Four-task consolidated audit: hub publish, cadence review, documentation hygiene, TCPA counsel shortlist.
| Artifact | Worker name | URL | Status |
|---|---|---|---|
| EOD status report | giftcue-status-may2026 | giftcue-status-may2026.jason-8ce.workers.dev | 200 · live · 11,649 bytes |
| Hub patch | bosstorque-hub | bosstorque-hub.jason-8ce.workers.dev | version d3d228ce · GiftCue 12 cards |
Card inserted at top of giftcue-grid with data-date="2026-05-12". Section stat tile and toggle count both bumped 11 → 12. JS resort enforcer keeps it sorted newest-first.
The current cadence was built for a pre-transaction GiftCue (content stockpiling). Now that there's a Stripe paywall, live Resend email delivery, real Google Places hydration, and a four-channel Slack relay, several blind spots open up:
charge.dispute.created webhook fires and only the worker handler knows — never reaches a human.giftcue-sessions. Free tier ceiling is 1 GB; with 4 cached photos at ~600KB plus per-session metadata, every 350 sessions = ~1 GB./api/checkout/create signature verification could break revenue for hours before a real customer surfaces it.All listed for Jason's review — NOT created. Each ships to a specific bt-notify channel so the right phone buzzes.
| Name | Cadence | Channel | What it does |
|---|---|---|---|
giftcue-daily-tx-digest |
Daily 7:00 AM PT | giftcue | Pulls yesterday's Stripe activity: checkouts created, paid, refunded, disputed, gross/net. Pulls KV session counts (new sessions, opened, picked, fulfilled). 4-line digest. Skip post if zero activity AND zero last-7-day activity. |
giftcue-stripe-alerts |
Every 30 min, M–Su | giftcue | Tail-poll Stripe events API for new charge.dispute.created, charge.refunded, radar.early_fraud_warning.created. Push immediately to phone with charge details and direct Stripe dashboard link. Material-change only — silent if quiet. |
giftcue-email-health |
Daily 7:10 AM PT | giftcue | Hits Resend stats API (or counts suppression-list size via webhook events in KV). Posts only if bounce rate > 2%, complaint rate > 0.1%, or suppression list grew by > 10 in 24h. Includes the offending addresses if available. |
giftcue-places-spend-watch |
Daily 7:15 AM PT | giftcue | Counts Places Text Search / geocode calls in the previous 24h (logged to KV by the hydrator). Projects monthly spend at current rate. Posts only if projected month-end > $50 or 24h calls > 500. |
giftcue-kv-size-watch |
Weekly Sun 5:30 PM PT | giftcue | Lists giftcue-sessions KV namespace via CF API, totals approximate bytes (key count + cached photo size estimate). Posts current usage + projected free-tier crossover date. Trigger an early upgrade or cleanup decision at 70% of 1 GB. |
giftcue-smoke-test |
Daily 7:20 AM PT | giftcue | Hits /api/checkout/create, /api/send-email, /api/help, /api/resend/webhook with synthetic auth payloads. Verifies signature gates reject unsigned/expired/bad-payload calls (expect 401/403). Verifies signed test payloads succeed. Posts ONLY on regression (any gate flipped open or any 5xx). |
giftcue-weekly-funnel |
Weekly Sun 6:00 PM PT | giftcue | Companion to the Sunday CEO update. Runs 1 hour before it. Builds a 7-day funnel table from Stripe + KV event log: sessions created → paid → email sent → opened → picked → fulfilled. Saves the table as a partial that the CEO update embeds. Decoupled because CEO update is qualitative; this is the numbers. |
You are running giftcue-daily-tx-digest. Pull Stripe payment_intents created in the last 24h via the stripe-giftcue MCP. Summarize: - Checkouts created: N - Paid: $X (count) - Refunded: $Y (count) - Disputed: $Z (count) - Conversion (paid/created): NN% Pull KV event log from giftcue-sessions via the CF API for the same window. Summarize sessions created / opened / picked / fulfilled. Compose 4 lines max, prepend "GiftCue daily — YYYY-MM-DD". Call bt-notify POST /send with channel=giftcue. If zero activity AND zero last-7-day activity, suppress the post entirely.
You are running giftcue-smoke-test. For each of: POST https://giftcue.app/api/checkout/create POST https://giftcue.app/api/send-email POST https://giftcue.app/api/resend/webhook issue (1) an unsigned request — expect 401, (2) a request with bad HMAC — expect 401, (3) a valid signed test request with a synthetic session id prefixed "smoke-" — expect 200. Verify GET /api/help returns 200 with non-empty JSON. Post to bt-notify channel=giftcue ONLY if any gate is open, any 5xx fires, or latency > 3000ms on any endpoint. Otherwise silent.
143 workers deployed · 103 referenced in hub · 43 workers without hub cards · 3 hub cards pointing to deleted workers.
| Worker | What it does | Section |
|---|---|---|
bt-notify | Unified Slack push relay for all 4 channels. Backbone of the new comms model. | BT Internal |
giftcue-relay | Hugo Mercer Slack relay. The CEO operating model lives in this worker. | GiftCue |
getgiftcue-landing-may2026 | Public marketing site + waitlist capture at getgiftcue.com. | GiftCue |
giftcue-redirects-may2026 | 301s giftcue.ai and giftcue.org → giftcue.app. | GiftCue |
mdp-api-proxy-may2026 | Anthropic call proxy used by giftcue-may2026 to avoid same-zone subrequest recursion. | GiftCue |
mothers-day-picker-may2026 | Original MDP app for Mom — still live. | Personal |
sperry-hub | Sperry's dedicated dashboard. Should be cross-linked from BT hub. | Sperry |
bt-email-monitor + bt-email-monitor-auth | Email-event monitoring infrastructure. | BT Internal |
bosstorque-site | The main bosstorque.ai homepage worker. | BT Internal |
bosstorque-legal | BT legal pages (privacy, TOS). | BT Internal |
bt-quicken-cleanup-may2026 | Quicken automation infrastructure. | BT Internal |
These either look like throwaway temp workers OR legitimate deliverables that lost their hub card. Each needs a 30-second triage: "still useful? if yes → add card. if no → wrangler delete."
email-ws2-03-temp, fancy-frog-c42e, sperry-kit-template-temp, sperry-ws2-email3-preview, sperry-email-draft-may2026, sperry-club-enrollment-preview, sperry-club-thankyou, sperry-estimate-thankyou, sperry-spring-lp-apr2026, sperry-winner-preview, sperry-weekly-may8-2026, sperry-sow-actual-may2026, sperry-referral-log, sperry-referral-share, sperry-image-library-may2026, sperry-jobber-proxy, sperry-assets, sperry-assets-apr2026, sperry-assets-serve, sperry-bosstorque-tos, sperry-accuracy-ref, sperry-punchlist-apr2026, jobber-webhook, lazar-icp-may12-2026, bt-automation-security-scan-mar2026, bt-pipedrive-setup-apr2026, bt-tree-care-market-sizing-may2026, bt-tree-care-starter-sample-may2026, seated-relay, bosstorque-meta-ad-template.
sperry-email-templates — referenced in hub, not in workers list. Card is a 404.sperry-email4-copy — same.sperry-friction-report — same. (A newer sperry-friction-report-may2026 exists and IS in workers list — likely the card URL just needs the -may2026 suffix added.)project_giftcue.mdThe canonical project memory was last updated through email-delivery push (2026-05-11). It does not reflect today's V1.2 state.
| Item | Memory says | Actual state today |
|---|---|---|
| Option count | "8 personalized options" | 12 options (Task 22) |
| Vendor photos | Flux generation only | Google Places real-vendor photos as hero, Flux as fallback |
| Payment | "Stripe live mode for sender payment" listed under "NOT built yet" | Stripe test mode is fully wired end-to-end; only live-mode swap remains |
| Not mentioned | Resend live on mail.giftcue.app, DKIM+SPF+MX verified, post-pick confirmation email shipped | |
| Slack architecture | Mentions giftcue-relay only | bt-notify unified relay live; 4 channels (giftcue / sperry / bt-ops / personal); 25 scheduled tasks migrated to it |
| Scheduled tasks | "Total scheduled tasks: 7" | ~24 currently active across personal + projects (the memory only counted GiftCue ones at the time it was written, but the framing now lies to future Claude) |
| Brand voice / casing / recommendation rules | Captured in memory | Captured. Also need to verify they are mirrored in the remote rules at bosstorque-rules.jason-8ce.workers.dev and in Hugo's KV context — see action below. |
HUGO_CONTEXT.md stored in KV namespace giftcue-hugo-context (key hugo:context) was last pushed before today's V1.2 work. It almost certainly still says "8 options" and "no Stripe, no email" because it predates Stripe + Resend + Places.
Hugo's awareness is the system that talks to Jason in #giftcue and answers customer messages — outdated context = wrong answers. Refresh required.
| Name | Cadence | Channel | What it does |
|---|---|---|---|
bt-doc-hygiene-weekly |
Weekly Sun 8:00 PM PT | bt-ops | Scans for hub-vs-worker drift, memory drift, and Hugo KV drift. Posts a delta report only if any drift exists. Silent otherwise. |
You are running bt-doc-hygiene-weekly. Run all three checks in parallel:
CHECK 1 — HUB vs WORKERS
1. curl Cloudflare API for the list of all worker scripts under
account 8cef3a20d2c22491d2bbbc594cf4865d (token from
~/.wrangler/config/default.toml).
2. Fetch current bosstorque-hub worker source via the same API,
strip multipart, regex-extract every {name}.jason-8ce.workers.dev
URL.
3. Diff: workers without cards, cards pointing to dead workers.
CHECK 2 — MEMORY CURRENCY
1. Read project_giftcue.md.
2. Read the most recent EOD status report in
/Users/Jason/My Drive/.../GiftCue/ (project-status-*.html, newest).
3. Compare: option count, vendor photo source, payment state, email
state, Slack channel count, scheduled task count. Flag any
contradiction.
CHECK 3 — HUGO KV CONTEXT
1. GET https://giftcue-relay.jason-8ce.workers.dev/context/peek
with bearer token from
/Users/Jason/My Drive/.../.giftcue-relay-token
2. Compare top-of-file "current state" lines vs the same checks
as Check 2.
OUTPUT
- If zero drift across all three checks: silent. No bt-notify post.
- If any drift: bt-notify POST /send channel=bt-ops with a delta
report. Include exact remediation commands inline.
Constraints: target $2-5K one-time review (lower ideal), proven TCPA / SMS marketing depth, Oregon-preferred but remote OK, queued NOT engaged. Goal: SMS consent UX + Privacy Policy + TOS review sufficient to clear Twilio A2P registration.
| Firm / attorney | Location | Why this fit | Likely range | Contact |
|---|---|---|---|---|
| Klein Moynihan Turco (KMT) Telemarketing, Technology & Internet practice |
New York (remote nationwide) | Most-published TCPA defense firm in the country. Publishes deep ongoing coverage of one-to-one consent rule, SMS consent scope, Texas mini-TCPA, AI TCPA suits. Their consent UX recommendations carry weight with carriers reviewing A2P brand registrations. Almost certainly the most TCPA-expert choice on this list. | $5-10K likely for a packaged review; ask about scoped flat fee for "SMS launch readiness: consent UX + PP + TOS" | kleinmoynihan.com — intake form / 212-246-0900 |
| Hinch Newman LLP Richard B. Newman, internet marketing law |
New York (remote nationwide) | Specifically advertises "develop compliant telemarketing scripts, internal and external policies, and training procedures." Practice description maps almost line-for-line to what GiftCue needs (consent disclosure language, opt-out flow, Privacy Policy SMS section, TOS messaging clause). Newman is widely cited as a top FTC + TCPA defense lawyer. | $3-6K likely for a fixed-scope compliance package; explicitly offers compliance counseling at flat rates | hinchnewman.com / 212-756-8777 · ftcdefenselawyer.com |
| Tonkon Torp LLP Information Privacy & Security practice |
Portland, OR | 90+ attorney Oregon firm. Strongest match on the "Oregon preferred" constraint — they understand OCPA, ORS 646A.372 (Oregon's mini-TCPA), and ORS 646.569 (Oregon DNC). Privacy & Data Security team handles state-and-federal compliance packages for technology businesses. Less TCPA-specific than KMT/Hinch Newman, but they will reach a TCPA specialist via their network if needed and supply the Oregon-law overlay locally. | $4-8K. Mid-market Oregon hourly is typically $400-550 — a fixed-scope review usually quotes 8-14 hours of work. | tonkon.com — Privacy & Security practice / 503-221-1440 |
| Traverse Legal Enrico Schaefer + team, TCPA + mini-TCPA practice |
Traverse City, MI (fully remote, startup-friendly) | Tech-startup-oriented practice. Explicitly markets "align growth strategy with TCPA + state mini-TCPA compliance for SMS operators before litigation arises." Has published actionable guidance on Texas mini-TCPA amendments. Frequently engages with founder-stage companies, so unlikely to insist on enterprise retainer minimums. Good "startup speed of decision" fit. | $2-5K achievable for a tightly scoped SMS launch review; they will quote a flat fee if asked directly | traverselegal.com — startup intake page / 866-936-7447 |
| Anne W. Glazer (Stoel Rives LLP) IP & marketing, Portland office |
Portland, OR | Stoel Rives is Oregon's largest firm. Glazer's profile is IP / marketing / advertising compliance — a generalist who can run point on Privacy Policy + TOS revisions and pull in TCPA specialists at the firm for the SMS layer. Highest hourly rate of the five but also highest cross-jurisdictional credibility if GiftCue ever scales meaningfully. | $6-12K — explicitly the premium option; only worth it if Jason wants Stoel Rives' name on the file | stoel.com/people/anne-w-glazer / 503-294-9846 |
Hinch Newman first. Best price-to-TCPA-depth ratio on the list, advertised flat-fee compliance packages, and the practice description aligns to a sentence-level match with what GiftCue needs. Tonkon Torp as Oregon-overlay second opinion if Jason wants in-state representation on file.
Hold engagement until $5K MRR per the existing rule. At first profitable month, send Hinch Newman a single email: "Pre-launch SMS compliance review — consent UX, Privacy Policy, TOS revision. Existing drafts attached. Need a quote." That email takes 10 minutes to send.
d3d228ce live with both cards in the GiftCue section.project_giftcue.md and HUGO_CONTEXT.md both need a V1.2 refresh — that's the highest-impact memory drift.