@muxoai/sdk 1.3.0 → 1.4.3

package/dist/types.d.ts

@@ -1,6 +1,74 @@
 export type RiskLevel = "read" | "write" | "admin" | "financial" | "provisioning" | "destructive";
 export type ProviderLane = "composio_sdk" | "composio_instant" | "stripe_projects";
-export type SubscriptionTier = "free" | "starter";
+export type SubscriptionTier = "free" | "starter" | "pro";
+export type SubscriptionStatus = "none" | "active" | "trialing" | "past_due" | "unpaid" | "canceled" | "incomplete" | "comped";
+export interface WorkspaceBilling {
+    interval: "month" | "year" | null;
+    status: SubscriptionStatus;
+    cancelAtPeriodEnd: boolean;
+    /** When Stripe next renews or ends the subscription. */
+    currentPeriodEnd: string | null;
+    /** Monthly usage periods are counted from this moment. */
+    usagePeriodAnchor: string;
+    usagePeriodStart: string;
+    usagePeriodEnd: string;
+    /** usagePeriodStart of the last period whose plan credits were granted. */
+    creditsGrantedFor: string | null;
+    paymentFailedAt?: string | null;
+    /** Subscription whose start (fresh usage period and first credits) was already applied. */
+    startedSubscriptionId?: string | null;
+}
+export type LanguageMode = "non_technical" | "technical" | "hybrid";
+export interface HumanFriendlyExplanation {
+    headline: string;
+    preferred: string;
+    nonTechnical: string;
+    technical: string;
+    languageMode: LanguageMode;
+    customInstructions?: string[];
+}
+/**
+ * A structured handoff telling the caller (LLM or human) that a person must
+ * complete a step in the browser before the plan can proceed.
+ */
+export interface HumanHandoff {
+    kind: "approval" | "oauth" | "byok";
+    brand?: string;
+    url: string | null;
+    ctaLabel: string;
+    headline: string;
+    instructions: string;
+    markdownForUser?: string;
+    planId?: string;
+    provider?: string;
+}
+/**
+ * Machine-readable guidance for LLM harnesses on exactly which Muxo tool to
+ * call next once a handoff or gate clears.
+ */
+export interface LlmGuidance {
+    summary: string;
+    nextToolCalls: Array<{
+        tool: string;
+        input: Record<string, unknown>;
+        when: string;
+    }>;
+}
+export type WorkspaceRole = "owner" | "admin" | "operator" | "member";
+export type ParameterRuleOperator = "equals" | "must_equal" | "not_equals" | "contains" | "not_contains" | "starts_with" | "must_start_with" | "ends_with" | "must_end_with" | "domain_in" | "domain_not_in" | "max_number" | "min_number" | "gt" | "gte" | "lt" | "lte" | "in" | "not_in" | "regex";
+export type ParameterRuleAction = "block" | "require_approval" | "allow" | "auto_approve";
+export interface ParameterPolicyRule {
+    id: string;
+    toolPattern?: string;
+    parameter: string;
+    operator: ParameterRuleOperator;
+    value: string | number | string[];
+    unit?: "usd" | "cents" | "credits" | "raw";
+    action: ParameterRuleAction;
+    elseAction?: ParameterRuleAction;
+    description: string;
+    source?: "deterministic" | "llm" | "mcp_harness" | "user";
+}
 export interface GovernancePolicy {
     mode: "monitor" | "enforce";
     requireApprovalFor: RiskLevel[];
@@ -8,15 +76,65 @@ export interface GovernancePolicy {
     allowProvisioning: boolean;
     maxCreditsPerRun: number;
     blockedToolSlugs?: string[];
+    parameterRules?: ParameterPolicyRule[];
+    executionRing?: 0 | 1 | 2 | 3;
+    killSwitchActive?: boolean;
+    killSwitchReason?: string | null;
+    blockDestructiveSql?: boolean;
+    naturalLanguageRules?: string[];
+    languageMode?: LanguageMode;
+    customInstructions?: string[];
 }
 export interface User {
     id: string;
     email: string;
     name: string;
     workspaceId: string;
-    role: "owner" | "admin" | "member";
+    role: WorkspaceRole;
+    createdAt: string;
+}
+export interface WorkspaceMembership {
+    id: string;
+    workspaceId: string;
+    userId: string;
+    role: WorkspaceRole;
+    teamName: string | null;
+    joinedViaKeyId?: string | null;
+    joinedVia?: "owner" | "created" | "api_key" | "team_key" | "invite" | "claim" | string;
+    apiKeyId?: string | null;
+    createdAt: string;
+}
+export interface WorkspaceSummary {
+    id: string;
+    name: string;
+    slug: string;
+    tier: SubscriptionTier;
+    creditsBalance: number;
+    monthlyActionsUsed: number;
+    monthlyActionsLimit: number;
+    role: WorkspaceRole;
+    teamName: string | null;
+    joinedVia?: "owner" | "created" | "api_key" | "team_key" | "invite" | "claim" | string;
+    isCurrent: boolean;
     createdAt: string;
 }
+export interface TeamOnboardingKit {
+    ok?: boolean;
+    mode: "shared_workspace" | "dedicated_workspace";
+    workspace: Workspace | Pick<Workspace, "id" | "name" | "slug" | "tier" | "creditsBalance">;
+    teamName: string;
+    role: WorkspaceRole;
+    apiKey: string;
+    keyRecord: ApiKeyRecord;
+    claimUrl?: string | null;
+    consoleUrl?: string;
+    consoleJoinUrl?: string;
+    mcpEndpoint?: string;
+    cliSetupCommand: string;
+    mcpConfig?: Record<string, unknown>;
+    mcpConfigSnippet?: string;
+    instructions: string[];
+}
 export interface Workspace {
     id: string;
     name: string;
@@ -28,6 +146,8 @@ export interface Workspace {
     creditsBalance: number;
     stripeCustomerId: string | null;
     stripeSubscriptionId: string | null;
+    stripeConnectedAccountId?: string | null;
+    billing?: WorkspaceBilling;
     projectsEnvName: string;
     policy: GovernancePolicy;
     createdAt: string;
@@ -40,6 +160,9 @@ export interface ApiKeyRecord {
     keyPrefix: string;
     environment: "live" | "test";
     scopes: string[];
+    teamName?: string | null;
+    role?: WorkspaceRole;
+    createdByEmail?: string | null;
     lastUsedAt: string | null;
     revokedAt: string | null;
     createdAt: string;
@@ -56,7 +179,7 @@ export interface MuxoTool {
     riskLevel: RiskLevel;
     requiresAuth: boolean;
     creditCost: number;
-    billingMode: "customer_oauth" | "provider_wallet" | "resource_provisioning";
+    billingMode: "customer_oauth" | "customer_byok" | "provider_wallet" | "resource_provisioning";
     inputSchema: Record<string, unknown>;
     llmContextUrl?: string;
     providerUrl?: string;
@@ -126,15 +249,146 @@ export interface GovernanceDecisionRecord {
         previousHash: string;
         chainVerified: boolean;
     };
+    protocolFacets?: {
+        sql?: {
+            verb: string;
+            target: string;
+            tables: string;
+            functions: string;
+            destructive?: boolean;
+        };
+        k8s?: {
+            verb: string;
+            resource: string;
+            namespace: string;
+            name: string;
+            subresource: string;
+        };
+        infra?: {
+            provider: string;
+            service: string;
+            action: string;
+            destructive: boolean;
+        };
+    };
+    ringEnforcement?: {
+        agentRing: number;
+        requiredRing: number;
+        allowed: boolean;
+        ringLabel: string;
+    };
+    trustScore?: {
+        overall: number;
+        tier: "Untrusted" | "Provisional" | "Trusted" | "Verified";
+        reliability: number;
+        consistency: number;
+    };
+    contextPoisoning?: {
+        safe: boolean;
+        riskLevel: "none" | "low" | "medium" | "high" | "critical";
+        findingsCount: number;
+        findings: Array<{
+            patternId: string;
+            patternName: string;
+            severity: string;
+            description: string;
+        }>;
+    };
+    killSwitch?: {
+        active: boolean;
+        killedAt?: string | null;
+        reason?: string | null;
+    };
     ed25519Signature: string;
     signature: string;
     bindingHash: string;
     decidedAt: string;
+    explanation?: HumanFriendlyExplanation;
 }
 export type MemoryRecordKind = "fact" | "preference" | "resource_note" | "operator_note" | "execution_outcome" | "resource_topology" | "policy_decision";
+export interface TemporalGraphFact {
+    id: string;
+    workspaceId: string;
+    subject: string;
+    predicate: string;
+    object: string;
+    summary: string;
+    confidence: number;
+    validFrom: string;
+    validTo: string | null;
+    transactionFrom?: string;
+    transactionTo?: string | null;
+    episodeId?: string | null;
+    supersededById?: string | null;
+    sourceKind: MemoryRecordKind | "system" | "manual";
+    sourceReferenceId?: string | null;
+    metadata: Record<string, unknown>;
+    createdAt: string;
+}
+export interface MemoryGraphNode {
+    id: string;
+    kind: "workspace" | "entity" | "preference" | "guardrail" | "connection" | "resource" | "tool" | "memory" | "episode";
+    label: string;
+    summary: string;
+    status: "active" | "historical";
+    hopDistance?: number;
+    metadata?: Record<string, unknown>;
+}
+export interface MemoryGraphEdge {
+    id: string;
+    source: string;
+    target: string;
+    subject?: string;
+    object?: string;
+    predicate: string;
+    summary: string;
+    confidence: number;
+    status: "active" | "historical";
+    validFrom: string;
+    validTo: string | null;
+    transactionFrom?: string;
+    transactionTo?: string | null;
+    episodeId?: string | null;
+    supersededById: string | null;
+    sourceKind: TemporalGraphFact["sourceKind"];
+    sourceReferenceId: string | null;
+}
+export interface MemoryKnowledgeGraph {
+    workspaceId: string;
+    workspaceSlug: string;
+    namespace: string;
+    generatedAt: string;
+    asOf?: string | null;
+    focalEntity?: string | null;
+    maxHops?: number;
+    query: string | null;
+    nodes: MemoryGraphNode[];
+    edges: MemoryGraphEdge[];
+    activeEdges: MemoryGraphEdge[];
+    historicalEdges: MemoryGraphEdge[];
+    subgraph?: {
+        focalEntity: string;
+        maxHops: number;
+        nodes: MemoryGraphNode[];
+        edges: MemoryGraphEdge[];
+        hopDistances: Record<string, number>;
+    } | null;
+    stats: {
+        nodesCount: number;
+        activeEdgesCount: number;
+        historicalEdgesCount: number;
+        memoriesCount: number;
+        resourcesCount: number;
+        connectionsCount: number;
+        episodesCount?: number;
+    };
+    mermaid: string;
+    explanation: HumanFriendlyExplanation;
+}
 export interface MemoryContextSummary {
     enabled: boolean;
     namespace: string;
+    fundingSource?: "muxo_funded" | "customer_byok_supermemory" | "local_fallback";
     staticFacts: string[];
     dynamicContext: string[];
     recalledMemories: Array<{
@@ -145,6 +399,7 @@ export interface MemoryContextSummary {
         createdAt?: string;
     }>;
     formattedPromptContext: string;
+    profileMarkdown?: string;
     profile: {
         static: string[];
         dynamic: string[];
@@ -157,6 +412,16 @@ export interface MemoryContextSummary {
         similarity: number;
         createdAt?: string;
     }>;
+    temporalFacts?: TemporalGraphFact[];
+    activeDefaults?: Record<string, unknown>;
+    autoFilledInput?: Record<string, unknown>;
+    activeGuardrails?: string[];
+    contextPoisoningScan?: {
+        safe: boolean;
+        riskLevel: "none" | "low" | "medium" | "high" | "critical";
+        findingsCount: number;
+    };
+    explanation?: HumanFriendlyExplanation;
 }
 export interface WorkspaceMemoryRecord {
     id: string;
@@ -167,6 +432,7 @@ export interface WorkspaceMemoryRecord {
     content: string;
     kind: MemoryRecordKind;
     metadata: Record<string, unknown>;
+    fundingSource?: string;
     createdAt: string;
 }
 export interface ByokKeyRecord {
@@ -209,6 +475,29 @@ export interface SupplierSettlementSummary {
         supplierWholesalePaidCents: number;
         muxoNetMarginCents: number;
     }>;
+    masterWalletProtection?: {
+        status: "healthy" | "failover_active";
+        zeroChargeOnFailure: boolean;
+        instantFailoverMode: "zero_cost_native_edge";
+        paidProvisioningPolicy: "muxo_master_wallet_or_customer_stripe_byok";
+        retailToWholesaleCoverageRatio: number;
+    };
+}
+export interface HumanHandoffDescriptor {
+    required: boolean;
+    kind: "none" | "oauth_connection" | "human_approval" | "oauth_and_approval";
+    status: "ready" | "awaiting_oauth" | "awaiting_approval" | "awaiting_oauth_and_approval" | "connected" | "approved" | "rejected";
+    headline: string;
+    markdownForUser: string;
+    agentNextToolCall: {
+        tool: string;
+        arguments: Record<string, unknown>;
+        description: string;
+    };
+    actionUrl: string | null;
+    approvalUrl: string | null;
+    oauthRedirectUrl: string | null;
+    consoleUrl: string;
 }
 export interface ActionPlan {
     id: string;
@@ -228,6 +517,19 @@ export interface ActionPlan {
     decisionRecord?: GovernanceDecisionRecord | null;
     memoryContext?: MemoryContextSummary | null;
     supplierSettlement?: SupplierSettlement | null;
+    surfaceVersion?: string;
+    surfaceAudience?: string;
+    surfaceConnectionId?: string | null;
+    surfaceContext?: Array<{
+        recordId: string;
+        revision: number;
+        contentHash: string;
+    }>;
+    surfaceFunding?: {
+        resource_id: string;
+        mode: "customer_funded" | "muxo_funded";
+    } | null;
+    surfaceOperationId?: string;
     createdAt: string;
     expiresAt: string;
 }
@@ -243,6 +545,7 @@ export interface ExecutionRun {
     input: Record<string, unknown>;
     output: Record<string, unknown> | null;
     error: string | null;
+    errorMessage?: string | null;
     actionsMetered: number;
     creditsMetered: number;
     durationMs: number | null;
@@ -250,6 +553,27 @@ export interface ExecutionRun {
     startedAt: string;
     completedAt: string | null;
 }
+export type AgenticReceiptActionType = "ToolCall" | "ModelInference" | "GpuWorkload" | "RagRetrieval" | "ApiCall" | "DistributedJob";
+export interface PortableAgenticReceipt {
+    version: string;
+    receipt_id: string;
+    agent_id: string;
+    task_id: string;
+    action_type: AgenticReceiptActionType;
+    tool_name: string | null;
+    model_id: string | null;
+    input_hash: string;
+    output_hash: string;
+    started_at: string;
+    completed_at: string;
+    latency_ms: number;
+    nonce: string;
+    previous_receipt_hash: string | null;
+    receipt_hash: string;
+    signature_algorithm: "Ed25519";
+    public_key_hex: string;
+    signature_hex: string;
+}
 export interface ExecutionReceipt {
     id: string;
     runId: string;
@@ -268,13 +592,15 @@ export interface ExecutionReceipt {
     receiptHash: string;
     signature: string;
     decisionRecord?: GovernanceDecisionRecord | null;
+    agenticReceipt?: PortableAgenticReceipt | null;
     supplierSettlement?: SupplierSettlement | null;
     issuedAt: string;
+    explanation?: HumanFriendlyExplanation;
 }
 export interface LedgerEntry {
     id: string;
     workspaceId: string;
-    kind: "plan_grant" | "credit_topup" | "run_deduction" | "subscription_upgrade" | "manual_adjustment";
+    kind: "plan_grant" | "credit_topup" | "run_deduction" | "subscription_upgrade" | "plan_change" | "refund" | "manual_adjustment";
     actionsDelta: number;
     creditsDelta: number;
     balanceAfter: number;

package/dist/ui/console-html.d.ts

@@ -1,2 +1,64 @@
+export type ConsoleView = "overview" | "catalog" | "setup" | "workspaces" | "activity" | "billing" | "login" | "signup";
+/** Every path that serves the console shell, mapped to the view it opens. */
+export declare const CONSOLE_ROUTES: Readonly<Record<string, ConsoleView>>;
+export declare function isConsolePath(pathname: string): boolean;
 export declare function renderConsoleHtml(): string;
 export declare function renderLandingHtml(): string;
+export interface OAuthConsentOptions {
+    error?: string;
+    clientName?: string;
+    redirectOrigin?: string;
+    clerk?: {
+        publishableKey: string;
+        frontendApi: string;
+    } | null;
+    request?: Record<string, string>;
+    /** Renders the workspace-claim variant, which posts to `action` instead of /oauth/authorize. */
+    claim?: {
+        workspaceName: string;
+        targetEmail: string;
+        action: string;
+        cancelUrl: string;
+    };
+}
+/** Consent screen for MCP clients (ChatGPT, Claude, CLIs) asking to use a Muxo workspace. */
+export declare function renderOAuthConsentHtml(opts: OAuthConsentOptions): string;
+export interface ApprovalPageOptions {
+    planId: string;
+    clerk?: {
+        publishableKey: string;
+        frontendApi: string;
+    } | null;
+}
+/** One-click approval screen for plans held by workspace guardrails (`/approve/:planId`). */
+export declare function renderApprovalPageHtml(opts: ApprovalPageOptions): string;
+export interface OAuthConnectPageField {
+    name: string;
+    type?: string;
+    label?: string;
+    description?: string;
+    required?: boolean;
+    default?: string | null;
+}
+export interface OAuthConnectPageOptions {
+    token: string;
+    toolkitSlug: string;
+    toolkitName: string;
+    workspaceId?: string;
+    authMode?: string;
+    status?: string;
+    callbackUrl?: string | null;
+    expectedInputFields?: OAuthConnectPageField[];
+    error?: string | null;
+}
+/** Muxo-branded OAuth connection handoff screen (`/oauth/connect/:token`). */
+export declare function renderOAuthConnectPageHtml(opts: OAuthConnectPageOptions): string;
+export interface OAuthCallbackPageOptions {
+    providerSlug: string;
+    providerName: string;
+    status: string;
+    workspaceId: string;
+    externalAccountId?: string | null;
+}
+/** Muxo-branded OAuth callback completion screen (`/oauth/callback`). */
+export declare function renderOAuthCallbackPageHtml(opts: OAuthCallbackPageOptions): string;