@rubytech/create-maxy-code 0.1.63 → 0.1.65

package/payload/platform/plugins/loop/mcp/src/index.ts

@@ -1,498 +0,0 @@
-// Logging-tee was a platform-wrapper concern; the host owns the stderr pipe
-// in both platform and standalone (Claude Code native) spawn paths.
-
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { z } from "zod";
-import { keyRegister } from "./tools/key-register.js";
-import { keyDeregister } from "./tools/key-deregister.js";
-import { keyList } from "./tools/key-list.js";
-import { propertySearch } from "./tools/property-search.js";
-import { propertyDetail } from "./tools/property-detail.js";
-import { propertyListed } from "./tools/property-listed.js";
-import { propertySold } from "./tools/property-sold.js";
-import { propertyViewing, propertyCallback, propertyInformation } from "./tools/property-intent.js";
-import { peopleSearch } from "./tools/people-search.js";
-import { peopleDetail } from "./tools/people-detail.js";
-import { viewingSearch } from "./tools/viewing-search.js";
-import { viewingDetail } from "./tools/viewing-detail.js";
-import { viewingCreate } from "./tools/viewing-create.js";
-import { viewingUpdate } from "./tools/viewing-update.js";
-import { feedbackGet, feedbackSubmit } from "./tools/feedback.js";
-import { teamInfo } from "./tools/team-info.js";
-import { teamAvailability } from "./tools/team-availability.js";
-import { marketingMatchDetail } from "./tools/marketing-match.js";
-import { marketingMatchBatch } from "./tools/marketing-match-batch.js";
-import { marketingMatchRequest } from "./tools/marketing-match-request.js";
-import { marketingEnquiry } from "./tools/marketing-enquiry.js";
-import { autoResponder } from "./tools/auto-responder.js";
-import { customerPreferences } from "./tools/customer-preferences.js";
-import { supplier } from "./tools/supplier.js";
-import { closeDriver } from "./lib/neo4j.js";
-import { selectLoopKeyStore } from "./lib/key-store.js";
-
-// ACCOUNT_ID is the platform's tenant id; "local" is the single-tenant
-// standalone stand-in when spawned natively by Claude Code.
-const accountId = process.env.ACCOUNT_ID ?? "local";
-
-const server = new McpServer({
-  name: "maxy-loop",
-  version: "0.2.0",
-});
-
-const ALL_PERMISSIONS = z.enum([
-  "properties", "people", "viewings", "feedback", "team",
-  "marketing", "customer", "supplier",
-]);
-
-const store = selectLoopKeyStore();
-console.error(
-  `[loop] server started, account=${accountId} backend=${store.backendName} path=${store.backendPath}`,
-);
-
-// Helper: wrap a tool function in standard error handling
-function toolHandler(fn: (p: Record<string, unknown>) => Promise<string>) {
-  return async (params: Record<string, unknown>) => {
-    try {
-      const text = await fn({ ...params, accountId });
-      return { content: [{ type: "text" as const, text }] };
-    } catch (err) {
-      return {
-        content: [{
-          type: "text" as const,
-          text: `Error: ${err instanceof Error ? err.message : String(err)}`,
-        }],
-        isError: true,
-      };
-    }
-  };
-}
-
-// ─────────────────────────────────────────────────────────────────
-// Key Management Tools (3)
-// ─────────────────────────────────────────────────────────────────
-
-server.tool(
-  "loop-key-register",
-  "Register a Loop CRM API key for a team. Validates the key against Loop's API, encrypts it, and stores it in the graph. Each key maps to one team.",
-  {
-    teamName: z.string().min(1).describe("Human-readable name for this team (e.g. 'Muvin Main Office')"),
-    apiKey: z.string().min(10).describe("Loop API key (X-Api-Key header value)"),
-    permissions: z
-      .array(ALL_PERMISSIONS)
-      .optional()
-      .describe("Endpoint groups this key can access (default: all 8 groups)"),
-  },
-  async (params) => {
-    try {
-      const result = await keyRegister({ ...params, accountId });
-      let text = `Team "${params.teamName}" registered successfully.`;
-      if (result.warning) text += `\n\nWarning: ${result.warning}`;
-      return { content: [{ type: "text" as const, text }] };
-    } catch (err) {
-      return {
-        content: [{
-          type: "text" as const,
-          text: `Failed to register key: ${err instanceof Error ? err.message : String(err)}`,
-        }],
-        isError: true,
-      };
-    }
-  }
-);
-
-server.tool(
-  "loop-key-deregister",
-  "Remove a registered Loop CRM team key. The key is permanently deleted from the graph.",
-  { teamName: z.string().min(1).describe("Name of the team to remove") },
-  async ({ teamName }) => {
-    try {
-      await keyDeregister({ teamName, accountId });
-      return { content: [{ type: "text" as const, text: `Team "${teamName}" deregistered.` }] };
-    } catch (err) {
-      return {
-        content: [{
-          type: "text" as const,
-          text: `Failed to deregister: ${err instanceof Error ? err.message : String(err)}`,
-        }],
-        isError: true,
-      };
-    }
-  }
-);
-
-server.tool(
-  "loop-key-list",
-  "List all registered Loop CRM teams for this account. Shows team names, addresses, and permissions. Never reveals API key values.",
-  {},
-  toolHandler(async (p) => keyList({ accountId: p.accountId as string }))
-);
-
-// ─────────────────────────────────────────────────────────────────
-// People Tools (2) — permission: people
-// ─────────────────────────────────────────────────────────────────
-
-server.tool(
-  "loop-people-search",
-  "Search people in Loop CRM. Without a role, searches all contacts. With a role (buyers/sellers/renters/landlords), returns role-specific results with rich filters.",
-  {
-    role: z.enum(["buyers", "sellers", "renters", "landlords"]).optional().describe("Role to search (omit for all people)"),
-    searchTerm: z.string().optional().describe("Name or contact search"),
-    maxPrice: z.number().optional().describe("Max price (buyers) or max price filter (sellers)"),
-    minPrice: z.number().optional().describe("Min price (sellers)"),
-    minBeds: z.number().optional().describe("Min bedrooms (buyers/renters)"),
-    maxRent: z.number().optional().describe("Max rent (renters only)"),
-    searchAreas: z.string().optional().describe("Comma-separated outcodes e.g. 'SN7,OX12' (buyers/renters)"),
-    propertyTypes: z.string().optional().describe("Comma-separated property types (buyers/renters)"),
-    startDate: z.string().optional().describe("Start date filter (sellers/landlords)"),
-    endDate: z.string().optional().describe("End date filter (sellers/landlords)"),
-    teamName: z.string().optional().describe("Query a specific team only"),
-    limit: z.number().int().optional().describe("Max results (default 200)"),
-  },
-  toolHandler(async (p) => peopleSearch(p as Parameters<typeof peopleSearch>[0]))
-);
-
-server.tool(
-  "loop-people-detail",
-  "Get full details for a specific person by ID. Optionally specify a role (buyers/sellers/renters/landlords) for role-specific detail.",
-  {
-    personId: z.number().int().describe("Person ID"),
-    role: z.enum(["buyers", "sellers", "renters", "landlords"]).optional().describe("Role for role-specific detail view"),
-    teamName: z.string().optional().describe("Query a specific team only"),
-  },
-  toolHandler(async (p) => peopleDetail(p as Parameters<typeof peopleDetail>[0]))
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Property Tools (4) — permission: properties
-// ─────────────────────────────────────────────────────────────────
-
-server.tool(
-  "loop-property-search",
-  "Search properties in Loop CRM. Queries /property/residential/sales and /property/residential/lettings. Use department to narrow to one type.",
-  {
-    department: z.enum(["sales", "lettings", "both"]).optional().describe("Department (default: both)"),
-    searchTerm: z.string().optional().describe("Address or keyword search"),
-    minPrice: z.number().optional().describe("Minimum price"),
-    maxPrice: z.number().optional().describe("Maximum price"),
-    minBedrooms: z.number().int().optional().describe("Minimum bedrooms"),
-    maxBedrooms: z.number().int().optional().describe("Maximum bedrooms"),
-    propertyStatuses: z.string().optional().describe("Comma-separated statuses (e.g. 'forSale,underOffer')"),
-    propertyTypes: z.string().optional().describe("Comma-separated property types"),
-    teamName: z.string().optional().describe("Query a specific team only"),
-    limit: z.number().int().optional().describe("Max results (default 200)"),
-  },
-  toolHandler(async (p) => propertySearch(p as Parameters<typeof propertySearch>[0]))
-);
-
-server.tool(
-  "loop-property-detail",
-  "Get full details for a specific property by ID and department. Optionally include a preview hash for the public preview.",
-  {
-    propertyId: z.number().int().describe("Property ID"),
-    department: z.enum(["sales", "lettings"]).describe("sales or lettings"),
-    previewHash: z.number().int().optional().describe("Preview hash for public preview URL"),
-    teamName: z.string().optional().describe("Query a specific team only"),
-  },
-  toolHandler(async (p) => propertyDetail(p as Parameters<typeof propertyDetail>[0]))
-);
-
-server.tool(
-  "loop-property-listed",
-  "Get properties currently listed on a specific channel (Rightmove, Zoopla, OnTheMarket, website). For exchanged/completed properties use loop-property-sold.",
-  {
-    channel: z.enum(["rightmove", "onTheMarket", "zoopla", "website"]).describe("Listing channel"),
-    department: z.enum(["sales", "lettings", "both"]).optional().describe("Department (default: both)"),
-    teamName: z.string().optional().describe("Query a specific team only"),
-    limit: z.number().int().optional().describe("Max results (default 200)"),
-  },
-  toolHandler(async (p) => propertyListed(p as Parameters<typeof propertyListed>[0]))
-);
-
-server.tool(
-  "loop-property-sold",
-  "Get exchanged or completed properties on a specific channel. Powers canvassing from recent sales and sold-gallery rendering.",
-  {
-    channel: z.enum(["rightmove", "onTheMarket", "zoopla", "website"]).describe("Listing channel"),
-    teamName: z.string().optional().describe("Query a specific team only"),
-    limit: z.number().int().optional().describe("Max results (default 200)"),
-  },
-  toolHandler(async (p) => propertySold(p as Parameters<typeof propertySold>[0]))
-);
-
-// Property-level intent tools (Task 103 split — replaces loop-property-request).
-// Each intent is a distinct operator action so the agent's tool surface
-// preserves intent fidelity.
-
-server.tool(
-  "loop-property-viewing",
-  "Request a viewing for a property. Use when the operator says 'book a viewing', 'arrange a viewing', or 'ask to see the property'.",
-  {
-    teamName: z.string().min(1).describe("Team to submit the request through"),
-    propertyId: z.number().int().describe("Property ID"),
-    department: z.enum(["sales", "lettings"]).describe("sales or lettings"),
-    name: z.string().optional().describe("Requester name"),
-    email: z.string().optional().describe("Requester email"),
-    phone: z.string().optional().describe("Requester phone"),
-    message: z.string().optional().describe("Additional message"),
-  },
-  toolHandler(async (p) => propertyViewing(p as Parameters<typeof propertyViewing>[0]))
-);
-
-server.tool(
-  "loop-property-callback",
-  "Request a callback about a property. Use when the operator says 'ask them to call', 'request a callback', or 'have someone ring back'.",
-  {
-    teamName: z.string().min(1).describe("Team to submit the request through"),
-    propertyId: z.number().int().describe("Property ID"),
-    department: z.enum(["sales", "lettings"]).describe("sales or lettings"),
-    name: z.string().optional().describe("Requester name"),
-    email: z.string().optional().describe("Requester email"),
-    phone: z.string().optional().describe("Requester phone"),
-    message: z.string().optional().describe("Additional message"),
-  },
-  toolHandler(async (p) => propertyCallback(p as Parameters<typeof propertyCallback>[0]))
-);
-
-server.tool(
-  "loop-property-information",
-  "Request more information about a property. Use when the operator says 'ask for details', 'request the brochure', or 'find out more'.",
-  {
-    teamName: z.string().min(1).describe("Team to submit the request through"),
-    propertyId: z.number().int().describe("Property ID"),
-    department: z.enum(["sales", "lettings"]).describe("sales or lettings"),
-    name: z.string().optional().describe("Requester name"),
-    email: z.string().optional().describe("Requester email"),
-    phone: z.string().optional().describe("Requester phone"),
-    message: z.string().optional().describe("Additional message"),
-  },
-  toolHandler(async (p) => propertyInformation(p as Parameters<typeof propertyInformation>[0]))
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Viewing Tools (4) — permission: viewings
-// ─────────────────────────────────────────────────────────────────
-
-server.tool(
-  "loop-viewing-search",
-  "Search viewings in Loop CRM. Queries /residential/sales/viewings and /residential/lettings/viewings.",
-  {
-    department: z.enum(["sales", "lettings", "both"]).optional().describe("Department (default: both)"),
-    searchTerm: z.string().optional().describe("Search viewings"),
-    appointmentStartDate: z.string().optional().describe("Filter from date (ISO format)"),
-    appointmentEndDate: z.string().optional().describe("Filter to date (ISO format)"),
-    status: z.string().optional().describe("Viewing status filter"),
-    teamName: z.string().optional().describe("Query a specific team only"),
-    limit: z.number().int().optional().describe("Max results (default 200)"),
-  },
-  toolHandler(async (p) => viewingSearch(p as Parameters<typeof viewingSearch>[0]))
-);
-
-server.tool(
-  "loop-viewing-detail",
-  "Get full details for a specific viewing by ID and department.",
-  {
-    viewingId: z.number().int().describe("Viewing ID"),
-    department: z.enum(["sales", "lettings"]).describe("sales or lettings"),
-    teamName: z.string().optional().describe("Query a specific team only"),
-  },
-  toolHandler(async (p) => viewingDetail(p as Parameters<typeof viewingDetail>[0]))
-);
-
-server.tool(
-  "loop-viewing-create",
-  "Create a new viewing in Loop CRM. Creates the viewing and associated buyer/renter record.",
-  {
-    teamName: z.string().min(1).describe("Team to create the viewing for"),
-    department: z.enum(["sales", "lettings"]).describe("sales or lettings"),
-    propertyId: z.number().int().describe("Property ID"),
-    date: z.string().describe("Viewing date (YYYY-MM-DD)"),
-    time: z.string().describe("Viewing time (HH:mm)"),
-    attendeeName: z.string().describe("Attendee full name"),
-    attendeeEmail: z.string().optional().describe("Attendee email"),
-    attendeePhone: z.string().optional().describe("Attendee phone"),
-  },
-  toolHandler(async (p) => viewingCreate(p as Parameters<typeof viewingCreate>[0]))
-);
-
-server.tool(
-  "loop-viewing-update",
-  "Add a note or record feedback for a viewing. For feedback, specify the party: buyer/seller (sales) or renter/landlord (lettings).",
-  {
-    teamName: z.string().min(1).describe("Team that owns the viewing"),
-    viewingId: z.number().int().describe("Viewing ID"),
-    department: z.enum(["sales", "lettings"]).describe("sales or lettings"),
-    action: z.enum(["note", "feedback"]).describe("note or feedback"),
-    text: z.string().describe("Note text or feedback content"),
-    feedbackParty: z.enum(["buyer", "seller", "renter", "landlord"]).optional().describe("Required for feedback: whose feedback"),
-  },
-  toolHandler(async (p) => viewingUpdate(p as Parameters<typeof viewingUpdate>[0]))
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Feedback Tools (2) — permission: feedback
-// ─────────────────────────────────────────────────────────────────
-
-server.tool(
-  "loop-feedback-get",
-  "Get feedback for a specific viewing. Reads from /feedback/residential/{department}/viewings/{id}.",
-  {
-    teamName: z.string().min(1).describe("Team that owns the viewing"),
-    viewingId: z.number().int().describe("Viewing ID"),
-    department: z.enum(["sales", "lettings"]).describe("sales or lettings"),
-  },
-  toolHandler(async (p) => feedbackGet(p as Parameters<typeof feedbackGet>[0]))
-);
-
-server.tool(
-  "loop-feedback-submit",
-  "Submit feedback for a viewing. Writes to /feedback/residential/{department}/viewings/{id}/feedback.",
-  {
-    teamName: z.string().min(1).describe("Team that owns the viewing"),
-    viewingId: z.number().int().describe("Viewing ID"),
-    department: z.enum(["sales", "lettings"]).describe("sales or lettings"),
-    feedback: z.string().describe("Feedback text"),
-  },
-  toolHandler(async (p) => feedbackSubmit(p as Parameters<typeof feedbackSubmit>[0]))
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Team Tools (2) — permission: team
-// ─────────────────────────────────────────────────────────────────
-
-server.tool(
-  "loop-team-info",
-  "Get team details from Loop CRM. Returns team name, address, phone, and email.",
-  {
-    teamName: z.string().optional().describe("Query a specific team only (omit for all teams)"),
-  },
-  toolHandler(async (p) => teamInfo(p as Parameters<typeof teamInfo>[0]))
-);
-
-server.tool(
-  "loop-team-availability",
-  "Get available time slots for a specific agent on a given date.",
-  {
-    agentId: z.string().describe("Agent GUID identifier"),
-    searchDate: z.string().describe("Date to check availability (YYYY-MM-DD)"),
-    teamName: z.string().optional().describe("Query a specific team only"),
-  },
-  toolHandler(async (p) => teamAvailability(p as Parameters<typeof teamAvailability>[0]))
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Marketing Tools (4) — permission: marketing
-// ─────────────────────────────────────────────────────────────────
-
-server.tool(
-  "loop-marketing-match",
-  "Get matching property detail and optionally the team profile for that match.",
-  {
-    propertyId: z.number().int().describe("Property ID"),
-    department: z.enum(["sales", "lettings"]).describe("sales or lettings"),
-    includeTeamProfile: z.boolean().optional().describe("Include the team profile for this match (default: false)"),
-    teamName: z.string().optional().describe("Query a specific team only"),
-  },
-  toolHandler(async (p) => marketingMatchDetail(p as Parameters<typeof marketingMatchDetail>[0]))
-);
-
-server.tool(
-  "loop-marketing-match-batch",
-  "Get batch matching results for multiple property IDs.",
-  {
-    propertyIds: z.array(z.number().int()).describe("Array of property IDs to match"),
-    department: z.enum(["sales", "lettings"]).describe("sales or lettings"),
-    teamName: z.string().optional().describe("Query a specific team only"),
-  },
-  toolHandler(async (p) => marketingMatchBatch(p as Parameters<typeof marketingMatchBatch>[0]))
-);
-
-server.tool(
-  "loop-marketing-match-request",
-  "Submit a viewing, information, or callback request for a matching property.",
-  {
-    teamName: z.string().min(1).describe("Team to submit the request through"),
-    propertyId: z.number().int().describe("Matching property ID"),
-    department: z.enum(["sales", "lettings"]).describe("sales or lettings"),
-    action: z.enum(["viewing", "information", "callback"]).describe("Request type"),
-    name: z.string().optional().describe("Requester name"),
-    email: z.string().optional().describe("Requester email"),
-    phone: z.string().optional().describe("Requester phone"),
-    message: z.string().optional().describe("Additional message"),
-  },
-  toolHandler(async (p) => marketingMatchRequest(p as Parameters<typeof marketingMatchRequest>[0]))
-);
-
-server.tool(
-  "loop-marketing-enquiry",
-  "Submit a seller-side marketing enquiry to Loop. For inbound applicant auto-responder workflows use loop-auto-responder.",
-  {
-    teamName: z.string().min(1).describe("Team to submit through"),
-    sellerEnquiryData: z.record(z.string(), z.unknown()).optional().describe("Seller enquiry request body"),
-  },
-  toolHandler(async (p) => marketingEnquiry(p as Parameters<typeof marketingEnquiry>[0]))
-);
-
-server.tool(
-  "loop-auto-responder",
-  "Read or progress an inbound enquiry through Loop's auto-responder (the surface behind Loop's 40% enquiry-efficiency claim). action=get reads questions+details; answers submits applicant replies; details updates the enquiry record; refer hands it to another team.",
-  {
-    teamName: z.string().min(1).describe("Team for this operation"),
-    action: z.enum(["get", "answers", "details", "refer"]).describe("Auto-responder action"),
-    autoResponderId: z.number().int().describe("Auto-responder enquiry ID"),
-    autoResponderKey: z.string().describe("Auto-responder key (UUID issued at enquiry creation)"),
-    answers: z.array(z.unknown()).optional().describe("Applicant answers (required for action=answers)"),
-    details: z.record(z.string(), z.unknown()).optional().describe("Enquiry details (for action=details)"),
-  },
-  toolHandler(async (p) => autoResponder(p as Parameters<typeof autoResponder>[0]))
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Customer Tools (1) — permission: customer
-// ─────────────────────────────────────────────────────────────────
-
-server.tool(
-  "loop-customer-preferences",
-  "Read or write customer preferences for a person. Action 'read' returns current preferences, 'write' updates them.",
-  {
-    teamName: z.string().min(1).describe("Team for this operation"),
-    personCode: z.number().int().describe("Person code (ID)"),
-    action: z.enum(["read", "write"]).describe("read or write"),
-    preferences: z.record(z.string(), z.unknown()).optional().describe("Preferences object (required for write)"),
-  },
-  toolHandler(async (p) => customerPreferences(p as Parameters<typeof customerPreferences>[0]))
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Supplier Tools (1) — permission: supplier
-// ─────────────────────────────────────────────────────────────────
-
-server.tool(
-  "loop-supplier",
-  "Supplier operations: maintenance jobs, quotes, board contractor jobs. Supports listing, completing, and quoting.",
-  {
-    teamName: z.string().min(1).describe("Team for this operation"),
-    action: z.enum([
-      "maintenance-jobs", "maintenance-complete", "maintenance-quotes",
-      "maintenance-submit-quote", "board-jobs", "board-complete",
-    ]).describe("Supplier action"),
-    code: z.string().describe("Unique code assigned to the contractor"),
-    jobId: z.number().int().optional().describe("Job ID (required for all actions except maintenance-submit-quote)"),
-    quoteId: z.number().int().optional().describe("Quote ID (for maintenance-submit-quote)"),
-    quoteData: z.record(z.string(), z.unknown()).optional().describe("Quote data (for maintenance-submit-quote)"),
-    completionData: z.record(z.string(), z.unknown()).optional().describe("Completion data (for board-complete)"),
-  },
-  toolHandler(async (p) => supplier(p as Parameters<typeof supplier>[0]))
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Lifecycle
-// ─────────────────────────────────────────────────────────────────
-
-process.on("SIGINT", async () => {
-  await closeDriver();
-  process.exit(0);
-});
-
-const transport = new StdioServerTransport();
-await server.connect(transport);

package/payload/platform/plugins/loop/mcp/src/lib/crypto.ts

@@ -1,105 +0,0 @@
-import { randomBytes, createCipheriv, createDecipheriv } from "node:crypto";
-import { readFileSync, writeFileSync, existsSync } from "node:fs";
-import { resolve } from "node:path";
-import { homedir } from "node:os";
-
-const ALGORITHM = "aes-256-gcm";
-const KEY_LENGTH = 32; // 256 bits
-const IV_LENGTH = 12; // 96 bits — recommended for GCM
-const AUTH_TAG_LENGTH = 16; // 128 bits
-
-/**
- * Resolve the config directory from brand.json (same pattern as anthropic-key, email).
- * Falls back to ".maxy" if brand.json is unreadable.
- */
-function resolveConfigDir(): string {
-  try {
-    const platformRoot = process.env.PLATFORM_ROOT;
-    if (platformRoot) {
-      const brandPath = resolve(platformRoot, "config/brand.json");
-      const brand = JSON.parse(readFileSync(brandPath, "utf-8"));
-      if (brand.configDir) return brand.configDir;
-    }
-  } catch {
-    // Fall back to default
-  }
-  return ".maxy";
-}
-
-function keyFilePath(): string {
-  return resolve(homedir(), resolveConfigDir(), ".loop-encryption-key");
-}
-
-/**
- * Load or generate the encryption key. Generated on first use,
- * stored at ~/.{configDir}/.loop-encryption-key with mode 0o600.
- */
-function loadOrGenerateKey(): Buffer {
-  const path = keyFilePath();
-
-  if (existsSync(path)) {
-    const hex = readFileSync(path, "utf-8").trim();
-    const buf = Buffer.from(hex, "hex");
-    if (buf.length !== KEY_LENGTH) {
-      throw new Error(
-        `Encryption key at ${path} is ${buf.length} bytes, expected ${KEY_LENGTH}. ` +
-        `Delete the file and re-register all Loop team keys.`
-      );
-    }
-    return buf;
-  }
-
-  // First use — generate a new key
-  const key = randomBytes(KEY_LENGTH);
-  writeFileSync(path, key.toString("hex"), { mode: 0o600 });
-  console.error(`[loop] encryption key generated at ${path}`);
-  return key;
-}
-
-/**
- * Encrypt a plaintext string. Returns "iv:ciphertext:authTag" (hex-encoded).
- */
-export function encrypt(plaintext: string): string {
-  const key = loadOrGenerateKey();
-  const iv = randomBytes(IV_LENGTH);
-  const cipher = createCipheriv(ALGORITHM, key, iv, { authTagLength: AUTH_TAG_LENGTH });
-
-  let encrypted = cipher.update(plaintext, "utf-8", "hex");
-  encrypted += cipher.final("hex");
-  const authTag = cipher.getAuthTag().toString("hex");
-
-  return `${iv.toString("hex")}:${encrypted}:${authTag}`;
-}
-
-/**
- * Decrypt a value produced by encrypt(). Expects "iv:ciphertext:authTag" (hex-encoded).
- * Throws on tampered/corrupt data or wrong key.
- */
-export function decrypt(encryptedValue: string): string {
-  const parts = encryptedValue.split(":");
-  if (parts.length !== 3) {
-    throw new Error("Malformed encrypted value — expected iv:ciphertext:authTag");
-  }
-
-  const [ivHex, ciphertextHex, authTagHex] = parts;
-
-  const path = keyFilePath();
-  if (!existsSync(path)) {
-    throw new Error(
-      `Encryption key not found at ${path}. ` +
-      `All stored Loop API keys are unrecoverable. Re-register keys.`
-    );
-  }
-
-  const key = loadOrGenerateKey();
-  const iv = Buffer.from(ivHex, "hex");
-  const authTag = Buffer.from(authTagHex, "hex");
-
-  const decipher = createDecipheriv(ALGORITHM, key, iv, { authTagLength: AUTH_TAG_LENGTH });
-  decipher.setAuthTag(authTag);
-
-  let decrypted = decipher.update(ciphertextHex, "hex", "utf-8");
-  decrypted += decipher.final("utf-8");
-
-  return decrypted;
-}

package/payload/platform/plugins/loop/mcp/src/lib/file-crypto.ts

@@ -1,54 +0,0 @@
-import { randomBytes, createCipheriv, createDecipheriv } from "node:crypto";
-import { readFileSync, writeFileSync, existsSync } from "node:fs";
-
-// Standalone-mode crypto — see property-data's file-crypto.ts for the
-// shape and rationale. The two are duplicated rather than shared because
-// the MCPs are independent npm workspaces with no shared lib.
-
-const ALGORITHM = "aes-256-gcm";
-const KEY_LENGTH = 32;
-const IV_LENGTH = 12;
-const AUTH_TAG_LENGTH = 16;
-
-function loadOrGenerateKey(keyFilePath: string, label: string): Buffer {
-  if (existsSync(keyFilePath)) {
-    const hex = readFileSync(keyFilePath, "utf-8").trim();
-    const buf = Buffer.from(hex, "hex");
-    if (buf.length !== KEY_LENGTH) {
-      throw new Error(
-        `[${label}] encryption key at ${keyFilePath} is ${buf.length} bytes, expected ${KEY_LENGTH}.`,
-      );
-    }
-    return buf;
-  }
-  const key = randomBytes(KEY_LENGTH);
-  writeFileSync(keyFilePath, key.toString("hex"), { mode: 0o600 });
-  console.error(`[${label}] encryption key generated at ${keyFilePath}`);
-  return key;
-}
-
-export function encryptWith(plaintext: string, keyFilePath: string, label: string): string {
-  const key = loadOrGenerateKey(keyFilePath, label);
-  const iv = randomBytes(IV_LENGTH);
-  const cipher = createCipheriv(ALGORITHM, key, iv, { authTagLength: AUTH_TAG_LENGTH });
-  let encrypted = cipher.update(plaintext, "utf-8", "hex");
-  encrypted += cipher.final("hex");
-  const authTag = cipher.getAuthTag().toString("hex");
-  return `${iv.toString("hex")}:${encrypted}:${authTag}`;
-}
-
-export function decryptWith(encryptedValue: string, keyFilePath: string, label: string): string {
-  const parts = encryptedValue.split(":");
-  if (parts.length !== 3) {
-    throw new Error(`[${label}] bad encrypted envelope (expected iv:ct:tag)`);
-  }
-  const key = loadOrGenerateKey(keyFilePath, label);
-  const iv = Buffer.from(parts[0], "hex");
-  const ciphertext = parts[1];
-  const authTag = Buffer.from(parts[2], "hex");
-  const decipher = createDecipheriv(ALGORITHM, key, iv, { authTagLength: AUTH_TAG_LENGTH });
-  decipher.setAuthTag(authTag);
-  let plaintext = decipher.update(ciphertext, "hex", "utf-8");
-  plaintext += decipher.final("utf-8");
-  return plaintext;
-}