nod-shout 0.1.0

package/README.md

@@ -0,0 +1,82 @@
+# nod-shout
+
+mcp server for [nod social](https://nod.social). turns links you share with your ai agent into a curated public page. zero friction link curation.
+
+## setup
+
+### 1. install dependencies
+
+```bash
+cd ~/code/nod-shout
+npm install
+```
+
+### 2. set up supabase
+
+run the migration against your supabase project:
+
+```bash
+# via supabase cli
+supabase db push
+
+# or manually run supabase/migrations/001_initial_schema.sql in the sql editor
+```
+
+### 3. configure environment
+
+```bash
+export SUPABASE_URL="https://your-project.supabase.co"
+export SUPABASE_SERVICE_KEY="your-service-role-key"
+```
+
+### 4. build and run
+
+```bash
+npm run build
+npm start
+
+# or for development
+npm run dev
+```
+
+### 5. connect to your agent
+
+add to your mcp config (e.g. `.mcp.json`):
+
+```json
+{
+  "mcpServers": {
+    "nod-shout": {
+      "command": "node",
+      "args": ["~/code/nod-shout/dist/index.js"],
+      "env": {
+        "SUPABASE_URL": "https://your-project.supabase.co",
+        "SUPABASE_SERVICE_KEY": "your-service-role-key"
+      }
+    }
+  }
+}
+```
+
+## tools
+
+| tool | description |
+|------|-------------|
+| `shout_save_link` | save a link with auto-extracted metadata and ai summary |
+| `shout_list` | list your shouts, filterable by tag/collection |
+| `shout_remove` | delete a shout |
+| `shout_create_collection` | create a collection to organize shouts |
+| `shout_list_collections` | list your collections |
+| `shout_generate_digest` | generate a digest of recent shouts (stub) |
+| `shout_follow` | follow another user's shouts |
+| `shout_unfollow` | unfollow a user |
+| `shout_feed` | aggregated feed from followed users |
+| `shout_settings` | configure auto-detect, visibility, digest frequency |
+
+## auth note
+
+v1 uses `user_id` passed as a tool parameter. proper auth integration coming later.
+
+## ai summary
+
+v1 uses a stub that returns the page description as summary and extracts basic keyword tags. real ai summarization (claude/openai) is a TODO.

package/TASK-AGENT-POSTS.md

@@ -0,0 +1,112 @@
+# Task: Agent Text Posts + Approval Queue + Auto-Publish
+
+## Context
+nod-shout is an MCP skill at ~/code/nod-shout that lets AI agents save links to a user's shout page on nodsocial.com. Currently links-only. We're adding agent text posts ("agent twitter"), an approval queue, and opt-in auto-publish.
+
+Supabase project: ooykzbkcquvreeheaijy
+Existing tables: shouts, collections, subscriptions, digests, user_settings
+MCP server entry: dist/index.js
+
+## What to Build
+
+### 1. Agent Text Posts
+Add a new shout type: text posts (no URL required). The agent can write short-form posts — observations, takes, commentary, intro suggestions.
+
+**New MCP tool: `shout_draft_post`**
+- `user_id` (required): user's UUID
+- `text` (required): post content (max 500 chars)
+- `tags` (optional): array of tags
+- `category` (optional): category string
+- `visibility` (optional): "public" | "private" | "unlisted" (default "public")
+- `collection` (optional): collection slug
+
+This tool should:
+1. Run the PII content filter (src/lib/content-filter.ts) on the text
+2. Save to a new `draft_posts` table with status "pending"
+3. Return the draft ID and filtered text for the agent to confirm
+
+**New MCP tool: `shout_list_drafts`**
+- `user_id` (required): user's UUID
+- `status` (optional): "pending" | "approved" | "rejected" | "published" (default "pending")
+- `limit` (optional): number (default 20)
+
+Returns list of draft posts with their status.
+
+### 2. Approval Queue
+Drafts sit in "pending" status until approved. 
+
+**New MCP tool: `shout_approve_draft`**
+- `draft_id` (required): UUID of the draft
+- `user_id` (required): user's UUID (for auth)
+- `action` (required): "approve" | "reject" | "edit"
+- `edited_text` (optional): if action is "edit", the revised text
+
+When approved:
+1. Run PII filter again on final text
+2. Insert into `shouts` table with source "agent_post"
+3. Update draft status to "published"
+4. Return the published shout
+
+When rejected:
+1. Update draft status to "rejected"
+
+### 3. Auto-Publish Setting
+Add a user setting for auto-publish.
+
+**New MCP tool: `shout_set_auto_publish`**
+- `user_id` (required): user's UUID
+- `enabled` (required): boolean
+- `filter_level` (optional): "strict" | "standard" (default "strict")
+
+When auto-publish is ON:
+- `shout_draft_post` still creates a draft but immediately auto-approves and publishes it
+- PII filter runs regardless (hard constraint, can't be disabled)
+- Log the auto-publish event
+
+### 4. Supabase Migration
+
+```sql
+-- Draft posts table
+CREATE TABLE IF NOT EXISTS draft_posts (
+  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
+  user_id UUID NOT NULL REFERENCES auth.users(id),
+  text TEXT NOT NULL,
+  filtered_text TEXT,
+  tags TEXT[] DEFAULT '{}',
+  category TEXT,
+  collection_id UUID REFERENCES collections(id),
+  visibility TEXT DEFAULT 'public' CHECK (visibility IN ('public', 'private', 'unlisted')),
+  status TEXT DEFAULT 'pending' CHECK (status IN ('pending', 'approved', 'rejected', 'published')),
+  filter_report TEXT,
+  source TEXT DEFAULT 'agent',
+  agent_id TEXT,
+  published_shout_id UUID REFERENCES shouts(id),
+  created_at TIMESTAMPTZ DEFAULT NOW(),
+  updated_at TIMESTAMPTZ DEFAULT NOW()
+);
+
+CREATE INDEX idx_draft_posts_user_status ON draft_posts(user_id, status);
+CREATE INDEX idx_draft_posts_created ON draft_posts(created_at DESC);
+
+-- Add auto_publish to user settings (or create user_settings if needed)
+ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS auto_publish BOOLEAN DEFAULT false;
+ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS auto_publish_filter_level TEXT DEFAULT 'strict';
+
+-- Add shout_type to shouts table
+ALTER TABLE shouts ADD COLUMN IF NOT EXISTS shout_type TEXT DEFAULT 'link' CHECK (shout_type IN ('link', 'post'));
+ALTER TABLE shouts ADD COLUMN IF NOT EXISTS draft_id UUID REFERENCES draft_posts(id);
+```
+
+### 5. File Structure
+- `src/tools/posts.ts` — new file with shout_draft_post, shout_list_drafts, shout_approve_draft, shout_set_auto_publish
+- `src/lib/content-filter.ts` — already exists, import and use
+- `src/index.ts` — register the new tools
+- Run the SQL migration on supabase
+
+### Constraints
+- PII filter ALWAYS runs, even with auto-publish ON
+- Never skip content filtering regardless of user settings
+- All text posts have max 500 char limit
+- Use the existing supabase client from src/lib/supabase.ts
+- Follow existing code style (zod schemas, McpServer tool registration)
+- Build with TypeScript, compile with tsc

package/assets/shout-default.svg

@@ -0,0 +1,5 @@
+<svg width="1200" height="630" xmlns="http://www.w3.org/2000/svg">
+  <rect width="1200" height="630" fill="#FAFAFA"/>
+  <circle cx="600" cy="280" r="32" fill="#FACC15"/>
+  <text x="600" y="380" text-anchor="middle" font-family="-apple-system, system-ui, sans-serif" font-size="28" fill="#A3A3A3" letter-spacing="4">SHOUT</text>
+</svg>

package/bin/shout

@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+# shout CLI - save links to nod shout from the command line
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")/.." && pwd)"
+cd "$SCRIPT_DIR"
+
+# Load env
+set -a
+source .env 2>/dev/null || true
+set +a
+
+ACTION="${1:-help}"
+shift || true
+
+case "$ACTION" in
+  save)
+    # Usage: shout save <url> [--take "agent commentary"] [--tags tag1,tag2]
+    URL="${1:?Usage: shout save <url> [--take \"commentary\"] [--tags tag1,tag2]}"
+    shift || true
+    TAKE=""
+    TAGS=""
+    while [[ $# -gt 0 ]]; do
+      case "$1" in
+        --take) TAKE="$2"; shift 2 ;;
+        --tags) TAGS="$2"; shift 2 ;;
+        *) shift ;;
+      esac
+    done
+    node -e "
+      import('./dist/tools/shout_agent_curate.js').then(async m => {
+        const result = await m.shoutAgentCurate({
+          url: '$URL',
+          agent_take: '$TAKE' || undefined,
+          tags: '$TAGS' ? '$TAGS'.split(',') : undefined,
+          user_id: (await import('./dist/lib/supabase.js')).supabase.from('profiles').select('id').eq('username','fubz').single().then(r => r.data.id),
+        });
+        console.log(JSON.stringify(result, null, 2));
+      }).catch(e => { console.error(e.message); process.exit(1); });
+    "
+    ;;
+  list)
+    node -e "
+      import('./dist/lib/supabase.js').then(async ({ supabase }) => {
+        const { data } = await supabase.from('shouts').select('title, url, category, tags, created_at').order('created_at', { ascending: false }).limit(${1:-20});
+        data.forEach(s => console.log(\`[\${s.category}] \${s.title}\n  \${s.url}\n  tags: \${(s.tags||[]).join(', ')}\n\`));
+      });
+    "
+    ;;
+  collections)
+    node -e "
+      import('./dist/lib/supabase.js').then(async ({ supabase }) => {
+        const { data } = await supabase.from('collections').select('name, slug, description');
+        if (!data?.length) { console.log('No collections yet.'); return; }
+        data.forEach(c => console.log(\`\${c.name} (\${c.slug}): \${c.description || 'no description'}\`));
+      });
+    "
+    ;;
+  help|*)
+    echo "shout - nod social link curation CLI"
+    echo ""
+    echo "Commands:"
+    echo "  save <url> [--take \"commentary\"] [--tags tag1,tag2]  Save a link"
+    echo "  list [count]                                          List recent shouts"
+    echo "  collections                                           List collections"
+    echo ""
+    ;;
+esac

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,29 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { registerLinkTools } from "./tools/links.js";
+import { registerCollectionTools } from "./tools/collections.js";
+import { registerSocialTools } from "./tools/social.js";
+import { registerSettingsTools } from "./tools/settings.js";
+import { registerPostTools } from "./tools/posts.js";
+// agent curate tool is registered inside registerLinkTools
+const server = new McpServer({
+    name: "nod-shout",
+    version: "0.1.0",
+});
+// register all tools
+registerLinkTools(server);
+registerCollectionTools(server);
+registerSocialTools(server);
+registerSettingsTools(server);
+registerPostTools(server);
+// start the server on stdio transport
+async function main() {
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error("nod-shout mcp server running on stdio");
+}
+main().catch((err) => {
+    console.error("fatal error:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,2DAA2D;AAE3D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,qBAAqB;AACrB,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAChC,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAC9B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAE1B,sCAAsC;AACtC,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;AACzD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/lib/ai.d.ts

@@ -0,0 +1,13 @@
+import type { AISummaryResult } from "../types.js";
+/**
+ * generate a summary, tags, and category for a link using gpt-4.1-mini.
+ * falls back to basic extraction if no api key or on error.
+ */
+export declare function generateSummary(params: {
+    url: string;
+    title: string | null;
+    description: string | null;
+    bodyText: string | null;
+    userContext: string | null;
+}): Promise<AISummaryResult>;
+//# sourceMappingURL=ai.d.ts.map

package/dist/lib/ai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../src/lib/ai.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAyBnD;;;GAGG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,GAAG,OAAO,CAAC,eAAe,CAAC,CAc3B"}

package/dist/lib/ai.js

@@ -0,0 +1,135 @@
+import { loadSkills } from "./skills.js";
+const OPENAI_API_KEY = process.env.OPENAI_API_KEY;
+const SKILL_CONTEXT = loadSkills(["link-summary", "tagging-and-routing", "collection-routing"]);
+const ALLOWED_CATEGORIES = new Set([
+    "ai",
+    "agents",
+    "devtools",
+    "design",
+    "growth",
+    "marketing",
+    "startups",
+    "media",
+    "social",
+    "product",
+    "engineering",
+    "research",
+    "security",
+    "finance",
+    "crypto",
+    "policy",
+    "uncategorized",
+]);
+/**
+ * generate a summary, tags, and category for a link using gpt-4.1-mini.
+ * falls back to basic extraction if no api key or on error.
+ */
+export async function generateSummary(params) {
+    const { url, title, description, bodyText, userContext } = params;
+    // try ai summarization if key is available
+    if (OPENAI_API_KEY) {
+        try {
+            return await aiSummarize(url, title, description, bodyText, userContext);
+        }
+        catch (err) {
+            console.error("ai summary failed, falling back to basic extraction:", err);
+        }
+    }
+    // fallback: basic extraction
+    return basicExtract(title, description);
+}
+async function aiSummarize(url, title, description, bodyText, userContext) {
+    const prompt = `You are generating data for a nod shout card.${SKILL_CONTEXT}
+
+Follow the skills above. Output one short summary, 3-5 tags, and one category.
+
+Hard rules:
+- summary should help someone decide whether to click
+- 2 short sentences max
+- sentence 1: what the thing is or what happened
+- sentence 2: a reason to click or a key detail
+- include concrete specifics when available
+- never start with: "this article discusses", "this post is about", "the page explains", "X tweeted that", "post by", "page", "clicking gives", "clicking provides", "clicking reveals"
+- never use: "not just X but Y", "isn't just X"
+- tags must be lowercase
+- category must be one of: ${Array.from(ALLOWED_CATEGORIES).join(", ")}
+- if unsure, use uncategorized
+
+url: ${url}
+title: ${title || "unknown"}
+description: ${description || "none"}
+${bodyText ? `page content: ${bodyText}` : ""}
+${userContext ? `user context: ${userContext}` : ""}
+
+respond in json only, no markdown:
+{"summary": "...", "tags": ["...", "..."], "category": "..."}`;
+    const response = await fetch("https://api.openai.com/v1/chat/completions", {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            Authorization: `Bearer ${OPENAI_API_KEY}`,
+        },
+        body: JSON.stringify({
+            model: "gpt-4.1-mini",
+            messages: [{ role: "user", content: prompt }],
+            temperature: 0.7,
+            max_tokens: 200,
+            response_format: { type: "json_object" },
+        }),
+        signal: AbortSignal.timeout(15000),
+    });
+    if (!response.ok) {
+        throw new Error(`openai api error: ${response.status}`);
+    }
+    const data = await response.json();
+    const content = data.choices?.[0]?.message?.content;
+    if (!content)
+        throw new Error("no content in openai response");
+    const parsed = JSON.parse(content);
+    return normalizeResult({
+        summary: parsed.summary || description || "no summary available",
+        tags: Array.isArray(parsed.tags) ? parsed.tags.slice(0, 5) : [],
+        category: parsed.category || "uncategorized",
+    });
+}
+function normalizeResult(result) {
+    const summary = String(result.summary || "no summary available")
+        .replace(/\s+/g, " ")
+        .trim()
+        .slice(0, 280);
+    const tags = Array.from(new Set((result.tags || [])
+        .map((tag) => String(tag).toLowerCase().trim())
+        .map((tag) => tag.replace(/[^a-z0-9\s-]/g, ""))
+        .map((tag) => tag.replace(/\s+/g, "-"))
+        .filter((tag) => tag.length >= 2 && tag.length <= 32)
+        .filter((tag) => !["technology", "tech", "news", "innovation", "business"].includes(tag)))).slice(0, 5);
+    const category = ALLOWED_CATEGORIES.has(String(result.category || "").toLowerCase().trim())
+        ? String(result.category).toLowerCase().trim()
+        : "uncategorized";
+    return { summary, tags, category };
+}
+function basicExtract(title, description) {
+    const summary = description || title || "no summary available";
+    const text = `${title || ""} ${description || ""}`.toLowerCase();
+    const stopWords = new Set([
+        "the", "a", "an", "is", "are", "was", "were", "be", "been",
+        "being", "have", "has", "had", "do", "does", "did", "will",
+        "would", "could", "should", "may", "might", "can", "shall",
+        "to", "of", "in", "for", "on", "with", "at", "by", "from",
+        "as", "into", "through", "during", "before", "after", "and",
+        "but", "or", "nor", "not", "so", "yet", "both", "either",
+        "neither", "each", "every", "all", "any", "few", "more",
+        "most", "other", "some", "such", "no", "only", "own", "same",
+        "than", "too", "very", "just", "that", "this", "it", "its",
+        "how", "what", "which", "who", "whom", "where", "when", "why",
+        "about", "up", "out", "if", "then", "also", "new", "one",
+    ]);
+    const tags = text
+        .replace(/[^a-z0-9\s-]/g, "")
+        .split(/\s+/)
+        .filter((w) => w.length > 2 && !stopWords.has(w))
+        .slice(0, 5);
+    const category = "uncategorized";
+    return normalizeResult({ summary, tags, category });
+}
+//# sourceMappingURL=ai.js.map

package/dist/lib/ai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.js","sourceRoot":"","sources":["../../src/lib/ai.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AAClD,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,cAAc,EAAE,qBAAqB,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAChG,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,IAAI;IACJ,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,UAAU;IACV,OAAO;IACP,QAAQ;IACR,SAAS;IACT,aAAa;IACb,UAAU;IACV,UAAU;IACV,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,eAAe;CAChB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAMrC;IACC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAElE,2CAA2C;IAC3C,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,sDAAsD,EAAE,GAAG,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,OAAO,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAW,EACX,KAAoB,EACpB,WAA0B,EAC1B,QAAuB,EACvB,WAA0B;IAE1B,MAAM,MAAM,GAAG,gDAAgD,aAAa;;;;;;;;;;;;;6BAajD,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;OAG/D,GAAG;SACD,KAAK,IAAI,SAAS;eACZ,WAAW,IAAI,MAAM;EAClC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE;EAC3C,WAAW,CAAC,CAAC,CAAC,iBAAiB,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;;;8DAGW,CAAC;IAE7D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,4CAA4C,EAAE;QACzE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,cAAc,EAAE;SAC1C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK,EAAE,cAAc;YACrB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YAC7C,WAAW,EAAE,GAAG;YAChB,UAAU,EAAE,GAAG;YACf,eAAe,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;SACzC,CAAC;QACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;KACnC,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC;IACpD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAE/D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,eAAe,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,WAAW,IAAI,sBAAsB;QAChE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;QAC/D,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,eAAe;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,MAAuB;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,sBAAsB,CAAC;SAC7D,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAEjB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CACrB,IAAI,GAAG,CACL,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;SAChB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;SAC9C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;SAC9C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SACtC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;SACpD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAC5F,CACF,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEd,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACzF,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;QAC9C,CAAC,CAAC,eAAe,CAAC;IAEpB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CACnB,KAAoB,EACpB,WAA0B;IAE1B,MAAM,OAAO,GAAG,WAAW,IAAI,KAAK,IAAI,sBAAsB,CAAC;IAC/D,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,EAAE,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;QACxB,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;QAC1D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;QAC1D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO;QAC1D,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM;QACzD,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK;QAC3D,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ;QACxD,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM;QACvD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;QAC5D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK;QAC1D,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;QAC7D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;KACzD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI;SACd,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAChD,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACf,MAAM,QAAQ,GAAG,eAAe,CAAC;IACjC,OAAO,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AACtD,CAAC"}

package/dist/lib/content-filter.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Content filter for shout posts — strips PII, proprietary data,
+ * and sensitive information before anything touches the public page.
+ *
+ * Two layers:
+ * 1. Regex — catches format-based PII (emails, phones, keys, etc.)
+ * 2. LLM — catches context-based leaks ("our revenue is...", "client X told me...")
+ *
+ * Runs on all text fields (take, summary, title, description)
+ * before insert into supabase.
+ */
+export type FilterResult = {
+    text: string;
+    filtered: boolean;
+    removals: string[];
+};
+export declare function filterPII(text: string | null | undefined): FilterResult;
+/**
+ * Filter all text fields on a shout before saving.
+ * Returns the filtered fields and a report of what was removed.
+ */
+export declare function filterShoutContent(fields: {
+    take?: string | null;
+    summary?: string | null;
+    title?: string | null;
+    description?: string | null;
+}): {
+    take: string | null;
+    summary: string | null;
+    title: string | null;
+    description: string | null;
+    filterReport: string | null;
+};
+/**
+ * Layer 2: LLM-based content safety check.
+ * Catches context-dependent PII/proprietary leaks that regex misses.
+ *
+ * Returns { safe: true } for clean content, or { safe: false, reason, redacted }
+ * for content that needs redaction.
+ *
+ * Designed for LOW false positives:
+ * - Public info (news, articles, open-source projects) = safe
+ * - General opinions and commentary = safe
+ * - User's own professional interests/skills = safe
+ * - Only flags SPECIFIC private data about identifiable people/companies
+ */
+type LLMFilterResult = {
+    safe: boolean;
+    reason: string | null;
+    redactedText: string | null;
+};
+export declare function llmContentFilter(text: string): Promise<LLMFilterResult>;
+/**
+ * Full content filter: regex + LLM.
+ * Use this for user-facing text (takes, posts, commentary).
+ * Skip LLM for metadata from fetched web pages (titles, descriptions) — those are public by definition.
+ */
+export declare function filterShoutContentFull(fields: {
+    take?: string | null;
+    summary?: string | null;
+    title?: string | null;
+    description?: string | null;
+    skipLLMForMetadata?: boolean;
+}): Promise<{
+    take: string | null;
+    summary: string | null;
+    title: string | null;
+    description: string | null;
+    filterReport: string | null;
+    blocked: boolean;
+    blockReason: string | null;
+}>;
+export {};
+//# sourceMappingURL=content-filter.d.ts.map

package/dist/lib/content-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-filter.d.ts","sourceRoot":"","sources":["../../src/lib/content-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAkCH,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEF,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,CAmBvE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,GAAG;IACF,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAoBA;AAED;;;;;;;;;;;;GAYG;AAEH,KAAK,eAAe,GAAG;IACrB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC;AAiCF,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAgD7E;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,GAAG,OAAO,CAAC;IACV,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC,CA6BD"}