Packages

Two packages are published to npm: @moxxy/cli (the binary) and @moxxy/sdk (the contract you write plugins against). Everything else is either bundled into the CLI or installed on first use through the plugin registry, so this list is a map of the system rather than a list of things to install.

The spine

Package	What it is
@moxxy/sdk	The typed public surface. Zero runtime dependencies. Every define* factory lives here.
@moxxy/core	The runtime: event log, registries, plugin host, permissions, sessions, skills.
@moxxy/cli	The moxxy binary and its commands.
@moxxy/config	Config loading, the scope merge, and locked keys.
@moxxy/runner	The bare session host and its wire protocol.
@moxxy/agent	Batteries-included presets over setupAgent.
@moxxy/testing	Harnesses for testing plugins and blocks.

Tools and skills

Package	What it is
@moxxy/tools-builtin	Read, Edit, Write, Bash, Grep, Glob, recall, Sleep.
@moxxy/skills-builtin	The built-in Markdown skills.
@moxxy/plugin-browser	Web fetch, and Playwright sessions when interactive browsing is asked for.
@moxxy/plugin-mcp	Any MCP server as a tool source.
@moxxy/plugin-subagents	dispatch_agent for fan-out work.
@moxxy/plugin-computer-control	macOS computer control.
@moxxy/plugin-view	Agent-authored views, rendered on a surface.

Blocks

Kind	Packages
Providers	plugin-provider-anthropic, -openai, -openai-codex, -claude-code, -google, -xai, -zai, -local, -admin
Modes	mode-default, mode-goal, mode-deep-research, mode-collaborative
Compactor	compactor-summarize
Cache strategy	cache-strategy-stable-prefix
Isolators	isolator-worker, isolator-subprocess, isolator-wasm
Reflector	reflector-default
Embedders	plugin-embeddings-openai, plugin-embeddings-transformers
Speech in	plugin-stt-whisper, plugin-stt-whisper-codex, plugin-stt-local
Speech out	plugin-tts-openai, plugin-tts-elevenlabs, plugin-tts-local
Tunnel	plugin-tunnel-proxy

Channels

plugin-cli (TUI), plugin-channel-http, plugin-telegram, plugin-channel-slack, plugin-channel-discord, plugin-channel-whatsapp, plugin-channel-signal, plugin-channel-imessage, plugin-channel-web, plugin-channel-mobile, plugin-terminal.

See surfaces and channels.

Operations

Package	What it is
@moxxy/plugin-security	Opt-in capability isolation.
@moxxy/plugin-vault	AES-256-GCM secrets.
@moxxy/plugin-memory	Journal memory with vector recall.
@moxxy/plugin-scheduler	Cron and one-shot prompts.
@moxxy/plugin-webhooks	Verified external triggers.
@moxxy/plugin-workflows	DAGs of skills, prompts and tools.
@moxxy/plugin-plugins-admin	Install, enable, reload; the signed registry.
@moxxy/plugin-oauth	OAuth flows for providers and channels.
@moxxy/plugin-self-update	The agent updating its own plugins and core.
@moxxy/plugin-usage-stats	Token and cost accounting behind /usage.

Client and apps

client-core, client-transport-ws, client-platform-web, design-tokens, chat-model, desktop-host, desktop-ui, desktop-ipc-contract, desktop-app-sdk, ipc-server-ws, workspace-registry.

The invariant

@moxxy/sdk has zero internal dependencies, and no plugin may import @moxxy/core. pnpm check:deps fails the build otherwise. That is what makes every block above substitutable — see architecture.