@civilization/deepseek-harness-skill-mcp 0.2.0 → 0.3.0

package/README.md

@@ -69,6 +69,38 @@ Skill 页面支持：
 
 新路径默认禁用。启用后，Harness 的 Skill provider 扫描该路径中的技能。页面在前台时每 3 秒刷新一次。当前 Harness Web 会按会话缓存 `/` Skill 候选，但未把 Host 的 `skills/change` 转发给浏览器；本插件在管理操作成功或用户点击“刷新”后触发客户端目录缓存失效，使下一次打开 `/` 菜单重新读取 Skill 列表。直接在文件系统外部修改 Skill 时，在管理页点击一次“刷新”即可同步菜单。
 
+## 工具管理 (Skill Catalog)
+
+通过新增的 `skill-catalog` 配置项，插件可管理当前 Harness 运行时中各个已安装插件所注册的工具（如 `dsh-autotask` 的自动化任务工具、`dsh-drawio` 的架构绘图工具、`dsh-playwright` 的浏览器工具、MCP 工具等），支持自由选择性启用或禁用。
+
+### 1. 配置项 `skill-catalog`
+支持在 `cordis.patch.yml` 中或设置界面配置：
+
+```yaml
+- insert:
+    - id: dsh-skill-mcp
+      name: "@civilization/deepseek-harness-skill-mcp"
+      config:
+        skill-catalog:
+          disabledTools:
+            - session_create_autotask
+            - drawio_render
+```
+
+### 2. 接管与安全拦截机制
+- **自动归类**：自动扫描运行时注册的所有工具，根据工具命名规则智能归属到所属插件（如 `session_*_autotask` 归属于 `dsh-autotask`，`drawio_*` 归属于 `dsh-drawio`，`browser_*` 归属于 `dsh-playwright`，`mcp__*` 归属于对应 MCP 服务）。
+- **单调守卫拦截 (`ctx.tools.guard`)**：当工具被配置为禁用时，Cordis 单调守卫将在工具调用前拦截并返回友好提示（`【Skill Catalog 接管】工具 "..." 当前已被禁用`），杜绝 Agent 越权或误调用。
+- **瀑布流预检查 (`tools/pre-execute`)**：在调度层提前做出 `deny` 决策。
+- **核心工具保护**：PTC 核心传输通道与内部 catalog 控制工具自动设为受保护状态，防止误禁用导致环境不可用。
+
+### 3. Web 界面操作
+设置中心的“**工具接管**”页面提供：
+- 总工具数、已启用、已禁用和插件/服务统计面板；
+- 实时搜索工具名称、描述与插件前缀；
+- 按插件分组筛选与分组折叠卡片；
+- 每个工具独立的现代化开关（Switch Toggle）；
+- 插件级别的“全选启用”与“全部禁用”快捷操作。
+
 ## MCP 管理
 
 支持三种 MCP 配置类型：
@@ -116,7 +148,7 @@ MCP 对端离线、命令启动失败或首次工具发现失败不会阻止 DSH
 
 ## Agent 工具与 Skill
 
-插件向 DSH 注册了 `extension-management` Skill 以及 7 个模型专属管理工具：
+插件向 DSH 注册了 `extension-management` Skill 以及 9 个模型专属管理工具：
 
 - **`extension-management` Skill**：引导模型掌握受管 Skill 路径与 stdio / streamable-http / sse 模式 MCP 服务器的标准配置结构与安全规约。
 
@@ -130,6 +162,8 @@ MCP 对端离线、命令启动失败或首次工具发现失败不会阻止 DSH
 | `extensions_update_mcp` | 替换 MCP 连接配置并保留 id 与启用状态 |
 | `extensions_remove` | 移除 Skill 来源或 MCP 配置；不会删除 Skill 来源目录 |
 | `extensions_inspect` | 查看当前 Agent 实际可见的 Skill 与 MCP 工具 |
+| `extensions_catalog_list` | 列出系统中所有发现的工具、插件归类与启停状态 |
+| `extensions_catalog_set` | 启用或禁用特定工具（受 skill-catalog 接管） |
 
 可以直接告诉 Agent：
 

package/lib/client.js

@@ -21,6 +21,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/client/index.jsx
 var index_exports = {};
 __export(index_exports, {
+  CatalogSection: () => CatalogSection,
   McpSection: () => McpSection,
   SkillSection: () => SkillSection,
   apply: () => apply,
@@ -200,7 +201,22 @@ var zh = {
   "issue_missing-description": "\u7F3A\u5C11 description",
   "issue_invalid-invocation": "\u8C03\u7528\u6743\u9650\u5B57\u6BB5\u4E0D\u662F\u6709\u6548\u5E03\u5C14\u503C",
   issue_unreadable: "\u6587\u4EF6\u65E0\u6CD5\u8BFB\u53D6",
-  "issue_source-unreadable": "Skill \u8DEF\u5F84\u65E0\u6CD5\u8BFB\u53D6"
+  "issue_source-unreadable": "Skill \u8DEF\u5F84\u65E0\u6CD5\u8BFB\u53D6",
+  navCatalog: "\u5DE5\u5177\u7BA1\u7406",
+  catalogIntro: "\u7BA1\u7406\u7CFB\u7EDF\u4E2D\u5DF2\u5B89\u88C5\u5404\u63D2\u4EF6\u4E0E\u670D\u52A1\u7684\u5DE5\u5177\uFF0C\u53EF\u81EA\u7531\u9009\u62E9\u542F\u7528\u6216\u7981\u7528\u3002\u88AB\u7981\u7528\u7684\u5DE5\u5177\u5C06\u88AB\u5B89\u5168\u62E6\u622A\u3002",
+  catalogSearchPlaceholder: "\u641C\u7D22\u5DE5\u5177\u540D\u3001\u63CF\u8FF0\u6216\u6240\u5C5E\u63D2\u4EF6\u2026",
+  stat_catalogTotal: "\u603B\u5DE5\u5177\u6570",
+  stat_catalogEnabled: "\u5DF2\u542F\u7528",
+  stat_catalogDisabled: "\u5DF2\u7981\u7528",
+  stat_catalogPlugins: "\u63D2\u4EF6/\u670D\u52A1",
+  enableAll: "\u5168\u9009\u542F\u7528",
+  disableAll: "\u5168\u90E8\u7981\u7528",
+  filterPlugin: "\u63D2\u4EF6\u5206\u7EC4",
+  filterAllPlugins: "\u5168\u90E8\u63D2\u4EF6",
+  noCatalogResults: "\u672A\u627E\u5230\u5339\u914D\u7684\u5DE5\u5177",
+  noCatalogResultsHint: "\u8BF7\u5C1D\u8BD5\u4FEE\u6539\u641C\u7D22\u8BCD\u6216\u9009\u62E9\u5176\u4ED6\u63D2\u4EF6\u5206\u7EC4\u3002",
+  toolProtected: "\u6838\u5FC3\u4FDD\u7559",
+  toolTakeoverHint: "\u6B64\u5DE5\u5177\u53D7 skill-catalog \u7EDF\u4E00\u7BA1\u7406\u3002"
 };
 var en = {
   navSkill: "Skills",
@@ -311,11 +327,26 @@ var en = {
   "issue_missing-description": "Missing description",
   "issue_invalid-invocation": "Invocation field is not a valid boolean",
   issue_unreadable: "File cannot be read",
-  "issue_source-unreadable": "Skill path cannot be read"
+  "issue_source-unreadable": "Skill path cannot be read",
+  navCatalog: "Tools",
+  catalogIntro: "Manage tools from installed plugins and services. Enable or disable them selectively with safety guards.",
+  catalogSearchPlaceholder: "Search tool name, description or plugin\u2026",
+  stat_catalogTotal: "Total Tools",
+  stat_catalogEnabled: "Enabled",
+  stat_catalogDisabled: "Disabled",
+  stat_catalogPlugins: "Plugins/Services",
+  enableAll: "Enable All",
+  disableAll: "Disable All",
+  filterPlugin: "Plugin Group",
+  filterAllPlugins: "All Plugins",
+  noCatalogResults: "No matching tools found",
+  noCatalogResultsHint: "Try adjusting your search terms or filter.",
+  toolProtected: "Protected",
+  toolTakeoverHint: "This tool is managed under skill-catalog."
 };
 
 // src/client/styles.css
-var styles_default = ".dsh-ext{color:var(--dsw-alias-label-primary);max-width:840px;padding:4px 0 28px;font:inherit}\n.dsh-ext-heading,.dsh-ext-card>header{display:flex;justify-content:space-between;align-items:center;gap:16px}\n.dsh-ext h2{font-size:22px;letter-spacing:-.4px;margin:0 0 8px}.dsh-ext h3{font-size:15px;margin:0;display:flex;align-items:center;gap:8px}\n.dsh-ext p,.dsh-ext small{color:var(--dsw-alias-label-tertiary);font-size:13px;line-height:1.6}.dsh-ext-heading p{margin:0}\n.dsh-ext button{font:inherit;font-size:13px;cursor:pointer;border:1px solid var(--dsw-alias-border-l4);border-radius:9px;background:var(--dsw-alias-bg-layer-2);color:inherit;padding:8px 13px;white-space:nowrap}\n.dsh-ext button:hover{background:var(--dsw-alias-bg-layer-3)}.dsh-ext button:disabled{opacity:.5;cursor:default}\n.dsh-ext :is(button,input,select,textarea):focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:3px}\n.dsh-ext-card{border:1px solid var(--dsw-alias-border-l4);border-radius:16px;margin-top:20px;background:var(--dsw-alias-bg-layer-2);overflow:hidden}\n.dsh-ext-card>header{padding:18px 20px;border-bottom:1px solid var(--dsw-alias-border-l4)}.dsh-ext-count{font-size:11px;font-weight:400;color:var(--dsw-alias-label-tertiary)}\n.dsh-ext-empty{padding:32px 20px}.dsh-ext-empty strong{font-size:14px;font-weight:500}.dsh-ext-empty p{margin:6px 0 0}\n.dsh-ext ul{list-style:none;padding:0;margin:0}.dsh-ext li{display:flex;justify-content:space-between;align-items:center;gap:14px;padding:16px 20px;border-bottom:1px solid var(--dsw-alias-border-l4)}.dsh-ext li:last-child{border:0}\n.dsh-ext-details{display:flex;flex-direction:column;gap:5px;min-width:0}.dsh-ext-details strong{font-size:14px}.dsh-ext-details code{font-size:12px;color:var(--dsw-alias-label-secondary);overflow-wrap:anywhere}\n.dsh-ext-runtime{display:flex;align-items:center;flex-wrap:wrap;gap:7px;font-size:12px;color:var(--dsw-alias-label-tertiary)}\n.dsh-ext-status{width:7px;height:7px;border-radius:50%;background:#858585;box-shadow:0 0 0 3px color-mix(in srgb,#858585 16%,transparent)}\n.dsh-ext-status-available{background:#38a169;box-shadow:0 0 0 3px color-mix(in srgb,#38a169 18%,transparent)}.dsh-ext-status-waiting{background:#d69e2e;box-shadow:0 0 0 3px color-mix(in srgb,#d69e2e 18%,transparent)}\n.dsh-ext-runtime details{width:100%;margin-top:2px}.dsh-ext-runtime summary{width:max-content;cursor:pointer;color:var(--dsw-alias-label-secondary);user-select:none}.dsh-ext-runtime summary:hover{color:var(--dsw-alias-label-primary)}\n.dsh-ext-runtime .dsh-ext-tools{display:flex;flex-wrap:wrap;gap:6px;margin-top:8px}.dsh-ext-runtime .dsh-ext-tools li{display:block;border:0;padding:4px 8px;border-radius:6px;background:var(--dsw-alias-bg-layer-3)}\n.dsh-ext-form{padding:20px;border-top:1px solid var(--dsw-alias-border-l4)}.dsh-ext fieldset{border:0;padding:0;margin:0;display:grid;grid-template-columns:1fr 1fr;gap:16px}.dsh-ext label{display:flex;flex-direction:column;gap:7px;font-size:13px}\n.dsh-ext input,.dsh-ext select,.dsh-ext textarea{box-sizing:border-box;min-width:0;width:100%;font:inherit;color:inherit;background:var(--dsw-alias-bg-layer-1);border:1px solid var(--dsw-alias-border-l4);border-radius:8px;padding:10px}.dsh-ext textarea{resize:vertical}\n.dsh-ext-actions{display:flex;justify-content:flex-end;gap:8px;grid-column:1/-1}.dsh-ext fieldset>p{grid-column:1/-1;margin:0}.dsh-ext-notice{padding:12px 16px;border:1px solid var(--dsw-alias-border-l4);border-radius:10px}.dsh-ext-footnote{padding:0 4px}\n.dsh-ext-row-actions{display:flex;align-items:center;gap:7px;flex-wrap:wrap;justify-content:flex-end}.dsh-ext .dsh-ext-danger{color:#e98282}.dsh-ext-inline-form{width:100%;padding:14px 0 2px;border:0}.dsh-skill-edit-form{margin-top:12px;padding:14px;border-radius:10px;background:var(--dsw-alias-bg-layer-1)}\n.dsh-confirm{box-sizing:border-box;width:min(430px,calc(100vw - 32px));padding:22px;border:1px solid var(--dsw-alias-border-l4);border-radius:16px;background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary);box-shadow:0 20px 60px rgba(0,0,0,.28);font:inherit}.dsh-confirm::backdrop{background:rgba(10,12,16,.48);backdrop-filter:blur(3px)}\n.dsh-confirm-icon{display:grid;place-items:center;width:34px;height:34px;margin-bottom:16px;border-radius:10px;background:color-mix(in srgb,#e05252 14%,transparent);color:#e98282;font-size:19px;font-weight:700}.dsh-confirm-copy h3{margin:0;font-size:16px}.dsh-confirm-copy p{margin:8px 0 0;color:var(--dsw-alias-label-tertiary);font-size:13px;line-height:1.65}.dsh-confirm-actions{display:flex;justify-content:flex-end;gap:8px;margin-top:22px}.dsh-confirm button{font:inherit;font-size:13px;cursor:pointer;border:1px solid var(--dsw-alias-border-l4);border-radius:9px;background:var(--dsw-alias-bg-layer-2);color:inherit;padding:8px 14px}.dsh-confirm button:hover{background:var(--dsw-alias-bg-layer-3)}.dsh-confirm button:disabled{opacity:.5;cursor:default}.dsh-confirm button:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:3px}.dsh-confirm .dsh-confirm-delete{border-color:color-mix(in srgb,#e05252 45%,var(--dsw-alias-border-l4));background:#b83232;color:#fff}.dsh-confirm .dsh-confirm-delete:hover{background:#c63b3b}\n.dsh-ext-heading-actions{display:flex;gap:8px;align-items:center}.dsh-visually-hidden{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}\n.dsh-skill-stats{display:grid;grid-template-columns:repeat(4,1fr);gap:10px;margin-top:20px}.dsh-skill-stats>div{display:flex;flex-direction:column;gap:4px;padding:14px 16px;border:1px solid var(--dsw-alias-border-l4);border-radius:12px;background:var(--dsw-alias-bg-layer-2)}.dsh-skill-stats strong{font-size:20px}.dsh-skill-stats span{font-size:12px;color:var(--dsw-alias-label-tertiary)}\n.dsh-skill-search{margin-top:14px}.dsh-skill-search input{padding-left:13px}.dsh-skill-manager>.dsh-ext-form{margin-top:14px;border:1px solid var(--dsw-alias-border-l4);border-radius:14px;background:var(--dsw-alias-bg-layer-2)}\n.dsh-skill-filters{display:grid;grid-template-columns:repeat(3,1fr);gap:10px;margin-top:10px}.dsh-skill-filters label{gap:5px;font-size:11px;color:var(--dsw-alias-label-tertiary)}.dsh-skill-filters select{padding:8px 10px;color:var(--dsw-alias-label-primary)}\n.dsh-skill-source-manager{margin-top:14px}.dsh-skill-source-manager>summary{cursor:pointer;padding:14px 18px;font-size:14px;font-weight:600;user-select:none}.dsh-skill-source-manager[open]>summary{border-bottom:1px solid var(--dsw-alias-border-l4)}\n.dsh-skill-source-manager li{padding:11px 18px;flex-wrap:wrap}.dsh-skill-source-title{display:flex;align-items:flex-start;gap:11px;min-width:0}.dsh-skill-source-title>.dsh-ext-status{margin-top:6px;flex:0 0 auto}.dsh-skill-source-title>div{display:flex;min-width:0;flex-direction:column;gap:3px}.dsh-skill-source-title code{font-size:11px;color:var(--dsw-alias-label-tertiary);overflow-wrap:anywhere}.dsh-skill-source-title small{font-size:11px;color:#e98282}\n.dsh-skill-library{margin-top:14px}.dsh-skill-group-editor{display:flex;align-items:flex-end;gap:8px}.dsh-skill-group-editor label{flex:1}.dsh-skill-group-editor input{padding:7px 9px}.dsh-skill-group-editor button{padding:7px 10px}\n.dsh-skill-row{display:block!important;padding:15px 18px!important}.dsh-skill-row-main{min-width:0}.dsh-skill-name{display:flex;align-items:center;gap:9px}.dsh-skill-name strong{font-size:14px}.dsh-skill-row-main>p{margin:6px 0 3px}.dsh-skill-row-main>code{font-size:11px;color:var(--dsw-alias-label-tertiary)}\n.dsh-skill-badge{font-size:11px;padding:2px 7px;border-radius:999px;background:var(--dsw-alias-bg-layer-3);color:var(--dsw-alias-label-secondary)}.dsh-skill-badge-group{color:var(--dsw-alias-brand-primary);background:color-mix(in srgb,var(--dsw-alias-brand-primary) 12%,transparent)}.dsh-skill-badge-invalid{color:#e98282}.dsh-skill-badge-shadowed{color:#a98af8}.dsh-ext-status-invalid{background:#e05252;box-shadow:0 0 0 3px color-mix(in srgb,#e05252 18%,transparent)}.dsh-ext-status-shadowed{background:#8b5cf6;box-shadow:0 0 0 3px color-mix(in srgb,#8b5cf6 18%,transparent)}.dsh-ext-status-manual{background:#d69e2e;box-shadow:0 0 0 3px color-mix(in srgb,#d69e2e 18%,transparent)}\n.dsh-skill-row details{margin-top:9px}.dsh-skill-row summary{width:max-content;cursor:pointer;font-size:12px;color:var(--dsw-alias-label-secondary)}.dsh-skill-detail{display:grid;grid-template-columns:1fr 1fr;gap:14px;margin-top:12px;padding:14px;border-radius:10px;background:var(--dsw-alias-bg-layer-1)}.dsh-skill-detail>p{grid-column:1/-1;margin:0}.dsh-skill-detail p strong,.dsh-skill-detail>div>strong{display:block;margin-bottom:5px;color:var(--dsw-alias-label-secondary);font-size:12px}\n.dsh-skill-invocation{display:flex;flex-direction:column;gap:7px}.dsh-skill-invocation label,.dsh-skill-create-flags label{display:flex;flex-direction:row;align-items:center;gap:5px}.dsh-ext input[type=checkbox]{width:auto;min-width:auto}.dsh-skill-detail ul,.dsh-skill-detail li{display:block!important;margin:0;padding:0!important;border:0!important}.dsh-skill-resources{display:flex!important;flex-wrap:wrap!important;gap:5px}.dsh-skill-resources li{padding:3px 6px!important;border-radius:5px!important;background:var(--dsw-alias-bg-layer-3)!important}\n.dsh-ext-span{grid-column:1/-1}.dsh-skill-create-flags{display:flex;flex-direction:column;gap:7px;font-size:13px}.dsh-skill-create-flags>span{margin-bottom:1px}.dsh-skill-source>.dsh-ext-notice{margin:12px 18px}.dsh-skill-source>.dsh-ext-empty{padding:18px}\n@media(max-width:600px){.dsh-ext fieldset,.dsh-skill-detail,.dsh-skill-filters{grid-template-columns:1fr}.dsh-ext-heading{align-items:flex-start;flex-direction:column}.dsh-ext-heading-actions{flex-wrap:wrap}.dsh-ext-card>header{padding:14px}.dsh-ext li{padding:14px}.dsh-skill-stats{grid-template-columns:repeat(2,1fr)}.dsh-skill-group-editor{align-items:stretch;flex-direction:column}}\n";
+var styles_default = '.dsh-ext{color:var(--dsw-alias-label-primary);max-width:840px;padding:4px 0 28px;font:inherit}\n.dsh-ext-heading,.dsh-ext-card>header{display:flex;justify-content:space-between;align-items:center;gap:16px}\n.dsh-ext h2{font-size:22px;letter-spacing:-.4px;margin:0 0 8px}.dsh-ext h3{font-size:15px;margin:0;display:flex;align-items:center;gap:8px}\n.dsh-ext p,.dsh-ext small{color:var(--dsw-alias-label-tertiary);font-size:13px;line-height:1.6}.dsh-ext-heading p{margin:0}\n.dsh-ext button{font:inherit;font-size:13px;cursor:pointer;border:1px solid var(--dsw-alias-border-l4);border-radius:9px;background:var(--dsw-alias-bg-layer-2);color:inherit;padding:8px 13px;white-space:nowrap}\n.dsh-ext button:hover{background:var(--dsw-alias-bg-layer-3)}.dsh-ext button:disabled{opacity:.5;cursor:default}\n.dsh-ext :is(button,input,select,textarea):focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:3px}\n.dsh-ext-card{border:1px solid var(--dsw-alias-border-l4);border-radius:16px;margin-top:20px;background:var(--dsw-alias-bg-layer-2);overflow:hidden}\n.dsh-ext-card>header{padding:18px 20px;border-bottom:1px solid var(--dsw-alias-border-l4)}.dsh-ext-count{font-size:11px;font-weight:400;color:var(--dsw-alias-label-tertiary)}\n.dsh-ext-empty{padding:32px 20px}.dsh-ext-empty strong{font-size:14px;font-weight:500}.dsh-ext-empty p{margin:6px 0 0}\n.dsh-ext ul{list-style:none;padding:0;margin:0}.dsh-ext li{display:flex;justify-content:space-between;align-items:center;gap:14px;padding:16px 20px;border-bottom:1px solid var(--dsw-alias-border-l4)}.dsh-ext li:last-child{border:0}\n.dsh-ext-details{display:flex;flex-direction:column;gap:5px;min-width:0}.dsh-ext-details strong{font-size:14px}.dsh-ext-details code{font-size:12px;color:var(--dsw-alias-label-secondary);overflow-wrap:anywhere}\n.dsh-ext-runtime{display:flex;align-items:center;flex-wrap:wrap;gap:7px;font-size:12px;color:var(--dsw-alias-label-tertiary)}\n.dsh-ext-status{width:7px;height:7px;border-radius:50%;background:#858585;box-shadow:0 0 0 3px color-mix(in srgb,#858585 16%,transparent)}\n.dsh-ext-status-available{background:#38a169;box-shadow:0 0 0 3px color-mix(in srgb,#38a169 18%,transparent)}.dsh-ext-status-waiting{background:#d69e2e;box-shadow:0 0 0 3px color-mix(in srgb,#d69e2e 18%,transparent)}\n.dsh-ext-runtime details{width:100%;margin-top:2px}.dsh-ext-runtime summary{width:max-content;cursor:pointer;color:var(--dsw-alias-label-secondary);user-select:none}.dsh-ext-runtime summary:hover{color:var(--dsw-alias-label-primary)}\n.dsh-ext-runtime .dsh-ext-tools{display:flex;flex-wrap:wrap;gap:6px;margin-top:8px}.dsh-ext-runtime .dsh-ext-tools li{display:block;border:0;padding:4px 8px;border-radius:6px;background:var(--dsw-alias-bg-layer-3)}\n.dsh-ext-form{padding:20px;border-top:1px solid var(--dsw-alias-border-l4)}.dsh-ext fieldset{border:0;padding:0;margin:0;display:grid;grid-template-columns:1fr 1fr;gap:16px}.dsh-ext label{display:flex;flex-direction:column;gap:7px;font-size:13px}\n.dsh-ext input,.dsh-ext select,.dsh-ext textarea{box-sizing:border-box;min-width:0;width:100%;font:inherit;color:inherit;background:var(--dsw-alias-bg-layer-1);border:1px solid var(--dsw-alias-border-l4);border-radius:8px;padding:10px}.dsh-ext textarea{resize:vertical}\n.dsh-ext-actions{display:flex;justify-content:flex-end;gap:8px;grid-column:1/-1}.dsh-ext fieldset>p{grid-column:1/-1;margin:0}.dsh-ext-notice{padding:12px 16px;border:1px solid var(--dsw-alias-border-l4);border-radius:10px}.dsh-ext-footnote{padding:0 4px}\n.dsh-ext-row-actions{display:flex;align-items:center;gap:7px;flex-wrap:wrap;justify-content:flex-end}.dsh-ext .dsh-ext-danger{color:#e98282}.dsh-ext-inline-form{width:100%;padding:14px 0 2px;border:0}.dsh-skill-edit-form{margin-top:12px;padding:14px;border-radius:10px;background:var(--dsw-alias-bg-layer-1)}\n.dsh-confirm{box-sizing:border-box;width:min(430px,calc(100vw - 32px));padding:22px;border:1px solid var(--dsw-alias-border-l4);border-radius:16px;background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary);box-shadow:0 20px 60px rgba(0,0,0,.28);font:inherit}.dsh-confirm::backdrop{background:rgba(10,12,16,.48);backdrop-filter:blur(3px)}\n.dsh-confirm-icon{display:grid;place-items:center;width:34px;height:34px;margin-bottom:16px;border-radius:10px;background:color-mix(in srgb,#e05252 14%,transparent);color:#e98282;font-size:19px;font-weight:700}.dsh-confirm-copy h3{margin:0;font-size:16px}.dsh-confirm-copy p{margin:8px 0 0;color:var(--dsw-alias-label-tertiary);font-size:13px;line-height:1.65}.dsh-confirm-actions{display:flex;justify-content:flex-end;gap:8px;margin-top:22px}.dsh-confirm button{font:inherit;font-size:13px;cursor:pointer;border:1px solid var(--dsw-alias-border-l4);border-radius:9px;background:var(--dsw-alias-bg-layer-2);color:inherit;padding:8px 14px}.dsh-confirm button:hover{background:var(--dsw-alias-bg-layer-3)}.dsh-confirm button:disabled{opacity:.5;cursor:default}.dsh-confirm button:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:3px}.dsh-confirm .dsh-confirm-delete{border-color:color-mix(in srgb,#e05252 45%,var(--dsw-alias-border-l4));background:#b83232;color:#fff}.dsh-confirm .dsh-confirm-delete:hover{background:#c63b3b}\n.dsh-ext-heading-actions{display:flex;gap:8px;align-items:center}.dsh-visually-hidden{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}\n.dsh-skill-stats{display:grid;grid-template-columns:repeat(4,1fr);gap:10px;margin-top:20px}.dsh-skill-stats>div{display:flex;flex-direction:column;gap:4px;padding:14px 16px;border:1px solid var(--dsw-alias-border-l4);border-radius:12px;background:var(--dsw-alias-bg-layer-2)}.dsh-skill-stats strong{font-size:20px}.dsh-skill-stats span{font-size:12px;color:var(--dsw-alias-label-tertiary)}\n.dsh-skill-search{margin-top:14px}.dsh-skill-search input{padding-left:13px}.dsh-skill-manager>.dsh-ext-form{margin-top:14px;border:1px solid var(--dsw-alias-border-l4);border-radius:14px;background:var(--dsw-alias-bg-layer-2)}\n.dsh-skill-filters{display:grid;grid-template-columns:repeat(3,1fr);gap:10px;margin-top:10px}.dsh-skill-filters label{gap:5px;font-size:11px;color:var(--dsw-alias-label-tertiary)}.dsh-skill-filters select{padding:8px 10px;color:var(--dsw-alias-label-primary)}\n.dsh-skill-source-manager{margin-top:14px}.dsh-skill-source-manager>summary{cursor:pointer;padding:14px 18px;font-size:14px;font-weight:600;user-select:none}.dsh-skill-source-manager[open]>summary{border-bottom:1px solid var(--dsw-alias-border-l4)}\n.dsh-skill-source-manager li{padding:11px 18px;flex-wrap:wrap}.dsh-skill-source-title{display:flex;align-items:flex-start;gap:11px;min-width:0}.dsh-skill-source-title>.dsh-ext-status{margin-top:6px;flex:0 0 auto}.dsh-skill-source-title>div{display:flex;min-width:0;flex-direction:column;gap:3px}.dsh-skill-source-title code{font-size:11px;color:var(--dsw-alias-label-tertiary);overflow-wrap:anywhere}.dsh-skill-source-title small{font-size:11px;color:#e98282}\n.dsh-skill-library{margin-top:14px}.dsh-skill-group-editor{display:flex;align-items:flex-end;gap:8px}.dsh-skill-group-editor label{flex:1}.dsh-skill-group-editor input{padding:7px 9px}.dsh-skill-group-editor button{padding:7px 10px}\n.dsh-skill-row{display:block!important;padding:15px 18px!important}.dsh-skill-row-main{min-width:0}.dsh-skill-name{display:flex;align-items:center;gap:9px}.dsh-skill-name strong{font-size:14px}.dsh-skill-row-main>p{margin:6px 0 3px}.dsh-skill-row-main>code{font-size:11px;color:var(--dsw-alias-label-tertiary)}\n.dsh-skill-badge{font-size:11px;padding:2px 7px;border-radius:999px;background:var(--dsw-alias-bg-layer-3);color:var(--dsw-alias-label-secondary)}.dsh-skill-badge-group{color:var(--dsw-alias-brand-primary);background:color-mix(in srgb,var(--dsw-alias-brand-primary) 12%,transparent)}.dsh-skill-badge-invalid{color:#e98282}.dsh-skill-badge-shadowed{color:#a98af8}.dsh-ext-status-invalid{background:#e05252;box-shadow:0 0 0 3px color-mix(in srgb,#e05252 18%,transparent)}.dsh-ext-status-shadowed{background:#8b5cf6;box-shadow:0 0 0 3px color-mix(in srgb,#8b5cf6 18%,transparent)}.dsh-ext-status-manual{background:#d69e2e;box-shadow:0 0 0 3px color-mix(in srgb,#d69e2e 18%,transparent)}\n.dsh-skill-row details{margin-top:9px}.dsh-skill-row summary{width:max-content;cursor:pointer;font-size:12px;color:var(--dsw-alias-label-secondary)}.dsh-skill-detail{display:grid;grid-template-columns:1fr 1fr;gap:14px;margin-top:12px;padding:14px;border-radius:10px;background:var(--dsw-alias-bg-layer-1)}.dsh-skill-detail>p{grid-column:1/-1;margin:0}.dsh-skill-detail p strong,.dsh-skill-detail>div>strong{display:block;margin-bottom:5px;color:var(--dsw-alias-label-secondary);font-size:12px}\n.dsh-skill-invocation{display:flex;flex-direction:column;gap:7px}.dsh-skill-invocation label,.dsh-skill-create-flags label{display:flex;flex-direction:row;align-items:center;gap:5px}.dsh-ext input[type=checkbox]{width:auto;min-width:auto}.dsh-skill-detail ul,.dsh-skill-detail li{display:block!important;margin:0;padding:0!important;border:0!important}.dsh-skill-resources{display:flex!important;flex-wrap:wrap!important;gap:5px}.dsh-skill-resources li{padding:3px 6px!important;border-radius:5px!important;background:var(--dsw-alias-bg-layer-3)!important}\n.dsh-ext-span{grid-column:1/-1}.dsh-skill-create-flags{display:flex;flex-direction:column;gap:7px;font-size:13px}.dsh-skill-create-flags>span{margin-bottom:1px}.dsh-skill-source>.dsh-ext-notice{margin:12px 18px}.dsh-skill-source>.dsh-ext-empty{padding:18px}\n@media(max-width:600px){.dsh-ext fieldset,.dsh-skill-detail,.dsh-skill-filters{grid-template-columns:1fr}.dsh-ext-heading{align-items:flex-start;flex-direction:column}.dsh-ext-heading-actions{flex-wrap:wrap}.dsh-ext-card>header{padding:14px}.dsh-ext li{padding:14px}.dsh-skill-stats{grid-template-columns:repeat(2,1fr)}.dsh-skill-group-editor{align-items:stretch;flex-direction:column}}\n\n/* Skill Catalog Takeover Styles */\n.dsh-catalog-section{margin-top:14px}\n.dsh-catalog-header-actions{display:flex;align-items:center;gap:8px}\n.dsh-catalog-group-card{margin-top:16px;border:1px solid var(--dsw-alias-border-l4);border-radius:14px;background:var(--dsw-alias-bg-layer-2);overflow:hidden}\n.dsh-catalog-group-header{display:flex;justify-content:space-between;align-items:center;padding:14px 18px;background:color-mix(in srgb,var(--dsw-alias-bg-layer-3) 50%,transparent);border-bottom:1px solid var(--dsw-alias-border-l4);cursor:pointer;user-select:none}\n.dsh-catalog-group-header::-webkit-details-marker{display:none}\n.dsh-catalog-group-header::marker{content:""}\n.dsh-catalog-group-card:not([open]) .dsh-catalog-group-header{border-bottom:0}\n.dsh-catalog-group-title{display:flex;align-items:center;gap:10px}\n.dsh-catalog-group-title::before{content:"\u25B6";display:inline-block;font-size:11px;color:var(--dsw-alias-label-tertiary);transition:transform .2s ease}\n.dsh-catalog-group-card[open] .dsh-catalog-group-title::before{transform:rotate(90deg)}\n.dsh-catalog-group-title h4{margin:0;font-size:14px;font-weight:600}\n.dsh-catalog-group-actions{display:flex;align-items:center;gap:6px}\n.dsh-catalog-group-actions button{padding:4px 10px;font-size:12px;border-radius:7px}\n.dsh-catalog-tool-item{display:flex;justify-content:space-between;align-items:center;gap:16px;padding:14px 18px;border-bottom:1px solid var(--dsw-alias-border-l4);transition:background .15s ease}\n.dsh-catalog-tool-item:last-child{border-bottom:0}\n.dsh-catalog-tool-item:hover{background:color-mix(in srgb,var(--dsw-alias-bg-layer-3) 40%,transparent)}\n.dsh-catalog-tool-info{display:flex;flex-direction:column;gap:5px;min-width:0;flex:1}\n.dsh-catalog-tool-header{display:flex;align-items:center;gap:8px;flex-wrap:wrap}\n.dsh-catalog-tool-header code{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;font-size:13px;font-weight:600;color:var(--dsw-alias-brand-primary)}\n.dsh-catalog-tool-info p{margin:0;font-size:12px;color:var(--dsw-alias-label-secondary);line-height:1.5}\n.dsh-catalog-switch-wrap{display:flex;align-items:center;gap:10px;flex-shrink:0}\n.dsh-catalog-switch-label{font-size:12px;font-weight:500}\n.dsh-catalog-switch{position:relative;display:inline-block;width:40px;height:22px;cursor:pointer}\n.dsh-catalog-switch input{opacity:0;width:0;height:0;position:absolute}\n.dsh-catalog-slider{position:absolute;cursor:pointer;inset:0;background:var(--dsw-alias-bg-layer-4,#3b3b3b);border:1px solid var(--dsw-alias-border-l4);border-radius:22px;transition:.2s}\n.dsh-catalog-slider:before{position:absolute;content:"";height:16px;width:16px;left:2px;bottom:2px;background:#fff;border-radius:50%;transition:.2s}\n.dsh-catalog-switch input:checked + .dsh-catalog-slider{background:var(--dsw-alias-brand-primary,#3182ce);border-color:var(--dsw-alias-brand-primary,#3182ce)}\n.dsh-catalog-switch input:checked + .dsh-catalog-slider:before{transform:translateX(18px)}\n.dsh-catalog-switch input:disabled + .dsh-catalog-slider{opacity:.4;cursor:not-allowed}\n.dsh-catalog-tool-details{margin-top:4px;width:100%}\n.dsh-catalog-tool-details summary{width:max-content;cursor:pointer;font-size:12px;color:var(--dsw-alias-label-secondary);user-select:none;transition:color .15s}\n.dsh-catalog-tool-details summary:hover{color:var(--dsw-alias-label-primary)}\n.dsh-catalog-tool-details p{margin:6px 0 2px;font-size:12px;color:var(--dsw-alias-label-tertiary);line-height:1.55;background:var(--dsw-alias-bg-layer-1);padding:8px 12px;border-radius:8px;border:1px solid var(--dsw-alias-border-l4)}\n\n';
 
 // src/client/index.jsx
 var import_jsx_runtime = require("react/jsx-runtime");
@@ -353,13 +384,14 @@ function apply(ctx) {
   const section = (id, kind) => ctx.slots.inject("settings.section", () => ctx.slots.register({
     name: "settings.section",
     id,
-    order: kind === "skill" ? 16 : 17,
-    label: () => t(kind === "skill" ? "navSkill" : "navMcp"),
+    order: kind === "skill" ? 16 : kind === "mcp" ? 17 : 18,
+    label: () => t(kind === "skill" ? "navSkill" : kind === "mcp" ? "navMcp" : "navCatalog"),
     locale: namespace,
     inject: () => face
-  }, kind === "skill" ? SkillSection : McpSection));
+  }, kind === "skill" ? SkillSection : kind === "mcp" ? McpSection : CatalogSection));
   section("skill-manager", "skill");
   section("mcp-manager", "mcp");
+  section("skill-catalog", "catalog");
 }
 function SkillSection({ t, useManager, request }) {
   const state = useManager((value) => value);
@@ -1002,5 +1034,152 @@ function AddForm({ kind, t, busy, onSave, onCancel }) {
     ] })
   ] }) });
 }
+function CatalogSection({ t, useManager, request }) {
+  const state = useManager((value) => value);
+  const [query, setQuery] = (0, import_react.useState)("");
+  const [pluginFilter, setPluginFilter] = (0, import_react.useState)("all");
+  const busy = state.loading || state.saving;
+  const catalog = state.catalog ?? { tools: [], groups: [], summary: { total: 0, enabled: 0, disabled: 0, pluginCount: 0 } };
+  const groups = catalog.groups ?? [];
+  const summary = catalog.summary ?? { total: 0, enabled: 0, disabled: 0, pluginCount: 0 };
+  useLiveRefresh(request);
+  const visibleGroups = groups.filter((g) => pluginFilter === "all" || g.id === pluginFilter).map((g) => {
+    const filteredTools = g.tools.filter((tool) => {
+      const text = `${tool.name} ${tool.description} ${g.name}`.toLowerCase();
+      return text.includes(query.toLowerCase());
+    });
+    return { ...g, tools: filteredTools };
+  }).filter((g) => g.tools.length > 0);
+  const handleToggleTool = async (toolName, currentEnabled) => {
+    await request("catalog-set-tool", { tool: toolName, enabled: !currentEnabled });
+  };
+  const handleToggleGroup = async (groupTools, targetEnabled) => {
+    const names = groupTools.filter((t2) => t2.canToggle).map((t2) => t2.name);
+    if (names.length === 0) return;
+    await request("catalog-set-group", { tools: names, enabled: targetEnabled });
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("section", { className: "dsh-ext dsh-catalog-section", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("header", { className: "dsh-ext-heading", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h2", { children: t("navCatalog") }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { children: t("catalogIntro") })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "dsh-ext-heading-actions", children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { type: "button", disabled: busy, onClick: () => request("list"), children: t("refresh") }) })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)(PageState, { state, t }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dsh-skill-stats", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: summary.total }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { children: t("stat_catalogTotal") })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { style: { color: "var(--dsw-alias-brand-primary, #3182ce)" }, children: summary.enabled }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { children: t("stat_catalogEnabled") })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { style: { color: summary.disabled > 0 ? "#e05252" : "inherit" }, children: summary.disabled }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { children: t("stat_catalogDisabled") })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: summary.pluginCount }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { children: t("stat_catalogPlugins") })
+      ] })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("label", { className: "dsh-skill-search", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dsh-visually-hidden", children: t("search") }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+        "input",
+        {
+          type: "search",
+          value: query,
+          onChange: (event) => setQuery(event.target.value),
+          placeholder: t("catalogSearchPlaceholder")
+        }
+      )
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "dsh-skill-filters", style: { gridTemplateColumns: "1fr" }, children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("label", { children: [
+      t("filterPlugin"),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("select", { value: pluginFilter, onChange: (event) => setPluginFilter(event.target.value), children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("option", { value: "all", children: t("filterAllPlugins") }),
+        groups.map((g) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("option", { value: g.id, children: [
+          g.name,
+          " (",
+          g.total,
+          ")"
+        ] }, g.id))
+      ] })
+    ] }) }),
+    visibleGroups.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dsh-ext-card dsh-ext-empty", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: t("noCatalogResults") }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { children: t("noCatalogResultsHint") })
+    ] }) : visibleGroups.map((group) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("details", { className: "dsh-catalog-group-card", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("summary", { className: "dsh-catalog-group-header", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dsh-catalog-group-title", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h4", { children: group.name }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { className: "dsh-ext-count", children: [
+            group.enabledCount,
+            " / ",
+            group.total,
+            " \u53EF\u7528"
+          ] })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dsh-catalog-group-actions", onClick: (event) => event.stopPropagation(), children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+            "button",
+            {
+              type: "button",
+              disabled: busy,
+              onClick: (event) => {
+                event.stopPropagation();
+                handleToggleGroup(group.tools, true);
+              },
+              children: t("enableAll")
+            }
+          ),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+            "button",
+            {
+              type: "button",
+              disabled: busy,
+              onClick: (event) => {
+                event.stopPropagation();
+                handleToggleGroup(group.tools, false);
+              },
+              children: t("disableAll")
+            }
+          )
+        ] })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "dsh-catalog-tool-list", children: group.tools.map((tool) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dsh-catalog-tool-item", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dsh-catalog-tool-info", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dsh-catalog-tool-header", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("code", { children: tool.name }),
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: `dsh-skill-badge ${tool.enabled ? "dsh-skill-badge-group" : "dsh-skill-badge-invalid"}`, children: tool.enabled ? t("enabled") : t("disabled") }),
+            !tool.canToggle && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dsh-skill-badge", children: t("toolProtected") })
+          ] }),
+          tool.description && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("details", { className: "dsh-catalog-tool-details", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("summary", { children: t("details") }),
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { children: tool.description })
+          ] })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "dsh-catalog-switch-wrap", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dsh-catalog-switch-label", style: { color: tool.enabled ? "var(--dsw-alias-label-primary)" : "var(--dsw-alias-label-tertiary)" }, children: t(tool.enabled ? "enable" : "disable") }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("label", { className: "dsh-catalog-switch", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+              "input",
+              {
+                type: "checkbox",
+                checked: tool.enabled,
+                disabled: busy || !tool.canToggle,
+                onChange: () => handleToggleTool(tool.name, tool.enabled)
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "dsh-catalog-slider" })
+          ] })
+        ] })
+      ] }, tool.name)) })
+    ] }, group.id))
+  ] });
+}
 
 return module.exports;}});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@civilization/deepseek-harness-skill-mcp",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Skill path and MCP server management for DeepSeek Harness Web",
   "license": "Apache-2.0",
   "repository": {

package/src/catalog.js

@@ -0,0 +1,154 @@
+/** Plugin tool discovery, classification, and execution takeover management. */
+
+/** Builtin core tools shipped with DSH runtime. */
+const builtinToolNames = new Set([
+  'read_file', 'write_file', 'edit_file', 'apply_diff',
+  'run_command', 'bash', 'exec',
+  'grep_search', 'file_search', 'find_by_name', 'list_dir', 'view_file',
+  'schedule', 'manage_task',
+  'ask_question', 'generate_image', 'read_url_content', 'browser_subagent',
+  'run_code',
+])
+
+/**
+ * Infer the plugin or category group for a given tool name.
+ * @param {string} toolName
+ * @returns {{ id: string, name: string, isPlugin: boolean }}
+ */
+export function classifyTool(toolName) {
+  if (toolName.startsWith('mcp__')) {
+    const parts = toolName.split('__')
+    const serverName = parts[1] || 'unknown'
+    return {
+      id: `mcp-${serverName}`,
+      name: `MCP 服务: ${serverName}`,
+      isPlugin: true,
+    }
+  }
+
+  if (toolName.startsWith('session_') && toolName.includes('autotask')) {
+    return {
+      id: 'dsh-autotask',
+      name: '自动任务巡检 (dsh-autotask)',
+      isPlugin: true,
+    }
+  }
+
+  if (toolName.startsWith('drawio_') || toolName.startsWith('drawio-')) {
+    return {
+      id: 'dsh-drawio',
+      name: 'Draw.io 架构绘图 (dsh-drawio)',
+      isPlugin: true,
+    }
+  }
+
+  if (toolName.startsWith('browser_') || toolName.startsWith('playwright_')) {
+    return {
+      id: 'dsh-playwright',
+      name: '浏览器自动化 (dsh-playwright)',
+      isPlugin: true,
+    }
+  }
+
+  if (toolName.startsWith('workspace_')) {
+    return {
+      id: 'dsh-workspace-files',
+      name: '工作区文件管理 (dsh-workspace-files)',
+      isPlugin: true,
+    }
+  }
+
+  if (toolName.startsWith('process_')) {
+    return {
+      id: 'dsh-process-manager',
+      name: '系统进程管理 (dsh-process-manager)',
+      isPlugin: true,
+    }
+  }
+
+  if (toolName.startsWith('extensions_')) {
+    return {
+      id: 'dsh-skill-mcp',
+      name: '扩展与工具管理 (dsh-skill-mcp)',
+      isPlugin: true,
+    }
+  }
+
+  if (builtinToolNames.has(toolName)) {
+    return {
+      id: 'builtin',
+      name: '系统核心工具 (Builtin)',
+      isPlugin: false,
+    }
+  }
+
+  // Fallback for custom user plugins
+  const prefix = toolName.split('_')[0]
+  return {
+    id: prefix ? `plugin-${prefix}` : 'other-plugins',
+    name: prefix ? `扩展插件 (${prefix})` : '其他插件工具',
+    isPlugin: true,
+  }
+}
+
+/**
+ * Describe all registered tools and aggregate them by category/plugin.
+ * @param {import('@deepseek-ai/cordis').Context} ctx
+ * @param {{ disabledTools?: string[] }} catalogConfig
+ */
+export function buildToolCatalog(ctx, catalogConfig = {}) {
+  const disabledSet = new Set(catalogConfig.disabledTools || [])
+  const schemas = ctx.tools ? ctx.tools.schemas() : []
+
+  const tools = schemas.map(schema => {
+    const classification = classifyTool(schema.name)
+    const enabled = !disabledSet.has(schema.name)
+    return {
+      name: schema.name,
+      description: schema.description || '',
+      parameters: schema.parameters || {},
+      groupId: classification.id,
+      groupName: classification.name,
+      isPlugin: classification.isPlugin,
+      enabled,
+      canToggle: schema.name !== 'run_code' && !schema.name.startsWith('extensions_catalog_'),
+    }
+  })
+
+  // Group by category
+  const groupsMap = new Map()
+  for (const tool of tools) {
+    if (!groupsMap.has(tool.groupId)) {
+      groupsMap.set(tool.groupId, {
+        id: tool.groupId,
+        name: tool.groupName,
+        isPlugin: tool.isPlugin,
+        tools: [],
+        total: 0,
+        enabledCount: 0,
+      })
+    }
+    const group = groupsMap.get(tool.groupId)
+    group.tools.push(tool)
+    group.total++
+    if (tool.enabled) group.enabledCount++
+  }
+
+  const groups = Array.from(groupsMap.values()).sort((a, b) => {
+    if (a.isPlugin && !b.isPlugin) return -1
+    if (!a.isPlugin && b.isPlugin) return 1
+    return a.name.localeCompare(b.name)
+  })
+
+  return {
+    tools,
+    groups,
+    disabledTools: Array.from(disabledSet),
+    summary: {
+      total: tools.length,
+      enabled: tools.filter(t => t.enabled).length,
+      disabled: tools.filter(t => !t.enabled).length,
+      pluginCount: groups.filter(g => g.isPlugin).length,
+    },
+  }
+}

package/src/client/index.jsx

@@ -31,14 +31,15 @@ export function apply(ctx) {
     return ok
   }
   const face = { hooks: { manager: controller }, request }
-  // The two sections share one controller and managed patch; each kind gets its own settings page.
+  // The three sections share one controller and managed patch; each kind gets its own settings page.
   const section = (id, kind) => ctx.slots.inject('settings.section', () => ctx.slots.register({
-    name: 'settings.section', id, order: kind === 'skill' ? 16 : 17,
-    label: () => t(kind === 'skill' ? 'navSkill' : 'navMcp'), locale: namespace,
+    name: 'settings.section', id, order: kind === 'skill' ? 16 : kind === 'mcp' ? 17 : 18,
+    label: () => t(kind === 'skill' ? 'navSkill' : kind === 'mcp' ? 'navMcp' : 'navCatalog'), locale: namespace,
     inject: () => face,
-  }, kind === 'skill' ? SkillSection : McpSection))
+  }, kind === 'skill' ? SkillSection : kind === 'mcp' ? McpSection : CatalogSection))
   section('skill-manager', 'skill')
   section('mcp-manager', 'mcp')
+  section('skill-catalog', 'catalog')
 }
 
 export function SkillSection({ t, useManager, request }) {
@@ -387,3 +388,147 @@ function AddForm({ kind, t, busy, onSave, onCancel }) {
     <div className="dsh-ext-actions"><button type="button" onClick={onCancel}>{t('cancel')}</button><button type="submit">{t(busy ? 'saving' : 'save')}</button></div>
   </fieldset></form>
 }
+
+export function CatalogSection({ t, useManager, request }) {
+  const state = useManager(value => value)
+  const [query, setQuery] = useState('')
+  const [pluginFilter, setPluginFilter] = useState('all')
+  const busy = state.loading || state.saving
+  const catalog = state.catalog ?? { tools: [], groups: [], summary: { total: 0, enabled: 0, disabled: 0, pluginCount: 0 } }
+  const groups = catalog.groups ?? []
+  const summary = catalog.summary ?? { total: 0, enabled: 0, disabled: 0, pluginCount: 0 }
+
+  useLiveRefresh(request)
+
+  const visibleGroups = groups
+    .filter(g => pluginFilter === 'all' || g.id === pluginFilter)
+    .map(g => {
+      const filteredTools = g.tools.filter(tool => {
+        const text = `${tool.name} ${tool.description} ${g.name}`.toLowerCase()
+        return text.includes(query.toLowerCase())
+      })
+      return { ...g, tools: filteredTools }
+    })
+    .filter(g => g.tools.length > 0)
+
+  const handleToggleTool = async (toolName, currentEnabled) => {
+    await request('catalog-set-tool', { tool: toolName, enabled: !currentEnabled })
+  }
+
+  const handleToggleGroup = async (groupTools, targetEnabled) => {
+    const names = groupTools.filter(t => t.canToggle).map(t => t.name)
+    if (names.length === 0) return
+    await request('catalog-set-group', { tools: names, enabled: targetEnabled })
+  }
+
+  return <section className="dsh-ext dsh-catalog-section">
+    <header className="dsh-ext-heading">
+      <div>
+        <h2>{t('navCatalog')}</h2>
+        <p>{t('catalogIntro')}</p>
+      </div>
+      <div className="dsh-ext-heading-actions">
+        <button type="button" disabled={busy} onClick={() => request('list')}>{t('refresh')}</button>
+      </div>
+    </header>
+    <PageState state={state} t={t} />
+
+    <div className="dsh-skill-stats">
+      <div><strong>{summary.total}</strong><span>{t('stat_catalogTotal')}</span></div>
+      <div><strong style={{ color: 'var(--dsw-alias-brand-primary, #3182ce)' }}>{summary.enabled}</strong><span>{t('stat_catalogEnabled')}</span></div>
+      <div><strong style={{ color: summary.disabled > 0 ? '#e05252' : 'inherit' }}>{summary.disabled}</strong><span>{t('stat_catalogDisabled')}</span></div>
+      <div><strong>{summary.pluginCount}</strong><span>{t('stat_catalogPlugins')}</span></div>
+    </div>
+
+    <label className="dsh-skill-search">
+      <span className="dsh-visually-hidden">{t('search')}</span>
+      <input
+        type="search"
+        value={query}
+        onChange={event => setQuery(event.target.value)}
+        placeholder={t('catalogSearchPlaceholder')}
+      />
+    </label>
+
+    <div className="dsh-skill-filters" style={{ gridTemplateColumns: '1fr' }}>
+      <label>{t('filterPlugin')}<select value={pluginFilter} onChange={event => setPluginFilter(event.target.value)}>
+        <option value="all">{t('filterAllPlugins')}</option>
+        {groups.map(g => <option key={g.id} value={g.id}>{g.name} ({g.total})</option>)}
+      </select></label>
+    </div>
+
+    {visibleGroups.length === 0 ? (
+      <div className="dsh-ext-card dsh-ext-empty">
+        <strong>{t('noCatalogResults')}</strong>
+        <p>{t('noCatalogResultsHint')}</p>
+      </div>
+    ) : (
+      visibleGroups.map(group => (
+        <details key={group.id} className="dsh-catalog-group-card">
+          <summary className="dsh-catalog-group-header">
+            <div className="dsh-catalog-group-title">
+              <h4>{group.name}</h4>
+              <span className="dsh-ext-count">{group.enabledCount} / {group.total} 可用</span>
+            </div>
+            <div className="dsh-catalog-group-actions" onClick={event => event.stopPropagation()}>
+              <button
+                type="button"
+                disabled={busy}
+                onClick={event => {
+                  event.stopPropagation()
+                  handleToggleGroup(group.tools, true)
+                }}
+              >{t('enableAll')}</button>
+              <button
+                type="button"
+                disabled={busy}
+                onClick={event => {
+                  event.stopPropagation()
+                  handleToggleGroup(group.tools, false)
+                }}
+              >{t('disableAll')}</button>
+            </div>
+          </summary>
+          <div className="dsh-catalog-tool-list">
+            {group.tools.map(tool => (
+              <div key={tool.name} className="dsh-catalog-tool-item">
+                <div className="dsh-catalog-tool-info">
+                  <div className="dsh-catalog-tool-header">
+                    <code>{tool.name}</code>
+                    <span className={`dsh-skill-badge ${tool.enabled ? 'dsh-skill-badge-group' : 'dsh-skill-badge-invalid'}`}>
+                      {tool.enabled ? t('enabled') : t('disabled')}
+                    </span>
+                    {!tool.canToggle && (
+                      <span className="dsh-skill-badge">{t('toolProtected')}</span>
+                    )}
+                  </div>
+                  {tool.description && (
+                    <details className="dsh-catalog-tool-details">
+                      <summary>{t('details')}</summary>
+                      <p>{tool.description}</p>
+                    </details>
+                  )}
+                </div>
+                <div className="dsh-catalog-switch-wrap">
+                  <span className="dsh-catalog-switch-label" style={{ color: tool.enabled ? 'var(--dsw-alias-label-primary)' : 'var(--dsw-alias-label-tertiary)' }}>
+                    {t(tool.enabled ? 'enable' : 'disable')}
+                  </span>
+                  <label className="dsh-catalog-switch">
+                    <input
+                      type="checkbox"
+                      checked={tool.enabled}
+                      disabled={busy || !tool.canToggle}
+                      onChange={() => handleToggleTool(tool.name, tool.enabled)}
+                    />
+                    <span className="dsh-catalog-slider" />
+                  </label>
+                </div>
+              </div>
+            ))}
+          </div>
+        </details>
+      ))
+    )}
+  </section>
+}
+

package/src/client/locales.js

@@ -36,6 +36,21 @@ export const zh = {
   'issue_invalid-frontmatter': 'frontmatter 必须是对象', 'issue_invalid-name': 'name 必须使用 kebab-case',
   'issue_missing-description': '缺少 description', 'issue_invalid-invocation': '调用权限字段不是有效布尔值',
   issue_unreadable: '文件无法读取', 'issue_source-unreadable': 'Skill 路径无法读取',
+  navCatalog: '工具管理',
+  catalogIntro: '管理系统中已安装各插件与服务的工具，可自由选择启用或禁用。被禁用的工具将被安全拦截。',
+  catalogSearchPlaceholder: '搜索工具名、描述或所属插件…',
+  stat_catalogTotal: '总工具数',
+  stat_catalogEnabled: '已启用',
+  stat_catalogDisabled: '已禁用',
+  stat_catalogPlugins: '插件/服务',
+  enableAll: '全选启用',
+  disableAll: '全部禁用',
+  filterPlugin: '插件分组',
+  filterAllPlugins: '全部插件',
+  noCatalogResults: '未找到匹配的工具',
+  noCatalogResultsHint: '请尝试修改搜索词或选择其他插件分组。',
+  toolProtected: '核心保留',
+  toolTakeoverHint: '此工具受 skill-catalog 统一管理。',
 }
 export const en = {
   navSkill: 'Skills', navMcp: 'MCP',
@@ -74,4 +89,19 @@ export const en = {
   'issue_invalid-frontmatter': 'Frontmatter must be an object', 'issue_invalid-name': 'name must use kebab-case',
   'issue_missing-description': 'Missing description', 'issue_invalid-invocation': 'Invocation field is not a valid boolean',
   issue_unreadable: 'File cannot be read', 'issue_source-unreadable': 'Skill path cannot be read',
+  navCatalog: 'Tools',
+  catalogIntro: 'Manage tools from installed plugins and services. Enable or disable them selectively with safety guards.',
+  catalogSearchPlaceholder: 'Search tool name, description or plugin…',
+  stat_catalogTotal: 'Total Tools',
+  stat_catalogEnabled: 'Enabled',
+  stat_catalogDisabled: 'Disabled',
+  stat_catalogPlugins: 'Plugins/Services',
+  enableAll: 'Enable All',
+  disableAll: 'Disable All',
+  filterPlugin: 'Plugin Group',
+  filterAllPlugins: 'All Plugins',
+  noCatalogResults: 'No matching tools found',
+  noCatalogResultsHint: 'Try adjusting your search terms or filter.',
+  toolProtected: 'Protected',
+  toolTakeoverHint: 'This tool is managed under skill-catalog.',
 }

package/src/client/styles.css

@@ -34,3 +34,39 @@
 .dsh-skill-invocation{display:flex;flex-direction:column;gap:7px}.dsh-skill-invocation label,.dsh-skill-create-flags label{display:flex;flex-direction:row;align-items:center;gap:5px}.dsh-ext input[type=checkbox]{width:auto;min-width:auto}.dsh-skill-detail ul,.dsh-skill-detail li{display:block!important;margin:0;padding:0!important;border:0!important}.dsh-skill-resources{display:flex!important;flex-wrap:wrap!important;gap:5px}.dsh-skill-resources li{padding:3px 6px!important;border-radius:5px!important;background:var(--dsw-alias-bg-layer-3)!important}
 .dsh-ext-span{grid-column:1/-1}.dsh-skill-create-flags{display:flex;flex-direction:column;gap:7px;font-size:13px}.dsh-skill-create-flags>span{margin-bottom:1px}.dsh-skill-source>.dsh-ext-notice{margin:12px 18px}.dsh-skill-source>.dsh-ext-empty{padding:18px}
 @media(max-width:600px){.dsh-ext fieldset,.dsh-skill-detail,.dsh-skill-filters{grid-template-columns:1fr}.dsh-ext-heading{align-items:flex-start;flex-direction:column}.dsh-ext-heading-actions{flex-wrap:wrap}.dsh-ext-card>header{padding:14px}.dsh-ext li{padding:14px}.dsh-skill-stats{grid-template-columns:repeat(2,1fr)}.dsh-skill-group-editor{align-items:stretch;flex-direction:column}}
+
+/* Skill Catalog Takeover Styles */
+.dsh-catalog-section{margin-top:14px}
+.dsh-catalog-header-actions{display:flex;align-items:center;gap:8px}
+.dsh-catalog-group-card{margin-top:16px;border:1px solid var(--dsw-alias-border-l4);border-radius:14px;background:var(--dsw-alias-bg-layer-2);overflow:hidden}
+.dsh-catalog-group-header{display:flex;justify-content:space-between;align-items:center;padding:14px 18px;background:color-mix(in srgb,var(--dsw-alias-bg-layer-3) 50%,transparent);border-bottom:1px solid var(--dsw-alias-border-l4);cursor:pointer;user-select:none}
+.dsh-catalog-group-header::-webkit-details-marker{display:none}
+.dsh-catalog-group-header::marker{content:""}
+.dsh-catalog-group-card:not([open]) .dsh-catalog-group-header{border-bottom:0}
+.dsh-catalog-group-title{display:flex;align-items:center;gap:10px}
+.dsh-catalog-group-title::before{content:"▶";display:inline-block;font-size:11px;color:var(--dsw-alias-label-tertiary);transition:transform .2s ease}
+.dsh-catalog-group-card[open] .dsh-catalog-group-title::before{transform:rotate(90deg)}
+.dsh-catalog-group-title h4{margin:0;font-size:14px;font-weight:600}
+.dsh-catalog-group-actions{display:flex;align-items:center;gap:6px}
+.dsh-catalog-group-actions button{padding:4px 10px;font-size:12px;border-radius:7px}
+.dsh-catalog-tool-item{display:flex;justify-content:space-between;align-items:center;gap:16px;padding:14px 18px;border-bottom:1px solid var(--dsw-alias-border-l4);transition:background .15s ease}
+.dsh-catalog-tool-item:last-child{border-bottom:0}
+.dsh-catalog-tool-item:hover{background:color-mix(in srgb,var(--dsw-alias-bg-layer-3) 40%,transparent)}
+.dsh-catalog-tool-info{display:flex;flex-direction:column;gap:5px;min-width:0;flex:1}
+.dsh-catalog-tool-header{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
+.dsh-catalog-tool-header code{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;font-size:13px;font-weight:600;color:var(--dsw-alias-brand-primary)}
+.dsh-catalog-tool-info p{margin:0;font-size:12px;color:var(--dsw-alias-label-secondary);line-height:1.5}
+.dsh-catalog-switch-wrap{display:flex;align-items:center;gap:10px;flex-shrink:0}
+.dsh-catalog-switch-label{font-size:12px;font-weight:500}
+.dsh-catalog-switch{position:relative;display:inline-block;width:40px;height:22px;cursor:pointer}
+.dsh-catalog-switch input{opacity:0;width:0;height:0;position:absolute}
+.dsh-catalog-slider{position:absolute;cursor:pointer;inset:0;background:var(--dsw-alias-bg-layer-4,#3b3b3b);border:1px solid var(--dsw-alias-border-l4);border-radius:22px;transition:.2s}
+.dsh-catalog-slider:before{position:absolute;content:"";height:16px;width:16px;left:2px;bottom:2px;background:#fff;border-radius:50%;transition:.2s}
+.dsh-catalog-switch input:checked + .dsh-catalog-slider{background:var(--dsw-alias-brand-primary,#3182ce);border-color:var(--dsw-alias-brand-primary,#3182ce)}
+.dsh-catalog-switch input:checked + .dsh-catalog-slider:before{transform:translateX(18px)}
+.dsh-catalog-switch input:disabled + .dsh-catalog-slider{opacity:.4;cursor:not-allowed}
+.dsh-catalog-tool-details{margin-top:4px;width:100%}
+.dsh-catalog-tool-details summary{width:max-content;cursor:pointer;font-size:12px;color:var(--dsw-alias-label-secondary);user-select:none;transition:color .15s}
+.dsh-catalog-tool-details summary:hover{color:var(--dsw-alias-label-primary)}
+.dsh-catalog-tool-details p{margin:6px 0 2px;font-size:12px;color:var(--dsw-alias-label-tertiary);line-height:1.55;background:var(--dsw-alias-bg-layer-1);padding:8px 12px;border-radius:8px;border:1px solid var(--dsw-alias-border-l4)}
+

package/src/index.js

@@ -6,10 +6,17 @@ import { readFile } from 'node:fs/promises'
 import { defineTool } from '@deepseek-ai/dsh-tools'
 import { ExtensionStore } from './store.js'
 import { createWebHandler, createWebHttpHandler } from './web.js'
+import { buildToolCatalog } from './catalog.js'
 
 export const name = 'extension-manager'
 export const inject = ['tools', 'skills']
-export const Config = Schema.object({ patchPath: Schema.string().default('') })
+export const Config = Schema.object({
+  patchPath: Schema.string().default(''),
+  'skill-catalog': Schema.object({
+    disabledTools: Schema.array(Schema.string()).default([]),
+    enabledTools: Schema.array(Schema.string()).default([]),
+  }).description('插件工具目录接管配置，控制各插件工具的启用与禁用').default({}),
+})
 
 const string = { type: 'string', required: true }
 const output = {
@@ -33,11 +40,44 @@ export async function apply(ctx, config) {
   } catch {}
 
   const home = process.env.DSH_HOME || join(homedir(), '.dsh')
-  const store = new ExtensionStore(config.patchPath || join(home, 'profiles', 'web', 'cordis.patch.yml'))
+  const store = new ExtensionStore(config?.patchPath || join(home, 'profiles', 'web', 'cordis.patch.yml'))
   await store.ensureNonFatalMcpStartup()
 
-  const webHandler = createWebHandler(store, ctx)
-  const httpHandler = createWebHttpHandler(store, ctx)
+  const staticCatalog = config?.['skill-catalog'] || {}
+  let cachedDisabled = new Set(staticCatalog.disabledTools || [])
+
+  const refreshCatalogCache = async () => {
+    try {
+      const persisted = await store.readCatalog(staticCatalog)
+      cachedDisabled = new Set(persisted.disabledTools || [])
+    } catch {}
+  }
+  void refreshCatalogCache()
+
+  // Monotonic guard: 单调拒绝被 skill-catalog 禁用的工具执行
+  ctx.tools.guard(exec => {
+    if (cachedDisabled.has(exec.name)) {
+      return `【Skill Catalog】工具 "${exec.name}" 当前已被禁用。请在设置页面的“工具管理”或配置项中启用后再调用。`
+    }
+  })
+
+  // Waterfall pre-execute 拦截
+  ctx.on('tools/pre-execute', async (exec, next) => {
+    if (cachedDisabled.has(exec.name)) {
+      return {
+        kind: 'deny',
+        reason: `【Skill Catalog】工具 "${exec.name}" 已被配置禁用。`,
+      }
+    }
+    return next()
+  })
+
+  const onCatalogChange = (newDisabledList) => {
+    cachedDisabled = new Set(newDisabledList)
+  }
+
+  const webHandler = createWebHandler(store, ctx, { onCatalogChange, staticCatalog })
+  const httpHandler = createWebHttpHandler(store, ctx, { onCatalogChange, staticCatalog })
 
   ctx.inject(['connection'], web => {
     web.connection.rpc.handle('/extensions', webHandler)
@@ -89,4 +129,17 @@ export async function apply(ctx, config) {
     skills: await ctx.skills.snapshot({ cwd: args.cwd, scope: exec.agent, signal: exec.signal }),
     mcpTools: ctx.tools.schemas(exec.agent).map(tool => tool.name).filter(name => name.startsWith('mcp__')),
   }))
+
+  register('extensions_catalog_list', 'List all detected tools, plugin groups, and their enabled status under skill-catalog takeover.', {}, async () => {
+    await refreshCatalogCache()
+    return buildToolCatalog(ctx, { disabledTools: Array.from(cachedDisabled) })
+  })
+  register('extensions_catalog_set', 'Enable or disable a specific tool under skill-catalog takeover.', {
+    tool: string, enabled: { type: 'boolean', required: true },
+  }, async (args, exec) => {
+    const updated = await store.setToolEnabled(args.tool, args.enabled, exec.signal)
+    cachedDisabled = new Set(updated.disabledTools || [])
+    return { tool: args.tool, enabled: args.enabled, catalog: updated }
+  })
 }
+

package/src/store.js

@@ -1,5 +1,5 @@
 /** Owns a marked block inside a profile Cordis patch while retaining legacy JSON stores. */
-import { open, readFile, rename, unlink, stat } from 'node:fs/promises'
+import { open, readFile, writeFile, rename, unlink, stat } from 'node:fs/promises'
 import { basename, isAbsolute, resolve, win32 } from 'node:path'
 import { randomUUID, createHash } from 'node:crypto'
 import { Config as McpConfig } from '@deepseek-ai/dsh-mcp-client'
@@ -255,4 +255,65 @@ export class ExtensionStore {
       rows.splice(index, 1)
     }, signal, expectedRevision)
   }
+
+  catalogPath() {
+    return `${this.path}.catalog.json`
+  }
+
+  async readCatalog(staticConfig = {}) {
+    let persisted = { disabledTools: [] }
+    try {
+      const content = await readFile(this.catalogPath(), 'utf8')
+      const parsed = JSON.parse(content)
+      if (parsed && typeof parsed === 'object') {
+        persisted = {
+          disabledTools: Array.isArray(parsed.disabledTools) ? parsed.disabledTools : [],
+        }
+      }
+    } catch {}
+
+    const staticDisabled = Array.isArray(staticConfig?.disabledTools)
+      ? staticConfig.disabledTools
+      : []
+
+    const merged = Array.from(new Set([...persisted.disabledTools, ...staticDisabled]))
+    return { disabledTools: merged }
+  }
+
+  async updateCatalog(updater, signal) {
+    signal?.throwIfAborted()
+    const current = await this.readCatalog()
+    const nextVal = typeof updater === 'function' ? await updater(current) : updater
+    const nextConfig = {
+      disabledTools: Array.isArray(nextVal?.disabledTools) ? nextVal.disabledTools : [],
+    }
+    const temp = `${this.catalogPath()}.${randomUUID()}.tmp`
+    await writeFile(temp, JSON.stringify(nextConfig, null, 2), 'utf8')
+    signal?.throwIfAborted()
+    await rename(temp, this.catalogPath())
+    return nextConfig
+  }
+
+  async setToolEnabled(toolName, enabled, signal) {
+    return this.updateCatalog(current => {
+      const set = new Set(current.disabledTools)
+      if (enabled) {
+        set.delete(toolName)
+      } else {
+        set.add(toolName)
+      }
+      return { disabledTools: Array.from(set) }
+    }, signal)
+  }
+
+  async setGroupEnabled(toolNames, enabled, signal) {
+    return this.updateCatalog(current => {
+      const set = new Set(current.disabledTools)
+      for (const name of toolNames) {
+        if (enabled) set.delete(name)
+        else set.add(name)
+      }
+      return { disabledTools: Array.from(set) }
+    }, signal)
+  }
 }

package/src/web.js

@@ -2,6 +2,7 @@
 import Schema from '@deepseek-ai/schemastery'
 import { revisionOf } from './store.js'
 import { createSkill, deleteSkill, inspectSkills, setSkillGroup, setSkillInvocation, updateSkill } from './skills.js'
+import { buildToolCatalog } from './catalog.js'
 
 const text = Schema.string().required()
 const schemas = {
@@ -28,16 +29,23 @@ const schemas = {
     modelInvocable: Schema.boolean().required(), userInvocable: Schema.boolean().required(), revision: text,
   }),
   'delete-skill': Schema.object({ sourceId: text, relativePath: text, skillRevision: text, revision: text }),
+  'catalog-set-tool': Schema.object({ tool: text, enabled: Schema.boolean().required(), revision: text }),
+  'catalog-set-group': Schema.object({ tools: Schema.array(text).required(), enabled: Schema.boolean().required(), revision: text }),
+  'catalog-update': Schema.object({ disabledTools: Schema.array(text).required(), revision: text }),
 }
 
 /** Return redacted configuration and observed global tool availability. */
-export async function describeExtensions(store, ctx) {
+export async function describeExtensions(store, ctx, options = {}) {
   const rows = await store.read()
-  const toolNames = ctx.tools.schemas().map(tool => tool.name)
+  const toolNames = ctx.tools ? ctx.tools.schemas().map(tool => tool.name) : []
   const inventory = await inspectSkills(rows)
+  const catalogConfig = await store.readCatalog(options.staticCatalog)
+  const catalog = buildToolCatalog(ctx, catalogConfig)
+
   return {
     revision: revisionOf(rows),
     ...inventory,
+    catalog,
     extensions: rows.map(row => ({
       id: row.id,
       kind: row.config.serverName ? 'mcp' : 'skill',
@@ -56,7 +64,7 @@ export async function describeExtensions(store, ctx) {
 }
 
 /** All writes carry the exact revision shown to the user. */
-export function createWebHandler(store, ctx) {
+export function createWebHandler(store, ctx, options = {}) {
   return async (endpoint, payload, signal) => {
     try {
       if (!Object.hasOwn(schemas, endpoint)) throw new Error('Unknown operation.')
@@ -76,6 +84,18 @@ export function createWebHandler(store, ctx) {
       }
       if (endpoint === 'delete-extension') await store.remove(args.id, signal, args.revision)
       if (endpoint === 'enable') await store.setEnabled(args.id, args.enabled, signal, args.revision)
+      if (endpoint === 'catalog-set-tool') {
+        const updated = await store.setToolEnabled(args.tool, args.enabled, signal)
+        options.onCatalogChange?.(updated.disabledTools)
+      }
+      if (endpoint === 'catalog-set-group') {
+        const updated = await store.setGroupEnabled(args.tools, args.enabled, signal)
+        options.onCatalogChange?.(updated.disabledTools)
+      }
+      if (endpoint === 'catalog-update') {
+        const updated = await store.updateCatalog({ disabledTools: args.disabledTools }, signal)
+        options.onCatalogChange?.(updated.disabledTools)
+      }
       if (['create-skill', 'set-skill-invocation', 'set-skill-group', 'update-skill', 'delete-skill'].includes(endpoint)) {
         const rows = await store.read()
         if (revisionOf(rows) !== args.revision) {
@@ -87,7 +107,7 @@ export function createWebHandler(store, ctx) {
         else if (endpoint === 'update-skill') await updateSkill(rows, args)
         else await deleteSkill(rows, args)
       }
-      return { ok: true, value: await describeExtensions(store, ctx) }
+      return { ok: true, value: await describeExtensions(store, ctx, options) }
     } catch (error) {
       return { ok: false, error: {
         code: error.code === 'CONFLICT' ? 'extensions/conflict' : 'extensions/rejected',
@@ -99,8 +119,8 @@ export function createWebHandler(store, ctx) {
 }
 
 /** HTTP server route handler that satisfies DSH WebServer and RPC envelope protocols. */
-export function createWebHttpHandler(store, ctx) {
-  const handler = createWebHandler(store, ctx)
+export function createWebHttpHandler(store, ctx, options = {}) {
+  const handler = createWebHandler(store, ctx, options)
   return async (req, res) => {
     if (req.method === 'OPTIONS') {
       res.writeHead(204, {