git-paid 2.1.6 → 2.1.8

package/lib/guard.js

@@ -3,10 +3,24 @@
  */
 
 import crypto from "node:crypto";
-import { verifyLicenseToken, checkStripeCustomerStatusCached, getFounderEmailsSet } from "./auth.js";
+import dns from "node:dns/promises";
+import {
+  verifyLicenseToken,
+  checkStripeCustomerStatusCached,
+  getFounderEmailsSet,
+  getDomainVerificationToken,
+  getCandidateVerificationTokens,
+  isSameDomainVerifiedEmail,
+  isFreeEmailDomain
+} from "./auth.js";
 import { getBotInboxForDomain, normalizeInboxInput } from "./inbox.js";
+import { safeFetch } from "./safe-fetch.js";
+
+export { getDomainVerificationToken };
 
 const rateLimitBuckets = new Map(); // `${bucket}:${ip}` -> { count: number, resetAt: number }
+const verifiedDomainCache = new Map(); // `${domain}:${email}` -> { verifiedAt: number, method: string }
+const failedDomainCache = new Map(); // `${domain}:${email}` -> { failedAt: number, payload: object }
 
 const ALLOWED_ORIGINS = new Set([
   "https://www.postbuild.dev",
@@ -195,6 +209,194 @@ export function checkRateLimit(req, bucket = "default", limitPerMinute = 20) {
   };
 }
 
+export function hasVerificationMetaTagInHead(rawHtml = "", expectedTokens = []) {
+  const tokenSet = new Set(Array.isArray(expectedTokens) ? expectedTokens : [expectedTokens]);
+  if (!rawHtml || tokenSet.size === 0) return false;
+  const headMatch = String(rawHtml).match(/<head\b[^>]*>([\s\S]*?)<\/head>/i);
+  const rawHeadHtml = headMatch ? headMatch[1] : String(rawHtml).split(/<body\b/i)[0] || "";
+  const sanitizedHeadHtml = rawHeadHtml
+    .replace(/<!--[\s\S]*?-->/g, "")
+    .replace(/<(title|script|style|noscript|template|textarea)\b[^>]*>[\s\S]*?<\/\1>/gi, "");
+  const metaTags = sanitizedHeadHtml.match(/<meta\b[^>]*>/gi) || [];
+  for (const tag of metaTags) {
+    const nameMatch = tag.match(/\bname\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s>"']+))/i);
+    const contentMatch = tag.match(/\bcontent\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s>"']+))/i);
+    const metaName = (nameMatch?.[1] ?? nameMatch?.[2] ?? nameMatch?.[3] ?? "").trim().toLowerCase();
+    const metaContent = (contentMatch?.[1] ?? contentMatch?.[2] ?? contentMatch?.[3] ?? "").trim();
+    if (metaName === "postbuild-verification" && tokenSet.has(metaContent)) {
+      return true;
+    }
+  }
+  return false;
+}
+
+export async function verifyDomainOwnership(verified, requestedDomain = "", options = {}) {
+  if (!verified || !verified.valid) {
+    return { verified: false, method: "none", error: "Authentication required." };
+  }
+
+  const cleanDomain = String(requestedDomain || verified.domain || "")
+    .toLowerCase()
+    .trim()
+    .replace(/^https?:\/\//, "")
+    .replace(/^www\./, "")
+    .split("/")[0]
+    .split(":")[0];
+  const cleanEmail = String(verified.email || "").toLowerCase().trim();
+  if (!cleanDomain || !cleanDomain.includes(".")) {
+    return { verified: false, method: "none", error: "Valid project domain required." };
+  }
+
+  const expectedToken = getDomainVerificationToken(cleanDomain, cleanEmail);
+  const candidateTokens = getCandidateVerificationTokens(cleanDomain, cleanEmail);
+  const emailDomain = cleanEmail.includes("@") ? cleanEmail.split("@")[1] : "";
+
+  // 1. Operator for postbuild.dev or OTP/email-verified non-freemail address on the same domain
+  if (isSameDomainVerifiedEmail(cleanEmail, cleanDomain, Boolean(verified.emailVerified))) {
+    return {
+      verified: true,
+      method: "email_domain",
+      domain: cleanDomain,
+      verificationToken: expectedToken
+    };
+  }
+
+  const cacheKey = `${cleanDomain}:${cleanEmail}`;
+  const cached = verifiedDomainCache.get(cacheKey);
+  if (cached && Date.now() - cached.verifiedAt < 3600 * 1000) {
+    return {
+      verified: true,
+      method: cached.method,
+      domain: cleanDomain,
+      verificationToken: expectedToken
+    };
+  }
+
+  if (!options.forceFresh && !options.resolveTxtFn && !options.fetchFn) {
+    const negCached = failedDomainCache.get(cacheKey);
+    if (negCached && Date.now() - negCached.failedAt < 60 * 1000) {
+      return negCached.payload;
+    }
+  }
+
+  const resolveTxt = options.resolveTxtFn || ((host) => dns.resolveTxt(host));
+  const fetchUrl =
+    options.fetchFn ||
+    ((url) => safeFetch(url, { timeoutMs: 4500, maxBytes: 256 * 1024, truncateOnMaxBytes: true }));
+
+  let dnsCheckDetail = `No matching TXT record on _postbuild.${cleanDomain}`;
+  let wellKnownCheckDetail = "Not found";
+  let htmlMetaCheckDetail = "No matching <meta> tag in homepage <head>";
+
+  // 2. Check DNS TXT on _postbuild.<domain> or <domain>
+  for (const host of [`_postbuild.${cleanDomain}`, cleanDomain]) {
+    try {
+      const records = await resolveTxt(host);
+      if (Array.isArray(records)) {
+        const flat = records.map((chunks) => (Array.isArray(chunks) ? chunks.join("") : String(chunks)).trim());
+        if (flat.some((r) => candidateTokens.some((tok) => r === tok || r.includes(tok)))) {
+          failedDomainCache.delete(cacheKey);
+          verifiedDomainCache.set(cacheKey, { verifiedAt: Date.now(), method: "dns_txt" });
+          return {
+            verified: true,
+            method: "dns_txt",
+            domain: cleanDomain,
+            verificationToken: expectedToken
+          };
+        }
+      }
+    } catch {}
+  }
+
+  // 3a. Check https://<domain>/.well-known/postbuild-verify.txt (strict line match)
+  try {
+    const resp = await fetchUrl(`https://${cleanDomain}/.well-known/postbuild-verify.txt`);
+    if (resp && resp.ok) {
+      const text = typeof resp.text === "function" ? await resp.text() : String(resp.body || "");
+      const lines = String(text || "").split(/\r?\n/).map((l) => l.trim());
+      if (candidateTokens.some((tok) => lines.includes(tok))) {
+        failedDomainCache.delete(cacheKey);
+        verifiedDomainCache.set(cacheKey, { verifiedAt: Date.now(), method: "well_known_file" });
+        return {
+          verified: true,
+          method: "well_known_file",
+          domain: cleanDomain,
+          verificationToken: expectedToken
+        };
+      }
+      wellKnownCheckDetail = "File returned 200 OK without matching token";
+    } else if (resp && resp.status) {
+      wellKnownCheckDetail = `HTTP ${resp.status}`;
+    }
+  } catch {
+    wellKnownCheckDetail = "Unreachable or timed out";
+  }
+
+  // 3b. Check https://<domain>/ for <meta name="postbuild-verification" content="..."> inside <head>
+  try {
+    const resp = await fetchUrl(`https://${cleanDomain}/`);
+    if (resp && resp.ok) {
+      const text = typeof resp.text === "function" ? await resp.text() : String(resp.body || "");
+      if (hasVerificationMetaTagInHead(text, candidateTokens)) {
+        failedDomainCache.delete(cacheKey);
+        verifiedDomainCache.set(cacheKey, { verifiedAt: Date.now(), method: "html_meta" });
+        return {
+          verified: true,
+          method: "html_meta",
+          domain: cleanDomain,
+          verificationToken: expectedToken
+        };
+      }
+      htmlMetaCheckDetail = "Homepage 200 OK — <meta name=\"postbuild-verification\"> not found in <head>";
+    } else if (resp && resp.status) {
+      htmlMetaCheckDetail = `HTTP ${resp.status}`;
+    }
+  } catch {
+    htmlMetaCheckDetail = "Homepage unreachable or timed out";
+  }
+
+  const isFree = isFreeEmailDomain(emailDomain);
+  const sameDomainUnconfirmed = Boolean(
+    emailDomain && !isFree && (cleanDomain === emailDomain || cleanDomain.endsWith(`.${emailDomain}`)) && !verified.emailVerified
+  );
+
+  const emailDomainStatus = !emailDomain
+    ? "No account email"
+    : isFree
+      ? `Personal email (${emailDomain}) requires domain proof`
+      : sameDomainUnconfirmed
+        ? "Confirm your email via 6-digit code to unlock automatically"
+        : `Account email (@${emailDomain}) differs from ${cleanDomain}`;
+
+  const failurePayload = {
+    verified: false,
+    method: "none",
+    domain: cleanDomain,
+    verificationToken: expectedToken,
+    sameDomainUnconfirmed,
+    checkedAt: new Date().toISOString(),
+    checks: {
+      emailDomain: emailDomainStatus,
+      dnsTxt: dnsCheckDetail,
+      wellKnownFile: wellKnownCheckDetail,
+      htmlMeta: htmlMetaCheckDetail
+    },
+    dnsHost: `_postbuild.${cleanDomain}`,
+    wellKnownPath: "/.well-known/postbuild-verify.txt",
+    metaTag: `<meta name="postbuild-verification" content="${expectedToken}" />`,
+    error: `Domain ownership proof required for ${cleanDomain} before reading ${getBotInboxForDomain(cleanDomain, cleanEmail)}. Deploy /.well-known/postbuild-verify.txt (included in your Launch Bundle .zip), add <meta name="postbuild-verification" content="${expectedToken}" /> to your homepage <head>, add DNS TXT record _postbuild.${cleanDomain} = ${expectedToken}, or sign in via 6-digit code with an @${cleanDomain} email.`
+  };
+
+  if (!options.resolveTxtFn && !options.fetchFn) {
+    failedDomainCache.set(cacheKey, { failedAt: Date.now(), payload: failurePayload });
+  }
+
+  return failurePayload;
+}
+
 export function resetRateLimitsForTests() {
   rateLimitBuckets.clear();
+  verifiedDomainCache.clear();
+  failedDomainCache.clear();
 }
+

package/lib/inbox.js

@@ -155,7 +155,8 @@ export function sanitizeSubjectForDisplay(subject = "", otpCode = "") {
  * Ingests a verified inbound email webhook payload.
  * Rejects mail addressed to unknown or non-@postbuild.dev recipients.
  */
-export async function ingestInboundEmail(rawPayload = {}) {
+export async function ingestInboundEmail(rawPayload = {}, options = {}) {
+  const { fromWebhook = true } = options || {};
   const payload = rawPayload?.data && typeof rawPayload.data === "object" ? rawPayload.data : rawPayload;
 
   const toRaw = payload.to || payload.recipient || payload.envelope?.to || "";
@@ -194,6 +195,40 @@ export async function ingestInboundEmail(rawPayload = {}) {
   const fromRaw = payload.from || payload.sender || payload.envelope?.from || "no-reply@directory-verifier.com";
   const fromAddress = String(fromRaw).trim();
 
+  // Forward inbound customer support replies (support@postbuild.dev / login@postbuild.dev) to founder email only on webhook path
+  if (toAddress === "support@postbuild.dev" || toAddress === "login@postbuild.dev") {
+    if (fromWebhook && resendApiKey) {
+      const forwardTarget = (process.env.ADMIN_FORWARD_EMAIL || process.env.ADMIN_EMAIL || "").trim();
+      if (forwardTarget && forwardTarget.includes("@")) {
+        try {
+          await fetch("https://api.resend.com/emails", {
+            method: "POST",
+            headers: {
+              Authorization: `Bearer ${resendApiKey}`,
+              "Content-Type": "application/json"
+            },
+            body: JSON.stringify({
+              from: "postbuild Support <login@postbuild.dev>",
+              reply_to: fromAddress,
+              to: [forwardTarget],
+              subject: `[Support ${toAddress}] ${subject}`,
+              text: `From: ${fromAddress}\nTo: ${toAddress}\nSubject: ${subject}\n\n${textBody || htmlBody}`
+            }),
+            signal: AbortSignal.timeout(4500)
+          });
+        } catch {}
+      }
+    }
+    return {
+      id: resendEmailId || `support_${Date.now()}`,
+      to: toAddress,
+      from: fromAddress,
+      subject,
+      status: "forwarded",
+      receivedAt: new Date().toISOString()
+    };
+  }
+
   const signals = extractVerificationSignals(subject, textBody, htmlBody);
   const displaySubject = sanitizeSubjectForDisplay(subject, signals.otpCode);
   const receivedDate = payload.created_at ? new Date(payload.created_at) : new Date();
@@ -265,7 +300,7 @@ async function syncFromResendReceivingApi(targetInbox = "") {
         } catch {}
       }
 
-      await ingestInboundEmail(fullItem);
+      await ingestInboundEmail(fullItem, { fromWebhook: false });
     }
   } catch {}
 }
@@ -295,11 +330,11 @@ export async function listInboxMessages(inboxAddress = "", options = {}) {
           headers: {
             Authorization: `Bearer ${options.bearerToken}`
           },
-          signal: AbortSignal.timeout(3000)
+          signal: AbortSignal.timeout(10000)
         }
       );
+      const remoteData = await remoteResp.json().catch(() => ({}));
       if (remoteResp.ok) {
-        const remoteData = await remoteResp.json();
         if (Array.isArray(remoteData.messages)) {
           for (const rm of remoteData.messages) {
             if (rm && rm.id && rm.to === normalized) {
@@ -308,6 +343,16 @@ export async function listInboxMessages(inboxAddress = "", options = {}) {
           }
           persistMessages();
         }
+      } else if (remoteResp.status === 403 && remoteData && remoteData.requiresDomainVerification) {
+        return {
+          inboxAddress: normalized,
+          retentionDays: 30,
+          count: 0,
+          messages: [],
+          requiresDomainVerification: true,
+          verificationToken: remoteData.verificationToken || "",
+          error: remoteData.error || "Domain ownership verification required before reading this inbox."
+        };
       }
     } catch {}
   }

package/lib/mcp.js

@@ -182,6 +182,9 @@ export async function autoVerifyInboxLinks(inboxAddress = "", options = {}) {
 
   return {
     inboxAddress: res.inboxAddress,
+    requiresDomainVerification: Boolean(res.requiresDomainVerification),
+    verificationToken: res.verificationToken || "",
+    error: res.error || "",
     totalMessages: verificationResults.length,
     verifiedCount: verificationResults.filter((x) => x.autoVerified).length,
     extractedOtps: verificationResults
@@ -893,6 +896,16 @@ export async function executeMcpToolCall(name, args = {}, sessionId = "mcp-stdio
       bearerToken: license.token
     });
 
+    if (result.requiresDomainVerification) {
+      return {
+        isError: true,
+        status: "DOMAIN_VERIFICATION_REQUIRED",
+        inboxAddress: result.inboxAddress,
+        verificationToken: result.verificationToken,
+        message: result.error || "Verify ownership of your domain on https://www.postbuild.dev/?tab=account before reading this inbox."
+      };
+    }
+
     const compacted = mcpInbox.compactList({
       sessionId,
       records: result.messages || []
@@ -923,7 +936,8 @@ export async function executeMcpToolCall(name, args = {}, sessionId = "mcp-stdio
 
     const fixRes = applyLocalSeoFixes(report, {
       cwd: args.cwd || process.cwd(),
-      overwritePublic: true
+      overwritePublic: true,
+      verificationToken: license.verificationToken || ""
     });
     return fixRes;
   }

package/lib/pseo.js

@@ -263,7 +263,7 @@ export function renderSinglePseoPage(page, allPages = [], options = {}) {
   <meta name="twitter:title" content="${escapeHtml(fullTitle)}" />
   <meta name="twitter:description" content="${escapeHtml(metaDescription)}" />
   <link rel="icon" type="image/svg+xml" href="/brand/postbuild-icon.svg" />
-  <script type="application/ld+json">${JSON.stringify(jsonLd)}</script>
+  <script type="application/ld+json">${JSON.stringify(jsonLd).replace(/</g, "\\u003c")}</script>
   <script>
     window.si = window.si || function () { (window.siq = window.siq || []).push(arguments); };
   </script>
@@ -638,7 +638,7 @@ export function renderSinglePseoPage(page, allPages = [], options = {}) {
 
     <footer class="site-footer">
       <div>
-        <strong>postbuild.dev</strong> (<code>git-paid</code> v2.1.5) — Post-build SEO, directory launch kit &amp; verification inbox.
+        <strong>postbuild.dev</strong> (<code>git-paid</code> v2.1.6) — Post-build SEO, directory launch kit &amp; verification inbox.
       </div>
       <div style="display:flex;gap:14px;flex-wrap:wrap;">
         <a href="/">Home &amp; Audit</a>
@@ -663,19 +663,213 @@ export function renderSinglePseoPage(page, allPages = [], options = {}) {
 </html>`;
 }
 
+export function renderBuyerStarterPseoPage(page, allPages = [], options = {}) {
+  const cleanDomain = String(options.domain || "example.com")
+    .toLowerCase()
+    .trim()
+    .replace(/^https?:\/\//, "")
+    .replace(/^www\./, "")
+    .split("/")[0];
+  const cleanOrig = String(options.origin || `https://${cleanDomain}`).replace(/\/$/, "");
+  const prodName = String(options.cleanName || cleanDomain).trim();
+  const canonicalUrl = `${cleanOrig}${page.path}`;
+  const cat = page.category || page.volume || "Guide";
+  const cleanHeading = String(page.keyword || humanizeSlug(page.path, prodName).title);
+  const pageTitle = cleanHeading.toLowerCase().includes(prodName.toLowerCase())
+    ? cleanHeading
+    : `${cleanHeading} | ${prodName}`;
+
+  const rawTagline = String(options.tagline || "").trim();
+  const tagline =
+    rawTagline &&
+    rawTagline.toLowerCase() !== prodName.toLowerCase() &&
+    !rawTagline.toLowerCase().includes(`(${cleanDomain})`)
+      ? rawTagline
+      : "";
+
+  const shortPitch = String(options.shortPitch || options.description || "").trim();
+  const summaryText =
+    shortPitch ||
+    `${prodName} is available at ${cleanOrig}. Customize this starter draft with your specific product workflows, screenshots, and customer examples before publishing.`;
+
+  const cats =
+    Array.isArray(options.categories) && options.categories.length > 0
+      ? options.categories.join(", ")
+      : "Web Application";
+
+  const metaDesc = `${cleanHeading}. ${summaryText}`.slice(0, 158).trim();
+  const ogImgUrl = options.ogImage || `${cleanOrig}/og-card.svg`;
+  const related = (allPages || []).filter((p) => p.path !== page.path).slice(0, 5);
+  const headingTopic = cleanHeading
+    .replace(new RegExp(`^${prodName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\s*[—–:-]?\\s*`, "i"), "")
+    .trim() || cleanHeading;
+
+  const hasFaqSchema = String(page.schemaType || page.kd || "").includes("FAQPage");
+  const faqItems = [
+    {
+      q: `What is covered in this ${headingTopic} guide?`,
+      a: `${summaryText}`
+    },
+    {
+      q: `Where can I access ${prodName}?`,
+      a: `Visit ${cleanOrig} to explore ${prodName} directly and review current product documentation.`
+    }
+  ];
+
+  const graph = [
+    {
+      "@type": "SoftwareApplication",
+      name: prodName,
+      url: cleanOrig,
+      applicationCategory: "BusinessApplication",
+      operatingSystem: "Web",
+      description: summaryText
+    },
+    {
+      "@type": "BreadcrumbList",
+      itemListElement: [
+        { "@type": "ListItem", position: 1, name: prodName, item: cleanOrig },
+        { "@type": "ListItem", position: 2, name: cat, item: canonicalUrl }
+      ]
+    }
+  ];
+  if (hasFaqSchema) {
+    graph.push({
+      "@type": "FAQPage",
+      mainEntity: faqItems.map((f) => ({
+        "@type": "Question",
+        name: f.q,
+        acceptedAnswer: { "@type": "Answer", text: f.a }
+      }))
+    });
+  }
+  const ldJson = JSON.stringify({ "@context": "https://schema.org", "@graph": graph }).replace(/</g, "\\u003c");
+
+  let bodySectionHtml = "";
+  if (cat === "Comparison" || cat === "Walkthrough") {
+    bodySectionHtml = `    <section class="card">
+      <h2>Evaluation Criteria: ${escapeHtml(headingTopic)}</h2>
+      <p>Use the worksheet below when comparing <strong>${escapeHtml(prodName)}</strong> against existing internal workflows:</p>
+      <table class="cmp-table">
+        <thead><tr><th>Criterion</th><th>${escapeHtml(prodName)} (${escapeHtml(cleanDomain)})</th><th>Current / Baseline Process</th></tr></thead>
+        <tbody>
+          <tr><td><strong>Primary Scope</strong></td><td>${escapeHtml(tagline || prodName)}</td><td>Document current team baseline</td></tr>
+          <tr><td><strong>Overview</strong></td><td>${escapeHtml(summaryText)}</td><td>Record current steps and handoffs</td></tr>
+          <tr><td><strong>Direct Access</strong></td><td><a href="${escapeHtml(cleanOrig)}">${escapeHtml(cleanOrig)}</a></td><td>Internal docs / spreadsheets</td></tr>
+        </tbody>
+      </table>
+    </section>`;
+  } else if (cat === "Calculator") {
+    bodySectionHtml = `    <section class="card">
+      <h2>Workflow Time Worksheet — ${escapeHtml(headingTopic)}</h2>
+      <p>Enter your team's monthly frequency and average minutes per task to estimate total monthly time spent on this workflow:</p>
+      <div style="background:#f8fafc;border:1px solid #e2e8f0;border-radius:10px;padding:18px;margin-top:12px;">
+        <label style="display:block;font-weight:600;margin-bottom:6px;">Monthly runs: <span id="runsVal">10 runs/mo</span></label>
+        <input id="runsInput" type="range" min="1" max="60" value="10" style="width:100%;margin-bottom:12px;" oninput="var r=parseInt(this.value,10)||1;var m=parseInt(document.getElementById('minsInput').value,10)||15;document.getElementById('runsVal').textContent=r+' runs/mo';document.getElementById('hrsTotal').textContent=((r*m)/60).toFixed(1)+' hrs/mo';" />
+        <label style="display:block;font-weight:600;margin-bottom:6px;">Minutes per run: <span id="minsVal">30 mins/run</span></label>
+        <input id="minsInput" type="range" min="5" max="120" step="5" value="30" style="width:100%;" oninput="var m=parseInt(this.value,10)||15;var r=parseInt(document.getElementById('runsInput').value,10)||1;document.getElementById('minsVal').textContent=m+' mins/run';document.getElementById('hrsTotal').textContent=((r*m)/60).toFixed(1)+' hrs/mo';" />
+        <div style="margin-top:14px;background:#fff;border:1px solid #e2e8f0;border-radius:8px;padding:12px;">
+          <div style="font-size:12px;color:#64748b;">Estimated Monthly Workflow Time (Runs &times; Minutes)</div>
+          <div id="hrsTotal" style="font-size:22px;font-weight:800;color:#047857;">5.0 hrs/mo</div>
+        </div>
+      </div>
+    </section>`;
+  } else {
+    bodySectionHtml = `    <section class="card">
+      <h2>Key Notes: ${escapeHtml(headingTopic)}</h2>
+      <ul style="padding-left:20px;margin:12px 0;">
+        <li style="margin-bottom:10px;"><strong>Objective:</strong> Define how ${escapeHtml(prodName)} fits into your ${escapeHtml(headingTopic.toLowerCase())} workflow.</li>
+        <li style="margin-bottom:10px;"><strong>Live Environment:</strong> Visit <a href="${escapeHtml(cleanOrig)}">${escapeHtml(cleanOrig)}</a> to inspect current features and setup options.</li>
+        <li style="margin-bottom:10px;"><strong>Customization Note:</strong> Replace this starter section with your product's specific steps, screenshots, or code examples before publishing.</li>
+      </ul>
+    </section>`;
+  }
+
+  return `<!DOCTYPE html>
+<!-- Starter SEO draft for ${escapeHtml(cleanDomain)} (${escapeHtml(page.path)}). Review and customize with your product details before publishing to production. -->
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>${escapeHtml(pageTitle)}</title>
+  <meta name="description" content="${escapeHtml(metaDesc)}" />
+  <link rel="canonical" href="${escapeHtml(canonicalUrl)}" />
+  <meta property="og:type" content="article" />
+  <meta property="og:title" content="${escapeHtml(pageTitle)}" />
+  <meta property="og:description" content="${escapeHtml(metaDesc)}" />
+  <meta property="og:url" content="${escapeHtml(canonicalUrl)}" />
+  <meta property="og:image" content="${escapeHtml(ogImgUrl)}" />
+  <meta name="twitter:card" content="summary_large_image" />
+  <meta name="twitter:title" content="${escapeHtml(pageTitle)}" />
+  <meta name="twitter:description" content="${escapeHtml(metaDesc)}" />
+  <meta name="twitter:image" content="${escapeHtml(ogImgUrl)}" />
+  <script type="application/ld+json">${ldJson}</script>
+  <style>body{font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,sans-serif;max-width:880px;margin:0 auto;padding:36px 20px 64px;line-height:1.65;color:#0f172a;background:#f8fafc}.card{background:#fff;border:1px solid #e2e8f0;border-radius:12px;padding:26px;margin-bottom:20px}.cta{display:inline-block;background:#047857;color:#fff;padding:10px 18px;border-radius:8px;text-decoration:none;font-weight:600}.cmp-table{width:100%;border-collapse:collapse;margin-top:14px;font-size:14px}.cmp-table th,.cmp-table td{border:1px solid #e2e8f0;padding:10px 12px;text-align:left}.cmp-table th{background:#f1f5f9;font-weight:700}.faq-item{border-top:1px solid #e2e8f0;padding-top:14px;margin-top:14px}</style>
+</head>
+<body>
+  <header style="display:flex;justify-content:space-between;align-items:center;margin-bottom:24px;padding-bottom:14px;border-bottom:1px solid #e2e8f0;">
+    <nav aria-label="Breadcrumb" style="font-size:13px;color:#64748b;"><a href="${escapeHtml(cleanOrig)}" style="font-weight:700;color:#0f172a;text-decoration:none;">${escapeHtml(prodName)}</a> / <span>${escapeHtml(cat)}</span></nav>
+    <a class="cta" href="${escapeHtml(cleanOrig)}" style="font-size:13px;padding:7px 14px;">Open ${escapeHtml(prodName)} &rarr;</a>
+  </header>
+  <main>
+    <article class="card">
+      <div style="font-size:12px;font-weight:700;color:#047857;text-transform:uppercase;letter-spacing:0.04em;">${escapeHtml(cat)} &middot; ${escapeHtml(cats)}</div>
+      <h1 style="margin:8px 0 12px;font-size:28px;line-height:1.25;">${escapeHtml(cleanHeading)}</h1>
+      ${tagline ? `<p style="font-size:16px;color:#334155;margin-bottom:14px;"><strong>${escapeHtml(prodName)}</strong> &mdash; ${escapeHtml(tagline)}</p>` : ""}
+      <p style="color:#475569;">${escapeHtml(summaryText)}</p>
+      <p style="margin-top:18px;"><a class="cta" href="${escapeHtml(cleanOrig)}">Explore ${escapeHtml(prodName)} on ${escapeHtml(cleanDomain)} &rarr;</a></p>
+    </article>
+${bodySectionHtml}
+${
+  hasFaqSchema
+    ? `    <section class="card">
+      <h2>Frequently Asked Questions</h2>
+${faqItems.map((f) => `      <div class="faq-item"><h3 style="margin:0 0 6px;font-size:16px;">${escapeHtml(f.q)}</h3><p style="margin:0;color:#475569;font-size:14px;">${escapeHtml(f.a)}</p></div>`).join("\n")}
+    </section>`
+    : ""
+}
+    <section class="card">
+      <h2>Related ${escapeHtml(prodName)} Guides</h2>
+      <ul style="padding-left:20px;margin:10px 0;">
+${related.map((r) => `        <li style="margin-bottom:6px;"><a href="${escapeHtml(r.path)}" style="color:#0284c7;text-decoration:none;font-weight:500;">${escapeHtml(r.keyword || r.path)}</a> <span style="color:#64748b;font-size:12px;">(${escapeHtml(r.category || r.volume || "Guide")})</span></li>`).join("\n")}
+      </ul>
+    </section>
+  </main>
+</body>
+</html>`;
+}
+
 /**
- * Writes all 25 Programmatic SEO HTML files into targetBaseDir so cleanUrls (/use-cases/...) resolve with 200 OK.
+ * Writes Programmatic SEO HTML files into targetBaseDir so cleanUrls (/use-cases/...) resolve with 200 OK.
+ * Uses the buyer-safe starter template for all customer domains, and only uses postbuild.dev's own marketing
+ * template when building postbuild.dev itself.
  */
 export function writePseoHtmlFiles(pseoPages = [], targetBaseDir, options = {}) {
+  const cleanDomain = String(options.domain || "postbuild.dev")
+    .toLowerCase()
+    .trim()
+    .replace(/^https?:\/\//, "")
+    .replace(/^www\./, "")
+    .split("/")[0];
+  const isPostbuildSelf = cleanDomain === "postbuild.dev";
   const written = [];
   for (const page of pseoPages) {
     const cleanRel = String(page.path || "").replace(/^\/+/, "");
     if (!cleanRel) continue;
-    const outFile = path.join(targetBaseDir, `${cleanRel}.html`);
-    fs.mkdirSync(path.dirname(outFile), { recursive: true });
-    const html = renderSinglePseoPage(page, pseoPages, options);
-    fs.writeFileSync(outFile, html, "utf8");
-    written.push(outFile);
+    const html = isPostbuildSelf
+      ? renderSinglePseoPage(page, pseoPages, options)
+      : renderBuyerStarterPseoPage(page, pseoPages, options);
+    const indexOutFile = path.join(targetBaseDir, cleanRel, "index.html");
+    fs.mkdirSync(path.dirname(indexOutFile), { recursive: true });
+    fs.writeFileSync(indexOutFile, html, "utf8");
+    written.push(indexOutFile);
+
+    if (isPostbuildSelf) {
+      const flatOutFile = path.join(targetBaseDir, `${cleanRel}.html`);
+      fs.mkdirSync(path.dirname(flatOutFile), { recursive: true });
+      fs.writeFileSync(flatOutFile, html, "utf8");
+    }
   }
   return written;
 }
+

package/lib/safe-fetch.js

@@ -145,7 +145,7 @@ export async function assertSafeUrl(rawUrl, options = {}) {
   return parsed;
 }
 
-async function readResponseWithCap(response, maxBytes = MAX_RESPONSE_BYTES) {
+async function readResponseWithCap(response, maxBytes = MAX_RESPONSE_BYTES, truncateOnMaxBytes = false) {
   if (!response.body) {
     return Buffer.alloc(0);
   }
@@ -157,11 +157,19 @@ async function readResponseWithCap(response, maxBytes = MAX_RESPONSE_BYTES) {
     const { done, value } = await reader.read();
     if (done) break;
     const buf = Buffer.from(value);
-    total += buf.length;
-    if (total > maxBytes) {
-      await reader.cancel();
+    if (total + buf.length > maxBytes) {
+      if (truncateOnMaxBytes) {
+        const remaining = Math.max(0, maxBytes - total);
+        if (remaining > 0) {
+          chunks.push(buf.subarray(0, remaining));
+        }
+        await reader.cancel().catch(() => {});
+        break;
+      }
+      await reader.cancel().catch(() => {});
       throw new Error(`Response exceeded maximum size limit of ${maxBytes} bytes`);
     }
+    total += buf.length;
     chunks.push(buf);
   }
 
@@ -176,6 +184,7 @@ export async function safeFetch(rawUrl, options = {}) {
     timeoutMs = DEFAULT_TIMEOUT_MS,
     maxRedirects = MAX_REDIRECTS,
     maxBytes = MAX_RESPONSE_BYTES,
+    truncateOnMaxBytes = false,
     allowedDomains = null,
     lookupFn
   } = options;
@@ -220,7 +229,7 @@ export async function safeFetch(rawUrl, options = {}) {
         continue;
       }
 
-      const bodyBuffer = await readResponseWithCap(resp, maxBytes);
+      const bodyBuffer = await readResponseWithCap(resp, maxBytes, truncateOnMaxBytes);
       return {
         ok: resp.ok,
         status: resp.status,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "git-paid",
-  "version": "2.1.6",
+  "version": "2.1.8",
   "description": "git push ships your code. git paid sells it. Autonomous SEO, Paywall, MCP & Directory Launch Agent (www.postbuild.dev).",
   "type": "module",
   "main": "bin/git-paid.js",