@serviceme/devtools-core 0.3.1 → 0.3.2

package/dist/index.d.mts

@@ -326,6 +326,8 @@ declare const DRAFTS_SUBDIR = "drafts";
 declare const SKILL_DRAFTS_SUBDIR = "skills";
 declare const AGENT_DRAFTS_SUBDIR = "agents";
 declare const REPOS_CONFIG_FILENAME = "repos.json";
+/** rev.20 — r7 BYOM Server Proxy toggle self-state (read by ext + CLI + server). */
+declare const SERVER_PROXY_GLOBAL_FILENAME = "server-proxy.json";
 /**
  * Repo id regex — used to validate any `repoId` argument before it is joined
  * into a filesystem path. Keeps path traversal attempts out and gives us a
@@ -410,6 +412,18 @@ declare function getSchedulerLogPath(): string;
 declare function getMigrationFailuresPath(): string;
 /** `~/.serviceme/known-workspaces.json` — workspace list the extension has seen. */
 declare function getKnownWorkspacesPath(): string;
+/**
+ * `~/.serviceme/server-proxy.json` — r7 BYOM Server Proxy toggle
+ * self-state. Written by the extension's `ProxyConfigService`, readable
+ * by the CLI / Server so they can decide whether to route traffic
+ * through the corporate proxy without booting VS Code.
+ *
+ * Lives under user-level `~/.serviceme/` (not under a workspace) because
+ * the toggle is a *user preference* — the same human enabling it on
+ * machine A should be able to rely on it on machine B after sync, not
+ * have it disappear when they switch repos.
+ */
+declare function getServerProxyGlobalPath(): string;
 /** Layout constants for the Phase 5 client-side state files. The server
  * already has the corresponding routes (`/api/v1/auth/...`,
  * `/api/v1/device/...`, etc.) — the client just needs the on-disk
@@ -431,6 +445,71 @@ declare function getMachineIdPath(): string;
 /** `~/.serviceme/profiles.json` — cached projection of server-side profile rows; refresh on demand. */
 declare function getProfilesJsonPath(): string;
 
+/** On-disk shape for `~/.serviceme/server-proxy.json`. */
+interface ServerProxyGlobalState {
+    /** Whether the user has previously enabled Server Proxy. */
+    enabled: boolean;
+    /** Last server URL we toggled ON with. Used for re-toggling and UI hint. */
+    lastServerUrl: string | undefined;
+    /**
+     * rev.21 — explicit opt-in to enable Server Proxy even when
+     * `http.proxySupport === "override"`. `override` mode forces ALL
+     * extensions to route through `http.proxy`; defaulting to `false`
+     * keeps the legacy defensive guard against accidental global
+     * hijack. Power users (e.g. corp environments that WANT all
+     * extensions including GitHub Copilot Chat to route through the
+     * corp tunnel) can flip this on via the Webview's "Allow under
+     * proxySupport=override" affordance.
+     *
+     * Note: stored in the global file alongside `enabled` because
+     * this is *our* self-flag — it has nothing to do with VS Code's
+     * `http.*` schema.
+     */
+    allowOverride: boolean;
+    /** ISO 8601 timestamp of the most recent write. Diagnostic only. */
+    updatedAt: string;
+}
+/**
+ * Patch semantics (mirrors `vscode.workspace.getConfiguration().update(...)`):
+ *   - Field omitted / `undefined` → leave the existing value alone.
+ *   - Field set to `null`           → explicitly clear the field.
+ *
+ * Only `lastServerUrl` distinguishes "leave alone" from "clear"; `enabled`
+ * and `allowOverride` are plain `boolean | undefined` because boolean is
+ * the natural unit (false = "the user disabled it").
+ */
+interface ServerProxyGlobalPatch {
+    enabled?: boolean;
+    allowOverride?: boolean;
+    lastServerUrl?: string | null;
+}
+/**
+ * Reads the global config file. Returns `null` if the file does not
+ * exist (first-run case) — does NOT throw. Throws on parse errors or
+ * permission issues, so callers can surface those to the user.
+ */
+declare function readServerProxyGlobal(): Promise<ServerProxyGlobalState | null>;
+/**
+ * Merges a partial patch into the existing state and writes back
+ * atomically. Creates `~/.serviceme/` if missing.
+ *
+ * Returns the post-write state. Throws on IO/JSON errors.
+ */
+declare function writeServerProxyGlobal(patch: ServerProxyGlobalPatch): Promise<ServerProxyGlobalState>;
+/**
+ * Best-effort migration of a legacy `enabled` flag (typically read from
+ * VS Code's `settings.json` at `serverProxy.enabled`) into the global
+ * config file.
+ *
+ * Reads via the provided accessor (so tests can stub it), writes the
+ * global flag if present, then **clears** the legacy flag via the
+ * provided writer — never silently leaves the migration half-done.
+ *
+ * Returns the migrated state, or `null` if no migration was needed
+ * (legacy flag absent OR global config already up to date).
+ */
+declare function migrateLegacyServerProxyEnabled(readLegacy: () => boolean | undefined, clearLegacy: () => Promise<void>): Promise<ServerProxyGlobalState | null>;
+
 declare const TOOL_RISK_MAP: Record<string, AgentToolRiskLevel>;
 declare function parseAgentToolPermissions(content: string): AgentToolPermission[];
 
@@ -590,10 +669,10 @@ declare const defaultRepoSchema: z.ZodObject<{
     lastSyncStatus: z.ZodOptional<z.ZodEnum<["ok", "error"]>>;
     lastSyncError: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    name: string;
     id: string;
     description: string;
     source: "default";
+    name: string;
     url: string;
     branch: string;
     enabled: boolean;
@@ -605,10 +684,10 @@ declare const defaultRepoSchema: z.ZodObject<{
     lastSyncStatus?: "ok" | "error" | undefined;
     lastSyncError?: string | undefined;
 }, {
-    name: string;
     id: string;
     description: string;
     source: "default";
+    name: string;
     url: string;
     branch: string;
     enabled: boolean;
@@ -635,9 +714,9 @@ declare const userRepoSchema: z.ZodObject<{
     lastSyncStatus: z.ZodOptional<z.ZodEnum<["ok", "error"]>>;
     lastSyncError: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    name: string;
     id: string;
     source: "user";
+    name: string;
     url: string;
     branch: string;
     enabled: boolean;
@@ -649,9 +728,9 @@ declare const userRepoSchema: z.ZodObject<{
     lastSyncStatus?: "ok" | "error" | undefined;
     lastSyncError?: string | undefined;
 }, {
-    name: string;
     id: string;
     source: "user";
+    name: string;
     url: string;
     branch: string;
     enabled: boolean;
@@ -679,10 +758,10 @@ declare const repoSchema: z.ZodDiscriminatedUnion<"source", [z.ZodObject<{
     lastSyncStatus: z.ZodOptional<z.ZodEnum<["ok", "error"]>>;
     lastSyncError: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    name: string;
     id: string;
     description: string;
     source: "default";
+    name: string;
     url: string;
     branch: string;
     enabled: boolean;
@@ -694,10 +773,10 @@ declare const repoSchema: z.ZodDiscriminatedUnion<"source", [z.ZodObject<{
     lastSyncStatus?: "ok" | "error" | undefined;
     lastSyncError?: string | undefined;
 }, {
-    name: string;
     id: string;
     description: string;
     source: "default";
+    name: string;
     url: string;
     branch: string;
     enabled: boolean;
@@ -723,9 +802,9 @@ declare const repoSchema: z.ZodDiscriminatedUnion<"source", [z.ZodObject<{
     lastSyncStatus: z.ZodOptional<z.ZodEnum<["ok", "error"]>>;
     lastSyncError: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    name: string;
     id: string;
     source: "user";
+    name: string;
     url: string;
     branch: string;
     enabled: boolean;
@@ -737,9 +816,9 @@ declare const repoSchema: z.ZodDiscriminatedUnion<"source", [z.ZodObject<{
     lastSyncStatus?: "ok" | "error" | undefined;
     lastSyncError?: string | undefined;
 }, {
-    name: string;
     id: string;
     source: "user";
+    name: string;
     url: string;
     branch: string;
     enabled: boolean;
@@ -770,10 +849,10 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
         lastSyncStatus: z.ZodOptional<z.ZodEnum<["ok", "error"]>>;
         lastSyncError: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        name: string;
         id: string;
         description: string;
         source: "default";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -785,10 +864,10 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
         lastSyncStatus?: "ok" | "error" | undefined;
         lastSyncError?: string | undefined;
     }, {
-        name: string;
         id: string;
         description: string;
         source: "default";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -814,9 +893,9 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
         lastSyncStatus: z.ZodOptional<z.ZodEnum<["ok", "error"]>>;
         lastSyncError: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        name: string;
         id: string;
         source: "user";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -828,9 +907,9 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
         lastSyncStatus?: "ok" | "error" | undefined;
         lastSyncError?: string | undefined;
     }, {
-        name: string;
         id: string;
         source: "user";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -845,10 +924,10 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     version: 1;
     repos: ({
-        name: string;
         id: string;
         description: string;
         source: "default";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -860,9 +939,9 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
         lastSyncStatus?: "ok" | "error" | undefined;
         lastSyncError?: string | undefined;
     } | {
-        name: string;
         id: string;
         source: "user";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -878,10 +957,10 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
 }, {
     version: 1;
     repos: ({
-        name: string;
         id: string;
         description: string;
         source: "default";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -893,9 +972,9 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
         lastSyncStatus?: "ok" | "error" | undefined;
         lastSyncError?: string | undefined;
     } | {
-        name: string;
         id: string;
         source: "user";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -911,10 +990,10 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
 }>, {
     version: 1;
     repos: ({
-        name: string;
         id: string;
         description: string;
         source: "default";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -926,9 +1005,9 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
         lastSyncStatus?: "ok" | "error" | undefined;
         lastSyncError?: string | undefined;
     } | {
-        name: string;
         id: string;
         source: "user";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -944,10 +1023,10 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
 }, {
     version: 1;
     repos: ({
-        name: string;
         id: string;
         description: string;
         source: "default";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -959,9 +1038,9 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
         lastSyncStatus?: "ok" | "error" | undefined;
         lastSyncError?: string | undefined;
     } | {
-        name: string;
         id: string;
         source: "user";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -1850,4 +1929,4 @@ declare class SkillStore {
 declare const unzipFile: (zipPath: string, dest: string) => Promise<void>;
 declare const moveFiles: (sourceDir: string, destDir: string, overwrite?: boolean) => Promise<void>;
 
-export { AGENT_DRAFTS_SUBDIR, type AddUserRepoInput, type AddUserRepoResult, type AgentCatalog, AgentCatalogClient, type AgentCatalogClientOptions, type AgentDownloadFile, type AgentInstallScope, type AgentMutateResult, AgentReconciler, type AgentReconcilerDependencies, AgentStore, type AgentStoreFileSystem, type AgentStoreOptions, type AgentsStateFile, type AnyRepoConfig, type AppendLogInput, type BootstrapPhase5Result, CACHE_SUBDIR, CREDENTIALS_CONFIG_FILENAME, CannotRemoveDefaultRepoError, type CreateTaskInput, FIXED_ADDED_AT as DEFAULT_REPO_FIXED_ADDED_AT, DEFAULT_REPO_ID, DEVICE_JSON_FILENAME, DRAFTS_SUBDIR, DaemonLogger, type DefaultRepoConfig, type DraftDetail, DraftNotFoundError, type DraftSummary, DraftsError, DraftsStore, type EditTaskInput, EnvironmentInspector, type EnvironmentInspectorOptions, type ExecutorResult, type FsWatcherCallbacks, type FsWatcherHandle, GitClient, GithubCopilotCliExecutor, HttpRequestExecutor, ImageTools, type InstalledAgent, InvalidDraftError, InvalidRepoUrlError, type IsoTimestamp, type JsonTools, KNOWN_WORKSPACES_FILENAME, type LoadResult, MACHINE_ID_FILENAME, MIGRATION_FAILURES_FILENAME, type MigrateToGlobalOptions, type MigrationResult, type OutputEventCallback, PROFILES_JSON_FILENAME, PidManager, type ProbeError, type ProbeOptions, type ProbeResult, ProjectTools, REPOS_CONFIG_FILENAME, REPOS_SUBDIR, RepoAlreadyExistsError, RepoCloneConflictError, type RepoConfig, RepoManager, RepoManagerError, type RepoManagerOptions, RepoNotFoundError, RepoNotInStoreError, type RepoSource, type ReposFile, type ReposFileInput, ReposLoader, type ReposLoaderFileSystem, type ReposLoaderOptions, ReposStore, type ReposStoreChange, type ReposStoreFileSystem, type ReposStoreListener, type ReposStoreOptions, SAFE_REPO_ID_PATTERN, SCHEDULED_TASKS_CONFIG_FILENAME, SCHEDULED_TASKS_LOG_FILENAME, SCHEDULER_LOCK_FILENAME, SCHEDULER_LOG_FILENAME, SCHEDULER_PID_FILENAME, SERVICEME_DIR_NAME, SERVICEME_HOME_ENV, SKILL_DRAFTS_SUBDIR, type SaveDraftOptions, SchedulerDaemon, SchedulerDaemonV2, type SchedulerDaemonV2Options, type ServiceMeLogger, ShellExecutor, type SkillCatalog, SkillCatalogClient, type SkillCatalogClientOptions, type SkillDownloadFile, type SkillMutateResult, SkillReconciler, type SkillReconcilerDependencies, SkillStore, type SkillStoreFileSystem, type SkillStoreOptions, type StreamingExecutorHandle, type StreamingTaskExecutor, type SyncReport, type SyncStatus, TOOLBOX_JSON_FILENAME, TOOL_RISK_MAP, TaskConfigManager, type TaskEventListener, TaskExecutionEngine, type TaskExecutor, TaskLogManager, type UserRepoConfig, WorkspaceProbe, repoSchema as anyRepoConfigSchema, assertSafeRepoId, bootstrapDefaults, bootstrapPhase5Placeholders, buildDefaultReposFile, copilotDoctor, copilotPrompt, createConsoleLogger, createCopilotAuthRequiredError, createCopilotNotInstalledError, createImageTools, createJsonTools, createProjectTools, createReposStore, defaultRepoSchema as defaultRepoConfigSchema, ensureDefaultsInstalled, generateDraftId, getAgentDraftsDir, getAllDefaultRepoConfigs, getCacheDir, getCredentialsConfigPath, getDefaultRepoConfig, getDeviceJsonPath, getDraftsDir, getExecutor, getHomeDir, getHomePlatform, getKnownWorkspacesPath, getMachineIdPath, getMigrationFailuresPath, getProfilesJsonPath, getRepoCacheDir, getRepoDir, getReposConfigPath, getReposDir, getScheduledTasksConfigPath, getScheduledTasksLogPath, getSchedulerLockPath, getSchedulerLogPath, getSchedulerPidPath, getServicemeHome, getSkillDraftsDir, getToolboxJsonPath, isCopilotAuthenticated, isDefaultRepo, isStreamingTaskExecutor, isUserRepo, matchesCron, migrateToGlobal, moveFiles, narrowRepoConfig, noopLogger, parseAgentToolPermissions, parseIntervalMs, reposFileSchema, resetUserHomeOverrides, resolveDraftDir, resolveTaskExecutionPayload, setUserHomeOverrides, unzipFile, userRepoSchema as userRepoConfigSchema, validateReposFile, validateTaskPayload };
+export { AGENT_DRAFTS_SUBDIR, type AddUserRepoInput, type AddUserRepoResult, type AgentCatalog, AgentCatalogClient, type AgentCatalogClientOptions, type AgentDownloadFile, type AgentInstallScope, type AgentMutateResult, AgentReconciler, type AgentReconcilerDependencies, AgentStore, type AgentStoreFileSystem, type AgentStoreOptions, type AgentsStateFile, type AnyRepoConfig, type AppendLogInput, type BootstrapPhase5Result, CACHE_SUBDIR, CREDENTIALS_CONFIG_FILENAME, CannotRemoveDefaultRepoError, type CreateTaskInput, FIXED_ADDED_AT as DEFAULT_REPO_FIXED_ADDED_AT, DEFAULT_REPO_ID, DEVICE_JSON_FILENAME, DRAFTS_SUBDIR, DaemonLogger, type DefaultRepoConfig, type DraftDetail, DraftNotFoundError, type DraftSummary, DraftsError, DraftsStore, type EditTaskInput, EnvironmentInspector, type EnvironmentInspectorOptions, type ExecutorResult, type FsWatcherCallbacks, type FsWatcherHandle, GitClient, GithubCopilotCliExecutor, HttpRequestExecutor, ImageTools, type InstalledAgent, InvalidDraftError, InvalidRepoUrlError, type IsoTimestamp, type JsonTools, KNOWN_WORKSPACES_FILENAME, type LoadResult, MACHINE_ID_FILENAME, MIGRATION_FAILURES_FILENAME, type MigrateToGlobalOptions, type MigrationResult, type OutputEventCallback, PROFILES_JSON_FILENAME, PidManager, type ProbeError, type ProbeOptions, type ProbeResult, ProjectTools, REPOS_CONFIG_FILENAME, REPOS_SUBDIR, RepoAlreadyExistsError, RepoCloneConflictError, type RepoConfig, RepoManager, RepoManagerError, type RepoManagerOptions, RepoNotFoundError, RepoNotInStoreError, type RepoSource, type ReposFile, type ReposFileInput, ReposLoader, type ReposLoaderFileSystem, type ReposLoaderOptions, ReposStore, type ReposStoreChange, type ReposStoreFileSystem, type ReposStoreListener, type ReposStoreOptions, SAFE_REPO_ID_PATTERN, SCHEDULED_TASKS_CONFIG_FILENAME, SCHEDULED_TASKS_LOG_FILENAME, SCHEDULER_LOCK_FILENAME, SCHEDULER_LOG_FILENAME, SCHEDULER_PID_FILENAME, SERVER_PROXY_GLOBAL_FILENAME, SERVICEME_DIR_NAME, SERVICEME_HOME_ENV, SKILL_DRAFTS_SUBDIR, type SaveDraftOptions, SchedulerDaemon, SchedulerDaemonV2, type SchedulerDaemonV2Options, type ServerProxyGlobalPatch, type ServerProxyGlobalState, type ServiceMeLogger, ShellExecutor, type SkillCatalog, SkillCatalogClient, type SkillCatalogClientOptions, type SkillDownloadFile, type SkillMutateResult, SkillReconciler, type SkillReconcilerDependencies, SkillStore, type SkillStoreFileSystem, type SkillStoreOptions, type StreamingExecutorHandle, type StreamingTaskExecutor, type SyncReport, type SyncStatus, TOOLBOX_JSON_FILENAME, TOOL_RISK_MAP, TaskConfigManager, type TaskEventListener, TaskExecutionEngine, type TaskExecutor, TaskLogManager, type UserRepoConfig, WorkspaceProbe, repoSchema as anyRepoConfigSchema, assertSafeRepoId, bootstrapDefaults, bootstrapPhase5Placeholders, buildDefaultReposFile, copilotDoctor, copilotPrompt, createConsoleLogger, createCopilotAuthRequiredError, createCopilotNotInstalledError, createImageTools, createJsonTools, createProjectTools, createReposStore, defaultRepoSchema as defaultRepoConfigSchema, ensureDefaultsInstalled, generateDraftId, getAgentDraftsDir, getAllDefaultRepoConfigs, getCacheDir, getCredentialsConfigPath, getDefaultRepoConfig, getDeviceJsonPath, getDraftsDir, getExecutor, getHomeDir, getHomePlatform, getKnownWorkspacesPath, getMachineIdPath, getMigrationFailuresPath, getProfilesJsonPath, getRepoCacheDir, getRepoDir, getReposConfigPath, getReposDir, getScheduledTasksConfigPath, getScheduledTasksLogPath, getSchedulerLockPath, getSchedulerLogPath, getSchedulerPidPath, getServerProxyGlobalPath, getServicemeHome, getSkillDraftsDir, getToolboxJsonPath, isCopilotAuthenticated, isDefaultRepo, isStreamingTaskExecutor, isUserRepo, matchesCron, migrateLegacyServerProxyEnabled, migrateToGlobal, moveFiles, narrowRepoConfig, noopLogger, parseAgentToolPermissions, parseIntervalMs, readServerProxyGlobal, reposFileSchema, resetUserHomeOverrides, resolveDraftDir, resolveTaskExecutionPayload, setUserHomeOverrides, unzipFile, userRepoSchema as userRepoConfigSchema, validateReposFile, validateTaskPayload, writeServerProxyGlobal };

package/dist/index.d.ts

@@ -326,6 +326,8 @@ declare const DRAFTS_SUBDIR = "drafts";
 declare const SKILL_DRAFTS_SUBDIR = "skills";
 declare const AGENT_DRAFTS_SUBDIR = "agents";
 declare const REPOS_CONFIG_FILENAME = "repos.json";
+/** rev.20 — r7 BYOM Server Proxy toggle self-state (read by ext + CLI + server). */
+declare const SERVER_PROXY_GLOBAL_FILENAME = "server-proxy.json";
 /**
  * Repo id regex — used to validate any `repoId` argument before it is joined
  * into a filesystem path. Keeps path traversal attempts out and gives us a
@@ -410,6 +412,18 @@ declare function getSchedulerLogPath(): string;
 declare function getMigrationFailuresPath(): string;
 /** `~/.serviceme/known-workspaces.json` — workspace list the extension has seen. */
 declare function getKnownWorkspacesPath(): string;
+/**
+ * `~/.serviceme/server-proxy.json` — r7 BYOM Server Proxy toggle
+ * self-state. Written by the extension's `ProxyConfigService`, readable
+ * by the CLI / Server so they can decide whether to route traffic
+ * through the corporate proxy without booting VS Code.
+ *
+ * Lives under user-level `~/.serviceme/` (not under a workspace) because
+ * the toggle is a *user preference* — the same human enabling it on
+ * machine A should be able to rely on it on machine B after sync, not
+ * have it disappear when they switch repos.
+ */
+declare function getServerProxyGlobalPath(): string;
 /** Layout constants for the Phase 5 client-side state files. The server
  * already has the corresponding routes (`/api/v1/auth/...`,
  * `/api/v1/device/...`, etc.) — the client just needs the on-disk
@@ -431,6 +445,71 @@ declare function getMachineIdPath(): string;
 /** `~/.serviceme/profiles.json` — cached projection of server-side profile rows; refresh on demand. */
 declare function getProfilesJsonPath(): string;
 
+/** On-disk shape for `~/.serviceme/server-proxy.json`. */
+interface ServerProxyGlobalState {
+    /** Whether the user has previously enabled Server Proxy. */
+    enabled: boolean;
+    /** Last server URL we toggled ON with. Used for re-toggling and UI hint. */
+    lastServerUrl: string | undefined;
+    /**
+     * rev.21 — explicit opt-in to enable Server Proxy even when
+     * `http.proxySupport === "override"`. `override` mode forces ALL
+     * extensions to route through `http.proxy`; defaulting to `false`
+     * keeps the legacy defensive guard against accidental global
+     * hijack. Power users (e.g. corp environments that WANT all
+     * extensions including GitHub Copilot Chat to route through the
+     * corp tunnel) can flip this on via the Webview's "Allow under
+     * proxySupport=override" affordance.
+     *
+     * Note: stored in the global file alongside `enabled` because
+     * this is *our* self-flag — it has nothing to do with VS Code's
+     * `http.*` schema.
+     */
+    allowOverride: boolean;
+    /** ISO 8601 timestamp of the most recent write. Diagnostic only. */
+    updatedAt: string;
+}
+/**
+ * Patch semantics (mirrors `vscode.workspace.getConfiguration().update(...)`):
+ *   - Field omitted / `undefined` → leave the existing value alone.
+ *   - Field set to `null`           → explicitly clear the field.
+ *
+ * Only `lastServerUrl` distinguishes "leave alone" from "clear"; `enabled`
+ * and `allowOverride` are plain `boolean | undefined` because boolean is
+ * the natural unit (false = "the user disabled it").
+ */
+interface ServerProxyGlobalPatch {
+    enabled?: boolean;
+    allowOverride?: boolean;
+    lastServerUrl?: string | null;
+}
+/**
+ * Reads the global config file. Returns `null` if the file does not
+ * exist (first-run case) — does NOT throw. Throws on parse errors or
+ * permission issues, so callers can surface those to the user.
+ */
+declare function readServerProxyGlobal(): Promise<ServerProxyGlobalState | null>;
+/**
+ * Merges a partial patch into the existing state and writes back
+ * atomically. Creates `~/.serviceme/` if missing.
+ *
+ * Returns the post-write state. Throws on IO/JSON errors.
+ */
+declare function writeServerProxyGlobal(patch: ServerProxyGlobalPatch): Promise<ServerProxyGlobalState>;
+/**
+ * Best-effort migration of a legacy `enabled` flag (typically read from
+ * VS Code's `settings.json` at `serverProxy.enabled`) into the global
+ * config file.
+ *
+ * Reads via the provided accessor (so tests can stub it), writes the
+ * global flag if present, then **clears** the legacy flag via the
+ * provided writer — never silently leaves the migration half-done.
+ *
+ * Returns the migrated state, or `null` if no migration was needed
+ * (legacy flag absent OR global config already up to date).
+ */
+declare function migrateLegacyServerProxyEnabled(readLegacy: () => boolean | undefined, clearLegacy: () => Promise<void>): Promise<ServerProxyGlobalState | null>;
+
 declare const TOOL_RISK_MAP: Record<string, AgentToolRiskLevel>;
 declare function parseAgentToolPermissions(content: string): AgentToolPermission[];
 
@@ -590,10 +669,10 @@ declare const defaultRepoSchema: z.ZodObject<{
     lastSyncStatus: z.ZodOptional<z.ZodEnum<["ok", "error"]>>;
     lastSyncError: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    name: string;
     id: string;
     description: string;
     source: "default";
+    name: string;
     url: string;
     branch: string;
     enabled: boolean;
@@ -605,10 +684,10 @@ declare const defaultRepoSchema: z.ZodObject<{
     lastSyncStatus?: "ok" | "error" | undefined;
     lastSyncError?: string | undefined;
 }, {
-    name: string;
     id: string;
     description: string;
     source: "default";
+    name: string;
     url: string;
     branch: string;
     enabled: boolean;
@@ -635,9 +714,9 @@ declare const userRepoSchema: z.ZodObject<{
     lastSyncStatus: z.ZodOptional<z.ZodEnum<["ok", "error"]>>;
     lastSyncError: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    name: string;
     id: string;
     source: "user";
+    name: string;
     url: string;
     branch: string;
     enabled: boolean;
@@ -649,9 +728,9 @@ declare const userRepoSchema: z.ZodObject<{
     lastSyncStatus?: "ok" | "error" | undefined;
     lastSyncError?: string | undefined;
 }, {
-    name: string;
     id: string;
     source: "user";
+    name: string;
     url: string;
     branch: string;
     enabled: boolean;
@@ -679,10 +758,10 @@ declare const repoSchema: z.ZodDiscriminatedUnion<"source", [z.ZodObject<{
     lastSyncStatus: z.ZodOptional<z.ZodEnum<["ok", "error"]>>;
     lastSyncError: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    name: string;
     id: string;
     description: string;
     source: "default";
+    name: string;
     url: string;
     branch: string;
     enabled: boolean;
@@ -694,10 +773,10 @@ declare const repoSchema: z.ZodDiscriminatedUnion<"source", [z.ZodObject<{
     lastSyncStatus?: "ok" | "error" | undefined;
     lastSyncError?: string | undefined;
 }, {
-    name: string;
     id: string;
     description: string;
     source: "default";
+    name: string;
     url: string;
     branch: string;
     enabled: boolean;
@@ -723,9 +802,9 @@ declare const repoSchema: z.ZodDiscriminatedUnion<"source", [z.ZodObject<{
     lastSyncStatus: z.ZodOptional<z.ZodEnum<["ok", "error"]>>;
     lastSyncError: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    name: string;
     id: string;
     source: "user";
+    name: string;
     url: string;
     branch: string;
     enabled: boolean;
@@ -737,9 +816,9 @@ declare const repoSchema: z.ZodDiscriminatedUnion<"source", [z.ZodObject<{
     lastSyncStatus?: "ok" | "error" | undefined;
     lastSyncError?: string | undefined;
 }, {
-    name: string;
     id: string;
     source: "user";
+    name: string;
     url: string;
     branch: string;
     enabled: boolean;
@@ -770,10 +849,10 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
         lastSyncStatus: z.ZodOptional<z.ZodEnum<["ok", "error"]>>;
         lastSyncError: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        name: string;
         id: string;
         description: string;
         source: "default";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -785,10 +864,10 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
         lastSyncStatus?: "ok" | "error" | undefined;
         lastSyncError?: string | undefined;
     }, {
-        name: string;
         id: string;
         description: string;
         source: "default";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -814,9 +893,9 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
         lastSyncStatus: z.ZodOptional<z.ZodEnum<["ok", "error"]>>;
         lastSyncError: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        name: string;
         id: string;
         source: "user";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -828,9 +907,9 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
         lastSyncStatus?: "ok" | "error" | undefined;
         lastSyncError?: string | undefined;
     }, {
-        name: string;
         id: string;
         source: "user";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -845,10 +924,10 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     version: 1;
     repos: ({
-        name: string;
         id: string;
         description: string;
         source: "default";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -860,9 +939,9 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
         lastSyncStatus?: "ok" | "error" | undefined;
         lastSyncError?: string | undefined;
     } | {
-        name: string;
         id: string;
         source: "user";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -878,10 +957,10 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
 }, {
     version: 1;
     repos: ({
-        name: string;
         id: string;
         description: string;
         source: "default";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -893,9 +972,9 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
         lastSyncStatus?: "ok" | "error" | undefined;
         lastSyncError?: string | undefined;
     } | {
-        name: string;
         id: string;
         source: "user";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -911,10 +990,10 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
 }>, {
     version: 1;
     repos: ({
-        name: string;
         id: string;
         description: string;
         source: "default";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -926,9 +1005,9 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
         lastSyncStatus?: "ok" | "error" | undefined;
         lastSyncError?: string | undefined;
     } | {
-        name: string;
         id: string;
         source: "user";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -944,10 +1023,10 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
 }, {
     version: 1;
     repos: ({
-        name: string;
         id: string;
         description: string;
         source: "default";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -959,9 +1038,9 @@ declare const reposFileSchema: z.ZodEffects<z.ZodObject<{
         lastSyncStatus?: "ok" | "error" | undefined;
         lastSyncError?: string | undefined;
     } | {
-        name: string;
         id: string;
         source: "user";
+        name: string;
         url: string;
         branch: string;
         enabled: boolean;
@@ -1850,4 +1929,4 @@ declare class SkillStore {
 declare const unzipFile: (zipPath: string, dest: string) => Promise<void>;
 declare const moveFiles: (sourceDir: string, destDir: string, overwrite?: boolean) => Promise<void>;
 
-export { AGENT_DRAFTS_SUBDIR, type AddUserRepoInput, type AddUserRepoResult, type AgentCatalog, AgentCatalogClient, type AgentCatalogClientOptions, type AgentDownloadFile, type AgentInstallScope, type AgentMutateResult, AgentReconciler, type AgentReconcilerDependencies, AgentStore, type AgentStoreFileSystem, type AgentStoreOptions, type AgentsStateFile, type AnyRepoConfig, type AppendLogInput, type BootstrapPhase5Result, CACHE_SUBDIR, CREDENTIALS_CONFIG_FILENAME, CannotRemoveDefaultRepoError, type CreateTaskInput, FIXED_ADDED_AT as DEFAULT_REPO_FIXED_ADDED_AT, DEFAULT_REPO_ID, DEVICE_JSON_FILENAME, DRAFTS_SUBDIR, DaemonLogger, type DefaultRepoConfig, type DraftDetail, DraftNotFoundError, type DraftSummary, DraftsError, DraftsStore, type EditTaskInput, EnvironmentInspector, type EnvironmentInspectorOptions, type ExecutorResult, type FsWatcherCallbacks, type FsWatcherHandle, GitClient, GithubCopilotCliExecutor, HttpRequestExecutor, ImageTools, type InstalledAgent, InvalidDraftError, InvalidRepoUrlError, type IsoTimestamp, type JsonTools, KNOWN_WORKSPACES_FILENAME, type LoadResult, MACHINE_ID_FILENAME, MIGRATION_FAILURES_FILENAME, type MigrateToGlobalOptions, type MigrationResult, type OutputEventCallback, PROFILES_JSON_FILENAME, PidManager, type ProbeError, type ProbeOptions, type ProbeResult, ProjectTools, REPOS_CONFIG_FILENAME, REPOS_SUBDIR, RepoAlreadyExistsError, RepoCloneConflictError, type RepoConfig, RepoManager, RepoManagerError, type RepoManagerOptions, RepoNotFoundError, RepoNotInStoreError, type RepoSource, type ReposFile, type ReposFileInput, ReposLoader, type ReposLoaderFileSystem, type ReposLoaderOptions, ReposStore, type ReposStoreChange, type ReposStoreFileSystem, type ReposStoreListener, type ReposStoreOptions, SAFE_REPO_ID_PATTERN, SCHEDULED_TASKS_CONFIG_FILENAME, SCHEDULED_TASKS_LOG_FILENAME, SCHEDULER_LOCK_FILENAME, SCHEDULER_LOG_FILENAME, SCHEDULER_PID_FILENAME, SERVICEME_DIR_NAME, SERVICEME_HOME_ENV, SKILL_DRAFTS_SUBDIR, type SaveDraftOptions, SchedulerDaemon, SchedulerDaemonV2, type SchedulerDaemonV2Options, type ServiceMeLogger, ShellExecutor, type SkillCatalog, SkillCatalogClient, type SkillCatalogClientOptions, type SkillDownloadFile, type SkillMutateResult, SkillReconciler, type SkillReconcilerDependencies, SkillStore, type SkillStoreFileSystem, type SkillStoreOptions, type StreamingExecutorHandle, type StreamingTaskExecutor, type SyncReport, type SyncStatus, TOOLBOX_JSON_FILENAME, TOOL_RISK_MAP, TaskConfigManager, type TaskEventListener, TaskExecutionEngine, type TaskExecutor, TaskLogManager, type UserRepoConfig, WorkspaceProbe, repoSchema as anyRepoConfigSchema, assertSafeRepoId, bootstrapDefaults, bootstrapPhase5Placeholders, buildDefaultReposFile, copilotDoctor, copilotPrompt, createConsoleLogger, createCopilotAuthRequiredError, createCopilotNotInstalledError, createImageTools, createJsonTools, createProjectTools, createReposStore, defaultRepoSchema as defaultRepoConfigSchema, ensureDefaultsInstalled, generateDraftId, getAgentDraftsDir, getAllDefaultRepoConfigs, getCacheDir, getCredentialsConfigPath, getDefaultRepoConfig, getDeviceJsonPath, getDraftsDir, getExecutor, getHomeDir, getHomePlatform, getKnownWorkspacesPath, getMachineIdPath, getMigrationFailuresPath, getProfilesJsonPath, getRepoCacheDir, getRepoDir, getReposConfigPath, getReposDir, getScheduledTasksConfigPath, getScheduledTasksLogPath, getSchedulerLockPath, getSchedulerLogPath, getSchedulerPidPath, getServicemeHome, getSkillDraftsDir, getToolboxJsonPath, isCopilotAuthenticated, isDefaultRepo, isStreamingTaskExecutor, isUserRepo, matchesCron, migrateToGlobal, moveFiles, narrowRepoConfig, noopLogger, parseAgentToolPermissions, parseIntervalMs, reposFileSchema, resetUserHomeOverrides, resolveDraftDir, resolveTaskExecutionPayload, setUserHomeOverrides, unzipFile, userRepoSchema as userRepoConfigSchema, validateReposFile, validateTaskPayload };
+export { AGENT_DRAFTS_SUBDIR, type AddUserRepoInput, type AddUserRepoResult, type AgentCatalog, AgentCatalogClient, type AgentCatalogClientOptions, type AgentDownloadFile, type AgentInstallScope, type AgentMutateResult, AgentReconciler, type AgentReconcilerDependencies, AgentStore, type AgentStoreFileSystem, type AgentStoreOptions, type AgentsStateFile, type AnyRepoConfig, type AppendLogInput, type BootstrapPhase5Result, CACHE_SUBDIR, CREDENTIALS_CONFIG_FILENAME, CannotRemoveDefaultRepoError, type CreateTaskInput, FIXED_ADDED_AT as DEFAULT_REPO_FIXED_ADDED_AT, DEFAULT_REPO_ID, DEVICE_JSON_FILENAME, DRAFTS_SUBDIR, DaemonLogger, type DefaultRepoConfig, type DraftDetail, DraftNotFoundError, type DraftSummary, DraftsError, DraftsStore, type EditTaskInput, EnvironmentInspector, type EnvironmentInspectorOptions, type ExecutorResult, type FsWatcherCallbacks, type FsWatcherHandle, GitClient, GithubCopilotCliExecutor, HttpRequestExecutor, ImageTools, type InstalledAgent, InvalidDraftError, InvalidRepoUrlError, type IsoTimestamp, type JsonTools, KNOWN_WORKSPACES_FILENAME, type LoadResult, MACHINE_ID_FILENAME, MIGRATION_FAILURES_FILENAME, type MigrateToGlobalOptions, type MigrationResult, type OutputEventCallback, PROFILES_JSON_FILENAME, PidManager, type ProbeError, type ProbeOptions, type ProbeResult, ProjectTools, REPOS_CONFIG_FILENAME, REPOS_SUBDIR, RepoAlreadyExistsError, RepoCloneConflictError, type RepoConfig, RepoManager, RepoManagerError, type RepoManagerOptions, RepoNotFoundError, RepoNotInStoreError, type RepoSource, type ReposFile, type ReposFileInput, ReposLoader, type ReposLoaderFileSystem, type ReposLoaderOptions, ReposStore, type ReposStoreChange, type ReposStoreFileSystem, type ReposStoreListener, type ReposStoreOptions, SAFE_REPO_ID_PATTERN, SCHEDULED_TASKS_CONFIG_FILENAME, SCHEDULED_TASKS_LOG_FILENAME, SCHEDULER_LOCK_FILENAME, SCHEDULER_LOG_FILENAME, SCHEDULER_PID_FILENAME, SERVER_PROXY_GLOBAL_FILENAME, SERVICEME_DIR_NAME, SERVICEME_HOME_ENV, SKILL_DRAFTS_SUBDIR, type SaveDraftOptions, SchedulerDaemon, SchedulerDaemonV2, type SchedulerDaemonV2Options, type ServerProxyGlobalPatch, type ServerProxyGlobalState, type ServiceMeLogger, ShellExecutor, type SkillCatalog, SkillCatalogClient, type SkillCatalogClientOptions, type SkillDownloadFile, type SkillMutateResult, SkillReconciler, type SkillReconcilerDependencies, SkillStore, type SkillStoreFileSystem, type SkillStoreOptions, type StreamingExecutorHandle, type StreamingTaskExecutor, type SyncReport, type SyncStatus, TOOLBOX_JSON_FILENAME, TOOL_RISK_MAP, TaskConfigManager, type TaskEventListener, TaskExecutionEngine, type TaskExecutor, TaskLogManager, type UserRepoConfig, WorkspaceProbe, repoSchema as anyRepoConfigSchema, assertSafeRepoId, bootstrapDefaults, bootstrapPhase5Placeholders, buildDefaultReposFile, copilotDoctor, copilotPrompt, createConsoleLogger, createCopilotAuthRequiredError, createCopilotNotInstalledError, createImageTools, createJsonTools, createProjectTools, createReposStore, defaultRepoSchema as defaultRepoConfigSchema, ensureDefaultsInstalled, generateDraftId, getAgentDraftsDir, getAllDefaultRepoConfigs, getCacheDir, getCredentialsConfigPath, getDefaultRepoConfig, getDeviceJsonPath, getDraftsDir, getExecutor, getHomeDir, getHomePlatform, getKnownWorkspacesPath, getMachineIdPath, getMigrationFailuresPath, getProfilesJsonPath, getRepoCacheDir, getRepoDir, getReposConfigPath, getReposDir, getScheduledTasksConfigPath, getScheduledTasksLogPath, getSchedulerLockPath, getSchedulerLogPath, getSchedulerPidPath, getServerProxyGlobalPath, getServicemeHome, getSkillDraftsDir, getToolboxJsonPath, isCopilotAuthenticated, isDefaultRepo, isStreamingTaskExecutor, isUserRepo, matchesCron, migrateLegacyServerProxyEnabled, migrateToGlobal, moveFiles, narrowRepoConfig, noopLogger, parseAgentToolPermissions, parseIntervalMs, readServerProxyGlobal, reposFileSchema, resetUserHomeOverrides, resolveDraftDir, resolveTaskExecutionPayload, setUserHomeOverrides, unzipFile, userRepoSchema as userRepoConfigSchema, validateReposFile, validateTaskPayload, writeServerProxyGlobal };