antigravity-seo-kit 1.0.0 → 1.0.2

package/README.md

@@ -1,6 +1,6 @@
 # SEO Kit for Google Antigravity
 
-> **Professional SEO Analysis Toolkit** — 35 specialized skills organized into a 5-phase SEO lifecycle for comprehensive audits, E-E-A-T analysis, schema markup, GEO optimization, keyword research, audience analysis, AI prompt research, and more. Built for [Google Antigravity](https://deepmind.google/technologies/antigravity/) AI agent platform.
+> **Professional SEO Analysis Toolkit** — Comprehensive AI-powered SEO analysis with specialized skills for technical audit, E-E-A-T, schema markup, GEO optimization, and more. Built for [Google Antigravity](https://deepmind.google/technologies/antigravity/) AI agent platform.
 
 ## ⚡ Quick Install
 
@@ -12,36 +12,17 @@ npx antigravity-seo-kit install --key=SK-XXXX-XXXX-XXXX
 
 ## Features
 
-- **35 specialized SEO skills** organized into a 5-phase lifecycle
-- **Master Orchestrator** (`/seo-run`) — auto-detects project phase, suggests next step
-- **Technical SEO Audit** with 9 categories (crawlability, indexability, Core Web Vitals, etc.)
-- **E-E-A-T Content Quality** analysis with Sept 2025 QRG update
-- **Schema Markup** detection, validation, and JSON-LD generation
-- **AI Search Optimization (GEO)** for AI Overviews, ChatGPT, Perplexity
-- **Agentic SEO** audit — Action schema, A2A readiness, API discoverability
-- **Content Strategy** — gap analysis, topical authority, entity SEO, 30/60/90 roadmap
-- **Keyword Research** — seed expansion, volume/difficulty, intent classification, clustering
-- **Audience Analysis** — persona definition, journey mapping, community language mining
-- **AI Prompt Research** — conversational query patterns, multi-turn intent chains
-- **Backlink Analysis** — profile, toxic links, competitor link gap
-- **Local SEO** with GBP, NAP consistency, citations, reviews, Maps intelligence
-- **Programmatic SEO** for pages at scale with quality gates
-- **Google Search Console & Analytics** integration
-- **Auto-Fix Generator** — ready-to-use meta tags, schema, robots.txt, redirects
-- **SEO Experiment Tracking** — A/B tests with baseline/measurement cycle
-- **Extension System** for DataForSEO, Ahrefs, Semrush, and AI image generation
-
-## SEO Lifecycle
+- **Full SEO Lifecycle** — Onboard, Research, Audit, Strategy, Execute, Monitor
+- **Technical SEO Audit** — Crawlability, indexability, Core Web Vitals, and more
+- **E-E-A-T Content Quality** analysis aligned with latest Google QRG
+- **Schema Markup** — Detection, validation, and JSON-LD generation
+- **AI Search Optimization (GEO)** — Visibility in AI Overviews, ChatGPT, Perplexity
+- **Content Strategy** — Gap analysis, topical authority, entity SEO
+- **Local SEO** — GBP, NAP consistency, Maps intelligence
+- **Auto-Fix Generator** — Ready-to-use meta tags, schema, robots.txt, redirects
+- **Extension System** for third-party SEO data providers
 
-```
-📋 ONBOARD → 🔎 RESEARCH → 🔍 AUDIT → 🧠 STRATEGY → ⚡ EXECUTE → 📈 MONITOR → (re-audit)
-```
-
-**Just remember one command:** `/seo-run <domain>` — it guides you through everything.
-
-## Commands
-
-### CLI Commands
+## CLI Commands
 
 ```bash
 # Install SEO Kit
@@ -53,84 +34,33 @@ npx antigravity-seo-kit update
 # Check installation status
 npx antigravity-seo-kit status
 
-# List activated devices
+# Manage devices
 npx antigravity-seo-kit devices
-
-# Remove a device
 npx antigravity-seo-kit devices remove <deviceId>
 
 # Uninstall
 npx antigravity-seo-kit uninstall --confirm
 ```
 
-### SEO Workflows (inside Antigravity)
-
-| Workflow | Phase | Skills | Purpose |
-|----------|-------|--------|---------|
-| `/seo-run` | Master | Delegates | Auto-detect phase, suggest next step |
-| `/seo-onboard` | 1 | 4 | Project setup, API check, brand identity, personas |
-| `/seo-research` | Research | 5 | Keyword research, audience, prompt patterns |
-| `/seo-audit` | 2 | 9 | Full website diagnostic, Health Score |
-| `/seo-strategy` | 3 | 10 | Content gaps, entity, authority, roadmap |
-| `/seo-execute` | 4 | 6 | Code fixes, schema, redirects, content |
-| `/seo-monitor` | 5 | 6 | Experiments, AI citability, traffic |
-| `/seo-local-suite` | Special | 2 | Local SEO + Maps intelligence |
-| `/seo-page` | Utility | 4 | Deep single-page analysis |
-
-> **Direct Skill Access**: You can always call any of the 35 skills directly by name (e.g., "Run seo-entity for example.com") without going through the lifecycle.
-
 ## System Requirements
 
 - **Node.js** ≥ 18 (for CLI installer)
 - **Python** ≥ 3.11 (for analysis scripts)
 - **Google Antigravity** or compatible AI agent platform
 
-## Setup After Installation
-
-```bash
-# 1. Install Python dependencies
-pip install -r requirements.txt
-
-# 2. (Optional) Install Google API dependencies
-pip install -r requirements-google.txt
-
-# 3. (Optional) Install Playwright for visual analysis
-pip install playwright && playwright install chromium
-
-# 4. Open your workspace in Google Antigravity
-# 5. Start with: /seo-run yourdomain.com
-```
-
-## Extensions
-
-| Extension | What it Adds |
-|-----------|-------------|
-| **DataForSEO** | 22 commands: live SERP, keywords, backlinks, on-page analysis, AI visibility |
-| **Banana Image Gen** | 6 commands: OG image, hero, product, infographic, custom, batch via Gemini AI |
-| **Ahrefs MCP** | DR/UR, backlink quality, content gap, referring domains |
-| **Semrush MCP** | Keyword gap, toxic links, backlink audit, domain analytics |
-
 ## License Management
 
-Each license key supports up to **3 devices** simultaneously. Manage your devices:
-
-```bash
-# View activated devices
-npx antigravity-seo-kit devices
-
-# Remove a device to free up a slot
-npx antigravity-seo-kit devices remove <deviceId>
-```
+Each license key supports multiple devices simultaneously. Manage your devices with the `devices` command.
 
 ## License
 
 This software is distributed under a **Commercial License**. See [LICENSE](LICENSE) for full terms.
 
-- ✅ Use on up to 3-20 devices per license
+- ✅ Use on multiple devices per license
 - ✅ Modify for personal/business use
 - ❌ Redistribution prohibited
 - ❌ Sublicensing prohibited
 
 ## Support
 
-For license inquiries and support, visit: [https://antigravityseokit.solann.io/](https://antigravityseokit.solann.io/)
+For license inquiries and support: [https://antigravityseokit.solann.io/](https://antigravityseokit.solann.io/)

package/lib/downloader.js

@@ -1,7 +1,6 @@
 'use strict';
 
 const https = require('https');
-const http = require('http');
 const zlib = require('zlib');
 const fs = require('fs');
 const path = require('path');
@@ -19,11 +18,17 @@ function downloadBuffer(url, headers = {}, { timeout = 60000, maxRedirects = 5 }
     }
 
     const parsed = new URL(url);
-    const transport = parsed.protocol === 'https:' ? https : http;
+
+    // SECURITY: Reject HTTP — license key must never travel over cleartext
+    if (parsed.protocol !== 'https:') {
+      return reject(new Error('HTTPS required for secure asset downloads. Refusing HTTP connection.'));
+    }
+
+    const transport = https;
 
     const options = {
       hostname: parsed.hostname,
-      port: parsed.port || (parsed.protocol === 'https:' ? 443 : 80),
+      port: parsed.port || 443,
       path: parsed.pathname + parsed.search,
       method: 'GET',
       headers: {
@@ -34,9 +39,13 @@ function downloadBuffer(url, headers = {}, { timeout = 60000, maxRedirects = 5 }
     };
 
     const req = transport.request(options, (res) => {
-      // Follow redirects
+      // Follow redirects — but only to HTTPS
       if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
-        return downloadBuffer(res.headers.location, headers, { timeout, maxRedirects: maxRedirects - 1 })
+        const redirectUrl = new URL(res.headers.location, url);
+        if (redirectUrl.protocol !== 'https:') {
+          return reject(new Error('Blocked redirect from HTTPS to HTTP. Possible downgrade attack.'));
+        }
+        return downloadBuffer(redirectUrl.href, headers, { timeout, maxRedirects: maxRedirects - 1 })
           .then(resolve)
           .catch(reject);
       }

package/lib/installer.js

@@ -12,41 +12,11 @@ const { generateFingerprint, getDeviceName } = require('./fingerprint');
 const api = require('./api');
 const { downloadAndExtract } = require('./downloader');
 
-// ─── Legacy arrays (for uninstall/status of older installs without manifest) ─
-
-const SEO_SKILL_DIRS = [
-  'seo', 'seo-agentic', 'seo-answer', 'seo-audience', 'seo-audit',
-  'seo-authority', 'seo-backlink', 'seo-brand-sentiment', 'seo-citemet',
-  'seo-coccoc-optimizer', 'seo-competitor-pages', 'seo-content',
-  'seo-content-gap', 'seo-dataforseo', 'seo-entity', 'seo-fan-out-generator',
-  'seo-fix', 'seo-geo', 'seo-geo-monitor', 'seo-google', 'seo-hreflang',
-  'seo-image-gen', 'seo-images', 'seo-keyword', 'seo-llmstxt', 'seo-local',
-  'seo-logs', 'seo-maps', 'seo-migration', 'seo-page', 'seo-plan',
-  'seo-programmatic', 'seo-prompt-research', 'seo-reddit-scraper',
-  'seo-schema', 'seo-sitemap', 'seo-social-zalo', 'seo-source-context',
-  'seo-technical', 'seo-test', 'seo-topical-authority', 'seo-video',
-  'seo-video-transcript', 'seo-visual-search',
-];
-
-const SEO_WORKFLOW_FILES = [
-  'seo-audit.md', 'seo-auto-run.md', 'seo-execute.md',
-  'seo-llm-visibility.md', 'seo-local-suite.md', 'seo-monitor.md',
-  'seo-onboard.md', 'seo-page.md', 'seo-research.md', 'seo-run.md',
-  'seo-social-commerce.md', 'seo-strategy.md',
-];
-
-const SEO_RULE_FILES = [
-  'seo-agent-security.md', 'seo-anti-hallucination.md',
-  'seo-auto-routing.md', 'seo-domain-project.md',
-  'seo-output-convention.md', 'seo-provider-priority.md',
-  'seo-report-format.md',
-];
-
-const SEO_AGENT_FILES = [
-  'seo-auditor.md', 'seo-strategist.md', 'seo-content-writer.md',
-  'seo-ai-specialist.md', 'seo-local-expert.md', 'seo-growth-hacker.md',
-  'seo-data-analyst.md', 'seo-migration-expert.md',
-];
+// ─── Legacy cleanup (for uninstall of older installs without manifest) ───────
+// No hardcoded names — scan directories for seo-* prefixed files/folders.
+
+const LEGACY_SEO_PREFIX = 'seo-';
+const LEGACY_DIRS = ['skills', 'workflows', 'rules', 'agents'];
 
 // ─── Install Command ────────────────────────────────────────────────────────
 
@@ -215,44 +185,26 @@ async function uninstall(cwd) {
 
 /**
  * Legacy uninstall for installs before v1.0.0 (without manifest).
+ * Scans for seo-* prefixed files/dirs instead of hardcoded names.
  */
 function legacyUninstall(cwd) {
   let totalRemoved = 0;
-
-  // Remove skills
-  const skillsDir = path.join(cwd, '.agent', 'skills');
-  for (const skillDir of SEO_SKILL_DIRS) {
-    const target = path.join(skillsDir, skillDir);
-    totalRemoved += removeRecursive(target);
-  }
-
-  // Remove workflows
-  const workflowsDir = path.join(cwd, '.agent', 'workflows');
-  for (const wfFile of SEO_WORKFLOW_FILES) {
-    const target = path.join(workflowsDir, wfFile);
-    if (fs.existsSync(target)) {
-      fs.unlinkSync(target);
-      totalRemoved++;
-    }
-  }
-
-  // Remove rules
-  const rulesDir = path.join(cwd, '.agent', 'rules');
-  for (const ruleFile of SEO_RULE_FILES) {
-    const target = path.join(rulesDir, ruleFile);
-    if (fs.existsSync(target)) {
-      fs.unlinkSync(target);
-      totalRemoved++;
-    }
-  }
-
-  // Remove agents
-  const agentsDir = path.join(cwd, '.agent', 'agents');
-  for (const agentFile of SEO_AGENT_FILES) {
-    const target = path.join(agentsDir, agentFile);
-    if (fs.existsSync(target)) {
-      fs.unlinkSync(target);
-      totalRemoved++;
+  const agentDir = path.join(cwd, '.agent');
+
+  for (const subDir of LEGACY_DIRS) {
+    const dirPath = path.join(agentDir, subDir);
+    if (!fs.existsSync(dirPath)) continue;
+
+    const entries = fs.readdirSync(dirPath);
+    for (const entry of entries) {
+      if (!entry.startsWith(LEGACY_SEO_PREFIX) && entry !== 'seo') continue;
+      const target = path.join(dirPath, entry);
+      if (fs.statSync(target).isDirectory()) {
+        totalRemoved += removeRecursive(target);
+      } else {
+        fs.unlinkSync(target);
+        totalRemoved++;
+      }
     }
   }
 
@@ -308,20 +260,17 @@ async function status(cwd) {
     }
     console.log(`  ${colorize('cyan', 'Files:')}        ${existingFiles}/${config.installedFiles.length} present`);
   } else {
-    // Legacy: check from hardcoded arrays
-    const skillsDir = path.join(cwd, '.agent', 'skills');
-    let installedSkills = 0;
-    for (const s of SEO_SKILL_DIRS) {
-      if (fs.existsSync(path.join(skillsDir, s))) installedSkills++;
-    }
-    console.log(`  ${colorize('cyan', 'Skills:')}       ${installedSkills}/${SEO_SKILL_DIRS.length} installed`);
-
-    const workflowsDir = path.join(cwd, '.agent', 'workflows');
-    let installedWorkflows = 0;
-    for (const w of SEO_WORKFLOW_FILES) {
-      if (fs.existsSync(path.join(workflowsDir, w))) installedWorkflows++;
+    // Legacy: scan for seo-* prefixed entries
+    const agentDir = path.join(cwd, '.agent');
+    let totalLegacy = 0;
+    for (const subDir of LEGACY_DIRS) {
+      const dirPath = path.join(agentDir, subDir);
+      if (!fs.existsSync(dirPath)) continue;
+      for (const entry of fs.readdirSync(dirPath)) {
+        if (entry.startsWith(LEGACY_SEO_PREFIX) || entry === 'seo') totalLegacy++;
+      }
     }
-    console.log(`  ${colorize('cyan', 'Workflows:')}    ${installedWorkflows}/${SEO_WORKFLOW_FILES.length} installed`);
+    console.log(`  ${colorize('cyan', 'Components:')}  ${totalLegacy} installed (legacy)`);
   }
   console.log('');
 

package/lib/utils.js

@@ -170,7 +170,7 @@ function isValidKeyFormat(key) {
 const BANNER = `
 ${colorize('cyan', '╔═══════════════════════════════════════════════════════╗')}
 ${colorize('cyan', '║')}  ${colorize('bold', '🔍 SEO Kit for Google Antigravity')}                   ${colorize('cyan', '║')}
-${colorize('cyan', '║')}  ${colorize('dim', 'v1.0.0 — Professional SEO Analysis Toolkit')}         ${colorize('cyan', '║')}
+${colorize('cyan', '║')}  ${colorize('dim', 'v1.0.2 — Professional SEO Analysis Toolkit')}         ${colorize('cyan', '║')}
 ${colorize('cyan', '╚═══════════════════════════════════════════════════════╝')}
 `;
 
@@ -209,7 +209,13 @@ function readLicenseFile(cwd) {
   const licensePath = path.join(cwd, LICENSE_FILE);
   if (!fs.existsSync(licensePath)) return null;
   try {
-    return JSON.parse(fs.readFileSync(licensePath, 'utf-8'));
+    const data = JSON.parse(fs.readFileSync(licensePath, 'utf-8'));
+    // Deobfuscate the key if stored obfuscated
+    if (data._k && !data.key) {
+      data.key = deobfuscateKey(data._k);
+      delete data._k;
+    }
+    return data;
   } catch {
     return null;
   }
@@ -217,7 +223,37 @@ function readLicenseFile(cwd) {
 
 function writeLicenseFile(cwd, data) {
   const licensePath = path.join(cwd, LICENSE_FILE);
-  fs.writeFileSync(licensePath, JSON.stringify(data, null, 2), 'utf-8');
+  // Obfuscate the key before writing
+  const toWrite = { ...data };
+  if (toWrite.key) {
+    toWrite._k = obfuscateKey(toWrite.key);
+    delete toWrite.key;
+  }
+  fs.writeFileSync(licensePath, JSON.stringify(toWrite, null, 2), 'utf-8');
+}
+
+/**
+ * Simple XOR obfuscation with machine-derived salt.
+ * NOT encryption — just prevents casual copy/paste of keys.
+ */
+function obfuscateKey(key) {
+  const salt = require('os').hostname() + require('os').platform();
+  const buf = Buffer.from(key, 'utf-8');
+  const saltBuf = Buffer.from(salt, 'utf-8');
+  for (let i = 0; i < buf.length; i++) {
+    buf[i] ^= saltBuf[i % saltBuf.length];
+  }
+  return buf.toString('base64');
+}
+
+function deobfuscateKey(encoded) {
+  const salt = require('os').hostname() + require('os').platform();
+  const buf = Buffer.from(encoded, 'base64');
+  const saltBuf = Buffer.from(salt, 'utf-8');
+  for (let i = 0; i < buf.length; i++) {
+    buf[i] ^= saltBuf[i % saltBuf.length];
+  }
+  return buf.toString('utf-8');
 }
 
 function removeLicenseFile(cwd) {
@@ -250,5 +286,5 @@ module.exports = {
   writeLicenseFile,
   removeLicenseFile,
   LICENSE_FILE,
-  PACKAGE_VERSION: '1.0.0',
+  PACKAGE_VERSION: '1.0.2',
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "antigravity-seo-kit",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Professional SEO Analysis Toolkit for Google Antigravity AI Agent — 44 specialized skills covering technical audit, E-E-A-T, schema, GEO, local SEO & more",
   "main": "lib/installer.js",
   "bin": {