@serviceme/devtools-protocol 0.1.9 → 0.2.0

package/dist/index.d.ts

@@ -83,8 +83,613 @@ declare function isAgentMutationResult(value: unknown): value is AgentMutationRe
 declare function isAgentPermissionSummary(value: unknown): value is AgentPermissionSummary;
 declare function isAgentPermissionsResult(value: unknown): value is AgentPermissionsResult;
 
-type ServicemeErrorCode = "protocol_mismatch" | "cli_not_found" | "cli_start_failed" | "command_timeout" | "request_cancelled" | "invalid_params" | "opencode_not_installed" | "opencode_startup_timeout" | "opencode_request_failed" | "opencode_backend_not_running" | "opencode_session_not_found" | "copilot_not_installed" | "copilot_auth_required" | "copilot_execution_failed" | "copilot_timeout" | "json_invalid_input" | "env_tool_not_found" | "task_not_found" | "task_already_exists" | "invalid_schedule" | "invalid_payload" | "confirmation_required" | "workspace_not_found" | "daemon_not_running" | "executor_timeout" | "executor_error" | "task_already_running" | "not_found" | "internal_error";
-declare const SERVICEME_ERROR_CODES: readonly ["protocol_mismatch", "cli_not_found", "cli_start_failed", "command_timeout", "request_cancelled", "invalid_params", "opencode_not_installed", "opencode_startup_timeout", "opencode_request_failed", "opencode_backend_not_running", "opencode_session_not_found", "copilot_not_installed", "copilot_auth_required", "copilot_execution_failed", "copilot_timeout", "json_invalid_input", "env_tool_not_found", "task_not_found", "task_already_exists", "invalid_schedule", "invalid_payload", "confirmation_required", "workspace_not_found", "daemon_not_running", "executor_timeout", "executor_error", "task_already_running", "not_found", "internal_error"];
+/**
+ * Phantom brand types — compile-time guards against accidental string mixing.
+ *
+ * Per ADL-004 the protocol package must keep zero runtime dependencies, so
+ * we cannot use `z.string().brand<SecretToken>()`. Instead we use the
+ * canonical TypeScript phantom-type pattern:
+ *
+ *   type SecretToken = string & { readonly __brand: "SecretToken" };
+ *
+ * This makes:
+ *   const t: string = someSecret;             // OK
+ *   const t: SecretToken = "raw";             // compile error
+ *   const t: SecretToken = someSecret as SecretToken; // explicit ack
+ *
+ * The runtime value is still a plain `string`; the brand is purely a
+ * compile-time tag. Combined with the rule "no `JSON.stringify` /
+ * `.toString()` / `.includes(...)` on a `SecretToken` field", it
+ * prevents the most common accidental-leak classes.
+ */
+/**
+ * A token-bearing string (OAuth / device / refresh token byte buffer).
+ *
+ * Lives only in OS keychain (CLI) or VSCode SecretStorage (Extension)
+ * per ADL-004 §不变量. Crossing the bridge requires the `auth.tokenRead`
+ * capability and the Extension process advertising it.
+ */
+type SecretToken = string & {
+    readonly __serviceme_secret_brand: "SecretToken";
+};
+/**
+ * A device HMAC secret byte buffer.
+ *
+ * Lives only in the IdentityStore JSON file (Phase 5.2 `DeviceCore`).
+ * Cross-process consumers see only `publicId` + `secretVersion`.
+ */
+type DeviceSecret = string & {
+    readonly __serviceme_secret_brand: "DeviceSecret";
+};
+
+/**
+ * Auth protocol — Phase 5.1 cross-process contract.
+ *
+ * Per ADL-003 these pure data models live in `@serviceme/devtools-protocol`,
+ * NOT `@serviceme/shared`. Per ADL-004 the auth token byte string **never**
+ * crosses the bridge or any protocol payload — it lives only in OS keychain
+ * (CLI) or VSCode SecretStorage (Extension). `SecretToken` is a TypeScript
+ * phantom brand used purely as a static-typing guarantee against accidental
+ * string→token mixing at compile time.
+ *
+ * Wire shapes for the bridge methods (`auth.status`, `auth.login`, …) follow
+ * `docs/requirements/phase-5-auth-device-toolbox/3.功能拆分.md` §3
+ * (Bridge method 新增). Result types are always objects so the wire format
+ * matches the rest of `BridgeMethodMap`.
+ */
+
+/**
+ * Authentication providers registered with `AuthCore`.
+ *
+ * String union (not TS enum) to match the rest of the protocol package —
+ * `apps/extension/src/core/auth/types.ts` uses an equivalent TS enum whose
+ * values are the same strings; the protocol type is the canonical cross-
+ * process contract.
+ */
+type AuthProvider = "github" | "microsoft";
+declare const AUTH_PROVIDERS: readonly AuthProvider[];
+/**
+ * Lightweight account metadata safe to serialize across the bridge.
+ *
+ * Contains **no** token bytes, refresh tokens, or any secret material —
+ * those stay in OS keychain / SecretStorage. Only identity + display
+ * fields + non-sensitive timing info cross the wire.
+ */
+interface AuthAccountMeta {
+    /** Provider-side unique id (e.g. GitHub user id, MSA oid). */
+    id: string;
+    provider: AuthProvider;
+    /** Best-effort display name (GitHub `name`, MSA `displayName`, etc.). */
+    displayName?: string;
+    /** Login handle (e.g. GitHub `login`, MSA userPrincipalName). */
+    login?: string;
+    email?: string;
+    avatarUrl?: string;
+    /** Token expiry as unix ms — `null` / `undefined` for sessions without expiry. */
+    expiresAt?: number | null;
+}
+/**
+ * Outcome of `auth.login` (device-flow initiation).
+ *
+ * Per ADL-004 token bytes never cross the bridge — the actual token is
+ * stored via SecretStorage (Extension) or keyring (CLI) by the runtime
+ * that received it. This shape only exposes device-flow UI hooks so the
+ * user can complete the OAuth handshake.
+ */
+interface AuthLoginResult {
+    provider: AuthProvider;
+    /** GitHub device-flow user code shown to the user (e.g. "ABCD-1234"). */
+    userCode?: string;
+    /** Verification URL the user must open (e.g. https://github.com/login/device). */
+    verificationUrl?: string;
+    /** Unix-ms expiry of the device-flow code itself (NOT the token). */
+    expiresAt?: number;
+    /** Optional human-readable copy for the UI. */
+    message?: string;
+}
+/**
+ * Lightweight, non-secret handle to the active auth session.
+ *
+ * The full `AuthState` (token + refresh token) lives in the Extension
+ * SecretStorage; this protocol payload is what crosses the bridge.
+ */
+interface AuthSessionHandle {
+    provider: AuthProvider;
+    account?: AuthAccountMeta;
+    /** Unix-ms token expiry; mirrors the same field on `AuthAccountMeta`. */
+    expiresAt?: number | null;
+}
+/**
+ * Snapshot of all known authentication providers — used by `auth.status`.
+ *
+ * Mirrors `3.功能拆分.md` §3 wire shape: `{ activeProvider, accounts }`.
+ * `accounts` is keyed by provider so multi-account lookups are O(1).
+ */
+interface AuthStatus {
+    activeProvider: AuthProvider | null;
+    accounts: Partial<Record<AuthProvider, AuthAccountMeta>>;
+    hasAnySession: boolean;
+    lastError?: string;
+}
+/** `auth.status` — no params. */
+type AuthStatusParams = Record<string, never>;
+/** `auth.login` — triggers device flow for the chosen provider. */
+interface AuthLoginParams {
+    provider: AuthProvider;
+    /** When true, skip cached session and force re-auth. */
+    force?: boolean;
+}
+/** `auth.logout` — clears session locally (token bytes removed at the source). */
+interface AuthLogoutParams {
+    /** Provider to log out; omit to log out every active provider. */
+    provider?: AuthProvider;
+}
+interface AuthLogoutResult {
+    /** Provider that was affected (null when no session existed). */
+    provider: AuthProvider | null;
+    success: boolean;
+}
+/**
+ * `auth.whoami` — minimal identity for the active session.
+ *
+ * Per `3.功能拆分.md` §3 the wire shape is
+ * `{ provider, login, name, avatarUrl, email? }`. We wrap it in an object
+ * so the bridge result stays object-shaped (consistent with every other
+ * method in `BridgeMethodMap`); consumer-side `null` ⇒ unauthenticated.
+ */
+interface AuthWhoamiResult {
+    provider: AuthProvider | null;
+    login?: string;
+    name?: string;
+    avatarUrl?: string;
+    email?: string;
+}
+/**
+ * `auth.switch` — flip the active provider to the requested one.
+ *
+ * Added per `2.需求澄清.md` §2.3 owner decision (CLI/QuickPick parity).
+ */
+interface AuthSwitchParams {
+    provider: AuthProvider;
+}
+interface AuthSwitchResult {
+    activeProvider: AuthProvider | null;
+    account: AuthAccountMeta | null;
+}
+/**
+ * Future-facing read-write handle to a `SecretToken` — exposed only when
+ * the bridge advertised `capabilities.auth.tokenRead` (Extension process
+ * only, see ADL-004 §不变量). The `SecretToken` brand is the static-typing
+ * guard: a plain `string` can never be assigned into a `SecretToken`
+ * field without a runtime/compile-time brand assertion, preventing
+ * accidental leak via plain `string` parameters.
+ */
+type AuthTokenEnvelope = {
+    /** Token bytes — never logged, never emitted over the wire unless the
+     *  Extension advertised `auth.tokenRead`. */
+    token: SecretToken;
+    provider: AuthProvider;
+    accountId: string;
+};
+declare function isAuthProvider(value: unknown): value is AuthProvider;
+declare function isAuthAccountMeta(value: unknown): value is AuthAccountMeta;
+declare function isAuthLoginResult(value: unknown): value is AuthLoginResult;
+declare function isAuthSessionHandle(value: unknown): value is AuthSessionHandle;
+declare function isAuthStatus(value: unknown): value is AuthStatus;
+declare function isAuthLoginParams(value: unknown): value is AuthLoginParams;
+declare function isAuthLogoutParams(value: unknown): value is AuthLogoutParams;
+declare function isAuthLogoutResult(value: unknown): value is AuthLogoutResult;
+declare function isAuthWhoamiResult(value: unknown): value is AuthWhoamiResult;
+declare function isAuthSwitchParams(value: unknown): value is AuthSwitchParams;
+declare function isAuthSwitchResult(value: unknown): value is AuthSwitchResult;
+
+/**
+ * Skill & Agent v2 — Bridge protocol methods for the v2 skill/agent
+ * repository pipeline (M5).
+ *
+ * Two new top-level method groups land here per
+ * docs/architecture/skill-agent-v2-repo.md §6:
+ *
+ *   - **`skillRepo.*`** — read + install skills/agents from local clones
+ *   - **`repo.*`** — manage the repo catalog (CRUD + sync)
+ *
+ * Draft methods (`skillRepo.draft.*`) and the `repo.syncAll` orchestrator
+ * are typed for forward compatibility but their bridge handlers are
+ * not wired in this PR — they land alongside the CLI/extension
+ * integration in subsequent M5 follow-ups.
+ *
+ * All shapes are pure types. Runtime validation lives in
+ * `isXxxResult` helpers in the bottom half of this file. Validators
+ * are deliberately structural (no zod) so the protocol package
+ * stays zero-dep.
+ */
+/** Kinds of artifacts in the catalog. */
+type BridgeSkillKind = "skill" | "agent";
+/** Which side of the link is reported. Matches SkillLinker's `LinkMode`. */
+type BridgeLinkMode = "symlink" | "junction" | "copy";
+/** A single skill/agent entry inside a repo (SkillStore.SkillEntry). */
+interface BridgeSkillRepoEntry {
+    repoId: string;
+    name: string;
+    kind: BridgeSkillKind;
+    /** Absolute path to the manifest file. */
+    manifestPath: string;
+    /** Absolute path to the entry's directory. */
+    dir: string;
+    /** Best-effort parsed frontmatter. */
+    frontmatter: Record<string, unknown>;
+    /** ISO timestamp of the manifest's mtime. */
+    modifiedAt: string;
+}
+/** A single file inside an entry (SkillStore.SkillFile). */
+interface BridgeSkillRepoFile {
+    /** Path relative to the entry's directory. */
+    path: string;
+    /** UTF-8 content. */
+    content: string;
+}
+/** Detailed view: entry + all the files inside it. */
+interface BridgeSkillRepoDetail extends BridgeSkillRepoEntry {
+    files: BridgeSkillRepoFile[];
+}
+/** A symlink/junction currently present in a workspace or user (global) scope. */
+interface BridgeLinkedSkill {
+    repoId: string;
+    name: string;
+    linkPath: string;
+    targetPath: string;
+    mode: BridgeLinkMode;
+    /** Which scope this link lives in — "workspace" or "user" (global, `~/.agents/...`). */
+    scope: "workspace" | "user";
+}
+/** `skillRepo.list` — enumerate available skills/agents. */
+interface SkillRepoListParams {
+    /** Restrict to one repo; omit to list across all. */
+    repoId?: string;
+    /** Restrict to one kind; omit to include both skills + agents. */
+    kind?: BridgeSkillKind;
+}
+interface SkillRepoListResult {
+    entries: BridgeSkillRepoEntry[];
+}
+/** `skillRepo.get` — full detail of one entry. */
+interface SkillRepoGetParams {
+    repoId: string;
+    name: string;
+}
+interface SkillRepoGetResult extends BridgeSkillRepoDetail {
+}
+/** `skillRepo.install` — link an entry into a workspace or the global user scope. */
+interface SkillRepoInstallParams {
+    repoId: string;
+    name: string;
+    workspaceDir: string;
+    /** "skill" (default) or "agent" — selects the repo subfolder + scan directory. */
+    kind?: BridgeSkillKind;
+    /** Override the link mode. Defaults to platform-optimal. */
+    mode?: "auto" | BridgeLinkMode;
+    /**
+     * Which scope to install into. "workspace" (default, back-compat)
+     * links into `<workspaceDir>/.github/...`; "user" links into the
+     * global `~/.agents/...` scope, visible to every workspace.
+     */
+    scope?: "workspace" | "user";
+}
+interface SkillRepoInstallResult {
+    mode: BridgeLinkMode;
+    linkPath: string;
+    targetPath: string;
+}
+/**
+ * `skillRepo.convertToSymlink` — replace an existing, real (non-symlink)
+ * skill/agent directory at the standard scan path with a symlink into
+ * the matching global repo entry. Same params/result shape as
+ * `skillRepo.install`; the handler refuses when there's nothing real
+ * to convert (already a symlink, or nothing installed).
+ */
+interface SkillRepoConvertToSymlinkParams {
+    repoId: string;
+    name: string;
+    workspaceDir: string;
+    /** "skill" (default) or "agent". */
+    kind?: BridgeSkillKind;
+    /** Override the link mode. Defaults to platform-optimal. */
+    mode?: "auto" | BridgeLinkMode;
+    /** "workspace" (default) or "user" (global) scope. */
+    scope?: "workspace" | "user";
+}
+interface SkillRepoConvertToSymlinkResult {
+    mode: BridgeLinkMode;
+    linkPath: string;
+    targetPath: string;
+}
+/** `skillRepo.uninstall` — remove a link from a workspace or the global user scope. */
+interface SkillRepoUninstallParams {
+    repoId: string;
+    name: string;
+    workspaceDir: string;
+    /** "skill" (default) or "agent". */
+    kind?: BridgeSkillKind;
+    /** "workspace" (default) or "user" (global) scope. */
+    scope?: "workspace" | "user";
+}
+interface SkillRepoUninstallResult {
+    removed: true;
+}
+/** `skillRepo.listLinked` — every link currently in a workspace and/or user (global) scope. */
+interface SkillRepoListLinkedParams {
+    workspaceDir: string;
+    /** "skill" (default) or "agent". */
+    kind?: BridgeSkillKind;
+    /**
+     * Which scope(s) to scan. "workspace" (default, back-compat) scans only
+     * `<workspaceDir>/.github/...`; "user" scans only the global
+     * `~/.agents/...` scope; "all" scans and merges both.
+     */
+    scope?: "workspace" | "user" | "all";
+}
+interface SkillRepoListLinkedResult {
+    links: BridgeLinkedSkill[];
+}
+/** `skillRepo.draft.create` — start a new draft. */
+interface SkillRepoDraftCreateParams {
+    kind: BridgeSkillKind;
+    /** Files including a manifest (SKILL.md or AGENT.md). */
+    files: BridgeSkillRepoFile[];
+    /** Optional caller-supplied id (otherwise 16-hex-char random). */
+    id?: string;
+}
+interface SkillRepoDraftCreateResult {
+    id: string;
+}
+/** `skillRepo.draft.commit` — push a draft to its target repo. */
+interface SkillRepoDraftCommitParams {
+    kind: BridgeSkillKind;
+    id: string;
+    /** Target repo. Must have `writeEnabled: true`. */
+    repoId: string;
+    /** Optional override; otherwise defaults to the draft's manifest `name`. */
+    skillName?: string;
+    /** Optional override; otherwise defaults to main. */
+    branch?: string;
+    /** When true, skip the network push (local commit only). */
+    skipPush?: boolean;
+}
+interface SkillRepoDraftCommitResult {
+    repoId: string;
+    skillName: string;
+    commitSha: string;
+    pushedRef?: string;
+    pushedSha?: string;
+}
+/** `skillRepo.draft.list` — list drafts of a kind. */
+interface SkillRepoDraftListParams {
+    kind: BridgeSkillKind;
+}
+interface SkillRepoDraftListResult {
+    drafts: Array<{
+        id: string;
+        kind: BridgeSkillKind;
+        name: string;
+        description: string;
+        modifiedAt: string;
+    }>;
+}
+/** `skillRepo.draft.delete` — remove a draft. */
+interface SkillRepoDraftDeleteParams {
+    kind: BridgeSkillKind;
+    id: string;
+}
+interface SkillRepoDraftDeleteResult {
+    deleted: true;
+}
+/** A single entry from `repos.json` (subset of RepoConfig). */
+interface BridgeRepoEntry {
+    id: string;
+    name: string;
+    url: string;
+    branch: string;
+    enabled: boolean;
+    writeEnabled: boolean;
+    source: "default" | "user";
+    description?: string;
+    addedAt: string;
+    lastSyncAt?: string;
+    lastSyncCommitSha?: string;
+    lastSyncStatus?: "ok" | "error";
+    lastSyncError?: string;
+}
+/** A single line of a sync run. */
+interface BridgeRepoSyncPull {
+    repoId: string;
+    status: "ok" | "error";
+    commitSha?: string;
+    error?: string;
+}
+/** `repo.list` — enumerate known repos. */
+interface RepoListParams {
+    /** Optional source filter; default includes both. */
+    source?: "default" | "user";
+}
+interface RepoListResult {
+    repos: BridgeRepoEntry[];
+}
+/** `repo.add` — add a user repo. */
+interface RepoAddParams {
+    url: string;
+    /** Auto-detected from upstream when omitted. */
+    branch?: string;
+    /** Optional display name. */
+    name?: string;
+}
+interface RepoAddResult {
+    repo: BridgeRepoEntry;
+    branch: string;
+    cloned: boolean;
+}
+/** `repo.remove` — remove a user repo. */
+interface RepoRemoveParams {
+    repoId: string;
+}
+interface RepoRemoveResult {
+    removed: true;
+}
+/** `repo.enable` — flip the `enabled` flag to true. */
+interface RepoEnableParams {
+    repoId: string;
+}
+interface RepoEnableResult {
+    repo: BridgeRepoEntry;
+}
+/** `repo.disable` — flip the `enabled` flag to false. */
+interface RepoDisableParams {
+    repoId: string;
+}
+interface RepoDisableResult {
+    repo: BridgeRepoEntry;
+}
+/** `repo.sync` — pull a single repo. */
+interface RepoSyncParams {
+    repoId: string;
+}
+interface RepoSyncResult {
+    pulls: [BridgeRepoSyncPull];
+}
+/** `repo.syncAll` — pull every enabled repo. */
+type RepoSyncAllParams = {};
+interface RepoSyncAllResult {
+    pulls: BridgeRepoSyncPull[];
+}
+declare function isSkillRepoListResult(value: unknown): value is SkillRepoListResult;
+declare function isSkillRepoGetResult(value: unknown): value is SkillRepoGetResult;
+declare function isSkillRepoInstallResult(value: unknown): value is SkillRepoInstallResult;
+declare function isSkillRepoConvertToSymlinkResult(value: unknown): value is SkillRepoConvertToSymlinkResult;
+declare function isSkillRepoUninstallResult(value: unknown): value is SkillRepoUninstallResult;
+declare function isSkillRepoListLinkedResult(value: unknown): value is SkillRepoListLinkedResult;
+declare function isSkillRepoDraftCreateResult(value: unknown): value is SkillRepoDraftCreateResult;
+declare function isSkillRepoDraftCommitResult(value: unknown): value is SkillRepoDraftCommitResult;
+declare function isSkillRepoDraftListResult(value: unknown): value is SkillRepoDraftListResult;
+declare function isSkillRepoDraftDeleteResult(value: unknown): value is SkillRepoDraftDeleteResult;
+declare function isRepoListResult(value: unknown): value is RepoListResult;
+declare function isRepoAddResult(value: unknown): value is RepoAddResult;
+declare function isRepoRemoveResult(value: unknown): value is RepoRemoveResult;
+declare function isRepoEnableResult(value: unknown): value is RepoEnableResult;
+declare function isRepoDisableResult(value: unknown): value is RepoDisableResult;
+declare function isRepoSyncResult(value: unknown): value is RepoSyncResult;
+declare function isRepoSyncAllResult(value: unknown): value is RepoSyncAllResult;
+declare function isSkillRepoListParams(value: unknown): value is SkillRepoListParams;
+declare function isSkillRepoGetParams(value: unknown): value is SkillRepoGetParams;
+declare function isSkillRepoInstallParams(value: unknown): value is SkillRepoInstallParams;
+declare function isSkillRepoConvertToSymlinkParams(value: unknown): value is SkillRepoConvertToSymlinkParams;
+declare function isSkillRepoUninstallParams(value: unknown): value is SkillRepoUninstallParams;
+declare function isSkillRepoListLinkedParams(value: unknown): value is SkillRepoListLinkedParams;
+declare function isRepoListParams(value: unknown): value is RepoListParams;
+declare function isRepoAddParams(value: unknown): value is RepoAddParams;
+declare function isRepoRemoveParams(value: unknown): value is RepoRemoveParams;
+declare function isRepoEnableParams(value: unknown): value is RepoEnableParams;
+declare function isRepoDisableParams(value: unknown): value is RepoDisableParams;
+declare function isRepoSyncParams(value: unknown): value is RepoSyncParams;
+declare function isRepoSyncAllParams(value: unknown): value is RepoSyncAllParams;
+
+/**
+ * Device protocol — Phase 5.1 cross-process contract.
+ *
+ * Per ADL-003 these pure data models live in `@serviceme/devtools-protocol`,
+ * NOT `@serviceme/shared`. Per `2.需求澄清.md` §1.2 the binding-state
+ * machine is `anonymous → pending → claimed → expired` and `rotate-secret`
+ * keeps the old HMAC secret for a 7-day grace window for in-flight
+ * requests. HMAC secret bytes **never** cross the bridge — only
+ * `publicId` + `secretVersion` flow; the secret stays in
+ * `~/.config/serviceme/device.json` (P5.2 IdentityStore).
+ *
+ * Wire shapes follow `3.功能拆分.md` §3:
+ *   - `device.status`        → { publicId, bindingState, installationId, lastEnrollAt }
+ *   - `device.enroll`        → { publicId, bindingState, expiresAt }
+ *   - `device.rotate-secret` → { publicId, secretVersion }
+ */
+type DeviceBindingState = "anonymous" | "pending" | "claimed" | "expired";
+declare const DEVICE_BINDING_STATES: readonly DeviceBindingState[];
+/**
+ * Public, non-secret half of the device identity.
+ *
+ * `secretVersion` is a monotonically increasing counter (`1`, `2`, …).
+ * The rotated HMAC secret bytes themselves live in the IdentityStore
+ * JSON file and **never** enter protocol payloads.
+ */
+interface DeviceIdentityState {
+    publicId: string;
+    secretVersion: number;
+    bindingState: DeviceBindingState;
+}
+/**
+ * Snapshot of the installed environment for this device.
+ *
+ * `installationId` is derived by Core from `os.hostname()` +
+ * `os.userInfo()` hash (per `3.功能拆分.md` B2) — not `vscode.env.machineId`,
+ * so the same value persists across Extension and CLI processes.
+ * `machineId` is the raw hostname for diagnostics.
+ */
+interface DeviceMetadata {
+    installationId: string;
+    machineId: string;
+    platform: NodeJS.Platform | string;
+    hostname?: string;
+    vscodeVersion?: string;
+    extensionVersion?: string;
+}
+/**
+ * Result of `device.status` — public identity + environment + sync timing.
+ */
+interface DeviceStatus {
+    bindingState: DeviceBindingState;
+    identity?: DeviceIdentityState;
+    metadata?: DeviceMetadata;
+    /** ISO timestamp of the last successful server sync. */
+    lastSyncAt?: string;
+    /** Last sync error message (omitted when last sync succeeded). */
+    lastSyncError?: string;
+}
+/** `device.status` — no params. */
+type DeviceStatusParams = Record<string, never>;
+/** `device.enroll` — kick off enrollment (or re-enrollment). */
+interface DeviceEnrollParams {
+    /** When true, drop the current identity and start fresh. */
+    force?: boolean;
+    /** When true, the existing auth code is required to re-enroll. */
+    requireAuth?: boolean;
+}
+interface DeviceEnrollResult {
+    publicId: string;
+    bindingState: DeviceBindingState;
+    /** ISO timestamp at which this device-secret expires (forces re-enroll). */
+    expiresAt?: string;
+}
+/** `device.rotate-secret` — rotate HMAC secret while keeping grace window. */
+interface DeviceRotateSecretParams {
+    /**
+     * Grace period (days) during which the previous secret still validates
+     * in-flight requests. Defaults to 7 per `2.需求澄清.md` §1.2.
+     */
+    gracePeriodDays?: number;
+}
+interface DeviceRotateSecretResult {
+    publicId: string;
+    secretVersion: number;
+    gracePeriodDays: number;
+    /** ISO timestamp marking the end of the grace window for the old secret. */
+    gracePeriodEndsAt?: string;
+}
+declare function isDeviceBindingState(value: unknown): value is DeviceBindingState;
+declare function isDeviceIdentityState(value: unknown): value is DeviceIdentityState;
+declare function isDeviceMetadata(value: unknown): value is DeviceMetadata;
+declare function isDeviceStatus(value: unknown): value is DeviceStatus;
+declare function isDeviceEnrollParams(value: unknown): value is DeviceEnrollParams;
+declare function isDeviceEnrollResult(value: unknown): value is DeviceEnrollResult;
+declare function isDeviceRotateSecretParams(value: unknown): value is DeviceRotateSecretParams;
+declare function isDeviceRotateSecretResult(value: unknown): value is DeviceRotateSecretResult;
+
+type ServicemeErrorCode = "protocol_mismatch" | "cli_not_found" | "cli_start_failed" | "command_timeout" | "request_cancelled" | "invalid_params" | "opencode_not_installed" | "opencode_startup_timeout" | "opencode_request_failed" | "opencode_backend_not_running" | "opencode_session_not_found" | "copilot_not_installed" | "copilot_auth_required" | "copilot_execution_failed" | "copilot_timeout" | "json_invalid_input" | "env_tool_not_found" | "task_not_found" | "task_already_exists" | "invalid_schedule" | "invalid_payload" | "confirmation_required" | "workspace_not_found" | "daemon_not_running" | "executor_timeout" | "executor_error" | "task_already_running" | "not_found" | "internal_error" | "auth_not_logged_in" | "auth_provider_not_registered" | "device_not_enrolled" | "toolbox_invalid_scope";
+declare const SERVICEME_ERROR_CODES: readonly ["protocol_mismatch", "cli_not_found", "cli_start_failed", "command_timeout", "request_cancelled", "invalid_params", "opencode_not_installed", "opencode_startup_timeout", "opencode_request_failed", "opencode_backend_not_running", "opencode_session_not_found", "copilot_not_installed", "copilot_auth_required", "copilot_execution_failed", "copilot_timeout", "json_invalid_input", "env_tool_not_found", "task_not_found", "task_already_exists", "invalid_schedule", "invalid_payload", "confirmation_required", "workspace_not_found", "daemon_not_running", "executor_timeout", "executor_error", "task_already_running", "not_found", "internal_error", "auth_not_logged_in", "auth_provider_not_registered", "device_not_enrolled", "toolbox_invalid_scope"];
 interface ServicemeErrorDetails {
     code: ServicemeErrorCode;
     message: string;
@@ -139,7 +744,28 @@ interface GithubCopilotCliPayload {
     agent?: string;
 }
 type TaskPayload = CommandPayload | ShellPayload | HttpRequestPayload | GithubCopilotCliPayload;
-interface ScheduledTask {
+/**
+ * Reference to the workspace a scheduled task is bound to. Required by v2
+ * because the global scheduler runs tasks across many workspaces and needs to
+ * know where to execute each one.
+ */
+interface TaskWorkspaceRef {
+    /** Absolute path to the workspace root. Required and unique. */
+    path: string;
+    /** Display name. Defaults to `path` basename; users may override. */
+    name: string;
+    /** `git@github.com:owner/repo.git` — auto-detected at task creation. */
+    gitRemote?: string;
+    /** Current branch — auto-detected at task creation; verified at execute. */
+    gitBranch?: string;
+    /** Last time the extension saw this workspace alive. */
+    lastSeenAt?: string;
+}
+/**
+ * v1 task shape — kept for reading legacy `<workspace>/.serviceme/scheduled-tasks.json`
+ * during migration. New code should always use {@link ScheduledTask} (v2).
+ */
+interface ScheduledTaskV1 {
     id: string;
     name: string;
     description?: string;
@@ -151,8 +777,38 @@ interface ScheduledTask {
     createdAt: string;
     updatedAt: string;
 }
-interface ScheduledTasksConfig {
+/** Runtime status of the most recent execution for a task. */
+type TaskRunStatus = "ok" | "error" | "skipped";
+/**
+ * v2 scheduled task — adds required `workspace` reference and runtime metadata
+ * fields. See `docs/architecture/skill-agent-v2-repo.md` §14.2.
+ */
+interface ScheduledTask extends ScheduledTaskV1 {
+    /** Required in v2. The workspace this task executes in. */
+    workspace: TaskWorkspaceRef;
+    /** ISO timestamp of the most recent execution. */
+    lastRunAt?: string;
+    /** Status of the most recent execution. */
+    lastRunStatus?: TaskRunStatus;
+    /** Error message from the most recent failed execution. */
+    lastRunError?: string;
+    /** Duration of the most recent execution, in milliseconds. */
+    lastRunDurationMs?: number;
+    /** Next scheduled run (computed by scheduler). */
+    nextRunAt?: string;
+    /** Total successful executions. */
+    runCount?: number;
+}
+/**
+ * v1 config — kept for migration. New code should use {@link ScheduledTasksConfig}.
+ */
+interface ScheduledTasksConfigV1 {
     version: 1;
+    tasks: ScheduledTaskV1[];
+}
+/** v2 config — single source of truth for the global scheduler. */
+interface ScheduledTasksConfig {
+    version: 2;
     tasks: ScheduledTask[];
 }
 type TaskExecutionStatus = "running" | "success" | "failure" | "timeout" | "cancelled";
@@ -286,7 +942,20 @@ interface ScheduleDeleteDryRunResult {
     task: ScheduledTask;
 }
 declare function isScheduledTaskType(value: unknown): value is ScheduledTaskType;
+/**
+ * Validates a v1 task shape (no `workspace`). Used for reading legacy config
+ * during migration only. New code should validate against {@link ScheduledTask}
+ * with {@link isScheduledTask}.
+ */
+declare function isScheduledTaskV1(value: unknown): value is ScheduledTaskV1;
+/** Validates a {@link TaskWorkspaceRef} payload. */
+declare function isTaskWorkspaceRef(value: unknown): value is TaskWorkspaceRef;
+/** Validates a v2 task shape. Requires the `workspace` field. */
 declare function isScheduledTask(value: unknown): value is ScheduledTask;
+/** Validates a v2 {@link ScheduledTasksConfig} (version: 2). */
+declare function isScheduledTasksConfig(value: unknown): value is ScheduledTasksConfig;
+/** Validates a v1 {@link ScheduledTasksConfigV1} (version: 1). */
+declare function isScheduledTasksConfigV1(value: unknown): value is ScheduledTasksConfigV1;
 declare function isTaskExecutionLog(value: unknown): value is TaskExecutionLog;
 declare function isSchedulerStatus(value: unknown): value is SchedulerStatus;
 declare function isTaskExecuteResult(value: unknown): value is TaskExecuteResult;
@@ -299,96 +968,145 @@ declare function isTaskFailedEventParams(value: unknown): value is TaskFailedEve
 declare function isTaskCancelledEventParams(value: unknown): value is TaskCancelledEventParams;
 type AgentSessionStatus = "idle" | "running" | "needs-input" | "completed" | "failed" | "aborted";
 declare function isAgentSessionStatus(value: unknown): value is AgentSessionStatus;
+/**
+ * Result of a single v1→v2 migration. `task` is included for callers that
+ * want to log it; `issues` lists soft validation problems (e.g. unknown task
+ * type) so the migration scanner can surface diagnostics without aborting.
+ */
+interface MigratedTask {
+    task: ScheduledTask;
+    /** Soft warnings about the migrated task. Empty for clean migrations. */
+    issues: string[];
+}
+/**
+ * Converts a single v1 task to v2 by attaching the given workspace context.
+ * Preserves all v1 fields (id, name, description, schedule, payload, etc.)
+ * and adds the new runtime metadata fields as undefined.
+ *
+ * The `workspace` argument supplies the workspace binding that the v1 task
+ * lacked. Callers (e.g. `MigrateToGlobal`) build this from the file location
+ * of the v1 config plus auto-probed git metadata.
+ */
+declare function migrateTaskV1ToV2(v1: ScheduledTaskV1, workspace: TaskWorkspaceRef): MigratedTask;
+/**
+ * Converts a v1 config (from a single per-workspace file) to a v2 config
+ * (the global config). Every v1 task inherits the supplied workspace context
+ * — v1 had no per-task workspace, so the file's location is authoritative.
+ *
+ * The returned v2 config can be appended to the global config by the caller.
+ * Tasks with structural issues (unknown task type) are still migrated but
+ * surface a non-fatal issue string.
+ */
+declare function migrateV1ToV2(v1Config: ScheduledTasksConfigV1, workspace: TaskWorkspaceRef): {
+    config: ScheduledTasksConfig;
+    issues: string[];
+};
 
-type SkillScope = "workspace" | "user";
-type SkillOwnerKind = "builtin" | "external";
-type SkillScopeStatus = "absent" | "available" | "installed" | "blocked" | "conflict";
-type SkillMutationAction = "install" | "uninstall" | "move" | "removeExternal" | "publish" | "republish" | "submit-to-official";
-interface SkillScopeState {
-    scope: SkillScope;
-    status: SkillScopeStatus;
-    kind?: SkillOwnerKind;
-    path?: string;
-    isInstalled: boolean;
-    canInstall: boolean;
-    canUninstall: boolean;
-    canRemove: boolean;
-    canMoveHere: boolean;
-    summary?: string;
-}
-interface SkillMarketplaceEntry {
+/**
+ * Toolbox protocol — Phase 5.1 cross-process contract.
+ *
+ * Per ADL-003 + `2.需求澄清.md` §2.1 these pure data models live in
+ * `@serviceme/devtools-protocol`, NOT `@serviceme/shared`. Toolbox scope
+ * is preserved (both `user` and `workspace` accepted); see
+ * `~/.config/serviceme/toolbox.json` + `.github/.serviceme-toolbox.json`
+ * for the persistence layout.
+ *
+ * Wire shapes follow `3.功能拆分.md` §3:
+ *   - `toolbox.list`   → { scope, tools: ExternalTool[] }
+ *   - `toolbox.add`    → { scope, tool: ExternalTool }
+ *   - `toolbox.remove` → { scope, toolId, success: boolean }
+ *   - `toolbox.update` → { scope, tool: ExternalTool }
+ */
+/**
+ * Where the toolbox entry is persisted.
+ *
+ * - `user`      — `~/.config/serviceme/toolbox.json` (applies to the user, every workspace)
+ * - `workspace` — `.github/.serviceme-toolbox.json` (this project only)
+ *
+ * `toolbox.list` without `--scope` defaults to `user` per
+ * `3.功能拆分.md` (对齐 skill/agent "个人优先" 惯例).
+ */
+type ToolboxScope = "user" | "workspace";
+declare const TOOLBOX_SCOPES: readonly ToolboxScope[];
+/**
+ * Single toolbox entry — matches the extension's
+ * `apps/extension/src/config/external-tools.ts` shape and lets users
+ * override display order + last-used timestamp.
+ *
+ * `isDefault` mirrors the seeded built-in entries (cannot be removed,
+ * only reordered). `order` is the user-defined sort position; absent
+ * means "append".
+ */
+interface ExternalTool {
     id: string;
-    displayName: string;
+    name: string;
     description: string;
-    version: string;
-    updatedAt: string;
-    categoryId?: string;
-    enabled?: boolean;
-    isCatalogSkill: boolean;
-    recommended: boolean;
-    installCount: number;
-    requiresSetup?: boolean;
-    setupHint?: string;
-    homepage?: string;
-    ownerScope?: SkillScope;
-    ownerKind?: SkillOwnerKind;
-    hasConflict: boolean;
-    hasScripts?: boolean;
-    hasHooks?: boolean;
-    source?: "official" | "community" | "local";
-    localSkillPath?: string;
-    canPublish?: boolean;
-    workspaceState: SkillScopeState;
-    userState: SkillScopeState;
-}
-interface SkillMarketplaceState {
-    configPath: string;
-    userSkillsPath: string;
-    skills: SkillMarketplaceEntry[];
-    enabledSkillIds?: string[];
-    recommendedSkillIds?: string[];
-    onboardingRequired: boolean;
-    hasPersistedSelection: boolean;
-    workspaceOpen?: boolean;
-}
-interface SkillMutationRequest {
-    skillId: string;
-    targetScope: SkillScope;
-    action: SkillMutationAction;
-    confirmed?: boolean;
-}
-interface SkillMutationResult {
-    state: SkillMarketplaceState;
-    skillId: string;
-    targetScope: SkillScope;
-    action: SkillMutationAction;
-    changed: boolean;
-    status: "success" | "blocked" | "requires_confirmation";
-    message?: string;
-    hasScripts?: boolean;
-    hasHooks?: boolean;
-    prUrl?: string;
-    fromVersion?: string;
-    toVersion?: string;
-}
-interface SkillReconcileResult {
-    state: SkillMarketplaceState;
-    changed: boolean;
-}
-interface PublishableSkillEntry {
+    icon: string;
+    url: string;
+    isDefault?: boolean;
+    order?: number;
+    /** Scope this entry belongs to; omitted entries default to `user`. */
+    scope?: ToolboxScope;
+    /** ISO timestamp of last use — drives "recently used" sort. */
+    lastUsedAt?: string;
+}
+/**
+ * Snapshot of all toolbox entries in one scope (returned by `toolbox.list`).
+ */
+interface ToolboxList {
+    scope: ToolboxScope;
+    tools: ExternalTool[];
+}
+/**
+ * Patch payload for `toolbox.update`.
+ *
+ * Every field optional; the implementation rejects patches on default
+ * tools for anything other than `order` (matches the current
+ * `ToolBoxService.updateExternalTool` rule).
+ */
+type ExternalToolPatch = Partial<Omit<ExternalTool, "id">>;
+/** `toolbox.list` — list entries of one scope. */
+interface ToolboxListParams {
+    scope?: ToolboxScope;
+}
+type ToolboxListResult = ToolboxList;
+/** `toolbox.add` — append a non-default entry to the requested scope. */
+type ToolboxAddParams = ExternalTool;
+interface ToolboxAddResult {
+    scope: ToolboxScope;
+    tool: ExternalTool;
+}
+/** `toolbox.remove` — delete one entry by id. */
+interface ToolboxRemoveParams {
     id: string;
-    displayName: string;
-    path: string;
-    version?: string;
+    scope?: ToolboxScope;
 }
-interface SkillPublishableResult {
-    skills: PublishableSkillEntry[];
+interface ToolboxRemoveResult {
+    scope: ToolboxScope;
+    toolId: string;
+    success: boolean;
 }
-declare function isSkillMarketplaceState(value: unknown): value is SkillMarketplaceState;
-declare function isSkillMutationRequest(value: unknown): value is SkillMutationRequest;
-declare function isSkillMutationResult(value: unknown): value is SkillMutationResult;
-declare function isSkillReconcileResult(value: unknown): value is SkillReconcileResult;
-declare function isSkillPublishableResult(value: unknown): value is SkillPublishableResult;
+/** `toolbox.update` — patch one entry by id. */
+interface ToolboxUpdateParams {
+    id: string;
+    patch: ExternalToolPatch;
+    scope?: ToolboxScope;
+}
+interface ToolboxUpdateResult {
+    scope: ToolboxScope;
+    tool: ExternalTool;
+}
+declare function isToolboxScope(value: unknown): value is ToolboxScope;
+declare function isExternalTool(value: unknown): value is ExternalTool;
+declare function isExternalToolPatch(value: unknown): value is ExternalToolPatch;
+declare function isToolboxList(value: unknown): value is ToolboxList;
+declare function isToolboxListParams(value: unknown): value is ToolboxListParams;
+declare function isToolboxAddParams(value: unknown): value is ToolboxAddParams;
+declare function isToolboxAddResult(value: unknown): value is ToolboxAddResult;
+declare function isToolboxRemoveParams(value: unknown): value is ToolboxRemoveParams;
+declare function isToolboxRemoveResult(value: unknown): value is ToolboxRemoveResult;
+declare function isToolboxUpdateParams(value: unknown): value is ToolboxUpdateParams;
+declare function isToolboxUpdateResult(value: unknown): value is ToolboxUpdateResult;
 
 declare const SERVICEME_PROTOCOL_VERSION: 2;
 type SupportedBridgeProtocolVersion = 1 | 2;
@@ -397,8 +1115,24 @@ interface BridgeCapabilities {
     json: 1;
     env: 1;
     tasks?: 1;
-    skills?: 1;
-    agents?: 1;
+    /** v2 skill/agent repo catalog: list, install, manage drafts. */
+    skillRepo?: 1;
+    /** v2 repo catalog: list, add, remove, enable, disable, sync. */
+    repoMgmt?: 1;
+    /** Auth domain (Phase 5.1): auth.status / login / logout / whoami / switch. */
+    auth?: 1;
+    /** Device domain (Phase 5.1): device.status / enroll / rotate-secret. */
+    device?: 1;
+    /** Toolbox domain (Phase 5.1): toolbox.list / add / remove / update. */
+    toolbox?: 1;
+    /**
+     * Read token bytes across the bridge (Phase 5.1, ADL-004).
+     *
+     * Default OFF. Only the Extension process ever advertises this bit.
+     * CLI must read tokens directly via OS keychain; it MUST NOT advertise
+     * `auth.tokenRead` even when its own auth realm is available.
+     */
+    "auth.tokenRead"?: 1;
 }
 declare function isBridgeCapabilities(value: unknown): value is BridgeCapabilities;
 interface BridgeMethodMap {
@@ -441,50 +1175,124 @@ interface BridgeMethodMap {
         params: Record<string, never>;
         result: TaskListRunningResult;
     };
-    "skill.marketplace-state": {
-        params: {
-            workspacePath?: string;
-            forceRefresh?: boolean;
-        };
-        result: SkillMarketplaceState;
+    "skillRepo.list": {
+        params: SkillRepoListParams;
+        result: SkillRepoListResult;
     };
-    "skill.mutate": {
-        params: SkillMutationRequest;
-        result: SkillMutationResult;
+    "skillRepo.get": {
+        params: SkillRepoGetParams;
+        result: SkillRepoGetResult;
     };
-    "skill.reconcile": {
-        params: {
-            workspacePath?: string;
-            force?: boolean;
-        };
-        result: SkillReconcileResult;
+    "skillRepo.install": {
+        params: SkillRepoInstallParams;
+        result: SkillRepoInstallResult;
     };
-    "skill.publishable": {
-        params: {
-            workspacePath?: string;
-        };
-        result: SkillPublishableResult;
+    "skillRepo.convertToSymlink": {
+        params: SkillRepoConvertToSymlinkParams;
+        result: SkillRepoConvertToSymlinkResult;
     };
-    "agent.marketplace-state": {
-        params: {
-            workspacePath?: string;
-            forceRefresh?: boolean;
-        };
-        result: AgentMarketplaceState;
+    "skillRepo.uninstall": {
+        params: SkillRepoUninstallParams;
+        result: SkillRepoUninstallResult;
     };
-    "agent.mutate": {
-        params: AgentMutationRequest;
-        result: AgentMutationResult;
+    "skillRepo.listLinked": {
+        params: SkillRepoListLinkedParams;
+        result: SkillRepoListLinkedResult;
     };
-    "agent.permissions": {
-        params: {
-            agentId: string;
-            scope?: "workspace" | "user";
-        };
-        result: AgentPermissionSummary;
+    "skillRepo.draft.create": {
+        params: SkillRepoDraftCreateParams;
+        result: SkillRepoDraftCreateResult;
+    };
+    "skillRepo.draft.commit": {
+        params: SkillRepoDraftCommitParams;
+        result: SkillRepoDraftCommitResult;
+    };
+    "skillRepo.draft.list": {
+        params: SkillRepoDraftListParams;
+        result: SkillRepoDraftListResult;
+    };
+    "skillRepo.draft.delete": {
+        params: SkillRepoDraftDeleteParams;
+        result: SkillRepoDraftDeleteResult;
+    };
+    "repo.list": {
+        params: RepoListParams;
+        result: RepoListResult;
+    };
+    "repo.add": {
+        params: RepoAddParams;
+        result: RepoAddResult;
+    };
+    "repo.remove": {
+        params: RepoRemoveParams;
+        result: RepoRemoveResult;
+    };
+    "repo.enable": {
+        params: RepoEnableParams;
+        result: RepoEnableResult;
+    };
+    "repo.disable": {
+        params: RepoDisableParams;
+        result: RepoDisableResult;
+    };
+    "repo.sync": {
+        params: RepoSyncParams;
+        result: RepoSyncResult;
+    };
+    "repo.syncAll": {
+        params: RepoSyncAllParams;
+        result: RepoSyncAllResult;
+    };
+    "auth.status": {
+        params: Record<string, never>;
+        result: AuthStatus;
+    };
+    "auth.login": {
+        params: AuthLoginParams;
+        result: AuthLoginResult;
+    };
+    "auth.logout": {
+        params: AuthLogoutParams;
+        result: AuthLogoutResult;
+    };
+    "auth.whoami": {
+        params: Record<string, never>;
+        result: AuthWhoamiResult;
+    };
+    "auth.switch": {
+        params: AuthSwitchParams;
+        result: AuthSwitchResult;
+    };
+    "device.status": {
+        params: Record<string, never>;
+        result: DeviceStatus;
+    };
+    "device.enroll": {
+        params: DeviceEnrollParams;
+        result: DeviceEnrollResult;
+    };
+    "device.rotate-secret": {
+        params: DeviceRotateSecretParams;
+        result: DeviceRotateSecretResult;
+    };
+    "toolbox.list": {
+        params: ToolboxListParams;
+        result: ToolboxListResult;
+    };
+    "toolbox.add": {
+        params: ToolboxAddParams;
+        result: ToolboxAddResult;
+    };
+    "toolbox.remove": {
+        params: ToolboxRemoveParams;
+        result: ToolboxRemoveResult;
+    };
+    "toolbox.update": {
+        params: ToolboxUpdateParams;
+        result: ToolboxUpdateResult;
     };
 }
-declare const BRIDGE_METHODS: readonly ["system.hello", "system.ping", "system.shutdown", "task.execute", "task.cancel", "task.list-running", "skill.marketplace-state", "skill.mutate", "skill.reconcile", "skill.publishable", "agent.marketplace-state", "agent.mutate", "agent.permissions"];
+declare const BRIDGE_METHODS: readonly ["system.hello", "system.ping", "system.shutdown", "task.execute", "task.cancel", "task.list-running", "skillRepo.list", "skillRepo.get", "skillRepo.install", "skillRepo.convertToSymlink", "skillRepo.uninstall", "skillRepo.listLinked", "skillRepo.draft.create", "skillRepo.draft.commit", "skillRepo.draft.list", "skillRepo.draft.delete", "repo.list", "repo.add", "repo.remove", "repo.enable", "repo.disable", "repo.sync", "repo.syncAll", "auth.status", "auth.login", "auth.logout", "auth.whoami", "auth.switch", "device.status", "device.enroll", "device.rotate-secret", "toolbox.list", "toolbox.add", "toolbox.remove", "toolbox.update"];
 type BridgeMethod = keyof BridgeMethodMap;
 type BridgeParams<M extends BridgeMethod> = BridgeMethodMap[M]["params"];
 type BridgeResult<M extends BridgeMethod> = BridgeMethodMap[M]["result"];
@@ -743,7 +1551,7 @@ interface LocalPublishableAgent {
 }
 
 declare const SERVICEME_CLI_NAME = "serviceme";
-declare const SERVICEME_CLI_VERSION = "0.1.9";
+declare const SERVICEME_CLI_VERSION = "0.2.0";
 declare const SERVICEME_CLI_CAPABILITIES: {
     readonly bridge: true;
     readonly tasks: 1;
@@ -751,8 +1559,6 @@ declare const SERVICEME_CLI_CAPABILITIES: {
     readonly env: 1;
     readonly image: 1;
     readonly project: 1;
-    readonly skills: 1;
-    readonly agents: 1;
 };
 
 interface ServiceMeProjectScaffoldPruneResult {
@@ -788,4 +1594,94 @@ declare function isServiceMeProjectInstallDepsResult(value: unknown): value is S
 declare function isServiceMeProjectExtractTemplateInput(value: unknown): value is ServiceMeProjectExtractTemplateInput;
 declare function isServiceMeProjectExtractTemplateResult(value: unknown): value is ServiceMeProjectExtractTemplateResult;
 
-export { type AgentDownloadFile, type AgentMarketplaceEntry, type AgentMarketplaceState, type AgentMutationAction, type AgentMutationRequest, type AgentMutationResult, type AgentOwnerKind, type AgentPermissionSummary, type AgentPermissionsResult, type AgentScope, type AgentScopeState, type AgentScopeStatus, type AgentSessionStatus, type AgentToolPermission, type AgentToolRiskLevel, BRIDGE_EVENTS, BRIDGE_METHODS, type BridgeCapabilities, type BridgeErrorResponse, type BridgeEvent, type BridgeEventMap, type BridgeEventName, type BridgeEventParams, type BridgeMessage, type BridgeMethod, type BridgeMethodMap, type BridgeParams, type BridgeRequest, type BridgeResponse, type BridgeResult, type BridgeSuccessResponse, COPILOT_ERROR_CODES, type CliEnvelope, type CliFailure, type CliSuccess, type CommandPayload, type ConcurrencyPolicy, type CopilotDoctorResult, type CopilotPromptOptions, type CopilotPromptResult, DEFAULT_JSON_SORT_OPTIONS, type EnvironmentCheckResult, type GithubCopilotCliPayload, type HttpRequestPayload, JSON_SORT_ALGORITHMS, JSON_SORT_ORDERS, type JsonSortAlgorithm, type JsonSortOptions, type JsonSortOrder, type JsonValidationResult, KNOWN_ENVIRONMENT_TOOLS, type KnownEnvironmentTool, type LocalPublishableAgent, type LocalPublishableSkill, type MarketplaceAgentItem, type MarketplaceAgentsCatalog, type MarketplaceCatalog, type MarketplaceSkillItem, type PublishableSkillEntry, type RunningTaskInfo, SERVICEME_CLI_CAPABILITIES, SERVICEME_CLI_NAME, SERVICEME_CLI_SCHEMA_VERSION, SERVICEME_CLI_VERSION, SERVICEME_ERROR_CODES, SERVICEME_IMAGE_FORMATS, SERVICEME_PROTOCOL_VERSION, type ScheduleCreateDryRunResult, type ScheduleCreateResult, type ScheduleDeleteDryRunResult, type ScheduleDeleteResult, type ScheduleEditDryRunResult, type ScheduleEditResult, type ScheduleGetResult, type ScheduleListResult, type ScheduleLogsResult, type ScheduleToggleResult, type ScheduleTriggerResult, type ScheduledTask, type ScheduledTaskType, type ScheduledTasksConfig, type ScheduledTasksLogFile, type SchedulerStartResult, type SchedulerStatus, type SchedulerStopResult, type ServiceMeImageCompressOptions, type ServiceMeImageCompressResult, type ServiceMeImageFormat, type ServiceMeImageInfo, type ServiceMeImageValidationResult, type ServiceMeProjectExtractTemplateInput, type ServiceMeProjectExtractTemplateResult, type ServiceMeProjectGitInitResult, type ServiceMeProjectInstallDepsResult, type ServiceMeProjectMakeScriptsExecutableResult, type ServiceMeProjectScaffoldPruneResult, type ServicemeErrorCode, type ServicemeErrorDetails, ServicemeProtocolError, type ShellPayload, type SkillDownloadFile, type SkillMarketplaceEntry, type SkillMarketplaceState, type SkillMutationAction, type SkillMutationRequest, type SkillMutationResult, type SkillOwnerKind, type SkillPublishableResult, type SkillReconcileResult, type SkillScope, type SkillScopeState, type SkillScopeStatus, type SubmitToOfficialPayload, type SubmitToOfficialResult, type SupportedBridgeProtocolVersion, type TaskCancelResult, type TaskCancelledEventParams, type TaskCompletedEventParams, type TaskExecuteResult, type TaskExecutionLog, type TaskExecutionSnapshot, type TaskExecutionStatus, type TaskFailedEventParams, type TaskListRunningResult, type TaskOutputEventParams, type TaskPayload, type TaskStartedEventParams, type TaskTriggerType, type ToolCheckResult, type UploadAgentPayload, type UploadFile, type UploadSkillPayload, createCliFailure, createCliSuccess, createServicemeError, getBridgeEventParamsValidator, getBridgeResultValidator, isAgentMarketplaceState, isAgentMutationRequest, isAgentMutationResult, isAgentPermissionSummary, isAgentPermissionsResult, isAgentSessionStatus, isBridgeCapabilities, isBridgeEvent, isBridgeEventName, isBridgeMethod, isBridgeRequest, isBridgeResponse, isCliEnvelope, isEnvironmentCheckResult, isJsonOutputResult, isJsonSortAlgorithm, isJsonSortOptions, isJsonSortOrder, isJsonValidationResult, isKnownEnvironmentTool, isRetryableErrorCode, isScheduledTask, isScheduledTaskType, isSchedulerStatus, isServiceMeImageCompressOptions, isServiceMeImageCompressResult, isServiceMeImageFormat, isServiceMeImageInfo, isServiceMeImageValidationResult, isServiceMeProjectExtractTemplateInput, isServiceMeProjectExtractTemplateResult, isServiceMeProjectGitInitResult, isServiceMeProjectInstallDepsResult, isServiceMeProjectMakeScriptsExecutableResult, isServiceMeProjectScaffoldPruneResult, isServicemeErrorCode, isServicemeErrorDetails, isSkillMarketplaceState, isSkillMutationRequest, isSkillMutationResult, isSkillPublishableResult, isSkillReconcileResult, isSystemHelloResult, isSystemPingResult, isSystemShutdownResult, isTaskCancelResult, isTaskCancelledEventParams, isTaskCompletedEventParams, isTaskExecuteResult, isTaskExecutionLog, isTaskFailedEventParams, isTaskListRunningResult, isTaskOutputEventParams, isTaskStartedEventParams, isToolCheckResult, normalizeServicemeError };
+type SkillScope = "workspace" | "user";
+type SkillOwnerKind = "builtin" | "external";
+type SkillScopeStatus = "absent" | "available" | "installed" | "blocked" | "conflict";
+type SkillMutationAction = "install" | "uninstall" | "move" | "removeExternal" | "publish" | "republish" | "submit-to-official";
+interface SkillScopeState {
+    scope: SkillScope;
+    status: SkillScopeStatus;
+    kind?: SkillOwnerKind;
+    path?: string;
+    isInstalled: boolean;
+    canInstall: boolean;
+    canUninstall: boolean;
+    canRemove: boolean;
+    canMoveHere: boolean;
+    summary?: string;
+}
+interface SkillMarketplaceEntry {
+    id: string;
+    displayName: string;
+    description: string;
+    version: string;
+    updatedAt: string;
+    categoryId?: string;
+    enabled?: boolean;
+    isCatalogSkill: boolean;
+    recommended: boolean;
+    installCount: number;
+    requiresSetup?: boolean;
+    setupHint?: string;
+    homepage?: string;
+    ownerScope?: SkillScope;
+    ownerKind?: SkillOwnerKind;
+    hasConflict: boolean;
+    hasScripts?: boolean;
+    hasHooks?: boolean;
+    source?: "official" | "community" | "local";
+    localSkillPath?: string;
+    canPublish?: boolean;
+    workspaceState: SkillScopeState;
+    userState: SkillScopeState;
+}
+interface SkillMarketplaceState {
+    configPath: string;
+    userSkillsPath: string;
+    skills: SkillMarketplaceEntry[];
+    enabledSkillIds?: string[];
+    recommendedSkillIds?: string[];
+    onboardingRequired: boolean;
+    hasPersistedSelection: boolean;
+    workspaceOpen?: boolean;
+}
+interface SkillMutationRequest {
+    skillId: string;
+    targetScope: SkillScope;
+    action: SkillMutationAction;
+    confirmed?: boolean;
+}
+interface SkillMutationResult {
+    state: SkillMarketplaceState;
+    skillId: string;
+    targetScope: SkillScope;
+    action: SkillMutationAction;
+    changed: boolean;
+    status: "success" | "blocked" | "requires_confirmation";
+    message?: string;
+    hasScripts?: boolean;
+    hasHooks?: boolean;
+    prUrl?: string;
+    fromVersion?: string;
+    toVersion?: string;
+}
+interface SkillReconcileResult {
+    state: SkillMarketplaceState;
+    changed: boolean;
+}
+interface PublishableSkillEntry {
+    id: string;
+    displayName: string;
+    path: string;
+    version?: string;
+}
+interface SkillPublishableResult {
+    skills: PublishableSkillEntry[];
+}
+declare function isSkillMarketplaceState(value: unknown): value is SkillMarketplaceState;
+declare function isSkillMutationRequest(value: unknown): value is SkillMutationRequest;
+declare function isSkillMutationResult(value: unknown): value is SkillMutationResult;
+declare function isSkillReconcileResult(value: unknown): value is SkillReconcileResult;
+declare function isSkillPublishableResult(value: unknown): value is SkillPublishableResult;
+
+export { AUTH_PROVIDERS, type AgentDownloadFile, type AgentMarketplaceEntry, type AgentMarketplaceState, type AgentMutationAction, type AgentMutationRequest, type AgentMutationResult, type AgentOwnerKind, type AgentPermissionSummary, type AgentPermissionsResult, type AgentScope, type AgentScopeState, type AgentScopeStatus, type AgentSessionStatus, type AgentToolPermission, type AgentToolRiskLevel, type AuthAccountMeta, type AuthLoginParams, type AuthLoginResult, type AuthLogoutParams, type AuthLogoutResult, type AuthProvider, type AuthSessionHandle, type AuthStatus, type AuthStatusParams, type AuthSwitchParams, type AuthSwitchResult, type AuthTokenEnvelope, type AuthWhoamiResult, BRIDGE_EVENTS, BRIDGE_METHODS, type BridgeCapabilities, type BridgeErrorResponse, type BridgeEvent, type BridgeEventMap, type BridgeEventName, type BridgeEventParams, type BridgeLinkMode, type BridgeLinkedSkill, type BridgeMessage, type BridgeMethod, type BridgeMethodMap, type BridgeParams, type BridgeRepoEntry, type BridgeRepoSyncPull, type BridgeRequest, type BridgeResponse, type BridgeResult, type BridgeSkillKind, type BridgeSkillRepoDetail, type BridgeSkillRepoEntry, type BridgeSkillRepoFile, type BridgeSuccessResponse, COPILOT_ERROR_CODES, type CliEnvelope, type CliFailure, type CliSuccess, type CommandPayload, type ConcurrencyPolicy, type CopilotDoctorResult, type CopilotPromptOptions, type CopilotPromptResult, DEFAULT_JSON_SORT_OPTIONS, DEVICE_BINDING_STATES, type DeviceBindingState, type DeviceEnrollParams, type DeviceEnrollResult, type DeviceIdentityState, type DeviceMetadata, type DeviceRotateSecretParams, type DeviceRotateSecretResult, type DeviceSecret, type DeviceStatus, type DeviceStatusParams, type EnvironmentCheckResult, type ExternalTool, type ExternalToolPatch, type GithubCopilotCliPayload, type HttpRequestPayload, JSON_SORT_ALGORITHMS, JSON_SORT_ORDERS, type JsonSortAlgorithm, type JsonSortOptions, type JsonSortOrder, type JsonValidationResult, KNOWN_ENVIRONMENT_TOOLS, type KnownEnvironmentTool, type LocalPublishableAgent, type LocalPublishableSkill, type MarketplaceAgentItem, type MarketplaceAgentsCatalog, type MarketplaceCatalog, type MarketplaceSkillItem, type MigratedTask, type PublishableSkillEntry, type RepoAddParams, type RepoAddResult, type RepoDisableParams, type RepoDisableResult, type RepoEnableParams, type RepoEnableResult, type RepoListParams, type RepoListResult, type RepoRemoveParams, type RepoRemoveResult, type RepoSyncAllParams, type RepoSyncAllResult, type RepoSyncParams, type RepoSyncResult, type RunningTaskInfo, SERVICEME_CLI_CAPABILITIES, SERVICEME_CLI_NAME, SERVICEME_CLI_SCHEMA_VERSION, SERVICEME_CLI_VERSION, SERVICEME_ERROR_CODES, SERVICEME_IMAGE_FORMATS, SERVICEME_PROTOCOL_VERSION, type ScheduleCreateDryRunResult, type ScheduleCreateResult, type ScheduleDeleteDryRunResult, type ScheduleDeleteResult, type ScheduleEditDryRunResult, type ScheduleEditResult, type ScheduleGetResult, type ScheduleListResult, type ScheduleLogsResult, type ScheduleToggleResult, type ScheduleTriggerResult, type ScheduledTask, type ScheduledTaskType, type ScheduledTaskV1, type ScheduledTasksConfig, type ScheduledTasksConfigV1, type ScheduledTasksLogFile, type SchedulerStartResult, type SchedulerStatus, type SchedulerStopResult, type SecretToken, type ServiceMeImageCompressOptions, type ServiceMeImageCompressResult, type ServiceMeImageFormat, type ServiceMeImageInfo, type ServiceMeImageValidationResult, type ServiceMeProjectExtractTemplateInput, type ServiceMeProjectExtractTemplateResult, type ServiceMeProjectGitInitResult, type ServiceMeProjectInstallDepsResult, type ServiceMeProjectMakeScriptsExecutableResult, type ServiceMeProjectScaffoldPruneResult, type ServicemeErrorCode, type ServicemeErrorDetails, ServicemeProtocolError, type ShellPayload, type SkillDownloadFile, type SkillMarketplaceEntry, type SkillMarketplaceState, type SkillMutationAction, type SkillMutationRequest, type SkillMutationResult, type SkillOwnerKind, type SkillPublishableResult, type SkillReconcileResult, type SkillRepoConvertToSymlinkParams, type SkillRepoConvertToSymlinkResult, type SkillRepoDraftCommitParams, type SkillRepoDraftCommitResult, type SkillRepoDraftCreateParams, type SkillRepoDraftCreateResult, type SkillRepoDraftDeleteParams, type SkillRepoDraftDeleteResult, type SkillRepoDraftListParams, type SkillRepoDraftListResult, type SkillRepoGetParams, type SkillRepoGetResult, type SkillRepoInstallParams, type SkillRepoInstallResult, type SkillRepoListLinkedParams, type SkillRepoListLinkedResult, type SkillRepoListParams, type SkillRepoListResult, type SkillRepoUninstallParams, type SkillRepoUninstallResult, type SkillScope, type SkillScopeState, type SkillScopeStatus, type SubmitToOfficialPayload, type SubmitToOfficialResult, type SupportedBridgeProtocolVersion, TOOLBOX_SCOPES, type TaskCancelResult, type TaskCancelledEventParams, type TaskCompletedEventParams, type TaskExecuteResult, type TaskExecutionLog, type TaskExecutionSnapshot, type TaskExecutionStatus, type TaskFailedEventParams, type TaskListRunningResult, type TaskOutputEventParams, type TaskPayload, type TaskRunStatus, type TaskStartedEventParams, type TaskTriggerType, type TaskWorkspaceRef, type ToolCheckResult, type ToolboxAddParams, type ToolboxAddResult, type ToolboxList, type ToolboxListParams, type ToolboxListResult, type ToolboxRemoveParams, type ToolboxRemoveResult, type ToolboxScope, type ToolboxUpdateParams, type ToolboxUpdateResult, type UploadAgentPayload, type UploadFile, type UploadSkillPayload, createCliFailure, createCliSuccess, createServicemeError, getBridgeEventParamsValidator, getBridgeResultValidator, isAgentMarketplaceState, isAgentMutationRequest, isAgentMutationResult, isAgentPermissionSummary, isAgentPermissionsResult, isAgentSessionStatus, isAuthAccountMeta, isAuthLoginParams, isAuthLoginResult, isAuthLogoutParams, isAuthLogoutResult, isAuthProvider, isAuthSessionHandle, isAuthStatus, isAuthSwitchParams, isAuthSwitchResult, isAuthWhoamiResult, isBridgeCapabilities, isBridgeEvent, isBridgeEventName, isBridgeMethod, isBridgeRequest, isBridgeResponse, isCliEnvelope, isDeviceBindingState, isDeviceEnrollParams, isDeviceEnrollResult, isDeviceIdentityState, isDeviceMetadata, isDeviceRotateSecretParams, isDeviceRotateSecretResult, isDeviceStatus, isEnvironmentCheckResult, isExternalTool, isExternalToolPatch, isJsonOutputResult, isJsonSortAlgorithm, isJsonSortOptions, isJsonSortOrder, isJsonValidationResult, isKnownEnvironmentTool, isRepoAddParams, isRepoAddResult, isRepoDisableParams, isRepoDisableResult, isRepoEnableParams, isRepoEnableResult, isRepoListParams, isRepoListResult, isRepoRemoveParams, isRepoRemoveResult, isRepoSyncAllParams, isRepoSyncAllResult, isRepoSyncParams, isRepoSyncResult, isRetryableErrorCode, isScheduledTask, isScheduledTaskType, isScheduledTaskV1, isScheduledTasksConfig, isScheduledTasksConfigV1, isSchedulerStatus, isServiceMeImageCompressOptions, isServiceMeImageCompressResult, isServiceMeImageFormat, isServiceMeImageInfo, isServiceMeImageValidationResult, isServiceMeProjectExtractTemplateInput, isServiceMeProjectExtractTemplateResult, isServiceMeProjectGitInitResult, isServiceMeProjectInstallDepsResult, isServiceMeProjectMakeScriptsExecutableResult, isServiceMeProjectScaffoldPruneResult, isServicemeErrorCode, isServicemeErrorDetails, isSkillMarketplaceState, isSkillMutationRequest, isSkillMutationResult, isSkillPublishableResult, isSkillReconcileResult, isSkillRepoConvertToSymlinkParams, isSkillRepoConvertToSymlinkResult, isSkillRepoDraftCommitResult, isSkillRepoDraftCreateResult, isSkillRepoDraftDeleteResult, isSkillRepoDraftListResult, isSkillRepoGetParams, isSkillRepoGetResult, isSkillRepoInstallParams, isSkillRepoInstallResult, isSkillRepoListLinkedParams, isSkillRepoListLinkedResult, isSkillRepoListParams, isSkillRepoListResult, isSkillRepoUninstallParams, isSkillRepoUninstallResult, isSystemHelloResult, isSystemPingResult, isSystemShutdownResult, isTaskCancelResult, isTaskCancelledEventParams, isTaskCompletedEventParams, isTaskExecuteResult, isTaskExecutionLog, isTaskFailedEventParams, isTaskListRunningResult, isTaskOutputEventParams, isTaskStartedEventParams, isTaskWorkspaceRef, isToolCheckResult, isToolboxAddParams, isToolboxAddResult, isToolboxList, isToolboxListParams, isToolboxRemoveParams, isToolboxRemoveResult, isToolboxScope, isToolboxUpdateParams, isToolboxUpdateResult, migrateTaskV1ToV2, migrateV1ToV2, normalizeServicemeError };