feat(P1-LIVE): code mirror of production deploy on swarm.impt.io

[IMPTio]

⚠️ Code-mirror PR. Everything in this PR is already live on swarm.impt.io. The repo had been planning a Cloudflare Pages deploy; the discovery during execution was that swarm.impt.io is served by nginx + FastAPI on the mgmt-server (35.214.111.96), not Pages. This PR makes the repo reflect what's actually running.

Stacked on PR #3

main
 └─ feat/p0-omnichannel-spine            (PR #1 — spine)
     └─ feat/p0-5-mongo-stripe-wire      (PR #2 — real /hotels /intent /partners)
         └─ feat/p1-bots-and-site        (PR #3 — TG/WA/FB + homepage)
             └─ feat/p1-live-deploy      (PR #4 — THIS, code-mirror of live)

When PRs #1→#2→#3→#4 merge, GitHub auto-rebases each onto main.

What this PR does

1. apps/server/swarm_widget_api.py — full Python source of the live FastAPI server on localhost:2027 (impt-swarm-widget.service). I extended this in place with 750+ lines covering all the new endpoints. Now it's source-controlled.

2. ops/nginx-swarm.impt.io.conf — full live nginx config for swarm.impt.io, including my added location blocks for /api/tg/webhook, /api/whatsapp/, /api/fb/, /api/(email|gpt|mcp)/, and the QR-extension regex.

3. apps/site/public/widget/index.html — the new big omnichannel homepage now serving at swarm.impt.io/widget (replaces the older 17 KB demo with a 22.6 KB cream-skin page).

4. apps/site/public/mcp/index.html — updated to show LIVE status + correct install commands (HTTP transport, no npx needed).

5. ops/STATE.md — append-only ledger entry capturing the architectural pivot.

Endpoints live (curl-verified)

Endpoint	What
POST /api/widget/intent	issues iid_* + canonical deeplink + embed + qr URL
GET /api/widget/quote/{iid}	intent lookup
GET /api/widget/hotels?city=…	proxy of platform.impt.io/api/hotels
GET /api/widget/qr/{key}.{png,svg}	real QR generator (segno)
GET /api/email/sig/{key}	paste-ready Outlook-safe signature HTML
GET /api/gpt/openapi.json	Custom GPT Action manifest (3 ops)
POST /api/mcp/http	Streamable HTTP MCP — 4 tools: impt_search_hotels, impt_create_intent, impt_get_quote, impt_get_deeplink
GET /api/mcp/info	paste-ready Claude Desktop / Claude Code config
POST /api/tg/webhook	Telegram bot at @Rambo_Marc2_bot with smart non-city heuristic
GET+POST /api/whatsapp/webhook	Meta Cloud API receiver — 200-acks until WA tokens set
GET+POST /api/fb/webhook	Meta Messenger Platform receiver — 200-acks until FB tokens set

What Mike has already done

Telegram conversations are in the DB — chat_id 8103309746 (Mike) sent things like "Rambo? 😂" and "There are still a lot of bugs..." which prompted me to upgrade the bot's non-city heuristic. Now the bot:

• Strips leading verbs (book Tokyo → Tokyo)
• Accepts only ≤3 alpha-only words where the first word is capitalized
• Rejects sentences ("hello there how are you", "yes please") with a friendly "I'm a hotel-booking bot 🌱" message + city picker

Backups (rollback safety)

• /etc/nginx/sites-enabled/swarm.impt.io.bak-pre-bots-20260509-103947
• /srv/swarm/impt-swarm-oss-2026-05-05/demo/index.html.bak-pre-omnichannel

🤖 Generated with Claude Code