@plaud-ai/mcp 0.3.3 → 0.3.5

package/dist/{chunk-D2JZW2TW.js → chunk-FDWRBOUI.js}

@@ -82,6 +82,16 @@ var TokenStore = class {
 };
 
 // ../shared/dist/oauth.js
+function clientUserIdFromAccessToken(token) {
+  if (!token)
+    return void 0;
+  try {
+    const payload = JSON.parse(Buffer.from(token.split(".")[1], "base64url").toString());
+    return typeof payload.sub === "string" && payload.sub.length > 0 ? payload.sub : void 0;
+  } catch {
+    return void 0;
+  }
+}
 var DEFAULT_AUTHORIZATION_URL = "https://web.plaud.ai/platform/oauth";
 var DEFAULT_TOKEN_URL = "https://platform.plaud.ai/developer/api/oauth/third-party/access-token";
 var DEFAULT_REFRESH_URL = "https://platform.plaud.ai/developer/api/oauth/third-party/access-token/refresh";
@@ -497,6 +507,8 @@ var EMAIL_REGEX = /[\w.+-]+@[\w-]+\.[\w.-]+/;
 var ALLOWED_PROPERTIES = /* @__PURE__ */ new Set([
   // Global common properties (Plaud Common Event Properties + Spec §2)
   "user_id",
+  "client_user_id",
+  // per-OAuth-client user id (JWT sub, `client_user_…`); DA common param across web/CLI/stdio/HTTP (Mirela 2026-06-29)
   "member_id",
   // fill-if-present; OAuth /users/current doesn't return it yet (Q16)
   "workspace_id",
@@ -696,6 +708,7 @@ var state = {
   memberId: null,
   workspaceId: null,
   role: null,
+  clientUserId: null,
   mcpHost: null
 };
 async function initTelemetry(options) {
@@ -716,6 +729,7 @@ async function initTelemetry(options) {
   state.memberId = identity?.memberId ?? null;
   state.workspaceId = identity?.workspaceId ?? null;
   state.role = identity?.role ?? null;
+  state.clientUserId = identity?.clientUserId ?? null;
   state.currentDistinctId = identity?.idHash || userId || await getAnonymousId();
   state.initialised = true;
 }
@@ -727,6 +741,7 @@ async function setUser(userId, identity) {
   state.memberId = identity?.memberId ?? null;
   state.workspaceId = identity?.workspaceId ?? null;
   state.role = identity?.role ?? null;
+  state.clientUserId = identity?.clientUserId ?? null;
   if (state.surface) {
     try {
       await saveUserIdentity(state.surface, userId, identity);
@@ -752,6 +767,7 @@ async function clearUser() {
   state.memberId = null;
   state.workspaceId = null;
   state.role = null;
+  state.clientUserId = null;
   if (state.surface) {
     try {
       await clearUserIdentity(state.surface);
@@ -797,6 +813,8 @@ function buildCommonProperties() {
     out.transport = state.transport;
   if (state.currentUserId)
     out.user_id = state.currentUserId;
+  if (state.clientUserId)
+    out.client_user_id = state.clientUserId;
   if (state.memberId)
     out.member_id = state.memberId;
   if (state.workspaceId)
@@ -820,6 +838,7 @@ function extractIdentity(user) {
 export {
   classifyError,
   oauthCallbackErrorType,
+  clientUserIdFromAccessToken,
   PlaudClient,
   runOAuthCallback,
   shutdown,

package/dist/{chunk-LOGKF7DL.js → chunk-SEOLTKA5.js}

@@ -1,7 +1,7 @@
 import {
   PlaudClient,
   capture
-} from "./chunk-D2JZW2TW.js";
+} from "./chunk-FDWRBOUI.js";
 import {
   httpClientDuration,
   httpClientRequests

package/dist/{chunk-WR565PER.js → chunk-VHTXWQUE.js}

@@ -13,11 +13,12 @@ var SKILLS_MARKER_START = "<!-- plaud-skills:start -->";
 var SKILLS_MARKER_END = "<!-- plaud-skills:end -->";
 function findNodeBinCommand(command) {
   const commandName = platform() === "win32" ? `${command}.cmd` : command;
+  const sibling = join(dirname(process.execPath), commandName);
+  if (existsSync(sibling)) return sibling;
   const found = spawnSync(platform() === "win32" ? "where" : "which", [commandName], { encoding: "utf-8" });
   const firstMatch = found.status === 0 ? found.stdout.split(/\r?\n/).find((line) => line.trim())?.trim() : void 0;
   if (firstMatch) return firstMatch;
-  const sibling = join(dirname(process.execPath), commandName);
-  return existsSync(sibling) ? sibling : commandName;
+  return commandName;
 }
 function isLocalPackageSpec(spec) {
   return spec.endsWith(".tgz") || spec.startsWith(".") || spec.startsWith("/") || /^[A-Za-z]:[\\/]/.test(spec);
@@ -35,6 +36,12 @@ function getMcpEntry() {
     args: ["-y", packageSpec]
   };
 }
+function commandPathIsStale(command) {
+  if (!command) return false;
+  if (command.includes("fnm_multishells")) return true;
+  const isAbsolute = command.startsWith("/") || /^[A-Za-z]:[\\/]/.test(command);
+  return isAbsolute && !existsSync(command);
+}
 function copyToClipboard(content) {
   if (platform() === "win32") {
     return spawnSync("clip", [], { input: content }).status === 0;
@@ -82,6 +89,7 @@ async function removeLegacySkillsBlock() {
 
 export {
   getMcpEntry,
+  commandPathIsStale,
   copyToClipboard,
   installSkillsToClaudeCode,
   removeSkillsFromClaudeCode

package/dist/{chunk-XWDA3G2U.js → chunk-YI4KJEAG.js}

@@ -1,7 +1,7 @@
 import {
   capture,
   classifyError
-} from "./chunk-D2JZW2TW.js";
+} from "./chunk-FDWRBOUI.js";
 import {
   logger
 } from "./chunk-NPCCDRWQ.js";

package/dist/index.js

@@ -1,18 +1,19 @@
 #!/usr/bin/env node
 import {
   getClient
-} from "./chunk-LOGKF7DL.js";
+} from "./chunk-SEOLTKA5.js";
 import {
   loadSkills
 } from "./chunk-242FRP4P.js";
 import {
   normalizeMcpHost,
   registerTools
-} from "./chunk-XWDA3G2U.js";
+} from "./chunk-YI4KJEAG.js";
 import {
   capture,
   classifyError,
   clearUser,
+  clientUserIdFromAccessToken,
   extractIdentity,
   initTelemetry,
   oauthCallbackErrorType,
@@ -20,7 +21,7 @@ import {
   setMcpHost,
   setUser,
   shutdown
-} from "./chunk-D2JZW2TW.js";
+} from "./chunk-FDWRBOUI.js";
 import "./chunk-NPCCDRWQ.js";
 import "./chunk-RUFCT6DQ.js";
 
@@ -30,7 +31,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import open from "open";
 var server = new McpServer({
   name: "plaud",
-  version: "0.3.3"
+  version: "0.3.5"
 });
 var CALLBACK_PORT = 8199;
 var LOGIN_TIMEOUT_MS = 12e4;
@@ -81,7 +82,11 @@ server.registerTool("login", {
       try {
         const user = await client.getCurrentUser();
         if (user && typeof user.id === "string") {
-          await setUser(user.id, extractIdentity(user));
+          const token = await client.auth.getAccessToken();
+          await setUser(user.id, {
+            ...extractIdentity(user),
+            clientUserId: clientUserIdFromAccessToken(token)
+          });
         }
       } catch {
       }
@@ -153,7 +158,7 @@ async function main() {
   const sub = process.argv[2];
   const sub2 = process.argv[3];
   if (sub === "install") {
-    const { runInstall } = await import("./install-XCMWU6GQ.js");
+    const { runInstall } = await import("./install-OHOKLBHH.js");
     const args = process.argv.slice(3);
     const yes = args.some((a) => a === "--yes" || a === "-y");
     const noLogin = args.some((a) => a === "--no-login");
@@ -161,32 +166,32 @@ async function main() {
     return;
   }
   if (sub === "clean-plugin") {
-    const { runCleanPlugin } = await import("./setup-N55HQZFZ.js");
+    const { runCleanPlugin } = await import("./setup-SMS45JC5.js");
     await runCleanPlugin();
     return;
   }
   if (sub === "setup" && sub2 === "codex") {
-    const { runSetupCodex } = await import("./setup-N55HQZFZ.js");
+    const { runSetupCodex } = await import("./setup-SMS45JC5.js");
     await runSetupCodex();
     return;
   }
   if (sub === "unsetup" && sub2 === "codex") {
-    const { runUnsetupCodex } = await import("./setup-N55HQZFZ.js");
+    const { runUnsetupCodex } = await import("./setup-SMS45JC5.js");
     await runUnsetupCodex();
     return;
   }
   if (sub === "setup") {
-    const { runSetup } = await import("./setup-N55HQZFZ.js");
+    const { runSetup } = await import("./setup-SMS45JC5.js");
     await runSetup();
     return;
   }
   if (sub === "unsetup") {
-    const { runUnsetup } = await import("./setup-N55HQZFZ.js");
+    const { runUnsetup } = await import("./setup-SMS45JC5.js");
     await runUnsetup();
     return;
   }
   if (sub === "http") {
-    const { startHttpServer } = await import("./server-DDSU6DGR.js");
+    const { startHttpServer } = await import("./server-XUKJZCFN.js");
     const { startMetricsServer } = await import("./server-NKCNUA6P.js");
     startMetricsServer();
     startHttpServer();
@@ -212,7 +217,7 @@ Usage:
   try {
     await initTelemetry({
       surface: "mcp",
-      appVersion: "0.3.3",
+      appVersion: "0.3.5",
       transport: "stdio"
     });
   } catch {

package/dist/{install-XCMWU6GQ.js → install-OHOKLBHH.js}

@@ -1,17 +1,18 @@
 import {
   getClient
-} from "./chunk-LOGKF7DL.js";
+} from "./chunk-SEOLTKA5.js";
 import {
+  commandPathIsStale,
   copyToClipboard,
   getMcpEntry,
   installSkillsToClaudeCode
-} from "./chunk-WR565PER.js";
+} from "./chunk-VHTXWQUE.js";
 import {
   skillsCombined
 } from "./chunk-242FRP4P.js";
 import {
   runOAuthCallback
-} from "./chunk-D2JZW2TW.js";
+} from "./chunk-FDWRBOUI.js";
 import "./chunk-RUFCT6DQ.js";
 
 // src/install.ts
@@ -84,12 +85,38 @@ import { existsSync as existsSync2 } from "fs";
 import { homedir as homedir2 } from "os";
 import { dirname, join as join2 } from "path";
 var RESTART_HINT2 = "Quit Codex Desktop and reopen it.";
+var PLAUD_HEADER = "[mcp_servers.plaud]";
 function codexConfigPath() {
   return join2(homedir2(), ".codex", "config.toml");
 }
 function quoteTomlString(value) {
   return JSON.stringify(value);
 }
+function plaudBlockRange(lines) {
+  const start = lines.findIndex((l) => l.trim() === PLAUD_HEADER);
+  if (start === -1) return null;
+  let end = lines.length;
+  for (let i = start + 1; i < lines.length; i++) {
+    if (/^\s*\[/.test(lines[i])) {
+      end = i;
+      break;
+    }
+  }
+  return { start, end };
+}
+function extractCommand(blockLines) {
+  for (const line of blockLines) {
+    const m = line.match(/^\s*command\s*=\s*("(?:[^"\\]|\\.)*")\s*$/);
+    if (m) {
+      try {
+        return JSON.parse(m[1]);
+      } catch {
+        return void 0;
+      }
+    }
+  }
+  return void 0;
+}
 function codexAdapter() {
   return {
     id: "codex",
@@ -101,25 +128,38 @@ function codexAdapter() {
     async install({ entry }) {
       const configPath = codexConfigPath();
       const argsStr = entry.args.map(quoteTomlString).join(", ");
-      const serverEntry = `
-[mcp_servers.plaud]
+      const blockBody = `${PLAUD_HEADER}
 command = ${quoteTomlString(entry.command)}
-args = [${argsStr}]
-`;
+args = [${argsStr}]`;
       let content = "";
       try {
         content = await readFile(configPath, "utf-8");
       } catch {
       }
-      if (content.includes("[mcp_servers.plaud]")) {
+      const lines = content.split("\n");
+      const range = plaudBlockRange(lines);
+      if (range) {
+        const existingCommand = extractCommand(lines.slice(range.start, range.end));
+        if (!commandPathIsStale(existingCommand)) {
+          return {
+            status: "already-configured",
+            message: "already configured",
+            restartHint: RESTART_HINT2
+          };
+        }
+        const rebuilt = [...lines.slice(0, range.start), ...blockBody.split("\n"), ...lines.slice(range.end)].join("\n");
+        await mkdir(dirname(configPath), { recursive: true });
+        await writeFile(configPath, rebuilt, "utf-8");
         return {
-          status: "already-configured",
-          message: "already configured",
+          status: "configured",
+          message: "repaired stale launch path (now stable npx @latest)",
           restartHint: RESTART_HINT2
         };
       }
       await mkdir(dirname(configPath), { recursive: true });
-      await writeFile(configPath, content + serverEntry, "utf-8");
+      await writeFile(configPath, content + `
+${blockBody}
+`, "utf-8");
       const combined = await skillsCombined();
       const copied = copyToClipboard(combined);
       return {
@@ -185,19 +225,21 @@ function jsonMcpServersAdapter(spec) {
       const servers = existingServers ?? {};
       const existing = servers[serverKey];
       if (existing) {
-        if (entryAutoUpdates(existing)) {
+        const existingCommand = isJsonObject(existing) && typeof existing.command === "string" ? existing.command : void 0;
+        if (entryAutoUpdates(existing) && !commandPathIsStale(existingCommand)) {
           return {
             status: "already-configured",
             message: "already configured (npx @latest \u2014 auto-updates)",
             restartHint: spec.restartHint
           };
         }
+        const repairing = entryAutoUpdates(existing);
         config[rootKey] = { ...servers, [serverKey]: toEntry(ctx.entry) };
         await mkdir2(dirname2(configPath), { recursive: true });
         await writeFile2(configPath, JSON.stringify(config, null, 2), "utf-8");
         return {
           status: "configured",
-          message: "migrated to npx @latest (was pinned/local \u2014 now auto-updates)",
+          message: repairing ? "repaired stale launch path (now stable npx @latest)" : "migrated to npx @latest (was pinned/local \u2014 now auto-updates)",
           restartHint: spec.restartHint
         };
       }
@@ -297,10 +339,13 @@ function zedAdapter() {
         return { status: "failed", message: `failed: ${configPath} field context_servers must be a JSON object.` };
       }
       const servers = existingServers ?? {};
-      if (servers.plaud && entryAutoUpdates2(servers.plaud)) {
+      const existingPlaud = servers.plaud;
+      const existingPath = isJsonObject2(existingPlaud) && isJsonObject2(existingPlaud.command) && typeof existingPlaud.command.path === "string" ? existingPlaud.command.path : void 0;
+      if (existingPlaud && entryAutoUpdates2(existingPlaud) && !commandPathIsStale(existingPath)) {
         return { status: "already-configured", message: "already configured (npx @latest \u2014 auto-updates)", restartHint: RESTART_HINT3 };
       }
-      const migrating = Boolean(servers.plaud);
+      const repairing = Boolean(existingPlaud) && entryAutoUpdates2(existingPlaud);
+      const migrating = Boolean(existingPlaud);
       config.context_servers = {
         ...servers,
         plaud: { command: { path: entry.command, args: entry.args } }
@@ -309,7 +354,7 @@ function zedAdapter() {
       await writeFile3(configPath, JSON.stringify(config, null, 2), "utf-8");
       return {
         status: "configured",
-        message: migrating ? "migrated to npx @latest (was pinned/local \u2014 now auto-updates). Restart Zed." : "configured. Restart Zed to load the Plaud MCP.",
+        message: repairing ? "repaired stale launch path (now stable npx @latest). Restart Zed." : migrating ? "migrated to npx @latest (was pinned/local \u2014 now auto-updates). Restart Zed." : "configured. Restart Zed to load the Plaud MCP.",
         restartHint: RESTART_HINT3
       };
     }

package/dist/{server-DDSU6DGR.js → server-XUKJZCFN.js}

@@ -1,10 +1,10 @@
 import {
   normalizeMcpHost,
   registerTools
-} from "./chunk-XWDA3G2U.js";
+} from "./chunk-YI4KJEAG.js";
 import {
   PlaudClient
-} from "./chunk-D2JZW2TW.js";
+} from "./chunk-FDWRBOUI.js";
 import {
   logger
 } from "./chunk-NPCCDRWQ.js";
@@ -610,31 +610,6 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
     });
     res.redirect(target.toString());
   }
-  /**
-   * Resolve the REAL Plaud user_id (the `/users/current` `id` field) from a fresh
-   * access token — the same id the CLI/stdio telemetry and the Plaud app use, so
-   * warehouse auth.* events join with tool events, subscription and frontend data.
-   * The JWT `sub` is only an OAuth pseudo-id (`client_user_…`), so we resolve via
-   * the API. Best-effort: on any failure fall back to the JWT sub, so the event
-   * still carries a stable id and the auth flow is never blocked.
-   */
-  async resolveRealUserId(accessToken) {
-    if (!accessToken) return void 0;
-    try {
-      const client = new PlaudClient({
-        clientId: this._plaudClientId,
-        clientSecret: "",
-        redirectUri: "",
-        apiBase: this._plaudApiBase,
-        staticToken: accessToken
-      });
-      const user = await client.getCurrentUser();
-      const id = typeof user?.id === "string" ? user.id : void 0;
-      return id ?? subFromJwt(accessToken);
-    } catch {
-      return subFromJwt(accessToken);
-    }
-  }
   // Override to use PKCE public-client flow — no Basic auth, client_id sent in body.
   async exchangeAuthorizationCode(client, authorizationCode, codeVerifier, _redirectUri, resource) {
     const failedAuth = (failureKind) => {
@@ -710,7 +685,7 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
       throw new McpServerError("Token endpoint returned non-JSON response");
     }
     logger.info({ event: "oauth_token_exchange_ok", has_refresh_token: !!data.refresh_token });
-    const authorizedUserId = await this.resolveRealUserId(data.access_token);
+    const authorizedUserId = subFromJwt(data.access_token);
     this._tracker?.track({
       name: "auth.oauth_callback_success",
       actorType: "user",
@@ -782,12 +757,11 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
       throw new McpServerError("Refresh endpoint returned non-JSON response");
     }
     oauthTokenRefresh.inc({ result: "success" });
-    const refreshedUserId = await this.resolveRealUserId(data.access_token);
     this._tracker?.track({
       name: "auth.token_refresh_success",
       actorType: "user",
-      userId: refreshedUserId,
-      distinctId: refreshedUserId ?? client.client_id
+      userId: subFromJwt(data.access_token),
+      distinctId: subFromJwt(data.access_token) ?? client.client_id
     });
     logger.info({
       event: "oauth_token_refresh_ok",
@@ -1231,8 +1205,8 @@ function startHttpServer() {
     common: {
       serviceName: process.env.PLAUD_WAREHOUSE_SERVICE_NAME ?? "plaudmcp",
       // matches §1.3 key label `plaudmcp:TRACKING_KEY_PLAUDMCP`; confirm exact string with David
-      serviceVersion: "0.3.3",
-      buildId: "76e2306",
+      serviceVersion: "0.3.5",
+      buildId: "38e7de5",
       // mcp tsup TODO: inject git short SHA (like CLI)
       region: process.env.PLAUD_REGION ?? "US",
       env: process.env.PLAUD_ENV ?? process.env.NODE_ENV ?? "development"
@@ -1473,7 +1447,7 @@ function startHttpServer() {
         apiBase,
         staticToken: token
       });
-      const mcpServer = new McpServer({ name: "plaud", version: "0.3.3" });
+      const mcpServer = new McpServer({ name: "plaud", version: "0.3.5" });
       registerTools(mcpServer, client, warehouseToolHooks);
       const transport = new StreamableHTTPServerTransport({
         sessionIdGenerator: void 0,
@@ -1481,7 +1455,8 @@ function startHttpServer() {
         enableDnsRebindingProtection: true,
         allowedOrigins: ALLOWED_ORIGINS
       });
-      const ctxUserId = req.auth.clientId && req.auth.clientId !== "unknown" ? req.auth.clientId : void 0;
+      const fallbackClientId = req.auth.clientId && req.auth.clientId !== "unknown" ? req.auth.clientId : void 0;
+      const ctxUserId = subFromJwt(token) ?? fallbackClientId;
       const telemetryCtx = {
         userId: ctxUserId,
         requestId: reqId,

package/dist/{setup-N55HQZFZ.js → setup-SMS45JC5.js}

@@ -3,7 +3,7 @@ import {
   getMcpEntry,
   installSkillsToClaudeCode,
   removeSkillsFromClaudeCode
-} from "./chunk-WR565PER.js";
+} from "./chunk-VHTXWQUE.js";
 import {
   skillsCombined
 } from "./chunk-242FRP4P.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plaud-ai/mcp",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "type": "module",
   "main": "dist/index.js",
   "bin": {

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "plaud",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "description": "Access your Plaud recordings in Claude",
   "author": {
     "name": "Plaud AI"