@dominusnode/openai-functions 1.1.0 → 1.3.0

package/dist/handler.js

@@ -1,6 +1,9 @@
 /**
  * Dominus Node OpenAI-compatible function calling handler (TypeScript).
  *
+ * 57 tools covering proxy, wallet, usage, account lifecycle, API keys,
+ * plans, and teams.
+ *
  * Provides a factory function that creates a handler for dispatching
  * OpenAI function calls to the Dominus Node REST API. Works with any
  * function-calling LLM system: OpenAI GPT, Anthropic Claude tool_use,
@@ -22,10 +25,63 @@
  *
  * @module
  */
+import * as crypto from "node:crypto";
 import dns from "dns/promises";
 import * as http from "node:http";
 import * as tls from "node:tls";
 // ---------------------------------------------------------------------------
+// SHA-256 Proof-of-Work solver
+// ---------------------------------------------------------------------------
+function countLeadingZeroBits(buf) {
+    let count = 0;
+    for (const byte of buf) {
+        if (byte === 0) {
+            count += 8;
+            continue;
+        }
+        let mask = 0x80;
+        while (mask && !(byte & mask)) {
+            count++;
+            mask >>= 1;
+        }
+        break;
+    }
+    return count;
+}
+async function solvePoW(baseUrl) {
+    try {
+        const resp = await fetch(`${baseUrl}/api/auth/pow/challenge`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            redirect: "error",
+        });
+        if (!resp.ok)
+            return null;
+        const text = await resp.text();
+        if (text.length > 10_485_760)
+            return null;
+        const challenge = JSON.parse(text);
+        const prefix = challenge.prefix ?? "";
+        const difficulty = challenge.difficulty ?? 20;
+        const challengeId = challenge.challengeId ?? "";
+        if (!prefix || !challengeId)
+            return null;
+        for (let nonce = 0; nonce < 100_000_000; nonce++) {
+            const hash = crypto
+                .createHash("sha256")
+                .update(prefix + nonce.toString())
+                .digest();
+            if (countLeadingZeroBits(hash) >= difficulty) {
+                return { challengeId, nonce: nonce.toString() };
+            }
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+// ---------------------------------------------------------------------------
 // SSRF Prevention -- URL validation
 // ---------------------------------------------------------------------------
 const BLOCKED_HOSTNAMES = new Set([
@@ -281,7 +337,7 @@ async function checkDnsRebinding(hostname) {
 // ---------------------------------------------------------------------------
 // Credential sanitization
 // ---------------------------------------------------------------------------
-const CREDENTIAL_RE = /dn_(live|test)_[a-zA-Z0-9]+/g;
+const CREDENTIAL_RE = /dn_(live|test|proxy)_[a-zA-Z0-9]+/g;
 function sanitizeError(message) {
     return message.replace(CREDENTIAL_RE, "***");
 }
@@ -501,8 +557,13 @@ export function createDominusNodeFunctionHandler(config) {
         try {
             // Strip security-sensitive headers from user-provided headers
             const BLOCKED_HEADERS = new Set([
-                "host", "connection", "content-length", "transfer-encoding",
-                "proxy-authorization", "authorization", "user-agent",
+                "host",
+                "connection",
+                "content-length",
+                "transfer-encoding",
+                "proxy-authorization",
+                "authorization",
+                "user-agent",
             ]);
             const safeHeaders = {};
             if (headers) {
@@ -533,13 +594,18 @@ export function createDominusNodeFunctionHandler(config) {
                 const timeout = setTimeout(() => reject(new Error("Proxy request timed out after 30000ms")), 30_000);
                 if (parsed.protocol === "https:") {
                     // HTTPS: CONNECT tunnel + TLS
-                    const connectHost = parsed.hostname.includes(":") ? `[${parsed.hostname}]` : parsed.hostname;
+                    const connectHost = parsed.hostname.includes(":")
+                        ? `[${parsed.hostname}]`
+                        : parsed.hostname;
                     const connectReq = http.request({
                         hostname: proxyHost,
                         port: proxyPort,
                         method: "CONNECT",
                         path: `${connectHost}:${parsed.port || 443}`,
-                        headers: { "Proxy-Authorization": proxyAuth, Host: `${connectHost}:${parsed.port || 443}` },
+                        headers: {
+                            "Proxy-Authorization": proxyAuth,
+                            Host: `${connectHost}:${parsed.port || 443}`,
+                        },
                     });
                     connectReq.on("connect", (_res, tunnelSocket) => {
                         if (_res.statusCode !== 200) {
@@ -583,7 +649,9 @@ export function createDominusNodeFunctionHandler(config) {
                                     return;
                                 }
                                 const headerSection = raw.substring(0, headerEnd);
-                                const body = raw.substring(headerEnd + 4).substring(0, MAX_BODY_BYTES);
+                                const body = raw
+                                    .substring(headerEnd + 4)
+                                    .substring(0, MAX_BODY_BYTES);
                                 const statusLine = headerSection.split("\r\n")[0];
                                 const statusMatch = statusLine.match(/^HTTP\/\d\.\d\s+(\d+)/);
                                 const status = statusMatch ? parseInt(statusMatch[1], 10) : 0;
@@ -591,18 +659,29 @@ export function createDominusNodeFunctionHandler(config) {
                                 for (const line of headerSection.split("\r\n").slice(1)) {
                                     const ci = line.indexOf(":");
                                     if (ci > 0)
-                                        headers[line.substring(0, ci).trim().toLowerCase()] = line.substring(ci + 1).trim();
+                                        headers[line.substring(0, ci).trim().toLowerCase()] = line
+                                            .substring(ci + 1)
+                                            .trim();
                                 }
                                 stripDangerousKeys(headers);
                                 resolve({ status, headers, body });
                             };
                             tlsSocket.on("end", finalize);
                             tlsSocket.on("close", finalize);
-                            tlsSocket.on("error", (err) => { clearTimeout(timeout); reject(err); });
+                            tlsSocket.on("error", (err) => {
+                                clearTimeout(timeout);
+                                reject(err);
+                            });
                         });
-                        tlsSocket.on("error", (err) => { clearTimeout(timeout); reject(err); });
+                        tlsSocket.on("error", (err) => {
+                            clearTimeout(timeout);
+                            reject(err);
+                        });
+                    });
+                    connectReq.on("error", (err) => {
+                        clearTimeout(timeout);
+                        reject(err);
                     });
-                    connectReq.on("error", (err) => { clearTimeout(timeout); reject(err); });
                     connectReq.end();
                 }
                 else {
@@ -612,19 +691,28 @@ export function createDominusNodeFunctionHandler(config) {
                         port: proxyPort,
                         method,
                         path: url,
-                        headers: { ...safeHeaders, "Proxy-Authorization": proxyAuth, Host: parsed.host },
+                        headers: {
+                            ...safeHeaders,
+                            "Proxy-Authorization": proxyAuth,
+                            Host: parsed.host,
+                        },
                     }, (res) => {
                         const chunks = [];
                         let byteCount = 0;
-                        res.on("data", (chunk) => { byteCount += chunk.length; if (byteCount <= MAX_BODY_BYTES)
-                            chunks.push(chunk); });
+                        res.on("data", (chunk) => {
+                            byteCount += chunk.length;
+                            if (byteCount <= MAX_BODY_BYTES)
+                                chunks.push(chunk);
+                        });
                         let httpFinalized = false;
                         const finalize = () => {
                             if (httpFinalized)
                                 return;
                             httpFinalized = true;
                             clearTimeout(timeout);
-                            const body = Buffer.concat(chunks).toString("utf-8").substring(0, MAX_BODY_BYTES);
+                            const body = Buffer.concat(chunks)
+                                .toString("utf-8")
+                                .substring(0, MAX_BODY_BYTES);
                             const headers = {};
                             for (const [k, v] of Object.entries(res.headers)) {
                                 if (v)
@@ -635,9 +723,15 @@ export function createDominusNodeFunctionHandler(config) {
                         };
                         res.on("end", finalize);
                         res.on("close", finalize);
-                        res.on("error", (err) => { clearTimeout(timeout); reject(err); });
+                        res.on("error", (err) => {
+                            clearTimeout(timeout);
+                            reject(err);
+                        });
+                    });
+                    req.on("error", (err) => {
+                        clearTimeout(timeout);
+                        reject(err);
                     });
-                    req.on("error", (err) => { clearTimeout(timeout); reject(err); });
                     req.end();
                 }
             });
@@ -677,13 +771,17 @@ export function createDominusNodeFunctionHandler(config) {
         const label = args.label;
         const spendingLimitCents = args.spending_limit_cents;
         if (!label || typeof label !== "string") {
-            return JSON.stringify({ error: "label is required and must be a string" });
+            return JSON.stringify({
+                error: "label is required and must be a string",
+            });
         }
         if (label.length > 100) {
             return JSON.stringify({ error: "label must be 100 characters or fewer" });
         }
         if (/[\x00-\x1f\x7f]/.test(label)) {
-            return JSON.stringify({ error: "label contains invalid control characters" });
+            return JSON.stringify({
+                error: "label contains invalid control characters",
+            });
         }
         if (!Number.isInteger(spendingLimitCents) ||
             spendingLimitCents <= 0 ||
@@ -699,7 +797,9 @@ export function createDominusNodeFunctionHandler(config) {
         // Optional daily_limit_cents
         if (args.daily_limit_cents !== undefined) {
             const dailyLimit = args.daily_limit_cents;
-            if (!Number.isInteger(dailyLimit) || dailyLimit < 1 || dailyLimit > 1_000_000) {
+            if (!Number.isInteger(dailyLimit) ||
+                dailyLimit < 1 ||
+                dailyLimit > 1_000_000) {
                 return JSON.stringify({
                     error: "daily_limit_cents must be an integer between 1 and 1,000,000",
                 });
@@ -710,18 +810,26 @@ export function createDominusNodeFunctionHandler(config) {
         if (args.allowed_domains !== undefined) {
             const domains = args.allowed_domains;
             if (!Array.isArray(domains)) {
-                return JSON.stringify({ error: "allowed_domains must be an array of strings" });
+                return JSON.stringify({
+                    error: "allowed_domains must be an array of strings",
+                });
             }
             if (domains.length > 100) {
-                return JSON.stringify({ error: "allowed_domains must have 100 or fewer entries" });
+                return JSON.stringify({
+                    error: "allowed_domains must have 100 or fewer entries",
+                });
             }
             const domainRe = /^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?)*$/;
             for (const d of domains) {
                 if (typeof d !== "string") {
-                    return JSON.stringify({ error: "Each allowed_domains entry must be a string" });
+                    return JSON.stringify({
+                        error: "Each allowed_domains entry must be a string",
+                    });
                 }
                 if (d.length > 253) {
-                    return JSON.stringify({ error: "Each allowed_domains entry must be 253 characters or fewer" });
+                    return JSON.stringify({
+                        error: "Each allowed_domains entry must be 253 characters or fewer",
+                    });
                 }
                 if (!domainRe.test(d)) {
                     return JSON.stringify({ error: `Invalid domain format: ${d}` });
@@ -736,7 +844,9 @@ export function createDominusNodeFunctionHandler(config) {
         const walletId = args.wallet_id;
         const amountCents = args.amount_cents;
         if (!walletId || typeof walletId !== "string") {
-            return JSON.stringify({ error: "wallet_id is required and must be a string" });
+            return JSON.stringify({
+                error: "wallet_id is required and must be a string",
+            });
         }
         if (!Number.isInteger(amountCents) ||
             amountCents <= 0 ||
@@ -751,7 +861,9 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleAgenticWalletBalance(args) {
         const walletId = args.wallet_id;
         if (!walletId || typeof walletId !== "string") {
-            return JSON.stringify({ error: "wallet_id is required and must be a string" });
+            return JSON.stringify({
+                error: "wallet_id is required and must be a string",
+            });
         }
         const result = await api("GET", `/api/agent-wallet/${encodeURIComponent(walletId)}`);
         return JSON.stringify(result);
@@ -763,13 +875,17 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleAgenticTransactions(args) {
         const walletId = args.wallet_id;
         if (!walletId || typeof walletId !== "string") {
-            return JSON.stringify({ error: "wallet_id is required and must be a string" });
+            return JSON.stringify({
+                error: "wallet_id is required and must be a string",
+            });
         }
         const limit = args.limit;
         const params = new URLSearchParams();
         if (limit !== undefined) {
             if (!Number.isInteger(limit) || limit < 1 || limit > 100) {
-                return JSON.stringify({ error: "limit must be an integer between 1 and 100" });
+                return JSON.stringify({
+                    error: "limit must be an integer between 1 and 100",
+                });
             }
             params.set("limit", String(limit));
         }
@@ -780,7 +896,9 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleFreezeAgenticWallet(args) {
         const walletId = args.wallet_id;
         if (!walletId || typeof walletId !== "string") {
-            return JSON.stringify({ error: "wallet_id is required and must be a string" });
+            return JSON.stringify({
+                error: "wallet_id is required and must be a string",
+            });
         }
         const result = await api("POST", `/api/agent-wallet/${encodeURIComponent(walletId)}/freeze`);
         return JSON.stringify(result);
@@ -788,7 +906,9 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleUnfreezeAgenticWallet(args) {
         const walletId = args.wallet_id;
         if (!walletId || typeof walletId !== "string") {
-            return JSON.stringify({ error: "wallet_id is required and must be a string" });
+            return JSON.stringify({
+                error: "wallet_id is required and must be a string",
+            });
         }
         const result = await api("POST", `/api/agent-wallet/${encodeURIComponent(walletId)}/unfreeze`);
         return JSON.stringify(result);
@@ -796,7 +916,9 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleDeleteAgenticWallet(args) {
         const walletId = args.wallet_id;
         if (!walletId || typeof walletId !== "string") {
-            return JSON.stringify({ error: "wallet_id is required and must be a string" });
+            return JSON.stringify({
+                error: "wallet_id is required and must be a string",
+            });
         }
         const result = await api("DELETE", `/api/agent-wallet/${encodeURIComponent(walletId)}`);
         return JSON.stringify(result);
@@ -810,13 +932,17 @@ export function createDominusNodeFunctionHandler(config) {
             return JSON.stringify({ error: "name must be 100 characters or fewer" });
         }
         if (/[\x00-\x1f\x7f]/.test(name)) {
-            return JSON.stringify({ error: "name contains invalid control characters" });
+            return JSON.stringify({
+                error: "name contains invalid control characters",
+            });
         }
         const body = { name };
         if (args.max_members !== undefined) {
             const maxMembers = Number(args.max_members);
             if (!Number.isInteger(maxMembers) || maxMembers < 1 || maxMembers > 100) {
-                return JSON.stringify({ error: "max_members must be an integer between 1 and 100" });
+                return JSON.stringify({
+                    error: "max_members must be an integer between 1 and 100",
+                });
             }
             body.maxMembers = maxMembers;
         }
@@ -830,7 +956,9 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleTeamDetails(args) {
         const teamId = args.team_id;
         if (!teamId || typeof teamId !== "string") {
-            return JSON.stringify({ error: "team_id is required and must be a string" });
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
         }
         const result = await api("GET", `/api/teams/${encodeURIComponent(teamId)}`);
         return JSON.stringify(result);
@@ -839,7 +967,9 @@ export function createDominusNodeFunctionHandler(config) {
         const teamId = args.team_id;
         const amountCents = args.amount_cents;
         if (!teamId || typeof teamId !== "string") {
-            return JSON.stringify({ error: "team_id is required and must be a string" });
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
         }
         if (!Number.isInteger(amountCents) ||
             amountCents < 100 ||
@@ -855,16 +985,22 @@ export function createDominusNodeFunctionHandler(config) {
         const teamId = args.team_id;
         const label = args.label;
         if (!teamId || typeof teamId !== "string") {
-            return JSON.stringify({ error: "team_id is required and must be a string" });
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
         }
         if (!label || typeof label !== "string") {
-            return JSON.stringify({ error: "label is required and must be a string" });
+            return JSON.stringify({
+                error: "label is required and must be a string",
+            });
         }
         if (label.length > 100) {
             return JSON.stringify({ error: "label must be 100 characters or fewer" });
         }
         if (/[\x00-\x1f\x7f]/.test(label)) {
-            return JSON.stringify({ error: "label contains invalid control characters" });
+            return JSON.stringify({
+                error: "label contains invalid control characters",
+            });
         }
         const result = await api("POST", `/api/teams/${encodeURIComponent(teamId)}/keys`, { label });
         return JSON.stringify(result);
@@ -872,13 +1008,17 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleTeamUsage(args) {
         const teamId = args.team_id;
         if (!teamId || typeof teamId !== "string") {
-            return JSON.stringify({ error: "team_id is required and must be a string" });
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
         }
         const limit = args.limit;
         const params = new URLSearchParams();
         if (limit !== undefined) {
             if (!Number.isInteger(limit) || limit < 1 || limit > 100) {
-                return JSON.stringify({ error: "limit must be an integer between 1 and 100" });
+                return JSON.stringify({
+                    error: "limit must be an integer between 1 and 100",
+                });
             }
             params.set("limit", String(limit));
         }
@@ -889,7 +1029,9 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleUpdateTeam(args) {
         const teamId = args.team_id;
         if (!teamId || typeof teamId !== "string") {
-            return JSON.stringify({ error: "team_id is required and must be a string" });
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
         }
         if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
             return JSON.stringify({ error: "team_id must be a valid UUID" });
@@ -901,22 +1043,30 @@ export function createDominusNodeFunctionHandler(config) {
                 return JSON.stringify({ error: "name must be a non-empty string" });
             }
             if (name.length > 100) {
-                return JSON.stringify({ error: "name must be 100 characters or fewer" });
+                return JSON.stringify({
+                    error: "name must be 100 characters or fewer",
+                });
             }
             if (/[\x00-\x1f\x7f]/.test(name)) {
-                return JSON.stringify({ error: "name contains invalid control characters" });
+                return JSON.stringify({
+                    error: "name contains invalid control characters",
+                });
             }
             body.name = name;
         }
         if (args.max_members !== undefined) {
             const maxMembers = Number(args.max_members);
             if (!Number.isInteger(maxMembers) || maxMembers < 1 || maxMembers > 100) {
-                return JSON.stringify({ error: "max_members must be an integer between 1 and 100" });
+                return JSON.stringify({
+                    error: "max_members must be an integer between 1 and 100",
+                });
             }
             body.maxMembers = maxMembers;
         }
         if (Object.keys(body).length === 0) {
-            return JSON.stringify({ error: "At least one of name or max_members must be provided" });
+            return JSON.stringify({
+                error: "At least one of name or max_members must be provided",
+            });
         }
         const result = await api("PATCH", `/api/teams/${encodeURIComponent(teamId)}`, body);
         return JSON.stringify(result);
@@ -930,7 +1080,9 @@ export function createDominusNodeFunctionHandler(config) {
                 error: "amount_cents must be an integer between 500 ($5) and 100,000 ($1,000)",
             });
         }
-        const result = await api("POST", "/api/wallet/topup/paypal", { amountCents });
+        const result = await api("POST", "/api/wallet/topup/paypal", {
+            amountCents,
+        });
         return JSON.stringify(result);
     }
     async function handleTopupStripe(args) {
@@ -942,21 +1094,38 @@ export function createDominusNodeFunctionHandler(config) {
                 error: "amount_cents must be an integer between 500 ($5) and 100,000 ($1,000)",
             });
         }
-        const result = await api("POST", "/api/wallet/topup/stripe", { amountCents });
+        const result = await api("POST", "/api/wallet/topup/stripe", {
+            amountCents,
+        });
         return JSON.stringify(result);
     }
     async function handleTopupCrypto(args) {
         const amountUsd = args.amount_usd;
         const currency = args.currency;
-        if (typeof amountUsd !== "number" || !Number.isFinite(amountUsd) || amountUsd < 5 || amountUsd > 1000) {
+        if (typeof amountUsd !== "number" ||
+            !Number.isFinite(amountUsd) ||
+            amountUsd < 5 ||
+            amountUsd > 1000) {
             return JSON.stringify({
                 error: "amount_usd must be a number between 5 and 1,000",
             });
         }
         const validCurrencies = new Set([
-            "BTC", "ETH", "LTC", "XMR", "ZEC", "USDC", "SOL", "USDT", "DAI", "BNB", "LINK",
+            "BTC",
+            "ETH",
+            "LTC",
+            "XMR",
+            "ZEC",
+            "USDC",
+            "SOL",
+            "USDT",
+            "DAI",
+            "BNB",
+            "LINK",
         ]);
-        if (!currency || typeof currency !== "string" || !validCurrencies.has(currency.toUpperCase())) {
+        if (!currency ||
+            typeof currency !== "string" ||
+            !validCurrencies.has(currency.toUpperCase())) {
             return JSON.stringify({
                 error: "currency must be one of: BTC, ETH, LTC, XMR, ZEC, USDC, SOL, USDT, DAI, BNB, LINK",
             });
@@ -970,7 +1139,9 @@ export function createDominusNodeFunctionHandler(config) {
     async function handleUpdateWalletPolicy(args) {
         const walletId = args.wallet_id;
         if (!walletId || typeof walletId !== "string") {
-            return JSON.stringify({ error: "wallet_id is required and must be a string" });
+            return JSON.stringify({
+                error: "wallet_id is required and must be a string",
+            });
         }
         if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(walletId)) {
             return JSON.stringify({ error: "wallet_id must be a valid UUID" });
@@ -983,7 +1154,9 @@ export function createDominusNodeFunctionHandler(config) {
             }
             else {
                 const dailyLimit = args.daily_limit_cents;
-                if (!Number.isInteger(dailyLimit) || dailyLimit < 1 || dailyLimit > 1_000_000) {
+                if (!Number.isInteger(dailyLimit) ||
+                    dailyLimit < 1 ||
+                    dailyLimit > 1_000_000) {
                     return JSON.stringify({
                         error: "daily_limit_cents must be an integer between 1 and 1,000,000 (or null to remove)",
                     });
@@ -999,18 +1172,26 @@ export function createDominusNodeFunctionHandler(config) {
             else {
                 const domains = args.allowed_domains;
                 if (!Array.isArray(domains)) {
-                    return JSON.stringify({ error: "allowed_domains must be an array of strings or null" });
+                    return JSON.stringify({
+                        error: "allowed_domains must be an array of strings or null",
+                    });
                 }
                 if (domains.length > 100) {
-                    return JSON.stringify({ error: "allowed_domains must have 100 or fewer entries" });
+                    return JSON.stringify({
+                        error: "allowed_domains must have 100 or fewer entries",
+                    });
                 }
                 const domainRe = /^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?)*$/;
                 for (const d of domains) {
                     if (typeof d !== "string") {
-                        return JSON.stringify({ error: "Each allowed_domains entry must be a string" });
+                        return JSON.stringify({
+                            error: "Each allowed_domains entry must be a string",
+                        });
                     }
                     if (d.length > 253) {
-                        return JSON.stringify({ error: "Each allowed_domains entry must be 253 characters or fewer" });
+                        return JSON.stringify({
+                            error: "Each allowed_domains entry must be 253 characters or fewer",
+                        });
                     }
                     if (!domainRe.test(d)) {
                         return JSON.stringify({ error: `Invalid domain format: ${d}` });
@@ -1020,7 +1201,9 @@ export function createDominusNodeFunctionHandler(config) {
             }
         }
         if (Object.keys(body).length === 0) {
-            return JSON.stringify({ error: "At least one of daily_limit_cents or allowed_domains must be provided" });
+            return JSON.stringify({
+                error: "At least one of daily_limit_cents or allowed_domains must be provided",
+            });
         }
         const result = await api("PATCH", `/api/agent-wallet/${encodeURIComponent(walletId)}/policy`, body);
         return JSON.stringify(result);
@@ -1030,13 +1213,17 @@ export function createDominusNodeFunctionHandler(config) {
         const userId = args.user_id;
         const role = args.role;
         if (!teamId || typeof teamId !== "string") {
-            return JSON.stringify({ error: "team_id is required and must be a string" });
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
         }
         if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
             return JSON.stringify({ error: "team_id must be a valid UUID" });
         }
         if (!userId || typeof userId !== "string") {
-            return JSON.stringify({ error: "user_id is required and must be a string" });
+            return JSON.stringify({
+                error: "user_id is required and must be a string",
+            });
         }
         if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(userId)) {
             return JSON.stringify({ error: "user_id must be a valid UUID" });
@@ -1051,14 +1238,552 @@ export function createDominusNodeFunctionHandler(config) {
         return JSON.stringify(result);
     }
     // -----------------------------------------------------------------------
+    // Proxy extended
+    // -----------------------------------------------------------------------
+    async function handleGetProxyStatus() {
+        const result = await api("GET", "/api/proxy/status");
+        return JSON.stringify(result);
+    }
+    // -----------------------------------------------------------------------
+    // Wallet extended
+    // -----------------------------------------------------------------------
+    async function handleGetTransactions(args) {
+        const params = new URLSearchParams();
+        if (args.limit !== undefined) {
+            const limit = args.limit;
+            if (!Number.isInteger(limit) || limit < 1 || limit > 100) {
+                return JSON.stringify({
+                    error: "limit must be an integer between 1 and 100",
+                });
+            }
+            params.set("limit", String(limit));
+        }
+        const qs = params.toString();
+        const result = await api("GET", `/api/wallet/transactions${qs ? `?${qs}` : ""}`);
+        return JSON.stringify(result);
+    }
+    async function handleGetForecast() {
+        const result = await api("GET", "/api/wallet/forecast");
+        return JSON.stringify(result);
+    }
+    async function handleCheckPayment(args) {
+        const invoiceId = args.invoice_id;
+        if (!invoiceId || typeof invoiceId !== "string") {
+            return JSON.stringify({
+                error: "invoice_id is required and must be a string",
+            });
+        }
+        const result = await api("GET", `/api/wallet/topup/crypto/${encodeURIComponent(invoiceId)}/status`);
+        return JSON.stringify(result);
+    }
+    // -----------------------------------------------------------------------
+    // Usage extended
+    // -----------------------------------------------------------------------
+    async function handleGetDailyUsage(args) {
+        const days = args.days ?? 30;
+        if (!Number.isInteger(days) || days < 1 || days > 90) {
+            return JSON.stringify({
+                error: "days must be an integer between 1 and 90",
+            });
+        }
+        const params = new URLSearchParams({ days: String(days) });
+        const result = await api("GET", `/api/usage/daily?${params.toString()}`);
+        return JSON.stringify(result);
+    }
+    async function handleGetTopHosts(args) {
+        const params = new URLSearchParams();
+        if (args.limit !== undefined) {
+            const limit = args.limit;
+            if (!Number.isInteger(limit) || limit < 1 || limit > 50) {
+                return JSON.stringify({
+                    error: "limit must be an integer between 1 and 50",
+                });
+            }
+            params.set("limit", String(limit));
+        }
+        const qs = params.toString();
+        const result = await api("GET", `/api/usage/top-hosts${qs ? `?${qs}` : ""}`);
+        return JSON.stringify(result);
+    }
+    // -----------------------------------------------------------------------
+    // Account lifecycle
+    // -----------------------------------------------------------------------
+    async function handleRegister(args) {
+        const email = args.email;
+        const password = args.password;
+        if (!email || typeof email !== "string") {
+            return JSON.stringify({
+                error: "email is required and must be a string",
+            });
+        }
+        if (!/^[^@]+@[^@]+\.[^@]+$/.test(email)) {
+            return JSON.stringify({ error: "email must be a valid email address" });
+        }
+        if (!password || typeof password !== "string") {
+            return JSON.stringify({
+                error: "password is required and must be a string",
+            });
+        }
+        if (password.length < 8 || password.length > 128) {
+            return JSON.stringify({
+                error: "password must be between 8 and 128 characters",
+            });
+        }
+        const headers = {
+            "User-Agent": "dominusnode-openai-functions/1.0.0",
+            "Content-Type": "application/json",
+        };
+        if (agentSecret) {
+            headers["X-DominusNode-Agent"] = "mcp";
+            headers["X-DominusNode-Agent-Secret"] = agentSecret;
+        }
+        // Solve PoW for CAPTCHA-free registration
+        const pow = await solvePoW(baseUrl);
+        const regBody = { email, password };
+        if (pow)
+            regBody.pow = pow;
+        const response = await fetch(`${baseUrl}/api/auth/register`, {
+            method: "POST",
+            headers,
+            body: JSON.stringify(regBody),
+            signal: AbortSignal.timeout(timeoutMs),
+            redirect: "error",
+        });
+        const text = await response.text();
+        if (text.length > MAX_RESPONSE_BYTES) {
+            return JSON.stringify({ error: "Response body exceeds size limit" });
+        }
+        if (!response.ok) {
+            let message;
+            try {
+                const parsed = JSON.parse(text);
+                message = parsed.error ?? parsed.message ?? text;
+            }
+            catch {
+                message = text;
+            }
+            if (message.length > 500)
+                message = message.slice(0, 500) + "... [truncated]";
+            return JSON.stringify({
+                error: `Registration failed: ${sanitizeError(message)}`,
+            });
+        }
+        const data = safeJsonParse(text);
+        stripDangerousKeys(data);
+        return JSON.stringify({
+            userId: data.userId,
+            email: data.email,
+            message: data.message,
+        });
+    }
+    async function handleLogin(args) {
+        const email = args.email;
+        const password = args.password;
+        if (!email || typeof email !== "string") {
+            return JSON.stringify({
+                error: "email is required and must be a string",
+            });
+        }
+        if (!/^[^@]+@[^@]+\.[^@]+$/.test(email)) {
+            return JSON.stringify({ error: "email must be a valid email address" });
+        }
+        if (!password || typeof password !== "string") {
+            return JSON.stringify({
+                error: "password is required and must be a string",
+            });
+        }
+        if (password.length < 8 || password.length > 128) {
+            return JSON.stringify({
+                error: "password must be between 8 and 128 characters",
+            });
+        }
+        const headers = {
+            "User-Agent": "dominusnode-openai-functions/1.0.0",
+            "Content-Type": "application/json",
+        };
+        if (agentSecret) {
+            headers["X-DominusNode-Agent"] = "mcp";
+            headers["X-DominusNode-Agent-Secret"] = agentSecret;
+        }
+        const response = await fetch(`${baseUrl}/api/auth/login`, {
+            method: "POST",
+            headers,
+            body: JSON.stringify({ email, password }),
+            signal: AbortSignal.timeout(timeoutMs),
+            redirect: "error",
+        });
+        const text = await response.text();
+        if (text.length > MAX_RESPONSE_BYTES) {
+            return JSON.stringify({ error: "Response body exceeds size limit" });
+        }
+        if (!response.ok) {
+            let message;
+            try {
+                const parsed = JSON.parse(text);
+                message = parsed.error ?? parsed.message ?? text;
+            }
+            catch {
+                message = text;
+            }
+            if (message.length > 500)
+                message = message.slice(0, 500) + "... [truncated]";
+            return JSON.stringify({
+                error: `Login failed: ${sanitizeError(message)}`,
+            });
+        }
+        const data = safeJsonParse(text);
+        stripDangerousKeys(data);
+        return JSON.stringify({ token: data.token, message: data.message });
+    }
+    async function handleGetAccountInfo() {
+        const result = await api("GET", "/api/auth/me");
+        return JSON.stringify(result);
+    }
+    async function handleVerifyEmail(args) {
+        const token = args.token;
+        if (!token || typeof token !== "string") {
+            return JSON.stringify({
+                error: "token is required and must be a string",
+            });
+        }
+        const headers = {
+            "User-Agent": "dominusnode-openai-functions/1.0.0",
+            "Content-Type": "application/json",
+        };
+        if (agentSecret) {
+            headers["X-DominusNode-Agent"] = "mcp";
+            headers["X-DominusNode-Agent-Secret"] = agentSecret;
+        }
+        const response = await fetch(`${baseUrl}/api/auth/verify-email`, {
+            method: "POST",
+            headers,
+            body: JSON.stringify({ token }),
+            signal: AbortSignal.timeout(timeoutMs),
+            redirect: "error",
+        });
+        const text = await response.text();
+        if (text.length > MAX_RESPONSE_BYTES) {
+            return JSON.stringify({ error: "Response body exceeds size limit" });
+        }
+        if (!response.ok) {
+            let message;
+            try {
+                const parsed = JSON.parse(text);
+                message = parsed.error ?? parsed.message ?? text;
+            }
+            catch {
+                message = text;
+            }
+            if (message.length > 500)
+                message = message.slice(0, 500) + "... [truncated]";
+            return JSON.stringify({
+                error: `Email verification failed: ${sanitizeError(message)}`,
+            });
+        }
+        const data = safeJsonParse(text);
+        stripDangerousKeys(data);
+        return JSON.stringify(data);
+    }
+    async function handleResendVerification() {
+        const result = await api("POST", "/api/auth/resend-verification");
+        return JSON.stringify(result);
+    }
+    async function handleUpdatePassword(args) {
+        const currentPassword = args.current_password;
+        const newPassword = args.new_password;
+        if (!currentPassword || typeof currentPassword !== "string") {
+            return JSON.stringify({
+                error: "current_password is required and must be a string",
+            });
+        }
+        if (!newPassword || typeof newPassword !== "string") {
+            return JSON.stringify({
+                error: "new_password is required and must be a string",
+            });
+        }
+        if (newPassword.length < 8 || newPassword.length > 128) {
+            return JSON.stringify({
+                error: "new_password must be between 8 and 128 characters",
+            });
+        }
+        const result = await api("POST", "/api/auth/change-password", {
+            currentPassword,
+            newPassword,
+        });
+        return JSON.stringify(result);
+    }
+    // -----------------------------------------------------------------------
+    // API Keys
+    // -----------------------------------------------------------------------
+    async function handleListKeys() {
+        const result = await api("GET", "/api/keys");
+        return JSON.stringify(result);
+    }
+    async function handleCreateKey(args) {
+        const label = args.label;
+        if (!label || typeof label !== "string") {
+            return JSON.stringify({
+                error: "label is required and must be a string",
+            });
+        }
+        if (label.length > 100) {
+            return JSON.stringify({ error: "label must be 100 characters or fewer" });
+        }
+        if (/[\x00-\x1f\x7f]/.test(label)) {
+            return JSON.stringify({
+                error: "label contains invalid control characters",
+            });
+        }
+        const result = await api("POST", "/api/keys", { label });
+        return JSON.stringify(result);
+    }
+    async function handleRevokeKey(args) {
+        const keyId = args.key_id;
+        if (!keyId || typeof keyId !== "string") {
+            return JSON.stringify({
+                error: "key_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(keyId)) {
+            return JSON.stringify({ error: "key_id must be a valid UUID" });
+        }
+        const result = await api("DELETE", `/api/keys/${encodeURIComponent(keyId)}`);
+        return JSON.stringify(result);
+    }
+    // -----------------------------------------------------------------------
+    // Plans
+    // -----------------------------------------------------------------------
+    async function handleGetPlan() {
+        const result = await api("GET", "/api/plans/user/plan");
+        return JSON.stringify(result);
+    }
+    async function handleListPlans() {
+        const result = await api("GET", "/api/plans");
+        return JSON.stringify(result);
+    }
+    async function handleChangePlan(args) {
+        const planId = args.plan_id;
+        if (!planId || typeof planId !== "string") {
+            return JSON.stringify({
+                error: "plan_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(planId)) {
+            return JSON.stringify({ error: "plan_id must be a valid UUID" });
+        }
+        const result = await api("PUT", "/api/plans/user/plan", { planId });
+        return JSON.stringify(result);
+    }
+    // -----------------------------------------------------------------------
+    // Teams extended
+    // -----------------------------------------------------------------------
+    async function handleTeamDelete(args) {
+        const teamId = args.team_id;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        const result = await api("DELETE", `/api/teams/${encodeURIComponent(teamId)}`);
+        return JSON.stringify(result);
+    }
+    async function handleTeamRevokeKey(args) {
+        const teamId = args.team_id;
+        const keyId = args.key_id;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        if (!keyId || typeof keyId !== "string") {
+            return JSON.stringify({
+                error: "key_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(keyId)) {
+            return JSON.stringify({ error: "key_id must be a valid UUID" });
+        }
+        const result = await api("DELETE", `/api/teams/${encodeURIComponent(teamId)}/keys/${encodeURIComponent(keyId)}`);
+        return JSON.stringify(result);
+    }
+    async function handleTeamListKeys(args) {
+        const teamId = args.team_id;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        const result = await api("GET", `/api/teams/${encodeURIComponent(teamId)}/keys`);
+        return JSON.stringify(result);
+    }
+    async function handleTeamListMembers(args) {
+        const teamId = args.team_id;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        const result = await api("GET", `/api/teams/${encodeURIComponent(teamId)}/members`);
+        return JSON.stringify(result);
+    }
+    async function handleTeamAddMember(args) {
+        const teamId = args.team_id;
+        const userId = args.user_id;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        if (!userId || typeof userId !== "string") {
+            return JSON.stringify({
+                error: "user_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(userId)) {
+            return JSON.stringify({ error: "user_id must be a valid UUID" });
+        }
+        const result = await api("POST", `/api/teams/${encodeURIComponent(teamId)}/members`, { userId });
+        return JSON.stringify(result);
+    }
+    async function handleTeamRemoveMember(args) {
+        const teamId = args.team_id;
+        const userId = args.user_id;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        if (!userId || typeof userId !== "string") {
+            return JSON.stringify({
+                error: "user_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(userId)) {
+            return JSON.stringify({ error: "user_id must be a valid UUID" });
+        }
+        const result = await api("DELETE", `/api/teams/${encodeURIComponent(teamId)}/members/${encodeURIComponent(userId)}`);
+        return JSON.stringify(result);
+    }
+    async function handleTeamInviteMember(args) {
+        const teamId = args.team_id;
+        const email = args.email;
+        const role = args.role;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        if (!email || typeof email !== "string") {
+            return JSON.stringify({
+                error: "email is required and must be a string",
+            });
+        }
+        if (!/^[^@]+@[^@]+\.[^@]+$/.test(email)) {
+            return JSON.stringify({ error: "email must be a valid email address" });
+        }
+        if (!role || typeof role !== "string") {
+            return JSON.stringify({ error: "role is required and must be a string" });
+        }
+        if (role !== "member" && role !== "admin") {
+            return JSON.stringify({ error: "role must be 'member' or 'admin'" });
+        }
+        const result = await api("POST", `/api/teams/${encodeURIComponent(teamId)}/invites`, { email, role });
+        return JSON.stringify(result);
+    }
+    async function handleTeamListInvites(args) {
+        const teamId = args.team_id;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        const result = await api("GET", `/api/teams/${encodeURIComponent(teamId)}/invites`);
+        return JSON.stringify(result);
+    }
+    async function handleTeamCancelInvite(args) {
+        const teamId = args.team_id;
+        const inviteId = args.invite_id;
+        if (!teamId || typeof teamId !== "string") {
+            return JSON.stringify({
+                error: "team_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(teamId)) {
+            return JSON.stringify({ error: "team_id must be a valid UUID" });
+        }
+        if (!inviteId || typeof inviteId !== "string") {
+            return JSON.stringify({
+                error: "invite_id is required and must be a string",
+            });
+        }
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(inviteId)) {
+            return JSON.stringify({ error: "invite_id must be a valid UUID" });
+        }
+        const result = await api("DELETE", `/api/teams/${encodeURIComponent(teamId)}/invites/${encodeURIComponent(inviteId)}`);
+        return JSON.stringify(result);
+    }
+    // -----------------------------------------------------------------------
     // Dispatch table
     // -----------------------------------------------------------------------
     const handlers = {
+        // Proxy (3)
         dominusnode_proxied_fetch: handleProxiedFetch,
+        dominusnode_get_proxy_config: handleGetProxyConfig,
+        dominusnode_get_proxy_status: handleGetProxyStatus,
+        // Wallet (7)
         dominusnode_check_balance: handleCheckBalance,
+        dominusnode_get_transactions: handleGetTransactions,
+        dominusnode_get_forecast: handleGetForecast,
+        dominusnode_check_payment: handleCheckPayment,
+        dominusnode_topup_paypal: handleTopupPaypal,
+        dominusnode_topup_stripe: handleTopupStripe,
+        dominusnode_topup_crypto: handleTopupCrypto,
+        // Usage (3)
         dominusnode_check_usage: handleCheckUsage,
-        dominusnode_get_proxy_config: handleGetProxyConfig,
+        dominusnode_get_daily_usage: handleGetDailyUsage,
+        dominusnode_get_top_hosts: handleGetTopHosts,
+        // Sessions (1)
         dominusnode_list_sessions: handleListSessions,
+        // Account lifecycle (6)
+        dominusnode_register: handleRegister,
+        dominusnode_login: handleLogin,
+        dominusnode_get_account_info: handleGetAccountInfo,
+        dominusnode_verify_email: handleVerifyEmail,
+        dominusnode_resend_verification: handleResendVerification,
+        dominusnode_update_password: handleUpdatePassword,
+        // API Keys (3)
+        dominusnode_list_keys: handleListKeys,
+        dominusnode_create_key: handleCreateKey,
+        dominusnode_revoke_key: handleRevokeKey,
+        // Plans (3)
+        dominusnode_get_plan: handleGetPlan,
+        dominusnode_list_plans: handleListPlans,
+        dominusnode_change_plan: handleChangePlan,
+        // Agentic wallets (7)
         dominusnode_create_agentic_wallet: handleCreateAgenticWallet,
         dominusnode_fund_agentic_wallet: handleFundAgenticWallet,
         dominusnode_agentic_wallet_balance: handleAgenticWalletBalance,
@@ -1068,6 +1793,7 @@ export function createDominusNodeFunctionHandler(config) {
         dominusnode_unfreeze_agentic_wallet: handleUnfreezeAgenticWallet,
         dominusnode_delete_agentic_wallet: handleDeleteAgenticWallet,
         dominusnode_update_wallet_policy: handleUpdateWalletPolicy,
+        // Teams (17)
         dominusnode_create_team: handleCreateTeam,
         dominusnode_list_teams: handleListTeams,
         dominusnode_team_details: handleTeamDetails,
@@ -1076,16 +1802,144 @@ export function createDominusNodeFunctionHandler(config) {
         dominusnode_team_usage: handleTeamUsage,
         dominusnode_update_team: handleUpdateTeam,
         dominusnode_update_team_member_role: handleUpdateTeamMemberRole,
-        dominusnode_topup_paypal: handleTopupPaypal,
-        dominusnode_topup_stripe: handleTopupStripe,
-        dominusnode_topup_crypto: handleTopupCrypto,
+        dominusnode_team_delete: handleTeamDelete,
+        dominusnode_team_revoke_key: handleTeamRevokeKey,
+        dominusnode_team_list_keys: handleTeamListKeys,
+        dominusnode_team_list_members: handleTeamListMembers,
+        dominusnode_team_add_member: handleTeamAddMember,
+        dominusnode_team_remove_member: handleTeamRemoveMember,
+        dominusnode_team_invite_member: handleTeamInviteMember,
+        dominusnode_team_list_invites: handleTeamListInvites,
+        dominusnode_team_cancel_invite: handleTeamCancelInvite,
+        // x402 (1)
         dominusnode_x402_info: handleX402Info,
+        // MPP (5)
+        dominusnode_mpp_info: handleMppInfo,
+        dominusnode_mpp_challenge: handleMppChallenge,
+        dominusnode_pay_mpp: handlePayMpp,
+        dominusnode_mpp_session_open: handleMppSessionOpen,
+        dominusnode_mpp_session_close: handleMppSessionClose,
     };
     async function handleX402Info() {
         const result = await api("GET", "/api/x402/info");
         return JSON.stringify(result);
     }
     // -----------------------------------------------------------------------
+    // MPP (Machine Payment Protocol) handlers
+    // -----------------------------------------------------------------------
+    async function handleMppInfo() {
+        // MPP info is public (no auth required), but we use the authenticated path
+        // for simplicity since the handler is already authenticated.
+        const result = await api("GET", "/api/mpp/info");
+        return JSON.stringify(result);
+    }
+    async function handleMppChallenge(args) {
+        const poolType = String(args.pool_type ?? "dc");
+        if (poolType !== "dc" && poolType !== "residential") {
+            return JSON.stringify({
+                error: "pool_type must be 'dc' or 'residential'",
+            });
+        }
+        // This is a public endpoint -- no auth required
+        try {
+            const reqHeaders = {
+                "User-Agent": "dominusnode-openai-functions/1.0.0",
+                "Content-Type": "application/json",
+            };
+            if (agentSecret) {
+                reqHeaders["X-DominusNode-Agent"] = "mcp";
+                reqHeaders["X-DominusNode-Agent-Secret"] = agentSecret;
+            }
+            const response = await fetch(`${baseUrl}/api/mpp/challenge`, {
+                method: "POST",
+                headers: reqHeaders,
+                body: JSON.stringify({ poolType }),
+                signal: AbortSignal.timeout(timeoutMs),
+                redirect: "error",
+            });
+            const responseText = await response.text();
+            if (responseText.length > MAX_RESPONSE_BYTES) {
+                return JSON.stringify({ error: "Response body exceeds size limit" });
+            }
+            if (!response.ok) {
+                let message;
+                try {
+                    const parsed = JSON.parse(responseText);
+                    message = parsed.error ?? parsed.message ?? responseText;
+                }
+                catch {
+                    message = responseText;
+                }
+                if (message.length > 500)
+                    message = message.slice(0, 500) + "... [truncated]";
+                return JSON.stringify({
+                    error: `MPP challenge failed: ${sanitizeError(message)}`,
+                });
+            }
+            const data = safeJsonParse(responseText);
+            return JSON.stringify(data);
+        }
+        catch (err) {
+            return JSON.stringify({
+                error: `MPP challenge failed: ${sanitizeError(err instanceof Error ? err.message : String(err))}`,
+            });
+        }
+    }
+    async function handlePayMpp(args) {
+        const amountCents = args.amount_cents;
+        const method = String(args.method ?? "");
+        if (!Number.isInteger(amountCents) ||
+            amountCents < 500 ||
+            amountCents > 100_000) {
+            return JSON.stringify({
+                error: "amount_cents must be an integer between 500 ($5) and 100,000 ($1,000)",
+            });
+        }
+        if (!["tempo", "stripe_spt", "lightning"].includes(method)) {
+            return JSON.stringify({
+                error: "method must be one of: tempo, stripe_spt, lightning",
+            });
+        }
+        const result = await api("POST", "/api/mpp/topup", { amountCents, method });
+        return JSON.stringify(result);
+    }
+    async function handleMppSessionOpen(args) {
+        const maxDepositCents = args.max_deposit_cents;
+        const method = String(args.method ?? "");
+        const poolType = String(args.pool_type ?? "dc");
+        if (!Number.isInteger(maxDepositCents) ||
+            maxDepositCents < 500 ||
+            maxDepositCents > 100_000) {
+            return JSON.stringify({
+                error: "max_deposit_cents must be an integer between 500 and 100,000",
+            });
+        }
+        if (!["tempo", "stripe_spt", "lightning"].includes(method)) {
+            return JSON.stringify({
+                error: "method must be one of: tempo, stripe_spt, lightning",
+            });
+        }
+        if (!["dc", "residential"].includes(poolType)) {
+            return JSON.stringify({
+                error: "pool_type must be one of: dc, residential",
+            });
+        }
+        const result = await api("POST", "/api/mpp/session/open", {
+            maxDepositCents,
+            method,
+            poolType,
+        });
+        return JSON.stringify(result);
+    }
+    async function handleMppSessionClose(args) {
+        const channelId = String(args.channel_id ?? "");
+        if (!channelId) {
+            return JSON.stringify({ error: "channel_id is required" });
+        }
+        const result = await api("POST", "/api/mpp/session/close", { channelId });
+        return JSON.stringify(result);
+    }
+    // -----------------------------------------------------------------------
     // Main handler
     // -----------------------------------------------------------------------
     return async function handler(name, args) {