git-paid 0.0.0-stage → 2.1.1

package/lib/fixer.js

@@ -0,0 +1,168 @@
+import fs from "node:fs";
+import path from "node:path";
+import { writePseoHtmlFiles } from "./pseo.js";
+
+/**
+ * Detects the static public folder of a local project (Next.js, Vite, Astro, SvelteKit, or generic).
+ */
+export function detectPublicDir(cwd = process.cwd()) {
+  const svelteStatic = path.join(cwd, "static");
+  const svelteConfig = path.join(cwd, "svelte.config.js");
+  if (fs.existsSync(svelteConfig) && fs.existsSync(svelteStatic)) {
+    return { framework: "SvelteKit", publicDir: svelteStatic };
+  }
+
+  let framework = "Static / Node";
+  if (fs.existsSync(path.join(cwd, "next.config.js")) || fs.existsSync(path.join(cwd, "next.config.mjs")) || fs.existsSync(path.join(cwd, "next.config.ts"))) {
+    framework = "Next.js";
+  } else if (fs.existsSync(path.join(cwd, "astro.config.mjs")) || fs.existsSync(path.join(cwd, "astro.config.ts"))) {
+    framework = "Astro";
+  } else if (fs.existsSync(path.join(cwd, "vite.config.js")) || fs.existsSync(path.join(cwd, "vite.config.ts")) || fs.existsSync(path.join(cwd, "vite.config.mjs"))) {
+    framework = "Vite";
+  }
+
+  const publicDir = path.join(cwd, "public");
+  return { framework, publicDir };
+}
+
+export function buildLlmsTxt(report) {
+  const kit = report.launchKit || {};
+  const lines = [
+    `# ${kit.brandName || kit.productName || report.domain}`,
+    ``,
+    `> ${kit.tagline || report.meta?.description || "Software platform and developer workflow tool."}`,
+    ``,
+    `- Canonical URL: ${report.targetUrl}`,
+    `- Verification & Press Contact: ${report.botEmail}`,
+    `- Category: ${kit.categories ? kit.categories.join(", ") : "Developer Tools, SaaS"}`,
+    ``,
+    `## Overview`,
+    `${kit.shortPitch || kit.longDescription || ""}`,
+    ``,
+    `## Key Comparison & Programmatic SEO Guides`,
+    ...(report.pseoPages || []).slice(0, 15).map(
+      (p) => `- [${p.keyword || p.path}](${report.targetUrl.replace(/\/$/, "")}${p.path || p.slug}): ${p.intent} guide (${p.volume || p.estMonthlySearches})`
+    ),
+    ``
+  ];
+  return lines.join("\n");
+}
+
+export function buildHeadSeoSnippet(report) {
+  const title = report.launchKit?.tagline
+    ? `${report.launchKit.brandName || report.launchKit.productName || report.domain} — ${report.launchKit.tagline}`
+    : report.meta?.title || report.domain;
+  const desc = report.launchKit?.shortPitch || report.meta?.description || "";
+  return `<!-- Generated by postbuild (git paid fix) for ${report.domain} -->
+<title>${title}</title>
+<meta name="description" content="${desc.replace(/"/g, "&quot;")}" />
+<link rel="canonical" href="${report.targetUrl}" />
+
+<!-- OpenGraph / Social Cards -->
+<meta property="og:type" content="website" />
+<meta property="og:site_name" content="${report.launchKit?.brandName || report.launchKit?.productName || report.domain}" />
+<meta property="og:title" content="${title.replace(/"/g, "&quot;")}" />
+<meta property="og:description" content="${desc.replace(/"/g, "&quot;")}" />
+<meta property="og:url" content="${report.targetUrl}" />
+<meta name="twitter:card" content="summary_large_image" />
+<meta name="twitter:title" content="${title.replace(/"/g, "&quot;")}" />
+<meta name="twitter:description" content="${desc.replace(/"/g, "&quot;")}" />
+
+<!-- Structured Data (JSON-LD) -->
+${report.artifacts?.jsonLd || ""}
+`;
+}
+
+export function applyLocalSeoFixes(report, options = {}) {
+  const cwd = options.cwd || process.cwd();
+  const overwritePublic = Boolean(options.overwritePublic);
+  const { framework, publicDir } = detectPublicDir(cwd);
+  fs.mkdirSync(publicDir, { recursive: true });
+
+  const outDir = path.join(cwd, ".postbuild");
+  fs.mkdirSync(outDir, { recursive: true });
+
+  const writtenFiles = [];
+
+  // 1. robots.txt in public/ (if missing or overwritePublic)
+  const robotsPath = path.join(publicDir, "robots.txt");
+  if (!fs.existsSync(robotsPath) || overwritePublic) {
+    fs.writeFileSync(robotsPath, report.artifacts.robotsTxt, "utf8");
+    writtenFiles.push({ path: path.relative(cwd, robotsPath), role: "AI + Search Crawler Rules (robots.txt)" });
+  }
+
+  // 2. sitemap.xml in public/ (if missing or overwritePublic)
+  const sitemapPath = path.join(publicDir, "sitemap.xml");
+  if (!fs.existsSync(sitemapPath) || overwritePublic) {
+    fs.writeFileSync(sitemapPath, report.artifacts.sitemapXml, "utf8");
+    writtenFiles.push({ path: path.relative(cwd, sitemapPath), role: "XML Sitemap with 25 pSEO Routes" });
+  }
+
+  // 3. llms.txt in public/ for AI Answer Engines (ChatGPT, Claude, Perplexity)
+  const llmsPath = path.join(publicDir, "llms.txt");
+  const llmsContent = buildLlmsTxt(report);
+  if (!fs.existsSync(llmsPath) || overwritePublic) {
+    fs.writeFileSync(llmsPath, llmsContent, "utf8");
+    writtenFiles.push({ path: path.relative(cwd, llmsPath), role: "AI Answer Engine Manifest (llms.txt)" });
+  }
+
+  // 4. Complete .postbuild bundle
+  const headSnippetPath = path.join(outDir, "head-seo-snippet.html");
+  fs.writeFileSync(headSnippetPath, buildHeadSeoSnippet(report), "utf8");
+  writtenFiles.push({ path: path.relative(cwd, headSnippetPath), role: "OpenGraph + Canonical + JSON-LD <head> Snippet" });
+
+  const sitemapOut = path.join(outDir, "sitemap.xml");
+  fs.writeFileSync(sitemapOut, report.artifacts.sitemapXml, "utf8");
+
+  const robotsOut = path.join(outDir, "robots.txt");
+  fs.writeFileSync(robotsOut, report.artifacts.robotsTxt, "utf8");
+
+  const llmsOut = path.join(outDir, "llms.txt");
+  fs.writeFileSync(llmsOut, llmsContent, "utf8");
+
+  const gateOut = path.join(outDir, "PostbuildCheckoutGate.jsx");
+  fs.writeFileSync(gateOut, report.artifacts.paywallCode, "utf8");
+  writtenFiles.push({ path: path.relative(cwd, gateOut), role: "Drop-in Stripe Checkout Paywall Component" });
+
+  const pseoJsonOut = path.join(outDir, "pseo-routes.json");
+  fs.writeFileSync(pseoJsonOut, JSON.stringify(report.pseoPages, null, 2), "utf8");
+  writtenFiles.push({ path: path.relative(cwd, pseoJsonOut), role: "25 Programmatic SEO Route Definitions (JSON)" });
+
+  // Render the 25 static HTML landing pages into .postbuild/pseo (and public/ if overwritePublic)
+  const pseoOutDir = path.join(outDir, "pseo");
+  const pseoRenderOpts = {
+    origin: report.targetUrl,
+    cleanName: report.cleanName || report.launchKit?.productName || report.domain,
+    domain: report.domain
+  };
+  const renderedPseo = writePseoHtmlFiles(report.pseoPages || [], pseoOutDir, pseoRenderOpts);
+  writtenFiles.push({
+    path: path.relative(cwd, pseoOutDir),
+    role: `${renderedPseo.length} Static Programmatic SEO HTML Landing Pages`
+  });
+
+  if (overwritePublic) {
+    writePseoHtmlFiles(report.pseoPages || [], publicDir, pseoRenderOpts);
+  }
+
+  const launchKitOut = path.join(outDir, "launch-kit.md");
+  fs.writeFileSync(launchKitOut, report.launchKit.longDescription, "utf8");
+  writtenFiles.push({ path: path.relative(cwd, launchKitOut), role: "Synthesized Launch Copy (HN, Product Hunt, Directories)" });
+
+  // 5. CSV export of all 85 directories with prefilled submission links
+  const csvHeader = "ID,Directory Name,Category,Domain Rating,Submission URL,Prefilled Launch URL,Auto-Fill\n";
+  const csvRows = (report.directories || []).map((d) => {
+    const q = (val) => `"${String(val || "").replace(/"/g, '""')}"`;
+    return [d.id, q(d.name), q(d.category), d.dr, q(d.submitUrl || d.url), q(d.prefilledUrl), d.auto ? "Yes" : "Manual"].join(",");
+  });
+  const csvOut = path.join(outDir, "directories-85.csv");
+  fs.writeFileSync(csvOut, csvHeader + csvRows.join("\n") + "\n", "utf8");
+  writtenFiles.push({ path: path.relative(cwd, csvOut), role: "85 Curated Directories CSV with Prefilled URLs" });
+
+  return {
+    framework,
+    publicDir: path.relative(cwd, publicDir) || "public",
+    outDir: path.relative(cwd, outDir) || ".postbuild",
+    writtenFiles
+  };
+}

package/lib/inbox.js

@@ -0,0 +1,216 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+
+const INBOX_STORE_PATH = path.join(os.tmpdir(), "postbuild-verification-inbox.json");
+
+function loadStore() {
+  try {
+    if (fs.existsSync(INBOX_STORE_PATH)) {
+      return JSON.parse(fs.readFileSync(INBOX_STORE_PATH, "utf8"));
+    }
+  } catch {}
+  return { messages: [] };
+}
+
+function saveStore(store) {
+  try {
+    fs.writeFileSync(INBOX_STORE_PATH, JSON.stringify(store, null, 2), "utf8");
+  } catch {}
+}
+
+/**
+ * Extracts confirmation/verification links and 4-to-8 digit OTP codes from email text/HTML.
+ */
+export function extractVerificationSignals(subject = "", text = "", html = "") {
+  const combined = `${subject}\n${text}\n${html.replace(/<[^>]+>/g, " ")}`;
+
+  // Extract all https:// URLs
+  const urlMatches = `${text}\n${html}`.match(/https?:\/\/[^\s"'<>)+]+/gi) || [];
+  const cleanedUrls = [...new Set(urlMatches.map((u) => u.replace(/[.,;!?]+$/, "")))];
+
+  const verificationKeywords = /verify|confirm|activate|token|magic|auth|validate|callback|accept|claim|submission|approve/i;
+  const verificationLinks = cleanedUrls.filter((u) => verificationKeywords.test(u));
+  const primaryLink = verificationLinks[0] || cleanedUrls[0] || null;
+
+  // Extract 6-digit OTP code (or 4-8 digit code near "code", "OTP", "PIN", "verification")
+  let otpCode = null;
+  const contextualOtp = combined.match(/(?:code|otp|pin|token|verification|confirm)[:\s#-]*([0-9]{4,8})\b/i);
+  if (contextualOtp) {
+    otpCode = contextualOtp[1];
+  } else {
+    const sixDigit = combined.match(/\b([0-9]{6})\b/);
+    if (sixDigit && !/^202[0-9]/.test(sixDigit[1])) {
+      otpCode = sixDigit[1];
+    }
+  }
+
+  return {
+    primaryLink,
+    verificationLinks: verificationLinks.length ? verificationLinks : cleanedUrls.slice(0, 3),
+    otpCode
+  };
+}
+
+/**
+ * Ingests an inbound email webhook payload (Resend `email.received`, Postmark, ForwardEmail, or raw JSON).
+ */
+export async function ingestInboundEmail(rawPayload = {}) {
+  const payload = rawPayload?.data && typeof rawPayload.data === "object" ? rawPayload.data : rawPayload;
+
+  let textBody = String(payload.text || payload.body || payload.rawText || "").trim();
+  let htmlBody = String(payload.html || "").trim();
+  let subject = String(payload.subject || "Confirm your directory submission").trim();
+
+  const resendEmailId = payload.email_id || payload.id;
+  const resendApiKey = (process.env.RESEND_API_KEY || "").trim();
+  if (resendEmailId && resendApiKey && !textBody && !htmlBody) {
+    try {
+      const resp = await fetch(`https://api.resend.com/emails/receiving/${encodeURIComponent(resendEmailId)}`, {
+        headers: { Authorization: `Bearer ${resendApiKey}` }
+      });
+      if (resp.ok) {
+        const fullEmail = await resp.json();
+        textBody = String(fullEmail.text || textBody).trim();
+        htmlBody = String(fullEmail.html || htmlBody).trim();
+        subject = String(fullEmail.subject || subject).trim();
+      }
+    } catch {}
+  }
+
+  const toRaw = payload.to || payload.recipient || payload.envelope?.to || "postbuild-bot@postbuild.dev";
+  const toAddress = (Array.isArray(toRaw) ? toRaw[0] : String(toRaw))
+    .replace(/^.*<([^>]+)>.*$/, "$1")
+    .trim()
+    .toLowerCase();
+
+  const fromRaw = payload.from || payload.sender || payload.envelope?.from || "no-reply@directory-verifier.com";
+  const fromAddress = String(fromRaw).trim();
+
+  const signals = extractVerificationSignals(subject, textBody, htmlBody);
+
+  const msg = {
+    id: resendEmailId || `msg_${Date.now()}_${Math.random().toString(36).slice(2, 7)}`,
+    to: toAddress,
+    from: fromAddress,
+    subject,
+    snippet: (textBody || htmlBody.replace(/<[^>]+>/g, " ")).slice(0, 220).trim(),
+    primaryLink: signals.primaryLink,
+    verificationLinks: signals.verificationLinks,
+    otpCode: signals.otpCode,
+    status: signals.primaryLink || signals.otpCode ? "action_ready" : "received",
+    receivedAt: payload.created_at || new Date().toISOString()
+  };
+
+  const store = loadStore();
+  const existsIdx = store.messages.findIndex((m) => m.id === msg.id);
+  if (existsIdx >= 0) {
+    store.messages[existsIdx] = msg;
+  } else {
+    store.messages.unshift(msg);
+  }
+  store.messages = store.messages.slice(0, 100);
+  saveStore(store);
+
+  return msg;
+}
+
+/**
+ * Syncs recent inbound emails directly from Resend Receiving API (`GET /emails/receiving`)
+ * so serverless cold starts never lose verification emails.
+ */
+async function syncFromResendReceivingApi(targetInbox = "") {
+  const resendApiKey = (process.env.RESEND_API_KEY || "").trim();
+  if (!resendApiKey) return;
+
+  try {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), 3500);
+    const resp = await fetch("https://api.resend.com/emails/receiving?limit=20", {
+      headers: { Authorization: `Bearer ${resendApiKey}` },
+      signal: controller.signal
+    });
+    clearTimeout(timer);
+    if (!resp.ok) return;
+
+    const data = await resp.json();
+    const items = Array.isArray(data?.data) ? data.data : Array.isArray(data) ? data : [];
+    const store = loadStore();
+    const knownIds = new Set(store.messages.map((m) => m.id));
+    const prefix = targetInbox ? targetInbox.split("@")[0].toLowerCase() : "";
+
+    for (const item of items.slice(0, 12)) {
+      const id = item.id || item.email_id;
+      if (!id || knownIds.has(id)) continue;
+
+      const toList = Array.isArray(item.to) ? item.to.join(" ").toLowerCase() : String(item.to || "").toLowerCase();
+      if (prefix && !toList.includes(prefix) && !toList.includes("postbuild.dev")) continue;
+
+      await ingestInboundEmail(item);
+    }
+  } catch {}
+}
+
+/**
+ * Lists verification emails for a given bot inbox address (e.g., postbuild-bot@postbuild.dev).
+ * Queries Resend Receiving API directly when RESEND_API_KEY is present, or syncs from postbuild.dev when run via local CLI.
+ */
+export async function listInboxMessages(inboxAddress = "", options = {}) {
+  const normalized = String(inboxAddress || "postbuild-bot@postbuild.dev").trim().toLowerCase();
+
+  if (process.env.RESEND_API_KEY) {
+    await syncFromResendReceivingApi(normalized);
+  } else if (options.allowRemoteFallback !== false && !process.env.VERCEL) {
+    try {
+      const controller = new AbortController();
+      const timer = setTimeout(() => controller.abort(), 3000);
+      const remoteResp = await fetch(
+        `https://www.postbuild.dev/api/dispatch?action=inbox_list&inbox=${encodeURIComponent(normalized)}`,
+        { signal: controller.signal }
+      );
+      clearTimeout(timer);
+      if (remoteResp.ok) {
+        const remoteData = await remoteResp.json();
+        if (Array.isArray(remoteData.messages) && remoteData.messages.length > 0) {
+          const store = loadStore();
+          const existingIds = new Set(store.messages.map((m) => m.id));
+          for (const rm of remoteData.messages) {
+            if (!existingIds.has(rm.id)) store.messages.push(rm);
+          }
+          saveStore(store);
+        }
+      }
+    } catch {}
+  }
+
+  const store = loadStore();
+  const filtered = normalized
+    ? store.messages.filter((m) => m.to === normalized || m.to.includes(normalized.split("@")[0]))
+    : store.messages;
+
+  return {
+    inboxAddress: normalized,
+    count: filtered.length,
+    messages: filtered
+  };
+}
+
+/**
+ * Generates a realistic test verification email so users can verify the inbox pipeline immediately.
+ */
+export async function sendTestVerificationEmail(inboxAddress = "postbuild-bot@postbuild.dev", domain = "postbuild.dev") {
+  const cleanInbox = String(inboxAddress || "postbuild-bot@postbuild.dev").trim().toLowerCase();
+  const otp = String(Math.floor(100000 + Math.random() * 900000));
+  const token = Buffer.from(`${domain}:${Date.now()}`).toString("base64url");
+  const verifyUrl = `https://postbuild.dev/?verified_directory=betalist&domain=${encodeURIComponent(domain)}&token=${token}`;
+
+  return ingestInboundEmail({
+    type: "email.received",
+    data: {
+      to: [cleanInbox],
+      from: "BetaList Launch Bot <verify@betalist.com>",
+      subject: `[Action Required] Verify ${domain} submission on BetaList (Code: ${otp})`,
+      text: `Hi ${domain} team,\n\nWe received your directory launch submission via postbuild. Your one-time verification code is ${otp}.\n\nOr click the instant confirmation link below to publish your listing immediately:\n${verifyUrl}\n`
+    }
+  });
+}