@mnemahq/cli 0.1.0 → 0.1.1

package/README.md

@@ -15,8 +15,15 @@ The package is `@mnemahq/cli`; the command it installs is **`mnema`**. (The unsc
 name `mnema` is blocked on npm — its typosquat filter rejects it as too close to the
 existing package `mem`.)
 
-You'll be asked for your **workspace id** and a **hook token** (both in *Settings → Developer*), and
-optionally an **API key** for search. `init` installs the capture hook, stores your secrets in the OS
+Run `mnema login` first and the workspace is filled in automatically. Otherwise you'll be asked
+for two values, which live on **two different settings pages**:
+
+| value | where |
+| --- | --- |
+| Workspace id | **Settings → Workspace** |
+| Hook token | **Settings → Access** → *Session capture* → **Generate token** |
+
+Optionally an **API key** for search. `init` installs the capture hook, stores your secrets in the OS
 keychain, and writes a `.mnema/config.json` (safe to commit — it holds no secrets).
 
 Start a Claude Code session and it appears under **Sessions** with its cost.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mnemahq/cli",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Mnema CLI — connect a repo to your Mnema workspace: install session capture, sweep past sessions, and search from the terminal.",
   "type": "module",
   "bin": {

package/src/cli.mjs

@@ -11,9 +11,9 @@
  */
 
 import { existsSync } from 'node:fs';
-import { cmdLogin, cmdLogout } from './login.mjs';
+import { cmdLogin, cmdLogout, accessToken } from './login.mjs';
 import {
-  DEFAULT_ORIGIN, c, gitInfo, canonicalRepo, readConfig, writeConfig, removeConfigDir,
+  DEFAULT_ORIGIN, DEFAULT_APP_URL, c, gitInfo, canonicalRepo, readConfig, writeConfig, removeConfigDir,
   apiFetch, prompt, promptHidden, localSessionsForRepo,
 } from './util.mjs';
 import { getSecret, setSecret, deleteSecrets, backendName, usingFallback } from './secrets.mjs';
@@ -57,6 +57,33 @@ function fmtAge(mtimeMs) {
 
 // ── init ───────────────────────────────────────────────────────────────────────
 
+/**
+ * The workspace this login already belongs to.
+ *
+ * ⭐ THE CLI WAS ASKING FOR SOMETHING IT COULD LOOK UP. `init` prompted "Workspace
+ * id:" with no hint, and the id lives on a different settings page from the hook
+ * token — so the first thing a new user did was go hunting for a UUID the tool
+ * could have read from their own session. If they have run `mnema login`, /api/me
+ * answers it.
+ *
+ * Returns null on any failure. This is a convenience, never a requirement: not
+ * logged in, offline, or an unexpected body all fall through to the prompt.
+ */
+async function workspaceFromSession(origin) {
+  try {
+    const token = await accessToken();
+    if (!token) return null;
+    const res = await fetch(`${origin}/api/me`, { headers: { Authorization: `Bearer ${token}` } });
+    if (!res.ok) return null;
+    const body = await res.json();
+    if (!body?.workspace_id) return null;
+    console.log(c.green(`\u2713 Workspace: ${body.workspace_name || body.workspace_id} (from your login)`));
+    return body.workspace_id;
+  } catch {
+    return null;
+  }
+}
+
 async function cmdInit(flags) {
   const git = gitInfo();
   const root = git.root || process.cwd();
@@ -66,11 +93,24 @@ async function cmdInit(flags) {
   const existing = readConfig(root);
 
   let workspaceId = flags.workspace || process.env.MNEMA_WORKSPACE_ID || existing?.workspaceId;
-  if (!workspaceId) workspaceId = await prompt('Workspace id: ');
+  if (!workspaceId) workspaceId = await workspaceFromSession(origin);
+  if (!workspaceId) {
+    console.log(`  Workspace id — ${c.dim('Settings \u2192 Workspace')}  ${c.dim(`${DEFAULT_APP_URL}/app/settings/workspace`)}`);
+    console.log(`  ${c.dim('(or run `mnema login` first and this is filled in for you)')}`);
+    workspaceId = await prompt('Workspace id: ');
+  }
   if (!workspaceId) { console.error(c.red('A workspace id is required.')); process.exit(1); }
 
   let hookToken = process.env.MNEMA_HOOK_TOKEN || getSecret(workspaceId, 'hook-token');
-  if (!hookToken) hookToken = await promptHidden('Hook token (Settings → Developer): ');
+  if (!hookToken) {
+    // ⚠️ NOT "Settings → Developer". That page does not exist and never did in
+    // this shape — the hook token moved to the Access page when tokens were
+    // consolidated there, and the id lives on Workspace. The old prompt sent
+    // every new user looking for a page that was not in the app.
+    console.log(`  Hook token — ${c.dim('Settings \u2192 Access \u2192 "Session capture" \u2192 Generate token')}`);
+    console.log(`  ${c.dim(`${DEFAULT_APP_URL}/app/settings/access`)}`);
+    hookToken = await promptHidden('Hook token: ');
+  }
   if (!hookToken) { console.error(c.red('A hook token is required.')); process.exit(1); }
 
   let apiKey = process.env.MNEMA_API_KEY || getSecret(workspaceId, 'api-key') || '';

package/src/util.mjs

@@ -18,6 +18,16 @@ import { createInterface } from 'node:readline';
 // capture hook uses.
 export const DEFAULT_ORIGIN = process.env.MNEMA_API_ORIGIN || 'https://api.theboringpeople.in';
 
+/**
+ * ⭐ THE APP, NOT THE API — a SEPARATE host, and the reason this constant exists.
+ * Everything the CLI asks a human to fetch lives in the web app at
+ * mnema.theboringpeople.in, while every request it makes goes to
+ * api.theboringpeople.in. Deriving one from the other is not possible, and
+ * printing the API origin in a "go here and copy this" message sends people to a
+ * host with no UI on it.
+ */
+export const DEFAULT_APP_URL = process.env.MNEMA_APP_URL || 'https://mnema.theboringpeople.in';
+
 export const c = {
   dim: (s) => `\x1b[2m${s}\x1b[0m`,
   green: (s) => `\x1b[32m${s}\x1b[0m`,