@x1a0f3n9/dsh-client-ui-skill 0.1.5-rc.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 DeepSeek
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.i18n.yaml

@@ -0,0 +1,6 @@
+# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
+# side as of the last confirmed-consistent state. Both languages carry equal authority;
+# after editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write packages/client/ui-skill/README.md
+README.md: a1e9e7047f102f2610160905727450833b540082
+README.zh.md: d7669b11fc7249c857e20f3c52f93b8bfd214281

package/README.md

@@ -0,0 +1,112 @@
+---
+description: "Web skill references and the dedicated skill tool row for the dsh web client: the /-triggered skill source and the skill call card."
+kind: "package-reference"
+---
+
+# @x1a0f3n9/dsh-client-ui-skill
+
+English | [中文](README.zh.md)
+
+## Summary
+
+`dsh-client-ui-skill` lets users invoke a skill by choosing it from the `/` suggestions or typing `/name` directly. The same literal command loads the skill consistently from the Web composer, TUI, and ACP, while a name shared with a host command continues to resolve as that command. Skill calls appear in the conversation as expandable `Instructions` cards whose settled contents remain stable when the installed skill catalog changes.
+
+## Table of Contents
+
+- [Use this package](#use-this-package)
+- [Understand the implementation](#understand-the-implementation)
+- [Further Exploration](#further-exploration)
+- [Model Experience](#model-experience)
+- [Known Limitations and Deferred Work](#known-limitations-and-deferred-work)
+- [Dev Note](#dev-note)
+
+-----
+
+<a id="use-this-package"></a>
+## Use this package
+
+Type `/` in the composer and pick a skill from the suggestions, or type `/name` directly; the sent message carries the literal text, and the host loads the skill the same way for a menu pick or a hand-typed token. A name shared with a host command still resolves to the command — adjudication claims the line client-side before it ever becomes a prompt.
+
+### What the source offers
+
+Ordinary-session candidates come from the `skills/list` Remote; the host serves every user-invocable skill, and a `modelInvocable: false` entry (a `disable-model-invocation` skill, whose only entry point is this path) wears the user-only marker as a description prefix in the active language. Results rank through the `/` menu's shared name ranker, `rankByName` from ui-primitives: the query matches a case-insensitive ordered subsequence of the skill name, prefix hits rank first, and ties keep the host order ([ranking decision](../../../.agents/notes/archived/feature/2026-08-04-web-slash-command-fuzzy-discovery.md)). A failed `skills/list` call is logged and folded into a silent menu-group drop — the menu shows only pending/ready states.
+
+### The skill tool row
+
+A collapsed row renders the skill glyph, `Skill` title, and requested skill name; running calls carry the transcript shimmer, failures replace the name with the first error line, and interrupted calls use the warning state. A settled row expands into a bounded `Instructions` card containing the exact durable tool output, with the standard trajectory `Inspect` affordance when available. The row derives its name, lifecycle, and body only from the frozen call/result slice supplied by ui-tool, never from the current catalog, so replay stays stable when installed skills or their descriptions change.
+
+Hovering over `/name` highlights the entire reference. Clicking a known skill opens its provider-supplied `SKILL.md` path in the right Sidebar while keeping the token editable. An uncached click shares the per-Session catalog fetch and opens when it completes, retaining the clicked Session address. Preset changes, connection resets, and plugin disposal cancel pending previews; a later click fetches the current catalog again. Skills without a file path remain invocable but have no file preview.
+
+-----
+
+<a id="understand-the-implementation"></a>
+## Understand the implementation
+
+<details>
+<summary>Implementation internals — click to expand</summary>
+
+The source implements no adjudication hooks and no reference codec: the pick lands literal text and the prompt ships the same literal, so determinism lives host-side ([slash pipeline note](../../../.agents/notes/archived/architecture/2026-07-25-web-input-machine-and-slash-pipeline.md)).
+
+### Candidate flow
+
+Catalogs cache per ordinary session with a single-flight fetch; the scope-birth `warm` hook prewarms the session's entry, the forwarded `agent-preset/selected` owner event drops that one session's entry (the catalog belongs to the preset, and a blank session may switch after the warm), and `connection/reset` clears everything. Catalog-addressed continuable children resolve no skill candidates locally because the existing skill RPC requires an attached session; viewing their persisted history must not activate them. The list RPC rides the plugin's root-context connection captured at registration; draft chip visuals derive from the `lexicon` scan.
+
+### Registration
+
+The `/client` exports are the plugin body (`apply`/`inject`) only; the source object is internal to the registration effect. The tool row registers the `skill` wire name in ui-tool's keyed `tool.call.toolview` slot.
+
+</details>
+
+-----
+
+<a id="further-exploration"></a>
+## Further Exploration
+
+These pages cover the input machinery, the tool row host, and the host-side skill tool.
+
+- [ui-input-trigger](../ui-input-trigger/README.md) — the inline suggestion machinery the source registers into.
+- [ui-tool](../ui-tool/README.md) — the tool-call presentation layer hosting the `tool.call.toolview` slot.
+- [tool-skill](../../skill/tool-skill/README.md) — the host-side `skill` tool owning the pre-step gesture boundary.
+- [Web input machine and slash pipeline](../../../.agents/notes/archived/architecture/2026-07-25-web-input-machine-and-slash-pipeline.md) — how references and commands share the input machine.
+
+-----
+
+<a id="model-experience"></a>
+## Model Experience
+
+### User-explicit skill invocation
+
+#### What the model sees
+
+The user's message reaches the model verbatim, `/name` literal included. The host's pre-step boundary (`dsh-tool-skill`) then appends the canonical `<skill_content>` block — the same `renderSkillContent` output the `skill` tool returns — as injected instructions context at the end of that step's injections, closest to the model's answer. Loading is deterministic: the model receives the full body without being asked to call the `skill` tool, and the catalog tells it not to re-load an inline-injected skill.
+
+#### Token effect
+
+One invocation adds the rendered skill body to that turn as injected context — the same cost as the model loading the skill through the tool, paid unconditionally instead of at the model's discretion. Menu browsing and the candidate fetch add zero model tokens.
+
+#### KV Cache effect
+
+Append-only: the injected message lands after the reusable history prefix. This package never edits earlier request tokens.
+
+## Known Limitations and Deferred Work
+
+<a id="known-limitations-and-deferred-work"></a>
+
+
+These limits define where the reference and the row fall back to generic behavior; they are current package constraints.
+
+- **Result-only history pages use the generic row** — keyed dispatch needs the paired call in the runtime window; pagination that leaves the call outside has no tool identity. This client presentation feature does not extend the history wire contract to recover it.
+- **Text is the truth** — the reference is plain draft text; a hand-typed identical token is the same reference, and the host gesture boundary judges the sent text, not the menu interaction. Chip visuals derive from the lexicon scan; no occurrence identity, position tracking, or structured reference payload exists on the prompt wire.
+- **A menu opened before the prewarm settles** shows no skill candidates for that keystroke; the next keystroke re-polls the settled cache.
+
+<a id="dev-note"></a>
+### Dev Note
+
+<details>
+<summary>Working context for maintainers — click to expand</summary>
+
+None.
+
+</details>
+
+**Runtime invariant:** No companion is published. The slash source, locale dictionaries, and keyed toolview are registry-owned registrations whose disposal is proven by the HMR-safety spec. They emit no Cordis events and own no cross-plugin mutable state.

package/README.zh.md

@@ -0,0 +1,112 @@
+---
+description: "dsh Web 客户端的 skill 引用与专属 skill 工具行：/ 触发的 skill source 与 skill 调用卡片。"
+kind: "package-reference"
+---
+
+# @x1a0f3n9/dsh-client-ui-skill
+
+[English](README.md) | 中文
+
+## 概述
+
+`dsh-client-ui-skill` 让用户通过 `/` 建议选择或直接键入 `/name` 来调用 skill（技能）。同一条字面命令可以从 Web 编辑器、TUI 和 ACP（Agent Client Protocol）一致地加载 skill；如果名称与宿主命令相同，它仍会解析为该命令。skill 调用在对话中显示为可展开的 `Instructions` 卡片；即使已安装的 skill 目录发生变化，卡片落定后的内容仍保持稳定。
+
+## 目录
+
+- [使用本包](#use-this-package)
+- [理解实现](#understand-the-implementation)
+- [进一步探索](#further-exploration)
+- [模型体验](#model-experience)
+- [已知限制与延期工作](#known-limitations-and-deferred-work)
+- [开发备注](#dev-note)
+
+-----
+
+<a id="use-this-package"></a>
+## 使用本包
+
+在编辑器中输入 `/` 并从建议中选择 skill，或直接键入 `/name`；发出的消息携带字面文本，宿主对菜单 pick 与手动键入的 token 以同样方式加载 skill。与宿主命令同名的名称仍解析为命令——裁决在客户端把该行认领走，它根本不会成为提示词。
+
+### source 提供什么
+
+普通会话的候选来自 `skills/list` Remote；宿主提供每一个用户可调用的 skill，`modelInvocable: false` 的条目（即 `disable-model-invocation` skill，此路径是其唯一入口）会以当前语言把仅限用户标记作为描述前缀带上。结果经 `/` 菜单共享的名字排序器（ui-primitives 的 `rankByName`）排名：查询作为不区分大小写的有序子序列匹配 skill 名，前缀命中排最前，同分保持宿主顺序（[排名决策](../../../.agents/notes/archived/feature/2026-08-04-web-slash-command-fuzzy-discovery.md)）。`skills/list` 调用失败时会被记录并静默丢弃该菜单组——菜单只显示 pending／ready 状态。
+
+### skill 工具行
+
+收起的行显示 skill 图标、`Skill` 标题与请求加载的 skill 名称；运行中的调用带有 transcript（文本记录）的扫光效果，失败时用错误首行替换名称，中断的调用使用警告状态。已结算的行展开为一个尺寸受限的 `Instructions` 卡片，其中原样呈现持久化的工具输出；可用时还会提供标准轨迹的 `Inspect` 入口。该行的名称、生命周期与正文只派生自 ui-tool 提供的冻结调用／结果切片，绝不读取当前目录，因此即使已安装的 skill 或其描述发生变化，回放仍保持稳定。
+
+鼠标移入 `/name` 时，背景覆盖整个引用。点击已知 skill 会在右侧栏打开提供方给出的 `SKILL.md` 路径，同时保留文本的可编辑性。缓存未就绪时，点击复用该 Session 的目录请求，在完成后按点击时的 Session 地址打开预览。切换预设、重置连接和插件释放会取消待处理的预览；后续点击重新获取当前目录。没有文件路径的 skill 仍可调用，但没有文件预览。
+
+-----
+
+<a id="understand-the-implementation"></a>
+## 理解实现
+
+<details>
+<summary>实现细节——点击展开</summary>
+
+source 不实现任何裁决钩子，也没有引用 codec：pick 落下字面文本，发出的提示词中也是同一段字面文本，因此确定性在宿主侧（[slash 流水线笔记](../../../.agents/notes/archived/architecture/2026-07-25-web-input-machine-and-slash-pipeline.md)）。
+
+### 候选流程
+
+目录按普通会话缓存，拉取走 single-flight；scope 创建时的 `warm` 钩子预热该会话的缓存项，转发的 owner 事件 `agent-preset/selected` 丢弃该会话这一项（目录属于 preset，而空会话可能在预热之后才切换），`connection/reset` 清空全部缓存。由目录寻址的可继续 subagent 在客户端解析为没有 skill 候选，因为现有 skill RPC 要求会话已挂载；查看其持久化历史不得激活它。列表 RPC 使用插件注册时捕获的根上下文连接；草稿 chip 视觉由 `lexicon` 扫描派生。
+
+### 注册
+
+`/client` 导出接口只有插件主体（`apply`／`inject`）；source 对象是注册 effect 的内部实现。工具行把 `skill` wire 名称注册进 ui-tool 的 keyed `tool.call.toolview` slot。
+
+</details>
+
+-----
+
+<a id="further-exploration"></a>
+## 进一步探索
+
+以下页面覆盖输入机制、工具行宿主与宿主侧 skill 工具。
+
+- [ui-input-trigger](../ui-input-trigger/README.zh.md)——该 source 注册进的行内建议机制。
+- [ui-tool](../ui-tool/README.zh.md)——承载 `tool.call.toolview` slot 的工具调用展示层。
+- [tool-skill](../../skill/tool-skill/README.zh.md)——拥有 pre-step 手势边界的宿主侧 `skill` 工具。
+- [Web 输入机器与 slash 流水线](../../../.agents/notes/archived/architecture/2026-07-25-web-input-machine-and-slash-pipeline.md)——引用与命令如何共享输入机器。
+
+-----
+
+<a id="model-experience"></a>
+## 模型体验
+
+### 用户显式 skill 调用
+
+#### 模型看到的内容
+
+用户消息原样到达模型，字面文本 `/name` 也包含在内。随后宿主的 pre-step 边界（`dsh-tool-skill`）把规范的 `<skill_content>` 块——与 `skill` 工具返回的 `renderSkillContent` 输出相同——作为注入的指令上下文追加在该步骤各项注入的末尾，最贴近模型的回答。加载是确定性的：模型无需被要求调用 `skill` 工具就能收到完整正文，目录也会告诉它不要重新加载已内联注入的 skill。
+
+#### Token 影响
+
+一次调用会把渲染后的 skill 正文作为注入上下文加进该轮次——成本与模型经由工具加载该 skill 相同，只是无条件支付，而非由模型自行裁量。浏览菜单和拉取候选不会增加任何模型 token。
+
+#### KV Cache 影响
+
+仅追加：注入的消息落在可复用历史前缀之后。该包绝不改写较早的请求 token。
+
+## 已知限制与延期工作
+
+<a id="known-limitations-and-deferred-work"></a>
+
+
+这些限制定义引用与工具行何时回退到通用行为；它们是当前包约束。
+
+- **仅含工具结果的 history 页使用通用行**：键控分派要求配对的工具调用位于运行时窗口内；分页将工具调用留在窗口外时，工具结果没有工具身份。这项客户端呈现功能不会为了恢复该身份而扩展 history 协议约定。
+- **文本是唯一依据**：引用是普通的草稿文本；手动键入的相同 token 就是同一个引用，宿主手势边界评判的是发出的文本，而不是菜单交互。chip 视觉由 lexicon 扫描派生；提示词协议上没有 occurrence 身份、位置跟踪或结构化引用载荷。
+- **预热落定之前打开的菜单**：在那次击键下不显示 skill 候选；下一次击键会重新轮询已落定的缓存。
+
+<a id="dev-note"></a>
+### 开发备注
+
+<details>
+<summary>维护者的工作上下文——点击展开</summary>
+
+无。
+
+</details>
+
+**运行时不变式：** 不发布伴生入口。slash source、locale dictionary 与 keyed toolview 都是由注册表持有的注册项，其释放行为已由 HMR（热模块替换）安全规范证明；它们不发出 Cordis 事件或持有跨插件可变状态。

package/lib/client.js

@@ -0,0 +1,411 @@
+window.__ModuleLoader__.load({
+	id: "@x1a0f3n9/dsh-client-ui-skill",
+	factory: (require) => {
+		var module = { exports: {} };
+		var exports = module.exports;
+		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+		let _x1a0f3n9_dsh_client_ui_primitives = require("@x1a0f3n9/dsh-client-ui-primitives");
+		let react_jsx_runtime = require("react/jsx-runtime");
+		let react = require("react");
+		//#region ../../util/workspace-path/src/file-address.ts
+		/** The scheme and type every file address opens with. */
+		const FILE_ADDRESS_PREFIX = "dsh-resource://file/";
+		/** Component-encode one id or path segment, keeping `:` literal for drive letters. */
+		function encodeSegment(segment) {
+			return encodeURIComponent(segment).replace(/%3A/gi, ":");
+		}
+		/** Encode a `/`-separated path segment by segment. */
+		function encodePath(path) {
+			return path.split("/").map(encodeSegment).join("/");
+		}
+		/**
+		* Build the address of a file read through one Session.
+		* @param sessionId - the Session whose Host workspace resolves the path.
+		* @param path - absolute or workspace-relative path; backslashes are normalized to `/`, and leading `./` prefixes are dropped.
+		* @returns the `dsh-resource://file/session/<sessionId>/<path>` address.
+		*/
+		function sessionFileAddress(sessionId, path) {
+			const normalized = path.replace(/\\/g, "/").replace(/^(?:\.\/)+/, "");
+			return `${FILE_ADDRESS_PREFIX}session/${encodeSegment(sessionId)}/${encodePath(normalized)}`;
+		}
+		//#endregion
+		//#region ../../util/workspace-path/src/index.ts
+		/**
+		* Browser-safe Workspace path and display helpers.
+		* @module @x1a0f3n9/dsh-util-workspace-path
+		*/
+		/** Whether a path uses a Windows drive or UNC prefix. */
+		function isWindowsStylePath(value) {
+			return /^[A-Za-z]:[/\\]/.test(value) || value.startsWith("\\\\");
+		}
+		/**
+		* Whether a path is absolute in either spelling the Host accepts: POSIX (`/a/b`) or Windows drive or UNC.
+		* @param path - the path to classify.
+		* @returns `true` for an absolute path; `false` for a Workspace-relative one.
+		*/
+		function isAbsoluteWorkspacePath(path) {
+			return path.startsWith("/") || isWindowsStylePath(path);
+		}
+		/**
+		* The address for a path as a caller holds it: a relative path, or an absolute
+		* path inside the Session's workspace, becomes a `session`-scoped address; an
+		* absolute path outside it, or one whose workspace root is unknown, keeps its
+		* absolute path in that Session's address.
+		* @param sessionId - the Session the path is read in.
+		* @param cwd - that Session's workspace root, when known.
+		* @param path - absolute or workspace-relative path, in either separator spelling.
+		* @returns the `dsh-resource://file/…` address.
+		*/
+		function fileAddressFor(sessionId, cwd, path) {
+			const normalized = path.replace(/\\/g, "/");
+			if (!isAbsoluteWorkspacePath(normalized)) return sessionFileAddress(sessionId, normalized);
+			const root = cwd === void 0 ? "" : cwd.replace(/\\/g, "/").replace(/\/+$/, "");
+			if (root !== "" && normalized === root) return sessionFileAddress(sessionId, "");
+			if (root !== "" && normalized.startsWith(`${root}/`)) return sessionFileAddress(sessionId, normalized.slice(root.length + 1));
+			return sessionFileAddress(sessionId, normalized);
+		}
+		//#endregion
+		//#region \0dsh-css:/home/runner/work/deepseek-harness/deepseek-harness/packages/client/ui-skill/src/client/SkillRow.module.css.mjs
+		const css = ".iWrAna_card{flex-direction:column;display:flex}.iWrAna_row{align-items:center;min-width:0;height:24px;display:flex;position:relative;overflow:hidden}.iWrAna_row[data-expandable]{cursor:pointer}.iWrAna_card[data-state=running] .iWrAna_row:after{content:\"\";background:linear-gradient(90deg, transparent 0%, color-mix(in srgb, var(--dsw-alias-bg-base) 60%, transparent) 55%, transparent 100%);pointer-events:none;width:300px;animation:2.6s ease-out infinite iWrAna_dsh-skill-row-sweep;position:absolute;inset:0 auto 0 0}@keyframes iWrAna_dsh-skill-row-sweep{0%{left:-300px}90%,to{left:100%}}.iWrAna_leading{width:16px;height:16px;color:var(--dsw-alias-label-tertiary);flex:none;justify-content:center;align-items:center;margin-right:6px;display:inline-flex;position:relative}.iWrAna_chevron{color:var(--dsw-alias-label-secondary)}.iWrAna_iconIdle{opacity:1;transition:opacity .1s;display:inline-flex}.iWrAna_chevronHover{opacity:0;margin:auto;transition:opacity .1s;position:absolute;inset:0}.iWrAna_row:hover .iWrAna_iconIdle{opacity:0}.iWrAna_row:hover .iWrAna_chevronHover{opacity:1}.iWrAna_title{color:var(--dsw-alias-label-secondary);flex:none;font-size:14px;line-height:24px}.iWrAna_separator{background:var(--dsw-alias-label-caption);border-radius:1px;flex:none;width:2px;height:2px;margin:0 8px}.iWrAna_summary{text-overflow:ellipsis;white-space:nowrap;min-width:0;color:var(--dsw-alias-label-tertiary);flex:auto;font-size:14px;line-height:24px;overflow:hidden}.iWrAna_errorSummary{color:var(--dsw-alias-state-error-primary)}.iWrAna_bodyWrap{flex-direction:column;display:flex}.iWrAna_instructionsCard{border:.5px solid var(--dsw-alias-border-l1);background:var(--dsw-alias-markdown-code-block);border-radius:12px;flex-direction:column;max-height:260px;margin:4px 0 4px 4px;display:flex;overflow:hidden}.iWrAna_instructionsHeader{border-bottom:.5px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-markdown-code-block-banner);color:var(--dsw-alias-label-caption);text-transform:uppercase;letter-spacing:.04em;flex:none;padding:8px 12px;font-size:11px;font-weight:500;line-height:16px}.iWrAna_instructions{white-space:pre-wrap;overflow-wrap:anywhere;min-height:0;font:var(--dsw-font-markdown-code-block-small);color:var(--dsw-alias-label-secondary);margin:0;padding:10px 12px 12px;overflow:auto}.iWrAna_instructions[data-error]{color:var(--dsw-alias-state-error-primary)}.iWrAna_instructions::-webkit-scrollbar-thumb{background-clip:padding-box;border:2px solid #0000;border-radius:6px}.iWrAna_instructions::-webkit-scrollbar-track{margin:6px 0}.iWrAna_inspectButton{border:.5px solid var(--dsw-alias-border-l4);corner-shape:round;background:var(--dsw-alias-bg-base);color:var(--dsw-alias-label-secondary);cursor:pointer;opacity:0;border-radius:999px;align-self:flex-start;align-items:center;gap:4px;margin:4px 0 2px 4px;padding:2px 8px;font-size:11px;line-height:16px;transition:opacity .1s;display:inline-flex}.iWrAna_card:hover .iWrAna_inspectButton,.iWrAna_inspectButton:focus-visible{opacity:1}.iWrAna_inspectButton:hover{background:var(--dsw-alias-interactive-bg-hover-solid);color:var(--dsw-alias-label-primary)}.iWrAna_visuallyHidden{clip:rect(0 0 0 0);white-space:nowrap;width:1px;height:1px;position:absolute;overflow:hidden}@media (prefers-reduced-motion:reduce){.iWrAna_card[data-state=running] .iWrAna_row:after{animation:none;display:none}.iWrAna_iconIdle,.iWrAna_chevronHover,.iWrAna_inspectButton{transition:none}}";
+		const tagId = "@x1a0f3n9/dsh-client-ui-skill/SkillRow.module.css";
+		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {
+			const tag = document.createElement("style");
+			tag.dataset.plugin = "@x1a0f3n9/dsh-client-ui-skill";
+			tag.dataset.pluginCss = tagId;
+			tag.textContent = css;
+			document.head.appendChild(tag);
+		}
+		var SkillRow_module_css_default = {
+			"bodyWrap": "iWrAna_bodyWrap",
+			"card": "iWrAna_card",
+			"chevron": "iWrAna_chevron",
+			"chevronHover": "iWrAna_chevronHover",
+			"dsh-skill-row-sweep": "iWrAna_dsh-skill-row-sweep",
+			"errorSummary": "iWrAna_errorSummary",
+			"iconIdle": "iWrAna_iconIdle",
+			"inspectButton": "iWrAna_inspectButton",
+			"instructions": "iWrAna_instructions",
+			"instructionsCard": "iWrAna_instructionsCard",
+			"instructionsHeader": "iWrAna_instructionsHeader",
+			"leading": "iWrAna_leading",
+			"row": "iWrAna_row",
+			"separator": "iWrAna_separator",
+			"summary": "iWrAna_summary",
+			"title": "iWrAna_title",
+			"visuallyHidden": "iWrAna_visuallyHidden"
+		};
+		//#endregion
+		//#region lib/types/client/SkillRow.js
+		/** First physical line for the collapsed error summary and malformed-args fallback. */
+		function firstLine(text) {
+			const newline = text.indexOf("\n");
+			return newline === -1 ? text : text.slice(0, newline);
+		}
+		/** Skill names are the only call argument the compact row presents. */
+		function skillName(argsRaw, callId) {
+			try {
+				const parsed = JSON.parse(argsRaw);
+				if (typeof parsed === "object" && parsed !== null) {
+					const name = parsed.name;
+					if (typeof name === "string" && name !== "") return firstLine(name);
+				}
+			} catch {}
+			return argsRaw === "" ? callId : firstLine(argsRaw);
+		}
+		/** Flatten durable result blocks under the generic Tool-row text contract.
+		*  Keep aligned with ui-tool's models/tool-call-model.ts `resultText`. */
+		function resultText(block) {
+			if (!("kind" in block)) return null;
+			const parts = [];
+			for (const item of block.content) parts.push(item.type === "text" ? item.text : JSON.stringify(item, null, 2));
+			if (parts.length === 0 && block.error !== void 0) parts.push(`${block.error.name}: ${block.error.code}`);
+			return parts.join("\n") || null;
+		}
+		/** Derive display state without consulting the live skill catalog. */
+		function skillRowModel(block) {
+			const settled = "kind" in block;
+			const argsRaw = (settled ? block.call?.argsRaw : block.argsRaw) ?? "";
+			const state = !settled ? "running" : block.error?.code === "interrupted" ? "stopped" : block.isError ? "error" : "ok";
+			const output = resultText(block);
+			return {
+				name: skillName(argsRaw, block.callId),
+				output,
+				errorSummary: state === "error" && output !== null ? firstLine(output) : null,
+				state
+			};
+		}
+		/** State substitution for the collapsed leading slot. */
+		function leadingFor(state) {
+			switch (state) {
+				case "error": return (0, react_jsx_runtime.jsx)(_x1a0f3n9_dsh_client_ui_primitives.StateDot, { state: "error" });
+				case "stopped": return (0, react_jsx_runtime.jsx)(_x1a0f3n9_dsh_client_ui_primitives.StateDot, { state: "warning" });
+				default: return (0, react_jsx_runtime.jsx)(_x1a0f3n9_dsh_client_ui_primitives.IconSkillOutline16, { size: 14 });
+			}
+		}
+		/** Leading disclosure slot: state icon at rest, chevron on hover or while open. */
+		function disclosureLeading(state, open, expandable) {
+			if (open) return (0, react_jsx_runtime.jsx)(_x1a0f3n9_dsh_client_ui_primitives.IconChevronDownOutline14, { className: SkillRow_module_css_default.chevron });
+			const icon = leadingFor(state);
+			if (!expandable) return icon;
+			return (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [(0, react_jsx_runtime.jsx)("span", {
+				className: SkillRow_module_css_default.iconIdle,
+				children: icon
+			}), (0, react_jsx_runtime.jsx)(_x1a0f3n9_dsh_client_ui_primitives.IconChevronDownOutline14, { className: `${SkillRow_module_css_default.chevron} ${SkillRow_module_css_default.chevronHover}` })] });
+		}
+		/** Visually hidden state copy for the colour-only lifecycle cues. */
+		function stateStatus(state, t) {
+			switch (state) {
+				case "running": return t("row.running");
+				case "error": return t("row.failed");
+				case "stopped": return t("row.stopped");
+				default: return null;
+			}
+		}
+		/**
+		* Render one `skill` tool call as an accent summary and instructions disclosure.
+		* @param props - keyed toolview payload plus the skill locale seat.
+		* @returns the dedicated skill row.
+		*/
+		function SkillRow({ block, inspect, t }) {
+			const model = skillRowModel(block);
+			const [expanded, setExpanded] = (0, react.useState)(false);
+			const expandable = model.output !== null;
+			const open = expanded && expandable;
+			const status = stateStatus(model.state, t);
+			const summary = model.errorSummary ?? model.name;
+			const toggleExpand = () => {
+				setExpanded((value) => !value);
+			};
+			const toggleFromKeyboard = (event) => {
+				if (!expandable || event.key !== "Enter" && event.key !== " ") return;
+				event.preventDefault();
+				toggleExpand();
+			};
+			const disclosureProps = expandable ? {
+				role: "button",
+				tabIndex: 0,
+				"aria-expanded": open,
+				onClick: toggleExpand,
+				onKeyDown: toggleFromKeyboard
+			} : {};
+			const leading = disclosureLeading(model.state, open, expandable);
+			return (0, react_jsx_runtime.jsxs)("div", {
+				className: SkillRow_module_css_default.card,
+				"data-tool": "skill",
+				"data-state": model.state,
+				children: [(0, react_jsx_runtime.jsxs)("div", {
+					className: SkillRow_module_css_default.row,
+					"data-expandable": expandable || void 0,
+					...disclosureProps,
+					children: [
+						(0, react_jsx_runtime.jsx)("span", {
+							className: SkillRow_module_css_default.leading,
+							children: leading
+						}),
+						status !== null ? (0, react_jsx_runtime.jsx)("span", {
+							className: SkillRow_module_css_default.visuallyHidden,
+							children: status
+						}) : null,
+						(0, react_jsx_runtime.jsx)("span", {
+							className: SkillRow_module_css_default.title,
+							children: t("row.title")
+						}),
+						(0, react_jsx_runtime.jsx)("span", {
+							className: SkillRow_module_css_default.separator,
+							"aria-hidden": true
+						}),
+						(0, react_jsx_runtime.jsx)("span", {
+							className: model.errorSummary === null ? SkillRow_module_css_default.summary : `${SkillRow_module_css_default.summary} ${SkillRow_module_css_default.errorSummary}`,
+							children: summary
+						})
+					]
+				}), open ? (0, react_jsx_runtime.jsxs)("div", {
+					className: SkillRow_module_css_default.bodyWrap,
+					children: [(0, react_jsx_runtime.jsxs)("section", {
+						className: SkillRow_module_css_default.instructionsCard,
+						"aria-label": t("row.instructions"),
+						children: [(0, react_jsx_runtime.jsx)("div", {
+							className: SkillRow_module_css_default.instructionsHeader,
+							children: t("row.instructions")
+						}), (0, react_jsx_runtime.jsx)("pre", {
+							className: SkillRow_module_css_default.instructions,
+							"data-error": model.state === "error" || void 0,
+							children: model.output
+						})]
+					}), inspect !== void 0 ? (0, react_jsx_runtime.jsxs)("button", {
+						type: "button",
+						className: SkillRow_module_css_default.inspectButton,
+						onClick: inspect,
+						children: [(0, react_jsx_runtime.jsx)(_x1a0f3n9_dsh_client_ui_primitives.IconInspectOutline12, {}), t("row.inspect")]
+					}) : null]
+				}) : null]
+			});
+		}
+		//#endregion
+		//#region lib/types/client/locales.js
+		/** `skill` namespace dictionaries for the dedicated tool row. */
+		/** Dictionary namespace owned by this plugin. */
+		const NS = "skill";
+		/** Simplified Chinese dictionary (the key-set source of truth). */
+		const zh = {
+			"row.title": "Skill",
+			"row.running": "正在加载 skill",
+			"row.failed": "skill 加载失败",
+			"row.stopped": "skill 加载已中止",
+			"row.instructions": "说明",
+			"row.inspect": "查看",
+			"menu.userOnly": "仅用户"
+		};
+		/** English dictionary, checked complete against the zh key set. */
+		const en = {
+			"row.title": "Skill",
+			"row.running": "Loading skill",
+			"row.failed": "Skill load failed",
+			"row.stopped": "Skill load stopped",
+			"row.instructions": "Instructions",
+			"row.inspect": "Inspect",
+			"menu.userOnly": "user-only"
+		};
+		//#endregion
+		//#region lib/types/client/index.js
+		/** Required services: reference source faces plus the tool-row and locale registries. */
+		const inject = [
+			"inputTriggers",
+			"sessions",
+			"slots",
+			"locale",
+			"remote",
+			"remote.skills",
+			"sidebarRight"
+		];
+		/**
+		* Client plugin body: register the '/' source, dictionaries, and keyed tool row.
+		* @param ctx - client root context.
+		*/
+		function apply(ctx) {
+			ctx.effect(() => ctx.locale.register(NS, {
+				zh,
+				en
+			}), "ui-skill: dictionaries");
+			ctx.slots.inject("tool.call.toolview", () => ctx.slots.register({
+				name: "tool.call.toolview",
+				key: "skill",
+				locale: NS
+			}, SkillRow));
+			const skills = ctx.remote.skills;
+			const sessions = ctx.sessions;
+			const fetches = /* @__PURE__ */ new Map();
+			const lexiconListeners = /* @__PURE__ */ new Map();
+			const notifyLexicon = (sessionId) => {
+				for (const listener of [...lexiconListeners.get(sessionId) ?? []]) try {
+					listener();
+				} catch (error) {
+					console.error("[ui-skill] lexicon listener failed:", error);
+				}
+			};
+			const fetchCatalog = (sessionId) => {
+				const existing = fetches.get(sessionId);
+				if (existing !== void 0) return existing;
+				const abort = new AbortController();
+				const promise = (async () => {
+					const result = await skills.list({ sessionId }, abort.signal);
+					abort.signal.throwIfAborted();
+					if (!result.ok) throw new Error(`skills/list failed: ${result.error.code}: ${result.error.message}`);
+					return result.value.skills;
+				})();
+				const entry = {
+					promise,
+					abort
+				};
+				fetches.set(sessionId, entry);
+				promise.then((skills) => {
+					entry.settled = skills;
+					notifyLexicon(sessionId);
+				}, () => {
+					if (fetches.get(sessionId) === entry) fetches.delete(sessionId);
+				});
+				return entry;
+			};
+			const invalidate = (key) => {
+				const entry = fetches.get(key);
+				if (entry === void 0) return;
+				fetches.delete(key);
+				entry.abort.abort();
+				notifyLexicon(key);
+			};
+			const clearAll = () => {
+				for (const key of [...fetches.keys()]) invalidate(key);
+			};
+			const t = ctx.locale.bind(NS);
+			const source = {
+				trigger: "/",
+				name: "skill",
+				order: 2,
+				async candidates(session, { query, signal }) {
+					if (sessions.subagentAddress(session.sessionId) !== void 0) return [];
+					const skills = await fetchCatalog(session.sessionId).promise;
+					if (signal.aborted) return [];
+					return (0, _x1a0f3n9_dsh_client_ui_primitives.rankByName)(skills, query).map((skill) => ({
+						name: skill.name,
+						description: skill.modelInvocable ? skill.description : `${t("menu.userOnly")} · ${skill.description}`
+					}));
+				},
+				warm(session) {
+					if (sessions.subagentAddress(session.sessionId) !== void 0) return;
+					fetchCatalog(session.sessionId).promise.catch(() => {});
+				},
+				lexicon(session) {
+					return fetches.get(session.sessionId)?.settled?.map((skill) => skill.name);
+				},
+				subscribeLexicon(session, listener) {
+					const key = session.sessionId;
+					const listeners = lexiconListeners.get(key) ?? /* @__PURE__ */ new Set();
+					listeners.add(listener);
+					lexiconListeners.set(key, listeners);
+					return () => {
+						listeners.delete(listener);
+						if (listeners.size === 0) lexiconListeners.delete(key);
+					};
+				},
+				openReference(session, { ref }) {
+					if (sessions.subagentAddress(session.sessionId) !== void 0) return false;
+					const cwd = sessions.list.getSnapshot().byId[session.sessionId]?.cwd;
+					const open = (catalog) => {
+						const path = catalog.find((skill) => `/${skill.name}` === ref)?.path;
+						if (path === void 0) return false;
+						ctx.sidebarRight.openResource(fileAddressFor(session.sessionId, cwd, path));
+						return true;
+					};
+					const settled = fetches.get(session.sessionId)?.settled;
+					if (settled !== void 0) return open(settled);
+					const entry = fetchCatalog(session.sessionId);
+					entry.promise.then((catalog) => {
+						if (!entry.abort.signal.aborted) open(catalog);
+					}).catch((error) => {
+						if (!entry.abort.signal.aborted) console.error("[ui-skill] reference preview failed:", error);
+					});
+					return true;
+				},
+				onPick({ candidate }) {
+					return { text: `/${candidate.name} ` };
+				}
+			};
+			const inputTriggers = ctx.get("inputTriggers");
+			ctx.remote.$on("agent-preset/selected", invalidate);
+			ctx.on("connection/reset", clearAll);
+			ctx.effect(() => {
+				const unregister = inputTriggers.registerSource(source);
+				return () => {
+					unregister();
+					clearAll();
+				};
+			}, "ui-skill: source");
+		}
+		//#endregion
+		exports.apply = apply;
+		exports.inject = inject;
+		return module.exports;
+	}
+});
+
+//# sourceMappingURL=client.js.map

package/lib/index.js

@@ -0,0 +1,11 @@
+//#region lib/types/index.js
+/**
+* Skill reference plugin, node half. Pure UI plugin: the empty apply
+* exists so the plugin appears in the host cordis.yml / Loader; the browser
+* half ships via exports["./client"], discovered through the package.json
+* dsh.client declaration.
+*/
+/** Host plugin body — no host-side behavior for this source plugin. */
+function apply() {}
+//#endregion
+export { apply };

package/lib/types/client/SkillRow.d.ts

@@ -0,0 +1,11 @@
+import type { ToolCallViewProps } from '@x1a0f3n9/dsh-client-ui-tool/client';
+import type { PropsLocale } from '@x1a0f3n9/dsh-client-ui-slots';
+type SkillRowProps = ToolCallViewProps & PropsLocale<'skill'>;
+/**
+ * Render one `skill` tool call as an accent summary and instructions disclosure.
+ * @param props - keyed toolview payload plus the skill locale seat.
+ * @returns the dedicated skill row.
+ */
+export declare function SkillRow({ block, inspect, t }: SkillRowProps): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=SkillRow.d.ts.map

package/lib/types/client/index.d.ts

@@ -0,0 +1,16 @@
+import type { Context as ClientContext } from '@deepseek-ai/cordis';
+import { type SkillKey } from './locales.ts';
+declare module '@x1a0f3n9/dsh-client-ui-slots' {
+    interface LocaleNamespaceMap {
+        /** The dedicated skill tool row's copy. */
+        skill: SkillKey;
+    }
+}
+/** Required services: reference source faces plus the tool-row and locale registries. */
+export declare const inject: string[];
+/**
+ * Client plugin body: register the '/' source, dictionaries, and keyed tool row.
+ * @param ctx - client root context.
+ */
+export declare function apply(ctx: ClientContext): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/client/locales.d.ts

@@ -0,0 +1,26 @@
+/** `skill` namespace dictionaries for the dedicated tool row. */
+/** Dictionary namespace owned by this plugin. */
+export declare const NS = "skill";
+/** Simplified Chinese dictionary (the key-set source of truth). */
+export declare const zh: {
+    'row.title': string;
+    'row.running': string;
+    'row.failed': string;
+    'row.stopped': string;
+    'row.instructions': string;
+    'row.inspect': string;
+    'menu.userOnly': string;
+};
+/** The skill namespace key union. */
+export type SkillKey = keyof typeof zh;
+/** English dictionary, checked complete against the zh key set. */
+export declare const en: {
+    'row.title': string;
+    'row.running': string;
+    'row.failed': string;
+    'row.stopped': string;
+    'row.instructions': string;
+    'row.inspect': string;
+    'menu.userOnly': string;
+};
+//# sourceMappingURL=locales.d.ts.map

package/lib/types/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Skill reference plugin, node half. Pure UI plugin: the empty apply
+ * exists so the plugin appears in the host cordis.yml / Loader; the browser
+ * half ships via exports["./client"], discovered through the package.json
+ * dsh.client declaration.
+ */
+/** Host plugin body — no host-side behavior for this source plugin. */
+export declare function apply(): void;
+//# sourceMappingURL=index.d.ts.map

package/package.json

@@ -0,0 +1,75 @@
+{
+  "name": "@x1a0f3n9/dsh-client-ui-skill",
+  "description": "Web skill references and the dedicated skill tool row",
+  "version": "0.1.5-rc.3",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/deepseek-ai/deepseek-harness.git",
+    "directory": "packages/client/ui-skill"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./client": {
+      "types": "./lib/types/client/index.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./src/*": "./src/*",
+    "./package.json": "./package.json"
+  },
+  "dsh": {
+    "client": {
+      "inject": [
+        "@x1a0f3n9/dsh-api-session-controller",
+        "@x1a0f3n9/dsh-client-locale",
+        "@x1a0f3n9/dsh-client-ui-renderer",
+        "@x1a0f3n9/dsh-client-ui-tool",
+        "@x1a0f3n9/dsh-client-ui-input-trigger",
+        "@x1a0f3n9/dsh-api-remotes",
+        "@x1a0f3n9/dsh-client-ui-sidebar-right"
+      ],
+      "platform": "web"
+    }
+  },
+  "license": "MIT",
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2"
+  },
+  "devDependencies": {
+    "@testing-library/react": "^16.1.0",
+    "@types/react": "~18.3.1",
+    "react": "^18.2.0",
+    "react-dom": "^18.2.0",
+    "@x1a0f3n9/dsh-api-remotes": "^0.1.5-rc.3",
+    "@x1a0f3n9/dsh-api-session-controller": "^0.1.5-rc.3",
+    "@x1a0f3n9/dsh-client-connection": "^0.1.5-rc.3",
+    "@x1a0f3n9/dsh-client-locale": "^0.1.5-rc.3",
+    "@x1a0f3n9/dsh-client-test-runtime": "^0.1.5-rc.3",
+    "@x1a0f3n9/dsh-client-ui-primitives": "^0.1.5-rc.3",
+    "@x1a0f3n9/dsh-client-ui-input-trigger": "^0.1.5-rc.3",
+    "@x1a0f3n9/dsh-client-ui-renderer": "^0.1.5-rc.3",
+    "@x1a0f3n9/dsh-client-ui-slots": "^0.1.5-rc.3",
+    "@x1a0f3n9/dsh-client-ui-tool": "^0.1.5-rc.3",
+    "@x1a0f3n9/dsh-session": "^0.1.5-rc.3",
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@x1a0f3n9/dsh-client-ui-sidebar-right": "^0.1.5-rc.3",
+    "@x1a0f3n9/dsh-util-workspace-path": "^0.1.5-rc.3"
+  },
+  "files": [
+    "lib/index.js",
+    "lib/client.js",
+    "lib/types/**/*.d.ts"
+  ],
+  "scripts": {
+    "bundle": "tsdown",
+    "watch": "tsdown --watch"
+  }
+}