BrokerFlow AI private plugin package

Version 1.3.1 contains the portable Agent Plugins manifest, existing remote Streamable HTTP MCP connection, ten workflow skills, workflow references, safe draft templates, and evaluation cases. The server source registers eighteen tools, retaining all ten prior names, the seven core capabilities, and the new get_follow_up_task read operation. It is distributed through the owner-managed private workspace and is not a public marketplace listing.

The server requires Supabase OAuth 2.1, an exact approved OAuth client ID allowlist and current per-organization read/write permissions. OAuth is active, the core-workflows migration has been applied, and private plugin v1.3.0 has been uploaded and connected in ChatGPT. At that activation, all seventeen registered tools were discovered and nine live read-only MCP calls succeeded. The v1.3.1 source package adds one read-only task lookup; its private refresh and live verification remain pending.

Persistent intake, deal, document-request and referral workflows use 20261019165744_brokerflow_core_workflows.sql, applied to the active platform-core project after the existing review/rate-limit/task migrations. They reuse canonical leads, referrals and events. The four new write tools require confirmed: true after explicit user confirmation and stable retry keys. The read-only routing and checklist tools return preliminary guidance, and lookup_deal_status reports operational state separately from review status.

The synthetic workflow is capture intake → preliminary routing → confirmed human review → checklist → confirmed missing-document draft/task → deal status → confirmed partner referral. Missing-document delivery remains not_sent; there is no borrower messaging or lender-submission integration. Start with onboarding, tool selection, workflow sequences, and safety and data handling. Draft snippets are in templates/. See the repository's docs/MCP_CORE_TOOL_EXAMPLES.md, docs/MCP_OAUTH_SETUP.md, and docs/MCP_RELEASE_CHECKLIST.md. Run npm run package:plugin at the repository root to produce the private ZIP. Keep the existing endpoint and plugin identity; do not publish this package publicly.

Release notes and the owner-confirmed v1.3.0 activation record are in CHANGELOG.md and docs/MCP_RELEASE_CHECKLIST.md.