kid-sid/claude-spellbook/github-issues

# Create issue (interactive)
gh issue create
 
# Create issue with all fields
gh issue create \
  --title "feat: add rate limiting to /api/v1/export" \
  --body-file issue-body.md \
  --label "enhancement,api" \
  --assignee "@me" \
  --milestone "v2.1"
 
# Create from heredoc (no temp file needed)
gh issue create --title "fix: null pointer in PaymentService.charge" --body "$(cat <<'EOF'
## Description
...
EOF
)"
 
# List, filter, search
gh issue list --label "bug" --state open --assignee "@me"
gh issue list --search "is:open label:regression sort:created-desc"
 
# View and edit
gh issue view 42
gh issue edit 42 --add-label "priority:high" --remove-label "needs-triage"
 
# Close with comment
gh issue close 42 --comment "Fixed in #87. Verified in staging."
 
# Reopen
gh issue reopen 42 --comment "Regression in v2.3 — reopening."
 
# Pin critical issues
gh issue pin 42
 
# Create in another repo
gh issue create --repo org/other-repo --title "..." --body "..."
 
# Bulk label
gh issue list --label "needs-triage" --json number --jq '.[].number' | \
  xargs -I{} gh issue edit {} --add-label "bug" --remove-label "needs-triage"

## Description
One sentence: what breaks, under what conditions.
 
## Steps to Reproduce
1.Go to `/settings/billing`
2.Click "Update card"
3.Enter card number `4000 0000 0000 0002` (decline test card)
4.Submit the form
 
## Expected Behavior
Error toast: "Card declined. Please try a different card."
 
## Actual Behavior
Spinner runs indefinitely. Network tab shows `POST /api/v1/charges` hanging.
Console: `Uncaught TypeError: Cannot read property 'status' of undefined`
 
## Environment
-OS: macOS 15.2
-Browser: Chrome 132 / Node 22.3
-App version / commit: v2.4.1 / `a3f9b12`
-Relevant config: `STRIPE_ENV=test`
 
## Logs / Screenshots
<details>
<summary>Stack trace</summary>
 

</details>
 
## Workaround
None found. All card submissions are broken in test mode.
 
## Acceptance Criteria
- [ ] Declined card returns 402 with user-facing error message
- [ ] Spinner stops on error
- [ ] No console errors thrown

## Problem
Describe the pain point without prescribing the solution.
"As a team admin, I cannot revoke individual API keys without deleting the entire
integration — so a single compromised key forces us to rotate all integrations."
 
## Proposed Solution
What you want to happen.
"Add per-key revocation on the API Keys settings page. Revoked keys return 401
immediately; no grace period."
 
## Alternatives Considered
-Short-lived keys (doesn't solve the emergency revoke case)
-IP allowlisting (different problem)
 
## Acceptance Criteria
-[ ] Admin can revoke any key independently
-[ ] Revoked key returns 401 within 60 seconds
-[ ] Audit log entry created on revocation
-[ ] Key owner notified by email
 
## Additional Context
Affects all teams using our Zapier integration (~400 accounts per support data).

## Regression Details
- **Last good version:** v2.3.0
- **First bad version:** v2.3.1
- **Introducing commit:** `git bisect` result → `c8d1e4f`
  ([commit link](https://github.com/org/repo/commit/c8d1e4f))
- **Introducing PR:** #312 — "Refactor payment middleware"
 
## Bisect Log

## Failure Rate
~30% of runs over the last 7 days (tracked manually / via CI dashboard).
 
## CI Run Examples
- Failed: https://github.com/org/repo/actions/runs/12345678
- Failed: https://github.com/org/repo/actions/runs/12345900
- Passed: https://github.com/org/repo/actions/runs/12345800
 
## Failure Pattern
Fails consistently on: parallel runs, slow CI runners, after `db:reset`.
Never fails locally. Timing-dependent (test passes with `sleep 100ms` injected).
 
## Log Excerpt (failure)

 
## Suspected Cause
Async setup in `beforeEach` not awaited before first assertion.

# WRONG — never do this
gh issue create --title "SQL injection in /api/v1/search"
 
# CORRECT — use GitHub's private security advisory
gh api repos/org/repo/security-advisories \
  --method POST \
  --field summary="SQL injection in search endpoint" \
  --field description="..." \
  --field severity="high"
 
# Or via UI: repo → Security tab → Advisories → New advisory

## Benchmark: Before (v2.3.0)

 
## Benchmark: After (v2.4.0)

 
## Profiling Output
Attached: `profile-v2.4.0.png`
Hotspot: `ReportAggregator.groupBy()` — 83% of CPU time.
Introduced by #318 (full-table scan, missing index on `reports.created_at`).
 
## Acceptance Criteria
- [ ] p95 ≤ 400ms under same load profile
- [ ] No full-table scans (verified via EXPLAIN ANALYZE)

# In an issue body — creates a tracked reference
Depends on #42
Blocks #55
Related to #67
Part of #80 (epic)
 
# In a PR body — auto-closes the issue when PR merges to default branch
Fixes #42
Closes #42
Resolves #42
 
# Cross-repo
Fixes org/other-repo#42
 
# In commit message (also closes on merge)
git commit -m "fix: handle declined cards in test mode
 
Closes #42"

# Search before creating
gh issue list --search "payment decline spinner" --state all
gh issue list --search "card test mode broken" --state all
 
# Check closed issues too (may have a workaround)
gh issue list --search "charge 402" --state closed

## Scope
-[ ] org/frontend#— (UI changes)
-[ ] org/backend#— (API changes)
-[ ] org/infra#— (database migration)
 
This issue tracks overall completion. Sub-issues are self-contained.

Thanks for the report. To investigate, we need:
- Exact app version (run `app --version`)
- Browser console output when the error occurs
- Whether this reproduces in an incognito window
 
Will keep open for 14 days awaiting info.

This looks like a configuration question rather than a bug.
Please open a support ticket at support.example.com or ask in #help on Discord.
Closing to keep the issue tracker focused on confirmed defects.

## Platform
-Fails on: Windows 11 (PowerShell 5.1, path separator `\`)
-Passes on: macOS 15, Ubuntu 22.04
 
## Root Cause Hypothesis
Path concatenation uses hardcoded `/` — breaks on Windows.
Candidate line: `config.ts:88`