@morehao/dsh-skills-console 0.5.3 → 0.5.4

package/README.en.md

@@ -113,7 +113,7 @@ The panel shows up in DSH Web's settings page / sidebar.
 
 1. **Add skill**: click "Add skill" in the top right, enter `owner/repo` or a GitHub URL, then click "Detect"; when the repo has several skills, tick the ones to install (multi-select, all selected by default, each with its description), and a single skill is selected automatically. If nothing is detected you can type skill names by hand; leaving them empty installs everything in the repo.
 2. **Share with other agents**: only needed for agents that read their own directory (for example Claude Code). Click "Share settings" on a row and tick the target agents; agents that already read the shared directory are not listed. To choose which agents new installs are shared with by default, use "Auto-share on install" in the header (nothing is ticked by default).
-3. **Check for updates**: click the refresh icon in the list header; rows with updates light up "Update", or update everything at once with "Update all". Locally modified skills ask for confirmation first.
+3. **Check for updates**: manual checks and the background auto-check are **complementary** paths sharing the same verdict — both land in the installed view's update status. Click the refresh icon in the list header to check now, light up "Update", or "Update all"; the background also runs a check every 6 hours (reusing DSH's timer service, which is silently skipped when unavailable — manual checks are unaffected), so the panel is usually already current when you open it. Locally modified skills ask for confirmation before updating.
 4. **Invocation policy**: click the "Auto / Manual only / Fully disabled" status button on a row and switch in the centered invocation-policy dialog. Auto = both the model and `/` can invoke it; Manual only = only the `disable-model-invocation` frontmatter key in `SKILL.md` changes and `/` still works; Fully disabled = `SKILL.md` is renamed to `SKILL.md.disabled` with a marker left behind, and restoring returns to the mode from before. When the author already declared manual-only in `SKILL.md`, the chip is read-only and is never overridden. While parked, install and update are rejected so the file cannot be silently written back.
 
 ## Safety and reliability

package/README.md

@@ -6,7 +6,7 @@
 
 [![npm version](https://img.shields.io/npm/v/@morehao/dsh-skills-console.svg)](https://www.npmjs.com/package/@morehao/dsh-skills-console) [![check](https://github.com/morehao/dsh-skills-console/actions/workflows/check.yml/badge.svg)](https://github.com/morehao/dsh-skills-console/actions/workflows/check.yml) [![license](https://img.shields.io/npm/l/@morehao/dsh-skills-console.svg)](LICENSE)
 
-DSH（DeepSeek Harness）的技能控制台：**装、更新、删除、启停、共享至其他 Agent，外加一份订阅清单**。
+DSH（DeepSeek Harness）的技能控制台：**安装、更新、删除、启停、共享至其他 Agent，外加一份订阅清单**。
 
 它把本机技能收进一张清单：有哪些、从哪来、谁能用、是不是最新。要用的打开，不用的关掉；别的 Agent 需要，一键建链过去——技能本体始终只有一份。
 
@@ -113,7 +113,7 @@ plugin_manager install_bundle(target = <本仓库绝对路径>)
 
 1. **添加技能**：点右上角「添加技能」，填 `owner/repo` 或 GitHub URL，点「检测技能」；仓库里有多个技能时勾选要装的（支持多选，默认全选，列表带每个技能的说明），只有一个会默认勾上。检测不到时可以手填技能名，留空则装仓库内全部。
 2. **共享至其他 Agent**：只有「只读自己目录」的 Agent 才需要这一步（例如 Claude Code）。点行内「共享设置」勾选目标 Agent；本来就读共享目录的 Agent 不在列表里。之后新装技能默认共享至哪些 Agent，用页头「新安装时自动共享」设定（默认一个都不勾）。
-3. **检查更新**：点列表头上的刷新图标；有更新的行会亮起「更新」，也可以一次「全部更新」。本地改过的技能会先要求确认。
+3. **检查更新**：手动检查与后台自动检测是**互补**的两条路径，共用同一套判定、结论都落在已安装页的更新状态里。手动点列表头上的刷新图标即可检查、点亮「更新」或「全部更新」；后台另每 6 小时自动跑一次（复用 DSH 的 timer 服务，未装 timer 时这项静默跳过，手动检查不受影响），所以打开面板时往往已是最新。本地改过的技能更新前会先要求确认。
 4. **调用策略**：点行内「自动 / 仅手动 / 完全停用」状态按钮，在居中的调用策略弹窗里切换。自动＝模型与 `/` 都能调用；仅手动＝只改 `SKILL.md` 的 `disable-model-invocation`，`/` 仍可用；完全停用＝把 `SKILL.md` 改名为 `SKILL.md.disabled` 并留 marker，恢复时回到停用前的模式。作者已在 `SKILL.md` 里声明仅手动时，chip 只读展示，不会被覆盖。停用期间更新 / 安装会被拒绝，避免文件被悄悄写回。
 
 ## 安全与可靠性

package/lib/core/service.js

@@ -2691,6 +2691,49 @@ export function createService({
       return { ok: true, checks: results };
     },
 
+    /**
+     * 定时上游检测（由 lib/index.js 的 timer 服务按固定间隔调用）。
+     * 只做判定，把结论写进 state.checks；绝不自动安装。
+     * 全程 fail-open：任何异常只记日志，不向定时器抛。
+     */
+    async runAutoCheck({ now = Date.now() } = {}) {
+      const AUTO_CHECK_MIN_INTERVAL_MS = 5 * 60 * 60 * 1000; // 6h 周期，容 1h 抖动
+      try {
+        if (store.readOnly) return { ok: true, skipped: 'readonly' };
+        const settings = state().settings || {};
+        const auto = settings.autoCheck || {};
+        if (auto.enabled === false) return { ok: true, skipped: 'disabled' };
+        const installs = Array.isArray(state().installs) ? state().installs : [];
+        const subscriptions = Array.isArray(state().subscriptions) ? state().subscriptions : [];
+        if (installs.length === 0 || subscriptions.length === 0) return { ok: true, skipped: 'empty' };
+        if (enqueue.pending() > 0) return { ok: true, skipped: 'busy' };
+        const last = auto.lastRunAt ? Date.parse(auto.lastRunAt) : NaN;
+        if (Number.isFinite(last) && now - last < AUTO_CHECK_MIN_INTERVAL_MS) {
+          return { ok: true, skipped: 'throttled' };
+        }
+        const result = await this.checkUpdates({});
+        const checks = Array.isArray(result?.checks) ? result.checks : [];
+        const updatable = checks.filter((item) => item.status === 'update-available').length;
+        const at = nowIso();
+        if (!store.readOnly) {
+          store.update((draft) => {
+            if (!draft.settings) draft.settings = {};
+            const prev = draft.settings.autoCheck || {};
+            draft.settings.autoCheck = {
+              enabled: prev.enabled !== false,
+              lastRunAt: at,
+              lastResult: { count: checks.length, updatable, at },
+            };
+          });
+        }
+        logger('auto.check', { count: checks.length, updatable });
+        return { ok: true, count: checks.length, updatable, lastRunAt: at };
+      } catch (error) {
+        logger('auto.check.failed', { message: error?.message, code: error?.code || null });
+        return { ok: false, error: error?.message || String(error) };
+      }
+    },
+
     async planUpdate({ name }) {
       const install = store.findInstall(name);
       if (!install) throw new ServiceError('error.skills.not-managed', `${name} 没有安装记录`);

package/lib/core/state.js

@@ -19,7 +19,12 @@ export const STATE_VERSION = 4;
 export function emptyState() {
   return {
     version: STATE_VERSION,
-    settings: { exportTargets: [], placement: 'settings' },
+    settings: {
+      exportTargets: [],
+      placement: 'settings',
+      // 定时上游检测的开关与上次跑批概览（仅 README 展示，不影响写路径）
+      autoCheck: { enabled: true, lastRunAt: null, lastResult: null },
+    },
     agents: { custom: [], dismissed: [] },
     subscriptions: [],
     installs: [],
@@ -87,6 +92,7 @@ export function upgradeStateV1(value, { now = new Date().toISOString() } = {}) {
     settings: {
       exportTargets: legacyExportTargets(value.settings),
       placement: value.settings?.placement === 'sidebar' ? 'sidebar' : 'settings',
+      autoCheck: { enabled: true, lastRunAt: null, lastResult: null },
     },
     installs,
     exports: exportsRows,
@@ -210,6 +216,12 @@ function validateV3(state) {
   ];
   if (settings.placement !== 'sidebar') settings.placement = 'settings';
 
+  // autoCheck 是纯增量字段：老 state 没有它时补默认值，类型写坏也只做宽松归一（不 fail）。
+  if (!isPlainObject(settings.autoCheck)) settings.autoCheck = { enabled: true, lastRunAt: null, lastResult: null };
+  if (typeof settings.autoCheck.enabled !== 'boolean') settings.autoCheck.enabled = true;
+  if (typeof settings.autoCheck.lastRunAt !== 'string') settings.autoCheck.lastRunAt = null;
+  if (!isPlainObject(settings.autoCheck.lastResult)) settings.autoCheck.lastResult = null;
+
   for (const row of state.installs) {
     if (!isPlainObject(row) || typeof row.name !== 'string' || !row.name) {
       return { ok: false, reason: 'state.installs[] has a row without name' };

package/lib/index.js

@@ -116,5 +116,26 @@ export function apply(ctx, config = {}) {
   const handler = createRoutes({ service, logger });
   ctx.effect(() => ctx.webServer.register({ kind: 'prefix', path: ROUTE_PREFIX, handler }), 'dsh-skills-console:routes');
   ctx.effect(() => () => policies.dispose(), 'dsh-skills-console:policy');
+
+  // 定时上游检测：复用宿主 timer 服务（`@deepseek-ai/cordis-plugin-timer`）。
+  // 它是可选服务——宿主没装时静默降级为「只有手动检查」，其余功能不受影响。
+  // `timer.interval` 内部走 ctx.effect，插件卸载时会自动 clearInterval，不会泄漏。
+  const timer = ctx.get('timer');
+  if (timer && typeof timer.interval === 'function') {
+    const AUTO_CHECK_MS = 6 * 60 * 60 * 1000;
+    ctx.effect(
+      () => timer.interval(() => void service.runAutoCheck(), AUTO_CHECK_MS),
+      'dsh-skills-console:auto-check',
+    );
+    // 启动后给一次延迟首检（避开启动高峰与迁移窗口），内部节流会兜住重复。
+    ctx.effect(
+      () => timer.timeout(() => void service.runAutoCheck(), 30 * 1000),
+      'dsh-skills-console:auto-check-first',
+    );
+    logger('plugin.autoCheck', { intervalMs: AUTO_CHECK_MS });
+  } else {
+    logger('plugin.autoCheck.off', { reason: 'timer-service-missing' });
+  }
+
   logger('plugin.apply', { stateDir: paths.stateDir, canonical: paths.canonical, readOnly: store.readOnly });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@morehao/dsh-skills-console",
-  "version": "0.5.3",
+  "version": "0.5.4",
   "description": "统一管理本地技能的安装、更新、删除与接入，让同一份技能在多个 Agent 间复用。A skill manager for DeepSeek Harness: install, update, remove, link and toggle agent skills.",
   "license": "MIT",
   "author": "morehao <morehao@qq.com>",