@theronap/cortex-mcp 0.9.85 → 0.9.86

package/lib/skills.mjs

@@ -261,7 +261,10 @@ export async function syncOrgSkills(opts = {}) {
 
   const { install, skipped } = planOrgInstall(served, bundledSkills().map((s) => s.name))
   summary.skipped = skipped
-  const prevNames = Array.isArray(cache?.installed) ? cache.installed : []
+  // Only a cache written by this personal-sync implementation owns local files it may retire. An
+  // older/cache-shaped-alike file is not proof of ownership; treating it as one deleted source
+  // skills that had not yet been accepted by the server. First sync after an upgrade is additive.
+  const prevNames = cache?.version === 1 && Array.isArray(cache?.installed) ? cache.installed : []
   const currentNames = install.map((s) => s.name)
   const removeNames = prevNames.filter((n) => !currentNames.includes(n))
 
@@ -345,7 +348,7 @@ export async function syncPersonalSkills(opts = {}) {
   }
   if (summary.source === 'server') {
     ensureDir(dirname(PERSONAL_CACHE))
-    writeFileSync(PERSONAL_CACHE, JSON.stringify({ fetchedAt: new Date().toISOString(), skills: served, installed: currentNames }, null, 2))
+    writeFileSync(PERSONAL_CACHE, JSON.stringify({ version: 1, fetchedAt: new Date().toISOString(), skills: served, installed: currentNames }, null, 2))
   }
 
   const changed = [...new Set([...summary.installed, ...summary.repaired])]
@@ -452,9 +455,23 @@ export async function runSkillsPush(argv) {
 
 export function discoverSkillFiles(root) {
   if (!root || !existsSync(root)) return []
-  return readdirSync(root, { withFileTypes: true })
-    .filter((entry) => entry.isDirectory() && existsSync(join(root, entry.name, 'SKILL.md')))
-    .map((entry) => join(root, entry.name, 'SKILL.md'))
+  const out = []
+  const walk = (dir) => {
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+      if (!entry.isDirectory() || entry.name.startsWith('.')) continue
+      const child = join(dir, entry.name)
+      const skill = join(child, 'SKILL.md')
+      if (existsSync(skill)) out.push(skill)
+      walk(child)
+    }
+  }
+  walk(root)
+  // Prefer a direct skill over an equally named nested vendor copy. This gives a user override
+  // priority while still discovering bundled sub-skills such as gstack's long-form workflows.
+  return out.sort((a, b) => {
+    const depth = (path) => path.slice(root.length).split('/').filter(Boolean).length
+    return depth(a) - depth(b) || a.localeCompare(b)
+  })
 }
 
 // `skills import --from claude` is the deliberate migration command. It uploads only the user's

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/cortex-mcp",
-  "version": "0.9.85",
+  "version": "0.9.86",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {