create-egregore 0.11.0 → 0.12.0

package/lib/auth.js

@@ -6,7 +6,7 @@
 const https = require("node:https");
 
 const CLIENT_ID = "Iv23li2obNsAjakoK2RE";
-const SCOPE = "";  // GitHub App — permissions managed via installation, not OAuth scope
+const SCOPE = "";
 
 function post(url, body) {
   return new Promise((resolve, reject) => {
@@ -135,4 +135,4 @@ async function deviceFlow(ui) {
   throw new Error("Timed out waiting for authorization (5 minutes)");
 }
 
-module.exports = { deviceFlow };
+module.exports = { deviceFlow, openBrowser };

package/lib/local.js

@@ -6,7 +6,7 @@
 const fs = require("node:fs");
 const path = require("node:path");
 const { execFileSync } = require("node:child_process");
-const { deviceFlow } = require("./auth");
+const { deviceFlow, openBrowser } = require("./auth");
 const {
   ghApi,
   acceptPendingInvitations,
@@ -22,6 +22,9 @@ const {
 const TEMPLATE_OWNER = "egregore-labs";
 const TEMPLATE_REPO = "egregore";
 
+// GitHub App installation URL
+const APP_INSTALL_URL = "https://github.com/apps/egregore-labs/installations/new";
+
 // ── GitHub API helpers ──────────────────────────────────────────────
 
 async function getUser(token) {
@@ -179,8 +182,15 @@ function createSymlink(egregoreDir, memoryDir, ui) {
 // ── Flow 1: Founder (local mode) ───────────────────────────────────
 
 async function localFounderFlow(ui) {
-  // 1. GitHub auth
-  ui.info("Let's set up Egregore. First, sign in with GitHub.\n");
+  // 1. Install GitHub App — grants Egregore access to the repos the user selects
+  ui.info("Let's set up Egregore.\n");
+  ui.info("First, install the Egregore app on your GitHub account.");
+  ui.info("You'll choose exactly which repos to share.\n");
+  openBrowser(APP_INSTALL_URL);
+  await ui.prompt("Press Enter when done...");
+
+  // 2. GitHub auth (auto-approved — user just authorized during App install)
+  ui.info("");
   let githubToken;
   try {
     githubToken = await deviceFlow(ui);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-egregore",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "Set up Egregore for your team in one command",
   "license": "MIT",
   "bin": {