@haystackeditor/cli 0.10.2 → 0.11.0

package/dist/triage/prompts.js

@@ -45,7 +45,7 @@ const INTENT_DRIFT_SCHEMA = `{
       "line": 42,
       "severity": "error | warning | info",
       "message": "Description of the drift or incomplete fulfillment",
-      "pattern": "intent_drift | incomplete_fulfillment"
+      "pattern": "intent_drift | incomplete_fulfillment | scope_creep"
     }
   ],
   "summary": "Brief 1-sentence summary",
@@ -261,12 +261,20 @@ The agent didn't finish everything that was asked:
 - Agent said "I'll skip X for now" for something the user explicitly requested
 - Tests not written when user asked for tests
 
+### Scope Creep
+The agent added functionality the user never asked for:
+- User asks to fix a bug → agent also adds a cooldown, retry logic, or caching layer
+- User asks to investigate → agent proactively "fixes" things beyond what was discussed
+- User asks for one feature → agent bundles in extra features "while we're at it"
+- Any new mechanism not traceable to a user instruction
+
 ## Red flags to search for in the diff
 
 - Fixed/hardcoded values where dynamic behavior was requested
 - TODO, FIXME, placeholder, stub comments in new code
 - Empty function bodies or early returns
 - Interface fields that are declared but never assigned anywhere
+- New mechanisms (cooldowns, retries, caches, rate limits) not requested by the user
 
 ## Output
 
@@ -277,15 +285,15 @@ ${INTENT_DRIFT_SCHEMA}
 \`\`\`
 
 - Set \`sessionsChecked\` to the number of trace files you read
-- Set \`passed\` to \`true\` if no drift or incomplete fulfillment found
+- Set \`passed\` to \`true\` if no drift, incomplete fulfillment, or scope creep found
 - Set \`passed\` to \`false\` if any issues with severity "error" were found
-- For each issue, set \`pattern\` to either "intent_drift" or "incomplete_fulfillment"
+- For each issue, set \`pattern\` to "intent_drift", "incomplete_fulfillment", or "scope_creep"
 - You MUST write the result file even if no issues are found
 
 ## Severity guidelines
 
-- **error**: Core user intent violated — the main thing they asked for is wrong or missing
-- **warning**: Secondary requirement missed or approximated
+- **error**: Core user intent violated — the main thing they asked for is wrong or missing, or large unrequested feature added
+- **warning**: Secondary requirement missed or approximated, or small unrequested mechanism added
 - **info**: Minor simplification that mostly still works as intended${precomputedDiff ? `
 
 ## Diff (precomputed)

package/dist/triage/runner.js

@@ -17,7 +17,7 @@ const TRIAGE_DIR = '.haystack/triage';
 const TIMEOUT_MS = 300_000; // 5 minutes per checker
 /** Max agentic turns per checker — kept tight since these are read-only tasks */
 const MAX_TURNS = {
-    'code-review': 10,
+    'code-review': 5,
     'rules-validator': 10,
     'intent-drift': 10,
 };

package/dist/triage/types.d.ts

@@ -13,7 +13,7 @@ export interface TriageIssue {
     /** For rules validator: rule ID (e.g., PR001) */
     rule?: string;
     /** For intent drift: drift pattern */
-    pattern?: 'intent_drift' | 'incomplete_fulfillment';
+    pattern?: 'intent_drift' | 'incomplete_fulfillment' | 'scope_creep';
 }
 export interface CodeReviewResult {
     checker: 'code-review';

package/dist/types.d.ts

@@ -56,7 +56,9 @@ declare const DevServerSchema: z.ZodObject<{
 /** Valid AI reviewer source identifiers that the merge queue can wait for */
 export declare const AI_REVIEWER_SOURCES: readonly ["cursor", "coderabbit", "copilot", "greptile", "sourcery", "qodo", "codeant", "ellipsis", "korbit", "panto", "bito", "graphite", "deepsource", "snyk", "codacy", "sonarcloud", "sweep", "codeguru", "codereviewer", "codium"];
 export declare const AI_REVIEWER_DISPLAY_NAMES: Record<typeof AI_REVIEWER_SOURCES[number], string>;
-declare const BabysitterConfigSchema: z.ZodObject<{
+/** Maps friendly source names to exact GitHub bot login usernames. */
+export declare const AI_REVIEWER_BOT_USERNAMES: Record<typeof AI_REVIEWER_SOURCES[number], string>;
+declare const MergeQueueConfigSchema: z.ZodObject<{
     /** Enable the Haystack auto-merge queue */
     merge_queue: z.ZodOptional<z.ZodBoolean>;
     /** Automatically rebase PRs that develop merge conflicts after pushes to the base branch */
@@ -74,8 +76,36 @@ declare const BabysitterConfigSchema: z.ZodObject<{
         default_minutes?: number | undefined;
         authors?: Record<string, number> | undefined;
     }>>;
-    /** AI reviewer sources to wait for before starting the merge grace period */
-    expected_ai_reviewers: z.ZodOptional<z.ZodArray<z.ZodEnum<["cursor", "coderabbit", "copilot", "greptile", "sourcery", "qodo", "codeant", "ellipsis", "korbit", "panto", "bito", "graphite", "deepsource", "snyk", "codacy", "sonarcloud", "sweep", "codeguru", "codereviewer", "codium"]>, "many">>;
+    /** Batch multiple PRs into one CI run */
+    batch_merge: z.ZodOptional<z.ZodObject<{
+        /** Enable batch merging */
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        /** Minimum PRs to form a batch */
+        min_batch_size: z.ZodOptional<z.ZodNumber>;
+        /** Maximum PRs per batch (cap: 20) */
+        max_batch_size: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        enabled?: boolean | undefined;
+        min_batch_size?: number | undefined;
+        max_batch_size?: number | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        min_batch_size?: number | undefined;
+        max_batch_size?: number | undefined;
+    }>>;
+    /** Wait for external AI code reviewers before merging — all bots must post */
+    wait_for_reviewer: z.ZodOptional<z.ZodObject<{
+        /** GitHub bot usernames to wait for (e.g. "cursor-bugbot[bot]") */
+        bots: z.ZodArray<z.ZodString, "many">;
+        /** Give up waiting after this many minutes (default: 30) */
+        timeout_minutes: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        bots: string[];
+        timeout_minutes?: number | undefined;
+    }, {
+        bots: string[];
+        timeout_minutes?: number | undefined;
+    }>>;
 }, "strip", z.ZodTypeAny, {
     merge_queue?: boolean | undefined;
     auto_resolve_conflicts?: boolean | undefined;
@@ -83,7 +113,15 @@ declare const BabysitterConfigSchema: z.ZodObject<{
         default_minutes?: number | undefined;
         authors?: Record<string, number> | undefined;
     } | undefined;
-    expected_ai_reviewers?: ("cursor" | "coderabbit" | "copilot" | "greptile" | "sourcery" | "qodo" | "codeant" | "ellipsis" | "korbit" | "panto" | "bito" | "graphite" | "deepsource" | "snyk" | "codacy" | "sonarcloud" | "sweep" | "codeguru" | "codereviewer" | "codium")[] | undefined;
+    batch_merge?: {
+        enabled?: boolean | undefined;
+        min_batch_size?: number | undefined;
+        max_batch_size?: number | undefined;
+    } | undefined;
+    wait_for_reviewer?: {
+        bots: string[];
+        timeout_minutes?: number | undefined;
+    } | undefined;
 }, {
     merge_queue?: boolean | undefined;
     auto_resolve_conflicts?: boolean | undefined;
@@ -91,7 +129,15 @@ declare const BabysitterConfigSchema: z.ZodObject<{
         default_minutes?: number | undefined;
         authors?: Record<string, number> | undefined;
     } | undefined;
-    expected_ai_reviewers?: ("cursor" | "coderabbit" | "copilot" | "greptile" | "sourcery" | "qodo" | "codeant" | "ellipsis" | "korbit" | "panto" | "bito" | "graphite" | "deepsource" | "snyk" | "codacy" | "sonarcloud" | "sweep" | "codeguru" | "codereviewer" | "codium")[] | undefined;
+    batch_merge?: {
+        enabled?: boolean | undefined;
+        min_batch_size?: number | undefined;
+        max_batch_size?: number | undefined;
+    } | undefined;
+    wait_for_reviewer?: {
+        bots: string[];
+        timeout_minutes?: number | undefined;
+    } | undefined;
 }>;
 declare const ServiceSchema: z.ZodObject<{
     /** Root directory relative to repo root */
@@ -1109,8 +1155,8 @@ export declare const HaystackConfigSchema: z.ZodObject<{
         services?: string[] | undefined;
         description?: string | undefined;
     }>>>;
-    /** Babysitter configuration for autonomous PR maintenance */
-    babysitter: z.ZodOptional<z.ZodObject<{
+    /** Merge queue configuration for autonomous PR maintenance */
+    merge_queue: z.ZodOptional<z.ZodObject<{
         /** Enable the Haystack auto-merge queue */
         merge_queue: z.ZodOptional<z.ZodBoolean>;
         /** Automatically rebase PRs that develop merge conflicts after pushes to the base branch */
@@ -1128,8 +1174,36 @@ export declare const HaystackConfigSchema: z.ZodObject<{
             default_minutes?: number | undefined;
             authors?: Record<string, number> | undefined;
         }>>;
-        /** AI reviewer sources to wait for before starting the merge grace period */
-        expected_ai_reviewers: z.ZodOptional<z.ZodArray<z.ZodEnum<["cursor", "coderabbit", "copilot", "greptile", "sourcery", "qodo", "codeant", "ellipsis", "korbit", "panto", "bito", "graphite", "deepsource", "snyk", "codacy", "sonarcloud", "sweep", "codeguru", "codereviewer", "codium"]>, "many">>;
+        /** Batch multiple PRs into one CI run */
+        batch_merge: z.ZodOptional<z.ZodObject<{
+            /** Enable batch merging */
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            /** Minimum PRs to form a batch */
+            min_batch_size: z.ZodOptional<z.ZodNumber>;
+            /** Maximum PRs per batch (cap: 20) */
+            max_batch_size: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            enabled?: boolean | undefined;
+            min_batch_size?: number | undefined;
+            max_batch_size?: number | undefined;
+        }, {
+            enabled?: boolean | undefined;
+            min_batch_size?: number | undefined;
+            max_batch_size?: number | undefined;
+        }>>;
+        /** Wait for external AI code reviewers before merging — all bots must post */
+        wait_for_reviewer: z.ZodOptional<z.ZodObject<{
+            /** GitHub bot usernames to wait for (e.g. "cursor-bugbot[bot]") */
+            bots: z.ZodArray<z.ZodString, "many">;
+            /** Give up waiting after this many minutes (default: 30) */
+            timeout_minutes: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            bots: string[];
+            timeout_minutes?: number | undefined;
+        }, {
+            bots: string[];
+            timeout_minutes?: number | undefined;
+        }>>;
     }, "strip", z.ZodTypeAny, {
         merge_queue?: boolean | undefined;
         auto_resolve_conflicts?: boolean | undefined;
@@ -1137,7 +1211,15 @@ export declare const HaystackConfigSchema: z.ZodObject<{
             default_minutes?: number | undefined;
             authors?: Record<string, number> | undefined;
         } | undefined;
-        expected_ai_reviewers?: ("cursor" | "coderabbit" | "copilot" | "greptile" | "sourcery" | "qodo" | "codeant" | "ellipsis" | "korbit" | "panto" | "bito" | "graphite" | "deepsource" | "snyk" | "codacy" | "sonarcloud" | "sweep" | "codeguru" | "codereviewer" | "codium")[] | undefined;
+        batch_merge?: {
+            enabled?: boolean | undefined;
+            min_batch_size?: number | undefined;
+            max_batch_size?: number | undefined;
+        } | undefined;
+        wait_for_reviewer?: {
+            bots: string[];
+            timeout_minutes?: number | undefined;
+        } | undefined;
     }, {
         merge_queue?: boolean | undefined;
         auto_resolve_conflicts?: boolean | undefined;
@@ -1145,11 +1227,36 @@ export declare const HaystackConfigSchema: z.ZodObject<{
             default_minutes?: number | undefined;
             authors?: Record<string, number> | undefined;
         } | undefined;
-        expected_ai_reviewers?: ("cursor" | "coderabbit" | "copilot" | "greptile" | "sourcery" | "qodo" | "codeant" | "ellipsis" | "korbit" | "panto" | "bito" | "graphite" | "deepsource" | "snyk" | "codacy" | "sonarcloud" | "sweep" | "codeguru" | "codereviewer" | "codium")[] | undefined;
+        batch_merge?: {
+            enabled?: boolean | undefined;
+            min_batch_size?: number | undefined;
+            max_batch_size?: number | undefined;
+        } | undefined;
+        wait_for_reviewer?: {
+            bots: string[];
+            timeout_minutes?: number | undefined;
+        } | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
     version: "1";
     name?: string | undefined;
+    merge_queue?: {
+        merge_queue?: boolean | undefined;
+        auto_resolve_conflicts?: boolean | undefined;
+        merge_debounce?: {
+            default_minutes?: number | undefined;
+            authors?: Record<string, number> | undefined;
+        } | undefined;
+        batch_merge?: {
+            enabled?: boolean | undefined;
+            min_batch_size?: number | undefined;
+            max_batch_size?: number | undefined;
+        } | undefined;
+        wait_for_reviewer?: {
+            bots: string[];
+            timeout_minutes?: number | undefined;
+        } | undefined;
+    } | undefined;
     services?: Record<string, {
         command: string;
         type?: "server" | "batch" | undefined;
@@ -1251,18 +1358,26 @@ export declare const HaystackConfigSchema: z.ZodObject<{
         services?: string[] | undefined;
         description?: string | undefined;
     }> | undefined;
-    babysitter?: {
+}, {
+    version: "1";
+    name?: string | undefined;
+    merge_queue?: {
         merge_queue?: boolean | undefined;
         auto_resolve_conflicts?: boolean | undefined;
         merge_debounce?: {
             default_minutes?: number | undefined;
             authors?: Record<string, number> | undefined;
         } | undefined;
-        expected_ai_reviewers?: ("cursor" | "coderabbit" | "copilot" | "greptile" | "sourcery" | "qodo" | "codeant" | "ellipsis" | "korbit" | "panto" | "bito" | "graphite" | "deepsource" | "snyk" | "codacy" | "sonarcloud" | "sweep" | "codeguru" | "codereviewer" | "codium")[] | undefined;
+        batch_merge?: {
+            enabled?: boolean | undefined;
+            min_batch_size?: number | undefined;
+            max_batch_size?: number | undefined;
+        } | undefined;
+        wait_for_reviewer?: {
+            bots: string[];
+            timeout_minutes?: number | undefined;
+        } | undefined;
     } | undefined;
-}, {
-    version: "1";
-    name?: string | undefined;
     services?: Record<string, {
         command: string;
         type?: "server" | "batch" | undefined;
@@ -1364,15 +1479,6 @@ export declare const HaystackConfigSchema: z.ZodObject<{
         services?: string[] | undefined;
         description?: string | undefined;
     }> | undefined;
-    babysitter?: {
-        merge_queue?: boolean | undefined;
-        auto_resolve_conflicts?: boolean | undefined;
-        merge_debounce?: {
-            default_minutes?: number | undefined;
-            authors?: Record<string, number> | undefined;
-        } | undefined;
-        expected_ai_reviewers?: ("cursor" | "coderabbit" | "copilot" | "greptile" | "sourcery" | "qodo" | "codeant" | "ellipsis" | "korbit" | "panto" | "bito" | "graphite" | "deepsource" | "snyk" | "codacy" | "sonarcloud" | "sweep" | "codeguru" | "codereviewer" | "codium")[] | undefined;
-    } | undefined;
 }>;
 export type HaystackConfig = z.infer<typeof HaystackConfigSchema>;
 export type VerificationCommand = z.infer<typeof VerificationCommandSchema>;
@@ -1392,7 +1498,7 @@ export type DockerService = z.infer<typeof DockerServiceSchema>;
 export type DatabaseConfig = z.infer<typeof DatabaseConfigSchema>;
 export type NetworkConfig = z.infer<typeof NetworkConfigSchema>;
 export type SecretDeclaration = z.infer<typeof SecretDeclarationSchema>;
-export type BabysitterConfig = z.infer<typeof BabysitterConfigSchema>;
+export type MergeQueueConfig = z.infer<typeof MergeQueueConfigSchema>;
 /**
  * Project detection results
  */

package/dist/types.js

@@ -94,8 +94,31 @@ export const AI_REVIEWER_DISPLAY_NAMES = {
     codereviewer: 'CodeReviewBot',
     codium: 'Codium',
 };
+/** Maps friendly source names to exact GitHub bot login usernames. */
+export const AI_REVIEWER_BOT_USERNAMES = {
+    cursor: 'cursor-bugbot[bot]',
+    coderabbit: 'coderabbitai[bot]',
+    copilot: 'copilot[bot]',
+    greptile: 'greptile[bot]',
+    sourcery: 'sourcery-ai[bot]',
+    qodo: 'qodo-merge-pro[bot]',
+    codeant: 'codeant-ai[bot]',
+    ellipsis: 'ellipsis-dev[bot]',
+    korbit: 'korbit-ai[bot]',
+    panto: 'pantoaibot[bot]',
+    bito: 'bito[bot]',
+    graphite: 'graphite-app[bot]',
+    deepsource: 'deepsource-io[bot]',
+    snyk: 'snyk[bot]',
+    codacy: 'codacy-production[bot]',
+    sonarcloud: 'sonarcloud[bot]',
+    sweep: 'sweep-ai[bot]',
+    codeguru: 'aws-codeguru-reviewer[bot]',
+    codereviewer: 'codereviewbot[bot]',
+    codium: 'codiumai[bot]',
+};
 const AIReviewerSourceSchema = z.enum(AI_REVIEWER_SOURCES);
-const BabysitterConfigSchema = z.object({
+const MergeQueueConfigSchema = z.object({
     /** Enable the Haystack auto-merge queue */
     merge_queue: z.boolean().optional(),
     /** Automatically rebase PRs that develop merge conflicts after pushes to the base branch */
@@ -107,8 +130,22 @@ const BabysitterConfigSchema = z.object({
         /** Per-author wait time overrides (author login → minutes) */
         authors: z.record(z.string(), z.number()).optional(),
     }).optional(),
-    /** AI reviewer sources to wait for before starting the merge grace period */
-    expected_ai_reviewers: z.array(AIReviewerSourceSchema).optional(),
+    /** Batch multiple PRs into one CI run */
+    batch_merge: z.object({
+        /** Enable batch merging */
+        enabled: z.boolean().optional(),
+        /** Minimum PRs to form a batch */
+        min_batch_size: z.number().optional(),
+        /** Maximum PRs per batch (cap: 20) */
+        max_batch_size: z.number().optional(),
+    }).optional(),
+    /** Wait for external AI code reviewers before merging — all bots must post */
+    wait_for_reviewer: z.object({
+        /** GitHub bot usernames to wait for (e.g. "cursor-bugbot[bot]") */
+        bots: z.array(z.string()),
+        /** Give up waiting after this many minutes (default: 30) */
+        timeout_minutes: z.number().optional(),
+    }).optional(),
 });
 // =============================================================================
 // SERVICE (for monorepos)
@@ -253,6 +290,6 @@ export const HaystackConfigSchema = z.object({
     network: NetworkConfigSchema.optional(),
     /** Secrets required by this project */
     secrets: z.record(z.string(), SecretDeclarationSchema).optional(),
-    /** Babysitter configuration for autonomous PR maintenance */
-    babysitter: BabysitterConfigSchema.optional(),
+    /** Merge queue configuration for autonomous PR maintenance */
+    merge_queue: MergeQueueConfigSchema.optional(),
 });

package/dist/utils/analysis-api.d.ts

@@ -105,4 +105,20 @@ export declare function fetchAnalysisResults(owner: string, repo: string, prNumb
  * This is the rich analysis data shown on the Haystack feed — includes
  * verdict, rating, structured findings, verified bugs, and agent fix prompts.
  */
+export interface AutoFixManifest {
+    jobId: string;
+    repo: string;
+    prNumber: number;
+    fixedItems: Array<{
+        category: string;
+        summary: string;
+    }>;
+    leftForReview: Array<{
+        category: string;
+        summary: string;
+        reason: string;
+    }>;
+    timestamp: string;
+}
+export declare function fetchAutoFixManifest(owner: string, repo: string, prNumber: number, token?: string): Promise<AutoFixManifest | null>;
 export declare function fetchRatingSynthesis(owner: string, repo: string, prNumber: number, token?: string): Promise<RatingSynthesis | null>;

package/dist/utils/analysis-api.js

@@ -160,11 +160,29 @@ export async function fetchAnalysisResults(owner, repo, prNumber, token) {
         autoMerged,
     };
 }
-/**
- * Fetch the full rating synthesis for a PR.
- * This is the rich analysis data shown on the Haystack feed — includes
- * verdict, rating, structured findings, verified bugs, and agent fix prompts.
- */
+export async function fetchAutoFixManifest(owner, repo, prNumber, token) {
+    const url = `${PROD_API_BASE}/v3/result/${owner}/${repo}/${prNumber}/auto-fix-manifest.json`;
+    try {
+        const response = await fetch(url, {
+            headers: apiHeaders(token),
+        });
+        if (!response.ok)
+            return null;
+        const data = await response.json();
+        if (data.download_url) {
+            const s3Resp = await fetch(data.download_url, {
+                headers: { 'User-Agent': 'Haystack-CLI' },
+            });
+            if (!s3Resp.ok)
+                return null;
+            return await s3Resp.json();
+        }
+        return data;
+    }
+    catch {
+        return null;
+    }
+}
 export async function fetchRatingSynthesis(owner, repo, prNumber, token) {
     // Use v3/result endpoint (same as the Lambda serves generic files)
     const url = `${PROD_API_BASE}/v3/result/${owner}/${repo}/${prNumber}/rating_synthesis.json`;

package/dist/utils/telemetry.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Lightweight CLI telemetry — fire-and-forget error tracking via PostHog HTTP API.
+ *
+ * Events go to the same PostHog project as the web app, enabling unified
+ * alerting across frontend, CLI, and backend.
+ *
+ * All calls are non-blocking and never throw — telemetry failures must not
+ * break CLI commands.
+ */
+/**
+ * Track an error event. Fire-and-forget — never throws.
+ */
+export declare function trackError(errorType: string, metadata?: Record<string, unknown>): void;
+/**
+ * Track a setup event (non-error). Fire-and-forget.
+ */
+export declare function trackSetupEvent(step: string, metadata?: Record<string, unknown>): void;

package/dist/utils/telemetry.js

@@ -0,0 +1,109 @@
+/**
+ * Lightweight CLI telemetry — fire-and-forget error tracking via PostHog HTTP API.
+ *
+ * Events go to the same PostHog project as the web app, enabling unified
+ * alerting across frontend, CLI, and backend.
+ *
+ * All calls are non-blocking and never throw — telemetry failures must not
+ * break CLI commands.
+ */
+import { readFileSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import * as os from 'os';
+const POSTHOG_HOST = 'https://us.i.posthog.com';
+const POSTHOG_API_KEY = process.env.HAYSTACK_POSTHOG_KEY || 'phc_7wHrCoMlcwuftLe6N38hPb9wKHb4OK0wNw9ayeRySad';
+const CURRENT_FILE_DIR = dirname(fileURLToPath(import.meta.url));
+const PACKAGE_JSON_PATH = resolve(CURRENT_FILE_DIR, '../../package.json');
+/**
+ * Stable machine identifier for PostHog distinct_id.
+ * Uses hostname + username so events are attributable per-machine.
+ * Never throws — falls back to hostname-only or 'anonymous'.
+ */
+function getDistinctId() {
+    try {
+        const hostname = os.hostname();
+        try {
+            return `cli:${os.userInfo().username}@${hostname}`;
+        }
+        catch {
+            return `cli:${hostname}`;
+        }
+    }
+    catch {
+        return 'cli:anonymous';
+    }
+}
+/**
+ * Track an error event. Fire-and-forget — never throws.
+ */
+export function trackError(errorType, metadata) {
+    try {
+        if (typeof globalThis.fetch !== 'function')
+            return;
+        const event = {
+            api_key: POSTHOG_API_KEY,
+            distinct_id: getDistinctId(),
+            event: 'cli_error',
+            properties: {
+                error_type: errorType,
+                cli_version: getCLIVersion(),
+                os: process.platform,
+                arch: process.arch,
+                node_version: process.version,
+                timestamp: new Date().toISOString(),
+                ...metadata,
+            },
+            timestamp: new Date().toISOString(),
+        };
+        // Fire-and-forget — never block the CLI
+        globalThis.fetch(`${POSTHOG_HOST}/capture/`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(event),
+        }).catch(() => { });
+    }
+    catch {
+        // Telemetry must never crash the CLI
+    }
+}
+/**
+ * Track a setup event (non-error). Fire-and-forget.
+ */
+export function trackSetupEvent(step, metadata) {
+    try {
+        if (typeof globalThis.fetch !== 'function')
+            return;
+        const event = {
+            api_key: POSTHOG_API_KEY,
+            distinct_id: getDistinctId(),
+            event: 'cli_setup',
+            properties: {
+                step,
+                cli_version: getCLIVersion(),
+                os: process.platform,
+                arch: process.arch,
+                timestamp: new Date().toISOString(),
+                ...metadata,
+            },
+            timestamp: new Date().toISOString(),
+        };
+        globalThis.fetch(`${POSTHOG_HOST}/capture/`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(event),
+        }).catch(() => { });
+    }
+    catch {
+        // Telemetry must never crash the CLI
+    }
+}
+function getCLIVersion() {
+    try {
+        const packageJson = JSON.parse(readFileSync(PACKAGE_JSON_PATH, 'utf8'));
+        return typeof packageJson.version === 'string' ? packageJson.version : 'unknown';
+    }
+    catch {
+        return 'unknown';
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@haystackeditor/cli",
-  "version": "0.10.2",
+  "version": "0.11.0",
   "description": "Set up Haystack for your project — automated PR review, triage, and merge queue",
   "type": "module",
   "bin": {

package/dist/commands/secrets.d.ts

@@ -1,33 +0,0 @@
-/**
- * Secrets commands - manage secrets stored on Haystack Platform
- */
-/**
- * List all secrets (keys only, not values)
- */
-export declare function listSecrets(): Promise<void>;
-/**
- * Set a secret
- */
-export declare function setSecret(key: string, value: string, options: {
-    scope?: string;
-    scopeId?: string;
-}): Promise<void>;
-/**
- * Get a secret value (for programmatic use)
- * Returns the value to stdout for piping to other commands.
- * Use --quiet to suppress all output except the value.
- */
-export declare function getSecret(key: string, options: {
-    quiet?: boolean;
-}): Promise<void>;
-/**
- * Get multiple secrets needed by a repo's .haystack.json
- * Returns JSON object with key-value pairs.
- */
-export declare function getSecretsForRepo(keys: string[], options: {
-    json?: boolean;
-}): Promise<void>;
-/**
- * Delete a secret
- */
-export declare function deleteSecret(key: string): Promise<void>;