@muxoai/platform 1.3.3 → 1.4.1

package/dist/types.d.ts

@@ -1,6 +1,72 @@
 export type RiskLevel = "read" | "write" | "admin" | "financial" | "provisioning" | "destructive";
 export type ProviderLane = "composio_sdk" | "composio_instant" | "stripe_projects";
-export type SubscriptionTier = "free" | "starter";
+export type SubscriptionTier = "free" | "starter" | "pro";
+export type SubscriptionStatus = "none" | "active" | "trialing" | "past_due" | "unpaid" | "canceled" | "incomplete" | "comped";
+export interface WorkspaceBilling {
+    interval: "month" | "year" | null;
+    status: SubscriptionStatus;
+    cancelAtPeriodEnd: boolean;
+    /** When Stripe next renews or ends the subscription. */
+    currentPeriodEnd: string | null;
+    /** Monthly usage periods are counted from this moment. */
+    usagePeriodAnchor: string;
+    usagePeriodStart: string;
+    usagePeriodEnd: string;
+    /** usagePeriodStart of the last period whose plan credits were granted. */
+    creditsGrantedFor: string | null;
+    paymentFailedAt?: string | null;
+    /** Subscription whose start (fresh usage period and first credits) was already applied. */
+    startedSubscriptionId?: string | null;
+}
+export type LanguageMode = "non_technical" | "technical" | "hybrid";
+export interface HumanFriendlyExplanation {
+    headline: string;
+    preferred: string;
+    nonTechnical: string;
+    technical: string;
+    languageMode: LanguageMode;
+    customInstructions?: string[];
+}
+/**
+ * A structured handoff telling the caller (LLM or human) that a person must
+ * complete a step in the browser before the plan can proceed.
+ */
+export interface HumanHandoff {
+    kind: "approval" | "oauth" | "byok";
+    url: string | null;
+    ctaLabel: string;
+    headline: string;
+    instructions: string;
+    planId?: string;
+    provider?: string;
+}
+/**
+ * Machine-readable guidance for LLM harnesses on exactly which Muxo tool to
+ * call next once a handoff or gate clears.
+ */
+export interface LlmGuidance {
+    summary: string;
+    nextToolCalls: Array<{
+        tool: string;
+        input: Record<string, unknown>;
+        when: string;
+    }>;
+}
+export type WorkspaceRole = "owner" | "admin" | "operator" | "member";
+export type ParameterRuleOperator = "equals" | "must_equal" | "not_equals" | "contains" | "not_contains" | "starts_with" | "must_start_with" | "ends_with" | "must_end_with" | "domain_in" | "domain_not_in" | "max_number" | "min_number" | "gt" | "gte" | "lt" | "lte" | "in" | "not_in" | "regex";
+export type ParameterRuleAction = "block" | "require_approval" | "allow" | "auto_approve";
+export interface ParameterPolicyRule {
+    id: string;
+    toolPattern?: string;
+    parameter: string;
+    operator: ParameterRuleOperator;
+    value: string | number | string[];
+    unit?: "usd" | "cents" | "credits" | "raw";
+    action: ParameterRuleAction;
+    elseAction?: ParameterRuleAction;
+    description: string;
+    source?: "deterministic" | "llm" | "mcp_harness" | "user";
+}
 export interface GovernancePolicy {
     mode: "monitor" | "enforce";
     requireApprovalFor: RiskLevel[];
@@ -8,19 +74,65 @@ export interface GovernancePolicy {
     allowProvisioning: boolean;
     maxCreditsPerRun: number;
     blockedToolSlugs?: string[];
+    parameterRules?: ParameterPolicyRule[];
     executionRing?: 0 | 1 | 2 | 3;
     killSwitchActive?: boolean;
     killSwitchReason?: string | null;
     blockDestructiveSql?: boolean;
+    naturalLanguageRules?: string[];
+    languageMode?: LanguageMode;
+    customInstructions?: string[];
 }
 export interface User {
     id: string;
     email: string;
     name: string;
     workspaceId: string;
-    role: "owner" | "admin" | "member";
+    role: WorkspaceRole;
     createdAt: string;
 }
+export interface WorkspaceMembership {
+    id: string;
+    workspaceId: string;
+    userId: string;
+    role: WorkspaceRole;
+    teamName: string | null;
+    joinedViaKeyId?: string | null;
+    joinedVia?: "owner" | "created" | "api_key" | "team_key" | "invite" | "claim" | string;
+    apiKeyId?: string | null;
+    createdAt: string;
+}
+export interface WorkspaceSummary {
+    id: string;
+    name: string;
+    slug: string;
+    tier: SubscriptionTier;
+    creditsBalance: number;
+    monthlyActionsUsed: number;
+    monthlyActionsLimit: number;
+    role: WorkspaceRole;
+    teamName: string | null;
+    joinedVia?: "owner" | "created" | "api_key" | "team_key" | "invite" | "claim" | string;
+    isCurrent: boolean;
+    createdAt: string;
+}
+export interface TeamOnboardingKit {
+    ok?: boolean;
+    mode: "shared_workspace" | "dedicated_workspace";
+    workspace: Workspace | Pick<Workspace, "id" | "name" | "slug" | "tier" | "creditsBalance">;
+    teamName: string;
+    role: WorkspaceRole;
+    apiKey: string;
+    keyRecord: ApiKeyRecord;
+    claimUrl?: string | null;
+    consoleUrl?: string;
+    consoleJoinUrl?: string;
+    mcpEndpoint?: string;
+    cliSetupCommand: string;
+    mcpConfig?: Record<string, unknown>;
+    mcpConfigSnippet?: string;
+    instructions: string[];
+}
 export interface Workspace {
     id: string;
     name: string;
@@ -32,6 +144,8 @@ export interface Workspace {
     creditsBalance: number;
     stripeCustomerId: string | null;
     stripeSubscriptionId: string | null;
+    stripeConnectedAccountId?: string | null;
+    billing?: WorkspaceBilling;
     projectsEnvName: string;
     policy: GovernancePolicy;
     createdAt: string;
@@ -44,6 +158,9 @@ export interface ApiKeyRecord {
     keyPrefix: string;
     environment: "live" | "test";
     scopes: string[];
+    teamName?: string | null;
+    role?: WorkspaceRole;
+    createdByEmail?: string | null;
     lastUsedAt: string | null;
     revokedAt: string | null;
     createdAt: string;
@@ -60,7 +177,7 @@ export interface MuxoTool {
     riskLevel: RiskLevel;
     requiresAuth: boolean;
     creditCost: number;
-    billingMode: "customer_oauth" | "provider_wallet" | "resource_provisioning";
+    billingMode: "customer_oauth" | "customer_byok" | "provider_wallet" | "resource_provisioning";
     inputSchema: Record<string, unknown>;
     llmContextUrl?: string;
     providerUrl?: string;
@@ -184,6 +301,7 @@ export interface GovernanceDecisionRecord {
     signature: string;
     bindingHash: string;
     decidedAt: string;
+    explanation?: HumanFriendlyExplanation;
 }
 export type MemoryRecordKind = "fact" | "preference" | "resource_note" | "operator_note" | "execution_outcome" | "resource_topology" | "policy_decision";
 export interface TemporalGraphFact {
@@ -197,11 +315,56 @@ export interface TemporalGraphFact {
     validFrom: string;
     validTo: string | null;
     supersededById?: string | null;
-    sourceKind: MemoryRecordKind | "system";
+    sourceKind: MemoryRecordKind | "system" | "manual";
     sourceReferenceId?: string | null;
     metadata: Record<string, unknown>;
     createdAt: string;
 }
+export interface MemoryGraphNode {
+    id: string;
+    kind: "workspace" | "entity" | "preference" | "guardrail" | "connection" | "resource" | "tool" | "memory";
+    label: string;
+    summary: string;
+    status: "active" | "historical";
+    metadata?: Record<string, unknown>;
+}
+export interface MemoryGraphEdge {
+    id: string;
+    source: string;
+    target: string;
+    subject?: string;
+    object?: string;
+    predicate: string;
+    summary: string;
+    confidence: number;
+    status: "active" | "historical";
+    validFrom: string;
+    validTo: string | null;
+    supersededById: string | null;
+    sourceKind: TemporalGraphFact["sourceKind"];
+    sourceReferenceId: string | null;
+}
+export interface MemoryKnowledgeGraph {
+    workspaceId: string;
+    workspaceSlug: string;
+    namespace: string;
+    generatedAt: string;
+    query: string | null;
+    nodes: MemoryGraphNode[];
+    edges: MemoryGraphEdge[];
+    activeEdges: MemoryGraphEdge[];
+    historicalEdges: MemoryGraphEdge[];
+    stats: {
+        nodesCount: number;
+        activeEdgesCount: number;
+        historicalEdgesCount: number;
+        memoriesCount: number;
+        resourcesCount: number;
+        connectionsCount: number;
+    };
+    mermaid: string;
+    explanation: HumanFriendlyExplanation;
+}
 export interface MemoryContextSummary {
     enabled: boolean;
     namespace: string;
@@ -230,11 +393,15 @@ export interface MemoryContextSummary {
         createdAt?: string;
     }>;
     temporalFacts?: TemporalGraphFact[];
+    activeDefaults?: Record<string, unknown>;
+    autoFilledInput?: Record<string, unknown>;
+    activeGuardrails?: string[];
     contextPoisoningScan?: {
         safe: boolean;
         riskLevel: "none" | "low" | "medium" | "high" | "critical";
         findingsCount: number;
     };
+    explanation?: HumanFriendlyExplanation;
 }
 export interface WorkspaceMemoryRecord {
     id: string;
@@ -245,6 +412,7 @@ export interface WorkspaceMemoryRecord {
     content: string;
     kind: MemoryRecordKind;
     metadata: Record<string, unknown>;
+    fundingSource?: string;
     createdAt: string;
 }
 export interface ByokKeyRecord {
@@ -295,6 +463,22 @@ export interface SupplierSettlementSummary {
         retailToWholesaleCoverageRatio: number;
     };
 }
+export interface HumanHandoffDescriptor {
+    required: boolean;
+    kind: "none" | "oauth_connection" | "human_approval" | "oauth_and_approval";
+    status: "ready" | "awaiting_oauth" | "awaiting_approval" | "awaiting_oauth_and_approval" | "connected" | "approved" | "rejected";
+    headline: string;
+    markdownForUser: string;
+    agentNextToolCall: {
+        tool: string;
+        arguments: Record<string, unknown>;
+        description: string;
+    };
+    actionUrl: string | null;
+    approvalUrl: string | null;
+    oauthRedirectUrl: string | null;
+    consoleUrl: string;
+}
 export interface ActionPlan {
     id: string;
     workspaceId: string;
@@ -336,6 +520,27 @@ export interface ExecutionRun {
     startedAt: string;
     completedAt: string | null;
 }
+export type AgenticReceiptActionType = "ToolCall" | "ModelInference" | "GpuWorkload" | "RagRetrieval" | "ApiCall" | "DistributedJob";
+export interface PortableAgenticReceipt {
+    version: string;
+    receipt_id: string;
+    agent_id: string;
+    task_id: string;
+    action_type: AgenticReceiptActionType;
+    tool_name: string | null;
+    model_id: string | null;
+    input_hash: string;
+    output_hash: string;
+    started_at: string;
+    completed_at: string;
+    latency_ms: number;
+    nonce: string;
+    previous_receipt_hash: string | null;
+    receipt_hash: string;
+    signature_algorithm: "Ed25519";
+    public_key_hex: string;
+    signature_hex: string;
+}
 export interface ExecutionReceipt {
     id: string;
     runId: string;
@@ -354,13 +559,15 @@ export interface ExecutionReceipt {
     receiptHash: string;
     signature: string;
     decisionRecord?: GovernanceDecisionRecord | null;
+    agenticReceipt?: PortableAgenticReceipt | null;
     supplierSettlement?: SupplierSettlement | null;
     issuedAt: string;
+    explanation?: HumanFriendlyExplanation;
 }
 export interface LedgerEntry {
     id: string;
     workspaceId: string;
-    kind: "plan_grant" | "credit_topup" | "run_deduction" | "subscription_upgrade" | "manual_adjustment";
+    kind: "plan_grant" | "credit_topup" | "run_deduction" | "subscription_upgrade" | "plan_change" | "refund" | "manual_adjustment";
     actionsDelta: number;
     creditsDelta: number;
     balanceAfter: number;

package/dist/ui/console-html.d.ts

@@ -1,4 +1,4 @@
-export type ConsoleView = "overview" | "setup" | "catalog" | "connections" | "infrastructure" | "memory" | "governance" | "activity" | "billing" | "login" | "signup";
+export type ConsoleView = "overview" | "setup" | "activity" | "billing" | "login" | "signup";
 /** Every path that serves the console shell, mapped to the view it opens. */
 export declare const CONSOLE_ROUTES: Readonly<Record<string, ConsoleView>>;
 export declare function isConsolePath(pathname: string): boolean;
@@ -23,3 +23,12 @@ export interface OAuthConsentOptions {
 }
 /** Consent screen for MCP clients (ChatGPT, Claude, CLIs) asking to use a Muxo workspace. */
 export declare function renderOAuthConsentHtml(opts: OAuthConsentOptions): string;
+export interface ApprovalPageOptions {
+    planId: string;
+    clerk?: {
+        publishableKey: string;
+        frontendApi: string;
+    } | null;
+}
+/** One-click approval screen for plans held by workspace guardrails (`/approve/:planId`). */
+export declare function renderApprovalPageHtml(opts: ApprovalPageOptions): string;