instar 0.28.113 → 0.28.115

package/dist/providers/primitives/observability/usageMeterProvider.js

@@ -0,0 +1,24 @@
+/**
+ * UsageMeterProvider — query provider's authoritative usage/quota state.
+ *
+ * Reads cumulative usage and remaining quota from the provider's own
+ * accounting. Distinct from per-call `UsageReport` (which describes a
+ * single completion) — this primitive answers "where do I stand on my
+ * subscription limits / API quotas right now?"
+ *
+ * Asymmetric across providers:
+ *   - Anthropic: public OAuth usage API (`GET /api/oauth/usage`,
+ *     `GET /api/oauth/profile`). Capability flag `PublicUsageApi` is true.
+ *   - Codex: no documented public quota endpoint. Internal
+ *     `/backend-api/wham/usage` (undocumented, unstable) and
+ *     `account/rateLimits/read` JSON-RPC method on the app-server.
+ *     Capability flag `PublicUsageApi` is false; the adapter SHOULD fall
+ *     back to local accounting (sum `turn.completed.usage` per call) when
+ *     no authoritative source is available.
+ *
+ * Callers who care about exact billable spend MUST check `isAuthoritative`
+ * before trusting the data. Estimated/local-accounting data is still
+ * useful for "are we near the cap?" decisions.
+ */
+export {};
+//# sourceMappingURL=usageMeterProvider.js.map

package/dist/providers/primitives/observability/usageMeterProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usageMeterProvider.js","sourceRoot":"","sources":["../../../../src/providers/primitives/observability/usageMeterProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG"}

package/dist/providers/primitives/optional/capabilityNegotiation.d.ts

@@ -0,0 +1,35 @@
+/**
+ * CapabilityNegotiation — initialization handshake for app-server capabilities.
+ *
+ * OPTIONAL primitive — Codex-native. The Codex app-server supports
+ * per-feature opt-in during the `initialize` JSON-RPC call. The adapter
+ * can detect Codex's capability tier and degrade gracefully when a
+ * feature is unavailable.
+ *
+ * The abstraction surfaces this so Instar's higher-level discovery
+ * (CapabilityFlag enum) can reflect real provider state rather than
+ * declared maximum.
+ *
+ * Maps to:
+ *   - Codex: app-server `initialize` exchange with `experimentalApi` field
+ *   - Claude: no equivalent (capability is static per adapter)
+ */
+import type { CancellationOptions } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface CapabilityNegotiation {
+    readonly capability: typeof CapabilityFlag.CapabilityNegotiation;
+    /**
+     * Run the capability negotiation handshake. Returns the set of features
+     * the provider has confirmed available for this session.
+     */
+    negotiate(requested: ReadonlyArray<string>, options?: CancellationOptions): Promise<NegotiatedCapabilities>;
+}
+export interface NegotiatedCapabilities {
+    /** Features that were requested AND confirmed available. */
+    granted: ReadonlySet<string>;
+    /** Features that were requested but denied. */
+    denied: ReadonlySet<string>;
+    /** Features the provider offered that we didn't request. */
+    offered: ReadonlySet<string>;
+}
+//# sourceMappingURL=capabilityNegotiation.d.ts.map

package/dist/providers/primitives/optional/capabilityNegotiation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilityNegotiation.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/capabilityNegotiation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,qBAAqB,CAAC;IAEjE;;;OAGG;IACH,SAAS,CACP,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,EAChC,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,sBAAsB;IACrC,4DAA4D;IAC5D,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,+CAA+C;IAC/C,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5B,4DAA4D;IAC5D,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC9B"}

package/dist/providers/primitives/optional/capabilityNegotiation.js

@@ -0,0 +1,18 @@
+/**
+ * CapabilityNegotiation — initialization handshake for app-server capabilities.
+ *
+ * OPTIONAL primitive — Codex-native. The Codex app-server supports
+ * per-feature opt-in during the `initialize` JSON-RPC call. The adapter
+ * can detect Codex's capability tier and degrade gracefully when a
+ * feature is unavailable.
+ *
+ * The abstraction surfaces this so Instar's higher-level discovery
+ * (CapabilityFlag enum) can reflect real provider state rather than
+ * declared maximum.
+ *
+ * Maps to:
+ *   - Codex: app-server `initialize` exchange with `experimentalApi` field
+ *   - Claude: no equivalent (capability is static per adapter)
+ */
+export {};
+//# sourceMappingURL=capabilityNegotiation.js.map

package/dist/providers/primitives/optional/capabilityNegotiation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilityNegotiation.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/capabilityNegotiation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG"}

package/dist/providers/primitives/optional/codeReviewPreset.d.ts

@@ -0,0 +1,60 @@
+/**
+ * CodeReviewPreset — built-in "structured code review" capability.
+ *
+ * OPTIONAL primitive — Codex-native. Codex's `/review` slash command has
+ * diff/branch/commit presets that produce a structured review without the
+ * caller having to write a prompt template.
+ *
+ * Maps to:
+ *   - Codex: `/review` slash command with presets
+ *   - Claude: not native. Skills approximate (e.g., `/security-review`).
+ *
+ * Used as a portability-friendly way to ask "do a code review" without
+ * having to know which underlying CLI is in play.
+ */
+import type { CancellationOptions, ProviderSpecific, SessionHandle } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface CodeReviewPreset {
+    readonly capability: typeof CapabilityFlag.CodeReviewPreset;
+    /**
+     * Run a code review using a preset. Returns the structured review output.
+     */
+    review(session: SessionHandle, preset: CodeReviewPresetKind, options?: CodeReviewPresetOptions): Promise<CodeReviewResult>;
+}
+export type CodeReviewPresetKind = 
+/** Review a specific diff vs base branch. */
+{
+    kind: 'diff';
+    base: string;
+    head?: string;
+}
+/** Review a specific branch's commits. */
+ | {
+    kind: 'branch';
+    branch: string;
+}
+/** Review a specific commit. */
+ | {
+    kind: 'commit';
+    sha: string;
+};
+export interface CodeReviewPresetOptions extends CancellationOptions {
+    /** Optional focus area (e.g., 'security', 'performance'). */
+    focus?: string;
+    /** Optional reviewer persona. */
+    persona?: 'staff-engineer' | 'security-engineer' | 'pragmatic' | 'thorough';
+}
+export interface CodeReviewResult {
+    /** Markdown review text. */
+    review: string;
+    /** Structured findings, when the preset emits them. */
+    findings?: ReadonlyArray<CodeReviewFinding>;
+    providerSpecific?: ProviderSpecific;
+}
+export interface CodeReviewFinding {
+    severity: 'critical' | 'high' | 'medium' | 'low' | 'nit';
+    file?: string;
+    line?: number;
+    message: string;
+}
+//# sourceMappingURL=codeReviewPreset.d.ts.map

package/dist/providers/primitives/optional/codeReviewPreset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codeReviewPreset.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/codeReviewPreset.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,gBAAgB,CAAC;IAE5D;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,oBAAoB,EAC5B,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC9B;AAED,MAAM,MAAM,oBAAoB;AAC9B,6CAA6C;AAC3C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AAC/C,0CAA0C;GACxC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACpC,gCAAgC;GAC9B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpC,MAAM,WAAW,uBAAwB,SAAQ,mBAAmB;IAClE,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,OAAO,CAAC,EAAE,gBAAgB,GAAG,mBAAmB,GAAG,WAAW,GAAG,UAAU,CAAC;CAC7E;AAED,MAAM,WAAW,gBAAgB;IAC/B,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,QAAQ,CAAC,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAC5C,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,KAAK,CAAC;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/providers/primitives/optional/codeReviewPreset.js

@@ -0,0 +1,16 @@
+/**
+ * CodeReviewPreset — built-in "structured code review" capability.
+ *
+ * OPTIONAL primitive — Codex-native. Codex's `/review` slash command has
+ * diff/branch/commit presets that produce a structured review without the
+ * caller having to write a prompt template.
+ *
+ * Maps to:
+ *   - Codex: `/review` slash command with presets
+ *   - Claude: not native. Skills approximate (e.g., `/security-review`).
+ *
+ * Used as a portability-friendly way to ask "do a code review" without
+ * having to know which underlying CLI is in play.
+ */
+export {};
+//# sourceMappingURL=codeReviewPreset.js.map

package/dist/providers/primitives/optional/codeReviewPreset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codeReviewPreset.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/codeReviewPreset.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/providers/primitives/optional/complianceApi.d.ts

@@ -0,0 +1,48 @@
+/**
+ * ComplianceApi — org-level audit log endpoint.
+ *
+ * OPTIONAL primitive — provider-specific. Used by organizations with
+ * regulatory requirements to capture every agent interaction in an
+ * external audit trail.
+ *
+ * Maps to:
+ *   - Codex: OpenAI Compliance API endpoint (usage events flow there)
+ *   - Anthropic: Admin API events (different shape; not a 1-to-1 map)
+ *
+ * Asymmetric on event shapes — the abstraction presents a uniform
+ * "subscribe to compliance events" interface; consumers MUST treat the
+ * payload shape as provider-specific via `providerSpecific`.
+ */
+import type { CancellationOptions, ProviderSpecific } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface ComplianceApi {
+    readonly capability: typeof CapabilityFlag.ComplianceApi;
+    /** Read current compliance endpoint config. */
+    config(options?: CancellationOptions): Promise<ComplianceEndpointConfig | null>;
+    /** Update compliance endpoint config. */
+    setConfig(config: ComplianceEndpointConfig | null, options?: CancellationOptions): Promise<void>;
+    /** Subscribe to compliance events as they are emitted. */
+    subscribe(options?: CancellationOptions): AsyncIterable<ComplianceEvent>;
+}
+export interface ComplianceEndpointConfig {
+    endpoint: string;
+    /** Auth for the endpoint. */
+    auth?: {
+        kind: 'bearer';
+        tokenEnvVar: string;
+    } | {
+        kind: 'api-key';
+        keyEnvVar: string;
+    };
+    /** Whether to wait for endpoint acknowledgment before allowing actions. */
+    blocking?: boolean;
+}
+export interface ComplianceEvent {
+    timestamp: string;
+    /** Provider-specific event type (e.g., 'usage.recorded', 'session.ended'). */
+    eventType: string;
+    /** Provider-specific payload. */
+    payload: Readonly<Record<string, unknown>>;
+    providerSpecific?: ProviderSpecific;
+}
+//# sourceMappingURL=complianceApi.d.ts.map

package/dist/providers/primitives/optional/complianceApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"complianceApi.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/complianceApi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,aAAa,CAAC;IAEzD,+CAA+C;IAC/C,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC;IAEhF,yCAAyC;IACzC,SAAS,CACP,MAAM,EAAE,wBAAwB,GAAG,IAAI,EACvC,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,0DAA0D;IAC1D,SAAS,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;CAC1E;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3C,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC"}

package/dist/providers/primitives/optional/complianceApi.js

@@ -0,0 +1,17 @@
+/**
+ * ComplianceApi — org-level audit log endpoint.
+ *
+ * OPTIONAL primitive — provider-specific. Used by organizations with
+ * regulatory requirements to capture every agent interaction in an
+ * external audit trail.
+ *
+ * Maps to:
+ *   - Codex: OpenAI Compliance API endpoint (usage events flow there)
+ *   - Anthropic: Admin API events (different shape; not a 1-to-1 map)
+ *
+ * Asymmetric on event shapes — the abstraction presents a uniform
+ * "subscribe to compliance events" interface; consumers MUST treat the
+ * payload shape as provider-specific via `providerSpecific`.
+ */
+export {};
+//# sourceMappingURL=complianceApi.js.map

package/dist/providers/primitives/optional/complianceApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"complianceApi.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/complianceApi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/providers/primitives/optional/csvBatchMode.d.ts

@@ -0,0 +1,47 @@
+/**
+ * CsvBatchMode — run an agent across rows of a CSV with per-row timeout.
+ *
+ * OPTIONAL primitive — Codex-native. Native batch parallelism for
+ * triage-style workloads. The agent receives one CSV row at a time as
+ * input and produces one output row.
+ *
+ * Maps to:
+ *   - Codex: subagent CSV batch mode with `job_max_runtime_seconds` per row
+ *   - Claude: not native. Build on top of subagent spawning.
+ */
+import type { CancellationOptions, ProviderSpecific } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface CsvBatchMode {
+    readonly capability: typeof CapabilityFlag.CsvBatchMode;
+    /**
+     * Run an agent across each row of a CSV. Returns a stream of per-row
+     * results as they complete.
+     */
+    run(request: CsvBatchRequest, options?: CsvBatchOptions): AsyncIterable<CsvBatchRowResult>;
+}
+export interface CsvBatchRequest {
+    /** Path to the input CSV. */
+    inputCsv: string;
+    /** Prompt template; receives each row as a JSON object substitution. */
+    promptTemplate: string;
+    /** Optional path to write per-row outputs. */
+    outputCsv?: string;
+    /** Subagent name to use for the row processing. */
+    subagentName?: string;
+}
+export interface CsvBatchOptions extends CancellationOptions {
+    /** Concurrency (rows in flight at once). Default: provider-default (~6). */
+    concurrency?: number;
+    /** Per-row timeout in seconds. */
+    perRowTimeoutSeconds?: number;
+}
+export interface CsvBatchRowResult {
+    rowIndex: number;
+    rowData: Readonly<Record<string, unknown>>;
+    status: 'success' | 'failure' | 'timeout';
+    output?: string;
+    error?: string;
+    durationMs: number;
+    providerSpecific?: ProviderSpecific;
+}
+//# sourceMappingURL=csvBatchMode.d.ts.map

package/dist/providers/primitives/optional/csvBatchMode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csvBatchMode.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/csvBatchMode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,YAAY,CAAC;IAExD;;;OAGG;IACH,GAAG,CACD,OAAO,EAAE,eAAe,EACxB,OAAO,CAAC,EAAE,eAAe,GACxB,aAAa,CAAC,iBAAiB,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,eAAe;IAC9B,6BAA6B;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,cAAc,EAAE,MAAM,CAAC;IACvB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAgB,SAAQ,mBAAmB;IAC1D,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3C,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC"}

package/dist/providers/primitives/optional/csvBatchMode.js

@@ -0,0 +1,13 @@
+/**
+ * CsvBatchMode — run an agent across rows of a CSV with per-row timeout.
+ *
+ * OPTIONAL primitive — Codex-native. Native batch parallelism for
+ * triage-style workloads. The agent receives one CSV row at a time as
+ * input and produces one output row.
+ *
+ * Maps to:
+ *   - Codex: subagent CSV batch mode with `job_max_runtime_seconds` per row
+ *   - Claude: not native. Build on top of subagent spawning.
+ */
+export {};
+//# sourceMappingURL=csvBatchMode.js.map

package/dist/providers/primitives/optional/csvBatchMode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csvBatchMode.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/csvBatchMode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/providers/primitives/optional/customModelProvider.d.ts

@@ -0,0 +1,67 @@
+/**
+ * CustomModelProvider — point the agent CLI at a non-default model backend.
+ *
+ * OPTIONAL primitive — Codex-native. Lets the same agent CLI front a
+ * different underlying model: built-in `openai` (default), `ollama`,
+ * `lmstudio`, or an arbitrary HTTP backend (internal LLM gateway, etc.).
+ *
+ * STRATEGIC SIGNIFICANCE: this primitive partially solves Instar's Phase
+ * 6 (open-source / local model support). Instead of building an Ollama
+ * adapter from scratch, the Codex adapter can be pointed at Ollama via
+ * this primitive — Codex handles the agent loop, tool dispatch, hooks,
+ * scaffolding; Instar's Codex adapter just configures the model provider.
+ *
+ * Maps to:
+ *   - Codex: `[model_providers.<id>]` in config.toml with `name`,
+ *     `base_url`, `auth`, `headers`, `command` (for credential helpers)
+ *   - Claude: hard-locked to Anthropic. Adapter declares capability false
+ *     and throws UnsupportedCapabilityError.
+ */
+import type { CancellationOptions } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface CustomModelProvider {
+    readonly capability: typeof CapabilityFlag.CustomModelProvider;
+    /** List currently-configured model providers. */
+    list(options?: CancellationOptions): Promise<ReadonlyArray<ModelProviderSpec>>;
+    /** Get the currently-active model provider (the one new sessions use). */
+    active(options?: CancellationOptions): Promise<ModelProviderSpec | null>;
+    /** Register a new model provider configuration. */
+    register(spec: ModelProviderSpec, options?: CancellationOptions): Promise<void>;
+    /** Switch the active model provider by id. */
+    switchTo(id: string, options?: CancellationOptions): Promise<void>;
+    /** Remove a model provider configuration. */
+    remove(id: string, options?: CancellationOptions): Promise<void>;
+}
+export interface ModelProviderSpec {
+    /** Stable identifier. */
+    id: string;
+    /** Display name. */
+    name: string;
+    /**
+     * Backend kind. 'built-in' uses one of the provider's preconfigured
+     * backends ('openai', 'ollama', 'lmstudio'); 'http' uses an arbitrary
+     * URL.
+     */
+    kind: 'built-in' | 'http';
+    /** For built-in: name of the preconfigured backend. */
+    builtInName?: 'openai' | 'ollama' | 'lmstudio' | string;
+    /** For http: base URL of the backend. */
+    baseUrl?: string;
+    /** Authentication config. */
+    auth?: {
+        kind: 'api-key';
+        envVar: string;
+    } | {
+        kind: 'bearer';
+        envVar: string;
+    } | {
+        kind: 'command';
+        command: string;
+        args?: ReadonlyArray<string>;
+    } | {
+        kind: 'none';
+    };
+    /** Additional HTTP headers to send (when kind === 'http'). */
+    headers?: Readonly<Record<string, string>>;
+}
+//# sourceMappingURL=customModelProvider.d.ts.map

package/dist/providers/primitives/optional/customModelProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customModelProvider.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/customModelProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,mBAAmB,CAAC;IAE/D,iDAAiD;IACjD,IAAI,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAE/E,0EAA0E;IAC1E,MAAM,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAEzE,mDAAmD;IACnD,QAAQ,CACN,IAAI,EAAE,iBAAiB,EACvB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,8CAA8C;IAC9C,QAAQ,CACN,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,6CAA6C;IAC7C,MAAM,CACJ,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,yBAAyB;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;IAC1B,uDAAuD;IACvD,WAAW,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAC;IACxD,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,IAAI,CAAC,EACD;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GACnC;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAClC;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;KAAE,GAClE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACrB,8DAA8D;IAC9D,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC5C"}

package/dist/providers/primitives/optional/customModelProvider.js

@@ -0,0 +1,21 @@
+/**
+ * CustomModelProvider — point the agent CLI at a non-default model backend.
+ *
+ * OPTIONAL primitive — Codex-native. Lets the same agent CLI front a
+ * different underlying model: built-in `openai` (default), `ollama`,
+ * `lmstudio`, or an arbitrary HTTP backend (internal LLM gateway, etc.).
+ *
+ * STRATEGIC SIGNIFICANCE: this primitive partially solves Instar's Phase
+ * 6 (open-source / local model support). Instead of building an Ollama
+ * adapter from scratch, the Codex adapter can be pointed at Ollama via
+ * this primitive — Codex handles the agent loop, tool dispatch, hooks,
+ * scaffolding; Instar's Codex adapter just configures the model provider.
+ *
+ * Maps to:
+ *   - Codex: `[model_providers.<id>]` in config.toml with `name`,
+ *     `base_url`, `auth`, `headers`, `command` (for credential helpers)
+ *   - Claude: hard-locked to Anthropic. Adapter declares capability false
+ *     and throws UnsupportedCapabilityError.
+ */
+export {};
+//# sourceMappingURL=customModelProvider.js.map

package/dist/providers/primitives/optional/customModelProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customModelProvider.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/customModelProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG"}

package/dist/providers/primitives/optional/filesystemRpc.d.ts

@@ -0,0 +1,28 @@
+/**
+ * FilesystemRpc — drive file mutations through the provider's sandbox.
+ *
+ * OPTIONAL primitive — Codex-native. A host process can read/write/watch/copy
+ * files via the agent's sandbox rather than touching the filesystem
+ * directly. Useful when the host wants its operations to obey the same
+ * sandbox rules as the agent's.
+ *
+ * Maps to:
+ *   - Codex: `fs/readFile`, `fs/writeFile`, `fs/watch`, `fs/copy` JSON-RPC
+ *     methods on the app-server
+ *   - Claude: no equivalent
+ */
+import type { CancellationOptions } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface FilesystemRpc {
+    readonly capability: typeof CapabilityFlag.FilesystemRpc;
+    readFile(path: string, options?: CancellationOptions): Promise<string>;
+    writeFile(path: string, content: string, options?: CancellationOptions): Promise<void>;
+    copy(source: string, dest: string, options?: CancellationOptions): Promise<void>;
+    watch(path: string, options?: CancellationOptions): AsyncIterable<FsWatchEvent>;
+}
+export interface FsWatchEvent {
+    path: string;
+    kind: 'created' | 'modified' | 'deleted';
+    timestamp: string;
+}
+//# sourceMappingURL=filesystemRpc.d.ts.map

package/dist/providers/primitives/optional/filesystemRpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystemRpc.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/filesystemRpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,aAAa,CAAC;IAEzD,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvF,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjF,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;CACjF;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/providers/primitives/optional/filesystemRpc.js

@@ -0,0 +1,15 @@
+/**
+ * FilesystemRpc — drive file mutations through the provider's sandbox.
+ *
+ * OPTIONAL primitive — Codex-native. A host process can read/write/watch/copy
+ * files via the agent's sandbox rather than touching the filesystem
+ * directly. Useful when the host wants its operations to obey the same
+ * sandbox rules as the agent's.
+ *
+ * Maps to:
+ *   - Codex: `fs/readFile`, `fs/writeFile`, `fs/watch`, `fs/copy` JSON-RPC
+ *     methods on the app-server
+ *   - Claude: no equivalent
+ */
+export {};
+//# sourceMappingURL=filesystemRpc.js.map

package/dist/providers/primitives/optional/filesystemRpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystemRpc.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/filesystemRpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/providers/primitives/optional/notificationOptOut.d.ts

@@ -0,0 +1,25 @@
+/**
+ * NotificationOptOut — declare which event notifications the client doesn't want.
+ *
+ * OPTIONAL primitive — Codex-native. Reduces JSON-RPC chatter when the
+ * client only cares about specific event types. Useful for high-volume
+ * tailing operations where most events would be discarded anyway.
+ *
+ * Maps to:
+ *   - Codex: app-server `initialize` with `optOutNotificationMethods` array
+ *   - Claude: no equivalent — Claude emits hook events to all configured
+ *     receivers regardless
+ */
+import type { CancellationOptions } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface NotificationOptOut {
+    readonly capability: typeof CapabilityFlag.NotificationOptOut;
+    /**
+     * Declare event types to skip. Adapter applies during init or at
+     * runtime (when supported).
+     */
+    optOut(eventTypes: ReadonlyArray<string>, options?: CancellationOptions): Promise<void>;
+    /** Read currently opted-out event types. */
+    current(options?: CancellationOptions): Promise<ReadonlySet<string>>;
+}
+//# sourceMappingURL=notificationOptOut.d.ts.map

package/dist/providers/primitives/optional/notificationOptOut.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notificationOptOut.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/notificationOptOut.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,kBAAkB,CAAC;IAE9D;;;OAGG;IACH,MAAM,CACJ,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,EACjC,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,4CAA4C;IAC5C,OAAO,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;CACtE"}

package/dist/providers/primitives/optional/notificationOptOut.js

@@ -0,0 +1,14 @@
+/**
+ * NotificationOptOut — declare which event notifications the client doesn't want.
+ *
+ * OPTIONAL primitive — Codex-native. Reduces JSON-RPC chatter when the
+ * client only cares about specific event types. Useful for high-volume
+ * tailing operations where most events would be discarded anyway.
+ *
+ * Maps to:
+ *   - Codex: app-server `initialize` with `optOutNotificationMethods` array
+ *   - Claude: no equivalent — Claude emits hook events to all configured
+ *     receivers regardless
+ */
+export {};
+//# sourceMappingURL=notificationOptOut.js.map

package/dist/providers/primitives/optional/notificationOptOut.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notificationOptOut.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/notificationOptOut.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/providers/primitives/optional/otelExporter.d.ts

@@ -0,0 +1,30 @@
+/**
+ * OtelExporter — OpenTelemetry export configuration.
+ *
+ * OPTIONAL primitive — Codex-native. Enables native traces for API
+ * requests, prompts, tool approvals. Useful when running Instar in
+ * environments with OTel observability stacks.
+ *
+ * Maps to:
+ *   - Codex: `[otel]` config block — `exporter`, `endpoint`, `headers`
+ *   - Claude: no native OTel support. Adapter declares unsupported.
+ */
+import type { CancellationOptions } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface OtelExporter {
+    readonly capability: typeof CapabilityFlag.OtelExporter;
+    /** Read current OTel config. */
+    get(options?: CancellationOptions): Promise<OtelConfig | null>;
+    /** Update OTel config. Set null to disable. */
+    set(config: OtelConfig | null, options?: CancellationOptions): Promise<void>;
+}
+export interface OtelConfig {
+    exporter: 'otlp-http' | 'otlp-grpc' | 'none';
+    endpoint?: string;
+    headers?: Readonly<Record<string, string>>;
+    /** Service name attribute. */
+    serviceName?: string;
+    /** Service version attribute. */
+    serviceVersion?: string;
+}
+//# sourceMappingURL=otelExporter.d.ts.map

package/dist/providers/primitives/optional/otelExporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otelExporter.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/otelExporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,YAAY,CAAC;IAExD,gCAAgC;IAChC,GAAG,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAE/D,+CAA+C;IAC/C,GAAG,CACD,MAAM,EAAE,UAAU,GAAG,IAAI,EACzB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,WAAW,GAAG,WAAW,GAAG,MAAM,CAAC;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,8BAA8B;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iCAAiC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB"}

package/dist/providers/primitives/optional/otelExporter.js

@@ -0,0 +1,13 @@
+/**
+ * OtelExporter — OpenTelemetry export configuration.
+ *
+ * OPTIONAL primitive — Codex-native. Enables native traces for API
+ * requests, prompts, tool approvals. Useful when running Instar in
+ * environments with OTel observability stacks.
+ *
+ * Maps to:
+ *   - Codex: `[otel]` config block — `exporter`, `endpoint`, `headers`
+ *   - Claude: no native OTel support. Adapter declares unsupported.
+ */
+export {};
+//# sourceMappingURL=otelExporter.js.map

package/dist/providers/primitives/optional/otelExporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otelExporter.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/otelExporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/providers/primitives/optional/pluginRegistry.d.ts

@@ -0,0 +1,56 @@
+/**
+ * PluginRegistry — manage provider plugins.
+ *
+ * OPTIONAL primitive — Codex-native. Codex supports first-class plugins
+ * that can bundle hooks, tools, and prompts. Claude has no plugin
+ * protocol; skills approximate but are managed differently.
+ *
+ * Maps to:
+ *   - Codex: `plugin/list`, `plugin/install`, `plugin/uninstall` JSON-RPC
+ *     methods; plugins can bundle hooks under `hooks/hooks.json` with
+ *     `[features].plugin_hooks = true`
+ *   - Claude: capability false; ProviderScaffolder handles skill bundling
+ *     as the rough equivalent
+ */
+import type { CancellationOptions } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface PluginRegistry {
+    readonly capability: typeof CapabilityFlag.PluginRegistry;
+    /** List installed plugins. */
+    list(options?: CancellationOptions): Promise<ReadonlyArray<InstalledPlugin>>;
+    /** Install a plugin from a source. */
+    install(source: PluginSource, options?: PluginInstallOptions): Promise<InstalledPlugin>;
+    /** Uninstall a plugin by id. */
+    uninstall(pluginId: string, options?: CancellationOptions): Promise<void>;
+    /** Enable or disable an installed plugin without uninstalling. */
+    setEnabled(pluginId: string, enabled: boolean, options?: CancellationOptions): Promise<void>;
+}
+export type PluginSource = {
+    kind: 'npm';
+    package: string;
+    version?: string;
+} | {
+    kind: 'git';
+    url: string;
+    ref?: string;
+} | {
+    kind: 'local-path';
+    path: string;
+};
+export interface PluginInstallOptions extends CancellationOptions {
+    /** Auto-enable on install. Default: true. */
+    enabled?: boolean;
+}
+export interface InstalledPlugin {
+    id: string;
+    name: string;
+    version: string;
+    enabled: boolean;
+    /** What this plugin provides (hooks, tools, prompts). */
+    contributions: {
+        hooks?: number;
+        tools?: number;
+        prompts?: number;
+    };
+}
+//# sourceMappingURL=pluginRegistry.d.ts.map