@profullstack/builtindie 0.0.0-stage → 0.1.3

package/public/icons/svg/telegram.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor"><title>Telegram</title><g transform="translate(2 2) scale(0.83333)"><path d="M11.944 0A12 12 0 0 0 0 12a12 12 0 0 0 12 12 12 12 0 0 0 12-12A12 12 0 0 0 12 0a12 12 0 0 0-.056 0zm4.962 7.224c.1-.002.321.023.465.14a.506.506 0 0 1 .171.325c.016.093.036.306.02.472-.18 1.898-.962 6.502-1.36 8.627-.168.9-.499 1.201-.82 1.23-.696.065-1.225-.46-1.9-.902-1.056-.693-1.653-1.124-2.678-1.8-1.185-.78-.417-1.21.258-1.91.177-.184 3.247-2.977 3.307-3.23.007-.032.014-.15-.056-.212s-.174-.041-.249-.024c-.106.024-1.793 1.14-5.061 3.345-.48.33-.913.49-1.302.48-.428-.008-1.252-.241-1.865-.44-.752-.245-1.349-.374-1.297-.789.027-.216.325-.437.893-.663 3.498-1.524 5.83-2.529 6.998-3.014 3.332-1.386 4.025-1.627 4.476-1.635z"/></g></svg>

package/public/icons/svg/terminal.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><title>Terminal</title><path d="m4 17 6-6-6-6M12 19h8"/></svg>

package/public/icons/svg/tiktok.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor"><title>TikTok</title><g transform="translate(2 2) scale(0.83333)"><path d="M12.525.02c1.31-.02 2.61-.01 3.91-.02.08 1.53.63 3.09 1.75 4.17 1.12 1.11 2.7 1.62 4.24 1.79v4.03c-1.44-.05-2.89-.35-4.2-.97-.57-.26-1.1-.59-1.62-.93-.01 2.92.01 5.84-.02 8.75-.08 1.4-.54 2.79-1.35 3.94-1.31 1.92-3.58 3.17-5.91 3.21-1.43.08-2.86-.31-4.08-1.03-2.02-1.19-3.44-3.37-3.65-5.71-.02-.5-.03-1-.01-1.49.18-1.9 1.12-3.72 2.58-4.96 1.66-1.44 3.98-2.13 6.15-1.72.02 1.48-.04 2.96-.04 4.44-.99-.32-2.15-.23-3.02.37-.63.41-1.11 1.04-1.36 1.75-.21.51-.15 1.07-.14 1.61.24 1.64 1.82 3.02 3.5 2.87 1.12-.01 2.19-.66 2.77-1.61.19-.33.4-.67.41-1.06.1-1.79.06-3.57.07-5.36.01-4.03-.01-8.05.02-12.07z"/></g></svg>

package/public/icons/svg/trophy.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><title>Trophy</title><path d="M6 9H4.5a2.5 2.5 0 0 1 0-5H6M18 9h1.5a2.5 2.5 0 0 0 0-5H18M4 22h16M10 14.7V17c0 .6-.5 1-1 1.2C7.8 18.8 7 20.2 7 22M14 14.7V17c0 .6.5 1 1 1.2 1.2.6 2 2 2 3.8M18 2H6v7a6 6 0 0 0 12 0z"/></svg>

package/public/icons/svg/user.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><title>User</title><circle cx="12" cy="8" r="4"/><path d="M4 21v-1a6 6 0 0 1 6-6h4a6 6 0 0 1 6 6v1"/></svg>

package/public/icons/svg/x.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor"><title>X</title><g transform="translate(2 2) scale(0.83333)"><path d="M14.234 10.162 22.977 0h-2.072l-7.591 8.824L7.251 0H.258l9.168 13.343L.258 24H2.33l8.016-9.318L16.749 24h6.993zm-2.837 3.299-.929-1.329L3.076 1.56h3.182l5.965 8.532.929 1.329 7.754 11.09h-3.182z"/></g></svg>

package/public/icons/svg/youtube.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor"><title>YouTube</title><g transform="translate(2 2) scale(0.83333)"><path d="M23.498 6.186a3.016 3.016 0 0 0-2.122-2.136C19.505 3.545 12 3.545 12 3.545s-7.505 0-9.377.505A3.017 3.017 0 0 0 .502 6.186C0 8.07 0 12 0 12s0 3.93.502 5.814a3.016 3.016 0 0 0 2.122 2.136c1.871.505 9.376.505 9.376.505s7.505 0 9.377-.505a3.015 3.015 0 0 0 2.122-2.136C24 15.93 24 12 24 12s0-3.93-.502-5.814zM9.545 15.568V8.432L15.818 12l-6.273 3.568z"/></g></svg>

package/public/install.sh

@@ -0,0 +1,44 @@
+#!/bin/sh
+# built.indie CLI, TUI and MCP server: curl -fsSL https://built.indie.pit.world/install.sh | sh
+# Installs @profullstack/builtindie with bun when you have it, else npm (Node 22+).
+# No sudo: npm falls back to ~/.local. Run it again to upgrade.
+set -eu
+
+PKG="@profullstack/builtindie"
+say() { printf '\033[1;31m▲\033[0m %s\n' "$*"; }
+die() { printf 'built.indie install: %s\n' "$*" >&2; exit 1; }
+
+if command -v bun >/dev/null 2>&1; then
+  # bun add -g writes into the nearest package.json above its global dir when that dir has none.
+  GLOBAL="${BUN_INSTALL:-$HOME/.bun}/install/global"
+  mkdir -p "$GLOBAL"
+  [ -f "$GLOBAL/package.json" ] || printf '{}\n' > "$GLOBAL/package.json"
+  say "Installing $PKG with bun"
+  bun add -g "$PKG@latest" >/dev/null
+  BIN_DIR="${BUN_INSTALL:-$HOME/.bun}/bin"
+elif command -v npm >/dev/null 2>&1; then
+  NODE_MAJOR=$(node -p 'process.versions.node.split(".")[0]' 2>/dev/null || echo 0)
+  [ "$NODE_MAJOR" -ge 22 ] || die "needs Node 22 or newer (you have $(node -v 2>/dev/null || echo none)), or bun: curl -fsSL https://bun.sh/install | bash"
+  # builtindie runs on bun; npm installs the launcher, which needs bun on PATH.
+  command -v bun >/dev/null 2>&1 || say "Note: builtindie runs on bun. Install it too: curl -fsSL https://bun.sh/install | bash"
+  PREFIX=$(npm config get prefix 2>/dev/null || echo /usr/local)
+  if [ -w "$PREFIX" ] || [ -w "$PREFIX/lib/node_modules" ] 2>/dev/null; then
+    say "Installing $PKG with npm"
+    npm install -g "$PKG@latest" >/dev/null
+    BIN_DIR="$PREFIX/bin"
+  else
+    say "Installing $PKG with npm into ~/.local"
+    npm install -g --prefix "$HOME/.local" "$PKG@latest" >/dev/null
+    BIN_DIR="$HOME/.local/bin"
+  fi
+else
+  die "needs bun or npm. Get bun: curl -fsSL https://bun.sh/install | bash"
+fi
+
+case ":$PATH:" in
+  *":$BIN_DIR:"*) ;;
+  *) say "Add $BIN_DIR to your PATH: export PATH=\"$BIN_DIR:\$PATH\"" ;;
+esac
+
+say "Done. Try: builtindie top    (or builtindie launch yourproduct.com)"
+say "MCP: claude mcp add builtindie -- builtindie mcp"

package/public/manifest.webmanifest

@@ -0,0 +1,20 @@
+{
+  "name": "built.indie",
+  "short_name": "built.indie",
+  "description": "Launch your indie product with one URL. Upvote what indies built today.",
+  "start_url": "/",
+  "scope": "/",
+  "display": "standalone",
+  "background_color": "#0b0a10",
+  "theme_color": "#0b0a10",
+  "categories": ["productivity", "business", "developer"],
+  "icons": [
+    { "src": "/icon-192.png", "sizes": "192x192", "type": "image/png", "purpose": "any maskable" },
+    { "src": "/icon-512.png", "sizes": "512x512", "type": "image/png", "purpose": "any maskable" },
+    { "src": "/favicon.svg", "sizes": "any", "type": "image/svg+xml" }
+  ],
+  "shortcuts": [
+    { "name": "Launch", "url": "/submit" },
+    { "name": "Top today", "url": "/top/today" }
+  ]
+}

package/public/moshpit-root-ca.crt

@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

package/public/style.css

@@ -0,0 +1,162 @@
+:root {
+  --bg: #0b0a10; --panel: #15131d; --line: #262233; --text: #f1eef9; --muted: #9b95b0;
+  --accent: #ff5c39; --accent-ink: #fff; --ok: #39d98a; --warn: #f5b942; --fail: #ff6b6b; --gold: #f7c948;
+  color-scheme: dark;
+}
+@media (prefers-color-scheme: light) {
+  :root { --bg: #faf9fc; --panel: #fff; --line: #e7e3ef; --text: #16131f; --muted: #625c74; --accent: #e8431f; --accent-ink: #fff; --ok: #12a35c; --warn: #b7791f; --fail: #d93025; --gold: #b58105; color-scheme: light; }
+}
+* { box-sizing: border-box; }
+html { -webkit-text-size-adjust: 100%; }
+body { margin: 0; background: var(--bg); color: var(--text); font: 16px/1.55 ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, sans-serif; }
+a { color: var(--accent); text-decoration: none; }
+a:hover { text-decoration: underline; }
+code, pre { font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; }
+code { font-size: .88em; background: var(--panel); border: 1px solid var(--line); border-radius: 5px; padding: .05em .35em; word-break: break-all; }
+pre { font-size: .85em; background: var(--panel); border: 1px solid var(--line); border-radius: 8px; padding: .9rem 1rem; overflow-x: auto; white-space: pre; }
+pre code { border: 0; padding: 0; background: none; word-break: normal; white-space: pre-wrap; }
+.sr { position: absolute; width: 1px; height: 1px; overflow: hidden; clip: rect(0 0 0 0); }
+.muted { color: var(--muted); }
+.small { font-size: .85rem; }
+.center { text-align: center; }
+main { max-width: 820px; margin: 0 auto; padding: 0 16px 3rem; }
+.top { max-width: 820px; margin: 0 auto; padding: 14px 16px; display: flex; align-items: center; justify-content: space-between; gap: .75rem; flex-wrap: wrap; }
+.brand { display: flex; align-items: center; gap: .45rem; color: var(--text); font-weight: 800; font-size: 1.2rem; letter-spacing: -.02em; }
+.brand:hover { text-decoration: none; }
+.brand b { color: var(--accent); }
+.mark { width: 26px; height: 26px; color: var(--accent); }
+.top nav { display: flex; gap: .9rem; flex-wrap: wrap; font-size: .92rem; align-items: center; }
+.top nav a:not(.btn) { color: var(--muted); }
+.btn { font: inherit; font-weight: 700; padding: .75rem 1.2rem; border: 0; border-radius: 10px; background: var(--accent); color: var(--accent-ink); cursor: pointer; display: inline-block; text-align: center; white-space: nowrap; }
+.btn:hover { text-decoration: none; filter: brightness(1.08); }
+.btn.ghost { background: transparent; color: var(--accent); border: 1px solid var(--accent); }
+.btn.wide { width: 100%; }
+.small-btn { padding: .4rem .85rem; font-size: .9rem; }
+.chip { font: inherit; font-size: .85rem; display: inline-block; padding: .35rem .75rem; border-radius: 999px; border: 1px solid var(--line); background: var(--panel); color: var(--text); cursor: pointer; white-space: nowrap; }
+.chip:hover { border-color: var(--accent); text-decoration: none; }
+.chip.danger { color: var(--fail); }
+.linkish { font: inherit; background: none; border: 0; color: var(--accent); cursor: pointer; padding: 0; }
+form.inline { display: inline; }
+.hero { text-align: center; padding: 3.2rem 0 1.5rem; }
+.hero.narrow { max-width: 460px; margin: 0 auto; text-align: left; }
+.hero.narrow h1, .hero.narrow .lede { text-align: center; }
+.hero h1 { font-size: clamp(2.2rem, 8vw, 3.6rem); line-height: 1.04; margin: 0 0 .7rem; letter-spacing: -.04em; }
+.lede { color: var(--muted); font-size: 1.1rem; margin: 0 auto 1.4rem; max-width: 36rem; }
+.page-h { font-size: 1.8rem; letter-spacing: -.02em; margin: 1.6rem 0 .6rem; }
+.section-h { font-size: 1.1rem; margin: 2.2rem 0 .6rem; display: flex; gap: .6rem; align-items: baseline; flex-wrap: wrap; }
+.card { background: var(--panel); border: 1px solid var(--line); border-radius: 14px; padding: 1.2rem; margin: 1rem 0; }
+.card h2 { margin: 0 0 .6rem; font-size: 1.1rem; }
+details.card > summary { cursor: pointer; font-weight: 700; }
+details.card[open] > summary { margin-bottom: .6rem; }
+.grid3 { display: grid; grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); gap: 1rem; margin-top: 1rem; }
+.grid3 .card { margin: 0; }
+.step-n { display: inline-grid; place-items: center; width: 1.6rem; height: 1.6rem; border-radius: 50%; background: var(--accent); color: var(--accent-ink); font-weight: 800; font-size: .85rem; margin-right: .4rem; }
+label { display: block; font-weight: 600; margin: .9rem 0 .35rem; }
+label .muted { font-weight: 400; }
+input, select, textarea { width: 100%; font: inherit; padding: .7rem .85rem; background: var(--bg); color: var(--text); border: 1px solid var(--line); border-radius: 10px; outline: none; }
+input:focus, select:focus, textarea:focus { border-color: var(--accent); }
+[aria-invalid="true"] { border-color: var(--fail); }
+.url-row { display: flex; gap: .5rem; }
+.url-row input { flex: 1; min-width: 0; font-size: 1.05rem; }
+.submit-form.compact { max-width: 560px; margin: 0 auto; }
+.submit-form.busy button { opacity: .6; pointer-events: none; }
+.busy-note { margin-top: .8rem; color: var(--accent); font-weight: 600; }
+.busy-note::before { content: ""; display: inline-block; width: .8em; height: .8em; border: 2px solid currentColor; border-right-color: transparent; border-radius: 50%; margin-right: .5em; vertical-align: -.1em; animation: spin .8s linear infinite; }
+@keyframes spin { to { transform: rotate(360deg); } }
+details summary { cursor: pointer; font-weight: 600; margin-top: .8rem; }
+.row { display: flex; gap: .6rem; flex-wrap: wrap; align-items: center; margin: .8rem 0; }
+.row form { margin: 0; }
+.note { border-left: 3px solid var(--accent); padding: .6rem .9rem; background: var(--panel); border-radius: 0 8px 8px 0; margin: 1rem 0; }
+.note.error { border-left-color: var(--fail); }
+.note.launched { border-left-color: var(--ok); }
+.empty { color: var(--muted); padding: 1.5rem; text-align: center; border: 1px dashed var(--line); border-radius: 12px; }
+.search { margin: .6rem 0; }
+.tabs { display: flex; gap: .4rem; flex-wrap: wrap; margin: .4rem 0; }
+.tabs a { padding: .3rem .8rem; border-radius: 999px; border: 1px solid var(--line); color: var(--muted); font-size: .9rem; }
+.tabs a[aria-current] { border-color: var(--accent); color: var(--text); }
+/* the board */
+.board { list-style: none; padding: 0; margin: 0; }
+.row-item { display: flex; align-items: center; gap: .8rem; padding: .7rem .5rem; border-bottom: 1px solid var(--line); }
+.row-item:last-child { border-bottom: 0; }
+.rank { width: 1.6rem; text-align: right; color: var(--muted); font-weight: 700; flex: none; }
+.row-main { display: flex; align-items: center; gap: .85rem; flex: 1; min-width: 0; color: var(--text); }
+.row-main:hover { text-decoration: none; }
+.row-main:hover b { color: var(--accent); }
+.row-text { display: flex; flex-direction: column; min-width: 0; }
+.row-text .muted { white-space: nowrap; overflow: hidden; text-overflow: ellipsis; font-size: .92rem; }
+.logo { border-radius: 12px; object-fit: contain; background: #fff1; flex: none; }
+.logo-letter { display: grid; place-items: center; background: var(--accent); color: var(--accent-ink); font-weight: 800; font-size: 1.3rem; }
+.tick { color: var(--ok); font-weight: 800; }
+.tags { display: flex; gap: .3rem; flex-wrap: wrap; margin-top: .2rem; }
+.tag { font-size: .75rem; padding: .05rem .5rem; border-radius: 999px; background: var(--line); color: var(--muted); }
+a.tag:hover { color: var(--text); text-decoration: none; }
+.vote-form { margin: 0; flex: none; }
+.vote { font: inherit; display: flex; flex-direction: column; align-items: center; justify-content: center; min-width: 3.4rem; height: 3.4rem; border-radius: 12px; border: 1px solid var(--line); background: var(--panel); color: var(--text); cursor: pointer; line-height: 1.1; }
+.vote:hover { border-color: var(--accent); }
+.vote .arrow { color: var(--accent); font-size: .85rem; }
+.vote .count { font-weight: 800; }
+.vote.voted { background: var(--accent); border-color: var(--accent); color: var(--accent-ink); }
+.vote.voted .arrow { color: var(--accent-ink); }
+.vote.big { min-width: 5rem; height: 4.2rem; font-size: 1.15rem; }
+.vote.bump { animation: bump .35s ease; }
+@keyframes bump { 50% { transform: scale(1.15); } }
+/* a product */
+.product-head { display: flex; gap: 1rem; align-items: center; flex-wrap: wrap; margin-top: 1.4rem; }
+.product-title { flex: 1; min-width: 220px; }
+.product-title h1 { margin: 0; font-size: 2rem; letter-spacing: -.02em; line-height: 1.1; }
+.product-title .lede { margin: .3rem 0 .4rem; text-align: left; }
+.product-actions { display: flex; gap: .6rem; align-items: center; flex-wrap: wrap; }
+.badges { display: flex; gap: .35rem; flex-wrap: wrap; margin: 0; }
+.pill { font-size: .78rem; padding: .15rem .6rem; border-radius: 999px; border: 1px solid var(--line); color: var(--muted); }
+.pill.ok { color: var(--ok); border-color: var(--ok); }
+.pill.gold { color: var(--gold); border-color: var(--gold); font-weight: 700; }
+.gallery { display: flex; gap: .7rem; overflow-x: auto; scroll-snap-type: x mandatory; margin: 1.2rem 0; padding-bottom: .4rem; }
+.gallery a { flex: none; scroll-snap-align: start; }
+.gallery img { display: block; height: 260px; width: auto; max-width: 85vw; object-fit: cover; border-radius: 12px; border: 1px solid var(--line); background: var(--panel); }
+.videos { display: grid; gap: .8rem; margin: 1rem 0; }
+.video { position: relative; aspect-ratio: 16 / 9; border-radius: 12px; overflow: hidden; border: 1px solid var(--line); }
+.video iframe { position: absolute; inset: 0; width: 100%; height: 100%; border: 0; }
+.desc { white-space: pre-line; margin-top: 0; }
+.socials, .share { display: flex; gap: .4rem; flex-wrap: wrap; }
+.maker { margin: .8rem 0 .2rem; }
+.address { display: flex; gap: .5rem; align-items: center; margin: .3rem 0 .6rem; }
+.address code { flex: 1; padding: .55rem .7rem; }
+.copy { font: inherit; font-size: .85rem; padding: .5rem .8rem; border-radius: 8px; border: 1px solid var(--line); background: var(--bg); color: var(--text); cursor: pointer; white-space: nowrap; }
+.pics { border: 1px solid var(--line); border-radius: 12px; padding: .8rem; margin: 1rem 0; display: grid; grid-template-columns: repeat(auto-fill, minmax(140px, 1fr)); gap: .7rem; }
+.pics legend { font-weight: 600; padding: 0 .3rem; }
+.pic { margin: 0; font-weight: 400; font-size: .85rem; }
+.pic img { width: 100%; height: 90px; object-fit: cover; border-radius: 8px; border: 1px solid var(--line); display: block; margin-bottom: .3rem; background: var(--bg); }
+.pic input { width: auto; }
+.payee { text-align: center; padding: 2rem 0 .5rem; }
+.ad-unit { margin: 24px auto; display: flex; justify-content: center; }
+.ad-unit iframe { border: 0; display: block; background: transparent; }
+.ad-text_link { max-width: 820px; padding: 0 16px; }
+.ad-text_link iframe { width: 100%; height: 40px; }
+.ad-banner_300x250 iframe { width: 300px; height: 250px; }
+.ad-banner_728x90 iframe { width: 728px; max-width: 100%; height: 90px; }
+@media (max-width: 760px) { .ad-banner_728x90 { display: none; } }
+@media (max-width: 340px) { .ad-banner_300x250 { margin-inline: calc(50% - 50vw); } }
+footer { max-width: 820px; margin: 2rem auto 0; padding: 1.5rem 16px 2.5rem; border-top: 1px solid var(--line); color: var(--muted); font-size: .88rem; display: flex; gap: 1rem; flex-wrap: wrap; justify-content: space-between; }
+footer a { color: var(--muted); }
+@media (max-width: 560px) {
+  .url-row { flex-direction: column; }
+  .gallery img { height: 190px; }
+  .product-title h1 { font-size: 1.6rem; }
+  .row-item { gap: .55rem; }
+}
+/* the Moshpit ring bar (pit.world/ring), on every page */
+.ring-bar { display: flex; align-items: center; gap: 4px 16px; padding: 6px 16px; border-bottom: 1px solid var(--line); background: var(--panel); font: 13px/1.4 ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; white-space: nowrap; overflow-x: auto; scrollbar-width: none; }
+.ring-bar::-webkit-scrollbar { display: none; }
+.ring-bar a { color: var(--muted); }
+.ring-bar a:hover, .ring-bar a:focus-visible { color: var(--accent); text-decoration: underline; }
+.ring-bar .ring-home { color: var(--accent); font-weight: 700; }
+.ring-bar .ring-sites { display: inline-flex; gap: 12px; padding: 0 12px; border-left: 1px solid var(--line); border-right: 1px solid var(--line); }
+.ring-bar [aria-current='page'] { color: var(--text); }
+@media (max-width: 640px) { .ring-bar .ring-sites, .ring-bar .ring-home span { display: none; } }
+/* OpenIcon icons: inline SVG in currentColor */
+.i { width: 1em; height: 1em; vertical-align: -.125em; flex: none; }
+.chip .i, .btn .i { margin-right: .15em; }
+.vote .arrow .i { width: .95em; height: .95em; }
+.mini-h { font-size: .95rem; margin: 1.1rem 0 .4rem; display: flex; gap: .4rem; align-items: center; }
+.stack p { margin: .25rem 0; }
+.plans { list-style: none; padding: 0; margin: 0; display: grid; gap: .25rem; }

package/public/sw.js

@@ -0,0 +1,30 @@
+// built.indie service worker: installable, and the board still opens offline.
+// Pages: network first, the last copy when offline. Static files and pictures: cache first.
+const VERSION = 'bi-1'
+const SHELL = ['/', '/style.css', '/app.js', '/favicon.svg', '/icon-192.png']
+
+self.addEventListener('install', (e) => {
+  e.waitUntil(caches.open(VERSION).then((c) => c.addAll(SHELL)).then(() => self.skipWaiting()))
+})
+self.addEventListener('activate', (e) => {
+  e.waitUntil(caches.keys().then((keys) => Promise.all(keys.filter((k) => k !== VERSION).map((k) => caches.delete(k)))).then(() => self.clients.claim()))
+})
+self.addEventListener('fetch', (e) => {
+  const req = e.request
+  const url = new URL(req.url)
+  if (req.method !== 'GET' || url.origin !== location.origin || url.pathname.startsWith('/api/') || url.pathname.startsWith('/auth/') || url.pathname.startsWith('/badge/')) return
+  const asset = /\.(css|js|svg|png|jpg|webp|gif|avif|ico)$/.test(url.pathname) || url.pathname.startsWith('/m/')
+  if (asset) {
+    e.respondWith(caches.match(req).then((hit) => hit || fetch(req).then((res) => {
+      if (res.ok) { const copy = res.clone(); caches.open(VERSION).then((c) => c.put(req, copy)) }
+      return res
+    })))
+    return
+  }
+  if (req.mode === 'navigate') {
+    e.respondWith(fetch(req).then((res) => {
+      if (res.ok && !url.pathname.match(/^\/(me|login|p\/[^/]+\/(edit|claim))/)) { const copy = res.clone(); caches.open(VERSION).then((c) => c.put(req, copy)) }
+      return res
+    }).catch(() => caches.match(req).then((hit) => hit || caches.match('/'))))
+  }
+})

package/src/auth.ts

@@ -0,0 +1,96 @@
+/**
+ * Who is asking: an emailed magic link (which is also sign-up: an unknown
+ * address makes the account), a session cookie, or an account API key (bi_…)
+ * for the CLI, TUI and MCP server.
+ *
+ * Every secret is stored as its SHA-256 only. The sign-in form never says
+ * whether an address has an account. Passkeys are the house's second way in;
+ * they are left out here because a passkey is bound to one hostname and most
+ * visitors reach built.indie through the pit.world relay.
+ */
+import { randomBytes } from 'node:crypto'
+import { hashKey, type Store, type User } from './db.js'
+
+export const SESSION_COOKIE = 'bi_session'
+const SESSION_DAYS = 90
+const LINK_MINUTES = 20
+
+export type Mail = { to: string; subject: string; text: string; html: string }
+export type Mailer = (mail: Mail) => Promise<unknown>
+
+export function resendMailer(apiKey: string, from: string, fetchImpl: typeof fetch = fetch): Mailer {
+  return async ({ to, subject, text, html }) => {
+    const res = await fetchImpl('https://api.resend.com/emails', {
+      method: 'POST',
+      headers: { authorization: `Bearer ${apiKey}`, 'content-type': 'application/json' },
+      body: JSON.stringify({ from, to: [to], subject, text, html }),
+      signal: AbortSignal.timeout(15_000),
+    })
+    if (!res.ok) throw new Error(`mail provider answered ${res.status}: ${(await res.text()).slice(0, 200)}`)
+  }
+}
+
+/** Without a mail key (local dev) the link goes to the log instead. */
+export const consoleMailer: Mailer = async ({ to, text }) => console.log(`[mail] to ${to}\n${text}`)
+
+export const validEmail = (value: unknown): string | null => {
+  const email = String(value ?? '').trim().toLowerCase()
+  return email.length <= 254 && /^[^\s@<>()",;]+@[^\s@<>()",;]+\.[a-z0-9-]{2,}$/i.test(email) ? email : null
+}
+
+/** Only same-site paths survive a redirect, so a link can never bounce someone off-site. */
+export const safeNext = (value: unknown): string | null => {
+  const next = String(value ?? '')
+  return next.startsWith('/') && !next.startsWith('//') && !next.startsWith('/\\') && next.length < 500 ? next : null
+}
+
+export class Auth {
+  constructor(private store: Store, private mailer: Mailer, private now = () => Date.now()) {}
+
+  /** Always resolves the same way, so nobody learns who has an account. */
+  async sendLink(emailInput: string, next: string | null, base: string): Promise<boolean> {
+    const email = validEmail(emailInput)
+    if (!email) return false
+    const db = this.store.db
+    const recent = (db.query('SELECT COUNT(*) AS n FROM magic_links WHERE email = ? AND created_at > ?').get(email, this.now() - 15 * 60_000) as { n: number }).n
+    if (recent >= 5) return true
+    const token = randomBytes(24).toString('base64url')
+    db.query('INSERT INTO magic_links (token_hash, email, next, created_at, expires_at) VALUES (?, ?, ?, ?, ?)').run(hashKey(token), email, safeNext(next), this.now(), this.now() + LINK_MINUTES * 60_000)
+    const url = `${base}/auth/verify?token=${token}`
+    const text = `Sign in to built.indie:\n\n${url}\n\nThe link works once, for ${LINK_MINUTES} minutes. If you did not ask for it, ignore this email.`
+    const html = `<p>Sign in to <strong>built.indie</strong>:</p><p><a href="${url}" style="display:inline-block;padding:10px 18px;background:#ff5c39;color:#fff;border-radius:8px;text-decoration:none;font-weight:700">Sign in</a></p><p style="color:#666;font-size:13px">Or open ${url}<br>The link works once, for ${LINK_MINUTES} minutes. If you did not ask for it, ignore this email.</p>`
+    try {
+      await this.mailer({ to: email, subject: 'Your built.indie sign-in link', text, html })
+    } catch (error) {
+      console.error(`[auth] mail failed: ${(error as Error).message}`)
+    }
+    return true
+  }
+
+  /** One use, then it is gone. Returns the user (made on first sign-in) and where to go. */
+  consumeLink(token: string): { user: User; next: string | null } | null {
+    const hash = hashKey(String(token))
+    const db = this.store.db
+    const row = db.query('SELECT email, next, expires_at FROM magic_links WHERE token_hash = ?').get(hash) as { email: string; next: string | null; expires_at: number } | null
+    db.query('DELETE FROM magic_links WHERE token_hash = ? OR expires_at < ?').run(hash, this.now())
+    if (!row || row.expires_at < this.now()) return null
+    return { user: this.store.findOrCreateUser(row.email), next: row.next }
+  }
+
+  createSession(userId: string): string {
+    const token = randomBytes(24).toString('base64url')
+    this.store.db.query('INSERT INTO sessions (id_hash, user_id, created_at, expires_at) VALUES (?, ?, ?, ?)').run(hashKey(token), userId, this.now(), this.now() + SESSION_DAYS * 86_400_000)
+    return token
+  }
+
+  sessionUser(token: string | undefined | null): User | null {
+    if (!token) return null
+    const row = this.store.db.query('SELECT user_id, expires_at FROM sessions WHERE id_hash = ?').get(hashKey(token)) as { user_id: string; expires_at: number } | null
+    if (!row || row.expires_at < this.now()) return null
+    return this.store.user(row.user_id)
+  }
+
+  endSession(token: string | undefined | null): void {
+    if (token) this.store.db.query('DELETE FROM sessions WHERE id_hash = ?').run(hashKey(token))
+  }
+}

package/src/cli.ts

@@ -0,0 +1,203 @@
+/**
+ * builtindie: built.indie from the terminal.
+ *
+ *   builtindie                         the TUI: today's board, vote, launch
+ *   builtindie launch <url>            launch it: free, live at once
+ *   builtindie top [today|week|month|all|new]
+ *   builtindie show <slug>
+ *   builtindie vote <slug>
+ *   builtindie preview <url>           what we would read from a site, nothing saved
+ *   builtindie search <words>
+ *   builtindie claim <slug>            prove you own the domain (DNS TXT), BUILTINDIE_KEY
+ *   builtindie me                      your launches, BUILTINDIE_KEY
+ *   builtindie edit <slug> --tagline … (BUILTINDIE_KEY)
+ *   builtindie refetch <slug>          (BUILTINDIE_KEY)
+ *   builtindie mcp                     MCP server on stdio
+ *   builtindie serve [--port N]        run your own built.indie
+ */
+import { BuiltIndieClient, type ApiProduct } from './client.js'
+import { VERSION } from './version.js'
+
+export const HELP = `builtindie ${VERSION}: launch your indie product with one URL (https://built.indie.pit.world)
+
+  builtindie                          interactive (TUI)
+  builtindie launch <url>             launch it, free; we fetch logo, screenshots, videos, llms.txt
+        [--maker "Name"] [--profile <openprofile.md url>] [--tagline "…"] [--draft]
+  builtindie top [today|week|month|all|new|featured]
+  builtindie show <slug>
+  builtindie vote <slug>
+  builtindie preview <url>            what we read from a site; nothing is saved
+  builtindie search <words>
+  builtindie claim <slug> [--md]      the DNS TXT record that proves it is yours, then checks it;
+                                      --md prints the steps as Markdown to paste to an AI with DNS access
+  builtindie me                       your launches
+  builtindie edit <slug> [--name --tagline --description --tags a,b --video URL]
+  builtindie refetch <slug>           read the homepage again
+  builtindie publish <slug>           put a draft live
+  builtindie verify <slug>            check the badge is on your homepage
+  builtindie mcp                      MCP server: claude mcp add builtindie -- bunx @profullstack/builtindie mcp
+  builtindie serve [--port N]         run your own instance
+
+  --json                              machine-readable output
+  BUILTINDIE_KEY=bi_…                 your API key from built.indie.pit.world/me (claim, edit, me)
+  BUILTINDIE_URL=https://…            another instance (default https://built.indie.pit.world)
+`
+
+type Out = { log(text: string): void; error(text: string): void }
+
+/** --name value pairs and bare words, in order. */
+export function parseArgs(argv: string[]): { words: string[]; flags: Record<string, string | true> } {
+  const words: string[] = []
+  const flags: Record<string, string | true> = {}
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i]!
+    if (a.startsWith('--')) {
+      const [k, v] = a.slice(2).split(/=(.*)/s) as [string, string | undefined]
+      if (v !== undefined) flags[k] = v
+      else if (argv[i + 1] !== undefined && !argv[i + 1]!.startsWith('--') && !['json', 'draft', 'md'].includes(k)) flags[k] = argv[++i]!
+      else flags[k] = true
+    } else words.push(a)
+  }
+  return { words, flags }
+}
+
+export const line = (p: ApiProduct, rank?: number) => `${rank ? `${String(rank).padStart(2)}. ` : ''}▲${String(p.votes).padStart(4)}  ${p.name}${p.verified ? ' ✓' : ''}: ${p.tagline || p.domain}  ${p.page}`
+
+export function describe(p: ApiProduct): string {
+  return [
+    `${p.name}${p.verified ? ' ✓' : ''}  ▲ ${p.votes}${p.award ? `  🏆 #${p.award.rank} of ${p.award.day}` : ''}`,
+    p.tagline,
+    '',
+    p.description,
+    '',
+    `site       ${p.url}`,
+    `page       ${p.page}`,
+    p.tags.length ? `tags       ${p.tags.join(', ')}` : '',
+    p.logo ? `logo       ${p.logo}` : '',
+    [p.screenshot, ...p.images].filter(Boolean).length ? `pictures   ${[p.screenshot, p.card_image, ...p.images].filter(Boolean).join('\n           ')}` : '',
+    p.videos.length ? `videos     ${p.videos.map((v) => v.url).join('\n           ')}` : '',
+    Object.keys(p.socials).length ? `socials    ${Object.entries(p.socials).map(([k, v]) => `${k}: ${v}`).join('\n           ')}` : '',
+    p.llms ? `llms.txt   ${p.llms.url}` : '',
+    p.profile ? `profile    ${p.profile.url} (${p.profile.kind ?? 'openprofile'})` : '',
+    p.maker ? `maker      ${p.maker.name}${p.maker.verified ? ' ✓' : ''}${p.maker.profile ? `  ${p.maker.profile}` : ''}` : '',
+    `badge      ${p.badge}`,
+  ]
+    .filter((l, i, all) => l !== '' || (all[i - 1] !== '' && i > 0))
+    .join('\n')
+}
+
+export async function main(argv = process.argv.slice(2), out: Out = console, client = new BuiltIndieClient()): Promise<number> {
+  const { words, flags } = parseArgs(argv)
+  const json = Boolean(flags.json)
+  const [command, ...rest] = words
+  const show = (value: unknown, text: string) => out.log(json ? JSON.stringify(value, null, 2) : text)
+  const str = (k: string) => (typeof flags[k] === 'string' ? (flags[k] as string) : undefined)
+  try {
+    if (!command) {
+      if (!process.stdout.isTTY) return out.log(HELP), 0
+      const { runTui } = await import('./tui.js')
+      await runTui(client)
+      return 0
+    }
+    switch (command) {
+      case 'help':
+      case '--help':
+        out.log(HELP)
+        return 0
+      case 'version':
+        out.log(VERSION)
+        return 0
+      case 'mcp': {
+        const { runMcp } = await import('./mcp.js')
+        await runMcp(client)
+        return 0
+      }
+      case 'serve': {
+        const { serve } = await import('./server.js')
+        const s = serve(str('port') ? { port: Number(str('port')) } : {})
+        out.log(`built.indie listening on http://${s.hostname}:${s.port}`)
+        return await new Promise<number>(() => {})
+      }
+      case 'launch':
+      case 'submit': {
+        if (!rest[0]) throw new Error('builtindie launch <url>')
+        const r = await client.launch(rest[0], { makerName: str('maker'), makerProfile: str('profile'), name: str('name'), tagline: str('tagline'), description: str('description'), tags: str('tags')?.split(','), videos: str('video') ? [str('video')!] : undefined, publish: !flags.draft })
+        if (r.existing) return show(r, `Already launched:\n${line(r.product)}`), 0
+        show(r, `${describe(r.product)}\n\n${r.product.status === 'live' ? 'Live. Share it and add the badge.' : `Draft: builtindie publish ${r.product.slug}`}\nYours? builtindie claim ${r.product.slug}  (${r.claim_url})`)
+        return 0
+      }
+      case 'top':
+      case 'list':
+      case 'new': {
+        const w = command === 'new' ? 'new' : (rest[0] ?? 'today')
+        const r = await client.list(w, Number(str('limit') ?? 30))
+        show(r, r.products.map((p, i) => line(p, w === 'new' ? undefined : i + 1)).join('\n') || `Nothing launched ${w === 'today' ? 'today yet' : 'here yet'}.`)
+        return 0
+      }
+      case 'search': {
+        const r = await client.search(rest.join(' '))
+        show(r, r.products.map((p) => line(p)).join('\n') || 'Nothing matches.')
+        return 0
+      }
+      case 'show': {
+        const p = await client.product(rest[0] ?? '')
+        show(p, describe(p))
+        return 0
+      }
+      case 'vote': {
+        const r = await client.vote(rest[0] ?? '')
+        show(r, r.counted ? `▲ ${r.votes}: thanks!` : `▲ ${r.votes}: you already voted.`)
+        return 0
+      }
+      case 'preview': {
+        const r = await client.preview(rest[0] ?? '')
+        show(r, JSON.stringify(r, null, 2))
+        return 0
+      }
+      case 'edit': {
+        const patch: Record<string, unknown> = {}
+        for (const k of ['name', 'tagline', 'description']) if (str(k) !== undefined) patch[k] = str(k)
+        if (str('tags') !== undefined) patch.tags = str('tags')!.split(',')
+        if (str('video') !== undefined) patch.videos = [str('video')]
+        if (str('maker') !== undefined) patch.maker_name = str('maker')
+        if (str('profile') !== undefined) patch.maker_profile = str('profile')
+        const p = await client.edit(rest[0] ?? '', patch, str('key'))
+        show(p, describe(p))
+        return 0
+      }
+      case 'refetch':
+      case 'publish': {
+        const p = await client.act(rest[0] ?? '', command, str('key'))
+        show(p, describe(p))
+        return 0
+      }
+      case 'claim': {
+        const slug = rest[0] ?? ''
+        if (flags.md) {
+          const r = await client.claimRecord(slug)
+          out.log(json ? JSON.stringify(r, null, 2) : r.markdown)
+          return 0
+        }
+        const r = await client.claim(slug)
+        if (r.claimed) return show(r, `${slug} is yours ✓. Edit it: builtindie edit ${slug} --tagline "…"`), 0
+        show(r, `Add this DNS record, wait a minute, then run builtindie claim ${slug} again:\n\n  type   TXT\n  name   ${r.record.name}\n  value  ${r.record.value}\n\n(not found yet at ${r.looked.join(', ')})`)
+        return 1
+      }
+      case 'me': {
+        const r = await client.me()
+        show(r, `${r.email}\n${r.products.map((p) => `${line(p)}  ${p.owner ? 'claimed ✓' : p.status === 'draft' ? 'draft' : 'not claimed'}`).join('\n') || 'No launches yet.'}`)
+        return 0
+      }
+      case 'verify': {
+        const r = await client.verify(rest[0] ?? '')
+        show(r, r.verified ? 'Verified ✓: we found the badge.' : 'Not found yet: add the badge HTML to your homepage and deploy.')
+        return r.verified ? 0 : 1
+      }
+    }
+    out.error(`builtindie: unknown command "${command}"\n\n${HELP}`)
+    return 2
+  } catch (error) {
+    out.error(error instanceof Error ? error.message : String(error))
+    return 1
+  }
+}