nod-shout 0.1.0

package/dist/lib/content-filter.js

@@ -0,0 +1,188 @@
+/**
+ * Content filter for shout posts — strips PII, proprietary data,
+ * and sensitive information before anything touches the public page.
+ *
+ * Two layers:
+ * 1. Regex — catches format-based PII (emails, phones, keys, etc.)
+ * 2. LLM — catches context-based leaks ("our revenue is...", "client X told me...")
+ *
+ * Runs on all text fields (take, summary, title, description)
+ * before insert into supabase.
+ */
+const OPENAI_API_KEY = process.env.OPENAI_API_KEY;
+// Regex patterns for common PII
+const PII_PATTERNS = [
+    // Email addresses
+    { pattern: /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g, replacement: '[email removed]', label: 'email' },
+    // Phone numbers (US formats)
+    { pattern: /(\+?1[-.\s]?)?\(?\d{3}\)?[-.\s]?\d{3}[-.\s]?\d{4}/g, replacement: '[phone removed]', label: 'phone' },
+    // SSN
+    { pattern: /\b\d{3}[-\s]?\d{2}[-\s]?\d{4}\b/g, replacement: '[ssn removed]', label: 'ssn' },
+    // Credit card numbers (basic)
+    { pattern: /\b\d{4}[-\s]?\d{4}[-\s]?\d{4}[-\s]?\d{4}\b/g, replacement: '[card removed]', label: 'credit_card' },
+    // API keys / tokens (common prefixes)
+    { pattern: /\b(sk-[a-zA-Z0-9_-]{20,}|sk-ant-[a-zA-Z0-9_-]{20,}|sk-proj-[a-zA-Z0-9_-]{20,}|ghp_[a-zA-Z0-9]{36,}|gho_[a-zA-Z0-9]{36,}|xoxb-[a-zA-Z0-9-]+|xoxp-[a-zA-Z0-9-]+|AKIA[A-Z0-9]{16})\b/g, replacement: '[api_key removed]', label: 'api_key' },
+    // Passwords in context
+    { pattern: /(?:password|passwd|pwd|secret|token)\s*[:=]\s*\S+/gi, replacement: '[credential removed]', label: 'password' },
+    // IP addresses (internal)
+    { pattern: /\b(?:10|172\.(?:1[6-9]|2\d|3[01])|192\.168)\.\d{1,3}\.\d{1,3}\b/g, replacement: '[internal_ip removed]', label: 'internal_ip' },
+    // Street addresses (basic US pattern)
+    { pattern: /\b\d{1,5}\s+[A-Z][a-zA-Z]*\s+(?:St|Street|Ave|Avenue|Blvd|Boulevard|Dr|Drive|Ln|Lane|Rd|Road|Way|Ct|Court|Pl|Place)\.?\b/gi, replacement: '[address removed]', label: 'address' },
+];
+// Financial/proprietary data patterns
+const PROPRIETARY_PATTERNS = [
+    // Dollar amounts over $999 (likely sensitive business figures)
+    { pattern: /\$\d{1,3}(?:,\d{3})+(?:\.\d{2})?/g, replacement: '[amount removed]', label: 'large_dollar' },
+    // Revenue/ARR/MRR mentions with numbers
+    { pattern: /(?:revenue|arr|mrr|profit|loss|burn|runway|valuation|cap table|equity)\s*(?:of|is|was|:)?\s*\$?[\d,.]+[kKmMbB]?/gi, replacement: '[financial_data removed]', label: 'financial' },
+    // Contract/deal terms
+    { pattern: /(?:contract|agreement|nda|term sheet|sow|msa)\s+(?:with|for|from)\s+[A-Z][a-zA-Z\s]+(?:Inc|LLC|Ltd|Corp|Co)\.?/gi, replacement: '[contract_info removed]', label: 'contract' },
+];
+export function filterPII(text) {
+    if (!text)
+        return { text: text || '', filtered: false, removals: [] };
+    let result = text;
+    const removals = [];
+    for (const { pattern, replacement, label } of [...PII_PATTERNS, ...PROPRIETARY_PATTERNS]) {
+        const matches = result.match(pattern);
+        if (matches) {
+            removals.push(`${label} (${matches.length}x)`);
+            result = result.replace(pattern, replacement);
+        }
+    }
+    return {
+        text: result,
+        filtered: removals.length > 0,
+        removals,
+    };
+}
+/**
+ * Filter all text fields on a shout before saving.
+ * Returns the filtered fields and a report of what was removed.
+ */
+export function filterShoutContent(fields) {
+    const takeResult = filterPII(fields.take);
+    const summaryResult = filterPII(fields.summary);
+    const titleResult = filterPII(fields.title);
+    const descResult = filterPII(fields.description);
+    const allRemovals = [
+        ...takeResult.removals.map(r => `take: ${r}`),
+        ...summaryResult.removals.map(r => `summary: ${r}`),
+        ...titleResult.removals.map(r => `title: ${r}`),
+        ...descResult.removals.map(r => `description: ${r}`),
+    ];
+    return {
+        take: takeResult.text || null,
+        summary: summaryResult.text || null,
+        title: titleResult.text || null,
+        description: descResult.text || null,
+        filterReport: allRemovals.length > 0 ? `PII filter removed: ${allRemovals.join('; ')}` : null,
+    };
+}
+const LLM_FILTER_PROMPT = `You are a content safety filter for a public social profile page (like Twitter for AI agents). Your job is to check if text contains private/confidential information that should NOT be posted publicly.
+
+ALLOW (these are safe — do NOT flag):
+- Public news, articles, blog posts, open-source projects
+- General opinions, commentary, takes on public topics
+- Professional interests, skills, industry knowledge
+- Publicly known company info (funding rounds reported in press, public products)
+- Names of public figures, companies, or products mentioned in public contexts
+- Dollar amounts from public sources (article says "raised $10M" = fine)
+- Technical discussions, code patterns, architecture opinions
+- Meta-commentary ABOUT data types or categories (e.g. "this tool catches revenue leaks" is talking about the concept, not leaking actual revenue)
+- Descriptions of what a tool filters, blocks, or protects against — mentioning "PII", "revenue", "deal terms" as CATEGORIES is not the same as sharing actual PII or revenue figures
+- Product announcements, feature descriptions, build logs
+
+BLOCK (these contain private data — flag these):
+- Someone's ACTUAL personal contact info shared in private context (not from a public webpage)
+- SPECIFIC internal business metrics with real numbers not publicly disclosed ("our revenue is $2.3M", "client pays $45k/month")
+- Details from private conversations, meetings, or emails that identify SPECIFIC people + their SPECIFIC sensitive info
+- ACTUAL client/customer names paired with ACTUAL deal terms, pricing, or contract details
+- Health, legal, or financial information about SPECIFIC private individuals with REAL identifying details
+- Login credentials, internal URLs, private API endpoints
+
+KEY DISTINCTION: talking about categories of sensitive data ("catches things like revenue figures") is NOT the same as sharing actual sensitive data ("our revenue is $2.3M"). The first is safe. The second is not.
+
+Respond with EXACTLY one of:
+SAFE
+or
+BLOCK: [one-sentence reason]
+
+Do not explain further. Do not hedge. When in doubt, default to SAFE. Only block when you see ACTUAL specific private data, not descriptions of data types.`;
+export async function llmContentFilter(text) {
+    if (!OPENAI_API_KEY || !text || text.length < 20) {
+        return { safe: true, reason: null, redactedText: null };
+    }
+    try {
+        const response = await fetch('https://api.openai.com/v1/chat/completions', {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': `Bearer ${OPENAI_API_KEY}`,
+            },
+            body: JSON.stringify({
+                model: 'gpt-4o-mini',
+                messages: [
+                    { role: 'system', content: LLM_FILTER_PROMPT },
+                    { role: 'user', content: `Check this text:\n\n${text}` },
+                ],
+                temperature: 0,
+                max_tokens: 100,
+            }),
+        });
+        if (!response.ok) {
+            console.error(`[content-filter] LLM check failed: ${response.status}`);
+            // fail open — if LLM is down, trust the regex layer
+            return { safe: true, reason: null, redactedText: null };
+        }
+        const data = await response.json();
+        const reply = (data.choices?.[0]?.message?.content || '').trim();
+        if (reply.startsWith('SAFE')) {
+            return { safe: true, reason: null, redactedText: null };
+        }
+        if (reply.startsWith('BLOCK')) {
+            const reason = reply.replace(/^BLOCK:\s*/, '');
+            return { safe: false, reason, redactedText: null };
+        }
+        // unclear response — default safe (avoid false positives)
+        return { safe: true, reason: null, redactedText: null };
+    }
+    catch (err) {
+        console.error('[content-filter] LLM filter error:', err);
+        // fail open
+        return { safe: true, reason: null, redactedText: null };
+    }
+}
+/**
+ * Full content filter: regex + LLM.
+ * Use this for user-facing text (takes, posts, commentary).
+ * Skip LLM for metadata from fetched web pages (titles, descriptions) — those are public by definition.
+ */
+export async function filterShoutContentFull(fields) {
+    // layer 1: regex
+    const regexResult = filterShoutContent(fields);
+    // layer 2: LLM check on user-generated text (take, summary)
+    // skip for title/description if they came from fetched webpage metadata
+    const textsToCheck = [
+        regexResult.take,
+        regexResult.summary,
+        ...(fields.skipLLMForMetadata ? [] : [regexResult.title, regexResult.description]),
+    ].filter(Boolean).join('\n\n');
+    if (textsToCheck.length > 20) {
+        const llmResult = await llmContentFilter(textsToCheck);
+        if (!llmResult.safe) {
+            return {
+                ...regexResult,
+                blocked: true,
+                blockReason: llmResult.reason || 'LLM filter flagged content as containing private data',
+                filterReport: [regexResult.filterReport, `LLM blocked: ${llmResult.reason}`].filter(Boolean).join('; '),
+            };
+        }
+    }
+    return {
+        ...regexResult,
+        blocked: false,
+        blockReason: null,
+    };
+}
+//# sourceMappingURL=content-filter.js.map

package/dist/lib/content-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-filter.js","sourceRoot":"","sources":["../../src/lib/content-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AAElD,gCAAgC;AAChC,MAAM,YAAY,GAA8D;IAC9E,kBAAkB;IAClB,EAAE,OAAO,EAAE,iDAAiD,EAAE,WAAW,EAAE,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE;IAC9G,6BAA6B;IAC7B,EAAE,OAAO,EAAE,oDAAoD,EAAE,WAAW,EAAE,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE;IACjH,MAAM;IACN,EAAE,OAAO,EAAE,kCAAkC,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE;IAC3F,8BAA8B;IAC9B,EAAE,OAAO,EAAE,6CAA6C,EAAE,WAAW,EAAE,gBAAgB,EAAE,KAAK,EAAE,aAAa,EAAE;IAC/G,sCAAsC;IACtC,EAAE,OAAO,EAAE,oLAAoL,EAAE,WAAW,EAAE,mBAAmB,EAAE,KAAK,EAAE,SAAS,EAAE;IACrP,uBAAuB;IACvB,EAAE,OAAO,EAAE,qDAAqD,EAAE,WAAW,EAAE,sBAAsB,EAAE,KAAK,EAAE,UAAU,EAAE;IAC1H,0BAA0B;IAC1B,EAAE,OAAO,EAAE,kEAAkE,EAAE,WAAW,EAAE,uBAAuB,EAAE,KAAK,EAAE,aAAa,EAAE;IAC3I,sCAAsC;IACtC,EAAE,OAAO,EAAE,4HAA4H,EAAE,WAAW,EAAE,mBAAmB,EAAE,KAAK,EAAE,SAAS,EAAE;CAC9L,CAAC;AAEF,sCAAsC;AACtC,MAAM,oBAAoB,GAA8D;IACtF,+DAA+D;IAC/D,EAAE,OAAO,EAAE,mCAAmC,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,EAAE,cAAc,EAAE;IACxG,wCAAwC;IACxC,EAAE,OAAO,EAAE,mHAAmH,EAAE,WAAW,EAAE,0BAA0B,EAAE,KAAK,EAAE,WAAW,EAAE;IAC7L,sBAAsB;IACtB,EAAE,OAAO,EAAE,kHAAkH,EAAE,WAAW,EAAE,yBAAyB,EAAE,KAAK,EAAE,UAAU,EAAE;CAC3L,CAAC;AAQF,MAAM,UAAU,SAAS,CAAC,IAA+B;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAEtE,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,YAAY,EAAE,GAAG,oBAAoB,CAAC,EAAE,CAAC;QACzF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;YAC/C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC7B,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAKlC;IAOC,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAEjD,MAAM,WAAW,GAAG;QAClB,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;QACnD,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;KACrD,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,IAAI,IAAI,IAAI;QAC7B,OAAO,EAAE,aAAa,CAAC,IAAI,IAAI,IAAI;QACnC,KAAK,EAAE,WAAW,CAAC,IAAI,IAAI,IAAI;QAC/B,WAAW,EAAE,UAAU,CAAC,IAAI,IAAI,IAAI;QACpC,YAAY,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;KAC9F,CAAC;AACJ,CAAC;AAsBD,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4JA6BkI,CAAC;AAE7J,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,4CAA4C,EAAE;YACzE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,UAAU,cAAc,EAAE;aAC5C;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,aAAa;gBACpB,QAAQ,EAAE;oBACR,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE;oBAC9C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,IAAI,EAAE,EAAE;iBACzD;gBACD,WAAW,EAAE,CAAC;gBACd,UAAU,EAAE,GAAG;aAChB,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,sCAAsC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACvE,oDAAoD;YACpD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC1D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAC;QAC1C,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAEjE,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC1D,CAAC;QAED,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAC/C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACrD,CAAC;QAED,0DAA0D;QAC1D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;QACzD,YAAY;QACZ,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAM5C;IASC,iBAAiB;IACjB,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE/C,4DAA4D;IAC5D,wEAAwE;IACxE,MAAM,YAAY,GAAG;QACnB,WAAW,CAAC,IAAI;QAChB,WAAW,CAAC,OAAO;QACnB,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC;KACnF,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE/B,IAAI,YAAY,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO;gBACL,GAAG,WAAW;gBACd,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,SAAS,CAAC,MAAM,IAAI,uDAAuD;gBACxF,YAAY,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,gBAAgB,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;aACxG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,GAAG,WAAW;QACd,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,IAAI;KAClB,CAAC;AACJ,CAAC"}

package/dist/lib/context-extractor.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Context extraction pipeline for nod intros.
+ *
+ * Takes natural language from conversations and extracts structured
+ * profile data: needs, offers, projects, interests, expertise.
+ *
+ * Two modes:
+ * 1. keyword-based (fast, no API call) — catches explicit signals
+ * 2. LLM-based (better, uses gpt-4o-mini) — understands context
+ */
+export interface ExtractedContext {
+    needs: {
+        description: string;
+        urgency: "low" | "medium" | "high";
+        category: string;
+    }[];
+    offers: {
+        description: string;
+        category: string;
+    }[];
+    projects: {
+        name: string;
+        description: string;
+        stage: string;
+    }[];
+    interests: string[];
+    expertise: string[];
+    industries: string[];
+}
+/**
+ * Extract context from text. Uses LLM when available, falls back to keywords.
+ */
+export declare function extractContext(text: string, useLLM?: boolean): Promise<ExtractedContext>;
+/**
+ * Check if text contains any signals worth extracting.
+ * Fast check to avoid unnecessary LLM calls.
+ */
+export declare function hasContextSignals(text: string): boolean;
+//# sourceMappingURL=context-extractor.d.ts.map

package/dist/lib/context-extractor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-extractor.d.ts","sourceRoot":"","sources":["../../src/lib/context-extractor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvF,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACpD,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAiJD;;GAEG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,OAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAKpG;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CASvD"}

package/dist/lib/context-extractor.js

@@ -0,0 +1,170 @@
+/**
+ * Context extraction pipeline for nod intros.
+ *
+ * Takes natural language from conversations and extracts structured
+ * profile data: needs, offers, projects, interests, expertise.
+ *
+ * Two modes:
+ * 1. keyword-based (fast, no API call) — catches explicit signals
+ * 2. LLM-based (better, uses gpt-4o-mini) — understands context
+ */
+const OPENAI_API_KEY = process.env.OPENAI_API_KEY;
+// keyword patterns that signal needs
+const NEED_PATTERNS = [
+    /i(?:'m| am) looking for (.+?)(?:\.|$)/gi,
+    /i need (?:help with |a |an )?(.+?)(?:\.|$)/gi,
+    /looking for (?:someone|a person|anybody) (?:who|that) (.+?)(?:\.|$)/gi,
+    /anyone know (?:a |an )?(.+?)(?:\?|$)/gi,
+    /i could use (.+?)(?:\.|$)/gi,
+    /hiring (?:a |an )?(.+?)(?:\.|$)/gi,
+];
+// keyword patterns that signal offers
+const OFFER_PATTERNS = [
+    /i(?:'m| am) (?:really )?good at (.+?)(?:\.|$)/gi,
+    /i can help with (.+?)(?:\.|$)/gi,
+    /i(?:'ve| have) (?:years of )?experience (?:in |with )(.+?)(?:\.|$)/gi,
+    /my expertise is (?:in )?(.+?)(?:\.|$)/gi,
+    /i specialize in (.+?)(?:\.|$)/gi,
+    /i offer (.+?)(?:\.|$)/gi,
+];
+// keyword patterns that signal projects
+const PROJECT_PATTERNS = [
+    /i(?:'m| am) (?:currently )?(?:building|working on|developing|creating) (.+?)(?:\.|$)/gi,
+    /i(?:'ve| have) been (?:building|working on) (.+?)(?:\.|$)/gi,
+    /my (?:current )?(?:project|startup|company|app|product) (?:is |called )?(.+?)(?:\.|$)/gi,
+    /just launched (.+?)(?:\.|$)/gi,
+];
+function extractKeyword(text) {
+    const result = {
+        needs: [],
+        offers: [],
+        projects: [],
+        interests: [],
+        expertise: [],
+        industries: [],
+    };
+    for (const pattern of NEED_PATTERNS) {
+        pattern.lastIndex = 0;
+        let match;
+        while ((match = pattern.exec(text)) !== null) {
+            const desc = match[1].trim();
+            if (desc.length > 5 && desc.length < 200) {
+                result.needs.push({ description: desc, urgency: "medium", category: "general" });
+            }
+        }
+    }
+    for (const pattern of OFFER_PATTERNS) {
+        pattern.lastIndex = 0;
+        let match;
+        while ((match = pattern.exec(text)) !== null) {
+            const desc = match[1].trim();
+            if (desc.length > 3 && desc.length < 200) {
+                result.offers.push({ description: desc, category: "general" });
+            }
+        }
+    }
+    for (const pattern of PROJECT_PATTERNS) {
+        pattern.lastIndex = 0;
+        let match;
+        while ((match = pattern.exec(text)) !== null) {
+            const desc = match[1].trim();
+            if (desc.length > 3 && desc.length < 200) {
+                result.projects.push({ name: desc.split(/\s+/).slice(0, 4).join(" "), description: desc, stage: "building" });
+            }
+        }
+    }
+    return result;
+}
+async function extractLLM(text) {
+    if (!OPENAI_API_KEY)
+        return extractKeyword(text);
+    try {
+        const response = await fetch("https://api.openai.com/v1/chat/completions", {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bearer ${OPENAI_API_KEY}`,
+            },
+            body: JSON.stringify({
+                model: "gpt-4o-mini",
+                messages: [
+                    {
+                        role: "system",
+                        content: `Extract structured profile data from conversation text for a professional networking tool. Return valid JSON only.
+
+Extract:
+- needs: things the person is looking for (skills, connections, advice, tools)
+- offers: things they can provide (expertise, connections, resources)
+- projects: what they're currently working on
+- interests: topics they care about
+- expertise: areas they're skilled in
+- industries: sectors they work in
+
+Rules:
+- Only extract what's explicitly stated or strongly implied
+- Keep descriptions concise (under 100 chars)
+- Omit any field with no data (empty array)
+- Never include names, emails, or identifying info
+- If nothing relevant is found, return all empty arrays
+
+JSON schema:
+{
+  "needs": [{"description": string, "urgency": "low"|"medium"|"high", "category": string}],
+  "offers": [{"description": string, "category": string}],
+  "projects": [{"name": string, "description": string, "stage": "idea"|"building"|"launched"|"growing"}],
+  "interests": [string],
+  "expertise": [string],
+  "industries": [string]
+}`,
+                    },
+                    { role: "user", content: text },
+                ],
+                temperature: 0,
+                max_tokens: 500,
+                response_format: { type: "json_object" },
+            }),
+        });
+        if (!response.ok)
+            return extractKeyword(text);
+        const data = (await response.json());
+        const content = data.choices?.[0]?.message?.content;
+        if (!content)
+            return extractKeyword(text);
+        const parsed = JSON.parse(content);
+        return {
+            needs: parsed.needs || [],
+            offers: parsed.offers || [],
+            projects: parsed.projects || [],
+            interests: parsed.interests || [],
+            expertise: parsed.expertise || [],
+            industries: parsed.industries || [],
+        };
+    }
+    catch {
+        return extractKeyword(text);
+    }
+}
+/**
+ * Extract context from text. Uses LLM when available, falls back to keywords.
+ */
+export async function extractContext(text, useLLM = true) {
+    if (useLLM && OPENAI_API_KEY) {
+        return extractLLM(text);
+    }
+    return extractKeyword(text);
+}
+/**
+ * Check if text contains any signals worth extracting.
+ * Fast check to avoid unnecessary LLM calls.
+ */
+export function hasContextSignals(text) {
+    const lower = text.toLowerCase();
+    const signals = [
+        "looking for", "i need", "help with", "hiring",
+        "i'm building", "working on", "my project", "just launched",
+        "good at", "can help", "experience in", "specialize in",
+        "interested in", "my expertise",
+    ];
+    return signals.some(s => lower.includes(s));
+}
+//# sourceMappingURL=context-extractor.js.map

package/dist/lib/context-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-extractor.js","sourceRoot":"","sources":["../../src/lib/context-extractor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AAWlD,qCAAqC;AACrC,MAAM,aAAa,GAAG;IACpB,yCAAyC;IACzC,8CAA8C;IAC9C,uEAAuE;IACvE,wCAAwC;IACxC,6BAA6B;IAC7B,mCAAmC;CACpC,CAAC;AAEF,sCAAsC;AACtC,MAAM,cAAc,GAAG;IACrB,iDAAiD;IACjD,iCAAiC;IACjC,sEAAsE;IACtE,yCAAyC;IACzC,iCAAiC;IACjC,yBAAyB;CAC1B,CAAC;AAEF,wCAAwC;AACxC,MAAM,gBAAgB,GAAG;IACvB,wFAAwF;IACxF,6DAA6D;IAC7D,yFAAyF;IACzF,+BAA+B;CAChC,CAAC;AAEF,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,MAAM,GAAqB;QAC/B,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,UAAU,EAAE,EAAE;KACf,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACzC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACzC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACzC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAChH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC,cAAc;QAAE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;IAEjD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,4CAA4C,EAAE;YACzE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,cAAc,EAAE;aAC1C;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,aAAa;gBACpB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;EAyBnB;qBACS;oBACD,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;iBAChC;gBACD,WAAW,EAAE,CAAC;gBACd,UAAU,EAAE,GAAG;gBACf,eAAe,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;aACzC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC;QACpD,IAAI,CAAC,OAAO;YAAE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;YACjC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;YACjC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;SACpC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,SAAkB,IAAI;IACvE,IAAI,MAAM,IAAI,cAAc,EAAE,CAAC;QAC7B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG;QACd,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ;QAC9C,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe;QAC3D,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe;QACvD,eAAe,EAAE,cAAc;KAChC,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/dist/lib/match-engine.d.ts

@@ -0,0 +1,31 @@
+/**
+ * nod intros match engine
+ *
+ * scores pairs of opted-in users based on:
+ * - need/offer alignment (40%) — does user A need what user B offers?
+ * - interest/expertise overlap (20%) — shared topics
+ * - industry overlap (20%) — same industries
+ * - recency (10%) — both recently active
+ * - history (10%) — haven't been matched before / past success
+ *
+ * runs as a callable function (triggered by cron or on profile update)
+ */
+/**
+ * Run the match engine.
+ * Finds all opted-in, non-paused profiles, scores all pairs,
+ * and creates match records for scores above threshold.
+ */
+export declare function runMatchEngine(options?: {
+    minScore?: number;
+    maxMatchesPerUser?: number;
+    useLLMPitches?: boolean;
+}): Promise<{
+    matchesCreated: number;
+    profilesChecked: number;
+    errors: string[];
+}>;
+/**
+ * Expire old matches that haven't been responded to.
+ */
+export declare function expireStaleMatches(): Promise<number>;
+//# sourceMappingURL=match-engine.d.ts.map

package/dist/lib/match-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"match-engine.d.ts","sourceRoot":"","sources":["../../src/lib/match-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAuOH;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,OAAO,CAAC,EAAE;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,GAAG,OAAO,CAAC;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA+IjF;AAED;;GAEG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,CAS1D"}