tor-to-proposal 2.0.0

package/bin/cv-tailor.mjs

@@ -0,0 +1,261 @@
+#!/usr/bin/env node
+// cv-tailor: produce (build) and verify (lint) a ToR-tailored CV.
+//
+// HONESTY CONTRACT — this is cv-gap's "do not claim" rule extended to generation:
+//   * build reorders and selects master-CV material. It never writes a new fact.
+//   * lint proves every bullet in the tailored CV is anchored in the master CV
+//     (token containment + every number must come from the anchor) or in the
+//     user's own cv-evidence.json answers. Unanchored = hard fail.
+//   * GAP terms (cv-gap: "do not claim") may not appear anywhere in the output.
+import fs from 'node:fs';
+import path from 'node:path';
+import { fail, parseArgs, readText, writeOut, helpText, mdTable } from './lib.mjs';
+
+const HELP = helpText('cv-tailor', [
+  'build  --cv master-cv.txt --extract out/tor-extract.json [--profile profile.json]',
+  '           [--gap cv-gap-report.md] [--out out/cv-tailored.md] [--report out/cv-tailor-report.md]',
+  'lint   --cv tailored.md --master master.txt [--gap gap.md] [--evidence cv-evidence.json]',
+  '           [--report out/cv-tailor-lint.md]',
+  '',
+  'build: reorders/selects master-CV bullets against the ToR evaluation weights.',
+  'lint:  every bullet must anchor to the master CV (>=60% token containment in one',
+  '       master line, or >=75% across two lines) with all numbers preserved, or come',
+  '       from cv-evidence.json (user-supplied answers). GAP terms hard-fail.',
+]);
+
+const STOP = new Set(('a,an,the,and,or,of,for,in,on,to,with,at,by,from,as,is,are,was,were,be,been,being,this,that,these,those,it,its,their,our,your,we,they,he,she,his,her,per,all,any,more,most,than,then,so,such,not,no,but,if,while,during,into,over,under,across,within,without,also,both,each,other,others,new,various,including,include,includes,using,use,used,based,well,has,have,had,do,does,did,will,would,can,could,should,may,might,must,against,about,after,before,between,through,up,down,out,off,own,same,too,very,just'.split(',')));
+
+function tokenize(s) {
+  return String(s).toLowerCase().replace(/[^a-z0-9&]+/g, ' ').split(' ').filter((t) => t.length >= 2 && !STOP.has(t) && !/^\d+$/.test(t));
+}
+function numsOf(s) {
+  return [...String(s).matchAll(/\d+(?:[.,]\d+)?/g)].map((m) => m[0].replace(/\.0+$/, ''));
+}
+const norm = (s) => String(s).toLowerCase().replace(/[^a-z0-9]+/g, ' ').trim();
+
+// ---------- master CV parsing ----------
+function parseCv(text) {
+  const lines = text.split('\n');
+  const isHeader = (l) => {
+    const t = l.trim();
+    if (!t) return false;
+    if (/^#{1,3}\s+\S/.test(t)) return true;
+    if (/^\s*(?:[-*•·‣–]|\d{1,2}[.)])\s+/.test(t)) return false;
+    return /^[A-Z][A-Z0-9 &/,'()+-]{2,70}:?$/.test(t) && /[A-Z]{3,}/.test(t);
+  };
+  const isBullet = (l) => /^\s*(?:[-*•·‣–]|\d{1,2}[.)])\s+/.test(l);
+  const sections = [];
+  let preamble = [];
+  let cur = null;
+  for (let i = 0; i < lines.length; i++) {
+    const l = lines[i];
+    if (isHeader(l)) {
+      cur = { title: l.trim().replace(/^#+\s+/, '').replace(/:$/, ''), startLine: i + 1, body: [] };
+      sections.push(cur);
+    } else if (cur) cur.body.push({ line: i + 1, text: l, bullet: isBullet(l) });
+    else preamble.push({ line: i + 1, text: l, bullet: isBullet(l) });
+  }
+  return { lines, preamble, sections };
+}
+
+// ---------- ToR term pool with weights ----------
+function termPool(extract) {
+  const pool = new Map();
+  const add = (tokens, w) => {
+    for (const t of tokens) pool.set(t, (pool.get(t) || 0) + w);
+  };
+  for (const d of extract.deliverables || []) add(tokenize(d.value), 0.5);
+  add(tokenize(extract.title?.value || ''), 1);
+  for (const c of extract.evaluation?.criteria || []) add(tokenize(c.label), c.weight / 15);
+  if (!pool.size) fail('tor-extract.json has no title/criteria/deliverables to tailor against — run extract.mjs first', 2);
+  return pool;
+}
+const scoreOf = (bulletTokens, pool) => bulletTokens.reduce((s, t) => s + (pool.get(t) || 0), 0);
+
+// ---------- build ----------
+function cmdBuild(args) {
+  const master = readText(args.cv, '--cv (master CV text)');
+  const extract = JSON.parse(readText(args.extract, '--extract (tor-extract.json from extract.mjs)'));
+  const gap = args.gap ? readText(args.gap, '--gap') : null;
+  const parsed = parseCv(master);
+  const pool = termPool(extract);
+  const SKIP_SUMMARY = /educat|language|reference|publication|referee/i;
+
+  const scored = []; // { section, item, tokens, score }
+  for (const sec of parsed.sections) {
+    for (const item of sec.body) {
+      if (!item.bullet) continue;
+      const tokens = tokenize(item.text);
+      scored.push({ sec, item, tokens, score: tokens.length ? scoreOf(tokens, pool) : 0 });
+    }
+  }
+
+  // identity: profile if given, else the CV's own preamble lines (verbatim)
+  let profile = null;
+  if (args.profile) {
+    profile = JSON.parse(readText(args.profile, '--profile'));
+    if (!profile.identity?.name) fail('profile has no identity.name — run: tor-to-proposal init (or omit --profile)', 2);
+  }
+  const pre = parsed.preamble.filter((p) => p.text.trim());
+  const out = [];
+  if (profile) {
+    const id = profile.identity;
+    out.push(`# ${id.name}${id.credentials ? `, ${id.credentials}` : ''}`, '');
+    const contact = [id.title, id.email, id.phone, id.location, id.nationality].filter(Boolean).join(' | ');
+    if (contact) out.push(contact, '');
+  } else {
+    for (const p of pre) out.push(p.text.replace(/^#+\s*/, ''));
+    out.push('');
+    if (!pre.length) fail('master CV has no header lines and no --profile given — cannot build the identity block', 2);
+  }
+
+  // summary: top-scoring bullets, highest weight first, deduped
+  const top = scored.filter((s) => s.score > 0 && !SKIP_SUMMARY.test(s.sec.title)).sort((a, b) => b.score - a.score || a.item.line - b.item.line).slice(0, 6);
+  if (top.length) {
+    out.push(`## Most relevant for this assignment`, '');
+    for (const s of top) out.push(`- ${s.item.text.replace(/^\s*(?:[-*•·‣–]|\d{1,2}[.)])\s+/, '').trim()}`);
+    out.push('');
+  }
+
+  // sections in original order; bullets reordered by relevance inside experience-like sections
+  const orderInSection = new Map(); // section title -> ordered items
+  for (const sec of parsed.sections) {
+    const items = sec.body.filter((b) => b.bullet);
+    const prose = sec.body.filter((b) => !b.bullet);
+    if (SKIP_SUMMARY.test(sec.title) || !scored.some((s) => s.sec === sec && s.score > 0)) {
+      orderInSection.set(sec, { prose, items }); // untouched
+    } else {
+      const keyed = new Map(items.map((it) => [it.line, scored.find((s) => s.item === it)]));
+      const reordered = [...items].sort((a, b) => (keyed.get(b)?.score || 0) - (keyed.get(a)?.score || 0) || a.line - b.line);
+      orderInSection.set(sec, { prose, items: reordered });
+    }
+  }
+  for (const sec of parsed.sections) {
+    out.push(`## ${sec.title}`, '');
+    const { prose, items } = orderInSection.get(sec);
+    for (const p of prose) out.push(p.text.trimEnd());
+    if (prose.length && items.length) out.push('');
+    for (const it of items) out.push(it.text.trimEnd());
+    out.push('');
+  }
+  out.push('<!-- generated by tor-to-proposal cv-tailor: reordered/selected from the master CV only. Trace: cv-tailor-report.md -->');
+  const md = out.join('\n').replace(/\n{3,}/g, '\n\n').trimEnd() + '\n';
+  writeOut(args.out || path.join('out', 'cv-tailored.md'), md);
+
+  // report
+  const anchors = top.map((s) => [s.item.text.replace(/^\s*(?:[-*•·‣–]|\d{1,2}[.)])\s+/, '').slice(0, 70), s.sec.title, `line ${s.item.line}`, s.score.toFixed(1)]);
+  const crit = extract.evaluation?.criteria || [];
+  const cvAll = norm(master);
+  const mirror = crit.map((c) => {
+    const toks = [...new Set(tokenize(c.label))];
+    const missing = toks.filter((t) => !cvAll.includes(t));
+    return [`${c.label.slice(0, 50)} (${c.weight} pts)`, missing.length ? `not yet evidenced in CV: ${missing.join(', ')}` : 'all terms present in CV'];
+  });
+  const gapTerms = gap ? [...gap.matchAll(/\|\s*[^|]*?:\s*([^|]+?)\s*\|\s*p\.\d+\s*\|\s*✖/g)].map((m) => m[1].trim()) : [];
+  const report = `# CV tailor report\n\nGenerated from master CV only (no new facts). Verify every line before use.\n\n` +
+    `## Summary bullets, traceable to the master CV\n\n` +
+    (anchors.length ? mdTable(['Tailored bullet', 'From section', 'Master line', 'Relevance score'], anchors) : 'no scored bullets — check tor-extract.json criteria') +
+    `\n\n## Terminology mirror (advisory — edit wording, never add facts)\n\n` + mdTable(['Criterion', 'Mirror advice'], mirror) +
+    (gapTerms.length ? `\n\n## GAP terms — must NOT appear in this CV\n` + gapTerms.map((g) => `- ${g}`).join('\n') + `\n` : '') +
+    `\nNext: cv-tailor.mjs lint --cv <tailored> --master <master> [--gap gap.md]\n`;
+  writeOut(args.report || path.join('out', 'cv-tailor-report.md'), report);
+  process.stderr.write(`cv-tailor: ${top.length} summary bullets, ${parsed.sections.length} sections -> ${args.out || 'out/cv-tailored.md'}\n`);
+}
+
+// ---------- lint ----------
+function cmdLint(args) {
+  const tailored = readText(args.cv, '--cv (tailored CV)');
+  const master = readText(args.master, '--master (the ORIGINAL master CV)');
+  const gap = args.gap ? readText(args.gap, '--gap') : null;
+  let evidence = [];
+  if (args.evidence) {
+    const ev = JSON.parse(readText(args.evidence, '--evidence'));
+    evidence = (Array.isArray(ev) ? ev : ev.items || []).map((e) => (typeof e === 'string' ? { text: e } : e)).filter((e) => e.text);
+  }
+  const masterLines = master.split('\n');
+  const masterTokens = masterLines.map((l) => ({ toks: new Set(tokenize(l)), text: l }));
+  const evidenceNorm = evidence.map((e) => ({ norm: norm(e.text), id: e.id || 'evidence', raw: e.text }));
+  const failures = [];
+  const ok = [];
+  const warnings = [];
+
+  const bullets = tailored.split('\n').filter((l) => /^\s*(?:[-*•·‣–]|\d{1,2}[.)])\s+\S/.test(l));
+  if (!bullets.length) failures.push('no bullets found in the tailored CV — is this the right file?');
+
+  for (const b of bullets) {
+    const text = b.replace(/^\s*(?:[-*•·‣–]|\d{1,2}[.)])\s+/, '').trim();
+    const toks = tokenize(text);
+    if (!toks.length) continue;
+    // best single-line anchor, then best two-line union
+    let best = { cov: 0, idx: [] };
+    for (let i = 0; i < masterTokens.length; i++) {
+      let hit = 0;
+      for (const t of toks) if (masterTokens[i].toks.has(t)) hit++;
+      const cov = hit / toks.length;
+      if (cov > best.cov) best = { cov, idx: [i] };
+    }
+    if (best.cov < 0.6 && masterTokens.length > 1) {
+      const first = best.idx[0] ?? 0;
+      let pair = { cov: 0, idx: [first, first] };
+      for (let i = 0; i < masterTokens.length; i++) {
+        for (const j of [first, i]) {
+          if (i === j) continue;
+          const union = new Set([...masterTokens[i].toks, ...masterTokens[j].toks]);
+          let hit = 0;
+          for (const t of toks) if (union.has(t)) hit++;
+          const cov = hit / toks.length;
+          if (cov > pair.cov) pair = { cov, idx: [i, j].sort((a, b) => a - b) };
+        }
+      }
+      if (pair.cov >= 0.75) best = pair;
+    }
+    const anchorText = best.idx.map((i) => masterLines[i]).join(' ');
+    const ev = evidenceNorm.find((e) => e.norm === norm(text) || (norm(text).length && e.norm.includes(norm(text)) && norm(text).length / e.norm.length > 0.8));
+    if (ev) {
+      ok.push([text.slice(0, 60), `user-input evidence (${ev.id})`, '']);
+      continue;
+    }
+    if (best.cov < 0.6) {
+      failures.push(`unanchored bullet (no master-CV line covers ≥60% of it): "${text.slice(0, 90)}" — remove it, or answer its evidence question and put the text in cv-evidence.json`);
+      continue;
+    }
+    const missingNums = numsOf(text).filter((n) => !numsOf(anchorText).includes(n));
+    if (missingNums.length) {
+      failures.push(`number(s) ${missingNums.join(', ')} not present in the anchor master line(s) (line${best.idx.length > 1 ? 's' : ''} ${best.idx.map((i) => i + 1).join(',')}): "${text.slice(0, 90)}" — numbers may not be invented or altered`);
+      continue;
+    }
+    ok.push([text.slice(0, 60), `master line${best.idx.length > 1 ? 's' : ''} ${best.idx.map((i) => i + 1).join(',')}`, `${Math.round(best.cov * 100)}%`]);
+  }
+
+  if (gap) {
+    [...gap.matchAll(/\|\s*[^|]*?:\s*([^|]+?)\s*\|\s*p\.\d+\s*\|\s*✖/g)].forEach((m) => {
+      const term = m[1].trim().toLowerCase();
+      if (term.length > 3 && norm(tailored).includes(term)) failures.push(`tailored CV mentions "${term}" which cv-gap marked GAP — remove it entirely`);
+    });
+  }
+  const fills = [...tailored.matchAll(/\[FILL[^\]]*\]/g)].length;
+  if (fills) warnings.push(`${fills} [FILL] placeholder(s) remain — resolve before submission (audit.mjs gates this too)`);
+
+  const report = `# CV tailor lint — ${path.basename(String(args.cv))}\n\n` +
+    `${failures.length ? `## FAIL (${failures.length})\n` + failures.map((f) => '- ' + f).join('\n') : '## PASS — every bullet traceable'}\n\n` +
+    `## Anchor table (${ok.length} bullets)\n\n` + mdTable(['Bullet', 'Anchored to', 'Coverage'], ok) +
+    (warnings.length ? `\n\n## Warnings\n` + warnings.map((w) => '- ' + w).join('\n') : '');
+  writeOut(args.report || path.join('out', 'cv-tailor-lint.md'), report);
+  process.stdout.write(report);
+  if (failures.length) process.exit(1);
+}
+
+// ---------- dispatch ----------
+const args = parseArgs(process.argv.slice(2));
+const mode = args._[0] ?? 'build';
+if (args.__help || !['build', 'lint'].includes(mode)) {
+  process.stdout.write(HELP);
+  process.exit(args.__help ? 0 : 1);
+}
+if (mode === 'build') {
+  if (!args.cv || !args.extract) { process.stdout.write(HELP); process.exit(1); }
+  cmdBuild(args);
+} else {
+  if (!args.cv || !args.master) { process.stdout.write(HELP); process.exit(1); }
+  cmdLint(args);
+}

package/bin/dossier.mjs

@@ -0,0 +1,32 @@
+#!/usr/bin/env node
+// dossier: client-intelligence scaffolder. Generates the research structure;
+// every fact you put in it must carry source + access date (citation rule).
+import { parseArgs, writeOut, helpText } from './lib.mjs';
+
+const HELP = helpText('dossier', [
+  'Usage: node bin/dossier.mjs --client "UNOPS" [--sector "M&E"] [--out client-dossier.md]',
+  '',
+  'Scaffolds client-dossier.md: type presets, payment reputation, past awards,',
+  'evaluation committee. Research outputs feed pricing contingency + tone.',
+]);
+
+const PRESETS = {
+  un: 'UN system agency or fund. Tone: formal multilateral, results-framework vocabulary, SDG alignment where the ToR asks. Registration: UNGM (ungm.org) vendor account usually required before contract award; some agencies additionally use their own vendor portals (UNGM -> "United Nations Global Marketplace" -> register -> UNGM Vendor Number). Payment reputation: search "UNGM contract awards <agency> <sector>".',
+  ingo: 'International NGO. Tone: mission- and beneficiary-first; donor visibility rules matter. Registration: usually vendor forms + due diligence pack (registration docs, bank letter, anti-terrorist financing screening). Payment: grant-conditioned; verify payment-terms reputation in the ToR + peer networks.',
+  ministry: 'Government ministry or agency. Tone: national-plan/policy alignment; cite the relevant national strategy by name in your technical response. Registration: national procurement portal + tax clearance. Payment: verify budget-line availability; payment delays are common — feed contingency.',
+  private: 'Private sector / foundation. Tone: ROI and deliverable-milestone language. Registration: vendor onboarding + compliance screening. Payment: usually faster; verify in ToR.',
+};
+
+const args = parseArgs(process.argv.slice(2));
+if (args.__help || !args.client) {
+  process.stdout.write(HELP);
+  process.exit(args.__help ? 0 : 1);
+}
+const client = String(args.client).trim();
+const sector = args.sector || '[FILL: sector]';
+const c = client.toLowerCase();
+const typeKey = /ministry|government|dept/.test(c) ? 'ministry' : /united nations|\bun\b|undp|unops|unicef|unhcr|iom|fao|wfp|who|unesco/.test(c) ? 'un' : /ngo|save the children|oxfam|care|nrcs|irc|nrc/.test(c) ? 'ingo' : 'private';
+
+const md = `# Client dossier — ${client}\n\n> Every row below needs a source + access date. This file feeds pricing\n> contingency (payment risk) and proposal tone. No invented facts.\n\n## Type preset: ${typeKey.toUpperCase()}\n${PRESETS[typeKey]}\n\n## 1. Registration prerequisites\n- [ ] Portal(s) required: [FILL]\n- [ ] Documents required before award: [FILL]\n- [ ] Lead time to register: [FILL] (bid only if registration fits inside the deadline)\n\n## 2. Payment reputation (feeds pricing contingency)\n| Signal | Finding | Source + date |\n| --- | --- | --- |\n| Typical payment delay after invoice | [FILL] | [FILL] |\n| Public complaints / vendor disclosures | [FILL] | [FILL] |\n| Currency of payment + FX risk | [FILL] | [FILL] |\n\nRule: documented slow payer -> raise pricing contingency or negotiate advance payment; cite the reason in your own notes, not the proposal.\n\n## 3. Past awards for similar work (calibrates your rate band)\n| Award | Year | Winner (if disclosed) | Value | Source + date |\n| --- | --- | --- | --- | --- |\n| [FILL] | | | | |\n\nSearch: UNGM "Contract Award" notices for ${client}; national procurement portals; ${sector} keyword.\n\n## 4. Evaluation committee / process\n- Members or roles stated in ToR: [FILL]\n- Two-envelope (technical opened first) or single envelope: [FILL — check ToR p.X]\n- Clarification history of past solicitations: [FILL]\n\n## 5. What this means for THIS bid\n- Tone to adopt: [FILL from preset + ToR wording]\n- Rate band implication: [FILL from §2 + §3]\n- Risk to price in: [FILL]\n`;
+writeOut(args.out || 'client-dossier.md', md);
+process.stderr.write(`dossier scaffold written for ${client} (type: ${typeKey}).\n`);

package/bin/extract.mjs

@@ -0,0 +1,148 @@
+#!/usr/bin/env node
+// extract: page-tagged ToR text -> tor-extract.json + bid-screen.md + compliance-matrix.md
+// Regex fast-path with [[PAGE n]] attribution on every field. The agent (SKILL.md
+// step 1) may pass --json with additional fields; agent values are kept only when
+// they carry their own page attribution, and every conflict is recorded, never hidden.
+import fs from 'node:fs';
+import path from 'node:path';
+import { fail, parseArgs, readText, writeOut, helpText, num, pageOf, extractWindow, mdTable } from './lib.mjs';
+
+const HELP = helpText('extract', [
+  'Usage: node bin/extract.mjs --tor tor.txt [--json agent-fields.json]',
+  '            [--fee 15000 --bid-days 3 --day-rate 400]   # optional EV inputs (user-supplied)',
+  '            [--out-dir out]',
+  '',
+  'Outputs: <out-dir>/tor-extract.json, bid-screen.md, compliance-matrix.md',
+  'Every extracted field records the [[PAGE n]] it came from, or null.',
+]);
+
+const args = parseArgs(process.argv.slice(2));
+if (args.__help || !args.tor) {
+  process.stdout.write(HELP);
+  process.exit(args.__help ? 0 : 1);
+}
+const tor = readText(args.tor, '--tor (page-tagged ToR text; run pdf-extract first)');
+const outDir = args['out-dir'] || 'out';
+fs.mkdirSync(path.resolve(outDir), { recursive: true });
+
+function grab(re, group = 1) {
+  const m = tor.match(re);
+  return m ? { value: m[group].trim(), page: pageOf(tor, m.index) } : null;
+}
+
+const DATE_RE = '(\\d{1,2}[ \\-/]\\w{3,9}[ \\-/]\\d{2,4}|\\d{4}-\\d{2}-\\d{2})';
+const AGENCIES = 'united nations|undp|unops|unicef|unhcr|iom|fao|wfp|who|unesco|un women|world bank|ifc|adb|afdb|idb|ebrd|usaid|fcdo|giz|ec |european union|council of europe';
+
+// Reference numbers: keyword is case-insensitive but the CODE must be genuinely
+// uppercase/digit (case-sensitive class), otherwise prose like the "TERMS OF
+// REFERENCE" heading or "Individual Consultant" matches via the /i flag.
+function grabRefNumber() {
+  const kw = tor.match(/(?:reference|tender|solicitation|vacancy)[^.\n]{0,20}(?:no\.?|number|#|ref)?[:.\s]+/i);
+  if (kw) {
+    const after = tor.slice(kw.index + kw[0].length);
+    const code = after.match(/\s*([A-Z0-9][A-Z0-9-]{4,})/); // case-sensitive: real ref codes are caps/digits
+    if (code && code.index <= 4 && /\d/.test(code[1])) {
+      return { value: code[1], page: pageOf(tor, kw.index + kw[0].length + code.index) };
+    }
+  }
+  return grab(/\b([A-Z0-9]{2,6}[-/][A-Z0-9][A-Z0-9\/\-]{3,})\b/);
+}
+
+const extract = {
+  source: path.basename(args.tor),
+  title: grab(/^[ \t]*(?:terms of reference|tor|consultancy|individual consultant|request for proposal|rfp)[^\n]*\n+[ \t]*([^\n]{10,120})/im, 1)
+    ?? grab(/^#{1,3}[ \t]*([^\n]{10,120})/m, 1)
+    ?? grab(/(?:title|assignment)[\"”]*[:.]([^\n]{10,120})/i, 1),
+  referenceNumber: grabRefNumber(),
+  client: grab(new RegExp(`(${AGENCIES})`, 'i'), 1),
+  contactEmail: grab(/([\w.+-]+@[\w-]+\.[\w.]{2,})/, 1),
+  deadline: grab(new RegExp(`(?:deadline|closing date|last date|submission date)[^\\n]{0,60}?${DATE_RE}`, 'i'), 1),
+  clarificationCutoff: grab(new RegExp(`clarification[^\\n]{0,80}?${DATE_RE}`, 'i'), 1),
+  startDate: grab(new RegExp(`(?:expected |anticipated |proposed )?start(?:ing|t)?(?: date)?[^\\n]{0,40}?${DATE_RE}`, 'i'), 1),
+  duration: grab(/(?:duration|period of performance|assignment length|timeframe)[^.\n]{0,50}?(\d+\s*(?:calendar |working |)?(?:day|week|month|year)s?)/i, 1),
+  effortPersonDays: grab(/(\d{1,3})\s*(?:person[- ]days|working days|professional days|pd\b)/i, 1),
+  validity: grab(/(?:validity|proposal (?:shall be )?valid)[^.\n]{0,50}?(\d+\s*(?:calendar )?(?:day|month)s?)/i, 1),
+  paymentTerms: [...tor.matchAll(/payment[^\n]{5,140}/gi)].slice(0, 6).map((m) => ({ value: m[0].replace(/\s+/g, ' ').trim(), page: pageOf(tor, m.index) })),
+  submissionChannel: grab(/(?:submi(?:t|ssion)s?)[^\n]{0,120}?(?:via|through|at|to|on)\s+([^\n]{3,90})/i, 1),
+};
+
+// Evaluation criteria table: window from the criteria heading to the next section.
+const evalWindow = extractWindow(
+  tor,
+  /evaluation criteri|technical evaluation|award criteria|scoring (?:grid|methodology)/i,
+  /\n\s*(?:financial (?:proposal|evaluation)|annex\b|other terms|submission of)/i
+);
+if (evalWindow) {
+  const criteria = [];
+  for (const line of evalWindow.split('\n')) {
+    const m = line.match(/^\|?\s*\d{1,2}[.)]?\s*\|?\s*([^|]{4,90}?)\s*\|?\s*(\d{1,3})\s*(?:pts?|points?|%)?\s*\|?\s*$/);
+    if (!m) continue;
+    const weight = Number(m[2]);
+    const label = m[1].replace(/\.{2,}/g, '').trim();
+    if (label.length < 4 || weight > 100 || criteria.some((c) => c.label === label)) continue;
+    criteria.push({ label, weight, page: pageOf(tor, tor.indexOf(line)) });
+  }
+  const total = criteria.reduce((s, c) => s + c.weight, 0);
+  const statedMatch = evalWindow.match(/(?:maximum|total|out of|of)\s*(?:of\s*)?(\d{1,3})\s*(?:points?|pts?|%|marks?)/i);
+  const stated = statedMatch ? Number(statedMatch[1]) : null;
+  extract.evaluation = {
+    criteria,
+    weightsSum: total,
+    statedTotal: stated,
+    weightsSumCheck: stated === null ? 'not-stated' : total === stated ? 'ok' : `MISMATCH (parsed ${total} vs stated ${stated}) — ToR may contain a typo; surface this in any clarification question`,
+  };
+}
+if (!extract.evaluation) extract.evaluation = { criteria: [], weightsSum: 0, statedTotal: null, weightsSumCheck: 'criteria-table-not-found — use --json to supply agent-extracted criteria' };
+
+// Deliverables: bulleted/numbered lines under a deliverables heading.
+const delWindow = extractWindow(tor, /deliverables?|scope of work|tasks?(?: and deliverables)?/i, /\n\s*\n\s*\n|\n\s*(?:qualifications|requirements|annex\b)/i, 3000);
+extract.deliverables = delWindow
+  ? [...delWindow.matchAll(/^\s*(?:[-*•]|\d{1,2}[.)])\s+([^\n]{8,140})/gm)].slice(0, 15).map((m) => ({ value: m[1].trim(), page: pageOf(tor, m.index) }))
+  : [];
+
+// Agent-assisted merge: agent fields win only if they carry page attribution;
+// conflicts are recorded, never silently discarded.
+const conflicts = [];
+if (args.json) {
+  const agentJson = JSON.parse(readText(args.json, '--json'));
+  for (const [k, v] of Object.entries(agentJson)) {
+    if (v === null || v === undefined) continue;
+    if (!(v instanceof Object) || v.page === null || v.page === undefined) continue; // unattributed -> reject
+    if (Array.isArray(v)) {
+      if (!v.every((x) => x && x.page != null)) continue;
+    }
+    const prev = extract[k];
+    if (prev && JSON.stringify(prev) !== JSON.stringify(v)) conflicts.push({ field: k, regex: prev, agent: v });
+    extract[k] = v;
+  }
+}
+extract.conflicts = conflicts;
+extract.generatedAt = new Date().toISOString();
+
+fs.writeFileSync(path.join(outDir, 'tor-extract.json'), JSON.stringify(extract, null, 2));
+
+// ---------- bid screen ----------
+const f = (x) => (x && x.value ? x.value : '[FILL]') + (x && x.page ? ` (p.${x.page})` : '');
+let ev = '';
+if (args.fee !== undefined) {
+  const fee = num(args.fee, '--fee', { min: 1 });
+  const bidDays = num(args['bid-days'], '--bid-days', { min: 0 });
+  const dayRate = num(args['day-rate'], '--day-rate', { min: 0 });
+  ev = mdTable(['Scenario', 'P(win)', 'Expected value'], [0.25, 0.5, 0.75].map((p) => {
+    const value = p * fee - bidDays * dayRate;
+    return [`P(win)=${p}`, `${(p * 100).toFixed(0)}%`, `${value >= 0 ? '+' : ''}${Math.round(value).toLocaleString('en-US')}`];
+  })) + `\n\nEV = P(win) × fee − bid-days × your-day-rate = P × ${fee.toLocaleString('en-US')} − ${bidDays} × ${dayRate.toLocaleString('en-US')}.\nAll three inputs are your estimates (HONESTY RULE). EV > 0 at a realistic P(win) is necessary, not sufficient — go/no-go is your call.\n`;
+}
+const ungm = /ungm|un global marketplace/i.test(tor);
+writeOut(path.join(outDir, 'bid-screen.md'), `# Bid screen\n\n## Assignment\n- Title: ${f(extract.title)}\n- Reference: ${f(extract.referenceNumber)}\n- Client: ${f(extract.client)}\n- Deadline: ${f(extract.deadline)}\n- Clarifications by: ${f(extract.clarificationCutoff)}\n- Duration / effort: ${f(extract.duration)} / ${f(extract.effortPersonDays)} person-days\n\n## Go / no-go checklist\n- [ ] UNGM/portal registration ${ungm ? '(ToR mentions UNGM — p.' + pageOf(tor, tor.search(/ungm/i)) + ')' : '(verify client registration prerequisites — see dossier)'}\n- [ ] CV matches must-have qualifications (run cv-gap)\n- [ ] Deadline achievable with your calendar\n- [ ] Eligibility (nationality/citizenship clauses if any)\n- [ ] EV positive at realistic P(win)\n\n${ev}## Red flags\n- ${extract.evaluation.weightsSumCheck !== 'ok' ? 'Weights check: ' + extract.evaluation.weightsSumCheck : 'Evaluation weights sum consistent'}\n- ${extract.conflicts.length} agent/regex conflict(s) recorded in tor-extract.json\n`);
+
+// ---------- compliance matrix ----------
+const rows = [];
+if (extract.evaluation.criteria.length) rows.push(['**Evaluation criteria covered** (one section each in technical response)', extract.evaluation.criteria.map((c) => `p.${c.page ?? '?'}`).join(', '), 'See technical response', 'You', 'TODO']);
+if (extract.deliverables.length) for (const d of extract.deliverables) rows.push([`Deliverable: ${d.value.slice(0, 60)}`, `p.${d.page}`, '[FILL: approach in 2–3 lines]', 'You', 'TODO']);
+for (const p of extract.paymentTerms.slice(0, 4)) rows.push([`Payment term: ${p.value.slice(0, 60)}`, `p.${p.page}`, 'Accept / negotiate', 'You', 'TODO']);
+rows.push(['Proposal validity per ToR', extract.validity?.page ? `p.${extract.validity.page}` : '[FILL]', 'Declare in cover letter', 'You', 'TODO']);
+rows.push(['GCC / no-deviation acceptance', '[FILL: page]', 'Declare acceptance in cover letter', 'You', 'TODO']);
+rows.push(['Submission channel + format', extract.submissionChannel?.page ? `p.${extract.submissionChannel.page}` : '[FILL]', 'Verify portal + file formats', 'You', 'TODO']);
+writeOut(path.join(outDir, 'compliance-matrix.md'), `# Compliance matrix — ${f(extract.referenceNumber)}\n\nSource: ${extract.source}. Every requirement verbatim from the ToR with its page.\n\n` + mdTable(['Requirement', 'p.X', 'Our response', 'Owner', 'Status'], rows) + `\n\naudit.mjs will hard-fail while any Status is not Complete.\n`);
+process.stderr.write(`extract: ${extract.evaluation.criteria.length} criteria, ${extract.deliverables.length} deliverables, ${conflicts.length} conflicts -> ${outDir}/\n`);

package/bin/financial-proposal.mjs

@@ -0,0 +1,114 @@
+#!/usr/bin/env node
+// financial-proposal: pricing.json + tor-extract.json -> the client-facing
+// financial proposal (markdown + optional xlsx). Numbers come ONLY from
+// pricing.json (user-confirmed inputs) or [FILL]; the internal floor math
+// (base/loading/contingency) stays in pricing.md — the client sees the quote.
+import fs from 'node:fs';
+import path from 'node:path';
+import { parseArgs, readText, writeOut, helpText, num, fmt, loadDep } from './lib.mjs';
+
+const HELP = helpText('financial-proposal', [
+  'Usage: node bin/financial-proposal.mjs --pricing out/pricing.json --extract out/tor-extract.json',
+  '            [--context out/bid-context.json] [--out-dir out] [--xlsx]',
+  '',
+  'Outputs: <out-dir>/financial-proposal.md (+ financial-proposal.xlsx with --xlsx).',
+  'Effort comes from pricing.json --effort, else the ToR extract, else [FILL].',
+  'If the client supplied their own financial form, template-filler.mjs governs instead.',
+]);
+
+const args = parseArgs(process.argv.slice(2));
+if (args.__help || !args.pricing || !args.extract) {
+  process.stdout.write(HELP);
+  process.exit(args.__help ? 0 : 1);
+}
+const pricing = JSON.parse(readText(args.pricing, '--pricing (run pricing-model.mjs first)'));
+const extract = JSON.parse(readText(args.extract, '--extract (run extract.mjs first)'));
+let context = {};
+try { context = JSON.parse(fs.readFileSync(args.context || path.join(args['out-dir'] || 'out', 'bid-context.json'), 'utf8')); } catch { /* optional */ }
+
+const currency = pricing.inputs.currency || 'USD';
+const rate = pricing.quoteFloorDay; // all-inclusive day rate (base + loading + contingency)
+const p = (x) => (x && x.value ? x.value : null);
+const pg = (x) => (x && x.page ? `(p.${x.page})` : '');
+const refNo = p(extract.referenceNumber) || '[FILL: reference no.]';
+const title = p(extract.title) || '[FILL: assignment title]';
+const consultant = context.consultantLine || '[FILL: consultant name + credentials]';
+const effort = pricing.inputs.effortDays ?? (extract.effortPersonDays ? Number(extract.effortPersonDays.value) : null);
+const validity = context.validity || (extract.validity ? `${extract.validity.value} from the submission deadline ${pg(extract.validity)}` : '[FILL: validity period per ToR]');
+// pick the first payment capture that carries actual terms, not just a "PAYMENT TERMS" heading
+const paymentEntry = (extract.paymentTerms || []).find((t) => t.value.replace(/^\s*payment\s+terms?\s*[:\-]?\s*/i, '').replace(/[^a-z0-9]/gi, '').length >= 15) || null;
+const payment = paymentEntry ? `${paymentEntry.value.replace(/^\s*payment\s+terms?\s*[:\-]?\s*/i, '')} ${pg(paymentEntry)}` : '[FILL: payment schedule per ToR]';
+const fees = effort !== null ? rate * effort : null;
+const reimbursables = context.reimbursables ?? null; // user-supplied; stays [FILL] otherwise
+const reimbursablesNum = reimbursables !== null && Number.isFinite(Number(reimbursables)) ? Number(reimbursables) : 0; // text answers ("none") add zero
+const total = fees !== null ? fees + reimbursablesNum : null;
+
+const amount = (v) => (v === null || v === undefined ? '[FILL]' : Number.isFinite(Number(v)) ? fmt(Number(v)) : String(v));
+const md = `# Financial Proposal
+
+| | |
+| --- | --- |
+| Assignment | ${title} |
+| Reference | ${refNo} ${extract.referenceNumber?.page ? `(p.${extract.referenceNumber.page})` : ''} |
+| Submitted by | ${consultant} |
+| Date | ${context.date || new Date().toISOString().slice(0, 10)} |
+| Currency | ${currency} |
+| Validity | ${validity} |
+
+## Cost breakdown
+
+| # | Item | Qty | Unit rate (${currency}) | Amount (${currency}) |
+| --- | --- | --- | --- | --- |
+| 1 | Professional fees — ${title}${effort !== null ? ` (${effort} person-days)` : ''} | ${effort ?? '[FILL: person-days]'} | ${fmt(rate)} | ${amount(fees)} |
+| 2 | Reimbursable expenses (itemised attachment) | — | — | ${reimbursables !== null ? amount(reimbursables) : '[FILL: itemize, or state "none" and delete this row]'} |
+| | **TOTAL (all-inclusive, ${currency})** | | | **${amount(total)}** |
+
+## Payment schedule
+
+${payment}
+
+## Notes
+
+1. The daily rate is **all-inclusive**: professional fees, overheads and insurance. No separate loading lines are claimable.
+2. Taxes: ${context.taxes || '[FILL: tax treatment per the ToR / applicable law — declare whether amounts are tax-inclusive]'}.
+3. This proposal remains valid for the validity period stated above. Per the ToR, no deviation from the General Conditions of Contract is accepted.
+4. Deliverables priced above are those listed in the ToR${extract.deliverables.length ? ` (see ToR p.${extract.deliverables[0].page})` : ''}; the technical approach is detailed in the separate technical proposal.
+`;
+
+const outDir = args['out-dir'] || 'out';
+fs.mkdirSync(path.resolve(outDir), { recursive: true });
+writeOut(path.join(outDir, 'financial-proposal.md'), md);
+
+if (args.xlsx) {
+  const mod = await loadDep('exceljs');
+  const ExcelJS = mod.default ?? mod;
+  const wb = new ExcelJS.Workbook();
+  const ws = wb.addWorksheet('Financial Proposal');
+  ws.getColumn(1).width = 46; ws.getColumn(2).width = 14; ws.getColumn(3).width = 16; ws.getColumn(4).width = 18;
+  const rows = [
+    ['Financial Proposal', null, null, null],
+    [`Assignment: ${title}`, null, null, null],
+    [`Reference: ${refNo}`, null, null, null],
+    [`Submitted by: ${consultant}`, null, null, null],
+    [`Date: ${context.date || new Date().toISOString().slice(0, 10)}    Currency: ${currency}    Validity: ${validity}`, null, null, null],
+    [null, null, null, null],
+    ['Item', 'Qty', `Unit rate (${currency})`, `Amount (${currency})`],
+    ['Professional fees', effort ?? '[FILL: person-days]', rate, effort !== null ? { formula: 'B8*C8' } : '[FILL]'],
+    ['Reimbursable expenses (itemised attachment)', null, null, reimbursables !== null ? (Number.isFinite(Number(reimbursables)) ? Number(reimbursables) : reimbursables) : '[FILL: itemize, or state none]'],
+    ['TOTAL (all-inclusive)', null, null, { formula: 'SUM(D8:D9)' }],
+    [null, null, null, null],
+    [`Payment schedule: ${payment}`, null, null, null],
+    ['The daily rate is all-inclusive: professional fees, overheads and insurance.', null, null, null],
+    [`Taxes: ${context.taxes || '[FILL: tax treatment]'}`, null, null, null],
+  ];
+  rows.forEach((r) => ws.addRow(r));
+  ws.getCell('A1').font = { bold: true, size: 13 };
+  ['A7', 'B7', 'C7', 'D7'].forEach((a) => (ws.getCell(a).font = { bold: true }));
+  ['A10', 'D10'].forEach((a) => (ws.getCell(a).font = { bold: true }));
+  ['C8', 'D8', 'D9', 'D10'].forEach((a) => (ws.getCell(a).numFormat = '#,##0.00'));
+  await wb.xlsx.writeFile(path.join(outDir, 'financial-proposal.xlsx'));
+  process.stderr.write(`written: ${path.join(outDir, 'financial-proposal.xlsx')} (formulas visible: D8=B8*C8, D10=SUM)\n`);
+}
+
+const fills = [...md.matchAll(/\[FILL/g)].length;
+process.stderr.write(`financial-proposal: ${outDir}/financial-proposal.md${args.xlsx ? ' + .xlsx' : ''}, ${fills} [FILL] slot(s) to resolve\n`);