@plaud-ai/mcp 0.3.7 → 0.3.8

package/dist/{chunk-OYI4PXYP.js → chunk-5NWKLF3V.js}

@@ -446,6 +446,49 @@ async function loadBlockContent(block) {
   return "";
 }
 
+// ../shared/dist/time.js
+var HAS_TIMEZONE = /(?:[Zz]|[+-]\d{2}(?::?\d{2})?)$/;
+var HAS_TIME = /\d{2}:\d{2}/;
+var DATE_ONLY = /^(\d{4})-(\d{2})-(\d{2})$/;
+function parseApiTimestamp(value) {
+  if (!value)
+    return null;
+  const trimmed = value.trim();
+  if (!trimmed)
+    return null;
+  const normalised = HAS_TIME.test(trimmed) && !HAS_TIMEZONE.test(trimmed) ? `${trimmed}Z` : trimmed;
+  const ms = new Date(normalised).getTime();
+  return Number.isNaN(ms) ? null : ms;
+}
+function localDayStart(value) {
+  const parts = parseDateOnly(value);
+  if (!parts)
+    return null;
+  const [y, m, d] = parts;
+  return new Date(y, m - 1, d, 0, 0, 0, 0).getTime();
+}
+function localDayEnd(value) {
+  const parts = parseDateOnly(value);
+  if (!parts)
+    return null;
+  const [y, m, d] = parts;
+  return new Date(y, m - 1, d + 1, 0, 0, 0, 0).getTime() - 1;
+}
+function parseDateOnly(value) {
+  if (!value)
+    return null;
+  const match = DATE_ONLY.exec(value.trim());
+  if (!match)
+    return null;
+  const y = Number(match[1]);
+  const m = Number(match[2]);
+  const d = Number(match[3]);
+  const probe = new Date(y, m - 1, d);
+  if (probe.getFullYear() !== y || probe.getMonth() !== m - 1 || probe.getDate() !== d)
+    return null;
+  return [y, m, d];
+}
+
 // ../telemetry/dist/client.js
 import { PostHog } from "posthog-node";
 
@@ -510,10 +553,18 @@ async function shutdown() {
     return;
   const client = cachedClient;
   cachedClient = null;
-  await Promise.race([
-    client.shutdown(),
-    new Promise((resolve) => setTimeout(resolve, SHUTDOWN_TIMEOUT_MS))
-  ]);
+  let timer;
+  try {
+    await Promise.race([
+      client.shutdown(),
+      new Promise((resolve) => {
+        timer = setTimeout(resolve, SHUTDOWN_TIMEOUT_MS);
+      })
+    ]);
+  } finally {
+    if (timer)
+      clearTimeout(timer);
+  }
 }
 
 // ../telemetry/dist/api.js
@@ -859,6 +910,9 @@ export {
   PlaudClient,
   runOAuthCallback,
   loadBlockContent,
+  parseApiTimestamp,
+  localDayStart,
+  localDayEnd,
   shutdown,
   initTelemetry,
   setUser,

package/dist/{chunk-VLZPO2CO.js → chunk-DKOQXKKG.js}

@@ -1,8 +1,11 @@
 import {
   capture,
   classifyError,
-  loadBlockContent
-} from "./chunk-OYI4PXYP.js";
+  loadBlockContent,
+  localDayEnd,
+  localDayStart,
+  parseApiTimestamp
+} from "./chunk-5NWKLF3V.js";
 import {
   logger
 } from "./chunk-NPCCDRWQ.js";
@@ -33,12 +36,6 @@ function decodeTranscriptCursor(cursor) {
     return null;
   }
 }
-function parseDate(s) {
-  if (!s) return null;
-  const d = new Date(s);
-  if (Number.isNaN(d.getTime())) return null;
-  return d.getTime();
-}
 function normalizeMcpHost(name) {
   if (!name) return void 0;
   const n = name.trim().toLowerCase();
@@ -98,8 +95,8 @@ function registerTools(server, client, hooks) {
         page: z.number().optional().default(1).describe("Page number (ignored when filters are set)"),
         page_size: z.number().optional().default(20).describe("Items per page (ignored when filters are set)"),
         query: z.string().optional().describe("Case-insensitive substring match on recording name"),
-        date_from: z.string().optional().describe("Start date inclusive, YYYY-MM-DD"),
-        date_to: z.string().optional().describe("End date inclusive, YYYY-MM-DD")
+        date_from: z.string().optional().describe("Start date inclusive, YYYY-MM-DD, interpreted in the server's timezone"),
+        date_to: z.string().optional().describe("End date inclusive, YYYY-MM-DD, interpreted in the server's timezone")
       }
     },
     async ({ page, page_size, query, date_from, date_to }) => {
@@ -115,9 +112,8 @@ function registerTools(server, client, hooks) {
           return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
         }
         const q = query?.toLowerCase();
-        const from = parseDate(date_from);
-        const toRaw = parseDate(date_to);
-        const to = toRaw !== null ? toRaw + 24 * 60 * 60 * 1e3 - 1 : null;
+        const from = localDayStart(date_from);
+        const to = localDayEnd(date_to);
         const matches = [];
         let scanned = 0;
         let truncated = false;
@@ -128,7 +124,7 @@ function registerTools(server, client, hooks) {
           for (const item of items) {
             if (q && !(item.name ?? "").toLowerCase().includes(q)) continue;
             if (from !== null || to !== null) {
-              const created = parseDate(item.created_at);
+              const created = parseApiTimestamp(item.created_at);
               if (created === null) continue;
               if (from !== null && created < from) continue;
               if (to !== null && created > to) continue;

package/dist/{chunk-3K3M2X74.js → chunk-EY5K2UXG.js}

@@ -1,7 +1,7 @@
 import {
   PlaudClient,
   capture
-} from "./chunk-OYI4PXYP.js";
+} from "./chunk-5NWKLF3V.js";
 import {
   httpClientDuration,
   httpClientRequests

package/dist/index.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   getClient
-} from "./chunk-3K3M2X74.js";
+} from "./chunk-EY5K2UXG.js";
 import {
   loadSkills
 } from "./chunk-242FRP4P.js";
 import {
   normalizeMcpHost,
   registerTools
-} from "./chunk-VLZPO2CO.js";
+} from "./chunk-DKOQXKKG.js";
 import {
   capture,
   classifyError,
@@ -21,7 +21,7 @@ import {
   setMcpHost,
   setUser,
   shutdown
-} from "./chunk-OYI4PXYP.js";
+} from "./chunk-5NWKLF3V.js";
 import "./chunk-NPCCDRWQ.js";
 import "./chunk-RUFCT6DQ.js";
 
@@ -31,7 +31,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import open from "open";
 var server = new McpServer({
   name: "plaud",
-  version: "0.3.7"
+  version: "0.3.8"
 });
 var CALLBACK_PORT = 8199;
 var LOGIN_TIMEOUT_MS = 12e4;
@@ -158,7 +158,7 @@ async function main() {
   const sub = process.argv[2];
   const sub2 = process.argv[3];
   if (sub === "install") {
-    const { runInstall } = await import("./install-3E63G6QX.js");
+    const { runInstall } = await import("./install-RTIXREYV.js");
     const args = process.argv.slice(3);
     const yes = args.some((a) => a === "--yes" || a === "-y");
     const noLogin = args.some((a) => a === "--no-login");
@@ -191,7 +191,7 @@ async function main() {
     return;
   }
   if (sub === "http") {
-    const { startHttpServer } = await import("./server-2HG4R4LT.js");
+    const { startHttpServer } = await import("./server-VJAFEGJ6.js");
     const { startMetricsServer } = await import("./server-NKCNUA6P.js");
     startMetricsServer();
     startHttpServer();
@@ -217,7 +217,7 @@ Usage:
   try {
     await initTelemetry({
       surface: "mcp",
-      appVersion: "0.3.7",
+      appVersion: "0.3.8",
       transport: "stdio"
     });
   } catch {

package/dist/{install-3E63G6QX.js → install-RTIXREYV.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-3K3M2X74.js";
+} from "./chunk-EY5K2UXG.js";
 import {
   commandPathIsStale,
   copyToClipboard,
@@ -12,7 +12,7 @@ import {
 } from "./chunk-242FRP4P.js";
 import {
   runOAuthCallback
-} from "./chunk-OYI4PXYP.js";
+} from "./chunk-5NWKLF3V.js";
 import "./chunk-RUFCT6DQ.js";
 
 // src/install.ts

package/dist/{server-2HG4R4LT.js → server-VJAFEGJ6.js}

@@ -1,10 +1,10 @@
 import {
   normalizeMcpHost,
   registerTools
-} from "./chunk-VLZPO2CO.js";
+} from "./chunk-DKOQXKKG.js";
 import {
   PlaudClient
-} from "./chunk-OYI4PXYP.js";
+} from "./chunk-5NWKLF3V.js";
 import {
   logger
 } from "./chunk-NPCCDRWQ.js";
@@ -380,7 +380,7 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
         return this._registeredClients.get(id);
       },
       registerClient: async (client) => {
-        const rawId = randomBytes(16).toString("base64url");
+        const rawId = this.encodeRawId(client.client_name);
         const tokenEndpointAuthMethod = client.token_endpoint_auth_method ?? "none";
         const full = {
           ...client,
@@ -428,6 +428,34 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
     const sig = createHmac("sha256", this._clientIdSecret).update(rawId).digest().subarray(0, 16);
     return `${rawId}.${sig.toString("base64url")}`;
   }
+  // Self-describing client_id: we can't persist the DCR registry across
+  // container restarts (compliance — no storage), so we encode the DCR
+  // client_name into the signed client_id itself. verifyAndRecover decodes the
+  // real name back instead of a placeholder, keeping mcp_host attribution
+  // correct across restarts (fixes the "auto-recovered client" bucket). The
+  // payload holds the app's self-reported name (not PII, capped) plus a nonce
+  // so repeat registrations get distinct ids. base64url contains no ".", so it
+  // never collides with the "<rawId>.<sig>" separator.
+  encodeRawId(clientName) {
+    const name = typeof clientName === "string" && clientName.length > 0 ? clientName.slice(0, 64) : null;
+    const payload = JSON.stringify({ v: 1, n: name, r: randomBytes(8).toString("base64url") });
+    return Buffer.from(payload, "utf8").toString("base64url");
+  }
+  // Decode the client_name embedded by encodeRawId. Returns undefined for
+  // legacy ids (random rawId issued before this fix) or anything malformed —
+  // callers fall back to the placeholder, so recovery still degrades gracefully.
+  decodeClientName(clientId) {
+    const idx = clientId.lastIndexOf(".");
+    const rawId = idx > 0 ? clientId.slice(0, idx) : clientId;
+    try {
+      const payload = JSON.parse(Buffer.from(rawId, "base64url").toString("utf8"));
+      if (payload && payload.v === 1 && typeof payload.n === "string" && payload.n.length > 0) {
+        return payload.n;
+      }
+    } catch {
+    }
+    return void 0;
+  }
   // Verify a previously-issued client_id. Returns true only for ids whose HMAC
   // signature matches our secret — i.e. ids this server (or its predecessor with
   // the same PLAUD_DCR_HMAC_SECRET) issued via registerClient.
@@ -509,6 +537,7 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
     if (!this.verifyClientIdSignature(clientId)) {
       return false;
     }
+    const recoveredName = this.decodeClientName(clientId);
     this._registeredClients.set(clientId, {
       client_id: clientId,
       client_id_issued_at: Math.floor(Date.now() / 1e3),
@@ -516,9 +545,14 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
       grant_types: ["authorization_code", "refresh_token"],
       response_types: ["code"],
       token_endpoint_auth_method: "none",
-      client_name: "auto-recovered client"
+      client_name: recoveredName ?? "auto-recovered client"
+    });
+    logger.info({
+      event: "oauth_client_recovered",
+      client_id: clientId,
+      redirect_uri: redirectUri ?? null,
+      name_recovered: recoveredName != null
     });
-    logger.info({ event: "oauth_client_recovered", client_id: clientId, redirect_uri: redirectUri ?? null });
     return true;
   }
   /**
@@ -1205,8 +1239,8 @@ function startHttpServer() {
     common: {
       serviceName: process.env.PLAUD_WAREHOUSE_SERVICE_NAME ?? "plaudmcp",
       // matches §1.3 key label `plaudmcp:TRACKING_KEY_PLAUDMCP`; confirm exact string with David
-      serviceVersion: "0.3.7",
-      buildId: "43da41f",
+      serviceVersion: "0.3.8",
+      buildId: "be0dfaa",
       // mcp tsup TODO: inject git short SHA (like CLI)
       region: process.env.PLAUD_REGION ?? "US",
       env: process.env.PLAUD_ENV ?? process.env.NODE_ENV ?? "development"
@@ -1436,7 +1470,27 @@ function startHttpServer() {
       // register…" once new-registration rate exceeds ~20/hour. Real auth still
       // happens upstream at Plaud; abuse/unbounded-growth should be bounded on
       // the in-memory client store (size/TTL cap) rather than via this per-IP limiter.
-      clientRegistrationOptions: { rateLimit: false }
+      clientRegistrationOptions: { rateLimit: false },
+      // Same failure mode on the two handshake endpoints — /register was only
+      // the first one users hit. The SDK also defaults /token to 50 requests per
+      // 15 min and /authorize to 100 per 15 min, both keyed per client IP, and
+      // behind our proxy every request presents the same upstream address, so
+      // the per-IP bucket degenerates into ONE bucket shared by all users
+      // worldwide. A reporter measured this from two continents at once: two
+      // requests 2s apart from Cyprus and Germany saw the same counter (13 and
+      // 11 remaining, reset 671s/672s), and the bucket drained ~13 req/min from
+      // other traffic alone, i.e. it is empty almost continuously.
+      //
+      // /token is the worst place to cap: it is the only handshake endpoint that
+      // repeats after login, because every silent refresh_token renewal goes
+      // through it. Exhausting it does not just block new logins — it breaks
+      // token renewal for users who are already connected.
+      //
+      // Real authentication and abuse control live upstream at Plaud (and at the
+      // edge); this in-process per-IP limiter cannot see past the proxy, so it
+      // can only produce false positives.
+      tokenOptions: { rateLimit: false },
+      authorizationOptions: { rateLimit: false }
     })
   );
   app.post(
@@ -1455,7 +1509,7 @@ function startHttpServer() {
         apiBase,
         staticToken: token
       });
-      const mcpServer = new McpServer({ name: "plaud", version: "0.3.7" });
+      const mcpServer = new McpServer({ name: "plaud", version: "0.3.8" });
       registerTools(mcpServer, client, warehouseToolHooks);
       const transport = new StreamableHTTPServerTransport({
         sessionIdGenerator: void 0,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plaud-ai/mcp",
-  "version": "0.3.7",
+  "version": "0.3.8",
   "type": "module",
   "main": "dist/index.js",
   "bin": {

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "plaud",
-  "version": "0.3.7",
+  "version": "0.3.8",
   "description": "Access your Plaud recordings in Claude",
   "author": {
     "name": "Plaud AI"