dsh-skills-anywhere 0.3.2 → 0.4.0

package/README.md

@@ -29,20 +29,17 @@ It also **deduplicates** symlinked and byte-identical installs (the `skills` CLI
 ## Quick start
 
 ```sh
-# The package is not on npm yet; install the release tarball (no build step, no git needed).
-PKG=https://github.com/noteflowai/dsh-skills-anywhere/releases/download/v0.3.2/dsh-skills-anywhere-0.3.2.tgz
-
 # 1. Install into the dsh profile you use (web is the default UI profile)
-dsh plugin --profile web add $PKG
+dsh plugin --profile web add dsh-skills-anywhere
 
 # 2. See what the model will get, without booting dsh
-npx -y $PKG list
+npx dsh-skills-anywhere list
 
 # 3. Add a whole repository of skills
-npx -y $PKG add anthropics/skills
+npx dsh-skills-anywhere add anthropics/skills
 ```
 
-Once the npm release is out, `dsh-skills-anywhere` replaces `$PKG` everywhere below, which is how the rest of this README writes the commands.
+Published on [npm](https://www.npmjs.com/package/dsh-skills-anywhere) with build provenance; every [GitHub release](https://github.com/noteflowai/dsh-skills-anywhere/releases) also carries the same tarball.
 
 Start dsh as usual. The skill catalog now includes everything above; load a skill with the `skill` tool or `/skill-name` exactly as before.
 
@@ -59,9 +56,9 @@ skill-creator        claude plugin skill-creator @ claude-plugins-official   ~/.
 ```
 
 <details>
-<summary>Install from a git checkout instead of the tarball</summary>
+<summary>Install from a git checkout or a release tarball instead of npm</summary>
 
-Every [GitHub release](https://github.com/noteflowai/dsh-skills-anywhere/releases) carries a prebuilt tarball, and both `dsh plugin add` and `npx` accept its URL directly. Prefer that. If you want an unreleased commit:
+Every [GitHub release](https://github.com/noteflowai/dsh-skills-anywhere/releases) carries a prebuilt tarball, and both `dsh plugin add` and `npx` accept its URL directly (`https://github.com/noteflowai/dsh-skills-anywhere/releases/download/v0.4.0/dsh-skills-anywhere-0.4.0.tgz`). If you want an unreleased commit:
 
 ```sh
 dsh plugin --profile web add github:noteflowai/dsh-skills-anywhere
@@ -196,7 +193,15 @@ command = "npx"
 args = ["-y", "dsh-skills-anywhere", "mcp"]
 ```
 
-Until the npm release lands, replace `dsh-skills-anywhere` in the manual commands with the release tarball URL (the plugin manifest already does this) (`npx -y https://github.com/noteflowai/dsh-skills-anywhere/releases/download/v0.3.2/dsh-skills-anywhere-0.3.2.tgz mcp`). Add `--cwd <dir>` when the client does not start the server inside the project you are working on. Git sources sync in the background on start, exactly as in dsh. Programmatic use: `import { createSkillsAnywhereServer } from 'dsh-skills-anywhere/mcp'` returns the `McpServer` and the provider so you can attach your own transport.
+The server is also listed in the [official MCP registry](https://registry.modelcontextprotocol.io) as `io.github.noteflowai/dsh-skills-anywhere`, so registry-aware clients can install it by name. Add `--cwd <dir>` when the client does not start the server inside the project you are working on. Git sources sync in the background on start, exactly as in dsh. Programmatic use: `import { createSkillsAnywhereServer } from 'dsh-skills-anywhere/mcp'` returns the `McpServer` and the provider so you can attach your own transport.
+
+## Browse and toggle skills in the dsh web UI
+
+In `dsh web`, open **Settings → Plugins → Plugin configuration**. The **Skills Anywhere** card lists every skill the provider found, grouped by where it lives (agent directories, Claude Code plugins, git sources), with its catalog state — *listed* for the model, *not listed* (kept out by the budget or by you) or *author disabled* — and the name it was renamed to when it collided. Each row offers **Pin** (always listed), **Hide** (out of the model catalog, still `/name`- and `find_skills`-reachable) and **Exclude** (dropped from the provider); the catalog budget is editable in place, and a filter box searches names, descriptions and origins.
+
+<p align="center"><img src="docs/web-card.png" alt="The Skills Anywhere card in dsh web settings: skills grouped by origin with listed / not listed / author disabled states, renames, and Pin, Hide, Exclude actions" width="720"></p>
+
+Edits are written to the profile's dsh settings document as the `skills-anywhere` namespace, layered over `catalog` and `excludeSkills` from `cordis.patch.yml`, and the model catalog follows immediately: no restart, no file editing. The card only appears in profiles that mount dsh's settings service and web server (the shipped `web` profile does); everywhere else the provider behaves exactly as composed.
 
 ## Configuration
 
@@ -233,7 +238,7 @@ Override the row in your profile's `cordis.patch.yml`. A patch replaces the whol
 | `dedupe` | `true` | Collapse symlinked and byte-identical duplicates |
 | `lenient` | `true` | Repair recoverable frontmatter instead of skipping |
 | `watch` | `true` | Watch local roots and refresh the catalog on change |
-| `excludeSkills` | `[]` | Skill names to hide (raw frontmatter name or the published name shown by `list`) |
+| `excludeSkills` | `[]` | Skill names to hide (raw frontmatter name or the published name shown by `list`); editable at runtime from the web card |
 | `ranks` | `{ project: 250, user: 550, claudePlugins: 580, sources: 700 }` | Precedence per group |
 | `catalog.limit` | `50` | Skills from this provider listed in the model catalog; `0` = unlimited |
 | `catalog.pin` | `[]` | Names always listed |

package/README.zh.md

@@ -29,20 +29,17 @@ Agent Skills 天生就是可移植的：一个带 `SKILL.md` 的文件夹。但
 ## 快速开始
 
 ```sh
-# 尚未发布到 npm；先安装 release 里的构建产物 tarball（无需构建，也不需要 git）。
-PKG=https://github.com/noteflowai/dsh-skills-anywhere/releases/download/v0.3.2/dsh-skills-anywhere-0.3.2.tgz
-
 # 1. 安装到你使用的 dsh profile（web 是默认的 UI profile）
-dsh plugin --profile web add $PKG
+dsh plugin --profile web add dsh-skills-anywhere
 
 # 2. 不启动 dsh，直接查看模型将看到的技能
-npx -y $PKG list
+npx dsh-skills-anywhere list
 
 # 3. 添加一整个技能仓库
-npx -y $PKG add anthropics/skills
+npx dsh-skills-anywhere add anthropics/skills
 ```
 
-npm 发布后，下文所有命令中的 `$PKG` 直接换成 `dsh-skills-anywhere` 即可（本文其余部分按 npm 包名书写）。
+已发布到 [npm](https://www.npmjs.com/package/dsh-skills-anywhere)，带构建来源（provenance）签名；每个 [GitHub release](https://github.com/noteflowai/dsh-skills-anywhere/releases) 也附带同一个 tarball。
 
 照常启动 dsh。技能目录里现在包含了上面所有内容；用 `skill` 工具或 `/技能名` 加载，与之前完全一样。
 
@@ -59,9 +56,9 @@ skill-creator        claude plugin skill-creator @ claude-plugins-official   ~/.
 ```
 
 <details>
-<summary>从 git 检出安装（不用 tarball）</summary>
+<summary>不用 npm：从 git 检出或 release tarball 安装</summary>
 
-每个 [GitHub release](https://github.com/noteflowai/dsh-skills-anywhere/releases) 都附带预构建的 tarball，`dsh plugin add` 和 `npx` 都可以直接使用它的 URL，推荐这种方式。若需要尚未发布的提交：
+每个 [GitHub release](https://github.com/noteflowai/dsh-skills-anywhere/releases) 都附带预构建的 tarball，`dsh plugin add` 和 `npx` 都可以直接使用它的 URL（`https://github.com/noteflowai/dsh-skills-anywhere/releases/download/v0.4.0/dsh-skills-anywhere-0.4.0.tgz`）。若需要尚未发布的提交：
 
 ```sh
 dsh plugin --profile web add github:noteflowai/dsh-skills-anywhere
@@ -196,7 +193,15 @@ command = "npx"
 args = ["-y", "dsh-skills-anywhere", "mcp"]
 ```
 
-npm 发布前，把手动命令里的 `dsh-skills-anywhere` 换成 release tarball 的 URL（插件清单里已经是这个 URL）（`npx -y https://github.com/noteflowai/dsh-skills-anywhere/releases/download/v0.3.2/dsh-skills-anywhere-0.3.2.tgz mcp`）。如果客户端不是在当前项目目录里启动服务器，加上 `--cwd <dir>`。git 源会像在 dsh 中一样在启动时后台同步。编程方式：`import { createSkillsAnywhereServer } from 'dsh-skills-anywhere/mcp'` 会返回 `McpServer` 和提供器，可自行挂接传输层。
+服务器也已登记在 [MCP 官方目录](https://registry.modelcontextprotocol.io)，名称为 `io.github.noteflowai/dsh-skills-anywhere`，支持该目录的客户端可以按名字安装。如果客户端不是在当前项目目录里启动服务器，加上 `--cwd <dir>`。git 源会像在 dsh 中一样在启动时后台同步。编程方式：`import { createSkillsAnywhereServer } from 'dsh-skills-anywhere/mcp'` 会返回 `McpServer` 和提供器，可自行挂接传输层。
+
+## 在 dsh web 界面里浏览和开关技能
+
+在 `dsh web` 中打开 **设置 → 插件 → 插件配置**，**Skills Anywhere** 卡片会列出提供器找到的全部技能，按所在位置分组（Agent 目录、Claude Code 插件、git 源），并标出目录状态——*已列出*给模型、*未列出*（被预算或你挡在目录外）或*作者禁用*——以及重名时被改成的名字。每一行提供 **置顶**（始终列出）、**隐藏**（不进模型目录，但 `/名称` 和 `find_skills` 仍可达）和 **排除**（从提供器中彻底去掉）；目录预算可以就地修改，筛选框按名称、描述和来源搜索。
+
+<p align="center"><img src="docs/web-card.png" alt="dsh web 设置中的 Skills Anywhere 卡片：技能按来源分组，标出已列出 / 未列出 / 作者禁用状态与改名，并提供置顶、隐藏、排除操作" width="720"></p>
+
+修改会作为 `skills-anywhere` 命名空间写入 profile 的 dsh 设置文档，叠加在 `cordis.patch.yml` 的 `catalog` 和 `excludeSkills` 之上，模型目录立即跟随变化：无需重启，无需手改文件。卡片只在挂载了 dsh 设置服务和 web 服务器的 profile 中出现（自带的 `web` profile 满足）；其他场合提供器的行为与组合配置完全一致。
 
 ## 配置
 
@@ -233,7 +238,7 @@ npm 发布前，把手动命令里的 `dsh-skills-anywhere` 换成 release tarba
 | `dedupe` | `true` | 折叠软链接与字节相同的重复项 |
 | `lenient` | `true` | 修复可恢复的 frontmatter 而不是跳过 |
 | `watch` | `true` | 监视本地根目录，变化时刷新目录 |
-| `excludeSkills` | `[]` | 要隐藏的技能名（原始 frontmatter 名或 `list` 显示的发布名均可） |
+| `excludeSkills` | `[]` | 要隐藏的技能名（原始 frontmatter 名或 `list` 显示的发布名均可）；可在 web 卡片中运行时修改 |
 | `ranks` | `{ project: 250, user: 550, claudePlugins: 580, sources: 700 }` | 各组优先级 |
 | `catalog.limit` | `50` | 本提供器进入模型目录的技能数；`0` = 不限制 |
 | `catalog.pin` | `[]` | 始终列出的名称 |

package/lib/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { a as readSourcesFile, b as projectSourcesFile, d as findProjectRoot, g as AGENTS, i as readLock, l as writeSourcesFile, o as resolveSource, r as hasGit, s as sameRepository, t as SkillsAnywhereProvider, x as resolveConfig } from "./provider-C8Jncd8r.js";
+import { C as resolveConfig, S as projectSourcesFile, a as readSourcesFile, d as originLabel, i as readLock, l as writeSourcesFile, o as resolveSource, p as findProjectRoot, r as hasGit, s as sameRepository, t as SkillsAnywhereProvider, v as AGENTS } from "./provider-Dl3Oeyuh.js";
 import { isAbsolute, relative, sep } from "node:path";
 import { parseArgs } from "node:util";
 //#region src/cli.ts
@@ -143,15 +143,6 @@ async function collectWithSources(cli, config) {
 function displayPath(path, config, sourceDirs) {
 	return sourceDirs.map((dir) => relative(dir, path)).filter((rel) => rel !== "" && !rel.startsWith("..") && !isAbsolute(rel)).toSorted((a, b) => a.length - b.length)[0] ?? shorten(path, config.home);
 }
-function originLabel(skill) {
-	const { origin } = skill;
-	switch (origin.kind) {
-		case "agent": return `${origin.agent ?? "agent"} (${origin.scope ?? "?"})`;
-		case "claude-plugins": return `claude plugin ${origin.plugin ?? "?"}${origin.marketplace !== void 0 ? ` @ ${origin.marketplace}` : ""}`;
-		case "source": return `source ${origin.repo ?? "?"}`;
-		default: return `custom (${origin.scope ?? "?"})`;
-	}
-}
 function table(rows) {
 	if (rows.length === 0) return "";
 	const widths = rows[0].map((_, column) => Math.max(...rows.map((row) => (row[column] ?? "").length)));
@@ -191,7 +182,7 @@ async function list(cli, config) {
 		"PATH"
 	], ...report.skills.map((skill) => [
 		skill.name,
-		originLabel(skill),
+		originLabel(skill.origin),
 		displayPath(skill.path, config, sourceDirs)
 	])]));
 	if (cli.all && report.dropped.length > 0) {