@ngocsangairvds/vsaf 4.1.3 → 4.1.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ngocsangairvds/vsaf",
-  "version": "4.1.3",
+  "version": "4.1.5",
   "description": "logging step",
   "main": "packages/core/dist/index.js",
   "types": "packages/core/dist/index.d.ts",

package/skills/sdlc/hotfix-ship/SKILL.md

@@ -133,7 +133,7 @@ gh pr create --title "fix({area}): {short description}" --body "{PR body}"
 - ✅ Full test suite passing
 
 ---
-> **Post-pull:** Run `npx -y gitnexus@latest analyze` and `/graphify` to re-index locally.
+> **Post-pull:** Run `npx gitnexus analyze` and `/graphify` to re-index locally.
 ```
 
 ```
@@ -180,7 +180,7 @@ Write file: `.vsaf/docs/hotfixes/{bug-id}/04-ship.md`
 
 ## Post-pull Setup
 After pulling the code, run:
-- `npx -y gitnexus@latest analyze` — re-index code
+- `npx gitnexus analyze` — re-index code
 - `/graphify` — rebuild knowledge graph
 ```
 

package/skills/sdlc/install-deps.mjs

@@ -12,7 +12,7 @@
  * What it does:
  *   1. Ensures package.json exists
  *   2. Checks/installs npm package: gitnexus (includes MCP server built-in)
- *   3. Provisions .mcp.json with GitNexus MCP server entry (npx gitnexus mcp)
+ *   3. Provisions .mcp.json with GitNexus MCP server entry (npx gitnexus mcp — uses local binary)
  */
 
 import { existsSync, readFileSync, writeFileSync } from 'fs';
@@ -40,10 +40,12 @@ const NPM_DEPS = [
   { pkg: 'gitnexus', bin: 'gitnexus', installAs: 'gitnexus@latest' },
 ];
 
+// Use local binary (node_modules/.bin/gitnexus) via npx — NOT `npx -y gitnexus@latest`
+// which downloads a fresh copy whose native modules (@ladybugdb/core) may crash on Node 24+.
 const MCP_ENTRY = {
   gitnexus: {
     command: 'npx',
-    args: ['-y', 'gitnexus@latest', 'mcp'],
+    args: ['gitnexus', 'mcp'],
     env: {},
   },
 };

package/skills/sdlc/onboard-code/SKILL.md

@@ -63,7 +63,9 @@ Icon: `⏳` running, `✅` done, `❌` error.
 ```
 
 3. For EACH repo found:
-   - Run `gitnexus analyze` (if not already indexed)
+   - Run `npx gitnexus analyze {path}` (if not already indexed)
+     - ⚠️ Use `npx gitnexus` (resolves local binary) — do NOT use `npx -y gitnexus@latest` (native module crash on Node 24+)
+     - If project has NO `.git/` → add `--skip-git` flag: `npx gitnexus analyze {path} --skip-git`
    - Run GitNexus `group_sync` to index
 4. Map structure per repo: `route_map` + `tool_map` + `context` (3-5 key entry points)
 

package/skills/sdlc/setup/SKILL.md

@@ -33,7 +33,7 @@ If `vsaf skill path` is not available, find `install-deps.mjs` in the SDLC skill
 This script will:
 - Ensure `package.json` exists
 - Install `gitnexus` as devDependency (includes MCP server built-in)
-- Provision `.mcp.json` with GitNexus MCP server (`npx gitnexus mcp`)
+- Provision `.mcp.json` with GitNexus MCP server (`npx gitnexus mcp` — uses local binary, NOT `npx -y gitnexus@latest`)
 
 ```
 [SDLC-SETUP] [1/4] Installing npm packages... ✅

package/skills/sdlc/ship/SKILL.md

@@ -111,7 +111,7 @@ For each repo with code changes:
 
 **Add note to PR description:**
 ```
-> **Note for reviewer:** After pulling the code, run `npx -y gitnexus@latest analyze` and `/graphify` to re-index locally.
+> **Note for reviewer:** After pulling the code, run `npx gitnexus analyze` and `/graphify` to re-index locally.
 ```
 
 ```
@@ -158,7 +158,7 @@ US-002 → FR-002 → TC-003 → impl ✓
 
 ## Post-pull Setup
 After pulling the code, run:
-- `npx -y gitnexus@latest analyze` — re-index code
+- `npx gitnexus analyze` — re-index code
 - `/graphify` — rebuild knowledge graph
 ```
 

package/skills/vds-skill/install-deps.mjs

@@ -255,8 +255,9 @@ if (vdsScriptsDir) {
         execSync('uv sync --all-packages', {
           stdio: 'pipe',
           encoding: 'utf-8',
-          timeout: 120000,
+          timeout: 600000,
           cwd: vdsScriptsDir,
+          env: { ...process.env, UV_HTTP_TIMEOUT: '300' },
         });
         log('✅', 'All vds-scripts packages synced');
       } catch (e) {
@@ -279,7 +280,7 @@ let verified = false;
 
 // First pass: try vds-cli on PATH
 try {
-  const ver = execSync('vds-cli version', { stdio: 'pipe', encoding: 'utf-8', timeout: 15000 }).trim();
+  const ver = execSync('vds-cli version', { stdio: 'pipe', encoding: 'utf-8', timeout: 60000 }).trim();
   log('✅', `vds-cli ${ver} — working`);
   verified = true;
 } catch {
@@ -312,7 +313,7 @@ if (!verified) {
   try {
     const wrapperPath = join(projectPath, '.claude', 'bin');
     const ver = execSync('vds-cli version', {
-      stdio: 'pipe', encoding: 'utf-8', timeout: 15000,
+      stdio: 'pipe', encoding: 'utf-8', timeout: 60000,
       env: { ...process.env, PATH: `${wrapperPath}${delimiter}${process.env.PATH}` },
     }).trim();
     log('✅', `vds-cli ${ver} — working (via .claude/bin/vds-cli)`);
@@ -326,7 +327,7 @@ if (!verified) {
     if (vdsScriptsDir) {
       try {
         const uvVer = execSync(`uv run --directory ${JSON.stringify(vdsScriptsDir)} --package vds-cli vds-cli version`, {
-          stdio: 'pipe', encoding: 'utf-8', timeout: 15000,
+          stdio: 'pipe', encoding: 'utf-8', timeout: 60000,
         }).trim();
         log('  ', `Direct uv run works: ${uvVer}`);
         log('  ', 'Issue is with the wrapper script, not uv/vds-cli');