@nalvietnam/avatar-cli 1.0.1 → 1.1.1

package/bin/postinstall.js

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+// Postinstall entry — chạy sau `npm install -g @nalvietnam/avatar-cli`.
+// In welcome screen với banner + 13 commands. Silent fail nếu lỗi (không
+// block install nếu terminal không support hoặc env CI=true).
+try {
+  if (process.env.CI || process.env.AVATAR_SKIP_WELCOME) {
+    process.exit(0);
+  }
+  const mod = await import("../dist/lib/print-welcome-screen.js");
+  mod.printWelcomeScreen();
+} catch {
+  // Silent: nếu welcome screen fail vì lý do gì, không block npm install.
+}

package/dist/hooks/post-merge.sh.tpl

@@ -0,0 +1,24 @@
+#!/bin/sh
+# Avatar post-merge git hook
+# Auto-runs `avatar scan --incremental` after `git pull` / `git merge`.
+# Installed by `avatar init`. Uninstall by deleting .git/hooks/post-merge.
+
+# Skip if avatar CLI is not on PATH.
+if ! command -v avatar >/dev/null 2>&1; then
+  exit 0
+fi
+
+# Skip if this project doesn't have an Avatar pack.
+if [ ! -d ".claude/pack" ]; then
+  exit 0
+fi
+
+# Background scan — never block git.
+(avatar scan --incremental --quiet &) >/dev/null 2>&1
+
+echo ""
+echo "🔍 Avatar đang scan thay đổi ngầm. Khi xong sẽ thông báo."
+echo "   Manual: avatar review"
+echo ""
+
+exit 0

package/dist/hooks/pre-push.sh.tpl

@@ -0,0 +1,33 @@
+#!/bin/sh
+# Avatar pre-push hook (CLIENT MODE ONLY)
+# Installed in src/.git/hooks/pre-push when `avatar init --mode=client`.
+# Purpose: block accidental leak of Avatar files into the client repo.
+#
+# Rationale: in client mode, src/ is the client's submodule; Avatar files live
+# in the workspace ABOVE src/. If a dev accidentally `git add` an Avatar-owned
+# path inside src/, this hook stops the push and explains the fix.
+
+# Patterns that must never appear in a client-repo push.
+FORBIDDEN_PATTERNS='\.claude/|^CLAUDE\.md$|\.avatar/'
+
+# Check files staged in commits being pushed.
+leaked=$(git diff --cached --name-only HEAD 2>/dev/null | grep -E "$FORBIDDEN_PATTERNS" || true)
+if [ -z "$leaked" ]; then
+  # Also check files in already-committed-but-not-yet-pushed history.
+  leaked=$(git log --name-only --format= origin/HEAD..HEAD 2>/dev/null | grep -E "$FORBIDDEN_PATTERNS" || true)
+fi
+
+if [ -n "$leaked" ]; then
+  echo ""
+  echo "✗ Avatar pre-push hook: phát hiện Avatar files trong client push:"
+  echo ""
+  echo "$leaked" | sed 's/^/  /'
+  echo ""
+  echo "Avatar files (.claude/, CLAUDE.md) phải commit vào WORKSPACE, không phải client repo."
+  echo "Dùng:  avatar commit --avatar"
+  echo "Bypass (không khuyến nghị):  git push --no-verify"
+  echo ""
+  exit 1
+fi
+
+exit 0