instar 0.26.3 → 0.26.5

package/README.md

@@ -5,7 +5,7 @@
 <h1 align="center">instar</h1>
 
 <p align="center">
-  <strong>Persistent Claude Code agents with scheduling, sessions, memory, and Telegram.</strong>
+  <strong>Persistent Claude Code agents with scheduling, sessions, memory, and messaging.</strong>
 </p>
 
 <p align="center">
@@ -31,11 +31,11 @@
 npx instar
 ```
 
-One command. Guided setup. Talking to your agent from Telegram within minutes.
+One command. Guided setup. Talking to your agent from your phone within minutes.
 
 ---
 
-Instar turns Claude Code from a powerful CLI tool into a **coherent, autonomous partner**. Persistent identity, memory that survives every restart, job scheduling, two-way Telegram messaging, and the infrastructure to evolve.
+Instar turns Claude Code from a powerful CLI tool into a **coherent, autonomous partner**. Persistent identity, memory that survives every restart, job scheduling, two-way messaging (Telegram, WhatsApp, iMessage), and the infrastructure to evolve.
 
 ## Quick Start
 
@@ -48,10 +48,10 @@ npx instar
 # 2. Start your agent
 instar server start
 
-# 3. Message it on Telegram — it responds, runs jobs, and remembers everything
+# 3. Message it from your phone — it responds, runs jobs, and remembers everything
 ```
 
-The wizard discovers your environment, configures messaging (Telegram and/or WhatsApp), sets up identity files, and gets your agent running. **Within minutes, you're talking to your partner from your phone.**
+The wizard discovers your environment, configures messaging (Telegram, WhatsApp, and/or iMessage), sets up identity files, and gets your agent running. **Within minutes, you're talking to your partner from your phone.**
 
 **Requirements:** Node.js 20+ · [Claude Code CLI](https://docs.anthropic.com/en/docs/claude-code) · [API key](https://console.anthropic.com/) or Claude subscription
 
@@ -60,7 +60,7 @@ The wizard discovers your environment, configures messaging (Telegram and/or Wha
 ## How It Works
 
 ```
-You (Telegram / WhatsApp / Terminal)
+You (Telegram / WhatsApp / iMessage / Terminal)
          │
     conversation
          │
@@ -103,6 +103,7 @@ Instar solves the six dimensions of agent coherence:
 | **Job Scheduler** | Cron-based tasks with priority levels, model tiering, and quota awareness | [→](https://instar.sh/features/scheduler/) |
 | **Telegram** | Two-way messaging via forum topics. Each topic maps to a Claude session | [→](https://instar.sh/features/telegram/) |
 | **WhatsApp** | Full messaging via local Baileys library. No cloud dependency | [→](https://instar.sh/features/whatsapp/) |
+| **iMessage** | Native macOS messaging via Messages.app database polling + `imsg` CLI. [Setup guide](#imessage-setup-macos) | |
 | **Lifeline** | Persistent supervisor. Detects crashes, auto-recovers, queues messages | [→](https://instar.sh/features/lifeline/) |
 | **Conversational Memory** | Per-topic SQLite with FTS5, rolling summaries, context re-injection | [→](https://instar.sh/features/memory/) |
 | **Evolution System** | Proposals, learnings, gap tracking, commitment follow-through | [→](https://instar.sh/features/evolution/) |
@@ -158,7 +159,7 @@ Different tools solve different problems. Here's where Instar fits:
 | **Persistence** | Multi-layered memory across sessions | Session-bound context | Plugin-based memory | Framework-dependent |
 | **Identity** | Hooks enforce identity at every boundary | Manual CLAUDE.md | Not addressed | Not addressed |
 | **Scheduling** | Native cron with priority & quotas | None | None | External required |
-| **Messaging** | Telegram + WhatsApp (two-way) | None | 22+ channels, voice, device apps | External required |
+| **Messaging** | Telegram + WhatsApp + iMessage (two-way) | None | 22+ channels, voice, device apps | External required |
 | **Safety** | LLM-supervised gates, decision journaling | Permission prompts | Behavioral hooks | Guardrails libraries |
 | **Process model** | One process per session, isolated | Single process | All agents in one Gateway | Single orchestrator |
 | **State storage** | 100% file-based (JSON/JSONL/SQLite) | Session only | Database-backed | Framework-dependent |
@@ -197,6 +198,59 @@ The AI systems we build today set precedents for how AI is treated tomorrow. **T
 
 </details>
 
+## iMessage Setup (macOS)
+
+iMessage support lets your agent send and receive iMessages on macOS. Messages are read directly from the native Messages database and sent via the [`imsg`](https://github.com/steipete/imsg) CLI.
+
+### Prerequisites
+
+1. **macOS** with Messages.app signed into an Apple ID
+2. **Full Disk Access** for your terminal app (System Settings → Privacy & Security → Full Disk Access → add Terminal.app or iTerm)
+3. **imsg CLI** installed:
+   ```bash
+   brew install steipete/tap/imsg
+   ```
+4. **Automation permission** for Messages.app — macOS will prompt on first send
+
+### Configuration
+
+Add to your `.instar/config.json`:
+
+```json
+{
+  "messaging": [
+    {
+      "type": "imessage",
+      "enabled": true,
+      "config": {
+        "authorizedSenders": ["+14081234567"],
+        "cliPath": "/opt/homebrew/bin/imsg"
+      }
+    }
+  ]
+}
+```
+
+`authorizedSenders` is required (fail-closed). Only messages from these phone numbers or email addresses will be processed.
+
+### How it works
+
+- **Receiving**: The server polls `~/Library/Messages/chat.db` every 2 seconds for new messages. Uses the `query_only` SQLite pragma to read the WAL (write-ahead log) where Messages.app writes new data.
+- **Sending**: Claude Code sessions run `imessage-reply.sh` which calls `imsg send` and notifies the server for logging. Sending requires Automation permission for Messages.app, which only works from user-context processes (tmux sessions), not the LaunchAgent server.
+- **Session lifecycle**: Follows the same pattern as Telegram — each sender maps to a Claude Code session that receives conversation context on spawn and respawns with full history when needed.
+
+### Endpoints
+
+| Endpoint | Description |
+|----------|-------------|
+| `GET /imessage/status` | Connection state |
+| `POST /imessage/validate-send/:recipient` | Validate recipient + issue single-use send token (outbound safety layer) |
+| `POST /imessage/reply/:recipient` | Confirm delivery with send token (called by imessage-reply.sh after `imsg send`) |
+| `GET /imessage/chats` | List recent conversations |
+| `GET /imessage/chats/:chatId/history` | Message history for a chat |
+| `GET /imessage/search?q=query` | Search messages |
+| `GET /imessage/log-stats` | Outbound audit log statistics |
+
 ## Origin
 
 Instar was extracted from the [Dawn/Portal project](https://dawn.bot-me.ai) -- a production AI system where a human and an AI have been building together for months. The infrastructure patterns were **earned through real experience**, refined through real failures and growth in a real human-AI relationship.

package/dashboard/index.html

@@ -58,6 +58,8 @@
       display: flex;
       align-items: center;
       gap: 12px;
+      min-width: 0;
+      flex: 1;
     }
 
     .header h1 {
@@ -255,6 +257,7 @@
     .dropzone-container {
       display: flex;
       justify-content: center;
+      grid-column: 1 / -1;
       padding: 24px;
       overflow-y: auto;
       height: calc(100vh - 56px);
@@ -718,7 +721,11 @@
       display: flex;
       gap: 0;
       margin-left: 24px;
+      overflow-x: auto;
+      -webkit-overflow-scrolling: touch;
+      scrollbar-width: none; /* hide scrollbar on Firefox */
     }
+    .tab-bar::-webkit-scrollbar { display: none; }
 
     .tab-bar .tab {
       padding: 6px 16px;
@@ -732,6 +739,8 @@
       border-bottom: none;
       margin-bottom: -1px;
       transition: color 0.15s, background 0.15s;
+      white-space: nowrap;
+      flex-shrink: 0;
     }
 
     .tab-bar .tab:hover {
@@ -2259,10 +2268,12 @@
       display: flex;
       gap: 12px;
       margin-bottom: 16px;
+      flex-wrap: wrap;
     }
 
     .metric-card {
       flex: 1;
+      min-width: 100px;
       background: var(--bg-panel);
       border: 1px solid var(--border);
       border-radius: 8px;
@@ -3214,6 +3225,9 @@
       // Update active state in sidebar
       renderSessionList();
 
+      // Persist session in URL for refresh
+      updateFileUrl();
+
       // Focus input
       document.getElementById('termInput').focus();
     }
@@ -3399,7 +3413,18 @@
             pendingOutputData = null;
             term.clear();
             term.write(data);
+            // Delay scrollToBottom until after xterm renders the written data
+            requestAnimationFrame(() => {
+              term.scrollToBottom();
+              // Also scroll the browser viewport to show the terminal bottom
+              const container = document.getElementById('terminalContainer');
+              if (container) container.scrollIntoView({ block: 'end', behavior: 'instant' });
+            });
+          } else {
+            // No pending data — just snap to bottom of existing content
             term.scrollToBottom();
+            const container = document.getElementById('terminalContainer');
+            if (container) container.scrollIntoView({ block: 'end', behavior: 'instant' });
           }
           hideResumeButton();
         };
@@ -3425,6 +3450,7 @@
       document.getElementById('terminalView').style.display = 'none';
       document.getElementById('noSession').style.display = 'flex';
       renderSessionList();
+      updateFileUrl(); // Clear session from URL
     }
 
     // ── Input ────────────────────────────────────────────────
@@ -4478,9 +4504,16 @@
         } else {
           params.delete('path');
         }
+        params.delete('session');
       } else {
         params.delete('tab');
         params.delete('path');
+        // Persist active session in URL
+        if (activeSession) {
+          params.set('session', activeSession);
+        } else {
+          params.delete('session');
+        }
       }
       const qs = params.toString();
       const newUrl = window.location.pathname + (qs ? '?' + qs : '');
@@ -4491,6 +4524,7 @@
       const params = new URLSearchParams(window.location.search);
       const tab = params.get('tab');
       const filePath = params.get('path');
+      const sessionParam = params.get('session');
 
       if (tab === 'files') {
         switchTab('files');
@@ -4512,6 +4546,27 @@
           };
           waitForTree();
         }
+      } else if (sessionParam) {
+        // Restore active session from URL — wait for session list to populate
+        let attempts = 0;
+        const waitForSessions = () => {
+          if (sessions.length > 0) {
+            const match = sessions.find(s => s.tmuxSession === sessionParam);
+            if (match) {
+              selectSession(match.tmuxSession, match);
+            }
+            // If no match, session ended — clear stale param
+            if (!match) {
+              const p = new URLSearchParams(window.location.search);
+              p.delete('session');
+              const qs = p.toString();
+              history.replaceState(null, '', window.location.pathname + (qs ? '?' + qs : ''));
+            }
+          } else if (++attempts < 15) {
+            setTimeout(waitForSessions, 200);
+          }
+        };
+        waitForSessions();
       }
     }
 

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AA+CH,UAAU,WAAW;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,yFAAyF;IACzF,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBrE;AAk3FD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAiBlF"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AA+CH,UAAU,WAAW;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,yFAAyF;IACzF,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBrE;AAm3FD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAiBlF"}

package/dist/commands/init.js

@@ -2414,7 +2414,8 @@ function installAutonomousSkill(skillsDir) {
     const hooksDir = path.join(autonomousDir, 'hooks');
     const scriptsDir = path.join(autonomousDir, 'scripts');
     // Copy from instar's bundled skill files if they exist
-    const bundledDir = path.join(path.dirname(path.dirname(__dirname)), '.claude', 'skills', 'autonomous');
+    const modDir = path.dirname(new URL(import.meta.url).pathname);
+    const bundledDir = path.join(path.dirname(path.dirname(modDir)), '.claude', 'skills', 'autonomous');
     if (fs.existsSync(bundledDir)) {
         // Copy from bundled source
         fs.mkdirSync(hooksDir, { recursive: true });