squad-station 0.7.1 → 0.7.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -2,6 +2,21 @@
2
2
 
3
3
  All notable changes to Squad Station are documented in this file.
4
4
 
5
+ ## v0.7.2 — npm Installer Hardening (2026-03-24)
6
+
7
+ Fixes npm installer issues that prevented clean upgrades and macOS Gatekeeper blocks on downloaded binaries.
8
+
9
+ ### Fixed
10
+
11
+ - **Binary upgrade removes stale symlinks** — `npx squad-station install` now unlinks the old binary before downloading when a version mismatch is detected. Fixes upgrade failures when `~/.cargo/bin/squad-station` is a symlink from `cargo install`.
12
+ - **macOS Gatekeeper bypass** — Strips `com.apple.quarantine` and `com.apple.provenance` xattr after downloading the binary, preventing "cannot be opened because Apple cannot check it for malicious software" errors.
13
+
14
+ ### Added
15
+
16
+ - **Rules scaffolding in npm installer** — `npx squad-station install` now copies `.squad/rules/` git workflow templates alongside existing sdd/ and examples/ scaffolding.
17
+
18
+ ---
19
+
5
20
  ## v0.7.0 — SDD Git Workflow Rules (2026-03-24)
6
21
 
7
22
  Auto-install SDD git workflow rules during squad initialization, plus three watchdog reliability fixes.
package/bin/run.js CHANGED
@@ -43,7 +43,7 @@ function install() {
43
43
 
44
44
  function installBinary() {
45
45
  // Binary version — may differ from npm package version
46
- var VERSION = '0.7.0';
46
+ var VERSION = '0.7.2';
47
47
  var REPO = 'thientranhung/squad-station';
48
48
 
49
49
  var isWindows = process.platform === 'win32';
@@ -78,6 +78,8 @@ function installBinary() {
78
78
  } catch (_) {
79
79
  // Can't check version, re-download
80
80
  }
81
+ // Version mismatch — remove old binary (may be symlink from cargo install)
82
+ try { fs.unlinkSync(destPath); } catch (_) {}
81
83
  }
82
84
 
83
85
  console.log(' Downloading ' + assetName + ' v' + VERSION + '...');
@@ -104,6 +106,11 @@ function installBinary() {
104
106
 
105
107
  if (!isWindows) {
106
108
  fs.chmodSync(destPath, 0o755);
109
+ // macOS Gatekeeper: strip quarantine flag so unsigned binary is not killed
110
+ if (process.platform === 'darwin') {
111
+ spawnSync('xattr', ['-d', 'com.apple.quarantine', destPath], { stdio: 'ignore' });
112
+ spawnSync('xattr', ['-d', 'com.apple.provenance', destPath], { stdio: 'ignore' });
113
+ }
107
114
  }
108
115
  console.log(' \x1b[32m✓\x1b[0m Installed squad-station to ' + destPath);
109
116
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "squad-station",
3
- "version": "0.7.1",
3
+ "version": "0.7.2",
4
4
  "description": "Message routing and orchestration for AI agent squads",
5
5
  "repository": {
6
6
  "type": "git",