spur-board 0.6.1 → 0.7.1

package/dist/daemon.mjs

@@ -13250,7 +13250,7 @@ var GithubIssuesHttpError = class extends AdapterError {
 		this.status = status;
 	}
 };
-function object$2(value) {
+function object$3(value) {
 	if (value !== null && typeof value === "object" && !Array.isArray(value)) return value;
 	throw new AdapterError("transient", "Malformed GitHub issue response");
 }
@@ -13268,14 +13268,14 @@ function issueNumber(ref, repo) {
 	return number(Number(match[2]));
 }
 function normalize(value, trackerId, repo, inFilter) {
-	const issue = object$2(value);
+	const issue = object$3(value);
 	if (issue["pull_request"] !== void 0) throw new AdapterError("transient", "A pull request cannot be a tracker ticket");
 	const updatedAt = new Date(string$3(issue["updated_at"]));
 	if (Number.isNaN(updatedAt.getTime())) throw new AdapterError("transient", "Malformed GitHub issue timestamp");
 	const labels = issue["labels"];
 	if (!Array.isArray(labels)) throw new AdapterError("transient", "Malformed GitHub issue labels");
-	const assignee = issue["assignee"] == null ? null : string$3(object$2(issue["assignee"])["login"]);
-	const milestone = issue["milestone"] == null ? null : string$3(object$2(issue["milestone"])["title"]);
+	const assignee = issue["assignee"] == null ? null : string$3(object$3(issue["assignee"])["login"]);
+	const milestone = issue["milestone"] == null ? null : string$3(object$3(issue["milestone"])["title"]);
 	return {
 		trackerId,
 		id: string$3(issue["node_id"]),
@@ -13284,7 +13284,7 @@ function normalize(value, trackerId, repo, inFilter) {
 		status: string$3(issue["state"]),
 		assignee,
 		sprint: milestone,
-		labels: labels.map((label) => string$3(object$2(label)["name"])),
+		labels: labels.map((label) => string$3(object$3(label)["name"])),
 		inFilter,
 		url: string$3(issue["html_url"]),
 		updatedAt: updatedAt.toISOString()
@@ -13293,9 +13293,9 @@ function normalize(value, trackerId, repo, inFilter) {
 function matchesFilter(issue, tracker) {
 	if (tracker.label !== void 0) {
 		const labels = issue["labels"];
-		return Array.isArray(labels) && labels.some((label) => object$2(label)["name"] === tracker.label);
+		return Array.isArray(labels) && labels.some((label) => object$3(label)["name"] === tracker.label);
 	}
-	return issue["milestone"] != null && object$2(issue["milestone"])["title"] === tracker.milestone;
+	return issue["milestone"] != null && object$3(issue["milestone"])["title"] === tracker.milestone;
 }
 /** Lists tracker issues and resolves manually included keys outside the filter. */
 function createGithubIssuesAdapter(options) {
@@ -13383,7 +13383,7 @@ function createGithubIssuesAdapter(options) {
 			if (error instanceof GithubIssuesHttpError && error.status === 404) throw new AdapterError("config", "GitHub Issues repository is unavailable");
 			throw error;
 		}
-		const match = milestones.map(object$2).find((entry) => entry["title"] === options.tracker.milestone);
+		const match = milestones.map(object$3).find((entry) => entry["title"] === options.tracker.milestone);
 		if (match === void 0) throw new AdapterError("config", "Configured GitHub milestone is missing");
 		return number(match["number"]);
 	}
@@ -13411,7 +13411,7 @@ function createGithubIssuesAdapter(options) {
 			}
 			const facts = /* @__PURE__ */ new Map();
 			for (const value of listed) {
-				const issue = object$2(value);
+				const issue = object$3(value);
 				if (issue["pull_request"] !== void 0) continue;
 				const fact = normalize(issue, options.id, options.tracker.repo, true);
 				facts.set(number(issue["number"]), fact);
@@ -13422,7 +13422,7 @@ function createGithubIssuesAdapter(options) {
 				const issueNo = issueNumber(ref, options.tracker.repo);
 				let fact = facts.get(issueNo);
 				if (fact === void 0) try {
-					const detail = object$2((await request(`${root}/issues/${String(issueNo)}`, ctx.signal)).value);
+					const detail = object$3((await request(`${root}/issues/${String(issueNo)}`, ctx.signal)).value);
 					if (detail["pull_request"] !== void 0) {
 						entities.push({
 							ref,
@@ -13483,7 +13483,7 @@ var JiraHttpError = class extends AdapterError {
 		this.status = status;
 	}
 };
-function object$1(value) {
+function object$2(value) {
 	if (value !== null && typeof value === "object" && !Array.isArray(value)) return value;
 	throw new AdapterError("transient", "Invalid Jira response");
 }
@@ -13543,10 +13543,10 @@ function sprintName(value) {
 	return null;
 }
 function issueFacts(value, trackerId, baseUrl, sprintField, inFilter) {
-	const issue = object$1(value);
-	const fields = object$1(issue["fields"]);
-	const status = object$1(fields["status"]);
-	const assignee = fields["assignee"] == null ? null : object$1(fields["assignee"]);
+	const issue = object$2(value);
+	const fields = object$2(issue["fields"]);
+	const status = object$2(fields["status"]);
+	const assignee = fields["assignee"] == null ? null : object$2(fields["assignee"]);
 	const key = string$2(issue["key"]);
 	const updated = string$2(fields["updated"]);
 	const updatedAt = new Date(updated);
@@ -13608,14 +13608,14 @@ function createJiraAdapter(options) {
 				if (error instanceof JiraHttpError && error.status === 404) throw new AdapterError("config", `Unknown Jira project key ${key}`);
 				throw error;
 			}
-			const names = new Set(array(result).flatMap((entry) => array(object$1(entry)["statuses"]).map((status) => string$2(object$1(status)["name"]))));
+			const names = new Set(array(result).flatMap((entry) => array(object$2(entry)["statuses"]).map((status) => string$2(object$2(status)["name"]))));
 			for (const name of [...tracker.doneStatuses, ...tracker.readyStatuses]) if (!names.has(name)) throw new AdapterError("config", `Unknown Jira status ${name} in project ${key}`);
 		}
 	}
 	async function findSprintField(tracker, signal) {
 		const fields = array(await request(tracker.baseUrl, "/rest/api/3/field", signal));
 		for (const field of fields) {
-			const entry = object$1(field);
+			const entry = object$2(field);
 			const schema = entry["schema"];
 			if (schema !== null && typeof schema === "object" && !Array.isArray(schema)) {
 				if (schema["custom"] === SPRINT_SCHEMA) return string$2(entry["id"]);
@@ -13650,7 +13650,7 @@ function createJiraAdapter(options) {
 				...token === void 0 ? {} : { nextPageToken: token }
 			}).toString()}` : "/rest/api/3/search/jql";
 			if (options.searchMethod === "GET" && new URL(path, tracker.baseUrl).href.length > MAX_GET_SEARCH_URL_LENGTH) throw new AdapterError("config", `Jira GET search URL is too long (over ${String(MAX_GET_SEARCH_URL_LENGTH)} characters)`);
-			const result = object$1(await request(tracker.baseUrl, path, signal, options.searchMethod === "GET" ? void 0 : body));
+			const result = object$2(await request(tracker.baseUrl, path, signal, options.searchMethod === "GET" ? void 0 : body));
 			issues.push(...array(result["issues"]));
 			const next = result["nextPageToken"];
 			if (next == null || next === "") {
@@ -13672,7 +13672,7 @@ function createJiraAdapter(options) {
 	async function fetchById(tracker, ref, signal, beforeRequest) {
 		try {
 			beforeRequest();
-			const issue = object$1(await request(tracker.baseUrl, `/rest/api/3/issue/${encodeURIComponent(ref.id)}`, signal));
+			const issue = object$2(await request(tracker.baseUrl, `/rest/api/3/issue/${encodeURIComponent(ref.id)}`, signal));
 			if (string$2(issue["id"]) !== ref.id) throw new AdapterError("transient", "Jira returned a different ticket id");
 			return issue;
 		} catch (error) {
@@ -13698,7 +13698,7 @@ function createJiraAdapter(options) {
 	}
 	async function fetchPending(tracker, ref, signal) {
 		try {
-			const issue = object$1(await request(tracker.baseUrl, `/rest/api/3/issue/${encodeURIComponent(ref.key)}`, signal));
+			const issue = object$2(await request(tracker.baseUrl, `/rest/api/3/issue/${encodeURIComponent(ref.key)}`, signal));
 			if (string$2(issue["key"]) !== ref.key) throw new AdapterError("transient", "Jira returned a different ticket key");
 			return {
 				status: "ok",
@@ -15254,7 +15254,7 @@ async function* recoverThreads(client, request, botIdentity) {
 }
 //#endregion
 //#region ../gateway-slack/src/socket.ts
-function object(value) {
+function object$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
 }
 function value(value) {
@@ -15287,11 +15287,11 @@ function createSocket(api, config, botIdentity) {
 	async function handle(envelope) {
 		if (stopping || sink === void 0) return;
 		const type = value(envelope.type);
-		const body = object(envelope.body);
+		const body = object$1(envelope.body);
 		if (type === void 0 || body === null) return;
 		let events = [];
 		if (type === "events_api") {
-			const event = object(body.event);
+			const event = object$1(body.event);
 			const eventType = value(event?.type);
 			const channel = value(event?.channel);
 			if (event !== null && channel !== void 0 && (eventType === "message" || eventType === "app_mention")) {
@@ -15300,8 +15300,8 @@ function createSocket(api, config, botIdentity) {
 					...event,
 					type: "message"
 				} : event;
-				const nested = object(message.message);
-				const previous = object(message.previous_message);
+				const nested = object$1(message.message);
+				const previous = object$1(message.previous_message);
 				const threadTs = value(message.thread_ts) ?? value(nested?.thread_ts) ?? value(previous?.thread_ts);
 				const messageTs = value(message.ts) ?? value(nested?.ts);
 				const deletedRoot = message.subtype === "message_deleted" && threadTs === value(message.deleted_ts);
@@ -15312,8 +15312,8 @@ function createSocket(api, config, botIdentity) {
 				});
 			}
 		} else if (type === "interactive" || type === "block_actions") {
-			const actionMessage = object(body.message);
-			const channel = value(object(body.channel)?.id);
+			const actionMessage = object$1(body.message);
+			const channel = value(object$1(body.channel)?.id);
 			const ts = value(actionMessage?.ts);
 			const threadTs = value(actionMessage?.thread_ts) ?? ts;
 			const root = channel !== void 0 && threadTs !== void 0 && threadTs !== ts ? await rootFor(api, channel, threadTs) : actionMessage;
@@ -15509,6 +15509,86 @@ function createBoardModules(ctxFor, options = {}) {
 //#endregion
 //#region ../daemon/src/doctor.ts
 const TIMEOUT_MS = 5e3;
+const GITHUB_FIX = "Check the GitHub token and repository access.";
+const GITHUB_CHECKS_FIX = "Use a classic GitHub personal access token with the repo scope, authorized for organization SSO where required, to read check runs.";
+const GITHUB_TEAMS_FIX = "Use a classic GitHub personal access token with the repo and read:org scopes to read requested review teams.";
+const GITHUB_ORG_READ_SCOPES = /* @__PURE__ */ new Set([
+	"read:org",
+	"write:org",
+	"admin:org"
+]);
+const GITHUB_PROBE = `query DoctorGithubPermissions($owner: String!, $repo: String!) {
+  repository(owner: $owner, name: $repo) {
+    pullRequests(first: 10, states: [OPEN], orderBy: {field: UPDATED_AT, direction: DESC}) {
+      nodes {
+        statusCheckRollup { contexts(first: 100) { nodes { ... on CheckRun { name } } } }
+        reviewRequests(first: 100) { nodes { requestedReviewer { ... on Team { name } } } }
+      }
+    }
+    defaultBranchRef { target { ... on Commit {
+      statusCheckRollup { contexts(first: 100) { nodes { ... on CheckRun { name } } } }
+    } } }
+  }
+}`;
+function object(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function scopedGithubError(value) {
+	const error = object(value);
+	const path = error?.["path"];
+	if (!Array.isArray(path)) return null;
+	const fields = path.filter((part) => typeof part === "string");
+	if (error?.["type"] === "FORBIDDEN" && fields.includes("statusCheckRollup") && fields.includes("contexts")) return GITHUB_CHECKS_FIX;
+	if (error?.["type"] === "INSUFFICIENT_SCOPES" && fields.includes("reviewRequests") && fields.includes("requestedReviewer") && fields.includes("name")) return GITHUB_TEAMS_FIX;
+	return null;
+}
+async function githubGraphql(ctx, fetcher, token, repo) {
+	const [owner, name] = repo.split("/");
+	if (!owner || !name) return null;
+	const controller = new AbortController();
+	const deadline = setTimeout(() => {
+		controller.abort();
+	}, TIMEOUT_MS);
+	const aborted = new Promise((_resolve, reject) => {
+		controller.signal.addEventListener("abort", () => {
+			reject(/* @__PURE__ */ new Error("GitHub doctor probe timed out"));
+		}, { once: true });
+	});
+	try {
+		return await ctx.logCall("doctor.github", async () => {
+			try {
+				return await Promise.race([(async () => {
+					const response = await fetcher("https://api.github.com/graphql", {
+						method: "POST",
+						headers: {
+							Authorization: `Bearer ${token}`,
+							Accept: "application/vnd.github+json",
+							"Content-Type": "application/json"
+						},
+						body: JSON.stringify({
+							query: GITHUB_PROBE,
+							variables: {
+								owner,
+								repo: name
+							}
+						}),
+						signal: controller.signal
+					});
+					return {
+						response,
+						body: response.ok ? await response.json() : null
+					};
+				})(), aborted]);
+			} catch {
+				throw new Error("GitHub doctor probe failed");
+			}
+		});
+	} catch {
+		return null;
+	} finally {
+		clearTimeout(deadline);
+	}
+}
 function check(id, ok, fix) {
 	return {
 		id,
@@ -15578,13 +15658,29 @@ async function runDaemonDoctor(ctx, productVersion, fetcher = fetch) {
 	checks.push(check("jira.credentials", jiraOk, "Check the Jira account, API token, and project access."));
 	const githubToken = secrets["GITHUB_TOKEN"];
 	const githubRepos = new Set(config.projects.flatMap((project) => project.repos));
-	const githubOk = githubToken !== void 0 && (await Promise.all([...githubRepos].map(async (repo) => {
-		return (await request(ctx, fetcher, "github", `https://api.github.com/repos/${repo}`, { headers: {
+	const githubFailure = (githubToken === void 0 ? [GITHUB_FIX] : await Promise.all([...githubRepos].map(async (repo) => {
+		const response = await request(ctx, fetcher, "github", `https://api.github.com/repos/${repo}`, { headers: {
 			Authorization: `Bearer ${githubToken}`,
 			Accept: "application/vnd.github+json"
-		} }))?.ok === true;
-	}))).every(Boolean);
-	checks.push(check("github.credentials", githubOk, "Check the GitHub token and repository access."));
+		} });
+		if (response?.ok !== true) return GITHUB_FIX;
+		const probe = await githubGraphql(ctx, fetcher, githubToken, repo);
+		if (probe?.response.ok !== true) return GITHUB_FIX;
+		const payload = object(probe.body);
+		const errors = payload?.["errors"];
+		if (errors !== void 0) {
+			if (!Array.isArray(errors)) return GITHUB_FIX;
+			const scoped = errors.map(scopedGithubError).find((fix) => fix !== null);
+			if (scoped) return scoped;
+			if (errors.length > 0) return GITHUB_FIX;
+		}
+		const pullRequests = object(object(object(payload?.["data"])?.["repository"])?.["pullRequests"]);
+		if (!Array.isArray(pullRequests?.["nodes"])) return GITHUB_FIX;
+		const scopes = response.headers.get("x-oauth-scopes");
+		if (scopes !== null && !scopes.split(",").some((scope) => GITHUB_ORG_READ_SCOPES.has(scope.trim()))) return GITHUB_TEAMS_FIX;
+		return null;
+	}))).find((failure) => failure !== null) ?? null;
+	checks.push(check("github.credentials", githubFailure === null, githubFailure ?? GITHUB_FIX));
 	const spur = await request(ctx, fetcher, "spur", new URL("sessions", `${config.adapters.spur.baseUrl.replace(/\/$/, "")}/`));
 	checks.push(check("spur.api", spur?.ok === true, "Start or correct the configured Spur API."));
 	if (!slackConfigured) checks.push(warning("slack.configured", "Slack is not configured: questions addressed to you are only visible through board inbox. Run the spur-board-setup skill to configure slack.channels."));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spur-board",
-  "version": "0.6.1",
+  "version": "0.7.1",
   "license": "MIT",
   "engines": {
     "node": "^24.12.0 || ^26.0.0"