This installs Claude Code plus the Samba CLI toolchain — gh, gws, wrangler, sf, databricks, jq — and pre-configures your workspace. Idempotent — safe to re-run.
About 8 minutes on a fresh laptop. The installer asks for your password once (Homebrew needs sudo on first install) and auto-discovers your client_secret.json from ~/Downloads/.
client_secret.jsonYour manager will share a Google Drive folder with you. Open it, download the client_secret_<hash>.json file (the filename starts with client_secret), and save it to your ~/Downloads/ folder. That's it — the installer will auto-discover it from there.
If you don't have access yet, ping your manager — it's a one-click share. You can also start the install without it (pick "skip" when prompted) and drop the file in afterwards.
Open Terminal. Run these three commands one at a time. Wait for each to finish before pasting the next.
curl -fL -o /tmp/samba-setup.tar.gz https://github.com/the-sid-dani/samba-onboarding/archive/refs/heads/main.tar.gz
tar xzf /tmp/samba-setup.tar.gz -C ~
cd ~/samba-onboarding-main && ./install.sh
About 8 minutes. The installer asks for your laptop password once (Homebrew needs sudo on first install). After that, walk away — the rest is automatic until the OAuth prompt at step 5, which auto-finds your client_secret*.json in ~/Downloads/.
You need WSL2 first — Windows Subsystem for Linux. One-time setup, then you run the same three Mac commands inside Ubuntu.
wsl --install
After reboot, open Ubuntu from the Start menu. Finish the first-run setup — pick a username and password (these are Ubuntu-local, not your Samba creds).
curl -fL -o /tmp/samba-setup.tar.gz https://github.com/the-sid-dani/samba-onboarding/archive/refs/heads/main.tar.gz
tar xzf /tmp/samba-setup.tar.gz -C ~
cd ~/samba-onboarding-main && ./install.sh
The Windows tab can't auto-find your downloaded file because the installer runs inside WSL2. At the OAuth prompt (step 5), pick [1] Paste: open client_secret*.json in Notepad, select all, copy, paste into the terminal, press Ctrl-D.
When the installer finishes, it prints these 5 auth commands at the bottom. Run each one in Terminal (any order) — each opens a browser to sign in with your @samba.tv account. After all five, your CLIs are authenticated.
gh auth login
gws auth login -s drive,gmail,calendar,sheets,docs,chat,tasks,slides,forms
wrangler login
sf org login web --instance-url https://sambatv.my.salesforce.com --alias prod
databricks auth login --host https://dbc-992a5856-b2ed.cloud.databricks.com
Run gh auth status and gws auth status. Both should print "logged in" with no errors. If one fails, re-run just that auth command — the others stay authenticated.
Once your tools are installed (above) and your Second-Brain OS is set up (Step 2), open Claude Code and enable three integrations that connect it to the rest of your work — your project tracker (Atlassian), your team chat (Slack), and your design tool (Figma). Each takes one click to authenticate.
Step 3 works best after you've finished Step 2 (Install OS) and have the Second-Brain harness checked out. Running claude below opens a regular Claude Code session, which is fine — the /plugin menu lives at the user level, not the project level — but most teammates do this after Step 2 so they're already inside the harness folder.
claude
If you're following Step 2 first, cd into ~/Desktop/second-brain-harness first so the session opens in the right folder.
/plugin
You'll see Atlassian, Slack, and Figma listed. Click each one to authenticate — a browser tab opens, you sign in with your @samba.tv account, and you're back in Claude in a few seconds.
brew — Homebrew package manager (skipped if present)node — Node 20 LTS (pinned for Claude Code compatibility)git, jq — version control + JSON toolingclaude — Claude Code CLI (skills are not bundled; install what you need via /plugin afterwards)gh — GitHub CLIgws — Google Workspace CLI (Gmail, Calendar, Drive, Docs, Sheets, Tasks, Meet)wrangler — Cloudflare Workers CLIsf — Salesforce CLIdatabricks — Databricks CLI~/.databrickscfg~/.config/gws/client_secret.json/plugin menu. One-click browser sign-in per plugin. Not installed by the script.