@xmemo/client 0.4.142 → 0.4.143

package/README.md

@@ -41,6 +41,8 @@ xmemo setup gemini
 xmemo setup gemini --dry-run
 xmemo setup antigravity
 xmemo setup antigravity --dry-run
+xmemo mcp add antigravity2
+xmemo mcp add antigravity2 --write
 xmemo doctor
 xmemo discovery show
 xmemo setup
@@ -195,6 +197,25 @@ gemini      ~/.gemini/GEMINI.md
 antigravity ~/.gemini/antigravity/MEMORY.md
 ```
 
+Antigravity 2.0 currently uses the lower-level MCP writer because its stable
+user config path is separate from the original Antigravity profile. Preview the
+generated OAuth-first config with:
+
+```bash
+xmemo mcp add antigravity2 --url https://xmemo.dev
+```
+
+Write it to the default Antigravity 2.0 config path with:
+
+```bash
+xmemo mcp add antigravity2 --url https://xmemo.dev --write
+```
+
+The generated config uses `https://xmemo.dev/mcp`, contains no bearer token, and
+expects Antigravity 2.0 to complete MCP OAuth in the browser on first use.
+`XMEMO_AGENT_INSTANCE_ID` is generated and stored as a stable non-secret local
+installation identifier when `--write` is used.
+
 ## MCP setup
 
 List supported client generators:
@@ -211,6 +232,7 @@ cursor      ~/.cursor/mcp.json
 copilot     ~/.copilot/mcp-config.json
 gemini      ~/.gemini/settings.json
 antigravity ~/.gemini/antigravity/mcp_config.json
+antigravity2 ~/.antigravity2/mcp.json
 ```
 
 For clients without a verified user-scoped write path, generate a read-only
@@ -221,7 +243,8 @@ xmemo mcp config --client generic --base-url "https://your-private-service.examp
 ```
 
 Codex, Cursor, Copilot CLI, Gemini CLI, and Antigravity have write-capable setup
-helpers.
+helpers. Antigravity 2.0 is write-capable through `xmemo mcp add antigravity2
+--write`.
 Other client writes should only be added after their official user-scoped config
 format is verified.
 
@@ -394,6 +417,44 @@ directly, for example with `--url` or `--config` in advanced/multi-client setup.
 The CLI refuses to overwrite an existing `XMemo`, `memory_os`, or `memory-os`
 MCP server entry. Edit the config manually if you need to rotate the endpoint.
 
+### Antigravity 2.0
+
+Recommended Antigravity 2.0 setup:
+
+```bash
+xmemo mcp add antigravity2 --write
+```
+
+Use a dry preview first if you want to inspect the exact JSON before writing:
+
+```bash
+xmemo mcp add antigravity2
+```
+
+Antigravity 2.0 uses a separate config path from the original Antigravity
+profile. The default write target is `~/.antigravity2/mcp.json`; on Windows the
+server-side config contract also documents `%APPDATA%\\Antigravity 2.0\\mcp.json`
+as the Antigravity 2.0 user config location. Pass `--config <path>` when you
+want to write to a specific file.
+
+The generated `XMemo` entry uses hosted HTTP MCP:
+
+```json
+{
+  "mcpServers": {
+    "XMemo": {
+      "type": "http",
+      "url": "https://xmemo.dev/mcp"
+    }
+  }
+}
+```
+
+No token value is written. Restart Antigravity 2.0 after setup and complete the
+MCP OAuth browser flow on first use. If you use `--write`, the CLI also prepares
+a stable non-secret `XMEMO_AGENT_INSTANCE_ID` for this local Antigravity 2.0
+install so XMemo can attribute activity consistently without embedding secrets.
+
 ## Release model
 
 This repository is the source for the `@xmemo/client` npm package. Releases

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmemo/client",
-  "version": "0.4.142",
+  "version": "0.4.143",
   "description": "Privacy-first CLI and MCP setup helper for XMemo.",
   "type": "module",
   "bin": {

package/src/cli.js

@@ -11,7 +11,7 @@ const PACKAGE_NAME = '@xmemo/client';
 const FALLBACK_PACKAGE_NAME = '@yonro/xmemo-client';
 const COMMAND_NAME = 'xmemo';
 const LEGACY_COMMAND_NAME = 'memory-os';
-const CLI_VERSION = '0.4.142';
+const CLI_VERSION = '0.4.143';
 const DEFAULT_SERVICE_URL = 'https://xmemo.dev';
 const TOKEN_ENV_VAR = 'XMEMO_KEY';
 const LEGACY_TOKEN_ENV_VAR = 'MEMORY_OS_MCP_TOKEN';
@@ -311,36 +311,53 @@ function defaultIo() {
 }
 
 function writeHelp(io) {
-  writeLine(io.stdout, `${PRODUCT_NAME} CLI (${PACKAGE_NAME})`);
-  writeLine(io.stdout, `Fallback npm package: ${FALLBACK_PACKAGE_NAME}; legacy command alias: ${LEGACY_COMMAND_NAME}`);
+  writeLine(io.stdout, `======================================================================`);
+  writeLine(io.stdout, ` 🧠  ${PRODUCT_NAME} CLI (Version ${CLI_VERSION}) — Cloud Memory Orchestration Utility`);
+  writeLine(io.stdout, `======================================================================`);
+  writeLine(io.stdout, `Official package: ${PACKAGE_NAME} | Legacy command: ${LEGACY_COMMAND_NAME}`);
   writeLine(io.stdout, '');
-  writeLine(io.stdout, 'Usage:');
-  writeLine(io.stdout, `  ${COMMAND_NAME} update [--dry-run] [--json]`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} doctor [--base-url <https://api.example.com>] [--json]`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} discovery show [--base-url <https://api.example.com>] [--json]`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} setup <codex|cursor|copilot|gemini|antigravity> [--url <https://api.example.com>] [--dry-run] [--no-profile] [--json]`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} login [--from-stdin] [--base-url <url>] [--timeout-ms <ms>] [--http-timeout-ms <ms>] [--json]`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} auth status [--verify] [--base-url <url>] [--json]`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} status [--url <https://api.example.com>] [--json]`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} token status [--verify]`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} token add --from-stdin`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} token set --from-stdin [--allow-plaintext]`);
+  writeLine(io.stdout, '💡 CORE ONBOARDING & SETUP COMMANDS:');
+  writeLine(io.stdout, `  ${COMMAND_NAME} setup --all [--write] [--profile]`);
+  writeLine(io.stdout, `      Auto-detects all local client installations (Cursor, VS Code, Continue, Trae, etc.).`);
+  writeLine(io.stdout, `      Merges XMemo MCP configs. Pass --profile to auto-inject workspace prompt rules.`);
+  writeLine(io.stdout, `      *Dry-run by default unless --write (or --yes/-y) is specified for safety.*`);
+  writeLine(io.stdout, '');
+  writeLine(io.stdout, `  ${COMMAND_NAME} setup <client-id> [--url <url>] [--no-profile] [--json]`);
+  writeLine(io.stdout, `      Runs interactive setup wizard for a single client (e.g. cursor, gemini, antigravity).`);
+  writeLine(io.stdout, `      Detects active workspace to auto-inject project-scoped instruction rules.`);
+  writeLine(io.stdout, '');
+  writeLine(io.stdout, `  ${COMMAND_NAME} login [--from-stdin] [--base-url <url>]`);
+  writeLine(io.stdout, `      Starts secure OAuth2 browser-based device login flow to register the CLI.`);
+  writeLine(io.stdout, '');
+  writeLine(io.stdout, '🛡️  DIAGNOSTICS & SYSTEM AUDIT:');
+  writeLine(io.stdout, `  ${COMMAND_NAME} doctor [--base-url <url>] [--json]`);
+  writeLine(io.stdout, `      Performs structural diagnostics (Node version, Cloud connectivity, API compatibility, security).`);
+  writeLine(io.stdout, '');
+  writeLine(io.stdout, `  ${COMMAND_NAME} status [--url <url>] [--json]`);
+  writeLine(io.stdout, `      Probes and audits XMemo core service endpoints, readiness states, and network health.`);
+  writeLine(io.stdout, '');
+  writeLine(io.stdout, '📋 MCP & CREDENTIAL MANAGEMENT:');
   writeLine(io.stdout, `  ${COMMAND_NAME} mcp list`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} mcp config --client <codex|cursor|copilot-cli|gemini-cli|antigravity|generic> [--base-url <url>] [--json]`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} mcp proxy [--port ${DEFAULT_PROXY_PORT}]`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} mcp profile codex [--json]`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} profile install <codex|cursor|gemini|antigravity> [--target <path>] [--dry-run|--json]`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} profile uninstall <codex|cursor|gemini|antigravity> [--target <path>] [--json]`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} mcp add <${supportedMcpClientIds().join('|')}> [--url <https://api.example.com>] [--write] [--config <path>]`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} smoke --client codex [--config <path>] [--json]`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} env example [--shell bash|powershell|cmd] [--json]`);
-  writeLine(io.stdout, `  ${COMMAND_NAME} privacy`);
+  writeLine(io.stdout, `      Lists all natively supported client integrations and configurations.`);
+  writeLine(io.stdout, '');
+  writeLine(io.stdout, `  ${COMMAND_NAME} mcp config --client <client-id> [--base-url <url>] [--json]`);
+  writeLine(io.stdout, `      Generates and outputs raw MCP config snippet templates without writing to files.`);
+  writeLine(io.stdout, '');
+  writeLine(io.stdout, `  ${COMMAND_NAME} mcp add <client-id> [--write] [--config <path>]`);
+  writeLine(io.stdout, `      Directly adds XMemo MCP server config snippet to the specified client settings file.`);
+  writeLine(io.stdout, '');
+  writeLine(io.stdout, `  ${COMMAND_NAME} profile install <client-id> [--target <path>] [--dry-run]`);
+  writeLine(io.stdout, `      Injects/updates instruction rules prompt in target workspace rules files (Cursor/Gemini).`);
   writeLine(io.stdout, '');
-  writeLine(io.stdout, `Default service URL: ${DEFAULT_SERVICE_URL}; use --url or XMEMO_URL for private deployments.`);
-  writeLine(io.stdout, '`login --timeout-ms` controls the full browser approval window; HTTP calls use `--http-timeout-ms`.');
+  writeLine(io.stdout, `  ${COMMAND_NAME} token status [--verify] | ${COMMAND_NAME} token add --from-stdin`);
+  writeLine(io.stdout, `      Checks local static credential states or manually saves XMEMO_KEY for key-auth fallbacks.`);
   writeLine(io.stdout, '');
-  writeLine(io.stdout, 'Privacy defaults: no telemetry, no token in project files, and no token is sent by `status`, `doctor`, or `discovery`.');
-  writeLine(io.stdout, '`login` and `token add` store credentials only in the user-scoped XMemo CLI config directory.');
+  writeLine(io.stdout, '🔐 SECURITY & PRIVACY BY DESIGN:');
+  writeLine(io.stdout, '  - ZERO Telemetry: We never collect private workspace data or usage metrics.');
+  writeLine(io.stdout, '  - Git Protection: API tokens are kept securely in system environment variables (XMEMO_KEY)');
+  writeLine(io.stdout, '    or in user-scoped credentials.json file. They are never written to project configs.');
+  writeLine(io.stdout, '  - AST Merge Safety: Config writes only touch and append the XMemo keys, preserving all other servers.');
+  writeLine(io.stdout, '======================================================================');
 }
 
 async function updateCommand(args, io) {
@@ -3122,7 +3139,8 @@ async function runProcess(command, args, io, { stream = true } = {}) {
   const spawnFn = io.spawn ?? spawn;
   return await new Promise((resolve, reject) => {
     const child = spawnFn(command, args, {
-      stdio: ['ignore', 'pipe', 'pipe']
+      stdio: ['ignore', 'pipe', 'pipe'],
+      shell: os.platform() === 'win32'
     });
     let stdout = '';
     let stderr = '';