@plaud-ai/mcp 0.3.4 → 0.3.5

package/dist/{chunk-D2JZW2TW.js → chunk-FDWRBOUI.js}

@@ -82,6 +82,16 @@ var TokenStore = class {
 };
 
 // ../shared/dist/oauth.js
+function clientUserIdFromAccessToken(token) {
+  if (!token)
+    return void 0;
+  try {
+    const payload = JSON.parse(Buffer.from(token.split(".")[1], "base64url").toString());
+    return typeof payload.sub === "string" && payload.sub.length > 0 ? payload.sub : void 0;
+  } catch {
+    return void 0;
+  }
+}
 var DEFAULT_AUTHORIZATION_URL = "https://web.plaud.ai/platform/oauth";
 var DEFAULT_TOKEN_URL = "https://platform.plaud.ai/developer/api/oauth/third-party/access-token";
 var DEFAULT_REFRESH_URL = "https://platform.plaud.ai/developer/api/oauth/third-party/access-token/refresh";
@@ -497,6 +507,8 @@ var EMAIL_REGEX = /[\w.+-]+@[\w-]+\.[\w.-]+/;
 var ALLOWED_PROPERTIES = /* @__PURE__ */ new Set([
   // Global common properties (Plaud Common Event Properties + Spec §2)
   "user_id",
+  "client_user_id",
+  // per-OAuth-client user id (JWT sub, `client_user_…`); DA common param across web/CLI/stdio/HTTP (Mirela 2026-06-29)
   "member_id",
   // fill-if-present; OAuth /users/current doesn't return it yet (Q16)
   "workspace_id",
@@ -696,6 +708,7 @@ var state = {
   memberId: null,
   workspaceId: null,
   role: null,
+  clientUserId: null,
   mcpHost: null
 };
 async function initTelemetry(options) {
@@ -716,6 +729,7 @@ async function initTelemetry(options) {
   state.memberId = identity?.memberId ?? null;
   state.workspaceId = identity?.workspaceId ?? null;
   state.role = identity?.role ?? null;
+  state.clientUserId = identity?.clientUserId ?? null;
   state.currentDistinctId = identity?.idHash || userId || await getAnonymousId();
   state.initialised = true;
 }
@@ -727,6 +741,7 @@ async function setUser(userId, identity) {
   state.memberId = identity?.memberId ?? null;
   state.workspaceId = identity?.workspaceId ?? null;
   state.role = identity?.role ?? null;
+  state.clientUserId = identity?.clientUserId ?? null;
   if (state.surface) {
     try {
       await saveUserIdentity(state.surface, userId, identity);
@@ -752,6 +767,7 @@ async function clearUser() {
   state.memberId = null;
   state.workspaceId = null;
   state.role = null;
+  state.clientUserId = null;
   if (state.surface) {
     try {
       await clearUserIdentity(state.surface);
@@ -797,6 +813,8 @@ function buildCommonProperties() {
     out.transport = state.transport;
   if (state.currentUserId)
     out.user_id = state.currentUserId;
+  if (state.clientUserId)
+    out.client_user_id = state.clientUserId;
   if (state.memberId)
     out.member_id = state.memberId;
   if (state.workspaceId)
@@ -820,6 +838,7 @@ function extractIdentity(user) {
 export {
   classifyError,
   oauthCallbackErrorType,
+  clientUserIdFromAccessToken,
   PlaudClient,
   runOAuthCallback,
   shutdown,

package/dist/{chunk-LOGKF7DL.js → chunk-SEOLTKA5.js}

@@ -1,7 +1,7 @@
 import {
   PlaudClient,
   capture
-} from "./chunk-D2JZW2TW.js";
+} from "./chunk-FDWRBOUI.js";
 import {
   httpClientDuration,
   httpClientRequests

package/dist/{chunk-XWDA3G2U.js → chunk-YI4KJEAG.js}

@@ -1,7 +1,7 @@
 import {
   capture,
   classifyError
-} from "./chunk-D2JZW2TW.js";
+} from "./chunk-FDWRBOUI.js";
 import {
   logger
 } from "./chunk-NPCCDRWQ.js";

package/dist/index.js

@@ -1,18 +1,19 @@
 #!/usr/bin/env node
 import {
   getClient
-} from "./chunk-LOGKF7DL.js";
+} from "./chunk-SEOLTKA5.js";
 import {
   loadSkills
 } from "./chunk-242FRP4P.js";
 import {
   normalizeMcpHost,
   registerTools
-} from "./chunk-XWDA3G2U.js";
+} from "./chunk-YI4KJEAG.js";
 import {
   capture,
   classifyError,
   clearUser,
+  clientUserIdFromAccessToken,
   extractIdentity,
   initTelemetry,
   oauthCallbackErrorType,
@@ -20,7 +21,7 @@ import {
   setMcpHost,
   setUser,
   shutdown
-} from "./chunk-D2JZW2TW.js";
+} from "./chunk-FDWRBOUI.js";
 import "./chunk-NPCCDRWQ.js";
 import "./chunk-RUFCT6DQ.js";
 
@@ -30,7 +31,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import open from "open";
 var server = new McpServer({
   name: "plaud",
-  version: "0.3.4"
+  version: "0.3.5"
 });
 var CALLBACK_PORT = 8199;
 var LOGIN_TIMEOUT_MS = 12e4;
@@ -81,7 +82,11 @@ server.registerTool("login", {
       try {
         const user = await client.getCurrentUser();
         if (user && typeof user.id === "string") {
-          await setUser(user.id, extractIdentity(user));
+          const token = await client.auth.getAccessToken();
+          await setUser(user.id, {
+            ...extractIdentity(user),
+            clientUserId: clientUserIdFromAccessToken(token)
+          });
         }
       } catch {
       }
@@ -153,7 +158,7 @@ async function main() {
   const sub = process.argv[2];
   const sub2 = process.argv[3];
   if (sub === "install") {
-    const { runInstall } = await import("./install-ETBOS6SA.js");
+    const { runInstall } = await import("./install-OHOKLBHH.js");
     const args = process.argv.slice(3);
     const yes = args.some((a) => a === "--yes" || a === "-y");
     const noLogin = args.some((a) => a === "--no-login");
@@ -186,7 +191,7 @@ async function main() {
     return;
   }
   if (sub === "http") {
-    const { startHttpServer } = await import("./server-VVQEILKC.js");
+    const { startHttpServer } = await import("./server-XUKJZCFN.js");
     const { startMetricsServer } = await import("./server-NKCNUA6P.js");
     startMetricsServer();
     startHttpServer();
@@ -212,7 +217,7 @@ Usage:
   try {
     await initTelemetry({
       surface: "mcp",
-      appVersion: "0.3.4",
+      appVersion: "0.3.5",
       transport: "stdio"
     });
   } catch {

package/dist/{install-ETBOS6SA.js → install-OHOKLBHH.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-LOGKF7DL.js";
+} from "./chunk-SEOLTKA5.js";
 import {
   commandPathIsStale,
   copyToClipboard,
@@ -12,7 +12,7 @@ import {
 } from "./chunk-242FRP4P.js";
 import {
   runOAuthCallback
-} from "./chunk-D2JZW2TW.js";
+} from "./chunk-FDWRBOUI.js";
 import "./chunk-RUFCT6DQ.js";
 
 // src/install.ts

package/dist/{server-VVQEILKC.js → server-XUKJZCFN.js}

@@ -1,10 +1,10 @@
 import {
   normalizeMcpHost,
   registerTools
-} from "./chunk-XWDA3G2U.js";
+} from "./chunk-YI4KJEAG.js";
 import {
   PlaudClient
-} from "./chunk-D2JZW2TW.js";
+} from "./chunk-FDWRBOUI.js";
 import {
   logger
 } from "./chunk-NPCCDRWQ.js";
@@ -610,31 +610,6 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
     });
     res.redirect(target.toString());
   }
-  /**
-   * Resolve the REAL Plaud user_id (the `/users/current` `id` field) from a fresh
-   * access token — the same id the CLI/stdio telemetry and the Plaud app use, so
-   * warehouse auth.* events join with tool events, subscription and frontend data.
-   * The JWT `sub` is only an OAuth pseudo-id (`client_user_…`), so we resolve via
-   * the API. Best-effort: on any failure fall back to the JWT sub, so the event
-   * still carries a stable id and the auth flow is never blocked.
-   */
-  async resolveRealUserId(accessToken) {
-    if (!accessToken) return void 0;
-    try {
-      const client = new PlaudClient({
-        clientId: this._plaudClientId,
-        clientSecret: "",
-        redirectUri: "",
-        apiBase: this._plaudApiBase,
-        staticToken: accessToken
-      });
-      const user = await client.getCurrentUser();
-      const id = typeof user?.id === "string" ? user.id : void 0;
-      return id ?? subFromJwt(accessToken);
-    } catch {
-      return subFromJwt(accessToken);
-    }
-  }
   // Override to use PKCE public-client flow — no Basic auth, client_id sent in body.
   async exchangeAuthorizationCode(client, authorizationCode, codeVerifier, _redirectUri, resource) {
     const failedAuth = (failureKind) => {
@@ -710,7 +685,7 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
       throw new McpServerError("Token endpoint returned non-JSON response");
     }
     logger.info({ event: "oauth_token_exchange_ok", has_refresh_token: !!data.refresh_token });
-    const authorizedUserId = await this.resolveRealUserId(data.access_token);
+    const authorizedUserId = subFromJwt(data.access_token);
     this._tracker?.track({
       name: "auth.oauth_callback_success",
       actorType: "user",
@@ -782,12 +757,11 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
       throw new McpServerError("Refresh endpoint returned non-JSON response");
     }
     oauthTokenRefresh.inc({ result: "success" });
-    const refreshedUserId = await this.resolveRealUserId(data.access_token);
     this._tracker?.track({
       name: "auth.token_refresh_success",
       actorType: "user",
-      userId: refreshedUserId,
-      distinctId: refreshedUserId ?? client.client_id
+      userId: subFromJwt(data.access_token),
+      distinctId: subFromJwt(data.access_token) ?? client.client_id
     });
     logger.info({
       event: "oauth_token_refresh_ok",
@@ -1231,8 +1205,8 @@ function startHttpServer() {
     common: {
       serviceName: process.env.PLAUD_WAREHOUSE_SERVICE_NAME ?? "plaudmcp",
       // matches §1.3 key label `plaudmcp:TRACKING_KEY_PLAUDMCP`; confirm exact string with David
-      serviceVersion: "0.3.4",
-      buildId: "ce4457b",
+      serviceVersion: "0.3.5",
+      buildId: "38e7de5",
       // mcp tsup TODO: inject git short SHA (like CLI)
       region: process.env.PLAUD_REGION ?? "US",
       env: process.env.PLAUD_ENV ?? process.env.NODE_ENV ?? "development"
@@ -1473,7 +1447,7 @@ function startHttpServer() {
         apiBase,
         staticToken: token
       });
-      const mcpServer = new McpServer({ name: "plaud", version: "0.3.4" });
+      const mcpServer = new McpServer({ name: "plaud", version: "0.3.5" });
       registerTools(mcpServer, client, warehouseToolHooks);
       const transport = new StreamableHTTPServerTransport({
         sessionIdGenerator: void 0,
@@ -1481,7 +1455,8 @@ function startHttpServer() {
         enableDnsRebindingProtection: true,
         allowedOrigins: ALLOWED_ORIGINS
       });
-      const ctxUserId = req.auth.clientId && req.auth.clientId !== "unknown" ? req.auth.clientId : void 0;
+      const fallbackClientId = req.auth.clientId && req.auth.clientId !== "unknown" ? req.auth.clientId : void 0;
+      const ctxUserId = subFromJwt(token) ?? fallbackClientId;
       const telemetryCtx = {
         userId: ctxUserId,
         requestId: reqId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plaud-ai/mcp",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "type": "module",
   "main": "dist/index.js",
   "bin": {

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "plaud",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "description": "Access your Plaud recordings in Claude",
   "author": {
     "name": "Plaud AI"