create-snipara 1.3.3 → 1.3.6

package/README.md

@@ -1,14 +1,25 @@
 # create-snipara
 
-One-command scaffolding and maintenance CLI for **Hosted MCP config + optional snipara-companion + optional RLM-Runtime**.
+One-command onboarding and maintenance CLI for **Snipara Hosted MCP Context + Memory** with optional `snipara-companion` and optional RLM-Runtime.
 
 ```bash
 npx create-snipara
 ```
 
-`create-snipara` is onboarding and scaffolding. It is not a product connection surface. The product surfaces remain:
+`create-snipara` is the simple onboarding package for the agent path. It creates or reuses auth, writes Hosted MCP config, and prepares the local project so an LLM client can use Snipara context and reviewed memory.
 
-- Hosted MCP for LLM agents
+Use it for:
+
+- Hosted MCP onboarding for Codex, Claude Code, Cursor, ChatGPT Desktop, and similar clients
+- free account signup with reviewed Context + Memory
+- local project wiring, `doctor`, `repair`, and `upgrade`
+- GitHub repository sync approval when the current folder is a GitHub repo
+
+Do not use it to choose business documents one by one. For local folders, mounted Drive/SharePoint exports, old offers, or PowerPoints, use `snipara-business`.
+
+The product surfaces remain:
+
+- Hosted MCP for LLM agents, context, and reviewed memory
 - HTTP API / SDK for apps, integrators, backends, and pipelines
 
 The CLI can wire local helpers around those surfaces:
@@ -31,10 +42,37 @@ The CLI now works around explicit install profiles:
 
 Default profile: `hosted-only`
 
+## Free Account Fit
+
+Free onboarding is now **Context + Memory**, not Context-only:
+
+- Context Free: one project and 100 context queries/month
+- Memory Free: reviewed hosted memories for continuity across sessions
+- Hosted MCP: direct connection for Claude Code, Codex, Cursor, ChatGPT Desktop, and other MCP clients
+
+The CLI opens a browser device-flow login when the user does not already have a key, auto-provisions the free Context + Memory account when needed, then writes the returned project key into the local MCP config.
+
+## The Two Approval Paths
+
+`create-snipara` deliberately splits setup into two user-friendly surfaces:
+
+1. **Terminal**
+   Connects the agent, writes local config, and prepares the workstation.
+2. **Browser**
+   Handles account login and GitHub approval because those source permissions must be chosen explicitly by the user.
+
+That distinction matters:
+
+- the terminal is for local setup
+- the browser is for identity and source approval
+- the MCP is for agent usage after setup, not for initial GitHub permission selection
+
 ## What It Does
 
 - detects local environment and project state
+- opens the browser device-flow free Context + Memory account flow when needed
 - writes Hosted MCP configuration
+- detects a GitHub remote and can open the Snipara GitHub App automation path
 - installs `snipara-companion` when the selected profile needs local helper workflows
 - installs optional `rlm-runtime`
 - configures `.mcp.json`
@@ -45,6 +83,17 @@ Default profile: `hosted-only`
 - optionally installs Claude Code hooks
 - supports `doctor`, `repair`, `upgrade`, and `print-config`
 
+## Product Boundary
+
+Keep the package roles simple:
+
+- `create-snipara` = connect the user to Hosted MCP Context + Memory
+- `create-snipara --github` = connect the current GitHub repository through the browser approval flow
+- `snipara-business` = prepare business context from local or mounted folders
+- Hosted MCP = the runtime surface the LLM actually uses after setup
+
+This avoids mixing repo sync, business document review, and agent runtime into one unclear workflow.
+
 ## Quick Start
 
 ```bash
@@ -56,9 +105,10 @@ The interactive flow now asks for:
 - install profile
 - project slug
 - optional project id
-- API key type and key when needed
+- API key path: project key, team key, free signup, or add key later
 - AI client
 - whether hooks should be generated
+- whether to open GitHub repository automation when a GitHub remote is detected
 - optional runtime provider config when `rlm-runtime` is installed
 
 ## Main Commands
@@ -70,6 +120,8 @@ npx create-snipara
 npx create-snipara init
 ```
 
+Use this when the goal is "connect my LLM client to Snipara."
+
 ### Inspect local setup
 
 ```bash
@@ -112,6 +164,42 @@ npx create-snipara print-config
 npx create-snipara print-config --json
 ```
 
+## Source Selection Rules
+
+### GitHub repositories
+
+For source-code repositories, let the user approve access in the browser:
+
+```bash
+npx create-snipara --github
+```
+
+The CLI detects the current repo and can prefill:
+
+- `owner/repo`
+- current branch
+- optional path filter such as `docs/` or `README.md`
+
+The browser flow is where the user:
+
+- signs in to Snipara if needed
+- approves the Snipara GitHub App
+- chooses the GitHub account or organization
+- chooses which repositories Snipara may read
+
+This is the correct product boundary. Repository access is explicit, auditable, and revocable.
+
+### Local business folders
+
+For business documents, do not ask the user to pick files through the MCP setup flow.
+Instead:
+
+1. connect Hosted MCP with `create-snipara`
+2. materialize the relevant local or mounted folder
+3. run `snipara-business` to build a reviewable manifest
+
+That keeps business truth review separate from agent onboarding.
+
 ## Common Flags
 
 ```bash
@@ -126,11 +214,16 @@ npx create-snipara --runtime-only
 # Non-interactive setup
 npx create-snipara -y --api-key rlm_xxx --slug my-project
 
+# Open GitHub automation after setup when a GitHub remote is detected
+npx create-snipara --github
+npx create-snipara --github-path docs/
+
 # Skip selected layers
 npx create-snipara --skip-companion
 npx create-snipara --skip-mcp      # Skip local snipara-mcp package if explicitly requested
 npx create-snipara --skip-runtime
 npx create-snipara --skip-hooks
+npx create-snipara --skip-github
 
 # Force extra layers during maintenance
 npx create-snipara repair --with-hooks
@@ -141,7 +234,7 @@ npx create-snipara upgrade --with-runtime
 
 The intended split is:
 
-- `create-snipara`: install, inspect, repair, and upgrade the local project setup
+- `create-snipara`: Context + Memory onboarding, auth, config, inspect, repair, and upgrade
 - `snipara-companion`: optional ongoing local runtime workflows through `rlm-hook`
 - `snipara-mcp`: local stdio bridge, client-package development, compatibility, and testing
 - `rlm-runtime`: optional local execution engine
@@ -181,15 +274,37 @@ Use this for dashboardless business-context imports after an LLM client has
 materialized Drive, Notion, Gmail, or local files into a folder. For source-code
 repositories, use the GitHub OAuth/code onboarding path instead.
 
+## GitHub Automation
+
+When run inside a GitHub-backed repository, `create-snipara` can open the Snipara GitHub App flow with the detected `owner/repo` and branch already carried through:
+
+```bash
+npx create-snipara --github
+```
+
+The browser flow lets the user:
+
+- install or update the Snipara GitHub App
+- pick the detected repo
+- create or reuse the matching Snipara project
+- enable push sync
+- start the first documentation sync
+
+Hosted memory stays attached to the same Snipara account.
+
+Recommended explanation to users:
+
+> `create-snipara` connects your LLM from the terminal. GitHub sync is approved in the browser because GitHub requires the user to choose which account, organization, and repositories Snipara can read.
+
 ## API Key Requirements
 
-| Tooling                              | Snipara API key      | LLM API key |
-| ------------------------------------ | -------------------- | ----------- |
-| Hosted MCP queries                   | Required             | Not needed  |
-| Memory / planning tools              | Required             | Not needed  |
-| `snipara-companion` hosted workflows | Optional             | Not needed  |
-| `rlm-runtime` `execute_python` MCP   | Not needed           | Not needed  |
-| `rlm run` / `rlm agent` CLI          | Optional for context | Required    |
+| Tooling                              | Snipara API key            | LLM API key |
+| ------------------------------------ | -------------------------- | ----------- |
+| Hosted MCP queries                   | Required                   | Not needed  |
+| Memory / planning tools              | Required with memory scope | Not needed  |
+| `snipara-companion` hosted workflows | Optional                   | Not needed  |
+| `rlm-runtime` `execute_python` MCP   | Not needed                 | Not needed  |
+| `rlm run` / `rlm agent` CLI          | Optional for context       | Required    |
 
 ## Example Flows
 
@@ -199,12 +314,41 @@ repositories, use the GitHub OAuth/code onboarding path instead.
 npx create-snipara --profile hosted-only
 ```
 
+Best when the user only wants Hosted MCP Context + Memory.
+
 ### Full local stack
 
 ```bash
 npx create-snipara --profile full-stack
 ```
 
+Best when the user also wants `snipara-companion` and `rlm-runtime`.
+
+### Connect the current repository
+
+```bash
+npx create-snipara --github
+```
+
+Best when the current folder is a GitHub repository and the user wants code or docs sync through the GitHub App.
+
+### Connect the current repository with a path filter
+
+```bash
+npx create-snipara --github --github-path docs/
+```
+
+Best when the user wants a focused first sync instead of the whole repository.
+
+### Continue with business documents
+
+```bash
+npx create-snipara
+npx snipara-business init
+```
+
+Best when the agent connection is done and the next step is business context onboarding from local or mounted folders.
+
 ### Repair after a broken workstation or new shell
 
 ```bash
@@ -223,7 +367,7 @@ npx create-snipara print-config --json
 When testing a locally packed tarball, use `npm exec --package` instead of `npx`, for example:
 
 ```bash
-npm exec --package ./create-snipara-1.3.3.tgz create-snipara -- --help
+npm exec --package ./create-snipara-1.3.6.tgz create-snipara -- --help
 ```
 
 This avoids `npx` resolution issues with unpublished tarballs.

package/dist/index.js

@@ -9,12 +9,15 @@ import fs from "fs";
 import path from "path";
 import { execSync, spawn } from "child_process";
 import { homedir } from "os";
-var VERSION = "1.3.3";
+var VERSION = "1.3.6";
 var BASE_URL = "https://www.snipara.com";
 var API_URL = "https://api.snipara.com";
 var COMPANION_PACKAGE_NAME = "snipara-companion";
 var MCP_PACKAGE_NAME = "snipara-mcp";
 var RUNTIME_PACKAGE_NAME = "rlm-runtime[all]";
+var DEVICE_CLIENT_ID = "create-snipara";
+var DeviceAuthorizationAborted = class extends Error {
+};
 function getCompanionInitClientFlag(aiClient) {
   if (aiClient === "cursor") {
     return " --client cursor";
@@ -27,7 +30,7 @@ function buildProgram() {
   program.command("init").description("Install and configure Snipara for this project").option("--api-key <key>", "Snipara project API key").option("--team-key <key>", "Snipara team API key").option("--slug <slug>", "Project slug").option("--project-id <id>", "Project ID").option(
     "--profile <profile>",
     "Install profile: hosted-only, hosted-companion, full-stack, runtime-only"
-  ).option("--skip-companion", "Skip local companion CLI installation").option("--skip-mcp", "Skip local snipara-mcp package installation").option("--skip-runtime", "Skip rlm-runtime installation").option("--skip-hooks", "Skip hook generation").option("--skip-test", "Skip hosted connection test").option("--runtime-only", "Install only RLM-Runtime").option("-y, --yes", "Accept defaults without prompting").action(async (options) => {
+  ).option("--skip-companion", "Skip local companion CLI installation").option("--skip-mcp", "Skip local snipara-mcp package installation").option("--skip-runtime", "Skip rlm-runtime installation").option("--skip-hooks", "Skip hook generation").option("--skip-test", "Skip hosted connection test").option("--github", "Open GitHub repository automation setup when a git remote is detected").option("--skip-github", "Skip the GitHub automation prompt").option("--github-path <path>", "Optional GitHub path filter for the initial repository sync").option("--runtime-only", "Install only RLM-Runtime").option("-y, --yes", "Accept defaults without prompting").action(async (options) => {
     printBanner();
     await runInit(options);
   });
@@ -58,7 +61,7 @@ function addSharedRootOptions(program) {
   program.option("--api-key <key>", "Snipara project API key").option("--team-key <key>", "Snipara team API key").option("--slug <slug>", "Project slug").option("--project-id <id>", "Project ID").option(
     "--profile <profile>",
     "Install profile: hosted-only, hosted-companion, full-stack, runtime-only"
-  ).option("--skip-companion", "Skip local companion CLI installation").option("--skip-mcp", "Skip local snipara-mcp package installation").option("--skip-runtime", "Skip rlm-runtime installation").option("--skip-hooks", "Skip hook generation").option("--skip-test", "Skip hosted connection test").option("--runtime-only", "Install only RLM-Runtime").option("-y, --yes", "Accept defaults without prompting");
+  ).option("--skip-companion", "Skip local companion CLI installation").option("--skip-mcp", "Skip local snipara-mcp package installation").option("--skip-runtime", "Skip rlm-runtime installation").option("--skip-hooks", "Skip hook generation").option("--skip-test", "Skip hosted connection test").option("--github", "Open GitHub repository automation setup when a git remote is detected").option("--skip-github", "Skip the GitHub automation prompt").option("--github-path <path>", "Optional GitHub path filter for the initial repository sync").option("--runtime-only", "Install only RLM-Runtime").option("-y, --yes", "Accept defaults without prompting");
 }
 async function main() {
   const program = buildProgram();
@@ -83,6 +86,9 @@ async function runInit(options) {
   const validationReport = await runValidation(answers, !options.skipTest);
   writeDoctorReport(validationReport);
   printSuccess(answers, validationReport);
+  if (answers.configureGitHub && answers.githubRepo) {
+    await openGitHubAutomation(answers);
+  }
   if (answers.runRlmInit && answers.installRuntime) {
     await runRlmInit();
   }
@@ -119,20 +125,21 @@ async function runRepair(options) {
 async function runUpgrade(options) {
   const detection = detectEnvironment();
   const answers = loadExistingAnswers(options);
+  const upgradedAnswers = {
+    ...answers,
+    installMcp: options.withMcp || answers.installMcp,
+    installRuntime: options.withRuntime || answers.installRuntime
+  };
   console.log(chalk.bold("\n\u2B06\uFE0F  Upgrading Local Components\n"));
   if (options.withMcp || options.withRuntime || detection.existingConfig.hasRuntimeServer) {
-    await installPythonPackages(
-      {
-        ...answers,
-        installMcp: options.withMcp || answers.installMcp,
-        installRuntime: options.withRuntime || answers.installRuntime
-      },
-      true
-    );
+    await installPythonPackages(upgradedAnswers, true);
   }
   if (options.withCompanion || detection.tooling.companionCli || answers.installCompanion) {
     await installNodeCompanion(true);
   }
+  if (options.withMcp || options.withRuntime || detection.files.mcpConfig) {
+    await createMcpConfig(upgradedAnswers);
+  }
   if (options.withHooks || answers.installHooks) {
     await installClaudeCodeHooks({ ...answers, installHooks: true });
   }
@@ -169,12 +176,13 @@ function printBanner() {
     chalk.cyan(`
 \u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557
 \u2551                                                                       \u2551
-\u2551   ${chalk.bold("Snipara")} - Hosted MCP + API / SDK setup                           \u2551
+\u2551   ${chalk.bold("Snipara")} - Context + Memory onboarding                            \u2551
 \u2551                                                                       \u2551
 \u2551   \u2022 Hosted MCP for LLM agents                                         \u2551
+\u2551   \u2022 Free account path with hosted context and reviewed memory         \u2551
 \u2551   \u2022 API / SDK for product integrations                                \u2551
 \u2551   \u2022 Optional local companion and runtime helpers                      \u2551
-\u2551   \u2022 One CLI for scaffolding, doctor, repair, and upgrade              \u2551
+\u2551   \u2022 One CLI for auth, config, doctor, repair, and upgrade             \u2551
 \u2551                                                                       \u2551
 \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D
 `)
@@ -186,6 +194,14 @@ async function gatherConfiguration(options) {
   let detectedProjectId = "";
   const detectedClient = detectAiClient();
   const existingConfig = getExistingConfig();
+  const detectedGitRepo = detectGitRepository();
+  if (options.github && !detectedGitRepo) {
+    console.log(
+      chalk.yellow(
+        "   \u26A0\uFE0F  --github was requested, but no GitHub origin remote was detected in this folder."
+      )
+    );
+  }
   if (existingConfig) {
     console.log(chalk.dim("   Found existing .mcp.json configuration"));
     detectedSlug = existingConfig.slug || detectedSlug;
@@ -203,7 +219,10 @@ async function gatherConfiguration(options) {
       skipCompanion: !!options.skipCompanion,
       skipMcp: !!options.skipMcp,
       skipRuntime: !!options.skipRuntime,
-      skipHooks: !!options.skipHooks
+      skipHooks: !!options.skipHooks,
+      configureGitHub: Boolean(options.github && detectedGitRepo && !options.skipGithub),
+      githubRepo: detectedGitRepo || void 0,
+      githubPath: options.githubPath
     });
   }
   const response = await prompts([
@@ -243,8 +262,9 @@ async function gatherConfiguration(options) {
           description: "Access to all projects in your team"
         },
         {
-          title: "Sign up for free (100 queries/mo)",
-          value: "signup"
+          title: "Create free Context + Memory account",
+          value: "signup",
+          description: "Hosted MCP with Context Free and reviewed Memory Free"
         },
         {
           title: "I'll add the API key later",
@@ -287,13 +307,27 @@ async function gatherConfiguration(options) {
       name: "installHooks",
       message: "Generate local hooks when supported?",
       initial: detectedClient === "claude-code"
+    },
+    {
+      type: (_, values) => detectedGitRepo && !options.skipGithub && values.profile !== "runtime-only" ? "confirm" : null,
+      name: "configureGitHub",
+      message: detectedGitRepo ? `Open GitHub automation setup for ${detectedGitRepo.fullName} after local config?` : "Open GitHub automation setup after local config?",
+      initial: true
+    },
+    {
+      type: (_, values) => values.configureGitHub && detectedGitRepo ? "text" : null,
+      name: "githubPath",
+      message: "GitHub path filter (optional, press Enter for Snipara defaults):",
+      initial: options.githubPath || ""
     }
   ]);
   let apiKey = options.teamKey || options.apiKey;
   let apiKeyType = response.profile === "runtime-only" ? "none" : options.teamKey ? "team" : options.apiKey ? "project" : "none";
+  let signupResult = null;
   if (!apiKey && response.profile !== "runtime-only") {
     if (response.apiKeyType === "signup") {
-      apiKey = await handleSignup();
+      signupResult = await handleSignup();
+      apiKey = signupResult.apiKey;
       apiKeyType = "project";
     } else if (response.apiKeyType === "project" || response.apiKeyType === "team") {
       apiKey = response.apiKey;
@@ -304,8 +338,8 @@ async function gatherConfiguration(options) {
     }
   }
   const answers = buildAnswersFromProfile({
-    projectSlug: response.projectSlug,
-    projectId: response.projectId || "",
+    projectSlug: signupResult?.projectSlug || response.projectSlug,
+    projectId: signupResult?.projectId || response.projectId || "",
     apiKey: apiKey || "",
     apiKeyType,
     profile: response.profile || initialProfile,
@@ -313,7 +347,12 @@ async function gatherConfiguration(options) {
     skipCompanion: !!options.skipCompanion,
     skipMcp: !!options.skipMcp,
     skipRuntime: !!options.skipRuntime,
-    skipHooks: !!options.skipHooks || !response.installHooks
+    skipHooks: !!options.skipHooks || !response.installHooks,
+    configureGitHub: Boolean(
+      (response.configureGitHub || options.github) && detectedGitRepo && !options.skipGithub
+    ),
+    githubRepo: detectedGitRepo || void 0,
+    githubPath: response.githubPath || options.githubPath
   });
   if (answers.installRuntime) {
     const runtimeResponse = await prompts([
@@ -440,29 +479,124 @@ function buildAnswersFromProfile(input) {
     installMcp: selected.installMcp && !input.skipMcp,
     installRuntime: selected.installRuntime && !input.skipRuntime,
     installHooks: selected.installHooks && !input.skipHooks,
-    aiClient: input.aiClient
+    aiClient: input.aiClient,
+    configureGitHub: Boolean(input.configureGitHub && input.githubRepo),
+    githubRepo: input.githubRepo,
+    githubPath: input.githubPath
   };
 }
 async function handleSignup() {
-  const signupUrl = `${BASE_URL}/signup`;
+  console.log(chalk.bold("\n\u{1F510} Browser Account Authorization\n"));
+  try {
+    return await runDeviceAuthorization();
+  } catch (error) {
+    if (error instanceof DeviceAuthorizationAborted) {
+      throw error;
+    }
+    console.log(
+      chalk.yellow(
+        `   \u26A0\uFE0F  Browser authorization did not complete: ${error instanceof Error ? error.message : "unknown error"}`
+      )
+    );
+    console.log(chalk.dim("   Falling back to manual key capture.\n"));
+    return handleManualSignup();
+  }
+}
+async function handleManualSignup() {
+  const signupUrl = `${BASE_URL}/register?plan=free&source=create-snipara`;
   console.log(chalk.cyan(`
    Opening ${signupUrl} in your browser...
 `));
-  try {
-    const platform = process.platform;
-    const openCommand = platform === "darwin" ? "open" : platform === "win32" ? "start" : "xdg-open";
-    execSync(`${openCommand} "${signupUrl}"`, { stdio: "ignore", shell: "/bin/sh" });
-  } catch {
-    console.log(chalk.dim(`   Please open ${signupUrl} manually.
-`));
-  }
+  openBrowser(signupUrl);
   const response = await prompts({
     type: "text",
     name: "apiKey",
     message: "Paste your Project API key when ready:",
     validate: (value) => value.startsWith("rlm_") ? true : "API key should start with rlm_"
   });
-  return response.apiKey;
+  return { apiKey: response.apiKey };
+}
+async function runDeviceAuthorization() {
+  const codeResponse = await postJson(`${BASE_URL}/api/oauth/device/code`, {
+    client_id: DEVICE_CLIENT_ID,
+    scope: "mcp:read mcp:write",
+    auto_provision: true
+  });
+  if (codeResponse.error) {
+    throw new Error(codeResponse.error_description || codeResponse.error);
+  }
+  console.log(
+    chalk.cyan(`   Opening ${codeResponse.verification_uri_complete} in your browser...`)
+  );
+  console.log(chalk.dim(`   Device code: ${codeResponse.user_code}`));
+  openBrowser(codeResponse.verification_uri_complete);
+  const spinner = ora("Waiting for Snipara authorization in the browser...").start();
+  const startedAt = Date.now();
+  let intervalMs = Math.max(1, codeResponse.interval || 5) * 1e3;
+  const expiresAt = startedAt + Math.max(60, codeResponse.expires_in || 900) * 1e3;
+  while (Date.now() < expiresAt) {
+    await sleep(intervalMs);
+    const tokenResponse = await postJson(
+      `${BASE_URL}/api/oauth/device/token`,
+      {
+        grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+        device_code: codeResponse.device_code,
+        client_id: DEVICE_CLIENT_ID
+      },
+      true
+    );
+    if (!tokenResponse.error) {
+      if (!tokenResponse.api_key) {
+        throw new Error("Device flow completed but no project API key was returned");
+      }
+      spinner.succeed(
+        tokenResponse.project_name ? `Authorized ${tokenResponse.project_name}` : "Authorized Snipara account"
+      );
+      return {
+        apiKey: tokenResponse.api_key,
+        projectId: tokenResponse.project_id,
+        projectSlug: tokenResponse.project_slug
+      };
+    }
+    if (tokenResponse.error === "authorization_pending") {
+      continue;
+    }
+    if (tokenResponse.error === "slow_down") {
+      intervalMs += 5e3;
+      continue;
+    }
+    if (tokenResponse.error === "access_denied") {
+      throw new DeviceAuthorizationAborted("Authorization denied in browser");
+    }
+    throw new Error(tokenResponse.error_description || tokenResponse.error);
+  }
+  spinner.fail("Authorization expired");
+  throw new Error("device code expired");
+}
+async function postJson(url, body, allowErrorResponse = false) {
+  const response = await fetch(url, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(body)
+  });
+  const data = await response.json().catch(() => ({}));
+  if (!response.ok && !(allowErrorResponse && data.error)) {
+    throw new Error(data.error_description || data.error || `HTTP ${response.status}`);
+  }
+  return data;
+}
+function openBrowser(url) {
+  try {
+    const platform = process.platform;
+    const openCommand = platform === "darwin" ? "open" : platform === "win32" ? "start" : "xdg-open";
+    execSync(`${openCommand} "${url}"`, { stdio: "ignore", shell: "/bin/sh" });
+  } catch {
+    console.log(chalk.dim(`   Please open ${url} manually.
+`));
+  }
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
 }
 async function installPythonPackages(answers, upgrade) {
   console.log(chalk.bold(`
@@ -987,6 +1121,16 @@ Apply only after reviewing the manifest:
 
 For source-code repositories, use the GitHub OAuth/code onboarding path instead of \`onboard-folder\`.
 
+## GitHub Repository Automation
+
+${answers.githubRepo ? `Detected repository: \`${answers.githubRepo.fullName}\` on branch \`${answers.githubRepo.branch}\`.
+
+Open the Snipara GitHub App setup and connect this repository:
+
+\`${buildGitHubAutomationUrl(answers)}\`
+
+After connection, Snipara creates or reuses the repository project, enables push sync, starts the first documentation sync, and keeps hosted memory available through the same account.` : `No GitHub repository was detected for this folder. Run \`npx create-snipara --github\` from a GitHub-backed git repository to open the repo automation path.`}
+
 ## Suggested Commands
 
 ${commands.map(
@@ -1011,6 +1155,8 @@ ${item.purpose}`
     ai_client: answers.aiClient,
     profile: answers.profile,
     llm_provider: answers.llmProvider || null,
+    github_repository: answers.githubRepo || null,
+    github_automation_url: answers.githubRepo ? buildGitHubAutomationUrl(answers) : null,
     commands,
     guidance,
     detection
@@ -1048,6 +1194,36 @@ async function runRlmInit() {
     });
   });
 }
+async function openGitHubAutomation(answers) {
+  if (!answers.githubRepo) {
+    return;
+  }
+  const url = buildGitHubAutomationUrl(answers);
+  console.log(chalk.bold("\n\u{1F419} GitHub Automation\n"));
+  console.log(
+    `   Opening Snipara GitHub setup for ${chalk.cyan(answers.githubRepo.fullName)} on branch ${chalk.cyan(
+      answers.githubRepo.branch
+    )}.`
+  );
+  console.log(chalk.dim(`   ${url}
+`));
+  openBrowser(url);
+}
+function buildGitHubAutomationUrl(answers) {
+  const url = new URL("/dashboard/projects/connect", BASE_URL);
+  url.searchParams.set("source", "create-snipara");
+  if (answers.githubRepo) {
+    url.searchParams.set("repo", answers.githubRepo.fullName);
+    url.searchParams.set("branch", answers.githubRepo.branch);
+  }
+  if (answers.githubPath) {
+    url.searchParams.set("path", answers.githubPath);
+  }
+  if (answers.projectSlug) {
+    url.searchParams.set("project_slug", answers.projectSlug);
+  }
+  return url.toString();
+}
 async function runValidation(answers, includeHostedCheck) {
   console.log(chalk.bold("\n\u{1FA7A} Running Validation\n"));
   const checks = [];
@@ -1229,6 +1405,11 @@ function printSuccess(answers, report) {
   if (answers.installRuntime && !answers.runRlmInit) {
     printNextStep("Run rlm init when you want to choose sandbox/docker/local execution.");
   }
+  if (answers.githubRepo) {
+    printNextStep(
+      `Connect GitHub automation for ${answers.githubRepo.fullName} from the generated Snipara link.`
+    );
+  }
   if (failedChecks.length > 0 || warnedChecks.length > 0) {
     console.log(chalk.bold("\nValidation summary:\n"));
     for (const check of [...failedChecks, ...warnedChecks]) {
@@ -1354,6 +1535,48 @@ function detectProjectSlug() {
   }
   return path.basename(process.cwd()).toLowerCase().replace(/[^a-z0-9-]/g, "-");
 }
+function detectGitRepository() {
+  try {
+    const remoteUrl = execSync("git remote get-url origin", {
+      encoding: "utf-8"
+    }).trim();
+    const match = remoteUrl.match(/github\.com[:/]([^/]+)\/([^/]+?)(?:\.git)?$/) || remoteUrl.match(/github\.com\/([^/]+)\/([^/]+?)(?:\.git)?$/);
+    if (!match) {
+      return null;
+    }
+    const owner = match[1];
+    const repo = match[2];
+    const branch = detectGitBranch();
+    return {
+      owner,
+      repo,
+      fullName: `${owner}/${repo}`,
+      branch,
+      remoteUrl
+    };
+  } catch {
+    return null;
+  }
+}
+function detectGitBranch() {
+  try {
+    const branch = execSync("git branch --show-current", {
+      encoding: "utf-8"
+    }).trim();
+    if (branch) {
+      return branch;
+    }
+  } catch {
+  }
+  try {
+    const branch = execSync("git rev-parse --abbrev-ref HEAD", {
+      encoding: "utf-8"
+    }).trim();
+    return branch && branch !== "HEAD" ? branch : "main";
+  } catch {
+    return "main";
+  }
+}
 function isGitRepo() {
   try {
     execSync("git rev-parse --is-inside-work-tree", {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "create-snipara",
-  "version": "1.3.3",
-  "description": "Scaffold hosted Snipara MCP config plus optional local helper and runtime workflows",
+  "version": "1.3.6",
+  "description": "Onboard Snipara Hosted MCP Context + Memory with auth plus optional local helper and runtime workflows",
   "main": "dist/index.js",
   "type": "module",
   "bin": {
@@ -35,7 +35,7 @@
     "type": "git",
     "url": "git+https://github.com/Snipara/create-snipara.git"
   },
-  "homepage": "https://snipara.com/docs/getting-started",
+  "homepage": "https://snipara.com/docs/integration/create-snipara",
   "dependencies": {
     "chalk": "^5.3.0",
     "commander": "^12.1.0",