@andespindola/brainlink 1.8.0 → 1.8.2

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 1.8.2
+
+- **Connect page AGENTS.md now instructs proactive capture.** The ready operating contract on the `/connect` page changed its "After you learn" guidance from only writing back "durable learnings" to capturing proactively — decisions and their rationale, project maps/paths, conventions, runbooks, recent state, and recurring pitfalls; when in doubt, capture (using volatile memory only for the truly ephemeral), then reindex. So agents wired to a brainlink persist everything worth reusing, not just occasional highlights.
+
+## 1.8.1
+
+- **Fix the Connect page's Codex snippet auth.** The `/connect` page's Codex `config.toml` block passed the bearer token via a `MCP_AUTHORIZATION` env var, but `mcp-remote` does not read that env — so the request went out unauthenticated and `mcp-remote` fell back to a hanging OAuth flow. The token is now passed as an `mcp-remote` `--header "Authorization: Bearer <token>"` argument (verified to connect), and both the remote and local Codex snippets gained `startup_timeout_sec = 60` so Codex doesn't time out the cold-start MCP handshake.
+
 ## 1.8.0
 
 - **"Connect your agent" page in the graph UI.** The exposed graph web UI (`brainlink server --expose`) now serves a new auth-gated `GET /connect` page, reachable from the account menu, with ready-to-paste MCP setup for wiring agents and chats (Codex, Claude Code, ChatGPT/generic MCP) to this brainlink. It detects its mode server-side: in **remote** mode — when the server is exposed and `BRAINLINK_MCP_TOKEN` is set — it builds the MCP endpoint from the request host as `https://<host>/mcp` and renders the Codex `~/.codex/config.toml` (`mcp-remote`), Claude Code `claude mcp add --transport http`, `.mcp.json` (streamable HTTP) and ChatGPT/generic connector snippets, each carrying the owner's bearer token; in **local** mode — no token / not exposed — it renders the stdio equivalents (`brainlink mcp-server --vault <path>`) and never shows a token. The page also ships a ready AGENTS.md operating contract, per-snippet copy-to-clipboard buttons, and the shared neon identity. It is served behind the same session as `/settings`, so the token is shown only to the authenticated graph owner and never on any unauthenticated route.

package/dist/application/frontend/connect-page.js

@@ -41,10 +41,15 @@ it as the continuity of your cognition, not an optional lookup.
 - Retrieve with \`strategy: "auto"\` (CAG on a fresh pack, RAG otherwise) and
   \`mode: "hybrid"\` (FTS + semantic) unless a narrower mode clearly fits.
 
-## After you learn
-- Write durable learnings back with \`brainlink_remember\` (or
-  \`brainlink_add_note\` for structured notes), then reindex with
-  \`brainlink_index\`.
+## Capture proactively — save everything worth reusing
+- Do not wait for an explicit "durable learning". After anything worth reusing,
+  write it back: decisions and their rationale, project maps and paths,
+  conventions, runbooks, recent state (last actions / open work), and recurring
+  pitfalls plus how you worked around them.
+- When in doubt, capture — the cost is low and reuse is likely. Use volatile
+  memory only for the truly ephemeral.
+- Persist with \`brainlink_remember\` (or \`brainlink_add_note\` for structured
+  notes), then reindex with \`brainlink_index\`.
 - Write connected memory: include \`[[wiki links]]\`, tags, and priority markers
   so notes join the knowledge graph instead of sitting orphaned.
 `;
@@ -318,12 +323,13 @@ const snippetBlock = (id, title, hint, body) => `
         <button class="connect-copy" type="button" data-target="${escapeHtml(id)}">Copy</button>
       </div>`;
 const remoteSnippets = (mcpUrl, token) => {
+    // The bearer token MUST be an mcp-remote `--header` arg — mcp-remote does not
+    // read a MCP_AUTHORIZATION env var, so the env form leaves the request
+    // unauthenticated and mcp-remote falls back to a hanging OAuth flow.
     const codexToml = `[mcp_servers.brainlink]
 command = "npx"
-args = ["-y", "mcp-remote", "${mcpUrl}"]
-
-[mcp_servers.brainlink.env]
-MCP_AUTHORIZATION = "Bearer ${token}"`;
+args = ["-y", "mcp-remote", "${mcpUrl}", "--header", "Authorization: Bearer ${token}"]
+startup_timeout_sec = 60`;
     const claudeCmd = `claude mcp add --transport http brainlink ${mcpUrl} --header "Authorization: Bearer ${token}"`;
     const mcpJson = `{
   "mcpServers": {
@@ -359,7 +365,8 @@ Authorization: Bearer ${token}`;
 const localSnippets = (vaultPath) => {
     const codexToml = `[mcp_servers.brainlink]
 command = "brainlink"
-args = ["mcp-server", "--vault", "${vaultPath}"]`;
+args = ["mcp-server", "--vault", "${vaultPath}"]
+startup_timeout_sec = 60`;
     const claudeCmd = `claude mcp add brainlink -- brainlink mcp-server --vault ${vaultPath}`;
     const mcpJson = `{
   "mcpServers": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@andespindola/brainlink",
-  "version": "1.8.0",
+  "version": "1.8.2",
   "description": "Local-first knowledge memory for agents with Markdown, backlinks, indexing and context retrieval.",
   "type": "module",
   "license": "MIT",