@max-null/dsh-skill-mcp-center 0.5.1 → 0.5.3

package/README.md

@@ -10,7 +10,7 @@ Skill 与 MCP 管理中心：在设置里管理 skills 与 MCP 服务器，右
 
 ## Features / 功能
 
-- **Skill management / Skill 管理** — browse every skill by tier (system / user / workspace / runtime), toggle model invocation via the `disable-model-invocation` frontmatter (disk-backed skills only). Covers skills shipped **inside plugin packages** (e.g. `@max-null/dsh-skills`), not just the user-level roots — the host-level skill filesystem is disabled in web-app, so a plugin's own `skills/` directory would otherwise be invisible while its skills are loaded and in effect.
+- **Skill management / Skill 管理** — browse every skill grouped by source (Global / Workspace / Built-in DSH official, plus one group per plugin that ships skills), toggle model invocation via the `disable-model-invocation` frontmatter (disk-backed skills only). Covers skills shipped **inside plugin packages** (e.g. `@max-null/dsh-skills`), not just the user-level roots — the host-level skill filesystem is disabled in web-app, so a plugin's own `skills/` directory would otherwise be invisible while its skills are loaded and in effect.
 - **MCP management / MCP 管理** — add / edit / remove `mcp-client` servers, enable/disable without deleting config, all **hot-applied** through `ctx.loader` (no restart).
 - **Live status / 实时状态** — a sidebar "MCP" tab (via `dsh-better-sidebar`) showing per-server connection state; **click a server row to expand its tools' names and descriptions** (collapsed by default — a server can expose dozens of them). Names come from `tools.schemas()`; the redundant `mcp__<server>__` prefix is hidden while the full name stays on hover. Polled while visible and following the session.
 - **Skin-compatible / 皮肤兼容** — every color uses `var(--dsw-*)` tokens.

package/dist/service.d.ts

@@ -74,6 +74,15 @@ export interface McpConfig {
     url?: string;
     headers?: Record<string, string>;
 }
+/**
+ * Scan one root for SKILL.md entries and parse their frontmatter.
+ * @param root - directory to scan; a missing root yields no skills.
+ * @param source - discovery source label recorded on every skill found.
+ * @param writable - whether the surface may rewrite these SKILL.md files.
+ * @param provider - provider label recorded on every skill found.
+ * @returns the skills this root contributes, in directory order.
+ */
+export declare function scanSkillRoot(root: string, source: string, writable?: boolean, provider?: string): Promise<SkillView[]>;
 export declare class SkillMcpService extends Service {
     static inject: string[];
     private readonly officialSkillDirs;

package/dist/service.js

@@ -8,7 +8,7 @@
  */
 import { Service } from '@deepseek-ai/cordis';
 import { existsSync } from 'node:fs';
-import { readdir, readFile, writeFile } from 'node:fs/promises';
+import { readdir, readFile, stat, writeFile } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { join, sep } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -65,16 +65,45 @@ function ownNodeModules() {
     const at = here.lastIndexOf(marker);
     return at < 0 ? null : here.slice(0, at + marker.length - 1);
 }
-/** Absolute SKILL.md path for one directory/file entry, or null. */
-function skillPathFor(root, name, isDirectory) {
+/**
+ * Absolute SKILL.md path for one root entry, or null when the entry is neither
+ * a directory nor a Markdown file.
+ *
+ * `readdir`'s Dirent reports lstat semantics: a Windows directory junction —
+ * and equally a POSIX symlink to a directory — is `isDirectory() === false`
+ * with `isSymbolicLink() === true`, so the Dirent alone cannot tell a linked
+ * directory from a plain file. Only entries the Dirent leaves open reach the
+ * `stat` probe, which follows the link to its target type and so keeps the
+ * common true-directory case at zero extra syscalls. A broken link fails that
+ * probe (ENOENT) and yields null rather than a path nothing can read.
+ * @param root - directory being scanned.
+ * @param entry - one `readdir(root, { withFileTypes: true })` entry.
+ * @returns the SKILL.md path this entry names, or null when it names no skill.
+ */
+async function skillPathFor(root, entry) {
+    const full = join(root, entry.name);
+    let isDirectory = entry.isDirectory();
+    if (!isDirectory && !entry.isFile()) {
+        try {
+            isDirectory = (await stat(full)).isDirectory();
+        }
+        catch {
+            return null; // broken link: the target is gone
+        }
+    }
     if (isDirectory)
-        return join(root, name, 'SKILL.md');
-    if (name.endsWith('.md'))
-        return join(root, name);
-    return null;
+        return join(full, 'SKILL.md');
+    return entry.name.endsWith('.md') ? full : null;
 }
-/** Scan one root for SKILL.md entries and parse their frontmatter. */
-async function scanSkillRoot(root, source, writable = true, provider = 'filesystem') {
+/**
+ * Scan one root for SKILL.md entries and parse their frontmatter.
+ * @param root - directory to scan; a missing root yields no skills.
+ * @param source - discovery source label recorded on every skill found.
+ * @param writable - whether the surface may rewrite these SKILL.md files.
+ * @param provider - provider label recorded on every skill found.
+ * @returns the skills this root contributes, in directory order.
+ */
+export async function scanSkillRoot(root, source, writable = true, provider = 'filesystem') {
     let entries;
     try {
         entries = await readdir(root, { withFileTypes: true });
@@ -84,7 +113,7 @@ async function scanSkillRoot(root, source, writable = true, provider = 'filesyst
     }
     const skills = [];
     for (const entry of entries) {
-        const skillPath = skillPathFor(root, entry.name, entry.isDirectory());
+        const skillPath = await skillPathFor(root, entry);
         if (skillPath === null)
             continue;
         let text;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@max-null/dsh-skill-mcp-center",
-  "version": "0.5.1",
+  "version": "0.5.3",
   "description": "Skill & MCP management center for DeepSeek Harness — manage skills and MCP servers in Settings, live MCP status in the sidebar",
   "license": "MIT",
   "publishConfig": {
@@ -67,18 +67,18 @@
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.2",
-    "@deepseek-ai/dsh-client-connection": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-host-apiproxy": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-skill": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-tools": "^0.1.1-rc.1"
+    "@deepseek-ai/dsh-client-connection": ">=0.1.1-rc.1 <0.3.0",
+    "@deepseek-ai/dsh-host-apiproxy": ">=0.1.1-rc.1 <0.3.0",
+    "@deepseek-ai/dsh-skill": ">=0.1.1-rc.1 <0.3.0",
+    "@deepseek-ai/dsh-tools": ">=0.1.1-rc.1 <0.3.0"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/cordis-plugin-loader": "^1.0.2",
-    "@deepseek-ai/dsh-client-connection": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-host-apiproxy": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-skill": "^0.1.1-rc.1",
-    "@deepseek-ai/dsh-tools": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-client-connection": ">=0.1.1-rc.1 <0.3.0",
+    "@deepseek-ai/dsh-host-apiproxy": ">=0.1.1-rc.1 <0.3.0",
+    "@deepseek-ai/dsh-skill": ">=0.1.1-rc.1 <0.3.0",
+    "@deepseek-ai/dsh-tools": ">=0.1.1-rc.1 <0.3.0",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^26.2.0",
     "@types/react": "~18.3.1",

package/release-notes.md

@@ -1,5 +1,47 @@
 # Release Notes — @max-null/dsh-skill-mcp-center
 
+## 0.5.3 (2026-10-02)
+
+### 修复
+
+- **Windows 下技能列表整体为空**。`~/.dsh/skills` 下的条目是目录 junction 或符号
+  链接时，`scanSkillRoot()` 拿 `Dirent.isDirectory()` 当形态判据——而 Dirent 是
+  lstat 语义，junction 报 `isDirectory() === false` / `isSymbolicLink() === true`，
+  于是 `skillPathFor()` 返回 null，每个链接型技能在 `continue` 处被丢弃。技能本身
+  完好可读，只是扫不到，面板上表现为列表为空。
+
+  判据改为**分层**：Dirent 能明确作答时直接采信（真目录走 `isDirectory()`、真文件
+  走 `isFile()`），只有链接与文件系统报 `DT_UNKNOWN` 的形态才跟随一次 `stat`。真
+  目录因此仍是零额外系统调用。断链在 `stat` 处失败即跳过，同根其它技能不受影响。
+  这不是 Windows 专用分支——junction 与 POSIX 符号链接走同一条路。
+
+### 兼容性
+
+- 无接口变更：`listSkills()` 的出入参、端点集合与请求信封均未改，只是扫描判据放宽。
+  新增 5 条单测覆盖真目录 / `.md` 文件 / 链接指向目录 / 断链 / 非技能条目。
+
+## 0.5.2 (2026-09-29)
+
+### 变更
+
+- 放宽 `@deepseek-ai/dsh-*` 的版本范围：`peerDependencies` 与 `devDependencies` 中的
+  `dsh-client-connection`、`dsh-host-apiproxy`、`dsh-skill`、`dsh-tools` 由 `^0.1.1-rc.1`
+  改为 `>=0.1.1-rc.1 <0.3.0` —— 保留下限、只放宽上界，旧内核（0.1.7-rc.2）仍然满足。
+
+### 为什么
+
+- 内核侧逐个检查插件 `peerDependencies` 里的每个 `@deepseek-ai/*` 声明，判据是标准 semver：
+  `semver.satisfies(runtimeVersion, requirement, { includePrerelease: true })`。
+- `^0.1.1-rc.1` 展开为 `>=0.1.1-rc.1 <0.2.0-0`，对 `0.2.0-rc.1` 判 **false**；判定失败的插件
+  会被**静默跳过**——不进 fiber graph，也不出现在「did not activate」列表里，用户侧的表现
+  是「插件装了却毫无反应」，没有任何日志可查。
+- `>=0.1.1-rc.1 <0.3.0` 在 semver 7.7.4 下对 `0.1.7-rc.2` 与 `0.2.0-rc.1` 均判 true（已实测）。
+
+### 兼容性
+
+- 无运行时行为变更：端点集合、请求体、响应信封与代码路径均未改，只是依赖声明放宽。
+- 面板端与宿主端仍需同版本（传输策略见 0.5.1）。
+
 ## 0.5.1 (2026-09-17)
 
 ### 修复