@haystackeditor/cli 0.15.26 → 0.15.28

package/README.md

@@ -19,6 +19,13 @@ The `setup` command walks you through an interactive wizard:
 5. **Review and toggle** discovered items
 6. **Write `.haystack.json`** to your repos
 
+The CLI sends limited operational events to PostHog by default so Haystack can
+measure setup reliability. Events contain a pseudonymous machine identifier,
+CLI/version/platform fields, command-step and error categories, and numeric
+outcomes. They exclude source code, repository names, local paths, usernames,
+hostnames, and raw error text. IP enrichment is disabled. Set `DO_NOT_TRACK=1`
+or `HAYSTACK_TELEMETRY_DISABLED=1` to turn this telemetry off.
+
 ---
 
 ## For AI agents: the machine-readable contract
@@ -62,8 +69,8 @@ haystack triage <ref> --json    # poll findings later / after --no-wait
 
 **`haystack mcp`** runs a stdio MCP server exposing the same payloads as tools:
 `inbox_list`, `pr_get`, `pr_status`, `triage_get`, `ask_haystack`,
-`traces_list`, `traces_get`, `dismiss`, `mark_reviewed`, `undismiss`,
-`request_review`, `trigger_review`, and `schema`.
+`dismiss`, `mark_reviewed`, `undismiss`, `request_review`, `trigger_review`,
+and `schema`.
 
 **`haystack verify mcp`** runs the cloud-verifier MCP server. Retained
 application state is available through `verify_reopen`, `verify_refork`, and
@@ -259,7 +266,7 @@ haystack inbox list --json
 
 ### `haystack pr get`
 
-Get the useful state of one PR: triage, minimal merge blockers, and customer-trace availability:
+Get the useful state of one PR: triage and minimal merge blockers:
 
 ```bash
 haystack pr get 42
@@ -278,18 +285,6 @@ haystack ask owner/repo#42 "What about its callers?" --session <session-id> --js
 
 Chat may search the complete authorized repository when the changed files are insufficient. Search results and fetched source are included in `evidence`.
 
-### `haystack traces`
-
-Inspect retained customer-owned Entire checkpoints and transcript chunks:
-
-```bash
-haystack traces list owner/repo#42 --json
-haystack traces get owner/repo#42 <checkpoint-id> --json
-haystack traces get owner/repo#42 <checkpoint-id> --cursor 20 --limit 20 --json
-```
-
-These commands expose customer coding-session data, not Haystack's internal analysis-agent execution.
-
 ### `haystack review`
 
 Trigger a fresh *machine* analysis of a PR's current head (Haystack analyzes once at PR open; later pushes only get a resolution check). For requesting *human* review, use `haystack request-review`.
@@ -384,25 +379,59 @@ queue wait forever for a bot that can't post).
 Manage AI skills for your coding CLI:
 
 ```bash
-haystack skills install              # Auto-detect CLI and install
-haystack skills install --cli codex  # Install for Codex only
-haystack skills install --cli manual # Show manual setup instructions
+haystack skills install              # Install portable .agents/skills
+haystack skills install --cli codex  # Portable install for Codex
+haystack skills install --cli claude # Also install Claude command shims
+haystack skills install --cli manual # Install portable skills and print their location
 haystack skills list                 # List available skills
+haystack skills scaffold-provisional-universe --input /tmp/facts.json # Write a missing-authority receipt
+haystack skills prepare-universe-review --json # Build a filtered reviewer source snapshot
+haystack skills validate-universe --json # Parse and cross-check universe artifacts
 ```
 
+Installed skills include `/map-cloud-verifier-universe`, which asks the
+customer's coding agent to map the application's production dependencies and
+uses a read-only reviewer subagent to check the map before Cloud Verifier
+onboarding. It first checks for an authoritative hosted-deployment source; if
+that source is private, it produces a provisional map and one bounded request
+for a summary from the customer's local replicator or catalog. It never asks
+for production credentials or direct Haystack access to production.
+
+Start a customer-owned Cloud Verifier adapter before a universe map exists, from
+only the three selections the user actually makes — which application, which
+environment, and which approved replica destination:
+
+```bash
+haystack cloud-verifier connector bootstrap \
+  --application-id Checkout \
+  --environment-id production \
+  --destination-policy-file ./replica-destination-policy.json
+```
+
+Application and environment accept a plain name and are normalized to stable IDs
+(`application:checkout`, `environment:production`); pass an explicit
+`application:<id>` when you want to choose it yourself. The destination is named
+by its approved policy document, whose SHA-256 the command computes and reports.
+Pass `--destination-policy-sha256 <64-hex>` instead only if your tooling already
+holds the digest. Exactly one of the two is required.
+
+The scaffold stays blocked until the customer's coding agent completes bounded
+local discovery and provider-profile conformance. It includes the lifecycle and
+binding executable, encrypted connector-owned vault contract, cold golden
+refresh scheduler, and a setup/update-only reviewer-subagent request. No
+reviewer runs on ordinary verification requests or routine golden refreshes.
+
 ### `haystack hooks`
 
 Manage git hooks for AI agent quality checks:
 
 ```bash
-# Install hooks + Entire CLI
-haystack hooks install               # Install with pinned Entire version
+# Install hooks
+haystack hooks install
 haystack hooks install --force       # Overwrite existing hooks
-haystack hooks install --skip-entire # Only install Haystack hooks
 
-# Status and updates
+# Status
 haystack hooks status                # Check installation status
-haystack hooks update                # Update Entire CLI to latest
 
 # Session hooks (triage on CLI start)
 haystack hooks install-session              # Auto-detect CLIs

package/dist/assets/hooks/agent-context/detect.ts

@@ -153,11 +153,11 @@ function codexSessionMatchesRepo(
 }
 
 function getCodexSessionRoots(): string[] {
-  const overrideDir = process.env.ENTIRE_TEST_CODEX_SESSION_DIR;
+  const overrideDir = process.env.HAYSTACK_TEST_CODEX_SESSION_DIR;
   if (overrideDir) return [overrideDir];
 
   const codexHome =
-    process.env.ENTIRE_TEST_CODEX_HOME ||
+    process.env.HAYSTACK_TEST_CODEX_HOME ||
     process.env.CODEX_HOME ||
     path.join(os.homedir(), '.codex');
 
@@ -176,7 +176,7 @@ function extractCodexSessionId(filePath: string): string {
 }
 
 function detectClaude(repoPath: string): DetectionResult {
-  const overrideDir = process.env.ENTIRE_TEST_CLAUDE_PROJECT_DIR;
+  const overrideDir = process.env.HAYSTACK_TEST_CLAUDE_PROJECT_DIR;
   const sessionDir =
     overrideDir ||
     path.join(os.homedir(), '.claude', 'projects', sanitizePath(repoPath));
@@ -195,7 +195,7 @@ function detectClaude(repoPath: string): DetectionResult {
 }
 
 function detectGemini(repoPath: string): DetectionResult {
-  const overrideDir = process.env.ENTIRE_TEST_GEMINI_PROJECT_DIR;
+  const overrideDir = process.env.HAYSTACK_TEST_GEMINI_PROJECT_DIR;
   const projectHash = sha256(repoPath);
   const sessionDir =
     overrideDir ||
@@ -215,10 +215,10 @@ function detectGemini(repoPath: string): DetectionResult {
 }
 
 function detectOpenCode(repoPath: string): DetectionResult {
-  const overrideDir = process.env.ENTIRE_TEST_OPENCODE_PROJECT_DIR;
+  const overrideDir = process.env.HAYSTACK_TEST_OPENCODE_PROJECT_DIR;
   const sessionDir =
     overrideDir ||
-    path.join(os.tmpdir(), 'entire-opencode', sanitizePath(repoPath));
+    path.join(os.tmpdir(), 'haystack-opencode', sanitizePath(repoPath));
 
   const sessionFile = findMostRecentFile(sessionDir, /\.json$/);
   if (!sessionFile || !isRecent(sessionFile)) {
@@ -234,7 +234,7 @@ function detectOpenCode(repoPath: string): DetectionResult {
 }
 
 function detectCodex(repoPath: string): DetectionResult {
-  const overrideFile = process.env.ENTIRE_TEST_CODEX_SESSION_FILE;
+  const overrideFile = process.env.HAYSTACK_TEST_CODEX_SESSION_FILE;
   if (
     overrideFile &&
     isRecent(overrideFile) &&

package/dist/assets/hooks/agent-context/parsers/claude.ts

@@ -38,7 +38,7 @@ interface ClaudeLine {
       cache_read_input_tokens?: number;
     };
   };
-  // New Entire CLI format: id/content at top level (type is the role)
+  // Alternate format: id/content at top level (type is the role)
   id?: string;
   content?: unknown;
 }