mirror of
https://github.com/NCBM/plyngent.git
synced 2026-11-07 07:17:54 +08:00
90174340d7
ReplState builds the store from [skills] against the current workspace and publishes its roots as static read-only roots, so read_file/grep_files see a skill directory while writing stays denied; the roots are rebuilt when the workspace changes, since the project-scope directories hang off it. Discovered skills are folded into the system prompt the way MCP instructions are, with the catalog cap and its 'use skill_search' hint, and only when tools are on and injection is not switched off; [skills].enabled = false drops the tools from the registry entirely. The write policy is installed with the CLI confirm: once, session, or no, timed with a default of no and independent of YOLO, because a skill directory is not a grant. A library host that installs no hook keeps the deny default. /skills lists, searches, reads, and reloads; /status counts what was found.