squad-kit 0.7.1 → 0.8.0

package/CHANGELOG.md

@@ -7,6 +7,39 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.8.0] — 2026-05-03
+
+### What's new
+
+- Generate page shows provider rate limits: countdown, auto-retry banner,
+  and rerun when the planner aborts over the wait cap.
+- Planner emits richer `rate_limit` stream events (`retrying` vs `aborted`,
+  cap seconds, provider, short error snippet). CLI `new-plan` only shows the
+  “waiting to retry” spinner for the retrying phase.
+- Run SSE ends a rate-limit abort with `done` (partial) only — no extra
+  `error` line repeating the same message.
+
+### Bug fixes
+
+- Jira issue search called deprecated `/rest/api/3/search` (Atlassian returns
+  HTTP 410). Search now uses `/rest/api/3/search/jql` with clearer 410 errors
+  if an old client hits removed endpoints.
+
+## [0.7.2] — 2026-04-28
+
+### Bug fixes
+
+- The console sidebar and dashboard still reported `v0.6.0` after 0.7.1
+  because `/api/meta` and `/api/dashboard` had the version hardcoded.
+  Both now read from `package.json` (matching the CLI and `/healthz`
+  fix in 0.7.1).
+- `squad config set tracker --type github` was a no-op stub: it set
+  `tracker.type = github` without prompting for owner/repo or PAT and
+  skipped the connectivity probe. It now matches the Jira and Azure
+  flows — interactive credential prompt, secrets written to
+  `.squad/secrets.yaml`, post-config GitHub probe, and an updated
+  next-steps hint with `--id <github-issue-number>`.
+
 ## [0.7.1] — 2026-04-28
 
 ### Bug fixes

package/dist/cli.js

@@ -926,6 +926,27 @@ async function promptAzureCredentials(defaults = {}) {
   });
   return { organization: organization.trim(), project: project.trim(), pat };
 }
+async function promptGitHubCredentials(defaults = {}) {
+  const owner = await input({
+    message: "GitHub repo owner (user or org, e.g. octocat):",
+    default: defaults.owner ?? "",
+    validate: notEmpty
+  });
+  const repo = await input({
+    message: "GitHub repo name (e.g. hello-world):",
+    default: defaults.repo ?? "",
+    validate: notEmpty
+  });
+  const host = await input({
+    message: "GitHub host (leave blank for github.com; for GHES use ghes.example.com):",
+    default: defaults.host ?? ""
+  });
+  const pat = await password({
+    message: 'Personal Access Token (needs "repo" scope, or fine-grained "Issues: read"; input hidden):',
+    validate: (v) => v.length >= 20 ? true : "PAT seems too short"
+  });
+  return { owner: owner.trim(), repo: repo.trim(), host: host.trim(), pat };
+}
 function newPlannerBlock(provider) {
   return {
     enabled: true,
@@ -1664,7 +1685,7 @@ var JiraClient = class {
       const esc = q.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
       jql = `text ~ "${esc}" order by updated DESC`;
     }
-    const url = `${this.baseUrl}/rest/api/3/search?jql=${encodeURIComponent(jql)}&fields=summary,status,issuetype&maxResults=${limit}`;
+    const url = `${this.baseUrl}/rest/api/3/search/jql?jql=${encodeURIComponent(jql)}&fields=summary,status,issuetype&maxResults=${limit}`;
     let res;
     try {
       res = await fetch(url, { headers: this.headers() });
@@ -1713,6 +1734,13 @@ var JiraClient = class {
     if (status === 429) {
       return new TrackerError(`Jira rate limit hit (HTTP 429). Wait a minute and retry.`, "rate-limited", status);
     }
+    if (status === 410) {
+      return new TrackerError(
+        id === "search" ? `Jira search endpoint has been removed by Atlassian (HTTP 410). squad-kit must call /rest/api/3/search/jql instead \u2014 upgrade squad-kit to a version that includes this fix.` : `Jira endpoint has been removed by Atlassian (HTTP 410). Upgrade squad-kit to a version that calls the current Jira Cloud REST API.`,
+        "other",
+        status
+      );
+    }
     return new TrackerError(
       id === "search" ? `Jira search failed (HTTP ${status}).` : `Jira request failed (HTTP ${status}).`,
       "other",
@@ -1808,6 +1836,11 @@ function azureError() {
     `Azure DevOps configuration is incomplete. Set AZURE_DEVOPS_ORG, AZURE_DEVOPS_PROJECT, AZURE_DEVOPS_PAT (or run \`squad config set tracker\` without --yes to enter credentials interactively).`
   );
 }
+function githubError() {
+  return new Error(
+    `GitHub configuration is incomplete. Set tracker.workspace (owner) and tracker.project (repo) in .squad/config.yaml plus GITHUB_TOKEN (or run \`squad config set tracker\` without --yes to enter credentials interactively).`
+  );
+}
 async function runConfigSetTracker(opts = {}) {
   const root = requireSquadRoot();
   const paths = buildPaths(root);
@@ -1836,7 +1869,36 @@ async function runConfigSetTracker(opts = {}) {
   if (type === "none") {
     nextTracker = { type: "none" };
   } else if (type === "github") {
-    nextTracker = { ...config2.tracker, type };
+    if (interactive) {
+      step("GitHub credentials (stored in .squad/secrets.yaml \u2014 always git-ignored)");
+      const g = await promptGitHubCredentials({
+        owner: config2.tracker.type === "github" ? config2.tracker.workspace : void 0,
+        repo: config2.tracker.type === "github" ? config2.tracker.project : void 0,
+        host: baseSecrets.tracker?.github?.host
+      });
+      const merged = mergeSecrets(baseSecrets, {
+        tracker: { github: { host: g.host, pat: g.pat } }
+      });
+      saveSecrets(paths.secretsFile, merged);
+      nextTracker = { type: "github", workspace: g.owner, project: g.repo };
+      success("GitHub credentials saved");
+      info(".squad/secrets.yaml updated (chmod 0600 on POSIX)");
+    } else {
+      const o = overlayTrackerEnv(baseSecrets);
+      const owner = (config2.tracker.workspace ?? "").trim();
+      const repo = (config2.tracker.project ?? "").trim();
+      if (!owner || !repo) {
+        throw githubError();
+      }
+      const candidate = {
+        ...config2,
+        tracker: { type: "github", workspace: owner, project: repo }
+      };
+      if (clientFor(candidate, o).error) {
+        throw githubError();
+      }
+      nextTracker = { type: "github", workspace: owner, project: repo };
+    }
   } else if (type === "jira") {
     if (interactive) {
       step("Jira Cloud credentials (stored in .squad/secrets.yaml \u2014 always git-ignored)");
@@ -1925,6 +1987,15 @@ async function runConfigSetTracker(opts = {}) {
         r.status !== void 0 ? `Azure DevOps connectivity check: HTTP ${r.status}` : `Azure DevOps connectivity check failed: ${r.detail ?? "unknown"}`
       );
     }
+  } else if (reloaded.tracker.type === "github") {
+    const r = await probeGitHubConnectivity(s, reloaded);
+    if (r.ok) {
+      info("GitHub connectivity check: OK");
+    } else {
+      warning(
+        r.status !== void 0 ? `GitHub connectivity check: HTTP ${r.status}` : `GitHub connectivity check failed: ${r.detail ?? "unknown"}`
+      );
+    }
   }
   printTrackerNextSteps(next.tracker.type);
 }
@@ -1937,7 +2008,8 @@ function printTrackerNextSteps(type) {
     return;
   }
   info("1) Verify with `squad doctor` \u2014 tracker checks should be green.");
-  info(`2) Create a story: squad new-story <feature-slug> --id <${type === "jira" ? "JIRA-123" : "azure-work-item-id"}>`);
+  const idHint = type === "jira" ? "JIRA-123" : type === "github" ? "github-issue-number" : "azure-work-item-id";
+  info(`2) Create a story: squad new-story <feature-slug> --id <${idHint}>`);
   info("   squad-kit auto-fetches the title, description, and attachments into the intake.");
   info("3) Review the generated intake.md, then run `squad new-plan --api` to generate the plan.");
 }
@@ -4038,12 +4110,26 @@ async function runPlanner(input5) {
     let retrySkippedReason;
     if (response.stopReason === "error" && response.errorKind === "rate_limit") {
       const asked = response.retryAfterSec;
+      const emitRateLimit = (phase, waitSec) => {
+        bus.emit({
+          kind: "rate_limit",
+          runId,
+          turn: iterations,
+          retryAfterSec: response.retryAfterSec,
+          waitSec,
+          capSec: MAX_RATE_LIMIT_RETRY_SEC,
+          phase,
+          provider: input5.provider.name,
+          rawBody: (response.rawError ?? "").slice(0, 200)
+        });
+      };
       if (asked !== void 0 && asked > MAX_RATE_LIMIT_RETRY_SEC) {
+        emitRateLimit("aborted", asked);
         retrySkippedReason = "retry_after_too_long";
       } else {
         const waitSec = Math.min(asked ?? 10, MAX_RATE_LIMIT_RETRY_SEC);
+        emitRateLimit("retrying", waitSec);
         input5.onRateLimit?.(waitSec);
-        bus.emit({ kind: "rate_limit", runId, turn: iterations, waitSec });
         try {
           await sleepWithAbort(waitSec * 1e3, sleepFn, input5.abort);
         } catch (e) {
@@ -4823,9 +4909,11 @@ async function emitViaApi(story, paths, config2, opts) {
         sessionSpinner.current = spinner("thinking\u2026");
         break;
       case "rate_limit":
-        sessionSpinner.current?.stop();
-        warning(`${planner.provider} rate limit hit \u2014 retrying in ${e.waitSec}s`);
-        sessionSpinner.current = spinner("waiting for rate limit to reset\u2026");
+        if (e.phase === "retrying") {
+          sessionSpinner.current?.stop();
+          warning(`${e.provider} rate limit hit \u2014 retrying in ${e.waitSec}s`);
+          sessionSpinner.current = spinner("waiting for rate limit to reset\u2026");
+        }
         break;
       case "usage":
         break;
@@ -6390,7 +6478,7 @@ function mountMetaApi(app, opts) {
     const config2 = loadConfig(opts.paths.configFile);
     const lastRun = await readLastRun(opts.paths);
     return c.json({
-      version: "0.6.0",
+      version: readInstalledPackage().version,
       root: opts.paths.root,
       project: config2.project,
       planner: config2.planner ? { provider: config2.planner.provider, enabled: config2.planner.enabled } : null,
@@ -6501,7 +6589,11 @@ function mountRunsApi(app, opts) {
         });
       } catch (err) {
         const durationMs = Date.now() - startedAt;
-        bus.emit({ kind: "error", runId, message: err.message });
+        const last = eventBuffer[eventBuffer.length - 1];
+        const isRateLimitAbort = last?.kind === "rate_limit" && last.phase === "aborted";
+        if (!isRateLimitAbort) {
+          bus.emit({ kind: "error", runId, message: err.message });
+        }
         bus.emit({
           kind: "done",
           runId,
@@ -6839,7 +6931,7 @@ function mountDashboardApi(app, opts) {
     const runs = await listRuns(opts.paths);
     const stories = listStories(opts.paths);
     return c.json({
-      version: "0.6.0",
+      version: readInstalledPackage().version,
       root: opts.paths.root,
       project: cfg.project,
       planner: cfg.planner ? { provider: cfg.planner.provider, enabled: cfg.planner.enabled } : null,