@integrity-labs/agt-cli 0.28.1131 → 0.28.1133

package/dist/bin/agt.js

@@ -40,12 +40,12 @@ import {
   success,
   table,
   warn
-} from "../chunk-4BKN4EUH.js";
+} from "../chunk-I7W7LI5F.js";
 import {
   getProjectDir,
   isSessionResumeDisabled,
   readDirectChatSessionState
-} from "../chunk-KG4IEJEF.js";
+} from "../chunk-NIKSQHNB.js";
 import {
   AnchorSessionClient,
   CHANNEL_REGISTRY,
@@ -79,7 +79,7 @@ import {
   serializeManifestForSlackCli,
   sessionFileExists,
   sessionTranscriptDir
-} from "../chunk-TKBGHAN3.js";
+} from "../chunk-TPUS37QC.js";
 import "../chunk-B6UYVEMD.js";
 import "../chunk-XWVM4KPK.js";
 import "../chunk-EL5MWGGH.js";
@@ -5474,7 +5474,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync11, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.1131" : "dev";
+var cliVersion = true ? "0.28.1133" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -6734,7 +6734,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.1131" : "dev";
+var cliVersion2 = true ? "0.28.1133" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {

package/dist/{chunk-4BKN4EUH.js → chunk-I7W7LI5F.js}

@@ -16,7 +16,7 @@ import {
   parseEnvFileEntries,
   parseEnvIntegrations,
   shellQuote
-} from "./chunk-KG4IEJEF.js";
+} from "./chunk-NIKSQHNB.js";
 import {
   BIND_FAILURE_QUARANTINE_THRESHOLD,
   INTEGRATIONS_SECTION_END,
@@ -79,7 +79,7 @@ import {
   sessionTranscriptDir,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-TKBGHAN3.js";
+} from "./chunk-TPUS37QC.js";
 import {
   classifyUnanswerablePane,
   isConsumerTermsDialogVisible,
@@ -8076,7 +8076,7 @@ function exchangeFailureKind(err) {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.1131" : "dev";
+var agtCliVersion = true ? "0.28.1133" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -13227,4 +13227,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-4BKN4EUH.js.map
+//# sourceMappingURL=chunk-I7W7LI5F.js.map

package/dist/{chunk-KG4IEJEF.js → chunk-NIKSQHNB.js}

@@ -24,7 +24,7 @@ import {
   rotateDailySession,
   sessionFileExists,
   todayLocalIso
-} from "./chunk-TKBGHAN3.js";
+} from "./chunk-TPUS37QC.js";
 import {
   classifyUnanswerablePane,
   findUsageLimitResetHint,
@@ -6114,4 +6114,4 @@ export {
   stopAllSessionsAndWait,
   getProjectDir
 };
-//# sourceMappingURL=chunk-KG4IEJEF.js.map
+//# sourceMappingURL=chunk-NIKSQHNB.js.map

package/dist/{chunk-TKBGHAN3.js → chunk-TPUS37QC.js}

@@ -1113,7 +1113,17 @@ function formatEmailDomainConfigLines(config) {
     const blocked = stringList(config.blocked_domains);
     lines.push(`  - blocked_domains: ${blocked.length ? blocked.join(", ") : "(none)"}`);
   } else if (mode === "internal_only") {
-    lines.push(`  - only your organization's own email domain is permitted`);
+    const allowed = stringList(config.allowed_domains);
+    const blocked = stringList(config.blocked_domains);
+    if (allowed.length) {
+      lines.push(`  - permitted: your organization's own email domain, plus allowed_domains: ${allowed.join(", ")}`);
+    } else {
+      lines.push(`  - only your organization's own email domain is permitted`);
+    }
+    if (blocked.length) {
+      const list = blocked.join(", ");
+      lines.push(config.enforce_live === true ? `  - blocked_domains (refused): ${list}` : config.approval_live === true ? `  - blocked_domains: ${list} (a send to these is held for a person to approve, not refused \u2014 never assume it went)` : config.not_live_reason === "no_verified_domain" ? `  - blocked_domains: ${list} (not enforced yet: your organization has no verified email domain, so never email these)` : `  - blocked_domains: ${list} (nothing is enforced at this setting, so a send would go straight out \u2014 never email these)`);
+    }
   }
   const stage = typeof config.stage === "string" ? config.stage : void 0;
   const enforceLive = config.enforce_live === true;
@@ -2085,6 +2095,36 @@ var INTEGRATION_REGISTRY = [
     docs_url: "https://help.otter.ai/hc/en-us/articles/35287607569687-Otter-MCP-Server",
     beta: true
   },
+  {
+    id: "plaud",
+    name: "Plaud",
+    category: "knowledge",
+    description: "Read Plaud recordings: list and search recordings by name or date, and read their AI notes (summary, action items, key topics) and full speaker-labelled transcripts.",
+    // ENG-11543 (CS-2134): same remote streamable-HTTP MCP + OAuth pattern as
+    // Granola/Kajabi/Otter, against Plaud's HOSTED server (https://mcp.plaud.ai/mcp),
+    // not the stdio `npx @plaud-ai/mcp` package. Discovery chain: RFC 9728
+    // protected-resource metadata at mcp.plaud.ai -> RFC 8414 AS metadata on the
+    // same host -> RFC 7591 registration at /register. Auth is OAuth 2.0
+    // authorization-code with PKCE (S256) and a public client registered once by
+    // an operator (docs/runbooks/plaud-dogfood.md -> OAUTH_PLAUD_CLIENT_ID).
+    // Consent is brokered through the shared /integrations/oauth/authorize ->
+    // /callback path, and the token reaches the host via the generic
+    // remote-oauth-proxy (OAUTH_PROVIDERS.plaud.mcpUrl).
+    //
+    // READ-ONLY RESTS ENTIRELY ON THE TOOL ALLOWLIST. Unlike Otter, Plaud
+    // advertises NO scopes_supported, so there is no read scope to request and
+    // the granted token is not scope-limited. What keeps this integration
+    // read-only is OAUTH_PROVIDERS.plaud.toolAllowlist (the five documented
+    // reads), which the proxy enforces on tools/list and tools/call. `login` and
+    // `logout` are excluded; `logout` would revoke the user's authorization.
+    // Anything that widens the allowlist widens what the token can do.
+    supported_auth_types: ["oauth2"],
+    capabilities: [
+      { id: "plaud:read", name: "Read Recordings & Transcripts", description: "List and search recordings by name or date, and read their details, AI notes (summary, action items, key topics) and full transcripts with speaker labels (get_current_user, list_files, get_file, get_note, get_transcript)", access: "read" }
+    ],
+    docs_url: "https://docs.plaud.ai/plaud-mcp-cli/mcp",
+    beta: true
+  },
   {
     id: "anchor-browser",
     name: "Anchor Browser",
@@ -11981,6 +12021,61 @@ var OAUTH_PROVIDERS = {
     // tools/list after a real consent (runbook Step 3).
     toolAllowlist: ["otter_get_user_info", "otter_search", "otter_fetch"]
   },
+  "plaud": {
+    // ENG-11543 (CS-2134): Plaud's hosted MCP - remote streamable-HTTP at
+    // https://mcp.plaud.ai/mcp. Same Granola/Kajabi/Otter shape: OAuth 2.0
+    // authorization-code with PKCE (S256) and a public client
+    // (token_endpoint_auth_method 'none') issued via Dynamic Client
+    // Registration (RFC 7591). NOT the stdio `npx @plaud-ai/mcp` package,
+    // which runs its own local browser sign-in and token file. Values below
+    // are taken verbatim from the metadata (re-read 2026-10-16), not inferred:
+    //   - https://mcp.plaud.ai/.well-known/oauth-protected-resource (and the
+    //     path-suffixed /.well-known/oauth-protected-resource/mcp the server's
+    //     401 points at) give resource https://mcp.plaud.ai/mcp, AS
+    //     https://mcp.plaud.ai/, bearer in the header;
+    //   - https://mcp.plaud.ai/.well-known/oauth-authorization-server (and
+    //     the identical openid-configuration) give authorize /authorize, token
+    //     /token, register /register, PKCE S256 only, `none` among the token
+    //     auth methods, and the authorization_code + refresh_token grants.
+    // NOT advertised: `scopes_supported` (so defaultScopes is empty, the
+    // notion-cli precedent, and the authorize URL carries `scope=`) and
+    // `revocation_endpoint` (so there is no revokeUrl: disconnecting here
+    // deletes our copy of the token but cannot revoke Plaud's grant; the user
+    // revokes it in their Plaud account).
+    //
+    // DCR (operator step, NOT done as of this commit): POST the registration
+    // body by hand to https://mcp.plaud.ai/register with client_name
+    // `Ninjafy`, token_endpoint_auth_method `none`, grant_types
+    // authorization_code + refresh_token, and BOTH API callbacks in
+    // redirect_uris (https://api.augmented.team/integrations/oauth/callback
+    // and https://api.ninjafy.com/integrations/oauth/callback). Do not use
+    // scripts/dcr-register.ts: it takes a single --redirect-uri. Store the
+    // returned client id as OAUTH_PLAUD_CLIENT_ID; unset, Connect soft-fails
+    // "not configured". Full procedure: docs/runbooks/plaud-dogfood.md.
+    definitionId: "plaud",
+    authorizeUrl: "https://mcp.plaud.ai/authorize",
+    tokenUrl: "https://mcp.plaud.ai/token",
+    defaultScopes: [],
+    supportsRefresh: true,
+    extraAuthorizeParams: {},
+    clientAuthMethod: "body",
+    pkce: "S256",
+    publicClient: true,
+    mcpUrl: "https://mcp.plaud.ai/mcp",
+    // Curated surface (matches the catalog seed's defined_scopes[].tools).
+    // Plaud advertises NO scopes, so the token is not scope-limited: the
+    // read-only property of this integration rests ENTIRELY on this
+    // allowlist, which the remote-oauth-proxy enforces on tools/list and
+    // tools/call. The five names are Plaud's documented read tools
+    // (https://docs.plaud.ai/plaud-mcp-cli/mcp). `login` and `logout` are
+    // deliberately excluded: sign-in is our OAuth broker's job, and `logout`
+    // revokes the user's authorization, which an agent must never do. The
+    // names come from the docs, not from an authenticated tools/list (that
+    // needs a consented token), and the proxy SKIPS an allowlisted name the
+    // server does not serve, so confirm against the first live tools/list
+    // (runbook Step 3, a gate before customer use).
+    toolAllowlist: ["get_current_user", "list_files", "get_file", "get_note", "get_transcript"]
+  },
   "notion-cli": {
     // Notion's public OAuth app. Tokens are workspace-scoped and long-lived —
     // Notion does not issue refresh_tokens, so `supportsRefresh: false` and
@@ -17010,4 +17105,4 @@ export {
   peekCurrentSession,
   readDailySessionPin
 };
-//# sourceMappingURL=chunk-TKBGHAN3.js.map
+//# sourceMappingURL=chunk-TPUS37QC.js.map