@dominusnode/mastra-tools 1.0.1 → 1.2.0

package/CHANGELOG.md

@@ -0,0 +1,30 @@
+# Changelog
+
+## 1.1.0
+
+### Added
+- Stripe checkout top-up tool (`dominusnode_topup_stripe`) — create Stripe Checkout sessions ($5–$1,000)
+- Crypto top-up tool (`dominusnode_topup_crypto`) — NOWPayments invoices for BTC, ETH, LTC, XMR, ZEC, USDC, SOL, USDT, DAI, BNB, LINK ($5–$1,000)
+- `dominusnode_update_wallet_policy` tool — update daily limits and domain allowlists for agentic wallets
+- Comprehensive test suite: 167 tests covering SSRF protection (incl. DNS rebinding), input validation, credential scrubbing, payment response fields, and all 26 tools
+
+### Fixed
+- `topupCrypto`: use `Number.isFinite()` instead of `isNaN()` to correctly reject `NaN` and `Infinity` inputs
+
+## 1.0.1
+
+- Fix branding: replace "DomiNode" with "Dominus Node" throughout
+
+## 1.0.0 (2026-02-24)
+
+### Added
+
+- Initial release with 23 Mastra AI tools for Dominus Node proxy service
+- Proxied fetch with full SSRF protection, DNS rebinding, OFAC blocking, and credential scrubbing
+- Wallet balance and usage monitoring tools
+- Proxy configuration and active session listing
+- Agentic wallet management: create, fund, balance, list, transactions, freeze, unfreeze, delete
+- Team management: create, list, details, fund, create key, usage, update, update member role
+- PayPal top-up and x402 micropayment info tools
+- Full security suite: DNS rebinding protection, Teredo/6to4 IPv6 tunnel detection, IPv4-mapped/compatible IPv6 handling, hex/octal/decimal IP normalization, prototype pollution prevention
+- Comprehensive test suite covering SSRF, sanitization, OFAC, HTTP methods, validation, and all 23 tools

package/README.md

@@ -2,7 +2,7 @@
 
 Dominus Node rotating proxy tools for [Mastra AI](https://mastra.ai) agents.
 
-Provides 23 tools for interacting with Dominus Node's rotating proxy-as-a-service platform from Mastra AI workflows and agents.
+Provides 26 tools for interacting with Dominus Node's rotating proxy-as-a-service platform from Mastra AI workflows and agents.
 
 ## Installation
 
@@ -35,7 +35,7 @@ const balance = await toolkit.checkBalance();
 | `DOMINUSNODE_PROXY_HOST` | Proxy gateway host | `proxy.dominusnode.com` |
 | `DOMINUSNODE_PROXY_PORT` | Proxy gateway port | `8080` |
 
-## Available Tools (23)
+## Available Tools (26)
 
 ### Proxy Operations
 - `dominusnode_proxied_fetch` - Fetch a URL through the rotating proxy with geo-targeting
@@ -53,6 +53,7 @@ const balance = await toolkit.checkBalance();
 - `dominusnode_freeze_agentic_wallet` - Freeze an agentic wallet
 - `dominusnode_unfreeze_agentic_wallet` - Unfreeze an agentic wallet
 - `dominusnode_delete_agentic_wallet` - Delete an agentic wallet
+- `dominusnode_update_wallet_policy` - Update daily limits and domain restrictions
 
 ### Team Management
 - `dominusnode_create_team` - Create a team with shared wallet
@@ -65,7 +66,9 @@ const balance = await toolkit.checkBalance();
 - `dominusnode_update_team_member_role` - Change a member's role
 
 ### Payments
-- `dominusnode_topup_paypal` - Top up wallet via PayPal
+- `dominusnode_topup_paypal` - Top up wallet via PayPal ($5–$1,000)
+- `dominusnode_topup_stripe` - Top up wallet via Stripe ($5–$1,000)
+- `dominusnode_topup_crypto` - Top up wallet via crypto (BTC/ETH/LTC/XMR/ZEC/USDC/SOL/USDT/DAI/BNB/LINK)
 - `dominusnode_x402_info` - Get x402 micropayment protocol info
 
 ## Security

package/dist/index.d.ts

@@ -2,7 +2,7 @@
  * @dominusnode/mastra-tools
  *
  * Dominus Node rotating proxy tools for Mastra AI agents.
- * Provides 23 tools for proxy fetching, wallet management,
+ * Provides 26 tools for proxy fetching, wallet management,
  * team collaboration, and payment operations.
  *
  * @example
@@ -16,5 +16,5 @@
  * const tools = toolkit.getTools();
  * ```
  */
-export { DominusNodeToolkit, isPrivateIp, validateTargetUrl, validateCountry, validateUuid, normalizeIpv4, stripDangerousKeys, scrubCredentials, truncate, formatBytes, formatCents, } from "./toolkit.js";
+export { DominusNodeToolkit, isPrivateIp, validateTargetUrl, validateCountry, validateUuid, normalizeIpv4, stripDangerousKeys, scrubCredentials, truncate, formatBytes, formatCents, checkDnsRebinding, SANCTIONED_COUNTRIES, BLOCKED_HOSTNAMES, } from "./toolkit.js";
 export type { DominusNodeToolkitConfig } from "./toolkit.js";

package/dist/index.js

@@ -3,7 +3,7 @@
  * @dominusnode/mastra-tools
  *
  * Dominus Node rotating proxy tools for Mastra AI agents.
- * Provides 23 tools for proxy fetching, wallet management,
+ * Provides 26 tools for proxy fetching, wallet management,
  * team collaboration, and payment operations.
  *
  * @example
@@ -18,7 +18,7 @@
  * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.formatCents = exports.formatBytes = exports.truncate = exports.scrubCredentials = exports.stripDangerousKeys = exports.normalizeIpv4 = exports.validateUuid = exports.validateCountry = exports.validateTargetUrl = exports.isPrivateIp = exports.DominusNodeToolkit = void 0;
+exports.BLOCKED_HOSTNAMES = exports.SANCTIONED_COUNTRIES = exports.checkDnsRebinding = exports.formatCents = exports.formatBytes = exports.truncate = exports.scrubCredentials = exports.stripDangerousKeys = exports.normalizeIpv4 = exports.validateUuid = exports.validateCountry = exports.validateTargetUrl = exports.isPrivateIp = exports.DominusNodeToolkit = void 0;
 var toolkit_js_1 = require("./toolkit.js");
 Object.defineProperty(exports, "DominusNodeToolkit", { enumerable: true, get: function () { return toolkit_js_1.DominusNodeToolkit; } });
 // Security utilities (exported for testing)
@@ -32,3 +32,6 @@ Object.defineProperty(exports, "scrubCredentials", { enumerable: true, get: func
 Object.defineProperty(exports, "truncate", { enumerable: true, get: function () { return toolkit_js_1.truncate; } });
 Object.defineProperty(exports, "formatBytes", { enumerable: true, get: function () { return toolkit_js_1.formatBytes; } });
 Object.defineProperty(exports, "formatCents", { enumerable: true, get: function () { return toolkit_js_1.formatCents; } });
+Object.defineProperty(exports, "checkDnsRebinding", { enumerable: true, get: function () { return toolkit_js_1.checkDnsRebinding; } });
+Object.defineProperty(exports, "SANCTIONED_COUNTRIES", { enumerable: true, get: function () { return toolkit_js_1.SANCTIONED_COUNTRIES; } });
+Object.defineProperty(exports, "BLOCKED_HOSTNAMES", { enumerable: true, get: function () { return toolkit_js_1.BLOCKED_HOSTNAMES; } });

package/dist/toolkit.d.ts

@@ -1,7 +1,7 @@
 /**
  * Dominus Node Mastra AI Toolkit
  *
- * Implements 24 tools for interacting with Dominus Node's rotating proxy service
+ * Implements 26 tools for interacting with Dominus Node's rotating proxy service
  * from Mastra AI agents and workflows.
  *
  * Uses createTool() from @mastra/core/tools with Zod schemas.
@@ -16,6 +16,8 @@
  *  - 10 MB response cap, 30s timeout
  *  - Redirect following disabled
  */
+/** OFAC sanctioned countries -- must never be used as geo-targeting destinations. */
+export declare const SANCTIONED_COUNTRIES: Set<string>;
 export interface DominusNodeToolkitConfig {
     /** Dominus Node API key (dn_live_... or dn_test_...). Falls back to DOMINUSNODE_API_KEY env var. */
     apiKey?: string;
@@ -25,10 +27,13 @@ export interface DominusNodeToolkitConfig {
     proxyHost?: string;
     /** Port of the Dominus Node proxy gateway. */
     proxyPort?: number;
+    /** Optional agent secret for MCP agent auto-verification (bypasses reCAPTCHA). */
+    agentSecret?: string;
 }
 /** Remove any dn_live_* or dn_test_* tokens from error messages. */
 export declare function scrubCredentials(msg: string): string;
 export declare function truncate(text: string, max?: number): string;
+export declare const BLOCKED_HOSTNAMES: Set<string>;
 /**
  * Normalize non-standard IPv4 representations to dotted-decimal.
  * Handles: decimal integers (2130706433), hex (0x7f000001), octal octets (0177.0.0.1).
@@ -48,6 +53,10 @@ export declare function validateCountry(country: string | undefined): string | u
  * Validate a UUID string.
  */
 export declare function validateUuid(id: string, label: string): string;
+/**
+ * Resolve a hostname via DNS and verify none of the resolved IPs are private.
+ */
+export declare function checkDnsRebinding(hostname: string): Promise<void>;
 export declare function stripDangerousKeys(obj: unknown, depth?: number): void;
 export declare function formatBytes(bytes: number): string;
 export declare function formatCents(cents: number): string;
@@ -56,6 +65,7 @@ export declare class DominusNodeToolkit {
     private baseUrl;
     private proxyHost;
     private proxyPort;
+    private agentSecret?;
     private cachedJwt;
     private jwtExpiresAt;
     constructor(config?: DominusNodeToolkitConfig);
@@ -105,6 +115,9 @@ export declare class DominusNodeToolkit {
     updateTeam(teamId: string, name?: string, maxMembers?: number): Promise<Record<string, unknown>>;
     updateTeamMemberRole(teamId: string, userId: string, role: string): Promise<Record<string, unknown>>;
     topupPaypal(amountCents: number): Promise<Record<string, unknown>>;
+    topupStripe(amountCents: number): Promise<Record<string, unknown>>;
+    private static readonly VALID_CRYPTO_CURRENCIES;
+    topupCrypto(amountUsd: number, currency: string): Promise<Record<string, unknown>>;
     x402Info(): Promise<Record<string, unknown>>;
     getTools(): (import("@mastra/core/tools", { with: { "resolution-mode": "import" } }).Tool<{
         context: any;
@@ -237,7 +250,17 @@ export declare class DominusNodeToolkit {
     }, {
         error?: string | undefined;
         data?: unknown;
-    }, unknown, unknown, import("@mastra/core/tools", { with: { "resolution-mode": "import" } }).ToolExecutionContext<unknown, unknown, unknown>, "dominusnode_topup_paypal", unknown> | import("@mastra/core/tools", { with: { "resolution-mode": "import" } }).Tool<unknown, {
+    }, unknown, unknown, import("@mastra/core/tools", { with: { "resolution-mode": "import" } }).ToolExecutionContext<unknown, unknown, unknown>, "dominusnode_topup_paypal", unknown> | import("@mastra/core/tools", { with: { "resolution-mode": "import" } }).Tool<{
+        context: any;
+    }, {
+        error?: string | undefined;
+        data?: unknown;
+    }, unknown, unknown, import("@mastra/core/tools", { with: { "resolution-mode": "import" } }).ToolExecutionContext<unknown, unknown, unknown>, "dominusnode_topup_stripe", unknown> | import("@mastra/core/tools", { with: { "resolution-mode": "import" } }).Tool<{
+        context: any;
+    }, {
+        error?: string | undefined;
+        data?: unknown;
+    }, unknown, unknown, import("@mastra/core/tools", { with: { "resolution-mode": "import" } }).ToolExecutionContext<unknown, unknown, unknown>, "dominusnode_topup_crypto", unknown> | import("@mastra/core/tools", { with: { "resolution-mode": "import" } }).Tool<unknown, {
         error?: string | undefined;
         data?: unknown;
     }, unknown, unknown, import("@mastra/core/tools", { with: { "resolution-mode": "import" } }).ToolExecutionContext<unknown, unknown, unknown>, "dominusnode_x402_info", unknown>)[];

package/dist/toolkit.js

@@ -2,7 +2,7 @@
 /**
  * Dominus Node Mastra AI Toolkit
  *
- * Implements 24 tools for interacting with Dominus Node's rotating proxy service
+ * Implements 26 tools for interacting with Dominus Node's rotating proxy service
  * from Mastra AI agents and workflows.
  *
  * Uses createTool() from @mastra/core/tools with Zod schemas.
@@ -51,7 +51,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DominusNodeToolkit = void 0;
+exports.DominusNodeToolkit = exports.BLOCKED_HOSTNAMES = exports.SANCTIONED_COUNTRIES = void 0;
 exports.scrubCredentials = scrubCredentials;
 exports.truncate = truncate;
 exports.normalizeIpv4 = normalizeIpv4;
@@ -59,6 +59,7 @@ exports.isPrivateIp = isPrivateIp;
 exports.validateTargetUrl = validateTargetUrl;
 exports.validateCountry = validateCountry;
 exports.validateUuid = validateUuid;
+exports.checkDnsRebinding = checkDnsRebinding;
 exports.stripDangerousKeys = stripDangerousKeys;
 exports.formatBytes = formatBytes;
 exports.formatCents = formatCents;
@@ -75,7 +76,7 @@ const MAX_RESPONSE_CHARS = 4000;
 const REQUEST_TIMEOUT_MS = 30_000;
 const MAX_RESPONSE_BYTES = 10 * 1024 * 1024; // 10 MB hard cap
 /** OFAC sanctioned countries -- must never be used as geo-targeting destinations. */
-const SANCTIONED_COUNTRIES = new Set(["CU", "IR", "KP", "RU", "SY"]);
+exports.SANCTIONED_COUNTRIES = new Set(["CU", "IR", "KP", "RU", "SY"]);
 /** ISO 3166-1 alpha-2 country code pattern. */
 const COUNTRY_CODE_RE = /^[A-Z]{2}$/;
 /** UUID v4 pattern for wallet/team IDs. */
@@ -102,7 +103,7 @@ function truncate(text, max = MAX_RESPONSE_CHARS) {
 // ---------------------------------------------------------------------------
 // SSRF Protection
 // ---------------------------------------------------------------------------
-const BLOCKED_HOSTNAMES = new Set([
+exports.BLOCKED_HOSTNAMES = new Set([
     "localhost",
     "localhost.localdomain",
     "ip6-localhost",
@@ -261,7 +262,7 @@ function validateTargetUrl(url) {
         throw new Error("URLs with embedded credentials are not allowed");
     }
     const hostname = parsed.hostname.toLowerCase();
-    if (BLOCKED_HOSTNAMES.has(hostname)) {
+    if (exports.BLOCKED_HOSTNAMES.has(hostname)) {
         throw new Error("Requests to localhost/loopback addresses are blocked");
     }
     if (isPrivateIp(hostname)) {
@@ -291,7 +292,7 @@ function validateCountry(country) {
     if (!COUNTRY_CODE_RE.test(upper)) {
         throw new Error(`Invalid country code: "${country}". Must be a 2-letter ISO 3166-1 code.`);
     }
-    if (SANCTIONED_COUNTRIES.has(upper)) {
+    if (exports.SANCTIONED_COUNTRIES.has(upper)) {
         throw new Error(`Country "${upper}" is OFAC sanctioned and cannot be used as a proxy target.`);
     }
     return upper;
@@ -383,6 +384,7 @@ class DominusNodeToolkit {
     baseUrl;
     proxyHost;
     proxyPort;
+    agentSecret;
     cachedJwt = null;
     jwtExpiresAt = 0;
     constructor(config = {}) {
@@ -392,6 +394,7 @@ class DominusNodeToolkit {
         const portStr = config.proxyPort?.toString() || process.env.DOMINUSNODE_PROXY_PORT || "8080";
         const port = parseInt(portStr, 10);
         this.proxyPort = isNaN(port) || port < 1 || port > 65535 ? 8080 : port;
+        this.agentSecret = config.agentSecret || process.env.DOMINUSNODE_AGENT_SECRET;
     }
     // -----------------------------------------------------------------------
     // Authentication
@@ -411,12 +414,17 @@ class DominusNodeToolkit {
         if (this.cachedJwt && Date.now() < this.jwtExpiresAt)
             return this.cachedJwt;
         const apiKey = this.getApiKey();
+        const authHeaders = {
+            "Content-Type": "application/json",
+            "User-Agent": "dominusnode-mastra/1.0.0",
+        };
+        if (this.agentSecret) {
+            authHeaders["X-DominusNode-Agent"] = "mcp";
+            authHeaders["X-DominusNode-Agent-Secret"] = this.agentSecret;
+        }
         const res = await fetch(`${this.baseUrl}/api/auth/verify-key`, {
             method: "POST",
-            headers: {
-                "Content-Type": "application/json",
-                "User-Agent": "dominusnode-mastra/1.0.0",
-            },
+            headers: authHeaders,
             body: JSON.stringify({ apiKey }),
             redirect: "error",
         });
@@ -441,6 +449,10 @@ class DominusNodeToolkit {
             Accept: "application/json",
             "User-Agent": "dominusnode-mastra/1.0.0",
         };
+        if (this.agentSecret) {
+            headers["X-DominusNode-Agent"] = "mcp";
+            headers["X-DominusNode-Agent-Secret"] = this.agentSecret;
+        }
         const init = {
             method,
             headers,
@@ -839,11 +851,30 @@ class DominusNodeToolkit {
         }
         return this.apiPost("/api/wallet/topup/paypal", { amountCents });
     }
+    async topupStripe(amountCents) {
+        if (!Number.isInteger(amountCents) || amountCents < 500 || amountCents > 100000) {
+            throw new Error("amount_cents must be an integer between 500 ($5) and 100000 ($1,000).");
+        }
+        return this.apiPost("/api/wallet/topup/stripe", { amountCents });
+    }
+    static VALID_CRYPTO_CURRENCIES = new Set([
+        "btc", "eth", "ltc", "xmr", "zec", "usdc", "sol", "usdt", "dai", "bnb", "link",
+    ]);
+    async topupCrypto(amountUsd, currency) {
+        if (typeof amountUsd !== "number" || !Number.isFinite(amountUsd) || amountUsd < 5 || amountUsd > 1000) {
+            throw new Error("amount_usd must be a number between 5 and 1,000.");
+        }
+        const cur = String(currency ?? "").toLowerCase();
+        if (!DominusNodeToolkit.VALID_CRYPTO_CURRENCIES.has(cur)) {
+            throw new Error(`currency must be one of: ${[...DominusNodeToolkit.VALID_CRYPTO_CURRENCIES].join(", ")}.`);
+        }
+        return this.apiPost("/api/wallet/topup/crypto", { amountUsd, currency: cur });
+    }
     async x402Info() {
         return this.apiGet("/api/x402/info");
     }
     // -----------------------------------------------------------------------
-    // getTools() -- returns Mastra createTool() instances for all 24 tools
+    // getTools() -- returns Mastra createTool() instances for all 26 tools
     // -----------------------------------------------------------------------
     getTools() {
         return [
@@ -1345,7 +1376,54 @@ class DominusNodeToolkit {
                     }
                 },
             }),
-            // 24. x402_info
+            // 23. topup_stripe
+            (0, tools_1.createTool)({
+                id: "dominusnode_topup_stripe",
+                description: "Top up your Dominus Node wallet balance via Stripe. Creates a Stripe checkout session and returns " +
+                    "a checkout URL to complete payment. Minimum $5 (500 cents), maximum $1,000 (100000 cents).",
+                inputSchema: zod_1.z.object({
+                    amountCents: zod_1.z.number().int().min(500).max(100000)
+                        .describe("Amount in cents to top up (min 500 = $5, max 100000 = $1,000)"),
+                }),
+                outputSchema: zod_1.z.object({
+                    data: zod_1.z.unknown(),
+                    error: zod_1.z.string().optional(),
+                }),
+                execute: async ({ context }) => {
+                    try {
+                        return { data: await this.topupStripe(context.amountCents) };
+                    }
+                    catch (err) {
+                        return { data: null, error: safeError(err) };
+                    }
+                },
+            }),
+            // 24. topup_crypto
+            (0, tools_1.createTool)({
+                id: "dominusnode_topup_crypto",
+                description: "Top up your Dominus Node wallet balance via cryptocurrency. Creates a crypto payment invoice. " +
+                    "Supports BTC, ETH, LTC, XMR, ZEC, USDC, SOL, USDT, DAI, BNB, LINK. " +
+                    "Minimum $5, maximum $1,000.",
+                inputSchema: zod_1.z.object({
+                    amountUsd: zod_1.z.number().min(5).max(1000)
+                        .describe("Amount in USD to top up (5-1000)"),
+                    currency: zod_1.z.enum(["btc", "eth", "ltc", "xmr", "zec", "usdc", "sol", "usdt", "dai", "bnb", "link"])
+                        .describe("Cryptocurrency to pay with"),
+                }),
+                outputSchema: zod_1.z.object({
+                    data: zod_1.z.unknown(),
+                    error: zod_1.z.string().optional(),
+                }),
+                execute: async ({ context }) => {
+                    try {
+                        return { data: await this.topupCrypto(context.amountUsd, context.currency) };
+                    }
+                    catch (err) {
+                        return { data: null, error: safeError(err) };
+                    }
+                },
+            }),
+            // 26. x402_info
             (0, tools_1.createTool)({
                 id: "dominusnode_x402_info",
                 description: "Get x402 micropayment protocol information including supported " +

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dominusnode/mastra-tools",
-  "version": "1.0.1",
+  "version": "1.2.0",
   "description": "Dominus Node rotating proxy tools for Mastra AI",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -21,6 +21,7 @@
   "files": [
     "dist/",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "CHANGELOG.md"
   ]
 }