Add entire search command

[evisdren]

Summary

• New entire search <query> command for hybrid semantic + keyword checkpoint search
• Calls the Entire search service (thin HTTP client, no direct Turbopuffer/OpenAI keys needed)
• Auth exclusively via GitHub device flow token (entire login) — PAT fallbacks (GITHUB_TOKEN env var, gh auth token) removed
• Supports --branch filtering and --limit; JSON output only for agent/script consumption
• Updated README with search command docs and auth requirements

Files

• cmd/entire/cli/search/ — search client package (github.go for remote parsing, search.go for service client)
• cmd/entire/cli/search_cmd.go — Cobra command
• cmd/entire/cli/auth/resolve.go — simplified to device flow token only
• cmd/entire/cli/auth_cmd.go — updated auth-status to use new signature
• cmd/entire/cli/root.go — command registration
• README.md — docs for search command, flags, and auth

Companion PR

• Search service: entirehq/entire.io#981

Test plan

• go build ./cmd/entire/ compiles cleanly
• go test ./... — all tests pass
• entire login completes device flow and stores token
• entire search "test query" with stored token returns results
• entire search without a stored token shows: not authenticated. Run 'entire login'
• GITHUB_TOKEN env var is no longer accepted as auth
• entire auth-status shows correct status with/without stored token
• mise run lint passes

🤖 Generated with Claude Code

[cursor]

PR Summary

Medium Risk
Adds a new networked command that sends a GitHub token to an external service and depends on remote URL parsing; failures or misconfiguration primarily impact this new command’s UX rather than existing flows.

Overview
Adds a new entire search <query> CLI command that queries the Entire hosted search service to find checkpoints using hybrid semantic+keyword ranking, with optional --branch, --limit, and --json output modes.

The command resolves repo identity from the origin GitHub remote, requires a GitHub token (GITHUB_TOKEN or gh auth token) for authenticated requests, and introduces a small HTTP client (cmd/entire/cli/search) plus README documentation for usage and environment variables (including ENTIRE_SEARCH_URL).

^{Written by Cursor Bugbot for commit bf3e776. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

Bugbot Autofix prepared fixes for both issues found in the latest run.

• ✅ Fixed: Byte-based truncation duplicates existing UTF-8-safe utility
  • Replaced byte-slicing truncation in truncateStr with stringutil.TruncateRunes to ensure UTF-8-safe truncation and reuse the existing utility.
• ✅ Fixed: Display count uses server total, not actual results
  • Updated the header to report len(resp.Results) so the displayed count matches the number of rows shown to users.

Or push these changes by commenting:

@cursor push 43625e2af1

Preview (43625e2af1)

diff --git a/cmd/entire/cli/search_cmd.go b/cmd/entire/cli/search_cmd.go
--- a/cmd/entire/cli/search_cmd.go
+++ b/cmd/entire/cli/search_cmd.go
@@ -10,6 +10,7 @@
 	"github.com/entireio/cli/cmd/entire/cli/jsonutil"
 	"github.com/entireio/cli/cmd/entire/cli/search"
 	"github.com/entireio/cli/cmd/entire/cli/strategy"
+	"github.com/entireio/cli/cmd/entire/cli/stringutil"
 	"github.com/spf13/cobra"
 )
 
@@ -113,7 +114,7 @@
 			}
 
 			// Pretty print
-			fmt.Fprintf(cmd.OutOrStdout(), "\nFound %d results for %s:\n\n", resp.Total, resp.Repo)
+			fmt.Fprintf(cmd.OutOrStdout(), "\nFound %d results for %s:\n\n", len(resp.Results), resp.Repo)
 			w := tabwriter.NewWriter(cmd.OutOrStdout(), 0, 0, 2, ' ', 0)
 			fmt.Fprintln(w, "RANK\tCHECKPOINT\tSCORE\tMATCH\tBRANCH\tAUTHOR\tPROMPT")
 			for i, r := range resp.Results {
@@ -147,8 +148,5 @@
 }
 
 func truncateStr(s string, maxLen int) string {
-	if len(s) <= maxLen {
-		return s
-	}
-	return s[:maxLen-3] + "..."
+	return stringutil.TruncateRunes(s, maxLen, "...")
 }

_{This Bugbot Autofix run was free. To enable autofix for future PRs, go to the Cursor dashboard.}

Comment @cursor review or bugbot run to trigger another review on this PR

[Copilot]

Pull request overview

Adds a new entire search <query> CLI command that queries the Entire hosted search service to find checkpoints in the current Git repository, supporting both human-readable and --json output for automation.

Changes:

• Introduces entire search Cobra command with --json, --branch, and --limit flags and origin-remote parsing.
• Adds a thin HTTP client (cmd/entire/cli/search) plus unit tests for GitHub remote parsing.
• Registers the command and documents usage/auth requirements in the README.

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
cmd/entire/cli/search_cmd.go	Implements the entire search command, token resolution, repo remote parsing, and output formatting.
cmd/entire/cli/search/search.go	Adds HTTP client to call the Entire search service and parse responses.
cmd/entire/cli/search/github.go	Adds GitHub remote URL parsing helper.
cmd/entire/cli/search/search_test.go	Unit tests for ParseGitHubRemote variants.
cmd/entire/cli/root.go	Registers the new search command on the root CLI.
README.md	Documents entire search, flags, and token requirements.

[pfleidi]

As discussed in person: I'd be interested to see if url.Parse() would work on a SSH URL as well, but I'm assuming that there's a reason for this conditional to be there. 👍

[Soph]

I'd like to say that using gh auth token in any way is not something we will do.

[Soph]

Can we use github.com/zalando/go-keyring to securely store the tokens?

[evisdren]

Can we use github.com/zalando/go-keyring to securely store the tokens?

updated