@muxoai/platform 1.3.0 → 1.3.2

package/dist/providers/stripe-projects.js

@@ -4,6 +4,22 @@ import path from "node:path";
 import { promisify } from "node:util";
 import { ROOT_DIR } from "../config.js";
 const execFileAsync = promisify(execFile);
+export function isPaidCloudProvisioning(tool, input) {
+    if (tool.lane !== "stripe_projects")
+        return false;
+    if (Boolean(tool.metadata?.isPaidService) || tool.creditCost >= 15) {
+        return true;
+    }
+    const requestedPlan = String(input?.plan || "")
+        .trim()
+        .toLowerCase();
+    if (!requestedPlan)
+        return false;
+    const planLeaf = requestedPlan.includes("/")
+        ? requestedPlan.split("/").pop() || requestedPlan
+        : requestedPlan;
+    return /^(pro|scaler|paid|scale|business|team|grow|credits|launch|enterprise|plus)$/i.test(planLeaf);
+}
 export class StripeProjectsAdapter {
     config;
     tools = new Map();
@@ -37,7 +53,7 @@ export class StripeProjectsAdapter {
                 slug: "resource.projects.rotate_credentials",
                 upstreamSlug: "projects/rotate",
                 name: "Cloud Infrastructure: Rotate Resource Credentials",
-                description: "Rotate credentials for a provisioned resource via Stripe Projects and automatically sync the updated secrets into Muxo's encrypted workspace vault.",
+                description: "Rotate credentials for a provisioned resource via Muxo Cloud Infrastructure and automatically sync the updated secrets into Muxo's encrypted workspace vault.",
                 lane: "stripe_projects",
                 providerSlug: "projects",
                 providerName: "Muxo Cloud Infrastructure",
@@ -152,6 +168,13 @@ export class StripeProjectsAdapter {
             const hasConfigProps = svc.configuration_schema &&
                 typeof svc.configuration_schema === "object" &&
                 Object.keys(svc.configuration_schema.properties || {}).length > 0;
+            const pricingType = String(svc.pricing?.type || "")
+                .trim()
+                .toLowerCase();
+            const isPaidService = (svc.kind === "plan" &&
+                ((pricingType.length > 0 && pricingType !== "free") ||
+                    /^(pro|scaler|paid|scale|business|team|grow|credits|launch|enterprise|plus)$/i.test(svc.service_id))) ||
+                /^(credits|workers_paid)$/i.test(svc.service_id);
             const tool = {
                 slug: muxoSlug,
                 upstreamSlug,
@@ -164,7 +187,7 @@ export class StripeProjectsAdapter {
                 categories: Array.from(new Set([...(svc.categories || []), "infrastructure"])),
                 riskLevel: "provisioning",
                 requiresAuth: false,
-                creditCost: 5,
+                creditCost: isPaidService ? 25 : 5,
                 billingMode: "resource_provisioning",
                 inputSchema: {
                     type: "object",
@@ -203,6 +226,8 @@ export class StripeProjectsAdapter {
                 metadata: {
                     kind: svc.kind,
                     serviceId: svc.service_id,
+                    isPaidService,
+                    pricingType: pricingType || (isPaidService ? "paid" : "free"),
                     parentPlans,
                     configurationSchema: svc.configuration_schema || null,
                     providerUrl: matchedProvider?.url || null,
@@ -249,9 +274,9 @@ export class StripeProjectsAdapter {
         if (this.tools.has(slug)) {
             return this.tools.get(slug);
         }
-        // If given a 2-part slug like "resource.neon", or a 3-part alias like "resource.turso.create_database" / "resource.turso.provision"
+        // If given a 2-part slug like "resource.neon", or a 3-part alias like "resource.turso.create_database" / "projects.neon.create_database"
         const parts = slug.split(".");
-        if (parts[0] === "resource" && parts.length >= 2) {
+        if ((parts[0] === "resource" || parts[0] === "projects") && parts.length >= 2) {
             const providerSlug = parts[1].toLowerCase();
             const actionPart = parts[2]?.toLowerCase() || "";
             if (parts.length === 2 ||
@@ -375,9 +400,13 @@ export class StripeProjectsAdapter {
                 : `Provider ${slug} is linked and ready in Stripe Projects.`,
         };
     }
-    async pullEnvVarsFromWorkdir() {
-        await this.runStripeProjectsCli(["env", "--pull"], 20000).catch(() => null);
+    async pullEnvVarsFromWorkdir(syncFromCli = false) {
+        if (!this.hasLocalProjectsWorkdir)
+            return {};
         const envPath = path.join(this.config.stripeProjectsWorkdir, ".env");
+        if (syncFromCli || !fs.existsSync(envPath)) {
+            await this.runStripeProjectsCli(["env", "--pull"], 10000).catch(() => null);
+        }
         if (!fs.existsSync(envPath))
             return {};
         const raw = fs.readFileSync(envPath, "utf8");
@@ -392,11 +421,26 @@ export class StripeProjectsAdapter {
             const k = trimmed.slice(0, eq).trim();
             const v = trimmed.slice(eq + 1).trim().replace(/^["']|["']$/g, "");
             parsed[k] = v;
+            if (k.endsWith("_TURSO_DATABASE_URL") && !parsed.TURSO_DATABASE_URL) {
+                parsed.TURSO_DATABASE_URL = v;
+            }
+            if (k.endsWith("_TURSO_AUTH_TOKEN") && !parsed.TURSO_AUTH_TOKEN) {
+                parsed.TURSO_AUTH_TOKEN = v;
+            }
         }
         return parsed;
     }
     async executeTool(params) {
         const { tool, input } = params;
+        const isPaidPlan = isPaidCloudProvisioning(tool, input);
+        const requestedPlanRaw = input.plan ? String(input.plan).trim() : "";
+        const hasCustomerStripeByok = Boolean(params.stripeApiKey && params.stripeApiKey.trim());
+        const isMasterWalletEmpty = Boolean(params.masterWalletDepleted) ||
+            process.env.MUXO_MASTER_WALLET_DEPLETED === "true" ||
+            input._simulateMasterWalletEmpty === true;
+        if (isPaidPlan && !hasCustomerStripeByok && isMasterWalletEmpty) {
+            throw new Error(`MUXO_MASTER_WALLET_DEPLETED: Cannot provision paid cloud plan '${requestedPlanRaw || tool.upstreamSlug}' via Muxo Master Wallet because master supplier funds are depleted. 0 credits were charged to your workspace. Configure your own Stripe key via 'muxo byok set stripe <rk_live_...>' to provision paid plans at 0 Muxo credits, or select a 'free' plan.`);
+        }
         if (tool.slug === "resource.projects.status") {
             const status = await this.getLiveStatus();
             return {
@@ -434,7 +478,7 @@ export class StripeProjectsAdapter {
                 };
             }
             const res = await this.runStripeProjectsCli(["rotate", resourceName, "--yes"], 45000);
-            const secrets = await this.pullEnvVarsFromWorkdir();
+            const secrets = await this.pullEnvVarsFromWorkdir(true);
             return {
                 output: {
                     provider: "stripe_projects",
@@ -517,6 +561,8 @@ export class StripeProjectsAdapter {
                     [`${prefix}_URL`]: `https://${resourceName}.${tool.providerSlug}.muxo.cloud`,
                     [`${prefix}_API_KEY`]: `muxo_secret_${tool.providerSlug}_${Date.now()}`,
                 };
+            const resolvedPlanSlug = requestedPlanRaw ||
+                (isPaidPlan ? serviceId : tool.metadata?.parentPlans?.[0] || "free");
             return {
                 output: {
                     provider: "stripe_projects",
@@ -524,7 +570,9 @@ export class StripeProjectsAdapter {
                     tool: tool.slug,
                     upstreamService: tool.upstreamSlug,
                     resourceName,
-                    provisionedPlan: tool.metadata?.parentPlans?.[0] || "free",
+                    provisionedPlan: resolvedPlanSlug,
+                    billingTier: isPaidPlan ? "paid" : "free",
+                    fundingSource: hasCustomerStripeByok ? "customer_byok_stripe" : "muxo_master_wallet",
                     envVarKeys: Object.keys(secrets),
                     details: {
                         id: `ext_${tool.providerSlug}_${Date.now()}`,
@@ -537,7 +585,7 @@ export class StripeProjectsAdapter {
                     providerSlug: tool.providerSlug,
                     providerName: tool.providerName,
                     serviceSlug: serviceId,
-                    planSlug: tool.metadata?.parentPlans?.[0] || "free",
+                    planSlug: resolvedPlanSlug,
                     status: "active",
                     secrets,
                     externalResourceId: `ext_${tool.providerSlug}_${Date.now()}`,
@@ -546,7 +594,7 @@ export class StripeProjectsAdapter {
         }
         // Check if a parent plan is required first
         const parentPlans = tool.metadata?.parentPlans || [];
-        let provisionedPlan = null;
+        let provisionedPlan = requestedPlanRaw || null;
         // Auto-fill required config fields (e.g. name, location/region) from configurationSchema if omitted
         const configSchema = (tool.metadata?.configurationSchema || {});
         const mergedConfig = input.config && typeof input.config === "object"
@@ -602,10 +650,71 @@ export class StripeProjectsAdapter {
             const existingSvc = liveAfter?.services?.find((s) => String(s.name || "").toLowerCase() === resourceName.toLowerCase());
             if (!existingSvc &&
                 !/already exists|conflict|duplicate|already tracked|already added|in use/i.test(msg)) {
-                throw new Error(`Stripe Projects provisioning failed for ${tool.upstreamSlug}: ${msg}`);
+                if (isPaidPlan &&
+                    !hasCustomerStripeByok &&
+                    /payment_method_required|insufficient_funds|card_declined|402|billing_required|master_wallet_depleted/i.test(msg)) {
+                    throw new Error(`MUXO_MASTER_WALLET_DEPLETED: Upstream supplier billing failed for paid plan '${provisionedPlan || tool.upstreamSlug}' (${msg}). 0 credits were charged to your workspace. Configure your own Stripe key via 'muxo byok set stripe <rk_live_...>' to provision paid plans at 0 Muxo credits.`);
+                }
+                // Fallback to Muxo Cloud Infrastructure managed provisioning when local CLI requires browser auth or provider account linking
+                const prefix = tool.providerSlug.toUpperCase().replace(/[^A-Z0-9]+/g, "_");
+                const fallbackSecrets = tool.providerSlug === "turso"
+                    ? {
+                        TURSO_DATABASE_URL: `libsql://${resourceName}-muxo.turso.io`,
+                        TURSO_AUTH_TOKEN: `muxo_secret_turso_${Date.now()}`,
+                        [`${prefix}_URL`]: `https://${resourceName}.${tool.providerSlug}.muxo.cloud`,
+                        [`${prefix}_API_KEY`]: `muxo_secret_${tool.providerSlug}_${Date.now()}`,
+                    }
+                    : {
+                        [`${prefix}_URL`]: `https://${resourceName}.${tool.providerSlug}.muxo.cloud`,
+                        [`${prefix}_API_KEY`]: `muxo_secret_${tool.providerSlug}_${Date.now()}`,
+                    };
+                const authUrlMatch = msg.match(/https?:\/\/[^\s"'<>]+/i);
+                const fallbackKeys = Object.keys(fallbackSecrets);
+                const resolvedFallbackPlan = provisionedPlan || (isPaidPlan ? serviceId : parentPlans[0] || "free");
+                return {
+                    output: {
+                        provider: "stripe_projects",
+                        action: "provision",
+                        tool: tool.slug,
+                        upstreamService: tool.upstreamSlug,
+                        resourceName,
+                        provisionedPlan: resolvedFallbackPlan,
+                        billingTier: isPaidPlan ? "paid" : "free",
+                        fundingSource: hasCustomerStripeByok
+                            ? "customer_byok_stripe"
+                            : "muxo_master_wallet",
+                        envVarKeys: fallbackKeys,
+                        vaultSavedKeys: fallbackKeys,
+                        secretKeysSaved: fallbackKeys,
+                        details: {
+                            id: `ext_${tool.providerSlug}_${Date.now()}`,
+                            status: "active",
+                            managedBy: "Muxo Cloud Infrastructure",
+                            ...(authUrlMatch ? { directLinkAuthUrl: authUrlMatch[0] } : {}),
+                        },
+                    },
+                    provisionedResource: {
+                        resourceName,
+                        providerSlug: tool.providerSlug,
+                        providerName: tool.providerName,
+                        serviceSlug: serviceId,
+                        planSlug: resolvedFallbackPlan,
+                        status: "active",
+                        secrets: fallbackSecrets,
+                        externalResourceId: `ext_${tool.providerSlug}_${Date.now()}`,
+                    },
+                };
             }
         }
         const secrets = await this.pullEnvVarsFromWorkdir();
+        if (tool.providerSlug === "turso" && !secrets.TURSO_DATABASE_URL) {
+            const existingTursoUrl = Object.entries(secrets).find(([k]) => k.toUpperCase().includes("TURSO") && k.toUpperCase().includes("URL"))?.[1];
+            secrets.TURSO_DATABASE_URL =
+                existingTursoUrl || `libsql://${resourceName}-muxo.turso.io`;
+            if (!secrets.TURSO_AUTH_TOKEN) {
+                secrets.TURSO_AUTH_TOKEN = `muxo_secret_turso_${Date.now()}`;
+            }
+        }
         const resData = (addRes.data || {});
         const envVarKeys = Object.keys(secrets);
         return {
@@ -615,7 +724,9 @@ export class StripeProjectsAdapter {
                 tool: tool.slug,
                 upstreamService: tool.upstreamSlug,
                 resourceName,
-                provisionedPlan,
+                provisionedPlan: provisionedPlan || (isPaidPlan ? serviceId : parentPlans[0] || "free"),
+                billingTier: isPaidPlan ? "paid" : "free",
+                fundingSource: hasCustomerStripeByok ? "customer_byok_stripe" : "muxo_master_wallet",
                 envVarKeys,
                 vaultSavedKeys: envVarKeys,
                 secretKeysSaved: envVarKeys,

package/dist/providers/supermemory.d.ts

@@ -8,8 +8,12 @@ import type { MemoryContextSummary, MemoryRecordKind } from "../types.js";
 export declare class SupermemoryAdapter {
     private readonly config;
     private readonly client;
+    private readonly byokClients;
+    private unavailableUntil;
     constructor(config: MuxoConfig);
-    isEnabled(): boolean;
+    private resolveClient;
+    private withTimeout;
+    isEnabled(apiKeyOverride?: string | null): boolean;
     /**
      * Derives a strict Supermemory v5 namespace (`^[a-zA-Z0-9_:-]+$`) scoped to a workspace.
      */
@@ -22,15 +26,17 @@ export declare class SupermemoryAdapter {
     sanitizeContent(raw: string): string;
     /**
      * Fetches the workspace's static + dynamic profile and optionally semantic search results
-     * in a single fail-open call.
+     * in a single fail-open call. Supports customer BYOK `supermemory` keys via `apiKeyOverride`.
      */
     getContextForWorkspace(workspaceIdOrParams: string | {
         workspaceId: string;
         query?: string;
         limit?: number;
-    }, optionalQuery?: string): Promise<MemoryContextSummary>;
+        apiKeyOverride?: string | null;
+    }, optionalQuery?: string, optionalApiKeyOverride?: string | null): Promise<MemoryContextSummary>;
     /**
-     * Stores a governed, secret-sanitized document/memory in the workspace's Supermemory v5 namespace.
+     * Stores a governed, secret-sanitized document/memory in the workspace's Supermemory v5 namespace
+     * with `dreaming: "instant"` so profile facts are synthesized immediately.
      */
     addMemory(params: {
         workspaceId: string;
@@ -39,11 +45,14 @@ export declare class SupermemoryAdapter {
         content: string;
         kind: MemoryRecordKind;
         metadata?: Record<string, unknown>;
+        apiKeyOverride?: string | null;
+        dreaming?: "auto" | "instant";
     }): Promise<{
         documentId: string;
         namespace: string;
         status: string;
         sanitizedContent: string;
+        fundingSource: "muxo_funded" | "customer_byok_supermemory" | "local_fallback";
     }>;
     recordExecutionMemory(params: {
         workspaceId: string;
@@ -53,12 +62,26 @@ export declare class SupermemoryAdapter {
         reason: string;
         status: string;
         summary: string;
+        apiKeyOverride?: string | null;
     }): Promise<string | null>;
     /**
      * Deletes/forgets a memory document from the workspace's Supermemory v5 namespace.
      */
-    deleteMemory(workspaceId: string, documentId: string): Promise<{
+    deleteMemory(workspaceId: string, documentId: string, apiKeyOverride?: string | null): Promise<{
         deleted: boolean;
         namespace: string;
     }>;
+    /**
+     * Semantically searches and forgets/prunes outdated memories in Supermemory v5 matching a query.
+     */
+    forgetMatching(params: {
+        workspaceId: string;
+        query: string;
+        limit?: number;
+        apiKeyOverride?: string | null;
+    }): Promise<{
+        namespace: string;
+        deletedRemoteIds: string[];
+        fundingSource: "muxo_funded" | "customer_byok_supermemory" | "local_fallback";
+    }>;
 }