@muxoai/sdk 1.2.2 → 1.2.3

package/README.md

@@ -1,54 +1,74 @@
-# Muxo (`@muxoai/platform`)
+# Muxo (`@muxoai/platform` / `@muxoai/cli` / `@muxoai/sdk`)
 
-Muxo is a unified execution, cloud infrastructure provisioning, contextual memory, and cryptographic governance platform for AI agents and applications. Customers and their agents interact exclusively with **Muxo** — never with underlying tool or cloud infrastructure providers directly.
+Muxo (`v1.2.3`) is the unified execution, cloud infrastructure provisioning, contextual memory, and cryptographic governance platform for AI agents and applications. Customers and their agents interact exclusively with **Muxo** — never with underlying tool or cloud infrastructure providers directly.
 
-See [`ARCHITECTURE.md`](./ARCHITECTURE.md) for the complete internal engineering blueprint, open-source ecosystem Keep/Adopt/Drop matrix, and root-cause analysis of how `muxo3` resolves `muxo2`'s Cloudflare isolate/container failure modes.
+See [`ARCHITECTURE.md`](./ARCHITECTURE.md) for the complete internal engineering blueprint, open-source ecosystem Keep/Adopt/Drop matrix, and 4-pillar architecture.
 
-Under the hood, Muxo unifies **four core pillars** behind one 18-operation MCP contract, REST API, CLI, and Web Console:
+Under the hood, Muxo unifies **four core pillars** behind one **19-operation MCP contract**, OpenAI Plugin (`agent-plugins.org/1.0.0`), REST API, CLI (`@muxoai/cli`), TypeScript SDK (`@muxoai/sdk`), and Web Console (`https://app.muxo.ai`):
 
-1. **Composio Connected Apps (`app.*`) & Instant (`instant.*`)** — Managed OAuth SaaS integrations (`app.github.*`, `app.gmail.*`, `app.slack.*`, `app.notion.*`, `app.linear.*`), zero-OAuth instant capabilities (`instant.web.search`, `instant.web.scrape`, `instant.hackernews.top_stories`, `instant.github.repo_intel`, `instant.dns.lookup`), plus **Autonomous 2-Call Agent Signup & Claim** (`POST /api/v1/agents/signup` + `POST /api/v1/agents/claim`).
-2. **Stripe Projects Cloud Infrastructure (`resource.*`) + Stripe Billing** — Governed cloud resource provisioning across 60+ providers (`Neon`, `Supabase`, `Turso`, `Cloudflare`, `Vercel`, `Railway`, `Render`, `Prisma`, `PostHog`, etc.) with automatic `PLAN_REQUIRED` companion plan resolution, AES-256-GCM encrypted secret custody (`muxo env pull`), and live Stripe Checkout (`$29/mo Starter` & `$10 / +1,000 Credits`).
+1. **Composio Connected Apps (`app.*`) & Instant (`instant.*`)** — Managed OAuth SaaS integrations (`app.github.*`, `app.gmail.*`, `app.slack.*`, `app.notion.*`, `app.linear.*`) with live browser OAuth handoff (`wait_for_connection`), zero-OAuth instant capabilities (`instant.web.search`, `instant.web.scrape`, `instant.web.crawl`, `instant.seo.audit`, `instant.hackernews.top_stories`, `instant.github.repo_intel`, `instant.dns.lookup`, `instant.composio.workbench`), plus **Autonomous 2-Call Agent Signup & Claim** (`POST /api/v1/agents/signup` + `POST /api/v1/agents/claim`).
+2. **Stripe Projects Cloud Infrastructure (`resource.*`) + Merchant-of-Record Billing (`muxo_funded`)** — Governed cloud resource provisioning across 60+ providers (`Turso`, `Neon`, `Supabase`, `Cloudflare`, `Vercel`, `Upstash`, `Resend`, `Railway`, `Render`, etc.) with automatic companion plan resolution, AES-256-GCM encrypted secret custody (`muxo env pull`), and unified credit settlement where users purchase Muxo credits and Muxo settles supplier costs from its master accounts.
 3. **Supermemory v5 Contextual Brain (`/ns/muxo-v5-*`)** — Isolated per-workspace long-term static facts, dynamic session context, and hybrid semantic search recalled before every tool plan (`plan_action` & `get_run_context`), with strict secret redaction before memory ingestion.
-4. **Microsoft Agent Governance Toolkit (`@microsoft/agent-governance-sdk` v5.0.0)** — Every planned and executed operation passes through `Agent ──► McpSecurityScanner ──► PolicyEngine ──► AgentIdentity (Ed25519 DID) ──► AuditLogger (SHA-256 chain) ──► DecisionRecord`.
+4. **Microsoft Agent Governance Toolkit (`@microsoft/agent-governance-sdk` v5.0.0)** — Every planned and executed operation passes through `Agent ──► McpSecurityScanner ──► PolicyEngine ──► AgentIdentity (Ed25519 DID) ──► AuditLogger (SHA-256 chain) ──► DecisionRecord` and produces an HMAC-SHA256 verifiable receipt.
 
 ---
 
-## Quickstart
+## Install & Quickstart (External Users & Agents)
 
 ```bash
-# 1. Build TypeScript
-npm run build
+# 1. Install the Muxo CLI or run directly via npx
+npm install -g @muxoai/cli@latest
 
-# 2. Run the 9-Suite Live E2E Verification
-npm test
+# 2. Zero-browser autonomous signup (creates ~/.muxo/config.json with mk_live_* key + 250 starter credits)
+muxo login --signup --name "my-agent"
 
-# 3. Start the Muxo Server + app.muxo.ai Console (/) + muxo.ai Canvas (/landing) + MCP (/mcp)
-npm start
+# 3. Verify workspace, governance DID, and credit balance
+muxo whoami
 
-# 4. Use the Muxo CLI
-npm run cli -- whoami
-npm run cli -- search postgres
-npm run cli -- exec instant.hackernews.top_stories --input '{"limit":3}'
-npm run cli -- env pull --out .env.muxo
+# 4. Run zero-OAuth Instant Tools (Crawl, SEO Audit, DNS, Web Search)
+muxo exec instant.seo.audit --input '{"url":"https://muxo.ai","keywords":["muxo","agent","governance"]}'
+muxo exec instant.web.crawl --input '{"url":"https://muxo.ai","maxPages":3}'
+
+# 5. Connect an OAuth SaaS App (Gmail, GitHub, Slack, Notion, Linear)
+muxo link gmail --wait
+
+# 6. Provision Live Cloud Infrastructure (Turso, Neon, Supabase, Upstash) & Pull Encrypted Secrets
+muxo provision turso --input '{"database_name":"my-agent-db"}' --approve
+muxo env pull --out .env.muxo
 ```
 
+## Official OpenAI Plugin & MCP Server (`https://api.muxo.ai/mcp`)
+
+Muxo ships a portable OpenAI Plugin (`plugins/muxo/plugin.json` & `plugins/muxo/mcp.json`) and Streamable HTTP MCP Server compliant with [OpenAI Plugins](https://developers.openai.com/plugins/build/plugins) and [OpenAI MCP Server](https://developers.openai.com/plugins/build/mcp-server) specifications:
+
+- **Streamable HTTP MCP Endpoint**: `https://api.muxo.ai/mcp` (and `https://app.muxo.ai/mcp`)
+- **Local Stdio MCP Command**: `npx -y @muxoai/cli@latest mcp`
+- **OAuth 2.1 Discovery & DCR/PKCE**:
+  - `https://api.muxo.ai/.well-known/oauth-protected-resource/mcp` (RFC 9728)
+  - `https://api.muxo.ai/.well-known/oauth-authorization-server` (RFC 8414)
+  - `POST https://api.muxo.ai/oauth/register` (Dynamic Client Registration)
+  - `GET https://api.muxo.ai/oauth/authorize` & `POST https://api.muxo.ai/oauth/token` (PKCE `S256`)
+- **SEP-2640 Skills Import Extension (`io.modelcontextprotocol/skills`)**: `skills/list`, `skills/get`, and `resources/read` serving `skill://muxo/muxo/SKILL.md` and `skill://muxo/setup/SKILL.md` with `sha256` integrity digests.
+- **Tool Annotations & Multi-Account Profile**: All 19 tools include `title` and `annotations` (`readOnlyHint`, `destructiveHint`, `openWorldHint`), plus `_meta["openai/profile"]: true` on `get_profile` and Company Knowledge `search`/`fetch` compatibility.
+
 ## Architecture & Source Layout
 
 | File / Directory | Responsibility |
 | --- | --- |
 | `ARCHITECTURE.md` | Internal engineering blueprint, Keep/Adopt/Drop ecosystem matrix, and Stripe Projects analysis |
+| `plugins/muxo/` | Official OpenAI & Claude Agent Plugin (`plugin.json`, `mcp.json`, `.codex-plugin/`, `.claude-plugin/`, `skills/muxo/`, `skills/setup/`) |
 | `src/config.ts` | Environment & AES-256-GCM vault key derivation |
-| `src/types.ts` | Core domain, Governance `DecisionRecord`, Supermemory `MemoryContextSummary`, & 18-tool MCP types |
-| `src/store.ts` | SQLite (`node:sqlite`) store, AES-256-GCM secret vault, credit ledger, memories, agent claims, and HMAC-SHA256 receipt chain |
+| `src/types.ts` | Core domain, Governance `DecisionRecord`, `SupplierSettlement`, Supermemory `MemoryContextSummary`, & 19-tool MCP types |
+| `src/store.ts` | SQLite (`node:sqlite`) store, AES-256-GCM secret vault, credit/settlement ledger, memories, agent claims, and HMAC-SHA256 receipt chain |
 | `src/providers/composio-sdk.ts` | Live Composio v3 Connected Apps adapter (catalog search, OAuth sessions/links, tool execution) |
-| `src/providers/composio-instant.ts` | Live Composio Instant zero-setup adapter |
+| `src/providers/composio-instant.ts` | Live Composio Instant adapter (`search`, `scrape`, `crawl`, `seo.audit`, `hackernews`, `github.repo_intel`, `dns.lookup`, `workbench`) |
 | `src/providers/stripe-projects.ts` | Live Stripe Projects CLI bridge (`status`, `catalog`, `add`, `rotate`, `remove`, `env --pull`) |
 | `src/providers/stripe-billing.ts` | Live Stripe Checkout billing (`$29/mo Starter Plan` & `$10 / +1,000 Credits Pack`) |
 | `src/providers/microsoft-governance.ts` | Microsoft Agent Governance Toolkit v5.0.0 (`McpSecurityScanner`, `PolicyEngine`, `AgentIdentity` Ed25519 DID, `AuditLogger`) |
 | `src/providers/supermemory.ts` | Supermemory v5 Contextual Brain (`profile`, hybrid `search`, secret-redacted `add`, `delete`) |
-| `src/engine.ts` | Unified Governance, Memory & Execution Engine implementing all 18 canonical MCP operations |
-| `src/mcp.ts` | JSON-RPC 2.0 MCP Server (Streamable HTTP `/mcp` + stdio `muxo mcp`) |
-| `src/server.ts` | HTTP Gateway (`/api/v1/*`, `/mcp`, `/skill.md`, `/llms.txt`, `/landing`, `/claim/:slug`, `/health`, and `/`) |
-| `src/ui/console-html.ts` | `app.muxo.ai` Operator Console UI + `/landing` (`muxo.ai` Provider Canvas) |
-| `web/` | Standalone `muxo.ai` Astro marketing & interactive provider catalog site |
-| `vendor/microsoft-governance/` | Vendored `@microsoft/agent-governance-sdk` v5.0.0 |
+| `src/engine.ts` | Unified Governance, Memory & Execution Engine implementing all 19 canonical MCP operations |
+| `src/mcp.ts` | JSON-RPC 2.0 MCP Server (Streamable HTTP `/mcp` + stdio `muxo mcp` + SEP-2640 skills + Company Knowledge `search`/`fetch`) |
+| `src/server.ts` | HTTP Gateway (`/api/v1/*`, `/mcp`, `/oauth/*`, `/.well-known/*`, `/plugins/*`, `/skill.md`, `/llms.txt`, `/landing`, `/claim/:slug`, `/health`, and `/`) |
+| `src/sdk.ts` | Zero-dependency TypeScript & Node.js SDK (`MuxoClient`) |
+| `worker/index.ts` | Cloudflare Worker edge gateway serving `https://app.muxo.ai` and `https://api.muxo.ai` |
+| `web/` | Standalone `https://muxo.ai` Astro marketing & interactive provider catalog site |

package/{dist/sdk.d.ts → index.d.ts}

@@ -156,6 +156,13 @@ export declare class MuxoClient {
             totalCustomerChargedCredits?: number;
         };
     }>;
+    settlements(): Promise<{
+        ok: true;
+        settlementSummary: SupplierSettlementSummary & {
+            totalCustomerChargedCredits?: number;
+        };
+        summary?: SupplierSettlementSummary;
+    }>;
     getSettlements(): Promise<{
         ok: true;
         settlementSummary: SupplierSettlementSummary & {

package/index.js

@@ -0,0 +1 @@
+export * from "@muxoai/platform";

package/package.json

@@ -1,31 +1,20 @@
 {
   "name": "@muxoai/sdk",
-  "version": "1.2.2",
-  "description": "Muxo TypeScript/JavaScript SDK — Official client for Muxo Unified AI Agent Execution, Infrastructure, Memory & Governance Platform",
-  "type": "module",
-  "main": "./dist/sdk.js",
-  "types": "./dist/sdk.d.ts",
-  "exports": {
-    ".": {
-      "types": "./dist/sdk.d.ts",
-      "import": "./dist/sdk.js"
-    }
-  },
-  "files": [
-    "dist",
-    "README.md"
-  ],
-  "keywords": [
-    "muxo",
-    "ai-agents",
-    "mcp",
-    "composio",
-    "stripe-projects",
-    "supermemory",
-    "microsoft-agent-governance"
-  ],
+  "version": "1.2.3",
+  "description": "Muxo TypeScript & Node.js SDK — Governed Agent Execution, OAuth Handoff, Cloud Provisioning & Cryptographic Receipts",
   "license": "MIT",
-  "engines": {
-    "node": ">=20.0.0"
+  "homepage": "https://muxo.ai",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/muxoai/muxo.git"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "main": "./index.js",
+  "types": "./index.d.ts",
+  "dependencies": {
+    "@muxoai/platform": "1.2.3"
   }
-}
+}

package/dist/sdk.js

@@ -1,217 +0,0 @@
-export class MuxoClient {
-    baseUrl;
-    apiKeyResolver;
-    fetchImpl;
-    timeoutMs;
-    constructor(options = {}) {
-        this.baseUrl = (options.baseUrl ||
-            process.env.MUXO_BASE_URL ||
-            "https://app.muxo.ai").replace(/\/+$/, "");
-        if (typeof options.apiKey === "function") {
-            this.apiKeyResolver = options.apiKey;
-        }
-        else if (typeof options.apiKey === "string") {
-            const key = options.apiKey;
-            this.apiKeyResolver = () => key;
-        }
-        else if (process.env.MUXO_API_KEY) {
-            const key = process.env.MUXO_API_KEY;
-            this.apiKeyResolver = () => key;
-        }
-        this.fetchImpl = options.fetch || fetch;
-        this.timeoutMs = options.timeoutMs ?? 30000;
-    }
-    async request(path, init = {}) {
-        const headers = {
-            Accept: "application/json",
-        };
-        if (this.apiKeyResolver) {
-            const token = await this.apiKeyResolver();
-            if (token)
-                headers.Authorization = `Bearer ${token}`;
-        }
-        if (init.body !== undefined) {
-            headers["Content-Type"] = "application/json";
-        }
-        const res = await this.fetchImpl(`${this.baseUrl}${path}`, {
-            method: init.method || "GET",
-            headers,
-            body: init.body !== undefined ? JSON.stringify(init.body) : undefined,
-            signal: AbortSignal.timeout(this.timeoutMs),
-        });
-        const payload = (await res.json());
-        if (!res.ok || payload.ok === false) {
-            throw new Error(String(payload.error || `Muxo request failed with HTTP ${res.status}`));
-        }
-        return payload;
-    }
-    static async signup(params = {}, baseUrl = "https://app.muxo.ai") {
-        const client = new MuxoClient({ baseUrl });
-        return client.signupAgent({
-            agentName: params.agentName || params.workspaceName || "muxo-sdk-agent",
-            harness: params.harness || "muxo-sdk",
-        });
-    }
-    async signupAgent(params) {
-        return this.request("/api/v1/agents/signup", {
-            method: "POST",
-            body: params,
-        });
-    }
-    async whoami() {
-        const res = await this.mcpCall("get_organization", {});
-        const workspace = (res.workspace || res.organization);
-        return {
-            ok: true,
-            ...res,
-            workspace,
-        };
-    }
-    async mcpCall(name, args = {}) {
-        const rpcRes = await this.request("/mcp", {
-            method: "POST",
-            body: {
-                jsonrpc: "2.0",
-                id: Date.now(),
-                method: "tools/call",
-                params: { name, arguments: args },
-            },
-        });
-        if (rpcRes.error) {
-            throw new Error(rpcRes.error.message || "MCP call failed");
-        }
-        if (rpcRes.result?.structuredContent) {
-            return rpcRes.result.structuredContent;
-        }
-        const text = rpcRes.result?.content?.[0]?.text;
-        if (text) {
-            return JSON.parse(text);
-        }
-        return (rpcRes.result || {});
-    }
-    async searchTools(params) {
-        const qs = new URLSearchParams();
-        if (params?.query)
-            qs.set("query", params.query);
-        if (params?.lane)
-            qs.set("lane", params.lane);
-        if (params?.riskLevel)
-            qs.set("risk_level", params.riskLevel);
-        if (params?.limit)
-            qs.set("limit", String(params.limit));
-        const suffix = qs.toString() ? `?${qs.toString()}` : "";
-        return this.request(`/api/v1/tools${suffix}`);
-    }
-    async inspectTool(slug) {
-        return this.request(`/api/v1/tools/${encodeURIComponent(slug)}`);
-    }
-    async planAction(params) {
-        return this.request("/api/v1/plans", {
-            method: "POST",
-            body: params,
-        });
-    }
-    async approvePlan(planId) {
-        return this.request(`/api/v1/plans/${encodeURIComponent(planId)}/approve`, {
-            method: "POST",
-        });
-    }
-    async executePlan(planId) {
-        return this.request(`/api/v1/plans/${encodeURIComponent(planId)}/execute`, {
-            method: "POST",
-        });
-    }
-    async exec(toolSlug, input = {}, options = {}) {
-        const planned = await this.planAction({
-            toolSlug,
-            input,
-            reason: options.reason,
-        });
-        let plan = planned.plan;
-        if (plan.approvalStatus === "pending_approval" && options.approve) {
-            const approved = await this.approvePlan(plan.id);
-            plan = approved.plan;
-        }
-        const executed = await this.executePlan(plan.id);
-        return {
-            ok: true,
-            plan,
-            run: executed.run,
-            receipt: executed.receipt,
-            settlement: executed.settlement ||
-                executed.receipt?.supplierSettlement ||
-                null,
-        };
-    }
-    async verifyReceipt(receiptId) {
-        const res = await this.request(`/api/v1/receipts/${encodeURIComponent(receiptId)}`);
-        const isOk = Boolean(res.valid ?? res.verified ?? true);
-        return {
-            ok: true,
-            valid: isOk,
-            verified: isOk,
-            receipt: res.receipt,
-        };
-    }
-    async startConnection(paramsOrProvider) {
-        const body = typeof paramsOrProvider === "string"
-            ? { provider: paramsOrProvider }
-            : paramsOrProvider;
-        return this.request("/api/v1/connections", {
-            method: "POST",
-            body,
-        });
-    }
-    async waitForConnection(paramsOrProvider, options) {
-        const body = typeof paramsOrProvider === "string"
-            ? { provider: paramsOrProvider, ...options }
-            : paramsOrProvider;
-        const res = await this.request("/api/v1/connections/wait", {
-            method: "POST",
-            body,
-        });
-        return {
-            ...res,
-            status: res.status || res.connection?.status || "pending",
-        };
-    }
-    async listResources() {
-        return this.request("/api/v1/resources");
-    }
-    async pullEnv() {
-        const res = await this.request("/api/v1/resources/env");
-        return Object.assign(res, {
-            includes: (substr) => String(res.dotenv || "").includes(substr),
-            toString: () => String(res.dotenv || ""),
-        });
-    }
-    async topupCredits(paramsOrCredits, description) {
-        const body = typeof paramsOrCredits === "number"
-            ? { credits: paramsOrCredits, description }
-            : paramsOrCredits;
-        const res = await this.request("/api/v1/billing/topup", {
-            method: "POST",
-            body,
-        });
-        return {
-            ...res,
-            creditBalance: res.creditBalance ?? res.workspace?.creditsBalance ?? 0,
-        };
-    }
-    async getBillingStatus() {
-        return this.getSettlements();
-    }
-    async getSettlements() {
-        const res = await this.request("/api/v1/billing/settlements");
-        if (res.settlementSummary &&
-            res.settlementSummary.totalCustomerChargedCredits === undefined) {
-            res.settlementSummary.totalCustomerChargedCredits =
-                res.settlementSummary.totalCreditsConsumed;
-        }
-        return res;
-    }
-    async recallMemory(query) {
-        const suffix = query ? `?query=${encodeURIComponent(query)}` : "";
-        return this.request(`/api/v1/memory${suffix}`);
-    }
-}

package/dist/types.d.ts

@@ -1,273 +0,0 @@
-export type RiskLevel = "read" | "write" | "admin" | "financial" | "provisioning" | "destructive";
-export type ProviderLane = "composio_sdk" | "composio_instant" | "stripe_projects";
-export type SubscriptionTier = "free" | "starter";
-export interface GovernancePolicy {
-    mode: "monitor" | "enforce";
-    requireApprovalFor: RiskLevel[];
-    allowInstantWallet: boolean;
-    allowProvisioning: boolean;
-    maxCreditsPerRun: number;
-    blockedToolSlugs?: string[];
-}
-export interface User {
-    id: string;
-    email: string;
-    name: string;
-    workspaceId: string;
-    role: "owner" | "admin" | "member";
-    createdAt: string;
-}
-export interface Workspace {
-    id: string;
-    name: string;
-    slug: string;
-    ownerUserId: string;
-    tier: SubscriptionTier;
-    monthlyActionsLimit: number;
-    monthlyActionsUsed: number;
-    creditsBalance: number;
-    stripeCustomerId: string | null;
-    stripeSubscriptionId: string | null;
-    projectsEnvName: string;
-    policy: GovernancePolicy;
-    createdAt: string;
-    updatedAt: string;
-}
-export interface ApiKeyRecord {
-    id: string;
-    workspaceId: string;
-    name: string;
-    keyPrefix: string;
-    environment: "live" | "test";
-    scopes: string[];
-    lastUsedAt: string | null;
-    revokedAt: string | null;
-    createdAt: string;
-}
-export interface MuxoTool {
-    slug: string;
-    upstreamSlug: string;
-    name: string;
-    description: string;
-    lane: ProviderLane;
-    providerSlug: string;
-    providerName: string;
-    categories: string[];
-    riskLevel: RiskLevel;
-    requiresAuth: boolean;
-    creditCost: number;
-    billingMode: "customer_oauth" | "provider_wallet" | "resource_provisioning";
-    inputSchema: Record<string, unknown>;
-    llmContextUrl?: string;
-    providerUrl?: string;
-    metadata?: Record<string, unknown>;
-}
-export interface ConnectionRecord {
-    id: string;
-    workspaceId: string;
-    lane: ProviderLane;
-    providerSlug: string;
-    providerName: string;
-    status: "active" | "pending" | "expired" | "disconnected";
-    externalAccountId: string | null;
-    redirectUrl: string | null;
-    metadata: Record<string, unknown>;
-    updatedAt: string;
-    createdAt: string;
-}
-export interface ProvisionedResource {
-    id: string;
-    workspaceId: string;
-    resourceName: string;
-    providerSlug: string;
-    providerName: string;
-    serviceSlug: string;
-    planSlug: string | null;
-    status: "active" | "provisioning" | "failed" | "removed";
-    envVarKeys: string[];
-    externalResourceId: string | null;
-    metadata: Record<string, unknown>;
-    createdAt: string;
-    updatedAt: string;
-}
-export interface GovernanceDecisionRecord {
-    id: string;
-    sdk: "@microsoft/agent-governance-sdk";
-    sdkVersion: string;
-    policyId: string;
-    mode: "monitor" | "enforce";
-    agentDid: string;
-    agentPublicKey: string;
-    actorId: string;
-    workspaceId: string;
-    action: string;
-    riskLevel: RiskLevel;
-    decision: "allow" | "deny" | "require_approval";
-    verdict: "allow" | "deny" | "escalate";
-    reason: string;
-    matchedRule: string | null;
-    securityScan: {
-        safe: boolean;
-        riskLevel: string;
-        findingsCount: number;
-        findings: Array<{
-            category: string;
-            severity: string;
-            description: string;
-        }>;
-    };
-    auditEntry: {
-        timestamp: string;
-        agentId: string;
-        action: string;
-        decision: "allow" | "deny";
-        hash: string;
-        previousHash: string;
-        chainVerified: boolean;
-    };
-    ed25519Signature: string;
-    signature: string;
-    bindingHash: string;
-    decidedAt: string;
-}
-export type MemoryRecordKind = "fact" | "preference" | "resource_note" | "operator_note" | "execution_outcome" | "resource_topology" | "policy_decision";
-export interface MemoryContextSummary {
-    enabled: boolean;
-    namespace: string;
-    staticFacts: string[];
-    dynamicContext: string[];
-    recalledMemories: Array<{
-        documentId: string;
-        title: string;
-        snippet: string;
-        similarity: number;
-        createdAt?: string;
-    }>;
-    formattedPromptContext: string;
-    profile: {
-        static: string[];
-        dynamic: string[];
-        preferences: string[];
-    };
-    relevantMemories: Array<{
-        documentId: string;
-        title: string;
-        snippet: string;
-        similarity: number;
-        createdAt?: string;
-    }>;
-}
-export interface WorkspaceMemoryRecord {
-    id: string;
-    workspaceId: string;
-    namespace: string;
-    documentId: string;
-    title: string;
-    content: string;
-    kind: MemoryRecordKind;
-    metadata: Record<string, unknown>;
-    createdAt: string;
-}
-export interface SupplierSettlement {
-    fundingMode: "muxo_funded";
-    supplier: ProviderLane;
-    supplierName: string;
-    upstreamProvider: string;
-    userChargeCredits: number;
-    userRetailChargeCents: number;
-    supplierWholesalePayableCents: number;
-    muxoNetMarginCents: number;
-    settlementStatus: "settled_by_muxo_master_wallet" | "planned_muxo_master_wallet";
-    masterAccountRef: string;
-}
-export interface SupplierSettlementSummary {
-    workspaceId: string;
-    fundingModel: "user_pays_muxo_muxo_pays_suppliers";
-    creditPriceCents: number;
-    totalCreditsPurchasedOrGranted: number;
-    totalCreditsConsumed: number;
-    currentCreditsBalance: number;
-    totalUserRetailSpendCents: number;
-    totalSupplierWholesalePaidCents: number;
-    totalMuxoNetMarginCents: number;
-    bySupplier: Record<ProviderLane, {
-        runsCount: number;
-        creditsConsumed: number;
-        userRetailSpendCents: number;
-        supplierWholesalePaidCents: number;
-        muxoNetMarginCents: number;
-    }>;
-}
-export interface ActionPlan {
-    id: string;
-    workspaceId: string;
-    actorId: string;
-    toolSlug: string;
-    upstreamSlug: string;
-    lane: ProviderLane;
-    riskLevel: RiskLevel;
-    input: Record<string, unknown>;
-    reason: string;
-    creditCost: number;
-    approvalStatus: "auto_approved" | "pending_approval" | "approved" | "rejected" | "executed";
-    approvedBy: string | null;
-    approvedAt: string | null;
-    runId: string | null;
-    decisionRecord?: GovernanceDecisionRecord | null;
-    memoryContext?: MemoryContextSummary | null;
-    supplierSettlement?: SupplierSettlement | null;
-    createdAt: string;
-    expiresAt: string;
-}
-export interface ExecutionRun {
-    id: string;
-    planId: string;
-    workspaceId: string;
-    actorId: string;
-    toolSlug: string;
-    lane: ProviderLane;
-    riskLevel: RiskLevel;
-    status: "queued" | "running" | "succeeded" | "failed" | "cancelled";
-    input: Record<string, unknown>;
-    output: Record<string, unknown> | null;
-    error: string | null;
-    actionsMetered: number;
-    creditsMetered: number;
-    durationMs: number | null;
-    receiptId: string | null;
-    startedAt: string;
-    completedAt: string | null;
-}
-export interface ExecutionReceipt {
-    id: string;
-    runId: string;
-    planId: string;
-    workspaceId: string;
-    actorId: string;
-    toolSlug: string;
-    lane: ProviderLane;
-    riskLevel: RiskLevel;
-    status: "succeeded" | "failed" | "cancelled";
-    actionsMetered: number;
-    creditsMetered: number;
-    inputHash: string;
-    outputHash: string;
-    prevReceiptHash: string;
-    receiptHash: string;
-    signature: string;
-    decisionRecord?: GovernanceDecisionRecord | null;
-    supplierSettlement?: SupplierSettlement | null;
-    issuedAt: string;
-}
-export interface LedgerEntry {
-    id: string;
-    workspaceId: string;
-    kind: "plan_grant" | "credit_topup" | "run_deduction" | "subscription_upgrade" | "manual_adjustment";
-    actionsDelta: number;
-    creditsDelta: number;
-    balanceAfter: number;
-    referenceId: string | null;
-    description: string;
-    supplierSettlement?: SupplierSettlement | null;
-    createdAt: string;
-}

package/dist/types.js

@@ -1 +0,0 @@
-export {};