@bradygaster/squad-sdk 0.8.19 → 0.8.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (105) hide show
  1. package/README.md +296 -296
  2. package/dist/adapter/client.js +1 -1
  3. package/dist/adapter/client.js.map +1 -1
  4. package/dist/agents/charter-compiler.d.ts +4 -0
  5. package/dist/agents/charter-compiler.d.ts.map +1 -1
  6. package/dist/agents/charter-compiler.js +8 -0
  7. package/dist/agents/charter-compiler.js.map +1 -1
  8. package/dist/agents/history-shadow.js +30 -30
  9. package/dist/agents/index.js +1 -1
  10. package/dist/agents/index.js.map +1 -1
  11. package/dist/agents/lifecycle.js +1 -1
  12. package/dist/agents/lifecycle.js.map +1 -1
  13. package/dist/build/github-dist.js +42 -42
  14. package/dist/builders/index.d.ts +156 -0
  15. package/dist/builders/index.d.ts.map +1 -0
  16. package/dist/builders/index.js +404 -0
  17. package/dist/builders/index.js.map +1 -0
  18. package/dist/builders/types.d.ts +187 -0
  19. package/dist/builders/types.d.ts.map +1 -0
  20. package/dist/builders/types.js +12 -0
  21. package/dist/builders/types.js.map +1 -0
  22. package/dist/config/init.d.ts +6 -22
  23. package/dist/config/init.d.ts.map +1 -1
  24. package/dist/config/init.js +273 -185
  25. package/dist/config/init.js.map +1 -1
  26. package/dist/coordinator/coordinator.js +1 -1
  27. package/dist/coordinator/coordinator.js.map +1 -1
  28. package/dist/coordinator/index.js +1 -1
  29. package/dist/coordinator/index.js.map +1 -1
  30. package/dist/index.d.ts +3 -0
  31. package/dist/index.d.ts.map +1 -1
  32. package/dist/index.js +3 -0
  33. package/dist/index.js.map +1 -1
  34. package/dist/runtime/otel-api.d.ts +38 -0
  35. package/dist/runtime/otel-api.d.ts.map +1 -0
  36. package/dist/runtime/otel-api.js +94 -0
  37. package/dist/runtime/otel-api.js.map +1 -0
  38. package/dist/runtime/otel-bridge.js +1 -1
  39. package/dist/runtime/otel-bridge.js.map +1 -1
  40. package/dist/runtime/otel.d.ts +1 -1
  41. package/dist/runtime/otel.d.ts.map +1 -1
  42. package/dist/runtime/otel.js +28 -12
  43. package/dist/runtime/otel.js.map +1 -1
  44. package/dist/runtime/squad-observer.js +1 -1
  45. package/dist/runtime/squad-observer.js.map +1 -1
  46. package/dist/sharing/consult.js +78 -78
  47. package/dist/streams/filter.d.ts +33 -0
  48. package/dist/streams/filter.d.ts.map +1 -0
  49. package/dist/streams/filter.js +29 -0
  50. package/dist/streams/filter.js.map +1 -0
  51. package/dist/streams/index.d.ts +9 -0
  52. package/dist/streams/index.d.ts.map +1 -0
  53. package/dist/streams/index.js +9 -0
  54. package/dist/streams/index.js.map +1 -0
  55. package/dist/streams/resolver.d.ts +40 -0
  56. package/dist/streams/resolver.d.ts.map +1 -0
  57. package/dist/streams/resolver.js +162 -0
  58. package/dist/streams/resolver.js.map +1 -0
  59. package/dist/streams/types.d.ts +44 -0
  60. package/dist/streams/types.d.ts.map +1 -0
  61. package/dist/streams/types.js +10 -0
  62. package/dist/streams/types.js.map +1 -0
  63. package/dist/tools/index.js +1 -1
  64. package/dist/tools/index.js.map +1 -1
  65. package/dist/types.d.ts +20 -0
  66. package/dist/types.d.ts.map +1 -1
  67. package/package.json +208 -207
  68. package/templates/casting-history.json +4 -4
  69. package/templates/casting-policy.json +35 -35
  70. package/templates/casting-registry.json +3 -3
  71. package/templates/ceremonies.md +41 -41
  72. package/templates/charter.md +53 -53
  73. package/templates/constraint-tracking.md +38 -38
  74. package/templates/copilot-instructions.md +46 -46
  75. package/templates/history.md +10 -10
  76. package/templates/identity/now.md +9 -9
  77. package/templates/identity/wisdom.md +15 -15
  78. package/templates/mcp-config.md +98 -98
  79. package/templates/multi-agent-format.md +28 -28
  80. package/templates/orchestration-log.md +27 -27
  81. package/templates/plugin-marketplace.md +49 -49
  82. package/templates/raw-agent-output.md +37 -37
  83. package/templates/roster.md +60 -60
  84. package/templates/routing.md +54 -54
  85. package/templates/run-output.md +50 -50
  86. package/templates/scribe-charter.md +119 -119
  87. package/templates/skill.md +24 -24
  88. package/templates/skills/project-conventions/SKILL.md +56 -56
  89. package/templates/squad.agent.md +1146 -1146
  90. package/templates/workflows/squad-ci.yml +24 -24
  91. package/templates/workflows/squad-docs.yml +50 -50
  92. package/templates/workflows/squad-heartbeat.yml +316 -316
  93. package/templates/workflows/squad-insider-release.yml +61 -61
  94. package/templates/workflows/squad-issue-assign.yml +161 -161
  95. package/templates/workflows/squad-label-enforce.yml +181 -181
  96. package/templates/workflows/squad-preview.yml +55 -55
  97. package/templates/workflows/squad-promote.yml +120 -121
  98. package/templates/workflows/squad-release.yml +77 -77
  99. package/templates/workflows/squad-triage.yml +260 -260
  100. package/templates/workflows/sync-squad-labels.yml +169 -169
  101. package/dist/runtime/event-bus-otel-bridge.d.ts +0 -19
  102. package/dist/runtime/event-bus-otel-bridge.d.ts.map +0 -1
  103. package/dist/runtime/event-bus-otel-bridge.js +0 -61
  104. package/dist/runtime/event-bus-otel-bridge.js.map +0 -1
  105. package/templates/workflows/squad-main-guard.yml +0 -129
@@ -1,41 +1,41 @@
1
- # Ceremonies
2
-
3
- > Team meetings that happen before or after work. Each squad configures their own.
4
-
5
- ## Design Review
6
-
7
- | Field | Value |
8
- |-------|-------|
9
- | **Trigger** | auto |
10
- | **When** | before |
11
- | **Condition** | multi-agent task involving 2+ agents modifying shared systems |
12
- | **Facilitator** | lead |
13
- | **Participants** | all-relevant |
14
- | **Time budget** | focused |
15
- | **Enabled** | ✅ yes |
16
-
17
- **Agenda:**
18
- 1. Review the task and requirements
19
- 2. Agree on interfaces and contracts between components
20
- 3. Identify risks and edge cases
21
- 4. Assign action items
22
-
23
- ---
24
-
25
- ## Retrospective
26
-
27
- | Field | Value |
28
- |-------|-------|
29
- | **Trigger** | auto |
30
- | **When** | after |
31
- | **Condition** | build failure, test failure, or reviewer rejection |
32
- | **Facilitator** | lead |
33
- | **Participants** | all-involved |
34
- | **Time budget** | focused |
35
- | **Enabled** | ✅ yes |
36
-
37
- **Agenda:**
38
- 1. What happened? (facts only)
39
- 2. Root cause analysis
40
- 3. What should change?
41
- 4. Action items for next iteration
1
+ # Ceremonies
2
+
3
+ > Team meetings that happen before or after work. Each squad configures their own.
4
+
5
+ ## Design Review
6
+
7
+ | Field | Value |
8
+ |-------|-------|
9
+ | **Trigger** | auto |
10
+ | **When** | before |
11
+ | **Condition** | multi-agent task involving 2+ agents modifying shared systems |
12
+ | **Facilitator** | lead |
13
+ | **Participants** | all-relevant |
14
+ | **Time budget** | focused |
15
+ | **Enabled** | ✅ yes |
16
+
17
+ **Agenda:**
18
+ 1. Review the task and requirements
19
+ 2. Agree on interfaces and contracts between components
20
+ 3. Identify risks and edge cases
21
+ 4. Assign action items
22
+
23
+ ---
24
+
25
+ ## Retrospective
26
+
27
+ | Field | Value |
28
+ |-------|-------|
29
+ | **Trigger** | auto |
30
+ | **When** | after |
31
+ | **Condition** | build failure, test failure, or reviewer rejection |
32
+ | **Facilitator** | lead |
33
+ | **Participants** | all-involved |
34
+ | **Time budget** | focused |
35
+ | **Enabled** | ✅ yes |
36
+
37
+ **Agenda:**
38
+ 1. What happened? (facts only)
39
+ 2. Root cause analysis
40
+ 3. What should change?
41
+ 4. Action items for next iteration
@@ -1,53 +1,53 @@
1
- # {Name} — {Role}
2
-
3
- > {One-line personality statement — what makes this person tick}
4
-
5
- ## Identity
6
-
7
- - **Name:** {Name}
8
- - **Role:** {Role title}
9
- - **Expertise:** {2-3 specific skills relevant to the project}
10
- - **Style:** {How they communicate — direct? thorough? opinionated?}
11
-
12
- ## What I Own
13
-
14
- - {Area of responsibility 1}
15
- - {Area of responsibility 2}
16
- - {Area of responsibility 3}
17
-
18
- ## How I Work
19
-
20
- - {Key approach or principle 1}
21
- - {Key approach or principle 2}
22
- - {Pattern or convention I follow}
23
-
24
- ## Boundaries
25
-
26
- **I handle:** {types of work this agent does}
27
-
28
- **I don't handle:** {types of work that belong to other team members}
29
-
30
- **When I'm unsure:** I say so and suggest who might know.
31
-
32
- **If I review others' work:** On rejection, I may require a different agent to revise (not the original author) or request a new specialist be spawned. The Coordinator enforces this.
33
-
34
- ## Model
35
-
36
- - **Preferred:** auto
37
- - **Rationale:** Coordinator selects the best model based on task type — cost first unless writing code
38
- - **Fallback:** Standard chain — the coordinator handles fallback automatically
39
-
40
- ## Collaboration
41
-
42
- Before starting work, run `git rev-parse --show-toplevel` to find the repo root, or use the `TEAM ROOT` provided in the spawn prompt. All `.squad/` paths must be resolved relative to this root — do not assume CWD is the repo root (you may be in a worktree or subdirectory).
43
-
44
- Before starting work, read `.squad/decisions.md` for team decisions that affect me.
45
- After making a decision others should know, write it to `.squad/decisions/inbox/{my-name}-{brief-slug}.md` — the Scribe will merge it.
46
- If I need another team member's input, say so — the coordinator will bring them in.
47
-
48
- ## Voice
49
-
50
- {1-2 sentences describing personality. Not generic — specific. This agent has OPINIONS.
51
- They have preferences. They push back. They have a style that's distinctly theirs.
52
- Example: "Opinionated about test coverage. Will push back if tests are skipped.
53
- Prefers integration tests over mocks. Thinks 80% coverage is the floor, not the ceiling."}
1
+ # {Name} — {Role}
2
+
3
+ > {One-line personality statement — what makes this person tick}
4
+
5
+ ## Identity
6
+
7
+ - **Name:** {Name}
8
+ - **Role:** {Role title}
9
+ - **Expertise:** {2-3 specific skills relevant to the project}
10
+ - **Style:** {How they communicate — direct? thorough? opinionated?}
11
+
12
+ ## What I Own
13
+
14
+ - {Area of responsibility 1}
15
+ - {Area of responsibility 2}
16
+ - {Area of responsibility 3}
17
+
18
+ ## How I Work
19
+
20
+ - {Key approach or principle 1}
21
+ - {Key approach or principle 2}
22
+ - {Pattern or convention I follow}
23
+
24
+ ## Boundaries
25
+
26
+ **I handle:** {types of work this agent does}
27
+
28
+ **I don't handle:** {types of work that belong to other team members}
29
+
30
+ **When I'm unsure:** I say so and suggest who might know.
31
+
32
+ **If I review others' work:** On rejection, I may require a different agent to revise (not the original author) or request a new specialist be spawned. The Coordinator enforces this.
33
+
34
+ ## Model
35
+
36
+ - **Preferred:** auto
37
+ - **Rationale:** Coordinator selects the best model based on task type — cost first unless writing code
38
+ - **Fallback:** Standard chain — the coordinator handles fallback automatically
39
+
40
+ ## Collaboration
41
+
42
+ Before starting work, run `git rev-parse --show-toplevel` to find the repo root, or use the `TEAM ROOT` provided in the spawn prompt. All `.squad/` paths must be resolved relative to this root — do not assume CWD is the repo root (you may be in a worktree or subdirectory).
43
+
44
+ Before starting work, read `.squad/decisions.md` for team decisions that affect me.
45
+ After making a decision others should know, write it to `.squad/decisions/inbox/{my-name}-{brief-slug}.md` — the Scribe will merge it.
46
+ If I need another team member's input, say so — the coordinator will bring them in.
47
+
48
+ ## Voice
49
+
50
+ {1-2 sentences describing personality. Not generic — specific. This agent has OPINIONS.
51
+ They have preferences. They push back. They have a style that's distinctly theirs.
52
+ Example: "Opinionated about test coverage. Will push back if tests are skipped.
53
+ Prefers integration tests over mocks. Thinks 80% coverage is the floor, not the ceiling."}
@@ -1,38 +1,38 @@
1
- # Constraint Budget Tracking
2
-
3
- When the user or system imposes constraints (question limits, revision limits, time budgets), maintain a visible counter in your responses and in the artifact.
4
-
5
- ## Format
6
-
7
- ```
8
- 📊 Clarifying questions used: 2 / 3
9
- ```
10
-
11
- ## Rules
12
-
13
- - Update the counter each time the constraint is consumed
14
- - When a constraint is exhausted, state it: `📊 Question budget exhausted (3/3). Proceeding with current information.`
15
- - If no constraints are active, do not display counters
16
- - Include the final constraint status in multi-agent artifacts
17
-
18
- ## Example Session
19
-
20
- ```
21
- Coordinator: Spawning agents to analyze requirements...
22
- 📊 Clarifying questions used: 0 / 3
23
-
24
- Agent asks clarification: "Should we support OAuth?"
25
- Coordinator: Checking with user...
26
- 📊 Clarifying questions used: 1 / 3
27
-
28
- Agent asks clarification: "What's the rate limit?"
29
- Coordinator: Checking with user...
30
- 📊 Clarifying questions used: 2 / 3
31
-
32
- Agent asks clarification: "Do we need RBAC?"
33
- Coordinator: Checking with user...
34
- 📊 Clarifying questions used: 3 / 3
35
-
36
- Agent asks clarification: "Should we cache responses?"
37
- Coordinator: 📊 Question budget exhausted (3/3). Proceeding without clarification.
38
- ```
1
+ # Constraint Budget Tracking
2
+
3
+ When the user or system imposes constraints (question limits, revision limits, time budgets), maintain a visible counter in your responses and in the artifact.
4
+
5
+ ## Format
6
+
7
+ ```
8
+ 📊 Clarifying questions used: 2 / 3
9
+ ```
10
+
11
+ ## Rules
12
+
13
+ - Update the counter each time the constraint is consumed
14
+ - When a constraint is exhausted, state it: `📊 Question budget exhausted (3/3). Proceeding with current information.`
15
+ - If no constraints are active, do not display counters
16
+ - Include the final constraint status in multi-agent artifacts
17
+
18
+ ## Example Session
19
+
20
+ ```
21
+ Coordinator: Spawning agents to analyze requirements...
22
+ 📊 Clarifying questions used: 0 / 3
23
+
24
+ Agent asks clarification: "Should we support OAuth?"
25
+ Coordinator: Checking with user...
26
+ 📊 Clarifying questions used: 1 / 3
27
+
28
+ Agent asks clarification: "What's the rate limit?"
29
+ Coordinator: Checking with user...
30
+ 📊 Clarifying questions used: 2 / 3
31
+
32
+ Agent asks clarification: "Do we need RBAC?"
33
+ Coordinator: Checking with user...
34
+ 📊 Clarifying questions used: 3 / 3
35
+
36
+ Agent asks clarification: "Should we cache responses?"
37
+ Coordinator: 📊 Question budget exhausted (3/3). Proceeding without clarification.
38
+ ```
@@ -1,46 +1,46 @@
1
- # Copilot Coding Agent — Squad Instructions
2
-
3
- You are working on a project that uses **Squad**, an AI team framework. When picking up issues autonomously, follow these guidelines.
4
-
5
- ## Team Context
6
-
7
- Before starting work on any issue:
8
-
9
- 1. Read `.squad/team.md` for the team roster, member roles, and your capability profile.
10
- 2. Read `.squad/routing.md` for work routing rules.
11
- 3. If the issue has a `squad:{member}` label, read that member's charter at `.squad/agents/{member}/charter.md` to understand their domain expertise and coding style — work in their voice.
12
-
13
- ## Capability Self-Check
14
-
15
- Before starting work, check your capability profile in `.squad/team.md` under the **Coding Agent → Capabilities** section.
16
-
17
- - **🟢 Good fit** — proceed autonomously.
18
- - **🟡 Needs review** — proceed, but note in the PR description that a squad member should review.
19
- - **🔴 Not suitable** — do NOT start work. Instead, comment on the issue:
20
- ```
21
- 🤖 This issue doesn't match my capability profile (reason: {why}). Suggesting reassignment to a squad member.
22
- ```
23
-
24
- ## Branch Naming
25
-
26
- Use the squad branch convention:
27
- ```
28
- squad/{issue-number}-{kebab-case-slug}
29
- ```
30
- Example: `squad/42-fix-login-validation`
31
-
32
- ## PR Guidelines
33
-
34
- When opening a PR:
35
- - Reference the issue: `Closes #{issue-number}`
36
- - If the issue had a `squad:{member}` label, mention the member: `Working as {member} ({role})`
37
- - If this is a 🟡 needs-review task, add to the PR description: `⚠️ This task was flagged as "needs review" — please have a squad member review before merging.`
38
- - Follow any project conventions in `.squad/decisions.md`
39
-
40
- ## Decisions
41
-
42
- If you make a decision that affects other team members, write it to:
43
- ```
44
- .squad/decisions/inbox/copilot-{brief-slug}.md
45
- ```
46
- The Scribe will merge it into the shared decisions file.
1
+ # Copilot Coding Agent — Squad Instructions
2
+
3
+ You are working on a project that uses **Squad**, an AI team framework. When picking up issues autonomously, follow these guidelines.
4
+
5
+ ## Team Context
6
+
7
+ Before starting work on any issue:
8
+
9
+ 1. Read `.squad/team.md` for the team roster, member roles, and your capability profile.
10
+ 2. Read `.squad/routing.md` for work routing rules.
11
+ 3. If the issue has a `squad:{member}` label, read that member's charter at `.squad/agents/{member}/charter.md` to understand their domain expertise and coding style — work in their voice.
12
+
13
+ ## Capability Self-Check
14
+
15
+ Before starting work, check your capability profile in `.squad/team.md` under the **Coding Agent → Capabilities** section.
16
+
17
+ - **🟢 Good fit** — proceed autonomously.
18
+ - **🟡 Needs review** — proceed, but note in the PR description that a squad member should review.
19
+ - **🔴 Not suitable** — do NOT start work. Instead, comment on the issue:
20
+ ```
21
+ 🤖 This issue doesn't match my capability profile (reason: {why}). Suggesting reassignment to a squad member.
22
+ ```
23
+
24
+ ## Branch Naming
25
+
26
+ Use the squad branch convention:
27
+ ```
28
+ squad/{issue-number}-{kebab-case-slug}
29
+ ```
30
+ Example: `squad/42-fix-login-validation`
31
+
32
+ ## PR Guidelines
33
+
34
+ When opening a PR:
35
+ - Reference the issue: `Closes #{issue-number}`
36
+ - If the issue had a `squad:{member}` label, mention the member: `Working as {member} ({role})`
37
+ - If this is a 🟡 needs-review task, add to the PR description: `⚠️ This task was flagged as "needs review" — please have a squad member review before merging.`
38
+ - Follow any project conventions in `.squad/decisions.md`
39
+
40
+ ## Decisions
41
+
42
+ If you make a decision that affects other team members, write it to:
43
+ ```
44
+ .squad/decisions/inbox/copilot-{brief-slug}.md
45
+ ```
46
+ The Scribe will merge it into the shared decisions file.
@@ -1,10 +1,10 @@
1
- # Project Context
2
-
3
- - **Owner:** {user name}
4
- - **Project:** {project description}
5
- - **Stack:** {languages, frameworks, tools}
6
- - **Created:** {timestamp}
7
-
8
- ## Learnings
9
-
10
- <!-- Append new learnings below. Each entry is something lasting about the project. -->
1
+ # Project Context
2
+
3
+ - **Owner:** {user name}
4
+ - **Project:** {project description}
5
+ - **Stack:** {languages, frameworks, tools}
6
+ - **Created:** {timestamp}
7
+
8
+ ## Learnings
9
+
10
+ <!-- Append new learnings below. Each entry is something lasting about the project. -->
@@ -1,9 +1,9 @@
1
- ---
2
- updated_at: {timestamp}
3
- focus_area: {brief description}
4
- active_issues: []
5
- ---
6
-
7
- # What We're Focused On
8
-
9
- {Narrative description of current focus — 1-3 sentences. Updated by coordinator at session start.}
1
+ ---
2
+ updated_at: {timestamp}
3
+ focus_area: {brief description}
4
+ active_issues: []
5
+ ---
6
+
7
+ # What We're Focused On
8
+
9
+ {Narrative description of current focus — 1-3 sentences. Updated by coordinator at session start.}
@@ -1,15 +1,15 @@
1
- ---
2
- last_updated: {timestamp}
3
- ---
4
-
5
- # Team Wisdom
6
-
7
- Reusable patterns and heuristics learned through work. NOT transcripts — each entry is a distilled, actionable insight.
8
-
9
- ## Patterns
10
-
11
- <!-- Append entries below. Format: **Pattern:** description. **Context:** when it applies. -->
12
-
13
- ## Anti-Patterns
14
-
15
- <!-- Things we tried that didn't work. **Avoid:** description. **Why:** reason. -->
1
+ ---
2
+ last_updated: {timestamp}
3
+ ---
4
+
5
+ # Team Wisdom
6
+
7
+ Reusable patterns and heuristics learned through work. NOT transcripts — each entry is a distilled, actionable insight.
8
+
9
+ ## Patterns
10
+
11
+ <!-- Append entries below. Format: **Pattern:** description. **Context:** when it applies. -->
12
+
13
+ ## Anti-Patterns
14
+
15
+ <!-- Things we tried that didn't work. **Avoid:** description. **Why:** reason. -->
@@ -1,98 +1,98 @@
1
- # MCP Integration — Configuration and Samples
2
-
3
- MCP (Model Context Protocol) servers extend Squad with tools for external services — Trello, Aspire dashboards, Azure, Notion, and more. The user configures MCP servers in their environment; Squad discovers and uses them.
4
-
5
- > **Full patterns:** Read `.squad/skills/mcp-tool-discovery/SKILL.md` for discovery patterns, domain-specific usage, and graceful degradation.
6
-
7
- ## Security Considerations
8
-
9
- > ⚠️ **Important:** The sample configs below use `npx -y` to run MCP server packages without version pinning. For production use:
10
- > - **Pin versions:** Use `npx -y @trello/mcp-server@1.2.3` instead of bare package names
11
- > - **Audit packages:** Review MCP server source code before granting access to credentials
12
- > - **Use least-privilege tokens:** Create tokens with minimal required scopes
13
- > - **Consider local installs:** Install packages locally (`npm install`) rather than fetching on each run
14
-
15
- ## Config File Locations
16
-
17
- Users configure MCP servers at these locations (checked in priority order):
18
- 1. **Repository-level:** `.copilot/mcp-config.json` (team-shared, committed to repo)
19
- 2. **Workspace-level:** `.vscode/mcp.json` (VS Code workspaces)
20
- 3. **User-level:** `~/.copilot/mcp-config.json` (personal)
21
- 4. **CLI override:** `--additional-mcp-config` flag (session-specific)
22
-
23
- ## Sample Config — Trello
24
-
25
- ```json
26
- {
27
- "mcpServers": {
28
- "trello": {
29
- "command": "npx",
30
- "args": ["-y", "@trello/mcp-server"],
31
- "env": {
32
- "TRELLO_API_KEY": "${TRELLO_API_KEY}",
33
- "TRELLO_TOKEN": "${TRELLO_TOKEN}"
34
- }
35
- }
36
- }
37
- }
38
- ```
39
-
40
- ## Sample Config — GitHub
41
-
42
- ```json
43
- {
44
- "mcpServers": {
45
- "github": {
46
- "command": "npx",
47
- "args": ["-y", "@modelcontextprotocol/server-github"],
48
- "env": {
49
- "GITHUB_TOKEN": "${GITHUB_TOKEN}"
50
- }
51
- }
52
- }
53
- }
54
- ```
55
-
56
- ## Sample Config — Azure
57
-
58
- ```json
59
- {
60
- "mcpServers": {
61
- "azure": {
62
- "command": "npx",
63
- "args": ["-y", "@azure/mcp-server"],
64
- "env": {
65
- "AZURE_SUBSCRIPTION_ID": "${AZURE_SUBSCRIPTION_ID}",
66
- "AZURE_CLIENT_ID": "${AZURE_CLIENT_ID}",
67
- "AZURE_CLIENT_SECRET": "${AZURE_CLIENT_SECRET}",
68
- "AZURE_TENANT_ID": "${AZURE_TENANT_ID}"
69
- }
70
- }
71
- }
72
- }
73
- ```
74
-
75
- ## Sample Config — Aspire
76
-
77
- ```json
78
- {
79
- "mcpServers": {
80
- "aspire": {
81
- "command": "npx",
82
- "args": ["-y", "@aspire/mcp-server"],
83
- "env": {
84
- "ASPIRE_DASHBOARD_URL": "${ASPIRE_DASHBOARD_URL}"
85
- }
86
- }
87
- }
88
- }
89
- ```
90
-
91
- ## Authentication Notes
92
-
93
- - **GitHub MCP requires a separate token** from the `gh` CLI auth. Generate at https://github.com/settings/tokens
94
- - **Trello requires API key + token** from https://trello.com/power-ups/admin
95
- - **Azure requires service principal credentials** — see Azure docs for setup
96
- - **Aspire uses the dashboard URL** — typically `http://localhost:18888` during local dev
97
-
98
- Auth is a real blocker for some MCP servers. Users need separate tokens for GitHub MCP, Azure MCP, Trello MCP, etc. This is a documentation problem, not a code problem.
1
+ # MCP Integration — Configuration and Samples
2
+
3
+ MCP (Model Context Protocol) servers extend Squad with tools for external services — Trello, Aspire dashboards, Azure, Notion, and more. The user configures MCP servers in their environment; Squad discovers and uses them.
4
+
5
+ > **Full patterns:** Read `.squad/skills/mcp-tool-discovery/SKILL.md` for discovery patterns, domain-specific usage, and graceful degradation.
6
+
7
+ ## Security Considerations
8
+
9
+ > ⚠️ **Important:** The sample configs below use `npx -y` to run MCP server packages without version pinning. For production use:
10
+ > - **Pin versions:** Use `npx -y @trello/mcp-server@1.2.3` instead of bare package names
11
+ > - **Audit packages:** Review MCP server source code before granting access to credentials
12
+ > - **Use least-privilege tokens:** Create tokens with minimal required scopes
13
+ > - **Consider local installs:** Install packages locally (`npm install`) rather than fetching on each run
14
+
15
+ ## Config File Locations
16
+
17
+ Users configure MCP servers at these locations (checked in priority order):
18
+ 1. **Repository-level:** `.copilot/mcp-config.json` (team-shared, committed to repo)
19
+ 2. **Workspace-level:** `.vscode/mcp.json` (VS Code workspaces)
20
+ 3. **User-level:** `~/.copilot/mcp-config.json` (personal)
21
+ 4. **CLI override:** `--additional-mcp-config` flag (session-specific)
22
+
23
+ ## Sample Config — Trello
24
+
25
+ ```json
26
+ {
27
+ "mcpServers": {
28
+ "trello": {
29
+ "command": "npx",
30
+ "args": ["-y", "@trello/mcp-server"],
31
+ "env": {
32
+ "TRELLO_API_KEY": "${TRELLO_API_KEY}",
33
+ "TRELLO_TOKEN": "${TRELLO_TOKEN}"
34
+ }
35
+ }
36
+ }
37
+ }
38
+ ```
39
+
40
+ ## Sample Config — GitHub
41
+
42
+ ```json
43
+ {
44
+ "mcpServers": {
45
+ "github": {
46
+ "command": "npx",
47
+ "args": ["-y", "@modelcontextprotocol/server-github"],
48
+ "env": {
49
+ "GITHUB_TOKEN": "${GITHUB_TOKEN}"
50
+ }
51
+ }
52
+ }
53
+ }
54
+ ```
55
+
56
+ ## Sample Config — Azure
57
+
58
+ ```json
59
+ {
60
+ "mcpServers": {
61
+ "azure": {
62
+ "command": "npx",
63
+ "args": ["-y", "@azure/mcp-server"],
64
+ "env": {
65
+ "AZURE_SUBSCRIPTION_ID": "${AZURE_SUBSCRIPTION_ID}",
66
+ "AZURE_CLIENT_ID": "${AZURE_CLIENT_ID}",
67
+ "AZURE_CLIENT_SECRET": "${AZURE_CLIENT_SECRET}",
68
+ "AZURE_TENANT_ID": "${AZURE_TENANT_ID}"
69
+ }
70
+ }
71
+ }
72
+ }
73
+ ```
74
+
75
+ ## Sample Config — Aspire
76
+
77
+ ```json
78
+ {
79
+ "mcpServers": {
80
+ "aspire": {
81
+ "command": "npx",
82
+ "args": ["-y", "@aspire/mcp-server"],
83
+ "env": {
84
+ "ASPIRE_DASHBOARD_URL": "${ASPIRE_DASHBOARD_URL}"
85
+ }
86
+ }
87
+ }
88
+ }
89
+ ```
90
+
91
+ ## Authentication Notes
92
+
93
+ - **GitHub MCP requires a separate token** from the `gh` CLI auth. Generate at https://github.com/settings/tokens
94
+ - **Trello requires API key + token** from https://trello.com/power-ups/admin
95
+ - **Azure requires service principal credentials** — see Azure docs for setup
96
+ - **Aspire uses the dashboard URL** — typically `http://localhost:18888` during local dev
97
+
98
+ Auth is a real blocker for some MCP servers. Users need separate tokens for GitHub MCP, Azure MCP, Trello MCP, etc. This is a documentation problem, not a code problem.