@dominusnode/gemini-functions 1.1.0 → 1.3.0

package/dist/handler.js

@@ -1,6 +1,8 @@
 /**
  * Dominus Node Gemini / Vertex AI function calling handler (TypeScript).
  *
+ * 57 tools for AI agents to interact with the Dominus Node REST API.
+ *
  * Provides a factory function that creates a handler for dispatching
  * Google Gemini function calls to the Dominus Node REST API. Works with
  * Gemini, Vertex AI, or any system that uses Gemini-format function
@@ -22,10 +24,63 @@
  *
  * @module
  */
+import * as crypto from "node:crypto";
 import dns from "dns/promises";
 import * as http from "node:http";
 import * as tls from "node:tls";
 // ---------------------------------------------------------------------------
+// SHA-256 Proof-of-Work solver
+// ---------------------------------------------------------------------------
+function countLeadingZeroBits(buf) {
+    let count = 0;
+    for (const byte of buf) {
+        if (byte === 0) {
+            count += 8;
+            continue;
+        }
+        let mask = 0x80;
+        while (mask && !(byte & mask)) {
+            count++;
+            mask >>= 1;
+        }
+        break;
+    }
+    return count;
+}
+async function solvePoW(baseUrl) {
+    try {
+        const resp = await fetch(`${baseUrl}/api/auth/pow/challenge`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            redirect: "error",
+        });
+        if (!resp.ok)
+            return null;
+        const text = await resp.text();
+        if (text.length > 10_485_760)
+            return null;
+        const challenge = JSON.parse(text);
+        const prefix = challenge.prefix ?? "";
+        const difficulty = challenge.difficulty ?? 20;
+        const challengeId = challenge.challengeId ?? "";
+        if (!prefix || !challengeId)
+            return null;
+        for (let nonce = 0; nonce < 100_000_000; nonce++) {
+            const hash = crypto
+                .createHash("sha256")
+                .update(prefix + nonce.toString())
+                .digest();
+            if (countLeadingZeroBits(hash) >= difficulty) {
+                return { challengeId, nonce: nonce.toString() };
+            }
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+// ---------------------------------------------------------------------------
 // SSRF Prevention -- URL validation
 // ---------------------------------------------------------------------------
 const BLOCKED_HOSTNAMES = new Set([
@@ -294,7 +349,7 @@ async function checkDnsRebinding(hostname) {
 // ---------------------------------------------------------------------------
 // Credential sanitization
 // ---------------------------------------------------------------------------
-const CREDENTIAL_RE = /dn_(live|test)_[a-zA-Z0-9]+/g;
+const CREDENTIAL_RE = /dn_(live|test|proxy)_[a-zA-Z0-9]+/g;
 function sanitizeError(message) {
     return message.replace(CREDENTIAL_RE, "***");
 }
@@ -507,8 +562,13 @@ export function createDominusNodeFunctionHandler(config) {
         try {
             // Strip security-sensitive headers from user-provided headers
             const BLOCKED_HEADERS = new Set([
-                "host", "connection", "content-length", "transfer-encoding",
-                "proxy-authorization", "authorization", "user-agent",
+                "host",
+                "connection",
+                "content-length",
+                "transfer-encoding",
+                "proxy-authorization",
+                "authorization",
+                "user-agent",
             ]);
             const safeHeaders = {};
             if (headers) {
@@ -544,7 +604,10 @@ export function createDominusNodeFunctionHandler(config) {
                         port: proxyPort,
                         method: "CONNECT",
                         path: `${parsed.hostname.includes(":") ? `[${parsed.hostname}]` : parsed.hostname}:${parsed.port || 443}`,
-                        headers: { "Proxy-Authorization": proxyAuth, Host: `${parsed.hostname.includes(":") ? `[${parsed.hostname}]` : parsed.hostname}:${parsed.port || 443}` },
+                        headers: {
+                            "Proxy-Authorization": proxyAuth,
+                            Host: `${parsed.hostname.includes(":") ? `[${parsed.hostname}]` : parsed.hostname}:${parsed.port || 443}`,
+                        },
                     });
                     connectReq.on("connect", (_res, tunnelSocket) => {
                         if (_res.statusCode !== 200) {
@@ -588,7 +651,9 @@ export function createDominusNodeFunctionHandler(config) {
                                     return;
                                 }
                                 const headerSection = raw.substring(0, headerEnd);
-                                const body = raw.substring(headerEnd + 4).substring(0, MAX_BODY_BYTES);
+                                const body = raw
+                                    .substring(headerEnd + 4)
+                                    .substring(0, MAX_BODY_BYTES);
                                 const statusLine = headerSection.split("\r\n")[0];
                                 const statusMatch = statusLine.match(/^HTTP\/\d\.\d\s+(\d+)/);
                                 const status = statusMatch ? parseInt(statusMatch[1], 10) : 0;
@@ -596,18 +661,29 @@ export function createDominusNodeFunctionHandler(config) {
                                 for (const line of headerSection.split("\r\n").slice(1)) {
                                     const ci = line.indexOf(":");
                                     if (ci > 0)
-                                        headers[line.substring(0, ci).trim().toLowerCase()] = line.substring(ci + 1).trim();
+                                        headers[line.substring(0, ci).trim().toLowerCase()] = line
+                                            .substring(ci + 1)
+                                            .trim();
                                 }
                                 stripDangerousKeys(headers);
                                 resolve({ status, headers, body });
                             };
                             tlsSocket.on("end", finalize);
                             tlsSocket.on("close", finalize);
-                            tlsSocket.on("error", (err) => { clearTimeout(timeout); reject(err); });
+                            tlsSocket.on("error", (err) => {
+                                clearTimeout(timeout);
+                                reject(err);
+                            });
+                        });
+                        tlsSocket.on("error", (err) => {
+                            clearTimeout(timeout);
+                            reject(err);
                         });
-                        tlsSocket.on("error", (err) => { clearTimeout(timeout); reject(err); });
                     });
-                    connectReq.on("error", (err) => { clearTimeout(timeout); reject(err); });
+                    connectReq.on("error", (err) => {
+                        clearTimeout(timeout);
+                        reject(err);
+                    });
                     connectReq.end();
                 }
                 else {
@@ -617,19 +693,28 @@ export function createDominusNodeFunctionHandler(config) {
                         port: proxyPort,
                         method,
                         path: url,
-                        headers: { ...safeHeaders, "Proxy-Authorization": proxyAuth, Host: parsed.host },
+                        headers: {
+                            ...safeHeaders,
+                            "Proxy-Authorization": proxyAuth,
+                            Host: parsed.host,
+                        },
                     }, (res) => {
                         const chunks = [];
                         let byteCount = 0;
                         let httpFinalized = false;
-                        res.on("data", (chunk) => { byteCount += chunk.length; if (byteCount <= MAX_BODY_BYTES)
-                            chunks.push(chunk); });
+                        res.on("data", (chunk) => {
+                            byteCount += chunk.length;
+                            if (byteCount <= MAX_BODY_BYTES)
+                                chunks.push(chunk);
+                        });
                         const finalize = () => {
                             if (httpFinalized)
                                 return;
                             httpFinalized = true;
                             clearTimeout(timeout);
-                            const body = Buffer.concat(chunks).toString("utf-8").substring(0, MAX_BODY_BYTES);
+                            const body = Buffer.concat(chunks)
+                                .toString("utf-8")
+                                .substring(0, MAX_BODY_BYTES);
                             const headers = {};
                             for (const [k, v] of Object.entries(res.headers)) {
                                 if (v)
@@ -640,9 +725,15 @@ export function createDominusNodeFunctionHandler(config) {
                         };
                         res.on("end", finalize);
                         res.on("close", finalize);
-                        res.on("error", (err) => { clearTimeout(timeout); reject(err); });
+                        res.on("error", (err) => {
+                            clearTimeout(timeout);
+                            reject(err);
+                        });
+                    });
+                    req.on("error", (err) => {
+                        clearTimeout(timeout);
+                        reject(err);
                     });
-                    req.on("error", (err) => { clearTimeout(timeout); reject(err); });
                     req.end();
                 }
             });
@@ -682,13 +773,17 @@ export function createDominusNodeFunctionHandler(config) {
         const label = args.label;
         const spendingLimitCents = args.spending_limit_cents;
         if (!label || typeof label !== "string") {
-            return JSON.stringify({ error: "label is required and must be a string" });
+            return JSON.stringify({
+                error: "label is required and must be a string",
+            });
         }
         if (label.length > 100) {
             return JSON.stringify({ error: "label must be 100 characters or fewer" });
         }
         if (/[\x00-\x1f\x7f]/.test(label)) {
-            return JSON.stringify({ error: "label contains invalid control characters" });
+            return JSON.stringify({
+                error: "label contains invalid control characters",
+            });
         }
         if (!Number.isInteger(spendingLimitCents) ||
             spendingLimitCents <= 0 ||
@@ -702,9 +797,12 @@ export function createDominusNodeFunctionHandler(config) {
             spendingLimitCents,
         };
         // Validate optional daily_limit_cents
-        if (args.daily_limit_cents !== undefined && args.daily_limit_cents !== null) {
+        if (args.daily_limit_cents !== undefined &&
+            args.daily_limit_cents !== null) {
             const dailyLimit = Number(args.daily_limit_cents);
-            if (!Number.isInteger(dailyLimit) || dailyLimit < 1 || dailyLimit > 1_000_000) {
+            if (!Number.isInteger(dailyLimit) ||
+                dailyLimit < 1 ||
+                dailyLimit > 1_000_000) {
                 return JSON.stringify({
                     error: "daily_limit_cents must be a positive integer between 1 and 1,000,000",
                 });
@@ -714,22 +812,32 @@ export function createDominusNodeFunctionHandler(config) {
         // Validate optional allowed_domains
         if (args.allowed_domains !== undefined && args.allowed_domains !== null) {
             if (!Array.isArray(args.allowed_domains)) {
-                return JSON.stringify({ error: "allowed_domains must be an array of domain strings" });
+                return JSON.stringify({
+                    error: "allowed_domains must be an array of domain strings",
+                });
             }
             if (args.allowed_domains.length > 100) {
-                return JSON.stringify({ error: "allowed_domains must have at most 100 entries" });
+                return JSON.stringify({
+                    error: "allowed_domains must have at most 100 entries",
+                });
             }
             const domainRe = /^(?:[a-zA-Z0-9](?:[a-zA-Z0-9\-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$/;
             for (let i = 0; i < args.allowed_domains.length; i++) {
                 const d = args.allowed_domains[i];
                 if (typeof d !== "string") {
-                    return JSON.stringify({ error: `allowed_domains[${i}] must be a string` });
+                    return JSON.stringify({
+                        error: `allowed_domains[${i}] must be a string`,
+                    });
                 }
                 if (d.length > 253) {
-                    return JSON.stringify({ error: `allowed_domains[${i}] exceeds 253 characters` });
+                    return JSON.stringify({
+                        error: `allowed_domains[${i}] exceeds 253 characters`,
+                    });
                 }
                 if (!domainRe.test(d)) {
-                    return JSON.stringify({ error: `allowed_domains[${i}] is not a valid domain: ${d}` });
+                    return JSON.stringify({
+                        error: `allowed_domains[${i}] is not a valid domain: ${d}`,
+                    });
                 }
             }
             body.allowedDomains = args.allowed_domains;
@@ -741,7 +849,9 @@ export function createDominusNodeFunctionHandler(config) {
         const walletId = args.wallet_id;
         const amountCents = args.amount_cents;
         if (!walletId || typeof walletId !== "string") {
-            return JSON.stringify({ error: "wallet_id is required and must be a string" });
+            return JSON.stringify({
+                error: "wallet_id is required and must be a string",
+            });
         }
         if (!Number.isInteger(amountCents) ||
             amountCents <= 0 ||
@@ -756,7 +866,9 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleAgenticWalletBalance(args) {
         const walletId = args.wallet_id;
         if (!walletId || typeof walletId !== "string") {
-            return JSON.stringify({ error: "wallet_id is required and must be a string" });
+            return JSON.stringify({
+                error: "wallet_id is required and must be a string",
+            });
         }
         const result = await api("GET", `/api/agent-wallet/${encodeURIComponent(walletId)}`);
         return JSON.stringify(result);
@@ -768,13 +880,17 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleAgenticTransactions(args) {
         const walletId = args.wallet_id;
         if (!walletId || typeof walletId !== "string") {
-            return JSON.stringify({ error: "wallet_id is required and must be a string" });
+            return JSON.stringify({
+                error: "wallet_id is required and must be a string",
+            });
         }
         const limit = args.limit;
         const params = new URLSearchParams();
         if (limit !== undefined) {
             if (!Number.isInteger(limit) || limit < 1 || limit > 100) {
-                return JSON.stringify({ error: "limit must be an integer between 1 and 100" });
+                return JSON.stringify({
+                    error: "limit must be an integer between 1 and 100",
+                });
             }
             params.set("limit", String(limit));
         }
@@ -785,7 +901,9 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleFreezeAgenticWallet(args) {
         const walletId = args.wallet_id;
         if (!walletId || typeof walletId !== "string") {
-            return JSON.stringify({ error: "wallet_id is required and must be a string" });
+            return JSON.stringify({
+                error: "wallet_id is required and must be a string",
+            });
         }
         const result = await api("POST", `/api/agent-wallet/${encodeURIComponent(walletId)}/freeze`);
         return JSON.stringify(result);
@@ -793,7 +911,9 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleUnfreezeAgenticWallet(args) {
         const walletId = args.wallet_id;
         if (!walletId || typeof walletId !== "string") {
-            return JSON.stringify({ error: "wallet_id is required and must be a string" });
+            return JSON.stringify({
+                error: "wallet_id is required and must be a string",
+            });
         }
         const result = await api("POST", `/api/agent-wallet/${encodeURIComponent(walletId)}/unfreeze`);
         return JSON.stringify(result);
@@ -801,7 +921,9 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleDeleteAgenticWallet(args) {
         const walletId = args.wallet_id;
         if (!walletId || typeof walletId !== "string") {
-            return JSON.stringify({ error: "wallet_id is required and must be a string" });
+            return JSON.stringify({
+                error: "wallet_id is required and must be a string",
+            });
         }
         const result = await api("DELETE", `/api/agent-wallet/${encodeURIComponent(walletId)}`);
         return JSON.stringify(result);
@@ -815,13 +937,17 @@ export function createDominusNodeFunctionHandler(config) {
             return JSON.stringify({ error: "name must be 100 characters or fewer" });
         }
         if (/[\x00-\x1f\x7f]/.test(name)) {
-            return JSON.stringify({ error: "name contains invalid control characters" });
+            return JSON.stringify({
+                error: "name contains invalid control characters",
+            });
         }
         const body = { name };
         if (args.max_members !== undefined) {
             const maxMembers = Number(args.max_members);
             if (!Number.isInteger(maxMembers) || maxMembers < 1 || maxMembers > 100) {
-                return JSON.stringify({ error: "max_members must be an integer between 1 and 100" });
+                return JSON.stringify({
+                    error: "max_members must be an integer between 1 and 100",
+                });
             }
             body.maxMembers = maxMembers;
         }
@@ -835,7 +961,9 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleTeamDetails(args) {
         const teamId = args.team_id;
         if (!teamId || typeof teamId !== "string") {
-            return JSON.stringify({ error: "team_id is required and must be a string" });
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
         }
         const result = await api("GET", `/api/teams/${encodeURIComponent(teamId)}`);
         return JSON.stringify(result);
@@ -844,7 +972,9 @@ export function createDominusNodeFunctionHandler(config) {
         const teamId = args.team_id;
         const amountCents = args.amount_cents;
         if (!teamId || typeof teamId !== "string") {
-            return JSON.stringify({ error: "team_id is required and must be a string" });
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
         }
         if (!Number.isInteger(amountCents) ||
             amountCents < 100 ||
@@ -860,16 +990,22 @@ export function createDominusNodeFunctionHandler(config) {
         const teamId = args.team_id;
         const label = args.label;
         if (!teamId || typeof teamId !== "string") {
-            return JSON.stringify({ error: "team_id is required and must be a string" });
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
         }
         if (!label || typeof label !== "string") {
-            return JSON.stringify({ error: "label is required and must be a string" });
+            return JSON.stringify({
+                error: "label is required and must be a string",
+            });
         }
         if (label.length > 100) {
             return JSON.stringify({ error: "label must be 100 characters or fewer" });
         }
         if (/[\x00-\x1f\x7f]/.test(label)) {
-            return JSON.stringify({ error: "label contains invalid control characters" });
+            return JSON.stringify({
+                error: "label contains invalid control characters",
+            });
         }
         const result = await api("POST", `/api/teams/${encodeURIComponent(teamId)}/keys`, { label });
         return JSON.stringify(result);
@@ -877,13 +1013,17 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleTeamUsage(args) {
         const teamId = args.team_id;
         if (!teamId || typeof teamId !== "string") {
-            return JSON.stringify({ error: "team_id is required and must be a string" });
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
         }
         const limit = args.limit;
         const params = new URLSearchParams();
         if (limit !== undefined) {
             if (!Number.isInteger(limit) || limit < 1 || limit > 100) {
-                return JSON.stringify({ error: "limit must be an integer between 1 and 100" });
+                return JSON.stringify({
+                    error: "limit must be an integer between 1 and 100",
+                });
             }
             params.set("limit", String(limit));
         }
@@ -894,7 +1034,9 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleUpdateTeam(args) {
         const teamId = args.team_id;
         if (!teamId || typeof teamId !== "string") {
-            return JSON.stringify({ error: "team_id is required and must be a string" });
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
         }
         if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
             return JSON.stringify({ error: "team_id must be a valid UUID" });
@@ -906,22 +1048,30 @@ export function createDominusNodeFunctionHandler(config) {
                 return JSON.stringify({ error: "name must be a non-empty string" });
             }
             if (name.length > 100) {
-                return JSON.stringify({ error: "name must be 100 characters or fewer" });
+                return JSON.stringify({
+                    error: "name must be 100 characters or fewer",
+                });
             }
             if (/[\x00-\x1f\x7f]/.test(name)) {
-                return JSON.stringify({ error: "name contains invalid control characters" });
+                return JSON.stringify({
+                    error: "name contains invalid control characters",
+                });
             }
             body.name = name;
         }
         if (args.max_members !== undefined) {
             const maxMembers = Number(args.max_members);
             if (!Number.isInteger(maxMembers) || maxMembers < 1 || maxMembers > 100) {
-                return JSON.stringify({ error: "max_members must be an integer between 1 and 100" });
+                return JSON.stringify({
+                    error: "max_members must be an integer between 1 and 100",
+                });
             }
             body.maxMembers = maxMembers;
         }
         if (Object.keys(body).length === 0) {
-            return JSON.stringify({ error: "At least one of name or max_members must be provided" });
+            return JSON.stringify({
+                error: "At least one of name or max_members must be provided",
+            });
         }
         const result = await api("PATCH", `/api/teams/${encodeURIComponent(teamId)}`, body);
         return JSON.stringify(result);
@@ -931,13 +1081,17 @@ export function createDominusNodeFunctionHandler(config) {
         const userId = args.user_id;
         const role = args.role;
         if (!teamId || typeof teamId !== "string") {
-            return JSON.stringify({ error: "team_id is required and must be a string" });
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
         }
         if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
             return JSON.stringify({ error: "team_id must be a valid UUID" });
         }
         if (!userId || typeof userId !== "string") {
-            return JSON.stringify({ error: "user_id is required and must be a string" });
+            return JSON.stringify({
+                error: "user_id is required and must be a string",
+            });
         }
         if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(userId)) {
             return JSON.stringify({ error: "user_id must be a valid UUID" });
@@ -960,7 +1114,9 @@ export function createDominusNodeFunctionHandler(config) {
                 error: "amount_cents must be an integer between 500 ($5) and 100,000 ($1,000)",
             });
         }
-        const result = await api("POST", "/api/wallet/topup/paypal", { amountCents });
+        const result = await api("POST", "/api/wallet/topup/paypal", {
+            amountCents,
+        });
         return JSON.stringify(result);
     }
     async function handleTopupStripe(args) {
@@ -972,11 +1128,23 @@ export function createDominusNodeFunctionHandler(config) {
                 error: "amount_cents must be an integer between 500 ($5) and 100,000 ($1,000)",
             });
         }
-        const result = await api("POST", "/api/wallet/topup/stripe", { amountCents });
+        const result = await api("POST", "/api/wallet/topup/stripe", {
+            amountCents,
+        });
         return JSON.stringify(result);
     }
     const VALID_CRYPTO_CURRENCIES = new Set([
-        "btc", "eth", "ltc", "xmr", "zec", "usdc", "sol", "usdt", "dai", "bnb", "link",
+        "btc",
+        "eth",
+        "ltc",
+        "xmr",
+        "zec",
+        "usdc",
+        "sol",
+        "usdt",
+        "dai",
+        "bnb",
+        "link",
     ]);
     async function handleTopupCrypto(args) {
         const amountUsd = args.amount_usd;
@@ -1001,6 +1169,567 @@ export function createDominusNodeFunctionHandler(config) {
         return JSON.stringify(result);
     }
     // -----------------------------------------------------------------------
+    // Proxy extended
+    // -----------------------------------------------------------------------
+    async function handleGetProxyStatus() {
+        const result = await api("GET", "/api/proxy/status");
+        return JSON.stringify(result);
+    }
+    // -----------------------------------------------------------------------
+    // Wallet extended
+    // -----------------------------------------------------------------------
+    async function handleGetTransactions(args) {
+        const params = new URLSearchParams();
+        if (args.limit !== undefined) {
+            const limit = Number(args.limit);
+            if (!Number.isInteger(limit) || limit < 1 || limit > 100) {
+                return JSON.stringify({
+                    error: "limit must be an integer between 1 and 100",
+                });
+            }
+            params.set("limit", String(limit));
+        }
+        const qs = params.toString();
+        const result = await api("GET", `/api/wallet/transactions${qs ? `?${qs}` : ""}`);
+        return JSON.stringify(result);
+    }
+    async function handleGetForecast() {
+        const result = await api("GET", "/api/wallet/forecast");
+        return JSON.stringify(result);
+    }
+    async function handleCheckPayment(args) {
+        const invoiceId = args.invoice_id;
+        if (!invoiceId || typeof invoiceId !== "string") {
+            return JSON.stringify({
+                error: "invoice_id is required and must be a string",
+            });
+        }
+        if (/[\x00-\x1f\x7f]/.test(invoiceId)) {
+            return JSON.stringify({
+                error: "invoice_id contains invalid control characters",
+            });
+        }
+        const result = await api("GET", `/api/wallet/topup/crypto/${encodeURIComponent(invoiceId)}/status`);
+        return JSON.stringify(result);
+    }
+    // -----------------------------------------------------------------------
+    // Usage extended
+    // -----------------------------------------------------------------------
+    async function handleGetDailyUsage(args) {
+        const params = new URLSearchParams();
+        if (args.days !== undefined) {
+            const days = Number(args.days);
+            if (!Number.isInteger(days) || days < 1 || days > 90) {
+                return JSON.stringify({
+                    error: "days must be an integer between 1 and 90",
+                });
+            }
+            params.set("days", String(days));
+        }
+        const qs = params.toString();
+        const result = await api("GET", `/api/usage/daily${qs ? `?${qs}` : ""}`);
+        return JSON.stringify(result);
+    }
+    async function handleGetTopHosts(args) {
+        const params = new URLSearchParams();
+        if (args.limit !== undefined) {
+            const limit = Number(args.limit);
+            if (!Number.isInteger(limit) || limit < 1 || limit > 50) {
+                return JSON.stringify({
+                    error: "limit must be an integer between 1 and 50",
+                });
+            }
+            params.set("limit", String(limit));
+        }
+        const qs = params.toString();
+        const result = await api("GET", `/api/usage/top-hosts${qs ? `?${qs}` : ""}`);
+        return JSON.stringify(result);
+    }
+    // -----------------------------------------------------------------------
+    // Account lifecycle
+    // -----------------------------------------------------------------------
+    async function handleRegister(args) {
+        const email = args.email;
+        const password = args.password;
+        if (!email || typeof email !== "string") {
+            return JSON.stringify({
+                error: "email is required and must be a string",
+            });
+        }
+        if (!/^[^@]+@[^@]+\.[^@]+$/.test(email)) {
+            return JSON.stringify({ error: "email must be a valid email address" });
+        }
+        if (/[\x00-\x1f\x7f]/.test(email)) {
+            return JSON.stringify({
+                error: "email contains invalid control characters",
+            });
+        }
+        if (!password || typeof password !== "string") {
+            return JSON.stringify({
+                error: "password is required and must be a string",
+            });
+        }
+        if (password.length < 8 || password.length > 128) {
+            return JSON.stringify({
+                error: "password must be between 8 and 128 characters",
+            });
+        }
+        try {
+            const reqHeaders = {
+                "User-Agent": "dominusnode-gemini/1.0.0",
+                "Content-Type": "application/json",
+            };
+            if (agentSecret) {
+                reqHeaders["X-DominusNode-Agent"] = "mcp";
+                reqHeaders["X-DominusNode-Agent-Secret"] = agentSecret;
+            }
+            // Solve PoW for CAPTCHA-free registration
+            const pow = await solvePoW(baseUrl);
+            const regBody = { email, password };
+            if (pow)
+                regBody.pow = pow;
+            const response = await fetch(`${baseUrl}/api/auth/register`, {
+                method: "POST",
+                headers: reqHeaders,
+                body: JSON.stringify(regBody),
+                signal: AbortSignal.timeout(timeoutMs),
+                redirect: "error",
+            });
+            const responseText = await response.text();
+            if (responseText.length > MAX_RESPONSE_BYTES) {
+                return JSON.stringify({ error: "Response body exceeds size limit" });
+            }
+            if (!response.ok) {
+                let message;
+                try {
+                    const parsed = JSON.parse(responseText);
+                    message = parsed.error ?? parsed.message ?? responseText;
+                }
+                catch {
+                    message = responseText;
+                }
+                if (message.length > 500)
+                    message = message.slice(0, 500) + "... [truncated]";
+                return JSON.stringify({ error: sanitizeError(message) });
+            }
+            const data = safeJsonParse(responseText);
+            return JSON.stringify({
+                userId: data.userId,
+                email: data.email,
+                message: data.message ?? "Registration successful",
+            });
+        }
+        catch (err) {
+            return JSON.stringify({
+                error: sanitizeError(err instanceof Error ? err.message : String(err)),
+            });
+        }
+    }
+    async function handleLogin(args) {
+        const email = args.email;
+        const password = args.password;
+        if (!email || typeof email !== "string") {
+            return JSON.stringify({
+                error: "email is required and must be a string",
+            });
+        }
+        if (!/^[^@]+@[^@]+\.[^@]+$/.test(email)) {
+            return JSON.stringify({ error: "email must be a valid email address" });
+        }
+        if (/[\x00-\x1f\x7f]/.test(email)) {
+            return JSON.stringify({
+                error: "email contains invalid control characters",
+            });
+        }
+        if (!password || typeof password !== "string") {
+            return JSON.stringify({
+                error: "password is required and must be a string",
+            });
+        }
+        if (password.length < 8 || password.length > 128) {
+            return JSON.stringify({
+                error: "password must be between 8 and 128 characters",
+            });
+        }
+        try {
+            const reqHeaders = {
+                "User-Agent": "dominusnode-gemini/1.0.0",
+                "Content-Type": "application/json",
+            };
+            if (agentSecret) {
+                reqHeaders["X-DominusNode-Agent"] = "mcp";
+                reqHeaders["X-DominusNode-Agent-Secret"] = agentSecret;
+            }
+            const response = await fetch(`${baseUrl}/api/auth/login`, {
+                method: "POST",
+                headers: reqHeaders,
+                body: JSON.stringify({ email, password }),
+                signal: AbortSignal.timeout(timeoutMs),
+                redirect: "error",
+            });
+            const responseText = await response.text();
+            if (responseText.length > MAX_RESPONSE_BYTES) {
+                return JSON.stringify({ error: "Response body exceeds size limit" });
+            }
+            if (!response.ok) {
+                let message;
+                try {
+                    const parsed = JSON.parse(responseText);
+                    message = parsed.error ?? parsed.message ?? responseText;
+                }
+                catch {
+                    message = responseText;
+                }
+                if (message.length > 500)
+                    message = message.slice(0, 500) + "... [truncated]";
+                return JSON.stringify({ error: sanitizeError(message) });
+            }
+            const data = safeJsonParse(responseText);
+            return JSON.stringify({
+                token: data.token,
+                message: data.message ?? "Login successful",
+            });
+        }
+        catch (err) {
+            return JSON.stringify({
+                error: sanitizeError(err instanceof Error ? err.message : String(err)),
+            });
+        }
+    }
+    async function handleGetAccountInfo() {
+        const result = await api("GET", "/api/auth/me");
+        return JSON.stringify(result);
+    }
+    async function handleVerifyEmail(args) {
+        const token = args.token;
+        if (!token || typeof token !== "string") {
+            return JSON.stringify({
+                error: "token is required and must be a string",
+            });
+        }
+        if (/[\x00-\x1f\x7f]/.test(token)) {
+            return JSON.stringify({
+                error: "token contains invalid control characters",
+            });
+        }
+        try {
+            const reqHeaders = {
+                "User-Agent": "dominusnode-gemini/1.0.0",
+                "Content-Type": "application/json",
+            };
+            if (agentSecret) {
+                reqHeaders["X-DominusNode-Agent"] = "mcp";
+                reqHeaders["X-DominusNode-Agent-Secret"] = agentSecret;
+            }
+            const response = await fetch(`${baseUrl}/api/auth/verify-email`, {
+                method: "POST",
+                headers: reqHeaders,
+                body: JSON.stringify({ token }),
+                signal: AbortSignal.timeout(timeoutMs),
+                redirect: "error",
+            });
+            const responseText = await response.text();
+            if (responseText.length > MAX_RESPONSE_BYTES) {
+                return JSON.stringify({ error: "Response body exceeds size limit" });
+            }
+            if (!response.ok) {
+                let message;
+                try {
+                    const parsed = JSON.parse(responseText);
+                    message = parsed.error ?? parsed.message ?? responseText;
+                }
+                catch {
+                    message = responseText;
+                }
+                if (message.length > 500)
+                    message = message.slice(0, 500) + "... [truncated]";
+                return JSON.stringify({ error: sanitizeError(message) });
+            }
+            const data = safeJsonParse(responseText);
+            return JSON.stringify(data);
+        }
+        catch (err) {
+            return JSON.stringify({
+                error: sanitizeError(err instanceof Error ? err.message : String(err)),
+            });
+        }
+    }
+    async function handleResendVerification() {
+        const result = await api("POST", "/api/auth/resend-verification");
+        return JSON.stringify(result);
+    }
+    async function handleUpdatePassword(args) {
+        const currentPassword = args.current_password;
+        const newPassword = args.new_password;
+        if (!currentPassword || typeof currentPassword !== "string") {
+            return JSON.stringify({
+                error: "current_password is required and must be a string",
+            });
+        }
+        if (currentPassword.length < 8 || currentPassword.length > 128) {
+            return JSON.stringify({
+                error: "current_password must be between 8 and 128 characters",
+            });
+        }
+        if (!newPassword || typeof newPassword !== "string") {
+            return JSON.stringify({
+                error: "new_password is required and must be a string",
+            });
+        }
+        if (newPassword.length < 8 || newPassword.length > 128) {
+            return JSON.stringify({
+                error: "new_password must be between 8 and 128 characters",
+            });
+        }
+        const result = await api("POST", "/api/auth/change-password", {
+            currentPassword,
+            newPassword,
+        });
+        return JSON.stringify(result);
+    }
+    // -----------------------------------------------------------------------
+    // API Keys
+    // -----------------------------------------------------------------------
+    async function handleListKeys() {
+        const result = await api("GET", "/api/keys");
+        return JSON.stringify(result);
+    }
+    async function handleCreateKey(args) {
+        const label = args.label;
+        if (!label || typeof label !== "string") {
+            return JSON.stringify({
+                error: "label is required and must be a string",
+            });
+        }
+        if (label.length > 100) {
+            return JSON.stringify({ error: "label must be 100 characters or fewer" });
+        }
+        if (/[\x00-\x1f\x7f]/.test(label)) {
+            return JSON.stringify({
+                error: "label contains invalid control characters",
+            });
+        }
+        const result = await api("POST", "/api/keys", { label });
+        return JSON.stringify(result);
+    }
+    async function handleRevokeKey(args) {
+        const keyId = args.key_id;
+        if (!keyId || typeof keyId !== "string") {
+            return JSON.stringify({
+                error: "key_id is required and must be a string",
+            });
+        }
+        if (/[\x00-\x1f\x7f]/.test(keyId)) {
+            return JSON.stringify({
+                error: "key_id contains invalid control characters",
+            });
+        }
+        const result = await api("DELETE", `/api/keys/${encodeURIComponent(keyId)}`);
+        return JSON.stringify(result);
+    }
+    // -----------------------------------------------------------------------
+    // Plans
+    // -----------------------------------------------------------------------
+    async function handleGetPlan() {
+        const result = await api("GET", "/api/plans/user/plan");
+        return JSON.stringify(result);
+    }
+    async function handleListPlans() {
+        const result = await api("GET", "/api/plans");
+        return JSON.stringify(result);
+    }
+    async function handleChangePlan(args) {
+        const planId = args.plan_id;
+        if (!planId || typeof planId !== "string") {
+            return JSON.stringify({
+                error: "plan_id is required and must be a string",
+            });
+        }
+        if (/[\x00-\x1f\x7f]/.test(planId)) {
+            return JSON.stringify({
+                error: "plan_id contains invalid control characters",
+            });
+        }
+        const result = await api("PUT", "/api/plans/user/plan", { planId });
+        return JSON.stringify(result);
+    }
+    // -----------------------------------------------------------------------
+    // Teams extended
+    // -----------------------------------------------------------------------
+    async function handleTeamDelete(args) {
+        const teamId = args.team_id;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        const result = await api("DELETE", `/api/teams/${encodeURIComponent(teamId)}`);
+        return JSON.stringify(result);
+    }
+    async function handleTeamRevokeKey(args) {
+        const teamId = args.team_id;
+        const keyId = args.key_id;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        if (!keyId || typeof keyId !== "string") {
+            return JSON.stringify({
+                error: "key_id is required and must be a string",
+            });
+        }
+        if (/[\x00-\x1f\x7f]/.test(keyId)) {
+            return JSON.stringify({
+                error: "key_id contains invalid control characters",
+            });
+        }
+        const result = await api("DELETE", `/api/teams/${encodeURIComponent(teamId)}/keys/${encodeURIComponent(keyId)}`);
+        return JSON.stringify(result);
+    }
+    async function handleTeamListKeys(args) {
+        const teamId = args.team_id;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        const result = await api("GET", `/api/teams/${encodeURIComponent(teamId)}/keys`);
+        return JSON.stringify(result);
+    }
+    async function handleTeamListMembers(args) {
+        const teamId = args.team_id;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        const result = await api("GET", `/api/teams/${encodeURIComponent(teamId)}/members`);
+        return JSON.stringify(result);
+    }
+    async function handleTeamAddMember(args) {
+        const teamId = args.team_id;
+        const userId = args.user_id;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        if (!userId || typeof userId !== "string") {
+            return JSON.stringify({
+                error: "user_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(userId)) {
+            return JSON.stringify({ error: "user_id must be a valid UUID" });
+        }
+        const result = await api("POST", `/api/teams/${encodeURIComponent(teamId)}/members`, { userId });
+        return JSON.stringify(result);
+    }
+    async function handleTeamRemoveMember(args) {
+        const teamId = args.team_id;
+        const userId = args.user_id;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        if (!userId || typeof userId !== "string") {
+            return JSON.stringify({
+                error: "user_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(userId)) {
+            return JSON.stringify({ error: "user_id must be a valid UUID" });
+        }
+        const result = await api("DELETE", `/api/teams/${encodeURIComponent(teamId)}/members/${encodeURIComponent(userId)}`);
+        return JSON.stringify(result);
+    }
+    async function handleTeamInviteMember(args) {
+        const teamId = args.team_id;
+        const email = args.email;
+        const role = args.role ?? "member";
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        if (!email || typeof email !== "string") {
+            return JSON.stringify({
+                error: "email is required and must be a string",
+            });
+        }
+        if (!/^[^@]+@[^@]+\.[^@]+$/.test(email)) {
+            return JSON.stringify({ error: "email must be a valid email address" });
+        }
+        if (/[\x00-\x1f\x7f]/.test(email)) {
+            return JSON.stringify({
+                error: "email contains invalid control characters",
+            });
+        }
+        if (role !== "member" && role !== "admin") {
+            return JSON.stringify({ error: "role must be 'member' or 'admin'" });
+        }
+        const result = await api("POST", `/api/teams/${encodeURIComponent(teamId)}/invites`, { email, role });
+        return JSON.stringify(result);
+    }
+    async function handleTeamListInvites(args) {
+        const teamId = args.team_id;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        const result = await api("GET", `/api/teams/${encodeURIComponent(teamId)}/invites`);
+        return JSON.stringify(result);
+    }
+    async function handleTeamCancelInvite(args) {
+        const teamId = args.team_id;
+        const inviteId = args.invite_id;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        if (!inviteId || typeof inviteId !== "string") {
+            return JSON.stringify({
+                error: "invite_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(inviteId)) {
+            return JSON.stringify({ error: "invite_id must be a valid UUID" });
+        }
+        const result = await api("DELETE", `/api/teams/${encodeURIComponent(teamId)}/invites/${encodeURIComponent(inviteId)}`);
+        return JSON.stringify(result);
+    }
+    // -----------------------------------------------------------------------
     // Dispatch table
     // -----------------------------------------------------------------------
     const handlers = {
@@ -1008,6 +1737,7 @@ export function createDominusNodeFunctionHandler(config) {
         dominusnode_check_balance: handleCheckBalance,
         dominusnode_check_usage: handleCheckUsage,
         dominusnode_get_proxy_config: handleGetProxyConfig,
+        dominusnode_get_proxy_status: handleGetProxyStatus,
         dominusnode_list_sessions: handleListSessions,
         dominusnode_create_agentic_wallet: handleCreateAgenticWallet,
         dominusnode_fund_agentic_wallet: handleFundAgenticWallet,
@@ -1017,6 +1747,23 @@ export function createDominusNodeFunctionHandler(config) {
         dominusnode_freeze_agentic_wallet: handleFreezeAgenticWallet,
         dominusnode_unfreeze_agentic_wallet: handleUnfreezeAgenticWallet,
         dominusnode_delete_agentic_wallet: handleDeleteAgenticWallet,
+        dominusnode_get_transactions: handleGetTransactions,
+        dominusnode_get_forecast: handleGetForecast,
+        dominusnode_check_payment: handleCheckPayment,
+        dominusnode_get_daily_usage: handleGetDailyUsage,
+        dominusnode_get_top_hosts: handleGetTopHosts,
+        dominusnode_register: handleRegister,
+        dominusnode_login: handleLogin,
+        dominusnode_get_account_info: handleGetAccountInfo,
+        dominusnode_verify_email: handleVerifyEmail,
+        dominusnode_resend_verification: handleResendVerification,
+        dominusnode_update_password: handleUpdatePassword,
+        dominusnode_list_keys: handleListKeys,
+        dominusnode_create_key: handleCreateKey,
+        dominusnode_revoke_key: handleRevokeKey,
+        dominusnode_get_plan: handleGetPlan,
+        dominusnode_list_plans: handleListPlans,
+        dominusnode_change_plan: handleChangePlan,
         dominusnode_create_team: handleCreateTeam,
         dominusnode_list_teams: handleListTeams,
         dominusnode_team_details: handleTeamDetails,
@@ -1025,16 +1772,33 @@ export function createDominusNodeFunctionHandler(config) {
         dominusnode_team_usage: handleTeamUsage,
         dominusnode_update_team: handleUpdateTeam,
         dominusnode_update_team_member_role: handleUpdateTeamMemberRole,
+        dominusnode_team_delete: handleTeamDelete,
+        dominusnode_team_revoke_key: handleTeamRevokeKey,
+        dominusnode_team_list_keys: handleTeamListKeys,
+        dominusnode_team_list_members: handleTeamListMembers,
+        dominusnode_team_add_member: handleTeamAddMember,
+        dominusnode_team_remove_member: handleTeamRemoveMember,
+        dominusnode_team_invite_member: handleTeamInviteMember,
+        dominusnode_team_list_invites: handleTeamListInvites,
+        dominusnode_team_cancel_invite: handleTeamCancelInvite,
         dominusnode_topup_paypal: handleTopupPaypal,
         dominusnode_topup_stripe: handleTopupStripe,
         dominusnode_topup_crypto: handleTopupCrypto,
         dominusnode_x402_info: handleX402Info,
         dominusnode_update_wallet_policy: handleUpdateWalletPolicy,
+        // MPP (5)
+        dominusnode_mpp_info: handleMppInfo,
+        dominusnode_mpp_challenge: handleMppChallenge,
+        dominusnode_pay_mpp: handlePayMpp,
+        dominusnode_mpp_session_open: handleMppSessionOpen,
+        dominusnode_mpp_session_close: handleMppSessionClose,
     };
     async function handleUpdateWalletPolicy(args) {
         const walletId = args.wallet_id;
         if (!walletId || typeof walletId !== "string") {
-            return JSON.stringify({ error: "wallet_id is required and must be a string" });
+            return JSON.stringify({
+                error: "wallet_id is required and must be a string",
+            });
         }
         if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(walletId)) {
             return JSON.stringify({ error: "wallet_id must be a valid UUID" });
@@ -1046,7 +1810,9 @@ export function createDominusNodeFunctionHandler(config) {
             }
             else {
                 const dailyLimit = Number(args.daily_limit_cents);
-                if (!Number.isInteger(dailyLimit) || dailyLimit < 1 || dailyLimit > 1_000_000) {
+                if (!Number.isInteger(dailyLimit) ||
+                    dailyLimit < 1 ||
+                    dailyLimit > 1_000_000) {
                     return JSON.stringify({
                         error: "daily_limit_cents must be a positive integer between 1 and 1,000,000, or null to clear",
                     });
@@ -1060,22 +1826,32 @@ export function createDominusNodeFunctionHandler(config) {
             }
             else {
                 if (!Array.isArray(args.allowed_domains)) {
-                    return JSON.stringify({ error: "allowed_domains must be an array of domain strings, or null to clear" });
+                    return JSON.stringify({
+                        error: "allowed_domains must be an array of domain strings, or null to clear",
+                    });
                 }
                 if (args.allowed_domains.length > 100) {
-                    return JSON.stringify({ error: "allowed_domains must have at most 100 entries" });
+                    return JSON.stringify({
+                        error: "allowed_domains must have at most 100 entries",
+                    });
                 }
                 const domainRe = /^(?:[a-zA-Z0-9](?:[a-zA-Z0-9\-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$/;
                 for (let i = 0; i < args.allowed_domains.length; i++) {
                     const d = args.allowed_domains[i];
                     if (typeof d !== "string") {
-                        return JSON.stringify({ error: `allowed_domains[${i}] must be a string` });
+                        return JSON.stringify({
+                            error: `allowed_domains[${i}] must be a string`,
+                        });
                     }
                     if (d.length > 253) {
-                        return JSON.stringify({ error: `allowed_domains[${i}] exceeds 253 characters` });
+                        return JSON.stringify({
+                            error: `allowed_domains[${i}] exceeds 253 characters`,
+                        });
                     }
                     if (!domainRe.test(d)) {
-                        return JSON.stringify({ error: `allowed_domains[${i}] is not a valid domain: ${d}` });
+                        return JSON.stringify({
+                            error: `allowed_domains[${i}] is not a valid domain: ${d}`,
+                        });
                     }
                 }
                 body.allowedDomains = args.allowed_domains;
@@ -1094,6 +1870,121 @@ export function createDominusNodeFunctionHandler(config) {
         return JSON.stringify(result);
     }
     // -----------------------------------------------------------------------
+    // MPP (Machine Payment Protocol) handlers
+    // -----------------------------------------------------------------------
+    async function handleMppInfo() {
+        // MPP info is public (no auth required), but we use the authenticated path
+        // for simplicity since the handler is already authenticated.
+        const result = await api("GET", "/api/mpp/info");
+        return JSON.stringify(result);
+    }
+    async function handleMppChallenge(args) {
+        const poolType = String(args.pool_type ?? "dc");
+        if (poolType !== "dc" && poolType !== "residential") {
+            return JSON.stringify({
+                error: "pool_type must be 'dc' or 'residential'",
+            });
+        }
+        // This is a public endpoint -- no auth required
+        try {
+            const reqHeaders = {
+                "User-Agent": "dominusnode-gemini/1.0.0",
+                "Content-Type": "application/json",
+            };
+            if (agentSecret) {
+                reqHeaders["X-DominusNode-Agent"] = "mcp";
+                reqHeaders["X-DominusNode-Agent-Secret"] = agentSecret;
+            }
+            const response = await fetch(`${baseUrl}/api/mpp/challenge`, {
+                method: "POST",
+                headers: reqHeaders,
+                body: JSON.stringify({ poolType }),
+                signal: AbortSignal.timeout(timeoutMs),
+                redirect: "error",
+            });
+            const responseText = await response.text();
+            if (responseText.length > MAX_RESPONSE_BYTES) {
+                return JSON.stringify({ error: "Response body exceeds size limit" });
+            }
+            if (!response.ok) {
+                let message;
+                try {
+                    const parsed = JSON.parse(responseText);
+                    message = parsed.error ?? parsed.message ?? responseText;
+                }
+                catch {
+                    message = responseText;
+                }
+                if (message.length > 500)
+                    message = message.slice(0, 500) + "... [truncated]";
+                return JSON.stringify({
+                    error: `MPP challenge failed: ${sanitizeError(message)}`,
+                });
+            }
+            const data = safeJsonParse(responseText);
+            return JSON.stringify(data);
+        }
+        catch (err) {
+            return JSON.stringify({
+                error: `MPP challenge failed: ${sanitizeError(err instanceof Error ? err.message : String(err))}`,
+            });
+        }
+    }
+    async function handlePayMpp(args) {
+        const amountCents = args.amount_cents;
+        const method = String(args.method ?? "");
+        if (!Number.isInteger(amountCents) ||
+            amountCents < 500 ||
+            amountCents > 100_000) {
+            return JSON.stringify({
+                error: "amount_cents must be an integer between 500 ($5) and 100,000 ($1,000)",
+            });
+        }
+        if (!["tempo", "stripe_spt", "lightning"].includes(method)) {
+            return JSON.stringify({
+                error: "method must be one of: tempo, stripe_spt, lightning",
+            });
+        }
+        const result = await api("POST", "/api/mpp/topup", { amountCents, method });
+        return JSON.stringify(result);
+    }
+    async function handleMppSessionOpen(args) {
+        const maxDepositCents = args.max_deposit_cents;
+        const method = String(args.method ?? "");
+        const poolType = String(args.pool_type ?? "dc");
+        if (!Number.isInteger(maxDepositCents) ||
+            maxDepositCents < 500 ||
+            maxDepositCents > 100_000) {
+            return JSON.stringify({
+                error: "max_deposit_cents must be an integer between 500 and 100,000",
+            });
+        }
+        if (!["tempo", "stripe_spt", "lightning"].includes(method)) {
+            return JSON.stringify({
+                error: "method must be one of: tempo, stripe_spt, lightning",
+            });
+        }
+        if (!["dc", "residential"].includes(poolType)) {
+            return JSON.stringify({
+                error: "pool_type must be one of: dc, residential",
+            });
+        }
+        const result = await api("POST", "/api/mpp/session/open", {
+            maxDepositCents,
+            method,
+            poolType,
+        });
+        return JSON.stringify(result);
+    }
+    async function handleMppSessionClose(args) {
+        const channelId = String(args.channel_id ?? "");
+        if (!channelId) {
+            return JSON.stringify({ error: "channel_id is required" });
+        }
+        const result = await api("POST", "/api/mpp/session/close", { channelId });
+        return JSON.stringify(result);
+    }
+    // -----------------------------------------------------------------------
     // Main handler
     // -----------------------------------------------------------------------
     return async function handler(name, args) {