mnemos-capture 1.5.0 → 1.6.1

package/README.md

@@ -9,7 +9,7 @@
   <br>
   <br>
   <p>
-    <a href="https://www.npmjs.com/package/mnemos-capture"><img src="https://img.shields.io/npm/v/mnemos-capture?color=1c74d8&labelColor=000820&style=flat" alt="npm" /></a>
+    <a href="https://www.npmjs.com/package/@xmu-labs/xkg"><img src="https://img.shields.io/npm/v/@xmu-labs/xkg?color=1c74d8&labelColor=000820&style=flat" alt="npm" /></a>
     <img src="https://img.shields.io/badge/MCP-compatible-9dd8f5?labelColor=000820&style=flat" alt="MCP" />
     <img src="https://img.shields.io/badge/license-MIT-f0f4f8?labelColor=000820&style=flat" alt="MIT" />
   </p>
@@ -53,7 +53,7 @@ You find useful stuff, you capture through the web app, then xkg connects it int
 xkg will continuously compound that knowledge over time — keeping AI workers' context up to date as human knowledge evolves.
 
 > [!IMPORTANT]
-> We are migrating from **mnemos** / **Xmu** to **xkg**. The app now lives at [xkg.xmu.sh](https://xkg.xmu.sh) and the code at [xmu-labs/xkg](https://github.com/xmu-labs/xkg). Connectors set up with `mnemos-capture.vercel.app` keep working. The npm package still says `mnemos-capture`. Sorry for the inconvenience.
+> We are migrating from **mnemos** / **Xmu** to **xkg**. The app now lives at [xkg.xmu.sh](https://xkg.xmu.sh) and the code at [xmu-labs/xkg](https://github.com/xmu-labs/xkg). The npm package is now `@xmu-labs/xkg`. Connectors set up with `mnemos-capture.vercel.app` and commands that run `npx mnemos-capture@latest` keep working: every release is published under both names. Sorry for the inconvenience.
 
 ## Start here
 
@@ -95,10 +95,10 @@ https://xkg.xmu.sh/api/mcp
 ```
 
 ```bash
-npx -y mnemos-capture@latest serve-mcp --key YOUR_API_KEY
+npx -y @xmu-labs/xkg@latest serve-mcp --key YOUR_API_KEY
 ```
 
-The CLI binary is **`xkg`** (also `xmu` and `mnemos-capture`). `npx` still uses the package name `mnemos-capture`. An MCP server already registered as `xmu` or `mnemos` keeps working.
+The CLI binary is **`xkg`** (also `xmu` and `mnemos-capture`). An MCP server already registered as `xmu` or `mnemos`, or set up with `mnemos-capture@latest`, keeps working.
 
 **On the web** — paste the URL (no terminal). **In the terminal** — run the command. Finish xkg onboarding first, then ask: *list my inbox* or *brief me*.
 
@@ -126,7 +126,7 @@ Name the connector `xkg`, paste `https://xkg.xmu.sh/api/mcp`, sign in with GitHu
 The same command works in every CLI — Cursor, Codex, Gemini CLI, VS Code, Claude Code, or anything that can launch a local MCP server:
 
 ```bash
-npx -y mnemos-capture@latest serve-mcp --key YOUR_API_KEY
+npx -y @xmu-labs/xkg@latest serve-mcp --key YOUR_API_KEY
 ```
 
 Register that command in the tool you use.
@@ -140,7 +140,7 @@ Add this to `.cursor/mcp.json` (project) or `~/.cursor/mcp.json` (all projects):
   "mcpServers": {
     "xkg": {
       "command": "npx",
-      "args": ["-y", "mnemos-capture@latest", "serve-mcp", "--key", "YOUR_API_KEY"]
+      "args": ["-y", "@xmu-labs/xkg@latest", "serve-mcp", "--key", "YOUR_API_KEY"]
     }
   }
 }
@@ -157,7 +157,7 @@ Add this to `.vscode/mcp.json`:
   "servers": {
     "xkg": {
       "command": "npx",
-      "args": ["-y", "mnemos-capture@latest", "serve-mcp", "--key", "YOUR_API_KEY"]
+      "args": ["-y", "@xmu-labs/xkg@latest", "serve-mcp", "--key", "YOUR_API_KEY"]
     }
   }
 }
@@ -172,7 +172,7 @@ Codex CLI — add this to `~/.codex/config.toml`:
 ```toml
 [mcp_servers.xkg]
 command = "npx"
-args = ["-y", "mnemos-capture@latest", "serve-mcp", "--key", "YOUR_API_KEY"]
+args = ["-y", "@xmu-labs/xkg@latest", "serve-mcp", "--key", "YOUR_API_KEY"]
 ```
 
 Codex App: Settings → MCP → add the same `npx` command.
@@ -180,13 +180,13 @@ Codex App: Settings → MCP → add the same `npx` command.
 #### Gemini CLI
 
 ```bash
-gemini mcp add xkg npx -y mnemos-capture@latest serve-mcp --key YOUR_API_KEY
+gemini mcp add xkg npx -y @xmu-labs/xkg@latest serve-mcp --key YOUR_API_KEY
 ```
 
 #### Claude Code
 
 ```bash
-claude mcp add xkg -- npx -y mnemos-capture@latest serve-mcp --key YOUR_API_KEY
+claude mcp add xkg -- npx -y @xmu-labs/xkg@latest serve-mcp --key YOUR_API_KEY
 ```
 
 Or the URL, no API key:
@@ -198,7 +198,7 @@ claude mcp add --transport http xkg https://xkg.xmu.sh/api/mcp
 Optional session hooks (MCP works without them):
 
 ```bash
-npx -y mnemos-capture@latest setup-hooks --key YOUR_API_KEY --briefing --vault
+npx -y @xmu-labs/xkg@latest setup-hooks --key YOUR_API_KEY --briefing --vault
 ```
 
 Hooks are local files — they run in the CLI and editor extensions, not in the browser.
@@ -212,7 +212,7 @@ Settings → Developer → Edit Config. Add the same `npx` block to `claude_desk
   "mcpServers": {
     "xkg": {
       "command": "npx",
-      "args": ["-y", "mnemos-capture@latest", "serve-mcp", "--key", "YOUR_API_KEY"]
+      "args": ["-y", "@xmu-labs/xkg@latest", "serve-mcp", "--key", "YOUR_API_KEY"]
     }
   }
 }
@@ -227,7 +227,7 @@ If the tool can launch a local process, register the same `npx` command. If it h
   "mcpServers": {
     "xkg": {
       "command": "npx",
-      "args": ["-y", "mnemos-capture@latest", "serve-mcp", "--key", "YOUR_API_KEY"]
+      "args": ["-y", "@xmu-labs/xkg@latest", "serve-mcp", "--key", "YOUR_API_KEY"]
     }
   }
 }
@@ -256,14 +256,14 @@ No MCP support yet? Capture in the [xkg app](https://xkg.xmu.sh) and connect lat
 4. **Execute** — Hand the plan to your worker in the current session, or run it in an isolated git worktree:
 
    ```bash
-   npx -y mnemos-capture@latest config set agent "claude -p"
-   npx -y mnemos-capture@latest kos --key YOUR_API_KEY
+   npx -y @xmu-labs/xkg@latest config set agent "claude -p"
+   npx -y @xmu-labs/xkg@latest kos --key YOUR_API_KEY
    ```
 
    `kos` creates a worktree, loads the plan as the contract, launches the assistant you configured, and prints the verification checklist when it finishes.
 
    ```bash
-   npx -y mnemos-capture@latest config set agent "codex exec"
+   npx -y @xmu-labs/xkg@latest config set agent "codex exec"
    ```
 
 ### Example capture
@@ -331,12 +331,12 @@ You don't have to memorize these. Ask in plain language: "save this", "what do I
 No global install required. The binary is **`xkg`** (also `xmu` and `mnemos-capture`). Via npx:
 
 ```bash
-npx -y mnemos-capture@latest <command>
+npx -y @xmu-labs/xkg@latest <command>
 ```
 
 | Command | What it does |
 | --- | --- |
-| `npx -y mnemos-capture@latest` | Open the hosted app |
+| `npx -y @xmu-labs/xkg@latest` | Open the hosted app |
 | `serve-mcp --key YOUR_API_KEY` | Run the local MCP proxy |
 | `setup-hooks --key YOUR_API_KEY [--briefing] [--vault]` | Install Claude Code hooks |
 | `config set agent "claude -p"` | Set which assistant `kos` should drive |
@@ -345,6 +345,8 @@ npx -y mnemos-capture@latest <command>
 | `vault-check --key YOUR_API_KEY` | Debug the vault hook |
 | `help` | Show help |
 
+What changed in each version: [GitHub Releases](https://github.com/xmu-labs/xkg/releases).
+
 ## Your context stays in GitHub
 
 Captures live as structured Markdown in **your** GitHub repository. Private by default.
@@ -423,7 +425,13 @@ Working on the code? See [CONTRIBUTING.md](CONTRIBUTING.md).
 
 ## License
 
-[MIT License](./LICENSE)
+[MIT License](./LICENSE). Contributions are welcome under the same licence; see
+[CONTRIBUTING.md](CONTRIBUTING.md) and the [Code of Conduct](CODE_OF_CONDUCT.md).
+
+**Trademarks.** The MIT licence covers the code, not names or logos: the xkg name and logo are not
+licensed for use as your own brand. Claude, ChatGPT, Codex, Gemini, Grok, Cursor and VS Code are
+trademarks of their respective owners, named here only to say which tools xkg works with; no
+endorsement is implied.
 
 If you use xkg in published work:
 

package/dist/cli/hooks.js

@@ -4,13 +4,27 @@ import { join } from "path";
 import { execSync } from "child_process";
 const HOSTED_URL = "https://xkg.xmu.sh/api/mcp";
 const CLAUDE_SETTINGS_PATH = join(homedir(), ".claude", "settings.json");
-// Matches both legacy ("mnemos-capture inbox-check") and modern
-// ("mnemos-capture@latest inbox-check") hook command forms.
+/** The npm package new hooks run. Releases also publish it as `mnemos-capture`. */
+const PACKAGE = "@xmu-labs/xkg";
+/**
+ * Matches hooks this CLI installed under either package name, with or without
+ * a version: `npx -y @xmu-labs/xkg@latest inbox-check`,
+ * `npx -y mnemos-capture@latest inbox-check`, and the legacy
+ * `npx mnemos-capture inbox-check`.
+ */
+function isOurHook(cmd, subcommand) {
+    // The package must be a whole shell word: `my-xkg` or `@acme/xkg` is someone else's.
+    return new RegExp(`(?:^|\\s)(?:${PACKAGE}|mnemos-capture)(?:@[\\w.-]+)?\\s+${subcommand}\\b`).test(cmd);
+}
 function isXkgHook(cmd) {
-    return cmd.includes("mnemos-capture") && cmd.includes("inbox-check");
+    return isOurHook(cmd, "inbox-check");
 }
 function isXkgPreToolHook(cmd) {
-    return cmd.includes("mnemos-capture") && cmd.includes("vault-check");
+    return isOurHook(cmd, "vault-check");
+}
+/** True when a hook already runs the current package at @latest — nothing to migrate. */
+function isCurrentHook(cmd) {
+    return cmd.includes(`npx -y ${PACKAGE}@latest `);
 }
 function readSettings() {
     if (!existsSync(CLAUDE_SETTINGS_PATH))
@@ -86,17 +100,16 @@ export function setupHooks(apiKey, opts = {}) {
             break;
     }
     // skipIfExists (serve-mcp auto-install): preserve user-configured hooks but
-    // silently migrate legacy hooks that don't use @latest so they always stay fresh.
+    // silently migrate hooks that pin a version or use the old package name.
     if (existingCmd && opts.skipIfExists) {
-        const alreadyLatest = existingCmd.includes("mnemos-capture@latest");
-        if (alreadyLatest)
+        if (isCurrentHook(existingCmd))
             return;
         // Migration: preserve the existing --briefing flag when upgrading to @latest
         opts = { ...opts, briefing: existingCmd.includes("--briefing") };
     }
     const command = opts.briefing
-        ? `npx -y mnemos-capture@latest inbox-check --key ${apiKey} --briefing`
-        : `npx -y mnemos-capture@latest inbox-check --key ${apiKey}`;
+        ? `npx -y ${PACKAGE}@latest inbox-check --key ${apiKey} --briefing`
+        : `npx -y ${PACKAGE}@latest inbox-check --key ${apiKey}`;
     // Remove any existing xkg inbox-check hook (handles key rotation too)
     const filtered = sessionStart
         .map((group) => ({
@@ -137,10 +150,10 @@ export function setupPreToolHook(apiKey, opts = {}) {
             break;
     }
     if (existingCmd && opts.skipIfExists) {
-        if (existingCmd.includes("mnemos-capture@latest"))
+        if (isCurrentHook(existingCmd))
             return;
     }
-    const command = `npx -y mnemos-capture@latest vault-check --key ${apiKey}`;
+    const command = `npx -y ${PACKAGE}@latest vault-check --key ${apiKey}`;
     const filtered = preToolCall
         .map((group) => ({
         ...group,

package/dist/cli/index.js

@@ -17,7 +17,7 @@ async function main() {
         const keyIdx = args.indexOf("--key");
         const apiKey = keyIdx !== -1 ? args[keyIdx + 1] : undefined;
         if (!apiKey) {
-            console.error("Usage: npx mnemos-capture setup-hooks --key YOUR_API_KEY [--briefing] [--vault]");
+            console.error("Usage: npx @xmu-labs/xkg setup-hooks --key YOUR_API_KEY [--briefing] [--vault]");
             process.exit(1);
         }
         setupHooks(apiKey, { briefing: args.includes("--briefing"), vault: args.includes("--vault") });
@@ -68,7 +68,7 @@ async function main() {
     console.log("  First time? Sign in with GitHub — setup takes 30 seconds.");
     console.log("");
     console.log("  Connect an AI worker:");
-    console.log("  claude mcp add xkg -- npx -y mnemos-capture@latest serve-mcp --key YOUR_API_KEY");
+    console.log("  claude mcp add xkg -- npx -y @xmu-labs/xkg@latest serve-mcp --key YOUR_API_KEY");
     console.log("");
     // Try to open the URL in the default browser
     const { exec } = await import("child_process");
@@ -90,7 +90,7 @@ function printHelp() {
     xkg kos --key KEY [--plan FILE]                            Implement a plan in an isolated worktree
     xkg help                                                   Show this help
 
-    npx -y mnemos-capture@latest …                             Same CLI, via the published package
+    npx -y @xmu-labs/xkg@latest …                              Same CLI, via the published package
 
   MCP tools (via your AI worker):
     briefing          — Session-start briefing with ranked insights to apply
@@ -108,13 +108,13 @@ function printHelp() {
        and reports the branch + the plan's Verification Checklist when done.
 
   Get started:
-    1. Run: npx mnemos-capture
+    1. Run: npx @xmu-labs/xkg
     2. Sign in with GitHub (creates your knowledge repo automatically)
     3. Set a PIN for quick mobile access
     4. Start capturing!
 
   Connect to Claude Code:
-    claude mcp add xkg -- npx -y mnemos-capture@latest serve-mcp --key YOUR_API_KEY
+    claude mcp add xkg -- npx -y @xmu-labs/xkg@latest serve-mcp --key YOUR_API_KEY
 
   The @latest tag ensures every Claude Code session uses the most recent
   published version. serve-mcp also self-upgrades on startup as a safety net
@@ -122,10 +122,10 @@ function printHelp() {
 
   The hook is installed automatically when you start the MCP server.
   To upgrade to a full project briefing at session start:
-    npx mnemos-capture setup-hooks --key YOUR_API_KEY --briefing
+    npx @xmu-labs/xkg setup-hooks --key YOUR_API_KEY --briefing
 
   To enable the vault (surfaces captures as you edit files — opt-in):
-    npx mnemos-capture setup-hooks --key YOUR_API_KEY --vault
+    npx @xmu-labs/xkg setup-hooks --key YOUR_API_KEY --vault
   `);
 }
 main().catch((err) => {

package/dist/cli/mcp-server.js

@@ -1,5 +1,5 @@
 // MCP server that runs locally via stdio and proxies to the hosted API.
-// Used by Claude Code: claude mcp add xkg -- npx mnemos-capture serve-mcp --key <api-key>
+// Used by Claude Code: claude mcp add xkg -- npx @xmu-labs/xkg serve-mcp --key <api-key>
 const DEFAULT_HOSTED_URL = "https://xkg.xmu.sh/api/mcp";
 /** Override for pointing the proxy at a local instance during development. */
 const HOSTED_URL = process.env.XKG_API_URL ?? process.env.XMU_API_URL ?? process.env.MNEMOS_API_URL ?? DEFAULT_HOSTED_URL;
@@ -73,7 +73,7 @@ export async function serveMcp() {
     const apiKey = keyIdx !== -1 ? args[keyIdx + 1] : undefined;
     if (!apiKey) {
         process.stderr.write("\nxkg MCP server requires an API key.\n");
-        process.stderr.write("Usage: npx -y mnemos-capture@latest serve-mcp --key <your-api-key>\n\n");
+        process.stderr.write("Usage: npx -y @xmu-labs/xkg@latest serve-mcp --key <your-api-key>\n\n");
         process.stderr.write("Get your API key at: https://xkg.xmu.sh/onboard\n\n");
         process.exit(1);
     }

package/dist/cli/version-check.js

@@ -1,26 +1,36 @@
 // Self-update enforcement: ensures users always run the latest xkg CLI.
 //
 // Strategy: on serve-mcp startup, query npm for the latest published version.
-// If behind, respawn the process via `npx -y mnemos-capture@latest` and proxy
-// stdio. An XKG_UPGRADED=1 env var (MNEMOS_UPGRADED=1 from releases before
+// If behind, respawn the process via `npx -y <name>@<latest>` and proxy stdio.
+// <name> is the package this copy was installed as: every release is published
+// as both `@xmu-labs/xkg` and `mnemos-capture`, so each install updates under its own
+// name. An XKG_UPGRADED=1 env var (MNEMOS_UPGRADED=1 from releases before
 // 1.4.1) prevents infinite recursion.
 import { readFileSync } from "fs";
 import { fileURLToPath } from "url";
 import { dirname, join } from "path";
 import { spawn } from "child_process";
-const NPM_REGISTRY = "https://registry.npmjs.org/mnemos-capture/latest";
 const CHECK_TIMEOUT_MS = 2000;
-export function getCurrentVersion() {
+/** The names releases are published under; anything else falls back to the first. */
+export const PACKAGE_NAMES = ["@xmu-labs/xkg", "mnemos-capture"];
+function readOwnPackage() {
     try {
         const here = dirname(fileURLToPath(import.meta.url));
         // dist/cli/version-check.js → ../../package.json
-        const pkg = JSON.parse(readFileSync(join(here, "../../package.json"), "utf-8"));
-        return pkg.version ?? "0.0.0";
+        return JSON.parse(readFileSync(join(here, "../../package.json"), "utf-8"));
     }
     catch {
-        return "0.0.0";
+        return {};
     }
 }
+export function getCurrentVersion() {
+    return readOwnPackage().version ?? "0.0.0";
+}
+/** The npm name this copy was installed as, so updates come from the same name. */
+export function getPackageName() {
+    const name = readOwnPackage().name;
+    return PACKAGE_NAMES.includes(name ?? "") ? name : PACKAGE_NAMES[0];
+}
 export function isNewer(latest, current) {
     const l = latest.split(".").map((n) => parseInt(n, 10) || 0);
     const c = current.split(".").map((n) => parseInt(n, 10) || 0);
@@ -34,9 +44,11 @@ export function isNewer(latest, current) {
     }
     return false;
 }
-async function getLatestVersion() {
+async function getLatestVersion(name) {
     try {
-        const res = await fetch(NPM_REGISTRY, { signal: AbortSignal.timeout(CHECK_TIMEOUT_MS) });
+        const res = await fetch(`https://registry.npmjs.org/${name}/latest`, {
+            signal: AbortSignal.timeout(CHECK_TIMEOUT_MS),
+        });
         if (!res.ok)
             return null;
         const data = (await res.json());
@@ -47,8 +59,8 @@ async function getLatestVersion() {
     }
 }
 /**
- * If a newer version exists on npm, respawn via `npx -y mnemos-capture@latest`
- * with the original argv, piping stdio. Returns true if the caller should stop
+ * If a newer version exists on npm, respawn via `npx -y <name>@<latest>` under
+ * the name this copy was installed as, with the original argv, piping stdio. Returns true if the caller should stop
  * (because the child is taking over). Returns false otherwise — caller should
  * continue with normal startup.
  */
@@ -57,12 +69,13 @@ export async function maybeSelfUpgrade() {
     // releases set MNEMOS_UPGRADED, and may be the parent that spawned this one.
     if (process.env.XKG_UPGRADED === "1" || process.env.MNEMOS_UPGRADED === "1")
         return false;
+    const name = getPackageName();
     const current = getCurrentVersion();
-    const latest = await getLatestVersion();
+    const latest = await getLatestVersion(name);
     if (!latest || !isNewer(latest, current))
         return false;
     process.stderr.write(`xkg: upgrading to v${latest} (was v${current})...\n`);
-    const child = spawn("npx", ["-y", `mnemos-capture@${latest}`, ...process.argv.slice(2)], {
+    const child = spawn("npx", ["-y", `${name}@${latest}`, ...process.argv.slice(2)], {
         stdio: "inherit",
         env: { ...process.env, XKG_UPGRADED: "1" },
     });

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "mnemos-capture",
-  "version": "1.5.0",
+  "version": "1.6.1",
   "description": "xkg — Turn what you discover into context your AI workers can use. Capture once, then brief, plan, and execute with any MCP-compatible tool.",
   "type": "module",
   "bin": {
-    "mnemos-capture": "./dist/cli/index.js",
-    "xkg": "./dist/cli/index.js",
-    "xmu": "./dist/cli/index.js"
+    "mnemos-capture": "dist/cli/index.js",
+    "xkg": "dist/cli/index.js",
+    "xmu": "dist/cli/index.js"
   },
   "scripts": {
     "dev": "next dev",
@@ -38,31 +38,34 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/xmu-labs/xkg.git"
+    "url": "git+https://github.com/xmu-labs/xkg.git"
+  },
+  "homepage": "https://xkg.xmu.sh",
+  "bugs": {
+    "url": "https://github.com/xmu-labs/xkg/issues"
   },
-  "homepage": "https://github.com/xmu-labs/xkg",
   "files": [
     "dist/cli/",
     "LICENSE",
     "README.md"
   ],
   "dependencies": {
-    "@anthropic-ai/sdk": "^0.133.0",
-    "@vercel/postgres": "^0.10.0",
-    "next": "^16.3.5",
+    "@anthropic-ai/sdk": "^0.135.0",
+    "@neondatabase/serverless": "^1.2.0",
+    "next": "^16.4.2",
     "react": "^19.3.0",
     "react-dom": "^19.3.0"
   },
   "devDependencies": {
     "@playwright/test": "^1.62.1",
+    "@tailwindcss/postcss": "^4.3.3",
     "@types/node": "^26",
     "@types/react": "^19.3.0",
     "@types/react-dom": "^19.3.0",
-    "autoprefixer": "^10.6.1",
     "eslint": "^9.39.5",
-    "eslint-config-next": "^16.3.5",
+    "eslint-config-next": "^16.4.2",
     "postcss": "^8.5.3",
-    "tailwindcss": "^3.4.17",
+    "tailwindcss": "^4.3.3",
     "typescript": "^6.0.3",
     "vitest": "^5.0.1"
   },