@muxoai/platform 1.3.0 → 1.3.1

package/.agents/plugins/marketplace.json

@@ -6,7 +6,7 @@
   "plugins": [
     {
       "name": "muxo",
-      "version": "1.2.3",
+      "version": "1.3.1",
       "description": "Governed execution across 1,000+ Connected Apps, Instant Tools (search, scrape, crawl, SEO audit), Cloud Infrastructure provisioning, Supermemory v5 recall, and Microsoft Agent Governance Ed25519 receipts.",
       "source": {
         "source": "local",

package/.claude-plugin/marketplace.json

@@ -1,17 +1,32 @@
 {
   "name": "muxo",
+  "description": "Official Muxo plugin marketplace for governed execution across Connected Apps, Instant Tools, Cloud Infrastructure, and Workspace Memory.",
   "owner": {
     "name": "Muxo",
     "email": "founders@muxo.ai",
     "url": "https://muxo.ai"
   },
+  "metadata": {
+    "description": "Official Muxo plugin marketplace for governed execution across Connected Apps, Instant Tools, Cloud Infrastructure, and Workspace Memory.",
+    "version": "1.3.1"
+  },
   "plugins": [
     {
       "name": "muxo",
-      "source": "./plugins/muxo",
-      "description": "Governed execution across 1,000+ Connected Apps, Instant Tools (search, scrape, crawl, SEO audit), Cloud Infrastructure provisioning, Supermemory v5 recall, and Microsoft Agent Governance Ed25519 receipts.",
-      "version": "1.2.3",
-      "category": "Productivity"
+      "source": {
+        "source": "npm",
+        "package": "@muxoai/cli"
+      },
+      "strict": false,
+      "description": "Governed execution across 1,000+ Connected Apps, Instant Tools (search, scrape, crawl, SEO audit), Cloud Infrastructure provisioning, Workspace Memory recall, and verifiable audit records.",
+      "version": "1.3.1",
+      "category": "Productivity",
+      "skills": [
+        "./plugins/muxo/skills/muxo",
+        "./plugins/muxo/skills/setup"
+      ],
+      "hooks": "./plugins/muxo/hooks/hooks.json",
+      "mcpServers": "./plugins/muxo/.mcp.json"
     }
   ]
 }

package/.codex/config.toml

@@ -1,5 +1,12 @@
-# OpenAI Codex Local Plugin Configuration for Muxo
-# Reference: https://developers.openai.com/plugins/build/plugins
+# OpenAI Codex Configuration for Muxo
+# Reference: https://developers.openai.com/codex/plugins
 
 [plugins."muxo@muxo"]
 enabled = true
+
+# TOML MCP Alternative (~/.codex/config.toml):
+[mcp_servers.muxo]
+url = "https://api.muxo.ai/mcp"
+# Or for local stdio proxy (requires Node.js 22+):
+# command = "npx"
+# args = ["-y", "@muxoai/cli@latest", "mcp"]

package/README.md

@@ -1,25 +1,27 @@
 # Muxo (`@muxoai/platform` / `@muxoai/cli` / `@muxoai/sdk`)
 
-Muxo (`v1.3.0`) is the unified execution, cloud infrastructure provisioning, contextual memory, and cryptographic governance platform for AI agents and applications. Customers and their agents interact exclusively with **Muxo** — either via structured tool slugs or free-form **Natural Language** (`muxo do`, `POST /api/v1/do`, `client.do()`, and MCP `plan_action`).
+Muxo (`v1.3.1`) is the unified execution, cloud infrastructure provisioning, contextual memory, and cryptographic governance platform for AI agents and applications. Customers and their agents interact exclusively with **Muxo** — either via structured tool slugs or free-form **Natural Language** (`muxo do`, `POST /api/v1/do`, `client.do()`, and MCP `plan_action`).
 
 See [`ARCHITECTURE.md`](./ARCHITECTURE.md) for the complete internal engineering blueprint, open-source ecosystem Keep/Adopt/Drop matrix, and 4-pillar architecture.
 
 Under the hood, Muxo unifies **four core pillars** plus **Natural Language Routing** and **BYOK (Bring Your Own Key) 0-Credit Execution** behind one **19-operation MCP contract**, OpenAI Plugin (`agent-plugins.org/1.0.0`), REST API, Interactive CLI/TUI (`@muxoai/cli`), TypeScript SDK (`@muxoai/sdk`), and Web Console (`https://app.muxo.ai`):
 
-1. **Composio Connected Apps (`app.*`) & Instant (`instant.*`)** — Managed OAuth SaaS integrations (`app.github.*`, `app.gmail.*`, `app.slack.*`, `app.notion.*`, `app.linear.*`) with live browser OAuth handoff (`wait_for_connection`), zero-OAuth instant capabilities (`instant.web.search`, `instant.web.scrape`, `instant.web.crawl`, `instant.seo.audit`, `instant.hackernews.top_stories`, `instant.github.repo_intel`, `instant.dns.lookup`, `instant.composio.workbench`), plus **Autonomous 2-Call Agent Signup & Claim** (`POST /api/v1/agents/signup` + `POST /api/v1/agents/claim`).
-2. **Stripe Projects Cloud Infrastructure (`resource.*`) + Merchant-of-Record Billing (`muxo_funded`) & BYOK (`byok`)** — Governed cloud resource provisioning across 60+ providers (`Turso`, `Neon`, `Supabase`, `Cloudflare`, `Vercel`, `Upstash`, `Resend`, `Railway`, `Render`, etc.) with automatic companion plan resolution, AES-256-GCM encrypted secret custody (`muxo env pull`), unified credit settlement (`muxo_funded`), and **0-credit BYOK mode** (`muxo byok set <provider>`) when you bring your own supplier or LLM API keys.
-3. **Supermemory v5 Contextual Brain (`/ns/muxo-v5-*`)** — Isolated per-workspace long-term static facts, dynamic session context, and hybrid semantic search recalled before every tool plan (`plan_action` & `get_run_context`), with strict secret redaction before memory ingestion.
-4. **Microsoft Agent Governance Toolkit (`@microsoft/agent-governance-sdk` v5.0.0)** — Every planned and executed operation passes through `Agent ──► McpSecurityScanner ──► PolicyEngine ──► AgentIdentity (Ed25519 DID) ──► AuditLogger (SHA-256 chain) ──► DecisionRecord` and produces an HMAC-SHA256 verifiable receipt.
+1. **Connected Apps (`app.*`) & Instant Tools (`instant.*`)** — Managed OAuth SaaS integrations (`app.github.*`, `app.gmail.*`, `app.slack.*`, `app.notion.*`, `app.linear.*`) with live browser OAuth handoff (`wait_for_connection`), zero-OAuth instant capabilities (`instant.web.search`, `instant.web.scrape`, `instant.web.crawl`, `instant.seo.audit`, `instant.hackernews.top_stories`, `instant.github.repo_intel`, `instant.dns.lookup`, `instant.composio.workbench`), plus **CLI-first Autonomous 2-Call Agent Signup & Claim** (`POST /api/v1/agents/signup` + `POST /api/v1/agents/claim`).
+2. **Cloud Infrastructure (`resource.*`) + Unified Credit Billing (`muxo_funded`) & BYOK (`byok`)** — Governed cloud resource provisioning across 60+ providers (`Turso`, `Neon`, `Supabase`, `Cloudflare`, `Vercel`, `Upstash`, `Resend`, `Railway`, `Render`, etc.) with automatic companion plan resolution, AES-256-GCM encrypted secret custody (`muxo env pull`), unified credit settlement (`muxo_funded`), and **0-credit BYOK mode** (`muxo byok set <provider>`) when you bring your own supplier or LLM API keys.
+3. **Workspace Memory (`/ns/muxo-v5-*`)** — Isolated per-workspace long-term static facts, dynamic session context, and hybrid semantic search recalled before every tool plan (`plan_action` & `get_run_context`), with strict secret redaction before memory ingestion.
+4. **Safety & Approvals (Muxo Guardrails)** — Every planned and executed operation passes through prompt-injection security scanning, workspace policy evaluation, cryptographic agent identity (`did:agent:muxo:*`), and produces a verifiable execution audit record.
 
 ---
 
 ## Install & Quickstart (Humans, Harnesses & Agents)
 
+> **Requirement:** `@muxoai/cli` requires **Node.js 22+** (`node >= 22.0.0`).
+
 ```bash
-# 1. Install the Muxo CLI or run directly via npx
+# 1. Install the Muxo CLI or run directly via npx (requires Node.js 22+)
 npm install -g @muxoai/cli@latest
 
-# 2. Zero-browser autonomous signup (creates ~/.muxo/config.json with mk_live_* key + 250 starter credits)
+# 2. CLI-first autonomous signup against the hosted workspace (creates ~/.muxo/config.json with mk_live_* key + 250 starter credits)
 muxo login --signup --name "my-agent"
 
 # 3. Launch the Interactive Terminal TUI (Natural Language bar, BYOK Vault, Billing & Status)
@@ -40,23 +42,56 @@ muxo billing status
 muxo billing topup 1000
 muxo billing upgrade
 
-# 7. Connect an OAuth SaaS App & Provision Live Cloud Infrastructure
+# 7. Connect an OAuth SaaS App (browser consent handoff) & Provision Live Cloud Infrastructure
 muxo link gmail --wait
 muxo provision turso --input '{"database_name":"my-agent-db"}' --approve
 muxo env pull --out .env.muxo
 ```
 
-## Official OpenAI Plugin & MCP Server (`https://api.muxo.ai/mcp`)
-
-Muxo ships a portable OpenAI Plugin (`plugins/muxo/plugin.json` & `plugins/muxo/mcp.json`) and Streamable HTTP MCP Server compliant with [OpenAI Plugins](https://developers.openai.com/plugins/build/plugins) and [OpenAI MCP Server](https://developers.openai.com/plugins/build/mcp-server) specifications:
-
-- **Streamable HTTP MCP Endpoint**: `https://api.muxo.ai/mcp` (and `https://app.muxo.ai/mcp`)
-- **Local Stdio MCP Command**: `npx -y @muxoai/cli@latest mcp`
-- **OAuth 2.1 Discovery & DCR/PKCE**:
-  - `https://api.muxo.ai/.well-known/oauth-protected-resource/mcp` (RFC 9728)
-  - `https://api.muxo.ai/.well-known/oauth-authorization-server` (RFC 8414)
-  - `POST https://api.muxo.ai/oauth/register` (Dynamic Client Registration)
-  - `GET https://api.muxo.ai/oauth/authorize` & `POST https://api.muxo.ai/oauth/token` (PKCE `S256`)
+## Official Plugins, Marketplaces & MCP Setup (`https://api.muxo.ai/mcp`)
+
+Muxo ships a portable OpenAI Plugin (`plugins/muxo/plugin.json` & `plugins/muxo/mcp.json`), Claude Code Plugin (`plugins/muxo/.claude-plugin/plugin.json`), and Streamable HTTP MCP Server:
+
+- **Streamable HTTP MCP Endpoints**: `https://api.muxo.ai/mcp` and `https://app.muxo.ai/mcp`
+- **Local Stdio MCP Command** (requires Node.js 22+, proxies to hosted workspace): `npx -y @muxoai/cli@latest mcp`
+- **Claude Code Marketplace (`muxo@muxo`)**:
+  ```bash
+  claude plugin marketplace add https://api.muxo.ai/.claude-plugin/marketplace.json
+  claude plugin install muxo@muxo
+  ```
+- **OpenAI Codex Marketplace & TOML MCP Alternative**:
+  - **Marketplace (Git Repository or Local Directory)**: Add a Git repository or local directory containing `.agents/plugins/marketplace.json`, then enable `[plugins."muxo@muxo"]` in `.codex/config.toml`.
+  - **TOML MCP Alternative (`~/.codex/config.toml`)**:
+    ```toml
+    [mcp_servers.muxo]
+    url = "https://api.muxo.ai/mcp"
+    ```
+    Or for local stdio proxy (requires Node.js 22+):
+    ```toml
+    [mcp_servers.muxo]
+    command = "npx"
+    args = ["-y", "@muxoai/cli@latest", "mcp"]
+    ```
+- **Claude Desktop**:
+  - **Hosted MCP (Custom Connectors)**: Open **Settings → Connectors → Add custom connector** and enter `https://api.muxo.ai/mcp`.
+  - **Local Stdio Server (`claude_desktop_config.json`, requires Node.js 22+)**:
+    ```json
+    {
+      "mcpServers": {
+        "muxo": {
+          "command": "npx",
+          "args": ["-y", "@muxoai/cli@latest", "mcp"]
+        }
+      }
+    }
+    ```
+- **ChatGPT**:
+  - Open **Plugins → + → Add custom MCP server** (at `https://chatgpt.com/plugins`) and enter `https://api.muxo.ai/mcp`.
+  - **OAuth 2.1 Discovery (CIMD or DCR + PKCE)**:
+    - `https://api.muxo.ai/.well-known/oauth-protected-resource/mcp` (RFC 9728)
+    - `https://api.muxo.ai/.well-known/oauth-authorization-server` (RFC 8414)
+    - Client registration can use **Client ID Metadata Documents (CIMD)** or **Dynamic Client Registration (DCR)** (`POST https://api.muxo.ai/oauth/register`); `/oauth/register` is supported when a client uses DCR rather than running on every flow.
+    - `GET https://api.muxo.ai/oauth/authorize` & `POST https://api.muxo.ai/oauth/token` (PKCE `S256`)
 - **SEP-2640 Skills Import Extension (`io.modelcontextprotocol/skills`)**: `skills/list`, `skills/get`, and `resources/read` serving `skill://muxo/muxo/SKILL.md` and `skill://muxo/setup/SKILL.md` with `sha256` integrity digests.
 - **Tool Annotations & Multi-Account Profile**: All 19 tools include `title` and `annotations` (`readOnlyHint`, `destructiveHint`, `openWorldHint`), plus `_meta["openai/profile"]: true` on `get_profile` and Company Knowledge `search`/`fetch` compatibility.