squad-kit 0.7.0 → 0.7.2

package/CHANGELOG.md

@@ -7,6 +7,29 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.7.2] — 2026-04-28
+
+### Bug fixes
+
+- The console sidebar and dashboard still reported `v0.6.0` after 0.7.1
+  because `/api/meta` and `/api/dashboard` had the version hardcoded.
+  Both now read from `package.json` (matching the CLI and `/healthz`
+  fix in 0.7.1).
+- `squad config set tracker --type github` was a no-op stub: it set
+  `tracker.type = github` without prompting for owner/repo or PAT and
+  skipped the connectivity probe. It now matches the Jira and Azure
+  flows — interactive credential prompt, secrets written to
+  `.squad/secrets.yaml`, post-config GitHub probe, and an updated
+  next-steps hint with `--id <github-issue-number>`.
+
+## [0.7.1] — 2026-04-28
+
+### Bug fixes
+
+- `squad --version` printed `0.6.0` on 0.7.0 — the version string was
+  hardcoded in the CLI and the console `/healthz` endpoint. Both now
+  read from `package.json` and stay in sync with the installed package.
+
 ## [0.7.0] — 2026-04-28
 
 ### What's new

package/dist/cli.js

@@ -926,6 +926,27 @@ async function promptAzureCredentials(defaults = {}) {
   });
   return { organization: organization.trim(), project: project.trim(), pat };
 }
+async function promptGitHubCredentials(defaults = {}) {
+  const owner = await input({
+    message: "GitHub repo owner (user or org, e.g. octocat):",
+    default: defaults.owner ?? "",
+    validate: notEmpty
+  });
+  const repo = await input({
+    message: "GitHub repo name (e.g. hello-world):",
+    default: defaults.repo ?? "",
+    validate: notEmpty
+  });
+  const host = await input({
+    message: "GitHub host (leave blank for github.com; for GHES use ghes.example.com):",
+    default: defaults.host ?? ""
+  });
+  const pat = await password({
+    message: 'Personal Access Token (needs "repo" scope, or fine-grained "Issues: read"; input hidden):',
+    validate: (v) => v.length >= 20 ? true : "PAT seems too short"
+  });
+  return { owner: owner.trim(), repo: repo.trim(), host: host.trim(), pat };
+}
 function newPlannerBlock(provider) {
   return {
     enabled: true,
@@ -1808,6 +1829,11 @@ function azureError() {
     `Azure DevOps configuration is incomplete. Set AZURE_DEVOPS_ORG, AZURE_DEVOPS_PROJECT, AZURE_DEVOPS_PAT (or run \`squad config set tracker\` without --yes to enter credentials interactively).`
   );
 }
+function githubError() {
+  return new Error(
+    `GitHub configuration is incomplete. Set tracker.workspace (owner) and tracker.project (repo) in .squad/config.yaml plus GITHUB_TOKEN (or run \`squad config set tracker\` without --yes to enter credentials interactively).`
+  );
+}
 async function runConfigSetTracker(opts = {}) {
   const root = requireSquadRoot();
   const paths = buildPaths(root);
@@ -1836,7 +1862,36 @@ async function runConfigSetTracker(opts = {}) {
   if (type === "none") {
     nextTracker = { type: "none" };
   } else if (type === "github") {
-    nextTracker = { ...config2.tracker, type };
+    if (interactive) {
+      step("GitHub credentials (stored in .squad/secrets.yaml \u2014 always git-ignored)");
+      const g = await promptGitHubCredentials({
+        owner: config2.tracker.type === "github" ? config2.tracker.workspace : void 0,
+        repo: config2.tracker.type === "github" ? config2.tracker.project : void 0,
+        host: baseSecrets.tracker?.github?.host
+      });
+      const merged = mergeSecrets(baseSecrets, {
+        tracker: { github: { host: g.host, pat: g.pat } }
+      });
+      saveSecrets(paths.secretsFile, merged);
+      nextTracker = { type: "github", workspace: g.owner, project: g.repo };
+      success("GitHub credentials saved");
+      info(".squad/secrets.yaml updated (chmod 0600 on POSIX)");
+    } else {
+      const o = overlayTrackerEnv(baseSecrets);
+      const owner = (config2.tracker.workspace ?? "").trim();
+      const repo = (config2.tracker.project ?? "").trim();
+      if (!owner || !repo) {
+        throw githubError();
+      }
+      const candidate = {
+        ...config2,
+        tracker: { type: "github", workspace: owner, project: repo }
+      };
+      if (clientFor(candidate, o).error) {
+        throw githubError();
+      }
+      nextTracker = { type: "github", workspace: owner, project: repo };
+    }
   } else if (type === "jira") {
     if (interactive) {
       step("Jira Cloud credentials (stored in .squad/secrets.yaml \u2014 always git-ignored)");
@@ -1925,6 +1980,15 @@ async function runConfigSetTracker(opts = {}) {
         r.status !== void 0 ? `Azure DevOps connectivity check: HTTP ${r.status}` : `Azure DevOps connectivity check failed: ${r.detail ?? "unknown"}`
       );
     }
+  } else if (reloaded.tracker.type === "github") {
+    const r = await probeGitHubConnectivity(s, reloaded);
+    if (r.ok) {
+      info("GitHub connectivity check: OK");
+    } else {
+      warning(
+        r.status !== void 0 ? `GitHub connectivity check: HTTP ${r.status}` : `GitHub connectivity check failed: ${r.detail ?? "unknown"}`
+      );
+    }
   }
   printTrackerNextSteps(next.tracker.type);
 }
@@ -1937,7 +2001,8 @@ function printTrackerNextSteps(type) {
     return;
   }
   info("1) Verify with `squad doctor` \u2014 tracker checks should be green.");
-  info(`2) Create a story: squad new-story <feature-slug> --id <${type === "jira" ? "JIRA-123" : "azure-work-item-id"}>`);
+  const idHint = type === "jira" ? "JIRA-123" : type === "github" ? "github-issue-number" : "azure-work-item-id";
+  info(`2) Create a story: squad new-story <feature-slug> --id <${idHint}>`);
   info("   squad-kit auto-fetches the title, description, and attachments into the intake.");
   info("3) Review the generated intake.md, then run `squad new-plan --api` to generate the plan.");
 }
@@ -6390,7 +6455,7 @@ function mountMetaApi(app, opts) {
     const config2 = loadConfig(opts.paths.configFile);
     const lastRun = await readLastRun(opts.paths);
     return c.json({
-      version: "0.6.0",
+      version: readInstalledPackage().version,
       root: opts.paths.root,
       project: config2.project,
       planner: config2.planner ? { provider: config2.planner.provider, enabled: config2.planner.enabled } : null,
@@ -6839,7 +6904,7 @@ function mountDashboardApi(app, opts) {
     const runs = await listRuns(opts.paths);
     const stories = listStories(opts.paths);
     return c.json({
-      version: "0.6.0",
+      version: readInstalledPackage().version,
       root: opts.paths.root,
       project: cfg.project,
       planner: cfg.planner ? { provider: cfg.planner.provider, enabled: cfg.planner.enabled } : null,
@@ -7049,7 +7114,7 @@ async function startConsoleServer(opts) {
   app.get(
     "/healthz",
     (c) => c.json(
-      { ok: true, version: "0.6.0", port: bindPort },
+      { ok: true, version: readInstalledPackage().version, port: bindPort },
       200,
       {
         "cache-control": "no-store"
@@ -7458,7 +7523,7 @@ async function runRmPlan(planPathOrSequence, opts = {}) {
 
 // src/cli.ts
 var program = new Command();
-program.name("squad").description("Plan once, execute cheap. A 3-step SDD workflow CLI.").version("0.6.0");
+program.name("squad").description("Plan once, execute cheap. A 3-step SDD workflow CLI.").version(readInstalledPackage().version);
 program.command("init").description("Bootstrap .squad/ in the current directory").option("--agents <list>", "Comma-separated agent list: claude-code,cursor,copilot,gemini").option("--tracker <type>", "Tracker type: none|github|jira|azure").option(
   "--tracker-workspace <hostOrOrg>",
   "Jira host or Azure org (non-interactive default; also written to config for jira/azure)"