git-paid 2.1.3 → 2.1.4

package/README.md

@@ -2,11 +2,11 @@
 
 > **`git push` ships your code. `git paid` sells it.**
 >
-> Autonomous Post-Build Technical SEO, 25-Route Programmatic SEO Generator, Dedicated `@postbuild.dev` Verification Inbox, 85-Directory Launch Dispatcher, and Stateful MCP Server for AI Coding Agents.
+> Post-Build Technical SEO, 25-Route Structured SEO Generator, Dedicated `@postbuild.dev` Verification Inbox, 85-Directory Launch Kit & IndexNow Dispatcher, and Stateful MCP Server for AI Coding Agents.
 
-- **Web Studio & Live Audit**: [https://postbuild.dev](https://postbuild.dev)
-- **CLI Binary**: `npx git-paid` (or `npx postbuild`)
-- **MCP Server**: `npx git-paid mcp`
+- **Web Studio & Live Audit**: [https://www.postbuild.dev](https://www.postbuild.dev)
+- **CLI Binary**: `npx git-paid`
+- **MCP Server**: `npx -y git-paid mcp`
 
 ---
 
@@ -18,16 +18,16 @@ Run directly from your project root after deploying to Vercel, Railway, Render,
 # 1. Run a live technical SEO & monetization readiness audit
 npx git-paid https://your-app.com
 
-# 2. Auto-generate & write robots.txt, sitemap.xml, llms.txt, and 25 static Programmatic SEO HTML pages
+# 2. Auto-generate & write robots.txt, sitemap.xml, llms.txt, and 25 static SEO HTML pages
 npx git-paid fix https://your-app.com
 
-# 3. Dispatch your launch kit across 85 curated SaaS/AI directories with headless form inspection
+# 3. Prepare your launch kit across 85 curated SaaS/AI directories with IndexNow & form inspection
 npx git-paid submit https://your-app.com --limit 10
 
-# 4. Poll your dedicated @postbuild.dev verification inbox & auto-verify inbound confirmation links / OTPs
-npx git-paid inbox https://your-app.com --verify
+# 4. Poll your dedicated @postbuild.dev verification inbox for OTPs & confirmation links
+npx git-paid inbox https://your-app.com
 
-# 5. Install agent skill files (.agent/skills/postbuild/SKILL.md & CLAUDE.md) into your repository
+# 5. Install agent skill files (.agent/skills/postbuild/SKILL.md) into your repository
 npx git-paid skill
 ```
 
@@ -42,30 +42,30 @@ git paid https://your-app.com
 
 ## What `git-paid` Automates After You Ship
 
-| Capability | Manual Post-Build Workflow | `git-paid` (`postbuild.dev`) |
+| Capability | Manual Post-Build Workflow | `git-paid` (`www.postbuild.dev`) |
 | :--- | :--- | :--- |
 | **Technical & AI Search SEO** | Hand-writing meta tags, JSON-LD, and crawler rules | Writes `robots.txt` (`OAI-SearchBot`, `PerplexityBot`, `ClaudeBot`), `sitemap.xml`, `llms.txt`, and `SoftwareApplication` JSON-LD in 1 command |
-| **25 Programmatic SEO Pages** | Days of keyword research and static page coding | Pre-renders 25 high-intent `/use-cases/*`, `/compare/*`, `/calculators/*`, `/guides/*`, `/templates/*`, `/alternatives/*`, and `/checklists/*` HTML landing pages |
-| **85-Directory Dispatch** | 14+ hours of repetitive form filling & UTM tagging | Synthesizes Show HN / Product Hunt / directory copy and dispatches via `git paid submit` |
-| **Verification Inbox (`@postbuild.dev`)** | Clutters personal inbox with 85+ confirmation emails | Provisions `<slug>-bot@postbuild.dev`, extracts 6-digit OTPs, and auto-clicks verification URLs |
-| **Self-Serve Stripe Checkout Gate** | Custom billing boilerplate | Drop-in `PostbuildCheckoutGate.jsx` + Customer Billing Portal & receipt management |
+| **25 Structured SEO Pages** | Days of keyword research and static page coding | Pre-renders 25 `/use-cases/*`, `/compare/*`, `/calculators/*`, `/guides/*`, `/templates/*`, `/alternatives/*`, and `/checklists/*` HTML landing pages |
+| **85-Directory Launch Kit** | Hours of repetitive copy-pasting & UTM tagging | Synthesizes Show HN / Product Hunt / directory copy, generates 85 prefilled submission links, and pings IndexNow & WebSub |
+| **Verification Inbox (`@postbuild.dev`)** | Clutters personal inbox with 85+ confirmation emails | Provisions isolated `<slug>-<hash>@postbuild.dev`, extracts 6-digit OTPs, and surfaces confirmation links |
+| **Self-Serve Stripe Checkout Gate** | Custom billing boilerplate | Drop-in `<CheckoutGate />` component + `/api/checkout.js` server route template |
 
 ---
 
-## Stateful MCP Server (`npx git-paid mcp`)
+## Stateful MCP Server (`npx -y git-paid mcp`)
 
 `git-paid` includes a built-in **Stateful Model Context Protocol (MCP) Server** over `stdio` (JSON-RPC 2.0) designed for **Claude Code**, **Cursor**, **Windsurf**, and **Google Antigravity / Gemini**.
 
 Unlike stateless MCP servers that re-serialize identical directory lists and SEO payloads on every turn, the Postbuild MCP middleware provides:
 
 1. **Watermark Context Residuals (`unchanged@vN` / `updated@vN`)**:
-   - Turn 1 projects clean entity stubs; Turn 2+ emits lightweight `@vN` watermark deltas for unchanged records, cutting multi-turn token consumption by **75% to 84%**.
+   - Turn 1 projects clean entity stubs; Turn 2+ emits lightweight `@vN` watermark deltas for unchanged records, reducing multi-turn token consumption in benchmarked multi-turn sessions.
 2. **In-Memory Superset Query Cache (`<1ms` Latency)**:
    - Follow-up filtered tool calls (`category`, `min_da`, `status`, `limit`) resolve in-memory in `<1ms` with zero redundant network round-trips.
 3. **Two-Phase Cryptographic OCC Write Guard (`ct_...`)**:
    - Live directory dispatch mutations require a Phase 1 dry-run (`dry_run: true`) that issues an HMAC-signed `commit_token` (`ct_...`) before Phase 2 commits the launch state.
 4. **Untrusted Content Spotlighting**:
-   - External scraped metadata and inbound email bodies are automatically wrapped in `<<<UNTRUSTED_CONTENT_DATA_ONLY: ... >>>` delimiters to prevent indirect prompt injection.
+   - External scraped metadata and all inbound email fields (`from`, `subject`, `snippet`, `primaryLink`, `otpCode`) are wrapped in `<<<UNTRUSTED_CONTENT_DATA_ONLY: ... >>>` delimiters to prevent indirect prompt injection.
 
 ### Available MCP Tools
 
@@ -73,11 +73,11 @@ Unlike stateless MCP servers that re-serialize identical directory lists and SEO
 | :--- | :--- |
 | `postbuild_scan` | Audits any live URL (8 technical/AI SEO & paywall checks), synthesizes launch copy, and caches working-set state. |
 | `postbuild_directories` | Queries the 85-directory catalog using the in-memory superset cache and `@vN` watermark deltas. |
-| `postbuild_pseo` | Queries and filters the 25 programmatic SEO routes with stateful delta compaction. |
+| `postbuild_pseo` | Queries and filters the 25 structured SEO routes with stateful delta compaction. |
 | `postbuild_dispatch` | Executes Two-Phase Cryptographic OCC directory dispatch (`dry_run: true` → `commit_token` → commit). |
-| `postbuild_inbox` | Polls `<slug>-bot@postbuild.dev`, extracts 6-digit OTPs, and auto-verifies inbound confirmation links. |
+| `postbuild_inbox` | Polls `<slug>-<hash>@postbuild.dev`, extracts 6-digit OTPs, and optionally verifies allowlisted confirmation links. |
 | `postbuild_fix` | Writes `robots.txt`, `sitemap.xml`, `llms.txt`, `.postbuild/pseo/*.html`, and `PostbuildCheckoutGate.jsx` to disk. |
-| `postbuild_vault_sync` | Syncs live SEO scores, directory status, inbox OTPs, and MCP telemetry into an **Obsidian VaultOS** dashboard. |
+| `postbuild_vault_sync` | Writes `LAUNCH_STATUS.md` and `.postbuild/telemetry.json` to your project repo (or syncs into an Obsidian VaultOS dashboard if `.obsidian/` is present). |
 
 ### MCP Configuration (`mcp_config.json` / `.cursor/mcp.json` / `claude_desktop_config.json`)
 
@@ -94,20 +94,8 @@ Unlike stateless MCP servers that re-serialize identical directory lists and SEO
 
 ---
 
-## Obsidian VaultOS Integration
-
-Sync your live project launches directly into your **Obsidian VaultOS** command center:
-
-```bash
-npx git-paid vault https://your-app.com --vault "C:/Users/You/ObsidianVault"
-```
-
-Writes `_meta/postbuild-telemetry.json` and `_dashboards/Postbuild Launch.md` with live SEO readiness scores, 85-directory dispatch progress, `@postbuild.dev` OTP logs, and Buyer Intent Radar threads.
-
----
-
 ## License
 
-**Apache-2.0** — Copyright © 2026 Bennett Moore ([https://postbuild.dev](https://postbuild.dev)).
+**Apache-2.0** — Copyright © 2026 Bennett Moore ([https://www.postbuild.dev](https://www.postbuild.dev)).
 
-The `git-paid` CLI and MCP client are licensed under the [Apache License, Version 2.0](./LICENSE). Under Section 6 of the Apache-2.0 License, no permission is granted to use the `postbuild`, `git-paid`, or `postbuild.dev` trade names, trademarks, or logos. The hosted `postbuild.dev` cloud service, `@postbuild.dev` verification inbox infrastructure, and commercial Launch Pass / Studio tiers remain proprietary services of [https://postbuild.dev](https://postbuild.dev).
+The `git-paid` CLI and MCP client are licensed under the [Apache License, Version 2.0](./LICENSE). Under Section 6 of the Apache-2.0 License, no permission is granted to use the `postbuild`, `git-paid`, or `postbuild.dev` trade names, trademarks, or logos. The hosted `postbuild.dev` cloud service, `@postbuild.dev` verification inbox infrastructure, and commercial Launch Pass / Studio tiers remain proprietary services of [https://www.postbuild.dev](https://www.postbuild.dev).

package/bin/git-paid.js

@@ -45,10 +45,10 @@ async function runCli() {
     console.log("    git paid login <pb_live_key>   Authenticate CLI & MCP with your Launch Pass / Studio license");
     console.log("    git paid fix [url]             [PRO] Write 25 pSEO HTML pages, robots.txt, sitemap.xml & llms.txt");
     console.log("    git paid submit [url]          [PRO] Headless 85-directory form submitter + OTP auto-verifier");
-    console.log("    git paid inbox [bot-email]     [PRO] Check & auto-verify <slug>-bot@postbuild.dev links & OTPs");
-    console.log("    git paid mcp                   Start Postbuild MCP Server (postbuild-mcp v2.1.3)");
+    console.log("    git paid inbox [bot-email]     [PRO] Check & auto-verify <domain-tld>-bot@postbuild.dev (e.g. acme-com-bot@) links & OTPs");
+    console.log("    git paid mcp                   Start Postbuild MCP Server (postbuild-mcp v2.1.4)");
     console.log("    git paid init-agent            Scaffold .agent/skills/postbuild/SKILL.md & MCP config");
-    console.log("    git paid vault [path]          [PRO] Sync live telemetry & Bento cockpit to Obsidian VaultOS\n");
+    console.log("    git paid vault [path]          [PRO] Sync live telemetry & Bento dashboard to Obsidian VaultOS\n");
     process.exit(0);
   }
 
@@ -125,11 +125,11 @@ async function runCli() {
     });
     console.log(`  [+] Headless Browser Engine: ${submitRes.headlessBrowser}`);
     console.log(`  [+] Provisioned Bot Inbox:   ${submitRes.botEmail}`);
-    console.log(`  [+] Total Directories Pinged:${submitRes.totalDirectoriesDispatched}\n`);
+    console.log(`  [+] Total Directories Ready: ${submitRes.totalDirectoriesPrepared || submitRes.totalDirectoriesDispatched}\n`);
     console.log("  --- Headless Form Inspection & Submission Receipts ---");
     for (const r of submitRes.formReceipts) {
       console.log(
-        `  [SUBMIT] ${r.name.padEnd(24)} (DR ${r.dr}) via ${r.engineUsed} -> Fields: [${r.mappedFields.slice(0, 5).join(", ")}]`
+        `  [INSPECT] ${r.name.padEnd(23)} (DR ${r.dr}) via ${r.engineUsed} -> Fields: [${r.mappedFields.slice(0, 5).join(", ")}]`
       );
     }
     console.log("\n  --- @postbuild.dev Inbox Auto-Verification ---");
@@ -150,7 +150,7 @@ async function runCli() {
   if (subcmd === "init-agent" || subcmd === "agent" || subcmd === "skill") {
     const res = installAgentSkillFiles({ cwd: process.cwd() });
     console.log(`  [+] Scaffolded Agent Skill: ${res.skillMdPath}`);
-    console.log(`  [+] Powered by:             postbuild-mcp@2.1.3 (Stateful Delta Compaction)\n`);
+    console.log(`  [+] Powered by:             postbuild-mcp@2.1.4 (Stateful Delta Compaction)\n`);
     console.log("  Add this to your Claude Code / Cursor / Antigravity MCP config:\n");
     console.log(JSON.stringify(res.mcpConfigSnippet, null, 2));
     console.log("");
@@ -160,19 +160,19 @@ async function runCli() {
   if (subcmd === "vault" || subcmd === "vaultos") {
     const license = await verifyCliLicense({ domain: "postbuild.dev" });
     if (!license.valid) {
-      printProGateBanner(license, "Obsidian VaultOS Telemetry & Bento Dashboard Sync");
+      printProGateBanner(license, "Markdown / Docs & Telemetry Sync");
       process.exit(1);
     }
 
     const vaultArg =
       args.find((a, i) => i > 0 && !a.startsWith("--") && !/^https?:\/\//i.test(a)) ||
-      "C:\\Users\\Bennett\\Bennett Labs";
+      process.cwd();
     const urlArgs = args.filter((a, i) => i > 0 && /^https?:\/\//i.test(a));
-    const targetUrls = urlArgs.length ? urlArgs : ["https://postbuild.dev", "https://payarity.com"];
+    const targetUrls = urlArgs.length ? urlArgs : ["https://postbuild.dev"];
 
-    console.log(`  [*] Syncing Postbuild MCP Telemetry to Obsidian VaultOS...`);
-    console.log(`  [*] Target Vault: ${vaultArg}`);
-    console.log(`  [*] Domains:      ${targetUrls.join(", ")}\n`);
+    console.log(`  [*] Syncing Postbuild MCP Telemetry & Launch Status...`);
+    console.log(`  [*] Target Directory: ${vaultArg}`);
+    console.log(`  [*] Domains:          ${targetUrls.join(", ")}\n`);
 
     const syncRes = await syncPostbuildToVault({
       vaultPath: vaultArg,
@@ -184,7 +184,7 @@ async function runCli() {
         `  [OK] ${p.domain.padEnd(20)} Score: ${p.readinessScore}/100 | pSEO: ${p.pseoCount} | Dirs: ${p.directoryCount} | MCP: ${p.mcpReductionPct}`
       );
     }
-    console.log("\n  --- VaultOS Files Updated ---");
+    console.log("\n  --- Files Updated ---");
     for (const f of syncRes.writtenVaultFiles) {
       console.log(`  [WRITE] ${f}`);
     }
@@ -210,7 +210,7 @@ async function runCli() {
     if (args.includes("--test")) {
       await sendTestVerificationEmail(inboxAddr, "postbuild.dev");
     }
-    const res = await autoVerifyInboxLinks(inboxAddr);
+    const res = await autoVerifyInboxLinks(inboxAddr, { autoVerify: !args.includes("--no-verify") });
     console.log(
       `  [*] Verification Inbox: ${res.inboxAddress} (${res.totalMessages} messages, ${res.verifiedCount} auto-verified)\n`
     );