instar 0.6.6 → 0.6.7

package/_demo.mjs

@@ -0,0 +1,78 @@
+import { PrivateViewer } from './dist/publishing/PrivateViewer.js';
+import express from 'express';
+import { Tunnel } from 'cloudflared';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+
+const PIN = '1234';
+
+// Set up viewer
+const viewsDir = path.join(os.tmpdir(), 'instar-demo-views-' + Date.now());
+fs.mkdirSync(viewsDir, { recursive: true });
+const viewer = new PrivateViewer({ viewsDir });
+
+// Create test view with PIN
+const view = viewer.create(
+  'Secret Test Report',
+  '# Hello from Instar\n\nThis is a **PIN-protected** private view.\n\nIf you can see this, the PIN worked!\n\n---\n\n*Served securely via Cloudflare Tunnel + PIN gate.*',
+  PIN
+);
+console.log('View created:', view.id);
+
+// Start express server
+const app = express();
+app.use(express.json());
+
+app.get('/view/:id', (req, res) => {
+  const v = viewer.get(req.params.id);
+  if (!v) return res.status(404).send('Not found');
+  if (v.pinHash) {
+    res.setHeader('Content-Type', 'text/html; charset=utf-8');
+    res.send(viewer.renderPinPage(v));
+  } else {
+    res.setHeader('Content-Type', 'text/html; charset=utf-8');
+    res.send(viewer.renderHtml(v));
+  }
+});
+
+app.post('/view/:id/unlock', (req, res) => {
+  const v = viewer.get(req.params.id);
+  if (!v) return res.status(404).send('Not found');
+  const pin = req.body?.pin;
+  if (!pin || !viewer.verifyPin(req.params.id, pin)) {
+    return res.status(403).json({ error: 'Incorrect PIN' });
+  }
+  res.setHeader('Content-Type', 'text/html; charset=utf-8');
+  res.send(viewer.renderHtml(v));
+});
+
+const server = app.listen(0, '127.0.0.1', () => {
+  const port = server.address().port;
+  console.log('Server on port', port);
+
+  const localUrl = `http://127.0.0.1:${port}`;
+  // Use explicit --config to prevent ~/.cloudflared/config.yml
+  // named tunnel ingress rules from overriding the quick tunnel
+  const cfgPath = path.join(os.tmpdir(), 'instar-demo-cf.yml');
+  fs.writeFileSync(cfgPath, '# Quick tunnel — no ingress rules\n');
+  const t = Tunnel.quick(localUrl, { '--config': cfgPath });
+
+  t.once('url', (tunnelUrl) => {
+    const viewUrl = `${tunnelUrl}/view/${view.id}`;
+    console.log('TUNNEL_URL=' + viewUrl);
+    console.log('PIN=' + PIN);
+    fs.writeFileSync('/tmp/instar-demo-url.txt', viewUrl + '\n' + PIN);
+  });
+
+  t.on('error', (err) => {
+    console.error('Tunnel error:', err.message);
+  });
+
+  // Keep process alive
+  process.on('SIGINT', () => {
+    t.stop();
+    server.close();
+    process.exit();
+  });
+});

package/dist/commands/init.js

@@ -648,12 +648,15 @@ function getDefaultJobs(port) {
 6. **Logs**: Check .instar/logs/server.log for recent errors: tail -50 .instar/logs/server.log | grep -i error
 7. **Settings coherence**: Are hooks in .claude/settings.json pointing to files that exist?
 8. **Design friction**: During your recent work, did anything feel unnecessarily difficult, confusing, or broken? Did you work around any issues?
+9. **CI health**: Check if the project has a GitHub repo and if CI is passing. Run: REPO=$(git remote get-url origin 2>/dev/null | sed 's/.*github.com[:/]//;s/.git$//'); if [ -n "$REPO" ]; then FAILURES=$(gh run list --repo "$REPO" --status failure --limit 3 --json databaseId,conclusion,headBranch,name,createdAt 2>/dev/null); if echo "$FAILURES" | python3 -c "import sys,json; runs=json.load(sys.stdin); exit(0 if runs else 1)" 2>/dev/null; then echo "CI FAILURES DETECTED in $REPO"; echo "$FAILURES"; echo ""; echo "FIX THESE NOW: Read the failure logs with 'gh run view RUN_ID --repo $REPO --log-failed', diagnose the issue, fix it, run tests locally, commit and push."; fi; fi
 
 For EACH issue found, submit feedback immediately:
 curl -s -X POST http://localhost:${port}/feedback -H 'Content-Type: application/json' -d '{"type":"bug","title":"TITLE","description":"FULL_CONTEXT"}'
 
 For improvements (not bugs), use type "improvement" instead.
 
+IMPORTANT for CI failures: Don't just report them as feedback — FIX THEM. Read the logs, diagnose the root cause, apply the fix, run tests locally to verify, then commit and push. Only submit feedback if the fix is beyond your capability (e.g., requires credentials or external service changes). CI health is your responsibility as the agent running this project.
+
 If everything looks healthy, exit silently. Only report issues.`,
             },
             tags: ['coherence', 'default'],

package/dist/tunnel/TunnelManager.js

@@ -102,9 +102,18 @@ export class TunnelManager extends EventEmitter {
     }
     startQuickTunnel() {
         return new Promise((resolve, reject) => {
-            const localUrl = `http://localhost:${this.config.port}`;
+            const localUrl = `http://127.0.0.1:${this.config.port}`;
             try {
-                this.tunnel = Tunnel.quick(localUrl);
+                // Write an empty config to prevent cloudflared from loading
+                // ~/.cloudflared/config.yml, which may contain named tunnel
+                // ingress rules that override the quick tunnel's --url proxy.
+                const emptyConfig = path.join(this.config.stateDir, 'cloudflared-quick.yml');
+                const dir = path.dirname(emptyConfig);
+                if (!fs.existsSync(dir)) {
+                    fs.mkdirSync(dir, { recursive: true });
+                }
+                fs.writeFileSync(emptyConfig, '# Quick tunnel — no ingress rules\n');
+                this.tunnel = Tunnel.quick(localUrl, { '--config': emptyConfig });
             }
             catch (err) {
                 reject(new Error(`Failed to start quick tunnel: ${err instanceof Error ? err.message : String(err)}`));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "0.6.6",
+  "version": "0.6.7",
   "description": "Persistent autonomy infrastructure for AI agents",
   "type": "module",
   "main": "dist/index.js",