@muxoai/platform 1.3.2 → 1.3.3

package/README.md

@@ -1,6 +1,6 @@
 # Muxo (`@muxoai/platform` / `@muxoai/cli` / `@muxoai/sdk`)
 
-Muxo (`v1.3.2`) is the unified execution, cloud infrastructure provisioning, contextual memory, and cryptographic governance platform for AI agents and applications. Customers and their agents interact exclusively with **Muxo** — either via structured tool slugs or free-form **Natural Language** (`muxo do`, `POST /api/v1/do`, `client.do()`, and MCP `plan_action`).
+Muxo (`v1.3.3`) is the unified execution, cloud infrastructure provisioning, contextual memory, and cryptographic governance platform for AI agents and applications. Customers and their agents interact exclusively with **Muxo** — either via structured tool slugs or free-form **Natural Language** (`muxo do`, `POST /api/v1/do`, `client.do()`, and MCP `plan_action`).
 
 See [`ARCHITECTURE.md`](./ARCHITECTURE.md) for the complete internal engineering blueprint, open-source ecosystem Keep/Adopt/Drop matrix, and 4-pillar architecture.
 

package/dist/clerk.d.ts

@@ -15,6 +15,8 @@ export interface ClerkProfile {
     email: string | null;
     emailVerified: boolean;
     name: string | null;
+    /** Every verified address on the account, lowercased, primary included. */
+    verifiedEmails: string[];
 }
 export interface ClerkEnv {
     CLERK_PUBLISHABLE_KEY?: string;

package/dist/clerk.js

@@ -187,6 +187,9 @@ export async function fetchClerkProfile(userId, secretKey) {
             email: primary?.email_address ? primary.email_address.toLowerCase() : null,
             emailVerified: primary?.verification?.status === "verified",
             name,
+            verifiedEmails: addresses
+                .filter((e) => e.email_address && e.verification?.status === "verified")
+                .map((e) => e.email_address.toLowerCase()),
         };
     }
     catch {

package/dist/cli.js

@@ -110,6 +110,9 @@ async function runCli() {
             body: opts?.body !== undefined ? JSON.stringify(opts.body) : undefined,
         });
         const data = (await res.json().catch(() => ({})));
+        if (opts?.acceptPaymentRequired && res.status === 402 && data.checkoutUrl) {
+            return data;
+        }
         if (!res.ok && data.error) {
             throw new Error(String(data.error));
         }
@@ -171,6 +174,23 @@ async function runCli() {
             };
         return { store, engine: getEngine(), ctx, tokenAuth };
     };
+    const maskKey = (key) => `${key.slice(0, 14)}…`;
+    // Hosted Muxo answers purchases with 402 + a Stripe Checkout URL; a self-hosted dev server may grant credits directly.
+    const printBillingResult = (data) => {
+        if (!data.checkoutUrl) {
+            console.log(JSON.stringify(data, null, 2));
+            return;
+        }
+        console.log(JSON.stringify({
+            ok: true,
+            paymentRequired: true,
+            kind: data.kind,
+            credits: data.credits,
+            checkoutUrl: data.checkoutUrl,
+            sessionId: data.sessionId,
+            next: `Open checkoutUrl to pay with Stripe. Muxo adds the credits once Stripe confirms the payment. Check with: muxo billing verify ${data.sessionId}`,
+        }, null, 2));
+    };
     // CLI Login / Autonomous External Signup (`muxo login`)
     if (cmd === "login" || cmd === "signup") {
         const explicitKey = typeof flags["api-key"] === "string"
@@ -203,6 +223,7 @@ async function runCli() {
                     configPath: cfgPath,
                     workspace: ws,
                     ...authPayload,
+                    apiKey: maskKey(explicitKey),
                 }, null, 2));
                 return;
             }
@@ -227,6 +248,7 @@ async function runCli() {
                 mode: "api_key",
                 configPath: cfgPath,
                 ...authPayload,
+                apiKey: maskKey(explicitKey),
             }, null, 2));
             return;
         }
@@ -402,7 +424,7 @@ async function runCli() {
         else {
             console.log(`\n✓ Muxo is ready!`);
             console.log(`  Workspace : ${ensuredConfig.workspaceName} (${ensuredConfig.workspaceId})`);
-            console.log(`  API Key   : ${ensuredConfig.apiKey}`);
+            console.log(`  API Key   : ${maskKey(ensuredConfig.apiKey)} (saved in ${getCliConfigPath()})`);
             console.log(`  MCP URL   : ${mcpServerUrl}`);
             console.log(`  MCP Config: ${writtenFiles.join(", ")}`);
             console.log(`\nTry it now:`);
@@ -1183,8 +1205,9 @@ async function runCli() {
                 const data = await remoteFetch("/api/v1/billing/topup", {
                     method: "POST",
                     body: { credits },
+                    acceptPaymentRequired: true,
                 });
-                console.log(JSON.stringify(data, null, 2));
+                printBillingResult(data);
                 return;
             }
             const { store, ctx } = getLocalContext();
@@ -1211,8 +1234,9 @@ async function runCli() {
                 const data = await remoteFetch("/api/v1/billing/upgrade", {
                     method: "POST",
                     body: { tier: "starter", bonusCredits: 1000 },
+                    acceptPaymentRequired: true,
                 });
-                console.log(JSON.stringify(data, null, 2));
+                printBillingResult(data);
                 return;
             }
             const { store, ctx } = getLocalContext();
@@ -1483,21 +1507,18 @@ async function runCli() {
             }
             if (choice === "3") {
                 const action = (await promptUserLine("Type 'upgrade' for Starter Plan or credit amount (default 1000): ")).toLowerCase();
-                if (action === "upgrade") {
-                    const up = await remoteFetch("/api/v1/billing/upgrade", {
+                const up = action === "upgrade"
+                    ? await remoteFetch("/api/v1/billing/upgrade", {
                         method: "POST",
                         body: { tier: "starter", bonusCredits: 1000 },
-                    });
-                    console.log(JSON.stringify(up, null, 2));
-                }
-                else {
-                    const cr = Math.max(100, Number(action) || 1000);
-                    const up = await remoteFetch("/api/v1/billing/topup", {
+                        acceptPaymentRequired: true,
+                    })
+                    : await remoteFetch("/api/v1/billing/topup", {
                         method: "POST",
-                        body: { credits: cr },
+                        body: { credits: Math.max(100, Number(action) || 1000) },
+                        acceptPaymentRequired: true,
                     });
-                    console.log(JSON.stringify(up, null, 2));
-                }
+                printBillingResult(up);
                 return;
             }
             if (choice === "4") {

package/dist/sdk.d.ts

@@ -404,11 +404,13 @@ export declare class MuxoClient {
         workspace: Workspace;
         settlementSummary: SupplierSettlementSummary;
     }>;
-    createCheckoutSession(kind?: "starter_subscription" | "credit_topup"): Promise<{
+    createCheckoutSession(kind?: "starter_subscription" | "credit_topup", credits?: number): Promise<{
         ok: true;
         sessionId: string;
         url: string;
         mode?: string;
+        kind?: string;
+        credits?: number;
     }>;
     verifyCheckoutSession(sessionId: string): Promise<{
         ok: true;

package/dist/sdk.js

@@ -366,10 +366,10 @@ export class MuxoClient {
             body: {},
         });
     }
-    async createCheckoutSession(kind = "credit_topup") {
+    async createCheckoutSession(kind = "credit_topup", credits) {
         return this.request("/api/v1/billing/checkout", {
             method: "POST",
-            body: { kind },
+            body: credits === undefined ? { kind } : { kind, credits },
         });
     }
     async verifyCheckoutSession(sessionId) {

package/dist/server.js

@@ -693,7 +693,8 @@ Users purchase Muxo Credits (\`POST /api/v1/billing/topup\` or \`muxo billing to
     <div class="badge">Ownership Bound</div>
     <h1>Workspace Claimed</h1>
     <p>Workspace <code>${redeemed.workspace.name}</code> (${redeemed.workspace.id}) claimed by <strong>${redeemed.targetEmail}</strong>.</p>
-    <a class="btn" href="/?claimed=${encodeURIComponent(redeemed.workspace.slug)}&api_key=${encodeURIComponent(claimConsoleKey)}">Open Muxo Console →</a>
+    <p>Console key: <code>${claimConsoleKey}</code><br />Choose “Use an API key instead” in the console and paste it.</p>
+    <a class="btn" href="/?claimed=${encodeURIComponent(redeemed.workspace.slug)}">Open Muxo Console →</a>
   </div>
 </body>
 </html>`);

package/dist/ui/console-html.d.ts

@@ -13,6 +13,13 @@ export interface OAuthConsentOptions {
         frontendApi: string;
     } | null;
     request?: Record<string, string>;
+    /** Renders the workspace-claim variant, which posts to `action` instead of /oauth/authorize. */
+    claim?: {
+        workspaceName: string;
+        targetEmail: string;
+        action: string;
+        cancelUrl: string;
+    };
 }
 /** Consent screen for MCP clients (ChatGPT, Claude, CLIs) asking to use a Muxo workspace. */
 export declare function renderOAuthConsentHtml(opts: OAuthConsentOptions): string;

package/dist/ui/console-html.js

@@ -238,6 +238,10 @@ body:has(dialog[open]){overflow:hidden}
 .auth-alt{margin-top:12px}
 .row-actions{display:inline-flex;align-items:center;gap:8px;flex:none}
 .clerk-auth{display:flex;justify-content:center;min-height:120px;margin-top:20px;text-align:left}
+.clerk-loading{display:flex;align-items:center;gap:10px;align-self:center;margin:0;color:var(--color-muted);font-size:15px}
+.spinner{flex:none;width:18px;height:18px;border:2px solid var(--color-border);border-top-color:var(--color-text);border-radius:50%;animation:muxo-spin .8s linear infinite}
+@keyframes muxo-spin{to{transform:rotate(360deg)}}
+@media (prefers-reduced-motion:reduce){.spinner{animation:none}}
 .auth-switch{margin-top:4px}
 .auth-switch:has([hidden]){display:none}
 .auth-foot{margin-top:16px;color:var(--color-muted);font-size:12px}
@@ -535,14 +539,20 @@ async function loadAuth() {
     });
   } catch (err) {
     clerk = null;
+    removeClerkLoading();
     setText('auth-error', err.message);
   }
 }
+function removeClerkLoading() {
+  var loading = byId('clerk-loading');
+  if (loading) loading.remove();
+}
 function mountClerkAuth(view) {
   if (!clerk || !clerk.loaded || clerkSignedIn()) return;
   var key = view === 'signup' ? 'signup' : 'login';
   if (clerkMounted === key) return;
   unmountClerkAuth();
+  removeClerkLoading();
   var target = location.origin + '/';
   var opts = { routing: 'hash', forceRedirectUrl: target, signInForceRedirectUrl: target, signUpForceRedirectUrl: target, appearance: clerkAppearance() };
   if (key === 'signup') clerk.mountSignUp(byId('clerk-auth'), opts); else clerk.mountSignIn(byId('clerk-auth'), opts);
@@ -1409,19 +1419,6 @@ async function runNaturalLanguagePrompt() {
     throw err;
   }
 }
-async function instantUpgradeStarter() {
-  var res = await post('/api/v1/billing/upgrade', { tier: 'starter' });
-  showToast(res.message || 'Upgraded to the Starter plan');
-  await refreshOverview();
-  await loadLedger();
-}
-async function instantTopupCustom() {
-  var credits = Math.max(1, Number(byId('topup-credits-input').value || 1000));
-  var res = await post('/api/v1/billing/topup', { credits: credits });
-  showToast('Added ' + fmt(res.creditsAdded) + ' credits' + (res.usdPaid != null ? ' ($' + Number(res.usdPaid).toFixed(2) + ')' : ''));
-  await refreshOverview();
-  await loadLedger();
-}
 async function startCheckout(kind) {
   showToast('Opening Stripe Checkout…');
   var credits = Math.max(100, Number(byId('topup-credits-input').value || 1000));
@@ -1435,13 +1432,19 @@ async function checkCheckoutReturn() {
   var sessionId = params.get('session_id');
   if (params.get('checkout') === 'success' && sessionId) {
     clean = true;
-    try {
-      var res = await post('/api/v1/billing/verify-session', { sessionId: sessionId });
-      if (res.fulfilled) showToast('Payment confirmed. Your workspace has been updated.');
-    } catch (err) { console.error(err); }
+    if (isSignedIn()) {
+      try {
+        var res = await post('/api/v1/billing/verify-session', { sessionId: sessionId });
+        showToast(res.fulfilled ? 'Payment confirmed. Your workspace has been updated.' : 'Payment is processing. Credits appear as soon as Stripe confirms it.');
+      } catch (err) { showToast(err.message, 'danger'); }
+    } else {
+      showToast('Payment received. Sign in to see your updated balance.');
+    }
   }
+  if (params.get('checkout') === 'cancelled') { clean = true; showToast('Checkout cancelled. You were not charged.'); }
   if (params.get('connected')) { clean = true; showToast(params.get('connected') + ' is connected'); }
-  if (params.get('api_key')) { clean = true; externalApiKey = params.get('api_key'); writeToken(externalApiKey); }
+  // Keys are never accepted from the URL: a crafted link could sign a person into someone else's workspace.
+  if (params.get('api_key')) clean = true;
   if (params.get('claimed')) { clean = true; showToast('You now own this workspace (' + params.get('claimed') + ')'); }
   if (clean) window.history.replaceState({}, '', window.location.pathname);
 }
@@ -1479,8 +1482,6 @@ var ACTIONS = {
   'refresh-runs': loadRuns,
   'inspect-receipt': function (el) { return inspectReceipt(el.dataset.id); },
   'checkout': function (el) { return startCheckout(el.dataset.kind); },
-  'instant-upgrade': instantUpgradeStarter,
-  'instant-topup': instantTopupCustom,
   'delete-byok': function (el) { return deleteByokKeyFromUi(el.dataset.provider); },
   'plan-only': submitPlanOnly,
   'plan-run': submitPlanAndExecute,
@@ -2067,7 +2068,6 @@ export function renderConsoleHtml() {
               </ul>
               <div class="page-actions">
                 <button class="btn btn-primary" type="button" data-action="checkout" data-kind="starter_subscription">Upgrade with Stripe</button>
-                <button class="btn" type="button" data-action="instant-upgrade">Upgrade now (test mode)</button>
               </div>
             </div>
             <div class="panel">
@@ -2075,7 +2075,6 @@ export function renderConsoleHtml() {
               <label class="field"><span>Credits</span><input id="topup-credits-input" type="number" value="1000" min="100" step="100" inputmode="numeric" /><small class="field-help">1,000 credits cost $10.</small></label>
               <div class="page-actions" style="margin-top:16px">
                 <button class="btn btn-primary" type="button" data-action="checkout" data-kind="credit_topup">Pay with Stripe</button>
-                <button class="btn" type="button" data-action="instant-topup">Add now (test mode)</button>
               </div>
             </div>
           </div>
@@ -2139,7 +2138,7 @@ export function renderConsoleHtml() {
         <p id="auth-error" class="field-error" role="alert"></p>
         <button id="auth-submit" class="btn btn-primary btn-lg btn-block" type="submit">Sign in</button>
       </form>
-      <div id="clerk-auth" class="clerk-auth" hidden></div>
+      <div id="clerk-auth" class="clerk-auth" hidden><p id="clerk-loading" class="clerk-loading" role="status"><span class="spinner" aria-hidden="true"></span>Loading sign-in…</p></div>
       <p class="auth-switch"><button id="auth-switch-link" class="btn btn-quiet btn-sm" type="button" data-action="auth-mode" data-mode="signup" hidden>New to Muxo? Create an account</button></p>
       <div class="auth-alt"><button class="btn btn-quiet" type="button" data-action="switch-workspace">${uiIcon("key")}Use an API key instead</button></div>
       <p class="auth-foot">Setting up an agent? Run <code>npx -y @muxoai/cli@latest login --signup</code></p>
@@ -2450,20 +2449,21 @@ const consentScript = String.raw `
   }
   async function decide(decision) {
     if (busy) return;
+    if (decision === 'deny' && C.cancelUrl) { location.assign(C.cancelUrl); return; }
     busy = true;
     fail('');
     byId('consent-allow').disabled = true;
     byId('consent-deny').disabled = true;
     try {
       var token = await clerk.session.getToken();
-      var res = await fetch('/oauth/authorize', {
+      var res = await fetch(C.action || '/oauth/authorize', {
         method: 'POST',
         headers: { 'Content-Type': 'application/json', Authorization: 'Bearer ' + token },
         body: JSON.stringify(Object.assign({}, C.request, { decision: decision }))
       });
       var data = await res.json().catch(function () { return {}; });
       if (!res.ok || !data.redirect) throw new Error(data.error || 'Muxo could not finish this request. Try again.');
-      byId(decision === 'allow' ? 'consent-allow' : 'consent-deny').textContent = decision === 'allow' ? 'Returning…' : 'Cancelling…';
+      byId(decision === 'allow' ? 'consent-allow' : 'consent-deny').textContent = decision === 'allow' ? (C.action ? 'Opening…' : 'Returning…') : 'Cancelling…';
       location.assign(data.redirect);
     } catch (err) {
       fail(err.message);
@@ -2501,7 +2501,7 @@ export function renderOAuthConsentHtml(opts) {
 <head>
   <meta charset="utf-8" />
   <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover" />
-  <title>${opts.error ? "Connection problem" : `Connect ${clientNameMidSentence}`} · Muxo</title>
+  <title>${opts.error ? (opts.claim ? "Claim problem" : "Connection problem") : opts.claim ? `Claim ${escapeHtml(opts.claim.workspaceName)}` : `Connect ${clientNameMidSentence}`} · Muxo</title>
   <meta name="theme-color" content="${muxoThemes.light.bg}" />
   <meta name="color-scheme" content="light dark" />
   <meta name="robots" content="noindex" />
@@ -2515,30 +2515,43 @@ export function renderOAuthConsentHtml(opts) {
   <main class="auth-view">
     <div class="auth-card">
       <div class="auth-mark">${muxoMark}</div>
-      <h1>This connection link isn't valid</h1>
+      <h1>${opts.claim ? "This claim link isn't valid" : "This connection link isn't valid"}</h1>
       <p class="lede">${escapeHtml(opts.error)}</p>
-      <p class="auth-foot">Start the connection again from your app, or <a href="${DOCS_URL}">read the setup guide</a>.</p>
+      <p class="auth-foot">${opts.claim ? "Ask the agent for a new claim link" : "Start the connection again from your app"}, or <a href="${DOCS_URL}">read the setup guide</a>.</p>
     </div>
   </main>
 </body>
 </html>`;
     }
+    const claim = opts.claim;
     const config = {
         clerk: opts.clerk || null,
         request: opts.request || {},
+        action: claim?.action,
+        cancelUrl: claim?.cancelUrl,
     };
-    return `${head}
-  <main class="auth-view">
-    <div class="auth-card">
-      <div class="auth-mark">${muxoMark}</div>
-      <h1>Connect ${clientNameMidSentence} to Muxo</h1>
+    const intro = claim
+        ? `<h1>Claim ${escapeHtml(claim.workspaceName)}</h1>
+      <p class="lede">An agent created this Muxo workspace and invited you to own it.</p>
+      <ul class="consent-list">
+        <li>You become the owner of this workspace and its credits</li>
+        <li>You manage its keys, safety rules, memory, and billing</li>
+        <li>The agent keeps working with its key until you revoke it</li>
+      </ul>
+      <p class="consent-redirect">Sign in as <strong>${escapeHtml(claim.targetEmail)}</strong> to accept.</p>`
+        : `<h1>Connect ${clientNameMidSentence} to Muxo</h1>
       <p class="lede">${clientName} wants to use your Muxo workspace.</p>
       <ul class="consent-list">
         <li>Find tools and plan actions in your workspace</li>
         <li>Run tools under your workspace's safety rules and approvals</li>
         <li>Read the status of connections, plans, and runs</li>
       </ul>
-      <p class="consent-redirect">After you decide, you'll return to <strong>${escapeHtml(opts.redirectOrigin || "")}</strong></p>
+      <p class="consent-redirect">After you decide, you'll return to <strong>${escapeHtml(opts.redirectOrigin || "")}</strong></p>`;
+    return `${head}
+  <main class="auth-view">
+    <div class="auth-card">
+      <div class="auth-mark">${muxoMark}</div>
+      ${intro}
       <div class="consent-state">
         <p id="consent-loading" class="muted">Checking your sign-in…</p>
         <div id="consent-signin" hidden>
@@ -2548,14 +2561,14 @@ export function renderOAuthConsentHtml(opts) {
         <div id="consent-approve" hidden>
           <p class="consent-account">Signed in as <strong id="consent-email"></strong></p>
           <div class="consent-actions">
-            <button id="consent-deny" class="btn btn-lg" type="button">Cancel</button>
-            <button id="consent-allow" class="btn btn-primary btn-lg" type="button">Allow</button>
+            <button id="consent-deny" class="btn btn-lg" type="button">${claim ? "Not now" : "Cancel"}</button>
+            <button id="consent-allow" class="btn btn-primary btn-lg" type="button">${claim ? "Claim workspace" : "Allow"}</button>
           </div>
           <p class="consent-switch"><button id="consent-switch" class="btn btn-quiet btn-sm" type="button">Use a different account</button></p>
         </div>
         <p id="consent-error" class="field-error" role="alert"></p>
       </div>
-      <p class="auth-foot">You can remove this connection anytime by deleting its key in the Muxo console.</p>
+      <p class="auth-foot">${claim ? "Only the invited email can claim this workspace, and the link works once." : "You can remove this connection anytime by deleting its key in the Muxo console."}</p>
     </div>
   </main>
   <script>window.MUXO_CONSENT = ${inlineJson(config)};${consentScript}</script>

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const MUXO_VERSION = "1.3.2";
+export declare const MUXO_VERSION = "1.3.3";

package/dist/version.js

@@ -1 +1 @@
-export const MUXO_VERSION = "1.3.2";
+export const MUXO_VERSION = "1.3.3";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@muxoai/platform",
-  "version": "1.3.2",
+  "version": "1.3.3",
   "description": "Muxo — Unified Execution, Provisioning & Governance Platform over Composio, Stripe Projects, Microsoft Agent Governance & Supermemory",
   "private": false,
   "license": "MIT",