@haystackeditor/cli 0.15.30 → 0.16.0

package/dist/utils/git.d.ts

@@ -1,135 +0,0 @@
-/**
- * Git utilities for haystack submit command.
- *
- * Provides functions for git operations: branch management, push, remote parsing.
- */
-export { findGitRoot } from './hooks.js';
-export interface GitRemoteInfo {
-    owner: string;
-    repo: string;
-    remoteName: string;
-}
-export interface GitBranchInfo {
-    currentBranch: string;
-    defaultBranch: string;
-    isClean: boolean;
-    hasUncommittedChanges: boolean;
-    hasUnpushedCommits: boolean;
-}
-/**
- * Get the current branch name
- */
-export declare function getCurrentBranch(): string;
-/**
- * Get the default branch (main or master)
- */
-export declare function getDefaultBranch(): string;
-/**
- * Check if working directory has uncommitted changes
- */
-export declare function hasUncommittedChanges(): boolean;
-/**
- * Check if current branch has unpushed commits
- */
-export declare function hasUnpushedCommits(): boolean;
-/**
- * Get comprehensive branch info
- */
-export declare function getBranchInfo(): GitBranchInfo;
-/**
- * Create a new branch from current HEAD
- */
-export declare function createBranch(branchName: string): void;
-/**
- * Check if a branch exists locally
- */
-export declare function branchExists(branchName: string): boolean;
-/**
- * Check if a branch exists on remote
- */
-export declare function remoteBranchExists(remoteName: string, branchName: string): boolean;
-/**
- * Checkout an existing branch
- */
-export declare function checkoutBranch(branchName: string): void;
-export interface PushAuth {
-    token: string;
-}
-/**
- * Push current branch to remote with upstream tracking.
- *
- * When `auth` is provided, the push is authenticated with the given GitHub
- * token via GIT_ASKPASS against an explicit HTTPS URL, independent of the
- * user's ambient git credential helper and independent of whatever
- * `remote.<name>.url` / `pushurl` they have configured. Remote-tracking
- * refs are then seeded locally so upstream tracking (`-u`-style) works on
- * first push. `.git/config` is never touched.
- *
- * Without `auth`, falls back to `git push -u <remote>` using ambient creds.
- */
-export declare function pushBranch(remoteName: string, branchName: string, auth?: PushAuth): void;
-/** Thrown when a git remote URL is not a recognized GitHub SSH/HTTPS URL. */
-export declare class UnsupportedRemoteUrlError extends Error {
-    constructor(url: string);
-}
-/**
- * Parse remote URL to extract owner and repo
- * Supports both SSH and HTTPS URLs
- */
-export declare function parseRemoteUrl(remoteName?: string): GitRemoteInfo;
-/**
- * Get the last commit message (first line only).
- *
- * Throws instead of guessing: this feeds the default PR title, and the old
- * silent fallback ('Update') shipped meaningless titles when git failed.
- */
-export declare function getLastCommitMessage(): string;
-/**
- * Get the last commit SHA (short)
- */
-export declare function getLastCommitSha(): string;
-/**
- * Get full commit messages (subject + body) for all commits since base branch.
- * Returns the combined log, or empty string if no commits or on error.
- */
-export declare function getCommitMessagesSinceBase(baseBranch: string): string;
-interface ResolveDiffBaseRefOptions {
-    cwd?: string;
-    timeoutMs?: number;
-}
-/**
- * Resolve the git ref to diff a PR branch against for review.
- *
- * A bare local `<base>` ref is frequently stale (not checked out or pulled in a
- * while). When it sits behind HEAD's true fork point, the three-dot merge-base
- * jumps far back in history and inflates the review diff to include code from
- * already-merged PRs — reviewers then mis-attribute pre-existing code to this
- * PR. So we prefer the freshly-fetched remote base. This mirrors
- * getCommitMessagesSinceBase, which already compares against the remote base.
- *
- * Returns a fully-qualified ref (`refs/remotes/origin/<base>` or
- * `refs/heads/<base>`) so a tag that happens to share the name can never shadow
- * the ref we mean — `git rev-parse <name>` prefers refs/tags/* over both
- * refs/heads/* and refs/remotes/*. The bare `<base>` name is only returned as a
- * last resort when nothing qualified resolves (the eventual `git diff` then
- * errors and the caller falls back to running it itself).
- *
- * Resolution:
- *   1. Best-effort fetch the remote base (`haystack submit` is already online —
- *      it pushes and opens a PR — so one ref fetch is cheap).
- *   2. If the fetch succeeded, the remote-tracking ref is the authoritative
- *      remote tip — use it (even over a local <base> with unpushed commits; the
- *      PR will merge into the remote base, not the local one).
- *   3. If the fetch failed (offline, private origin without ambient git creds,
- *      base not on remote), don't blindly trust a possibly-stale *cached*
- *      remote-tracking ref — pick whichever of it and local <base> is more
- *      advanced (the one that is not an ancestor of the other), since a base
- *      behind HEAD's fork point is exactly what balloons the diff.
- *   4. Fall back to whatever single qualified ref resolves, then the bare
- *      <base> name (preserves prior behavior rather than breaking triage).
- */
-export declare function resolveDiffBaseRef(baseBranch: string, options?: ResolveDiffBaseRefOptions): string;
-/**
- * Get the number of commits ahead of base branch
- */
-export declare function getCommitsAhead(baseBranch: string): number;

package/dist/utils/github-api.d.ts

@@ -1,104 +0,0 @@
-/**
- * GitHub API utilities for haystack submit command.
- *
- * Provides functions for creating PRs, managing labels, etc.
- */
-export interface CreatePROptions {
-    owner: string;
-    repo: string;
-    title: string;
-    head: string;
-    base: string;
-    body?: string;
-    draft?: boolean;
-    token?: string;
-}
-export interface PRResponse {
-    number: number;
-    html_url: string;
-    title: string;
-    state: string;
-    head: {
-        ref: string;
-    };
-    base: {
-        ref: string;
-    };
-}
-export interface LabelInfo {
-    name: string;
-    color: string;
-    description?: string;
-}
-export interface GitHubUser {
-    login: string;
-    id: number;
-}
-export interface RepositoryPermissions {
-    admin?: boolean;
-    maintain?: boolean;
-    push?: boolean;
-    triage?: boolean;
-    pull?: boolean;
-}
-export interface RepositoryAccess {
-    full_name: string;
-    owner: {
-        login: string;
-    };
-    permissions?: RepositoryPermissions;
-}
-export declare const HAYSTACK_LABELS: Record<string, LabelInfo>;
-/**
- * Get a GitHub token, throw if not authenticated
- */
-export declare function requireGitHubAuth(options?: {
-    preferredLogin?: string;
-    owner?: string;
-    repo?: string;
-}): Promise<string>;
-/**
- * Create a pull request
- */
-export declare function createPullRequest(options: CreatePROptions): Promise<PRResponse>;
-/**
- * Check if a PR already exists for a branch
- */
-export declare function findExistingPR(owner: string, repo: string, head: string, token?: string): Promise<PRResponse | null>;
-/**
- * Add labels to an issue/PR
- */
-export declare function addLabelsToIssue(owner: string, repo: string, issueNumber: number, labels: string[], token?: string): Promise<void>;
-/**
- * Get all labels from an issue/PR
- */
-export declare function getLabelsFromIssue(owner: string, repo: string, issueNumber: number, token?: string): Promise<string[]>;
-/**
- * Remove a label from an issue/PR
- */
-export declare function removeLabelFromIssue(owner: string, repo: string, issueNumber: number, labelName: string, token?: string): Promise<void>;
-/**
- * Check if a label exists in the repo
- */
-export declare function labelExists(owner: string, repo: string, labelName: string, token?: string): Promise<boolean>;
-/**
- * Create a label in the repo
- */
-export declare function createLabel(owner: string, repo: string, label: LabelInfo, token?: string): Promise<void>;
-/**
- * Ensure all required Haystack labels exist in the repo
- */
-export declare function ensureHaystackLabels(owner: string, repo: string, labelNames: string[], token?: string): Promise<void>;
-/**
- * Request reviewers on a pull request
- */
-export declare function requestReviewers(owner: string, repo: string, prNumber: number, reviewers: string[], token?: string): Promise<void>;
-/**
- * Get the authenticated user's info
- */
-export declare function getCurrentUser(token?: string): Promise<GitHubUser>;
-export declare function getRepositoryAccess(owner: string, repo: string, token?: string): Promise<RepositoryAccess>;
-/**
- * Check if user has push access to a repo
- */
-export declare function hasPushAccess(owner: string, repo: string, token?: string): Promise<boolean>;

package/dist/utils/haystack-api.d.ts

@@ -1,37 +0,0 @@
-export declare function haystackApiBase(): string;
-export declare function haystackApiUrl(path: string): string;
-export interface UserInstallation {
-    id: number;
-    account?: {
-        login?: string;
-    } | null;
-    repositories?: Array<{
-        full_name: string;
-        pushed_at?: string | null;
-    }>;
-}
-export interface CliIdentity {
-    login: string;
-    id: number;
-}
-/**
- * Typed error for non-OK Haystack API responses. Callers classify by
- * `status` (never by message substring) and the message always carries a
- * remediation an agent can act on.
- */
-export declare class HaystackApiError extends Error {
-    readonly status: number;
-    constructor(status: number, message: string);
-    get isAuthError(): boolean;
-}
-/**
- * Build an actionable error for a non-OK response: what failed, the HTTP
- * class it failed with, and the next command to run.
- */
-export declare function classifyHttpError(response: Response, context: string): Promise<HaystackApiError>;
-export declare function haystackJson<T>(path: string, token: string, init?: RequestInit, acceptedStatuses?: readonly number[]): Promise<T>;
-export declare function fetchCliIdentity(token: string): Promise<CliIdentity>;
-export declare function fetchHaystackInstallations(token: string): Promise<UserInstallation[]>;
-export declare function fetchGitHubJson<T>(path: string, token: string, init?: RequestInit): Promise<T>;
-export declare function fetchAnalysisArtifact<T>(owner: string, repo: string, prNumber: number, file: string, token: string): Promise<T | null>;
-export declare function postAskHaystack<T>(owner: string, repo: string, prNumber: number, question: string, sessionId: string | undefined, token: string): Promise<T>;

package/dist/utils/hooks.d.ts

@@ -1,12 +0,0 @@
-/**
- * Utilities for haystack hooks install/status commands.
- */
-export declare function findGitRoot(): string | null;
-/** Resolves the path to dist/assets/hooks/ (or src/assets/hooks/ in dev) */
-export declare function getAssetsDir(): string;
-/** Copy hook scripts and TypeScript modules into the target hooks directory */
-export declare function copyHookFiles(hooksDir: string): Promise<void>;
-/** Install npm dependencies in the hooks directory */
-export declare function installHookDeps(hooksDir: string): Promise<void>;
-/** Copy LLM rules template if none exists */
-export declare function copyLlmRulesTemplate(repoRoot: string): Promise<boolean>;

package/dist/utils/pending-state.d.ts

@@ -1,40 +0,0 @@
-/**
- * Pending submit state persistence.
- *
- * Manages `.haystack/pending-submit.json` in the git root directory.
- * This file persists across CLI sessions so that analysis results
- * can be retrieved after disconnection.
- */
-import type { AnalysisVerdict } from './analysis-api.js';
-export interface PendingSubmit {
-    version: 1;
-    prNumber: number;
-    prUrl: string;
-    owner: string;
-    repo: string;
-    branch: string;
-    baseBranch: string;
-    submittedAt: string;
-    status: 'polling' | 'completed' | 'failed' | 'stale';
-    analysisResult?: AnalysisVerdict;
-    resolvedAt?: string;
-    autoFix?: boolean;
-    autoFixStatus?: 'pending' | 'fixing' | 'fixed' | 'failed' | 'timed_out';
-}
-/**
- * Save pending submit state to disk.
- */
-export declare function savePendingSubmit(state: PendingSubmit, gitRoot?: string): void;
-/**
- * Load pending submit state from disk.
- * Returns null if no pending state exists or if it's stale.
- */
-export declare function loadPendingSubmit(gitRoot?: string): PendingSubmit | null;
-/**
- * Clear pending submit state (delete the file).
- */
-export declare function clearPendingSubmit(gitRoot?: string): void;
-/**
- * Update the status and optionally the analysis result of a pending submit.
- */
-export declare function updatePendingSubmit(updates: Partial<Pick<PendingSubmit, 'status' | 'analysisResult' | 'resolvedAt'>>, gitRoot?: string): void;

package/dist/utils/pr-ref.d.ts

@@ -1,27 +0,0 @@
-/**
- * Shared PR-identifier parsing for every command that takes a PR ref.
- *
- * One grammar, one error message, one repo-inference path. This used to be
- * duplicated per command, and the copies drifted: different "accepted formats"
- * lists (none mentioned the `#123` form the regex accepted), and one copy let
- * a raw git error escape where the others gave a friendly hint. Commands must
- * import from here rather than reimplementing the grammar.
- *
- * Accepted formats, in the order they are tried:
- *   https://github.com/owner/repo/pull/123   GitHub URL
- *   owner/repo#123                           Fully qualified
- *   123 or #123                              PR number (repo inferred from the `origin` remote)
- */
-export interface ParsedPR {
-    owner: string;
-    repo: string;
-    prNumber: number;
-}
-/** The accepted-formats block used in parse errors and help text. */
-export declare function acceptedPrRefFormats(commandName: string): string;
-/**
- * Parse a PR identifier. `commandName` is interpolated into error messages so
- * the agent can copy a corrected invocation verbatim (e.g. "triage",
- * "pr get", "traces list").
- */
-export declare function parsePrRef(identifier: string, commandName: string): ParsedPR;

package/dist/utils/prompter.d.ts

@@ -1,85 +0,0 @@
-/**
- * Prompter — decouples a wizard's *decisions* from *how they're answered*.
- *
- * `haystack setup` historically welded every decision to inquirer/TTY, so it
- * couldn't run headless, in CI, or under a coding agent. The Prompter is the
- * seam: step code calls `confirm` / `multiselect` / `action`, and the
- * implementation decides how to source the answer.
- *
- * Three modes, one mechanism:
- *   - TtyPrompter  — humans in a terminal (inquirer). Default.
- *   - JsonPrompter — a coding agent: NDJSON events on stdout, answers on stdin.
- *                    The agent can relay a `question` to the user OR auto-answer.
- *   - Pre-supplied answers (flags / --answers file) short-circuit any question
- *     by id, so the same code runs fully autonomously when every answer is known.
- *
- * Human-facing chrome stays as `console.*`; in JSON mode the JsonPrompter
- * redirects `console.*` to stderr so stdout carries only NDJSON.
- */
-/** A selectable option. A `{ separator }` entry renders a non-selectable group
- *  header in TTY mode and is ignored in JSON mode. */
-export type Choice<T> = {
-    name: string;
-    value: T;
-    checked?: boolean;
-} | {
-    separator: string;
-};
-/** Thrown when an agent explicitly rejects/cancels a prompt (vs. answering it),
- *  so callers can distinguish a cancellation from a valid empty answer. */
-export declare class PromptCancelledError extends Error {
-    readonly requestID: string;
-    constructor(requestID: string);
-}
-/** Outcome of an `action`: satisfied, intentionally skipped, or timed out —
- *  distinct so callers don't report a skip as a timeout. */
-export type ActionResult = 'ok' | 'skip' | 'timeout';
-export interface Prompter {
-    /** True for the human TTY prompter — gates side effects like opening a browser
-     *  that only make sense for a local interactive user. */
-    readonly interactive: boolean;
-    /** Whether an answer for `id` was pre-supplied (flag / --answers), so the
-     *  prompt is skipped. Callers use this to avoid re-prompting a fixed answer. */
-    hasPreset(id: string): boolean;
-    /** Yes/no decision. */
-    confirm(q: {
-        id: string;
-        message: string;
-        default?: boolean;
-    }): Promise<boolean>;
-    /** Pick zero-or-more values. Items default-checked via `checked: true`. */
-    multiselect<T>(q: {
-        id: string;
-        message: string;
-        choices: Choice<T>[];
-    }): Promise<T[]>;
-    /**
-     * An action the user must take out-of-band (e.g. install the GitHub App).
-     * Polls `check()` until it returns true (`'ok'`) or `timeoutMs` elapses
-     * (`'timeout'`). A pre-supplied / stdin "skip"/reject resolves `'skip'`.
-     */
-    action(q: {
-        id: string;
-        message: string;
-        url?: string;
-        check: () => Promise<boolean>;
-        pollIntervalMs?: number;
-        timeoutMs?: number;
-    }): Promise<ActionResult>;
-    /** Transient progress line (scan ticker, per-repo write status). */
-    progress(message: string, detail?: string): void;
-    /** Clear the current progress line. */
-    clearProgress(): void;
-    /** Final structured outcome (emitted as a `result` event in JSON mode). */
-    result(data: Record<string, unknown>): void;
-    /** Release stdin/readline so the process can exit. */
-    close(): void;
-}
-/** Answers known up-front (from flags or an --answers file), keyed by question id. */
-export type AnswerMap = Record<string, unknown>;
-export declare function loadAnswersFile(path: string): AnswerMap;
-export interface PrompterOptions {
-    json?: boolean;
-    answers?: AnswerMap;
-}
-export declare function createPrompter(options?: PrompterOptions): Prompter;

package/dist/utils/secrets.d.ts

@@ -1,47 +0,0 @@
-/**
- * Secret Scanning & Validation
- *
- * Detects potential hardcoded secrets in configuration files
- * before they can be committed to version control.
- *
- * Based on patterns from:
- * - GitHub secret scanning
- * - detect-secrets
- * - truffleHog
- */
-/**
- * Detected secret finding
- */
-export interface SecretFinding {
-    pattern: string;
-    description: string;
-    severity: 'high' | 'medium' | 'low';
-    line: number;
-    column: number;
-    match: string;
-    file: string;
-}
-/**
- * Scan content for potential secrets
- */
-export declare function scanForSecrets(content: string, filename: string): SecretFinding[];
-/**
- * Scan a file for secrets
- */
-export declare function scanFile(filePath: string): Promise<SecretFinding[]>;
-/**
- * Scan .haystack.json specifically for secrets
- */
-export declare function scanHaystackConfig(configPath: string): Promise<SecretFinding[]>;
-/**
- * Validate that a config doesn't contain hardcoded secrets
- * Returns true if safe, false if secrets detected
- */
-export declare function validateConfigSecurity(configPath: string): Promise<{
-    safe: boolean;
-    findings: SecretFinding[];
-}>;
-/**
- * Get a security report string for display
- */
-export declare function formatSecurityReport(findings: SecretFinding[]): string;

package/dist/utils/telemetry.d.ts

@@ -1,19 +0,0 @@
-/**
- * Lightweight CLI telemetry — fire-and-forget error tracking via PostHog HTTP API.
- *
- * Events go to the same PostHog project as the web app, enabling unified
- * alerting across frontend, CLI, and backend.
- *
- * All calls are non-blocking and never throw — telemetry failures must not
- * break CLI commands.
- */
-/**
- * Track an error event. Fire-and-forget — never throws.
- */
-export declare function trackError(errorType: string, metadata?: Record<string, unknown>): void;
-/**
- * Track a setup event (non-error). Fire-and-forget.
- */
-export declare function trackSetupEvent(step: string, metadata?: Record<string, unknown>): void;
-/** Track one bounded front-half precompute result per CLI invocation. */
-export declare function trackPrecomputeEvent(outcome: string, wallMs: number, timeoutMs: number): void;