@ngocsangairvds/vsaf 4.1.3 → 4.1.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ngocsangairvds/vsaf",
-  "version": "4.1.3",
+  "version": "4.1.4",
   "description": "logging step",
   "main": "packages/core/dist/index.js",
   "types": "packages/core/dist/index.d.ts",

package/skills/sdlc/hotfix-ship/SKILL.md

@@ -133,7 +133,7 @@ gh pr create --title "fix({area}): {short description}" --body "{PR body}"
 - ✅ Full test suite passing
 
 ---
-> **Post-pull:** Run `npx -y gitnexus@latest analyze` and `/graphify` to re-index locally.
+> **Post-pull:** Run `npx gitnexus analyze` and `/graphify` to re-index locally.
 ```
 
 ```
@@ -180,7 +180,7 @@ Write file: `.vsaf/docs/hotfixes/{bug-id}/04-ship.md`
 
 ## Post-pull Setup
 After pulling the code, run:
-- `npx -y gitnexus@latest analyze` — re-index code
+- `npx gitnexus analyze` — re-index code
 - `/graphify` — rebuild knowledge graph
 ```
 

package/skills/sdlc/install-deps.mjs

@@ -12,7 +12,7 @@
  * What it does:
  *   1. Ensures package.json exists
  *   2. Checks/installs npm package: gitnexus (includes MCP server built-in)
- *   3. Provisions .mcp.json with GitNexus MCP server entry (npx gitnexus mcp)
+ *   3. Provisions .mcp.json with GitNexus MCP server entry (npx gitnexus mcp — uses local binary)
  */
 
 import { existsSync, readFileSync, writeFileSync } from 'fs';
@@ -40,10 +40,12 @@ const NPM_DEPS = [
   { pkg: 'gitnexus', bin: 'gitnexus', installAs: 'gitnexus@latest' },
 ];
 
+// Use local binary (node_modules/.bin/gitnexus) via npx — NOT `npx -y gitnexus@latest`
+// which downloads a fresh copy whose native modules (@ladybugdb/core) may crash on Node 24+.
 const MCP_ENTRY = {
   gitnexus: {
     command: 'npx',
-    args: ['-y', 'gitnexus@latest', 'mcp'],
+    args: ['gitnexus', 'mcp'],
     env: {},
   },
 };

package/skills/sdlc/onboard-code/SKILL.md

@@ -63,7 +63,9 @@ Icon: `⏳` running, `✅` done, `❌` error.
 ```
 
 3. For EACH repo found:
-   - Run `gitnexus analyze` (if not already indexed)
+   - Run `npx gitnexus analyze {path}` (if not already indexed)
+     - ⚠️ Use `npx gitnexus` (resolves local binary) — do NOT use `npx -y gitnexus@latest` (native module crash on Node 24+)
+     - If project has NO `.git/` → add `--skip-git` flag: `npx gitnexus analyze {path} --skip-git`
    - Run GitNexus `group_sync` to index
 4. Map structure per repo: `route_map` + `tool_map` + `context` (3-5 key entry points)
 

package/skills/sdlc/setup/SKILL.md

@@ -33,7 +33,7 @@ If `vsaf skill path` is not available, find `install-deps.mjs` in the SDLC skill
 This script will:
 - Ensure `package.json` exists
 - Install `gitnexus` as devDependency (includes MCP server built-in)
-- Provision `.mcp.json` with GitNexus MCP server (`npx gitnexus mcp`)
+- Provision `.mcp.json` with GitNexus MCP server (`npx gitnexus mcp` — uses local binary, NOT `npx -y gitnexus@latest`)
 
 ```
 [SDLC-SETUP] [1/4] Installing npm packages... ✅

package/skills/sdlc/ship/SKILL.md

@@ -111,7 +111,7 @@ For each repo with code changes:
 
 **Add note to PR description:**
 ```
-> **Note for reviewer:** After pulling the code, run `npx -y gitnexus@latest analyze` and `/graphify` to re-index locally.
+> **Note for reviewer:** After pulling the code, run `npx gitnexus analyze` and `/graphify` to re-index locally.
 ```
 
 ```
@@ -158,7 +158,7 @@ US-002 → FR-002 → TC-003 → impl ✓
 
 ## Post-pull Setup
 After pulling the code, run:
-- `npx -y gitnexus@latest analyze` — re-index code
+- `npx gitnexus analyze` — re-index code
 - `/graphify` — rebuild knowledge graph
 ```