@clipboard-health/ai-rules 2.14.3 → 2.14.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clipboard-health/ai-rules",
-  "version": "2.14.3",
+  "version": "2.14.5",
   "description": "Pre-built AI agent rules for consistent coding standards.",
   "keywords": [
     "ai",

package/scripts/setup.sh

@@ -1,6 +1,12 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
+# When invoked as a Claude Code SessionStart hook (`CLAUDE_ENV_FILE` set), only run in remote
+# environments (`CLAUDE_CODE_REMOTE` set). Direct invocations (e.g., Devin, local) always run.
+if [[ -n "${CLAUDE_ENV_FILE:-}" && -z "${CLAUDE_CODE_REMOTE:-}" ]]; then
+  exit 0
+fi
+
 export PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true
 
 deps_only=false
@@ -29,15 +35,11 @@ if [ ! -f package.json ]; then
   exit 0
 fi
 
-# Source NVM if available. --no-use avoids auto-activating .nvmrc (which fails
-# if the version isn't installed yet). Full bootstrap calls nvm install/use below.
-export NVM_DIR="${NVM_DIR:-$HOME/.nvm}"
-[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use
-
-if [ "$deps_only" = true ]; then
-  # Activate whatever node NVM has (try .nvmrc, then default alias).
-  # Suppressed: version may not be installed yet, or NVM may not be present.
-  nvm use 2>/dev/null || nvm use default 2>/dev/null || true
+# Source NVM only for full bootstrap (not --deps-only, where engineers may not use NVM).
+# --no-use avoids auto-activating .nvmrc (which fails if the version isn't installed yet).
+if [ "$deps_only" = false ]; then
+  export NVM_DIR="${NVM_DIR:-$HOME/.nvm}"
+  [ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use
 fi
 
 if [ "$deps_only" = false ]; then
@@ -115,6 +117,40 @@ persist_claude_env() {
 }
 persist_claude_env
 
+# npm auth for private installs is often injected by a shell wrapper. This
+# Bash script does not inherit interactive aliases/functions, so bridge
+# install-like commands explicitly when NPM_TOKEN is absent.
+run_npm() {
+  local npm_args=("$@")
+
+  if [ -n "${NPM_TOKEN:-}" ]; then
+    npm "${npm_args[@]}"
+    return
+  fi
+
+  if command -v op >/dev/null 2>&1 && [ -f "$HOME/.1password.env" ]; then
+    echo "NPM_TOKEN not set; running npm ${npm_args[*]} via 1Password env"
+    if op run --env-file="$HOME/.1password.env" -- npm "${npm_args[@]}"; then
+      return
+    fi
+    echo "1Password env execution failed; trying other npm fallbacks" >&2
+  fi
+
+  local user_shell="${SHELL:-}"
+  local shell_name="${user_shell##*/}"
+  case "$shell_name" in
+    bash|zsh)
+      if "$user_shell" -ic 'alias npm >/dev/null 2>&1 || typeset -f npm >/dev/null 2>&1'; then
+        echo "NPM_TOKEN not set; running npm ${npm_args[*]} via interactive $shell_name shell"
+        "$user_shell" -ic 'npm "$@"' shell "${npm_args[@]}"
+        return
+      fi
+      ;;
+  esac
+
+  npm "${npm_args[@]}"
+}
+
 actual_node="$(node -v | sed 's/^v//')"
 actual_npm="$(npm -v)"
 
@@ -174,6 +210,6 @@ fi
 if [ "$need_install" -eq 0 ]; then
   echo "Dependencies unchanged for $(basename "$repo_root"), skipping npm ci"
 else
-  npm ci
+  run_npm ci
   printf '%s\n' "$dep_key" > "$stamp_file"
 fi