@plaud-ai/mcp 0.2.1 → 0.2.2

package/dist/{server-D3H6AMVD.js → server-QWAZPBHU.js}

@@ -1,7 +1,7 @@
 import {
   logger,
   registerTools
-} from "./chunk-MPCF6HMK.js";
+} from "./chunk-IZKXHQM3.js";
 import {
   PlaudClient
 } from "./chunk-SNSGVRCU.js";
@@ -21,7 +21,6 @@ import { randomUUID } from "crypto";
 import { ProxyOAuthServerProvider } from "@modelcontextprotocol/sdk/server/auth/providers/proxyProvider.js";
 var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
   _plaudClientId;
-  _plaudClientSecret;
   _plaudTokenUrl;
   _plaudApiBase;
   _callbackUrl;
@@ -29,8 +28,6 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
   // internalState → { clientRedirectUri, originalState }
   // We generate our own state to track the pending flow regardless of whether the client sent one.
   _pendingStates = /* @__PURE__ */ new Map();
-  // code → internalState: lets exchangeAuthorizationCode include state in the Plaud token request
-  _pendingCodes = /* @__PURE__ */ new Map();
   constructor(options) {
     const authUrl = options.authUrl ?? "https://web.plaud.ai/platform/oauth";
     const tokenUrl = options.tokenUrl ?? "https://platform.plaud.ai/developer/api/oauth/third-party/access-token";
@@ -43,7 +40,7 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
       verifyAccessToken: async (token) => {
         const client = new PlaudClient({
           clientId: options.clientId,
-          clientSecret: options.clientSecret,
+          clientSecret: "",
           redirectUri: "",
           apiBase,
           staticToken: token
@@ -75,7 +72,6 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
       getClient: async (id) => this._registeredClients.get(id)
     });
     this._plaudClientId = options.clientId;
-    this._plaudClientSecret = options.clientSecret;
     this._plaudTokenUrl = tokenUrl;
     this._plaudApiBase = apiBase;
     this._callbackUrl = options.callbackUrl;
@@ -133,7 +129,6 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
       return;
     }
     this._pendingStates.delete(state);
-    this._pendingCodes.set(code, state);
     logger.info({ event: "oauth_callback_received", internal_state: state });
     const target = new URL(pending.clientRedirectUri);
     target.searchParams.set("code", code);
@@ -142,26 +137,20 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
     }
     res.redirect(target.toString());
   }
-  // Override to use Plaud's Basic auth + our fixed callback URL for redirect_uri
+  // Override to use PKCE public-client flow — no Basic auth, client_id sent in body.
   async exchangeAuthorizationCode(_client, authorizationCode, codeVerifier, _redirectUri) {
-    const basicAuth = Buffer.from(
-      `${this._plaudClientId}:${this._plaudClientSecret}`
-    ).toString("base64");
-    const internalState = this._pendingCodes.get(authorizationCode);
-    this._pendingCodes.delete(authorizationCode);
     const body = {
       grant_type: "authorization_code",
+      client_id: this._plaudClientId,
       code: authorizationCode,
       redirect_uri: this._callbackUrl
     };
     if (codeVerifier) body.code_verifier = codeVerifier;
-    if (internalState) body.state = internalState;
     const fetchRes = await fetch(this._plaudTokenUrl, {
       method: "POST",
       headers: {
         "Content-Type": "application/x-www-form-urlencoded",
-        Accept: "application/json",
-        Authorization: `Basic ${basicAuth}`
+        Accept: "application/json"
       },
       body: new URLSearchParams(body)
     });
@@ -188,13 +177,11 @@ var CALLBACK_PORT = 8199;
 var CALLBACK_PATH = "/auth/callback";
 var CALLBACK_URL = process.env.PLAUD_CALLBACK_URL ?? `http://localhost:${CALLBACK_PORT}${CALLBACK_PATH}`;
 function startHttpServer() {
-  const clientId = process.env.PLAUD_MCP_CLIENT_ID ?? process.env.PLAUD_CLIENT_ID ?? "client_9c501dad-8a0d-40b2-a7b0-d1cb8787f674";
-  const clientSecret = process.env.PLAUD_CLIENT_SECRET ?? "";
+  const clientId = process.env.PLAUD_MCP_CLIENT_ID ?? "client_37d250cb-50f8-4af1-8cd6-bc6711c5d684";
   const apiBase = process.env.PLAUD_API_BASE;
   const serverUrl = process.env.PLAUD_SERVER_URL ?? `http://localhost:${HTTP_PORT}`;
   const provider = new PlaudOAuthProvider({
     clientId,
-    clientSecret,
     callbackUrl: CALLBACK_URL,
     authUrl: process.env.PLAUD_AUTH_URL,
     tokenUrl: process.env.PLAUD_TOKEN_URL,
@@ -205,6 +192,18 @@ function startHttpServer() {
   app.get("/health", (_req, res) => {
     res.json({ status: "ok", uptime_s: Math.floor(process.uptime()) });
   });
+  if (process.env.PLAUD_CALLBACK_URL) {
+    app.get(CALLBACK_PATH, (req, res) => {
+      const code = req.query["code"];
+      const state = req.query["state"];
+      if (!code || !state) {
+        logger.warn({ event: "oauth_callback_invalid", code: !!code, state: !!state });
+        res.status(400).send("Missing code or state");
+        return;
+      }
+      provider.handleCallback(code, state, res);
+    });
+  }
   app.use((req, res, next) => {
     const reqId = req.headers["x-request-id"] ?? randomUUID2();
     res.locals["reqId"] = reqId;
@@ -236,12 +235,12 @@ function startHttpServer() {
       reqLog.info({ event: "mcp_request_start", client_id: req.auth.clientId });
       const client = new PlaudClient({
         clientId,
-        clientSecret,
+        clientSecret: "",
         redirectUri: "",
         apiBase,
         staticToken: token
       });
-      const mcpServer = new McpServer({ name: "plaud", version: "0.1.0" });
+      const mcpServer = new McpServer({ name: "plaud", version: "0.2.2" });
       registerTools(mcpServer, client);
       const transport = new StreamableHTTPServerTransport({
         sessionIdGenerator: void 0

package/dist/{setup-QRUDA7ES.js → setup-QXZHVVDP.js}

@@ -3,7 +3,7 @@ import {
   getMcpEntry,
   removeSkillsFromClaudeCode,
   writeSkillsToClaudeCode
-} from "./chunk-K22WPZ7P.js";
+} from "./chunk-QT25MKZJ.js";
 import {
   skillsCombined
 } from "./chunk-4QBEOJPX.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plaud-ai/mcp",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "type": "module",
   "main": "dist/index.js",
   "bin": {
@@ -12,14 +12,6 @@
     ".mcp.json",
     "skills"
   ],
-  "scripts": {
-    "version:show": "node -p \"require('./package.json').version\"",
-    "prebuild": "node ../../scripts/sync-skills.mjs",
-    "build": "tsup",
-    "dev": "tsup --watch",
-    "clean": "rm -rf dist skills",
-    "prepublishOnly": "node -e \"const fs=require('fs'),v=require('./package.json').version,p=JSON.parse(fs.readFileSync('./plugin.json','utf8'));p.version=v;fs.writeFileSync('./plugin.json',JSON.stringify(p,null,2)+'\\n');\""
-  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.0",
     "express": "^5.2.1",
@@ -28,9 +20,16 @@
     "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@plaud-ai/shared": "workspace:*",
     "@types/express": "^5.0.6",
     "@types/node": "^25.5.0",
-    "typescript": "^5.7.0"
+    "typescript": "^5.7.0",
+    "@plaud-ai/shared": "0.1.0"
+  },
+  "scripts": {
+    "version:show": "node -p \"require('./package.json').version\"",
+    "prebuild": "node ../../scripts/sync-skills.mjs",
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "clean": "rm -rf dist skills"
   }
-}
+}

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "plaud",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Access your Plaud recordings in Claude",
   "author": {
     "name": "Plaud AI"

package/dist/install-I2N3DJG4.js

@@ -1,384 +0,0 @@
-import {
-  getClient
-} from "./chunk-7KGB7GSZ.js";
-import {
-  copyToClipboard,
-  getMcpEntry,
-  writeSkillsToClaudeCode
-} from "./chunk-K22WPZ7P.js";
-import {
-  skillsCombined
-} from "./chunk-4QBEOJPX.js";
-import "./chunk-SNSGVRCU.js";
-
-// src/install.ts
-import { readFile, writeFile, mkdir } from "fs/promises";
-import { existsSync } from "fs";
-import { createInterface } from "readline/promises";
-import { createServer } from "http";
-import { join, dirname } from "path";
-import { homedir, platform } from "os";
-import { spawnSync } from "child_process";
-import open from "open";
-function claudeDesktopConfigPath() {
-  if (platform() === "darwin") {
-    return join(homedir(), "Library", "Application Support", "Claude", "claude_desktop_config.json");
-  }
-  if (platform() === "win32") {
-    return join(process.env.APPDATA ?? "", "Claude", "claude_desktop_config.json");
-  }
-  return null;
-}
-function claudeCodeDir() {
-  return join(homedir(), ".claude");
-}
-function claudeCodeUserConfigPath() {
-  return join(homedir(), ".claude.json");
-}
-function codexConfigPath() {
-  return join(homedir(), ".codex", "config.toml");
-}
-function detectClients() {
-  const list = [];
-  const cdPath = claudeDesktopConfigPath();
-  list.push({
-    id: "claude-desktop",
-    label: "Claude Desktop",
-    detected: cdPath !== null && (existsSync(cdPath) || existsSync(dirname(cdPath))),
-    configPath: cdPath ?? "(unsupported on this OS)"
-  });
-  const ccDir = claudeCodeDir();
-  list.push({
-    id: "claude-code",
-    label: "Claude Code",
-    detected: existsSync(ccDir),
-    configPath: ccDir
-  });
-  const codexPath = codexConfigPath();
-  list.push({
-    id: "codex",
-    label: "Codex Desktop",
-    detected: existsSync(codexPath) || existsSync(dirname(codexPath)),
-    configPath: codexPath
-  });
-  return list;
-}
-async function prompt(question, defaultYes = true) {
-  const rl = createInterface({ input: process.stdin, output: process.stdout });
-  const hint = defaultYes ? "Y/n" : "y/N";
-  const answer = (await rl.question(`${question} [${hint}] `)).trim().toLowerCase();
-  rl.close();
-  if (answer === "") return defaultYes;
-  return answer.startsWith("y");
-}
-async function installClaudeDesktop() {
-  const configPath = claudeDesktopConfigPath();
-  if (!configPath) return "skipped (OS not supported)";
-  let config = {};
-  try {
-    const raw = await readFile(configPath, "utf-8");
-    config = JSON.parse(raw);
-  } catch {
-  }
-  const mcpServers = config.mcpServers ?? {};
-  if (mcpServers.plaud) return "already configured";
-  config.mcpServers = { ...mcpServers, plaud: getMcpEntry() };
-  await mkdir(dirname(configPath), { recursive: true });
-  await writeFile(configPath, JSON.stringify(config, null, 2), "utf-8");
-  return "configured. Restart Claude Desktop to load the Plaud MCP.";
-}
-async function installClaudeCode() {
-  await writeSkillsToClaudeCode();
-  const { command, args } = getMcpEntry();
-  const serverCommand = [command, ...args].join(" ");
-  const manualCmd = `claude mcp add --scope user plaud -- ${serverCommand}`;
-  const cliCheck = spawnSync("which", ["claude"], { encoding: "utf-8" });
-  if (cliCheck.status !== 0) {
-    const configPath = claudeCodeUserConfigPath();
-    let config = {};
-    try {
-      config = JSON.parse(await readFile(configPath, "utf-8"));
-    } catch {
-      if (existsSync(configPath)) {
-        return `failed: skills written to ~/.claude/CLAUDE.md, but ~/.claude.json could not be parsed. Run manually once Claude Code CLI is available:
-  ${manualCmd}`;
-      }
-    }
-    const mcpServers = config.mcpServers ?? {};
-    config.mcpServers = { ...mcpServers, plaud: { type: "stdio", command, args, env: {} } };
-    await writeFile(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
-    return "skills written to ~/.claude/CLAUDE.md. Claude Code CLI not on PATH; MCP registered in ~/.claude.json.";
-  }
-  spawnSync("claude", ["mcp", "remove", "plaud", "--scope", "user"], { encoding: "utf-8" });
-  const register = spawnSync(
-    "claude",
-    ["mcp", "add", "--scope", "user", "plaud", "--", command, ...args],
-    { encoding: "utf-8" }
-  );
-  if (register.status !== 0) {
-    const err = (register.stderr || register.stdout || "").trim();
-    return `failed: skills written to ~/.claude/CLAUDE.md, but auto-registering MCP failed (${err || "unknown"}). Run manually:
-  ${manualCmd}`;
-  }
-  return "skills written to ~/.claude/CLAUDE.md and MCP registered at user scope.";
-}
-async function installCodex() {
-  const configPath = codexConfigPath();
-  const { command, args } = getMcpEntry();
-  const argsStr = args.map((a) => `"${a}"`).join(", ");
-  const entry = `
-[mcp_servers.plaud]
-command = "${command}"
-args = [${argsStr}]
-`;
-  let content = "";
-  try {
-    content = await readFile(configPath, "utf-8");
-  } catch {
-  }
-  if (content.includes("[mcp_servers.plaud]")) return "already configured";
-  await mkdir(dirname(configPath), { recursive: true });
-  await writeFile(configPath, content + entry, "utf-8");
-  await writeSkillsToClaudeCode();
-  const combined = await skillsCombined();
-  const copied = copyToClipboard(combined);
-  return copied ? "configured. Skills copied to clipboard \u2014 paste into Codex custom instructions, then restart." : "configured. Paste the Plaud skills into Codex custom instructions manually (see docs).";
-}
-var CALLBACK_PORT = 8199;
-var LOGIN_TIMEOUT_MS = 12e4;
-function pickIdentity(user) {
-  for (const k of ["email", "username", "name", "id"]) {
-    const v = user[k];
-    if (typeof v === "string" && v.length > 0) return v;
-  }
-  return void 0;
-}
-async function runLogin() {
-  const client = getClient();
-  try {
-    const existing = await client.auth.getAccessToken();
-    if (existing) {
-      try {
-        const user = await client.getCurrentUser();
-        return { status: "already-authed", who: pickIdentity(user) };
-      } catch {
-        return { status: "already-authed" };
-      }
-    }
-  } catch {
-    await client.auth.logout().catch(() => void 0);
-  }
-  const { url, codeVerifier, state } = client.auth.createAuthorizationRequest();
-  return new Promise((resolve) => {
-    const httpServer = createServer(async (req, res) => {
-      const reqUrl = new URL(req.url, `http://localhost:${CALLBACK_PORT}`);
-      if (reqUrl.pathname !== "/auth/callback") {
-        res.writeHead(404);
-        res.end();
-        return;
-      }
-      const code = reqUrl.searchParams.get("code");
-      if (!code) {
-        res.writeHead(400);
-        res.end("Missing code");
-        cleanup();
-        resolve({ status: "failed", message: "missing authorization code in callback" });
-        return;
-      }
-      try {
-        await client.auth.exchangeCode(code, codeVerifier, state);
-        res.writeHead(200, { "Content-Type": "text/html" });
-        res.end("<h1>Authentication successful!</h1><p>You can close this tab.</p>");
-        cleanup();
-        let who;
-        try {
-          const user = await client.getCurrentUser();
-          who = pickIdentity(user);
-        } catch {
-        }
-        resolve({ status: "success", who });
-      } catch (err) {
-        res.writeHead(500, { "Content-Type": "text/html" });
-        res.end("<h1>Token exchange failed</h1>");
-        cleanup();
-        resolve({ status: "failed", message: err instanceof Error ? err.message : String(err) });
-      }
-    });
-    let timeoutId;
-    function cleanup() {
-      clearTimeout(timeoutId);
-      httpServer.closeAllConnections?.();
-      httpServer.close();
-    }
-    timeoutId = setTimeout(() => {
-      cleanup();
-      resolve({ status: "timeout" });
-    }, LOGIN_TIMEOUT_MS);
-    httpServer.listen(CALLBACK_PORT, () => {
-      console.log(`  if no browser opens, open this URL while this command is still running:
-  ${url}`);
-      open(url).catch(() => {
-        console.log("  browser launch failed \u2014 waiting for a manual browser callback.");
-      });
-    });
-    httpServer.on("error", (err) => {
-      cleanup();
-      resolve({ status: "failed", message: `callback server error: ${err.message}` });
-    });
-  });
-}
-async function runInstall(opts = {}) {
-  console.log("Plaud MCP installer\n");
-  const clients = detectClients();
-  console.log("Detected AI clients:");
-  for (const c of clients) {
-    const mark = c.detected ? "\u2713" : "\xB7";
-    console.log(`  ${mark} ${c.label.padEnd(16)} ${c.detected ? c.configPath : "(not detected)"}`);
-  }
-  console.log();
-  const selected = [];
-  if (opts.yes) {
-    for (const c of clients) {
-      if (c.detected) selected.push(c);
-    }
-    if (selected.length > 0) {
-      console.log(`--yes: configuring ${selected.map((c) => c.label).join(", ")} without prompting.
-`);
-    }
-  } else {
-    for (const c of clients) {
-      if (!c.detected) continue;
-      const yes = await prompt(`Configure ${c.label}?`, true);
-      if (yes) selected.push(c);
-    }
-  }
-  if (selected.length === 0) {
-    console.log("\nNothing to configure. Exiting.");
-    process.exit(0);
-  }
-  console.log();
-  const succeeded = [];
-  for (const c of selected) {
-    process.stdout.write(`\u2192 ${c.label}... `);
-    try {
-      let result = "";
-      if (c.id === "claude-desktop") result = await installClaudeDesktop();
-      else if (c.id === "claude-code") result = await installClaudeCode();
-      else if (c.id === "codex") result = await installCodex();
-      console.log(result);
-      if (!/^(skipped|failed)/i.test(result)) succeeded.push(c);
-    } catch (err) {
-      console.log(`failed: ${err instanceof Error ? err.message : String(err)}`);
-    }
-  }
-  const loginOutcome = opts.noLogin ? null : await doLoginStep(Boolean(opts.yes));
-  printNextSteps(succeeded, loginOutcome);
-  process.exit(0);
-}
-async function doLoginStep(nonInteractive) {
-  console.log();
-  console.log("\u2192 Authenticating with Plaud...");
-  const client = getClient();
-  try {
-    const existing = await client.auth.getAccessToken();
-    if (existing) {
-      try {
-        const user = await client.getCurrentUser();
-        const who = pickIdentity(user);
-        console.log(`  already signed in${who ? ` as ${who}` : ""} \u2014 skipping OAuth.`);
-        return { status: "already-authed", who };
-      } catch {
-        console.log("  token present but user lookup failed \u2014 will re-auth.");
-      }
-    }
-  } catch {
-  }
-  if (!nonInteractive) {
-    const yes = await prompt("Log in to Plaud now? (opens browser)", true);
-    if (!yes) {
-      console.log("  skipped \u2014 you'll be prompted on first tool call after restart.");
-      return null;
-    }
-  }
-  console.log("  opening browser \u2014 click Authorize to finish.");
-  const outcome = await runLogin();
-  switch (outcome.status) {
-    case "already-authed":
-      console.log(`  already signed in${outcome.who ? ` as ${outcome.who}` : ""}.`);
-      break;
-    case "success":
-      console.log(`  \u2713 authenticated${outcome.who ? ` as ${outcome.who}` : ""}.`);
-      break;
-    case "timeout":
-      console.log("  \u2717 timed out after 2 minutes \u2014 you can retry with `plaud-mcp install --yes` or run `login` from your AI client.");
-      break;
-    case "failed":
-      console.log(`  \u2717 failed: ${outcome.message}`);
-      break;
-  }
-  return outcome;
-}
-function restartLine(id) {
-  switch (id) {
-    case "claude-desktop":
-      return "Fully quit Claude Desktop (\u2318Q on macOS) and reopen it \u2014 closing the window is not enough.";
-    case "claude-code":
-      return "Exit any running Claude Code session and start a new `claude` session.";
-    case "codex":
-      return "Quit Codex Desktop and reopen it.";
-  }
-}
-function printNextSteps(clients, login) {
-  console.log();
-  if (clients.length === 0) {
-    console.log("No clients were configured. Nothing to do.");
-    return;
-  }
-  const authed = login?.status === "already-authed" || login?.status === "success";
-  const bar = "\u2500".repeat(60);
-  console.log(bar);
-  console.log(`\u2713 Plaud MCP installed for: ${clients.map((c) => c.label).join(", ")}`);
-  if (authed) {
-    console.log(`\u2713 Authenticated${login?.who ? ` as ${login.who}` : ""}`);
-  }
-  console.log(bar);
-  console.log();
-  if (authed) {
-    console.log("NEXT \u2014 one thing left:");
-    console.log();
-    if (clients.length === 1) {
-      console.log(`  ${restartLine(clients[0].id)}`);
-    } else {
-      console.log("  Restart each configured client:");
-      for (const c of clients) {
-        console.log(`    \u2022 ${c.label}: ${restartLine(c.id)}`);
-      }
-    }
-    console.log();
-    console.log("  After restart, Plaud tools are live \u2014 just ask your AI client");
-    console.log('  about your recordings (e.g. "list my recent Plaud recordings").');
-  } else {
-    console.log("NEXT \u2014 do these two things:");
-    console.log();
-    if (clients.length === 1) {
-      console.log(`  1. ${restartLine(clients[0].id)}`);
-    } else {
-      console.log("  1. Restart each configured client:");
-      for (const c of clients) {
-        console.log(`       \u2022 ${c.label}: ${restartLine(c.id)}`);
-      }
-    }
-    console.log();
-    console.log("  2. In any chat with your AI client, type:");
-    console.log();
-    console.log("       list my recent Plaud recordings");
-    console.log();
-    console.log("     This triggers OAuth in your browser (once). Tokens are then");
-    console.log("     stored in ~/.plaud/tokens-mcp.json and refreshed automatically.");
-  }
-  console.log();
-  console.log(bar);
-}
-export {
-  runInstall
-};