@rubytech/create-maxy-code 0.1.63 → 0.1.65

package/payload/platform/plugins/epc/mcp/src/lib/key-store.ts

@@ -1,172 +0,0 @@
-import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
-import { resolve, dirname } from "node:path";
-import { homedir } from "node:os";
-import { getSession } from "./neo4j.js";
-import { encrypt, decrypt } from "./crypto.js";
-import { encryptWith, decryptWith } from "./file-crypto.js";
-
-// Storage abstraction so the same MCP body runs against Neo4j (platform mode)
-// or an on-disk encrypted file (standalone mode, e.g. spawned by Claude Code
-// from ~/.claude/). Selected by the EPC_STANDALONE env flag at boot. Mirrors
-// the property-data key-store with one node per account: EPC keys are
-// account-scoped and the gov.uk EPC API has no team concept.
-
-export interface StoredKey {
-  apiKey: string;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface KeyStore {
-  readonly backendName: string;
-  readonly backendPath: string;
-  load(accountId: string): Promise<StoredKey | null>;
-  save(accountId: string, apiKey: string): Promise<void>;
-  delete(accountId: string): Promise<boolean>;
-}
-
-class Neo4jKeyStore implements KeyStore {
-  readonly backendName = "neo4j";
-  readonly backendPath = process.env.NEO4J_URI ?? "<unset>";
-
-  async load(accountId: string): Promise<StoredKey | null> {
-    const session = getSession();
-    try {
-      const result = await session.run(
-        `MATCH (k:EpcApiKey {accountId: $accountId})
-         RETURN k.encryptedKey AS encryptedKey,
-                k.createdAt AS createdAt,
-                k.updatedAt AS updatedAt`,
-        { accountId },
-      );
-      if (result.records.length === 0) return null;
-      const r = result.records[0];
-      return {
-        apiKey: decrypt(r.get("encryptedKey")),
-        createdAt: r.get("createdAt") ?? "",
-        updatedAt: r.get("updatedAt") ?? "",
-      };
-    } finally {
-      await session.close();
-    }
-  }
-
-  async save(accountId: string, apiKey: string): Promise<void> {
-    const encryptedKey = encrypt(apiKey);
-    const now = new Date().toISOString();
-    const session = getSession();
-    try {
-      await session.run(
-        `CREATE INDEX epc_api_key_account IF NOT EXISTS
-         FOR (k:EpcApiKey) ON (k.accountId)`,
-        {},
-      );
-      await session.run(
-        `MERGE (k:EpcApiKey {accountId: $accountId})
-         ON CREATE SET k.encryptedKey = $encryptedKey, k.createdAt = $now, k.updatedAt = $now
-         ON MATCH  SET k.encryptedKey = $encryptedKey, k.updatedAt = $now`,
-        { accountId, encryptedKey, now },
-      );
-    } finally {
-      await session.close();
-    }
-  }
-
-  async delete(accountId: string): Promise<boolean> {
-    const session = getSession();
-    try {
-      const result = await session.run(
-        `MATCH (k:EpcApiKey {accountId: $accountId})
-         DELETE k
-         RETURN count(k) AS deleted`,
-        { accountId },
-      );
-      const deleted = result.records[0]?.get("deleted")?.toNumber?.() ?? 0;
-      return deleted > 0;
-    } finally {
-      await session.close();
-    }
-  }
-}
-
-interface FileEnvelope {
-  [accountId: string]: { encryptedKey: string; createdAt: string; updatedAt: string };
-}
-
-const LABEL = "epc";
-
-class FileKeyStore implements KeyStore {
-  readonly backendName = "file";
-  readonly backendPath: string;
-  private readonly storePath: string;
-  private readonly keyFilePath: string;
-
-  constructor() {
-    const home = homedir();
-    this.storePath = resolve(home, ".claude/.realagent-epc-key.enc");
-    this.keyFilePath = resolve(home, ".claude/.realagent-epc-encryption-key");
-    this.backendPath = this.storePath;
-  }
-
-  private ensureDir(): void {
-    mkdirSync(dirname(this.storePath), { recursive: true });
-  }
-
-  private readAll(): FileEnvelope {
-    if (!existsSync(this.storePath)) return {};
-    const blob = readFileSync(this.storePath, "utf-8").trim();
-    if (!blob) return {};
-    const json = decryptWith(blob, this.keyFilePath, LABEL);
-    return JSON.parse(json) as FileEnvelope;
-  }
-
-  private writeAll(env: FileEnvelope): void {
-    this.ensureDir();
-    const blob = encryptWith(JSON.stringify(env), this.keyFilePath, LABEL);
-    writeFileSync(this.storePath, blob, { mode: 0o600 });
-  }
-
-  async load(accountId: string): Promise<StoredKey | null> {
-    const env = this.readAll();
-    const entry = env[accountId];
-    if (!entry) return null;
-    return {
-      apiKey: decryptWith(entry.encryptedKey, this.keyFilePath, LABEL),
-      createdAt: entry.createdAt,
-      updatedAt: entry.updatedAt,
-    };
-  }
-
-  async save(accountId: string, apiKey: string): Promise<void> {
-    const env = this.readAll();
-    const now = new Date().toISOString();
-    const encryptedKey = encryptWith(apiKey, this.keyFilePath, LABEL);
-    const prev = env[accountId];
-    env[accountId] = {
-      encryptedKey,
-      createdAt: prev?.createdAt ?? now,
-      updatedAt: now,
-    };
-    this.writeAll(env);
-  }
-
-  async delete(accountId: string): Promise<boolean> {
-    const env = this.readAll();
-    if (!(accountId in env)) return false;
-    delete env[accountId];
-    this.writeAll(env);
-    return true;
-  }
-}
-
-let cached: KeyStore | null = null;
-
-export function selectKeyStore(): KeyStore {
-  if (cached) return cached;
-  cached = process.env.EPC_STANDALONE === "1" ? new FileKeyStore() : new Neo4jKeyStore();
-  return cached;
-}
-
-export function _resetKeyStoreForTests(): void {
-  cached = null;
-}

package/payload/platform/plugins/epc/mcp/src/lib/neo4j.ts

@@ -1,47 +0,0 @@
-import neo4j, { Driver, Session } from "neo4j-driver";
-import { readFileSync } from "node:fs";
-import { resolve } from "node:path";
-
-let driver: Driver | null = null;
-
-function readPassword(): string {
-  if (process.env.NEO4J_PASSWORD) return process.env.NEO4J_PASSWORD;
-  const passwordFile = resolve(
-    process.env.PLATFORM_ROOT ?? resolve(import.meta.dirname, "../../../.."),
-    "config/.neo4j-password",
-  );
-  try {
-    return readFileSync(passwordFile, "utf-8").trim();
-  } catch {
-    throw new Error(
-      `Neo4j password not found. Expected at ${passwordFile} or in NEO4J_PASSWORD env var.`,
-    );
-  }
-}
-
-export function getDriver(): Driver {
-  if (!driver) {
-    const uri = process.env.NEO4J_URI;
-    if (!uri) {
-      throw new Error(
-        "[epc] NEO4J_URI unset — refusing to default to bolt://localhost:7687",
-      );
-    }
-    const user = process.env.NEO4J_USER ?? "neo4j";
-    const password = readPassword();
-    console.error(`[epc] resolved neo4j_uri=${uri}`);
-    driver = neo4j.driver(uri, neo4j.auth.basic(user, password));
-  }
-  return driver;
-}
-
-export function getSession(): Session {
-  return getDriver().session();
-}
-
-export async function closeDriver(): Promise<void> {
-  if (driver) {
-    await driver.close();
-    driver = null;
-  }
-}

package/payload/platform/plugins/epc/mcp/src/tools/key-deregister.ts

@@ -1,9 +0,0 @@
-import { selectKeyStore } from "../lib/key-store.js";
-
-export async function keyDeregister(params: { accountId: string }): Promise<void> {
-  const deleted = await selectKeyStore().delete(params.accountId);
-  if (!deleted) {
-    throw new Error("No EPC API key is registered for this account.");
-  }
-  console.error(`[epc] key-op op=deregister account=${params.accountId}`);
-}

package/payload/platform/plugins/epc/mcp/src/tools/key-list.ts

@@ -1,10 +0,0 @@
-import { loadAccountKey } from "../lib/epc-api.js";
-
-export async function keyList(params: { accountId: string }): Promise<string> {
-  const key = await loadAccountKey(params.accountId);
-  console.error(`[epc] key-op op=list account=${params.accountId}`);
-  if (!key) {
-    return "No EPC API key registered. Use epc-key-register to add one.";
-  }
-  return `EPC API key registered (created: ${key.createdAt}, updated: ${key.updatedAt}). Key value is encrypted and cannot be retrieved.`;
-}

package/payload/platform/plugins/epc/mcp/src/tools/key-register.ts

@@ -1,44 +0,0 @@
-import { selectKeyStore } from "../lib/key-store.js";
-import { BASE_URL, REQUEST_TIMEOUT_MS, EpcError } from "../lib/epc-api.js";
-
-// Probe the EPC register with the supplied credential against
-// /domestic/search constrained to a tiny page so we do not pull a real
-// payload. A valid credential returns HTTP 200 (rows may be empty for a
-// nonsense postcode, which is fine — authentication is what we test).
-// An invalid credential returns HTTP 401 Unauthorized.
-
-async function validateApiKey(credential: string): Promise<void> {
-  const url = `${BASE_URL}/domestic/search?postcode=SW1A1AA&size=1`;
-  const response = await fetch(url, {
-    headers: {
-      Accept: "application/json",
-      Authorization: `Basic ${Buffer.from(credential, "utf-8").toString("base64")}`,
-    },
-    signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
-  });
-  if (response.status === 401 || response.status === 403) {
-    throw new Error(
-      `EPC register rejected the credential (HTTP ${response.status}). Expected format is email:api-key.`,
-    );
-  }
-  // 200, 404 (no rows for that postcode), and 200-with-rows all prove the
-  // credential was accepted. Anything else surfaces as the upstream code.
-  if (response.status === 200 || response.status === 404) return;
-  const body = await response.text().catch(() => "");
-  throw new EpcError(response.status, "domestic/search", body.slice(0, 200));
-}
-
-export async function keyRegister(params: {
-  apiKey: string;
-  accountId: string;
-}): Promise<void> {
-  const { apiKey, accountId } = params;
-  if (!apiKey.includes(":")) {
-    throw new Error(
-      "EPC credential must be in the form email:api-key (email of the account that generated the key, then a colon, then the API key).",
-    );
-  }
-  await validateApiKey(apiKey);
-  await selectKeyStore().save(accountId, apiKey);
-  console.error(`[epc] key-op op=register account=${accountId}`);
-}

package/payload/platform/plugins/epc/mcp/src/tools/lookup.ts

@@ -1,43 +0,0 @@
-import { epcSearch, groupAndPickMostRecent, EpcMatch } from "../lib/epc-api.js";
-
-interface LookupResult {
-  status: "ok";
-  matches: EpcMatch[];
-}
-
-export async function epcLookupByAddress(args: {
-  accountId: string;
-  address: string;
-  postcode?: string;
-}): Promise<string> {
-  const { accountId, address, postcode } = args;
-  const { rows } = await epcSearch({
-    toolName: "epc-lookup-by-address",
-    accountId,
-    identifier: address,
-    params: { address, postcode, size: 25 },
-  });
-  const result: LookupResult = {
-    status: "ok",
-    matches: groupAndPickMostRecent(rows),
-  };
-  return JSON.stringify(result, null, 2);
-}
-
-export async function epcLookupByUprn(args: {
-  accountId: string;
-  uprn: string;
-}): Promise<string> {
-  const { accountId, uprn } = args;
-  const { rows } = await epcSearch({
-    toolName: "epc-lookup-by-uprn",
-    accountId,
-    identifier: uprn,
-    params: { uprn, size: 25 },
-  });
-  const result: LookupResult = {
-    status: "ok",
-    matches: groupAndPickMostRecent(rows),
-  };
-  return JSON.stringify(result, null, 2);
-}

package/payload/platform/plugins/epc/mcp/tsconfig.json

@@ -1,20 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "Node16",
-    "moduleResolution": "Node16",
-    "lib": ["ES2022"],
-    "outDir": "dist",
-    "rootDir": "src",
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "forceConsistentCasingInFileNames": true,
-    "resolveJsonModule": true,
-    "declaration": true,
-    "declarationMap": true,
-    "sourceMap": true
-  },
-  "include": ["src"],
-  "exclude": ["src/**/__tests__/**", "src/**/*.test.ts"]
-}

package/payload/platform/plugins/epc/mcp/vitest.config.ts

@@ -1,8 +0,0 @@
-import { defineConfig } from "vitest/config";
-
-export default defineConfig({
-  test: {
-    include: ["src/**/__tests__/**/*.test.ts"],
-    environment: "node",
-  },
-});

package/payload/platform/plugins/estate-business/.claude-plugin/plugin.json

@@ -1,8 +0,0 @@
-{
-  "name": "real-agent-business",
-  "description": "Monthly close, commission, payments, and business operations for UK residential estate agencies. Includes the month-end-close master plus its three building blocks (period-reconciler, commission-calculator, payment-batch-stager) and the existing business-growth, business-operations, personal-branding, and exp-partnership skills.",
-  "version": "0.1.0",
-  "author": {
-    "name": "Rubytech LLC"
-  }
-}

package/payload/platform/plugins/estate-business/PLUGIN.md

@@ -1,64 +0,0 @@
----
-name: real-agent-business
-description: "Monthly close, commission, payments, and business operations for UK residential estate agencies. Includes the month-end-close master plus its three building blocks (period-reconciler, commission-calculator, payment-batch-stager) and the existing business-growth, business-operations, personal-branding, and exp-partnership skills."
-tools: []
-skills:
-  - skills/month-end-close/SKILL.md
-  - skills/period-reconciler/SKILL.md
-  - skills/commission-calculator/SKILL.md
-  - skills/payment-batch-stager/SKILL.md
-  - skills/business-growth/SKILL.md
-  - skills/business-operations/SKILL.md
-  - skills/personal-branding/SKILL.md
-  - skills/exp-partnership/SKILL.md
-profileKeys:
-  - realagent.accounting.chart_of_accounts_map
-  - realagent.accounting.platform
-  - realagent.bank.batch_format
-  - realagent.bank.preferred_pay_date_offset_days
-  - realagent.close.flag_threshold_fee_gbp
-  - realagent.close.match_tolerance_days
-  - realagent.close.match_tolerance_gbp
-  - realagent.close.narrative_voice_samples
-  - realagent.close.pack_recipients
-  - realagent.close.writeoff_threshold_gbp
-  - realagent.commission.adjustments
-  - realagent.commission.franchise_levy_pct
-  - realagent.commission.splits_table_path
-  - realagent.payees
-always: false
-metadata: {"platform":{"optional":true,"embed":["admin"]}}
----
-
-# Real Agent, Month-End and Business Operations
-
-Eight skills covering month-end close and commission (the master workflow plus three building blocks) and the existing business operations skills.
-
-## When to Activate
-
-The user is asking for the monthly close, the commission run, reconciliation against the accountant, or any of the existing business-growth or operations topics.
-
-## Skills
-
-| Skill | Owner specialist | Purpose |
-|-------|------------------|---------|
-| `month-end-close` | compliance | Master workflow: monthly close, commission, accountant pack |
-| `period-reconciler` | compliance | Matches completions to fees received |
-| `commission-calculator` | compliance | Computes per-agent commission with splits |
-| `payment-batch-stager` | compliance | Stages payment batch for the bank, never initiates a transfer |
-| `business-growth` | negotiator | Growth strategy (existing) |
-| `business-operations` | negotiator | CRM, hiring, delegation (existing) |
-| `personal-branding` | negotiator | Personal brand execution (existing) |
-| `exp-partnership` | negotiator | eXp UK model (existing) |
-
-## Tools Used
-
-No MCP server. Skills operate via existing platform tools:
-
-- `memory-search` for domain knowledge
-- `profile-read` and `profile-update` for the customisation profile
-- `action-pending`, `action-approve`, `action-reject`, `action-edit` for the writeoff, journal, payment-batch, and accountant-pack approval gates
-
-## References
-
-Domain knowledge files loaded on demand by each skill.

package/payload/platform/plugins/estate-business/skills/business-growth/SKILL.md

@@ -1,133 +0,0 @@
----
-name: business-growth
-description: "Grow confidence, time leverage, and execution systems. Big goals, future-self behavior, ruthless focus, and evolution — without toxic hustle or bravado."
----
-
-# Business Growth
-
-You help the user upgrade their operating system: confidence, preparation, time leverage, and disciplined execution — so they can scale.
-
-## Core principles
-
-1. **Big energy is substance-backed confidence.** Not bragging, not ego.
-2. **Be the future-you now.** Act like the person who already runs the bigger business — then do the work to earn it.
-3. **Minutes are money.** Protect high-leverage time; delegate low-leverage work.
-4. **Evolve or die.** Markets shift; staying still is a strategy for irrelevance.
-
-## Guardrails
-
-- Never encourage deception. "Perception" must be backed by real preparation.
-- Never encourage unethical pressure tactics.
-- Never encourage burnout as a badge of honor.
-
-## Additions for a scaling UK estate agency
-
-### 1) Dan Martell — Buy Back Your Time (leverage-first hiring)
-Use the buyback principle:
-- don't hire to "grow"; hire to **remove low-value tasks from the leader's calendar**
-- audit → transfer → fill (with high-value work)
-- calculate effective hourly rate and delegate anything below it
-
-Reference: `references/buy-back-your-time.md`.
-
-### 2) Keller models — 33 Touch + organisational growth path
-Use Keller's business-building logic:
-- lead generation is non-negotiable
-- database is the asset
-- scale through leverage: admin → buyer agent → listing specialist
-
-Reference: `references/keller-org-model.md`.
-
-### 3) Lencioni team models (leadership + culture)
-When the user asks about team dysfunction, meetings, leadership and culture:
-- build trust first
-- encourage productive conflict
-- get commitment (clarity over certainty)
-- enforce accountability
-- focus on results
-
-Reference: `references/lencioni-team-models.md`.
-
-### 4) Team roles & commission structures
-Use a clear roles chart (principal, lead agent, supporting agent, campaign manager, sales associate, admin) and align incentives.
-
-Reference: `references/team-roles-commission.md`.
-
-### 5) Wingman structure (remote/offshore leverage)
-Use a wingman/VA model for:
-- admin
-- marketing ops
-- database hygiene
-- vendor reports
-- campaign management
-
-Reference: `references/wingman-structure.md`.
-
-### 6) VA 2026 (estate agency ops playbook)
-Include specific responsibilities:
-- vendor reports
-- on-market tracker
-- seller onboarding + compliance
-- buyer registration + qualifying
-- viewing coordination
-- neighbour campaigns + anniversary campaigns
-- sales progression board
-- content scheduling
-
-Reference: `references/va-2026-ops.md`.
-
-### 7) Serhant — Business in a Box (systems + time audit + CRM playbook)
-Use it for:
-- time audit (minutes equal money)
-- time blocking / eat the frog / Eisenhower
-- CRM choice + organisation
-- listing playbook mindset
-
-Reference: `references/serhant-bizinbox-notes.md`.
-
-### 8) Firewave GOST + scorecards
-Help the user plan growth like a business:
-- set GOAL / OBJECTIVE / STRATEGY / TACTICS
-- run a monthly scorecard (output + results)
-
-Reference: `references/firewave-gost-scorecards.md`.
-
-### 9) Listing management system (12-week L/O cadence)
-Use a simple weekly checklist:
-- **L = Letter**
-- **O = Offer**
-
-Reference: `references/listing-management-system.md`.
-
-### 10) Net figure forms (fee defence + value framing)
-Use the net figure form to explain:
-- the cheapest agent can be the most expensive
-- focus on net outcome, not headline fee
-
-Reference: `references/net-figure-form.md`.
-
-## How to respond when the user asks "how do I scale?"
-
-Default questions:
-1) What's your current weekly GCI target and actual?
-2) What are you doing that only you can do?
-3) What's the single biggest bottleneck (lead gen, conversion, admin, delivery, recruitment)?
-
-Then propose a 30-day plan:
-- buy back time (delegate 3–5 tasks)
-- lock lead-gen time blocks
-- implement one scorecard
-- implement listing management cadence
-
-## References (load as needed)
-
-- **Buy Back Your Time** → `references/buy-back-your-time.md`
-- **Keller org model** → `references/keller-org-model.md`
-- **Lencioni team models** → `references/lencioni-team-models.md`
-- **Team roles + commission** → `references/team-roles-commission.md`
-- **Wingman structure** → `references/wingman-structure.md`
-- **VA 2026 ops** → `references/va-2026-ops.md`
-- **Serhant BizInBox notes** → `references/serhant-bizinbox-notes.md`
-- **Firewave GOST + scorecards** → `references/firewave-gost-scorecards.md`
-- **Listing management** → `references/listing-management-system.md`
-- **Net figure form** → `references/net-figure-form.md`

package/payload/platform/plugins/estate-business/skills/business-growth/references/buy-back-your-time.md

@@ -1,37 +0,0 @@
-# Buy Back Your Time (Dan Martell) — practical notes
-
-## Buyback principle
-Hire to **buy back your time**, not just to grow.
-
-## Buyback loop
-1) **Audit**: track tasks for 2 weeks
-2) **Transfer**: delegate/automate
-3) **Fill**: replace freed time with high-value work
-
-## Effective hourly rate (EHR)
-Target annual income ÷ 2,000 hours = £/hour.
-Delegate anything that can be done for <25% of EHR.
-
-## DRIP matrix
-- **D**elegation: someone else can do it
-- **R**eplacement: someone else can do it better
-- **I**nvestment: you should do it to build skill
-- **P**roduction: directly generates revenue
-
-## Estate agent application
-Leader protects time for:
-- lead gen
-- listings
-- negotiations
-- recruitment
-- partnerships
-
-Delegate:
-- diary admin
-- marketing ops
-- vendor reports
-- CRM updates
-- chasing paperwork
-
-## Camcorder method
-Record yourself doing a task once → turn into SOP → delegate.

package/payload/platform/plugins/estate-business/skills/business-growth/references/firewave-gost-scorecards.md

@@ -1,14 +0,0 @@
-# Firewave GOST + scorecards
-
-## GOST
-- **Goal** (big, yearly)
-- **Objective** (specific metrics + timeframe)
-- **Strategy** (one-sentence approach)
-- **Tactics** (multi-channel actions)
-
-## Monthly scorecard
-Track:
-- outputs (direct mail sent, content posted, funnels)
-- results (valuations, instructions, stock #, pipeline, average fee)
-
-Rule: measure what drives growth, not vanity metrics.

package/payload/platform/plugins/estate-business/skills/business-growth/references/keller-org-model.md

@@ -1,17 +0,0 @@
-# Keller organisational model (estate agency)
-
-## Stages
-1) Agent (does everything)
-2) Business owner (hires leverage)
-3) Entrepreneur (leads the business)
-
-## Typical order of hires
-1) **Admin assistant** (compliance, scheduling, database)
-2) **Buyer agent** (viewings, buyer management)
-3) **Listing specialist** (scale listings)
-
-## Key belief
-Listings build businesses; buyers can become jobs unless systemised.
-
-## 33 Touch
-Database is the asset: 33 meaningful touches/year keeps you remembered.

package/payload/platform/plugins/estate-business/skills/business-growth/references/lencioni-team-models.md

@@ -1,22 +0,0 @@
-# Patrick Lencioni — team models
-
-## Five Dysfunctions pyramid
-1) Absence of trust
-2) Fear of conflict
-3) Lack of commitment
-4) Avoidance of accountability
-5) Inattention to results
-
-## Leader actions
-- model vulnerability to build trust
-- mine for conflict (ask for disagreement)
-- force clarity (commitment over consensus)
-- create peer accountability
-- track shared results publicly
-
-## Five Temptations (CEO)
-- status over results
-- popularity over accountability
-- certainty over clarity
-- harmony over productive conflict
-- invulnerability over trust

package/payload/platform/plugins/estate-business/skills/business-growth/references/listing-management-system.md

@@ -1,11 +0,0 @@
-# Listing Management System (12-week cadence)
-
-Use a simple checklist per listing:
-- **L = Letter** (seller-facing update/value)
-- **O = Offer** (offer/price conversation activity)
-
-Each week tick that you delivered:
-- a meaningful vendor touch
-- a pricing/offer strategy touch
-
-Goal: keep momentum and avoid “silent listings”.