create-snipara 1.3.36 → 1.3.38

package/README.md

@@ -106,7 +106,8 @@ That distinction matters:
 - installs optional `snipara-orchestrator` for proof gates, drift checks, and htask workflows when requested
 - configures `.mcp.json`
 - generates merge-ready AI agent templates in `.snipara/templates/`, including Pro+ symbol-card, code-impact, and managed workflow guidance for paid Context plans
-- creates `AGENTS.md`, `CLAUDE.md`, `.cursor/rules/snipara.mdc`, and `.codex/config.toml` when those files do not already exist
+- creates `AGENTS.md` and `CLAUDE.md` when missing, or appends a marked Snipara section when those files already exist
+- creates `.cursor/rules/snipara.mdc` and `.codex/config.toml` when those files do not already exist
 - writes client-specific companion packs such as `.snipara/companion/CODEX.md` or `.snipara/companion/GEMINI.md`
 - updates `.env`, `.env.local`, and `.env.example`
 - generates `.snipara/companion/README.md`
@@ -162,6 +163,10 @@ The generated agent templates cover:
 - ChatGPT/OpenAI HTTP MCP snippet
 - Gemini, VS Code, Continue, and custom HTTP MCP reference snippets
 
+Existing root `AGENTS.md` and `CLAUDE.md` files are not replaced. The installer
+adds or refreshes a marked Snipara section so project-specific instructions stay
+intact.
+
 When `snipara-companion` is installed, the companion pack also includes the compaction-safe managed workflow:
 
 ```bash

package/dist/index.js

@@ -13,7 +13,7 @@ import { homedir } from "os";
 // package.json
 var package_default = {
   name: "create-snipara",
-  version: "1.3.36",
+  version: "1.3.38",
   description: "Onboard Snipara Hosted MCP Context + Memory with auth, companion workflows, and optional Snipara Sandbox",
   main: "dist/index.js",
   type: "module",
@@ -163,10 +163,19 @@ function getCompanionInitClientFlag(aiClient) {
   const companionClient = supportedClientMap[aiClient];
   return companionClient ? ` --client ${companionClient}` : "";
 }
+function getAutomationClientId(aiClient) {
+  if (aiClient === "other" || aiClient === "claude-desktop") {
+    return "custom";
+  }
+  return aiClient;
+}
 function buildProgram() {
   const program = new Command();
   program.name("create-snipara").description("Scaffold hosted Snipara MCP config plus companion workflow helpers").version(VERSION);
-  program.command("init").description("Install and configure Snipara for this project").option("--api-key <key>", "Snipara API key").option("--slug <slug>", "Project slug").option("--project-id <id>", "Project ID").option("--advanced", "Show advanced profile, project id, hooks, GitHub, and sandbox prompts").option(
+  program.command("init").description("Install and configure Snipara for this project").option("--api-key <key>", "Snipara API key").option("--slug <slug>", "Project slug").option("--project-id <id>", "Project ID").option(
+    "--client <client>",
+    "AI client: claude-code, cursor, windsurf, codex, gemini, chatgpt, vscode, continue, claude-desktop, other"
+  ).option("--advanced", "Show advanced profile, project id, hooks, GitHub, and sandbox prompts").option(
     "--profile <profile>",
     "Install profile: hosted-only, hosted-companion, full-stack, runtime-only"
   ).option("--skip-companion", "Skip local companion CLI installation").option("--skip-mcp", "Skip local snipara-mcp package installation").option("--skip-runtime", "Skip snipara-sandbox installation").option("--skip-hooks", "Skip hook generation").option("--skip-test", "Skip hosted connection test").option("--with-orchestrator", "Install optional snipara-orchestrator package").option("--github", "Open GitHub repository automation setup when a git remote is detected").option("--skip-github", "Skip the GitHub automation prompt").option("--github-path <path>", "Optional GitHub path filter for the initial repository sync").option("--runtime-only", "Install only Snipara Sandbox").addOption(new Option("--full", "Legacy alias for --profile full-stack").hideHelp()).option("-y, --yes", "Accept defaults without prompting").action(async (options) => {
@@ -200,7 +209,10 @@ function buildProgram() {
   return program;
 }
 function addSharedRootOptions(program) {
-  program.option("--api-key <key>", "Snipara API key").option("--slug <slug>", "Project slug").option("--project-id <id>", "Project ID").option("--advanced", "Show advanced profile, project id, hooks, GitHub, and sandbox prompts").option(
+  program.option("--api-key <key>", "Snipara API key").option("--slug <slug>", "Project slug").option("--project-id <id>", "Project ID").option(
+    "--client <client>",
+    "AI client: claude-code, cursor, windsurf, codex, gemini, chatgpt, vscode, continue, claude-desktop, other"
+  ).option("--advanced", "Show advanced profile, project id, hooks, GitHub, and sandbox prompts").option(
     "--profile <profile>",
     "Install profile: hosted-only, hosted-companion, full-stack, runtime-only"
   ).option("--skip-companion", "Skip local companion CLI installation").option("--skip-mcp", "Skip local snipara-mcp package installation").option("--skip-runtime", "Skip snipara-sandbox installation").option("--skip-hooks", "Skip hook generation").option("--skip-test", "Skip hosted connection test").option("--with-orchestrator", "Install optional snipara-orchestrator package").option("--github", "Open GitHub repository automation setup when a git remote is detected").option("--skip-github", "Skip the GitHub automation prompt").option("--github-path <path>", "Optional GitHub path filter for the initial repository sync").option("--runtime-only", "Install only Snipara Sandbox").addOption(new Option("--full", "Legacy alias for --profile full-stack").hideHelp()).option("-y, --yes", "Accept defaults without prompting");
@@ -233,6 +245,7 @@ function parseInitOptionsFromArgv(args) {
     "--api-key": "apiKey",
     "--slug": "slug",
     "--project-id": "projectId",
+    "--client": "client",
     "--profile": "profile",
     "--github-path": "githubPath"
   };
@@ -275,7 +288,8 @@ function parseInitOptionsFromArgv(args) {
   return parsed;
 }
 async function runInit(options) {
-  const answers = await gatherConfiguration(normalizeInitOptions(options));
+  const normalizedOptions = normalizeInitOptions(options);
+  const answers = await gatherConfiguration(normalizedOptions);
   if (answers.installMcp || answers.installRuntime || answers.installOrchestrator) {
     await installPythonPackages(answers, false);
   }
@@ -295,8 +309,9 @@ async function runInit(options) {
   }
   await updateEnvFiles(answers);
   await createCompanionConfig(answers);
+  await syncRemoteAutomationClient(answers, { enabled: !normalizedOptions.skipTest });
   await createCompanionPack(answers);
-  const validationReport = await runValidation(answers, !options.skipTest);
+  const validationReport = await runValidation(answers, !normalizedOptions.skipTest);
   writeDoctorReport(validationReport);
   printSuccess(answers, validationReport);
   if (answers.configureGitHub && answers.githubRepo) {
@@ -454,6 +469,7 @@ function printBanner() {
 async function gatherConfiguration(options) {
   console.log(chalk.bold("\n\u{1F4CB} Project Configuration\n"));
   const detectedClient = detectAiClient();
+  const requestedClient = normalizeClientOption(options.client);
   const existingConfig = getExistingConfig();
   const projectSlugResolution = resolveProjectSlug(existingConfig);
   let detectedSlug = projectSlugResolution.slug;
@@ -486,7 +502,7 @@ async function gatherConfiguration(options) {
       apiKey: providedApiKey || "YOUR_API_KEY_HERE",
       apiKeyType: providedApiKey ? "api" : "none",
       profile: initialProfile,
-      aiClient: detectedClient,
+      aiClient: requestedClient || detectedClient,
       skipCompanion: !!options.skipCompanion,
       skipMcp: !!options.skipMcp,
       skipRuntime: !!options.skipRuntime,
@@ -553,7 +569,9 @@ async function gatherConfiguration(options) {
       message: "Which AI client are you using?",
       initial: Math.max(
         0,
-        AI_CLIENT_CHOICES.findIndex((choice) => choice.value === detectedClient)
+        AI_CLIENT_CHOICES.findIndex(
+          (choice) => choice.value === (requestedClient || detectedClient)
+        )
       ),
       choices: AI_CLIENT_CHOICES
     },
@@ -604,7 +622,7 @@ async function gatherConfiguration(options) {
     apiKey: apiKey || "",
     apiKeyType,
     profile: response.profile || initialProfile,
-    aiClient: response.aiClient || detectedClient,
+    aiClient: requestedClient || response.aiClient || detectedClient,
     skipCompanion: !!options.skipCompanion,
     skipMcp: !!options.skipMcp,
     skipRuntime: !!options.skipRuntime,
@@ -702,7 +720,8 @@ function normalizeClientOption(value) {
     chatgpt: "chatgpt",
     vscode: "vscode",
     continue: "continue",
-    other: "other"
+    other: "other",
+    custom: "other"
   };
   const client = aliases[normalized];
   if (!client) {
@@ -870,10 +889,14 @@ async function runDeviceAuthorization() {
   spinner.fail("Authorization expired");
   throw new Error("device code expired");
 }
-async function postJson(url, body, allowErrorResponse = false) {
+async function postJson(url, body, allowErrorResponse = false, init = {}) {
+  const headers = {
+    ...init.headers ?? {},
+    "Content-Type": "application/json"
+  };
   const response = await fetch(url, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
+    method: init.method ?? "POST",
+    headers,
     body: JSON.stringify(body)
   });
   const data = await response.json().catch(() => ({}));
@@ -1115,31 +1138,10 @@ async function createClaudeCodeConfig(answers) {
   if (answers.profile === "runtime-only") {
     return;
   }
-  const claudeDir = path.join(homedir(), ".claude");
-  const settingsPath = path.join(claudeDir, "settings.json");
-  console.log(chalk.bold("\n\u{1F916} Configuring Claude Code MCP\n"));
-  try {
-    fs.mkdirSync(claudeDir, { recursive: true });
-    let settings = {};
-    if (fs.existsSync(settingsPath)) {
-      settings = asObjectRecord(JSON.parse(fs.readFileSync(settingsPath, "utf-8")));
-    }
-    const mcpServers = asObjectRecord(settings.mcpServers);
-    settings.mcpServers = {
-      ...mcpServers,
-      snipara: buildHostedMcpServer(answers)
-    };
-    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n", { mode: 384 });
-    try {
-      fs.chmodSync(settingsPath, 384);
-    } catch {
-    }
-    console.log(chalk.green("   \u2713 Updated ~/.claude/settings.json with Snipara MCP"));
-  } catch (error) {
-    const detail = error instanceof Error ? error.message : String(error);
-    console.log(chalk.yellow(`   \u26A0\uFE0F  Could not update Claude Code MCP config: ${detail}`));
-    console.log(chalk.dim("   Run create-snipara doctor --client claude after manual setup."));
-  }
+  console.log(chalk.bold("\n\u{1F916} Claude Code MCP\n"));
+  console.log(chalk.green("   \u2713 Project .mcp.json contains the Snipara Hosted MCP server"));
+  console.log(chalk.dim("   Claude Code loads project-scoped MCP servers from .mcp.json."));
+  console.log(chalk.dim(`   Verify with: claude mcp list && claude mcp test snipara`));
 }
 async function createProjectBinding(answers) {
   if (answers.profile === "runtime-only") {
@@ -1447,14 +1449,8 @@ async function createClaudeDesktopConfig(answers) {
 }
 async function installClaudeCodeHooks(answers) {
   console.log(chalk.bold("\n\u{1FA9D} Installing Claude Code Hooks\n"));
-  const claudeDir = path.join(homedir(), ".claude");
+  const claudeDir = path.join(process.cwd(), ".claude");
   const hooksDir = path.join(claudeDir, "hooks");
-  if (!fs.existsSync(claudeDir)) {
-    console.log(
-      chalk.yellow("   \u26A0\uFE0F  ~/.claude not found. Install Claude Code first, then rerun repair.\n")
-    );
-    return;
-  }
   if (!fs.existsSync(hooksDir)) {
     fs.mkdirSync(hooksDir, { recursive: true });
   }
@@ -1491,41 +1487,88 @@ async function installClaudeCodeHooks(answers) {
       settings = {};
     }
   }
-  settings.hooks = settings.hooks || {};
+  settings.hooks = asObjectRecord(settings.hooks);
   const hooksConfig = settings.hooks;
   const hookEntries = [
     {
       event: "PreToolUse",
-      script: path.join(hooksDir, "snipara-stuck-guard.sh"),
-      matcher: { tool_name: "Bash|Read|Grep|Glob|Edit|MultiEdit|Write" }
+      entry: {
+        matcher: "Bash|Read|Grep|Glob|Edit|MultiEdit|Write",
+        hooks: [
+          {
+            type: "command",
+            command: createClaudeProjectHookCommand("snipara-stuck-guard.sh"),
+            timeout: 10
+          }
+        ]
+      }
     },
     {
-      event: "PreToolUse",
-      script: path.join(hooksDir, "snipara-startup.sh"),
-      matcher: { tool_name: "TodoWrite" }
+      event: "SessionStart",
+      entry: {
+        matcher: "startup|resume|compact|clear",
+        hooks: [
+          {
+            type: "command",
+            command: createClaudeProjectHookCommand("snipara-startup.sh"),
+            timeout: 30
+          }
+        ]
+      }
     },
     {
       event: "PostToolUse",
-      script: path.join(hooksDir, "snipara-session.sh"),
-      matcher: { tool_name: "Bash|Read|Grep|Glob|Edit|MultiEdit|Write" }
+      entry: {
+        matcher: "Bash|Read|Grep|Glob|Edit|MultiEdit|Write",
+        hooks: [
+          {
+            type: "command",
+            command: createClaudeProjectHookCommand("snipara-session.sh"),
+            timeout: 10
+          }
+        ]
+      }
     },
     {
       event: "PreCompact",
-      script: path.join(hooksDir, "snipara-compact.sh")
+      entry: {
+        matcher: "manual|auto",
+        hooks: [
+          {
+            type: "command",
+            command: createClaudeProjectHookCommand("snipara-compact.sh"),
+            timeout: 30
+          }
+        ]
+      }
     }
   ];
-  for (const entry of hookEntries) {
-    const eventHooks = hooksConfig[entry.event] || [];
-    const exists = eventHooks.some(
-      (hook) => typeof hook === "object" && hook !== null && "script" in hook && hook.script === entry.script
-    );
+  for (const { event, entry } of hookEntries) {
+    const eventHooks = Array.isArray(hooksConfig[event]) ? hooksConfig[event] : [];
+    const expectedCommand = entry.hooks[0].command;
+    const exists = eventHooks.some((hook) => hookConfigEntryHasCommand(hook, expectedCommand));
     if (!exists) {
       eventHooks.push(entry);
-      hooksConfig[entry.event] = eventHooks;
+      hooksConfig[event] = eventHooks;
     }
   }
   fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
-  console.log(chalk.green("   \u2713 Updated ~/.claude/settings.json"));
+  console.log(chalk.green("   \u2713 Updated .claude/settings.json hooks"));
+}
+function createClaudeProjectHookCommand(scriptName) {
+  return `bash -lc 'cd "\${CLAUDE_PROJECT_DIR:-$PWD}" && ./.claude/hooks/${scriptName}'`;
+}
+function hookConfigEntryHasCommand(entry, expectedCommand) {
+  if (!entry || typeof entry !== "object") {
+    return false;
+  }
+  const hooks = entry.hooks;
+  if (!Array.isArray(hooks)) {
+    return false;
+  }
+  return hooks.some(
+    (hook) => hook && typeof hook === "object" && hook.command === expectedCommand
+  );
 }
 function createStuckGuardHook(answers) {
   return `#!/usr/bin/env bash
@@ -1679,31 +1722,49 @@ async function createCompanionConfig(answers) {
   }
   const configDir = path.join(process.cwd(), ".snipara", "companion");
   const configPath = path.join(configDir, "config.json");
-  const globalConfigPath = getGlobalCompanionConfigPath();
   fs.mkdirSync(configDir, { recursive: true });
-  fs.mkdirSync(path.dirname(globalConfigPath), { recursive: true });
-  const existingGlobalConfig = readCompanionConfigFile(globalConfigPath);
   const existingWorkspaceConfig = readCompanionConfigFile(configPath);
-  const globalConfig = {
-    ...existingGlobalConfig,
-    apiKey: answers.apiKey,
-    apiUrl: API_URL
-  };
   const workspaceConfig = {
-    projectId: answers.projectSlug,
-    sessionId: typeof existingWorkspaceConfig.sessionId === "string" && existingWorkspaceConfig.sessionId ? existingWorkspaceConfig.sessionId : `sess_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`
+    ...existingWorkspaceConfig,
+    apiKey: answers.apiKey,
+    apiUrl: API_URL,
+    projectId: answers.projectId || answers.projectSlug,
+    sessionId: typeof existingWorkspaceConfig.sessionId === "string" && existingWorkspaceConfig.sessionId ? existingWorkspaceConfig.sessionId : `sess_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`,
+    client: getAutomationClientId(answers.aiClient)
   };
-  fs.writeFileSync(globalConfigPath, JSON.stringify(globalConfig, null, 2) + "\n");
   fs.writeFileSync(configPath, JSON.stringify(workspaceConfig, null, 2) + "\n");
-  ensureGitignoreEntry(
-    ".snipara/companion/config.json",
-    "# Snipara local companion workspace config"
-  );
-  console.log(chalk.green("   \u2713 Configured global companion auth"));
-  console.log(chalk.green("   \u2713 Configured local companion workspace"));
+  ensureGitignoreEntry(".snipara/companion/config.json", "# Snipara local companion config");
+  console.log(chalk.green("   \u2713 Configured local companion config"));
 }
-function getGlobalCompanionConfigPath() {
-  return path.join(homedir(), ".rlmsaas", "config.json");
+async function syncRemoteAutomationClient(answers, options) {
+  if (!options.enabled || answers.apiKeyType === "none" || !answers.apiKey || answers.apiKey.includes("YOUR_") || !answers.projectSlug) {
+    return;
+  }
+  const automationClient = getAutomationClientId(answers.aiClient);
+  const url = `${BASE_URL}/api/cli/projects/${encodeURIComponent(
+    answers.projectSlug
+  )}/automation-client`;
+  try {
+    const response = await postJson(
+      url,
+      { automationClient },
+      false,
+      {
+        method: "PATCH",
+        headers: { "X-API-Key": answers.apiKey }
+      }
+    );
+    if (response.success === false) {
+      throw new Error(response.message || "dashboard rejected automation client update");
+    }
+    console.log(chalk.green(`   \u2713 Synced dashboard automation client: ${automationClient}`));
+  } catch (error) {
+    console.log(
+      chalk.yellow(
+        `   \u26A0\uFE0F  Could not sync dashboard automation client: ${error instanceof Error ? error.message : "unknown error"}`
+      )
+    );
+  }
 }
 function readCompanionConfigFile(filePath) {
   if (!fs.existsSync(filePath)) {
@@ -1938,7 +1999,7 @@ function getClientPackFilename(client) {
 }
 function getClientConfigArtifacts(client) {
   if (client === "claude-code") {
-    return ["AGENTS.md", "CLAUDE.md", "~/.claude/settings.json MCP server"];
+    return ["AGENTS.md", "CLAUDE.md", ".mcp.json MCP server", ".claude/settings.json hooks"];
   }
   if (client === "cursor") {
     return [".mcp.json", ".cursor/rules/snipara.mdc", "dashboard automation bundle when installed"];
@@ -2197,11 +2258,15 @@ function getClaudeClientChecks(answers, detection) {
   const checks = [];
   const claudePaths = getClaudeConfigPaths();
   const projectConfig = readJsonFile(path.join(process.cwd(), ".mcp.json"));
+  const projectSettings = readJsonFile(path.join(process.cwd(), ".claude", "settings.json"));
   const codeSettings = readJsonFile(claudePaths.codeSettingsPath);
   const desktopConfig = readJsonFile(claudePaths.desktopConfigPath);
   const projectHasSnipara = containsSniparaMcpReference(projectConfig);
+  const projectSettingsHasSnipara = containsSniparaMcpReference(projectSettings);
   const codeSettingsHasSnipara = containsSniparaMcpReference(codeSettings);
+  const hasLegacyCodeSettingsMcp = projectSettingsHasSnipara || codeSettingsHasSnipara;
   const desktopHasSnipara = containsSniparaMcpReference(desktopConfig);
+  const projectHooksConfigured = containsClaudeHooksReference(projectSettings);
   checks.push({
     name: "claude_project_config",
     status: projectHasSnipara ? "pass" : "warn",
@@ -2210,8 +2275,13 @@ function getClaudeClientChecks(answers, detection) {
   if (answers.aiClient === "claude-code") {
     checks.push({
       name: "claude_code_settings",
-      status: detection.files.claudeSettings ? codeSettingsHasSnipara ? "pass" : "warn" : "warn",
-      detail: detection.files.claudeSettings ? codeSettingsHasSnipara ? "~/.claude/settings.json contains a Snipara MCP server" : "~/.claude/settings.json exists but no Snipara MCP server was found" : "~/.claude/settings.json not found; Claude may require Settings -> MCP UI setup"
+      status: hasLegacyCodeSettingsMcp ? "warn" : "pass",
+      detail: hasLegacyCodeSettingsMcp ? "Legacy Claude settings contain an MCP server entry; Claude Code project MCP should live in .mcp.json or be managed by claude mcp add --scope project" : "Claude settings are not being used as the MCP destination; .claude/settings.json is hooks-only"
+    });
+    checks.push({
+      name: "claude_code_hooks",
+      status: !answers.installHooks || projectHooksConfigured ? "pass" : "warn",
+      detail: answers.installHooks ? projectHooksConfigured ? "Project .claude/settings.json contains Snipara hook commands" : "Project .claude/settings.json hooks missing; run create-snipara repair --with-hooks" : "Claude hooks not requested"
     });
   }
   if (answers.aiClient === "claude-desktop") {
@@ -2258,6 +2328,15 @@ function containsSniparaMcpReference(value) {
   }
   return false;
 }
+function containsClaudeHooksReference(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return false;
+  }
+  const hooks = value.hooks;
+  return Boolean(
+    hooks && typeof hooks === "object" && JSON.stringify(hooks).includes(COMPANION_COMMAND_NAME)
+  );
+}
 function getCreateSniparaPackageFreshnessCheck() {
   if (!commandExists("npm")) {
     return {
@@ -2377,8 +2456,8 @@ async function runValidation(answers, includeHostedCheck, options = {}) {
   });
   checks.push({
     name: "hooks",
-    status: answers.installHooks && targetClient === "claude-code" ? detection.files.claudeDir ? "pass" : "warn" : "pass",
-    detail: answers.installHooks && targetClient === "claude-code" ? detection.files.claudeDir ? "~/.claude detected" : "~/.claude missing" : "Hooks not requested"
+    status: answers.installHooks && targetClient === "claude-code" ? detection.files.claudeProjectSettings ? "pass" : "warn" : "pass",
+    detail: answers.installHooks && targetClient === "claude-code" ? detection.files.claudeProjectSettings ? "Project .claude/settings.json hooks present" : "Project .claude/settings.json hooks missing" : "Hooks not requested"
   });
   if (targetClient === "claude-code" || targetClient === "claude-desktop") {
     checks.push(...getClaudeClientChecks(effectiveAnswers, detection));
@@ -2639,7 +2718,7 @@ function printSuccess(answers, report) {
   }
   if (answers.aiClient === "claude-code" && answers.profile !== "runtime-only") {
     console.log(
-      chalk.green("   \u2713 ~/.claude/settings.json") + chalk.dim(" - Claude Code Hosted MCP server")
+      chalk.green("   \u2713 Claude Code") + chalk.dim(" - .mcp.json MCP config, .claude/settings.json hooks when enabled")
     );
   }
   console.log(chalk.green("   \u2713 .snipara/companion") + chalk.dim(" - Local pack + doctor report"));
@@ -2759,6 +2838,8 @@ function detectEnvironment() {
       sniparaProject: fs.existsSync(path.join(process.cwd(), ".snipara", "project")),
       claudeDir: fs.existsSync(path.join(homedir(), ".claude")),
       claudeSettings: fs.existsSync(claudePaths.codeSettingsPath),
+      claudeProjectDir: fs.existsSync(path.join(process.cwd(), ".claude")),
+      claudeProjectSettings: fs.existsSync(path.join(process.cwd(), ".claude", "settings.json")),
       claudeDesktopConfig: fs.existsSync(claudePaths.desktopConfigPath),
       cursorDir: fs.existsSync(path.join(homedir(), ".cursor")),
       sniparaCompanionPack: fs.existsSync(path.join(process.cwd(), ".snipara", "companion")),
@@ -2984,7 +3065,8 @@ function detectRepoProjectSlug() {
   try {
     const remote = execSync("git remote get-url origin", {
       encoding: "utf-8",
-      stdio: ["ignore", "pipe", "ignore"]
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 500
     }).trim();
     const match = remote.match(/[/:]([^/]+?)(?:\.git)?$/);
     if (match) {
@@ -3001,7 +3083,8 @@ function detectGitRepository() {
   try {
     const remoteUrl = execSync("git remote get-url origin", {
       encoding: "utf-8",
-      stdio: ["ignore", "pipe", "ignore"]
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 500
     }).trim();
     const match = remoteUrl.match(/github\.com[:/]([^/]+)\/([^/]+?)(?:\.git)?$/) || remoteUrl.match(/github\.com\/([^/]+)\/([^/]+?)(?:\.git)?$/);
     if (!match) {
@@ -3025,7 +3108,8 @@ function detectGitBranch() {
   try {
     const branch = execSync("git branch --show-current", {
       encoding: "utf-8",
-      stdio: ["ignore", "pipe", "ignore"]
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 500
     }).trim();
     if (branch) {
       return branch;
@@ -3035,7 +3119,8 @@ function detectGitBranch() {
   try {
     const branch = execSync("git rev-parse --abbrev-ref HEAD", {
       encoding: "utf-8",
-      stdio: ["ignore", "pipe", "ignore"]
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 500
     }).trim();
     return branch && branch !== "HEAD" ? branch : "main";
   } catch {
@@ -3045,7 +3130,8 @@ function detectGitBranch() {
 function isGitRepo() {
   try {
     execSync("git rev-parse --is-inside-work-tree", {
-      stdio: "ignore"
+      stdio: "ignore",
+      timeout: 500
     });
     return true;
   } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-snipara",
-  "version": "1.3.36",
+  "version": "1.3.38",
   "description": "Onboard Snipara Hosted MCP Context + Memory with auth, companion workflows, and optional Snipara Sandbox",
   "main": "dist/index.js",
   "type": "module",