Founder Attention Radar

Standalone human-in-the-loop X engagement radar for founders.

It watches BYO X API targets, scores high-signal posts, drafts founder-style replies, sends Resend email approval prompts, and only auto-posts email-approved replies when the X account was summoned by mention. Unsummoned opportunities stay manual-open/copy.

Product Story

A founder wants to be early when the right customers, investors, analysts, or competitors post on X, without handing an agent unsafe posting autonomy. Founder Attention Radar keeps an inbox of timely opportunities, drafts replies in the founder's voice, and lets the founder approve from email or the web queue.

Why Standalone

This repo is its own deployable product surface instead of a Beevibe skill or Chrome extension. A skill can help an agent write replies from provided context, but it cannot safely own monitoring, credentials, approvals, budgets, or posting. The standalone service owns those long-running product concerns directly.

Quick Start

pnpm install
cp .env.example .env
pnpm migrate
pnpm dev

Open http://localhost:4317, enter the admin token from FA_ADMIN_TOKEN, configure your profile and targets, then connect X.

Runtime

• Express API and web UI in one process.
• Postgres persistence with migration in migrations/001_init.sql.
• Official X TypeScript XDK package is installed and loaded by the X adapter, with plain REST fallbacks for OAuth/search/posting where SDK surface differs.
• Resend outbound email and inbound webhook approvals.
• Anthropic scoring/drafting when ANTHROPIC_API_KEY exists; deterministic local scoring otherwise.

Safety Rules

• POST 1 posts draft 1 only when the opportunity is summoned=true.
• EDIT: <text> posts the edited reply only when summoned=true.
• SKIP marks the opportunity skipped.
• Unsummoned or ambiguous email commands send a manual-required response and never call X write APIs.
• Approval tokens are one-use, hashed at rest, and expire.

API

• GET /api/config?ownerId=...
• PUT /api/config
• GET /api/targets?ownerId=...
• POST /api/targets
• DELETE /api/targets/:id?ownerId=...
• GET /api/opportunities?ownerId=...&status=queued
• POST /api/opportunities/:id/skip
• POST /api/x/connect/start
• GET /api/x/callback
• POST /webhooks/resend/founder-attention

Authenticated routes require Authorization: Bearer $FA_ADMIN_TOKEN when FA_ADMIN_TOKEN is set.