@haystackeditor/cli 0.8.0 → 0.9.0

package/dist/utils/hooks.js

@@ -0,0 +1,226 @@
+/**
+ * Utilities for haystack hooks install/status/update commands.
+ *
+ * Handles Entire CLI binary download, hook file copying, and git configuration.
+ */
+import * as fs from 'fs/promises';
+import { existsSync } from 'fs';
+import * as path from 'path';
+import * as os from 'os';
+import { execSync } from 'child_process';
+import { fileURLToPath } from 'url';
+// ============================================================================
+// Constants
+// ============================================================================
+export const ENTIRE_DEFAULT_VERSION = '0.4.8';
+export const ENTIRE_GITHUB_REPO = 'entireio/cli';
+export const HAYSTACK_BIN_DIR = path.join(os.homedir(), '.haystack', 'bin');
+export const ENTIRE_BIN_PATH = path.join(HAYSTACK_BIN_DIR, 'entire');
+const HOOK_SCRIPTS = [
+    'pre-commit',
+    'commit-msg',
+    'post-commit',
+    'pre-push',
+    'prepare-commit-msg',
+];
+// ============================================================================
+// Platform detection
+// ============================================================================
+const OS_MAP = {
+    darwin: 'darwin',
+    linux: 'linux',
+};
+const ARCH_MAP = {
+    arm64: 'arm64',
+    x64: 'amd64',
+};
+export function getPlatformAssetName() {
+    const osName = OS_MAP[process.platform];
+    const archName = ARCH_MAP[process.arch];
+    if (!osName || !archName) {
+        throw new Error(`Unsupported platform: ${process.platform}-${process.arch}. Entire CLI supports macOS and Linux (amd64/arm64).`);
+    }
+    return `entire_${osName}_${archName}.tar.gz`;
+}
+// ============================================================================
+// Git repo detection
+// ============================================================================
+export function findGitRoot() {
+    try {
+        return execSync('git rev-parse --show-toplevel', {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+    }
+    catch {
+        return null;
+    }
+}
+// ============================================================================
+// Entire binary management
+// ============================================================================
+export async function getInstalledEntireVersion() {
+    if (!existsSync(ENTIRE_BIN_PATH))
+        return null;
+    try {
+        const output = execSync(`"${ENTIRE_BIN_PATH}" --version`, {
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        // Output is like "entire version 0.4.8" or just "0.4.8"
+        const match = output.match(/(\d+\.\d+\.\d+)/);
+        return match ? match[1] : output;
+    }
+    catch {
+        return null;
+    }
+}
+export async function getLatestEntireVersion() {
+    const response = await fetch(`https://api.github.com/repos/${ENTIRE_GITHUB_REPO}/releases/latest`, {
+        headers: {
+            'User-Agent': 'Haystack-CLI',
+            Accept: 'application/vnd.github.v3+json',
+        },
+    });
+    if (!response.ok) {
+        throw new Error(`Failed to fetch latest Entire release: ${response.status} ${response.statusText}`);
+    }
+    const data = (await response.json());
+    // tag_name is like "v0.4.8"
+    return data.tag_name.replace(/^v/, '');
+}
+export async function downloadEntireBinary(version) {
+    const assetName = getPlatformAssetName();
+    const tag = version.startsWith('v') ? version : `v${version}`;
+    // Fetch release to get asset download URL
+    const releaseResponse = await fetch(`https://api.github.com/repos/${ENTIRE_GITHUB_REPO}/releases/tags/${tag}`, {
+        headers: {
+            'User-Agent': 'Haystack-CLI',
+            Accept: 'application/vnd.github.v3+json',
+        },
+    });
+    if (!releaseResponse.ok) {
+        throw new Error(`Failed to fetch Entire release ${tag}: ${releaseResponse.status}`);
+    }
+    const release = (await releaseResponse.json());
+    const asset = release.assets.find((a) => a.name === assetName);
+    if (!asset) {
+        throw new Error(`No binary found for ${assetName} in Entire release ${tag}. Available: ${release.assets.map((a) => a.name).join(', ')}`);
+    }
+    // Download the tar.gz
+    const downloadResponse = await fetch(asset.browser_download_url, {
+        headers: { 'User-Agent': 'Haystack-CLI' },
+    });
+    if (!downloadResponse.ok) {
+        throw new Error(`Failed to download ${assetName}: ${downloadResponse.status}`);
+    }
+    const buffer = Buffer.from(await downloadResponse.arrayBuffer());
+    // Create temp dir, extract, and move binary
+    const tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), 'haystack-entire-'));
+    const tarPath = path.join(tmpDir, assetName);
+    try {
+        await fs.writeFile(tarPath, buffer);
+        execSync(`tar xzf "${tarPath}" -C "${tmpDir}"`, { stdio: 'pipe' });
+        // Ensure bin dir exists
+        await fs.mkdir(HAYSTACK_BIN_DIR, { recursive: true });
+        // Move the binary
+        const extractedBinary = path.join(tmpDir, 'entire');
+        if (!existsSync(extractedBinary)) {
+            throw new Error('Entire binary not found in extracted archive');
+        }
+        await fs.copyFile(extractedBinary, ENTIRE_BIN_PATH);
+        await fs.chmod(ENTIRE_BIN_PATH, 0o755);
+    }
+    finally {
+        // Clean up temp dir
+        await fs.rm(tmpDir, { recursive: true, force: true });
+    }
+}
+// ============================================================================
+// Asset directory resolution
+// ============================================================================
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+/** Resolves the path to dist/assets/hooks/ (or src/assets/hooks/ in dev) */
+export function getAssetsDir() {
+    // From dist/utils/hooks.js → dist/assets/hooks/
+    // From src/utils/hooks.ts → src/assets/hooks/
+    return path.resolve(__dirname, '..', 'assets', 'hooks');
+}
+// ============================================================================
+// Hook file operations
+// ============================================================================
+/** Copy hook scripts and TypeScript modules into the target hooks directory */
+export async function copyHookFiles(hooksDir) {
+    const assetsDir = getAssetsDir();
+    const scriptsDir = path.join(assetsDir, 'scripts');
+    // Ensure hooks directory exists
+    await fs.mkdir(hooksDir, { recursive: true });
+    // Copy shell scripts (strip .sh extension, set executable)
+    for (const hook of HOOK_SCRIPTS) {
+        const src = path.join(scriptsDir, `${hook}.sh`);
+        const dest = path.join(hooksDir, hook);
+        await fs.copyFile(src, dest);
+        await fs.chmod(dest, 0o755);
+    }
+    // Copy agent-context module
+    await copyDirRecursive(path.join(assetsDir, 'agent-context'), path.join(hooksDir, 'agent-context'));
+    // Copy truncation-checker module
+    await copyDirRecursive(path.join(assetsDir, 'truncation-checker'), path.join(hooksDir, 'truncation-checker'));
+    // Copy hooks package.json
+    await fs.copyFile(path.join(assetsDir, 'package.json'), path.join(hooksDir, 'package.json'));
+}
+/** Install npm dependencies in the hooks directory */
+export async function installHookDeps(hooksDir) {
+    execSync('npm install --no-fund --no-audit', {
+        cwd: hooksDir,
+        stdio: 'pipe',
+        timeout: 60_000,
+    });
+}
+/** Copy LLM rules template if none exists */
+export async function copyLlmRulesTemplate(repoRoot) {
+    const dest = path.join(repoRoot, 'LLM_RULES.md');
+    if (existsSync(dest))
+        return false;
+    const src = path.join(getAssetsDir(), 'llm-rules-template.md');
+    await fs.copyFile(src, dest);
+    return true;
+}
+/** Create .entire/settings.json and .entire/.gitignore */
+export async function createEntireConfig(repoRoot) {
+    const entireDir = path.join(repoRoot, '.entire');
+    await fs.mkdir(entireDir, { recursive: true });
+    await fs.writeFile(path.join(entireDir, 'settings.json'), JSON.stringify({ enabled: true, telemetry: false }, null, 2) + '\n', 'utf-8');
+    await fs.writeFile(path.join(entireDir, '.gitignore'), 'tmp/\nsettings.local.json\nmetadata/\nlogs/\n', 'utf-8');
+}
+/** Add .entire/metadata/ to repo .gitignore if not already present */
+export async function updateGitignore(repoRoot) {
+    const gitignorePath = path.join(repoRoot, '.gitignore');
+    let content = '';
+    if (existsSync(gitignorePath)) {
+        content = await fs.readFile(gitignorePath, 'utf-8');
+    }
+    if (content.includes('.entire/metadata'))
+        return false;
+    const addition = '\n# Entire CLI local session data\n.entire/metadata/\n';
+    await fs.writeFile(gitignorePath, content + addition, 'utf-8');
+    return true;
+}
+// ============================================================================
+// Helpers
+// ============================================================================
+async function copyDirRecursive(src, dest) {
+    await fs.mkdir(dest, { recursive: true });
+    const entries = await fs.readdir(src, { withFileTypes: true });
+    for (const entry of entries) {
+        const srcPath = path.join(src, entry.name);
+        const destPath = path.join(dest, entry.name);
+        if (entry.isDirectory()) {
+            await copyDirRecursive(srcPath, destPath);
+        }
+        else {
+            await fs.copyFile(srcPath, destPath);
+        }
+    }
+}

package/dist/utils/pending-state.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Pending submit state persistence.
+ *
+ * Manages `.haystack/pending-submit.json` in the git root directory.
+ * This file persists across CLI sessions so that analysis results
+ * can be retrieved after disconnection.
+ */
+import type { AnalysisVerdict } from './analysis-api.js';
+export interface PendingSubmit {
+    version: 1;
+    prNumber: number;
+    prUrl: string;
+    owner: string;
+    repo: string;
+    branch: string;
+    baseBranch: string;
+    submittedAt: string;
+    status: 'polling' | 'completed' | 'failed' | 'stale';
+    analysisResult?: AnalysisVerdict;
+    resolvedAt?: string;
+}
+/**
+ * Save pending submit state to disk.
+ */
+export declare function savePendingSubmit(state: PendingSubmit, gitRoot?: string): void;
+/**
+ * Load pending submit state from disk.
+ * Returns null if no pending state exists or if it's stale.
+ */
+export declare function loadPendingSubmit(gitRoot?: string): PendingSubmit | null;
+/**
+ * Clear pending submit state (delete the file).
+ */
+export declare function clearPendingSubmit(gitRoot?: string): void;
+/**
+ * Update the status and optionally the analysis result of a pending submit.
+ */
+export declare function updatePendingSubmit(updates: Partial<Pick<PendingSubmit, 'status' | 'analysisResult' | 'resolvedAt'>>, gitRoot?: string): void;

package/dist/utils/pending-state.js

@@ -0,0 +1,86 @@
+/**
+ * Pending submit state persistence.
+ *
+ * Manages `.haystack/pending-submit.json` in the git root directory.
+ * This file persists across CLI sessions so that analysis results
+ * can be retrieved after disconnection.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync } from 'fs';
+import { join } from 'path';
+import { findGitRoot } from './git.js';
+// ============================================================================
+// Constants
+// ============================================================================
+const PENDING_FILE = 'pending-submit.json';
+const HAYSTACK_DIR = '.haystack';
+const STALE_THRESHOLD_MS = 2 * 60 * 60 * 1000; // 2 hours
+// ============================================================================
+// Functions
+// ============================================================================
+function getPendingPath(gitRoot) {
+    const root = gitRoot || findGitRoot();
+    if (!root)
+        return null;
+    return join(root, HAYSTACK_DIR, PENDING_FILE);
+}
+/**
+ * Save pending submit state to disk.
+ */
+export function savePendingSubmit(state, gitRoot) {
+    const root = gitRoot || findGitRoot();
+    if (!root)
+        throw new Error('Not a git repository');
+    const dir = join(root, HAYSTACK_DIR);
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true });
+    }
+    const filePath = join(dir, PENDING_FILE);
+    writeFileSync(filePath, JSON.stringify(state, null, 2));
+}
+/**
+ * Load pending submit state from disk.
+ * Returns null if no pending state exists or if it's stale.
+ */
+export function loadPendingSubmit(gitRoot) {
+    const filePath = getPendingPath(gitRoot);
+    if (!filePath || !existsSync(filePath))
+        return null;
+    try {
+        const content = readFileSync(filePath, 'utf-8');
+        const state = JSON.parse(content);
+        // Check version
+        if (state.version !== 1)
+            return null;
+        // Auto-mark stale entries
+        if (state.status === 'polling') {
+            const age = Date.now() - new Date(state.submittedAt).getTime();
+            if (age > STALE_THRESHOLD_MS) {
+                state.status = 'stale';
+                savePendingSubmit(state, gitRoot);
+            }
+        }
+        return state;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Clear pending submit state (delete the file).
+ */
+export function clearPendingSubmit(gitRoot) {
+    const filePath = getPendingPath(gitRoot);
+    if (filePath && existsSync(filePath)) {
+        unlinkSync(filePath);
+    }
+}
+/**
+ * Update the status and optionally the analysis result of a pending submit.
+ */
+export function updatePendingSubmit(updates, gitRoot) {
+    const state = loadPendingSubmit(gitRoot);
+    if (!state)
+        return;
+    Object.assign(state, updates);
+    savePendingSubmit(state, gitRoot);
+}

package/dist/utils/secrets.js

@@ -18,7 +18,7 @@ const SECRET_PATTERNS = [
     // API Keys
     {
         name: 'generic-api-key',
-        pattern: /(?:api[_-]?key|apikey)\s*[:=]\s*['"]?([a-zA-Z0-9_\-]{20,})['"]?/gi,
+        pattern: /(?:api[_-]?key|apikey)\s*[:=]\s*['"]?([a-zA-Z0-9_-]{20,})['"]?/gi,
         description: 'Potential API key detected',
         severity: 'high',
     },
@@ -43,7 +43,7 @@ const SECRET_PATTERNS = [
     },
     {
         name: 'cloudflare-api-token',
-        pattern: /(?:cloudflare|cf)[_-]?(?:api)?[_-]?token\s*[:=]\s*['"]?([a-zA-Z0-9_\-]{40,})['"]?/gi,
+        pattern: /(?:cloudflare|cf)[_-]?(?:api)?[_-]?token\s*[:=]\s*['"]?([a-zA-Z0-9_-]{40,})['"]?/gi,
         description: 'Cloudflare API Token detected',
         severity: 'high',
     },
@@ -122,7 +122,7 @@ const SECRET_PATTERNS = [
     // Generic high-entropy strings in config values
     {
         name: 'high-entropy-string',
-        pattern: /(?:token|key|secret|password|credential|auth)\s*[:=]\s*['"]([a-zA-Z0-9+/=_\-]{32,})['"]?/gi,
+        pattern: /(?:token|key|secret|password|credential|auth)\s*[:=]\s*['"]([a-zA-Z0-9+/=_-]{32,})['"]?/gi,
         description: 'High-entropy string in sensitive field',
         severity: 'medium',
     },

package/dist/utils/skill.d.ts

@@ -5,6 +5,6 @@
 export declare function createSkillFile(): Promise<string>;
 /**
  * Create the .claude/commands/ files for Claude Code slash commands
- * Users can invoke with /setup-haystack or /prepare-haystack
+ * Users can invoke with /setup-haystack, /prepare-haystack, or /setup-haystack-secrets
  */
 export declare function createClaudeCommand(): Promise<string>;