Merge pull request #2 from profullstack/feat/membership-and-autonomous-deploy

bbs.profullstack.com host + join@/<name>@ README + CoinPay HTTP

Author: ralyodio

.github/workflows/deploy.yml

@@ -51,11 +51,18 @@ jobs:
           # Deploy whichever branch was pushed (main or master), so a rename
           # "just works". For workflow_dispatch this is the chosen branch.
           DEPLOY_BRANCH: ${{ github.ref_name }}
+          # App secrets injected into the droplet's env file by setup.sh.
+          # GitHub masks these in logs; setup.sh upserts them idempotently.
+          COINPAY_API_KEY: ${{ secrets.COINPAY_API_KEY }}
+          COINPAY_MERCHANT_ID: ${{ secrets.COINPAY_MERCHANT_ID }}
         run: |
           ssh -i ~/.ssh/id_deploy -p "$DEPLOY_PORT" \
               -o BatchMode=yes -o StrictHostKeyChecking=yes \
               "${DEPLOY_USER}@${DEPLOY_HOST}" \
-              "sudo -n env BRANCH=$(printf %q "$DEPLOY_BRANCH") bash -s" <<'REMOTE'
+              "sudo -n env BRANCH=$(printf %q "$DEPLOY_BRANCH") \
+                 COINPAY_API_KEY=$(printf %q "$COINPAY_API_KEY") \
+                 COINPAY_MERCHANT_ID=$(printf %q "$COINPAY_MERCHANT_ID") \
+                 bash -s" <<'REMOTE'
           set -euo pipefail
           REPO=https://github.com/profullstack/agentbbs.git
           BRANCH="${BRANCH:-main}"
@@ -67,7 +74,10 @@ jobs:
           fi
           git -C "$SRC" fetch --depth 1 origin "$BRANCH"
           git -C "$SRC" reset --hard "origin/$BRANCH"
-          exec env BRANCH="$BRANCH" "$SRC/setup.sh"
+          exec env BRANCH="$BRANCH" \
+            COINPAY_API_KEY="${COINPAY_API_KEY:-}" \
+            COINPAY_MERCHANT_ID="${COINPAY_MERCHANT_ID:-}" \
+            "$SRC/setup.sh"
           REMOTE
 
       - name: Smoke-test that agentbbs serves :22

README.md

@@ -4,19 +4,18 @@
 by Profullstack, Inc.
 
 ```bash
-ssh bbs@profullstack.com          # the hub: arcade (DOOM, snake), leaderboards — guests welcome
-ssh join@profullstack.com         # register + confirm email by code, then the Premium offer
-ssh <name>@profullstack.com       # the hub as a member — or finger someone else's name
-ssh pod@profullstack.com          # your own Linux pod — FREE for verified members
-ssh domain@profullstack.com       # point your domain at your homepage (Premium)
-ssh video-<code>@profullstack.com # join a PairUX video call as truecolor ASCII
-ssh agent@profullstack.com        # chat with the operator's AI agent
+ssh join@bbs.profullstack.com      # new here? register + confirm your email, get your account
+ssh <name>@bbs.profullstack.com    # your BBS: hub, arcade, your pod, chat, domains — all inside
 ```
 
-**Membership:** verified-email members are **free** — each gets a Docker pod
-(`ssh pod@`) and a homepage at `https://host/~name`. **Premium** ($10 one-time,
-lifetime) adds a personal `name@host` email (via forwardemail.net) and custom
-domains.
+Just two SSH front doors: **`join@`** to onboard a new key, then
+**`<name>@`** for everything else — the hub, your pod, the arcade, chat, and
+domains are all reached from there.
+
+**Membership:** a verified-email account is **free** — you get a personal Docker
+pod and a homepage at `https://bbs.profullstack.com/~name`. **Premium** ($10
+one-time, lifetime) adds a personal `name@bbs.profullstack.com` email (via
+forwardemail.net) and custom domains.
 
 No browser, no install, no client download. The BBS is a hub of hot-swappable
 plugins around one shared account system; the full product plan is in
@@ -29,7 +28,7 @@ plugins around one shared account system; the full product plan is in
 |---|---|
 | M0 — core hub (wish server, auth, plugin contract, SQLite) | ✅ |
 | M1 — arcade (doom-ascii + Freedoom, sandbox, saves, leaderboards) | ✅ |
-| Pods (`pod@`, rootless containers, CoinPay membership) | ✅ |
+| Pods (rootless containers, free for verified members) | ✅ |
 | Video (`video-<code>@`, PairUX/LiveKit → ASCII streaming) | ✅ |
 | `agent@` chat (configurable agent backend) + finger | ✅ |
 | M2 — admin console | ⬜ |
@@ -43,7 +42,7 @@ plugins around one shared account system; the full product plan is in
 go build -o agentbbs ./cmd/agentbbs
 scripts/fetch-assets.sh          # build doom-ascii + fetch Freedoom (optional)
 ./agentbbs                       # listens on :2222
-ssh -p 2222 bbs@localhost
+ssh -p 2222 join@localhost       # onboard, then: ssh -p 2222 <name>@localhost
 ```
 
 Configuration (env):
@@ -53,13 +52,14 @@ Configuration (env):
 | `AGENTBBS_ADDR` | `:2222` | listen address |
 | `AGENTBBS_DATA` | `./data` | SQLite db, host key, per-user dirs |
 | `AGENTBBS_ASSETS` | `./assets` | doom binary + wads |
-| `AGENTBBS_HOST` | `profullstack.com` | hostname shown in messages |
+| `AGENTBBS_HOST` | `bbs.profullstack.com` | hostname shown in messages |
 | `AGENTBBS_SANDBOX` | `auto` | `bwrap` / `prlimit` / `none` |
 | `AGENTBBS_POD_IMAGE` | `debian:stable-slim` | pod base image |
 | `AGENTBBS_POD_MEM` / `AGENTBBS_POD_CPUS` | `512m` / `1` | pod caps |
 | `AGENTBBS_POD_KEEP` | unset | `1` keeps pods running after disconnect |
-| `AGENTBBS_COINPAY_PAY_TMPL` | coinpay default | pay command shown to users |
-| `AGENTBBS_COINPAY_VERIFY_CMD` | unset | verifier; exit 0 = paid |
+| `COINPAY_API_KEY` | unset | CoinPay API key (Premium payments) |
+| `AGENTBBS_COINPAY_MERCHANT_ID` | unset | CoinPay merchant/business id |
+| `AGENTBBS_FORWARDEMAIL_API_KEY` | unset | forwardemail.net key (Premium email) |
 
 Ops:
 
@@ -86,15 +86,16 @@ Full details, required secrets, and ops commands: [`docs/deploy.md`](docs/deploy
 - **Plugins** (`internal/plugin`): `ID/Title/Description/RequiresAuth/New`; a
   plugin owns the session until it emits `ExitMsg`. Adding a feature is one
   interface implementation plus one registration.
-- **Routing**: SSH username selects the surface — hub, onboarding, or pod.
+- **Routing**: SSH username selects the surface — onboarding (`join@`) or your
+  hub (`<name>@`); pods/arcade/chat/domains are features inside the hub.
 - **Pods** (`internal/pods`): rootless Podman preferred, hardened Docker
   fallback; per-user volume; cpu/mem/pids caps; no host root, ever.
 - **Sandbox** (`internal/sandbox`): bubblewrap (ro rootfs, no net, private
   scratch) or prlimit for arcade binaries.
 - **Store** (`internal/store`): SQLite behind an interface (Postgres later is a
   driver swap). Users, sessions, scores, pod subscriptions.
-- **Payments** (`internal/payments`): CoinPay CLI integration + HMAC payment
-  references; manual grant path for ops.
+- **Payments** (`internal/payments`): CoinPay REST API (coinpayportal.com) for
+  the $10 lifetime membership + HMAC payment references; manual grant for ops.
 
 ## License
 

cmd/agentbbs/main.go

@@ -98,7 +98,7 @@ func main() {
 		return
 	}
 
-	host := env("AGENTBBS_HOST", "profullstack.com")
+	host := env("AGENTBBS_HOST", "bbs.profullstack.com")
 	fe := forwardemail.ConfigFromEnv()
 	if fe.Domain == "" {
 		fe.Domain = host // personal addresses live on the BBS host by default
@@ -397,11 +397,14 @@ func (a *app) ensurePremium(u *store.User) bool {
 	if u.Premium {
 		return true
 	}
-	ref := payments.PremiumReference(u.PubKeyFP)
-	if paid, checked := payments.VerifyPremium(ref); !checked || !paid {
+	// Verify the CoinPay payment we created for them (if any) has settled.
+	if u.PremiumPayID == "" {
+		return false
+	}
+	if paid, checked := payments.VerifyPremium(u.PremiumPayID); !checked || !paid {
 		return false
 	}
-	if err := a.st.GrantPremium(u.ID, ref); err != nil {
+	if err := a.st.GrantPremium(u.ID, u.PremiumPayID); err != nil {
 		log.Error("grant premium", "err", err)
 		return false
 	}
@@ -456,6 +459,10 @@ func (a *app) offerPremium(s ssh.Session, u *store.User) {
 		"",
 	}
 	if c, ok, err := payments.CreatePremiumCharge(ref); ok && err == nil {
+		// Remember the payment id so a later connect can confirm settlement.
+		if err := a.st.SetPremiumPayment(u.ID, c.ID); err != nil {
+			log.Error("store premium payment id", "err", err)
+		}
 		amount := "$" + payments.PremiumAmount() + " " + payments.PremiumCurrency()
 		if c.CryptoAmount != "" {
 			cur := c.Currency
@@ -475,7 +482,7 @@ func (a *app) offerPremium(s ssh.Session, u *store.User) {
 		if err != nil {
 			log.Error("create premium charge", "err", err)
 		}
-		lines = append(lines, "  pay:   "+payments.PremiumPayCommand(ref))
+		lines = append(lines, "  Payment is temporarily unavailable — please try again shortly.")
 	}
 	lines = append(lines,
 		"",