@muxoai/platform 1.3.0 → 1.3.2

package/dist/server.js

@@ -6,39 +6,57 @@ import { getConfig, ROOT_DIR } from "./config.js";
 import { MuxoEngine } from "./engine.js";
 import { getMuxoMcpSkills, handleJsonRpcMcpRequest, MUXO_MCP_SERVER_INSTRUCTIONS, MUXO_MCP_TOOLS, } from "./mcp.js";
 import { MuxoStore } from "./store.js";
-import { renderConsoleHtml, renderLandingHtml } from "./ui/console-html.js";
+import { sanitizePolicyPatch } from "./policy.js";
+import { MUXO_VERSION } from "./version.js";
+import { isConsolePath, renderConsoleHtml, renderLandingHtml } from "./ui/console-html.js";
 function renderSkillMarkdown(baseUrl) {
     return `---
 name: muxo
-description: Discover, plan, and execute governed actions across Connected Apps (Composio SDK), Instant Tools (Composio Instant), Cloud Infrastructure (Stripe Projects), Contextual Memory (Supermemory v5), and Cryptographic Governance (Microsoft Agent Governance Toolkit) through Muxo.
+description: Discover, plan, and execute governed actions across Connected Apps (app.*), Instant Tools (instant.*), Cloud Infrastructure (resource.*), Workspace Memory, and Safety Guardrails through Muxo.
 ---
 
-# Muxo — Unified Agent Execution, Infrastructure, Memory & Governance Platform
+# Muxo — Unified Agent Execution, Infrastructure, Memory & Safety Platform
 
-Muxo provides one governed interface over 4 pillars so agents and customers only ever interact with Muxo:
+Muxo provides one unified interface across 4 capabilities so agents and users only ever interact with Muxo:
 
-1. **Instant Tools (\`instant.*\`)**: Zero-OAuth tools powered by Composio Instant (\`instant.web.search\`, \`instant.web.scrape\`, \`instant.hackernews.top_stories\`, \`instant.github.repo_intel\`, \`instant.dns.lookup\`).
-2. **Connected Apps (\`app.*\`)**: Managed OAuth SaaS integrations powered by Composio SDK (\`app.github.*\`, \`app.gmail.*\`, \`app.slack.*\`, \`app.notion.*\`, \`app.linear.*\`, etc.).
-3. **Cloud Infrastructure (\`resource.*\`)**: Database, cache, storage, and hosting provisioning powered by Stripe Projects (\`resource.neon.*\`, \`resource.supabase.*\`, \`resource.turso.*\`, \`resource.cloudflare.*\`, \`resource.vercel.*\`, etc.) with AES-256-GCM secret custody in Muxo Vault.
-4. **Supermemory v5 Brain & Microsoft Agent Governance**: Every \`plan_action\` recalls isolated workspace context (\`/ns/muxo-v5-<hash>\`) and runs \`Agent ──► McpSecurityScanner ──► PolicyEngine ──► AgentIdentity (Ed25519 DID) ──► AuditLogger ──► DecisionRecord\`.
+1. **Instant Tools (\`instant.*\`)**: Zero-OAuth tools ready immediately (\`instant.web.search\`, \`instant.web.scrape\`, \`instant.web.crawl\`, \`instant.seo.audit\`, \`instant.hackernews.top_stories\`, \`instant.github.repo_intel\`, \`instant.dns.lookup\`).
+2. **Connected Apps (\`app.*\`)**: Managed OAuth SaaS integrations (\`app.github.*\`, \`app.gmail.*\`, \`app.slack.*\`, \`app.notion.*\`, \`app.linear.*\`, etc.).
+3. **Cloud Infrastructure (\`resource.*\`)**: Database, cache, storage, and hosting provisioning (\`resource.neon.*\`, \`resource.supabase.*\`, \`resource.turso.*\`, \`resource.cloudflare.*\`, \`resource.vercel.*\`, etc.) with AES-256-GCM secret custody in Muxo Vault.
+4. **Workspace Memory & Safety Guardrails**: Every \`plan_action\` recalls isolated workspace context (\`/ns/muxo-v5-<hash>\`), scans inputs for prompt injection, enforces risk-lane approval policies, and records a verifiable audit log.
 
-## Installable Muxo Plugin (OpenAI Codex, ChatGPT, Claude Code & Factory Droid)
+## Installable Muxo Plugin (Claude Code, OpenAI Codex, Claude Desktop & ChatGPT)
+
+> **Requirement:** \`@muxoai/cli\` requires **Node.js 22+** (\`node >= 22.0.0\`).
 
 \`\`\`bash
-# Install Muxo CLI & sign in (or auto-provision an isolated external workspace)
-npm install -g muxo-platform
+# Install Muxo CLI & sign in against the hosted workspace (Node.js 22+)
+npm install -g @muxoai/cli@latest
 muxo login --signup --name "my-agent"
 
+# Claude Code marketplace (muxo@muxo):
+claude plugin marketplace add ${baseUrl}/.claude-plugin/marketplace.json
+claude plugin install muxo@muxo
+
+# OpenAI Codex: add a Git repo or local marketplace directory containing .agents/plugins/marketplace.json,
+# or configure [mcp_servers.muxo] in ~/.codex/config.toml (url = "${baseUrl}/mcp")
+
+# Claude Desktop:
+# - Hosted MCP: Settings -> Connectors -> Add custom connector -> ${baseUrl}/mcp
+# - Local stdio server: configure npx -y @muxoai/cli@latest mcp in claude_desktop_config.json
+
+# ChatGPT:
+# - Plugins -> + -> Add custom MCP server -> ${baseUrl}/mcp (OAuth supports CIMD or DCR)
+
 # Link OAuth apps with live browser handoff + polling recovery
 muxo link github --wait
 
 # Plugin manifests served by this instance:
-# - ${baseUrl}/.agents/plugins/marketplace.json (OpenAI Codex / ChatGPT)
-# - ${baseUrl}/.claude-plugin/marketplace.json (Claude Code / Factory Droid)
+# - ${baseUrl}/.agents/plugins/marketplace.json (OpenAI Codex local/Git marketplace manifest)
+# - ${baseUrl}/.claude-plugin/marketplace.json (Claude Code marketplace manifest)
 # - ${baseUrl}/api/v1/plugin
 \`\`\`
 
-## Autonomous Agent 2-Call Signup (Zero Browser Required)
+## CLI-First Autonomous Agent 2-Call Signup
 
 \`\`\`bash
 # 1. Create an autonomous workspace + mk_live_* API key
@@ -154,7 +172,7 @@ export function createMuxoServer(customConfig) {
                     ok: true,
                     status: "ready",
                     service: "muxo-platform",
-                    version: "1.3.0",
+                    version: MUXO_VERSION,
                     environment: "production",
                     live_execution: true,
                     customer_billing: true,
@@ -241,10 +259,21 @@ export function createMuxoServer(customConfig) {
                     ],
                     code_challenge_methods_supported: ["S256", "plain"],
                     client_id_metadata_document_supported: true,
+                    authorization_response_iss_parameter_supported: true,
                     service_documentation: `${config.docsUrl}/quickstart`,
                 });
                 return;
             }
+            if (pathname === "/.well-known/openai-apps-challenge" && req.method === "GET") {
+                const challenge = process.env.OPENAI_APPS_CHALLENGE ||
+                    "muxo-openai-apps-domain-verified";
+                res.writeHead(200, {
+                    "Content-Type": "text/plain; charset=utf-8",
+                    "Access-Control-Allow-Origin": "*",
+                });
+                res.end(challenge);
+                return;
+            }
             if (pathname === "/oauth/register" && req.method === "POST") {
                 const body = JSON.parse((await readBody(req)) || "{}");
                 const clientId = typeof body.client_id === "string" && body.client_id.trim()
@@ -311,16 +340,22 @@ export function createMuxoServer(customConfig) {
                     apiKey: issuedKey,
                     expiresAt: Date.now() + 10 * 60 * 1000,
                 });
+                const proto = String(req.headers["x-forwarded-proto"] || "http").split(",")[0].trim();
+                const requestOrigin = req.headers.host
+                    ? `${proto}://${req.headers.host}`
+                    : config.baseUrl;
                 const redirectTarget = new URL(redirectUri);
                 redirectTarget.searchParams.set("code", code);
                 if (stateParam)
                     redirectTarget.searchParams.set("state", stateParam);
+                redirectTarget.searchParams.set("iss", requestOrigin);
                 if (url.searchParams.get("format") === "json" ||
                     String(req.headers.accept || "").includes("application/json")) {
                     sendJson(res, 200, {
                         ok: true,
                         code,
                         state: stateParam || null,
+                        iss: requestOrigin,
                         client_id: clientId,
                         redirect_uri: redirectTarget.toString(),
                     });
@@ -409,11 +444,16 @@ export function createMuxoServer(customConfig) {
             }
             if (pathname === "/oauth/userinfo" && req.method === "GET") {
                 const ctx = resolveContext(req);
+                const nickname = (ctx.user.email || "").split("@")[0] ||
+                    ctx.user.name.toLowerCase().replace(/\s+/g, ".") ||
+                    ctx.user.id;
                 sendJson(res, 200, {
                     sub: ctx.user.id,
                     id: ctx.user.id,
                     name: ctx.user.name,
                     email: ctx.user.email,
+                    email_verified: true,
+                    nickname,
                     workspace_id: ctx.workspace.id,
                     workspace_name: ctx.workspace.name,
                     tier: ctx.workspace.tier,
@@ -426,7 +466,7 @@ export function createMuxoServer(customConfig) {
                     openapi: "3.1.0",
                     info: {
                         title: "Muxo Unified Agent Execution, Infrastructure, Memory & Governance API",
-                        version: "1.3.0",
+                        version: MUXO_VERSION,
                         description: "One governed boundary over Connected Apps (Composio SDK), Instant Tools (Composio Instant), Cloud Infrastructure (Stripe Projects), Supermemory v5 Brain, and Microsoft Agent Governance Toolkit.",
                     },
                     servers: [{ url: config.baseUrl }],
@@ -475,12 +515,12 @@ Or via HTTP:
 curl -sX POST ${config.baseUrl}/api/v1/agents/signup -H "Content-Type: application/json" -d '{"agentName":"my-agent"}'
 \`\`\`
 
-## 2. OAuth Connection Handoff (Composio Plugin Pattern)
+## 2. OAuth Connection Handoff
 When \`plan_action\` targets an unconnected \`app.<provider>.*\` tool, Muxo returns \`authHandoff.redirectUrl\`.
 Open the URL in a browser, complete OAuth (which redirects to \`${config.baseUrl}/oauth/callback\`), and call \`wait_for_connection({ provider })\` or \`muxo link <provider> --wait\`.
 
-## 3. Merchant-of-Record Credit Settlement
-Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing topup 1000\`), and Muxo settles wholesale supplier costs across Composio and Stripe Projects from Muxo's master accounts (\`fundingMode: "muxo_funded"\`).
+## 3. Credit Billing & BYOK Support
+Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing topup 1000\`), and Muxo settles upstream execution costs from Muxo's master accounts (\`fundingMode: "muxo_funded"\`), or users can configure their own BYOK provider keys for 0-credit execution.
 `);
                 return;
             }
@@ -507,7 +547,7 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
             }
             if (pathname === "/llms.txt" && req.method === "GET") {
                 res.writeHead(200, { "Content-Type": "text/plain; charset=utf-8" });
-                res.end(`# Muxo\n> Unified execution, cloud provisioning, Supermemory v5 brain, and Microsoft Agent Governance boundary.\n\n- Skill Document: ${config.baseUrl}/skill.md\n- Auth Guide: ${config.baseUrl}/auth.md\n- OpenAPI 3.1 Spec: ${config.baseUrl}/api/openapi.json\n- MCP Endpoint: ${config.baseUrl}/mcp\n- OAuth Callback Handoff: ${config.baseUrl}/oauth/callback\n- Plugin Marketplace (Codex/OpenAI): ${config.baseUrl}/.agents/plugins/marketplace.json\n- Plugin Marketplace (Claude/Droid): ${config.baseUrl}/.claude-plugin/marketplace.json\n- Console (app.muxo.ai): ${config.baseUrl}/\n- Landing & Provider Canvas (muxo.ai): ${config.baseUrl}/landing\n- Documentation (docs.muxo.ai): ${config.docsUrl}\n`);
+                res.end(`# Muxo\n> Unified agent execution across Connected Apps, Instant Tools, Cloud Infrastructure, Workspace Memory, and Safety Guardrails.\n\n- Skill Document: ${config.baseUrl}/skill.md\n- Auth Guide: ${config.baseUrl}/auth.md\n- OpenAPI 3.1 Spec: ${config.baseUrl}/api/openapi.json\n- MCP Endpoint: ${config.baseUrl}/mcp\n- OAuth Callback Handoff: ${config.baseUrl}/oauth/callback\n- Plugin Marketplace (Codex/OpenAI): ${config.baseUrl}/.agents/plugins/marketplace.json\n- Plugin Marketplace (Claude/Droid): ${config.baseUrl}/.claude-plugin/marketplace.json\n- Console (app.muxo.ai): ${config.baseUrl}/\n- Landing & Provider Canvas (muxo.ai): ${config.baseUrl}/landing\n- Documentation (docs.muxo.ai): ${config.docsUrl}\n`);
                 return;
             }
             // Serve Installable Muxo Plugin Manifests & Metadata (Portable OpenAI Agent Plugins + Codex + Claude)
@@ -596,12 +636,20 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                 });
                 return;
             }
-            // Web Console UI (app.muxo.ai)
-            if ((pathname === "/" || pathname === "/console") && req.method === "GET") {
+            // Web Console UI (app.muxo.ai) & SPA deep-links
+            if (isConsolePath(pathname) && req.method === "GET") {
                 res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
                 res.end(renderConsoleHtml());
                 return;
             }
+            if (pathname === "/downloads/muxo-cli.zip" && req.method === "GET") {
+                res.writeHead(302, {
+                    Location: "https://muxo.ai/plugins/muxo-chatgpt-plugin.zip",
+                    "Cache-Control": "no-store",
+                });
+                res.end();
+                return;
+            }
             // Built-in Interactive Landing & Provider Canvas (muxo.ai)
             if (pathname === "/landing" && req.method === "GET") {
                 res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
@@ -616,6 +664,11 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                     sendJson(res, 404, { ok: false, error: "Invalid or expired agent claim link" });
                     return;
                 }
+                const claimConsoleKey = store.createApiKey({
+                    workspaceId: redeemed.workspace.id,
+                    name: `Owner Claim Session (${redeemed.targetEmail})`,
+                    environment: "live",
+                }).secretKey;
                 const wantsHtml = url.searchParams.get("format") !== "json" &&
                     String(req.headers.accept || "").includes("text/html");
                 if (wantsHtml) {
@@ -640,7 +693,7 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
     <div class="badge">Ownership Bound</div>
     <h1>Workspace Claimed</h1>
     <p>Workspace <code>${redeemed.workspace.name}</code> (${redeemed.workspace.id}) claimed by <strong>${redeemed.targetEmail}</strong>.</p>
-    <a class="btn" href="/?claimed=${encodeURIComponent(redeemed.workspace.slug)}">Open Muxo Console →</a>
+    <a class="btn" href="/?claimed=${encodeURIComponent(redeemed.workspace.slug)}&api_key=${encodeURIComponent(claimConsoleKey)}">Open Muxo Console →</a>
   </div>
 </body>
 </html>`);
@@ -649,6 +702,7 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                 sendJson(res, 200, {
                     ok: true,
                     message: `Workspace '${redeemed.workspace.name}' claimed by ${redeemed.targetEmail}`,
+                    apiKey: claimConsoleKey,
                     claim: redeemed,
                 });
                 return;
@@ -709,8 +763,11 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
 </html>`);
                 return;
             }
-            // Autonomous Agent 2-Call Signup (agents.composio.dev pattern) — Public
-            if (pathname === "/api/v1/agents/signup" && req.method === "POST") {
+            // Autonomous Agent 2-Call Signup — Public
+            if ((pathname === "/api/v1/agents/signup" ||
+                pathname === "/api/v1/auth/signup" ||
+                pathname === "/api/signup") &&
+                req.method === "POST") {
                 const body = JSON.parse((await readBody(req)) || "{}");
                 const created = store.createAutonomousAgentSignup({
                     agentName: body.agentName ? String(body.agentName) : undefined,
@@ -735,8 +792,8 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                 });
                 return;
             }
-            // Streamable HTTP MCP Endpoint (POST /mcp, GET /mcp, DELETE /mcp)
-            if (pathname === "/mcp" && req.method === "GET") {
+            // Streamable HTTP MCP Endpoint (POST /mcp, GET /mcp, HEAD /mcp, DELETE /mcp)
+            if (pathname === "/mcp" && (req.method === "GET" || req.method === "HEAD")) {
                 const accept = String(req.headers.accept || "");
                 const sessionId = String(req.headers["mcp-session-id"] || "") ||
                     `mcp_sess_${crypto.randomBytes(8).toString("hex")}`;
@@ -747,8 +804,11 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                         Connection: "keep-alive",
                         "Mcp-Session-Id": sessionId,
                         "Access-Control-Allow-Origin": "*",
+                        "Access-Control-Expose-Headers": "Mcp-Session-Id",
                     });
-                    res.write(`event: endpoint\ndata: ${JSON.stringify({ uri: `${config.baseUrl}/mcp`, sessionId })}\n\n`);
+                    if (req.method !== "HEAD") {
+                        res.write(`event: endpoint\ndata: ${JSON.stringify({ uri: `${config.baseUrl}/mcp`, sessionId })}\n\n`);
+                    }
                     res.end();
                     return;
                 }
@@ -758,12 +818,12 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                     protocolVersion: "2025-06-18",
                     serverInfo: {
                         name: "muxo-mcp-server",
-                        version: "1.3.0",
+                        version: MUXO_VERSION,
                     },
                     instructions: MUXO_MCP_SERVER_INSTRUCTIONS,
                     toolsCount: MUXO_MCP_TOOLS.length,
                     skillsCount: getMuxoMcpSkills().length,
-                });
+                }, { "Mcp-Session-Id": sessionId });
                 return;
             }
             if (pathname === "/mcp" && req.method === "DELETE") {
@@ -798,6 +858,10 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                 return;
             }
             // Auth Endpoints
+            if (pathname === "/api/v1/auth/config" && req.method === "GET") {
+                sendJson(res, 200, { ok: true, provider: "password", clerk: null, signInUrl: "/login" });
+                return;
+            }
             if (pathname === "/api/v1/auth/register" && req.method === "POST") {
                 const body = JSON.parse((await readBody(req)) || "{}");
                 const created = store.registerUser({
@@ -806,7 +870,16 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                     password: String(body.password || ""),
                     workspaceName: body.workspaceName ? String(body.workspaceName) : undefined,
                 });
-                sendJson(res, 201, { ok: true, ...created });
+                const initialKey = store.createApiKey({
+                    workspaceId: created.workspace.id,
+                    name: "Default Live Key",
+                    environment: "live",
+                });
+                sendJson(res, 201, {
+                    ok: true,
+                    ...created,
+                    apiKey: initialKey.secretKey,
+                });
                 return;
             }
             if (pathname === "/api/v1/auth/login" && req.method === "POST") {
@@ -860,16 +933,59 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                     email,
                     baseUrl: config.baseUrl,
                 });
-                sendJson(res, 201, { ok: true, claim, ...claim });
+                sendJson(res, 201, {
+                    ok: true,
+                    claim: { ...claim, ownerEmail: email },
+                    ...claim,
+                    ownerEmail: email,
+                });
                 return;
             }
             // Microsoft Agent Governance Status & Audit Verification
             if (pathname === "/api/v1/governance" && req.method === "GET") {
+                const ws = store.getWorkspace(ctx.workspace.id) || ctx.workspace;
+                const fullReport = engine.governance.getGovernanceStatus(ws);
                 sendJson(res, 200, {
                     ok: true,
-                    governance: engine.governance.getStatus(),
-                    workspacePolicy: ctx.workspace.policy,
+                    governance: {
+                        ...engine.governance.getStatus(ws),
+                        modules: fullReport.modules,
+                        trustScore: fullReport.trustScore,
+                        killSwitch: fullReport.killSwitch,
+                        contextPoisoning: fullReport.contextPoisoning,
+                        auditChain: fullReport.auditChain,
+                    },
+                    workspacePolicy: ws.policy,
+                });
+                return;
+            }
+            if (pathname === "/api/v1/governance/kill-switch" && req.method === "POST") {
+                const body = JSON.parse((await readBody(req)) || "{}");
+                const action = String(body.action || "quarantine").toLowerCase();
+                if (action === "resume" || body.active === false) {
+                    const out = engine.resumeWorkspaceKillSwitch(ctx);
+                    sendJson(res, 200, { ok: true, ...out });
+                    return;
+                }
+                const out = await engine.activateWorkspaceKillSwitch(ctx, {
+                    reason: String(body.reason || "Emergency kill-switch activated by workspace operator"),
+                    action: action === "terminate" || action === "suspend"
+                        ? action
+                        : "quarantine",
                 });
+                sendJson(res, 200, { ok: true, ...out });
+                return;
+            }
+            if (pathname === "/api/v1/governance/scan-context" && req.method === "POST") {
+                const body = JSON.parse((await readBody(req)) || "{}");
+                const scan = engine.governance.scanMemoryContent({
+                    workspaceId: ctx.workspace.id,
+                    sessionId: String(body.sessionId || "default"),
+                    role: body.role || "user",
+                    content: String(body.content || ""),
+                    recordInDetector: Boolean(body.recordInDetector),
+                });
+                sendJson(res, 200, { ok: true, scan });
                 return;
             }
             // Supermemory v5 Workspace Brain Endpoints
@@ -881,6 +997,37 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                 sendJson(res, 200, { ok: true, ...overview });
                 return;
             }
+            if (pathname === "/api/v1/memory/facts" && req.method === "GET") {
+                const query = url.searchParams.get("query") ||
+                    url.searchParams.get("q") ||
+                    undefined;
+                const includeHistorical = url.searchParams.get("historical") !== "false";
+                const facts = store.listTemporalFacts(ctx.workspace.id, {
+                    includeHistorical,
+                    subject: url.searchParams.get("subject") || undefined,
+                    predicate: url.searchParams.get("predicate") || undefined,
+                    query,
+                    limit: Number(url.searchParams.get("limit") || 50),
+                });
+                sendJson(res, 200, {
+                    ok: true,
+                    activeFacts: facts.filter((f) => f.validTo === null),
+                    historicalFacts: facts.filter((f) => f.validTo !== null),
+                    facts,
+                });
+                return;
+            }
+            if (pathname === "/api/v1/memory/forget" && req.method === "POST") {
+                const body = JSON.parse((await readBody(req)) || "{}");
+                const query = String(body.query || body.q || "").trim();
+                if (!query) {
+                    sendJson(res, 400, { ok: false, error: "query is required to forget matching memories" });
+                    return;
+                }
+                const pruned = await engine.forgetWorkspaceMemoryMatching(ctx, query);
+                sendJson(res, 200, { ok: true, ...pruned });
+                return;
+            }
             if (pathname === "/api/v1/memory" && req.method === "POST") {
                 const body = JSON.parse((await readBody(req)) || "{}");
                 const record = await engine.addWorkspaceMemory(ctx, {
@@ -888,6 +1035,9 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                     content: String(body.content || ""),
                     kind: body.kind || "fact",
                     metadata: body.metadata || {},
+                    subject: body.subject ? String(body.subject) : undefined,
+                    predicate: body.predicate ? String(body.predicate) : undefined,
+                    object: body.object ? String(body.object) : undefined,
                 });
                 sendJson(res, 201, { ok: true, memory: record });
                 return;
@@ -909,6 +1059,15 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                 sendJson(res, 201, { ok: true, ...created });
                 return;
             }
+            if (pathname.startsWith("/api/v1/api-keys/") && req.method === "DELETE") {
+                const keyId = decodeURIComponent(pathname.slice("/api/v1/api-keys/".length));
+                if (!store.revokeApiKey(ctx.workspace.id, keyId)) {
+                    sendJson(res, 404, { ok: false, error: "API key not found" });
+                    return;
+                }
+                sendJson(res, 200, { ok: true, revoked: keyId });
+                return;
+            }
             // Profile & Organization (v1 and api/v1)
             if ((pathname === "/api/v1/profile" || pathname === "/v1/profile") && req.method === "GET") {
                 sendJson(res, 200, { ok: true, ...engine.getProfile(ctx) });
@@ -1008,7 +1167,7 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
             // Governance Policy
             if (pathname === "/api/v1/policy" && req.method === "POST") {
                 const body = JSON.parse((await readBody(req)) || "{}");
-                const updated = store.updateWorkspacePolicy(ctx.workspace.id, body);
+                const updated = store.updateWorkspacePolicy(ctx.workspace.id, sanitizePolicyPatch(body));
                 sendJson(res, 200, { ok: true, workspace: updated });
                 return;
             }
@@ -1022,10 +1181,17 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
             }
             if (pathname === "/api/v1/plans" && req.method === "POST") {
                 const body = JSON.parse((await readBody(req)) || "{}");
+                const rawFunding = body.fundingMode || body.funding_mode;
+                const fundingMode = rawFunding === "byok" || rawFunding === "customer_funded"
+                    ? "byok"
+                    : rawFunding === "muxo_funded"
+                        ? "muxo_funded"
+                        : undefined;
                 const planned = await engine.planAction(ctx, {
                     toolSlug: String(body.toolSlug || body.tool_slug || ""),
                     input: body.input || {},
                     reason: body.reason ? String(body.reason) : undefined,
+                    fundingMode,
                 });
                 sendJson(res, 201, { ok: true, ...planned });
                 return;
@@ -1042,7 +1208,18 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                 const planId = decodeURIComponent(planExecuteMatch[1]);
                 const plan = engine.getPlan(ctx, planId);
                 const result = await engine.executePlanForRisk(ctx, planId, plan.riskLevel);
-                sendJson(res, 200, { ok: true, ...result });
+                sendJson(res, 200, {
+                    ok: true,
+                    ...result,
+                    settlement: result.receipt?.supplierSettlement || null,
+                });
+                return;
+            }
+            const planGetMatch = pathname.match(/^\/api\/v1\/plans\/([^/]+)$/);
+            if (planGetMatch && req.method === "GET") {
+                const planId = decodeURIComponent(planGetMatch[1]);
+                const plan = engine.getPlan(ctx, planId);
+                sendJson(res, 200, { ok: true, plan });
                 return;
             }
             // Runs & Receipts
@@ -1053,6 +1230,21 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                 });
                 return;
             }
+            const runCancelMatch = pathname.match(/^\/api\/v1\/runs\/([^/]+)\/cancel$/);
+            if (runCancelMatch && req.method === "POST") {
+                const runId = decodeURIComponent(runCancelMatch[1]);
+                const body = JSON.parse((await readBody(req)) || "{}");
+                const cancelled = engine.cancelRun(ctx, runId, body.reason ? String(body.reason) : undefined);
+                sendJson(res, 200, { ok: true, ...cancelled });
+                return;
+            }
+            const runGetMatch = pathname.match(/^\/api\/v1\/runs\/([^/]+)$/);
+            if (runGetMatch && req.method === "GET") {
+                const runId = decodeURIComponent(runGetMatch[1]);
+                const run = engine.getRun(ctx, runId);
+                sendJson(res, 200, { ok: true, run });
+                return;
+            }
             if (pathname.startsWith("/api/v1/receipts/") && req.method === "GET") {
                 const receiptId = decodeURIComponent(pathname.slice("/api/v1/receipts/".length));
                 const verified = engine.getReceipt(ctx, receiptId);
@@ -1102,7 +1294,13 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
             if ((pathname === "/api/v1/do" || pathname === "/v1/do") &&
                 req.method === "POST") {
                 const body = JSON.parse((await readBody(req)) || "{}");
-                const prompt = String(body.prompt || body.instruction || body.query || body.command || "").trim();
+                const prompt = String(body.prompt ||
+                    body.instruction ||
+                    body.query ||
+                    body.command ||
+                    body.toolSlug ||
+                    body.tool ||
+                    "").trim();
                 if (!prompt) {
                     sendJson(res, 400, {
                         ok: false,
@@ -1110,19 +1308,37 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                     });
                     return;
                 }
+                const dryRun = body.dryRun === true ||
+                    body.dry_run === true ||
+                    body.planOnly === true ||
+                    body.autoExecute === false ||
+                    body.auto_execute === false;
+                const autoApprove = body.autoApprove !== false &&
+                    body.auto_approve !== false &&
+                    body.approveRisky !== false &&
+                    body.approve_risky !== false;
+                const rawFunding = body.fundingMode || body.funding_mode;
+                const fundingMode = rawFunding === "byok" || rawFunding === "customer_funded"
+                    ? "byok"
+                    : rawFunding === "muxo_funded"
+                        ? "muxo_funded"
+                        : undefined;
                 const result = await engine.doNaturalLanguage(ctx, {
                     prompt,
                     input: body.input && typeof body.input === "object"
                         ? body.input
                         : undefined,
-                    autoApprove: body.autoApprove !== false,
-                    dryRun: body.dryRun === true,
+                    autoApprove,
+                    dryRun,
+                    planOnly: dryRun,
+                    fundingMode,
                 });
                 sendJson(res, 200, result);
                 return;
             }
             // Live Stripe Billing, Credit Top-Up & Supplier Settlement Ledger
-            if (pathname === "/api/v1/billing/status" && req.method === "GET") {
+            if ((pathname === "/api/v1/billing/status" || pathname === "/api/v1/billing") &&
+                req.method === "GET") {
                 const ws = store.getWorkspace(ctx.workspace.id);
                 const settlementSummary = store.getSupplierSettlementSummary(ctx.workspace.id);
                 const byokKeys = store.listByokKeys(ctx.workspace.id);
@@ -1176,6 +1392,8 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
                 sendJson(res, 200, {
                     ok: true,
                     creditsAdded: credits,
+                    creditBalance: updatedWorkspace.creditsBalance,
+                    creditsBalance: updatedWorkspace.creditsBalance,
                     usdPaid: Number(usdPaid),
                     workspace: updatedWorkspace,
                     settlementSummary: store.getSupplierSettlementSummary(ctx.workspace.id),

package/dist/store.d.ts

@@ -1,5 +1,5 @@
 import { DatabaseSync } from "node:sqlite";
-import type { ActionPlan, ApiKeyRecord, ByokKeyRecord, ConnectionRecord, ExecutionReceipt, ExecutionRun, GovernanceDecisionRecord, GovernancePolicy, LedgerEntry, MemoryContextSummary, ProviderLane, ProvisionedResource, RiskLevel, SupplierSettlement, SupplierSettlementSummary, User, Workspace, WorkspaceMemoryRecord } from "./types.js";
+import type { ActionPlan, ApiKeyRecord, ByokKeyRecord, ConnectionRecord, ExecutionReceipt, ExecutionRun, GovernanceDecisionRecord, GovernancePolicy, LedgerEntry, MemoryContextSummary, ProviderLane, ProvisionedResource, RiskLevel, SupplierSettlement, SupplierSettlementSummary, TemporalGraphFact, User, Workspace, WorkspaceMemoryRecord } from "./types.js";
 export declare const BYOK_PROVIDER_CATALOG: Record<string, {
     category: "llm" | "supplier";
     envVarName: string;
@@ -28,6 +28,7 @@ export declare class MuxoStore {
         user: User;
         workspace: Workspace;
         sessionToken: string;
+        apiKey: string;
     };
     loginUser(email: string, password: string): {
         user: User;
@@ -172,6 +173,30 @@ export declare class MuxoStore {
     }): WorkspaceMemoryRecord;
     listMemoryRecords(workspaceId: string, limit?: number): WorkspaceMemoryRecord[];
     deleteMemoryRecord(workspaceId: string, idOrDocId: string): WorkspaceMemoryRecord | null;
+    upsertTemporalFact(params: {
+        workspaceId: string;
+        subject: string;
+        predicate: string;
+        object: string;
+        summary: string;
+        confidence?: number;
+        sourceKind?: TemporalGraphFact["sourceKind"];
+        sourceReferenceId?: string | null;
+        metadata?: Record<string, unknown>;
+        supersedeExisting?: boolean;
+    }): TemporalGraphFact;
+    listTemporalFacts(workspaceId: string, opts?: {
+        includeHistorical?: boolean;
+        subject?: string;
+        predicate?: string;
+        query?: string;
+        limit?: number;
+    }): TemporalGraphFact[];
+    forgetMatchingMemoryRecords(workspaceId: string, query: string): {
+        deletedMemories: WorkspaceMemoryRecord[];
+        invalidatedFacts: TemporalGraphFact[];
+    };
+    private mapTemporalFact;
     createAutonomousAgentSignup(params?: {
         agentName?: string;
         harness?: string;