NowPage Command Center

The build map. Where we are, where we're going, and why it matters.

The Core: NowPage is a live proof weapon. You sit across from someone, demonstrate value in real-time, and the page IS the demo. No pitch deck. No follow-up email. The page speaks for itself.

Everything below serves this. Each phase unlocks a multiplier on the one before it. Vault unlocks team independence. Teams unlock Derek and Will running their own pipeline. MCP unlocks speed. Mobile unlocks the coffee shop moment — the one where someone watches you build their page while they're still talking.

The order matters. You can't do Mobile without Vault (BYOK keys for transcription). You can't do Teams without Vault (shared secrets). But each phase ships independently and delivers value on its own.

The Build

Phase 1 Credential Vault Shipped

Why this was first: Every API key lived in Vercel env vars that only Jason could touch. Derek wanted to run Reveal with his own Anthropic key. Will wanted to test with a different model. They couldn't — bottlenecked on one person's credentials.

The Vault fixed this with two encrypted functions (encrypt/decrypt) that become the entire swap surface for MasteryOS later. Today it's a Supabase table with AES-256-GCM. Tomorrow it's a MasteryOS API call. Zero other code changes.

Derek stores his own ANTHROPIC_API_KEY → his Reveal runs use his key → his usage, his costs, his independence. Remove the key? Falls back to the platform default. Simple.

Shipped March 6, 2026. AES-256-GCM encryption, full CRUD API, VaultManager UI, resolveKey() integrated into all 6 studio routes. Migration pending Supabase application.

▼ vault enables team secrets ▼
Phase 2 Teams + Roles Planned

Internal first, product later. Derek, Will, and Jason need to share domains without stepping on each other's pages. Derek should edit pages but not manage team membership. Will should have full admin. Viewers (future clients?) see dashboards and analytics but can't break anything.

The same tables and RLS policies that serve the internal team today become paid team seats tomorrow. We're not building billing or onboarding — just clean tenant isolation that happens to be exactly what a SaaS product needs.

Create "Athio" team → share root domains → Derek sees only Athio domains and pages → his vault secrets resolve before the team's, which resolve before env vars. Three-tier BYOK, zero config.
▼ teams + vault enable secure MCP access ▼
Phase 3 MCP + Skill Bridge Planned

Claude Code is the daily driver. Right now, publishing a page means running a node script with 6 flags. The /publish skill makes it one command. MCP makes the entire platform programmable — list pages, move them between domains, check analytics, read vault secrets — all from Claude Code or any AI tool.

This is where the workflow compounds. Today: edit file → compile → publish → open browser → verify. Tomorrow: "publish this to ideas.asapai.net" and it's done. The AI handles the compile, the slug detection, the domain lookup, the URL opening.

API keys carry full user context → MCP vault access scoped to the key owner → domain operations scoped to their permissions. One auth model, everywhere. No separate logins for different tools.
▼ mcp + vault enable mobile BYOK transcription ▼
Phase 4 Mobile PWA Planned

This is the headline demo. You're at a networking event. You pull out your phone, record the conversation. 30 seconds later, you show them a QR code. They scan it. They see a page with their name, their pain points, their opportunities — built while you were talking to them.

Page 1 generates fast with links to deeper pages already baked in. Background loop builds pages 2, 3, 4 while they're reading the first one. Full depth, but the wow moment is instant. Before an event, preset your template, CTA, and domain — then the flow is: record, name, generate. Three taps to QR.

Every conversation becomes a lead-gen machine. The page has a natural CTA to connect with you. Return visitors get a soft gate. After N visits, email capture. The page earns the connection, never demands it.

Depends on: Phase 1 (Vault) for BYOK transcription API keys. Reveal pipeline already exists — Mobile is a new frontend for it.

Shipped

Everything below is live in production. This is the foundation the build phases extend.

Reveal Engine
Transcript → multi-page intelligence reports
Template System
Selection, page count badges, reverse engineering
Quote Verification
Zero-hallucination engine + fact checking
Studio Controls
Depth, viral sections, email gate, password gate
Analytics + Tracking
Page events, tracking snippet, dashboard card
ICP Profiles
One Sentence Persuasion, multi-ICP, DO/DON'T rules
CRM Profiles
LinkedIn extraction, dreams/fears, communication notes
Voice Profiles
First-principles voice DNA, AI-tell gates
Design Studio
Color/font picker, URL extraction, layout styles
Input Pipeline
PDF/DOCX upload, URL extraction, improve suggestions
Multi-tenant Infra
User domains, RLS, API keys, root domain sharing
MCP Server (v1)
publish_page, list_domains, list_templates, get_page

Second Order

Not on the critical path, but captured and scoped. These get built when the primary phases create breathing room.

2nd Order Ops Dashboard Planned

Self-service infrastructure. Managing Vercel env vars and running Supabase migrations requires switching to external dashboards that only Jason can access. This creates a bottleneck.

Three layers: Vercel env var sync (read/write/push-pull with vault), SQL editor with read-only mode, and migration runner with schema browser. All admin-only with full audit logging.

Rotate a key in the vault → one click pushes it to Vercel. Run a migration without leaving the app. Browse the schema without opening Supabase Studio.

Documentation