@nalvietnam/avatar-cli 1.3.3 → 1.4.1

package/dist/index.js

@@ -134,8 +134,8 @@ async function writeUserConfig(config) {
 }
 async function clearUserConfig() {
   if (await pathExists(USER_CONFIG_PATH)) {
-    const { promises: fs9 } = await import("fs");
-    await fs9.unlink(USER_CONFIG_PATH);
+    const { promises: fs11 } = await import("fs");
+    await fs11.unlink(USER_CONFIG_PATH);
   }
 }
 function isTokenExpired(config) {
@@ -183,6 +183,33 @@ function spinner(text) {
     isEnabled: process.stdout.isTTY ?? false
   }).start();
 }
+function spinnerWithElapsed(prefix) {
+  const startMs = Date.now();
+  const sp = spinner(`${prefix} (0:00)`);
+  const formatElapsed = () => {
+    const sec = Math.floor((Date.now() - startMs) / 1e3);
+    const m = Math.floor(sec / 60);
+    const s = sec % 60;
+    return `${m}:${String(s).padStart(2, "0")}`;
+  };
+  const interval = setInterval(() => {
+    sp.text = `${prefix} (${formatElapsed()})`;
+  }, 1e3);
+  return {
+    succeed: (text) => {
+      clearInterval(interval);
+      sp.succeed(`${text} (${formatElapsed()})`);
+    },
+    fail: (text) => {
+      clearInterval(interval);
+      sp.fail(`${text} (${formatElapsed()})`);
+    },
+    stop: () => {
+      clearInterval(interval);
+      sp.stop();
+    }
+  };
+}
 
 // src/lib/check-claude-code-subscription-and-quota.ts
 var QUOTA_VERIFY_TIMEOUT_MS = 3e4;
@@ -1306,14 +1333,209 @@ async function applyFixes(checks) {
   if (count === 0) log.dim("Kh\xF4ng c\xF3 g\xEC \u0111\u1EC3 fix t\u1EF1 \u0111\u1ED9ng.");
 }
 
-// src/commands/init.ts
-import { basename, join as join18, relative as relative2, resolve } from "path";
-import { confirm as confirm3, input as input5, select as select8 } from "@inquirer/prompts";
-import boxen4 from "boxen";
+// src/commands/gitnexus.ts
+import { spawnSync as spawnSync11 } from "child_process";
+import { promises as fs8 } from "fs";
+import { join as join15 } from "path";
 
-// src/lib/add-team-pack-submodule-with-retry-on-network-fail.ts
+// src/lib/run-gitnexus-setup-and-analyze.ts
+import { spawnSync as spawnSync7 } from "child_process";
+import { existsSync as existsSync4 } from "fs";
+import { join as join12 } from "path";
+var SETUP_TIMEOUT_MS = 2 * 60 * 1e3;
+var ANALYZE_TIMEOUT_MS = 5 * 60 * 1e3;
+var GitnexusOperationError = class extends Error {
+  operation;
+  reason;
+  exitCode;
+  stderr;
+  constructor(operation, reason, message, exitCode = null, stderr) {
+    super(message);
+    this.name = "GitnexusOperationError";
+    this.operation = operation;
+    this.reason = reason;
+    this.exitCode = exitCode;
+    this.stderr = stderr;
+  }
+};
+function classifyOperationFailure(operation, exitCode, signal, stderrSample) {
+  if (signal === "SIGTERM") {
+    return new GitnexusOperationError(
+      operation,
+      "timeout",
+      `gitnexus ${operation} timeout. Check m\u1EA1ng / repo size.`,
+      null,
+      stderrSample
+    );
+  }
+  const stderr = stderrSample.toLowerCase();
+  if (stderr.includes("eacces") || stderr.includes("permission denied")) {
+    return new GitnexusOperationError(
+      operation,
+      "permission",
+      `gitnexus ${operation} fail (permission). Check write access ~/.claude ho\u1EB7c cwd.`,
+      exitCode,
+      stderrSample
+    );
+  }
+  return new GitnexusOperationError(
+    operation,
+    "non-zero-exit",
+    `gitnexus ${operation} exit ${exitCode ?? "null"}. Xem log ph\xEDa tr\xEAn.`,
+    exitCode,
+    stderrSample
+  );
+}
+function tailLines(text, n) {
+  const lines = text.split("\n");
+  return lines.slice(-n).join("\n");
+}
+function runGitnexusSetup() {
+  const sp = spinnerWithElapsed("Setup GitNexus global skills (~/.claude/skills/gitnexus-*)");
+  const result = spawnSync7("gitnexus", ["setup"], {
+    stdio: ["ignore", "pipe", "pipe"],
+    timeout: SETUP_TIMEOUT_MS,
+    encoding: "utf8"
+  });
+  if (result.status !== 0 || result.signal === "SIGTERM") {
+    sp.fail("GitNexus setup failed");
+    const stderr = (result.stderr || "").trim();
+    const stdout = (result.stdout || "").trim();
+    if (stderr) process.stderr.write(`${tailLines(stderr, 30)}
+`);
+    else if (stdout) process.stderr.write(`${tailLines(stdout, 30)}
+`);
+    throw classifyOperationFailure("setup", result.status, result.signal, stderr);
+  }
+  sp.succeed("GitNexus setup OK (global skills installed)");
+}
+function runGitnexusAnalyze(workspacePath) {
+  const sp = spinnerWithElapsed(`Analyze workspace ${workspacePath} (1-3 ph\xFAt)`);
+  const result = spawnSync7("gitnexus", ["analyze", "."], {
+    cwd: workspacePath,
+    stdio: ["ignore", "pipe", "pipe"],
+    timeout: ANALYZE_TIMEOUT_MS,
+    encoding: "utf8"
+  });
+  if (result.status !== 0 || result.signal === "SIGTERM") {
+    sp.fail("Analyze failed");
+    const stderr = (result.stderr || "").trim();
+    const stdout = (result.stdout || "").trim();
+    if (stderr) process.stderr.write(`${tailLines(stderr, 30)}
+`);
+    else if (stdout) process.stderr.write(`${tailLines(stdout, 30)}
+`);
+    throw classifyOperationFailure("analyze", result.status, result.signal, stderr);
+  }
+  const metaPath = join12(workspacePath, ".gitnexus", "meta.json");
+  if (!existsSync4(metaPath)) {
+    sp.fail("Analyze exit 0 nh\u01B0ng kh\xF4ng th\u1EA5y meta.json");
+    throw new GitnexusOperationError(
+      "analyze",
+      "missing-output",
+      `gitnexus analyze xong nh\u01B0ng kh\xF4ng th\u1EA5y ${metaPath}. Repo c\xF3 th\u1EC3 empty ho\u1EB7c gitnexus fail silent.`
+    );
+  }
+  sp.succeed(`Analyze OK (index t\u1EA1i ${join12(workspacePath, ".gitnexus")})`);
+}
+
+// src/lib/run-gitnexus-setup-phase.ts
+import { confirm as confirm3 } from "@inquirer/prompts";
+import boxen2 from "boxen";
+
+// src/lib/detect-gitnexus-installation.ts
 import { spawnSync as spawnSync8 } from "child_process";
-import { select as select5 } from "@inquirer/prompts";
+var VERSION_PROBE_TIMEOUT_MS2 = 5e3;
+var SEMVER_REGEX2 = /(\d+\.\d+\.\d+)/;
+function probeGitnexusBinaryPath() {
+  const isWindows = detectHostPlatform() === "win32";
+  const probeCmd = isWindows ? "where" : "which";
+  const result = spawnSync8(probeCmd, ["gitnexus"], { encoding: "utf8" });
+  if (result.error || result.status !== 0) return null;
+  const out = (result.stdout || "").trim();
+  if (!out) return null;
+  return out.split(/\r?\n/)[0].trim();
+}
+function probeGitnexusVersion() {
+  const result = spawnSync8("gitnexus", ["--version"], {
+    encoding: "utf8",
+    timeout: VERSION_PROBE_TIMEOUT_MS2
+  });
+  if (result.error || result.status !== 0) return null;
+  const out = (result.stdout || "").trim();
+  const match = SEMVER_REGEX2.exec(out);
+  return match ? match[1] : null;
+}
+function detectGitnexusInstallation() {
+  const path = probeGitnexusBinaryPath();
+  if (!path) {
+    return { installed: false, version: null, path: null };
+  }
+  const version = probeGitnexusVersion();
+  return { installed: true, version, path };
+}
+
+// src/lib/install-gitnexus-via-npm.ts
+import { spawnSync as spawnSync9 } from "child_process";
+var NPM_INSTALL_TIMEOUT_MS2 = 5 * 60 * 1e3;
+var GITNEXUS_PACKAGE = "gitnexus";
+var InstallGitnexusError = class extends Error {
+  reason;
+  exitCode;
+  constructor(reason, message, exitCode = null) {
+    super(message);
+    this.name = "InstallGitnexusError";
+    this.reason = reason;
+    this.exitCode = exitCode;
+  }
+};
+function classifyNpmFailure2(exitCode, stderrSample) {
+  const stderr = stderrSample.toLowerCase();
+  if (stderr.includes("eacces") || stderr.includes("permission denied")) {
+    return new InstallGitnexusError(
+      "permission-denied",
+      `npm install -g c\u1EA7n quy\u1EC1n. Th\u1EED: sudo npm install -g ${GITNEXUS_PACKAGE} ho\u1EB7c fix npm prefix (npm config set prefix ~/.npm-global).`,
+      exitCode
+    );
+  }
+  if (stderr.includes("enospc") || stderr.includes("no space")) {
+    return new InstallGitnexusError("disk-full", "\u0110\u0129a \u0111\u1EA7y. Free disk space r\u1ED3i th\u1EED l\u1EA1i.", exitCode);
+  }
+  return new InstallGitnexusError(
+    "generic",
+    `npm install th\u1EA5t b\u1EA1i (exit ${exitCode ?? "null"}). Xem log npm ph\xEDa tr\xEAn.`,
+    exitCode
+  );
+}
+function installGitnexusViaNpm() {
+  log.info("\u0110ang c\xE0i GitNexus qua npm (c\xF3 th\u1EC3 m\u1EA5t 1-2 ph\xFAt)...");
+  const result = spawnSync9("npm", ["install", "-g", GITNEXUS_PACKAGE], {
+    stdio: ["inherit", "inherit", "pipe"],
+    timeout: NPM_INSTALL_TIMEOUT_MS2,
+    encoding: "utf8"
+  });
+  if (result.signal === "SIGTERM") {
+    throw new InstallGitnexusError(
+      "timeout",
+      `npm install timeout sau ${NPM_INSTALL_TIMEOUT_MS2 / 1e3}s. Check m\u1EA1ng r\u1ED3i th\u1EED l\u1EA1i.`,
+      null
+    );
+  }
+  if (result.status !== 0) {
+    if (result.stderr) process.stderr.write(result.stderr);
+    throw classifyNpmFailure2(result.status, result.stderr || "");
+  }
+  const probe = detectGitnexusInstallation();
+  if (!probe.installed || !probe.path) {
+    throw new InstallGitnexusError(
+      "binary-not-in-path",
+      "npm c\xE0i xong nh\u01B0ng `gitnexus` kh\xF4ng trong PATH. Reload shell (source ~/.zshrc) ho\u1EB7c th\xEAm npm global bin v\xE0o PATH.",
+      null
+    );
+  }
+  log.success(`\u0110\xE3 c\xE0i GitNexus${probe.version ? ` v${probe.version}` : ""} t\u1EA1i ${probe.path}`);
+  return { version: probe.version, path: probe.path };
+}
 
 // src/lib/prompt-recovery-action-on-failure.ts
 import { input as input3, select as select3 } from "@inquirer/prompts";
@@ -1339,24 +1561,419 @@ async function promptRetryOrSkip(args) {
   });
 }
 
+// src/lib/register-gitnexus-mcp-server.ts
+import { promises as fs7 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join13 } from "path";
+var MCP_FILE_MODE = 384;
+var EXPECTED_GITNEXUS_ENTRY = {
+  command: "gitnexus",
+  args: ["mcp"]
+};
+function getMcpServersPath() {
+  return join13(homedir3(), ".claude", "mcp_servers.json");
+}
+function isEntryEqual(a, b) {
+  if (a === b) return true;
+  if (typeof a !== "object" || typeof b !== "object" || a === null || b === null) return false;
+  return JSON.stringify(a) === JSON.stringify(b);
+}
+async function backupExistingFile(path) {
+  const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+  const backupPath = `${path}.avatar-backup-${ts}`;
+  await fs7.copyFile(path, backupPath);
+  return backupPath;
+}
+async function registerGitnexusMcpServer() {
+  const path = getMcpServersPath();
+  let existing = {};
+  let fileExisted = false;
+  if (await pathExists(path)) {
+    fileExisted = true;
+    try {
+      existing = await readJson(path);
+    } catch (err) {
+      throw new Error(
+        `MCP config corrupted (${path}): ${err.message}. Backup + x\xF3a file \u0111\u1EC3 Avatar t\u1EA1o l\u1EA1i.`
+      );
+    }
+  }
+  const existingEntry = existing.mcp_servers?.gitnexus;
+  if (existingEntry && isEntryEqual(existingEntry, EXPECTED_GITNEXUS_ENTRY)) {
+    log.dim(`MCP entry gitnexus \u0111\xE3 \u0111\xFAng t\u1EA1i ${path} (no-op)`);
+    return { path, wasUpdated: false };
+  }
+  let backup;
+  if (fileExisted) {
+    backup = await backupExistingFile(path);
+    log.dim(`Backup ${path} \u2192 ${backup}`);
+  }
+  const merged = {
+    ...existing,
+    mcp_servers: {
+      ...existing.mcp_servers || {},
+      gitnexus: EXPECTED_GITNEXUS_ENTRY
+    }
+  };
+  await writeJsonAtomic(path, merged, MCP_FILE_MODE);
+  try {
+    await fs7.chmod(path, MCP_FILE_MODE);
+  } catch {
+  }
+  log.success(`Registered MCP server: gitnexus \u2192 ${path}`);
+  return { path, wasUpdated: true, backup };
+}
+
+// src/lib/run-gitnexus-wiki-conditional.ts
+import { spawnSync as spawnSync10 } from "child_process";
+import { existsSync as existsSync5 } from "fs";
+import { join as join14 } from "path";
+import { confirm as confirm2 } from "@inquirer/prompts";
+var WIKI_TIMEOUT_MS = 15 * 60 * 1e3;
+var DEFAULT_LLMLITE_MODEL = "nal-claude";
+async function readSettingsForWikiCredentials(workspacePath) {
+  const settingsPath = join14(workspacePath, ".claude", "settings.json");
+  if (!await pathExists(settingsPath)) return null;
+  try {
+    const settings = await readJson(settingsPath);
+    const env = settings.env || {};
+    const apiKey = typeof env.ANTHROPIC_AUTH_TOKEN === "string" ? env.ANTHROPIC_AUTH_TOKEN : null;
+    const baseUrl = typeof env.ANTHROPIC_BASE_URL === "string" ? env.ANTHROPIC_BASE_URL : null;
+    if (!apiKey || !baseUrl) return null;
+    const model = typeof env.ANTHROPIC_MODEL === "string" && env.ANTHROPIC_MODEL.length > 0 ? env.ANTHROPIC_MODEL : DEFAULT_LLMLITE_MODEL;
+    return { apiKey, baseUrl, model };
+  } catch {
+    return null;
+  }
+}
+async function confirmWikiGeneration(baseUrl, model) {
+  return await confirm2({
+    message: `Generate wiki cho workspace? (~$0.50 qua ${baseUrl} model=${model}, 2-5 ph\xFAt). Continue?`,
+    default: true
+  });
+}
+function tailLines2(text, n) {
+  const lines = text.split("\n");
+  return lines.slice(-n).join("\n");
+}
+async function runGitnexusWikiConditional(workspacePath) {
+  const creds = await readSettingsForWikiCredentials(workspacePath);
+  if (!creds) {
+    log.warn("Subscription mode (ho\u1EB7c settings.json kh\xF4ng c\xF3 LLMLite key) \u2192 skip wiki gen.");
+    log.dim("\u0110\u1EC3 gen wiki sau, ch\u1EA1y manual: gitnexus wiki . --api-key <openai-key>");
+    return { ran: false, skipped: true, reason: "subscription-mode" };
+  }
+  const proceed = await confirmWikiGeneration(creds.baseUrl, creds.model);
+  if (!proceed) {
+    log.dim(
+      "User decline wiki gen \u2014 workspace OK kh\xF4ng c\xF3 wiki. Ch\u1EA1y `gitnexus wiki` manual sau khi c\u1EA7n."
+    );
+    return { ran: false, skipped: true, reason: "user-declined" };
+  }
+  const sp = spinnerWithElapsed(`Generating wiki via ${creds.baseUrl} model=${creds.model}`);
+  const result = spawnSync10(
+    "gitnexus",
+    ["wiki", ".", "--api-key", creds.apiKey, "--base-url", creds.baseUrl, "--model", creds.model],
+    {
+      cwd: workspacePath,
+      stdio: ["ignore", "pipe", "pipe"],
+      timeout: WIKI_TIMEOUT_MS,
+      encoding: "utf8"
+    }
+  );
+  if (result.status !== 0 || result.signal === "SIGTERM") {
+    const reason = result.signal === "SIGTERM" ? "timeout" : "non-zero-exit";
+    sp.fail(`Wiki gen ${reason} (exit ${result.status ?? "null"})`);
+    const stderr = (result.stderr || "").trim();
+    const stdout = (result.stdout || "").trim();
+    if (stderr) process.stderr.write(`${tailLines2(stderr, 30)}
+`);
+    else if (stdout) process.stderr.write(`${tailLines2(stdout, 30)}
+`);
+    return {
+      ran: false,
+      skipped: true,
+      reason: "fail",
+      detail: `Wiki gen ${reason} (exit ${result.status ?? "null"})`
+    };
+  }
+  const wikiPath = join14(workspacePath, ".gitnexus", "wiki", "index.html");
+  if (!existsSync5(wikiPath)) {
+    sp.fail("Wiki exit 0 nh\u01B0ng kh\xF4ng th\u1EA5y index.html");
+    return {
+      ran: false,
+      skipped: true,
+      reason: "fail",
+      detail: `Wiki exit 0 nh\u01B0ng kh\xF4ng th\u1EA5y ${wikiPath}`
+    };
+  }
+  sp.succeed(`Wiki ready: ${wikiPath}`);
+  return { ran: true, skipped: false, wikiPath };
+}
+
+// src/lib/run-gitnexus-setup-phase.ts
+async function promptInstallGitnexus() {
+  const lines = [
+    chalk.bold("\u{1F9E0} GitNexus ch\u01B0a c\xE0i"),
+    "",
+    "GitNexus = code intelligence layer cho Claude Code:",
+    "  \u2022 Architectural awareness (impact analysis)",
+    "  \u2022 Call chain debug + blast radius tr\u01B0\u1EDBc refactor",
+    "  \u2022 Wiki HTML t\u1EF1 gen m\xF4 t\u1EA3 codebase",
+    "",
+    `S\u1EBD c\xE0i: ${chalk.cyan("npm install -g gitnexus")} (global)`
+  ];
+  process.stdout.write(
+    `${boxen2(lines.join("\n"), { padding: 1, borderStyle: "round", borderColor: "cyan" })}
+`
+  );
+  return await confirm3({ message: "C\xE0i GitNexus global?", default: true });
+}
+async function installWithRecovery() {
+  while (true) {
+    try {
+      installGitnexusViaNpm();
+      return true;
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      const hint = err instanceof InstallGitnexusError && err.reason === "permission-denied" ? "Th\u1EED l\u1EA1i v\u1EDBi sudo, ho\u1EB7c fix npm prefix: npm config set prefix ~/.npm-global" : "Check log npm ph\xEDa tr\xEAn + th\u1EED l\u1EA1i.";
+      const action = await promptRetryOrSkip({
+        taskName: "C\xE0i GitNexus qua npm",
+        reason: message,
+        allowSkip: true,
+        hint
+      });
+      if (action === "abort") {
+        throw new UserAbortedRecoveryError("User abort t\u1EA1i b\u01B0\u1EDBc c\xE0i GitNexus.");
+      }
+      if (action === "skip") return false;
+    }
+  }
+}
+async function analyzeWithRecovery(workspacePath) {
+  while (true) {
+    try {
+      runGitnexusAnalyze(workspacePath);
+      return true;
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      const hint = err instanceof GitnexusOperationError && err.reason === "missing-output" ? "Repo c\xF3 th\u1EC3 empty ho\u1EB7c gitnexus version mismatch. Check `gitnexus --version`." : "Network glitch? Retry th\u01B0\u1EDDng work.";
+      const action = await promptRetryOrSkip({
+        taskName: "GitNexus analyze workspace",
+        reason: message,
+        allowSkip: true,
+        hint
+      });
+      if (action === "abort") {
+        throw new UserAbortedRecoveryError("User abort t\u1EA1i b\u01B0\u1EDBc GitNexus analyze.");
+      }
+      if (action === "skip") return false;
+    }
+  }
+}
+async function runGitnexusSetupPhase(args) {
+  const result = {
+    ok: false,
+    installed: false,
+    analyzed: false,
+    wikiGenerated: false,
+    mcpRegistered: false
+  };
+  try {
+    log.info("=== Phase 10: GitNexus Setup ===");
+    let info = detectGitnexusInstallation();
+    if (!info.installed) {
+      const shouldInstall = await promptInstallGitnexus();
+      if (!shouldInstall) {
+        await appendAuditEntry("gitnexus_setup", "result=skipped,reason=user-declined");
+        log.dim("Skip GitNexus. C\xE0i sau qua `avatar gitnexus install`.");
+        result.reason = "user-declined";
+        return result;
+      }
+      const installed = await installWithRecovery();
+      if (!installed) {
+        await appendAuditEntry("gitnexus_setup", "result=skipped,reason=install-skipped");
+        log.dim("Skip GitNexus install. Workspace OK kh\xF4ng c\xF3 codebase intelligence.");
+        result.reason = "install-skipped";
+        return result;
+      }
+      info = detectGitnexusInstallation();
+      if (!info.installed) {
+        throw new Error("C\xE0i xong nh\u01B0ng kh\xF4ng detect \u0111\u01B0\u1EE3c binary (PATH issue).");
+      }
+    }
+    result.installed = true;
+    log.success(`GitNexus available${info.version ? ` v${info.version}` : ""}`);
+    try {
+      runGitnexusSetup();
+    } catch (err) {
+      log.warn(`gitnexus setup fail: ${err.message}`);
+      log.dim("Skip global skills install. Workspace v\u1EABn d\xF9ng \u0111\u01B0\u1EE3c.");
+    }
+    const analyzed = await analyzeWithRecovery(args.workspacePath);
+    if (!analyzed) {
+      await appendAuditEntry("gitnexus_setup", "result=skipped,reason=analyze-skipped");
+      log.dim("Skip analyze. GitNexus installed nh\u01B0ng ch\u01B0a index.");
+      result.reason = "analyze-skipped";
+      return result;
+    }
+    result.analyzed = true;
+    const wikiResult = await runGitnexusWikiConditional(args.workspacePath);
+    result.wikiGenerated = wikiResult.ran;
+    if (wikiResult.skipped && wikiResult.reason === "fail") {
+      log.warn(`Wiki gen fail (workspace v\u1EABn OK): ${wikiResult.detail ?? "unknown"}`);
+    }
+    try {
+      const mcpResult = await registerGitnexusMcpServer();
+      result.mcpRegistered = true;
+      if (!mcpResult.wasUpdated) {
+        log.dim("MCP server gitnexus \u0111\xE3 registered tr\u01B0\u1EDBc \u0111\xF3.");
+      }
+    } catch (err) {
+      log.warn(`MCP server register fail: ${err.message}`);
+      log.dim(
+        "Workspace OK nh\u01B0ng Claude Code kh\xF4ng t\u1EF1 attach MCP server. Manual add v\xE0o ~/.claude/mcp_servers.json."
+      );
+    }
+    result.ok = true;
+    await appendAuditEntry(
+      "gitnexus_setup",
+      `result=ok,analyzed=${result.analyzed},wiki=${result.wikiGenerated},mcp=${result.mcpRegistered}`
+    );
+    log.success("GitNexus ready");
+    return result;
+  } catch (err) {
+    if (err instanceof UserAbortedRecoveryError) throw err;
+    const message = err instanceof Error ? err.message : String(err);
+    log.warn(`GitNexus setup th\u1EA5t b\u1EA1i: ${message}`);
+    log.dim("Workspace v\u1EABn s\u1EB5n s\xE0ng. Setup sau qua `avatar gitnexus install`.");
+    await appendAuditEntry("gitnexus_setup", `result=failed,error=${message.slice(0, 200)}`);
+    result.reason = message;
+    return result;
+  }
+}
+
+// src/commands/gitnexus.ts
+function ensureWorkspaceCwd2() {
+  const cwd = process.cwd();
+  const workspaceRoot = resolveAvatarWorkspaceRootFromCwd(cwd);
+  if (!workspaceRoot) {
+    log.error(
+      `Kh\xF4ng t\xECm th\u1EA5y Avatar workspace t\u1EEB th\u01B0 m\u1EE5c hi\u1EC7n t\u1EA1i.
+  Avatar workspace c\u1EA7n c\xF3: .claude/ + CLAUDE.md + src/ (ho\u1EB7c .gitmodules).
+  B\u1EA1n \u0111ang \u1EDF: ${cwd}
+  Cd v\xE0o workspace dir r\u1ED3i ch\u1EA1y l\u1EA1i.`
+    );
+    process.exit(1);
+  }
+  if (workspaceRoot !== cwd) {
+    log.dim(`Detected workspace root: ${workspaceRoot}`);
+  }
+  return workspaceRoot;
+}
+async function runGitnexusInstall() {
+  const workspacePath = ensureWorkspaceCwd2();
+  const result = await runGitnexusSetupPhase({ workspacePath });
+  if (result.ok) {
+    log.success("GitNexus setup complete");
+    log.dim("Update CLAUDE.md \u0111\u1EC3 re-render section GitNexus: re-run avatar init ho\u1EB7c ch\u1EC9nh tay.");
+  } else {
+    log.warn(`Setup kh\xF4ng complete: ${result.reason ?? "unknown"}`);
+  }
+}
+async function runGitnexusStatus() {
+  const workspacePath = ensureWorkspaceCwd2();
+  const metaPath = join15(workspacePath, ".gitnexus", "meta.json");
+  if (!await pathExists(metaPath)) {
+    log.warn(`Ch\u01B0a c\xF3 ${metaPath}. Ch\u1EA1y: avatar gitnexus install`);
+    return;
+  }
+  try {
+    const meta = await readJson(metaPath);
+    log.info(`Project:      ${workspacePath}`);
+    log.info(`Last commit:  ${meta.lastCommit?.slice(0, 7) ?? "(unknown)"}`);
+    log.info(`Indexed at:   ${meta.indexedAt ?? "(unknown)"}`);
+    if (meta.stats) {
+      log.info(
+        `Stats:        ${meta.stats.files ?? "?"} files \xB7 ${meta.stats.nodes ?? "?"} nodes \xB7 ${meta.stats.edges ?? "?"} edges`
+      );
+    }
+    if (meta.lastCommit) {
+      const headResult = spawnSync11("git", ["rev-parse", "HEAD"], {
+        cwd: workspacePath,
+        encoding: "utf8"
+      });
+      if (headResult.status === 0) {
+        const currentHead = headResult.stdout.trim();
+        if (currentHead !== meta.lastCommit) {
+          log.warn("\u26A0 Index stale \u2014 HEAD \u0111\xE3 ti\u1EBFn t\u1EEB lastCommit. Ch\u1EA1y: avatar gitnexus analyze");
+        } else {
+          log.dim("Index fresh (HEAD === lastCommit)");
+        }
+      }
+    }
+    const wikiPath = join15(workspacePath, ".gitnexus", "wiki", "index.html");
+    if (await pathExists(wikiPath)) {
+      const stat = await fs8.stat(wikiPath);
+      log.info(`Wiki:         ${stat.mtime.toISOString()}`);
+    } else {
+      log.dim("Wiki:         ch\u01B0a generate (ch\u1EA1y gitnexus wiki manual)");
+    }
+  } catch (err) {
+    log.error(`Read meta.json fail: ${err.message}`);
+    process.exit(1);
+  }
+}
+async function runGitnexusAnalyzeCommand() {
+  const workspacePath = ensureWorkspaceCwd2();
+  try {
+    runGitnexusAnalyze(workspacePath);
+    log.success("Index refreshed. Ch\u1EA1y `avatar gitnexus status` xem chi ti\u1EBFt.");
+  } catch (err) {
+    log.error(`Analyze fail: ${err.message}`);
+    process.exit(1);
+  }
+}
+function registerGitnexusCommand(program2) {
+  const gx = program2.command("gitnexus").description("Qu\u1EA3n l\xFD GitNexus code intelligence (M10)");
+  gx.command("install").description("C\xE0i + setup GitNexus cho workspace hi\u1EC7n t\u1EA1i").action(async () => {
+    await runGitnexusInstall();
+  });
+  gx.command("status").description("Show index info + staleness warning").action(async () => {
+    await runGitnexusStatus();
+  });
+  gx.command("analyze").description("Re-run analyze refresh index (no wiki)").action(async () => {
+    await runGitnexusAnalyzeCommand();
+  });
+}
+
+// src/commands/init.ts
+import { basename, join as join22, relative as relative2, resolve } from "path";
+import { confirm as confirm5, input as input5, select as select8 } from "@inquirer/prompts";
+import boxen5 from "boxen";
+
+// src/lib/add-team-pack-submodule-with-retry-on-network-fail.ts
+import { spawnSync as spawnSync13 } from "child_process";
+import { select as select5 } from "@inquirer/prompts";
+
 // src/lib/team-pack-submodule-manager.ts
-import { join as join12 } from "path";
+import { join as join16 } from "path";
 
 // src/lib/check-team-pack-access-with-retry-loop.ts
-import { spawnSync as spawnSync7 } from "child_process";
-import { confirm as confirm2, select as select4 } from "@inquirer/prompts";
-import boxen2 from "boxen";
+import { spawnSync as spawnSync12 } from "child_process";
+import { confirm as confirm4, select as select4 } from "@inquirer/prompts";
+import boxen3 from "boxen";
 function parseRepoSlugFromGitUrl(url) {
   const httpsMatch = url.match(/github\.com[/:]([^/]+\/[^/]+?)(?:\.git)?$/);
   if (httpsMatch) return httpsMatch[1];
   return null;
 }
 function checkRepoAccess(repoSlug) {
-  const r = spawnSync7("gh", ["api", `repos/${repoSlug}`], { stdio: "ignore" });
+  const r = spawnSync12("gh", ["api", `repos/${repoSlug}`], { stdio: "ignore" });
   return r.status === 0;
 }
 function getCurrentGhUser() {
-  const r = spawnSync7("gh", ["api", "user", "--jq", ".login"], {
+  const r = spawnSync12("gh", ["api", "user", "--jq", ".login"], {
     encoding: "utf8",
     stdio: ["ignore", "pipe", "pipe"]
   });
@@ -1365,13 +1982,13 @@ function getCurrentGhUser() {
 }
 function triggerGhAuthLoginInteractive() {
   log.info("M\u1EDF browser \u0111\u1EC3 switch GitHub account...");
-  const r = spawnSync7("gh", ["auth", "login", "--web"], { stdio: "inherit" });
+  const r = spawnSync12("gh", ["auth", "login", "--web"], { stdio: "inherit" });
   if (r.status !== 0) {
     log.warn(`gh auth login exit ${r.status}. C\xF3 th\u1EC3 ch\u1EA1y tay r\u1ED3i quay l\u1EA1i retry.`);
   }
 }
 async function copyInfoToClipboardWithConsent(info) {
-  const ok = await confirm2({
+  const ok = await confirm4({
     message: "Copy th\xF4ng tin (GitHub username + email) v\xE0o clipboard \u0111\u1EC3 d\xE1n v\xE0o Slack/email?",
     default: true
   });
@@ -1400,7 +2017,7 @@ function printAccessWarningBox(repoSlug, ghUser, ssoEmail) {
     `${chalk.dim("Li\xEAn h\u1EC7:")} luke@nal.vn (Slack #avatar-setup)`
   ];
   process.stdout.write(
-    `${boxen2(lines.join("\n"), { padding: 1, borderColor: "red", borderStyle: "round" })}
+    `${boxen3(lines.join("\n"), { padding: 1, borderColor: "red", borderStyle: "round" })}
 `
   );
 }
@@ -1505,7 +2122,7 @@ async function addTeamPackSubmodule(projectRoot, tag, ssoEmail) {
   }
   let target = tag ?? null;
   if (!target) {
-    target = await latestTag(join12(projectRoot, TEAM_PACK_RELATIVE_PATH));
+    target = await latestTag(join16(projectRoot, TEAM_PACK_RELATIVE_PATH));
   }
   if (target) {
     await checkoutTagInSubmodule(TEAM_PACK_RELATIVE_PATH, target, projectRoot);
@@ -1513,7 +2130,7 @@ async function addTeamPackSubmodule(projectRoot, tag, ssoEmail) {
   return { pinnedTag: target };
 }
 async function readPinnedPackVersion(projectRoot) {
-  const submoduleRoot = join12(projectRoot, TEAM_PACK_RELATIVE_PATH);
+  const submoduleRoot = join16(projectRoot, TEAM_PACK_RELATIVE_PATH);
   const tag = await latestTag(submoduleRoot);
   if (tag) return tag;
   const sha = await currentCommitSha(submoduleRoot);
@@ -1527,14 +2144,14 @@ function isSshPermissionError(message) {
 }
 function triggerGhAuthLoginInteractive2() {
   log.info("M\u1EDF browser \u0111\u1EC3 switch GitHub account...");
-  const r = spawnSync8("gh", ["auth", "login", "--web"], { stdio: "inherit" });
+  const r = spawnSync13("gh", ["auth", "login", "--web"], { stdio: "inherit" });
   if (r.status !== 0) {
     log.warn(`gh auth login exit ${r.status}. C\xF3 th\u1EC3 ch\u1EA1y tay r\u1ED3i quay l\u1EA1i retry.`);
   }
 }
 function openGithubSshKeysPage() {
   log.info("M\u1EDF trang GitHub Settings \u2192 SSH Keys...");
-  const r = spawnSync8("open", ["https://github.com/settings/keys"], { stdio: "ignore" });
+  const r = spawnSync13("open", ["https://github.com/settings/keys"], { stdio: "ignore" });
   if (r.status !== 0) {
     log.info("URL: https://github.com/settings/keys");
   }
@@ -1684,7 +2301,7 @@ ${renderAvatarBanner(opts)}
 }
 
 // src/lib/execute-gh-repo-create.ts
-import { spawnSync as spawnSync9 } from "child_process";
+import { spawnSync as spawnSync14 } from "child_process";
 var RepoAlreadyExistsError = class extends Error {
   constructor(fullName) {
     super(`Repo "${fullName}" \u0111\xE3 t\u1ED3n t\u1EA1i tr\xEAn GitHub. \u0110\u1ED5i t\xEAn ho\u1EB7c x\xF3a repo c\u0169.`);
@@ -1704,7 +2321,7 @@ function executeGhRepoCreate(input6) {
     "origin",
     "--push"
   ];
-  const r = spawnSync9("gh", args, { stdio: "inherit" });
+  const r = spawnSync14("gh", args, { stdio: "inherit" });
   if (r.status !== 0) {
     if (r.status === 1) {
       throw new RepoAlreadyExistsError(fullName);
@@ -1718,9 +2335,9 @@ function executeGhRepoCreate(input6) {
 }
 
 // src/lib/resolve-github-username-default.ts
-import { spawnSync as spawnSync10 } from "child_process";
+import { spawnSync as spawnSync15 } from "child_process";
 function resolveGithubUsernameDefault() {
-  const r = spawnSync10("gh", ["api", "user", "--jq", ".login"], {
+  const r = spawnSync15("gh", ["api", "user", "--jq", ".login"], {
     encoding: "utf8",
     stdio: ["ignore", "pipe", "pipe"]
   });
@@ -1768,12 +2385,12 @@ function createGithubRemoteFromFolder(input6) {
 }
 
 // src/lib/create-workspace-remote-via-gh.ts
-import { spawnSync as spawnSync18 } from "child_process";
+import { spawnSync as spawnSync23 } from "child_process";
 
 // src/lib/check-gh-cli-auth-status.ts
-import { spawnSync as spawnSync11 } from "child_process";
+import { spawnSync as spawnSync16 } from "child_process";
 function checkGhCliAuthStatus() {
-  const r = spawnSync11("gh", ["auth", "status"], { stdio: "ignore" });
+  const r = spawnSync16("gh", ["auth", "status"], { stdio: "ignore" });
   if (r.error && r.error.code === "ENOENT") {
     return "not-installed";
   }
@@ -1781,12 +2398,12 @@ function checkGhCliAuthStatus() {
 }
 
 // src/lib/detect-package-manager.ts
-import { spawnSync as spawnSync12 } from "child_process";
+import { spawnSync as spawnSync17 } from "child_process";
 function hasBinary(name) {
   const platform2 = detectHostPlatform();
   const probe = platform2 === "win32" ? "where" : "command";
   const args = platform2 === "win32" ? [name] : ["-v", name];
-  const r = spawnSync12(probe, args, {
+  const r = spawnSync17(probe, args, {
     shell: platform2 !== "win32",
     stdio: "ignore"
   });
@@ -1802,11 +2419,11 @@ function detectPackageManager() {
 }
 
 // src/lib/handle-remote-access-failure-with-account-switch.ts
-import { spawnSync as spawnSync14 } from "child_process";
+import { spawnSync as spawnSync19 } from "child_process";
 import { input as input4, select as select6 } from "@inquirer/prompts";
 
 // src/lib/verify-git-remote-accessible.ts
-import { spawnSync as spawnSync13 } from "child_process";
+import { spawnSync as spawnSync18 } from "child_process";
 var TIMEOUT_MS = 5e3;
 function classifyRemoteError(stderr) {
   const text = stderr.toLowerCase();
@@ -1822,7 +2439,7 @@ function classifyRemoteError(stderr) {
   return "unknown";
 }
 function tryVerifyGitRemoteAccessible(url) {
-  const r = spawnSync13("git", ["ls-remote", "--exit-code", url, "HEAD"], {
+  const r = spawnSync18("git", ["ls-remote", "--exit-code", url, "HEAD"], {
     encoding: "utf8",
     timeout: TIMEOUT_MS,
     stdio: ["ignore", "pipe", "pipe"]
@@ -1844,7 +2461,7 @@ var RemoteAccessAbortedError = class extends Error {
   }
 };
 function getCurrentGhUser2() {
-  const r = spawnSync14("gh", ["api", "user", "--jq", ".login"], {
+  const r = spawnSync19("gh", ["api", "user", "--jq", ".login"], {
     encoding: "utf8",
     stdio: ["ignore", "pipe", "pipe"]
   });
@@ -1853,7 +2470,7 @@ function getCurrentGhUser2() {
 }
 function triggerGhAuthLoginInteractive3() {
   log.info("M\u1EDF browser \u0111\u1EC3 switch GitHub account...");
-  const r = spawnSync14("gh", ["auth", "login", "--web"], { stdio: "inherit" });
+  const r = spawnSync19("gh", ["auth", "login", "--web"], { stdio: "inherit" });
   if (r.status !== 0) {
     log.warn(`gh auth login exit ${r.status}. B\u1EA1n c\xF3 th\u1EC3 ch\u1EA1y tay r\u1ED3i quay l\u1EA1i retry.`);
   }
@@ -1936,7 +2553,7 @@ async function handleRemoteAccessFailureWithAccountSwitch(args) {
 }
 
 // src/lib/install-gh-cli-via-package-manager.ts
-import { spawnSync as spawnSync15 } from "child_process";
+import { spawnSync as spawnSync20 } from "child_process";
 var INSTALL_COMMANDS = {
   brew: { cmd: "brew", args: ["install", "gh"] },
   apt: { cmd: "sudo", args: ["apt-get", "install", "-y", "gh"] },
@@ -1947,7 +2564,7 @@ var INSTALL_COMMANDS = {
 function installGhCliViaPackageManager(pm) {
   const spec = INSTALL_COMMANDS[pm];
   log.info(`\u0110ang c\xE0i gh CLI qua ${pm}...`);
-  const r = spawnSync15(spec.cmd, spec.args, { stdio: "inherit" });
+  const r = spawnSync20(spec.cmd, spec.args, { stdio: "inherit" });
   if (r.status !== 0) {
     throw new Error(`C\xE0i gh CLI th\u1EA5t b\u1EA1i qua ${pm} (exit ${r.status}). C\xE0i tay r\u1ED3i ch\u1EA1y l\u1EA1i.`);
   }
@@ -1955,9 +2572,9 @@ function installGhCliViaPackageManager(pm) {
 }
 
 // src/lib/setup-git-credential-via-gh.ts
-import { spawnSync as spawnSync16 } from "child_process";
+import { spawnSync as spawnSync21 } from "child_process";
 function setupGitCredentialViaGh() {
-  const r = spawnSync16("gh", ["auth", "setup-git"], { stdio: "ignore" });
+  const r = spawnSync21("gh", ["auth", "setup-git"], { stdio: "ignore" });
   if (r.status !== 0) {
     log.warn("gh auth setup-git fail (non-fatal). N\u1EBFu git clone l\u1ED7i 128 \u2192 ch\u1EA1y th\u1EE7 c\xF4ng.");
     return;
@@ -1966,10 +2583,10 @@ function setupGitCredentialViaGh() {
 }
 
 // src/lib/trigger-gh-cli-auth-login.ts
-import { spawnSync as spawnSync17 } from "child_process";
+import { spawnSync as spawnSync22 } from "child_process";
 function triggerGhCliAuthLogin() {
   log.info("Kh\u1EDFi \u0111\u1ED9ng \u0111\u0103ng nh\u1EADp GitHub qua gh CLI (browser s\u1EBD m\u1EDF)...");
-  const r = spawnSync17(
+  const r = spawnSync22(
     "gh",
     ["auth", "login", "--hostname", "github.com", "--web", "--git-protocol", "ssh"],
     { stdio: "inherit" }
@@ -2087,20 +2704,20 @@ function classifyGhCreateError(stderr) {
   return "unknown";
 }
 function repoExistsOnGitHub(fullName) {
-  const r = spawnSync18("gh", ["repo", "view", fullName, "--json", "name"], {
+  const r = spawnSync23("gh", ["repo", "view", fullName, "--json", "name"], {
     stdio: "ignore"
   });
   return r.status === 0;
 }
 function canCreateInNamespace(org, ghUser) {
   if (org.toLowerCase() === ghUser.toLowerCase()) return { ok: true };
-  const r = spawnSync18("gh", ["api", `orgs/${org}/members/${ghUser}`, "--silent"], {
+  const r = spawnSync23("gh", ["api", `orgs/${org}/members/${ghUser}`, "--silent"], {
     stdio: "ignore"
   });
   if (r.status === 0) return { ok: true };
-  const orgCheck = spawnSync18("gh", ["api", `orgs/${org}`, "--silent"], { stdio: "ignore" });
+  const orgCheck = spawnSync23("gh", ["api", `orgs/${org}`, "--silent"], { stdio: "ignore" });
   if (orgCheck.status !== 0) {
-    const userCheck = spawnSync18("gh", ["api", `users/${org}`, "--silent"], { stdio: "ignore" });
+    const userCheck = spawnSync23("gh", ["api", `users/${org}`, "--silent"], { stdio: "ignore" });
     if (userCheck.status === 0) {
       return {
         ok: false,
@@ -2136,7 +2753,7 @@ async function createWorkspaceRemoteViaGh(input6) {
     );
   }
   log.info(`T\u1EA1o GitHub repo cho workspace: ${fullName} (${input6.visibility})...`);
-  const r = spawnSync18(
+  const r = spawnSync23(
     "gh",
     [
       "repo",
@@ -2177,7 +2794,7 @@ ${combined}
 function linkExistingRemoteToWorkspace(args) {
   const sshUrl = `git@github.com:${args.fullName}.git`;
   const httpsUrl = `https://github.com/${args.fullName}.git`;
-  const addResult = spawnSync18(
+  const addResult = spawnSync23(
     "git",
     ["-C", args.workspacePath, "remote", "add", "origin", sshUrl],
     {
@@ -2186,7 +2803,7 @@ function linkExistingRemoteToWorkspace(args) {
     }
   );
   if (addResult.status !== 0) {
-    spawnSync18("git", ["-C", args.workspacePath, "remote", "set-url", "origin", sshUrl], {
+    spawnSync23("git", ["-C", args.workspacePath, "remote", "set-url", "origin", sshUrl], {
       stdio: "ignore"
     });
   }
@@ -2200,11 +2817,11 @@ import { select as select7 } from "@inquirer/prompts";
 import { simpleGit as simpleGit3 } from "simple-git";
 
 // src/lib/check-folder-has-git.ts
-import { existsSync as existsSync4, statSync } from "fs";
-import { join as join13 } from "path";
+import { existsSync as existsSync6, statSync } from "fs";
+import { join as join17 } from "path";
 function checkFolderHasGit(folderPath) {
-  const gitPath = join13(folderPath, ".git");
-  if (!existsSync4(gitPath)) return false;
+  const gitPath = join17(folderPath, ".git");
+  if (!existsSync6(gitPath)) return false;
   const stat = statSync(gitPath);
   return stat.isDirectory() || stat.isFile();
 }
@@ -2234,8 +2851,8 @@ async function createInitialGitCommit(folderPath) {
 }
 
 // src/lib/detect-folder-tech-stack.ts
-import { existsSync as existsSync5 } from "fs";
-import { join as join14 } from "path";
+import { existsSync as existsSync7 } from "fs";
+import { join as join18 } from "path";
 var SIGNATURES = {
   node: ["package.json"],
   python: ["pyproject.toml", "requirements.txt", "setup.py", "Pipfile"],
@@ -2247,7 +2864,7 @@ var SIGNATURES = {
 function detectFolderTechStack(folderPath) {
   const matched = [];
   for (const [stack, files] of Object.entries(SIGNATURES)) {
-    if (files.some((f) => existsSync5(join14(folderPath, f)))) {
+    if (files.some((f) => existsSync7(join18(folderPath, f)))) {
       matched.push(stack);
     }
   }
@@ -2256,25 +2873,25 @@ function detectFolderTechStack(folderPath) {
 
 // src/lib/gitignore-template-loader.ts
 import { readFileSync as readFileSync3 } from "fs";
-import { dirname as dirname4, join as join15 } from "path";
+import { dirname as dirname4, join as join19 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var __dirname = dirname4(fileURLToPath2(import.meta.url));
 var CANDIDATE_DIRS = [
   // Bundled production: dist/index.js → __dirname = .../dist/, sibling dist/templates
-  join15(__dirname, "templates", "gitignore"),
+  join19(__dirname, "templates", "gitignore"),
   // Legacy bundled: nếu file là dist/lib/*.js (sub-bundle), templates ở dist/templates
-  join15(__dirname, "..", "templates", "gitignore"),
+  join19(__dirname, "..", "templates", "gitignore"),
   // Dev mode (vitest/tsx run src/ trực tiếp): __dirname = src/lib/
-  join15(__dirname, "..", "..", "src", "templates", "gitignore"),
+  join19(__dirname, "..", "..", "src", "templates", "gitignore"),
   // npm-installed alt: __dirname = .../dist/ → package_root/src/templates
-  join15(__dirname, "..", "src", "templates", "gitignore")
+  join19(__dirname, "..", "src", "templates", "gitignore")
 ];
 var AVATAR_MARKER_START = "# === avatar ===";
 var AVATAR_MARKER_END = "# === /avatar ===";
 function readTemplate(stack) {
   for (const dir of CANDIDATE_DIRS) {
     try {
-      return readFileSync3(join15(dir, `${stack}.txt`), "utf8");
+      return readFileSync3(join19(dir, `${stack}.txt`), "utf8");
     } catch {
     }
   }
@@ -2288,11 +2905,11 @@ ${readTemplate(s).trim()}`);
 }
 
 // src/lib/write-or-merge-gitignore.ts
-import { existsSync as existsSync6, readFileSync as readFileSync4, writeFileSync } from "fs";
-import { join as join16 } from "path";
+import { existsSync as existsSync8, readFileSync as readFileSync4, writeFileSync } from "fs";
+import { join as join20 } from "path";
 function writeOrMergeGitignore(folderPath, avatarBlock) {
-  const path = join16(folderPath, ".gitignore");
-  if (!existsSync6(path)) {
+  const path = join20(folderPath, ".gitignore");
+  if (!existsSync8(path)) {
     writeFileSync(path, avatarBlock, "utf8");
     return;
   }
@@ -2468,7 +3085,7 @@ async function safeBootstrapGitInFolder(folderPath, opts = {}) {
 
 // src/commands/init-conflict-detection-helpers.ts
 import { readdir } from "fs/promises";
-import { join as join17 } from "path";
+import { join as join21 } from "path";
 async function isEmptyOrMissing(path) {
   if (!await pathExists(path)) return true;
   try {
@@ -2481,7 +3098,7 @@ async function isEmptyOrMissing(path) {
 }
 async function findAlternativeWorkspaceName(parent, desiredName, maxAttempts = 10) {
   for (let i = 2; i < maxAttempts; i++) {
-    const candidate = join17(parent, `${desiredName}-${i}`);
+    const candidate = join21(parent, `${desiredName}-${i}`);
     if (await isEmptyOrMissing(candidate)) return candidate;
   }
   return null;
@@ -2497,6 +3114,38 @@ function inferWorkspaceName(repoUrl) {
   const withoutPrefix = baseName.replace(/^avatar-/, "");
   return `avatar-${withoutPrefix}-workspace`;
 }
+function buildGitnexusSection(gitnexusReady) {
+  if (!gitnexusReady) return "";
+  return `
+### \u{1F9E0} CODEBASE INTELLIGENCE \u2014 GitNexus
+
+Workspace c\xF3 GitNexus index t\u1EA1i \`.gitnexus/\` cung c\u1EA5p architectural awareness
+cho Claude Code (impact analysis, call chains, blast radius).
+
+**H\u01B0\u1EDBng d\u1EABn cho Claude:**
+
+- Khi c\u1EA7n hi\u1EC3u codebase architecture (vd: tr\u01B0\u1EDBc refactor, debug call chain) \u2192
+  query GitNexus MCP resource \`gitnexus://repo/<name>/context\`
+- Khi resource tr\u1EA3 staleness hint "\u26A0\uFE0F Index is N commit(s) behind HEAD" \u2192
+  T\u1EF0 ch\u1EA1y \`gitnexus analyze .\` (trong workspace root) tr\u01B0\u1EDBc khi ti\u1EBFp t\u1EE5c task
+- Sau khi \`gitnexus analyze\` xong: **KH\xD4NG t\u1EF1 ch\u1EA1y \`gitnexus wiki\`**
+  (cost cao, c\xF3 th\u1EC3 block session 2-5 ph\xFAt) \u2014 user s\u1EBD ch\u1EA1y manual khi c\u1EA7n
+
+**Folders Claude scan auto cho skills:**
+
+- \`~/.claude/skills/gitnexus-*/\` \u2014 GitNexus global skills (exploring, debugging, ...)
+- \`.claude/pack/skills/\` \u2014 NAL team-shared skills (qua team-ai-pack submodule)
+- C\u1EA3 2 \u0111\u1EC1u \u0111\u01B0\u1EE3c scan, kh\xF4ng xung \u0111\u1ED9t (different naming prefix)
+
+**Manual wiki update:**
+
+Khi user c\u1EA7n regenerate wiki sau refactor l\u1EDBn \u2014 ch\u1EA1y:
+
+\`\`\`bash
+gitnexus wiki . --api-key <key> --base-url <url>
+\`\`\`
+`;
+}
 function buildScaffoldVariables(args) {
   return {
     projectName: args.projectName,
@@ -2505,12 +3154,13 @@ function buildScaffoldVariables(args) {
     avatarVersion: AVATAR_CLI_VERSION,
     packVersion: args.packVersion,
     lastScan: (/* @__PURE__ */ new Date()).toISOString(),
-    mode: args.mode
+    mode: args.mode,
+    gitnexusSection: buildGitnexusSection(args.gitnexusReady ?? false)
   };
 }
 
 // src/commands/login.ts
-import boxen3 from "boxen";
+import boxen4 from "boxen";
 import open from "open";
 
 // src/lib/google-oauth-device-flow.ts
@@ -2657,7 +3307,7 @@ async function runLogin(opts) {
     "",
     `Ho\u1EB7c Avatar t\u1EF1 m\u1EDF browser, click ${chalk.green("Allow")}...`
   ].join("\n");
-  process.stdout.write(`${boxen3(instructions, { padding: 1, borderStyle: "round" })}
+  process.stdout.write(`${boxen4(instructions, { padding: 1, borderStyle: "round" })}
 `);
   void open(verificationUrl).catch(() => {
     log.dim("(Kh\xF4ng m\u1EDF \u0111\u01B0\u1EE3c browser t\u1EF1 \u0111\u1ED9ng \u2014 copy URL \u1EDF tr\xEAn)");
@@ -2713,6 +3363,9 @@ function parseBootstrapStrategyOpts(opts) {
 }
 function registerInitCommand(program2) {
   program2.command("init").description("Kh\u1EDFi t\u1EA1o Avatar \u2014 3 flow t\u1EF1 nh\u1EADn di\u1EC7n (repo / folder / new)").option("--project-status <val>", "existing-remote | existing-folder | new-project").option("--folder-path <path>", "\u0110\u01B0\u1EDDng d\u1EABn folder hi\u1EC7n c\xF3 (flow existing-folder)").option("--create-remote", "Force t\u1EA1o remote qua gh (flow existing-folder ho\u1EB7c new-project)").option("--repo-visibility <val>", "private (m\u1EB7c \u0111\u1ECBnh) | public").option("--repo-org <name>", "GitHub org/owner cho repo m\u1EDBi").option("--client-repo <url>", "URL git remote (flow existing-remote)").option("--workspace-name <name>", "T\xEAn workspace").option("--workspace-parent <path>", "Th\u01B0 m\u1EE5c cha t\u1EA1o workspace (m\u1EB7c \u0111\u1ECBnh . \u2014 CWD)").option("--pack-version <tag>", "Pin team-ai-pack v\xE0o tag c\u1EE5 th\u1EC3").option("--team-owner <email>", "Email team owner (b\u1ECF qua prompt)").option("--description <text>", "M\xF4 t\u1EA3 1 d\xF2ng c\u1EE7a d\u1EF1 \xE1n").option("--skip-scan", "B\u1ECF qua project-scanner sau scaffold").option("--skip-team-pack", "B\u1ECF qua submodule team-ai-pack (test mode)").option("--force", "B\u1ECF qua prompt khi workspace path \u0111\xE3 t\u1ED3n t\u1EA1i").option("--yes", "Auto-confirm t\u1EA5t c\u1EA3 prompt").option("--no-commit", "Skip commit workspace initial state (m\u1EB7c \u0111\u1ECBnh LU\xD4N commit)").option("--workspace-remote", "T\u1EA1o GitHub remote cho workspace root (default: prompt)").option("--ai-skip", "B\u1ECF qua phase AI setup (CI/test mode \u2014 ch\u1EA1y `avatar ai setup` sau)").option(
+    "--gitnexus-skip",
+    "B\u1ECF qua phase GitNexus setup (M10 \u2014 ch\u1EA1y `avatar gitnexus install` sau)"
+  ).option(
     "--bootstrap-strategy <s>",
     "X\u1EED l\xFD folder dirty: stash | commit-all | skip | branch (default: prompt)"
   ).option("--preserve-uncommitted", "Alias cho --bootstrap-strategy=stash (gi\u1EEF changes user)").option("--mode <mode>", "[DEPRECATED] D\xF9ng --project-status thay th\u1EBF").action(async (opts) => {
@@ -2818,6 +3471,7 @@ async function runInitFromExistingRemote(opts, ownerEmail) {
     repoOrg: opts.repoOrg,
     flow: "existing-remote",
     aiSkip: opts.aiSkip,
+    gitnexusSkip: opts.gitnexusSkip,
     ssoEmail: ownerEmail
   });
 }
@@ -2854,6 +3508,7 @@ async function runInitFromExistingFolder(opts, ownerEmail) {
     repoOrg: opts.repoOrg,
     flow: "existing-folder",
     aiSkip: opts.aiSkip,
+    gitnexusSkip: opts.gitnexusSkip,
     ssoEmail: ownerEmail
   });
 }
@@ -2873,7 +3528,7 @@ async function runInitFromScratch(opts, ownerEmail) {
   const teamOwner = opts.teamOwner ?? await promptTeamOwner(ownerEmail);
   const workspaceParent = resolve(opts.workspaceParent ?? ".");
   const workspacePath = await resolveWorkspacePath(workspaceParent, projectName, opts.force);
-  const srcPath = join18(workspacePath, "src");
+  const srcPath = join22(workspacePath, "src");
   await ensureDir(workspacePath);
   await ensureDir(srcPath);
   await safeBootstrapGitInFolder(srcPath, { autoYes: true });
@@ -2914,7 +3569,8 @@ async function runInitFromScratch(opts, ownerEmail) {
       repoVisibility: opts.repoVisibility,
       repoOrg: opts.repoOrg,
       flow: "new-project",
-      aiSkip: opts.aiSkip
+      aiSkip: opts.aiSkip,
+      gitnexusSkip: opts.gitnexusSkip
     });
   } catch (err) {
     sp.fail("Init workspace th\u1EA5t b\u1EA1i");
@@ -2928,7 +3584,7 @@ async function getOrCreateOriginRemote(folderPath, opts) {
     log.success(`Folder \u0111\xE3 c\xF3 remote origin: ${origin.refs.push}`);
     return origin.refs.push;
   }
-  const shouldCreate = opts.createRemote ?? await confirm3({
+  const shouldCreate = opts.createRemote ?? await confirm5({
     message: "Folder ch\u01B0a c\xF3 remote. T\u1EA1o GitHub repo ngay \u0111\u1EC3 share team?",
     default: true
   });
@@ -2989,7 +3645,8 @@ async function scaffoldWorkspaceWithSrcSubmodule(args) {
       repoVisibility: args.repoVisibility,
       repoOrg: args.repoOrg,
       flow: args.flow,
-      aiSkip: args.aiSkip
+      aiSkip: args.aiSkip,
+      gitnexusSkip: args.gitnexusSkip
     });
   } catch (err) {
     sp.fail("Init workspace th\u1EA5t b\u1EA1i");
@@ -3009,10 +3666,10 @@ async function finalizeWorkspaceScaffold(args) {
   await writeRootClaudeMd(args.workspacePath, vars);
   await writeProjectSettings(args.workspacePath, vars);
   await appendGitignoreEntries(args.workspacePath);
-  await ensureDir(join18(args.workspacePath, "notes"));
-  await ensureDir(join18(args.workspacePath, "scripts"));
-  await installGitHook(join18(args.workspacePath, ".git"), "post-merge");
-  await installGitHook(join18(args.workspacePath, ".git", "modules", "src"), "pre-push");
+  await ensureDir(join22(args.workspacePath, "notes"));
+  await ensureDir(join22(args.workspacePath, "scripts"));
+  await installGitHook(join22(args.workspacePath, ".git"), "post-merge");
+  await installGitHook(join22(args.workspacePath, ".git", "modules", "src"), "pre-push");
   log.success("C\xE0i post-merge (workspace) + pre-push (src/)");
   await appendAuditEntry("init", `flow=${args.flow},workspace=${args.workspaceName}`);
   await maybeCommitWorkspace(args.workspacePath, args.skipCommit);
@@ -3023,7 +3680,30 @@ async function finalizeWorkspaceScaffold(args) {
   } else {
     aiResult = await runAiSetupPhase({ workspacePath: args.workspacePath });
   }
-  printInitSuccessBox(args.workspacePath, args.flow, aiResult);
+  let gitnexusResult = null;
+  const skipGitnexus = args.aiSkip || args.gitnexusSkip;
+  if (skipGitnexus) {
+    if (args.gitnexusSkip) {
+      log.dim("B\u1ECF qua GitNexus setup (--gitnexus-skip). Setup sau: avatar gitnexus install");
+    } else {
+      log.dim("B\u1ECF qua GitNexus setup (auto-skip do --ai-skip).");
+    }
+  } else {
+    gitnexusResult = await runGitnexusSetupPhase({ workspacePath: args.workspacePath });
+  }
+  if (gitnexusResult?.ok) {
+    const updatedVars = buildScaffoldVariables({
+      projectName: args.workspaceName,
+      projectDescription: args.description,
+      teamOwner: args.teamOwner,
+      packVersion: args.packVersion,
+      mode: "client",
+      gitnexusReady: true
+    });
+    await writeRootClaudeMd(args.workspacePath, updatedVars);
+    log.dim("Updated CLAUDE.md v\u1EDBi GitNexus section");
+  }
+  printInitSuccessBox(args.workspacePath, args.flow, aiResult, gitnexusResult);
 }
 async function maybeCreateWorkspaceRemote(args) {
   if (args.skipCommit) {
@@ -3033,7 +3713,7 @@ async function maybeCreateWorkspaceRemote(args) {
   let shouldCreate = args.createWorkspaceRemote;
   if (shouldCreate === void 0) {
     if (args.autoYes) return;
-    shouldCreate = await confirm3({
+    shouldCreate = await confirm5({
       message: "T\u1EA1o remote GitHub cho workspace \u0111\u1EC3 share team? (Avatar state)",
       default: false
     });
@@ -3112,7 +3792,7 @@ async function maybeCreateWorkspaceRemote(args) {
   }
 }
 async function resolveWorkspacePath(parent, desiredName, force) {
-  const desired = join18(parent, desiredName);
+  const desired = join22(parent, desiredName);
   if (await isEmptyOrMissing(desired)) return desired;
   log.warn(`Workspace path "${desired}" \u0111\xE3 c\xF3 n\u1ED9i dung.`);
   while (true) {
@@ -3143,7 +3823,7 @@ async function resolveWorkspacePath(parent, desiredName, force) {
       message: "T\xEAn workspace m\u1EDBi:",
       validate: (v) => v.trim().length > 0 ? true : "T\xEAn kh\xF4ng \u0111\u01B0\u1EE3c r\u1ED7ng"
     });
-    const newPath = join18(parent, newName.trim());
+    const newPath = join22(parent, newName.trim());
     if (await isEmptyOrMissing(newPath)) return newPath;
     log.warn(`"${newPath}" c\u0169ng \u0111\xE3 c\xF3 n\u1ED9i dung. Th\u1EED t\xEAn kh\xE1c.`);
   }
@@ -3171,21 +3851,34 @@ function formatAiStatusLine(aiResult) {
   }
   return `  ${chalk.yellow("AI:")} failed (${aiResult.reason.slice(0, 60)}) \xB7 th\u1EED ${chalk.cyan("avatar ai setup")}`;
 }
-function printInitSuccessBox(rootPath, flow, aiResult = null) {
+function formatGitnexusStatusLine(result) {
+  if (result === null) {
+    return `  ${chalk.yellow("GitNexus:")} skipped \xB7 ${chalk.cyan("avatar gitnexus install")} \u0111\u1EC3 setup sau`;
+  }
+  if (result.ok) {
+    const parts = ["ready"];
+    if (result.analyzed) parts.push("indexed");
+    if (result.wikiGenerated) parts.push("wiki");
+    if (result.mcpRegistered) parts.push("mcp");
+    return `  ${chalk.green("GitNexus:")} ${parts.join(" \xB7 ")}`;
+  }
+  return `  ${chalk.yellow("GitNexus:")} skipped (${(result.reason ?? "unknown").slice(0, 40)}) \xB7 th\u1EED ${chalk.cyan("avatar gitnexus install")}`;
+}
+function printInitSuccessBox(rootPath, flow, aiResult = null, gitnexusResult = null) {
   const lines = [
     `${chalk.green("\u2713")} Workspace s\u1EB5n s\xE0ng: ${relative2(process.cwd(), rootPath) || rootPath}`,
     `  ${chalk.dim(`(flow: ${flow})`)}`,
     formatAiStatusLine(aiResult),
+    formatGitnexusStatusLine(gitnexusResult),
     "",
     `  ${chalk.cyan(`cd ${rootPath}`)}`,
     `  ${chalk.cyan("claude")}                    M\u1EDF Claude Code \u1EDF workspace root`,
     "",
-    `  ${chalk.cyan("avatar commit --src")}       Commit code l\xEAn remote src`,
-    `  ${chalk.cyan("avatar commit --avatar")}    Commit Avatar state`,
+    `  ${chalk.cyan("avatar commit src")}         Commit code l\xEAn client remote`,
     `  ${chalk.cyan("avatar sync")}               Pull team-ai-pack m\u1EDBi`,
     `  ${chalk.cyan("avatar uninstall")}          G\u1EE1 Avatar (gi\u1EEF code)`
   ];
-  process.stdout.write(`${boxen4(lines.join("\n"), { padding: 1, borderStyle: "round" })}
+  process.stdout.write(`${boxen5(lines.join("\n"), { padding: 1, borderStyle: "round" })}
 `);
 }
 
@@ -3236,18 +3929,18 @@ function registerSecretsCommand(program2) {
 }
 
 // src/commands/status.ts
-import { promises as fs8 } from "fs";
-import { join as join20 } from "path";
-import boxen5 from "boxen";
+import { promises as fs10 } from "fs";
+import { join as join24 } from "path";
+import boxen6 from "boxen";
 
 // src/lib/pack-backup-manager.ts
-import { promises as fs7 } from "fs";
-import { join as join19 } from "path";
+import { promises as fs9 } from "fs";
+import { join as join23 } from "path";
 var BACKUP_DIR_NAME = "_backup";
 async function listBackups(projectRoot) {
-  const dir = join19(projectRoot, ".claude", BACKUP_DIR_NAME);
+  const dir = join23(projectRoot, ".claude", BACKUP_DIR_NAME);
   if (!await pathExists(dir)) return [];
-  const entries = await fs7.readdir(dir, { withFileTypes: true });
+  const entries = await fs9.readdir(dir, { withFileTypes: true });
   return entries.filter((e) => e.isDirectory()).map((e) => e.name).sort().reverse();
 }
 
@@ -3271,7 +3964,7 @@ function registerStatusCommand(program2) {
 }
 async function gatherStatus(cwd) {
   const projectName = cwd.split("/").filter(Boolean).pop() ?? "unknown";
-  const claudeRoot = join20(cwd, ".claude");
+  const claudeRoot = join24(cwd, ".claude");
   const hasAvatar = await pathExists(claudeRoot);
   if (!hasAvatar) {
     return {
@@ -3284,9 +3977,9 @@ async function gatherStatus(cwd) {
       hasAvatar: false
     };
   }
-  const packVersion = await isGitRepo(join20(claudeRoot, "pack")) ? await readPinnedPackVersion(cwd).catch(() => null) : null;
-  const pendingDir = join20(claudeRoot, "_pending");
-  const pendingCount = await pathExists(pendingDir) ? (await fs8.readdir(pendingDir)).filter((n) => n.endsWith(".diff.md")).length : 0;
+  const packVersion = await isGitRepo(join24(claudeRoot, "pack")) ? await readPinnedPackVersion(cwd).catch(() => null) : null;
+  const pendingDir = join24(claudeRoot, "_pending");
+  const pendingCount = await pathExists(pendingDir) ? (await fs10.readdir(pendingDir)).filter((n) => n.endsWith(".diff.md")).length : 0;
   const backupCount = (await listBackups(cwd)).length;
   const techStackSummary = await readTechStackFirstLine(claudeRoot);
   return {
@@ -3300,7 +3993,7 @@ async function gatherStatus(cwd) {
   };
 }
 async function readTechStackFirstLine(claudeRoot) {
-  const techStackPath = join20(claudeRoot, "project", "tech-stack.md");
+  const techStackPath = join24(claudeRoot, "project", "tech-stack.md");
   if (!await pathExists(techStackPath)) return "(no tech-stack.md)";
   const content = await readText(techStackPath);
   const firstNonHeaderLine = content.split("\n").find((l) => l.trim() && !l.startsWith("#") && !l.startsWith(">"));
@@ -3316,7 +4009,7 @@ function renderStatusBox(s) {
     `${chalk.dim("Backups:")}            ${s.backupCount}`,
     `${chalk.dim("Tech stack:")}         ${s.techStackSummary}`
   ];
-  process.stdout.write(`${boxen5(lines.join("\n"), { padding: 1, borderStyle: "round" })}
+  process.stdout.write(`${boxen6(lines.join("\n"), { padding: 1, borderStyle: "round" })}
 `);
 }
 
@@ -3335,33 +4028,33 @@ function registerToolsCommand(program2) {
 
 // src/commands/uninstall.ts
 import { relative as relative3 } from "path";
-import { confirm as confirm4 } from "@inquirer/prompts";
-import boxen6 from "boxen";
+import { confirm as confirm6 } from "@inquirer/prompts";
+import boxen7 from "boxen";
 
 // src/lib/create-uninstall-backup-snapshot.ts
 import { cp, mkdir, writeFile } from "fs/promises";
-import { homedir as homedir3 } from "os";
-import { basename as basename2, join as join21 } from "path";
-var UNINSTALL_BACKUPS_DIR = join21(homedir3(), ".avatar", "uninstall-backups");
+import { homedir as homedir4 } from "os";
+import { basename as basename2, join as join25 } from "path";
+var UNINSTALL_BACKUPS_DIR = join25(homedir4(), ".avatar", "uninstall-backups");
 async function createUninstallBackupSnapshot(projectRoot, artifacts, avatarVersion) {
   const projectName = basename2(projectRoot);
   const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-  const backupDir = join21(UNINSTALL_BACKUPS_DIR, `${projectName}-${timestamp}`);
+  const backupDir = join25(UNINSTALL_BACKUPS_DIR, `${projectName}-${timestamp}`);
   await mkdir(backupDir, { recursive: true, mode: 448 });
   if (artifacts.claudeDir) {
-    await cp(artifacts.claudeDir, join21(backupDir, ".claude"), { recursive: true });
+    await cp(artifacts.claudeDir, join25(backupDir, ".claude"), { recursive: true });
   }
   if (artifacts.claudeMd) {
-    await cp(artifacts.claudeMd, join21(backupDir, "CLAUDE.md"));
+    await cp(artifacts.claudeMd, join25(backupDir, "CLAUDE.md"));
   }
   if (artifacts.postMergeHook || artifacts.prePushHook) {
-    const hooksBackupDir = join21(backupDir, "hooks");
+    const hooksBackupDir = join25(backupDir, "hooks");
     await mkdir(hooksBackupDir, { recursive: true });
     if (artifacts.postMergeHook) {
-      await cp(artifacts.postMergeHook, join21(hooksBackupDir, "post-merge"));
+      await cp(artifacts.postMergeHook, join25(hooksBackupDir, "post-merge"));
     }
     if (artifacts.prePushHook) {
-      await cp(artifacts.prePushHook, join21(hooksBackupDir, "pre-push"));
+      await cp(artifacts.prePushHook, join25(hooksBackupDir, "pre-push"));
     }
   }
   const manifest = {
@@ -3376,27 +4069,27 @@ async function createUninstallBackupSnapshot(projectRoot, artifacts, avatarVersi
       prePushHook: !!artifacts.prePushHook
     }
   };
-  await writeFile(join21(backupDir, "manifest.json"), JSON.stringify(manifest, null, 2), "utf8");
+  await writeFile(join25(backupDir, "manifest.json"), JSON.stringify(manifest, null, 2), "utf8");
   return backupDir;
 }
 
 // src/lib/detect-avatar-project-artifacts.ts
-import { existsSync as existsSync7 } from "fs";
-import { join as join22 } from "path";
+import { existsSync as existsSync9 } from "fs";
+import { join as join26 } from "path";
 function existsOrNull(path) {
-  return existsSync7(path) ? path : null;
+  return existsSync9(path) ? path : null;
 }
 function detectAvatarProjectArtifacts(projectRoot) {
-  const claudeDir = existsOrNull(join22(projectRoot, ".claude"));
-  const claudeMd = existsOrNull(join22(projectRoot, "CLAUDE.md"));
-  const postMergeHook = existsOrNull(join22(projectRoot, ".git", "hooks", "post-merge"));
+  const claudeDir = existsOrNull(join26(projectRoot, ".claude"));
+  const claudeMd = existsOrNull(join26(projectRoot, "CLAUDE.md"));
+  const postMergeHook = existsOrNull(join26(projectRoot, ".git", "hooks", "post-merge"));
   const prePushHook = existsOrNull(
-    join22(projectRoot, ".git", "modules", "src", "hooks", "pre-push")
+    join26(projectRoot, ".git", "modules", "src", "hooks", "pre-push")
   );
-  const gitignorePath = existsOrNull(join22(projectRoot, ".gitignore"));
-  const gitmodulesPath = existsOrNull(join22(projectRoot, ".gitmodules"));
-  const notesDir = existsOrNull(join22(projectRoot, "notes"));
-  const scriptsDir = existsOrNull(join22(projectRoot, "scripts"));
+  const gitignorePath = existsOrNull(join26(projectRoot, ".gitignore"));
+  const gitmodulesPath = existsOrNull(join26(projectRoot, ".gitmodules"));
+  const notesDir = existsOrNull(join26(projectRoot, "notes"));
+  const scriptsDir = existsOrNull(join26(projectRoot, "scripts"));
   const hasAnyArtifact = !!(claudeDir || claudeMd || postMergeHook || prePushHook);
   return {
     hasAnyArtifact,
@@ -3417,11 +4110,11 @@ async function executeUninstallDeletion(artifacts, flags) {
   if (artifacts.claudeDir) {
     if (flags.keepSubmodule) {
       const { readdir: readdir2 } = await import("fs/promises");
-      const { join: join23 } = await import("path");
+      const { join: join27 } = await import("path");
       const entries = await readdir2(artifacts.claudeDir);
       for (const entry of entries) {
         if (entry === "pack") continue;
-        await rm(join23(artifacts.claudeDir, entry), { recursive: true, force: true });
+        await rm(join27(artifacts.claudeDir, entry), { recursive: true, force: true });
       }
     } else {
       await rm(artifacts.claudeDir, { recursive: true, force: true });
@@ -3490,7 +4183,7 @@ async function removeSubmoduleEntry(gitmodulesPath, submodulePath) {
 }
 
 // src/commands/uninstall.ts
-var CLI_VERSION = "1.3.3";
+var CLI_VERSION = "1.4.1";
 function registerUninstallCommand(program2) {
   program2.command("uninstall").description("G\u1EE1 Avatar kh\u1ECFi project \u2014 backup t\u1EF1 \u0111\u1ED9ng (M11)").option("--yes", "Skip confirm prompt").option("--no-backup", "Kh\xF4ng t\u1EA1o backup tr\u01B0\u1EDBc khi x\xF3a (nguy hi\u1EC3m)").option("--keep-submodule", "Gi\u1EEF submodule .claude/pack/").option("--keep-hooks", "Gi\u1EEF git hooks post-merge, pre-push").option("--dry-run", "Hi\u1EC3n th\u1ECB danh s\xE1ch s\u1EBD x\xF3a, kh\xF4ng th\u1EF1c thi").action(async (opts) => {
     try {
@@ -3514,7 +4207,7 @@ async function runUninstall(opts) {
     return;
   }
   if (!opts.yes) {
-    const ok = await confirm4({
+    const ok = await confirm6({
       message: "Ti\u1EBFp t\u1EE5c g\u1EE1 Avatar?",
       default: false
     });
@@ -3567,12 +4260,12 @@ function printUninstallSuccessBox(backupPath) {
     lines.push(`  ${chalk.dim("Backup:")} ${backupPath}`);
     lines.push(`  ${chalk.dim("Restore:")} ${chalk.cyan(`cp -r "${backupPath}"/* .`)}`);
   }
-  process.stdout.write(`${boxen6(lines.join("\n"), { padding: 1, borderStyle: "round" })}
+  process.stdout.write(`${boxen7(lines.join("\n"), { padding: 1, borderStyle: "round" })}
 `);
 }
 
 // src/index.ts
-var CLI_VERSION2 = "1.3.3";
+var CLI_VERSION2 = "1.4.1";
 var program = new Command();
 program.name("avatar").description("AI harness CLI for NAL Vietnam engineering").version(CLI_VERSION2, "-v, --version", "Hi\u1EC3n th\u1ECB phi\xEAn b\u1EA3n Avatar CLI").addHelpText(
   "beforeAll",
@@ -3599,6 +4292,7 @@ registerToolsCommand(program);
 registerSecretsCommand(program);
 registerMcpRunCommand(program);
 registerAiCommand(program);
+registerGitnexusCommand(program);
 registerUninstallCommand(program);
 program.parseAsync(process.argv).catch((err) => {
   const msg = err instanceof Error ? err.message : String(err);