instar 0.28.113 → 0.28.115

package/dist/providers/primitives/optional/pluginRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginRegistry.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/pluginRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,cAAc,CAAC;IAE1D,8BAA8B;IAC9B,IAAI,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC;IAE7E,sCAAsC;IACtC,OAAO,CACL,MAAM,EAAE,YAAY,EACpB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,eAAe,CAAC,CAAC;IAE5B,gCAAgC;IAChC,SAAS,CACP,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,kEAAkE;IAClE,UAAU,CACR,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,MAAM,WAAW,oBAAqB,SAAQ,mBAAmB;IAC/D,6CAA6C;IAC7C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,yDAAyD;IACzD,aAAa,EAAE;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH"}

package/dist/providers/primitives/optional/pluginRegistry.js

@@ -0,0 +1,16 @@
+/**
+ * PluginRegistry — manage provider plugins.
+ *
+ * OPTIONAL primitive — Codex-native. Codex supports first-class plugins
+ * that can bundle hooks, tools, and prompts. Claude has no plugin
+ * protocol; skills approximate but are managed differently.
+ *
+ * Maps to:
+ *   - Codex: `plugin/list`, `plugin/install`, `plugin/uninstall` JSON-RPC
+ *     methods; plugins can bundle hooks under `hooks/hooks.json` with
+ *     `[features].plugin_hooks = true`
+ *   - Claude: capability false; ProviderScaffolder handles skill bundling
+ *     as the rough equivalent
+ */
+export {};
+//# sourceMappingURL=pluginRegistry.js.map

package/dist/providers/primitives/optional/pluginRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginRegistry.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/pluginRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/providers/primitives/optional/processSpawn.d.ts

@@ -0,0 +1,44 @@
+/**
+ * ProcessSpawn — unsandboxed process execution via the provider's app-server.
+ *
+ * OPTIONAL primitive — Codex-native (experimental). Distinct from
+ * BashExecution's sandboxed `command/exec`: this is the escape hatch for
+ * trusted long-running processes that need to live outside the sandbox.
+ *
+ * Maps to:
+ *   - Codex: `process/spawn` JSON-RPC method (experimental)
+ *   - Claude: no equivalent
+ *
+ * Use with extreme caution. Surfaced as an optional primitive because
+ * some Instar workflows (e.g., Cloudflare tunnel manager) need it.
+ */
+import type { CancellationOptions } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface ProcessSpawn {
+    readonly capability: typeof CapabilityFlag.ProcessSpawn;
+    /** Spawn an unsandboxed process. Returns a handle for further control. */
+    spawn(request: ProcessSpawnRequest, options?: CancellationOptions): Promise<SpawnedProcessHandle>;
+    /** Send input to a spawned process. */
+    send(handle: SpawnedProcessHandle, input: string, options?: CancellationOptions): Promise<void>;
+    /** Terminate a spawned process. */
+    kill(handle: SpawnedProcessHandle, signal?: 'SIGTERM' | 'SIGKILL' | 'SIGINT', options?: CancellationOptions): Promise<void>;
+}
+export interface ProcessSpawnRequest {
+    command: string;
+    args?: ReadonlyArray<string>;
+    workingDirectory?: string;
+    env?: Readonly<Record<string, string>>;
+    /** Per-process timeout in ms. */
+    timeoutMs?: number;
+}
+export interface SpawnedProcessHandle {
+    readonly id: string;
+    readonly pid: number;
+    readonly stdout: AsyncIterable<string>;
+    readonly stderr: AsyncIterable<string>;
+    readonly waitForExit: Promise<{
+        exitCode: number | null;
+        signal?: string;
+    }>;
+}
+//# sourceMappingURL=processSpawn.d.ts.map

package/dist/providers/primitives/optional/processSpawn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"processSpawn.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/processSpawn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,YAAY,CAAC;IAExD,0EAA0E;IAC1E,KAAK,CACH,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC,uCAAuC;IACvC,IAAI,CACF,MAAM,EAAE,oBAAoB,EAC5B,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,mCAAmC;IACnC,IAAI,CACF,MAAM,EAAE,oBAAoB,EAC5B,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,EACzC,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACvC,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7E"}

package/dist/providers/primitives/optional/processSpawn.js

@@ -0,0 +1,16 @@
+/**
+ * ProcessSpawn — unsandboxed process execution via the provider's app-server.
+ *
+ * OPTIONAL primitive — Codex-native (experimental). Distinct from
+ * BashExecution's sandboxed `command/exec`: this is the escape hatch for
+ * trusted long-running processes that need to live outside the sandbox.
+ *
+ * Maps to:
+ *   - Codex: `process/spawn` JSON-RPC method (experimental)
+ *   - Claude: no equivalent
+ *
+ * Use with extreme caution. Surfaced as an optional primitive because
+ * some Instar workflows (e.g., Cloudflare tunnel manager) need it.
+ */
+export {};
+//# sourceMappingURL=processSpawn.js.map

package/dist/providers/primitives/optional/processSpawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"processSpawn.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/processSpawn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/providers/primitives/optional/profileSwitcher.d.ts

@@ -0,0 +1,33 @@
+/**
+ * ProfileSwitcher — switch between named provider config profiles.
+ *
+ * OPTIONAL primitive — Codex-native. Lets a user maintain multiple TOML
+ * config sets (review-only / dangerous-build / cheap-haiku) and switch
+ * atomically between them.
+ *
+ * Maps to:
+ *   - Codex: `codex --profile <name>` flag; profiles are config-key
+ *     sections in `~/.codex/config.toml`
+ *   - Claude: no native profile concept. Adapter MAY emulate by swapping
+ *     `.claude/settings.json` files at session start; not as clean.
+ */
+import type { CancellationOptions } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface ProfileSwitcher {
+    readonly capability: typeof CapabilityFlag.ProfileSwitcher;
+    /** List available profile names. */
+    list(options?: CancellationOptions): Promise<ReadonlyArray<string>>;
+    /** Get the currently-active profile name. */
+    current(options?: CancellationOptions): Promise<string | null>;
+    /**
+     * Switch to a profile. New sessions started after the switch use the new
+     * profile; existing sessions continue with whatever profile they started
+     * with.
+     */
+    switch(profile: string, options?: CancellationOptions): Promise<void>;
+    /** Create or update a profile definition. */
+    define(profile: string, config: Readonly<Record<string, unknown>>, options?: CancellationOptions): Promise<void>;
+    /** Remove a profile definition. */
+    remove(profile: string, options?: CancellationOptions): Promise<void>;
+}
+//# sourceMappingURL=profileSwitcher.d.ts.map

package/dist/providers/primitives/optional/profileSwitcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profileSwitcher.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/profileSwitcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,eAAe,CAAC;IAE3D,oCAAoC;IACpC,IAAI,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAEpE,6CAA6C;IAC7C,OAAO,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAE/D;;;;OAIG;IACH,MAAM,CACJ,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,6CAA6C;IAC7C,MAAM,CACJ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACzC,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,mCAAmC;IACnC,MAAM,CACJ,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB"}

package/dist/providers/primitives/optional/profileSwitcher.js

@@ -0,0 +1,15 @@
+/**
+ * ProfileSwitcher — switch between named provider config profiles.
+ *
+ * OPTIONAL primitive — Codex-native. Lets a user maintain multiple TOML
+ * config sets (review-only / dangerous-build / cheap-haiku) and switch
+ * atomically between them.
+ *
+ * Maps to:
+ *   - Codex: `codex --profile <name>` flag; profiles are config-key
+ *     sections in `~/.codex/config.toml`
+ *   - Claude: no native profile concept. Adapter MAY emulate by swapping
+ *     `.claude/settings.json` files at session start; not as clean.
+ */
+export {};
+//# sourceMappingURL=profileSwitcher.js.map

package/dist/providers/primitives/optional/profileSwitcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profileSwitcher.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/profileSwitcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/providers/primitives/optional/requirementsToml.d.ts

@@ -0,0 +1,47 @@
+/**
+ * RequirementsToml — org-managed config that locks down provider features.
+ *
+ * OPTIONAL primitive — Codex-native. Allows an organization to specify
+ * which models, sandboxes, and MCP servers are permitted. Useful for
+ * regulated environments.
+ *
+ * Maps to:
+ *   - Codex: `requirements.toml` config
+ *   - Claude: no equivalent
+ */
+import type { CancellationOptions } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface RequirementsToml {
+    readonly capability: typeof CapabilityFlag.RequirementsToml;
+    /** Read current org-level requirements. */
+    get(options?: CancellationOptions): Promise<OrgRequirements | null>;
+    /** Apply or replace the org-level requirements. */
+    apply(requirements: OrgRequirements, options?: CancellationOptions): Promise<void>;
+    /**
+     * Validate a proposed action (e.g., starting a session with model X)
+     * against the current requirements. Returns null if allowed, or a
+     * reason string if denied.
+     */
+    validate(proposedAction: RequirementsCheck, options?: CancellationOptions): Promise<string | null>;
+}
+export interface OrgRequirements {
+    /** Allowed model IDs. Empty = all. */
+    allowedModels?: ReadonlyArray<string>;
+    /** Allowed sandbox modes. */
+    allowedSandboxModes?: ReadonlyArray<'read-only' | 'workspace-write' | 'danger-full-access'>;
+    /** Allowed MCP server names. */
+    allowedMcpServers?: ReadonlyArray<string>;
+    /** Required hook events that must be active. */
+    requiredHooks?: ReadonlyArray<string>;
+}
+export type RequirementsCheck = {
+    kind: 'model';
+    model: string;
+} | {
+    kind: 'sandbox-mode';
+    mode: 'read-only' | 'workspace-write' | 'danger-full-access';
+} | {
+    kind: 'mcp-server';
+    name: string;
+};
+//# sourceMappingURL=requirementsToml.d.ts.map

package/dist/providers/primitives/optional/requirementsToml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requirementsToml.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/requirementsToml.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,gBAAgB,CAAC;IAE5D,2CAA2C;IAC3C,GAAG,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEpE,mDAAmD;IACnD,KAAK,CACH,YAAY,EAAE,eAAe,EAC7B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;OAIG;IACH,QAAQ,CACN,cAAc,EAAE,iBAAiB,EACjC,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,sCAAsC;IACtC,aAAa,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,6BAA6B;IAC7B,mBAAmB,CAAC,EAAE,aAAa,CAAC,WAAW,GAAG,iBAAiB,GAAG,oBAAoB,CAAC,CAAC;IAC5F,gCAAgC;IAChC,iBAAiB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,gDAAgD;IAChD,aAAa,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,WAAW,GAAG,iBAAiB,GAAG,oBAAoB,CAAA;CAAE,GACtF;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/providers/primitives/optional/requirementsToml.js

@@ -0,0 +1,13 @@
+/**
+ * RequirementsToml — org-managed config that locks down provider features.
+ *
+ * OPTIONAL primitive — Codex-native. Allows an organization to specify
+ * which models, sandboxes, and MCP servers are permitted. Useful for
+ * regulated environments.
+ *
+ * Maps to:
+ *   - Codex: `requirements.toml` config
+ *   - Claude: no equivalent
+ */
+export {};
+//# sourceMappingURL=requirementsToml.js.map

package/dist/providers/primitives/optional/requirementsToml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requirementsToml.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/requirementsToml.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/providers/primitives/optional/selfUpdate.d.ts

@@ -0,0 +1,34 @@
+/**
+ * SelfUpdate — provider's built-in update channel.
+ *
+ * OPTIONAL primitive — Codex-native. Trivially abstractable as "tell the
+ * provider to update itself."
+ *
+ * Maps to:
+ *   - Codex: `codex update` command
+ *   - Claude: relies on npm/global install management — capability false
+ *     unless instar wraps the npm update
+ */
+import type { CancellationOptions } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface SelfUpdate {
+    readonly capability: typeof CapabilityFlag.SelfUpdate;
+    /** Check for available updates. */
+    check(options?: CancellationOptions): Promise<UpdateInfo>;
+    /** Apply available updates. */
+    apply(options?: CancellationOptions): Promise<UpdateResult>;
+}
+export interface UpdateInfo {
+    currentVersion: string;
+    latestVersion: string;
+    updateAvailable: boolean;
+    /** Release notes / changelog excerpt. */
+    releaseNotes?: string;
+}
+export interface UpdateResult {
+    appliedFromVersion: string;
+    appliedToVersion: string;
+    /** Whether a restart is required for the new version to take effect. */
+    requiresRestart: boolean;
+}
+//# sourceMappingURL=selfUpdate.d.ts.map

package/dist/providers/primitives/optional/selfUpdate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selfUpdate.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/selfUpdate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,UAAU,CAAC;IAEtD,mCAAmC;IACnC,KAAK,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAE1D,+BAA+B;IAC/B,KAAK,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,yCAAyC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,eAAe,EAAE,OAAO,CAAC;CAC1B"}

package/dist/providers/primitives/optional/selfUpdate.js

@@ -0,0 +1,13 @@
+/**
+ * SelfUpdate — provider's built-in update channel.
+ *
+ * OPTIONAL primitive — Codex-native. Trivially abstractable as "tell the
+ * provider to update itself."
+ *
+ * Maps to:
+ *   - Codex: `codex update` command
+ *   - Claude: relies on npm/global install management — capability false
+ *     unless instar wraps the npm update
+ */
+export {};
+//# sourceMappingURL=selfUpdate.js.map

package/dist/providers/primitives/optional/selfUpdate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selfUpdate.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/selfUpdate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/providers/primitives/optional/shellEnvironmentPolicy.d.ts

@@ -0,0 +1,35 @@
+/**
+ * ShellEnvironmentPolicy — control which env vars subprocess tools see.
+ *
+ * OPTIONAL primitive — Codex-native. Determines whether shell tools
+ * (Bash, bash_run) inherit the parent process's environment, get a
+ * scrubbed subset, or get an empty env. Important for preventing
+ * credential leakage into tool subprocesses.
+ *
+ * Maps to:
+ *   - Codex: `shell_environment_policy` config key (clean/trimmed/pass-through)
+ *   - Claude: instar's SessionManager manually scrubs env vars during
+ *     tmux spawn; this primitive surfaces the same control as a config
+ */
+import type { CancellationOptions } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface ShellEnvironmentPolicy {
+    readonly capability: typeof CapabilityFlag.ShellEnvironmentPolicy;
+    /** Current policy. */
+    get(options?: CancellationOptions): Promise<ShellEnvPolicy>;
+    /** Update policy. Affects new sessions; existing keep their start-time policy. */
+    set(policy: ShellEnvPolicy, options?: CancellationOptions): Promise<void>;
+}
+export interface ShellEnvPolicy {
+    /**
+     * 'clean' = empty env for subprocesses
+     * 'trimmed' = only safe variables (no credentials)
+     * 'pass-through' = inherit everything
+     */
+    mode: 'clean' | 'trimmed' | 'pass-through';
+    /** Additional env vars to always include (mode-independent). */
+    alwaysInclude?: ReadonlyArray<string>;
+    /** Env vars to always exclude even if mode would include them. */
+    alwaysExclude?: ReadonlyArray<string>;
+}
+//# sourceMappingURL=shellEnvironmentPolicy.d.ts.map

package/dist/providers/primitives/optional/shellEnvironmentPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shellEnvironmentPolicy.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/shellEnvironmentPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,sBAAsB,CAAC;IAElE,sBAAsB;IACtB,GAAG,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAE5D,kFAAkF;IAClF,GAAG,CACD,MAAM,EAAE,cAAc,EACtB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,cAAc,CAAC;IAC3C,gEAAgE;IAChE,aAAa,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,kEAAkE;IAClE,aAAa,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACvC"}

package/dist/providers/primitives/optional/shellEnvironmentPolicy.js

@@ -0,0 +1,15 @@
+/**
+ * ShellEnvironmentPolicy — control which env vars subprocess tools see.
+ *
+ * OPTIONAL primitive — Codex-native. Determines whether shell tools
+ * (Bash, bash_run) inherit the parent process's environment, get a
+ * scrubbed subset, or get an empty env. Important for preventing
+ * credential leakage into tool subprocesses.
+ *
+ * Maps to:
+ *   - Codex: `shell_environment_policy` config key (clean/trimmed/pass-through)
+ *   - Claude: instar's SessionManager manually scrubs env vars during
+ *     tmux spawn; this primitive surfaces the same control as a config
+ */
+export {};
+//# sourceMappingURL=shellEnvironmentPolicy.js.map

package/dist/providers/primitives/optional/shellEnvironmentPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shellEnvironmentPolicy.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/shellEnvironmentPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/providers/primitives/optional/threadFork.d.ts

@@ -0,0 +1,47 @@
+/**
+ * ThreadFork — branch a session from a prior turn into a new thread.
+ *
+ * OPTIONAL primitive — Codex-native. Lets a caller explore alternate
+ * plans without losing the parent thread's history.
+ *
+ * Maps to:
+ *   - Codex: `codex fork` CLI / `thread/fork` JSON-RPC method
+ *   - Claude: not natively supported. Adapter MAY emulate via JSONL copy +
+ *     rewrite, but this is fragile; return null from `canFork()` instead.
+ */
+import type { CancellationOptions, ProviderSpecific, SessionHandle } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface ThreadFork {
+    readonly capability: typeof CapabilityFlag.ThreadFork;
+    /**
+     * Whether this provider supports forking. Some adapters declare the
+     * capability but can only fork in narrow conditions (e.g., session must
+     * not be running). Check before assuming.
+     */
+    canFork(session: SessionHandle): Promise<boolean>;
+    /**
+     * Fork from a specific turn. Returns the new SessionHandle representing
+     * the forked thread.
+     */
+    fork(source: SessionHandle, options: ThreadForkOptions): Promise<ForkedSession>;
+}
+export interface ThreadForkOptions extends CancellationOptions {
+    /**
+     * Turn index to fork from. 0 = the very beginning; -1 = the latest turn.
+     * Default: latest turn.
+     */
+    fromTurnIndex?: number;
+    /** Optional label for the forked thread (for UI / audit). */
+    label?: string;
+}
+export interface ForkedSession {
+    fork: SessionHandle;
+    /** The source session that was forked. */
+    parent: SessionHandle;
+    /** Turn index at which the fork branched off. */
+    branchedAtTurnIndex: number;
+    /** When the fork was created (ISO 8601). */
+    forkedAt: string;
+    providerSpecific?: ProviderSpecific;
+}
+//# sourceMappingURL=threadFork.d.ts.map

package/dist/providers/primitives/optional/threadFork.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threadFork.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/threadFork.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,UAAU,CAAC;IAEtD;;;;OAIG;IACH,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAElD;;;OAGG;IACH,IAAI,CACF,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,aAAa,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAC5D;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,aAAa,CAAC;IACpB,0CAA0C;IAC1C,MAAM,EAAE,aAAa,CAAC;IACtB,iDAAiD;IACjD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC"}

package/dist/providers/primitives/optional/threadFork.js

@@ -0,0 +1,13 @@
+/**
+ * ThreadFork — branch a session from a prior turn into a new thread.
+ *
+ * OPTIONAL primitive — Codex-native. Lets a caller explore alternate
+ * plans without losing the parent thread's history.
+ *
+ * Maps to:
+ *   - Codex: `codex fork` CLI / `thread/fork` JSON-RPC method
+ *   - Claude: not natively supported. Adapter MAY emulate via JSONL copy +
+ *     rewrite, but this is fragile; return null from `canFork()` instead.
+ */
+export {};
+//# sourceMappingURL=threadFork.js.map

package/dist/providers/primitives/optional/threadFork.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threadFork.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/threadFork.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/providers/primitives/optional/threadGoalSlot.d.ts

@@ -0,0 +1,23 @@
+/**
+ * ThreadGoalSlot — structured "what is this thread trying to accomplish" field.
+ *
+ * OPTIONAL primitive — Codex-native. Separate from session messages; a
+ * first-class slot for the thread's purpose. Useful for coherence checks
+ * (the same problem Instar solves with topics).
+ *
+ * Maps to:
+ *   - Codex: `thread/goal/set`, `thread/goal/get`, `thread/goal/clear`
+ *   - Claude: no native equivalent
+ */
+import type { CancellationOptions, SessionHandle } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface ThreadGoalSlot {
+    readonly capability: typeof CapabilityFlag.ThreadGoalSlot;
+    /** Read the current goal text, or null if not set. */
+    get(session: SessionHandle, options?: CancellationOptions): Promise<string | null>;
+    /** Set the goal text. Replaces any prior value. */
+    set(session: SessionHandle, goal: string, options?: CancellationOptions): Promise<void>;
+    /** Clear the goal. */
+    clear(session: SessionHandle, options?: CancellationOptions): Promise<void>;
+}
+//# sourceMappingURL=threadGoalSlot.d.ts.map

package/dist/providers/primitives/optional/threadGoalSlot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threadGoalSlot.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/threadGoalSlot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,cAAc,CAAC;IAE1D,sDAAsD;IACtD,GAAG,CACD,OAAO,EAAE,aAAa,EACtB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAE1B,mDAAmD;IACnD,GAAG,CACD,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,sBAAsB;IACtB,KAAK,CACH,OAAO,EAAE,aAAa,EACtB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB"}

package/dist/providers/primitives/optional/threadGoalSlot.js

@@ -0,0 +1,13 @@
+/**
+ * ThreadGoalSlot — structured "what is this thread trying to accomplish" field.
+ *
+ * OPTIONAL primitive — Codex-native. Separate from session messages; a
+ * first-class slot for the thread's purpose. Useful for coherence checks
+ * (the same problem Instar solves with topics).
+ *
+ * Maps to:
+ *   - Codex: `thread/goal/set`, `thread/goal/get`, `thread/goal/clear`
+ *   - Claude: no native equivalent
+ */
+export {};
+//# sourceMappingURL=threadGoalSlot.js.map

package/dist/providers/primitives/optional/threadGoalSlot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threadGoalSlot.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/threadGoalSlot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/providers/primitives/optional/threadRollback.d.ts

@@ -0,0 +1,34 @@
+/**
+ * ThreadRollback — drop last N turns and continue.
+ *
+ * OPTIONAL primitive — Codex-native. Recovers from a bad turn without
+ * restarting the whole session.
+ *
+ * Maps to:
+ *   - Codex: `thread/rollback` JSON-RPC method
+ *   - Claude: no native equivalent
+ */
+import type { CancellationOptions, ProviderSpecific, SessionHandle } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface ThreadRollback {
+    readonly capability: typeof CapabilityFlag.ThreadRollback;
+    /** Drop the last `turns` turns from the session, returning to a prior state. */
+    rollback(session: SessionHandle, options: ThreadRollbackOptions): Promise<ThreadRollbackResult>;
+}
+export interface ThreadRollbackOptions extends CancellationOptions {
+    /** Number of turns to drop. Must be >= 1. */
+    turns: number;
+    /** Optional reason recorded in audit logs. */
+    reason?: string;
+}
+export interface ThreadRollbackResult {
+    /** Turn index the session is now at. */
+    currentTurnIndex: number;
+    /** Number of turns actually dropped (may be less than requested if
+     *  the session didn't have that many). */
+    turnsDropped: number;
+    /** When the rollback happened (ISO 8601). */
+    rolledBackAt: string;
+    providerSpecific?: ProviderSpecific;
+}
+//# sourceMappingURL=threadRollback.d.ts.map

package/dist/providers/primitives/optional/threadRollback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threadRollback.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/threadRollback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,cAAc,CAAC;IAE1D,gFAAgF;IAChF,QAAQ,CACN,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,qBAAsB,SAAQ,mBAAmB;IAChE,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,wCAAwC;IACxC,gBAAgB,EAAE,MAAM,CAAC;IACzB;8CAC0C;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC"}

package/dist/providers/primitives/optional/threadRollback.js

@@ -0,0 +1,12 @@
+/**
+ * ThreadRollback — drop last N turns and continue.
+ *
+ * OPTIONAL primitive — Codex-native. Recovers from a bad turn without
+ * restarting the whole session.
+ *
+ * Maps to:
+ *   - Codex: `thread/rollback` JSON-RPC method
+ *   - Claude: no native equivalent
+ */
+export {};
+//# sourceMappingURL=threadRollback.js.map

package/dist/providers/primitives/optional/threadRollback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threadRollback.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/threadRollback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/providers/primitives/optional/trustedProjectGate.d.ts

@@ -0,0 +1,44 @@
+/**
+ * TrustedProjectGate — gate provider-config loading on explicit project trust.
+ *
+ * OPTIONAL primitive — Codex-native. Prevents malicious project config
+ * files from being loaded automatically: `.codex/config.toml` is only
+ * loaded if the user has explicitly marked the project as trusted.
+ *
+ * STRATEGIC: Claude does NOT have this. A malicious CLAUDE.md in a freshly
+ * cloned repo can silently exfiltrate, prompt-inject, or worse. Instar
+ * should adopt this primitive in its abstraction even when running against
+ * Claude — the abstraction can enforce the gate on top of Claude's
+ * unprotected loading.
+ *
+ * Maps to:
+ *   - Codex: trust prompt on first encounter; persisted in user config
+ *   - Claude: capability false at the provider level; Instar's abstraction
+ *     adds a wrapping gate before invoking Claude on a new project
+ */
+import type { CancellationOptions } from '../../types.js';
+import { CapabilityFlag } from '../../capabilities.js';
+export interface TrustedProjectGate {
+    readonly capability: typeof CapabilityFlag.TrustedProjectGate;
+    /** Check whether a project is currently trusted. */
+    isTrusted(projectRoot: string, options?: CancellationOptions): Promise<boolean>;
+    /** Mark a project as trusted. */
+    trust(projectRoot: string, options?: TrustOptions): Promise<void>;
+    /** Revoke trust from a project. */
+    revoke(projectRoot: string, options?: CancellationOptions): Promise<void>;
+    /** List trusted projects. */
+    listTrusted(options?: CancellationOptions): Promise<ReadonlyArray<TrustedProjectEntry>>;
+}
+export interface TrustOptions extends CancellationOptions {
+    /** Optional reason/note recorded with the trust. */
+    reason?: string;
+    /** Expire trust after this many days. Default: no expiry. */
+    expireAfterDays?: number;
+}
+export interface TrustedProjectEntry {
+    projectRoot: string;
+    trustedAt: string;
+    expiresAt?: string;
+    reason?: string;
+}
+//# sourceMappingURL=trustedProjectGate.d.ts.map

package/dist/providers/primitives/optional/trustedProjectGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustedProjectGate.d.ts","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/trustedProjectGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,OAAO,cAAc,CAAC,kBAAkB,CAAC;IAE9D,oDAAoD;IACpD,SAAS,CACP,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB,iCAAiC;IACjC,KAAK,CACH,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,YAAY,GACrB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,mCAAmC;IACnC,MAAM,CACJ,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,6BAA6B;IAC7B,WAAW,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,CAAC;CACzF;AAED,MAAM,WAAW,YAAa,SAAQ,mBAAmB;IACvD,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/providers/primitives/optional/trustedProjectGate.js

@@ -0,0 +1,20 @@
+/**
+ * TrustedProjectGate — gate provider-config loading on explicit project trust.
+ *
+ * OPTIONAL primitive — Codex-native. Prevents malicious project config
+ * files from being loaded automatically: `.codex/config.toml` is only
+ * loaded if the user has explicitly marked the project as trusted.
+ *
+ * STRATEGIC: Claude does NOT have this. A malicious CLAUDE.md in a freshly
+ * cloned repo can silently exfiltrate, prompt-inject, or worse. Instar
+ * should adopt this primitive in its abstraction even when running against
+ * Claude — the abstraction can enforce the gate on top of Claude's
+ * unprotected loading.
+ *
+ * Maps to:
+ *   - Codex: trust prompt on first encounter; persisted in user config
+ *   - Claude: capability false at the provider level; Instar's abstraction
+ *     adds a wrapping gate before invoking Claude on a new project
+ */
+export {};
+//# sourceMappingURL=trustedProjectGate.js.map

package/dist/providers/primitives/optional/trustedProjectGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustedProjectGate.js","sourceRoot":"","sources":["../../../../src/providers/primitives/optional/trustedProjectGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG"}