@serviceme/devtools-shared 2.0.1 → 2.0.3

package/dist/index.d.mts

@@ -1,3 +1,4 @@
+//#region src/ai/providers.types.d.ts
 /**
  * BYO Model Provider types — Phase 2 of the multi-vendor model
  * configuration system.
@@ -40,7 +41,7 @@
  * pre-fill baseUrl / displayName / default model list without
  * requiring the user to look up endpoint docs.
  */
-type ProviderType = "openai-compatible" | "anthropic-compatible" | "minimax" | "deepseek" | "kimi" | "zhipu" | "stepfun" | "siliconflow" | "openrouter" | "novita" | "agnes" | "medalsoft" | "sensenova" | "vscode-builtin";
+export type ProviderType = "openai-compatible" | "anthropic-compatible" | "minimax" | "deepseek" | "kimi" | "zhipu" | "stepfun" | "siliconflow" | "openrouter" | "novita" | "agnes" | "medalsoft" | "sensenova" | "vscode-builtin";
 /**
  * Curated metadata for named, well-known models. Used as a
  * **fallback** when a `ProviderModel` entry omits one of the
@@ -72,46 +73,46 @@ type ProviderType = "openai-compatible" | "anthropic-compatible" | "minimax" | "
  *     (CNY values from the per-region pricing pages on
  *     https://api-docs.deepseek.com/quick_start/pricing)
  */
-interface CuratedModelMetadata {
-    /** Short description for the picker's `detail` column. */
-    detail: ModelDetail;
-    /** Whether the model advertises vision. */
-    imageInput: boolean;
-    /** Whether the model supports tool calling. */
-    toolCalling: boolean;
-    /** USD pricing (per million tokens). */
-    pricingUSD: ModelPricing;
-    /** CNY pricing (per million tokens). */
-    pricingCNY: ModelPricing;
-    /** Tier tag for the picker's price column. */
-    priceCategory: ModelPriceCategory;
-    /** Thinking-dropdown schema (omit = no thinking dropdown). */
-    thinkingSchema?: Exclude<ModelThinkingSchema, "none">;
-    /**
-     * Whether the endpoint additionally accepts the `reasoning_effort`
-     * field (Zhipu official OpenAPI: "仅 GLM-5.2 及其以上模型支持",
-     * fetched 2026-08-19). Distinct from {@link thinkingSchema}: the
-     * 3-level dropdown rides every GLM-4.5+ model (thinking switch
-     * on/off), while the effort field is a 5.2+ extra that older
-     * endpoints may reject. Consumed by the OpenAI adapter to gate the
-     * `reasoning_effort` wire field (mirrors `supportsReasoningEffort`
-     * in `docs/references/GLM-for-copilot-main/src/consts.ts`).
-     */
-    supportsReasoningEffort?: boolean;
-    /**
-     * Context-window token caps. Centralized here (rather than as
-     * magic numbers scattered across `BUILTIN_PROVIDER_PRESETS` call
-     * sites) so every consumer — the named-vendor Add-form presets,
-     * "Fetch from API" enrichment (`ProviderRegistry.fetchRemoteModels`),
-     * and the chat-registration fallback
-     * (`LmChatProviderRegistrar.resolveModelMetadata`) — agrees on the
-     * same numbers for a given model id. Optional: a curated entry can
-     * exist purely for capability/pricing metadata without token caps
-     * (uncommon, but keeps the field honest for cases where only the
-     * cost/capability data is verified).
-     */
-    maxInputTokens?: number;
-    maxOutputTokens?: number;
+export interface CuratedModelMetadata {
+  /** Short description for the picker's `detail` column. */
+  detail: ModelDetail;
+  /** Whether the model advertises vision. */
+  imageInput: boolean;
+  /** Whether the model supports tool calling. */
+  toolCalling: boolean;
+  /** USD pricing (per million tokens). */
+  pricingUSD: ModelPricing;
+  /** CNY pricing (per million tokens). */
+  pricingCNY: ModelPricing;
+  /** Tier tag for the picker's price column. */
+  priceCategory: ModelPriceCategory;
+  /** Thinking-dropdown schema (omit = no thinking dropdown). */
+  thinkingSchema?: Exclude<ModelThinkingSchema, "none">;
+  /**
+   * Whether the endpoint additionally accepts the `reasoning_effort`
+   * field (Zhipu official OpenAPI: "仅 GLM-5.2 及其以上模型支持",
+   * fetched 2026-08-19). Distinct from {@link thinkingSchema}: the
+   * 3-level dropdown rides every GLM-4.5+ model (thinking switch
+   * on/off), while the effort field is a 5.2+ extra that older
+   * endpoints may reject. Consumed by the OpenAI adapter to gate the
+   * `reasoning_effort` wire field (mirrors `supportsReasoningEffort`
+   * in `docs/references/GLM-for-copilot-main/src/consts.ts`).
+   */
+  supportsReasoningEffort?: boolean;
+  /**
+   * Context-window token caps. Centralized here (rather than as
+   * magic numbers scattered across `BUILTIN_PROVIDER_PRESETS` call
+   * sites) so every consumer — the named-vendor Add-form presets,
+   * "Fetch from API" enrichment (`ProviderRegistry.fetchRemoteModels`),
+   * and the chat-registration fallback
+   * (`LmChatProviderRegistrar.resolveModelMetadata`) — agrees on the
+   * same numbers for a given model id. Optional: a curated entry can
+   * exist purely for capability/pricing metadata without token caps
+   * (uncommon, but keeps the field honest for cases where only the
+   * cost/capability data is verified).
+   */
+  maxInputTokens?: number;
+  maxOutputTokens?: number;
 }
 /**
  * Short one-line description rendered in the VSCode chat model
@@ -119,7 +120,7 @@ interface CuratedModelMetadata {
  * surfaced separately as the picker's `tooltip` (multi-line). Kept
  * short (one sentence) so it fits on a single line in the picker.
  */
-type ModelDetail = string;
+export type ModelDetail = string;
 /**
  * Pricing column metadata. Both the chat model picker and the
  * ProvidersTab form render this. `cacheRead` is the cache-hit cost
@@ -129,20 +130,20 @@ type ModelDetail = string;
  * provider has not published a cache-hit price; the picker shows
  * "(not published)" rather than a misleading zero.
  */
-interface ModelPricing {
-    /** Input cost per million tokens (USD or CNY per `currencyForBaseUrl`). */
-    input: number;
-    /** Output cost per million tokens. */
-    output: number;
-    /** Cache-hit cost per million tokens. `null` = provider has not published one. */
-    cacheRead: number | null;
+export interface ModelPricing {
+  /** Input cost per million tokens (USD or CNY per `currencyForBaseUrl`). */
+  input: number;
+  /** Output cost per million tokens. */
+  output: number;
+  /** Cache-hit cost per million tokens. `null` = provider has not published one. */
+  cacheRead: number | null;
 }
 /**
  * Tier tag for the picker's price column. Aligned with the
  * upstream Copilot Chat price categories so the visual bucket
  * matches what GitHub Copilot uses for its own models.
  */
-type ModelPriceCategory = "low" | "medium" | "high" | "very_high";
+export type ModelPriceCategory = "low" | "medium" | "high" | "very_high";
 /**
  * Thinking dropdown schema the picker renders beneath the model
  * name. The user's selection is delivered to
@@ -157,7 +158,7 @@ type ModelPriceCategory = "low" | "medium" | "high" | "very_high";
  *   - `none`             — picker hides the thinking dropdown
  *     entirely (model has no configurable reasoning depth)
  */
-type ModelThinkingSchema = "thinkingEnabled" | "reasoningEffort" | "none";
+export type ModelThinkingSchema = "thinkingEnabled" | "reasoningEffort" | "none";
 /**
  * One model that a provider exposes. Stable id within the provider.
  *
@@ -173,37 +174,37 @@ type ModelThinkingSchema = "thinkingEnabled" | "reasoningEffort" | "none";
  * just show up in the picker without the cost column or thinking
  * dropdown.
  */
-interface ProviderModel {
-    /** Stable id within the provider (e.g. "deepseek-v4-flash", "MiniMax-M2.7") */
-    id: string;
-    /** Human-readable display name (defaults to id if omitted) */
-    displayName?: string;
-    /** Max input tokens (best-effort, may be approximate) */
-    maxInputTokens?: number;
-    /** Max output tokens */
-    maxOutputTokens?: number;
-    /** Short one-line description for the picker's `detail` column. */
-    detail?: ModelDetail;
-    /** Capability flags (advisory — adapter honors only what it supports) */
-    capabilities?: {
-        supportsImageToText?: boolean;
-        supportsToolCalling?: boolean;
-    };
-    /**
-     * Pricing block. Renders in the picker's `Input` / `Output` /
-     * `Cache Read` columns when this model is selected. Currency is
-     * resolved from `baseUrl` (minimaxi.com / deepseek.com → CNY,
-     * minimax.io / others → USD); the same numeric value is shown
-     * with the resolved currency symbol.
-     */
-    pricing?: ModelPricing;
-    /** Tier tag for the picker's price column (default bucket per upstream). */
-    priceCategory?: ModelPriceCategory;
-    /**
-     * Thinking-dropdown schema the picker renders for this model.
-     * Omit (or set to `none`) to hide the dropdown entirely.
-     */
-    thinkingSchema?: ModelThinkingSchema;
+export interface ProviderModel {
+  /** Stable id within the provider (e.g. "deepseek-v4-flash", "MiniMax-M2.7") */
+  id: string;
+  /** Human-readable display name (defaults to id if omitted) */
+  displayName?: string;
+  /** Max input tokens (best-effort, may be approximate) */
+  maxInputTokens?: number;
+  /** Max output tokens */
+  maxOutputTokens?: number;
+  /** Short one-line description for the picker's `detail` column. */
+  detail?: ModelDetail;
+  /** Capability flags (advisory — adapter honors only what it supports) */
+  capabilities?: {
+    supportsImageToText?: boolean;
+    supportsToolCalling?: boolean;
+  };
+  /**
+   * Pricing block. Renders in the picker's `Input` / `Output` /
+   * `Cache Read` columns when this model is selected. Currency is
+   * resolved from `baseUrl` (minimaxi.com / deepseek.com → CNY,
+   * minimax.io / others → USD); the same numeric value is shown
+   * with the resolved currency symbol.
+   */
+  pricing?: ModelPricing;
+  /** Tier tag for the picker's price column (default bucket per upstream). */
+  priceCategory?: ModelPriceCategory;
+  /**
+   * Thinking-dropdown schema the picker renders for this model.
+   * Omit (or set to `none`) to hide the dropdown entirely.
+   */
+  thinkingSchema?: ModelThinkingSchema;
 }
 /**
  * Per-model vision handling mode (BYOM-depth #3).
@@ -227,65 +228,65 @@ interface ProviderModel {
  *   for text-only models and self-hosted gateways where inline
  *   base64 is undesirable.
  */
-type ProviderVisionMode = "native" | "mcp";
+export type ProviderVisionMode = "native" | "mcp";
 /**
  * Persisted provider configuration. `apiKeyRef` is the SecretStorage
  * key; the actual key never appears in this object after creation
  * (it's stored under `ms-devtools.providers.<id>.apiKey` and resolved
  * by `ProviderRegistry.getApiKey(id)`).
  */
-interface ProviderConfig {
-    /** Stable identifier (UUID v4) — used as SecretStorage key suffix */
-    id: string;
-    /** UI-facing name, e.g. "MiniMax (prod)" */
-    displayName: string;
-    /** Provider type — picks the adapter */
-    type: ProviderType;
-    /** HTTP base URL (no trailing slash) */
-    baseUrl: string;
-    /** Reference to SecretStorage key. Format: "ms-devtools.providers.<id>.apiKey" */
-    apiKeyRef: string;
-    /** Models this provider exposes */
-    models: ProviderModel[];
-    /** Whether this provider is the user's default. At most one at a time. */
-    isDefault?: boolean;
-    /**
-     * Whether this provider is active. `undefined` is treated as
-     * `true` (pre-existing providers persisted before this field
-     * existed default to enabled). Set to `false` to stop the
-     * provider's models from being registered with `vscode.lm`
-     * (see `LmChatProviderRegistrar`) without deleting the provider
-     * config or its SecretStorage-held API key — the user can
-     * re-enable it later without re-entering credentials.
-     */
-    enabled?: boolean;
-    /**
-     * MiniMax billing type for this provider's API key.
-     * `token_plan` — key is on a coding plan; usage can be fetched via the coding_plan API.
-     * `pay_as_you_go` — key is pure pay-as-you-go; no usage API available.
-     * Ignored for non-minimax providers.
-     */
-    minimaxBillingType?: "token_plan" | "pay_as_you_go";
-    /**
-     * Per-provider vision handling mode (BYOM-depth #3). Defaults
-     * to `"native"` when absent — the existing v0 behaviour,
-     * byte-identical to the pre-BYOM-depth path. Set to `"mcp"`
-     * to route image-bearing requests through the on-disk
-     * placeholder path (useful for text-only models and self-
-     * hosted gateways). See {@link ProviderVisionMode} for the
-     * full contract.
-     */
-    visionMode?: ProviderVisionMode;
-    /** Created / updated timestamps (informational) */
-    createdAt: string;
-    updatedAt: string;
-    /**
-     * Display order hint. Lower values sort first. User-added providers
-     * that never had their order explicitly set default to `0`. Builtin
-     * (`vscode-builtin`) is always injected at position `0` regardless
-     * of this field — its sort order is fixed.
-     */
-    sortOrder?: number;
+export interface ProviderConfig {
+  /** Stable identifier (UUID v4) — used as SecretStorage key suffix */
+  id: string;
+  /** UI-facing name, e.g. "MiniMax (prod)" */
+  displayName: string;
+  /** Provider type — picks the adapter */
+  type: ProviderType;
+  /** HTTP base URL (no trailing slash) */
+  baseUrl: string;
+  /** Reference to SecretStorage key. Format: "ms-devtools.providers.<id>.apiKey" */
+  apiKeyRef: string;
+  /** Models this provider exposes */
+  models: ProviderModel[];
+  /** Whether this provider is the user's default. At most one at a time. */
+  isDefault?: boolean;
+  /**
+   * Whether this provider is active. `undefined` is treated as
+   * `true` (pre-existing providers persisted before this field
+   * existed default to enabled). Set to `false` to stop the
+   * provider's models from being registered with `vscode.lm`
+   * (see `LmChatProviderRegistrar`) without deleting the provider
+   * config or its SecretStorage-held API key — the user can
+   * re-enable it later without re-entering credentials.
+   */
+  enabled?: boolean;
+  /**
+   * MiniMax billing type for this provider's API key.
+   * `token_plan` — key is on a coding plan; usage can be fetched via the coding_plan API.
+   * `pay_as_you_go` — key is pure pay-as-you-go; no usage API available.
+   * Ignored for non-minimax providers.
+   */
+  minimaxBillingType?: "token_plan" | "pay_as_you_go";
+  /**
+   * Per-provider vision handling mode (BYOM-depth #3). Defaults
+   * to `"native"` when absent — the existing v0 behaviour,
+   * byte-identical to the pre-BYOM-depth path. Set to `"mcp"`
+   * to route image-bearing requests through the on-disk
+   * placeholder path (useful for text-only models and self-
+   * hosted gateways). See {@link ProviderVisionMode} for the
+   * full contract.
+   */
+  visionMode?: ProviderVisionMode;
+  /** Created / updated timestamps (informational) */
+  createdAt: string;
+  updatedAt: string;
+  /**
+   * Display order hint. Lower values sort first. User-added providers
+   * that never had their order explicitly set default to `0`. Builtin
+   * (`vscode-builtin`) is always injected at position `0` regardless
+   * of this field — its sort order is fixed.
+   */
+  sortOrder?: number;
 }
 /**
  * Public-facing projection of {@link ProviderConfig}. Strips
@@ -295,9 +296,9 @@ interface ProviderConfig {
  * resolves it at chat time. `hasApiKey` is a boolean only — never
  * the actual value.
  */
-type PublicProvider = Omit<ProviderConfig, "apiKeyRef"> & {
-    /** Whether this provider has a key configured (boolean only, never the value) */
-    hasApiKey: boolean;
+export type PublicProvider = Omit<ProviderConfig, "apiKeyRef"> & {
+  /** Whether this provider has a key configured (boolean only, never the value) */
+  hasApiKey: boolean;
 };
 /**
  * Result of a connectivity probe. `ok=true` means credentials +
@@ -306,19 +307,19 @@ type PublicProvider = Omit<ProviderConfig, "apiKeyRef"> & {
  * `sampleModelId` is the first model id the provider reported
  * (helpful when validating "does this base URL serve the models I expect").
  */
-interface ProviderTestResult {
-    ok: boolean;
-    latencyMs?: number;
-    sampleModelId?: string;
-    error?: string;
+export interface ProviderTestResult {
+  ok: boolean;
+  latencyMs?: number;
+  sampleModelId?: string;
+  error?: string;
 }
 /**
  * Message types for the providers list. Used in `GetProviders` /
  * `ProvidersResponse` envelopes.
  */
-interface ProvidersResponsePayload {
-    providers: PublicProvider[];
-    defaultProviderId: string | null;
+export interface ProvidersResponsePayload {
+  providers: PublicProvider[];
+  defaultProviderId: string | null;
 }
 /**
  * Payload for `AddProvider` / `UpdateProvider`. Does NOT include
@@ -329,101 +330,101 @@ interface ProvidersResponsePayload {
  * SecretStorage and never echoes it back. Pass empty string to
  * leave an existing key untouched on update.
  */
-interface ProviderMutationPayload {
-    id?: string;
-    displayName: string;
-    type: ProviderType;
-    baseUrl: string;
-    apiKey: string;
-    models: ProviderModel[];
-    isDefault?: boolean;
-    /** See {@link ProviderConfig.enabled}. Omit to leave unchanged on update / default to `true` on add. */
-    enabled?: boolean;
-    /** See {@link ProviderConfig.minimaxBillingType}. */
-    minimaxBillingType?: "token_plan" | "pay_as_you_go";
-    /**
-     * See {@link ProviderConfig.visionMode} (2026-08-20 — surfaced in
-     * the ProvidersTab form). Omit to leave unchanged on update /
-     * default to `"native"` on add.
-     */
-    visionMode?: ProviderVisionMode;
+export interface ProviderMutationPayload {
+  id?: string;
+  displayName: string;
+  type: ProviderType;
+  baseUrl: string;
+  apiKey: string;
+  models: ProviderModel[];
+  isDefault?: boolean;
+  /** See {@link ProviderConfig.enabled}. Omit to leave unchanged on update / default to `true` on add. */
+  enabled?: boolean;
+  /** See {@link ProviderConfig.minimaxBillingType}. */
+  minimaxBillingType?: "token_plan" | "pay_as_you_go";
+  /**
+   * See {@link ProviderConfig.visionMode} (2026-08-20 — surfaced in
+   * the ProvidersTab form). Omit to leave unchanged on update /
+   * default to `"native"` on add.
+   */
+  visionMode?: ProviderVisionMode;
 }
 /** Which vendor API to call for usage data. */
-type ProviderUsageKind = "minimax" | "deepseek" | "kimi" | "zhipu" | "stepfun" | "siliconflow" | "openrouter" | "novita";
+export type ProviderUsageKind = "minimax" | "deepseek" | "kimi" | "zhipu" | "stepfun" | "siliconflow" | "openrouter" | "novita";
 /**
  * One quota window (5h or weekly) from a coding-plan provider.
  * `utilizationPercent` is precomputed as `100 - remaining_percent`.
  */
-interface UsageWindow {
-    /** 0..100 utilization */
-    utilizationPercent: number;
-    /** ISO 8601 reset time */
-    resetsAt: string;
-    /** Precomputed epoch ms (webview convenience) */
-    resetsAtMs: number;
+export interface UsageWindow {
+  /** 0..100 utilization */
+  utilizationPercent: number;
+  /** ISO 8601 reset time */
+  resetsAt: string;
+  /** Precomputed epoch ms (webview convenience) */
+  resetsAtMs: number;
 }
 /** MiniMax `/coding_plan/remains` response, normalised. */
-interface MinimaxUsage {
-    kind: "minimax";
-    /** 5-hour billing window (always present, derived from model_name === "general") */
-    interval: UsageWindow;
-    /** Weekly quota — only present when the account has a weekly cap. */
-    weekly?: UsageWindow;
+export interface MinimaxUsage {
+  kind: "minimax";
+  /** 5-hour billing window (always present, derived from model_name === "general") */
+  interval: UsageWindow;
+  /** Weekly quota — only present when the account has a weekly cap. */
+  weekly?: UsageWindow;
 }
 /**
  * Shared coding-plan usage for Kimi / Zhipu (same five_hour + optional weekly structure).
  * Parsed from their respective API responses into this normalised shape.
  */
-interface CodingPlanUsage {
-    kind: "kimi" | "zhipu";
-    /** Five-hour billing window */
-    interval: UsageWindow;
-    /** Weekly quota — only present when the account has a weekly cap. */
-    weekly?: UsageWindow;
+export interface CodingPlanUsage {
+  kind: "kimi" | "zhipu";
+  /** Five-hour billing window */
+  interval: UsageWindow;
+  /** Weekly quota — only present when the account has a weekly cap. */
+  weekly?: UsageWindow;
 }
 /** One currency row in a balance response. */
-interface BalanceEntry {
-    currency: string;
-    totalBalance: number;
+export interface BalanceEntry {
+  currency: string;
+  totalBalance: number;
 }
 /** DeepSeek-specific balance entry (includes granted + topped-up breakdown). */
-interface DeepseekBalanceEntry {
-    currency: string;
-    totalBalance: number;
-    grantedBalance?: number;
-    toppedUpBalance?: number;
+export interface DeepseekBalanceEntry {
+  currency: string;
+  totalBalance: number;
+  grantedBalance?: number;
+  toppedUpBalance?: number;
 }
 /** DeepSeek `/user/balance` response, normalised. */
-interface DeepseekUsage {
-    kind: "deepseek";
-    isAvailable: boolean;
-    balances: DeepseekBalanceEntry[];
+export interface DeepseekUsage {
+  kind: "deepseek";
+  isAvailable: boolean;
+  balances: DeepseekBalanceEntry[];
 }
 /**
  * Generic balance for StepFun / SiliconFlow / OpenRouter / Novita.
  * Each provider returns a different response shape; the parse function normalises
  * all four into this shared interface.
  */
-interface GenericBalanceUsage {
-    kind: "stepfun" | "siliconflow" | "openrouter" | "novita";
-    balances: BalanceEntry[];
+export interface GenericBalanceUsage {
+  kind: "stepfun" | "siliconflow" | "openrouter" | "novita";
+  balances: BalanceEntry[];
 }
 /** Union of all supported vendor usage shapes. */
-type ProviderUsageData = MinimaxUsage | DeepseekUsage | CodingPlanUsage | GenericBalanceUsage;
+export type ProviderUsageData = MinimaxUsage | DeepseekUsage | CodingPlanUsage | GenericBalanceUsage;
 /**
  * Result of a usage probe. `transient` governs the webview's keep-last-good
  * strategy: true = network/timeout (retry silently), false = deterministic
  * (auth/parse/4xx — drop last good, show hard error).
  */
-type ProviderUsageResult = {
-    ok: true;
-    data: ProviderUsageData;
-    fetchedAtMs: number;
+export type ProviderUsageResult = {
+  ok: true;
+  data: ProviderUsageData;
+  fetchedAtMs: number;
 } | {
-    ok: false;
-    transient: boolean;
-    code: string;
-    message: string;
+  ok: false;
+  transient: boolean;
+  code: string;
+  message: string;
 };
 /**
  * Cache_control capability declaration, keyed by provider type.
@@ -442,9 +443,9 @@ type ProviderUsageResult = {
  *     == entire cache path is SKIPPED. Avoids 400 risk on unknown
  *     upstreams.
  */
-interface ProviderCacheControlMetadata {
-    /** Stable prompt-prefix cache declared by the upstream? (OpenAI path reads this) */
-    supportsCacheControl?: boolean;
+export interface ProviderCacheControlMetadata {
+  /** Stable prompt-prefix cache declared by the upstream? (OpenAI path reads this) */
+  supportsCacheControl?: boolean;
 }
 /**
  * A single known-good baseUrl candidate for a provider type, offered
@@ -452,12 +453,13 @@ interface ProviderCacheControlMetadata {
  * `<input>` stays freely editable — these are suggestions, not an
  * enum; the user can always type a custom endpoint.
  */
-interface ProviderBaseUrlPreset {
-    /** Short human label distinguishing candidates (e.g. "国内" / "全球"). */
-    label: string;
-    baseUrl: string;
+export interface ProviderBaseUrlPreset {
+  /** Short human label distinguishing candidates (e.g. "国内" / "全球"). */
+  label: string;
+  baseUrl: string;
 }
-
+//#endregion
+//#region src/ai/protocol.d.ts
 /**
  * Wire protocol implied by a `baseUrl`.
  *
@@ -488,8 +490,8 @@ interface ProviderBaseUrlPreset {
  * we do not currently support routing to Anthropic's own
  * production API (their models are first-class VSCode features).
  */
-type ProviderWireProtocol = "openai" | "anthropic";
-declare function protocolForBaseUrl(baseUrl: string): ProviderWireProtocol;
+export type ProviderWireProtocol = "openai" | "anthropic";
+export declare function protocolForBaseUrl(baseUrl: string): ProviderWireProtocol;
 /**
  * Resolve the actual `ProviderType` whose adapter should handle a
  * request with the given `configuredType` + `baseUrl`.
@@ -513,8 +515,9 @@ declare function protocolForBaseUrl(baseUrl: string): ProviderWireProtocol;
  * `configuredType` unchanged — these vendors don't publish an
  * alternate-protocol endpoint on the same host.
  */
-declare function effectiveAdapterType(configuredType: ProviderType, baseUrl: string): ProviderType;
-
+export declare function effectiveAdapterType(configuredType: ProviderType, baseUrl: string): ProviderType;
+//#endregion
+//#region src/ai/providers.base-url.d.ts
 /**
  * Provider-type → known baseUrl candidates (e.g. mainland-China vs.
  * global endpoints for the same vendor, like Agnes/MiniMax/DeepSeek).
@@ -522,28 +525,30 @@ declare function effectiveAdapterType(configuredType: ProviderType, baseUrl: str
  * no runtime auto-switching reads this (that mechanism was removed;
  * see git history for the retired `autoSwitch` feature).
  */
-declare const PROVIDER_BASE_URL_PRESETS: Readonly<Record<ProviderType, readonly ProviderBaseUrlPreset[]>>;
+export declare const PROVIDER_BASE_URL_PRESETS: Readonly<Record<ProviderType, readonly ProviderBaseUrlPreset[]>>;
 /**
  * Resolve the dropdown candidate list for a provider type. Returns
  * an empty array (NEVER throws) for `-compatible` types or provider
  * types the table doesn't cover.
  */
-declare function getProviderBaseUrlPresets(type: ProviderType): readonly ProviderBaseUrlPreset[];
-
+export declare function getProviderBaseUrlPresets(type: ProviderType): readonly ProviderBaseUrlPreset[];
+//#endregion
+//#region src/ai/providers.cache-control.d.ts
 /**
  * Provider-type → cache_control capability lookup. Read by the
  * OpenAI adapter's `prompt_cache_key` decision (T-04) via
  * {@link isProviderCacheControlAware}.
  */
-declare const PROVIDER_CACHE_CONTROL_METADATA: Readonly<Record<ProviderType, ProviderCacheControlMetadata>>;
+export declare const PROVIDER_CACHE_CONTROL_METADATA: Readonly<Record<ProviderType, ProviderCacheControlMetadata>>;
 /**
  * Does this provider type declare "stable prompt cache" support?
  * The OpenAI path reads this flag to decide whether to write
  * `prompt_cache_key`; the Anthropic path uses its own 4-breakpoint
  * logic and ignores this flag.
  */
-declare function isProviderCacheControlAware(type: ProviderType): boolean;
-
+export declare function isProviderCacheControlAware(type: ProviderType): boolean;
+//#endregion
+//#region src/ai/providers.metadata.d.ts
 /**
  * Map of namespaced model ids (used by aggregator platforms like
  * SiliconFlow and Novita) to their primary entry. **Exported** so
@@ -556,9 +561,9 @@ declare function isProviderCacheControlAware(type: ProviderType): boolean;
  * aggregator alias, do it here so the merged `MODEL_METADATA`
  * auto-tracks the primary.
  */
-declare const NAMESPACE_ALIASES: Readonly<Record<string, string>>;
-declare const NAMESPACE_ALIAS_FAMILY: Readonly<Record<string, string>>;
-declare const MODEL_METADATA: Readonly<Record<string, CuratedModelMetadata>>;
+export declare const NAMESPACE_ALIASES: Readonly<Record<string, string>>;
+export declare const NAMESPACE_ALIAS_FAMILY: Readonly<Record<string, string>>;
+export declare const MODEL_METADATA: Readonly<Record<string, CuratedModelMetadata>>;
 /**
  * Look up curated metadata for a model by its un-qualified id
  * (the part after the last `::` in a qualified id, or the raw id
@@ -567,7 +572,7 @@ declare const MODEL_METADATA: Readonly<Record<string, CuratedModelMetadata>>;
  * callers should then fall back to whatever the user typed into
  * the ProvidersTab.
  */
-declare function lookupModelMetadata(modelId: string): CuratedModelMetadata | undefined;
+export declare function lookupModelMetadata(modelId: string): CuratedModelMetadata | undefined;
 /**
  * Resolve the currency for a baseUrl. Strict hostname match —
  * `api.minimaxi.com` and `api.minimaxi.cn` map to CNY (the China
@@ -585,8 +590,9 @@ declare function lookupModelMetadata(modelId: string): CuratedModelMetadata | un
  * the price those users actually pay. The DeepSeek entries pin the
  * PEAK tier (conservative worst-case; off-peak is exactly half).
  */
-declare function currencyForBaseUrl(baseUrl: string): "USD" | "CNY";
-
+export declare function currencyForBaseUrl(baseUrl: string): "USD" | "CNY";
+//#endregion
+//#region src/ai/providers.presets.d.ts
 /**
  * Default configuration snippets shipped with named vendor types.
  *
@@ -638,7 +644,7 @@ declare function currencyForBaseUrl(baseUrl: string): "USD" | "CNY";
  * `PROVIDER_BASE_URL_PRESETS` dropdown or user-typed); the empty
  * `""` default picks USD as a safe fallback.
  */
-declare function buildPresetModel(id: string, displayName: string, baseUrl?: string): ProviderModel;
+export declare function buildPresetModel(id: string, displayName: string, baseUrl?: string): ProviderModel;
 /**
  * Union a model row returned by the "Fetch from API" flow with its
  * curated preset metadata, when the id matches an entry in
@@ -690,18 +696,18 @@ declare function buildPresetModel(id: string, displayName: string, baseUrl?: str
  * so `lookupModelMetadata("deepseek-ai/DeepSeek-V4-Pro")` returns
  * the same object as `lookupModelMetadata("deepseek-v4-pro")`.
  */
-declare function unionProviderModelWithPreset(fetched: ProviderModel, baseUrl: string): ProviderModel;
+export declare function unionProviderModelWithPreset(fetched: ProviderModel, baseUrl: string): ProviderModel;
 /**
  * One entry in the "Pick from preset" dropdown shown next to the
  * "+ Add model" button in ProvidersTab.
  */
-interface PresetModelListing {
-    /** Canonical (primary, non-alias) model id; safe to feed to {@link buildPresetModel}. */
-    id: string;
-    /** Short human label; the dropdown option text. */
-    displayName: string;
-    /** Vendor family bucket — drives the `<optgroup>` grouping. */
-    vendorFamily: string;
+export interface PresetModelListing {
+  /** Canonical (primary, non-alias) model id; safe to feed to {@link buildPresetModel}. */
+  id: string;
+  /** Short human label; the dropdown option text. */
+  displayName: string;
+  /** Vendor family bucket — drives the `<optgroup>` grouping. */
+  vendorFamily: string;
 }
 /**
  * The list of vendor family groups shown in the preset dropdown.
@@ -716,7 +722,7 @@ interface PresetModelListing {
  *      last because users on aggregators usually type the namespaced
  *      id by hand rather than reach for a curated dropdown.
  */
-declare const PRESET_MODEL_FAMILIES: readonly string[];
+export declare const PRESET_MODEL_FAMILIES: readonly string[];
 /**
  * The "Pick from preset" dropdown options — every curated primary
  * entry in `MODEL_METADATA` PLUS every alias tagged with an
@@ -755,7 +761,7 @@ declare const PRESET_MODEL_FAMILIES: readonly string[];
  * still rename the field after picking — this is just a starter
  * label.
  */
-declare const LISTABLE_PRESET_MODELS: readonly PresetModelListing[];
+export declare const LISTABLE_PRESET_MODELS: readonly PresetModelListing[];
 /**
  * Group {@link LISTABLE_PRESET_MODELS} by `vendorFamily`, preserving
  * the order declared in {@link PRESET_MODEL_FAMILIES} (most-common
@@ -765,15 +771,15 @@ declare const LISTABLE_PRESET_MODELS: readonly PresetModelListing[];
  * Returns: array of `{ family, entries }` — the shape a UI
  * `<select>` renderer expects when building `<optgroup>`s.
  */
-interface PresetModelFamilyGroup {
-    family: string;
-    entries: readonly PresetModelListing[];
+export interface PresetModelFamilyGroup {
+  family: string;
+  entries: readonly PresetModelListing[];
 }
-declare function listPresetModelGroups(): readonly PresetModelFamilyGroup[];
-declare const BUILTIN_PROVIDER_PRESETS: Readonly<Record<"minimax" | "deepseek" | "kimi" | "zhipu" | "stepfun" | "siliconflow" | "openrouter" | "novita" | "agnes" | "medalsoft" | "sensenova", {
-    displayName: string;
-    baseUrl: string;
-    models: ProviderModel[];
+export declare function listPresetModelGroups(): readonly PresetModelFamilyGroup[];
+export declare const BUILTIN_PROVIDER_PRESETS: Readonly<Record<"minimax" | "deepseek" | "kimi" | "zhipu" | "stepfun" | "siliconflow" | "openrouter" | "novita" | "agnes" | "medalsoft" | "sensenova", {
+  displayName: string;
+  baseUrl: string;
+  models: ProviderModel[];
 }>>;
 /**
  * Look up the curated friendly displayName for a model id. Two
@@ -814,18 +820,19 @@ declare const BUILTIN_PROVIDER_PRESETS: Readonly<Record<"minimax" | "deepseek" |
  * or "GLM-4.7 Flash" instead of the bare id right after the
  * fetch result lands.
  */
-declare function getPresetModelDisplayName(id: string): string | undefined;
+export declare function getPresetModelDisplayName(id: string): string | undefined;
 /**
  * Look up the default config (displayName / baseUrl / models) for a
  * named vendor type. Returns `null` for the `-compatible` family —
  * those have no canned defaults; the user enters them by hand.
  */
-declare function getBuiltinProviderPreset(type: ProviderType): {
-    displayName: string;
-    baseUrl: string;
-    models: ProviderModel[];
+export declare function getBuiltinProviderPreset(type: ProviderType): {
+  displayName: string;
+  baseUrl: string;
+  models: ProviderModel[];
 } | null;
-
+//#endregion
+//#region src/ai-models.d.ts
 /**
  * Shared AI model types.
  *
@@ -842,10 +849,10 @@ declare function getBuiltinProviderPreset(type: ProviderType): {
  * `context.globalState` and used to select a model from
  * `vscode.lm.selectChatModels({ vendor, family })`.
  */
-interface AIModelConfig {
-    vendor: string;
-    family?: string;
-    version?: string;
+export interface AIModelConfig {
+  vendor: string;
+  family?: string;
+  version?: string;
 }
 /**
  * Webview-friendly projection of `vscode.LanguageModelChat`.
@@ -856,20 +863,21 @@ interface AIModelConfig {
  * Webview can render capability badges (tool calling, image input)
  * without a second round-trip.
  */
-interface AIModelInfo {
-    id: string;
-    name: string;
-    vendor: string;
-    family?: string;
-    version?: string;
-    maxInputTokens?: number;
-    maxOutputTokens?: number;
-    capabilities?: {
-        supportsImageToText?: boolean;
-        supportsToolCalling?: boolean;
-    };
-}
-
+export interface AIModelInfo {
+  id: string;
+  name: string;
+  vendor: string;
+  family?: string;
+  version?: string;
+  maxInputTokens?: number;
+  maxOutputTokens?: number;
+  capabilities?: {
+    supportsImageToText?: boolean;
+    supportsToolCalling?: boolean;
+  };
+}
+//#endregion
+//#region src/certificate-bundle.d.ts
 /**
  * Certificate bundle download — wire types shared between the certificate
  * Webview (apps/webview-ui/src/certificate) and the extension panel service
@@ -879,58 +887,59 @@ interface AIModelInfo {
  * format and receiving the resulting zip.
  */
 /** Target formats that the extension can produce via `sslkit`. */
-type CertificateBundleFormat = "pem" | "pfx" | "crt" | "jks";
+export type CertificateBundleFormat = "pem" | "pfx" | "crt" | "jks";
 /** Static metadata describing each supported bundle format — used by the UI
  * to render the format picker without hard-coding labels in two places. */
-interface CertificateBundleFormatDescriptor {
-    readonly format: CertificateBundleFormat;
-    /** Short label shown in the picker (e.g. "Nginx PEM"). */
-    readonly label: string;
-    /** One-line description of what the format is for. */
-    readonly description: string;
-    /** Icon name (lucide) for the picker button. */
-    readonly icon: string;
-    /** Whether this format requires a password (PFX / JKS). */
-    readonly requiresPassword: boolean;
-    /** Conventional file extension(s) for the primary artifact(s) the user
-     * is downloading, shown in the picker subtitle. */
-    readonly artifactExtension: string;
-}
-declare const CERTIFICATE_BUNDLE_FORMATS: readonly CertificateBundleFormatDescriptor[];
+export interface CertificateBundleFormatDescriptor {
+  readonly format: CertificateBundleFormat;
+  /** Short label shown in the picker (e.g. "Nginx PEM"). */
+  readonly label: string;
+  /** One-line description of what the format is for. */
+  readonly description: string;
+  /** Icon name (lucide) for the picker button. */
+  readonly icon: string;
+  /** Whether this format requires a password (PFX / JKS). */
+  readonly requiresPassword: boolean;
+  /** Conventional file extension(s) for the primary artifact(s) the user
+   * is downloading, shown in the picker subtitle. */
+  readonly artifactExtension: string;
+}
+export declare const CERTIFICATE_BUNDLE_FORMATS: readonly CertificateBundleFormatDescriptor[];
 /** Request sent from the Webview when the user picks a format. */
-interface DownloadCertificateBundleRequest {
-    id: string;
-    format: CertificateBundleFormat;
-    /** Override for the export password (PFX / JKS only). When omitted, the
-     * extension falls back to the `ms-devtools.certificate.exportPassword`
-     * setting; when that is unset, a strong random password is generated
-     * per export. */
-    password?: string;
+export interface DownloadCertificateBundleRequest {
+  id: string;
+  format: CertificateBundleFormat;
+  /** Override for the export password (PFX / JKS only). When omitted, the
+   * extension falls back to the `ms-devtools.certificate.exportPassword`
+   * setting; when that is unset, a strong random password is generated
+   * per export. */
+  password?: string;
 }
 /** Response sent back to the Webview — same shape as the existing PEM bundle
  * download (filename + base64 zip), so the Webview side can reuse its
  * existing download helper without branching on format. */
-interface DownloadCertificateBundleResponse {
-    success: boolean;
-    filename?: string;
-    mime?: string;
-    base64?: string;
-    error?: string;
+export interface DownloadCertificateBundleResponse {
+  success: boolean;
+  filename?: string;
+  mime?: string;
+  base64?: string;
+  error?: string;
 }
 /** Feature availability reported by the extension to the Webview so the UI
  * can grey out formats whose prerequisites aren't met on this machine. */
-interface CertificateBundleEnvironmentSupport {
-    /** `true` once `sslkit` was resolved via `node_modules/.bin` or PATH. */
-    sslkitAvailable: boolean;
-    /** `true` once `keytool` was found on PATH (required only for JKS). */
-    jdkAvailable: boolean;
-    /** Mirror of `msDevTools.certificate.exportPassword` — surfaces the
-     * effective default (the configured value, or a freshly generated
-     * random one when unset) so the UI doesn't have to subscribe to config
-     * change events. */
-    defaultPassword: string;
-}
-
+export interface CertificateBundleEnvironmentSupport {
+  /** `true` once `sslkit` was resolved via `node_modules/.bin` or PATH. */
+  sslkitAvailable: boolean;
+  /** `true` once `keytool` was found on PATH (required only for JKS). */
+  jdkAvailable: boolean;
+  /** Mirror of `msDevTools.certificate.exportPassword` — surfaces the
+   * effective default (the configured value, or a freshly generated
+   * random one when unset) so the UI doesn't have to subscribe to config
+   * change events. */
+  defaultPassword: string;
+}
+//#endregion
+//#region src/constants.d.ts
 /**
  * Medalsoft-internal infrastructure addresses.
  *
@@ -945,46 +954,47 @@ interface CertificateBundleEnvironmentSupport {
  * needs — ADL-003 forbids core → shared. Keep those in lock-step.
  */
 /** Medalsoft 内网 LLM 网关（OpenAI-compatible `/v1`），仅办公网可达。 */
-declare const MEDALSOFT_PRIVATE_GATEWAY_URL = "http://10.10.10.249:3000/v1";
+export declare const MEDALSOFT_PRIVATE_GATEWAY_URL = "http://10.10.10.249:3000/v1";
 /** Medalsoft 私有 NuGet 源，仅办公网可达。 */
-declare const MEDALSOFT_NUGET_PRIVATE_SOURCE = "http://192.168.20.209:10010/nuget";
-
-type CopilotCustomizationScope = "workspace" | "personal";
-type CopilotCustomizationArtifactKind = "agent" | "skill" | "prompt" | "instruction" | "mcp" | "hook";
-type CopilotCustomizationInstallIntent = "available" | "selected" | "moving" | "removing";
-type CopilotCustomizationHealth = "healthy" | "missing" | "drifted" | "conflict" | "source-unavailable" | "unsupported";
-type CopilotCustomizationGate = "ready" | "approval-required" | "configuration-required";
-type CopilotCustomizationStatus = "healthy" | "action-required" | "blocked" | "not-enabled";
-interface CopilotArtifactStatePayload {
-    intent: CopilotCustomizationInstallIntent;
-    health: CopilotCustomizationHealth;
-    gate: CopilotCustomizationGate;
-}
-interface CopilotArtifactSummaryPayload {
-    id: string;
-    packageId: string;
-    kind: CopilotCustomizationArtifactKind;
-    displayName: string;
-    description?: string;
-    installStrategy: "link" | "generated-config" | "approval-gated";
-    risk: "none" | "review-required";
-}
-interface CopilotPackageInstallationPayload {
-    packageId: string;
-    scope: CopilotCustomizationScope;
-    selectedArtifactIds: string[];
-    pinnedVersion?: string;
-}
-interface CopilotPackageDefinitionPayload {
-    id: string;
-    sourceId: string;
-    displayName: string;
-    description?: string;
-    version?: string;
-    artifacts: CopilotArtifactSummaryPayload[];
-    /** Whole-package registrar installation — the home package list shows
-     * these; per-artifact v1 manifest plugins stay in enabled-content. */
-    wholePackage?: boolean;
+export declare const MEDALSOFT_NUGET_PRIVATE_SOURCE = "http://192.168.20.209:10010/nuget";
+//#endregion
+//#region src/copilot-customizations.d.ts
+export type CopilotCustomizationScope = "workspace" | "personal";
+export type CopilotCustomizationArtifactKind = "agent" | "skill" | "prompt" | "instruction" | "mcp" | "hook";
+export type CopilotCustomizationInstallIntent = "available" | "selected" | "moving" | "removing";
+export type CopilotCustomizationHealth = "healthy" | "missing" | "drifted" | "conflict" | "source-unavailable" | "unsupported";
+export type CopilotCustomizationGate = "ready" | "approval-required" | "configuration-required";
+export type CopilotCustomizationStatus = "healthy" | "action-required" | "blocked" | "not-enabled";
+export interface CopilotArtifactStatePayload {
+  intent: CopilotCustomizationInstallIntent;
+  health: CopilotCustomizationHealth;
+  gate: CopilotCustomizationGate;
+}
+export interface CopilotArtifactSummaryPayload {
+  id: string;
+  packageId: string;
+  kind: CopilotCustomizationArtifactKind;
+  displayName: string;
+  description?: string;
+  installStrategy: "link" | "generated-config" | "approval-gated";
+  risk: "none" | "review-required";
+}
+export interface CopilotPackageInstallationPayload {
+  packageId: string;
+  scope: CopilotCustomizationScope;
+  selectedArtifactIds: string[];
+  pinnedVersion?: string;
+}
+export interface CopilotPackageDefinitionPayload {
+  id: string;
+  sourceId: string;
+  displayName: string;
+  description?: string;
+  version?: string;
+  artifacts: CopilotArtifactSummaryPayload[];
+  /** Whole-package registrar installation — the home package list shows
+   * these; per-artifact v1 manifest plugins stay in enabled-content. */
+  wholePackage?: boolean;
 }
 /**
  * Whole-package registrar install marker: the explicit `wholePackage`
@@ -992,16 +1002,16 @@ interface CopilotPackageDefinitionPayload {
  * packages are PERSONAL-scope only — registrar-owned, so per-artifact
  * scope actions (move to workspace) do not apply.
  */
-declare function isWholePackageInstall(definition: Pick<CopilotPackageDefinitionPayload, "wholePackage" | "artifacts">): boolean;
+export declare function isWholePackageInstall(definition: Pick<CopilotPackageDefinitionPayload, "wholePackage" | "artifacts">): boolean;
 /**
  * Registrar record id (`repo:plugin`) from a view/package payload id
  * (`repo::plugin`). Both spellings float around the wire; the registrar
  * and the settings keys always use the single-colon form.
  */
-declare function registrationIdFromPackageId(packageId: string): string;
-interface CopilotArtifactViewPayload {
-    artifact: CopilotArtifactSummaryPayload;
-    state: CopilotArtifactStatePayload;
+export declare function registrationIdFromPackageId(packageId: string): string;
+export interface CopilotArtifactViewPayload {
+  artifact: CopilotArtifactSummaryPayload;
+  state: CopilotArtifactStatePayload;
 }
 /**
  * An installable plugin.json package found by scanning an enabled git
@@ -1010,88 +1020,89 @@ interface CopilotArtifactViewPayload {
  * `copilotCustomizations.list` result; `packageId` is directly usable
  * as the install input.
  */
-interface CopilotAvailablePackagePayload {
-    /** `${sourceId}::${pluginId}` — directly usable as the install input. */
-    packageId: string;
-    sourceId: string;
-    displayName: string;
-    description?: string;
-    version?: string;
-    /** Full artifact summaries so the install preview can select artifacts. */
-    artifacts: CopilotArtifactSummaryPayload[];
-    /** Which scopes currently have this packageId installed (may be both). */
-    installedScopes: CopilotCustomizationScope[];
-    /** VS Code enablement (`chat.pluginLocations` value) for registered
-     * packages — overlaid extension-side; `undefined` for not-registered
-     * packages or older extension builds. */
-    enabled?: boolean;
-}
-interface CopilotPackageViewPayload {
-    definition: CopilotPackageDefinitionPayload;
-    installation: CopilotPackageInstallationPayload;
-    artifacts: CopilotArtifactViewPayload[];
-    selectedArtifactCount: number;
-    /** VS Code enablement for whole-package (registrar) rows —
-     * overlaid extension-side; `undefined` for artifact-level packages
-     * or older extension builds. */
-    enabled?: boolean;
-    status: CopilotCustomizationStatus;
-}
-interface CopilotSourceViewPayload {
-    id: string;
-    type: "marketplace" | "git" | "local";
-    displayName: string;
-    updateCapability: "pinned" | "live" | "none";
-    packages: CopilotPackageViewPayload[];
+export interface CopilotAvailablePackagePayload {
+  /** `${sourceId}::${pluginId}` — directly usable as the install input. */
+  packageId: string;
+  sourceId: string;
+  displayName: string;
+  description?: string;
+  version?: string;
+  /** Full artifact summaries so the install preview can select artifacts. */
+  artifacts: CopilotArtifactSummaryPayload[];
+  /** Which scopes currently have this packageId installed (may be both). */
+  installedScopes: CopilotCustomizationScope[];
+  /** VS Code enablement (`chat.pluginLocations` value) for registered
+   * packages — overlaid extension-side; `undefined` for not-registered
+   * packages or older extension builds. */
+  enabled?: boolean;
+}
+export interface CopilotPackageViewPayload {
+  definition: CopilotPackageDefinitionPayload;
+  installation: CopilotPackageInstallationPayload;
+  artifacts: CopilotArtifactViewPayload[];
+  selectedArtifactCount: number;
+  /** VS Code enablement for whole-package (registrar) rows —
+   * overlaid extension-side; `undefined` for artifact-level packages
+   * or older extension builds. */
+  enabled?: boolean;
+  status: CopilotCustomizationStatus;
+}
+export interface CopilotSourceViewPayload {
+  id: string;
+  type: "marketplace" | "git" | "local";
+  displayName: string;
+  updateCapability: "pinned" | "live" | "none";
+  packages: CopilotPackageViewPayload[];
 }
 /** Task 10 — normalized source record for the source manager UI. */
-interface CopilotSourceRecordPayload {
-    id: string;
-    type: "marketplace" | "git" | "local";
-    displayName: string;
-    updateCapability: "pinned" | "live" | "none";
-    /** Whether the source content is currently materialized on disk. */
-    available: boolean;
-    /** Where this source is declared: "workspace" (manifest), "personal" (intent), or both. */
-    declaredIn: Array<"workspace" | "personal">;
+export interface CopilotSourceRecordPayload {
+  id: string;
+  type: "marketplace" | "git" | "local";
+  displayName: string;
+  updateCapability: "pinned" | "live" | "none";
+  /** Whether the source content is currently materialized on disk. */
+  available: boolean;
+  /** Where this source is declared: "workspace" (manifest), "personal" (intent), or both. */
+  declaredIn: Array<"workspace" | "personal">;
 }
 /** Task 10 — deterministic, side-effect-free package update preview. */
-interface CopilotPackageUpdatePreviewPayload {
-    packageId: string;
-    fromVersion?: string;
-    toVersion: string;
-    addedArtifactIds: string[];
-    removedArtifactIds: string[];
-    changedArtifactIds: string[];
-    approvalInvalidatedArtifactIds: string[];
-}
-interface CopilotCustomizationViewPayload {
-    scope: CopilotCustomizationScope;
-    generatedAt: string;
-    sources: CopilotSourceViewPayload[];
-    packages: CopilotPackageViewPayload[];
-    attention: CopilotArtifactViewPayload[];
-    summary: {
-        packageCount: number;
-        enabledArtifactCount: number;
-        attentionCount: number;
-    };
-    legacyMigration?: {
-        count: number;
-        sourceLabel: "~/.agents";
-    };
-}
-
+export interface CopilotPackageUpdatePreviewPayload {
+  packageId: string;
+  fromVersion?: string;
+  toVersion: string;
+  addedArtifactIds: string[];
+  removedArtifactIds: string[];
+  changedArtifactIds: string[];
+  approvalInvalidatedArtifactIds: string[];
+}
+export interface CopilotCustomizationViewPayload {
+  scope: CopilotCustomizationScope;
+  generatedAt: string;
+  sources: CopilotSourceViewPayload[];
+  packages: CopilotPackageViewPayload[];
+  attention: CopilotArtifactViewPayload[];
+  summary: {
+    packageCount: number;
+    enabledArtifactCount: number;
+    attentionCount: number;
+  };
+  legacyMigration?: {
+    count: number;
+    sourceLabel: "~/.agents";
+  };
+}
+//#endregion
+//#region src/device-auth.d.ts
 /**
  * Device-auth wire contract shared by the extension (signer) and the
  * server (verifier).
  *
  * Single source of truth for the `x-ms-device-*` header names and the
- * HMAC-SHA-256 request-signature algorithm. Previously the same
- * constants + function were copy-pasted in three places
- * (extension `services/device/deviceAuth.ts`, core `device/deviceAuth.ts`,
- * server `lib/auth/device-signature-guard.ts`) and kept in sync by
- * comments alone. Server and extension now import from here.
+ * request-signature algorithms. Previously the same constants +
+ * functions were copy-pasted in three places (extension
+ * `services/device/deviceAuth.ts`, core `device/deviceAuth.ts`, server
+ * `lib/auth/device-signature-guard.ts`) and kept in sync by comments
+ * alone. Server and extension now import from here.
  *
  * NOTE: `packages/serviceme-core/src/device/deviceAuth.ts` keeps its own
  * copy — ADL-003 forbids core → shared (and shared → core) so the core
@@ -1100,31 +1111,68 @@ interface CopilotCustomizationViewPayload {
  * for the wire format.
  */
 /** Canonical header names — MUST match the server's verifier. */
-declare const DeviceAuthHeaders: {
-    readonly deviceId: "x-ms-device-id";
-    readonly deviceSecret: "x-ms-device-secret";
-    readonly signature: "x-ms-device-signature";
-    readonly timestamp: "x-ms-device-timestamp";
-    readonly secretVersion: "x-ms-device-secret-version";
+export declare const DeviceAuthHeaders: {
+  readonly deviceId: "x-ms-device-id";
+  readonly deviceSecret: "x-ms-device-secret";
+  readonly signature: "x-ms-device-signature";
+  readonly timestamp: "x-ms-device-timestamp";
+  readonly secretVersion: "x-ms-device-secret-version";
+  /** v2 only — algorithm self-declaration so the server can verify
+   * both schemes during the legacy-client rollout window. */
+  readonly sigAlg: "x-ms-device-sig-alg";
+  /** v2 only — one-time value folded into the signature basis and
+   * checked against a server-side replay cache. */
+  readonly nonce: "x-ms-device-nonce";
 };
-interface DeviceRequestSignatureParams {
-    method: string;
-    path: string;
-    timestamp: number;
-    body: string;
-    secret: string;
+/** v2 signature algorithm identifier carried in `x-ms-device-sig-alg`. */
+export declare const DEVICE_SIG_ALG_V2 = "hmac-sha256-v2";
+export interface DeviceRequestSignatureParams {
+  method: string;
+  path: string;
+  timestamp: number;
+  body: string;
+  secret: string;
 }
 /**
- * Basis is `METHOD\nPATH\nTIMESTAMP\nBODY\nSECRET` (LF-joined, NOT JSON).
- * Output is lowercase hex SHA-256.
+ * Legacy (v1) basis: `METHOD\nPATH\nTIMESTAMP\nBODY\nSECRET`
+ * (LF-joined, NOT JSON), hashed with a secret-suffix SHA-256.
+ * Output is lowercase hex.
+ *
+ * Retained for backward compatibility with fielded extensions that
+ * predate v2; new code should use `createDeviceRequestSignatureV2`.
  *
  * Uses `js-sha256` (pure JS, synchronous, browser + Node) instead of
  * `node:crypto` so this module stays importable from the webview (the
  * shared barrel is consumed by browser bundles — `node:crypto` breaks
  * the vite/rollup build).
  */
-declare function createDeviceRequestSignature(params: DeviceRequestSignatureParams): string;
-
+export declare function createDeviceRequestSignature(params: DeviceRequestSignatureParams): string;
+export interface DeviceRequestSignatureV2Params {
+  method: string;
+  /** Full request path INCLUDING the query string (e.g.
+   * `/api/v1/tools/rtk/download?version=1.2.0&target=darwin-arm64`).
+   * v2 signs the query so GET parameters cannot be substituted or
+   * replayed independently of the signed basis. */
+  path: string;
+  timestamp: number;
+  /** One-time value; the server tracks seen nonces per device and
+   * rejects replays within the timestamp window. */
+  nonce: string;
+  body: string;
+  secret: string;
+}
+/**
+ * v2 basis: `METHOD\nPATH?QUERY\nTIMESTAMP\nNONCE\nBODY\nSECRET`
+ * (LF-joined, NOT JSON), MACed with real HMAC-SHA-256 keyed by the
+ * device secret. Output is lowercase hex.
+ *
+ * The client MUST build the exact query string it will send before
+ * signing — the server verifies against the raw `request.url` search,
+ * so the signed string and the wire URL have to match byte-for-byte.
+ */
+export declare function createDeviceRequestSignatureV2(params: DeviceRequestSignatureV2Params): string;
+//#endregion
+//#region src/git-utils.d.ts
 /**
  * Git URL Utilities
  *
@@ -1142,12 +1190,12 @@ declare function createDeviceRequestSignature(params: DeviceRequestSignaturePara
  * in `apps/server/src/app/api/v1/projects/_validators.ts`) consistent with
  * whatever the client already resolved and sent as `canonical_slug`.
  */
-declare const GIT_REMOTE_HOST_ALIASES: Readonly<Record<string, string>>;
+export declare const GIT_REMOTE_HOST_ALIASES: Readonly<Record<string, string>>;
 /**
  * Apply {@link GIT_REMOTE_HOST_ALIASES} to an already-canonical `host/owner/repo`
  * slug string (as opposed to a raw Git URL — see `normalizeGitUrl` for that).
  */
-declare function normalizeCanonicalSlug(slug: string): string;
+export declare function normalizeCanonicalSlug(slug: string): string;
 /**
  * Normalize a Git remote URL to a canonical slug: host/owner/repo
  * - Supports HTTPS, SSH, and SCP-like syntax
@@ -1157,42 +1205,43 @@ declare function normalizeCanonicalSlug(slug: string): string;
  *
  * @throws Error if the input cannot be parsed into a valid slug
  */
-declare function normalizeGitUrl(input: string): string;
+export declare function normalizeGitUrl(input: string): string;
 /**
  * Validate whether a string matches the canonical slug format: host/owner/repo
  * Requires at least three segments (host + two path parts).
  * Allows percent-encoded characters (e.g. %20) for hosts like Azure DevOps
  * that permit spaces in project/repo names.
  */
-declare function isValidCanonicalSlug(slug: string): boolean;
-
-interface GitHubUser {
-    id: number;
-    login: string;
-    email: string | null;
-    name: string | null;
-    avatar_url: string | null;
-    plan?: {
-        name: string;
-        space: number;
-        collaborators: number;
-        private_repos: number;
-    };
-    [key: string]: unknown;
+export declare function isValidCanonicalSlug(slug: string): boolean;
+//#endregion
+//#region src/github-api.d.ts
+export interface GitHubUser {
+  id: number;
+  login: string;
+  email: string | null;
+  name: string | null;
+  avatar_url: string | null;
+  plan?: {
+    name: string;
+    space: number;
+    collaborators: number;
+    private_repos: number;
+  };
+  [key: string]: unknown;
 }
 interface GitHubEmailRecord {
-    email: string;
-    primary: boolean;
-    verified: boolean;
-    visibility: "public" | "private" | null;
+  email: string;
+  primary: boolean;
+  verified: boolean;
+  visibility: "public" | "private" | null;
 }
-type GitHubOrgMembershipStatus = "active" | "pending" | "not_member" | "forbidden" | "unauthorized";
-interface GitHubOrgMembershipCheckResult {
-    status: GitHubOrgMembershipStatus;
-    httpStatus: number;
-    organization: string;
-    role: string | null;
-    directMembership: boolean | null;
+export type GitHubOrgMembershipStatus = "active" | "pending" | "not_member" | "forbidden" | "unauthorized";
+export interface GitHubOrgMembershipCheckResult {
+  status: GitHubOrgMembershipStatus;
+  httpStatus: number;
+  organization: string;
+  role: string | null;
+  directMembership: boolean | null;
 }
 /**
  * Fetch user info from GitHub API
@@ -1200,19 +1249,19 @@ interface GitHubOrgMembershipCheckResult {
  * @returns GitHubUser object
  * @throws Error if request fails or token is invalid
  */
-declare function fetchGitHubUser(token: string): Promise<GitHubUser>;
+export declare function fetchGitHubUser(token: string): Promise<GitHubUser>;
 declare function pickPreferredGitHubEmail(emails: GitHubEmailRecord[]): string | null;
 declare function sanitizeEmail(email: string | null | undefined): string | null;
-declare const __internal: {
-    pickPreferredGitHubEmail: typeof pickPreferredGitHubEmail;
-    sanitizeEmail: typeof sanitizeEmail;
+export declare const __internal: {
+  pickPreferredGitHubEmail: typeof pickPreferredGitHubEmail;
+  sanitizeEmail: typeof sanitizeEmail;
 };
 /**
  * Fetch the authenticated user's membership details for a GitHub organization.
  * Uses the memberships list endpoint so callers can distinguish active, pending,
  * and indeterminate states instead of collapsing everything into a boolean.
  */
-declare function getGitHubOrgMembership(token: string, org: string): Promise<GitHubOrgMembershipCheckResult>;
+export declare function getGitHubOrgMembership(token: string, org: string): Promise<GitHubOrgMembershipCheckResult>;
 /**
  * Check if the token owner is authorized for a given GitHub organization.
  * Uses the authenticated user's own token — works for both public and private membership.
@@ -1220,12 +1269,14 @@ declare function getGitHubOrgMembership(token: string, org: string): Promise<Git
  * @param token GitHub Personal Access Token or OAuth Access Token
  * @param org GitHub organization name
  */
-declare function checkGitHubOrgMembership(token: string, org: string): Promise<boolean>;
-
-declare function isGitHubLocalEmail(email: string | null | undefined): boolean;
-declare function buildGitHubLocalEmail(login: string): string;
-declare function resolvePrimaryEmail(login: string, email: string | null | undefined): string;
-
+export declare function checkGitHubOrgMembership(token: string, org: string): Promise<boolean>;
+//#endregion
+//#region src/github-user-email.d.ts
+export declare function isGitHubLocalEmail(email: string | null | undefined): boolean;
+export declare function buildGitHubLocalEmail(login: string): string;
+export declare function resolvePrimaryEmail(login: string, email: string | null | undefined): string;
+//#endregion
+//#region src/logger/index.d.ts
 /**
  * Unified, environment-agnostic logger contract for the SERVICEME monorepo.
  *
@@ -1243,11 +1294,11 @@ declare function resolvePrimaryEmail(login: string, email: string | null | undef
  *    {@link createConsoleLogger} fallback defined here.
  */
 /** Severity levels, ordered low → high. */
-declare enum LogLevel {
-    DEBUG = 0,
-    INFO = 1,
-    WARN = 2,
-    ERROR = 3
+export declare enum LogLevel {
+  DEBUG = 0,
+  INFO = 1,
+  WARN = 2,
+  ERROR = 3
 }
 /**
  * The logger contract every package implements / consumes.
@@ -1258,16 +1309,16 @@ declare enum LogLevel {
  * implementation can normalize / redact it; implementations SHOULD run
  * {@link normalizeErrorForLog} on that value before emitting.
  */
-interface ILogger {
-    debug(message: string, ...args: unknown[]): void;
-    info(message: string, ...args: unknown[]): void;
-    warn(message: string, ...args: unknown[]): void;
-    error(message: string, error?: unknown, ...args: unknown[]): void;
-    setLevel(level: LogLevel): void;
-    /** Optional — file-backed loggers return their directory. */
-    getLogDir?(): string | undefined;
-    /** Optional — UI-backed loggers reveal their sink (e.g. an OutputChannel). */
-    show?(): void;
+export interface ILogger {
+  debug(message: string, ...args: unknown[]): void;
+  info(message: string, ...args: unknown[]): void;
+  warn(message: string, ...args: unknown[]): void;
+  error(message: string, error?: unknown, ...args: unknown[]): void;
+  setLevel(level: LogLevel): void;
+  /** Optional — file-backed loggers return their directory. */
+  getLogDir?(): string | undefined;
+  /** Optional — UI-backed loggers reveal their sink (e.g. an OutputChannel). */
+  show?(): void;
 }
 /**
  * Normalize any thrown value into a serializable record for logging.
@@ -1279,7 +1330,7 @@ interface ILogger {
  * `apps/extension/src/core/logger/Logger.ts` so every package shares one
  * normalization path.
  */
-declare function normalizeErrorForLog(error: unknown): Record<string, unknown>;
+export declare function normalizeErrorForLog(error: unknown): Record<string, unknown>;
 /**
  * Create a console-backed {@link ILogger}.
  *
@@ -1293,8 +1344,9 @@ declare function normalizeErrorForLog(error: unknown): Record<string, unknown>;
  * This is the canonical fallback for packages without a richer sink (cli,
  * webview bootstrap, extension logger self-diagnostics).
  */
-declare function createConsoleLogger(name: string): ILogger;
-
+export declare function createConsoleLogger(name: string): ILogger;
+//#endregion
+//#region src/types/protocol-contracts.d.ts
 /**
  * Protocol Contract Types — single source of truth.
  *
@@ -1325,180 +1377,181 @@ declare function createConsoleLogger(name: string): ILogger;
  *   the module stays self-contained (e.g. `ScheduledTaskV1`, `TaskWorkspaceRef`,
  *   `TaskRunStatus`, `BridgeLinkMode`).
  */
-type ScheduledTaskType = "command" | "shell" | "http_request" | "github_copilot_cli";
-interface CommandPayload {
-    command: string;
-    args?: unknown[];
-}
-interface ShellPayload {
-    script: string;
-    cwd?: string;
-    /** Timeout in seconds. Omit for default 60s; use 0 for no limit. */
-    timeout?: number;
-}
-interface HttpRequestPayload {
-    url: string;
-    method: string;
-    headers?: Record<string, string>;
-    body?: string;
-    /** Timeout in seconds. Omit for default 30s; use 0 for no limit. */
-    timeout?: number;
-}
-interface GithubCopilotCliPayload {
-    prompt: string;
-    workspace?: string;
-    autopilot?: boolean;
-    allowTools?: string[];
-    /** Timeout in seconds. Omit for default 300s; use 0 for no limit. */
-    timeout?: number;
-    model?: string;
-    agent?: string;
-}
-type TaskPayload = CommandPayload | ShellPayload | HttpRequestPayload | GithubCopilotCliPayload;
+export type ScheduledTaskType = "command" | "shell" | "http_request" | "github_copilot_cli";
+export interface CommandPayload {
+  command: string;
+  args?: unknown[];
+}
+export interface ShellPayload {
+  script: string;
+  cwd?: string;
+  /** Timeout in seconds. Omit for default 60s; use 0 for no limit. */
+  timeout?: number;
+}
+export interface HttpRequestPayload {
+  url: string;
+  method: string;
+  headers?: Record<string, string>;
+  body?: string;
+  /** Timeout in seconds. Omit for default 30s; use 0 for no limit. */
+  timeout?: number;
+}
+export interface GithubCopilotCliPayload {
+  prompt: string;
+  workspace?: string;
+  autopilot?: boolean;
+  allowTools?: string[];
+  /** Timeout in seconds. Omit for default 300s; use 0 for no limit. */
+  timeout?: number;
+  model?: string;
+  agent?: string;
+}
+export type TaskPayload = CommandPayload | ShellPayload | HttpRequestPayload | GithubCopilotCliPayload;
 /** Reference to the workspace a scheduled task is bound to. Required by v2. */
-interface TaskWorkspaceRef {
-    /** Absolute path to the workspace root. Required and unique. */
-    path: string;
-    /** Display name. Defaults to `path` basename; users may override. */
-    name: string;
-    /** `git@github.com:owner/repo.git` — auto-detected at task creation. */
-    gitRemote?: string;
-    /** Current branch — auto-detected at task creation; verified at execute. */
-    gitBranch?: string;
-    /** Last time the extension saw this workspace alive. */
-    lastSeenAt?: string;
+export interface TaskWorkspaceRef {
+  /** Absolute path to the workspace root. Required and unique. */
+  path: string;
+  /** Display name. Defaults to `path` basename; users may override. */
+  name: string;
+  /** `git@github.com:owner/repo.git` — auto-detected at task creation. */
+  gitRemote?: string;
+  /** Current branch — auto-detected at task creation; verified at execute. */
+  gitBranch?: string;
+  /** Last time the extension saw this workspace alive. */
+  lastSeenAt?: string;
 }
 /**
  * v1 task shape — kept for reading legacy `<workspace>/.serviceme/scheduled-tasks.json`
  * during migration. New code should always use {@link ScheduledTask} (v2).
  */
-interface ScheduledTaskV1 {
-    id: string;
-    name: string;
-    description?: string;
-    enabled: boolean;
-    scheduleType: "cron" | "interval";
-    schedule: string;
-    taskType: ScheduledTaskType;
-    payload: TaskPayload;
-    createdAt: string;
-    updatedAt: string;
+export interface ScheduledTaskV1 {
+  id: string;
+  name: string;
+  description?: string;
+  enabled: boolean;
+  scheduleType: "cron" | "interval";
+  schedule: string;
+  taskType: ScheduledTaskType;
+  payload: TaskPayload;
+  createdAt: string;
+  updatedAt: string;
 }
 /** Runtime status of the most recent execution for a task. */
-type TaskRunStatus = "ok" | "error" | "skipped";
+export type TaskRunStatus = "ok" | "error" | "skipped";
 /**
  * v2 scheduled task — adds required `workspace` reference and runtime metadata
  * fields. See `docs/architecture/skill-agent-v2-repo.md` §14.2.
  */
-interface ScheduledTask extends ScheduledTaskV1 {
-    /** Required in v2. The workspace this task executes in. */
-    workspace: TaskWorkspaceRef;
-    /** ISO timestamp of the most recent execution. */
-    lastRunAt?: string;
-    /** Status of the most recent execution. */
-    lastRunStatus?: TaskRunStatus;
-    /** Error message from the most recent failed execution. */
-    lastRunError?: string;
-    /** Duration of the most recent execution, in milliseconds. */
-    lastRunDurationMs?: number;
-    /** Next scheduled run (computed by scheduler). */
-    nextRunAt?: string;
-    /** Total successful executions. */
-    runCount?: number;
+export interface ScheduledTask extends ScheduledTaskV1 {
+  /** Required in v2. The workspace this task executes in. */
+  workspace: TaskWorkspaceRef;
+  /** ISO timestamp of the most recent execution. */
+  lastRunAt?: string;
+  /** Status of the most recent execution. */
+  lastRunStatus?: TaskRunStatus;
+  /** Error message from the most recent failed execution. */
+  lastRunError?: string;
+  /** Duration of the most recent execution, in milliseconds. */
+  lastRunDurationMs?: number;
+  /** Next scheduled run (computed by scheduler). */
+  nextRunAt?: string;
+  /** Total successful executions. */
+  runCount?: number;
 }
 /** v2 config — single source of truth for the global scheduler. */
-interface ScheduledTasksConfig {
-    version: 2;
-    tasks: ScheduledTask[];
-}
-type TaskExecutionStatus = "running" | "success" | "failure" | "timeout" | "cancelled";
-interface TaskExecutionLog {
-    id: string;
-    taskId: string;
-    taskName: string;
-    startedAt: string;
-    finishedAt: string;
-    status: Exclude<TaskExecutionStatus, "running">;
-    output?: string;
-    error?: string;
-}
-type AgentToolRiskLevel = "high" | "medium" | "low";
-interface AgentToolPermission {
-    tool: string;
-    riskLevel: AgentToolRiskLevel;
-}
-interface AgentPermissionSummary {
-    agentId: string;
-    agentName: string;
-    tools: AgentToolPermission[];
-    highRiskCount: number;
-    mediumRiskCount: number;
-    lowRiskCount: number;
+export interface ScheduledTasksConfig {
+  version: 2;
+  tasks: ScheduledTask[];
+}
+export type TaskExecutionStatus = "running" | "success" | "failure" | "timeout" | "cancelled";
+export interface TaskExecutionLog {
+  id: string;
+  taskId: string;
+  taskName: string;
+  startedAt: string;
+  finishedAt: string;
+  status: Exclude<TaskExecutionStatus, "running">;
+  output?: string;
+  error?: string;
+}
+export type AgentToolRiskLevel = "high" | "medium" | "low";
+export interface AgentToolPermission {
+  tool: string;
+  riskLevel: AgentToolRiskLevel;
+}
+export interface AgentPermissionSummary {
+  agentId: string;
+  agentName: string;
+  tools: AgentToolPermission[];
+  highRiskCount: number;
+  mediumRiskCount: number;
+  lowRiskCount: number;
 }
 /** Kinds of artifacts in the catalog. */
-type BridgeSkillKind = "skill" | "agent";
+export type BridgeSkillKind = "skill" | "agent";
 /** Which side of the link is reported. Matches SkillLinker's `LinkMode`. */
-type BridgeLinkMode = "symlink" | "junction" | "copy";
+export type BridgeLinkMode = "symlink" | "junction" | "copy";
 /** A single skill/agent entry inside a repo (SkillStore.SkillEntry). */
-interface BridgeSkillRepoEntry {
-    repoId: string;
-    name: string;
-    kind: BridgeSkillKind;
-    /** Absolute path to the manifest file. */
-    manifestPath: string;
-    /** Absolute path to the entry's directory. */
-    dir: string;
-    /** Best-effort parsed frontmatter. */
-    frontmatter: Record<string, unknown>;
-    /** ISO timestamp of the manifest's mtime. */
-    modifiedAt: string;
-    /** Machine-local disable mark — true when the entry's link is removed
-     * on this machine while its installation intent stays. Overlaid by
-     * the bridge; absent on older CLIs. */
-    disabled?: boolean;
+export interface BridgeSkillRepoEntry {
+  repoId: string;
+  name: string;
+  kind: BridgeSkillKind;
+  /** Absolute path to the manifest file. */
+  manifestPath: string;
+  /** Absolute path to the entry's directory. */
+  dir: string;
+  /** Best-effort parsed frontmatter. */
+  frontmatter: Record<string, unknown>;
+  /** ISO timestamp of the manifest's mtime. */
+  modifiedAt: string;
+  /** Machine-local disable mark — true when the entry's link is removed
+   * on this machine while its installation intent stays. Overlaid by
+   * the bridge; absent on older CLIs. */
+  disabled?: boolean;
 }
 /** A single file inside an entry (SkillStore.SkillFile). */
-interface BridgeSkillRepoFile {
-    /** Path relative to the entry's directory. */
-    path: string;
-    /** UTF-8 content. */
-    content: string;
+export interface BridgeSkillRepoFile {
+  /** Path relative to the entry's directory. */
+  path: string;
+  /** UTF-8 content. */
+  content: string;
 }
 /** A symlink/junction currently present in a workspace or user (global) scope. */
-interface BridgeLinkedSkill {
-    repoId: string;
-    name: string;
-    linkPath: string;
-    targetPath: string;
-    mode: BridgeLinkMode;
-    /** Which scope this link lives in — "workspace" or "user" (global, `~/.agents/...`). */
-    scope: "workspace" | "user";
+export interface BridgeLinkedSkill {
+  repoId: string;
+  name: string;
+  linkPath: string;
+  targetPath: string;
+  mode: BridgeLinkMode;
+  /** Which scope this link lives in — "workspace" or "user" (global, `~/.agents/...`). */
+  scope: "workspace" | "user";
 }
 /** A single entry from `repos.json` (subset of RepoConfig). */
-interface BridgeRepoEntry {
-    id: string;
-    name: string;
-    url: string;
-    branch: string;
-    enabled: boolean;
-    useProxy?: boolean;
-    writeEnabled: boolean;
-    source: "default" | "user";
-    description?: string;
-    addedAt: string;
-    lastSyncAt?: string;
-    lastSyncCommitSha?: string;
-    lastSyncStatus?: "ok" | "error";
-    lastSyncError?: string;
+export interface BridgeRepoEntry {
+  id: string;
+  name: string;
+  url: string;
+  branch: string;
+  enabled: boolean;
+  useProxy?: boolean;
+  writeEnabled: boolean;
+  source: "default" | "user";
+  description?: string;
+  addedAt: string;
+  lastSyncAt?: string;
+  lastSyncCommitSha?: string;
+  lastSyncStatus?: "ok" | "error";
+  lastSyncError?: string;
 }
 /** A single line of a sync run. */
-interface BridgeRepoSyncPull {
-    repoId: string;
-    status: "ok" | "error";
-    commitSha?: string;
-    error?: string;
+export interface BridgeRepoSyncPull {
+  repoId: string;
+  status: "ok" | "error";
+  commitSha?: string;
+  error?: string;
 }
-
+//#endregion
+//#region src/webview-contract.d.ts
 /**
  * Webview ↔ extension message-contract types.
  *
@@ -1515,180 +1568,181 @@ interface BridgeRepoSyncPull {
  * NOTE: `apps/webview-ui/src/types/index.ts` re-exports these so
  * existing webview imports keep working unchanged.
  */
-interface ExternalTool {
-    id: string;
-    name: string;
-    url: string;
-    description?: string;
-    icon?: string;
-    isDefault?: boolean;
-}
-interface AzureProfile {
-    id: string;
-    name: string;
-    method: "FTP" | "MSDeploy";
-    host: string;
-    username?: string;
-    password?: string;
-    remotePath?: string;
-    port?: number;
-}
-interface ApiConfig {
-    schemaPath: string;
-    requestLibPath?: string;
-    projectName?: string;
-    namespace?: string;
-    serversPath?: string;
-    apiPrefix?: string;
-    mock?: boolean;
-    templatesFolder?: string;
-    enumStyle?: "string-literal" | "enum";
-}
-
-declare enum WebviewMessageType {
-    WebviewReady = "webviewReady",
-    Ready = "ready",
-    Log = "log",
-    ExecuteCommand = "executeCommand",
-    OpenUrl = "openUrl",
-    UsePrompt = "usePrompt",
-    UpdateAzureProfiles = "updateAzureProfiles",
-    UpdateAzureProfile = "updateAzureProfile",
-    GetApiConfig = "getApiConfig",
-    UpdateApiConfig = "updateApiConfig",
-    SaveApiConfig = "saveApiConfig",
-    ApiConfigSaveFailed = "apiConfigSaveFailed",
-    ExportApiConfig = "exportApiConfig",
-    ImportApiConfig = "importApiConfig",
-    ApiConfigImported = "apiConfigImported",
-    AddExternalTool = "addExternalTool",
-    UpdateExternalTool = "updateExternalTool",
-    UpdateExternalTools = "updateExternalTools",
-    DeleteExternalTool = "deleteExternalTool",
-    ReorderExternalTools = "reorderExternalTools",
-    UpdateNgrokStatus = "updateNgrokStatus",
-    UpdateServerStatus = "updateServerStatus",
-    UpdateOcxStatus = "updateOcxStatus",
-    UpdateRtkStatus = "updateRtkStatus",
-    UpdateCodegraphStatus = "updateCodegraphStatus",
-    GetAuthState = "getAuthState",
-    UpdateAuthState = "updateAuthState",
-    Login = "login",
-    Logout = "logout",
-    GetAccounts = "getAccounts",
-    UpdateAccounts = "updateAccounts",
-    SwitchAccount = "switchAccount",
-    GetUserProfile = "getUserProfile",
-    UpdateUserProfile = "updateUserProfile",
-    UserProfileUpdated = "userProfileUpdated",
-    AddExtraEmail = "addExtraEmail",
-    DeleteExtraEmail = "deleteExtraEmail",
-    GetCalendarHolidays = "getCalendarHolidays",
-    UpdateCalendarHolidays = "updateCalendarHolidays",
-    GetCalendarLeaves = "getCalendarLeaves",
-    UpdateCalendarLeaves = "updateCalendarLeaves",
-    CreateCalendarLeave = "createCalendarLeave",
-    DeleteCalendarLeave = "deleteCalendarLeave",
-    GetCalendarNotes = "getCalendarNotes",
-    UpdateCalendarNotes = "updateCalendarNotes",
-    SaveCalendarNote = "saveCalendarNote",
-    GetCalendarMonthSchedule = "getCalendarMonthSchedule",
-    GetScheduledTasks = "getScheduledTasks",
-    UpdateScheduledTasks = "updateScheduledTasks",
-    CreateScheduledTask = "createScheduledTask",
-    EditScheduledTask = "editScheduledTask",
-    DeleteScheduledTask = "deleteScheduledTask",
-    ToggleScheduledTask = "toggleScheduledTask",
-    TriggerScheduledTask = "triggerScheduledTask",
-    CancelTaskExecution = "cancelTaskExecution",
-    GetTaskExecutionLogs = "getTaskExecutionLogs",
-    ClearTaskExecutionLogs = "clearTaskExecutionLogs",
-    UpdateTaskExecutionLogs = "updateTaskExecutionLogs",
-    UpdateTaskExecutionState = "updateTaskExecutionState",
-    GetCurrentWorkspace = "getCurrentWorkspace",
-    UpdateCurrentWorkspace = "updateCurrentWorkspace",
-    GetProviders = "getProviders",
-    ProvidersResponse = "providersResponse",
-    AddProvider = "addProvider",
-    UpdateProvider = "updateProvider",
-    RemoveProvider = "removeProvider",
-    SetDefaultProvider = "setDefaultProvider",
-    SetProviderEnabled = "setProviderEnabled",
-    SetProviderOrder = "setProviderOrder",
-    TestProvider = "testProvider",
-    ProviderTestResultMessage = "providerTestResult",
-    TestProviderModel = "testProviderModel",
-    ProviderTestModelResultMessage = "providerTestModelResult",
-    DefaultProviderChanged = "defaultProviderChanged",
-    FetchProviderModels = "fetchProviderModels",
-    FetchProviderModelsResult = "fetchProviderModelsResult",
-    GetProviderUsage = "getProviderUsage",
-    ProviderUsageResponse = "providerUsageResponse",
-    SetCacheControlEnabled = "setCacheControlEnabled",
-    GetByomSettings = "getByomSettings",
-    ByomSettingsResponse = "byomSettingsResponse",
-    ListSkillRepoEntries = "listSkillRepoEntries",
-    GetSkillRepoEntry = "getSkillRepoEntry",
-    InstallSkillRepoEntry = "installSkillRepoEntry",
-    ConvertSkillRepoEntryToSymlink = "convertSkillRepoEntryToSymlink",
-    UninstallSkillRepoEntry = "uninstallSkillRepoEntry",
-    SetSkillRepoEntryEnabled = "setSkillRepoEntryEnabled",
-    ListLinkedSkills = "listLinkedSkills",
-    UpdateSkillRepoCatalog = "updateSkillRepoCatalog",
-    UpdateSkillRepoInstall = "updateSkillRepoInstall",
-    UpdateLinkedSkills = "updateLinkedSkills",
-    CreateSkillRepoDraft = "createSkillRepoDraft",
-    CommitSkillRepoDraft = "commitSkillRepoDraft",
-    ListSkillRepoDrafts = "listSkillRepoDrafts",
-    DeleteSkillRepoDraft = "deleteSkillRepoDraft",
-    UpdateSkillRepoDraft = "updateSkillRepoDraft",
-    ListRepositories = "listRepositories",
-    AddRepository = "addRepository",
-    UpdateRepository = "updateRepository",
-    RemoveRepository = "removeRepository",
-    EnableRepository = "enableRepository",
-    DisableRepository = "disableRepository",
-    SyncRepository = "syncRepository",
-    SyncAllRepositories = "syncAllRepositories",
-    ResetParseCache = "resetParseCache",
-    ListCopilotPlugins = "listCopilotPlugins",
-    RegisterCopilotPlugin = "registerCopilotPlugin",
-    UnregisterCopilotPlugin = "unregisterCopilotPlugin",
-    SetCopilotPluginEnabled = "setCopilotPluginEnabled",
-    GetCopilotContentStatus = "getCopilotContentStatus",
-    RestoreCopilotContent = "restoreCopilotContent",
-    ApproveCopilotContent = "approveCopilotContent",
-    UpdateRepositoryList = "updateRepositoryList",
-    UpdateRepositoryAdd = "updateRepositoryAdd",
-    UpdateRepositoryUpdate = "updateRepositoryUpdate",
-    UpdateRepositoryRemove = "updateRepositoryRemove",
-    UpdateRepositoryToggle = "updateRepositoryToggle",
-    UpdateRepositorySyncResult = "updateRepositorySyncResult",
-    UpdateCopilotContentStatus = "updateCopilotContentStatus",
-    GetCopilotCustomizations = "getCopilotCustomizations",
-    SyncCopilotCustomizations = "syncCopilotCustomizations",
-    UpdateCopilotCustomizations = "updateCopilotCustomizations",
-    InstallCopilotPackage = "installCopilotPackage",
-    MoveCopilotPackage = "moveCopilotPackage",
-    UninstallCopilotPackage = "uninstallCopilotPackage",
-    ListCopilotSources = "listCopilotSources",
-    RemoveCopilotSource = "removeCopilotSource",
-    PreviewCopilotUpdate = "previewCopilotUpdate",
-    UpdateCopilotPackage = "updateCopilotPackage",
-    PreviewCopilotLegacy = "previewCopilotLegacy",
-    MigrateCopilotLegacy = "migrateCopilotLegacy",
-    UpdateCopilotSources = "updateCopilotSources",
-    UpdateCopilotUpdatePreview = "updateCopilotUpdatePreview",
-    UpdateCopilotLegacyPreview = "updateCopilotLegacyPreview",
-    GetUtilityModels = "getUtilityModels",
-    UtilityModelsResponse = "utilityModelsResponse",
-    UpdateUtilityModels = "updateUtilityModels",
-    GetServerProxyState = "getServerProxyState",
-    ServerProxyStateResponse = "serverProxyStateResponse",
-    SetServerProxyEnabled = "setServerProxyEnabled",
-    SetServerProxyAllowOverride = "setServerProxyAllowOverride",
-    GetCachedServerUrl = "getCachedServerUrl",
-    CachedServerUrlResponse = "cachedServerUrlResponse"
+export interface ExternalTool {
+  id: string;
+  name: string;
+  url: string;
+  description?: string;
+  icon?: string;
+  isDefault?: boolean;
+}
+export interface AzureProfile {
+  id: string;
+  name: string;
+  method: "FTP" | "MSDeploy";
+  host: string;
+  username?: string;
+  password?: string;
+  remotePath?: string;
+  port?: number;
+}
+export interface ApiConfig {
+  schemaPath: string;
+  requestLibPath?: string;
+  projectName?: string;
+  namespace?: string;
+  serversPath?: string;
+  apiPrefix?: string;
+  mock?: boolean;
+  templatesFolder?: string;
+  enumStyle?: "string-literal" | "enum";
+}
+//#endregion
+//#region src/messages.d.ts
+export declare enum WebviewMessageType {
+  WebviewReady = "webviewReady",
+  Ready = "ready",
+  Log = "log",
+  ExecuteCommand = "executeCommand",
+  OpenUrl = "openUrl",
+  UsePrompt = "usePrompt",
+  UpdateAzureProfiles = "updateAzureProfiles",
+  UpdateAzureProfile = "updateAzureProfile",
+  GetApiConfig = "getApiConfig",
+  UpdateApiConfig = "updateApiConfig",
+  SaveApiConfig = "saveApiConfig",
+  ApiConfigSaveFailed = "apiConfigSaveFailed",
+  ExportApiConfig = "exportApiConfig",
+  ImportApiConfig = "importApiConfig",
+  ApiConfigImported = "apiConfigImported",
+  AddExternalTool = "addExternalTool",
+  UpdateExternalTool = "updateExternalTool",
+  UpdateExternalTools = "updateExternalTools",
+  DeleteExternalTool = "deleteExternalTool",
+  ReorderExternalTools = "reorderExternalTools",
+  UpdateNgrokStatus = "updateNgrokStatus",
+  UpdateServerStatus = "updateServerStatus",
+  UpdateOcxStatus = "updateOcxStatus",
+  UpdateRtkStatus = "updateRtkStatus",
+  UpdateCodegraphStatus = "updateCodegraphStatus",
+  GetAuthState = "getAuthState",
+  UpdateAuthState = "updateAuthState",
+  Login = "login",
+  Logout = "logout",
+  GetAccounts = "getAccounts",
+  UpdateAccounts = "updateAccounts",
+  SwitchAccount = "switchAccount",
+  GetUserProfile = "getUserProfile",
+  UpdateUserProfile = "updateUserProfile",
+  UserProfileUpdated = "userProfileUpdated",
+  AddExtraEmail = "addExtraEmail",
+  DeleteExtraEmail = "deleteExtraEmail",
+  GetCalendarHolidays = "getCalendarHolidays",
+  UpdateCalendarHolidays = "updateCalendarHolidays",
+  GetCalendarLeaves = "getCalendarLeaves",
+  UpdateCalendarLeaves = "updateCalendarLeaves",
+  CreateCalendarLeave = "createCalendarLeave",
+  DeleteCalendarLeave = "deleteCalendarLeave",
+  GetCalendarNotes = "getCalendarNotes",
+  UpdateCalendarNotes = "updateCalendarNotes",
+  SaveCalendarNote = "saveCalendarNote",
+  GetCalendarMonthSchedule = "getCalendarMonthSchedule",
+  GetScheduledTasks = "getScheduledTasks",
+  UpdateScheduledTasks = "updateScheduledTasks",
+  CreateScheduledTask = "createScheduledTask",
+  EditScheduledTask = "editScheduledTask",
+  DeleteScheduledTask = "deleteScheduledTask",
+  ToggleScheduledTask = "toggleScheduledTask",
+  TriggerScheduledTask = "triggerScheduledTask",
+  CancelTaskExecution = "cancelTaskExecution",
+  GetTaskExecutionLogs = "getTaskExecutionLogs",
+  ClearTaskExecutionLogs = "clearTaskExecutionLogs",
+  UpdateTaskExecutionLogs = "updateTaskExecutionLogs",
+  UpdateTaskExecutionState = "updateTaskExecutionState",
+  GetCurrentWorkspace = "getCurrentWorkspace",
+  UpdateCurrentWorkspace = "updateCurrentWorkspace",
+  GetProviders = "getProviders",
+  ProvidersResponse = "providersResponse",
+  AddProvider = "addProvider",
+  UpdateProvider = "updateProvider",
+  RemoveProvider = "removeProvider",
+  SetDefaultProvider = "setDefaultProvider",
+  SetProviderEnabled = "setProviderEnabled",
+  SetProviderOrder = "setProviderOrder",
+  TestProvider = "testProvider",
+  ProviderTestResultMessage = "providerTestResult",
+  TestProviderModel = "testProviderModel",
+  ProviderTestModelResultMessage = "providerTestModelResult",
+  DefaultProviderChanged = "defaultProviderChanged",
+  FetchProviderModels = "fetchProviderModels",
+  FetchProviderModelsResult = "fetchProviderModelsResult",
+  GetProviderUsage = "getProviderUsage",
+  ProviderUsageResponse = "providerUsageResponse",
+  SetCacheControlEnabled = "setCacheControlEnabled",
+  GetByomSettings = "getByomSettings",
+  ByomSettingsResponse = "byomSettingsResponse",
+  ListSkillRepoEntries = "listSkillRepoEntries",
+  GetSkillRepoEntry = "getSkillRepoEntry",
+  InstallSkillRepoEntry = "installSkillRepoEntry",
+  ConvertSkillRepoEntryToSymlink = "convertSkillRepoEntryToSymlink",
+  UninstallSkillRepoEntry = "uninstallSkillRepoEntry",
+  SetSkillRepoEntryEnabled = "setSkillRepoEntryEnabled",
+  ListLinkedSkills = "listLinkedSkills",
+  UpdateSkillRepoCatalog = "updateSkillRepoCatalog",
+  UpdateSkillRepoInstall = "updateSkillRepoInstall",
+  UpdateLinkedSkills = "updateLinkedSkills",
+  CreateSkillRepoDraft = "createSkillRepoDraft",
+  CommitSkillRepoDraft = "commitSkillRepoDraft",
+  ListSkillRepoDrafts = "listSkillRepoDrafts",
+  DeleteSkillRepoDraft = "deleteSkillRepoDraft",
+  UpdateSkillRepoDraft = "updateSkillRepoDraft",
+  ListRepositories = "listRepositories",
+  AddRepository = "addRepository",
+  UpdateRepository = "updateRepository",
+  RemoveRepository = "removeRepository",
+  EnableRepository = "enableRepository",
+  DisableRepository = "disableRepository",
+  SyncRepository = "syncRepository",
+  SyncAllRepositories = "syncAllRepositories",
+  ResetParseCache = "resetParseCache",
+  ListCopilotPlugins = "listCopilotPlugins",
+  RegisterCopilotPlugin = "registerCopilotPlugin",
+  UnregisterCopilotPlugin = "unregisterCopilotPlugin",
+  SetCopilotPluginEnabled = "setCopilotPluginEnabled",
+  GetCopilotContentStatus = "getCopilotContentStatus",
+  RestoreCopilotContent = "restoreCopilotContent",
+  ApproveCopilotContent = "approveCopilotContent",
+  UpdateRepositoryList = "updateRepositoryList",
+  UpdateRepositoryAdd = "updateRepositoryAdd",
+  UpdateRepositoryUpdate = "updateRepositoryUpdate",
+  UpdateRepositoryRemove = "updateRepositoryRemove",
+  UpdateRepositoryToggle = "updateRepositoryToggle",
+  UpdateRepositorySyncResult = "updateRepositorySyncResult",
+  UpdateCopilotContentStatus = "updateCopilotContentStatus",
+  GetCopilotCustomizations = "getCopilotCustomizations",
+  SyncCopilotCustomizations = "syncCopilotCustomizations",
+  UpdateCopilotCustomizations = "updateCopilotCustomizations",
+  InstallCopilotPackage = "installCopilotPackage",
+  MoveCopilotPackage = "moveCopilotPackage",
+  UninstallCopilotPackage = "uninstallCopilotPackage",
+  ListCopilotSources = "listCopilotSources",
+  RemoveCopilotSource = "removeCopilotSource",
+  PreviewCopilotUpdate = "previewCopilotUpdate",
+  UpdateCopilotPackage = "updateCopilotPackage",
+  PreviewCopilotLegacy = "previewCopilotLegacy",
+  MigrateCopilotLegacy = "migrateCopilotLegacy",
+  UpdateCopilotSources = "updateCopilotSources",
+  UpdateCopilotUpdatePreview = "updateCopilotUpdatePreview",
+  UpdateCopilotLegacyPreview = "updateCopilotLegacyPreview",
+  GetUtilityModels = "getUtilityModels",
+  UtilityModelsResponse = "utilityModelsResponse",
+  UpdateUtilityModels = "updateUtilityModels",
+  GetServerProxyState = "getServerProxyState",
+  ServerProxyStateResponse = "serverProxyStateResponse",
+  SetServerProxyEnabled = "setServerProxyEnabled",
+  SetServerProxyAllowOverride = "setServerProxyAllowOverride",
+  GetCachedServerUrl = "getCachedServerUrl",
+  CachedServerUrlResponse = "cachedServerUrlResponse"
 }
 /**
  * Top-level const aliases for the BYO Utility Models message-type
@@ -1704,18 +1758,18 @@ declare enum WebviewMessageType {
  * sync; Task 5 (extension handler) uses the enum members, the webview
  * component + tests use the consts.
  */
-declare const GetUtilityModels: "getUtilityModels";
-declare const UtilityModelsResponse: "utilityModelsResponse";
-declare const UpdateUtilityModels: "updateUtilityModels";
-declare const SetCacheControlEnabled: "setCacheControlEnabled";
-declare const GetByomSettings: "getByomSettings";
-declare const ByomSettingsResponse: "byomSettingsResponse";
-declare const GetServerProxyState: "getServerProxyState";
-declare const ServerProxyStateResponse: "serverProxyStateResponse";
-declare const SetServerProxyEnabled: "setServerProxyEnabled";
-declare const SetServerProxyAllowOverride: "setServerProxyAllowOverride";
-declare const GetCachedServerUrl: "getCachedServerUrl";
-declare const CachedServerUrlResponse: "cachedServerUrlResponse";
+export declare const GetUtilityModels: "getUtilityModels";
+export declare const UtilityModelsResponse: "utilityModelsResponse";
+export declare const UpdateUtilityModels: "updateUtilityModels";
+export declare const SetCacheControlEnabled: "setCacheControlEnabled";
+export declare const GetByomSettings: "getByomSettings";
+export declare const ByomSettingsResponse: "byomSettingsResponse";
+export declare const GetServerProxyState: "getServerProxyState";
+export declare const ServerProxyStateResponse: "serverProxyStateResponse";
+export declare const SetServerProxyEnabled: "setServerProxyEnabled";
+export declare const SetServerProxyAllowOverride: "setServerProxyAllowOverride";
+export declare const GetCachedServerUrl: "getCachedServerUrl";
+export declare const CachedServerUrlResponse: "cachedServerUrlResponse";
 /**
  * Snapshot of the r7 server-proxy toggle (HTTP CONNECT through intranet
  * Server). Mirrors `IProxyConfigService`'s `ProxyState` shape so the
@@ -1728,24 +1782,24 @@ declare const CachedServerUrlResponse: "cachedServerUrlResponse";
  * See `apps/extension/src/services/proxy/ProxyConfigService.ts` for
  * the authoritative source of truth.
  */
-type ServerProxySupportMode = "off" | "on" | "fallback" | "override";
-interface ServerProxySnapshot {
-    httpProxy: string | undefined;
-    httpProxyStrictSSL: boolean;
-    httpProxySupport: ServerProxySupportMode;
-    /** Self-flag at serverProxy.enabled; computed by the extension handler. */
-    enabled: boolean;
-    /**
-     * rev.21 — opt-in to bypass the `proxySupport === "override"`
-     * guard. Power users (e.g. corp environments that WANT all
-     * extensions including GitHub Copilot Chat to route through the
-     * corp tunnel) tick the "Allow under proxySupport=override"
-     * checkbox in the Webview; this flag is persisted to
-     * `~/.serviceme/server-proxy.json` alongside `enabled`.
-     */
-    allowOverride: boolean;
-    /** Last server URL we toggled ON with. Used for re-toggling and UI hint. */
-    lastServerUrl?: string;
+export type ServerProxySupportMode = "off" | "on" | "fallback" | "override";
+export interface ServerProxySnapshot {
+  httpProxy: string | undefined;
+  httpProxyStrictSSL: boolean;
+  httpProxySupport: ServerProxySupportMode;
+  /** Self-flag at serverProxy.enabled; computed by the extension handler. */
+  enabled: boolean;
+  /**
+   * rev.21 — opt-in to bypass the `proxySupport === "override"`
+   * guard. Power users (e.g. corp environments that WANT all
+   * extensions including GitHub Copilot Chat to route through the
+   * corp tunnel) tick the "Allow under proxySupport=override"
+   * checkbox in the Webview; this flag is persisted to
+   * `~/.serviceme/server-proxy.json` alongside `enabled`.
+   */
+  allowOverride: boolean;
+  /** Last server URL we toggled ON with. Used for re-toggling and UI hint. */
+  lastServerUrl?: string;
 }
 /**
  * Payload for `SetServerProxyEnabled`. The extension handler is the
@@ -1762,16 +1816,16 @@ interface ServerProxySnapshot {
  * applied as `http.proxy` even when `http.proxy` is currently empty.
  * Still subject to the `proxySupport !== "override"` server-side gate.
  */
-interface ServerProxyTogglePayload {
-    enabled: boolean;
-    /** Optional — defaults to Workspace. */
-    target?: "workspace" | "global";
-    /**
-     * Optional — override the snapshot's `http.proxy` for the write.
-     * Only honoured when `enabled === true`; ignored on disable so the
-     * existing "only clear our own write" semantics stay intact.
-     */
-    serverUrl?: string;
+export interface ServerProxyTogglePayload {
+  enabled: boolean;
+  /** Optional — defaults to Workspace. */
+  target?: "workspace" | "global";
+  /**
+   * Optional — override the snapshot's `http.proxy` for the write.
+   * Only honoured when `enabled === true`; ignored on disable so the
+   * existing "only clear our own write" semantics stay intact.
+   */
+  serverUrl?: string;
 }
 /**
  * rev.21 — payload for `SetServerProxyAllowOverride`. Toggles the
@@ -1779,8 +1833,8 @@ interface ServerProxyTogglePayload {
  * Persisted across VS Code restarts; defaults to `false` so users
  * must explicitly opt-in to the `override` mode bypass.
  */
-interface ServerProxyAllowOverridePayload {
-    allowOverride: boolean;
+export interface ServerProxyAllowOverridePayload {
+  allowOverride: boolean;
 }
 /**
  * Reply to `GetCachedServerUrl`. Carries the cached base URL resolved
@@ -1792,9 +1846,9 @@ interface ServerProxyAllowOverridePayload {
  * reachable Server — the Webview should hide the "Apply cached base
  * URL" affordance rather than offer a no-op button.
  */
-interface CachedServerUrlSnapshot {
-    baseUrl: string | null;
-    httpProxySupport: ServerProxySupportMode;
+export interface CachedServerUrlSnapshot {
+  baseUrl: string | null;
+  httpProxySupport: ServerProxySupportMode;
 }
 /**
  * Where the three `msDevTools.utilityModels.*` settings (and their
@@ -1810,16 +1864,16 @@ interface CachedServerUrlSnapshot {
  * wins over a user value when both are present), so we only need to
  * write to ONE target — the other scope just naturally inherits.
  */
-type UtilityModelScope = "user" | "workspace";
+export type UtilityModelScope = "user" | "workspace";
 /**
  * Per-field source for UI "this value comes from user / workspace /
  * default" indicators. Mirrors the `ConfigurationInspectionScope`
  * categories of `vscode.WorkspaceConfiguration.inspect(key)`.
  */
-interface UtilityModelsSource {
-    small: "user" | "workspace" | "default";
-    medium: "user" | "workspace" | "default";
-    fallbackToCopilot: "user" | "workspace" | "default";
+export interface UtilityModelsSource {
+  small: "user" | "workspace" | "default";
+  medium: "user" | "workspace" | "default";
+  fallbackToCopilot: "user" | "workspace" | "default";
 }
 /**
  * The value Copilot is ACTUALLY using right now — VS Code's real
@@ -1828,10 +1882,10 @@ interface UtilityModelsSource {
  * for editing. Computed via `configSection.get(key, default)`, the
  * same call VS Code itself uses to resolve a setting.
  */
-interface UtilityModelsEffective {
-    small: string;
-    medium: string;
-    fallbackToCopilot: boolean;
+export interface UtilityModelsEffective {
+  small: string;
+  medium: string;
+  fallbackToCopilot: boolean;
 }
 /**
  * Snapshot of the three msDevTools.utilityModels.* settings plus the
@@ -1855,17 +1909,17 @@ interface UtilityModelsEffective {
  *   title always shows what's actually in effect regardless of which
  *   scope tab happens to be open.
  */
-interface UtilityModelsSnapshot {
-    small: string;
-    medium: string;
-    fallbackToCopilot: boolean;
-    enabledModelIds: string[];
-    /** Effective scope for the next write. Defaults to `"user"`. */
-    scope: UtilityModelScope;
-    /** Per-field source (which scope actually defined the value). */
-    source?: UtilityModelsSource;
-    /** The real merged value Copilot uses right now. See docstring above. */
-    effective: UtilityModelsEffective;
+export interface UtilityModelsSnapshot {
+  small: string;
+  medium: string;
+  fallbackToCopilot: boolean;
+  enabledModelIds: string[];
+  /** Effective scope for the next write. Defaults to `"user"`. */
+  scope: UtilityModelScope;
+  /** Per-field source (which scope actually defined the value). */
+  source?: UtilityModelsSource;
+  /** The real merged value Copilot uses right now. See docstring above. */
+  effective: UtilityModelsEffective;
 }
 /**
  * Partial-update payload for UpdateUtilityModels. Omit a field to
@@ -1876,11 +1930,11 @@ interface UtilityModelsSnapshot {
  * the previous scope; the first call (with no prior scope) defaults
  * to `"user"`.
  */
-interface UpdateUtilityModelsPayload {
-    small?: string;
-    medium?: string;
-    fallbackToCopilot?: boolean;
-    scope?: UtilityModelScope;
+export interface UpdateUtilityModelsPayload {
+  small?: string;
+  medium?: string;
+  fallbackToCopilot?: boolean;
+  scope?: UtilityModelScope;
 }
 /**
  * Per-provider BYOM toggle payload. Used by `SetCacheControlEnabled` —
@@ -1892,9 +1946,9 @@ interface UpdateUtilityModelsPayload {
  * `msDevTools.byom.<providerId>.<key>` key that the
  * `LmChatProviderRegistrar` already reads on every chat invocation.
  */
-interface ByomTogglePayload {
-    id: string;
-    enabled: boolean;
+export interface ByomTogglePayload {
+  id: string;
+  enabled: boolean;
 }
 /**
  * Snapshot of every BYOM provider's runtime toggles, keyed by
@@ -1907,16 +1961,16 @@ interface ByomTogglePayload {
  * `byomSettings.ts` default (`cacheEnabled: true`) — the Webview
  * does NOT need a separate "default" branch.
  */
-type ByomSettingsSnapshot = Record<string, ByomProviderToggles>;
+export type ByomSettingsSnapshot = Record<string, ByomProviderToggles>;
 /**
  * Per-provider BYOM toggles. Mirrors the runtime contract in
  * `apps/extension/src/services/providers/byomSettings.ts`
  * (`ByomProviderToggles`) — keep the two in lock-step so a
  * `GetByomSettings` payload round-trips without reshape code.
  */
-interface ByomProviderToggles {
-    /** P0.1 + P0.2 cache toggle — default TRUE (main-line decision Q1). */
-    cacheEnabled: boolean;
+export interface ByomProviderToggles {
+  /** P0.1 + P0.2 cache toggle — default TRUE (main-line decision Q1). */
+  cacheEnabled: boolean;
 }
 /**
  * Strict-typed shape for the inbound messages handled by
@@ -1929,65 +1983,65 @@ interface ByomProviderToggles {
  * Each variant lists ONLY the fields the hook actually reads; optional
  * fields are explicit (`tools?` / `profiles?` / `workspaceOpen`).
  */
-type WebviewInboundMessage = {
-    type: typeof WebviewMessageType.UpdateRepositoryList;
-    repos: BridgeRepoEntry[];
+export type WebviewInboundMessage = {
+  type: typeof WebviewMessageType.UpdateRepositoryList;
+  repos: BridgeRepoEntry[];
 } | {
-    type: typeof WebviewMessageType.UpdateRepositoryUpdate;
-    repos: BridgeRepoEntry[];
+  type: typeof WebviewMessageType.UpdateRepositoryUpdate;
+  repos: BridgeRepoEntry[];
 } | {
-    type: typeof WebviewMessageType.UpdateSkillRepoCatalog;
-    entries?: BridgeSkillRepoEntry[];
-    workspaceOpen?: boolean;
+  type: typeof WebviewMessageType.UpdateSkillRepoCatalog;
+  entries?: BridgeSkillRepoEntry[];
+  workspaceOpen?: boolean;
 } | {
-    type: typeof WebviewMessageType.UpdateLinkedSkills;
-    links: LinkedSkillPayloadEntry[];
-    kind: "skill" | "agent";
+  type: typeof WebviewMessageType.UpdateLinkedSkills;
+  links: LinkedSkillPayloadEntry[];
+  kind: "skill" | "agent";
 } | {
-    type: typeof WebviewMessageType.UpdateCopilotContentStatus;
-    entries: CopilotContentStatusEntry[];
-    changed: boolean;
-    workspaceOpen?: boolean;
+  type: typeof WebviewMessageType.UpdateCopilotContentStatus;
+  entries: CopilotContentStatusEntry[];
+  changed: boolean;
+  workspaceOpen?: boolean;
 } | {
-    type: typeof WebviewMessageType.UpdateCopilotCustomizations;
-    view: CopilotCustomizationViewPayload;
-    /** Installable plugin.json packages from the enabled git
-     * sources. Optional: older CLI builds omit it. */
-    availablePackages?: CopilotAvailablePackagePayload[];
+  type: typeof WebviewMessageType.UpdateCopilotCustomizations;
+  view: CopilotCustomizationViewPayload;
+  /** Installable plugin.json packages from the enabled git
+   * sources. Optional: older CLI builds omit it. */
+  availablePackages?: CopilotAvailablePackagePayload[];
 } | {
-    type: typeof WebviewMessageType.UpdateCopilotSources;
-    sources: CopilotSourceRecordPayload[];
+  type: typeof WebviewMessageType.UpdateCopilotSources;
+  sources: CopilotSourceRecordPayload[];
 } | {
-    type: typeof WebviewMessageType.UpdateCopilotUpdatePreview;
-    preview: CopilotPackageUpdatePreviewPayload;
+  type: typeof WebviewMessageType.UpdateCopilotUpdatePreview;
+  preview: CopilotPackageUpdatePreviewPayload;
 } | {
-    type: typeof WebviewMessageType.UpdateExternalTools;
-    tools?: ExternalTool[];
+  type: typeof WebviewMessageType.UpdateExternalTools;
+  tools?: ExternalTool[];
 } | {
-    type: typeof WebviewMessageType.UpdateNgrokStatus;
-    isRunning: boolean;
+  type: typeof WebviewMessageType.UpdateNgrokStatus;
+  isRunning: boolean;
 } | {
-    type: typeof WebviewMessageType.UpdateOcxStatus;
-    isRunning: boolean;
+  type: typeof WebviewMessageType.UpdateOcxStatus;
+  isRunning: boolean;
 } | {
-    type: typeof WebviewMessageType.UpdateRtkStatus;
-    installed: boolean;
-    version?: string;
-    workspaceEnabled: boolean;
+  type: typeof WebviewMessageType.UpdateRtkStatus;
+  installed: boolean;
+  version?: string;
+  workspaceEnabled: boolean;
 } | {
-    type: typeof WebviewMessageType.UpdateCodegraphStatus;
-    installed: boolean;
-    version?: string;
-    indexed: boolean;
-    mcpConfigured?: boolean;
-    hookInstalled?: boolean;
-    instructionsEnabled?: boolean;
+  type: typeof WebviewMessageType.UpdateCodegraphStatus;
+  installed: boolean;
+  version?: string;
+  indexed: boolean;
+  mcpConfigured?: boolean;
+  hookInstalled?: boolean;
+  instructionsEnabled?: boolean;
 } | {
-    type: typeof WebviewMessageType.UpdateAzureProfiles;
-    profiles?: AzureProfile[];
+  type: typeof WebviewMessageType.UpdateAzureProfiles;
+  profiles?: AzureProfile[];
 } | {
-    type: typeof WebviewMessageType.UpdateApiConfig;
-    config: ApiConfig;
+  type: typeof WebviewMessageType.UpdateApiConfig;
+  config: ApiConfig;
 };
 /**
  * One entry inside the `UpdateLinkedSkills.links` array. Mirrors the
@@ -1995,10 +2049,10 @@ type WebviewInboundMessage = {
  * than re-declared at the call site) lets the discriminated union's
  * `links` field carry a real type instead of `unknown[]`.
  */
-interface LinkedSkillPayloadEntry {
-    repoId: string;
-    name: string;
-    scope?: string;
+export interface LinkedSkillPayloadEntry {
+  repoId: string;
+  name: string;
+  scope?: string;
 }
 /**
  * One entry inside the `UpdateCopilotContentStatus.entries` array.
@@ -2006,10 +2060,10 @@ interface LinkedSkillPayloadEntry {
  * (identity + status + optional message) so the webview can render the
  * reconciliation state without importing the protocol package.
  */
-interface CopilotContentStatusEntry {
-    identity: string;
-    status: "restored" | "adopted" | "pending_approval" | "missing_source" | "conflict" | "drifted";
-    message?: string;
+export interface CopilotContentStatusEntry {
+  identity: string;
+  status: "restored" | "adopted" | "pending_approval" | "missing_source" | "conflict" | "drifted";
+  message?: string;
 }
 /**
  * Task 7 — webview → extension install intent. Mirrors the Task 3
@@ -2019,64 +2073,66 @@ interface CopilotContentStatusEntry {
  * discovery preview blocks submission until the user picks one) and
  * is omitted for git / marketplace sources.
  */
-interface InstallCopilotPackageAction {
-    type: WebviewMessageType.InstallCopilotPackage;
-    scope: "workspace" | "personal";
-    sourceId: string;
-    packageId: string;
-    artifactIds: string[];
-    pinnedVersion?: string;
-    localMode?: "live" | "private-workspace-override";
+export interface InstallCopilotPackageAction {
+  type: WebviewMessageType.InstallCopilotPackage;
+  scope: "workspace" | "personal";
+  sourceId: string;
+  packageId: string;
+  artifactIds: string[];
+  pinnedVersion?: string;
+  localMode?: "live" | "private-workspace-override";
 }
 /** Task 9 — webview → extension move intent; workspaceDir is resolved extension-side. */
-interface MoveCopilotPackageAction {
-    type: WebviewMessageType.MoveCopilotPackage;
-    packageId: string;
-    from: "workspace" | "personal";
-    to: "workspace" | "personal";
+export interface MoveCopilotPackageAction {
+  type: WebviewMessageType.MoveCopilotPackage;
+  packageId: string;
+  from: "workspace" | "personal";
+  to: "workspace" | "personal";
 }
 /** Task 9 — webview → extension uninstall intent; workspaceDir is resolved extension-side. */
-interface UninstallCopilotPackageAction {
-    type: WebviewMessageType.UninstallCopilotPackage;
-    scope: "workspace" | "personal";
-    packageId: string;
+export interface UninstallCopilotPackageAction {
+  type: WebviewMessageType.UninstallCopilotPackage;
+  scope: "workspace" | "personal";
+  packageId: string;
 }
 /** Task 10 — webview → extension source list intent; workspaceDir is resolved extension-side. */
-interface ListCopilotSourcesAction {
-    type: WebviewMessageType.ListCopilotSources;
-    scope: "workspace" | "personal";
+export interface ListCopilotSourcesAction {
+  type: WebviewMessageType.ListCopilotSources;
+  scope: "workspace" | "personal";
 }
 /** Task 10 — webview → extension source removal intent; workspaceDir is resolved extension-side. */
-interface RemoveCopilotSourceAction {
-    type: WebviewMessageType.RemoveCopilotSource;
-    scope: "workspace" | "personal";
-    sourceId: string;
+export interface RemoveCopilotSourceAction {
+  type: WebviewMessageType.RemoveCopilotSource;
+  scope: "workspace" | "personal";
+  sourceId: string;
 }
 /** Task 10 — webview → extension update preview intent; workspaceDir is resolved extension-side. */
-interface PreviewCopilotUpdateAction {
-    type: WebviewMessageType.PreviewCopilotUpdate;
-    scope: "workspace" | "personal";
-    packageId: string;
-    revision: string;
-}
-
+export interface PreviewCopilotUpdateAction {
+  type: WebviewMessageType.PreviewCopilotUpdate;
+  scope: "workspace" | "personal";
+  packageId: string;
+  revision: string;
+}
+//#endregion
+//#region src/scheduled-tasks.d.ts
 /** Live execution state pushed to webview during task execution */
-interface TaskExecutionState {
-    executionId: string;
-    taskId: string;
-    taskName: string;
-    status: "running" | "success" | "failure" | "timeout" | "cancelled";
-    startedAt: string;
-    finishedAt?: string;
-    output: string;
-    error?: string;
+export interface TaskExecutionState {
+  executionId: string;
+  taskId: string;
+  taskName: string;
+  status: "running" | "success" | "failure" | "timeout" | "cancelled";
+  startedAt: string;
+  finishedAt?: string;
+  output: string;
+  error?: string;
 }
 /** Log file schema for .serviceme/scheduled-tasks-log.json */
-interface ScheduledTasksLogFile {
-    version: 1;
-    logs: TaskExecutionLog[];
+export interface ScheduledTasksLogFile {
+  version: 1;
+  logs: TaskExecutionLog[];
 }
-
+//#endregion
+//#region src/utils/safe-cast.d.ts
 /**
  * Environment-agnostic cast helpers.
  *
@@ -2096,7 +2152,7 @@ interface ScheduledTasksLogFile {
  * the runtime shape here. Keeping the cast in one place makes the intent
  * (and the assumption) explicit and grep-able.
  */
-declare function parsePayload<T>(raw: unknown): T;
+export declare function parsePayload<T>(raw: unknown): T;
 /**
  * Best-effort extraction of an `AbortSignal` from an inbound request object.
  *
@@ -2108,7 +2164,7 @@ declare function parsePayload<T>(raw: unknown): T;
  * is the same as "no signal". In practice the request signal is always a real
  * `AbortSignal`, so behavior is unchanged for every production path.
  */
-declare function asAbortSignal(input: unknown): AbortSignal | undefined;
+export declare function asAbortSignal(input: unknown): AbortSignal | undefined;
 /**
  * Parse a JSON string, returning `fallback` when parsing fails.
  *
@@ -2117,6 +2173,5 @@ declare function asAbortSignal(input: unknown): AbortSignal | undefined;
  * with their own `.catch` so that a body-read failure still yields the same
  * fallback as a malformed-body failure).
  */
-declare function safeJson<T>(text: string, fallback: T): T;
-
-export { type AIModelConfig, type AIModelInfo, type AgentPermissionSummary, type AgentToolPermission, type AgentToolRiskLevel, type ApiConfig, type AzureProfile, BUILTIN_PROVIDER_PRESETS, type BalanceEntry, type BridgeLinkMode, type BridgeLinkedSkill, type BridgeRepoEntry, type BridgeRepoSyncPull, type BridgeSkillKind, type BridgeSkillRepoEntry, type BridgeSkillRepoFile, type ByomProviderToggles, ByomSettingsResponse, type ByomSettingsSnapshot, type ByomTogglePayload, CERTIFICATE_BUNDLE_FORMATS, CachedServerUrlResponse, type CachedServerUrlSnapshot, type CertificateBundleEnvironmentSupport, type CertificateBundleFormat, type CertificateBundleFormatDescriptor, type CodingPlanUsage, type CommandPayload, type CopilotArtifactStatePayload, type CopilotArtifactSummaryPayload, type CopilotArtifactViewPayload, type CopilotAvailablePackagePayload, type CopilotContentStatusEntry, type CopilotCustomizationArtifactKind, type CopilotCustomizationGate, type CopilotCustomizationHealth, type CopilotCustomizationInstallIntent, type CopilotCustomizationScope, type CopilotCustomizationStatus, type CopilotCustomizationViewPayload, type CopilotPackageDefinitionPayload, type CopilotPackageInstallationPayload, type CopilotPackageUpdatePreviewPayload, type CopilotPackageViewPayload, type CopilotSourceRecordPayload, type CopilotSourceViewPayload, type CuratedModelMetadata, type DeepseekBalanceEntry, type DeepseekUsage, DeviceAuthHeaders, type DeviceRequestSignatureParams, type DownloadCertificateBundleRequest, type DownloadCertificateBundleResponse, type ExternalTool, GIT_REMOTE_HOST_ALIASES, type GenericBalanceUsage, GetByomSettings, GetCachedServerUrl, GetServerProxyState, GetUtilityModels, type GitHubOrgMembershipCheckResult, type GitHubOrgMembershipStatus, type GitHubUser, type GithubCopilotCliPayload, type HttpRequestPayload, type ILogger, type InstallCopilotPackageAction, LISTABLE_PRESET_MODELS, type LinkedSkillPayloadEntry, type ListCopilotSourcesAction, LogLevel, MEDALSOFT_NUGET_PRIVATE_SOURCE, MEDALSOFT_PRIVATE_GATEWAY_URL, MODEL_METADATA, type MinimaxUsage, type ModelDetail, type ModelPriceCategory, type ModelPricing, type ModelThinkingSchema, type MoveCopilotPackageAction, NAMESPACE_ALIASES, NAMESPACE_ALIAS_FAMILY, PRESET_MODEL_FAMILIES, PROVIDER_BASE_URL_PRESETS, PROVIDER_CACHE_CONTROL_METADATA, type PresetModelFamilyGroup, type PresetModelListing, type PreviewCopilotUpdateAction, type ProviderBaseUrlPreset, type ProviderCacheControlMetadata, type ProviderConfig, type ProviderModel, type ProviderMutationPayload, type ProviderTestResult, type ProviderType, type ProviderUsageData, type ProviderUsageKind, type ProviderUsageResult, type ProviderVisionMode, type ProviderWireProtocol, type ProvidersResponsePayload, type PublicProvider, type RemoveCopilotSourceAction, type ScheduledTask, type ScheduledTaskType, type ScheduledTaskV1, type ScheduledTasksConfig, type ScheduledTasksLogFile, type ServerProxyAllowOverridePayload, type ServerProxySnapshot, ServerProxyStateResponse, type ServerProxySupportMode, type ServerProxyTogglePayload, SetCacheControlEnabled, SetServerProxyAllowOverride, SetServerProxyEnabled, type ShellPayload, type TaskExecutionLog, type TaskExecutionState, type TaskExecutionStatus, type TaskPayload, type TaskRunStatus, type TaskWorkspaceRef, type UninstallCopilotPackageAction, UpdateUtilityModels, type UpdateUtilityModelsPayload, type UsageWindow, type UtilityModelScope, type UtilityModelsEffective, UtilityModelsResponse, type UtilityModelsSnapshot, type UtilityModelsSource, type WebviewInboundMessage, WebviewMessageType, __internal, asAbortSignal, buildGitHubLocalEmail, buildPresetModel, checkGitHubOrgMembership, createConsoleLogger, createDeviceRequestSignature, currencyForBaseUrl, effectiveAdapterType, fetchGitHubUser, getBuiltinProviderPreset, getGitHubOrgMembership, getPresetModelDisplayName, getProviderBaseUrlPresets, isGitHubLocalEmail, isProviderCacheControlAware, isValidCanonicalSlug, isWholePackageInstall, listPresetModelGroups, lookupModelMetadata, normalizeCanonicalSlug, normalizeErrorForLog, normalizeGitUrl, parsePayload, protocolForBaseUrl, registrationIdFromPackageId, resolvePrimaryEmail, safeJson, unionProviderModelWithPreset };
+export declare function safeJson<T>(text: string, fallback: T): T;
+//#endregion