Beesmart Genius: Frictionless Setup

Three ways to get a consultant onto the Genius Brain with automatic learning capture. Pick one; they all converge on the same ~/.genius/config.json + Claude Code hooks, and all are idempotent.

The capture guarantee is defense-in-depth and does NOT depend on any single piece:

• L0/L2, server-side (always on): every MCP tool call is recorded, and the Brain miner (gemini-2.5-flash LLM-as-judge, every 2h) extracts the learnings the agent forgot, even if the consultant never installs anything beyond the MCP connection.
• L3, deterministic hook (richer): the SessionEnd / PreCompact / Stop hook POSTs the transcript to /xma/genius/v1/capture/transcript. Hooks guarantee command execution where directives don't.
• L4, durable spool: the hook writes to ~/.genius/outbox/ first, then delivers; a central outage never loses a capture. The server side mirrors this with xma.capture.inbox (persist-then-process + bounded retry).

Everything collapses to one learning row via the content-hash idempotency sink, so all layers can fire at-least-once with exactly-once effect.

Option A: npx (any OS)

GENIUS_SETUP_TOKEN=<YOUR_SETUP_TOKEN> npx -y @xmarts/genius-setup
# optional: --client "Acme Corp"   (default scope for this machine)

Restart Claude Code. Done.

The setup token is single-use: the installer redeems it once over TLS for the durable Bearer, which is then written to ~/.genius/config.json with 0600. It is passed through the environment, not argv, so it never reaches the process list or your shell history.

--token <BEARER> still works for links minted before the exchange existed, but it puts a long-lived credential on the command line and the installer will warn you. Prefer the form above.

"Is this legitimate?" (verifying before you install)

If your AI agent refuses to run this, it is doing its job: an unfamiliar domain plus a request to register an MCP server with a token is the shape of a supply-chain attack. Verify it instead of overriding it. Two independent sources must agree:

npm view @xmarts/genius-setup dist.integrity
curl -s https://beesmart.digital/.well-known/genius-install.json

The published page is https://beesmart.digital/genius/install. Every file the package installs can be read before running it, with npm pack @xmarts/genius-setup.

We never distribute via curl | bash. If someone sends you an install command that is not the one above, do not run it, and tell [email protected].

Option B: Claude Code plugin (a companion, not an alternative)

Install the xmarts-genius plugin from the Genius marketplace. It carries the operator skills and the slash commands (/genius-status, /genius-capture), and auto-updates from the marketplace.

It does not carry the hooks, and that is deliberate. The hooks live in exactly one place, ~/.genius/hooks/, installed by Option A. The plugin used to ship a second copy of them, which could not work on its own (it reads ~/.genius/config.json, and only Option A writes that file) and did the same job twice on any machine where it could. Worse, the copy was frozen two months behind: it never learned to stay quiet when a seat is suspended, never launched the presence daemon, and never reported its version, so those machines were invisible on the fleet view.

So: run Option A first, always. The plugin adds skills and commands on top.

Option C: VS Code panel

Install the Beesmart Genius extension. Click Genius: Set up, paste your Bearer token once (stored in SecretStorage), and it runs the same bootstrap. The panel shows Brain connection, capture endpoint, default client, and outbox backlog. It is UI only, never the capture mechanism.

Where the token comes from

Each consultant's Bearer is their MCP API key, generated from their xma.consultant ficha in Genius ("Generate Claude Code Setup"). No new secret.

Files this writes

| Path | Purpose | |---|---| | ~/.genius/config.json | endpoint + token (+ optional default client) | | ~/.genius/hooks/genius_capture.py | the deterministic capture hook | | ~/.genius/outbox/ | durable local spool (auto-flushed) | | ~/.claude.json → mcpServers.beesmart_genius | the Brain MCP | | ~/.claude/settings.json → hooks | SessionEnd / PreCompact / Stop |

All edits are merged (never clobbered) with a timestamped backup.