@dominusnode/pi-extension 1.0.0

package/CHANGELOG.md

@@ -0,0 +1,21 @@
+# Changelog
+
+## [1.0.0] - 2026-03-02
+
+### Added
+- Initial release of `@dominusnode/pi-extension`
+- 26 tools covering the full Dominus Node feature suite:
+  - Proxied fetch (HTTP/HTTPS via DC + residential pools with geo-targeting)
+  - Wallet management (balance, usage, proxy config, sessions)
+  - Agentic wallets (create, fund, balance, transactions, freeze, unfreeze, delete, policy)
+  - Teams (create, list, details, fund, API key management, usage, update, member roles)
+  - Payments (Stripe, PayPal, crypto: BTC/ETH/LTC/XMR/ZEC/USDC/SOL/USDT/DAI/BNB/LINK)
+  - x402 micropayment info
+- Full SSRF protection (RFC1918, CGNAT, Teredo/6to4, IPv4-mapped IPv6, DNS rebinding, .localhost/.local/.internal/.arpa TLDs)
+- OFAC sanctioned country validation (CU, IR, KP, RU, SY)
+- Credential scrubbing in all error outputs (`dn_live_*` / `dn_test_*`)
+- Prototype pollution prevention (recursive `stripDangerousKeys`)
+- HTTP method restriction for proxied fetch (GET/HEAD/OPTIONS only)
+- TypeBox parameter schemas for all 26 tools
+- Pi Package manifest (`"pi"` key in package.json)
+- Skill documentation (`skills/use-dominus-proxy.md`)

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Dominus Node
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,118 @@
+# @dominusnode/pi-extension
+
+[Pi](https://github.com/badlogic/pi-mono) extension providing **26 tools** for the [Dominus Node](https://dominusnode.com) rotating proxy and management platform.
+
+## What is Pi?
+
+Pi (pi-mono) is a TypeScript/Node.js agentic coding framework by Mario Zechner. It powers OpenClaw and supports building AI agent workflows with type-safe tool definitions using `@sinclair/typebox`.
+
+## Installation
+
+### As a Pi Package (recommended)
+
+```bash
+npm install @dominusnode/pi-extension
+```
+
+Declare in your project's `package.json`:
+```json
+{
+  "pi": {
+    "extensions": ["./node_modules/@dominusnode/pi-extension/dist"]
+  }
+}
+```
+
+### Manual Extension
+
+Copy or symlink the `dist/` folder into your Pi extensions directory:
+```bash
+~/.pi/agent/extensions/dominusnode/   # global
+.pi/extensions/dominusnode/           # project-local
+```
+
+## Authentication
+
+```bash
+export DOMINUSNODE_API_KEY="dn_live_your_key_here"
+```
+
+Get your API key at [dominusnode.com](https://dominusnode.com) → Dashboard → API Keys.
+
+## Available Tools (26 total)
+
+| Tool | Description |
+|------|-------------|
+| `dominusnode_proxied_fetch` | Fetch a URL through rotating IPs (DC or residential) |
+| `dominusnode_check_balance` | Get wallet balance |
+| `dominusnode_check_usage` | Bandwidth usage stats |
+| `dominusnode_get_proxy_config` | Proxy endpoint details |
+| `dominusnode_list_sessions` | Active proxy sessions |
+| `dominusnode_create_agentic_wallet` | Create agent sub-wallet |
+| `dominusnode_fund_agentic_wallet` | Fund agent sub-wallet |
+| `dominusnode_check_agentic_balance` | Sub-wallet balance |
+| `dominusnode_list_agentic_wallets` | All sub-wallets |
+| `dominusnode_agentic_transactions` | Sub-wallet transaction history |
+| `dominusnode_freeze_agentic_wallet` | Freeze sub-wallet |
+| `dominusnode_unfreeze_agentic_wallet` | Unfreeze sub-wallet |
+| `dominusnode_delete_agentic_wallet` | Delete sub-wallet |
+| `dominusnode_create_team` | Create team with shared wallet |
+| `dominusnode_list_teams` | List teams |
+| `dominusnode_team_details` | Team details and balance |
+| `dominusnode_team_fund` | Fund team wallet |
+| `dominusnode_team_create_api_key` | Create team API key |
+| `dominusnode_team_usage` | Team bandwidth stats |
+| `dominusnode_update_team` | Update team settings |
+| `dominusnode_update_team_member_role` | Change member role |
+| `dominusnode_topup_paypal` | Top up via PayPal |
+| `dominusnode_topup_stripe` | Top up via Stripe |
+| `dominusnode_topup_crypto` | Top up via crypto (BTC/ETH/USDC/...) |
+| `dominusnode_x402_info` | x402 micropayment config |
+| `dominusnode_update_wallet_policy` | Set spending limits/domain restrictions |
+
+## Proxy Usage
+
+```bash
+# Datacenter pool ($3/GB — fastest)
+curl -x "http://dc-country-US:${DOMINUSNODE_API_KEY}@proxy.dominusnode.com:8080" \
+  "https://target-site.com/page"
+
+# Residential pool ($5/GB — appears as regular user)
+curl -x "http://residential-country-GB:${DOMINUSNODE_API_KEY}@proxy.dominusnode.com:8080" \
+  "https://target-site.com/page"
+```
+
+## Agentic Wallet Pattern (for Pi swarms)
+
+Give each sub-agent its own wallet with a spending cap:
+
+```
+1. dominusnode_create_agentic_wallet(label="research-agent-1", spendingLimitCents=500)
+2. dominusnode_fund_agentic_wallet(walletId=<id>, amountCents=1000)
+3. Sub-agent uses its wallet ID for proxy authentication
+4. dominusnode_check_agentic_balance(walletId=<id>) — monitor spend
+5. dominusnode_freeze_agentic_wallet(walletId=<id>) — suspend if needed
+```
+
+## Security
+
+- **SSRF protection**: Private IPs, RFC1918, CGNAT, loopback, link-local, Teredo/6to4, IPv4-mapped IPv6, hex/octal/decimal normalization, zone ID stripping
+- **DNS rebinding protection**: Hostname resolved before each request; private IPs in DNS results are blocked
+- **.localhost / .local / .internal / .arpa** TLDs blocked
+- **OFAC compliance**: Requests to sanctioned countries (CU, IR, KP, RU, SY) are rejected
+- **Credential scrubbing**: API keys redacted from all error messages
+- **Prototype pollution prevention**: Recursive key stripping on all parsed JSON
+- **HTTP method restriction**: Only GET, HEAD, OPTIONS permitted via `proxied_fetch`
+- **10 MB response cap** + 4000 character truncation
+- **Redirect following disabled** to prevent open redirect abuse
+
+## Pricing
+
+| Pool | Price | Best for |
+|------|-------|----------|
+| Datacenter | $3.00/GB | Fast scraping, APIs, speed-sensitive tasks |
+| Residential | $5.00/GB | Bypassing geo-blocks, appearing as real user |
+
+## License
+
+MIT — see [LICENSE](./LICENSE)

package/dist/index.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Dominus Node — Pi Extension
+ *
+ * Pi-mono extension providing 26 tools for the Dominus Node rotating proxy
+ * and management platform. Loaded by the pi coding agent from:
+ *   ~/.pi/agent/extensions/dominusnode/   (global)
+ *   .pi/extensions/dominusnode/           (project-local)
+ *
+ * Usage:
+ *   export DOMINUSNODE_API_KEY="dn_live_your_key_here"
+ *   # pi agent discovers and loads this extension automatically
+ *
+ * Or install as a Pi Package:
+ *   npm install @dominusnode/pi-extension
+ *   # declare in package.json "pi": { "extensions": ["./node_modules/@dominusnode/pi-extension/dist"] }
+ *
+ * @see https://github.com/badlogic/pi-mono/blob/main/packages/coding-agent/docs/extensions.md
+ */
+import { DominusNodeToolkit, scrubCredentials, isPrivateIp, normalizeIpv4, validateTargetUrl, validateCountry, validateUuid, stripDangerousKeys, checkDnsRebinding, truncate, formatBytes, formatCents, SANCTIONED_COUNTRIES, BLOCKED_HOSTNAMES } from "./toolkit.js";
+export { DominusNodeToolkit, scrubCredentials, isPrivateIp, normalizeIpv4, validateTargetUrl, validateCountry, validateUuid, stripDangerousKeys, checkDnsRebinding, truncate, formatBytes, formatCents, SANCTIONED_COUNTRIES, BLOCKED_HOSTNAMES, };
+interface PiTool {
+    name: string;
+    label: string;
+    description: string;
+    parameters: unknown;
+    execute: (toolCallId: string, params: Record<string, unknown>, signal: AbortSignal, onUpdate: (text: string) => void, ctx: unknown) => Promise<{
+        content: Array<{
+            type: "text";
+            text: string;
+        }>;
+        details: Record<string, unknown>;
+    }>;
+}
+interface ExtensionAPI {
+    registerTool(tool: PiTool): void;
+}
+export default function dominusNodeExtension(pi: ExtensionAPI): void;

package/dist/index.js

@@ -0,0 +1,373 @@
+"use strict";
+/**
+ * Dominus Node — Pi Extension
+ *
+ * Pi-mono extension providing 26 tools for the Dominus Node rotating proxy
+ * and management platform. Loaded by the pi coding agent from:
+ *   ~/.pi/agent/extensions/dominusnode/   (global)
+ *   .pi/extensions/dominusnode/           (project-local)
+ *
+ * Usage:
+ *   export DOMINUSNODE_API_KEY="dn_live_your_key_here"
+ *   # pi agent discovers and loads this extension automatically
+ *
+ * Or install as a Pi Package:
+ *   npm install @dominusnode/pi-extension
+ *   # declare in package.json "pi": { "extensions": ["./node_modules/@dominusnode/pi-extension/dist"] }
+ *
+ * @see https://github.com/badlogic/pi-mono/blob/main/packages/coding-agent/docs/extensions.md
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BLOCKED_HOSTNAMES = exports.SANCTIONED_COUNTRIES = exports.formatCents = exports.formatBytes = exports.truncate = exports.checkDnsRebinding = exports.stripDangerousKeys = exports.validateUuid = exports.validateCountry = exports.validateTargetUrl = exports.normalizeIpv4 = exports.isPrivateIp = exports.scrubCredentials = exports.DominusNodeToolkit = void 0;
+exports.default = dominusNodeExtension;
+const typebox_1 = require("@sinclair/typebox");
+const toolkit_js_1 = require("./toolkit.js");
+Object.defineProperty(exports, "DominusNodeToolkit", { enumerable: true, get: function () { return toolkit_js_1.DominusNodeToolkit; } });
+Object.defineProperty(exports, "scrubCredentials", { enumerable: true, get: function () { return toolkit_js_1.scrubCredentials; } });
+Object.defineProperty(exports, "isPrivateIp", { enumerable: true, get: function () { return toolkit_js_1.isPrivateIp; } });
+Object.defineProperty(exports, "normalizeIpv4", { enumerable: true, get: function () { return toolkit_js_1.normalizeIpv4; } });
+Object.defineProperty(exports, "validateTargetUrl", { enumerable: true, get: function () { return toolkit_js_1.validateTargetUrl; } });
+Object.defineProperty(exports, "validateCountry", { enumerable: true, get: function () { return toolkit_js_1.validateCountry; } });
+Object.defineProperty(exports, "validateUuid", { enumerable: true, get: function () { return toolkit_js_1.validateUuid; } });
+Object.defineProperty(exports, "stripDangerousKeys", { enumerable: true, get: function () { return toolkit_js_1.stripDangerousKeys; } });
+Object.defineProperty(exports, "checkDnsRebinding", { enumerable: true, get: function () { return toolkit_js_1.checkDnsRebinding; } });
+Object.defineProperty(exports, "truncate", { enumerable: true, get: function () { return toolkit_js_1.truncate; } });
+Object.defineProperty(exports, "formatBytes", { enumerable: true, get: function () { return toolkit_js_1.formatBytes; } });
+Object.defineProperty(exports, "formatCents", { enumerable: true, get: function () { return toolkit_js_1.formatCents; } });
+Object.defineProperty(exports, "SANCTIONED_COUNTRIES", { enumerable: true, get: function () { return toolkit_js_1.SANCTIONED_COUNTRIES; } });
+Object.defineProperty(exports, "BLOCKED_HOSTNAMES", { enumerable: true, get: function () { return toolkit_js_1.BLOCKED_HOSTNAMES; } });
+// ---------------------------------------------------------------------------
+// Extension default export — called by Pi on load
+// ---------------------------------------------------------------------------
+function dominusNodeExtension(pi) {
+    const toolkit = new toolkit_js_1.DominusNodeToolkit();
+    // ── Tool 1: proxied_fetch ────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_proxied_fetch",
+        label: "DominusNode: Proxied Fetch",
+        description: "Fetch a URL through Dominus Node's rotating proxy network (datacenter or residential IPs). " +
+            "Use for web scraping, bypassing geo-restrictions, or rotating IPs. " +
+            "Only GET, HEAD, and OPTIONS are permitted. Private/internal URLs are blocked.",
+        parameters: typebox_1.Type.Object({
+            url: typebox_1.Type.String({ description: "Target URL to fetch (http or https only)" }),
+            method: typebox_1.Type.Optional(typebox_1.Type.Union([
+                typebox_1.Type.Literal("GET"), typebox_1.Type.Literal("HEAD"), typebox_1.Type.Literal("OPTIONS"),
+            ], { description: "HTTP method (default: GET)" })),
+            country: typebox_1.Type.Optional(typebox_1.Type.String({ description: "ISO 3166-1 two-letter country code for geo-targeting (e.g. US, GB, DE)" })),
+            proxyType: typebox_1.Type.Optional(typebox_1.Type.Union([
+                typebox_1.Type.Literal("dc"), typebox_1.Type.Literal("residential"), typebox_1.Type.Literal("auto"),
+            ], { description: "Proxy pool: 'dc' (datacenter, $3/GB), 'residential' ($5/GB), or 'auto' (default: dc)" })),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.proxiedFetch(String(params.url ?? ""), String(params.method ?? "GET"), params.country ? String(params.country) : undefined, String(params.proxyType ?? "dc"));
+        },
+    });
+    // ── Tool 2: check_balance ────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_check_balance",
+        label: "DominusNode: Check Wallet Balance",
+        description: "Get the current wallet balance and account details for the Dominus Node account.",
+        parameters: typebox_1.Type.Object({}),
+        async execute(_id, _params, _signal, _onUpdate, _ctx) {
+            return toolkit.checkBalance();
+        },
+    });
+    // ── Tool 3: check_usage ──────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_check_usage",
+        label: "DominusNode: Check Bandwidth Usage",
+        description: "Get bandwidth usage statistics for the past N days (1–365). Shows bytes consumed by datacenter and residential proxy pools.",
+        parameters: typebox_1.Type.Object({
+            days: typebox_1.Type.Optional(typebox_1.Type.Number({ description: "Number of days to look back (default: 30, max: 365)", minimum: 1, maximum: 365 })),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.checkUsage(params.days !== undefined ? Number(params.days) : 30);
+        },
+    });
+    // ── Tool 4: get_proxy_config ─────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_get_proxy_config",
+        label: "DominusNode: Get Proxy Config",
+        description: "Retrieve the proxy endpoint configuration (host, port, proxy URL format) for manual proxy setup.",
+        parameters: typebox_1.Type.Object({}),
+        async execute(_id, _params, _signal, _onUpdate, _ctx) {
+            return toolkit.getProxyConfig();
+        },
+    });
+    // ── Tool 5: list_sessions ────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_list_sessions",
+        label: "DominusNode: List Active Sessions",
+        description: "List currently active proxy sessions, including their start times and bytes consumed.",
+        parameters: typebox_1.Type.Object({}),
+        async execute(_id, _params, _signal, _onUpdate, _ctx) {
+            return toolkit.listSessions();
+        },
+    });
+    // ── Tool 6: create_agentic_wallet ────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_create_agentic_wallet",
+        label: "DominusNode: Create Agentic Wallet",
+        description: "Create a server-side sub-wallet for an AI agent with an optional per-transaction spending limit. " +
+            "Useful for giving sub-agents controlled budgets. Wallets are funded from the main wallet.",
+        parameters: typebox_1.Type.Object({
+            label: typebox_1.Type.String({ description: "Human-readable name for this wallet (e.g. 'research-agent-1')" }),
+            spendingLimitCents: typebox_1.Type.Optional(typebox_1.Type.Number({ description: "Maximum spend per transaction in cents (e.g. 500 = $5.00)", minimum: 1, maximum: 1000000 })),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.createAgenticWallet(String(params.label ?? ""), params.spendingLimitCents !== undefined ? Number(params.spendingLimitCents) : undefined);
+        },
+    });
+    // ── Tool 7: fund_agentic_wallet ──────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_fund_agentic_wallet",
+        label: "DominusNode: Fund Agentic Wallet",
+        description: "Transfer funds from the main wallet to an agentic sub-wallet. Amount in cents (e.g. 1000 = $10.00).",
+        parameters: typebox_1.Type.Object({
+            walletId: typebox_1.Type.String({ description: "UUID of the agentic wallet to fund" }),
+            amountCents: typebox_1.Type.Number({ description: "Amount to transfer in cents (e.g. 1000 = $10.00)", minimum: 1 }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.fundAgenticWallet(String(params.walletId ?? ""), Number(params.amountCents));
+        },
+    });
+    // ── Tool 8: check_agentic_balance ────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_check_agentic_balance",
+        label: "DominusNode: Check Agentic Wallet Balance",
+        description: "Get the balance and details of a specific agentic sub-wallet.",
+        parameters: typebox_1.Type.Object({
+            walletId: typebox_1.Type.String({ description: "UUID of the agentic wallet" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.checkAgenticBalance(String(params.walletId ?? ""));
+        },
+    });
+    // ── Tool 9: list_agentic_wallets ─────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_list_agentic_wallets",
+        label: "DominusNode: List Agentic Wallets",
+        description: "List all agentic sub-wallets associated with this account.",
+        parameters: typebox_1.Type.Object({}),
+        async execute(_id, _params, _signal, _onUpdate, _ctx) {
+            return toolkit.listAgenticWallets();
+        },
+    });
+    // ── Tool 10: agentic_transactions ───────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_agentic_transactions",
+        label: "DominusNode: Agentic Wallet Transactions",
+        description: "List recent transactions for an agentic sub-wallet.",
+        parameters: typebox_1.Type.Object({
+            walletId: typebox_1.Type.String({ description: "UUID of the agentic wallet" }),
+            limit: typebox_1.Type.Optional(typebox_1.Type.Number({ description: "Number of transactions to return (default: 20, max: 100)", minimum: 1, maximum: 100 })),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.agenticTransactions(String(params.walletId ?? ""), params.limit !== undefined ? Number(params.limit) : 20);
+        },
+    });
+    // ── Tool 11: freeze_agentic_wallet ───────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_freeze_agentic_wallet",
+        label: "DominusNode: Freeze Agentic Wallet",
+        description: "Freeze an agentic sub-wallet to prevent further spending. The wallet must be unfrozen before it can be deleted.",
+        parameters: typebox_1.Type.Object({
+            walletId: typebox_1.Type.String({ description: "UUID of the agentic wallet to freeze" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.freezeAgenticWallet(String(params.walletId ?? ""));
+        },
+    });
+    // ── Tool 12: unfreeze_agentic_wallet ─────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_unfreeze_agentic_wallet",
+        label: "DominusNode: Unfreeze Agentic Wallet",
+        description: "Unfreeze a previously frozen agentic sub-wallet to resume spending.",
+        parameters: typebox_1.Type.Object({
+            walletId: typebox_1.Type.String({ description: "UUID of the agentic wallet to unfreeze" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.unfreezeAgenticWallet(String(params.walletId ?? ""));
+        },
+    });
+    // ── Tool 13: delete_agentic_wallet ───────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_delete_agentic_wallet",
+        label: "DominusNode: Delete Agentic Wallet",
+        description: "Permanently delete an agentic sub-wallet. Any remaining balance is returned to the main wallet. The wallet must be frozen first.",
+        parameters: typebox_1.Type.Object({
+            walletId: typebox_1.Type.String({ description: "UUID of the agentic wallet to delete (must be frozen first)" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.deleteAgenticWallet(String(params.walletId ?? ""));
+        },
+    });
+    // ── Tool 14: create_team ─────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_create_team",
+        label: "DominusNode: Create Team",
+        description: "Create a new team with a shared wallet. Teams allow multiple users or agents to share bandwidth and billing.",
+        parameters: typebox_1.Type.Object({
+            name: typebox_1.Type.String({ description: "Team name" }),
+            maxMembers: typebox_1.Type.Optional(typebox_1.Type.Number({ description: "Maximum number of members (default: 10, max: 100)", minimum: 1, maximum: 100 })),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.createTeam(String(params.name ?? ""), params.maxMembers !== undefined ? Number(params.maxMembers) : 10);
+        },
+    });
+    // ── Tool 15: list_teams ──────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_list_teams",
+        label: "DominusNode: List Teams",
+        description: "List all teams the current account belongs to.",
+        parameters: typebox_1.Type.Object({
+            limit: typebox_1.Type.Optional(typebox_1.Type.Number({ description: "Number of teams to return (default: 20, max: 100)", minimum: 1, maximum: 100 })),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.listTeams(params.limit !== undefined ? Number(params.limit) : 20);
+        },
+    });
+    // ── Tool 16: team_details ────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_team_details",
+        label: "DominusNode: Team Details",
+        description: "Get detailed information about a team, including wallet balance, members, and settings.",
+        parameters: typebox_1.Type.Object({
+            teamId: typebox_1.Type.String({ description: "UUID of the team" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.teamDetails(String(params.teamId ?? ""));
+        },
+    });
+    // ── Tool 17: team_fund ───────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_team_fund",
+        label: "DominusNode: Fund Team Wallet",
+        description: "Transfer funds from the main wallet to a team's shared wallet. Amount in cents.",
+        parameters: typebox_1.Type.Object({
+            teamId: typebox_1.Type.String({ description: "UUID of the team" }),
+            amountCents: typebox_1.Type.Number({ description: "Amount to transfer in cents (e.g. 1000 = $10.00)", minimum: 1 }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.teamFund(String(params.teamId ?? ""), Number(params.amountCents));
+        },
+    });
+    // ── Tool 18: team_create_api_key ─────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_team_create_api_key",
+        label: "DominusNode: Create Team API Key",
+        description: "Generate a new API key scoped to a team. Traffic through this key bills to the team wallet. The key is shown only once.",
+        parameters: typebox_1.Type.Object({
+            teamId: typebox_1.Type.String({ description: "UUID of the team" }),
+            label: typebox_1.Type.String({ description: "Label for the API key (e.g. 'research-agent')" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.teamCreateApiKey(String(params.teamId ?? ""), String(params.label ?? ""));
+        },
+    });
+    // ── Tool 19: team_usage ──────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_team_usage",
+        label: "DominusNode: Team Bandwidth Usage",
+        description: "Get bandwidth usage statistics for a team over the past N days.",
+        parameters: typebox_1.Type.Object({
+            teamId: typebox_1.Type.String({ description: "UUID of the team" }),
+            days: typebox_1.Type.Optional(typebox_1.Type.Number({ description: "Number of days to look back (default: 30, max: 365)", minimum: 1, maximum: 365 })),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.teamUsage(String(params.teamId ?? ""), params.days !== undefined ? Number(params.days) : 30);
+        },
+    });
+    // ── Tool 20: update_team ─────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_update_team",
+        label: "DominusNode: Update Team",
+        description: "Update a team's name or maximum member count.",
+        parameters: typebox_1.Type.Object({
+            teamId: typebox_1.Type.String({ description: "UUID of the team" }),
+            name: typebox_1.Type.Optional(typebox_1.Type.String({ description: "New team name" })),
+            maxMembers: typebox_1.Type.Optional(typebox_1.Type.Number({ description: "New maximum member count (1–100)", minimum: 1, maximum: 100 })),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.updateTeam(String(params.teamId ?? ""), params.name !== undefined ? String(params.name) : undefined, params.maxMembers !== undefined ? Number(params.maxMembers) : undefined);
+        },
+    });
+    // ── Tool 21: update_team_member_role ─────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_update_team_member_role",
+        label: "DominusNode: Update Team Member Role",
+        description: "Promote or demote a team member between 'admin' and 'member' roles.",
+        parameters: typebox_1.Type.Object({
+            teamId: typebox_1.Type.String({ description: "UUID of the team" }),
+            userId: typebox_1.Type.String({ description: "UUID of the user to update" }),
+            role: typebox_1.Type.Union([typebox_1.Type.Literal("admin"), typebox_1.Type.Literal("member")], { description: "New role: 'admin' or 'member'" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.updateTeamMemberRole(String(params.teamId ?? ""), String(params.userId ?? ""), String(params.role ?? ""));
+        },
+    });
+    // ── Tool 22: topup_paypal ────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_topup_paypal",
+        label: "DominusNode: Top Up Wallet via PayPal",
+        description: "Create a PayPal checkout session to add funds to the Dominus Node wallet. Returns a payment URL to redirect the user to.",
+        parameters: typebox_1.Type.Object({
+            amountCents: typebox_1.Type.Number({ description: "Amount to add in cents (min: 500 = $5.00, max: 1,000,000 = $10,000.00)", minimum: 500, maximum: 1000000 }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.topupPaypal(Number(params.amountCents));
+        },
+    });
+    // ── Tool 23: topup_stripe ────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_topup_stripe",
+        label: "DominusNode: Top Up Wallet via Stripe",
+        description: "Create a Stripe checkout session to add funds to the Dominus Node wallet. Supports cards and Link. Returns a payment URL.",
+        parameters: typebox_1.Type.Object({
+            amountCents: typebox_1.Type.Number({ description: "Amount to add in cents (min: 500 = $5.00, max: 1,000,000 = $10,000.00)", minimum: 500, maximum: 1000000 }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.topupStripe(Number(params.amountCents));
+        },
+    });
+    // ── Tool 24: topup_crypto ────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_topup_crypto",
+        label: "DominusNode: Top Up Wallet via Crypto",
+        description: "Create a cryptocurrency invoice to add funds to the Dominus Node wallet. " +
+            "Supported currencies: BTC, ETH, LTC, XMR, ZEC, USDC, SOL, USDT, DAI, BNB, LINK. " +
+            "Returns a payment address and invoice details.",
+        parameters: typebox_1.Type.Object({
+            amountUsd: typebox_1.Type.Number({ description: "Amount in USD (min: $5, max: $10,000)", minimum: 5, maximum: 10000 }),
+            currency: typebox_1.Type.String({ description: "Crypto currency code: BTC, ETH, LTC, XMR, ZEC, USDC, SOL, USDT, DAI, BNB, or LINK" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.topupCrypto(Number(params.amountUsd), String(params.currency ?? ""));
+        },
+    });
+    // ── Tool 25: x402_info ───────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_x402_info",
+        label: "DominusNode: x402 Micropayment Info",
+        description: "Get x402 micropayment configuration: payment facilitator addresses, supported chains (Base, Polygon, Solana, etc.), " +
+            "USDC contract addresses, and price-per-request details for autonomous agent payments.",
+        parameters: typebox_1.Type.Object({}),
+        async execute(_id, _params, _signal, _onUpdate, _ctx) {
+            return toolkit.x402Info();
+        },
+    });
+    // ── Tool 26: update_wallet_policy ────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_update_wallet_policy",
+        label: "DominusNode: Update Agentic Wallet Policy",
+        description: "Update spending policy for an agentic sub-wallet: set a daily spending limit or restrict it to allowed domains.",
+        parameters: typebox_1.Type.Object({
+            walletId: typebox_1.Type.String({ description: "UUID of the agentic wallet" }),
+            dailyLimitCents: typebox_1.Type.Optional(typebox_1.Type.Number({ description: "Daily spending limit in cents (0 = no limit)", minimum: 0, maximum: 1000000 })),
+            allowedDomains: typebox_1.Type.Optional(typebox_1.Type.Array(typebox_1.Type.String(), { description: "List of domains this wallet is permitted to make requests to (e.g. ['example.com', 'api.service.io'])" })),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.updateWalletPolicy(String(params.walletId ?? ""), params.dailyLimitCents !== undefined ? Number(params.dailyLimitCents) : undefined, params.allowedDomains !== undefined ? params.allowedDomains : undefined);
+        },
+    });
+}