@muxoai/platform 1.4.1 → 1.4.3

package/dist/ui/design-tokens.js

@@ -167,7 +167,7 @@ a{color:var(--color-accent);text-underline-offset:4px}
 @media(prefers-reduced-motion:reduce){*,*::before,*::after{animation:none!important;transition:none!important;scroll-behavior:auto!important}}
 `;
 /** Runs before first paint so the saved theme never flashes. */
-export const muxoThemeBootstrap = `(function(){var t=null;try{t=localStorage.getItem("${THEME_STORAGE_KEY}")}catch(e){}var d=t==="dark"?"dark":"light";document.documentElement.dataset.theme=d;var m=document.querySelector('meta[name="theme-color"]');if(m)m.setAttribute("content",d==="dark"?"${muxoThemes.dark.bg}":"${muxoThemes.light.bg}");})();`;
+export const muxoThemeBootstrap = `(function(){var t=null;try{t=localStorage.getItem("${THEME_STORAGE_KEY}")}catch(e){}var d=t==="light"?"light":"dark";document.documentElement.dataset.theme=d;var m=document.querySelector('meta[name="theme-color"]');if(m)m.setAttribute("content",d==="dark"?"${muxoThemes.dark.bg}":"${muxoThemes.light.bg}");})();`;
 /** Muxo's own mark (same markup as web/vendor/packages/runtime/src/brand.ts). */
 export const muxoMark = `<svg viewBox="0 0 24 24" fill="none" aria-hidden="true" focusable="false"><g stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M2 5h6l7 7"/><path d="M2 12h13"/><path d="M2 19h6l7-7"/><path d="M15 12h4"/></g><rect x="19" y="10" width="4" height="4" rx="1" fill="var(--color-button-primary, #0071e3)"/></svg>`;
 export const iconPaths = {

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const MUXO_VERSION = "1.4.1";
+export declare const MUXO_VERSION = "1.4.3";

package/dist/version.js

@@ -1 +1 @@
-export const MUXO_VERSION = "1.4.1";
+export const MUXO_VERSION = "1.4.3";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@muxoai/platform",
-  "version": "1.4.1",
+  "version": "1.4.3",
   "description": "Muxo — Unified Execution, Provisioning & Governance Platform over Composio, Stripe Projects, Microsoft Agent Governance & Supermemory",
   "private": false,
   "license": "MIT",
@@ -57,7 +57,8 @@
     "dev": "tsx watch src/server.ts",
     "cli": "tsx src/cli.ts",
     "mcp": "tsx src/cli.ts mcp",
-    "test": "node --no-warnings --import tsx --test tests/*.test.ts"
+    "test": "node --no-warnings --import tsx --test tests/*.test.ts",
+    "test:browser": "node --no-warnings --import tsx --test tests/browser-cli-harness.test.ts"
   },
   "engines": {
     "node": ">=22.0.0"

package/plugins/muxo/.claude-plugin/plugin.json

@@ -1,9 +1,9 @@
 {
   "name": "muxo",
-  "version": "1.4.1",
+  "version": "1.4.3",
   "description": "Governed agent execution across 1,000+ Connected Apps (managed OAuth handoff), Instant Tools (search, scrape, crawl, SEO audit), live Cloud Infrastructure provisioning, Workspace Memory recall, and verifiable audit records.",
   "author": {
-    "name": "Muxo",
+    "name": "Muxo AI LLC",
     "email": "founders@muxo.ai",
     "url": "https://muxo.ai"
   },

package/plugins/muxo/.codex-plugin/plugin.json

@@ -1,9 +1,9 @@
 {
   "name": "muxo",
-  "version": "1.4.1",
-  "description": "Your agent decides what to do — Muxo governs, provisions, remembers, and executes it. Unified access to 1,000+ Connected Apps (managed OAuth handoff), Instant Tools (search, scrape, crawl, SEO audit), live Cloud Infrastructure provisioning (Postgres, Redis, SQLite, Storage), Workspace Memory recall, and verifiable audit records through the hosted app or local CLI.",
+  "version": "1.4.3",
+  "description": "Your agent decides what to do — Muxo governs, provisions, remembers, and executes it. Unified access to 1,000+ Connected Apps (managed OAuth handoff), Instant Tools (search, scrape, crawl, SEO audit), live Cloud Infrastructure provisioning (Postgres, Redis, SQLite, Storage), Workspace Memory recall, and verifiable audit records.",
   "author": {
-    "name": "Muxo",
+    "name": "Muxo AI LLC",
     "email": "founders@muxo.ai",
     "url": "https://muxo.ai"
   },
@@ -29,12 +29,19 @@
   "skills": "./skills/",
   "mcpServers": "./.mcp.json",
   "apps": "./.app.json",
-  "onboardingSkill": "./skills/setup/SKILL.md",
+  "extensions": {
+    "com.openai": {
+      "onboardingSkill": "./skills/setup/SKILL.md",
+      "publication": {
+        "release_notes": "Muxo v1.4.3: Unified governed execution across 1,000+ Connected Apps, Instant web/SEO tools, 94 Stripe Projects Cloud Infrastructure services, MCP 2026-07-28 compliance, and Workspace Memory."
+      }
+    }
+  },
   "interface": {
     "displayName": "Muxo",
     "shortDescription": "Governed SaaS, cloud & memory",
-    "longDescription": "Discover, plan, authorize via OAuth handoff, and execute governed actions across 1,000+ Connected Apps (GitHub, Gmail, Slack, Notion, Linear), Instant Tools (web search, scrape, multi-page crawl, technical SEO audit), and live Cloud Infrastructure (Neon Postgres, Turso SQLite, Supabase, Cloudflare, Vercel) with Workspace Memory recall and verifiable audit logs.",
-    "developerName": "Muxo",
+    "longDescription": "Discover, plan, authorize via OAuth handoff, and execute governed actions across 1,000+ Connected Apps (GitHub, Gmail, Slack, Notion, Linear), Instant Tools (web search, scrape, multi-page crawl, technical SEO audit), and live Cloud Infrastructure (Turso SQLite, Neon Postgres, Supabase, Upstash Redis, Resend) with Workspace Memory recall and verifiable audit logs.",
+    "developerName": "Muxo AI LLC",
     "category": "Productivity",
     "capabilities": [
       "Interactive",
@@ -46,8 +53,8 @@
     "termsOfServiceURL": "https://muxo.ai/terms",
     "defaultPrompt": [
       "Audit https://muxo.ai for technical SEO and crawl its top pages.",
-      "Connect my GitHub or Gmail account and open a tracking issue for our next release.",
-      "Provision a free Turso SQLite database and pull the credentials into .env.muxo."
+      "Connect my Gmail or GitHub account via OAuth handoff and fetch recent items.",
+      "Provision a Turso SQLite database and store its connection secrets in the Muxo Vault."
     ],
     "composerIcon": "./assets/logo.png",
     "logo": "./assets/logo.png",

package/plugins/muxo/.cursor-plugin/plugin.json

@@ -0,0 +1,30 @@
+{
+  "name": "muxo",
+  "description": "Your agent decides what to do — Muxo governs, provisions, remembers, and executes it. Connect and operate 1,000+ external apps via managed OAuth, zero-auth Instant Tools (web search, scrape, crawl, SEO audit, remote workbench), live Cloud Infrastructure provisioning (Stripe Projects), and Workspace Memory from Cursor.",
+  "version": "1.4.3",
+  "mcpServers": "../mcp.json",
+  "skills": "../skills/",
+  "author": {
+    "name": "Muxo AI LLC",
+    "email": "founders@muxo.ai",
+    "url": "https://muxo.ai"
+  },
+  "homepage": "https://muxo.ai",
+  "repository": "https://github.com/muxo-ai/muxo",
+  "license": "MIT",
+  "keywords": [
+    "muxo",
+    "mcp",
+    "cursor",
+    "composio",
+    "stripe-projects",
+    "integrations",
+    "oauth",
+    "infrastructure",
+    "governance",
+    "supermemory",
+    "automation",
+    "productivity"
+  ],
+  "logo": "../assets/logo.svg"
+}

package/plugins/muxo/hooks/session-start.sh

@@ -23,10 +23,22 @@ if (command -v muxo >/dev/null 2>&1 || [ -f "$REPO_CLI" ]); then
   (
     tmp="$(mktemp "${CACHE}.XXXXXX" 2>/dev/null)" || exit 0
     printf '%s\n' \
-      github gmail slack notion linear jira hubspot calendar stripe \
-      neon supabase turso upstash cloudflare vercel prisma mongodb \
-      hackernews dns supermemory governance >"$tmp" 2>/dev/null
+      github gmail slack notion linear jira hubspot calendar googlecalendar \
+      discord googledrive airtable salesforce zendesk shopify pagerduty sentry \
+      stripe neon supabase turso upstash cloudflare vercel prisma mongodb \
+      planetscale clickhouse chroma clerk workos auth0 resend posthog datadog \
+      inngest railway flyio render netlify herenow e2b daytona browserbase steel \
+      exa firecrawl perplexity openrouter elevenlabs cloudinary agentmail twilio \
+      hackernews dns seo crawl scrape workbench supermemory governance guardrail receipt >"$tmp" 2>/dev/null
+    if command -v jq >/dev/null 2>&1; then
+      ( run_muxo search "" --json 2>/dev/null \
+          | jq -r '(.tools // .)[]? | .provider // empty, .slug // empty' \
+          | tr '[:upper:]._' '[:lower:]\n\n' >>"$tmp" 2>/dev/null ) &
+      fpid=$!
+      wait "$fpid" 2>/dev/null || true
+    fi
     if [ -s "$tmp" ]; then
+      sort -u "$tmp" >"${tmp}.u" 2>/dev/null && mv -f "${tmp}.u" "$tmp" 2>/dev/null || true
       mv -f "$tmp" "$CACHE" 2>/dev/null || rm -f "$tmp" 2>/dev/null
     else
       rm -f "$tmp" 2>/dev/null

package/plugins/muxo/hooks/user-prompt-submit.sh

@@ -32,7 +32,20 @@ done <"$CACHE"
 
 [ "$matched" -eq 1 ] || exit 0
 
-line="You mentioned a SaaS app, cloud infrastructure provider, or memory/governance operation that Muxo governs. Prefer the local Muxo CLI (\`muxo search\`, \`muxo link <provider> --wait\`, \`muxo exec\`, \`muxo env pull\`) in terminal sessions, or use callable hosted Muxo MCP tools (\`search_tools\`, \`plan_action\`, \`start_connection\`, \`wait_for_connection\`, \`execute_*\`) when in hosted mode. Never replay an uncertain write or provisioning call through the other surface."
+lane_hint=""
+case "$norm" in
+  *" turso "*|*" neon "*|*" supabase "*|*" upstash "*|*" vercel "*|*" cloudflare "*|*" netlify "*|*" render "*|*" railway "*|*" flyio "*|*" clerk "*|*" workos "*|*" resend "*)
+    lane_hint=" For Stripe Projects cloud infrastructure (\`resource.*\`), provision directly via \`muxo exec resource.<provider>.<service> --approve\` or MCP \`plan_action\` + \`execute_provisioning\` (never use OAuth handoff for \`resource.*\`)."
+    ;;
+  *" seo "*|*" crawl "*|*" scrape "*|*" dns "*|*" hackernews "*|*" workbench "*)
+    lane_hint=" For zero-OAuth Composio Instant tools (\`instant.*\`), run directly via \`muxo exec instant.<tool>\` or MCP \`plan_action\` + \`execute_read\`."
+    ;;
+  *" github "*|*" gmail "*|*" slack "*|*" notion "*|*" linear "*|*" jira "*|*" hubspot "*|*" calendar "*|*" googlecalendar "*|*" discord "*|*" airtable "*|*" salesforce "*)
+    lane_hint=" For Connected Apps (\`app.*\`), use \`muxo link <provider> --wait\` or MCP \`start_connection\` + \`wait_for_connection\` if OAuth handoff is required."
+    ;;
+esac
+
+line="You mentioned a SaaS app, zero-OAuth Instant tool, cloud infrastructure provider, or memory/governance operation that Muxo governs. Prefer the local Muxo CLI (\`muxo do \"<instruction>\"\`, \`muxo search\`, \`muxo link <provider> --wait\`, \`muxo exec\`, \`muxo env pull\`) in terminal sessions, or use callable hosted Muxo MCP tools (\`search_tools\`, \`plan_action\`, \`start_connection\`, \`wait_for_connection\`, \`execute_*\`) when in hosted mode.${lane_hint} Never replay an uncertain write or provisioning call through the other surface."
 
 if command -v jq >/dev/null 2>&1; then
   jq -n --arg c "$line" \

package/plugins/muxo/mcp.json

@@ -4,16 +4,6 @@
     "muxo": {
       "type": "streamable-http",
       "url": "https://api.muxo.ai/mcp",
-      "oauth": {
-        "clientId": "muxo-openai-plugin",
-        "callbackPort": 3118,
-        "scopes": [
-          "muxo:mcp",
-          "muxo:read",
-          "muxo:execute",
-          "muxo:provision"
-        ]
-      },
       "extensions": {
         "com.openai": {
           "auth": {

package/plugins/muxo/plugin.json

@@ -1,10 +1,10 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "muxo",
-  "version": "1.4.1",
+  "version": "1.4.3",
   "description": "Your agent decides what to do — Muxo governs, provisions, remembers, and executes it. Unified access to 1,000+ Connected Apps (managed OAuth handoff), Instant Tools (search, scrape, crawl, SEO audit), live Cloud Infrastructure provisioning (Postgres, Redis, SQLite, Storage), Workspace Memory recall, and verifiable audit records.",
   "author": {
-    "name": "Muxo",
+    "name": "Muxo AI LLC",
     "email": "founders@muxo.ai",
     "url": "https://muxo.ai"
   },
@@ -35,7 +35,7 @@
         "displayName": "Muxo",
         "shortDescription": "Governed SaaS, cloud & memory",
         "longDescription": "Discover, plan, authorize via OAuth handoff, and execute governed actions across 1,000+ Connected Apps (GitHub, Gmail, Slack, Notion, Linear), Instant Tools (web search, scrape, multi-page crawl, technical SEO audit), and live Cloud Infrastructure (Turso SQLite, Neon Postgres, Supabase, Upstash Redis, Resend) with Workspace Memory recall and verifiable audit logs.",
-        "developerName": "Muxo",
+        "developerName": "Muxo AI LLC",
         "category": "Productivity",
         "capabilities": [
           "Interactive",
@@ -109,7 +109,7 @@
         "commerce_description": "This plugin does not sell retail products or process consumer checkout inside ChatGPT."
       },
       "publication": {
-        "release_notes": "Muxo v1.4.1: Unified governed execution across 1,000+ Connected Apps, Instant web/SEO tools, Cloud Infrastructure provisioning, and Workspace Memory."
+        "release_notes": "Muxo v1.4.3: Unified governed execution across 1,000+ Connected Apps, Instant web/SEO tools, 94 Stripe Projects Cloud Infrastructure services, MCP 2026-07-28 compliance, and Workspace Memory."
       }
     }
   }

package/plugins/muxo/skills/muxo/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: muxo
-description: Route governed Muxo work through the hosted Muxo MCP server (`https://api.muxo.ai/mcp`), the live Muxo HTTP API (`https://api.muxo.ai`), or the local Muxo CLI. Use when a user wants to read or act on external SaaS services via Composio Connected Apps (GitHub, Gmail, Slack, Notion, Linear, Jira, HubSpot, Google Calendar, Google Drive, Discord, Airtable, Salesforce, and 1,000+ apps), complete OAuth handoff (`start_connection`, `wait_for_connection`, `connection_status`), provision live cloud infrastructure via Stripe Projects (`resource.*` for Turso SQLite, Neon Postgres, Supabase, Upstash Redis, Cloudflare Workers, Vercel, Prisma, Clerk, WorkOS, PlanetScale, ClickHouse, Chroma, E2B, Browserbase, Resend, Sentry, PostHog, Datadog, Railway, Fly.io), manage Stripe credits & subscriptions (`billing.*`), run zero-OAuth Instant tools (`instant.*` for web search, scrape, crawl, SEO audit, DNS, Hacker News), recall workspace context from Muxo Workspace Memory, or verify cryptographic execution receipts.
+description: "Route governed Muxo work through the hosted Muxo MCP server, the live Muxo HTTPS API, or the local Muxo CLI. Use when a user wants to read or act on external SaaS services via Connected Apps (GitHub, Gmail, Slack, Notion, Linear, Jira, HubSpot, Google Calendar, Discord, Airtable, Salesforce, and 1,000+ apps), complete OAuth handoff, provision live cloud infrastructure (Turso SQLite, Neon Postgres, Supabase, Upstash Redis, Resend), run zero-OAuth Instant tools (web search, scrape, crawl, SEO audit, DNS, Hacker News), recall Workspace Memory, or verify cryptographic execution receipts."
 ---
 
 # Muxo
@@ -14,7 +14,7 @@ Choose the execution surface available in the current session, and NEVER check f
    - If these MCP tools are present in the session, call them directly! Do NOT run bash commands to check if `muxo` CLI is installed first. Read [references/mcp.md](references/mcp.md).
 2. **Direct HTTPS API / JSON-RPC Fallback (when inside ChatGPT/sandbox with `curl` or Python/fetch access, and MCP tools are not bound in the session)**:
    - If the user installed the skill without connecting the MCP server at `https://chatgpt.com/plugins`, you can STILL execute every Muxo tool live over HTTPS against `https://api.muxo.ai/mcp` or `https://api.muxo.ai/api/v1/do`!
-   - Works for **Zero-OAuth Instant Tools (`instant.*`)**, **Composio Connected Apps & OAuth Handoff (`app.*`, `start_connection`, `wait_for_connection`)**, and **Stripe Projects Cloud Provisioning & Billing (`resource.*`, `billing.*`)**.
+   - Works for **Zero-OAuth Instant Tools (`instant.*`)**, **Muxo Connected Apps & OAuth Handoff (`app.*`, `start_connection`, `wait_for_connection`)**, and **Stripe Projects Cloud Provisioning & Billing (`resource.*`, `billing.*`)**.
    - Example one-shot JSON-RPC calls over HTTPS:
      ```bash
      # 1) Zero-OAuth Instant Tool (e.g. SEO Audit or Multi-Page Web Crawl)
@@ -23,7 +23,7 @@ Choose the execution surface available in the current session, and NEVER check f
      curl -s -X POST https://api.muxo.ai/mcp -H "Content-Type: application/json" \
        -d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"execute_read","arguments":{"plan_id":"<PLAN_ID>"}}}'
 
-     # 2) Composio Connected Apps & External User OAuth Handoff (GitHub, Gmail, Slack, Notion, Linear, etc.)
+     # 2) Muxo Connected Apps & External User OAuth Handoff (GitHub, Gmail, Slack, Notion, Linear, etc.)
      curl -s -X POST https://api.muxo.ai/mcp -H "Content-Type: application/json" \
        -d '{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"start_connection","arguments":{"provider":"gmail"}}}'
      # Share connection.redirectUrl with the user, then verify connection status:
@@ -49,6 +49,8 @@ Choose the execution surface available in the current session, and NEVER check f
      Add a Git repository or local marketplace directory containing `.agents/plugins/marketplace.json` and enable `[plugins."muxo@muxo"]` in `.codex/config.toml`, or configure `[mcp_servers.muxo]` (`url = "https://api.muxo.ai/mcp"`) in `~/.codex/config.toml`.
    - **Claude Desktop**:
      Configure hosted MCP via **Settings → Connectors → Add custom connector** (`https://api.muxo.ai/mcp`), or configure the local stdio server (`npx -y @muxoai/cli@latest mcp`, requires Node.js 22+) in `claude_desktop_config.json`.
+   - **Cursor**:
+     Install from the Cursor Plugin Marketplace (`/add-plugin muxo`), or add `"muxo": { "url": "https://api.muxo.ai/mcp" }` to `.cursor/mcp.json`.
 
 ## Fast-Path Slugs & Workflows across Muxo's 4 Pillars
 
@@ -56,12 +58,13 @@ Choose the execution surface available in the current session, and NEVER check f
 - Technical SEO Audit: `instant.seo.audit` — `{"url": "https://muxo.ai"}`
 - Multi-Page Web Crawl: `instant.web.crawl` — `{"url": "https://muxo.ai", "maxPages": 5}`
 - Web Page Scrape: `instant.web.scrape` — `{"url": "https://muxo.ai"}`
-- Live Web Search: `instant.web.search` — `{"query": "..."}`
+- Live Web Search (Composio Instant): `instant.web.search` — `{"query": "..."}`
+- Composio Remote Workbench (Python sandbox): `instant.composio.workbench` — `{"code_to_execute": "print(2 + 2)", "thought": "Compute summary"}`
 - DNS Lookup: `instant.dns.lookup` — `{"domain": "muxo.ai", "type": "A"}`
 - GitHub Repo Intel: `instant.github.repo_intel` — `{"owner": "openai", "repo": "openai-node"}`
 - Hacker News Top Stories: `instant.hackernews.top_stories` — `{"limit": 5}`
 
-### 2. Composio Connected Apps & OAuth Handoff (`composio_sdk` → `execute_read` / `execute_write`)
+### 2. Muxo Connected Apps & OAuth Handoff (`composio_sdk` → `execute_read` / `execute_write`)
 Supports 1,000+ SaaS toolkits dynamically via `search_tools({ query: "...", lane: "composio_sdk", toolkit: "<app>" })` or any `app.<provider>.<action>` slug:
 - **Gmail**: `app.gmail.fetch_emails` (`{"query": "is:inbox", "max_results": 5}`, `execute_read`), `app.gmail.send_email` (`{"recipient_email": "...", "subject": "...", "body": "..."}`, `execute_write`)
 - **GitHub**: `app.github.list_issues` (`{"owner": "...", "repo": "..."}`, `execute_read`), `app.github.create_issue` (`{"owner": "...", "repo": "...", "title": "...", "body": "..."}`, `execute_write`)
@@ -81,10 +84,12 @@ Supports 1,000+ SaaS toolkits dynamically via `search_tools({ query: "...", lane
   3. Poll `wait_for_connection({ provider: "<provider>" })` (or `connection_status({ provider: "<provider>" })`) until `ready: true` (`status === "active"`).
   4. Resume the original `plan.id` with `execute_read` or `execute_write`.
 
-### 3. Stripe Projects Cloud Infrastructure Provisioning (`stripe_projects` → `execute_provisioning`)
-Provision live cloud databases, caches, auth, sandboxes, and hosting through Muxo's Stripe Projects catalog; connection strings and API keys are automatically encrypted in the AES-256-GCM Muxo Vault (`envVarKeys`):
+### 3. Stripe Projects Cloud Infrastructure Provisioning (`stripe_projects` → `execute_provisioning`, Zero OAuth Handoff)
+Provision live cloud databases, caches, auth, sandboxes, and hosting through Muxo's Stripe Projects catalog; connection strings, API keys, and deployment URLs are automatically encrypted in the AES-256-GCM Muxo Vault (`envVarKeys`):
+- **IMPORTANT — Never Use OAuth Handoff for Stripe Projects**: Cloud Infrastructure & Hosting providers (`vercel`, `cloudflare`, `netlify`, `render`, `herenow`, `railway`, `flyio`, `turso`, `neon`, `supabase`, `upstash`, `resend`, `clerk`, `workos`, etc.) are **already connected** via Stripe Projects (`lane: "stripe_projects"`, `requiresAuth: false`). NEVER call `start_connection` or `app.vercel.*` for cloud infrastructure or static site deployment — call `plan_action` with `resource.<provider>.*` and `execute_provisioning` directly!
 - **Databases & Data**: `resource.turso.database`, `resource.neon.postgres`, `resource.supabase.project`, `resource.upstash.redis`, `resource.prisma.database`, `resource.planetscale.postgresql`, `resource.clickhouse.clickhouse`, `resource.chroma.database`
-- **Cloud Hosting & Edge**: `resource.cloudflare.worker`, `resource.vercel.project`, `resource.railway.hosting`, `resource.flyio.app`, `resource.render.static_site`, `resource.netlify.project`, `resource.herenow.hosting`
+- **Cloud Hosting & One-Shot Static Site Deployment**: `resource.cloudflare.worker`, `resource.vercel.project`, `resource.railway.hosting`, `resource.flyio.app`, `resource.render.static_site`, `resource.netlify.project`, `resource.herenow.hosting`
+  - Pass `html` (or `files: {"index.html": "<!doctype html>..."}`) directly in `input` to publish a live static site in one shot without OAuth: `{"resource_name": "muxo-landing", "plan": "free", "html": "<!doctype html><html>...</html>"}` → `plan_action` → `execute_provisioning` → returns `liveUrl` & `deploymentUrl` (`https://api.muxo.ai/sites/muxo-landing`).
 - **Auth & Identity**: `resource.clerk.auth`, `resource.workos.auth`, `resource.auth0.client`
 - **AI, Search, Browser & Sandboxes**: `resource.e2b.sandboxes`, `resource.daytona.sandbox`, `resource.browserbase.project`, `resource.steel.browser`, `resource.exa.search`, `resource.firecrawl.api`, `resource.perplexity.api`, `resource.openrouter.api`, `resource.supermemory.memory`, `resource.elevenlabs.tts`
 - **Email, Comms, Observability & Commerce**: `resource.resend.email`, `resource.agentmail.api`, `resource.agentphone.number`, `resource.twilio.email`, `resource.sentry.project`, `resource.posthog.analytics`, `resource.datadog.observability`, `resource.inngest.app`, `resource.cloudinary.media`, `resource.shopify.store`, `resource.spaceship.domain`
@@ -123,14 +128,18 @@ Users can operate every Muxo pillar in plain English through `POST /api/v1/do` (
 - REST equivalents: `POST /api/v1/memory` (`{"prompt": "Remember ..."}`), `GET /api/v1/memory`, `POST /api/v1/memory/forget` (`{"query": "..."}`), `GET /api/v1/memory/facts`.
 
 ### Governance & Policy
-- **Set guardrails in plain English**: "Hey Muxo, don't go over 25 credits per run", "Hey Muxo, don't use resource.projects.deprovision", "Hey Muxo, ask me before changing anything", "Hey Muxo, read-only mode", "Never send emails", "Block destructive SQL", "Free tools only" — via `POST /api/v1/do` (returns `status: "guardrail_applied"`) or `POST /api/v1/guardrails` with `{"prompt": "..."}` (also accepts `rule`, `instruction`, or `naturalLanguageRule`). Responses include `guardrail` + `plainEnglishGuardrails` (human-readable rules, headline, and posture label). `{"reset": true}` restores the Safe Default; `GET /api/v1/guardrails` lists active rules.
-- **Inspect**: "What are our current guardrails?", "Explain governance status" — returns policy, kill-switch state, and trust score in plain language.
-- **Emergency stop / resume**: "Emergency stop because we saw anomalous spend", "Pause all agents", "Resume all agents".
-- **Prompt-injection scan**: "Scan this text for prompt injection: <text>" — runs the OWASP ASI-06 context-poisoning detector.
-- REST equivalents: `GET/POST /api/v1/policy`, `GET/POST /api/v1/guardrails`, `GET /api/v1/governance`, `POST /api/v1/governance/kill-switch`, `POST /api/v1/governance/scan-context`.
-
-### Context
-- **Inspect**: "Show my workspace context", "Explain current run context" — returns credits, learned defaults, active guardrails, provisioned resources, and a ready-to-use `llmSystemPrompt` block.
+- **Set guardrails in plain English**: "Hey Muxo, don't go over 25 credits per run", "Only allow sending emails to @muxo.ai", "Require approval for Stripe refunds over $50, auto-approve under $50", "Hey Muxo, ask me before changing anything", "Hey Muxo, read-only mode", "Never send emails", "Block destructive SQL", "Free tools only" — via MCP `get_run_context({ action: "set_guardrail", prompt: "...", parameter_rules: [...] })`, `POST /api/v1/do` (returns `status: "guardrail_applied"`), or `POST /api/v1/guardrails` with `{"prompt": "..."}`. Responses include `guardrail`, `plainEnglishGuardrails`, and `llmPolicyBrief` (`riskLaneMatrix`, `parameterRules[].howToComply`, `llmSystemDirective`, `agentControlCheatsheet`).
+- **Dry-run policy simulation (pre-flight check before planning)**: Call MCP `get_run_context({ action: "check_policy", tool_slug: "app.gmail.send_email", input: { recipient_email: "alice@muxo.ai" } })` or `POST /api/v1/guardrails/check` to test whether a tool call will be `auto_approved`, `pending_approval`, or `blocked`, see `autoFilledInput` from workspace memory, and receive `remediationForLlm` + `nextToolCalls`.
+- **Reset guardrails**: Call MCP `get_run_context({ action: "reset_guardrails" })`, `POST /api/v1/guardrails/reset`, or `POST /api/v1/do` with `{"prompt": "reset guardrails"}` to restore the Safe Default policy.
+- **Inspect**: "What are our current guardrails?", "Explain governance status" — or call MCP `get_run_context({ action: "governance_status" })` / read resource `muxo://policy/brief` (`muxo___get_organization({ company_context: {} })` on strict `/v1` connectors).
+- **Emergency stop / resume**: Call MCP `get_run_context({ action: "kill_switch", enabled: true, reason: "..." })` or say "Pause all agents" / "Resume all agents".
+- **Prompt-injection scan**: Call MCP `get_run_context({ action: "scan_context", prompt: "<untrusted_text>" })` or say "Scan this text for prompt injection: <text>" — runs the OWASP ASI-06 context-poisoning detector.
+- REST equivalents: `GET/POST /api/v1/policy`, `GET/POST /api/v1/guardrails`, `POST /api/v1/guardrails/check`, `POST /api/v1/guardrails/reset`, `GET /api/v1/governance`, `POST /api/v1/governance/kill-switch`, `POST /api/v1/governance/scan-context`.
+
+### Context, MCP Resources & Prompts
+- **Inspect**: "Show my workspace context", "Explain current run context", or call `get_run_context({ query: "..." })` — returns credits, learned defaults, active guardrails, `llmPolicyBrief`, provisioned resources, and a ready-to-use `llmSystemPrompt` block.
+- **MCP Resources (`resources/read`)**: `muxo://policy/brief`, `muxo://governance/policy`, `muxo://context`, `muxo://memory/graph`.
+- **MCP Prompts (`prompts/get`)**: `context`, `policy_guardrails` (accepts optional `tool_slug`), `governed_execution`, `security_audit`.
 - REST equivalent: `GET/POST /api/v1/context`.
 
 ### Receipts

package/plugins/muxo/skills/muxo/references/cli.md

@@ -32,8 +32,12 @@ Prefer this path in terminal, Codex, Claude Code, and Droid environments when th
    muxo wait github --timeout 30
    ```
 
-4. **Plan and execute governed operations**:
+4. **Plan and execute governed operations (or route natural language via `muxo do`)**:
    ```bash
+   # Plain-English natural language router across Instant, Connected Apps, Cloud Provisioning, and Memory:
+   muxo do "Search the web for Composio V3 triggers and summarize"
+   muxo do "Provision a Turso SQLite database named app-db" --approve
+
    # One-step governed plan + execute (pass --approve for high-risk/provisioning):
    muxo exec instant.hackernews.top_stories --input '{"limit":5}'
    muxo exec resource.turso.database --input '{"resource_name":"app-db"}' --approve

package/plugins/muxo/skills/muxo/references/mcp.md

@@ -4,13 +4,18 @@ Use this path in ChatGPT web/app, when no usable terminal exists, or when the us
 
 ## Workflow across all 4 Pillars
 
-1. **Context & Memory Recall**:
-   - Call `get_run_context({ query })` when workspace facts, prior execution history, provisioned resources, or workspace safety status are relevant to the task.
+1. **Context, Memory & Policy Control Plane (`get_run_context`)**:
+   - **Recall context & policy brief**: `get_run_context({ query })` returns workspace memories, `activeDefaults`, `plainEnglishGuardrails`, `llmPolicyBrief` (`riskLaneMatrix`, `parameterRules[].howToComply`, `llmSystemDirective`), and `llmSystemPrompt`. (On strict `/v1` connectors where `get_run_context` requires a `run_id`, call `get_organization({ company_context: {} })` to read the policy & memory brief in `company_context.packet`).
+   - **Save or forget memory**: `get_run_context({ action: "remember", prompt: "Remember our default GitHub repo is acme/api" })` or `get_run_context({ action: "forget", query: "acme/api" })`.
+   - **Set or reset guardrails**: `get_run_context({ action: "set_guardrail", prompt: "Only allow sending emails to @muxo.ai" })` or `get_run_context({ action: "reset_guardrails" })`.
+   - **Dry-run policy simulation**: `get_run_context({ action: "check_policy", tool_slug: "app.gmail.send_email", input: { recipient_email: "user@example.com" } })` evaluates workspace policy, parameter rules, and memory auto-fill without creating a plan, returning `approvalStatus`, `remediationForLlm`, and `nextToolCalls`.
+   - **Governance, kill switch & context scan**: `get_run_context({ action: "governance_status" })`, `get_run_context({ action: "kill_switch", enabled: true, reason: "..." })`, and `get_run_context({ action: "scan_context", prompt: "..." })`.
+   - **MCP Resources, Prompts & OpenAI Plugin UI Widgets**: Read `muxo://policy/brief`, `muxo://governance/policy`, `muxo://context`, or `muxo://memory/graph` via `resources/read`, fetch `policy_guardrails` / `context` via `prompts/get`, or render interactive inline cards, tool catalog carousels, OAuth/approval handoff CTAs, and fullscreen receipt inspectors via `ui://widget/muxo-card.html` (`text/html+skybridge`) and `ui://widget/muxo-app.html` (`text/html;profile=mcp-app`).
 2. **Discovery & Schema Inspection**:
    - Call `search_tools({ query, lane, toolkit })` across:
-     - **Instant Tools (`lane: "composio_instant"`)**: `instant.seo.audit`, `instant.web.crawl`, `instant.web.scrape`, `instant.web.search`, `instant.dns.lookup`, `instant.github.repo_intel`, `instant.hackernews.top_stories`
-     - **Composio Connected Apps (`lane: "composio_sdk"`)**: 1,000+ SaaS apps (`app.github.*`, `app.gmail.*`, `app.slack.*`, `app.notion.*`, `app.linear.*`, `app.googlecalendar.*`, `app.jira.*`, `app.hubspot.*`, `app.discord.*`, `app.googledrive.*`, `app.airtable.*`, `app.salesforce.*`, `app.zendesk.*`, `app.shopify.*`, `app.pagerduty.*`, `app.sentry.*`, plus live Composio `/api/v3/tools` search)
-     - **Stripe Projects Cloud Infrastructure (`lane: "stripe_projects"`)**: 36+ infrastructure providers (`resource.turso.database`, `resource.neon.postgres`, `resource.supabase.project`, `resource.upstash.redis`, `resource.cloudflare.worker`, `resource.vercel.project`, `resource.prisma.database`, `resource.clerk.auth`, `resource.workos.auth`, `resource.auth0.client`, `resource.planetscale.postgresql`, `resource.clickhouse.clickhouse`, `resource.chroma.database`, `resource.e2b.sandboxes`, `resource.daytona.sandbox`, `resource.browserbase.project`, `resource.steel.browser`, `resource.exa.search`, `resource.firecrawl.api`, `resource.perplexity.api`, `resource.openrouter.api`, `resource.supermemory.memory`, `resource.resend.email`, `resource.sentry.project`, `resource.posthog.analytics`, `resource.datadog.observability`, `resource.inngest.app`, `resource.railway.hosting`, `resource.flyio.app`, `resource.render.static_site`, `resource.netlify.project`, `resource.herenow.hosting`, `resource.cloudinary.media`, `resource.elevenlabs.tts`, `resource.agentmail.api`, `resource.agentphone.number`, `resource.twilio.email`, `resource.shopify.store`, `resource.spaceship.domain`)
+     - **Instant Tools (`lane: "composio_instant"`)**: `instant.seo.audit`, `instant.web.crawl`, `instant.web.scrape`, `instant.web.search`, `instant.composio.workbench`, `instant.dns.lookup`, `instant.github.repo_intel`, `instant.hackernews.top_stories`
+     - **Muxo Connected Apps (`lane: "composio_sdk"`)**: 1,000+ SaaS apps (`app.github.*`, `app.gmail.*`, `app.slack.*`, `app.notion.*`, `app.linear.*`, `app.googlecalendar.*`, `app.jira.*`, `app.hubspot.*`, `app.discord.*`, `app.googledrive.*`, `app.airtable.*`, `app.salesforce.*`, `app.zendesk.*`, `app.shopify.*`, `app.pagerduty.*`, `app.sentry.*`, plus live Connected Apps catalog search)
+     - **Stripe Projects Cloud Infrastructure (`lane: "stripe_projects"`)**: 73 infrastructure providers / 94 deployable services (`resource.turso.database`, `resource.neon.postgres`, `resource.supabase.project`, `resource.upstash.redis`, `resource.cloudflare.worker`, `resource.vercel.project`, `resource.prisma.database`, `resource.clerk.auth`, `resource.workos.auth`, `resource.auth0.client`, `resource.planetscale.postgresql`, `resource.clickhouse.clickhouse`, `resource.chroma.database`, `resource.e2b.sandboxes`, `resource.daytona.sandbox`, `resource.browserbase.project`, `resource.steel.browser`, `resource.exa.search`, `resource.firecrawl.api`, `resource.perplexity.api`, `resource.openrouter.api`, `resource.supermemory.memory`, `resource.resend.email`, `resource.sentry.project`, `resource.posthog.analytics`, `resource.datadog.observability`, `resource.inngest.app`, `resource.railway.hosting`, `resource.flyio.app`, `resource.render.static_site`, `resource.netlify.project`, `resource.herenow.hosting`, `resource.cloudinary.media`, `resource.elevenlabs.tts`, `resource.agentmail.api`, `resource.agentphone.number`, `resource.twilio.email`, `resource.shopify.store`, `resource.spaceship.domain`, `resource.knock.notifications`, `resource.stripe.sandbox`, `resource.stripe.livemode`, and more)
      - **Stripe Billing (`lane: "stripe_billing"`)**: `billing.credits.topup`, `billing.subscription.upgrade`, `billing.checkout.create`
    - Call `inspect_tool({ tool_slug })` to inspect the JSON input schema, `riskLevel`, and `creditCost`.
 3. **Governed Planning & Human Approval Polling**:
@@ -18,7 +23,7 @@ Use this path in ChatGPT web/app, when no usable terminal exists, or when the us
    - If `plan.approvalStatus === "pending_approval"`, present `humanHandoff.url` (`/approve/<plan.id>`) to the user and poll `get_plan({ plan_id: plan.id, wait_seconds: 15 })` until approved before executing.
 4. **External User OAuth Handoff & Recovery (`composio_sdk` / `app.*`)**:
    - If `plan_action` returns `authHandoff.required: true` (or a connection is missing), share `authHandoff.redirectUrl` (or call `start_connection({ provider })`) so the user can authorize in their browser.
-   - Poll `wait_for_connection({ provider, timeout_seconds: 15 })` or `connection_status({ provider })` until `connected: true` (`status: "active"`), then resume the original `plan.id`.
+   - Poll `connection_status({ provider, wait: true, timeout_seconds: 15 })` until `connected: true` (`status: "active"`), then resume the original `plan.id`.
 5. **Risk-Scoped Execution & Audit Verification**:
    - Call the matching execution tool (`execute_read`, `execute_write`, `execute_admin`, `execute_financial`, `execute_provisioning`, or `execute_destructive`) with `{ plan_id }`.
    - For Stripe Projects provisioning (`execute_provisioning`), connection secrets are automatically saved in the encrypted Muxo Vault and returned by key name in `envVarKeys`.

package/plugins/muxo/skills/muxo-activity-summary/SKILL.md

@@ -0,0 +1,81 @@
+---
+name: muxo-activity-summary
+description: "Generates a comprehensive workspace and company activity summary across connected SaaS apps (Slack, GitHub, Notion, Linear, Gmail, Google Calendar), provisioned Stripe Projects cloud infrastructure, Workspace Memory, and cryptographic execution receipts. Use when the user asks for company updates, daily digest, standup prep, or what is happening across the org."
+---
+
+# Company & Workspace Activity Summary (Muxo MCP / CLI)
+
+Generate a comprehensive summary of company and workspace activity over the last 24 hours (or a user-specified time window) across all connected SaaS apps, cloud infrastructure, and Muxo audit receipts.
+
+## Arguments
+
+- `$ARGUMENTS` — Time period to analyze (default: `"last 24 hours"`). Examples: `"last 24 hours"`, `"last 7 days"`, `"since Monday"`.
+
+## Step 1: Discover Workspace Context & Connected Apps
+
+First, inspect the active workspace context, connected OAuth providers, provisioned infrastructure, and recent runs:
+
+- **Hosted MCP**: Call `get_run_context({ query: "recent activity and connected apps" })` and `get_organization({})`.
+- **Local CLI**: Run `muxo context "recent activity"` and `muxo connectors`.
+
+Check which SaaS apps are connected (`status: "active"`) or try lightweight read plans (`plan_action` -> `execute_read`), skipping any unconnected app silently unless the user explicitly asks to connect it:
+
+| App | Read Tool Slug | What to Fetch |
+|---|---|---|
+| **GitHub** | `app.github.list_issues` / `instant.github.repo_intel` | Recent issues, PRs, merges, repository pulse |
+| **Slack** | `app.slack.list_channels` | Active channels, key discussions, announcements |
+| **Notion** | `app.notion.search_pages` | Recently edited pages, meeting notes, specs |
+| **Linear** | `app.linear.list_issues` | Issues created, updated, completed, or blocked |
+| **Gmail** | `app.gmail.fetch_emails` | Important inbox threads and external communications |
+| **Google Calendar** | `app.googlecalendar.list_events` | Recent meetings and upcoming schedule |
+| **Cloud Infrastructure** | `resource.projects.status` | Active Stripe Projects databases, caches, and deployments |
+
+## Step 2: Gather Activity in Parallel Per Connected Surface
+
+For each connected app (or via parallel subagents when available), run governed read operations (`plan_action` -> `execute_read` on MCP, or `muxo exec <slug>` / `muxo do "<prompt>"` on CLI):
+
+1. **GitHub Activity (`github-activity-summary.md`)**:
+   - Fetch open/updated issues and PR activity across active repositories (`app.github.list_issues` or `instant.github.repo_intel`).
+   - Summarize PRs opened/merged, issues created/closed, and blockers.
+2. **Slack Activity (`slack-activity-summary.md`)**:
+   - List channels (`app.slack.list_channels`) and summarize key decisions, announcements, and open questions.
+3. **Notion Activity (`notion-activity-summary.md`)**:
+   - Search recently updated pages (`app.notion.search_pages` with `{"query": ""}`) and summarize new docs, RFCs, and meeting notes.
+4. **Linear Activity (`linear-activity-summary.md`)**:
+   - Fetch updated issues (`app.linear.list_issues`) grouped by status and team.
+5. **Gmail & Calendar Activity (`comms-activity-summary.md`)**:
+   - Fetch recent threads (`app.gmail.fetch_emails`, `{"query": "newer_than:1d", "max_results": 10}`) and calendar events (`app.googlecalendar.list_events`).
+6. **Muxo Cloud & Governance Digest (`muxo-governance-summary.md`)**:
+   - Check `resource.projects.status` (`execute_read`) and `get_run_context` to summarize newly provisioned databases/deployments, credit usage, active safety guardrails, and verified Ed25519 receipts.
+   - For large multi-source payloads, use `instant.composio.workbench` (`COMPOSIO_REMOTE_WORKBENCH`) to aggregate, deduplicate, and format statistics in Python.
+
+## Step 3: Compile Executive Overview
+
+Present a structured digest:
+
+```markdown
+# Company & Workspace Activity Summary — [Date Range]
+
+## Connected Surfaces Analyzed
+- **SaaS Apps**: [list of connected apps queried]
+- **Cloud Infrastructure**: [active Stripe Projects resources]
+- **Governance & Receipts**: [verified runs / active guardrails]
+
+## Key Highlights
+- [3–5 high-signal takeaways across engineering, product, comms, and infra]
+
+## Detailed Breakdown
+| Surface | Highlights |
+|---|---|
+| GitHub | [1-line summary] |
+| Slack | [1-line summary] |
+| Notion / Linear | [1-line summary] |
+| Gmail / Calendar | [1-line summary] |
+| Cloud & Governance | [1-line summary] |
+```
+
+## Guidelines
+
+- Only query apps that are already connected — do not interrupt a digest with OAuth prompts unless the user asks to connect a missing app.
+- Use read-only execution (`execute_read`) for all activity gathering.
+- Focus on actionable decisions, blockers, and shipped work rather than raw item dumps.

package/plugins/muxo/skills/setup/SKILL.md

@@ -29,7 +29,7 @@ Welcome to **Muxo** — the unified execution, cloud provisioning, contextual me
   - Web search (`instant.web.search`), page scraping (`instant.web.scrape`), multi-page crawling (`instant.web.crawl`), technical SEO audits (`instant.seo.audit`), Hacker News (`instant.hackernews.top_stories`), and DNS lookups (`instant.dns.lookup`).
 - **Connected Apps (`app.*`)** use automatic OAuth handoff:
   - Plan any action (e.g., `app.github.create_issue` or `app.gmail.fetch_emails`) via `plan_action`.
-  - If the app is not connected yet, `plan_action` returns `authHandoff.redirectUrl`. Open that link to authorize, then call `wait_for_connection({ provider })` to resume.
+  - If the app is not connected yet, `plan_action` returns `authHandoff.redirectUrl`. Open that link to authorize, then call `connection_status({ provider, wait: true })` to resume.
 - **Cloud Infrastructure (`resource.*`)** provisions live databases and services through Muxo Cloud Infrastructure:
   - Provision Turso SQLite (`resource.turso.database`), Neon Postgres (`resource.neon.postgres`), Supabase (`resource.supabase.project`), or Upstash Redis (`resource.upstash.redis`) and pull encrypted `.env` credentials via `muxo env pull`.