@deepseek-ai/dsh-skill-filesystem 0.0.1-rc.3

package/LICENSE

@@ -0,0 +1,28 @@
+BSD 3-Clause License
+
+Copyright (c) 2026, DeepSeek
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its
+   contributors may be used to endorse or promote products derived from
+   this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

package/README.i18n.yaml

@@ -0,0 +1,6 @@
+# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
+# side as of the last confirmed-consistent state. Both languages carry equal authority;
+# after editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write packages/skill/skill-filesystem/README.md
+README.md: 33fb550a9ca804c4f0f380232c2bfd94cc58a67e
+README.zh.md: 4c09111fc2d31bf5467b57f90f65cf68e298da09

package/README.md

@@ -0,0 +1,75 @@
+# @deepseek-ai/dsh-skill-filesystem
+
+English | [中文](README.zh.md)
+
+Local filesystem provider for the `ctx.skills` registry.
+
+This package implements one skill source. It scans local project, custom, and user skill roots, parses `SKILL.md` or flat Markdown skill files, and registers the provider on `ctx.skills`. The registry remains in `@deepseek-ai/dsh-skill`; the durable session catalogs and model-facing loader tool remain in `@deepseek-ai/dsh-tool-skill`.
+
+## Plugin
+
+Requires `ctx.skills` (`inject: ['skills']`).
+
+### Config
+
+| Field | Default | Meaning |
+|---|---|---|
+| `providerName` | `filesystem` | Unique name used to register this provider on `ctx.skills`. |
+| `includeDefaultRoots` | `true` | Include project and user roots around `customSkillDirs`; set false for an isolated custom-root provider. |
+| `dshHome` | `$DSH_HOME` or `~/.dsh` | DeepSeek Harness config root resolved by [`@deepseek-ai/dsh-home-paths`](../../util/home-paths/README.md); scans `skills` under this directory. |
+| `agentsHome` | `$DSH_AGENTS_HOME` or `~/.agents` | Shared agent config root scanned for compatible skills. |
+| `customSkillDirs` | `[]` | Additional local skill roots scanned after project roots and before user roots. |
+| `watch` | `true` | Watch host-local roots and invalidate the local provider when catalog membership or frontmatter may have changed. |
+| `watchUsePolling` | `false` | Use Chokidar polling instead of native events for existing skill roots. |
+| `watchStabilityThresholdMs` | `200` | Stable-write window for Chokidar `add` and `change` events. |
+| `watchPollIntervalMs` | `100` | Chokidar polling/stability interval and missing-path probe interval. |
+| `watchMaxProjects` | `128` | Maximum distinct project roots retained in the watcher LRU. |
+| `watchFollowSymlinks` | `true` | Follow symbolic links while watching existing roots. |
+
+## Discovery
+
+Default roots are resolved in this provider's rank order:
+
+| Rank | Source | Path |
+|---|---|---|
+| 100 | `project-dsh` | `<projectRoot>/.dsh/skills` |
+| 200 | `project-agents` | `<projectRoot>/.agents/skills` |
+| 300 | `custom` | `Config.customSkillDirs` |
+| 400 | `user-dsh` | `<dshHome>/skills` |
+| 500 | `user-agents` | `<agentsHome>/skills` |
+
+The project root is the nearest ancestor containing `.git`; without one, the current cwd is used. The user DSH root skips its `.system` child so system-owned directories are not treated as normal user skills. `includeDefaultRoots: false` omits the project and user rows and the `$DSH_BUNDLED_SKILL_DIR` environment default while retaining explicitly configured custom and bundled roots, allowing several uniquely named isolated providers to see only their own roots. This provider supplies project and user skills; another provider may supply built-in system skills.
+
+When `ctx.fs` is available, discovery lists roots through `ctx.fs.listDir`, reads skill files through `ctx.fs.readText`, and probes `.git` through the filesystem service. Full skill loads forward the lookup abort signal to filesystem metadata and content reads. Without a filesystem service, the provider falls back to abortable Node filesystem I/O so minimal local contexts can still load skills. Confirmed missing paths are valid empty state, malformed or non-text entries warn and skip, and unexpected discovery/read failures make the registry snapshot incomplete rather than replacing a last-good model catalog with a misleading deletion.
+
+## Catalog Change Detection
+
+Existing skill roots are watched with Chokidar. Before opening a native watcher, the provider realpaths the existing root or ancestor and restores the next missing segment; when `watchFollowSymlinks` is false and the root itself is a symbolic link, it preserves that final link so Chokidar can enforce the configured boundary. Discovery and diagnostics retain the configured path, while Windows cannot otherwise mix an 8.3 alias with long-form libuv events. The provider observes direct bundle directory additions/removals, flat Markdown additions/removals, and direct `SKILL.md` additions/removals/changes; `change` exists to rediscover catalog frontmatter such as `name` and `description`. Changes below `references`, `scripts`, `assets`, or other bundle resources do not invalidate the catalog. Events delivered in the same microtask batch collapse to one provider invalidation.
+
+A root that does not exist is followed from the nearest existing ancestor one missing path segment at a time. The next segment is probed with `fs.watchFile`; once `.agents`, `skills`, or the configured root appears, observation advances until Chokidar can attach to the real root. Root deletion reverses this process, so deleting and recreating an entire skills directory remains observable. Project-scoped watchers are bounded by `watchMaxProjects`; revisiting an evicted project reattaches observation during discovery.
+
+The first-party filesystem `write` and `edit` tools also synchronously invalidate the provider through `fs/observed` when their target could affect a watched skill entry. This fast path makes the next model step observe its own filesystem mutation without waiting for the host watcher. External IDE, Git, shell, and process changes rely on Chokidar or the missing-path probe. Existing-root watchers remain persistent until effect teardown so Chokidar owns asynchronous native error events; startup/runtime watcher failures are logged and retried. Discovery still scans readable roots and returns their candidates for direct loading, but marks the observation incomplete so it is not cached or published as an authoritative model catalog. Effect teardown closes every watcher and contains late callbacks.
+
+## Skill Format
+
+Skills can be single-level directory bundles (`<name>/SKILL.md`) or flat Markdown files (`<name>.md`). Nested `**/SKILL.md` discovery is deliberately excluded. Frontmatter is parsed as an open YAML object with the `yaml` package; this provider interprets required `name` and `description`, plus optional `whenToUse`, `metadata`, `disable-model-invocation`, and `user-invocable`. Names must be kebab-case.
+
+The two invocation fields accept YAML booleans and the case-insensitive forms `true`/`false`, `yes`/`no`, `on`/`off`, and `1`/`0`. `disable-model-invocation: true` excludes the skill from model-facing catalogs and loaders; `user-invocable: false` excludes it from human-facing commands. Each omitted field defaults to permitting its surface, and the provider always emits both positive internal policy values, including when both keys are absent. A rejected camel-case spelling or a non-boolean invocation value drops the entire skill from discovery with a warning instead of discarding only that field or falling back to a permissive default. Invocation policy fails closed because ignoring invalid data could expose a skill on a disabled surface; wrong-typed optional `whenToUse` and `metadata` values are omitted because neither currently grants invocation.
+
+The catalog and body have separate lifecycles. Discovery parses frontmatter to produce the summary. Every `skill(name)` load rereads and reparses the current file, so body edits need no hash, revision, cache invalidation, or proactive model notification. A frontmatter rename between discovery and loading rejects the stale name and invalidates the provider; the next catalog observation publishes the new name.
+
+## Model Experience
+
+Indirectly, through `dsh-tool-skill`, which renders this provider's invocable names and capped descriptions into the initial or replacement catalog and a selected current instruction body plus resource-base guidance into retained tool history while paths, provider ranks, and disabled skills remain hidden.
+
+#### KV Cache effect
+
+Watcher invalidation can cause the named consumer to append a replacement catalog to the existing request history. Body-only edits leave the catalog digest unchanged.
+
+## Known Limitations and Deferred Work
+
+- **Discovery is one level deep** — only `<root>/<name>/SKILL.md` and `<root>/<name>.md` are recognized; nested skill trees and package manifests are ignored.
+- **Project scope is the nearest `.git` ancestor** — workspaces without that marker fall back to the supplied cwd, with no alternate project-root marker or monorepo subproject selection.
+- **Malformed entries disappear with a warning** — the model catalog receives no per-skill diagnostic and cannot distinguish an absent skill from an invalid one; unexpected I/O failures preserve the last-good catalog instead.
+- **Missing-root observation polls one path segment** — roots absent at startup use `fs.watchFile` at `watchPollIntervalMs` until Chokidar can attach, trading bounded detection latency for reliable creation detection across IDE, Git, and shell workflows.
+- **No body revision protocol** — a loaded body is ordinary retained tool history; later file edits affect later calls but neither rewrite old results nor announce that the body changed.

package/README.zh.md

@@ -0,0 +1,75 @@
+# @deepseek-ai/dsh-skill-filesystem
+
+[English](README.md) | 中文
+
+`ctx.skills` 注册表的本地文件系统提供方。
+
+该包实现一个 skill（技能）来源。它扫描本地项目、自定义和用户 skill 根目录，解析 `SKILL.md` 或平铺 Markdown skill 文件，并将提供方注册到 `ctx.skills`。注册表仍位于 `@deepseek-ai/dsh-skill`；持久化会话目录和面向模型的 loader 工具仍位于 `@deepseek-ai/dsh-tool-skill`。
+
+## 插件
+
+需要 `ctx.skills`（`inject: ['skills']`）。
+
+### 配置
+
+| 字段 | 默认值 | 含义 |
+|---|---|---|
+| `providerName` | `filesystem` | 在 `ctx.skills` 上注册该提供方时使用的唯一名称。 |
+| `includeDefaultRoots` | `true` | 在 `customSkillDirs` 周围包含项目根和用户根；设为 false 时仅使用隔离的自定义根。 |
+| `dshHome` | `$DSH_HOME` 或 `~/.dsh` | 由 [`@deepseek-ai/dsh-home-paths`](../../util/home-paths/README.md) 解析的 DeepSeek Harness 配置根目录；扫描该目录下的 `skills`。 |
+| `agentsHome` | `$DSH_AGENTS_HOME` 或 `~/.agents` | 为兼容 skill 扫描的共享 agent（智能体）配置根目录。 |
+| `customSkillDirs` | `[]` | 在项目根目录之后、用户根目录之前扫描的其他本地 skill 根目录。 |
+| `watch` | `true` | 监视宿主本地根，并在目录成员或 frontmatter 可能发生变化时使本地提供方失效。 |
+| `watchUsePolling` | `false` | 对现有 skill 根使用 Chokidar 轮询，而不是原生事件。 |
+| `watchStabilityThresholdMs` | `200` | Chokidar `add` 和 `change` 事件的稳定写入窗口。 |
+| `watchPollIntervalMs` | `100` | Chokidar 轮询／稳定性间隔和缺失路径探测间隔。 |
+| `watchMaxProjects` | `128` | watcher LRU 中保留的不同项目根数量上限。 |
+| `watchFollowSymlinks` | `true` | 监视现有根时跟随符号链接。 |
+
+## 发现
+
+默认根按该提供方的 rank 顺序解析：
+
+| Rank | 来源 | 路径 |
+|---|---|---|
+| 100 | `project-dsh` | `<projectRoot>/.dsh/skills` |
+| 200 | `project-agents` | `<projectRoot>/.agents/skills` |
+| 300 | `custom` | `Config.customSkillDirs` |
+| 400 | `user-dsh` | `<dshHome>/skills` |
+| 500 | `user-agents` | `<agentsHome>/skills` |
+
+项目根目录是包含 `.git` 的最近祖先目录；如果不存在，则使用当前 cwd。用户 DSH 根目录会跳过其 `.system` 子目录，因此归系统所有的目录不会被当作普通用户 skill。`includeDefaultRoots: false` 会省略项目根、用户根以及 `$DSH_BUNDLED_SKILL_DIR` 环境默认值，同时保留显式配置的自定义根与 bundled 根，因此可以挂载多个只看到自身根的唯一命名隔离提供方。该提供方提供项目和用户 skill；其他提供方可提供内置系统 skill。
+
+当 `ctx.fs` 可用时，发现通过 `ctx.fs.listDir` 列出根，通过 `ctx.fs.readText` 读取 skill 文件，并通过文件系统服务探测 `.git`。完整 skill 加载会将查找中止信号转发给文件系统元数据和内容读取。如果没有文件系统服务，提供方回退到可中止的 Node 文件系统 I/O，使最小本地上下文仍能加载 skill。已确认缺失的路径属于有效空状态；遇到格式错误或非文本条目时，提供方会发出警告并跳过；意外的发现或读取失败会使注册表快照不完整，系统不会因此用看似发生删除的结果替换上一份可用模型目录。
+
+## 目录变更检测
+
+现有 skill 根由 Chokidar 监视。打开原生 watcher 前，提供方会对现有根或祖先执行 realpath 解析，并拼回下一个缺失路径段；当 `watchFollowSymlinks` 为 false 且根本身是符号链接时，提供方不会展开最后这一级链接，使 Chokidar 能够强制执行配置边界。发现与诊断仍保留配置路径，从而避免 Windows 在 libuv 内部混用 8.3 别名与长格式事件路径。提供方会观察直属 bundle 目录的添加／移除、平铺 Markdown 文件的添加／移除，以及直接 `SKILL.md` 的添加／移除／变更；`change` 事件用于重新发现 `name`、`description` 等目录 frontmatter。`references`、`scripts`、`assets` 或其他 bundle 资源下的变更不会使目录失效。同一微任务批次内送达的事件会合并为一次提供方失效。
+
+不存在的根会从最近的现有祖先开始，每次沿一个缺失路径段跟踪。系统使用 `fs.watchFile` 探测下一段；当 `.agents`、`skills` 或已配置的根出现后，观察会逐级推进，直至 Chokidar 可以附加到真实根。根删除时，该过程反向执行，因此删除再重建整个 skills 目录仍可被观察到。按项目划分的 watcher 数量受 `watchMaxProjects` 限制；再次访问已被驱逐的项目时，发现阶段会重新附加观察。
+
+如果第一方文件系统 `write` 和 `edit` 工具的目标可能影响受监视的 skill 条目，它们还会通过 `fs/observed` 同步使提供方失效。这条快速路径让模型的下一个步骤无需等待宿主 watcher，即可观察到自身的文件系统变更。外部 IDE、Git、shell 和进程产生的变更依赖 Chokidar 或缺失路径探测。现有根的 watcher 会保持持久状态直至 effect 释放，使 Chokidar 能够接管异步原生错误事件；watcher 启动或运行时失败会被记录并触发重试。发现过程仍会扫描可读根目录，并返回其候选项供直接加载，但会将观测标记为不完整，因此不会缓存，也不会作为权威模型目录发布。effect 释放会关闭所有 watcher，并收束延迟回调。
+
+## skill 格式
+
+skill 可以是单层目录 bundle（`<name>/SKILL.md`），也可以是平铺 Markdown 文件（`<name>.md`）。刻意不支持发现嵌套的 `**/SKILL.md`。Frontmatter 使用 `yaml` 包解析为开放的 YAML 对象；该提供方解析必填的 `name` 和 `description`，以及可选的 `whenToUse`、`metadata`、`disable-model-invocation` 和 `user-invocable`。名称必须使用 kebab-case。
+
+这两个调用字段接受 YAML 布尔值，以及不区分大小写的 `true`/`false`、`yes`/`no`、`on`/`off` 和 `1`/`0`。`disable-model-invocation: true` 会从面向模型的目录和 loader 中排除该 skill；`user-invocable: false` 会从面向用户的命令中排除该 skill。每个省略的字段都默认为允许对应接口调用；提供方始终输出两个正向内部策略值，即使两个键都不存在也不例外。若使用驼峰拼写或提供非布尔调用值，系统会记录警告并从发现结果中排除整个 skill，而不是只丢弃该字段或回退到宽松的默认值。调用策略校验遵循失败时默认拒绝原则，因为忽略无效数据可能会在已禁用的接口上暴露 skill；类型错误的可选 `whenToUse` 和 `metadata` 值则会被省略，因为这两个字段目前都不授予调用权限。
+
+目录与正文具有独立的生命周期。发现阶段解析 frontmatter 以生成概述。每次 `skill(name)` 加载都会重新读取并解析当前文件，因此正文编辑不需要 hash、修订号、缓存失效或主动通知模型。若在发现与加载之间更改 frontmatter 中的名称，系统会拒绝陈旧名称并使提供方失效；下一次目录观察会发布新名称。
+
+## 模型体验
+
+通过 `dsh-tool-skill` 间接影响模型。它将该提供方的可调用名称和有长度上限的描述渲染到初始目录或替换目录中，并将所选的当前指令正文与资源基底指引渲染到保留的工具历史中；路径、提供方 rank 和已禁用 skill 仍被隐藏。
+
+#### KV Cache 影响
+
+watcher 触发的失效可促使上述消费方在现有请求历史中追加替换目录。仅涉及正文的编辑不会改变目录 digest。
+
+## 已知限制与暂缓事项
+
+- **发现深度为一层**：只识别 `<root>/<name>/SKILL.md` 和 `<root>/<name>.md`；忽略嵌套 skill 树和包 manifest（元数据清单）。
+- **项目范围为最近 `.git` 祖先**：没有该标记的工作区回退到提供的 cwd，不支持其他项目根标记或 monorepo 子项目选择。
+- **格式错误的条目会随警告消失**：模型目录不会收到每个 skill 的诊断，无法区分缺失的 skill 与无效的 skill；意外 I/O 失败则会保留最后一份可用目录。
+- **缺失根观察每次轮询一个路径段**：启动时不存在的根会使用 `fs.watchFile` 按 `watchPollIntervalMs` 轮询，直至 Chokidar 可以附加；这以有界检测延迟换取跨 IDE、Git 和 shell 工作流的可靠创建检测。
+- **无正文修订协议**：已加载的正文是普通的已保留工具历史；后续文件编辑会影响后续调用，但既不会改写旧结果，也不会通知正文已发生变化。

package/lib/index.js

@@ -0,0 +1,880 @@
+import { access, lstat, readFile, readdir, stat } from "node:fs/promises";
+import { unwatchFile, watchFile } from "node:fs";
+import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { homedir } from "node:os";
+import chokidar from "chokidar";
+import z from "@deepseek-ai/schemastery";
+import { parse } from "yaml";
+import { canonicalizeWatchPath, resolveDshHome } from "@deepseek-ai/dsh-home-paths";
+import { BUNDLED_SKILL_RANK, isSkillName } from "@deepseek-ai/dsh-skill";
+//#region lib/types/index.js
+/**
+* Local filesystem skill provider.
+*
+* This package is one implementation of the `ctx.skills` provider registry. It
+* discovers directory-bundle and flat Markdown skills from project, custom, and
+* user roots, parses YAML frontmatter, and loads bodies through `ctx.fs` when a
+* filesystem service is present.
+*
+* @module @deepseek-ai/dsh-skill-filesystem
+*/
+const PROJECT_DSH_RANK = 100;
+const PROJECT_AGENTS_RANK = 200;
+const CUSTOM_RANK = 300;
+const USER_DSH_RANK = 400;
+const USER_AGENTS_RANK = 500;
+const DEFAULT_WATCH_STABILITY_THRESHOLD_MS = 200;
+const DEFAULT_WATCH_POLL_INTERVAL_MS = 100;
+const DEFAULT_WATCH_MAX_PROJECTS = 128;
+const name = "skill-filesystem";
+const inject = ["skills"];
+const Config = z.object({
+	providerName: z.string().min(1).default("filesystem"),
+	includeDefaultRoots: z.boolean().default(true),
+	dshHome: z.string(),
+	agentsHome: z.string(),
+	customSkillDirs: z.array(z.string()).default([]),
+	watch: z.boolean().default(true),
+	watchUsePolling: z.boolean().default(false),
+	watchStabilityThresholdMs: z.number().default(DEFAULT_WATCH_STABILITY_THRESHOLD_MS),
+	watchPollIntervalMs: z.number().default(DEFAULT_WATCH_POLL_INTERVAL_MS),
+	watchMaxProjects: z.number().default(DEFAULT_WATCH_MAX_PROJECTS),
+	watchFollowSymlinks: z.boolean().default(true),
+	bundledSkillDir: z.string()
+});
+/** Register the local filesystem skill provider on `ctx.skills`. */
+function apply(ctx, config = {}) {
+	let provider;
+	ctx.skills.registerProvider((control) => {
+		provider = new FileSystemSkillProvider(ctx, control, config);
+		return provider;
+	});
+	ctx.effect(function* () {
+		yield async () => {
+			await provider.dispose();
+		};
+	}, "skill-filesystem watcher");
+	ctx.on("fs/observed", (target, _observation, actor) => {
+		if (mutationToolName(actor) === void 0) return;
+		provider.observeHostMutation(target.displayPath);
+	});
+}
+/** Provider that maps local project/user skill roots into `ctx.skills`. */
+var FileSystemSkillProvider = class {
+	ctx;
+	name;
+	includeDefaultRoots;
+	dshHome;
+	agentsHome;
+	customSkillDirs;
+	watchManager;
+	bundledSkillDir;
+	disposal;
+	constructor(ctx, control, config = {}) {
+		this.ctx = ctx;
+		this.name = config.providerName ?? "filesystem";
+		this.includeDefaultRoots = config.includeDefaultRoots ?? true;
+		this.dshHome = resolveDshHome(config.dshHome);
+		this.agentsHome = resolve(config.agentsHome ?? process.env.DSH_AGENTS_HOME ?? join(homedir(), ".agents"));
+		this.customSkillDirs = (config.customSkillDirs ?? []).map((root) => resolve(root));
+		this.watchManager = new SkillWatchManager(ctx, control.invalidate, resolveWatchConfig(config));
+		control.signal.addEventListener("abort", () => {
+			this.dispose();
+		}, { once: true });
+		const bundledSkillDir = config.bundledSkillDir ?? (this.includeDefaultRoots ? process.env.DSH_BUNDLED_SKILL_DIR : void 0);
+		this.bundledSkillDir = bundledSkillDir === void 0 ? void 0 : resolve(bundledSkillDir);
+	}
+	/**
+	* Discover local skill summaries for a cwd-sensitive workspace.
+	* @param options - lookup options; `cwd` selects the project roots to scan.
+	* @returns local provider candidates with stable root ranks; watcher startup
+	*   failure returns readable candidates as an incomplete observation.
+	*/
+	async list(options) {
+		const roots = await this.roots(options.cwd);
+		let complete = true;
+		try {
+			await this.watchManager.observeRoots(roots);
+		} catch (error) {
+			if (this.disposal !== void 0) throw error;
+			complete = false;
+		}
+		const candidates = [];
+		for (const root of roots) for (const skill of await discoverRoot(root, this.ctx, this.name)) candidates.push(skill);
+		return complete ? candidates : {
+			candidates,
+			complete
+		};
+	}
+	/**
+	* Load a complete local skill body from the candidate's file locator.
+	* @param candidate - the winning candidate returned by this provider.
+	* @param options - lookup options whose signal cancels filesystem reads.
+	* @returns the full local skill, or `undefined` if the file disappeared.
+	*/
+	async get(candidate, options) {
+		const locator = candidate.locator;
+		const parsed = await parseSkillFile(locator.path, this.ctx, options.signal, candidate.source === "bundled");
+		if (parsed === void 0) return void 0;
+		return {
+			name: parsed.name,
+			description: parsed.description,
+			...parsed.whenToUse !== void 0 ? { whenToUse: parsed.whenToUse } : {},
+			invocation: parsed.invocation,
+			source: candidate.source,
+			provider: this.name,
+			resourceBase: {
+				kind: "directory",
+				path: locator.directory
+			},
+			path: locator.path,
+			...parsed.metadata !== void 0 ? { metadata: parsed.metadata } : {},
+			content: parsed.content
+		};
+	}
+	/**
+	* Invalidate this provider synchronously after a first-party filesystem mutation.
+	* @param path - host display path observed after a model-facing write or edit.
+	*/
+	observeHostMutation(path) {
+		this.watchManager.observeHostMutation(path);
+	}
+	/**
+	* Close every host watcher and contain late filesystem callbacks.
+	* @returns a shared promise that settles when every watcher reaches quiescence.
+	*/
+	dispose() {
+		this.disposal ??= this.watchManager.dispose();
+		return this.disposal;
+	}
+	async roots(cwd) {
+		const roots = [];
+		if (this.includeDefaultRoots && cwd !== void 0) {
+			const projectRoot = await findProjectRoot(resolve(cwd), optionalFileSystem(this.ctx));
+			roots.push({
+				path: join(projectRoot, ".dsh/skills"),
+				source: "project-dsh",
+				rank: PROJECT_DSH_RANK,
+				projectRoot
+			}, {
+				path: join(projectRoot, ".agents/skills"),
+				source: "project-agents",
+				rank: PROJECT_AGENTS_RANK,
+				projectRoot
+			});
+		}
+		roots.push(...this.customSkillDirs.map((path) => ({
+			path,
+			source: "custom",
+			rank: CUSTOM_RANK
+		})));
+		if (this.includeDefaultRoots) roots.push({
+			path: join(this.dshHome, "skills"),
+			source: "user-dsh",
+			rank: USER_DSH_RANK,
+			skipSystem: true
+		}, {
+			path: join(this.agentsHome, "skills"),
+			source: "user-agents",
+			rank: USER_AGENTS_RANK
+		});
+		if (this.bundledSkillDir !== void 0) roots.push({
+			path: this.bundledSkillDir,
+			source: "bundled",
+			rank: BUNDLED_SKILL_RANK,
+			trustedHost: true
+		});
+		return roots;
+	}
+};
+/** Owns bounded host watchers while discovery and reads remain on the filesystem service. */
+var SkillWatchManager = class {
+	ctx;
+	invalidate;
+	config;
+	roots = /* @__PURE__ */ new Map();
+	projects = /* @__PURE__ */ new Map();
+	lifecycle = new AbortController();
+	closing = false;
+	invalidationQueued = false;
+	constructor(ctx, invalidate, config) {
+		this.ctx = ctx;
+		this.invalidate = invalidate;
+		this.config = config;
+	}
+	async observeRoots(roots) {
+		if (this.closing) return;
+		const projectRoots = /* @__PURE__ */ new Map();
+		const pending = [];
+		for (const root of roots) {
+			if (root.projectRoot === void 0) {
+				pending.push(this.retainRoot(root, `shared:${root.path}`));
+				continue;
+			}
+			const grouped = projectRoots.get(root.projectRoot) ?? [];
+			grouped.push(root);
+			projectRoots.set(root.projectRoot, grouped);
+		}
+		for (const [projectRoot, grouped] of projectRoots) {
+			const owner = `project:${projectRoot}`;
+			this.projects.delete(projectRoot);
+			const paths = new Set(grouped.map((root) => root.path));
+			this.projects.set(projectRoot, paths);
+			for (const root of grouped) pending.push(this.retainRoot(root, owner));
+		}
+		let evictedProject = false;
+		while (this.projects.size > this.config.maxProjects) {
+			const oldest = this.projects.entries().next();
+			/* v8 ignore next -- the loop condition proves one project exists. */
+			if (oldest.done) break;
+			const [projectRoot, paths] = oldest.value;
+			this.projects.delete(projectRoot);
+			const owner = `project:${projectRoot}`;
+			for (const path of paths) pending.push(this.releaseRoot(path, owner));
+			evictedProject = true;
+		}
+		await Promise.all(pending);
+		if (evictedProject) this.invalidate();
+	}
+	observeHostMutation(path) {
+		if (this.closing) return;
+		const normalized = resolve(path);
+		if (![...this.roots.values()].some((state) => isPotentialSkillPath(state.root, normalized))) return;
+		this.invalidate();
+	}
+	async dispose() {
+		this.closing = true;
+		this.lifecycle.abort(/* @__PURE__ */ new Error("skill-filesystem watcher disposed"));
+		const states = [...this.roots.values()];
+		this.roots.clear();
+		this.projects.clear();
+		await Promise.all(states.map(async (state) => {
+			await settleWatcherOpening(state.opening);
+			const watcher = state.watcher;
+			state.watcher = void 0;
+			if (watcher !== void 0) await this.closeWatcher(watcher);
+		}));
+	}
+	async retainRoot(root, owner) {
+		let state = this.roots.get(root.path);
+		if (state === void 0) {
+			state = {
+				root,
+				owners: /* @__PURE__ */ new Set(),
+				watcher: void 0,
+				opening: void 0,
+				unhealthy: true
+			};
+			this.roots.set(root.path, state);
+		}
+		state.owners.add(owner);
+		if (this.config.enabled) await this.ensureWatcher(state);
+	}
+	async releaseRoot(path, owner) {
+		const state = this.roots.get(path);
+		/* v8 ignore next -- Concurrent cwd observations can evict the same shared root before this release settles. */
+		if (state === void 0) return;
+		state.owners.delete(owner);
+		if (state.owners.size > 0) return;
+		this.roots.delete(path);
+		await settleWatcherOpening(state.opening);
+		const watcher = state.watcher;
+		state.watcher = void 0;
+		if (watcher !== void 0) await this.closeWatcher(watcher);
+	}
+	ensureWatcher(state) {
+		/* v8 ignore next -- A scheduled rewatch can reach this guard only when teardown wins its await. */
+		if (this.closing || !this.config.enabled) return Promise.resolve();
+		if (state.opening !== void 0) return state.opening;
+		const opening = this.ensureCurrentWatcher(state);
+		state.opening = opening;
+		opening.then(() => {
+			state.opening = void 0;
+		}, () => {
+			state.opening = void 0;
+		});
+		return opening;
+	}
+	async ensureCurrentWatcher(state) {
+		const watcher = state.watcher;
+		if (watcher !== void 0 && !state.unhealthy) {
+			const current = await resolveRootWatchMode(state.root.path, this.config.followSymlinks);
+			if (!state.unhealthy && sameWatchMode(watcher.mode, current)) return;
+		}
+		await this.replaceWatcher(state);
+	}
+	async replaceWatcher(state) {
+		const previous = state.watcher;
+		state.watcher = void 0;
+		if (previous !== void 0) await this.closeWatcher(previous);
+		/* v8 ignore next -- Teardown can win while an unhealthy watcher is still closing. */
+		if (this.closing || state.owners.size === 0) return;
+		try {
+			const watcher = await this.openStableWatcher(state);
+			/* v8 ignore next -- The loop returns no handle only when teardown wins between awaited probes. */
+			if (watcher === void 0) return;
+			/* v8 ignore start -- Post-open teardown is timing-dependent; the disposal race has an explicit integration test. */
+			if (this.closing || state.owners.size === 0) {
+				await this.closeWatcher(watcher);
+				return;
+			}
+			/* v8 ignore stop */
+			state.watcher = watcher;
+			state.unhealthy = false;
+		} catch (error) {
+			if (!this.closing) {
+				state.unhealthy = true;
+				this.ctx.logger.warn(`skill-filesystem: failed to watch ${state.root.path}: ${errorMessage(error)}`);
+			}
+			throw error;
+		}
+	}
+	async openStableWatcher(state) {
+		while (!this.closing && state.owners.size > 0) {
+			const mode = await resolveRootWatchMode(state.root.path, this.config.followSymlinks);
+			const watcher = mode.kind === "ancestor" ? this.openAncestorWatcher(state, mode) : await this.openRootWatcher(state, mode);
+			/* v8 ignore else -- A host path transition between the two probes is timing-dependent. */
+			if (sameWatchMode(mode, await resolveRootWatchMode(state.root.path, this.config.followSymlinks))) return watcher;
+			/* v8 ignore next -- Covered by the same host path transition guard. */
+			await this.closeWatcher(watcher);
+		}
+	}
+	openAncestorWatcher(state, mode) {
+		const listener = (_current, _previous) => {
+			this.handleAncestorWatchEvent(state, mode);
+		};
+		watchFile(mode.nextPath, {
+			persistent: false,
+			interval: this.config.pollIntervalMs
+		}, listener);
+		return {
+			mode,
+			close() {
+				unwatchFile(mode.nextPath, listener);
+			}
+		};
+	}
+	async handleAncestorWatchEvent(state, mode) {
+		let current;
+		try {
+			current = await resolveRootWatchMode(state.root.path, this.config.followSymlinks);
+		} catch (error) {
+			/* v8 ignore start -- Non-absence stat failures need a platform permission or I/O fault. */
+			if (!this.closing && state.owners.size > 0) this.handleWatcherError(state, error);
+			return;
+		}
+		if (this.closing || state.owners.size === 0 || sameWatchMode(mode, current)) return;
+		this.queueInvalidation();
+		state.unhealthy = true;
+		this.scheduleRewatch(state);
+	}
+	async openRootWatcher(state, mode) {
+		const watcher = chokidar.watch(mode.anchor, {
+			persistent: true,
+			ignoreInitial: true,
+			depth: 1,
+			followSymlinks: this.config.followSymlinks,
+			atomic: true,
+			awaitWriteFinish: {
+				stabilityThreshold: this.config.stabilityThresholdMs,
+				pollInterval: this.config.pollIntervalMs
+			},
+			usePolling: this.config.usePolling,
+			interval: this.config.pollIntervalMs
+		});
+		const handle = {
+			mode,
+			close: () => watcher.close()
+		};
+		let ready = false;
+		const readiness = Promise.withResolvers();
+		const signal = this.lifecycle.signal;
+		if (signal.aborted) {
+			await this.closeWatcher(handle);
+			signal.throwIfAborted();
+		}
+		const onAbort = () => {
+			readiness.reject(signal.reason);
+		};
+		signal.addEventListener("abort", onAbort, { once: true });
+		const onError = (error) => {
+			if (!ready) {
+				readiness.reject(error);
+				return;
+			}
+			this.handleWatcherError(state, error);
+		};
+		watcher.on("error", onError);
+		watcher.once("ready", () => {
+			ready = true;
+			readiness.resolve(void 0);
+		});
+		for (const event of [
+			"add",
+			"addDir",
+			"change",
+			"unlink",
+			"unlinkDir"
+		]) watcher.on(event, (path) => {
+			this.handleWatchEvent(state, mode, event, path);
+		});
+		try {
+			await readiness.promise;
+		} catch (error) {
+			await this.closeWatcher(handle);
+			throw error;
+		} finally {
+			signal.removeEventListener("abort", onAbort);
+		}
+		return handle;
+	}
+	handleWatchEvent(state, mode, event, path) {
+		const target = resolve(path);
+		if (this.closing || !isRelevantWatchEvent({
+			...state.root,
+			path: mode.anchor
+		}, event, target)) return;
+		this.queueInvalidation();
+		if (target === mode.anchor && event === "unlinkDir") {
+			state.unhealthy = true;
+			this.scheduleRewatch(state);
+		}
+	}
+	handleWatcherError(state, error) {
+		if (this.closing) return;
+		this.ctx.logger.warn(`skill-filesystem: watcher for ${state.root.path} failed: ${errorMessage(error)}`);
+		state.unhealthy = true;
+		this.queueInvalidation();
+		this.scheduleRewatch(state);
+	}
+	scheduleRewatch(state) {
+		const currentOpening = state.opening ?? Promise.resolve();
+		(async () => {
+			await settleWatcherOpening(currentOpening);
+			try {
+				await this.ensureWatcher(state);
+			} catch {
+				return;
+			}
+			this.queueInvalidation();
+		})();
+	}
+	queueInvalidation() {
+		if (this.closing || this.invalidationQueued) return;
+		this.invalidationQueued = true;
+		queueMicrotask(() => {
+			this.invalidationQueued = false;
+			/* v8 ignore next -- Effect teardown can win this queued microtask before provider disposal emits. */
+			if (this.closing) return;
+			this.invalidate();
+		});
+	}
+	async closeWatcher(watcher) {
+		try {
+			await watcher.close();
+		} catch (error) {
+			this.ctx.logger.warn(`skill-filesystem: failed to close watcher: ${errorMessage(error)}`);
+		}
+	}
+};
+async function settleWatcherOpening(opening) {
+	if (opening === void 0) return;
+	try {
+		await opening;
+	} catch {}
+}
+function resolveWatchConfig(config) {
+	const stabilityThresholdMs = config.watchStabilityThresholdMs ?? DEFAULT_WATCH_STABILITY_THRESHOLD_MS;
+	const pollIntervalMs = config.watchPollIntervalMs ?? DEFAULT_WATCH_POLL_INTERVAL_MS;
+	const maxProjects = config.watchMaxProjects ?? DEFAULT_WATCH_MAX_PROJECTS;
+	assertPositiveInteger("watchStabilityThresholdMs", stabilityThresholdMs);
+	assertPositiveInteger("watchPollIntervalMs", pollIntervalMs);
+	assertPositiveInteger("watchMaxProjects", maxProjects);
+	return {
+		enabled: config.watch ?? true,
+		usePolling: config.watchUsePolling ?? false,
+		stabilityThresholdMs,
+		pollIntervalMs,
+		maxProjects,
+		followSymlinks: config.watchFollowSymlinks ?? true
+	};
+}
+async function resolveRootWatchMode(root, followSymlinks) {
+	let candidate = root;
+	while (true) {
+		try {
+			if ((await stat(candidate)).isDirectory()) {
+				const anchor = candidate === root && !followSymlinks && (await lstat(candidate)).isSymbolicLink() ? resolve(candidate) : await canonicalizeWatchPath(candidate);
+				if (candidate === root) return {
+					kind: "root",
+					anchor
+				};
+				const firstSegment = relative(candidate, root).split(sep)[0];
+				/* v8 ignore next -- candidate is a strict ancestor of root. */
+				if (firstSegment === void 0 || firstSegment.length === 0) return {
+					kind: "root",
+					anchor
+				};
+				return {
+					kind: "ancestor",
+					anchor,
+					nextPath: join(anchor, firstSegment)
+				};
+			}
+		} catch (error) {
+			/* v8 ignore next -- Non-absence stat failures are platform/permission-specific and propagate as incomplete discovery. */
+			if (!isAbsentPathError(error)) throw error;
+		}
+		const parent = dirname(candidate);
+		/* v8 ignore next -- Traversal reaches the existing filesystem root before this fallback. */
+		if (parent === candidate) return {
+			kind: "ancestor",
+			anchor: candidate,
+			nextPath: root
+		};
+		candidate = parent;
+	}
+}
+function sameWatchMode(left, right) {
+	return left.kind === right.kind && left.anchor === right.anchor && (left.kind === "root" || right.kind === "ancestor" && left.nextPath === right.nextPath);
+}
+function isRelevantWatchEvent(root, event, path) {
+	const segments = containedSegments(root.path, path);
+	if (segments === void 0) return false;
+	if (segments.length === 0) return event === "addDir" || event === "unlinkDir";
+	if (root.skipSystem === true && segments[0] === ".system") return false;
+	if (segments.length === 1) {
+		if (event === "addDir" || event === "unlinkDir") return true;
+		return segments[0]?.endsWith(".md") === true;
+	}
+	return segments.length === 2 && segments[1] === "SKILL.md" && event !== "addDir" && event !== "unlinkDir";
+}
+function isPotentialSkillPath(root, path) {
+	const segments = containedSegments(root.path, path);
+	if (segments === void 0 || segments.length === 0 || segments.length > 2) return false;
+	if (root.skipSystem === true && segments[0] === ".system") return false;
+	return segments.length === 1 ? segments[0]?.endsWith(".md") === true : segments[1] === "SKILL.md";
+}
+function containedSegments(root, path) {
+	const child = relative(root, path);
+	if (child.length === 0) return [];
+	if (child === ".." || child.startsWith(`..${sep}`) || isAbsolute(child)) return void 0;
+	return child.split(sep);
+}
+function mutationToolName(actor) {
+	if (actor === void 0 || !("name" in actor)) return void 0;
+	const value = actor.name;
+	return value === "edit" || value === "write" ? value : void 0;
+}
+function assertPositiveInteger(field, value) {
+	if (!Number.isInteger(value) || value < 1) throw new TypeError(`skill-filesystem: ${field} must be a positive integer`);
+}
+function isAbsentPathError(error) {
+	return hasErrorCode(error, "ENOENT") || hasErrorCode(error, "ENOTDIR");
+}
+function isAbsentSkillPathError(error) {
+	return isAbsentPathError(error) || hasErrorCode(error, "FS_NOT_FOUND") || hasErrorCode(error, "FS_NOT_DIRECTORY");
+}
+function hasErrorCode(error, code) {
+	return typeof error === "object" && error !== null && "code" in error && error.code === code;
+}
+async function discoverRoot(root, ctx, provider) {
+	const skills = [];
+	const entries = await listSkillRootEntries(root, ctx);
+	for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
+		if (root.skipSystem && entry.name === ".system") continue;
+		const locator = entry.type === "directory" ? {
+			path: join(entry.path, "SKILL.md"),
+			directory: entry.path
+		} : entry.type === "file" && entry.name.endsWith(".md") ? {
+			path: entry.path,
+			directory: root.path
+		} : void 0;
+		if (locator === void 0) continue;
+		const parsed = await parseSkillFile(locator.path, ctx, void 0, root.trustedHost === true);
+		if (parsed === void 0) continue;
+		skills.push({
+			name: parsed.name,
+			description: parsed.description,
+			...parsed.whenToUse !== void 0 ? { whenToUse: parsed.whenToUse } : {},
+			invocation: parsed.invocation,
+			provider,
+			source: root.source,
+			rank: root.rank,
+			locator,
+			resourceBase: {
+				kind: "directory",
+				path: locator.directory
+			},
+			path: locator.path,
+			...parsed.metadata !== void 0 ? { metadata: parsed.metadata } : {}
+		});
+	}
+	return skills;
+}
+async function listSkillRootEntries(root, ctx) {
+	const fs = optionalFileSystem(ctx);
+	if (fs !== void 0 && root.trustedHost !== true) return await listSkillRootEntriesFromFileSystem(root, fs);
+	return await listSkillRootEntriesFromNode(root, ctx);
+}
+async function listSkillRootEntriesFromFileSystem(root, fs) {
+	try {
+		return (await fsListDir(fs, root.path)).map(entryFromFs);
+	} catch (error) {
+		if (isAbsentSkillPathError(error)) return [];
+		throw error;
+	}
+}
+async function fsListDir(fs, path) {
+	const target = await fs.resolve(path);
+	return await fs.listDir(target);
+}
+function entryFromFs(entry) {
+	return {
+		name: entry.name,
+		type: entry.type,
+		path: entry.target.displayPath
+	};
+}
+async function listSkillRootEntriesFromNode(root, ctx) {
+	let entries;
+	try {
+		entries = await readdir(root.path, {
+			withFileTypes: true,
+			encoding: "utf8"
+		});
+	} catch (error) {
+		/* v8 ignore else -- Native non-absence directory failures are provider-dependent; the ctx.fs path pins incomplete discovery. */
+		if (isAbsentSkillPathError(error)) return [];
+		/* v8 ignore next -- Same native error branch as above. */
+		throw error;
+	}
+	const result = [];
+	for (const entry of entries) {
+		const path = join(root.path, entry.name);
+		const type = await nodeEntryKind(path, entry, ctx);
+		result.push({
+			name: entry.name,
+			type: type ?? "other",
+			path
+		});
+	}
+	return result;
+}
+async function parseSkillFile(path, ctx, signal, trustedHost = false) {
+	const raw = await readSkillText(ctx, path, signal, trustedHost);
+	signal?.throwIfAborted();
+	if (raw === void 0) return;
+	let parsed;
+	try {
+		parsed = parseFrontmatter(raw);
+	} catch (error) {
+		ctx.logger.warn(`skill file ${path} ignored: invalid YAML frontmatter: ${errorMessage(error)}`);
+		return;
+	}
+	if (!parsed) {
+		ctx.logger.warn(`skill file ${path} ignored: missing YAML frontmatter`);
+		return;
+	}
+	const name = stringField(parsed.data, "name");
+	const description = stringField(parsed.data, "description");
+	if (name === void 0 || description === void 0) {
+		ctx.logger.warn(`skill file ${path} ignored: frontmatter requires name and description`);
+		return;
+	}
+	if (!isSkillName(name)) {
+		ctx.logger.warn(`skill file ${path} ignored: invalid skill name "${name}"`);
+		return;
+	}
+	let invocation;
+	try {
+		invocation = parseInvocationPolicy(parsed.data);
+	} catch (error) {
+		ctx.logger.warn(`skill file ${path} ignored: invalid invocation frontmatter: ${errorMessage(error)}`);
+		return;
+	}
+	return {
+		name,
+		description,
+		...optionalString(parsed.data, "whenToUse"),
+		invocation,
+		...optionalMetadata(parsed.data),
+		content: parsed.body.trim()
+	};
+}
+function optionalFileSystem(ctx) {
+	return ctx.get("fs");
+}
+async function readSkillText(ctx, path, signal, trustedHost = false) {
+	signal?.throwIfAborted();
+	const fs = optionalFileSystem(ctx);
+	if (fs !== void 0 && !trustedHost) return await readSkillTextFromFileSystem(ctx, fs, path, signal);
+	try {
+		return await readFile(path, {
+			encoding: "utf8",
+			signal
+		});
+	} catch (error) {
+		signal?.throwIfAborted();
+		if (isAbsentSkillPathError(error)) return void 0;
+		throw error;
+	}
+}
+async function readSkillTextFromFileSystem(ctx, fs, path, signal) {
+	signal?.throwIfAborted();
+	let target;
+	try {
+		target = await fs.resolve(path);
+	} catch (error) {
+		if (isAbsentSkillPathError(error)) return void 0;
+		throw error;
+	}
+	signal?.throwIfAborted();
+	let info;
+	try {
+		info = await fs.stat(target, signal);
+	} catch (error) {
+		signal?.throwIfAborted();
+		if (isAbsentSkillPathError(error)) return void 0;
+		throw error;
+	}
+	if (info === void 0 || info.type !== "file") return void 0;
+	try {
+		return await fs.readText(target, signal);
+	} catch (error) {
+		signal?.throwIfAborted();
+		if (isAbsentSkillPathError(error)) return void 0;
+		if (!hasErrorCode(error, "FS_NOT_TEXT")) throw error;
+		ctx.logger.warn(`skill file ${path} ignored: ${fsReadErrorMessage(target, error)}`);
+		return;
+	}
+}
+function fsReadErrorMessage(target, error) {
+	return `failed to read text file at ${target.displayPath}: ${errorMessage(error)}`;
+}
+async function nodeEntryKind(fullPath, entry, ctx) {
+	if (entry.isDirectory()) return "directory";
+	if (entry.isFile()) return "file";
+	/* v8 ignore next -- Non-file directory entries such as FIFOs are platform-specific and intentionally skipped. */
+	if (!entry.isSymbolicLink()) return void 0;
+	try {
+		const info = await stat(fullPath);
+		if (info.isDirectory()) return "directory";
+		/* v8 ignore else -- the special-file symlink branch relies on POSIX /dev/null. */
+		if (info.isFile()) return "file";
+		/* v8 ignore next -- The special-file symlink fixture relies on POSIX /dev/null. */
+		return;
+	} catch (error) {
+		ctx.logger.warn(`skill entry ${fullPath} ignored: failed to follow symbolic link: ${errorMessage(error)}`);
+		return;
+	}
+}
+function parseFrontmatter(raw) {
+	const firstLineEnd = raw.indexOf("\n");
+	if (firstLineEnd < 0) return void 0;
+	if (raw.slice(0, firstLineEnd).replace(/\r$/, "") !== "---") return void 0;
+	const start = firstLineEnd + 1;
+	const closing = findClosingFrontmatter(raw, start);
+	if (closing === void 0) return void 0;
+	const parsed = parse(raw.slice(start, closing.start));
+	if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return void 0;
+	return {
+		data: parsed,
+		body: raw.slice(closing.bodyStart)
+	};
+}
+function findClosingFrontmatter(raw, start) {
+	let lineStart = start;
+	while (lineStart <= raw.length) {
+		const nextNewline = raw.indexOf("\n", lineStart);
+		const lineEnd = nextNewline < 0 ? raw.length : nextNewline;
+		if (raw.slice(lineStart, lineEnd).replace(/\r$/, "") === "---") return {
+			start: lineStart,
+			bodyStart: nextNewline < 0 ? raw.length : nextNewline + 1
+		};
+		if (nextNewline < 0) return void 0;
+		lineStart = nextNewline + 1;
+	}
+}
+async function findProjectRoot(cwd, fs) {
+	let current = cwd;
+	while (true) {
+		if (await pathExists(join(current, ".git"), fs)) return current;
+		const parent = dirname(current);
+		if (parent === current) return cwd;
+		current = parent;
+	}
+}
+async function pathExists(path, fs) {
+	if (fs !== void 0) return await pathExistsInFileSystem(path, fs);
+	return await pathExistsInNode(path);
+}
+async function pathExistsInFileSystem(path, fs) {
+	let target;
+	try {
+		target = await fs.resolve(path);
+	} catch {
+		return false;
+	}
+	try {
+		return await fs.stat(target) !== void 0;
+	} catch {
+		return false;
+	}
+}
+async function pathExistsInNode(path) {
+	try {
+		await access(path);
+		return true;
+	} catch {
+		return false;
+	}
+}
+function stringField(data, key) {
+	const value = data[key];
+	return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+function optionalString(data, key) {
+	const value = data[key];
+	return typeof value === "string" && value.length > 0 ? { [key]: value } : {};
+}
+function parseInvocationPolicy(data) {
+	rejectLegacyInvocationKey(data, "disableModelInvocation", "disable-model-invocation");
+	rejectLegacyInvocationKey(data, "modelInvocable", "disable-model-invocation");
+	rejectLegacyInvocationKey(data, "userInvocable", "user-invocable");
+	const disableModelInvocation = frontmatterBoolean(data, "disable-model-invocation");
+	const userInvocable = frontmatterBoolean(data, "user-invocable");
+	return {
+		modelInvocable: disableModelInvocation !== true,
+		userInvocable: userInvocable !== false
+	};
+}
+function rejectLegacyInvocationKey(data, legacy, canonical) {
+	if (Object.hasOwn(data, legacy)) throw new Error(`frontmatter field "${legacy}" is unsupported; use "${canonical}"`);
+}
+function frontmatterBoolean(data, key) {
+	if (!Object.hasOwn(data, key)) return void 0;
+	const value = data[key];
+	if (typeof value === "boolean") return value;
+	if (value === 1 || value === "1") return true;
+	if (value === 0 || value === "0") return false;
+	if (typeof value === "string") switch (value.toLowerCase()) {
+		case "true":
+		case "yes":
+		case "on": return true;
+		case "false":
+		case "no":
+		case "off": return false;
+	}
+	throw new TypeError(`frontmatter field "${key}" must be a boolean`);
+}
+function optionalMetadata(data) {
+	const value = data.metadata;
+	if (typeof value === "object" && value !== null && !Array.isArray(value)) return { metadata: value };
+	return {};
+}
+function errorMessage(error) {
+	return String(error);
+}
+//#endregion
+export { Config, FileSystemSkillProvider, apply, inject, name };

package/lib/invariant.js

@@ -0,0 +1,23 @@
+//#region lib/types/invariant.js
+/**
+* Package-owned invariant companion for `@deepseek-ai/dsh-skill-filesystem`.
+* @module @deepseek-ai/dsh-skill-filesystem/invariant
+*/
+const PACKAGE_NAME = "@deepseek-ai/dsh-skill-filesystem";
+/** Cordis companion plugin name. */
+const name = "skill-filesystem-invariant";
+/** Service required before the companion can reserve package ownership. */
+const inject = ["invariants"];
+/**
+* No runtime invariant: this package exposes no independent event sequence or mutable data relation
+* beyond contracts enforced at its owning seam.
+*/
+const install = () => {};
+/**
+* Register this package's invariant companion.
+* @param ctx - Cordis context carrying the invariant service.
+* @returns the installed registration's disposer after setup succeeds.
+*/
+const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));
+//#endregion
+export { apply, inject, name };

package/lib/types/index.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Local filesystem skill provider.
+ *
+ * This package is one implementation of the `ctx.skills` provider registry. It
+ * discovers directory-bundle and flat Markdown skills from project, custom, and
+ * user roots, parses YAML frontmatter, and loads bodies through `ctx.fs` when a
+ * filesystem service is present.
+ *
+ * @module @deepseek-ai/dsh-skill-filesystem
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type Schema from '@deepseek-ai/schemastery';
+import { type SkillCandidate, type SkillDefinition, type SkillLookupOptions, type SkillProvider, type SkillProviderControl, type SkillProviderObservation } from '@deepseek-ai/dsh-skill';
+export declare const name = "skill-filesystem";
+export declare const inject: string[];
+/** Local filesystem skill provider configuration. */
+export interface Config {
+    /** Unique provider name. Defaults to `local`. */
+    providerName?: string;
+    /** Whether project and user roots are included around custom roots. */
+    includeDefaultRoots?: boolean;
+    /** DeepSeek Harness config root. Defaults to `$DSH_HOME` or `~/.dsh`. */
+    dshHome?: string;
+    /** Shared agent config root. Defaults to `$DSH_AGENTS_HOME` or `~/.agents`. */
+    agentsHome?: string;
+    /** Additional skill roots scanned after project roots and before user roots. */
+    customSkillDirs?: string[];
+    /** Whether host-local skill roots are watched for catalog changes. */
+    watch?: boolean;
+    /** Whether Chokidar uses polling instead of native filesystem events. */
+    watchUsePolling?: boolean;
+    /** Milliseconds a changed skill entry must remain stable before it is observed. */
+    watchStabilityThresholdMs?: number;
+    /** Milliseconds between Chokidar stability or polling probes. */
+    watchPollIntervalMs?: number;
+    /** Maximum distinct project roots whose skill directories remain watched. */
+    watchMaxProjects?: number;
+    /** Whether watched symbolic links follow their target files. */
+    watchFollowSymlinks?: boolean;
+    /** Bundled skill root; defaults to `$DSH_BUNDLED_SKILL_DIR` when default roots are included, otherwise mounts none. */
+    bundledSkillDir?: string;
+}
+export declare const Config: Schema<Config>;
+/** Register the local filesystem skill provider on `ctx.skills`. */
+export declare function apply(ctx: Context, config?: Config): void;
+/** Provider that maps local project/user skill roots into `ctx.skills`. */
+export declare class FileSystemSkillProvider implements SkillProvider {
+    private readonly ctx;
+    readonly name: string;
+    private readonly includeDefaultRoots;
+    private readonly dshHome;
+    private readonly agentsHome;
+    private readonly customSkillDirs;
+    private readonly watchManager;
+    private readonly bundledSkillDir;
+    private disposal;
+    constructor(ctx: Context, control: SkillProviderControl, config?: Config);
+    /**
+     * Discover local skill summaries for a cwd-sensitive workspace.
+     * @param options - lookup options; `cwd` selects the project roots to scan.
+     * @returns local provider candidates with stable root ranks; watcher startup
+     *   failure returns readable candidates as an incomplete observation.
+     */
+    list(options: SkillLookupOptions): Promise<SkillCandidate[] | SkillProviderObservation>;
+    /**
+     * Load a complete local skill body from the candidate's file locator.
+     * @param candidate - the winning candidate returned by this provider.
+     * @param options - lookup options whose signal cancels filesystem reads.
+     * @returns the full local skill, or `undefined` if the file disappeared.
+     */
+    get(candidate: SkillCandidate, options: SkillLookupOptions): Promise<SkillDefinition | undefined>;
+    /**
+     * Invalidate this provider synchronously after a first-party filesystem mutation.
+     * @param path - host display path observed after a model-facing write or edit.
+     */
+    observeHostMutation(path: string): void;
+    /**
+     * Close every host watcher and contain late filesystem callbacks.
+     * @returns a shared promise that settles when every watcher reaches quiescence.
+     */
+    dispose(): Promise<void>;
+    private roots;
+}
+//# sourceMappingURL=index.d.ts.map

package/lib/types/invariant.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Package-owned invariant companion for `@deepseek-ai/dsh-skill-filesystem`.
+ * @module @deepseek-ai/dsh-skill-filesystem/invariant
+ */
+import type { Context } from '@deepseek-ai/cordis';
+/** Cordis companion plugin name. */
+export declare const name = "skill-filesystem-invariant";
+/** Service required before the companion can reserve package ownership. */
+export declare const inject: string[];
+/**
+ * Register this package's invariant companion.
+ * @param ctx - Cordis context carrying the invariant service.
+ * @returns the installed registration's disposer after setup succeeds.
+ */
+export declare const apply: (ctx: Context) => Promise<() => void>;
+//# sourceMappingURL=invariant.d.ts.map

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@deepseek-ai/dsh-skill-filesystem",
+  "description": "Local filesystem skill provider for the DeepSeek Harness",
+  "version": "0.0.1-rc.3",
+  "publishConfig": {
+    "access": "restricted"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/deepseek-ai/deepseek-harness.git",
+    "directory": "packages/skill/skill-filesystem"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./invariant": {
+      "types": "./lib/types/invariant.d.ts",
+      "default": "./lib/invariant.js"
+    },
+    "./src/*": "./src/*",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/index.js",
+    "lib/invariant.js",
+    "lib/types/**/*.d.ts"
+  ],
+  "license": "BSD-3-Clause",
+  "peerDependencies": {
+    "@deepseek-ai/dsh-invariants": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-fs": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-home-paths": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-skill": "^0.0.1-rc.3",
+    "@deepseek-ai/cordis": "^4.0.1-rc.1"
+  },
+  "dependencies": {
+    "chokidar": "^5.0.0",
+    "yaml": "^2.4.2",
+    "@deepseek-ai/schemastery": "^3.18.1-rc.1"
+  },
+  "devDependencies": {
+    "@deepseek-ai/dsh-fs": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-home-paths": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-skill": "^0.0.1-rc.3",
+    "@deepseek-ai/dsh-invariants": "^0.0.1-rc.3",
+    "@deepseek-ai/cordis": "^4.0.1-rc.1"
+  }
+}