@haystackeditor/cli 0.10.1 → 0.10.3

package/dist/assets/templates/haystack.yml

@@ -1,193 +0,0 @@
-# =============================================================================
-# Haystack Verification Configuration
-# =============================================================================
-#
-# This file tells Haystack how to verify that PRs actually work.
-# When a PR is opened, Haystack spins up a sandbox with your code and
-# runs these verification flows to ensure changes work correctly.
-#
-# For setup help, run: /verify setup
-# =============================================================================
-
-name: my-saas-app
-
-# -----------------------------------------------------------------------------
-# Dev Server - How to run your app
-# -----------------------------------------------------------------------------
-dev:
-  command: pnpm dev
-  port: 3000
-  ready_pattern: "ready in"  # Pattern in stdout that means server is ready
-  cwd: "."                   # Working directory (relative to repo root)
-  env:
-    NODE_ENV: development
-
-# -----------------------------------------------------------------------------
-# Authentication - How to bypass/mock auth in the sandbox
-# -----------------------------------------------------------------------------
-auth:
-  strategy: bypass
-  env: "SKIP_AUTH=true"
-
-  # Other options:
-  # strategy: mock_token
-  # env: "AUTH_TOKEN"  # Set actual value as Haystack secret
-
-  # strategy: test_account
-  # username_env: "TEST_USER"
-  # password_env: "TEST_PASS"
-  # login_url: "/login"
-
-# -----------------------------------------------------------------------------
-# Fixtures - Where to get test data (so sandbox doesn't need real data)
-# -----------------------------------------------------------------------------
-fixtures:
-  # Pull user data from staging API
-  - pattern: "/api/users/*"
-    source: "https://staging.myapp.com/api/users"
-    headers:
-      Authorization: "Bearer $STAGING_API_TOKEN"
-
-  # Use local fixture file for config
-  - pattern: "/api/config"
-    source: "file://fixtures/config.json"
-
-  # Generate dashboard data dynamically
-  - pattern: "/api/dashboard"
-    source: "script://fixtures/generate-dashboard.ts"
-
-  # Let public endpoints go through
-  - pattern: "/api/public/*"
-    source: passthrough
-
-# -----------------------------------------------------------------------------
-# Verification Flows - What to actually test
-# -----------------------------------------------------------------------------
-# These are the flows the agent executes in the sandbox to verify PRs work.
-# Think of them like E2E tests, but run by an AI that can adapt and report.
-
-flows:
-  # ---------------------------------------------------------------------------
-  # Basic smoke test - runs on every PR
-  # ---------------------------------------------------------------------------
-  - name: "Homepage loads"
-    description: "Verify the homepage renders without errors"
-    trigger: always
-    steps:
-      - action: navigate
-        url: "/"
-      - action: wait_for
-        selector: "#app"
-        timeout_ms: 10000
-      - action: assert_no_errors
-        error_selectors:
-          - ".error-toast"
-          - ".error-modal"
-          - "[data-testid='error']"
-      - action: screenshot
-        name: "homepage"
-
-  # ---------------------------------------------------------------------------
-  # Dashboard flow - runs when dashboard files change
-  # ---------------------------------------------------------------------------
-  - name: "Dashboard functionality"
-    description: "Verify dashboard loads and displays data correctly"
-    trigger: on_change
-    watch_patterns:
-      - "src/components/dashboard/**"
-      - "src/pages/dashboard.tsx"
-    steps:
-      - action: navigate
-        url: "/dashboard"
-      - action: wait_for
-        selector: ".dashboard-grid"
-      - action: assert_exists
-        selector: ".metric-card"
-        message: "Dashboard should display metric cards"
-      - action: assert_text
-        selector: ".welcome-message"
-        contains: "Welcome"
-      - action: screenshot
-        name: "dashboard-loaded"
-      # Test interactivity
-      - action: click
-        selector: "[data-testid='refresh-button']"
-        description: "Click refresh button"
-      - action: wait_network_idle
-        timeout_ms: 5000
-      - action: assert_no_errors
-
-  # ---------------------------------------------------------------------------
-  # Settings flow - test form interactions
-  # ---------------------------------------------------------------------------
-  - name: "Settings page"
-    description: "Verify settings can be viewed and saved"
-    trigger: on_change
-    watch_patterns:
-      - "src/components/settings/**"
-      - "src/pages/settings.tsx"
-    steps:
-      - action: navigate
-        url: "/settings"
-      - action: wait_for
-        selector: "form.settings-form"
-      - action: screenshot
-        name: "settings-initial"
-      # Toggle dark mode
-      - action: click
-        selector: "#dark-mode-toggle"
-      - action: assert_exists
-        selector: "body.dark-mode"
-        message: "Dark mode should be applied"
-      - action: screenshot
-        name: "settings-dark-mode"
-      # Test form input
-      - action: type
-        selector: "#display-name"
-        text: "Test User"
-      - action: click
-        selector: "button[type='submit']"
-      - action: wait_network_idle
-      - action: assert_no_errors
-
-  # ---------------------------------------------------------------------------
-  # Checkout flow - critical path, always run
-  # ---------------------------------------------------------------------------
-  - name: "Checkout flow"
-    description: "Verify the complete checkout process works"
-    trigger: always
-    steps:
-      - action: navigate
-        url: "/products"
-      - action: wait_for
-        selector: ".product-grid"
-      - action: click
-        selector: ".product-card:first-child .add-to-cart"
-        description: "Add first product to cart"
-      - action: wait_for
-        selector: ".cart-count"
-      - action: assert_text
-        selector: ".cart-count"
-        contains: "1"
-      - action: navigate
-        url: "/cart"
-      - action: wait_for
-        selector: ".cart-items"
-      - action: click
-        selector: ".checkout-button"
-      - action: wait_for
-        selector: ".checkout-form"
-      - action: screenshot
-        name: "checkout-form"
-        compare_baseline: true  # Visual regression check
-
-# -----------------------------------------------------------------------------
-# Global Settings
-# -----------------------------------------------------------------------------
-settings:
-  default_timeout_ms: 10000
-  error_selectors:
-    - ".error-toast"
-    - ".error-boundary"
-    - "[role='alert'][aria-live='assertive']"
-  screenshot_each_step: false  # Set true for debugging

package/dist/commands/secrets.d.ts

@@ -1,33 +0,0 @@
-/**
- * Secrets commands - manage secrets stored on Haystack Platform
- */
-/**
- * List all secrets (keys only, not values)
- */
-export declare function listSecrets(): Promise<void>;
-/**
- * Set a secret
- */
-export declare function setSecret(key: string, value: string, options: {
-    scope?: string;
-    scopeId?: string;
-}): Promise<void>;
-/**
- * Get a secret value (for programmatic use)
- * Returns the value to stdout for piping to other commands.
- * Use --quiet to suppress all output except the value.
- */
-export declare function getSecret(key: string, options: {
-    quiet?: boolean;
-}): Promise<void>;
-/**
- * Get multiple secrets needed by a repo's .haystack.json
- * Returns JSON object with key-value pairs.
- */
-export declare function getSecretsForRepo(keys: string[], options: {
-    json?: boolean;
-}): Promise<void>;
-/**
- * Delete a secret
- */
-export declare function deleteSecret(key: string): Promise<void>;

package/dist/commands/secrets.js

@@ -1,216 +0,0 @@
-/**
- * Secrets commands - manage secrets stored on Haystack Platform
- */
-import chalk from 'chalk';
-import { loadToken } from './login.js';
-const API_BASE = 'https://haystackeditor.com/api/secrets';
-async function requireAuth() {
-    const token = await loadToken();
-    if (!token) {
-        console.error(chalk.red('\nNot logged in. Run `haystack login` first.\n'));
-        process.exit(1);
-    }
-    return token;
-}
-async function apiRequest(method, path, token, body) {
-    const url = `${API_BASE}${path}`;
-    const response = await fetch(url, {
-        method,
-        headers: {
-            'Authorization': `Bearer ${token}`,
-            'Content-Type': 'application/json',
-            'User-Agent': 'Haystack-CLI',
-        },
-        body: body ? JSON.stringify(body) : undefined,
-    });
-    return response;
-}
-/**
- * List all secrets (keys only, not values)
- */
-export async function listSecrets() {
-    const token = await requireAuth();
-    console.log(chalk.dim('\nFetching secrets...\n'));
-    try {
-        const response = await apiRequest('GET', '', token);
-        if (!response.ok) {
-            if (response.status === 401) {
-                console.error(chalk.red('Session expired. Run `haystack login` again.\n'));
-                process.exit(1);
-            }
-            throw new Error(`Failed to list secrets: ${response.status}`);
-        }
-        const data = await response.json();
-        const secrets = data.secrets || [];
-        if (secrets.length === 0) {
-            console.log(chalk.yellow('No secrets found.\n'));
-            console.log(chalk.dim('Set a secret with: haystack secrets set KEY VALUE\n'));
-            return;
-        }
-        console.log(chalk.bold('Your secrets:\n'));
-        for (const secret of secrets) {
-            const scope = secret.scope === 'user' ? '' : chalk.dim(` (${secret.scope}: ${secret.scopeId})`);
-            console.log(`  ${chalk.cyan(secret.key)}${scope}`);
-        }
-        console.log();
-    }
-    catch (error) {
-        console.error(chalk.red(`\nError: ${error.message}\n`));
-        process.exit(1);
-    }
-}
-/**
- * Set a secret
- */
-export async function setSecret(key, value, options) {
-    const token = await requireAuth();
-    if (!key || !value) {
-        console.error(chalk.red('\nUsage: haystack secrets set KEY VALUE\n'));
-        process.exit(1);
-    }
-    // Validate key format
-    if (!/^[A-Z][A-Z0-9_]*$/.test(key)) {
-        console.error(chalk.red('\nSecret key must be uppercase with underscores (e.g., MY_API_KEY)\n'));
-        process.exit(1);
-    }
-    console.log(chalk.dim(`\nSetting secret ${key}...`));
-    try {
-        const body = {
-            key,
-            plaintextValue: value, // Server will encrypt
-        };
-        if (options.scope) {
-            body.scope = options.scope;
-        }
-        if (options.scopeId) {
-            body.scopeId = options.scopeId;
-        }
-        const response = await apiRequest('POST', '', token, body);
-        if (!response.ok) {
-            if (response.status === 401) {
-                console.error(chalk.red('Session expired. Run `haystack login` again.\n'));
-                process.exit(1);
-            }
-            const error = await response.json().catch(() => ({}));
-            throw new Error(error.error || `Failed to set secret: ${response.status}`);
-        }
-        console.log(chalk.green(`\nSecret ${chalk.bold(key)} saved.\n`));
-    }
-    catch (error) {
-        console.error(chalk.red(`\nError: ${error.message}\n`));
-        process.exit(1);
-    }
-}
-/**
- * Get a secret value (for programmatic use)
- * Returns the value to stdout for piping to other commands.
- * Use --quiet to suppress all output except the value.
- */
-export async function getSecret(key, options) {
-    const token = await requireAuth();
-    if (!key) {
-        console.error(chalk.red('\nUsage: haystack secrets get KEY\n'));
-        process.exit(1);
-    }
-    try {
-        const response = await apiRequest('GET', `/${encodeURIComponent(key)}`, token);
-        if (!response.ok) {
-            if (response.status === 401) {
-                if (!options.quiet) {
-                    console.error(chalk.red('Session expired. Run `haystack login` again.\n'));
-                }
-                process.exit(1);
-            }
-            if (response.status === 404) {
-                if (!options.quiet) {
-                    console.error(chalk.yellow(`\nSecret ${key} not found.\n`));
-                }
-                process.exit(1);
-            }
-            throw new Error(`Failed to get secret: ${response.status}`);
-        }
-        const data = await response.json();
-        // Output just the value (no newline if quiet, for piping)
-        if (options.quiet) {
-            process.stdout.write(data.value);
-        }
-        else {
-            console.log(data.value);
-        }
-    }
-    catch (error) {
-        if (!options.quiet) {
-            console.error(chalk.red(`\nError: ${error.message}\n`));
-        }
-        process.exit(1);
-    }
-}
-/**
- * Get multiple secrets needed by a repo's .haystack.json
- * Returns JSON object with key-value pairs.
- */
-export async function getSecretsForRepo(keys, options) {
-    const token = await requireAuth();
-    if (keys.length === 0) {
-        console.error(chalk.red('\nUsage: haystack secrets get-for-repo KEY1 KEY2 ...\n'));
-        process.exit(1);
-    }
-    try {
-        const response = await apiRequest('POST', '/batch', token, { keys });
-        if (!response.ok) {
-            if (response.status === 401) {
-                console.error(chalk.red('Session expired. Run `haystack login` again.\n'));
-                process.exit(1);
-            }
-            throw new Error(`Failed to get secrets: ${response.status}`);
-        }
-        const data = await response.json();
-        if (options.json) {
-            console.log(JSON.stringify(data.secrets));
-        }
-        else {
-            if (data.missing.length > 0) {
-                console.log(chalk.yellow(`\nMissing secrets: ${data.missing.join(', ')}\n`));
-            }
-            console.log(chalk.bold('\nSecrets loaded:\n'));
-            for (const [k, v] of Object.entries(data.secrets)) {
-                console.log(`  ${chalk.cyan(k)}: ${chalk.dim('***' + v.slice(-4))}`);
-            }
-            console.log();
-        }
-    }
-    catch (error) {
-        console.error(chalk.red(`\nError: ${error.message}\n`));
-        process.exit(1);
-    }
-}
-/**
- * Delete a secret
- */
-export async function deleteSecret(key) {
-    const token = await requireAuth();
-    if (!key) {
-        console.error(chalk.red('\nUsage: haystack secrets delete KEY\n'));
-        process.exit(1);
-    }
-    console.log(chalk.dim(`\nDeleting secret ${key}...`));
-    try {
-        const response = await apiRequest('DELETE', `/${encodeURIComponent(key)}`, token);
-        if (!response.ok) {
-            if (response.status === 401) {
-                console.error(chalk.red('Session expired. Run `haystack login` again.\n'));
-                process.exit(1);
-            }
-            if (response.status === 404) {
-                console.error(chalk.yellow(`\nSecret ${key} not found.\n`));
-                process.exit(1);
-            }
-            throw new Error(`Failed to delete secret: ${response.status}`);
-        }
-        console.log(chalk.green(`\nSecret ${chalk.bold(key)} deleted.\n`));
-    }
-    catch (error) {
-        console.error(chalk.red(`\nError: ${error.message}\n`));
-        process.exit(1);
-    }
-}

package/dist/tools/fixtures.d.ts

@@ -1,38 +0,0 @@
-/**
- * Fixture definition for loading.
- * This is constructed from HaystackConfig's verification.fixtures Record.
- */
-export interface Fixture {
-    /** URL pattern to intercept (e.g., "/api/users/*") */
-    pattern: string;
-    /** Source to load data from (file://, https://, s3://, r2://, script://, or passthrough) */
-    source: string;
-    /** Optional headers for remote sources */
-    headers?: Record<string, string>;
-    /** Optional cookies for remote sources (for login-required endpoints) */
-    cookies?: string;
-}
-export interface FixtureData {
-    pattern: string;
-    data: unknown;
-    source: string;
-}
-export interface FixtureLoaderOptions {
-    /** Base directory for relative file paths */
-    baseDir: string;
-    /** Environment variables for token substitution */
-    env: Record<string, string>;
-}
-/**
- * Load fixture data from various sources
- */
-export declare function loadFixture(fixture: Fixture, options: FixtureLoaderOptions): Promise<FixtureData>;
-/**
- * Load all fixtures from config
- */
-export declare function loadAllFixtures(fixtures: Fixture[], options: FixtureLoaderOptions): Promise<FixtureData[]>;
-/**
- * Generate a mock fixture based on a pattern
- * Useful for scaffolding fixture files
- */
-export declare function generateMockFixture(pattern: string): unknown;

package/dist/tools/fixtures.js

@@ -1,199 +0,0 @@
-import * as fs from 'fs/promises';
-import * as path from 'path';
-/**
- * Load fixture data from various sources
- */
-export async function loadFixture(fixture, options) {
-    const { source, pattern, headers, cookies } = fixture;
-    // Substitute env vars in source, headers, and cookies
-    const resolvedSource = substituteEnvVars(source, options.env);
-    const resolvedHeaders = headers
-        ? Object.fromEntries(Object.entries(headers).map(([k, v]) => [k, substituteEnvVars(v, options.env)]))
-        : undefined;
-    const resolvedCookies = cookies ? substituteEnvVars(cookies, options.env) : undefined;
-    let data;
-    if (source === 'passthrough') {
-        // Passthrough means don't intercept - return marker
-        return {
-            pattern,
-            data: { __passthrough: true },
-            source: 'passthrough',
-        };
-    }
-    if (source.startsWith('file://')) {
-        data = await loadFromFile(resolvedSource.slice(7), options.baseDir);
-    }
-    else if (source.startsWith('https://') || source.startsWith('http://')) {
-        data = await loadFromUrl(resolvedSource, resolvedHeaders, resolvedCookies);
-    }
-    else if (source.startsWith('s3://')) {
-        data = await loadFromS3(resolvedSource.slice(5));
-    }
-    else if (source.startsWith('r2://')) {
-        data = await loadFromR2(resolvedSource.slice(5));
-    }
-    else if (source.startsWith('script://')) {
-        data = await loadFromScript(resolvedSource.slice(9), options.baseDir);
-    }
-    else {
-        throw new Error(`Unknown fixture source type: ${source}`);
-    }
-    return { pattern, data, source: resolvedSource };
-}
-/**
- * Load all fixtures from config
- */
-export async function loadAllFixtures(fixtures, options) {
-    const results = [];
-    for (const fixture of fixtures) {
-        try {
-            const data = await loadFixture(fixture, options);
-            results.push(data);
-        }
-        catch (error) {
-            console.error(`Failed to load fixture for pattern ${fixture.pattern}:`, error);
-            throw error;
-        }
-    }
-    return results;
-}
-function substituteEnvVars(str, env) {
-    return str.replace(/\$([A-Z_][A-Z0-9_]*)/g, (_, varName) => {
-        return env[varName] || process.env[varName] || '';
-    });
-}
-async function loadFromFile(filePath, baseDir) {
-    const fullPath = path.isAbsolute(filePath) ? filePath : path.join(baseDir, filePath);
-    const content = await fs.readFile(fullPath, 'utf-8');
-    return JSON.parse(content);
-}
-async function loadFromUrl(url, headers, cookies) {
-    // Build headers, including Cookie header if provided
-    const requestHeaders = { ...headers };
-    if (cookies) {
-        requestHeaders['Cookie'] = cookies;
-    }
-    const response = await fetch(url, {
-        headers: requestHeaders,
-    });
-    if (!response.ok) {
-        throw new Error(`Failed to fetch ${url}: ${response.status} ${response.statusText}`);
-    }
-    return response.json();
-}
-async function loadFromS3(s3Path) {
-    // s3Path format: bucket/key
-    const [bucket, ...keyParts] = s3Path.split('/');
-    const key = keyParts.join('/');
-    // Use AWS SDK if available, otherwise fall back to presigned URL approach
-    try {
-        // Dynamic import to make SDK optional
-        // eslint-disable-next-line @typescript-eslint/no-var-requires
-        const { S3Client, GetObjectCommand } = require('@aws-sdk/client-s3');
-        const client = new S3Client({});
-        const command = new GetObjectCommand({ Bucket: bucket, Key: key });
-        const response = await client.send(command);
-        const body = await response.Body?.transformToString();
-        if (!body)
-            throw new Error('Empty response from S3');
-        return JSON.parse(body);
-    }
-    catch (error) {
-        // If SDK not available, provide helpful error
-        if (error.code === 'MODULE_NOT_FOUND') {
-            throw new Error('S3 fixtures require @aws-sdk/client-s3. Install it with: pnpm add @aws-sdk/client-s3');
-        }
-        throw error;
-    }
-}
-async function loadFromR2(r2Path) {
-    // r2Path format: bucket/key
-    // R2 uses S3-compatible API, so we can use the same SDK
-    const [bucket, ...keyParts] = r2Path.split('/');
-    const key = keyParts.join('/');
-    const accountId = process.env.CLOUDFLARE_ACCOUNT_ID || process.env.CF_ACCOUNT_ID;
-    if (!accountId) {
-        throw new Error('R2 fixtures require CLOUDFLARE_ACCOUNT_ID or CF_ACCOUNT_ID env var');
-    }
-    try {
-        // Dynamic import to make SDK optional
-        // eslint-disable-next-line @typescript-eslint/no-var-requires
-        const { S3Client, GetObjectCommand } = require('@aws-sdk/client-s3');
-        const client = new S3Client({
-            region: 'auto',
-            endpoint: `https://${accountId}.r2.cloudflarestorage.com`,
-            credentials: {
-                accessKeyId: process.env.R2_ACCESS_KEY_ID || '',
-                secretAccessKey: process.env.R2_SECRET_ACCESS_KEY || '',
-            },
-        });
-        const command = new GetObjectCommand({ Bucket: bucket, Key: key });
-        const response = await client.send(command);
-        const body = await response.Body?.transformToString();
-        if (!body)
-            throw new Error('Empty response from R2');
-        return JSON.parse(body);
-    }
-    catch (error) {
-        if (error.code === 'MODULE_NOT_FOUND') {
-            throw new Error('R2 fixtures require @aws-sdk/client-s3. Install it with: pnpm add @aws-sdk/client-s3');
-        }
-        throw error;
-    }
-}
-async function loadFromScript(scriptPath, baseDir) {
-    const fullPath = path.isAbsolute(scriptPath)
-        ? scriptPath
-        : path.join(baseDir, scriptPath);
-    // Dynamic import the script - it should export a default function or 'generate' function
-    const module = await import(fullPath);
-    const generator = module.default || module.generate;
-    if (typeof generator !== 'function') {
-        throw new Error(`Script ${scriptPath} must export a default function or 'generate' function`);
-    }
-    return generator();
-}
-/**
- * Generate a mock fixture based on a pattern
- * Useful for scaffolding fixture files
- */
-export function generateMockFixture(pattern) {
-    // Generate sensible mock data based on the pattern
-    if (pattern.includes('user')) {
-        return {
-            id: 1,
-            name: 'Test User',
-            email: 'test@example.com',
-            avatar: 'https://placekitten.com/100/100',
-        };
-    }
-    if (pattern.includes('dashboard') || pattern.includes('analytics')) {
-        return {
-            totalUsers: 1234,
-            activeUsers: 567,
-            revenue: 12345.67,
-            chartData: [
-                { date: '2024-01-01', value: 100 },
-                { date: '2024-01-02', value: 120 },
-                { date: '2024-01-03', value: 115 },
-            ],
-        };
-    }
-    if (pattern.includes('config') || pattern.includes('settings')) {
-        return {
-            theme: 'light',
-            language: 'en',
-            notifications: true,
-            features: {
-                darkMode: true,
-                betaFeatures: false,
-            },
-        };
-    }
-    // Default generic response
-    return {
-        success: true,
-        data: [],
-        message: `Mock data for ${pattern}`,
-    };
-}