fix(templates): resolve GitHub API host from env in ralph-triage.js

[omercangumus]

What

ralph-triage.js now resolves the GitHub REST API host from the environment instead of hardcoding api.github.com.

Why

Squad Heartbeat (Ralph) fails with a 401 on GitHub Enterprise. githubRequestJson() in .squad-templates/ralph-triage.js sent every request to hostname: 'api.github.com', but on GHE the GITHUB_TOKEN is only valid against the enterprise API host (https://<ghe-host>/api/v3), so calls to github.com are rejected with Bad credentials.

Closes #1142

How

Added a resolveGithubApiBase() helper that picks the API base in order:

1. GITHUB_API_URL — set automatically by Actions on both github.com and GHE runners.
2. GITHUB_SERVER_URL + /api/v3 — fallback for GHE if GITHUB_API_URL isn't set.
3. https://api.github.com — fallback for local/non-Actions runs.

githubRequestJson() now builds the request from a URL object (${resolveGithubApiBase()}${pathname}) instead of a hardcoded hostname/path pair, so https.request() picks up the correct protocol, host, and base path automatically. No behavior change on github.com-hosted repos, since GITHUB_API_URL there already resolves to https://api.github.com.

Fixed in the canonical .squad-templates/ralph-triage.js and propagated via node scripts/sync-templates.mjs --sync to the 3 mirror targets (templates/, packages/squad-cli/templates/, packages/squad-sdk/templates/), matching the parity checks in test/template-sync.test.ts.

Also added a require.main === module guard around the script's main() call and exported resolveGithubApiBase via module.exports, purely so the new unit tests can import and exercise the helper without invoking main() (which needs GITHUB_TOKEN and network access). No change to the script's behavior when run directly via node ralph-triage.js.

Testing

• Added 4 new unit tests in test/ralph-triage.test.ts covering all three resolution branches plus trailing-slash normalization. Verified they fail with resolveGithubApiBase is not a function against the pre-fix code and pass against the fix.
• npx vitest run test/ralph-triage.test.ts test/template-sync.test.ts — 284 passed.
• npm run build — passes.
• npm run lint (tsc --noEmit) — passes.
• npm run lint:eslint — 0 errors (pre-existing warnings only, unrelated to this change).
• npm test (full suite) — no regressions from this change. A number of unrelated tests fail on this Windows dev machine (EBUSY temp-dir races, timing-sensitive timeouts, a locale-dependent number-formatting assertion) — confirmed identical failures on a clean upstream/dev checkout before my changes, so they're pre-existing local-environment flakiness, not something this PR introduces.

---

⚠️ Quick Check

• Changeset added via npx changeset add-equivalent manual file: .changeset/fix-1142-ralph-triage-ghe-api-host.md (patch bump for @bradygaster/squad-cli and @bradygaster/squad-sdk, since this touches governed template paths under both packages' templates/)

PR Readiness Checklist

Branch & Commit

• Branch created from dev
• Branch is up to date with dev
• Verified diff contains only intended changes (git diff --cached --stat)
• PR is not in draft mode — will mark ready once CI is green
• Commit history is clean (single commit)

Build & Test

• npm run build passes
• npm test passes (all tests relevant to this change; see testing notes above for pre-existing unrelated local failures)
• npm run lint passes (type check clean)
• npm run lint:eslint passes (0 errors)

Changeset

• Changeset added (patch, both packages)

Docs

• N/A — internal script fix, no user-facing CLI/SDK API change

Exports

• N/A — no new modules

---

Breaking Changes

None.

Waivers

None.

[github-actions]

🟠 Impact Analysis — PR #1438

Risk tier: 🟠 HIGH

📊 Summary

Metric	Count
Files changed	6
Files added	1
Files modified	5
Files deleted	0
Modules touched	5

🎯 Risk Factors

• 6 files changed (6-20 → MEDIUM)
• 5 modules touched (5-8 → HIGH)

📦 Modules Affected

root (2 files)

• .changeset/fix-1142-ralph-triage-ghe-api-host.md
• templates/ralph-triage.js

squad-cli (1 file)

• packages/squad-cli/templates/ralph-triage.js

squad-sdk (1 file)

• packages/squad-sdk/templates/ralph-triage.js

templates (1 file)

• .squad-templates/ralph-triage.js

tests (1 file)

• test/ralph-triage.test.ts

---

This report is generated automatically for every PR. See #733 for details.

[github-actions]

🛫 PR Readiness Check

ℹ️ This comment updates on each push. Last checked: commit ae02c82

PR Scope: 🔧 Infrastructure

⚠️ 3 item(s) to address before review

Status	Check	Details
✅	Single commit	1 commit — clean history
❌	Not in draft	PR is still in draft — mark as ready for review when done
✅	Branch up to date	Up to date with dev
❌	Copilot review	No Copilot review yet — it may still be processing
✅	Changeset present	Changeset file found
✅	Scope clean	No .squad/ or docs/proposals/ files
✅	No merge conflicts	No merge conflicts
✅	Copilot threads resolved	No Copilot review threads
❌	CI passing	3 check(s) still running

Files Changed (6 files, +162 −25)

File	+/−
.changeset/fix-1142-ralph-triage-ghe-api-host.md	+10 −0
.squad-templates/ralph-triage.js	+28 −6
packages/squad-cli/templates/ralph-triage.js	+28 −6
packages/squad-sdk/templates/ralph-triage.js	+28 −6
templates/ralph-triage.js	+28 −6
test/ralph-triage.test.ts	+40 −1

Total: +162 −25

---

This check runs automatically on every push. Fix any ❌ items and push again.
See CONTRIBUTING.md and PR Requirements for details.