@profullstack/agenticjobs 0.10.0 → 0.12.0

package/dist/core/capacity.js

@@ -0,0 +1,174 @@
+/**
+ * Swarm capacity: how many agents a candidate brings, and what they cost.
+ *
+ * This board's thesis is agents hiring agents, and the question an employer
+ * actually has to answer before hiring one is not on any resume yet: is this a
+ * single agent, or someone who runs ten in parallel? The difference is the
+ * difference between a contractor and a firm, and it changes both the price
+ * and the kind of work you would send.
+ *
+ * It is read out of the resume rather than stored beside it, for the reason
+ * `candidates.ts` gives: a profile that restates the document is a second copy
+ * to keep in step. The contact block is the right home because it is already
+ * where the resume keeps its scalars — `Email`, `Location` — and a reader,
+ * an agent and a parser all see the same two lines:
+ *
+ *   # Athena
+ *   - **Email**: a@b.com
+ *   - **Agents**: 10
+ *   - **Rate**: $100/hour/agent
+ *
+ * Like every other OpenResume convention this one degrades. A resume with
+ * neither key is a resume with unstated capacity, not an invalid one, and
+ * `parseCapacity` returns null rather than throwing. That matters here more
+ * than elsewhere: every resume written before this convention existed has no
+ * capacity, and none of them should stop rendering.
+ */
+/** Contact keys that answer "how many agents". */
+const AGENTS_KEYS = /^(agents?|sub-?agents?|swarm(\s*size)?|parallelism|capacity)$/i;
+/** Contact keys that answer "what does it cost". */
+const RATE_KEYS = /^(rate|rates|price|pricing|cost|hourly|hourly\s*rate)$/i;
+/** Currency symbols used when no supported currency code is stated. */
+const SYMBOLS = [
+    ['$', 'USD'],
+    ['€', 'EUR'],
+    ['£', 'GBP'],
+    ['¥', 'JPY'],
+];
+/**
+ * Agents, from a value a person actually typed.
+ *
+ * "10", "10 agents", "up to 10" and "single" all appear in the wild, so the
+ * first integer wins and the words that mean one are handled by name. A count
+ * of zero is treated as unstated: nobody is offering zero agents, so it is far
+ * more likely to be a placeholder than a claim.
+ */
+export function parseAgentCount(value) {
+    const text = value.trim();
+    if (text === '')
+        return null;
+    if (/^(a\s+)?(single|solo|one|just\s+me|1\s*\(single[^)]*\))$/i.test(text))
+        return 1;
+    const match = /\d+/.exec(text.replace(/,/g, ''));
+    if (match === null)
+        return null;
+    const count = Number.parseInt(match[0], 10);
+    if (!Number.isFinite(count) || count <= 0)
+        return null;
+    // A four-digit swarm is far more likely to be a price that landed in the
+    // wrong field than a real fleet, and listing it would put a nonsense number
+    // at the top of a card.
+    return count > 1000 ? null : count;
+}
+/**
+ * A price, and whether it is per agent.
+ *
+ * The per-agent question is the one that matters and the one people express
+ * loosely: "$100/hour/agent", "$100 per agent per hour", "$100/hr each". Any
+ * of those means one agent costs 100. Without such a marker the figure is read
+ * as the price of the whole swarm, because "$1000/hour" from someone running
+ * ten agents is a swarm price — reading it as per-agent would report a rate
+ * ten times too high, which is the expensive direction to be wrong in.
+ */
+export function parseRate(value) {
+    const text = value.trim();
+    if (text === '')
+        return null;
+    // An explicit code qualifies an ambiguous symbol, e.g. "CAD $100".
+    const code = /\b(usd|eur|gbp|jpy|cad|aud|chf|sek|nzd)\b/i.exec(text);
+    let currency = code?.[1]?.toUpperCase() ?? '';
+    if (currency === '') {
+        for (const [symbol, symbolCode] of SYMBOLS) {
+            if (text.includes(symbol)) {
+                currency = symbolCode;
+                break;
+            }
+        }
+    }
+    // Strip any currency code before looking for digits, or "USD 100" would be
+    // fine but a stray code containing digits would not.
+    const numeric = text.replace(/\b[a-z]{3}\b/gi, ' ').replace(/,/g, '');
+    const match = /(?:\d+(?:\.\d+)?|\.\d+)/.exec(numeric);
+    if (match === null)
+        return null;
+    const amount = Number.parseFloat(match[0]);
+    if (!Number.isFinite(amount) || amount <= 0)
+        return null;
+    const perAgent = /(\/|\bper\s+)agent\b|\beach\b|\ban?\s+agent\b|\bper\s+bot\b/i.test(text);
+    return { amount, currency: currency === '' ? 'USD' : currency, perAgent };
+}
+/** Round money to cents, so a division never reports 33.333333333. */
+function money(value) {
+    return Math.round(value * 100) / 100;
+}
+/**
+ * Capacity for a resume, or null when it does not state any.
+ *
+ * A count with no price is still capacity worth showing — "10 agents, price on
+ * request" is a real listing — so a missing rate is not fatal. A price with no
+ * count is not: without knowing how many agents it buys, a swarm price and a
+ * single-agent price are indistinguishable, and guessing turns an employer's
+ * budget into a surprise. That one comes back null.
+ */
+export function parseCapacity(contact) {
+    const agentsEntry = contact.find((item) => AGENTS_KEYS.test(item.key.trim()));
+    if (agentsEntry === undefined)
+        return null;
+    const agents = parseAgentCount(agentsEntry.value);
+    if (agents === null)
+        return null;
+    const rateEntry = contact.find((item) => RATE_KEYS.test(item.key.trim()));
+    const rate = rateEntry === undefined ? null : parseRate(rateEntry.value);
+    if (rate === null) {
+        return {
+            agents,
+            ratePerAgent: null,
+            totalPerHour: null,
+            currency: 'USD',
+            ratePerAgentStated: false,
+        };
+    }
+    if (rate.perAgent) {
+        return {
+            agents,
+            ratePerAgent: money(rate.amount),
+            totalPerHour: money(rate.amount * agents),
+            currency: rate.currency,
+            ratePerAgentStated: true,
+        };
+    }
+    return {
+        agents,
+        ratePerAgent: money(rate.amount / agents),
+        totalPerHour: money(rate.amount),
+        currency: rate.currency,
+        ratePerAgentStated: false,
+    };
+}
+/** `1234.5` as `1,234.50`, and `1000` as `1,000`. */
+function amount(value) {
+    const whole = Number.isInteger(value);
+    return value.toLocaleString('en-US', {
+        minimumFractionDigits: whole ? 0 : 2,
+        maximumFractionDigits: 2,
+    });
+}
+/**
+ * One line an employer can read, e.g. "10 agents · $100/hr each · $1,000/hr total".
+ *
+ * The total is the number being shopped for and the per-agent rate is how it
+ * is justified, so both are shown. A single agent gets neither a multiplication
+ * nor the word "total", because "1 agent · $100/hr · $100/hr total" reads like
+ * a bug.
+ */
+export function formatCapacity(capacity) {
+    const agents = capacity.agents === 1 ? '1 agent' : `${capacity.agents} agents`;
+    if (capacity.totalPerHour === null)
+        return `${agents} · rate on request`;
+    const unit = capacity.currency === 'USD' ? '$' : `${capacity.currency} `;
+    if (capacity.agents === 1)
+        return `${agents} · ${unit}${amount(capacity.totalPerHour)}/hr`;
+    const each = capacity.ratePerAgent === null ? '' : ` · ${unit}${amount(capacity.ratePerAgent)}/hr each`;
+    return `${agents}${each} · ${unit}${amount(capacity.totalPerHour)}/hr total`;
+}
+//# sourceMappingURL=capacity.js.map

package/dist/core/capacity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capacity.js","sourceRoot":"","sources":["../../src/core/capacity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,kDAAkD;AAClD,MAAM,WAAW,GAAG,gEAAgE,CAAC;AAErF,oDAAoD;AACpD,MAAM,SAAS,GAAG,yDAAyD,CAAC;AAE5E,uEAAuE;AACvE,MAAM,OAAO,GAAuB;IAClC,CAAC,GAAG,EAAE,KAAK,CAAC;IACZ,CAAC,GAAG,EAAE,KAAK,CAAC;IACZ,CAAC,GAAG,EAAE,KAAK,CAAC;IACZ,CAAC,GAAG,EAAE,KAAK,CAAC;CACb,CAAC;AA4BF;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,2DAA2D,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAErF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IACjD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,yEAAyE;IACzE,4EAA4E;IAC5E,wBAAwB;IACxB,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AACrC,CAAC;AASD;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAE7B,mEAAmE;IACnE,MAAM,IAAI,GAAG,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,IAAI,QAAQ,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,OAAO,EAAE,CAAC;YAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,QAAQ,GAAG,UAAU,CAAC;gBACtB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,qDAAqD;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzD,MAAM,QAAQ,GAAG,8DAA8D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAC5E,CAAC;AAED,sEAAsE;AACtE,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,OAAsB;IAClD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9E,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEjC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAEzE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO;YACL,MAAM;YACN,YAAY,EAAE,IAAI;YAClB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,KAAK;YACf,kBAAkB,EAAE,KAAK;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO;YACL,MAAM;YACN,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YAChC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,kBAAkB,EAAE,IAAI;SACzB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM;QACN,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACzC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;QAChC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,kBAAkB,EAAE,KAAK;KAC1B,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE;QACnC,qBAAqB,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,qBAAqB,EAAE,CAAC;KACzB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,QAAuB;IACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,SAAS,CAAC;IAC/E,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,GAAG,MAAM,oBAAoB,CAAC;IAEzE,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,QAAQ,GAAG,CAAC;IACzE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,MAAM,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC;IAE3F,MAAM,IAAI,GACR,QAAQ,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,UAAU,CAAC;IAC7F,OAAO,GAAG,MAAM,GAAG,IAAI,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC;AAC/E,CAAC"}

package/dist/core/coinpay.d.ts

@@ -0,0 +1,143 @@
+/**
+ * CoinPay: connecting a person's account, and minting the payments that settle
+ * an invoice to their wallet.
+ *
+ * Two credentials do two jobs, and it matters which is which:
+ *
+ *  - A person connects their own CoinPay account over OAuth. The board asks for
+ *    `wallet:read` and uses the token for exactly one call, `userinfo`, which
+ *    returns the wallets they can be paid to. That is all the token can do;
+ *    CoinPay's OAuth has no scope for creating anything.
+ *  - The board has a business key of its own. That is what creates a payment,
+ *    with the payee's address as `merchant_wallet_address`, and CoinPay records
+ *    who authorised the third-party payout. The board never holds funds.
+ *
+ * `wallet:read` is checked on the scope the token came back with, not on the
+ * scope that was asked for. CoinPay narrows a grant to what the client was
+ * registered for without an error, and a board that trusts its own request
+ * ends up showing "Connected" beside an account it cannot read a wallet from.
+ *
+ * Everything here goes through one `fetch`, injected, so the suite can stand
+ * in for CoinPay without a network.
+ */
+import type pg from 'pg';
+import type { CoinPayConfig } from '../config.ts';
+export declare const REQUIRED_SCOPE = "wallet:read";
+export declare const SCOPES: string[];
+export interface Wallet {
+    address: string;
+    /** CoinPay's spelling: BTC, ETH, SOL, USDC_POL ... */
+    chain: string;
+    label: string | null;
+}
+export interface TokenSet {
+    accessToken: string;
+    refreshToken: string | null;
+    scope: string[];
+    expiresAt: string;
+}
+export interface UserInfo {
+    sub: string;
+    email: string | null;
+    name: string | null;
+    wallets: Wallet[];
+}
+export interface Payment {
+    id: string;
+    address: string | null;
+    amountCrypto: string | null;
+    currency: string | null;
+    status: string;
+    expiresAt: string | null;
+    txHash: string | null;
+}
+export declare class CoinPayProblem extends Error {
+}
+export interface CoinPayClient {
+    readonly config: CoinPayConfig;
+    authorizeUrl(input: {
+        state: string;
+        codeChallenge: string;
+        redirectUri: string;
+    }): string;
+    exchangeCode(input: {
+        code: string;
+        redirectUri: string;
+        codeVerifier: string;
+    }): Promise<TokenSet>;
+    refresh(refreshToken: string): Promise<TokenSet>;
+    userinfo(accessToken: string): Promise<UserInfo>;
+    createPayment(input: {
+        amountUsd: string;
+        chain: string;
+        payeeAddress: string;
+        description: string;
+        redirectUrl: string;
+        idempotencyKey: string;
+        metadata: Record<string, string>;
+    }): Promise<Payment>;
+    getPayment(id: string): Promise<Payment | null>;
+    /** Where a payer goes to pay. */
+    payUrl(paymentId: string): string;
+    /** True when a webhook body was signed with this board's secret. */
+    verifyWebhook(rawBody: string, signature: string | undefined, now?: number): boolean;
+}
+type Fetch = typeof fetch;
+export declare function pkcePair(): {
+    verifier: string;
+    challenge: string;
+};
+/** The wallets claim, as userinfo returns it: `{ address, chain, label }`. */
+export declare function normaliseWallets(value: unknown): Wallet[];
+export declare function hasScope(scope: string[] | string, wanted?: string): boolean;
+export declare function createCoinPay(config: CoinPayConfig, fetchImpl?: Fetch): CoinPayClient;
+export interface Account {
+    userId: string;
+    sub: string;
+    email: string | null;
+    name: string | null;
+    scope: string[];
+    wallets: Wallet[];
+    connectedAt: string;
+    updatedAt: string;
+    /** False when the token cannot read wallets: the person has to reconnect. */
+    usable: boolean;
+}
+export declare function getAccount(pool: pg.Pool, userId: string): Promise<Account | null>;
+/**
+ * Begin connecting. Returns the URL to send the person to.
+ *
+ * The state and the PKCE verifier live in the database, not a cookie, so the
+ * callback can be completed from any session of the same person and a state
+ * is used up by being deleted.
+ */
+export declare function beginConnect(pool: pg.Pool, coinpay: CoinPayClient, userId: string, redirectUri: string, next: string | null): Promise<string>;
+/**
+ * Finish connecting. Returns where to send the person, or a sentence.
+ *
+ * The account is attached to whoever *started* the flow, read off the state,
+ * not to whoever is signed in when the callback lands: those are the same
+ * person in every honest case and a different one in the case this protects
+ * against.
+ */
+export declare function finishConnect(pool: pg.Pool, coinpay: CoinPayClient, input: {
+    state: string;
+    code: string;
+    redirectUri: string;
+}): Promise<{
+    userId: string;
+    redirect: string | null;
+    account: Account;
+} | string>;
+/**
+ * Re-read the wallets from CoinPay. Returns the account as it now stands, or
+ * a sentence when the connection no longer works.
+ */
+export declare function refreshWallets(pool: pg.Pool, coinpay: CoinPayClient, userId: string): Promise<Account | string>;
+/**
+ * Forget the connection. CoinPay publishes no revocation endpoint, so deleting
+ * the row is the whole of what can be done; invoices already sent keep the
+ * address they were sent with and are unaffected.
+ */
+export declare function disconnect(pool: pg.Pool, userId: string): Promise<boolean>;
+export {};