@michengai/dsh-skills-manager 0.1.16 → 0.1.17

package/lib/client.js

@@ -55,6 +55,8 @@ window.__ModuleLoader__.load({
         "result.done": "上传完成：{names}",
         "result.skipped": "未导入：同名插件已跳过：{names}",
         "result.none": "未导入任何插件。",
+        "result.warnings": "警告：{warnings}",
+        "warning.backupUncleaned": "旧版本备份未清理: {path}（{error}）",
         "upload.title": "上传插件",
         "upload.close": "关闭上传弹窗",
         "upload.drop.title": "拖放 SKILL.md 文件到这里",
@@ -83,7 +85,9 @@ window.__ModuleLoader__.load({
         "error.import.invalidName": "无法生成合法 kebab-case 名称（原始名: {name}）",
         "error.import.duplicateName": "批量来源中存在多个同名插件: {name}",
         "error.import.failed": "导入失败",
+        "error.import.rollbackFailed": "覆盖导入回滚失败，备份保留在: {path}（{error}）",
         "error.proto.forbidden": "禁止的修改请求（缺少客户端标记）",
+        "error.proto.forbiddenHost": "禁止的请求来源（非法 Host）",
         "error.proto.contentType": "请求体必须是 application/json",
         "error.proto.method": "不支持的请求方法",
         "error.proto.unknownAction": "未知操作",
@@ -138,6 +142,8 @@ window.__ModuleLoader__.load({
         "result.done": "Upload complete: {names}",
         "result.skipped": "Not imported: same-name plugins were skipped: {names}",
         "result.none": "Nothing was imported.",
+        "result.warnings": "Warning: {warnings}",
+        "warning.backupUncleaned": "Old version backup was not cleaned up: {path} ({error})",
         "upload.title": "Upload plugin",
         "upload.close": "Close upload dialog",
         "upload.drop.title": "Drop SKILL.md file here",
@@ -166,7 +172,9 @@ window.__ModuleLoader__.load({
         "error.import.invalidName": "Cannot generate a valid kebab-case name (original name: {name})",
         "error.import.duplicateName": "Batch source contains multiple plugins with the same name: {name}",
         "error.import.failed": "Import failed",
+        "error.import.rollbackFailed": "Overwrite import rollback failed; backups kept at: {path} ({error})",
         "error.proto.forbidden": "Forbidden mutation request (missing client marker)",
+        "error.proto.forbiddenHost": "Forbidden request origin (invalid host)",
         "error.proto.contentType": "Content type must be application/json",
         "error.proto.method": "Method not allowed",
         "error.proto.unknownAction": "Unknown action",
@@ -457,6 +465,13 @@ window.__ModuleLoader__.load({
         var failedItems = importResult.failed || (importResult.error && importResult.error.failed) || [];
         var skippedNames = (importResult.skipped || []).map(function (item) { return item.name; });
         var failedText = failedItems.map(function (item) { return translateError(t, item); }).join(errorSeparator);
+        var warningItems = [];
+        (importResult.imported || []).forEach(function (item) {
+          if (item.warnings && item.warnings.length) {
+            for (var i = 0; i < item.warnings.length; i++) warningItems.push(item.warnings[i]);
+          }
+        });
+        var warningText = warningItems.map(function (item) { return translateError(t, item); }).join(errorSeparator);
         var resultText;
         if (isImportError) {
           // 顶层聚合错误优先展示已翻译的失败明细；无明细时由 translateError 兜底（含 Error 对象）。
@@ -470,6 +485,7 @@ window.__ModuleLoader__.load({
         } else {
           resultText = t("result.none");
         }
+        if (warningText) resultText = resultText + errorSeparator + t("result.warnings", { warnings: warningText });
         nodes.push(h("div", { key: "import-result", className: isImportError || failedItems.length ? "dssm-error" : "dssm-note", role: "status" }, resultText));
       }
       if (uploadOpen) {

package/lib/core.js

@@ -426,14 +426,16 @@ async function replaceWithCopy(source, dest, isDir, existing = []) {
       try {
         await fs.rename(item.backup, item.path);
       } catch (rollbackError) {
-        rollbackFailures.push(`${item.backup}（${String(rollbackError && rollbackError.message ? rollbackError.message : rollbackError)}）`);
+        rollbackFailures.push(item.backup);
       }
     }
     if (rollbackFailures.length) {
-      const restoreError = new Error(`${String(error && error.message ? error.message : error)}；覆盖导入回滚失败，备份保留在: ${rollbackFailures.join("、")}`);
-      if (error && error.code) restoreError.code = error.code;
-      if (error && error.params) restoreError.params = error.params;
-      throw restoreError;
+      const causeText = String(error && error.message ? error.message : error);
+      throw codedError(
+        `${causeText}；覆盖导入回滚失败，备份保留在: ${rollbackFailures.join("、")}`,
+        "error.import.rollbackFailed",
+        { path: rollbackFailures.join("; "), error: causeText },
+      );
     }
     throw error;
   }
@@ -442,7 +444,11 @@ async function replaceWithCopy(source, dest, isDir, existing = []) {
     try {
       await fs.rm(item.backup, { recursive: true, force: true });
     } catch (error) {
-      warnings.push(`旧版本备份未清理: ${item.backup}（${String(error && error.message ? error.message : error)}）`);
+      warnings.push({
+        code: "warning.backupUncleaned",
+        params: { path: item.backup, error: String(error && error.message ? error.message : error) },
+        error: `旧版本备份未清理: ${item.backup}（${String(error && error.message ? error.message : error)}）`,
+      });
     }
   }
   return warnings;

package/lib/index.js

@@ -76,7 +76,7 @@ function readBody(req, limit = 1 << 20) {
 /** 只允许 loopback Host，避免 DNS rebinding 读取 /state 或改写本地技能。 */
 function validateLoopbackHost(req) {
   const host = String(req.headers.host || "").toLowerCase();
-  if (!/^(localhost|127\.0\.0\.1|\[::1\])(:\d+)?$/.test(host)) return { statusCode: 403, code: "error.proto.forbidden", error: "forbidden host" };
+  if (!/^(localhost|127\.0\.0\.1|\[::1\])(:\d+)?$/.test(host)) return { statusCode: 403, code: "error.proto.forbiddenHost", error: "forbidden host" };
   return null;
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@michengai/dsh-skills-manager",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "description": "NPM-installable DSH Web plugin for managing local skills and viewing shared Agent skills safely.",
   "license": "Apache-2.0",
   "repository": {