Vibe coding a real estate website: RESO and Repliers reference

Build a listings filter bar plus a server-side edge function for a RESO OData feed (PropTx AMPRE, base https://query.ampre.ca/odata, Authorization: Bearer from env AMPRE_BEARER_TOKEN, never in the browser).

Controls: text search, For Sale / For Lease, min and max price, min beds, min baths, parking, property subtype, sort (price-asc, price-desc, newest), Sold toggle.

Map them on the server to $filter:

- text: contains(City,'q') or contains(UnparsedAddress,'q') or contains(CityRegion,'q'), escaping single quotes by doubling them

- ListPrice ge/le; BedroomsTotal ge; BathroomsTotalInteger ge; ParkingTotal ge

- TransactionType eq 'For Sale' or 'For Lease'; PropertySubType eq '...'

- active: StandardStatus eq 'Active'; anonymous callers also need (InternetEntireListingDisplayYN eq null or InternetEntireListingDisplayYN eq true)

- sort: price uses ListPrice, newest uses ListingContractDate desc, default ModificationTimestamp desc. Never put DaysOnMarket in $orderby.

Paging: $top, $skip, $count=true. Encode spaces as %20, never +. Do not filter on MLSAreaDistrictToronto or CloseDate.

Write every filter and the page to the URL query string and restore them on load. Debounce text and price inputs by 350 ms. Reset to page 1 on filter change. Sort option values must exactly match what the server accepts.

Build a listings filter bar plus a server route that proxies Repliers (GET https://api.repliers.io/listings, header REPLIERS-API-KEY from env REPLIERS_API_KEY, server only).

Controls: free-text search, Sale / Rent, min and max price, min and max beds, min and max baths, property type multi-select, Sold toggle.

Send: search, type=sale or lease, minPrice, maxPrice, minBeds, maxBeds, minBaths, maxBaths, propertyType (repeat the key for OR), class, status=A by default, pageNum and resultsPerPage (never "page").

Validate on the server: pageSize 10-200, type in sale|lease, status in A|U, city and neighborhood at most 120 characters with no <>; characters.

If map bounds "swLng,swLat,neLng,neLat" are given, send map as a closed GeoJSON ring and omit city, neighborhood, and postalCode.

Rent mode forces Sold off. Write all filters to the URL and restore them on load. Debounce price by 600 ms and map moves by 500 ms.

Build a listings card grid fed by our listings edge function (RESO OData). Page size 12 or 24, numbered pagination from @odata.count, scroll to top on page change.

Server: one /Property call with $top/$skip/$count=true and a $select that includes every field the card shows (ListingKey, ListingId, StreetNumber, StreetName, StreetSuffix, UnitNumber, CityRegion, City, ListPrice, BedroomsTotal, BathroomsTotalInteger, LivingAreaRange, BuildingAreaTotal, TransactionType, StandardStatus, MlsStatus, DaysOnMarket). Then batch /Media for the page's ListingKeys in chunks of 5: ResourceRecordKey in (...) and MediaCategory eq 'Photo', keep ImageSizeDescription 'Largest', put PreferredPhotoYN (true, "true", "Y", 1) first, then Order, max 5 URLs per listing.

Card: photo carousel that advances on error then shows a placeholder, For Sale / For Lease / Sold badge, New badge, CAD price (en-CA, no cents), address, CityRegion, beds (2+1 format), baths, sqft, favourite heart. Link to the listing slug in the same tab.

States: skeleton loading, "No listings match your filters" empty state, visible error box. Never post-filter rows after paging.

Build a listings card grid fed by our /api/listings route (Repliers proxy). Page size 24 (150 in map view). Use a Load more button that requests pageNum+1 and appends, or numbered pages from numPages.

Card: image https://cdn.repliers.io/{images[0]}?class=medium (if the string already starts with http, keep it; placeholder if empty), CAD price, address.streetNumber + streetName + streetSuffix, city, beds = details.numBedrooms + numBedroomsPlus, baths, sqft (show a range if the API returns "min-max"), Sold badge when lastStatus is Sld, New badge when daysOnMarket <= 0, favourite heart.

Show "{loaded} of {total}" while more rows exist. Empty state "No listings match your filters." Dedupe by board + mlsNumber. Never show a count bigger than the user can reach.

Build /listing/:slug for a RESO OData feed. Slug = {street}-{unit}-{beds}bed-{baths}bath-{type}--{ListingKey}; parse the key after the last "--".

Server loader (anonymous credentials only): GET /Property('{key}') with a $select that includes every field rendered below (add Latitude, Longitude, YearBuilt if shown); GET /Media (ResourceRecordKey eq key, MediaCategory eq 'Photo', $top=200, keep Largest, PreferredPhotoYN first, then Order); GET /PropertyRooms (ListingKey eq key, $top=100, sort by Order).

If the listing is Closed or InternetEntireListingDisplayYN is false, the edge function returns 401 vowRequired unless a valid user JWT is sent. On 401, render noindex metadata and open the register modal.

Page: breadcrumb, gallery with thumbnails and a keyboard lightbox, status badge, H1 address, beds/baths/sqft/DOM/parking, PublicRemarks, a facts grid that skips empty values, AssociationFee, TaxAnnualAmount + TaxYear, a room table with an ft/m toggle (x 0.3048), "Listed by {ListOfficeName}", Book a Visit, favourite, Report an Inaccuracy.

Show ListingId as the MLS number; keep ListingKey as the route key. Title, description, og:image = first photo, canonical URL. No map unless Latitude/Longitude are selected. No similar-listings block unless backed by a real query.

Build /listings/[slug] as a server-rendered page. Slug = address-slug + "-" + mlsNumber; parse the last hyphen segment, uppercase it, and permanently redirect non-canonical slugs.

Fetch on the server: GET https://api.repliers.io/listings?mlsNumber={mls}&status=A&fields=*,raw (REPLIERS-API-KEY server-side). Retry with status=U only if the user is a VOW member; otherwise send the user to the grid with an "unavailable" banner.

Gallery: mobile carousel, desktop mosaic (1 large + 4, "+N"), lightbox that swaps class=medium for class=large, arrow keys, Escape, scroll lock.

Sections: price (soldPrice + SOLD badge with soldDate when sold), address, beds/baths/sqft/type, details.description, facts (style, yearBuilt, garage, parking, basement1+2, heating, airConditioning, swimmingPool, taxes.annualAmount, condoFee or HOAFee, lot.width x lot.depth), extras/inclusions/exclusions, rooms with an m/ft toggle (ft = m x 3.281), Listed By / Co-Listed By (office.brokerageName, agents[].brokerage.name, raw.CoListOfficeName), and an inquiry/showing form.

SEO: title "{address}, {city}, {brand}", noindex unless status is A, BreadcrumbList JSON-LD. No map or similar listings unless built on real data.

Implement listing photos.

RESO: in the edge function only (AMPRE_BEARER_TOKEN never reaches the browser), fetch /Media with ResourceRecordKey in (up to 5 keys per call) and MediaCategory eq 'Photo', $select MediaURL,Order,ImageSizeDescription,PreferredPhotoYN,ResourceRecordKey, $orderby ResourceRecordKey,Order. Keep ImageSizeDescription 'Largest'. Put PreferredPhotoYN (true, "true", "Y", 1) first, then Order. Dedupe and require https. Return 5 URLs per card and all URLs on detail.

Repliers: build https://cdn.repliers.io/{path}?class=medium for cards and class=large for the lightbox. If the string already starts with http, keep it and add the class param. Cap at 20. Add cdn.repliers.io to next/image remotePatterns if using Next.js.

Both: load photo URLs directly in <img> with no API key. On error, try the next URL, then show a placeholder. Lazy-load card images.

Implement server-enforced VOW gating for sold/leased listings.

1. Auth: email/password (e.g. Supabase). Registration requires a VOW Terms checkbox. Store profiles.tos_accepted_at and tos_version (or set vow_terms_accepted_at from signup metadata terms==="true" in a new-user trigger). Email confirmation redirects to a noindex confirmation page.

2. Server check isVowMember(): valid user (JWT header in an edge function, or cookie session in Next.js), confirmed email, and a non-null terms timestamp. Return false on any error.

3. Listing API: if the request asks for sold data (RESO: StandardStatus 'Closed' or MlsStatus Sold/Leased; Repliers: status=U), or a detail record is closed or has InternetEntireListingDisplayYN=false, return 401 { vowRequired: true } unless isVowMember() is true. Check BEFORE calling the MLS API.

4. Sold filter: RESO StandardStatus eq 'Closed' and (MlsStatus eq 'Sold' or MlsStatus eq 'Sold Conditional'); Repliers status=U&lastStatus=Sld.

5. SSR uses anonymous credentials only. Never render a sold listing into anonymous HTML. Sold detail pages are noindex.

6. Client: when signed out, the Sold toggle opens the register/login modal and sends no request. Include the user ID in query keys and invalidate on auth change. A blur is decoration only, never the gate.

7. Footer: data source/board, deemed reliable but not guaranteed, brokerage name, not intended to solicit buyers or sellers under contract.

Acceptance: an anonymous sold request returns 401/403 with no soldPrice or ClosePrice in the body; a confirmed user who accepted the terms gets the rows.

Build a listing/address typeahead.

UI: debounce 250-300 ms, minimum 2 characters, at most 8 results in two groups (Listings, Places), keyboard navigation. Address-capture forms require picking a suggestion.

Listings (Repliers): GET /api/listings/search?q=&limit=8 (limit clamped 1-15). Search a Postgres listing_catalog table (mls_number prefix plus trigram on address) first. If it is missing or returns nothing, call Repliers /listings?status=A&search={q}&pageNum=1 without searchFields, then retry with the street name only. Rank: exact MLS, MLS prefix, address prefix, address contains. Return { results, source } with Cache-Control private, max-age=15.

Listings (RESO): query our own Postgres snapshot (street_number eq, street_name ilike). Never call live AMPRE per keystroke.

Places: Mapbox geocoding (NEXT_PUBLIC_MAPBOX_TOKEN) with types=place,postcode,neighborhood,locality and limit 4; skip when the input looks like an MLS number. Picking a place applies its bbox as map bounds.

Picking a listing navigates to its canonical detail slug.

Build a market stats panel from Repliers, server-side only (REPLIERS-API-KEY).

Summary: GET /listings?city=&propertyType=&type=sale&status=U&lastStatus=Sld&minSoldDate={12 months ago}&statistics=avg-soldPrice,med-soldPrice,avg-daysOnMarket,med-daysOnMarket,cnt-closed,pct-aboveBelowList&listings=false. Cohorts: city, neighborhood (add neighborhood=), similar (minBeds=maxBeds, minBaths=maxBaths).

Monthly: the same call with statistics=grp-mth,avg-soldPrice,med-soldPrice,cnt-closed,avg-daysOnMarket, plus a new-listings call with minListDate and statistics=grp-mth,cnt-new. Read statistics.soldPrice.mth[YYYY-MM].avg/med and statistics.closed.mth / statistics.new.mth (number or {count}).

Every stats call includes type=sale. Use one shared property-type label map. If the neighbourhood cohort has fewer than 24 sales in 12 months, fall back to city and say so. Label approximations. Return aggregates only.

A RESO OData feed has no reliable live aggregates. Add a sync edge function (service role or agent only) that pages /Property ($top=1000) for Active rows and for Closed Sold/Sold Conditional rows whose ModificationTimestamp falls in the last N months (CloseDate can't be used in $filter). Upsert into a private snapshot table on listing_key (RLS on, no public policies) and log each run.

Add a public market-stats function that reads only that table and returns avgSoldPrice, avgListPrice, avgNewListPrice, avgDOM, totalSold, totalNew, snlr = round(sold/new*100), marketStatus (<40 Buyer's, >60 Seller's, else Balanced), and monthly buckets for months in 3|6|9|12|18|24. Never return raw rows. Schedule the sync with a committed cron job.

Add listing leads and favourites.

Inquiry: on the detail page, a form with Inquiry / Request a Showing modes (showing adds date and time). Fields: name, email, phone, message (default "I'm interested in {MLS} at {address}"). POST /api/inquiry with mls, listing id, address, page URL, and any resolved agent IDs. Server: honeypot field, reject submissions faster than 3 s or older than 6 h, 15 per hour per IP, optional Turnstile when TURNSTILE_SECRET_KEY is set. Insert into an inquiries table with the service role (RLS on, no public read). Resolve email recipients on the server (agent roster by ID, else an env-configured default). Never accept a recipient email from the client. Show success only after a 200.

Inaccuracy report: a modal on the detail page that stores lead_type inaccuracy_report with listing_ref "{address} (MLS# {id})".

Favourites: saved_listings(user_id, mls_number, address, price, image, beds, baths, slug, created_at), unique (user_id, mls_number), owner-only RLS, keyed by the same ID as the detail slug. Heart on cards and detail; redirect to login when signed out. The account page lists saved rows from the snapshot (or re-fetches by ID).

Build a RESO/AMPRE listings site. Create a Vite + React + TypeScript app (TanStack Start if you want SSR, otherwise React Router) with Tailwind, shadcn/ui, TanStack Query and a Supabase client. Browser env: VITE_SUPABASE_URL and VITE_SUPABASE_PUBLISHABLE_KEY, read from the environment at every call site — never hardcode them in vite.config.ts define.

Supabase migrations (RLS on everywhere):

- profiles (id = auth.users.id, email, full_name, tos_accepted_at, tos_version) with a trigger that copies full_name from raw_user_meta_data on signup

- favourites (user_id, mls_number text, unique pair, owner-only RLS) — mls_number stores the AMPRE ListingKey

- user_roles with app_role enum 'agent' and has_role()

- leads (lead_type: contact, book_visit, evaluation, guide_download, inaccuracy_report; name, email, phone, address, message, source_url, metadata jsonb, status; agent-only read)

- optional: proptx_listings (listing_key text PK, mls_number, standard_status, mls_status, transaction_type, property_type, property_sub_type, city, district, city_region, postal_code, street parts, unparsed_address, list_price, close_price, bedrooms_total, bathrooms_total, parking_total, living_area_range, list_office_name, days_on_market, listing_contract_date, original_entry_timestamp, modification_timestamp, close_date, raw jsonb, synced_at) with RLS on and NO policies; proptx_sync_runs readable by agents.

After db push, re-grant the standard Supabase anon/authenticated/service_role table grants. AMPRE_BEARER_TOKEN is an edge-function secret only.

Add a Deno edge function fetch-listings for this RESO/AMPRE listings site. Base URL https://query.ampre.ca/odata. Headers: Authorization: Bearer ${AMPRE_BEARER_TOKEN}, Accept: application/json. Never return the token; if it is missing return 500 JSON.

Encode query params so spaces are %20, never +. Escape OData strings by doubling single quotes. Retry 5xx/network errors up to 3 times with 300ms, 600ms, 900ms delays; return 4xx immediately; if every attempt throws return 502 JSON (never 200).

Always scope Property queries to {SCOPE_FILTER} (e.g. PropertyType eq 'Residential Condo & Other' and CityRegion in ({WHITELIST})). Never put CloseDate or MLSAreaDistrictToronto in $filter (PropTx error 1108). DaysOnMarket is not orderable; dom sorts use ListingContractDate.

Routes (query param route):

- default list: status (A active, U closed), pageNum, resultsPerPage, neighbourhood, listingType sale|rent|lease, minPrice, maxPrice, minBeds, maxBeds, minBaths, parking, propertyType (→ PropertySubType eq), q (→ contains on City, UnparsedAddress, CityRegion), sortBy (price-asc, price-desc, newest, dom-asc, dom-desc; default ModificationTimestamp desc). Map to $filter/$orderby/$top/$skip/$count=true/$select. Generate $select from the same field list the mapper reads.

  Anonymous calls: add (InternetEntireListingDisplayYN eq null or InternetEntireListingDisplayYN eq true).

  status=U: StandardStatus eq 'Closed' and MlsStatus in Sold/Sold Conditional (sale) or Leased/Leased Conditional (lease); price field becomes ClosePrice. Requires VOW access (Prompt 7) or return 401 { error, vowRequired: true } BEFORE calling AMPRE.

  Then batch /Media for the page's ListingKeys in chunks of 5: $filter=ResourceRecordKey in (...) and MediaCategory eq 'Photo', $select MediaURL,Order,ImageSizeDescription,PreferredPhotoYN,ResourceRecordKey, $orderby ResourceRecordKey,Order, $top 800. Keep ImageSizeDescription eq 'Largest', prefer PreferredPhotoYN (true, "true", "Y", 1), then Order, dedupe, https only, max 5 per listing.

  Return { listings, page, numPages, count } using @odata.count. Do not post-filter after $top without fixing count.

- route=detail&key={ListingKey}: GET /Property('{key}'), /Media ($top 200, Photo, all Largest), /PropertyRooms ($filter ListingKey eq '{key}', $top 100, sort by Order) in parallel. 401 { vowRequired: true } if the row is Closed or InternetEntireListingDisplayYN is false and the caller lacks VOW access.

- route=neighbourhoods: page Active rows ($top 1000, max 8 pages, $orderby ListingKey) and count by CityRegion in code (OData groupby ignores in()). Return name, slug, saleCount, leaseCount.

Do not use $expand. Verify the caller with supabase.auth.getUser(x-user-jwt); never trust the anon Authorization header as the user.

Create src/lib/listings.ts with a Listing type: id and listingKey (= ListingKey), mlsNumber (= ListingId when available), address, streetNumber, streetName, unitNumber, neighbourhood (CityRegion), city, price, status Active|Sold|Leased, listingType sale|lease, beds, dens, baths, sqft (+ sqftRange), dom, image, images[], propertyType, description, maintenanceFee, taxes, taxYear, yearBuilt, parkingSpaces, parkingType, exposure, balcony, locker, pets, heating, cooling, basement, exteriorFinish, lat, lng, brokerageName (ListOfficeName), listAgentName (ListAgentFullName), rooms[]. Map in the edge function (transformListing) — the browser never sees raw RESO. Only read field names that exist in AMPRE (no LivingArea, OnMarketDate, Heating, Stories, GarageSpaces, Appliances, StoriesTotal).

Helpers: formatPrice (en-CA, CAD, 0 decimals), formatBeds ("2+1" when dens > 0), slug /listing/{address-slug}-{beds}bed-{baths}bath-{type}--{ListingKey} and extractKeyFromSlug (text after the last --).

Hooks call /functions/v1/fetch-listings with Authorization Bearer + apikey = VITE_SUPABASE_PUBLISHABLE_KEY and, when a session exists, x-user-jwt = session.access_token. Query keys: ["listings", params], ["listing", key, userId or "anon"], ["neighbourhoods"]. staleTime 5 minutes for listings, 15 for neighbourhoods. Invalidate ["listing", key] when auth state changes. Dedupe by listingKey.

If you use SSR loaders, prefetch the same keys with anon headers only (never a JWT) and dehydrate.

Home: hero, a 12-per-page card grid of active listings, and a neighbourhood grid fed by route=neighbourhoods (links must resolve through the same whitelist the router uses).

ListingCard: photo carousel of up to 5 URLs with dots and arrows; on image error advance to the next URL, then a placeholder icon. Badges For Sale / For Lease / Sold / Leased; DOM badge "New" when dom is 0, else "{dom}d". Price CAD, address, neighbourhood, beds (2+1), baths, sqft when > 0, favourite heart (opens auth when signed out), Book a Visit when Active. The whole card links to the slug in the same tab.

Pagination with numbered pages (first, last, current ± 1, ellipses) and the API count. Loading skeletons, inline empty and error states. Media is batched server-side — never one /Media call per card.

Route /listing/$slug. key = extractKeyFromSlug(decodeURIComponent(slug)). Fetch route=detail.

Sections: breadcrumb (Home / neighbourhood / address), gallery (large photo, up to 6 thumbnails, +N overflow, prev/next, lightbox with arrow keys and Escape; drop broken URLs), status badge, H1 address, "{neighbourhood}, {city} · MLS® {mlsNumber}", stat badges (beds, baths, size with sqft/m² toggle, DOM, parking, type, exposure), PublicRemarks, property-details grid (skip empty values), maintenance fee if > 0, annual tax with year if > 0, rooms table with ft/m toggle (0.3048), "Listed by {ListOfficeName}", Report an Inaccuracy, Book a Visit if Active, favourite button.

Fee-includes chips must use the same token the API returns. Do not hardcode a site agent on top of the listing brokerage without labelling them as the site broker. No similar-listings block unless backed by a real query. No map until Latitude and Longitude are in $select.

SEO: title "{address} — {beds}BR {type} {For Sale|For Rent|Sold|Leased} in {neighbourhood} | {SITE}", description with beds/baths/price, og:image = first photo, canonical URL. If the detail loader fails (including 401) render generic noindex metadata.

ListingsFilter: For Sale / For Rent, min and max price, beds 1+..4+, baths 1+..3+, property subtype ({SUBTYPES}), parking 1+/2+, keyword (350 ms debounce), sort with option values exactly price-asc, price-desc, newest. Every control must change the server query (test each one). Write all filter state and the page number to the URL query string and restore it on load. Changing a filter resets to page 1.

Sold/Leased is a separate toggle that sets status=U. If signed out, open the register modal and do not request closed rows.

Supabase email/password auth. Register requires a Terms/VOW checkbox; the expandable VOW text covers the consumer–broker relationship with {BROKERAGE} (e.g. "Acme Realty"), bona fide interest, personal non-commercial use, and {BOARD} ownership of MLS® VOW data. emailRedirectTo {origin}/vow-confirmed; password reset {origin}/reset-password. Store profiles.tos_accepted_at and tos_version once a session exists (on the confirm landing page if confirmation delays the session). /vow-confirmed strips the URL hash, explains sold data and favourites, and is noindex.

In fetch-listings, hasVowAccess(req) = x-user-jwt verifies with supabase.auth.getUser AND email_confirmed_at is set AND profiles.tos_accepted_at is not null. Without it: status=U returns 401 before any AMPRE call; detail returns 401 { vowRequired: true } for Closed rows and InternetEntireListingDisplayYN=false; lists always include the IDX display filter. On a 401 the detail page opens the register modal (do not silently redirect home).

Footer: listings and statistics sourced from {BOARD} and PropTx, deemed reliable but not guaranteed; brokerage identification; not intended to solicit buyers or sellers currently under contract. Terms page includes the VOW agreement, {BOARD}/PropTx copyright and audit consent; Privacy mentions sharing registration data with PropTx/{BOARD} for audit. Anonymous HTML must never contain a closed listing or a listing with InternetEntireListingDisplayYN=false. Decide and document whether InternetAddressDisplayYN is enforced.

Favourites keyed by ListingKey. The account page loads favourites by those keys (detail fetches or a dedicated route), including sold ones for VOW users — never "first 100 active listings".

Edge function send-inquiry: types book-visit, contact, inaccuracy-report, evaluation. Insert leads with the service role (listing address, ListingKey and absolute listing URL in metadata) and email the brokerage via a transactional template. Recipient addresses come from an env var, not code. Book a Visit and "Request a viewing" must carry the ListingKey and address. Mount Report an Inaccuracy on the detail page.

Add sync-proptx-listings (POST { months }, default 3, max 60). Allow service role or the agent role. Pull Active For Sale rows in scope and Closed Sold/Sold Conditional rows with ModificationTimestamp ge the cutoff (UTC midnight on the 1st of the month `months` ago) — never CloseDate in $filter. Pages of 1000 ordered by ListingKey, max 30. Dedupe by listing_key, upsert in batches of 500, store raw $select JSON, never photos. Log proptx_sync_runs. Commit a pg_cron + pg_net daily schedule (service-role bearer, {"months":3}) in a migration, or document the external scheduler.

Add market-stats (GET, public, service-role read only): neighbourhood, months in 3|6|9|12|18|24, optional beds. Return avgSoldPrice, avgListPrice, avgNewListPrice, avgDOM, totalSold, totalNew, snlr (round(sold/new*100)), marketStatus (< 40 Buyer's, > 60 Seller's, else Balanced) and monthly buckets. Never return raw rows.

Verify:

1. AMPRE_BEARER_TOKEN exists only as a server secret; repo and client bundle contain no token value; the browser never calls query.ampre.ca.

2. Anonymous GET fetch-listings?status=U returns 401 and the grid shows no sold prices.

3. Anonymous detail for a known Active IDX listing returns 200 with https MediaURL (Largest) and the SSR HTML (if SSR) contains the listing slug.

4. The same detail for a Closed listing returns 401 and the page head is noindex without the sold price.

5. A confirmed user with TOS stored receives closed listings and InternetEntireListingDisplayYN=false listings; an unconfirmed user does not.

6. propertyType changes the result set; sortBy=price-asc orders by ListPrice; every filter appears in the URL and survives reload.

7. Every neighbourhood link resolves (one whitelist).

8. A page of cards issues ceil(n/5) Media calls, not n.

9. market-stats returns non-zero sold aggregates after a sync and no raw rows.

10. Book a Visit creates a leads row containing the ListingKey; favourites survive reload and include sold favourites after sign-in.

11. If the proxy is generic, a request to any path other than /Property, /Media, /PropertyRooms returns 400, and $top above 200 is rejected.

Build a Repliers listings site. Create a framework-free TypeScript module (shared package if you will also build a mobile app) with a normalized Listing type: id, mlsNumber, source (board id), market, lat, lng, price, address, city, beds, baths, sqft, sqftMax, image, images, agent, attributedAgents[{name,boardAgentId,agentId}], listedBy, coListedBy, presentedBy, type "house"|"condo"|"townhouse", propertyType, propertyClass, transactionType "sale"|"lease", status, lastStatus, soldPrice, soldDate, listDate, daysOnMarket, description, style, yearBuilt, garage, garageSpaces, parkingSpaces, fireplaces, basement, heating, cooling, pool, extras, inclusions, exclusions, annualTaxes, condoFee, lotFront, lotDepth, rooms[{type,width,length,level,features}].

Add formatPrice(value, currency = "CAD") using en-CA with 0 fraction digits; generateListingSlug(address) = lowercased address, non-alphanumerics to "-", plus "-" + mlsNumber; parseMlsFromSlug = last hyphen segment, uppercased. No React.

Add a server-only Repliers client for this Repliers listings site. Base https://api.repliers.io/listings. Header REPLIERS-API-KEY with the board's key; also Content-Type: application/json. Board table: {BOARDS} (e.g. board_a/ontario/agent → REPLIERS_KEY_BOARD_A, board_b/ontario/brokerage → REPLIERS_KEY_BOARD_B, board_c/florida/agent → REPLIERS_KEY_BOARD_C; optional REPLIERS_KEY_ATTRIBUTION for attribution only). Single-board sites use REPLIERS_API_KEY.

fetchRepliersListings(key, params): translate page → pageNum (Repliers ignores page), default status=A and resultsPerPage=50, emit array values as repeated keys (OR), cache 300 s, and treat HTTP 400 whose body mentions pageNum as an empty page. Keep raw.* keys with the raw. prefix. Never call RESO or OData.

Image helper: relative path → https://cdn.repliers.io/{path}?class=medium; absolute URL → append class=medium; cap images at 20; lightbox uses class=large. Allow cdn.repliers.io for next/image if using Next.js.

Write normalize(raw, board) → Listing: price from listPrice (strip non-numeric) else price; address from streetNumber streetName streetSuffix streetDirection; city = address.city + ", " + address.state; lat/lng from map (drop 0,0 and non-finite); beds = numBedrooms + numBedroomsPlus; baths = numBathrooms + numBathroomsPlus; sqft and sqftMax from a "min-max" string; type house|condo|townhouse from details.propertyType and class; transactionType lease when type/listingType contains lease or rent; pass through status, lastStatus, soldPrice, soldDate, listDate, daysOnMarket; cooling ← details.airConditioning; pool ← details.swimmingPool; condoFee ← condoFee else HOAFee; annualTaxes ← taxes.annualAmount; lot width/depth; rooms from rooms[] with description.

Attribution: listedBy = office.brokerageName or agents[0].officeName; coListedBy = distinct agents[].brokerage.name and raw.CoListOfficeName/3/4 (when fields include raw), excluding listedBy, joined " / ". Keep only "our" agents (no brokerage name, or matches {BROKERAGE_REGEX}, e.g. /acme realty/i). On brokerage-attribution boards set agent "" and presentedBy "{BROKERAGE_DISPLAY_NAME}" but keep attributedAgents internally.

GET /api/token returns "{unixSeconds}.{hex}" = HMAC-SHA256 of the timestamp with INTERNAL_API_SECRET, TTL 30 minutes. (This is scrape friction, not security — say so in a code comment.)

GET /api/listings and GET /api/listings/[mlsNumber] require Authorization: Bearer <token> or x-internal-secret.

List params: page (≥ 1), pageSize (clamp 10–200, default 50), market (selects boards; never sent to Repliers), class, type sale|lease, status A|U, minPrice, maxPrice, minBeds, maxBeds, minBaths, maxBaths, city, neighborhood, postalCode (≤ 120 chars, reject <>;), repeated propertyType option ids, bounds "swLng,swLat,neLng,neLat" → map=[[[swLng,swLat],[neLng,swLat],[neLng,neLat],[swLng,neLat],[swLng,swLat]]] (then omit city/neighborhood/postalCode). Invalid bounds → 400.

Fan out per board with Promise.allSettled; put a failed board in _meta.error. Dedupe by mlsNumber across boards. Return { listings, page, pageSize, hasMore, totalCount, _meta }.

Detail: try each board with mlsNumber, status=A, fields=*,raw; first non-empty wins; status=U only when the caller passes the VOW check (Prompt 8). 404 if none.

status=U without VOW access → 403 { error: "Sold listing data is available to VOW members only. Please sign in." }. Add lastStatus=Sld when the UI means "sold".

Map UI option ids to per-board Repliers params in one module. {PER_BOARD_MAP} — e.g. a PROPTX-style board uses propertyType: Detached + Link, Semi-Detached, Att/Row/Twnhouse, Condo Apt, Condo Townhouse, Duplex/Multiplex/Triplex/Fourplex; an ITSO-style board uses raw.ITSO_PropertyAttached=Detached / "Semi Detached", propertyType Row/Townhouse, Condo/Apt Unit; a Naples-style board uses lowercase raw.PropertySubType values.

Repeated params are OR. If a selection mixes a raw key and propertyType on the same board, drop the raw key and widen (e.g. add Single Family Residence). Skip any board that cannot satisfy a selected id. Keep a separate, clearly named map for statistics if the board's stats vocabulary differs (e.g. title case).

/homes-for-sale (client): sale/rent toggle, market pills, min/max price (600 ms debounce), beds/baths, multi-select property type, page size 24 (150 in map view). Use a Load more button or numbered pages — and never show a count larger than what can be reached. Write filter state to the URL and read it back on load.

ListingCard: medium photo carousel, CAD price (USD for Florida rows if you split currency), address, city, bd · ba · sqft (range when sqftMax), board chip, Sold badge when lastStatus/status matches sld|sold|u|closed|leased, New when daysOnMarket <= 0 or listed within 24 h, heart. Link to /listings/{slug}.

Map (Mapbox GL, NEXT_PUBLIC_MAPBOX_TOKEN): price-pill markers, popup with address/city/brokerage/photo (escape strings), viewport changes debounced 500 ms become bounds; leaving map view clears bounds.

/listings/[slug] (server): parse MLS, redirect non-canonical slugs, fetch with the server helper (active, then sold only if VOW). Gallery: mobile carousel, desktop mosaic (1 + 4, "+N"), lightbox at class=large with arrows/Escape/scroll lock. Sections: price (sold price + SOLD badge when sold), address, beds/baths/sqft/type, description, listing details (MLS #, board, style, year, garage, parking, fireplaces, basement, heating, cooling, pool, lot, taxes, maintenance fee, listed by, co-listed by, presented by, listed on, DOM), extras/inclusions/exclusions, rooms table m/ft (×3.281), inquiry form. Title "{address}, {city}, {BRAND}", noindex unless status is A, BreadcrumbList JSON-LD. Footer: data courtesy of {BOARDS} via {BROKERAGE}, deemed reliable but not guaranteed, not intended to solicit buyers or sellers already under contract. No similar listings or schools unless backed by real data.

Supabase listing_catalog (mls_number PK, board, market, transaction_type, property_class, property_type, status default 'A', price, street_number, street_name, unit_number, address, city, province, postal_code, address_key, full_address, lat, lng, slug, beds, baths, updated_on, last_seen_at, indexed_at) with pg_trgm GIN indexes on address, full_address, address_key, and catalog_sync_state per board. Public read where status = 'A'; writes via service role only.

GET /api/cron/catalog (CRON_SECRET or INTERNAL_API_SECRET): task=sync every 10 minutes — backfill sortBy=createdOnAsc from a cursor until full, then incremental sortBy=updatedOnDesc stopping at the last updatedOn watermark (don't advance it if the page cap is hit); resultsPerPage=100; 220 ms between pages; on 429 retry 5 times with 1,2,4,8,16 s backoff; boards sequential (shared rate limit); upsert in chunks of 500. task=sweep every 6 hours walks fields=mlsNumber, updates last_seen_at and deletes rows not seen in a full cycle. Never store photos or agent PII.

GET /api/listings/search?q=&limit=8 (q 2–120 chars, limit 1–15): search the catalog and rank exact MLS, MLS prefix, address prefix, address contains, full address contains; fall back to Repliers search= (no searchFields) if the table is missing or returns zero; Cache-Control private, max-age=15, stale-while-revalidate=60. Listing sitemaps from the catalog in chunks of 10,000, active only.

Supabase email auth. Registration requires a VOW terms checkbox linked to /vow-terms (board copyright, personal non-commercial use, any brokerage-only attribution rule, IDX licence text). Signup metadata terms: "true"; trigger handle_new_user() sets profiles.vow_terms_accepted_at = now() when terms = 'true'.

isVowMember() is server-only: cookie session user via auth.getUser() AND profiles.vow_terms_accepted_at not null; any error → false. Enforce it in /api/listings, /api/listings/[mlsNumber] and the server detail page before any status=U Repliers call.

"Show Sold (VOW)" toggle: members send status=U&lastStatus=Sld; others see a modal linking to /login?next=… . Sold detail pages are noindex. saved_listings (user_id, mls, snapshot of address, price, image URL, beds, baths, slug), owner-only RLS; the heart redirects signed-out users to login. Never rely on CSS blur or localStorage to hide sold data.

Market stats call the same /listings URL with statistics= and listings=false (or resultsPerPage=1). EVERY stats query includes type=sale. Sold metrics: status=U&lastStatus=Sld with minSoldDate/maxSoldDate; statistics=avg-soldPrice,med-soldPrice,avg-daysOnMarket,med-daysOnMarket,cnt-closed,pct-aboveBelowList. Monthly history adds grp-mth; new listings use statistics=grp-mth,cnt-new with minListDate. Read statistics.soldPrice.mth["YYYY-MM"].avg/.med, daysOnMarket.mth, closed.mth and new.mth (number or {count}). Cohorts: city, neighborhood, exact beds/baths (minBeds=maxBeds, minBaths=maxBaths). If a neighbourhood cohort has fewer than 24 sales over 12 months, fall back to city and say so. Label any sale-to-list approximation as an approximation.

POST /api/inquiry: modes inquiry | showing (date + time); fields name, email, phone, message. Honeypot field, 3 s minimum / 6 h maximum form age, 15 requests/hour/IP, optional Turnstile. Store inquiries with the service role (kind, mode, mls, listing id, agent ids, showing date/time, region). Resolve recipients server-side from posted agent ids (roster lookup), else office region or nearest office to lat/lng, else a default lead manager from config. Never accept a recipient email from the client. Send via Resend (RESEND_API_KEY). Do not show a success toast unless the request succeeded.

Verify:

1. No request URL contains /Property, $filter or a RESO host; every listing call is api.repliers.io/listings via the server.

2. No REPLIERS key appears in the client bundle; the browser never calls api.repliers.io.

3. /api/listings without a token returns 401; with a token it returns active rows with board source and CDN URLs containing class=medium.

4. status=U without a VOW session returns 403; a member with vow_terms_accepted_at gets rows; those detail pages are noindex; sold rows have lastStatus Sld.

5. Sending page=2 to the server yields Repliers pageNum=2; a page past the end returns an empty list, not an error.

6. Every stats request includes type=sale.

7. Brokerage-attribution boards show presentedBy and an empty public agent.

8. /listings/anything-{MLS} redirects to the canonical slug when active; an unknown MLS slug lands on the "unavailable" state.

9. Catalog sync upserts and stops at the watermark; sweep removes rows that left status=A; typeahead falls back to live search if the table is missing.

10. Inquiry POST writes a row and emails the resolved roster agent; the body cannot set the recipient.

11. Filters survive a reload (URL state) and the visible count never exceeds what can be paged to.