create-snipara 1.3.24 → 1.3.26

package/README.md

@@ -282,7 +282,6 @@ That keeps business truth review separate from agent onboarding.
 npx create-snipara --profile hosted-companion
 npx create-snipara --profile hosted-only
 npx create-snipara --profile full-stack
-npx create-snipara --full
 npx create-snipara --advanced
 
 # Sandbox-only local execution

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { Command } from "commander";
+import { Command, Option } from "commander";
 import prompts from "prompts";
 import chalk from "chalk";
 import ora from "ora";
@@ -13,7 +13,7 @@ import { homedir } from "os";
 // package.json
 var package_default = {
   name: "create-snipara",
-  version: "1.3.24",
+  version: "1.3.26",
   description: "Onboard Snipara Hosted MCP Context + Memory with auth, companion workflows, and optional Snipara Sandbox",
   main: "dist/index.js",
   type: "module",
@@ -170,7 +170,7 @@ function buildProgram() {
   program.command("init").description("Install and configure Snipara for this project").option("--api-key <key>", "Snipara API key").option("--slug <slug>", "Project slug").option("--project-id <id>", "Project ID").option("--advanced", "Show advanced profile, project id, hooks, GitHub, and sandbox prompts").option(
     "--profile <profile>",
     "Install profile: hosted-only, hosted-companion, full-stack, runtime-only"
-  ).option("--skip-companion", "Skip local companion CLI installation").option("--skip-mcp", "Skip local snipara-mcp package installation").option("--skip-runtime", "Skip snipara-sandbox installation").option("--skip-hooks", "Skip hook generation").option("--skip-test", "Skip hosted connection test").option("--with-orchestrator", "Install optional snipara-orchestrator package").option("--github", "Open GitHub repository automation setup when a git remote is detected").option("--skip-github", "Skip the GitHub automation prompt").option("--github-path <path>", "Optional GitHub path filter for the initial repository sync").option("--runtime-only", "Install only Snipara Sandbox").option("--full", "Alias for --profile full-stack").option("-y, --yes", "Accept defaults without prompting").action(async (options) => {
+  ).option("--skip-companion", "Skip local companion CLI installation").option("--skip-mcp", "Skip local snipara-mcp package installation").option("--skip-runtime", "Skip snipara-sandbox installation").option("--skip-hooks", "Skip hook generation").option("--skip-test", "Skip hosted connection test").option("--with-orchestrator", "Install optional snipara-orchestrator package").option("--github", "Open GitHub repository automation setup when a git remote is detected").option("--skip-github", "Skip the GitHub automation prompt").option("--github-path <path>", "Optional GitHub path filter for the initial repository sync").option("--runtime-only", "Install only Snipara Sandbox").addOption(new Option("--full", "Legacy alias for --profile full-stack").hideHelp()).option("-y, --yes", "Accept defaults without prompting").action(async (options) => {
     printBanner();
     await runInit(options);
   });
@@ -185,7 +185,7 @@ function buildProgram() {
     printBanner();
     await runRepair(options);
   });
-  program.command("upgrade").description("Upgrade installed Snipara local components").option("--with-hooks", "Refresh hooks after upgrade").option("--with-runtime", "Upgrade Snipara Sandbox even if not detected").option("--with-mcp", "Upgrade snipara-mcp even if not detected").option("--with-companion", "Upgrade companion even if not detected").option("--with-orchestrator", "Upgrade snipara-orchestrator even if not detected").action(async (options) => {
+  program.command("upgrade").description("Upgrade installed Snipara local components").option("--slug <slug>", "Project slug override").option("--with-hooks", "Refresh hooks after upgrade").option("--with-runtime", "Upgrade Snipara Sandbox even if not detected").option("--with-mcp", "Upgrade snipara-mcp even if not detected").option("--with-companion", "Upgrade companion even if not detected").option("--with-orchestrator", "Upgrade snipara-orchestrator even if not detected").action(async (options) => {
     printBanner();
     await runUpgrade(options);
   });
@@ -204,7 +204,7 @@ function addSharedRootOptions(program) {
   program.option("--api-key <key>", "Snipara API key").option("--slug <slug>", "Project slug").option("--project-id <id>", "Project ID").option("--advanced", "Show advanced profile, project id, hooks, GitHub, and sandbox prompts").option(
     "--profile <profile>",
     "Install profile: hosted-only, hosted-companion, full-stack, runtime-only"
-  ).option("--skip-companion", "Skip local companion CLI installation").option("--skip-mcp", "Skip local snipara-mcp package installation").option("--skip-runtime", "Skip snipara-sandbox installation").option("--skip-hooks", "Skip hook generation").option("--skip-test", "Skip hosted connection test").option("--with-orchestrator", "Install optional snipara-orchestrator package").option("--github", "Open GitHub repository automation setup when a git remote is detected").option("--skip-github", "Skip the GitHub automation prompt").option("--github-path <path>", "Optional GitHub path filter for the initial repository sync").option("--runtime-only", "Install only Snipara Sandbox").option("--full", "Alias for --profile full-stack").option("-y, --yes", "Accept defaults without prompting");
+  ).option("--skip-companion", "Skip local companion CLI installation").option("--skip-mcp", "Skip local snipara-mcp package installation").option("--skip-runtime", "Skip snipara-sandbox installation").option("--skip-hooks", "Skip hook generation").option("--skip-test", "Skip hosted connection test").option("--with-orchestrator", "Install optional snipara-orchestrator package").option("--github", "Open GitHub repository automation setup when a git remote is detected").option("--skip-github", "Skip the GitHub automation prompt").option("--github-path <path>", "Optional GitHub path filter for the initial repository sync").option("--runtime-only", "Install only Snipara Sandbox").addOption(new Option("--full", "Legacy alias for --profile full-stack").hideHelp()).option("-y, --yes", "Accept defaults without prompting");
 }
 async function main() {
   const program = buildProgram();
@@ -385,7 +385,7 @@ async function runPrintConfig(options) {
             repository: githubRepo,
             answerPacks: githubAnswerPacks
           },
-          inferredSetup: answers
+          inferredSetup: redactSetupAnswers(answers)
         },
         null,
         2
@@ -395,6 +395,7 @@ async function runPrintConfig(options) {
   }
   console.log(chalk.bold("\n\u{1F4E6} Current Setup\n"));
   console.log(`   Project slug: ${answers.projectSlug}`);
+  console.log(`   Project slug source: ${detection.projectSlugSource || "not detected"}`);
   console.log(`   Project id: ${answers.projectId || "not-set"}`);
   console.log(`   Profile: ${answers.profile}`);
   console.log(`   AI client: ${answers.aiClient}`);
@@ -407,11 +408,21 @@ async function runPrintConfig(options) {
   console.log(`   Snipara Orchestrator: ${answers.installOrchestrator ? "enabled" : "disabled"}`);
   console.log(`   Hooks: ${answers.installHooks ? "enabled" : "disabled"}`);
   console.log(`   GitHub repo: ${githubRepo ? githubRepo.fullName : "not detected"}`);
+  if (detection.detectedRepoSlug && detection.detectedRepoSlug !== answers.projectSlug) {
+    console.log(`   Git repo slug: ${detection.detectedRepoSlug}`);
+  }
   console.log(`   ${GITHUB_ANSWER_PACKS_LABEL}: ${githubAnswerPacks}`);
   console.log(`   Existing .mcp.json: ${detection.files.mcpConfig ? "yes" : "no"}`);
   console.log(`   Companion pack: ${detection.files.sniparaCompanionPack ? "yes" : "no"}`);
   console.log("");
 }
+function redactSetupAnswers(answers) {
+  return {
+    ...answers,
+    apiKey: answers.apiKey.includes("YOUR_") ? answers.apiKey : "[redacted]",
+    llmApiKey: answers.llmApiKey ? "[redacted]" : void 0
+  };
+}
 function printBanner() {
   console.log(
     chalk.cyan(`
@@ -431,10 +442,11 @@ function printBanner() {
 }
 async function gatherConfiguration(options) {
   console.log(chalk.bold("\n\u{1F4CB} Project Configuration\n"));
-  let detectedSlug = detectProjectSlug();
-  let detectedProjectId = "";
   const detectedClient = detectAiClient();
   const existingConfig = getExistingConfig();
+  const projectSlugResolution = resolveProjectSlug(existingConfig);
+  let detectedSlug = projectSlugResolution.slug;
+  let detectedProjectId = "";
   const detectedGitRepo = detectGitRepository();
   const showAdvancedPrompts = Boolean(options.advanced);
   if (options.github && !detectedGitRepo) {
@@ -446,7 +458,6 @@ async function gatherConfiguration(options) {
   }
   if (existingConfig) {
     console.log(chalk.dim("   Found existing .mcp.json configuration"));
-    detectedSlug = existingConfig.slug || detectedSlug;
     detectedProjectId = existingConfig.projectId || "";
   }
   const initialProfile = resolveRequestedProfile(options);
@@ -2230,6 +2241,16 @@ async function runValidation(answers, includeHostedCheck, options = {}) {
     status: answers.projectSlug ? "pass" : "fail",
     detail: answers.projectSlug || "Project slug missing"
   });
+  const configuredSlugSignals = collectConfiguredProjectSlugSignals(detection.existingConfig);
+  const presentSlugSignals = configuredSlugSignals.filter((signal) => signal.slug);
+  const uniqueConfiguredSlugs = new Set(presentSlugSignals.map((signal) => signal.slug));
+  if (uniqueConfiguredSlugs.size > 1) {
+    checks.push({
+      name: "project_slug_consistency",
+      status: "warn",
+      detail: `Configured slug mismatch: ${presentSlugSignals.map((signal) => `${signal.source}=${signal.slug}`).join(", ")}`
+    });
+  }
   checks.push({
     name: "target_client",
     status: "pass",
@@ -2315,9 +2336,11 @@ function writeDoctorReport(report) {
 function printDoctorReport(detection, report) {
   const targetClient = report.checks.find((check) => check.name === "target_client")?.detail || detection.aiClient;
   console.log(chalk.bold("\n\u{1FA7A} Snipara Doctor\n"));
-  console.log(
-    `   Project slug: ${detection.existingConfig.slug || detection.projectSlug || "unknown"}`
-  );
+  console.log(`   Project slug: ${detection.projectSlug || "unknown"}`);
+  console.log(`   Project slug source: ${detection.projectSlugSource || "not detected"}`);
+  if (detection.detectedRepoSlug && detection.detectedRepoSlug !== detection.projectSlug) {
+    console.log(`   Git repo slug: ${detection.detectedRepoSlug}`);
+  }
   console.log(`   AI client: ${targetClient}`);
   console.log(`   In git repo: ${detection.inGitRepo ? "yes" : "no"}`);
   console.log(`   Profile: ${report.profile}`);
@@ -2629,10 +2652,13 @@ function getClaudeConfigPaths() {
 }
 function detectEnvironment() {
   const existingConfig = getExistingConfig();
+  const projectSlugResolution = resolveProjectSlug(existingConfig);
   const claudePaths = getClaudeConfigPaths();
   return {
     cwd: process.cwd(),
-    projectSlug: detectProjectSlug(),
+    projectSlug: projectSlugResolution.slug,
+    projectSlugSource: projectSlugResolution.source,
+    detectedRepoSlug: detectRepoProjectSlug(),
     aiClient: detectAiClient(),
     inGitRepo: isGitRepo(),
     files: {
@@ -2644,6 +2670,7 @@ function detectEnvironment() {
       claudeMd: fs.existsSync(path.join(process.cwd(), "CLAUDE.md")),
       codexConfig: fs.existsSync(path.join(process.cwd(), ".codex", "config.toml")),
       cursorRule: fs.existsSync(path.join(process.cwd(), ".cursor", "rules", "snipara.mdc")),
+      sniparaProject: fs.existsSync(path.join(process.cwd(), ".snipara", "project")),
       claudeDir: fs.existsSync(path.join(homedir(), ".claude")),
       claudeSettings: fs.existsSync(claudePaths.codeSettingsPath),
       claudeDesktopConfig: fs.existsSync(claudePaths.desktopConfigPath),
@@ -2683,7 +2710,7 @@ function loadExistingAnswers(options) {
   const apiKey = providedApiKey || envApiKey || "YOUR_API_KEY_HERE";
   const apiKeyType = effectiveProfile === "runtime-only" ? "none" : providedApiKey || envApiKey ? "api" : "none";
   return buildAnswersFromProfile({
-    projectSlug: options.slug || detection.existingConfig.slug || detection.projectSlug || "my-project",
+    projectSlug: options.slug || detection.projectSlug || "my-project",
     projectId: options.projectId || detection.existingConfig.projectId || "",
     apiKey,
     apiKeyType,
@@ -2714,17 +2741,157 @@ function resolveMaintenanceProfile(detection, explicitProfile) {
 function readApiKeyFromEnvFiles() {
   const candidates = [".env.local", ".env"];
   for (const file of candidates) {
-    const filePath = path.join(process.cwd(), file);
-    if (!fs.existsSync(filePath)) continue;
+    const value = readEnvValueFromFile(file, ["SNIPARA_API_KEY", "RLM_API_KEY"]);
+    if (value) {
+      return value;
+    }
+  }
+  return null;
+}
+function resolveProjectSlug(existingConfig = getExistingConfig()) {
+  const configuredSignals = collectConfiguredProjectSlugSignals(existingConfig);
+  const signals = [
+    ...configuredSignals,
+    { source: "git remote", slug: detectRepoProjectSlug() },
+    { source: "working directory", slug: detectDirectoryProjectSlug() }
+  ];
+  const selected = signals.find((signal) => signal.slug);
+  return {
+    slug: selected?.slug || null,
+    source: selected?.source || null,
+    signals
+  };
+}
+function collectConfiguredProjectSlugSignals(existingConfig = getExistingConfig()) {
+  return [
+    { source: ".mcp.json", slug: normalizeSlugCandidate(existingConfig?.slug) },
+    { source: ".snipara/project", slug: readProjectSlugFromProjectBinding() },
+    {
+      source: ".codex/config.toml",
+      slug: readProjectSlugFromTextFile(path.join(process.cwd(), ".codex", "config.toml"))
+    },
+    {
+      source: ".snipara/templates/codex-config.toml",
+      slug: readProjectSlugFromTextFile(
+        path.join(process.cwd(), ".snipara", "templates", "codex-config.toml")
+      )
+    },
+    { source: ".env.local", slug: readProjectSlugFromEnvFile(".env.local") },
+    { source: ".env", slug: readProjectSlugFromEnvFile(".env") }
+  ];
+}
+function normalizeSlugCandidate(value) {
+  if (!value) {
+    return null;
+  }
+  const trimmed = value.trim().replace(/^["']|["']$/g, "");
+  if (!trimmed || /^your_/i.test(trimmed) || /^YOUR_/.test(trimmed) || trimmed.includes("<") || trimmed.includes(">")) {
+    return null;
+  }
+  return trimmed;
+}
+function slugifyFallback(value) {
+  const normalized = normalizeSlugCandidate(value);
+  if (!normalized) {
+    return null;
+  }
+  const slug = normalized.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
+  return slug || null;
+}
+function extractSlugFromMcpEndpoint(value) {
+  const endpoint = normalizeSlugCandidate(value);
+  if (!endpoint) {
+    return null;
+  }
+  const match = endpoint.match(/\/mcp\/([^/?#\s"']+)/);
+  return normalizeSlugCandidate(match?.[1] ? decodeURIComponent(match[1]) : null);
+}
+function extractSlugFromText(content) {
+  const match = content.match(/\/mcp\/([^/?#\s"'`]+)/);
+  return normalizeSlugCandidate(match?.[1] ? decodeURIComponent(match[1]) : null);
+}
+function readProjectSlugFromTextFile(filePath) {
+  if (!fs.existsSync(filePath)) {
+    return null;
+  }
+  try {
+    return extractSlugFromText(fs.readFileSync(filePath, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function readProjectSlugFromProjectBinding() {
+  const filePath = path.join(process.cwd(), ".snipara", "project");
+  if (!fs.existsSync(filePath)) {
+    return null;
+  }
+  try {
+    const content = fs.readFileSync(filePath, "utf-8").trim();
+    if (!content) {
+      return null;
+    }
+    if (content.startsWith("{")) {
+      const parsed = JSON.parse(content);
+      return normalizeSlugCandidate(parsed.slug || parsed.projectSlug || parsed.project_slug);
+    }
+    for (const line of content.split(/\r?\n/)) {
+      const trimmed = line.trim();
+      if (!trimmed || trimmed.startsWith("#")) {
+        continue;
+      }
+      const keyed = trimmed.match(/^(?:slug|project|projectSlug|project_slug)\s*[:=]\s*(.+)$/i);
+      if (keyed?.[1]) {
+        return normalizeSlugCandidate(stripInlineEnvComment(keyed[1]));
+      }
+    }
+    const firstValue = content.split(/\r?\n/).map((line) => line.trim()).find((line) => line && !line.startsWith("#"));
+    return normalizeSlugCandidate(firstValue);
+  } catch {
+    return null;
+  }
+}
+function readProjectSlugFromEnvFile(file) {
+  const explicitSlug = readEnvValueFromFile(file, ["SNIPARA_PROJECT_SLUG", "RLM_PROJECT_SLUG"]);
+  if (explicitSlug) {
+    return explicitSlug;
+  }
+  const legacySlug = readEnvValueFromFile(file, ["SNIPARA_PROJECT_ID", "RLM_PROJECT_ID"]);
+  if (legacySlug && /^[a-z0-9][a-z0-9-]*$/i.test(legacySlug)) {
+    return legacySlug;
+  }
+  return null;
+}
+function readEnvValueFromFile(file, names) {
+  const filePath = path.join(process.cwd(), file);
+  if (!fs.existsSync(filePath)) {
+    return null;
+  }
+  try {
     const content = fs.readFileSync(filePath, "utf-8");
-    const match = content.match(/^(?:SNIPARA_API_KEY|RLM_API_KEY)=(.+)$/m);
-    if (match?.[1]) {
-      return match[1].trim();
+    for (const line of content.split(/\r?\n/)) {
+      const match = line.trim().match(/^(?:export\s+)?([A-Z0-9_]+)\s*=\s*(.*)$/);
+      if (!match || !names.includes(match[1])) {
+        continue;
+      }
+      const value = normalizeSlugCandidate(stripInlineEnvComment(match[2]));
+      if (value) {
+        return value;
+      }
     }
+  } catch {
+    return null;
   }
   return null;
 }
-function detectProjectSlug() {
+function stripInlineEnvComment(value) {
+  const trimmed = value.trim();
+  const quoted = trimmed.match(/^(['"])(.*)\1$/);
+  if (quoted) {
+    return quoted[2].trim();
+  }
+  return trimmed.replace(/\s+#.*$/, "").trim();
+}
+function detectRepoProjectSlug() {
   try {
     const remote = execSync("git remote get-url origin", {
       encoding: "utf-8",
@@ -2732,11 +2899,14 @@ function detectProjectSlug() {
     }).trim();
     const match = remote.match(/[/:]([^/]+?)(?:\.git)?$/);
     if (match) {
-      return match[1].toLowerCase().replace(/[^a-z0-9-]/g, "-");
+      return slugifyFallback(match[1]);
     }
   } catch {
   }
-  return path.basename(process.cwd()).toLowerCase().replace(/[^a-z0-9-]/g, "-");
+  return null;
+}
+function detectDirectoryProjectSlug() {
+  return slugifyFallback(path.basename(process.cwd()));
 }
 function detectGitRepository() {
   try {
@@ -2854,9 +3024,8 @@ function getExistingConfig() {
     const config = JSON.parse(fs.readFileSync(mcpConfigPath, "utf-8"));
     const sniparaServer = config.mcpServers?.snipara;
     const runtimeServer = config.mcpServers?.[SANDBOX_SERVER_NAME] || config.mcpServers?.[LEGACY_RUNTIME_SERVER_NAME];
-    const match = sniparaServer?.url?.match(/\/mcp\/([^/]+)$/);
     return {
-      slug: match?.[1],
+      slug: extractSlugFromMcpEndpoint(sniparaServer?.url) || void 0,
       projectId: "",
       hasSniparaServer: Boolean(sniparaServer),
       hasRuntimeServer: Boolean(runtimeServer)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-snipara",
-  "version": "1.3.24",
+  "version": "1.3.26",
   "description": "Onboard Snipara Hosted MCP Context + Memory with auth, companion workflows, and optional Snipara Sandbox",
   "main": "dist/index.js",
   "type": "module",