create-snipara 2.0.13 → 2.0.15

package/README.md

@@ -29,7 +29,7 @@ Use it for:
 - free account signup with reviewed Context + Memory
 - local project wiring, `doctor`, `repair`, and `upgrade`
 - local source activation without GitHub, plus optional GitHub repository sync and PR Answer Packs approval when the current folder is a GitHub repo
-- day-zero Project Intelligence proof: a First Work Brief, a ready-to-run `snipara_context_query`, a small hosted README/docs seed sync for virgin projects, review-only decision archaeology candidates, possible doc-staleness findings, and an estimated context economy report from the user's own repository
+- day-zero proof with a ready-to-ask grounded question and a small hosted README/docs seed sync for new projects; advanced briefs, memory candidates, and diagnostics remain available in the generated activation artifacts
 
 ## Why It Exists
 
@@ -122,6 +122,9 @@ That distinction matters:
 - creates `AGENTS.md` and `CLAUDE.md` when missing, or appends a marked Snipara section when those files already exist
 - creates `.cursor/rules/snipara.mdc` and `.codex/config.toml` when those files do not already exist
 - validates Codex config against Hosted MCP plus `bearer_token_env_var = "SNIPARA_API_KEY"` and tells users to restart Codex after MCP config changes
+- generates one opaque correlation session ID and reuses it in `.mcp.json`,
+  Companion, Codex, and Kimi configuration so served context can be joined to
+  later project outcomes without treating the ID as authentication
 - installs local code overlay Git hooks only for explicit companion/full-stack
   setups unless `--skip-hooks` is passed
 - runs a real hosted MCP `tools/list` check and warns if the server still advertises legacy `rlm_*` duplicate tools
@@ -200,6 +203,10 @@ that is expected. Use `snipara_help(query=...)` for routed guidance and
 `snipara-companion task-commit` as the reliable local fallback when the simple
 hosted tools are not callable.
 
+Codex also receives a static `X-Snipara-Session-Id` HTTP header. This value is
+opaque, non-secret telemetry generated per workspace; `repair` and `upgrade`
+reuse it when valid. It does not replace the bearer token or grant access.
+
 Existing root `AGENTS.md` and `CLAUDE.md` files are not replaced. The installer
 adds or refreshes a marked Snipara section so project-specific instructions stay
 intact.
@@ -397,7 +404,7 @@ The intended split is:
 
 - `create-snipara`: Context + Memory onboarding, auth, config, inspect, repair, and upgrade
 - `snipara-openclaw-install`: OpenClaw-only setup wrapper that remains narrower than `create-snipara`
-- `snipara-companion`: default local workflow helper
+- `snipara-companion`: optional local workflow helper after first value
 - `snipara-mcp`: local stdio bridge, client-package development, compatibility, and testing
 - `snipara-sandbox`: optional local execution engine
 
@@ -409,8 +416,8 @@ companion add workflow ergonomics:
 - use Hosted MCP as the core Snipara surface
 - use `AGENTS.md` for project instructions
 - use the selected pack under `.snipara/companion/`, for example `CODEX.md`, `CURSOR.md`, or `GEMINI.md`
-- use the default `hosted-companion` path when you want compaction-safe local phase commits
-- choose `hosted-only` or `--skip-companion` only in locked-down environments
+- start with the default `hosted-only` path for the shortest route to a grounded answer
+- choose `hosted-companion` after first value when you want compaction-safe local phase commits
 - use local `snipara-mcp` only for stdio compatibility, development, or tests
 
 Claude Code, Cursor, and Kimi Code CLI can receive generated automation files when
@@ -430,7 +437,9 @@ npx -y snipara-companion@latest automations install --client kimi
 ```
 
 Export `SNIPARA_API_KEY` before starting Kimi. The generated
-`.kimi-code/mcp.json` stores only `bearerTokenEnvVar`, never the raw key. Kimi
+`.kimi-code/mcp.json` stores only `bearerTokenEnvVar`, never the raw key. It
+also carries the same non-secret `X-Snipara-Session-Id` used by the project MCP
+and Companion configuration so Outcome Loop telemetry remains joinable. Kimi
 installs plugins per user, so the generated handler is project-neutral and
 no-ops outside workspaces carrying a Snipara project or Companion marker.
 For Mistral, request hooks from LangChain are documented as `ChatMistralAI`

package/dist/index.js

@@ -13,7 +13,7 @@ import { homedir } from "os";
 // package.json
 var package_default = {
   name: "create-snipara",
-  version: "2.0.13",
+  version: "2.0.15",
   description: "Onboard Snipara Hosted MCP Context + Memory with auth, companion workflows, and optional Snipara Sandbox",
   main: "dist/index.js",
   type: "module",
@@ -23,7 +23,7 @@ var package_default = {
   scripts: {
     build: "tsup src/index.ts --format esm --dts --clean",
     dev: "tsup src/index.ts --format esm --watch",
-    prepublishOnly: "npm run build",
+    prepack: "npm run build",
     pretest: "pnpm build",
     test: "node --test test/*.test.cjs",
     "pack:smoke": "bash ../../scripts/smoke-node-package.sh packages/create-snipara create-snipara create-snipara --help",
@@ -2180,7 +2180,10 @@ function createKimiMcpConfig(answers) {
       ...existingServers,
       snipara: {
         url: buildHostedMcpEndpoint(answers),
-        bearerTokenEnvVar: "SNIPARA_API_KEY"
+        bearerTokenEnvVar: "SNIPARA_API_KEY",
+        headers: {
+          "X-Snipara-Session-Id": getCorrelationSessionId(answers)
+        }
       }
     }
   };
@@ -2195,10 +2198,39 @@ function buildHostedMcpServer(answers) {
     type: "http",
     url: buildHostedMcpEndpoint(answers),
     headers: {
-      "X-API-Key": answers.apiKey || "YOUR_API_KEY_HERE"
+      "X-API-Key": answers.apiKey || "YOUR_API_KEY_HERE",
+      "X-Snipara-Session-Id": getCorrelationSessionId(answers)
     }
   };
 }
+var CORRELATION_SESSION_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._~:/@+-]{0,127}$/;
+function normalizeCorrelationSessionId(value) {
+  if (typeof value !== "string") {
+    return null;
+  }
+  const normalized = value.trim();
+  return CORRELATION_SESSION_ID_PATTERN.test(normalized) ? normalized : null;
+}
+function readExistingCorrelationSessionId() {
+  const companionConfig = readCompanionConfigFile(
+    path.join(process.cwd(), ".snipara", "companion", "config.json")
+  );
+  const projectMcpConfig = asObjectRecord(readJsonFile(path.join(process.cwd(), ".mcp.json")));
+  const projectMcpServer = asObjectRecord(asObjectRecord(projectMcpConfig.mcpServers).snipara);
+  const projectMcpHeaders = asObjectRecord(projectMcpServer.headers);
+  const kimiConfig = asObjectRecord(
+    readJsonFile(path.join(process.cwd(), ".kimi-code", "mcp.json"))
+  );
+  const kimiServer = asObjectRecord(asObjectRecord(kimiConfig.mcpServers).snipara);
+  const kimiHeaders = asObjectRecord(kimiServer.headers);
+  return normalizeCorrelationSessionId(companionConfig.sessionId) || normalizeCorrelationSessionId(projectMcpHeaders["X-Snipara-Session-Id"]) || normalizeCorrelationSessionId(kimiHeaders["X-Snipara-Session-Id"]);
+}
+function getCorrelationSessionId(answers) {
+  const existing = normalizeCorrelationSessionId(answers.correlationSessionId) || readExistingCorrelationSessionId();
+  const sessionId = existing || `sess_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
+  answers.correlationSessionId = sessionId;
+  return sessionId;
+}
 function asObjectRecord(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
@@ -2813,6 +2845,7 @@ function buildCodexConfigTemplate(answers) {
 type = "streamable_http"
 url = "${buildHostedMcpEndpoint(answers)}"
 bearer_token_env_var = "SNIPARA_API_KEY"
+http_headers = { "X-Snipara-Session-Id" = "${getCorrelationSessionId(answers)}" }
 `;
 }
 function buildChatGptMcpTemplate(answers) {
@@ -3354,7 +3387,7 @@ async function createCompanionConfig(answers) {
     apiKey: answers.apiKey,
     apiUrl: API_URL,
     projectId: answers.projectId || answers.projectSlug,
-    sessionId: typeof existingWorkspaceConfig.sessionId === "string" && existingWorkspaceConfig.sessionId ? existingWorkspaceConfig.sessionId : `sess_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`,
+    sessionId: getCorrelationSessionId(answers),
     client: getAutomationClientId(answers.aiClient)
   };
   fs.writeFileSync(configPath, JSON.stringify(workspaceConfig, null, 2) + "\n");
@@ -4682,51 +4715,6 @@ function describeJsonRpcError(data) {
   const code = data.error.code !== void 0 ? ` ${data.error.code}` : "";
   return `JSON-RPC error${code}: ${data.error.message || "unknown error"}`;
 }
-function getCheck(report, name) {
-  return report.checks.find((check) => check.name === name);
-}
-function formatCheckStatus(check) {
-  if (!check) {
-    return "not checked";
-  }
-  if (check.status === "pass") {
-    return `OK - ${check.detail}`;
-  }
-  if (check.status === "fail") {
-    return `FAILED - ${check.detail}`;
-  }
-  return `NEEDS ATTENTION - ${check.detail}`;
-}
-function printSetupVerdict(answers, report) {
-  const hostedConnection = getCheck(report, "hosted_connection");
-  const sniparaTools = getCheck(report, "hosted_snipara_tools");
-  const legacyTools = getCheck(report, "hosted_legacy_tools_hidden");
-  const codexConfig = getCheck(report, "codex_config");
-  const mistralConfig = getCheck(report, "mistral_config");
-  const claudeTools = getCheck(report, "claude_tools_visible");
-  console.log(chalk.bold("\nSetup verdict:\n"));
-  console.log(`   Config written: ${answers.profile !== "runtime-only" ? "OK" : "not requested"}`);
-  console.log(`   Hosted MCP: ${formatCheckStatus(hostedConnection)}`);
-  if (sniparaTools) {
-    console.log(`   Snipara tools: ${formatCheckStatus(sniparaTools)}`);
-  }
-  if (legacyTools) {
-    console.log(`   Legacy tool duplicates: ${formatCheckStatus(legacyTools)}`);
-  }
-  if (codexConfig) {
-    console.log(`   Codex config: ${formatCheckStatus(codexConfig)}`);
-  }
-  if (mistralConfig) {
-    console.log(`   Mistral config: ${formatCheckStatus(mistralConfig)}`);
-  }
-  if (answers.aiClient === "claude-code" || answers.aiClient === "claude-desktop") {
-    console.log(
-      `   Claude loaded MCP: ${claudeTools ? formatCheckStatus(claudeTools) : "not verified"}`
-    );
-  } else {
-    console.log("   AI client loaded MCP: not verifiable from this terminal");
-  }
-}
 function formatActivationStatus(status) {
   if (status === "ready") {
     return chalk.green("\u2713 ready");
@@ -4743,60 +4731,14 @@ function formatActivationStatus(status) {
   return chalk.dim("skipped");
 }
 function printActivationSummary(manifest) {
-  console.log(chalk.bold("\nProject Intelligence activation:\n"));
-  const orderedLanes = [
-    ["Connected", manifest.lanes.connection],
-    ["AI client configured", manifest.lanes.clientConfig],
-    ["Repository analyzed", manifest.lanes.localSnapshot],
-    ["Context index", manifest.lanes.contextIndex],
-    ["Code Graph", manifest.lanes.codeGraph],
-    ["Memory candidates", manifest.lanes.memoryCandidates],
-    ["Initial handoff", manifest.lanes.handoff],
-    ["First Work Brief", manifest.lanes.firstBrief],
-    ["GitHub sync", manifest.lanes.githubSync]
-  ];
-  for (const [label, lane] of orderedLanes) {
-    console.log(`   ${formatActivationStatus(lane.status)} ${label} - ${lane.detail}`);
-  }
-  console.log(chalk.bold("\nFirst Work Brief:\n"));
-  for (const section of manifest.firstBrief.sections) {
-    console.log(`   ${section.title}`);
-    for (const line of section.lines.slice(0, 2)) {
-      console.log(chalk.dim(`   - ${line}`));
-    }
-  }
-  console.log(chalk.bold("\nDay-zero proof:\n"));
-  console.log(`   Tool: ${manifest.dayZeroQuery.tool}`);
-  console.log(`   Query: ${manifest.dayZeroQuery.query}`);
+  const contextLane = manifest.dayZeroCorpus.status === "failed" ? { status: "failed", detail: manifest.dayZeroCorpus.detail } : manifest.dayZeroCorpus.status === "submitted" || manifest.dayZeroCorpus.status === "queued" ? { status: "indexing", detail: manifest.dayZeroCorpus.detail } : manifest.lanes.contextIndex;
+  console.log(chalk.bold("\nActivation status:\n"));
   console.log(
-    chalk.dim(
-      `   Target: ${manifest.activationMetric.targetMinutes} minutes to a true, non-obvious own-repo answer.`
-    )
-  );
-  console.log(
-    chalk.dim(
-      `   Day-zero corpus: ${manifest.dayZeroCorpus.status} - ${manifest.dayZeroCorpus.detail}`
-    )
-  );
-  console.log(chalk.bold("\nActivation surface:\n"));
-  console.log(`   Engine: ${manifest.surfaceContract.engine}`);
-  console.log(`   Entry point: ${manifest.surfaceContract.entryPoint}`);
-  console.log(chalk.dim(`   Role: ${manifest.surfaceContract.clientRole}`));
-  console.log(chalk.dim(`   Next: ${manifest.surfaceContract.nextSurfaceAction}`));
-  console.log(chalk.bold("\nAgent readiness:\n"));
-  console.log(`   ${manifest.agentReadiness.summary}`);
-  for (const finding of manifest.agentReadiness.stalenessFindings.slice(0, 3)) {
-    console.log(chalk.dim(`   - ${finding.source}: ${finding.summary}`));
-  }
-  console.log(chalk.bold("\nContext economy:\n"));
-  console.log(
-    `   Estimated ${manifest.contextEconomy.estimatedRetrievedTokens.toLocaleString("en-US")} tokens retrieved instead of ${manifest.contextEconomy.rawWindowBaselineTokens.toLocaleString("en-US")} raw-window tokens.`
-  );
-  console.log(
-    chalk.dim(
-      `   Saved about ${manifest.contextEconomy.estimatedSavedTokens.toLocaleString("en-US")} tokens (${manifest.contextEconomy.savingsPercent}%). ${manifest.contextEconomy.note}`
-    )
+    `   ${formatActivationStatus(manifest.lanes.connection.status)} Connected - ${manifest.lanes.connection.detail}`
   );
+  console.log(`   ${formatActivationStatus(contextLane.status)} Context - ${contextLane.detail}`);
+  console.log(`   ${chalk.dim("\u25CB pending")} First grounded answer`);
+  console.log(chalk.yellow("\n   Activation pending: first grounded answer needed."));
   console.log(
     chalk.dim(
       `
@@ -4807,12 +4749,7 @@ function printActivationSummary(manifest) {
     console.log(chalk.dim(`   Initial handoff: ${manifest.artifacts.handoffPath}`));
   }
   if (manifest.artifacts.memoryCandidatesPath) {
-    console.log(chalk.dim(`   Memory candidates: ${manifest.artifacts.memoryCandidatesPath}`));
-  }
-  if (manifest.mode === "starter") {
-    console.log(
-      chalk.dim(`   Starter tour: ${BASE_URL}/demo#sixty-second-demo and ${BASE_URL}/dashboard`)
-    );
+    console.log(chalk.dim(`   Advanced details: ${manifest.artifacts.memoryCandidatesPath}`));
   }
 }
 function printSuccess(answers, report, activationManifest) {
@@ -4820,160 +4757,28 @@ function printSuccess(answers, report, activationManifest) {
     chalk.green(`
 \u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557
 \u2551                                                                       \u2551
-\u2551   ${chalk.bold("\u2713 Setup Complete!")}                                                 \u2551
+\u2551   ${chalk.bold("\u2713 Connection Ready")}                                                \u2551
 \u2551                                                                       \u2551
 \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D
 `)
   );
-  console.log(chalk.bold("Installed profile:\n"));
-  console.log(`   ${chalk.green("\u2713")} ${answers.profile}`);
-  printSetupVerdict(answers, report);
-  console.log(chalk.bold("\nWhat was installed:\n"));
-  if (answers.installMcp) {
-    console.log(
-      chalk.green("   \u2713 snipara-mcp") + chalk.dim(" - Local stdio compatibility package")
-    );
-  }
-  if (answers.installRuntime) {
-    console.log(
-      chalk.green(`   \u2713 ${stripExtras(SANDBOX_PACKAGE_NAME)}`) + chalk.dim(" - Safe code execution")
-    );
-  }
-  if (answers.installOrchestrator) {
-    console.log(
-      chalk.green(`   \u2713 ${ORCHESTRATOR_PACKAGE_NAME}`) + chalk.dim(" - Production gates, drift checks, and htask workflows")
-    );
-  }
-  if (answers.installCompanion) {
-    console.log(
-      chalk.green(`   \u2713 ${COMPANION_PACKAGE_NAME}`) + chalk.dim(" - Local companion workflows and hook bootstrap")
-    );
-  }
-  if (answers.installHooks) {
-    console.log(chalk.green("   \u2713 hooks") + chalk.dim(" - Local session lifecycle scripts"));
-  }
-  if (answers.profile !== "runtime-only") {
-    console.log(chalk.green("   \u2713 .mcp.json") + chalk.dim(" - Hosted MCP config"));
-  }
-  if (answers.aiClient === "claude-code" && answers.profile !== "runtime-only") {
-    console.log(
-      chalk.green("   \u2713 Claude Code") + chalk.dim(" - .mcp.json MCP config, .claude/settings.json hooks when enabled")
-    );
-  }
-  if (answers.aiClient === "kimi" && answers.profile !== "runtime-only") {
-    console.log(
-      chalk.green("   \u2713 Kimi Code CLI") + chalk.dim(" - .kimi-code/mcp.json with environment-backed authentication")
-    );
-  }
-  console.log(
-    chalk.green("   \u2713 .snipara/companion") + chalk.dim(" - Doctor report and optional command references")
-  );
+  console.log(`   Profile: ${answers.profile}`);
   if (activationManifest) {
     printActivationSummary(activationManifest);
   }
   const failedChecks = report.checks.filter((check) => check.status === "fail");
   const warnedChecks = report.checks.filter((check) => check.status === "warn");
-  console.log(chalk.bold("\nNext steps:\n"));
-  let nextStep = 1;
-  const printNextStep = (message) => {
-    console.log(`  ${nextStep}. ${message}`);
-    nextStep += 1;
-  };
-  printNextStep("Restart your AI client if you created or changed hosted MCP config.");
-  if (!answers.installCompanion && answers.profile !== "runtime-only") {
-    printNextStep(
-      "Ask your AI client for a first grounded answer using snipara_context_query before enabling local workflow helpers."
-    );
-  }
-  if (answers.aiClient === "claude-code") {
-    printNextStep(
-      "For Claude Code, start a new session and confirm Snipara appears in Settings -> MCP or ToolSearch."
-    );
-    printNextStep(
-      `If Snipara tools are missing, run: ${CREATE_SNIPARA_NPX_COMMAND} doctor --client claude-code`
-    );
-  }
-  if (answers.aiClient === "claude-desktop") {
-    printNextStep(
-      "For Claude Desktop, confirm the Snipara server appears in the desktop MCP settings after restart."
-    );
-    printNextStep(
-      `If Snipara tools are missing, run: ${CREATE_SNIPARA_NPX_COMMAND} doctor --client claude-desktop`
-    );
-  }
-  if (answers.aiClient === "kimi") {
-    printNextStep(
-      "For Kimi Code CLI, export SNIPARA_API_KEY before launch and run /mcp to verify the project-local server."
-    );
-    printNextStep(
-      `To enable Companion lifecycle hooks, run ${COMPANION_NPX_COMMAND} automations install --client kimi, review .kimi-code/snipara-plugin, then install it in Kimi with /plugins install .kimi-code/snipara-plugin.`
-    );
-    printNextStep(
-      "Keep manual approval for risky tools because Kimi hooks are fail-open and are not a standalone security boundary."
-    );
-  }
-  if (answers.aiClient === "codex") {
-    printNextStep(
-      "For Codex, merge .snipara/templates/codex-config.toml into ~/.codex/config.toml if the app does not read project .codex/config.toml."
-    );
-    printNextStep(
-      "Restart Codex after changing ~/.codex/config.toml so it rediscovers the hosted Snipara MCP tools."
-    );
-    printNextStep(
-      "If Codex shows only the lean Snipara tool set, that is expected. Use snipara_help(query=...) for routed guidance, confirm specialist opt-in surfaces with snipara_help(list_all=true), and request exact htask or swarm tools only when the workflow explicitly needs them."
-    );
-    printNextStep(
-      "If Codex still does not expose the hosted task-routing tools, prefer snipara-orchestrator swarm-* and htask-* for shared queue or multi-agent task work."
-    );
-  }
-  if (answers.aiClient === "mistral") {
-    printNextStep(
-      "For Mistral Le Chat, add .snipara/templates/mistral-le-chat-mcp.json as a Custom MCP Connector reference in Connectors."
-    );
-    printNextStep(
-      "For Mistral Vibe, keep .vibe/config.toml or ~/.vibe/config.toml on the generated SNIPARA_API_KEY-backed streamable-http server block, then restart Vibe."
-    );
-    printNextStep(
-      "For LangChain JavaScript, adapt .snipara/templates/mistral-langchain-tools.ts to bind Snipara recall, context_query, and settings tools to ChatMistralAI."
-    );
-  }
-  printNextStep(
-    `Run ${CREATE_SNIPARA_NPX_COMMAND} doctor anytime you want a fresh local validation report.`
-  );
-  if (answers.installCompanion) {
-    printNextStep("Open .snipara/companion/README.md for local commands and repair flow.");
-    printNextStep(
-      `${COMPANION_COMMAND_NAME} ${MIN_COMPANION_VERSION}+ is installed for low-latency local hooks.`
-    );
-    printNextStep(`Activate local source context now with: ${COMPANION_NPX_COMMAND} source init .`);
-    printNextStep(
-      `Use ${COMPANION_NPX_COMMAND} recall / query / plan / upload / task-commit for explicit local workflows and as a fallback when an AI client exposes only a partial MCP surface.`
-    );
-    printNextStep(
-      `For business folders, preview with: ${COMPANION_NPX_COMMAND} onboard-folder ./client-export --source-provider local_folder --write-manifest ./snipara-onboard.json`
-    );
-    printNextStep(
-      `Apply after review with: ${COMPANION_NPX_COMMAND} onboard-folder ./client-export --source-provider local_folder --apply`
-    );
-  } else if (answers.profile !== "runtime-only") {
-    printNextStep(
-      `Enable Companion, guards, managed workflows, and local folder helpers later with: ${CREATE_SNIPARA_NPX_COMMAND} repair --with-companion`
-    );
-  }
-  if (answers.installRuntime && !answers.runSandboxInit) {
-    printNextStep(
-      `Run ${SANDBOX_COMMAND_NAME} init when you want to choose sandbox/docker/local execution.`
-    );
-  }
-  if (answers.installOrchestrator) {
-    printNextStep(
-      `Use ${ORCHESTRATOR_COMMAND_NAME} explicitly for production proof gates, drift checks, or htask coordination.`
-    );
-  }
-  if (answers.githubRepo) {
-    printNextStep(
-      `Connect GitHub automation for ${answers.githubRepo.fullName} from the generated Snipara link.`
-    );
+  console.log(chalk.bold("\nNext action:\n"));
+  if (activationManifest) {
+    console.log("   Restart your AI client or open a new agent session, then ask:");
+    console.log(chalk.cyan(`
+   "${activationManifest.dayZeroQuery.query}"
+`));
+    console.log(chalk.dim(`   If Snipara tools are missing: ${CREATE_SNIPARA_NPX_COMMAND} doctor`));
+  } else if (answers.installRuntime && !answers.runSandboxInit) {
+    console.log(`   Run ${SANDBOX_COMMAND_NAME} init to choose an execution backend.`);
+  } else {
+    console.log(`   Run ${CREATE_SNIPARA_NPX_COMMAND} doctor to verify the installation.`);
   }
   if (failedChecks.length > 0 || warnedChecks.length > 0) {
     console.log(chalk.bold("\nValidation summary:\n"));
@@ -4981,11 +4786,9 @@ function printSuccess(answers, report, activationManifest) {
       const symbol = check.status === "fail" ? chalk.red("\u2717") : chalk.yellow("!");
       console.log(`   ${symbol} ${check.name}: ${check.detail}`);
     }
-    console.log(
-      chalk.dim(`
-   Run ${CREATE_SNIPARA_NPX_COMMAND} repair to rebuild local wiring.
-`)
-    );
+    console.log(chalk.dim(`
+   Repair local wiring: ${CREATE_SNIPARA_NPX_COMMAND} repair
+`));
   } else {
     console.log(
       chalk.dim(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-snipara",
-  "version": "2.0.13",
+  "version": "2.0.15",
   "description": "Onboard Snipara Hosted MCP Context + Memory with auth, companion workflows, and optional Snipara Sandbox",
   "main": "dist/index.js",
   "type": "module",
@@ -10,7 +10,7 @@
   "scripts": {
     "build": "tsup src/index.ts --format esm --dts --clean",
     "dev": "tsup src/index.ts --format esm --watch",
-    "prepublishOnly": "npm run build",
+    "prepack": "npm run build",
     "pretest": "pnpm build",
     "test": "node --test test/*.test.cjs",
     "pack:smoke": "bash ../../scripts/smoke-node-package.sh packages/create-snipara create-snipara create-snipara --help",