@dominusnode/pi-extension 1.0.0 → 1.2.0

package/README.md

@@ -1,6 +1,6 @@
 # @dominusnode/pi-extension
 
-[Pi](https://github.com/badlogic/pi-mono) extension providing **26 tools** for the [Dominus Node](https://dominusnode.com) rotating proxy and management platform.
+[Pi](https://github.com/badlogic/pi-mono) extension providing **53 tools** for the [Dominus Node](https://dominusnode.com) rotating proxy and management platform.
 
 ## What is Pi?
 
@@ -39,7 +39,7 @@ export DOMINUSNODE_API_KEY="dn_live_your_key_here"
 
 Get your API key at [dominusnode.com](https://dominusnode.com) → Dashboard → API Keys.
 
-## Available Tools (26 total)
+## Available Tools (53 total)
 
 | Tool | Description |
 |------|-------------|
@@ -69,6 +69,33 @@ Get your API key at [dominusnode.com](https://dominusnode.com) → Dashboard →
 | `dominusnode_topup_crypto` | Top up via crypto (BTC/ETH/USDC/...) |
 | `dominusnode_x402_info` | x402 micropayment config |
 | `dominusnode_update_wallet_policy` | Set spending limits/domain restrictions |
+| `dominusnode_get_proxy_status` | Proxy gateway status and pool health |
+| `dominusnode_get_transactions` | Wallet transaction history |
+| `dominusnode_get_forecast` | Spending forecast and projected costs |
+| `dominusnode_check_payment` | Check crypto payment status by invoice ID |
+| `dominusnode_get_daily_usage` | Daily bandwidth usage breakdown |
+| `dominusnode_get_top_hosts` | Top hosts by bandwidth usage |
+| `dominusnode_register` | Register a new account |
+| `dominusnode_login` | Log in to an existing account |
+| `dominusnode_get_account_info` | Get account profile information |
+| `dominusnode_verify_email` | Verify email with token |
+| `dominusnode_resend_verification` | Resend email verification link |
+| `dominusnode_update_password` | Change account password |
+| `dominusnode_list_keys` | List personal API keys |
+| `dominusnode_create_key` | Create a new personal API key |
+| `dominusnode_revoke_key` | Revoke a personal API key |
+| `dominusnode_get_plan` | Get current subscription plan |
+| `dominusnode_list_plans` | List available plans |
+| `dominusnode_change_plan` | Change subscription plan |
+| `dominusnode_team_delete` | Delete a team |
+| `dominusnode_team_revoke_key` | Revoke a team API key |
+| `dominusnode_team_list_keys` | List team API keys |
+| `dominusnode_team_list_members` | List team members |
+| `dominusnode_team_add_member` | Add a member to a team |
+| `dominusnode_team_remove_member` | Remove a member from a team |
+| `dominusnode_team_invite_member` | Invite a user to a team by email |
+| `dominusnode_team_list_invites` | List pending team invitations |
+| `dominusnode_team_cancel_invite` | Cancel a pending team invitation |
 
 ## Proxy Usage
 

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 /**
  * Dominus Node — Pi Extension
  *
- * Pi-mono extension providing 26 tools for the Dominus Node rotating proxy
+ * Pi-mono extension providing 53 tools for the Dominus Node rotating proxy
  * and management platform. Loaded by the pi coding agent from:
  *   ~/.pi/agent/extensions/dominusnode/   (global)
  *   .pi/extensions/dominusnode/           (project-local)

package/dist/index.js

@@ -2,7 +2,7 @@
 /**
  * Dominus Node — Pi Extension
  *
- * Pi-mono extension providing 26 tools for the Dominus Node rotating proxy
+ * Pi-mono extension providing 53 tools for the Dominus Node rotating proxy
  * and management platform. Loaded by the pi coding agent from:
  *   ~/.pi/agent/extensions/dominusnode/   (global)
  *   .pi/extensions/dominusnode/           (project-local)
@@ -370,4 +370,335 @@ function dominusNodeExtension(pi) {
             return toolkit.updateWalletPolicy(String(params.walletId ?? ""), params.dailyLimitCents !== undefined ? Number(params.dailyLimitCents) : undefined, params.allowedDomains !== undefined ? params.allowedDomains : undefined);
         },
     });
+    // ── Tool 27: get_proxy_status ───────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_get_proxy_status",
+        label: "DominusNode: Get Proxy Status",
+        description: "Get the current status of the proxy gateway including uptime, active connections, and pool health.",
+        parameters: typebox_1.Type.Object({}),
+        async execute(_id, _params, _signal, _onUpdate, _ctx) {
+            return toolkit.getProxyStatus();
+        },
+    });
+    // ── Tool 28: get_transactions ───────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_get_transactions",
+        label: "DominusNode: Get Wallet Transactions",
+        description: "Get wallet transaction history showing top-ups, charges, and refunds.",
+        parameters: typebox_1.Type.Object({
+            limit: typebox_1.Type.Optional(typebox_1.Type.Number({ description: "Number of transactions to return (default: 20, max: 100)", minimum: 1, maximum: 100 })),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.getTransactions(params.limit !== undefined ? Number(params.limit) : 20);
+        },
+    });
+    // ── Tool 29: get_forecast ──────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_get_forecast",
+        label: "DominusNode: Get Spending Forecast",
+        description: "Get a spending forecast based on recent usage patterns. " +
+            "Shows estimated days until balance runs out and projected monthly cost.",
+        parameters: typebox_1.Type.Object({}),
+        async execute(_id, _params, _signal, _onUpdate, _ctx) {
+            return toolkit.getForecast();
+        },
+    });
+    // ── Tool 30: check_payment ─────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_check_payment",
+        label: "DominusNode: Check Crypto Payment Status",
+        description: "Check the status of a crypto top-up payment by invoice ID. " +
+            "Returns payment status (pending, confirming, completed, expired).",
+        parameters: typebox_1.Type.Object({
+            invoiceId: typebox_1.Type.String({ description: "Crypto invoice ID (UUID) returned from topup_crypto" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.checkPayment(String(params.invoiceId ?? ""));
+        },
+    });
+    // ── Tool 31: get_daily_usage ───────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_get_daily_usage",
+        label: "DominusNode: Get Daily Usage Breakdown",
+        description: "Get daily bandwidth usage breakdown for the specified number of days. " +
+            "Returns per-day bytes transferred and cost.",
+        parameters: typebox_1.Type.Object({
+            days: typebox_1.Type.Optional(typebox_1.Type.Number({ description: "Number of days to look back (default: 7, max: 365)", minimum: 1, maximum: 365 })),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.getDailyUsage(params.days !== undefined ? Number(params.days) : 7);
+        },
+    });
+    // ── Tool 32: get_top_hosts ─────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_get_top_hosts",
+        label: "DominusNode: Get Top Hosts by Usage",
+        description: "Get the top hosts by bandwidth usage. Shows which domains consume the most proxy traffic.",
+        parameters: typebox_1.Type.Object({
+            limit: typebox_1.Type.Optional(typebox_1.Type.Number({ description: "Number of top hosts to return (default: 10, max: 100)", minimum: 1, maximum: 100 })),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.getTopHosts(params.limit !== undefined ? Number(params.limit) : 10);
+        },
+    });
+    // ── Tool 33: register ──────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_register",
+        label: "DominusNode: Register Account",
+        description: "Register a new Dominus Node account. Does not require authentication. " +
+            "Returns user info and initial API key.",
+        parameters: typebox_1.Type.Object({
+            email: typebox_1.Type.String({ description: "Email address for the new account" }),
+            password: typebox_1.Type.String({ description: "Password (8-128 characters)" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.register(String(params.email ?? ""), String(params.password ?? ""));
+        },
+    });
+    // ── Tool 34: login ─────────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_login",
+        label: "DominusNode: Login",
+        description: "Log in to an existing Dominus Node account. Does not require authentication. " +
+            "Returns JWT access and refresh tokens.",
+        parameters: typebox_1.Type.Object({
+            email: typebox_1.Type.String({ description: "Account email address" }),
+            password: typebox_1.Type.String({ description: "Account password" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.login(String(params.email ?? ""), String(params.password ?? ""));
+        },
+    });
+    // ── Tool 35: get_account_info ──────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_get_account_info",
+        label: "DominusNode: Get Account Info",
+        description: "Get your account profile information including email, plan, verification status, and creation date.",
+        parameters: typebox_1.Type.Object({}),
+        async execute(_id, _params, _signal, _onUpdate, _ctx) {
+            return toolkit.getAccountInfo();
+        },
+    });
+    // ── Tool 36: verify_email ──────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_verify_email",
+        label: "DominusNode: Verify Email",
+        description: "Verify an email address using the verification token sent to the user's email. " +
+            "Does not require authentication.",
+        parameters: typebox_1.Type.Object({
+            token: typebox_1.Type.String({ description: "Email verification token from the verification email" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.verifyEmail(String(params.token ?? ""));
+        },
+    });
+    // ── Tool 37: resend_verification ───────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_resend_verification",
+        label: "DominusNode: Resend Verification Email",
+        description: "Resend the email verification link. Requires authentication.",
+        parameters: typebox_1.Type.Object({}),
+        async execute(_id, _params, _signal, _onUpdate, _ctx) {
+            return toolkit.resendVerification();
+        },
+    });
+    // ── Tool 38: update_password ───────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_update_password",
+        label: "DominusNode: Update Password",
+        description: "Change your account password. Requires current password for verification.",
+        parameters: typebox_1.Type.Object({
+            currentPassword: typebox_1.Type.String({ description: "Current account password" }),
+            newPassword: typebox_1.Type.String({ description: "New password (8-128 characters)" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.updatePassword(String(params.currentPassword ?? ""), String(params.newPassword ?? ""));
+        },
+    });
+    // ── Tool 39: list_keys ─────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_list_keys",
+        label: "DominusNode: List API Keys",
+        description: "List all your personal API keys with their labels, creation dates, and last-used timestamps.",
+        parameters: typebox_1.Type.Object({}),
+        async execute(_id, _params, _signal, _onUpdate, _ctx) {
+            return toolkit.listKeys();
+        },
+    });
+    // ── Tool 40: create_key ────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_create_key",
+        label: "DominusNode: Create API Key",
+        description: "Create a new personal API key. The key is shown only once -- save it immediately. " +
+            "Usage is billed against your personal wallet.",
+        parameters: typebox_1.Type.Object({
+            label: typebox_1.Type.String({ description: "Label for the API key (e.g. 'production', 'dev-testing')" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.createKey(String(params.label ?? ""));
+        },
+    });
+    // ── Tool 41: revoke_key ────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_revoke_key",
+        label: "DominusNode: Revoke API Key",
+        description: "Revoke (delete) a personal API key. This action is irreversible -- " +
+            "any applications using this key will lose access immediately.",
+        parameters: typebox_1.Type.Object({
+            keyId: typebox_1.Type.String({ description: "API key ID (UUID) to revoke" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.revokeKey(String(params.keyId ?? ""));
+        },
+    });
+    // ── Tool 42: get_plan ──────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_get_plan",
+        label: "DominusNode: Get Current Plan",
+        description: "Get your current subscription plan including tier, bandwidth limits, and pricing.",
+        parameters: typebox_1.Type.Object({}),
+        async execute(_id, _params, _signal, _onUpdate, _ctx) {
+            return toolkit.getPlan();
+        },
+    });
+    // ── Tool 43: list_plans ────────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_list_plans",
+        label: "DominusNode: List Available Plans",
+        description: "List all available subscription plans with features, pricing, and bandwidth limits.",
+        parameters: typebox_1.Type.Object({}),
+        async execute(_id, _params, _signal, _onUpdate, _ctx) {
+            return toolkit.listPlans();
+        },
+    });
+    // ── Tool 44: change_plan ───────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_change_plan",
+        label: "DominusNode: Change Subscription Plan",
+        description: "Change your subscription plan. Takes effect immediately. " +
+            "Use list_plans to see available options.",
+        parameters: typebox_1.Type.Object({
+            planId: typebox_1.Type.String({ description: "Plan ID (UUID) to switch to" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.changePlan(String(params.planId ?? ""));
+        },
+    });
+    // ── Tool 45: team_delete ───────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_team_delete",
+        label: "DominusNode: Delete Team",
+        description: "Delete a team. Only the team owner can delete. " +
+            "All team keys are revoked and remaining balance is refunded.",
+        parameters: typebox_1.Type.Object({
+            teamId: typebox_1.Type.String({ description: "Team ID (UUID) to delete" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.teamDelete(String(params.teamId ?? ""));
+        },
+    });
+    // ── Tool 46: team_revoke_key ───────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_team_revoke_key",
+        label: "DominusNode: Revoke Team API Key",
+        description: "Revoke a team API key. Only owners and admins can revoke keys. " +
+            "Applications using this key will lose access immediately.",
+        parameters: typebox_1.Type.Object({
+            teamId: typebox_1.Type.String({ description: "Team ID (UUID)" }),
+            keyId: typebox_1.Type.String({ description: "API key ID (UUID) to revoke" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.teamRevokeKey(String(params.teamId ?? ""), String(params.keyId ?? ""));
+        },
+    });
+    // ── Tool 47: team_list_keys ────────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_team_list_keys",
+        label: "DominusNode: List Team API Keys",
+        description: "List all API keys for a team with labels, creation dates, and last-used timestamps.",
+        parameters: typebox_1.Type.Object({
+            teamId: typebox_1.Type.String({ description: "Team ID (UUID)" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.teamListKeys(String(params.teamId ?? ""));
+        },
+    });
+    // ── Tool 48: team_list_members ─────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_team_list_members",
+        label: "DominusNode: List Team Members",
+        description: "List all members of a team with their roles and join dates.",
+        parameters: typebox_1.Type.Object({
+            teamId: typebox_1.Type.String({ description: "Team ID (UUID)" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.teamListMembers(String(params.teamId ?? ""));
+        },
+    });
+    // ── Tool 49: team_add_member ───────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_team_add_member",
+        label: "DominusNode: Add Team Member",
+        description: "Add a user directly to a team by user ID. Only owners and admins can add members.",
+        parameters: typebox_1.Type.Object({
+            teamId: typebox_1.Type.String({ description: "Team ID (UUID)" }),
+            userId: typebox_1.Type.String({ description: "User ID (UUID) of the user to add" }),
+            role: typebox_1.Type.Optional(typebox_1.Type.Union([typebox_1.Type.Literal("member"), typebox_1.Type.Literal("admin")], { description: "Role for the new member (default: 'member')" })),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.teamAddMember(String(params.teamId ?? ""), String(params.userId ?? ""), params.role !== undefined ? String(params.role) : "member");
+        },
+    });
+    // ── Tool 50: team_remove_member ────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_team_remove_member",
+        label: "DominusNode: Remove Team Member",
+        description: "Remove a member from a team. Only owners and admins can remove members.",
+        parameters: typebox_1.Type.Object({
+            teamId: typebox_1.Type.String({ description: "Team ID (UUID)" }),
+            userId: typebox_1.Type.String({ description: "User ID (UUID) of the member to remove" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.teamRemoveMember(String(params.teamId ?? ""), String(params.userId ?? ""));
+        },
+    });
+    // ── Tool 51: team_invite_member ────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_team_invite_member",
+        label: "DominusNode: Invite Team Member",
+        description: "Invite a user to join a team by email address. The user will receive an invitation email.",
+        parameters: typebox_1.Type.Object({
+            teamId: typebox_1.Type.String({ description: "Team ID (UUID)" }),
+            email: typebox_1.Type.String({ description: "Email address of the user to invite" }),
+            role: typebox_1.Type.Optional(typebox_1.Type.Union([typebox_1.Type.Literal("member"), typebox_1.Type.Literal("admin")], { description: "Role for the invited member (default: 'member')" })),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.teamInviteMember(String(params.teamId ?? ""), String(params.email ?? ""), params.role !== undefined ? String(params.role) : "member");
+        },
+    });
+    // ── Tool 52: team_list_invites ─────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_team_list_invites",
+        label: "DominusNode: List Team Invites",
+        description: "List all pending invitations for a team.",
+        parameters: typebox_1.Type.Object({
+            teamId: typebox_1.Type.String({ description: "Team ID (UUID)" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.teamListInvites(String(params.teamId ?? ""));
+        },
+    });
+    // ── Tool 53: team_cancel_invite ────────────────────────────────────────
+    pi.registerTool({
+        name: "dominusnode_team_cancel_invite",
+        label: "DominusNode: Cancel Team Invite",
+        description: "Cancel a pending team invitation. Only owners and admins can cancel invites.",
+        parameters: typebox_1.Type.Object({
+            teamId: typebox_1.Type.String({ description: "Team ID (UUID)" }),
+            inviteId: typebox_1.Type.String({ description: "Invite ID (UUID) to cancel" }),
+        }),
+        async execute(_id, params, _signal, _onUpdate, _ctx) {
+            return toolkit.teamCancelInvite(String(params.teamId ?? ""), String(params.inviteId ?? ""));
+        },
+    });
 }

package/dist/toolkit.d.ts

@@ -1,7 +1,7 @@
 /**
  * Dominus Node Pi Extension Toolkit
  *
- * Provides 26 tools for the pi-mono agent framework (github.com/badlogic/pi-mono).
+ * Provides 53 tools for the pi-mono agent framework (github.com/badlogic/pi-mono).
  * Covers proxied fetching, wallet management, agentic wallets, teams,
  * Stripe/PayPal/crypto top-up, and x402 micropayment info.
  *
@@ -50,6 +50,8 @@ export interface DominusNodeToolkitOptions {
     proxyHost?: string;
     proxyPort?: number;
     timeout?: number;
+    /** Optional agent secret for MCP agent auto-verification (bypasses reCAPTCHA). */
+    agentSecret?: string;
 }
 export declare class DominusNodeToolkit {
     private apiKey;
@@ -57,6 +59,7 @@ export declare class DominusNodeToolkit {
     private proxyHost;
     private proxyPort;
     private timeout;
+    private agentSecret?;
     private token;
     private tokenExpiresAt;
     private _authPromise;
@@ -91,4 +94,35 @@ export declare class DominusNodeToolkit {
     topupCrypto(amountUsd: number, currency: string): Promise<PiToolResult>;
     x402Info(): Promise<PiToolResult>;
     updateWalletPolicy(walletId: string, dailyLimitCents?: number, allowedDomains?: string[]): Promise<PiToolResult>;
+    private _rawRequest;
+    private static readonly EMAIL_RE;
+    private static validateEmail;
+    private static validatePassword;
+    getProxyStatus(): Promise<PiToolResult>;
+    getTransactions(limit?: number): Promise<PiToolResult>;
+    getForecast(): Promise<PiToolResult>;
+    checkPayment(invoiceId: string): Promise<PiToolResult>;
+    getDailyUsage(days?: number): Promise<PiToolResult>;
+    getTopHosts(limit?: number): Promise<PiToolResult>;
+    register(email: string, password: string): Promise<PiToolResult>;
+    login(email: string, password: string): Promise<PiToolResult>;
+    getAccountInfo(): Promise<PiToolResult>;
+    verifyEmail(token: string): Promise<PiToolResult>;
+    resendVerification(): Promise<PiToolResult>;
+    updatePassword(currentPassword: string, newPassword: string): Promise<PiToolResult>;
+    listKeys(): Promise<PiToolResult>;
+    createKey(label: string): Promise<PiToolResult>;
+    revokeKey(keyId: string): Promise<PiToolResult>;
+    getPlan(): Promise<PiToolResult>;
+    listPlans(): Promise<PiToolResult>;
+    changePlan(planId: string): Promise<PiToolResult>;
+    teamDelete(teamId: string): Promise<PiToolResult>;
+    teamRevokeKey(teamId: string, keyId: string): Promise<PiToolResult>;
+    teamListKeys(teamId: string): Promise<PiToolResult>;
+    teamListMembers(teamId: string): Promise<PiToolResult>;
+    teamAddMember(teamId: string, userId: string, role?: string): Promise<PiToolResult>;
+    teamRemoveMember(teamId: string, userId: string): Promise<PiToolResult>;
+    teamInviteMember(teamId: string, email: string, role?: string): Promise<PiToolResult>;
+    teamListInvites(teamId: string): Promise<PiToolResult>;
+    teamCancelInvite(teamId: string, inviteId: string): Promise<PiToolResult>;
 }

package/dist/toolkit.js

@@ -2,7 +2,7 @@
 /**
  * Dominus Node Pi Extension Toolkit
  *
- * Provides 26 tools for the pi-mono agent framework (github.com/badlogic/pi-mono).
+ * Provides 53 tools for the pi-mono agent framework (github.com/badlogic/pi-mono).
  * Covers proxied fetching, wallet management, agentic wallets, teams,
  * Stripe/PayPal/crypto top-up, and x402 micropayment info.
  *
@@ -381,6 +381,7 @@ class DominusNodeToolkit {
     proxyHost;
     proxyPort;
     timeout;
+    agentSecret;
     token = null;
     tokenExpiresAt = 0;
     _authPromise = null; // H-1: mutex for concurrent _ensureAuth
@@ -418,6 +419,7 @@ class DominusNodeToolkit {
         // H-2: Validate timeout option; store but use REQUEST_TIMEOUT_MS constant for requests
         const tVal = Number(options.timeout ?? 30000);
         this.timeout = Number.isFinite(tVal) && tVal >= 1000 && tVal <= 120000 ? tVal : 30000;
+        this.agentSecret = options.agentSecret || process.env["DOMINUSNODE_AGENT_SECRET"];
     }
     // -----------------------------------------------------------------------
     // Authentication
@@ -428,9 +430,17 @@ class DominusNodeToolkit {
         if (!this.apiKey.startsWith("dn_live_") && !this.apiKey.startsWith("dn_test_")) {
             throw new Error('DOMINUSNODE_API_KEY must start with "dn_live_" or "dn_test_".');
         }
+        const authHeaders = {
+            "Content-Type": "application/json",
+            "User-Agent": "dominusnode-pi/1.0.0",
+        };
+        if (this.agentSecret) {
+            authHeaders["X-DominusNode-Agent"] = "mcp";
+            authHeaders["X-DominusNode-Agent-Secret"] = this.agentSecret;
+        }
         const res = await fetch(`${this.baseUrl}/api/auth/verify-key`, {
             method: "POST",
-            headers: { "Content-Type": "application/json", "User-Agent": "dominusnode-pi/1.0.0" },
+            headers: authHeaders,
             body: JSON.stringify({ apiKey: this.apiKey }),
             redirect: "error",
             signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
@@ -491,6 +501,10 @@ class DominusNodeToolkit {
             Accept: "application/json",
             "User-Agent": "dominusnode-pi/1.0.0",
         };
+        if (this.agentSecret) {
+            headers["X-DominusNode-Agent"] = "mcp";
+            headers["X-DominusNode-Agent-Secret"] = this.agentSecret;
+        }
         const init = { method, headers, signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS), redirect: "error" };
         // M-6: Drop body on safe HTTP methods
         if (body && !["GET", "HEAD"].includes(method) && ["POST", "PUT", "PATCH", "DELETE"].includes(method)) {
@@ -775,7 +789,7 @@ class DominusNodeToolkit {
             const amount = Math.floor(Number(amountCents));
             if (isNaN(amount) || amount < 1 || amount > 1000000)
                 return err("amountCents must be between 1 and 1,000,000");
-            const data = await this._req("POST", `/api/agent-wallet/${id}/fund`, { amountCents: amount });
+            const data = await this._req("POST", `/api/agent-wallet/${encodeURIComponent(id)}/fund`, { amountCents: amount });
             return ok(JSON.stringify(data, null, 2));
         }
         catch (e) {
@@ -788,7 +802,7 @@ class DominusNodeToolkit {
     async checkAgenticBalance(walletId) {
         try {
             const id = validateUuid(walletId, "walletId");
-            const data = await this._req("GET", `/api/agent-wallet/${id}`);
+            const data = await this._req("GET", `/api/agent-wallet/${encodeURIComponent(id)}`);
             return ok(JSON.stringify(data, null, 2));
         }
         catch (e) {
@@ -817,7 +831,7 @@ class DominusNodeToolkit {
             if (!Number.isFinite(rawLim))
                 return err("limit must be a finite number");
             const lim = Math.max(1, Math.min(100, Math.floor(rawLim)));
-            const data = await this._req("GET", `/api/agent-wallet/${id}/transactions?limit=${lim}`);
+            const data = await this._req("GET", `/api/agent-wallet/${encodeURIComponent(id)}/transactions?limit=${lim}`);
             return ok(JSON.stringify(data, null, 2));
         }
         catch (e) {
@@ -830,7 +844,7 @@ class DominusNodeToolkit {
     async freezeAgenticWallet(walletId) {
         try {
             const id = validateUuid(walletId, "walletId");
-            const data = await this._req("POST", `/api/agent-wallet/${id}/freeze`);
+            const data = await this._req("POST", `/api/agent-wallet/${encodeURIComponent(id)}/freeze`);
             return ok(JSON.stringify(data, null, 2));
         }
         catch (e) {
@@ -843,7 +857,7 @@ class DominusNodeToolkit {
     async unfreezeAgenticWallet(walletId) {
         try {
             const id = validateUuid(walletId, "walletId");
-            const data = await this._req("POST", `/api/agent-wallet/${id}/unfreeze`);
+            const data = await this._req("POST", `/api/agent-wallet/${encodeURIComponent(id)}/unfreeze`);
             return ok(JSON.stringify(data, null, 2));
         }
         catch (e) {
@@ -856,7 +870,7 @@ class DominusNodeToolkit {
     async deleteAgenticWallet(walletId) {
         try {
             const id = validateUuid(walletId, "walletId");
-            const data = await this._req("DELETE", `/api/agent-wallet/${id}`);
+            const data = await this._req("DELETE", `/api/agent-wallet/${encodeURIComponent(id)}`);
             return ok(JSON.stringify(data, null, 2));
         }
         catch (e) {
@@ -903,7 +917,7 @@ class DominusNodeToolkit {
     async teamDetails(teamId) {
         try {
             const id = validateUuid(teamId, "teamId");
-            const data = await this._req("GET", `/api/teams/${id}`);
+            const data = await this._req("GET", `/api/teams/${encodeURIComponent(id)}`);
             return ok(JSON.stringify(data, null, 2));
         }
         catch (e) {
@@ -919,7 +933,7 @@ class DominusNodeToolkit {
             const amount = Math.floor(Number(amountCents));
             if (isNaN(amount) || amount < 1 || amount > 1000000)
                 return err("amountCents must be between 1 and 1,000,000");
-            const data = await this._req("POST", `/api/teams/${id}/wallet/fund`, { amountCents: amount });
+            const data = await this._req("POST", `/api/teams/${encodeURIComponent(id)}/wallet/fund`, { amountCents: amount });
             return ok(JSON.stringify(data, null, 2));
         }
         catch (e) {
@@ -935,7 +949,7 @@ class DominusNodeToolkit {
             const labelErr = validateLabel(label);
             if (labelErr)
                 return err(labelErr);
-            const data = await this._req("POST", `/api/teams/${id}/keys`, { label: label.trim() });
+            const data = await this._req("POST", `/api/teams/${encodeURIComponent(id)}/keys`, { label: label.trim() });
             return ok(JSON.stringify(data, null, 2) + "\n\nIMPORTANT: Store this API key securely — it will not be shown again.");
         }
         catch (e) {
@@ -954,7 +968,7 @@ class DominusNodeToolkit {
             const d = Math.max(1, Math.min(365, Math.floor(rawDays)));
             const until = new Date().toISOString();
             const since = new Date(Date.now() - d * 86400000).toISOString();
-            const data = await this._req("GET", `/api/teams/${id}/usage?since=${encodeURIComponent(since)}&until=${encodeURIComponent(until)}`);
+            const data = await this._req("GET", `/api/teams/${encodeURIComponent(id)}/usage?since=${encodeURIComponent(since)}&until=${encodeURIComponent(until)}`);
             return ok(JSON.stringify(data, null, 2));
         }
         catch (e) {
@@ -982,7 +996,7 @@ class DominusNodeToolkit {
             }
             if (!Object.keys(body).length)
                 return err("At least one of name or maxMembers must be provided");
-            const data = await this._req("PATCH", `/api/teams/${id}`, body);
+            const data = await this._req("PATCH", `/api/teams/${encodeURIComponent(id)}`, body);
             return ok(JSON.stringify(data, null, 2));
         }
         catch (e) {
@@ -1098,7 +1112,477 @@ class DominusNodeToolkit {
             }
             if (!Object.keys(body).length)
                 return err("At least one of dailyLimitCents or allowedDomains must be provided");
-            const data = await this._req("PATCH", `/api/agent-wallet/${id}/policy`, body);
+            const data = await this._req("PATCH", `/api/agent-wallet/${encodeURIComponent(id)}/policy`, body);
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Unauthenticated request helper (register, login, verify-email)
+    // -----------------------------------------------------------------------
+    async _rawRequest(method, path, body) {
+        const url = `${this.baseUrl}${path}`;
+        const headers = {
+            Accept: "application/json",
+            "User-Agent": "dominusnode-pi/1.0.0",
+        };
+        if (this.agentSecret) {
+            headers["X-DominusNode-Agent"] = "mcp";
+            headers["X-DominusNode-Agent-Secret"] = this.agentSecret;
+        }
+        const init = { method, headers, signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS), redirect: "error" };
+        if (body && ["POST", "PUT", "PATCH", "DELETE"].includes(method)) {
+            headers["Content-Type"] = "application/json";
+            init.body = JSON.stringify(body);
+        }
+        let res;
+        try {
+            res = await fetch(url, init);
+        }
+        catch (e) {
+            throw new Error(`API request failed: ${safeError(e)}`);
+        }
+        let rawText = "";
+        if (res.body) {
+            const reader = res.body.getReader();
+            const chunks = [];
+            let totalBytes = 0;
+            try {
+                while (true) {
+                    const { done, value } = await reader.read();
+                    if (done)
+                        break;
+                    totalBytes += value.length;
+                    if (totalBytes > MAX_RESPONSE_BYTES) {
+                        reader.cancel().catch(() => { });
+                        throw new Error("API response too large");
+                    }
+                    chunks.push(value);
+                }
+            }
+            catch (e) {
+                reader.cancel().catch(() => { });
+                throw e;
+            }
+            rawText = Buffer.concat(chunks).toString("utf-8");
+        }
+        if (!res.ok) {
+            let msg = `API error ${res.status}`;
+            try {
+                const parsed = JSON.parse(rawText);
+                stripDangerousKeys(parsed);
+                const detail = parsed.error ?? parsed.message;
+                if (detail)
+                    msg = `API error ${res.status}: ${scrubCredentials(String(detail))}`;
+            }
+            catch {
+                if (rawText)
+                    msg = `API error ${res.status}: ${scrubCredentials(rawText.slice(0, 200))}`;
+            }
+            throw new Error(msg);
+        }
+        if (!rawText || !rawText.trim())
+            return {};
+        try {
+            const parsed = JSON.parse(rawText);
+            stripDangerousKeys(parsed);
+            return parsed;
+        }
+        catch {
+            throw new Error("Failed to parse API response as JSON");
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Validation helpers for account tools
+    // -----------------------------------------------------------------------
+    static EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+    static validateEmail(email) {
+        const trimmed = email.trim();
+        if (!trimmed || !DominusNodeToolkit.EMAIL_RE.test(trimmed)) {
+            throw new Error("Invalid email address.");
+        }
+        if (trimmed.length > 254) {
+            throw new Error("Email address too long (max 254 characters).");
+        }
+        return trimmed;
+    }
+    static validatePassword(password) {
+        if (!password || password.length < 8) {
+            throw new Error("Password must be at least 8 characters.");
+        }
+        if (password.length > 128) {
+            throw new Error("Password must be at most 128 characters.");
+        }
+        return password;
+    }
+    // -----------------------------------------------------------------------
+    // Tool 27: getProxyStatus
+    // -----------------------------------------------------------------------
+    async getProxyStatus() {
+        try {
+            const data = await this._req("GET", "/api/proxy/status");
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 28: getTransactions
+    // -----------------------------------------------------------------------
+    async getTransactions(limit = 20) {
+        try {
+            const rawLim = Number(limit);
+            if (!Number.isFinite(rawLim))
+                return err("limit must be a finite number");
+            const lim = Math.max(1, Math.min(100, Math.floor(rawLim)));
+            const data = await this._req("GET", `/api/wallet/transactions?limit=${lim}`);
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 29: getForecast
+    // -----------------------------------------------------------------------
+    async getForecast() {
+        try {
+            const data = await this._req("GET", "/api/wallet/forecast");
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 30: checkPayment
+    // -----------------------------------------------------------------------
+    async checkPayment(invoiceId) {
+        try {
+            const id = validateUuid(invoiceId, "invoiceId");
+            const data = await this._req("GET", `/api/wallet/topup/crypto/${encodeURIComponent(id)}/status`);
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 31: getDailyUsage
+    // -----------------------------------------------------------------------
+    async getDailyUsage(days = 7) {
+        try {
+            const rawDays = Number(days);
+            if (!Number.isFinite(rawDays))
+                return err("days must be a finite number between 1 and 365");
+            const d = Math.max(1, Math.min(365, Math.floor(rawDays)));
+            const data = await this._req("GET", `/api/usage/daily?days=${d}`);
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 32: getTopHosts
+    // -----------------------------------------------------------------------
+    async getTopHosts(limit = 10) {
+        try {
+            const rawLim = Number(limit);
+            if (!Number.isFinite(rawLim))
+                return err("limit must be a finite number");
+            const lim = Math.max(1, Math.min(100, Math.floor(rawLim)));
+            const data = await this._req("GET", `/api/usage/top-hosts?limit=${lim}`);
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 33: register
+    // -----------------------------------------------------------------------
+    async register(email, password) {
+        try {
+            const safeEmail = DominusNodeToolkit.validateEmail(email);
+            const safePassword = DominusNodeToolkit.validatePassword(password);
+            const data = await this._rawRequest("POST", "/api/auth/register", { email: safeEmail, password: safePassword });
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 34: login
+    // -----------------------------------------------------------------------
+    async login(email, password) {
+        try {
+            const safeEmail = DominusNodeToolkit.validateEmail(email);
+            const safePassword = DominusNodeToolkit.validatePassword(password);
+            const data = await this._rawRequest("POST", "/api/auth/login", { email: safeEmail, password: safePassword });
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 35: getAccountInfo
+    // -----------------------------------------------------------------------
+    async getAccountInfo() {
+        try {
+            const data = await this._req("GET", "/api/auth/me");
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 36: verifyEmail
+    // -----------------------------------------------------------------------
+    async verifyEmail(token) {
+        try {
+            if (!token || typeof token !== "string" || token.trim().length === 0) {
+                return err("Verification token is required.");
+            }
+            if (/[\x00-\x1f\x7f]/.test(token)) {
+                return err("Token contains invalid control characters.");
+            }
+            const data = await this._rawRequest("POST", "/api/auth/verify-email", { token: token.trim() });
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 37: resendVerification
+    // -----------------------------------------------------------------------
+    async resendVerification() {
+        try {
+            const data = await this._req("POST", "/api/auth/resend-verification");
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 38: updatePassword
+    // -----------------------------------------------------------------------
+    async updatePassword(currentPassword, newPassword) {
+        try {
+            DominusNodeToolkit.validatePassword(currentPassword);
+            DominusNodeToolkit.validatePassword(newPassword);
+            const data = await this._req("POST", "/api/auth/change-password", { currentPassword, newPassword });
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 39: listKeys
+    // -----------------------------------------------------------------------
+    async listKeys() {
+        try {
+            const data = await this._req("GET", "/api/keys");
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 40: createKey
+    // -----------------------------------------------------------------------
+    async createKey(label) {
+        try {
+            const labelErr = validateLabel(label);
+            if (labelErr)
+                return err(labelErr);
+            const data = await this._req("POST", "/api/keys", { label: label.trim() });
+            return ok(JSON.stringify(data, null, 2) + "\n\nIMPORTANT: Store this API key securely — it will not be shown again.");
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 41: revokeKey
+    // -----------------------------------------------------------------------
+    async revokeKey(keyId) {
+        try {
+            const id = validateUuid(keyId, "keyId");
+            const data = await this._req("DELETE", `/api/keys/${encodeURIComponent(id)}`);
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 42: getPlan
+    // -----------------------------------------------------------------------
+    async getPlan() {
+        try {
+            const data = await this._req("GET", "/api/plans/user/plan");
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 43: listPlans
+    // -----------------------------------------------------------------------
+    async listPlans() {
+        try {
+            const data = await this._req("GET", "/api/plans");
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 44: changePlan
+    // -----------------------------------------------------------------------
+    async changePlan(planId) {
+        try {
+            const id = validateUuid(planId, "planId");
+            const data = await this._req("PUT", "/api/plans/user/plan", { planId: id });
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 45: teamDelete
+    // -----------------------------------------------------------------------
+    async teamDelete(teamId) {
+        try {
+            const id = validateUuid(teamId, "teamId");
+            const data = await this._req("DELETE", `/api/teams/${encodeURIComponent(id)}`);
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 46: teamRevokeKey
+    // -----------------------------------------------------------------------
+    async teamRevokeKey(teamId, keyId) {
+        try {
+            const tid = validateUuid(teamId, "teamId");
+            const kid = validateUuid(keyId, "keyId");
+            const data = await this._req("DELETE", `/api/teams/${encodeURIComponent(tid)}/keys/${encodeURIComponent(kid)}`);
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 47: teamListKeys
+    // -----------------------------------------------------------------------
+    async teamListKeys(teamId) {
+        try {
+            const id = validateUuid(teamId, "teamId");
+            const data = await this._req("GET", `/api/teams/${encodeURIComponent(id)}/keys`);
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 48: teamListMembers
+    // -----------------------------------------------------------------------
+    async teamListMembers(teamId) {
+        try {
+            const id = validateUuid(teamId, "teamId");
+            const data = await this._req("GET", `/api/teams/${encodeURIComponent(id)}/members`);
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 49: teamAddMember
+    // -----------------------------------------------------------------------
+    async teamAddMember(teamId, userId, role = "member") {
+        try {
+            const tid = validateUuid(teamId, "teamId");
+            const uid = validateUuid(userId, "userId");
+            if (role !== "member" && role !== "admin")
+                return err("role must be 'member' or 'admin'");
+            const data = await this._req("POST", `/api/teams/${encodeURIComponent(tid)}/members`, { userId: uid, role });
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 50: teamRemoveMember
+    // -----------------------------------------------------------------------
+    async teamRemoveMember(teamId, userId) {
+        try {
+            const tid = validateUuid(teamId, "teamId");
+            const uid = validateUuid(userId, "userId");
+            const data = await this._req("DELETE", `/api/teams/${encodeURIComponent(tid)}/members/${encodeURIComponent(uid)}`);
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 51: teamInviteMember
+    // -----------------------------------------------------------------------
+    async teamInviteMember(teamId, email, role = "member") {
+        try {
+            const id = validateUuid(teamId, "teamId");
+            const safeEmail = DominusNodeToolkit.validateEmail(email);
+            if (role !== "member" && role !== "admin")
+                return err("role must be 'member' or 'admin'");
+            const data = await this._req("POST", `/api/teams/${encodeURIComponent(id)}/invites`, { email: safeEmail, role });
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 52: teamListInvites
+    // -----------------------------------------------------------------------
+    async teamListInvites(teamId) {
+        try {
+            const id = validateUuid(teamId, "teamId");
+            const data = await this._req("GET", `/api/teams/${encodeURIComponent(id)}/invites`);
+            return ok(JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            return err(e);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Tool 53: teamCancelInvite
+    // -----------------------------------------------------------------------
+    async teamCancelInvite(teamId, inviteId) {
+        try {
+            const tid = validateUuid(teamId, "teamId");
+            const iid = validateUuid(inviteId, "inviteId");
+            const data = await this._req("DELETE", `/api/teams/${encodeURIComponent(tid)}/invites/${encodeURIComponent(iid)}`);
             return ok(JSON.stringify(data, null, 2));
         }
         catch (e) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dominusnode/pi-extension",
-  "version": "1.0.0",
+  "version": "1.2.0",
   "description": "Dominus Node pi-mono extension — 26 tools for rotating proxy, wallet, agentic wallets, teams, and payments",
   "keywords": [
     "pi-package",
@@ -20,8 +20,12 @@
     "CHANGELOG.md"
   ],
   "pi": {
-    "extensions": ["./dist"],
-    "skills": ["./skills"]
+    "extensions": [
+      "./dist"
+    ],
+    "skills": [
+      "./skills"
+    ]
   },
   "scripts": {
     "build": "tsc",