@haystackeditor/cli 0.10.1 → 0.10.3

package/dist/commands/config.d.ts

@@ -1,14 +1,10 @@
 /**
  * Config commands - manage preferences
  *
- * Repo-level preferences (sandbox_enabled, auto_merge) are stored in .haystack.json.
+ * Repo-level preferences (auto_merge) are stored in .haystack.json.
  * User-level preferences (agentic_tool) are stored on the Haystack Platform API.
  */
 type AgenticTool = 'opencode' | 'claude-code' | 'codex';
-export declare function getSandboxStatus(): Promise<void>;
-export declare function enableSandbox(): Promise<void>;
-export declare function disableSandbox(): Promise<void>;
-export declare function handleSandbox(action?: string): Promise<void>;
 export declare function getAgenticToolStatus(): Promise<void>;
 export declare function setAgenticTool(tool: AgenticTool): Promise<void>;
 export declare function handleAgenticTool(tool?: string): Promise<void>;

package/dist/commands/config.js

@@ -1,7 +1,7 @@
 /**
  * Config commands - manage preferences
  *
- * Repo-level preferences (sandbox_enabled, auto_merge) are stored in .haystack.json.
+ * Repo-level preferences (auto_merge) are stored in .haystack.json.
  * User-level preferences (agentic_tool) are stored on the Haystack Platform API.
  */
 import chalk from 'chalk';
@@ -49,8 +49,7 @@ function saveHaystackConfig(config, configPath) {
 }
 function getPreference(key) {
     const { config } = loadHaystackConfig();
-    // Default: sandbox_enabled=true, auto_merge=false
-    const defaults = { sandbox_enabled: true, auto_merge: false };
+    const defaults = { auto_merge: false };
     return config.preferences?.[key] ?? defaults[key];
 }
 function setPreference(key, value) {
@@ -84,59 +83,6 @@ async function apiRequest(method, token, body) {
     });
 }
 // ============================================================================
-// Sandbox (repo-level via .haystack.json)
-// ============================================================================
-export async function getSandboxStatus() {
-    const enabled = getPreference('sandbox_enabled');
-    console.log(chalk.bold('\nSandbox mode:'), enabled
-        ? chalk.green('enabled')
-        : chalk.yellow('disabled'));
-    console.log();
-    if (enabled) {
-        console.log(chalk.dim('Haystack can clone and store your repos for verification.'));
-        console.log(chalk.dim('All data is deleted after 24 hours.'));
-    }
-    else {
-        console.log(chalk.dim('Sandbox mode is disabled. Automated verification will not work.'));
-        console.log(chalk.dim('Enable with: haystack config sandbox on'));
-    }
-    console.log(chalk.dim('(Stored in .haystack.json — applies to all repo contributors)'));
-    console.log();
-}
-export async function enableSandbox() {
-    setPreference('sandbox_enabled', true);
-    console.log(chalk.green('\nSandbox mode enabled.\n'));
-    console.log(chalk.dim('Haystack can now clone and store your repos for verification.'));
-    console.log(chalk.dim('All data is deleted after 24 hours.'));
-    console.log(chalk.dim('Commit .haystack.json to share with your team.\n'));
-}
-export async function disableSandbox() {
-    setPreference('sandbox_enabled', false);
-    console.log(chalk.yellow('\nSandbox mode disabled.\n'));
-    console.log(chalk.dim('Automated verification will not work until you re-enable sandbox mode.'));
-    console.log(chalk.dim('Re-enable with: haystack config sandbox on'));
-    console.log(chalk.dim('Commit .haystack.json to share with your team.\n'));
-}
-export async function handleSandbox(action) {
-    switch (action?.toLowerCase()) {
-        case 'on':
-        case 'enable':
-        case 'true':
-            return enableSandbox();
-        case 'off':
-        case 'disable':
-        case 'false':
-            return disableSandbox();
-        case 'status':
-        case undefined:
-            return getSandboxStatus();
-        default:
-            console.error(chalk.red(`\nUnknown action: ${action}`));
-            console.log('\nUsage: haystack config sandbox [on|off|status]\n');
-            process.exit(1);
-    }
-}
-// ============================================================================
 // Agentic tool (user-level via API)
 // ============================================================================
 export async function getAgenticToolStatus() {

package/dist/commands/init.js

@@ -7,8 +7,6 @@ import chalk from 'chalk';
 import * as path from 'path';
 import { detectProject } from '../utils/detect.js';
 import { saveConfig, configExists } from '../utils/config.js';
-// HIDDEN: Verification flow — uncomment to re-enable
-// import { createSkillFile, createClaudeCommand } from '../utils/skill.js';
 import { validateConfigSecurity, formatSecurityReport } from '../utils/secrets.js';
 export async function initCommand(options) {
     console.log(chalk.cyan('\n🌾 Haystack Setup\n'));
@@ -37,14 +35,6 @@ export async function initCommand(options) {
     const config = buildConfigFromDetection(detected);
     const configPath = await saveConfig(config);
     console.log(chalk.green(`✓ Created ${configPath}`));
-    // HIDDEN: Verification flow — uncomment to re-enable
-    // // Create skill file for agent discovery
-    // const skillPath = await createSkillFile();
-    // console.log(chalk.green(`✓ Created ${skillPath}`));
-    //
-    // // Create Claude Code slash command
-    // const commandPath = await createClaudeCommand();
-    // console.log(chalk.green(`✓ Created ${commandPath}`));
     // Security validation
     await runSecurityCheck(configPath);
     console.log(chalk.green('\nDone! Run `haystack setup` to configure rules, signals, and policies.\n'));
@@ -86,30 +76,10 @@ function buildConfigFromDetection(detected) {
             version: '1',
             name: path.basename(process.cwd()),
             services,
-            // HIDDEN: Verification flow — uncomment to re-enable
-            // verification: {
-            //   commands: [
-            //     { name: 'build', run: `${detected.packageManager} build` },
-            //     { name: 'lint', run: `${detected.packageManager} lint` },
-            //   ],
-            // },
         };
     }
     return {
         version: '1',
         name: path.basename(process.cwd()),
-        dev_server: {
-            command: detected.suggestedDevCommand || 'pnpm dev',
-            port: detected.suggestedPort || 3000,
-            ready_pattern: detected.suggestedReadyPattern || 'Local:',
-            ...(Object.keys(env).length > 0 ? { env } : {}),
-        },
-        // HIDDEN: Verification flow — uncomment to re-enable
-        // verification: {
-        //   commands: [
-        //     { name: 'build', run: `${detected.packageManager} build` },
-        //     { name: 'lint', run: `${detected.packageManager} lint` },
-        //   ],
-        // },
     };
 }

package/dist/commands/skills.js

@@ -14,9 +14,6 @@ function getSkillsSourceDir() {
 }
 const SKILL_FILES = [
     'setup-haystack.md',
-    'prepare-haystack.md',
-    'secrets.md',
-    'setup-external-sandbox.md',
     'submit.md',
 ];
 function installSkillFiles(targetDir) {
@@ -57,15 +54,14 @@ export async function installSkills(options) {
         mkdirSync(claudeCommandsDir, { recursive: true });
     }
     const claudeCommandPath = join(claudeCommandsDir, 'setup-haystack.md');
-    writeFileSync(claudeCommandPath, '# Set Up Haystack Verification\n\nFollow .agents/skills/setup-haystack.md to set up Haystack verification for this repo.\n');
+    writeFileSync(claudeCommandPath, '# Set Up Haystack\n\nFollow .agents/skills/setup-haystack.md to set up Haystack for this repo.\n');
     showSuccessMessage();
 }
 function showSuccessMessage() {
     console.log(chalk.green('\n✅ Haystack skills installed!\n'));
     console.log(chalk.white('Available skills:'));
     console.log(chalk.cyan('  /setup-haystack         ') + chalk.gray('- Create .haystack.json with AI assistance'));
-    console.log(chalk.cyan('  /prepare-haystack       ') + chalk.gray('- Add aria-labels and data-testid attributes'));
-    console.log(chalk.cyan('  /setup-haystack-secrets ') + chalk.gray('- Configure API keys and secrets'));
+    console.log(chalk.cyan('  /submit                 ') + chalk.gray('- Submit a PR via Haystack'));
     console.log();
     console.log(chalk.white('Run in your coding CLI:'));
     console.log(chalk.cyan('  /setup-haystack'));
@@ -74,7 +70,6 @@ function showSuccessMessage() {
 export async function listSkills() {
     console.log(chalk.white('\nAvailable Haystack skills:\n'));
     console.log(chalk.cyan('  /setup-haystack         ') + chalk.gray('- Master setup - creates .haystack.json'));
-    console.log(chalk.cyan('  /prepare-haystack       ') + chalk.gray('- Add accessibility attributes'));
-    console.log(chalk.cyan('  /setup-haystack-secrets ') + chalk.gray('- Configure secrets for sandboxes'));
+    console.log(chalk.cyan('  /submit                 ') + chalk.gray('- Submit a PR via Haystack'));
     console.log();
 }

package/dist/commands/status.js

@@ -22,17 +22,10 @@ export async function statusCommand() {
         if (config.name) {
             console.log(`  ${chalk.dim('Name:')} ${config.name}`);
         }
-        if (config.dev_server) {
-            console.log(`  ${chalk.dim('Dev server:')} ${config.dev_server.command} (port ${config.dev_server.port})`);
-        }
         if (config.services) {
             const serviceNames = Object.keys(config.services);
             console.log(`  ${chalk.dim('Services:')} ${serviceNames.join(', ')}`);
         }
-        if (config.verification?.commands?.length) {
-            const cmdNames = config.verification.commands.map((c) => c.name);
-            console.log(`  ${chalk.dim('Verification:')} ${cmdNames.join(', ')}`);
-        }
         console.log('');
     }
     catch (e) {

package/dist/index.d.ts

@@ -16,6 +16,6 @@
  *   npx @haystackeditor/cli dismiss 123    # Dismiss findings for a PR
  *   npx @haystackeditor/cli mark-reviewed 123 # Mark review as not needed
  *   npx @haystackeditor/cli pr-status 123  # Show PR status in Haystack pipeline
- *   npx @haystackeditor/cli secrets list   # List stored secrets
+ *   npx @haystackeditor/cli config         # Manage preferences
  */
 export {};

package/dist/index.js

@@ -16,14 +16,13 @@
  *   npx @haystackeditor/cli dismiss 123    # Dismiss findings for a PR
  *   npx @haystackeditor/cli mark-reviewed 123 # Mark review as not needed
  *   npx @haystackeditor/cli pr-status 123  # Show PR status in Haystack pipeline
- *   npx @haystackeditor/cli secrets list   # List stored secrets
+ *   npx @haystackeditor/cli config         # Manage preferences
  */
 import { Command } from 'commander';
 import { statusCommand } from './commands/status.js';
 import { initCommand } from './commands/init.js';
 import { loginCommand, logoutCommand } from './commands/login.js';
-import { listSecrets, setSecret, getSecret, getSecretsForRepo, deleteSecret } from './commands/secrets.js';
-import { handleSandbox, handleAgenticTool, handleAutoMerge, handleWaitForReviewers } from './commands/config.js';
+import { handleAgenticTool, handleAutoMerge, handleWaitForReviewers } from './commands/config.js';
 import { installSkills, listSkills } from './commands/skills.js';
 import { hooksInstall, hooksStatus, hooksUpdate } from './commands/hooks.js';
 import { submitCommand } from './commands/submit.js';
@@ -38,7 +37,7 @@ const program = new Command();
 program
     .name('haystack')
     .description('Haystack CLI — automated PR review, triage, and merge queue')
-    .version('0.10.1');
+    .version('0.10.3');
 program
     .command('init')
     .description('Create .haystack.json configuration')
@@ -47,7 +46,7 @@ program
 This creates a .haystack.json file with auto-detected settings:
   • Dev server command and port
   • Services (for monorepos)
-  • Auth bypass for sandbox environments
+  • Auth bypass for CI environments
 
 After running, use \`haystack setup\` to scan your repos for rules,
 CI signals, and review policies.
@@ -94,7 +93,7 @@ program
     .option('--draft', 'Create as draft PR')
     .option('--review [reviewer]', 'Request human review (BLOCKS auto-merge — only use when explicitly asked)')
     .option('--force', 'Skip pre-PR triage checks')
-    .option('--auto-fix', 'Auto-fix analysis issues in a sandbox before surfacing to Feed')
+    .option('--auto-fix', 'Auto-fix analysis issues before surfacing to Feed')
     .option('--no-wait', 'Skip waiting for analysis results')
     .addHelpText('after', `
 This command is designed for AI coding agents to submit PRs.
@@ -269,59 +268,10 @@ Examples:
   haystack pr-status 42 --json                   # Machine-readable output
 `)
     .action(prStatusCommand);
-// Secrets subcommands
-const secrets = program
-    .command('secrets')
-    .description('Manage secrets for sandbox environments');
-secrets
-    .command('list')
-    .description('List all secrets (keys only)')
-    .action(listSecrets);
-secrets
-    .command('set <key> <value>')
-    .description('Set a secret')
-    .option('--scope <scope>', 'Scope: user, org, or repo (default: user)')
-    .option('--scope-id <id>', 'Scope ID (org name or owner/repo)')
-    .action((key, value, options) => {
-    setSecret(key, value, options);
-});
-secrets
-    .command('get <key>')
-    .description('Get a secret value')
-    .option('-q, --quiet', 'Output only the value (for piping)')
-    .action((key, options) => {
-    getSecret(key, options);
-});
-secrets
-    .command('get-for-repo <keys...>')
-    .description('Get multiple secrets needed by a repo')
-    .option('--json', 'Output as JSON')
-    .action((keys, options) => {
-    getSecretsForRepo(keys, options);
-});
-secrets
-    .command('delete <key>')
-    .description('Delete a secret')
-    .action(deleteSecret);
 // Config subcommands
 const config = program
     .command('config')
     .description('Manage user preferences');
-config
-    .command('sandbox [action]')
-    .description('Manage sandbox mode (on|off|status)')
-    .addHelpText('after', `
-Actions:
-  on, enable    Enable sandbox mode (allow repo cloning)
-  off, disable  Disable sandbox mode
-  status        Show current status (default)
-
-Examples:
-  haystack config sandbox         # Show current status
-  haystack config sandbox on      # Enable sandbox mode
-  haystack config sandbox off     # Disable sandbox mode
-`)
-    .action(handleSandbox);
 config
     .command('agentic-tool [tool]')
     .description('Set agentic tool (opencode|claude-code|codex|status)')
@@ -399,9 +349,7 @@ skills
     .addHelpText('after', `
 This registers the Haystack MCP server with your coding CLI, enabling:
   /setup-haystack         - AI-assisted project setup
-  /prepare-haystack       - Add accessibility attributes
-  /setup-haystack-secrets - Configure secrets
-
+  /submit                 - Submit a PR via Haystack
 Supported CLIs:
   claude    Claude Code (auto-detected)
   codex     Codex CLI (auto-detected)

package/dist/types.d.ts

@@ -2,7 +2,7 @@
  * Haystack CLI Types
  *
  * Zod schemas for .haystack.json configuration + CLI-only types.
- * The config schema matches what agent/modal/sandbox.py expects to read.
+ * Zod schemas for .haystack.json configuration.
  */
 import { z } from 'zod';
 declare const VerificationCommandSchema: z.ZodObject<{
@@ -711,7 +711,7 @@ export declare const HaystackConfigSchema: z.ZodObject<{
         root?: string | undefined;
         depends_on?: string[] | undefined;
     }>>>;
-    /** Verification configuration */
+    /** Verification configuration (legacy) */
     verification: z.ZodOptional<z.ZodObject<{
         /** Commands to run for verification (build, lint, test, etc.) */
         commands: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -764,7 +764,7 @@ export declare const HaystackConfigSchema: z.ZodObject<{
             cookies?: string | undefined;
         }> | undefined;
     }>>;
-    /** Auth configuration for sandbox verification */
+    /** Auth configuration (legacy) */
     auth: z.ZodOptional<z.ZodObject<{
         strategy: z.ZodDefault<z.ZodEnum<["bypass", "fixture", "token", "test_account"]>>;
         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -944,7 +944,7 @@ export declare const HaystackConfigSchema: z.ZodObject<{
     }, {
         tool?: "opencode" | "claude-code" | "codex" | undefined;
     }>>;
-    /** Database configuration for sandbox verification */
+    /** Database configuration (legacy) */
     database: z.ZodOptional<z.ZodObject<{
         strategy: z.ZodDefault<z.ZodEnum<["fixture", "memory", "seed", "docker", "remote"]>>;
         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;

package/dist/types.js

@@ -2,7 +2,7 @@
  * Haystack CLI Types
  *
  * Zod schemas for .haystack.json configuration + CLI-only types.
- * The config schema matches what agent/modal/sandbox.py expects to read.
+ * Zod schemas for .haystack.json configuration.
  */
 import { z } from 'zod';
 // =============================================================================
@@ -241,13 +241,13 @@ export const HaystackConfigSchema = z.object({
     dev_server: DevServerSchema.optional(),
     /** Multiple services (for monorepos) */
     services: z.record(z.string(), ServiceSchema).optional(),
-    /** Verification configuration */
+    /** Verification configuration (legacy) */
     verification: VerificationSchema.optional(),
-    /** Auth configuration for sandbox verification */
+    /** Auth configuration (legacy) */
     auth: AuthConfigSchema.optional(),
     /** Agentic configuration (project-level override) */
     agentic: AgenticSchema.optional(),
-    /** Database configuration for sandbox verification */
+    /** Database configuration (legacy) */
     database: DatabaseConfigSchema.optional(),
     /** Network egress configuration */
     network: NetworkConfigSchema.optional(),

package/dist/utils/secrets.js

@@ -235,7 +235,6 @@ export function formatSecurityReport(findings) {
         lines.push(`     ${finding.description}`);
         lines.push(`     Matched: ${finding.match}\n`);
     }
-    lines.push('Use $VARIABLE syntax to reference secrets from Haystack platform.');
-    lines.push('Run `haystack secrets set KEY value` to store secrets securely.\n');
+    lines.push('Use $VARIABLE syntax to reference secrets instead of hardcoding values.\n');
     return lines.join('\n');
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@haystackeditor/cli",
-  "version": "0.10.1",
+  "version": "0.10.3",
   "description": "Set up Haystack for your project — automated PR review, triage, and merge queue",
   "type": "module",
   "bin": {