@michengai/dsh-skills-manager 0.1.53 → 1.0.0

package/CHANGELOG.md

@@ -2,7 +2,74 @@
 
 [简体中文](CHANGELOG.zh-CN.md)
 
-The five most recent published versions are listed below.
+## 1.0.0 - 2026-09-21
+
+### 1.0 release scope
+
+This release upgrades directly from published 0.1.53 to 1.0.0. The planned 0.1.54 was not released separately; all its changes are included here. The plugin enters the 1.x series, while host support remains limited to the explicitly listed DSH versions.
+
+### New: skill repositories and installation
+
+- Add a Repositories tab alongside Global skills, Project skills and Trash, with public GitHub subscription management.
+- Accept owner/repo, HTTPS repository URLs and tree URLs; select a branch, tag or skill subdirectory, or use the default branch.
+- Browse collapsible repository groups; search names and descriptions, filter repositories and installation states, and read skill contents, paths and snapshot details.
+- Install individual skills into global DSH with their instructions, scripts and resources. Installation does not execute scripts or overwrite same-name skills.
+- Show Available, Installed, Name conflict, Invalid format and Update available states, with inline installation progress and success or failure feedback.
+- Distinguish local skills from repository installations, link to their GitHub source, and navigate directly to repository update management.
+- Removing a subscription preserves installed skills and source tracking.
+
+### New: skill updates and backup rollback
+
+- Combine refresh and update checks into Refresh & check updates. Refresh updates the scan cache and detects changes without replacing local copies.
+- Compare content hashes for every skill file, including instructions, scripts and resources; unrelated repository changes do not trigger an update.
+- Preview added, modified and deleted files before explicitly confirming backup and replacement.
+- Protect local edits by default; overwriting requires Back up local edits and replace. Changes after preview require a new preview.
+- Restore the previous version after previewing changes and backing up the current copy, preserving any local edits stored in the backup.
+- Use directory replacement and failure rollback, including recovery from tracking-write failures. Historical backups are retained without automatic cleanup.
+
+### Downloads and reliability
+
+- Download ZIP archives directly from codeload.github.com without consuming GitHub REST anonymous quotas. Unspecified branches use HEAD first; only 404 triggers main/master fallback. A 403 or timeout does not trigger blind branch retries.
+- Use SHA-256 content snapshots and verified caches for installation and updates. Missing or corrupt caches require refresh instead of silently installing different content.
+- Preserve the previous catalog and cache after scan or network failures, remove duplicate catalog reads and hash calculations, and keep downloads outside the local file mutation queue.
+- Recover interrupted installation tracking only after verifying the complete installed directory. Modified, missing or extra files and linked directories are not automatically adopted.
+- Provide specific archive-size and tracking-write errors; enforce limits on expanded size, entry count, paths and instruction size, and reject unsafe paths, duplicate paths and corrupt archives.
+- Cover cross-site and write-request protection and path traversal rejection; serialize repository mutations.
+
+### Interface and interactions
+
+- Align headings, tabs, tab-specific actions, filters and lists; use host Input/Menu components with archive-style input and dropdown presentation.
+- Use compact two-line skill rows with source links, invocation state and a More menu; reduce long-list clutter through filtering and collapsible groups.
+- Scope import results to their tab so Global import completion no longer appears in Repositories.
+- Fix background flicker when opening repository details: show a loading dialog immediately and read details without changing the whole page's busy state or reloading its list.
+- Add a spinner, current repository and item counts to both all-repository refresh and single-repository refresh in the management dialog. Stop on completion or failure, allow retries, and respect reduced-motion preferences.
+- Complete Chinese and English labels, errors, progress and results; remove unused strings and correct the project empty-state hint to include ordinary workspaces.
+- Use host semantic colors with fallbacks for older hosts; retain dropdown keyboard navigation, dismissal and focus restoration.
+
+### Documentation and validation
+
+- Update both READMEs with repository installation, source tracking, update and rollback guidance and limits; provide complete Chinese and English repository guides.
+- Refresh bilingual banners with DSH Skills Manager at the top and replace Global/Repositories screenshots. Use WebP with lossless screenshot compression at original resolution.
+- Keep public documentation focused on current product behavior, excluding internal handoffs, runtime evidence, machine paths and historical test screenshots.
+- Pin official host dependencies throughout the compatibility graph and verify installed versions, fixing mixed prerelease dependencies; retain seven-host and real-browser regression coverage.
+
+### Existing capabilities retained in 1.0
+
+These capabilities were already available in 0.x and remain supported; they are not all new in this release:
+
+- Global and current-session project discovery, search, details, diagnostics and per-skill or per-source toggles, for both ordinary workspaces and Git projects.
+- Project precedence, independent same-name copies and global fallback after disabling a copy. Toggles affect DSH invocation without modifying other agents' source files.
+- Sources including DSH, Shared Agent, CC Switch, Codex, Claude Code, Gemini, OpenCode, Cursor, Copilot, Windsurf, Trae, OpenClaw, Roo and CodeBuddy.
+- Skill creation and ZIP, folder or SKILL.md import into global DSH; Trash, restore and permanent deletion for DSH skills.
+- Plugin version checking and update controls, plus Chinese and English interfaces.
+
+### Upgrade and boundaries
+
+- After publication, update the plugin through Settings → Skills → Check for updates or rerun the README installation command, then restart DSH and refresh the page. Repository Refresh & check updates checks skill contents, not the plugin version.
+- No manual migration of existing skills is required. Users of local 0.1.54 test builds should back up skills and skills-manager state under DSH_HOME before upgrading.
+- Only public GitHub repositories, global DSH installation and manually confirmed updates are supported. Private credentials, automatic updates, bulk overwrites and project-level repository installation are not included.
+- Repository archives are limited to 32 MiB; subdirectory filtering does not reduce download size. Backups are not automatically deleted, and only the most recent backup has a quick rollback action. Forced termination or power loss may require manual recovery.
+- Supported DSH versions: 0.1.0-rc.8, 0.1.1-rc.2, 0.1.2-rc.1, 0.1.5-rc.1, 0.1.5-rc.2, 0.1.6-alpha.1 and 0.1.6-alpha.2. Node.js: ^22.19.0 or >=24.0.0.
 
 ## 0.1.53 - 2026-09-18
 

package/CHANGELOG.zh-CN.md

@@ -2,7 +2,74 @@
 
 [English](CHANGELOG.md)
 
-以下记录最近发布的五个版本。
+## 1.0.0 - 2026-09-21
+
+### 1.0 正式版范围
+
+本次从已发布的 0.1.53 直接升级到 1.0.0，原计划中的 0.1.54 未单独发布，全部改动合并到本版。插件进入 1.x 版本系列；宿主兼容范围仍以明确列出的版本为准，不代表支持所有未来 DSH 版本。
+
+### 新增：技能仓库与安装
+
+- 新增「技能仓库」页签，与全局技能、项目技能、回收站并列；支持添加、管理、移除公开 GitHub 仓库订阅。
+- 支持 owner/repo、HTTPS 仓库地址和 tree 地址；可指定分支、标签及技能子目录，留空使用默认分支。
+- 仓库按来源折叠，支持名称或描述搜索、仓库筛选、安装状态筛选；详情展示技能正文、路径和扫描快照。
+- 单项安装到全局 DSH，完整保留说明、脚本与资源文件；安装过程不执行技能脚本，同名技能不覆盖。
+- 提供可安装、已安装、同名冲突、格式无效、可更新状态；安装期间显示行内进度和成功或失败提示。
+- 全局技能区分「本机」与仓库来源，提供 GitHub 来源链接；管理更新可定位到对应仓库技能。
+- 移除仓库只取消订阅，保留已安装技能及来源追溯记录。
+
+### 新增：在线更新与备份回退
+
+- 合并「刷新」与「检查更新」为「刷新并检查更新」；刷新扫描缓存并检测更新，不自动替换本地副本。
+- 比较技能目录内全部文件的内容哈希，包含说明、脚本和资源；仓库其他文件变化不误报更新。
+- 更新前按文件预览新增、修改、删除；必须确认后才执行备份与替换。
+- 本地修改默认受保护，只有明确选择「备份本地修改并替换」才覆盖；预览后内容变化要求重新预览。
+- 提供「恢复上一版」，恢复前预览差异并备份当前副本；上一版中的本地修改同样保留。
+- 更新采用目录替换与失败回滚，状态持久化失败时恢复原文件；历史备份保留，不自动清理。
+
+### 下载与可靠性
+
+- 改用 codeload.github.com 直连 ZIP，不消耗 GitHub REST 匿名额度；未指定分支时先使用 HEAD，仅 404 才尝试 main/master，403 和超时不盲目重试分支。
+- 使用 SHA-256 内容快照和校验缓存，安装、更新复用扫描归档；缓存损坏或缺失时要求重新刷新，避免静默使用不同版本。
+- 扫描或下载失败保留上次列表与缓存；移除重复列表读取和重复文件哈希计算，下载不直接占用本地文件修改队列。
+- 安装文件已落盘但来源确认中断时，重新打开列表会核验完整目录后恢复记录；修改、缺失、额外文件及目录链接不被自动认领。
+- 明确提示仓库归档超过 32 MiB、状态写入失败等错误；限制解压大小、条目数、路径和正文体积，并校验非法路径、重复路径及损坏归档。
+- 仓库接口覆盖跨站和写请求保护、路径越界拒绝；并发仓库操作串行处理。
+
+### 界面与交互
+
+- 统一「标题 → 页签 → 当前页操作 → 筛选与列表」结构，采用宿主 Input/Menu 和归档风格的输入、下拉控件。
+- 技能列表改为紧凑两行布局，来源链接、启停状态与更多菜单各就其位；筛选和折叠降低长列表占用。
+- 导入结果按页签隔离，切换到仓库页不再显示全局技能的导入完成提示。
+- 修复仓库详情打开时的背景闪动：先展示弹窗加载状态，只读取详情，不切换整页忙碌状态、不重复加载背景列表。
+- 全量刷新和管理弹窗内单仓库刷新均增加旋转图标、当前仓库及处理数量；完成或失败停止动画，失败后可重试；尊重减少动画偏好。
+- 补齐中英文按钮、错误、进度和结果提示，移除失效文案；项目空态改为工作区提示，避免误导普通文件夹用户。
+- 颜色使用宿主语义变量，为缺少变量的旧宿主保留兜底；保留下拉菜单键盘操作、关闭及焦点恢复。
+
+### 文档与验证
+
+- 重写中英文 README 的仓库安装、来源追踪、更新回退和限制说明，提供完整中英文仓库指南。
+- 更新中英文 Banner，顶部展示 DSH Skills Manager；更新全局技能与仓库截图，统一 WebP，截图无损压缩并保留原始尺寸。
+- 公开文档聚焦当前产品能力；内部交接、运行证据、机器路径与历史截图不纳入公开发布资料。
+- 兼容矩阵逐层锁定官方宿主依赖，并校验实际安装版本，修复预发布宿主传递依赖混装；保留七版宿主与真实浏览器回归。
+
+### 1.0 延续的完整能力
+
+以下能力已在 0.x 提供，本版继续支持，并非全部为本次新增：
+
+- 全局和当前会话项目技能发现、搜索、详情、诊断、按技能或来源启停；普通工作区与 Git 项目均可用。
+- 项目副本优先、同名副本独立控制、停用后的全局回退；启停仅影响 DSH 调用，不修改其他 Agent 的源文件。
+- 读取 DSH、公共 Agent、CC Switch、Codex、Claude Code、Gemini、OpenCode、Cursor、Copilot、Windsurf、Trae、OpenClaw、Roo、CodeBuddy 等来源。
+- 创建技能，导入 ZIP、文件夹或 SKILL.md 到全局 DSH；DSH 技能移入回收站、恢复与永久删除。
+- 插件自身版本检查与更新入口，以及中英文界面。
+
+### 升级与已知边界
+
+- 发布后可在「设置 → 技能 → 检查更新」升级插件，或重新执行 README 中的安装命令；重启 DSH 并刷新页面。仓库的「刷新并检查更新」只检查技能内容，与插件升级不同。
+- 无需手动迁移现有技能；若使用过本地 0.1.54 测试包，升级前建议备份 DSH_HOME 下的技能与 skills-manager 状态目录。
+- 仅支持公开 GitHub 仓库、全局 DSH 安装和手动确认更新；不提供私有仓库凭证、自动更新、批量覆盖或项目级仓库安装。
+- 整库归档上限 32 MiB，子目录筛选不减少下载量；备份不自动清理，仅提供最近一次备份的快捷回退。强制结束进程或断电等中断可能需人工恢复。
+- 支持 DSH 0.1.0-rc.8、0.1.1-rc.2、0.1.2-rc.1、0.1.5-rc.1、0.1.5-rc.2、0.1.6-alpha.1、0.1.6-alpha.2；Node.js 要求 ^22.19.0 或 >=24.0.0。
 
 ## 0.1.53 - 2026-09-18
 

package/README.md

@@ -1,12 +1,12 @@
 <p align="center">
-  <img src="assets/branding/dsh-banner.png" alt="DSH Skills Manager" width="100%">
+  <img src="assets/branding/dsh-banner-en.webp" alt="DSH Skills Manager" width="100%">
 </p>
 
 <div align="center">
 
 # DSH Skills Manager
 
-  **Load and safely manage skills from DSH and common local Agents**
+  **Manage local and project skills, install from GitHub, preview updates and restore backups**
 
   [简体中文](README.zh-CN.md) · [Changelog](CHANGELOG.md) · [Apache-2.0](LICENSE)
 
@@ -14,36 +14,38 @@
   [![npm package](https://img.shields.io/npm/v/%40michengai%2Fdsh-skills-manager.svg?label=npm%20package)](https://www.npmjs.com/package/@michengai/dsh-skills-manager)
   [![npm downloads](https://img.shields.io/npm/dt/%40michengai%2Fdsh-skills-manager.svg?label=npm%20downloads)](https://www.npmjs.com/package/@michengai/dsh-skills-manager)
   [![DSH Web Plugin](https://img.shields.io/badge/DSH%20Web-Plugin-0f766e.svg)](https://github.com/MichengAI/dsh-skills-manager)
-  [![Node.js ^22.19.0 || >=24.0.0](https://img.shields.io/badge/Node.js-22.19%2B%20%7C%20%3E%3D24-339933.svg?logo=node.js&logoColor=white)](https://nodejs.org/)
+  [![DSH supported through 0.1.6-alpha.2](https://img.shields.io/badge/DSH-up%20to%200.1.6--alpha.2-2563eb.svg)](#installation)
 </div>
 
 > DSH Skills Manager is a community-maintained DeepSeek Harness (DSH) plugin, not an official DeepSeek AI product.
 
+This README describes **1.0.0**. See the [changelog](CHANGELOG.md) and [bilingual 1.0.0 release notes](https://github.com/MichengAI/dsh-skills-manager/blob/master/docs/02-%E4%BA%A7%E5%93%81%E4%B8%8E%E4%B8%9A%E5%8A%A1/04-1.0.0%E5%8F%91%E8%A1%8C%E8%AF%B4%E6%98%8E.md).
+
 ## Features
 
+
 Bring skills from your computer and projects into DSH without switching between Agent folders.
 
 - **Manage in one place**: browse collapsible source groups, search, read, and toggle skills.
 - **Global and project skills**: the project tab follows the current session, with project copies taking priority over global copies.
 - **Reuse existing skills**: supports Codex, Claude Code, Copilot, and other agents without modifying their source files when toggled.
 - **Create and import**: create a skill or import ZIP archives, folders, and `SKILL.md` files into global DSH.
+- **Skill repositories**: discover public GitHub skills, install without overwriting local files, review updates and restore backups. [Repository guide](https://github.com/MichengAI/dsh-skills-manager/blob/master/docs/02-%E4%BA%A7%E5%93%81%E4%B8%8E%E4%B8%9A%E5%8A%A1/03-repository-guide.en.md).
 - **Recover deleted skills**: DSH skills go to Trash first, so accidental deletions can be restored.
 
+- **Source tracking and updates**: distinguish local and repository skills, preview file changes, protect local edits, and confirm backup, update or rollback.
+
 ## Screenshots
 
 Skill management:
 
-![Full skill management view](assets/screenshots/skills-manager-v2-preview.png)
-
-Read a skill:
+![Full skill management view](assets/screenshots/skills-manager-v2-preview.webp)
 
-![Skill details](assets/screenshots/skill-detail.png)
+Skill repositories:
 
-Confirm before moving to Trash:
+![Browse and install repository skills](assets/screenshots/skill-repositories.webp)
 
-![Move to Trash confirmation](assets/screenshots/delete-plugin.png)
-
-*These full screenshots show an earlier version. The current version adds Global, Project, and Trash tabs.*
+*Screenshots show the pre-release 0.1.54 local build used to prepare 1.0.0. The final version adds refresh animation and progress feedback. Screenshots use lossless WebP at original resolution.*
 
 ## Installation
 
@@ -67,7 +69,7 @@ dsh plugin --profile web add @michengai/dsh-skills-manager@latest --registry=htt
 
 Restart DSH, refresh the page, and open **Settings → Skills**. To update, select **Check for updates** or run the installation command again.
 
-- Plugin `0.1.53` is tested with DeepSeek Harness `0.1.0-rc.8`, `0.1.1-rc.2`, `0.1.2-rc.1`, `0.1.5-rc.1`, `0.1.5-rc.2`, `0.1.6-alpha.1`, `0.1.6-alpha.2`.
+- Plugin `1.0.0` is tested with DeepSeek Harness `0.1.0-rc.8`, `0.1.1-rc.2`, `0.1.2-rc.1`, `0.1.5-rc.1`, `0.1.5-rc.2`, `0.1.6-alpha.1`, `0.1.6-alpha.2`.
 
 ## Usage
 
@@ -77,12 +79,22 @@ Restart DSH, refresh the page, and open **Settings → Skills**. To update, sele
 | Read its contents | Select **View details** for the skill body and source information. |
 | Enable or disable | Toggle the skill switch. This affects DSH without editing source files. |
 | Add a skill | Select **Create skill** or **Import into global DSH**. |
+| Install from a repository | Open **Repositories → Add repository**, enter a public GitHub URL, scan and install individual skills. |
+| Update repository skills | Select **Refresh & check updates**, then **Review update** to inspect changes and confirm backup and update. |
+| Roll back an update | Select **Restore previous version** for a skill with a backup, preview and confirm. |
 | Recover a deletion | Open **Trash** and restore. For project skills, return to a session in the original project first. |
 
 - **Current project only**: Git repositories use the nearest Git root. Other folders use the current session working directory; no `git init` required.
 - **Independent copies**: disabling a project copy allows another enabled copy to take over, and the panel identifies the active source. Disable all copies to turn the skill off completely.
 - **File management**: only DSH skills can move to Trash. Other Agent skills can be viewed and toggled. Creation and import always save to global DSH.
 
+### Repository boundaries
+
+- The header **Check for updates** updates the plugin itself. Repository **Refresh & check updates** checks skill contents without installing or replacing them; it shows animation, counts and the current repository.
+- Repository installation targets global DSH only. Public GitHub repositories are supported; private credentials and automatic updates are not. Removing a subscription keeps installed skills.
+- Archives are limited to 32 MiB, including when filtering by subdirectory. Failed scans preserve the previous catalog; corrupt caches require refresh.
+- Local edits require explicit confirmation before replacement. Historical backups are not automatically cleaned and consume additional disk space.
+
 ## Supported Agent directories
 
 `~` means your home directory; `<project>` is the current session project root. These are default paths; configured DSH directory variables take precedence.
@@ -116,7 +128,7 @@ For a desktop workbench, download [DSH Codex Desktop](https://github.com/Micheng
 | --- | --- |
 | [Codex UI](https://github.com/MichengAI/dsh-codex-ui) | Organize projects and conversations, search tasks, and navigate chat turns |
 | [Agency Agents](https://github.com/MichengAI/dsh-agency-agents) | Choose and summon specialists for your task |
-| [Skills Manager](https://github.com/MichengAI/dsh-skills-manager) | Find, enable, create, and import local skills |
+| [Skills Manager](https://github.com/MichengAI/dsh-skills-manager) | Manage local and project skills; install, update and roll back repository skills |
 | [Archive Manager](https://github.com/MichengAI/dsh-archive-manager) | Search, restore, or clean up archived conversations |
 | [IM Connect](https://github.com/MichengAI/dsh-im-connect) | Send tasks and receive replies through messaging platforms |
 | [Automation](https://github.com/MichengAI/dsh-automation) | Schedule tasks and review each run |

package/README.zh-CN.md

@@ -1,12 +1,12 @@
 <p align="center">
-  <img src="assets/branding/dsh-banner.png" alt="DSH Skills Manager" width="100%">
+  <img src="assets/branding/dsh-banner-zh-CN.webp" alt="DSH Skills Manager" width="100%">
 </p>
 
 <div align="center">
 
 # DSH Skills Manager
 
-  **在 DeepSeek Harness 中统一加载并安全管理本机 Agent Skills**
+  **统一管理本机与项目技能，从 GitHub 安装、预览更新并备份回退**
 
   [English](README.md) · [更新日志](CHANGELOG.zh-CN.md) · [Apache-2.0](LICENSE)
 
@@ -14,11 +14,13 @@
   [![npm package](https://img.shields.io/npm/v/%40michengai%2Fdsh-skills-manager.svg?label=npm%20package)](https://www.npmjs.com/package/@michengai/dsh-skills-manager)
   [![npm 下载量](https://img.shields.io/npm/dt/%40michengai%2Fdsh-skills-manager.svg?label=npm%20%E4%B8%8B%E8%BD%BD%E9%87%8F)](https://www.npmjs.com/package/@michengai/dsh-skills-manager)
   [![DSH Web Plugin](https://img.shields.io/badge/DSH%20Web-Plugin-0f766e.svg)](https://github.com/MichengAI/dsh-skills-manager)
-  [![Node.js ^22.19.0 || >=24.0.0](https://img.shields.io/badge/Node.js-22.19%2B%20%7C%20%3E%3D24-339933.svg?logo=node.js&logoColor=white)](https://nodejs.org/)
+  [![DSH 支持至 0.1.6-alpha.2](https://img.shields.io/badge/DSH-%E6%94%AF%E6%8C%81%E8%87%B3%200.1.6--alpha.2-2563eb.svg)](#安装)
 </div>
 
 > DSH Skills Manager 是社区维护的 DeepSeek Harness（DSH）插件，并非 DeepSeek AI 官方产品。
 
+本文对应 **1.0.0**。完整变更见[更新日志](CHANGELOG.zh-CN.md)，中英文发行说明见 [1.0.0 发行说明](https://github.com/MichengAI/dsh-skills-manager/blob/master/docs/02-%E4%BA%A7%E5%93%81%E4%B8%8E%E4%B8%9A%E5%8A%A1/04-1.0.0%E5%8F%91%E8%A1%8C%E8%AF%B4%E6%98%8E.md)。
+
 ## 功能概览
 
 把散落在本机和项目中的技能集中到 DSH，无需在多个 Agent 目录间来回查找。
@@ -28,22 +30,22 @@
 - **复用已有技能**：支持 Codex、Claude Code、Copilot 等常见 Agent，启停不会修改它们的源文件。
 - **创建与导入**：新建技能，或导入 ZIP、技能文件夹和 `SKILL.md`，统一保存到全局 DSH。
 - **回收与恢复**：删除 DSH 技能后先进入回收站，误删可找回。
+- **技能仓库**：添加公开 GitHub 仓库，按来源折叠浏览、搜索、查看详情并逐项安装；同名不覆盖，刷新不自动更新本地。详见[仓库使用说明](https://github.com/MichengAI/dsh-skills-manager/blob/master/docs/02-%E4%BA%A7%E5%93%81%E4%B8%8E%E4%B8%9A%E5%8A%A1/02-%E6%8A%80%E8%83%BD%E4%BB%93%E5%BA%93%E7%AE%A1%E7%90%86.md)。
 
-## 界面预览
 
-技能管理：
+- **来源追踪与更新**：区分本机和仓库安装，预览文件差异，保护本地修改，确认后备份更新并可恢复上一版。
 
-![技能管理完整界面](assets/screenshots/skills-manager-v2-preview.png)
+## 界面预览
 
-查看技能内容：
+技能管理：
 
-![技能详情](assets/screenshots/skill-detail.png)
+![技能管理完整界面](assets/screenshots/skills-manager-v2-preview.webp)
 
-移入回收站前确认：
+技能仓库：
 
-![移到回收站确认框](assets/screenshots/delete-plugin.png)
+![技能仓库浏览与安装](assets/screenshots/skill-repositories.webp)
 
-*以上为历史版本的完整界面截图，当前版本增加了全局、项目和回收站页签。*
+*截图来自 1.0.0 发布前的 0.1.54 本地测试版，展示全局技能和技能仓库；最终版补充了刷新动画及进度提示。截图采用原尺寸无损 WebP。*
 
 ## 安装
 
@@ -67,7 +69,7 @@ dsh plugin --profile web add @michengai/dsh-skills-manager@latest --registry=htt
 
 安装后重启 DSH 并刷新页面，打开「设置 → 技能」即可使用。更新时可点击「检查更新」，或重新执行安装命令。
 
-- `0.1.53` 已验证兼容 DeepSeek Harness `0.1.0-rc.8`、`0.1.1-rc.2`、`0.1.2-rc.1`、`0.1.5-rc.1`、`0.1.5-rc.2`、`0.1.6-alpha.1`、`0.1.6-alpha.2`。
+- `1.0.0` 已验证兼容 DeepSeek Harness `0.1.0-rc.8`、`0.1.1-rc.2`、`0.1.2-rc.1`、`0.1.5-rc.1`、`0.1.5-rc.2`、`0.1.6-alpha.1`、`0.1.6-alpha.2`。
 
 ## 使用说明
 
@@ -77,12 +79,22 @@ dsh plugin --profile web add @michengai/dsh-skills-manager@latest --registry=htt
 | 查看内容 | 点击「查看详情」，阅读技能正文及来源信息。 |
 | 控制启停 | 切换技能开关；只影响 DSH，不改动源文件。 |
 | 添加技能 | 点击「创建技能」或「导入到全局 DSH」。 |
+| 从仓库安装 | 打开「技能仓库 → 添加仓库」，填写公开 GitHub 地址，扫描后逐项安装。 |
+| 更新仓库技能 | 点击「刷新并检查更新」，再「查看更新」预览文件差异，确认备份后更新。 |
+| 恢复更新前版本 | 对有备份的技能点击「恢复上一版」，预览并确认。 |
 | 找回误删 | 打开「回收站」恢复；项目技能需回到原项目会话后恢复。 |
 
 - **项目只看当前会话**：Git 仓库使用最近的 Git 根目录；普通文件夹使用当前会话的工作目录，无需 `git init`。
 - **同名技能独立启停**：停用项目副本后，其他已启用副本仍可接管，页面会提示实际来源。要完全关闭该技能，需停用全部副本。
 - **文件管理范围**：只有 DSH 来源的技能可以移入回收站；其他 Agent 的技能可查看和启停。创建与导入始终保存到全局 DSH。
 
+### 仓库使用边界
+
+- 标题区「检查更新」更新插件自身；仓库区「刷新并检查更新」检查技能内容，不自动安装或替换。刷新时显示当前仓库、数量和动画。
+- 仓库安装仅写入全局 DSH；仅支持公开 GitHub，不提供私有凭证或自动更新。移除订阅保留已安装技能。
+- 归档上限 32 MiB，指定子目录也需下载整库。扫描失败保留上次目录；缓存损坏时重新刷新。
+- 更新前检测本地修改，覆盖必须明确确认；历史备份不自动清理，磁盘用量会增加。
+
 ## 支持的 Agent 目录
 
 `~` 表示用户主目录，`<project>` 表示当前会话的项目根。表中为默认路径；设置了对应 DSH 目录变量时，以配置为准。
@@ -116,7 +128,7 @@ dsh plugin --profile web add @michengai/dsh-skills-manager@latest --registry=htt
 | --- | --- |
 | [Codex UI](https://github.com/MichengAI/dsh-codex-ui) | 整理项目与会话、搜索任务、跳转对话轮次 |
 | [Agency Agents](https://github.com/MichengAI/dsh-agency-agents) | 按任务选择并召唤专业角色 |
-| [Skills Manager](https://github.com/MichengAI/dsh-skills-manager) | 统一查找、启停、创建和导入本机技能 |
+| [Skills Manager](https://github.com/MichengAI/dsh-skills-manager) | 管理本机与项目技能，从仓库安装、更新和回退 |
 | [Archive Manager](https://github.com/MichengAI/dsh-archive-manager) | 搜索、恢复或清理已归档会话 |
 | [IM Connect](https://github.com/MichengAI/dsh-im-connect) | 从消息平台下任务、收回复 |
 | [Automation](https://github.com/MichengAI/dsh-automation) | 按计划执行任务，查看每次运行的结果 |