@haystackeditor/cli 0.10.0 → 0.10.2

package/README.md

@@ -1,6 +1,6 @@
 # @haystackeditor/cli
 
-Set up Haystack for your project. When PRs are opened, Haystack automatically analyzes them for bugs, intent drift, and rule violations.
+Set up Haystack for your project. When PRs are opened, Haystack automatically reviews them for bugs, intent drift, and rule violations — then routes them to the right place.
 
 ## Quick Start
 
@@ -63,33 +63,6 @@ This uses GitHub's device flow - you'll get a code to enter at github.com/login/
 haystack logout
 ```
 
-### `haystack secrets`
-
-Manage secrets that will be injected into your sandbox environment:
-
-```bash
-# List all secrets (keys only, values are never shown)
-haystack secrets list
-
-# Set a secret
-haystack secrets set OPENAI_API_KEY sk-xxx
-
-# Delete a secret
-haystack secrets delete OPENAI_API_KEY
-```
-
-Secrets are encrypted and stored securely. They're automatically injected as environment variables when the sandbox runs your app.
-
-**Scopes**: By default, secrets are user-scoped. You can also scope to an org or repo:
-
-```bash
-# Org-scoped (available to all repos in the org)
-haystack secrets set API_KEY xxx --scope org --scope-id myorg
-
-# Repo-scoped (available only to this repo)
-haystack secrets set API_KEY xxx --scope repo --scope-id owner/repo
-```
-
 ### `haystack submit`
 
 Create a PR from current changes. Runs pre-PR triage (code review, rules validation, intent drift), pushes your branch, and opens the PR.
@@ -136,6 +109,121 @@ haystack check-pending --json       # Machine-readable JSON
 haystack check-pending --clear      # Clear pending state
 ```
 
+### `haystack dismiss`
+
+Dismiss analysis findings for a PR, moving it from "Issues Found" to "Good to Merge" in the feed. The override is tied to the PR's current HEAD commit.
+
+```bash
+haystack dismiss 42                  # Dismiss findings for PR #42
+haystack dismiss acme/widgets#99     # Dismiss for specific repo
+```
+
+### `haystack undismiss`
+
+Clear all overrides (dismissed findings and/or review-not-needed) for a PR, returning it to its original feed bucket.
+
+```bash
+haystack undismiss 42                # Undo overrides for PR #42
+haystack undismiss acme/widgets#99   # Undo for specific repo
+```
+
+### `haystack mark-reviewed`
+
+Mark human review as not needed for a PR, moving it from "Needs Review" to "Good to Merge" in the feed. The override is tied to the PR's current HEAD commit.
+
+```bash
+haystack mark-reviewed 42                  # Mark review not needed for PR #42
+haystack mark-reviewed acme/widgets#99     # Mark for specific repo
+```
+
+### `haystack pr-status`
+
+Show what bucket a PR is in within the Haystack pipeline (analyzing, auto-fixing, good-to-merge, issues, needs-assignment, etc.):
+
+```bash
+haystack pr-status 42                          # Current repo, PR #42
+haystack pr-status acme/widgets#99             # Specific repo
+haystack pr-status https://github.com/o/r/pull/1  # From URL
+haystack pr-status 42 --json                   # Machine-readable output
+```
+
+### `haystack config`
+
+Manage user preferences:
+
+```bash
+# Agentic tool selection
+haystack config agentic-tool              # Show current setting
+haystack config agentic-tool opencode     # Use Haystack billing (default)
+haystack config agentic-tool claude-code  # Use your Claude Max subscription
+haystack config agentic-tool codex        # Use your ChatGPT subscription
+
+# Auto-merge for safe PRs
+haystack config auto-merge           # Show current status
+haystack config auto-merge on        # Enable auto-merge
+haystack config auto-merge off       # Disable auto-merge
+
+# AI reviewer wait list
+haystack config wait-for-reviewers                    # Show status
+haystack config wait-for-reviewers add cursor         # Wait for Cursor BugBot
+haystack config wait-for-reviewers add cursor coderabbit  # Add multiple
+haystack config wait-for-reviewers remove cursor      # Stop waiting
+haystack config wait-for-reviewers clear              # Wait for none
+```
+
+### `haystack skills`
+
+Manage AI skills for your coding CLI:
+
+```bash
+haystack skills install              # Auto-detect CLI and install
+haystack skills install --cli codex  # Install for Codex only
+haystack skills install --cli manual # Show manual setup instructions
+haystack skills list                 # List available skills
+```
+
+### `haystack hooks`
+
+Manage git hooks for AI agent quality checks:
+
+```bash
+# Install hooks + Entire CLI
+haystack hooks install               # Install with pinned Entire version
+haystack hooks install --force       # Overwrite existing hooks
+haystack hooks install --skip-entire # Only install Haystack hooks
+
+# Status and updates
+haystack hooks status                # Check installation status
+haystack hooks update                # Update Entire CLI to latest
+
+# Session hooks (check-pending on CLI start)
+haystack hooks install-session              # Auto-detect CLIs
+haystack hooks install-session --cli claude # Claude Code only
+haystack hooks install-session --cli all    # All detected CLIs
+haystack hooks session-status               # Check session hook status
+```
+
+### `haystack policy`
+
+Manage review policies (`.haystack/review-policy.md`):
+
+```bash
+# List and inspect
+haystack policy list                          # List all policies
+
+# Add policies
+haystack policy add                           # Interactive add
+haystack policy add "Database changes"        # Start with name
+haystack policy add-instruction "Never flag weak test coverage as needing review"
+
+# Remove policies
+haystack policy remove "Database changes"
+
+# Initialize with defaults
+haystack policy init                          # Create with sensible defaults
+haystack policy init --force                  # Overwrite existing
+```
+
 ---
 
 ## Configuration
@@ -145,15 +233,7 @@ The `setup` wizard writes `.haystack.json` to your repos with discovered rules,
 ```json
 {
   "version": "1",
-  "name": "my-app",
-  "dev_server": {
-    "command": "pnpm dev",
-    "port": 3000,
-    "ready_pattern": "Local:",
-    "env": {
-      "SKIP_AUTH": "true"
-    }
-  }
+  "name": "my-app"
 }
 ```
 

package/dist/commands/config.d.ts

@@ -1,14 +1,10 @@
 /**
  * Config commands - manage preferences
  *
- * Repo-level preferences (sandbox_enabled, auto_merge) are stored in .haystack.json.
+ * Repo-level preferences (auto_merge) are stored in .haystack.json.
  * User-level preferences (agentic_tool) are stored on the Haystack Platform API.
  */
 type AgenticTool = 'opencode' | 'claude-code' | 'codex';
-export declare function getSandboxStatus(): Promise<void>;
-export declare function enableSandbox(): Promise<void>;
-export declare function disableSandbox(): Promise<void>;
-export declare function handleSandbox(action?: string): Promise<void>;
 export declare function getAgenticToolStatus(): Promise<void>;
 export declare function setAgenticTool(tool: AgenticTool): Promise<void>;
 export declare function handleAgenticTool(tool?: string): Promise<void>;

package/dist/commands/config.js

@@ -1,7 +1,7 @@
 /**
  * Config commands - manage preferences
  *
- * Repo-level preferences (sandbox_enabled, auto_merge) are stored in .haystack.json.
+ * Repo-level preferences (auto_merge) are stored in .haystack.json.
  * User-level preferences (agentic_tool) are stored on the Haystack Platform API.
  */
 import chalk from 'chalk';
@@ -49,8 +49,7 @@ function saveHaystackConfig(config, configPath) {
 }
 function getPreference(key) {
     const { config } = loadHaystackConfig();
-    // Default: sandbox_enabled=true, auto_merge=false
-    const defaults = { sandbox_enabled: true, auto_merge: false };
+    const defaults = { auto_merge: false };
     return config.preferences?.[key] ?? defaults[key];
 }
 function setPreference(key, value) {
@@ -84,59 +83,6 @@ async function apiRequest(method, token, body) {
     });
 }
 // ============================================================================
-// Sandbox (repo-level via .haystack.json)
-// ============================================================================
-export async function getSandboxStatus() {
-    const enabled = getPreference('sandbox_enabled');
-    console.log(chalk.bold('\nSandbox mode:'), enabled
-        ? chalk.green('enabled')
-        : chalk.yellow('disabled'));
-    console.log();
-    if (enabled) {
-        console.log(chalk.dim('Haystack can clone and store your repos for verification.'));
-        console.log(chalk.dim('All data is deleted after 24 hours.'));
-    }
-    else {
-        console.log(chalk.dim('Sandbox mode is disabled. Automated verification will not work.'));
-        console.log(chalk.dim('Enable with: haystack config sandbox on'));
-    }
-    console.log(chalk.dim('(Stored in .haystack.json — applies to all repo contributors)'));
-    console.log();
-}
-export async function enableSandbox() {
-    setPreference('sandbox_enabled', true);
-    console.log(chalk.green('\nSandbox mode enabled.\n'));
-    console.log(chalk.dim('Haystack can now clone and store your repos for verification.'));
-    console.log(chalk.dim('All data is deleted after 24 hours.'));
-    console.log(chalk.dim('Commit .haystack.json to share with your team.\n'));
-}
-export async function disableSandbox() {
-    setPreference('sandbox_enabled', false);
-    console.log(chalk.yellow('\nSandbox mode disabled.\n'));
-    console.log(chalk.dim('Automated verification will not work until you re-enable sandbox mode.'));
-    console.log(chalk.dim('Re-enable with: haystack config sandbox on'));
-    console.log(chalk.dim('Commit .haystack.json to share with your team.\n'));
-}
-export async function handleSandbox(action) {
-    switch (action?.toLowerCase()) {
-        case 'on':
-        case 'enable':
-        case 'true':
-            return enableSandbox();
-        case 'off':
-        case 'disable':
-        case 'false':
-            return disableSandbox();
-        case 'status':
-        case undefined:
-            return getSandboxStatus();
-        default:
-            console.error(chalk.red(`\nUnknown action: ${action}`));
-            console.log('\nUsage: haystack config sandbox [on|off|status]\n');
-            process.exit(1);
-    }
-}
-// ============================================================================
 // Agentic tool (user-level via API)
 // ============================================================================
 export async function getAgenticToolStatus() {

package/dist/commands/init.js

@@ -7,8 +7,6 @@ import chalk from 'chalk';
 import * as path from 'path';
 import { detectProject } from '../utils/detect.js';
 import { saveConfig, configExists } from '../utils/config.js';
-// HIDDEN: Verification flow — uncomment to re-enable
-// import { createSkillFile, createClaudeCommand } from '../utils/skill.js';
 import { validateConfigSecurity, formatSecurityReport } from '../utils/secrets.js';
 export async function initCommand(options) {
     console.log(chalk.cyan('\n🌾 Haystack Setup\n'));
@@ -37,14 +35,6 @@ export async function initCommand(options) {
     const config = buildConfigFromDetection(detected);
     const configPath = await saveConfig(config);
     console.log(chalk.green(`✓ Created ${configPath}`));
-    // HIDDEN: Verification flow — uncomment to re-enable
-    // // Create skill file for agent discovery
-    // const skillPath = await createSkillFile();
-    // console.log(chalk.green(`✓ Created ${skillPath}`));
-    //
-    // // Create Claude Code slash command
-    // const commandPath = await createClaudeCommand();
-    // console.log(chalk.green(`✓ Created ${commandPath}`));
     // Security validation
     await runSecurityCheck(configPath);
     console.log(chalk.green('\nDone! Run `haystack setup` to configure rules, signals, and policies.\n'));
@@ -86,30 +76,10 @@ function buildConfigFromDetection(detected) {
             version: '1',
             name: path.basename(process.cwd()),
             services,
-            // HIDDEN: Verification flow — uncomment to re-enable
-            // verification: {
-            //   commands: [
-            //     { name: 'build', run: `${detected.packageManager} build` },
-            //     { name: 'lint', run: `${detected.packageManager} lint` },
-            //   ],
-            // },
         };
     }
     return {
         version: '1',
         name: path.basename(process.cwd()),
-        dev_server: {
-            command: detected.suggestedDevCommand || 'pnpm dev',
-            port: detected.suggestedPort || 3000,
-            ready_pattern: detected.suggestedReadyPattern || 'Local:',
-            ...(Object.keys(env).length > 0 ? { env } : {}),
-        },
-        // HIDDEN: Verification flow — uncomment to re-enable
-        // verification: {
-        //   commands: [
-        //     { name: 'build', run: `${detected.packageManager} build` },
-        //     { name: 'lint', run: `${detected.packageManager} lint` },
-        //   ],
-        // },
     };
 }

package/dist/commands/skills.js

@@ -14,9 +14,6 @@ function getSkillsSourceDir() {
 }
 const SKILL_FILES = [
     'setup-haystack.md',
-    'prepare-haystack.md',
-    'secrets.md',
-    'setup-external-sandbox.md',
     'submit.md',
 ];
 function installSkillFiles(targetDir) {
@@ -57,15 +54,14 @@ export async function installSkills(options) {
         mkdirSync(claudeCommandsDir, { recursive: true });
     }
     const claudeCommandPath = join(claudeCommandsDir, 'setup-haystack.md');
-    writeFileSync(claudeCommandPath, '# Set Up Haystack Verification\n\nFollow .agents/skills/setup-haystack.md to set up Haystack verification for this repo.\n');
+    writeFileSync(claudeCommandPath, '# Set Up Haystack\n\nFollow .agents/skills/setup-haystack.md to set up Haystack for this repo.\n');
     showSuccessMessage();
 }
 function showSuccessMessage() {
     console.log(chalk.green('\n✅ Haystack skills installed!\n'));
     console.log(chalk.white('Available skills:'));
     console.log(chalk.cyan('  /setup-haystack         ') + chalk.gray('- Create .haystack.json with AI assistance'));
-    console.log(chalk.cyan('  /prepare-haystack       ') + chalk.gray('- Add aria-labels and data-testid attributes'));
-    console.log(chalk.cyan('  /setup-haystack-secrets ') + chalk.gray('- Configure API keys and secrets'));
+    console.log(chalk.cyan('  /submit                 ') + chalk.gray('- Submit a PR via Haystack'));
     console.log();
     console.log(chalk.white('Run in your coding CLI:'));
     console.log(chalk.cyan('  /setup-haystack'));
@@ -74,7 +70,6 @@ function showSuccessMessage() {
 export async function listSkills() {
     console.log(chalk.white('\nAvailable Haystack skills:\n'));
     console.log(chalk.cyan('  /setup-haystack         ') + chalk.gray('- Master setup - creates .haystack.json'));
-    console.log(chalk.cyan('  /prepare-haystack       ') + chalk.gray('- Add accessibility attributes'));
-    console.log(chalk.cyan('  /setup-haystack-secrets ') + chalk.gray('- Configure secrets for sandboxes'));
+    console.log(chalk.cyan('  /submit                 ') + chalk.gray('- Submit a PR via Haystack'));
     console.log();
 }

package/dist/commands/status.js

@@ -22,17 +22,10 @@ export async function statusCommand() {
         if (config.name) {
             console.log(`  ${chalk.dim('Name:')} ${config.name}`);
         }
-        if (config.dev_server) {
-            console.log(`  ${chalk.dim('Dev server:')} ${config.dev_server.command} (port ${config.dev_server.port})`);
-        }
         if (config.services) {
             const serviceNames = Object.keys(config.services);
             console.log(`  ${chalk.dim('Services:')} ${serviceNames.join(', ')}`);
         }
-        if (config.verification?.commands?.length) {
-            const cmdNames = config.verification.commands.map((c) => c.name);
-            console.log(`  ${chalk.dim('Verification:')} ${cmdNames.join(', ')}`);
-        }
         console.log('');
     }
     catch (e) {

package/dist/index.d.ts

@@ -2,8 +2,8 @@
 /**
  * Haystack CLI
  *
- * Set up your project for Haystack verification.
- * This enables AI agents to spin up sandboxes of your app for testing.
+ * Set up your project for Haystack.
+ * Automated PR review, triage, and merge queue for AI-assisted development.
  *
  * Usage:
  *   npx @haystackeditor/cli init           # Set up .haystack.json
@@ -16,6 +16,6 @@
  *   npx @haystackeditor/cli dismiss 123    # Dismiss findings for a PR
  *   npx @haystackeditor/cli mark-reviewed 123 # Mark review as not needed
  *   npx @haystackeditor/cli pr-status 123  # Show PR status in Haystack pipeline
- *   npx @haystackeditor/cli secrets list   # List stored secrets
+ *   npx @haystackeditor/cli config         # Manage preferences
  */
 export {};

package/dist/index.js

@@ -2,8 +2,8 @@
 /**
  * Haystack CLI
  *
- * Set up your project for Haystack verification.
- * This enables AI agents to spin up sandboxes of your app for testing.
+ * Set up your project for Haystack.
+ * Automated PR review, triage, and merge queue for AI-assisted development.
  *
  * Usage:
  *   npx @haystackeditor/cli init           # Set up .haystack.json
@@ -16,14 +16,13 @@
  *   npx @haystackeditor/cli dismiss 123    # Dismiss findings for a PR
  *   npx @haystackeditor/cli mark-reviewed 123 # Mark review as not needed
  *   npx @haystackeditor/cli pr-status 123  # Show PR status in Haystack pipeline
- *   npx @haystackeditor/cli secrets list   # List stored secrets
+ *   npx @haystackeditor/cli config         # Manage preferences
  */
 import { Command } from 'commander';
 import { statusCommand } from './commands/status.js';
 import { initCommand } from './commands/init.js';
 import { loginCommand, logoutCommand } from './commands/login.js';
-import { listSecrets, setSecret, getSecret, getSecretsForRepo, deleteSecret } from './commands/secrets.js';
-import { handleSandbox, handleAgenticTool, handleAutoMerge, handleWaitForReviewers } from './commands/config.js';
+import { handleAgenticTool, handleAutoMerge, handleWaitForReviewers } from './commands/config.js';
 import { installSkills, listSkills } from './commands/skills.js';
 import { hooksInstall, hooksStatus, hooksUpdate } from './commands/hooks.js';
 import { submitCommand } from './commands/submit.js';
@@ -37,8 +36,8 @@ import { setupCommand } from './commands/setup.js';
 const program = new Command();
 program
     .name('haystack')
-    .description('Set up Haystack verification for your project')
-    .version('0.9.0');
+    .description('Haystack CLI — automated PR review, triage, and merge queue')
+    .version('0.10.2');
 program
     .command('init')
     .description('Create .haystack.json configuration')
@@ -47,7 +46,7 @@ program
 This creates a .haystack.json file with auto-detected settings:
   • Dev server command and port
   • Services (for monorepos)
-  • Auth bypass for sandbox environments
+  • Auth bypass for CI environments
 
 After running, use \`haystack setup\` to scan your repos for rules,
 CI signals, and review policies.
@@ -94,7 +93,7 @@ program
     .option('--draft', 'Create as draft PR')
     .option('--review [reviewer]', 'Request human review (BLOCKS auto-merge — only use when explicitly asked)')
     .option('--force', 'Skip pre-PR triage checks')
-    .option('--auto-fix', 'Auto-fix analysis issues in a sandbox before surfacing to Feed')
+    .option('--auto-fix', 'Auto-fix analysis issues before surfacing to Feed')
     .option('--no-wait', 'Skip waiting for analysis results')
     .addHelpText('after', `
 This command is designed for AI coding agents to submit PRs.
@@ -269,59 +268,10 @@ Examples:
   haystack pr-status 42 --json                   # Machine-readable output
 `)
     .action(prStatusCommand);
-// Secrets subcommands
-const secrets = program
-    .command('secrets')
-    .description('Manage secrets for sandbox environments');
-secrets
-    .command('list')
-    .description('List all secrets (keys only)')
-    .action(listSecrets);
-secrets
-    .command('set <key> <value>')
-    .description('Set a secret')
-    .option('--scope <scope>', 'Scope: user, org, or repo (default: user)')
-    .option('--scope-id <id>', 'Scope ID (org name or owner/repo)')
-    .action((key, value, options) => {
-    setSecret(key, value, options);
-});
-secrets
-    .command('get <key>')
-    .description('Get a secret value')
-    .option('-q, --quiet', 'Output only the value (for piping)')
-    .action((key, options) => {
-    getSecret(key, options);
-});
-secrets
-    .command('get-for-repo <keys...>')
-    .description('Get multiple secrets needed by a repo')
-    .option('--json', 'Output as JSON')
-    .action((keys, options) => {
-    getSecretsForRepo(keys, options);
-});
-secrets
-    .command('delete <key>')
-    .description('Delete a secret')
-    .action(deleteSecret);
 // Config subcommands
 const config = program
     .command('config')
     .description('Manage user preferences');
-config
-    .command('sandbox [action]')
-    .description('Manage sandbox mode (on|off|status)')
-    .addHelpText('after', `
-Actions:
-  on, enable    Enable sandbox mode (allow repo cloning)
-  off, disable  Disable sandbox mode
-  status        Show current status (default)
-
-Examples:
-  haystack config sandbox         # Show current status
-  haystack config sandbox on      # Enable sandbox mode
-  haystack config sandbox off     # Disable sandbox mode
-`)
-    .action(handleSandbox);
 config
     .command('agentic-tool [tool]')
     .description('Set agentic tool (opencode|claude-code|codex|status)')
@@ -399,9 +349,7 @@ skills
     .addHelpText('after', `
 This registers the Haystack MCP server with your coding CLI, enabling:
   /setup-haystack         - AI-assisted project setup
-  /prepare-haystack       - Add accessibility attributes
-  /setup-haystack-secrets - Configure secrets
-
+  /submit                 - Submit a PR via Haystack
 Supported CLIs:
   claude    Claude Code (auto-detected)
   codex     Codex CLI (auto-detected)

package/dist/types.d.ts

@@ -2,7 +2,7 @@
  * Haystack CLI Types
  *
  * Zod schemas for .haystack.json configuration + CLI-only types.
- * The config schema matches what agent/modal/sandbox.py expects to read.
+ * Zod schemas for .haystack.json configuration.
  */
 import { z } from 'zod';
 declare const VerificationCommandSchema: z.ZodObject<{
@@ -711,7 +711,7 @@ export declare const HaystackConfigSchema: z.ZodObject<{
         root?: string | undefined;
         depends_on?: string[] | undefined;
     }>>>;
-    /** Verification configuration */
+    /** Verification configuration (legacy) */
     verification: z.ZodOptional<z.ZodObject<{
         /** Commands to run for verification (build, lint, test, etc.) */
         commands: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -764,7 +764,7 @@ export declare const HaystackConfigSchema: z.ZodObject<{
             cookies?: string | undefined;
         }> | undefined;
     }>>;
-    /** Auth configuration for sandbox verification */
+    /** Auth configuration (legacy) */
     auth: z.ZodOptional<z.ZodObject<{
         strategy: z.ZodDefault<z.ZodEnum<["bypass", "fixture", "token", "test_account"]>>;
         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -944,7 +944,7 @@ export declare const HaystackConfigSchema: z.ZodObject<{
     }, {
         tool?: "opencode" | "claude-code" | "codex" | undefined;
     }>>;
-    /** Database configuration for sandbox verification */
+    /** Database configuration (legacy) */
     database: z.ZodOptional<z.ZodObject<{
         strategy: z.ZodDefault<z.ZodEnum<["fixture", "memory", "seed", "docker", "remote"]>>;
         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;

package/dist/types.js

@@ -2,7 +2,7 @@
  * Haystack CLI Types
  *
  * Zod schemas for .haystack.json configuration + CLI-only types.
- * The config schema matches what agent/modal/sandbox.py expects to read.
+ * Zod schemas for .haystack.json configuration.
  */
 import { z } from 'zod';
 // =============================================================================
@@ -241,13 +241,13 @@ export const HaystackConfigSchema = z.object({
     dev_server: DevServerSchema.optional(),
     /** Multiple services (for monorepos) */
     services: z.record(z.string(), ServiceSchema).optional(),
-    /** Verification configuration */
+    /** Verification configuration (legacy) */
     verification: VerificationSchema.optional(),
-    /** Auth configuration for sandbox verification */
+    /** Auth configuration (legacy) */
     auth: AuthConfigSchema.optional(),
     /** Agentic configuration (project-level override) */
     agentic: AgenticSchema.optional(),
-    /** Database configuration for sandbox verification */
+    /** Database configuration (legacy) */
     database: DatabaseConfigSchema.optional(),
     /** Network egress configuration */
     network: NetworkConfigSchema.optional(),

package/dist/utils/secrets.js

@@ -235,7 +235,6 @@ export function formatSecurityReport(findings) {
         lines.push(`     ${finding.description}`);
         lines.push(`     Matched: ${finding.match}\n`);
     }
-    lines.push('Use $VARIABLE syntax to reference secrets from Haystack platform.');
-    lines.push('Run `haystack secrets set KEY value` to store secrets securely.\n');
+    lines.push('Use $VARIABLE syntax to reference secrets instead of hardcoding values.\n');
     return lines.join('\n');
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@haystackeditor/cli",
-  "version": "0.10.0",
-  "description": "Set up Haystack verification for your project",
+  "version": "0.10.2",
+  "description": "Set up Haystack for your project — automated PR review, triage, and merge queue",
   "type": "module",
   "bin": {
     "haystack": "./dist/index.js"
@@ -14,10 +14,10 @@
   },
   "keywords": [
     "haystack",
-    "verification",
-    "sandbox",
+    "code-review",
     "ai-agent",
-    "testing",
+    "pull-request",
+    "triage",
     "cli"
   ],
   "author": "Haystack",