@muxoai/sdk 1.3.0 → 1.4.2

package/dist/providers/microsoft-governance.d.ts

@@ -1,7 +1,13 @@
-import { AgentIdentity, AuditLogger } from "../../vendor/microsoft-governance/dist/index.js";
-import type { ActionPlan, GovernanceDecisionRecord, MuxoTool, Workspace } from "../types.js";
+import { AgentIdentity, AuditLogger, type ContextPoisoningScanResult, type KillSwitchResult, type TrustScore } from "../../vendor/microsoft-governance/dist/index.js";
+import type { ActionPlan, ExecutionReceipt, ExecutionRun, GovernanceDecisionRecord, GovernancePolicy, HumanFriendlyExplanation, LanguageMode, MuxoTool, PortableAgenticReceipt, Workspace } from "../types.js";
+export declare const RING_LABELS: Record<number, string>;
 export declare class MicrosoftGovernanceAdapter {
     private readonly scanner;
+    private readonly contextPoisoningDetector;
+    private readonly facetRegistry;
+    private readonly trustManager;
+    private readonly killSwitch;
+    private readonly activeKillSwitches;
     private readonly seedMaterial;
     private readonly auditLoggers;
     private readonly identities;
@@ -15,13 +21,66 @@ export declare class MicrosoftGovernanceAdapter {
      * Returns (or lazily initializes) the SHA-256 hash-chained AuditLogger for a workspace.
      */
     getWorkspaceAuditLogger(workspaceId: string): AuditLogger;
+    /**
+     * Scans memory or prompt context for OWASP ASI-06 Context Poisoning (prompt injection,
+     * roleplay overrides, delimiter injection, high-entropy exfiltration payloads, and session isolation).
+     */
+    scanMemoryContent(params: {
+        workspaceId: string;
+        sessionId?: string;
+        entryId?: string;
+        role?: "user" | "assistant" | "tool" | "system";
+        content: string;
+        recordInDetector?: boolean;
+    }): {
+        safe: boolean;
+        riskLevel: "none" | "low" | "medium" | "high" | "critical";
+        findingsCount: number;
+        findings: Array<{
+            patternId: string;
+            patternName: string;
+            severity: string;
+            description: string;
+        }>;
+        integrityValid: boolean;
+    };
+    getContextPoisoningReport(workspaceId: string, sessionId?: string): ContextPoisoningScanResult;
+    /**
+     * Extracts structured SQL, Kubernetes, and Infrastructure protocol facets from tool input.
+     */
+    extractActionFacets(tool: MuxoTool, input: Record<string, unknown>): NonNullable<GovernanceDecisionRecord["protocolFacets"]>;
+    /**
+     * Evaluates hardware-style privilege rings (Ring 0..Ring 3) via Microsoft RingEnforcer.
+     */
+    evaluateRingEnforcement(workspace: Workspace, tool: MuxoTool, ownerApproved: boolean): NonNullable<GovernanceDecisionRecord["ringEnforcement"]>;
+    /**
+     * Records an agent execution outcome in the Bayesian TrustManager and returns the updated TrustScore.
+     */
+    recordAgentOutcome(workspaceId: string, succeeded: boolean, weight?: number): TrustScore;
+    /**
+     * Returns the current Bayesian TrustScore for a workspace agent boundary.
+     */
+    getWorkspaceTrustScore(workspaceId: string): NonNullable<GovernanceDecisionRecord["trustScore"]>;
+    /**
+     * Activates the emergency KillSwitch for a workspace agent boundary.
+     */
+    activateKillSwitch(workspaceId: string, reason: string, action?: "terminate" | "quarantine" | "suspend"): Promise<KillSwitchResult>;
+    /**
+     * Resumes a workspace agent boundary after a KillSwitch quarantine/suspension.
+     */
+    resumeKillSwitch(workspaceId: string): {
+        resumed: boolean;
+        workspaceId: string;
+        resumedAt: string;
+    };
+    isKillSwitchActive(workspaceId: string): KillSwitchResult | null;
     /**
      * Compiles the workspace's GovernancePolicy into a declarative Microsoft PolicyEngine instance.
      */
     private createPolicyEngine;
     /**
      * Runs the full Microsoft Agent Governance pipeline:
-     * Agent ──► McpSecurityScanner ──► PolicyEngine ──► AgentIdentity (Ed25519 DID) ──► AuditLogger ──► DecisionRecord
+     * Agent ──► KillSwitch ──► McpSecurityScanner & ContextPoisoningDetector (ASI-06) ──► ProtocolFacets (SQL/K8s/Infra) ──► RingEnforcer ──► PolicyEngine ──► TrustManager ──► AgentIdentity (Ed25519 DID) ──► AuditLogger ──► DecisionRecord
      */
     evaluateAction(params: {
         workspace: Workspace;
@@ -49,6 +108,20 @@ export declare class MicrosoftGovernanceAdapter {
      * Verifies a DecisionRecord's Ed25519 signature and the workspace's SHA-256 audit hash chain.
      */
     verifyDecisionRecord(workspaceOrRecord: Workspace | GovernanceDecisionRecord, maybeRecord?: GovernanceDecisionRecord): boolean;
+    /**
+     * Builds a portable Ed25519-signed AgenticReceipt envelope (compatible with the `agentic-receipts` spec)
+     * so external verifiers can validate input/output SHA-256 hashes, hash chaining, and Ed25519 signature
+     * using only the workspace's public key and DID without needing the internal vault HMAC key.
+     */
+    buildPortableAgenticReceipt(params: {
+        receipt: ExecutionReceipt;
+        run?: ExecutionRun | null;
+        workspace?: Workspace | null;
+    }): PortableAgenticReceipt;
+    /**
+     * Verifies a PortableAgenticReceipt's Ed25519 signature over its canonical hash-chained payload.
+     */
+    verifyPortableAgenticReceipt(agenticReceipt: PortableAgenticReceipt, workspace?: Workspace | null): boolean;
     getStatus(workspace?: Workspace): {
         sdk: string;
         sdkVersion: string;
@@ -64,3 +137,16 @@ export declare class MicrosoftGovernanceAdapter {
      */
     getGovernanceStatus(workspace: Workspace): Record<string, unknown>;
 }
+export declare function explainDecisionRecord(record: GovernanceDecisionRecord, policy?: Partial<GovernancePolicy> | null, languageMode?: LanguageMode): HumanFriendlyExplanation;
+export declare function explainGovernanceStatus(params: {
+    workspace: Workspace;
+    agentDid: string;
+    trustScore: NonNullable<GovernanceDecisionRecord["trustScore"]>;
+    killSwitchActive: boolean;
+    killSwitchReason: string | null;
+    poisoned: boolean;
+    findingsCount: number;
+    auditEntriesCount: number;
+    chainVerified: boolean;
+    languageMode?: LanguageMode;
+}): HumanFriendlyExplanation;