instar 0.6.6 → 0.6.8

package/_demo.mjs

@@ -0,0 +1,78 @@
+import { PrivateViewer } from './dist/publishing/PrivateViewer.js';
+import express from 'express';
+import { Tunnel } from 'cloudflared';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+
+const PIN = '1234';
+
+// Set up viewer
+const viewsDir = path.join(os.tmpdir(), 'instar-demo-views-' + Date.now());
+fs.mkdirSync(viewsDir, { recursive: true });
+const viewer = new PrivateViewer({ viewsDir });
+
+// Create test view with PIN
+const view = viewer.create(
+  'Secret Test Report',
+  '# Hello from Instar\n\nThis is a **PIN-protected** private view.\n\nIf you can see this, the PIN worked!\n\n---\n\n*Served securely via Cloudflare Tunnel + PIN gate.*',
+  PIN
+);
+console.log('View created:', view.id);
+
+// Start express server
+const app = express();
+app.use(express.json());
+
+app.get('/view/:id', (req, res) => {
+  const v = viewer.get(req.params.id);
+  if (!v) return res.status(404).send('Not found');
+  if (v.pinHash) {
+    res.setHeader('Content-Type', 'text/html; charset=utf-8');
+    res.send(viewer.renderPinPage(v));
+  } else {
+    res.setHeader('Content-Type', 'text/html; charset=utf-8');
+    res.send(viewer.renderHtml(v));
+  }
+});
+
+app.post('/view/:id/unlock', (req, res) => {
+  const v = viewer.get(req.params.id);
+  if (!v) return res.status(404).send('Not found');
+  const pin = req.body?.pin;
+  if (!pin || !viewer.verifyPin(req.params.id, pin)) {
+    return res.status(403).json({ error: 'Incorrect PIN' });
+  }
+  res.setHeader('Content-Type', 'text/html; charset=utf-8');
+  res.send(viewer.renderHtml(v));
+});
+
+const server = app.listen(0, '127.0.0.1', () => {
+  const port = server.address().port;
+  console.log('Server on port', port);
+
+  const localUrl = `http://127.0.0.1:${port}`;
+  // Use explicit --config to prevent ~/.cloudflared/config.yml
+  // named tunnel ingress rules from overriding the quick tunnel
+  const cfgPath = path.join(os.tmpdir(), 'instar-demo-cf.yml');
+  fs.writeFileSync(cfgPath, '# Quick tunnel — no ingress rules\n');
+  const t = Tunnel.quick(localUrl, { '--config': cfgPath });
+
+  t.once('url', (tunnelUrl) => {
+    const viewUrl = `${tunnelUrl}/view/${view.id}`;
+    console.log('TUNNEL_URL=' + viewUrl);
+    console.log('PIN=' + PIN);
+    fs.writeFileSync('/tmp/instar-demo-url.txt', viewUrl + '\n' + PIN);
+  });
+
+  t.on('error', (err) => {
+    console.error('Tunnel error:', err.message);
+  });
+
+  // Keep process alive
+  process.on('SIGINT', () => {
+    t.stop();
+    server.close();
+    process.exit();
+  });
+});

package/dist/commands/init.js

@@ -648,12 +648,15 @@ function getDefaultJobs(port) {
 6. **Logs**: Check .instar/logs/server.log for recent errors: tail -50 .instar/logs/server.log | grep -i error
 7. **Settings coherence**: Are hooks in .claude/settings.json pointing to files that exist?
 8. **Design friction**: During your recent work, did anything feel unnecessarily difficult, confusing, or broken? Did you work around any issues?
+9. **CI health**: Check if the project has a GitHub repo and if CI is passing. Run: REPO=$(git remote get-url origin 2>/dev/null | sed 's/.*github.com[:/]//;s/.git$//'); if [ -n "$REPO" ]; then FAILURES=$(gh run list --repo "$REPO" --status failure --limit 3 --json databaseId,conclusion,headBranch,name,createdAt 2>/dev/null); if echo "$FAILURES" | python3 -c "import sys,json; runs=json.load(sys.stdin); exit(0 if runs else 1)" 2>/dev/null; then echo "CI FAILURES DETECTED in $REPO"; echo "$FAILURES"; echo ""; echo "FIX THESE NOW: Read the failure logs with 'gh run view RUN_ID --repo $REPO --log-failed', diagnose the issue, fix it, run tests locally, commit and push."; fi; fi
 
 For EACH issue found, submit feedback immediately:
 curl -s -X POST http://localhost:${port}/feedback -H 'Content-Type: application/json' -d '{"type":"bug","title":"TITLE","description":"FULL_CONTEXT"}'
 
 For improvements (not bugs), use type "improvement" instead.
 
+IMPORTANT for CI failures: Don't just report them as feedback — FIX THEM. Read the logs, diagnose the root cause, apply the fix, run tests locally to verify, then commit and push. Only submit feedback if the fix is beyond your capability (e.g., requires credentials or external service changes). CI health is your responsibility as the agent running this project.
+
 If everything looks healthy, exit silently. Only report issues.`,
             },
             tags: ['coherence', 'default'],

package/dist/server/routes.js

@@ -173,6 +173,64 @@ export function createRoutes(ctx) {
             monitoring: ctx.config.monitoring,
         });
     });
+    // ── CI Health ─────────────────────────────────────────────────────
+    //
+    // On-demand CI status check. Detects GitHub repo from git remote and
+    // queries GitHub Actions for recent failures. Agents can use this to
+    // check CI health without waiting for the next self-diagnosis cycle.
+    router.get('/ci', (_req, res) => {
+        const projectDir = ctx.config.projectDir;
+        // Detect GitHub repo from git remote
+        let repo = null;
+        try {
+            const remoteUrl = execFileSync('git', ['remote', 'get-url', 'origin'], {
+                cwd: projectDir,
+                encoding: 'utf-8',
+                timeout: 5000,
+                stdio: ['pipe', 'pipe', 'pipe'],
+            }).trim();
+            // Extract owner/repo from SSH or HTTPS URL
+            const match = remoteUrl.match(/github\.com[:/](.+?)(?:\.git)?$/);
+            if (match)
+                repo = match[1];
+        }
+        catch {
+            // Not a git repo or no remote
+        }
+        if (!repo) {
+            res.json({ status: 'unknown', message: 'No GitHub repo detected', runs: [] });
+            return;
+        }
+        // Query recent CI runs
+        try {
+            const result = execFileSync('gh', [
+                'run', 'list', '--repo', repo, '--limit', '5',
+                '--json', 'databaseId,conclusion,status,headBranch,name,createdAt',
+            ], {
+                encoding: 'utf-8',
+                timeout: 15000,
+                stdio: ['pipe', 'pipe', 'pipe'],
+            });
+            const runs = JSON.parse(result);
+            const failures = runs.filter((r) => r.conclusion === 'failure');
+            const inProgress = runs.filter((r) => r.status === 'in_progress');
+            res.json({
+                repo,
+                status: failures.length > 0 ? 'failing' : inProgress.length > 0 ? 'in_progress' : 'passing',
+                failureCount: failures.length,
+                inProgressCount: inProgress.length,
+                runs,
+            });
+        }
+        catch (err) {
+            res.json({
+                repo,
+                status: 'error',
+                message: err instanceof Error ? err.message : 'gh CLI failed',
+                runs: [],
+            });
+        }
+    });
     // ── Sessions ────────────────────────────────────────────────────
     // Literal routes BEFORE parameterized routes to avoid capture
     router.get('/sessions/tmux', (_req, res) => {

package/dist/tunnel/TunnelManager.js

@@ -102,9 +102,18 @@ export class TunnelManager extends EventEmitter {
     }
     startQuickTunnel() {
         return new Promise((resolve, reject) => {
-            const localUrl = `http://localhost:${this.config.port}`;
+            const localUrl = `http://127.0.0.1:${this.config.port}`;
             try {
-                this.tunnel = Tunnel.quick(localUrl);
+                // Write an empty config to prevent cloudflared from loading
+                // ~/.cloudflared/config.yml, which may contain named tunnel
+                // ingress rules that override the quick tunnel's --url proxy.
+                const emptyConfig = path.join(this.config.stateDir, 'cloudflared-quick.yml');
+                const dir = path.dirname(emptyConfig);
+                if (!fs.existsSync(dir)) {
+                    fs.mkdirSync(dir, { recursive: true });
+                }
+                fs.writeFileSync(emptyConfig, '# Quick tunnel — no ingress rules\n');
+                this.tunnel = Tunnel.quick(localUrl, { '--config': emptyConfig });
             }
             catch (err) {
                 reject(new Error(`Failed to start quick tunnel: ${err instanceof Error ? err.message : String(err)}`));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "0.6.6",
+  "version": "0.6.8",
   "description": "Persistent autonomy infrastructure for AI agents",
   "type": "module",
   "main": "dist/index.js",