dsh-plugin-capabilities 0.3.3 → 0.3.4

package/lib/index.js

@@ -1,6 +1,6 @@
 // src/index.ts
 import { existsSync as existsSync7 } from "node:fs";
-import { dirname as dirname4, join as join9 } from "node:path";
+import { dirname as dirname4, join as join10 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // src/agents.ts
@@ -174,7 +174,7 @@ function skipVoid(ctx, banNewLines, banComments) {
     skipComment(ctx);
   }
 }
-function skipUntil(ctx, sep, end) {
+function skipUntil(ctx, sep2, end) {
   let ptr = ctx.p;
   if (!end) {
     ptr = indexOfNewline(ctx.s, ptr);
@@ -185,7 +185,7 @@ function skipUntil(ctx, sep, end) {
     let c = ctx.s.charCodeAt(ctx.p);
     if (c === 35) {
       skipComment(ctx);
-    } else if (c === end || c === sep) {
+    } else if (c === end || c === sep2) {
       return;
     }
   }
@@ -771,6 +771,7 @@ function profileDir(profile, dshHome = process.env.DSH_HOME) {
 
 // src/routes.ts
 import { mkdirSync as mkdirSync6 } from "node:fs";
+import { join as join9, sep } from "node:path";
 
 // src/http.ts
 async function readJsonBody(request) {
@@ -1371,6 +1372,20 @@ function setSkillPolicy(file, enabled) {
   if (!enabled) kept.push("disable-model-invocation: true", "user-invocable: false");
   writeFileSync3(file, `---${newline}${kept.join(newline)}${newline}---${body}`, "utf8");
 }
+function updateSkillFile(file, input) {
+  const text = readFileSync5(file, "utf8");
+  const match = /^---\r?\n([\s\S]*?)\r?\n---/.exec(text);
+  if (match === null) throw new Error("skill file has no frontmatter block");
+  const newline = text.includes("\r\n---") ? "\r\n" : "\n";
+  const lines = match[1].split(/\r?\n/);
+  const kept = lines.filter((line) => !/^(name|description|whenToUse|disable-model-invocation|user-invocable):/.test(line));
+  const head = [`name: ${input.name}`, `description: ${quote(input.description)}`];
+  if (input.whenToUse !== void 0 && input.whenToUse !== "") head.push(`whenToUse: ${quote(input.whenToUse)}`);
+  if (!input.modelInvocable) kept.push("disable-model-invocation: true");
+  if (!input.userInvocable) kept.push("user-invocable: false");
+  const body = input.content.replace(/\r\n/g, "\n").trim();
+  writeFileSync3(file, `---${newline}${[...head, ...kept].join(newline)}${newline}---${newline}${newline}${body}${newline}`, "utf8");
+}
 
 // src/mcp.ts
 import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "node:fs";
@@ -1550,10 +1565,25 @@ function removeMcp(profileDirPath, id) {
 }
 
 // src/routes.ts
-var EDITABLE_SOURCE = "user-dsh";
-function toSkillRow(skill) {
+function customSkillWritable(dir, dshHome) {
+  const state = pluginStateDir(dshHome);
+  if (dir === state || dir.startsWith(state + sep)) return true;
+  return loadState(dshHome).skillRoots.some((entry) => entry.roots.some((root) => dir === root || dir.startsWith(root + sep)));
+}
+function skillWritable(skill, dir, dshHome) {
+  if (dir === void 0) return false;
+  if (skill.source === "user-dsh") return true;
+  return skill.source === "custom" && customSkillWritable(dir, dshHome);
+}
+function toSkillRow(skill, dshHome) {
   const dir = skill.resourceBase?.kind === "directory" ? skill.resourceBase.path : void 0;
-  return { ...skill, editable: skill.source === EDITABLE_SOURCE, ...dir !== void 0 ? { dir } : {}, policyEditable: dir !== void 0 };
+  return {
+    ...skill,
+    editable: skillWritable(skill, dir, dshHome),
+    removable: skill.source === "user-dsh",
+    ...dir !== void 0 ? { dir } : {},
+    policyEditable: dir !== void 0
+  };
 }
 function toRootView(entry) {
   return { ...entry, live: entry.roots.every((root) => rootExists(root)) };
@@ -1571,7 +1601,7 @@ function mountCapabilitiesRoutes(host, config) {
         }
         try {
           const skills = await host.skills.list();
-          sendJson(response, 200, { skills: skills.map(toSkillRow) });
+          sendJson(response, 200, { skills: skills.map((skill) => toSkillRow(skill, process.env.DSH_HOME)) });
         } catch (error) {
           sendJson(response, 500, { error: error instanceof Error ? error.message : String(error) });
         }
@@ -1628,7 +1658,17 @@ function mountCapabilitiesRoutes(host, config) {
             sendJson(response, 400, { error: invalid });
             return;
           }
-          writeSkill(input);
+          const existing = (await host.skills.list()).find((skill) => skill.name === input.name);
+          if (existing !== void 0) {
+            const dir = existing.resourceBase?.kind === "directory" ? existing.resourceBase.path : void 0;
+            if (!skillWritable(existing, dir, process.env.DSH_HOME)) {
+              sendJson(response, 403, { error: `skills from source '${existing.source}' are read-only` });
+              return;
+            }
+            updateSkillFile(join9(dir, "SKILL.md"), input);
+          } else {
+            writeSkill(input);
+          }
           sendJson(response, 200, { ok: true, name: input.name });
         } catch (error) {
           sendJson(response, 500, { error: error instanceof Error ? error.message : String(error) });
@@ -2131,7 +2171,7 @@ function mountCapabilitiesRoutes(host, config) {
 // src/index.ts
 var name = "dsh-plugin-capabilities";
 function packagedSkillsDir() {
-  return join9(dirname4(fileURLToPath2(import.meta.url)), "..", "skills");
+  return join10(dirname4(fileURLToPath2(import.meta.url)), "..", "skills");
 }
 var inject = ["webServer", "skills"];
 function apply(ctx, config) {