@muxoai/platform 1.3.0 → 1.3.2

package/dist/providers/composio-sdk.d.ts

@@ -37,5 +37,6 @@ export declare class ComposioSdkAdapter {
         tool: MuxoTool;
         input: Record<string, unknown>;
         connectedAccountId?: string | null;
+        composioApiKey?: string | null;
     }): Promise<Record<string, unknown>>;
 }

package/dist/providers/composio-sdk.js

@@ -536,7 +536,8 @@ export class ComposioSdkAdapter {
                 },
             };
         };
-        if (!this.config.composioApiKey) {
+        const effectiveApiKey = params.composioApiKey || this.config.composioApiKey;
+        if (!effectiveApiKey) {
             return buildConnectedAccountFallback();
         }
         const body = {
@@ -549,7 +550,10 @@ export class ComposioSdkAdapter {
         try {
             const res = await fetch(`${this.config.composioBaseUrl}/tools/execute/${encodeURIComponent(params.tool.upstreamSlug)}`, {
                 method: "POST",
-                headers: this.headers,
+                headers: {
+                    ...this.headers,
+                    "x-api-key": effectiveApiKey,
+                },
                 body: JSON.stringify(body),
                 signal: AbortSignal.timeout(25000),
             });

package/dist/providers/microsoft-governance.d.ts

@@ -1,7 +1,13 @@
-import { AgentIdentity, AuditLogger } from "../../vendor/microsoft-governance/dist/index.js";
+import { AgentIdentity, AuditLogger, type ContextPoisoningScanResult, type KillSwitchResult, type TrustScore } from "../../vendor/microsoft-governance/dist/index.js";
 import type { ActionPlan, GovernanceDecisionRecord, MuxoTool, Workspace } from "../types.js";
+export declare const RING_LABELS: Record<number, string>;
 export declare class MicrosoftGovernanceAdapter {
     private readonly scanner;
+    private readonly contextPoisoningDetector;
+    private readonly facetRegistry;
+    private readonly trustManager;
+    private readonly killSwitch;
+    private readonly activeKillSwitches;
     private readonly seedMaterial;
     private readonly auditLoggers;
     private readonly identities;
@@ -15,13 +21,66 @@ export declare class MicrosoftGovernanceAdapter {
      * Returns (or lazily initializes) the SHA-256 hash-chained AuditLogger for a workspace.
      */
     getWorkspaceAuditLogger(workspaceId: string): AuditLogger;
+    /**
+     * Scans memory or prompt context for OWASP ASI-06 Context Poisoning (prompt injection,
+     * roleplay overrides, delimiter injection, high-entropy exfiltration payloads, and session isolation).
+     */
+    scanMemoryContent(params: {
+        workspaceId: string;
+        sessionId?: string;
+        entryId?: string;
+        role?: "user" | "assistant" | "tool" | "system";
+        content: string;
+        recordInDetector?: boolean;
+    }): {
+        safe: boolean;
+        riskLevel: "none" | "low" | "medium" | "high" | "critical";
+        findingsCount: number;
+        findings: Array<{
+            patternId: string;
+            patternName: string;
+            severity: string;
+            description: string;
+        }>;
+        integrityValid: boolean;
+    };
+    getContextPoisoningReport(workspaceId: string, sessionId?: string): ContextPoisoningScanResult;
+    /**
+     * Extracts structured SQL, Kubernetes, and Infrastructure protocol facets from tool input.
+     */
+    extractActionFacets(tool: MuxoTool, input: Record<string, unknown>): NonNullable<GovernanceDecisionRecord["protocolFacets"]>;
+    /**
+     * Evaluates hardware-style privilege rings (Ring 0..Ring 3) via Microsoft RingEnforcer.
+     */
+    evaluateRingEnforcement(workspace: Workspace, tool: MuxoTool, ownerApproved: boolean): NonNullable<GovernanceDecisionRecord["ringEnforcement"]>;
+    /**
+     * Records an agent execution outcome in the Bayesian TrustManager and returns the updated TrustScore.
+     */
+    recordAgentOutcome(workspaceId: string, succeeded: boolean, weight?: number): TrustScore;
+    /**
+     * Returns the current Bayesian TrustScore for a workspace agent boundary.
+     */
+    getWorkspaceTrustScore(workspaceId: string): NonNullable<GovernanceDecisionRecord["trustScore"]>;
+    /**
+     * Activates the emergency KillSwitch for a workspace agent boundary.
+     */
+    activateKillSwitch(workspaceId: string, reason: string, action?: "terminate" | "quarantine" | "suspend"): Promise<KillSwitchResult>;
+    /**
+     * Resumes a workspace agent boundary after a KillSwitch quarantine/suspension.
+     */
+    resumeKillSwitch(workspaceId: string): {
+        resumed: boolean;
+        workspaceId: string;
+        resumedAt: string;
+    };
+    isKillSwitchActive(workspaceId: string): KillSwitchResult | null;
     /**
      * Compiles the workspace's GovernancePolicy into a declarative Microsoft PolicyEngine instance.
      */
     private createPolicyEngine;
     /**
      * Runs the full Microsoft Agent Governance pipeline:
-     * Agent ──► McpSecurityScanner ──► PolicyEngine ──► AgentIdentity (Ed25519 DID) ──► AuditLogger ──► DecisionRecord
+     * Agent ──► KillSwitch ──► McpSecurityScanner & ContextPoisoningDetector (ASI-06) ──► ProtocolFacets (SQL/K8s/Infra) ──► RingEnforcer ──► PolicyEngine ──► TrustManager ──► AgentIdentity (Ed25519 DID) ──► AuditLogger ──► DecisionRecord
      */
     evaluateAction(params: {
         workspace: Workspace;