@nordsym/apiclaw 1.7.3 → 1.7.4

package/convex/mou.ts

@@ -0,0 +1,91 @@
+import { v } from "convex/values";
+import { query, mutation } from "./_generated/server";
+
+// Get MOU by partnerId
+export const getByPartnerId = query({
+  args: { partnerId: v.string() },
+  handler: async (ctx, args) => {
+    return await ctx.db
+      .query("mouDocuments")
+      .withIndex("by_partnerId", (q) => q.eq("partnerId", args.partnerId))
+      .first();
+  },
+});
+
+// Create new MOU document
+export const create = mutation({
+  args: {
+    partnerId: v.string(),
+    partnerName: v.string(),
+    partnerEmail: v.string(),
+    documentHtml: v.string(),
+  },
+  handler: async (ctx, args) => {
+    return await ctx.db.insert("mouDocuments", {
+      ...args,
+      status: "pending",
+      createdAt: Date.now(),
+    });
+  },
+});
+
+// Sign MOU
+export const sign = mutation({
+  args: {
+    partnerId: v.string(),
+    signatureDataUrl: v.string(),
+    signerName: v.string(),
+    signerTitle: v.string(),
+    signerIp: v.optional(v.string()),
+  },
+  handler: async (ctx, args) => {
+    const mou = await ctx.db
+      .query("mouDocuments")
+      .withIndex("by_partnerId", (q) => q.eq("partnerId", args.partnerId))
+      .first();
+
+    if (!mou) {
+      throw new Error("MOU not found");
+    }
+
+    if (mou.status === "signed") {
+      throw new Error("MOU already signed");
+    }
+
+    await ctx.db.patch(mou._id, {
+      status: "signed",
+      signedAt: Date.now(),
+      signatureDataUrl: args.signatureDataUrl,
+      signerName: args.signerName,
+      signerTitle: args.signerTitle,
+      signerIp: args.signerIp,
+    });
+
+    return { success: true };
+  },
+});
+
+// List all MOUs (admin)
+export const list = query({
+  args: {},
+  handler: async (ctx) => {
+    return await ctx.db.query("mouDocuments").collect();
+  },
+});
+
+// Delete MOU (admin)
+export const remove = mutation({
+  args: { partnerId: v.string() },
+  handler: async (ctx, args) => {
+    const mou = await ctx.db
+      .query("mouDocuments")
+      .withIndex("by_partnerId", (q) => q.eq("partnerId", args.partnerId))
+      .first();
+
+    if (mou) {
+      await ctx.db.delete(mou._id);
+      return { success: true, deleted: args.partnerId };
+    }
+    return { success: false, message: "MOU not found" };
+  },
+});

package/convex/providerKeys.d.ts

@@ -0,0 +1,31 @@
+export declare const BYOK_PROVIDERS: readonly [{
+    readonly id: "brave_search";
+    readonly name: "Brave Search";
+    readonly icon: "🔍";
+}, {
+    readonly id: "openrouter";
+    readonly name: "OpenRouter";
+    readonly icon: "🤖";
+}, {
+    readonly id: "elevenlabs";
+    readonly name: "ElevenLabs";
+    readonly icon: "🎙️";
+}, {
+    readonly id: "twilio";
+    readonly name: "Twilio";
+    readonly icon: "📞";
+}, {
+    readonly id: "resend";
+    readonly name: "Resend";
+    readonly icon: "📧";
+}, {
+    readonly id: "e2b";
+    readonly name: "E2B";
+    readonly icon: "💻";
+}];
+export declare const addKey: any;
+export declare const removeKey: any;
+export declare const getKeys: any;
+export declare const getKeyForExecution: any;
+export declare const getSupportedProviders: any;
+//# sourceMappingURL=providerKeys.d.ts.map

package/convex/providerKeys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerKeys.d.ts","sourceRoot":"","sources":["providerKeys.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;EAOjB,CAAC;AAoBX,eAAO,MAAM,MAAM,KAuHjB,CAAC;AAoBH,eAAO,MAAM,SAAS,KAiCpB,CAAC;AAMH,eAAO,MAAM,OAAO,KAmClB,CAAC;AAMH,eAAO,MAAM,kBAAkB,KAuB7B,CAAC;AAMH,eAAO,MAAM,qBAAqB,KAKhC,CAAC"}

package/convex/providerKeys.js

@@ -0,0 +1,257 @@
+import { v } from "convex/values";
+import { mutation, query, internalQuery } from "./_generated/server";
+// ============================================
+// BYOK - Bring Your Own Key
+// ============================================
+// Supported providers for BYOK
+export const BYOK_PROVIDERS = [
+    { id: "brave_search", name: "Brave Search", icon: "🔍" },
+    { id: "openrouter", name: "OpenRouter", icon: "🤖" },
+    { id: "elevenlabs", name: "ElevenLabs", icon: "🎙️" },
+    { id: "twilio", name: "Twilio", icon: "📞" },
+    { id: "resend", name: "Resend", icon: "📧" },
+    { id: "e2b", name: "E2B", icon: "💻" },
+];
+// Simple base64 encoding for MVP (proper encryption in production)
+function encryptKey(key) {
+    return Buffer.from(key).toString("base64");
+}
+function decryptKey(encryptedKey) {
+    return Buffer.from(encryptedKey, "base64").toString("utf-8");
+}
+function getKeyHint(key) {
+    if (key.length <= 4)
+        return "••••";
+    return key.slice(-4);
+}
+// ============================================
+// ADD KEY
+// ============================================
+export const addKey = mutation({
+    args: {
+        token: v.string(),
+        provider: v.string(),
+        apiKey: v.string(),
+    },
+    handler: async (ctx, args) => {
+        // Validate session
+        const session = await ctx.db
+            .query("agentSessions")
+            .withIndex("by_sessionToken", (q) => q.eq("sessionToken", args.token))
+            .first();
+        if (!session) {
+            throw new Error("Invalid session");
+        }
+        const workspaceId = session.workspaceId;
+        // Check if key already exists for this provider
+        const existingKey = await ctx.db
+            .query("providerKeys")
+            .withIndex("by_provider", (q) => q.eq("workspaceId", workspaceId).eq("provider", args.provider))
+            .first();
+        const now = Date.now();
+        const encryptedKey = encryptKey(args.apiKey);
+        const keyHint = getKeyHint(args.apiKey);
+        let isFirstKey = false;
+        if (existingKey) {
+            // Update existing key
+            await ctx.db.patch(existingKey._id, {
+                encryptedKey,
+                keyHint,
+                updatedAt: now,
+            });
+        }
+        else {
+            // Create new key
+            await ctx.db.insert("providerKeys", {
+                workspaceId,
+                provider: args.provider,
+                encryptedKey,
+                keyHint,
+                isCustom: false,
+                createdAt: now,
+                updatedAt: now,
+            });
+            // Check if this is the first BYOK key for earn progress
+            const allKeys = await ctx.db
+                .query("providerKeys")
+                .withIndex("by_workspaceId", (q) => q.eq("workspaceId", workspaceId))
+                .collect();
+            // If this is the only key (the one we just created), mark BYOK setup
+            if (allKeys.length === 1) {
+                isFirstKey = true;
+                // Import and call markByokSetup
+                const earnProgress = await ctx.db
+                    .query("earnProgress")
+                    .withIndex("by_workspaceId", (q) => q.eq("workspaceId", workspaceId))
+                    .first();
+                if (earnProgress && !earnProgress.byokSetup) {
+                    const newTotal = calculateEarnTotal({ ...earnProgress, byokSetup: true });
+                    await ctx.db.patch(earnProgress._id, {
+                        byokSetup: true,
+                        byokSetupAt: now,
+                        totalEarned: newTotal,
+                        updatedAt: now,
+                    });
+                    // Add 5 calls to workspace limit
+                    const workspace = await ctx.db.get(workspaceId);
+                    if (workspace) {
+                        await ctx.db.patch(workspaceId, {
+                            usageLimit: workspace.usageLimit + 5,
+                            updatedAt: now,
+                        });
+                    }
+                }
+                else if (!earnProgress) {
+                    // Create earn progress with byokSetup
+                    await ctx.db.insert("earnProgress", {
+                        workspaceId,
+                        firstDirectCall: false,
+                        apisUsed: [],
+                        apisUsedComplete: false,
+                        agentListed: false,
+                        apiListed: false,
+                        byokSetup: true,
+                        byokSetupAt: now,
+                        githubStarred: false,
+                        twitterFollowed: false,
+                        referralCount: 0,
+                        totalEarned: 5, // BYOK reward
+                        createdAt: now,
+                        updatedAt: now,
+                    });
+                    // Add 5 calls to workspace limit
+                    const workspace = await ctx.db.get(workspaceId);
+                    if (workspace) {
+                        await ctx.db.patch(workspaceId, {
+                            usageLimit: workspace.usageLimit + 5,
+                            updatedAt: now,
+                        });
+                    }
+                }
+            }
+        }
+        return {
+            success: true,
+            action: existingKey ? "updated" : "created",
+            earnedByok: isFirstKey,
+        };
+    },
+});
+// Helper to calculate earn total (duplicated to avoid circular import)
+function calculateEarnTotal(progress) {
+    let total = 0;
+    if (progress.firstDirectCall)
+        total += 15;
+    if (progress.apisUsedComplete)
+        total += 10;
+    if (progress.agentListed)
+        total += 10;
+    if (progress.apiListed)
+        total += 10;
+    if (progress.byokSetup)
+        total += 5;
+    if (progress.githubStarred)
+        total += 10;
+    if (progress.twitterFollowed)
+        total += 5;
+    total += (progress.referralCount || 0) * 10;
+    return total;
+}
+// ============================================
+// REMOVE KEY
+// ============================================
+export const removeKey = mutation({
+    args: {
+        token: v.string(),
+        provider: v.string(),
+    },
+    handler: async (ctx, args) => {
+        // Validate session
+        const session = await ctx.db
+            .query("agentSessions")
+            .withIndex("by_sessionToken", (q) => q.eq("sessionToken", args.token))
+            .first();
+        if (!session) {
+            throw new Error("Invalid session");
+        }
+        const workspaceId = session.workspaceId;
+        // Find and delete the key
+        const existingKey = await ctx.db
+            .query("providerKeys")
+            .withIndex("by_provider", (q) => q.eq("workspaceId", workspaceId).eq("provider", args.provider))
+            .first();
+        if (!existingKey) {
+            throw new Error("Key not found");
+        }
+        await ctx.db.delete(existingKey._id);
+        return { success: true };
+    },
+});
+// ============================================
+// GET KEYS (for display - no actual key values)
+// ============================================
+export const getKeys = query({
+    args: {
+        token: v.string(),
+    },
+    handler: async (ctx, args) => {
+        // Validate session
+        const session = await ctx.db
+            .query("agentSessions")
+            .withIndex("by_sessionToken", (q) => q.eq("sessionToken", args.token))
+            .first();
+        if (!session) {
+            return { keys: [] };
+        }
+        const workspaceId = session.workspaceId;
+        // Get all keys for this workspace
+        const keys = await ctx.db
+            .query("providerKeys")
+            .withIndex("by_workspaceId", (q) => q.eq("workspaceId", workspaceId))
+            .collect();
+        // Return without actual key values
+        return {
+            keys: keys.map((key) => ({
+                provider: key.provider,
+                keyHint: key.keyHint,
+                isCustom: key.isCustom,
+                customConfig: key.customConfig,
+                createdAt: key.createdAt,
+                updatedAt: key.updatedAt,
+            })),
+        };
+    },
+});
+// ============================================
+// GET KEY FOR EXECUTION (internal use only)
+// ============================================
+export const getKeyForExecution = internalQuery({
+    args: {
+        workspaceId: v.id("workspaces"),
+        provider: v.string(),
+    },
+    handler: async (ctx, args) => {
+        const key = await ctx.db
+            .query("providerKeys")
+            .withIndex("by_provider", (q) => q.eq("workspaceId", args.workspaceId).eq("provider", args.provider))
+            .first();
+        if (!key) {
+            return null;
+        }
+        return {
+            apiKey: decryptKey(key.encryptedKey),
+            isCustom: key.isCustom,
+            customConfig: key.customConfig,
+        };
+    },
+});
+// ============================================
+// GET SUPPORTED PROVIDERS
+// ============================================
+export const getSupportedProviders = query({
+    args: {},
+    handler: async () => {
+        return BYOK_PROVIDERS;
+    },
+});
+//# sourceMappingURL=providerKeys.js.map

package/convex/providerKeys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerKeys.js","sourceRoot":"","sources":["providerKeys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAErE,+CAA+C;AAC/C,4BAA4B;AAC5B,+CAA+C;AAE/C,+BAA+B;AAC/B,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE;IACxD,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE;IACpD,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE;IACrD,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;IAC5C,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;IAC5C,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE;CAC9B,CAAC;AAEX,mEAAmE;AACnE,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,YAAoB;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACnC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED,+CAA+C;AAC/C,UAAU;AACV,+CAA+C;AAE/C,MAAM,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAC;IAC7B,IAAI,EAAE;QACJ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,mBAAmB;QACnB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE;aACzB,KAAK,CAAC,eAAe,CAAC;aACtB,SAAS,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;aACrE,KAAK,EAAE,CAAC;QAEX,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAExC,gDAAgD;QAChD,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,EAAE;aAC7B,KAAK,CAAC,cAAc,CAAC;aACrB,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAC/D;aACA,KAAK,EAAE,CAAC;QAEX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAExC,IAAI,UAAU,GAAG,KAAK,CAAC;QAEvB,IAAI,WAAW,EAAE,CAAC;YAChB,sBAAsB;YACtB,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;gBAClC,YAAY;gBACZ,OAAO;gBACP,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,iBAAiB;YACjB,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE;gBAClC,WAAW;gBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,YAAY;gBACZ,OAAO;gBACP,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;YAEH,wDAAwD;YACxD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE;iBACzB,KAAK,CAAC,cAAc,CAAC;iBACrB,SAAS,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;iBACpE,OAAO,EAAE,CAAC;YAEb,qEAAqE;YACrE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,UAAU,GAAG,IAAI,CAAC;gBAClB,gCAAgC;gBAChC,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,EAAE;qBAC9B,KAAK,CAAC,cAAc,CAAC;qBACrB,SAAS,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;qBACpE,KAAK,EAAE,CAAC;gBAEX,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;oBAC5C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,EAAE,GAAG,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1E,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE;wBACnC,SAAS,EAAE,IAAI;wBACf,WAAW,EAAE,GAAG;wBAChB,WAAW,EAAE,QAAQ;wBACrB,SAAS,EAAE,GAAG;qBACf,CAAC,CAAC;oBACH,iCAAiC;oBACjC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBAChD,IAAI,SAAS,EAAE,CAAC;wBACd,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE;4BAC9B,UAAU,EAAE,SAAS,CAAC,UAAU,GAAG,CAAC;4BACpC,SAAS,EAAE,GAAG;yBACf,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;qBAAM,IAAI,CAAC,YAAY,EAAE,CAAC;oBACzB,sCAAsC;oBACtC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE;wBAClC,WAAW;wBACX,eAAe,EAAE,KAAK;wBACtB,QAAQ,EAAE,EAAE;wBACZ,gBAAgB,EAAE,KAAK;wBACvB,WAAW,EAAE,KAAK;wBAClB,SAAS,EAAE,KAAK;wBAChB,SAAS,EAAE,IAAI;wBACf,WAAW,EAAE,GAAG;wBAChB,aAAa,EAAE,KAAK;wBACpB,eAAe,EAAE,KAAK;wBACtB,aAAa,EAAE,CAAC;wBAChB,WAAW,EAAE,CAAC,EAAE,cAAc;wBAC9B,SAAS,EAAE,GAAG;wBACd,SAAS,EAAE,GAAG;qBACf,CAAC,CAAC;oBACH,iCAAiC;oBACjC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBAChD,IAAI,SAAS,EAAE,CAAC;wBACd,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE;4BAC9B,UAAU,EAAE,SAAS,CAAC,UAAU,GAAG,CAAC;4BACpC,SAAS,EAAE,GAAG;yBACf,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC3C,UAAU,EAAE,UAAU;SACvB,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,uEAAuE;AACvE,SAAS,kBAAkB,CAAC,QAAa;IACvC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,CAAC,eAAe;QAAE,KAAK,IAAI,EAAE,CAAC;IAC1C,IAAI,QAAQ,CAAC,gBAAgB;QAAE,KAAK,IAAI,EAAE,CAAC;IAC3C,IAAI,QAAQ,CAAC,WAAW;QAAE,KAAK,IAAI,EAAE,CAAC;IACtC,IAAI,QAAQ,CAAC,SAAS;QAAE,KAAK,IAAI,EAAE,CAAC;IACpC,IAAI,QAAQ,CAAC,SAAS;QAAE,KAAK,IAAI,CAAC,CAAC;IACnC,IAAI,QAAQ,CAAC,aAAa;QAAE,KAAK,IAAI,EAAE,CAAC;IACxC,IAAI,QAAQ,CAAC,eAAe;QAAE,KAAK,IAAI,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;IAC5C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+CAA+C;AAC/C,aAAa;AACb,+CAA+C;AAE/C,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAC;IAChC,IAAI,EAAE;QACJ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;KACrB;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,mBAAmB;QACnB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE;aACzB,KAAK,CAAC,eAAe,CAAC;aACtB,SAAS,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;aACrE,KAAK,EAAE,CAAC;QAEX,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAExC,0BAA0B;QAC1B,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,EAAE;aAC7B,KAAK,CAAC,cAAc,CAAC;aACrB,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAC/D;aACA,KAAK,EAAE,CAAC;QAEX,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF,CAAC,CAAC;AAEH,+CAA+C;AAC/C,gDAAgD;AAChD,+CAA+C;AAE/C,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,CAAC;IAC3B,IAAI,EAAE;QACJ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,mBAAmB;QACnB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE;aACzB,KAAK,CAAC,eAAe,CAAC;aACtB,SAAS,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;aACrE,KAAK,EAAE,CAAC;QAEX,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAExC,kCAAkC;QAClC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;aACtB,KAAK,CAAC,cAAc,CAAC;aACrB,SAAS,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;aACpE,OAAO,EAAE,CAAC;QAEb,mCAAmC;QACnC,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACvB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,SAAS,EAAE,GAAG,CAAC,SAAS;aACzB,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,+CAA+C;AAC/C,4CAA4C;AAC5C,+CAA+C;AAE/C,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;IAC9C,IAAI,EAAE;QACJ,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;KACrB;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE;aACrB,KAAK,CAAC,cAAc,CAAC;aACrB,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CACpE;aACA,KAAK,EAAE,CAAC;QAEX,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC;YACpC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,+CAA+C;AAC/C,0BAA0B;AAC1B,+CAA+C;AAE/C,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC;IACzC,IAAI,EAAE,EAAE;IACR,OAAO,EAAE,KAAK,IAAI,EAAE;QAClB,OAAO,cAAc,CAAC;IACxB,CAAC;CACF,CAAC,CAAC"}

package/convex/providerKeys.ts

@@ -0,0 +1,289 @@
+import { v } from "convex/values";
+import { mutation, query, internalQuery } from "./_generated/server";
+
+// ============================================
+// BYOK - Bring Your Own Key
+// ============================================
+
+// Supported providers for BYOK
+export const BYOK_PROVIDERS = [
+  { id: "brave_search", name: "Brave Search", icon: "🔍" },
+  { id: "openrouter", name: "OpenRouter", icon: "🤖" },
+  { id: "elevenlabs", name: "ElevenLabs", icon: "🎙️" },
+  { id: "twilio", name: "Twilio", icon: "📞" },
+  { id: "resend", name: "Resend", icon: "📧" },
+  { id: "e2b", name: "E2B", icon: "💻" },
+] as const;
+
+// Simple base64 encoding for MVP (proper encryption in production)
+function encryptKey(key: string): string {
+  return Buffer.from(key).toString("base64");
+}
+
+function decryptKey(encryptedKey: string): string {
+  return Buffer.from(encryptedKey, "base64").toString("utf-8");
+}
+
+function getKeyHint(key: string): string {
+  if (key.length <= 4) return "••••";
+  return key.slice(-4);
+}
+
+// ============================================
+// ADD KEY
+// ============================================
+
+export const addKey = mutation({
+  args: {
+    token: v.string(),
+    provider: v.string(),
+    apiKey: v.string(),
+  },
+  handler: async (ctx, args) => {
+    // Validate session
+    const session = await ctx.db
+      .query("agentSessions")
+      .withIndex("by_sessionToken", (q) => q.eq("sessionToken", args.token))
+      .first();
+
+    if (!session) {
+      throw new Error("Invalid session");
+    }
+
+    const workspaceId = session.workspaceId;
+
+    // Check if key already exists for this provider
+    const existingKey = await ctx.db
+      .query("providerKeys")
+      .withIndex("by_provider", (q) =>
+        q.eq("workspaceId", workspaceId).eq("provider", args.provider)
+      )
+      .first();
+
+    const now = Date.now();
+    const encryptedKey = encryptKey(args.apiKey);
+    const keyHint = getKeyHint(args.apiKey);
+
+    let isFirstKey = false;
+
+    if (existingKey) {
+      // Update existing key
+      await ctx.db.patch(existingKey._id, {
+        encryptedKey,
+        keyHint,
+        updatedAt: now,
+      });
+    } else {
+      // Create new key
+      await ctx.db.insert("providerKeys", {
+        workspaceId,
+        provider: args.provider,
+        encryptedKey,
+        keyHint,
+        isCustom: false,
+        createdAt: now,
+        updatedAt: now,
+      });
+
+      // Check if this is the first BYOK key for earn progress
+      const allKeys = await ctx.db
+        .query("providerKeys")
+        .withIndex("by_workspaceId", (q) => q.eq("workspaceId", workspaceId))
+        .collect();
+
+      // If this is the only key (the one we just created), mark BYOK setup
+      if (allKeys.length === 1) {
+        isFirstKey = true;
+        // Import and call markByokSetup
+        const earnProgress = await ctx.db
+          .query("earnProgress")
+          .withIndex("by_workspaceId", (q) => q.eq("workspaceId", workspaceId))
+          .first();
+
+        if (earnProgress && !earnProgress.byokSetup) {
+          const newTotal = calculateEarnTotal({ ...earnProgress, byokSetup: true });
+          await ctx.db.patch(earnProgress._id, {
+            byokSetup: true,
+            byokSetupAt: now,
+            totalEarned: newTotal,
+            updatedAt: now,
+          });
+          // Add 5 calls to workspace limit
+          const workspace = await ctx.db.get(workspaceId);
+          if (workspace) {
+            await ctx.db.patch(workspaceId, {
+              usageLimit: workspace.usageLimit + 5,
+              updatedAt: now,
+            });
+          }
+        } else if (!earnProgress) {
+          // Create earn progress with byokSetup
+          await ctx.db.insert("earnProgress", {
+            workspaceId,
+            firstDirectCall: false,
+            apisUsed: [],
+            apisUsedComplete: false,
+            agentListed: false,
+            apiListed: false,
+            byokSetup: true,
+            byokSetupAt: now,
+            githubStarred: false,
+            twitterFollowed: false,
+            referralCount: 0,
+            totalEarned: 5, // BYOK reward
+            createdAt: now,
+            updatedAt: now,
+          });
+          // Add 5 calls to workspace limit
+          const workspace = await ctx.db.get(workspaceId);
+          if (workspace) {
+            await ctx.db.patch(workspaceId, {
+              usageLimit: workspace.usageLimit + 5,
+              updatedAt: now,
+            });
+          }
+        }
+      }
+    }
+
+    return { 
+      success: true, 
+      action: existingKey ? "updated" : "created",
+      earnedByok: isFirstKey,
+    };
+  },
+});
+
+// Helper to calculate earn total (duplicated to avoid circular import)
+function calculateEarnTotal(progress: any): number {
+  let total = 0;
+  if (progress.firstDirectCall) total += 15;
+  if (progress.apisUsedComplete) total += 10;
+  if (progress.agentListed) total += 10;
+  if (progress.apiListed) total += 10;
+  if (progress.byokSetup) total += 5;
+  if (progress.githubStarred) total += 10;
+  if (progress.twitterFollowed) total += 5;
+  total += (progress.referralCount || 0) * 10;
+  return total;
+}
+
+// ============================================
+// REMOVE KEY
+// ============================================
+
+export const removeKey = mutation({
+  args: {
+    token: v.string(),
+    provider: v.string(),
+  },
+  handler: async (ctx, args) => {
+    // Validate session
+    const session = await ctx.db
+      .query("agentSessions")
+      .withIndex("by_sessionToken", (q) => q.eq("sessionToken", args.token))
+      .first();
+
+    if (!session) {
+      throw new Error("Invalid session");
+    }
+
+    const workspaceId = session.workspaceId;
+
+    // Find and delete the key
+    const existingKey = await ctx.db
+      .query("providerKeys")
+      .withIndex("by_provider", (q) =>
+        q.eq("workspaceId", workspaceId).eq("provider", args.provider)
+      )
+      .first();
+
+    if (!existingKey) {
+      throw new Error("Key not found");
+    }
+
+    await ctx.db.delete(existingKey._id);
+    return { success: true };
+  },
+});
+
+// ============================================
+// GET KEYS (for display - no actual key values)
+// ============================================
+
+export const getKeys = query({
+  args: {
+    token: v.string(),
+  },
+  handler: async (ctx, args) => {
+    // Validate session
+    const session = await ctx.db
+      .query("agentSessions")
+      .withIndex("by_sessionToken", (q) => q.eq("sessionToken", args.token))
+      .first();
+
+    if (!session) {
+      return { keys: [] };
+    }
+
+    const workspaceId = session.workspaceId;
+
+    // Get all keys for this workspace
+    const keys = await ctx.db
+      .query("providerKeys")
+      .withIndex("by_workspaceId", (q) => q.eq("workspaceId", workspaceId))
+      .collect();
+
+    // Return without actual key values
+    return {
+      keys: keys.map((key) => ({
+        provider: key.provider,
+        keyHint: key.keyHint,
+        isCustom: key.isCustom,
+        customConfig: key.customConfig,
+        createdAt: key.createdAt,
+        updatedAt: key.updatedAt,
+      })),
+    };
+  },
+});
+
+// ============================================
+// GET KEY FOR EXECUTION (internal use only)
+// ============================================
+
+export const getKeyForExecution = internalQuery({
+  args: {
+    workspaceId: v.id("workspaces"),
+    provider: v.string(),
+  },
+  handler: async (ctx, args) => {
+    const key = await ctx.db
+      .query("providerKeys")
+      .withIndex("by_provider", (q) =>
+        q.eq("workspaceId", args.workspaceId).eq("provider", args.provider)
+      )
+      .first();
+
+    if (!key) {
+      return null;
+    }
+
+    return {
+      apiKey: decryptKey(key.encryptedKey),
+      isCustom: key.isCustom,
+      customConfig: key.customConfig,
+    };
+  },
+});
+
+// ============================================
+// GET SUPPORTED PROVIDERS
+// ============================================
+
+export const getSupportedProviders = query({
+  args: {},
+  handler: async () => {
+    return BYOK_PROVIDERS;
+  },
+});