@zhangchi835/skill-manager 1.0.3 → 1.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 zhangchi
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,82 @@
+# @zhangchi835/skill-manager
+
+DeepSeek Harness（DSH）技能加载与管理插件：从任意文件夹**无命名规则**地递归加载技能（中文文件名、无 frontmatter、任意子目录均可），支持**目录型技能**与**任意位置的单个技能文件**，在输入框「模式」选择器旁提供**勾选即启用**的会话技能选择器，并附带只做配置与展示的「技能管理」设置页（无启用/停用开关）。
+
+要求 Node.js >= 18；零运行时依赖，只用 `node:` 内置模块。
+
+## 功能
+
+- **递归加载**：配置一个文件夹（默认 `~/.dsh/skills`），其中所有 `.md` 都被识别为技能；不要求 `SKILL.md`、kebab-case 或 YAML frontmatter（名称自动清洗为 kebab-case，上限 64 字符；中文名等无 ASCII 字符的文件名回退为哈希名）。扫描上限：递归深度 24 层、最多 4000 个目录项。
+- **目录型技能**：任意子目录内出现 `SKILL.md`（大小写不敏感）时，整个目录算一个技能，目录内其他 `.md`/资源不再单独注册；根文件夹本身不受此规则影响。
+- **单个技能文件**：在管理页按绝对路径逐个添加 `.md`（可位于任意位置）；与文件夹技能重名时以文件为准。
+- **选择即启用**：勾选哪个技能就只启用哪个——未勾选的技能不出现在模型 `<available_skills>` 目录与 `/技能` 菜单中。
+- **技能管理页**：设置 → 技能管理，可配置文件夹、增删单个技能文件、重新扫描、查看全部技能与选中状态（**无启用/停用开关**，启用只通过输入框旁的勾选器），并列出会话中其他提供者的技能。
+- **持久化**：文件夹、文件清单与勾选状态保存在 `~/.dsh/skill-manager.json`（`{ folder, selected, files }`；首次运行自动迁移旧版 `~/.dsh/skills-hub.json`），重启自动恢复。
+
+## 安装（一条命令）
+
+```bash
+dsh plugin --profile web add @zhangchi835/skill-manager
+```
+
+该命令会：① 把包安装进 `~/.dsh/profiles/web` 的 dependencies；② 因本包声明了 `dsh.bundle.patch`，自动把包名 reconcile 进 `dsh.profile.bundles`，插件行随之进入组合。重启 DSH 进程后生效。
+
+> 如果你之前装过 npm 上的 1.0.0 / 1.0.2 / 1.0.3，那三个版本是仓库根目录误发的空壳（缺 `dsh` 元数据，装上也加载不了）。升级到 **1.1.0** 即可。
+>
+> 手动安装（不使用 `dsh plugin` CLI 时）：`cd ~/.dsh/profiles/web && pnpm add @zhangchi835/skill-manager`，然后把下行写进 `~/.dsh/profiles/web/cordis.patch.yml`（用户补丁层）：
+>
+> ```yaml
+> - insert:
+>     - id: skill-manager
+>       name: '@zhangchi835/skill-manager'
+>       inject: [skills, webServer]
+> ```
+
+## 验证
+
+```bash
+curl http://127.0.0.1:<DSH Web 端口>/skill-manager/state   # 返回 JSON 即成功
+```
+
+其余路由：`POST /skill-manager/set-folder`、`POST /skill-manager/set-selected`、`POST /skill-manager/set-files`、`POST /skill-manager/reload`（均为 JSON）。
+
+## 使用
+
+1. 设置 → 技能管理：填写技能文件夹路径（默认 `~/.dsh/skills`），保存并加载。
+2. 同一页可按绝对路径逐个添加单个 `.md` 技能文件（可选）。
+3. 任一会话输入框工具行、「模式」选择器旁，点「🧩 技能」勾选要启用的技能。
+4. 勾选后下一回合模型即可通过 `skill` 工具加载对应技能。
+
+## 发布（维护者）
+
+**在本包目录（`plugin/`）内发布**——仓库根目录是 `private` 工程壳，不是发布单元：
+
+```bash
+cd plugin
+npm login                                # 首次
+npm publish                              # publishConfig.access = public
+npm pack --dry-run --json                # 发布前核对文件清单
+```
+
+- 清单应只有 `package.json`、`README.md`、`LICENSE`、`cordis.patch.yml`、`lib/index.js`、`lib/client.js`。
+- `lib/index.js` 与 `cordis.patch.yml` 中的 `inject: [skills, webServer]` 是**必须**的（修复启动并发竞态导致的行空挂载），发布前请勿移除。
+- `package.json` 的 `dsh`、`exports`、`files`、`publishConfig`、`type`、`main` 都是承重字段。
+
+## 本地开发
+
+```bash
+cd ~/.dsh/profiles/web
+pnpm add "link:<本包目录绝对路径>"   # link: 软链，改源码即时生效（file: 会复制、不同步）
+```
+
+包内自测：`npm test`（`node test/smoke.mjs`）。
+
+## 结构
+
+- `lib/index.js`：Host 插件（skills 提供者 + `/skill-manager/*` JSON 路由）
+- `lib/client.js`：Web 客户端插件（模式选择器旁勾选器 + 技能管理页）
+- `cordis.patch.yml`：bundle 组合补丁（`dsh plugin add` 依赖它自动归入 bundles）
+
+## License
+
+MIT，版权人 zhangchi（2026）。见随包发布的 [LICENSE](./LICENSE)。

package/{plugin/lib → lib}/client.js

@@ -46,6 +46,10 @@ window.__ModuleLoader__.load({
       '.skh-row-desc{font-size:12px;color:var(--dsw-alias-label-tertiary);overflow-wrap:anywhere}',
       '.skh-row-rel{font-size:11px;color:var(--dsw-alias-label-caption, var(--dsw-alias-label-tertiary));overflow-wrap:anywhere}',
       '.skh-note{font-size:12px;color:var(--dsw-alias-label-tertiary);border:1px dashed var(--dsw-alias-border-l1);border-radius:8px;padding:8px}',
+      '.skh-file-row{display:flex;align-items:center;gap:8px}',
+      '.skh-file-path{flex:1;min-width:0;font-size:12px;color:var(--dsw-alias-label-tertiary);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}',
+      '.skh-file-x{flex:none;border:1px solid var(--dsw-alias-border-l1);background:transparent;color:var(--dsw-alias-state-error-primary);border-radius:6px;padding:1px 8px;font-size:11px;cursor:pointer;white-space:nowrap}',
+      '.skh-file-x:hover{background:var(--dsw-alias-interactive-bg-hover)}',
     ].join('\n')
     ;(function installCss() {
       if (typeof document === 'undefined') return
@@ -151,8 +155,10 @@ window.__ModuleLoader__.load({
       const [folderDraft, setFolderDraft] = react.useState(null)
       const [draftTouched, setDraftTouched] = react.useState(false)
       if (folderDraft === null && view !== null && !draftTouched) setFolderDraft(view.folder)
+      const [fileDraft, setFileDraft] = react.useState('')
       const skills = view === null ? [] : view.skills
       const others = view === null ? [] : view.otherSkills
+      const files = view === null ? [] : view.files
       const selectedSet = {}
       if (view !== null) for (let i = 0; i < view.selected.length; i++) selectedSet[view.selected[i]] = true
       let statusText = ''
@@ -162,11 +168,24 @@ window.__ModuleLoader__.load({
       else if (view.scanning) statusText = '正在扫描…'
       else if (!view.scanned) statusText = '尚未扫描'
       else if (view.scanError !== '') { statusText = view.scanError; statusErr = true }
-      else statusText = '已扫描 ' + skills.length + ' 个技能' + (view.scanTime === null || view.scanTime === '' ? '' : ' · ' + view.scanTime)
+      else statusText = '已加载 ' + skills.length + ' 个技能' + (view.scanTime === null || view.scanTime === '' ? '' : ' · ' + view.scanTime)
       const applyFolder = () => {
         api('/set-folder', { path: folderDraft === null ? '' : folderDraft }).then(refresh, refresh)
       }
       const reload = () => { api('/reload').then(refresh, refresh) }
+      const setFiles = (next) => { api('/set-files', { files: next }).then(refresh, refresh) }
+      const addFile = () => {
+        const path = fileDraft.trim()
+        if (path === '') return
+        if (files.indexOf(path) >= 0) { setFileDraft(''); return }
+        setFiles(files.concat([path]))
+        setFileDraft('')
+      }
+      const removeFile = (path) => {
+        const next = []
+        for (let i = 0; i < files.length; i++) if (files[i] !== path) next.push(files[i])
+        setFiles(next)
+      }
       return react.createElement('div', { className: 'skh-admin' },
         react.createElement('div', { className: 'skh-title' }, '技能管理'),
         react.createElement('div', { className: 'skh-sub' }, '技能文件夹'),
@@ -179,11 +198,24 @@ window.__ModuleLoader__.load({
           }),
           react.createElement('button', { type: 'button', className: 'skh-btn', onClick: applyFolder }, '保存并加载'),
           react.createElement('button', { type: 'button', className: 'skh-btn', onClick: reload }, '重新扫描')),
+        react.createElement('div', { className: 'skh-sub' }, '单个技能文件（可选，逐个指定加载）'),
+        files.map((f) => react.createElement('div', { key: f, className: 'skh-file-row' },
+          react.createElement('span', { className: 'skh-file-path', title: f }, f),
+          react.createElement('button', { type: 'button', className: 'skh-file-x', onClick: () => removeFile(f) }, '移除'))),
+        react.createElement('div', { className: 'skh-field' },
+          react.createElement('input', {
+            className: 'skh-input',
+            value: fileDraft,
+            placeholder: '单个 .md 技能文件的绝对路径（可放在任意位置）',
+            onChange: (event) => setFileDraft(event.target.value),
+          }),
+          react.createElement('button', { type: 'button', className: 'skh-btn', onClick: addFile }, '添加并加载')),
         react.createElement('div', { className: statusErr ? 'skh-status skh-status-err' : 'skh-status' }, statusText),
-        react.createElement('div', { className: 'skh-sub' }, '本文件夹技能（' + skills.length + '）'),
+        react.createElement('div', { className: 'skh-sub' }, '已加载技能（' + skills.length + '）'),
         skills.map((s) => react.createElement('div', { key: s.name, className: 'skh-row' },
           react.createElement('div', { className: 'skh-row-top' },
             react.createElement('span', { className: 'skh-row-name' }, s.name),
+            s.origin === 'file' ? react.createElement('span', { className: 'skh-badge' }, '文件') : null,
             react.createElement('span', { className: selectedSet[s.name] === true ? 'skh-badge skh-badge-on' : 'skh-badge' }, selectedSet[s.name] === true ? '已选择' : '未选择')),
           react.createElement('div', { className: 'skh-row-desc' }, s.description === null || s.description === '' ? '(无描述)' : s.description),
           react.createElement('div', { className: 'skh-row-rel' }, s.rel))),

package/{plugin/lib → lib}/index.js

@@ -14,7 +14,7 @@
  *   POST /skill-manager/reload
  */
 import { readdir, readFile, stat, mkdir, writeFile } from 'node:fs/promises'
-import { join, resolve, dirname } from 'node:path'
+import { join, resolve, dirname, basename } from 'node:path'
 import { homedir } from 'node:os'
 
 const NAME = 'skill-manager'
@@ -30,7 +30,7 @@ export function apply(ctx) {
   const skills = ctx.skills
   const webServer = ctx.webServer
 
-  const config = { folder: DEFAULT_FOLDER, selected: [] }
+  const config = { folder: DEFAULT_FOLDER, selected: [], files: [] }
   const state = {
     folderExists: false,
     scanned: false,
@@ -42,6 +42,7 @@ export function apply(ctx) {
   }
   let generation = 0
   let scanPromise = null
+  let scanDirty = false
   let invalidate = function () {}
 
   async function loadConfig() {
@@ -61,11 +62,19 @@ export function apply(ctx) {
         const parsed = JSON.parse(raw)
         if (typeof parsed.folder === 'string' && parsed.folder.trim() !== '') config.folder = parsed.folder.trim()
         if (Array.isArray(parsed.selected)) config.selected = parsed.selected.filter((name) => typeof name === 'string')
+        if (Array.isArray(parsed.files)) config.files = parsed.files.filter((f) => typeof f === 'string' && f.trim() !== '').map((f) => f.trim())
       } catch (_) {
         // 配置损坏：使用默认值
       }
     }
   }
+  // 配置必须在任何请求与首轮扫描之前读完：否则会拿默认 folder 与空选择去扫描并写盘，
+  // 覆盖用户真实的 ~/.dsh/skill-manager.json（启动瞬间到达的请求就是这条路径）
+  let configReady = null
+  function ensureConfig() {
+    if (configReady === null) configReady = loadConfig()
+    return configReady
+  }
   async function persistConfig() {
     try {
       await mkdir(dirname(CONFIG_PATH), { recursive: true })
@@ -124,7 +133,10 @@ export function apply(ctx) {
     }
     return null
   }
-  function parseSkill(text, rel) {
+  function parseSkill(text, rel, fallbackName) {
+    // 带 BOM 的 UTF-8 文件（记事本"UTF-8 带 BOM"另存）首行不等于 '---'，
+    // 整段 frontmatter 会被忽略：名称退化成文件名、描述变成 '---'
+    if (typeof text === 'string' && text.charCodeAt(0) === 0xfeff) text = text.slice(1)
     const fm = parseFrontmatter(text)
     const fileName = rel.replace(/^.*[\\/]/, '')
     const stem = fileName.replace(/\.md$/i, '')
@@ -138,7 +150,7 @@ export function apply(ctx) {
       if (typeof fm.data['whenToUse'] === 'string' && fm.data['whenToUse'].trim() !== '') whenToUse = fm.data['whenToUse'].trim()
       if (fm.data.metadata !== null && typeof fm.data.metadata === 'object' && !Array.isArray(fm.data.metadata)) metadata = fm.data.metadata
     }
-    if (name === null) name = stem
+    if (name === null) name = fallbackName !== undefined ? fallbackName : stem
     let finalName = kebab(name)
     if (finalName === '') finalName = 'skill-' + hashText(rel)
     if (finalName.length > 64) finalName = finalName.slice(0, 64).replace(/-+$/, '')
@@ -151,7 +163,10 @@ export function apply(ctx) {
   }
 
   // ---------- 递归扫描 ----------
-  async function walk(dir, rel, found, errors, depth, budget) {
+  // 目录型（复合）技能：非根目录内存在 SKILL.md（不区分大小写）时，
+  // 整个目录视为一个技能（frontmatter 名称优先，否则用目录名），
+  // 目录内其余 .md/子目录都是附属资源，不再注册为独立技能。
+  async function walk(dir, rel, found, errors, depth, budget, isRoot) {
     if (depth > 24 || budget.count >= 4000) return
     let entries
     try {
@@ -160,13 +175,30 @@ export function apply(ctx) {
       errors.push(`listDir failed ${rel}: ${String(error)}`)
       return
     }
+    if (isRoot !== true) {
+      const skillMd = entries.find((e) => e.isFile() && /^skill\.md$/i.test(e.name))
+      if (skillMd !== undefined) {
+        const full = join(dir, skillMd.name)
+        let text
+        try {
+          text = await readFile(full, 'utf8')
+        } catch (error) {
+          errors.push(`read failed ${rel}/${skillMd.name}: ${String(error)}`)
+          return
+        }
+        const dirName = rel.split('/').pop()
+        const parsed = parseSkill(text, rel + '/' + skillMd.name, dirName)
+        found.push({ name: parsed.name, description: parsed.description, whenToUse: parsed.whenToUse, rel: rel + '/' + skillMd.name, path: full, metadata: parsed.metadata, base: dir })
+        return
+      }
+    }
     for (const entry of entries) {
       if (budget.count >= 4000) break
       budget.count++
       const childRel = rel === '' ? entry.name : rel + '/' + entry.name
       const full = join(dir, entry.name)
       if (entry.isDirectory()) {
-        await walk(full, childRel, found, errors, depth + 1, budget)
+        await walk(full, childRel, found, errors, depth + 1, budget, false)
       } else if (entry.isFile() && /\.md$/i.test(entry.name)) {
         let text
         try {
@@ -176,7 +208,7 @@ export function apply(ctx) {
           continue
         }
         const parsed = parseSkill(text, childRel)
-        found.push({ name: parsed.name, description: parsed.description, whenToUse: parsed.whenToUse, rel: childRel, path: full, metadata: parsed.metadata })
+        found.push({ name: parsed.name, description: parsed.description, whenToUse: parsed.whenToUse, rel: childRel, path: full, metadata: parsed.metadata, base: dir })
       }
     }
   }
@@ -207,6 +239,20 @@ export function apply(ctx) {
     const errors = []
     const found = []
     try {
+      // 显式指定的单个技能文件优先加载（与文件夹技能重名时以文件为准）
+      for (const file of config.files) {
+        if (typeof file !== 'string' || file.trim() === '') continue
+        const full = resolve(file.trim())
+        let text
+        try {
+          text = await readFile(full, 'utf8')
+        } catch (error) {
+          errors.push(`file load failed ${file}: ${String(error)}`)
+          continue
+        }
+        const parsed = parseSkill(text, basename(full))
+        found.push({ name: parsed.name, description: parsed.description, whenToUse: parsed.whenToUse, rel: basename(full), path: full, metadata: parsed.metadata, base: dirname(full), origin: 'file' })
+      }
       const root = resolve(config.folder)
       let info
       try {
@@ -222,7 +268,7 @@ export function apply(ctx) {
         errors.push(`not a directory: ${config.folder}`)
       } else {
         state.folderExists = true
-        await walk(root, '', found, errors, 0, { count: 0 })
+        await walk(root, '', found, errors, 0, { count: 0 }, true)
       }
     } catch (error) {
       errors.push(String(error))
@@ -236,7 +282,9 @@ export function apply(ctx) {
       out.push(s)
     }
     out.sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0))
-    config.selected = config.selected.filter((name) => seen[name] === true)
+    // 只在扫描健康（文件夹存在且无读错误）时裁剪勾选：一次临时性失败（盘未挂载、权限抖动）
+    // 若也裁剪，用户的整份勾选会被静默清空，并在下一次 persist 时永久写盘丢掉
+    if (state.folderExists === true && errors.length === 0) config.selected = config.selected.filter((name) => seen[name] === true)
     state.skills = out
     state.scanError = errors.join('; ')
     state.scanned = true
@@ -248,8 +296,18 @@ export function apply(ctx) {
   }
 
   function scheduleScan() {
-    if (scanPromise !== null) return scanPromise
-    const promise = scanNow().catch((error) => {
+    // 扫描进行中又收到请求（set-folder/set-files/reload）时不能直接复用旧扫描，
+    // 否则新配置要等用户手动「重新扫描」才生效：置脏标记，本轮结束后按最新配置补扫一次
+    if (scanPromise !== null) {
+      scanDirty = true
+      return scanPromise
+    }
+    const promise = (async () => {
+      do {
+        scanDirty = false
+        await scanNow()
+      } while (scanDirty === true)
+    })().catch((error) => {
       state.scanError = String(error)
       state.scanning = false
       ctx.logger.error(`[${NAME}] scan failed: ${String(error)}`)
@@ -273,7 +331,8 @@ export function apply(ctx) {
         for (const name of config.selected) selectedSet[name] = true
         const out = []
         for (const s of state.skills) {
-          if (signal !== undefined && signal.aborted) break
+          // 取消中的发现必须按契约标记为不完整：返回普通数组会被注册表当成完整目录缓存
+          if (signal !== undefined && signal.aborted) return { candidates: out, complete: false }
           if (selectedSet[s.name] !== true) continue
           const candidate = {
             name: s.name,
@@ -282,8 +341,8 @@ export function apply(ctx) {
             source: 'custom',
             provider: 'skill-manager',
             rank: 350,
-            locator: { path: s.path, rel: s.rel },
-            resourceBase: { kind: 'directory', path: config.folder },
+            locator: { path: s.path, rel: s.rel, base: s.base },
+            resourceBase: { kind: 'directory', path: s.base !== undefined ? s.base : resolve(config.folder) },
             path: s.path,
           }
           if (s.whenToUse !== undefined) candidate.whenToUse = s.whenToUse
@@ -312,7 +371,7 @@ export function apply(ctx) {
           invocation: { modelInvocable: true, userInvocable: true },
           source: 'custom',
           provider: 'skill-manager',
-          resourceBase: { kind: 'directory', path: config.folder },
+          resourceBase: { kind: 'directory', path: loc !== null && loc !== undefined && typeof loc.base === 'string' ? loc.base : resolve(config.folder) },
           path,
           content: parsed.content,
         }
@@ -335,6 +394,7 @@ export function apply(ctx) {
         whenToUse: s.whenToUse === undefined ? null : s.whenToUse,
         rel: s.rel,
         path: s.path,
+        origin: s.origin === undefined ? null : s.origin,
         selected: set[s.name] === true,
       })
     }
@@ -347,6 +407,7 @@ export function apply(ctx) {
       scanError: state.scanError,
       skills: skillRows,
       selected: config.selected.slice(),
+      files: config.files.slice(),
       otherSkills: state.otherSkills.slice(),
     }
   }
@@ -364,6 +425,12 @@ export function apply(ctx) {
   const readJsonBody = (req) => new Promise((resolveBody) => {
     const chunks = []
     let size = 0
+    let settled = false
+    const finish = (value) => {
+      if (settled === true) return
+      settled = true
+      resolveBody(value)
+    }
     req.on('data', (chunk) => {
       size += chunk.length
       if (size <= 1024 * 1024) chunks.push(chunk)
@@ -371,12 +438,14 @@ export function apply(ctx) {
     req.on('end', () => {
       const raw = Buffer.concat(chunks).toString('utf8')
       try {
-        resolveBody(raw === '' ? {} : JSON.parse(raw))
+        finish(raw === '' ? {} : JSON.parse(raw))
       } catch (_) {
-        resolveBody({})
+        finish({})
       }
     })
-    req.on('error', () => resolveBody({}))
+    req.on('error', () => finish({}))
+    // 客户端中途断开时不会触发 end：不兜底会让路由处理器永远挂起（闭包与连接一起泄漏）
+    req.on('close', () => finish({}))
   })
 
   ctx.effect(() => webServer.register({
@@ -384,10 +453,21 @@ export function apply(ctx) {
     path: '/skill-manager',
     handler: async (req, res) => {
       try {
+        await ensureConfig()
         const pathname = new URL(req.url, 'http://localhost').pathname.replace(/\/+$/, '')
         if (req.method === 'GET' && pathname === '/skill-manager/state') {
           return sendJson(res, 200, await buildView())
         }
+        if (req.method === 'POST' && pathname === '/skill-manager/set-files') {
+          const body = await readJsonBody(req)
+          const files = Array.isArray(body.files) ? body.files.filter((f) => typeof f === 'string' && f.trim() !== '').map((f) => f.trim()) : []
+          const unique = []
+          for (const f of files) if (!unique.includes(f)) unique.push(f)
+          config.files = unique
+          await persistConfig()
+          await scheduleScan()
+          return sendJson(res, 200, await buildView())
+        }
         if (req.method === 'POST' && pathname === '/skill-manager/set-folder') {
           const body = await readJsonBody(req)
           const folder = typeof body.path === 'string' ? body.path.trim() : ''
@@ -400,6 +480,8 @@ export function apply(ctx) {
         }
         if (req.method === 'POST' && pathname === '/skill-manager/set-selected') {
           const body = await readJsonBody(req)
+          // 首轮扫描未落地时 state.skills 为空，直接按已知名称裁剪会把整份勾选清空并写盘
+          if (state.scanned !== true) await scheduleScan()
           const names = Array.isArray(body.names) ? body.names.filter((name) => typeof name === 'string') : []
           const known = Object.create(null)
           for (const s of state.skills) known[s.name] = true
@@ -428,7 +510,7 @@ export function apply(ctx) {
 
   // ---------- 启动 ----------
   void (async () => {
-    await loadConfig()
+    await ensureConfig()
     await scheduleScan()
   })()
 }

package/package.json

@@ -1,12 +1,53 @@
 {
   "name": "@zhangchi835/skill-manager",
-  "version": "1.0.3",
-  "description": "",
-  "license": "MIT",
-  "author": "zhangchi",
-  "type": "commonjs",
-  "main": "index.js",
+  "version": "1.1.0",
+  "description": "DeepSeek Harness (DSH) 技能管理插件：从任意文件夹无命名规则递归加载技能（含 SKILL.md 目录型技能、任意位置的单个技能文件），在输入框「模式」选择器旁提供勾选即启用的会话技能选择器，并附带只做配置与展示的「技能管理」设置页。",
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./client": "./lib/client.js",
+    "./package.json": "./package.json"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [],
+      "platform": "web"
+    }
+  },
+  "files": [
+    "lib",
+    "cordis.patch.yml"
+  ],
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "test": "node test/smoke.mjs"
+  },
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek-harness",
+    "skill",
+    "skills",
+    "skill-manager"
+  ],
+  "author": "zhangchi <3090416692@qq.com>",
+  "license": "MIT",
+  "homepage": "https://github.com/zhangchi825/dsh-skills-project/tree/main/plugin#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/zhangchi825/dsh-skills-project.git",
+    "directory": "plugin"
+  },
+  "bugs": {
+    "url": "https://github.com/zhangchi825/dsh-skills-project/issues"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "publishConfig": {
+    "access": "public"
   }
 }

package/index.js

@@ -1,4 +0,0 @@
-module.exports = {
-  name: "@zhangchi835/skill-manager",
-  version: "1.0.0"
-}

package/plugin/README.md

@@ -1,66 +0,0 @@
-# @zhangchi835/skill-manager
-
-DeepSeek Harness（DSH）技能加载与管理插件：从任意文件夹**无命名规则**地递归加载技能（中文文件名、无 frontmatter、任意子目录均可），在输入框「模式」选择器旁提供**勾选即启用**的会话技能选择器，并附带「技能管理」设置页（无启用/停用开关）。
-
-## 功能
-
-- **递归加载**：配置一个文件夹，所有 `.md` 文件都被识别为技能；不要求 `SKILL.md`、kebab-case 或 YAML frontmatter（名称自动清洗，中文名回退为哈希名）。
-- **选择即启用**：勾选哪个技能就只启用哪个——未勾选的技能不出现在模型 `<available_skills>` 目录与 `/技能` 菜单中。
-- **技能管理页**：设置 → 技能管理，可配置文件夹、重新扫描、查看全部技能（**无启用/停用开关**，启用只通过输入框旁的勾选器）。
-- **持久化**：文件夹与勾选状态保存在 `~/.dsh/skill-manager.json`（首次运行自动迁移旧版 `~/.dsh/skills-hub.json`），重启自动恢复。
-
-## 安装（一条命令）
-
-```bash
-dsh plugin --profile web add @zhangchi835/skill-manager
-```
-
-该命令会：① 把包安装进 `~/.dsh/profiles/web` 的 dependencies；② 因本包声明了 `dsh.bundle.patch`，自动把包名 reconcile 进 `dsh.profile.bundles`，插件行随之进入组合。重启 DSH 进程后生效。
-
-> 手动安装（不使用 dsh plugin CLI 时）：`cd ~/.dsh/profiles/web && pnpm add @zhangchi835/skill-manager`，然后把下行写进 `~/.dsh/profiles/web/cordis.patch.yml`（用户补丁层）：
->
-> ```yaml
-> - insert:
->     - id: skill-manager
->       name: '@zhangchi835/skill-manager'
->       inject: [skills, webServer]
-> ```
-
-## 验证
-
-```bash
-curl http://127.0.0.1:<端口>/skill-manager/state   # 返回 JSON 即成功
-```
-
-## 使用
-
-1. 设置 → 技能管理：填写技能文件夹路径（默认 `~/.dsh/skills`），保存并加载。
-2. 任一会话输入框工具行、「模式」选择器旁，点「🧩 技能」勾选要启用的技能。
-3. 勾选后下一回合模型即可通过 `skill` 工具加载对应技能。
-
-## 发布（维护者）
-
-```bash
-npm login          # 首次
-npm publish --access public   # 在包目录执行
-```
-
-- 依赖只使用 Node 内置模块，profile 解析零负担；
-- `lib/index.js` 与 `cordis.patch.yml` 中的 `inject: [skills, webServer]` 是**必须**的（修复启动并发竞态导致的行空挂载），发布前请勿移除。
-
-## 本地开发
-
-```bash
-cd ~/.dsh/profiles/web
-pnpm add "link:<本包目录绝对路径>"   # link: 软链，改源码即时生效（file: 会复制、不同步）
-```
-
-## 结构
-
-- `lib/index.js`：Host 插件（skills 提供者 + `/skill-manager/*` JSON 路由）
-- `lib/client.js`：Web 客户端插件（模式选择器旁勾选器 + 技能管理页）
-- `cordis.patch.yml`：bundle 组合补丁（`dsh plugin add` 依赖它自动归入 bundles）
-
-## License
-
-MIT

package/plugin/package.json

@@ -1,37 +0,0 @@
-{
-  "name": "@zhangchi835/skill-manager",
-  "version": "1.0.0",
-  "description": "DeepSeek Harness skill manager plugin: no-naming-rules recursive folder scanning, select-to-enable composer skill picker, and a skills admin page without enable/disable toggles.",
-  "type": "module",
-  "main": "lib/index.js",
-  "exports": {
-    ".": "./lib/index.js",
-    "./client": "./lib/client.js",
-    "./package.json": "./package.json"
-  },
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "inject": [],
-      "platform": "web"
-    }
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "files": [
-    "lib",
-    "cordis.patch.yml"
-  ],
-  "keywords": [
-    "dsh",
-    "dsh-plugin",
-    "deepseek-harness",
-    "skill",
-    "skills",
-    "skill-manager"
-  ],
-  "license": "MIT"
-}