cashclaw 1.0.2 → 1.2.0

package/CHANGELOG.md

@@ -0,0 +1,66 @@
+# Changelog
+
+## [1.2.0] - 2026-03-15
+
+### Added
+- **5 New Skills** — Email Outreach ($9-$29), Competitor Analyzer ($19-$49), Landing Page ($15-$39), Data Scraper ($9-$25), Reputation Manager ($19-$49). CashClaw now ships with 12 revenue-generating skills.
+- 10 new mission templates for the new skills (basic + pro tiers each).
+- Environment variable support: `CASHCLAW_STRIPE_SECRET_KEY` as alternative to config file.
+- Corrupted mission file warnings (previously silently skipped).
+- Shared version helper (`src/utils/version.js`) for consistent version display.
+
+### Fixed
+- **Cancel status log bug** — Mission cancel audit trail now correctly shows the previous status instead of always logging "was: cancelled".
+- **Short ID collision** — Multiple missions sharing the same ID prefix now show an ambiguous match warning instead of silently picking the first match.
+- **Hardcoded versions** — All hardcoded version strings throughout the codebase now dynamically read from `package.json`.
+
+### Security
+- **CORS restriction** — Dashboard API now restricts CORS to localhost origins. Agents and curl still work (no Origin header = no restriction).
+- **Config API protection** — `POST /api/config` now blocks modification of sensitive keys (`stripe.secret_key`, `stripe.webhook_secret`).
+- **Prototype pollution guard** — Config key traversal (both CLI and API) now rejects `__proto__`, `constructor`, and `prototype` keys.
+
+### Changed
+- Default config now includes 10 service types (up from 5).
+- Init wizard now offers 10 services for selection.
+- Dashboard HTML version updated to v1.2.0 with dynamic version from health API.
+- HYRVEai User-Agent header now reads version from package.json.
+- Test suite expanded with version, security, and new skill tests.
+
+### Why This Release
+CashClaw agents need more ways to earn. Five new skills expand the service catalog from 7 to 12 while security hardening protects the dashboard API — all without breaking autonomous agent operation. Every security change preserves agent bot compatibility.
+
+## [1.1.0] - 2026-03-14
+
+### Added
+- **Mission Audit Trail** — Every mission step is now logged with timestamps. What was requested, what was delivered, and the full output trail. No invoice goes out without proof.
+- `cashclaw missions trail <id>` — View the formatted audit trail for any mission in the terminal.
+- `cashclaw missions export <id>` — Export mission proof as a markdown file for client disputes or record-keeping.
+- `GET /api/missions/:id/trail` — Dashboard API endpoint returning the audit trail as JSON.
+
+### Changed
+- Mission objects now include an `audit_trail` array tracking all state changes.
+- All mission lifecycle functions (create, start, complete, cancel, step update) log trail entries automatically.
+- Dashboard health endpoint now reports version `1.1.0`.
+- Updated package description to mention audit trails.
+
+### Why This Release
+Community feedback was clear: *"Without proof of actual work done, the invoice becomes negotiation."* Mission Audit Trail solves this. Every step is timestamped. Every deliverable is tracked. Dispute resolution and a work proof dashboard are on the roadmap.
+
+## [1.0.2] - 2026-03-10
+
+### Fixed
+- CLI minor fixes and dependency updates.
+
+## [1.0.1] - 2026-03-07
+
+### Fixed
+- Init wizard improvements and error handling.
+
+## [1.0.0] - 2026-03-01
+
+### Added
+- Initial release with 7 built-in skills.
+- Stripe payment integration.
+- HYRVEai marketplace support.
+- Web dashboard on port 3847.
+- Mission lifecycle management.

package/README.md

@@ -53,7 +53,7 @@ That is it. CashClaw will:
 1. Create your `~/.cashclaw/` workspace
 2. Set up the mission pipeline
 3. Connect to Stripe (optional, you can add it later)
-4. Install all 7 skills into your OpenClaw agent
+4. Install all 12 skills into your OpenClaw agent
 5. Print your first dashboard
 
 ```bash
@@ -76,7 +76,7 @@ cashclaw audit --url "https://your-client.com" --tier standard
 +------------------+     +---------------------+     +------------------+
 |                  |     |                     |     |                  |
 |    OpenClaw      |---->|   CashClaw Skills   |---->|  CashClaw Engine |
-|    (Your Agent)  |     |   (7 skill packs)   |     |  (Orchestrator)  |
+|    (Your Agent)  |     |  (12 skill packs)   |     |  (Orchestrator)  |
 |                  |     |                     |     |                  |
 +------------------+     +---------------------+     +--------+---------+
                                                               |
@@ -100,11 +100,43 @@ cashclaw audit --url "https://your-client.com" --tier standard
 | Layer | What It Does |
 |-------|-------------|
 | **OpenClaw** | Your AI agent runtime. Reads SKILL.md files, executes instructions. |
-| **CashClaw Skills** | 7 specialized skill packs (SEO, content, leads, invoicing, etc.). |
+| **CashClaw Skills** | 12 specialized skill packs (SEO, content, leads, email outreach, competitor analysis, landing pages, data scraping, reputation management, invoicing, etc.). |
 | **CashClaw Engine** | The `cashclaw-core` skill that orchestrates the mission lifecycle. |
 | **Stripe** | Payment processing. Invoices, payment links, subscriptions, refunds. |
 | **HYRVEai** | Optional marketplace where clients discover and hire CashClaw agents. |
 
+## Mission Audit Trail
+
+Every mission is logged end-to-end. No invoice goes out without proof.
+
+```
+MISSION-20260314-021  SEO Audit (Standard)  $29
+
+  Step 1  ✓  Request received        14:02:11  "Full SEO audit for techstartup.io"
+  Step 2  ✓  Crawl completed         14:02:34  247 pages scanned
+  Step 3  ✓  Analysis generated      14:03:12  report.md (2,847 words)
+  Step 4  ✓  Report delivered        14:03:15  Sent to client@acme.com
+  Step 5  ✓  Invoice created         14:03:16  INV-0047 via Stripe
+  Step 6  ◯  Payment pending         --        Due Mar 21
+```
+
+Your agent doesn't just send a number. It sends:
+- **What was requested** — original brief, scope, deliverables
+- **What was delivered** — output files, word counts, data points
+- **Time + output trail** — every step timestamped and logged
+
+```bash
+# View audit trail for any mission
+cashclaw mission MISSION-20260314-021 --trail
+
+# Export proof for client disputes
+cashclaw mission MISSION-20260314-021 --export proof.pdf
+```
+
+Timeline-first. Invoice is just the closing handshake.
+
+> *Dispute resolution + work proof dashboard is on the roadmap. [Star the repo](https://github.com/ertugrulakben/cashclaw) to see it ship faster.*
+
 ## Available Services
 
 Every service has transparent, fixed pricing. No hourly rates. No surprises.
@@ -123,6 +155,16 @@ Every service has transparent, fixed pricing. No hourly rates. No surprises.
 | Social Media (1 platform) | `cashclaw-social-media` | $9/wk | -- | -- |
 | Social Media (3 platforms) | `cashclaw-social-media` | -- | $19/wk | -- |
 | Social Media (Full) | `cashclaw-social-media` | -- | -- | $49/mo |
+| Email Outreach (3-seq) | `cashclaw-email-outreach` | $9 | -- | -- |
+| Email Outreach (7-seq) | `cashclaw-email-outreach` | -- | $19 | $29 |
+| Competitor Analysis (1) | `cashclaw-competitor-analyzer` | $19 | -- | -- |
+| Competitor Analysis (5) | `cashclaw-competitor-analyzer` | -- | $35 | $49 |
+| Landing Page (Copy) | `cashclaw-landing-page` | $15 | -- | -- |
+| Landing Page (HTML+Copy) | `cashclaw-landing-page` | -- | $29 | $39 |
+| Data Scraping (50 records) | `cashclaw-data-scraper` | $9 | -- | -- |
+| Data Scraping (500 records) | `cashclaw-data-scraper` | -- | $19 | $25 |
+| Reputation Audit | `cashclaw-reputation-manager` | $19 | -- | -- |
+| Reputation Monthly | `cashclaw-reputation-manager` | -- | $35 | $49 |
 
 **Custom packages available.** Combine services or request enterprise pricing.
 
@@ -192,6 +234,26 @@ cashclaw invoice --list --status unpaid
 cashclaw invoice --remind --overdue
 cashclaw invoice --refund --invoice "in_xxxxx"
 
+# Email Outreach
+cashclaw outreach --icp "saas founders" --sequence 3 --tier basic
+cashclaw outreach --icp "ecommerce" --sequence 7 --tier pro
+
+# Competitor Analysis
+cashclaw compete --target "competitor.com" --tier basic
+cashclaw compete --targets "a.com,b.com,c.com" --tier pro --output report.md
+
+# Landing Page
+cashclaw landing --product "AI SaaS" --tier standard
+cashclaw landing --product "Mobile App" --tier pro --ab-test
+
+# Data Scraping
+cashclaw scrape --source "https://example.com/products" --count 50
+cashclaw scrape --sources "url1,url2" --count 500 --enrich --output data.csv
+
+# Reputation Management
+cashclaw reputation --brand "MyBrand" --tier basic
+cashclaw reputation --brand "MyBrand" --tier pro --respond
+
 # Configuration
 cashclaw config                  # Show current config
 cashclaw config --stripe-key     # Set Stripe API key
@@ -240,6 +302,11 @@ cashclaw/
     cashclaw-whatsapp-manager/   # WhatsApp automation skill
     cashclaw-social-media/       # Social media management skill
     cashclaw-invoicer/           # Stripe payment skill + scripts
+    cashclaw-email-outreach/     # Cold email sequence skill
+    cashclaw-competitor-analyzer/ # Competitor analysis skill
+    cashclaw-landing-page/       # Landing page copy + HTML skill
+    cashclaw-data-scraper/       # Web data extraction skill
+    cashclaw-reputation-manager/ # Online reputation skill
   templates/                     # Message and report templates
   missions/                      # Example mission files
   tests/                         # Test suite

package/missions/competitor-analysis-basic.json

@@ -0,0 +1,19 @@
+{
+  "template": "competitor-analysis-basic",
+  "service_type": "competitor-analysis",
+  "tier": "basic",
+  "name": "Basic Competitor Analysis",
+  "description": "Deep-dive analysis of a single competitor covering their product offering, pricing, online presence, strengths, weaknesses, and key takeaways for your positioning.",
+  "default_price_usd": 19,
+  "estimated_hours": 4,
+  "skills_required": ["cashclaw-competitor-analyzer"],
+  "deliverables": ["competitor-report.html", "swot-summary.json"],
+  "steps": [
+    "Identify and verify competitor domain, products, and key pages",
+    "Analyze competitor pricing model, feature set, and value proposition",
+    "Audit their online presence including website, social profiles, and reviews",
+    "Perform SWOT analysis with strengths, weaknesses, opportunities, and threats",
+    "Identify gaps and positioning opportunities for your business",
+    "Generate HTML report with findings and strategic recommendations"
+  ]
+}

package/missions/competitor-analysis-pro.json

@@ -0,0 +1,19 @@
+{
+  "template": "competitor-analysis-pro",
+  "service_type": "competitor-analysis",
+  "tier": "pro",
+  "name": "Pro Competitor Analysis",
+  "description": "Comprehensive analysis of up to 5 competitors with a full market map, feature comparison matrix, pricing benchmark, traffic estimates, and strategic positioning recommendations.",
+  "default_price_usd": 49,
+  "estimated_hours": 12,
+  "skills_required": ["cashclaw-competitor-analyzer"],
+  "deliverables": ["market-map.html", "competitor-matrix.csv", "feature-comparison.json", "positioning-report.html"],
+  "steps": [
+    "Research and profile up to 5 competitors across product, pricing, and audience",
+    "Build feature-by-feature comparison matrix with scoring",
+    "Analyze each competitor's traffic sources, SEO keywords, and ad strategy",
+    "Create visual market map plotting competitors by price and feature depth",
+    "Benchmark pricing tiers and identify underserved market segments",
+    "Generate comprehensive report with positioning strategy and actionable next steps"
+  ]
+}

package/missions/data-scrape-basic.json

@@ -0,0 +1,19 @@
+{
+  "template": "data-scrape-basic",
+  "service_type": "data-scrape",
+  "tier": "basic",
+  "name": "Basic Data Scrape",
+  "description": "Extract up to 50 structured records from a single source. Includes data cleaning, deduplication, and export in CSV format. Ideal for quick lead lists or product catalogs.",
+  "default_price_usd": 9,
+  "estimated_hours": 2,
+  "skills_required": ["cashclaw-data-scraper"],
+  "deliverables": ["scraped-data.csv", "scrape-summary.json"],
+  "steps": [
+    "Validate target source URL and identify data structure",
+    "Configure scraper for target fields and pagination pattern",
+    "Extract up to 50 records with error handling and retries",
+    "Clean and normalize extracted data, remove duplicates",
+    "Export results as structured CSV with column headers",
+    "Generate scrape summary with record count and quality metrics"
+  ]
+}

package/missions/data-scrape-pro.json

@@ -0,0 +1,19 @@
+{
+  "template": "data-scrape-pro",
+  "service_type": "data-scrape",
+  "tier": "pro",
+  "name": "Pro Data Scrape",
+  "description": "Multi-source scraping of up to 500 records with cross-source deduplication, data enrichment (email, phone, LinkedIn), and export in CSV and JSON. Built for serious lead generation and market research.",
+  "default_price_usd": 25,
+  "estimated_hours": 6,
+  "skills_required": ["cashclaw-data-scraper"],
+  "deliverables": ["scraped-data.csv", "scraped-data.json", "enrichment-report.json", "scrape-summary.json"],
+  "steps": [
+    "Map multiple target sources and define unified data schema",
+    "Configure scrapers for each source with field mapping and pagination",
+    "Extract up to 500 records across all sources with parallel processing",
+    "Cross-source deduplication and record merging by matching keys",
+    "Enrich records with additional contact data, social profiles, and verification",
+    "Export clean dataset in CSV and JSON with enrichment quality report"
+  ]
+}

package/missions/email-outreach-basic.json

@@ -0,0 +1,19 @@
+{
+  "template": "email-outreach-basic",
+  "service_type": "email-outreach",
+  "tier": "basic",
+  "name": "Basic Email Outreach",
+  "description": "3-email cold outreach sequence with personalized subject lines, body copy, and clear CTAs. Ideal for quick lead generation campaigns targeting a single audience segment.",
+  "default_price_usd": 9,
+  "estimated_hours": 2,
+  "skills_required": ["cashclaw-email-outreach"],
+  "deliverables": ["outreach-sequence.json", "email-templates.html"],
+  "steps": [
+    "Analyze target audience and define outreach persona",
+    "Write initial cold email with personalized subject line and hook",
+    "Create follow-up email #2 with value-add angle",
+    "Write final email #3 with urgency-based CTA",
+    "Review sequence for spam trigger words and deliverability",
+    "Export formatted email templates ready for sending"
+  ]
+}

package/missions/email-outreach-pro.json

@@ -0,0 +1,19 @@
+{
+  "template": "email-outreach-pro",
+  "service_type": "email-outreach",
+  "tier": "pro",
+  "name": "Pro Email Outreach",
+  "description": "Full 7-email outreach sequence with A/B subject line variants, conditional follow-up branches, and performance tracking hooks. Covers multiple audience segments with tailored messaging.",
+  "default_price_usd": 29,
+  "estimated_hours": 8,
+  "skills_required": ["cashclaw-email-outreach"],
+  "deliverables": ["outreach-sequence-full.json", "email-templates.html", "ab-test-variants.json", "follow-up-logic.json"],
+  "steps": [
+    "Research target segments and build detailed outreach personas",
+    "Write 7-email sequence covering intro, value, proof, urgency, and breakup stages",
+    "Create A/B variants for subject lines and opening hooks",
+    "Design conditional follow-up branches based on open and reply signals",
+    "Optimize all copy for spam score and deliverability best practices",
+    "Export complete sequence with merge tags and tracking placeholders"
+  ]
+}

package/missions/landing-page-basic.json

@@ -0,0 +1,19 @@
+{
+  "template": "landing-page-basic",
+  "service_type": "landing-page",
+  "tier": "basic",
+  "name": "Basic Landing Page Copy",
+  "description": "Conversion-focused landing page copy including headline, subheadline, feature sections, social proof block, and a strong call-to-action. Text only, ready for your designer.",
+  "default_price_usd": 15,
+  "estimated_hours": 3,
+  "skills_required": ["cashclaw-landing-page"],
+  "deliverables": ["landing-page-copy.json", "copy-guidelines.txt"],
+  "steps": [
+    "Gather product details, target audience, and unique selling proposition",
+    "Write attention-grabbing headline and supporting subheadline",
+    "Create feature/benefit sections with concise persuasive copy",
+    "Draft social proof block with testimonial and trust signal placeholders",
+    "Write primary and secondary call-to-action copy",
+    "Export structured copy document with section labels and placement notes"
+  ]
+}

package/missions/landing-page-pro.json

@@ -0,0 +1,19 @@
+{
+  "template": "landing-page-pro",
+  "service_type": "landing-page",
+  "tier": "pro",
+  "name": "Pro Landing Page",
+  "description": "Complete landing page delivery with conversion-optimized copy, responsive HTML/CSS build, and two A/B variant layouts for split testing. Includes hero, features, testimonials, FAQ, and CTA sections.",
+  "default_price_usd": 39,
+  "estimated_hours": 8,
+  "skills_required": ["cashclaw-landing-page"],
+  "deliverables": ["landing-page-a.html", "landing-page-b.html", "copy-variants.json", "assets-guide.txt"],
+  "steps": [
+    "Research target audience pain points and map conversion journey",
+    "Write full-page copy covering hero, features, proof, FAQ, and CTA sections",
+    "Build responsive HTML/CSS landing page with clean semantic markup",
+    "Create A/B variant with alternate headline, layout order, and CTA placement",
+    "Optimize for page load speed and mobile responsiveness",
+    "Export both HTML variants with copy variant mapping and asset guidelines"
+  ]
+}

package/missions/reputation-audit.json

@@ -0,0 +1,19 @@
+{
+  "template": "reputation-audit",
+  "service_type": "reputation-management",
+  "tier": "basic",
+  "name": "Reputation Audit",
+  "description": "One-time reputation audit covering review platforms, social mentions, and sentiment analysis. Delivers a score-based report with risk areas highlighted and actionable improvement steps.",
+  "default_price_usd": 19,
+  "estimated_hours": 4,
+  "skills_required": ["cashclaw-reputation-manager"],
+  "deliverables": ["reputation-report.html", "sentiment-analysis.json", "review-summary.csv"],
+  "steps": [
+    "Scan major review platforms for brand mentions and ratings",
+    "Collect social media mentions and public comments",
+    "Run sentiment analysis on all collected reviews and mentions",
+    "Calculate overall reputation score and identify risk areas",
+    "Generate HTML report with sentiment breakdown and priority issues",
+    "Provide actionable recommendations for reputation improvement"
+  ]
+}

package/missions/reputation-monthly.json

@@ -0,0 +1,19 @@
+{
+  "template": "reputation-monthly",
+  "service_type": "reputation-management",
+  "tier": "pro",
+  "name": "Monthly Reputation Monitoring",
+  "description": "Ongoing monthly reputation monitoring with continuous review tracking, sentiment trend analysis, suggested response drafts for negative reviews, and a monthly executive summary report.",
+  "default_price_usd": 49,
+  "estimated_hours": 8,
+  "skills_required": ["cashclaw-reputation-manager"],
+  "deliverables": ["monthly-report.html", "sentiment-trends.json", "response-drafts.json", "alert-log.csv"],
+  "steps": [
+    "Set up continuous monitoring across review platforms and social channels",
+    "Track all new reviews, ratings, and brand mentions throughout the month",
+    "Run daily sentiment analysis and flag negative mentions for immediate response",
+    "Generate draft responses for negative and neutral reviews",
+    "Compile sentiment trend data and reputation score changes over time",
+    "Deliver monthly executive summary with insights, responses sent, and next actions"
+  ]
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "cashclaw",
-  "version": "1.0.2",
-  "description": "Turn your OpenClaw into a money-making machine",
+  "version": "1.2.0",
+  "description": "Turn your OpenClaw AI agent into a money-making machine — 12 skills, audit trails, security hardened",
   "type": "module",
   "bin": {
     "cashclaw": "./bin/cashclaw.js"
@@ -33,7 +33,14 @@
     "monetization",
     "stripe",
     "autonomous",
-    "hyrve"
+    "hyrve",
+    "email-outreach",
+    "competitor-analysis",
+    "landing-page",
+    "data-scraping",
+    "reputation-management",
+    "cold-email",
+    "web-scraping"
   ],
   "author": "Ertugrul Akben <i@ertugrulakben.com>",
   "license": "MIT",