@integrity-labs/agt-cli 0.28.1131 → 0.28.1132

package/dist/{chunk-4BKN4EUH.js → chunk-K2V6JUIQ.js}

@@ -16,7 +16,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-KG4IEJEF.js";
+} from "./chunk-LIWZ3QER.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -79,7 +79,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-TKBGHAN3.js";
+} from "./chunk-CA4OFLW4.js";
 import {
   classifyUnanswerablePane,
   isConsumerTermsDialogVisible,
@@ -8076,7 +8076,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.1131" : "dev";
+var agtCliVersion = true ? "0.28.1132" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -13227,4 +13227,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-4BKN4EUH.js.map
+//# sourceMappingURL=chunk-K2V6JUIQ.js.map

package/dist/{chunk-KG4IEJEF.js → chunk-LIWZ3QER.js}

@@ -24,7 +24,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-TKBGHAN3.js";
+} from "./chunk-CA4OFLW4.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -6114,4 +6114,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-KG4IEJEF.js.map
+//# sourceMappingURL=chunk-LIWZ3QER.js.map

package/dist/{claude-pair-runtime-DNCX245G.js → claude-pair-runtime-D7FVFPCJ.js}

@@ -269,7 +269,7 @@ async function spawnPairSession(session) {
     return { ok: true };
   } catch {
   }
-  const { resolveClaudeBinary } = await import("./persistent-session-F2LRKDFL.js");
+  const { resolveClaudeBinary } = await import("./persistent-session-WE42P4HU.js");
   const claudeBin = resolveClaudeBinary();
   const pairEnv = {
     ...process.env,
@@ -739,4 +739,4 @@ export {
   startClaudePair,
   submitClaudePairCode
 };
-//# sourceMappingURL=claude-pair-runtime-DNCX245G.js.map
+//# sourceMappingURL=claude-pair-runtime-D7FVFPCJ.js.map

package/dist/lib/manager-worker.js

@@ -76,7 +76,7 @@ import {
   setConfigHash,
   shellGuard,
   tripClass
-} from "../chunk-4BKN4EUH.js";
+} from "../chunk-K2V6JUIQ.js";
 import {
   getProjectDir as getProjectDir2,
   getReadyTasks,
@@ -163,7 +163,7 @@ import {
   webFetchBaselineValue,
   webFetchRestartNeeded,
   writeEgressAllowlist
-} from "../chunk-KG4IEJEF.js";
+} from "../chunk-LIWZ3QER.js";
 import {
   ACCOUNT_ENFORCEMENT_MARKER_FILENAME,
   AnchorSessionClient,
@@ -274,7 +274,7 @@ import {
   subagentActivityAgeSeconds,
   sumTranscriptUsageInWindow,
   transcriptActivityAgeSeconds
-} from "../chunk-TKBGHAN3.js";
+} from "../chunk-CA4OFLW4.js";
 import {
   classifyUnanswerablePane,
   focusedConfirmDialogBlock,
@@ -14491,7 +14491,7 @@ var pendingDayRolloverReset = /* @__PURE__ */ new Set();
 var dayRolloverInboundHold = /* @__PURE__ */ new Map();
 var INBOUND_HOLD_EPISODE_GAP_MS = 12e4;
 async function channelInboundActivityAgeSecondsFor(codeName) {
-  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-SM6XFJJ6.js");
+  const { newestPendingInboundActivityMtimeMs } = await import("../responsiveness-probe-6AG6PYW7.js");
   const newest = newestPendingInboundActivityMtimeMs(dirname11(paneLogPath(codeName)));
   if (newest === null) return null;
   return Math.max(0, Math.floor((Date.now() - newest) / 1e3));
@@ -15249,7 +15249,7 @@ var agentRestartTimezoneInputs = /* @__PURE__ */ new Map();
 var lastVersionCheckAt = 0;
 var VERSION_CHECK_INTERVAL_MS = 5 * 60 * 1e3;
 var lastResponsivenessProbeAt = 0;
-var agtCliVersion = true ? "0.28.1131" : "dev";
+var agtCliVersion = true ? "0.28.1132" : "dev";
 function resolveBrewPath(execFileSync3) {
   try {
     const out = execFileSync3("which", ["brew"], { timeout: 5e3 }).toString().trim();
@@ -16879,7 +16879,7 @@ function flushRestartedAgentDiagnostics(hostId, codeNames) {
   if (codeNames.length === 0) return;
   void (async () => {
     try {
-      const { collectDiagnostics } = await import("../persistent-session-F2LRKDFL.js");
+      const { collectDiagnostics } = await import("../persistent-session-WE42P4HU.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics(codeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -17021,7 +17021,7 @@ async function pollCycleInner() {
     }
     try {
       const { detectHostSecurity } = await import("../host-security-KQYYZZVW.js");
-      const { collectDiagnostics } = await import("../persistent-session-F2LRKDFL.js");
+      const { collectDiagnostics } = await import("../persistent-session-WE42P4HU.js");
       const diagCodeNames = [...agentState.persistentSessionAgents];
       const agentDiagnostics = diagCodeNames.length > 0 ? collectDiagnostics(diagCodeNames, quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor) : void 0;
       let tailscaleHostname;
@@ -17229,7 +17229,7 @@ async function pollCycleInner() {
         collectPanelessActivityProbes,
         getResponsivenessIntervalMs,
         occupancyQualificationClassifications
-      } = await import("../responsiveness-probe-SM6XFJJ6.js");
+      } = await import("../responsiveness-probe-6AG6PYW7.js");
       const probeIntervalMs = getResponsivenessIntervalMs();
       if (now - lastResponsivenessProbeAt > probeIntervalMs) {
         const probeCodeNames = [...agentState.persistentSessionAgents];
@@ -17346,7 +17346,7 @@ async function pollCycleInner() {
           collectResponsivenessProbes,
           livePendingInboundOldestAgeSeconds,
           parkPendingInbound
-        } = await import("../responsiveness-probe-SM6XFJJ6.js");
+        } = await import("../responsiveness-probe-6AG6PYW7.js");
         const { getProjectDir: wedgeProjectDir } = await import("../scheduler-engine-M6AFZWNU.js");
         const wedgeNow = /* @__PURE__ */ new Date();
         const liveAgents = agentState.persistentSessionAgents;
@@ -17632,7 +17632,7 @@ async function pollCycleInner() {
                 }
               }
             );
-            const { parkPendingInbound } = await import("../responsiveness-probe-SM6XFJJ6.js");
+            const { parkPendingInbound } = await import("../responsiveness-probe-6AG6PYW7.js");
             const { parked, deadLettered } = parkPendingInbound(codeName, new Date(fatalNowMs));
             paneFatalStreak.delete(codeName);
             paneFatalRestarts.set(codeName, [...history, fatalNowMs]);
@@ -17663,7 +17663,7 @@ async function pollCycleInner() {
         TRANSCRIPT_MOUNT_ESCALATION_REFRESH_MS,
         bindSourceEscalations
       } = await import("../transcript-mount-health-OHE6IVJV.js");
-      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-F2LRKDFL.js");
+      const { transcriptBindSourcesFor, ensureTranscriptBindSources } = await import("../persistent-session-WE42P4HU.js");
       const mountConfig = resolveTranscriptMountConfig();
       const liveAgents = agentState.persistentSessionAgents;
       for (const tracked of [
@@ -17828,7 +17828,7 @@ async function pollCycleInner() {
     }
     try {
       const { scrapeMcpFailedBannerCount } = await import("../pane-mcp-banner-scraper-VR5QGP3J.js");
-      const { probeSessionAuth } = await import("../session-auth-dead-KNTFHDWV.js");
+      const { probeSessionAuth } = await import("../session-auth-dead-H7UDGEIS.js");
       const observations = [];
       const pendingCacheCommits = [];
       const modelApiErrorReportingOn = hostFlagStore().getBoolean("model-api-error-reporting");
@@ -22423,7 +22423,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
       try {
         const freshId = rotateSessionForWedge(codeName);
         consecutiveWedgeCycles.delete(codeName);
-        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-SM6XFJJ6.js");
+        const { parkPendingInbound: parkForRestart } = await import("../responsiveness-probe-6AG6PYW7.js");
         const { parked, deadLettered } = parkForRestart(codeName, /* @__PURE__ */ new Date());
         const parkNote = parked > 0 ? `, ${parked} inbound parked` : "";
         const deadNote = deadLettered > 0 ? `, ${deadLettered} undeliverable dead-lettered` : "";
@@ -22466,7 +22466,7 @@ async function handleRestartDoorbell(agentId, requestedAt, restartReason) {
     void api.post("/host/restart-ack", { host_id: hostId, agent_id: agentId, restart_requested_at: requestedAt }).catch((err) => log(`[restart-lane] ack failed for '${codeName}': ${err.message}`));
     void (async () => {
       try {
-        const { collectDiagnostics } = await import("../persistent-session-F2LRKDFL.js");
+        const { collectDiagnostics } = await import("../persistent-session-WE42P4HU.js");
         await api.post("/host/heartbeat", {
           host_id: hostId,
           agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -22517,7 +22517,7 @@ async function respawnAgentAfterMcpStop(codeName, reason) {
     }
     try {
       const hostId = await getHostId();
-      const { collectDiagnostics } = await import("../persistent-session-F2LRKDFL.js");
+      const { collectDiagnostics } = await import("../persistent-session-WE42P4HU.js");
       await api.post("/host/heartbeat", {
         host_id: hostId,
         agent_diagnostics: collectDiagnostics([codeName], quarantineEntriesFor, claudeMdSizeFor, spawnOutcomeForDiagnostics, pidPressureFor, forwardedToolsFor, runtimeVersionFor)
@@ -23190,7 +23190,7 @@ async function processClaudePairSessions(agents) {
     // cannot take it for itself — by the time it runs, the write it is looking
     // for may already have happened.
     snapshotPairConfig
-  } = await import("../claude-pair-runtime-DNCX245G.js");
+  } = await import("../claude-pair-runtime-D7FVFPCJ.js");
   for (const pairId of pendingResp.cancelled_pair_ids ?? []) {
     log(`[claude-pair] sweeping orphan tmux session for pair ${pairId.slice(0, 8)}`);
     const killed = await killPairSession(pairTmuxSession(pairId));

package/dist/mcp/direct-chat-channel.js

@@ -39599,6 +39599,61 @@ var OAUTH_PROVIDERS = {
     // tools/list after a real consent (runbook Step 3).
     toolAllowlist: ["otter_get_user_info", "otter_search", "otter_fetch"]
   },
+  "plaud": {
+    // ENG-11543 (CS-2134): Plaud's hosted MCP - remote streamable-HTTP at
+    // https://mcp.plaud.ai/mcp. Same Granola/Kajabi/Otter shape: OAuth 2.0
+    // authorization-code with PKCE (S256) and a public client
+    // (token_endpoint_auth_method 'none') issued via Dynamic Client
+    // Registration (RFC 7591). NOT the stdio `npx @plaud-ai/mcp` package,
+    // which runs its own local browser sign-in and token file. Values below
+    // are taken verbatim from the metadata (re-read 2026-10-16), not inferred:
+    //   - https://mcp.plaud.ai/.well-known/oauth-protected-resource (and the
+    //     path-suffixed /.well-known/oauth-protected-resource/mcp the server's
+    //     401 points at) give resource https://mcp.plaud.ai/mcp, AS
+    //     https://mcp.plaud.ai/, bearer in the header;
+    //   - https://mcp.plaud.ai/.well-known/oauth-authorization-server (and
+    //     the identical openid-configuration) give authorize /authorize, token
+    //     /token, register /register, PKCE S256 only, `none` among the token
+    //     auth methods, and the authorization_code + refresh_token grants.
+    // NOT advertised: `scopes_supported` (so defaultScopes is empty, the
+    // notion-cli precedent, and the authorize URL carries `scope=`) and
+    // `revocation_endpoint` (so there is no revokeUrl: disconnecting here
+    // deletes our copy of the token but cannot revoke Plaud's grant; the user
+    // revokes it in their Plaud account).
+    //
+    // DCR (operator step, NOT done as of this commit): POST the registration
+    // body by hand to https://mcp.plaud.ai/register with client_name
+    // `Ninjafy`, token_endpoint_auth_method `none`, grant_types
+    // authorization_code + refresh_token, and BOTH API callbacks in
+    // redirect_uris (https://api.augmented.team/integrations/oauth/callback
+    // and https://api.ninjafy.com/integrations/oauth/callback). Do not use
+    // scripts/dcr-register.ts: it takes a single --redirect-uri. Store the
+    // returned client id as OAUTH_PLAUD_CLIENT_ID; unset, Connect soft-fails
+    // "not configured". Full procedure: docs/runbooks/plaud-dogfood.md.
+    definitionId: "plaud",
+    authorizeUrl: "https://mcp.plaud.ai/authorize",
+    tokenUrl: "https://mcp.plaud.ai/token",
+    defaultScopes: [],
+    supportsRefresh: true,
+    extraAuthorizeParams: {},
+    clientAuthMethod: "body",
+    pkce: "S256",
+    publicClient: true,
+    mcpUrl: "https://mcp.plaud.ai/mcp",
+    // Curated surface (matches the catalog seed's defined_scopes[].tools).
+    // Plaud advertises NO scopes, so the token is not scope-limited: the
+    // read-only property of this integration rests ENTIRELY on this
+    // allowlist, which the remote-oauth-proxy enforces on tools/list and
+    // tools/call. The five names are Plaud's documented read tools
+    // (https://docs.plaud.ai/plaud-mcp-cli/mcp). `login` and `logout` are
+    // deliberately excluded: sign-in is our OAuth broker's job, and `logout`
+    // revokes the user's authorization, which an agent must never do. The
+    // names come from the docs, not from an authenticated tools/list (that
+    // needs a consented token), and the proxy SKIPS an allowlisted name the
+    // server does not serve, so confirm against the first live tools/list
+    // (runbook Step 3, a gate before customer use).
+    toolAllowlist: ["get_current_user", "list_files", "get_file", "get_note", "get_transcript"]
+  },
   "notion-cli": {
     // Notion's public OAuth app. Tokens are workspace-scoped and long-lived —
     // Notion does not issue refresh_tokens, so `supportsRefresh: false` and
@@ -40055,6 +40110,36 @@ var INTEGRATION_REGISTRY = [
     docs_url: "https://help.otter.ai/hc/en-us/articles/35287607569687-Otter-MCP-Server",
     beta: true
   },
+  {
+    id: "plaud",
+    name: "Plaud",
+    category: "knowledge",
+    description: "Read Plaud recordings: list and search recordings by name or date, and read their AI notes (summary, action items, key topics) and full speaker-labelled transcripts.",
+    // ENG-11543 (CS-2134): same remote streamable-HTTP MCP + OAuth pattern as
+    // Granola/Kajabi/Otter, against Plaud's HOSTED server (https://mcp.plaud.ai/mcp),
+    // not the stdio `npx @plaud-ai/mcp` package. Discovery chain: RFC 9728
+    // protected-resource metadata at mcp.plaud.ai -> RFC 8414 AS metadata on the
+    // same host -> RFC 7591 registration at /register. Auth is OAuth 2.0
+    // authorization-code with PKCE (S256) and a public client registered once by
+    // an operator (docs/runbooks/plaud-dogfood.md -> OAUTH_PLAUD_CLIENT_ID).
+    // Consent is brokered through the shared /integrations/oauth/authorize ->
+    // /callback path, and the token reaches the host via the generic
+    // remote-oauth-proxy (OAUTH_PROVIDERS.plaud.mcpUrl).
+    //
+    // READ-ONLY RESTS ENTIRELY ON THE TOOL ALLOWLIST. Unlike Otter, Plaud
+    // advertises NO scopes_supported, so there is no read scope to request and
+    // the granted token is not scope-limited. What keeps this integration
+    // read-only is OAUTH_PROVIDERS.plaud.toolAllowlist (the five documented
+    // reads), which the proxy enforces on tools/list and tools/call. `login` and
+    // `logout` are excluded; `logout` would revoke the user's authorization.
+    // Anything that widens the allowlist widens what the token can do.
+    supported_auth_types: ["oauth2"],
+    capabilities: [
+      { id: "plaud:read", name: "Read Recordings & Transcripts", description: "List and search recordings by name or date, and read their details, AI notes (summary, action items, key topics) and full transcripts with speaker labels (get_current_user, list_files, get_file, get_note, get_transcript)", access: "read" }
+    ],
+    docs_url: "https://docs.plaud.ai/plaud-mcp-cli/mcp",
+    beta: true
+  },
   {
     id: "anchor-browser",
     name: "Anchor Browser",

package/dist/mcp/index.js

@@ -25624,6 +25624,61 @@ var OAUTH_PROVIDERS = {
     // tools/list after a real consent (runbook Step 3).
     toolAllowlist: ["otter_get_user_info", "otter_search", "otter_fetch"]
   },
+  "plaud": {
+    // ENG-11543 (CS-2134): Plaud's hosted MCP - remote streamable-HTTP at
+    // https://mcp.plaud.ai/mcp. Same Granola/Kajabi/Otter shape: OAuth 2.0
+    // authorization-code with PKCE (S256) and a public client
+    // (token_endpoint_auth_method 'none') issued via Dynamic Client
+    // Registration (RFC 7591). NOT the stdio `npx @plaud-ai/mcp` package,
+    // which runs its own local browser sign-in and token file. Values below
+    // are taken verbatim from the metadata (re-read 2026-10-16), not inferred:
+    //   - https://mcp.plaud.ai/.well-known/oauth-protected-resource (and the
+    //     path-suffixed /.well-known/oauth-protected-resource/mcp the server's
+    //     401 points at) give resource https://mcp.plaud.ai/mcp, AS
+    //     https://mcp.plaud.ai/, bearer in the header;
+    //   - https://mcp.plaud.ai/.well-known/oauth-authorization-server (and
+    //     the identical openid-configuration) give authorize /authorize, token
+    //     /token, register /register, PKCE S256 only, `none` among the token
+    //     auth methods, and the authorization_code + refresh_token grants.
+    // NOT advertised: `scopes_supported` (so defaultScopes is empty, the
+    // notion-cli precedent, and the authorize URL carries `scope=`) and
+    // `revocation_endpoint` (so there is no revokeUrl: disconnecting here
+    // deletes our copy of the token but cannot revoke Plaud's grant; the user
+    // revokes it in their Plaud account).
+    //
+    // DCR (operator step, NOT done as of this commit): POST the registration
+    // body by hand to https://mcp.plaud.ai/register with client_name
+    // `Ninjafy`, token_endpoint_auth_method `none`, grant_types
+    // authorization_code + refresh_token, and BOTH API callbacks in
+    // redirect_uris (https://api.augmented.team/integrations/oauth/callback
+    // and https://api.ninjafy.com/integrations/oauth/callback). Do not use
+    // scripts/dcr-register.ts: it takes a single --redirect-uri. Store the
+    // returned client id as OAUTH_PLAUD_CLIENT_ID; unset, Connect soft-fails
+    // "not configured". Full procedure: docs/runbooks/plaud-dogfood.md.
+    definitionId: "plaud",
+    authorizeUrl: "https://mcp.plaud.ai/authorize",
+    tokenUrl: "https://mcp.plaud.ai/token",
+    defaultScopes: [],
+    supportsRefresh: true,
+    extraAuthorizeParams: {},
+    clientAuthMethod: "body",
+    pkce: "S256",
+    publicClient: true,
+    mcpUrl: "https://mcp.plaud.ai/mcp",
+    // Curated surface (matches the catalog seed's defined_scopes[].tools).
+    // Plaud advertises NO scopes, so the token is not scope-limited: the
+    // read-only property of this integration rests ENTIRELY on this
+    // allowlist, which the remote-oauth-proxy enforces on tools/list and
+    // tools/call. The five names are Plaud's documented read tools
+    // (https://docs.plaud.ai/plaud-mcp-cli/mcp). `login` and `logout` are
+    // deliberately excluded: sign-in is our OAuth broker's job, and `logout`
+    // revokes the user's authorization, which an agent must never do. The
+    // names come from the docs, not from an authenticated tools/list (that
+    // needs a consented token), and the proxy SKIPS an allowlisted name the
+    // server does not serve, so confirm against the first live tools/list
+    // (runbook Step 3, a gate before customer use).
+    toolAllowlist: ["get_current_user", "list_files", "get_file", "get_note", "get_transcript"]
+  },
   "notion-cli": {
     // Notion's public OAuth app. Tokens are workspace-scoped and long-lived —
     // Notion does not issue refresh_tokens, so `supportsRefresh: false` and
@@ -26080,6 +26135,36 @@ var INTEGRATION_REGISTRY = [
     docs_url: "https://help.otter.ai/hc/en-us/articles/35287607569687-Otter-MCP-Server",
     beta: true
   },
+  {
+    id: "plaud",
+    name: "Plaud",
+    category: "knowledge",
+    description: "Read Plaud recordings: list and search recordings by name or date, and read their AI notes (summary, action items, key topics) and full speaker-labelled transcripts.",
+    // ENG-11543 (CS-2134): same remote streamable-HTTP MCP + OAuth pattern as
+    // Granola/Kajabi/Otter, against Plaud's HOSTED server (https://mcp.plaud.ai/mcp),
+    // not the stdio `npx @plaud-ai/mcp` package. Discovery chain: RFC 9728
+    // protected-resource metadata at mcp.plaud.ai -> RFC 8414 AS metadata on the
+    // same host -> RFC 7591 registration at /register. Auth is OAuth 2.0
+    // authorization-code with PKCE (S256) and a public client registered once by
+    // an operator (docs/runbooks/plaud-dogfood.md -> OAUTH_PLAUD_CLIENT_ID).
+    // Consent is brokered through the shared /integrations/oauth/authorize ->
+    // /callback path, and the token reaches the host via the generic
+    // remote-oauth-proxy (OAUTH_PROVIDERS.plaud.mcpUrl).
+    //
+    // READ-ONLY RESTS ENTIRELY ON THE TOOL ALLOWLIST. Unlike Otter, Plaud
+    // advertises NO scopes_supported, so there is no read scope to request and
+    // the granted token is not scope-limited. What keeps this integration
+    // read-only is OAUTH_PROVIDERS.plaud.toolAllowlist (the five documented
+    // reads), which the proxy enforces on tools/list and tools/call. `login` and
+    // `logout` are excluded; `logout` would revoke the user's authorization.
+    // Anything that widens the allowlist widens what the token can do.
+    supported_auth_types: ["oauth2"],
+    capabilities: [
+      { id: "plaud:read", name: "Read Recordings & Transcripts", description: "List and search recordings by name or date, and read their details, AI notes (summary, action items, key topics) and full transcripts with speaker labels (get_current_user, list_files, get_file, get_note, get_transcript)", access: "read" }
+    ],
+    docs_url: "https://docs.plaud.ai/plaud-mcp-cli/mcp",
+    beta: true
+  },
   {
     id: "anchor-browser",
     name: "Anchor Browser",

package/dist/mcp/origami.js

@@ -39756,6 +39756,61 @@ var OAUTH_PROVIDERS = {
     // tools/list after a real consent (runbook Step 3).
     toolAllowlist: ["otter_get_user_info", "otter_search", "otter_fetch"]
   },
+  "plaud": {
+    // ENG-11543 (CS-2134): Plaud's hosted MCP - remote streamable-HTTP at
+    // https://mcp.plaud.ai/mcp. Same Granola/Kajabi/Otter shape: OAuth 2.0
+    // authorization-code with PKCE (S256) and a public client
+    // (token_endpoint_auth_method 'none') issued via Dynamic Client
+    // Registration (RFC 7591). NOT the stdio `npx @plaud-ai/mcp` package,
+    // which runs its own local browser sign-in and token file. Values below
+    // are taken verbatim from the metadata (re-read 2026-10-16), not inferred:
+    //   - https://mcp.plaud.ai/.well-known/oauth-protected-resource (and the
+    //     path-suffixed /.well-known/oauth-protected-resource/mcp the server's
+    //     401 points at) give resource https://mcp.plaud.ai/mcp, AS
+    //     https://mcp.plaud.ai/, bearer in the header;
+    //   - https://mcp.plaud.ai/.well-known/oauth-authorization-server (and
+    //     the identical openid-configuration) give authorize /authorize, token
+    //     /token, register /register, PKCE S256 only, `none` among the token
+    //     auth methods, and the authorization_code + refresh_token grants.
+    // NOT advertised: `scopes_supported` (so defaultScopes is empty, the
+    // notion-cli precedent, and the authorize URL carries `scope=`) and
+    // `revocation_endpoint` (so there is no revokeUrl: disconnecting here
+    // deletes our copy of the token but cannot revoke Plaud's grant; the user
+    // revokes it in their Plaud account).
+    //
+    // DCR (operator step, NOT done as of this commit): POST the registration
+    // body by hand to https://mcp.plaud.ai/register with client_name
+    // `Ninjafy`, token_endpoint_auth_method `none`, grant_types
+    // authorization_code + refresh_token, and BOTH API callbacks in
+    // redirect_uris (https://api.augmented.team/integrations/oauth/callback
+    // and https://api.ninjafy.com/integrations/oauth/callback). Do not use
+    // scripts/dcr-register.ts: it takes a single --redirect-uri. Store the
+    // returned client id as OAUTH_PLAUD_CLIENT_ID; unset, Connect soft-fails
+    // "not configured". Full procedure: docs/runbooks/plaud-dogfood.md.
+    definitionId: "plaud",
+    authorizeUrl: "https://mcp.plaud.ai/authorize",
+    tokenUrl: "https://mcp.plaud.ai/token",
+    defaultScopes: [],
+    supportsRefresh: true,
+    extraAuthorizeParams: {},
+    clientAuthMethod: "body",
+    pkce: "S256",
+    publicClient: true,
+    mcpUrl: "https://mcp.plaud.ai/mcp",
+    // Curated surface (matches the catalog seed's defined_scopes[].tools).
+    // Plaud advertises NO scopes, so the token is not scope-limited: the
+    // read-only property of this integration rests ENTIRELY on this
+    // allowlist, which the remote-oauth-proxy enforces on tools/list and
+    // tools/call. The five names are Plaud's documented read tools
+    // (https://docs.plaud.ai/plaud-mcp-cli/mcp). `login` and `logout` are
+    // deliberately excluded: sign-in is our OAuth broker's job, and `logout`
+    // revokes the user's authorization, which an agent must never do. The
+    // names come from the docs, not from an authenticated tools/list (that
+    // needs a consented token), and the proxy SKIPS an allowlisted name the
+    // server does not serve, so confirm against the first live tools/list
+    // (runbook Step 3, a gate before customer use).
+    toolAllowlist: ["get_current_user", "list_files", "get_file", "get_note", "get_transcript"]
+  },
   "notion-cli": {
     // Notion's public OAuth app. Tokens are workspace-scoped and long-lived —
     // Notion does not issue refresh_tokens, so `supportsRefresh: false` and
@@ -40212,6 +40267,36 @@ var INTEGRATION_REGISTRY = [
     docs_url: "https://help.otter.ai/hc/en-us/articles/35287607569687-Otter-MCP-Server",
     beta: true
   },
+  {
+    id: "plaud",
+    name: "Plaud",
+    category: "knowledge",
+    description: "Read Plaud recordings: list and search recordings by name or date, and read their AI notes (summary, action items, key topics) and full speaker-labelled transcripts.",
+    // ENG-11543 (CS-2134): same remote streamable-HTTP MCP + OAuth pattern as
+    // Granola/Kajabi/Otter, against Plaud's HOSTED server (https://mcp.plaud.ai/mcp),
+    // not the stdio `npx @plaud-ai/mcp` package. Discovery chain: RFC 9728
+    // protected-resource metadata at mcp.plaud.ai -> RFC 8414 AS metadata on the
+    // same host -> RFC 7591 registration at /register. Auth is OAuth 2.0
+    // authorization-code with PKCE (S256) and a public client registered once by
+    // an operator (docs/runbooks/plaud-dogfood.md -> OAUTH_PLAUD_CLIENT_ID).
+    // Consent is brokered through the shared /integrations/oauth/authorize ->
+    // /callback path, and the token reaches the host via the generic
+    // remote-oauth-proxy (OAUTH_PROVIDERS.plaud.mcpUrl).
+    //
+    // READ-ONLY RESTS ENTIRELY ON THE TOOL ALLOWLIST. Unlike Otter, Plaud
+    // advertises NO scopes_supported, so there is no read scope to request and
+    // the granted token is not scope-limited. What keeps this integration
+    // read-only is OAUTH_PROVIDERS.plaud.toolAllowlist (the five documented
+    // reads), which the proxy enforces on tools/list and tools/call. `login` and
+    // `logout` are excluded; `logout` would revoke the user's authorization.
+    // Anything that widens the allowlist widens what the token can do.
+    supported_auth_types: ["oauth2"],
+    capabilities: [
+      { id: "plaud:read", name: "Read Recordings & Transcripts", description: "List and search recordings by name or date, and read their details, AI notes (summary, action items, key topics) and full transcripts with speaker labels (get_current_user, list_files, get_file, get_note, get_transcript)", access: "read" }
+    ],
+    docs_url: "https://docs.plaud.ai/plaud-mcp-cli/mcp",
+    beta: true
+  },
   {
     id: "anchor-browser",
     name: "Anchor Browser",

package/dist/mcp/slack-channel.js

@@ -34143,6 +34143,61 @@ var OAUTH_PROVIDERS = {
     // tools/list after a real consent (runbook Step 3).
     toolAllowlist: ["otter_get_user_info", "otter_search", "otter_fetch"]
   },
+  "plaud": {
+    // ENG-11543 (CS-2134): Plaud's hosted MCP - remote streamable-HTTP at
+    // https://mcp.plaud.ai/mcp. Same Granola/Kajabi/Otter shape: OAuth 2.0
+    // authorization-code with PKCE (S256) and a public client
+    // (token_endpoint_auth_method 'none') issued via Dynamic Client
+    // Registration (RFC 7591). NOT the stdio `npx @plaud-ai/mcp` package,
+    // which runs its own local browser sign-in and token file. Values below
+    // are taken verbatim from the metadata (re-read 2026-10-16), not inferred:
+    //   - https://mcp.plaud.ai/.well-known/oauth-protected-resource (and the
+    //     path-suffixed /.well-known/oauth-protected-resource/mcp the server's
+    //     401 points at) give resource https://mcp.plaud.ai/mcp, AS
+    //     https://mcp.plaud.ai/, bearer in the header;
+    //   - https://mcp.plaud.ai/.well-known/oauth-authorization-server (and
+    //     the identical openid-configuration) give authorize /authorize, token
+    //     /token, register /register, PKCE S256 only, `none` among the token
+    //     auth methods, and the authorization_code + refresh_token grants.
+    // NOT advertised: `scopes_supported` (so defaultScopes is empty, the
+    // notion-cli precedent, and the authorize URL carries `scope=`) and
+    // `revocation_endpoint` (so there is no revokeUrl: disconnecting here
+    // deletes our copy of the token but cannot revoke Plaud's grant; the user
+    // revokes it in their Plaud account).
+    //
+    // DCR (operator step, NOT done as of this commit): POST the registration
+    // body by hand to https://mcp.plaud.ai/register with client_name
+    // `Ninjafy`, token_endpoint_auth_method `none`, grant_types
+    // authorization_code + refresh_token, and BOTH API callbacks in
+    // redirect_uris (https://api.augmented.team/integrations/oauth/callback
+    // and https://api.ninjafy.com/integrations/oauth/callback). Do not use
+    // scripts/dcr-register.ts: it takes a single --redirect-uri. Store the
+    // returned client id as OAUTH_PLAUD_CLIENT_ID; unset, Connect soft-fails
+    // "not configured". Full procedure: docs/runbooks/plaud-dogfood.md.
+    definitionId: "plaud",
+    authorizeUrl: "https://mcp.plaud.ai/authorize",
+    tokenUrl: "https://mcp.plaud.ai/token",
+    defaultScopes: [],
+    supportsRefresh: true,
+    extraAuthorizeParams: {},
+    clientAuthMethod: "body",
+    pkce: "S256",
+    publicClient: true,
+    mcpUrl: "https://mcp.plaud.ai/mcp",
+    // Curated surface (matches the catalog seed's defined_scopes[].tools).
+    // Plaud advertises NO scopes, so the token is not scope-limited: the
+    // read-only property of this integration rests ENTIRELY on this
+    // allowlist, which the remote-oauth-proxy enforces on tools/list and
+    // tools/call. The five names are Plaud's documented read tools
+    // (https://docs.plaud.ai/plaud-mcp-cli/mcp). `login` and `logout` are
+    // deliberately excluded: sign-in is our OAuth broker's job, and `logout`
+    // revokes the user's authorization, which an agent must never do. The
+    // names come from the docs, not from an authenticated tools/list (that
+    // needs a consented token), and the proxy SKIPS an allowlisted name the
+    // server does not serve, so confirm against the first live tools/list
+    // (runbook Step 3, a gate before customer use).
+    toolAllowlist: ["get_current_user", "list_files", "get_file", "get_note", "get_transcript"]
+  },
   "notion-cli": {
     // Notion's public OAuth app. Tokens are workspace-scoped and long-lived —
     // Notion does not issue refresh_tokens, so `supportsRefresh: false` and
@@ -34599,6 +34654,36 @@ var INTEGRATION_REGISTRY = [
     docs_url: "https://help.otter.ai/hc/en-us/articles/35287607569687-Otter-MCP-Server",
     beta: true
   },
+  {
+    id: "plaud",
+    name: "Plaud",
+    category: "knowledge",
+    description: "Read Plaud recordings: list and search recordings by name or date, and read their AI notes (summary, action items, key topics) and full speaker-labelled transcripts.",
+    // ENG-11543 (CS-2134): same remote streamable-HTTP MCP + OAuth pattern as
+    // Granola/Kajabi/Otter, against Plaud's HOSTED server (https://mcp.plaud.ai/mcp),
+    // not the stdio `npx @plaud-ai/mcp` package. Discovery chain: RFC 9728
+    // protected-resource metadata at mcp.plaud.ai -> RFC 8414 AS metadata on the
+    // same host -> RFC 7591 registration at /register. Auth is OAuth 2.0
+    // authorization-code with PKCE (S256) and a public client registered once by
+    // an operator (docs/runbooks/plaud-dogfood.md -> OAUTH_PLAUD_CLIENT_ID).
+    // Consent is brokered through the shared /integrations/oauth/authorize ->
+    // /callback path, and the token reaches the host via the generic
+    // remote-oauth-proxy (OAUTH_PROVIDERS.plaud.mcpUrl).
+    //
+    // READ-ONLY RESTS ENTIRELY ON THE TOOL ALLOWLIST. Unlike Otter, Plaud
+    // advertises NO scopes_supported, so there is no read scope to request and
+    // the granted token is not scope-limited. What keeps this integration
+    // read-only is OAUTH_PROVIDERS.plaud.toolAllowlist (the five documented
+    // reads), which the proxy enforces on tools/list and tools/call. `login` and
+    // `logout` are excluded; `logout` would revoke the user's authorization.
+    // Anything that widens the allowlist widens what the token can do.
+    supported_auth_types: ["oauth2"],
+    capabilities: [
+      { id: "plaud:read", name: "Read Recordings & Transcripts", description: "List and search recordings by name or date, and read their details, AI notes (summary, action items, key topics) and full transcripts with speaker labels (get_current_user, list_files, get_file, get_note, get_transcript)", access: "read" }
+    ],
+    docs_url: "https://docs.plaud.ai/plaud-mcp-cli/mcp",
+    beta: true
+  },
   {
     id: "anchor-browser",
     name: "Anchor Browser",