BidHerald

Gallery

About

WHAT IT ISBidHerald watches SAM.gov — the portal where the US federal governmentpublishes its contract opportunities — and emails small specialty tradecontractors only the notices matching their trade, states and keywords.Target customer: US electrical, HVAC, plumbing, roofing and paving firms of3–15 people. SAM.gov is free and public, but built for contracting officers:the search is unusable for a tradesperson, and it has to be checked daily,which nobody on a job site does.STATUS — READ THIS FIRSTNo revenue. No users. Not deployed. No domain.This is a code and concept sale, not a business sale. The application runsend to end, but it has only ever run locally.WHAT IS PROVENThe SAM.gov integration has been run against the live API: 260 realopportunities retrieved in 6 requests, none rejected, sampled sam.gov linksreturning HTTP 200. Match quality was checked by hand — of 32 real roofingnotices, 29 matched and the 3 that did not had passed their deadline. Nofalse positives.Email and payment providers are still simulated. Their code is written andtested against fakes, but has never run against the real APIs.WHAT IS BUILT• Passwordless auth (magic link, hashed single-use tokens)• Onboarding that ends by showing real matching contracts, before any payment• Dashboard: matches, filters, save, dismiss, CSV export• Alerts with full CRUD; unit-tested matching engine• Three idempotent hourly jobs: ingest, match, digest at 6am local time• Stripe subscription ($29/mo) and a one-time $9.99 course, entitlements enforced server-side• 12-lesson course on winning federal contracts• Installable to a phone home screen (PWA)• CAN-SPAM compliant email: one-click unsubscribe, List-Unsubscribe headers, postal address enforced at boot• Terms of Service and Privacy Policy (drafts, not lawyer-reviewed)VERIFIABLE41 commits, ~9,660 lines, 132 files. 55 unit tests, type-check, lint andproduction build all green. npm audit --omit=dev: zero vulnerabilities.Every external service sits behind an adapter with a working fake, so thewhole app — paywall included — runs offline with zero credentials. Clone it,npm install, npm run dev. No accounts needed to evaluate it.DOCUMENTATIONREADME (architecture and design decisions), DEPLOY.md (production setup,Vercel and otherwise), QUICKSTART.md, SPECIFICATION.md (full functional spec)and ASSET-OVERVIEW.md, which contains a written list of every knownlimitation.KNOWN LIMITATIONS• A personal SAM.gov key allows 10 requests/day. Entity registration (free, ~10 business days) raises it to 1,000/day but is tied to the operator and does not transfer.• The trade-to-NAICS mapping is correct on all five codes but its coverage has not been reviewed by a federal contracting professional.• Legal pages are drafts with placeholders for the operator's details.• No per-IP rate limiting on sign-in.Full technical specification available on request.