github-search-cli 9.6.0 → 9.7.1

package/CHANGELOG.md

@@ -6,6 +6,77 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). Publish
 
 ---
 
+## [9.7.1] — 2026-09-20 (released)
+
+### Fixed
+
+- **In-app update installed to the wrong location when running under Bun** —
+  `performUpdate()` ran `bun install -g github-search-cli`, which targets
+  Bun's own global dir (`~/.bun`), not the npm prefix the running copy and
+  its `ghfind` shim live in. The command exited 0 while the running install
+  never changed. The updater now detects which package manager owns the
+  running tree (`detectInstallLocation`: npm global vs `~/.bun` global) and
+  shells out to `npm install -g --prefix <prefix>` for npm-owned installs,
+  so the update lands exactly where the running install is.
+- **Node fallback could not launch npm on Windows** — `child_process.spawn`
+  without a shell cannot execute `npm.cmd` (and recent Node rejects it with
+  `EINVAL`). The update spawn now goes through `node:child_process` on every
+  runtime with `shell: true` on win32 and properly quoted arguments, so the
+  Node fallback path actually works on Windows.
+- **Compiled binaries / dev checkouts no longer fake an update** — when the
+  running install has no `node_modules` ancestor, self-update is refused
+  with a debug hint instead of npm-installing a copy the user isn't running.
+- **Windows: URLs with query params were truncated at the first `&`** when opened via `cmd /c start` (every pre-filled crash-report/issue link lost its body and labels). Both openers now use `explorer.exe` on Windows, which receives the URL as a single argument.
+- **`open-url.ts` crashed under Node** (`Bun.spawn` unconditional); now runtime-agnostic with a detached `child_process.spawn` fallback.
+- **`--doctor` now detects stale/PATH-shadowing global installs** — multiple `ghfind` copies resolving to different versions are flagged with their prefixes and the exact uninstall command. This is the "updater said OK but nothing changed" trap.
+- Lint gate was permanently broken: `package.json` pinned `biome@2.5.13` (package never existed on npm); now uses `@biomejs/biome` ^2.5.14 with a migrated `biome.json`.
+- First clean lint baseline: 198 diagnostics triaged (auto-fixes + hand-fixes, incl. a dead `|| true` gate in `tui.ts` startup tips and an unsafe-autofix regression in `TrendingAdapter`); `tests/**` lint overrides for mocks/assertions; `tests/fixtures/**` excluded. CI now runs lint + typecheck on every push/PR (previously excluded as known-broken).
+- `mcp-server.ts`: assignment-in-expression violations; `trending-parser.ts`: stateful `RegExp.exec` loop replaced with `matchAll` (lastIndex reuse hazard); `themes.ts`: documented ANSI control-char regex.
+
+---
+
+## [9.7.0] — 2026-09-19 (released)
+
+### Added
+
+- **CLI parity with the MCP tools** — the three MCP-only capabilities are now
+  first-class CLI commands:
+  - `ghfind deep-dive <owner/repo> [--json]` — language breakdown, top
+    contributors, and a README excerpt (previously MCP-only; the agent skill
+    doc told agents to `curl` instead).
+  - `ghfind --compare` accepts `--json|--csv|--markdown` (previously
+    text-only) and reports repos that failed to resolve; it exits non-zero
+    when fewer than 2 repos resolve.
+  - Trending language filter on the CLI: `ghfind trending <lang>` (the form
+    the README already advertised), `ghfind --trending <lang>`, and
+    `ghfind --trending --language <lang>` — validated against the same
+    accepted-language list as the MCP tool.
+- `ghfind deep-dive --json` exposes a structured payload (language percents,
+  contributor counts, raw README) suitable for agents and scripting.
+
+### Changed
+
+- The MCP server now shares its repo-ref parsing, trending-language
+  validation, and deep-dive data pipeline with the CLI via new seams in
+  `deepdive.ts` and `search.ts` (no protocol behavior change).
+
+### Fixed
+
+- **`ghfind mcp` failed to typecheck** — `processServerLine` declared `msg`
+  as a `let` binding, so TypeScript's aliased-conditional narrowing did not
+  apply and every `respond`/`respondError` call site errored on
+  `JsonRpcId | undefined`. HEAD did not compile. The id is now extracted
+  into a `const` before the notification check; runtime behavior is
+  unchanged (all 31 MCP tests pass against the previous behavior).
+- **Deep-dive ran on a zeroed repo stub** — `ghfind deep-dive a/b --json`
+  reported `stars: 0`, `description: null`, and no timestamps because the
+  repo ref was never resolved. Both the CLI and the `ghfind_deep_dive` MCP
+  tool now fetch real repo metadata first (a 404 exits with
+  `Repo not found: owner/name`; network failures still degrade gracefully
+  to the stub).
+
+---
+
 ## [9.6.0] — 2026-09-18 (released)
 
 ### Added

package/README.md

@@ -38,19 +38,19 @@ Or grab a **standalone binary** (no Node.js needed) from [GitHub Releases](https
 
 ## Why ghfind?
 
-|                                            | `ghfind` | `gh search` (GitHub CLI) | `hub` |
-| ------------------------------------------ | -------- | ------------------------ | ----- |
-| Repo search + qualifiers                   | ✅       | ✅                       | ❌    |
-| Trending repos (day/week/month/year)       | ✅       | ❌                       | ❌    |
-| Full-screen TUI, keyboard-driven           | ✅       | ❌                       | ❌    |
-| Bookmarks, tags & release tracking         | ✅       | ❌                       | ❌    |
-| Side-by-side repo compare                  | ✅       | ❌                       | ❌    |
-| Deep-dive (README, contributors, activity) | ✅       | ❌                       | ❌    |
-| npm package search                         | ✅       | ❌                       | ❌    |
-| Org profile                                | ✅       | ✅                       | ❌    |
-| User profile                               | ✅       | ❌                       | ❌    |
-| Pipeable JSON / CSV / Markdown export      | ✅       | JSON only                | ❌    |
-| No login required                          | ✅       | ❌                       | ❌    |
+|                                             | `ghfind` | `gh search` (GitHub CLI) | `hub` |
+| ------------------------------------------- | -------- | ------------------------ | ----- |
+| Repo search + qualifiers                    | ✅       | ✅                       | ❌    |
+| Trending repos (day/week/month/year)        | ✅       | ❌                       | ❌    |
+| Full-screen TUI, keyboard-driven            | ✅       | ❌                       | ❌    |
+| Bookmarks, tags & release tracking          | ✅       | ❌                       | ❌    |
+| Side-by-side repo compare (JSON/CSV/MD)     | ✅       | ❌                       | ❌    |
+| Deep-dive (languages, contributors, README) | ✅       | ❌                       | ❌    |
+| npm package search                          | ✅       | ❌                       | ❌    |
+| Org profile                                 | ✅       | ✅                       | ❌    |
+| User profile                                | ✅       | ❌                       | ❌    |
+| Pipeable JSON / CSV / Markdown export       | ✅       | JSON only                | ❌    |
+| No login required                           | ✅       | ❌                       | ❌    |
 
 > **No separate runtime needed!** Only requires Node.js 20+. The TUI needs Bun,
 > which is downloaded automatically at install time. Non-interactive modes work
@@ -88,9 +88,12 @@ ghfind "query" --format urls # one URL per line
 ghfind "query" --pipe open   # open in browser
 ghfind "query" --pipe clone  # clone commands
 ghfind --trending --json     # trending as JSON
+ghfind trending rust --json  # trending, filtered by language
 ghfind --watch "query"       # poll every 300s
 ghfind --releases            # new releases for bookmarked repos
 ghfind --compare a/b c/d     # side-by-side comparison
+ghfind --compare a/b c/d --json # comparison as JSON|CSV|Markdown
+ghfind deep-dive a/b --json  # deep-dive: languages, contributors, README
 ghfind pkg "query" --json    # npm package search as JSON
 ```
 
@@ -281,14 +284,14 @@ cd ghfind
 # With Bun (recommended for TUI)
 bun install
 bun start        # TUI
-bun test         # 335 tests
+bun test         # 355 tests
 bun run check    # format check + tests — the green gate
 bun run build    # build dist/
 
 # Or with npm
 npm install
 npm start        # TUI (requires Node 20+)
-npm test         # 335 tests
+npm test         # 355 tests
 npm run build    # build dist/
 
 > Want to contribute? See [CONTRIBUTING.md](CONTRIBUTING.md) for commands,
@@ -301,6 +304,20 @@ npm run build    # build dist/
 
 Recent releases (full history in [CHANGELOG.md](CHANGELOG.md)):
 
+### v9.7.1
+
+- **In-app update actually works now** — it used to `bun install -g` into `~/.bun` while your running copy lives in an npm prefix, reporting success while nothing changed; it now detects which package manager owns the running install and updates it in place
+- **New `ghfind --doctor` check** — flags stale/PATH-shadowing global installs (multiple `ghfind` copies with different versions) and prints the exact uninstall command
+- **Windows URL fix** — links with query params were truncated at the first `&` by `cmd /c start`; every pre-filled crash-report/issue link now opens complete
+- Fixed `open-url` crashing under Node; CI now enforces lint + typecheck gates (first green Biome baseline)
+
+### v9.7.0
+
+- **CLI parity with the MCP tools** — `ghfind deep-dive <owner/repo>` (languages, contributors, README excerpt, `--json`), `ghfind --compare` with `--json|--csv|--markdown`, and a trending language filter (`ghfind trending rust`, `--trending <lang>`)
+- **Deep-dive metadata fix** — real stars, description, and topics are fetched first instead of a zeroed stub; a 404 exits with `Repo not found`
+- Fixed `ghfind mcp` failing to typecheck (JSON-RPC id narrowing; runtime behavior unchanged)
+- The MCP server and CLI now share repo-ref parsing, language validation, and the deep-dive pipeline
+
 ### v9.6.0
 
 - **MCP server (beta)** — `ghfind mcp` turns ghfind into a tool server: Claude Code, Cursor, Codex, and any MCP client can call GitHub search over stdio (nine tools, no new dependencies)
@@ -309,17 +326,6 @@ Recent releases (full history in [CHANGELOG.md](CHANGELOG.md)):
 - **`NO_COLOR` support** — `ghfind --doctor` drops ANSI colors when `NO_COLOR` is set or stdout isn't a TTY
 - Fixed the stale `scripts/brew.rb` formula (wrong repo, version, and asset names)
 
-### v9.5.1
-
-- Fixed landing-screen keys leaking into the main view — `/`, `Space`, `t`, `c`, `?`, `q` all double-fired; `b` on the landing screen now opens Bookmarks
-- Fixed the update panel clipping the changelog — release notes are now scrollable (`↑↓`/`j`/`k`, `PgUp`/`PgDn`, `Home`/`End`) in a taller panel
-
-### v9.5.0
-
-- New `ghfind user <name>` command — user profiles like `ghfind org`: repos, total stars/forks, followers, top languages, top repos
-- Supports `--json`, `--csv`, `--markdown`, `--count`, `--limit`, `--token`; `@` prefix accepted
-- Fixed `ghfind org` mangling multi-word names with dashes
-
 ---
 
 ## License

package/bin/ghfind.js

@@ -9,11 +9,11 @@
  * Strategy 2: Fall back to the bundled dist/cli.js with Node.js (works for
  *   non-interactive modes).
  */
-import { existsSync } from "fs";
-import { spawnSync } from "child_process";
-import { join, dirname } from "path";
-import { fileURLToPath, pathToFileURL } from "url";
-import { platform } from "os";
+import { existsSync } from "node:fs";
+import { spawnSync } from "node:child_process";
+import { join, dirname } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { platform } from "node:os";
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const PKG_DIR = join(__dirname, "..");
 

package/completions/ghfind.bash

@@ -7,7 +7,7 @@ _ghfind() {
   cur="${COMP_WORDS[COMP_CWORD]}"
   prev="${COMP_WORDS[COMP_CWORD-1]}"
 
-  opts="--json --csv --markdown --count --limit --sort --token --trending --since --pipe --format --registry --watch --interval --version --help --completion pkg login init doctor org mcp skill"
+  opts="--json --csv --markdown --count --limit --sort --token --trending --language --since --pipe --format --registry --watch --interval --version --help --completion pkg login init doctor org mcp skill trending deep-dive"
 
   case "${prev}" in
     --sort)
@@ -34,6 +34,10 @@ _ghfind() {
       COMPREPLY=( $(compgen -W "npm" -- "${cur}") )
       return 0
       ;;
+    --language)
+      COMPREPLY=( $(compgen -W "rust python typescript javascript go c c++ c# java ruby php swift kotlin zig" -- "${cur}") )
+      return 0
+      ;;
     --limit|--interval)
       return 0
       ;;

package/completions/ghfind.fish

@@ -9,6 +9,7 @@ complete -c ghfind -l limit -d "Max results" -r
 complete -c ghfind -l sort -d "Sort strategy" -r -f -a "best-match stars updated forks"
 complete -c ghfind -l token -d "GitHub token" -r
 complete -c ghfind -l trending -d "Trending mode"
+complete -c ghfind -l language -d "Trending language filter" -r -f -a "rust python typescript javascript go c c++ c# java ruby php swift kotlin zig"
 complete -c ghfind -l since -d "Trending period" -r -f -a "daily weekly monthly"
 complete -c ghfind -l pipe -d "Pipe target" -r -f -a "clone open"
 complete -c ghfind -l format -d "Output format" -r -f -a "urls names ssh-urls clone-commands ids"
@@ -20,4 +21,4 @@ complete -c ghfind -l version -d "Print version"
 complete -c ghfind -l help -d "Print help"
 complete -c ghfind -l completion -d "Shell" -r -f -a "bash zsh fish"
 
-complete -c ghfind -f -a "login init doctor org pkg mcp skill"
+complete -c ghfind -f -a "login init doctor org pkg mcp skill trending deep-dive"

package/completions/ghfind.zsh

@@ -12,6 +12,7 @@ _ghfind() {
     '--sort[Sort strategy]:(best-match stars updated forks)'
     '--token[GitHub token]:token:'
     '--trending[Trending mode]'
+    '--language[Trending language filter]:language:'
     '--since[Trending period]:(daily weekly monthly)'
     '--pipe[Pipe target]:(clone open)'
     '--format[Output format]:(urls names ssh-urls clone-commands ids)'
@@ -28,6 +29,8 @@ _ghfind() {
     'doctor[Environment diagnostics]'
     'org[Org profile]:org name:'
     'pkg[Search packages]:query:'
+    'trending[Trending repos, optionally by language]'
+    'deep-dive[Repo deep-dive: languages, contributors, README]:owner/repo:'
     'mcp[Run the MCP server for AI agents (stdio)]'
     'skill[Print an agent skill guide]:skill name:'
   )