@rubytech/create-maxy-code 0.1.63 → 0.1.65

package/payload/platform/plugins/property-data/mcp/src/index.ts

@@ -1,409 +0,0 @@
-// Logging-tee was a platform-wrapper concern: the platform's mcp-spawn-tee
-// pipes our stderr where it wants. In standalone mode (Claude Code native
-// spawn) the host owns the stderr pipe. Either way, we just write to stderr.
-
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { z } from "zod";
-import { keyRegister } from "./tools/key-register.js";
-import { keyDeregister } from "./tools/key-deregister.js";
-import { keyList } from "./tools/key-list.js";
-import {
-  valuationSale,
-  valuationRent,
-  prices,
-  pricesRent,
-  soldPrices,
-  demand,
-  yields,
-  growth,
-  nationalHpi,
-  pricesPerSqf,
-  soldPricesPerSqf,
-  crime,
-  floodRisk,
-  councilTax,
-  planningApplications,
-  addressMatchUprn,
-  growthPsf,
-  demandRent,
-  propertyTypes,
-} from "./tools/endpoints.js";
-import { closeDriver } from "./lib/neo4j.js";
-import {
-  KeyNotRegisteredError,
-  PropertyDataError,
-  BadResponseError,
-} from "./lib/propertydata-api.js";
-import { selectKeyStore } from "./lib/key-store.js";
-
-// ACCOUNT_ID is the platform's tenant id; in standalone mode (Claude Code
-// native spawn) there is no platform tenant, so "local" is the single-tenant
-// stand-in. Same MCP body, env-selected backend.
-const accountId = process.env.ACCOUNT_ID ?? "local";
-
-const server = new McpServer({
-  name: "maxy-property-data",
-  version: "0.1.0",
-});
-
-const store = selectKeyStore();
-console.error(
-  `[property-data] server started, account=${accountId} backend=${store.backendName} path=${store.backendPath}`,
-);
-
-function errorEnvelope(err: unknown): { content: { type: "text"; text: string }[]; isError: true } {
-  let text: string;
-  if (err instanceof KeyNotRegisteredError) {
-    text =
-      "Error: key-not-registered. Register a PropertyData API key with property-data-key-register before calling this tool.";
-  } else if (err instanceof PropertyDataError) {
-    text = `Error: http-${err.status} from PropertyData. ${err.upstreamMessage}`;
-  } else if (err instanceof BadResponseError) {
-    text = `Error: bad-response from PropertyData (non-JSON, length=${err.length}).`;
-  } else {
-    text = `Error: ${err instanceof Error ? err.message : String(err)}`;
-  }
-  return { content: [{ type: "text" as const, text }], isError: true };
-}
-
-function endpointHandler<P extends Record<string, unknown>>(
-  fn: (args: P & { accountId: string }) => Promise<string>,
-) {
-  return async (params: P) => {
-    try {
-      const text = await fn({ ...params, accountId });
-      return { content: [{ type: "text" as const, text }] };
-    } catch (err) {
-      return errorEnvelope(err);
-    }
-  };
-}
-
-// ─────────────────────────────────────────────────────────────────
-// Key Management
-// ─────────────────────────────────────────────────────────────────
-
-server.tool(
-  "property-data-key-register",
-  "Register the account's PropertyData API key. Validates the key against PropertyData's /national-hpi endpoint, encrypts it with AES-256-GCM, and stores it in Neo4j. One key per account; re-registering overwrites the existing key.",
-  {
-    apiKey: z.string().min(8).describe("PropertyData API key from propertydata.co.uk dashboard"),
-  },
-  async ({ apiKey }) => {
-    try {
-      await keyRegister({ apiKey, accountId });
-      return {
-        content: [
-          {
-            type: "text" as const,
-            text: "PropertyData API key registered successfully.",
-          },
-        ],
-      };
-    } catch (err) {
-      return errorEnvelope(err);
-    }
-  },
-);
-
-server.tool(
-  "property-data-key-deregister",
-  "Remove the account's PropertyData API key. The encrypted key is permanently deleted from Neo4j.",
-  {},
-  async () => {
-    try {
-      await keyDeregister({ accountId });
-      return {
-        content: [{ type: "text" as const, text: "PropertyData API key deregistered." }],
-      };
-    } catch (err) {
-      return errorEnvelope(err);
-    }
-  },
-);
-
-server.tool(
-  "property-data-key-list",
-  "Show whether a PropertyData API key is registered for this account. Never reveals the key value.",
-  {},
-  async () => {
-    try {
-      const text = await keyList({ accountId });
-      return { content: [{ type: "text" as const, text }] };
-    } catch (err) {
-      return errorEnvelope(err);
-    }
-  },
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Valuation endpoints
-// ─────────────────────────────────────────────────────────────────
-
-const valuationSchema = {
-  postcode: z.string().min(2).describe("UK postcode (outcode or full)"),
-  type: z
-    .enum(["detached", "semi-detached", "terraced", "flat"])
-    .describe("Property type"),
-  bedrooms: z.number().int().min(0).describe("Bedroom count"),
-  bathrooms: z.number().int().min(0).optional().describe("Bathroom count"),
-  internal_area: z.number().optional().describe("Internal area (sq ft)"),
-  construction_date: z.string().optional().describe("Construction date band (e.g. 'pre1900', '1900-1929')"),
-  finish_quality: z
-    .enum(["luxury", "above_average", "average", "below_average", "needs_modernisation"])
-    .optional()
-    .describe("Finish quality"),
-};
-
-server.tool(
-  "property-data-valuation-sale",
-  "Point sale-price estimate for a property given postcode + attributes. Returns point estimate plus comparables.",
-  valuationSchema,
-  endpointHandler(valuationSale),
-);
-
-server.tool(
-  "property-data-valuation-rent",
-  "Point rent estimate (PCM) for a property given postcode + attributes. Returns point estimate plus comparables.",
-  valuationSchema,
-  endpointHandler(valuationRent),
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Asking-price distributions
-// ─────────────────────────────────────────────────────────────────
-
-const pricesSchema = {
-  postcode: z.string().min(2).describe("UK postcode (outcode or full)"),
-  type: z
-    .enum(["detached", "semi-detached", "terraced", "flat"])
-    .optional()
-    .describe("Filter by property type"),
-  bedrooms: z.number().int().min(0).optional().describe("Filter by bedroom count"),
-};
-
-server.tool(
-  "property-data-prices",
-  "Asking-price distribution for sale listings in a postcode — mean, median, 80th percentile.",
-  pricesSchema,
-  endpointHandler(prices),
-);
-
-server.tool(
-  "property-data-prices-rent",
-  "Asking-price distribution for rental listings in a postcode — mean, median, 80th percentile (PCM).",
-  pricesSchema,
-  endpointHandler(pricesRent),
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Sold prices (Land Registry)
-// ─────────────────────────────────────────────────────────────────
-
-server.tool(
-  "property-data-sold-prices",
-  "Land Registry sold transactions for a postcode, optionally filtered by age, type, and bedrooms.",
-  {
-    postcode: z.string().min(2).describe("UK postcode (outcode or full)"),
-    max_age: z.number().int().min(1).optional().describe("Max transaction age in months"),
-    type: z
-      .enum(["detached", "semi-detached", "terraced", "flat"])
-      .optional()
-      .describe("Filter by property type"),
-    bedrooms: z.number().int().min(0).optional().describe("Filter by bedroom count"),
-  },
-  endpointHandler(soldPrices),
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Demand / yields / growth / national HPI
-// ─────────────────────────────────────────────────────────────────
-
-server.tool(
-  "property-data-demand",
-  "Demand signals for a postcode — count of properties for sale and average days to sell-STC.",
-  { postcode: z.string().min(2).describe("UK postcode (outcode or full)") },
-  endpointHandler(demand),
-);
-
-server.tool(
-  "property-data-yields",
-  "Gross rental yield for a postcode and bedroom count.",
-  {
-    postcode: z.string().min(2).describe("UK postcode (outcode or full)"),
-    bedrooms: z.number().int().min(0).describe("Bedroom count"),
-  },
-  endpointHandler(yields),
-);
-
-server.tool(
-  "property-data-growth",
-  "Short-term and long-term price growth signals for a postcode.",
-  { postcode: z.string().min(2).describe("UK postcode (outcode or full)") },
-  endpointHandler(growth),
-);
-
-server.tool(
-  "property-data-national-hpi",
-  "UK national house-price index series. No postcode required.",
-  {},
-  endpointHandler(nationalHpi),
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Task 144 — £/sqft baselines and growth
-// ─────────────────────────────────────────────────────────────────
-
-const pricesPerSqfSchema = {
-  postcode: z.string().min(2).describe("UK postcode (outcode or full)"),
-  type: z
-    .enum(["detached", "semi-detached", "terraced", "flat"])
-    .optional()
-    .describe("Filter by property type"),
-  bedrooms: z.number().int().min(0).optional().describe("Filter by bedroom count"),
-};
-
-server.tool(
-  "property-data-prices-per-sqf",
-  "Asking £/sqft distribution for sale listings in a postcode — avg plus 70/80/90/100% percentile ranges, with the raw listings that have square-foot data. Use for the asking £/sqft KPI on a market report. Costs 1 credit per call.",
-  pricesPerSqfSchema,
-  endpointHandler(pricesPerSqf),
-);
-
-server.tool(
-  "property-data-sold-prices-per-sqf",
-  "Land Registry sold £/sqft distribution for a postcode — avg plus percentile ranges, up to 20 raw sales with square-foot data and a sales-window date range. Use for the achieved £/sqft KPI. Costs 1 credit per call.",
-  {
-    postcode: z.string().min(2).describe("UK postcode (outcode or full)"),
-    type: z
-      .enum(["detached", "semi-detached", "terraced", "flat"])
-      .optional()
-      .describe("Filter by property type"),
-    bedrooms: z.number().int().min(0).optional().describe("Filter by bedroom count"),
-    max_age: z.number().int().min(1).optional().describe("Max transaction age in months"),
-  },
-  endpointHandler(soldPricesPerSqf),
-);
-
-server.tool(
-  "property-data-growth-psf",
-  "7-year £/sqft series with year-on-year percent change for a postcode. Use for the £/sqft growth chart on a market report. Costs 1 credit per call.",
-  {
-    postcode: z.string().min(2).describe("UK postcode (outcode or full)"),
-    type: z
-      .enum(["detached", "semi-detached", "terraced", "flat"])
-      .optional()
-      .describe("Filter by property type"),
-  },
-  endpointHandler(growthPsf),
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Task 144 — Area risk and cost of occupancy
-// ─────────────────────────────────────────────────────────────────
-
-server.tool(
-  "property-data-crime",
-  "Recent crime statistics for a postcode (or location / town) — per-1,000 rate, 12-month total, breakdown by crime type, and per-month observations. Use for the area-risk pillar. Costs 1 credit per call.",
-  {
-    postcode: z.string().min(2).optional().describe("UK postcode (outcode or full)"),
-    location: z
-      .string()
-      .optional()
-      .describe("Latitude,longitude pair (e.g. '51.5074,-0.1278'). Alternative to postcode."),
-    town: z.string().optional().describe("UK town name. Alternative to postcode."),
-  },
-  endpointHandler(crime),
-);
-
-server.tool(
-  "property-data-flood-risk",
-  "River and sea flood-risk rating for a full UK postcode. Use for area-risk reporting and lender-ready disclosures. Requires a full postcode (not outcode). Costs 1 credit per call.",
-  {
-    postcode: z.string().min(5).describe("Full UK postcode (not outcode)"),
-  },
-  endpointHandler(floodRisk),
-);
-
-server.tool(
-  "property-data-council-tax",
-  "Council-tax authority, rating, and per-band charges (A–H) for a full UK postcode, plus any per-property bands the API returns. Use for cost-of-occupancy disclosures. Requires a full postcode. Costs 1 credit per call.",
-  {
-    postcode: z.string().min(5).describe("Full UK postcode (not outcode)"),
-  },
-  endpointHandler(councilTax),
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Task 144 — Planning precedent and address resolution
-// ─────────────────────────────────────────────────────────────────
-
-server.tool(
-  "property-data-planning-applications",
-  "Planning applications within a radius of a postcode — references, proposals, decisions, appeals, distance. Use for development precedent and pre-purchase risk. Costs 2 credits per call. Throttled to ~4 calls per 10 seconds upstream — wrap in the preval skill for fan-out, do not loop directly.",
-  {
-    postcode: z.string().min(2).describe("UK postcode (outcode or full)"),
-    decision_rating: z
-      .enum(["positive", "neutral", "negative"])
-      .optional()
-      .describe("Filter by decision sentiment"),
-    category: z.string().optional().describe("PropertyData planning category filter"),
-    max_age_decision: z
-      .number()
-      .int()
-      .min(1)
-      .optional()
-      .describe("Max age of decision in months"),
-    results: z.number().int().min(1).max(100).optional().describe("Max results to return"),
-  },
-  endpointHandler(planningApplications),
-);
-
-server.tool(
-  "property-data-address-match-uprn",
-  "Resolve a full UK address string to its UPRN, address classification, and lat/lng. Use for CRM hygiene and unique-property identification. Costs 10 credits per call — do not fan out blindly; call once per address you actually need to resolve.",
-  {
-    address: z.string().min(5).describe("Full UK address (line one + postcode)"),
-  },
-  endpointHandler(addressMatchUprn),
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Task 144 — Rental demand and property-type mix
-// ─────────────────────────────────────────────────────────────────
-
-server.tool(
-  "property-data-demand-rent",
-  "Rental demand signals for a postcode — for-rent count, lets per month, turnover percent, months of inventory, days on market, and a rating. Use for the rental pillar on a market report. Costs 1 credit per call.",
-  {
-    postcode: z.string().min(2).describe("UK postcode (outcode or full)"),
-    bedrooms: z.number().int().min(0).optional().describe("Filter by bedroom count"),
-    type: z
-      .enum(["detached", "semi-detached", "terraced", "flat"])
-      .optional()
-      .describe("Filter by property type"),
-  },
-  endpointHandler(demandRent),
-);
-
-server.tool(
-  "property-data-property-types",
-  "Output-area property-type distribution (percent by class — detached, semi-detached, terraced, flat) for a postcode. Use for the property-type mix doughnut on a market report. Costs 1 credit per call.",
-  {
-    postcode: z.string().min(2).describe("UK postcode (outcode or full)"),
-  },
-  endpointHandler(propertyTypes),
-);
-
-// ─────────────────────────────────────────────────────────────────
-// Lifecycle
-// ─────────────────────────────────────────────────────────────────
-
-process.on("SIGINT", async () => {
-  await closeDriver();
-  process.exit(0);
-});
-
-const transport = new StdioServerTransport();
-await server.connect(transport);

package/payload/platform/plugins/property-data/mcp/src/lib/crypto.ts

@@ -1,79 +0,0 @@
-import { randomBytes, createCipheriv, createDecipheriv } from "node:crypto";
-import { readFileSync, writeFileSync, existsSync } from "node:fs";
-import { resolve } from "node:path";
-import { homedir } from "node:os";
-
-const ALGORITHM = "aes-256-gcm";
-const KEY_LENGTH = 32;
-const IV_LENGTH = 12;
-const AUTH_TAG_LENGTH = 16;
-const KEY_FILE_NAME = ".property-data-encryption-key";
-
-function resolveConfigDir(): string {
-  try {
-    const platformRoot = process.env.PLATFORM_ROOT;
-    if (platformRoot) {
-      const brandPath = resolve(platformRoot, "config/brand.json");
-      const brand = JSON.parse(readFileSync(brandPath, "utf-8"));
-      if (brand.configDir) return brand.configDir;
-    }
-  } catch {
-    // Fall back to default
-  }
-  return ".maxy";
-}
-
-function keyFilePath(): string {
-  return resolve(homedir(), resolveConfigDir(), KEY_FILE_NAME);
-}
-
-function loadOrGenerateKey(): Buffer {
-  const path = keyFilePath();
-  if (existsSync(path)) {
-    const hex = readFileSync(path, "utf-8").trim();
-    const buf = Buffer.from(hex, "hex");
-    if (buf.length !== KEY_LENGTH) {
-      throw new Error(
-        `Encryption key at ${path} is ${buf.length} bytes, expected ${KEY_LENGTH}. ` +
-          `Delete the file and re-register the PropertyData API key.`,
-      );
-    }
-    return buf;
-  }
-  const key = randomBytes(KEY_LENGTH);
-  writeFileSync(path, key.toString("hex"), { mode: 0o600 });
-  console.error(`[property-data] encryption key generated at ${path}`);
-  return key;
-}
-
-export function encrypt(plaintext: string): string {
-  const key = loadOrGenerateKey();
-  const iv = randomBytes(IV_LENGTH);
-  const cipher = createCipheriv(ALGORITHM, key, iv, { authTagLength: AUTH_TAG_LENGTH });
-  let encrypted = cipher.update(plaintext, "utf-8", "hex");
-  encrypted += cipher.final("hex");
-  const authTag = cipher.getAuthTag().toString("hex");
-  return `${iv.toString("hex")}:${encrypted}:${authTag}`;
-}
-
-export function decrypt(encryptedValue: string): string {
-  const parts = encryptedValue.split(":");
-  if (parts.length !== 3) {
-    throw new Error("Malformed encrypted value — expected iv:ciphertext:authTag");
-  }
-  const [ivHex, ciphertextHex, authTagHex] = parts;
-  const path = keyFilePath();
-  if (!existsSync(path)) {
-    throw new Error(
-      `Encryption key not found at ${path}. The stored PropertyData API key is unrecoverable. Re-register.`,
-    );
-  }
-  const key = loadOrGenerateKey();
-  const iv = Buffer.from(ivHex, "hex");
-  const authTag = Buffer.from(authTagHex, "hex");
-  const decipher = createDecipheriv(ALGORITHM, key, iv, { authTagLength: AUTH_TAG_LENGTH });
-  decipher.setAuthTag(authTag);
-  let decrypted = decipher.update(ciphertextHex, "hex", "utf-8");
-  decrypted += decipher.final("utf-8");
-  return decrypted;
-}

package/payload/platform/plugins/property-data/mcp/src/lib/file-crypto.ts

@@ -1,55 +0,0 @@
-import { randomBytes, createCipheriv, createDecipheriv } from "node:crypto";
-import { readFileSync, writeFileSync, existsSync } from "node:fs";
-
-// Standalone-mode crypto. Same AES-256-GCM envelope as crypto.ts, but the
-// encryption-key file path is passed in (not derived from PLATFORM_ROOT /
-// brand.json), so it can live under ~/.claude/ when the MCP is spawned by
-// Claude Code natively.
-
-const ALGORITHM = "aes-256-gcm";
-const KEY_LENGTH = 32;
-const IV_LENGTH = 12;
-const AUTH_TAG_LENGTH = 16;
-
-function loadOrGenerateKey(keyFilePath: string, label: string): Buffer {
-  if (existsSync(keyFilePath)) {
-    const hex = readFileSync(keyFilePath, "utf-8").trim();
-    const buf = Buffer.from(hex, "hex");
-    if (buf.length !== KEY_LENGTH) {
-      throw new Error(
-        `[${label}] encryption key at ${keyFilePath} is ${buf.length} bytes, expected ${KEY_LENGTH}.`,
-      );
-    }
-    return buf;
-  }
-  const key = randomBytes(KEY_LENGTH);
-  writeFileSync(keyFilePath, key.toString("hex"), { mode: 0o600 });
-  console.error(`[${label}] encryption key generated at ${keyFilePath}`);
-  return key;
-}
-
-export function encryptWith(plaintext: string, keyFilePath: string, label: string): string {
-  const key = loadOrGenerateKey(keyFilePath, label);
-  const iv = randomBytes(IV_LENGTH);
-  const cipher = createCipheriv(ALGORITHM, key, iv, { authTagLength: AUTH_TAG_LENGTH });
-  let encrypted = cipher.update(plaintext, "utf-8", "hex");
-  encrypted += cipher.final("hex");
-  const authTag = cipher.getAuthTag().toString("hex");
-  return `${iv.toString("hex")}:${encrypted}:${authTag}`;
-}
-
-export function decryptWith(encryptedValue: string, keyFilePath: string, label: string): string {
-  const parts = encryptedValue.split(":");
-  if (parts.length !== 3) {
-    throw new Error(`[${label}] bad encrypted envelope (expected iv:ct:tag)`);
-  }
-  const key = loadOrGenerateKey(keyFilePath, label);
-  const iv = Buffer.from(parts[0], "hex");
-  const ciphertext = parts[1];
-  const authTag = Buffer.from(parts[2], "hex");
-  const decipher = createDecipheriv(ALGORITHM, key, iv, { authTagLength: AUTH_TAG_LENGTH });
-  decipher.setAuthTag(authTag);
-  let plaintext = decipher.update(ciphertext, "hex", "utf-8");
-  plaintext += decipher.final("utf-8");
-  return plaintext;
-}