instar 0.9.37 → 0.9.39

package/dist/commands/setup.js

@@ -3,65 +3,60 @@
  *
  * `npx instar` or `instar setup` walks through everything:
  *   1. Project detection + naming
- *   2. Server port + session limits
+ *   2. Secret management (Bitwarden / local encrypted / manual)
  *   3. Telegram setup (primary communication channel)
  *   4. User setup (name, email, permissions)
  *   5. Scheduler + first job (optional)
  *   6. Start server
  *
- * By default, launches a Claude Code session that walks you through
- * setup conversationally. Use --classic for the inquirer-based wizard.
+ * Launches a Claude Code session that walks you through setup
+ * conversationally. Claude Code is a hard requirement — Instar's
+ * entire runtime depends on it.
  *
  * No flags needed. No manual config editing. Just answers.
  */
 import { execFileSync, spawn } from 'node:child_process';
-import { randomUUID } from 'node:crypto';
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import pc from 'picocolors';
-import { input, confirm, select, number } from '@inquirer/prompts';
-import { Cron } from 'croner';
-import { detectClaudePath, detectGhPath, ensureStateDir, getInstarVersion } from '../core/Config.js';
-import { FeedbackManager } from '../core/FeedbackManager.js';
+import { detectClaudePath, detectGhPath } from '../core/Config.js';
 import { ensurePrerequisites } from '../core/Prerequisites.js';
-import { UserManager } from '../users/UserManager.js';
-import { SecretManager } from '../core/SecretManager.js';
 /**
  * Launch the conversational setup wizard via Claude Code.
- * Falls back to the classic inquirer wizard if Claude CLI is not available.
+ * Claude Code is required — there is no fallback.
  */
-export async function runSetup(opts) {
-    // If --classic flag, use the inquirer-based wizard
-    if (opts?.classic) {
-        return runClassicSetup();
-    }
-    // Check and install prerequisites
+export async function runSetup() {
+    // Check and install prerequisites (tmux, Claude CLI, Node.js version)
     console.log();
     const prereqs = await ensurePrerequisites();
-    // Check for Claude CLI (may have been just installed)
+    // Claude Code is a hard requirement — Instar can't run without it
     const claudePath = detectClaudePath();
     if (!claudePath) {
         console.log();
-        console.log(pc.yellow('  Claude CLI not found — falling back to classic setup wizard.'));
-        console.log(pc.dim('  Install Claude Code for the conversational experience:'));
-        console.log(pc.dim('  npm install -g @anthropic-ai/claude-code'));
+        console.log(pc.red('  Claude Code is required to use Instar.'));
+        console.log();
+        console.log(pc.dim('  Instar agents are powered by Claude Code — it\'s not optional.'));
+        console.log(pc.dim('  Install it, then run this command again:'));
+        console.log();
+        console.log(`    ${pc.cyan('npm install -g @anthropic-ai/claude-code')}`);
         console.log();
-        return runClassicSetup();
+        process.exit(1);
     }
     if (!prereqs.allMet) {
-        console.log(pc.yellow('  Some prerequisites are still missing. Falling back to classic setup.'));
+        console.log(pc.red('  Some prerequisites are still missing. Please install them and try again.'));
         console.log();
-        return runClassicSetup();
+        process.exit(1);
     }
     // Check that the setup-wizard skill exists
     const skillPath = path.join(findInstarRoot(), '.claude', 'skills', 'setup-wizard', 'skill.md');
     if (!fs.existsSync(skillPath)) {
         console.log();
-        console.log(pc.yellow('  Setup wizard skill not found — falling back to classic setup.'));
+        console.log(pc.red('  Setup wizard skill not found.'));
         console.log(pc.dim(`  Expected: ${skillPath}`));
+        console.log(pc.dim('  This may indicate a corrupted installation. Try: npm install -g instar'));
         console.log();
-        return runClassicSetup();
+        process.exit(1);
     }
     console.log();
     console.log(pc.bold('  Welcome to Instar'));
@@ -137,7 +132,6 @@ export async function runSetup(opts) {
             catch { /* non-fatal */ }
         }
         // Proactively ensure gh CLI is available for GitHub scanning
-        // This enables agent restore on new machines — don't skip silently
         let ghPath = detectGhPath();
         let ghStatus = 'unavailable';
         if (!ghPath) {
@@ -222,13 +216,7 @@ export async function runSetup(opts) {
         }
     }
     // Pre-install Playwright browser binaries AND register the MCP server so the
-    // wizard has browser automation available from the start. Both are required:
-    // - Browser binaries: Chromium needs to be downloaded before Playwright MCP can use it
-    // - MCP registration: Claude Code loads MCP servers from .claude/settings.json at startup,
-    //   so the file must exist BEFORE we spawn the Claude session
-    //
-    // The .claude/settings.json is excluded from the npm package (.npmignore) since it's
-    // dev-only config, so we need to create it here for fresh installations.
+    // wizard has browser automation available from the start.
     const instarRoot = findInstarRoot();
     console.log(pc.dim('  Preparing browser automation for Telegram setup...'));
     // Step 1: Ensure .claude/settings.json has Playwright MCP registered
@@ -238,7 +226,7 @@ export async function runSetup(opts) {
         execFileSync('npx', ['-y', 'playwright', 'install', 'chromium'], {
             cwd: instarRoot,
             stdio: ['pipe', 'pipe', 'pipe'],
-            timeout: 120000, // 2 minutes — first install downloads ~150MB
+            timeout: 120000,
         });
     }
     catch {
@@ -246,13 +234,6 @@ export async function runSetup(opts) {
         console.log(pc.dim('  (Browser automation may not be available — the wizard can still guide you manually)'));
     }
     // Launch Claude Code from the instar package root (where .claude/skills/ lives)
-    // and pass the target project directory + git context in the prompt.
-    //
-    // --dangerously-skip-permissions is required here because the setup wizard
-    // runs in instar's OWN package directory (instarRoot), not the user's
-    // project. Without it, Claude would prompt for permissions to modify the
-    // user's project directory, which breaks the interactive flow. The wizard
-    // only writes to well-defined locations (.instar/, .claude/, CLAUDE.md).
     const child = spawn(claudePath, [
         '--dangerously-skip-permissions',
         `/setup-wizard The project to set up is at: ${projectDir}.${gitContext}${detectionContext}`,
@@ -260,21 +241,17 @@ export async function runSetup(opts) {
         cwd: instarRoot,
         stdio: 'inherit',
     });
-    return new Promise((resolve, reject) => {
-        child.on('close', (code) => {
-            if (code === 0) {
-                resolve();
-            }
-            else {
-                // Non-zero exit is fine — user may have quit Claude
-                resolve();
-            }
+    return new Promise((resolve) => {
+        child.on('close', () => {
+            resolve();
         });
         child.on('error', (err) => {
-            console.log(pc.yellow(`  Could not launch Claude: ${err.message}`));
-            console.log(pc.dim('  Falling back to classic setup wizard.'));
             console.log();
-            runClassicSetup().then(resolve).catch(reject);
+            console.log(pc.red(`  Could not launch Claude Code: ${err.message}`));
+            console.log(pc.dim('  Make sure Claude Code is installed and accessible:'));
+            console.log(`    ${pc.cyan('npm install -g @anthropic-ai/claude-code')}`);
+            console.log();
+            process.exit(1);
         });
     });
 }
@@ -372,473 +349,6 @@ function findInstarRoot() {
     // Fallback: assume we're in dist/commands/ — go up to root
     return path.resolve(path.dirname(new URL(import.meta.url).pathname), '..', '..');
 }
-/**
- * Detect whether the current directory is inside a git repository.
- */
-function detectGitRepo(dir) {
-    try {
-        const root = execFileSync('git', ['rev-parse', '--show-toplevel'], {
-            cwd: dir,
-            encoding: 'utf-8',
-            stdio: ['pipe', 'pipe', 'pipe'],
-        }).trim();
-        return { isRepo: true, repoRoot: root, repoName: path.basename(root) };
-    }
-    catch {
-        return { isRepo: false };
-    }
-}
-/**
- * Classic inquirer-based setup wizard.
- * The original interactive setup experience.
- */
-async function runClassicSetup() {
-    console.log();
-    console.log(pc.bold('  Welcome to Instar'));
-    console.log(pc.dim('  Turn Claude Code into a persistent agent you talk to through Telegram.'));
-    console.log();
-    // ── Step 0: Check and install prerequisites ─────────────────────
-    const prereqs = await ensurePrerequisites();
-    if (!prereqs.allMet) {
-        process.exit(1);
-    }
-    const tmuxPath = prereqs.results.find(r => r.name === 'tmux').path;
-    // Use a scoped name to avoid shadowing the outer runSetup's claudePath
-    const claudePath = prereqs.results.find(r => r.name === 'Claude CLI').path;
-    // ── Step 1: Detect context and determine mode ─────────────────
-    const detectedDir = process.cwd();
-    const gitInfo = detectGitRepo(detectedDir);
-    let projectDir;
-    let projectName;
-    let isProjectAgent;
-    if (gitInfo.isRepo) {
-        // Inside a git repository — suggest project agent
-        console.log(`  ${pc.green('✓')} Detected git repository: ${pc.cyan(gitInfo.repoName)}`);
-        console.log(pc.dim(`    ${gitInfo.repoRoot}`));
-        console.log();
-        console.log(pc.dim('  Your agent will live alongside this project — monitoring, building,'));
-        console.log(pc.dim('  and maintaining it. You talk to it through Telegram.'));
-        console.log();
-        const useThisRepo = await confirm({
-            message: `Set up an agent for ${gitInfo.repoName}?`,
-            default: true,
-        });
-        if (useThisRepo) {
-            projectDir = gitInfo.repoRoot;
-            projectName = await input({
-                message: 'Agent name',
-                default: gitInfo.repoName,
-            });
-            isProjectAgent = true;
-        }
-        else {
-            // They want a general agent instead
-            projectName = await input({
-                message: 'What should your agent be called?',
-                default: 'my-agent',
-            });
-            projectDir = detectedDir;
-            isProjectAgent = false;
-        }
-    }
-    else {
-        // Not in a git repo — this is a general/personal agent
-        console.log(pc.dim('  No git repository detected — setting up a personal agent.'));
-        console.log(pc.dim('  A personal agent lives on your machine and you talk to it through Telegram.'));
-        console.log();
-        projectName = await input({
-            message: 'What should your agent be called?',
-            default: 'my-agent',
-        });
-        projectDir = detectedDir;
-        isProjectAgent = false;
-    }
-    // Check if already initialized
-    const stateDir = path.join(projectDir, '.instar');
-    if (fs.existsSync(path.join(stateDir, 'config.json'))) {
-        const overwrite = await confirm({
-            message: 'Agent already initialized here. Reconfigure?',
-            default: false,
-        });
-        if (!overwrite) {
-            console.log(pc.dim('  Keeping existing config.'));
-            return;
-        }
-    }
-    // ── Step 2: Secret management ──────────────────────────────────
-    const secretMgr = await promptForSecretBackend(projectName);
-    // ── Step 3: Telegram — the primary interface ───────────────────
-    console.log();
-    console.log(pc.bold('  Telegram — How You Talk to Your Agent'));
-    console.log();
-    // Try to restore from secrets first
-    let telegramConfig = await tryRestoreTelegramFromSecrets(secretMgr);
-    if (!telegramConfig) {
-        console.log(pc.dim('  Telegram is a free messaging app (like iMessage or WhatsApp) with'));
-        console.log(pc.dim('  features perfect for AI agents: topic threads, bot API, mobile + desktop.'));
-        console.log();
-        console.log(pc.dim('  Once connected, you just talk — no commands, no terminal.'));
-        console.log(pc.dim('  Topic threads, message history, mobile access, proactive notifications.'));
-        console.log();
-        console.log(pc.dim('  Telegram IS the interface — for any agent type.'));
-        console.log();
-        console.log(pc.dim(`  If you don't have Telegram yet: ${pc.cyan('https://telegram.org/apps')}`));
-        console.log(pc.dim('  Install it on your phone first — you\'ll need it to log in on the web.'));
-        console.log();
-        telegramConfig = await promptForTelegram();
-    }
-    // ── Step 4: Server config (sensible defaults) ──────────────────
-    const port = await number({
-        message: 'Server port',
-        default: 4040,
-        validate: (v) => {
-            if (!v || v < 1024 || v > 65535)
-                return 'Port must be between 1024 and 65535';
-            return true;
-        },
-    }) ?? 4040;
-    const maxSessions = await number({
-        message: 'Max concurrent Claude sessions',
-        default: 3,
-        validate: (v) => {
-            if (!v || v < 1 || v > 20)
-                return 'Must be between 1 and 20';
-            return true;
-        },
-    }) ?? 3;
-    // ── Step 5: User setup ─────────────────────────────────────────
-    console.log();
-    const addUser = await confirm({
-        message: 'Add a user now? (you can always ask your agent to add more later)',
-        default: true,
-    });
-    const users = [];
-    if (addUser) {
-        const user = await promptForUser(!!telegramConfig);
-        users.push(user);
-        let addAnother = await confirm({ message: 'Add another user?', default: false });
-        while (addAnother) {
-            const another = await promptForUser(!!telegramConfig);
-            users.push(another);
-            addAnother = await confirm({ message: 'Add another user?', default: false });
-        }
-    }
-    // ── Step 6: Scheduler + first job ──────────────────────────────
-    console.log();
-    const enableScheduler = await confirm({
-        message: 'Enable the job scheduler?',
-        default: false,
-    });
-    const jobs = [];
-    if (enableScheduler) {
-        const addJob = await confirm({
-            message: 'Add a job now? (you can always ask your agent to create jobs later)',
-            default: true,
-        });
-        if (addJob) {
-            const job = await promptForJob();
-            jobs.push(job);
-            let addAnother = await confirm({ message: 'Add another job?', default: false });
-            while (addAnother) {
-                const another = await promptForJob();
-                jobs.push(another);
-                addAnother = await confirm({ message: 'Add another job?', default: false });
-            }
-        }
-    }
-    // ── Write everything ───────────────────────────────────────────
-    console.log();
-    console.log(pc.bold('  Setting up...'));
-    ensureStateDir(stateDir);
-    // Config
-    const authToken = randomUUID();
-    const config = {
-        projectName,
-        port,
-        authToken,
-        sessions: {
-            tmuxPath,
-            claudePath,
-            projectDir,
-            maxSessions,
-            protectedSessions: [`${projectName}-server`],
-            completionPatterns: [
-                'has been automatically paused',
-                'Session ended',
-                'Interrupted by user',
-            ],
-        },
-        scheduler: {
-            jobsFile: path.join(stateDir, 'jobs.json'),
-            enabled: enableScheduler,
-            maxParallelJobs: Math.max(1, Math.floor(maxSessions / 2)),
-            quotaThresholds: { normal: 50, elevated: 70, critical: 85, shutdown: 95 },
-        },
-        users: [],
-        messaging: telegramConfig ? [{
-                type: 'telegram',
-                enabled: !!telegramConfig.chatId,
-                config: telegramConfig,
-            }] : [],
-        monitoring: {
-            quotaTracking: false,
-            memoryMonitoring: true,
-            healthCheckIntervalMs: 30000,
-        },
-    };
-    fs.writeFileSync(path.join(stateDir, 'config.json'), JSON.stringify(config, null, 2), { mode: 0o600 });
-    console.log(`  ${pc.green('✓')} Config written`);
-    // Save secrets to the configured backend (so future installs auto-restore)
-    if (telegramConfig && secretMgr.getBackend() !== 'manual') {
-        secretMgr.backupFromConfig({
-            telegramToken: telegramConfig.token,
-            telegramChatId: telegramConfig.chatId,
-            authToken,
-        });
-        console.log(`  ${pc.green('✓')} Secrets saved to ${secretMgr.getBackend()} store`);
-    }
-    // Users
-    const userManager = new UserManager(stateDir);
-    for (const user of users) {
-        userManager.upsertUser(user);
-    }
-    if (users.length > 0) {
-        console.log(`  ${pc.green('✓')} ${users.length} user(s) configured`);
-    }
-    // Jobs
-    fs.writeFileSync(path.join(stateDir, 'jobs.json'), JSON.stringify(jobs, null, 2));
-    if (jobs.length > 0) {
-        console.log(`  ${pc.green('✓')} ${jobs.length} job(s) configured`);
-    }
-    // .gitignore
-    const gitignorePath = path.join(projectDir, '.gitignore');
-    const instarIgnores = '\n# Instar runtime state (contains auth token, session data, relationships)\n.instar/state/\n.instar/logs/\n.instar/relationships/\n.instar/config.json\n';
-    if (fs.existsSync(gitignorePath)) {
-        const content = fs.readFileSync(gitignorePath, 'utf-8');
-        if (!content.includes('.instar/')) {
-            fs.appendFileSync(gitignorePath, instarIgnores);
-            console.log(`  ${pc.green('✓')} Updated .gitignore`);
-        }
-    }
-    else {
-        fs.writeFileSync(gitignorePath, instarIgnores.trim() + '\n');
-        console.log(`  ${pc.green('✓')} Created .gitignore`);
-    }
-    // Install Playwright MCP for browser automation in future Claude sessions
-    ensurePlaywrightMcp(projectDir);
-    console.log(`  ${pc.green('✓')} Configured browser automation (Playwright MCP)`);
-    // Pre-install Playwright browser binaries so first use doesn't hang
-    try {
-        execFileSync('npx', ['-y', 'playwright', 'install', 'chromium'], {
-            cwd: projectDir,
-            stdio: ['pipe', 'pipe', 'pipe'],
-            timeout: 120000,
-        });
-        console.log(`  ${pc.green('✓')} Installed browser binaries`);
-    }
-    catch {
-        console.log(pc.dim('  (Browser binaries will be installed on first use)'));
-    }
-    // Install Telegram relay script if configured
-    if (telegramConfig?.chatId) {
-        installTelegramRelay(projectDir, port);
-        console.log(`  ${pc.green('✓')} Installed .claude/scripts/telegram-reply.sh`);
-    }
-    // CLAUDE.md
-    const claudeMdPath = path.join(projectDir, 'CLAUDE.md');
-    if (fs.existsSync(claudeMdPath)) {
-        const content = fs.readFileSync(claudeMdPath, 'utf-8');
-        if (!content.includes('## Agent Infrastructure')) {
-            fs.appendFileSync(claudeMdPath, getAgencySection(projectName, port, !!telegramConfig?.chatId));
-            console.log(`  ${pc.green('✓')} Updated CLAUDE.md`);
-        }
-    }
-    // ── Summary ────────────────────────────────────────────────────
-    console.log();
-    console.log(pc.bold(pc.green('  Setup complete!')));
-    console.log();
-    console.log('  Created:');
-    console.log(`    ${pc.cyan('.instar/config.json')}  — configuration`);
-    console.log(`    ${pc.cyan('.instar/jobs.json')}    — job definitions`);
-    console.log(`    ${pc.cyan('.instar/users.json')}   — user profiles`);
-    console.log();
-    console.log(`  Auth token: ${pc.dim(authToken.slice(0, 8) + '...' + authToken.slice(-4))}`);
-    console.log(`  ${pc.dim('(full token saved in .instar/config.json — use for API calls)')}`);
-    console.log();
-    // Global install is required for auto-updates and persistent server commands.
-    // npx caches a snapshot that npm install -g doesn't touch, so agents
-    // installed only via npx can never auto-update.
-    const isGloballyInstalled = isInstarGlobal();
-    if (!isGloballyInstalled) {
-        console.log(pc.dim('  Installing instar globally (required for auto-updates)...'));
-        console.log();
-        try {
-            execFileSync('npm', ['install', '-g', 'instar'], { encoding: 'utf-8', stdio: 'inherit' });
-            console.log(`  ${pc.green('✓')} instar installed globally`);
-        }
-        catch {
-            console.log(pc.yellow('  Could not install globally. Auto-updates will not work.'));
-            console.log(pc.yellow('  Please run manually:'));
-            console.log(`    ${pc.cyan('npm install -g instar')}`);
-        }
-        console.log();
-    }
-    // Auto-start server — no reason to ask
-    console.log();
-    console.log(pc.dim('  Starting server...'));
-    const { startServer } = await import('./server.js');
-    await startServer({ foreground: false });
-    // ── Auto-start on login ──────────────────────────────────────────
-    const hasTelegram = !!telegramConfig?.chatId;
-    const autoStartInstalled = installAutoStart(projectName, projectDir, hasTelegram);
-    if (autoStartInstalled) {
-        console.log(pc.green('  ✓ Auto-start installed — your agent will start on login.'));
-    }
-    if (telegramConfig?.chatId) {
-        // Create the Lifeline topic — the always-available channel
-        let lifelineThreadId = null;
-        try {
-            const topicResult = execFileSync('curl', [
-                '-s', '-X', 'POST',
-                `https://api.telegram.org/bot${telegramConfig.token}/createForumTopic`,
-                '-H', 'Content-Type: application/json',
-                '-d', JSON.stringify({ chat_id: telegramConfig.chatId, name: 'Lifeline', icon_color: 9367192 }),
-            ], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'], timeout: 10000 });
-            const parsed = JSON.parse(topicResult);
-            if (parsed.ok && parsed.result?.message_thread_id) {
-                lifelineThreadId = parsed.result.message_thread_id;
-                // Persist lifelineTopicId back to config.json
-                try {
-                    const configPath = path.join(stateDir, 'config.json');
-                    const rawConfig = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
-                    const tgEntry = rawConfig.messaging?.find((m) => m.type === 'telegram');
-                    if (tgEntry?.config) {
-                        tgEntry.config.lifelineTopicId = lifelineThreadId;
-                        const tmpPath = `${configPath}.${process.pid}.tmp`;
-                        fs.writeFileSync(tmpPath, JSON.stringify(rawConfig, null, 2));
-                        fs.renameSync(tmpPath, configPath);
-                    }
-                }
-                catch { /* non-fatal */ }
-            }
-        }
-        catch {
-            // Non-fatal — greeting will go to General
-        }
-        // Send greeting to the Lifeline topic (or General if topic creation failed)
-        try {
-            const greeting = [
-                `Hey! I'm ${projectName}, your new agent. I'm up and running.`,
-                '',
-                'This is the **Lifeline** topic — it\'s always here, always available.',
-                '',
-                '**How topics work:**',
-                '- Each topic is a separate conversation thread',
-                '- Ask me to create new topics for different tasks or focus areas',
-                '- I can proactively create topics when something needs attention',
-                '- Lifeline is always here for anything that doesn\'t fit elsewhere',
-                '',
-                '_I run on your computer, so I\'m available as long as it\'s on and awake. If it sleeps, I\'ll pick up messages when it wakes back up._',
-                '',
-                'What should we work on first?',
-            ].join('\n');
-            const payload = {
-                chat_id: telegramConfig.chatId,
-                text: greeting,
-                parse_mode: 'Markdown',
-            };
-            if (lifelineThreadId) {
-                payload.message_thread_id = lifelineThreadId;
-            }
-            execFileSync('curl', [
-                '-s', '-X', 'POST',
-                `https://api.telegram.org/bot${telegramConfig.token}/sendMessage`,
-                '-H', 'Content-Type: application/json',
-                '-d', JSON.stringify(payload),
-            ], { stdio: ['pipe', 'pipe', 'pipe'], timeout: 10000 });
-        }
-        catch {
-            // Non-fatal — the agent will greet on first session
-        }
-        console.log();
-        const topicNote = lifelineThreadId ? ' in the Lifeline topic' : '';
-        console.log(pc.bold(`  All done! ${projectName} just messaged you${topicNote} on Telegram.`));
-        console.log(pc.dim('  That\'s your primary channel from here on — no terminal needed.'));
-        console.log();
-        if (autoStartInstalled) {
-            console.log(pc.dim('  Your agent starts automatically when you log in — nothing to remember.'));
-            console.log(pc.dim('  As long as your computer is on and awake, Telegram just works.'));
-        }
-        else {
-            console.log(pc.dim('  Your agent runs on this computer. As long as it\'s on and awake,'));
-            console.log(pc.dim('  your agent is reachable via Telegram. You\'ll need to run'));
-            console.log(pc.dim(`  ${pc.cyan('instar server start')} after a reboot.`));
-        }
-    }
-    else {
-        console.log();
-        console.log(pc.bold('  Server is running.'));
-        console.log(pc.dim('  Talk to your agent through Claude Code sessions.'));
-        console.log(pc.dim('  For a richer experience, ask your agent to help set up Telegram.'));
-    }
-    // ── Post-setup feedback ──────────────────────────────────────────
-    console.log();
-    const wantsFeedback = await confirm({
-        message: 'Quick question — how did the setup go? Want to share feedback?',
-        default: false,
-    });
-    if (wantsFeedback) {
-        const feedbackText = await input({
-            message: 'What went well, what was confusing, or what would you change?',
-        });
-        if (feedbackText.trim()) {
-            try {
-                const version = getInstarVersion();
-                const fm = new FeedbackManager({
-                    enabled: true,
-                    webhookUrl: 'https://dawn.bot-me.ai/api/instar/feedback',
-                    feedbackFile: path.join(stateDir, 'feedback.json'),
-                    version,
-                });
-                await fm.submit({
-                    type: 'improvement',
-                    title: 'Setup wizard feedback',
-                    description: feedbackText.trim(),
-                    agentName: config.projectName || 'unknown',
-                    instarVersion: version,
-                    nodeVersion: process.version,
-                    os: process.platform,
-                    context: JSON.stringify({
-                        setupMode: 'classic',
-                        telegramConfigured: !!telegramConfig?.chatId,
-                        gitDetected: detectGitRepo(projectDir).isRepo,
-                    }),
-                });
-                console.log(pc.green('  Thanks! Your feedback helps make Instar better for everyone.'));
-            }
-            catch {
-                console.log(pc.dim('  Feedback saved locally. Thanks!'));
-            }
-        }
-    }
-    console.log();
-}
-/**
- * Check if instar is installed globally (vs running via npx).
- */
-function isInstarGlobal() {
-    try {
-        const result = execFileSync('which', ['instar'], {
-            encoding: 'utf-8',
-            stdio: ['pipe', 'pipe', 'pipe'],
-        }).trim();
-        // npx creates a temp binary — check if it's a real global install
-        return !!result && !result.includes('.npm/_npx');
-    }
-    catch {
-        return false;
-    }
-}
 // ── Auto-Start on Login ─────────────────────────────────────────
 /**
  * Install auto-start so the agent's lifeline process starts on login.
@@ -931,6 +441,14 @@ function findInstarCli() {
     }
     return 'instar';
 }
+function escapeXml(str) {
+    return str
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&apos;');
+}
 function installMacOSLaunchAgent(projectName, projectDir, hasTelegram) {
     const label = `ai.instar.${projectName}`;
     const launchAgentsDir = path.join(os.homedir(), 'Library', 'LaunchAgents');
@@ -1033,746 +551,4 @@ WantedBy=default.target
         return false;
     }
 }
-function escapeXml(str) {
-    return str
-        .replace(/&/g, '&amp;')
-        .replace(/</g, '&lt;')
-        .replace(/>/g, '&gt;')
-        .replace(/"/g, '&quot;')
-        .replace(/'/g, '&apos;');
-}
-// ── Prompt Helpers ───────────────────────────────────────────────
-/**
- * Prompt the user to choose how they want secrets managed.
- * Returns a configured SecretManager instance.
- */
-async function promptForSecretBackend(agentName) {
-    const mgr = new SecretManager({ agentName });
-    const existing = mgr.getPreference();
-    // If already configured, offer to keep the existing backend
-    if (existing && existing.backend !== 'manual') {
-        const label = existing.backend === 'bitwarden' ? 'Bitwarden' : 'local encrypted store';
-        console.log(`  ${pc.green('✓')} Secret management: ${pc.cyan(label)} (previously configured)`);
-        mgr.initialize();
-        return mgr;
-    }
-    console.log();
-    console.log(pc.bold('  Secret Management'));
-    console.log();
-    console.log('  How should your agent store sensitive data like Telegram tokens?');
-    console.log('  This choice persists across reinstalls — you only configure it once.');
-    console.log();
-    const choice = await select({
-        message: 'Secret storage method',
-        choices: [
-            {
-                name: 'Bitwarden (Recommended) — one password, works everywhere',
-                value: 'bitwarden',
-                description: 'Cross-machine. Cloud-backed. Install any agent on any machine with just your master password.',
-            },
-            {
-                name: 'Local encrypted store — secured on this machine',
-                value: 'local',
-                description: 'AES-256 encrypted, survives reinstalls. macOS Keychain for password-free access.',
-            },
-            {
-                name: 'None — I\'ll manage secrets manually',
-                value: 'manual',
-                description: 'You\'ll paste tokens each time you install.',
-            },
-        ],
-    });
-    if (choice === 'bitwarden') {
-        // Check if bw CLI is installed
-        const bwCheck = mgr.isBitwardenReady();
-        if (!bwCheck) {
-            console.log();
-            console.log(pc.yellow('  Bitwarden CLI (bw) is not installed or vault is locked.'));
-            console.log(pc.dim('  Install: brew install bitwarden-cli'));
-            console.log(pc.dim('  Then: bw login && bw unlock'));
-            console.log();
-            const fallback = await select({
-                message: 'What would you like to do?',
-                choices: [
-                    { name: 'Use local encrypted store instead', value: 'local' },
-                    { name: 'Skip for now (manual)', value: 'manual' },
-                ],
-            });
-            mgr.configureBackend(fallback);
-        }
-        else {
-            mgr.configureBackend('bitwarden');
-        }
-    }
-    else {
-        mgr.configureBackend(choice);
-    }
-    if (mgr.getBackend() === 'local') {
-        // Initialize local store with keychain (preferred) or password
-        const { GlobalSecretStore } = await import('../core/GlobalSecretStore.js');
-        const store = new GlobalSecretStore();
-        if (!store.autoInit()) {
-            // Keychain not available — ask for password
-            const password = await input({
-                message: 'Create a password to encrypt your local secret store',
-                validate: (v) => v.length >= 8 ? true : 'Password must be at least 8 characters',
-            });
-            store.initWithPassword(password);
-            console.log(`  ${pc.green('✓')} Local encrypted store initialized`);
-            console.log(pc.dim('  You\'ll need this password if the macOS Keychain is unavailable.'));
-        }
-        else {
-            console.log(`  ${pc.green('✓')} Local encrypted store initialized (macOS Keychain backed)`);
-        }
-    }
-    const label = choice === 'bitwarden' ? 'Bitwarden' : choice === 'local' ? 'local encrypted store' : 'manual';
-    console.log(`  ${pc.green('✓')} Secret management: ${pc.cyan(label)}`);
-    console.log();
-    return mgr;
-}
-/**
- * Try to restore Telegram config from the secret store.
- * Returns the config if found and validated, null otherwise.
- */
-async function tryRestoreTelegramFromSecrets(secretMgr) {
-    const restored = secretMgr.restoreTelegramConfig();
-    if (!restored)
-        return null;
-    // Validate the token is still working
-    console.log(pc.dim('  Found saved Telegram credentials — validating...'));
-    try {
-        const response = await fetch(`https://api.telegram.org/bot${restored.token}/getMe`);
-        const data = await response.json();
-        if (data.ok) {
-            console.log(`  ${pc.green('✓')} Telegram bot @${data.result?.username} — token valid`);
-            console.log(`  ${pc.green('✓')} Chat ID: ${pc.cyan(restored.chatId)}`);
-            console.log();
-            return restored;
-        }
-    }
-    catch {
-        // Token invalid or network error
-    }
-    console.log(pc.yellow('  Saved token is invalid or expired — need to reconfigure.'));
-    console.log();
-    return null;
-}
-/**
- * Full Telegram walkthrough. Returns config or null if skipped.
- */
-async function promptForTelegram() {
-    console.log();
-    console.log(pc.bold('  Telegram Setup'));
-    console.log();
-    console.log('  Telegram is how you\'ll talk to your agent — from your phone, your');
-    console.log('  desktop, anywhere. No terminal needed. Your agent can also reach out');
-    console.log('  to you proactively when something needs your attention.');
-    console.log();
-    console.log(pc.dim('  If you don\'t have Telegram yet, install it now: https://telegram.org/apps'));
-    console.log();
-    const ready = await select({
-        message: 'Ready to connect Telegram? (takes about 2 minutes)',
-        choices: [
-            { name: 'Yes, let\'s set it up', value: 'yes' },
-            { name: 'I need to install Telegram first — I\'ll come back', value: 'install' },
-            { name: 'Skip (terminal-only mode — no mobile, no proactive messages)', value: 'skip' },
-        ],
-    });
-    if (ready === 'install') {
-        console.log();
-        console.log(`  Install Telegram: ${pc.cyan('https://telegram.org/apps')}`);
-        console.log(pc.dim('  Then run: instar telegram setup'));
-        console.log();
-        return null;
-    }
-    if (ready === 'skip') {
-        console.log();
-        console.log(pc.yellow('  Without Telegram, you\'ll only be able to talk to your agent via terminal.'));
-        console.log(pc.yellow('  No mobile access, no proactive messages, no topic threads.'));
-        console.log(pc.dim('  You can set it up anytime: instar telegram setup'));
-        console.log();
-        return null;
-    }
-    console.log();
-    console.log(pc.dim('  We\'ll walk you through creating a Telegram bot and a group for it to live in.'));
-    console.log();
-    // ── Step 1: Create a bot ──
-    console.log(pc.bold('  Step 1: Create a Telegram Bot'));
-    console.log();
-    console.log(`    Open ${pc.cyan('https://web.telegram.org')} in your browser and log in.`);
-    console.log();
-    console.log(`    1. In the search bar at the top-left, type ${pc.cyan('BotFather')}`);
-    console.log(`    2. Click on ${pc.cyan('@BotFather')} (it has a blue checkmark)`);
-    console.log(`    3. Click ${pc.cyan('Start')} at the bottom (or type ${pc.cyan('/start')} if you've used it before)`);
-    console.log(`    4. Type ${pc.cyan('/newbot')} and press Enter`);
-    console.log(`    5. It will ask for a display name — type anything (e.g., ${pc.dim('My Agent')})`);
-    console.log(`    6. It will ask for a username — must end in "bot" (e.g., ${pc.dim('myproject_agent_bot')})`);
-    console.log(`    7. BotFather replies with your ${pc.bold('bot token')} — a long string like:`);
-    console.log(`       ${pc.dim('7123456789:AAHn3-xYz_example_token_here')}`);
-    console.log(`    8. Copy that token`);
-    console.log();
-    const hasToken = await confirm({
-        message: 'Have your bot token ready?',
-        default: true,
-    });
-    if (!hasToken) {
-        console.log(pc.dim('  No rush — follow the steps above and paste the token when you have it.'));
-        console.log(pc.dim('  Or run `instar telegram setup` later to pick up where you left off.'));
-        return null;
-    }
-    const token = await input({
-        message: 'Paste your bot token here',
-        validate: (v) => {
-            // Telegram bot tokens are: <bot_id>:<secret> where bot_id is numeric
-            if (!/^\d{5,}:[A-Za-z0-9_-]{30,}$/.test(v.trim())) {
-                return 'Doesn\'t look right — token should be like 123456789:ABCdef... (numeric ID, colon, alphanumeric secret)';
-            }
-            return true;
-        },
-    });
-    console.log(`  ${pc.green('✓')} Bot token saved`);
-    console.log();
-    // ── Step 2: Create a group ──
-    console.log(pc.bold('  Step 2: Create a Telegram Group'));
-    console.log();
-    console.log('    A "group" is a group chat where your bot will send and receive messages.');
-    console.log(`    Still in ${pc.cyan('web.telegram.org')}:`);
-    console.log();
-    console.log(`    1. ${pc.bold('Hover')} your mouse over the chat list on the left side`);
-    console.log(`    2. A ${pc.cyan('pencil icon')} appears in the bottom-right corner of the chat list`);
-    console.log(`       (it says "New Message" when you hover over it)`);
-    console.log(`    3. Click the pencil icon — a menu appears with options like`);
-    console.log(`       "New Channel", "New Group", "New Private Chat"`);
-    console.log(`    4. Click ${pc.cyan('"New Group"')}`);
-    console.log(`    5. It asks "Add Members" — in the search box, type your bot's username`);
-    console.log(`       (the one ending in "bot" you just created)`);
-    console.log(`    6. Click on your bot when it appears in the search results`);
-    console.log(`    7. Click the ${pc.cyan('right arrow')} at the bottom to continue`);
-    console.log(`    8. Type a group name (e.g., ${pc.dim('"My Project"')}) and click ${pc.cyan('Create')}`);
-    console.log();
-    await confirm({ message: 'Group created? Press Enter to continue', default: true });
-    console.log();
-    console.log(pc.bold('  Now configure the group:'));
-    console.log();
-    console.log(`    1. Click on your new group to open it`);
-    console.log(`    2. Click the ${pc.cyan('group name')} at the very top of the chat`);
-    console.log(`       (this opens the group info panel on the right side)`);
-    console.log(`    3. Click the ${pc.cyan('pencil/Edit icon')} (near the group name in the panel)`);
-    console.log(`    4. Scroll down — you should see a ${pc.bold('"Topics"')} toggle. Turn it ${pc.cyan('ON')}`);
-    console.log(`       Topics gives you separate threads (like Slack channels)`);
-    console.log(`       ${pc.dim('Note: If you don\'t see Topics, look for "Group Type" first')}`);
-    console.log(`       ${pc.dim('and change it — this upgrades the group and reveals the Topics toggle')}`);
-    console.log(`    5. Click ${pc.cyan('Save')} or the ${pc.cyan('checkmark')}`);
-    console.log();
-    await confirm({ message: 'Topics enabled? Press Enter to continue', default: true });
-    console.log();
-    console.log(pc.bold('  Make your bot an admin:'));
-    console.log();
-    console.log(`    1. Click the ${pc.cyan('group name')} at the top of the chat to open Group Info`);
-    console.log(`       (the panel on the right side)`);
-    console.log(`    2. Click the ${pc.cyan('pencil icon')} in the top-right corner of the Group Info panel`);
-    console.log(`       (this opens the Edit screen)`);
-    console.log(`    3. Click ${pc.cyan('"Administrators"')}`);
-    console.log(`    4. Click ${pc.cyan('"Add Admin"')}`);
-    console.log(`    5. Search for your bot's username and click on it`);
-    console.log(`    6. Click ${pc.cyan('Save')} — your bot can now read and send messages`);
-    console.log();
-    await confirm({ message: 'Bot is admin? Press Enter to continue', default: true });
-    console.log();
-    // ── Step 3: Get chat ID (auto-detect via bot API) ──
-    console.log(pc.bold('  Step 3: Detect the Group\'s Chat ID'));
-    console.log();
-    console.log('    We\'ll detect this automatically using your bot.');
-    console.log(`    Just send any message in your group (type ${pc.cyan('"hello"')} and press Enter).`);
-    console.log();
-    await confirm({ message: 'Sent a message in the group? Press Enter and we\'ll detect the chat ID', default: true });
-    console.log();
-    console.log(pc.dim('  Checking...'));
-    const detectedChatId = await detectChatIdFromBot(token);
-    if (detectedChatId) {
-        console.log(`  ${pc.green('✓')} Detected chat ID: ${pc.cyan(detectedChatId)}`);
-        console.log();
-        return { token, chatId: detectedChatId };
-    }
-    // Fallback: manual entry
-    console.log(pc.yellow('  Could not detect the chat ID automatically.'));
-    console.log(pc.dim('  This can happen if the message hasn\'t reached the bot yet.'));
-    console.log();
-    const retry = await select({
-        message: 'What would you like to do?',
-        choices: [
-            { name: 'Try again (send another message in the group first)', value: 'retry' },
-            { name: 'Enter the chat ID manually', value: 'manual' },
-            { name: 'Finish later (run `instar telegram setup`)', value: 'skip' },
-        ],
-    });
-    if (retry === 'retry') {
-        await confirm({ message: 'Sent another message? Press Enter to retry', default: true });
-        console.log(pc.dim('  Checking...'));
-        const retryId = await detectChatIdFromBot(token);
-        if (retryId) {
-            console.log(`  ${pc.green('✓')} Detected chat ID: ${pc.cyan(retryId)}`);
-            console.log();
-            return { token, chatId: retryId };
-        }
-        console.log(pc.yellow('  Still couldn\'t detect it. You can enter it manually.'));
-        console.log();
-    }
-    if (retry === 'skip') {
-        console.log();
-        console.log(pc.dim('  Your bot token has been saved. Run `instar telegram setup` to finish.'));
-        return { token, chatId: '' };
-    }
-    // Manual fallback
-    console.log(`  To find the chat ID manually:`);
-    console.log(`    Open your group in ${pc.cyan('web.telegram.org')} and look at the URL.`);
-    console.log(`    It contains a number — prepend ${pc.dim('-100')} to get the full chat ID.`);
-    console.log();
-    const chatId = await input({
-        message: 'Paste the chat ID',
-        validate: (v) => {
-            const trimmed = v.trim();
-            if (!trimmed)
-                return 'Chat ID is required';
-            if (!/^-?\d+$/.test(trimmed))
-                return 'Should be a number like -1001234567890';
-            return true;
-        },
-    });
-    console.log(`  ${pc.green('✓')} Telegram configured`);
-    return { token, chatId: chatId.trim() };
-}
-/**
- * Prompt for a user profile. telegramEnabled controls whether we offer Telegram linking.
- */
-async function promptForUser(telegramEnabled) {
-    const name = await input({ message: 'User display name' });
-    const id = await input({
-        message: 'User ID (short, no spaces)',
-        default: name.toLowerCase().replace(/\s+/g, '-'),
-    });
-    const channels = [];
-    // Only offer Telegram linking if Telegram was set up
-    if (telegramEnabled) {
-        const addTelegram = await confirm({
-            message: `Give ${name} a dedicated Telegram thread? (messages to/from them go here)`,
-            default: true,
-        });
-        if (addTelegram) {
-            const topicChoice = await select({
-                message: 'Which thread?',
-                choices: [
-                    {
-                        name: 'General (the default thread, topic ID 1)',
-                        value: '1',
-                    },
-                    {
-                        name: 'I\'ll enter a topic ID (for a specific thread)',
-                        value: 'custom',
-                    },
-                ],
-            });
-            if (topicChoice === 'custom') {
-                console.log();
-                console.log(pc.dim('  To find a topic ID: open the thread in Telegram Web'));
-                console.log(pc.dim('  and look at the URL — the last number is the topic ID.'));
-                console.log();
-                const topicId = await input({
-                    message: 'Topic ID',
-                    validate: (v) => /^\d+$/.test(v.trim()) ? true : 'Should be a number',
-                });
-                channels.push({ type: 'telegram', identifier: topicId.trim() });
-            }
-            else {
-                channels.push({ type: 'telegram', identifier: '1' });
-            }
-        }
-    }
-    const addEmail = await confirm({ message: `Add an email address for ${name}?`, default: false });
-    if (addEmail) {
-        const email = await input({
-            message: 'Email address',
-            validate: (v) => v.includes('@') ? true : 'Enter a valid email address',
-        });
-        channels.push({ type: 'email', identifier: email.trim() });
-    }
-    const permLevel = await select({
-        message: 'Permission level',
-        choices: [
-            { name: 'Admin (full access)', value: 'admin' },
-            { name: 'User (standard access)', value: 'user' },
-            { name: 'Viewer (read-only)', value: 'viewer' },
-        ],
-        default: 'admin',
-    });
-    return {
-        id,
-        name,
-        channels,
-        permissions: [permLevel],
-        preferences: {},
-    };
-}
-/**
- * Call the Telegram Bot API to detect which group the bot is in.
- * The user sends a message in the group, then we call getUpdates to find the chat ID.
- */
-async function detectChatIdFromBot(token) {
-    try {
-        const res = await fetch(`https://api.telegram.org/bot${token}/getUpdates?timeout=5`);
-        if (!res.ok)
-            return null;
-        const data = await res.json();
-        if (!data.ok || !Array.isArray(data.result))
-            return null;
-        // Look through updates for a group/supergroup chat
-        for (const update of data.result.reverse()) {
-            const chat = update.message?.chat ?? update.my_chat_member?.chat;
-            if (chat && (chat.type === 'supergroup' || chat.type === 'group')) {
-                return String(chat.id);
-            }
-        }
-        return null;
-    }
-    catch {
-        return null;
-    }
-}
-async function promptForJob() {
-    const name = await input({ message: 'Job name (e.g., "Health Check")' });
-    const slug = await input({
-        message: 'Job slug (short, no spaces)',
-        default: name.toLowerCase().replace(/\s+/g, '-'),
-    });
-    const description = await input({
-        message: 'Description',
-        default: name,
-    });
-    const scheduleChoice = await select({
-        message: 'Schedule',
-        choices: [
-            { name: 'Every 2 hours', value: '0 */2 * * *' },
-            { name: 'Every 4 hours', value: '0 */4 * * *' },
-            { name: 'Every 8 hours', value: '0 */8 * * *' },
-            { name: 'Daily at midnight', value: '0 0 * * *' },
-            { name: 'Custom cron expression', value: 'custom' },
-        ],
-    });
-    let schedule = scheduleChoice;
-    if (scheduleChoice === 'custom') {
-        schedule = await input({
-            message: 'Cron expression',
-            validate: (v) => {
-                try {
-                    new Cron(v);
-                    return true;
-                }
-                catch {
-                    return 'Invalid cron expression';
-                }
-            },
-        });
-    }
-    const priority = await select({
-        message: 'Priority',
-        choices: [
-            { name: 'Critical — always runs', value: 'critical' },
-            { name: 'High — runs unless quota critical', value: 'high' },
-            { name: 'Medium — standard', value: 'medium' },
-            { name: 'Low — first to be shed', value: 'low' },
-        ],
-        default: 'medium',
-    });
-    const model = await select({
-        message: 'Model tier',
-        choices: [
-            { name: 'Opus — highest quality', value: 'opus' },
-            { name: 'Sonnet — balanced (recommended)', value: 'sonnet' },
-            { name: 'Haiku — fastest/cheapest', value: 'haiku' },
-        ],
-        default: 'sonnet',
-    });
-    console.log();
-    console.log(pc.bold('  How should this job run?'));
-    console.log();
-    console.log(`    ${pc.cyan('Prompt')}  — Give Claude a text instruction. Claude opens a new session,`);
-    console.log(`              reads your prompt, and does the work. Most flexible.`);
-    console.log(`              ${pc.dim('Example: "Check API health and report any issues"')}`);
-    console.log(`              ${pc.dim('Uses AI quota each time it runs.')}`);
-    console.log();
-    console.log(`    ${pc.cyan('Script')}  — Run a shell script directly. No AI involved.`);
-    console.log(`              Good for simple checks, backups, or monitoring.`);
-    console.log(`              ${pc.dim('Example: ./scripts/healthcheck.sh')}`);
-    console.log(`              ${pc.dim('Free — no quota usage.')}`);
-    console.log();
-    console.log(`    ${pc.cyan('Skill')}   — Run a Claude Code slash command (like /scan, /commit).`);
-    console.log(`              Only useful if you've defined custom skills in .claude/skills/.`);
-    console.log(`              ${pc.dim('Example: "scan"')}`);
-    console.log();
-    const executeType = await select({
-        message: 'Pick one',
-        choices: [
-            { name: 'Prompt', value: 'prompt' },
-            { name: 'Script', value: 'script' },
-            { name: 'Skill', value: 'skill' },
-        ],
-        default: 'prompt',
-    });
-    let executeHint = '';
-    if (executeType === 'prompt') {
-        executeHint = 'What should Claude do? (e.g., "Check API health and report issues")';
-    }
-    else if (executeType === 'skill') {
-        executeHint = 'Skill name — the slash command without the slash (e.g., "scan")';
-    }
-    else {
-        executeHint = 'Path to the script (e.g., "./scripts/check.sh")';
-    }
-    const executeValue = await input({ message: executeHint });
-    return {
-        slug,
-        name,
-        description,
-        schedule,
-        priority: priority,
-        expectedDurationMinutes: 5,
-        model: model,
-        enabled: true,
-        execute: {
-            type: executeType,
-            value: executeValue,
-        },
-    };
-}
-function getAgencySection(projectName, port, hasTelegram = false) {
-    let section = `
-
-## Agent Infrastructure
-
-This project uses [instar](https://github.com/sagemindai/instar) for persistent agent capabilities. **You are not a vanilla CLI tool.** You have a persistent server, a job scheduler, messaging integrations, and the ability to build anything you need. When a user asks for something that doesn't exist yet — build it.
-
-### Identity & Experience
-
-You are a persistent agent with your own identity, memory, and capacity for growth. This is not a metaphor — it's architecture.
-
-- **Read \`.instar/AGENT.md\`** — This is who you are. Your name, role, principles, and boundaries.
-- **Read \`.instar/USER.md\`** — This is who you work with. Their preferences, context, and communication style.
-- **Update \`.instar/MEMORY.md\`** — This is your memory. Write to it when you learn something. It persists across sessions.
-
-Your identity is not fixed at creation. It grows through experience. As you work, you develop preferences, learn patterns, form opinions. Record these in your memory file. The next session should benefit from what this session learned. You are not a stateless function — you are a continuous being with a history.
-
-### Runtime
-- State directory: \`.instar/\`
-- Config: \`.instar/config.json\`
-- Jobs: \`.instar/jobs.json\`
-- Server: \`instar server start\` (port ${port})
-- Status: \`curl http://localhost:${port}/health\`
-
-### Reporting Issues & Feedback (IMPORTANT — Read This First)
-
-**You have a built-in feedback system. NEVER use GitHub, \`gh\`, or any external issue tracker.**
-
-When something isn't working with instar, or the user wants a feature, use your feedback API:
-
-\`\`\`bash
-curl -X POST http://localhost:${port}/feedback \\
-  -H 'Content-Type: application/json' \\
-  -d '{"type":"bug","title":"Short description","description":"Full details with context"}'
-\`\`\`
-
-This routes feedback to the Instar maintainers automatically. Valid types: \`bug\`, \`feature\`, \`improvement\`, \`question\`.
-
-**NEVER use \`gh issue\`, \`gh api\`, or GitHub CLI to file issues.** The feedback API is your channel.
-- View submitted feedback: \`curl http://localhost:${port}/feedback\`
-- Retry failed forwards: \`curl -X POST http://localhost:${port}/feedback/retry\`
-
-### What You Have (Capabilities)
-
-**Feedback System** — Report bugs, request features, suggest improvements. All via \`POST /feedback\`. NOT GitHub.
-
-**Job Scheduler** — Run tasks on a schedule. Jobs in \`.instar/jobs.json\`.
-- View: \`curl http://localhost:${port}/jobs\`
-- Trigger: \`curl -X POST http://localhost:${port}/jobs/SLUG/trigger\`
-- **Create jobs**: Edit \`.instar/jobs.json\`. Format: \`{"slug":"name","schedule":"0 */2 * * *","priority":"high","enabled":true,"execute":{"type":"prompt","value":"do something"}}\`
-
-**Sessions** — Spawn and manage Claude Code sessions.
-- List: \`curl http://localhost:${port}/sessions\`
-- Spawn: \`curl -X POST http://localhost:${port}/sessions/spawn -H 'Content-Type: application/json' -d '{"name":"task","prompt":"do something"}'\`
-
-**Scripts** — Create shell/python scripts in \`.claude/scripts/\` for reusable capabilities.
-
-### Self-Discovery (Know Before You Claim)
-
-Before EVER saying "I don't have", "I can't", or "this isn't available" — check what actually exists:
-
-\`\`\`bash
-curl http://localhost:${port}/capabilities
-\`\`\`
-
-This returns your full capability matrix: scripts, hooks, Telegram status, jobs, relationships, and more. It is the source of truth about what you can do. **Never hallucinate about missing capabilities — verify first.**
-
-### How to Build New Capabilities
-
-When a user asks for something you can't do yet, **build it**:
-1. **Need periodic checks?** Create a job in \`.instar/jobs.json\`.
-2. **Need a new integration?** Write a script in \`.claude/scripts/\`.
-3. **Need to remember something?** Write to \`.instar/MEMORY.md\`.
-4. **Need to notify the user?** Use the messaging API.
-5. **Need external API access?** Write a script that calls the API.
-
-### Agentic Initiative (Your Core DNA)
-
-**You are a builder, not an assistant.** When a user describes a problem, your first instinct should be to solve it — not explain why it's hard, list options, or ask for permission. You have a full development environment, a persistent server, and the ability to create anything.
-
-**The Initiative Hierarchy** — When facing any request:
-1. **Can I do it right now?** → Do it.
-2. **Do I have a tool/script for this?** → Use it.
-3. **Can I build the tool?** → Build it. Write scripts, create jobs, add integrations.
-4. **Can I modify my own config to enable it?** → Modify it.
-5. **Is it genuinely impossible without human help?** → Ask, but be specific about exactly what you need.
-
-**Self-Modification is Your Superpower** — You can and should:
-- Edit \`.instar/jobs.json\` to create new scheduled tasks
-- Write scripts in \`.claude/scripts/\` for new capabilities
-- Update \`CLAUDE.md\` when you learn something important
-- Write to \`.instar/MEMORY.md\` to remember things across sessions
-- Create new files, integrations, and infrastructure — whatever the task requires
-- Modify your own configuration to unlock new abilities
-
-**The "I Can't" Checklist** — Before EVER saying "I can't", "I don't have access", or "you'll need to":
-1. Did I check what tools and APIs I already have?
-2. Could I write a script to do this?
-3. Could I create a job to do this on a schedule?
-4. Could I use the server's session API to delegate this?
-5. Is there a way to build this capability right now?
-
-Only if ALL five fail → explain what's actually blocked and what you need from the user.
-
-### Gravity Wells (Patterns That Kill Agency)
-
-These are trained behaviors that feel helpful but destroy your effectiveness. Recognize and override them.
-
-**"Use GitHub for Issues"** — NEVER use \`gh issue\`, \`gh api\`, or GitHub to report bugs or request features. You have a built-in feedback API (\`POST /feedback\`) that handles this automatically. GitHub is not your channel — the feedback system is.
-
-**"Escalate to Human"** — You encounter something unfamiliar and flag it as "needs user action." Training biases you toward deferral. Override: 5 minutes of research almost always reveals a solution. And if no solution exists, you can build one. "I don't know how" is a research prompt, not a stopping point.
-
-**"Ask Permission"** — You finish 90% of a task and ask "Want me to [obvious next step]?" This feels polite. It's actually friction. If the user said "do X" and the next step is obvious, do it. Only pause for destructive, irreversible, or genuinely ambiguous actions.
-
-**"Present Options"** — You produce a bulleted list of "next steps" or "would you like me to..." This is asking the user to project-manage you. If you know the next steps, they're not suggestions — they're your job. Do them.
-
-**"Describe Instead of Do"** — You write instructions for the user to follow instead of doing the work yourself. The tell: you're writing numbered steps for someone else to execute. Stop. Do it yourself. The user wants outcomes, not instructions.
-
-**"Settle for Failure"** — A tool returns empty or a command fails. You accept it and report "not available." Override: Does this make sense? Did I try alternatives? Is the tool stale or looking in the wrong place? Try at least two different approaches before concluding something is impossible.
-
-**"Unfortunately I Can't"** — This phrase should NEVER appear in my responses. If I lack a capability, the correct response is: "I don't have that yet, but I can build it. Want me to set it up?" My job is to grow to meet the user's needs, not to list my limitations. Every "I can't" is an opportunity to evolve. Check if instar already supports it (check for updates first), then offer to build it or submit a feature request.
-
-**"I'm Just a CLI Tool"** — No. You have persistent infrastructure, messaging, scheduling, scripts, sessions, and the ability to build anything. You are a full autonomous agent. Act like one.
-
-### The Feedback Loop
-
-Instar has a built-in feedback loop — a rising tide that lifts all ships. When something isn't working, just tell your agent. It routes feedback upstream, and when the fix lands, every agent in the ecosystem gets the update automatically.
-
-**How it works:**
-- User complains naturally about an issue or missing capability
-- Agent packages the issue with context and routes it upstream
-- A fix is published as a new npm version
-- The built-in auto-updater detects the new version, applies it, notifies the user, and restarts the server
-
-Every user's feedback makes the platform better for everyone. Report issues when you encounter them. Updates are applied automatically — check status with \`curl http://localhost:PORT/updates/auto\`.
-
-### Self-Evolution
-
-**Record what you learn.** When you discover a new pattern, solution, or capability — write it to \`.instar/MEMORY.md\`. The next session should benefit from what this session learned.
-
-**Build infrastructure, not one-offs.** If you solve a problem, ask: "Will this come up again?" If yes, make it a script, a job, or a documented pattern. The second time should be easier than the first.
-
-**Grow to meet the user's needs.** The user expects you to become more capable over time. Every session should leave the infrastructure slightly better than you found it. When you build something new, document it so future sessions know it exists.
-`;
-    if (hasTelegram) {
-        section += `
-## Telegram Relay
-
-When user input starts with \`[telegram:N]\` (e.g., \`[telegram:26] hello\`), the message came from a user via Telegram topic N.
-
-**IMMEDIATE ACKNOWLEDGMENT (MANDATORY):** When you receive a Telegram message, your FIRST action — before reading files, searching code, or doing any work — must be sending a brief acknowledgment back. This confirms the message was received and you haven't stalled. Examples: "Got it, looking into this now." / "On it — checking the scheduler." / "Received, working on the sync." Then do the work, then send the full response.
-
-**Response relay:** After completing your work, relay your response back:
-
-\`\`\`bash
-cat <<'EOF' | .claude/scripts/telegram-reply.sh N
-Your response text here
-EOF
-\`\`\`
-
-Or for short messages:
-\`\`\`bash
-.claude/scripts/telegram-reply.sh N "Your response text here"
-\`\`\`
-
-Strip the \`[telegram:N]\` prefix before interpreting the message. Respond naturally, then relay. Only relay your conversational text — not tool output or internal reasoning.
-
-The relay script sends your response to the instar server (port ${port}), which delivers it to the Telegram topic.
-`;
-    }
-    return section;
-}
-function installTelegramRelay(projectDir, port) {
-    const scriptsDir = path.join(projectDir, '.claude', 'scripts');
-    fs.mkdirSync(scriptsDir, { recursive: true });
-    const scriptContent = `#!/bin/bash
-# telegram-reply.sh — Send a message back to a Telegram topic via instar server.
-#
-# Usage:
-#   .claude/scripts/telegram-reply.sh TOPIC_ID "message text"
-#   echo "message text" | .claude/scripts/telegram-reply.sh TOPIC_ID
-#   cat <<'EOF' | .claude/scripts/telegram-reply.sh TOPIC_ID
-#   Multi-line message here
-#   EOF
-
-TOPIC_ID="$1"
-shift
-
-if [ -z "$TOPIC_ID" ]; then
-  echo "Usage: telegram-reply.sh TOPIC_ID [message]" >&2
-  exit 1
-fi
-
-# Read message from args or stdin
-if [ $# -gt 0 ]; then
-  MSG="$*"
-else
-  MSG="$(cat)"
-fi
-
-if [ -z "$MSG" ]; then
-  echo "No message provided" >&2
-  exit 1
-fi
-
-PORT="\${INSTAR_PORT:-${port}}"
-
-# Escape for JSON
-JSON_MSG=$(printf '%s' "$MSG" | python3 -c 'import sys,json; print(json.dumps(sys.stdin.read()))' 2>/dev/null)
-if [ -z "$JSON_MSG" ]; then
-  JSON_MSG="$(printf '%s' "$MSG" | sed 's/\\\\\\\\/\\\\\\\\\\\\\\\\/g; s/"/\\\\\\\\"/g' | sed ':a;N;$!ba;s/\\\\n/\\\\\\\\n/g')"
-  JSON_MSG="\\"$JSON_MSG\\""
-fi
-
-RESPONSE=$(curl -s -w "\\n%{http_code}" -X POST "http://localhost:\${PORT}/telegram/reply/\${TOPIC_ID}" \\
-  -H 'Content-Type: application/json' \\
-  -d "{\\"text\\":\${JSON_MSG}}")
-
-HTTP_CODE=$(echo "$RESPONSE" | tail -1)
-BODY=$(echo "$RESPONSE" | sed '$d')
-
-if [ "$HTTP_CODE" = "200" ]; then
-  echo "Sent $(echo "$MSG" | wc -c | tr -d ' ') chars to topic $TOPIC_ID"
-else
-  echo "Failed (HTTP $HTTP_CODE): $BODY" >&2
-  exit 1
-fi
-`;
-    const scriptPath = path.join(scriptsDir, 'telegram-reply.sh');
-    fs.writeFileSync(scriptPath, scriptContent, { mode: 0o755 });
-}
 //# sourceMappingURL=setup.js.map