@muxoai/platform 1.3.3 → 1.4.1

package/dist/composio-catalog.d.ts

@@ -0,0 +1,58 @@
+/** SDK-free Composio enterprise toolkit and trigger catalogue shared by the Node server and the edge worker. */
+export interface ComposioToolkitMetadata {
+    slug: string;
+    name: string;
+    description: string;
+    categories: string[];
+    authSchemes: Array<"OAUTH2" | "API_KEY" | "BEARER_TOKEN" | "NO_AUTH">;
+    pinnedVersion: string;
+    readOnlyScopes: string[];
+    fullAccessScopes: string[];
+    sampleActions: Array<{
+        upstreamSlug: string;
+        muxoSlug: string;
+        name: string;
+        riskLevel: "read" | "write" | "destructive" | "financial";
+    }>;
+}
+export interface ComposioTriggerSubscription {
+    id: string;
+    workspaceId: string;
+    triggerSlug: string;
+    providerSlug: string;
+    connectedAccountId: string;
+    webhookUrl: string;
+    config: Record<string, unknown>;
+    status: "active" | "paused" | "disabled";
+    createdAt: string;
+}
+export interface ComposioTriggerEventRecord {
+    id: string;
+    workspaceId: string;
+    triggerSlug: string;
+    providerSlug: string;
+    receivedAt: string;
+    promptInjectionScan: {
+        safe: boolean;
+        riskScore: number;
+        findings: string[];
+    };
+    disposition: "dispatched" | "quarantined";
+    payloadPreview: Record<string, unknown>;
+}
+export declare const ENTERPRISE_TOOLKITS_CATALOG: ComposioToolkitMetadata[];
+export declare function getSampleActionSchema(muxoSlug: string, upstreamSlug?: string): Record<string, unknown>;
+export interface ComposioTriggerType {
+    slug: string;
+    providerSlug: string;
+    name: string;
+    description: string;
+}
+export declare const COMPOSIO_TRIGGER_CATALOGUE: ComposioTriggerType[];
+export declare function listComposioTriggerTypes(providerSlug?: string): ComposioTriggerType[];
+export declare function filterComposioToolkits(params?: {
+    category?: string;
+    search?: string;
+}): ComposioToolkitMetadata[];
+/** Least-privilege scopes for a custom auth config: explicit scopes win, then the toolkit's read-only or full set. */
+export declare function composioAuthConfigScopes(toolkitSlug: string, scopeMode: "read_only" | "full_access", customScopes?: string[]): string[];

package/dist/composio-catalog.js

@@ -0,0 +1,474 @@
+/** SDK-free Composio enterprise toolkit and trigger catalogue shared by the Node server and the edge worker. */
+export const ENTERPRISE_TOOLKITS_CATALOG = [
+    {
+        slug: "github",
+        name: "GitHub",
+        description: "Repositories, pull requests, issues, releases, Actions workflows, and code search.",
+        categories: ["developer", "git", "devops"],
+        authSchemes: ["OAUTH2", "API_KEY"],
+        pinnedVersion: "20260901_00",
+        readOnlyScopes: ["repo:status", "public_repo", "read:org", "read:user"],
+        fullAccessScopes: ["repo", "workflow", "read:org", "admin:repo_hook"],
+        sampleActions: [
+            { upstreamSlug: "GITHUB_CREATE_AN_ISSUE", muxoSlug: "app.github.create_issue", name: "GitHub: Create Issue", riskLevel: "write" },
+            { upstreamSlug: "GITHUB_LIST_REPOSITORY_ISSUES", muxoSlug: "app.github.list_issues", name: "GitHub: List Issues", riskLevel: "read" },
+        ],
+    },
+    {
+        slug: "gmail",
+        name: "Gmail",
+        description: "Read threads, draft replies, search messages, and send transactional or support emails.",
+        categories: ["email", "communication", "google"],
+        authSchemes: ["OAUTH2"],
+        pinnedVersion: "20260901_00",
+        readOnlyScopes: ["https://www.googleapis.com/auth/gmail.readonly"],
+        fullAccessScopes: ["https://www.googleapis.com/auth/gmail.modify", "https://www.googleapis.com/auth/gmail.send"],
+        sampleActions: [
+            { upstreamSlug: "GMAIL_FETCH_EMAILS", muxoSlug: "app.gmail.list_messages", name: "Gmail: List Messages", riskLevel: "read" },
+            { upstreamSlug: "GMAIL_SEND_EMAIL", muxoSlug: "app.gmail.send_email", name: "Gmail: Send Email", riskLevel: "write" },
+        ],
+    },
+    {
+        slug: "slack",
+        name: "Slack",
+        description: "Post channel notifications, read thread context, and coordinate incident response.",
+        categories: ["messaging", "chat", "incident"],
+        authSchemes: ["OAUTH2"],
+        pinnedVersion: "20260901_00",
+        readOnlyScopes: ["channels:history", "channels:read", "users:read"],
+        fullAccessScopes: ["channels:history", "channels:read", "chat:write", "reactions:write"],
+        sampleActions: [
+            { upstreamSlug: "SLACK_SENDS_A_MESSAGE_TO_A_SLACK_CHANNEL", muxoSlug: "app.slack.send_message", name: "Slack: Send Channel Message", riskLevel: "write" },
+        ],
+    },
+    {
+        slug: "notion",
+        name: "Notion",
+        description: "Search workspaces, create knowledge base pages, and query structured databases.",
+        categories: ["docs", "wiki", "productivity"],
+        authSchemes: ["OAUTH2", "API_KEY"],
+        pinnedVersion: "20260901_00",
+        readOnlyScopes: ["read_content"],
+        fullAccessScopes: ["read_content", "update_content", "insert_content"],
+        sampleActions: [
+            { upstreamSlug: "NOTION_SEARCH_NOTION_PAGE", muxoSlug: "app.notion.search_pages", name: "Notion: Search Pages", riskLevel: "read" },
+            { upstreamSlug: "NOTION_CREATE_NOTION_PAGE", muxoSlug: "app.notion.create_page", name: "Notion: Create Page", riskLevel: "write" },
+        ],
+    },
+    {
+        slug: "linear",
+        name: "Linear",
+        description: "Create engineering issues, triage bugs, manage cycles, and track project roadmaps.",
+        categories: ["project_management", "engineering"],
+        authSchemes: ["OAUTH2", "API_KEY"],
+        pinnedVersion: "20260901_00",
+        readOnlyScopes: ["read"],
+        fullAccessScopes: ["read", "write", "issues:create"],
+        sampleActions: [
+            { upstreamSlug: "LINEAR_CREATE_LINEAR_ISSUE", muxoSlug: "app.linear.create_issue", name: "Linear: Create Issue", riskLevel: "write" },
+        ],
+    },
+    {
+        slug: "googlecalendar",
+        name: "Google Calendar",
+        description: "List upcoming meetings, check availability, and schedule calendar events.",
+        categories: ["calendar", "scheduling", "google"],
+        authSchemes: ["OAUTH2"],
+        pinnedVersion: "20260901_00",
+        readOnlyScopes: ["https://www.googleapis.com/auth/calendar.readonly"],
+        fullAccessScopes: ["https://www.googleapis.com/auth/calendar.events"],
+        sampleActions: [
+            { upstreamSlug: "GOOGLECALENDAR_EVENTS_LIST", muxoSlug: "app.googlecalendar.list_events", name: "Google Calendar: List Events", riskLevel: "read" },
+            { upstreamSlug: "GOOGLECALENDAR_CREATE_EVENT", muxoSlug: "app.googlecalendar.create_event", name: "Google Calendar: Create Event", riskLevel: "write" },
+        ],
+    },
+    {
+        slug: "hubspot",
+        name: "HubSpot CRM",
+        description: "Manage CRM contacts, deals, company records, and sales pipeline stages.",
+        categories: ["crm", "sales", "marketing"],
+        authSchemes: ["OAUTH2", "API_KEY"],
+        pinnedVersion: "20260901_00",
+        readOnlyScopes: ["crm.objects.contacts.read", "crm.objects.deals.read"],
+        fullAccessScopes: ["crm.objects.contacts.read", "crm.objects.contacts.write", "crm.objects.deals.write"],
+        sampleActions: [
+            { upstreamSlug: "HUBSPOT_SEARCH_CONTACTS", muxoSlug: "app.hubspot.search_contacts", name: "HubSpot: Search Contacts", riskLevel: "read" },
+            { upstreamSlug: "HUBSPOT_CREATE_CONTACT", muxoSlug: "app.hubspot.create_contact", name: "HubSpot: Create Contact", riskLevel: "write" },
+        ],
+    },
+    {
+        slug: "jira",
+        name: "Jira Software",
+        description: "Search JQL issues, create sprint tickets, transition workflows, and link incidents.",
+        categories: ["project_management", "engineering", "enterprise"],
+        authSchemes: ["OAUTH2", "API_KEY"],
+        pinnedVersion: "20260901_00",
+        readOnlyScopes: ["read:jira-work", "read:jira-user"],
+        fullAccessScopes: ["read:jira-work", "write:jira-work"],
+        sampleActions: [
+            { upstreamSlug: "JIRA_SEARCH_ISSUES", muxoSlug: "app.jira.search_issues", name: "Jira: Search Issues (JQL)", riskLevel: "read" },
+            { upstreamSlug: "JIRA_CREATE_ISSUE", muxoSlug: "app.jira.create_issue", name: "Jira: Create Issue", riskLevel: "write" },
+        ],
+    },
+    {
+        slug: "salesforce",
+        name: "Salesforce",
+        description: "Query SOQL objects, manage leads, accounts, opportunities, and enterprise cases.",
+        categories: ["crm", "enterprise", "sales"],
+        authSchemes: ["OAUTH2"],
+        pinnedVersion: "20260901_00",
+        readOnlyScopes: ["api", "refresh_token"],
+        fullAccessScopes: ["api", "full", "refresh_token"],
+        sampleActions: [
+            { upstreamSlug: "SALESFORCE_RUN_SOQL_QUERY", muxoSlug: "app.salesforce.soql_query", name: "Salesforce: Run SOQL Query", riskLevel: "read" },
+            { upstreamSlug: "SALESFORCE_CREATE_LEAD", muxoSlug: "app.salesforce.create_lead", name: "Salesforce: Create Lead", riskLevel: "write" },
+        ],
+    },
+    {
+        slug: "zendesk",
+        name: "Zendesk Support",
+        description: "Triage customer support tickets, post internal notes, and update ticket priority.",
+        categories: ["support", "customer_success", "helpdesk"],
+        authSchemes: ["OAUTH2", "API_KEY"],
+        pinnedVersion: "20260901_00",
+        readOnlyScopes: ["tickets:read", "users:read"],
+        fullAccessScopes: ["tickets:read", "tickets:write", "users:read"],
+        sampleActions: [
+            { upstreamSlug: "ZENDESK_LIST_TICKETS", muxoSlug: "app.zendesk.list_tickets", name: "Zendesk: List Tickets", riskLevel: "read" },
+            { upstreamSlug: "ZENDESK_REPLY_TICKET", muxoSlug: "app.zendesk.reply_ticket", name: "Zendesk: Reply to Ticket", riskLevel: "write" },
+        ],
+    },
+    {
+        slug: "shopify",
+        name: "Shopify",
+        description: "Inspect store orders, inventory levels, customer records, and refunds.",
+        categories: ["commerce", "orders", "retail"],
+        authSchemes: ["OAUTH2", "API_KEY"],
+        pinnedVersion: "20260901_00",
+        readOnlyScopes: ["read_orders", "read_products", "read_customers"],
+        fullAccessScopes: ["read_orders", "write_orders", "read_products", "write_products"],
+        sampleActions: [
+            { upstreamSlug: "SHOPIFY_GET_ORDERS", muxoSlug: "app.shopify.list_orders", name: "Shopify: List Orders", riskLevel: "read" },
+            { upstreamSlug: "SHOPIFY_CREATE_REFUND", muxoSlug: "app.shopify.create_refund", name: "Shopify: Create Refund", riskLevel: "financial" },
+        ],
+    },
+    {
+        slug: "pagerduty",
+        name: "PagerDuty",
+        description: "Acknowledge on-call incidents, list escalation policies, and trigger alert paging.",
+        categories: ["incident", "devops", "sre"],
+        authSchemes: ["OAUTH2", "API_KEY"],
+        pinnedVersion: "20260901_00",
+        readOnlyScopes: ["incidents.read", "services.read"],
+        fullAccessScopes: ["incidents.read", "incidents.write", "services.read"],
+        sampleActions: [
+            { upstreamSlug: "PAGERDUTY_LIST_INCIDENTS", muxoSlug: "app.pagerduty.list_incidents", name: "PagerDuty: List Incidents", riskLevel: "read" },
+            { upstreamSlug: "PAGERDUTY_CREATE_INCIDENT", muxoSlug: "app.pagerduty.create_incident", name: "PagerDuty: Trigger Incident", riskLevel: "write" },
+        ],
+    },
+    {
+        slug: "discord",
+        name: "Discord",
+        description: "Send channel messages, manage server roles, and read guild threads.",
+        categories: ["communication", "chat", "messaging"],
+        authSchemes: ["OAUTH2"],
+        pinnedVersion: "20260901_00",
+        readOnlyScopes: ["identify", "guilds"],
+        fullAccessScopes: ["identify", "guilds", "bot", "messages.read"],
+        sampleActions: [
+            { upstreamSlug: "DISCORD_SEND_MESSAGE", muxoSlug: "app.discord.send_message", name: "Discord: Send Channel Message", riskLevel: "write" },
+        ],
+    },
+    {
+        slug: "googledrive",
+        name: "Google Drive",
+        description: "Search files and folders, manage permissions, and export workspace documents.",
+        categories: ["storage", "docs", "productivity", "google"],
+        authSchemes: ["OAUTH2"],
+        pinnedVersion: "20260901_00",
+        readOnlyScopes: ["https://www.googleapis.com/auth/drive.readonly"],
+        fullAccessScopes: ["https://www.googleapis.com/auth/drive"],
+        sampleActions: [
+            { upstreamSlug: "GOOGLEDRIVE_FIND_FILE", muxoSlug: "app.googledrive.search_files", name: "Google Drive: Search Files & Folders", riskLevel: "read" },
+        ],
+    },
+    {
+        slug: "airtable",
+        name: "Airtable",
+        description: "List, create, and update structured records across Airtable bases and tables.",
+        categories: ["database", "productivity"],
+        authSchemes: ["OAUTH2", "API_KEY"],
+        pinnedVersion: "20260901_00",
+        readOnlyScopes: ["data.records:read", "schema.bases:read"],
+        fullAccessScopes: ["data.records:read", "data.records:write", "schema.bases:read"],
+        sampleActions: [
+            { upstreamSlug: "AIRTABLE_LIST_RECORDS", muxoSlug: "app.airtable.list_records", name: "Airtable: List Base Records", riskLevel: "read" },
+        ],
+    },
+    {
+        slug: "sentry",
+        name: "Sentry",
+        description: "Inspect production issues, stack traces, release health, and error events.",
+        categories: ["devops", "monitoring", "engineering"],
+        authSchemes: ["API_KEY", "BEARER_TOKEN"],
+        pinnedVersion: "20260901_00",
+        readOnlyScopes: ["project:read", "event:read", "org:read"],
+        fullAccessScopes: ["project:read", "event:read", "event:write", "org:read"],
+        sampleActions: [
+            { upstreamSlug: "SENTRY_LIST_ISSUES", muxoSlug: "app.sentry.list_issues", name: "Sentry: List Project Issues", riskLevel: "read" },
+        ],
+    },
+];
+const SAMPLE_ACTION_SCHEMAS = {
+    "app.github.list_issues": {
+        type: "object",
+        required: ["owner", "repo"],
+        properties: {
+            owner: { type: "string", description: "Repository owner" },
+            repo: { type: "string", description: "Repository name" },
+            state: { type: "string", enum: ["open", "closed", "all"], default: "open" },
+        },
+    },
+    "app.slack.send_message": {
+        type: "object",
+        required: ["channel", "text"],
+        properties: {
+            channel: { type: "string", description: "Slack channel ID or name" },
+            text: { type: "string", description: "Message text" },
+        },
+    },
+    "app.notion.create_page": {
+        type: "object",
+        required: ["parent_id", "title"],
+        properties: {
+            parent_id: { type: "string", description: "Parent page or database ID" },
+            title: { type: "string", description: "Page title" },
+            content: { type: "string", description: "Markdown content" },
+        },
+    },
+    "app.googlecalendar.list_events": {
+        type: "object",
+        properties: {
+            calendarId: { type: "string", default: "primary" },
+            maxResults: { type: "number", default: 10 },
+        },
+    },
+    "app.googlecalendar.create_event": {
+        type: "object",
+        required: ["summary", "start_datetime", "end_datetime"],
+        properties: {
+            calendarId: { type: "string", default: "primary" },
+            summary: { type: "string", description: "Event title" },
+            start_datetime: { type: "string", description: "ISO 8601 start timestamp" },
+            end_datetime: { type: "string", description: "ISO 8601 end timestamp" },
+        },
+    },
+    "app.hubspot.search_contacts": {
+        type: "object",
+        properties: {
+            query: { type: "string", description: "Contact name, email, or company search query" },
+            limit: { type: "number", default: 10 },
+        },
+    },
+    "app.hubspot.create_contact": {
+        type: "object",
+        required: ["email"],
+        properties: {
+            email: { type: "string", description: "Contact email address" },
+            firstname: { type: "string" },
+            lastname: { type: "string" },
+            company: { type: "string" },
+        },
+    },
+    "app.jira.search_issues": {
+        type: "object",
+        properties: {
+            jql: { type: "string", description: "JQL query string" },
+            max_results: { type: "number", default: 25 },
+        },
+    },
+    "app.jira.create_issue": {
+        type: "object",
+        required: ["project_key", "summary"],
+        properties: {
+            project_key: { type: "string", description: "Jira project key (e.g. ENG)" },
+            summary: { type: "string", description: "Issue summary" },
+            description: { type: "string", description: "Issue description" },
+            issue_type: { type: "string", default: "Task" },
+        },
+    },
+    "app.salesforce.soql_query": {
+        type: "object",
+        required: ["query"],
+        properties: {
+            query: { type: "string", description: "SOQL query string" },
+        },
+    },
+    "app.salesforce.create_lead": {
+        type: "object",
+        required: ["LastName", "Company"],
+        properties: {
+            FirstName: { type: "string" },
+            LastName: { type: "string" },
+            Company: { type: "string" },
+            Email: { type: "string" },
+        },
+    },
+    "app.zendesk.list_tickets": {
+        type: "object",
+        properties: {
+            status: { type: "string", default: "open" },
+            per_page: { type: "number", default: 25 },
+        },
+    },
+    "app.zendesk.reply_ticket": {
+        type: "object",
+        required: ["ticket_id", "body"],
+        properties: {
+            ticket_id: { type: "number", description: "Zendesk ticket ID" },
+            body: { type: "string", description: "Reply comment text" },
+            public: { type: "boolean", default: true },
+        },
+    },
+    "app.shopify.list_orders": {
+        type: "object",
+        properties: {
+            status: { type: "string", default: "any" },
+            limit: { type: "number", default: 25 },
+        },
+    },
+    "app.shopify.create_refund": {
+        type: "object",
+        required: ["order_id"],
+        properties: {
+            order_id: { type: "string", description: "Shopify order ID" },
+            reason: { type: "string", description: "Refund reason" },
+            amount_cents: { type: "number", description: "Optional refund amount in cents" },
+        },
+    },
+    "app.pagerduty.list_incidents": {
+        type: "object",
+        properties: {
+            statuses: { type: "array", items: { type: "string" } },
+            limit: { type: "number", default: 25 },
+        },
+    },
+    "app.pagerduty.create_incident": {
+        type: "object",
+        required: ["title", "service_id"],
+        properties: {
+            title: { type: "string", description: "Incident summary title" },
+            service_id: { type: "string", description: "PagerDuty service ID" },
+            urgency: { type: "string", enum: ["high", "low"], default: "high" },
+        },
+    },
+    "app.discord.send_message": {
+        type: "object",
+        required: ["channel_id", "content"],
+        properties: {
+            channel_id: { type: "string", description: "Discord channel ID" },
+            content: { type: "string", description: "Message content" },
+        },
+    },
+    "app.googledrive.search_files": {
+        type: "object",
+        properties: {
+            query: { type: "string", description: "File or folder search query" },
+            pageSize: { type: "number", default: 10 },
+        },
+    },
+    "app.airtable.list_records": {
+        type: "object",
+        required: ["base_id", "table_name"],
+        properties: {
+            base_id: { type: "string", description: "Airtable Base ID" },
+            table_name: { type: "string", description: "Table name or ID" },
+            max_records: { type: "number", default: 20 },
+        },
+    },
+    "app.sentry.list_issues": {
+        type: "object",
+        properties: {
+            project_slug: { type: "string", description: "Sentry project slug" },
+            query: { type: "string", description: "Issue search query", default: "is:unresolved" },
+        },
+    },
+};
+export function getSampleActionSchema(muxoSlug, upstreamSlug) {
+    return (SAMPLE_ACTION_SCHEMAS[muxoSlug] ||
+        (upstreamSlug ? SAMPLE_ACTION_SCHEMAS[upstreamSlug] : undefined) || {
+        type: "object",
+        properties: {
+            query: { type: "string", description: "Search query or identifier" },
+            payload: { type: "object", description: "Structured action parameters" },
+        },
+    });
+}
+export const COMPOSIO_TRIGGER_CATALOGUE = [
+    {
+        slug: "GITHUB_COMMIT_EVENT",
+        providerSlug: "github",
+        name: "GitHub Commit Pushed",
+        description: "Fires when a commit is pushed to a monitored repository branch.",
+    },
+    {
+        slug: "GITHUB_PULL_REQUEST_EVENT",
+        providerSlug: "github",
+        name: "GitHub Pull Request Event",
+        description: "Fires when a pull request is opened, synchronized, or merged.",
+    },
+    {
+        slug: "SLACK_RECEIVE_MESSAGE",
+        providerSlug: "slack",
+        name: "Slack Channel Message Received",
+        description: "Fires when a new message is posted in a monitored Slack channel.",
+    },
+    {
+        slug: "GMAIL_NEW_GMAIL_MESSAGE",
+        providerSlug: "gmail",
+        name: "Gmail New Inbound Email",
+        description: "Fires when a new email arrives in the connected Gmail inbox.",
+    },
+    {
+        slug: "LINEAR_ISSUE_CREATED",
+        providerSlug: "linear",
+        name: "Linear Issue Created",
+        description: "Fires when a new issue is created in a Linear team.",
+    },
+    {
+        slug: "HUBSPOT_CONTACT_CREATED",
+        providerSlug: "hubspot",
+        name: "HubSpot New CRM Contact",
+        description: "Fires when a new contact lead enters HubSpot CRM.",
+    },
+];
+export function listComposioTriggerTypes(providerSlug) {
+    if (!providerSlug)
+        return COMPOSIO_TRIGGER_CATALOGUE.map((t) => ({ ...t }));
+    const p = providerSlug.toLowerCase().trim();
+    return COMPOSIO_TRIGGER_CATALOGUE.filter((c) => c.providerSlug === p).map((t) => ({ ...t }));
+}
+export function filterComposioToolkits(params) {
+    const q = (params?.search || "").trim().toLowerCase();
+    const cat = (params?.category || "").trim().toLowerCase();
+    let list = [...ENTERPRISE_TOOLKITS_CATALOG];
+    if (q) {
+        list = list.filter((t) => t.slug.includes(q) ||
+            t.name.toLowerCase().includes(q) ||
+            t.description.toLowerCase().includes(q) ||
+            t.categories.some((c) => c.toLowerCase().includes(q)));
+    }
+    if (cat) {
+        list = list.filter((t) => t.categories.some((c) => c.toLowerCase() === cat));
+    }
+    return list;
+}
+/** Least-privilege scopes for a custom auth config: explicit scopes win, then the toolkit's read-only or full set. */
+export function composioAuthConfigScopes(toolkitSlug, scopeMode, customScopes) {
+    if (customScopes && customScopes.length > 0)
+        return customScopes;
+    const meta = ENTERPRISE_TOOLKITS_CATALOG.find((t) => t.slug === toolkitSlug);
+    return scopeMode === "read_only"
+        ? meta?.readOnlyScopes || ["read"]
+        : meta?.fullAccessScopes || ["read", "write"];
+}

package/dist/config.d.ts

@@ -1,3 +1,4 @@
+import type { ClerkEnv } from "./clerk.js";
 export declare const ROOT_DIR: string;
 export interface MuxoConfig {
     port: number;
@@ -6,6 +7,11 @@ export interface MuxoConfig {
     composioApiKey: string;
     composioBaseUrl: string;
     stripeSecretKey: string;
+    stripePublishableKey: string;
+    stripeApiBaseUrl: string;
+    stripeProvisioningApiVersion: string;
+    stripeProjectId: string;
+    stripeConnectedAccountId?: string;
     stripeStarterPriceId: string;
     stripeCreditsPriceId: string;
     stripeWebhookSecret: string;
@@ -16,5 +22,9 @@ export interface MuxoConfig {
     publicWebUrl: string;
     docsUrl: string;
     vaultMasterKey: Buffer;
+    /** Clerk sign-in settings; sign-in stays password-based unless CLERK_PUBLISHABLE_KEY is set. */
+    clerkEnv?: ClerkEnv & {
+        MUXO_OWNER_EMAILS?: string;
+    };
 }
 export declare function getConfig(): MuxoConfig;

package/dist/config.js

@@ -70,6 +70,15 @@ export function getConfig() {
         stripeSecretKey: process.env.MUXO_EXTERNAL_MODE === "1"
             ? ""
             : process.env.STRIPE_SECRET_KEY || "",
+        stripePublishableKey: process.env.MUXO_EXTERNAL_MODE === "1"
+            ? ""
+            : process.env.STRIPE_PUBLISHABLE_KEY || "",
+        stripeApiBaseUrl: process.env.STRIPE_API_BASE_URL || "https://api.stripe.com",
+        stripeProvisioningApiVersion: process.env.STRIPE_PROVISIONING_API_VERSION || "2026-09-30.preview",
+        stripeProjectId: process.env.STRIPE_PROJECT_ID || "",
+        stripeConnectedAccountId: process.env.STRIPE_CONNECTED_ACCOUNT_ID ||
+            process.env.STRIPE_CONTEXT ||
+            "",
         stripeStarterPriceId: process.env.STRIPE_STARTER_PRICE_ID || "",
         stripeCreditsPriceId: process.env.STRIPE_CREDITS_PRICE_ID || "",
         stripeWebhookSecret: process.env.STRIPE_WEBHOOK_SECRET || "",
@@ -85,5 +94,12 @@ export function getConfig() {
         publicWebUrl: process.env.MUXO_PUBLIC_WEB_URL || "https://muxo.ai",
         docsUrl: process.env.MUXO_DOCS_URL || "https://docs.muxo.ai",
         vaultMasterKey: deriveVaultMasterKey(),
+        clerkEnv: {
+            CLERK_PUBLISHABLE_KEY: process.env.CLERK_PUBLISHABLE_KEY,
+            CLERK_SECRET_KEY: process.env.CLERK_SECRET_KEY,
+            CLERK_JWT_KEY: process.env.CLERK_JWT_KEY,
+            CLERK_AUTHORIZED_PARTIES: process.env.CLERK_AUTHORIZED_PARTIES,
+            MUXO_OWNER_EMAILS: process.env.MUXO_OWNER_EMAILS,
+        },
     };
 }

package/dist/durable-workflow.d.ts

@@ -0,0 +1,45 @@
+/** Cloud provisioning pipeline modelled on Cloudflare Workflows primitives, shared by the Node engine and the edge worker. */
+import { MuxoToolError } from "./mcp-schema.js";
+export type DurableWorkflowStepStatus = "completed" | "waiting" | "pending";
+export interface DurableWorkflowStep {
+    name: string;
+    primitive: "step.do" | "step.waitForEvent" | "step.sleep";
+    status: DurableWorkflowStepStatus;
+    output?: Record<string, unknown>;
+    completedAt?: string;
+}
+export interface DurableWorkflow {
+    id: string;
+    workspaceId: string;
+    workflowType: "cloud_provisioning_pipeline" | "approval_handoff_pipeline";
+    status: "running" | "waiting_for_event" | "completed" | "failed";
+    provider: string;
+    serviceRef: string;
+    resourceId: string | null;
+    steps: DurableWorkflowStep[];
+    createdAt: string;
+    updatedAt: string;
+}
+export declare const WORKFLOW_RESOURCE_COMPLETED_EVENT = "v2.provisioning.resource.completed";
+export declare function workflowNotFoundError(workflowId: string): MuxoToolError;
+export declare function normalizeWorkflowTarget(params: {
+    provider?: string;
+    serviceRef?: string;
+}): {
+    provider: string;
+    serviceRef: string;
+};
+export declare function createCloudProvisioningWorkflow(params: {
+    id: string;
+    workspaceId: string;
+    resourceId: string;
+    provider: string;
+    serviceRef: string;
+    region?: string;
+    apiVersion?: string;
+}): DurableWorkflow;
+/** Completes every outstanding step once the resource-completed event (or a manual advance) arrives. */
+export declare function completeCloudProvisioningWorkflow(wf: DurableWorkflow, params: {
+    secretKeys: string[];
+    triggerEvent?: unknown;
+}): DurableWorkflow;