[semimikoh]

Fixes #3264

After migrating from Husky to Vite+ hooks, existing clones retain core.hooksPath=.husky/_. Both vp config and vp hooks enable skip installation, leaving the migrated hooks inactive.

This change automatically replaces local .husky and .husky/_ paths when:

• The Vite+ hooks directory contains a hook script.
• No hook scripts remain directly under .husky/.
• The repository and ancestor package manifests no longer declare Husky dependencies, configuration, or scripts.

Active Husky setups, custom hook paths, global and worktree-scoped settings, symlinked Husky directories, and hook opt-outs remain protected. Existing Husky files are left unchanged.

Adds regression tests and documents the automatic takeover behavior.

Validation

• Related tests: 58 passed, 1 skipped.
• Verified automatic takeover and commit rejection through the built JS entrypoints for vp config, vp config --hooks, and vp hooks enable.
• Targeted TypeScript, type-aware lint, formatting, and git diff --check passed.

Full validation is blocked by local build setup:

• vp check and pnpm test:unit cannot start because the existing native binding lacks documentationUrl.
• The complete CLI build and snapshot runner are blocked by a Rolldown checkout / root Cargo manifest mismatch involving serde_yaml.

[fengmk2]

@codex review

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-04T07:36:23.903979Z	acef79b	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: acef79bfe1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[semimikoh]

@fengmk2 I've addressed both review findings and fixed the Git hook test compatibility issue in the latest commits. Lint, tests, E2E, and snapshot checks are now passing.

The only remaining failing check is Security Analysis, which reports RUSTSEC-2026-0387 in crypto-bigint 0.5.5. This appears to be an existing dependency issue, also noted in #3331. This PR does not modify Rust dependencies.

Could you take another look when you have a chance?

[fengmk2]

@semimikoh The security report for crypto-bigint is a known issue; you can ignore it, as I’m already following up on it.

[fengmk2]

Could we implement this without HUSKY_GENERATED_SCRIPT_HASHES, while still protecting custom hooks and avoiding a version-specific hash allowlist?