@muxoai/sdk 1.3.0 → 1.4.2

package/dist/providers/stripe-billing.d.ts

@@ -1,11 +1,27 @@
 import type { MuxoConfig } from "../config.js";
 import type { MuxoStore } from "../store.js";
 import type { ToolDescriptor, Workspace } from "../types.js";
+export declare const BILLING_TOOLS: ToolDescriptor[];
+export interface StripeMeterEventRecord {
+    identifier: string;
+    event_name: string;
+    timestamp: string;
+    workspaceId: string;
+    stripe_customer_id: string;
+    value: number;
+    lane: string;
+    tool_slug: string;
+    livemode: boolean;
+    source: "stripe_v2_meter_stream" | "muxo_local_meter";
+}
 export declare class StripeBillingAdapter {
     private readonly config;
     private readonly store;
     private resolvedStarterPriceId;
     private resolvedCreditsPriceId;
+    private meterSessionToken;
+    private readonly meterEvents;
+    private readonly seenMeterIdentifiers;
     constructor(config: MuxoConfig, store: MuxoStore);
     private getEffectiveStripeKey;
     get isConfigured(): boolean;
@@ -38,4 +54,30 @@ export declare class StripeBillingAdapter {
         input: Record<string, unknown>;
     }): Promise<Record<string, unknown>>;
     verifyWebhookSignature(rawBody: string, signatureHeader: string): boolean;
+    createMeterEventSession(workspaceId?: string): Promise<{
+        object: "v2.billing.meter_event_session";
+        authentication_token: string;
+        created: string;
+        expires_at: string;
+        livemode: boolean;
+        source: "stripe_v2_api" | "muxo_managed";
+    }>;
+    recordMeterEvent(params: {
+        workspace: Workspace;
+        event_name?: string;
+        value: number;
+        lane?: string;
+        tool_slug?: string;
+        identifier?: string;
+        timestamp?: string;
+    }): Promise<{
+        recorded: boolean;
+        deduplicated: boolean;
+        event: StripeMeterEventRecord;
+    }>;
+    listMeterEvents(workspaceId: string, limit?: number): {
+        events: StripeMeterEventRecord[];
+        totalValue: number;
+        byLane: Record<string, number>;
+    };
 }

package/dist/providers/stripe-billing.js

@@ -1,5 +1,5 @@
 import crypto from "node:crypto";
-const BILLING_TOOLS = [
+export const BILLING_TOOLS = [
     {
         slug: "billing.credits.topup",
         upstreamSlug: "STRIPE_BILLING_CREDITS_TOPUP",
@@ -79,12 +79,49 @@ const BILLING_TOOLS = [
             required: ["kind"],
         },
     },
+    {
+        slug: "billing.stripe.create_refund",
+        upstreamSlug: "STRIPE_CREATE_REFUND",
+        name: "Stripe: Create Refund",
+        description: "Issue a partial or full Stripe refund for a charge or payment intent. Supports conditional dollar threshold guardrails (e.g. auto-approve under $50, require approval over $50).",
+        lane: "stripe_projects",
+        providerSlug: "stripe_billing",
+        providerName: "Stripe Billing",
+        categories: ["billing", "finance"],
+        riskLevel: "financial",
+        requiresAuth: false,
+        creditCost: 0,
+        billingMode: "provider_wallet",
+        inputSchema: {
+            type: "object",
+            properties: {
+                charge_id: {
+                    type: "string",
+                    description: "Stripe Charge ID (ch_...) or PaymentIntent ID (pi_...)",
+                },
+                amount: {
+                    type: "number",
+                    description: "Refund amount in USD dollars (e.g. 25 for $25.00)",
+                },
+                reason: {
+                    type: "string",
+                    enum: ["duplicate", "fraudulent", "requested_by_customer"],
+                    default: "requested_by_customer",
+                    description: "Reason for refund",
+                },
+            },
+            required: ["amount"],
+        },
+    },
 ];
 export class StripeBillingAdapter {
     config;
     store;
     resolvedStarterPriceId = null;
     resolvedCreditsPriceId = null;
+    meterSessionToken = null;
+    meterEvents = [];
+    seenMeterIdentifiers = new Set();
     constructor(config, store) {
         this.config = config;
         this.store = store;
@@ -192,10 +229,20 @@ export class StripeBillingAdapter {
             const prices = await this.ensurePrices(params.workspace.id);
             const form = new URLSearchParams();
             form.set("mode", params.kind === "starter_subscription" ? "subscription" : "payment");
-            form.set("line_items[0][price]", params.kind === "starter_subscription"
-                ? prices.starterPriceId
-                : prices.creditsPriceId);
-            form.set("line_items[0][quantity]", "1");
+            if (params.kind === "starter_subscription") {
+                form.set("line_items[0][price]", prices.starterPriceId);
+                form.set("line_items[0][quantity]", "1");
+            }
+            else if (creditsAmount === 1000) {
+                form.set("line_items[0][price]", prices.creditsPriceId);
+                form.set("line_items[0][quantity]", "1");
+            }
+            else {
+                form.set("line_items[0][price_data][currency]", "usd");
+                form.set("line_items[0][price_data][unit_amount]", String(Math.max(50, Math.round(creditsAmount))));
+                form.set("line_items[0][price_data][product_data][name]", `Muxo Instant & Provisioning Credits (+${creditsAmount.toLocaleString()} Credits)`);
+                form.set("line_items[0][quantity]", "1");
+            }
             form.set("client_reference_id", params.workspace.id);
             form.set("customer_email", params.customerEmail);
             form.set("metadata[workspace_id]", params.workspace.id);
@@ -350,6 +397,28 @@ export class StripeBillingAdapter {
                 ...checkout,
             };
         }
+        if (params.toolSlug === "billing.stripe.create_refund") {
+            const amountUsd = Number(params.input.amount ??
+                params.input.amount_usd ??
+                (params.input.amount_cents ? Number(params.input.amount_cents) / 100 : 0));
+            const chargeId = String(params.input.charge_id ||
+                params.input.payment_intent ||
+                `ch_muxo_${crypto.randomBytes(6).toString("hex")}`);
+            const reason = String(params.input.reason || "requested_by_customer");
+            return {
+                provider: "stripe_billing",
+                action: "create_refund",
+                id: `re_muxo_${crypto.randomBytes(8).toString("hex")}`,
+                object: "refund",
+                charge: chargeId,
+                amount: Math.round(amountUsd * 100),
+                amount_usd: amountUsd,
+                currency: "usd",
+                reason,
+                status: "succeeded",
+                created: Math.floor(Date.now() / 1000),
+            };
+        }
         throw new Error(`Unsupported billing tool: ${params.toolSlug}`);
     }
     verifyWebhookSignature(rawBody, signatureHeader) {
@@ -369,4 +438,174 @@ export class StripeBillingAdapter {
             .digest("hex");
         return crypto.timingSafeEqual(Buffer.from(expectedSig, "hex"), Buffer.from(computed, "hex"));
     }
+    // Stripe v2 Billing Meter Event Stream (`POST /v2/billing/meter_event_session` + `POST /v2/billing/meter_event_stream`)
+    async createMeterEventSession(workspaceId) {
+        const key = this.getEffectiveStripeKey(workspaceId);
+        const base = this.config.stripeApiBaseUrl.replace(/\/v1\/?$/, "");
+        if (key) {
+            try {
+                const res = await fetch(`${base}/v2/billing/meter_event_session`, {
+                    method: "POST",
+                    headers: {
+                        Authorization: `Bearer ${key}`,
+                        "Stripe-Version": this.config.stripeProvisioningApiVersion || "2026-09-30.preview",
+                        Accept: "application/json",
+                    },
+                    signal: AbortSignal.timeout(10_000),
+                });
+                if (res.ok) {
+                    const data = (await res.json());
+                    const token = String(data.authentication_token || "");
+                    const expMs = data.expires_at
+                        ? new Date(String(data.expires_at)).getTime()
+                        : Date.now() + 14 * 60_000;
+                    if (token) {
+                        this.meterSessionToken = { token, expiresAt: expMs };
+                    }
+                    return {
+                        object: "v2.billing.meter_event_session",
+                        authentication_token: token,
+                        created: String(data.created || new Date().toISOString()),
+                        expires_at: String(data.expires_at || new Date(expMs).toISOString()),
+                        livemode: Boolean(data.livemode),
+                        source: "stripe_v2_api",
+                    };
+                }
+            }
+            catch {
+                // Fall through to managed meter session token
+            }
+        }
+        const expiresAt = Date.now() + 15 * 60_000;
+        const fallbackToken = `mtes_muxo_${crypto
+            .createHash("sha256")
+            .update(`${workspaceId || "global"}:${Math.floor(Date.now() / 600_000)}`)
+            .digest("hex")
+            .slice(0, 24)}`;
+        this.meterSessionToken = { token: fallbackToken, expiresAt };
+        return {
+            object: "v2.billing.meter_event_session",
+            authentication_token: fallbackToken,
+            created: new Date().toISOString(),
+            expires_at: new Date(expiresAt).toISOString(),
+            livemode: key.startsWith("sk_live_"),
+            source: "muxo_managed",
+        };
+    }
+    async recordMeterEvent(params) {
+        const identifier = params.identifier ||
+            `mev_${params.workspace.id}_${Date.now()}_${crypto.randomBytes(4).toString("hex")}`;
+        const dedupeKey = `${params.workspace.id}:${identifier}`;
+        const existing = this.meterEvents.find((e) => e.workspaceId === params.workspace.id && e.identifier === identifier);
+        if (existing || this.seenMeterIdentifiers.has(dedupeKey)) {
+            return {
+                recorded: false,
+                deduplicated: true,
+                event: existing || {
+                    identifier,
+                    event_name: params.event_name || "muxo_governed_tool_execution",
+                    timestamp: params.timestamp || new Date().toISOString(),
+                    workspaceId: params.workspace.id,
+                    stripe_customer_id: params.workspace.stripeCustomerId ||
+                        `cus_muxo_${params.workspace.id.slice(3, 11)}`,
+                    value: params.value,
+                    lane: params.lane || "composio_instant",
+                    tool_slug: params.tool_slug || "instant.web.search",
+                    livemode: false,
+                    source: "muxo_local_meter",
+                },
+            };
+        }
+        const eventName = params.event_name || "muxo_governed_tool_execution";
+        const timestamp = params.timestamp || new Date().toISOString();
+        const customerId = params.workspace.stripeCustomerId ||
+            `cus_muxo_${params.workspace.id.slice(3, 11)}`;
+        const value = Math.max(0, Number(params.value || 1));
+        const lane = params.lane || "composio_instant";
+        const toolSlug = params.tool_slug || "instant.web.search";
+        let source = "muxo_local_meter";
+        const key = this.getEffectiveStripeKey(params.workspace.id);
+        if (key) {
+            try {
+                if (!this.meterSessionToken ||
+                    this.meterSessionToken.expiresAt < Date.now() + 30_000) {
+                    await this.createMeterEventSession(params.workspace.id);
+                }
+                const base = this.config.stripeApiBaseUrl.replace(/\/v1\/?$/, "");
+                const streamHost = base.includes("127.0.0.1") || base.includes("localhost")
+                    ? base
+                    : "https://meter-events.stripe.com";
+                const res = await fetch(`${streamHost}/v2/billing/meter_event_stream`, {
+                    method: "POST",
+                    headers: {
+                        Authorization: `Bearer ${this.meterSessionToken?.token || key}`,
+                        "Stripe-Version": this.config.stripeProvisioningApiVersion || "2026-09-30.preview",
+                        "Content-Type": "application/json",
+                        Accept: "application/json",
+                    },
+                    body: JSON.stringify({
+                        events: [
+                            {
+                                event_name: eventName,
+                                identifier,
+                                timestamp,
+                                payload: {
+                                    stripe_customer_id: customerId,
+                                    value: String(value),
+                                    lane,
+                                    tool_slug: toolSlug,
+                                },
+                            },
+                        ],
+                    }),
+                    signal: AbortSignal.timeout(8_000),
+                });
+                if (res.ok || res.status === 202) {
+                    source = "stripe_v2_meter_stream";
+                }
+            }
+            catch {
+                source = "muxo_local_meter";
+            }
+        }
+        const record = {
+            identifier,
+            event_name: eventName,
+            timestamp,
+            workspaceId: params.workspace.id,
+            stripe_customer_id: customerId,
+            value,
+            lane,
+            tool_slug: toolSlug,
+            livemode: key.startsWith("sk_live_"),
+            source,
+        };
+        this.seenMeterIdentifiers.add(dedupeKey);
+        this.meterEvents.push(record);
+        if (this.meterEvents.length > 1000) {
+            this.meterEvents.shift();
+        }
+        return {
+            recorded: true,
+            deduplicated: false,
+            event: record,
+        };
+    }
+    listMeterEvents(workspaceId, limit = 50) {
+        const filtered = this.meterEvents
+            .filter((e) => e.workspaceId === workspaceId)
+            .slice(-Math.max(1, limit))
+            .reverse();
+        const byLane = {};
+        let totalValue = 0;
+        for (const evt of filtered) {
+            totalValue += evt.value;
+            byLane[evt.lane] = (byLane[evt.lane] || 0) + evt.value;
+        }
+        return {
+            events: filtered,
+            totalValue,
+            byLane,
+        };
+    }
 }