@michengai/dsh-skills-manager 0.1.37 → 0.1.40

package/CHANGELOG.md

@@ -6,11 +6,19 @@ The five most recent published versions are listed below.
 
 ## Unreleased
 
+## 0.1.40 - 2026-09-05
+
+- 修复禁用的外部同名技能遮蔽已启用 DSH 技能的问题，统一管理页与运行时的赢家选择。
+- 冲突时为用户和项目级原生赢家提供作用域候选，保留禁用阻断、工作区隔离及来源文件不变性。
+- 显式声明作用域注册表回归所需的开发依赖，确保 CI 干净安装可执行完整检查。
+
+## 0.1.38 - 2026-09-03
+
+- Added Cursor as a read-only, locally toggleable Skill source at `%USERPROFILE%\.cursor\skills`, with `DSH_CURSOR_HOME` override and state-file migration.
+
 ## 0.1.37 - 2026-09-03
 
-- Updated the direct DSH development dependencies from `0.1.2-alpha.5` to `0.1.2-rc.1` without changing the published peer-dependency contract.
-- Rebased the dependency-version regression assertion on RC.1 and verified the complete package gate.
-- Verified plugin registration, the Skill provider, SessionStore access, and the HTTP state endpoint against the real RC.1 Cordis host services.
+- Added compatibility with DeepSeek Harness `0.1.2-rc.1`.
 
 ## 0.1.36 - 2026-09-03
 

package/CHANGELOG.zh-CN.md

@@ -6,11 +6,19 @@
 
 ## 未发布
 
+## 0.1.40 - 2026-09-05
+
+- 修复禁用的外部同名技能遮蔽已启用 DSH 技能的问题，统一管理页与运行时的赢家选择。
+- 冲突时为用户和项目级原生赢家提供作用域候选，保留禁用阻断、工作区隔离及来源文件不变性。
+- 显式声明作用域注册表回归所需的开发依赖，确保 CI 干净安装可执行完整检查。
+
+## 0.1.38 - 2026-09-03
+
+- 新增 Cursor 用户级只读技能来源，默认读取 `%USERPROFILE%\.cursor\skills`，支持 `DSH_CURSOR_HOME` 覆盖，并兼容迁移既有状态文件。
+
 ## 0.1.37 - 2026-09-03
 
-- 将直接 DSH 开发依赖从 `0.1.2-alpha.5` 升级至 `0.1.2-rc.1`，不改动已发布的 peer 依赖兼容范围。
-- 将依赖版本回归断言同步到 RC.1，并完成完整发布门禁验证。
-- 使用真实 RC.1 Cordis 宿主服务验证插件注册、Skill Provider、SessionStore 访问和 HTTP 状态接口。
+- 支持 DeepSeek Harness `0.1.2-rc.1`。
 
 ## 0.1.36 - 2026-09-03
 

package/README.md

@@ -22,7 +22,7 @@
 
 ## Features
 
-- Discover and load user-level skills from `.agents`, CC Switch, Codex, Claude, Gemini, and OpenCode into DSH.
+- Discover and load user-level skills from `.agents`, CC Switch, Codex, Claude, Gemini, OpenCode, and Cursor into DSH.
 - Discover project-level `.dsh/skills` and `.agents/skills` from active Session workspaces, grouped by project; every valid Skill can be enabled or disabled through non-mutating local policy.
 - Persist every per-Skill toggle under `$DSH_HOME/skills-manager/state.json` without rewriting any source Skill file.
 - Inspect Markdown bodies, frontmatter, invocation state, duplicate shadowing, and format diagnostics in a source-first UI.
@@ -153,6 +153,7 @@ Escape closes only the frontmost upload or confirmation dialog and leaves Settin
 | `$DSH_HOME\skills` | Yes | Manager state only | Yes | Moves to Trash |
 | `$DSH_AGENTS_HOME\skills` | Yes | Manager state only | No | No |
 | `~\.cc-switch\skills` | Yes, enabled by default | Manager state only | No | No |
+| `%USERPROFILE%\.cursor\skills` (or `$DSH_CURSOR_HOME\skills`) | Yes | Manager state only | No | No |
 | `~/.codex/skills`, `~/.claude/skills`, `~/.gemini/skills`, `~/.config/opencode/skills` | Yes | Manager state only | No | No |
 | `<project>/.dsh/skills` | Yes, for active Session workspaces | Manager state only | Create in Settings | Moves to Trash and restores to the original project |
 | `<project>/.agents/skills` | Yes, for active Session workspaces | Manager state only | No | No |

package/README.zh-CN.md

@@ -22,7 +22,7 @@
 
 ## 功能概览
 
-- 自动发现并把 `.agents`、CC Switch、Codex、Claude、Gemini 和 OpenCode 的用户级技能真正加载进 DSH。
+- 自动发现并把 `.agents`、CC Switch、Codex、Claude、Gemini、OpenCode 和 Cursor 的用户级技能真正加载进 DSH。
 - 从活动 Session 工作区发现项目级 `.dsh/skills` 与 `.agents/skills` 并按项目分组；所有有效 Skill 都可通过不改源文件的本地策略启停。
 - 所有逐 Skill 启停都只写入 `$DSH_HOME\skills-manager\state.json`，绝不改写任何来源 Skill 文件。
 - 按来源折叠、搜索和筛选，并查看技能正文、frontmatter、调用状态、重名遮蔽与格式诊断。
@@ -153,6 +153,7 @@ dsh --profile web --dump-config
 | `$DSH_HOME\skills` | 支持 | 仅写 manager 状态 | 支持 | 进入回收站 |
 | `$DSH_AGENTS_HOME\skills` | 支持 | 仅写 manager 状态 | 不支持 | 不支持 |
 | `~\.cc-switch\skills` | 支持，默认开启 | 仅写 manager 状态 | 不支持 | 不支持 |
+| `%USERPROFILE%\.cursor\skills`（或 `$DSH_CURSOR_HOME\skills`） | 支持 | 仅写 manager 状态 | 不支持 | 不支持 |
 | `~/.codex/skills`、`~/.claude/skills`、`~/.gemini/skills`、`~/.config/opencode/skills` | 支持 | 仅写 manager 状态 | 不支持 | 不支持 |
 | `<project>/.dsh/skills` | 支持活动 Session 工作区 | 仅写 manager 状态 | 设置页支持创建 | 进入回收站并恢复到原项目 |
 | `<project>/.agents/skills` | 支持活动 Session 工作区 | 仅写 manager 状态 | 不支持 | 不支持 |

package/lib/client.js

@@ -186,7 +186,8 @@
           "root.codex": "Codex",
           "root.claude": "Claude",
           "root.gemini": "Gemini",
-          "root.opencode": "OpenCode"
+          "root.opencode": "OpenCode",
+          "root.cursor": "Cursor"
         },
         en: {
           "title": "Skills",
@@ -364,7 +365,8 @@
           "root.codex": "Codex",
           "root.claude": "Claude",
           "root.gemini": "Gemini",
-          "root.opencode": "OpenCode"
+          "root.opencode": "OpenCode",
+          "root.cursor": "Cursor"
         }
       };
       var CSS = `

package/lib/core.js

@@ -41,7 +41,8 @@ function userRoots() {
     { key: "codex", path: join(process.env.DSH_CODEX_HOME || join(homedir(), ".codex"), "skills"), label: "Codex", mutable: false, toggleable: true, native: false, rank: 520 },
     { key: "claude", path: join(process.env.DSH_CLAUDE_HOME || join(homedir(), ".claude"), "skills"), label: "Claude", mutable: false, toggleable: true, native: false, rank: 530 },
     { key: "gemini", path: join(process.env.DSH_GEMINI_HOME || join(homedir(), ".gemini"), "skills"), label: "Gemini", mutable: false, toggleable: true, native: false, rank: 540 },
-    { key: "opencode", path: join(process.env.DSH_OPENCODE_HOME || join(homedir(), ".config", "opencode"), "skills"), label: "OpenCode", mutable: false, toggleable: true, native: false, rank: 550 }
+    { key: "opencode", path: join(process.env.DSH_OPENCODE_HOME || join(homedir(), ".config", "opencode"), "skills"), label: "OpenCode", mutable: false, toggleable: true, native: false, rank: 550 },
+    { key: "cursor", path: join(process.env.DSH_CURSOR_HOME || join(homedir(), ".cursor"), "skills"), label: "Cursor", mutable: false, toggleable: true, native: false, rank: 560 }
   ];
 }
 function projectIdentity(path) {
@@ -647,6 +648,9 @@ function migrateManagerStateDocument(value) {
   if (value.sources && typeof value.sources === "object" && !Array.isArray(value.sources) && value.sources.ccswitch === void 0) value.sources.ccswitch = true;
   if (value.disabledSkills && typeof value.disabledSkills === "object" && !Array.isArray(value.disabledSkills) && value.disabledSkills.ccswitch === void 0) value.disabledSkills.ccswitch = [];
   if (value.enabledSkills && typeof value.enabledSkills === "object" && !Array.isArray(value.enabledSkills) && value.enabledSkills.ccswitch === void 0) value.enabledSkills.ccswitch = [];
+  if (value.sources && typeof value.sources === "object" && !Array.isArray(value.sources) && value.sources.cursor === void 0) value.sources.cursor = true;
+  if (value.disabledSkills && typeof value.disabledSkills === "object" && !Array.isArray(value.disabledSkills) && value.disabledSkills.cursor === void 0) value.disabledSkills.cursor = [];
+  if (value.enabledSkills && typeof value.enabledSkills === "object" && !Array.isArray(value.enabledSkills) && value.enabledSkills.cursor === void 0) value.enabledSkills.cursor = [];
   return value;
 }
 function normalizeManagerState(value) {
@@ -1378,52 +1382,35 @@ async function listProviderCandidates(options = {}) {
   const candidates = [];
   const user = userRoots();
   const userScans = await scanDeduplicatedUserRoots(user);
-  for (const root of user) {
-    const scanned = userScans.get(root.key);
-    for (const entry of scanned.entries) {
-      if (!entry.loadable) continue;
-      const policy = effectiveSkillPolicy(policyResult, root, entry);
-      const needsOverlay = root.key !== "dsh" || policy.override !== void 0 || !entry.invocationPolicyValid || policyResult.writable === false;
-      if (!needsOverlay) continue;
-      candidates.push({
-        name: entry.declaredName,
-        description: entry.description,
-        invocation: { modelInvocable: policy.modelInvocable, userInvocable: policy.userInvocable },
-        provider: "dsh-skills-manager-external",
-        source: root.key === "dsh" ? "user-dsh" : `agent-${root.key}`,
-        rank: root.key === "dsh" ? USER_DSH_POLICY_RANK : entry.providerRank ?? root.rank,
-        locator: { rootKey: root.key, entryName: entry.name, path: entry.docPath, realEntryPath: entry.realEntryPath, realDocPath: entry.realDocPath },
-        resourceBase: { kind: "directory", path: entry.kind === "bundle" ? entry.realEntryPath : root.path },
-        path: entry.docPath,
-        metadata: { dshSkillsManager: { root: root.key, readOnly: !root.mutable, sourceReadOnly: !root.mutable, policyOnly: root.key === "dsh" } }
-      });
-    }
-  }
+  const items = user.flatMap((root) => userScans.get(root.key).entries.map((entry) => ({ root, entry })));
   const cwd = options && typeof options.cwd === "string" ? options.cwd : void 0;
   if (cwd) {
     const roots = await projectRoots([cwd]);
     for (const root of roots) {
       const scanned = await scanEntries(root.path);
-      for (const entry of scanned.entries) {
-        if (!entry.loadable) continue;
-        const policy = effectiveSkillPolicy(policyResult, root, entry);
-        const needsOverlay = policy.override !== void 0 || !entry.invocationPolicyValid || policyResult.writable === false;
-        if (!needsOverlay) continue;
-        candidates.push({
-          name: entry.declaredName,
-          description: entry.description,
-          invocation: { modelInvocable: policy.modelInvocable, userInvocable: policy.userInvocable },
-          provider: "dsh-skills-manager-external",
-          source: root.kind,
-          rank: root.rank - 1,
-          locator: { rootKey: root.key, entryName: entry.name, path: entry.docPath, realEntryPath: entry.realEntryPath, realDocPath: entry.realDocPath },
-          resourceBase: { kind: "directory", path: entry.kind === "bundle" ? entry.realEntryPath : root.path },
-          path: entry.docPath,
-          metadata: { dshSkillsManager: { root: root.key, readOnly: !root.mutable, sourceReadOnly: !root.mutable, policyOnly: true } }
-        });
-      }
+      for (const entry of scanned.entries) items.push({ root, entry });
     }
   }
+  for (const group of groupLoadableSkillsByName(items).values()) {
+    const { root, entry } = group[0];
+    const project = root.scope === "project";
+    const policyOnly = project || root.key === "dsh";
+    const policy = effectiveSkillPolicy(policyResult, root, entry);
+    const needsOverlay = !policyOnly || group.length > 1 || policy.override !== void 0 || !entry.invocationPolicyValid || policyResult.writable === false;
+    if (!needsOverlay) continue;
+    candidates.push({
+      name: entry.declaredName,
+      description: entry.description,
+      invocation: { modelInvocable: policy.modelInvocable, userInvocable: policy.userInvocable },
+      provider: "dsh-skills-manager-external",
+      source: project ? root.kind : root.key === "dsh" ? "user-dsh" : `agent-${root.key}`,
+      rank: project ? root.rank - 1 : root.key === "dsh" ? USER_DSH_POLICY_RANK : entry.providerRank ?? root.rank,
+      locator: { rootKey: root.key, entryName: entry.name, path: entry.docPath, realEntryPath: entry.realEntryPath, realDocPath: entry.realDocPath },
+      resourceBase: { kind: "directory", path: entry.kind === "bundle" ? entry.realEntryPath : root.path },
+      path: entry.docPath,
+      metadata: { dshSkillsManager: { root: root.key, readOnly: !root.mutable, sourceReadOnly: !root.mutable, policyOnly } }
+    });
+  }
   return candidates;
 }
 async function getProviderSkill(candidate, options = {}) {
@@ -1460,18 +1447,24 @@ async function getProviderSkill(candidate, options = {}) {
 function canonicalSkillName(item) {
   return item.entry.declaredName || item.entry.name;
 }
-function markWinners(items, options = {}) {
-  const winners = /* @__PURE__ */ new Map();
+function groupLoadableSkillsByName(items) {
+  const groups = /* @__PURE__ */ new Map();
   for (const item of [...items].sort((a, b) => a.root.rank - b.root.rank)) {
-    const canonicalName = canonicalSkillName(item);
     if (!item.entry.loadable) continue;
-    if (!winners.has(canonicalName)) {
-      winners.set(canonicalName, item);
-    } else if (options.markShadowed !== false) {
-      item.view.shadowedBy = { root: winners.get(canonicalName).root.key, name: winners.get(canonicalName).entry.name };
-    }
+    const name = canonicalSkillName(item);
+    const group = groups.get(name) || [];
+    group.push(item);
+    groups.set(name, group);
   }
-  for (const [canonicalName, winner] of winners) {
+  return groups;
+}
+function markWinners(items, options = {}) {
+  const winners = /* @__PURE__ */ new Map();
+  for (const [canonicalName, [winner, ...shadowed]] of groupLoadableSkillsByName(items)) {
+    winners.set(canonicalName, winner);
+    if (options.markShadowed !== false) {
+      for (const item of shadowed) item.view.shadowedBy = { root: winner.root.key, name: winner.entry.name };
+    }
     if (options.markWinner !== false) winner.view.winner = true;
     winner.view.enabled = winner.policy.enabled;
     winner.view.canonicalName = canonicalName;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@michengai/dsh-skills-manager",
-  "version": "0.1.37",
+  "version": "0.1.40",
   "description": "NPM-installable DSH Web plugin for safely loading and managing skills across DSH and common local Agents.",
   "license": "Apache-2.0",
   "repository": {
@@ -64,11 +64,13 @@
     "react": "^18.2.0"
   },
   "devDependencies": {
+    "@deepseek-ai/cordis": "4.0.2",
     "@deepseek-ai/dsh-client-locale": "0.1.2-rc.1",
     "@deepseek-ai/dsh-client-ui-primitives": "0.1.2-rc.1",
     "@deepseek-ai/dsh-client-ui-slots": "0.1.2-rc.1",
     "@deepseek-ai/dsh-host-webserver": "0.1.2-rc.1",
     "@deepseek-ai/dsh-session": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-scope": "0.1.2-rc.1",
     "@deepseek-ai/dsh-skill": "0.1.2-rc.1",
     "@deepseek-ai/dsh-tools": "0.1.2-rc.1",
     "@deepseek-ai/dsh-web-app": "0.1.2-rc.1",