@codevector/cli 0.4.0 → 0.5.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codevector/cli",
-  "version": "0.4.0",
+  "version": "0.5.1",
   "description": "CodeVector CLI — installs and configures first-party coding-tool integrations.",
   "license": "UNLICENSED",
   "bin": {
@@ -29,8 +29,8 @@
     "typescript": "6.0.3",
     "vitest": "4.1.5",
     "zod": "4.4.2",
-    "@codevector/api": "1.10.0",
-    "@codevector/common": "1.10.0"
+    "@codevector/api": "1.13.0",
+    "@codevector/common": "1.13.0"
   },
   "engines": {
     "node": ">=20"

package/scripts/postinstall.mjs

@@ -5,10 +5,12 @@
  *
  *   1. Migrate legacy single-profile credentials.json to the multi-profile
  *      format introduced in v0.4.0.
- *   2. Detect which package manager invoked the install (npm / pnpm / yarn),
- *      parsed out of `process.env.npm_config_user_agent`, and persist it to
- *      `~/.config/codevector/install.json` so `codevector update` can use
- *      the same manager without prompting.
+ *   2. On a *global* install, detect which package manager invoked it
+ *      (npm / pnpm / yarn), parsed out of `process.env.npm_config_user_agent`,
+ *      and persist it to `~/.config/codevector/install.json` so
+ *      `codevector update` can use the same manager without prompting.
+ *      Non-global installs are skipped so a monorepo dev install can't
+ *      clobber the record.
  *
  * Runs automatically after `npm install` / `pnpm install` / `yarn add`.
  * Zero external dependencies — only Node built-ins. Any error is silently
@@ -83,6 +85,14 @@ function migrateCredentialsIfNeeded() {
 }
 
 function capturePackageManagerIfPossible() {
+  // Only record on a genuine global install. Otherwise a non-global install
+  // that runs this script — most commonly the monorepo's own `pnpm install`,
+  // where this CLI is a workspace package — would clobber install.json with
+  // the wrong manager. npm, pnpm, and yarn all set npm_config_global=true for
+  // `-g` installs. When the binary isn't global, `codevector update` infers
+  // the manager from the install path instead.
+  if (process.env.npm_config_global !== "true") return;
+
   const pm = detectPackageManager();
   if (!pm) return;