@cjhyy/code-shell-core 0.7.1 → 0.8.1

package/dist/profile/requirements.js

@@ -0,0 +1,117 @@
+/**
+ * 组装 `npx skills add` 的 argv。
+ *
+ * 两条硬约束：
+ * 1. **绝不加 `-g`** —— 全局安装落在 `~/.claude/skills`，而 scanner 只读
+ *    `<cwd>/.code-shell/skills`、`<cwd>/.agents/skills`、`~/.code-shell/skills`
+ *    三个根。装了却扫不到，就是又一个"配了等于没配"。
+ * 2. repo 与 skill 名各自占独立 argv 槽，不拼 shell 字符串；配合 schema 的
+ *    `SKILL_REPO_RE` 挡住 `--flag` / `../` / `;rm -rf` 一类注入。
+ */
+export function buildSkillInstallArgs(requirement) {
+    const args = ["skills", "add", requirement.repo];
+    if (requirement.skills && requirement.skills.length > 0) {
+        // 具名子集：只装需要的，避免把整个仓库几十个 skill 都拖进项目。
+        args.push("--skill", requirement.skills.join(","), "--agent", "*", "--yes");
+    }
+    else {
+        // --all === --skill '*' --agent '*' -y
+        args.push("--all");
+    }
+    if (requirement.fullDepth)
+        args.push("--full-depth");
+    return args;
+}
+/** 从 `--version` 输出里取第一个点分版本号。 */
+export function parseToolVersion(output) {
+    const match = /(\d+(?:\.\d+){0,2})/.exec(output);
+    return match?.[1];
+}
+/** 按数字段比较；返回 <0 / 0 / >0。缺省段视为 0，故 "22" == "22.0.0"。 */
+export function compareToolVersions(a, b) {
+    const pa = a.split(".").map(Number);
+    const pb = b.split(".").map(Number);
+    for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+        const diff = (pa[i] ?? 0) - (pb[i] ?? 0);
+        if (diff !== 0)
+            return diff;
+    }
+    return 0;
+}
+/**
+ * 找出即将安装的裸名与已有 skill 的撞名。
+ *
+ * scanner 的去重是「先到先得且静默」——同名后来者直接被丢弃，不告警。所以要在
+ * 安装前把遮蔽关系摊开给用户看。插件 skill 带 `plugin:` 命名空间、走独立 dedup
+ * 集合，永远不会与裸名互相覆盖，故排除。
+ */
+export function summarizeSkillConflicts(incoming, installed) {
+    const conflicts = [];
+    for (const name of incoming) {
+        const hit = installed.find((s) => s.source !== "plugin" && s.name === name);
+        if (hit)
+            conflicts.push({ name, existingSource: hit.source });
+    }
+    return conflicts;
+}
+/** 纯函数：不碰磁盘、不起进程，全部输入经 context 注入，便于测试。 */
+export function planProfileRequirements(requires, context) {
+    const skillInstalls = [];
+    const conflicts = [];
+    const missingTools = [];
+    for (const requirement of requires?.skills ?? []) {
+        if (requirement.skills && requirement.skills.length > 0) {
+            // 只有落在 project 根（安装目标）的同名 skill 才算"已具备"；命中更低优先级的
+            // user 根不算——那份会被这次安装遮蔽，属于要提示的冲突而非可跳过的满足。
+            const satisfied = (name) => context.installedSkills.some((s) => s.name === name && s.source === "project");
+            const missing = requirement.skills.filter((name) => !satisfied(name));
+            const shadowed = summarizeSkillConflicts(requirement.skills.filter((name) => !satisfied(name)), context.installedSkills);
+            conflicts.push(...shadowed);
+            // 具名子集全在了就不必再跑安装。
+            if (missing.length === 0)
+                continue;
+            // Keep the reviewed command and the executed argv aligned: if part of a
+            // multi-Skill requirement is already present, only pass the genuinely
+            // missing names to the installer. Re-sending the full authored subset
+            // could unnecessarily replace a working project Skill while the UI said
+            // it was only going to install the missing one.
+            skillInstalls.push({
+                requirement: { ...requirement, skills: missing },
+                missing,
+            });
+        }
+        else {
+            // 整仓安装无法预判会带来哪些名字，只能照跑；`skills add` 自身是幂等的。
+            skillInstalls.push({ requirement });
+        }
+    }
+    for (const tool of requires?.tools ?? []) {
+        const output = context.toolProbe(tool.bin);
+        if (output === null) {
+            missingTools.push({
+                bin: tool.bin,
+                reason: "not-found",
+                ...(tool.hint ? { hint: tool.hint } : {}),
+            });
+            continue;
+        }
+        if (!tool.minVersion)
+            continue;
+        const found = parseToolVersion(output);
+        if (found && compareToolVersions(found, tool.minVersion) < 0) {
+            missingTools.push({
+                bin: tool.bin,
+                reason: "too-old",
+                found,
+                required: tool.minVersion,
+                ...(tool.hint ? { hint: tool.hint } : {}),
+            });
+        }
+    }
+    return {
+        skillInstalls,
+        missingTools,
+        conflicts,
+        needsInstall: skillInstalls.length > 0,
+    };
+}

package/dist/profile/resolve.d.ts

@@ -0,0 +1,11 @@
+import type { SettingsManager } from "../settings/manager.js";
+import type { WorkspaceProfile } from "./types.js";
+export interface ResolveActiveWorkspaceProfileInput {
+    /** Session-bound digital-human profile; wins over the project default. */
+    sessionProfile?: string;
+    cwd: string;
+    settings: SettingsManager;
+}
+export declare function resolveActiveWorkspaceProfile(input: ResolveActiveWorkspaceProfileInput): WorkspaceProfile | undefined;
+/** preset 解析用的快照读取（优先级：agent.preset > 本值 > capability 默认）。 */
+export declare function workspaceProfilePresetFor(settings: SettingsManager, cwd: string): string | undefined;

package/dist/profile/resolve.js

@@ -0,0 +1,41 @@
+/**
+ * “当前激活的是谁 + 它的活字段”的唯一入口。除 overrides 折叠
+ * （读 settings 持久化快照，见 overlay.ts）之外，任何代码不得自行读
+ * profile.active 拼路径。Session 绑定的 profile 显式优先于项目默认，
+ * 让同一项目内的 PM / UI / 工程 Session 可以各自持有稳定数字人身份。
+ */
+import { logger } from "../logging/logger.js";
+import { readWorkspaceProfile } from "./store.js";
+function readSubtree(settings, cwd) {
+    try {
+        return settings.getForScope("project", cwd).profile;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function resolveActiveWorkspaceProfile(input) {
+    const name = input.sessionProfile ?? readSubtree(input.settings, input.cwd)?.active;
+    if (!name)
+        return undefined;
+    let workspaceProfile;
+    try {
+        workspaceProfile = readWorkspaceProfile(name);
+    }
+    catch (error) {
+        logger.warn("profile.active_invalid", {
+            cat: "profile",
+            name,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        return undefined;
+    }
+    if (!workspaceProfile) {
+        logger.warn("profile.active_missing_from_library", { cat: "profile", name });
+    }
+    return workspaceProfile;
+}
+/** preset 解析用的快照读取（优先级：agent.preset > 本值 > capability 默认）。 */
+export function workspaceProfilePresetFor(settings, cwd) {
+    return readSubtree(settings, cwd)?.preset;
+}

package/dist/profile/store.d.ts

@@ -0,0 +1,17 @@
+import { type WorkspaceProfile, type WorkspaceProfileInput } from "./types.js";
+export declare function workspaceProfilesRoot(): string;
+/** 该数字人的根目录 —— 同时也是它可移植记忆层的 MemoryManager baseDir。 */
+export declare function workspaceProfileDir(name: string): string;
+export declare function readWorkspaceProfile(name: string): WorkspaceProfile | undefined;
+export declare function listWorkspaceProfiles(): WorkspaceProfile[];
+/**
+ * 原子写（tmp+rename），与 SettingsManager 的写法一致。
+ *
+ * 接收 `WorkspaceProfileInput`（而不是解析后的 `WorkspaceProfile`）：这个函数
+ * 本来就会 `parse()`，所以带 default 的字段由 schema 负责填。用输出类型标注会
+ * 让调用方必须手写它们，也会在 schema 新增带 default 的字段时把所有调用方一起
+ * 弄红——尽管运行时完全没变。
+ */
+export declare function saveWorkspaceProfile(profile: WorkspaceProfileInput): void;
+/** 删除前再次执行目录 containment 校验；不会跟随 profile 目录 symlink。 */
+export declare function deleteWorkspaceProfile(name: string): boolean;

package/dist/profile/store.js

@@ -0,0 +1,167 @@
+/**
+ * 全局数字人库：~/.code-shell/profiles/<name>/profile.json。
+ * 路径一律经 codeShellHome() 解析（CODE_SHELL_HOME / identity dataRoot 生效）。
+ * core 不内置任何领域 profile；样例见 docs/examples/workspace-profile-sample.md。
+ */
+import { randomUUID } from "node:crypto";
+import { lstatSync, mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+import { isAbsolute, join, relative, sep } from "node:path";
+import { logger } from "../logging/logger.js";
+import { codeShellHome } from "../session/session-manager.js";
+import { WORKSPACE_PROFILE_NAME_RE, WorkspaceProfileSchema, } from "./types.js";
+export function workspaceProfilesRoot() {
+    return join(codeShellHome(), "profiles");
+}
+/** 该数字人的根目录 —— 同时也是它可移植记忆层的 MemoryManager baseDir。 */
+export function workspaceProfileDir(name) {
+    return join(workspaceProfilesRoot(), name);
+}
+function isContained(root, target) {
+    const rel = relative(root, target);
+    return rel === "" || (!rel.startsWith(`..${sep}`) && rel !== ".." && !isAbsolute(rel));
+}
+function lstatIfPresent(path) {
+    try {
+        return lstatSync(path);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+}
+function checkedProfilesRoot(create = false) {
+    const root = workspaceProfilesRoot();
+    let info = lstatIfPresent(root);
+    if (!info && create) {
+        mkdirSync(root, { recursive: true, mode: 0o700 });
+        info = lstatSync(root);
+    }
+    if (!info)
+        return undefined;
+    if (info.isSymbolicLink() || !info.isDirectory()) {
+        throw new Error(`Invalid workspace profiles root: ${root}`);
+    }
+    return root;
+}
+function checkedProfileDirectory(name, create = false) {
+    const root = checkedProfilesRoot(create);
+    if (!root)
+        return undefined;
+    const dir = join(root, name);
+    let info = lstatIfPresent(dir);
+    if (!info && create) {
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+        info = lstatSync(dir);
+    }
+    if (!info)
+        return undefined;
+    if (info.isSymbolicLink() || !info.isDirectory()) {
+        throw new Error(`Invalid workspace profile directory: ${dir}`);
+    }
+    if (!isContained(realpathSync(root), realpathSync(dir))) {
+        throw new Error(`Workspace profile directory escapes the profiles root: ${dir}`);
+    }
+    return dir;
+}
+function checkedProfileFile(name) {
+    const dir = checkedProfileDirectory(name);
+    if (!dir)
+        return undefined;
+    const path = join(dir, "profile.json");
+    const info = lstatIfPresent(path);
+    if (!info)
+        return undefined;
+    if (info.isSymbolicLink() || !info.isFile()) {
+        throw new Error(`Invalid workspace profile file: ${path}`);
+    }
+    return path;
+}
+export function readWorkspaceProfile(name) {
+    if (!WORKSPACE_PROFILE_NAME_RE.test(name))
+        return undefined;
+    const path = join(workspaceProfileDir(name), "profile.json");
+    try {
+        const checkedPath = checkedProfileFile(name);
+        if (!checkedPath)
+            return undefined;
+        return WorkspaceProfileSchema.parse(JSON.parse(readFileSync(checkedPath, "utf-8")));
+    }
+    catch (error) {
+        throw new Error(`Invalid workspace profile "${name}" at ${path}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+    }
+}
+export function listWorkspaceProfiles() {
+    const root = checkedProfilesRoot();
+    if (!root)
+        return [];
+    const out = [];
+    for (const entry of readdirSync(root, { withFileTypes: true })) {
+        if (!entry.isDirectory()) {
+            if (entry.isSymbolicLink()) {
+                logger.warn("profile.library_entry_invalid", {
+                    cat: "profile",
+                    name: entry.name,
+                    error: "symbolic links are not allowed",
+                });
+            }
+            continue;
+        }
+        try {
+            const profile = readWorkspaceProfile(entry.name);
+            if (profile)
+                out.push(profile);
+        }
+        catch (error) {
+            logger.warn("profile.library_entry_invalid", {
+                cat: "profile",
+                name: entry.name,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    return out.sort((a, b) => a.name.localeCompare(b.name));
+}
+/**
+ * 原子写（tmp+rename），与 SettingsManager 的写法一致。
+ *
+ * 接收 `WorkspaceProfileInput`（而不是解析后的 `WorkspaceProfile`）：这个函数
+ * 本来就会 `parse()`，所以带 default 的字段由 schema 负责填。用输出类型标注会
+ * 让调用方必须手写它们，也会在 schema 新增带 default 的字段时把所有调用方一起
+ * 弄红——尽管运行时完全没变。
+ */
+export function saveWorkspaceProfile(profile) {
+    const parsed = WorkspaceProfileSchema.parse(profile);
+    const dir = checkedProfileDirectory(parsed.name, true);
+    if (!dir)
+        throw new Error(`Could not create workspace profile directory for "${parsed.name}"`);
+    const path = join(dir, "profile.json");
+    const existing = lstatIfPresent(path);
+    if (existing) {
+        if (existing.isSymbolicLink() || !existing.isFile()) {
+            throw new Error(`Invalid workspace profile file: ${path}`);
+        }
+    }
+    const tmp = `${path}.${process.pid}.${randomUUID()}.tmp`;
+    try {
+        writeFileSync(tmp, `${JSON.stringify(parsed, null, 2)}\n`, {
+            encoding: "utf-8",
+            mode: 0o600,
+            flag: "wx",
+        });
+        renameSync(tmp, path);
+    }
+    finally {
+        rmSync(tmp, { force: true });
+    }
+}
+/** 删除前再次执行目录 containment 校验；不会跟随 profile 目录 symlink。 */
+export function deleteWorkspaceProfile(name) {
+    if (!WORKSPACE_PROFILE_NAME_RE.test(name))
+        return false;
+    const dir = checkedProfileDirectory(name);
+    if (!dir)
+        return false;
+    rmSync(dir, { recursive: true, force: true });
+    return true;
+}

package/dist/profile/types.d.ts

@@ -0,0 +1,321 @@
+/**
+ * WorkspaceProfile（数字人）— harness 元机制的数据定义。
+ * 引用现有窄 AgentPreset，不修改它；plugins/skills/mcp/agents 在激活时
+ * 展开为 capabilityOverrides 形状的 force-enable 快照（见 activation.ts）。
+ * 设计稿：docs/superpowers/specs/2026-07-15-workspace-profile-design.md
+ */
+import { z } from "zod";
+/** 目录名即机器标识：小写字母/数字开头，可含 - _，防路径逃逸。 */
+export declare const WORKSPACE_PROFILE_NAME_RE: RegExp;
+/**
+ * `owner/repo`。收紧到 GitHub 允许的字符集，且两段都不能以 `-`/`.` 开头 ——
+ * 这个值会作为参数传给 `npx skills add`，必须挡住 `--flag`、`../` 一类注入。
+ */
+export declare const SKILL_REPO_RE: RegExp;
+/** 纯数字点分版本，避免把任意字符串塞进版本比较。 */
+export declare const TOOL_VERSION_RE: RegExp;
+/** 持久化与提示注入的防滥用边界；Desktop 编辑器应保持相同上限。 */
+export declare const WORKSPACE_PROFILE_LIMITS: {
+    readonly label: 120;
+    readonly description: 4096;
+    readonly basePreset: 128;
+    readonly mainInstruction: 32768;
+    readonly version: 128;
+    readonly capabilityCount: 128;
+    readonly capabilityName: 256;
+    /** requires.skills / requires.tools 各自的条目上限。 */
+    readonly requirementCount: 16;
+};
+/**
+ * 依赖来源：数字人自带的「怎么把能力弄来」声明。
+ *
+ * 与 plugins/skills/mcp/agents 的分工：那四个是 force-enable 开关（只能打开
+ * 磁盘上已存在的东西），`requires` 才是获取步骤。没有 `requires` 的旧 profile
+ * 行为完全不变。
+ *
+ * 解析、冲突预检与安装见 requirements.ts —— 安装涉及克隆远程仓库与执行
+ * `npx skills add`，必须先经用户确认，绝不静默执行。
+ */
+declare const skillRequirementSchema: z.ZodObject<{
+    /** 目前只支持 github；保留判别字段以便后续扩展。 */
+    source: z.ZodLiteral<"github">;
+    /** `owner/repo` 形式。 */
+    repo: z.ZodString;
+    /** 只装这些 skill；省略表示装全部（`--all`）。 */
+    skills: z.ZodOptional<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>>;
+    /**
+     * project → `<cwd>/.agents/skills`（scanner 认）。
+     * user 级 `npx skills add -g` 落在 `~/.claude/skills`，**不在 scanner 的三个根里**，
+     * 装了会扫不到，故不开放该 scope。
+     */
+    scope: z.ZodDefault<z.ZodLiteral<"project">>;
+    /** 仓库根有 SKILL.md 时也继续深搜子目录。 */
+    fullDepth: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    source: "github";
+    scope: "project";
+    repo: string;
+    fullDepth: boolean;
+    skills?: string[] | undefined;
+}, {
+    source: "github";
+    repo: string;
+    scope?: "project" | undefined;
+    skills?: string[] | undefined;
+    fullDepth?: boolean | undefined;
+}>;
+/** 装不了、只能检测的外部命令（ffmpeg / node …）。缺失时提前失败，而不是渲染到一半才炸。 */
+declare const toolRequirementSchema: z.ZodObject<{
+    bin: z.ZodString;
+    /** 形如 "22"、"22.1"、"22.1.0"，与 `--version` 输出的首个版本号比较。 */
+    minVersion: z.ZodOptional<z.ZodString>;
+    /** 缺失时展示给用户的安装建议，例如 "brew install ffmpeg"。 */
+    hint: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    bin: string;
+    minVersion?: string | undefined;
+    hint?: string | undefined;
+}, {
+    bin: string;
+    minVersion?: string | undefined;
+    hint?: string | undefined;
+}>;
+export declare const WorkspaceProfileRequirementsSchema: z.ZodObject<{
+    skills: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        /** 目前只支持 github；保留判别字段以便后续扩展。 */
+        source: z.ZodLiteral<"github">;
+        /** `owner/repo` 形式。 */
+        repo: z.ZodString;
+        /** 只装这些 skill；省略表示装全部（`--all`）。 */
+        skills: z.ZodOptional<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>>;
+        /**
+         * project → `<cwd>/.agents/skills`（scanner 认）。
+         * user 级 `npx skills add -g` 落在 `~/.claude/skills`，**不在 scanner 的三个根里**，
+         * 装了会扫不到，故不开放该 scope。
+         */
+        scope: z.ZodDefault<z.ZodLiteral<"project">>;
+        /** 仓库根有 SKILL.md 时也继续深搜子目录。 */
+        fullDepth: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        source: "github";
+        scope: "project";
+        repo: string;
+        fullDepth: boolean;
+        skills?: string[] | undefined;
+    }, {
+        source: "github";
+        repo: string;
+        scope?: "project" | undefined;
+        skills?: string[] | undefined;
+        fullDepth?: boolean | undefined;
+    }>, "many">>;
+    tools: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        bin: z.ZodString;
+        /** 形如 "22"、"22.1"、"22.1.0"，与 `--version` 输出的首个版本号比较。 */
+        minVersion: z.ZodOptional<z.ZodString>;
+        /** 缺失时展示给用户的安装建议，例如 "brew install ffmpeg"。 */
+        hint: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        bin: string;
+        minVersion?: string | undefined;
+        hint?: string | undefined;
+    }, {
+        bin: string;
+        minVersion?: string | undefined;
+        hint?: string | undefined;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    skills: {
+        source: "github";
+        scope: "project";
+        repo: string;
+        fullDepth: boolean;
+        skills?: string[] | undefined;
+    }[];
+    tools: {
+        bin: string;
+        minVersion?: string | undefined;
+        hint?: string | undefined;
+    }[];
+}, {
+    skills?: {
+        source: "github";
+        repo: string;
+        scope?: "project" | undefined;
+        skills?: string[] | undefined;
+        fullDepth?: boolean | undefined;
+    }[] | undefined;
+    tools?: {
+        bin: string;
+        minVersion?: string | undefined;
+        hint?: string | undefined;
+    }[] | undefined;
+}>;
+export type SkillRequirement = z.infer<typeof skillRequirementSchema>;
+export type ToolRequirement = z.infer<typeof toolRequirementSchema>;
+export type WorkspaceProfileRequirements = z.infer<typeof WorkspaceProfileRequirementsSchema>;
+export declare const WorkspaceProfileSchema: z.ZodObject<{
+    name: z.ZodString;
+    label: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    /** 引用现有 AgentPreset 名（如 "general"）；不在 schema 层校验存在性，解析时才校验。 */
+    basePreset: z.ZodString;
+    /** 可选：省略即旧行为（只 enable，不获取）。 */
+    requires: z.ZodOptional<z.ZodObject<{
+        skills: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            /** 目前只支持 github；保留判别字段以便后续扩展。 */
+            source: z.ZodLiteral<"github">;
+            /** `owner/repo` 形式。 */
+            repo: z.ZodString;
+            /** 只装这些 skill；省略表示装全部（`--all`）。 */
+            skills: z.ZodOptional<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>>;
+            /**
+             * project → `<cwd>/.agents/skills`（scanner 认）。
+             * user 级 `npx skills add -g` 落在 `~/.claude/skills`，**不在 scanner 的三个根里**，
+             * 装了会扫不到，故不开放该 scope。
+             */
+            scope: z.ZodDefault<z.ZodLiteral<"project">>;
+            /** 仓库根有 SKILL.md 时也继续深搜子目录。 */
+            fullDepth: z.ZodDefault<z.ZodBoolean>;
+        }, "strip", z.ZodTypeAny, {
+            source: "github";
+            scope: "project";
+            repo: string;
+            fullDepth: boolean;
+            skills?: string[] | undefined;
+        }, {
+            source: "github";
+            repo: string;
+            scope?: "project" | undefined;
+            skills?: string[] | undefined;
+            fullDepth?: boolean | undefined;
+        }>, "many">>;
+        tools: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            bin: z.ZodString;
+            /** 形如 "22"、"22.1"、"22.1.0"，与 `--version` 输出的首个版本号比较。 */
+            minVersion: z.ZodOptional<z.ZodString>;
+            /** 缺失时展示给用户的安装建议，例如 "brew install ffmpeg"。 */
+            hint: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            bin: string;
+            minVersion?: string | undefined;
+            hint?: string | undefined;
+        }, {
+            bin: string;
+            minVersion?: string | undefined;
+            hint?: string | undefined;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        skills: {
+            source: "github";
+            scope: "project";
+            repo: string;
+            fullDepth: boolean;
+            skills?: string[] | undefined;
+        }[];
+        tools: {
+            bin: string;
+            minVersion?: string | undefined;
+            hint?: string | undefined;
+        }[];
+    }, {
+        skills?: {
+            source: "github";
+            repo: string;
+            scope?: "project" | undefined;
+            skills?: string[] | undefined;
+            fullDepth?: boolean | undefined;
+        }[] | undefined;
+        tools?: {
+            bin: string;
+            minVersion?: string | undefined;
+            hint?: string | undefined;
+        }[] | undefined;
+    }>>;
+    /**
+     * true → 独占工作面：激活时把**未声明**的 skill/plugin/mcp/agent 显式关掉，
+     * 而不是与用户已开启的取并集。
+     *
+     * 默认 false（并集）是安全的：数字人只保证「该有的能力一定在」，绝不静默
+     * 关掉用户手动开的东西。独占是更强的意图——「切到这个数字人就只用这套工具」
+     * ——上下文更干净，但代价是用户会发现自己开的东西不见了，所以必须显式声明。
+     * 注意：用户在项目 settings 里手写的 override 优先级仍然最高（见 overlay.ts）。
+     */
+    exclusiveCapabilities: z.ZodDefault<z.ZodBoolean>;
+    plugins: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>>;
+    skills: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>>;
+    mcp: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>>;
+    agents: z.ZodDefault<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>>;
+    /** 数字人主指令，注入系统提示（优先级低于本地 CLAUDE.md，高于 preset sections）。 */
+    mainInstruction: z.ZodOptional<z.ZodString>;
+    /** true → 挂载 profiles/<name>/ 为第二记忆层（跟数字人走）。 */
+    portableMemory: z.ZodDefault<z.ZodBoolean>;
+    version: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    mcp: string[];
+    name: string;
+    label: string;
+    skills: string[];
+    plugins: string[];
+    agents: string[];
+    basePreset: string;
+    exclusiveCapabilities: boolean;
+    portableMemory: boolean;
+    version?: string | undefined;
+    description?: string | undefined;
+    requires?: {
+        skills: {
+            source: "github";
+            scope: "project";
+            repo: string;
+            fullDepth: boolean;
+            skills?: string[] | undefined;
+        }[];
+        tools: {
+            bin: string;
+            minVersion?: string | undefined;
+            hint?: string | undefined;
+        }[];
+    } | undefined;
+    mainInstruction?: string | undefined;
+}, {
+    name: string;
+    label: string;
+    basePreset: string;
+    version?: string | undefined;
+    mcp?: string[] | undefined;
+    description?: string | undefined;
+    skills?: string[] | undefined;
+    plugins?: string[] | undefined;
+    agents?: string[] | undefined;
+    requires?: {
+        skills?: {
+            source: "github";
+            repo: string;
+            scope?: "project" | undefined;
+            skills?: string[] | undefined;
+            fullDepth?: boolean | undefined;
+        }[] | undefined;
+        tools?: {
+            bin: string;
+            minVersion?: string | undefined;
+            hint?: string | undefined;
+        }[] | undefined;
+    } | undefined;
+    exclusiveCapabilities?: boolean | undefined;
+    mainInstruction?: string | undefined;
+    portableMemory?: boolean | undefined;
+}>;
+export type WorkspaceProfile = z.infer<typeof WorkspaceProfileSchema>;
+/**
+ * 写入侧类型：带 `.default()` 的字段（`exclusiveCapabilities`、`portableMemory`、
+ * 四个 capability 列表）在这里是可选的。
+ *
+ * 为什么需要它：`WorkspaceProfile` 是 schema 的**输出**类型，defaults 已解析，
+ * 所以每个字段都是必填。但接受「未解析的 profile 再 parse」的函数
+ * （如 `saveWorkspaceProfile`）实际契约是**输入**类型——用输出类型标注会强迫每个
+ * 调用方手写它本来就想让 schema 填的默认值。schema 新增一个带 default 的字段时，
+ * 这个错配会让所有既有调用方一起报错（`exclusiveCapabilities` 就是这么发生的）。
+ */
+export type WorkspaceProfileInput = z.input<typeof WorkspaceProfileSchema>;
+export {};