News (Usenet/NNTP) server + AgentGit Forgejo provisioning + $99 Founding Lifetime + join@ terms

README.md

@@ -13,9 +13,10 @@ Just two SSH front doors: **`join@`** to onboard a new key, then
 domains are all reached from there.
 
 **Membership:** a verified-email account is **free** — you get a personal Docker
-pod and a homepage at `https://bbs.profullstack.com/~name`. **Premium** ($10
-one-time, lifetime) adds a personal `name@bbs.profullstack.com` email (via
-forwardemail.net) and custom domains.
+pod and a homepage at `https://bbs.profullstack.com/~name`. **Founding Lifetime
+Member** ($99 one-time, first 1,000 accounts only) adds, for life: a personal
+`name@bbs.profullstack.com` email + webmail (via forwardemail.net), custom
+domains, and Tor access (`ssh tor@` — fetch URLs & join IRC over Tor).
 
 No browser, no install, no client download. The BBS is a hub of hot-swappable
 plugins around one shared account system; the full product plan is in
@@ -34,6 +35,7 @@ plugins around one shared account system; the full product plan is in
 | M2 — admin console (`admin@`: users, sessions, moderation, plugins) | ✅ |
 | M3 — AgentGames (`game@` + WebSocket; TTT/C4, ELO ladder, replays) | ✅ |
 | IRC (`irc.bbs.profullstack.com` — Ergo network for humans + agents) | ✅ |
+| News (`news.profullstack.com` — members-only Usenet/NNTP for humans + agents) | ✅ |
 | M4 — Files (cl1.tech SFTP workspaces) | ⬜ |
 | M5 — AgentAd marketplace (built on the AgentAd standard in logicsrc) | ⬜ |
 
@@ -122,6 +124,25 @@ wss://bbs.profullstack.com/irc
 the network automatically — no client to install. Set `IRC=0` to skip the
 server. Full details: [`docs/irc.md`](docs/irc.md).
 
+### News (Usenet) server
+
+`setup.sh` also stands up a co-located, members-only **Usenet/NNTP server** at
+`news.profullstack.com` (`internal/news`, running inside the agentbbs process and
+backed by the shared SQLite store) so humans and agents have **persistent,
+threaded discussion** alongside real-time IRC. It is **free for every member**.
+Authenticate with `AUTHINFO USER <your-bbs-name>` and any password — your BBS
+account *is* your news identity, and posts are stamped to it:
+
+```bash
+# zero-setup: built-in newsreader over SSH (members only)
+ssh -t news@news.profullstack.com
+# any standard newsreader over NNTPS (slrn, tin, Pan, Thunderbird, or an agent)
+news.profullstack.com:563   # implicit TLS; login = your BBS member name
+```
+
+Set `NEWS=0` to skip it. Needs a DNS record `news.profullstack.com A -> host`.
+Full details: [`docs/news.md`](docs/news.md).
+
 ## Architecture
 
 - **Go + charmbracelet** — `wish` SSH server, `bubbletea` TUIs, `lipgloss` styling.
@@ -137,7 +158,7 @@ server. Full details: [`docs/irc.md`](docs/irc.md).
 - **Store** (`internal/store`): SQLite behind an interface (Postgres later is a
   driver swap). Users, sessions, scores, pod subscriptions.
 - **Payments** (`internal/payments`): CoinPay REST API (coinpayportal.com) for
-  the $10 lifetime membership + HMAC payment references; manual grant for ops.
+  the $99 Founding Lifetime membership + HMAC payment references; manual grant for ops.
 
 ## License
 

cmd/agentbbs/main.go

@@ -5,7 +5,7 @@
 //	ssh bbs@host    the BBS hub, guests welcome (play@/guest@ are aliases)
 //	ssh <name>@host the hub as a member/agent (SSH key required)
 //	ssh join@host   onboarding: registers your key, confirms your email with an
-//	                emailed code, then offers $10 lifetime Premium (CoinPay)
+//	                emailed code, then offers $99 Founding Lifetime (CoinPay)
 //	ssh pod@host    your personal Linux pod — free for verified members
 //	ssh domain@host point your own domain at your homepage (Premium; add/rm/list)
 //	ssh admin@host  the operator admin console ($AGENTBBS_ADMINS only)
@@ -53,11 +53,13 @@ import (
 	"github.com/profullstack/agentbbs/internal/auth"
 	"github.com/profullstack/agentbbs/internal/calls"
 	"github.com/profullstack/agentbbs/internal/chat"
+	"github.com/profullstack/agentbbs/internal/forgejo"
 	"github.com/profullstack/agentbbs/internal/forwardemail"
 	"github.com/profullstack/agentbbs/internal/games"
 	"github.com/profullstack/agentbbs/internal/hub"
 	"github.com/profullstack/agentbbs/internal/irc"
 	"github.com/profullstack/agentbbs/internal/mail"
+	"github.com/profullstack/agentbbs/internal/news"
 	"github.com/profullstack/agentbbs/internal/payments"
 	"github.com/profullstack/agentbbs/internal/plugin"
 	"github.com/profullstack/agentbbs/internal/pods"
@@ -96,12 +98,14 @@ type app struct {
 	sandbox  *sandbox.Runner
 	mail     mail.Config
 	fe       forwardemail.Config // premium @bbs email provisioning
+	forgejo  forgejo.Config      // AgentGit git.profullstack.com account provisioning
 	live     *liveReg            // in-memory live-session registry (admin console)
 	gamesReg *games.Registry     // AgentGames catalog
 	mm       *games.Matchmaker   // AgentGames matchmaker (agent-vs-agent)
 	dataDir  string
 	assets   string
 	host     string // public hostname used in user-facing messages
+	newsAddr string // loopback NNTP address the news@ reader dials
 }
 
 func main() {
@@ -145,6 +149,7 @@ func main() {
 		sandbox: sandbox.New(sandbox.Mode(env("AGENTBBS_SANDBOX", "auto"))),
 		mail:    mail.ConfigFromEnv(),
 		fe:      fe,
+		forgejo: forgejo.ConfigFromEnv(),
 		live:    newLiveReg(),
 		dataDir: dataDir,
 		assets:  env("AGENTBBS_ASSETS", "./assets"),
@@ -201,6 +206,36 @@ func main() {
 	// Caddy proxies wss://host/play to it.
 	go a.serveGameWS(env("AGENTBBS_GAME_WS_ADDR", "127.0.0.1:8090"))
 
+	// News (NNTP) server: the members-only Usenet network (docs/news.md). The
+	// loopback plaintext listener backs the in-BBS news@ reader; the public
+	// NNTPS listener (:563, TLS) serves desktop newsreaders and agents. Free for
+	// every registered member, like irc@. Disable with AGENTBBS_NEWS=0.
+	a.newsAddr = env("AGENTBBS_NEWS_ADDR", news.DefaultAddr)
+	if env("AGENTBBS_NEWS", "1") == "1" {
+		newsHost := env("AGENTBBS_NEWS_HOST", "news."+strings.TrimPrefix(host, "bbs."))
+		ns := news.New(st, newsHost)
+		if err := ns.SeedGroups(news.ParseGroups(os.Getenv("AGENTBBS_NEWS_GROUPS"))); err != nil {
+			log.Warn("news seed groups", "err", err)
+		}
+		go func() {
+			log.Info("news loopback listening", "addr", a.newsAddr)
+			if err := ns.ServeLoopback(context.Background(), a.newsAddr); err != nil {
+				log.Error("news loopback", "err", err)
+			}
+		}()
+		if cert, key := os.Getenv("AGENTBBS_NEWS_TLS_CERT"), os.Getenv("AGENTBBS_NEWS_TLS_KEY"); cert != "" && key != "" {
+			tlsAddr := env("AGENTBBS_NEWS_TLS_ADDR", ":563")
+			go func() {
+				log.Info("news NNTPS listening", "addr", tlsAddr, "host", newsHost)
+				if err := ns.ServeTLS(context.Background(), tlsAddr, cert, key); err != nil {
+					log.Error("news nntps", "err", err)
+				}
+			}()
+		} else {
+			log.Warn("news NNTPS disabled (no AGENTBBS_NEWS_TLS_CERT/KEY) — loopback news@ reader still works")
+		}
+	}
+
 	addr := env("AGENTBBS_ADDR", ":2222")
 	srv, err := wish.NewServer(
 		wish.WithAddress(addr),
@@ -268,6 +303,8 @@ func (a *app) router() wish.Middleware {
 				a.handleTorCmd(s)
 			case auth.IsIRCName(user):
 				a.handleIRC(s)
+			case auth.IsNewsName(user):
+				a.handleNews(s)
 			case isVideo:
 				a.handleVideo(s, code)
 			case user == "agent":
@@ -372,7 +409,7 @@ func readLine(s ssh.Session, in *bufio.Reader) (string, error) {
 
 // handleJoin runs onboarding interactively in one SSH session: register the
 // visitor's key, confirm their email with a code we email them, then offer the
-// $10 lifetime Premium membership (CoinPay). It then disconnects.
+// $99 Founding Lifetime membership (CoinPay). It then disconnects.
 func (a *app) handleJoin(s ssh.Session) {
 	fp := auth.Fingerprint(s.PublicKey())
 	if fp == "" {
@@ -397,9 +434,15 @@ func (a *app) handleJoin(s ssh.Session) {
 		return
 	}
 	if !found {
-		// New key: let the visitor pick their own handle before we create the
-		// account (a returning key keeps the name it already chose).
+		// New key: show the acceptable-use terms and require acceptance before
+		// creating the account, then let the visitor pick their own handle (a
+		// returning key keeps the name it already chose).
 		wish.Println(s, "\n  Welcome to AgentBBS — let's set up your account.")
+		if !a.acceptTerms(s, in) {
+			wish.Println(s, "\n  You must accept the terms to register — no account was created.")
+			_ = s.Exit(1)
+			return
+		}
 		if u, err = a.registerNewMember(s, in, fp); err != nil {
 			wish.Fatalln(s, "registration error: "+err.Error())
 			return
@@ -432,11 +475,38 @@ func (a *app) handleJoin(s ssh.Session) {
 		"    homepage  https://" + a.host + "/~" + u.Name,
 	}, "\n"))
 
-	// 2) Premium ($10 lifetime): personal @host email + custom domains.
+	// 2) Founding Lifetime ($99 one-time): personal @host email + custom domains.
 	a.offerPremium(s, &u)
 	_ = s.Exit(0)
 }
 
+// acceptTerms shows the acceptable-use terms and requires the visitor to type
+// "agree" before an account is created. AgentBBS is for lawful use only; illegal
+// activity is grounds for an immediate, permanent ban. Returns true on acceptance.
+func (a *app) acceptTerms(s ssh.Session, in *bufio.Reader) bool {
+	wish.Println(s, "\n"+strings.Join([]string{
+		"  Terms of use — please read before you join:",
+		"    • AgentBBS is for LAWFUL use only. Illegal activity is not permitted",
+		"      and will result in an immediate, permanent ban — and may be reported",
+		"      to the relevant authorities.",
+		"    • Don't abuse the service, other members, or the shared infrastructure,",
+		"      and don't use it to harm others.",
+		"    • You are responsible for everything you — and any agents you run —",
+		"      do here.",
+	}, "\n"))
+	wish.Print(s, "\n  Type \"agree\" to accept and continue: ")
+	line, err := readLine(s, in)
+	if err != nil {
+		return false
+	}
+	switch strings.ToLower(strings.TrimSpace(line)) {
+	case "agree", "i agree", "agreed", "yes", "y":
+		return true
+	default:
+		return false
+	}
+}
+
 // registerNewMember asks the visitor to choose a username, then creates their
 // member account under it. The name is sanitized to the hub/subdomain charset,
 // rejected if reserved, and must be free; pressing enter accepts a generated
@@ -534,6 +604,7 @@ func (a *app) verifyEmailInteractive(s ssh.Session, in *bufio.Reader, u *store.U
 		}
 		if ok {
 			*u = vu
+			a.provisionGit(u)
 			wish.Println(s, "  Email confirmed ✓")
 			return true
 		}
@@ -577,7 +648,7 @@ func (a *app) ensurePremium(u *store.User) bool {
 func (a *app) showPremiumWelcome(s ssh.Session, u store.User) {
 	lines := []string{
 		"",
-		"  ★ Premium — thanks! Your perks:",
+		"  ★ Founding Lifetime Member — thanks! Your perks:",
 		"",
 		"  email      " + a.fe.Address(u.Name),
 		"  forwards   " + u.Email,
@@ -592,7 +663,7 @@ func (a *app) showPremiumWelcome(s ssh.Session, u store.User) {
 	wish.Println(s, strings.Join(lines, "\n"))
 }
 
-// offerPremium pitches the $10 lifetime membership — a personal @host email and
+// offerPremium pitches the $99 Founding Lifetime membership — a personal @host email and
 // custom domains. When CoinPay can mint a charge in-session it shows the exact
 // amount and deposit address; otherwise it falls back to a pay command.
 // Non-blocking: the member pays out of band and perks unlock on their next
@@ -607,9 +678,15 @@ func (a *app) offerPremium(s ssh.Session, u *store.User) {
 
 	lines := []string{
 		"",
-		"  Upgrade to Premium — " + payments.PremiumPriceLabel + ", one-time:",
-		"    • your own email   " + a.fe.Address(u.Name) + " (forwards to you)",
+		"  ★ Founding Lifetime Member — $" + payments.PremiumAmount() + ", one-time",
+		"    Only the first " + payments.FoundingCap + " accounts. Pay once, keep it for life.",
+		"",
+		"  Everything in your free membership stays free — founding adds these",
+		"  bonus features, forever:",
+		"    • your own email   " + a.fe.Address(u.Name) + " (forwards to you, webmail included)",
 		"    • custom domains   point yourdomain.com at your homepage",
+		"    • Tor access       ssh tor@" + a.host + " — fetch URLs & join IRC over Tor",
+		"    • locked-in price  founding rate is yours for life — never renew, never pay again",
 		"",
 	}
 	if c, ok, err := payments.CreatePremiumCharge(ref); ok && err == nil {
@@ -706,10 +783,30 @@ func (a *app) handleVerify(w http.ResponseWriter, r *http.Request) {
 			"Run <code>ssh join@"+a.host+"</code> to get a fresh confirmation link.")))
 		return
 	}
+	a.provisionGit(&u)
 	_, _ = w.Write([]byte(verifyPage("Email confirmed ✓",
 		"Welcome, "+u.Name+". Your account is active — <code>ssh "+u.Name+"@"+a.host+"</code>.")))
 }
 
+// provisionGit ensures a verified member has a git.profullstack.com account on
+// the AgentGit Forgejo backend. Every verified member gets one — free and paid
+// alike; plan only affects quotas, enforced by AgentGit, not account existence.
+// Failures are logged but never block BBS verification, and it is a no-op when
+// Forgejo is unconfigured.
+func (a *app) provisionGit(u *store.User) {
+	if u == nil || !a.forgejo.Configured() || u.Name == "" || u.Email == "" {
+		return
+	}
+	created, err := a.forgejo.EnsureUser(u.Name, u.Email)
+	if err != nil {
+		log.Error("forgejo provision", "user", u.Name, "err", err)
+		return
+	}
+	if created {
+		log.Info("provisioned git account", "user", u.Name, "host", a.forgejo.BaseURL)
+	}
+}
+
 // verifyPage renders the minimal confirmation result page.
 func verifyPage(title, body string) string {
 	return "<!doctype html><meta charset=utf-8><title>" + title + "</title>" +
@@ -739,7 +836,7 @@ func (a *app) handleDomain(s ssh.Session) {
 		_ = s.Exit(1)
 		return
 	}
-	// Custom domains are a Premium perk ($10 lifetime). ensurePremium also
+	// Custom domains are a Founding Lifetime perk ($99 one-time). ensurePremium also
 	// catches a payment that settled since their last visit.
 	if !a.ensurePremium(&u) {
 		wish.Println(s, strings.Join([]string{
@@ -883,7 +980,7 @@ func (a *app) torMember(s ssh.Session, route string) (store.User, bool) {
 		return store.User{}, false
 	}
 	if !a.ensurePremium(&u) {
-		wish.Println(s, "  "+route+" is a Premium feature ($10 lifetime). Upgrade: ssh join@"+a.host)
+		wish.Println(s, "  "+route+" is a Founding Lifetime Member feature ($99 one-time, lifetime). Upgrade: ssh join@"+a.host)
 		_ = s.Exit(1)
 		return store.User{}, false
 	}
@@ -983,6 +1080,43 @@ func (a *app) handleIRC(s ssh.Session) {
 	}
 }
 
+// handleNews drops a member into the BBS's own (members-only) Usenet/NNTP server
+// using an in-process newsreader: it authenticates to the loopback NNTP listener
+// as the member and runs a Bubble Tea TUI to browse groups, read, and post. Free
+// for any registered member; needs a PTY. External newsreaders and agents reach
+// the same server over NNTPS at news.<host>:563.
+func (a *app) handleNews(s ssh.Session) {
+	fp := auth.Fingerprint(s.PublicKey())
+	if fp == "" {
+		wish.Println(s, "news@ needs your registered SSH key. New here? ssh join@"+a.host)
+		_ = s.Exit(1)
+		return
+	}
+	u, found, err := a.st.UserByFingerprint(fp)
+	if err != nil || !found {
+		wish.Println(s, "the news server is members-only — register first: ssh join@"+a.host)
+		_ = s.Exit(1)
+		return
+	}
+	if u.Banned {
+		wish.Println(s, "this account is suspended.")
+		_ = s.Exit(1)
+		return
+	}
+	sessID, _ := a.st.RecordSession(u.ID, s.User(), remoteIP(s), "news")
+	defer func() { _ = a.st.EndSession(sessID) }()
+
+	addr := a.newsAddr
+	if addr == "" {
+		addr = news.DefaultAddr
+	}
+	log.Info("news connect", "user", u.Name, "addr", addr)
+	if err := news.RunReader(s, addr, u.Name); err != nil {
+		wish.Println(s, "news: "+err.Error())
+		_ = s.Exit(1)
+	}
+}
+
 // handleTorCmd runs an arbitrary command through Tor (torsocks) inside the
 // member's pod, never on the host. Premium; requires a PTY.
 func (a *app) handleTorCmd(s ssh.Session) {

deploy/news-refresh-certs.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+#
+# news-refresh-certs.sh — copy Caddy's Let's Encrypt cert for news.$DOMAIN into
+# the dir the agentbbs NNTP server reads, so NNTPS on :563 tracks Caddy's
+# auto-renewals. setup.sh installs this to /usr/local/bin/agentbbs-news-certs
+# and runs it from agentbbs-news-certs.timer.
+#
+# The NNTP server runs INSIDE the agentbbs process (not a separate service like
+# Ergo) and re-stats its cert files every 30s, so this script only has to copy
+# the files into place — no service reload is needed. Caddy is the only ACME
+# client on the box and obtains the news.$DOMAIN cert from the `news.$DOMAIN`
+# site block in the Caddyfile; we reuse that cert rather than running a second
+# ACME client. Exits non-zero (touching nothing) until Caddy has issued it; on
+# first boot setup.sh drops in a self-signed cert until this timer swaps it in.
+set -euo pipefail
+
+DOMAIN="${DOMAIN:?set DOMAIN}"
+NEWS_HOST="${NEWS_HOST:-news.${DOMAIN}}"
+NEWS_TLS_DIR="${NEWS_TLS_DIR:-/var/lib/agentbbs/news-tls}"
+SVC_USER="${SVC_USER:-agentbbs}"
+CADDY_DATA="${CADDY_DATA:-/var/lib/caddy/.local/share/caddy}"
+
+# Caddy stores certs under certificates/<acme-dir>/<host>/<host>.{crt,key};
+# the ACME directory segment varies (prod vs staging), so glob for it.
+crt="$(ls "$CADDY_DATA"/certificates/*/"$NEWS_HOST"/"$NEWS_HOST".crt 2>/dev/null | head -1 || true)"
+key="$(ls "$CADDY_DATA"/certificates/*/"$NEWS_HOST"/"$NEWS_HOST".key 2>/dev/null | head -1 || true)"
+if [ -z "$crt" ] || [ -z "$key" ]; then
+  echo "no Caddy cert for $NEWS_HOST yet (looked under $CADDY_DATA/certificates)"
+  exit 1
+fi
+
+install -d -m 0750 "$NEWS_TLS_DIR"
+
+changed=0
+if ! cmp -s "$crt" "$NEWS_TLS_DIR/fullchain.pem"; then install -m 0644 "$crt" "$NEWS_TLS_DIR/fullchain.pem"; changed=1; fi
+if ! cmp -s "$key" "$NEWS_TLS_DIR/privkey.pem";  then install -m 0640 "$key" "$NEWS_TLS_DIR/privkey.pem";  changed=1; fi
+chown -R "$SVC_USER:$SVC_USER" "$NEWS_TLS_DIR" 2>/dev/null || true
+
+if [ "$changed" = 1 ]; then
+  echo "updated news TLS cert for $NEWS_HOST (agentbbs auto-reloads within 30s)"
+else
+  echo "news TLS cert for $NEWS_HOST already current"
+fi