@xxxyz/dsh-mcp-manager 2.1.4 → 2.2.0

package/README.md

@@ -16,12 +16,12 @@
 [![Node](https://img.shields.io/badge/node-%3E%3D18-339933?logo=node.js)](package.json)
 [![GitHub](https://img.shields.io/badge/GitHub-xxxyz%2FDeepSeekHarness--MCP--Manager-181717?logo=github)](https://github.com/xxxyz/DeepSeekHarness-MCP-Manager)
 [![dsh.market](https://img.shields.io/badge/dsh.market-%E2%9C%93-3fb950)](https://dsh.market)
-[![awesome-dsh-plugin](https://img.shields.io/badge/awesome--dsh--plugin-%E5%BE%85%E5%90%88%E5%B9%B6-ffd93d)](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/2078)
+[![awesome-dsh-plugin](https://img.shields.io/badge/awesome--dsh--plugin-%E5%B7%B2%E6%94%B6%E5%BD%95-3fb950)](https://awesome-dsh-plugin.com)
 
 </div>
 
 <div align="center">
-  🛒 已收录于 <a href="https://dsh.market"><b>dsh.market</b></a> · 已提交 <a href="https://awesome-dsh-plugin.com"><b>awesome-dsh-plugin.com</b></a> 官方列表收录（<a href="https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/2078"><b>PR #2078</b></a> 待合并）
+  🛒 已收录于 <a href="https://dsh.market"><b>dsh.market</b></a> 与 <a href="https://awesome-dsh-plugin.com"><b>awesome-dsh-plugin.com</b></a> 官方插件列表（<a href="https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/2078"><b>PR #2078</b></a> 已合并）
 </div>
 
 <div align="center">
@@ -115,8 +115,8 @@ dsh plugin --profile web remove @xxxyz/dsh-mcp-manager
 
 打开 **设置 → Skills 管理**：
 
-- **浏览 / 搜索**：列出 DSH 全部技能，按来源分组（项目级 / 运行时 / 自定义 / 用户级 / 内置 / 插件自带），组内按 provider 折叠；搜索框实时过滤。
-- **启用 / 停用**：一键切换任意技能的启用状态——通过 rank-0 override provider（`dsh-mcp-manager-override`）实现，任何来源层级（含项目级）都能禁用。
+- **浏览 / 搜索**：列出 DSH 全部技能，按来源分组（项目级 / 运行时 / 自定义 / 用户级 / 内置 / 插件自带），组内按 provider 折叠；搜索框实时过滤。`~/.dsh/skills/` 下的用户级技能（2.2.0+）同样可见——即使官方 scoped 层不向无 scope 查询暴露它们。
+- **启用 / 停用**：一键切换任意技能的启用状态——通过 rank-0 override provider（`dsh-mcp-manager-override`）实现，任何来源层级（含项目级与用户级文件系统技能）都能禁用。
 - **持久化**：停用状态写入 `<profileDir>/dsh-skill-manager.json`，重启后保留；改动经 HMR 即时生效。
 
 ## ⚙️ 配置
@@ -128,6 +128,8 @@ dsh plugin --profile web remove @xxxyz/dsh-mcp-manager
 | `version` | loader 行 `config.version`，仅用于触发 HMR 重应用；官方通道安装下由 bundle 自动管理，无需手动修改。 |
 | `token` | **可选**访问令牌（写操作鉴权，纵深防御）。设置后写操作（增删改/启停/重启/导入导出/技能停用）须带 `x-dsh-token: <token>` 头；设置页提供令牌输入框（保存在浏览器 localStorage）。也可用环境变量 `DSH_MCP_MANAGER_TOKEN` 配置。默认关闭。 |
 
+> **为什么需要 token？** 插件的 CSRF 防护只拦"跨站浏览器请求"——它假设 DSH web 只监听本机（`127.0.0.1`）。一旦你通过端口转发、`dsh-web-lan-access` 类插件或反向代理把 3080 端口暴露到局域网/公网，**任何能访问该端口的人都直接获得完整写权限**：可以新增/修改 MCP 服务器，而 `stdio` 服务的 `command` 字段可填任意可执行文件——等同于**远程任意代码执行**。token 就是为这种暴露场景加的最后一道闸：没有密钥就无法做任何写操作，即使端口被暴露也不能注入命令。本地单机使用不需要配置。
+
 loader 行必须为 **`insert` 块**形式（DSH patch 方言中普通 `- id:` 行只是对已存在条目的覆盖，无法新增插件）：
 
 ```yaml

package/README_EN.md

@@ -17,12 +17,12 @@
 [![Node](https://img.shields.io/badge/node-%3E%3D18-339933?logo=node.js)](package.json)
 [![GitHub](https://img.shields.io/badge/GitHub-xxxyz%2FDeepSeekHarness--MCP--Manager-181717?logo=github)](https://github.com/xxxyz/DeepSeekHarness-MCP-Manager)
 [![dsh.market](https://img.shields.io/badge/dsh.market-%E2%9C%93-3fb950)](https://dsh.market)
-[![awesome-dsh-plugin](https://img.shields.io/badge/awesome--dsh--plugin-pending-ffd93d)](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/2078)
+[![awesome-dsh-plugin](https://img.shields.io/badge/awesome--dsh--plugin-listed-3fb950)](https://awesome-dsh-plugin.com)
 
 </div>
 
 <div align="center">
-  🛒 Listed on <a href="https://dsh.market"><b>dsh.market</b></a> · submitted to <a href="https://awesome-dsh-plugin.com"><b>awesome-dsh-plugin.com</b></a> (<a href="https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/2078"><b>PR #2078</b></a> pending merge)
+  🛒 Listed on <a href="https://dsh.market"><b>dsh.market</b></a> and the <a href="https://awesome-dsh-plugin.com"><b>awesome-dsh-plugin.com</b></a> official plugin list (<a href="https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/2078"><b>PR #2078</b></a> merged)
 </div>
 
 <div align="center">
@@ -116,8 +116,8 @@ Open **Settings → MCP 管理**:
 
 Open **Settings → Skills 管理**:
 
-- **Browse / Search**: lists every DSH skill grouped by source (project / runtime / custom / user / built-in / plugin-bundled), collapsed per provider; the search box filters live.
-- **Enable / Disable**: toggle any skill in one click — implemented with a rank-0 override provider (`dsh-mcp-manager-override`), so every source level (including project-level) can be disabled.
+- **Browse / Search**: lists every DSH skill grouped by source (project / runtime / custom / user / built-in / plugin-bundled), collapsed per provider; the search box filters live. User-level skills under `~/.dsh/skills/` (2.2.0+) are listed too — even though the official scoped layer never exposes them to scope-less queries.
+- **Enable / Disable**: toggle any skill in one click — implemented with a rank-0 override provider (`dsh-mcp-manager-override`), so every source level (including project-level and user-level filesystem skills) can be disabled.
 - **Persistence**: disabled state is written to `<profileDir>/dsh-skill-manager.json`, survives restarts, and applies live via HMR.
 
 ## ⚙️ Configuration
@@ -129,6 +129,8 @@ Configuration of the plugin itself on its loader row:
 | `version` | The loader row's `config.version`, only used to trigger an HMR re-apply; auto-managed by the bundle channel — no manual edits needed. |
 | `token` | **Optional** access token (write-op auth, defense in depth). When set, state-changing ops (add/edit/remove/enable/restart/import/export/skill-toggle) require the `x-dsh-token: <token>` header; the settings pages provide a token input (stored in browser localStorage). Can also be set via the `DSH_MCP_MANAGER_TOKEN` env var. Off by default. |
 
+> **Why is the token needed?** The plugin's CSRF protection only blocks *cross-site browser* requests — it assumes DSH web listens on localhost (`127.0.0.1`) only. Once you expose port 3080 to a LAN or the public internet (port forwarding, a `dsh-web-lan-access`-style plugin, or a reverse proxy), **anyone who can reach the port gets full write access**: they can add/modify MCP servers, and a `stdio` server's `command` field accepts any executable — i.e. **remote arbitrary code execution**. The token is the last gate for exactly this exposure scenario: without the secret, no write op succeeds even when the port is exposed, so commands cannot be injected. Local single-machine use does not need it.
+
 The loader row must be an **`insert` block** (in DSH's patch dialect a plain `- id:` row only overrides existing entries and can never add a new plugin):
 
 ```yaml

package/lib/index.js

@@ -115,7 +115,7 @@ export default {
             for (const name of await readState()) {
                 if (overrideSkills.has(name))
                     continue;
-                const def = await ctx.skills.get(name);
+                const def = (await ctx.skills.get(name)) || (await findUserSkill(name));
                 if (!def)
                     continue;
                 overrideSkills.set(name, { ...def, provider: OVERRIDE_PROVIDER, invocation: { modelInvocable: false, userInvocable: false } });
@@ -126,10 +126,154 @@ export default {
         }
         ;
         ctx.on('skills/change', () => { void ensureRestored(); });
+        // User-level skills (~/.dsh/skills/*/SKILL.md) are discovered by
+        // dsh-skill-filesystem in the agent-preset SCOPED layer, which a scope-less
+        // ctx.skills.snapshot({}) (global layer only) never reaches — so the
+        // management page would silently hide them. Scan the directory ourselves
+        // and merge into skill-list. Toggling still goes through the rank-0
+        // override above: it shadows by NAME, so it works across layers — but
+        // ctx.skills.get(name) is also scope-less, hence the scan fallback when
+        // synthesizing the override definition. DSH_MCP_MANAGER_SKILLS_DIR
+        // overrides the directory (used by tests).
+        function userSkillsDir(home, sep) {
+            const env = process.env.DSH_MCP_MANAGER_SKILLS_DIR;
+            return env && env.trim() ? env.trim() : home + sep + 'skills';
+        }
+        // Minimal SKILL.md frontmatter reader that MIRRORS the official
+        // dsh-skill-filesystem parse rules (so this page never lists a skill the
+        // / menu would reject):
+        //   * `name` and `description` are REQUIRED (non-empty) — no dir-name fallback
+        //   * legacy camelCase keys (`userInvocable` / `modelInvocable`) are REJECTED
+        //   * booleans accept true/1/yes/on vs false/0/no/off (case-insensitive);
+        //     any other value invalidates the whole entry
+        // Returns null for anything the official provider would skip.
+        function parseFrontmatterBoolean(val) {
+            const v = val.toLowerCase();
+            if (v === 'true' || v === '1' || v === 'yes' || v === 'on')
+                return true;
+            if (v === 'false' || v === '0' || v === 'no' || v === 'off')
+                return false;
+            return undefined;
+        }
+        function parseSkillFile(raw) {
+            const m = /^---\r?\n([\s\S]*?)\r?\n---/.exec(raw);
+            if (!m)
+                return null;
+            const fields = new Map();
+            for (const line of m[1].split(/\r?\n/)) {
+                const kv = /^([A-Za-z][\w-]*):\s*(.*)$/.exec(line.trim());
+                if (!kv)
+                    continue;
+                fields.set(kv[1], kv[2].trim().replace(/^['"]|['"]$/g, ''));
+            }
+            if (fields.has('userInvocable') || fields.has('modelInvocable'))
+                return null;
+            const name = fields.get('name');
+            const description = fields.get('description');
+            if (!name || description === undefined || description === '')
+                return null;
+            const fm = { name, description };
+            const wtu = fields.get('whenToUse') ?? fields.get('when-to-use');
+            if (wtu)
+                fm.whenToUse = wtu;
+            const ui = fields.get('user-invocable');
+            if (ui !== undefined) {
+                const b = parseFrontmatterBoolean(ui);
+                if (b === undefined)
+                    return null;
+                fm.userInvocable = b;
+            }
+            const dmi = fields.get('disable-model-invocation');
+            if (dmi !== undefined) {
+                const b = parseFrontmatterBoolean(dmi);
+                if (b === undefined)
+                    return null;
+                fm.disableModelInvocation = b;
+            }
+            const content = raw.slice(m[0].length).replace(/^\r?\n+/, '');
+            return { fm, content };
+        }
+        async function scanUserSkills() {
+            let dir;
+            let sep;
+            try {
+                const p = await ensurePaths();
+                sep = p.home.indexOf('\\') >= 0 ? '\\' : '/';
+                dir = userSkillsDir(p.home, sep);
+            }
+            catch (e) {
+                return [];
+            }
+            let entries = [];
+            try {
+                entries = await fs.listDir(await fs.resolve(dir));
+            }
+            catch (e) {
+                return [];
+            }
+            const rows = [];
+            const seen = new Set();
+            for (const ent of entries) {
+                const nm = String(ent.name || '');
+                if (!nm || nm === '.system')
+                    continue;
+                // Official parity (dsh-skill-filesystem discoverRoot): a directory entry
+                // points at `<dir>/SKILL.md`; a flat `*.md` file in the root is itself a
+                // skill. We cannot stat entry types through the fs service, so try the
+                // directory form first and fall back to the flat form for `.md` names.
+                let path = dir + sep + nm + sep + 'SKILL.md';
+                let directory = dir + sep + nm;
+                let raw = '';
+                try {
+                    raw = await fs.readText(await fs.resolve(path));
+                }
+                catch (e) {
+                    if (!nm.endsWith('.md'))
+                        continue;
+                    path = dir + sep + nm;
+                    directory = dir;
+                    try {
+                        raw = await fs.readText(await fs.resolve(path));
+                    }
+                    catch (e2) {
+                        continue;
+                    }
+                }
+                const parsed = parseSkillFile(raw);
+                if (!parsed) {
+                    console.warn(`[dsh-mcp-manager] user skill ${path} ignored: missing/invalid frontmatter (name+description required, kebab-case name, official boolean grammar)`);
+                    continue;
+                }
+                const { fm, content } = parsed;
+                if (!SKILL_NAME_RE.test(fm.name))
+                    continue;
+                if (seen.has(fm.name))
+                    continue;
+                seen.add(fm.name);
+                rows.push({
+                    name: fm.name,
+                    description: fm.description,
+                    ...(fm.whenToUse !== undefined ? { whenToUse: fm.whenToUse } : {}),
+                    invocation: { modelInvocable: fm.disableModelInvocation !== true, userInvocable: fm.userInvocable !== false },
+                    source: 'user-dsh',
+                    provider: 'filesystem',
+                    resourceBase: { kind: 'directory', path: directory },
+                    path,
+                    content,
+                });
+            }
+            return rows;
+        }
+        async function findUserSkill(name) {
+            return (await scanUserSkills()).find((s) => s.name === name);
+        }
         async function skillList() {
             await ensureRestored();
             const snap = await ctx.skills.snapshot({});
-            return { ok: true, skills: snap.skills, complete: snap.complete !== false };
+            const seen = new Set(snap.skills.map((s) => s.name));
+            const extra = (await scanUserSkills()).filter((s) => !seen.has(s.name));
+            const skills = snap.skills.concat(extra).sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0));
+            return { ok: true, skills, complete: snap.complete !== false };
         }
         async function skillToggle(args) {
             const name = String(args.name || '').trim();
@@ -148,7 +292,7 @@ export default {
                 }
                 else {
                     if (!overrideSkills.has(name)) {
-                        const def = await ctx.skills.get(name);
+                        const def = (await ctx.skills.get(name)) || (await findUserSkill(name));
                         if (!def)
                             return { ok: false, error: '技能不存在: ' + name };
                         overrideSkills.set(name, { ...def, provider: OVERRIDE_PROVIDER, invocation: { modelInvocable: false, userInvocable: false } });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xxxyz/dsh-mcp-manager",
-  "version": "2.1.4",
+  "version": "2.2.0",
   "description": "DSH-standard MCP manager plugin: Settings UI + HTTP API + model-facing mcp_manager_* tools. Install with one command: dsh plugin --profile web add @xxxyz/dsh-mcp-manager@latest",
   "type": "module",
   "main": "lib/index.js",