@michengai/dsh-skills-manager 0.1.49 → 0.1.50

package/CHANGELOG.md

@@ -4,6 +4,10 @@
 
 The five most recent published versions are listed below.
 
+## 0.1.50 - 2026-09-12
+
+- Fix project skills being skipped in non-Git workspaces. When no `.git` ancestor exists, use the current session cwd as the project root so skills can be viewed and toggled without running `git init`.
+
 ## 0.1.49 - 2026-09-12
 
 - Add Copilot support for global `~/.copilot/skills` and project `.github/skills`, and expand project sources for common agents. The project tab follows only the current session; direct project-management API calls must include its ID in `x-dsh-skills-session`.
@@ -25,9 +29,3 @@ The five most recent published versions are listed below.
 
 - Upgrade official development dependencies to `0.1.5-rc.1` and explicitly support Host versions `0.1.0-rc.8`, `0.1.1-rc.2`, `0.1.2-rc.1`, and `0.1.5-rc.1`; remove the retired `dsh-client-runtime` peer and client loading metadata to avoid pulling in the legacy runtime.
 - Add real-Host compatibility tests across all four versions for Agent-scoped skill reads, enable/disable policy refresh, and source-file preservation; retain existing skill management and source policies.
-
-## 0.1.45 - 2026-09-09
-
-- Stop scanning resources inside ordinary skill bundles and skip `node_modules`, while retaining nested discovery beside a root skill. Hide overlapping project Agent roots so they cannot bypass user disable policies.
-- Read-only user and project Agent sources now discover nested skills and follow external directory symlinks and Windows junctions by default, including linked roots. Discovery has cycle, depth, and entry limits.
-- Keep list, detail, provider, and local enable/disable policies consistent across differently named aliases. Writable DSH roots and import/delete safeguards remain unchanged.

package/CHANGELOG.zh-CN.md

@@ -4,6 +4,10 @@
 
 以下记录最近发布的五个版本。
 
+## 0.1.50 - 2026-09-12
+
+- 修复非 Git 工作区的项目技能被跳过的问题。找不到 `.git` 祖先时，使用当前会话 cwd 作为项目根，无需执行 `git init` 即可查看和启停项目技能。
+
 ## 0.1.49 - 2026-09-12
 
 - 新增 Copilot 全局 `~/.copilot/skills` 和项目 `.github/skills` 支持，扩展常见 Agent 的项目来源。项目页仅跟随当前会话；直接调用项目管理接口时需携带 `x-dsh-skills-session` 会话 ID。
@@ -25,9 +29,3 @@
 
 - 官方开发依赖升级至 `0.1.5-rc.1`，peer 精确兼容 `0.1.0-rc.8`、`0.1.1-rc.2`、`0.1.2-rc.1`、`0.1.5-rc.1`；移除已退役的 `dsh-client-runtime` peer 与客户端加载声明，避免引入旧运行时。
 - 新增四版本真实宿主兼容测试，覆盖 Agent 作用域技能读取、启停权限刷新与源文件保护；技能管理与来源策略保持原有行为。
-
-## 0.1.45 - 2026-09-09
-
-- 修复 bundle 内部资源耗尽扫描预算的问题：普通 bundle 作为叶子并跳过 `node_modules`，根技能仍允许嵌套发现。重叠的项目 Agent 来源现在隐藏，防止绕过用户停用策略。
-- 用户级只读来源和项目 Agent 来源默认递归发现技能，支持外部目录软链接、Windows junction 和技能根链接；扫描具备循环、深度和数量限制。
-- 列表、详情、Provider 与本地启停策略统一处理不同名称的分发入口；可写 DSH 和导入、删除防护保持不变。

package/README.md

@@ -63,7 +63,7 @@ For a ready-to-use workbench, download [DSH Codex Desktop](https://github.com/Mi
 
 - A working DeepSeek Harness Web installation with `dsh` available in PowerShell.
 - Examples use the `web` profile; replace it with the target profile.
-- Plugin `0.1.49` is tested with DeepSeek Harness `0.1.0-rc.8`, `0.1.1-rc.2`, `0.1.2-rc.1`, `0.1.5-rc.1`, `0.1.5-rc.2`. Development dependencies remain pinned to `0.1.5-rc.2`; other Host versions are not implicitly supported.
+- Plugin `0.1.50` is tested with DeepSeek Harness `0.1.0-rc.8`, `0.1.1-rc.2`, `0.1.2-rc.1`, `0.1.5-rc.1`, `0.1.5-rc.2`. Development dependencies remain pinned to `0.1.5-rc.2`; other Host versions are not implicitly supported.
 - Source installation and development require Node.js `^22.19.0 || >=24.0.0`. npm installation does not require running `npm install` in an arbitrary directory.
 
 ## Installation
@@ -130,7 +130,7 @@ Escape closes only the frontmost upload or confirmation dialog and leaves Settin
 - `<project>/skills` is labeled “Project Skills”: it supports OpenClaw workspace skills without assuming Agent ownership. Existing toggle policies remain compatible.
 - The project tab follows the current session without a project selector. Requests carry its ID in `x-dsh-skills-session`; the server derives project roots only from that session’s `cwd`. Missing or unknown sessions never fall back to other sessions, and clients cannot nominate an arbitrary workspace path.
 - Enable/disable applies only to the selected source copy. The highest-priority copy not disabled in the manager is used: disabling a project copy falls back to another enabled project copy or a global copy. Disabling a global copy does not disable project copies. Only when all copies are disabled does the manager block the skill. Disabled rows identify the global or project source currently taking over; frontmatter invocation restrictions remain enforced.
-- Project sources follow DSH's nearest-`.git` root convention and rank order (`project-dsh` 100, `project-agents` 200, then other project sources 210–320, then user DSH 400, shared Agents 450, and other user sources 500–640). The manager re-scans for each state/detail request. Explicit project policy is enforced by workspace-scoped rank overlays; user DSH policy uses rank 399. With no override, DSH's official provider remains the owner. Toggle writes are limited to manager state; project file writes occur only for explicit create/Trash/restore actions under `.dsh/skills`.
+- Project sources follow DSH's nearest-`.git` root convention (falling back to the current Session cwd when no `.git` ancestor exists) and rank order (`project-dsh` 100, `project-agents` 200, then other project sources 210–320, then user DSH 400, shared Agents 450, and other user sources 500–640). The manager re-scans for each state/detail request. Explicit project policy is enforced by workspace-scoped rank overlays; user DSH policy uses rank 399. With no override, DSH's official provider remains the owner. Toggle writes are limited to manager state; project file writes occur only for explicit create/Trash/restore actions under `.dsh/skills`.
 - Trash falls back to copy-then-hide when a project and `$DSH_HOME` are on different volumes; restore uses the same guarded cross-volume path in reverse.
 - Project Trash entries retain their original opaque source identity. Restore is allowed only when the original project matches the current session’s project; the client cannot nominate a replacement path.
 - Project writes reject linked `.dsh` or `.dsh/skills` directories so a repository cannot redirect creation, deletion, or restore outside its own project root.

package/README.zh-CN.md

@@ -63,7 +63,7 @@ DSH 本地技能移入回收站前需要确认；永久删除前仍可恢复：
 
 - 已可正常运行 DeepSeek Harness Web，且可在 PowerShell 中使用 `dsh`。
 - 以下示例使用 `web` profile；请替换为实际目标 profile。
-- `0.1.49` 已验证兼容 DeepSeek Harness `0.1.0-rc.8`、`0.1.1-rc.2`、`0.1.2-rc.1`、`0.1.5-rc.1`、`0.1.5-rc.2`；开发依赖固定使用 `0.1.5-rc.2`，不自动声明支持其他版本。
+- `0.1.50` 已验证兼容 DeepSeek Harness `0.1.0-rc.8`、`0.1.1-rc.2`、`0.1.2-rc.1`、`0.1.5-rc.1`、`0.1.5-rc.2`；开发依赖固定使用 `0.1.5-rc.2`，不自动声明支持其他版本。
 - 从源码安装或二次开发需要 Node.js `^22.19.0 || >=24.0.0`；仅从 npm 安装无需在任意目录执行 `npm install`。
 
 ## 安装
@@ -130,7 +130,7 @@ dsh --profile web --dump-config
 - 根目录 `<project>/skills` 显示为“项目 Skills”，可兼容 OpenClaw workspace 技能，但不据此判断所属 Agent；现有启停策略保持兼容。
 - 项目页只跟随当前会话，不提供项目选择框。请求通过 `x-dsh-skills-session` 携带当前会话 ID，后端只从该会话的 `cwd` 推导项目根；缺失或失效时不回退到其他会话，客户端不能指定任意工作区路径。
 - 启停仅影响所选来源的副本。管理器在未被停用的副本中按优先级选择：停用项目副本后可使用其他已启用项目副本或全局副本；停用全局副本不影响项目副本。全部副本停用时才阻断该技能；停用行会标明当前接管的全局或项目来源，frontmatter 自带的调用限制仍然生效。
-- 项目来源遵循 DSH 最近 `.git` 项目根和固定优先级（`project-dsh` 100、`project-agents` 200，其余项目来源 210–320，之后为全局 DSH 400、公共 Agent 450、其他全局来源 500–640）。管理器每次读取状态或详情时重新扫描；显式项目策略通过 workspace 作用域 rank 覆盖候选执行，用户 DSH 策略使用 rank 399；没有覆盖时仍由 DSH 官方 provider 负责。启停只写 manager 状态，项目文件写入仅发生在用户明确执行 `.dsh/skills` 创建、回收或恢复时。
+- 项目来源遵循 DSH 最近 `.git` 项目根（找不到 `.git` 祖先时使用当前会话 cwd）和固定优先级（`project-dsh` 100、`project-agents` 200，其余项目来源 210–320，之后为全局 DSH 400、公共 Agent 450、其他全局来源 500–640）。管理器每次读取状态或详情时重新扫描；显式项目策略通过 workspace 作用域 rank 覆盖候选执行，用户 DSH 策略使用 rank 399；没有覆盖时仍由 DSH 官方 provider 负责。启停只写 manager 状态，项目文件写入仅发生在用户明确执行 `.dsh/skills` 创建、回收或恢复时。
 - 当项目与 `$DSH_HOME` 位于不同磁盘时，回收站会降级为“复制后在源盘原子隐藏”；恢复使用反向的同一安全流程。
 - 项目回收站条目保存原始不透明来源身份。仅当原项目与当前会话的项目一致时才允许恢复；客户端不能指定替代路径。
 - 项目写入会拒绝链接形式的 `.dsh` 或 `.dsh/skills` 目录，避免仓库把创建、删除或恢复重定向到项目根之外。

package/lib/core.js

@@ -295,7 +295,7 @@ async function nearestProjectRoot(cwd) {
     } catch {
     }
     const parent = dirname(current);
-    if (parent === current) return null;
+    if (parent === current) return { root: start, cwd: start };
     current = parent;
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@michengai/dsh-skills-manager",
-  "version": "0.1.49",
+  "version": "0.1.50",
   "description": "NPM-installable DSH Web plugin for safely loading and managing skills across DSH and common local Agents.",
   "license": "Apache-2.0",
   "repository": {