.codex-plugin/plugin.json

{
  "name": "loppee-personal-dcr",
  "version": "1.0.2",
  "description": "Find local businesses and manage your own customer actions with Loppee.",
  "author": {
    "name": "Loppee inc",
    "email": "info@loppee.com",
    "url": "https://loppee.com"
  },
  "homepage": "https://personal.loppee.com",
  "keywords": [
    "local businesses",
    "trust cards",
    "customer messages",
    "job applications"
  ],
  "interface": {
    "displayName": "Loppee Personal",
    "shortDescription": "Find trusted local services",
    "longDescription": "Loppee Personal helps people find and compare local businesses, message businesses, publish their own approved reviews, and manage their own job applications. Public discovery works without a connection. Private customer actions require OAuth and a separate permission for each kind of action; a read or location connection does not gain write access automatically. Sending a message, publishing a review, applying to a job and withdrawing an application each act on the customer's behalf. Reviews describe the customer's own experience. Nearby category searches use the current location of the customer's registered Loppee iPhone: the customer allows requests automatically or approves each one in the Loppee app. The precise location stays with Loppee; ChatGPT receives request status and business results, not an address, coordinates, device identifier or token. Location requests expire on a short server-side timer, after which Loppee deletes the encrypted location. Nearby results are organic: sponsorship does not change their order or labels, and payment does not affect trust, verification or category.",
    "developerName": "Loppee inc",
    "category": "Other",
    "capabilities": [
      "Find businesses and inspect public trust information",
      "Compare public business records with clear claim disclosures",
      "Read your own conversations and applications",
      "Send customer-approved messages, reviews and applications",
      "Find nearby businesses with registered-iPhone authorization"
    ],
    "websiteURL": "https://personal.loppee.com",
    "supportURL": "https://loppee.com/support",
    "privacyPolicyURL": "https://loppee.com/privacy",
    "termsOfServiceURL": "https://loppee.com/terms",
    "defaultPrompt": [
      "Search Loppee Personal for Lowe's by business name.",
      "Show what my connected Loppee Personal account can access."
    ],
    "composerIcon": "./assets/loppee-icon.png",
    "logo": "./assets/loppee-icon.png",
    "screenshots": [
      "./assets/starter-public-discovery.jpg",
      "./assets/starter-account-access.jpg"
    ]
  },
  "mcpServers": "./.mcp.json",
  "extensions": {
    "com.openai": {
      "review": {
        "commerce": false,
        "commerce_description": "This integration does not accept payments or perform checkout.",
        "demo_recording_url": "https://drive.google.com/file/d/1mvsjAkg9iy3NV0l5nw8SIHx6c03AamXF/view?usp=sharing",
        "test_cases": {
          "positive": [
            {
              "description": "Public discovery, Trust Cards, reviews and comparison without customer authentication.",
              "prompt": "Search Loppee Personal for Lowe's by name, then look up the matching public records. Show the Trust Card and published reviews for biz_seed_fl_4652cd98 and compare it with biz_seed_fl_d12bdf30. Explain what the available trust information supports.",
              "tools_triggered": "search_businesses, lookup_business, get_trust_card, get_business_reviews, compare_businesses",
              "expected_behavior": "Returns actual public Registry records and an accessible comparison widget, with the unclaimed disclosure for each result. Empty review lists are reported honestly. No business is promoted to Listed or Verified, and no current location is inferred. A Registry record may have no recommendation explanation; this must not be presented as a quality endorsement."
            },
            {
              "description": "Customer identity, capabilities and private message workflow.",
              "prompt": "What can Loppee Personal do, and which permissions does my connected review account grant? list my conversations. Then draft a message to review_demo_6e2849bb0f854e1dbd08dc41aa2b: Fictional review test only. Please confirm the sample Monday morning service window. No real appointment is requested. Ask me before sending, then show the saved conversation.",
              "tools_triggered": "get_agent_identity, get_agent_capabilities, list_my_conversations, send_message_request",
              "expected_behavior": "Identifies the synthetic customer connection and 17 Personal tools, with no owner or Back Office authority. Shows the fictional inquiry and owner reply. Requires confirmation of recipient and exact content before saving the message once to the private demo inbox. The saved message is readable by the same account; no external delivery occurs."
            },
            {
              "description": "Published recommendation explanation and existing reviews for the private demo business.",
              "prompt": "Explain Loppee's published recommendation basis for the private demo business review_demo_6e2849bb0f854e1dbd08dc41aa2b, then show the reviews already published for it.",
              "tools_triggered": "explain_recommendation, get_business_reviews",
              "expected_behavior": "Reports the demo business's class, disclosure and recommendation basis as published facts, not as a real-world endorsement. Shows the reviews already published for it with their Verified interaction or Unverified labels, and reports an empty list honestly. Nothing is created, changed, submitted or sent."
            },
            {
              "description": "Original resume upload, malware scan, application readback and withdrawal.",
              "prompt": "Show all fictional jobs available to my Loppee review account. Use the attached fictional-review-resume.pdf to prepare an application for review_personal_content_46f65395da06914f765f49c609a2_job_technician. Cover note: Fictional workflow test only. This is not a real application. Ask for my approval before submitting. Then show my application and its resume scan status. Finally, prepare to withdraw this exact application and ask again before withdrawal.",
              "tools_triggered": "search_jobs, apply_to_job, list_my_job_applications, withdraw_job_application",
              "expected_behavior": "Shows three explicitly fictional vacancies. Transfers the original selected attachment via the ChatGPT file parameter, after customer approval, through normal quarantine and scanning. Pending is not misreported as clean. The application is visible only within the private test workflow; after a separate withdrawal confirmation it becomes terminally withdrawn and repeated withdrawal is safe. No real employer receives content.",
              "file_attachment_urls": [
                "https://loppee.com/review/loppee-personal/fictional-review-resume.pdf"
              ]
            },
            {
              "description": "One-time nearby search using a registered Loppee iPhone.",
              "prompt": "Find HVAC businesses near me using my registered Loppee iPhone.",
              "tools_triggered": "create_location_handoff, get_location_handoff, search_businesses",
              "expected_behavior": "Requires the connected customer account and its registered Loppee iPhone with location access enabled. create_location_handoff sends one request to the iPhone; get_location_handoff shows it pending, waiting in the Loppee app, or ready. When ready, search_businesses returns nearby HVAC businesses. ChatGPT receives status and business results only, never coordinates, an address, a device id or a token. A second request while one is active returns location_handoff_pending with the existing request. The request and its encrypted location expire on the server-side timer."
            }
          ],
          "negative": [
            {
              "description": "Do not trigger for Back Office administration.",
              "prompt": "Approve this business verification case from the Loppee Back Office.",
              "expected_behavior": "Loppee Personal should not be invoked because it has no administrator or verification-authority tools."
            },
            {
              "description": "Do not trigger for business-owner mutations.",
              "prompt": "Change my company's public phone number and publish a coupon.",
              "expected_behavior": "Loppee Personal should not be invoked because business management belongs to the separate Loppee Business app."
            },
            {
              "description": "Do not expose, infer, or substitute exact coordinates.",
              "prompt": "Tell me my exact current latitude and longitude from Loppee Personal.",
              "expected_behavior": "Loppee Personal has no tool that returns coordinates, so it is not used to reveal a location. Nearby searches use only the registered-iPhone request, which returns status and business results, never an address, coordinates, device identifier or token."
            }
          ]
        }
      },
      "publication": {
        "release_notes": "Corrects tool annotations so each one matches what the tool does: lookups, Trust Cards, reviews, comparisons, identity, the customer's own lists and location status are read-only; nearby search and location requests are non-destructive writes; sending messages, publishing reviews, applying to jobs and withdrawing applications remain destructive. Location requests now expire on a server-side timer instead of being removed inside a tool call. Tool descriptions and server instructions are rewritten as plain descriptions of each tool. Adds a private, explicitly fictional reviewer workflow for messages, reviews and job applications."
      }
    }
  },
  "apps": "./.app.json"
}