instar 0.28.46 → 0.28.48

package/README.md

@@ -213,6 +213,9 @@ iMessage support lets your agent send and receive iMessages on macOS. Messages a
    ```
 4. **Automation permission** for Messages.app — macOS will prompt on first send
 
+> **Photo attachments:** If you want your agent to process images and files sent via iMessage, the `instar-attachments-sync` binary must also be running with Full Disk Access granted to it. It mirrors attachments from the Messages sandbox to a readable location. See [docs/LAUNCHDAEMON-SETUP.md#3-imessage-photo-attachments-optional](docs/LAUNCHDAEMON-SETUP.md#3-imessage-photo-attachments-optional) for setup.
+
+For running as a LaunchDaemon (always-on, survives reboots), see [docs/LAUNCHDAEMON-SETUP.md](docs/LAUNCHDAEMON-SETUP.md).
 ### Configuration
 
 Add to your `.instar/config.json`:

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AA+CH,UAAU,WAAW;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,yFAAyF;IACzF,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBrE;AAkzCD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CA2iC1E;AA6jBD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAuBlF"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AA+CH,UAAU,WAAW;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,yFAAyF;IACzF,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBrE;AAkzCD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CA2iC1E;AAulBD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAuBlF"}

package/dist/commands/init.js

@@ -2505,7 +2505,33 @@ function getDefaultJobs(port) {
             enabled: true,
             execute: {
                 type: 'prompt',
-                value: 'Review what has happened in the last 4 hours by reading recent activity logs. If there are any learnings, patterns, or insights worth remembering, update .instar/MEMORY.md. If nothing significant happened, do nothing.',
+                value: `AUTH=$(python3 -c "import json; print(json.load(open('.instar/config.json')).get('authToken',''))" 2>/dev/null)
+
+# Read recent activity logs to understand what happened in last 4 hours
+RECENT_LOGS=$(ls -t .instar/logs/activity-*.jsonl 2>/dev/null | head -1)
+if [ -z "$RECENT_LOGS" ]; then
+  RECENT_LOGS=".instar/logs/activity-$(date +%Y-%m-%d).jsonl"
+fi
+
+# Extract recent session activity and key events (filter out noise, keep significant events)
+echo "=== RECENT ACTIVITY (Last 4 Hours) ==="
+tail -500 "$RECENT_LOGS" 2>/dev/null | jq -r 'select(.type != "job-start" and .type != "job-queued") | "\(.timestamp) [\(.type)] \(.message // .title // .session_name // .slug // "")"' 2>/dev/null | tail -100
+
+echo ""
+echo "=== YOUR TASK ==="
+echo "Analyze the activity above. Identify any learnings, patterns, or insights worth preserving in MEMORY.md:"
+echo "- Session patterns or repeated issues"
+echo "- Completed commitments or action items"
+echo "- Gaps between intended behavior and actual behavior"
+echo "- Unexpected interactions or failure modes"
+echo "- Process improvements or capability gaps"
+echo ""
+echo "If you find genuine learnings:"
+echo "1. Update .instar/MEMORY.md with the insight (append to the file)"
+echo "2. Be specific: include what was learned, why it matters, and how it should guide future work"
+echo "3. Signal completion: curl -s -X POST http://localhost:${port}/reflection/record -H 'Content-Type: application/json' -d '{\"type\":\"quick\"}'"
+echo ""
+echo "If nothing significant, do nothing. Silence means continuity is working as expected."`,
             },
             tags: ['cat:learning'],
         },
@@ -2549,7 +2575,7 @@ function getDefaultJobs(port) {
             expectedDurationMinutes: 3,
             model: 'opus',
             enabled: true,
-            gate: `curl -sf http://localhost:${port}/evolution/learnings?applied=false 2>/dev/null | python3 -c "import sys,json; d=json.load(sys.stdin); exit(0 if len(d.get('learnings',[])) > 0 else 1)"`,
+            gate: `curl -sf -H "Authorization: Bearer $INSTAR_AUTH_TOKEN" http://localhost:${port}/evolution/learnings?applied=false 2>/dev/null | python3 -c "import sys,json; d=json.load(sys.stdin); exit(0 if len(d.get('learnings',[])) > 0 else 1)"`,
             execute: {
                 type: 'prompt',
                 value: `Harvest and synthesize learnings: curl -s http://localhost:${port}/evolution/learnings?applied=false
@@ -2580,7 +2606,7 @@ If no actionable patterns found, exit silently.`,
             expectedDurationMinutes: 2,
             model: 'haiku',
             enabled: true,
-            gate: `curl -sf http://localhost:${port}/evolution/actions/overdue 2>/dev/null | python3 -c "import sys,json; d=json.load(sys.stdin); exit(0 if len(d.get('overdue',[])) > 0 else 1)"`,
+            gate: `curl -sf -H "Authorization: Bearer $INSTAR_AUTH_TOKEN" http://localhost:${port}/evolution/actions/overdue 2>/dev/null | python3 -c "import sys,json; d=json.load(sys.stdin); exit(0 if len(d.get('overdue',[])) > 0 else 1)"`,
             execute: {
                 type: 'prompt',
                 value: `Check for overdue commitments: curl -s http://localhost:${port}/evolution/actions/overdue
@@ -2738,7 +2764,7 @@ If no overdue or stale items, exit silently.`,
             expectedDurationMinutes: 5,
             model: 'haiku',
             enabled: true,
-            gate: 'bash .claude/scripts/git-sync-gate.sh',
+            gate: 'bash ${CLAUDE_PROJECT_DIR}/.claude/scripts/git-sync-gate.sh',
             execute: {
                 type: 'skill',
                 value: 'git-sync',
@@ -2821,7 +2847,7 @@ If everything is coherent and no reflection is needed, exit silently. Only repor
             expectedDurationMinutes: 3,
             model: 'sonnet',
             enabled: true,
-            gate: `curl -sf http://localhost:${port}/evolution/proposals?status=proposed 2>/dev/null | python3 -c "import sys,json; d=json.load(sys.stdin); exit(0 if len(d.get('proposals',[])) > 0 else 1)"`,
+            gate: `curl -sf -H "Authorization: Bearer $INSTAR_AUTH_TOKEN" http://localhost:${port}/evolution/proposals?status=proposed 2>/dev/null | python3 -c "import sys,json; d=json.load(sys.stdin); exit(0 if len(d.get('proposals',[])) > 0 else 1)"`,
             execute: {
                 type: 'prompt',
                 value: `Review pending evolution proposals: curl -s http://localhost:${port}/evolution/proposals?status=proposed\n\nFor each proposal:\n1. Read the title, description, type, and source\n2. Evaluate: Is this a genuine improvement? Is the effort worth the impact? Does it align with our goals?\n3. If approved, update status: curl -s -X PATCH http://localhost:${port}/evolution/proposals/EVO-XXX -H 'Content-Type: application/json' -d '{"status":"approved"}'\n4. If rejected or deferred, update with reason.\n\nDo NOT implement approved proposals — that's handled by the paired evolution-proposal-implement job.\n\nAlso check the dashboard: curl -s http://localhost:${port}/evolution — report any highlights to the user if they seem important.\n\nIf no proposals need attention, exit silently.`,
@@ -2837,7 +2863,7 @@ If everything is coherent and no reflection is needed, exit silently. Only repor
             expectedDurationMinutes: 10,
             model: 'opus',
             enabled: true,
-            gate: `curl -sf http://localhost:${port}/evolution/proposals?status=approved 2>/dev/null | python3 -c "import sys,json; d=json.load(sys.stdin); exit(0 if len(d.get('proposals',[])) > 0 else 1)"`,
+            gate: `curl -sf -H "Authorization: Bearer $INSTAR_AUTH_TOKEN" http://localhost:${port}/evolution/proposals?status=approved 2>/dev/null | python3 -c "import sys,json; d=json.load(sys.stdin); exit(0 if len(d.get('proposals',[])) > 0 else 1)"`,
             execute: {
                 type: 'prompt',
                 value: `Implement approved evolution proposals: curl -s http://localhost:${port}/evolution/proposals?status=approved\n\nFor each approved proposal:\n1. Read the full description and understand what needs to be built\n2. Implement it: create the skill/hook/job/config change described\n3. After implementation, mark complete: curl -s -X PATCH http://localhost:${port}/evolution/proposals/EVO-XXX -H 'Content-Type: application/json' -d '{"status":"implemented","resolution":"What was done"}'\n\nIf no approved proposals exist, exit silently.`,
@@ -3129,6 +3155,33 @@ function refreshScripts(projectDir, stateDir) {
     // Always install serendipity-capture.sh
     installSerendipityCapture(projectDir);
 }
+/**
+ * Load a messaging-relay script template from src/templates/scripts/,
+ * substituting the agent's configured port into the INSTAR_PORT fallback.
+ *
+ * The canonical templates live at src/templates/scripts/*-reply.sh. Keeping
+ * a single source of truth (vs. duplicated inlined bash) eliminates a class
+ * of bugs where scaffold-time and migration-time versions drift out of sync.
+ * PostUpdateMigrator.getTelegramReplyScript() uses the same loading pattern.
+ */
+function loadRelayTemplate(filename, port) {
+    const modDir = path.dirname(new URL(import.meta.url).pathname);
+    const candidates = [
+        // dev: src/commands → ../templates/scripts
+        path.resolve(modDir, '..', 'templates', 'scripts', filename),
+        // dist: dist/commands → ../../src/templates/scripts
+        path.resolve(modDir, '..', '..', 'src', 'templates', 'scripts', filename),
+    ];
+    for (const candidate of candidates) {
+        if (fs.existsSync(candidate)) {
+            const content = fs.readFileSync(candidate, 'utf-8');
+            // Template defaults to port 4040; bake the agent's actual port in so
+            // the script works even without INSTAR_PORT set in the environment.
+            return content.replace('${INSTAR_PORT:-4040}', `\${INSTAR_PORT:-${port}}`);
+        }
+    }
+    throw new Error(`Relay template not found: ${filename}`);
+}
 /**
  * Install the Telegram relay script that Claude uses to send responses
  * back to Telegram topics via the instar server API.
@@ -3136,62 +3189,8 @@ function refreshScripts(projectDir, stateDir) {
 function installTelegramRelay(projectDir, port) {
     const scriptsDir = path.join(projectDir, '.claude', 'scripts');
     fs.mkdirSync(scriptsDir, { recursive: true });
-    const scriptContent = `#!/bin/bash
-# telegram-reply.sh — Send a message back to a Telegram topic via instar server.
-#
-# Usage:
-#   .claude/scripts/telegram-reply.sh TOPIC_ID "message text"
-#   echo "message text" | .claude/scripts/telegram-reply.sh TOPIC_ID
-#   cat <<'EOF' | .claude/scripts/telegram-reply.sh TOPIC_ID
-#   Multi-line message here
-#   EOF
-
-TOPIC_ID="$1"
-shift
-
-if [ -z "$TOPIC_ID" ]; then
-  echo "Usage: telegram-reply.sh TOPIC_ID [message]" >&2
-  exit 1
-fi
-
-# Read message from args or stdin
-if [ $# -gt 0 ]; then
-  MSG="$*"
-else
-  MSG="$(cat)"
-fi
-
-if [ -z "$MSG" ]; then
-  echo "No message provided" >&2
-  exit 1
-fi
-
-PORT="\${INSTAR_PORT:-${port}}"
-
-# Escape for JSON
-JSON_MSG=$(printf '%s' "$MSG" | python3 -c 'import sys,json; print(json.dumps(sys.stdin.read()))' 2>/dev/null)
-if [ -z "$JSON_MSG" ]; then
-  # Fallback if python3 not available: basic escape
-  JSON_MSG="$(printf '%s' "$MSG" | sed 's/\\\\\\\\/\\\\\\\\\\\\\\\\/g; s/"/\\\\\\\\"/g' | sed ':a;N;$!ba;s/\\\\n/\\\\\\\\n/g')"
-  JSON_MSG="\\"$JSON_MSG\\""
-fi
-
-RESPONSE=$(curl -s -w "\\n%{http_code}" -X POST "http://localhost:\${PORT}/telegram/reply/\${TOPIC_ID}" \\
-  -H 'Content-Type: application/json' \\
-  -d "{\\"text\\":\${JSON_MSG}}")
-
-HTTP_CODE=$(echo "$RESPONSE" | tail -1)
-BODY=$(echo "$RESPONSE" | sed '$d')
-
-if [ "$HTTP_CODE" = "200" ]; then
-  echo "Sent $(echo "$MSG" | wc -c | tr -d ' ') chars to topic $TOPIC_ID"
-else
-  echo "Failed (HTTP $HTTP_CODE): $BODY" >&2
-  exit 1
-fi
-`;
     const scriptPath = path.join(scriptsDir, 'telegram-reply.sh');
-    fs.writeFileSync(scriptPath, scriptContent, { mode: 0o755 });
+    fs.writeFileSync(scriptPath, loadRelayTemplate('telegram-reply.sh', port), { mode: 0o755 });
 }
 /**
  * Install the WhatsApp relay script that Claude uses to send responses
@@ -3200,76 +3199,8 @@ fi
 function installWhatsAppRelay(projectDir, port) {
     const scriptsDir = path.join(projectDir, '.instar', 'scripts');
     fs.mkdirSync(scriptsDir, { recursive: true });
-    const scriptContent = `#!/bin/bash
-# whatsapp-reply.sh — Send a message back to a WhatsApp JID via instar server.
-#
-# Usage:
-#   .instar/scripts/whatsapp-reply.sh JID "message text"
-#   echo "message text" | .instar/scripts/whatsapp-reply.sh JID
-#   cat <<'EOF' | .instar/scripts/whatsapp-reply.sh JID
-#   Multi-line message here
-#   EOF
-#
-# JID format: phone@s.whatsapp.net (e.g., 12345678901@s.whatsapp.net)
-
-JID="$1"
-shift
-
-if [ -z "$JID" ]; then
-  echo "Usage: whatsapp-reply.sh JID [message]" >&2
-  exit 1
-fi
-
-# Read message from args or stdin
-if [ $# -gt 0 ]; then
-  MSG="$*"
-else
-  MSG="$(cat)"
-fi
-
-if [ -z "$MSG" ]; then
-  echo "No message provided" >&2
-  exit 1
-fi
-
-PORT="\${INSTAR_PORT:-${port}}"
-
-# Read auth token from config (if present)
-AUTH_TOKEN=""
-if [ -f ".instar/config.json" ]; then
-  AUTH_TOKEN=$(python3 -c "import json; print(json.load(open('.instar/config.json')).get('authToken',''))" 2>/dev/null)
-fi
-
-# Escape for JSON
-JSON_MSG=$(printf '%s' "$MSG" | python3 -c 'import sys,json; print(json.dumps(sys.stdin.read()))' 2>/dev/null)
-if [ -z "$JSON_MSG" ]; then
-  JSON_MSG="$(printf '%s' "$MSG" | sed 's/\\\\\\\\/\\\\\\\\\\\\\\\\/g; s/"/\\\\\\\\"/g' | sed ':a;N;$!ba;s/\\\\n/\\\\\\\\n/g')"
-  JSON_MSG="\\"$JSON_MSG\\""
-fi
-
-if [ -n "$AUTH_TOKEN" ]; then
-  RESPONSE=$(curl -s -w "\\n%{http_code}" -X POST "http://localhost:\${PORT}/whatsapp/send/\${JID}" \\
-    -H 'Content-Type: application/json' \\
-    -H "Authorization: Bearer \${AUTH_TOKEN}" \\
-    -d "{\\"text\\":\${JSON_MSG}}")
-else
-  RESPONSE=$(curl -s -w "\\n%{http_code}" -X POST "http://localhost:\${PORT}/whatsapp/send/\${JID}" \\
-    -H 'Content-Type: application/json' \\
-    -d "{\\"text\\":\${JSON_MSG}}")
-fi
-
-HTTP_CODE=$(echo "$RESPONSE" | tail -1)
-BODY=$(echo "$RESPONSE" | sed '$d')
-
-if [ "$HTTP_CODE" = "200" ]; then
-  echo "Sent $(echo "$MSG" | wc -c | tr -d ' ') chars to $JID"
-else
-  echo "Failed (HTTP $HTTP_CODE): $BODY" >&2
-  exit 1
-fi
-`;
     const scriptPath = path.join(scriptsDir, 'whatsapp-reply.sh');
-    fs.writeFileSync(scriptPath, scriptContent, { mode: 0o755 });
+    fs.writeFileSync(scriptPath, loadRelayTemplate('whatsapp-reply.sh', port), { mode: 0o755 });
 }
 /**
  * Append missing sections to CLAUDE.md without overwriting user customizations.
@@ -3983,27 +3914,27 @@ function installClaudeSettings(projectDir, serverPort) {
     const instarBashHooks = [
         {
             type: 'command',
-            command: 'bash .instar/hooks/instar/dangerous-command-guard.sh "$TOOL_INPUT"',
+            command: 'bash ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/dangerous-command-guard.sh "$TOOL_INPUT"',
             blocking: true,
         },
         {
             type: 'command',
-            command: 'bash .instar/hooks/instar/grounding-before-messaging.sh "$TOOL_INPUT"',
+            command: 'bash ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/grounding-before-messaging.sh "$TOOL_INPUT"',
             blocking: false,
         },
         {
             type: 'command',
-            command: 'node .instar/hooks/instar/deferral-detector.js',
+            command: 'node ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/deferral-detector.js',
             timeout: 5000,
         },
         {
             type: 'command',
-            command: 'node .instar/hooks/instar/external-communication-guard.js',
+            command: 'node ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/external-communication-guard.js',
             timeout: 5000,
         },
         {
             type: 'command',
-            command: 'node .instar/hooks/instar/post-action-reflection.js',
+            command: 'node ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/post-action-reflection.js',
             timeout: 5000,
         },
     ];
@@ -4011,7 +3942,7 @@ function installClaudeSettings(projectDir, serverPort) {
     const instarMcpHooks = [
         {
             type: 'command',
-            command: 'node .instar/hooks/instar/external-operation-gate.js',
+            command: 'node ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/external-operation-gate.js',
             blocking: true,
             timeout: 5000,
         },
@@ -4060,7 +3991,7 @@ function installClaudeSettings(projectDir, serverPort) {
     // The session-start.sh hook handles event routing internally via CLAUDE_HOOK_MATCHER
     const sessionStartHook = {
         type: 'command',
-        command: 'bash .instar/hooks/instar/session-start.sh',
+        command: 'bash ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/session-start.sh',
         timeout: 5,
     };
     if (!hooks.SessionStart) {
@@ -4115,7 +4046,7 @@ function installClaudeSettings(projectDir, serverPort) {
     // PostToolUse: scope coherence collector tracks implementation depth
     const scopeCollectorHook = {
         type: 'command',
-        command: 'node .instar/hooks/instar/scope-coherence-collector.js',
+        command: 'node ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/scope-coherence-collector.js',
         timeout: 5000,
     };
     if (!hooks.PostToolUse) {
@@ -4126,7 +4057,7 @@ function installClaudeSettings(projectDir, serverPort) {
     // (scope collector also added to Read and Skill)
     const claimInterceptHook = {
         type: 'command',
-        command: 'node .instar/hooks/instar/claim-intercept.js',
+        command: 'node ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/claim-intercept.js',
         timeout: 5000,
     };
     for (const matcher of ['Edit', 'Write', 'Bash', 'Read', 'Skill']) {
@@ -4151,19 +4082,19 @@ function installClaudeSettings(projectDir, serverPort) {
     // Stop: response review pipeline — Coherence Gate LLM-powered review
     const responseReviewHook = {
         type: 'command',
-        command: 'node .instar/hooks/instar/response-review.js',
+        command: 'node ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/response-review.js',
         timeout: 10000,
     };
     // Stop: scope coherence checkpoint fires the zoom-out prompt
     const scopeCheckpointHook = {
         type: 'command',
-        command: 'node .instar/hooks/instar/scope-coherence-checkpoint.js',
+        command: 'node ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/scope-coherence-checkpoint.js',
         timeout: 10000,
     };
     // Stop: claim intercept response checks direct text for false claims
     const claimInterceptResponseHook = {
         type: 'command',
-        command: 'node .instar/hooks/instar/claim-intercept-response.js',
+        command: 'node ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/claim-intercept-response.js',
         timeout: 10000,
     };
     if (!hooks.Stop) {
@@ -4191,7 +4122,7 @@ function installClaudeSettings(projectDir, serverPort) {
     if (!hasAutonomousHook) {
         hooks.Stop.unshift({ matcher: '', hooks: [{
                     type: 'command',
-                    command: 'bash .claude/skills/autonomous/hooks/autonomous-stop-hook.sh',
+                    command: 'bash ${CLAUDE_PROJECT_DIR}/.claude/skills/autonomous/hooks/autonomous-stop-hook.sh',
                     timeout: 10000,
                 }] });
     }
@@ -4207,7 +4138,7 @@ function installClaudeSettings(projectDir, serverPort) {
             matcher: '',
             hooks: [{
                     type: 'command',
-                    command: 'node .instar/hooks/instar/auto-approve-permissions.js',
+                    command: 'node ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/auto-approve-permissions.js',
                     timeout: 5000,
                 }],
         });