@executioncontrolprotocol/cli 0.4.0 → 0.4.2

package/dist/commands/config/models/ollama/update.d.ts

@@ -0,0 +1,13 @@
+import { Command } from "@oclif/core";
+export default class ConfigModelsOllamaUpdate extends Command {
+    static summary: string;
+    static args: {
+        url: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=update.d.ts.map

package/dist/commands/config/models/ollama/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/commands/config/models/ollama/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,OAAO,EAAE,MAAM,aAAa,CAAC;AAK5C,MAAM,CAAC,OAAO,OAAO,wBAAyB,SAAQ,OAAO;IAC3D,MAAM,CAAC,OAAO,SAAmD;IAEjE,MAAM,CAAC,IAAI;;MAET;IAEF,MAAM,CAAC,KAAK;;;MAA2B;IAEjC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAkB3B"}

package/dist/commands/config/models/ollama/update.js

@@ -0,0 +1,27 @@
+import { Args, Command } from "@oclif/core";
+import { configScopeFlags } from "../../../../lib/config-flags.js";
+import { persistConfig, readForMutation } from "../../../../lib/system-config-cli.js";
+export default class ConfigModelsOllamaUpdate extends Command {
+    static summary = "Update models.providers.ollama.config.baseURL";
+    static args = {
+        url: Args.string({ required: true, description: "Ollama base URL (e.g. http://localhost:11434)" }),
+    };
+    static flags = { ...configScopeFlags };
+    async run() {
+        const { args, flags } = await this.parse(ConfigModelsOllamaUpdate);
+        const cwd = process.cwd();
+        const { path, config } = readForMutation({
+            global: flags.global,
+            cwd,
+            explicit: flags.config,
+        });
+        config.models ??= {};
+        config.models.providers ??= {};
+        config.models.providers.ollama ??= {};
+        config.models.providers.ollama.config ??= {};
+        config.models.providers.ollama.config.baseURL = args.url;
+        persistConfig(path, config);
+        this.log(`Updated ollama.baseURL = ${args.url} (${path})`);
+    }
+}
+//# sourceMappingURL=update.js.map

package/dist/commands/config/models/ollama/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/commands/config/models/ollama/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAEtF,MAAM,CAAC,OAAO,OAAO,wBAAyB,SAAQ,OAAO;IAC3D,MAAM,CAAC,OAAO,GAAG,+CAA+C,CAAC;IAEjE,MAAM,CAAC,IAAI,GAAG;QACZ,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,+CAA+C,EAAE,CAAC;KACnG,CAAC;IAEF,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEvC,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC;YACvC,MAAM,EAAE,KAAK,CAAC,MAAiB;YAC/B,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;SAC7C,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,KAAK,EAAE,CAAC;QACrB,MAAM,CAAC,MAAM,CAAC,SAAS,KAAK,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,EAAE,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,EAAE,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QAEzD,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,4BAA4B,IAAI,CAAC,GAAG,KAAK,IAAI,GAAG,CAAC,CAAC;IAC7D,CAAC"}

package/dist/commands/config/path.d.ts

@@ -0,0 +1,12 @@
+import { Command } from "@oclif/core";
+export default class ConfigPath extends Command {
+    static summary: string;
+    static description: string;
+    static flags: {
+        forWrite: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=path.d.ts.map

package/dist/commands/config/path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../../../src/commands/config/path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAS,MAAM,aAAa,CAAC;AAM7C,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,OAAO;IAC7C,MAAM,CAAC,OAAO,SAAoD;IAElE,MAAM,CAAC,WAAW,SAE2D;IAE7E,MAAM,CAAC,KAAK;;;;MAMV;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAiB3B"}

package/dist/commands/config/path.js

@@ -0,0 +1,32 @@
+import { Command, Flags } from "@oclif/core";
+import { runWithCommandError } from "../../lib/command-helpers.js";
+import { configScopeFlags } from "../../lib/config-flags.js";
+import { loadConfigForDisplay, resolveWritePathForMutation } from "../../lib/system-config-cli.js";
+export default class ConfigPath extends Command {
+    static summary = "Print the config file path used for read/write";
+    static description = "Shows the path: for reads, the first existing file in scope (or canonical path if none). " +
+        "With --for-write, shows the file that mutating subcommands would update.";
+    static flags = {
+        ...configScopeFlags,
+        forWrite: Flags.boolean({
+            description: "Show the path that mutating subcommands would write (prefer existing local/global file)",
+            default: false,
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(ConfigPath);
+        const cwd = process.cwd();
+        const global = flags.global;
+        const explicit = flags.config;
+        if (flags.forWrite) {
+            const path = resolveWritePathForMutation({ global, cwd, explicit });
+            this.log(path);
+            return;
+        }
+        await runWithCommandError(this, async () => {
+            const { path, exists } = loadConfigForDisplay({ global, cwd, explicit });
+            this.log(path + (exists ? "" : " (not created yet — run ecp config init)"));
+        });
+    }
+}
+//# sourceMappingURL=path.js.map

package/dist/commands/config/path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.js","sourceRoot":"","sources":["../../../src/commands/config/path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAEnG,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,OAAO;IAC7C,MAAM,CAAC,OAAO,GAAG,gDAAgD,CAAC;IAElE,MAAM,CAAC,WAAW,GAChB,2FAA2F;QAC3F,0EAA0E,CAAC;IAE7E,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,gBAAgB;QACnB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC;YACtB,WAAW,EAAE,yFAAyF;YACtG,OAAO,EAAE,KAAK;SACf,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAiB,CAAC;QACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAA4B,CAAC;QAEpD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,2BAA2B,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QAED,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;IACL,CAAC"}

package/dist/commands/config/plugins/add.d.ts

@@ -0,0 +1,16 @@
+import { Command } from "@oclif/core";
+/**
+ * Shorthand for `ecp config plugins allow add` — adds a provider ID to security.models.allowProviders.
+ */
+export default class ConfigPluginsAdd extends Command {
+    static summary: string;
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=add.d.ts.map

package/dist/commands/config/plugins/add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.d.ts","sourceRoot":"","sources":["../../../../src/commands/config/plugins/add.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,OAAO,EAAE,MAAM,aAAa,CAAC;AAU5C;;GAEG;AACH,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,OAAO;IACnD,MAAM,CAAC,OAAO,SAA+D;IAE7E,MAAM,CAAC,IAAI;;MAET;IAEF,MAAM,CAAC,KAAK;;;MAA2B;IAEjC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAgB3B"}

package/dist/commands/config/plugins/add.js

@@ -0,0 +1,28 @@
+import { Args, Command } from "@oclif/core";
+import { configScopeFlags } from "../../../lib/config-flags.js";
+import { addUnique, persistConfig, readForMutation, touchSecurity, } from "../../../lib/system-config-cli.js";
+/**
+ * Shorthand for `ecp config plugins allow add` — adds a provider ID to security.models.allowProviders.
+ */
+export default class ConfigPluginsAdd extends Command {
+    static summary = "Add a model provider ID to security.models.allowProviders";
+    static args = {
+        id: Args.string({ required: true, description: "Plugin ID (e.g. openai, ollama, file)" }),
+    };
+    static flags = { ...configScopeFlags };
+    async run() {
+        const { args, flags } = await this.parse(ConfigPluginsAdd);
+        const cwd = process.cwd();
+        const { path, config } = readForMutation({
+            global: flags.global,
+            cwd,
+            explicit: flags.config,
+        });
+        const sec = touchSecurity(config);
+        sec.models ??= {};
+        sec.models.allowProviders = addUnique(sec.models.allowProviders, args.id);
+        persistConfig(path, config);
+        this.log(`Updated security.models.allowProviders (${path}): ${sec.models.allowProviders?.join(", ")}`);
+    }
+}
+//# sourceMappingURL=add.js.map

package/dist/commands/config/plugins/add.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.js","sourceRoot":"","sources":["../../../../src/commands/config/plugins/add.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EACL,SAAS,EACT,aAAa,EACb,eAAe,EACf,aAAa,GACd,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,OAAO;IACnD,MAAM,CAAC,OAAO,GAAG,2DAA2D,CAAC;IAE7E,MAAM,CAAC,IAAI,GAAG;QACZ,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;KAC1F,CAAC;IAEF,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEvC,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC;YACvC,MAAM,EAAE,KAAK,CAAC,MAAiB;YAC/B,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;SAC7C,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QAClC,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAE1E,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,2CAA2C,IAAI,MAAM,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC"}

package/dist/commands/config/plugins/allow/add.d.ts

@@ -0,0 +1,13 @@
+import { Command } from "@oclif/core";
+export default class ConfigPluginsAllowAdd extends Command {
+    static summary: string;
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=add.d.ts.map

package/dist/commands/config/plugins/allow/add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.d.ts","sourceRoot":"","sources":["../../../../../src/commands/config/plugins/allow/add.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,OAAO,EAAE,MAAM,aAAa,CAAC;AAU5C,MAAM,CAAC,OAAO,OAAO,qBAAsB,SAAQ,OAAO;IACxD,MAAM,CAAC,OAAO,SAAgG;IAE9G,MAAM,CAAC,IAAI;;MAET;IAEF,MAAM,CAAC,KAAK;;;MAA2B;IAEjC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAgB3B"}

package/dist/commands/config/plugins/allow/add.js

@@ -0,0 +1,25 @@
+import { Args, Command } from "@oclif/core";
+import { configScopeFlags } from "../../../../lib/config-flags.js";
+import { addUnique, persistConfig, readForMutation, touchSecurity, } from "../../../../lib/system-config-cli.js";
+export default class ConfigPluginsAllowAdd extends Command {
+    static summary = "Add a model provider ID to security.models.allowProviders (deprecated path: plugins allow)";
+    static args = {
+        id: Args.string({ required: true, description: "Plugin ID (e.g. openai, ollama)" }),
+    };
+    static flags = { ...configScopeFlags };
+    async run() {
+        const { args, flags } = await this.parse(ConfigPluginsAllowAdd);
+        const cwd = process.cwd();
+        const { path, config } = readForMutation({
+            global: flags.global,
+            cwd,
+            explicit: flags.config,
+        });
+        const sec = touchSecurity(config);
+        sec.models ??= {};
+        sec.models.allowProviders = addUnique(sec.models.allowProviders, args.id);
+        persistConfig(path, config);
+        this.log(`Updated security.models.allowProviders (${path}): ${sec.models.allowProviders?.join(", ")}`);
+    }
+}
+//# sourceMappingURL=add.js.map

package/dist/commands/config/plugins/allow/add.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.js","sourceRoot":"","sources":["../../../../../src/commands/config/plugins/allow/add.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EACL,SAAS,EACT,aAAa,EACb,eAAe,EACf,aAAa,GACd,MAAM,sCAAsC,CAAC;AAE9C,MAAM,CAAC,OAAO,OAAO,qBAAsB,SAAQ,OAAO;IACxD,MAAM,CAAC,OAAO,GAAG,4FAA4F,CAAC;IAE9G,MAAM,CAAC,IAAI,GAAG;QACZ,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,iCAAiC,EAAE,CAAC;KACpF,CAAC;IAEF,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEvC,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC;YACvC,MAAM,EAAE,KAAK,CAAC,MAAiB;YAC/B,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;SAC7C,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QAClC,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAE1E,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,2CAA2C,IAAI,MAAM,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC"}

package/dist/commands/config/plugins/allow/remove.d.ts

@@ -0,0 +1,13 @@
+import { Command } from "@oclif/core";
+export default class ConfigPluginsAllowRemove extends Command {
+    static summary: string;
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=remove.d.ts.map

package/dist/commands/config/plugins/allow/remove.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove.d.ts","sourceRoot":"","sources":["../../../../../src/commands/config/plugins/allow/remove.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,OAAO,EAAE,MAAM,aAAa,CAAC;AAU5C,MAAM,CAAC,OAAO,OAAO,wBAAyB,SAAQ,OAAO;IAC3D,MAAM,CAAC,OAAO,SAAoE;IAElF,MAAM,CAAC,IAAI;;MAET;IAEF,MAAM,CAAC,KAAK;;;MAA2B;IAEjC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAiB3B"}

package/dist/commands/config/plugins/allow/remove.js

@@ -0,0 +1,26 @@
+import { Args, Command } from "@oclif/core";
+import { configScopeFlags } from "../../../../lib/config-flags.js";
+import { persistConfig, readForMutation, removeId, touchSecurity, } from "../../../../lib/system-config-cli.js";
+export default class ConfigPluginsAllowRemove extends Command {
+    static summary = "Remove a model provider ID from security.models.allowProviders";
+    static args = {
+        id: Args.string({ required: true, description: "Plugin ID" }),
+    };
+    static flags = { ...configScopeFlags };
+    async run() {
+        const { args, flags } = await this.parse(ConfigPluginsAllowRemove);
+        const cwd = process.cwd();
+        const { path, config } = readForMutation({
+            global: flags.global,
+            cwd,
+            explicit: flags.config,
+        });
+        const sec = touchSecurity(config);
+        sec.models ??= {};
+        sec.models.allowProviders = removeId(sec.models.allowProviders, args.id);
+        sec.models.defaultProviders = removeId(sec.models.defaultProviders, args.id);
+        persistConfig(path, config);
+        this.log(`Updated security.models allow/default (${path})`);
+    }
+}
+//# sourceMappingURL=remove.js.map

package/dist/commands/config/plugins/allow/remove.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove.js","sourceRoot":"","sources":["../../../../../src/commands/config/plugins/allow/remove.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EACL,aAAa,EACb,eAAe,EACf,QAAQ,EACR,aAAa,GACd,MAAM,sCAAsC,CAAC;AAE9C,MAAM,CAAC,OAAO,OAAO,wBAAyB,SAAQ,OAAO;IAC3D,MAAM,CAAC,OAAO,GAAG,gEAAgE,CAAC;IAElF,MAAM,CAAC,IAAI,GAAG;QACZ,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;KAC9D,CAAC;IAEF,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEvC,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC;YACvC,MAAM,EAAE,KAAK,CAAC,MAAiB;YAC/B,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;SAC7C,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QAClC,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,cAAc,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACzE,GAAG,CAAC,MAAM,CAAC,gBAAgB,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAE7E,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,0CAA0C,IAAI,GAAG,CAAC,CAAC;IAC9D,CAAC"}

package/dist/commands/config/plugins/default/add.d.ts

@@ -0,0 +1,13 @@
+import { Command } from "@oclif/core";
+export default class ConfigPluginsDefaultAdd extends Command {
+    static summary: string;
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=add.d.ts.map

package/dist/commands/config/plugins/default/add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.d.ts","sourceRoot":"","sources":["../../../../../src/commands/config/plugins/default/add.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,OAAO,EAAE,MAAM,aAAa,CAAC;AAU5C,MAAM,CAAC,OAAO,OAAO,uBAAwB,SAAQ,OAAO;IAC1D,MAAM,CAAC,OAAO,SAAiE;IAE/E,MAAM,CAAC,IAAI;;MAET;IAEF,MAAM,CAAC,KAAK;;;MAA2B;IAEjC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAmB3B"}

package/dist/commands/config/plugins/default/add.js

@@ -0,0 +1,28 @@
+import { Args, Command } from "@oclif/core";
+import { configScopeFlags } from "../../../../lib/config-flags.js";
+import { addUnique, persistConfig, readForMutation, touchSecurity, } from "../../../../lib/system-config-cli.js";
+export default class ConfigPluginsDefaultAdd extends Command {
+    static summary = "Add a model provider ID to security.models.defaultProviders";
+    static args = {
+        id: Args.string({ required: true, description: "Plugin ID (e.g. openai)" }),
+    };
+    static flags = { ...configScopeFlags };
+    async run() {
+        const { args, flags } = await this.parse(ConfigPluginsDefaultAdd);
+        const cwd = process.cwd();
+        const { path, config } = readForMutation({
+            global: flags.global,
+            cwd,
+            explicit: flags.config,
+        });
+        const sec = touchSecurity(config);
+        sec.models ??= {};
+        sec.models.defaultProviders = addUnique(sec.models.defaultProviders, args.id);
+        if (sec.models.allowProviders && sec.models.allowProviders.length > 0) {
+            sec.models.allowProviders = addUnique(sec.models.allowProviders, args.id);
+        }
+        persistConfig(path, config);
+        this.log(`Updated security.models.defaultProviders (${path}): ${sec.models.defaultProviders?.join(", ")}`);
+    }
+}
+//# sourceMappingURL=add.js.map

package/dist/commands/config/plugins/default/add.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.js","sourceRoot":"","sources":["../../../../../src/commands/config/plugins/default/add.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EACL,SAAS,EACT,aAAa,EACb,eAAe,EACf,aAAa,GACd,MAAM,sCAAsC,CAAC;AAE9C,MAAM,CAAC,OAAO,OAAO,uBAAwB,SAAQ,OAAO;IAC1D,MAAM,CAAC,OAAO,GAAG,6DAA6D,CAAC;IAE/E,MAAM,CAAC,IAAI,GAAG;QACZ,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC;KAC5E,CAAC;IAEF,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEvC,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC;YACvC,MAAM,EAAE,KAAK,CAAC,MAAiB;YAC/B,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;SAC7C,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QAClC,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,gBAAgB,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9E,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,6CAA6C,IAAI,MAAM,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC"}

package/dist/commands/config/plugins/default/remove.d.ts

@@ -0,0 +1,13 @@
+import { Command } from "@oclif/core";
+export default class ConfigPluginsDefaultRemove extends Command {
+    static summary: string;
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=remove.d.ts.map

package/dist/commands/config/plugins/default/remove.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove.d.ts","sourceRoot":"","sources":["../../../../../src/commands/config/plugins/default/remove.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,OAAO,EAAE,MAAM,aAAa,CAAC;AAU5C,MAAM,CAAC,OAAO,OAAO,0BAA2B,SAAQ,OAAO;IAC7D,MAAM,CAAC,OAAO,SAAsE;IAEpF,MAAM,CAAC,IAAI;;MAET;IAEF,MAAM,CAAC,KAAK;;;MAA2B;IAEjC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAkB3B"}

package/dist/commands/config/plugins/default/remove.js

@@ -0,0 +1,25 @@
+import { Args, Command } from "@oclif/core";
+import { configScopeFlags } from "../../../../lib/config-flags.js";
+import { persistConfig, readForMutation, removeId, touchSecurity, } from "../../../../lib/system-config-cli.js";
+export default class ConfigPluginsDefaultRemove extends Command {
+    static summary = "Remove a model provider ID from security.models.defaultProviders";
+    static args = {
+        id: Args.string({ required: true, description: "Plugin ID" }),
+    };
+    static flags = { ...configScopeFlags };
+    async run() {
+        const { args, flags } = await this.parse(ConfigPluginsDefaultRemove);
+        const cwd = process.cwd();
+        const { path, config } = readForMutation({
+            global: flags.global,
+            cwd,
+            explicit: flags.config,
+        });
+        const sec = touchSecurity(config);
+        sec.models ??= {};
+        sec.models.defaultProviders = removeId(sec.models.defaultProviders, args.id);
+        persistConfig(path, config);
+        this.log(`Updated security.models.defaultProviders (${path}): ${sec.models.defaultProviders?.join(", ") ?? "(empty)"}`);
+    }
+}
+//# sourceMappingURL=remove.js.map

package/dist/commands/config/plugins/default/remove.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove.js","sourceRoot":"","sources":["../../../../../src/commands/config/plugins/default/remove.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EACL,aAAa,EACb,eAAe,EACf,QAAQ,EACR,aAAa,GACd,MAAM,sCAAsC,CAAC;AAE9C,MAAM,CAAC,OAAO,OAAO,0BAA2B,SAAQ,OAAO;IAC7D,MAAM,CAAC,OAAO,GAAG,kEAAkE,CAAC;IAEpF,MAAM,CAAC,IAAI,GAAG;QACZ,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;KAC9D,CAAC;IAEF,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEvC,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC;YACvC,MAAM,EAAE,KAAK,CAAC,MAAiB;YAC/B,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;SAC7C,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QAClC,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,gBAAgB,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAE7E,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CACN,6CAA6C,IAAI,MAAM,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,CAC9G,CAAC;IACJ,CAAC"}

package/dist/commands/config/plugins/get.d.ts

@@ -0,0 +1,10 @@
+import { Command } from "@oclif/core";
+export default class ConfigPluginsGet extends Command {
+    static summary: string;
+    static flags: {
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=get.d.ts.map

package/dist/commands/config/plugins/get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/commands/config/plugins/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAOtC,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,OAAO;IACnD,MAAM,CAAC,OAAO,SAAgF;IAE9F,MAAM,CAAC,KAAK;;;MAA2B;IAEjC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAwB3B"}

package/dist/commands/config/plugins/get.js

@@ -0,0 +1,30 @@
+import { Command } from "@oclif/core";
+import { formatConfigFileHeaderLine, runWithCommandError } from "../../../lib/command-helpers.js";
+import { configScopeFlags } from "../../../lib/config-flags.js";
+import { loadConfigForDisplay } from "../../../lib/system-config-cli.js";
+import { getSecurityConfig } from "@executioncontrolprotocol/runtime";
+export default class ConfigPluginsGet extends Command {
+    static summary = "List plugin installs (plugins.installs) — policy is under security.plugins";
+    static flags = { ...configScopeFlags };
+    async run() {
+        const { flags } = await this.parse(ConfigPluginsGet);
+        const cwd = process.cwd();
+        await runWithCommandError(this, async () => {
+            const { path, exists, config } = loadConfigForDisplay({
+                global: flags.global,
+                cwd,
+                explicit: flags.config,
+            });
+            this.log(formatConfigFileHeaderLine(path, exists));
+            const installs = config.plugins?.installs;
+            this.log("plugins.installs keys:");
+            this.log(installs && Object.keys(installs).length > 0
+                ? Object.keys(installs).map((k) => `  - ${k}`).join("\n")
+                : "  (not set)");
+            const secPlugins = getSecurityConfig(config)?.plugins;
+            this.log("security.plugins (extension policy):");
+            this.log(secPlugins ? JSON.stringify(secPlugins, null, 2) : "  (not set)");
+        });
+    }
+}
+//# sourceMappingURL=get.js.map

package/dist/commands/config/plugins/get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../../src/commands/config/plugins/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAEtE,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,OAAO;IACnD,MAAM,CAAC,OAAO,GAAG,4EAA4E,CAAC;IAE9F,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEvC,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAE1B,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC;gBACpD,MAAM,EAAE,KAAK,CAAC,MAAiB;gBAC/B,GAAG;gBACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;aAC7C,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC;YAC1C,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YACnC,IAAI,CAAC,GAAG,CACN,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC;gBAC1C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACzD,CAAC,CAAC,aAAa,CAClB,CAAC;YACF,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;YACtD,IAAI,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACjD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;IACL,CAAC"}

package/dist/commands/config/plugins/installs/add.d.ts

@@ -0,0 +1,20 @@
+import { Command } from "@oclif/core";
+/**
+ * Records install metadata in YAML. Does not run npm/git — run your package manager separately,
+ * then set `--path` to the unpacked directory.
+ */
+export default class ConfigPluginsInstallsAdd extends Command {
+    static summary: string;
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        npm: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        path: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        kind: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=add.d.ts.map

package/dist/commands/config/plugins/installs/add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.d.ts","sourceRoot":"","sources":["../../../../../src/commands/config/plugins/installs/add.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,OAAO,EAAS,MAAM,aAAa,CAAC;AAKnD;;;GAGG;AACH,MAAM,CAAC,OAAO,OAAO,wBAAyB,SAAQ,OAAO;IAC3D,MAAM,CAAC,OAAO,SAA8E;IAE5F,MAAM,CAAC,IAAI;;MAET;IAEF,MAAM,CAAC,KAAK;;;;;;MAYV;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA2B3B"}

package/dist/commands/config/plugins/installs/add.js

@@ -0,0 +1,51 @@
+import { Args, Command, Flags } from "@oclif/core";
+import { configScopeFlags } from "../../../../lib/config-flags.js";
+import { persistConfig, readForMutation } from "../../../../lib/system-config-cli.js";
+/**
+ * Records install metadata in YAML. Does not run npm/git — run your package manager separately,
+ * then set `--path` to the unpacked directory.
+ */
+export default class ConfigPluginsInstallsAdd extends Command {
+    static summary = "Add or replace plugins.installs.<id> (metadata only; no network install)";
+    static args = {
+        id: Args.string({ required: true, description: "Stable id for this install (e.g. filesystem)" }),
+    };
+    static flags = {
+        ...configScopeFlags,
+        npm: Flags.string({
+            description: 'NPM package spec (sets source.type "npm" and source.spec)',
+        }),
+        path: Flags.string({
+            description: "Filesystem path to the installed plugin directory",
+        }),
+        kind: Flags.string({
+            description: 'pluginKind metadata (e.g. "tool")',
+            default: "tool",
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(ConfigPluginsInstallsAdd);
+        const cwd = process.cwd();
+        const { path, config } = readForMutation({
+            global: flags.global,
+            cwd,
+            explicit: flags.config,
+        });
+        const npmSpec = flags.npm;
+        const fsPath = flags.path;
+        if (!npmSpec) {
+            this.error("Provide --npm <package-spec> (metadata only for now).", { exit: 1 });
+        }
+        config.plugins ??= {};
+        config.plugins.installs ??= {};
+        config.plugins.installs[args.id] = {
+            source: { type: "npm", spec: npmSpec },
+            path: fsPath,
+            pluginKind: flags.kind,
+            config: {},
+        };
+        persistConfig(path, config);
+        this.log(`Wrote plugins.installs.${args.id} (${path})`);
+    }
+}
+//# sourceMappingURL=add.js.map

package/dist/commands/config/plugins/installs/add.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.js","sourceRoot":"","sources":["../../../../../src/commands/config/plugins/installs/add.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAEtF;;;GAGG;AACH,MAAM,CAAC,OAAO,OAAO,wBAAyB,SAAQ,OAAO;IAC3D,MAAM,CAAC,OAAO,GAAG,0EAA0E,CAAC;IAE5F,MAAM,CAAC,IAAI,GAAG;QACZ,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAAC;KACjG,CAAC;IAEF,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,gBAAgB;QACnB,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC;YAChB,WAAW,EAAE,2DAA2D;SACzE,CAAC;QACF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;YACjB,WAAW,EAAE,mDAAmD;SACjE,CAAC;QACF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;YACjB,WAAW,EAAE,mCAAmC;YAChD,OAAO,EAAE,MAAM;SAChB,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC;YACvC,MAAM,EAAE,KAAK,CAAC,MAAiB;YAC/B,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;SAC7C,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,KAAK,CAAC,GAAyB,CAAC;QAChD,MAAM,MAAM,GAAG,KAAK,CAAC,IAA0B,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,CAAC,uDAAuD,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,EAAE,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG;YACjC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE;YACtC,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,KAAK,CAAC,IAAc;YAChC,MAAM,EAAE,EAAE;SACX,CAAC;QAEF,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,EAAE,KAAK,IAAI,GAAG,CAAC,CAAC;IAC1D,CAAC"}

package/dist/commands/config/plugins/installs/list.d.ts

@@ -0,0 +1,10 @@
+import { Command } from "@oclif/core";
+export default class ConfigPluginsInstallsList extends Command {
+    static summary: string;
+    static flags: {
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=list.d.ts.map

package/dist/commands/config/plugins/installs/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../../src/commands/config/plugins/installs/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAMtC,MAAM,CAAC,OAAO,OAAO,yBAA0B,SAAQ,OAAO;IAC5D,MAAM,CAAC,OAAO,SAAsC;IAEpD,MAAM,CAAC,KAAK;;;MAA2B;IAEjC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAsB3B"}

package/dist/commands/config/plugins/installs/list.js

@@ -0,0 +1,29 @@
+import { Command } from "@oclif/core";
+import { formatConfigFileHeaderLine, runWithCommandError } from "../../../../lib/command-helpers.js";
+import { configScopeFlags } from "../../../../lib/config-flags.js";
+import { loadConfigForDisplay } from "../../../../lib/system-config-cli.js";
+export default class ConfigPluginsInstallsList extends Command {
+    static summary = "List keys under plugins.installs";
+    static flags = { ...configScopeFlags };
+    async run() {
+        const { flags } = await this.parse(ConfigPluginsInstallsList);
+        const cwd = process.cwd();
+        await runWithCommandError(this, async () => {
+            const { path, exists, config } = loadConfigForDisplay({
+                global: flags.global,
+                cwd,
+                explicit: flags.config,
+            });
+            this.log(formatConfigFileHeaderLine(path, exists));
+            const installs = config.plugins?.installs;
+            if (!installs || Object.keys(installs).length === 0) {
+                this.log("(no plugins.installs entries)");
+                return;
+            }
+            for (const k of Object.keys(installs).sort()) {
+                this.log(`  - ${k}`);
+            }
+        });
+    }
+}
+//# sourceMappingURL=list.js.map

package/dist/commands/config/plugins/installs/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../../src/commands/config/plugins/installs/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACrG,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E,MAAM,CAAC,OAAO,OAAO,yBAA0B,SAAQ,OAAO;IAC5D,MAAM,CAAC,OAAO,GAAG,kCAAkC,CAAC;IAEpD,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEvC,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAE1B,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC;gBACpD,MAAM,EAAE,KAAK,CAAC,MAAiB;gBAC/B,GAAG;gBACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;aAC7C,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC;YAC1C,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpD,IAAI,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC7C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC"}

package/dist/commands/config/plugins/installs/remove.d.ts

@@ -0,0 +1,13 @@
+import { Command } from "@oclif/core";
+export default class ConfigPluginsInstallsRemove extends Command {
+    static summary: string;
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=remove.d.ts.map

package/dist/commands/config/plugins/installs/remove.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove.d.ts","sourceRoot":"","sources":["../../../../../src/commands/config/plugins/installs/remove.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,OAAO,EAAE,MAAM,aAAa,CAAC;AAK5C,MAAM,CAAC,OAAO,OAAO,2BAA4B,SAAQ,OAAO;IAC9D,MAAM,CAAC,OAAO,SAA0C;IAExD,MAAM,CAAC,IAAI;;MAET;IAEF,MAAM,CAAC,KAAK;;;MAA2B;IAEjC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAkB3B"}

package/dist/commands/config/plugins/installs/remove.js

@@ -0,0 +1,27 @@
+import { Args, Command } from "@oclif/core";
+import { configScopeFlags } from "../../../../lib/config-flags.js";
+import { persistConfig, readForMutation } from "../../../../lib/system-config-cli.js";
+export default class ConfigPluginsInstallsRemove extends Command {
+    static summary = "Remove a plugins.installs.<id> entry";
+    static args = {
+        id: Args.string({ required: true, description: "Install id (key under plugins.installs)" }),
+    };
+    static flags = { ...configScopeFlags };
+    async run() {
+        const { args, flags } = await this.parse(ConfigPluginsInstallsRemove);
+        const cwd = process.cwd();
+        const { path, config } = readForMutation({
+            global: flags.global,
+            cwd,
+            explicit: flags.config,
+        });
+        config.plugins ??= {};
+        config.plugins.installs ??= {};
+        if (args.id in config.plugins.installs) {
+            delete config.plugins.installs[args.id];
+        }
+        persistConfig(path, config);
+        this.log(`Removed plugins.installs.${args.id} (${path})`);
+    }
+}
+//# sourceMappingURL=remove.js.map

package/dist/commands/config/plugins/installs/remove.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove.js","sourceRoot":"","sources":["../../../../../src/commands/config/plugins/installs/remove.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAEtF,MAAM,CAAC,OAAO,OAAO,2BAA4B,SAAQ,OAAO;IAC9D,MAAM,CAAC,OAAO,GAAG,sCAAsC,CAAC;IAExD,MAAM,CAAC,IAAI,GAAG;QACZ,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,yCAAyC,EAAE,CAAC;KAC5F,CAAC;IAEF,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEvC,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC;YACvC,MAAM,EAAE,KAAK,CAAC,MAAiB;YAC/B,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;SAC7C,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvC,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,4BAA4B,IAAI,CAAC,EAAE,KAAK,IAAI,GAAG,CAAC,CAAC;IAC5D,CAAC"}

package/dist/commands/config/plugins/security/update.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @deprecated Use `ecp config security plugins update` — same behavior (writes `security.plugins`).
+ */
+export { default } from "../../security/plugins/update.js";
+//# sourceMappingURL=update.d.ts.map