deepseek-harness-skill-mcp 0.1.0

package/package.json

@@ -0,0 +1,70 @@
+{
+  "name": "deepseek-harness-skill-mcp",
+  "version": "0.1.0",
+  "description": "Skill path and MCP server management for DeepSeek Harness Web",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/civilization-os/dsh-skill-mcp.git"
+  },
+  "homepage": "https://github.com/civilization-os/dsh-skill-mcp#readme",
+  "bugs": "https://github.com/civilization-os/dsh-skill-mcp/issues",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true,
+    "registry": "https://registry.npmjs.org/"
+  },
+  "type": "module",
+  "exports": {
+    ".": "./src/index.js",
+    "./client": "./lib/client.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "src",
+    "lib",
+    "cordis.patch.yml",
+    "README.md",
+    "LICENSE"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-settings"
+      ]
+    }
+  },
+  "scripts": {
+    "test": "node --test tests/*.test.js",
+    "build": "node scripts/build.js",
+    "web": "node scripts/web.js",
+    "setup": "node scripts/setup.js"
+  },
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "packageManager": "pnpm@10.33.0",
+  "dependencies": {
+    "@deepseek-ai/dsh-mcp-client": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-skill-filesystem": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-tools": "0.1.2-rc.1",
+    "@deepseek-ai/schemastery": "3.18.2",
+    "yaml": "^2.9.0"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": ">=4.0.2"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/dsh-skill": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-system-prompt": "0.1.2-rc.1",
+    "@modelcontextprotocol/sdk": "1.29.0",
+    "esbuild": "^0.28.2",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8"
+  }
+}

package/src/client/controller.js

@@ -0,0 +1,41 @@
+/** One observable per mounted plugin; drafts stay in the settings component. */
+export class ExtensionsController {
+  state = { extensions: [], sources: [], skills: [], revision: '', loading: false, saving: false, error: '', saved: false }
+  listeners = new Set()
+  lifetime = new AbortController()
+  generation = 0
+  silentPending = false
+  constructor(call) { this.call = call }
+  getSnapshot = () => this.state
+  subscribe = listener => { this.listeners.add(listener); return () => this.listeners.delete(listener) }
+  publish(patch) {
+    if (this.lifetime.signal.aborted) return
+    this.state = { ...this.state, ...patch }
+    for (const listener of this.listeners) listener()
+  }
+  async request(endpoint, args = {}, options = {}) {
+    if (this.state.saving || this.lifetime.signal.aborted) return false
+    const silent = endpoint === 'list' && options.silent === true
+    if (silent && (this.state.loading || this.silentPending)) return false
+    if (silent) this.silentPending = true
+    const generation = ++this.generation
+    const saving = endpoint !== 'list'
+    if (!silent) this.publish({ loading: !saving, saving, error: '', saved: false })
+    try {
+      const result = await this.call(endpoint, { ...args, revision: this.state.revision }, this.lifetime.signal)
+      if (this.lifetime.signal.aborted || generation !== this.generation) return false
+      if (!result.ok) {
+        if (!silent) this.publish({ error: result.error.code === 'extensions/conflict' ? 'conflict' : 'failed', loading: false, saving: false })
+        return false
+      }
+      this.publish(silent ? result.value : { ...result.value, loading: false, saving: false, saved: saving })
+      return true
+    } catch {
+      if (!silent && generation === this.generation) this.publish({ error: 'failed', loading: false, saving: false })
+      return false
+    } finally {
+      if (silent) this.silentPending = false
+    }
+  }
+  dispose() { this.lifetime.abort(); this.listeners.clear() }
+}

package/src/client/index.jsx

@@ -0,0 +1,262 @@
+/** Skill and MCP settings sections registered through the public Slots and Connection services. */
+import { useEffect, useId, useState } from 'react'
+import { ExtensionsController } from './controller.js'
+import { zh, en } from './locales.js'
+import css from './styles.css'
+
+export const inject = ['slots', 'locale', 'connection']
+const namespace = 'settings.extension-manager'
+const settingsPollIntervalMs = 3000
+
+export function apply(ctx) {
+  const controller = new ExtensionsController((endpoint, args, signal) => ctx.connection.rpc.call('/extensions', endpoint, args, signal))
+  ctx.effect(() => ctx.locale.register(namespace, { zh, en }))
+  ctx.effect(() => () => controller.dispose())
+  ctx.effect(() => {
+    const style = document.createElement('style')
+    style.textContent = css
+    document.head.append(style)
+    return () => style.remove()
+  })
+  ctx.on('connection/reset', () => { void controller.request('list') })
+  const t = ctx.locale.bind(namespace)
+  const face = { hooks: { manager: controller }, request: (endpoint, args, options) => controller.request(endpoint, args, options) }
+  // The two sections share one controller and managed patch; each kind gets its own settings page.
+  const section = (id, kind) => ctx.slots.inject('settings.section', () => ctx.slots.register({
+    name: 'settings.section', id, order: kind === 'skill' ? 16 : 17,
+    label: () => t(kind === 'skill' ? 'navSkill' : 'navMcp'), locale: namespace,
+    inject: () => face,
+  }, kind === 'skill' ? SkillSection : McpSection))
+  section('skill-manager', 'skill')
+  section('mcp-manager', 'mcp')
+}
+
+export function SkillSection({ t, useManager, request }) {
+  const state = useManager(value => value)
+  const [form, setForm] = useState('')
+  const [query, setQuery] = useState('')
+  const [groupBy, setGroupBy] = useState('path')
+  const busy = state.loading || state.saving
+  const sources = state.sources ?? []
+  const skills = state.skills ?? []
+  const visible = skills.filter(skill => {
+    const source = sources.find(item => item.id === skill.sourceId)
+    return `${skill.name} ${skill.description} ${source?.location ?? ''} ${source?.group ?? ''}`.toLowerCase().includes(query.toLowerCase())
+  })
+  const counts = {
+    all: skills.length,
+    automatic: skills.filter(skill => skill.valid && skill.modelInvocable && skill.sourceEnabled && !skill.shadowed).length,
+    manual: skills.filter(skill => skill.valid && !skill.modelInvocable && skill.userInvocable && skill.sourceEnabled).length,
+    invalid: skills.filter(skill => !skill.valid).length,
+  }
+  useLiveRefresh(request)
+  return <section className="dsh-ext dsh-skill-manager">
+    <header className="dsh-ext-heading"><div><h2>{t('navSkill')}</h2><p>{t('skillIntro')}</p></div>
+      <div className="dsh-ext-heading-actions"><button type="button" disabled={busy || !state.revision} onClick={() => setForm('source')}>{t('add')}</button>
+        <button type="button" disabled={busy || sources.length === 0} onClick={() => setForm('skill')}>{t('newSkill')}</button>
+        <button type="button" disabled={busy} onClick={() => request('list')}>{t('refresh')}</button></div></header>
+    <PageState state={state} t={t} />
+    <div className="dsh-skill-stats">
+      {Object.entries(counts).map(([key, value]) => <div key={key}><strong>{value}</strong><span>{t(`stat_${key}`)}</span></div>)}
+    </div>
+    <label className="dsh-skill-search"><span className="dsh-visually-hidden">{t('search')}</span>
+      <input type="search" value={query} onChange={event => setQuery(event.target.value)} placeholder={t('searchPlaceholder')} /></label>
+    <div className="dsh-skill-grouping" role="group" aria-label={t('groupView')}>
+      <span>{t('groupView')}</span><button type="button" aria-pressed={groupBy === 'path'} onClick={() => setGroupBy('path')}>{t('groupByPath')}</button>
+      <button type="button" aria-pressed={groupBy === 'custom'} onClick={() => setGroupBy('custom')}>{t('groupByCustom')}</button>
+    </div>
+    {form === 'source' && <AddForm kind="skill" t={t} busy={busy} onCancel={() => setForm('')} onSave={async args => {
+      if (await request('add-skill', args)) setForm('')
+    }} />}
+    {form === 'skill' && <NewSkillForm sources={sources} t={t} busy={busy} onCancel={() => setForm('')} onSave={async args => {
+      if (await request('create-skill', args)) setForm('')
+    }} />}
+    {sources.length === 0 && <div className="dsh-ext-card dsh-ext-empty"><strong>{t('emptySkills')}</strong><p>{t('emptySkillsHint')}</p></div>}
+    <div className="dsh-skill-sources">{groupBy === 'path' ? sources.map(source => <SkillPath key={source.id} source={source} skills={skills} visible={visible} query={query} t={t} busy={busy} request={request} />)
+      : groupSources(sources.filter(source => !query || visible.some(skill => skill.sourceId === source.id))).map(group => <section className="dsh-skill-user-group" key={group.name}>
+        <header><h3>{group.name || t('ungrouped')} <span className="dsh-ext-count">{group.sources.reduce((total, source) => total + skills.filter(skill => skill.sourceId === source.id).length, 0)}</span></h3></header>
+        <div>{group.sources.map(source => <SkillPath key={source.id} source={source} skills={skills} visible={visible} query={query} t={t} busy={busy} request={request} nested />)}</div>
+      </section>)}</div>
+    <p className="dsh-ext-footnote">{t('skillFootnote')}</p>
+  </section>
+}
+
+function groupSources(sources) {
+  const groups = new Map()
+  for (const source of sources) {
+    const key = source.group || ''
+    if (!groups.has(key)) groups.set(key, [])
+    groups.get(key).push(source)
+  }
+  return [...groups].map(([name, entries]) => ({ name, sources: entries }))
+    .sort((a, b) => a.name.localeCompare(b.name))
+}
+
+function SkillPath({ source, skills, visible, query, t, busy, request, nested = false }) {
+  const rows = visible.filter(skill => skill.sourceId === source.id)
+  if (query && rows.length === 0) return null
+  return <section className={`dsh-skill-source${nested ? ' dsh-skill-source-nested' : ''}`}>
+    <header><div className="dsh-skill-source-title"><span className={`dsh-ext-status ${source.enabled ? 'dsh-ext-status-available' : ''}`} aria-hidden="true" />
+      <div><h3>{source.location} <span className="dsh-ext-count">{skills.filter(skill => skill.sourceId === source.id).length}</span></h3>
+        <small>{source.group ? `${t('customGroup')}: ${source.group}` : t('ungrouped')}</small></div></div>
+      <button type="button" role="switch" aria-checked={source.enabled} disabled={busy}
+        onClick={() => request('enable', { id: source.id, enabled: !source.enabled })}>{t(source.enabled ? 'disable' : 'enable')}</button></header>
+    <GroupEditor source={source} t={t} busy={busy} request={request} />
+    {source.issue && <p className="dsh-ext-notice">{t(`issue_${source.issue}`)}</p>}
+    {rows.length === 0 ? <div className="dsh-ext-empty"><p>{t('sourceEmpty')}</p></div>
+      : <ul>{rows.map(skill => <SkillRow key={skill.relativePath} skill={skill} t={t} busy={busy} request={request} />)}</ul>}
+  </section>
+}
+
+function GroupEditor({ source, t, busy, request }) {
+  const [group, setGroup] = useState(source.group)
+  useEffect(() => setGroup(source.group), [source.group])
+  return <form className="dsh-skill-group-editor" onSubmit={event => {
+    event.preventDefault()
+    void request('set-skill-group', { id: source.id, group })
+  }}><label>{t('customGroup')}<input value={group} maxLength={64} disabled={busy} onChange={event => setGroup(event.target.value)} placeholder={t('groupPlaceholder')} /></label>
+    <button type="submit" disabled={busy || group.trim() === source.group}>{t('saveGroup')}</button></form>
+}
+
+export function McpSection({ t, useManager, request }) {
+  const state = useManager(value => value)
+  const [form, setForm] = useState(false)
+  const busy = state.loading || state.saving
+  const rows = state.extensions.filter(row => row.kind === 'mcp')
+  useLiveRefresh(request)
+  return <section className="dsh-ext">
+    <header className="dsh-ext-heading"><div><h2>{t('navMcp')}</h2><p>{t('mcpIntro')}</p></div>
+      <button type="button" disabled={busy} onClick={() => request('list')}>{t('refresh')}</button></header>
+    <PageState state={state} t={t} />
+    <section className="dsh-ext-card">
+      <header><h3>{t('mcp')} <span className="dsh-ext-count">{rows.length}</span></h3>
+        <button type="button" disabled={busy || !state.revision} onClick={() => setForm(true)}>{t('addMcp')}</button></header>
+      {rows.length === 0 && <div className="dsh-ext-empty"><strong>{t('emptyMcp')}</strong><p>{t('emptyMcpHint')}</p></div>}
+      <ul>{rows.map(row => <li key={row.id}><div className="dsh-ext-details"><strong>{row.id}</strong><code>{row.location}</code><McpRuntime row={row} t={t} /></div>
+        <button type="button" role="switch" aria-checked={row.enabled} aria-label={`${t(row.enabled ? 'disable' : 'enable')} ${row.id}`} disabled={busy}
+          onClick={() => request('enable', { id: row.id, enabled: !row.enabled })}>{t(row.enabled ? 'disable' : 'enable')}</button></li>)}</ul>
+      {form && <AddForm kind="mcp" t={t} busy={busy} onCancel={() => setForm(false)} onSave={async args => {
+        if (await request('add-mcp', args)) setForm(false)
+      }} />}
+    </section>
+    <p className="dsh-ext-footnote">{t('mcpFootnote')}</p>
+  </section>
+}
+
+function useLiveRefresh(request) {
+  useEffect(() => {
+    void request('list')
+    let timer
+    const poll = () => {
+      if (document.visibilityState === 'visible') void request('list', {}, { silent: true })
+      timer = window.setTimeout(poll, settingsPollIntervalMs)
+    }
+    const refreshWhenVisible = () => {
+      if (document.visibilityState === 'visible') void request('list', {}, { silent: true })
+    }
+    timer = window.setTimeout(poll, settingsPollIntervalMs)
+    document.addEventListener('visibilitychange', refreshWhenVisible)
+    return () => {
+      window.clearTimeout(timer)
+      document.removeEventListener('visibilitychange', refreshWhenVisible)
+    }
+  }, [request])
+}
+
+function PageState({ state, t }) {
+  return <>{state.loading && <p role="status">{t('loading')}</p>}
+    {state.error && <p className="dsh-ext-notice" role="alert">{t(state.error)}</p>}
+    {state.saved && <p className="dsh-ext-notice" role="status">{t('saved')}</p>}</>
+}
+
+function SkillRow({ skill, t, busy, request }) {
+  const state = !skill.valid ? 'invalid' : !skill.sourceEnabled || (!skill.modelInvocable && !skill.userInvocable)
+    ? 'disabled' : skill.shadowed ? 'shadowed' : !skill.modelInvocable ? 'manual' : 'available'
+  const invocation = skill.modelInvocable && skill.userInvocable ? 'both'
+    : skill.modelInvocable ? 'modelOnly' : skill.userInvocable ? 'manualOnly' : 'none'
+  const statusLabel = !skill.valid ? 'skillStatusInvalid' : !skill.sourceEnabled ? 'skillStatusSourceDisabled'
+    : skill.shadowed ? 'skillStatusShadowed' : ''
+  const update = patch => request('set-skill-invocation', {
+    sourceId: skill.sourceId, relativePath: skill.relativePath, skillRevision: skill.revision,
+    modelInvocable: skill.modelInvocable, userInvocable: skill.userInvocable, ...patch,
+  })
+  return <li className="dsh-skill-row"><div className="dsh-skill-row-main">
+    <div className="dsh-skill-name"><span className={`dsh-ext-status dsh-ext-status-${state}`} aria-hidden="true" /><strong>{skill.name}</strong>
+      <span className="dsh-skill-badge">{t(`format_${skill.format}`)}</span><span className="dsh-skill-badge">{t(`invocation_${invocation}`)}</span>
+      {statusLabel && <span className={`dsh-skill-badge dsh-skill-badge-${state}`}>{t(statusLabel)}</span>}</div>
+    <p>{skill.description || t('noDescription')}</p><code>{skill.relativePath}</code>
+    <details><summary>{t('details')}</summary><div className="dsh-skill-detail">
+      {skill.whenToUse && <p><strong>{t('whenToUse')}</strong>{skill.whenToUse}</p>}
+      {skill.issues.length > 0 && <div><strong>{t('diagnostics')}</strong><ul>{skill.issues.map(issue => <li key={issue}>{t(`issue_${issue}`)}</li>)}</ul></div>}
+      <div className="dsh-skill-invocation"><strong>{t('invocation')}</strong>
+        <label><input type="checkbox" checked={skill.modelInvocable} disabled={busy || !skill.valid} onChange={event => update({ modelInvocable: event.target.checked })} /> {t('modelInvocable')}</label>
+        <label><input type="checkbox" checked={skill.userInvocable} disabled={busy || !skill.valid} onChange={event => update({ userInvocable: event.target.checked })} /> {t('userInvocable')}</label></div>
+      <div><strong>{t('resources')}</strong>{skill.resources.length
+        ? <ul className="dsh-skill-resources">{skill.resources.map(path => <li key={path}><code>{path}</code></li>)}</ul>
+        : <p>{t('noResources')}</p>}</div>
+    </div></details>
+  </div></li>
+}
+
+function McpRuntime({ row, t }) {
+  const tools = row.tools ?? []
+  const state = !row.enabled ? 'disabled' : tools.length ? 'available' : 'waiting'
+  const prefix = `mcp__${row.id}__`
+  return <div className="dsh-ext-runtime">
+    <span className={`dsh-ext-status dsh-ext-status-${state}`} aria-hidden="true" />
+    <span className="dsh-ext-status-label">{t(`status_${state}`)}</span>
+    {tools.length > 0 && <details><summary>{t('tools')} · {tools.length}</summary>
+      <ul className="dsh-ext-tools">{tools.map(name => <li key={name}><code title={name}>{name.startsWith(prefix) ? name.slice(prefix.length) : name}</code></li>)}</ul>
+    </details>}
+  </div>
+}
+
+function NewSkillForm({ sources, t, busy, onSave, onCancel }) {
+  const prefix = useId()
+  return <form className="dsh-ext-form dsh-skill-create" onSubmit={event => {
+    event.preventDefault()
+    const data = new FormData(event.currentTarget)
+    void onSave({
+      sourceId: data.get('sourceId'), name: data.get('name'), description: data.get('description'),
+      whenToUse: data.get('whenToUse'), modelInvocable: data.has('modelInvocable'),
+      userInvocable: data.has('userInvocable'), structure: data.get('structure'),
+    })
+  }}><fieldset disabled={busy}>
+    <label htmlFor={`${prefix}-sourceId`}>{t('source')}<select id={`${prefix}-sourceId`} name="sourceId">
+      {sources.map(source => <option key={source.id} value={source.id}>{source.id}</option>)}</select></label>
+    <label htmlFor={`${prefix}-name`}>{t('skillName')}<input id={`${prefix}-name`} name="name" required pattern="[a-z0-9]+(?:-[a-z0-9]+)*" autoComplete="off" /></label>
+    <label className="dsh-ext-span" htmlFor={`${prefix}-description`}>{t('description')}<textarea id={`${prefix}-description`} name="description" rows={3} required /></label>
+    <label className="dsh-ext-span" htmlFor={`${prefix}-whenToUse`}>{t('whenToUse')}<textarea id={`${prefix}-whenToUse`} name="whenToUse" rows={2} /></label>
+    <label htmlFor={`${prefix}-structure`}>{t('structure')}<select id={`${prefix}-structure`} name="structure">
+      <option value="minimal">{t('structureMinimal')}</option><option value="standard">{t('structureStandard')}</option></select></label>
+    <div className="dsh-skill-create-flags"><span>{t('invocation')}</span>
+      <label><input type="checkbox" name="modelInvocable" defaultChecked /> {t('modelInvocable')}</label>
+      <label><input type="checkbox" name="userInvocable" defaultChecked /> {t('userInvocable')}</label></div>
+    <div className="dsh-ext-actions"><button type="button" onClick={onCancel}>{t('cancel')}</button><button type="submit">{t(busy ? 'saving' : 'create')}</button></div>
+  </fieldset></form>
+}
+
+function AddForm({ kind, t, busy, onSave, onCancel }) {
+  const prefix = useId()
+  const [transport, setTransport] = useState('stdio')
+  const field = (name, required = true, multiline = false) => <label htmlFor={`${prefix}-${name}`}>{t(name)}{multiline
+    ? <textarea id={`${prefix}-${name}`} name={name} rows={3} />
+    : <input id={`${prefix}-${name}`} name={name} required={required} autoComplete="off" {...(name === 'id' ? { pattern: '[A-Za-z0-9_\\-]{1,32}', maxLength: 32 } : {})} />}</label>
+  return <form className="dsh-ext-form" onSubmit={event => {
+    event.preventDefault()
+    const data = Object.fromEntries(new FormData(event.currentTarget))
+    const args = kind === 'skill' ? { directory: data.directory, group: data.group ?? '' } : {
+      id: data.id, configuration: JSON.stringify(transport === 'stdio'
+        ? { transport, command: data.command, args: data.args.split(/\r?\n/).filter(Boolean), cwd: data.cwd }
+        : { transport, url: data.url }),
+    }
+    void onSave(args)
+  }}><fieldset disabled={busy}>{kind === 'skill' ? <>{field('directory')} {field('group', false)}</> : <>{field('id')}
+      <label htmlFor={`${prefix}-transport`}>{t('transport')}<select id={`${prefix}-transport`} value={transport} onChange={event => setTransport(event.target.value)}>
+        <option value="stdio">{t('stdio')}</option><option value="streamable-http">{t('http')}</option></select></label>
+      {transport === 'stdio' ? <>{field('command')}{field('args', false, true)}{field('cwd', false)}</> : field('url')}
+      <p>{t('secret')}</p>
+    </>}
+    <div className="dsh-ext-actions"><button type="button" onClick={onCancel}>{t('cancel')}</button><button type="submit">{t(busy ? 'saving' : 'save')}</button></div>
+  </fieldset></form>
+}

package/src/client/locales.js

@@ -0,0 +1,65 @@
+/** Both dictionaries use the same key vocabulary; checked by tests. */
+export const zh = {
+  navSkill: 'Skill 管理', navMcp: 'MCP 管理',
+  skillIntro: '配置一个或多个 Skill 路径；每个路径下可以包含多个技能。', mcpIntro: '管理外部工具服务器，让它们在当前配置中可用。',
+  skills: 'Skill 路径', mcp: 'MCP 服务器', refresh: '刷新', add: '添加路径', addMcp: '添加服务器', newSkill: '新建 Skill',
+  emptySkills: '还没有配置 Skill 路径', emptySkillsHint: '指定一个本地 skills 目录，目录下的各个子目录就是技能。',
+  emptyMcp: '还没有添加 MCP 服务器', emptyMcpHint: '通过本地命令或 HTTP 地址连接外部工具。',
+  id: '标识', directory: 'Skill 路径', group: '用户分组（可选）', transport: '配置类型', stdio: 'stdio', http: 'HTTP',
+  command: '命令', args: '参数（每行一个）', cwd: '工作目录（可选）', url: '服务器地址',
+  cancel: '取消', save: '添加', create: '创建', saving: '保存中…', loading: '加载中…',
+  enabled: '配置已启用', disabled: '已禁用', enable: '启用', disable: '禁用',
+  saved: '更改已保存。', failed: '操作失败，请检查输入、连接或服务端日志后重试。',
+  conflict: '配置已被修改，请刷新后重试。未提交的表单内容已保留。',
+  skillFootnote: '新路径默认禁用。启用后，Skill provider 会扫描该路径下的所有技能。配置变更会自动生效。',
+  mcpFootnote: '新服务器默认禁用。启用后会执行所填命令或连接所填地址。配置变更会自动生效。',
+  secret: '请勿填写密钥或带令牌的地址。此版本暂不支持认证参数。',
+  tools: '工具列表', status_available: '工具可用', status_waiting: '等待发现工具', status_disabled: '已禁用',
+  skillHint: '启用后由 Skill provider 扫描；每个配置项对应一个包含多个技能的目录。',
+  stat_all: '全部技能', stat_automatic: '模型可用', stat_manual: '仅手动', stat_invalid: '配置异常',
+  search: '搜索', searchPlaceholder: '搜索名称、描述、路径或分组…', sourceEmpty: '这个路径下还没有发现 Skill。',
+  groupView: '分组方式', groupByPath: '按路径', groupByCustom: '按用户分组', customGroup: '用户分组', ungrouped: '未分组',
+  groupPlaceholder: '例如：工作、个人、开发', saveGroup: '保存分组',
+  noDescription: '没有可用的描述', details: '查看详情', whenToUse: '适用场景', diagnostics: '格式诊断',
+  invocation: '调用权限', modelInvocable: '允许模型自动选择', userInvocable: '允许用户通过 /name 调用',
+  invocation_both: '自动 + 手动', invocation_modelOnly: '仅模型', invocation_manualOnly: '仅手动', invocation_none: '完全禁用',
+  format_bundle: '目录', format_flat: '单文件', skillStatusInvalid: '格式异常', skillStatusSourceDisabled: '来源已禁用', skillStatusShadowed: '被同名覆盖',
+  resources: '资源文件', noResources: '没有附加资源', source: '保存来源', skillName: 'Skill 名称', description: '描述',
+  structure: '目录结构', structureMinimal: '仅 SKILL.md', structureStandard: '标准目录（scripts / references / assets）',
+  'issue_missing-frontmatter': '缺少 YAML frontmatter', 'issue_invalid-yaml': 'YAML 格式错误',
+  'issue_invalid-frontmatter': 'frontmatter 必须是对象', 'issue_invalid-name': 'name 必须使用 kebab-case',
+  'issue_missing-description': '缺少 description', 'issue_invalid-invocation': '调用权限字段不是有效布尔值',
+  issue_unreadable: '文件无法读取', 'issue_source-unreadable': 'Skill 路径无法读取',
+}
+export const en = {
+  navSkill: 'Skills', navMcp: 'MCP',
+  skillIntro: 'Configure one or more Skill paths; each path can contain multiple skills.', mcpIntro: 'Manage external tool servers for this configuration.',
+  skills: 'Skill paths', mcp: 'MCP servers', refresh: 'Refresh', add: 'Add path', addMcp: 'Add server', newSkill: 'New Skill',
+  emptySkills: 'No Skill paths configured', emptySkillsHint: 'Choose a local skills directory whose children contain the individual skills.',
+  emptyMcp: 'No MCP servers yet', emptyMcpHint: 'Connect external tools with a local command or HTTP endpoint.',
+  id: 'Identifier', directory: 'Skill path', group: 'User group (optional)', transport: 'Type', stdio: 'stdio', http: 'HTTP',
+  command: 'Command', args: 'Arguments (one per line)', cwd: 'Working directory (optional)', url: 'Server URL',
+  cancel: 'Cancel', save: 'Add', create: 'Create', saving: 'Saving…', loading: 'Loading…',
+  enabled: 'Configured enabled', disabled: 'Disabled', enable: 'Enable', disable: 'Disable',
+  saved: 'Changes saved.', failed: 'Operation failed. Check input, connection or server logs and retry.',
+  conflict: 'Configuration changed. Refresh and retry; your draft has been retained.',
+  skillFootnote: 'New paths are disabled. Once enabled, the Skill provider scans every skill below them.',
+  mcpFootnote: 'New servers are disabled. Enabling one runs its command or connects to its endpoint; changes apply automatically.',
+  secret: 'Do not enter secrets or token-bearing URLs. Authentication fields are not supported yet.',
+  tools: 'Tools', status_available: 'Tools available', status_waiting: 'Waiting for tools', status_disabled: 'Disabled',
+  skillHint: 'The Skill provider scans enabled paths; every configured path contains multiple skills.',
+  stat_all: 'All skills', stat_automatic: 'Model enabled', stat_manual: 'Manual only', stat_invalid: 'Invalid',
+  search: 'Search', searchPlaceholder: 'Search name, description, path or group…', sourceEmpty: 'No Skills were found in this path.',
+  groupView: 'Group view', groupByPath: 'By path', groupByCustom: 'By user group', customGroup: 'User group', ungrouped: 'Ungrouped',
+  groupPlaceholder: 'For example: Work, Personal, Development', saveGroup: 'Save group',
+  noDescription: 'No usable description', details: 'View details', whenToUse: 'When to use', diagnostics: 'Diagnostics',
+  invocation: 'Invocation', modelInvocable: 'Allow model selection', userInvocable: 'Allow user /name invocation',
+  invocation_both: 'Model + user', invocation_modelOnly: 'Model only', invocation_manualOnly: 'Manual only', invocation_none: 'Fully disabled',
+  format_bundle: 'Bundle', format_flat: 'Flat file', skillStatusInvalid: 'Invalid', skillStatusSourceDisabled: 'Source disabled', skillStatusShadowed: 'Shadowed',
+  resources: 'Resource files', noResources: 'No additional resources', source: 'Source', skillName: 'Skill name', description: 'Description',
+  structure: 'Structure', structureMinimal: 'SKILL.md only', structureStandard: 'Standard folders (scripts / references / assets)',
+  'issue_missing-frontmatter': 'Missing YAML frontmatter', 'issue_invalid-yaml': 'Invalid YAML',
+  'issue_invalid-frontmatter': 'Frontmatter must be an object', 'issue_invalid-name': 'name must use kebab-case',
+  'issue_missing-description': 'Missing description', 'issue_invalid-invocation': 'Invocation field is not a valid boolean',
+  issue_unreadable: 'File cannot be read', 'issue_source-unreadable': 'Skill path cannot be read',
+}

package/src/client/styles.css

@@ -0,0 +1,34 @@
+.dsh-ext{color:var(--dsw-alias-label-primary);max-width:840px;padding:4px 0 28px;font:inherit}
+.dsh-ext-heading,.dsh-ext-card>header{display:flex;justify-content:space-between;align-items:center;gap:16px}
+.dsh-ext h2{font-size:22px;letter-spacing:-.4px;margin:0 0 8px}.dsh-ext h3{font-size:15px;margin:0;display:flex;align-items:center;gap:8px}
+.dsh-ext p,.dsh-ext small{color:var(--dsw-alias-label-tertiary);font-size:13px;line-height:1.6}.dsh-ext-heading p{margin:0}
+.dsh-ext button{font:inherit;font-size:13px;cursor:pointer;border:1px solid var(--dsw-alias-border-l4);border-radius:9px;background:var(--dsw-alias-bg-layer-2);color:inherit;padding:8px 13px;white-space:nowrap}
+.dsh-ext button:hover{background:var(--dsw-alias-bg-layer-3)}.dsh-ext button:disabled{opacity:.5;cursor:default}
+.dsh-ext :is(button,input,select,textarea):focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:3px}
+.dsh-ext-card{border:1px solid var(--dsw-alias-border-l4);border-radius:16px;margin-top:20px;background:var(--dsw-alias-bg-layer-2);overflow:hidden}
+.dsh-ext-card>header{padding:18px 20px;border-bottom:1px solid var(--dsw-alias-border-l4)}.dsh-ext-count{font-size:11px;font-weight:400;color:var(--dsw-alias-label-tertiary)}
+.dsh-ext-empty{padding:32px 20px}.dsh-ext-empty strong{font-size:14px;font-weight:500}.dsh-ext-empty p{margin:6px 0 0}
+.dsh-ext ul{list-style:none;padding:0;margin:0}.dsh-ext li{display:flex;justify-content:space-between;align-items:center;gap:14px;padding:16px 20px;border-bottom:1px solid var(--dsw-alias-border-l4)}.dsh-ext li:last-child{border:0}
+.dsh-ext-details{display:flex;flex-direction:column;gap:5px;min-width:0}.dsh-ext-details strong{font-size:14px}.dsh-ext-details code{font-size:12px;color:var(--dsw-alias-label-secondary);overflow-wrap:anywhere}
+.dsh-ext-runtime{display:flex;align-items:center;flex-wrap:wrap;gap:7px;font-size:12px;color:var(--dsw-alias-label-tertiary)}
+.dsh-ext-status{width:7px;height:7px;border-radius:50%;background:#858585;box-shadow:0 0 0 3px color-mix(in srgb,#858585 16%,transparent)}
+.dsh-ext-status-available{background:#38a169;box-shadow:0 0 0 3px color-mix(in srgb,#38a169 18%,transparent)}.dsh-ext-status-waiting{background:#d69e2e;box-shadow:0 0 0 3px color-mix(in srgb,#d69e2e 18%,transparent)}
+.dsh-ext-runtime details{width:100%;margin-top:2px}.dsh-ext-runtime summary{width:max-content;cursor:pointer;color:var(--dsw-alias-label-secondary);user-select:none}.dsh-ext-runtime summary:hover{color:var(--dsw-alias-label-primary)}
+.dsh-ext-runtime .dsh-ext-tools{display:flex;flex-wrap:wrap;gap:6px;margin-top:8px}.dsh-ext-runtime .dsh-ext-tools li{display:block;border:0;padding:4px 8px;border-radius:6px;background:var(--dsw-alias-bg-layer-3)}
+.dsh-ext-form{padding:20px;border-top:1px solid var(--dsw-alias-border-l4)}.dsh-ext fieldset{border:0;padding:0;margin:0;display:grid;grid-template-columns:1fr 1fr;gap:16px}.dsh-ext label{display:flex;flex-direction:column;gap:7px;font-size:13px}
+.dsh-ext input,.dsh-ext select,.dsh-ext textarea{box-sizing:border-box;min-width:0;width:100%;font:inherit;color:inherit;background:var(--dsw-alias-bg-layer-1);border:1px solid var(--dsw-alias-border-l4);border-radius:8px;padding:10px}.dsh-ext textarea{resize:vertical}
+.dsh-ext-actions{display:flex;justify-content:flex-end;gap:8px;grid-column:1/-1}.dsh-ext fieldset>p{grid-column:1/-1;margin:0}.dsh-ext-notice{padding:12px 16px;border:1px solid var(--dsw-alias-border-l4);border-radius:10px}.dsh-ext-footnote{padding:0 4px}
+.dsh-ext-heading-actions{display:flex;gap:8px;align-items:center}.dsh-visually-hidden{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}
+.dsh-skill-stats{display:grid;grid-template-columns:repeat(4,1fr);gap:10px;margin-top:20px}.dsh-skill-stats>div{display:flex;flex-direction:column;gap:4px;padding:14px 16px;border:1px solid var(--dsw-alias-border-l4);border-radius:12px;background:var(--dsw-alias-bg-layer-2)}.dsh-skill-stats strong{font-size:20px}.dsh-skill-stats span{font-size:12px;color:var(--dsw-alias-label-tertiary)}
+.dsh-skill-search{margin-top:14px}.dsh-skill-search input{padding-left:13px}.dsh-skill-manager>.dsh-ext-form{margin-top:14px;border:1px solid var(--dsw-alias-border-l4);border-radius:14px;background:var(--dsw-alias-bg-layer-2)}
+.dsh-skill-grouping{display:flex;align-items:center;justify-content:flex-end;gap:6px;margin-top:10px}.dsh-skill-grouping>span{margin-right:4px;font-size:12px;color:var(--dsw-alias-label-tertiary)}.dsh-skill-grouping button{padding:5px 10px}.dsh-skill-grouping button[aria-pressed=true]{border-color:var(--dsw-alias-brand-primary);background:color-mix(in srgb,var(--dsw-alias-brand-primary) 13%,transparent)}
+.dsh-skill-sources{display:flex;flex-direction:column;gap:14px;margin-top:14px}.dsh-skill-source{border:1px solid var(--dsw-alias-border-l4);border-radius:15px;background:var(--dsw-alias-bg-layer-2);overflow:hidden}.dsh-skill-source>header{display:flex;justify-content:space-between;align-items:center;gap:16px;padding:16px 18px;border-bottom:1px solid var(--dsw-alias-border-l4)}
+.dsh-skill-source-title{display:flex;align-items:flex-start;gap:11px;min-width:0}.dsh-skill-source-title>.dsh-ext-status{margin-top:6px;flex:0 0 auto}.dsh-skill-source-title h3{margin-bottom:5px;overflow-wrap:anywhere}.dsh-skill-source-title small{display:block;font-size:11px;color:var(--dsw-alias-label-tertiary);overflow-wrap:anywhere}
+.dsh-skill-group-editor{display:flex;align-items:flex-end;gap:8px;padding:10px 18px;border-bottom:1px solid var(--dsw-alias-border-l4);background:var(--dsw-alias-bg-layer-1)}.dsh-skill-group-editor label{flex:1}.dsh-skill-group-editor input{padding:7px 9px}.dsh-skill-group-editor button{padding:7px 10px}
+.dsh-skill-user-group{border:1px solid var(--dsw-alias-border-l4);border-radius:16px;background:var(--dsw-alias-bg-layer-2);overflow:hidden}.dsh-skill-user-group>header{padding:15px 18px;border-bottom:1px solid var(--dsw-alias-border-l4)}.dsh-skill-user-group>div{display:flex;flex-direction:column;gap:10px;padding:10px}.dsh-skill-source-nested{border-radius:11px;background:var(--dsw-alias-bg-layer-1)}
+.dsh-skill-row{display:block!important;padding:15px 18px!important}.dsh-skill-row-main{min-width:0}.dsh-skill-name{display:flex;align-items:center;gap:9px}.dsh-skill-name strong{font-size:14px}.dsh-skill-row-main>p{margin:6px 0 3px}.dsh-skill-row-main>code{font-size:11px;color:var(--dsw-alias-label-tertiary)}
+.dsh-skill-badge{font-size:11px;padding:2px 7px;border-radius:999px;background:var(--dsw-alias-bg-layer-3);color:var(--dsw-alias-label-secondary)}.dsh-skill-badge-invalid{color:#e98282}.dsh-skill-badge-shadowed{color:#a98af8}.dsh-ext-status-invalid{background:#e05252;box-shadow:0 0 0 3px color-mix(in srgb,#e05252 18%,transparent)}.dsh-ext-status-shadowed{background:#8b5cf6;box-shadow:0 0 0 3px color-mix(in srgb,#8b5cf6 18%,transparent)}.dsh-ext-status-manual{background:#d69e2e;box-shadow:0 0 0 3px color-mix(in srgb,#d69e2e 18%,transparent)}
+.dsh-skill-row details{margin-top:9px}.dsh-skill-row summary{width:max-content;cursor:pointer;font-size:12px;color:var(--dsw-alias-label-secondary)}.dsh-skill-detail{display:grid;grid-template-columns:1fr 1fr;gap:14px;margin-top:12px;padding:14px;border-radius:10px;background:var(--dsw-alias-bg-layer-1)}.dsh-skill-detail>p{grid-column:1/-1;margin:0}.dsh-skill-detail p strong,.dsh-skill-detail>div>strong{display:block;margin-bottom:5px;color:var(--dsw-alias-label-secondary);font-size:12px}
+.dsh-skill-invocation{display:flex;flex-direction:column;gap:7px}.dsh-skill-invocation label,.dsh-skill-create-flags label{display:flex;flex-direction:row;align-items:center;gap:5px}.dsh-ext input[type=checkbox]{width:auto;min-width:auto}.dsh-skill-detail ul,.dsh-skill-detail li{display:block!important;margin:0;padding:0!important;border:0!important}.dsh-skill-resources{display:flex!important;flex-wrap:wrap!important;gap:5px}.dsh-skill-resources li{padding:3px 6px!important;border-radius:5px!important;background:var(--dsw-alias-bg-layer-3)!important}
+.dsh-ext-span{grid-column:1/-1}.dsh-skill-create-flags{display:flex;flex-direction:column;gap:7px;font-size:13px}.dsh-skill-create-flags>span{margin-bottom:1px}.dsh-skill-source>.dsh-ext-notice{margin:12px 18px}.dsh-skill-source>.dsh-ext-empty{padding:18px}
+@media(max-width:600px){.dsh-ext fieldset,.dsh-skill-detail{grid-template-columns:1fr}.dsh-ext-heading{align-items:flex-start;flex-direction:column}.dsh-ext-heading-actions{flex-wrap:wrap}.dsh-ext-card>header{padding:14px}.dsh-ext li{padding:14px}.dsh-skill-stats{grid-template-columns:repeat(2,1fr)}.dsh-skill-grouping{justify-content:flex-start}.dsh-skill-group-editor{align-items:stretch;flex-direction:column}}

package/src/index.js

@@ -0,0 +1,54 @@
+/** Skill and MCP configuration tools for a profile-owned managed patch. */
+import Schema from '@deepseek-ai/schemastery'
+import { homedir } from 'node:os'
+import { join } from 'node:path'
+import { defineTool } from '@deepseek-ai/dsh-tools'
+import { ExtensionStore } from './store.js'
+import { createWebHandler } from './web.js'
+
+export const name = 'extension-manager'
+export const inject = ['tools', 'skills']
+export const Config = Schema.object({ patchPath: Schema.string().default('') })
+
+const string = { type: 'string', required: true }
+const output = {
+  schema: { type: 'object', additionalProperties: true, properties: {} },
+  render: (_args, value) => [{ type: 'text', text: JSON.stringify(value, null, 2) }],
+}
+
+/** Register management operations. MCP processes are started only by the profile loader. */
+export async function apply(ctx, config) {
+  const home = process.env.DSH_HOME || join(homedir(), '.dsh')
+  const store = new ExtensionStore(config.patchPath || join(home, 'profiles', 'web', 'cordis.patch.yml'))
+  await store.read()
+  ctx.inject(['connection'], web => {
+    web.connection.rpc.handle('/extensions', createWebHandler(store, ctx))
+  })
+  const register = (name, description, parameters, execute) => ctx.tools.register(defineTool({ name, description, parameters, output, execute }))
+
+  register('extensions_list', 'List managed Skill sources and MCP configurations; configured enabled state is not connection health.', {}, async () => ({
+    extensions: (await store.read()).map(row => ({
+      id: row.id, kind: row.config.serverName ? 'mcp' : 'skill', enabled: !row.disabled,
+      ...(row.config.transport ? { transport: row.config.transport } : { directory: row.config.customSkillDirs[0] }),
+    })),
+  }))
+  register('extensions_add_skill', 'Add an existing root containing skill directories. Added sources are disabled until explicitly enabled.', {
+    id: string, directory: string,
+  }, (args, exec) => store.addSkill(args.id, args.directory, exec.signal))
+  register('extensions_add_mcp', 'Add a disabled MCP server. configuration is JSON with transport and command/args/cwd or url. Do not supply secrets in arguments.', {
+    id: string, configuration: string,
+  }, (args, exec) => {
+    const input = JSON.parse(args.configuration)
+    if (!input || typeof input !== 'object' || Array.isArray(input)) throw new Error('configuration must be a JSON object.')
+    return store.addMcp(args.id, input, exec.signal)
+  })
+  register('extensions_set_enabled', 'Enable or disable a managed extension. Enabling MCP authorizes its configured executable or endpoint to run when the profile reloads. Live profiles reload automatically; startup profiles require restart.', {
+    id: string, enabled: { type: 'boolean', required: true },
+  }, (args, exec) => store.setEnabled(args.id, args.enabled, exec.signal))
+  register('extensions_inspect', 'Inspect actual Skill catalog and visible MCP tool names for the caller. Zero tools does not establish connection failure. Does not start a separate connection probe.', {
+    cwd: string,
+  }, async (args, exec) => ({
+    skills: await ctx.skills.snapshot({ cwd: args.cwd, scope: exec.agent, signal: exec.signal }),
+    mcpTools: ctx.tools.schemas(exec.agent).map(tool => tool.name).filter(name => name.startsWith('mcp__')),
+  }))
+}