vskill 1.0.16 → 1.0.18

package/README.md

@@ -8,20 +8,44 @@
 <p align="center">
   <a href="https://www.npmjs.com/package/vskill"><img src="https://img.shields.io/npm/v/vskill?color=cb3837&logo=npm" alt="npm" /></a>
   <a href="https://www.npmjs.com/package/vskill"><img src="https://img.shields.io/npm/dw/vskill?color=cb3837&logo=npm&label=downloads" alt="downloads" /></a>
-  <img src="https://img.shields.io/badge/agents-53_platforms-0969DA" alt="53 agents" />
+  <a href="https://github.com/anton-abyzov/vskill/stargazers"><img src="https://img.shields.io/github/stars/anton-abyzov/vskill?color=FFD700&logo=github" alt="GitHub stars" /></a>
+  <a href="https://github.com/anton-abyzov/vskill/actions/workflows/desktop-release.yml"><img src="https://img.shields.io/github/actions/workflow/status/anton-abyzov/vskill/desktop-release.yml?branch=main&label=desktop%20build&logo=githubactions" alt="desktop build" /></a>
+  <img src="https://img.shields.io/badge/agents-54_platforms-0969DA" alt="54 agents" />
   <img src="https://img.shields.io/badge/plugins-9-8B5CF6" alt="9 plugins" />
   <img src="https://img.shields.io/badge/skills-16-10B981" alt="16 skills" />
   <a href="https://verified-skill.com"><img src="https://img.shields.io/badge/registry-verified--skill.com-F59E0B" alt="registry" /></a>
-  <img src="https://img.shields.io/badge/license-MIT-green" alt="MIT" />
+  <a href="https://github.com/anton-abyzov/vskill/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-MIT-green" alt="MIT" /></a>
+</p>
+
+<p align="center">
+  <strong>Download Skill Studio:</strong><br/><br/>
+  <a href="https://github.com/anton-abyzov/vskill/releases/latest/download/Skill.Studio_1.0.16_aarch64.dmg"><img src="https://img.shields.io/badge/Download-macOS-000000?style=for-the-badge&logo=apple&logoColor=white" alt="Download for macOS" /></a>
+  <a href="https://github.com/anton-abyzov/vskill/releases/latest/download/Skill.Studio_1.0.16_x64-setup.exe"><img src="https://img.shields.io/badge/Download-Windows-0078D4?style=for-the-badge&logo=windows&logoColor=white" alt="Download for Windows" /></a>
+  <a href="https://github.com/anton-abyzov/vskill/releases/latest"><img src="https://img.shields.io/badge/Download-Linux-FCC624?style=for-the-badge&logo=linux&logoColor=black" alt="Download for Linux" /></a>
+</p>
+
+<p align="center">
+  <em>All releases: <a href="https://github.com/anton-abyzov/vskill/releases">github.com/anton-abyzov/vskill/releases</a></em>
 </p>
 
 <br/>
 
 ```bash
+# Browser studio — zero install
 npx vskill@latest studio        # open the local IDE for AI skills
 npx vskill@latest install remotion-best-practices
 ```
 
+Native Mac, Windows, and Linux desktop apps available at
+**[GitHub Releases](https://github.com/anton-abyzov/vskill/releases/latest)** — 1.5 s cold launch,
+no telemetry. macOS Apple Silicon is signed by `Developer ID Application: EasyChamp, Inc.`
+and notarized + stapled by Apple — no Gatekeeper warning.
+
+The desktop app wraps the same studio runtime as `npx vskill studio` in a Tauri 2 shell:
+native menu bar, global `⌘K` find-skill palette, `⌘,` Preferences with General / Updates /
+Privacy / Advanced tabs, settings persisted to `~/.vskill/settings.json` (atomic, 0600 perms),
+and signed auto-update via `tauri-plugin-updater` against minisign-signed manifests.
+
 <br/>
 
 ## Why vskill
@@ -149,7 +173,8 @@ private catalog.
 ```bash
 npx vskill@latest auth login    # interactive Device Flow — copy code, visit URL
 npx vskill@latest auth status   # show the current GitHub identity
-npx vskill@latest auth logout   # forget the GitHub token
+npx vskill@latest auth logout   # forget all stored tokens
+npx vskill@latest whoami        # combined identity + active tenant snapshot
 ```
 
 How it works:
@@ -157,31 +182,81 @@ How it works:
 1. `vskill auth login` requests a device + user code from `github.com/login/device/code`.
 2. You visit `https://github.com/login/device` and enter the 8-character code (rendered as `XXXX-XXXX`).
 3. The CLI polls `github.com/login/oauth/access_token` until you authorize, then validates against `api.github.com/user`.
-4. The resulting token is stored in your **OS keychain** (macOS Keychain / Windows DPAPI / libsecret).
-   On systems without a keyring daemon, the token falls back to `~/.vskill/keys.env` with mode `0600` and a startup warning.
+4. The CLI calls `POST /api/v1/auth/github/exchange-for-vsk-token` to mint a verified-skill API token (`vsk_…`) scoped to the same identity.
+5. **Both** tokens are stored in your **OS keychain** (macOS Keychain / Windows DPAPI / libsecret) under distinct service names:
+   - `com.verifiedskill.desktop` / `github-oauth-token` → `gho_…` (raw GitHub OAuth)
+   - `com.verifiedskill.desktop` / `vskill-token` → `vsk_…` (verified-skill API token)
+
+   On systems without a keyring daemon, both fall back to `~/.vskill/keys.env` with mode `0600` and a startup warning.
+
+If the exchange step fails (network error, 5xx), login still succeeds with just the `gho_…` token and the CLI prints `Logged in (legacy mode — some features unavailable)`. Re-run `vskill auth login` later to mint the `vsk_…` token without losing your session.
 
-Where the token is used:
+Where the tokens are used:
 
+- **`vskill add <skill>`, `vskill list`, `vskill marketplace`** — every request to `verified-skill.com` carries `Authorization: Bearer <vsk_… or gho_…>` (preferring `vsk_` when present). Anonymous requests for public skills still work when no token is stored.
 - **`vskill install <github-url>`** — added as `Authorization: Bearer …` on every fetch to `api.github.com` and `raw.githubusercontent.com`. Public skills still install anonymously.
 - **`vskill studio`** — the local eval-server proxies private routes (`/api/v1/private/*`, `/api/v1/tenants/*`) to verified-skill.com with the bearer header injected at the proxy boundary. Your browser never holds the token.
 
 Configuration:
 
 - `VSKILL_GITHUB_CLIENT_ID` — the OAuth/App `client_id` used during Device Flow. Defaults are baked in for the public Skill Studio App; set this only if you are running a self-hosted variant.
+- `VSKILL_TENANT` — overrides the active tenant for a single invocation (CI / scripted use). See "Tenant resolution priority" below.
 
 Inspect status of all credentials in one place:
 
 ```bash
 npx vskill@latest keys list      # shows AI provider keys + the github slot
+npx vskill@latest whoami         # email, token prefix, active tenant, all tenants
+```
+
+### Tenants and `vskill orgs`
+
+When your GitHub identity belongs to multiple organizations that have the Skill Studio App installed, each org is a **tenant** in verified-skill.com. The CLI calls them "orgs" for symmetry with `gh org`, `gcloud config configurations`, and `kubectl config use-context`.
+
+```bash
+npx vskill@latest orgs list           # table: slug | name | role | active (* marks the active tenant)
+npx vskill@latest orgs use <slug>     # write currentTenant to ~/.vskill/config.json
+npx vskill@latest orgs current        # print the active tenant slug, or `(none)`
 ```
 
+`orgs` and `whoami` are anonymous-safe — running them without a stored token prints `Not logged in. Run \`vskill auth login\`.` and exits non-zero (orgs returns 0; whoami returns 1) without crashing.
+
+#### Tenant resolution priority
+
+When a tenant-scoped command (`vskill add`, `vskill install` for a private skill, etc.) needs to pick an active tenant, it walks this list in order — first match wins:
+
+1. **`--tenant <slug>` flag** — per-command override (highest precedence).
+2. **`VSKILL_TENANT` env var** — non-interactive / CI use.
+3. **`currentTenant` in `~/.vskill/config.json`** — the persistent active tenant set by `vskill orgs use` or the Studio sidebar picker.
+4. **Auto-pick when N=1** — if you belong to exactly one tenant, that one is used silently.
+5. **Error** — if you belong to N>1 tenants and none of (1)–(3) is set, the CLI prints `Multiple tenants available — set one with \`vskill orgs use <slug>\`.` and exits non-zero. The CLI never silently picks one of N>1.
+
+The same `~/.vskill/config.json` is shared with Skill Studio — switching tenants in Studio's sidebar picker updates the same file the CLI reads, so the two surfaces stay in sync.
+
+#### `vskill add` resolution order (private skills)
+
+When you run `vskill add <skill>`, the resolver tries:
+
+1. The public registry.
+2. The active tenant's scoped registry (resolved via the priority above).
+3. Other tenants you belong to, in parallel HEAD requests — first match wins.
+
+If a `--tenant <slug>` flag is set, only the public registry and that tenant are tried.
+
+Common error messages:
+
+- `Skill found in multiple tenants: acme, contoso. Re-run with --tenant <slug> or set an active tenant: vskill orgs use <slug>.` — ambiguity guard for N>1 with no active tenant.
+- `Authentication failed. Run \`vskill auth login\` to re-authenticate.` — the registry returned 401. The keychain is **not** auto-cleared (you might be on a flaky network).
+- `Upgrade required: <message> (<upgradeUrl>)` — the registry returned 402: skill exists in this tenant but you lack entitlement.
+
 ### Private skill workflow
 
-Once authenticated, installing a private org skill is identical to a public one — the CLI silently attaches the keychain token to every `api.github.com` and `raw.githubusercontent.com` request:
+Once authenticated, installing a private org skill is identical to a public one — the CLI silently attaches the keychain token to every request:
 
 ```bash
-npx vskill@latest auth login                                # one-time setup
-npx vskill@latest add https://github.com/<org>/<repo>       # private skill installs same as public
+npx vskill@latest auth login                                # one-time setup (mints gho_ + vsk_)
+npx vskill@latest orgs use acme                             # pick a tenant if you belong to multiple
+npx vskill@latest add private-skill                         # private skill installs same as public
 ```
 
 The local skill bundle on disk **never contains** your GitHub token — the token is used only at fetch time. Your project's `vskill.lock` records `source: "private"` and the org name so future updates re-authenticate correctly.

package/agents.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "generatedAt": "2026-05-07T06:21:42.709Z",
+  "generatedAt": "2026-05-31T02:13:32.450Z",
   "agentPrefixes": [
     ".adal",
     ".agent",
@@ -9,6 +9,7 @@
     ".amp",
     ".augment",
     ".bolt",
+    ".chatgpt",
     ".claude",
     ".cline",
     ".codebuddy",
@@ -64,6 +65,7 @@
     ".amp/",
     ".augment/",
     ".bolt/",
+    ".chatgpt/",
     ".claude/",
     ".cline/",
     ".codebuddy/",

package/dist/agents/agents-registry.d.ts

@@ -7,6 +7,7 @@
  * Source of truth for the count: `TOTAL_AGENTS` (derived from AGENTS_REGISTRY.length).
  * The numbers in this header are documentation only; tests assert against TOTAL_AGENTS.
  */
+import type { FormatTransformer } from "../installer/transformers/index.js";
 export interface FeatureSupport {
     /** Supports slash commands */
     slashCommands: boolean;
@@ -67,6 +68,29 @@ export interface AgentDefinition {
      *  instead of install affordances. The catalog still lists the entry
      *  so users searching for the brand can discover it. */
     isRemoteOnly?: boolean;
+    /** 0845 T-001 (AC-US4-01): Install tier.
+     *  - 1 = drop-in SKILL.md (Claude Code, Codex, Antigravity, ...)
+     *  - 2 = format-converted (Cursor .mdc, Windsurf, Copilot, ...)
+     *  - 3 = clipboard-only cloud tools (ChatGPT, v0, bolt.new)
+     *  When absent the agent is treated as Tier 1. */
+    tier?: 1 | 2 | 3;
+    /** 0845 T-001 (AC-US4-01): Install surface.
+     *  - "filesystem" → write to disk under globalSkillsDir / localSkillsDir
+     *  - "clipboard"  → emit a paste-ready blob; no disk write
+     *  - undefined    → defaults to "filesystem" if NOT isRemoteOnly,
+     *                   otherwise excluded from getSupportedAgents()
+     *  This field — not isRemoteOnly — is the gate Studio uses to decide
+     *  whether to surface an install affordance. See ADR-0845-01. */
+    installMode?: "filesystem" | "clipboard";
+    /** 0845 T-001 (AC-US4-01): Pure function transforming a parsed
+     *  SKILL.md into the list of files to write under the agent's
+     *  install root. Only set for Tier 2 agents. */
+    formatTransformer?: FormatTransformer;
+    /** 0845 T-001 (AC-US4-01): Tier 3 only — URL of the tool's docs page
+     *  explaining how to paste the exported blob. */
+    pasteInstructionsUrl?: string;
+    /** 0845 T-001: Tier 3 only — link to the tool's docs landing page. */
+    docsUrl?: string;
 }
 /** 0694 (AC-US1-04): Backward-compat alias map for renamed agent ids.
  *  Consumed by `getAgent()` so existing scripts/lockfiles continue to work
@@ -145,3 +169,40 @@ export declare function getInstallableAgents(): AgentDefinition[];
  * @returns Array of installed agent definitions
  */
 export declare function detectInstalledAgents(): Promise<AgentDefinition[]>;
+/** Enriched registry entry returned by getSupportedAgents(). */
+export interface SupportedAgent {
+    id: string;
+    displayName: string;
+    /** Whether the agent's binary or config dir was detected on this host. */
+    detected: boolean;
+    /** Install tier — 1 (drop-in) | 2 (format-converted) | 3 (clipboard). */
+    tier: 1 | 2 | 3;
+    /** "filesystem" or "clipboard" — defaults populated here so consumers
+     *  don't need to repeat the resolution logic. */
+    installMode: "filesystem" | "clipboard";
+    /** Tilde-expanded absolute path of the global skills dir. */
+    resolvedGlobalDir: string;
+    /** Project-relative local skills dir (verbatim from registry). */
+    resolvedLocalDir: string;
+    /** Tier 3 only — URL of the tool's docs page explaining how to paste. */
+    pasteInstructionsUrl?: string;
+    /** Tier 3 only — docs landing page for the tool. */
+    docsUrl?: string;
+}
+/**
+ * 0845 (AC-US1-01, AC-US6-02, AC-US6-03): Returns every registered agent
+ * the Studio knows how to install to — Tier 1 / 2 (filesystem) and Tier 3
+ * (clipboard). Independent of binary detection: undetected agents are
+ * still included, with `detected: false`.
+ *
+ * The exclusion gate is `installMode`. Entries without an explicit
+ * `installMode` default to "filesystem" UNLESS they are flagged
+ * `isRemoteOnly: true` — in which case they are excluded (preserves
+ * the pre-existing semantics for Devin and Replit, which have no
+ * clipboard fallback). Tier 3 entries (chatgpt, bolt-new, v0) are
+ * kept by virtue of setting `installMode: "clipboard"` explicitly.
+ *
+ * Detection probes run in parallel via `Promise.allSettled`
+ * (AC-US6-02). `detectInstalledAgents()` is UNCHANGED (AC-US6-03).
+ */
+export declare function getSupportedAgents(): Promise<SupportedAgent[]>;

package/dist/agents/agents-registry.js

@@ -16,6 +16,16 @@ import { join as joinPath } from "node:path";
 import { existsSync as fsExistsSync, readdirSync as fsReaddirSync } from "node:fs";
 import { homedir as osHomedir } from "node:os";
 import { detectBinary } from "../utils/resolve-binary.js";
+// 0845 T-006..T-010 — per-tool format transformers wired onto Tier-2
+// entries below. Each is a pure function (parsedSkill → files).
+import { cursorTransformer } from "../installer/transformers/cursor.js";
+import { windsurfTransformer } from "../installer/transformers/windsurf.js";
+import { githubCopilotTransformer } from "../installer/transformers/github-copilot.js";
+import { junieTransformer } from "../installer/transformers/junie.js";
+import { kiroTransformer } from "../installer/transformers/kiro.js";
+import { continueDevTransformer } from "../installer/transformers/continue-dev.js";
+import { traeTransformer } from "../installer/transformers/trae.js";
+import { aiderTransformer } from "../installer/transformers/aider.js";
 /** 0694 (AC-US1-04): Backward-compat alias map for renamed agent ids.
  *  Consumed by `getAgent()` so existing scripts/lockfiles continue to work
  *  after a rename. Keys are legacy ids, values are current canonical ids. */
@@ -63,6 +73,12 @@ export const AGENTS_REGISTRY = [
         detectInstalled: () => detectBinary('codex'),
         parentCompany: 'OpenAI',
         featureSupport: { slashCommands: false, hooks: false, mcp: false, customSystemPrompt: true },
+        // 0845 T-003 (AC-US3-04): explicit Tier 1 drop-in. Codex is a primary
+        // Studio install target whose binary often isn't on PATH; tier annotation
+        // ensures it surfaces under "Available to install" rather than relying on
+        // the optional-field default.
+        tier: 1,
+        installMode: 'filesystem',
     },
     {
         id: 'cursor',
@@ -73,6 +89,10 @@ export const AGENTS_REGISTRY = [
         detectInstalled: () => detectBinary('cursor'),
         parentCompany: 'Anysphere',
         featureSupport: { slashCommands: true, hooks: false, mcp: true, customSystemPrompt: true },
+        // 0845 T-003: Tier 2 — emits `.cursor/rules/<name>.mdc` via transformer.
+        tier: 2,
+        installMode: 'filesystem',
+        formatTransformer: cursorTransformer,
     },
     {
         id: 'gemini-cli',
@@ -83,6 +103,8 @@ export const AGENTS_REGISTRY = [
         detectInstalled: () => detectBinary('gemini'),
         parentCompany: 'Google',
         featureSupport: { slashCommands: false, hooks: false, mcp: true, customSystemPrompt: true },
+        tier: 1,
+        installMode: 'filesystem',
     },
     {
         // 0694 US-001 (AC-US1-02): renamed from `github-copilot` to free that ID
@@ -116,6 +138,10 @@ export const AGENTS_REGISTRY = [
         },
         parentCompany: 'GitHub (Microsoft)',
         featureSupport: { slashCommands: true, hooks: false, mcp: true, customSystemPrompt: true },
+        // 0845 T-003: Tier 2 — emits `.github/instructions/<name>.instructions.md`.
+        tier: 2,
+        installMode: 'filesystem',
+        formatTransformer: githubCopilotTransformer,
     },
     {
         id: 'kimi-cli',
@@ -136,6 +162,8 @@ export const AGENTS_REGISTRY = [
         detectInstalled: () => detectBinary('opencode'),
         parentCompany: 'Community',
         featureSupport: { slashCommands: false, hooks: false, mcp: true, customSystemPrompt: true },
+        tier: 1,
+        installMode: 'filesystem',
     },
     // ----------------------------------------------------------------
     // Non-universal agents (45)
@@ -149,6 +177,10 @@ export const AGENTS_REGISTRY = [
         detectInstalled: () => detectBinary('antigravity'),
         parentCompany: 'Google',
         featureSupport: { slashCommands: false, hooks: false, mcp: false, customSystemPrompt: true },
+        // 0845 T-002 (AC-US3-01): explicit Tier 1 drop-in. globalSkillsDir override
+        // via VSKILL_ANTIGRAVITY_SKILLS_DIR is handled in getSupportedAgents().
+        tier: 1,
+        installMode: 'filesystem',
     },
     {
         id: 'augment',
@@ -171,6 +203,8 @@ export const AGENTS_REGISTRY = [
         featureSupport: { slashCommands: true, hooks: true, mcp: true, customSystemPrompt: true },
         pluginCacheDir: '~/.claude/plugins/cache',
         pluginMarketplaceDir: '~/.claude/plugins/marketplaces',
+        tier: 1,
+        installMode: 'filesystem',
     },
     {
         id: 'openclaw',
@@ -181,6 +215,8 @@ export const AGENTS_REGISTRY = [
         detectInstalled: () => detectBinary('openclaw'),
         parentCompany: 'Community',
         featureSupport: { slashCommands: false, hooks: false, mcp: false, customSystemPrompt: true },
+        tier: 1,
+        installMode: 'filesystem',
     },
     {
         id: 'replit',
@@ -222,6 +258,10 @@ export const AGENTS_REGISTRY = [
         detectInstalled: () => detectBinary('continue'),
         parentCompany: 'Continue',
         featureSupport: { slashCommands: true, hooks: false, mcp: true, customSystemPrompt: true },
+        // 0845 T-003: Tier 2 — emits `.continue/rules/<name>.md` (plain markdown).
+        tier: 2,
+        installMode: 'filesystem',
+        formatTransformer: continueDevTransformer,
     },
     {
         id: 'crush',
@@ -262,6 +302,10 @@ export const AGENTS_REGISTRY = [
         detectInstalled: () => detectBinary('junie'),
         parentCompany: 'JetBrains',
         featureSupport: { slashCommands: false, hooks: false, mcp: false, customSystemPrompt: true },
+        // 0845 T-003: Tier 2 — emits `.junie/rules/<name>.md` (plain markdown).
+        tier: 2,
+        installMode: 'filesystem',
+        formatTransformer: junieTransformer,
     },
     {
         id: 'iflow-cli',
@@ -292,6 +336,10 @@ export const AGENTS_REGISTRY = [
         detectInstalled: () => detectBinary('kiro'),
         parentCompany: 'AWS',
         featureSupport: { slashCommands: false, hooks: false, mcp: false, customSystemPrompt: true },
+        // 0845 T-003: Tier 2 — emits `.kiro/steering/<name>.md` (plain markdown).
+        tier: 2,
+        installMode: 'filesystem',
+        formatTransformer: kiroTransformer,
     },
     {
         id: 'kode',
@@ -392,6 +440,10 @@ export const AGENTS_REGISTRY = [
         detectInstalled: () => detectBinary('trae'),
         parentCompany: 'ByteDance',
         featureSupport: { slashCommands: false, hooks: false, mcp: true, customSystemPrompt: true },
+        // 0845 T-003: Tier 2 — emits `.trae/<name>.md` (plain markdown).
+        tier: 2,
+        installMode: 'filesystem',
+        formatTransformer: traeTransformer,
     },
     {
         id: 'trae-cn',
@@ -412,6 +464,10 @@ export const AGENTS_REGISTRY = [
         detectInstalled: () => detectBinary('windsurf'),
         parentCompany: 'Codeium',
         featureSupport: { slashCommands: true, hooks: false, mcp: true, customSystemPrompt: true },
+        // 0845 T-003: Tier 2 — emits `.windsurf/rules/<name>.md` (plain markdown).
+        tier: 2,
+        installMode: 'filesystem',
+        formatTransformer: windsurfTransformer,
     },
     {
         id: 'zencoder',
@@ -472,6 +528,10 @@ export const AGENTS_REGISTRY = [
         detectInstalled: () => detectBinary('aider'),
         parentCompany: 'Aider',
         featureSupport: { slashCommands: false, hooks: false, mcp: false, customSystemPrompt: true },
+        // 0845 T-003: Tier 2 — emits conventions file + appends to ~/.aider.conf.yml.
+        tier: 2,
+        installMode: 'filesystem',
+        formatTransformer: aiderTransformer,
     },
     {
         id: 'tabnine',
@@ -499,6 +559,9 @@ export const AGENTS_REGISTRY = [
     },
     {
         // 0694 US-004: bolt.new is a browser-only product. See devin entry above.
+        // 0845 T-003: kept isRemoteOnly: true for legacy callers (detectInstalledAgents
+        // skips remote-only). The new `installMode: "clipboard"` is the gate Studio
+        // uses to surface it under "Cloud only (paste required)". See ADR-0845-01.
         id: 'bolt-new',
         displayName: 'bolt.new',
         localSkillsDir: '.bolt/skills',
@@ -508,9 +571,36 @@ export const AGENTS_REGISTRY = [
         parentCompany: 'StackBlitz',
         featureSupport: { slashCommands: false, hooks: false, mcp: false, customSystemPrompt: true },
         isRemoteOnly: true,
+        tier: 3,
+        installMode: 'clipboard',
+        pasteInstructionsUrl: 'https://bolt.new/',
+        docsUrl: 'https://bolt.new/',
+    },
+    {
+        // 0845 T-003 (AC-US5-01, plan.md §12 concern #1): NEW entry for ChatGPT
+        // Custom Instructions / Project Instructions / Custom GPT. A single
+        // registry row covers all three paste destinations; the UI may later
+        // split them if per-flavor blob shaping is needed. isRemoteOnly stays
+        // true so legacy detectInstalledAgents skips it; installMode=clipboard
+        // is the new gate that makes Studio surface it as a paste-only target.
+        id: 'chatgpt',
+        displayName: 'ChatGPT',
+        localSkillsDir: '.chatgpt/skills',
+        globalSkillsDir: '~/.chatgpt/skills',
+        isUniversal: false,
+        detectInstalled: async () => false,
+        parentCompany: 'OpenAI',
+        featureSupport: { slashCommands: false, hooks: false, mcp: false, customSystemPrompt: true },
+        isRemoteOnly: true,
+        tier: 3,
+        installMode: 'clipboard',
+        pasteInstructionsUrl: 'https://help.openai.com/en/articles/8096356-chatgpt-custom-instructions',
+        docsUrl: 'https://chatgpt.com/#settings/Personalization',
     },
     {
         // 0694 US-004: v0 is a Vercel hosted UI generator. See devin entry above.
+        // 0845 T-003: Tier 3 clipboard — see bolt-new note for the isRemoteOnly
+        // + installMode dual-flag pattern.
         id: 'v0',
         displayName: 'v0',
         localSkillsDir: '.v0/skills',
@@ -520,6 +610,10 @@ export const AGENTS_REGISTRY = [
         parentCompany: 'Vercel',
         featureSupport: { slashCommands: false, hooks: false, mcp: false, customSystemPrompt: true },
         isRemoteOnly: true,
+        tier: 3,
+        installMode: 'clipboard',
+        pasteInstructionsUrl: 'https://v0.dev/docs',
+        docsUrl: 'https://v0.dev/',
     },
     {
         id: 'gpt-pilot',
@@ -813,4 +907,113 @@ export async function detectInstalledAgents() {
     }));
     return results.sort((a, b) => a.id.localeCompare(b.id));
 }
+/**
+ * Resolve the global skills dir for a single agent, honoring env overrides.
+ * The Antigravity entry supports `VSKILL_ANTIGRAVITY_SKILLS_DIR` so test
+ * harnesses (and power users) can redirect installs without forking the
+ * registry. See AC-US3-03.
+ */
+function resolveGlobalDirForAgent(agent) {
+    if (agent.id === "antigravity" && process.env.VSKILL_ANTIGRAVITY_SKILLS_DIR) {
+        return process.env.VSKILL_ANTIGRAVITY_SKILLS_DIR;
+    }
+    return expandHome(agent.globalSkillsDir);
+}
+/**
+ * Probe a single agent's binary or config dir in isolation. Used by
+ * getSupportedAgents() in parallel — never throws (returns false on
+ * any error). Mirrors the two-tier detection logic in
+ * detectInstalledAgents() so the two functions agree on "detected".
+ */
+async function probeAgentDetected(agent) {
+    // Remote-only agents have no local binary to probe. They still surface
+    // in getSupportedAgents() when they declare installMode=clipboard, but
+    // they are by definition undetectable.
+    if (agent.isRemoteOnly === true)
+        return false;
+    try {
+        const detector = agent.detectInstalled;
+        if (typeof detector === "function") {
+            if (await detector())
+                return true;
+        }
+        else {
+            const { exec } = await import("node:child_process");
+            const { promisify } = await import("node:util");
+            const execAsync = promisify(exec);
+            try {
+                await execAsync(detector);
+                return true;
+            }
+            catch {
+                // fall through to dir fallback
+            }
+        }
+    }
+    catch {
+        // fall through to dir fallback
+    }
+    try {
+        const { existsSync } = await import("node:fs");
+        const { dirname } = await import("node:path");
+        const globalDir = expandHome(agent.globalSkillsDir);
+        const home = process.env.HOME || process.env.USERPROFILE || "";
+        const configDir = dirname(globalDir);
+        if (configDir !== home && configDir !== `${home}/.config`) {
+            if (existsSync(globalDir))
+                return true;
+        }
+    }
+    catch {
+        // ignore — agent is simply undetected
+    }
+    return false;
+}
+/**
+ * 0845 (AC-US1-01, AC-US6-02, AC-US6-03): Returns every registered agent
+ * the Studio knows how to install to — Tier 1 / 2 (filesystem) and Tier 3
+ * (clipboard). Independent of binary detection: undetected agents are
+ * still included, with `detected: false`.
+ *
+ * The exclusion gate is `installMode`. Entries without an explicit
+ * `installMode` default to "filesystem" UNLESS they are flagged
+ * `isRemoteOnly: true` — in which case they are excluded (preserves
+ * the pre-existing semantics for Devin and Replit, which have no
+ * clipboard fallback). Tier 3 entries (chatgpt, bolt-new, v0) are
+ * kept by virtue of setting `installMode: "clipboard"` explicitly.
+ *
+ * Detection probes run in parallel via `Promise.allSettled`
+ * (AC-US6-02). `detectInstalledAgents()` is UNCHANGED (AC-US6-03).
+ */
+export async function getSupportedAgents() {
+    const candidates = AGENTS_REGISTRY.filter((a) => {
+        if (a.installMode === "clipboard")
+            return true;
+        if (a.installMode === "filesystem")
+            return true;
+        // No explicit installMode — default to "filesystem" only when not
+        // remote-only. Pure remote-only agents (devin, replit) drop out here.
+        return a.isRemoteOnly !== true;
+    });
+    const detectResults = await Promise.allSettled(candidates.map((a) => probeAgentDetected(a)));
+    const supported = candidates.map((a, idx) => {
+        const r = detectResults[idx];
+        const detected = r.status === "fulfilled" ? r.value : false;
+        const result = {
+            id: a.id,
+            displayName: a.displayName,
+            detected,
+            tier: (a.tier ?? 1),
+            installMode: a.installMode ?? "filesystem",
+            resolvedGlobalDir: resolveGlobalDirForAgent(a),
+            resolvedLocalDir: a.localSkillsDir,
+        };
+        if (a.pasteInstructionsUrl)
+            result.pasteInstructionsUrl = a.pasteInstructionsUrl;
+        if (a.docsUrl)
+            result.docsUrl = a.docsUrl;
+        return result;
+    });
+    return supported.sort((a, b) => a.id.localeCompare(b.id));
+}
 //# sourceMappingURL=agents-registry.js.map