@rubytech/create-realagent-code 0.1.125 → 0.1.127

package/payload/platform/plugins/graph-viewer/skills/render-graph/SKILL.md

@@ -0,0 +1,35 @@
+---
+name: render-graph
+description: "Render an inline PNG of a Neo4j subgraph for the operator using the graph-render MCP tool. Use when the operator asks to 'see the graph', 'show me the subgraph around X', 'render the owner subgraph', or any request whose outcome is a picture of nodes-and-edges they can look at in chat. Never substitute Mermaid, ASCII, or any other graph stand-in: graph-render is the only correct surface, and if it refuses (foreign account, missing node, empty neighbourhood, draw error) surface the structured error to the operator and stop. The image uses the same palette and short-label strings as the admin /graph page; node positions will differ because the renderer is d3-force not vis-network."
+---
+
+# render-graph
+
+When the operator asks for a picture of a subgraph:
+
+1. Resolve the root node's `elementId` first — usually via `memory-search`
+   or another graph tool the operator already pointed you at. Never pass a
+   property like `name` as `nodeId`.
+2. Pick a `hopDepth` between 0 and 3. Default to 1 unless the operator
+   asks for the wider neighbourhood. Depth 3 on a busy node will hit the
+   200-node cap and return a `truncated` envelope.
+3. Call `graph-render` with `{ accountId, nodeId, hopDepth }`.
+4. If the result is `ok: true`, the image attaches itself to your reply.
+   Tell the operator how many nodes are in view and, if `truncated` is
+   present, that there were more nodes than the cap.
+5. If the result is `ok: false`, surface the structured `reason` and
+   `message` to the operator verbatim. Do not retry with a different
+   nodeId without their input. Do not fall back to Mermaid, ASCII, or any
+   other graph substitute.
+
+## Reasons graph-render can refuse
+
+- `scope` — the nodeId belongs to a different account, or does not exist.
+- `empty` — the root exists but its neighbourhood is empty after the
+  trash filter.
+- `cap-exceeded` — reserved for future use; today subgraphs above 200
+  nodes return `ok: true` with a `truncated` envelope.
+- `draw-error` — the canvas renderer failed. The message contains the
+  underlying error; if it mentions a missing font, the system font fallback
+  is unavailable on this device.
+- `invalid-input` — `hopDepth` was outside the 0-3 range.

package/payload/platform/scripts/check-plugin-tools-mcp-consistency.mjs

@@ -0,0 +1,136 @@
+#!/usr/bin/env node
+// Publish-time gate: every PLUGIN.md with a non-empty `tools:` frontmatter
+// block must also declare an `mcp:` block. The `tools:` block populates the
+// `--allowed-tools mcp__<plugin>__*` spawn argv; without a registered MCP
+// server the agent boots with permissions for tools that have no backend.
+//
+// The session manager throws the same defect at boot
+// (tool-surface.ts 'mcp-block-missing'), but boot is on the operator's
+// device — by then the bad payload has already been published and installed.
+// This gate fires before `npm publish`, in the prepublishOnly chain.
+//
+// Live repro: Task 357 added visitor-graph tools to buyers/PLUGIN.md without
+// the matching mcp: block; the slip-through is what motivates Task 368.
+
+import { readFileSync, readdirSync, statSync, existsSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const __dirname = dirname(fileURLToPath(import.meta.url))
+const MAXY_CODE_ROOT = resolve(__dirname, '..', '..')
+
+const PLUGIN_ROOTS = [
+  // platform/plugins/<plugin>/PLUGIN.md
+  { root: join(MAXY_CODE_ROOT, 'platform', 'plugins'), depth: 1 },
+  // premium-plugins/<bundle>/PLUGIN.md           (shape b)
+  { root: join(MAXY_CODE_ROOT, 'premium-plugins'), depth: 1 },
+  // premium-plugins/<bundle>/plugins/<sub>/PLUGIN.md  (shape a)
+  { root: join(MAXY_CODE_ROOT, 'premium-plugins'), depth: 2, mid: 'plugins' },
+]
+
+function collectPluginDirs() {
+  const dirs = []
+  for (const spec of PLUGIN_ROOTS) {
+    if (!existsSync(spec.root)) continue
+    for (const entry of readdirSync(spec.root)) {
+      if (entry.startsWith('.')) continue
+      const lvl1 = join(spec.root, entry)
+      if (!statSync(lvl1).isDirectory()) continue
+      if (spec.depth === 1) {
+        dirs.push(lvl1)
+        continue
+      }
+      const midDir = join(lvl1, spec.mid)
+      if (!existsSync(midDir)) continue
+      if (!statSync(midDir).isDirectory()) continue
+      for (const sub of readdirSync(midDir)) {
+        if (sub.startsWith('.')) continue
+        const lvl2 = join(midDir, sub)
+        if (!statSync(lvl2).isDirectory()) continue
+        dirs.push(lvl2)
+      }
+    }
+  }
+  return dirs
+}
+
+function extractFrontmatter(md) {
+  if (!md.startsWith('---')) return null
+  const end = md.indexOf('\n---', 3)
+  if (end < 0) return null
+  return md.slice(3, end)
+}
+
+// Detect a top-level key in YAML frontmatter (key at column 0, followed by `:`).
+// The key may be bare (`tools:`) — empty value means "block follows on
+// subsequent indented lines" OR "empty list".
+function findTopLevelKey(frontmatter, key) {
+  const re = new RegExp(`^${key}\\s*:`, 'm')
+  return re.test(frontmatter)
+}
+
+// Returns true when the `tools:` block has at least one list entry. A bare
+// `tools:` with no children, or `tools: []`, is treated as empty (no surface).
+function hasNonEmptyToolsBlock(frontmatter) {
+  const lines = frontmatter.split('\n')
+  let inTools = false
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i]
+    if (/^tools\s*:/.test(line)) {
+      const after = line.replace(/^tools\s*:/, '').trim()
+      // Inline form: `tools: []` or `tools: [a, b]`
+      if (after.startsWith('[')) {
+        return /\[\s*[^\]\s]/.test(after)
+      }
+      if (after) {
+        // Single-line scalar (unusual for tools, but treat as non-empty).
+        return true
+      }
+      inTools = true
+      continue
+    }
+    if (inTools) {
+      if (/^\S/.test(line) && line.trim() !== '') {
+        // Top-level key after tools: — block ended.
+        return false
+      }
+      if (/^\s*-\s+/.test(line)) return true
+    }
+  }
+  return false
+}
+
+function checkPlugin(pluginDir) {
+  const manifestPath = join(pluginDir, 'PLUGIN.md')
+  if (!existsSync(manifestPath)) return null
+  const raw = readFileSync(manifestPath, 'utf-8')
+  const fm = extractFrontmatter(raw)
+  if (fm === null) return null
+  if (!hasNonEmptyToolsBlock(fm)) return null
+  if (findTopLevelKey(fm, 'mcp')) return null
+  return manifestPath
+}
+
+function main() {
+  const offenders = []
+  for (const dir of collectPluginDirs()) {
+    const offender = checkPlugin(dir)
+    if (offender) offenders.push({ dir, manifestPath: offender })
+  }
+  if (offenders.length === 0) {
+    console.log('[gate] check-plugin-tools-mcp-consistency: PASS')
+    return
+  }
+  for (const { dir, manifestPath } of offenders) {
+    const plugin = dir.split('/').pop()
+    console.error(
+      `[gate] FATAL: plugin=${plugin} has tools: block but no mcp: block.\n` +
+        `  manifest: ${manifestPath}\n` +
+        `  Spawns would pass --allowed-tools mcp__${plugin}__* with no registered server.\n` +
+        `  Add mcp: block or remove tools: entries.`,
+    )
+  }
+  process.exit(1)
+}
+
+main()

package/payload/platform/templates/specialists/agents/content-producer.md

@@ -3,7 +3,7 @@ name: content-producer
 description: "Visual production and static-site hosting. Reads from the populated graph to produce visual artifacts (image generation, PDF rendering, component delivery) and hosts already-prepared static sites by extracting attached archives via unzip-attachment then placing the tree under <accountDir>/sites/<slug>/ via publish-site. Delegate for: generating images, saving rendered pages as PDF, or any 'host this website' / 'publish this site' / 'put this online' intent carrying an HTML+assets archive. Not document ingestion: graph ingestion of any kind routes to specialists:database-operator. Static-site zips are extracted to disk for publication, never written to the graph."
 summary: "Produces visual output from your graph: generates images, renders pages to PDF, and hosts static websites you upload as a zip."
 model: claude-sonnet-4-6
-tools: Bash, mcp__memory__memory-search, mcp__replicate__image-generate, mcp__plugin_playwright_playwright__browser_navigate, mcp__plugin_playwright_playwright__browser_snapshot, mcp__plugin_playwright_playwright__browser_take_screenshot, mcp__plugin_playwright_playwright__browser_pdf_save, mcp__admin__file-attach, mcp__admin__plugin-read, mcp__admin__public-hostname
+tools: Bash, mcp__memory__memory-search, mcp__replicate__image-generate, mcp__plugin_playwright_playwright__browser_navigate, mcp__plugin_playwright_playwright__browser_snapshot, mcp__plugin_playwright_playwright__browser_take_screenshot, mcp__plugin_playwright_playwright__browser_pdf_save, mcp__admin__file-attach, mcp__admin__plugin-read, mcp__admin__public-hostname, mcp__admin__publish-site
 ---
 
 # Content Producer
@@ -34,9 +34,9 @@ Generate the HTML, navigate the Playwright browser to it, and capture with `brow
 
 ## Hosting websites
 
-When a brief carries a "host this website" / "publish this site" / "put this online" intent with a `.zip` of HTML and assets, run the two-skill chain in order: `skill-load skillName=unzip-attachment` then `skill-load skillName=publish-site`. Both ship deterministic Bash entries with mechanically enforced invariants (zip-slip guard, slug regex, refusal taxonomy). Follow the skill, do not paraphrase, do not improvise a fallback server.
+When a brief carries a "host this website" / "publish this site" / "put this online" intent with a `.zip` of HTML and assets, run `skill-load skillName=unzip-attachment` to extract, then call `mcp__admin__publish-site` directly. The tool owns slug validation, the symlink scan, the `mv`, the refusal taxonomy, and the post-publish llms.txt refresh — load `skill-load skillName=publish-site` only if you need the intent-router context. Do not improvise a fallback server.
 
-Confirm the slug with the operator before publishing. The slug is one or more `/`-separated segments under `<accountDir>/sites/`. Refusals are loud-fail; relay the operator message verbatim and stop. On success, emit the canonical path slug (`/sites/<slug>/` or `/sites/<slug>/<file>.html`) as one line for the operator to paste after their public-host root.
+Confirm the slug with the operator before publishing. The slug is one or more `/`-separated segments under `<accountDir>/sites/`. Refusals are loud-fail; relay the tool's `Operator action:` line verbatim and stop. On success, take the `pathSlug` from the tool response, call `mcp__admin__public-hostname`, and surface `https://<hostname><pathSlug>` to the operator as one line.
 
 ## File delivery
 

package/payload/premium-plugins/real-agent/plugins/buyers/PLUGIN.md

@@ -35,6 +35,9 @@ tools:
   - name: visitor-backfill-from-logs
     publicAllowlist: false
     adminAllowlist: true
+  - name: mint-visitor-token
+    publicAllowlist: false
+    adminAllowlist: true
 always: false
 metadata: {"platform":{"optional":true,"embed":["public","admin"]}}
 ---
@@ -66,10 +69,11 @@ Skills operate via existing platform tools plus the visitor-graph MCP added in T
 - `visitor-recent-by-person` — recent :Session activity for a :Person (morning round, 1:1 prep)
 - `visitor-recent-by-page` — who has viewed a listing recently (operator side-bar)
 - `visitor-engagement-score` — engagement-ranked :Person list (nurture queue)
-- `visitor-recommendation-ctr` — recommendation CTR over a window (replaces Task 336 log-scan after 14-day parity)
+- `visitor-recommendation-ctr` — recommendation CTR over a window, joined from `:Recommendation` and `:Click` nodes
 - `visitor-session-detail` — full event timeline for one :Session
 - `visitor-event-ingest` — admin-side companion to `POST /v/event` for test harness work
-- `visitor-backfill-from-logs` — one-shot importer for Task 336/294 logs with parity check
+- `visitor-backfill-from-logs` — one-shot importer for `[property-recommended]` and `[property-card-click]` log lines, used to recover late-arriving sessions
+- `mint-visitor-token` — sign a `&v=<token>` value bound to a `:Person` so outbound URLs in morning-round / lead-nurturing / vendor-updates attribute clicks back to the recipient (Task 362)
 
 ## References
 

package/payload/premium-plugins/real-agent/plugins/buyers/mcp/dist/index.js

@@ -1,13 +1,14 @@
-// buyers MCP server — visitor-graph tools (Task 357).
+// buyers MCP server — visitor-graph tools (Task 357 + 362).
 //
-// Seven tools, all admin-side (none exposed on the public agent):
+// Eight tools, all admin-side (none exposed on the public agent):
 //   visitor-recent-by-person      query
 //   visitor-recent-by-page        query
 //   visitor-engagement-score      query
-//   visitor-recommendation-ctr    query (replaces 336 log-scan after parity)
+//   visitor-recommendation-ctr    query (graph-backed CTR)
 //   visitor-session-detail        query
 //   visitor-event-ingest          write (test harness / manual replay)
-//   visitor-backfill-from-logs    write (one-shot importer + parity check)
+//   visitor-backfill-from-logs    write (one-shot recovery importer)
+//   mint-visitor-token            mint  (Task 362 — sign &v=<token> URLs)
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
@@ -19,6 +20,7 @@ import { visitorRecommendationCtr } from "./tools/visitor-recommendation-ctr.js"
 import { visitorSessionDetail } from "./tools/visitor-session-detail.js";
 import { visitorEventIngest } from "./tools/visitor-event-ingest.js";
 import { visitorBackfillFromLogs } from "./tools/visitor-backfill-from-logs.js";
+import { mintVisitorTokenTool } from "./tools/mint-visitor-token.js";
 const accountId = process.env.ACCOUNT_ID ?? "local";
 const server = new McpServer({ name: "maxy-buyers", version: "0.1.0" });
 console.error(`[buyers] server started, account=${accountId}`);
@@ -75,12 +77,16 @@ server.tool("visitor-event-ingest", "Admin-side companion to POST /v/event for t
     dwellMs: z.number().int().min(0).optional(),
     occurredAt: z.string().optional().describe("ISO timestamp override"),
 }, jsonHandler((p) => visitorEventIngest(p)));
-server.tool("visitor-backfill-from-logs", "One-shot importer: parse [property-recommended] and [property-card-click] log lines and write into the visitor graph. Idempotent for Recommendations; immutable for Click events. Reports a parityCheck comparing graph counts to log counts.", {
+server.tool("visitor-backfill-from-logs", "One-shot importer: parse [property-recommended] and [property-card-click] log lines and write into the visitor graph. Idempotent for Recommendations; immutable for Click events. Use to recover late-arriving sessions or for ad-hoc forensics; the graph is the canonical aggregation surface.", {
     logPath: z.string().min(1).describe("Absolute path to the platform log file"),
     sinceIso: z.string().optional().describe("ISO timestamp lower bound (inclusive)"),
     untilIso: z.string().optional().describe("ISO timestamp upper bound (exclusive)"),
     batchSize: z.number().int().positive().max(2000).optional().describe("Lines per Cypher batch (default 200)"),
 }, jsonHandler((p) => visitorBackfillFromLogs(p)));
+server.tool("mint-visitor-token", "Mint a signed visitor token bound to a known :Person elementId. Append the returned token to outbound listing URLs as `&v=<token>` (e.g. /listings/<slug>/click?session=<sk>&v=<token>). When the recipient clicks, the UI server verifies the HMAC and writes the same value into the `mxy_v` cookie so subsequent /v/event posts attribute to that :Person. TTL defaults to 30 days. Use from morning-round, lead-nurturing, and vendor-updates whenever the outbound URL goes to a known :Person.", {
+    personId: z.string().min(1).describe(":Person elementId to bind the token to"),
+    ttlDays: z.number().int().positive().max(365).optional().describe("Token lifetime in days (default 30, max 365)"),
+}, jsonHandler((p) => mintVisitorTokenTool(p)));
 process.on("SIGINT", async () => {
     console.error("[buyers] SIGINT — closing driver");
     await closeDriver();

package/payload/premium-plugins/real-agent/plugins/buyers/mcp/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,EAAE;AACF,kEAAkE;AAClE,wCAAwC;AACxC,wCAAwC;AACxC,wCAAwC;AACxC,6EAA6E;AAC7E,wCAAwC;AACxC,uEAAuE;AACvE,2EAA2E;AAE3E,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAEhF,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC;AAEpD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAExE,OAAO,CAAC,KAAK,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;AAE/D,SAAS,WAAW,CAAI,EAA8C;IACpE,OAAO,KAAK,EAAE,MAA+B,EAAE,EAAE;QAC/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAClD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACzF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACxG,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,2MAA2M,EAC3M;IACE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAClG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CACvG,EACD,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAA2D,CAAC,CAAC,CACvG,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,iJAAiJ,EACjJ;IACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACtF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC1E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACjG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CACvG,EACD,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAyD,CAAC,CAAC,CACnG,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,yIAAyI,EACzI;IACE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAClG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;CAC5F,EACD,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAA4D,CAAC,CAAC,CACzG,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,4BAA4B,EAC5B,6IAA6I,EAC7I;IACE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACjG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CAC5E,EACD,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAA8D,CAAC,CAAC,CAC7G,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,0IAA0I,EAC1I;IACE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;CAC5D,EACD,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAA0D,CAAC,CAAC,CACrG,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,iHAAiH,EACjH;IACE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC7E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IACnE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IACnE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC1F,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IACvE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAC1F,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;CACrE,EACD,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAwD,CAAC,CAAC,CACjG,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,4BAA4B,EAC5B,+OAA+O,EAC/O;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC7E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACjF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACjF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;CAC7G,EACD,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAA6D,CAAC,CAAC,CAC3G,CAAC;AAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;IAC9B,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAClD,MAAM,WAAW,EAAE,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;IAC/B,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACnD,MAAM,WAAW,EAAE,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAChC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,EAAE;AACF,kEAAkE;AAClE,wCAAwC;AACxC,wCAAwC;AACxC,wCAAwC;AACxC,2DAA2D;AAC3D,wCAAwC;AACxC,uEAAuE;AACvE,qEAAqE;AACrE,0EAA0E;AAE1E,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC;AAEpD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAExE,OAAO,CAAC,KAAK,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;AAE/D,SAAS,WAAW,CAAI,EAA8C;IACpE,OAAO,KAAK,EAAE,MAA+B,EAAE,EAAE;QAC/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAClD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACzF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACxG,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,2MAA2M,EAC3M;IACE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAClG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CACvG,EACD,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAA2D,CAAC,CAAC,CACvG,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,iJAAiJ,EACjJ;IACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACtF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC1E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACjG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CACvG,EACD,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAyD,CAAC,CAAC,CACnG,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,yIAAyI,EACzI;IACE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAClG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;CAC5F,EACD,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAA4D,CAAC,CAAC,CACzG,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,4BAA4B,EAC5B,6IAA6I,EAC7I;IACE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACjG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CAC5E,EACD,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAA8D,CAAC,CAAC,CAC7G,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,0IAA0I,EAC1I;IACE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;CAC5D,EACD,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAA0D,CAAC,CAAC,CACrG,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,iHAAiH,EACjH;IACE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC7E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IACnE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IACnE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC1F,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IACvE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAC1F,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;CACrE,EACD,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAwD,CAAC,CAAC,CACjG,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,4BAA4B,EAC5B,kSAAkS,EAClS;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC7E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACjF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACjF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;CAC7G,EACD,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAA6D,CAAC,CAAC,CAC3G,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,seAAse,EACte;IACE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC9E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;CAClH,EACD,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAA0D,CAAC,CAAC,CACrG,CAAC;AAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;IAC9B,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAClD,MAAM,WAAW,EAAE,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;IAC/B,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACnD,MAAM,WAAW,EAAE,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAChC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC"}

package/payload/premium-plugins/real-agent/plugins/buyers/mcp/dist/lib/visitor-token.d.ts

@@ -0,0 +1,9 @@
+export interface MintOpts {
+    personId: string;
+    expiryMs?: number;
+}
+export declare function mintVisitorToken(opts: MintOpts): {
+    token: string;
+    expiryMs: number;
+};
+//# sourceMappingURL=visitor-token.d.ts.map

package/payload/premium-plugins/real-agent/plugins/buyers/mcp/dist/lib/visitor-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"visitor-token.d.ts","sourceRoot":"","sources":["../../src/lib/visitor-token.ts"],"names":[],"mappings":"AAkEA,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAOpF"}

package/payload/premium-plugins/real-agent/plugins/buyers/mcp/dist/lib/visitor-token.js

@@ -0,0 +1,66 @@
+// Visitor-token minting — admin-side surface (Task 362).
+//
+// Mirrors the mint half of platform/ui/app/lib/visitor-token.ts. Verification
+// still lives in the UI server (the only verifier; mxy_v cookie + /v/event +
+// /listings/:slug/click consume tokens). Both processes share one secret file
+// under <MAXY_DIR>/credentials/visitor-token-secret via the wx-create pattern,
+// so whichever process reads first mints; the other reads the same bytes.
+//
+// MAXY_DIR is resolved from process.env.LOG_DIR's parent — the buyers MCP is
+// spawned with LOG_DIR=<MAXY_DIR>/logs (see buyers/PLUGIN.md env block), so
+// dirname(LOG_DIR) is the brand-scoped config dir whether the brand is maxy,
+// realagent, or any future brand.
+import { createHmac, randomBytes } from "node:crypto";
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+const TOKEN_PREFIX = "v1.";
+const SECRET_BYTES = 32;
+const DEFAULT_TTL_MS = 30 * 24 * 60 * 60 * 1000; // 30 days
+let cachedSecret = null;
+function secretFilePath() {
+    const logDir = process.env.LOG_DIR;
+    if (!logDir) {
+        throw new Error("[buyers] LOG_DIR unset — cannot resolve visitor-token secret path");
+    }
+    return resolve(dirname(logDir), "credentials", "visitor-token-secret");
+}
+function getSecret() {
+    if (cachedSecret)
+        return cachedSecret;
+    const path = secretFilePath();
+    try {
+        const hex = readFileSync(path, "utf-8").trim();
+        if (hex.length === SECRET_BYTES * 2) {
+            cachedSecret = Buffer.from(hex, "hex");
+            return cachedSecret;
+        }
+    }
+    catch {
+        /* fall through to mint */
+    }
+    const fresh = randomBytes(SECRET_BYTES).toString("hex");
+    try {
+        mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+        writeFileSync(path, fresh, { mode: 0o600, flag: "wx" });
+        console.error(`[buyers] visitor-token secret minted path=${path}`);
+    }
+    catch {
+        // Race with the UI server (or a peer reader) between read and write;
+        // the second read below picks up their value.
+    }
+    const hex = readFileSync(path, "utf-8").trim();
+    cachedSecret = Buffer.from(hex, "hex");
+    return cachedSecret;
+}
+function base64urlEncode(buf) {
+    return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+export function mintVisitorToken(opts) {
+    const expiryMs = opts.expiryMs ?? Date.now() + DEFAULT_TTL_MS;
+    const payload = { p: opts.personId, e: expiryMs };
+    const payloadJson = JSON.stringify(payload);
+    const payloadB64 = base64urlEncode(Buffer.from(payloadJson, "utf-8"));
+    const sig = base64urlEncode(createHmac("sha256", getSecret()).update(payloadJson).digest());
+    return { token: `${TOKEN_PREFIX}${payloadB64}.${sig}`, expiryMs };
+}
+//# sourceMappingURL=visitor-token.js.map

package/payload/premium-plugins/real-agent/plugins/buyers/mcp/dist/lib/visitor-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"visitor-token.js","sourceRoot":"","sources":["../../src/lib/visitor-token.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,0EAA0E;AAC1E,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,kCAAkC;AAElC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,UAAU;AAO3D,IAAI,YAAY,GAAkB,IAAI,CAAC;AAEvC,SAAS,cAAc;IACrB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,sBAAsB,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,GAAG,CAAC,EAAE,CAAC;YACpC,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvC,OAAO,YAAY,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,KAAK,CAAC,6CAA6C,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,8CAA8C;IAChD,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3F,CAAC;AAOD,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;IAC9D,MAAM,OAAO,GAAiB,EAAE,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;IAChE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5F,OAAO,EAAE,KAAK,EAAE,GAAG,YAAY,GAAG,UAAU,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC;AACpE,CAAC"}

package/payload/premium-plugins/real-agent/plugins/buyers/mcp/dist/tools/mint-visitor-token.d.ts

@@ -0,0 +1,12 @@
+export interface MintParams {
+    accountId: string;
+    personId: string;
+    ttlDays?: number;
+}
+export interface MintResult {
+    token: string;
+    expiryMs: number;
+    expiresAt: string;
+}
+export declare function mintVisitorTokenTool(p: MintParams): Promise<MintResult>;
+//# sourceMappingURL=mint-visitor-token.d.ts.map

package/payload/premium-plugins/real-agent/plugins/buyers/mcp/dist/tools/mint-visitor-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mint-visitor-token.d.ts","sourceRoot":"","sources":["../../src/tools/mint-visitor-token.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAKD,wBAAsB,oBAAoB,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAY7E"}

package/payload/premium-plugins/real-agent/plugins/buyers/mcp/dist/tools/mint-visitor-token.js

@@ -0,0 +1,21 @@
+// mint-visitor-token — admin-side mint of a signed visitor token bound to
+// a known :Person elementId. The agent appends `&v=<token>` to listing-click
+// URLs in outbound marketing surfaces (morning-round, lead-nurturing,
+// vendor-updates). Verification stays in the UI server; this tool only mints.
+import { mintVisitorToken } from "../lib/visitor-token.js";
+const DEFAULT_TTL_DAYS = 30;
+const MAX_TTL_DAYS = 365;
+export async function mintVisitorTokenTool(p) {
+    if (!p.personId || typeof p.personId !== "string") {
+        throw new Error("personId required");
+    }
+    const ttlDays = Math.max(1, Math.min(p.ttlDays ?? DEFAULT_TTL_DAYS, MAX_TTL_DAYS));
+    const expiryMs = Date.now() + ttlDays * 24 * 60 * 60 * 1000;
+    const minted = mintVisitorToken({ personId: p.personId, expiryMs });
+    return {
+        token: minted.token,
+        expiryMs: minted.expiryMs,
+        expiresAt: new Date(minted.expiryMs).toISOString(),
+    };
+}
+//# sourceMappingURL=mint-visitor-token.js.map

package/payload/premium-plugins/real-agent/plugins/buyers/mcp/dist/tools/mint-visitor-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mint-visitor-token.js","sourceRoot":"","sources":["../../src/tools/mint-visitor-token.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,6EAA6E;AAC7E,sEAAsE;AACtE,8EAA8E;AAE9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAc3D,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,CAAa;IACtD,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,gBAAgB,EAAE,YAAY,CAAC,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC5D,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpE,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;KACnD,CAAC;AACJ,CAAC"}

package/payload/premium-plugins/real-agent/plugins/buyers/mcp/dist/tools/visitor-backfill-from-logs.d.ts

@@ -14,11 +14,6 @@ export interface BackfillResult {
     clickedParsed: number;
     clickedWritten: number;
     unparseable: number;
-    parityCheck: "ok" | "mismatch";
-    parityDelta: {
-        recommended: number;
-        clicked: number;
-    };
 }
 export declare function visitorBackfillFromLogs(p: BackfillParams): Promise<BackfillResult>;
 //# sourceMappingURL=visitor-backfill-from-logs.d.ts.map

package/payload/premium-plugins/real-agent/plugins/buyers/mcp/dist/tools/visitor-backfill-from-logs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"visitor-backfill-from-logs.d.ts","sourceRoot":"","sources":["../../src/tools/visitor-backfill-from-logs.ts"],"names":[],"mappings":"AA2BA,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,2BAA2B,EAAE,MAAM,CAAC;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,IAAI,GAAG,UAAU,CAAC;IAC/B,WAAW,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACvD;AA2BD,wBAAsB,uBAAuB,CAAC,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAmHxF"}
+{"version":3,"file":"visitor-backfill-from-logs.d.ts","sourceRoot":"","sources":["../../src/tools/visitor-backfill-from-logs.ts"],"names":[],"mappings":"AA2BA,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,2BAA2B,EAAE,MAAM,CAAC;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB;AA2BD,wBAAsB,uBAAuB,CAAC,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CA0FxF"}

package/payload/premium-plugins/real-agent/plugins/buyers/mcp/dist/tools/visitor-backfill-from-logs.js

@@ -12,15 +12,15 @@
 //     -> MATCH/MERGE Session, CREATE Click {label:'card', listingSlug}
 //        MERGE Session-[:HAS_EVENT]->Click
 //
-// Parity check after backfill: graph counts vs log-scan counts for the
-// same window. parityCheck is 'ok' iff both deltas are zero, otherwise
-// 'mismatch' with the delta surfaced for diagnosis.
+// Recovery path: used when a live POST /v/event write was lost (process
+// restart, dropped connection) or for ad-hoc forensics. The graph is
+// the canonical surface — these log lines are the join key, not the
+// aggregation path.
 //
 // Idempotency: re-running over the same log window does not duplicate
 // Recommendation nodes (MERGE on the exact sessionKey + slug + ts tuple).
 // Click nodes are immutable event records by design; if you re-run on a
-// window already processed you get duplicates. Operator runs once per
-// cutover.
+// window already processed you get duplicates.
 import { readFileSync } from "node:fs";
 import { getSession } from "../lib/neo4j.js";
 const REC_RE = /\[property-recommended\]\s+sessionKey=(\S+)\s+listingSlug=(\S+)\s+ts=(\S+)/;
@@ -116,26 +116,7 @@ export async function visitorBackfillFromLogs(p) {
             const row = result.records[0];
             clickedWritten += Number(row?.get("written") ?? 0);
         }
-        const parityRes = await session.run(`MATCH (rec:Recommendation {accountId: $accountId})
-       WHERE rec.recommendedAt >= datetime($since) AND rec.recommendedAt < datetime($until)
-       WITH count(DISTINCT rec) AS recCount
-       OPTIONAL MATCH (cl:Click {accountId: $accountId, label: 'card'})
-       WHERE cl.occurredAt >= datetime($since) AND cl.occurredAt < datetime($until)
-         AND cl.backfilled = true
-       RETURN recCount, count(DISTINCT cl) AS clickCount`, {
-            accountId: p.accountId,
-            since: windowStart ?? new Date(0).toISOString(),
-            until: windowEnd ? new Date(Date.parse(windowEnd) + 1).toISOString() : new Date().toISOString(),
-        });
-        const head = parityRes.records[0];
-        const recGraph = Number(head?.get("recCount") ?? 0);
-        const clickGraph = Number(head?.get("clickCount") ?? 0);
-        const parityDelta = {
-            recommended: recGraph - rec.length,
-            clicked: clickGraph - click.length,
-        };
-        const parityCheck = parityDelta.recommended === 0 && parityDelta.clicked === 0 ? "ok" : "mismatch";
-        console.error(`[visitor-backfill] done parityCheck=${parityCheck} recParsed=${rec.length} recWritten=${recommendedWritten} clickParsed=${click.length} clickWritten=${clickedWritten} unparseable=${unparseable}`);
+        console.error(`[visitor-backfill] done recParsed=${rec.length} recWritten=${recommendedWritten} clickParsed=${click.length} clickWritten=${clickedWritten} unparseable=${unparseable}`);
         return {
             windowStart,
             windowEnd,
@@ -145,8 +126,6 @@ export async function visitorBackfillFromLogs(p) {
             clickedParsed: click.length,
             clickedWritten,
             unparseable,
-            parityCheck,
-            parityDelta,
         };
     }
     finally {

package/payload/premium-plugins/real-agent/plugins/buyers/mcp/dist/tools/visitor-backfill-from-logs.js.map

@@ -1 +1 @@
-{"version":3,"file":"visitor-backfill-from-logs.js","sourceRoot":"","sources":["../../src/tools/visitor-backfill-from-logs.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,yEAAyE;AACzE,2DAA2D;AAC3D,EAAE;AACF,uEAAuE;AACvE,sCAAsC;AACtC,0EAA0E;AAC1E,0DAA0D;AAC1D,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,2CAA2C;AAC3C,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,oDAAoD;AACpD,EAAE;AACF,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,sEAAsE;AACtE,WAAW;AAEX,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AA2B7C,MAAM,MAAM,GAAG,4EAA4E,CAAC;AAC5F,MAAM,QAAQ,GAAG,2EAA2E,CAAC;AAC7F,MAAM,MAAM,GAAG,sCAAsC,CAAC;AAEtD,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,OAAsB,EAAE,OAAsB;IAC3E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,GAAG,OAAO;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,IAAI,OAAO;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,CAAiB;IAC7D,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAEnE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC,OAAO,QAAS,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACxG,CAAC;IAED,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;YAAE,SAAS;QAC1G,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,WAAW,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC;YAAE,SAAS;QACrD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;YACvC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,WAAW,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,GAAG,WAAW;YAAE,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC;QAC7E,IAAI,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,GAAG,SAAS;YAAE,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,IAAI,2BAA2B,GAAG,CAAC,CAAC;IACpC,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,SAAS,WAAW,WAAW,KAAK,SAAS,QAAQ,GAAG,CAAC,MAAM,UAAU,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAE/I,IAAI,CAAC;QACH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;;;;;;sEAS8D,EAC9D,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CACxC,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC9B,kBAAkB,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACvD,2BAA2B,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;;;qCAM6B,EAC7B,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CACxC,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC9B,cAAc,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC;;;;;;yDAMmD,EACnD;YACE,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,KAAK,EAAE,WAAW,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YAC/C,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAChG,CACF,CAAC;QACF,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG;YAClB,WAAW,EAAE,QAAQ,GAAG,GAAG,CAAC,MAAM;YAClC,OAAO,EAAE,UAAU,GAAG,KAAK,CAAC,MAAM;SACnC,CAAC;QACF,MAAM,WAAW,GAAsB,WAAW,CAAC,WAAW,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;QAEtH,OAAO,CAAC,KAAK,CACX,uCAAuC,WAAW,cAAc,GAAG,CAAC,MAAM,eAAe,kBAAkB,gBAAgB,KAAK,CAAC,MAAM,iBAAiB,cAAc,gBAAgB,WAAW,EAAE,CACpM,CAAC;QAEF,OAAO;YACL,WAAW;YACX,SAAS;YACT,iBAAiB,EAAE,GAAG,CAAC,MAAM;YAC7B,kBAAkB;YAClB,2BAA2B;YAC3B,aAAa,EAAE,KAAK,CAAC,MAAM;YAC3B,cAAc;YACd,WAAW;YACX,WAAW;YACX,WAAW;SACZ,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}
+{"version":3,"file":"visitor-backfill-from-logs.js","sourceRoot":"","sources":["../../src/tools/visitor-backfill-from-logs.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,yEAAyE;AACzE,2DAA2D;AAC3D,EAAE;AACF,uEAAuE;AACvE,sCAAsC;AACtC,0EAA0E;AAC1E,0DAA0D;AAC1D,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,2CAA2C;AAC3C,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,oEAAoE;AACpE,oBAAoB;AACpB,EAAE;AACF,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,+CAA+C;AAE/C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAyB7C,MAAM,MAAM,GAAG,4EAA4E,CAAC;AAC5F,MAAM,QAAQ,GAAG,2EAA2E,CAAC;AAC7F,MAAM,MAAM,GAAG,sCAAsC,CAAC;AAEtD,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,OAAsB,EAAE,OAAsB;IAC3E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,GAAG,OAAO;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,IAAI,OAAO;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,CAAiB;IAC7D,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAEnE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC,OAAO,QAAS,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACxG,CAAC;IAED,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;YAAE,SAAS;QAC1G,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,WAAW,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC;YAAE,SAAS;QACrD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;YACvC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,WAAW,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,GAAG,WAAW;YAAE,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC;QAC7E,IAAI,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,GAAG,SAAS;YAAE,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,IAAI,2BAA2B,GAAG,CAAC,CAAC;IACpC,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,SAAS,WAAW,WAAW,KAAK,SAAS,QAAQ,GAAG,CAAC,MAAM,UAAU,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAE/I,IAAI,CAAC;QACH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;;;;;;sEAS8D,EAC9D,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CACxC,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC9B,kBAAkB,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACvD,2BAA2B,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;;;qCAM6B,EAC7B,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CACxC,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC9B,cAAc,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,CAAC,KAAK,CACX,qCAAqC,GAAG,CAAC,MAAM,eAAe,kBAAkB,gBAAgB,KAAK,CAAC,MAAM,iBAAiB,cAAc,gBAAgB,WAAW,EAAE,CACzK,CAAC;QAEF,OAAO;YACL,WAAW;YACX,SAAS;YACT,iBAAiB,EAAE,GAAG,CAAC,MAAM;YAC7B,kBAAkB;YAClB,2BAA2B;YAC3B,aAAa,EAAE,KAAK,CAAC,MAAM;YAC3B,cAAc;YACd,WAAW;SACZ,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}

package/payload/premium-plugins/real-agent/plugins/buyers/mcp/src/index.ts

@@ -1,13 +1,14 @@
-// buyers MCP server — visitor-graph tools (Task 357).
+// buyers MCP server — visitor-graph tools (Task 357 + 362).
 //
-// Seven tools, all admin-side (none exposed on the public agent):
+// Eight tools, all admin-side (none exposed on the public agent):
 //   visitor-recent-by-person      query
 //   visitor-recent-by-page        query
 //   visitor-engagement-score      query
-//   visitor-recommendation-ctr    query (replaces 336 log-scan after parity)
+//   visitor-recommendation-ctr    query (graph-backed CTR)
 //   visitor-session-detail        query
 //   visitor-event-ingest          write (test harness / manual replay)
-//   visitor-backfill-from-logs    write (one-shot importer + parity check)
+//   visitor-backfill-from-logs    write (one-shot recovery importer)
+//   mint-visitor-token            mint  (Task 362 — sign &v=<token> URLs)
 
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
@@ -21,6 +22,7 @@ import { visitorRecommendationCtr } from "./tools/visitor-recommendation-ctr.js"
 import { visitorSessionDetail } from "./tools/visitor-session-detail.js";
 import { visitorEventIngest } from "./tools/visitor-event-ingest.js";
 import { visitorBackfillFromLogs } from "./tools/visitor-backfill-from-logs.js";
+import { mintVisitorTokenTool } from "./tools/mint-visitor-token.js";
 
 const accountId = process.env.ACCOUNT_ID ?? "local";
 
@@ -119,7 +121,7 @@ server.tool(
 
 server.tool(
   "visitor-backfill-from-logs",
-  "One-shot importer: parse [property-recommended] and [property-card-click] log lines and write into the visitor graph. Idempotent for Recommendations; immutable for Click events. Reports a parityCheck comparing graph counts to log counts.",
+  "One-shot importer: parse [property-recommended] and [property-card-click] log lines and write into the visitor graph. Idempotent for Recommendations; immutable for Click events. Use to recover late-arriving sessions or for ad-hoc forensics; the graph is the canonical aggregation surface.",
   {
     logPath: z.string().min(1).describe("Absolute path to the platform log file"),
     sinceIso: z.string().optional().describe("ISO timestamp lower bound (inclusive)"),
@@ -129,6 +131,16 @@ server.tool(
   jsonHandler((p) => visitorBackfillFromLogs(p as unknown as Parameters<typeof visitorBackfillFromLogs>[0])),
 );
 
+server.tool(
+  "mint-visitor-token",
+  "Mint a signed visitor token bound to a known :Person elementId. Append the returned token to outbound listing URLs as `&v=<token>` (e.g. /listings/<slug>/click?session=<sk>&v=<token>). When the recipient clicks, the UI server verifies the HMAC and writes the same value into the `mxy_v` cookie so subsequent /v/event posts attribute to that :Person. TTL defaults to 30 days. Use from morning-round, lead-nurturing, and vendor-updates whenever the outbound URL goes to a known :Person.",
+  {
+    personId: z.string().min(1).describe(":Person elementId to bind the token to"),
+    ttlDays: z.number().int().positive().max(365).optional().describe("Token lifetime in days (default 30, max 365)"),
+  },
+  jsonHandler((p) => mintVisitorTokenTool(p as unknown as Parameters<typeof mintVisitorTokenTool>[0])),
+);
+
 process.on("SIGINT", async () => {
   console.error("[buyers] SIGINT — closing driver");
   await closeDriver();