@nalvietnam/avatar-cli 1.2.2 → 1.2.3

package/dist/index.js

@@ -4,7 +4,6 @@
 import { Command } from "commander";
 
 // src/commands/ai.ts
-import { spawnSync as spawnSync4 } from "child_process";
 import { promises as fs4 } from "fs";
 import { join as join5 } from "path";
 import { confirm } from "@inquirer/prompts";
@@ -654,6 +653,102 @@ async function runAiSetupPhase(args) {
   }
 }
 
+// src/lib/test-ai-provider-by-detected-mode.ts
+import { spawnSync as spawnSync4 } from "child_process";
+var FETCH_TIMEOUT_MS2 = 1e4;
+var CLAUDE_PRINT_TIMEOUT_MS = 3e4;
+var TEST_CHAT_MAX_TOKENS = 5;
+var TEST_CHAT_PROMPT = "say ok";
+async function testLLMLiteProvider(baseUrl, token, model) {
+  log.info(`Testing LLMLite provider: ${baseUrl} (key: ${maskApiKey(token)})`);
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS2);
+  try {
+    const modelsRes = await fetch(`${baseUrl}/v1/models`, {
+      headers: { Authorization: `Bearer ${token}` },
+      signal: controller.signal
+    });
+    if (modelsRes.status === 401 || modelsRes.status === 403) {
+      throw new Error(`API key invalid (HTTP ${modelsRes.status}). Re-run: avatar ai setup`);
+    }
+    if (!modelsRes.ok) {
+      throw new Error(`Endpoint /v1/models l\u1ED7i (HTTP ${modelsRes.status}).`);
+    }
+    const modelsJson = await modelsRes.json();
+    const models = (modelsJson.data || []).map((m) => typeof m.id === "string" ? m.id : null).filter((id) => id !== null);
+    log.success(`Connectivity OK \xB7 ${models.length} models available`);
+    if (models.length > 0) {
+      const preview = models.slice(0, 5).join(", ");
+      const more = models.length > 5 ? ` ...+${models.length - 5} more` : "";
+      log.dim(`  Models: ${preview}${more}`);
+    }
+    log.info(`Testing chat completion v\u1EDBi model "${model}"...`);
+    const chatRes = await fetch(`${baseUrl}/v1/chat/completions`, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${token}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        model,
+        messages: [{ role: "user", content: TEST_CHAT_PROMPT }],
+        max_tokens: TEST_CHAT_MAX_TOKENS
+      }),
+      signal: controller.signal
+    });
+    if (!chatRes.ok) {
+      const errBody = (await chatRes.text()).slice(0, 200);
+      throw new Error(`Chat completion fail (HTTP ${chatRes.status}). ${errBody}`);
+    }
+    const chatJson = await chatRes.json();
+    const reply = typeof chatJson.choices?.[0]?.message?.content === "string" ? chatJson.choices[0].message.content : "(empty response)";
+    const tokens = chatJson.usage?.total_tokens ?? "?";
+    log.success(`Response: "${String(reply).trim().slice(0, 100)}"`);
+    log.dim(`  Tokens used: ${tokens}`);
+  } catch (err) {
+    if (err.name === "AbortError") {
+      throw new Error(`Timeout ${FETCH_TIMEOUT_MS2 / 1e3}s. Check m\u1EA1ng / endpoint ${baseUrl}.`);
+    }
+    throw err;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function testSubscriptionProvider() {
+  log.info("Testing Subscription provider qua `claude --print`...");
+  const result = spawnSync4("claude", ["--print", TEST_CHAT_PROMPT], {
+    encoding: "utf8",
+    timeout: CLAUDE_PRINT_TIMEOUT_MS
+  });
+  if (result.signal === "SIGTERM") {
+    throw new Error(`Timeout ${CLAUDE_PRINT_TIMEOUT_MS / 1e3}s. Check m\u1EA1ng / endpoint.`);
+  }
+  if (result.status !== 0) {
+    const stderr = (result.stderr || "").toLowerCase();
+    if (stderr.includes("401") || stderr.includes("invalid authentication") || stderr.includes("unauthorized")) {
+      throw new Error(
+        "Token Claude Code stale (401). Fix: `claude auth logout && claude auth login`."
+      );
+    }
+    throw new Error(
+      `Test fail (exit ${result.status}). Stderr: ${(result.stderr || "").slice(0, 200)}`
+    );
+  }
+  log.success(`Response: "${(result.stdout || "").trim().slice(0, 100)}"`);
+}
+async function testAiProviderByDetectedMode(settings) {
+  const env = settings.env || {};
+  const baseUrl = typeof env.ANTHROPIC_BASE_URL === "string" ? env.ANTHROPIC_BASE_URL : void 0;
+  const token = typeof env.ANTHROPIC_AUTH_TOKEN === "string" ? env.ANTHROPIC_AUTH_TOKEN : void 0;
+  const model = typeof settings.model === "string" ? settings.model : "default";
+  if (baseUrl && token) {
+    await testLLMLiteProvider(baseUrl, token, model);
+    return { ok: true, provider: "llmlite", message: "LLMLite provider working" };
+  }
+  testSubscriptionProvider();
+  return { ok: true, provider: "subscription", message: "Subscription provider working" };
+}
+
 // src/commands/ai.ts
 async function ensureWorkspaceCwd() {
   const cwd = process.cwd();
@@ -691,24 +786,15 @@ async function runAiStatus() {
   log.info(`Token:    ${token ? maskApiKey(token) : "(kh\xF4ng set \u2014 d\xF9ng subscription auth)"}`);
 }
 async function runAiTest() {
-  await ensureWorkspaceCwd();
-  log.info("Calling provider v\u1EDBi prompt 'say ok'...");
-  const result = spawnSync4("claude", ["--print", "say ok"], {
-    encoding: "utf8",
-    timeout: 3e4
-  });
-  if (result.signal === "SIGTERM") {
-    log.error("Timeout sau 30s. Check m\u1EA1ng / endpoint.");
-    process.exit(1);
-  }
-  if (result.status !== 0) {
-    log.error(`Test th\u1EA5t b\u1EA1i (exit ${result.status}).`);
-    if (result.stderr) process.stderr.write(`${result.stderr}
-`);
+  const workspacePath = await ensureWorkspaceCwd();
+  const settings = await readWorkspaceSettings(workspacePath);
+  try {
+    const result = await testAiProviderByDetectedMode(settings);
+    log.success(`\u2713 ${result.message}`);
+  } catch (err) {
+    log.error(`Test fail: ${err.message}`);
     process.exit(1);
   }
-  log.success(`Response: ${(result.stdout || "").trim().slice(0, 200)}`);
-  log.success("AI provider working");
 }
 async function runAiReset(opts) {
   const workspacePath = await ensureWorkspaceCwd();
@@ -1108,7 +1194,7 @@ async function applyFixes(checks) {
 
 // src/commands/init.ts
 import { basename, join as join16, relative as relative2, resolve } from "path";
-import { confirm as confirm2, input as input2, select as select4 } from "@inquirer/prompts";
+import { confirm as confirm3, input as input2, select as select5 } from "@inquirer/prompts";
 import boxen3 from "boxen";
 
 // src/lib/avatar-ascii-banner.ts
@@ -1385,11 +1471,41 @@ async function ensureGitHubReady(remoteUrl) {
 }
 
 // src/lib/create-workspace-remote-via-gh.ts
+function canCreateInNamespace(org, ghUser) {
+  if (org.toLowerCase() === ghUser.toLowerCase()) return { ok: true };
+  const r = spawnSync14("gh", ["api", `orgs/${org}/members/${ghUser}`, "--silent"], {
+    stdio: "ignore"
+  });
+  if (r.status === 0) return { ok: true };
+  const orgCheck = spawnSync14("gh", ["api", `orgs/${org}`, "--silent"], { stdio: "ignore" });
+  if (orgCheck.status !== 0) {
+    const userCheck = spawnSync14("gh", ["api", `users/${org}`, "--silent"], { stdio: "ignore" });
+    if (userCheck.status === 0) {
+      return {
+        ok: false,
+        reason: `'${org}' l\xE0 personal account kh\xE1c (kh\xF4ng ph\u1EA3i org). B\u1EA1n (${ghUser}) kh\xF4ng th\u1EC3 t\u1EA1o repo d\u01B0\u1EDBi account c\u1EE7a user kh\xE1c. Pass --repo-org=${ghUser} ho\u1EB7c switch gh: gh auth login`
+      };
+    }
+    return {
+      ok: false,
+      reason: `'${org}' kh\xF4ng t\u1ED3n t\u1EA1i tr\xEAn GitHub. Check ch\xEDnh t\u1EA3 ho\u1EB7c t\u1EA1o org tr\u01B0\u1EDBc.`
+    };
+  }
+  return {
+    ok: false,
+    reason: `'${ghUser}' kh\xF4ng ph\u1EA3i member c\u1EE7a org '${org}'. Li\xEAn h\u1EC7 admin org \u0111\u1EC3 \u0111\u01B0\u1EE3c invite, ho\u1EB7c pass --repo-org=${ghUser} t\u1EA1o d\u01B0\u1EDBi personal account.`
+  };
+}
 async function createWorkspaceRemoteViaGh(input3) {
   validateRepoName(input3.workspaceName);
   validateRepoVisibility(input3.visibility);
   await ensureGitHubReady();
-  const org = input3.org ?? resolveGithubUsernameDefault();
+  const ghUser = resolveGithubUsernameDefault();
+  const org = input3.org ?? ghUser;
+  const namespaceCheck = canCreateInNamespace(org, ghUser);
+  if (!namespaceCheck.ok) {
+    throw new Error(`Kh\xF4ng th\u1EC3 t\u1EA1o repo d\u01B0\u1EDBi '${org}/': ${namespaceCheck.reason}`);
+  }
   const fullName = `${org}/${input3.workspaceName}`;
   log.info(`T\u1EA1o GitHub repo cho workspace: ${fullName} (${input3.visibility})...`);
   const r = spawnSync14(
@@ -1405,9 +1521,12 @@ async function createWorkspaceRemoteViaGh(input3) {
       "origin",
       "--push"
     ],
-    { stdio: "inherit" }
+    { stdio: ["inherit", "inherit", "pipe"], encoding: "utf8" }
   );
   if (r.status !== 0) {
+    const stderr = (r.stderr || "").trim();
+    if (stderr) process.stderr.write(`${stderr}
+`);
     throw new Error(
       `T\u1EA1o workspace remote th\u1EA5t b\u1EA1i (exit ${r.status}). Workspace v\u1EABn d\xF9ng \u0111\u01B0\u1EE3c local. Setup remote sau qua: gh repo create ${fullName} --${input3.visibility} --source=. --remote=origin --push`
     );
@@ -1687,25 +1806,110 @@ async function safeBootstrapGitInFolder(folderPath, opts = {}) {
 // src/lib/team-pack-submodule-manager.ts
 import { join as join14 } from "path";
 
+// src/lib/check-team-pack-access-with-retry-loop.ts
+import { spawnSync as spawnSync15 } from "child_process";
+import { confirm as confirm2, select as select4 } from "@inquirer/prompts";
+function parseRepoSlugFromGitUrl(url) {
+  const httpsMatch = url.match(/github\.com[/:]([^/]+\/[^/]+?)(?:\.git)?$/);
+  if (httpsMatch) return httpsMatch[1];
+  return null;
+}
+function checkRepoAccess(repoSlug) {
+  const r = spawnSync15("gh", ["api", `repos/${repoSlug}`], { stdio: "ignore" });
+  return r.status === 0;
+}
+function getCurrentGhUser() {
+  const r = spawnSync15("gh", ["api", "user", "--jq", ".login"], {
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"]
+  });
+  if (r.status !== 0) return null;
+  return r.stdout.trim() || null;
+}
+async function copyInfoToClipboardWithConsent(info) {
+  const ok = await confirm2({
+    message: "Copy th\xF4ng tin (GitHub username + email) v\xE0o clipboard \u0111\u1EC3 d\xE1n v\xE0o Slack/email?",
+    default: true
+  });
+  if (!ok) return;
+  try {
+    const { default: clipboardy } = await import("clipboardy");
+    await clipboardy.write(info);
+    log.success("\u0110\xE3 copy v\xE0o clipboard");
+  } catch (err) {
+    log.dim(`Copy clipboard fail: ${err.message}`);
+  }
+}
+function buildAccessRequestInfo(ghUser, ssoEmail) {
+  const lines = [
+    "Request access team-ai-pack (NAL)",
+    "",
+    `GitHub username: ${ghUser ?? "(ch\u01B0a gh auth \u2014 ch\u1EA1y: gh auth login)"}`,
+    `NAL email:       ${ssoEmail ?? "(ch\u01B0a avatar login \u2014 ch\u1EA1y: avatar login)"}`,
+    `Date:            ${(/* @__PURE__ */ new Date()).toISOString().split("T")[0]}`
+  ];
+  return lines.join("\n");
+}
+async function ensureTeamPackAccessWithRetry(args) {
+  if (checkRepoAccess(args.repoSlug)) return true;
+  const ghUser = getCurrentGhUser();
+  const info = buildAccessRequestInfo(ghUser, args.ssoEmail ?? null);
+  log.warn(`B\u1EA1n ch\u01B0a c\xF3 quy\u1EC1n access v\xE0o b\u1ED9 package ${args.repoSlug}.`);
+  log.info("Li\xEAn h\u1EC7 admin (Luke @nal.vn) \u0111\u1EC3 \u0111\u01B0\u1EE3c add v\xE0o org nalvn.");
+  log.plain("");
+  log.plain(info);
+  log.plain("");
+  await copyInfoToClipboardWithConsent(info);
+  while (true) {
+    const action = await select4({
+      message: "Ti\u1EBFp t\u1EE5c?",
+      choices: [
+        { name: "\u0110\xE3 \u0111\u01B0\u1EE3c add \u2014 ki\u1EC3m tra l\u1EA1i v\xE0 ti\u1EBFp t\u1EE5c", value: "retry" },
+        { name: "T\u1EA1m ng\u01B0ng \u2014 ch\u1EA1y l\u1EA1i 'avatar init' sau", value: "abort" }
+      ]
+    });
+    if (action === "abort") {
+      log.dim("T\u1EA1m ng\u01B0ng. Ch\u1EA1y l\u1EA1i 'avatar init' sau khi \u0111\xE3 accept invite t\u1EEB GitHub.");
+      return false;
+    }
+    log.info("Ki\u1EC3m tra access...");
+    if (checkRepoAccess(args.repoSlug)) {
+      log.success("\u0110\xE3 c\xF3 access \u2014 ti\u1EBFp t\u1EE5c.");
+      return true;
+    }
+    log.warn("V\u1EABn ch\u01B0a c\xF3 access. \u0110\u1EA3m b\u1EA3o b\u1EA1n \u0111\xE3 accept email invite t\u1EEB GitHub (Inbox + Spam).");
+  }
+}
+
 // src/lib/resolve-team-pack-repo-url.ts
-var LEGACY_FALLBACK = "https://github.com/LukeNALS/team-ai-pack.git";
+var ORG_DEFAULT = "https://github.com/nalvn/team-ai-pack.git";
 function resolveTeamPackRepoUrl() {
   if (process.env.AVATAR_TEAM_PACK_REPO_URL) {
     return process.env.AVATAR_TEAM_PACK_REPO_URL;
   }
-  try {
-    const ghUser = resolveGithubUsernameDefault();
-    if (ghUser) return `https://github.com/${ghUser}/team-ai-pack.git`;
-  } catch {
-  }
-  return LEGACY_FALLBACK;
+  return ORG_DEFAULT;
 }
 
 // src/lib/team-pack-submodule-manager.ts
 var TEAM_PACK_REPO_URL = resolveTeamPackRepoUrl();
 var TEAM_PACK_RELATIVE_PATH = ".claude/pack";
-async function addTeamPackSubmodule(projectRoot, tag) {
+var TeamPackAccessAbortedError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "TeamPackAccessAbortedError";
+  }
+};
+async function addTeamPackSubmodule(projectRoot, tag, ssoEmail) {
   const url = resolveTeamPackRepoUrl();
+  const repoSlug = parseRepoSlugFromGitUrl(url);
+  if (repoSlug) {
+    const hasAccess = await ensureTeamPackAccessWithRetry({ repoSlug, ssoEmail });
+    if (!hasAccess) {
+      throw new TeamPackAccessAbortedError(
+        "User ch\u1ECDn t\u1EA1m ng\u01B0ng. Ch\u1EA1y l\u1EA1i 'avatar init' sau khi \u0111\u01B0\u1EE3c add v\xE0o org."
+      );
+    }
+  }
   try {
     await addSubmodule(url, TEAM_PACK_RELATIVE_PATH, projectRoot);
   } catch (err) {
@@ -1992,6 +2196,10 @@ function registerInitCommand(program2) {
         log.dim(err.message);
         process.exit(0);
       }
+      if (err instanceof TeamPackAccessAbortedError) {
+        log.dim(err.message);
+        process.exit(0);
+      }
       log.error(err instanceof Error ? err.message : String(err));
       process.exit(1);
     }
@@ -2026,7 +2234,7 @@ async function runInit(opts) {
   }
 }
 async function promptProjectStatus() {
-  return await select4({
+  return await select5({
     message: "T\xECnh tr\u1EA1ng d\u1EF1 \xE1n c\u1EE7a b\u1EA1n?",
     choices: [
       { name: "1. \u0110\xE3 c\xF3 repo git remote (URL c\xF3 s\u1EB5n)", value: "existing-remote" },
@@ -2104,7 +2312,7 @@ async function runInitFromScratch(opts, ownerEmail) {
     message: "T\xEAn d\u1EF1 \xE1n:",
     validate: (v) => v.length > 0 ? true : "T\xEAn b\u1EAFt bu\u1ED9c"
   });
-  const visibility = opts.repoVisibility ?? await select4({
+  const visibility = opts.repoVisibility ?? await select5({
     message: "Visibility?",
     choices: [
       { name: "private (m\u1EB7c \u0111\u1ECBnh)", value: "private" },
@@ -2164,7 +2372,7 @@ async function getOrCreateOriginRemote(folderPath, opts) {
     log.success(`Folder \u0111\xE3 c\xF3 remote origin: ${origin.refs.push}`);
     return origin.refs.push;
   }
-  const shouldCreate = opts.createRemote ?? await confirm2({
+  const shouldCreate = opts.createRemote ?? await confirm3({
     message: "Folder ch\u01B0a c\xF3 remote. T\u1EA1o GitHub repo ngay \u0111\u1EC3 share team?",
     default: true
   });
@@ -2173,7 +2381,7 @@ async function getOrCreateOriginRemote(folderPath, opts) {
     return void 0;
   }
   await ensureGitHubReady();
-  const visibility = opts.repoVisibility ?? await select4({
+  const visibility = opts.repoVisibility ?? await select5({
     message: "Visibility?",
     choices: [
       { name: "private (m\u1EB7c \u0111\u1ECBnh)", value: "private" },
@@ -2264,13 +2472,13 @@ async function maybeCreateWorkspaceRemote(args) {
   let shouldCreate = args.createWorkspaceRemote;
   if (shouldCreate === void 0) {
     if (args.autoYes) return;
-    shouldCreate = await confirm2({
+    shouldCreate = await confirm3({
       message: "T\u1EA1o remote GitHub cho workspace \u0111\u1EC3 share team? (Avatar state)",
       default: false
     });
   }
   if (!shouldCreate) return;
-  const visibility = args.repoVisibility ?? (args.autoYes ? "private" : await select4({
+  const visibility = args.repoVisibility ?? (args.autoYes ? "private" : await select5({
     message: "Workspace visibility?",
     choices: [
       { name: "private (m\u1EB7c \u0111\u1ECBnh, an to\xE0n)", value: "private" },
@@ -2301,7 +2509,7 @@ async function resolveWorkspacePath(parent, desiredName, force) {
     log.info(`--force: d\xF9ng ${alternative}`);
     return alternative;
   }
-  const useAlt = await confirm2({ message: `D\xF9ng "${alternative}" thay th\u1EBF?`, default: true });
+  const useAlt = await confirm3({ message: `D\xF9ng "${alternative}" thay th\u1EBF?`, default: true });
   if (!useAlt) throw new Error("H\u1EE7y init. Ch\u1EA1y l\u1EA1i v\u1EDBi --workspace-name kh\xE1c.");
   return alternative;
 }
@@ -2476,7 +2684,7 @@ function registerToolsCommand(program2) {
 
 // src/commands/uninstall.ts
 import { relative as relative3 } from "path";
-import { confirm as confirm3 } from "@inquirer/prompts";
+import { confirm as confirm4 } from "@inquirer/prompts";
 import boxen5 from "boxen";
 
 // src/lib/create-uninstall-backup-snapshot.ts
@@ -2631,7 +2839,7 @@ async function removeSubmoduleEntry(gitmodulesPath, submodulePath) {
 }
 
 // src/commands/uninstall.ts
-var CLI_VERSION = "1.2.2";
+var CLI_VERSION = "1.2.3";
 function registerUninstallCommand(program2) {
   program2.command("uninstall").description("G\u1EE1 Avatar kh\u1ECFi project \u2014 backup t\u1EF1 \u0111\u1ED9ng (M11)").option("--yes", "Skip confirm prompt").option("--no-backup", "Kh\xF4ng t\u1EA1o backup tr\u01B0\u1EDBc khi x\xF3a (nguy hi\u1EC3m)").option("--keep-submodule", "Gi\u1EEF submodule .claude/pack/").option("--keep-hooks", "Gi\u1EEF git hooks post-merge, pre-push").option("--dry-run", "Hi\u1EC3n th\u1ECB danh s\xE1ch s\u1EBD x\xF3a, kh\xF4ng th\u1EF1c thi").action(async (opts) => {
     try {
@@ -2655,7 +2863,7 @@ async function runUninstall(opts) {
     return;
   }
   if (!opts.yes) {
-    const ok = await confirm3({
+    const ok = await confirm4({
       message: "Ti\u1EBFp t\u1EE5c g\u1EE1 Avatar?",
       default: false
     });
@@ -2713,7 +2921,7 @@ function printUninstallSuccessBox(backupPath) {
 }
 
 // src/index.ts
-var CLI_VERSION2 = "1.2.2";
+var CLI_VERSION2 = "1.2.3";
 var program = new Command();
 program.name("avatar").description("AI harness CLI for NAL Vietnam engineering").version(CLI_VERSION2, "-v, --version", "Hi\u1EC3n th\u1ECB phi\xEAn b\u1EA3n Avatar CLI").addHelpText(
   "beforeAll",