create-snipara 2.0.13 → 2.0.14

package/README.md

@@ -122,6 +122,9 @@ That distinction matters:
 - creates `AGENTS.md` and `CLAUDE.md` when missing, or appends a marked Snipara section when those files already exist
 - creates `.cursor/rules/snipara.mdc` and `.codex/config.toml` when those files do not already exist
 - validates Codex config against Hosted MCP plus `bearer_token_env_var = "SNIPARA_API_KEY"` and tells users to restart Codex after MCP config changes
+- generates one opaque correlation session ID and reuses it in `.mcp.json`,
+  Companion, Codex, and Kimi configuration so served context can be joined to
+  later project outcomes without treating the ID as authentication
 - installs local code overlay Git hooks only for explicit companion/full-stack
   setups unless `--skip-hooks` is passed
 - runs a real hosted MCP `tools/list` check and warns if the server still advertises legacy `rlm_*` duplicate tools
@@ -200,6 +203,10 @@ that is expected. Use `snipara_help(query=...)` for routed guidance and
 `snipara-companion task-commit` as the reliable local fallback when the simple
 hosted tools are not callable.
 
+Codex also receives a static `X-Snipara-Session-Id` HTTP header. This value is
+opaque, non-secret telemetry generated per workspace; `repair` and `upgrade`
+reuse it when valid. It does not replace the bearer token or grant access.
+
 Existing root `AGENTS.md` and `CLAUDE.md` files are not replaced. The installer
 adds or refreshes a marked Snipara section so project-specific instructions stay
 intact.
@@ -430,7 +437,9 @@ npx -y snipara-companion@latest automations install --client kimi
 ```
 
 Export `SNIPARA_API_KEY` before starting Kimi. The generated
-`.kimi-code/mcp.json` stores only `bearerTokenEnvVar`, never the raw key. Kimi
+`.kimi-code/mcp.json` stores only `bearerTokenEnvVar`, never the raw key. It
+also carries the same non-secret `X-Snipara-Session-Id` used by the project MCP
+and Companion configuration so Outcome Loop telemetry remains joinable. Kimi
 installs plugins per user, so the generated handler is project-neutral and
 no-ops outside workspaces carrying a Snipara project or Companion marker.
 For Mistral, request hooks from LangChain are documented as `ChatMistralAI`

package/dist/index.js

@@ -13,7 +13,7 @@ import { homedir } from "os";
 // package.json
 var package_default = {
   name: "create-snipara",
-  version: "2.0.13",
+  version: "2.0.14",
   description: "Onboard Snipara Hosted MCP Context + Memory with auth, companion workflows, and optional Snipara Sandbox",
   main: "dist/index.js",
   type: "module",
@@ -2180,7 +2180,10 @@ function createKimiMcpConfig(answers) {
       ...existingServers,
       snipara: {
         url: buildHostedMcpEndpoint(answers),
-        bearerTokenEnvVar: "SNIPARA_API_KEY"
+        bearerTokenEnvVar: "SNIPARA_API_KEY",
+        headers: {
+          "X-Snipara-Session-Id": getCorrelationSessionId(answers)
+        }
       }
     }
   };
@@ -2195,10 +2198,39 @@ function buildHostedMcpServer(answers) {
     type: "http",
     url: buildHostedMcpEndpoint(answers),
     headers: {
-      "X-API-Key": answers.apiKey || "YOUR_API_KEY_HERE"
+      "X-API-Key": answers.apiKey || "YOUR_API_KEY_HERE",
+      "X-Snipara-Session-Id": getCorrelationSessionId(answers)
     }
   };
 }
+var CORRELATION_SESSION_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._~:/@+-]{0,127}$/;
+function normalizeCorrelationSessionId(value) {
+  if (typeof value !== "string") {
+    return null;
+  }
+  const normalized = value.trim();
+  return CORRELATION_SESSION_ID_PATTERN.test(normalized) ? normalized : null;
+}
+function readExistingCorrelationSessionId() {
+  const companionConfig = readCompanionConfigFile(
+    path.join(process.cwd(), ".snipara", "companion", "config.json")
+  );
+  const projectMcpConfig = asObjectRecord(readJsonFile(path.join(process.cwd(), ".mcp.json")));
+  const projectMcpServer = asObjectRecord(asObjectRecord(projectMcpConfig.mcpServers).snipara);
+  const projectMcpHeaders = asObjectRecord(projectMcpServer.headers);
+  const kimiConfig = asObjectRecord(
+    readJsonFile(path.join(process.cwd(), ".kimi-code", "mcp.json"))
+  );
+  const kimiServer = asObjectRecord(asObjectRecord(kimiConfig.mcpServers).snipara);
+  const kimiHeaders = asObjectRecord(kimiServer.headers);
+  return normalizeCorrelationSessionId(companionConfig.sessionId) || normalizeCorrelationSessionId(projectMcpHeaders["X-Snipara-Session-Id"]) || normalizeCorrelationSessionId(kimiHeaders["X-Snipara-Session-Id"]);
+}
+function getCorrelationSessionId(answers) {
+  const existing = normalizeCorrelationSessionId(answers.correlationSessionId) || readExistingCorrelationSessionId();
+  const sessionId = existing || `sess_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
+  answers.correlationSessionId = sessionId;
+  return sessionId;
+}
 function asObjectRecord(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
@@ -2813,6 +2845,7 @@ function buildCodexConfigTemplate(answers) {
 type = "streamable_http"
 url = "${buildHostedMcpEndpoint(answers)}"
 bearer_token_env_var = "SNIPARA_API_KEY"
+http_headers = { "X-Snipara-Session-Id" = "${getCorrelationSessionId(answers)}" }
 `;
 }
 function buildChatGptMcpTemplate(answers) {
@@ -3354,7 +3387,7 @@ async function createCompanionConfig(answers) {
     apiKey: answers.apiKey,
     apiUrl: API_URL,
     projectId: answers.projectId || answers.projectSlug,
-    sessionId: typeof existingWorkspaceConfig.sessionId === "string" && existingWorkspaceConfig.sessionId ? existingWorkspaceConfig.sessionId : `sess_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`,
+    sessionId: getCorrelationSessionId(answers),
     client: getAutomationClientId(answers.aiClient)
   };
   fs.writeFileSync(configPath, JSON.stringify(workspaceConfig, null, 2) + "\n");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-snipara",
-  "version": "2.0.13",
+  "version": "2.0.14",
   "description": "Onboard Snipara Hosted MCP Context + Memory with auth, companion workflows, and optional Snipara Sandbox",
   "main": "dist/index.js",
   "type": "module",