@cjhyy/code-shell-core 0.7.1 → 0.8.1

package/dist/preset/index.js

@@ -8,192 +8,32 @@
  * src/prompt/sections/*.md — each preset declares which sections to include.
  */
 import { loadSections } from "../prompt/section-loader.js";
-import { cronListToolDef } from "../tool-system/builtin/cron-list.definition.js";
-import { sleepToolDef } from "../tool-system/builtin/sleep.definition.js";
-export const AGENT_PRESET_NAMES = ["general", "terminal-coding"];
-// ─── Tool sets ───────────────────────────────────────────────────
-const GENERAL_BUILTIN_TOOLS = [
-    "Read",
-    "Write",
-    "Edit",
-    "ApplyPatch",
-    "Glob",
-    "Grep",
-    "Bash",
-    // Bash(run_in_background=true) companions — without these in the preset
-    // whitelist, the registry skips them (registerBuiltins filters BUILTIN_TOOLS
-    // by the selected set), so a model that correctly calls BashOutput after
-    // launching a background shell hits "Tool not found" and the turn dies.
-    "BashOutput",
-    "KillShell",
-    "ListShells",
-    // Browser automation (drive the in-app webview) — 3 semantic tools. Same
-    // whitelist requirement as the BashOutput trio above: registerBuiltins filters
-    // BUILTIN_TOOLS by the preset set, so without these the model calling
-    // browser_observe/etc. hits "Tool not found". They self-degrade to a clear
-    // error when no browser panel is wired (headless), so listing is safe.
-    "browser_observe",
-    "browser_act",
-    "browser_navigate",
-    "WebSearch",
-    "WebFetch",
-    "GenerateImage",
-    "GenerateVideo",
-    // Load a workspace image (by path) or an earlier history image (by number)
-    // into context so a vision model can SEE it. Same whitelist requirement as
-    // the rest: registered in BUILTIN_TOOLS but filtered out by registerBuiltins
-    // unless the preset names it — so it was registered-but-invisible before.
-    // Self-degrades to a text placeholder on non-vision models and gates format/
-    // size, so listing it unconditionally is safe.
-    "view_image",
-    "AskUserQuestion",
-    "Agent",
-    // AgentStatus removed: background agents now write to ~/.code-shell/agents/
-    // <id>.txt — the parent agent can Read/Bash tail that file for live progress.
-    // The implementation is still in the registry for SDK consumers if needed.
-    "AgentCancel",
-    "EnterPlanMode",
-    "ExitPlanMode",
-    "ToolSearch",
-    "TodoWrite",
-    sleepToolDef.name,
-    "Config",
-    "CronCreate",
-    "CronDelete",
-    cronListToolDef.name,
-    // cc-orchestrator:驱动外部 claude CLI 跑一轮。同 BashOutput/UseCredential/
-    // EditModelCatalog 的 whitelist 要求:已在 BUILTIN_TOOLS 注册,但 registerBuiltins
-    // 按 preset 集过滤 → 名单里没有它,agent 就没有「指挥 Claude Code」的工具,只能幻觉
-    // RemoteTrigger / 兜底 Bash `claude -p`(用户实测「为什么驱动 cc 没作为工具」)。
-    // 定时/循环驱动统一走 CronCreate(到点跑一轮引擎,prompt 里调 DriveAgent);
-    // 无人值守审批由 DriveAgent 自身 bypass 解决,不需要定时层专门的 CC 调度工具。
-    // DriveAgent 是通用驱动(cli: claude|codex);DriveClaudeCode 保留为 cli:claude 的
-    // 别名(老 prompt/记忆兼容)。两个都要在白名单里,否则 registerBuiltins 滤掉。
-    "DriveAgent",
-    "DriveAgentJobs",
-    "DriveClaudeCode",
-    // 编排时读 CC/Codex 剩余额度做规划(开几个/等重置/换 provider)。
-    "CheckQuota",
-    "Skill",
-    "AddMarketplace",
-    "MCPTool",
-    "ListMcpResources",
-    "ReadMcpResource",
-    "REPL",
-    "PowerShell",
-    // Persistent cross-session memory. Including these in the default preset is
-    // what lets the LLM list/read/save/delete memories during a normal session,
-    // AND what makes the end-of-session auto-dream consolidation work — its
-    // tool-call loop pulls these from the registry, so without them every dream
-    // run bailed with "missing memory tools". Save/Delete in the user scope have
-    // no explicit allow rule, so the default-mode classifier fallback asks;
-    // dream-scope writes go through freely.
-    "MemoryList",
-    "MemoryRead",
-    "MemorySave",
-    "MemoryDelete",
-    // AI 取用已存凭证(cookie/token/link)给 yt-dlp/curl 等。必须在 preset 白名单里
-    // 否则 registerBuiltins 滤掉它 → 即使存了凭证、注册了工具,AI 列表里也没有
-    // UseCredential(用户实测「找不到这个工具」的真因)。它带 isUseCredentialAvailable
-    // guard:cwd 凭证库为空时仍自动隐藏,所以无条件列入是安全的(空库不会冒出来)。
-    "UseCredential",
-    // 同理:把 cookie 凭证注入内置浏览器(恢复登录态后用 browser_* 工具)。带
-    // isInjectCredentialAvailable guard(无 cookie 凭证时自动隐藏),无条件列入安全。
-    "InjectCredential",
-    // AI 增/改模型 catalog(写 ~/.code-shell/model-catalog.user.json)。同 BashOutput/
-    // UseCredential 一样的 whitelist 要求:registerBuiltins 按 preset 集过滤 BUILTIN_TOOLS,
-    // 名单里没有它 → 即使工具已注册,AI 列表里也没有 → 用户实测「找不到这个工具」。
-    // 列入只是让 AI 看得到；执行期没有显式 allow rule，默认 classifier fallback 会审批。
-    "EditModelCatalog",
-    // Goal-mode control tools. Same whitelist requirement as the rest:
-    // registerBuiltins filters BUILTIN_TOOLS by the preset set, so a goal tool
-    // absent here is registered-but-invisible — the model never sees it and can
-    // neither self-declare completion (complete_goal) nor honor a user's request
-    // to abandon the goal (cancel_goal), stranding a persistent goal that only a
-    // manual disk edit could clear. cancel_goal is the "strong intent" escape
-    // hatch (requires confirm+reason); the turn-loop enforces the guard.
-    "complete_goal",
-    "cancel_goal",
-];
-const TERMINAL_CODING_EXTRA_TOOLS = [
-    "EnterWorktree",
-    "ExitWorktree",
-    "NotebookEdit",
-    "LSP",
-    "Brief",
-    "Arena",
-];
-// ─── Permission rules ────────────────────────────────────────────
-const GENERAL_PERMISSION_RULES = [
-    { tool: "Read", decision: "allow" },
-    { tool: "Glob", decision: "allow" },
-    { tool: "Grep", decision: "allow" },
-    { tool: "WebSearch", decision: "allow" },
-    { tool: "WebFetch", decision: "allow" },
-    { tool: "AskUserQuestion", decision: "allow" },
-    { tool: "Agent", decision: "allow" },
-    { tool: "AgentStatus", decision: "allow" },
-    { tool: "AgentCancel", decision: "allow" },
-    { tool: "EnterPlanMode", decision: "allow" },
-    { tool: "ExitPlanMode", decision: "allow" },
-    { tool: "ToolSearch", decision: "allow" },
-    { tool: "TodoWrite", decision: "allow" },
-    { tool: sleepToolDef.name, decision: "allow" },
-    { tool: cronListToolDef.name, decision: "allow" },
-    { tool: "CheckQuota", decision: "allow" },
-    { tool: "Skill", decision: "allow" },
-    // ListMcpResources only enumerates resource names (and the executor filters
-    // the list to this session's enabled servers). ReadMcpResource pulls actual
-    // content and is intentionally NOT auto-allowed here — with no explicit rule,
-    // default-mode classifier fallback asks the user. The tool's
-    // permissionDefault is only UI/metadata, not classifier input.
-    { tool: "ListMcpResources", decision: "allow" },
-    // Reading memory is always safe; writes (MemorySave/MemoryDelete) stay gated
-    // by explicit rules below plus default-mode ask fallback.
-    { tool: "MemoryList", decision: "allow" },
-    { tool: "MemoryRead", decision: "allow" },
-    // Browser automation (3 semantic tools). Rules are first-match-wins, ordered
-    // by specificity — so the action-gating rule for browser_act MUST come first:
-    // click/type/select mutate the page/form → "ask"; all other actions (hover/
-    // scroll/wait/press_key/list_tabs/switch_tab) fall through to the default
-    // allow rule below. observe (read-only) and navigate auto-allow.
-    // (Main-side sensitive-action + domain-whitelist enforcement also applies.)
-    {
-        tool: "browser_act",
-        argsPattern: { action: "^(click|type|select)$" },
-        decision: "ask",
-        reason: "browser_act click/type/select mutate the page",
-    },
-    { tool: "browser_observe", decision: "allow" },
-    { tool: "browser_navigate", decision: "allow" },
-];
+import { deriveBuiltinPresetExposure, deriveToolGatedPromptSections, } from "../tool-system/builtin/index.js";
+export const AGENT_PRESET_NAMES = ["harness-min", "general"];
+const HARNESS_MIN_EXPOSURE = deriveBuiltinPresetExposure("harness-min");
+const GENERAL_EXPOSURE = deriveBuiltinPresetExposure("general");
 // ─── Preset definitions ──────────────────────────────────────────
 export const BUILTIN_AGENT_PRESETS = {
+    "harness-min": {
+        name: "harness-min",
+        label: "Minimal Agent Harness",
+        description: "Domain-neutral orchestration with the minimal reusable tool surface.",
+        promptSections: ["harness-base", "orchestration", "tone"],
+        builtinTools: HARNESS_MIN_EXPOSURE.builtinTools,
+        defaultPermissionRules: HARNESS_MIN_EXPOSURE.defaultPermissionRules,
+    },
     general: {
         name: "general",
         label: "General Orchestrator",
         description: "Domain-agnostic orchestration for research, operations, automation, and long-running tasks.",
         promptSections: ["base", "orchestration", "browser", "tone"],
-        injectGitStatus: false,
-        builtinTools: [...GENERAL_BUILTIN_TOOLS],
-        defaultPermissionRules: GENERAL_PERMISSION_RULES,
-    },
-    "terminal-coding": {
-        name: "terminal-coding",
-        label: "Terminal Coding Assistant",
-        description: "General orchestration plus coding-focused guidance and code-navigation tools.",
-        promptSections: ["base", "orchestration", "coding", "browser", "tone"],
-        injectGitStatus: true,
-        builtinTools: [...GENERAL_BUILTIN_TOOLS, ...TERMINAL_CODING_EXTRA_TOOLS],
-        defaultPermissionRules: [
-            ...GENERAL_PERMISSION_RULES,
-            { tool: "LSP", decision: "allow" },
-            { tool: "Brief", decision: "allow" },
-        ],
+        builtinTools: GENERAL_EXPOSURE.builtinTools,
+        defaultPermissionRules: GENERAL_EXPOSURE.defaultPermissionRules,
     },
 };
-export const DEFAULT_AGENT_PRESET = "general";
-export const DEFAULT_CLI_PRESET = "terminal-coding";
+export const DEFAULT_AGENT_PRESET = "harness-min";
+/** @deprecated Product hosts should install a capability with `defaultPreset`. */
+export const DEFAULT_CLI_PRESET = DEFAULT_AGENT_PRESET;
 /** Registry of custom presets registered by external consumers. */
 const _customPresets = new Map();
 /**
@@ -208,7 +48,6 @@ const _customPresets = new Map();
  *   label: "Data Pipeline Orchestrator",
  *   description: "Manages ETL workflows and data quality checks.",
  *   promptSections: ["base", "orchestration"],
- *   injectGitStatus: false,
  *   builtinTools: ["Read", "Write", "Bash", "Glob", "Grep", "Agent"],
  *   defaultPermissionRules: [{ tool: "Read", decision: "allow" }],
  * });
@@ -218,32 +57,46 @@ export function registerPreset(preset) {
     _customPresets.set(preset.name, preset);
 }
 /** List all available preset names (built-in + custom). */
-export function listPresetNames() {
-    return [...AGENT_PRESET_NAMES, ..._customPresets.keys()];
+export function listPresetNames(capabilities = []) {
+    return [
+        ...new Set([
+            ...AGENT_PRESET_NAMES,
+            ..._customPresets.keys(),
+            ...capabilities.flatMap((capability) => (capability.presets ?? []).map((preset) => preset.name)),
+        ]),
+    ];
 }
-export function resolveAgentPreset(name) {
-    if (!name)
-        return BUILTIN_AGENT_PRESETS[DEFAULT_AGENT_PRESET];
+export function resolveAgentPreset(name, capabilities = []) {
+    let resolvedName = name;
+    if (!resolvedName) {
+        const defaults = [
+            ...new Set(capabilities
+                .map((capability) => capability.defaultPreset)
+                .filter((preset) => Boolean(preset))),
+        ];
+        if (defaults.length > 1) {
+            throw new Error(`Capabilities contributed conflicting default presets: ${defaults.join(", ")}`);
+        }
+        resolvedName = defaults[0] ?? DEFAULT_AGENT_PRESET;
+    }
+    const contributed = capabilities
+        .flatMap((capability) => [...(capability.presets ?? [])])
+        .find((preset) => preset.name === resolvedName);
+    if (contributed)
+        return contributed;
     // Check built-in first
-    const builtin = BUILTIN_AGENT_PRESETS[name];
+    const builtin = BUILTIN_AGENT_PRESETS[resolvedName];
     if (builtin)
         return builtin;
     // Check custom presets
-    const custom = _customPresets.get(name);
+    const custom = _customPresets.get(resolvedName);
     if (custom)
         return custom;
-    const allowed = listPresetNames().join(", ");
-    throw new Error(`Unknown agent preset "${name}". Available presets: ${allowed}`);
+    const allowed = listPresetNames(capabilities).join(", ");
+    throw new Error(`Unknown agent preset "${resolvedName}". Available presets: ${allowed}`);
 }
-/** Tool names that gate the "browser" prompt section — if NONE of these are in
- *  the active tool set (browser capability turned off), the section is dropped
- *  so the model isn't told how to use tools it can't see. Keep in sync with the
- *  browser tools registered in builtin/index.ts. */
-const BROWSER_SECTION_TOOLS = ["browser_observe", "browser_act", "browser_navigate"];
-/** Prompt sections whose inclusion is gated by an active tool being present. */
-const TOOL_GATED_SECTIONS = {
-    browser: BROWSER_SECTION_TOOLS,
-};
+/** Prompt-section capability links are contributed by builtin exposure metadata. */
+const TOOL_GATED_SECTIONS = deriveToolGatedPromptSections();
 function isActiveToolNamesList(value) {
     return Array.isArray(value);
 }
@@ -275,24 +128,30 @@ export function buildPresetSystemPrompt(preset, optionsOrActiveToolNames) {
     if (activeToolNames) {
         const active = new Set(activeToolNames);
         sections = sections.filter((s) => {
-            const gate = TOOL_GATED_SECTIONS[s];
+            const gate = options.toolCatalog
+                ? deriveToolGatedPromptSections(options.toolCatalog)[s]
+                : TOOL_GATED_SECTIONS[s];
             return !gate || gate.some((t) => active.has(t));
         });
     }
-    return [loadSections(sections), platformShellGuidance(options.platform ?? process.platform)]
+    return [
+        loadSections(sections, options.promptSections),
+        platformShellGuidance(options.platform ?? process.platform),
+    ]
         .filter(Boolean)
         .join("\n\n");
 }
 export function resolveBuiltinToolNames(options) {
-    const preset = resolveAgentPreset(options?.preset);
+    const preset = resolveAgentPreset(options?.preset, options?.capabilities);
     const names = new Set(preset.builtinTools);
     for (const name of options?.enabledBuiltinTools ?? []) {
         names.add(name);
     }
-    if (options?.host === "desktop") {
-        names.delete("EnterWorktree");
-        names.delete("ExitWorktree");
-        names.add("SwitchSessionWorkspace");
+    for (const capability of options?.capabilities ?? []) {
+        capability.adjustToolSelection?.(names, {
+            preset: preset.name,
+            host: options?.host,
+        });
     }
     for (const name of options?.disabledBuiltinTools ?? []) {
         names.delete(name);

package/dist/product/define.js

@@ -46,8 +46,15 @@ export function defineProduct(definition, runtime) {
     const presetName = presetDef.name;
     // Determine builtin tools: start from a base set, apply adapter overrides
     const baseTools = [
-        "Read", "Write", "Edit", "Glob", "Grep", "Bash",
-        "AskUserQuestion", "Agent", "ToolSearch",
+        "Read",
+        "Write",
+        "Edit",
+        "Glob",
+        "Grep",
+        "Bash",
+        "AskUserQuestion",
+        "Agent",
+        "ToolSearch",
         "TodoWrite",
     ];
     const enabledSet = new Set([...baseTools, ...(adapter?.enableTools ?? [])]);
@@ -71,7 +78,6 @@ export function defineProduct(definition, runtime) {
         label: presetDef.label,
         description: presetDef.description,
         promptSections: presetDef.sections ?? ["base", "orchestration"],
-        injectGitStatus: presetDef.injectGitStatus ?? false,
         builtinTools: [...enabledSet],
         defaultPermissionRules: permissionRules,
     };

package/dist/product/types.d.ts

@@ -39,8 +39,6 @@ export interface ProductPreset {
     customPrompt?: string;
     /** Additional text appended after the main system prompt. */
     appendPrompt?: string;
-    /** Whether to inject git status into system context. Default: false */
-    injectGitStatus?: boolean;
 }
 export interface CustomTool {
     /** Tool definition (name, description, inputSchema). */

package/dist/profile/activation.d.ts

@@ -0,0 +1,36 @@
+/**
+ * 激活/切换/关闭事务。原子性来源：整个 `profile` 子树一次
+ * saveProjectSetting 写入（内部 tmp+rename）——切换即全量替换，
+ * 永远不存在“旧的撤一半、新的写一半”。
+ * mainInstruction / portableMemory 不落 settings：settings 只记 active
+ * 名字（+ preset/overrides 快照），活字段由 resolve.ts 从库读取。
+ */
+import type { SettingsManager } from "../settings/manager.js";
+import type { CapabilityOverrides } from "../settings/schema.js";
+import type { WorkspaceProfile } from "./types.js";
+/** settings.profile 子树的形状（与 settings/schema.ts 的 zod 定义一致）。 */
+export interface WorkspaceProfileSubtree {
+    active: string;
+    preset?: string;
+    overrides?: CapabilityOverrides;
+}
+/**
+ * 当前机器上可见的能力清单，用于 `exclusiveCapabilities` 决定「要关掉哪些」。
+ * 由 host 注入（core 不扫描磁盘）。缺省即无法独占，退回并集语义。
+ */
+export interface InstalledCapabilityNames {
+    skills?: readonly string[];
+    plugins?: readonly string[];
+    mcp?: readonly string[];
+    agents?: readonly string[];
+}
+/**
+ * 把 profile 声明的能力展开为 override 快照；空 bucket 不落键。
+ *
+ * 默认只产出 `"on"`（并集：保证该有的在，不动用户开的）。profile 声明
+ * `exclusiveCapabilities` 且 host 给出 `installed` 时，未声明的同类能力显式
+ * 落 `"off"`，形成独占工作面。
+ */
+export declare function profileOverridesFromDefinition(profile: WorkspaceProfile, installed?: InstalledCapabilityNames): NonNullable<CapabilityOverrides>;
+export declare function activateWorkspaceProfile(settings: SettingsManager, name: string, cwd: string, installed?: InstalledCapabilityNames): WorkspaceProfile;
+export declare function deactivateWorkspaceProfile(settings: SettingsManager, cwd: string): void;

package/dist/profile/activation.js

@@ -0,0 +1,57 @@
+import { readWorkspaceProfile } from "./store.js";
+/**
+ * 把 profile 声明的能力展开为 override 快照；空 bucket 不落键。
+ *
+ * 默认只产出 `"on"`（并集：保证该有的在，不动用户开的）。profile 声明
+ * `exclusiveCapabilities` 且 host 给出 `installed` 时，未声明的同类能力显式
+ * 落 `"off"`，形成独占工作面。
+ */
+// 返回 NonNullable：`CapabilityOverrides` 自身以 `.optional()` 结尾（settings 里
+// 整个 key 可以缺失），但这个函数**总是**构造一个对象字面量，永不返回 undefined。
+// 沿用可空别名会迫使每个调用方（含断言 `overrides.skills` 的测试）先做一次不可能
+// 为真的 null 检查。
+export function profileOverridesFromDefinition(profile, installed) {
+    const exclusive = profile.exclusiveCapabilities === true;
+    const bucket = (declared, available) => {
+        const entries = {};
+        for (const name of declared)
+            entries[name] = "on";
+        if (exclusive && available) {
+            const claimed = new Set(declared);
+            for (const name of available) {
+                if (!claimed.has(name))
+                    entries[name] = "off";
+            }
+        }
+        return Object.keys(entries).length > 0 ? entries : undefined;
+    };
+    const plugins = bucket(profile.plugins, installed?.plugins);
+    const skills = bucket(profile.skills, installed?.skills);
+    const mcp = bucket(profile.mcp, installed?.mcp);
+    const agents = bucket(profile.agents, installed?.agents);
+    return {
+        ...(plugins ? { plugins } : {}),
+        ...(skills ? { skills } : {}),
+        ...(mcp ? { mcp } : {}),
+        ...(agents ? { agents } : {}),
+    };
+}
+export function activateWorkspaceProfile(settings, name, cwd, installed) {
+    const profile = readWorkspaceProfile(name);
+    if (!profile) {
+        throw new Error(`Workspace profile "${name}" not found in the global library`);
+    }
+    const subtree = {
+        active: profile.name,
+        // A digital human contributes its role, capabilities, and memory. The
+        // CodeShell runtime base is a host concern and must not vary with imported
+        // definitions that happen to carry a legacy basePreset value.
+        preset: "general",
+        overrides: profileOverridesFromDefinition(profile, installed),
+    };
+    settings.saveProjectSetting("profile", subtree, cwd);
+    return profile;
+}
+export function deactivateWorkspaceProfile(settings, cwd) {
+    settings.deleteProjectSetting("profile", cwd);
+}

package/dist/profile/catalog-store.d.ts

@@ -0,0 +1,77 @@
+import { type CatalogEntry, type CatalogTeam } from "./catalog.js";
+export interface RegisteredHumanRepo {
+    /** `owner/repo` */
+    repo: string;
+    addedAt: number;
+}
+export interface HumanRepoListEntry extends RegisteredHumanRepo {
+    /** 该仓库当前提供的数字人数量。 */
+    count: number;
+    /** 读取过程中的问题（坏定义、缺 manifest）。 */
+    errors: string[];
+    cloned: boolean;
+}
+export declare function humanReposRoot(): string;
+export declare function humanRepoDir(repo: string): string;
+export declare function listHumanRepos(): RegisteredHumanRepo[];
+/**
+ * 注册并克隆一个数字人仓库。已存在则拉取更新。
+ *
+ * 克隆是网络+磁盘写入操作，调用方应已取得用户确认。
+ */
+export declare function addHumanRepo(repo: string): Promise<{
+    ok: true;
+    entry: HumanRepoListEntry;
+} | {
+    ok: false;
+    error: string;
+}>;
+/**
+ * Swap a validated staging tree into place.
+ *
+ * Ordering matters for crash safety: promote FIRST (rename staging over a
+ * now-absent `dir`), and only retire the old tree around it. The previous
+ * `dir → retired` then `staging → dir` sequence left no tree at `dir` at all if
+ * the process died in between, and nothing scanned for `.retired-*` on startup,
+ * so the UI showed "尚未克隆" with the data still on disk under a name nobody
+ * looked for. Here the only window is one where BOTH the old tree (at `retired`)
+ * and the new tree (at `staging`) still exist, and `reclaimOrphanedTrees`
+ * cleans up whatever is left over on the next call.
+ */
+declare function promoteStagedRepo(staging: string, dir: string): void;
+/**
+ * Recover from a crash during a previous swap.
+ *
+ * If `dir` is missing but a `.retired-*` sibling exists, a process died between
+ * retiring the old tree and promoting the new one. Restore the newest retired
+ * tree rather than leaving the repo looking un-cloned, then drop the rest.
+ * Runs under the repo lock, so no concurrent swap can be mid-flight.
+ */
+declare function reclaimOrphanedTrees(dir: string): void;
+/**
+ * Crash-safety internals, exposed for tests only.
+ *
+ * `promoteStagedRepo`/`reclaimOrphanedTrees` implement the swap-and-recover
+ * protocol. Exercising them through `addHumanRepo` would require network git, so
+ * the recovery cases (interrupted swap, stale retired trees) are tested here
+ * directly. Not part of the package's public surface.
+ */
+export declare const __testables: {
+    promoteStagedRepo: typeof promoteStagedRepo;
+    reclaimOrphanedTrees: typeof reclaimOrphanedTrees;
+};
+export declare function removeHumanRepo(repo: string): void;
+/** 注册表 + 每个仓库的读取结果，供设置页展示。 */
+export declare function listHumanRepoDetails(): HumanRepoListEntry[];
+/**
+ * 所有已注册仓库提供的数字人。
+ *
+ * 同名定义按注册顺序先到先得，并记一条冲突说明——静默覆盖会让用户以为装的是
+ * 另一个仓库的版本。
+ */
+export declare function readAllHumanRepoEntries(): {
+    entries: CatalogEntry[];
+    teams: CatalogTeam[];
+    errors: string[];
+};
+export {};