@rubytech/create-maxy-code 0.1.60 → 0.1.62

package/payload/platform/plugins/epc/mcp/dist/lib/epc-api.js

@@ -0,0 +1,181 @@
+import { selectKeyStore } from "./key-store.js";
+// gov.uk EPC register HTTP client. The register lives at
+// epc.opendatacommunities.org and is reached via Basic auth where the
+// credential is `<email>:<api-key>` (the email is the account that
+// generated the key on the dashboard). We store the credential as a single
+// colon-joined string so the key-management surface mirrors property-data
+// exactly (one `apiKey` field per account).
+//
+// Response shape (domestic/search):
+//   { "column-names": [...], "rows": [ { "lmk-key": "...",
+//     "address1": "...", "address2": "...", "address3": "...",
+//     "posttown": "...", "postcode": "...", "uprn": "...",
+//     "current-energy-rating": "C", "potential-energy-rating": "B",
+//     "lodgement-date": "2023-05-15", "total-floor-area": "75.0", ... } ] }
+//
+// Multiple EPCs per property appear as separate rows (one per lodgement).
+// Callers group by UPRN (or address fallback) and pick the most-recent
+// row per property.
+export const BASE_URL = "https://epc.opendatacommunities.org/api/v1";
+export const REQUEST_TIMEOUT_MS = 15_000;
+export const M2_TO_SQFT = 10.7639;
+export class KeyNotRegisteredError extends Error {
+    constructor() {
+        super("key-not-registered");
+        this.name = "KeyNotRegisteredError";
+    }
+}
+export class EpcError extends Error {
+    status;
+    endpoint;
+    upstreamMessage;
+    constructor(status, endpoint, upstreamMessage) {
+        super(`http-${status} from EPC endpoint=${endpoint}: ${upstreamMessage}`);
+        this.status = status;
+        this.endpoint = endpoint;
+        this.upstreamMessage = upstreamMessage;
+        this.name = "EpcError";
+    }
+}
+export class BadResponseError extends Error {
+    endpoint;
+    length;
+    constructor(endpoint, length) {
+        super(`bad-response from EPC endpoint=${endpoint} (non-JSON, length=${length})`);
+        this.endpoint = endpoint;
+        this.length = length;
+        this.name = "BadResponseError";
+    }
+}
+export async function loadAccountKey(accountId) {
+    const stored = await selectKeyStore().load(accountId);
+    if (!stored)
+        return null;
+    return { createdAt: stored.createdAt, updatedAt: stored.updatedAt };
+}
+export async function resolveAccountApiKey(accountId) {
+    const envKey = process.env.EPC_API_KEY;
+    if (envKey && envKey.trim())
+        return envKey.trim();
+    const stored = await selectKeyStore().load(accountId);
+    if (!stored)
+        throw new KeyNotRegisteredError();
+    return stored.apiKey;
+}
+function basicAuthHeader(credential) {
+    return `Basic ${Buffer.from(credential, "utf-8").toString("base64")}`;
+}
+export async function epcSearch(opts) {
+    const { toolName, accountId, identifier, params } = opts;
+    const credential = await resolveAccountApiKey(accountId);
+    const search = new URLSearchParams();
+    for (const [k, v] of Object.entries(params)) {
+        if (v === undefined || v === null || v === "")
+            continue;
+        search.set(k, String(v));
+    }
+    const endpoint = "domestic/search";
+    const url = `${BASE_URL}/${endpoint}?${search.toString()}`;
+    const start = Date.now();
+    const response = await fetch(url, {
+        headers: {
+            Accept: "application/json",
+            Authorization: basicAuthHeader(credential),
+        },
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+    });
+    const ms = Date.now() - start;
+    const statusTag = response.ok
+        ? "ok"
+        : response.status === 404
+            ? "http-404"
+            : `http-${Math.floor(response.status / 100)}xx`;
+    console.error(`[epc] tool=${toolName} account=${accountId} address="${identifier}" status=${statusTag} ms=${ms}`);
+    // 404 is a valid outcome — no EPC on file for the address. Surface to the
+    // caller as an empty result set; the wrapper turns it into ok+[].
+    if (response.status === 404) {
+        return { status: 404, rows: [] };
+    }
+    if (!response.ok) {
+        const body = await response.text().catch(() => "");
+        throw new EpcError(response.status, endpoint, body.slice(0, 200));
+    }
+    const text = await response.text();
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        throw new BadResponseError(endpoint, text.length);
+    }
+    if (!parsed ||
+        typeof parsed !== "object" ||
+        Array.isArray(parsed) ||
+        !("rows" in parsed)) {
+        throw new BadResponseError(endpoint, text.length);
+    }
+    const rows = parsed.rows;
+    if (!Array.isArray(rows)) {
+        throw new BadResponseError(endpoint, text.length);
+    }
+    return { status: response.status, rows: rows };
+}
+// Compose the human-readable address from the upstream row's parts. Empty
+// segments are dropped; segments are uppercase in the API and join with
+// ", ".
+function rowAddress(row) {
+    const parts = [row.address1, row.address2, row.address3, row.posttown, row.postcode]
+        .map((s) => (typeof s === "string" ? s.trim() : ""))
+        .filter((s) => s.length > 0);
+    return parts.join(", ");
+}
+function parseFloorArea(row) {
+    const raw = row["total-floor-area"];
+    if (raw == null || raw === "")
+        return null;
+    const n = Number(raw);
+    return Number.isFinite(n) ? n : null;
+}
+// Group rows by UPRN (or address1+postcode when UPRN is absent), then pick
+// the most-recent EPC per group by lodgement date. Rows with no lodgement
+// date sort last.
+export function groupAndPickMostRecent(rows) {
+    const buckets = new Map();
+    for (const row of rows) {
+        const uprn = typeof row.uprn === "string" ? row.uprn.trim() : "";
+        const key = uprn || `${row.address1 ?? ""}|${row.postcode ?? ""}`.toLowerCase();
+        const existing = buckets.get(key);
+        if (existing)
+            existing.push(row);
+        else
+            buckets.set(key, [row]);
+    }
+    const out = [];
+    for (const bucket of buckets.values()) {
+        bucket.sort((a, b) => {
+            const da = String(a["lodgement-date"] ?? "");
+            const db = String(b["lodgement-date"] ?? "");
+            // Most-recent first: ISO dates string-sort correctly.
+            return db.localeCompare(da);
+        });
+        const winner = bucket[0];
+        const m2 = parseFloorArea(winner);
+        out.push({
+            total_floor_area_m2: m2,
+            total_floor_area_sqft: m2 == null ? null : Number((m2 * M2_TO_SQFT).toFixed(2)),
+            current_energy_rating: typeof winner["current-energy-rating"] === "string"
+                ? winner["current-energy-rating"]
+                : null,
+            potential_energy_rating: typeof winner["potential-energy-rating"] === "string"
+                ? winner["potential-energy-rating"]
+                : null,
+            lodgement_date: typeof winner["lodgement-date"] === "string"
+                ? winner["lodgement-date"]
+                : null,
+            address: rowAddress(winner),
+            uprn: typeof winner.uprn === "string" && winner.uprn.length > 0 ? winner.uprn : null,
+        });
+    }
+    return out;
+}
+//# sourceMappingURL=epc-api.js.map

package/payload/platform/plugins/epc/mcp/dist/lib/epc-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"epc-api.js","sourceRoot":"","sources":["../../src/lib/epc-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,yDAAyD;AACzD,sEAAsE;AACtE,mEAAmE;AACnE,2EAA2E;AAC3E,0EAA0E;AAC1E,4CAA4C;AAC5C,EAAE;AACF,oCAAoC;AACpC,2DAA2D;AAC3D,+DAA+D;AAC/D,2DAA2D;AAC3D,oEAAoE;AACpE,4EAA4E;AAC5E,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,oBAAoB;AAEpB,MAAM,CAAC,MAAM,QAAQ,GAAG,4CAA4C,CAAC;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACzC,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC;AAElC,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C;QACE,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEf;IACA;IACA;IAHlB,YACkB,MAAc,EACd,QAAgB,EAChB,eAAuB;QAEvC,KAAK,CAAC,QAAQ,MAAM,sBAAsB,QAAQ,KAAK,eAAe,EAAE,CAAC,CAAC;QAJ1D,WAAM,GAAN,MAAM,CAAQ;QACd,aAAQ,GAAR,QAAQ,CAAQ;QAChB,oBAAe,GAAf,eAAe,CAAQ;QAGvC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACb;IAAkC;IAA9D,YAA4B,QAAgB,EAAkB,MAAc;QAC1E,KAAK,CAAC,kCAAkC,QAAQ,sBAAsB,MAAM,GAAG,CAAC,CAAC;QADvD,aAAQ,GAAR,QAAQ,CAAQ;QAAkB,WAAM,GAAN,MAAM,CAAQ;QAE1E,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAOD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB;IACpD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACvC,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;IAC/C,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB;IACzC,OAAO,SAAS,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACxE,CAAC;AAkCD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAsB;IACpD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACzD,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE;YAAE,SAAS;QACxD,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC;IACnC,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAE3D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,aAAa,EAAE,eAAe,CAAC,UAAU,CAAC;SAC3C;QACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;KAChD,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IAE9B,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE;QAC3B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG;YACvB,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC;IACpD,OAAO,CAAC,KAAK,CACX,cAAc,QAAQ,YAAY,SAAS,aAAa,UAAU,YAAY,SAAS,OAAO,EAAE,EAAE,CACnG,CAAC;IAEF,0EAA0E;IAC1E,kEAAkE;IAClE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,IACE,CAAC,MAAM;QACP,OAAO,MAAM,KAAK,QAAQ;QAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACrB,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,EACnB,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,IAAI,GAAI,MAA4B,CAAC,IAAI,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAgB,EAAE,CAAC;AAC7D,CAAC;AAYD,0EAA0E;AAC1E,wEAAwE;AACxE,QAAQ;AACR,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC;SACjF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACnD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,GAAG,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACpC,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,2EAA2E;AAC3E,0EAA0E;AAC1E,kBAAkB;AAClB,MAAM,UAAU,sBAAsB,CAAC,IAAc;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;QAChF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;YAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACnB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7C,sDAAsD;YACtD,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC;YACP,mBAAmB,EAAE,EAAE;YACvB,qBAAqB,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC/E,qBAAqB,EACnB,OAAO,MAAM,CAAC,uBAAuB,CAAC,KAAK,QAAQ;gBACjD,CAAC,CAAE,MAAM,CAAC,uBAAuB,CAAY;gBAC7C,CAAC,CAAC,IAAI;YACV,uBAAuB,EACrB,OAAO,MAAM,CAAC,yBAAyB,CAAC,KAAK,QAAQ;gBACnD,CAAC,CAAE,MAAM,CAAC,yBAAyB,CAAY;gBAC/C,CAAC,CAAC,IAAI;YACV,cAAc,EACZ,OAAO,MAAM,CAAC,gBAAgB,CAAC,KAAK,QAAQ;gBAC1C,CAAC,CAAE,MAAM,CAAC,gBAAgB,CAAY;gBACtC,CAAC,CAAC,IAAI;YACV,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;YAC3B,IAAI,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;SACrF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/payload/platform/plugins/epc/mcp/dist/lib/file-crypto.d.ts

@@ -0,0 +1,3 @@
+export declare function encryptWith(plaintext: string, keyFilePath: string, label: string): string;
+export declare function decryptWith(encryptedValue: string, keyFilePath: string, label: string): string;
+//# sourceMappingURL=file-crypto.d.ts.map

package/payload/platform/plugins/epc/mcp/dist/lib/file-crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-crypto.d.ts","sourceRoot":"","sources":["../../src/lib/file-crypto.ts"],"names":[],"mappings":"AA8BA,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAQzF;AAED,wBAAgB,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAc9F"}

package/payload/platform/plugins/epc/mcp/dist/lib/file-crypto.js

@@ -0,0 +1,49 @@
+import { randomBytes, createCipheriv, createDecipheriv } from "node:crypto";
+import { readFileSync, writeFileSync, existsSync } from "node:fs";
+// Standalone-mode crypto. Same AES-256-GCM envelope as crypto.ts, but the
+// encryption-key file path is passed in (not derived from PLATFORM_ROOT /
+// brand.json), so it can live under ~/.claude/ when the MCP is spawned by
+// Claude Code natively.
+const ALGORITHM = "aes-256-gcm";
+const KEY_LENGTH = 32;
+const IV_LENGTH = 12;
+const AUTH_TAG_LENGTH = 16;
+function loadOrGenerateKey(keyFilePath, label) {
+    if (existsSync(keyFilePath)) {
+        const hex = readFileSync(keyFilePath, "utf-8").trim();
+        const buf = Buffer.from(hex, "hex");
+        if (buf.length !== KEY_LENGTH) {
+            throw new Error(`[${label}] encryption key at ${keyFilePath} is ${buf.length} bytes, expected ${KEY_LENGTH}.`);
+        }
+        return buf;
+    }
+    const key = randomBytes(KEY_LENGTH);
+    writeFileSync(keyFilePath, key.toString("hex"), { mode: 0o600 });
+    console.error(`[${label}] encryption key generated at ${keyFilePath}`);
+    return key;
+}
+export function encryptWith(plaintext, keyFilePath, label) {
+    const key = loadOrGenerateKey(keyFilePath, label);
+    const iv = randomBytes(IV_LENGTH);
+    const cipher = createCipheriv(ALGORITHM, key, iv, { authTagLength: AUTH_TAG_LENGTH });
+    let encrypted = cipher.update(plaintext, "utf-8", "hex");
+    encrypted += cipher.final("hex");
+    const authTag = cipher.getAuthTag().toString("hex");
+    return `${iv.toString("hex")}:${encrypted}:${authTag}`;
+}
+export function decryptWith(encryptedValue, keyFilePath, label) {
+    const parts = encryptedValue.split(":");
+    if (parts.length !== 3) {
+        throw new Error(`[${label}] bad encrypted envelope (expected iv:ct:tag)`);
+    }
+    const key = loadOrGenerateKey(keyFilePath, label);
+    const iv = Buffer.from(parts[0], "hex");
+    const ciphertext = parts[1];
+    const authTag = Buffer.from(parts[2], "hex");
+    const decipher = createDecipheriv(ALGORITHM, key, iv, { authTagLength: AUTH_TAG_LENGTH });
+    decipher.setAuthTag(authTag);
+    let plaintext = decipher.update(ciphertext, "hex", "utf-8");
+    plaintext += decipher.final("utf-8");
+    return plaintext;
+}
+//# sourceMappingURL=file-crypto.js.map

package/payload/platform/plugins/epc/mcp/dist/lib/file-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-crypto.js","sourceRoot":"","sources":["../../src/lib/file-crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAElE,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,wBAAwB;AAExB,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,SAAS,iBAAiB,CAAC,WAAmB,EAAE,KAAa;IAC3D,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,IAAI,KAAK,uBAAuB,WAAW,OAAO,GAAG,CAAC,MAAM,oBAAoB,UAAU,GAAG,CAC9F,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACpC,aAAa,CAAC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,iCAAiC,WAAW,EAAE,CAAC,CAAC;IACvE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAAiB,EAAE,WAAmB,EAAE,KAAa;IAC/E,MAAM,GAAG,GAAG,iBAAiB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC;IACtF,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACzD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,cAAsB,EAAE,WAAmB,EAAE,KAAa;IACpF,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,+CAA+C,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,GAAG,GAAG,iBAAiB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC;IAC1F,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/payload/platform/plugins/epc/mcp/dist/lib/key-store.d.ts

@@ -0,0 +1,15 @@
+export interface StoredKey {
+    apiKey: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface KeyStore {
+    readonly backendName: string;
+    readonly backendPath: string;
+    load(accountId: string): Promise<StoredKey | null>;
+    save(accountId: string, apiKey: string): Promise<void>;
+    delete(accountId: string): Promise<boolean>;
+}
+export declare function selectKeyStore(): KeyStore;
+export declare function _resetKeyStoreForTests(): void;
+//# sourceMappingURL=key-store.d.ts.map

package/payload/platform/plugins/epc/mcp/dist/lib/key-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-store.d.ts","sourceRoot":"","sources":["../../src/lib/key-store.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7C;AA0ID,wBAAgB,cAAc,IAAI,QAAQ,CAIzC;AAED,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C"}

package/payload/platform/plugins/epc/mcp/dist/lib/key-store.js

@@ -0,0 +1,130 @@
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
+import { resolve, dirname } from "node:path";
+import { homedir } from "node:os";
+import { getSession } from "./neo4j.js";
+import { encrypt, decrypt } from "./crypto.js";
+import { encryptWith, decryptWith } from "./file-crypto.js";
+class Neo4jKeyStore {
+    backendName = "neo4j";
+    backendPath = process.env.NEO4J_URI ?? "<unset>";
+    async load(accountId) {
+        const session = getSession();
+        try {
+            const result = await session.run(`MATCH (k:EpcApiKey {accountId: $accountId})
+         RETURN k.encryptedKey AS encryptedKey,
+                k.createdAt AS createdAt,
+                k.updatedAt AS updatedAt`, { accountId });
+            if (result.records.length === 0)
+                return null;
+            const r = result.records[0];
+            return {
+                apiKey: decrypt(r.get("encryptedKey")),
+                createdAt: r.get("createdAt") ?? "",
+                updatedAt: r.get("updatedAt") ?? "",
+            };
+        }
+        finally {
+            await session.close();
+        }
+    }
+    async save(accountId, apiKey) {
+        const encryptedKey = encrypt(apiKey);
+        const now = new Date().toISOString();
+        const session = getSession();
+        try {
+            await session.run(`CREATE INDEX epc_api_key_account IF NOT EXISTS
+         FOR (k:EpcApiKey) ON (k.accountId)`, {});
+            await session.run(`MERGE (k:EpcApiKey {accountId: $accountId})
+         ON CREATE SET k.encryptedKey = $encryptedKey, k.createdAt = $now, k.updatedAt = $now
+         ON MATCH  SET k.encryptedKey = $encryptedKey, k.updatedAt = $now`, { accountId, encryptedKey, now });
+        }
+        finally {
+            await session.close();
+        }
+    }
+    async delete(accountId) {
+        const session = getSession();
+        try {
+            const result = await session.run(`MATCH (k:EpcApiKey {accountId: $accountId})
+         DELETE k
+         RETURN count(k) AS deleted`, { accountId });
+            const deleted = result.records[0]?.get("deleted")?.toNumber?.() ?? 0;
+            return deleted > 0;
+        }
+        finally {
+            await session.close();
+        }
+    }
+}
+const LABEL = "epc";
+class FileKeyStore {
+    backendName = "file";
+    backendPath;
+    storePath;
+    keyFilePath;
+    constructor() {
+        const home = homedir();
+        this.storePath = resolve(home, ".claude/.realagent-epc-key.enc");
+        this.keyFilePath = resolve(home, ".claude/.realagent-epc-encryption-key");
+        this.backendPath = this.storePath;
+    }
+    ensureDir() {
+        mkdirSync(dirname(this.storePath), { recursive: true });
+    }
+    readAll() {
+        if (!existsSync(this.storePath))
+            return {};
+        const blob = readFileSync(this.storePath, "utf-8").trim();
+        if (!blob)
+            return {};
+        const json = decryptWith(blob, this.keyFilePath, LABEL);
+        return JSON.parse(json);
+    }
+    writeAll(env) {
+        this.ensureDir();
+        const blob = encryptWith(JSON.stringify(env), this.keyFilePath, LABEL);
+        writeFileSync(this.storePath, blob, { mode: 0o600 });
+    }
+    async load(accountId) {
+        const env = this.readAll();
+        const entry = env[accountId];
+        if (!entry)
+            return null;
+        return {
+            apiKey: decryptWith(entry.encryptedKey, this.keyFilePath, LABEL),
+            createdAt: entry.createdAt,
+            updatedAt: entry.updatedAt,
+        };
+    }
+    async save(accountId, apiKey) {
+        const env = this.readAll();
+        const now = new Date().toISOString();
+        const encryptedKey = encryptWith(apiKey, this.keyFilePath, LABEL);
+        const prev = env[accountId];
+        env[accountId] = {
+            encryptedKey,
+            createdAt: prev?.createdAt ?? now,
+            updatedAt: now,
+        };
+        this.writeAll(env);
+    }
+    async delete(accountId) {
+        const env = this.readAll();
+        if (!(accountId in env))
+            return false;
+        delete env[accountId];
+        this.writeAll(env);
+        return true;
+    }
+}
+let cached = null;
+export function selectKeyStore() {
+    if (cached)
+        return cached;
+    cached = process.env.EPC_STANDALONE === "1" ? new FileKeyStore() : new Neo4jKeyStore();
+    return cached;
+}
+export function _resetKeyStoreForTests() {
+    cached = null;
+}
+//# sourceMappingURL=key-store.js.map

package/payload/platform/plugins/epc/mcp/dist/lib/key-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-store.js","sourceRoot":"","sources":["../../src/lib/key-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAsB5D,MAAM,aAAa;IACR,WAAW,GAAG,OAAO,CAAC;IACtB,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC;IAE1D,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;yCAGiC,EACjC,EAAE,SAAS,EAAE,CACd,CAAC;YACF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC5B,OAAO;gBACL,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACtC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE;gBACnC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE;aACpC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB,EAAE,MAAc;QAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CACf;4CACoC,EACpC,EAAE,CACH,CAAC;YACF,MAAM,OAAO,CAAC,GAAG,CACf;;0EAEkE,EAClE,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,EAAE,CACjC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;oCAE4B,EAC5B,EAAE,SAAS,EAAE,CACd,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;YACrE,OAAO,OAAO,GAAG,CAAC,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;CACF;AAMD,MAAM,KAAK,GAAG,KAAK,CAAC;AAEpB,MAAM,YAAY;IACP,WAAW,GAAG,MAAM,CAAC;IACrB,WAAW,CAAS;IACZ,SAAS,CAAS;IAClB,WAAW,CAAS;IAErC;QACE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;QACjE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,uCAAuC,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC;IACpC,CAAC;IAEO,SAAS;QACf,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;IAC1C,CAAC;IAEO,QAAQ,CAAC,GAAiB;QAChC,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACvE,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO;YACL,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC;YAChE,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB,EAAE,MAAc;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5B,GAAG,CAAC,SAAS,CAAC,GAAG;YACf,YAAY;YACZ,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,GAAG;YACjC,SAAS,EAAE,GAAG;SACf,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACtC,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,IAAI,MAAM,GAAoB,IAAI,CAAC;AAEnC,MAAM,UAAU,cAAc;IAC5B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,aAAa,EAAE,CAAC;IACvF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC"}

package/payload/platform/plugins/epc/mcp/dist/lib/neo4j.d.ts

@@ -0,0 +1,5 @@
+import { Driver, Session } from "neo4j-driver";
+export declare function getDriver(): Driver;
+export declare function getSession(): Session;
+export declare function closeDriver(): Promise<void>;
+//# sourceMappingURL=neo4j.d.ts.map

package/payload/platform/plugins/epc/mcp/dist/lib/neo4j.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"neo4j.d.ts","sourceRoot":"","sources":["../../src/lib/neo4j.ts"],"names":[],"mappings":"AAAA,OAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAqBtD,wBAAgB,SAAS,IAAI,MAAM,CAclC;AAED,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAKjD"}

package/payload/platform/plugins/epc/mcp/dist/lib/neo4j.js

@@ -0,0 +1,38 @@
+import neo4j from "neo4j-driver";
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+let driver = null;
+function readPassword() {
+    if (process.env.NEO4J_PASSWORD)
+        return process.env.NEO4J_PASSWORD;
+    const passwordFile = resolve(process.env.PLATFORM_ROOT ?? resolve(import.meta.dirname, "../../../.."), "config/.neo4j-password");
+    try {
+        return readFileSync(passwordFile, "utf-8").trim();
+    }
+    catch {
+        throw new Error(`Neo4j password not found. Expected at ${passwordFile} or in NEO4J_PASSWORD env var.`);
+    }
+}
+export function getDriver() {
+    if (!driver) {
+        const uri = process.env.NEO4J_URI;
+        if (!uri) {
+            throw new Error("[epc] NEO4J_URI unset — refusing to default to bolt://localhost:7687");
+        }
+        const user = process.env.NEO4J_USER ?? "neo4j";
+        const password = readPassword();
+        console.error(`[epc] resolved neo4j_uri=${uri}`);
+        driver = neo4j.driver(uri, neo4j.auth.basic(user, password));
+    }
+    return driver;
+}
+export function getSession() {
+    return getDriver().session();
+}
+export async function closeDriver() {
+    if (driver) {
+        await driver.close();
+        driver = null;
+    }
+}
+//# sourceMappingURL=neo4j.js.map

package/payload/platform/plugins/epc/mcp/dist/lib/neo4j.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"neo4j.js","sourceRoot":"","sources":["../../src/lib/neo4j.ts"],"names":[],"mappings":"AAAA,OAAO,KAA0B,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,IAAI,MAAM,GAAkB,IAAI,CAAC;AAEjC,SAAS,YAAY;IACnB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAClE,MAAM,YAAY,GAAG,OAAO,CAC1B,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EACxE,wBAAwB,CACzB,CAAC;IACF,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,yCAAyC,YAAY,gCAAgC,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC;QAC/C,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/payload/platform/plugins/epc/mcp/dist/tools/key-deregister.d.ts

@@ -0,0 +1,4 @@
+export declare function keyDeregister(params: {
+    accountId: string;
+}): Promise<void>;
+//# sourceMappingURL=key-deregister.d.ts.map

package/payload/platform/plugins/epc/mcp/dist/tools/key-deregister.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-deregister.d.ts","sourceRoot":"","sources":["../../src/tools/key-deregister.ts"],"names":[],"mappings":"AAEA,wBAAsB,aAAa,CAAC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhF"}

package/payload/platform/plugins/epc/mcp/dist/tools/key-deregister.js

@@ -0,0 +1,9 @@
+import { selectKeyStore } from "../lib/key-store.js";
+export async function keyDeregister(params) {
+    const deleted = await selectKeyStore().delete(params.accountId);
+    if (!deleted) {
+        throw new Error("No EPC API key is registered for this account.");
+    }
+    console.error(`[epc] key-op op=deregister account=${params.accountId}`);
+}
+//# sourceMappingURL=key-deregister.js.map

package/payload/platform/plugins/epc/mcp/dist/tools/key-deregister.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-deregister.js","sourceRoot":"","sources":["../../src/tools/key-deregister.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAA6B;IAC/D,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,sCAAsC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;AAC1E,CAAC"}

package/payload/platform/plugins/epc/mcp/dist/tools/key-list.d.ts

@@ -0,0 +1,4 @@
+export declare function keyList(params: {
+    accountId: string;
+}): Promise<string>;
+//# sourceMappingURL=key-list.d.ts.map

package/payload/platform/plugins/epc/mcp/dist/tools/key-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-list.d.ts","sourceRoot":"","sources":["../../src/tools/key-list.ts"],"names":[],"mappings":"AAEA,wBAAsB,OAAO,CAAC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAO5E"}

package/payload/platform/plugins/epc/mcp/dist/tools/key-list.js

@@ -0,0 +1,10 @@
+import { loadAccountKey } from "../lib/epc-api.js";
+export async function keyList(params) {
+    const key = await loadAccountKey(params.accountId);
+    console.error(`[epc] key-op op=list account=${params.accountId}`);
+    if (!key) {
+        return "No EPC API key registered. Use epc-key-register to add one.";
+    }
+    return `EPC API key registered (created: ${key.createdAt}, updated: ${key.updatedAt}). Key value is encrypted and cannot be retrieved.`;
+}
+//# sourceMappingURL=key-list.js.map

package/payload/platform/plugins/epc/mcp/dist/tools/key-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-list.js","sourceRoot":"","sources":["../../src/tools/key-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAA6B;IACzD,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnD,OAAO,CAAC,KAAK,CAAC,gCAAgC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,6DAA6D,CAAC;IACvE,CAAC;IACD,OAAO,oCAAoC,GAAG,CAAC,SAAS,cAAc,GAAG,CAAC,SAAS,oDAAoD,CAAC;AAC1I,CAAC"}

package/payload/platform/plugins/epc/mcp/dist/tools/key-register.d.ts

@@ -0,0 +1,5 @@
+export declare function keyRegister(params: {
+    apiKey: string;
+    accountId: string;
+}): Promise<void>;
+//# sourceMappingURL=key-register.d.ts.map

package/payload/platform/plugins/epc/mcp/dist/tools/key-register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-register.d.ts","sourceRoot":"","sources":["../../src/tools/key-register.ts"],"names":[],"mappings":"AA8BA,wBAAsB,WAAW,CAAC,MAAM,EAAE;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhB"}

package/payload/platform/plugins/epc/mcp/dist/tools/key-register.js

@@ -0,0 +1,36 @@
+import { selectKeyStore } from "../lib/key-store.js";
+import { BASE_URL, REQUEST_TIMEOUT_MS, EpcError } from "../lib/epc-api.js";
+// Probe the EPC register with the supplied credential against
+// /domestic/search constrained to a tiny page so we do not pull a real
+// payload. A valid credential returns HTTP 200 (rows may be empty for a
+// nonsense postcode, which is fine — authentication is what we test).
+// An invalid credential returns HTTP 401 Unauthorized.
+async function validateApiKey(credential) {
+    const url = `${BASE_URL}/domestic/search?postcode=SW1A1AA&size=1`;
+    const response = await fetch(url, {
+        headers: {
+            Accept: "application/json",
+            Authorization: `Basic ${Buffer.from(credential, "utf-8").toString("base64")}`,
+        },
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+    });
+    if (response.status === 401 || response.status === 403) {
+        throw new Error(`EPC register rejected the credential (HTTP ${response.status}). Expected format is email:api-key.`);
+    }
+    // 200, 404 (no rows for that postcode), and 200-with-rows all prove the
+    // credential was accepted. Anything else surfaces as the upstream code.
+    if (response.status === 200 || response.status === 404)
+        return;
+    const body = await response.text().catch(() => "");
+    throw new EpcError(response.status, "domestic/search", body.slice(0, 200));
+}
+export async function keyRegister(params) {
+    const { apiKey, accountId } = params;
+    if (!apiKey.includes(":")) {
+        throw new Error("EPC credential must be in the form email:api-key (email of the account that generated the key, then a colon, then the API key).");
+    }
+    await validateApiKey(apiKey);
+    await selectKeyStore().save(accountId, apiKey);
+    console.error(`[epc] key-op op=register account=${accountId}`);
+}
+//# sourceMappingURL=key-register.js.map

package/payload/platform/plugins/epc/mcp/dist/tools/key-register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-register.js","sourceRoot":"","sources":["../../src/tools/key-register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE3E,8DAA8D;AAC9D,uEAAuE;AACvE,wEAAwE;AACxE,sEAAsE;AACtE,uDAAuD;AAEvD,KAAK,UAAU,cAAc,CAAC,UAAkB;IAC9C,MAAM,GAAG,GAAG,GAAG,QAAQ,0CAA0C,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;SAC9E;QACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;KAChD,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,8CAA8C,QAAQ,CAAC,MAAM,sCAAsC,CACpG,CAAC;IACJ,CAAC;IACD,wEAAwE;IACxE,wEAAwE;IACxE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO;IAC/D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAGjC;IACC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,iIAAiI,CAClI,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,cAAc,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC/C,OAAO,CAAC,KAAK,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;AACjE,CAAC"}

package/payload/platform/plugins/epc/mcp/dist/tools/lookup.d.ts

@@ -0,0 +1,10 @@
+export declare function epcLookupByAddress(args: {
+    accountId: string;
+    address: string;
+    postcode?: string;
+}): Promise<string>;
+export declare function epcLookupByUprn(args: {
+    accountId: string;
+    uprn: string;
+}): Promise<string>;
+//# sourceMappingURL=lookup.d.ts.map

package/payload/platform/plugins/epc/mcp/dist/tools/lookup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookup.d.ts","sourceRoot":"","sources":["../../src/tools/lookup.ts"],"names":[],"mappings":"AAOA,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,MAAM,CAAC,CAalB;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,MAAM,CAAC,CAalB"}

package/payload/platform/plugins/epc/mcp/dist/tools/lookup.js

@@ -0,0 +1,30 @@
+import { epcSearch, groupAndPickMostRecent } from "../lib/epc-api.js";
+export async function epcLookupByAddress(args) {
+    const { accountId, address, postcode } = args;
+    const { rows } = await epcSearch({
+        toolName: "epc-lookup-by-address",
+        accountId,
+        identifier: address,
+        params: { address, postcode, size: 25 },
+    });
+    const result = {
+        status: "ok",
+        matches: groupAndPickMostRecent(rows),
+    };
+    return JSON.stringify(result, null, 2);
+}
+export async function epcLookupByUprn(args) {
+    const { accountId, uprn } = args;
+    const { rows } = await epcSearch({
+        toolName: "epc-lookup-by-uprn",
+        accountId,
+        identifier: uprn,
+        params: { uprn, size: 25 },
+    });
+    const result = {
+        status: "ok",
+        matches: groupAndPickMostRecent(rows),
+    };
+    return JSON.stringify(result, null, 2);
+}
+//# sourceMappingURL=lookup.js.map

package/payload/platform/plugins/epc/mcp/dist/tools/lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookup.js","sourceRoot":"","sources":["../../src/tools/lookup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAY,MAAM,mBAAmB,CAAC;AAOhF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAIxC;IACC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAC9C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC;QAC/B,QAAQ,EAAE,uBAAuB;QACjC,SAAS;QACT,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE;KACxC,CAAC,CAAC;IACH,MAAM,MAAM,GAAiB;QAC3B,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,sBAAsB,CAAC,IAAI,CAAC;KACtC,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAGrC;IACC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC;QAC/B,QAAQ,EAAE,oBAAoB;QAC9B,SAAS;QACT,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;KAC3B,CAAC,CAAC;IACH,MAAM,MAAM,GAAiB;QAC3B,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,sBAAsB,CAAC,IAAI,CAAC;KACtC,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC"}