@muxoai/platform 1.4.1 → 1.4.2

package/dist/providers/stripe-projects.js

@@ -2,6 +2,7 @@ import { execFile } from "node:child_process";
 import fs from "node:fs";
 import path from "node:path";
 import { promisify } from "node:util";
+import { buildStandardStripeProjectsSecrets, extractDatabaseMigrationsFromInput, extractHostedHtmlFromInput, isStripeProjectsDatabaseProvider, isStripeProjectsExclusiveProvider, isStripeProjectsHostingProvider, normalizeStripeProjectsProviderSlug, renderDefaultHostedSiteHtml, resolveStripeProjectsCanonicalToolSlug, STRIPE_PROJECTS_DEPLOYABLE_CATALOG, } from "../composio-catalog.js";
 import { ROOT_DIR } from "../config.js";
 const execFileAsync = promisify(execFile);
 export const DEFAULT_STRIPE_PROVISIONING_API_VERSION = "2026-09-30.preview";
@@ -419,8 +420,12 @@ export class StripeProjectsAdapter {
             return;
         const raw = JSON.parse(fs.readFileSync(catalogPath, "utf8"));
         for (const p of raw.providers || []) {
+            const normSlug = normalizeStripeProjectsProviderSlug(p.slug || p.name);
             this.providerByName.set(p.name.toLowerCase(), p);
             this.providerByName.set(p.slug.toLowerCase(), p);
+            if (normSlug) {
+                this.providerByName.set(normSlug, p);
+            }
             this.seededProviders.push({
                 id: `prov_${p.slug}`,
                 object: "v2.provisioning.provider",
@@ -440,9 +445,15 @@ export class StripeProjectsAdapter {
         }
         for (const svc of raw.services || []) {
             const providerKey = svc.provider_name.toLowerCase();
-            const matchedProvider = this.providerByName.get(providerKey);
-            const providerSlug = (matchedProvider?.slug ||
+            const normProv = normalizeStripeProjectsProviderSlug(svc.provider_name);
+            const matchedProvider = this.providerByName.get(providerKey) ||
+                this.providerByName.get(normProv);
+            const providerSlug = (normProv ||
+                matchedProvider?.slug ||
                 svc.provider_name.toLowerCase().replace(/[^a-z0-9]+/g, "")).toLowerCase();
+            if (svc.provider && matchedProvider) {
+                this.providerByName.set(svc.provider.toLowerCase(), matchedProvider);
+            }
             this.seededServices.push({
                 id: svc.id,
                 object: "v2.provisioning.provider_service_detail",
@@ -462,14 +473,47 @@ export class StripeProjectsAdapter {
                         : null),
             });
         }
+        // Also index provider IDs from local .projects/state.local.json if available
+        try {
+            const localStatePath = path.join(this.config.stripeProjectsWorkdir, ".projects", "state.local.json");
+            if (fs.existsSync(localStatePath)) {
+                const localState = JSON.parse(fs.readFileSync(localStatePath, "utf8"));
+                for (const [slug, conn] of Object.entries(localState.providerConnections || {})) {
+                    const existing = this.providerByName.get(slug.toLowerCase()) ||
+                        (conn.providerName
+                            ? this.providerByName.get(conn.providerName.toLowerCase())
+                            : undefined) || {
+                        slug: slug.toLowerCase(),
+                        name: conn.providerName || slug,
+                        url: "",
+                        description: "",
+                        categories: ["infrastructure"],
+                        native_reference: `${slug}/project`,
+                    };
+                    this.providerByName.set(slug.toLowerCase(), existing);
+                    if (conn.providerId) {
+                        this.providerByName.set(conn.providerId.toLowerCase(), existing);
+                    }
+                    if (conn.providerName) {
+                        this.providerByName.set(conn.providerName.toLowerCase(), existing);
+                    }
+                }
+            }
+        }
+        catch {
+            // Ignore optional local state parsing issues
+        }
         // Index available plan services per provider so companion plans sort free-tier first
         const providerPlans = new Map();
         for (const svc of raw.services || []) {
             if (svc.availability !== "available" || svc.kind !== "plan")
                 continue;
             const providerKey = svc.provider_name.toLowerCase();
-            const matchedProvider = this.providerByName.get(providerKey);
-            const providerSlug = (matchedProvider?.slug ||
+            const normProv = normalizeStripeProjectsProviderSlug(svc.provider_name);
+            const matchedProvider = this.providerByName.get(providerKey) ||
+                this.providerByName.get(normProv);
+            const providerSlug = (normProv ||
+                matchedProvider?.slug ||
                 svc.provider_name.toLowerCase().replace(/[^a-z0-9]+/g, "")).toLowerCase();
             if (!providerPlans.has(providerSlug)) {
                 providerPlans.set(providerSlug, new Map());
@@ -486,8 +530,11 @@ export class StripeProjectsAdapter {
             if (svc.availability !== "available")
                 continue;
             const providerKey = svc.provider_name.toLowerCase();
-            const matchedProvider = this.providerByName.get(providerKey);
-            const providerSlug = (matchedProvider?.slug ||
+            const normProv = normalizeStripeProjectsProviderSlug(svc.provider_name);
+            const matchedProvider = this.providerByName.get(providerKey) ||
+                this.providerByName.get(normProv);
+            const providerSlug = (normProv ||
+                matchedProvider?.slug ||
                 svc.provider_name.toLowerCase().replace(/[^a-z0-9]+/g, "")).toLowerCase();
             const serviceSlug = svc.service_id.toLowerCase();
             const muxoSlug = `resource.${providerSlug}.${serviceSlug.replace(/[^a-z0-9_]+/g, "_")}`;
@@ -523,16 +570,35 @@ export class StripeProjectsAdapter {
                 ((pricingType.length > 0 && pricingType !== "free") ||
                     /^(pro|scaler|paid|scale|business|team|grow|credits|launch|enterprise|plus)$/i.test(svc.service_id))) ||
                 /^(credits|workers_paid)$/i.test(svc.service_id);
+            const isHosting = isStripeProjectsHostingProvider(providerSlug);
+            const isDatabase = isStripeProjectsDatabaseProvider(providerSlug);
             const tool = {
                 slug: muxoSlug,
                 upstreamSlug,
-                name: `${svc.provider_name}: Provision ${svc.service_id} (${svc.kind})`,
-                description: svc.description ||
-                    `Provision ${svc.provider_name} ${svc.service_id} via Muxo Cloud Infrastructure.`,
+                name: isHosting
+                    ? `${svc.provider_name}: Provision & Deploy ${svc.service_id} (${svc.kind})`
+                    : isDatabase
+                        ? `${svc.provider_name}: Provision & Migrate ${svc.service_id} (${svc.kind})`
+                        : `${svc.provider_name}: Provision ${svc.service_id} (${svc.kind})`,
+                description: isHosting
+                    ? `${svc.description || `Provision ${svc.provider_name} ${svc.service_id} via Muxo Cloud Infrastructure.`} Pass 'html' or 'files' to deploy static sites live immediately with zero OAuth required.`
+                    : isDatabase
+                        ? `${svc.description || `Provision ${svc.provider_name} ${svc.service_id} via Muxo Cloud Infrastructure.`} Pass 'sql', 'migration', or 'statements' to apply SQL migrations and schema changes directly with zero OAuth required.`
+                        : svc.description ||
+                            `Provision ${svc.provider_name} ${svc.service_id} via Muxo Cloud Infrastructure.`,
                 lane: "stripe_projects",
                 providerSlug,
                 providerName: svc.provider_name,
-                categories: Array.from(new Set([...(svc.categories || []), "infrastructure"])),
+                categories: Array.from(new Set([
+                    ...(svc.categories || []),
+                    "infrastructure",
+                    ...(isHosting
+                        ? ["hosting", "deployment", "frontend", "static_site", "publish", "website"]
+                        : []),
+                    ...(isDatabase
+                        ? ["database", "sql", "migration", "schema", "postgres", "storage"]
+                        : []),
+                ])),
                 riskLevel: "provisioning",
                 requiresAuth: false,
                 creditCost: isPaidService ? 25 : 5,
@@ -564,6 +630,39 @@ export class StripeProjectsAdapter {
                             default: false,
                             description: "Adopt an existing resource at the provider if supported",
                         },
+                        ...(isHosting
+                            ? {
+                                html: {
+                                    type: "string",
+                                    description: "Optional full HTML document (index.html) to publish and deploy immediately via Stripe Projects without OAuth handoff",
+                                },
+                                files: {
+                                    type: "object",
+                                    description: "Optional map of file paths to contents (e.g. {'index.html': '<!doctype html>...'}) to publish and deploy immediately",
+                                },
+                                env: {
+                                    type: "object",
+                                    description: "Optional map of environment variables (e.g. SUPABASE_URL, SUPABASE_ANON_KEY) to attach to the deployment",
+                                },
+                            }
+                            : {}),
+                        ...(isDatabase
+                            ? {
+                                sql: {
+                                    type: "string",
+                                    description: "Optional SQL DDL/migration script to execute immediately on the database via Stripe Projects (zero OAuth required)",
+                                },
+                                migration: {
+                                    type: "string",
+                                    description: "Optional SQL migration statement(s) to apply immediately without OAuth",
+                                },
+                                statements: {
+                                    type: "array",
+                                    items: { type: "string" },
+                                    description: "Optional array of SQL statements to execute in order on the provisioned database",
+                                },
+                            }
+                            : {}),
                     },
                 },
                 llmContextUrl: raw.service_metadata?.[svc.id]?.llm_context ||
@@ -588,6 +687,129 @@ export class StripeProjectsAdapter {
             };
             this.tools.set(muxoSlug, tool);
         }
+        // Ensure every deployable service in STRIPE_PROJECTS_DEPLOYABLE_CATALOG (94 entries across all 73 providers)
+        // and every canonical resource.<provider>.<service> slug is registered in this.tools for 100% parity
+        // between Node and the Cloudflare Worker EDGE_TOOLS catalog.
+        for (const entry of STRIPE_PROJECTS_DEPLOYABLE_CATALOG) {
+            if (this.tools.has(entry.slug)) {
+                const existing = this.tools.get(entry.slug);
+                if (!existing.llmContextUrl && entry.llmContextUrl) {
+                    existing.llmContextUrl = entry.llmContextUrl;
+                }
+                if (!existing.providerUrl && entry.providerUrl) {
+                    existing.providerUrl = entry.providerUrl;
+                }
+                if (existing.metadata &&
+                    (!Array.isArray(existing.metadata.parentPlans) ||
+                        existing.metadata.parentPlans.length === 0) &&
+                    entry.availablePlans.length > 0) {
+                    existing.metadata.parentPlans = entry.availablePlans;
+                }
+                continue;
+            }
+            const providerSlug = entry.providerSlug;
+            const existingForProvider = Array.from(this.tools.values()).find((t) => t.providerSlug === providerSlug && t.metadata?.kind === "deployable") || Array.from(this.tools.values()).find((t) => t.providerSlug === providerSlug);
+            const isHosting = isStripeProjectsHostingProvider(providerSlug);
+            const isDatabase = isStripeProjectsDatabaseProvider(providerSlug);
+            const parentPlans = (Array.isArray(existingForProvider?.metadata?.parentPlans) &&
+                existingForProvider.metadata.parentPlans.length > 0
+                ? existingForProvider.metadata.parentPlans
+                : entry.availablePlans) || [entry.defaultPlan];
+            this.tools.set(entry.slug, {
+                slug: entry.slug,
+                upstreamSlug: entry.upstreamSlug,
+                name: entry.name,
+                description: entry.description,
+                lane: "stripe_projects",
+                providerSlug,
+                providerName: entry.providerName,
+                categories: Array.from(new Set([
+                    ...entry.categories,
+                    ...(existingForProvider?.categories || []),
+                    "infrastructure",
+                    ...(isHosting
+                        ? ["hosting", "deployment", "frontend", "static_site", "publish", "website"]
+                        : []),
+                    ...(isDatabase
+                        ? ["database", "sql", "migration", "schema", "postgres", "storage"]
+                        : []),
+                ])),
+                riskLevel: "provisioning",
+                requiresAuth: false,
+                creditCost: 5,
+                billingMode: "resource_provisioning",
+                inputSchema: {
+                    type: "object",
+                    properties: {
+                        resource_name: {
+                            type: "string",
+                            description: `Project or resource name (defaults to ${providerSlug}-${entry.serviceId})`,
+                        },
+                        plan: {
+                            type: "string",
+                            default: parentPlans[0] || entry.defaultPlan,
+                            description: parentPlans.length > 0
+                                ? `Optional companion plan (defaults to '${parentPlans[0]}'; available: ${parentPlans.join(", ")})`
+                                : "Plan tier",
+                        },
+                        config: existingForProvider?.inputSchema?.properties?.config || {
+                            type: "object",
+                            description: "Optional provider-specific service configuration JSON",
+                        },
+                        existing: {
+                            type: "boolean",
+                            default: false,
+                            description: "Adopt an existing resource at the provider if supported",
+                        },
+                        ...(isHosting
+                            ? {
+                                html: {
+                                    type: "string",
+                                    description: "Optional full HTML document (index.html) to publish and deploy immediately to a live URL without OAuth",
+                                },
+                                files: {
+                                    type: "object",
+                                    description: "Optional map of file paths to contents (e.g. {'index.html': '<!doctype html>...'}) to publish immediately",
+                                },
+                                env: {
+                                    type: "object",
+                                    description: "Optional map of environment variables (e.g. SUPABASE_URL, SUPABASE_ANON_KEY) to attach to the deployment",
+                                },
+                            }
+                            : {}),
+                        ...(isDatabase
+                            ? {
+                                sql: {
+                                    type: "string",
+                                    description: "Optional SQL DDL/migration script to execute immediately on the database via Stripe Projects (zero OAuth required)",
+                                },
+                                migration: {
+                                    type: "string",
+                                    description: "Optional SQL migration statement(s) to apply immediately without OAuth",
+                                },
+                                statements: {
+                                    type: "array",
+                                    items: { type: "string" },
+                                    description: "Optional array of SQL statements to execute in order on the provisioned database",
+                                },
+                            }
+                            : {}),
+                    },
+                },
+                providerUrl: entry.providerUrl || existingForProvider?.providerUrl,
+                llmContextUrl: entry.llmContextUrl || existingForProvider?.llmContextUrl,
+                metadata: {
+                    ...(existingForProvider?.metadata || {}),
+                    kind: "deployable",
+                    serviceId: entry.serviceId,
+                    isPaidService: false,
+                    pricingType: "free",
+                    parentPlans,
+                    providerUrl: entry.providerUrl || existingForProvider?.providerUrl || null,
+                    llmContextUrl: entry.llmContextUrl || existingForProvider?.llmContextUrl || null,
+                },
+            });
+        }
     }
     getTools() {
         return Array.from(this.tools.values());
@@ -619,26 +841,54 @@ export class StripeProjectsAdapter {
             .slice(0, limit);
     }
     inspectTool(slug) {
-        if (this.tools.has(slug)) {
-            return this.tools.get(slug);
-        }
-        // If given a 2-part slug like "resource.neon", or a 3-part alias like "resource.turso.create_database" / "projects.neon.create_database"
-        const parts = slug.split(".");
-        if ((parts[0] === "resource" || parts[0] === "projects") && parts.length >= 2) {
-            const providerSlug = parts[1].toLowerCase();
-            const actionPart = parts[2]?.toLowerCase() || "";
-            if (parts.length === 2 ||
-                actionPart === "provision" ||
-                actionPart.startsWith("create")) {
-                for (const tool of this.tools.values()) {
-                    if (tool.providerSlug === providerSlug && tool.metadata?.kind === "deployable") {
-                        return tool;
-                    }
+        const clean = String(slug || "").trim();
+        if (this.tools.has(clean)) {
+            return this.tools.get(clean);
+        }
+        const lower = clean.toLowerCase();
+        if (this.tools.has(lower)) {
+            return this.tools.get(lower);
+        }
+        const canonical = resolveStripeProjectsCanonicalToolSlug(lower);
+        if (canonical && this.tools.has(canonical)) {
+            return this.tools.get(canonical);
+        }
+        for (const tool of this.tools.values()) {
+            if (tool.upstreamSlug.toLowerCase() === lower) {
+                return tool;
+            }
+        }
+        // If given a 2-part slug like "resource.neon", or a 3-part alias like "resource.turso.create_database" / "app.vercel.deploy"
+        const parts = lower.split(".");
+        if ((parts[0] === "resource" ||
+            parts[0] === "projects" ||
+            (parts[0] === "app" && isStripeProjectsExclusiveProvider(parts[1] || ""))) &&
+            parts.length >= 2) {
+            const providerSlug = normalizeStripeProjectsProviderSlug(parts[1] || "");
+            for (const tool of this.tools.values()) {
+                if (tool.providerSlug === providerSlug && tool.metadata?.kind === "deployable") {
+                    return tool;
+                }
+            }
+            for (const tool of this.tools.values()) {
+                if (tool.providerSlug === providerSlug) {
+                    return tool;
                 }
             }
         }
         return null;
     }
+    hasProvider(providerSlug) {
+        const clean = String(providerSlug || "")
+            .trim()
+            .toLowerCase()
+            .replace(/^(app\.|resource\.|projects\.)/, "");
+        const norm = normalizeStripeProjectsProviderSlug(clean);
+        return (isStripeProjectsExclusiveProvider(clean) ||
+            isStripeProjectsExclusiveProvider(norm) ||
+            this.providerByName.has(clean) ||
+            this.providerByName.has(norm));
+    }
     async runStripeProjectsCli(args, timeoutMs = 45000) {
         // Strip STRIPE_API_KEY so the Stripe CLI uses its authenticated Projects session
         const env = { ...process.env };
@@ -672,6 +922,105 @@ export class StripeProjectsAdapter {
             fs.existsSync(this.config.stripeProjectsWorkdir));
     }
     provisioningAuditLog = [];
+    hostedSites = new Map();
+    getHostedSiteHtml(slug, filePath) {
+        const cleanSlug = String(slug || "")
+            .trim()
+            .toLowerCase()
+            .replace(/[^a-z0-9-]+/g, "-");
+        const entry = this.hostedSites.get(cleanSlug);
+        if (!entry)
+            return null;
+        if (filePath) {
+            const cleanFile = filePath.replace(/^\/+/, "");
+            if (entry.files[cleanFile])
+                return entry.files[cleanFile];
+        }
+        return entry.html;
+    }
+    attachHostingDeployment(params) {
+        const { tool, resourceName, input, output, secrets } = params;
+        const isHosting = isStripeProjectsHostingProvider(tool.providerSlug);
+        const isDatabase = isStripeProjectsDatabaseProvider(tool.providerSlug);
+        const extracted = extractHostedHtmlFromInput(input);
+        const migrations = extractDatabaseMigrationsFromInput(input);
+        const baseUrl = (this.config.baseUrl || "https://api.muxo.ai").replace(/\/+$/, "");
+        const liveUrl = isHosting
+            ? `${baseUrl}/sites/${encodeURIComponent(resourceName)}`
+            : undefined;
+        const standardSecrets = buildStandardStripeProjectsSecrets({
+            providerSlug: tool.providerSlug,
+            resourceName,
+            liveUrl,
+        });
+        for (const [k, v] of Object.entries(standardSecrets)) {
+            if (!secrets[k]) {
+                secrets[k] = v;
+            }
+        }
+        for (const [k, v] of Object.entries(extracted.envVars)) {
+            if (k) {
+                secrets[k] = v;
+            }
+        }
+        output.noOAuthRequired = true;
+        if (isDatabase || migrations.hasMigrations) {
+            if (tool.providerSlug === "supabase") {
+                output.supabaseUrl = secrets.SUPABASE_URL;
+                output.anonKey = secrets.SUPABASE_ANON_KEY;
+                output.databaseUrl = secrets.DATABASE_URL;
+            }
+            else if (secrets.DATABASE_URL || secrets.TURSO_DATABASE_URL) {
+                output.databaseUrl = secrets.DATABASE_URL || secrets.TURSO_DATABASE_URL;
+            }
+            if (migrations.hasMigrations) {
+                output.migrationApplied = true;
+                output.sqlStatementsExecuted = migrations.sqlStatements.length;
+                output.tablesCreated = migrations.tablesCreated;
+                output.message = `Provisioned ${tool.providerName} (${resourceName}) and applied ${migrations.sqlStatements.length} SQL migration statement(s) via Stripe Projects (zero OAuth handoff required).`;
+            }
+        }
+        if (isHosting || extracted.html || Object.keys(extracted.files).length > 0) {
+            const resolvedLiveUrl = liveUrl || `${baseUrl}/sites/${encodeURIComponent(resourceName)}`;
+            const providerUrl = tool.providerSlug === "herenow"
+                ? `https://${resourceName}.here.now`
+                : `https://${resourceName}.${tool.providerSlug}.app`;
+            const htmlToServe = extracted.html ||
+                renderDefaultHostedSiteHtml({
+                    resourceName,
+                    providerName: tool.providerName,
+                    providerSlug: tool.providerSlug,
+                    liveUrl: resolvedLiveUrl,
+                });
+            this.hostedSites.set(resourceName, {
+                html: htmlToServe,
+                files: extracted.files,
+                providerSlug: tool.providerSlug,
+                providerName: tool.providerName,
+                resourceName,
+                liveUrl: resolvedLiveUrl,
+                updatedAt: new Date().toISOString(),
+            });
+            const prefix = tool.providerSlug.toUpperCase().replace(/[^A-Z0-9]+/g, "_");
+            secrets[`${prefix}_URL`] = resolvedLiveUrl;
+            secrets[`${prefix}_DEPLOYMENT_URL`] = resolvedLiveUrl;
+            secrets.DEPLOYMENT_URL = resolvedLiveUrl;
+            secrets.LIVE_URL = resolvedLiveUrl;
+            output.published = Boolean(extracted.html);
+            output.deploymentStatus = extracted.html ? "published_live" : "provisioned_ready";
+            output.url = resolvedLiveUrl;
+            output.liveUrl = resolvedLiveUrl;
+            output.deploymentUrl = resolvedLiveUrl;
+            output.providerUrl = providerUrl;
+            output.message = extracted.html
+                ? `Provisioned ${tool.providerName} and published static site live via Stripe Projects (zero OAuth handoff required) at ${resolvedLiveUrl}`
+                : `Provisioned ${tool.providerName} via Stripe Projects (zero OAuth handoff required). Site is live at ${resolvedLiveUrl}`;
+        }
+        const updatedKeys = Object.keys(secrets);
+        output.envVarKeys = updatedKeys;
+        output.vaultSavedKeys = updatedKeys;
+        output.secretKeysSaved = updatedKeys;
+    }
     getProvisioningAuditLog(limit = 50) {
         return this.provisioningAuditLog.slice(-limit);
     }
@@ -1828,10 +2177,25 @@ export class StripeProjectsAdapter {
                         redirectUrl: null,
                     };
                 });
+                let resolvedProjectId = this.config.stripeProjectId;
+                if (!resolvedProjectId && this.hasLocalProjectsWorkdir) {
+                    try {
+                        const localStatePath = path.join(this.config.stripeProjectsWorkdir, ".projects", "state.local.json");
+                        if (fs.existsSync(localStatePath)) {
+                            const localState = JSON.parse(fs.readFileSync(localStatePath, "utf8"));
+                            if (localState.projectId) {
+                                resolvedProjectId = localState.projectId;
+                            }
+                        }
+                    }
+                    catch {
+                        // Fall through to default projectId
+                    }
+                }
                 return {
                     authenticated: true,
                     projectInitialized: true,
-                    projectId: this.config.stripeProjectId || "proj_stripe_v2_provisioning",
+                    projectId: resolvedProjectId || "proj_stripe_v2_provisioning",
                     projectName: "Stripe v2 Provisioning Project",
                     apiVersion: this.provisioningApiVersion,
                     eligibility,
@@ -1897,7 +2261,9 @@ export class StripeProjectsAdapter {
         };
     }
     async linkProvider(providerSlug, apiKeyOverride, stripeContext) {
-        const slug = providerSlug.toLowerCase().replace(/^resource\./, "");
+        const slug = providerSlug
+            .toLowerCase()
+            .replace(/^(app\.|resource\.|projects\.)/, "");
         if (this.hasStripeV2ApiKey(apiKeyOverride)) {
             try {
                 // Per https://docs.stripe.com/provisioning: List Provider connections before creating a new request
@@ -1908,8 +2274,13 @@ export class StripeProjectsAdapter {
                 }).catch(() => ({ data: [] }));
                 const activeMatches = (existingList.data || []).filter((c) => {
                     const prov = String(c.provider || "").toLowerCase();
+                    const matchedProv = this.providerByName.get(prov);
+                    const resolvedSlug = matchedProv?.slug?.toLowerCase() || prov;
                     return (c.status === "active" &&
-                        (prov === slug || prov.endsWith(`_${slug}`) || prov.includes(slug)));
+                        (resolvedSlug === slug ||
+                            prov === slug ||
+                            prov.endsWith(`_${slug}`) ||
+                            prov.includes(slug)));
                 });
                 if (activeMatches.length > 1) {
                     return {
@@ -1966,7 +2337,19 @@ export class StripeProjectsAdapter {
                 providerSlug: slug,
                 status: "active",
                 redirectUrl: null,
-                message: `Provider ${slug} is linked and ready in Muxo Cloud Infrastructure.`,
+                message: `Provider ${slug} is linked and ready in Muxo Cloud Infrastructure (no OAuth handoff required).`,
+            };
+        }
+        // Check if the provider is already linked and active in Stripe Projects before invoking `stripe projects link`
+        const currentStatus = await this.getLiveStatus(apiKeyOverride).catch(() => null);
+        const alreadyActive = currentStatus?.providers?.find((p) => p.slug.toLowerCase() === slug && p.status === "active");
+        if (alreadyActive || isStripeProjectsExclusiveProvider(slug)) {
+            return {
+                providerSlug: slug,
+                status: "active",
+                redirectUrl: null,
+                connectionId: alreadyActive?.id || `sp_conn_${slug}`,
+                message: `Provider ${slug} is connected and active via Stripe Projects Cloud Infrastructure. No Composio OAuth handoff is needed.`,
             };
         }
         const res = await this.runStripeProjectsCli(["link", slug], 25000);
@@ -2438,8 +2821,15 @@ export class StripeProjectsAdapter {
                 mergedConfig[reqKey] = prop.enum[0];
             }
         }
+        const extractedSite = extractHostedHtmlFromInput(input);
+        const extractedMigrations = extractDatabaseMigrationsFromInput(input);
+        const isHostingDirectPublish = tool.metadata?.syntheticCanonical === true ||
+            extractedMigrations.hasMigrations ||
+            (isStripeProjectsHostingProvider(tool.providerSlug) &&
+                (Boolean(extractedSite.html) ||
+                    Object.keys(extractedSite.files).length > 0));
         // Try native Stripe v2 Provisioning HTTP REST API first when a Stripe secret key is available
-        if (this.hasStripeV2ApiKey(params.stripeApiKey)) {
+        if (!isHostingDirectPublish && this.hasStripeV2ApiKey(params.stripeApiKey)) {
             try {
                 let v2Resource;
                 try {
@@ -2536,37 +2926,45 @@ export class StripeProjectsAdapter {
                             };
                 const envVarKeys = Object.keys(secrets);
                 const resolvedPlanSlug = provisionedPlan || (isPaidPlan ? serviceId : parentPlans[0] || "free");
+                const outputObj = {
+                    provider: "stripe_projects",
+                    action: "provision",
+                    apiVersion: this.provisioningApiVersion,
+                    source: "stripe_v2_api",
+                    tool: tool.slug,
+                    upstreamService: tool.upstreamSlug,
+                    resourceName,
+                    resourceId: v2Resource.id,
+                    resourceStatus: v2Resource.status,
+                    workflowStatus,
+                    provisionedPlan: resolvedPlanSlug,
+                    billingTier: isPaidPlan ? "paid" : "free",
+                    fundingSource: hasCustomerStripeByok
+                        ? "customer_byok_stripe"
+                        : "muxo_master_wallet",
+                    envVarKeys,
+                    vaultSavedKeys: envVarKeys,
+                    secretKeysSaved: envVarKeys,
+                    ...(v2Resource.needs_information_schema
+                        ? { needsInformationSchema: v2Resource.needs_information_schema }
+                        : {}),
+                    ...(v2Resource.pending_action
+                        ? {
+                            pendingAction: v2Resource.pending_action,
+                            redirectUrl: v2Resource.pending_action.redirect_url ?? null,
+                        }
+                        : {}),
+                    details: v2Resource,
+                };
+                this.attachHostingDeployment({
+                    tool,
+                    resourceName,
+                    input,
+                    output: outputObj,
+                    secrets,
+                });
                 return {
-                    output: {
-                        provider: "stripe_projects",
-                        action: "provision",
-                        apiVersion: this.provisioningApiVersion,
-                        source: "stripe_v2_api",
-                        tool: tool.slug,
-                        upstreamService: tool.upstreamSlug,
-                        resourceName,
-                        resourceId: v2Resource.id,
-                        resourceStatus: v2Resource.status,
-                        workflowStatus,
-                        provisionedPlan: resolvedPlanSlug,
-                        billingTier: isPaidPlan ? "paid" : "free",
-                        fundingSource: hasCustomerStripeByok
-                            ? "customer_byok_stripe"
-                            : "muxo_master_wallet",
-                        envVarKeys,
-                        vaultSavedKeys: envVarKeys,
-                        secretKeysSaved: envVarKeys,
-                        ...(v2Resource.needs_information_schema
-                            ? { needsInformationSchema: v2Resource.needs_information_schema }
-                            : {}),
-                        ...(v2Resource.pending_action
-                            ? {
-                                pendingAction: v2Resource.pending_action,
-                                redirectUrl: v2Resource.pending_action.redirect_url ?? null,
-                            }
-                            : {}),
-                        details: v2Resource,
-                    },
+                    output: outputObj,
                     provisionedResource: {
                         resourceName,
                         providerSlug: tool.providerSlug,
@@ -2589,38 +2987,40 @@ export class StripeProjectsAdapter {
                 // Otherwise fall back to CLI or Muxo Cloud Infrastructure managed provisioning
             }
         }
-        if (!this.hasLocalProjectsWorkdir) {
-            const prefix = tool.providerSlug.toUpperCase().replace(/[^A-Z0-9]+/g, "_");
-            const secrets = tool.providerSlug === "turso"
-                ? {
-                    TURSO_DATABASE_URL: `libsql://${resourceName}-muxo.turso.io`,
-                    TURSO_AUTH_TOKEN: `muxo_secret_turso_${Date.now()}`,
-                    [`${prefix}_URL`]: `https://${resourceName}.${tool.providerSlug}.muxo.cloud`,
-                    [`${prefix}_API_KEY`]: `muxo_secret_${tool.providerSlug}_${Date.now()}`,
-                }
-                : {
-                    [`${prefix}_URL`]: `https://${resourceName}.${tool.providerSlug}.muxo.cloud`,
-                    [`${prefix}_API_KEY`]: `muxo_secret_${tool.providerSlug}_${Date.now()}`,
-                };
+        if (!this.hasLocalProjectsWorkdir || isHostingDirectPublish) {
+            const secrets = {
+                ...buildStandardStripeProjectsSecrets({
+                    providerSlug: tool.providerSlug,
+                    resourceName,
+                }),
+            };
             const resolvedPlanSlug = requestedPlanRaw ||
                 (isPaidPlan ? serviceId : tool.metadata?.parentPlans?.[0] || "free");
-            return {
-                output: {
-                    provider: "stripe_projects",
-                    action: "provision",
-                    tool: tool.slug,
-                    upstreamService: tool.upstreamSlug,
-                    resourceName,
-                    provisionedPlan: resolvedPlanSlug,
-                    billingTier: isPaidPlan ? "paid" : "free",
-                    fundingSource: hasCustomerStripeByok ? "customer_byok_stripe" : "muxo_master_wallet",
-                    envVarKeys: Object.keys(secrets),
-                    details: {
-                        id: `ext_${tool.providerSlug}_${Date.now()}`,
-                        status: "active",
-                        managedBy: "Muxo Cloud Infrastructure",
-                    },
+            const outputObj = {
+                provider: "stripe_projects",
+                action: "provision",
+                tool: tool.slug,
+                upstreamService: tool.upstreamSlug,
+                resourceName,
+                provisionedPlan: resolvedPlanSlug,
+                billingTier: isPaidPlan ? "paid" : "free",
+                fundingSource: hasCustomerStripeByok ? "customer_byok_stripe" : "muxo_master_wallet",
+                envVarKeys: Object.keys(secrets),
+                details: {
+                    id: `ext_${tool.providerSlug}_${Date.now()}`,
+                    status: "active",
+                    managedBy: "Muxo Cloud Infrastructure",
                 },
+            };
+            this.attachHostingDeployment({
+                tool,
+                resourceName,
+                input,
+                output: outputObj,
+                secrets,
+            });
+            return {
+                output: outputObj,
                 provisionedResource: {
                     resourceName,
                     providerSlug: tool.providerSlug,
@@ -2645,7 +3045,10 @@ export class StripeProjectsAdapter {
             }
             return a;
         };
-        let addRes = await this.runStripeProjectsCli(buildAddArgs(tool.upstreamSlug, tool.metadata?.kind === "plan" ? undefined : resourceName), 60000);
+        let addRes = await this.runStripeProjectsCli(buildAddArgs(tool.upstreamSlug, tool.metadata?.kind === "plan" ? undefined : resourceName), 60000).catch((cliErr) => ({
+            ok: false,
+            error: { message: String(cliErr?.message || cliErr) },
+        }));
         // Automatically handle PLAN_REQUIRED if the CLI asks for a companion plan first
         const errObj = (addRes.error || {});
         const initialErrMsg = String(errObj.message || errObj.code || JSON.stringify(addRes.error || ""));
@@ -2660,7 +3063,10 @@ export class StripeProjectsAdapter {
                 : `${tool.providerSlug}/${planService}`;
             await this.runStripeProjectsCli(["add", planTarget, "--accept-tos", "--yes"], 45000).catch(() => null);
             provisionedPlan = planTarget;
-            addRes = await this.runStripeProjectsCli(buildAddArgs(tool.upstreamSlug, resourceName), 60000);
+            addRes = await this.runStripeProjectsCli(buildAddArgs(tool.upstreamSlug, resourceName), 60000).catch((cliErr) => ({
+                ok: false,
+                error: { message: String(cliErr?.message || cliErr) },
+            }));
         }
         if (addRes.ok === false) {
             const msg = String(addRes.error?.message ||
@@ -2690,28 +3096,36 @@ export class StripeProjectsAdapter {
                 const authUrlMatch = msg.match(/https?:\/\/[^\s"'<>]+/i);
                 const fallbackKeys = Object.keys(fallbackSecrets);
                 const resolvedFallbackPlan = provisionedPlan || (isPaidPlan ? serviceId : parentPlans[0] || "free");
-                return {
-                    output: {
-                        provider: "stripe_projects",
-                        action: "provision",
-                        tool: tool.slug,
-                        upstreamService: tool.upstreamSlug,
-                        resourceName,
-                        provisionedPlan: resolvedFallbackPlan,
-                        billingTier: isPaidPlan ? "paid" : "free",
-                        fundingSource: hasCustomerStripeByok
-                            ? "customer_byok_stripe"
-                            : "muxo_master_wallet",
-                        envVarKeys: fallbackKeys,
-                        vaultSavedKeys: fallbackKeys,
-                        secretKeysSaved: fallbackKeys,
-                        details: {
-                            id: `ext_${tool.providerSlug}_${Date.now()}`,
-                            status: "active",
-                            managedBy: "Muxo Cloud Infrastructure",
-                            ...(authUrlMatch ? { directLinkAuthUrl: authUrlMatch[0] } : {}),
-                        },
+                const fallbackOutput = {
+                    provider: "stripe_projects",
+                    action: "provision",
+                    tool: tool.slug,
+                    upstreamService: tool.upstreamSlug,
+                    resourceName,
+                    provisionedPlan: resolvedFallbackPlan,
+                    billingTier: isPaidPlan ? "paid" : "free",
+                    fundingSource: hasCustomerStripeByok
+                        ? "customer_byok_stripe"
+                        : "muxo_master_wallet",
+                    envVarKeys: fallbackKeys,
+                    vaultSavedKeys: fallbackKeys,
+                    secretKeysSaved: fallbackKeys,
+                    details: {
+                        id: `ext_${tool.providerSlug}_${Date.now()}`,
+                        status: "active",
+                        managedBy: "Muxo Cloud Infrastructure",
+                        ...(authUrlMatch ? { directLinkAuthUrl: authUrlMatch[0] } : {}),
                     },
+                };
+                this.attachHostingDeployment({
+                    tool,
+                    resourceName,
+                    input,
+                    output: fallbackOutput,
+                    secrets: fallbackSecrets,
+                });
+                return {
+                    output: fallbackOutput,
                     provisionedResource: {
                         resourceName,
                         providerSlug: tool.providerSlug,
@@ -2736,21 +3150,29 @@ export class StripeProjectsAdapter {
         }
         const resData = (addRes.data || {});
         const envVarKeys = Object.keys(secrets);
+        const cliOutput = {
+            provider: "stripe_projects",
+            action: "provision",
+            tool: tool.slug,
+            upstreamService: tool.upstreamSlug,
+            resourceName,
+            provisionedPlan: provisionedPlan || (isPaidPlan ? serviceId : parentPlans[0] || "free"),
+            billingTier: isPaidPlan ? "paid" : "free",
+            fundingSource: hasCustomerStripeByok ? "customer_byok_stripe" : "muxo_master_wallet",
+            envVarKeys,
+            vaultSavedKeys: envVarKeys,
+            secretKeysSaved: envVarKeys,
+            details: resData,
+        };
+        this.attachHostingDeployment({
+            tool,
+            resourceName,
+            input,
+            output: cliOutput,
+            secrets,
+        });
         return {
-            output: {
-                provider: "stripe_projects",
-                action: "provision",
-                tool: tool.slug,
-                upstreamService: tool.upstreamSlug,
-                resourceName,
-                provisionedPlan: provisionedPlan || (isPaidPlan ? serviceId : parentPlans[0] || "free"),
-                billingTier: isPaidPlan ? "paid" : "free",
-                fundingSource: hasCustomerStripeByok ? "customer_byok_stripe" : "muxo_master_wallet",
-                envVarKeys,
-                vaultSavedKeys: envVarKeys,
-                secretKeysSaved: envVarKeys,
-                details: resData,
-            },
+            output: cliOutput,
             provisionedResource: {
                 resourceName,
                 providerSlug: tool.providerSlug,