all quoted
   entries: arr(obj({
     kind: str("identifier", { enum: ["education", "volunteer", "award", "certification", "affiliation"] }),

package/http/api.js

@@ -180,6 +180,9 @@ route("POST", "/api/setup/dismiss", (c, p, b) => setup.dismiss(c.db, c.home, c.c
 
 // settings (screen 6)
 const settings = require("../store/settings");
+const contact = require("../store/contact");
+route("GET", "/api/profile/contact", (c) => contact.get(c.db, c.candidate_id));
+route("POST", "/api/profile/contact", (c, p, b) => contact.set(c.db, { candidate_id: c.candidate_id, contact: b.contact || b, now: c.now(), actor: ACTOR("contact") }));
 route("GET", "/api/settings", (c) => settings.getSettings(c.db, c.home, c.candidate_id));
 route("PUT", "/api/settings", (c, p, b) => { const r = settings.putSettings(c.db, c.home, c.candidate_id, b, { now: c.now(), actor: ACTOR("settings") }); if (c.reload) c.reload(); return r; });
 route("PUT", "/api/settings/providers/:id", (c, p, b) => settings.putProvider(c.home, p.id, b));

package/http/guard.js

@@ -91,7 +91,7 @@ function readJson(req, cap = BODY_CAP) {
     const chunks = [];
     req.on("data", (c) => {
       size += c.length;
-      if (size > cap) { reject(Object.assign(new Error("body larger than 1 MB"), { status: 413 })); req.destroy(); return; }
+      if (size > cap) { req.removeAllListeners("data"); req.resume(); reject(Object.assign(new Error(`body larger than ${Math.round(cap / 1024 / 1024)} MB; paste less`), { status: 413 })); return; }
       chunks.push(c);
     });
     req.on("end", () => {

package/http/hosted.js

@@ -91,6 +91,7 @@ class Tenants {
       cfg = { candidate_id: id, route: "credits", providers: [], thresholds: { ...DEFAULT_THRESHOLDS }, hosted: true, email: who.email || null };
       writeConfig(home, cfg);
       require("../store/onboarding").openBatch(t.db, { candidate_id: id, now: nowIso, actor: { type: "ui", ref: "signup" } });
+      try { require("../store/contact").set(t.db, { candidate_id: id, contact: { name: who.name || "", email: who.email || "" }, now: nowIso, actor: { type: "ui", ref: "signup" } }); } catch (e) { /* an odd address from the provider is not worth failing sign-up over */ }
     }
     return t;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gafj/gafj",
-  "version": "0.1.17",
+  "version": "0.1.20",
   "description": "GAF-J: a local campaign engine for job search. One SQLite file, one ingest door, your own AI subscription.",
   "homepage": "https://gaf-j.com",
   "repository": {

package/store/contact.js

@@ -0,0 +1,74 @@
+"use strict";
+
+/**
+ * The resume header: name, email, phone, city, and links. Lives in the candidate's profile,
+ * edited in Settings, and prefilled once from what the model quoted off the first resume;
+ * a prefill never overwrites a field the candidate has typed.
+ */
+
+const { withTx } = require("./tx");
+const { appendEvent } = require("./events");
+const { TransitionError } = require("./transitions");
+
+const FIELDS = ["name", "email", "phone", "location", "linkedin", "website"];
+const MAX = { name: 120, email: 160, phone: 40, location: 120, linkedin: 200, website: 200 };
+const EMPTY = Object.fromEntries(FIELDS.map((k) => [k, ""]));
+
+function stored(db, candidate_id) {
+  const row = db.prepare("SELECT name, profile_json FROM candidate WHERE id = ?").get(candidate_id);
+  if (!row) throw new TransitionError("unknown candidate");
+  return { name: row.name || "", contact: { ...EMPTY, ...((JSON.parse(row.profile_json || "{}").contact) || {}) } };
+}
+
+/** The header as typed; with no header name yet, the candidate's display name stands in. */
+function get(db, candidate_id) {
+  const { name, contact } = stored(db, candidate_id);
+  return contact.name ? contact : { ...contact, name };
+}
+
+function clean(patch) {
+  const out = {};
+  for (const k of FIELDS) {
+    if (patch[k] === undefined) continue;
+    let v = String(patch[k] || "").trim().replace(/\s+/g, " ").slice(0, MAX[k]);
+    if (k === "email" && v && !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(v)) throw new TransitionError("email does not look like an address");
+    if ((k === "linkedin" || k === "website") && v && !/^https?:\/\//i.test(v)) v = "https://" + v.replace(/^\/+/, "");
+    out[k] = v;
+  }
+  return out;
+}
+
+/** Save the fields given; the others stay. The candidate's display name follows the header name. */
+function set(db, { candidate_id, contact, now, actor }) {
+  const patch = clean(contact || {});
+  return withTx(db, (d) => {
+    const row = d.prepare("SELECT profile_json FROM candidate WHERE id = ?").get(candidate_id);
+    if (!row) throw new TransitionError("unknown candidate");
+    const profile = JSON.parse(row.profile_json || "{}");
+    profile.contact = { ...EMPTY, ...(profile.contact || {}), ...patch };
+    d.prepare("UPDATE candidate SET profile_json = ?, name = CASE WHEN ? <> '' THEN ? ELSE name END WHERE id = ?").run(JSON.stringify(profile), profile.contact.name, profile.contact.name, candidate_id);
+    appendEvent(d, { candidate_id, entity: "candidate", entity_id: candidate_id, event: "contact_set", actor_type: actor.type, actor_ref: actor.ref, payload: { keys: Object.keys(patch) }, at: now });
+    return profile.contact;
+  });
+}
+
+/** Fill only the empty fields from what a resume quoted. Returns the keys filled. */
+function prefill(db, { candidate_id, contact, now, actor }) {
+  let patch;
+  try { patch = clean(contact || {}); } catch (e) { return []; }
+  const cur = stored(db, candidate_id).contact; // the typed header only: a display name that was never typed here does not block the resume's
+  const fill = {};
+  for (const k of FIELDS) if (patch[k] && !cur[k]) fill[k] = patch[k];
+  if (!Object.keys(fill).length) return [];
+  set(db, { candidate_id, contact: fill, now, actor });
+  return Object.keys(fill);
+}
+
+/** The header lines for a rendered resume: the name, then whatever contact the candidate gave. */
+function headerLines(db, candidate_id) {
+  const c = get(db, candidate_id);
+  const line = [c.location, c.email, c.phone, c.linkedin, c.website].filter(Boolean).join(" | ");
+  return [c.name, line].filter(Boolean);
+}
+
+module.exports = { get, set, prefill, headerLines, FIELDS };

package/store/onboarding.js

@@ -132,6 +132,7 @@ function normalizeAtoms(content) {
     if (Array.isArray(a.wordings)) a.wordings = a.wordings.map(q);
     if (Array.isArray(a.metrics)) a.metrics = a.metrics.map((m) => (m && typeof m === "object" ? { value: String(m.value), ...(m.outcome !== undefined ? { outcome: m.outcome } : {}) } : m));
   }
+  if (content.contact && typeof content.contact === "object") for (const k of Object.keys(content.contact)) content.contact[k] = q(content.contact[k]);
   if (Array.isArray(content.entries)) for (const e of content.entries) { if (e && typeof e === "object") for (const k of ["org", "title", "dates", "detail"]) if (k in e) e[k] = q(e[k]); }
   return content;
 }
@@ -148,6 +149,7 @@ function checkDraft(content, text) {
     a.wordings = (a.wordings || []).map((w) => (typeof w === "string" ? { value: w, start: -1, end: -1 } : w));
     a.metrics = (a.metrics || []).map((m) => ({ ...m, start: -1, end: -1 }));
   }
+  for (const k of Object.keys(content.contact || {})) { if (typeof content.contact[k] === "string") content.contact[k] = { value: content.contact[k], start: -1, end: -1 }; checkAtom(content.contact[k], text, `contact.${k}`, errors); }
   for (const e of content.entries || []) for (const k of ["org", "title", "dates", "detail"]) if (typeof e[k] === "string") e[k] = { value: e[k], start: -1, end: -1 };
   (content.entries || []).forEach((e, i) => {
     const p = `entries[${i}]`;
@@ -197,8 +199,9 @@ function proposeFromSource(db, { candidate_id, source_document_id, content, ai_a
     const positions = require("./positions");
     positions.derive(d, { candidate_id, now });
     const entries = positions.addEntries(d, { candidate_id, source_document_id: s.id, entries: (content.entries || []).map((e) => ({ kind: e.kind, org: e.org.value, title: e.title.value, dates: e.dates ? e.dates.value : "", detail: e.detail ? e.detail.value : "" })), now });
-    appendEvent(d, { candidate_id, entity: "source_document", entity_id: s.id, event: "proposed", actor_type: actor.type, actor_ref: actor.ref, payload: { pending: ids.length, entries, style: content.style_observed || null }, at: now });
-    return { accepted: true, errors: [], pending_ids: ids, entries, style_observed: content.style_observed || null };
+    const contact = require("./contact").prefill(d, { candidate_id, contact: Object.fromEntries(Object.entries(content.contact || {}).map(([k, v]) => [k, v && v.value])), now, actor });
+    appendEvent(d, { candidate_id, entity: "source_document", entity_id: s.id, event: "proposed", actor_type: actor.type, actor_ref: actor.ref, payload: { pending: ids.length, entries, contact, style: content.style_observed || null }, at: now });
+    return { accepted: true, errors: [], pending_ids: ids, entries, contact, style_observed: content.style_observed || null };
   });
 }
 const span = (a) => (a ? { start: a.start, end: a.end } : null);

package/store/render.js

@@ -40,8 +40,10 @@ function renderNode(value, node, depth, out) {
   }
 }
 
-function renderResume(c, out) {
-  out.push(`# ${c.headline}`, "", (c.specialties || []).join(" · "), "");
+function renderResume(c, out, who = []) {
+  if (who.length) { out.push(`# ${who[0]}`, ""); for (const l of who.slice(1)) out.push(l); out.push("", `## ${c.headline}`, ""); }
+  else out.push(`# ${c.headline}`, "");
+  out.push((c.specialties || []).join(" · "), "");
   if (c.headerLinks && c.headerLinks.length) out.push(c.headerLinks.join(" | "), "");
   out.push("## Career Highlights", "");
   for (const h of c.careerHighlights || []) out.push(`- **${h.leadIn}** ${h.proof && h.proof.text || ""}`);
@@ -77,7 +79,7 @@ function renderMarkdown(db, doc) {
   const content = JSON.parse(doc.content_json);
   const out = [];
   const head = header(db, doc);
-  if (doc.kind === "resume") renderResume(content, out);
+  if (doc.kind === "resume") renderResume(content, out, require("./contact").headerLines(db, doc.candidate_id));
   else if (doc.kind === "email") out.push(`**Subject:** ${content.subject}`, "", content.body && content.body.text || "", "");
   else {
     out.push(`# ${label(doc.kind)}${head.length ? ": " + head[0] : ""}`, "");

package/ui/hosted/signin.js

@@ -10,10 +10,7 @@
     if (!c.firebase || !c.firebase.apiKey) { say("sign-in is not configured on this server yet", true); document.getElementById("google").disabled = true; return; }
     if (typeof firebase === "undefined") { say("could not load the sign-in library", true); return; }
     firebase.initializeApp({ apiKey: c.firebase.apiKey, authDomain: c.firebase.authDomain, projectId: c.firebase.projectId });
-    document.getElementById("google").addEventListener("click", function () {
-      say("opening Google");
-      var provider = new firebase.auth.GoogleAuthProvider();
-      firebase.auth().signInWithPopup(provider).then(function (r) { return r.user.getIdToken(true); }).then(function (idToken) {
+    var finish = function (idToken) {
         tokenBox.value = idToken;
         return fetch("/auth/session", { method: "POST", credentials: "same-origin", headers: { "content-type": "application/json" }, body: JSON.stringify({ id_token: idToken }) })
           .then(function (r) { return r.json().then(function (j) { return { ok: r.ok, j: j }; }); })
@@ -22,7 +19,17 @@
             if (document.getElementById("local").open) { say("signed in as " + (x.j.email || x.j.uid) + "; copy the token for your PC, or open the app"); return; }
             location.href = "/";
           });
-      }).catch(function (e) { say(e && e.message ? e.message : "sign-in failed", true); });
+    };
+    var fail = function (e) { say(e && e.message ? e.message : "sign-in failed", true); };
+    // a phone, or a browser that blocks popups, comes back here from Google's own page
+    firebase.auth().getRedirectResult().then(function (r) { if (r && r.user) { say("finishing sign-in"); return r.user.getIdToken(true).then(finish); } }).catch(fail);
+    document.getElementById("google").addEventListener("click", function () {
+      say("opening Google");
+      var provider = new firebase.auth.GoogleAuthProvider();
+      var small = window.innerWidth < 700 || /Android|iPhone|iPad/i.test(navigator.userAgent);
+      if (small) { firebase.auth().signInWithRedirect(provider).catch(fail); return; }
+      firebase.auth().signInWithPopup(provider).then(function (r) { return r.user.getIdToken(true); }).then(finish)
+        .catch(function (e) { if (e && /popup/i.test(e.code || "")) firebase.auth().signInWithRedirect(provider).catch(fail); else fail(e); });
     });
   }).catch(function () { say("could not reach the server", true); });
 })();

package/ui/lib.js

@@ -41,7 +41,7 @@ function zoneOffsetMs(utcMs, tz) {
 }
 
 export function useRoute() {
-  const parse = () => ({ path: (location.hash.replace(/^#/, "") || "/") });
+  const parse = () => { const h = location.hash.replace(/^#/, "") || "/"; const q = h.indexOf("?"); return { path: q < 0 ? h : h.slice(0, q) || "/", query: new URLSearchParams(q < 0 ? "" : h.slice(q + 1)) }; };
   const [route, setRoute] = useState(parse);
   useEffect(() => { const on = () => setRoute(parse()); addEventListener("hashchange", on); return () => removeEventListener("hashchange", on); }, []);
   return route;
@@ -90,3 +90,38 @@ export function useInstall() {
   const standalone = matchMedia("(display-mode: standalone)").matches || navigator.standalone === true;
   return { canInstall: !!installer.event, installed: installer.installed || standalone, install: async () => { if (!installer.event) return; installer.event.prompt(); await installer.event.userChoice; installer.event = null; } };
 }
+
+/**
+ * A job posting as pasted: markdown links become their text, bare URLs and tracking lines go, blank runs
+ * collapse. A LinkedIn copy carries a wall of overlay URLs that says nothing about the job.
+ */
+export function cleanPosting(text) {
+  return String(text || "")
+    .replace(/!\[[^\]]*\]\([^)]*\)/g, "")
+    .replace(/\[([^\]]*)\]\((?:https?:)?\/\/[^)\s]*(?:\s+"[^"]*")?\)/g, "$1")
+    .replace(/\((?:https?:)?\/\/[^)\s]{20,}\)/g, "")
+    .split(/\r?\n/)
+    .map((l) => l.replace(/\s+$/, ""))
+    .filter((l, i, all) => !/^\s*(?:https?:)?\/\/\S+\s*$/.test(l) || (/\/(jobs?|careers?|positions?|openings?)\//i.test(l) && all.findIndex((x) => /^\s*(?:https?:)?\/\/\S+\s*$/.test(x) && /\/(jobs?|careers?|positions?|openings?)\//i.test(x)) === i))
+    .join("\n")
+    .replace(/[ \t]{3,}/g, "  ")
+    .replace(/\n{3,}/g, "\n\n")
+    .trim();
+}
+
+const NOISE = /\b(ago|hours?|days?|weeks?|applicants?|promoted|easy apply|reposted|save|share|show more|about the job|job details|united states|remote|hybrid|on-site|full-time|part-time|contract|tailor my resume|help me stand out|create cover letter)\b/i;
+const TITLE = /\b(director|manager|engineer|analyst|lead|head|vp|vice president|specialist|coordinator|supervisor|associate|consultant|architect|designer|developer|scientist|officer|president|chief|planner|buyer|controller|administrator|technician|representative|recruiter|nurse|teacher|intern|accountant|assistant|generalist|partner|strategist|writer|editor)\b/i;
+/** Title and company guessed from a posting's first lines; both are the person's to correct. */
+export function guessPosting(text) {
+  const lines = text.split(/\r?\n/).map((l) => l.trim()).filter(Boolean).slice(0, 20);
+  const plain = (l) => l.length <= 90 && !/^https?:/i.test(l) && !/^(at|company|location|posted|apply|share)\b/i.test(l) && !NOISE.test(l);
+  const title = lines.find((l) => plain(l) && TITLE.test(l) && !/[.:;]$/.test(l) && !/\b(company|inc|llc|corp|group|ltd)\.?$/i.test(l)) || lines.find(plain) || "";
+  let company = "";
+  for (const l of lines) { const m = l.match(/^(?:at|company[:\s]+|employer[:\s]+)\s*([^|·,]{2,60})/i); if (m) { company = m[1].trim(); break; } }
+  const i = lines.findIndex((l) => l === title);
+  const nameish = (l) => { const c = l.split(/\s[·|]\s/)[0].replace(/^[·|\-\s]+/, "").trim(); return c && c !== title && c.length <= 60 && !/^https?:/i.test(c) && !/\d{4}/.test(c) && !NOISE.test(c) && !/[.:;]$/.test(c) && c.split(/\s+/).length <= 8 ? c : ""; };
+  // the line after the title ("Company · City"), else a short name-like line above it, else one soon after
+  if (!company) company = [lines[i + 1] || ""].map(nameish).find(Boolean) || lines.slice(0, i).map(nameish).find(Boolean) || lines.slice(i + 2, i + 6).map(nameish).find(Boolean) || "";
+  const url = lines.find((l) => /^https?:\/\//i.test(l)) || "";
+  return { title, company, url };
+}

package/ui/screens/kb.js

@@ -90,6 +90,22 @@ function Excerpt({ text, span }) {
 const EMPTY = { title: "", company: "", role: "", dates: "", summary: "", metrics: "", verbs: "", wordings: "", tenure: "" };
 const toDraft = (f) => ({ title: f.title, company: f.company, role: f.role, dates: f.dates, summary: f.summary,
   metrics: f.metrics.split(/[;,]/).map((s) => s.trim()).filter(Boolean), verbs: f.verbs.split(/[;,]/).map((s) => s.trim()).filter(Boolean), wordings: f.wordings.split(/\n/).map((s) => s.trim()).filter(Boolean), ...(f.tenure && f.tenure.trim() ? { tenure: f.tenure.trim() } : {}) });
+/** The resume header: name, email, phone, city, links. Prefilled from the first resume; yours to change here or in Settings. */
+export function ContactForm({ setErr, compact }) {
+  const [c, setC] = useState(null);
+  const [saved, setSaved] = useState(null);
+  const [busy, setBusy] = useState(false);
+  useEffect(() => { api.get("/api/profile/contact").then((r) => { setC(r); setSaved(r); }).catch((e) => setErr(e.message)); }, []);
+  if (!c) return html`<p class="muted">loading</p>`;
+  const dirty = saved && Object.keys(c).some((k) => (c[k] || "") !== (saved[k] || ""));
+  const f = (k, ph, type = "text") => html`<input type=${type} placeholder=${ph} value=${c[k] || ""} onInput=${(e) => setC({ ...c, [k]: e.target.value })} />`;
+  return html`<form class="inline" onSubmit=${async (e) => { e.preventDefault(); setBusy(true); try { setErr(""); const r = await api.post("/api/profile/contact", { contact: c }); setC(r); setSaved(r); } catch (e2) { setErr(e2.message); } setBusy(false); }}>
+    ${compact ? "" : html`<p class="small muted" style="flex-basis:100%;margin:0">What goes at the top of every resume. Nothing here is checked against a source; it is yours to type.</p>`}
+    ${f("name", "full name")}${f("email", "email", "email")}${f("phone", "phone")}${f("location", "city, state")}${f("linkedin", "linkedin.com/in/…")}${f("website", "website")}
+    <button class="primary small" disabled=${!dirty || busy}>${busy ? "saving" : "Save"}</button>
+  </form>`;
+}
+
 /** Positions: jobs, schools, volunteer roles, awards, certifications, affiliations. One row each, confirmed once; a job's records inherit its company, role, and dates. */
 const KIND = {
   employment: { heading: "Jobs", org: "company", title: "title", records: true, where: true },
@@ -206,6 +222,8 @@ export function KB({ live }) {
     <div class="card"><p class="small muted">A record with no confirmed figure, or an ownership verb with no scope. An answer extends that record; nothing is stored until you confirm it under Pending.</p><ul class="list">${(d.holes || []).map((h) => html`<li key=${h.hole_id}><div><b>?</b> <b>${h.title}</b> <span class="muted">${h.company}, ${h.role}</span><br />${h.question}
       ${answering === h.hole_id ? html`<${DraftForm} label="Add answer as pending" initial=${fromDraft(h.draft)} onSubmit=${(draft) => { post("/api/kb/pending", { draft: { ...draft, replaces: h.draft.replaces } }); setAnswering(null); }} />` : html`<button class="small" onClick=${() => setAnswering(h.hole_id)}>Answer</button>`}</div></li>`)}
       ${(d.holes || []).length ? "" : html`<li class="muted">no holes: every record carries a confirmed figure and every ownership claim a scope</li>`}</ul></div>
+    <h2>Header (name and contact)</h2>
+    <div class="card"><${ContactForm} setErr=${setErr} /></div>
     <h2>Jobs, education, and the rest (confirm each once)</h2>
     <div class="card"><${Positions} reload=${load} setErr=${setErr} /></div>
     <h2>Pending (written, not yet confirmed)</h2>

package/ui/screens/postings.js

@@ -1,5 +1,5 @@
 import { html, useState, useEffect } from "../vendor/preact.mjs";
-import { api } from "../lib.js";
+import { cleanPosting, guessPosting, api } from "../lib.js";
 
 /** Screen 2: paste a posting, store and scan locally, edit the proposed categories, freeze, log the application. */
 
@@ -39,21 +39,13 @@ export function Postings({ live, id }) {
   const [form, setForm] = useState({ company: "", title: "", source_url: "", location: "", comp_text: "", raw_text: "" });
   const [guessed, setGuessed] = useState({ company: true, title: true });
   // the paste is all a person should have to give; company and title are guessed from its first lines and can be corrected
-  const onPaste = (text) => {
-    const lines = text.split(/\r?\n/).map((l) => l.trim()).filter(Boolean).slice(0, 12);
+  const onPaste = (raw) => {
+    const text = cleanPosting(raw);
+    const g = guessPosting(text);
     const next = { ...form, raw_text: text };
-    if (guessed.title) {
-      const t = lines.find((l) => l.length <= 90 && !/^https?:/i.test(l) && !/^(at|company|location|posted|apply|share)\b/i.test(l));
-      next.title = t || "";
-    }
-    if (guessed.company) {
-      let c = "";
-      for (const l of lines) { const m = l.match(/^(?:at|company[:\s]+|employer[:\s]+)\s*([^|·,]{2,60})/i); if (m) { c = m[1].trim(); break; } }
-      if (!c) { const i = lines.findIndex((l) => l === next.title); const cand = lines[i + 1] || ""; if (cand && cand.length <= 50 && !/^https?:/i.test(cand) && !/\d{4}/.test(cand)) c = cand.replace(/^[·|\-\s]+/, ""); }
-      next.company = c;
-    }
-    const url = lines.find((l) => /^https?:\/\//i.test(l));
-    if (url && !form.source_url) next.source_url = url;
+    if (guessed.title) next.title = g.title;
+    if (guessed.company) next.company = g.company;
+    if (g.url && !form.source_url) next.source_url = g.url;
     setForm(next);
   };
   const [err, setErr] = useState("");

package/ui/screens/settings.js

@@ -1,5 +1,6 @@
 import { html, useState, useEffect } from "../vendor/preact.mjs";
 import { api, useInstall } from "../lib.js";
+import { ContactForm } from "./kb.js";
 
 /** Screen 6: AI route, providers (keys write-only), house rules per kind, data folder, backup, startup. */
 
@@ -18,6 +19,14 @@ export function Settings({ live }) {
   const inst = useInstall();
   const load = () => Promise.all([api.get("/api/settings"), api.get("/api/usage").catch(() => null)]).then(([x, u]) => { setS(x); setUsage(u); setErr(""); }).catch((e) => setErr(e.message));
   useEffect(() => { load(); }, [live]);
+  // back from Stripe: the URL carries paid=1 (or paid=0 for a cancel); check the balance once and drop the flag
+  useEffect(() => {
+    const m = location.hash.match(/[?&]paid=(\d)/);
+    if (!m) return;
+    history.replaceState(null, "", location.pathname + location.hash.replace(/[?&]paid=\d/, ""));
+    if (m[1] !== "1") { setMsg("checkout cancelled; nothing was charged"); return; }
+    api.get("/api/credits/balance").then((r) => { setMsg(`payment received: ${r.available} credits available`); load(); }).catch((e) => setErr(e.message));
+  }, []);
   const put = async (patch) => { setMsg(""); try { setS(await api.put("/api/settings", patch)); setMsg("saved"); } catch (e) { setErr(e.message); } };
   const post = async (path, body, label) => { setMsg(""); try { const r = await api.post(path, body); setMsg(label ? `${label}: ${r.file || r.message || JSON.stringify(r)}` : JSON.stringify(r)); await load(); } catch (e) { setErr(e.message); } };
   if (err && !s) return html`<p class="error">${err}</p>`;
@@ -31,10 +40,13 @@ export function Settings({ live }) {
     ${err ? html`<p class="error">${err}</p>` : ""}${msg ? html`<p class="small muted">${msg}</p>` : ""}
     <h2>App</h2>
     <div class="card">
-      ${inst.installed ? html`<p>Installed as an app. It opens in its own window from the Start menu or dock.</p>`
+      ${s.hosted ? html`<p class="small muted">On a phone: your browser's share or menu button, then "Add to Home Screen". On a PC: the install icon at the right end of the address bar, or the browser menu, "Install GAF-J". Either way it opens in its own window and stays signed in.</p>`
+        : inst.installed ? html`<p>Installed as an app. It opens in its own window from the Start menu or dock.</p>`
         : inst.canInstall ? html`<div class="row"><button class="primary" onClick=${inst.install}>Install GAF-J as an app</button><span class="small muted">own window, Start menu entry, no browser chrome</span></div>`
         : html`<p class="small muted">To install as an app: in Chrome or Edge use the install icon at the right end of the address bar, or the browser menu, "Install GAF-J". The page must be open at its 127.0.0.1 address (it is). No service worker is registered on purpose: the UI is never served from a cache, so a stale screen cannot outlive the store.</p>`}
     </div>
+    <h2>Header (name and contact)</h2>
+    <div class="card"><${ContactForm} setErr=${setErr} /></div>
     <h2>AI route</h2>
     <div class="card">
       ${(s.hosted
@@ -85,7 +97,8 @@ export function Settings({ live }) {
     <div class="card">
       ${s.hosted ? html`<p class="small muted">Signed in as ${s.email || "you"}. Documents run on the included AI and are paid in credits; the relay runs named operations on the packet the app built, never a free prompt, and never stores packet or reply text.</p>
         <div class="row"><button type="button" onClick=${async () => { setMsg(""); try { const r = await api.get("/api/credits/balance"); setMsg(`balance: ${r.available} available`); await load(); } catch (e2) { setErr(e2.message); } }}>check balance</button>
-          ${[["starter", "Starter"], ["campaign", "Campaign"], ["season", "Season"]].map(([k, label]) => html`<button type="button" key=${k} onClick=${async () => { setMsg(""); try { const r = await api.post("/api/credits/checkout", { pack: k }); location.href = r.url; } catch (e2) { setErr(e2.message); } }}>buy ${label}</button>`)}</div>
+          ${[["starter", "25 credits, $9"], ["campaign", "100 credits, $29"], ["season", "300 credits, $69"]].map(([k, label]) => html`<button type="button" key=${k} onClick=${async () => { setMsg(""); try { const r = await api.post("/api/credits/checkout", { pack: k }); location.href = r.url; } catch (e2) { setErr(e2.message); } }}>buy ${label}</button>`)}</div>
+        <p class="small muted">Stripe takes the card; GAF-J never sees it. Credits arrive within a few seconds of paying and never expire. A document costs a few credits, reading a resume a few more; the exact prices are shown before each run.</p>
         ${s.credits && s.credits.last_balance ? html`<p class="small">${s.credits.last_balance.available} credits available (${s.credits.last_balance.reserved} held), checked ${s.credits.last_balance.at}</p>` : ""}` : html`<p class="small muted">A paid route for people without their own AI subscription. The relay is written and tested but not deployed; nothing here works until it is. The relay runs named operations on the packet the app built, never a free prompt, and never stores packet or reply text.</p>
       <form class="inline" onSubmit=${(e) => { e.preventDefault(); const f = e.target.elements; put({ credits: { relay_url: f.relay.value, ...(f.token.value ? { id_token: f.token.value } : {}) } }); f.token.value = ""; }}>
         <input name="relay" placeholder="relay url (https)" value=${(s.credits && s.credits.relay_url) || ""} />

package/ui/screens/welcome.js

@@ -1,6 +1,6 @@
 import { html, useState, useEffect } from "../vendor/preact.mjs";
-import { api } from "../lib.js";
-import { Onboarding, DraftForm, fromDraft, Positions } from "./kb.js";
+import { api, cleanPosting, guessPosting } from "../lib.js";
+import { Onboarding, DraftForm, fromDraft, Positions, ContactForm } from "./kb.js";
 import { PacketModal } from "./packet.js";
 
 /**
@@ -12,7 +12,7 @@ import { PacketModal } from "./packet.js";
 
 const KIND_LABEL = { anthropic: "Anthropic (Claude)", openai_compatible: "OpenAI, or any OpenAI-compatible server", gemini: "Google Gemini" };
 
-function StepAi({ s, reload }) {
+function StepAi({ s, reload, hosted }) {
   const [pick, setPick] = useState(null);
   const [key, setKey] = useState("");
   const [kind, setKind] = useState("anthropic");
@@ -32,6 +32,15 @@ function StepAi({ s, reload }) {
       await reload();
     } catch (e2) { setMsg(e2.message); }
   };
+  if (hosted) return html`<div>
+    <p>GAF-J never writes text itself. It hands a packet of your confirmed facts to an AI, then checks every figure that comes back. Here the AI is included and paid in credits; or use a chat you already pay for and paste.</p>
+    <div class="ai-options">
+      <button class=${pick === "credits" ? "picked" : ""} onClick=${() => setPick("credits")}><b>Included AI</b><span class="small muted">Best. Everything runs in one click. Paid in credits per document; reading your resumes costs a few. Buy credits under Settings when you are ready; the first steps here are free.</span></button>
+      <button class=${pick === "paste" ? "picked" : ""} onClick=${() => setPick("paste")}><b>Paste</b><span class="small muted">Any chat you already pay for: ChatGPT, Claude, Gemini. You copy a packet in and paste the reply back, each time.</span></button>
+    </div>
+    ${pick === "credits" ? html`<div style="margin-top:12px"><button class="primary" onClick=${() => choose("credits")}>Use the included AI</button></div>` : ""}
+    ${pick === "paste" ? html`<div style="margin-top:12px"><p class="small muted">Fine for a first try. Each step below will show a packet to copy into your chat and a box to paste the reply into.</p><button class="primary" onClick=${() => choose("paste")}>Use paste</button></div>` : ""}
+  </div>`;
   return html`<div>
     <p>GAF-J never writes text itself. It hands a packet of your confirmed facts to an AI you already have, then checks every figure that comes back. How will you connect one?</p>
     <div class="ai-options">
@@ -55,13 +64,12 @@ function StepPosting({ reload }) {
   const [title, setTitle] = useState("");
   const [g, setG] = useState({ company: true, title: true });
   const [err, setErr] = useState("");
-  const onPaste = (t) => {
+  const onPaste = (raw) => {
+    const t = cleanPosting(raw);
     setText(t);
-    const lines = t.split(/\r?\n/).map((l) => l.trim()).filter(Boolean).slice(0, 12);
-    let ti = title, co = company;
-    if (g.title) ti = lines.find((l) => l.length <= 90 && !/^https?:/i.test(l) && !/^(at|company|location|posted|apply|share)\b/i.test(l)) || "";
-    if (g.company) { co = ""; for (const l of lines) { const m = l.match(/^(?:at|company[:\s]+|employer[:\s]+)\s*([^|·,]{2,60})/i); if (m) { co = m[1].trim(); break; } } if (!co) { const i = lines.findIndex((l) => l === ti); const c = lines[i + 1] || ""; if (c && c.length <= 50 && !/^https?:/i.test(c) && !/\d{4}/.test(c)) co = c.replace(/^[·|\-\s]+/, ""); } }
-    setTitle(ti); setCompany(co);
+    const gu = guessPosting(t);
+    if (g.title) setTitle(gu.title);
+    if (g.company) setCompany(gu.company);
   };
   const store = async (e) => {
     e.preventDefault(); setErr("");
@@ -98,10 +106,12 @@ export function Welcome({ live, onDone }) {
     setBusy("asking"); try { const r = await api.post("/api/run/discover", {}); if (r.status !== "passed") setErr("refused: " + (r.errors || []).join("; ")); await load(); } catch (e) { setErr(e.message); } setBusy("");
   };
   const body = {
-    ai: html`<${StepAi} s=${setup} reload=${load} />`,
+    ai: html`<${StepAi} s=${setup} reload=${load} hosted=${!!me.hosted} />`,
     upload: html`<div><p>Your resumes: Word, PDF, Markdown, or plain text. Five to ten of your most different versions is plenty; near-identical copies only add duplicates to merge. The text is read on this PC. Nothing is uploaded anywhere.</p><${Onboarding} d=${ob} reload=${load} setErr=${setErr} route=${me.route} compact=${true} /></div>`,
     extract: html`<div><p>${direct ? "Your AI reads each file and proposes records where every number and phrase is quoted from the file; anything it cannot quote is refused. One click runs the whole pile." : "For each file, Extract opens a packet: copy it into your chat, paste the JSON reply back. Your AI proposes records where every number and phrase is quoted from the file."}</p><${Onboarding} d=${ob} reload=${load} setErr=${setErr} route=${me.route} compact=${true} /></div>`,
-    positions: html`<div><p>Before the records: the jobs, schools, volunteer roles, awards, and certifications themselves, each once. Your AI quoted them from your resumes. Fix a name, add a city, correct a date, then confirm. Every record under a job follows it.</p><${Positions} reload=${load} setErr=${setErr} compact=${true} /></div>`,
+    positions: html`<div><p>Before the records: the jobs, schools, volunteer roles, awards, and certifications themselves, each once. Your AI quoted them from your resumes. Fix a name, add a city, correct a date, then confirm. Every record under a job follows it.</p>
+      <div class="small muted" style="margin:14px 0 4px;text-transform:uppercase;letter-spacing:.04em">Your header</div><${ContactForm} setErr=${setErr} compact=${true} />
+      <${Positions} reload=${load} setErr=${setErr} compact=${true} /></div>`,
     confirm: html`<div><p>These are the records your AI proposed. Confirm the ones you can stand behind in an interview, edit what is off, dismiss the rest. Only confirmed records can ever appear in a document.</p>
       <ul class="list">${kb.pending.map((p) => html`<li key=${p.pending_id}><div><b>${p.draft.title}</b> <span class="muted">${p.draft.company}, ${p.draft.role}</span>
         <div class="small muted">metrics: ${(p.draft.metrics || []).join(", ") || "none"} · verbs: ${(p.draft.verbs || []).join(", ") || "none"}${p.draft.dates ? " · " + p.draft.dates : ""}</div>