@serviceme/devtools-core 2.0.0 → 2.0.2

package/dist/index.d.ts

@@ -1,131 +1,131 @@
-import * as _serviceme_devtools_protocol from '@serviceme/devtools-protocol';
-import { AgentMarketplaceEntry, AgentMutationRequest, AgentPermissionSummary, CopilotDoctorResult, CopilotPromptOptions, CopilotPromptResult, EnvironmentCheckResult, KnownEnvironmentTool, ToolCheckResult, ServiceMeImageValidationResult, ServiceMeImageInfo, ServiceMeImageCompressOptions, ServiceMeImageCompressResult, JsonSortOptions, JsonValidationResult, AgentToolRiskLevel, AgentToolPermission, ServiceMeProjectExtractTemplateInput, ServiceMeProjectExtractTemplateResult, ServiceMeProjectInstallDepsResult, ServiceMeProjectMakeScriptsExecutableResult, ServiceMeProjectGitInitResult, ServiceMeProjectScaffoldPruneResult, TaskExecutionStatus, ScheduledTaskType, TaskPayload, TaskWorkspaceRef, ScheduledTasksConfig, ScheduledTask, TaskExecutionLog, TaskStartedEventParams, TaskOutputEventParams, TaskCompletedEventParams, TaskFailedEventParams, TaskCancelledEventParams, TaskExecutionSnapshot, RunningTaskInfo, SkillMarketplaceEntry, SkillMutationRequest } from '@serviceme/devtools-protocol';
-import * as fs from 'node:fs/promises';
-export { A as AccessCheckResult, a as AccessControl, b as AccessControlOptions, c as AuthCore, d as AuthCoreOptions, e as AuthStateManager, f as AuthStateManagerOptions, C as CancellationCheck, D as DeviceFlowUiCallback, G as GitHubAuthProvider, g as GitHubAuthProviderConfig, I as IAuthProvider, h as IAuthProviderSession, i as IAuthProviderUserInfo, j as InMemoryKeychainAuthTokenStore, K as KeyValueStore, k as KeychainAccountKey, l as KeychainAuthTokenStore, m as KeychainTokenEnvelope, n as KeychainTokenMetadata, o as KeychainUnavailableError, M as MicrosoftAuthProvider, p as MicrosoftProviderNotHostedError, O as OrgMembershipFetcher, P as ProviderRegistry, S as ServiceMeLogger, q as buildGitHubLocalEmail, r as createConsoleLogger, s as isGitHubLocalEmail, t as noopLogger, u as resolvePrimaryEmail } from './index-PD135hlB.js';
-export { AtomicWriteResult, BuildSignedHeadersParams, DEVICE_JSON_SCHEMA_VERSION, DeviceAuthHeaders, DeviceCore, DeviceCoreOptions, DeviceReenrollRequiresAuthError, DeviceRequestSignatureParams, DeviceSecretVersionMismatchError, DeviceSignedHeaders, EnrollRequestFn, EnrollResponse, Enroller, EnrollerOptions, FsIdentityFileBackend, IdentityFileBackend, IdentityStore, IdentityStoreHooks, IdentityStoreOptions, PersistedDeviceIdentity, buildSignedHeaders, createDeviceRequestSignature, deriveInstallationId, fingerprintSource, randomInstallationId } from './device.js';
-import { c as SkillKind, b as SkillFile } from './types-B9gk3dXH.js';
-import { G as GitClient, P as PullResult } from './index-CymN0x9Z.js';
-export { a as GIT_PROXY_PATH_SUFFIX, b as GitError, N as NodeGitSpawner, S as StubGitSpawner, c as SubmitClient, d as SubmitClientOptions, e as SubmitError, f as SubmitOptions, g as SubmitResult, h as buildGitProxyBase, t as toFileUrl } from './index-CymN0x9Z.js';
-import * as fs$1 from 'node:fs';
-import { z } from 'zod';
-export { BUILTIN_DEFAULT_TOOLS, DefaultToolImmutableError, DefaultToolSeed, FsToolboxFileBackend, PersistedToolbox, ResolvedToolbox, TOOLBOX_JSON_SCHEMA_VERSION, ToolboxCore, ToolboxCoreOptions, ToolboxFileBackend, ToolboxPatch, ToolboxStore, ToolboxStoreHooks, ToolboxStoreOptions, WORKSPACE_TOOLBOX_RELATIVE_PATH, mergeWithDefaults, reindexOrder, sortByRecentFirst, sortByUserOrder, touchLastUsedAt } from './toolbox.js';
-import 'node:child_process';
-
-type AgentInstallScope = "workspace" | "user";
-interface InstalledAgent {
-    id: string;
-    name: string;
-    scope: AgentInstallScope;
-    installedAt: string;
-}
-interface AgentsStateFile {
-    schemaVersion: number;
-    installedAgents: InstalledAgent[];
-}
-interface AgentDownloadFile {
-    path: string;
-    content: string;
-    executable?: boolean;
-}
-interface AgentStoreFileSystem {
-    readdir: typeof fs.readdir;
-    readFile: typeof fs.readFile;
-    writeFile: typeof fs.writeFile;
-    mkdir: typeof fs.mkdir;
-    chmod: typeof fs.chmod;
-}
-interface AgentStoreOptions {
-    workspacePath: string;
-    userAgentsRoot: string;
-    fileSystem?: AgentStoreFileSystem;
-    schemaVersion?: number;
-}
-
-interface AgentCatalog {
-    agents: AgentMarketplaceEntry[];
-    fetchedAt: string;
-}
-interface AgentCatalogClientOptions {
-    fetchImpl?: typeof fetch;
-    baseUrl?: string;
-}
-declare class AgentCatalogClient {
-    private readonly fetchImpl;
-    private readonly baseUrl?;
-    constructor(options?: AgentCatalogClientOptions);
-    getCatalog(): Promise<AgentCatalog>;
-    downloadAgent(remoteId: string): Promise<AgentDownloadFile[]>;
-}
-
+import { A as KeyValueStore, C as AuthStateManagerOptions, D as AccessCheckResult, E as noopLogger, O as AccessControl, S as AuthStateManager, T as createConsoleLogger, _ as KeychainAccountKey, a as MicrosoftProviderNotHostedError, b as KeychainTokenMetadata, c as AuthCore, d as DeviceFlowUiCallback, f as ProviderRegistry, g as InMemoryKeychainAuthTokenStore, h as IAuthProviderUserInfo, i as MicrosoftAuthProvider, j as OrgMembershipFetcher, k as AccessControlOptions, l as AuthCoreOptions, m as IAuthProviderSession, n as isGitHubLocalEmail, o as GitHubAuthProvider, p as IAuthProvider, r as resolvePrimaryEmail, s as GitHubAuthProviderConfig, t as buildGitHubLocalEmail, u as CancellationCheck, v as KeychainAuthTokenStore, w as ServiceMeLogger, x as KeychainUnavailableError, y as KeychainTokenEnvelope } from "./index-CoA6y0MP.js";
+import { C as DeviceSignedHeaders, S as DeviceRequestSignatureParams, T as createDeviceRequestSignature, _ as DEVICE_JSON_SCHEMA_VERSION, a as DeviceCoreOptions, b as BuildSignedHeadersParams, c as EnrollRequestFn, d as EnrollerOptions, f as FsIdentityFileBackend, g as AtomicWriteResult, h as IdentityStoreOptions, i as DeviceCore, l as EnrollResponse, m as IdentityStore, n as fingerprintSource, o as DeviceReenrollRequiresAuthError, p as IdentityFileBackend, r as randomInstallationId, s as DeviceSecretVersionMismatchError, t as deriveInstallationId, u as Enroller, v as IdentityStoreHooks, w as buildSignedHeaders, x as DeviceAuthHeaders, y as PersistedDeviceIdentity } from "./index-BI11AfMH.js";
+import { i as SkillKind, r as SkillFile } from "./types-BCV3IedE.js";
+import { a as SubmitError, c as NodeGitSpawner, d as toFileUrl, f as GitError, i as SubmitResult, l as StubGitSpawner, n as SubmitClientOptions, o as GIT_PROXY_PATH_SUFFIX, p as PullResult, r as SubmitOptions, s as GitClient, t as SubmitClient, u as buildGitProxyBase } from "./index-Dp6FwWKh.js";
+import { _ as reindexOrder, a as ToolboxFileBackend, b as touchLastUsedAt, c as ToolboxStoreOptions, d as DefaultToolSeed, f as PersistedToolbox, g as mergeWithDefaults, h as ToolboxPatch, i as FsToolboxFileBackend, l as WORKSPACE_TOOLBOX_RELATIVE_PATH, m as TOOLBOX_JSON_SCHEMA_VERSION, n as ToolboxCore, o as ToolboxStore, p as ResolvedToolbox, r as ToolboxCoreOptions, s as ToolboxStoreHooks, t as DefaultToolImmutableError, u as BUILTIN_DEFAULT_TOOLS, v as sortByRecentFirst, y as sortByUserOrder } from "./index-DaW7IYA-.js";
+import { AgentMarketplaceEntry, AgentMutationRequest, AgentPermissionSummary, AgentToolPermission, AgentToolRiskLevel, CopilotDoctorResult, CopilotPromptOptions, CopilotPromptResult, EnvironmentCheckResult, JsonSortOptions, JsonValidationResult, KnownEnvironmentTool, RunningTaskInfo, ScheduledTask, ScheduledTaskType, ScheduledTasksConfig, ServiceMeImageCompressOptions, ServiceMeImageCompressResult, ServiceMeImageInfo, ServiceMeImageValidationResult, ServiceMeProjectExtractTemplateInput, ServiceMeProjectExtractTemplateResult, ServiceMeProjectGitInitResult, ServiceMeProjectInstallDepsResult, ServiceMeProjectMakeScriptsExecutableResult, ServiceMeProjectScaffoldPruneResult, SkillMarketplaceEntry, SkillMutationRequest, TaskCancelledEventParams, TaskCompletedEventParams, TaskExecutionLog, TaskExecutionSnapshot, TaskExecutionStatus, TaskFailedEventParams, TaskOutputEventParams, TaskPayload, TaskStartedEventParams, TaskWorkspaceRef, ToolCheckResult } from "@serviceme/devtools-protocol";
+import * as fs$1 from "node:fs/promises";
+import * as fs from "node:fs";
+import { z } from "zod";
+//#region src/agents/types.d.ts
+export type AgentInstallScope = "workspace" | "user";
+export interface InstalledAgent {
+  id: string;
+  name: string;
+  scope: AgentInstallScope;
+  installedAt: string;
+}
+export interface AgentsStateFile {
+  schemaVersion: number;
+  installedAgents: InstalledAgent[];
+}
+export interface AgentDownloadFile {
+  path: string;
+  content: string;
+  executable?: boolean;
+}
+export interface AgentStoreFileSystem {
+  readdir: typeof fs$1.readdir;
+  readFile: typeof fs$1.readFile;
+  writeFile: typeof fs$1.writeFile;
+  mkdir: typeof fs$1.mkdir;
+  chmod: typeof fs$1.chmod;
+}
+export interface AgentStoreOptions {
+  workspacePath: string;
+  userAgentsRoot: string;
+  fileSystem?: AgentStoreFileSystem;
+  schemaVersion?: number;
+}
+//#endregion
+//#region src/agents/AgentCatalogClient.d.ts
+export interface AgentCatalog {
+  agents: AgentMarketplaceEntry[];
+  fetchedAt: string;
+}
+export interface AgentCatalogClientOptions {
+  fetchImpl?: typeof fetch;
+  baseUrl?: string;
+}
+export declare class AgentCatalogClient {
+  private readonly fetchImpl;
+  private readonly baseUrl?;
+  constructor(options?: AgentCatalogClientOptions);
+  getCatalog(): Promise<AgentCatalog>;
+  downloadAgent(remoteId: string): Promise<AgentDownloadFile[]>;
+}
+//#endregion
+//#region src/agents/AgentReconciler.d.ts
 interface AgentStoreLike {
-    normalizeRemoteAgentId(remoteId: string): string;
-    listWorkspaceAgentIds(): Promise<string[]>;
-    listUserAgentIds(): Promise<string[]>;
+  normalizeRemoteAgentId(remoteId: string): string;
+  listWorkspaceAgentIds(): Promise<string[]>;
+  listUserAgentIds(): Promise<string[]>;
 }
 interface AgentCatalogLike {
-    agents: AgentMarketplaceEntry[];
-    fetchedAt: string;
+  agents: AgentMarketplaceEntry[];
+  fetchedAt: string;
 }
 interface AgentCatalogClientLike {
-    getCatalog(): Promise<AgentCatalogLike>;
-}
-interface AgentReconcilerDependencies {
-    agentStore: AgentStoreLike;
-    catalogClient: AgentCatalogClientLike;
-}
-interface AgentMutateResult {
-    status: "success" | "blocked" | "requires_confirmation";
-    changed: boolean;
-    message?: string;
-    tools?: string[];
-}
-declare class AgentReconciler {
-    private readonly deps;
-    constructor(deps: AgentReconcilerDependencies);
-    mutate(request: AgentMutationRequest): Promise<AgentMutateResult>;
-    getPermissionSummary(agentId: string, agentName: string, content: string): AgentPermissionSummary;
-    private hasHighRiskTool;
-}
-
-declare class AgentStore {
-    private readonly workspacePath;
-    private readonly userAgentsRoot;
-    private readonly fileSystem;
-    private readonly schemaVersion;
-    constructor(options: AgentStoreOptions);
-    normalizeRemoteAgentId(remoteId: string): string;
-    getWorkspaceAgentsRootPath(): string;
-    getWorkspaceStateFilePath(): string;
-    getUserAgentsRootPath(): string;
-    listWorkspaceAgentIds(): Promise<string[]>;
-    listUserAgentIds(): Promise<string[]>;
-    readState(): Promise<AgentsStateFile | null>;
-    /**
-     * One-time migration: the workspace agents state file used to be named
-     * `.github/.ms-devtools-agents.yml`. If the new `.serviceme-agents.yml`
-     * doesn't exist yet but the legacy file does, copy its content forward
-     * so existing installed-agent state isn't silently lost.
-     */
-    private migrateLegacyState;
-    writeState(state: AgentsStateFile): Promise<void>;
-    addInstalledAgent(entry: InstalledAgent): Promise<void>;
-    removeInstalledAgent(agentId: string): Promise<void>;
-    writeAgentFiles(agentId: string, scope: "workspace" | "user", files: AgentDownloadFile[]): Promise<void>;
-    private listAgentIds;
+  getCatalog(): Promise<AgentCatalogLike>;
+}
+export interface AgentReconcilerDependencies {
+  agentStore: AgentStoreLike;
+  catalogClient: AgentCatalogClientLike;
+}
+export interface AgentMutateResult {
+  status: "success" | "blocked" | "requires_confirmation";
+  changed: boolean;
+  message?: string;
+  tools?: string[];
+}
+export declare class AgentReconciler {
+  private readonly deps;
+  constructor(deps: AgentReconcilerDependencies);
+  mutate(request: AgentMutationRequest): Promise<AgentMutateResult>;
+  getPermissionSummary(agentId: string, agentName: string, content: string): AgentPermissionSummary;
+  private hasHighRiskTool;
+}
+//#endregion
+//#region src/agents/AgentStore.d.ts
+export declare class AgentStore {
+  private readonly workspacePath;
+  private readonly userAgentsRoot;
+  private readonly fileSystem;
+  private readonly schemaVersion;
+  constructor(options: AgentStoreOptions);
+  normalizeRemoteAgentId(remoteId: string): string;
+  getWorkspaceAgentsRootPath(): string;
+  getWorkspaceStateFilePath(): string;
+  getUserAgentsRootPath(): string;
+  listWorkspaceAgentIds(): Promise<string[]>;
+  listUserAgentIds(): Promise<string[]>;
+  readState(): Promise<AgentsStateFile | null>;
+  /**
+   * One-time migration: the workspace agents state file used to be named
+   * `.github/.ms-devtools-agents.yml`. If the new `.serviceme-agents.yml`
+   * doesn't exist yet but the legacy file does, copy its content forward
+   * so existing installed-agent state isn't silently lost.
+   */
+  private migrateLegacyState;
+  writeState(state: AgentsStateFile): Promise<void>;
+  addInstalledAgent(entry: InstalledAgent): Promise<void>;
+  removeInstalledAgent(agentId: string): Promise<void>;
+  writeAgentFiles(agentId: string, scope: "workspace" | "user", files: AgentDownloadFile[]): Promise<void>;
+  private listAgentIds;
 }
 /** One legacy content entry reported by {@link migrateLegacyUserContent}. */
-interface LegacyUserContentEntry {
-    /** Legacy agent id derived from the file or directory name. */
-    id: string;
-    /** Absolute path of the legacy content under ~/.agents. */
-    legacyPath: string;
-    /** Target path under ~/.copilot the migration would create. */
-    targetPath: string;
-    /** Always `migration_available` until the user runs the migration. */
-    status: "migration_available";
-}
-interface LegacyUserContentMigrationResult {
-    entries: LegacyUserContentEntry[];
+export interface LegacyUserContentEntry {
+  /** Legacy agent id derived from the file or directory name. */
+  id: string;
+  /** Absolute path of the legacy content under ~/.agents. */
+  legacyPath: string;
+  /** Target path under ~/.copilot the migration would create. */
+  targetPath: string;
+  /** Always `migration_available` until the user runs the migration. */
+  status: "migration_available";
+}
+export interface LegacyUserContentMigrationResult {
+  entries: LegacyUserContentEntry[];
 }
 /**
  * Detect ~/.agents agent content that can migrate to ~/.copilot.
@@ -134,23 +134,26 @@ interface LegacyUserContentMigrationResult {
  * explicitly invokes the migration, so a detection pass never destroys
  * anything another tool still depends on.
  */
-declare function migrateLegacyUserContent(input: {
-    homeDir: string;
-    workspaceDir: string;
-    fileSystem?: AgentStoreFileSystem;
+export declare function migrateLegacyUserContent(input: {
+  homeDir: string;
+  workspaceDir: string;
+  fileSystem?: AgentStoreFileSystem;
 }): Promise<LegacyUserContentMigrationResult>;
-
+//#endregion
+//#region src/copilot/doctor.d.ts
 /**
  * Quick auth pre-flight check using `gh auth status`.
  * Returns true if gh is authenticated; false otherwise.
  */
-declare function isCopilotAuthenticated(): Promise<boolean>;
-declare function copilotDoctor(): Promise<CopilotDoctorResult>;
-declare function createCopilotNotInstalledError(): _serviceme_devtools_protocol.ServicemeProtocolError;
-declare function createCopilotAuthRequiredError(): _serviceme_devtools_protocol.ServicemeProtocolError;
-
-declare function copilotPrompt(options: CopilotPromptOptions): Promise<CopilotPromptResult>;
-
+export declare function isCopilotAuthenticated(): Promise<boolean>;
+export declare function copilotDoctor(): Promise<CopilotDoctorResult>;
+export declare function createCopilotNotInstalledError(): import("@serviceme/devtools-protocol").ServicemeProtocolError;
+export declare function createCopilotAuthRequiredError(): import("@serviceme/devtools-protocol").ServicemeProtocolError;
+//#endregion
+//#region src/copilot/prompt.d.ts
+export declare function copilotPrompt(options: CopilotPromptOptions): Promise<CopilotPromptResult>;
+//#endregion
+//#region src/copilot-content/types.d.ts
 /**
  * Contracts for the declarative Copilot content lifecycle.
  *
@@ -160,151 +163,189 @@ declare function copilotPrompt(options: CopilotPromptOptions): Promise<CopilotPr
  *   3. machine-local materialization state under ~/.serviceme/workspaces
  */
 /** Artifact kinds a logical plugin can contribute to Copilot. */
-type CopilotArtifactKind = "agent" | "skill" | "instruction" | "prompt" | "hook" | "mcp";
+export type CopilotArtifactKind = "agent" | "skill" | "instruction" | "prompt" | "hook" | "mcp";
+/** Parsed form of a content identity (see {@link buildContentIdentity}). */
+export interface ContentIdentity {
+  repoId: string;
+  pluginId: string;
+  kind: string;
+  name: string;
+}
+/**
+ * Build the stable content identity `${repoId}::${pluginId}::${kind}:${name}`.
+ * New code should always construct it through this helper; a few
+ * pre-existing sites (plugin-resolver, workspace-declaration-reader)
+ * still inline the same shape.
+ */
+export declare function buildContentIdentity(identity: ContentIdentity): string;
+/**
+ * Parse a content identity back into its parts. Returns null for
+ * anything that does not match the `${repoId}::${pluginId}::${kind}:${name}`
+ * shape (e.g. integration identities without a name tail are handled
+ * by their callers and should not be passed here).
+ */
+export declare function parseContentIdentity(value: string): ContentIdentity | null;
 /** A repository pinned to an exact commit for reproducible restoration. */
-interface WorkspaceManifestRepository {
-    /** Stable id used in on-disk paths and plugin references. */
-    id: string;
-    /** Authoritative cross-machine source identity (HTTPS or git@ URL). */
-    url: string;
-    /** Full 40-character commit SHA; branch names are not allowed. */
-    commit: string;
+export interface WorkspaceManifestRepository {
+  /** Stable id used in on-disk paths and plugin references. */
+  id: string;
+  /** Authoritative cross-machine source identity (HTTPS or git@ URL). */
+  url: string;
+  /** Full 40-character commit SHA; branch names are not allowed. */
+  commit: string;
 }
 /** A Git source in the v2 manifest syntax. */
-interface WorkspaceManifestGitSource extends WorkspaceManifestRepository {
-    type: "git";
+export interface WorkspaceManifestGitSource extends WorkspaceManifestRepository {
+  type: "git";
 }
 /** An immutable marketplace artifact materialized under ~/.serviceme/repos/<id>. */
-interface WorkspaceManifestCatalogSource {
-    type: "catalog";
-    /** Stable local repository id used for the managed source directory. */
-    id: string;
-    /** Marketplace identity, independent of any transient download URL. */
-    catalogId: string;
-    /** Immutable catalog release selected by the workspace. */
-    revision: string;
-    /** SHA-256 of the complete catalog payload, prefixed with sha256:. */
-    digest: string;
+export interface WorkspaceManifestCatalogSource {
+  type: "catalog";
+  /** Stable local repository id used for the managed source directory. */
+  id: string;
+  /** Marketplace identity, independent of any transient download URL. */
+  catalogId: string;
+  /** Immutable catalog release selected by the workspace. */
+  revision: string;
+  /** SHA-256 of the complete catalog payload, prefixed with sha256:. */
+  digest: string;
 }
 /** A source that can be restored on each collaborator's machine. */
-type WorkspaceManifestSource = WorkspaceManifestGitSource | WorkspaceManifestCatalogSource;
+export type WorkspaceManifestSource = WorkspaceManifestGitSource | WorkspaceManifestCatalogSource;
 /** A logical plugin selection inside the workspace declaration. */
-interface WorkspaceManifestPlugin {
-    /** Referenced repository id. */
-    repository: string;
-    /** Logical plugin id from plugin.json, or the legacy skill/agent name. */
-    id: string;
-    /** Legacy artifact-kind selection, retained for compatible workspace declarations. */
-    artifacts: Partial<Record<CopilotArtifactKind, boolean>>;
-    /** Exact resolver artifact identities selected for this package. */
-    artifactIds?: string[];
+export interface WorkspaceManifestPlugin {
+  /** Referenced repository id. */
+  repository: string;
+  /** Logical plugin id from plugin.json, or the legacy skill/agent name. */
+  id: string;
+  /** Legacy artifact-kind selection, retained for compatible workspace declarations. */
+  artifacts: Partial<Record<CopilotArtifactKind, boolean>>;
+  /** Exact resolver artifact identities selected for this package. */
+  artifactIds?: string[];
+  /** Content targets (`kind:name`) deliberately disabled on installs of
+   * this package — part of the shared declaration so the disabled state
+   * survives extension reloads and machine-local state loss. */
+  disabledArtifacts?: string[];
 }
 /** A v2 logical plugin selection references any supported source type. */
-interface WorkspaceManifestPluginV2 {
-    /** Referenced source id. */
-    source: string;
-    /** Logical plugin id from plugin.json, or the legacy skill/agent name. */
-    id: string;
-    /** Legacy artifact-kind selection, retained for compatible workspace declarations. */
-    artifacts: Partial<Record<CopilotArtifactKind, boolean>>;
-    /** Exact resolver artifact identities selected for this package. */
-    artifactIds?: string[];
+export interface WorkspaceManifestPluginV2 {
+  /** Referenced source id. */
+  source: string;
+  /** Logical plugin id from plugin.json, or the legacy skill/agent name. */
+  id: string;
+  /** Legacy artifact-kind selection, retained for compatible workspace declarations. */
+  artifacts: Partial<Record<CopilotArtifactKind, boolean>>;
+  /** Exact resolver artifact identities selected for this package. */
+  artifactIds?: string[];
+  /** Content targets (`kind:name`) deliberately disabled on installs of
+   * this package — part of the shared declaration so the disabled state
+   * survives extension reloads and machine-local state loss. */
+  disabledArtifacts?: string[];
 }
 /** Root shape of .github/serviceme-plugins.json. */
-interface WorkspaceCopilotManifestV1 {
-    version: 1;
-    repositories: WorkspaceManifestRepository[];
-    plugins: WorkspaceManifestPlugin[];
+export interface WorkspaceCopilotManifestV1 {
+  version: 1;
+  repositories: WorkspaceManifestRepository[];
+  plugins: WorkspaceManifestPlugin[];
 }
 /** Root v2 shape: sources may be Git checkouts or immutable catalog artifacts. */
-interface WorkspaceCopilotManifestV2 {
-    version: 2;
-    sources: WorkspaceManifestSource[];
-    plugins: WorkspaceManifestPluginV2[];
+export interface WorkspaceCopilotManifestV2 {
+  version: 2;
+  sources: WorkspaceManifestSource[];
+  plugins: WorkspaceManifestPluginV2[];
 }
 /** Root shape of .github/serviceme-plugins.json. */
-type WorkspaceCopilotManifest = WorkspaceCopilotManifestV1 | WorkspaceCopilotManifestV2;
+export type WorkspaceCopilotManifest = WorkspaceCopilotManifestV1 | WorkspaceCopilotManifestV2;
 /** Normalize the versioned source list for consumers that do not care about syntax. */
-declare function getWorkspaceManifestSources(manifest: WorkspaceCopilotManifest): WorkspaceManifestSource[];
+export declare function getWorkspaceManifestSources(manifest: WorkspaceCopilotManifest): WorkspaceManifestSource[];
 /** Resolve a versioned plugin selection to its source id. */
-declare function getWorkspaceManifestPluginSourceId(manifest: WorkspaceCopilotManifest, plugin: WorkspaceManifestPlugin | WorkspaceManifestPluginV2): string;
+export declare function getWorkspaceManifestPluginSourceId(manifest: WorkspaceCopilotManifest, plugin: WorkspaceManifestPlugin | WorkspaceManifestPluginV2): string;
 /** Materialization mode used when activating an entry on the current machine. */
-type CopilotLinkMode = "symlink" | "junction" | "generated";
+export type CopilotLinkMode = "symlink" | "junction" | "generated";
 /** One materialized entry recorded in machine-local state. */
-interface WorkspaceMaterializedEntry {
-    /** Stable identity: repository::plugin::kind[:name]. */
-    identity: string;
-    /** Owning repository id. */
-    repositoryId: string;
-    /** Owning logical plugin id. */
-    pluginId: string;
-    /** Artifact kind of this entry. */
-    kind: CopilotArtifactKind;
-    /** Absolute source path under ~/.serviceme/repos. */
-    sourcePath: string;
-    /** Workspace-relative link path. */
-    linkPath: string;
-    /** Link mode used on this machine. */
-    linkMode: CopilotLinkMode;
-    /** SHA-256 digest of the pinned source content. */
-    digest: string;
-    /** Whether the current machine approved risky content. */
-    approved: boolean;
+export interface WorkspaceMaterializedEntry {
+  /** Stable identity: repository::plugin::kind[:name]. */
+  identity: string;
+  /** Owning repository id. */
+  repositoryId: string;
+  /** Owning logical plugin id. */
+  pluginId: string;
+  /** Artifact kind of this entry. */
+  kind: CopilotArtifactKind;
+  /** Absolute source path under ~/.serviceme/repos. */
+  sourcePath: string;
+  /** Workspace-relative link path. */
+  linkPath: string;
+  /** Link mode used on this machine. */
+  linkMode: CopilotLinkMode;
+  /** SHA-256 digest of the pinned source content. */
+  digest: string;
+  /** Whether the current machine approved risky content. */
+  approved: boolean;
 }
 /** Machine-local materialization state; never shared through git. */
-interface WorkspaceContentState {
-    version: 1;
-    entries: WorkspaceMaterializedEntry[];
+export interface WorkspaceContentState {
+  version: 1;
+  entries: WorkspaceMaterializedEntry[];
 }
-
+//#endregion
+//#region src/copilot-content/content-plan.d.ts
 /** One immutable materialization step in a resolved content plan. */
-interface PlannedContentEntry {
-    /** Stable identity: repository::plugin::kind[:name]. */
-    identity: string;
-    /** Owning repository id. */
-    repositoryId: string;
-    /** Owning logical plugin id. */
-    pluginId: string;
-    /** Artifact kind of this entry. */
-    kind: CopilotArtifactKind;
-    /** Absolute source path under the repository root. */
-    sourcePath: string;
-    /** Whether the source is a single file (agent/instruction) or a directory (skill). */
-    sourceIsFile: boolean;
-    /** Copilot-facing name used at the link target. */
-    name: string;
-    /** SHA-256 digest over the source content. */
-    digest: string;
-    /** Whether local approval is required before activation. */
-    requiresApproval: boolean;
+export interface PlannedContentEntry {
+  /** Stable identity: repository::plugin::kind[:name]. */
+  identity: string;
+  /** Owning repository id. */
+  repositoryId: string;
+  /** Owning logical plugin id. */
+  pluginId: string;
+  /** Artifact kind of this entry. */
+  kind: CopilotArtifactKind;
+  /** Absolute source path under the repository root. */
+  sourcePath: string;
+  /** Whether the source is a single file (agent/instruction) or a directory (skill). */
+  sourceIsFile: boolean;
+  /** Copilot-facing name used at the link target. */
+  name: string;
+  /** SHA-256 digest over the source content. */
+  digest: string;
+  /** Whether local approval is required before activation. */
+  requiresApproval: boolean;
 }
 /** Result of resolving a workspace declaration against local repositories. */
-interface WorkspaceContentPlan {
-    entries: PlannedContentEntry[];
-}
-
-interface ResolvedPluginManifest {
-    name: string;
-    description?: string;
-    version?: string;
-    extensions: Record<string, Record<string, unknown>>;
-}
-interface ResolvedPluginEntry extends PlannedContentEntry {
-    /** Stable artifact identifier for consumers that do not need to parse identity. */
-    artifactId: string;
-    /** Stable package identifier for the logical repository/plugin pair. */
-    packageId: string;
-    /** Display metadata for the logical package. */
-    packageDisplayName: string;
-    packageDescription?: string;
-    packageVersion?: string;
+export interface WorkspaceContentPlan {
+  entries: PlannedContentEntry[];
+}
+//#endregion
+//#region src/copilot-content/plugin-resolver.d.ts
+export interface ResolvedPluginManifest {
+  name: string;
+  description?: string;
+  version?: string;
+  extensions: Record<string, Record<string, unknown>>;
+}
+export interface ResolvedPluginEntry extends PlannedContentEntry {
+  /** Stable artifact identifier for consumers that do not need to parse identity. */
+  artifactId: string;
+  /** Stable package identifier for the logical repository/plugin pair. */
+  packageId: string;
+  /** Display metadata for the logical package. */
+  packageDisplayName: string;
+  packageDescription?: string;
+  packageVersion?: string;
 }
 /** Resolve a workspace declaration into an immutable content plan. */
-declare function resolveWorkspaceContentPlan(input: {
-    manifest: WorkspaceCopilotManifest;
-    reposDir: string;
+export interface WorkspacePlanConflict {
+  /** Identity of the dropped (later) entry. */
+  identity: string;
+  /** Human-readable remediation hint naming both plugins. */
+  message: string;
+}
+export declare function resolveWorkspaceContentPlan(input: {
+  manifest: WorkspaceCopilotManifest;
+  reposDir: string;
 }): Promise<{
-    entries: ResolvedPluginEntry[];
+  entries: ResolvedPluginEntry[];
+  conflicts: WorkspacePlanConflict[];
 }>;
 /**
  * Lenient variant for CATALOG BROWSING: resolve a single plugin's
@@ -319,45 +360,46 @@ declare function resolveWorkspaceContentPlan(input: {
  * here; mcp.json/hooks stay install-pipeline-only (they materialize
  * shared config and MUST pass the strict gate).
  */
-declare function resolvePluginEntriesLenient(input: {
-    repoRoot: string;
-    repositoryId: string;
-    pluginId: string;
-    manifest: ResolvedPluginManifest;
+export declare function resolvePluginEntriesLenient(input: {
+  repoRoot: string;
+  repositoryId: string;
+  pluginId: string;
+  manifest: ResolvedPluginManifest;
 }): Promise<ResolvedPluginEntry[]>;
-
+//#endregion
+//#region src/copilot-content/copilot-host-capabilities.d.ts
 /** Personal artifact kinds materialized as managed links into host target directories. */
-declare const allPersonalLinkKinds: readonly ["agent", "skill", "prompt", "instruction"];
+export declare const allPersonalLinkKinds: readonly ["agent", "skill", "prompt", "instruction"];
 /** One personal link kind. */
-type PersonalLinkKind = (typeof allPersonalLinkKinds)[number];
+export type PersonalLinkKind = (typeof allPersonalLinkKinds)[number];
 /**
  * Adapter that applies or removes one personal integration entry (mcp/hook)
  * in host-owned user configuration. Implementations own their config format;
  * callers own the digest approval rule.
  */
-interface CopilotIntegrationAdapter {
-    /** Apply one approved integration entry on this machine. */
-    applyEntry(input: {
-        entry: ResolvedPluginEntry;
-    }): Promise<void>;
-    /** Remove a previously applied entry; returns whether anything was removed. */
-    removeEntry(input: {
-        identity: string;
-    }): Promise<boolean>;
+export interface CopilotIntegrationAdapter {
+  /** Apply one approved integration entry on this machine. */
+  applyEntry(input: {
+    entry: ResolvedPluginEntry;
+  }): Promise<void>;
+  /** Remove a previously applied entry; returns whether anything was removed. */
+  removeEntry(input: {
+    identity: string;
+  }): Promise<boolean>;
 }
 /** Host-verified personal materialization targets and integration adapters. */
-interface CopilotHostCapabilities {
-    /** Absolute, host-verified target directory per personal link kind. */
-    personalTargets: Partial<Record<PersonalLinkKind, string>>;
-    /** Adapter for personal MCP configuration, when the host supports one. */
-    mcpAdapter?: CopilotIntegrationAdapter;
-    /** Adapter for personal hook registration, when the host supports one. */
-    hookAdapter?: CopilotIntegrationAdapter;
+export interface CopilotHostCapabilities {
+  /** Absolute, host-verified target directory per personal link kind. */
+  personalTargets: Partial<Record<PersonalLinkKind, string>>;
+  /** Adapter for personal MCP configuration, when the host supports one. */
+  mcpAdapter?: CopilotIntegrationAdapter;
+  /** Adapter for personal hook registration, when the host supports one. */
+  hookAdapter?: CopilotIntegrationAdapter;
 }
 /** Whether the host verified a personal target directory for the kind. */
-declare function supportsPersonalLinkKind(capabilities: CopilotHostCapabilities, kind: PersonalLinkKind): boolean;
+export declare function supportsPersonalLinkKind(capabilities: CopilotHostCapabilities, kind: PersonalLinkKind): boolean;
 /** Whether the host provides the adapter an integration kind requires. */
-declare function supportsPersonalIntegrationKind(capabilities: CopilotHostCapabilities, kind: "mcp" | "hook"): boolean;
+export declare function supportsPersonalIntegrationKind(capabilities: CopilotHostCapabilities, kind: "mcp" | "hook"): boolean;
 /**
  * Conservative production capability provider.
  *
@@ -367,51 +409,53 @@ declare function supportsPersonalIntegrationKind(capabilities: CopilotHostCapabi
  * until a verified provider wires them (Task 9); the reconciler reports those
  * kinds as unsupported instead of inventing directories.
  */
-declare function createDefaultCopilotHostCapabilities(options?: {
-    copilotHomeDir?: string;
+export declare function createDefaultCopilotHostCapabilities(options?: {
+  copilotHomeDir?: string;
 }): Promise<CopilotHostCapabilities>;
-
+//#endregion
+//#region src/copilot-content/copilot-link-materializer.d.ts
 /** Status of one entry after a reconcile pass. */
-type MaterializeEntryStatus = "restored" | "adopted" | "conflict" | "drifted" | "pending_approval";
-interface MaterializeEntryResult {
-    identity: string;
-    status: MaterializeEntryStatus;
-    /** Secondary machine-local state, e.g. migration_available for legacy links. */
-    message?: string;
-}
-interface MaterializeResult {
-    changed: boolean;
-    entries: MaterializeEntryResult[];
-    /** Updated machine-local state (only successfully materialized entries). */
-    state: WorkspaceContentState;
+export type MaterializeEntryStatus = "restored" | "adopted" | "conflict" | "drifted" | "pending_approval";
+export interface MaterializeEntryResult {
+  identity: string;
+  status: MaterializeEntryStatus;
+  /** Secondary machine-local state, e.g. migration_available for legacy links. */
+  message?: string;
+}
+export interface MaterializeResult {
+  changed: boolean;
+  entries: MaterializeEntryResult[];
+  /** Updated machine-local state (only successfully materialized entries). */
+  state: WorkspaceContentState;
 }
 /** Create and inspect Copilot links; never overwrite unowned content. */
-declare class CopilotLinkMaterializer {
-    private pendingFailure;
-    /** Test seam: make the next reconcile throw, then clear the failure. */
-    failNext(error: Error): void;
-    /** Materialize planned entries with conflict/drift safety. */
-    reconcile(input: {
-        workspaceDir: string;
-        entries: PlannedContentEntry[];
-        previousState: WorkspaceContentState;
-    }): Promise<MaterializeResult>;
-    /** Adopt a matching legacy link without recreating it. */
-    adoptLegacyLink(input: {
-        workspaceDir: string;
-        entry: PlannedContentEntry;
-    }): Promise<MaterializeEntryResult>;
-    /** Inspect a legacy ~/.agents link; report without deleting. */
-    inspectLegacyUserLink(input: {
-        homeDir: string;
-        entry: PlannedContentEntry;
-    }): Promise<MaterializeEntryResult>;
-    private resolveLinkPath;
-    private createLinkAtomic;
-    private toStateEntry;
-    private toStateLinkPath;
-}
-
+export declare class CopilotLinkMaterializer {
+  private pendingFailure;
+  /** Test seam: make the next reconcile throw, then clear the failure. */
+  failNext(error: Error): void;
+  /** Materialize planned entries with conflict/drift safety. */
+  reconcile(input: {
+    workspaceDir: string;
+    entries: PlannedContentEntry[];
+    previousState: WorkspaceContentState;
+  }): Promise<MaterializeResult>;
+  /** Adopt a matching legacy link without recreating it. */
+  adoptLegacyLink(input: {
+    workspaceDir: string;
+    entry: PlannedContentEntry;
+  }): Promise<MaterializeEntryResult>;
+  /** Inspect a legacy ~/.agents link; report without deleting. */
+  inspectLegacyUserLink(input: {
+    homeDir: string;
+    entry: PlannedContentEntry;
+  }): Promise<MaterializeEntryResult>;
+  private resolveLinkPath;
+  private createLinkAtomic;
+  private toStateEntry;
+  private toStateLinkPath;
+}
+//#endregion
+//#region src/copilot-content/copilot-plugin-registrar.d.ts
 /**
  * Copilot plugin whole-package registration.
  *
@@ -442,150 +486,158 @@ declare class CopilotLinkMaterializer {
  * `chat.pluginLocations` (VS Code user settings) is intentionally
  * NOT handled here — it can only be written by the extension layer.
  */
-interface CopilotPluginRegistrarOptions {
-    /** Projection root. Defaults to `${SERVICEME_HOME}/copilot-plugins`. */
-    pluginsDir?: string;
-    /** `~/.copilot` — migration source only (VS Code owns that tree). */
-    copilotDir?: string;
-}
-interface CopilotPluginRegisterInput {
-    repoId: string;
-    pluginId: string;
-    /** Canonical checkout plugin directory (the whole package root). */
-    pluginDir: string;
+export interface CopilotPluginRegistrarOptions {
+  /** Projection root. Defaults to `${SERVICEME_HOME}/copilot-plugins`. */
+  pluginsDir?: string;
+  /** `~/.copilot` — migration source only (VS Code owns that tree). */
+  copilotDir?: string;
+}
+export interface CopilotPluginRegisterInput {
+  repoId: string;
+  pluginId: string;
+  /** Canonical checkout plugin directory (the whole package root). */
+  pluginDir: string;
+  /** @deprecated Projection root comes from the constructor; ignored. */
+  copilotDir?: string;
+  scope?: "workspace" | "personal";
+  displayName?: string;
+  version?: string;
+}
+export interface CopilotPluginRegistration {
+  /** `${repoId}:${pluginId}` — path-safe. */
+  registrationId: string;
+  repoId: string;
+  pluginId: string;
+  pluginDir: string;
+  displayName?: string;
+  version?: string;
+  scopes: Array<"workspace" | "personal">;
+}
+export declare class CopilotPluginRegistrar {
+  private readonly pluginsDir;
+  private readonly copilotDir;
+  private migrated;
+  constructor(options?: CopilotPluginRegistrarOptions);
+  /** Registry root — resolved, used as the boundary for all path joins. */
+  private installedDir;
+  /** Projection path for an id, with an explicit containment check. */
+  private linkPath;
+  private registryPath;
+  /**
+   * One-shot migration away from `~/.copilot` (VS Code territory):
+   * carries over registry records and surviving projections from both
+   * legacy layouts and removes the old trees. Self-guarding when the
+   * source and destination coincide; safe to run repeatedly.
+   */
+  private migrateFromCopilotDir;
+  private readRegistry;
+  private writeRegistry;
+  register(input: CopilotPluginRegisterInput): Promise<CopilotPluginRegistration>;
+  unregister(input: {
+    registrationId: string;
     /** @deprecated Projection root comes from the constructor; ignored. */
     copilotDir?: string;
     scope?: "workspace" | "personal";
-    displayName?: string;
-    version?: string;
-}
-interface CopilotPluginRegistration {
-    /** `${repoId}:${pluginId}` — path-safe. */
-    registrationId: string;
-    repoId: string;
-    pluginId: string;
-    pluginDir: string;
-    displayName?: string;
-    version?: string;
-    scopes: Array<"workspace" | "personal">;
-}
-declare class CopilotPluginRegistrar {
-    private readonly pluginsDir;
-    private readonly copilotDir;
-    private migrated;
-    constructor(options?: CopilotPluginRegistrarOptions);
-    /** Registry root — resolved, used as the boundary for all path joins. */
-    private installedDir;
-    /** Projection path for an id, with an explicit containment check. */
-    private linkPath;
-    private registryPath;
-    /**
-     * One-shot migration away from `~/.copilot` (VS Code territory):
-     * carries over registry records and surviving projections from both
-     * legacy layouts and removes the old trees. Self-guarding when the
-     * source and destination coincide; safe to run repeatedly.
-     */
-    private migrateFromCopilotDir;
-    private readRegistry;
-    private writeRegistry;
-    register(input: CopilotPluginRegisterInput): Promise<CopilotPluginRegistration>;
-    unregister(input: {
-        registrationId: string;
-        /** @deprecated Projection root comes from the constructor; ignored. */
-        copilotDir?: string;
-        scope?: "workspace" | "personal";
-    }): Promise<void>;
-    list(_input?: {
-        copilotDir?: string;
-    }): Promise<CopilotPluginRegistration[]>;
-}
-
-type CopilotScope = "workspace" | "personal";
-type CopilotInstallIntent = "available" | "selected" | "moving" | "removing";
-type CopilotMaterializationHealth = "healthy" | "missing" | "drifted" | "conflict" | "source-unavailable" | "unsupported";
-type CopilotLocalGate = "ready" | "approval-required" | "configuration-required";
-type CopilotUserStatus = "healthy" | "action-required" | "blocked" | "not-enabled";
-interface CopilotArtifactState {
-    intent: CopilotInstallIntent;
-    health: CopilotMaterializationHealth;
-    gate: CopilotLocalGate;
-}
-interface CopilotPackageInstallation {
-    packageId: string;
-    scope: CopilotScope;
-    selectedArtifactIds: string[];
-    pinnedVersion?: string;
-}
-interface CopilotArtifactSummary {
-    id: string;
-    packageId: string;
-    kind: CopilotArtifactKind;
-    displayName: string;
-    description?: string;
-    installStrategy: "link" | "generated-config" | "approval-gated";
-    risk: "none" | "review-required";
-}
-declare function deriveCopilotUserStatus(states: CopilotArtifactState[]): CopilotUserStatus;
-
-interface CopilotSourceSummary {
-    id: string;
-    type: "marketplace" | "git" | "local";
-    displayName: string;
-    updateCapability: "pinned" | "live" | "none";
-}
-interface CopilotPackageDefinition {
-    id: string;
-    sourceId: string;
-    displayName: string;
-    description?: string;
-    version?: string;
-    artifacts: CopilotArtifactSummary[];
-    /** Whole-package registrar installation (Copilot-managed, both scopes) —
-     * the home package list shows these; per-artifact v1 manifest plugins
-     * stay in the enabled-content section instead. */
-    wholePackage?: boolean;
-}
-interface CopilotArtifactView {
-    artifact: CopilotArtifactSummary;
-    state: CopilotArtifactState;
-}
-interface CopilotPackageView {
-    definition: CopilotPackageDefinition;
-    installation: CopilotPackageInstallation;
-    artifacts: CopilotArtifactView[];
-    selectedArtifactCount: number;
-    status: CopilotUserStatus;
-}
-interface CopilotSourceView extends CopilotSourceSummary {
-    packages: CopilotPackageView[];
-}
-interface CopilotCustomizationView {
-    scope: CopilotScope;
-    generatedAt: string;
-    sources: CopilotSourceView[];
-    packages: CopilotPackageView[];
-    attention: CopilotArtifactView[];
-    summary: {
-        packageCount: number;
-        enabledArtifactCount: number;
-        attentionCount: number;
-    };
-    legacyMigration?: {
-        count: number;
-        sourceLabel: "~/.agents";
-    };
-}
-interface BuildCustomizationViewInput {
-    scope: CopilotScope;
-    sources: CopilotSourceSummary[];
-    packages: CopilotPackageDefinition[];
-    installations: CopilotPackageInstallation[];
-    statesByArtifactId: Record<string, CopilotArtifactState>;
-    legacyCount?: number;
-    generatedAt?: string;
-}
-declare function buildCopilotCustomizationView(input: BuildCustomizationViewInput): CopilotCustomizationView;
-
+  }): Promise<void>;
+  list(_input?: {
+    copilotDir?: string;
+  }): Promise<CopilotPluginRegistration[]>;
+}
+//#endregion
+//#region src/copilot-content/customization-model.d.ts
+export type CopilotScope = "workspace" | "personal";
+export type CopilotInstallIntent = "available" | "selected" | "moving" | "removing";
+export type CopilotMaterializationHealth = "healthy" | "missing" | "drifted" | "conflict" | "source-unavailable" | "unsupported";
+export type CopilotLocalGate = "ready" | "approval-required" | "configuration-required";
+export type CopilotUserStatus = "healthy" | "action-required" | "blocked" | "not-enabled";
+export interface CopilotArtifactState {
+  intent: CopilotInstallIntent;
+  health: CopilotMaterializationHealth;
+  gate: CopilotLocalGate;
+}
+export interface CopilotPackageInstallation {
+  packageId: string;
+  scope: CopilotScope;
+  selectedArtifactIds: string[];
+  pinnedVersion?: string;
+}
+export interface CopilotArtifactSummary {
+  id: string;
+  packageId: string;
+  kind: CopilotArtifactKind;
+  displayName: string;
+  description?: string;
+  installStrategy: "link" | "generated-config" | "approval-gated";
+  risk: "none" | "review-required";
+}
+export declare function deriveCopilotUserStatus(states: CopilotArtifactState[]): CopilotUserStatus;
+//#endregion
+//#region src/copilot-content/customization-view.d.ts
+export interface CopilotSourceSummary {
+  id: string;
+  type: "marketplace" | "git" | "local";
+  displayName: string;
+  updateCapability: "pinned" | "live" | "none";
+}
+export interface CopilotPackageDefinition {
+  id: string;
+  sourceId: string;
+  displayName: string;
+  description?: string;
+  version?: string;
+  artifacts: CopilotArtifactSummary[];
+  /** Whole-package registrar installation (Copilot-managed, both scopes) —
+   * the home package list shows these; per-artifact v1 manifest plugins
+   * stay in the enabled-content section instead. */
+  wholePackage?: boolean;
+}
+export interface CopilotArtifactView {
+  artifact: CopilotArtifactSummary;
+  state: CopilotArtifactState;
+}
+export interface CopilotPackageView {
+  definition: CopilotPackageDefinition;
+  installation: CopilotPackageInstallation;
+  artifacts: CopilotArtifactView[];
+  selectedArtifactCount: number;
+  status: CopilotUserStatus;
+}
+export interface CopilotSourceView extends CopilotSourceSummary {
+  packages: CopilotPackageView[];
+}
+export interface CopilotCustomizationView {
+  scope: CopilotScope;
+  generatedAt: string;
+  sources: CopilotSourceView[];
+  packages: CopilotPackageView[];
+  attention: CopilotArtifactView[];
+  summary: {
+    packageCount: number;
+    enabledArtifactCount: number;
+    attentionCount: number;
+  };
+  legacyMigration?: {
+    count: number;
+    sourceLabel: "~/.agents";
+  };
+}
+export interface BuildCustomizationViewInput {
+  scope: CopilotScope;
+  sources: CopilotSourceSummary[];
+  packages: CopilotPackageDefinition[];
+  installations: CopilotPackageInstallation[];
+  statesByArtifactId: Record<string, CopilotArtifactState>;
+  legacyCount?: number;
+  generatedAt?: string;
+  /** Content identities deliberately disabled on this machine (or in
+   * the shared declaration). They stay in the projection (so the UI can
+   * still render disabled rows) but no longer count as "enabled" in the
+   * health-card summary. */
+  disabledArtifactIds?: string[];
+}
+export declare function buildCopilotCustomizationView(input: BuildCustomizationViewInput): CopilotCustomizationView;
+//#endregion
+//#region src/copilot-content/disabled-content-store.d.ts
 /**
  * Machine-local disabled marks for per-artifact skills/agents.
  *
@@ -596,313 +648,337 @@ declare function buildCopilotCustomizationView(input: BuildCustomizationViewInpu
  * on the next restore. Entries are keyed by scope + identity; a
  * workspace-scope mark only applies to that workspace.
  */
-interface DisabledContentEntry {
-    scope: "workspace" | "user";
+export interface DisabledContentEntry {
+  scope: "workspace" | "user";
+  repoId: string;
+  name: string;
+  kind: "skill" | "agent";
+  /** Required for workspace-scope marks — disables are per workspace. */
+  workspaceDir?: string;
+}
+export interface DisabledContentState {
+  version: 1;
+  entries: DisabledContentEntry[];
+}
+/**
+ * Identity matcher for the workspace reconciler's `isDisabled` seam.
+ * The mark's `name` is the ENTRY name (hello-skill), not the plugin id
+ * (hello), so the match keys on repoId + kind + entry name. User marks
+ * apply to any workspace; workspace marks only to their own.
+ */
+export declare function buildDisabledIdentityMatcher(workspaceDir: string, marks: DisabledContentEntry[]): (identity: string) => boolean;
+export declare class DisabledContentStore {
+  private readonly homeDir;
+  constructor(options?: {
+    homeDir?: string;
+  });
+  /** Absolute store path: SERVICEME_HOME/copilot/disabled-content.json. */
+  path(): Promise<string>;
+  list(): Promise<DisabledContentEntry[]>;
+  add(entry: DisabledContentEntry): Promise<void>;
+  remove(entry: DisabledContentEntry): Promise<void>;
+  /**
+   * Lifecycle cleanup: installing or uninstalling an artifact clears
+   * its disable marks for that scope — a mark without its artifact is
+   * stale garbage that keeps the home page showing a disabled row for
+   * content the catalog already reports as gone. User scope matches
+   * any workspace; workspace scope matches the exact workspace.
+   */
+  removeForArtifact(input: {
     repoId: string;
     name: string;
     kind: "skill" | "agent";
-    /** Required for workspace-scope marks — disables are per workspace. */
+    scope: "workspace" | "user";
     workspaceDir?: string;
+  }): Promise<void>;
+  private write;
 }
-interface DisabledContentState {
-    version: 1;
-    entries: DisabledContentEntry[];
-}
-/** Match predicate scoped to one lookup entry. */
-type DisabledContentMatcher = (entry: DisabledContentEntry) => boolean;
-declare class DisabledContentStore {
-    private readonly homeDir;
-    constructor(options?: {
-        homeDir?: string;
-    });
-    /** Absolute store path: SERVICEME_HOME/copilot/disabled-content.json. */
-    path(): Promise<string>;
-    list(): Promise<DisabledContentEntry[]>;
-    has(matcher: DisabledContentMatcher): Promise<boolean>;
-    add(entry: DisabledContentEntry): Promise<void>;
-    remove(entry: DisabledContentEntry): Promise<void>;
-    private write;
-}
-
+//#endregion
+//#region src/copilot-content/integration-adapters.d.ts
 /** MCP server definition as authored in a plugin's mcp.json. */
-interface McpServerDefinition {
-    /** Server name used in the generated local configuration. */
-    name: string;
-    /** Transport type: stdio command servers today. */
-    type: string;
-    /** Executable command (validated, never a shell string). */
-    command: string;
-    /** Arguments passed to the command. */
-    args?: string[];
-    /** Environment variable names the server may read. */
-    env?: Record<string, string>;
-    /** Tool allowlist declared by the source. */
-    tools?: string[];
+export interface McpServerDefinition {
+  /** Server name used in the generated local configuration. */
+  name: string;
+  /** Transport type: stdio command servers today. */
+  type: string;
+  /** Executable command (validated, never a shell string). */
+  command: string;
+  /** Arguments passed to the command. */
+  args?: string[];
+  /** Environment variable names the server may read. */
+  env?: Record<string, string>;
+  /** Tool allowlist declared by the source. */
+  tools?: string[];
 }
 /** One lifecycle event registration from hooks.json. */
-interface HookEventDefinition {
-    /** Hook executor type; only "command" is supported today. */
-    type: string;
-    /** Relative bash entry referenced after materialization. */
-    bash: string;
-    /** Working directory hint relative to the workspace root. */
-    cwd?: string;
-    /** Environment variable names the hook may read. */
-    env?: Record<string, string>;
-    /** Timeout in seconds. */
-    timeoutSec?: number;
+export interface HookEventDefinition {
+  /** Hook executor type; only "command" is supported today. */
+  type: string;
+  /** Relative bash entry referenced after materialization. */
+  bash: string;
+  /** Working directory hint relative to the workspace root. */
+  cwd?: string;
+  /** Environment variable names the hook may read. */
+  env?: Record<string, string>;
+  /** Timeout in seconds. */
+  timeoutSec?: number;
 }
 /** Hook definition as authored in a repo's hooks/<name>/hooks.json. */
-interface HookDefinition {
-    /** Lifecycle event -> registrations. */
-    hooks: Partial<Record<string, HookEventDefinition[]>>;
+export interface HookDefinition {
+  /** Lifecycle event -> registrations. */
+  hooks: Partial<Record<string, HookEventDefinition[]>>;
 }
 /** Result of applying one generated-config entry on this machine. */
-interface IntegrationApplyResult {
-    identity: string;
-    /** Path of the machine-local config the adapter manages. */
-    configPath: string;
-    /** Server or hook names written into the config. */
-    names: string[];
-    changed: boolean;
+export interface IntegrationApplyResult {
+  identity: string;
+  /** Path of the machine-local config the adapter manages. */
+  configPath: string;
+  /** Server or hook names written into the config. */
+  names: string[];
+  changed: boolean;
 }
 /** Machine-local MCP config adapter (generated-config strategy). */
-interface McpConfigAdapter {
-    /** Merge one server definition into the machine-local config. */
-    applyServer(input: {
-        workspaceDir: string;
-        entry: PlannedContentEntry;
-        server: McpServerDefinition;
-    }): Promise<IntegrationApplyResult>;
-    /** Remove servers previously written for this entry. */
-    removeEntry(input: {
-        workspaceDir: string;
-        identity: string;
-    }): Promise<boolean>;
+export interface McpConfigAdapter {
+  /** Merge one server definition into the machine-local config. */
+  applyServer(input: {
+    workspaceDir: string;
+    entry: PlannedContentEntry;
+    server: McpServerDefinition;
+  }): Promise<IntegrationApplyResult>;
+  /** Remove servers previously written for this entry. */
+  removeEntry(input: {
+    workspaceDir: string;
+    identity: string;
+  }): Promise<boolean>;
 }
 /** Machine-local hook registration adapter (approval-gated strategy). */
-interface HookConfigAdapter {
-    /** Materialize hook scripts and register lifecycle events. */
-    applyHook(input: {
-        workspaceDir: string;
-        entry: PlannedContentEntry;
-        hook: HookDefinition;
-    }): Promise<IntegrationApplyResult>;
-    /** Remove registrations previously written for this entry. */
-    removeEntry(input: {
-        workspaceDir: string;
-        identity: string;
-    }): Promise<boolean>;
+export interface HookConfigAdapter {
+  /** Materialize hook scripts and register lifecycle events. */
+  applyHook(input: {
+    workspaceDir: string;
+    entry: PlannedContentEntry;
+    hook: HookDefinition;
+  }): Promise<IntegrationApplyResult>;
+  /** Remove registrations previously written for this entry. */
+  removeEntry(input: {
+    workspaceDir: string;
+    identity: string;
+  }): Promise<boolean>;
 }
 /** Parse and validate a plugin mcp.json payload. */
-declare function parseMcpJson(raw: string): McpServerDefinition[];
+export declare function parseMcpJson(raw: string): McpServerDefinition[];
 /** Parse and validate a hooks.json payload. */
-declare function parseHooksJson(raw: string): HookDefinition;
+export declare function parseHooksJson(raw: string): HookDefinition;
 /** Locate the mcp.json beside a plugin manifest. */
-declare function findPluginMcpJson(repoRoot: string, pluginId: string): Promise<string | null>;
+export declare function findPluginMcpJson(repoRoot: string, pluginId: string): Promise<string | null>;
 /** Locate hooks/<name>/hooks.json in a repository. */
-declare function findRepoHooksJson(repoRoot: string, name: string): Promise<string | null>;
-
+export declare function findRepoHooksJson(repoRoot: string, name: string): Promise<string | null>;
+//#endregion
+//#region src/copilot-content/filesystem-integration-adapters.d.ts
 /** Adapter merging MCP servers into the workspace-local VS Code config. */
-declare class FileMcpConfigAdapter implements McpConfigAdapter {
-    /** Merge one server definition under its entry identity. */
-    applyServer(input: {
-        workspaceDir: string;
-        entry: PlannedContentEntry;
-        server: McpServerDefinition;
-    }): Promise<IntegrationApplyResult>;
-    /** Remove only servers owned by the given identity. */
-    removeEntry(input: {
-        workspaceDir: string;
-        identity: string;
-    }): Promise<boolean>;
+export declare class FileMcpConfigAdapter implements McpConfigAdapter {
+  /** Merge one server definition under its entry identity. */
+  applyServer(input: {
+    workspaceDir: string;
+    entry: PlannedContentEntry;
+    server: McpServerDefinition;
+  }): Promise<IntegrationApplyResult>;
+  /** Remove only servers owned by the given identity. */
+  removeEntry(input: {
+    workspaceDir: string;
+    identity: string;
+  }): Promise<boolean>;
 }
 /** Adapter materializing hook scripts and event registrations. */
-declare class FileHookConfigAdapter implements HookConfigAdapter {
-    /** Copy hook scripts and merge registrations under the entry identity. */
-    applyHook(input: {
-        workspaceDir: string;
-        entry: PlannedContentEntry;
-        hook: HookDefinition;
-    }): Promise<IntegrationApplyResult>;
-    /** Remove registrations owned by the identity and orphaned script copies. */
-    removeEntry(input: {
-        workspaceDir: string;
-        identity: string;
-    }): Promise<boolean>;
-}
-
+export declare class FileHookConfigAdapter implements HookConfigAdapter {
+  /** Copy hook scripts and merge registrations under the entry identity. */
+  applyHook(input: {
+    workspaceDir: string;
+    entry: PlannedContentEntry;
+    hook: HookDefinition;
+  }): Promise<IntegrationApplyResult>;
+  /** Remove registrations owned by the identity and orphaned script copies. */
+  removeEntry(input: {
+    workspaceDir: string;
+    identity: string;
+  }): Promise<boolean>;
+}
+//#endregion
+//#region src/copilot-content/personal-copilot-content-reconciler.d.ts
 /** Machine-local materialization state for personal-scope content. */
-interface PersonalContentState {
-    version: 1;
-    entries: WorkspaceMaterializedEntry[];
+export interface PersonalContentState {
+  version: 1;
+  entries: WorkspaceMaterializedEntry[];
 }
 /** Reconcile result: artifact health keyed by artifact id. */
-interface PersonalReconcileResult {
-    statesByArtifactId: Record<string, CopilotArtifactState>;
+export interface PersonalReconcileResult {
+  statesByArtifactId: Record<string, CopilotArtifactState>;
 }
 /** Resolves the artifact entries a package contributes. */
-type PersonalPackageResolver = (packageId: string) => Promise<ResolvedPluginEntry[]>;
+export type PersonalPackageResolver = (packageId: string) => Promise<ResolvedPluginEntry[]>;
 interface PersonalReconcilerOptions {
-    /** SERVICEME home directory holding intent and machine state. */
-    homeDir?: string;
-    /** Host-verified capabilities; tests inject per-kind presence. */
-    capabilities: CopilotHostCapabilities;
-    /** Resolves package definitions; defaults to no packages. */
-    resolvePackage?: PersonalPackageResolver;
+  /** SERVICEME home directory holding intent and machine state. */
+  homeDir?: string;
+  /** Host-verified capabilities; tests inject per-kind presence. */
+  capabilities: CopilotHostCapabilities;
+  /** Resolves package definitions; defaults to no packages. */
+  resolvePackage?: PersonalPackageResolver;
 }
 /** Manage all six personal artifact kinds against host capabilities. */
-declare class PersonalCopilotContentReconciler {
-    private readonly store;
-    private readonly capabilities;
-    private readonly resolvePackage;
-    private readonly statePath;
-    constructor(options: PersonalReconcilerOptions);
-    /** Read current machine state; empty state when not materialized yet. */
-    readState(): Promise<PersonalContentState>;
-    /** Inspect current personal state without materializing anything. */
-    inspect(): Promise<PersonalReconcileResult>;
-    /** Materialize personal intent for all supported kinds on this machine. */
-    reconcile(): Promise<PersonalReconcileResult>;
-    /** Record local approval for integration content, then re-reconcile. */
-    approve(input: {
-        artifactIds: string[];
-    }): Promise<PersonalReconcileResult>;
-    /** Write machine state atomically. */
-    private writeState;
-    private buildPlan;
-    private removeOwnedMaterialization;
-    private projectStates;
-}
-
+export declare class PersonalCopilotContentReconciler {
+  private readonly store;
+  private readonly capabilities;
+  private readonly resolvePackage;
+  private readonly statePath;
+  constructor(options: PersonalReconcilerOptions);
+  /** Read current machine state; empty state when not materialized yet. */
+  readState(): Promise<PersonalContentState>;
+  /** Inspect current personal state without materializing anything. */
+  inspect(): Promise<PersonalReconcileResult>;
+  /** Materialize personal intent for all supported kinds on this machine. */
+  reconcile(): Promise<PersonalReconcileResult>;
+  /** Record local approval for integration content, then re-reconcile. */
+  approve(input: {
+    artifactIds: string[];
+  }): Promise<PersonalReconcileResult>;
+  /** Write machine state atomically. */
+  private writeState;
+  private buildPlan;
+  private removeOwnedMaterialization;
+  private projectStates;
+}
+//#endregion
+//#region src/copilot-content/personal-installation-store.d.ts
 /** Persisted personal-scope installation intent. */
-interface PersonalInstallationState {
-    version: 1;
-    installations: CopilotPackageInstallation[];
+export interface PersonalInstallationState {
+  version: 1;
+  installations: CopilotPackageInstallation[];
 }
 /** Atomically persist personal package installation intent under the SERVICEME home. */
-declare class PersonalInstallationStore {
-    private readonly homeDir;
-    private cachedPath;
-    constructor(options?: {
-        homeDir?: string;
-    });
-    /** Absolute intent-file path: SERVICEME_HOME/copilot/personal-installations.json. */
-    path(): Promise<string>;
-    /** Read intent; empty intent when the file does not exist yet. */
-    read(): Promise<PersonalInstallationState>;
-    /** Atomically persist intent. */
-    write(state: PersonalInstallationState): Promise<void>;
-}
-
+export declare class PersonalInstallationStore {
+  private readonly homeDir;
+  private cachedPath;
+  constructor(options?: {
+    homeDir?: string;
+  });
+  /** Absolute intent-file path: SERVICEME_HOME/copilot/personal-installations.json. */
+  path(): Promise<string>;
+  /** Read intent; empty intent when the file does not exist yet. */
+  read(): Promise<PersonalInstallationState>;
+  /** Atomically persist intent. */
+  write(state: PersonalInstallationState): Promise<void>;
+}
+//#endregion
+//#region src/copilot-content/workspace-copilot-content-reconciler.d.ts
 /** Statuses surfaced to UI and CLI for each declared entry. */
-type WorkspaceContentStatus = "restored" | "adopted" | "pending_approval" | "missing_source" | "conflict" | "drifted";
-interface WorkspaceContentEntryResult {
-    identity: string;
-    status: WorkspaceContentStatus;
-    message?: string;
+export type WorkspaceContentStatus = "restored" | "adopted" | "pending_approval" | "missing_source" | "conflict" | "drifted";
+export interface WorkspaceContentEntryResult {
+  identity: string;
+  status: WorkspaceContentStatus;
+  message?: string;
 }
-interface WorkspaceContentReconcileResult {
-    changed: boolean;
-    entries: WorkspaceContentEntryResult[];
+export interface WorkspaceContentReconcileResult {
+  changed: boolean;
+  entries: WorkspaceContentEntryResult[];
 }
 interface RepositorySource {
-    ready: boolean;
-    localPath?: string;
-    error?: string;
+  ready: boolean;
+  localPath?: string;
+  error?: string;
 }
 /** Orchestrates declaration → pinned source → plan → safe links. */
-declare class WorkspaceCopilotContentReconciler {
-    private readonly workspaceDir;
-    private readonly homeDir;
-    private readonly ensureRepository;
-    constructor(options: {
-        workspaceDir: string;
-        homeDir?: string;
-        /** Injectable repository ensure step (tests avoid real git). */
-        ensureRepository?: (manifest: WorkspaceCopilotManifest) => Promise<Map<string, RepositorySource>>;
-        /** Injectable link materializer (transactions share the test seam). */
-        materializer?: CopilotLinkMaterializer;
-        /** Machine-local disable marks: identities returning true are
-         * treated as NOT declared — their materialization is removed and
-         * never resurrected, while the manifest declaration itself stays. */
-        isDisabled?: (identity: string) => Promise<boolean>;
-    });
-    private readonly materializer;
-    private readonly isDisabled;
-    /** Restore declared content on this machine. */
-    reconcile(): Promise<WorkspaceContentReconcileResult>;
-    /**
-     * Reconcile mcp/hook entries through their generated-config adapters.
-     * Unapproved or digest-changed entries stay pending without touching
-     * host configuration; approved entries are (re)applied; previously
-     * materialized identities that left the declaration are removed.
-     */
-    private reconcileIntegrations;
-    /** Build the machine-local state entry for a generated-config integration. */
-    private toIntegrationStateEntry;
-    /** Record local approval for risky content, then re-reconcile. */
-    approve(input: {
-        identities: string[];
-    }): Promise<WorkspaceContentReconcileResult>;
-    private defaultEnsureRepository;
-}
-
+export declare class WorkspaceCopilotContentReconciler {
+  private readonly workspaceDir;
+  private readonly homeDir;
+  private readonly ensureRepository;
+  constructor(options: {
+    workspaceDir: string;
+    homeDir?: string;
+    /** Injectable repository ensure step (tests avoid real git). */
+    ensureRepository?: (manifest: WorkspaceCopilotManifest) => Promise<Map<string, RepositorySource>>;
+    /** Injectable link materializer (transactions share the test seam). */
+    materializer?: CopilotLinkMaterializer;
+    /** Machine-local disable marks: identities returning true are
+     * treated as NOT declared — their materialization is removed and
+     * never resurrected, while the manifest declaration itself stays. */
+    isDisabled?: (identity: string) => Promise<boolean>;
+  });
+  private readonly materializer;
+  private readonly isDisabled;
+  /** Restore declared content on this machine. */
+  reconcile(): Promise<WorkspaceContentReconcileResult>;
+  /**
+   * Reconcile mcp/hook entries through their generated-config adapters.
+   * Unapproved or digest-changed entries stay pending without touching
+   * host configuration; approved entries are (re)applied; previously
+   * materialized identities that left the declaration are removed.
+   */
+  private reconcileIntegrations;
+  /** Build the machine-local state entry for a generated-config integration. */
+  private toIntegrationStateEntry;
+  /** Record local approval for risky content, then re-reconcile. */
+  approve(input: {
+    identities: string[];
+  }): Promise<WorkspaceContentReconcileResult>;
+  private defaultEnsureRepository;
+}
+//#endregion
+//#region src/copilot-content/package-installation-service.d.ts
 /** One legacy ~/.agents link considered for migration. */
-interface LegacyMigrationEntry {
-    artifactId: string;
-    name: string;
-    kind: "skill" | "agent";
-    eligible: boolean;
-    sourcePath: string;
-    targetPath: string;
+export interface LegacyMigrationEntry {
+  artifactId: string;
+  name: string;
+  kind: "skill" | "agent";
+  eligible: boolean;
+  sourcePath: string;
+  targetPath: string;
 }
 /** Read-only preview of legacy links; migration happens only on confirmation. */
-interface LegacyMigrationPreview {
-    sourceLabel: "~/.agents";
-    entries: LegacyMigrationEntry[];
-}
-interface CopilotPackageInstallInput {
-    workspaceDir?: string;
-    scope: CopilotScope;
-    sourceId: string;
-    packageId: string;
-    artifactIds: string[];
-    pinnedVersion?: string;
-    localMode?: "live" | "private-workspace-override";
-}
-interface CopilotPackageUpdateInput {
-    workspaceDir?: string;
-    scope: CopilotScope;
-    packageId: string;
-    artifactIds: string[];
-    pinnedVersion?: string;
-}
-interface CopilotPackageUninstallInput {
-    workspaceDir?: string;
-    scope: CopilotScope;
-    packageId: string;
-}
-interface CopilotPackageMoveInput {
-    workspaceDir?: string;
-    packageId: string;
-    from: CopilotScope;
-    to: CopilotScope;
-}
-interface PackageInstallationServiceDeps {
-    personalStore: PersonalInstallationStore;
-    personalReconciler: PersonalCopilotContentReconciler;
-    /** Shared materializer so transaction tests can inject failures. */
-    materializer?: CopilotLinkMaterializer;
-    userHomeDir: string;
-    resolvePackage: (packageId: string) => Promise<ResolvedPluginEntry[]>;
-    resolveWorkspaceSource: (sourceId: string) => Promise<WorkspaceManifestRepository | undefined>;
-    createWorkspaceReconciler: (workspaceDir: string) => WorkspaceCopilotContentReconciler;
-    /** Resolve the local reconciliation state path for transaction rollback. */
-    getWorkspaceStatePath?: (workspaceDir: string) => Promise<string>;
-    readWorkspaceView: (workspaceDir: string) => Promise<CopilotCustomizationView>;
-    /** Exact selected workspace artifact identities for the active workspace. */
-    readWorkspaceInstallations: (workspaceDir: string) => Promise<CopilotPackageInstallation[]>;
+export interface LegacyMigrationPreview {
+  sourceLabel: "~/.agents";
+  entries: LegacyMigrationEntry[];
+}
+export interface CopilotPackageInstallInput {
+  workspaceDir?: string;
+  scope: CopilotScope;
+  sourceId: string;
+  packageId: string;
+  artifactIds: string[];
+  pinnedVersion?: string;
+  localMode?: "live" | "private-workspace-override";
+}
+export interface CopilotPackageUpdateInput {
+  workspaceDir?: string;
+  scope: CopilotScope;
+  packageId: string;
+  artifactIds: string[];
+  pinnedVersion?: string;
+}
+export interface CopilotPackageUninstallInput {
+  workspaceDir?: string;
+  scope: CopilotScope;
+  packageId: string;
+}
+export interface CopilotPackageMoveInput {
+  workspaceDir?: string;
+  packageId: string;
+  from: CopilotScope;
+  to: CopilotScope;
+}
+export interface PackageInstallationServiceDeps {
+  personalStore: PersonalInstallationStore;
+  personalReconciler: PersonalCopilotContentReconciler;
+  /** Shared materializer so transaction tests can inject failures. */
+  materializer?: CopilotLinkMaterializer;
+  userHomeDir: string;
+  resolvePackage: (packageId: string) => Promise<ResolvedPluginEntry[]>;
+  resolveWorkspaceSource: (sourceId: string) => Promise<WorkspaceManifestRepository | undefined>;
+  createWorkspaceReconciler: (workspaceDir: string) => WorkspaceCopilotContentReconciler;
+  /** Resolve the local reconciliation state path for transaction rollback. */
+  getWorkspaceStatePath?: (workspaceDir: string) => Promise<string>;
+  readWorkspaceView: (workspaceDir: string) => Promise<CopilotCustomizationView>;
+  /** Exact selected workspace artifact identities for the active workspace. */
+  readWorkspaceInstallations: (workspaceDir: string) => Promise<CopilotPackageInstallation[]>;
 }
 /**
  * Package lifecycle transactions over the Task 8 personal store /
@@ -914,46 +990,47 @@ interface PackageInstallationServiceDeps {
  * activation failure the previous destination intent is restored and
  * the source intent is left untouched.
  */
-declare class PackageInstallationService {
-    private readonly deps;
-    /** Last preview shown to the caller; migration re-verifies against it. */
-    private lastPreview;
-    constructor(deps: PackageInstallationServiceDeps);
-    install(input: CopilotPackageInstallInput): Promise<CopilotCustomizationView>;
-    update(input: CopilotPackageUpdateInput): Promise<CopilotCustomizationView>;
-    uninstall(input: CopilotPackageUninstallInput): Promise<CopilotCustomizationView>;
-    move(input: CopilotPackageMoveInput): Promise<CopilotCustomizationView>;
-    private moveIntoWorkspace;
-    private moveIntoPersonal;
-    previewLegacy(): Promise<LegacyMigrationPreview>;
-    migrateLegacy(input: {
-        artifactIds: string[];
-    }): Promise<CopilotCustomizationView>;
-    private readSourceSelection;
-    private assertArtifactsNotActiveElsewhere;
-    private assertArtifactIdsAbsentFromWorkspace;
-    private assertArtifactIdsAbsentFromInstallations;
-    private assertKindNameFree;
-    private writePersonalIntent;
-    private removePersonalIntent;
-    private upsertWorkspaceSelection;
-    private withWorkspaceActivationRollback;
-    private captureWorkspaceActivation;
-    private captureFile;
-    private restoreWorkspaceActivation;
-    private selectedEntries;
-    private selectEntries;
-    private assertNoActivationConflicts;
-    private assertNoActivationConflictsPersonal;
-    private resolveLegacyTarget;
-    private requireWorkspaceDir;
-    private readPersonalView;
-}
-
+export declare class PackageInstallationService {
+  private readonly deps;
+  /** Last preview shown to the caller; migration re-verifies against it. */
+  private lastPreview;
+  constructor(deps: PackageInstallationServiceDeps);
+  install(input: CopilotPackageInstallInput): Promise<CopilotCustomizationView>;
+  update(input: CopilotPackageUpdateInput): Promise<CopilotCustomizationView>;
+  uninstall(input: CopilotPackageUninstallInput): Promise<CopilotCustomizationView>;
+  move(input: CopilotPackageMoveInput): Promise<CopilotCustomizationView>;
+  private moveIntoWorkspace;
+  private moveIntoPersonal;
+  previewLegacy(): Promise<LegacyMigrationPreview>;
+  migrateLegacy(input: {
+    artifactIds: string[];
+  }): Promise<CopilotCustomizationView>;
+  private readSourceSelection;
+  private assertArtifactsNotActiveElsewhere;
+  private assertArtifactIdsAbsentFromWorkspace;
+  private assertArtifactIdsAbsentFromInstallations;
+  private assertKindNameFree;
+  private writePersonalIntent;
+  private removePersonalIntent;
+  private upsertWorkspaceSelection;
+  private withWorkspaceActivationRollback;
+  private captureWorkspaceActivation;
+  private captureFile;
+  private restoreWorkspaceActivation;
+  private selectedEntries;
+  private selectEntries;
+  private assertNoActivationConflicts;
+  private assertNoActivationConflictsPersonal;
+  private resolveLegacyTarget;
+  private requireWorkspaceDir;
+  private readPersonalView;
+}
+//#endregion
+//#region src/copilot-content/plugin-catalog-service.d.ts
 /** A git source to enumerate. `id` is the managed repos dir entry name. */
-interface PluginCatalogRepoInput {
-    id: string;
-    enabled?: boolean;
+export interface PluginCatalogRepoInput {
+  id: string;
+  enabled?: boolean;
 }
 /**
  * An installable plugin.json package found in a source — with the
@@ -961,13 +1038,13 @@ interface PluginCatalogRepoInput {
  * install preview can select artifacts without a second resolution
  * path.
  */
-interface PluginCatalogPackage {
-    packageId: string;
-    sourceId: string;
-    displayName: string;
-    description?: string;
-    version?: string;
-    artifacts: CopilotArtifactSummary[];
+export interface PluginCatalogPackage {
+  packageId: string;
+  sourceId: string;
+  displayName: string;
+  description?: string;
+  version?: string;
+  artifacts: CopilotArtifactSummary[];
 }
 /**
  * Enumerate plugin.json packages across the given git sources.
@@ -979,136 +1056,137 @@ interface PluginCatalogPackage {
  * skipped, not thrown — the catalog must stay usable when a single
  * plugin is broken.
  */
-declare function listPluginCatalog(input: {
+export declare function listPluginCatalog(input: {
+  reposDir: string;
+  repos: PluginCatalogRepoInput[];
+}): Promise<PluginCatalogPackage[]>;
+export interface PluginCatalogService {
+  list(input: {
     reposDir: string;
     repos: PluginCatalogRepoInput[];
-}): Promise<PluginCatalogPackage[]>;
-interface PluginCatalogService {
-    list(input: {
-        reposDir: string;
-        repos: PluginCatalogRepoInput[];
-    }): Promise<PluginCatalogPackage[]>;
+  }): Promise<PluginCatalogPackage[]>;
 }
 /** Factory: one cache per service instance (tests use fresh instances). */
-declare function createPluginCatalogService(): PluginCatalogService;
+export declare function createPluginCatalogService(): PluginCatalogService;
 /**
  * Single source of truth for entry → artifact-summary mapping. The
  * CLI bridge imports this for installed packages too, so the install
  * preview's installStrategy/risk can never drift from what the
  * catalog shows.
  */
-declare function toArtifactSummary(entry: ResolvedPluginEntry): CopilotArtifactSummary;
-
+export declare function toArtifactSummary(entry: ResolvedPluginEntry): CopilotArtifactSummary;
+//#endregion
+//#region src/copilot-content/source-catalog-service.d.ts
 /**
  * Verbatim wire contract for a read-only package update preview.
  * Field names are pinned by Task 10's brief and shared with the
  * protocol / webview layers.
  */
-interface CopilotPackageUpdatePreview {
-    packageId: string;
-    fromVersion?: string;
-    toVersion: string;
-    addedArtifactIds: string[];
-    removedArtifactIds: string[];
-    changedArtifactIds: string[];
-    approvalInvalidatedArtifactIds: string[];
+export interface CopilotPackageUpdatePreview {
+  packageId: string;
+  fromVersion?: string;
+  toVersion: string;
+  addedArtifactIds: string[];
+  removedArtifactIds: string[];
+  changedArtifactIds: string[];
+  approvalInvalidatedArtifactIds: string[];
 }
 /** Normalized source record for diagnostics and the source manager UI. */
-interface CopilotSourceRecord {
+export interface CopilotSourceRecord {
+  id: string;
+  type: "marketplace" | "git" | "local";
+  displayName: string;
+  updateCapability: "pinned" | "live" | "none";
+  /** Whether the source content is currently materialized on disk. */
+  available: boolean;
+  /** Where this source is declared: "workspace" (manifest), "personal" (intent), or both. */
+  declaredIn: Array<"workspace" | "personal">;
+}
+export interface CopilotSourceCatalogDeps {
+  /** SERVICEME home; defaults to the real ~/.serviceme. */
+  homeDir?: string;
+  /** Personal installation intent; consulted by previewUpdate and removeSource. */
+  personalStore: PersonalInstallationStore;
+  /**
+   * Task 9's transaction service owns installations. removeSource
+   * coordinates with it only indirectly: it refuses while any
+   * installation (workspace or personal) still uses the source.
+   */
+  installationService?: PackageInstallationService;
+  /**
+   * Resolves artifacts for a package at a revision; defaults to a
+   * no-content resolver so an unresolvable source yields empty diff
+   * lists rather than a crash.
+   */
+  resolvePackage?: (packageId: string, revision?: string) => Promise<ResolvedPluginEntry[]>;
+  /**
+   * Round 3: workspace declarations enable artifact kinds, not named
+   * artifacts. This predicate reports whether a resolved entry matches a
+   * selection marker produced for an enabled kind. Implementations may
+   * match exact ids or kind prefixes; default behavior matches only
+   * exact ids (personal-intent semantics).
+   */
+  artifactSelected?: (marker: string, artifactId: string) => boolean;
+  /**
+   * Finding 4 honesty: returns the revision actually resolved by
+   * resolvePackage for a given requested revision. When a resolver can
+   * only read the working tree, this lets previewUpdate label toVersion
+   * with what was truly diffed instead of the requested target.
+   */
+  resolveActualRevision?: (packageId: string, revision: string) => Promise<string | undefined>;
+  /** Source ids declared by the workspace manifest for a directory. */
+  listWorkspaceSources: (workspaceDir: string) => Promise<string[]>;
+  /**
+   * Workspace-scope installations for a directory, read through Task 9's
+   * view projection. Both previewUpdate and removeSource honor personal
+   * AND workspace installations; without this a workspace-declared source
+   * with no personal intent could be deleted while still in use.
+   */
+  readWorkspaceInstallations?: (workspaceDir: string) => Promise<CopilotPackageInstallation[]>;
+  /** Classifies a source id as a marketplace catalog source. */
+  isCatalogSource?: (sourceId: string, workspaceDir?: string) => boolean | Promise<boolean>;
+  /**
+   * Task 10 ruling #1: materialize a v2 catalog source under
+   * repos/<sourceId> so availability is a plain directory check.
+   * listSources invokes this for unavailable catalog sources before
+   * reporting diagnostics.
+   */
+  ensureCatalogSource?: (sourceId: string) => Promise<{
+    localPath: string;
+  }>;
+  /**
+   * Round 2 / Minor 2: reports whether a staged catalog directory
+   * actually contains payload. Staging only creates the directory; a
+   * payload check must gate availability so an empty staged dir is
+   * never reported as available.
+   */
+  hasCatalogPayload?: (localPath: string) => Promise<boolean>;
+  /** Classifies a source id as a personal local source. */
+  isLocalSource?: (sourceId: string) => boolean | Promise<boolean>;
+  /**
+   * ReposStore (repos.json) entries on this machine — built-in default
+   * repos plus user-added git repos. The source manager is the single
+   * repository management surface, so every store entry must appear in
+   * the listing even when it is neither workspace-declared nor
+   * personally installed. Entries with an empty declaredIn are
+   * store-only. Also supplies human display names for store sources.
+   */
+  listStoreSources?: () => Promise<Array<{
     id: string;
-    type: "marketplace" | "git" | "local";
-    displayName: string;
-    updateCapability: "pinned" | "live" | "none";
-    /** Whether the source content is currently materialized on disk. */
-    available: boolean;
-    /** Where this source is declared: "workspace" (manifest), "personal" (intent), or both. */
-    declaredIn: Array<"workspace" | "personal">;
-}
-interface CopilotSourceCatalogDeps {
-    /** SERVICEME home; defaults to the real ~/.serviceme. */
-    homeDir?: string;
-    /** Personal installation intent; consulted by previewUpdate and removeSource. */
-    personalStore: PersonalInstallationStore;
-    /**
-     * Task 9's transaction service owns installations. removeSource
-     * coordinates with it only indirectly: it refuses while any
-     * installation (workspace or personal) still uses the source.
-     */
-    installationService?: PackageInstallationService;
-    /**
-     * Resolves artifacts for a package at a revision; defaults to a
-     * no-content resolver so an unresolvable source yields empty diff
-     * lists rather than a crash.
-     */
-    resolvePackage?: (packageId: string, revision?: string) => Promise<ResolvedPluginEntry[]>;
-    /**
-     * Round 3: workspace declarations enable artifact kinds, not named
-     * artifacts. This predicate reports whether a resolved entry matches a
-     * selection marker produced for an enabled kind. Implementations may
-     * match exact ids or kind prefixes; default behavior matches only
-     * exact ids (personal-intent semantics).
-     */
-    artifactSelected?: (marker: string, artifactId: string) => boolean;
-    /**
-     * Finding 4 honesty: returns the revision actually resolved by
-     * resolvePackage for a given requested revision. When a resolver can
-     * only read the working tree, this lets previewUpdate label toVersion
-     * with what was truly diffed instead of the requested target.
-     */
-    resolveActualRevision?: (packageId: string, revision: string) => Promise<string | undefined>;
-    /** Source ids declared by the workspace manifest for a directory. */
-    listWorkspaceSources: (workspaceDir: string) => Promise<string[]>;
-    /**
-     * Workspace-scope installations for a directory, read through Task 9's
-     * view projection. Both previewUpdate and removeSource honor personal
-     * AND workspace installations; without this a workspace-declared source
-     * with no personal intent could be deleted while still in use.
-     */
-    readWorkspaceInstallations?: (workspaceDir: string) => Promise<CopilotPackageInstallation[]>;
-    /** Classifies a source id as a marketplace catalog source. */
-    isCatalogSource?: (sourceId: string, workspaceDir?: string) => boolean | Promise<boolean>;
-    /**
-     * Task 10 ruling #1: materialize a v2 catalog source under
-     * repos/<sourceId> so availability is a plain directory check.
-     * listSources invokes this for unavailable catalog sources before
-     * reporting diagnostics.
-     */
-    ensureCatalogSource?: (sourceId: string) => Promise<{
-        localPath: string;
-    }>;
-    /**
-     * Round 2 / Minor 2: reports whether a staged catalog directory
-     * actually contains payload. Staging only creates the directory; a
-     * payload check must gate availability so an empty staged dir is
-     * never reported as available.
-     */
-    hasCatalogPayload?: (localPath: string) => Promise<boolean>;
-    /** Classifies a source id as a personal local source. */
-    isLocalSource?: (sourceId: string) => boolean | Promise<boolean>;
-    /**
-     * ReposStore (repos.json) entries on this machine — built-in default
-     * repos plus user-added git repos. The source manager is the single
-     * repository management surface, so every store entry must appear in
-     * the listing even when it is neither workspace-declared nor
-     * personally installed. Entries with an empty declaredIn are
-     * store-only. Also supplies human display names for store sources.
-     */
-    listStoreSources?: () => Promise<Array<{
-        id: string;
-        name?: string;
-        enabled?: boolean;
-    }>>;
+    name?: string;
+    enabled?: boolean;
+  }>>;
 }
-interface CopilotSourceCatalogQuery {
-    workspaceDir?: string;
-    scope?: CopilotScope;
+export interface CopilotSourceCatalogQuery {
+  workspaceDir?: string;
+  scope?: CopilotScope;
 }
-interface CopilotUpdatePreviewInput {
-    workspaceDir?: string;
-    scope?: CopilotScope;
-    packageId: string;
-    /** Target revision (full 40-char commit for git sources, immutable catalog revision otherwise). */
-    revision: string;
+export interface CopilotUpdatePreviewInput {
+  workspaceDir?: string;
+  scope?: CopilotScope;
+  packageId: string;
+  /** Target revision (full 40-char commit for git sources, immutable catalog revision otherwise). */
+  revision: string;
 }
 /**
  * Normalized Marketplace / Git / local source discovery plus
@@ -1121,41 +1199,152 @@ interface CopilotUpdatePreviewInput {
  * or the "private-workspace-override" mode enforced downstream by the
  * install transaction.
  */
-declare class CopilotSourceCatalogService {
-    private readonly deps;
-    private readonly reposDir;
-    constructor(deps: CopilotSourceCatalogDeps);
-    /**
-     * List normalized sources for the query: every source declared by
-     * the workspace manifest (when a workspaceDir is given) plus every
-     * source referenced by personal installation intent, plus every
-     * ReposStore entry on this machine (built-in default repos and
-     * user-added git repos) so the source manager can manage them.
-     */
-    listSources(query: CopilotSourceCatalogQuery): Promise<CopilotSourceRecord[]>;
-    /**
-     * Confirms Task 4's materialization assumption for every source
-     * kind: v2 catalog sources materialize under reposDir/<source-id>
-     * exactly like git checkouts, so availability is a directory check.
-     */
-    isSourceAvailable(sourceId: string): Promise<boolean>;
-    /**
-     * Deterministic, side-effect-free update preview: compares the
-     * currently-selected artifacts against what the target revision
-     * resolves to, and reports which approval-gated artifacts would
-     * need re-approval. Never writes intent; the pinned version stays
-     * untouched until the caller runs the update transaction.
-     */
-    previewUpdate(input: CopilotUpdatePreviewInput): Promise<CopilotPackageUpdatePreview>;
-    /**
-     * Remove a source only when nothing references it: no workspace
-     * declaration and no installation (workspace or personal) may still
-     * use it. Refusals match /installed package/i and /workspace/ so
-     * callers can surface distinct remediation paths.
-     */
-    removeSource(sourceId: string, workspaceDir?: string): Promise<void>;
-}
-
+export declare class CopilotSourceCatalogService {
+  private readonly deps;
+  private readonly reposDir;
+  constructor(deps: CopilotSourceCatalogDeps);
+  /**
+   * List normalized sources for the query: every source declared by
+   * the workspace manifest (when a workspaceDir is given) plus every
+   * source referenced by personal installation intent, plus every
+   * ReposStore entry on this machine (built-in default repos and
+   * user-added git repos) so the source manager can manage them.
+   */
+  listSources(query: CopilotSourceCatalogQuery): Promise<CopilotSourceRecord[]>;
+  /**
+   * Confirms Task 4's materialization assumption for every source
+   * kind: v2 catalog sources materialize under reposDir/<source-id>
+   * exactly like git checkouts, so availability is a directory check.
+   */
+  isSourceAvailable(sourceId: string): Promise<boolean>;
+  /**
+   * Deterministic, side-effect-free update preview: compares the
+   * currently-selected artifacts against what the target revision
+   * resolves to, and reports which approval-gated artifacts would
+   * need re-approval. Never writes intent; the pinned version stays
+   * untouched until the caller runs the update transaction.
+   */
+  previewUpdate(input: CopilotUpdatePreviewInput): Promise<CopilotPackageUpdatePreview>;
+  /**
+   * Remove a source only when nothing references it: no workspace
+   * declaration and no installation (workspace or personal) may still
+   * use it. Refusals match /installed package/i and /workspace/ so
+   * callers can surface distinct remediation paths.
+   */
+  removeSource(sourceId: string, workspaceDir?: string): Promise<void>;
+}
+//#endregion
+//#region src/copilot-content/workspace-content-detector.d.ts
+/**
+ * Workspace content detection — the adoption inverse of the restore
+ * flow. When a workspace carries Copilot content (`.github` skill/agent
+ * entries, generated hook/MCP configuration) but has NO
+ * `.github/serviceme-plugins.json` declaration, this module derives
+ * what is there and where it came from, so the user can initialize the
+ * declaration from existing content instead of reinstalling by hand.
+ *
+ * Provenance rules:
+ *  - symlinks under `.github/{skills,agents}` resolve their repo from
+ *    the target path (`<reposDir>/<repoId>/...`) — exact;
+ *  - real (non-symlink) copies are fingerprinted (deterministic
+ *    SHA-256 over the sorted tree/file bytes) and matched against the
+ *    repo catalog by name: a unique content match is adoptable,
+ *    several matching repos need a user pick, none is unmatched;
+ *  - `.vscode/{hooks,mcp}.serviceme.json` carry the generating
+ *    identity map under `_serviceme`, which is parsed directly.
+ */
+/** Minimal catalog row the detector matches fingerprints against. */
+export interface DetectorCatalogEntry {
+  repoId: string;
+  name: string;
+  kind: "skill" | "agent";
+  /** Directory of the entry, or the manifest path itself for flat files. */
+  dir: string;
+  manifestPath: string;
+}
+/** A skill/agent whose source repo is known and can be adopted as-is. */
+export interface UnmanagedAdoption {
+  repoId: string;
+  name: string;
+  kind: "skill" | "agent";
+  /** "symlink" — provenance exact from the link target;
+   *  "fingerprint" — real copy with a unique catalog content match. */
+  source: "symlink" | "fingerprint";
+}
+/** A real copy whose content matches several repos — needs a pick. */
+export interface UnmanagedAmbiguous {
+  name: string;
+  kind: "skill" | "agent";
+  /** Repo ids whose catalog content is byte-identical. */
+  candidates: string[];
+}
+/** A hook/MCP integration recorded in a generated serviceme config. */
+export interface UnmanagedIntegration {
+  repoId: string;
+  pluginId: string;
+  kind: "hook" | "mcp";
+}
+export interface UnmanagedDetection {
+  adoptions: UnmanagedAdoption[];
+  ambiguous: UnmanagedAmbiguous[];
+  integrations: UnmanagedIntegration[];
+  /** Present but not adoptable — surfaced for transparency only. The
+   * reason is a plain string so protocol-wire results are assignable. */
+  unmatched: Array<{
+    name: string;
+    kind: string;
+    reason: string;
+  }>;
+}
+/** Stable signature of a detection — powers the dismissal memory. */
+export declare function unmanagedDetectionSignature(detection: UnmanagedDetection): string;
+/** `skill:hello-skill`-style targets a plugin manifest declares. */
+export declare function coveredTargetsOf(manifest: Record<string, unknown>): Set<string>;
+/**
+ * Find the plugin under `<repoRoot>/plugins/` whose plugin.json
+ * already declares `kind:name` — e.g. plugin `hello` covering
+ * skill `hello-skill`. Per-artifact installs of covered content must
+ * declare through the COVERING plugin, otherwise the standalone
+ * selection collides with the plugin on the next reconcile.
+ * Coverage comes from EITHER the manifest's extension path arrays OR
+ * (for namespace-less "Create Plugin" manifests, where the resolver derives
+ * content from directory conventions) the plugin dir's own
+ * skills/agents subdirs. Returns null when no plugin covers it.
+ */
+export declare function findPluginCoveringArtifact(repoRoot: string, kind: "skill" | "agent", name: string): Promise<string | null>;
+/**
+ * Drop adoption entries whose target a sibling entry's plugin.json
+ * already declares. Adopting `agent hello` registers plugin `hello`,
+ * whose manifest also covers `skill hello-skill` — keeping the
+ * standalone skill entry would create a duplicate-target conflict on
+ * the next reconcile. Pure: manifests are passed in by the caller.
+ */
+export declare function dedupeAdoptionsByPluginManifests<T extends {
+  repoId: string;
+  name: string;
+  kind: "skill" | "agent";
+}>(entries: T[], pluginManifests: Map<string, Record<string, unknown>>): {
+  kept: T[];
+  dropped: Array<{
+    entry: T;
+    coveredBy: string;
+  }>;
+};
+/**
+ * Detect unmanaged Copilot content in a workspace. Read-only: nothing
+ * is written or linked; the caller decides what to adopt.
+ */
+export declare function detectUnmanagedWorkspaceContent(input: {
+  workspaceDir: string;
+  /** SERVICEME repos root (`~/.serviceme/repos`). */
+  reposDir: string;
+  /** Catalog rows (from SkillStore.listAll()). */
+  catalog: DetectorCatalogEntry[];
+  /** Enabled repo ids — targets/integrations outside them are unmatched. */
+  knownRepoIds: Set<string>;
+}): Promise<UnmanagedDetection>;
+//#endregion
+//#region src/copilot-content/workspace-declaration-reader.d.ts
 /**
  * Read the workspace manifest’s declared package selections without resolving
  * sources. Source resolution can fail (unavailable source, conflict), and
@@ -1165,41 +1354,43 @@ declare class CopilotSourceCatalogService {
  * manifests surface the load error rather than pretending nothing is
  * declared.
  */
-declare function readDeclaredWorkspaceInstallations(workspaceDir: string): Promise<CopilotPackageInstallation[]>;
-
+export declare function readDeclaredWorkspaceInstallations(workspaceDir: string): Promise<CopilotPackageInstallation[]>;
+//#endregion
+//#region src/copilot-content/workspace-exclude-store.d.ts
 /** Manage the bounded SERVICEME block inside a git worktree's info/exclude. */
-declare class WorkspaceExcludeStore {
-    private readonly workspaceDir;
-    private readonly resolveGitExcludePath;
-    constructor(options: {
-        workspaceDir: string;
-        /** Override exclude-path resolution (tests, linked-worktree handling). */
-        resolveGitExcludePath?: (workspaceDir: string) => Promise<string>;
-    });
-    /** Resolve the worktree-aware exclude file managed by this store. */
-    path(): Promise<string>;
-    /** Replace the managed block so it contains exactly the given paths. */
-    reconcile(paths: string[]): Promise<void>;
-}
-
+export declare class WorkspaceExcludeStore {
+  private readonly workspaceDir;
+  private readonly resolveGitExcludePath;
+  constructor(options: {
+    workspaceDir: string;
+    /** Override exclude-path resolution (tests, linked-worktree handling). */
+    resolveGitExcludePath?: (workspaceDir: string) => Promise<string>;
+  });
+  /** Resolve the worktree-aware exclude file managed by this store. */
+  path(): Promise<string>;
+  /** Replace the managed block so it contains exactly the given paths. */
+  reconcile(paths: string[]): Promise<void>;
+}
+//#endregion
+//#region src/copilot-content/workspace-manifest.d.ts
 /** Location of the shared declaration inside a workspace. */
-declare const WORKSPACE_MANIFEST_RELPATH: string;
+export declare const WORKSPACE_MANIFEST_RELPATH: string;
 /** Absolute path of the declaration file inside a workspace. */
-declare function getWorkspaceManifestPath(workspaceDir: string): string;
+export declare function getWorkspaceManifestPath(workspaceDir: string): string;
 /** Read and validate the declaration; undefined when absent. */
-declare function loadWorkspaceCopilotManifest(workspaceDir: string): Promise<WorkspaceCopilotManifest | undefined>;
+export declare function loadWorkspaceCopilotManifest(workspaceDir: string): Promise<WorkspaceCopilotManifest | undefined>;
 /** Validate and atomically write the shared declaration. */
-declare function writeWorkspaceCopilotManifest(workspaceDir: string, manifest: WorkspaceCopilotManifest): Promise<void>;
+export declare function writeWorkspaceCopilotManifest(workspaceDir: string, manifest: WorkspaceCopilotManifest): Promise<void>;
 /**
  * Atomically replace one package selection with exact resolver artifact IDs.
  * New selections clear legacy kind maps so future resolution remains stable
  * if a package adds another artifact of an existing kind.
  */
-declare function replaceWorkspaceContentSelection(input: {
-    workspaceDir: string;
-    repository: WorkspaceManifestRepository;
-    pluginId: string;
-    artifactIds: string[];
+export declare function replaceWorkspaceContentSelection(input: {
+  workspaceDir: string;
+  repository: WorkspaceManifestRepository;
+  pluginId: string;
+  artifactIds: string[];
 }): Promise<WorkspaceCopilotManifest>;
 /**
  * Add or update one artifact-kind selection (any of the six kinds) in the
@@ -1210,45 +1401,64 @@ declare function replaceWorkspaceContentSelection(input: {
  * the plugin selection so install flows never race a concurrent write
  * of unrelated selections.
  */
-declare function upsertWorkspaceContentSelection(input: {
-    workspaceDir: string;
-    repository: WorkspaceManifestRepository;
-    pluginId: string;
-    kind: CopilotArtifactKind;
+export declare function upsertWorkspaceContentSelection(input: {
+  workspaceDir: string;
+  repository: WorkspaceManifestRepository;
+  pluginId: string;
+  kind: CopilotArtifactKind;
 }): Promise<WorkspaceCopilotManifest>;
 /**
  * Remove one artifact kind from a plugin selection, dropping
  * the plugin entirely when no artifact kind remains enabled. Returns
  * the new manifest; a no-op when the selection does not exist.
  */
-declare function removeWorkspaceContentSelection(input: {
-    workspaceDir: string;
-    repositoryId: string;
-    pluginId: string;
-    kind: CopilotArtifactKind;
+export declare function removeWorkspaceContentSelection(input: {
+  workspaceDir: string;
+  repositoryId: string;
+  pluginId: string;
+  kind: CopilotArtifactKind;
 }): Promise<WorkspaceCopilotManifest>;
-
+/**
+ * Record or clear one content target (`kind:name`) in a plugin
+ * selection's `disabledArtifacts` — the shared-declaration form of the
+ * per-artifact enable switch. Unlike the machine-local disable marks,
+ * this survives extension reloads and machine-local state loss, so the
+ * package/entry badges stay consistent with what the user disabled.
+ * No-op (returns the loaded manifest unchanged) when the selection
+ * does not exist.
+ */
+export declare function setWorkspacePluginArtifactsDisabled(input: {
+  workspaceDir: string;
+  repositoryId: string;
+  pluginId: string;
+  /** Content target, e.g. `agent:hello`. */
+  target: string;
+  disabled: boolean;
+}): Promise<WorkspaceCopilotManifest | undefined>;
+//#endregion
+//#region src/copilot-content/workspace-state-store.d.ts
 /** Hash a canonical workspace path into a stable directory segment. */
-declare function hashWorkspaceDir(workspaceDir: string): Promise<string>;
+export declare function hashWorkspaceDir(workspaceDir: string): Promise<string>;
 /** Directory holding machine-local state for one workspace. */
-declare function getWorkspaceStateDir(workspaceDir: string, homeDir?: string): Promise<string>;
+export declare function getWorkspaceStateDir(workspaceDir: string, homeDir?: string): Promise<string>;
 /** Store for machine-local Copilot content state; one file per workspace. */
-declare class WorkspaceContentStateStore {
-    private readonly workspaceDir;
-    private readonly homeDir;
-    private cachedPath;
-    constructor(options: {
-        workspaceDir: string;
-        homeDir?: string;
-    });
-    /** Absolute state-file path for this workspace. */
-    path(): Promise<string>;
-    /** Read state; an empty state when the file does not exist yet. */
-    read(): Promise<WorkspaceContentState>;
-    /** Atomically persist state. */
-    write(state: WorkspaceContentState): Promise<void>;
-}
-
+export declare class WorkspaceContentStateStore {
+  private readonly workspaceDir;
+  private readonly homeDir;
+  private cachedPath;
+  constructor(options: {
+    workspaceDir: string;
+    homeDir?: string;
+  });
+  /** Absolute state-file path for this workspace. */
+  path(): Promise<string>;
+  /** Read state; an empty state when the file does not exist yet. */
+  read(): Promise<WorkspaceContentState>;
+  /** Atomically persist state. */
+  write(state: WorkspaceContentState): Promise<void>;
+}
+//#endregion
+//#region src/drafts/index.d.ts
 /**
  * Skill & Agent v2 — Drafts (M4)
  *
@@ -1272,42 +1482,42 @@ declare class WorkspaceContentStateStore {
  * @see docs/architecture/skill-agent-v2-repo.md §2.1 (drafts layout),
  *      §5.7 SubmitClient (consumer).
  */
-interface DraftSummary {
-    /** Random id (16 hex chars). */
-    id: string;
-    kind: SkillKind;
-    /** Path to the manifest file (SKILL.md or AGENT.md). */
-    manifestPath: string;
-    /** Path to the directory containing the draft's files. */
-    dir: string;
-    /** Best-effort name from the frontmatter (empty string when absent). */
-    name: string;
-    /** Best-effort description from the frontmatter (empty string when absent). */
-    description: string;
-    /** ISO timestamp of the manifest file's mtime. */
-    modifiedAt: string;
-}
-interface DraftDetail extends DraftSummary {
-    files: SkillFile[];
-}
-interface SaveDraftOptions {
-    kind: SkillKind;
-    /** Existing draft id; omit to create a new draft. */
-    id?: string;
-    /** Files to write. Must include a manifest (SKILL.md or AGENT.md). */
-    files: SkillFile[];
+export interface DraftSummary {
+  /** Random id (16 hex chars). */
+  id: string;
+  kind: SkillKind;
+  /** Path to the manifest file (SKILL.md or AGENT.md). */
+  manifestPath: string;
+  /** Path to the directory containing the draft's files. */
+  dir: string;
+  /** Best-effort name from the frontmatter (empty string when absent). */
+  name: string;
+  /** Best-effort description from the frontmatter (empty string when absent). */
+  description: string;
+  /** ISO timestamp of the manifest file's mtime. */
+  modifiedAt: string;
+}
+export interface DraftDetail extends DraftSummary {
+  files: SkillFile[];
+}
+export interface SaveDraftOptions {
+  kind: SkillKind;
+  /** Existing draft id; omit to create a new draft. */
+  id?: string;
+  /** Files to write. Must include a manifest (SKILL.md or AGENT.md). */
+  files: SkillFile[];
 }
 /** Sentinel errors. */
-declare class DraftsError extends Error {
-    constructor(message: string);
+export declare class DraftsError extends Error {
+  constructor(message: string);
 }
-declare class DraftNotFoundError extends DraftsError {
-    readonly kind: SkillKind;
-    readonly id: string;
-    constructor(kind: SkillKind, id: string);
+export declare class DraftNotFoundError extends DraftsError {
+  readonly kind: SkillKind;
+  readonly id: string;
+  constructor(kind: SkillKind, id: string);
 }
-declare class InvalidDraftError extends DraftsError {
-    constructor(message: string);
+export declare class InvalidDraftError extends DraftsError {
+  constructor(message: string);
 }
 /**
  * Generate a short random hex id. Uses Node's `crypto.randomBytes` so
@@ -1315,137 +1525,142 @@ declare class InvalidDraftError extends DraftsError {
  * entropy. We don't promise uniqueness (collisions exist with
  * astronomically low probability) — callers must treat ids as opaque.
  */
-declare function generateDraftId(): string;
+export declare function generateDraftId(): string;
 /**
  * Resolve the on-disk directory for a draft of a given kind + id.
  * Exported for tests + the SubmitClient which writes the committed
  * files into the repo.
  */
-declare function resolveDraftDir(kind: SkillKind, id: string): string;
+export declare function resolveDraftDir(kind: SkillKind, id: string): string;
 /**
  * Persistent draft store backed by the local filesystem. Pure local —
  * no network, no git, no DB.
  */
-declare class DraftsStore {
-    /**
-     * List every draft of the given kind. Returns [] when the drafts
-     * directory doesn't exist (cold start, never-saved state).
-     */
-    list(kind: SkillKind): Promise<DraftSummary[]>;
-    /** Single draft summary (manifest + metadata). Returns null when missing. */
-    tryReadSummary(kind: SkillKind, id: string): Promise<DraftSummary | null>;
-    /** Single draft detail (summary + all files). Throws when missing. */
-    get(kind: SkillKind, id: string): Promise<DraftDetail>;
-    /** All files in a draft (manifest + extras), recursively. */
-    getFiles(kind: SkillKind, id: string): Promise<SkillFile[]>;
-    /**
-     * Create-or-update a draft. Returns the (possibly new) draft id.
-     * Throws `InvalidDraftError` when the file list does not include
-     * a manifest.
-     */
-    save(opts: SaveDraftOptions): Promise<string>;
-    /** Delete a draft. ENOENT is silently ignored (idempotent). */
-    delete(kind: SkillKind, id: string): Promise<void>;
-    /** Best-effort cleanup of `.tmp-*` orphan files in the draft dir. */
-    private sweepTmp;
-}
-
+export declare class DraftsStore {
+  /**
+   * List every draft of the given kind. Returns [] when the drafts
+   * directory doesn't exist (cold start, never-saved state).
+   */
+  list(kind: SkillKind): Promise<DraftSummary[]>;
+  /** Single draft summary (manifest + metadata). Returns null when missing. */
+  tryReadSummary(kind: SkillKind, id: string): Promise<DraftSummary | null>;
+  /** Single draft detail (summary + all files). Throws when missing. */
+  get(kind: SkillKind, id: string): Promise<DraftDetail>;
+  /** All files in a draft (manifest + extras), recursively. */
+  getFiles(kind: SkillKind, id: string): Promise<SkillFile[]>;
+  /**
+   * Create-or-update a draft. Returns the (possibly new) draft id.
+   * Throws `InvalidDraftError` when the file list does not include
+   * a manifest.
+   */
+  save(opts: SaveDraftOptions): Promise<string>;
+  /** Delete a draft. ENOENT is silently ignored (idempotent). */
+  delete(kind: SkillKind, id: string): Promise<void>;
+  /** Best-effort cleanup of `.tmp-*` orphan files in the draft dir. */
+  private sweepTmp;
+}
+//#endregion
+//#region src/process/runCommand.d.ts
 interface RunCommandOptions {
-    args?: string[];
-    cwd?: string;
-    env?: NodeJS.ProcessEnv;
-    timeoutMs?: number;
-    stdin?: string;
-    shell?: boolean;
+  args?: string[];
+  cwd?: string;
+  env?: NodeJS.ProcessEnv;
+  timeoutMs?: number;
+  stdin?: string;
+  shell?: boolean;
 }
 interface RunCommandResult {
-    stdout: string;
-    stderr: string;
-    code: number;
+  stdout: string;
+  stderr: string;
+  code: number;
 }
 declare function runCommand(command: string, options?: RunCommandOptions): Promise<RunCommandResult>;
-
-interface EnvironmentInspectorOptions {
-    /**
-     * Override the command runner. Production callers should leave this
-     * undefined and rely on the default `runCommand` from `../process/runCommand`;
-     * tests inject a fake to drive error/edge branches without spawning
-     * real subprocesses.
-     */
-    runCommand?: typeof runCommand;
-    /**
-     * Override the detected platform. Defaults to `process.platform`. Tests
-     * use this to exercise the Windows-specific branches of the inspector.
-     */
-    platform?: NodeJS.Platform;
-    /**
-     * Override the value returned by `$SHELL` for POSIX login-shell
-     * fallbacks. Defaults to `process.env.SHELL`. Tests pin this so the
-     * fallback chain stays deterministic regardless of the developer's
-     * host machine.
-     */
-    shell?: string;
-}
-declare class EnvironmentInspector {
-    private readonly runCommandFn;
-    private readonly platform;
-    private readonly shell;
-    /**
-     * Per-check-cycle result cache. `checkEnvironment()` clears it before
-     * probing so a fresh cycle never returns stale results, while concurrent
-     * or repeated `checkTool()` calls within the same cycle share one probe
-     * (deduplicating expensive login-shell fallbacks).
-     */
-    private readonly toolCheckCache;
-    constructor(options?: EnvironmentInspectorOptions);
-    checkEnvironment(): Promise<EnvironmentCheckResult>;
-    checkTool(toolName: KnownEnvironmentTool): Promise<ToolCheckResult>;
-    private performToolCheck;
-    private getToolPath;
-    private getToolPathFromLoginShell;
-    /**
-     * On Windows, prefer the `.cmd` shim for npm/pnpm/nrm. nvm4w registers
-     * BOTH an extensionless entry (pointing to node.exe) and a `<tool>.cmd`
-     * wrapper; `where` returns them in that order, and the extensionless one
-     * would just print node's own version.
-     */
-    private getToolShimPath;
-    private getToolVersion;
-    private shouldUsePosixLoginShellFallback;
-    private checkNvm;
-    /**
-     * Resolve `nvm.sh` from `$NVM_DIR` and the known install roots without
-     * spawning a shell. Returns undefined when nvm is not installed in any
-     * well-known location, letting callers skip a login-shell probe.
-     */
-    private resolveNvmShPath;
-    private checkNuget;
-    private getVersionInvocation;
-    private getToolTimeout;
-    private parseVersion;
-    private handleToolCheckError;
-}
-
-declare class ImageTools {
-    getSupportedFormats(): string[];
-    validate(filePath: string, sharpModulePath?: string): Promise<ServiceMeImageValidationResult>;
-    getInfo(imagePath: string, sharpModulePath?: string): Promise<ServiceMeImageInfo>;
-    compress(imagePath: string, options: ServiceMeImageCompressOptions): Promise<ServiceMeImageCompressResult>;
-    private compressWithSharp;
-    private getOutputPath;
-    private pathExists;
-    private loadSharp;
-}
-declare function createImageTools(): ImageTools;
-
-interface JsonTools {
-    sort(text: string, options?: Partial<JsonSortOptions>): string;
-    format(text: string, indent?: number): string;
-    validate(text: string): JsonValidationResult;
-    minify(text: string): string;
-}
-declare function createJsonTools(): JsonTools;
-
+//#endregion
+//#region src/env/environmentInspector.d.ts
+export interface EnvironmentInspectorOptions {
+  /**
+   * Override the command runner. Production callers should leave this
+   * undefined and rely on the default `runCommand` from `../process/runCommand`;
+   * tests inject a fake to drive error/edge branches without spawning
+   * real subprocesses.
+   */
+  runCommand?: typeof runCommand;
+  /**
+   * Override the detected platform. Defaults to `process.platform`. Tests
+   * use this to exercise the Windows-specific branches of the inspector.
+   */
+  platform?: NodeJS.Platform;
+  /**
+   * Override the value returned by `$SHELL` for POSIX login-shell
+   * fallbacks. Defaults to `process.env.SHELL`. Tests pin this so the
+   * fallback chain stays deterministic regardless of the developer's
+   * host machine.
+   */
+  shell?: string;
+}
+export declare class EnvironmentInspector {
+  private readonly runCommandFn;
+  private readonly platform;
+  private readonly shell;
+  /**
+   * Per-check-cycle result cache. `checkEnvironment()` clears it before
+   * probing so a fresh cycle never returns stale results, while concurrent
+   * or repeated `checkTool()` calls within the same cycle share one probe
+   * (deduplicating expensive login-shell fallbacks).
+   */
+  private readonly toolCheckCache;
+  constructor(options?: EnvironmentInspectorOptions);
+  checkEnvironment(): Promise<EnvironmentCheckResult>;
+  checkTool(toolName: KnownEnvironmentTool): Promise<ToolCheckResult>;
+  private performToolCheck;
+  private getToolPath;
+  private getToolPathFromLoginShell;
+  /**
+   * On Windows, prefer the `.cmd` shim for npm/pnpm/nrm. nvm4w registers
+   * BOTH an extensionless entry (pointing to node.exe) and a `<tool>.cmd`
+   * wrapper; `where` returns them in that order, and the extensionless one
+   * would just print node's own version.
+   */
+  private getToolShimPath;
+  private getToolVersion;
+  private shouldUsePosixLoginShellFallback;
+  private checkNvm;
+  /**
+   * Resolve `nvm.sh` from `$NVM_DIR` and the known install roots without
+   * spawning a shell. Returns undefined when nvm is not installed in any
+   * well-known location, letting callers skip a login-shell probe.
+   */
+  private resolveNvmShPath;
+  private checkNuget;
+  private getVersionInvocation;
+  private getToolTimeout;
+  private parseVersion;
+  private handleToolCheckError;
+}
+//#endregion
+//#region src/image/imageTools.d.ts
+export declare class ImageTools {
+  getSupportedFormats(): string[];
+  validate(filePath: string, sharpModulePath?: string): Promise<ServiceMeImageValidationResult>;
+  getInfo(imagePath: string, sharpModulePath?: string): Promise<ServiceMeImageInfo>;
+  compress(imagePath: string, options: ServiceMeImageCompressOptions): Promise<ServiceMeImageCompressResult>;
+  private compressWithSharp;
+  private getOutputPath;
+  private pathExists;
+  private loadSharp;
+}
+export declare function createImageTools(): ImageTools;
+//#endregion
+//#region src/json/jsonTools.d.ts
+export interface JsonTools {
+  sort(text: string, options?: Partial<JsonSortOptions>): string;
+  format(text: string, indent?: number): string;
+  validate(text: string): JsonValidationResult;
+  minify(text: string): string;
+}
+export declare function createJsonTools(): JsonTools;
+//#endregion
+//#region src/paths/userHome.d.ts
 /**
  * SERVICEME user home directory helpers.
  *
@@ -1458,38 +1673,38 @@ declare function createJsonTools(): JsonTools;
  * exercise the path logic without touching the real user environment.
  */
 /** Layout constants — kept in one place so other modules can reuse them. */
-declare const SERVICEME_DIR_NAME = ".serviceme";
-declare const REPOS_SUBDIR = "repos";
-declare const CACHE_SUBDIR = "cache";
-declare const DRAFTS_SUBDIR = "drafts";
-declare const SKILL_DRAFTS_SUBDIR = "skills";
-declare const AGENT_DRAFTS_SUBDIR = "agents";
-declare const REPOS_CONFIG_FILENAME = "repos.json";
-declare const WORKSPACES_SUBDIR = "workspaces";
-declare const WORKSPACE_CONTENT_STATE_FILENAME = "copilot-content-state.json";
+export declare const SERVICEME_DIR_NAME = ".serviceme";
+export declare const REPOS_SUBDIR = "repos";
+export declare const CACHE_SUBDIR = "cache";
+export declare const DRAFTS_SUBDIR = "drafts";
+export declare const SKILL_DRAFTS_SUBDIR = "skills";
+export declare const AGENT_DRAFTS_SUBDIR = "agents";
+export declare const REPOS_CONFIG_FILENAME = "repos.json";
+export declare const WORKSPACES_SUBDIR = "workspaces";
+export declare const WORKSPACE_CONTENT_STATE_FILENAME = "copilot-content-state.json";
 /** rev.20 — r7 BYOM Server Proxy toggle self-state (read by ext + CLI + server). */
-declare const SERVER_PROXY_GLOBAL_FILENAME = "server-proxy.json";
+export declare const SERVER_PROXY_GLOBAL_FILENAME = "server-proxy.json";
 /**
  * Repo id regex — used to validate any `repoId` argument before it is joined
  * into a filesystem path. Keeps path traversal attempts out and gives us a
  * predictable on-disk shape.
  */
-declare const SAFE_REPO_ID_PATTERN: RegExp;
+export declare const SAFE_REPO_ID_PATTERN: RegExp;
 /** Environment variable that overrides the user-home root directory. */
-declare const SERVICEME_HOME_ENV = "SERVICEME_HOME";
+export declare const SERVICEME_HOME_ENV = "SERVICEME_HOME";
 /**
  * Test seam: lets unit tests inject deterministic values for `os.homedir()`
  * and the `SERVICEME_HOME` env override without actually mutating
  * `process.env` (which would leak into other tests).
  */
 interface UserHomeOverrides {
-    homeDir?: string | undefined;
-    servicemeHomeEnv?: string | undefined;
-    platform?: NodeJS.Platform | undefined;
+  homeDir?: string | undefined;
+  servicemeHomeEnv?: string | undefined;
+  platform?: NodeJS.Platform | undefined;
 }
-declare function setUserHomeOverrides(overrides: UserHomeOverrides): void;
-declare function resetUserHomeOverrides(): void;
-declare function assertSafeRepoId(repoId: string): string;
+export declare function setUserHomeOverrides(overrides: UserHomeOverrides): void;
+export declare function resetUserHomeOverrides(): void;
+export declare function assertSafeRepoId(repoId: string): string;
 /**
  * The raw OS home directory (`os.homedir()`), honoring test overrides
  * ({@link setUserHomeOverrides}). Exported for callers that need a
@@ -1497,64 +1712,64 @@ declare function assertSafeRepoId(repoId: string): string;
  * `~/.agents/{skills,agents}` convention used by `SkillLinker` for
  * user-scope links.
  */
-declare function getHomeDir(): string;
+export declare function getHomeDir(): string;
 /**
  * Root directory for all SERVICEME user-level state. Resolves to
  * `${SERVICEME_HOME}` when that env var is set, otherwise `${HOME}/.serviceme`
  * (POSIX) or `%USERPROFILE%\.serviceme` (Windows via `os.homedir`).
  */
-declare function getServicemeHome(): string;
+export declare function getServicemeHome(): string;
 /** `$HOME/.serviceme/repos` (or `${SERVICEME_HOME}/repos`). */
-declare function getReposDir(): string;
+export declare function getReposDir(): string;
 /** `$HOME/.serviceme/repos/<repoId>` — validates `repoId` first. */
-declare function getRepoDir(repoId: string): string;
+export declare function getRepoDir(repoId: string): string;
 /** `$HOME/.serviceme/cache` — generic per-user cache. */
-declare function getCacheDir(): string;
+export declare function getCacheDir(): string;
 /** `$HOME/.serviceme/cache/<repoId>` — per-repo sync state lives here. */
-declare function getRepoCacheDir(repoId: string): string;
+export declare function getRepoCacheDir(repoId: string): string;
 /** `$HOME/.serviceme/drafts` — local edits not yet pushed upstream. */
-declare function getDraftsDir(): string;
+export declare function getDraftsDir(): string;
 /** `$HOME/.serviceme/drafts/skills` — local skill drafts. */
-declare function getSkillDraftsDir(): string;
+export declare function getSkillDraftsDir(): string;
 /** `$HOME/.serviceme/drafts/agents` — local agent drafts. */
-declare function getAgentDraftsDir(): string;
+export declare function getAgentDraftsDir(): string;
 /**
  * `$HOME/.serviceme/repos.json` — the single config entry point for repo
  * metadata. Always under the resolved home root (i.e. follows
  * `SERVICEME_HOME` overrides too).
  */
-declare function getReposConfigPath(): string;
+export declare function getReposConfigPath(): string;
 /** `~/.serviceme/workspaces` — machine-local per-workspace state root. */
-declare function getWorkspacesDir(): string;
+export declare function getWorkspacesDir(): string;
 /**
  * Convenience helper for callers that need to switch behaviour on platform
  * (e.g. `SkillLinker` chooses symlink vs junction). Exported mostly so tests
  * can pin the value without touching `process.platform` directly.
  */
-declare function getHomePlatform(): NodeJS.Platform;
+export declare function getHomePlatform(): NodeJS.Platform;
 /** Layout constants for scheduled-tasks files. Kept here so other modules
  * can reuse them and the names stay in sync with the design doc. */
-declare const SCHEDULED_TASKS_CONFIG_FILENAME = "scheduled-tasks.json";
-declare const SCHEDULED_TASKS_LOG_FILENAME = "scheduled-tasks-log.json";
-declare const SCHEDULER_PID_FILENAME = "scheduler.pid";
-declare const SCHEDULER_LOCK_FILENAME = "scheduler.lock";
-declare const SCHEDULER_LOG_FILENAME = "scheduler.log";
-declare const MIGRATION_FAILURES_FILENAME = "migration-failures.json";
-declare const KNOWN_WORKSPACES_FILENAME = "known-workspaces.json";
+export declare const SCHEDULED_TASKS_CONFIG_FILENAME = "scheduled-tasks.json";
+export declare const SCHEDULED_TASKS_LOG_FILENAME = "scheduled-tasks-log.json";
+export declare const SCHEDULER_PID_FILENAME = "scheduler.pid";
+export declare const SCHEDULER_LOCK_FILENAME = "scheduler.lock";
+export declare const SCHEDULER_LOG_FILENAME = "scheduler.log";
+export declare const MIGRATION_FAILURES_FILENAME = "migration-failures.json";
+export declare const KNOWN_WORKSPACES_FILENAME = "known-workspaces.json";
 /** `~/.serviceme/scheduled-tasks.json` — the global v2 task list. */
-declare function getScheduledTasksConfigPath(): string;
+export declare function getScheduledTasksConfigPath(): string;
 /** `~/.serviceme/scheduled-tasks-log.json` — the global execution log (200 LRU). */
-declare function getScheduledTasksLogPath(): string;
+export declare function getScheduledTasksLogPath(): string;
 /** `~/.serviceme/scheduler.pid` — global daemon PID file. */
-declare function getSchedulerPidPath(): string;
+export declare function getSchedulerPidPath(): string;
 /** `~/.serviceme/scheduler.lock` — global daemon startup flock. */
-declare function getSchedulerLockPath(): string;
+export declare function getSchedulerLockPath(): string;
 /** `~/.serviceme/scheduler.log` — global daemon log (daemon lifecycle, not task execution). */
-declare function getSchedulerLogPath(): string;
+export declare function getSchedulerLogPath(): string;
 /** `~/.serviceme/migration-failures.json` — diagnostics for failed v1→v2 imports. */
-declare function getMigrationFailuresPath(): string;
+export declare function getMigrationFailuresPath(): string;
 /** `~/.serviceme/known-workspaces.json` — workspace list the extension has seen. */
-declare function getKnownWorkspacesPath(): string;
+export declare function getKnownWorkspacesPath(): string;
 /**
  * `~/.serviceme/server-proxy.json` — r7 BYOM Server Proxy toggle
  * self-state. Written by the extension's `ProxyConfigService`, readable
@@ -1566,51 +1781,52 @@ declare function getKnownWorkspacesPath(): string;
  * machine A should be able to rely on it on machine B after sync, not
  * have it disappear when they switch repos.
  */
-declare function getServerProxyGlobalPath(): string;
+export declare function getServerProxyGlobalPath(): string;
 /** Layout constants for the Phase 5 client-side state files. The server
  * already has the corresponding routes (`/api/v1/auth/...`,
  * `/api/v1/device/...`, etc.) — the client just needs the on-disk
  * file paths + a first-run bootstrap so the auth/device/toolbox
  * services can open + read them without a per-call existence check. */
-declare const CREDENTIALS_CONFIG_FILENAME = "credentials.json";
-declare const DEVICE_JSON_FILENAME = "device.json";
-declare const TOOLBOX_JSON_FILENAME = "toolbox.json";
-declare const MACHINE_ID_FILENAME = "machine-id";
-declare const PROFILES_JSON_FILENAME = "profiles.json";
+export declare const CREDENTIALS_CONFIG_FILENAME = "credentials.json";
+export declare const DEVICE_JSON_FILENAME = "device.json";
+export declare const TOOLBOX_JSON_FILENAME = "toolbox.json";
+export declare const MACHINE_ID_FILENAME = "machine-id";
+export declare const PROFILES_JSON_FILENAME = "profiles.json";
 /** `~/.serviceme/credentials.json` — better-auth session tokens + refresh state (client-side cache). */
-declare function getCredentialsConfigPath(): string;
+export declare function getCredentialsConfigPath(): string;
 /** `~/.serviceme/device.json` — device enrollment payload (id, public key fingerprint, claimed-by). */
-declare function getDeviceJsonPath(): string;
+export declare function getDeviceJsonPath(): string;
 /** `~/.serviceme/toolbox.json` — local toolbox state (installed tool refs, per-user prefs). */
-declare function getToolboxJsonPath(): string;
+export declare function getToolboxJsonPath(): string;
 /** `~/.serviceme/machine-id` — opaque stable per-install id (uuid v4 string, no JSON wrapper). */
-declare function getMachineIdPath(): string;
+export declare function getMachineIdPath(): string;
 /** `~/.serviceme/profiles.json` — cached projection of server-side profile rows; refresh on demand. */
-declare function getProfilesJsonPath(): string;
-
+export declare function getProfilesJsonPath(): string;
+//#endregion
+//#region src/paths/serverProxyGlobal.d.ts
 /** On-disk shape for `~/.serviceme/server-proxy.json`. */
-interface ServerProxyGlobalState {
-    /** Whether the user has previously enabled Server Proxy. */
-    enabled: boolean;
-    /** Last server URL we toggled ON with. Used for re-toggling and UI hint. */
-    lastServerUrl: string | undefined;
-    /**
-     * rev.21 — explicit opt-in to enable Server Proxy even when
-     * `http.proxySupport === "override"`. `override` mode forces ALL
-     * extensions to route through `http.proxy`; defaulting to `false`
-     * keeps the legacy defensive guard against accidental global
-     * hijack. Power users (e.g. corp environments that WANT all
-     * extensions including GitHub Copilot Chat to route through the
-     * corp tunnel) can flip this on via the Webview's "Allow under
-     * proxySupport=override" affordance.
-     *
-     * Note: stored in the global file alongside `enabled` because
-     * this is *our* self-flag — it has nothing to do with VS Code's
-     * `http.*` schema.
-     */
-    allowOverride: boolean;
-    /** ISO 8601 timestamp of the most recent write. Diagnostic only. */
-    updatedAt: string;
+export interface ServerProxyGlobalState {
+  /** Whether the user has previously enabled Server Proxy. */
+  enabled: boolean;
+  /** Last server URL we toggled ON with. Used for re-toggling and UI hint. */
+  lastServerUrl: string | undefined;
+  /**
+   * rev.21 — explicit opt-in to enable Server Proxy even when
+   * `http.proxySupport === "override"`. `override` mode forces ALL
+   * extensions to route through `http.proxy`; defaulting to `false`
+   * keeps the legacy defensive guard against accidental global
+   * hijack. Power users (e.g. corp environments that WANT all
+   * extensions including GitHub Copilot Chat to route through the
+   * corp tunnel) can flip this on via the Webview's "Allow under
+   * proxySupport=override" affordance.
+   *
+   * Note: stored in the global file alongside `enabled` because
+   * this is *our* self-flag — it has nothing to do with VS Code's
+   * `http.*` schema.
+   */
+  allowOverride: boolean;
+  /** ISO 8601 timestamp of the most recent write. Diagnostic only. */
+  updatedAt: string;
 }
 /**
  * Patch semantics (mirrors `vscode.workspace.getConfiguration().update(...)`):
@@ -1621,24 +1837,24 @@ interface ServerProxyGlobalState {
  * and `allowOverride` are plain `boolean | undefined` because boolean is
  * the natural unit (false = "the user disabled it").
  */
-interface ServerProxyGlobalPatch {
-    enabled?: boolean;
-    allowOverride?: boolean;
-    lastServerUrl?: string | null;
+export interface ServerProxyGlobalPatch {
+  enabled?: boolean;
+  allowOverride?: boolean;
+  lastServerUrl?: string | null;
 }
 /**
  * Reads the global config file. Returns `null` if the file does not
  * exist (first-run case) — does NOT throw. Throws on parse errors or
  * permission issues, so callers can surface those to the user.
  */
-declare function readServerProxyGlobal(): Promise<ServerProxyGlobalState | null>;
+export declare function readServerProxyGlobal(): Promise<ServerProxyGlobalState | null>;
 /**
  * Merges a partial patch into the existing state and writes back
  * atomically. Creates `~/.serviceme/` if missing.
  *
  * Returns the post-write state. Throws on IO/JSON errors.
  */
-declare function writeServerProxyGlobal(patch: ServerProxyGlobalPatch): Promise<ServerProxyGlobalState>;
+export declare function writeServerProxyGlobal(patch: ServerProxyGlobalPatch): Promise<ServerProxyGlobalState>;
 /**
  * Best-effort migration of a legacy `enabled` flag (typically read from
  * VS Code's `settings.json` at `serverProxy.enabled`) into the global
@@ -1651,11 +1867,13 @@ declare function writeServerProxyGlobal(patch: ServerProxyGlobalPatch): Promise<
  * Returns the migrated state, or `null` if no migration was needed
  * (legacy flag absent OR global config already up to date).
  */
-declare function migrateLegacyServerProxyEnabled(readLegacy: () => boolean | undefined, clearLegacy: () => Promise<void>): Promise<ServerProxyGlobalState | null>;
-
-declare const TOOL_RISK_MAP: Record<string, AgentToolRiskLevel>;
-declare function parseAgentToolPermissions(content: string): AgentToolPermission[];
-
+export declare function migrateLegacyServerProxyEnabled(readLegacy: () => boolean | undefined, clearLegacy: () => Promise<void>): Promise<ServerProxyGlobalState | null>;
+//#endregion
+//#region src/permissions/agent-permissions.d.ts
+export declare const TOOL_RISK_MAP: Record<string, AgentToolRiskLevel>;
+export declare function parseAgentToolPermissions(content: string): AgentToolPermission[];
+//#endregion
+//#region src/phase5/bootstrap.d.ts
 /**
  * Spec §11.12 — Phase 5 client-side state bootstrap.
  *
@@ -1679,37 +1897,39 @@ declare function parseAgentToolPermissions(content: string): AgentToolPermission
  * @see docs/architecture/skill-agent-v2-repo.md §11.12
  */
 interface BootstrapPhase5Result {
-    /** Files that were created by this run (already-existing files excluded). */
-    created: string[];
-    /** Files that were already present and left untouched. */
-    skipped: string[];
-    /** Files where the write attempt failed (e.g. read-only home). */
-    failed: Array<{
-        path: string;
-        reason: string;
-    }>;
+  /** Files that were created by this run (already-existing files excluded). */
+  created: string[];
+  /** Files that were already present and left untouched. */
+  skipped: string[];
+  /** Files where the write attempt failed (e.g. read-only home). */
+  failed: Array<{
+    path: string;
+    reason: string;
+  }>;
 }
 /**
  * Idempotently create the Phase 5 placeholder files under
  * `~/.serviceme/`. Safe to call on every extension activation —
  * existing files are detected via `access` and skipped.
  */
-declare function bootstrapPhase5Placeholders(): Promise<BootstrapPhase5Result>;
-
-declare class ProjectTools {
-    extractTemplate(zipPath: string, workspacePath: string, tempExtractDir: string, input: ServiceMeProjectExtractTemplateInput): Promise<ServiceMeProjectExtractTemplateResult>;
-    installDependencies(workspacePath: string, command?: string): Promise<ServiceMeProjectInstallDepsResult>;
-    makeScriptsExecutable(workspacePath: string): Promise<ServiceMeProjectMakeScriptsExecutableResult>;
-    initializeGit(workspacePath: string): Promise<ServiceMeProjectGitInitResult>;
-    runScaffoldPrune(workspacePath: string, preset?: string): Promise<ServiceMeProjectScaffoldPruneResult>;
-    private ensurePresetManifest;
-    private findScripts;
-    private pathExists;
-    private selectExtractedDirectory;
-    private directoryMatchesProjectPattern;
-}
-declare function createProjectTools(): ProjectTools;
-
+export declare function bootstrapPhase5Placeholders(): Promise<BootstrapPhase5Result>;
+//#endregion
+//#region src/project/projectTools.d.ts
+export declare class ProjectTools {
+  extractTemplate(zipPath: string, workspacePath: string, tempExtractDir: string, input: ServiceMeProjectExtractTemplateInput): Promise<ServiceMeProjectExtractTemplateResult>;
+  installDependencies(workspacePath: string, command?: string): Promise<ServiceMeProjectInstallDepsResult>;
+  makeScriptsExecutable(workspacePath: string): Promise<ServiceMeProjectMakeScriptsExecutableResult>;
+  initializeGit(workspacePath: string): Promise<ServiceMeProjectGitInitResult>;
+  runScaffoldPrune(workspacePath: string, preset?: string): Promise<ServiceMeProjectScaffoldPruneResult>;
+  private ensurePresetManifest;
+  private findScripts;
+  private pathExists;
+  private selectExtractedDirectory;
+  private directoryMatchesProjectPattern;
+}
+export declare function createProjectTools(): ProjectTools;
+//#endregion
+//#region src/repos/types.d.ts
 /**
  * `repos.json` schema — mirrors §3 of docs/architecture/skill-agent-v2-repo.md.
  *
@@ -1729,94 +1949,151 @@ declare function createProjectTools(): ProjectTools;
  * fields.
  */
 /** ISO 8601 timestamp. */
-type IsoTimestamp = string;
+export type IsoTimestamp = string;
 /** Per-repo sync health — surfaced in the UI alongside the repo entry. */
-type SyncStatus = "ok" | "error";
+export type SyncStatus = "ok" | "error";
 /** Discriminant on `RepoConfig.source` — narrow with a literal check. */
-type RepoSource = "default" | "user";
+export type RepoSource = "default" | "user";
 /**
  * Common shape shared by both default and user-added repos. Source lives on
  * the type so we can keep the loader schema flat while still letting
  * `DefaultRepoConfig` carry a `description`.
  */
-interface RepoConfig {
-    /** Stable id used in on-disk paths (must match `SAFE_REPO_ID_PATTERN`). */
-    id: string;
-    /** Display name shown in UI. */
-    name: string;
-    /** Upstream git URL (typically github.com/<owner>/<repo>.git). */
-    url: string;
-    /** Default branch to track (e.g. "v2", "main"). */
-    branch: string;
-    /** Whether this repo participates in scheduled syncs. */
-    enabled: boolean;
-    /** Whether git traffic should go through the local server proxy (default true). */
-    useProxy?: boolean;
-    /** Whether the user is allowed to push back to this repo. */
-    writeEnabled: boolean;
-    /** When the user (or first-run installer) added this repo. */
-    addedAt: IsoTimestamp;
-    /** Last successful sync timestamp. */
-    lastSyncAt?: IsoTimestamp;
-    /** Commit SHA at the time of the last successful sync. */
-    lastSyncCommitSha?: string;
-    /** Result of the most recent sync attempt. */
-    lastSyncStatus?: SyncStatus;
-    /** Error message from the most recent sync attempt (when `lastSyncStatus === 'error'`). */
-    lastSyncError?: string;
-    /** Whether this repo is a default or a user-added repo. */
-    source: RepoSource;
+export interface RepoConfig {
+  /** Stable id used in on-disk paths (must match `SAFE_REPO_ID_PATTERN`). */
+  id: string;
+  /** Display name shown in UI. */
+  name: string;
+  /** Upstream git URL (typically github.com/<owner>/<repo>.git). */
+  url: string;
+  /** Default branch to track (e.g. "v2", "main"). */
+  branch: string;
+  /** Whether this repo participates in scheduled syncs. */
+  enabled: boolean;
+  /** Whether git traffic should go through the local server proxy (default true). */
+  useProxy?: boolean;
+  /** Whether the user is allowed to push back to this repo. */
+  writeEnabled: boolean;
+  /** When the user (or first-run installer) added this repo. */
+  addedAt: IsoTimestamp;
+  /** Last successful sync timestamp. */
+  lastSyncAt?: IsoTimestamp;
+  /** Commit SHA at the time of the last successful sync. */
+  lastSyncCommitSha?: string;
+  /** Result of the most recent sync attempt. */
+  lastSyncStatus?: SyncStatus;
+  /** Error message from the most recent sync attempt (when `lastSyncStatus === 'error'`). */
+  lastSyncError?: string;
+  /** Whether this repo is a default or a user-added repo. */
+  source: RepoSource;
 }
 /** A default (bundled) repo — has a UI-facing description, cannot be removed. */
-interface DefaultRepoConfig extends RepoConfig {
-    source: "default";
-    description: string;
+export interface DefaultRepoConfig extends RepoConfig {
+  source: "default";
+  description: string;
 }
 /** A user-added repo — can be added, removed, disabled freely. */
-interface UserRepoConfig extends RepoConfig {
-    source: "user";
+export interface UserRepoConfig extends RepoConfig {
+  source: "user";
 }
 /** Any repo, regardless of source. */
-type AnyRepoConfig = DefaultRepoConfig | UserRepoConfig;
+export type AnyRepoConfig = DefaultRepoConfig | UserRepoConfig;
 /**
  * Root shape of `repos.json`. `version` lets us evolve the schema later
  * without colliding with hand-edited files.
  */
-interface ReposFile {
-    version: 1;
-    /** Id of the repo currently surfaced as the default selection in the UI. */
-    defaultRepoId: string;
-    repos: AnyRepoConfig[];
+export interface ReposFile {
+  version: 1;
+  /** Id of the repo currently surfaced as the default selection in the UI. */
+  defaultRepoId: string;
+  repos: AnyRepoConfig[];
 }
 /**
  * Convenience type-guard — narrows to `DefaultRepoConfig`. Useful when callers
  * want to render `repo.description` or reject `removeRepo(repo)` for defaults.
  */
-declare function isDefaultRepo(repo: RepoConfig): repo is DefaultRepoConfig;
+export declare function isDefaultRepo(repo: RepoConfig): repo is DefaultRepoConfig;
 /** Convenience type-guard — narrows to `UserRepoConfig`. */
-declare function isUserRepo(repo: RepoConfig): repo is UserRepoConfig;
-
+export declare function isUserRepo(repo: RepoConfig): repo is UserRepoConfig;
+//#endregion
+//#region src/repos/loader.d.ts
 declare const defaultRepoSchema: z.ZodObject<{
-    source: z.ZodLiteral<"default">;
-    description: z.ZodString;
-    id: z.ZodString;
-    name: z.ZodString;
-    url: z.ZodString;
-    branch: z.ZodString;
-    enabled: z.ZodBoolean;
-    useProxy: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-    writeEnabled: z.ZodBoolean;
-    addedAt: z.ZodString;
-    lastSyncAt: z.ZodOptional<z.ZodString>;
-    lastSyncCommitSha: z.ZodOptional<z.ZodString>;
-    lastSyncStatus: z.ZodOptional<z.ZodEnum<{
-        error: "error";
-        ok: "ok";
-    }>>;
-    lastSyncError: z.ZodOptional<z.ZodString>;
+  id: z.ZodString;
+  name: z.ZodString;
+  url: z.ZodString;
+  branch: z.ZodString;
+  enabled: z.ZodBoolean;
+  useProxy: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+  writeEnabled: z.ZodBoolean;
+  addedAt: z.ZodString;
+  lastSyncAt: z.ZodOptional<z.ZodString>;
+  lastSyncCommitSha: z.ZodOptional<z.ZodString>;
+  lastSyncStatus: z.ZodOptional<z.ZodEnum<{
+    error: "error";
+    ok: "ok";
+  }>>;
+  lastSyncError: z.ZodOptional<z.ZodString>;
+  source: z.ZodLiteral<"default">;
+  description: z.ZodString;
 }, z.core.$strip>;
 declare const userRepoSchema: z.ZodObject<{
-    source: z.ZodLiteral<"user">;
+  id: z.ZodString;
+  name: z.ZodString;
+  url: z.ZodString;
+  branch: z.ZodString;
+  enabled: z.ZodBoolean;
+  useProxy: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+  writeEnabled: z.ZodBoolean;
+  addedAt: z.ZodString;
+  lastSyncAt: z.ZodOptional<z.ZodString>;
+  lastSyncCommitSha: z.ZodOptional<z.ZodString>;
+  lastSyncStatus: z.ZodOptional<z.ZodEnum<{
+    error: "error";
+    ok: "ok";
+  }>>;
+  lastSyncError: z.ZodOptional<z.ZodString>;
+  source: z.ZodLiteral<"user">;
+}, z.core.$strip>;
+declare const repoSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+  id: z.ZodString;
+  name: z.ZodString;
+  url: z.ZodString;
+  branch: z.ZodString;
+  enabled: z.ZodBoolean;
+  useProxy: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+  writeEnabled: z.ZodBoolean;
+  addedAt: z.ZodString;
+  lastSyncAt: z.ZodOptional<z.ZodString>;
+  lastSyncCommitSha: z.ZodOptional<z.ZodString>;
+  lastSyncStatus: z.ZodOptional<z.ZodEnum<{
+    error: "error";
+    ok: "ok";
+  }>>;
+  lastSyncError: z.ZodOptional<z.ZodString>;
+  source: z.ZodLiteral<"default">;
+  description: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+  id: z.ZodString;
+  name: z.ZodString;
+  url: z.ZodString;
+  branch: z.ZodString;
+  enabled: z.ZodBoolean;
+  useProxy: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+  writeEnabled: z.ZodBoolean;
+  addedAt: z.ZodString;
+  lastSyncAt: z.ZodOptional<z.ZodString>;
+  lastSyncCommitSha: z.ZodOptional<z.ZodString>;
+  lastSyncStatus: z.ZodOptional<z.ZodEnum<{
+    error: "error";
+    ok: "ok";
+  }>>;
+  lastSyncError: z.ZodOptional<z.ZodString>;
+  source: z.ZodLiteral<"user">;
+}, z.core.$strip>], "source">;
+export declare const reposFileSchema: z.ZodObject<{
+  version: z.ZodLiteral<1>;
+  defaultRepoId: z.ZodString;
+  repos: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
     id: z.ZodString;
     name: z.ZodString;
     url: z.ZodString;
@@ -1828,14 +2105,13 @@ declare const userRepoSchema: z.ZodObject<{
     lastSyncAt: z.ZodOptional<z.ZodString>;
     lastSyncCommitSha: z.ZodOptional<z.ZodString>;
     lastSyncStatus: z.ZodOptional<z.ZodEnum<{
-        error: "error";
-        ok: "ok";
+      error: "error";
+      ok: "ok";
     }>>;
     lastSyncError: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-declare const repoSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     source: z.ZodLiteral<"default">;
     description: z.ZodString;
+  }, z.core.$strip>, z.ZodObject<{
     id: z.ZodString;
     name: z.ZodString;
     url: z.ZodString;
@@ -1847,140 +2123,85 @@ declare const repoSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     lastSyncAt: z.ZodOptional<z.ZodString>;
     lastSyncCommitSha: z.ZodOptional<z.ZodString>;
     lastSyncStatus: z.ZodOptional<z.ZodEnum<{
-        error: "error";
-        ok: "ok";
+      error: "error";
+      ok: "ok";
     }>>;
     lastSyncError: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, z.ZodObject<{
     source: z.ZodLiteral<"user">;
-    id: z.ZodString;
-    name: z.ZodString;
-    url: z.ZodString;
-    branch: z.ZodString;
-    enabled: z.ZodBoolean;
-    useProxy: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-    writeEnabled: z.ZodBoolean;
-    addedAt: z.ZodString;
-    lastSyncAt: z.ZodOptional<z.ZodString>;
-    lastSyncCommitSha: z.ZodOptional<z.ZodString>;
-    lastSyncStatus: z.ZodOptional<z.ZodEnum<{
-        error: "error";
-        ok: "ok";
-    }>>;
-    lastSyncError: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>], "source">;
-declare const reposFileSchema: z.ZodObject<{
-    version: z.ZodLiteral<1>;
-    defaultRepoId: z.ZodString;
-    repos: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        source: z.ZodLiteral<"default">;
-        description: z.ZodString;
-        id: z.ZodString;
-        name: z.ZodString;
-        url: z.ZodString;
-        branch: z.ZodString;
-        enabled: z.ZodBoolean;
-        useProxy: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-        writeEnabled: z.ZodBoolean;
-        addedAt: z.ZodString;
-        lastSyncAt: z.ZodOptional<z.ZodString>;
-        lastSyncCommitSha: z.ZodOptional<z.ZodString>;
-        lastSyncStatus: z.ZodOptional<z.ZodEnum<{
-            error: "error";
-            ok: "ok";
-        }>>;
-        lastSyncError: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>, z.ZodObject<{
-        source: z.ZodLiteral<"user">;
-        id: z.ZodString;
-        name: z.ZodString;
-        url: z.ZodString;
-        branch: z.ZodString;
-        enabled: z.ZodBoolean;
-        useProxy: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-        writeEnabled: z.ZodBoolean;
-        addedAt: z.ZodString;
-        lastSyncAt: z.ZodOptional<z.ZodString>;
-        lastSyncCommitSha: z.ZodOptional<z.ZodString>;
-        lastSyncStatus: z.ZodOptional<z.ZodEnum<{
-            error: "error";
-            ok: "ok";
-        }>>;
-        lastSyncError: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>], "source">>;
+  }, z.core.$strip>], "source">>;
 }, z.core.$strip>;
 /** Inferred Zod type — identical to our hand-written `ReposFile`. */
-type ReposFileInput = z.infer<typeof reposFileSchema>;
+export type ReposFileInput = z.infer<typeof reposFileSchema>;
 /** Result of a load attempt — either a parsed file or a recovery notice. */
-interface LoadResult {
-    /** Parsed + validated repos file (always populated, even on recovery). */
-    config: ReposFile;
-    /**
-     * Non-null when the existing file on disk was unreadable / invalid and
-     * was moved aside as a `.bak`. The store can use this to surface a
-     * warning in the UI.
-     */
-    recoveredFromBackup: string | null;
+export interface LoadResult {
+  /** Parsed + validated repos file (always populated, even on recovery). */
+  config: ReposFile;
+  /**
+   * Non-null when the existing file on disk was unreadable / invalid and
+   * was moved aside as a `.bak`. The store can use this to surface a
+   * warning in the UI.
+   */
+  recoveredFromBackup: string | null;
 }
 /** Dependencies — defaults to the real fs, tests inject a fake. */
-interface ReposLoaderFileSystem {
-    readFile: typeof fs.readFile;
-    writeFile: typeof fs.writeFile;
-    rename: typeof fs.rename;
-    mkdir: typeof fs.mkdir;
-    stat: typeof fs.stat;
-    unlink?: typeof fs.unlink;
-}
-interface ReposLoaderOptions {
-    /** Absolute path of the `repos.json` file. */
-    configPath: string;
-    /** Custom time provider — defaults to `() => new Date().toISOString()`. */
-    now?: () => string;
-    /** Random suffix provider for atomic-write temp files. */
-    randomSuffix?: () => string;
-    /** Filesystem shim for tests. */
-    fileSystem?: ReposLoaderFileSystem;
-}
-declare class ReposLoader {
-    private readonly configPath;
-    private readonly now;
-    private readonly randomSuffix;
-    private readonly fileSystem;
-    constructor(options: ReposLoaderOptions);
-    /** Absolute path of the file this loader reads/writes. */
-    getConfigPath(): string;
-    /**
-     * Read + validate the on-disk config. When the file is missing, returns a
-     * sentinel empty config (no backup is taken — that's expected on first
-     * run). When the file is corrupted, moves it to `<name>.<ts>.bak` and
-     * returns an empty config with `recoveredFromBackup` populated.
-     */
-    load(): Promise<LoadResult>;
-    /**
-     * Write the config to disk atomically. Writes to
-     * `<target>.tmp-<random>` then `rename`s over the target. The parent
-     * directory is created on demand.
-     */
-    save(config: ReposFile): Promise<void>;
-    /**
-     * Move the existing file to a timestamped `.bak` sibling and return the
-     * backup path. Used when we detect a corrupted / unparseable file and
-     * need to make room for a fresh write.
-     */
-    private quarantine;
-    /**
-     * Empty config used when no file exists or the existing file is corrupt.
-     * The caller (e.g. `ensureDefaultsInstalled`) is expected to populate the
-     * real default repo set before persisting.
-     */
-    private buildEmptyConfig;
-}
-
+export interface ReposLoaderFileSystem {
+  readFile: typeof fs$1.readFile;
+  writeFile: typeof fs$1.writeFile;
+  rename: typeof fs$1.rename;
+  mkdir: typeof fs$1.mkdir;
+  stat: typeof fs$1.stat;
+  unlink?: typeof fs$1.unlink;
+}
+export interface ReposLoaderOptions {
+  /** Absolute path of the `repos.json` file. */
+  configPath: string;
+  /** Custom time provider — defaults to `() => new Date().toISOString()`. */
+  now?: () => string;
+  /** Random suffix provider for atomic-write temp files. */
+  randomSuffix?: () => string;
+  /** Filesystem shim for tests. */
+  fileSystem?: ReposLoaderFileSystem;
+}
+export declare class ReposLoader {
+  private readonly configPath;
+  private readonly now;
+  private readonly randomSuffix;
+  private readonly fileSystem;
+  constructor(options: ReposLoaderOptions);
+  /** Absolute path of the file this loader reads/writes. */
+  getConfigPath(): string;
+  /**
+   * Read + validate the on-disk config. When the file is missing, returns a
+   * sentinel empty config (no backup is taken — that's expected on first
+   * run). When the file is corrupted, moves it to `<name>.<ts>.bak` and
+   * returns an empty config with `recoveredFromBackup` populated.
+   */
+  load(): Promise<LoadResult>;
+  /**
+   * Write the config to disk atomically. Writes to
+   * `<target>.tmp-<random>` then `rename`s over the target. The parent
+   * directory is created on demand.
+   */
+  save(config: ReposFile): Promise<void>;
+  /**
+   * Move the existing file to a timestamped `.bak` sibling and return the
+   * backup path. Used when we detect a corrupted / unparseable file and
+   * need to make room for a fresh write.
+   */
+  private quarantine;
+  /**
+   * Empty config used when no file exists or the existing file is corrupt.
+   * The caller (e.g. `ensureDefaultsInstalled`) is expected to populate the
+   * real default repo set before persisting.
+   */
+  private buildEmptyConfig;
+}
 /** Helper: parse + validate a config object (e.g. freshly built in memory). */
-declare function validateReposFile(input: unknown): ReposFile;
+export declare function validateReposFile(input: unknown): ReposFile;
 /** Helper: discriminate a `RepoConfig` between default and user flavours. */
-declare function narrowRepoConfig(repo: AnyRepoConfig): DefaultRepoConfig | UserRepoConfig;
-
+export declare function narrowRepoConfig(repo: AnyRepoConfig): DefaultRepoConfig | UserRepoConfig;
+//#endregion
+//#region src/repos/store.d.ts
 /**
  * In-memory CRUD store for `repos.json`.
  *
@@ -1997,167 +2218,167 @@ declare function narrowRepoConfig(repo: AnyRepoConfig): DefaultRepoConfig | User
  * so tests can run without lingering watchers.
  */
 /** Mutating event from the store. */
-type ReposStoreChange = {
-    kind: "load";
-    config: ReposFile;
+export type ReposStoreChange = {
+  kind: "load";
+  config: ReposFile;
 } | {
-    kind: "add";
-    repo: AnyRepoConfig;
+  kind: "add";
+  repo: AnyRepoConfig;
 } | {
-    kind: "update";
-    repo: AnyRepoConfig;
+  kind: "update";
+  repo: AnyRepoConfig;
 } | {
-    kind: "remove";
-    repoId: string;
+  kind: "remove";
+  repoId: string;
 } | {
-    kind: "default-change";
-    defaultRepoId: string;
+  kind: "default-change";
+  defaultRepoId: string;
 } | {
-    kind: "error";
-    error: Error;
+  kind: "error";
+  error: Error;
 };
 /** Subscriber callback. */
-type ReposStoreListener = (change: ReposStoreChange) => void;
+export type ReposStoreListener = (change: ReposStoreChange) => void;
 /** Dependencies — defaults to the real fs, tests inject a fake. */
-interface ReposStoreFileSystem {
-    watch: typeof fs$1.watch;
-}
-interface ReposStoreOptions {
-    /** Use an explicit loader (defaults to one wrapping the resolved configPath). */
-    loader?: ReposLoader;
-    /** File-system watch implementation — defaults to `fs.watch`. */
-    fileSystem?: ReposStoreFileSystem;
-    /** Time provider for `addedAt` stamping. */
-    now?: () => string;
-    /**
-     * Debounce window for `fs.watch` callbacks. Editors sometimes emit
-     * multiple `change` events for a single logical write — coalesce them.
-     * Defaults to 50ms.
-     */
-    debounceMs?: number;
-    /**
-     * Watch implementation factory — defaults to a no-deps wrapper around
-     * `fs.watch`. Tests inject a fake watcher here. The store wires the
-     * returned handle to its own schedule/error flow via the supplied
-     * callbacks.
-     */
-    createFsWatcher?: (configPath: string, callbacks: FsWatcherCallbacks) => FsWatcherHandle;
+export interface ReposStoreFileSystem {
+  watch: typeof fs.watch;
+}
+export interface ReposStoreOptions {
+  /** Use an explicit loader (defaults to one wrapping the resolved configPath). */
+  loader?: ReposLoader;
+  /** File-system watch implementation — defaults to `fs.watch`. */
+  fileSystem?: ReposStoreFileSystem;
+  /** Time provider for `addedAt` stamping. */
+  now?: () => string;
+  /**
+   * Debounce window for `fs.watch` callbacks. Editors sometimes emit
+   * multiple `change` events for a single logical write — coalesce them.
+   * Defaults to 50ms.
+   */
+  debounceMs?: number;
+  /**
+   * Watch implementation factory — defaults to a no-deps wrapper around
+   * `fs.watch`. Tests inject a fake watcher here. The store wires the
+   * returned handle to its own schedule/error flow via the supplied
+   * callbacks.
+   */
+  createFsWatcher?: (configPath: string, callbacks: FsWatcherCallbacks) => FsWatcherHandle;
 }
 /**
  * Minimal subset of `fs.FSWatcher` that the store depends on. Defining our
  * own type lets tests inject a fake without dragging in real fs handles.
  */
-interface FsWatcherHandle {
-    close(): void;
+export interface FsWatcherHandle {
+  close(): void;
 }
 /**
  * Callbacks the store wires to a watcher. The default `fs.watch` factory
  * uses these to forward events into `scheduleReload` / `error` emission;
  * tests can ignore them when they only care about lifecycle.
  */
-interface FsWatcherCallbacks {
-    onChange?: () => void;
-    onRename?: () => void;
-    onError?: (err: Error) => void;
-}
-declare class ReposStore {
-    private readonly loader;
-    private readonly fileSystem;
-    private readonly now;
-    private readonly debounceMs;
-    private readonly createFsWatcher;
-    private config;
-    private readonly emitter;
-    private watcher;
-    private reloadTimer;
-    private lastLoadResult;
-    constructor(options?: ReposStoreOptions);
-    /** Currently held config, or `null` if `load()` has not been called yet. */
-    getConfig(): ReposFile | null;
-    /** Path of the underlying `repos.json` file (via the loader). */
-    getConfigPath(): string;
-    /** Subscribe to store mutations. Returns an unsubscribe function. */
-    subscribe(listener: ReposStoreListener): () => void;
-    /**
-     * Read the config from disk (delegating to the loader) and seed the
-     * in-memory state. Safe to call repeatedly.
-     */
-    load(): Promise<LoadResult>;
-    /** Convenience getter — wraps `load()` and returns the config. */
-    ensureLoaded(): Promise<ReposFile>;
-    /** The most recent `LoadResult`, useful for surfacing recovery warnings. */
-    getLastLoadResult(): LoadResult | null;
-    /**
-     * Start watching the config file for external changes. Subsequent writes
-     * (or edits from another process) trigger a debounced re-load.
-     *
-     * No-op when already watching.
-     */
-    startWatching(): void;
-    /** Stop watching and release any pending reload timers. */
-    stopWatching(): void;
-    list(): AnyRepoConfig[];
-    listDefault(): AnyRepoConfig[];
-    listUser(): UserRepoConfig[];
-    get(repoId: string): AnyRepoConfig | undefined;
-    /**
-     * Add a user repo. Throws when the id already exists. The `addedAt`
-     * timestamp defaults to `now()` when not provided. Persists to disk.
-     */
-    addUserRepo(input: Omit<UserRepoConfig, "source">): Promise<UserRepoConfig>;
-    /**
-     * Update an existing repo by id (partial). Throws when not found.
-     * Persists to disk.
-     */
-    updateRepo(repoId: string, patch: Partial<RepoConfig>): Promise<AnyRepoConfig>;
-    /**
-     * Remove a user repo. Throws when the repo is a default or does not exist.
-     * Persists to disk.
-     */
-    removeUserRepo(repoId: string): Promise<void>;
-    /**
-     * Disable a repo (any source). Useful for the "Disable" button on default
-     * repos. Persists to disk.
-     */
-    disableRepo(repoId: string): Promise<AnyRepoConfig>;
-    /** Inverse of {@link disableRepo}. */
-    enableRepo(repoId: string): Promise<AnyRepoConfig>;
-    /** Change which repo the UI surfaces as the default. Persists to disk. */
-    setDefaultRepoId(repoId: string): Promise<void>;
-    getDefaultRepoId(): string | null;
-    /** Returns the configured `now` provider — exposed for `bootstrapDefaults`. */
-    getNow(): () => string;
-    /**
-     * Replace the in-memory config and persist it. Used by helpers like
-     * `bootstrapDefaults` that build a new config wholesale (rather than
-     * mutating a single field).
-     */
-    replaceConfig(next: ReposFile): Promise<ReposFile>;
-    private mutate;
-    private emit;
-    /**
-     * Default `fs.watch` adapter. Public so tests can wrap a real watcher
-     * with a debounce trampoline if they need to.
-     */
-    private defaultCreateFsWatcher;
-    private scheduleReload;
+export interface FsWatcherCallbacks {
+  onChange?: () => void;
+  onRename?: () => void;
+  onError?: (err: Error) => void;
+}
+export declare class ReposStore {
+  private readonly loader;
+  private readonly fileSystem;
+  private readonly now;
+  private readonly debounceMs;
+  private readonly createFsWatcher;
+  private config;
+  private readonly emitter;
+  private watcher;
+  private reloadTimer;
+  private lastLoadResult;
+  constructor(options?: ReposStoreOptions);
+  /** Currently held config, or `null` if `load()` has not been called yet. */
+  getConfig(): ReposFile | null;
+  /** Path of the underlying `repos.json` file (via the loader). */
+  getConfigPath(): string;
+  /** Subscribe to store mutations. Returns an unsubscribe function. */
+  subscribe(listener: ReposStoreListener): () => void;
+  /**
+   * Read the config from disk (delegating to the loader) and seed the
+   * in-memory state. Safe to call repeatedly.
+   */
+  load(): Promise<LoadResult>;
+  /** Convenience getter — wraps `load()` and returns the config. */
+  ensureLoaded(): Promise<ReposFile>;
+  /** The most recent `LoadResult`, useful for surfacing recovery warnings. */
+  getLastLoadResult(): LoadResult | null;
+  /**
+   * Start watching the config file for external changes. Subsequent writes
+   * (or edits from another process) trigger a debounced re-load.
+   *
+   * No-op when already watching.
+   */
+  startWatching(): void;
+  /** Stop watching and release any pending reload timers. */
+  stopWatching(): void;
+  list(): AnyRepoConfig[];
+  listDefault(): AnyRepoConfig[];
+  listUser(): UserRepoConfig[];
+  get(repoId: string): AnyRepoConfig | undefined;
+  /**
+   * Add a user repo. Throws when the id already exists. The `addedAt`
+   * timestamp defaults to `now()` when not provided. Persists to disk.
+   */
+  addUserRepo(input: Omit<UserRepoConfig, "source">): Promise<UserRepoConfig>;
+  /**
+   * Update an existing repo by id (partial). Throws when not found.
+   * Persists to disk.
+   */
+  updateRepo(repoId: string, patch: Partial<RepoConfig>): Promise<AnyRepoConfig>;
+  /**
+   * Remove a user repo. Throws when the repo is a default or does not exist.
+   * Persists to disk.
+   */
+  removeUserRepo(repoId: string): Promise<void>;
+  /**
+   * Disable a repo (any source). Useful for the "Disable" button on default
+   * repos. Persists to disk.
+   */
+  disableRepo(repoId: string): Promise<AnyRepoConfig>;
+  /** Inverse of {@link disableRepo}. */
+  enableRepo(repoId: string): Promise<AnyRepoConfig>;
+  /** Change which repo the UI surfaces as the default. Persists to disk. */
+  setDefaultRepoId(repoId: string): Promise<void>;
+  getDefaultRepoId(): string | null;
+  /** Returns the configured `now` provider — exposed for `bootstrapDefaults`. */
+  getNow(): () => string;
+  /**
+   * Replace the in-memory config and persist it. Used by helpers like
+   * `bootstrapDefaults` that build a new config wholesale (rather than
+   * mutating a single field).
+   */
+  replaceConfig(next: ReposFile): Promise<ReposFile>;
+  private mutate;
+  private emit;
+  /**
+   * Default `fs.watch` adapter. Public so tests can wrap a real watcher
+   * with a debounce trampoline if they need to.
+   */
+  private defaultCreateFsWatcher;
+  private scheduleReload;
 }
 /** Factory: creates a `ReposStore` bound to a specific config path. */
-declare function createReposStore(configPath: string, options?: Omit<ReposStoreOptions, "loader">): ReposStore;
+export declare function createReposStore(configPath: string, options?: Omit<ReposStoreOptions, "loader">): ReposStore;
 /** Error: tried to add a repo whose id already exists. */
-declare class RepoAlreadyExistsError extends Error {
-    readonly repoId: string;
-    constructor(repoId: string);
+export declare class RepoAlreadyExistsError extends Error {
+  readonly repoId: string;
+  constructor(repoId: string);
 }
 /** Error: looked up a repo id that isn't present in the current config. */
-declare class RepoNotFoundError extends Error {
-    readonly repoId: string;
-    constructor(repoId: string);
+export declare class RepoNotFoundError extends Error {
+  readonly repoId: string;
+  constructor(repoId: string);
 }
 /** Error: tried to remove a default repo (defaults are disable-only). */
-declare class CannotRemoveDefaultRepoError extends Error {
-    readonly repoId: string;
-    constructor(repoId: string);
+export declare class CannotRemoveDefaultRepoError extends Error {
+  readonly repoId: string;
+  constructor(repoId: string);
 }
 /**
  * Bootstrap helper — invokes `ensureDefaultsInstalled` on the store to
@@ -2166,8 +2387,9 @@ declare class CannotRemoveDefaultRepoError extends Error {
  * Lives here (not in `default-repos.ts`) to keep the default-repo module
  * free of store concerns.
  */
-declare function bootstrapDefaults(store: ReposStore): Promise<ReposFile>;
-
+export declare function bootstrapDefaults(store: ReposStore): Promise<ReposFile>;
+//#endregion
+//#region src/repo-manager/index.d.ts
 /**
  * Skill & Agent v2 — Client RepoManager (M3)
  *
@@ -2190,181 +2412,179 @@ declare function bootstrapDefaults(store: ReposStore): Promise<ReposFile>;
  *
  * @see docs/architecture/skill-agent-v2-repo.md §5.3 RepoManager
  */
-interface RepoManagerOptions {
-    store: ReposStore;
-    gitClient: GitClient;
-    /** Override the clock for deterministic tests. */
-    now?: () => string;
-    /** Skip the actual git clone (used by tests). When true, the
-     *  filesystem-side mkdir is the only side effect. */
-    skipClone?: boolean;
-}
-interface AddUserRepoInput {
-    /** Upstream URL the user pasted in. */
-    url: string;
-    /** Branch to track. Auto-detected from upstream when omitted. */
-    branch?: string;
-    /** Optional display name (defaults to id). */
-    name?: string;
-    /** Whether this repo participates in scheduled syncs. Defaults to true. */
-    enabled?: boolean;
-    /** Route git traffic via the server proxy (default true). */
-    useProxy?: boolean;
-}
-interface AddUserRepoResult {
-    repo: UserRepoConfig;
-    branch: string;
-    cloned: boolean;
+export interface RepoManagerOptions {
+  store: ReposStore;
+  gitClient: GitClient;
+  /** Override the clock for deterministic tests. */
+  now?: () => string;
+  /** Skip the actual git clone (used by tests). When true, the
+   *  filesystem-side mkdir is the only side effect. */
+  skipClone?: boolean;
+}
+export interface AddUserRepoInput {
+  /** Upstream URL the user pasted in. */
+  url: string;
+  /** Branch to track. Auto-detected from upstream when omitted. */
+  branch?: string;
+  /** Optional display name (defaults to id). */
+  name?: string;
+  /** Whether this repo participates in scheduled syncs. Defaults to true. */
+  enabled?: boolean;
+  /** Route git traffic via the server proxy (default true). */
+  useProxy?: boolean;
+}
+export interface AddUserRepoResult {
+  repo: UserRepoConfig;
+  branch: string;
+  cloned: boolean;
 }
 /** Snapshot of a sync run, suitable for UI rendering. */
-interface SyncReport {
-    pulls: Array<{
-        repoId: string;
-        status: "ok" | "error";
-        result?: PullResult;
-        error?: string;
-    }>;
+export interface SyncReport {
+  pulls: Array<{
+    repoId: string;
+    status: "ok" | "error";
+    result?: PullResult;
+    error?: string;
+  }>;
 }
 /** Sentinel errors. */
-declare class RepoManagerError extends Error {
-    constructor(message: string);
-}
-declare class InvalidRepoUrlError extends RepoManagerError {
-}
-declare class RepoCloneConflictError extends RepoManagerError {
-}
-declare class RepoNotInStoreError extends RepoManagerError {
-}
-declare class RepoManager {
-    private readonly store;
-    private readonly git;
-    private readonly now;
-    private readonly skipClone;
-    constructor(opts: RepoManagerOptions);
-    /**
-     * Clone every enabled default repo that doesn't have a local clone
-     * yet. Failures on individual repos are recorded in `lastSyncStatus`
-     * but do NOT abort the loop — the UI surfaces per-repo state and the
-     * user can retry.
-     *
-     * Per spec §3.1: iterate all default repos; the loop honors `enabled=false` and
-     * disables (rather than removes) repos the user has turned off.
-     */
-    ensureDefaults(): Promise<SyncReport>;
-    /**
-     * Pull a single repo. Updates `lastSync*` fields on success or failure.
-     * Returns the raw `PullResult` so callers can surface fetch progress.
-     */
-    pullOne(repoId: string): Promise<PullResult>;
-    /** Pull every enabled repo. Per-repo failures don't abort the run. */
-    pullAll(): Promise<SyncReport>;
-    /**
-     * Ensure a repository exists locally and is detached at an exact
-     * commit. Used by Copilot content restoration: never pulls to a
-     * branch head, so a declaration always resolves to the reviewed
-     * content on every machine.
-     */
-    ensureAtCommit(input: {
-        repository: Pick<RepoConfig, "id" | "url" | "useProxy">;
-        commit: string;
-    }): Promise<{
-        localPath: string;
-        commit: string;
-    }>;
-    /**
-     * Ensure a v2 catalog source is materialized under repos/<sourceId>
-     * exactly like a git checkout (Task 10, ruling #1).
-     *
-     * The catalog store (repos.json) never held catalog sources, so the
-     * source-lifecycle task owns this path: content arrives from the
-     * provider as an extracted tree, is unpacked under the managed
-     * source directory, and is verified against the immutable digest
-     * before the directory becomes visible to resolvers.
-     *
-     * Callers that only need the directory contract (source availability
-     * is a reposDir/<source-id> directory check) can pass a provider
-     * that stages the tree; the method itself never writes store
-     * entries — marketplace sources stay manifest-only.
-     */
-    ensureCatalogSource(input: {
-        sourceId: string;
-        provider: {
-            /** Stage the catalog payload into the target directory. */
-            materialize: (targetDir: string) => Promise<void>;
-        };
-    }): Promise<{
-        localPath: string;
-    }>;
-    /**
-     * Resolve a unique store id for a repo being added.
-     *
-     * The base id derives from the URL (`owner-repo`). When it is taken
-     * by the SAME url with a DIFFERENT branch — user repo or platform
-     * default alike — derive `base-<branch>` so users can track several
-     * branches of one repository side by side. Genuine duplicates (same
-     * url + same branch) and cross-url id collisions still throw
-     * RepoCloneConflictError.
-     */
-    private resolveUserRepoId;
-    /**
-     * Validate URL, derive an id, detect the branch via `git ls-remote`,
-     * then add the entry to the store and trigger a clone.
-     *
-     * The base id derives from the URL. Re-adding the same URL with a
-     * different branch is allowed — it gets a branch-suffixed id
-     * (`owner-repo-<branch>`) so multiple branches of one repository can
-     * be tracked side by side.
-     *
-     * Spec §5.3 says "branch detection" happens BEFORE the store write so
-     * the resulting `repos.json` is fully populated. The clone is async
-     * but the function returns synchronously once the store is updated
-     * (cloning happens via `ensureDefaults`-style background fire).
-     *
-     * For tests with `skipClone: true`, the clone is skipped entirely.
-     */
-    addUserRepo(input: AddUserRepoInput): Promise<AddUserRepoResult>;
-    /**
-     * Remove a user-added repo. Throws when:
-     *   - the repo is unknown
-     *   - the repo is a default (use `disableRepo` instead — store enforces)
-     *
-     * The local clone is deleted via `fs.rm`. If the local dir is
-     * already gone we silently succeed (idempotent re-remove).
-     */
-    removeUserRepo(repoId: string): Promise<void>;
-    disableRepo(repoId: string): Promise<AnyRepoConfig>;
-    enableRepo(repoId: string): Promise<AnyRepoConfig>;
-    /** `true` when `~/.serviceme/repos/<id>/` exists on disk. */
-    hasLocalClone(repoId: string): Promise<boolean>;
-    /** Force-create the SERVICEME home directory tree (idempotent). */
-    ensureHome(): Promise<void>;
-    /**
-     * Returns `true` when `p` contains a `.git` entry — i.e. it is an
-     * initialised git repository and safe to `pull`. Empty directories
-     * (e.g. from an interrupted clone) return `false`.
-     */
-    private isValidGitRepo;
-    private pathExists;
-}
-
+export declare class RepoManagerError extends Error {
+  constructor(message: string);
+}
+export declare class InvalidRepoUrlError extends RepoManagerError {}
+export declare class RepoCloneConflictError extends RepoManagerError {}
+export declare class RepoNotInStoreError extends RepoManagerError {}
+export declare class RepoManager {
+  private readonly store;
+  private readonly git;
+  private readonly now;
+  private readonly skipClone;
+  constructor(opts: RepoManagerOptions);
+  /**
+   * Clone every enabled default repo that doesn't have a local clone
+   * yet. Failures on individual repos are recorded in `lastSyncStatus`
+   * but do NOT abort the loop — the UI surfaces per-repo state and the
+   * user can retry.
+   *
+   * Per spec §3.1: iterate all default repos; the loop honors `enabled=false` and
+   * disables (rather than removes) repos the user has turned off.
+   */
+  ensureDefaults(): Promise<SyncReport>;
+  /**
+   * Pull a single repo. Updates `lastSync*` fields on success or failure.
+   * Returns the raw `PullResult` so callers can surface fetch progress.
+   */
+  pullOne(repoId: string): Promise<PullResult>;
+  /** Pull every enabled repo. Per-repo failures don't abort the run. */
+  pullAll(): Promise<SyncReport>;
+  /**
+   * Ensure a repository exists locally and is detached at an exact
+   * commit. Used by Copilot content restoration: never pulls to a
+   * branch head, so a declaration always resolves to the reviewed
+   * content on every machine.
+   */
+  ensureAtCommit(input: {
+    repository: Pick<RepoConfig, "id" | "url" | "useProxy">;
+    commit: string;
+  }): Promise<{
+    localPath: string;
+    commit: string;
+  }>;
+  /**
+   * Ensure a v2 catalog source is materialized under repos/<sourceId>
+   * exactly like a git checkout (Task 10, ruling #1).
+   *
+   * The catalog store (repos.json) never held catalog sources, so the
+   * source-lifecycle task owns this path: content arrives from the
+   * provider as an extracted tree, is unpacked under the managed
+   * source directory, and is verified against the immutable digest
+   * before the directory becomes visible to resolvers.
+   *
+   * Callers that only need the directory contract (source availability
+   * is a reposDir/<source-id> directory check) can pass a provider
+   * that stages the tree; the method itself never writes store
+   * entries — marketplace sources stay manifest-only.
+   */
+  ensureCatalogSource(input: {
+    sourceId: string;
+    provider: {
+      /** Stage the catalog payload into the target directory. */
+      materialize: (targetDir: string) => Promise<void>;
+    };
+  }): Promise<{
+    localPath: string;
+  }>;
+  /**
+   * Resolve a unique store id for a repo being added.
+   *
+   * The base id derives from the URL (`owner-repo`). When it is taken
+   * by the SAME url with a DIFFERENT branch — user repo or platform
+   * default alike — derive `base-<branch>` so users can track several
+   * branches of one repository side by side. Genuine duplicates (same
+   * url + same branch) and cross-url id collisions still throw
+   * RepoCloneConflictError.
+   */
+  private resolveUserRepoId;
+  /**
+   * Validate URL, derive an id, detect the branch via `git ls-remote`,
+   * then add the entry to the store and trigger a clone.
+   *
+   * The base id derives from the URL. Re-adding the same URL with a
+   * different branch is allowed — it gets a branch-suffixed id
+   * (`owner-repo-<branch>`) so multiple branches of one repository can
+   * be tracked side by side.
+   *
+   * Spec §5.3 says "branch detection" happens BEFORE the store write so
+   * the resulting `repos.json` is fully populated. The clone is async
+   * but the function returns synchronously once the store is updated
+   * (cloning happens via `ensureDefaults`-style background fire).
+   *
+   * For tests with `skipClone: true`, the clone is skipped entirely.
+   */
+  addUserRepo(input: AddUserRepoInput): Promise<AddUserRepoResult>;
+  /**
+   * Remove a user-added repo. Throws when:
+   *   - the repo is unknown
+   *   - the repo is a default (use `disableRepo` instead — store enforces)
+   *
+   * The local clone is deleted via `fs.rm`. If the local dir is
+   * already gone we silently succeed (idempotent re-remove).
+   */
+  removeUserRepo(repoId: string): Promise<void>;
+  disableRepo(repoId: string): Promise<AnyRepoConfig>;
+  enableRepo(repoId: string): Promise<AnyRepoConfig>;
+  /** `true` when `~/.serviceme/repos/<id>/` exists on disk. */
+  hasLocalClone(repoId: string): Promise<boolean>;
+  /** Force-create the SERVICEME home directory tree (idempotent). */
+  ensureHome(): Promise<void>;
+  /**
+   * Returns `true` when `p` contains a `.git` entry — i.e. it is an
+   * initialised git repository and safe to `pull`. Empty directories
+   * (e.g. from an interrupted clone) return `false`.
+   */
+  private isValidGitRepo;
+  private pathExists;
+}
+//#endregion
+//#region src/repos/default-repos.d.ts
 /**
  * Hard-coded catalog of repositories SERVICEME ships with. The id, URL and
  * branch are pinned by the design doc (§12) and **must not** change without
  * an owner-approved migration. The order here mirrors the on-disk
  * `repos.json` order (§3.1) which the UI relies on.
  */
-declare const DEFAULT_REPO_ID = "medalsoftchina-ms-skills";
+export declare const DEFAULT_REPO_ID = "medalsoftchina-ms-skills";
 declare const FIXED_ADDED_AT = "2026-06-29T00:00:00.000Z";
 /** Returns a deep-ish clone of every default repo with a fresh `addedAt`. */
-declare function getAllDefaultRepoConfigs(now?: () => string): DefaultRepoConfig[];
+export declare function getAllDefaultRepoConfigs(now?: () => string): DefaultRepoConfig[];
 /** Returns a single default repo by id, or `undefined` when not in the catalog. */
-declare function getDefaultRepoConfig(id: string, now?: () => string): DefaultRepoConfig | undefined;
+export declare function getDefaultRepoConfig(id: string, now?: () => string): DefaultRepoConfig | undefined;
 /**
  * Idempotent: returns a fresh `ReposFile` containing the default set, or —
  * when `existing` already has all defaults — returns it untouched (still cloned
  * to keep callers from accidentally mutating shared state).
  */
-declare function buildDefaultReposFile(now?: () => string, existing?: ReposFile): ReposFile;
+export declare function buildDefaultReposFile(now?: () => string, existing?: ReposFile): ReposFile;
 /**
  * `ensureDefaultsInstalled(existing)` — pure helper that returns either
  * `existing` (when defaults are already present and up to date) or a merged
@@ -2372,318 +2592,331 @@ declare function buildDefaultReposFile(now?: () => string, existing?: ReposFile)
  * existing ones. The companion `ensureDefaultsInstalledInStore` below is the
  * mutating, store-bound counterpart.
  */
-declare function ensureDefaultsInstalled(existing: ReposFile, now?: () => string): {
-    config: ReposFile;
-    installed: string[];
+export declare function ensureDefaultsInstalled(existing: ReposFile, now?: () => string): {
+  config: ReposFile;
+  installed: string[];
 };
-
-declare class DaemonLogger {
-    private readonly logPath;
-    constructor(workspacePath: string, options?: {
-        logPath?: string;
-    });
-    getLogPath(): string;
-    log(level: "info" | "warn" | "error", message: string): void;
-    private rotateIfNeeded;
-}
-
+//#endregion
+//#region src/scheduled-tasks/daemon/DaemonLogger.d.ts
+export declare class DaemonLogger {
+  private readonly logPath;
+  constructor(workspacePath: string, options?: {
+    logPath?: string;
+  });
+  getLogPath(): string;
+  log(level: "info" | "warn" | "error", message: string): void;
+  private rotateIfNeeded;
+}
+//#endregion
+//#region src/scheduled-tasks/daemon/PidManager.d.ts
 interface PidManagerOptions {
-    /**
-     * Override the on-disk PID path. Defaults to
-     * `<workspacePath>/.serviceme/scheduler.pid` for backward compat.
-     * V2 callers pass an absolute path (e.g. `getSchedulerPidPath()`)
-     * to read the global daemon PID file.
-     */
-    pidPath?: string;
-}
-declare class PidManager {
-    private readonly pidPath;
-    constructor(workspacePath: string, options?: PidManagerOptions);
-    getPidPath(): string;
-    writePid(pid: number): void;
-    readPid(): number | null;
-    removePid(): void;
-    isProcessRunning(pid: number): boolean;
-    getRunningPid(): number | null;
-}
-
+  /**
+   * Override the on-disk PID path. Defaults to
+   * `<workspacePath>/.serviceme/scheduler.pid` for backward compat.
+   * V2 callers pass an absolute path (e.g. `getSchedulerPidPath()`)
+   * to read the global daemon PID file.
+   */
+  pidPath?: string;
+}
+export declare class PidManager {
+  private readonly pidPath;
+  constructor(workspacePath: string, options?: PidManagerOptions);
+  getPidPath(): string;
+  writePid(pid: number): void;
+  readPid(): number | null;
+  removePid(): void;
+  isProcessRunning(pid: number): boolean;
+  getRunningPid(): number | null;
+}
+//#endregion
+//#region src/scheduled-tasks/executors/types.d.ts
 interface ExecutorResult {
-    status: TaskExecutionStatus;
-    output?: string;
-    error?: string;
+  status: TaskExecutionStatus;
+  output?: string;
+  error?: string;
 }
 interface TaskExecutor {
-    execute(payload: unknown, abortSignal?: AbortSignal): Promise<ExecutorResult>;
+  execute(payload: unknown, abortSignal?: AbortSignal): Promise<ExecutorResult>;
 }
 type OutputEventCallback = (stream: "stdout" | "stderr", data: string) => void;
 interface StreamingExecutorHandle {
-    result: Promise<ExecutorResult>;
-    cancel: () => void;
+  result: Promise<ExecutorResult>;
+  cancel: () => void;
 }
 interface StreamingTaskExecutor extends TaskExecutor {
-    executeStreaming(payload: unknown, onOutput: OutputEventCallback, abortSignal?: AbortSignal): StreamingExecutorHandle;
-}
-declare function isStreamingTaskExecutor(executor: TaskExecutor): executor is StreamingTaskExecutor;
-
-declare class GithubCopilotCliExecutor implements StreamingTaskExecutor {
-    execute(payload: unknown, abortSignal?: AbortSignal): Promise<ExecutorResult>;
-    executeStreaming(payload: unknown, onOutput: OutputEventCallback, abortSignal?: AbortSignal): StreamingExecutorHandle;
-}
-
-declare class HttpRequestExecutor implements TaskExecutor {
-    execute(payload: unknown, abortSignal?: AbortSignal): Promise<ExecutorResult>;
-}
-
-declare class ShellExecutor implements StreamingTaskExecutor {
-    execute(payload: unknown, abortSignal?: AbortSignal): Promise<ExecutorResult>;
-    executeStreaming(payload: unknown, onOutput: OutputEventCallback, abortSignal?: AbortSignal): StreamingExecutorHandle;
-}
-
-declare function getExecutor(taskType: ScheduledTaskType): TaskExecutor;
-
-declare function validateTaskPayload(taskType: ScheduledTaskType, payload: TaskPayload): void;
+  executeStreaming(payload: unknown, onOutput: OutputEventCallback, abortSignal?: AbortSignal): StreamingExecutorHandle;
+}
+export declare function isStreamingTaskExecutor(executor: TaskExecutor): executor is StreamingTaskExecutor;
+//#endregion
+//#region src/scheduled-tasks/executors/GithubCopilotCliExecutor.d.ts
+export declare class GithubCopilotCliExecutor implements StreamingTaskExecutor {
+  execute(payload: unknown, abortSignal?: AbortSignal): Promise<ExecutorResult>;
+  executeStreaming(payload: unknown, onOutput: OutputEventCallback, abortSignal?: AbortSignal): StreamingExecutorHandle;
+}
+//#endregion
+//#region src/scheduled-tasks/executors/HttpRequestExecutor.d.ts
+export declare class HttpRequestExecutor implements TaskExecutor {
+  execute(payload: unknown, abortSignal?: AbortSignal): Promise<ExecutorResult>;
+}
+//#endregion
+//#region src/scheduled-tasks/executors/ShellExecutor.d.ts
+export declare class ShellExecutor implements StreamingTaskExecutor {
+  execute(payload: unknown, abortSignal?: AbortSignal): Promise<ExecutorResult>;
+  executeStreaming(payload: unknown, onOutput: OutputEventCallback, abortSignal?: AbortSignal): StreamingExecutorHandle;
+}
+//#endregion
+//#region src/scheduled-tasks/executors/index.d.ts
+export declare function getExecutor(taskType: ScheduledTaskType): TaskExecutor;
+//#endregion
+//#region src/scheduled-tasks/TaskConfigManager.d.ts
+export declare function validateTaskPayload(taskType: ScheduledTaskType, payload: TaskPayload): void;
 interface CreateTaskInput {
-    name: string;
-    description?: string;
-    scheduleType: "cron" | "interval";
-    schedule: string;
-    taskType: ScheduledTaskType;
-    payload: TaskPayload;
-    workspace: TaskWorkspaceRef;
-    enabled?: boolean;
+  name: string;
+  description?: string;
+  scheduleType: "cron" | "interval";
+  schedule: string;
+  taskType: ScheduledTaskType;
+  payload: TaskPayload;
+  workspace: TaskWorkspaceRef;
+  enabled?: boolean;
 }
 interface EditTaskInput {
-    name?: string;
-    description?: string;
-    scheduleType?: "cron" | "interval";
-    schedule?: string;
-    taskType?: ScheduledTaskType;
-    payload?: TaskPayload;
-    workspace?: TaskWorkspaceRef;
-    enabled?: boolean;
+  name?: string;
+  description?: string;
+  scheduleType?: "cron" | "interval";
+  schedule?: string;
+  taskType?: ScheduledTaskType;
+  payload?: TaskPayload;
+  workspace?: TaskWorkspaceRef;
+  enabled?: boolean;
 }
 interface TaskConfigManagerOptions {
-    /**
-     * Override the on-disk config path. Defaults to the global
-     * `~/.serviceme/scheduled-tasks.json`. Tests use this to point at a tmp
-     * directory; production code should leave it unset.
-     */
-    configPath?: string;
-    /**
-     * Workspace context used when a legacy v1 config is read. v1 tasks had no
-     * per-task workspace, so the manager needs a fallback to attach when
-     * auto-migrating. Required only if the underlying file might still be v1.
-     */
-    workspaceContext?: TaskWorkspaceRef;
-    /**
-     * Override the path where malformed-config diagnostic entries are appended.
-     * Defaults to `~/.serviceme/migration-failures.json`. Tests can point at a
-     * tmp file to assert failures were recorded.
-     */
-    migrationFailuresPath?: string;
-    /**
-     * Inject a logger for the manager's recovery / migration warnings. Defaults
-     * to `console.warn`. Tests pass a `vi.fn`/`mock.fn` to assert the warnings
-     * were emitted.
-     */
-    logger?: (message: string) => void;
-}
-declare class TaskConfigManager {
-    private readonly configPath;
-    private readonly workspaceContext?;
-    private readonly migrationFailuresPath?;
-    private readonly logger?;
-    constructor(options?: TaskConfigManagerOptions);
-    getConfigPath(): string;
-    readConfig(): ScheduledTasksConfig;
-    private warn;
-    private recordMalformedConfigFailure;
-    private writeConfig;
-    listTasks(): ScheduledTask[];
-    getTask(id: string): ScheduledTask | undefined;
-    getTaskByName(name: string): ScheduledTask | undefined;
-    createTask(input: CreateTaskInput): ScheduledTask;
-    editTask(id: string, input: EditTaskInput): ScheduledTask;
-    deleteTask(id: string): ScheduledTask;
-    toggleTask(id: string, enabled: boolean): ScheduledTask;
-}
-
+  /**
+   * Override the on-disk config path. Defaults to the global
+   * `~/.serviceme/scheduled-tasks.json`. Tests use this to point at a tmp
+   * directory; production code should leave it unset.
+   */
+  configPath?: string;
+  /**
+   * Workspace context used when a legacy v1 config is read. v1 tasks had no
+   * per-task workspace, so the manager needs a fallback to attach when
+   * auto-migrating. Required only if the underlying file might still be v1.
+   */
+  workspaceContext?: TaskWorkspaceRef;
+  /**
+   * Override the path where malformed-config diagnostic entries are appended.
+   * Defaults to `~/.serviceme/migration-failures.json`. Tests can point at a
+   * tmp file to assert failures were recorded.
+   */
+  migrationFailuresPath?: string;
+  /**
+   * Inject a logger for the manager's recovery / migration warnings. Defaults
+   * to `console.warn`. Tests pass a `vi.fn`/`mock.fn` to assert the warnings
+   * were emitted.
+   */
+  logger?: (message: string) => void;
+}
+export declare class TaskConfigManager {
+  private readonly configPath;
+  private readonly workspaceContext?;
+  private readonly migrationFailuresPath?;
+  private readonly logger?;
+  constructor(options?: TaskConfigManagerOptions);
+  getConfigPath(): string;
+  readConfig(): ScheduledTasksConfig;
+  private warn;
+  private recordMalformedConfigFailure;
+  private writeConfig;
+  listTasks(): ScheduledTask[];
+  getTask(id: string): ScheduledTask | undefined;
+  getTaskByName(name: string): ScheduledTask | undefined;
+  createTask(input: CreateTaskInput): ScheduledTask;
+  editTask(id: string, input: EditTaskInput): ScheduledTask;
+  deleteTask(id: string): ScheduledTask;
+  toggleTask(id: string, enabled: boolean): ScheduledTask;
+}
+//#endregion
+//#region src/scheduled-tasks/TaskLogManager.d.ts
 interface AppendLogInput {
-    taskId: string;
-    taskName: string;
-    startedAt: string;
-    finishedAt: string;
-    status: Exclude<TaskExecutionStatus, "running">;
-    output?: string;
-    error?: string;
+  taskId: string;
+  taskName: string;
+  startedAt: string;
+  finishedAt: string;
+  status: Exclude<TaskExecutionStatus, "running">;
+  output?: string;
+  error?: string;
 }
 interface TaskLogManagerOptions {
-    /**
-     * Override the on-disk log path. Defaults to the global
-     * `~/.serviceme/scheduled-tasks-log.json`. Tests use this to point at a
-     * tmp directory; production code should leave it unset.
-     */
-    logPath?: string;
-}
-declare class TaskLogManager {
-    private readonly logPath;
-    constructor(options?: TaskLogManagerOptions);
-    getLogPath(): string;
-    private readLogFile;
-    private backupCorruptedFile;
-    private writeLogFile;
-    appendLog(input: AppendLogInput): TaskExecutionLog;
-    getLogs(options?: {
-        taskId?: string;
-        limit?: number;
-    }): {
-        logs: TaskExecutionLog[];
-        total: number;
-    };
-    clearLogs(taskId?: string): number;
-}
-
+  /**
+   * Override the on-disk log path. Defaults to the global
+   * `~/.serviceme/scheduled-tasks-log.json`. Tests use this to point at a
+   * tmp directory; production code should leave it unset.
+   */
+  logPath?: string;
+}
+export declare class TaskLogManager {
+  private readonly logPath;
+  constructor(options?: TaskLogManagerOptions);
+  getLogPath(): string;
+  private readLogFile;
+  private backupCorruptedFile;
+  private writeLogFile;
+  appendLog(input: AppendLogInput): TaskExecutionLog;
+  getLogs(options?: {
+    taskId?: string;
+    limit?: number;
+  }): {
+    logs: TaskExecutionLog[];
+    total: number;
+  };
+  clearLogs(taskId?: string): number;
+}
+//#endregion
+//#region src/scheduled-tasks/daemon/SchedulerDaemonV2.d.ts
 interface SchedulerDaemonV2Options {
-    /**
-     * Override the executor factory. Production callers should leave this
-     * undefined; tests inject a fake to drive the execution branch without
-     * spawning real subprocesses.
-     */
-    getExecutor?: typeof getExecutor;
-    /** Override the config manager. Tests inject a fake pointing at a tmp dir. */
-    configManager?: TaskConfigManager;
-    /** Override the log manager. */
-    logManager?: TaskLogManager;
-    /** Override the PID manager. */
-    pidManager?: PidManager;
-    /** Override the daemon logger (for tests; the default writes to ~/.serviceme/scheduler.log). */
-    logger?: DaemonLogger;
-    /** Override the startup lock acquisition (tests use this to inject "lock held" / "lock free"). */
-    tryAcquireLock?: () => boolean;
-    /** Override the startup lock release. */
-    releaseLock?: () => void;
-    /**
-     * Override the PID file existence + process liveness check. Production
-     * reads PID file + `process.kill(pid, 0)`; tests inject a stub.
-     */
-    getRunningPid?: () => number | null;
-}
-declare class SchedulerDaemonV2 {
-    private readonly configManager;
-    private readonly logManager;
-    private readonly pidManager;
-    private readonly logger;
-    private readonly getExecutor;
-    private readonly tryAcquireLock;
-    private readonly releaseLock;
-    private readonly getRunningPid;
-    private tickTimer;
-    private running;
-    private readonly sigtermHandler;
-    private readonly sigintHandler;
-    private startTime;
-    private lastRun;
-    private workspaceLocks;
-    constructor(options?: SchedulerDaemonV2Options);
-    start(): void;
-    stop(): void;
-    private tick;
-    private disableTaskForMissingWorkspace;
-    private shouldRun;
-    private executeTask;
-    getStatus(): {
-        running: boolean;
-        pid: number;
-        uptimeSeconds: number | null;
-        tasksRegistered: number;
-        tasksEnabled: number;
-        pidFile: string;
-    };
-}
-
+  /**
+   * Override the executor factory. Production callers should leave this
+   * undefined; tests inject a fake to drive the execution branch without
+   * spawning real subprocesses.
+   */
+  getExecutor?: typeof getExecutor;
+  /** Override the config manager. Tests inject a fake pointing at a tmp dir. */
+  configManager?: TaskConfigManager;
+  /** Override the log manager. */
+  logManager?: TaskLogManager;
+  /** Override the PID manager. */
+  pidManager?: PidManager;
+  /** Override the daemon logger (for tests; the default writes to ~/.serviceme/scheduler.log). */
+  logger?: DaemonLogger;
+  /** Override the startup lock acquisition (tests use this to inject "lock held" / "lock free"). */
+  tryAcquireLock?: () => boolean;
+  /** Override the startup lock release. */
+  releaseLock?: () => void;
+  /**
+   * Override the PID file existence + process liveness check. Production
+   * reads PID file + `process.kill(pid, 0)`; tests inject a stub.
+   */
+  getRunningPid?: () => number | null;
+}
+export declare class SchedulerDaemonV2 {
+  private readonly configManager;
+  private readonly logManager;
+  private readonly pidManager;
+  private readonly logger;
+  private readonly getExecutor;
+  private readonly tryAcquireLock;
+  private readonly releaseLock;
+  private readonly getRunningPid;
+  private tickTimer;
+  private running;
+  private readonly sigtermHandler;
+  private readonly sigintHandler;
+  private startTime;
+  private lastRun;
+  private workspaceLocks;
+  constructor(options?: SchedulerDaemonV2Options);
+  start(): void;
+  stop(): void;
+  private tick;
+  private disableTaskForMissingWorkspace;
+  private shouldRun;
+  private executeTask;
+  getStatus(): {
+    running: boolean;
+    pid: number;
+    uptimeSeconds: number | null;
+    tasksRegistered: number;
+    tasksEnabled: number;
+    pidFile: string;
+  };
+}
+//#endregion
+//#region src/scheduled-tasks/migration/MigrateToGlobal.d.ts
 interface MigrateToGlobalOptions {
-    /**
-     * Workspace paths to scan for legacy v1 files. May include the current
-     * workspace + any persisted in `~/.serviceme/known-workspaces.json`.
-     */
-    workspacePaths: string[];
-    /**
-     * Workspace context to apply to each scanned file. The scanner calls the
-     * probe for each candidate path to populate path/name/git metadata.
-     * Tests can inject a stub that returns synthetic data.
-     */
-    probe?: (workspacePath: string) => Promise<TaskWorkspaceRef> | TaskWorkspaceRef;
-    /**
-     * Override the global config path. Tests use this; production should
-     * leave it unset to get the standard ~/.serviceme/scheduled-tasks.json.
-     */
-    globalConfigPath?: string;
-    /**
-     * Override the migration-failures path. Same convention.
-     */
-    migrationFailuresPath?: string;
+  /**
+   * Workspace paths to scan for legacy v1 files. May include the current
+   * workspace + any persisted in `~/.serviceme/known-workspaces.json`.
+   */
+  workspacePaths: string[];
+  /**
+   * Workspace context to apply to each scanned file. The scanner calls the
+   * probe for each candidate path to populate path/name/git metadata.
+   * Tests can inject a stub that returns synthetic data.
+   */
+  probe?: (workspacePath: string) => Promise<TaskWorkspaceRef> | TaskWorkspaceRef;
+  /**
+   * Override the global config path. Tests use this; production should
+   * leave it unset to get the standard ~/.serviceme/scheduled-tasks.json.
+   */
+  globalConfigPath?: string;
+  /**
+   * Override the migration-failures path. Same convention.
+   */
+  migrationFailuresPath?: string;
 }
 interface MigrationResult {
-    /** Number of v1 files successfully migrated into the global config. */
-    migrated: number;
-    /** Number of v1 files that failed to parse / migrate. */
-    failed: number;
-    /** Task names that had to be disambiguated because they appeared in multiple workspaces. */
-    conflicts: string[];
-    /** Soft issues surfaced by migrateV1ToV2 (e.g. unknown taskType). */
-    issues: string[];
+  /** Number of v1 files successfully migrated into the global config. */
+  migrated: number;
+  /** Number of v1 files that failed to parse / migrate. */
+  failed: number;
+  /** Task names that had to be disambiguated because they appeared in multiple workspaces. */
+  conflicts: string[];
+  /** Soft issues surfaced by migrateV1ToV2 (e.g. unknown taskType). */
+  issues: string[];
 }
 /**
  * Run the migration. Idempotent: each v1 file is deleted after processing,
  * so re-running this on a partially-migrated state is safe (the
  * already-migrated files no longer exist; only the remainder is processed).
  */
-declare function migrateToGlobal(options: MigrateToGlobalOptions): Promise<MigrationResult>;
-
+export declare function migrateToGlobal(options: MigrateToGlobalOptions): Promise<MigrationResult>;
+//#endregion
+//#region src/scheduled-tasks/TaskExecutionEngine.d.ts
 interface TaskEventListener {
-    onStarted(params: TaskStartedEventParams): void;
-    onOutput(params: TaskOutputEventParams): void;
-    onCompleted(params: TaskCompletedEventParams): void;
-    onFailed(params: TaskFailedEventParams): void;
-    onCancelled(params: TaskCancelledEventParams): void;
-}
-declare function resolveTaskExecutionPayload(taskType: ScheduledTaskType, payload: TaskPayload, workspacePath: string): TaskPayload;
-declare class TaskExecutionEngine {
-    private readonly getExecutor;
-    private readonly running;
-    private readonly taskExecutions;
-    private listener;
-    constructor(getExecutor: (taskType: string) => TaskExecutor);
-    setListener(listener: TaskEventListener): void;
-    execute(snapshot: TaskExecutionSnapshot): Promise<void>;
-    cancel(executionId: string): boolean;
-    listRunning(): RunningTaskInfo[];
-    dispose(): void;
-}
-
+  onStarted(params: TaskStartedEventParams): void;
+  onOutput(params: TaskOutputEventParams): void;
+  onCompleted(params: TaskCompletedEventParams): void;
+  onFailed(params: TaskFailedEventParams): void;
+  onCancelled(params: TaskCancelledEventParams): void;
+}
+export declare function resolveTaskExecutionPayload(taskType: ScheduledTaskType, payload: TaskPayload, workspacePath: string): TaskPayload;
+export declare class TaskExecutionEngine {
+  private readonly getExecutor;
+  private readonly running;
+  private readonly taskExecutions;
+  private listener;
+  constructor(getExecutor: (taskType: string) => TaskExecutor);
+  setListener(listener: TaskEventListener): void;
+  execute(snapshot: TaskExecutionSnapshot): Promise<void>;
+  cancel(executionId: string): boolean;
+  listRunning(): RunningTaskInfo[];
+  dispose(): void;
+}
+//#endregion
+//#region src/scheduled-tasks/workspace-probe/WorkspaceProbe.d.ts
 /** Result of probing a single workspace. */
 interface ProbeResult {
-    /** Always populated; empty fields are left undefined. */
-    workspace: TaskWorkspaceRef;
-    /** null on success; one of the {@link ProbeError} tags on failure. */
-    error: ProbeError | null;
+  /** Always populated; empty fields are left undefined. */
+  workspace: TaskWorkspaceRef;
+  /** null on success; one of the {@link ProbeError} tags on failure. */
+  error: ProbeError | null;
 }
 type ProbeError = "path-not-found" | "not-a-git-repo" | "git-timeout" | "git-error";
 interface ProbeOptions {
-    /** Timeout for each git invocation in ms. Default: 2000. */
-    timeoutMs?: number;
-    /** Override the git binary (default: 'git'). Tests inject a stub. */
-    gitBinary?: string;
-    /**
-     * Override the underlying runner. Receives the args + cwd and returns
-     * { stdout, stderr, code } on success, or throws on timeout. The default
-     * implementation spawns `gitBinary` with the given args.
-     */
-    runGit?: (args: string[], cwd: string) => Promise<{
-        stdout: string;
-        stderr: string;
-        code: number;
-    }>;
+  /** Timeout for each git invocation in ms. Default: 2000. */
+  timeoutMs?: number;
+  /** Override the git binary (default: 'git'). Tests inject a stub. */
+  gitBinary?: string;
+  /**
+   * Override the underlying runner. Receives the args + cwd and returns
+   * { stdout, stderr, code } on success, or throws on timeout. The default
+   * implementation spawns `gitBinary` with the given args.
+   */
+  runGit?: (args: string[], cwd: string) => Promise<{
+    stdout: string;
+    stderr: string;
+    code: number;
+  }>;
 }
 /**
  * Probes a workspace for git metadata. Returns a {@link ProbeResult} with
@@ -2691,117 +2924,121 @@ interface ProbeOptions {
  * descriptor is always populated so callers can still surface a partial
  * record.
  */
-declare class WorkspaceProbe {
-    private readonly timeoutMs;
-    private readonly gitBinary;
-    private readonly runGitFn;
-    constructor(options?: ProbeOptions);
-    probe(workspacePath: string): Promise<ProbeResult>;
-}
-
-interface SkillDownloadFile {
-    path: string;
-    content: string;
-    executable: boolean;
-}
-interface SkillStoreFileSystem {
-    readdir: typeof fs.readdir;
-    readFile: typeof fs.readFile;
-    writeFile: typeof fs.writeFile;
-    mkdir: typeof fs.mkdir;
-    chmod: typeof fs.chmod;
-}
-interface SkillStoreOptions {
-    workspacePath: string;
-    userSkillsRoot: string;
-    fileSystem?: SkillStoreFileSystem;
-}
-
-interface SkillCatalog {
-    skills: SkillMarketplaceEntry[];
-    fetchedAt: string;
-}
-interface SkillCatalogClientOptions {
-    fetchImpl?: typeof fetch;
-    baseUrl?: string;
-}
-declare class SkillCatalogClient {
-    private readonly fetchImpl;
-    private readonly baseUrl?;
-    constructor(options?: SkillCatalogClientOptions);
-    getCatalog(): Promise<SkillCatalog>;
-    downloadSkill(remoteId: string): Promise<SkillDownloadFile[]>;
-}
-
+export declare class WorkspaceProbe {
+  private readonly timeoutMs;
+  private readonly gitBinary;
+  private readonly runGitFn;
+  constructor(options?: ProbeOptions);
+  probe(workspacePath: string): Promise<ProbeResult>;
+}
+//#endregion
+//#region src/skills/types.d.ts
+export interface SkillDownloadFile {
+  path: string;
+  content: string;
+  executable: boolean;
+}
+export interface SkillStoreFileSystem {
+  readdir: typeof fs$1.readdir;
+  readFile: typeof fs$1.readFile;
+  writeFile: typeof fs$1.writeFile;
+  mkdir: typeof fs$1.mkdir;
+  chmod: typeof fs$1.chmod;
+}
+export interface SkillStoreOptions {
+  workspacePath: string;
+  userSkillsRoot: string;
+  fileSystem?: SkillStoreFileSystem;
+}
+//#endregion
+//#region src/skills/SkillCatalogClient.d.ts
+export interface SkillCatalog {
+  skills: SkillMarketplaceEntry[];
+  fetchedAt: string;
+}
+export interface SkillCatalogClientOptions {
+  fetchImpl?: typeof fetch;
+  baseUrl?: string;
+}
+export declare class SkillCatalogClient {
+  private readonly fetchImpl;
+  private readonly baseUrl?;
+  constructor(options?: SkillCatalogClientOptions);
+  getCatalog(): Promise<SkillCatalog>;
+  downloadSkill(remoteId: string): Promise<SkillDownloadFile[]>;
+}
+//#endregion
+//#region src/skills/SkillReconciler.d.ts
 interface CatalogSkillLike {
-    id: string;
-    hasScripts?: boolean;
-    hasHooks?: boolean;
+  id: string;
+  hasScripts?: boolean;
+  hasHooks?: boolean;
 }
 interface CatalogLike {
-    skills: CatalogSkillLike[];
-    fetchedAt: string;
+  skills: CatalogSkillLike[];
+  fetchedAt: string;
 }
 interface SkillStoreLike {
-    normalizeRemoteSkillId(remoteId: string): string;
-    listWorkspaceSkillIds(): Promise<string[]>;
-    listUserSkillIds(): Promise<string[]>;
+  normalizeRemoteSkillId(remoteId: string): string;
+  listWorkspaceSkillIds(): Promise<string[]>;
+  listUserSkillIds(): Promise<string[]>;
 }
 interface SkillCatalogClientLike {
-    getCatalog(): Promise<CatalogLike>;
-}
-interface SkillReconcilerDependencies {
-    skillStore: SkillStoreLike;
-    catalogClient: SkillCatalogClientLike;
-}
-interface SkillMutateResult {
-    status: "success" | "blocked" | "requires_confirmation";
-    changed: boolean;
-    message?: string;
-    hasScripts?: boolean;
-    hasHooks?: boolean;
-}
-declare class SkillReconciler {
-    private readonly deps;
-    constructor(deps: SkillReconcilerDependencies);
-    mutate(request: SkillMutationRequest): Promise<SkillMutateResult>;
-}
-
-declare class SkillStore {
-    private readonly workspacePath;
-    private readonly userSkillsRoot;
-    private readonly fileSystem;
-    constructor(options: SkillStoreOptions);
-    normalizeRemoteSkillId(remoteId: string): string;
-    getWorkspaceSkillPath(skillId: string): string;
-    getWorkspaceMarkerPath(): string;
-    getUserSkillPath(skillId: string): string;
-    listWorkspaceSkillIds(): Promise<string[]>;
-    listUserSkillIds(): Promise<string[]>;
-    writeManagedUserSkillMarker(skillId: string): Promise<void>;
-    isManagedUserSkill(skillId: string): Promise<boolean>;
-    /**
-     * One-time migration: the user-scope skill marker used to be named
-     * `.ms-devtools-skill.json`. If the new `.serviceme-skill.json` doesn't
-     * exist yet but the legacy marker does, copy it forward so an existing
-     * skill doesn't lose its "managed" status.
-     */
-    private migrateLegacyUserSkillMarker;
-    writeSkillFiles(skillId: string, scope: "workspace" | "user", files: SkillDownloadFile[]): Promise<void>;
+  getCatalog(): Promise<CatalogLike>;
+}
+export interface SkillReconcilerDependencies {
+  skillStore: SkillStoreLike;
+  catalogClient: SkillCatalogClientLike;
+}
+export interface SkillMutateResult {
+  status: "success" | "blocked" | "requires_confirmation";
+  changed: boolean;
+  message?: string;
+  hasScripts?: boolean;
+  hasHooks?: boolean;
+}
+export declare class SkillReconciler {
+  private readonly deps;
+  constructor(deps: SkillReconcilerDependencies);
+  mutate(request: SkillMutationRequest): Promise<SkillMutateResult>;
+}
+//#endregion
+//#region src/skills/SkillStore.d.ts
+export declare class SkillStore {
+  private readonly workspacePath;
+  private readonly userSkillsRoot;
+  private readonly fileSystem;
+  constructor(options: SkillStoreOptions);
+  normalizeRemoteSkillId(remoteId: string): string;
+  getWorkspaceSkillPath(skillId: string): string;
+  getWorkspaceMarkerPath(): string;
+  getUserSkillPath(skillId: string): string;
+  listWorkspaceSkillIds(): Promise<string[]>;
+  listUserSkillIds(): Promise<string[]>;
+  writeManagedUserSkillMarker(skillId: string): Promise<void>;
+  isManagedUserSkill(skillId: string): Promise<boolean>;
+  /**
+   * One-time migration: the user-scope skill marker used to be named
+   * `.ms-devtools-skill.json`. If the new `.serviceme-skill.json` doesn't
+   * exist yet but the legacy marker does, copy it forward so an existing
+   * skill doesn't lose its "managed" status.
+   */
+  private migrateLegacyUserSkillMarker;
+  writeSkillFiles(skillId: string, scope: "workspace" | "user", files: SkillDownloadFile[]): Promise<void>;
 }
 /** One legacy skill directory reported by {@link migrateLegacyUserSkillContent}. */
-interface LegacyUserSkillEntry {
-    /** Legacy skill id (directory name under ~/.agents/skills). */
-    id: string;
-    /** Absolute path of the legacy skill directory. */
-    legacyPath: string;
-    /** Target directory under ~/.copilot/skills the migration would create. */
-    targetPath: string;
-    /** Always `migration_available` until the user runs the migration. */
-    status: "migration_available";
-}
-interface LegacyUserSkillMigrationResult {
-    entries: LegacyUserSkillEntry[];
+export interface LegacyUserSkillEntry {
+  /** Legacy skill id (directory name under ~/.agents/skills). */
+  id: string;
+  /** Absolute path of the legacy skill directory. */
+  legacyPath: string;
+  /** Target directory under ~/.copilot/skills the migration would create. */
+  targetPath: string;
+  /** Always `migration_available` until the user runs the migration. */
+  status: "migration_available";
+}
+export interface LegacyUserSkillMigrationResult {
+  entries: LegacyUserSkillEntry[];
 }
 /**
  * Detect ~/.agents/skills content that can migrate to ~/.copilot/skills.
@@ -2810,13 +3047,15 @@ interface LegacyUserSkillMigrationResult {
  * invokes the migration, so detection never breaks tools that still
  * read the old layout.
  */
-declare function migrateLegacyUserSkillContent(input: {
-    homeDir: string;
-    workspaceDir: string;
-    fileSystem?: SkillStoreFileSystem;
+export declare function migrateLegacyUserSkillContent(input: {
+  homeDir: string;
+  workspaceDir: string;
+  fileSystem?: SkillStoreFileSystem;
 }): Promise<LegacyUserSkillMigrationResult>;
-
-declare const unzipFile: (zipPath: string, dest: string) => Promise<void>;
-declare const moveFiles: (sourceDir: string, destDir: string, overwrite?: boolean) => Promise<void>;
-
-export { AGENT_DRAFTS_SUBDIR, type AddUserRepoInput, type AddUserRepoResult, type AgentCatalog, AgentCatalogClient, type AgentCatalogClientOptions, type AgentDownloadFile, type AgentInstallScope, type AgentMutateResult, AgentReconciler, type AgentReconcilerDependencies, AgentStore, type AgentStoreFileSystem, type AgentStoreOptions, type AgentsStateFile, type AnyRepoConfig, type AppendLogInput, type BootstrapPhase5Result, type BuildCustomizationViewInput, CACHE_SUBDIR, CREDENTIALS_CONFIG_FILENAME, CannotRemoveDefaultRepoError, type CopilotArtifactKind, type CopilotArtifactState, type CopilotArtifactSummary, type CopilotArtifactView, type CopilotCustomizationView, type CopilotHostCapabilities, type CopilotInstallIntent, type CopilotIntegrationAdapter, CopilotLinkMaterializer, type CopilotLinkMode, type CopilotLocalGate, type CopilotMaterializationHealth, type CopilotPackageDefinition, type CopilotPackageInstallInput, type CopilotPackageInstallation, type CopilotPackageMoveInput, type CopilotPackageUninstallInput, type CopilotPackageUpdateInput, type CopilotPackageUpdatePreview, type CopilotPackageView, type CopilotPluginRegisterInput, CopilotPluginRegistrar, type CopilotPluginRegistrarOptions, type CopilotPluginRegistration, type CopilotScope, type CopilotSourceCatalogDeps, type CopilotSourceCatalogQuery, CopilotSourceCatalogService, type CopilotSourceRecord, type CopilotSourceSummary, type CopilotSourceView, type CopilotUpdatePreviewInput, type CopilotUserStatus, type CreateTaskInput, FIXED_ADDED_AT as DEFAULT_REPO_FIXED_ADDED_AT, DEFAULT_REPO_ID, DEVICE_JSON_FILENAME, DRAFTS_SUBDIR, DaemonLogger, type DefaultRepoConfig, type DisabledContentEntry, type DisabledContentMatcher, type DisabledContentState, DisabledContentStore, type DraftDetail, DraftNotFoundError, type DraftSummary, DraftsError, DraftsStore, type EditTaskInput, EnvironmentInspector, type EnvironmentInspectorOptions, type ExecutorResult, FileHookConfigAdapter, FileMcpConfigAdapter, type FsWatcherCallbacks, type FsWatcherHandle, GitClient, GithubCopilotCliExecutor, type HookConfigAdapter, type HookDefinition, type HookEventDefinition, HttpRequestExecutor, ImageTools, type InstalledAgent, type IntegrationApplyResult, InvalidDraftError, InvalidRepoUrlError, type IsoTimestamp, type JsonTools, KNOWN_WORKSPACES_FILENAME, type LegacyMigrationEntry, type LegacyMigrationPreview, type LegacyUserContentEntry, type LegacyUserContentMigrationResult, type LegacyUserSkillEntry, type LegacyUserSkillMigrationResult, type LoadResult, MACHINE_ID_FILENAME, MIGRATION_FAILURES_FILENAME, type MaterializeEntryResult, type MaterializeEntryStatus, type MaterializeResult, type McpConfigAdapter, type McpServerDefinition, type MigrateToGlobalOptions, type MigrationResult, type OutputEventCallback, PROFILES_JSON_FILENAME, PackageInstallationService, type PackageInstallationServiceDeps, type PersonalContentState, PersonalCopilotContentReconciler, type PersonalInstallationState, PersonalInstallationStore, type PersonalLinkKind, type PersonalPackageResolver, type PersonalReconcileResult, PidManager, type PlannedContentEntry, type PluginCatalogPackage, type PluginCatalogRepoInput, type PluginCatalogService, type ProbeError, type ProbeOptions, type ProbeResult, ProjectTools, REPOS_CONFIG_FILENAME, REPOS_SUBDIR, RepoAlreadyExistsError, RepoCloneConflictError, type RepoConfig, RepoManager, RepoManagerError, type RepoManagerOptions, RepoNotFoundError, RepoNotInStoreError, type RepoSource, type ReposFile, type ReposFileInput, ReposLoader, type ReposLoaderFileSystem, type ReposLoaderOptions, ReposStore, type ReposStoreChange, type ReposStoreFileSystem, type ReposStoreListener, type ReposStoreOptions, type ResolvedPluginEntry, type ResolvedPluginManifest, SAFE_REPO_ID_PATTERN, SCHEDULED_TASKS_CONFIG_FILENAME, SCHEDULED_TASKS_LOG_FILENAME, SCHEDULER_LOCK_FILENAME, SCHEDULER_LOG_FILENAME, SCHEDULER_PID_FILENAME, SERVER_PROXY_GLOBAL_FILENAME, SERVICEME_DIR_NAME, SERVICEME_HOME_ENV, SKILL_DRAFTS_SUBDIR, type SaveDraftOptions, SchedulerDaemonV2, type SchedulerDaemonV2Options, type ServerProxyGlobalPatch, type ServerProxyGlobalState, ShellExecutor, type SkillCatalog, SkillCatalogClient, type SkillCatalogClientOptions, type SkillDownloadFile, type SkillMutateResult, SkillReconciler, type SkillReconcilerDependencies, SkillStore, type SkillStoreFileSystem, type SkillStoreOptions, type StreamingExecutorHandle, type StreamingTaskExecutor, type SyncReport, type SyncStatus, TOOLBOX_JSON_FILENAME, TOOL_RISK_MAP, TaskConfigManager, type TaskEventListener, TaskExecutionEngine, type TaskExecutor, TaskLogManager, type UserRepoConfig, WORKSPACES_SUBDIR, WORKSPACE_CONTENT_STATE_FILENAME, WORKSPACE_MANIFEST_RELPATH, type WorkspaceContentEntryResult, type WorkspaceContentPlan, type WorkspaceContentReconcileResult, type WorkspaceContentState, WorkspaceContentStateStore, type WorkspaceContentStatus, WorkspaceCopilotContentReconciler, type WorkspaceCopilotManifest, type WorkspaceCopilotManifestV1, type WorkspaceCopilotManifestV2, WorkspaceExcludeStore, type WorkspaceManifestCatalogSource, type WorkspaceManifestGitSource, type WorkspaceManifestPlugin, type WorkspaceManifestPluginV2, type WorkspaceManifestRepository, type WorkspaceManifestSource, type WorkspaceMaterializedEntry, WorkspaceProbe, allPersonalLinkKinds, repoSchema as anyRepoConfigSchema, assertSafeRepoId, bootstrapDefaults, bootstrapPhase5Placeholders, buildCopilotCustomizationView, buildDefaultReposFile, copilotDoctor, copilotPrompt, createCopilotAuthRequiredError, createCopilotNotInstalledError, createDefaultCopilotHostCapabilities, createImageTools, createJsonTools, createPluginCatalogService, createProjectTools, createReposStore, defaultRepoSchema as defaultRepoConfigSchema, deriveCopilotUserStatus, ensureDefaultsInstalled, findPluginMcpJson, findRepoHooksJson, generateDraftId, getAgentDraftsDir, getAllDefaultRepoConfigs, getCacheDir, getCredentialsConfigPath, getDefaultRepoConfig, getDeviceJsonPath, getDraftsDir, getExecutor, getHomeDir, getHomePlatform, getKnownWorkspacesPath, getMachineIdPath, getMigrationFailuresPath, getProfilesJsonPath, getRepoCacheDir, getRepoDir, getReposConfigPath, getReposDir, getScheduledTasksConfigPath, getScheduledTasksLogPath, getSchedulerLockPath, getSchedulerLogPath, getSchedulerPidPath, getServerProxyGlobalPath, getServicemeHome, getSkillDraftsDir, getToolboxJsonPath, getWorkspaceManifestPath, getWorkspaceManifestPluginSourceId, getWorkspaceManifestSources, getWorkspaceStateDir, getWorkspacesDir, hashWorkspaceDir, isCopilotAuthenticated, isDefaultRepo, isStreamingTaskExecutor, isUserRepo, listPluginCatalog, loadWorkspaceCopilotManifest, migrateLegacyServerProxyEnabled, migrateLegacyUserContent, migrateLegacyUserSkillContent, migrateToGlobal, moveFiles, narrowRepoConfig, parseAgentToolPermissions, parseHooksJson, parseMcpJson, readDeclaredWorkspaceInstallations, readServerProxyGlobal, removeWorkspaceContentSelection, replaceWorkspaceContentSelection, reposFileSchema, resetUserHomeOverrides, resolveDraftDir, resolvePluginEntriesLenient, resolveTaskExecutionPayload, resolveWorkspaceContentPlan, setUserHomeOverrides, supportsPersonalIntegrationKind, supportsPersonalLinkKind, toArtifactSummary, unzipFile, upsertWorkspaceContentSelection, userRepoSchema as userRepoConfigSchema, validateReposFile, validateTaskPayload, writeServerProxyGlobal, writeWorkspaceCopilotManifest };
+//#endregion
+//#region src/utils/fileUtils.d.ts
+export declare const unzipFile: (zipPath: string, dest: string) => Promise<void>;
+export declare const moveFiles: (sourceDir: string, destDir: string, overwrite?: boolean) => Promise<void>;
+//#endregion
+export { type AccessCheckResult, AccessControl, type AccessControlOptions, type AppendLogInput, type AtomicWriteResult, AuthCore, type AuthCoreOptions, AuthStateManager, type AuthStateManagerOptions, BUILTIN_DEFAULT_TOOLS, type BootstrapPhase5Result, type BuildSignedHeadersParams, type CancellationCheck, type CreateTaskInput, FIXED_ADDED_AT as DEFAULT_REPO_FIXED_ADDED_AT, DEVICE_JSON_SCHEMA_VERSION, DefaultToolImmutableError, type DefaultToolSeed, DeviceAuthHeaders, DeviceCore, type DeviceCoreOptions, type DeviceFlowUiCallback, DeviceReenrollRequiresAuthError, type DeviceRequestSignatureParams, DeviceSecretVersionMismatchError, type DeviceSignedHeaders, type EditTaskInput, type EnrollRequestFn, type EnrollResponse, Enroller, type EnrollerOptions, type ExecutorResult, FsIdentityFileBackend, FsToolboxFileBackend, GIT_PROXY_PATH_SUFFIX, GitClient, GitError, GitHubAuthProvider, type GitHubAuthProviderConfig, type IAuthProvider, type IAuthProviderSession, type IAuthProviderUserInfo, type IdentityFileBackend, IdentityStore, type IdentityStoreHooks, type IdentityStoreOptions, InMemoryKeychainAuthTokenStore, type KeyValueStore, type KeychainAccountKey, type KeychainAuthTokenStore, type KeychainTokenEnvelope, type KeychainTokenMetadata, KeychainUnavailableError, MicrosoftAuthProvider, MicrosoftProviderNotHostedError, type MigrateToGlobalOptions, type MigrationResult, NodeGitSpawner, type OrgMembershipFetcher, type OutputEventCallback, type PersistedDeviceIdentity, type PersistedToolbox, type ProbeError, type ProbeOptions, type ProbeResult, ProviderRegistry, type ResolvedToolbox, type SchedulerDaemonV2Options, ServiceMeLogger, type StreamingExecutorHandle, type StreamingTaskExecutor, StubGitSpawner, SubmitClient, SubmitClientOptions, SubmitError, SubmitOptions, SubmitResult, TOOLBOX_JSON_SCHEMA_VERSION, type TaskEventListener, type TaskExecutor, ToolboxCore, type ToolboxCoreOptions, type ToolboxFileBackend, type ToolboxPatch, ToolboxStore, type ToolboxStoreHooks, type ToolboxStoreOptions, WORKSPACE_TOOLBOX_RELATIVE_PATH, repoSchema as anyRepoConfigSchema, buildGitHubLocalEmail, buildGitProxyBase, buildSignedHeaders, createConsoleLogger, createDeviceRequestSignature, defaultRepoSchema as defaultRepoConfigSchema, deriveInstallationId, fingerprintSource, isGitHubLocalEmail, mergeWithDefaults, noopLogger, randomInstallationId, reindexOrder, resolvePrimaryEmail, sortByRecentFirst, sortByUserOrder, toFileUrl, touchLastUsedAt, userRepoSchema as userRepoConfigSchema };
+//# sourceMappingURL=index.d.ts.map