instar 1.3.435 → 1.3.437

package/dashboard/index.html

@@ -3288,6 +3288,8 @@
     <!-- subscriptions tab (Subscription & Auth Standard P2.2 — live quota + pending logins) -->
     <style>
       .sub-account { border:1px solid var(--border,#2a2a2a); border-radius:10px; padding:14px 16px; margin-bottom:12px; }
+      .sub-account-inuse { border-color:#16a34a; box-shadow:0 0 0 1px #16a34a44; }
+      .sub-account-inuse-badge { font-size:11px; font-weight:600; color:#22c55e; margin-right:auto; }
       .sub-account-head { display:flex; justify-content:space-between; align-items:baseline; gap:12px; }
       .sub-account-nick { font-weight:600; font-size:15px; }
       .sub-account-status { font-size:12px; opacity:.75; }

package/dashboard/subscriptions.js

@@ -130,8 +130,11 @@ export function quotaBar(doc, label, pct, resetIso, now = Date.now()) {
   return wrap;
 }
 
-/** Per-account rows: nickname, status, provider·framework, 5h + weekly quota bars. */
-export function renderAccounts(doc, target, accounts, now = Date.now()) {
+/** Per-account rows: nickname, status, provider·framework, 5h + weekly quota bars.
+ *  `inUseAccountId` (optional) is the account the agent is CURRENTLY running on —
+ *  that card gets an "In use" marker so "active" (healthy) reads distinct from
+ *  "actually running right now". */
+export function renderAccounts(doc, target, accounts, now = Date.now(), inUseAccountId = null) {
   if (!target) return;
   target.replaceChildren();
   if (!Array.isArray(accounts) || accounts.length === 0) {
@@ -139,9 +142,11 @@ export function renderAccounts(doc, target, accounts, now = Date.now()) {
     return;
   }
   for (const a of accounts) {
-    const card = el(doc, 'div', 'sub-account');
+    const inUse = !!(inUseAccountId && a && a.id === inUseAccountId);
+    const card = el(doc, 'div', inUse ? 'sub-account sub-account-inuse' : 'sub-account');
     const head = el(doc, 'div', 'sub-account-head');
     head.appendChild(el(doc, 'span', 'sub-account-nick', sanitizeForDisplay(a && a.nickname, 'label')));
+    if (inUse) head.appendChild(el(doc, 'span', 'sub-account-inuse-badge', '● In use now'));
     head.appendChild(el(doc, 'span', 'sub-account-status', friendlyStatus(a && a.status)));
     card.appendChild(head);
     card.appendChild(el(doc, 'div', 'sub-account-meta',
@@ -213,6 +218,7 @@ export function renderDisabled(doc, els) {
 const URLS = {
   accounts: '/subscription-pool',
   pending: '/subscription-pool/pending-logins',
+  inUse: '/subscription-pool/in-use',
 };
 
 export function createController(opts) {
@@ -239,11 +245,14 @@ export function createController(opts) {
     if (state.inFlight) { try { state.inFlight.abort(); } catch { /* superseded */ } }
     const controller = typeof AbortController !== 'undefined' ? new AbortController() : { signal: undefined, abort() {} };
     state.inFlight = controller;
-    let accountsBody, pendingBody;
+    let accountsBody, pendingBody, inUseBody;
     try {
-      [accountsBody, pendingBody] = await Promise.all([
+      // in-use is best-effort — its failure must not blank the accounts list, so
+      // it's caught independently and degrades to "unknown" (no badge).
+      [accountsBody, pendingBody, inUseBody] = await Promise.all([
         fetchJson(URLS.accounts, controller),
         fetchJson(URLS.pending, controller),
+        fetchJson(URLS.inUse, controller).catch(() => null),
       ]);
     } catch {
       if (controller.signal && controller.signal.aborted) return;
@@ -259,14 +268,15 @@ export function createController(opts) {
       reschedule();
       return;
     }
-    render(accountsBody, pendingBody);
+    render(accountsBody, pendingBody, inUseBody);
     reschedule();
   }
 
-  function render(accountsBody, pendingBody) {
+  function render(accountsBody, pendingBody, inUseBody) {
     const accounts = accountsBody && Array.isArray(accountsBody.accounts) ? accountsBody.accounts : [];
     const logins = pendingBody && Array.isArray(pendingBody.logins) ? pendingBody.logins : [];
-    renderAccounts(doc, els.accounts, accounts, now());
+    const inUseAccountId = inUseBody && inUseBody.activeAccountId ? inUseBody.activeAccountId : null;
+    renderAccounts(doc, els.accounts, accounts, now(), inUseAccountId);
     renderPendingLogins(doc, els.pending, logins, now());
   }
 

package/dist/commands/init.d.ts

@@ -74,6 +74,23 @@ export declare function initProject(options: InitOptions): Promise<void>;
  * Only writes skill files that don't already exist (preserves customizations).
  */
 export declare function installBuiltinSkills(skillsDir: string, port: number): void;
+/**
+ * Canonical bundled developer-skill toolkit — the authored allowlist (single
+ * source of truth) of skills Instar uses to develop itself, installed to every
+ * agent. The skill files live as tracked dirs under the repo's `skills/<slug>/`
+ * (the one source, also referenced by SourceTreeGuard / crossModelReviewer /
+ * PostUpdateMigrator); they ship via the `skills` entry in package.json files[].
+ * Excludes document-only skills superseded by built-in infra (instar-telegram →
+ * telegram-reply.sh, command-guard → dangerous-command-guard.sh hook, etc.).
+ */
+export declare const BUNDLED_DEV_SKILLS: readonly ["spec-converge", "instar-dev", "systematic-debugging", "smart-web-fetch", "knowledge-base", "instar-scheduler", "agent-memory", "agent-identity", "instar-identity", "credential-leak-detector"];
+/**
+ * Install the bundled dev-skill toolkit by copying each allowlisted skill's
+ * directory from the packaged `skills/<slug>/` source into the agent's
+ * `.claude/skills/<slug>/`. Install-if-missing (preserves user customizations);
+ * recursive so scripts/ and templates/ subdirs come along.
+ */
+export declare function installBundledDevSkills(skillsDir: string): void;
 export declare function getDefaultJobs(port: number): object[];
 /**
  * Refresh hooks, Claude settings, and CLAUDE.md for an existing installation.

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAyDH,UAAU,WAAW;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,yFAAyF;IACzF,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,aAAa,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,CAAC;CAC5E;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,aAAa,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GACjF,aAAa,CAAC,aAAa,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,CAAC,CAatE;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,EAAE,aAAa,CAAC,aAAa,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,CAIjG,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,aAAa,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,CAEvG;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBrE;AAw4CD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAw0C1E;AA8ID,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAkhBrD;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAqElF"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAyDH,UAAU,WAAW;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,yFAAyF;IACzF,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,aAAa,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,CAAC;CAC5E;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,aAAa,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GACjF,aAAa,CAAC,aAAa,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,CAAC,CAatE;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,EAAE,aAAa,CAAC,aAAa,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,CAIjG,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,aAAa,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,CAEvG;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBrE;AAw4CD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAg1C1E;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,4MAWrB,CAAC;AAEX;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAa/D;AA8ID,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAkhBrD;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAqElF"}

package/dist/commands/init.js

@@ -2817,6 +2817,56 @@ Cherry-picked from the GSD verifier role. The insight: task completion is not go
     installTestAsSelfSkill(skillsDir);
     // Install autonomous skill with hooks and scripts (special case — needs full directory structure)
     installAutonomousSkill(skillsDir);
+    // Install the bundled developer-skill toolkit (spec-converge, instar-dev, …) —
+    // the tools Instar uses to develop itself, so EVERY agent has the complete
+    // capability to develop Instar (Agent Awareness + Framework-Agnostic
+    // "one shared source of truth"). Single source: the repo's skills/<slug>/ dirs
+    // (referenced by SourceTreeGuard / crossModelReviewer), shipped via
+    // package.json files[] and installed here by copy, install-if-missing.
+    installBundledDevSkills(skillsDir);
+}
+/**
+ * Canonical bundled developer-skill toolkit — the authored allowlist (single
+ * source of truth) of skills Instar uses to develop itself, installed to every
+ * agent. The skill files live as tracked dirs under the repo's `skills/<slug>/`
+ * (the one source, also referenced by SourceTreeGuard / crossModelReviewer /
+ * PostUpdateMigrator); they ship via the `skills` entry in package.json files[].
+ * Excludes document-only skills superseded by built-in infra (instar-telegram →
+ * telegram-reply.sh, command-guard → dangerous-command-guard.sh hook, etc.).
+ */
+export const BUNDLED_DEV_SKILLS = [
+    'spec-converge',
+    'instar-dev',
+    'systematic-debugging',
+    'smart-web-fetch',
+    'knowledge-base',
+    'instar-scheduler',
+    'agent-memory',
+    'agent-identity',
+    'instar-identity',
+    'credential-leak-detector',
+];
+/**
+ * Install the bundled dev-skill toolkit by copying each allowlisted skill's
+ * directory from the packaged `skills/<slug>/` source into the agent's
+ * `.claude/skills/<slug>/`. Install-if-missing (preserves user customizations);
+ * recursive so scripts/ and templates/ subdirs come along.
+ */
+export function installBundledDevSkills(skillsDir) {
+    const modDir = __dirname;
+    // Package layout: dist/commands/init.js → ../../skills/<slug>
+    const bundledRoot = path.join(modDir, '..', '..', 'skills');
+    for (const slug of BUNDLED_DEV_SKILLS) {
+        const targetDir = path.join(skillsDir, slug);
+        const targetSkill = path.join(targetDir, 'SKILL.md');
+        // Install-if-missing — check both casings (matches installBuildSkill).
+        if (fs.existsSync(targetSkill) || fs.existsSync(path.join(targetDir, 'skill.md')))
+            continue;
+        const bundledDir = path.join(bundledRoot, slug);
+        if (!fs.existsSync(path.join(bundledDir, 'SKILL.md')))
+            continue; // not packaged — defensive skip
+        fs.cpSync(bundledDir, targetDir, { recursive: true });
+    }
 }
 /**
  * Install the /build skill with its stop hook and state manager.