@plaud-ai/mcp 0.3.7 → 0.3.9

package/dist/{chunk-OYI4PXYP.js → chunk-5NWKLF3V.js}

@@ -446,6 +446,49 @@ async function loadBlockContent(block) {
   return "";
 }
 
+// ../shared/dist/time.js
+var HAS_TIMEZONE = /(?:[Zz]|[+-]\d{2}(?::?\d{2})?)$/;
+var HAS_TIME = /\d{2}:\d{2}/;
+var DATE_ONLY = /^(\d{4})-(\d{2})-(\d{2})$/;
+function parseApiTimestamp(value) {
+  if (!value)
+    return null;
+  const trimmed = value.trim();
+  if (!trimmed)
+    return null;
+  const normalised = HAS_TIME.test(trimmed) && !HAS_TIMEZONE.test(trimmed) ? `${trimmed}Z` : trimmed;
+  const ms = new Date(normalised).getTime();
+  return Number.isNaN(ms) ? null : ms;
+}
+function localDayStart(value) {
+  const parts = parseDateOnly(value);
+  if (!parts)
+    return null;
+  const [y, m, d] = parts;
+  return new Date(y, m - 1, d, 0, 0, 0, 0).getTime();
+}
+function localDayEnd(value) {
+  const parts = parseDateOnly(value);
+  if (!parts)
+    return null;
+  const [y, m, d] = parts;
+  return new Date(y, m - 1, d + 1, 0, 0, 0, 0).getTime() - 1;
+}
+function parseDateOnly(value) {
+  if (!value)
+    return null;
+  const match = DATE_ONLY.exec(value.trim());
+  if (!match)
+    return null;
+  const y = Number(match[1]);
+  const m = Number(match[2]);
+  const d = Number(match[3]);
+  const probe = new Date(y, m - 1, d);
+  if (probe.getFullYear() !== y || probe.getMonth() !== m - 1 || probe.getDate() !== d)
+    return null;
+  return [y, m, d];
+}
+
 // ../telemetry/dist/client.js
 import { PostHog } from "posthog-node";
 
@@ -510,10 +553,18 @@ async function shutdown() {
     return;
   const client = cachedClient;
   cachedClient = null;
-  await Promise.race([
-    client.shutdown(),
-    new Promise((resolve) => setTimeout(resolve, SHUTDOWN_TIMEOUT_MS))
-  ]);
+  let timer;
+  try {
+    await Promise.race([
+      client.shutdown(),
+      new Promise((resolve) => {
+        timer = setTimeout(resolve, SHUTDOWN_TIMEOUT_MS);
+      })
+    ]);
+  } finally {
+    if (timer)
+      clearTimeout(timer);
+  }
 }
 
 // ../telemetry/dist/api.js
@@ -859,6 +910,9 @@ export {
   PlaudClient,
   runOAuthCallback,
   loadBlockContent,
+  parseApiTimestamp,
+  localDayStart,
+  localDayEnd,
   shutdown,
   initTelemetry,
   setUser,

package/dist/{chunk-3K3M2X74.js → chunk-EY5K2UXG.js}

@@ -1,7 +1,7 @@
 import {
   PlaudClient,
   capture
-} from "./chunk-OYI4PXYP.js";
+} from "./chunk-5NWKLF3V.js";
 import {
   httpClientDuration,
   httpClientRequests

package/dist/{chunk-VLZPO2CO.js → chunk-FSNFNJXH.js}

@@ -1,8 +1,11 @@
 import {
   capture,
   classifyError,
-  loadBlockContent
-} from "./chunk-OYI4PXYP.js";
+  loadBlockContent,
+  localDayEnd,
+  localDayStart,
+  parseApiTimestamp
+} from "./chunk-5NWKLF3V.js";
 import {
   logger
 } from "./chunk-NPCCDRWQ.js";
@@ -18,7 +21,29 @@ var toolHooks = null;
 var MAX_FILTER_PAGES = 5;
 var FILTER_PAGE_SIZE = 100;
 var TRANSCRIPT_PAGE_SIZE = 50;
-var TRANSCRIPT_BLOCKS = ["transaction", "outline", "transaction_polish"];
+var TRANSCRIPT_BLOCKS = ["transaction", "outline", "transaction_polish", "mark_memo"];
+var BLOCK_ITEMS_KEY = { mark_memo: "marks" };
+function linkBackedTypes(list) {
+  return (list ?? []).filter(
+    (b) => !(typeof b.data_content === "string" && b.data_content.length > 0) && typeof b.data_link === "string" && b.data_link.length > 0
+  ).map((b) => typeof b.data_type === "string" ? b.data_type : "(untyped)");
+}
+async function resolveNotes(noteList) {
+  return Promise.all(
+    noteList.map(async (note) => {
+      if (typeof note.data_content === "string" && note.data_content.length > 0) return note;
+      if (typeof note.data_link !== "string" || note.data_link.length === 0) return note;
+      try {
+        return { ...note, data_content: await loadBlockContent(note) };
+      } catch (err) {
+        return {
+          ...note,
+          data_content_error: err instanceof Error ? err.message : "Failed to fetch content from data_link"
+        };
+      }
+    })
+  );
+}
 function encodeTranscriptCursor(offset) {
   return Buffer.from(JSON.stringify({ o: offset }), "utf8").toString("base64url");
 }
@@ -33,12 +58,6 @@ function decodeTranscriptCursor(cursor) {
     return null;
   }
 }
-function parseDate(s) {
-  if (!s) return null;
-  const d = new Date(s);
-  if (Number.isNaN(d.getTime())) return null;
-  return d.getTime();
-}
 function normalizeMcpHost(name) {
   if (!name) return void 0;
   const n = name.trim().toLowerCase();
@@ -98,8 +117,8 @@ function registerTools(server, client, hooks) {
         page: z.number().optional().default(1).describe("Page number (ignored when filters are set)"),
         page_size: z.number().optional().default(20).describe("Items per page (ignored when filters are set)"),
         query: z.string().optional().describe("Case-insensitive substring match on recording name"),
-        date_from: z.string().optional().describe("Start date inclusive, YYYY-MM-DD"),
-        date_to: z.string().optional().describe("End date inclusive, YYYY-MM-DD")
+        date_from: z.string().optional().describe("Start date inclusive, YYYY-MM-DD, interpreted in the server's timezone"),
+        date_to: z.string().optional().describe("End date inclusive, YYYY-MM-DD, interpreted in the server's timezone")
       }
     },
     async ({ page, page_size, query, date_from, date_to }) => {
@@ -115,9 +134,8 @@ function registerTools(server, client, hooks) {
           return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
         }
         const q = query?.toLowerCase();
-        const from = parseDate(date_from);
-        const toRaw = parseDate(date_to);
-        const to = toRaw !== null ? toRaw + 24 * 60 * 60 * 1e3 - 1 : null;
+        const from = localDayStart(date_from);
+        const to = localDayEnd(date_to);
         const matches = [];
         let scanned = 0;
         let truncated = false;
@@ -128,7 +146,7 @@ function registerTools(server, client, hooks) {
           for (const item of items) {
             if (q && !(item.name ?? "").toLowerCase().includes(q)) continue;
             if (from !== null || to !== null) {
-              const created = parseDate(item.created_at);
+              const created = parseApiTimestamp(item.created_at);
               if (created === null) continue;
               if (from !== null && created < from) continue;
               if (to !== null && created > to) continue;
@@ -179,6 +197,18 @@ function registerTools(server, client, hooks) {
           const synced = !!(file.duration || file.source_list && file.source_list.length);
           text += synced ? "\n\nNote: `presigned_url` (audio download URL) is null for this otherwise-synced recording. This is usually a transient backend signing issue \u2014 retry get_file in a few minutes to obtain the URL." : "\n\nNote: `presigned_url` (audio download URL) is null \u2014 audio may not yet be available for this recording.";
         }
+        const linkedBlocks = linkBackedTypes(file.source_list);
+        const linkedNotes = linkBackedTypes(file.note_list);
+        if (linkedBlocks.length) {
+          text += `
+
+Note: source_list ${linkedBlocks.map((t) => `\`${t}\``).join(", ")} returned an empty \`data_content\` \u2014 the body lives behind \`data_link\`, not missing. Call get_transcript with the matching \`block\` to read it (it fetches the link).`;
+        }
+        if (linkedNotes.length) {
+          text += `
+
+Note: note_list ${linkedNotes.map((t) => `\`${t}\``).join(", ")} returned an empty \`data_content\` \u2014 the body lives behind \`data_link\`, not missing. Call get_note to read it (it fetches the link).`;
+        }
         recordToolMetric("get_file", "success", Date.now() - start, requestId, { file_id });
         logger.info({ event: "tool_call_end", tool: "get_file", duration_ms: Date.now() - start, presigned_url_present: !!file.presigned_url });
         return { content: [{ type: "text", text }] };
@@ -192,7 +222,7 @@ function registerTools(server, client, hooks) {
   server.registerTool(
     "get_note",
     {
-      description: "Fetch AI-generated notes for a Plaud recording \u2014 compact summary, action items, and key topics",
+      description: "Fetch the notes on a Plaud recording \u2014 one entry per tab in the app, so usually more than one: the AI summary (action items, key topics), any template tab, a saved Ask Plaud answer, and the highlights note when the user pressed the highlight button while recording.",
       annotations: {
         title: "Get recording notes",
         readOnlyHint: true,
@@ -207,9 +237,10 @@ function registerTools(server, client, hooks) {
       const requestId = emitToolClick("get_note", { file_id });
       try {
         const file = await client.getFile(file_id);
+        const notes = await resolveNotes(file.note_list ?? []);
         recordToolMetric("get_note", "success", Date.now() - start, requestId, { file_id });
-        logger.info({ event: "tool_call_end", tool: "get_note", duration_ms: Date.now() - start });
-        return { content: [{ type: "text", text: JSON.stringify(file.note_list ?? [], null, 2) }] };
+        logger.info({ event: "tool_call_end", tool: "get_note", duration_ms: Date.now() - start, notes: notes.length });
+        return { content: [{ type: "text", text: JSON.stringify(notes, null, 2) }] };
       } catch (err) {
         recordToolMetric("get_note", "error", Date.now() - start, requestId, { file_id }, err);
         logger.error({ event: "tool_call_error", tool: "get_note", duration_ms: Date.now() - start, error: String(err) });
@@ -220,7 +251,7 @@ function registerTools(server, client, hooks) {
   server.registerTool(
     "get_transcript",
     {
-      description: "Fetch the timestamped transcript with speaker attribution for a Plaud recording. Defaults to the `transaction` block (real speaker names + timestamps), returned one page of utterances at a time to stay within client size limits \u2014 call again with the returned `next_cursor` to fetch the next page. Set `block` to `outline` or `transaction_polish` to fetch those blocks instead.",
+      description: "Fetch the timestamped transcript with speaker attribution for a Plaud recording. Defaults to the `transaction` block (real speaker names + timestamps), returned one page of utterances at a time to stay within client size limits \u2014 call again with the returned `next_cursor` to fetch the next page. Set `block` to `outline`, `transaction_polish`, or `mark_memo` (the moments the user flagged with the device's highlight button) to fetch those blocks instead.",
       annotations: {
         title: "Get recording transcript",
         readOnlyHint: true,
@@ -230,10 +261,10 @@ function registerTools(server, client, hooks) {
       inputSchema: {
         file_id: z.string().describe("The file ID to retrieve transcript for"),
         block: z.enum(TRANSCRIPT_BLOCKS).optional().describe(
-          "Which source block to fetch: `transaction` (default; raw transcript, speaker + timestamps), `transaction_polish` (AI-cleaned transcript; same per-utterance shape, keeps speaker + timestamps), or `outline`."
+          "Which source block to fetch: `transaction` (default; raw transcript, speaker + timestamps), `transaction_polish` (AI-cleaned transcript; same per-utterance shape, keeps speaker + timestamps), `outline`, or `mark_memo` (highlights: the moments flagged by pressing the button on the device during recording; present only when the button was pressed, and returned under `marks`). Pair `mark_memo` with a `transaction` call to map each flagged moment onto what was said there."
         ),
         cursor: z.string().optional().describe("Opaque pagination cursor from a previous call's `next_cursor`. Omit to start from the first utterance."),
-        limit: z.number().int().min(1).max(500).optional().describe(`Max utterances to return in this page (default ${TRANSCRIPT_PAGE_SIZE}). Only applies to blocks returned as an utterance list.`)
+        limit: z.number().int().min(1).max(500).optional().describe(`Max items to return in this page (default ${TRANSCRIPT_PAGE_SIZE}). Only applies to list-shaped blocks.`)
       }
     },
     async ({ file_id, block, cursor, limit }) => {
@@ -271,7 +302,7 @@ function registerTools(server, client, hooks) {
         if (!segments) {
           recordToolMetric("get_transcript", "success", Date.now() - start, requestId, { file_id });
           logger.info({ event: "tool_call_end", tool: "get_transcript", duration_ms: Date.now() - start, block: blockType, paginated: false });
-          const text = content || `Block "${blockType}" has no content for this recording yet.`;
+          const text = content || (blockType === "mark_memo" ? "This recording has a highlights block, but it is empty \u2014 no highlight was recorded." : `Block "${blockType}" has no content for this recording yet.`);
           return { content: [{ type: "text", text }] };
         }
         let offset = 0;
@@ -299,7 +330,7 @@ function registerTools(server, client, hooks) {
           limit: pageSize,
           returned: page.length,
           next_cursor: hasMore ? encodeTranscriptCursor(nextOffset) : null,
-          segments: page
+          [BLOCK_ITEMS_KEY[blockType] ?? "segments"]: page
         };
         recordToolMetric("get_transcript", "success", Date.now() - start, requestId, { file_id });
         logger.info({ event: "tool_call_end", tool: "get_transcript", duration_ms: Date.now() - start, block: blockType, paginated: true, total: segments.length, offset, returned: page.length });

package/dist/index.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   getClient
-} from "./chunk-3K3M2X74.js";
+} from "./chunk-EY5K2UXG.js";
 import {
   loadSkills
 } from "./chunk-242FRP4P.js";
 import {
   normalizeMcpHost,
   registerTools
-} from "./chunk-VLZPO2CO.js";
+} from "./chunk-FSNFNJXH.js";
 import {
   capture,
   classifyError,
@@ -21,7 +21,7 @@ import {
   setMcpHost,
   setUser,
   shutdown
-} from "./chunk-OYI4PXYP.js";
+} from "./chunk-5NWKLF3V.js";
 import "./chunk-NPCCDRWQ.js";
 import "./chunk-RUFCT6DQ.js";
 
@@ -31,7 +31,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import open from "open";
 var server = new McpServer({
   name: "plaud",
-  version: "0.3.7"
+  version: "0.3.9"
 });
 var CALLBACK_PORT = 8199;
 var LOGIN_TIMEOUT_MS = 12e4;
@@ -158,7 +158,7 @@ async function main() {
   const sub = process.argv[2];
   const sub2 = process.argv[3];
   if (sub === "install") {
-    const { runInstall } = await import("./install-3E63G6QX.js");
+    const { runInstall } = await import("./install-RTIXREYV.js");
     const args = process.argv.slice(3);
     const yes = args.some((a) => a === "--yes" || a === "-y");
     const noLogin = args.some((a) => a === "--no-login");
@@ -191,7 +191,7 @@ async function main() {
     return;
   }
   if (sub === "http") {
-    const { startHttpServer } = await import("./server-2HG4R4LT.js");
+    const { startHttpServer } = await import("./server-SYSE62NO.js");
     const { startMetricsServer } = await import("./server-NKCNUA6P.js");
     startMetricsServer();
     startHttpServer();
@@ -217,7 +217,7 @@ Usage:
   try {
     await initTelemetry({
       surface: "mcp",
-      appVersion: "0.3.7",
+      appVersion: "0.3.9",
       transport: "stdio"
     });
   } catch {

package/dist/{install-3E63G6QX.js → install-RTIXREYV.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-3K3M2X74.js";
+} from "./chunk-EY5K2UXG.js";
 import {
   commandPathIsStale,
   copyToClipboard,
@@ -12,7 +12,7 @@ import {
 } from "./chunk-242FRP4P.js";
 import {
   runOAuthCallback
-} from "./chunk-OYI4PXYP.js";
+} from "./chunk-5NWKLF3V.js";
 import "./chunk-RUFCT6DQ.js";
 
 // src/install.ts

package/dist/{server-2HG4R4LT.js → server-SYSE62NO.js}

@@ -1,10 +1,10 @@
 import {
   normalizeMcpHost,
   registerTools
-} from "./chunk-VLZPO2CO.js";
+} from "./chunk-FSNFNJXH.js";
 import {
   PlaudClient
-} from "./chunk-OYI4PXYP.js";
+} from "./chunk-5NWKLF3V.js";
 import {
   logger
 } from "./chunk-NPCCDRWQ.js";
@@ -276,6 +276,27 @@ function subFromJwt(token) {
     return void 0;
   }
 }
+var AUTO_RECOVERED_CLIENT_NAME = "auto-recovered client";
+var REDIRECT_HOST_CLIENT_NAMES = {
+  "chatgpt.com": "chatgpt",
+  "openai.com": "chatgpt",
+  "claude.ai": "claude",
+  "claude.com": "claude"
+};
+function clientNameFromRedirectUri(redirectUri) {
+  if (!redirectUri) return void 0;
+  let host;
+  try {
+    host = new URL(redirectUri).hostname.toLowerCase().replace(/^www\./, "");
+  } catch {
+    return void 0;
+  }
+  if (!host) return void 0;
+  for (const [domain, name] of Object.entries(REDIRECT_HOST_CLIENT_NAMES)) {
+    if (host === domain || host.endsWith(`.${domain}`)) return name;
+  }
+  return host;
+}
 var DEFAULT_TOKEN_URL = "https://platform.plaud.ai/developer/api/oauth/third-party/access-token";
 var DEFAULT_REFRESH_URL = "https://platform.plaud.ai/developer/api/oauth/third-party/access-token/refresh";
 var STATELESS_CODE_PREFIX = "pc1_";
@@ -380,7 +401,7 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
         return this._registeredClients.get(id);
       },
       registerClient: async (client) => {
-        const rawId = randomBytes(16).toString("base64url");
+        const rawId = this.encodeRawId(client.client_name);
         const tokenEndpointAuthMethod = client.token_endpoint_auth_method ?? "none";
         const full = {
           ...client,
@@ -428,6 +449,34 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
     const sig = createHmac("sha256", this._clientIdSecret).update(rawId).digest().subarray(0, 16);
     return `${rawId}.${sig.toString("base64url")}`;
   }
+  // Self-describing client_id: we can't persist the DCR registry across
+  // container restarts (compliance — no storage), so we encode the DCR
+  // client_name into the signed client_id itself. verifyAndRecover decodes the
+  // real name back instead of a placeholder, keeping mcp_host attribution
+  // correct across restarts (fixes the "auto-recovered client" bucket). The
+  // payload holds the app's self-reported name (not PII, capped) plus a nonce
+  // so repeat registrations get distinct ids. base64url contains no ".", so it
+  // never collides with the "<rawId>.<sig>" separator.
+  encodeRawId(clientName) {
+    const name = typeof clientName === "string" && clientName.length > 0 ? clientName.slice(0, 64) : null;
+    const payload = JSON.stringify({ v: 1, n: name, r: randomBytes(8).toString("base64url") });
+    return Buffer.from(payload, "utf8").toString("base64url");
+  }
+  // Decode the client_name embedded by encodeRawId. Returns undefined for
+  // legacy ids (random rawId issued before this fix) or anything malformed —
+  // callers fall back to the placeholder, so recovery still degrades gracefully.
+  decodeClientName(clientId) {
+    const idx = clientId.lastIndexOf(".");
+    const rawId = idx > 0 ? clientId.slice(0, idx) : clientId;
+    try {
+      const payload = JSON.parse(Buffer.from(rawId, "base64url").toString("utf8"));
+      if (payload && payload.v === 1 && typeof payload.n === "string" && payload.n.length > 0) {
+        return payload.n;
+      }
+    } catch {
+    }
+    return void 0;
+  }
   // Verify a previously-issued client_id. Returns true only for ids whose HMAC
   // signature matches our secret — i.e. ids this server (or its predecessor with
   // the same PLAUD_DCR_HMAC_SECRET) issued via registerClient.
@@ -504,11 +553,25 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
       if (redirectUri && !existing.redirect_uris.includes(redirectUri)) {
         existing.redirect_uris = [...existing.redirect_uris, redirectUri];
       }
+      if (existing.client_name === AUTO_RECOVERED_CLIENT_NAME) {
+        const upgradedName = clientNameFromRedirectUri(redirectUri);
+        if (upgradedName) {
+          existing.client_name = upgradedName;
+          logger.info({
+            event: "oauth_client_name_upgraded",
+            client_id: clientId,
+            name_source: "redirect_uri",
+            mcp_host: normalizeMcpHost(upgradedName) ?? null
+          });
+        }
+      }
       return true;
     }
     if (!this.verifyClientIdSignature(clientId)) {
       return false;
     }
+    const recoveredName = this.decodeClientName(clientId);
+    const derivedName = recoveredName ?? clientNameFromRedirectUri(redirectUri);
     this._registeredClients.set(clientId, {
       client_id: clientId,
       client_id_issued_at: Math.floor(Date.now() / 1e3),
@@ -516,9 +579,21 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
       grant_types: ["authorization_code", "refresh_token"],
       response_types: ["code"],
       token_endpoint_auth_method: "none",
-      client_name: "auto-recovered client"
+      client_name: derivedName ?? AUTO_RECOVERED_CLIENT_NAME
+    });
+    logger.info({
+      event: "oauth_client_recovered",
+      client_id: clientId,
+      redirect_uri: redirectUri ?? null,
+      // Unchanged semantics: true only when the name came out of the client_id
+      // itself — this is the field used to verify the #72 fix in prod.
+      name_recovered: recoveredName != null,
+      name_source: recoveredName != null ? "client_id" : derivedName != null ? "redirect_uri" : null,
+      // The bucket this recovery will put on every downstream auth event. Lets us
+      // verify attribution straight from prod logs (the warehouse events are
+      // batched, so they're not a live signal), and enumerate real hosts.
+      mcp_host: normalizeMcpHost(derivedName) ?? null
     });
-    logger.info({ event: "oauth_client_recovered", client_id: clientId, redirect_uri: redirectUri ?? null });
     return true;
   }
   /**
@@ -566,7 +641,9 @@ var PlaudOAuthProvider = class extends ProxyOAuthServerProvider {
     res.redirect(targetUrl.toString());
   }
   /**
-   * Called when Plaud redirects to our /oauth/callback.
+   * Called when Plaud redirects to our /auth/callback (CALLBACK_PATH in
+   * http/server.ts). NOT /oauth/callback — this comment said so until 2026-08-19
+   * and a downstream client registration was configured from it by mistake.
    * Looks up the original client redirect_uri and forwards the code+state to it.
    */
   handleCallback(code, state, res) {
@@ -1149,6 +1226,7 @@ var OPENAI_APPS_CHALLENGE_TOKEN = "bBlB7N7fF7YaQnONtEQNAGP7SLaqpJT3a3DS5Zv1F8s";
 var OAUTH_DEBUG_LOGS = !["0", "false", "no", "off"].includes(
   (process.env.PLAUD_OAUTH_DEBUG_LOGS ?? "").toLowerCase()
 );
+var ROOT_REDIRECT_URL = process.env.PLAUD_ROOT_REDIRECT_URL ?? "https://www.plaud.ai";
 var CIMD_ENABLED = ["1", "true", "yes", "on"].includes(
   (process.env.PLAUD_CIMD_ENABLED ?? "").toLowerCase()
 );
@@ -1205,8 +1283,8 @@ function startHttpServer() {
     common: {
       serviceName: process.env.PLAUD_WAREHOUSE_SERVICE_NAME ?? "plaudmcp",
       // matches §1.3 key label `plaudmcp:TRACKING_KEY_PLAUDMCP`; confirm exact string with David
-      serviceVersion: "0.3.7",
-      buildId: "43da41f",
+      serviceVersion: "0.3.9",
+      buildId: "ee2ff6d",
       // mcp tsup TODO: inject git short SHA (like CLI)
       region: process.env.PLAUD_REGION ?? "US",
       env: process.env.PLAUD_ENV ?? process.env.NODE_ENV ?? "development"
@@ -1299,6 +1377,9 @@ function startHttpServer() {
       }
     });
   });
+  app.get("/", (_req, res) => {
+    res.redirect(302, ROOT_REDIRECT_URL);
+  });
   if (process.env.PLAUD_CALLBACK_URL) {
     app.get(CALLBACK_PATH, (req, res) => {
       const code = req.query["code"];
@@ -1436,7 +1517,27 @@ function startHttpServer() {
       // register…" once new-registration rate exceeds ~20/hour. Real auth still
       // happens upstream at Plaud; abuse/unbounded-growth should be bounded on
       // the in-memory client store (size/TTL cap) rather than via this per-IP limiter.
-      clientRegistrationOptions: { rateLimit: false }
+      clientRegistrationOptions: { rateLimit: false },
+      // Same failure mode on the two handshake endpoints — /register was only
+      // the first one users hit. The SDK also defaults /token to 50 requests per
+      // 15 min and /authorize to 100 per 15 min, both keyed per client IP, and
+      // behind our proxy every request presents the same upstream address, so
+      // the per-IP bucket degenerates into ONE bucket shared by all users
+      // worldwide. A reporter measured this from two continents at once: two
+      // requests 2s apart from Cyprus and Germany saw the same counter (13 and
+      // 11 remaining, reset 671s/672s), and the bucket drained ~13 req/min from
+      // other traffic alone, i.e. it is empty almost continuously.
+      //
+      // /token is the worst place to cap: it is the only handshake endpoint that
+      // repeats after login, because every silent refresh_token renewal goes
+      // through it. Exhausting it does not just block new logins — it breaks
+      // token renewal for users who are already connected.
+      //
+      // Real authentication and abuse control live upstream at Plaud (and at the
+      // edge); this in-process per-IP limiter cannot see past the proxy, so it
+      // can only produce false positives.
+      tokenOptions: { rateLimit: false },
+      authorizationOptions: { rateLimit: false }
     })
   );
   app.post(
@@ -1455,7 +1556,7 @@ function startHttpServer() {
         apiBase,
         staticToken: token
       });
-      const mcpServer = new McpServer({ name: "plaud", version: "0.3.7" });
+      const mcpServer = new McpServer({ name: "plaud", version: "0.3.9" });
       registerTools(mcpServer, client, warehouseToolHooks);
       const transport = new StreamableHTTPServerTransport({
         sessionIdGenerator: void 0,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plaud-ai/mcp",
-  "version": "0.3.7",
+  "version": "0.3.9",
   "type": "module",
   "main": "dist/index.js",
   "bin": {
@@ -8,7 +8,6 @@
   },
   "files": [
     "dist",
-    "plugin.json",
     ".mcp.json",
     "skills"
   ],
@@ -18,7 +17,7 @@
     "build": "tsup",
     "dev": "tsup --watch",
     "clean": "rm -rf dist skills",
-    "prepublishOnly": "node -e \"const fs=require('fs'),v=require('./package.json').version,p=JSON.parse(fs.readFileSync('./plugin.json','utf8'));p.version=v;fs.writeFileSync('./plugin.json',JSON.stringify(p,null,2)+'\\n');\""
+    "prepublishOnly": "node -e \"const fs=require('fs'),v=require('./package.json').version,f='../../plugin.json',p=JSON.parse(fs.readFileSync(f,'utf8'));p.version=v;fs.writeFileSync(f,JSON.stringify(p,null,2)+'\\n');\""
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.0",

package/skills/plaud-read/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: plaud-read
 version: 1.0.0
-description: "Read the transcript, AI summary, notes, or download audio for a specific Plaud recording. Use when the user says 'show the transcript', 'summarize this', 'what was said', 'get audio', 'the notes from', or names a specific recording to dig into. Also covers extracting structured fields from a recording."
+description: "Read the transcript, AI summary, notes, highlights, or download audio for a specific Plaud recording. Use when the user says 'show the transcript', 'summarize this', 'what was said', 'get audio', 'the notes from', 'my highlights', 'the moments I flagged', 'what I marked while recording', or names a specific recording to dig into. Also covers extracting structured fields from a recording."
 metadata:
   requires:
     bins: []
@@ -14,7 +14,7 @@ metadata:
 ## When to use
 
 - User names a specific recording (by name or ID) and wants to read its content.
-- User asks for "transcript", "summary", "action items", "audio", "who said what", or a structured extraction ("action items, decisions, attendees").
+- User asks for "transcript", "summary", "action items", "audio", "who said what", "my highlights" / "the moments I flagged", or a structured extraction ("action items, decisions, attendees").
 - If the user did **not** specify a recording, hand off to `plaud-find` (by topic) or `plaud-browse` (by recency) first.
 
 ## Tool selection matrix
@@ -23,8 +23,9 @@ metadata:
 |---|---|---|
 | AI summary, TL;DR, action items | `get_note` | Returns Markdown; usually enough — try this before `get_transcript` |
 | Verbatim quotes, full dialogue | `get_transcript` | Timestamped; paginated — follow `next_cursor` for long recordings |
+| Highlights — "the moments I flagged", "what I marked while recording" | `get_transcript` with `block: "mark_memo"` | Returned under `marks`. Exists only if the user pressed the device's highlight button; also surfaced as the `high_light` note by `get_note`. To turn marks into quotes, pair with a `transaction` call and match on the timestamps |
 | Audio download link | `get_file` then use `presigned_url` | Link expires in 24h |
-| Full metadata + availability flags | `get_file` | Check `source_list` / `note_list` populated before claiming content exists |
+| Full metadata + availability flags | `get_file` | Lists which blocks exist. **An entry with `data_content: ""` and a `data_link` is not empty** — its body is link-backed; read it with `get_transcript` / `get_note`, which resolve the link. Never report such a block as missing data |
 
 ## Structured extraction workflow
 

package/skills/plaud-shared/SKILL.md

@@ -19,15 +19,31 @@ metadata:
 
 ## Tool inventory
 
-| Tool | Purpose |
-|---|---|
-| `login` | Open browser for OAuth; blocks until callback or 2-min timeout |
-| `logout` | Revoke and clear tokens |
-| `get_current_user` | Verify who is signed in |
-| `list_files` | Browse, paginate, filter recordings (supports `query`, `date_from`, `date_to`) |
-| `get_file` | Full record incl. `presigned_url`, `source_list`, `note_list` |
-| `get_note` | AI-generated summary and action items |
-| `get_transcript` | Timestamped transcript with speaker labels |
+| Tool | Purpose | Local | Remote |
+|---|---|---|---|
+| `login` | Open browser for OAuth; blocks until callback or 2-min timeout | ✅ | — |
+| `logout` | Revoke and clear tokens | ✅ | — |
+| `get_current_user` | Verify who is signed in | ✅ | ✅ |
+| `list_files` | Browse, paginate, filter recordings (supports `query`, `date_from`, `date_to`) | ✅ | ✅ |
+| `get_file` | Full record incl. `presigned_url`, `source_list`, `note_list` | ✅ | ✅ |
+| `get_note` | AI-generated summary and action items | ✅ | ✅ |
+| `get_transcript` | Timestamped transcript with speaker labels | ✅ | ✅ |
+
+**Local** = the stdio server (`npx @plaud-ai/mcp`). **Remote** = a hosted connector
+the host dials by URL. Remote has no `login` / `logout`: authorization runs as a
+browser OAuth redirect driven by the host, not as a tool call. On a remote
+connector, treat "sign in" as something the user does in the host's UI.
+
+### Tool names may carry a host-applied prefix
+
+The names above are the canonical ones the server registers. Some hosts namespace
+them with the connector name the user chose. WorkBuddy, for example, turns a
+connector named `plaudcn` into `plaudcn_list_files`, `plaudcn_get_transcript`, and
+so on — the prefix follows the user's own config, so it is not predictable.
+
+**Always resolve tools from the list you were actually given, matching on the
+canonical suffix** (`…list_files`, `…get_transcript`). Never assume a bare name is
+callable, and never hard-code a prefix.
 
 ## Error semantics
 

package/plugin.json

@@ -1,8 +0,0 @@
-{
-  "name": "plaud",
-  "version": "0.3.7",
-  "description": "Access your Plaud recordings in Claude",
-  "author": {
-    "name": "Plaud AI"
-  }
-}