privateer-agent 0.15.1 → 0.15.2

package/extensions/privateer-brand.ts

@@ -64,9 +64,9 @@ const VERSION: string = (() => {
 // The Privateer mark: our symbol — a padlock (with a keyhole) fused into an anchor,
 // "bring your own model" meets lock-and-key privacy — drawn from the app's logo. It's
 // rendered with terminal HALF-BLOCKS, so each text row packs TWO pixel rows. The mark is
-// a SINGLE colour (every set pixel is the accent), so a cell never needs two different
+// a SINGLE colour (every set pixel is WHITE), so a cell never needs two different
 // colours: both pixels set → a full block "█", top only → "▀", bottom only → "▄", none →
-// a space — all painted with the accent as FOREGROUND, no background cells at all. That
+// a space — all painted with WHITE as FOREGROUND, no background cells at all. That
 // makes the mark inherit the theme's ink (dark on light, light on dark) with one colour,
 // and sidesteps the old bg-bleed hazard entirely. Every built line is MARK_W visible
 // cells wide (SGR escapes don't count), so the text column beside it stays aligned. To
@@ -91,9 +91,9 @@ const PIXELS = [
   ".OO..OO..OO.", "..OO.OO.OO..",
   "..OOOOOOOO..", "...OOOOOO...", "....OOOO....", ".....OO.....",
 ];
-// Build the mark for a given palette (the accent is the ink). Cheap — called once per
+// Build the mark for a given palette (WHITE is the ink). Cheap — called once per
 // header factory invocation, i.e. once per theme, not per frame. Each cell resets SGR so
-// the accent can never bleed into the row padding the framer adds after it.
+// the colour can never bleed into the row padding the framer adds after it.
 function buildMark(p: Palette): string[] {
   const rows: string[] = [];
   for (let r = 0; r < PIXELS.length; r += 2) {
@@ -103,9 +103,9 @@ function buildMark(p: Palette): string[] {
     for (let x = 0; x < MARK_W; x++) {
       const t = top[x] === "O";
       const b = bot[x] === "O";
-      if (t && b) line += `${p.ACCENT}█${p.RESET}`;
-      else if (t) line += `${p.ACCENT}▀${p.RESET}`;
-      else if (b) line += `${p.ACCENT}▄${p.RESET}`;
+      if (t && b) line += `${p.WHITE}█${p.RESET}`;
+      else if (t) line += `${p.WHITE}▀${p.RESET}`;
+      else if (b) line += `${p.WHITE}▄${p.RESET}`;
       else line += " ";
     }
     rows.push(line);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "privateer-agent",
-  "version": "0.15.1",
+  "version": "0.15.2",
   "description": "Privacy-first terminal coding agent — bring your own model across 20 providers (Anthropic, OpenAI, OpenRouter, Google, local Ollama…). Safe-by-default permissions, MCP, sub-agents, workflows, and verifiable TEE inference. Built on the Pi toolkit.",
   "type": "module",
   "license": "MIT",

package/src/config/whatsNew.json

@@ -1,6 +1,6 @@
 {
   "$comment": "The banner's What's New list, newest first: the two to four things a returning user should notice, not a changelog. `reviewedFor` is the release this list was last looked at for. A release can't ship until it equals package.json's version (scripts/check-whats-new.mjs, run by `npm test` and by release.yml before anything builds), so every release, patches included, is a deliberate look at this list. If nothing new is worth a line, bumping `reviewedFor` alone is the answer. `since` is the release an entry arrived in. `cmd` is shown in the accent colour.",
-  "reviewedFor": "0.15.1",
+  "reviewedFor": "0.15.2",
   "items": [
     { "text": "Driving from the app: a message sent mid-turn steers it, and questions survive a dropped link", "since": "0.15.1" },
     { "text": "MCP on Pi's built-in support — sign OAuth connectors back in with", "cmd": "/mcp", "since": "0.15.0" },

package/src/mcp/catalog.ts

@@ -227,6 +227,485 @@ export const MCP_CATALOG: CatalogEntry[] = [
     needs: "oauth",
   },
 
+  // ── More remote OAuth servers (added 2026-10-20) ───────────────────────────
+  // Mirrors the block of the same name in treeview client/components/mcpCatalog.ts,
+  // minus the rows whose registration refuses a loopback redirect (Calendly). Each
+  // was probed on 2026-10-20: initialize → 401, OAuth discovery, and a dynamic
+  // client registration with http://127.0.0.1:<port>/callback. A full consent →
+  // tools/list round trip has not been run.
+  {
+    // Distinct id from the stdio `notion` entry: the two coexist, and this one
+    // needs no integration token.
+    id: "notion-remote",
+    name: "notion-remote",
+    label: "Notion",
+    blurb: "Pages, databases, and search. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.notion.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "supabase-remote",
+    name: "supabase-remote",
+    label: "Supabase",
+    blurb: "Projects, tables, and SQL. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.supabase.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "gitlab",
+    name: "gitlab",
+    label: "GitLab",
+    blurb: "Projects, issues, and merge requests. Sign in via browser.",
+    transport: "http",
+    url: "https://gitlab.com/api/v4/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "vercel",
+    name: "vercel",
+    label: "Vercel",
+    blurb: "Deployments, logs, and projects. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.vercel.com/",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "netlify",
+    name: "netlify",
+    label: "Netlify",
+    blurb: "Sites, deploys, and forms. Sign in via browser.",
+    transport: "http",
+    url: "https://netlify-mcp.netlify.app/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "cloudflare",
+    name: "cloudflare",
+    label: "Cloudflare",
+    blurb: "Your whole Cloudflare account through its API. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.cloudflare.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "cloudflare-workers",
+    name: "cloudflare-workers",
+    label: "Cloudflare Workers",
+    blurb: "Workers, KV, R2, and D1. Sign in via browser.",
+    transport: "http",
+    url: "https://bindings.mcp.cloudflare.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "cloudflare-observability",
+    name: "cloudflare-observability",
+    label: "Cloudflare Observability",
+    blurb: "Worker logs and analytics. Sign in via browser.",
+    transport: "http",
+    url: "https://observability.mcp.cloudflare.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "neon",
+    name: "neon",
+    label: "Neon",
+    blurb: "Serverless Postgres projects, branches, and SQL. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.neon.tech/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "prisma",
+    name: "prisma",
+    label: "Prisma Postgres",
+    blurb: "Databases, migrations, and queries. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.prisma.io/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "instantdb",
+    name: "instantdb",
+    label: "InstantDB",
+    blurb: "Apps, schemas, and data. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.instantdb.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "buildkite",
+    name: "buildkite",
+    label: "Buildkite",
+    blurb: "Pipelines, builds, and jobs. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.buildkite.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "grafana",
+    name: "grafana",
+    label: "Grafana",
+    blurb: "Dashboards, metrics, and alerts. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.grafana.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "honeycomb",
+    name: "honeycomb",
+    label: "Honeycomb",
+    blurb: "Traces, queries, and SLOs. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.honeycomb.io/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "posthog",
+    name: "posthog",
+    label: "PostHog",
+    blurb: "Product analytics, flags, and errors. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.posthog.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "amplitude",
+    name: "amplitude",
+    label: "Amplitude",
+    blurb: "Charts, cohorts, and experiments. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.amplitude.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "mixpanel",
+    name: "mixpanel",
+    label: "Mixpanel",
+    blurb: "Events, funnels, and reports. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.mixpanel.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "semgrep",
+    name: "semgrep",
+    label: "Semgrep",
+    blurb: "Scan code for security issues. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.semgrep.ai/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "port",
+    name: "port",
+    label: "Port",
+    blurb: "Your software catalog and developer portal. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.port.io/v1",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "stytch",
+    name: "stytch",
+    label: "Stytch",
+    blurb: "Auth projects, users, and settings. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.stytch.dev/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "globalping",
+    name: "globalping",
+    label: "Globalping",
+    blurb: "Ping, traceroute, and DNS from probes worldwide. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.globalping.dev/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "apify",
+    name: "apify",
+    label: "Apify",
+    blurb: "Run scrapers and actors. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.apify.com",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "parallel-search",
+    name: "parallel-search",
+    label: "Parallel Search",
+    blurb: "Web search built for agents. Sign in via browser.",
+    transport: "http",
+    url: "https://search-mcp.parallel.ai/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "clickup",
+    name: "clickup",
+    label: "ClickUp",
+    blurb: "Tasks, docs, and spaces. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.clickup.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "monday",
+    name: "monday",
+    label: "monday.com",
+    blurb: "Boards, items, and updates. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.monday.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "todoist",
+    name: "todoist",
+    label: "Todoist",
+    blurb: "Tasks, projects, and due dates. Sign in via browser.",
+    transport: "http",
+    url: "https://ai.todoist.net/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "airtable",
+    name: "airtable",
+    label: "Airtable",
+    blurb: "Bases, tables, and records. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.airtable.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "miro",
+    name: "miro",
+    label: "Miro",
+    blurb: "Boards, sticky notes, and diagrams. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.miro.com/",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "canva",
+    name: "canva",
+    label: "Canva",
+    blurb: "Find, create, and export designs. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.canva.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "webflow",
+    name: "webflow",
+    label: "Webflow",
+    blurb: "Sites, pages, and CMS collections. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.webflow.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "wix",
+    name: "wix",
+    label: "Wix",
+    blurb: "Sites, stores, and bookings. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.wix.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "cloudinary",
+    name: "cloudinary",
+    label: "Cloudinary",
+    blurb: "Upload, search, and transform media assets. Sign in via browser.",
+    transport: "http",
+    url: "https://asset-management.mcp.cloudinary.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "attio",
+    name: "attio",
+    label: "Attio",
+    blurb: "CRM records, lists, and notes. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.attio.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "intercom",
+    name: "intercom",
+    label: "Intercom",
+    blurb: "Conversations, contacts, and tickets. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.intercom.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "zapier",
+    name: "zapier",
+    label: "Zapier",
+    blurb: "Run actions across thousands of apps. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.zapier.com/api/mcp/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "paypal",
+    name: "paypal",
+    label: "PayPal",
+    blurb: "Invoices, orders, and transactions. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.paypal.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "square",
+    name: "square",
+    label: "Square",
+    blurb: "Payments, catalog, and orders. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.squareup.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "ramp",
+    name: "ramp",
+    label: "Ramp",
+    blurb: "Spend, cards, and reimbursements. Sign in via browser.",
+    transport: "http",
+    url: "https://ramp-mcp-remote.ramp.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "morningstar",
+    name: "morningstar",
+    label: "Morningstar",
+    blurb: "Fund and stock research data. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.morningstar.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "thoughtspot",
+    name: "thoughtspot",
+    label: "ThoughtSpot",
+    blurb: "Ask questions of your analytics data. Sign in via browser.",
+    transport: "http",
+    url: "https://agent.thoughtspot.app/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "jam",
+    name: "jam",
+    label: "Jam",
+    blurb: "Bug reports with recordings and logs. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.jam.dev/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "granola",
+    name: "granola",
+    label: "Granola",
+    blurb: "Your meeting notes. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.granola.ai/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "fathom",
+    name: "fathom",
+    label: "Fathom",
+    blurb: "Meeting recordings, transcripts, and summaries. Sign in via browser.",
+    transport: "http",
+    url: "https://api.fathom.ai/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "fireflies",
+    name: "fireflies",
+    label: "Fireflies.ai",
+    blurb: "Meeting transcripts and summaries. Sign in via browser.",
+    transport: "http",
+    url: "https://api.fireflies.ai/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "otter",
+    name: "otter",
+    label: "Otter.ai",
+    blurb: "Meeting transcripts and notes. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.otter.ai/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "read-ai",
+    name: "read-ai",
+    label: "Read AI",
+    blurb: "Meeting reports and recaps. Sign in via browser.",
+    transport: "http",
+    url: "https://api.read.ai/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "tldv",
+    name: "tldv",
+    label: "tl;dv",
+    blurb: "Meeting recordings and highlights. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.tldv.io/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+
   // ── Local, token-authorized ─────────────────────────────────────────────────
   {
     id: "brave-search",