@rubytech/create-maxy-code 0.1.63 → 0.1.65

package/payload/premium-plugins/real-agent/plugins/epc/mcp/src/lib/key-store.ts

@@ -1,172 +0,0 @@
-import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
-import { resolve, dirname } from "node:path";
-import { homedir } from "node:os";
-import { getSession } from "./neo4j.js";
-import { encrypt, decrypt } from "./crypto.js";
-import { encryptWith, decryptWith } from "./file-crypto.js";
-
-// Storage abstraction so the same MCP body runs against Neo4j (platform mode)
-// or an on-disk encrypted file (standalone mode, e.g. spawned by Claude Code
-// from ~/.claude/). Selected by the EPC_STANDALONE env flag at boot. Mirrors
-// the property-data key-store with one node per account: EPC keys are
-// account-scoped and the gov.uk EPC API has no team concept.
-
-export interface StoredKey {
-  apiKey: string;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface KeyStore {
-  readonly backendName: string;
-  readonly backendPath: string;
-  load(accountId: string): Promise<StoredKey | null>;
-  save(accountId: string, apiKey: string): Promise<void>;
-  delete(accountId: string): Promise<boolean>;
-}
-
-class Neo4jKeyStore implements KeyStore {
-  readonly backendName = "neo4j";
-  readonly backendPath = process.env.NEO4J_URI ?? "<unset>";
-
-  async load(accountId: string): Promise<StoredKey | null> {
-    const session = getSession();
-    try {
-      const result = await session.run(
-        `MATCH (k:EpcApiKey {accountId: $accountId})
-         RETURN k.encryptedKey AS encryptedKey,
-                k.createdAt AS createdAt,
-                k.updatedAt AS updatedAt`,
-        { accountId },
-      );
-      if (result.records.length === 0) return null;
-      const r = result.records[0];
-      return {
-        apiKey: decrypt(r.get("encryptedKey")),
-        createdAt: r.get("createdAt") ?? "",
-        updatedAt: r.get("updatedAt") ?? "",
-      };
-    } finally {
-      await session.close();
-    }
-  }
-
-  async save(accountId: string, apiKey: string): Promise<void> {
-    const encryptedKey = encrypt(apiKey);
-    const now = new Date().toISOString();
-    const session = getSession();
-    try {
-      await session.run(
-        `CREATE INDEX epc_api_key_account IF NOT EXISTS
-         FOR (k:EpcApiKey) ON (k.accountId)`,
-        {},
-      );
-      await session.run(
-        `MERGE (k:EpcApiKey {accountId: $accountId})
-         ON CREATE SET k.encryptedKey = $encryptedKey, k.createdAt = $now, k.updatedAt = $now
-         ON MATCH  SET k.encryptedKey = $encryptedKey, k.updatedAt = $now`,
-        { accountId, encryptedKey, now },
-      );
-    } finally {
-      await session.close();
-    }
-  }
-
-  async delete(accountId: string): Promise<boolean> {
-    const session = getSession();
-    try {
-      const result = await session.run(
-        `MATCH (k:EpcApiKey {accountId: $accountId})
-         DELETE k
-         RETURN count(k) AS deleted`,
-        { accountId },
-      );
-      const deleted = result.records[0]?.get("deleted")?.toNumber?.() ?? 0;
-      return deleted > 0;
-    } finally {
-      await session.close();
-    }
-  }
-}
-
-interface FileEnvelope {
-  [accountId: string]: { encryptedKey: string; createdAt: string; updatedAt: string };
-}
-
-const LABEL = "epc";
-
-class FileKeyStore implements KeyStore {
-  readonly backendName = "file";
-  readonly backendPath: string;
-  private readonly storePath: string;
-  private readonly keyFilePath: string;
-
-  constructor() {
-    const home = homedir();
-    this.storePath = resolve(home, ".claude/.realagent-epc-key.enc");
-    this.keyFilePath = resolve(home, ".claude/.realagent-epc-encryption-key");
-    this.backendPath = this.storePath;
-  }
-
-  private ensureDir(): void {
-    mkdirSync(dirname(this.storePath), { recursive: true });
-  }
-
-  private readAll(): FileEnvelope {
-    if (!existsSync(this.storePath)) return {};
-    const blob = readFileSync(this.storePath, "utf-8").trim();
-    if (!blob) return {};
-    const json = decryptWith(blob, this.keyFilePath, LABEL);
-    return JSON.parse(json) as FileEnvelope;
-  }
-
-  private writeAll(env: FileEnvelope): void {
-    this.ensureDir();
-    const blob = encryptWith(JSON.stringify(env), this.keyFilePath, LABEL);
-    writeFileSync(this.storePath, blob, { mode: 0o600 });
-  }
-
-  async load(accountId: string): Promise<StoredKey | null> {
-    const env = this.readAll();
-    const entry = env[accountId];
-    if (!entry) return null;
-    return {
-      apiKey: decryptWith(entry.encryptedKey, this.keyFilePath, LABEL),
-      createdAt: entry.createdAt,
-      updatedAt: entry.updatedAt,
-    };
-  }
-
-  async save(accountId: string, apiKey: string): Promise<void> {
-    const env = this.readAll();
-    const now = new Date().toISOString();
-    const encryptedKey = encryptWith(apiKey, this.keyFilePath, LABEL);
-    const prev = env[accountId];
-    env[accountId] = {
-      encryptedKey,
-      createdAt: prev?.createdAt ?? now,
-      updatedAt: now,
-    };
-    this.writeAll(env);
-  }
-
-  async delete(accountId: string): Promise<boolean> {
-    const env = this.readAll();
-    if (!(accountId in env)) return false;
-    delete env[accountId];
-    this.writeAll(env);
-    return true;
-  }
-}
-
-let cached: KeyStore | null = null;
-
-export function selectKeyStore(): KeyStore {
-  if (cached) return cached;
-  cached = process.env.EPC_STANDALONE === "1" ? new FileKeyStore() : new Neo4jKeyStore();
-  return cached;
-}
-
-export function _resetKeyStoreForTests(): void {
-  cached = null;
-}

package/payload/premium-plugins/real-agent/plugins/epc/mcp/src/lib/neo4j.ts

@@ -1,47 +0,0 @@
-import neo4j, { Driver, Session } from "neo4j-driver";
-import { readFileSync } from "node:fs";
-import { resolve } from "node:path";
-
-let driver: Driver | null = null;
-
-function readPassword(): string {
-  if (process.env.NEO4J_PASSWORD) return process.env.NEO4J_PASSWORD;
-  const passwordFile = resolve(
-    process.env.PLATFORM_ROOT ?? resolve(import.meta.dirname, "../../../.."),
-    "config/.neo4j-password",
-  );
-  try {
-    return readFileSync(passwordFile, "utf-8").trim();
-  } catch {
-    throw new Error(
-      `Neo4j password not found. Expected at ${passwordFile} or in NEO4J_PASSWORD env var.`,
-    );
-  }
-}
-
-export function getDriver(): Driver {
-  if (!driver) {
-    const uri = process.env.NEO4J_URI;
-    if (!uri) {
-      throw new Error(
-        "[epc] NEO4J_URI unset — refusing to default to bolt://localhost:7687",
-      );
-    }
-    const user = process.env.NEO4J_USER ?? "neo4j";
-    const password = readPassword();
-    console.error(`[epc] resolved neo4j_uri=${uri}`);
-    driver = neo4j.driver(uri, neo4j.auth.basic(user, password));
-  }
-  return driver;
-}
-
-export function getSession(): Session {
-  return getDriver().session();
-}
-
-export async function closeDriver(): Promise<void> {
-  if (driver) {
-    await driver.close();
-    driver = null;
-  }
-}

package/payload/premium-plugins/real-agent/plugins/epc/mcp/src/tools/key-deregister.ts

@@ -1,9 +0,0 @@
-import { selectKeyStore } from "../lib/key-store.js";
-
-export async function keyDeregister(params: { accountId: string }): Promise<void> {
-  const deleted = await selectKeyStore().delete(params.accountId);
-  if (!deleted) {
-    throw new Error("No EPC API key is registered for this account.");
-  }
-  console.error(`[epc] key-op op=deregister account=${params.accountId}`);
-}

package/payload/premium-plugins/real-agent/plugins/epc/mcp/src/tools/key-list.ts

@@ -1,10 +0,0 @@
-import { loadAccountKey } from "../lib/epc-api.js";
-
-export async function keyList(params: { accountId: string }): Promise<string> {
-  const key = await loadAccountKey(params.accountId);
-  console.error(`[epc] key-op op=list account=${params.accountId}`);
-  if (!key) {
-    return "No EPC API key registered. Use epc-key-register to add one.";
-  }
-  return `EPC API key registered (created: ${key.createdAt}, updated: ${key.updatedAt}). Key value is encrypted and cannot be retrieved.`;
-}

package/payload/premium-plugins/real-agent/plugins/epc/mcp/src/tools/key-register.ts

@@ -1,44 +0,0 @@
-import { selectKeyStore } from "../lib/key-store.js";
-import { BASE_URL, REQUEST_TIMEOUT_MS, EpcError } from "../lib/epc-api.js";
-
-// Probe the EPC register with the supplied credential against
-// /domestic/search constrained to a tiny page so we do not pull a real
-// payload. A valid credential returns HTTP 200 (rows may be empty for a
-// nonsense postcode, which is fine — authentication is what we test).
-// An invalid credential returns HTTP 401 Unauthorized.
-
-async function validateApiKey(credential: string): Promise<void> {
-  const url = `${BASE_URL}/domestic/search?postcode=SW1A1AA&size=1`;
-  const response = await fetch(url, {
-    headers: {
-      Accept: "application/json",
-      Authorization: `Basic ${Buffer.from(credential, "utf-8").toString("base64")}`,
-    },
-    signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
-  });
-  if (response.status === 401 || response.status === 403) {
-    throw new Error(
-      `EPC register rejected the credential (HTTP ${response.status}). Expected format is email:api-key.`,
-    );
-  }
-  // 200, 404 (no rows for that postcode), and 200-with-rows all prove the
-  // credential was accepted. Anything else surfaces as the upstream code.
-  if (response.status === 200 || response.status === 404) return;
-  const body = await response.text().catch(() => "");
-  throw new EpcError(response.status, "domestic/search", body.slice(0, 200));
-}
-
-export async function keyRegister(params: {
-  apiKey: string;
-  accountId: string;
-}): Promise<void> {
-  const { apiKey, accountId } = params;
-  if (!apiKey.includes(":")) {
-    throw new Error(
-      "EPC credential must be in the form email:api-key (email of the account that generated the key, then a colon, then the API key).",
-    );
-  }
-  await validateApiKey(apiKey);
-  await selectKeyStore().save(accountId, apiKey);
-  console.error(`[epc] key-op op=register account=${accountId}`);
-}

package/payload/premium-plugins/real-agent/plugins/epc/mcp/src/tools/lookup.ts

@@ -1,43 +0,0 @@
-import { epcSearch, groupAndPickMostRecent, EpcMatch } from "../lib/epc-api.js";
-
-interface LookupResult {
-  status: "ok";
-  matches: EpcMatch[];
-}
-
-export async function epcLookupByAddress(args: {
-  accountId: string;
-  address: string;
-  postcode?: string;
-}): Promise<string> {
-  const { accountId, address, postcode } = args;
-  const { rows } = await epcSearch({
-    toolName: "epc-lookup-by-address",
-    accountId,
-    identifier: address,
-    params: { address, postcode, size: 25 },
-  });
-  const result: LookupResult = {
-    status: "ok",
-    matches: groupAndPickMostRecent(rows),
-  };
-  return JSON.stringify(result, null, 2);
-}
-
-export async function epcLookupByUprn(args: {
-  accountId: string;
-  uprn: string;
-}): Promise<string> {
-  const { accountId, uprn } = args;
-  const { rows } = await epcSearch({
-    toolName: "epc-lookup-by-uprn",
-    accountId,
-    identifier: uprn,
-    params: { uprn, size: 25 },
-  });
-  const result: LookupResult = {
-    status: "ok",
-    matches: groupAndPickMostRecent(rows),
-  };
-  return JSON.stringify(result, null, 2);
-}

package/payload/premium-plugins/real-agent/plugins/epc/mcp/tsconfig.json

@@ -1,20 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "Node16",
-    "moduleResolution": "Node16",
-    "lib": ["ES2022"],
-    "outDir": "dist",
-    "rootDir": "src",
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "forceConsistentCasingInFileNames": true,
-    "resolveJsonModule": true,
-    "declaration": true,
-    "declarationMap": true,
-    "sourceMap": true
-  },
-  "include": ["src"],
-  "exclude": ["src/**/__tests__/**", "src/**/*.test.ts"]
-}

package/payload/premium-plugins/real-agent/plugins/epc/mcp/vitest.config.ts

@@ -1,8 +0,0 @@
-import { defineConfig } from "vitest/config";
-
-export default defineConfig({
-  test: {
-    include: ["src/**/__tests__/**/*.test.ts"],
-    environment: "node",
-  },
-});

package/payload/premium-plugins/real-agent/plugins/listings/skills/epc-checker/SKILL.md

@@ -1,38 +0,0 @@
----
-name: epc-checker
-description: "Look up the EPC register for a property and decide whether an order is needed. Returns the current EPC rating and expiry if one exists, or stages an order request to the agent's preferred EPC supplier if not. Built for use inside new-instruction."
----
-
-# EPC checker
-
-A building-block skill called by `new-instruction`. Decides whether the property has a current EPC and, if not, stages an order.
-
-## What it does
-
-Queries the EPC register by address. Three outcomes:
-
-1. **Current EPC found.** Records the asset rating (A to G), the certificate reference, and the expiry date. The workflow records this in the CRM and moves on. No gate needed.
-2. **Expired EPC found.** Records the prior rating and the expiry date. Stages an order with the agent's preferred EPC supplier from the profile. *Gate: approve order before send.*
-3. **No EPC found.** Stages an order. *Gate: approve order before send.*
-
-The order is an email draft to the supplier with the property address, vendor contact, and the agent's standard EPC brief.
-
-## Compliance ground
-
-The Energy Performance of Buildings (England and Wales) Regulations 2012 (SI 2012/3118) require an EPC before marketing for sale. The asset rating must be stated in all commercial media. Domestic penalty range GBP 500 to GBP 5,000. `compliance-flag-checker` runs over the listing copy at step 5 of `new-instruction` to make sure the EPC rating is present once the certificate has been issued.
-
-## What it does not do
-
-- It does not perform the EPC inspection. That is the supplier.
-- It does not send the order. Sending requires the operator's approval.
-- It does not write to the EPC register.
-
-## Connectors
-
-Read: EPC register, profile (preferred supplier).
-Write (staged only): email to supplier.
-
-## Profile keys
-
-- `realagent.suppliers.epc`
-- `realagent.epc_order.standard_brief` (default email body, learned)