dsh-skill-hub 0.3.7 → 0.3.8

package/src/client/settings-card.tsx

@@ -197,6 +197,57 @@ export function ColorField(props: ColorFieldProps): ReactElement {
   )
 }
 
+/**
+ * One staged secret field: a password input that never echoes the stored
+ * value. Shows a "set" state via the overridden badge; Reset unsets it.
+ */
+export interface SecretFieldProps {
+  id: string
+  label: string
+  hint: string
+  /** Placeholder shown while empty (never the stored token). */
+  placeholder: string
+  overriddenLabel: string
+  resetLabel: string
+  disabled: boolean
+  text: string
+  overridden: boolean
+  invalid?: boolean
+  onEdit: (text: string) => void
+  onReset: () => void
+}
+
+export function SecretField(props: SecretFieldProps): ReactElement {
+  return (
+    <div className={css.field}>
+      <div className={css.head}>
+        <label className={css.label} htmlFor={props.id}>{props.label}</label>
+        {props.overridden ? (
+          <span className={css.badges}>
+            <span className={css.badge}>{props.overriddenLabel}</span>
+            <button type='button' className={css.reset} disabled={props.disabled} onClick={props.onReset}>
+              {props.resetLabel}
+            </button>
+          </span>
+        ) : null}
+      </div>
+      <input
+        id={props.id}
+        type='password'
+        autoComplete='off'
+        spellCheck={false}
+        className={css.input}
+        value={props.text}
+        disabled={props.disabled}
+        placeholder={props.placeholder}
+        aria-invalid={props.invalid === true}
+        onChange={(event) => { props.onEdit(event.target.value) }}
+      />
+      <p className={css.hint}>{props.hint}</p>
+    </div>
+  )
+}
+
 /** One staged numeric field: a numeric draft text input with inherit/reset semantics. */
 export interface NumberFieldProps {
   id: string

package/src/client/settings-form.ts

@@ -50,6 +50,24 @@ export function colorField(field: string): FieldSpec {
   }
 }
 
+/**
+ * A secret field (API token): the stored value is never echoed back into the
+ * draft (format always yields ''), so typing is always a fresh set and Reset
+ * always unsets. An empty draft stages nothing.
+ */
+export function secretField(field: string): FieldSpec {
+  return {
+    field,
+    format: () => '',
+    parse: (text) => {
+      const trimmed = text.trim()
+      if (trimmed === '') return undefined
+      if (!/^[A-Za-z0-9_-]{8,255}$/.test(trimmed)) return undefined
+      return { kind: 'set', value: trimmed }
+    },
+  }
+}
+
 /**
  * A numeric field with range clamping. Integer by default: a fractional draft
  * is truncated so "5.5 分钟" cannot sneak past an integer-only schema.

package/src/index.ts

@@ -21,7 +21,7 @@ import { SkillHubProvider } from './provider.ts'
 import { makeRoutes } from './routes.ts'
 import { createSkillStatsReader, type SkillStatsReader } from './stats.ts'
 import { SkillHubStore } from './store.ts'
-import { cleanupLeftoverImportDirs } from './repo.ts'
+import { cleanupLeftoverImportDirs, setGithubToken } from './repo.ts'
 import { dshHome } from './store.ts'
 import { join } from 'node:path'
 import { homedir } from 'node:os'
@@ -78,6 +78,7 @@ export const HubSettingsSchema: z<HubSettingsValue> = z.object({
   showGroupSummary: z.boolean().default(HUB_CONFIG_DEFAULTS.showGroupSummary),
   dotModelColor: z.string().pattern(HEX_COLOR_RE),
   dotUserColor: z.string().pattern(HEX_COLOR_RE),
+  githubToken: z.string(),
   statsWindowDays: z.number().min(0).max(3650).default(HUB_CONFIG_DEFAULTS.statsWindowDays),
   statsScanMinutes: z.number().min(1).max(1440).default(HUB_CONFIG_DEFAULTS.statsScanMinutes),
 })
@@ -162,6 +163,10 @@ export function apply(ctx: Context, config?: Config): void {
       disposeProvider = undefined
     }
     const value = current()
+    // GitHub auth for market/source API calls: env GITHUB_TOKEN/GH_TOKEN is the
+    // fallback (read at module load); an explicit settings value wins live and
+    // applies without a restart via the settings watcher below.
+    setGithubToken(value.githubToken)
     if (value.announceToAgent) {
       disposeSection = ctx.systemPrompt.section({
         name: 'plugin:dsh-skill-hub',
@@ -249,8 +254,8 @@ export function apply(ctx: Context, config?: Config): void {
   // runs).
   ctx.inject(['sessionQuery'], (sctx) => {
     // 恢复 sidecar 里的增量扫描检查点后再建 reader（异步、不阻塞注入回调）：
-    // 重启后无需重新解压全部历史日志；检查点只在全量对账后落盘（约每天一次，
-    // 或统计窗口配置变化后的下一次扫描）。扫描间隔与滚动窗口都从设置命名空间
+    // 重启后无需重新解压全部历史日志；每次扫描完都落盘（含上次总数），所以
+    // 重启后面板秒出旧数、后台重扫。扫描间隔与滚动窗口都从设置命名空间
     // 实时读取——卡片里改完即生效，无需重启。
     void (async () => {
       const saved = await store.getSkillStatsState().catch(() => undefined)
@@ -262,7 +267,7 @@ export function apply(ctx: Context, config?: Config): void {
         const value = current().statsWindowDays
         return typeof value === 'number' && value >= 0 ? Math.floor(value) : HUB_CONFIG_DEFAULTS.statsWindowDays
       }
-      stats = createSkillStatsReader(sctx.sessionQuery, () => scanMinutes() * 60_000, {
+      const reader = createSkillStatsReader(sctx.sessionQuery, () => scanMinutes() * 60_000, {
         checkpoint: saved,
         windowDays,
         onCheckpoint: (next) => {
@@ -271,7 +276,12 @@ export function apply(ctx: Context, config?: Config): void {
           })
         },
       })
+      stats = reader
       sync()
+      // 冷启动预热：检查点无总数时，全量扫描（数十 MB 会话日志）在启动时就
+      // 开始，而不是等面板第一次打开才起跑；有总数时这次调用命中内存缓存，
+      // 开销可忽略。失败由 reader 内部吞掉（保留旧总数），不影响启动。
+      void reader()
     })()
   })
 }

package/src/protocol/api.ts

@@ -0,0 +1,38 @@
+/** Browser-facing base paths of the skill-hub API family. */
+export const SKILL_HUB_API = {
+  catalog: '/api/skill-hub/catalog',
+  skill: '/api/skill-hub/skill',
+  skillDelete: '/api/skill-hub/skill/delete',
+  toggle: '/api/skill-hub/toggle',
+  toggleBatch: '/api/skill-hub/toggle-batch',
+  create: '/api/skill-hub/create',
+  stats: '/api/skill-hub/stats',
+  config: '/api/skill-hub/config',
+  market: '/api/skill-hub/market',
+  marketSource: '/api/skill-hub/market/source',
+  marketSourceDelete: '/api/skill-hub/market/source/delete',
+  marketSourceRef: '/api/skill-hub/market/source/ref',
+  marketCheck: '/api/skill-hub/market/check',
+  marketSync: '/api/skill-hub/market/source/sync',
+  repo: '/api/skill-hub/repo',
+  repoImport: '/api/skill-hub/repo/import',
+  repoImportProgress: '/api/skill-hub/repo/import/progress',
+  repoImportCancel: '/api/skill-hub/repo/import/cancel',
+  update: '/api/skill-hub/update',
+  groups: '/api/skill-hub/groups',
+  tag: '/api/skill-hub/tag',
+  tagDelete: '/api/skill-hub/tag/delete',
+  tagMembers: '/api/skill-hub/tag/members',
+  tagReorder: '/api/skill-hub/tag/reorder',
+  collectionReorder: '/api/skill-hub/collections/reorder',
+  sourceGroupReorder: '/api/skill-hub/source-groups/reorder',
+  sources: '/api/skill-hub/sources',
+  sourceCheck: '/api/skill-hub/sources/check',
+  sourceSync: '/api/skill-hub/sources/sync',
+  sourceDelete: '/api/skill-hub/sources/delete',
+  sourceRestore: '/api/skill-hub/sources/restore',
+  sourceTrashClear: '/api/skill-hub/sources/trash/clear',
+  diagnosticFix: '/api/skill-hub/diagnostic/fix',
+  marketSourceVersions: '/api/skill-hub/market/source/versions',
+  marketStats: '/api/skill-hub/market/stats',
+} as const

package/src/protocol/catalog.ts

@@ -0,0 +1,168 @@
+/** User-level roots the hub may write to (matches dsh-skill-filesystem ranks 400/500). */
+export type WritableRoot = 'user-dsh' | 'user-agents'
+
+/** Invocation policy resolved by the registry, re-spelled for the wire. */
+export interface HubInvocation {
+  /** Whether model-facing catalogs may load this skill. */
+  modelInvocable: boolean
+  /** Whether human-facing command catalogs may load this skill. */
+  userInvocable: boolean
+}
+
+/** One enabled skill row in the catalog. */
+export interface CatalogSkill {
+  name: string
+  description: string
+  whenToUse?: string
+  invocation: HubInvocation
+  provider: string
+  /** Whether the hub may toggle this skill (user-level filesystem skills only). */
+  writable: boolean
+  /** 技能来源标识（user-dsh/user-agents/project-dsh/project-agents/...）。 */
+  source: string
+  /** SKILL.md creation time (epoch ms); used for "added" sorting. Absent when unknown. */
+  addedAt?: number
+  /** SKILL.md last-modified time (epoch ms); used for "updated" display. Absent when unknown. */
+  updatedAt?: number
+  /** 项目技能的所属工作区路径（仅 project-dsh/project-agents 来源携带）。 */
+  workspace?: string
+  /** 工作区显示标题（来自 workspace.json；无则回退为路径）。 */
+  workspaceTitle?: string
+  /** UI metadata from agents/openai.yaml (mirrors codex SkillInterface). */
+  displayName?: string
+  shortDescription?: string
+  brandColor?: string
+  iconSmall?: string
+  iconLarge?: string
+  defaultPrompt?: string
+}
+
+/** One disabled skill tracked by the hub sidecar (SKILL.md renamed away). */
+export interface DisabledSkill {
+  name: string
+  description: string
+  /** Absolute path of the renamed file (SKILL.md.disabled / <name>.md.disabled). */
+  path: string
+  root: WritableRoot
+  disabledAt: number
+}
+
+/** One discovery diagnostic: a file the filesystem provider skips, with the reason. */
+export interface DiagnosticEntry {
+  path: string
+  root: string
+  reason: string
+  /** Whether this diagnostic can be auto-fixed (e.g. unquoted colon). */
+  fixable?: boolean
+}
+
+/** POST /api/skill-hub/diagnostic/fix — repair a fixable diagnostic in place. */
+export interface DiagnosticFixRequest {
+  path: string
+}
+export interface DiagnosticFixResponse {
+  ok: true
+  path: string
+}
+
+/** GET /api/skill-hub/catalog */
+export interface CatalogResponse {
+  ok: true
+  /** 已安装插件自身的版本号（package.json version），面板标题旁显示。 */
+  pluginVersion: string
+  /** Whether discovery completed within a stable catalog revision. */
+  complete: boolean
+  /** Sorted winning summaries of every enabled skill (all roots + providers). */
+  skills: CatalogSkill[]
+  /** Skills the hub has toggled off (kept outside provider discovery). */
+  disabled: DisabledSkill[]
+  /** Files in the writable roots the provider ignores, with reasons. */
+  diagnostics: DiagnosticEntry[]
+  /** Skill names that appeared in multiple roots (first wins, others hidden). Mirrors codex name_counts. */
+  duplicateNames?: string[]
+}
+
+/** GET /api/skill-hub/skill */
+export interface SkillDetail {
+  name: string
+  description: string
+  whenToUse?: string
+  invocation: HubInvocation
+  provider: string
+  /** Absolute file path when the skill came from disk. */
+  path?: string
+  /** SKILL.md creation time (epoch ms); absent when the file is unreadable. */
+  addedAt?: number
+  /** SKILL.md last-modified time (epoch ms); absent when the file is unreadable. */
+  updatedAt?: number
+  /** Markdown instruction body. */
+  content: string
+  displayName?: string
+  shortDescription?: string
+  brandColor?: string
+  iconSmall?: string
+  iconLarge?: string
+  defaultPrompt?: string
+}
+
+export interface SkillDetailResponse {
+  ok: true
+  skill: SkillDetail
+}
+
+/** POST /api/skill-hub/skill/delete — 把单个技能移入回收站（可恢复）。 */
+export interface SkillDeleteRequest {
+  name: string
+}
+
+/** POST /api/skill-hub/skill/delete */
+export interface SkillDeleteResponse {
+  ok: true
+  name: string
+  /** 移入回收站后的路径（目录或文件）。 */
+  path: string
+}
+
+/** POST /api/skill-hub/toggle */
+export interface ToggleRequest {
+  /** Kebab-case skill name. */
+  name: string
+  /** true re-enables a hub-disabled skill; false disables an enabled one. */
+  enabled: boolean
+}
+
+export interface ToggleResponse {
+  ok: true
+  /** Fresh catalog after the mutation (the filesystem provider may lag a beat). */
+  catalog: CatalogResponse
+}
+
+/** POST /api/skill-hub/toggle-batch — one group of skills, one write. */
+export interface ToggleBatchRequest {
+  names: string[]
+  enabled: boolean
+}
+
+/** POST /api/skill-hub/toggle-batch */
+export interface ToggleBatchResponse {
+  ok: true
+  catalog: CatalogResponse
+  /** Per-name failures (unknown/read-only skills); empty means all landed. */
+  failures: Array<{ name: string; error: string }>
+}
+
+/** POST /api/skill-hub/create */
+export interface CreateRequest {
+  /** Kebab-case skill name (validated with the official isSkillName grammar). */
+  name: string
+  /** Optional one-line routing description for the frontmatter. */
+  description?: string
+  /** Target user root; defaults to user-dsh (~/.dsh/skills). */
+  root?: WritableRoot
+}
+
+export interface CreateResponse {
+  ok: true
+  path: string
+  root: WritableRoot
+}

package/src/protocol/config.ts

@@ -0,0 +1,145 @@
+/** JSON error body shared by every route. */
+export interface ErrorResponse {
+  error: string
+}
+
+/** The skill hub's own runtime configuration, edited from the settings card. */
+export interface HubConfig {
+  /** Master switch: routes, provider, and announcement all go live with this. */
+  enabled: boolean
+  /** When true, a system-prompt section announces the hub to every agent. */
+  announceToAgent: boolean
+  /** Model-invocable dot color (#rrggbb); absent means the panel default. */
+  dotModelColor?: string
+  /** User-invocable dot color (#rrggbb); absent means the panel default. */
+  dotUserColor?: string
+  /** Show per-skill invocation count chip. Default true. */
+  showUseCount?: boolean
+  /** Show per-skill last-used relative time. Default true. */
+  showUseTime?: boolean
+  /** Show group-header usage summaries (count + last used). Default true. */
+  showGroupSummary?: boolean
+  /** 统计滚动窗口天数：只统计最近 N 天的使用；0 = 全部历史。默认 0。 */
+  statsWindowDays?: number
+  /** 自动统计扫描间隔（分钟，最小 1）。默认 5。 */
+  statsScanMinutes?: number
+  /**
+   * GitHub personal access token for market/source API calls (anonymous quota
+   * is 60 req/h, authed 5000/hr). Stored in the local settings doc; absent
+   * means anonymous. Never logged.
+   */
+  githubToken?: string
+}
+
+/**
+ * The resolved shape of the hub's settings namespace (schema defaults, then
+ * the composition base, then the user layer). Kept as a type alias so the
+ * browser-side settings scope snapshot is index-compatible with the card
+ * form's record shape.
+ */
+export type HubSettingsValue = {
+  enabled: boolean
+  announceToAgent: boolean
+  showUseCount: boolean
+  showUseTime: boolean
+  showGroupSummary: boolean
+  /** Model-invocable dot color (#rrggbb); absent means the panel default. */
+  dotModelColor?: string
+  /** User-invocable dot color (#rrggbb); absent means the panel default. */
+  dotUserColor?: string
+  /** 统计滚动窗口天数（0 = 全部历史）。 */
+  statsWindowDays?: number
+  /** 自动统计扫描间隔（分钟）。 */
+  statsScanMinutes?: number
+  /** GitHub token（明文存本地设置文档，仅回环可读；缺省为匿名）。 */
+  githubToken?: string
+}
+
+/**
+ * Hub config defaults — the single source every layer reads: the cordis
+ * schema (index.ts), the host's saved-override merge, and the routes'
+ * fallback view. Changing a default here changes all three.
+ */
+export const HUB_CONFIG_DEFAULTS = {
+  enabled: true,
+  announceToAgent: true,
+  showUseCount: true,
+  showUseTime: true,
+  showGroupSummary: true,
+  statsWindowDays: 14,
+  statsScanMinutes: 5,
+} as const
+
+/**
+ * Resolve the effective hub config: saved sidecar overrides win over the
+ * cordis composition entry (the web card owns runtime config), missing
+ * booleans fall back to HUB_CONFIG_DEFAULTS, and dot colors pass through
+ * (saved first, then base) only when set. Numeric stats knobs are clamped to
+ * their sane ranges (window ≥ 0, scan interval ≥ 1 minute).
+ */
+export function resolveHubConfig(saved: Partial<HubConfig>, base: Partial<HubConfig> = {}): HubConfig {
+  const dotModelColor = saved.dotModelColor !== undefined ? saved.dotModelColor : base.dotModelColor
+  const dotUserColor = saved.dotUserColor !== undefined ? saved.dotUserColor : base.dotUserColor
+  const githubToken = saved.githubToken !== undefined ? saved.githubToken : base.githubToken
+  const windowDays = clampNumber(saved.statsWindowDays ?? base.statsWindowDays, 0) ?? HUB_CONFIG_DEFAULTS.statsWindowDays
+  const scanMinutes = clampNumber(saved.statsScanMinutes ?? base.statsScanMinutes, 1) ?? HUB_CONFIG_DEFAULTS.statsScanMinutes
+  return {
+    enabled: saved.enabled ?? base.enabled ?? HUB_CONFIG_DEFAULTS.enabled,
+    announceToAgent: saved.announceToAgent ?? base.announceToAgent ?? HUB_CONFIG_DEFAULTS.announceToAgent,
+    showUseCount: saved.showUseCount ?? base.showUseCount ?? HUB_CONFIG_DEFAULTS.showUseCount,
+    showUseTime: saved.showUseTime ?? base.showUseTime ?? HUB_CONFIG_DEFAULTS.showUseTime,
+    showGroupSummary: saved.showGroupSummary ?? base.showGroupSummary ?? HUB_CONFIG_DEFAULTS.showGroupSummary,
+    statsWindowDays: windowDays,
+    statsScanMinutes: scanMinutes,
+    ...(dotModelColor !== undefined ? { dotModelColor } : {}),
+    ...(dotUserColor !== undefined ? { dotUserColor } : {}),
+    ...(githubToken !== undefined ? { githubToken } : {}),
+  }
+}
+
+/** Clamp a numeric override into a valid value; undefined/invalid stays undefined. */
+function clampNumber(value: unknown, min: number): number | undefined {
+  if (typeof value !== 'number' || !Number.isFinite(value) || value < min) return undefined
+  return Math.floor(value)
+}
+
+/** HEX color validation shared by host routes and the settings card. */
+export const HEX_COLOR_RE = /^#[0-9a-f]{6}$/i
+
+/** GET /api/skill-hub/config */
+export interface ConfigResponse {
+  ok: true
+  /** 已安装插件自身的版本号（package.json version），设置卡标题旁显示。 */
+  pluginVersion: string
+  /** Effective configuration (saved overrides merged over the defaults). */
+  config: HubConfig
+  /** Raw user overrides persisted in the sidecar (absent fields inherit defaults). */
+  saved: Partial<HubConfig>
+}
+
+/** POST /api/skill-hub/config — a partial patch; omitted fields keep their values. */
+export interface ConfigRequest {
+  /** Set the field; null clears the saved override so it re-inherits the default. */
+  enabled?: boolean | null
+  /** Set the field; null clears the saved override so it re-inherits the default. */
+  announceToAgent?: boolean | null
+  /** Set the field; null clears the saved override so it re-inherits the default. */
+  showUseCount?: boolean | null
+  /** Set the field; null clears the saved override so it re-inherits the default. */
+  showUseTime?: boolean | null
+  /** Set the field; null clears the saved override so it re-inherits the default. */
+  showGroupSummary?: boolean | null
+  /** Set the dot color; null clears the saved override so it re-inherits the default. */
+  dotModelColor?: string | null
+  /** Set the dot color; null clears the saved override so it re-inherits the default. */
+  dotUserColor?: string | null
+  /** 统计滚动窗口天数（0 = 全部历史）；null 清除覆盖回默认。 */
+  statsWindowDays?: number | null
+  /** 自动统计扫描间隔（分钟）；null 清除覆盖回默认。 */
+  statsScanMinutes?: number | null
+  /** Set the GitHub token; null/empty clears it back to anonymous. */
+  githubToken?: string | null
+}
+
+/** GitHub token validation shared by host routes and the settings card. */
+export const GITHUB_TOKEN_RE = /^[A-Za-z0-9_\-]{8,255}$/

package/src/protocol/groups.ts

@@ -0,0 +1,106 @@
+/** 用户自定义 tag 分组：纯组织视图，不改技能文件。 */
+export interface SkillTag {
+  /** 稳定 ID（新建时由宿主生成）。 */
+  id: string
+  /** 显示名。 */
+  name: string
+  /** 成员技能名（集合技能与独立技能都可加入）。 */
+  skillNames: string[]
+  /** 默认场景（「通用」）：系统预置、不可删除、新技能自动归入。 */
+  default?: boolean
+}
+
+/** 系统集合组：按 origin（来源集合标识）自动聚合。 */
+export interface CollectionGroup {
+  /** 集合名（origin 值，如 "superpowers" / "anthropics/skills"）。 */
+  name: string
+  /** 该集合下的技能名，按名称排序。 */
+  skillNames: string[]
+}
+
+/** GET /api/skill-hub/groups */
+export interface GroupsResponse {
+  ok: true
+  /** 用户自定义 tag 分组（按拖拽顺序）。 */
+  tags: SkillTag[]
+  /** 系统集合组（按拖拽顺序，兜底按名称）。 */
+  collections: CollectionGroup[]
+  /** skillName → 集合名 的完整映射。 */
+  origins: Record<string, string>
+  /** 来源分组整体顺序（project / col:xxx / uncategorized-source），用于 SourcesView 顶层排序 */
+  sourceGroupOrder?: string[]
+  /** 兼容旧 collectionOrder 字段 */
+  collectionOrder?: string[]
+}
+
+/** POST /api/skill-hub/tag — 新建（缺省 id）或重命名（带 id）。 */
+export interface TagSaveRequest {
+  /** 已有 tag 的 id；缺省表示新建。 */
+  id?: string
+  /** 显示名（去空格后非空）。 */
+  name: string
+}
+
+/** POST /api/skill-hub/tag */
+export interface TagSaveResponse {
+  ok: true
+  /** 变更后的全部 tag。 */
+  tags: SkillTag[]
+}
+
+/** POST /api/skill-hub/tag/delete */
+export interface TagDeleteRequest {
+  id: string
+}
+
+/** POST /api/skill-hub/tag/delete */
+export interface TagDeleteResponse {
+  ok: true
+  tags: SkillTag[]
+}
+
+/** POST /api/skill-hub/tag/members — 直接设置某 tag 的完整成员列表（幂等）。 */
+export interface TagMembersRequest {
+  id: string
+  /** 目标成员技能名；后端只保留目录中存在的名字。 */
+  skillNames: string[]
+}
+
+/** POST /api/skill-hub/tag/members */
+export interface TagMembersResponse {
+  ok: true
+  tags: SkillTag[]
+}
+
+/** POST /api/skill-hub/tag/reorder — 拖拽重排场景分组 */
+export interface TagReorderRequest {
+  /** 按新顺序排列的 tag id 列表（需包含全部 id） */
+  orderedIds: string[]
+}
+/** POST /api/skill-hub/tag/reorder */
+export interface TagReorderResponse {
+  ok: true
+  tags: SkillTag[]
+}
+
+/** POST /api/skill-hub/collections/reorder — 拖拽重排来源集合 */
+export interface CollectionReorderRequest {
+  /** 按新顺序排列的集合名列表（需包含全部 name） */
+  orderedNames: string[]
+}
+/** POST /api/skill-hub/collections/reorder */
+export interface CollectionReorderResponse {
+  ok: true
+  collections: CollectionGroup[]
+  order: string[]
+}
+
+/** POST /api/skill-hub/source-groups/reorder — 拖拽重排来源顶层分组（project / collections / personal） */
+export interface SourceGroupReorderRequest {
+  /** 按新顺序排列的顶层分组 key 列表（project / col:xxx / uncategorized-source） */
+  orderedKeys: string[]
+}
+export interface SourceGroupReorderResponse {
+  ok: true
+  order: string[]
+}