@michengai/dsh-skills-manager 1.0.0 → 1.0.1

package/CHANGELOG.md

@@ -2,6 +2,26 @@
 
 [简体中文](CHANGELOG.zh-CN.md)
 
+## 1.0.1 - 2026-09-21
+
+This maintenance release improves source development, packaging verification and screenshot privacy while retaining the existing plugin runtime interfaces.
+
+### Development and packaging
+
+- Migrate ten source modules to strict TypeScript, retaining the existing plugin architecture and JavaScript runtime entry points. Add domain, host and client contracts, plus positive and negative type tests; include type checking in the main test command.
+- Stop tracking `lib` in Git. Run type checks and build automatically before packing, and verify that a clean directory without `lib` produces a package with all runtime files and a loadable server entry point.
+- Cover the exact minimum Node.js version 22.19.0 alongside Node.js 24 in CI. Code changes continue to trigger the supported-host compatibility matrix.
+- Document supported installation via the npm registry or locally built `.tgz` packages; direct Git/GitHub dependency installation is not supported. Align the English and Chinese development instructions.
+
+### Fixes
+
+- Restore modal focus after an asynchronous form submission disables the focused button, so Escape after an error closes only the plugin dialog instead of the entire host settings page.
+
+### Documentation and privacy
+
+- Crop all nine screenshots to their feature panels, redact local paths, and remove real filenames and project directories from the background. Reduce total screenshot size by 81% with lossless compression.
+- Correct the English screenshot caption and align image display sizes with the cropped files.
+
 ## 1.0.0 - 2026-09-21
 
 ### 1.0 release scope

package/CHANGELOG.zh-CN.md

@@ -2,6 +2,26 @@
 
 [English](CHANGELOG.md)
 
+## 1.0.1 - 2026-09-21
+
+本次维护版本完善源码开发、打包验证与截图隐私处理，保留现有插件运行接口。
+
+### 开发与打包
+
+- 十个源码模块迁移到严格 TypeScript，保留现有插件架构和 JavaScript 运行入口；新增领域、宿主和客户端契约以及类型正反例测试，将类型检查纳入主测试命令。
+- `lib` 不再纳入 Git；打包前自动检查类型并构建，验证没有 `lib` 的干净目录仍可生成包含全部运行产物、服务端入口可加载的安装包。
+- CI 同时覆盖精确最低 Node.js 22.19.0 与 Node.js 24；代码改动继续自动触发受支持宿主兼容矩阵。
+- 明确支持 npm registry 和本地构建 `.tgz` 安装，不支持 Git/GitHub 依赖直装；对齐中英文开发说明。
+
+### 修复
+
+- 修复异步表单提交禁用按钮后焦点丢失的问题；错误后按 Escape 仅关闭插件弹窗，不再连带关闭宿主设置页。
+
+### 文档与隐私
+
+- 将全部九张截图裁到功能面板，遮盖本机路径并移除背景中的真实文件名和项目目录；无损压缩后总体积减少 81%。
+- 修正英文截图说明，并按裁切后的尺寸调整文档展示。
+
 ## 1.0.0 - 2026-09-21
 
 ### 1.0 正式版范围

package/README.md

@@ -19,7 +19,7 @@
 
 > DSH Skills Manager is a community-maintained DeepSeek Harness (DSH) plugin, not an official DeepSeek AI product.
 
-This README describes **1.0.0**. See the [changelog](CHANGELOG.md) and [bilingual 1.0.0 release notes](https://github.com/MichengAI/dsh-skills-manager/blob/master/docs/02-%E4%BA%A7%E5%93%81%E4%B8%8E%E4%B8%9A%E5%8A%A1/04-1.0.0%E5%8F%91%E8%A1%8C%E8%AF%B4%E6%98%8E.md).
+This README describes **1.0.1**. See the [changelog](CHANGELOG.md) and [release notes](https://github.com/MichengAI/dsh-skills-manager/releases/latest).
 
 ## Features
 
@@ -45,12 +45,14 @@ Skill repositories:
 
 ![Browse and install repository skills](assets/screenshots/skill-repositories.webp)
 
-*Screenshots show the pre-release 0.1.54 local build used to prepare 1.0.0. The final version adds refresh animation and progress feedback. Screenshots use lossless WebP at original resolution.*
+*Screenshots show the pre-release 0.1.54 local build used to prepare 1.0.0. The final version adds refresh animation and progress feedback. Screenshots show only the feature panels, with real filenames and project directories cropped out of the background, and use lossless WebP.*
 
 ## Installation
 
 Requires a working DeepSeek Harness installation. The commands below use the `web` profile; replace it with yours if needed.
 
+Supported plugin installation sources are the npm registry and a locally built `.tgz` package. Direct Git/GitHub dependency installation (such as `github:MichengAI/dsh-skills-manager`) is not supported. For source development, install development dependencies and build the project before loading it into DSH.
+
 ### Ask an agent to install it
 
 Send this to an agent that can use your local terminal:
@@ -69,7 +71,7 @@ dsh plugin --profile web add @michengai/dsh-skills-manager@latest --registry=htt
 
 Restart DSH, refresh the page, and open **Settings → Skills**. To update, select **Check for updates** or run the installation command again.
 
-- Plugin `1.0.0` is tested with DeepSeek Harness `0.1.0-rc.8`, `0.1.1-rc.2`, `0.1.2-rc.1`, `0.1.5-rc.1`, `0.1.5-rc.2`, `0.1.6-alpha.1`, `0.1.6-alpha.2`.
+- Plugin `1.0.1` is tested with DeepSeek Harness `0.1.0-rc.8`, `0.1.1-rc.2`, `0.1.2-rc.1`, `0.1.5-rc.1`, `0.1.5-rc.2`, `0.1.6-alpha.1`, `0.1.6-alpha.2`.
 
 ## Usage
 
@@ -142,7 +144,9 @@ For a desktop workbench, download [DSH Codex Desktop](https://github.com/Micheng
 
 [Open an issue](https://github.com/MichengAI/dsh-skills-manager/issues) for bugs or suggestions. Include your DSH and plugin versions, reproduction steps, and a full screenshot for UI issues.
 
-Source code lives in `src`. Contributions are welcome.
+Source code lives in `src` and uses strict TypeScript while retaining the existing plugin architecture. Run `npm run typecheck` for type checks, `npm run build` to generate runtime files, and `npm run verify` for the full regression and package checks. `lib` is not tracked in Git; packing automatically checks types and builds the JavaScript files required by the npm package. CI runs full verification on Node.js 22.19.0 and 24, and code changes also trigger the supported-host compatibility matrix. Contributions are welcome.
+
+To test a source checkout, install dependencies using the pinned pnpm version, run `npm run verify`, then run `npm pack`. Install the resulting `.tgz` with `dsh plugin --profile web add <package.tgz>`, restart DSH and refresh the page. Do not use `--ignore-scripts` when packing: it skips the build hook.
 
 ## License
 

package/README.zh-CN.md

@@ -19,7 +19,7 @@
 
 > DSH Skills Manager 是社区维护的 DeepSeek Harness（DSH）插件，并非 DeepSeek AI 官方产品。
 
-本文对应 **1.0.0**。完整变更见[更新日志](CHANGELOG.zh-CN.md)，中英文发行说明见 [1.0.0 发行说明](https://github.com/MichengAI/dsh-skills-manager/blob/master/docs/02-%E4%BA%A7%E5%93%81%E4%B8%8E%E4%B8%9A%E5%8A%A1/04-1.0.0%E5%8F%91%E8%A1%8C%E8%AF%B4%E6%98%8E.md)。
+本文对应 **1.0.1**。完整变更见[更新日志](CHANGELOG.zh-CN.md)与[最新发行说明](https://github.com/MichengAI/dsh-skills-manager/releases/latest)。
 
 ## 功能概览
 
@@ -45,12 +45,14 @@
 
 ![技能仓库浏览与安装](assets/screenshots/skill-repositories.webp)
 
-*截图来自 1.0.0 发布前的 0.1.54 本地测试版，展示全局技能和技能仓库；最终版补充了刷新动画及进度提示。截图采用原尺寸无损 WebP。*
+*截图来自 1.0.0 发布前的 0.1.54 本地测试版，展示全局技能和技能仓库；最终版补充了刷新动画及进度提示。截图仅保留功能面板，已裁去背景中的真实文件名与项目目录，采用无损 WebP。*
 
 ## 安装
 
 需要已安装并能正常运行 DeepSeek Harness。以下命令使用 `web` profile，请按实际环境替换。
 
+插件安装支持 npm registry 和本地构建的 `.tgz` 包，不支持直接以 Git/GitHub 依赖安装（例如 `github:MichengAI/dsh-skills-manager`）。从源码开发时，请先安装开发依赖并构建，再加载到 DSH。
+
 ### 让 Agent 帮你安装
 
 把这段话发给能够操作本机终端的 Agent：
@@ -69,7 +71,7 @@ dsh plugin --profile web add @michengai/dsh-skills-manager@latest --registry=htt
 
 安装后重启 DSH 并刷新页面，打开「设置 → 技能」即可使用。更新时可点击「检查更新」，或重新执行安装命令。
 
-- `1.0.0` 已验证兼容 DeepSeek Harness `0.1.0-rc.8`、`0.1.1-rc.2`、`0.1.2-rc.1`、`0.1.5-rc.1`、`0.1.5-rc.2`、`0.1.6-alpha.1`、`0.1.6-alpha.2`。
+- `1.0.1` 已验证兼容 DeepSeek Harness `0.1.0-rc.8`、`0.1.1-rc.2`、`0.1.2-rc.1`、`0.1.5-rc.1`、`0.1.5-rc.2`、`0.1.6-alpha.1`、`0.1.6-alpha.2`。
 
 ## 使用说明
 
@@ -142,7 +144,9 @@ dsh plugin --profile web add @michengai/dsh-skills-manager@latest --registry=htt
 
 遇到问题或有建议，欢迎[提交 Issue](https://github.com/MichengAI/dsh-skills-manager/issues)。请附上 DSH 与插件版本、复现步骤；界面问题可附完整截图。
 
-源码位于 `src`，欢迎提交改进。
+源码位于 `src`，使用严格 TypeScript，保留现有插件架构。开发时执行 `npm run typecheck` 检查类型，`npm run build` 生成运行产物，`npm run verify` 执行完整回归与打包验证。`lib` 不纳入 Git 提交；打包前会自动检查类型并构建，npm 安装包仍包含所需 JavaScript 产物。CI 在 Node.js 22.19.0 和 24 上执行完整验证，代码改动也会自动触发受支持宿主兼容矩阵。欢迎提交改进。
+
+从源码制作测试包时，使用项目固定版本的 pnpm 安装依赖，执行 `npm run verify`，再执行 `npm pack`。用 `dsh plugin --profile web add <package.tgz>` 安装生成的 `.tgz`，重启 DSH 并刷新页面。打包时不要使用 `--ignore-scripts`，否则会跳过构建钩子。
 
 ## 许可证
 

package/lib/client.js

@@ -1,5 +1,6 @@
+"use strict";
 (() => {
-  // src/repository-ui.js
+  // src/repository-ui.ts
   var repositoryLocales = {
     zh: {
       "repo.refreshing": "\u6B63\u5728\u68C0\u67E5\u66F4\u65B0\u2026",
@@ -164,8 +165,9 @@
         if (mounted.current) setRepos(data.repositories || []);
       }
       function message(error) {
-        if (t("format.locale") === "zh-CN" && error.code === "error.repo.invalid") return error.error || error.message || t(error.code);
-        return translateError(t, error) || error.message || String(error);
+        const item = error;
+        if (t("format.locale") === "zh-CN" && item.code === "error.repo.invalid") return item.error || item.message || t(item.code);
+        return translateError(t, error) || item.message || String(error);
       }
       function feedbackText(value) {
         return value.payload ? message(value.payload) : (value.key ? t(value.key) : value.text || "") + (value.name ? " \xB7 " + value.name : "");
@@ -180,7 +182,8 @@
         try {
           await task();
           if (reload) await load();
-        } catch (error) {
+        } catch (caught) {
+          const error = caught;
           if (mounted.current) setFeedback({ error: true, payload: error });
         } finally {
           locked.current = false;
@@ -188,7 +191,7 @@
         }
       }
       function post(action, body) {
-        return api("/repositories/" + action, { method: "POST", headers, body: JSON.stringify(body) });
+        return api(`/repositories/${action}`, { method: "POST", headers, body: JSON.stringify(body) });
       }
       async function refreshRepo(id) {
         const result = await post("refresh", { id });
@@ -220,7 +223,8 @@
           try {
             const detail = await post("detail", { id: repo.id, path: skill.path });
             if (mounted.current) setModal({ type: "detail", detail, repo });
-          } catch (error) {
+          } catch (caught) {
+            const error = caught;
             if (mounted.current) setModal({ type: "detail", repo, failed: true });
             throw error;
           }
@@ -250,7 +254,8 @@
           setInstallation({ ...target, pending: true, key: "repo.installProgress" });
           try {
             await post("install", target);
-          } catch (error) {
+          } catch (caught) {
+            const error = caught;
             if (mounted.current) setInstallation({ ...target, error: true, payload: error });
             throw error;
           }
@@ -267,13 +272,15 @@
         });
       }
       function update() {
+        if (!modal || modal.type !== "review" && modal.type !== "rollback") return;
         const selected = modal, rollback = selected.type === "rollback";
         return perform(async () => {
           const target = { id: selected.repo.id, path: selected.skill.path };
           setInstallation({ ...target, pending: true, key: "repo.updateProgress" });
           try {
             await post(rollback ? "rollback" : "update", { ...target, token: selected.detail.token, overwrite: selected.detail.localModified });
-          } catch (error) {
+          } catch (caught) {
+            const error = caught;
             if (mounted.current) setInstallation({ ...target, error: true, payload: error });
             throw error;
           }
@@ -350,7 +357,7 @@
           "div",
           { className: "dssm-repo-panel" },
           h("div", { className: "dssm-name" }, modal.skill.name),
-          h("div", { className: "dssm-repo-metadata" }, modal.repo.owner + "/" + modal.repo.name + " \xB7 " + modal.detail.commit.slice(0, 7)),
+          h("div", { className: "dssm-repo-metadata" }, modal.repo.owner + "/" + modal.repo.name + " \xB7 " + modal.detail.commit?.slice(0, 7)),
           modal.detail.localModified ? h("p", { className: "dssm-feedback dssm-warning", role: "alert" }, t("repo.modified")) : null,
           modal.detail.changes.length ? h("ul", { style: { maxHeight: "240px", overflow: "auto", overflowWrap: "anywhere", paddingLeft: "20px" } }, modal.detail.changes.map((change) => h("li", { key: change.path }, t("repo." + (change.kind === "modified" ? "modifiedFile" : change.kind)) + " \xB7 " + change.path))) : h("p", null, t("repo.noChanges")),
           busy ? h("div", { role: "status" }, t("repo.updateProgress")) : null,
@@ -430,7 +437,7 @@
     };
   }
 
-  // src/plugin-update-ui.js
+  // src/plugin-update-ui.ts
   var UPDATE_HEADER = "x-michengai-plugin-update";
   var STYLE_ID = "michengai-plugin-update-ui";
   var CSS2 = `
@@ -512,7 +519,7 @@
       ...signalOption
     });
     const value = await response.json();
-    if (!response.ok || !validPayload(value)) throw new Error(typeof value.error === "string" ? value.error : strings().failed);
+    if (!response.ok || !validPayload(value)) throw new Error(value && typeof value === "object" && "error" in value && typeof value.error === "string" ? value.error : strings().failed);
     return value;
   }
   function manualPluginUpdateCommand(profileName, packageName, version) {
@@ -637,7 +644,7 @@
         update.disabled = busy || payload?.canAutoUpdate !== true || payload.updateAvailable !== true;
         if (payload === void 0) setMessage(() => text.checking);
         else if (payload.latestCheckFailed) setMessage(() => text.failed, "error");
-        else if (payload.updateAvailable) setMessage(() => `${text.found}: v${payload.latestVersion ?? text.unknown}`);
+        else if (payload.updateAvailable) setMessage(() => `${text.found}: v${payload?.latestVersion ?? text.unknown}`);
         else setMessage(() => text.latest, "success");
         if (payload !== void 0 && !payload.canAutoUpdate && payload.updateAvailable) setMessage(() => text.unavailable);
       };
@@ -649,7 +656,8 @@
           await load();
           setBusy(false);
           render();
-        } catch (error) {
+        } catch (caught) {
+          const error = caught;
           setBusy(false);
           setMessage(error instanceof Error ? error.message : () => text.failed, "error");
         }
@@ -664,8 +672,9 @@
           payload = await requestStatus(options.endpoint, "POST", controller.signal);
           applyControls();
           render();
-          setMessage(() => payload.autoReload === true ? text.restarting : text.restart, "success");
-        } catch (error) {
+          setMessage(() => payload?.autoReload === true ? text.restarting : text.restart, "success");
+        } catch (caught) {
+          const error = caught;
           setMessage(error instanceof Error ? error.message : () => text.failed, "error");
         } finally {
           updating = false;
@@ -748,7 +757,7 @@
     };
   }
 
-  // src/source-select.js
+  // src/source-select.ts
   function createSourceSelect(react, primitives) {
     const h = react.createElement;
     return function SourceSelect(props) {
@@ -796,12 +805,12 @@
               setOpen(true);
             }
           }
-        }, h("span", { className: "dssm-select-value" }, props.action ? props.label : selected?.label || props.label), props.action ? null : h(primitives.IconChevronDownOutline14, { className: "dssm-select-chevron", "aria-hidden": true }))
+        }, h("span", { className: "dssm-select-value" }, props.action ? props.label : selected?.label || props.label), props.action ? null : h(primitives.IconChevronDownOutline14, { className: "dssm-select-chevron", ...{ "aria-hidden": true } }))
       });
     };
   }
 
-  // src/client.js
+  // src/client.ts
   window.__ModuleLoader__.load({
     id: "@michengai/dsh-skills-manager",
     factory: (require2) => {
@@ -1287,14 +1296,15 @@
       function translateError(t, payload) {
         if (payload instanceof Error && !payload.code) return payload.message;
         if (payload && typeof payload === "object") {
-          if (payload.code) {
-            var params = Object.assign({}, payload.params || {});
-            if (params.action) params.action = translateOrFallback(t, "action." + params.action, params.action);
-            var translated = t(payload.code, params);
-            if (typeof translated === "string" && translated !== payload.code) return translated;
+          const item = payload;
+          if (item.code) {
+            var params = Object.assign({}, item.params || {});
+            if (params.action) params.action = translateOrFallback(t, "action." + params.action, String(params.action));
+            var translated = t(item.code, params);
+            if (typeof translated === "string" && translated !== item.code) return translated;
           }
-          if (payload.error !== void 0) return translateError(t, payload.error);
-          if (payload.message !== void 0) return String(payload.message);
+          if (item.error !== void 0) return translateError(t, item.error);
+          if (item.message !== void 0) return String(item.message);
         }
         return String(payload == null ? "" : payload);
       }
@@ -1304,7 +1314,8 @@
           error.code = "error.proto.nonJson";
           error.params = { status: response.status };
           throw error;
-        }).then(function(payload) {
+        }).then(function(value) {
+          const payload = value;
           if (!response.ok || payload.ok === false) throw payload;
           return payload.data;
         });
@@ -1314,7 +1325,7 @@
       }
       function isSkillEnabled(skill) {
         if (skill.enabled !== void 0) return skill.enabled === true;
-        return skill.invocationPolicyValid && skill.modelInvocable && skill.userInvocable && skill.managerEnabled !== false;
+        return !!(skill.invocationPolicyValid && skill.modelInvocable && skill.userInvocable && skill.managerEnabled !== false);
       }
       function countKey(key, count) {
         return key + (Number(count) === 1 ? ".one" : ".other");
@@ -1403,7 +1414,7 @@
         return String(file && (file._dssmPath || file.webkitRelativePath || file.name) || "").replace(/\\/g, "/");
       }
       function inspectUploadSelection(files) {
-        var list = Array.prototype.slice.call(files || []);
+        var list = Array.from(files || []);
         if (!list.length) return null;
         if (list.length > MAX_UPLOAD_ENTRIES) return { error: { code: "error.upload.tooMany", params: { limit: MAX_UPLOAD_ENTRIES } } };
         var relative = list.some(function(file) {
@@ -1432,7 +1443,7 @@
       }
       function bytesToBase64(buffer) {
         var bytes = new Uint8Array(buffer), binary = "", chunk = 32768;
-        for (var i = 0; i < bytes.length; i += chunk) binary += String.fromCharCode.apply(null, bytes.subarray(i, Math.min(i + chunk, bytes.length)));
+        for (var i = 0; i < bytes.length; i += chunk) binary += String.fromCharCode(...bytes.subarray(i, Math.min(i + chunk, bytes.length)));
         return btoa(binary);
       }
       function buildUploadPayload(selection) {
@@ -1460,7 +1471,9 @@
               if (!batch.length) {
                 Promise.all(children.map(function(child) {
                   return readDroppedEntry(child, prefix + entry.name + "/", output);
-                })).then(resolve, reject);
+                })).then(function() {
+                  resolve();
+                }, reject);
                 return;
               }
               children = children.concat(batch);
@@ -1471,10 +1484,10 @@
         });
       }
       function droppedFiles(dataTransfer) {
-        var items = Array.prototype.slice.call(dataTransfer && dataTransfer.items || []), entries = items.map(function(item) {
+        var items = Array.from(dataTransfer && dataTransfer.items || []), entries = items.map(function(item) {
           return item.webkitGetAsEntry && item.webkitGetAsEntry();
-        }).filter(Boolean);
-        if (!entries.length) return Promise.resolve(Array.prototype.slice.call(dataTransfer && dataTransfer.files || []));
+        }).filter((entry) => !!entry);
+        if (!entries.length) return Promise.resolve(Array.from(dataTransfer && dataTransfer.files || []));
         var files = [];
         return Promise.all(entries.map(function(entry) {
           return readDroppedEntry(entry, "", files);
@@ -1509,11 +1522,17 @@
       function GithubMark16() {
         return h("svg", { viewBox: "0 0 16 16", width: 16, height: 16, "aria-hidden": true, focusable: "false" }, h("path", { fill: "currentColor", d: "M8 0a8 8 0 0 0-2.53 15.59c.4.074.547-.173.547-.385 0-.19-.007-.693-.01-1.36-2.226.484-2.695-1.073-2.695-1.073-.364-.924-.89-1.17-.89-1.17-.726-.496.055-.486.055-.486.803.056 1.225.824 1.225.824.714 1.223 1.872.87 2.328.665.072-.517.28-.87.508-1.07-1.777-.202-3.645-.888-3.645-3.956 0-.874.31-1.588.823-2.148-.083-.202-.357-1.017.078-2.12 0 0 .672-.215 2.2.82A7.65 7.65 0 0 1 8 4.8c.68.003 1.365.092 2.004.27 1.527-1.035 2.197-.82 2.197-.82.437 1.103.162 1.918.08 2.12.513.56.822 1.274.822 2.148 0 3.076-1.872 3.752-3.654 3.95.288.248.544.735.544 1.482 0 1.07-.01 1.932-.01 2.195 0 .214.144.463.55.384A8.001 8.001 0 0 0 8 0Z" }));
       }
+      function recoverModalFocus(modal, active, body) {
+        if (modal && active === body) modal.focus();
+      }
       function Modal(props) {
         var ref = react.useRef(null);
         react.useEffect(function() {
           if (ref.current) ref.current.focus();
         }, []);
+        react.useLayoutEffect(function() {
+          recoverModalFocus(ref.current, document.activeElement, document.body);
+        });
         return h("div", { className: "dssm-mask", onMouseDown: function(e) {
           if (e.target === e.currentTarget) props.onClose();
         } }, h("div", { ref, tabIndex: -1, className: "dssm-modal" + (props.wide ? " dssm-modal-wide" : "") + (props.className ? " " + props.className : ""), role: "dialog", "aria-modal": "true", onKeyDown: function(e) {
@@ -1542,7 +1561,7 @@
       function SkillManagerView(props) {
         var t = props.t;
         function sessionApi(path, options2) {
-          var headers = Object.assign({}, options2 && options2.headers);
+          var headers = Object.fromEntries(new Headers(options2?.headers).entries());
           if (props.sessionId) headers["x-dsh-skills-session"] = props.sessionId;
           return callApi(path, Object.assign({}, options2, { headers }));
         }
@@ -1655,7 +1674,7 @@
           }).catch(function() {
           });
         }
-        var data = snapshot.data || { roots: [], projects: [], trash: [] }, allRoots = data.roots || [], projects = data.projects || [];
+        var data = snapshot.data || { roots: [], projects: [], trash: [], warnings: [] }, allRoots = data.roots || [], projects = data.projects || [];
         var activeProject = projects.length === 1 ? projects[0].root : "";
         var filterKey = scope === "project" ? "project:" + activeProject : "user", filters = savedFilters[filterKey] || { query: "", source: "", status: "" }, query = filters.query, source = filters.source;
         function updateFilter(key, value) {
@@ -1684,7 +1703,7 @@
           return item.root && item.root.scope === "project" ? t("root.projectDsh") + " \xB7 " + (item.root.projectName || item.root.projectRoot) : t("root.dsh");
         }
         var options = [{ value: "", label: t("filter.all") }].concat(roots.map(function(root) {
-          return { value: root.key, label: t("filter.option", { name: rootDisplayName(t, root), count: root.count == null ? root.skills.length : root.count }) };
+          return { value: root.key, label: t("filter.option", { name: rootDisplayName(t, root), count: root.skills.length }) };
         }));
         function renderFallback(skill) {
           if (!skill.fallbackTo) return null;
@@ -1797,7 +1816,7 @@
             event.preventDefault();
             var next = nextScopeTab(value, event.key);
             setScope(next);
-            document.getElementById("dssm-tab-" + next).focus();
+            document.getElementById("dssm-tab-" + next)?.focus();
           } }, t("scope." + value), value === "trash" && (data.trash || []).length > 0 ? h("span", { className: "dssm-trash-count" }, (data.trash || []).length) : null);
         }));
         var skillControls = [h("div", { key: "summary", className: "dssm-summary" }, [["total", "summary.total"], ["enabled", "summary.enabled"], ["disabled", "summary.disabled"], ["invalid", "summary.invalid"]].map(function(item) {
@@ -1886,7 +1905,7 @@
         } }, detail ? h(react.Fragment, null, h("div", { className: "dssm-detail-path" }, detail.path), h("div", { className: "dssm-detail-section" }, h("div", { className: "dssm-detail-title" }, t("detail.diagnostics")), detail.diagnostics.length ? detail.diagnostics.map(function(item, index) {
           return h("div", { key: index, className: "dssm-diag" }, t(item.code, item.params || {}));
         }) : h("div", { className: "dssm-note" }, t("detail.noIssues"))), h("div", { className: "dssm-detail-section" }, h("div", { className: "dssm-detail-title" }, t("detail.body")), h("pre", { className: "dssm-code" }, detail.body || "")), h("div", { className: "dssm-detail-section" }, h("div", { className: "dssm-detail-title" }, t("detail.frontmatter")), h("pre", { className: "dssm-code" }, JSON.stringify(detail.frontmatter, null, 2)))) : h("div", { className: "dssm-empty" }, t("loading"))));
-        if (modal && modal.type === "trash-confirm") content.push(h(Modal, { key: "trash-confirm", title: t("confirm.trash.title"), closeLabel: t("btn.close"), onClose: function() {
+        if (modal && typeof modal === "object" && modal.type === "trash-confirm") content.push(h(Modal, { key: "trash-confirm", title: t("confirm.trash.title"), closeLabel: t("btn.close"), onClose: function() {
           setModal(null);
         } }, h("p", { className: "dssm-desc" }, t("confirm.trash.desc", { name: modal.name })), h("div", { className: "dssm-modal-actions" }, h("button", { className: "dssm-btn dssm-btn-secondary", onClick: function() {
           setModal(null);
@@ -1896,7 +1915,7 @@
           }).catch(function() {
           });
         } }, t("btn.trash")))));
-        if (modal && modal.type === "delete-confirm") content.push(h(Modal, { key: "delete-confirm", title: t("confirm.delete.title"), closeLabel: t("btn.close"), onClose: function() {
+        if (modal && typeof modal === "object" && modal.type === "delete-confirm") content.push(h(Modal, { key: "delete-confirm", title: t("confirm.delete.title"), closeLabel: t("btn.close"), onClose: function() {
           setModal(null);
         } }, h("p", { className: "dssm-desc" }, t("confirm.delete.desc", { name: modal.name })), h("div", { className: "dssm-modal-actions" }, h("button", { className: "dssm-btn dssm-btn-secondary", onClick: function() {
           setModal(null);
@@ -1940,6 +1959,7 @@
       module.exports.nextScopeTab = nextScopeTab;
       module.exports.currentSessionId = currentSessionId;
       module.exports.canToggleSource = canToggleSource;
+      module.exports.recoverModalFocus = recoverModalFocus;
       module.exports.trapModalFocus = trapModalFocus;
       module.exports.handleModalEscape = handleModalEscape;
       module.exports.inspectUploadSelection = inspectUploadSelection;

package/lib/core.js

@@ -398,7 +398,8 @@ async function browseDirectories(inputPath) {
   try {
     canonical = await fs.realpath(target);
     directory = await fs.stat(canonical);
-  } catch (error) {
+  } catch (caught) {
+    const error = caught;
     return {
       ok: false,
       error: `\u65E0\u6CD5\u8BFB\u53D6\u76EE\u5F55: ${target}`,
@@ -437,7 +438,8 @@ async function browseDirectories(inputPath) {
         hidden: item.name.startsWith(".")
       });
     }
-  } catch (error) {
+  } catch (caught) {
+    const error = caught;
     return {
       ok: false,
       error: `\u65E0\u6CD5\u8BFB\u53D6\u76EE\u5F55: ${canonical}`,
@@ -671,8 +673,9 @@ async function renameWithRetry(source, destination, options = {}) {
   for (let attempt = 1; ; attempt++) {
     try {
       return await rename(source, destination);
-    } catch (error) {
-      if (!TRANSIENT_RENAME_CODES.has(error && error.code) || attempt >= maxAttempts)
+    } catch (caught) {
+      const error = caught;
+      if (!TRANSIENT_RENAME_CODES.has(error && error.code || "") || attempt >= maxAttempts)
         throw error;
       await new Promise(
         (resolvePromise) => setTimeout(resolvePromise, delayMs * attempt)
@@ -691,7 +694,8 @@ async function movePathWithFallback(source, destination, options = {}) {
   try {
     await renameWithRetry(source, destination, options);
     return { copied: false, cleanupError: null };
-  } catch (error) {
+  } catch (caught) {
+    const error = caught;
     if (!error || error.code !== "EXDEV") throw error;
   }
   const quarantine = join(
@@ -707,14 +711,16 @@ async function movePathWithFallback(source, destination, options = {}) {
       verbatimSymlinks: true
     });
     await renameWithRetry(source, quarantine, options);
-  } catch (error) {
+  } catch (caught) {
+    const error = caught;
     await removeMovedPath(destination).catch(() => void 0);
     throw error;
   }
   let cleanupError = null;
   try {
     await removeMovedPath(quarantine);
-  } catch (error) {
+  } catch (caught) {
+    const error = caught;
     cleanupError = error;
   }
   return { copied: true, cleanupError, quarantine };
@@ -727,7 +733,8 @@ async function writeFileAtomically(path, content) {
   try {
     await fs.writeFile(temp, content, "utf8");
     await fs.rename(temp, path);
-  } catch (error) {
+  } catch (caught) {
+    const error = caught;
     await fs.rm(temp, { force: true }).catch(() => void 0);
     throw error;
   }
@@ -746,11 +753,11 @@ async function resolveEntry(root, name) {
       (entry) => entry.name === name
     ) || null;
   }
-  root = definition ? definition.path : root;
+  const directory = definition ? definition.path : root;
   try {
-    const bundlePath = entryPath(root, name);
+    const bundlePath = entryPath(directory, name);
     if (bundlePath === null) return null;
-    const rootPath = resolve(root);
+    const rootPath = resolve(directory);
     const rootStat = await lstatOrNull(rootPath);
     if (!rootStat || !rootStat.isDirectory() || rootStat.isSymbolicLink())
       return null;
@@ -856,38 +863,38 @@ async function scanEntries(root, options = {}) {
     }
     return { ...discovered, entries: entries2 };
   }
-  root = definition ? definition.path : root;
-  const rootStat = await lstatOrNull(resolve(root));
+  const directory = definition ? definition.path : root;
+  const rootStat = await lstatOrNull(resolve(directory));
   if (!rootStat || !rootStat.isDirectory() || rootStat.isSymbolicLink())
     return { exists: false, entries: [] };
   let items;
   try {
-    items = await fs.readdir(root, { withFileTypes: true });
+    items = await fs.readdir(directory, { withFileTypes: true });
   } catch {
     return { exists: false, entries: [] };
   }
   const byName = /* @__PURE__ */ new Map();
-  const rootReal = await resolvedPath(root);
+  const rootReal = await resolvedPath(directory);
   for (const it of items) {
     try {
       if (it.isSymbolicLink()) continue;
-      if (it.isDirectory() && entryPath(root, it.name) !== null) {
-        const docPath = join(root, it.name, "SKILL.md");
+      if (it.isDirectory() && entryPath(directory, it.name) !== null) {
+        const docPath = join(directory, it.name, "SKILL.md");
         const st = await lstatOrNull(docPath);
         if (!st || !st.isFile() || st.isSymbolicLink() || !await isInsideResolvedRoot(rootReal, docPath))
           continue;
         const doc = options.metadataOnly ? { map: {}, hasFrontmatter: false } : parseSkillDoc(await fs.readFile(docPath, "utf8"));
         byName.set(it.name, {
           ...entryOf(it.name, "bundle", docPath, doc),
-          entryPath: join(root, it.name),
+          entryPath: join(directory, it.name),
           realDocPath: await fs.realpath(docPath),
-          realEntryPath: await fs.realpath(join(root, it.name)),
+          realEntryPath: await fs.realpath(join(directory, it.name)),
           linked: false
         });
-      } else if (it.isFile() && it.name.toLowerCase().endsWith(".md") && it.name.toLowerCase() !== "skill.md" && entryPath(root, it.name.slice(0, -3)) !== null) {
+      } else if (it.isFile() && it.name.toLowerCase().endsWith(".md") && it.name.toLowerCase() !== "skill.md" && entryPath(directory, it.name.slice(0, -3)) !== null) {
         const skillName = it.name.slice(0, -3);
         if (byName.has(skillName)) continue;
-        const docPath = join(root, it.name);
+        const docPath = join(directory, it.name);
         if (!await isInsideResolvedRoot(rootReal, docPath)) continue;
         const doc = options.metadataOnly ? { map: {}, hasFrontmatter: false } : parseSkillDoc(await fs.readFile(docPath, "utf8"));
         const realDocPath = await fs.realpath(docPath);
@@ -909,7 +916,7 @@ async function scanEntries(root, options = {}) {
 }
 async function scanDeduplicatedRoots(roots = userRoots(), options = {}) {
   const results = await Promise.all(
-    roots.map(async (root) => [root, await scanEntries(root, options)])
+    roots.map(async (root) => [root, options.metadataOnly ? await scanEntries(root, { metadataOnly: true }) : await scanEntries(root)])
   );
   const scans = /* @__PURE__ */ new Map();
   const groups = /* @__PURE__ */ new Map();
@@ -1068,7 +1075,8 @@ async function readManagerState() {
       warning: null,
       writable: true
     };
-  } catch (error) {
+  } catch (caught) {
+    const error = caught;
     if (error && error.code === "ENOENT")
       return { state: defaultManagerState(), warning: null, writable: true };
     return {
@@ -1293,8 +1301,9 @@ async function publishTrashStage(stage, finalPath, metadata, renameOptions) {
   try {
     await renameWithRetry(stage, finalPath, renameOptions);
     return { fallback: false, cleanupError: null };
-  } catch (error) {
-    if (!TRANSIENT_RENAME_CODES.has(error && error.code)) throw error;
+  } catch (caught) {
+    const error = caught;
+    if (!TRANSIENT_RENAME_CODES.has(error && error.code || "")) throw error;
   }
   await fs.mkdir(finalPath);
   try {
@@ -1312,14 +1321,16 @@ async function publishTrashStage(stage, finalPath, metadata, renameOptions) {
 `,
       "utf8"
     );
-  } catch (error) {
+  } catch (caught) {
+    const error = caught;
     await fs.rm(finalPath, { recursive: true, force: true }).catch(() => void 0);
     throw error;
   }
   let cleanupError = null;
   try {
     await fs.rm(stage, { recursive: true, force: true });
-  } catch (error) {
+  } catch (caught) {
+    const error = caught;
     cleanupError = error;
   }
   return { fallback: true, cleanupError };
@@ -1423,7 +1434,8 @@ async function deleteSkill(root, name, log, options = {}) {
       );
     if (log) log("trash", `\u79FB\u5230\u56DE\u6536\u7AD9 ${name} -> ${finalPath}`);
     return { id, name, deletedAt: metadata.deletedAt, root: metadata.root };
-  } catch (error) {
+  } catch (caught) {
+    const error = caught;
     const rollbackFailures = [];
     for (const item of moved.reverse()) {
       try {
@@ -1432,7 +1444,8 @@ async function deleteSkill(root, name, log, options = {}) {
           item.path,
           options.renameOptions
         );
-      } catch (rollbackError) {
+      } catch (caught2) {
+        const rollbackError = caught2;
         rollbackFailures.push({
           path: item.destination,
           error: String(
@@ -1506,7 +1519,8 @@ async function restoreTrash(id, log, options = {}) {
     await fs.rm(itemRoot, { recursive: true, force: true });
     if (log) log("restore", `\u4ECE\u56DE\u6536\u7AD9\u6062\u590D ${metadata.name} -> ${root}`);
     return { id, name: metadata.name, root: trashRootMetadata(definition) };
-  } catch (error) {
+  } catch (caught) {
+    const error = caught;
     for (const item of moved.reverse())
       await movePathWithFallback(
         item.destination,
@@ -1680,7 +1694,8 @@ async function preflightCandidates(pending, conflicts, failed) {
       const candidate = group[i];
       try {
         await assertNoSymbolicLinks(candidate.source);
-      } catch (error) {
+      } catch (caught) {
+        const error = caught;
         failed.push(
           attachCode(
             {
@@ -1704,7 +1719,8 @@ async function copyToTemporary(source, target, isDir) {
     else await fs.copyFile(source, temp);
     await assertNoSymbolicLinks(temp);
     return temp;
-  } catch (error) {
+  } catch (caught) {
+    const error = caught;
     await fs.rm(temp, { recursive: true, force: true }).catch(() => void 0);
     throw error;
   }
@@ -1719,13 +1735,15 @@ async function replaceWithCopy(source, dest, isDir, existing = []) {
       backups.push({ path, backup });
     }
     await fs.rename(stage, dest);
-  } catch (error) {
+  } catch (caught) {
+    const error = caught;
     await fs.rm(stage, { recursive: true, force: true }).catch(() => void 0);
     const rollbackFailures = [];
     for (const item of backups.reverse()) {
       try {
         await fs.rename(item.backup, item.path);
-      } catch (rollbackError) {
+      } catch (caught2) {
+        const rollbackError = caught2;
         rollbackFailures.push(item.backup);
       }
     }
@@ -1743,7 +1761,8 @@ async function replaceWithCopy(source, dest, isDir, existing = []) {
   for (const item of backups) {
     try {
       await fs.rm(item.backup, { recursive: true, force: true });
-    } catch (error) {
+    } catch (caught) {
+      const error = caught;
       warnings.push({
         code: "warning.backupUncleaned",
         params: {
@@ -1787,7 +1806,8 @@ async function importSkill(source, log, options = {}) {
   } else {
     try {
       candidates = await collectCandidates(source);
-    } catch (error) {
+    } catch (caught) {
+      const error = caught;
       return attachCode(
         {
           ok: false,
@@ -1883,7 +1903,8 @@ async function importSkill(source, log, options = {}) {
       const warnings = await replaceWithCopy(p.source, p.dest, p.isDir);
       imported.push({ name: p.name, overwritten: false, warnings });
       if (log) log("import", `\u5BFC\u5165 ${p.source} -> ${p.dest}`);
-    } catch (e) {
+    } catch (caught) {
+      const e = caught;
       failed.push(
         attachCode(
           { source: p.source, error: String(e && e.message ? e.message : e) },
@@ -1904,7 +1925,8 @@ async function importSkill(source, log, options = {}) {
         );
         imported.push({ name: c.name, overwritten: true, warnings });
         if (log) log("import-overwrite", `\u8986\u76D6\u5BFC\u5165 ${c.source} -> ${dest}`);
-      } catch (e) {
+      } catch (caught) {
+        const e = caught;
         failed.push(
           attachCode(
             { source: c.source, error: String(e && e.message ? e.message : e) },
@@ -2050,7 +2072,8 @@ async function writeUploadedZip(contentRoot, encoded) {
         return !normalized.directory;
       }
     });
-  } catch (error) {
+  } catch (caught) {
+    const error = caught;
     if (error && /^error\./.test(String(error.code || ""))) throw error;
     throw codedError(
       `ZIP \u65E0\u6CD5\u89E3\u538B: ${String(error && error.message ? error.message : error)}`,
@@ -2095,7 +2118,8 @@ async function importUploadedSkill(input, log, options = {}) {
     await fs.mkdir(sessionRoot, { recursive: true });
     const source = await prepareUploadedSource(sessionRoot, input || {});
     return await importSkill(source, log, options);
-  } catch (error) {
+  } catch (caught) {
+    const error = caught;
     return uploadError(error);
   } finally {
     await fs.rm(sessionRoot, { recursive: true, force: true }).catch(() => void 0);
@@ -2156,7 +2180,8 @@ ${body}
 `;
     await fs.writeFile(join(stage, "SKILL.md"), content, "utf8");
     await fs.rename(stage, target);
-  } catch (error) {
+  } catch (caught) {
+    const error = caught;
     await fs.rm(stage, { recursive: true, force: true }).catch(() => void 0);
     throw error;
   }
@@ -2363,6 +2388,7 @@ async function state(options = {}) {
   const result = {
     roots: [],
     projects: [],
+    summary: { total: 0, enabled: 0, disabled: 0, issues: 0 },
     trash,
     warnings: [
       ...policyResult.warning ? [policyResult.warning] : [],

package/lib/index.js

@@ -73,7 +73,8 @@ function readBody(req, limit = 1 << 20) {
         const body = raw ? JSON.parse(raw) : {};
         settled = true;
         resolve(body);
-      } catch (e) {
+      } catch (caught) {
+        const e = caught;
         const error = new Error(`invalid JSON body: ${e.message}`);
         error.statusCode = 400;
         error.code = "error.proto.invalidJson";
@@ -142,7 +143,7 @@ function validateMutationRequest(req, trustedHosts) {
   if (contentType !== "application/json") return { statusCode: 415, code: "error.proto.contentType", error: "content-type must be application/json" };
   return null;
 }
-function json(res, code, payload, headOnly) {
+function json(res, code, payload, headOnly = false) {
   if (!res || res.writableEnded || res.destroyed) return;
   res.once("error", () => {
   });
@@ -156,9 +157,9 @@ function json(res, code, payload, headOnly) {
   } catch {
   }
 }
-function run(res, task, afterSuccess, headOnly) {
+function run(res, task, afterSuccess, headOnly = false) {
   return Promise.resolve().then(task).then((r) => {
-    if (r && r.ok === false) json(res, 400, r, headOnly);
+    if (r && typeof r === "object" && "ok" in r && r.ok === false) json(res, 400, r, headOnly);
     else {
       try {
         if (afterSuccess) afterSuccess();
@@ -324,7 +325,8 @@ function apply(ctx) {
         try {
           const sources = await repositories.sources();
           for (const root of snapshot.roots) if (root.key === "dsh") for (const skill of root.skills || []) skill.installSource = sources[skill.name] || null;
-        } catch (error) {
+        } catch (caught) {
+          const error = caught;
           snapshot.warnings.push({ code: "error.repo.state", error: error.message });
         }
         return snapshot;
@@ -415,7 +417,8 @@ function apply(ctx) {
               json(res, 404, { ok: false, code: "error.proto.unknownAction", error: `unknown action: ${path}` });
           }
         });
-      } catch (e) {
+      } catch (caught) {
+        const e = caught;
         json(res, Number.isInteger(e && e.statusCode) ? e.statusCode : 500, {
           ok: false,
           ...e && e.code ? { code: e.code } : {},

package/lib/plugin-updater.js

@@ -240,7 +240,8 @@ function registerPluginUpdater(ctx, options) {
         if (notifyParent) setTimeout(() => {
           process.send?.(PLUGIN_UPDATE_IPC);
         }, 150).unref?.();
-      } catch (error) {
+      } catch (caught) {
+        const error = caught;
         ctx.logger.warn(`plugin updater failed: ${String(error)}`);
         json(response, 503, { error: publicError(error) });
       }

package/lib/readonly-discovery.js

@@ -34,7 +34,8 @@ async function discoverReadonlyEntries(root) {
         let docStat;
         try {
           docStat = await fs.lstat(docPath);
-        } catch (error) {
+        } catch (caught) {
+          const error = caught;
           if (error.code !== "ENOENT") throw error;
         }
         if (docStat?.isFile() && !docStat.isSymbolicLink()) {

package/lib/repositories.js

@@ -16,7 +16,8 @@ function safePath(value, allowEmpty = false) {
   if (parts.length > 64 || parts.some((p) => !p || p === "." || p === ".." || /[\\:<>"|?*\x00-\x1f]/.test(p) || /[. ]$/.test(p) || /^(con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.|$)/i.test(p))) throw failure("\u4ED3\u5E93\u8DEF\u5F84\u4E0D\u5B89\u5168");
   return value;
 }
-function validateStoredState(value) {
+function validateStoredState(input) {
+  const value = input;
   if (!value || value.version !== 1 || !Array.isArray(value.repositories) || value.repositories.length > 30 || !Array.isArray(value.installs)) throw failure("\u4ED3\u5E93\u72B6\u6001\u683C\u5F0F\u65E0\u6548");
   for (const repo of value.repositories) {
     if (!repo || typeof repo.id !== "string" || !Array.isArray(repo.skills) || repo.skills.length > 500) throw failure("\u4ED3\u5E93\u72B6\u6001\u683C\u5F0F\u65E0\u6548");
@@ -28,7 +29,7 @@ function validateStoredState(value) {
     }
   }
   for (const record of value.installs) {
-    if (!record || typeof record.id !== "string" || typeof record.complete !== "boolean" || !Array.isArray(record.files) || !record.files.length || record.files.length > 1e3 || !/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(record.commit)) throw failure("\u4ED3\u5E93\u5B89\u88C5\u8BB0\u5F55\u65E0\u6548");
+    if (!record || typeof record.id !== "string" || typeof record.complete !== "boolean" || !Array.isArray(record.files) || !record.files.length || record.files.length > 1e3 || !/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(record.commit || "")) throw failure("\u4ED3\u5E93\u5B89\u88C5\u8BB0\u5F55\u65E0\u6548");
     safePath(record.path, true);
     safePath(record.name);
     if (record.name.includes("/")) throw failure("\u4ED3\u5E93\u5B89\u88C5\u540D\u79F0\u65E0\u6548");
@@ -122,7 +123,8 @@ function createRepositoryManager({ fetchImpl = globalThis.fetch, log } = {}) {
       const value = JSON.parse(await fs.readFile(file, "utf8"));
       validateStoredState(value);
       return value;
-    } catch (error) {
+    } catch (caught) {
+      const error = caught;
       if (error.code === "ENOENT") return { version: 1, repositories: [], installs: [] };
       throw failure("\u4ED3\u5E93\u72B6\u6001\u6587\u4EF6\u635F\u574F\u6216\u65E0\u6CD5\u8BFB\u53D6\uFF0C\u8BF7\u4FDD\u7559\u6587\u4EF6\u5E76\u4FEE\u590D\u540E\u91CD\u8BD5", "error.repo.state");
     }
@@ -151,7 +153,8 @@ function createRepositoryManager({ fetchImpl = globalThis.fetch, log } = {}) {
     try {
       const response = await fetchImpl(url, { redirect: "error", signal: AbortSignal.timeout(6e4), headers: { Accept: "application/zip", "User-Agent": "dsh-skills-manager" } });
       return await readResponse(response, LIMIT);
-    } catch (error) {
+    } catch (caught) {
+      const error = caught;
       if (typeof error.code === "string" && error.code.startsWith("error.repo.")) throw error;
       throw failure("\u4ED3\u5E93\u7F51\u7EDC\u8BF7\u6C42\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5\u7F51\u7EDC\u540E\u91CD\u8BD5", "error.repo.network");
     }
@@ -199,10 +202,12 @@ function createRepositoryManager({ fetchImpl = globalThis.fetch, log } = {}) {
     for (let i = 0; i < refs.length; i++) {
       try {
         return await request(`https://codeload.github.com/${repo.owner}/${repo.name}/zip/${refs[i].split("/").map(encodeURIComponent).join("/")}`);
-      } catch (error) {
+      } catch (caught) {
+        const error = caught;
         if (error.httpStatus !== 404 || i === refs.length - 1) throw error;
       }
     }
+    throw failure("\u4ED3\u5E93\u5206\u652F\u4E0D\u5B58\u5728");
   }
   async function matches(record) {
     try {
@@ -289,14 +294,16 @@ function createRepositoryManager({ fetchImpl = globalThis.fetch, log } = {}) {
         }
         const snapshot = await cacheArchive(repo, bytes);
         Object.assign(repo, { skills, commit: snapshot, refreshedAt: (/* @__PURE__ */ new Date()).toISOString(), error: null });
-      } catch (error) {
+      } catch (caught) {
+        const error = caught;
         repo.error = { code: error.code || "error.repo.invalid", error: error.message };
       }
       await write(data);
       if (!repo.error) {
         try {
           await pruneCache(repo);
-        } catch (error) {
+        } catch (caught) {
+          const error = caught;
           if (log) await log("repository.cache.cleanup.failed", { repository: repo.id, error: error.message });
           else console.warn("\u4ED3\u5E93\u65E7\u7F13\u5B58\u672A\u6E05\u7406\uFF1A" + error.message);
         }
@@ -326,7 +333,8 @@ function createRepositoryManager({ fetchImpl = globalThis.fetch, log } = {}) {
       try {
         const result = await importUploadedSkill({ name: skill.name, entries }, log, { conflict: "skip" });
         if (result.ok === false || !result.imported?.length) throw failure(result.error || "\u6280\u80FD\u5B89\u88C5\u5931\u8D25\u6216\u9047\u5230\u540C\u540D\u51B2\u7A81", "error.repo.conflict");
-      } catch (error) {
+      } catch (caught) {
+        const error = caught;
         data.installs = data.installs.filter((item) => item !== record);
         try {
           await write(data);

package/lib/repository-updates.js

@@ -101,7 +101,8 @@ function createRepositoryUpdater({ read, write, repository, download, serialize,
       replaced = true;
       data.installs[data.installs.indexOf(record)] = nextRecord;
       await write(data);
-    } catch (error) {
+    } catch (caught) {
+      const error = caught;
       if (moved) {
         try {
           if (replaced) await fs.rename(target, stage);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@michengai/dsh-skills-manager",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "DSH Skills Manager — 在 DeepSeek Harness 中统一加载并安全管理本机 Agent Skills · Load and safely manage local Agent Skills in DSH",
   "license": "Apache-2.0",
   "repository": {
@@ -40,11 +40,13 @@
   },
   "scripts": {
     "build": "node scripts/build.mjs",
-    "test": "npm run build && node test/build-test.mjs && node test/repositories.test.mjs && node test/repository-ui.test.mjs && node test/theme-select.test.mjs && node test/repository-routes.test.mjs && node test/core-test.mjs && node test/readonly-discovery.test.mjs && node test/project-sources.test.mjs && node test/locale-test.mjs && node test/plugin-update-locale.test.mjs && node test/client-scope.test.mjs && node test/compatibility-options-test.mjs",
-    "verify": "node scripts/sync-hosts.mjs && npm test && npm run pack:check && node scripts/check-generated.mjs",
+    "test": "npm run typecheck && npm run build && node test/build-test.mjs && node test/repositories.test.mjs && node test/repository-ui.test.mjs && node test/theme-select.test.mjs && node test/repository-routes.test.mjs && node test/core-test.mjs && node test/readonly-discovery.test.mjs && node test/project-sources.test.mjs && node test/locale-test.mjs && node --test test/plugin-updater.test.mjs && node test/plugin-update-locale.test.mjs && node test/client-scope.test.mjs && node test/compatibility-options-test.mjs",
+    "verify": "node scripts/sync-hosts.mjs && npm test && npm run pack:check && node test/pack-test.mjs",
     "pack:check": "npm pack --dry-run --json",
+    "prepack": "npm run typecheck && npm run build",
     "prepublishOnly": "npm run verify",
-    "test:compat": "node scripts/test-host-compatibility.mjs"
+    "test:compat": "node scripts/test-host-compatibility.mjs",
+    "typecheck": "tsc --noEmit"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -68,12 +70,15 @@
     "@deepseek-ai/dsh-client-ui-primitives": "0.1.6-alpha.2",
     "@deepseek-ai/dsh-client-ui-slots": "0.1.6-alpha.2",
     "@deepseek-ai/dsh-host-webserver": "0.1.6-alpha.2",
-    "@deepseek-ai/dsh-session": "0.1.6-alpha.2",
     "@deepseek-ai/dsh-scope": "0.1.6-alpha.2",
+    "@deepseek-ai/dsh-session": "0.1.6-alpha.2",
     "@deepseek-ai/dsh-skill": "0.1.6-alpha.2",
     "@deepseek-ai/dsh-tools": "0.1.6-alpha.2",
     "@deepseek-ai/dsh-web-app": "0.1.6-alpha.2",
-    "esbuild": "0.25.0"
+    "@types/node": "22.20.4",
+    "@types/react": "18.3.31",
+    "esbuild": "0.25.0",
+    "typescript": "5.9.3"
   },
   "engines": {
     "node": "^22.19.0 || >=24.0.0"