
Security News
New Study Identifies 53 Slopsquatting Targets Across 5 Frontier LLMs
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.
@muxbot/muxbot
Advanced tools
The cheapest path to high-end agentic AI for teams.
muxbot exposes native agentic AI tool CLIs like Claude Code / Codex through chat surfaces, with each agent running inside its own durable tmux session and ready to behave like a real bot, a real assistant - with SOUL & IDENTITY, not just a coding tool.
Agentic AI is powerful, but only with frontier models. OpenClaw took off because people found many ways to access strong frontier models cheaply through subscription-based OAuth. Recent Anthropic enforcement around third-party and proxy-style usage made that risk harder to ignore.
Meanwhile, the strongest agentic coding tools already come from serious enterprise teams with real investment in model quality, security, safety, and operator controls, especially Claude Code, Codex, and Gemini CLI. That naturally leads to a simple question: why not reuse those agents as they already are, keep them alive in tmux, and add communication channels, team workflows, and more toys around them?
The idea has been stuck in my head since Claude Code introduced agent skills back in October 2025, which opened more possibilities for non-developer workers, and the OpenClaw trend recently only made it harder to ignore. Having played around with Anthropic's Agent SDK to address the agentic AI adoption inside my company but somehow it was not working, not stable, not flexible, not fast enough, and the CLI path now looks like the better choice until now. Now feels like the right time to push that idea.
Every company will likely need an OpenClaw-style strategy over time: a personal agentic assistant for each employee, plus shared agents for each team. muxbot starts from a team-first angle, with Slack and shared agent workflows as the default center of gravity instead of treating team collaboration as a later add-on.
!<command> or /bash <command>. Turns Slack / Telegram to terminal interface on the go.muxbot is a communication bridge for long-lived AI agents, organized around the repository architecture contract:
channels: Slack, Telegram, and future API-compatible surfacesagent-os: agents, sessions, workspaces, commands, attachments, and follow-up policyrunners: tmux today, with ACP, SDK, and other execution backends latercontrol: operator-facing inspection, lifecycle, and debugging flowsconfiguration: the local control plane that wires the system togethertmux is the current stability boundary. One agent maps to one durable runner session in one workspace, and chat surfaces route conversations onto that runtime instead of trying to recreate it.
Choose one setup path.
Packaged CLI path:
Requires Node 20+ in the shell where you run muxbot.
npm install -g @muxbot/muxbot
# ~/.zshrc or ~/.bashrc
export SLACK_APP_TOKEN=...
export SLACK_BOT_TOKEN=...
export TELEGRAM_BOT_TOKEN=...
source ~/.zshrc
# or: source ~/.bashrc
muxbot start --cli codex --bootstrap personal-assistant
If you do not want to install globally, you can also run it directly with npx:
npx @muxbot/muxbot start --cli codex --bootstrap personal-assistant
Local repo path:
Requires Bun for development commands in this repo.
bun install
# ~/.zshrc or ~/.bashrc
export SLACK_APP_TOKEN=...
export SLACK_BOT_TOKEN=...
export TELEGRAM_BOT_TOKEN=...
source ~/.zshrc
# or: source ~/.bashrc
bun run start --cli codex --bootstrap personal-assistant
Fresh config now starts with no configured agents, and first-run muxbot start requires both --cli and --bootstrap before it creates the first default agent.
Fresh config also starts with no preconfigured Slack channels or Telegram groups/topics. Add those routes manually in ~/.muxbot/muxbot.json.
muxbot start now also requires Slack or Telegram token references before it bootstraps anything. By default it looks for SLACK_APP_TOKEN, SLACK_BOT_TOKEN, and TELEGRAM_BOT_TOKEN, but you can pass custom placeholders such as --slack-app-token '${CUSTOM_SLACK_APP_TOKEN}'.
On startup, muxbot now prints which token env names it is checking and whether each one is set or missing.
The easiest setup flow is:
muxbot.The docs in this repo are kept current, including the User Guide, so the agent should have enough context to walk you through setup, configuration, and troubleshooting directly inside the repo.
If you prefer to configure things yourself:
~/.muxbot/muxbot.json and adjust channels, bindings, workspaces, and policies for your environment.muxbot can read them consistently.Channel route setup is manual by design:
Example agent setup:
muxbot start --cli codex --bootstrap personal-assistant
muxbot agents add claude --cli claude --bootstrap team-assistant --bind telegram
muxbot agents bootstrap claude --mode team-assistant --force
muxbot agents list --bindings
Agent setup rules:
agents add requires --cli and currently supports codex and claude.--startup-option is optional; if omitted, muxbot uses the built-in startup options for the selected CLI.--bootstrap accepts personal-assistant or team-assistant and seeds the workspace from templates/openclaw plus the selected customized template.personal-assistant fits one assistant for one human.team-assistant fits one shared assistant for a team, channel, or group workflow.agents bootstrap <agentId> --mode <personal-assistant|team-assistant> bootstraps an existing agent workspace using the agent's configured CLI tool.--force.default agent. If your first agent is not named default, update defaultAgentId and any route agentId values in config.Custom token placeholder setup:
muxbot start \
--cli codex \
--bootstrap personal-assistant \
--slack-app-token CUSTOM_SLACK_APP_TOKEN \
--slack-bot-token CUSTOM_SLACK_BOT_TOKEN
~/.muxbot/muxbot.json exactly as providedCUSTOM_SLACK_APP_TOKEN or '${CUSTOM_SLACK_APP_TOKEN}'muxbot does not expand or print the token values during config generationSLACK_APP_TOKEN, SLACK_BOT_TOKEN, or TELEGRAM_BOT_TOKENmuxbot start can launchExamples:
# ~/.bashrc
export SLACK_APP_TOKEN=...
export SLACK_BOT_TOKEN=...
export TELEGRAM_BOT_TOKEN=...
# ~/.zshrc
export SLACK_APP_TOKEN=...
export SLACK_BOT_TOKEN=...
export TELEGRAM_BOT_TOKEN=...
# custom names are also valid
export CUSTOM_SLACK_APP_TOKEN=...
export CUSTOM_SLACK_BOT_TOKEN=...
export CUSTOM_TELEGRAM_BOT_TOKEN=...
Then reload your shell:
source ~/.bashrc
source ~/.zshrc
https://github.com/longbkit/muxbot, open the repo in Codex or Claude Code, and ask questions about setup or the bootstrap mode choice.muxbot start says no agents are configured, prefer muxbot start --cli codex --bootstrap personal-assistant.muxbot start says no default tokens were found, set Slack or Telegram tokens first using docs/user-guide/channel-accounts.md.muxbot start prints token refs as missing, set those exact env vars in ~/.bashrc or ~/.zshrc, reload the shell, then start again.--slack-app-token, --slack-bot-token, or --telegram-bot-token.muxbot status shows bootstrap=...:missing, the workspace is missing the tool-specific bootstrap file or IDENTITY.md; run muxbot agents bootstrap <agentId> --mode <mode>.muxbot status shows bootstrap=...:not-bootstrapped, finish the workspace bootstrap by reviewing BOOTSTRAP.md, SOUL.md, IDENTITY.md, and the mode-specific files in that workspace.Do you trust the contents of this directory?, keep trustWorkspace: true in muxbot config and also mark the workspace as trusted in ~/.codex/config.toml, for example:[projects."/home/node/.muxbot/workspaces/default"]
trust_level = "trusted"
tmux -S ~/.muxbot/state/muxbot.sock attach -t agent-default-main.bubblewrap is missing on Linux, install bubblewrap in the runtime environment.muxbot after changing them.muxbot logs and inspect the recent log tail that muxbot now prints automatically on startup failure.muxbot --help./followup pause or /followup mention-only. /bash ls -la.muxbot startmuxbot restartmuxbot stopmuxbot stop --hardmuxbot statusmuxbot logsmuxbot channels enable slackmuxbot channels enable telegrammuxbot channels add telegram-group <chatId> [--topic <topicId>] [--agent <id>] [--require-mention true|false]muxbot channels remove telegram-group <chatId> [--topic <topicId>]muxbot channels add slack-channel <channelId> [--agent <id>] [--require-mention true|false]muxbot channels remove slack-channel <channelId>muxbot channels add slack-group <groupId> [--agent <id>] [--require-mention true|false]muxbot channels remove slack-group <groupId>muxbot channels set-token <slack-app|slack-bot|telegram-bot> <value>muxbot channels clear-token <slack-app|slack-bot|telegram-bot>muxbot channels privilege enable <target>muxbot channels privilege disable <target>muxbot channels privilege allow-user <target> <userId>muxbot channels privilege remove-user <target> <userId>muxbot agents list --bindingsmuxbot start --cli codex --bootstrap personal-assistantmuxbot agents bootstrap default --mode personal-assistantmuxbot agents bind --agent default --bind telegrammuxbot agents bindingsmuxbot --helpbun run devbun run startbun run restartbun run stopbun run typecheckbun run testbun run checkmuxbot supports a small set of chat-native commands for thread control, transcript access, and quick shell execution.
Slack note:
/bash ls -la!ls -laCommon commands:
/start: show onboarding or route-status help for the current conversation./help: show the available muxbot conversation commands./status: show the current route status, follow-up policy, and operator setup hints./whoami: show the current sender and route identity for the active conversation./stop: interrupt the current running turn./followup status: show the current thread follow-up mode./followup auto: allow natural in-thread follow-up after the bot has replied./followup mention-only: require an explicit mention for later turns in the thread./followup pause: pause passive follow-up so the bot does not keep interrupting the thread unless explicitly mentioned again./followup resume: restore the default follow-up behavior for that conversation./transcript: return the current conversation transcript when privilege commands are enabled on the route.::transcript or \transcript: transcript shortcuts from the default slash-style prefixes./bash <command>: run a shell command in the current agent workspace when sensitive commands are enabled.!<command>: shorthand for /bash <command>.Command prefix defaults:
["::", "\\"]["!"]channels.slack.commandPrefixes and channels.telegram.commandPrefixesSensitive commands are disabled by default:
muxbot channels privilege enable ...muxbot channels privilege allow-user ...muxbot channels privilege enable slack-dm or muxbot channels privilege enable telegram-dmmuxbot channels --help for the route and privilege command guideFollow-up behavior matters in team threads:
auto is convenient when a thread is actively collaborating with the bot.pause is useful when the bot has already participated but you do not want it to keep jumping into every follow-up message.mention-only is the stricter mode when you want every new bot turn to require an explicit call.This repo also serves as a small example of an AI-native engineering workflow:
AGENTS.md and CLAUDE.md-style operating rules, short but addresses some common drawbacks of AI models as of 2026Merge requests are welcome.
MRs with real tests, screenshots, or recordings of the behavior under test will be merged faster.
FAQs
Chat surfaces for durable AI coding agents running in tmux
The npm package @muxbot/muxbot receives a total of 0 weekly downloads. As such, @muxbot/muxbot popularity was classified as not popular.
We found that @muxbot/muxbot demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.

Security News
The White House’s Gold Eagle Initiative aims to coordinate AI-discovered vulnerabilities, validate findings, and accelerate patching across critical software.

Security News
A Shai-Hulud infection exposed Suno's source code, which shows the AI music startup stream-ripped tracks to train its models.