github-search-cli 9.9.0 → 9.10.1

package/CHANGELOG.md

@@ -6,6 +6,100 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). Publish
 
 ---
 
+## [9.10.1] — 2026-10-08 (released)
+
+### Fixed
+
+- **`--interval` is parsed again.** The flag was documented in `--help`, the
+  README, the shell completions and `docs/HOW-TO.md`, but `parseArgs` had no
+  case for it — so `ghfind --watch --interval 60` silently searched for
+  `"--interval 60"` and polled at the default 300s. It now parses a positive
+  whole number of seconds and rejects anything else.
+- **`--format` and `--pipe` validate up front.** A typo like `--format jsonn`
+  used to throw `Unknown format` mid-run and route into the crash-report flow
+  (which prints "ghfind encountered an unexpected error" and opens a GitHub
+  issue tab); `--pipe clonee` silently did nothing and exited 0. Both now fail
+  fast with the list of valid values and exit 1.
+- **An empty query no longer reaches GitHub.** `ghfind --count` sent `q=" "`,
+  got a 422 back, and surfaced it as "⚠ Network error — check your connection.
+  Retrying in 5s…". The search/format/pipe/watch handlers now fail fast with a
+  usage hint instead.
+- **Bare `ghfind --trending` launches the trending view** (as TRACKER.md
+  documents) instead of falling through to the landing menu.
+- **`--since` validates its value** (`daily|weekly|monthly`) instead of
+  silently falling back to daily for anything it did not recognize — matching
+  the existing `--sort` validation.
+- **Watch mode honors `--since`.** The trending period was derived from the
+  query string (`ghfind --watch --trending weekly`), so `--since weekly` was
+  ignored in watch-trending. An explicit `--since` now wins; the query-string
+  convention still applies when the flag is absent.
+- **The MCP `ghfind_user_profile` tool returns formatted text** like
+  `ghfind_org_profile` (and like the CLI's default `ghfind user`), instead of
+  raw JSON; the structured profile still rides along in `data`.
+- **Trending TUI footer matches the `/` key** (scroll-to-top: `/ top`, not
+  `/ search`), and the quit paths of the main TUI, trending and package browser
+  call `renderer.destroy()` before `process.exit(0)` so the terminal is
+  released (raw mode, alternate screen).
+
+### Removed
+
+- Dead modules with no importers: `src/search-state.ts` (stale
+  `config.githubTokens` reference from before token unification),
+  `src/export.ts` and `src/pipe.ts` (byte-for-byte duplicates of the formats
+  in `src/output.ts`, which is what everything imports), and the unused
+  `historyCount()` export.
+
+## [9.10.0] — 2026-10-03 (released)
+
+### Added
+
+- **The TUI is now fully clickable.** The mouse was already enabled — OpenTUI
+  emits SGR mouse tracking and hit-tests every event — but nothing consumed the
+  events, so they were silently discarded. Every list, card, tab and button now
+  responds:
+  - **Click** selects a row; the detail pane updates exactly as it does with
+    `↑`/`↓`, because clicks ride the same `selectionChanged` event the keyboard
+    already used.
+  - **Double-click** opens the repo in your browser, or runs the overlay's
+    action — the same code path as `Enter`, so the two can't drift apart.
+  - **Scroll wheel** moves the selection in a list and scrolls long panes
+    (README, help, org profile, update notes). This also fixes a pre-existing
+    bug: the wheel previously fell through to whichever renderable held focus,
+    so scrolling while the README viewer was open scrolled the wrong pane.
+  - **Click outside an overlay** dismisses it, the same as `Esc`.
+  - Landing cards, trending tabs, the update dialog's buttons, and every
+    overlay list (history, bookmarks, saved searches, topics, export, share,
+    command menu) are clickable. Hovering shows a pointer cursor and lifts the
+    row background.
+- **A <kbd>☰ menu</kbd> button in the bottom-right corner** opens the command
+  menu. It floats above the layout and hides while an overlay is open.
+
+### Changed
+
+- **`Esc` now opens the command menu; `Space` no longer does.** `Space` opened
+  the menu only while the query input was _not_ focused, which made one key mean
+  two different things depending on invisible state — and it meant `Space` could
+  not type a space in a query. More confusingly, it worked only _after_ you had
+  clicked a result row: clicking moved focus to the list as a side effect of
+  OpenTUI's auto-focus-on-press, and `Space` was gated on that focus being gone.
+  `Esc` is now the sole binding (it already closed overlays), and `Space` always
+  types. The bottom-right <kbd>☰ menu</kbd> button covers mouse users.
+- Help, the README keybinding tables and `docs/HOW-TO.md` now document the mouse
+  bindings and the `Esc` menu binding.
+
+### Fixed
+
+- **Non-interactive text no longer swallows clicks.** Every `TextRenderable`
+  defaults to OpenTUI's `selectable: true`, and a left-press on a selectable
+  renderable is consumed as a text-selection drag before the app's own handlers
+  run. The detail pane, comparison table, tab bar and other read-only text now
+  opt out, so clicks over them behave.
+- **A hover highlight no longer painted the list magenta.** OpenTUI's colour
+  parser accepts only hex and CSS names; an `rgba(...)` hover tint silently
+  resolved to its magenta fallback. Now expressed as 8-digit hex.
+
+---
+
 ## [9.9.0] — 2026-10-01 (released)
 
 ### Added

package/README.md

@@ -172,19 +172,19 @@ ghfind --completion fish | source
 <tr><td><b>Search</b></td><td>Free-text + qualifiers (<code>language:</code>, <code>stars:</code>, <code>topic:</code>), sort by stars/updated/forks</td></tr>
 <tr><td><b>Trending</b></td><td>Today, week, month, year — filter by language</td></tr>
 <tr><td><b>Packages</b></td><td>npm registry search (beta) — <code>ghfind pkg "query"</code></td></tr>
-<tr><td><b>Bookmarks</b></td><td>Space → Bookmark / Bookmarks panel — save repos, tag them</td></tr>
-<tr><td><b>Deep-dive</b></td><td>Space → Deep-dive — languages, contributors, README, activity chart</td></tr>
-<tr><td><b>Compare</b></td><td>Space → Compare select / Compare view — side-by-side, select 2+ repos</td></tr>
-<tr><td><b>Explore</b></td><td>Space → Topics — browse popular GitHub topics</td></tr>
-<tr><td><b>History</b></td><td>Space → History — recall past searches</td></tr>
-<tr><td><b>Saved</b></td><td>Space → Saved searches — load or save queries</td></tr>
-<tr><td><b>Export</b></td><td>Space → Export — JSON, CSV, Markdown to file</td></tr>
-<tr><td><b>Share</b></td><td>Space → Share repo — copy repo link to clipboard</td></tr>
-<tr><td><b>Org profile</b></td><td>Space → Org profile — org summary: repos, stars, top languages (<code>ghfind org <name></code> in CLI)</td></tr>
+<tr><td><b>Bookmarks</b></td><td>Menu → Bookmark / Bookmarks panel — save repos, tag them</td></tr>
+<tr><td><b>Deep-dive</b></td><td>Menu → Deep-dive — languages, contributors, README, activity chart</td></tr>
+<tr><td><b>Compare</b></td><td>Menu → Compare select / Compare view — side-by-side, select 2+ repos</td></tr>
+<tr><td><b>Explore</b></td><td>Menu → Topics — browse popular GitHub topics</td></tr>
+<tr><td><b>History</b></td><td>Menu → History — recall past searches</td></tr>
+<tr><td><b>Saved</b></td><td>Menu → Saved searches — load or save queries</td></tr>
+<tr><td><b>Export</b></td><td>Menu → Export — JSON, CSV, Markdown to file</td></tr>
+<tr><td><b>Share</b></td><td>Menu → Share repo — copy repo link to clipboard</td></tr>
+<tr><td><b>Org profile</b></td><td>Menu → Org profile — org summary: repos, stars, top languages (<code>ghfind org <name></code> in CLI)</td></tr>
 <tr><td><b>User profile</b></td><td>User summary like org profile — repos, stars, followers, top languages (<code>ghfind user <name></code>)</td></tr>
-<tr><td><b>Notifications</b></td><td>Space → Notifications — view & dismiss alerts</td></tr>
+<tr><td><b>Notifications</b></td><td>Menu → Notifications — view & dismiss alerts</td></tr>
 <tr><td><b>Releases</b></td><td><code>--releases</code> — new-release feed for bookmarked repos</td></tr>
-<tr><td><b>Graph</b></td><td>Space → Activity graph — commit chart, fullscreen toggle</td></tr>
+<tr><td><b>Graph</b></td><td>Menu → Activity graph — commit chart, fullscreen toggle</td></tr>
 <tr><td><b>Help</b></td><td><code>?</code> / <code>Ctrl+H</code> — keybindings reference</td></tr>
 <tr><td><b>Watch</b></td><td><code>--watch</code> — poll for new results</td></tr>
 <tr><td><b>MCP server</b></td><td><code>ghfind mcp</code> — GitHub search as tools for AI agents (Claude Code, Cursor, …)</td></tr>
@@ -214,16 +214,26 @@ ghfind --completion fish | source
 | `/`                   | Focus search input                             |
 | `Enter`               | Execute search / open selected repo in browser |
 | `↑` / `↓` — `j` / `k` | Navigate results & menus                       |
-| `Space`               | Open leader menu (contextual actions)          |
+| `Esc`                 | Open / close leader menu (contextual actions)  |
 | `Tab`                 | Auto-complete search qualifier                 |
 | `?` or `Ctrl+H`       | Help overlay                                   |
 | `1`–`5`               | Switch trending tabs (Today → All)             |
 | `←` / `→` — `h` / `l` | Switch trending tabs (left/right)              |
 | `PageUp`              | Jump to top of results                         |
 | `PageDown`            | Load next page of results                      |
-| `Esc`                 | Close current overlay                          |
 | `q`                   | Quit ghfind                                    |
 
+**Mouse** — every list is clickable, and the keyboard and mouse are interchangeable
+
+| Input                                   | Action                                    |
+| --------------------------------------- | ----------------------------------------- |
+| Click                                   | Select a row / card / trending tab        |
+| Double-click                            | Open the repo, or run the action          |
+| Scroll wheel                            | Move the selection, or scroll a long pane |
+| Click outside an overlay                | Dismiss it (same as `Esc`)                |
+| Click the query box                     | Focus the search input                    |
+| Click <kbd>☰ menu</kbd> (bottom-right) | Open the leader menu                      |
+
 **Error recovery** — active only while the matching error is in the status bar
 
 | Key | Action                                        |
@@ -233,7 +243,7 @@ ghfind --completion fish | source
 | `u` | Search without a token (401)                  |
 | `c` | Change token (rate limit)                     |
 
-**Leader menu** — press `Space`, navigate with `↑`/`↓`, press `Enter` to dispatch
+**Leader menu** — press `Esc` (or click <kbd>☰ menu</kbd>), navigate with `↑`/`↓`, press `Enter` to dispatch
 
 Actions shown depend on current mode (search vs trending) and selection:
 
@@ -277,7 +287,7 @@ Actions shown depend on current mode (search vs trending) and selection:
 
 Trending tabs: `1`–`5` (Today → All) or `←`/`→` — `h`/`l`
 
-> Most actions are accessed via the **leader menu** (`Space`). This keeps the keymap minimal while providing a full command palette. The leader menu filters actions contextually — items that don't apply (e.g., Bookmark with no repo selected) are hidden.
+> Most actions are accessed via the **leader menu** (`Esc`, or the <kbd>☰ menu</kbd> button in the bottom-right corner). This keeps the keymap minimal while providing a full command palette. The leader menu filters actions contextually — items that don't apply (e.g., Bookmark with no repo selected) are hidden.
 
 </details>
 
@@ -337,14 +347,14 @@ cd ghfind
 # With Bun (recommended for TUI)
 bun install
 bun start        # TUI
-bun test         # 624 tests
+bun test         # 682 tests
 bun run check    # format check + tests — the green gate
 bun run build    # build dist/
 
 # Or with npm
 npm install
 npm start        # TUI (requires Node 20+)
-npm test         # 624 tests
+npm test         # 682 tests
 npm run build    # build dist/
 
 > Want to contribute? See [CONTRIBUTING.md](CONTRIBUTING.md) for commands,
@@ -378,6 +388,28 @@ for the architecture, measurements, and remaining work.
 
 Recent releases (full history in [CHANGELOG.md](CHANGELOG.md)):
 
+### v9.10.1
+
+- **`--interval` is parsed again** — it was documented in `--help`, the README, the how-to guide and all three shell completions, but `parseArgs` had no case for it, so `ghfind --watch --interval 60` searched for the literal string `--interval 60` and polled at the default 300s anyway
+- **A flag typo no longer opens a GitHub issue tab** — `--format jsonn` threw mid-run and routed into the crash-report flow (printing "ghfind encountered an unexpected error" and opening a prefilled issue page); `--pipe clonee` silently did nothing and exited 0; both now validate up front, list the valid values, and exit 1
+- **An empty query fails fast instead of faking a network error** — `ghfind --count` with no query sent `q=" "`, got a 422 back, and looped on `⚠ Network error — check your connection. Retrying in 5s...`; the search/format/pipe/watch handlers now print a usage hint instead
+- **Bare `ghfind --trending` opens the trending view** instead of falling through to the landing menu, as documented
+- **`--since` validates `daily|weekly|monthly`** instead of silently accepting anything and falling back to daily — the same treatment `--sort` already had
+- **`--watch --trending --since weekly` polls weekly** — the trending period used to be derived from the query string, so `--since` was ignored in watch mode
+- **The MCP `ghfind_user_profile` tool returns formatted text**, matching `ghfind_org_profile` and the CLI's default `ghfind user` output; the raw JSON still rides along in `data`
+- **Quit paths release the terminal** — the main TUI, the trending view and the package browser call `renderer.destroy()` before exiting, and the trending footer's `/` hint now matches the scroll-to-top key it actually binds
+
+### v9.10.0
+
+- **The TUI is now fully clickable** — the mouse was already enabled (OpenTUI emitted and hit-tested every event) but nothing consumed them, so they were silently discarded; click selects, double-click opens, the wheel scrolls, and clicking outside an overlay closes it
+- **Clicks reuse the keyboard's own code paths** — a click calls `setSelectedIndex`, which emits the same `selectionChanged` event `↑`/`↓` does, so the detail pane, graph and packages view work identically with no parallel mouse branch to drift
+- **Every surface responds** — results, landing mode cards, trending tabs, the update dialog's buttons, and all seven overlay lists (history, bookmarks, saved searches, topics, export, share, command menu), with hover highlighting and a pointer cursor
+- **A <kbd>☰ menu</kbd> button in the bottom-right corner** opens the command menu; it floats above the layout and hides while an overlay is open
+- **The scroll wheel no longer scrolls the wrong pane** — a pre-existing bug: scroll events that hit nothing fell through to the focused renderable, so scrolling in the README viewer moved the _result selection_ instead of the README
+- **Clicks over read-only text now register** — every `TextRenderable` defaults to OpenTUI's text-selection mode, which consumed left-presses as a selection drag before ghfind's handlers ran, so the detail pane and comparison table ignored clicks entirely
+- **`Space` now always types a space, and `Esc` opens the command menu** — `Space` opened the menu only while the query input was unfocused, and the only thing that unfocused it was clicking a result row, so `Space` worked only after a mouse click; `Esc` already closed every overlay, so it gains a meaning rather than losing one
+- **A hover highlight no longer painted lists magenta** — OpenTUI's colour parser accepts only hex and CSS names, so an `rgba()` tint fell through to its magenta fallback
+
 ### v9.9.0
 
 - **Queries are understood before they are sent** — every surface (TUI, CLI, MCP, `--watch`) parses and checks a query first, so a typo or bad value fails with a specific message and a fix instead of an opaque GitHub 422 or a misleading "network error"; previously only the TUI ran validation at all
@@ -391,40 +423,6 @@ Recent releases (full history in [CHANGELOG.md](CHANGELOG.md)):
 - **A prerelease is no longer offered as an upgrade** — the version comparison used by Node and the compiled binaries reported `9.9.0-beta.1` as newer than `9.9.0`, i.e. a downgrade; it now follows npm ordering and ignores build metadata
 - **A new [how-to guide](docs/HOW-TO.md)** — token setup, writing queries, reading results, recovering from errors, and copy-paste recipes
 
-### v9.8.3
-
-- **401/403 say what actually happened** — a rejected token and an authenticated-but-forbidden request (e.g. SAML/SSO enforcement) both used to report "Network error", naming a connectivity problem you didn't have; only genuine connectivity and server failures keep that message now
-- **A rate-limited search no longer looks like an empty one** — the adapter used to swallow the error and render a silent, successful "no repositories found"; the real message reaches the status bar, and the `ghfind_search_repos` MCP tool returns `rateLimited: true` with backoff advice instead of a tool failure
-- **Recover from errors without leaving the TUI** — while the matching error is in the status bar, `t` opens an inline token prompt (saves it and re-runs the failed query), `u` clears the token and retries unauthenticated, `c` swaps in a different token, `r` retries
-- **A corrupted session no longer hijacks startup** — a `session.json` holding an MCP handshake blob used to skip the landing menu and auto-run that garbage as a search on every launch; the menu always comes first now, and both save and restore sanitize the session
-- **Images wrapped in a link render now** — the badge-and-screenshot shape `[![alt](shot.png)](url)` rendered nothing at all, which cost `sst/opencode` its only image and `withastro/astro` 23 of its 25; the image cells carry an OSC 8 hyperlink, so clicking it opens the target
-- **A README full of small images no longer floods the screen** — images the README declares under 100px on any edge are skipped before a request is made, and undeclared `![]()` images are measured from the image header before any pixel decode; on `openclaw/openclaw` (648 sponsor avatars) that is 649 fetches / 28.3s → 1 fetch / ~0.5s
-
-### v9.8.2
-
-- **Security: tokens no longer leak into crash reports** — an uncaught error auto-built a GitHub issue URL from raw `process.argv`, so a `--token` value ended up in a public URL; every field is redacted now, and ghfind prints the URL to copy instead of opening a browser when it finds a credential
-- **Security: your token is never sent to `raw.githubusercontent.com`** when fetching a README, only to `api.github.com` and only for a private repo
-- **Security: untrusted skill sources are validated** before reaching a shell command or URL, so a hostile skills.sh entry cannot inject into `npx skills add`
-- **Recoverable errors no longer open a bug-report tab** — rate limits, network blips and layout changes print a short message and exit
-- **`--compare` resolves repositories exactly** in both the CLI and the `ghfind_compare_repos` MCP tool; it used a free-text search that could silently compare the wrong repo
-- **State files are written atomically** — a crash mid-write used to leave truncated JSON that was silently replaced with defaults, losing bookmarks and history
-- Fixed notification IDs restarting after "dismiss all", `history --delete` removing every duplicate, an invalid `--sort` degrading silently, a failed "load more" clearing the TUI's results, `--markdown` not escaping `|`, and a not-quite-LRU memory cache
-
-### v9.8.1
-
-- **`ghfind skill search <query>`** finds agent skills by keyword and prints why
-  each one matched; `--remote` searches the public [skills.sh](https://skills.sh)
-  ecosystem instead, and `GHFIND_SKILL_ROOTS` overrides the scanned directories
-- **MCP tool `ghfind_skill_search`** — agents search installed skills or the
-  skills.sh registry as soon as they connect; read-only
-- **Read-only CLI views of local state** — `ghfind bookmarks`, `ghfind history`,
-  `ghfind saved`, `ghfind topics`, plus `ghfind readme <owner/repo>` and
-  `ghfind share <owner/repo>`, each with `--json` for agents
-- **Shell completions** (bash, zsh, fish) cover every new subcommand and flag
-- **README image rendering is incomplete** — see
-  [Known limitations](#known-limitations); the v9.8.0 notes wrongly described it
-  as working
-
 ## License
 
 MIT