@andespindola/brainlink 1.8.0 → 1.8.1

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.8.1
+
+- **Fix the Connect page's Codex snippet auth.** The `/connect` page's Codex `config.toml` block passed the bearer token via a `MCP_AUTHORIZATION` env var, but `mcp-remote` does not read that env — so the request went out unauthenticated and `mcp-remote` fell back to a hanging OAuth flow. The token is now passed as an `mcp-remote` `--header "Authorization: Bearer <token>"` argument (verified to connect), and both the remote and local Codex snippets gained `startup_timeout_sec = 60` so Codex doesn't time out the cold-start MCP handshake.
+
 ## 1.8.0
 
 - **"Connect your agent" page in the graph UI.** The exposed graph web UI (`brainlink server --expose`) now serves a new auth-gated `GET /connect` page, reachable from the account menu, with ready-to-paste MCP setup for wiring agents and chats (Codex, Claude Code, ChatGPT/generic MCP) to this brainlink. It detects its mode server-side: in **remote** mode — when the server is exposed and `BRAINLINK_MCP_TOKEN` is set — it builds the MCP endpoint from the request host as `https://<host>/mcp` and renders the Codex `~/.codex/config.toml` (`mcp-remote`), Claude Code `claude mcp add --transport http`, `.mcp.json` (streamable HTTP) and ChatGPT/generic connector snippets, each carrying the owner's bearer token; in **local** mode — no token / not exposed — it renders the stdio equivalents (`brainlink mcp-server --vault <path>`) and never shows a token. The page also ships a ready AGENTS.md operating contract, per-snippet copy-to-clipboard buttons, and the shared neon identity. It is served behind the same session as `/settings`, so the token is shown only to the authenticated graph owner and never on any unauthenticated route.

package/dist/application/frontend/connect-page.js

@@ -318,12 +318,13 @@ const snippetBlock = (id, title, hint, body) => `
         <button class="connect-copy" type="button" data-target="${escapeHtml(id)}">Copy</button>
       </div>`;
 const remoteSnippets = (mcpUrl, token) => {
+    // The bearer token MUST be an mcp-remote `--header` arg — mcp-remote does not
+    // read a MCP_AUTHORIZATION env var, so the env form leaves the request
+    // unauthenticated and mcp-remote falls back to a hanging OAuth flow.
     const codexToml = `[mcp_servers.brainlink]
 command = "npx"
-args = ["-y", "mcp-remote", "${mcpUrl}"]
-
-[mcp_servers.brainlink.env]
-MCP_AUTHORIZATION = "Bearer ${token}"`;
+args = ["-y", "mcp-remote", "${mcpUrl}", "--header", "Authorization: Bearer ${token}"]
+startup_timeout_sec = 60`;
     const claudeCmd = `claude mcp add --transport http brainlink ${mcpUrl} --header "Authorization: Bearer ${token}"`;
     const mcpJson = `{
   "mcpServers": {
@@ -359,7 +360,8 @@ Authorization: Bearer ${token}`;
 const localSnippets = (vaultPath) => {
     const codexToml = `[mcp_servers.brainlink]
 command = "brainlink"
-args = ["mcp-server", "--vault", "${vaultPath}"]`;
+args = ["mcp-server", "--vault", "${vaultPath}"]
+startup_timeout_sec = 60`;
     const claudeCmd = `claude mcp add brainlink -- brainlink mcp-server --vault ${vaultPath}`;
     const mcpJson = `{
   "mcpServers": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@andespindola/brainlink",
-  "version": "1.8.0",
+  "version": "1.8.1",
   "description": "Local-first knowledge memory for agents with Markdown, backlinks, indexing and context retrieval.",
   "type": "module",
   "license": "MIT",