instar 0.28.28 → 0.28.31

package/.claude/skills/setup-wizard/SKILL.md

@@ -142,37 +142,25 @@ If they type something else → interpret conversationally and route.
 
 #### If gh_status="auth-needed"
 
-**MANDATORY — DO THIS BEFORE ASKING FOR AN AGENT NAME.** The discovery scan ran without GitHub access. The user may already have agents backed up to GitHub from another machine. You MUST offer to sign them in BEFORE proceeding to fresh-install prompts. Skipping this step has caused users to create duplicate agents instead of restoring existing ones.
+Walk the user through auth FIRST:
 
-Say:
-> Before we set up a new agent, let me check GitHub for any agents you've backed up from another machine. I need to sign you in — it takes about 30 seconds.
+> Let me check if you have agents backed up on GitHub.
+> I need to sign you into GitHub — this opens your browser.
 
-Then follow the **GitHub Device-Code Auth Flow** below. After auth completes, re-run discovery (call `runDiscovery` via the setup CLI or re-invoke the wizard) and present the updated agent list. Only proceed to fresh-install if discovery still shows zero agents.
+```bash
+gh auth login --web --git-protocol https
+```
+
+After auth, re-scan and present results.
 
 #### If gh_status="unavailable"
 
-GitHub CLI isn't installed. With instar 0.28.18+ this should be rare — the prerequisite check auto-installs gh. If you somehow get here, ask:
-> Have you used Instar before on another machine? If so, I should install GitHub CLI so I can find your existing agents before we create a new one.
+Ask:
+> Have you used Instar before on another machine?
 
-If yes: Install gh (brew/apt), then follow the **GitHub Device-Code Auth Flow** below, then re-run discovery.
+If yes: Show install guidance for the platform. After install → auth → scan.
 If no: Continue to fresh install.
 
-#### GitHub Device-Code Auth Flow (use this everywhere `gh auth login` is needed)
-
-**DO NOT run `gh auth login` synchronously in Bash** — it blocks waiting for the user to visit a URL and the Bash tool buffer hides the prompt. The user will see a frozen command and have no idea what to do.
-
-Instead:
-
-1. Start `gh auth login --web --git-protocol https` with `run_in_background: true`.
-2. Poll the background output every 2 seconds (BashOutput tool) until you see a line matching `! First copy your one-time code: XXXX-XXXX` and a line containing `https://github.com/login/device`.
-3. Extract the code and URL, then present them to the user conversationally — NOT as raw Bash output:
-   > To sign in, visit **https://github.com/login/device** and enter this code: **XXXX-XXXX**
-   > I'll wait here until you're done.
-4. Poll `gh auth status` every 5 seconds (foreground, fast). When it exits 0, the user has finished. Stop polling the background process and let it complete on its own.
-5. Confirm: "You're signed in as <username>. Let me check for your agents now."
-
-If 5 minutes pass with no auth completion, ask the user if they want to keep waiting or skip GitHub for now.
-
 #### Normal fresh install options
 
 **If inside a git repo:**
@@ -1921,7 +1909,15 @@ Wait for user to install, then re-check.
 gh auth status 2>&1
 ```
 
-If not authenticated, use the **GitHub Device-Code Auth Flow** described in Entry Point B (above). DO NOT run `gh auth login` synchronously — it blocks the Bash tool and the user will see a frozen command. Run in background, parse the device code and URL from output, present them conversationally, and poll `gh auth status` until success.
+If not authenticated, walk them through it:
+
+> I need to connect to your GitHub account. This opens your browser for a secure sign-in.
+
+```bash
+gh auth login --web --git-protocol https
+```
+
+This is an interactive command that opens the browser — run it with `stdio: 'inherit'` so the user sees the auth flow. Wait for it to complete.
 
 **Step 3: Create private repo**
 

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA2PH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA81CD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAkpItE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA2PH,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA81CD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAupItE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -3727,10 +3727,15 @@ export async function startServer(options) {
         if (scheduler) {
             const originalCanRun = scheduler.canRunJob;
             scheduler.canRunJob = (priority) => {
-                // Check memory first
+                // Check memory first — return a rich result so the scheduler can
+                // log the actual gating reason instead of mislabelling it as 'quota'.
                 const memCheck = memoryMonitor.canSpawnSession();
                 if (!memCheck.allowed) {
-                    return false;
+                    return {
+                        allowed: false,
+                        reason: 'memory-pressure',
+                        detail: memCheck.reason ?? 'memory pressure elevated',
+                    };
                 }
                 // Then check original gate (quota, etc.)
                 return originalCanRun(priority);