instar 1.3.1295 → 1.3.1297

package/dashboard/index.html

@@ -3744,15 +3744,6 @@
       .sub-account-email { font-size:12px; opacity:.5; margin:0 0 10px; }
       .sub-account-noquota { font-size:12px; opacity:.6; }
       .sub-account-quota-age { font-size:11px; opacity:.5; margin-top:4px; }
-      .sub-profile-provision { border:1px solid var(--border,#2a2a2a); border-left:4px solid #16a34a;
-        border-radius:10px; padding:14px 16px; display:flex; flex-direction:column; gap:10px; }
-      .sub-profile-title { font-size:16px; font-weight:650; }
-      .sub-profile-copy { margin:0; font-size:13px; line-height:1.5; opacity:.78; }
-      .sub-profile-input { width:100%; box-sizing:border-box; min-height:44px; padding:10px 12px;
-        font-size:16px; border:1px solid var(--border,#2a2a2a); border-radius:8px; background:transparent; color:inherit; }
-      .sub-profile-create { min-height:44px; padding:10px 14px; font-size:14px; font-weight:600;
-        border-radius:8px; border:1px solid #16a34a; background:rgba(22,163,74,.12); color:inherit; cursor:pointer; }
-      .sub-profile-status { min-height:18px; font-size:12px; line-height:1.45; opacity:.8; }
       .sub-quota { margin:8px 0; }
       .sub-quota-head { display:flex; justify-content:space-between; font-size:12px; margin-bottom:4px; }
       .sub-quota-label { opacity:.8; }
@@ -3825,11 +3816,6 @@
            your subscriptions (ws52-operator-tap-not-text Part A). Leads the panel as the primary
            action when present; silent otherwise. -->
       <div id="subFollowMe"></div>
-      <section class="ph-section">
-        <h3 class="ph-h">Dedicated browser profiles</h3>
-        <p class="ph-h-sub">Prepare a private Chrome profile for one Google account. The agent handles the machine; you only respond to a secure password, verification, or approval link when the provider truly requires it.</p>
-        <div id="subProfileProvision"></div>
-      </section>
       <!-- Account × Machine matrix (account-machine-matrix) — at-a-glance "which account is set up
            on which machine," with a one-tap "Set up" per empty cell that runs the whole sign-in in
            the dashboard (PIN → sign-in link → paste the code). Hidden when there's nothing to show. -->
@@ -9866,7 +9852,6 @@
           accounts: document.getElementById('subAccounts'),
           followMe: document.getElementById('subFollowMe'),
           matrix: document.getElementById('subMatrix'),
-          profileProvision: document.getElementById('subProfileProvision'),
         };
         // Pass opts through (method/body/signal) so the controller can POST the follow-me
         // scan + the PIN-gated issue-for-machine, not just GET.

package/dashboard/subscriptions.js

@@ -1092,53 +1092,8 @@ const URLS = {
   relogin: '/subscription-relogin?scope=pool',
   reloginAction: '/subscription-relogin',
   repairCell: '/subscription-relogin/repair-cell',
-  provisionProfile: '/playwright-profiles/provision',
 };
 
-export function renderProfileProvisioner(doc, target) {
-  if (!target) return;
-  const card = el(doc, 'div', 'sub-profile-provision');
-  card.setAttribute('data-interaction-open', '1');
-  card.appendChild(el(doc, 'div', 'sub-profile-title', 'Create a dedicated sign-in profile'));
-  card.appendChild(el(doc, 'p', 'sub-profile-copy',
-    'Instar prepares the private Chrome profile on this machine. If a password or verification step is needed, your agent will send a secure link — you never need to access this machine.'));
-
-  const identity = el(doc, 'input', 'sub-profile-input');
-  identity.setAttribute('type', 'email');
-  identity.setAttribute('inputmode', 'email');
-  identity.setAttribute('autocomplete', 'email');
-  identity.setAttribute('placeholder', 'Google account email');
-  identity.setAttribute('aria-label', 'Google account email');
-  card.appendChild(identity);
-
-  const profileId = el(doc, 'input', 'sub-profile-input');
-  profileId.setAttribute('type', 'text');
-  profileId.setAttribute('placeholder', 'Profile name, for example work-google');
-  profileId.setAttribute('aria-label', 'Profile name');
-  card.appendChild(profileId);
-
-  const method = el(doc, 'select', 'sub-profile-input');
-  method.setAttribute('aria-label', 'Sign-in method');
-  for (const [value, label] of [
-    ['session-cookie', 'Already signed in / provider approval'],
-    ['password', 'Password'],
-    ['password+totp', 'Password + authenticator'],
-  ]) {
-    const option = el(doc, 'option', '', label);
-    option.setAttribute('value', value);
-    method.appendChild(option);
-  }
-  card.appendChild(method);
-
-  const button = el(doc, 'button', 'sub-profile-create', 'Create dedicated profile');
-  button.setAttribute('type', 'button');
-  card.appendChild(button);
-  const status = el(doc, 'div', 'sub-profile-status', '');
-  status.setAttribute('aria-live', 'polite');
-  card.appendChild(status);
-  target.replaceChildren(card);
-}
-
 export function createController(opts) {
   const {
     doc,
@@ -1160,7 +1115,7 @@ export function createController(opts) {
   // add the D4 ceremony when the episode lands. recentOutcomes: client-observed terminal
   // outcomes rendered as explicit cards in the pending panel (D4 — never a vanishing line).
   const state = { timerId: null, active: false, inFlight: null, offers: [], approveWired: false,
-    reloginWired: false, reloginEpisodes: [], reloginFailures: [], profileProvisionWired: false,
+    reloginWired: false, reloginEpisodes: [], reloginFailures: [],
     matrixWired: false, matrixTransient: {}, lastPoolBody: null, lastPendingBody: null,
     matrixEpisodes: {}, recentOutcomes: [] };
 
@@ -1225,61 +1180,10 @@ export function createController(opts) {
     state.reloginEpisodes = reloginBody && Array.isArray(reloginBody.episodes) ? reloginBody.episodes : [];
     state.reloginFailures = reloginBody && reloginBody.pool && Array.isArray(reloginBody.pool.failed)
       ? reloginBody.pool.failed : [];
-    if (els.profileProvision && !state.profileProvisionWired) {
-      renderProfileProvisioner(doc, els.profileProvision);
-      wireProfileProvisioner();
-    }
     render(accountsBody, pendingBody, inUseBody, poolBody);
     reschedule();
   }
 
-  function wireProfileProvisioner() {
-    if (!els.profileProvision || state.profileProvisionWired) return;
-    state.profileProvisionWired = true;
-    els.profileProvision.addEventListener('click', (event) => {
-      const button = event.target && event.target.closest ? event.target.closest('.sub-profile-create') : null;
-      if (!button) return;
-      const proof = getOperatorSessionToken();
-      const identity = els.profileProvision.querySelector('[aria-label="Google account email"]')?.value?.trim() || '';
-      const profileId = els.profileProvision.querySelector('[aria-label="Profile name"]')?.value?.trim() || '';
-      const loginMethod = els.profileProvision.querySelector('[aria-label="Sign-in method"]')?.value || 'session-cookie';
-      const status = els.profileProvision.querySelector('.sub-profile-status');
-      if (!proof) {
-        requestUnlock();
-        status.textContent = 'Enter your dashboard PIN, then retry.';
-        return;
-      }
-      if (!identity || !profileId) { status.textContent = 'Enter the Google account and a profile name.'; return; }
-      button.setAttribute('disabled', 'disabled');
-      status.textContent = 'Preparing the private profile…';
-      void (async () => {
-        try {
-          const response = await fetchImpl(URLS.provisionProfile, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json', 'X-Instar-Operator-Session': proof },
-            body: JSON.stringify({ profileId, identity, loginMethod }),
-          });
-          const body = await response.json().catch(() => ({}));
-          if (!response.ok) {
-            if (response.status === 401) requestUnlock();
-            status.textContent = response.status === 401
-              ? 'Enter your dashboard PIN, then retry.'
-              : `Couldn’t create the profile: ${body.error || 'try again'}`;
-            button.removeAttribute('disabled');
-            return;
-          }
-          status.textContent = loginMethod === 'session-cookie'
-            ? 'Profile ready. Your agent can now open the provider sign-in and send you any required approval link.'
-            : 'Profile ready. Your agent will send a secure credential link before the first sign-in.';
-          button.textContent = 'Profile created';
-        } catch {
-          status.textContent = 'Couldn’t reach the server — try again.';
-          button.removeAttribute('disabled');
-        }
-      })();
-    });
-  }
-
   // ── Episode + outcome bookkeeping (D1/D4/D5) ───────────────────────────────
   function purgeTransients() {
     const t = now();

package/dist/commands/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAsGA,OAAO,EAAE,cAAc,EAAwD,MAAM,2BAA2B,CAAC;AAUjH,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AA4BjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAmI7D,OAAO,KAAK,EAAW,oBAAoB,EAAe,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAkFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AA0ID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAoDD,+EAA+E;AAC/E,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,IAAI,CAAC,OAAO,2BAA2B,EAAE,cAAc,EAAE,QAAQ,CAAC,GAAG,IAAI,EACpF,OAAO,EAAE,MAAM,GACd,IAAI,CAEN;AAsrDD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,GACP,IAAI,CA8yBN;AAgmBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA+gwBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/commands/server.ts"],"names":[],"mappings":"AAsGA,OAAO,EAAE,cAAc,EAAwD,MAAM,2BAA2B,CAAC;AAUjH,OAAO,EAAE,eAAe,EAAiC,MAAM,iCAAiC,CAAC;AA4BjG,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAmI7D,OAAO,KAAK,EAAW,oBAAoB,EAAe,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAkFtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAUT;AA0ID,UAAU,YAAY;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;2DACuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAoDD,+EAA+E;AAC/E,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,IAAI,CAAC,OAAO,2BAA2B,EAAE,cAAc,EAAE,QAAQ,CAAC,GAAG,IAAI,EACpF,OAAO,EAAE,MAAM,GACd,IAAI,CAEN;AAsrDD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,oBAAoB,GAAG,IAAI,GACxC;IACD,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,EAC9B,YAAY,CAAC,EAAE,YAAY,EAC3B,WAAW,CAAC,EAAE,WAAW,EACzB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAGvE,UAAU,CAAC,EAAE,MAAM,OAAO,8BAA8B,EAAE,WAAW,GAAG,IAAI,EAK5E,qBAAqB,CAAC,EAAE,MAAM,OAAO,gCAAgC,EAAE,kBAAkB,GAAG,IAAI,EAKhG,mBAAmB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,EAQrD,oBAAoB,CAAC,EAAE,MAAM;IAC3B,YAAY,EAAE,OAAO,kBAAkB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,GACP,IAAI,CA8yBN;AAgmBD,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAghwBtE;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD5E"}

package/dist/commands/server.js

@@ -18922,6 +18922,7 @@ export async function startServer(options) {
         const sessionReaper = new SessionReaper({
             ...reapGuardDeps,
             dirtyCheck: _yieldSafetyDirtyCheck,
+            hasLiveToolShell: (s) => sessionManager.hasLiveToolShell(s),
             listRunningSessions: () => sessionManager.listRunningSessions(),
             captureOutput: (s, n) => sessionManager.captureOutput(s, n) ?? '',
             frameworkForSession: (s) => sessionManager.frameworkForSession(s),