@muxoai/platform 1.2.3 → 1.3.1

package/dist/server.js

@@ -10,35 +10,51 @@ import { renderConsoleHtml, renderLandingHtml } from "./ui/console-html.js";
 function renderSkillMarkdown(baseUrl) {
     return `---
 name: muxo
-description: Discover, plan, and execute governed actions across Connected Apps (Composio SDK), Instant Tools (Composio Instant), Cloud Infrastructure (Stripe Projects), Contextual Memory (Supermemory v5), and Cryptographic Governance (Microsoft Agent Governance Toolkit) through Muxo.
+description: Discover, plan, and execute governed actions across Connected Apps (app.*), Instant Tools (instant.*), Cloud Infrastructure (resource.*), Workspace Memory, and Safety Guardrails through Muxo.
 ---
 
-# Muxo — Unified Agent Execution, Infrastructure, Memory & Governance Platform
+# Muxo — Unified Agent Execution, Infrastructure, Memory & Safety Platform
 
-Muxo provides one governed interface over 4 pillars so agents and customers only ever interact with Muxo:
+Muxo provides one unified interface across 4 capabilities so agents and users only ever interact with Muxo:
 
-1. **Instant Tools (\`instant.*\`)**: Zero-OAuth tools powered by Composio Instant (\`instant.web.search\`, \`instant.web.scrape\`, \`instant.hackernews.top_stories\`, \`instant.github.repo_intel\`, \`instant.dns.lookup\`).
-2. **Connected Apps (\`app.*\`)**: Managed OAuth SaaS integrations powered by Composio SDK (\`app.github.*\`, \`app.gmail.*\`, \`app.slack.*\`, \`app.notion.*\`, \`app.linear.*\`, etc.).
-3. **Cloud Infrastructure (\`resource.*\`)**: Database, cache, storage, and hosting provisioning powered by Stripe Projects (\`resource.neon.*\`, \`resource.supabase.*\`, \`resource.turso.*\`, \`resource.cloudflare.*\`, \`resource.vercel.*\`, etc.) with AES-256-GCM secret custody in Muxo Vault.
-4. **Supermemory v5 Brain & Microsoft Agent Governance**: Every \`plan_action\` recalls isolated workspace context (\`/ns/muxo-v5-<hash>\`) and runs \`Agent ──► McpSecurityScanner ──► PolicyEngine ──► AgentIdentity (Ed25519 DID) ──► AuditLogger ──► DecisionRecord\`.
+1. **Instant Tools (\`instant.*\`)**: Zero-OAuth tools ready immediately (\`instant.web.search\`, \`instant.web.scrape\`, \`instant.web.crawl\`, \`instant.seo.audit\`, \`instant.hackernews.top_stories\`, \`instant.github.repo_intel\`, \`instant.dns.lookup\`).
+2. **Connected Apps (\`app.*\`)**: Managed OAuth SaaS integrations (\`app.github.*\`, \`app.gmail.*\`, \`app.slack.*\`, \`app.notion.*\`, \`app.linear.*\`, etc.).
+3. **Cloud Infrastructure (\`resource.*\`)**: Database, cache, storage, and hosting provisioning (\`resource.neon.*\`, \`resource.supabase.*\`, \`resource.turso.*\`, \`resource.cloudflare.*\`, \`resource.vercel.*\`, etc.) with AES-256-GCM secret custody in Muxo Vault.
+4. **Workspace Memory & Safety Guardrails**: Every \`plan_action\` recalls isolated workspace context (\`/ns/muxo-v5-<hash>\`), scans inputs for prompt injection, enforces risk-lane approval policies, and records a verifiable audit log.
 
-## Installable Muxo Plugin (OpenAI Codex, ChatGPT, Claude Code & Factory Droid)
+## Installable Muxo Plugin (Claude Code, OpenAI Codex, Claude Desktop & ChatGPT)
+
+> **Requirement:** \`@muxoai/cli\` requires **Node.js 22+** (\`node >= 22.0.0\`).
 
 \`\`\`bash
-# Install Muxo CLI & sign in (or auto-provision an isolated external workspace)
-npm install -g muxo-platform
+# Install Muxo CLI & sign in against the hosted workspace (Node.js 22+)
+npm install -g @muxoai/cli@latest
 muxo login --signup --name "my-agent"
 
+# Claude Code marketplace (muxo@muxo):
+claude plugin marketplace add ${baseUrl}/.claude-plugin/marketplace.json
+claude plugin install muxo@muxo
+
+# OpenAI Codex: add a Git repo or local marketplace directory containing .agents/plugins/marketplace.json,
+# or configure [mcp_servers.muxo] in ~/.codex/config.toml (url = "${baseUrl}/mcp")
+
+# Claude Desktop:
+# - Hosted MCP: Settings -> Connectors -> Add custom connector -> ${baseUrl}/mcp
+# - Local stdio server: configure npx -y @muxoai/cli@latest mcp in claude_desktop_config.json
+
+# ChatGPT:
+# - Plugins -> + -> Add custom MCP server -> ${baseUrl}/mcp (OAuth supports CIMD or DCR)
+
 # Link OAuth apps with live browser handoff + polling recovery
 muxo link github --wait
 
 # Plugin manifests served by this instance:
-# - ${baseUrl}/.agents/plugins/marketplace.json (OpenAI Codex / ChatGPT)
-# - ${baseUrl}/.claude-plugin/marketplace.json (Claude Code / Factory Droid)
+# - ${baseUrl}/.agents/plugins/marketplace.json (OpenAI Codex local/Git marketplace manifest)
+# - ${baseUrl}/.claude-plugin/marketplace.json (Claude Code marketplace manifest)
 # - ${baseUrl}/api/v1/plugin
 \`\`\`
 
-## Autonomous Agent 2-Call Signup (Zero Browser Required)
+## CLI-First Autonomous Agent 2-Call Signup
 
 \`\`\`bash
 # 1. Create an autonomous workspace + mk_live_* API key
@@ -154,7 +170,7 @@ export function createMuxoServer(customConfig) {
                     ok: true,
                     status: "ready",
                     service: "muxo-platform",
-                    version: "1.2.3",
+                    version: "1.3.1",
                     environment: "production",
                     live_execution: true,
                     customer_billing: true,
@@ -241,10 +257,21 @@ export function createMuxoServer(customConfig) {
                     ],
                     code_challenge_methods_supported: ["S256", "plain"],
                     client_id_metadata_document_supported: true,
+                    authorization_response_iss_parameter_supported: true,
                     service_documentation: `${config.docsUrl}/quickstart`,
                 });
                 return;
             }
+            if (pathname === "/.well-known/openai-apps-challenge" && req.method === "GET") {
+                const challenge = process.env.OPENAI_APPS_CHALLENGE ||
+                    "muxo-openai-apps-domain-verified";
+                res.writeHead(200, {
+                    "Content-Type": "text/plain; charset=utf-8",
+                    "Access-Control-Allow-Origin": "*",
+                });
+                res.end(challenge);
+                return;
+            }
             if (pathname === "/oauth/register" && req.method === "POST") {
                 const body = JSON.parse((await readBody(req)) || "{}");
                 const clientId = typeof body.client_id === "string" && body.client_id.trim()
@@ -311,16 +338,22 @@ export function createMuxoServer(customConfig) {
                     apiKey: issuedKey,
                     expiresAt: Date.now() + 10 * 60 * 1000,
                 });
+                const proto = String(req.headers["x-forwarded-proto"] || "http").split(",")[0].trim();
+                const requestOrigin = req.headers.host
+                    ? `${proto}://${req.headers.host}`
+                    : config.baseUrl;
                 const redirectTarget = new URL(redirectUri);
                 redirectTarget.searchParams.set("code", code);
                 if (stateParam)
                     redirectTarget.searchParams.set("state", stateParam);
+                redirectTarget.searchParams.set("iss", requestOrigin);
                 if (url.searchParams.get("format") === "json" ||
                     String(req.headers.accept || "").includes("application/json")) {
                     sendJson(res, 200, {
                         ok: true,
                         code,
                         state: stateParam || null,
+                        iss: requestOrigin,
                         client_id: clientId,
                         redirect_uri: redirectTarget.toString(),
                     });
@@ -409,11 +442,16 @@ export function createMuxoServer(customConfig) {
             }
             if (pathname === "/oauth/userinfo" && req.method === "GET") {
                 const ctx = resolveContext(req);
+                const nickname = (ctx.user.email || "").split("@")[0] ||
+                    ctx.user.name.toLowerCase().replace(/\s+/g, ".") ||
+                    ctx.user.id;
                 sendJson(res, 200, {
                     sub: ctx.user.id,
                     id: ctx.user.id,
                     name: ctx.user.name,
                     email: ctx.user.email,
+                    email_verified: true,
+                    nickname,
                     workspace_id: ctx.workspace.id,
                     workspace_name: ctx.workspace.name,
                     tier: ctx.workspace.tier,
@@ -426,7 +464,7 @@ export function createMuxoServer(customConfig) {
                     openapi: "3.1.0",
                     info: {
                         title: "Muxo Unified Agent Execution, Infrastructure, Memory & Governance API",
-                        version: "1.2.3",
+                        version: "1.3.1",
                         description: "One governed boundary over Connected Apps (Composio SDK), Instant Tools (Composio Instant), Cloud Infrastructure (Stripe Projects), Supermemory v5 Brain, and Microsoft Agent Governance Toolkit.",
                     },
                     servers: [{ url: config.baseUrl }],
@@ -475,12 +513,12 @@ Or via HTTP:
 curl -sX POST ${config.baseUrl}/api/v1/agents/signup -H "Content-Type: application/json" -d '{"agentName":"my-agent"}'
 \`\`\`
 
-## 2. OAuth Connection Handoff (Composio Plugin Pattern)
+## 2. OAuth Connection Handoff
 When \`plan_action\` targets an unconnected \`app.<provider>.*\` tool, Muxo returns \`authHandoff.redirectUrl\`.
 Open the URL in a browser, complete OAuth (which redirects to \`${config.baseUrl}/oauth/callback\`), and call \`wait_for_connection({ provider })\` or \`muxo link <provider> --wait\`.
 
-## 3. Merchant-of-Record Credit Settlement
-Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing topup 1000\`), and Muxo settles wholesale supplier costs across Composio and Stripe Projects from Muxo's master accounts (\`fundingMode: "muxo_funded"\`).
+## 3. Credit Billing & BYOK Support
+Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing topup 1000\`), and Muxo settles upstream execution costs from Muxo's master accounts (\`fundingMode: "muxo_funded"\`), or users can configure their own BYOK provider keys for 0-credit execution.
 `);
                 return;
             }
@@ -507,7 +545,7 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
             }
             if (pathname === "/llms.txt" && req.method === "GET") {
                 res.writeHead(200, { "Content-Type": "text/plain; charset=utf-8" });
-                res.end(`# Muxo\n> Unified execution, cloud provisioning, Supermemory v5 brain, and Microsoft Agent Governance boundary.\n\n- Skill Document: ${config.baseUrl}/skill.md\n- Auth Guide: ${config.baseUrl}/auth.md\n- OpenAPI 3.1 Spec: ${config.baseUrl}/api/openapi.json\n- MCP Endpoint: ${config.baseUrl}/mcp\n- OAuth Callback Handoff: ${config.baseUrl}/oauth/callback\n- Plugin Marketplace (Codex/OpenAI): ${config.baseUrl}/.agents/plugins/marketplace.json\n- Plugin Marketplace (Claude/Droid): ${config.baseUrl}/.claude-plugin/marketplace.json\n- Console (app.muxo.ai): ${config.baseUrl}/\n- Landing & Provider Canvas (muxo.ai): ${config.baseUrl}/landing\n- Documentation (docs.muxo.ai): ${config.docsUrl}\n`);
+                res.end(`# Muxo\n> Unified agent execution across Connected Apps, Instant Tools, Cloud Infrastructure, Workspace Memory, and Safety Guardrails.\n\n- Skill Document: ${config.baseUrl}/skill.md\n- Auth Guide: ${config.baseUrl}/auth.md\n- OpenAPI 3.1 Spec: ${config.baseUrl}/api/openapi.json\n- MCP Endpoint: ${config.baseUrl}/mcp\n- OAuth Callback Handoff: ${config.baseUrl}/oauth/callback\n- Plugin Marketplace (Codex/OpenAI): ${config.baseUrl}/.agents/plugins/marketplace.json\n- Plugin Marketplace (Claude/Droid): ${config.baseUrl}/.claude-plugin/marketplace.json\n- Console (app.muxo.ai): ${config.baseUrl}/\n- Landing & Provider Canvas (muxo.ai): ${config.baseUrl}/landing\n- Documentation (docs.muxo.ai): ${config.docsUrl}\n`);
                 return;
             }
             // Serve Installable Muxo Plugin Manifests & Metadata (Portable OpenAI Agent Plugins + Codex + Claude)
@@ -616,6 +654,11 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                     sendJson(res, 404, { ok: false, error: "Invalid or expired agent claim link" });
                     return;
                 }
+                const claimConsoleKey = store.createApiKey({
+                    workspaceId: redeemed.workspace.id,
+                    name: `Owner Claim Session (${redeemed.targetEmail})`,
+                    environment: "live",
+                }).secretKey;
                 const wantsHtml = url.searchParams.get("format") !== "json" &&
                     String(req.headers.accept || "").includes("text/html");
                 if (wantsHtml) {
@@ -640,7 +683,7 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
     <div class="badge">Ownership Bound</div>
     <h1>Workspace Claimed</h1>
     <p>Workspace <code>${redeemed.workspace.name}</code> (${redeemed.workspace.id}) claimed by <strong>${redeemed.targetEmail}</strong>.</p>
-    <a class="btn" href="/?claimed=${encodeURIComponent(redeemed.workspace.slug)}">Open Muxo Console →</a>
+    <a class="btn" href="/?claimed=${encodeURIComponent(redeemed.workspace.slug)}&api_key=${encodeURIComponent(claimConsoleKey)}">Open Muxo Console →</a>
   </div>
 </body>
 </html>`);
@@ -649,6 +692,7 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                 sendJson(res, 200, {
                     ok: true,
                     message: `Workspace '${redeemed.workspace.name}' claimed by ${redeemed.targetEmail}`,
+                    apiKey: claimConsoleKey,
                     claim: redeemed,
                 });
                 return;
@@ -735,8 +779,8 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                 });
                 return;
             }
-            // Streamable HTTP MCP Endpoint (POST /mcp, GET /mcp, DELETE /mcp)
-            if (pathname === "/mcp" && req.method === "GET") {
+            // Streamable HTTP MCP Endpoint (POST /mcp, GET /mcp, HEAD /mcp, DELETE /mcp)
+            if (pathname === "/mcp" && (req.method === "GET" || req.method === "HEAD")) {
                 const accept = String(req.headers.accept || "");
                 const sessionId = String(req.headers["mcp-session-id"] || "") ||
                     `mcp_sess_${crypto.randomBytes(8).toString("hex")}`;
@@ -747,8 +791,11 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                         Connection: "keep-alive",
                         "Mcp-Session-Id": sessionId,
                         "Access-Control-Allow-Origin": "*",
+                        "Access-Control-Expose-Headers": "Mcp-Session-Id",
                     });
-                    res.write(`event: endpoint\ndata: ${JSON.stringify({ uri: `${config.baseUrl}/mcp`, sessionId })}\n\n`);
+                    if (req.method !== "HEAD") {
+                        res.write(`event: endpoint\ndata: ${JSON.stringify({ uri: `${config.baseUrl}/mcp`, sessionId })}\n\n`);
+                    }
                     res.end();
                     return;
                 }
@@ -758,12 +805,12 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                     protocolVersion: "2025-06-18",
                     serverInfo: {
                         name: "muxo-mcp-server",
-                        version: "1.2.3",
+                        version: "1.3.1",
                     },
                     instructions: MUXO_MCP_SERVER_INSTRUCTIONS,
                     toolsCount: MUXO_MCP_TOOLS.length,
                     skillsCount: getMuxoMcpSkills().length,
-                });
+                }, { "Mcp-Session-Id": sessionId });
                 return;
             }
             if (pathname === "/mcp" && req.method === "DELETE") {
@@ -838,6 +885,7 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                         landingUrl: `${config.baseUrl}/landing`,
                     },
                     apiKeys: store.listApiKeys(ctx.workspace.id),
+                    byokKeys: store.listByokKeys(ctx.workspace.id),
                     defaultApiKey: bootstrap.defaultApiKey || null,
                     connections: store.listConnections(ctx.workspace.id),
                     resources: store.listResources(ctx.workspace.id),
@@ -859,7 +907,12 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                     email,
                     baseUrl: config.baseUrl,
                 });
-                sendJson(res, 201, { ok: true, claim, ...claim });
+                sendJson(res, 201, {
+                    ok: true,
+                    claim: { ...claim, ownerEmail: email },
+                    ...claim,
+                    ownerEmail: email,
+                });
                 return;
             }
             // Microsoft Agent Governance Status & Audit Verification
@@ -1041,7 +1094,11 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                 const planId = decodeURIComponent(planExecuteMatch[1]);
                 const plan = engine.getPlan(ctx, planId);
                 const result = await engine.executePlanForRisk(ctx, planId, plan.riskLevel);
-                sendJson(res, 200, { ok: true, ...result });
+                sendJson(res, 200, {
+                    ok: true,
+                    ...result,
+                    settlement: result.receipt?.supplierSettlement || null,
+                });
                 return;
             }
             // Runs & Receipts
@@ -1058,7 +1115,91 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                 sendJson(res, 200, { ok: true, ...verified });
                 return;
             }
+            // BYOK (Bring Your Own Key) Encrypted Vault Management
+            if (pathname === "/api/v1/byok" && req.method === "GET") {
+                sendJson(res, 200, {
+                    ok: true,
+                    workspaceId: ctx.workspace.id,
+                    keys: store.listByokKeys(ctx.workspace.id),
+                });
+                return;
+            }
+            if (pathname === "/api/v1/byok" && req.method === "POST") {
+                const body = JSON.parse((await readBody(req)) || "{}");
+                const provider = String(body.provider || "").trim();
+                const secretKey = String(body.secretKey || body.apiKey || body.key || "").trim();
+                if (!provider || !secretKey) {
+                    sendJson(res, 400, {
+                        ok: false,
+                        error: "Both 'provider' and 'secretKey' are required",
+                    });
+                    return;
+                }
+                const record = store.setByokKey(ctx.workspace.id, provider, secretKey);
+                sendJson(res, 201, {
+                    ok: true,
+                    key: record,
+                    keys: store.listByokKeys(ctx.workspace.id),
+                });
+                return;
+            }
+            if (pathname.startsWith("/api/v1/byok/") && req.method === "DELETE") {
+                const provider = decodeURIComponent(pathname.slice("/api/v1/byok/".length));
+                const deleted = store.deleteByokKey(ctx.workspace.id, provider);
+                sendJson(res, 200, {
+                    ok: true,
+                    deleted,
+                    provider,
+                    keys: store.listByokKeys(ctx.workspace.id),
+                });
+                return;
+            }
+            // Natural Language Intent & Governed Execution Endpoint
+            if ((pathname === "/api/v1/do" || pathname === "/v1/do") &&
+                req.method === "POST") {
+                const body = JSON.parse((await readBody(req)) || "{}");
+                const prompt = String(body.prompt || body.instruction || body.query || body.command || "").trim();
+                if (!prompt) {
+                    sendJson(res, 400, {
+                        ok: false,
+                        error: "Missing 'prompt' or 'instruction' in request body",
+                    });
+                    return;
+                }
+                const result = await engine.doNaturalLanguage(ctx, {
+                    prompt,
+                    input: body.input && typeof body.input === "object"
+                        ? body.input
+                        : undefined,
+                    autoApprove: body.autoApprove !== false,
+                    dryRun: body.dryRun === true,
+                });
+                sendJson(res, 200, result);
+                return;
+            }
             // Live Stripe Billing, Credit Top-Up & Supplier Settlement Ledger
+            if (pathname === "/api/v1/billing/status" && req.method === "GET") {
+                const ws = store.getWorkspace(ctx.workspace.id);
+                const settlementSummary = store.getSupplierSettlementSummary(ctx.workspace.id);
+                const byokKeys = store.listByokKeys(ctx.workspace.id);
+                sendJson(res, 200, {
+                    ok: true,
+                    workspaceId: ws.id,
+                    workspace: ws,
+                    tier: ws.tier,
+                    creditsBalance: ws.creditsBalance,
+                    creditBalance: ws.creditsBalance,
+                    monthlyActionsUsed: ws.monthlyActionsUsed,
+                    monthlyActionsLimit: ws.monthlyActionsLimit,
+                    stripeConfigured: engine.stripeBilling.isConfigured,
+                    stripeCustomerId: ws.stripeCustomerId,
+                    stripeSubscriptionId: ws.stripeSubscriptionId,
+                    settlementSummary,
+                    byokKeys,
+                    entries: store.listLedgerEntries(ctx.workspace.id, 25),
+                });
+                return;
+            }
             if (pathname === "/api/v1/billing/ledger" && req.method === "GET") {
                 sendJson(res, 200, {
                     ok: true,
@@ -1091,27 +1232,59 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                 sendJson(res, 200, {
                     ok: true,
                     creditsAdded: credits,
+                    creditBalance: updatedWorkspace.creditsBalance,
+                    creditsBalance: updatedWorkspace.creditsBalance,
                     usdPaid: Number(usdPaid),
                     workspace: updatedWorkspace,
                     settlementSummary: store.getSupplierSettlementSummary(ctx.workspace.id),
                 });
                 return;
             }
+            if (pathname === "/api/v1/billing/upgrade" && req.method === "POST") {
+                const body = JSON.parse((await readBody(req)) || "{}");
+                const referenceId = String(body.referenceId || "").trim() ||
+                    `upgrade_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
+                const bonusCredits = body.bonusCredits !== undefined ? Number(body.bonusCredits) : 1000;
+                const updatedWorkspace = store.upgradeWorkspaceToStarter({
+                    workspaceId: ctx.workspace.id,
+                    stripeCustomerId: ctx.workspace.stripeCustomerId ||
+                        `cus_muxo_${ctx.workspace.id.slice(3, 11)}`,
+                    stripeSubscriptionId: ctx.workspace.stripeSubscriptionId ||
+                        `sub_muxo_${referenceId.slice(-10)}`,
+                    referenceId,
+                    bonusCredits,
+                });
+                sendJson(res, 200, {
+                    ok: true,
+                    tier: updatedWorkspace.tier,
+                    creditsBalance: updatedWorkspace.creditsBalance,
+                    creditBalance: updatedWorkspace.creditsBalance,
+                    workspace: updatedWorkspace,
+                    settlementSummary: store.getSupplierSettlementSummary(ctx.workspace.id),
+                });
+                return;
+            }
             if (pathname === "/api/v1/billing/checkout" && req.method === "POST") {
                 const body = JSON.parse((await readBody(req)) || "{}");
                 const kind = body.kind === "credit_topup" ? "credit_topup" : "starter_subscription";
+                const credits = body.credits ? Number(body.credits) : 1000;
                 const session = await engine.stripeBilling.createCheckoutSession({
                     workspace: ctx.workspace,
                     customerEmail: ctx.user.email,
                     kind,
-                    returnBaseUrl: config.baseUrl,
+                    credits,
+                    returnBaseUrl: body.returnBaseUrl ? String(body.returnBaseUrl) : config.baseUrl,
                 });
                 sendJson(res, 200, { ok: true, ...session });
                 return;
             }
             if (pathname === "/api/v1/billing/verify-session" && req.method === "POST") {
                 const body = JSON.parse((await readBody(req)) || "{}");
-                const verified = await engine.stripeBilling.verifyAndFulfillCheckoutSession(String(body.sessionId || ""));
+                const verified = await engine.stripeBilling.verifyAndFulfillCheckoutSession(String(body.sessionId || ""), ctx.workspace.id, body.kind === "credit_topup"
+                    ? "credit_topup"
+                    : body.kind === "starter_subscription"
+                        ? "starter_subscription"
+                        : undefined);
                 sendJson(res, 200, { ok: true, ...verified });
                 return;
             }

package/dist/store.d.ts

@@ -1,5 +1,10 @@
 import { DatabaseSync } from "node:sqlite";
-import type { ActionPlan, ApiKeyRecord, ConnectionRecord, ExecutionReceipt, ExecutionRun, GovernanceDecisionRecord, GovernancePolicy, LedgerEntry, MemoryContextSummary, ProviderLane, ProvisionedResource, RiskLevel, SupplierSettlement, SupplierSettlementSummary, User, Workspace, WorkspaceMemoryRecord } from "./types.js";
+import type { ActionPlan, ApiKeyRecord, ByokKeyRecord, ConnectionRecord, ExecutionReceipt, ExecutionRun, GovernanceDecisionRecord, GovernancePolicy, LedgerEntry, MemoryContextSummary, ProviderLane, ProvisionedResource, RiskLevel, SupplierSettlement, SupplierSettlementSummary, User, Workspace, WorkspaceMemoryRecord } from "./types.js";
+export declare const BYOK_PROVIDER_CATALOG: Record<string, {
+    category: "llm" | "supplier";
+    envVarName: string;
+    label: string;
+}>;
 export declare class MuxoStore {
     readonly db: DatabaseSync;
     private readonly vaultKey;
@@ -23,6 +28,7 @@ export declare class MuxoStore {
         user: User;
         workspace: Workspace;
         sessionToken: string;
+        apiKey: string;
     };
     loginUser(email: string, password: string): {
         user: User;
@@ -77,6 +83,16 @@ export declare class MuxoStore {
     getResource(workspaceId: string, resourceNameOrId: string): ProvisionedResource | null;
     listResources(workspaceId: string): ProvisionedResource[];
     getDecryptedWorkspaceEnv(workspaceId: string): Record<string, string>;
+    normalizeByokProvider(providerInput: string): {
+        provider: string;
+        category: "llm" | "supplier";
+        envVarName: string;
+    };
+    setByokKey(workspaceId: string, providerInput: string, secretKey: string): ByokKeyRecord;
+    getByokKey(workspaceId: string, providerInput: string): string | null;
+    deleteByokKey(workspaceId: string, providerInput: string): boolean;
+    listByokKeys(workspaceId: string): ByokKeyRecord[];
+    hasByokForLane(workspaceId: string, lane: ProviderLane, toolSlug?: string): boolean;
     createPlan(params: {
         workspaceId: string;
         actorId: string;
@@ -126,6 +142,7 @@ export declare class MuxoStore {
         stripeCustomerId?: string | null;
         stripeSubscriptionId?: string | null;
         referenceId: string;
+        bonusCredits?: number;
     }): Workspace;
     addWorkspaceCredits(params: {
         workspaceId: string;
@@ -142,7 +159,7 @@ export declare class MuxoStore {
         referenceId: string | null;
         description: string;
     }): LedgerEntry;
-    computeSupplierSettlement(lane: ProviderLane, toolSlug: string, creditCost: number, settlementStatus?: "settled_by_muxo_master_wallet" | "planned_muxo_master_wallet"): SupplierSettlement;
+    computeSupplierSettlement(lane: ProviderLane, toolSlug: string, creditCost: number, settlementStatus?: "settled_by_muxo_master_wallet" | "planned_muxo_master_wallet" | "settled_by_customer_byok" | "planned_customer_byok", workspaceId?: string): SupplierSettlement;
     getSupplierSettlementSummary(workspaceId: string): SupplierSettlementSummary;
     listLedgerEntries(workspaceId: string, limit?: number): LedgerEntry[];
     saveMemoryRecord(params: {