aidimag 1.0.9 → 1.0.11

package/dist/cli/commands/memory.js

@@ -73,11 +73,10 @@ This project uses aiDimag for persistent memory. Always consult memory before pr
             const current = existsSync(rootIgnore) ? readFileSync(rootIgnore, "utf8") : "";
             const folder = resolveKnowledgeConfig(root).folder;
             const additions = [];
-            if (!current.includes(".aidimag/memory.db"))
-                additions.push(".aidimag/memory.db*");
-            // keep dropped knowledge docs (may contain secrets) out of git, but track the folder
-            if (!current.includes(`${folder}/*`))
-                additions.push(`${folder}/*`, `!${folder}/.gitkeep`);
+            if (!current.includes(".aidimag"))
+                additions.push(".aidimag");
+            if (!current.includes(folder))
+                additions.push(folder);
             // generated context files (users can commit them if they want, but default is gitignored)
             if (!current.includes("CLAUDE.md"))
                 additions.push("CLAUDE.md");
@@ -87,6 +86,8 @@ This project uses aiDimag for persistent memory. Always consult memory before pr
                 additions.push(".windsurfrules");
             if (!current.includes("AGENTS.md"))
                 additions.push("AGENTS.md");
+            if (!current.includes(".github/copilot-instructions.md"))
+                additions.push(".github/copilot-instructions.md");
             if (additions.length) {
                 appendFileSync(rootIgnore, `${current.endsWith("\n") || current === "" ? "" : "\n"}${additions.join("\n")}\n`);
                 console.log(`\nUpdated ${rootIgnore} (ignored memory.db + ${folder}/ drops + generated context files)`);

package/dist/cli/commands/sync.js

@@ -1,8 +1,10 @@
 /**
  * Team-sync commands: serve, cloud, login, logout, sync, keys.
  */
+import { readFileSync, writeFileSync } from "node:fs";
 import { MemoryStore, findRepoRoot } from "../../db/store.js";
 import { fail, maybeRegenerateContext, openBrowser, createPrompter } from "../shared.js";
+import { configPath } from "../../sync/client.js";
 export function registerSyncCommands(program) {
     program
         .command("serve")
@@ -25,7 +27,7 @@ export function registerSyncCommands(program) {
         .argument("<action>", "link | unlink | status | remote")
         .option("-s, --server <url>", "Sync server URL")
         .option("-b, --brain <name>", "Brain (team memory) name on the server")
-        .option("-t, --token <token>", "Auth token (stored in ~/.aidimag/credentials.json, NOT the repo)")
+        .option("-t, --token <token>", "Auth token (stored in .aidimag/config.json)")
         .option("--json", "Machine-readable output (remote)")
         .option("--id <memoryId>", "Show one remote memory by id (remote)")
         .option("--limit <n>", "Max rows to list (remote)", "20")
@@ -41,13 +43,28 @@ export function registerSyncCommands(program) {
                 if (!opts.server || !opts.brain)
                     fail("usage: dim cloud link --server <url> --brain <name> [--token <token>]");
                 const server = String(opts.server).replace(/\/$/, "");
-                writeCloudConfig(root, { server, brain: opts.brain });
-                if (opts.token)
-                    saveToken(server, opts.token);
+                // Always store token in project config
+                const p = configPath(root);
+                let existing = {};
+                try {
+                    existing = JSON.parse(readFileSync(p, "utf8"));
+                }
+                catch {
+                    // fresh file
+                }
+                const newConfig = { ...existing, server, brain: opts.brain };
+                if (opts.token) {
+                    newConfig.token = opts.token;
+                }
+                writeFileSync(p, JSON.stringify(newConfig, null, 2) + "\n");
                 console.log(`Linked to ${server} (brain: ${opts.brain}).`);
-                console.log(`Config in .aidimag/config.json (commit it — no secrets inside). Token in ~/.aidimag/credentials.json.`);
-                if (!opts.token && !getToken(server)) {
-                    console.log("⚠ No token stored yet — pass --token or set AIDIMAG_API_KEY before `dim sync`.");
+                console.log(`Config stored in .aidimag/config.json (per-project).`);
+                if (!opts.token && !getToken(server, root)) {
+                    console.log("⚠ No token stored yet — pass --token or set AIDIMAG_API_KEY before \`dim sync\`.");
+                }
+                else if (opts.token) {
+                    console.log(`✓ Token stored in .aidimag/config.json`);
+                    console.log(`⚠ Add .aidimag/config.json to .gitignore if you don't want to commit the token.`);
                 }
                 break;
             }
@@ -60,8 +77,10 @@ export function registerSyncCommands(program) {
                 const cfg = readCloudConfig(root);
                 if (!cfg)
                     console.log("Not cloud-linked. Use `dim cloud link`.");
-                else
-                    console.log(`server: ${cfg.server}\nbrain:  ${cfg.brain}\ntoken:  ${getToken(cfg.server) ? "stored" : "MISSING"}`);
+                else {
+                    const token = getToken(cfg.server, root);
+                    console.log(`server: ${cfg.server}\nbrain:  ${cfg.brain}\ntoken:  ${token ? "stored in .aidimag/config.json" : "MISSING"}`);
+                }
                 break;
             }
             case "remote": {

package/dist/sync/client.d.ts

@@ -5,9 +5,9 @@
  *   push: rows changed since last push (+ tombstones) → server
  *   pull: latest remote rows since cursor → apply if remote.updatedAt > local
  *
- * Config split (by design):
- *   .aidimag/config.json        { server, brain }   — committed to git (no secrets)
- *   ~/.aidimag/credentials.json { [server]: token } — never in the repo
+ * Config (per-project):
+ *   .aidimag/config.json { server, brain, token } — per-project, add to .gitignore if token is sensitive
+ *   AIDIMAG_API_KEY env var — alternative to storing token in config
  */
 import type { MemoryStore } from "../db/store.js";
 import type { RemoteSnapshot } from "./server.js";
@@ -20,7 +20,7 @@ export declare function syncMetaKey(base: string, brain: string): string;
 export declare function configPath(repoRoot: string): string;
 export declare function readCloudConfig(repoRoot: string): CloudConfig | null;
 export declare function writeCloudConfig(repoRoot: string, cfg: CloudConfig): void;
-export declare function getToken(server: string): string | null;
+export declare function getToken(server: string, repoRoot?: string): string | null;
 export declare function saveToken(server: string, token: string): void;
 export declare function removeToken(server: string): boolean;
 export interface DeviceStart {

package/dist/sync/client.js

@@ -5,9 +5,9 @@
  *   push: rows changed since last push (+ tombstones) → server
  *   pull: latest remote rows since cursor → apply if remote.updatedAt > local
  *
- * Config split (by design):
- *   .aidimag/config.json        { server, brain }   — committed to git (no secrets)
- *   ~/.aidimag/credentials.json { [server]: token } — never in the repo
+ * Config (per-project):
+ *   .aidimag/config.json { server, brain, token } — per-project, add to .gitignore if token is sensitive
+ *   AIDIMAG_API_KEY env var — alternative to storing token in config
  */
 import { existsSync, mkdirSync, readFileSync, writeFileSync, chmodSync } from "node:fs";
 import { homedir } from "node:os";
@@ -55,18 +55,24 @@ export function writeCloudConfig(repoRoot, cfg) {
 function credentialsPath() {
     return path.join(homedir(), ".aidimag", "credentials.json");
 }
-export function getToken(server) {
+export function getToken(server, repoRoot) {
     if (process.env.AIDIMAG_API_KEY)
         return process.env.AIDIMAG_API_KEY;
-    const p = credentialsPath();
-    if (!existsSync(p))
-        return null;
-    try {
-        return JSON.parse(readFileSync(p, "utf8"))[server] ?? null;
-    }
-    catch {
-        return null;
+    // Always use project-level config
+    if (repoRoot) {
+        const projectConfigPath = configPath(repoRoot);
+        if (existsSync(projectConfigPath)) {
+            try {
+                const cfg = JSON.parse(readFileSync(projectConfigPath, "utf8"));
+                if (cfg.token)
+                    return cfg.token;
+            }
+            catch {
+                // ignore
+            }
+        }
     }
+    return null;
 }
 export function saveToken(server, token) {
     const p = credentialsPath();
@@ -162,7 +168,7 @@ export async function fetchRemoteSnapshot(repoRoot, opts = {}) {
     const cfg = readCloudConfig(repoRoot);
     if (!cfg)
         throw new Error("repo is not cloud-linked. Run `dim cloud link --server <url> --brain <name> --token <token>` first.");
-    const token = getToken(cfg.server);
+    const token = getToken(cfg.server, repoRoot);
     if (!token)
         throw new Error(`no credentials for ${cfg.server}. Run \`dim cloud link\` with --token, or set AIDIMAG_API_KEY.`);
     const q = new URLSearchParams({ brain: cfg.brain });
@@ -203,7 +209,7 @@ export async function sync(store, repoRoot, opts = {}) {
     const cfg = readCloudConfig(repoRoot);
     if (!cfg)
         throw new Error("repo is not cloud-linked. Run `dim cloud link --server <url> --brain <name> --token <token>` first.");
-    const token = getToken(cfg.server);
+    const token = getToken(cfg.server, repoRoot);
     if (!token)
         throw new Error(`no credentials for ${cfg.server}. Run \`dim cloud link\` with --token, or set AIDIMAG_API_KEY.`);
     const cursorKey = syncMetaKey(CURSOR_KEY, cfg.brain);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aidimag",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "description": "Persistent, verified memory for AI coding agents. CLI: dim.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",