dsh-armory 2.3.1 → 2.4.0

package/README.en.md

@@ -5,7 +5,7 @@
 > **The all-in-one control board for DeepSeek Harness**: MCP servers · skills · experts · plugins · tool-usage ledger · four markets — browse, search, install and summon in one place.
 > Forked from [Imzl-zl/dsh-mcp-manager-ui](https://github.com/Imzl-zl/dsh-mcp-manager-ui) (MIT) and extended into a full armory.
 >
-> **New in v2.3.1**: fixed two dead ends in the market caches (a 304 crash loop on corrupted caches, discarding a good disk cache when offline), network data is now validated and written atomically, and the expert persona path follows the marketplace manifest. See the [changelog](.github/release-notes/v2.3.1.md).
+> **New in v2.3.2**: fixed a whole-panel crash when installing an OAuth connector (a string style in the authorization dialog triggered React error #62); a failed browser open is now retried automatically. See the [changelog](.github/release-notes/v2.3.2.md).
 
 <p align="center">
   <a href="https://github.com/2026heshao/dsh-armory/stargazers"><img src="https://img.shields.io/github/stars/2026heshao/dsh-armory?style=social" alt="stars"></a>

package/README.md

@@ -5,7 +5,7 @@
 > **DeepSeek Harness 的一体化管理看板**：MCP · 技能 · 专家 · 插件 · 工具账本 · 四大市场，浏览、搜索、一键安装、一键召唤。
 > fork 自 [Imzl-zl/dsh-mcp-manager-ui](https://github.com/Imzl-zl/dsh-mcp-manager-ui)（MIT），现已扩展为完整军械库。
 >
-> **最新 v2.3.1**：修复市场缓存的两条死路（缓存损坏遇 304 崩溃循环、断网丢弃完好磁盘缓存），网络数据先校验再原子落盘，专家人设路径以市场清单为准。详见 [更新日志](.github/release-notes/v2.3.1.md)。
+> **最新 v2.3.2**：修复安装需 OAuth 连接器时的整面板崩溃（授权弹窗 style 字符串触发 React #62），浏览器打开失败会自动重试唤起。详见 [更新日志](.github/release-notes/v2.3.2.md)。
 
 <p align="center">
   <a href="https://github.com/2026heshao/dsh-armory/stargazers"><img src="https://img.shields.io/github/stars/2026heshao/dsh-armory?style=social" alt="stars"></a>

package/lib/client.js

@@ -372,8 +372,14 @@ const EN_US_MESSAGES = {
  "安装": "Install",
  "安装 = 逐文件下载并 sha256 校验后写入 ~/.agents/skills/，即刻被 DSH 发现（无需重启）。已装版本重装即更新。": "Install = download file by file with sha256 verification into ~/.agents/skills/; DSH picks it up immediately (no restart). Reinstalling an installed version updates it.",
  "安装中…": "Installing…",
+ "该技能正在安装中，请等当前任务结束": "This skill is already installing; wait for the current task to finish.",
  "安装到全局": "Install globally",
  "安装失败": "Install failed",
+ "安装于 {0}": "Installed {0}",
+ "安装时间": "Install time",
+ "安装时间与市场原名不可用：{0}。宿主侧接口在重启 DeepSeek Harness 后才会注册，重启后即可显示。": "Install times and market names unavailable: {0}. The host-side API registers only after restarting DeepSeek Harness; they will appear after a restart.",
+ "按安装时间倒序平铺；随 DSH 分发、运行时注册的技能没有安装时间，不在此列": "Flat list sorted by install time, newest first; skills shipped with DSH or registered at runtime have no install time and are not listed",
+ "它在市场里叫「{0}」，安装后看板显示的是 SKILL.md 的 name 字段。": "It is called \"{0}\" in the market; the board shows the name field from SKILL.md after install.",
  "安装任务已结束": "Install finished",
  "大肥鱼军械库": "Big Fish Armory",
  "宿主正在停止，未升级；请重启后再试。": "Host is shutting down; not upgraded. Restart and try again.",
@@ -444,6 +450,7 @@ const EN_US_MESSAGES = {
  "已重连 ": "Reconnected ",
  "已隐藏 {0} 个不兼容条目": "Hidden {0} incompatible entries",
  "市场": "Market",
+ "市场原名": "Market name",
  "市场数据加载失败；其余分类仍可正常使用。": "Failed to load market data; other categories keep working.",
  "市场：连接器、SkillHub 技能与专家召唤。": "Market: connectors, SkillHub skills and expert summoning.",
  "归属存疑": "Ownership uncertain",
@@ -555,6 +562,7 @@ const EN_US_MESSAGES = {
  "最新版本说明：": "Latest release notes: ",
  "最近": "Recent",
  "最近使用": "Recently used",
+ "最近安装": "Recently installed",
  "服务器": "Servers",
  "未知来源": "Unknown source",
  "未知错误": "Unknown error",
@@ -568,6 +576,7 @@ const EN_US_MESSAGES = {
  "本页没有已安装的技能": "No installed skills on this page",
  "来自 mcp-client 最近日志": "From recent mcp-client logs",
  "来自其他配置层，只读": "From another config layer, read-only",
+ "来自市场 {0}": "From market: {0}",
  "构建授权已过期，未升级；请重试。": "Build authorization expired; not upgraded. Please retry.",
  "查看": "View",
  "查看原始 JSON": "View raw JSON",
@@ -656,6 +665,7 @@ const EN_US_MESSAGES = {
  "自定义目录": "Custom directory",
  "裁缝建议：": "Tailor suggestions: ",
  "装 {0}": "Install {0}",
+ "装于 {0}": "Added {0}",
  "解析中…": "Parsing…",
  "解析并预览": "Parse and preview",
  "认证": "Authentication",
@@ -674,6 +684,7 @@ const EN_US_MESSAGES = {
  "读取 skill 列表失败": "Failed to read the skill list",
  "读取专家目录失败": "Failed to read the expert catalog",
  "读取中…": "Reading…",
+ "读取失败": "Read failed",
  "读取已召唤专家失败": "Failed to read summoned experts",
  "读取技能目录失败": "Failed to read the skill catalog",
  "读取本机客户端配置失败": "Failed to read local client configs",
@@ -935,6 +946,10 @@ const EN_US_MESSAGES = {
   "正在启动授权…": "Starting authorization…",
   "无法启动授权流程": "Unable to start the authorization flow",
   "没能自动唤起浏览器，请复制下方链接手动打开。": "The browser could not be opened automatically — copy the link below and open it manually.",
+  // 服务器不做 OAuth 发现（如腾讯 ima）时授权页根本开不出来，这里把手填令牌那条
+  // 兜底路的弹层文案补齐——只报一句「启动失败」等于把用户堵死在门外。
+  "该服务器无法自动打开授权页。": "This server can't have an authorization page opened automatically.",
+  "该服务器没有提供标准 OAuth 授权发现，无法自动打开授权页。如果你已经从服务方拿到访问令牌，粘贴在下面即可安装。": "This server publishes no standard OAuth authorization-server metadata, so an authorization page can't be opened automatically. If you already have an access token from the provider, paste it below to install.",
   "授权链接": "Authorization link",
   "重新打开浏览器": "Reopen browser",
   "该服务器只接受自定义协议回调，浏览器跳转后页面会打不开。请把地址栏里的完整地址复制到下面。": "This server only accepts a custom-scheme callback, so the redirect page will not load. Copy the full address from the browser's address bar into the field below.",
@@ -1924,6 +1939,10 @@ body[data-ds-dark-theme]{--mcp-cat-dev:var(--dsw-static-deepseek-400);--mcp-cat-
 .dsh-mcp-wb-search-input:hover:not(:disabled){border-color:var(--dsw-alias-border-l3)}
 .dsh-mcp-wb-search-input:focus{border-color:var(--mcp-accent);background:var(--mcp-bg-2);box-shadow:0 0 0 3px color-mix(in srgb,var(--mcp-accent) 16%,transparent)}
 .dsh-mcp-wb-search-input:disabled{opacity:.5;cursor:not-allowed}
+/* busy＝服务端搜索在飞：输入框保持可用（disabled 会收走焦点，见 WbSearchBox 注释），
+   只让放大镜呼吸提示「在加载」，光标与选区都不受影响。 */
+.dsh-mcp-wb-search.busy .dsh-mcp-wb-search-ico{color:var(--mcp-accent);animation:dsh-wb-search-busy 1.1s ease-in-out infinite}
+@keyframes dsh-wb-search-busy{0%,100%{opacity:1}50%{opacity:.3}}
 .dsh-mcp-wb-search-input::-webkit-search-cancel-button{display:none}
 .dsh-mcp-wb-search-clear{position:absolute;right:7px;display:inline-flex;align-items:center;justify-content:center;width:20px;height:20px;border:0;border-radius:999px;background:var(--dsw-alias-interactive-bg-hover);color:var(--mcp-mut);cursor:pointer;padding:0;transition:color .12s,background .12s}
 .dsh-mcp-wb-search-clear:hover{color:var(--dsw-alias-label-primary);background:var(--dsw-alias-interactive-bg-active)}
@@ -5393,6 +5412,9 @@ const SKILL_CATS = [
     weak: ['debug', 'windows', '安装', '升级', '更新'] },
 ];
 const SKILL_UNCAT = { key: 'uncat', get name() { return t('未分类'); }, color: 'var(--mcp-cat-uncat)' };
+// 「最近安装」视图的簇头：不是真分类——不进 SKILL_CATS 轨道、不参与 skillcat hash 校验，
+// 只在 recentOnly 开启时当单簇标题（时间线）用。
+const SKILL_RECENT_CAT = { key: 'recent', get name() { return t('最近安装'); }, color: 'var(--mcp-cat-all)' };
 // skillcat hash 值合法性校验用。
 const SKILL_CAT_KEYS = new Set(SKILL_CATS.map((c) => c.key));
 const skillCatByKey = (key) => SKILL_CATS.find((c) => c.key === key) || null;
@@ -6662,6 +6684,9 @@ const SkillBoard = ({ call, scope, timer }) => {
   const [onlyModel, setOnlyModel] = useState(false);
   const [onlyUser, setOnlyUser] = useState(false);
   const [sourceFilter, setSourceFilter] = useState('all');
+  // 「最近安装」：按安装时间倒序平铺。分类是关键词猜的不一定准，时间线正好补导航缺口——
+  // 刚装的永远排最前，用户一眼认出哪个是自己刚装的。
+  const [recentOnly, setRecentOnly] = useState(false);
   const [selected, setSelected] = useState('');
   const [detail, setDetail] = useState(null);
   const [detailLoading, setDetailLoading] = useState(false);
@@ -6765,6 +6790,36 @@ const SkillBoard = ({ call, scope, timer }) => {
     return () => { alive = false; };
   }, [call]);
 
+  // 安装信息（skill 名字 → { installedAt, marketName?, marketplace? }）：宿主自扫标准
+  // 技能根目录、读 SKILL.md 头部 name 建映射后按名字返回——**不依赖 listSkills 行的
+  // path**（注册表行可能整列缺 path，按 path 查会静默落空，实测踩过）。账本命中的
+  // 附带市场原名：SKILL.md 的 name 可以和市场名不同，供卡片对应显示。
+  // 失败不静默：新接口在旧宿主进程上不存在（404 / 未连接 ≈ 没重启），提示用户重启。
+  const [installInfo, setInstallInfo] = useState(() => new Map());
+  const [installInfoNote, setInstallInfoNote] = useState('');
+  useEffect(() => {
+    let alive = true;
+    call('skillInstallInfo', skillScopeArg(scope)).then((res) => {
+      if (!alive) return;
+      if (res?.ok && res.info) {
+        const map = new Map();
+        for (const [name, row] of Object.entries(res.info)) {
+          if (row && Number(row.installedAt) > 0) map.set(name, row);
+        }
+        setInstallInfo(map);
+        setInstallInfoNote('');
+        return;
+      }
+      setInstallInfo(new Map());
+      setInstallInfoNote(t('安装时间与市场原名不可用：{0}。宿主侧接口在重启 DeepSeek Harness 后才会注册，重启后即可显示。', [String((res && res.error) || t('读取失败'))]));
+    }).catch((e) => {
+      if (!alive) return;
+      setInstallInfo(new Map());
+      setInstallInfoNote(t('安装时间与市场原名不可用：{0}。宿主侧接口在重启 DeepSeek Harness 后才会注册，重启后即可显示。', [String((e && e.message) || e)]));
+    });
+    return () => { alive = false; };
+  }, [skills, scope, call]);
+
   const queryKey = (query || '').toLowerCase();
   // 分类判定只依赖 name+description、与筛选无关 → 一次 memo 全量映射；
   // 分类轨道计数固定全量（决策 9），不随来源/权限/搜索联动。
@@ -6794,15 +6849,45 @@ const SkillBoard = ({ call, scope, timer }) => {
     return true;
   });
   const activeCat = cat ? skillCatByKey(cat) : null;
+  // 卡片的安装时间徽标：30 天内相对时间（「3 天前装」，7 天内高亮），更早用绝对日期；
+  // title 悬浮给完整日期。拿不到时间（bundled / runtime 等非磁盘来源）不渲染。
+  const skillTimeOf = (s) => (installInfo.get(s.name)?.installedAt || 0);
+  const skillTimeBadge = (s) => {
+    const at = skillTimeOf(s);
+    if (!at) return null;
+    const days = Math.floor((Date.now() - at) / 86_400_000);
+    const label = days <= 30 ? t('装于 {0}', [fmtLast(at)]) : t('装于 {0}', [wbFormatDate(at)]);
+    return h(Badge, { cls: days <= 7 ? 's-on' : '', title: t('安装于 {0}', [wbFormatDate(at)]) }, label);
+  };
+  // 卡片上的市场原名徽标：只在「账本登记的市场名 ≠ SKILL.md 显示名」时出现——
+  // 名字一致的没有歧义，不值得占一格。
+  const skillMarketBadge = (s) => {
+    const info = installInfo.get(s.name);
+    if (!info?.marketName || info.marketName === s.name) return null;
+    const label = info.marketplace === 'workbuddy-skills' ? t('SkillHub') : (info.marketplace || '');
+    return h(Badge, {
+      title: t('它在市场里叫「{0}」，安装后看板显示的是 SKILL.md 的 name 字段。', [info.marketName])
+        + (label ? ' ' + t('来源：{0}', [label]) : ''),
+    }, t('来自市场 {0}', [info.marketName]));
+  };
+  // 「最近安装」视图行：只留拿得到安装时间的（bundled / runtime 没有落盘时间，不在此列），
+  // 按时间倒序。其余筛选（搜索 / 来源 / 权限 / 分类）照常叠加。
+  const visibleRows = useMemo(() => {
+    if (!recentOnly) return filtered;
+    return filtered.filter((s) => skillTimeOf(s) > 0).sort((a, b) => skillTimeOf(b) - skillTimeOf(a));
+    // eslint 不识别 skillTimeOf 的闭包稳定性；installInfo 变化即重算。
+  }, [filtered, installInfo, recentOnly]);
   // 分类聚簇：网格与列表共用同一套簇序（决策 7：不按来源分组，改按分类聚簇，
   // 簇序 = SKILL_CATS 声明序，未分类垫底，簇内保持注册表顺序）。网格渲染成卡片簇，
   // 列表渲染成一个列表面板 + 分类分割线。选中具体分类时退化为单簇（无聚簇意义）。
   const clustered = useMemo(() => {
+    // 「最近安装」：单簇平铺，簇头当时间线标题用。
+    if (recentOnly) return [{ key: 'recent', cat: SKILL_RECENT_CAT, rows: visibleRows }];
     // 选中具体分类时退化为单簇（网格无聚簇意义，列表也无需一条分割线）。
-    if (activeCat) return [{ key: activeCat.key, cat: activeCat, rows: filtered }];
+    if (activeCat) return [{ key: activeCat.key, cat: activeCat, rows: visibleRows }];
     const order = [...SKILL_CATS.filter((c) => c.key !== 'all').map((c) => c.key), SKILL_UNCAT.key];
     const buckets = new Map(order.map((k) => [k, []]));
-    for (const s of filtered) {
+    for (const s of visibleRows) {
       const key = (catOf.get(s.name) || SKILL_UNCAT).key;
       if (!buckets.has(key)) buckets.set(key, []);
       buckets.get(key).push(s);
@@ -6810,7 +6895,7 @@ const SkillBoard = ({ call, scope, timer }) => {
     return order
       .filter((k) => buckets.get(k).length)
       .map((k) => ({ key: k, cat: k === SKILL_UNCAT.key ? SKILL_UNCAT : skillCatByKey(k), rows: buckets.get(k) }));
-  }, [filtered, catOf, view, activeCat]);
+  }, [visibleRows, catOf, view, activeCat, recentOnly]);
   // 来源统计一次算完（不要在每个 chip 里各 filter 一遍）。
   const sourceCounts = useMemo(() => {
     const map = new Map();
@@ -6915,6 +7000,9 @@ const SkillBoard = ({ call, scope, timer }) => {
 
   const summary = selected ? skills.find((s) => s.name === selected) : null;
   const summaryCat = summary ? (catOf.get(summary.name) || SKILL_UNCAT) : null;
+  // 详情的安装时间 + 市场原名：按 skill 名字从 skillInstallInfo 映射取。
+  const summaryInstall = summary ? installInfo.get(summary.name) : null;
+  const installTime = summaryInstall?.installedAt || 0;
 
   // 网格视图不再占右侧详情栏：有选中就浮成居中弹窗；列表视图仍走右侧栏（决策见 §12）。
   // 注意 view 的取值是 'list' | ''（网格是空串，见 setView(readHashParam('skillview') === 'list' ...)），
@@ -7067,9 +7155,11 @@ const SkillBoard = ({ call, scope, timer }) => {
           ))),
         // 结果行 + 权限/来源 chips + 只读提示：位置保持原样（决策 8）。
         h('div', { className: 'dsh-mcp-skill-result dsh-mcp-item-sub' },
-          h('span', null, (loading && !refreshing) ? t('读取中…') : t('显示 {0} / {1} 个 skill', [filtered.length, skills.length])
-            + (filtered.length !== skills.length ? t('（共 {0}，已筛选）', [skills.length]) : '')),
+          h('span', null, (loading && !refreshing) ? t('读取中…') : t('显示 {0} / {1} 个 skill', [visibleRows.length, skills.length])
+            + (visibleRows.length !== skills.length ? t('（共 {0}，已筛选）', [skills.length]) : '')),
           refreshing ? h('span', null, t(' · 刷新中…')) : null,
+          // 安装时间数据源不可用（旧宿主 / 服务未连接）：不静默，一行说明 + 悬浮全文。
+          installInfoNote ? h('span', { title: installInfoNote }, ' · ' + installInfoNote) : null,
           // OPT-31 · 5.1：把「能做什么、不能做什么」从代码注释提到界面上。
           // 宿主注册表本身只有 listSkills / skillDetail 两个读接口；卸载是本插件补的
           // removeSkill（仅限用户级/项目级目录）。这层边界不写明，用户会把「随包分发 /
@@ -7091,6 +7181,11 @@ const SkillBoard = ({ call, scope, timer }) => {
             title: t('只显示用户可以用 /名字 触发的 skill'),
             onClick: () => setOnlyUser((v) => !v),
           }, t('用户可调用')),
+          h('button', {
+            type: 'button', className: 'dsh-mcp-chip-s' + (recentOnly ? ' on' : ''), 'aria-pressed': recentOnly,
+            title: t('按安装时间倒序平铺；随 DSH 分发、运行时注册的技能没有安装时间，不在此列'),
+            onClick: () => setRecentOnly((v) => !v),
+          }, t('最近安装')),
           [...sourceCounts.entries()].map(([source, count]) => h('button', {
             key: source,
             type: 'button',
@@ -7108,7 +7203,7 @@ const SkillBoard = ({ call, scope, timer }) => {
         ),
         // 主区画布：网格 = 分类聚簇双壳卡片；列表 = 一个列表面板 + 分类分割线。
         h('div', { className: 'dsh-mcp-skill-canvas' },
-          filtered.length === 0 && !loading
+          visibleRows.length === 0 && !loading
             ? emptyBoard
             : (view === 'list'
                 ? h('div', { className: 'dsh-mcp-skill-list', role: 'listbox', 'aria-label': t('skill 列表') },
@@ -7141,6 +7236,7 @@ const SkillBoard = ({ call, scope, timer }) => {
                             // §3.1 来源固定在行内：不再有来源分组头，滚动到中途也要知道这条来自哪里。
                             s.source ? h('span', { className: 'dsh-mcp-skill-src-badge', title: skillSourceLabel(s.source) }, skillSourceLabel(s.source)) : null,
                             s.provider ? h('span', { className: 'dsh-mcp-skill-src' }, s.provider) : null,
+                            skillTimeBadge(s),
                           ),
                           s.description ? h('div', { className: 'dsh-mcp-skill-desc' }, s.description) : null,
                         ),
@@ -7178,7 +7274,9 @@ const SkillBoard = ({ call, scope, timer }) => {
                               : h('div', { className: 'dsh-mcp-skill-desc dsh-mcp-skill-desc-none' }, t('（无描述）')),
                             h('div', { className: 'dsh-mcp-skill-card-foot' },
                               h('span', { className: 'dsh-mcp-skill-cat-tag' }, sCat.name),
-                              h('span', { className: 'dsh-mcp-skill-sub' },
+                              skillTimeBadge(s),
+                              skillMarketBadge(s),
+                              h('div', { className: 'dsh-mcp-skill-sub' },
                                 s.modelInvocable ? h(Badge, { cls: 't-http' }, t('模型可调用')) : null,
                                 s.userInvocable ? h(Badge, { cls: 't-stdio' }, t('用户可调用')) : null,
                               ),
@@ -7265,6 +7363,13 @@ const SkillBoard = ({ call, scope, timer }) => {
               h('span', null, t('来源目录')),
               h('b', null, skillSourceLabel(summary.source) + (summary.provider ? ' · ' + summary.provider : '')),
               summary.path ? [h('span', { key: 'pl' }, t('文件位置')), h('b', { key: 'pv' }, summary.path)] : null,
+              installTime ? [h('span', { key: 'itl' }, t('安装时间')), h('b', { key: 'itv' }, wbFormatDate(installTime))] : null,
+              summaryInstall?.marketName
+                ? [h('span', { key: 'ml' }, t('市场原名')),
+                   h('b', { key: 'mnv' }, summaryInstall.marketName
+                     + (summaryInstall.marketplace
+                       ? ' · ' + (summaryInstall.marketplace === 'workbuddy-skills' ? t('SkillHub') : summaryInstall.marketplace)
+                       : ''))] : null,
             ),
           ),
           h('div', { className: 'dsh-mcp-skill-d-actions' },
@@ -7902,7 +8007,7 @@ const ExpertMarket = ({ call }) => {
   return h('div', null,
     h('div', { className: 'dsh-mcp-wb-toolbar' },
       h(WbSearchBox, {
-        value: query, placeholder: t('搜索专家（花名 / 职业 / 描述 / 标签）'), disabled: loading,
+        value: query, placeholder: t('搜索专家（花名 / 职业 / 描述 / 标签）'), busy: loading,
         onChange: (value) => { setQuery(value); setPage(1); },
       }),
       h('span', { className: 'dsh-mcp-builtin-count' },
@@ -8098,7 +8203,7 @@ const ExpertMarket = ({ call }) => {
                   // stale 团队行：详情弹层里给出直白解释 + 更新入口（同一条召唤链，upsert 整行重写）。
                   // 判定与卡片按钮同源（detailActions 在上方按 expertCardActions 算出）。
                   detailActions.update
-                    ? h('p', { className: 'dsh-mcp-wb-modal-note', style: 'color:var(--dsw-alias-state-warn-primary)' },
+                    ? h('p', { className: 'dsh-mcp-wb-modal-note', style: { color: 'var(--dsw-alias-state-warn-primary)' } },
                         t('⚠ 这条预设是旧版本召唤写入的：人设缺「DSH 运行时适配」桥接段，用它的新会话主理人只会调不存在的 TeamCreate/Agent，成员子智能体开不出来。点下方「更新预设」重跑召唤即可刷新。'))
                     : null,
                 ),
@@ -9850,18 +9955,21 @@ const MarketPulse = ({ state, onJump, onClear }) => {
 // 市场搜索框：左内置放大镜、圆角胶囊、聚焦高亮、右一键清空。
 // 两处复用（连接器 / 插件）：两者都是纯本地过滤，输入即过滤；
 // 技能走服务端搜索，onCommit 由防抖或回车触发（见 WorkBuddyMarket 内注释）。
-const WbSearchBox = ({ value, onChange, placeholder, disabled, onCommit }) =>
-  h('div', { className: 'dsh-mcp-wb-search' },
+// busy 只做视觉提示，**绝不 disabled 输入框**：disabled 会让浏览器立刻收走焦点，
+// 技能搜索防抖生效那一刻（含按 Delete 删字后的停顿）输入框被禁用 → 光标丢失，
+// 用户得重新点一次才能继续输入。加载态改由放大镜呼吸动画表达（见 .busy CSS）。
+const WbSearchBox = ({ value, onChange, placeholder, busy, onCommit }) =>
+  h('div', { className: 'dsh-mcp-wb-search' + (busy ? ' busy' : '') },
     h('span', { className: 'dsh-mcp-wb-search-ico', 'aria-hidden': true }, h(Icon, { d: ICONS.search, size: 14 })),
     h('input', {
       type: 'search', className: 'dsh-mcp-wb-search-input', placeholder,
-      value, disabled, spellCheck: false,
+      value, spellCheck: false, 'aria-busy': busy || undefined,
       onChange: (e) => onChange(e.target.value),
       onKeyDown: onCommit
         ? (e) => { if (e.key === 'Enter') { e.preventDefault(); onCommit(); } }
         : undefined,
     }),
-    value && !disabled
+    value
       ? h('button', {
           type: 'button', className: 'dsh-mcp-wb-search-clear', title: t('清空'),
           'aria-label': t('清空搜索'),
@@ -9918,7 +10026,9 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
   const [skillLoading, setSkillLoading] = useState(true);
   const [skillError, setSkillError] = useState('');
   const [skillDetail, setSkillDetail] = useState(null);
-  const [installedSkills, setInstalledSkills] = useState(new Set());
+  // 已安装集合：键是 namespace/slug 双键 → 值是安装时间（毫秒，0 = 取不到）。Map 上的
+  // has() 与 Set 同用法，所有既有判定点不变；get() 供「安装于 …」徽标取时间。
+  const [installedSkills, setInstalledSkills] = useState(new Map());
   // §6.3 已安装筛选：SkillHub 每页 20 条远程分页，而「已装」是本地集合，
   // 所以这层过滤只能作用于**当前页**——必须在标签上写清，否则会被误读成全库筛选。
   // T04/R7：令牌弹窗。连接器 mcp.json 里带 ${...} 占位符时要先让用户填值——
@@ -9935,6 +10045,12 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
   const authDialogRefNode = useRef(null);
   useFocusTrap(authDialogRefNode, !!authDialog);
   const [skillOnlyInstalled, setSkillOnlyInstalled] = useState(false);
+  // 「已安装」集合的键是 namespace/slug 双键，不是 slug 单键：SkillHub 上同 slug 不同
+  // namespace 的技能一大把（find-skills 实测三家在架）。单键会让没装过的同名卡片假显示
+  // 「已安装」，在假卡片上点卸载又必撞「本机没有这个市场技能的安装记录」——用户报的
+  // 「假安装」截图正是这一对症状。wbSkillInstalled 行的 namespace/slug 从目录名解析
+  // （与安装时同一套 sanitize 口径），与卡片两字段天然一一对应。
+  const skillInstalledKey = (row) => row.namespace + '/' + row.slug;
   // OPT-21：两个详情弹层此前都没有 ref（焦点陷阱需要容器节点）。
   const connectorDetailRef = useRef(null);
   const skillDetailRef = useRef(null);
@@ -9944,7 +10060,7 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
 
   const loadInstalled = useCallback(async () => {
     const res = await call('wbSkillInstalled');
-    if (res?.ok) setInstalledSkills(new Set((res.installed || []).map((row) => row.slug)));
+    if (res?.ok) setInstalledSkills(new Map((res.installed || []).map((row) => [skillInstalledKey(row), Math.max(0, Number(row.installedAt) || 0)])));
   }, [call]);
 
   // T04/R8：安装状态账本（三类安装的统一登记，宿主 ~/.dsh/armory/install-state.json）。
@@ -10130,7 +10246,27 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
     setBusy(true); setBusyLabel(t('正在启动授权…'));
     try {
       const res = await call('wbOAuthBegin', { connectorId: item.id, serverName });
-      if (!res?.ok) throw new Error(res?.error || t('无法启动授权流程'));
+      if (!res?.ok) {
+        // 授权页这条路走不通（服务器不做 OAuth 发现、动态注册被拒、要求客户端认证）时，
+        // 不能只甩一行红字就把用户关在门外：手填令牌那条兜底路还在，把弹层开出来摊给他。
+        if (res?.manualTokenOnly) {
+          setAuthDialog({
+            item,
+            serverName: res.serverName || serverName || item.name,
+            sessionId: '',
+            authorizeUrl: '',
+            mode: 'manual-token',
+            redirectUri: '',
+            hint: '',
+            status: 'manual',
+            error: res.error || t('该服务器无法自动打开授权页。'),
+            callbackUrl: '',
+            manualToken: '',
+          });
+          return;
+        }
+        throw new Error(res?.error || t('无法启动授权流程'));
+      }
       setAuthDialog({
         item,
         serverName: res.serverName || serverName || item.name,
@@ -10144,6 +10280,16 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
         callbackUrl: '',
         manualToken: '',
       });
+      // 宿主第一条打开通路（shell / rundll32）失败时立即补一发 wbOAuthOpen 再试一次：
+      // 多数失败是瞬时抖动，同一 URL 重开往往就成功了；补开成功就撤掉"没能唤起浏览器"
+      // 的提示回到纯等待态，仍失败则弹层里的链接与「重新打开浏览器」按钮还在。
+      if (!res.opened && res.authorizeUrl) {
+        call('wbOAuthOpen', { url: res.authorizeUrl }).then((openRes) => {
+          if (openRes?.opened && authDialogRef.current?.sessionId === res.sessionId) {
+            setAuthDialog((cur) => (cur && cur.sessionId === res.sessionId ? { ...cur, error: '' } : cur));
+          }
+        }).catch(() => {});
+      }
       if (res.sessionId) {
         stopAuthPoll();
         authPollRef.current = setTimeout(() => { pollAuthOnce(res.sessionId); }, 1200);
@@ -10238,7 +10384,16 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
     }
     installConnector(item);
   };
+  const skillInstallInFlight = useRef(new Set());
   const installSkill = async (skill) => {
+    // 同一技能的上一次安装还在飞时直接挡回：宿主侧已有按目录的互斥锁兜底串行，
+    // 这里再挡一层是为了不给用户制造「点了两次、两次都报成功」的错觉。
+    const flightKey = skillInstalledKey(skill);
+    if (skillInstallInFlight.current.has(flightKey)) {
+      setNote(t('该技能正在安装中，请等当前任务结束'));
+      return;
+    }
+    skillInstallInFlight.current.add(flightKey);
     setBusy(true); setBusyLabel(t('正在下载并校验 {0}…', [skill.name])); setError('');
     try {
       const res = await call('wbSkillInstall', { slug: skill.slug, namespace: skill.namespace, name: skill.name });
@@ -10253,6 +10408,7 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
     } catch (e) {
       setError(String(e?.message || e));
     } finally {
+      skillInstallInFlight.current.delete(flightKey);
       setBusy(false); setBusyLabel('');
     }
   };
@@ -10543,11 +10699,11 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
   };
 
   const connectorSearch = h(WbSearchBox, {
-    value: connectorQuery, placeholder: t('搜索连接器（名称 / 说明 / ID）'), disabled: loading,
+    value: connectorQuery, placeholder: t('搜索连接器（名称 / 说明 / ID）'), busy: loading,
     onChange: (value) => { setConnectorQuery(value); setConnectorPage(1); },
   });
   const skillSearch = h(WbSearchBox, {
-    value: skillKeywordInput, placeholder: t('搜索 SkillHub 技能（19 万+）'), disabled: skillLoading,
+    value: skillKeywordInput, placeholder: t('搜索 SkillHub 技能（19 万+）'), busy: skillLoading,
     onChange: (value) => setSkillKeywordInput(value),
     // 回车跳过防抖立即生效（防抖本身也会触发，双保险但幂等）。
     onCommit: () => { setSkillPage(1); setSkillKeyword(skillKeywordInput); },
@@ -10561,9 +10717,9 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
   // 已安装状态只在本地知道，所以这层过滤只作用于本页——计数文案里写清楚，
   // 免得用户以为「只看已安装」能翻遍全库。
   const shownSkills = skillOnlyInstalled
-    ? skills.filter((skill) => installedSkills.has(skill.slug))
+    ? skills.filter((skill) => installedSkills.has(skillInstalledKey(skill)))
     : skills;
-  const installedOnPage = skills.filter((skill) => installedSkills.has(skill.slug)).length;
+  const installedOnPage = skills.filter((skill) => installedSkills.has(skillInstalledKey(skill))).length;
 
   // §6.1 子页签：原来用与顶栏 `.dsh-mcp-cat` 同款的胶囊按钮，两排长得一样，
   // 用户分不清「换整页」还是「换市场内部子页」。改成下划线式页签 + 面包屑，
@@ -10619,7 +10775,7 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
       ? h('div', { className: 'dsh-mcp-wb-toolbar' },
           connectorSearch,
           h('label', { className: 'dsh-mcp-check', title: t('默认只显示可直接安装的条目；取消勾选可看到「仅展示」的不兼容条目') },
-            h('input', { type: 'checkbox', checked: connectorOnlyReady, disabled: loading, onChange: (e) => { setConnectorOnlyReady(e.target.checked); setConnectorPage(1); } }),
+            h('input', { type: 'checkbox', checked: connectorOnlyReady, onChange: (e) => { setConnectorOnlyReady(e.target.checked); setConnectorPage(1); } }),
             t('只看可直接安装')),
           // T04/R8：已安装筛选是全量本地筛选（跨页生效），不随分页变化。
           h('label', { className: 'dsh-mcp-check', title: t('在全量 {0} 条目录里筛出已安装的连接器（跨页生效，与技能侧「仅本页」不同）', [connectors.length]) },
@@ -10681,12 +10837,12 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
           ? h('div', { className: 'dsh-mcp-wb-toolbar' },
               skillSearch,
             h('select', {
-              className: 'dsh-mcp-input dsh-mcp-wb-sort', value: skillSort, disabled: skillLoading,
+              className: 'dsh-mcp-input dsh-mcp-wb-sort', value: skillSort,
               title: t('SkillHub 已不再提供全站下载量排序；这一项只在当前页内按下载量排序。'),
               onChange: (e) => { setSkillSort(e.target.value); setSkillPage(1); },
             }, WB_SKILLHUB_SORTS.map((option) => h('option', { key: option.key, value: option.key }, option.label))),
             h('label', { className: 'dsh-mcp-check', title: t('仅在本页 {0} 条里筛出已安装的（SkillHub 是远程分页，无法跨页筛选）', [skills.length]) },
-              h('input', { type: 'checkbox', checked: skillOnlyInstalled, disabled: skillLoading, onChange: (e) => setSkillOnlyInstalled(e.target.checked) }),
+              h('input', { type: 'checkbox', checked: skillOnlyInstalled, onChange: (e) => setSkillOnlyInstalled(e.target.checked) }),
               t('只看已安装')),
             skillOnlyInstalled
               ? h('span', { className: 'dsh-mcp-builtin-count' }, t('本页已安装 {0} / {1}', [installedOnPage, skills.length]))
@@ -10808,7 +10964,11 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
     tab === 'skill' && shownSkills.length
       ? h('div', { className: 'dsh-mcp-wb-grid' },
           shownSkills.map((skill) => {
-            const installed = installedSkills.has(skill.slug);
+            const installedKey = skillInstalledKey(skill);
+            const installed = installedSkills.has(installedKey);
+            // 安装时间：wbSkillInstalled 行自带（账本首次安装时间，无账本回落目录创建时间）。
+            const installedAt = installedSkills.get(installedKey) || 0;
+            const installedLabel = installedAt ? t('安装于 {0}', [wbFormatDate(installedAt)]) : '';
             return h('div', { key: skill.namespace + '/' + skill.slug, className: 'dsh-mcp-card wb' },
               h('div', { className: 'dsh-mcp-card-top' },
                 h('div', { className: 'dsh-mcp-card-person' },
@@ -10822,7 +10982,7 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
                     h('div', { className: 'dsh-mcp-card-vendor' }, skill.canonical || skill.namespace),
                   ),
                 ),
-                installed ? h(Badge, { cls: 's-on' }, t('已安装')) : null,
+                installed ? h(Badge, { cls: 's-on', title: installedLabel || undefined }, t('已安装')) : null,
               ),
               h('div', { className: 'dsh-mcp-card-summary' }, skill.description || skill.name),
               h(PresenceLine, {
@@ -10839,6 +10999,7 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
                 skill.verified ? h(Badge, { cls: 's-on' }, t('认证')) : null,
                 skill.version ? h(Badge, null, 'v' + skill.version) : null,
                 wbFormatDate(skill.updatedAt) ? h(Badge, null, wbFormatDate(skill.updatedAt)) : null,
+                installed && installedAt ? h(Badge, null, installedLabel) : null,
               ),
               h('div', { className: 'dsh-mcp-wb-card-actions' },
                 h('button', { type: 'button', className: 'dsh-mcp-btn', onClick: () => openSkillDetail(skill) }, t('详情')),
@@ -11042,9 +11203,11 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
             h('p', { className: 'dsh-mcp-wb-modal-note', role: 'note' },
               authDialog.status === 'authorized'
                 ? t('{0}：授权成功，正在完成安装…', [authDialog.item?.name || authDialog.serverName])
-                : t('该连接器要求在浏览器里完成一次登录授权。授权页会尝试自动打开；授权完成后这里会自动继续，无需手动刷新。')),
+                : authDialog.mode === 'manual-token'
+                  ? t('该服务器没有提供标准 OAuth 授权发现，无法自动打开授权页。如果你已经从服务方拿到访问令牌，粘贴在下面即可安装。')
+                  : t('该连接器要求在浏览器里完成一次登录授权。授权页会尝试自动打开；授权完成后这里会自动继续，无需手动刷新。')),
             authDialog.error
-              ? h('p', { className: 'dsh-mcp-wb-modal-note', role: 'alert', style: 'color:var(--dsw-alias-state-warn-primary)' }, authDialog.error)
+              ? h('p', { className: 'dsh-mcp-wb-modal-note', role: 'alert', style: { color: 'var(--dsw-alias-state-warn-primary)' } }, authDialog.error)
               : null,
             authDialog.authorizeUrl
               ? h('label', { className: 'dsh-mcp-wb-tokenfield' },
@@ -11187,6 +11350,8 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
                     skillDetail.version ? h(Badge, null, 'v' + skillDetail.version) : null,
                     skillDetail.publisher ? h(Badge, null, skillDetail.publisher + (skillDetail.verifiedPublisher ? t('（已认证）') : '')) : null,
                     skillDetail.certifiedName ? h(Badge, { cls: 's-on' }, skillDetail.certifiedName) : null,
+                    (installedSkills.get(skillInstalledKey(skillDetail)) || 0)
+                      ? h(Badge, { cls: 's-on' }, t('安装于 {0}', [wbFormatDate(installedSkills.get(skillInstalledKey(skillDetail)))])) : null,
                     skillDetail.createdAt ? h(Badge, null, t('加入时间 {0}', [wbFormatDate(skillDetail.createdAt)])) : null,
                     skillDetail.updatedAt ? h(Badge, null, t('更新于 {0}', [relativeLabel(skillDetail.updatedAt)])) : null,
                     Array.isArray(skillDetail.security) ? skillDetail.security.map((status, index) => h(Badge, { key: index, cls: status === 'benign' ? 's-on' : '' }, t('安全: ') + status)) : null,
@@ -11197,7 +11362,7 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
                 ),
             h('div', { className: 'dsh-mcp-modal-actions' },
               h(Btn, { onClick: () => setSkillDetail(null), disabled: busy, children: t('关闭') }),
-              installedSkills.has(skillDetail.slug)
+              installedSkills.has(skillInstalledKey(skillDetail))
                 ? h(Btn, { danger: true, icon: 'trash', disabled: busy, onClick: () => uninstallSkill(skillDetail), children: t('卸载') })
                 : h(Btn, { primary: true, icon: 'plus', disabled: busy || skillDetail.loading, onClick: () => installSkill(skillDetail), children: busy ? t('安装中…') : t('安装') }),
             ),
@@ -12300,6 +12465,7 @@ const MCP_CONTRIBUTION = {
     { id: 'dsh-armory#mcpManager/skillDetail', service: 'mcpManager', namespace: 'mcpManager', method: 'skillDetail', invocation: { kind: 'direct' }, parameters: [mcpParam('payload', 'ImportPayload')], result: mcpCodec('SkillDetailResult') },
     { id: 'dsh-armory#mcpManager/revealSkill', service: 'mcpManager', namespace: 'mcpManager', method: 'revealSkill', invocation: { kind: 'direct' }, parameters: [mcpParam('payload', 'ImportPayload')], result: mcpCodec('NoteResult') },
     { id: 'dsh-armory#mcpManager/removeSkill', service: 'mcpManager', namespace: 'mcpManager', method: 'removeSkill', invocation: { kind: 'direct' }, parameters: [mcpParam('payload', 'ImportPayload')], result: mcpCodec('NoteResult') },
+    { id: 'dsh-armory#mcpManager/skillInstallInfo', service: 'mcpManager', namespace: 'mcpManager', method: 'skillInstallInfo', invocation: { kind: 'direct' }, parameters: [mcpParam('payload', 'ImportPayload')], result: mcpCodec('SkillInstallInfoResult') },
     // 自定义套件：读全量集合 / 整集合覆盖保存（与 typert.js、lib/index.js 三处同步，
     // 漏一处这条通道恒 404 —— toolTailor、installInfo 各踩过一次）。
     { id: 'dsh-armory#mcpManager/listSkillSuites', service: 'mcpManager', namespace: 'mcpManager', method: 'listSkillSuites', invocation: { kind: 'direct' }, parameters: [], result: mcpCodec('SkillSuiteListResult') },