dsh-armory 2.4.0 → 2.4.1

package/README.en.md

@@ -5,7 +5,7 @@
 > **The all-in-one control board for DeepSeek Harness**: MCP servers · skills · experts · plugins · tool-usage ledger · four markets — browse, search, install and summon in one place.
 > Forked from [Imzl-zl/dsh-mcp-manager-ui](https://github.com/Imzl-zl/dsh-mcp-manager-ui) (MIT) and extended into a full armory.
 >
-> **New in v2.3.2**: fixed a whole-panel crash when installing an OAuth connector (a string style in the authorization dialog triggered React error #62); a failed browser open is now retried automatically. See the [changelog](.github/release-notes/v2.3.2.md).
+> **New in v2.4.1**: SkillHub skill details now show the real name and full summary, "Source homepage" opens the public skill page instead of the 405 API endpoint, and the floating button can be hidden (it also steps aside while the board is open) — issue #4. See the [changelog](.github/release-notes/v2.4.1.md).
 
 <p align="center">
   <a href="https://github.com/2026heshao/dsh-armory/stargazers"><img src="https://img.shields.io/github/stars/2026heshao/dsh-armory?style=social" alt="stars"></a>
@@ -34,6 +34,7 @@ Restart DSH, then open **Skills · MCP · Experts** from the global panel list a
 |---|---|
 | MCP config means hand-editing YAML with no feedback on whether it connects | Visual panel: status, tool schemas, enable/disable, reconnect — global & per-project scopes, project changes apply to live sessions instantly |
 | Installing skills means hunting for `SKILL.md` repos everywhere | **Direct markets**: SkillHub (190k+ skills), WorkBuddy connectors (316) — search, filter, one-click install with per-file sha256 verification |
+| You install a skill from the market, then cannot find it on the board or tell which one is new | **Recognisable installs**: cards show "installed …" with a 7-day highlight and relative time; the filter bar lays skills out newest-first as a "recently installed" timeline; when the board name differs from the market name, the original is shown |
 | Every MCP's tool descriptions eat context tokens; zero-use tools sit there for free | **Tool Tailor**: scans local session logs for per-tool call counts / errors / latency, plus a skill-level usage ledger; prune dead tools with one click |
 | Migrating from Claude/Cursor/VS Code means copying config by hand | Detects local configs from 11 clients and imports them with a preview |
 | OAuth-protected or key-protected servers and plugins just fail, with no hint why | **Plugin market** (the DSH community list) with per-entry installability, **one-click MCP OAuth** (RFC 9728 → 8414 → 7591 → 7636 PKCE → 8707, three callback fallbacks ending at "paste a token"), and a **credential prompt before install** that fills `${...}` placeholders so the server works on first connect |
@@ -134,6 +135,7 @@ Experts (WorkBuddy expert center, 429 experts / 15 industries; category filter +
 - **Skill board categories (new in 2.0.0)**: skills are grouped into **dev / design & creation / docs & office / productivity & automation / ops / uncategorised**, with grid and list views, a category filter and a persistent "showing N/M skills" line. Details add the category, source directory and file location, with one-click "copy SKILL.md path" and "copy @session reference"
 - **Skill uninstall (new in 2.2.0)**: skills in user-level / project-level directories can be deleted from the detail pane (inline second confirmation, **permanent, no undo**), while skills shipped with DSH, registered at runtime, or living in custom directories stay read-only and say so. The host only exposes read endpoints, so removal is handled by this plugin's `removeSkill`: source allowlist → strict root containment → parent-directory realpath → symlinks unlinked without touching their targets → the folder must contain `SKILL.md` and stay under the root
 - **Live skill-set refresh (new in 2.2.0)**: installing or uninstalling from the market, and uninstalling from the board, all broadcast on a module-level change bus. The top **Skill** badge and the board list subscribe to the same bus and re-read the truth, with a sequence guard on the badge fetch so rapid toggles cannot roll the number back. The new set is reflected immediately — no tab switch or panel reopen
+- **Recognisable skill installs (new in 2.4.0)**: every Skill card / list row shows an "installed …" badge — green with relative time within 7 days ("installed 3 hours ago"), "N days ago" within 30 days, an absolute date beyond. The timestamp prefers the first-install time recorded in the install-state ledger, then the directory creation time, then its mtime; skills shipped with DSH or registered at runtime have no install event and show no badge. The filter bar adds a **recently installed** timeline (newest first), and when a board name (from `SKILL.md`'s `name:`) differs from the market name recorded in the ledger, the card carries a "from market: original name" badge and the detail pane adds an original-name row. Data comes from the new `skillInstallInfo` RPC (the host scans the standard skill roots and reads only the first 4KB of each `SKILL.md`); the host must be restarted once to register it, and the board says so explicitly instead of showing nothing
 - **Custom suites (new in 2.2.0)**: bundle skills you use together. The **Suites** button in the Skill board toolbar opens a manager: pick skills on the left, arrange them on the right (click **+** or drag one in, drag to reorder, delete with an inline confirmation), and one save overwrites the whole set into `~/.dsh/armory/suites.json` (staging + atomic rename; invalid input is rejected without touching the file). The composer's Skills submenu shows a suite group at the top — one click expands the suite in member order into multiple `/name` tokens in the draft. Limits: 100 suites, 40 members each; members count individually toward "recently used" rather than the suite name
 - **Marketplace registry (new in 2.0.0)**: market sources are no longer hard-coded — they live in `~/.dsh/armory/marketplaces.json` (`REGISTRY_VERSION = 1`), fall back to the built-in defaults when missing or corrupt, persist on first read, and can be added / edited / removed. Writes are staging + atomic rename
 - **Instant community list (new in 2.0.0)**: the last successful slim list is mirrored into `localStorage` (7 days / 4MB cap, older snapshot kept on quota errors), so the first paint renders the snapshot before the real result silently replaces it (zero network, zero IPC). When no source is reachable it says "showing the local cache" instead of an empty list

package/README.md

@@ -5,7 +5,7 @@
 > **DeepSeek Harness 的一体化管理看板**：MCP · 技能 · 专家 · 插件 · 工具账本 · 四大市场，浏览、搜索、一键安装、一键召唤。
 > fork 自 [Imzl-zl/dsh-mcp-manager-ui](https://github.com/Imzl-zl/dsh-mcp-manager-ui)（MIT），现已扩展为完整军械库。
 >
-> **最新 v2.3.2**：修复安装需 OAuth 连接器时的整面板崩溃（授权弹窗 style 字符串触发 React #62），浏览器打开失败会自动重试唤起。详见 [更新日志](.github/release-notes/v2.3.2.md)。
+> **最新 v2.4.1**：修复 SkillHub 技能详情空白、标题退化成 slug、来源主页指向 405 接口，以及悬浮按钮无法隐藏并遮挡看板（issue #4）。详见 [更新日志](.github/release-notes/v2.4.1.md)。
 
 <p align="center">
   <a href="https://github.com/2026heshao/dsh-armory/stargazers"><img src="https://img.shields.io/github/stars/2026heshao/dsh-armory?style=social" alt="stars"></a>
@@ -34,6 +34,7 @@ dsh plugin --profile web add github:2026heshao/dsh-armory
 |---|---|
 | MCP 配置要手改 YAML，改完不知道连没连上 | 可视化面板：状态、工具 Schema、启停、重连，全局与项目双作用域，项目级改完即对存活会话生效 |
 | 装技能要去各处翻 `SKILL.md` 仓库 | **市场直连**：SkillHub 19 万+ 技能、WorkBuddy 316 个连接器，搜索/筛选/一键安装，逐文件 sha256 校验 |
+| 在市场装了技能，回看板却找不到，也分不清哪个是刚装的 | **技能安装可辨识**：卡片标「装于 …」，7 天内高亮并给相对时间；筛选条按安装时间倒序成「最近安装」；看板名与市场原名不一致时标出「来自市场 原名」 |
 | 每个 MCP 的工具描述都在吃上下文 token，零调用的工具白白占位 | **工具裁缝**：扫描本机会话日志统计每个工具的调用/错误/延迟，并给出技能维度的使用账本；死工具清单一键禁用 |
 | 从 Claude/Cursor/VS Code 迁移要逐条抄配置 | 自动检出 11 种客户端的本机配置，预览后一键导入 |
 | 插件散在宿主自带与社区清单两处，格式与可装性各不相同 | **插件页**：把 DSH 社区清单一并呈现并标明可装性（宿主自带组件单独标注），安装统一走宿主 `pluginManager`，装完明确提示需重启 |
@@ -125,6 +126,7 @@ dsh plugin --profile web add github:2026heshao/dsh-armory
 - **技能看板分类（2.0.0 新增）**：技能按 **编程开发 / 设计与创作 / 文档办公 / 效率与自动化 / 开发运维 / 未分类** 六类归置，网格与列表双视图可切、可按分类过滤，常驻「显示 N / M 个 skill」；详情新增所属分类、来源目录、文件位置，可一键「复制 SKILL.md 路径」「复制 @会话引用」
 - **技能卸载（2.2.0 新增）**：用户级 / 项目级目录里的 skill 可在详情里直接卸载（就地二次确认、**永久删除且不可撤销**）；随 DSH 分发、运行时注册与自定义目录的 skill 只读，并说明不在可卸载范围内。宿主本身只提供读取接口，卸载由本插件的 `removeSkill` 完成：来源白名单 → 根目录严格包含性 → 父目录 realpath → 符号链接只 unlink 不碰目标 → 目录必须含 `SKILL.md` 且在根内
 - **技能集合实时刷新（2.2.0 新增）**：市场安装 / 卸载技能、看板自己卸载，三处都会向模块级变更总线广播；顶部 **Skill** 数量角标与看板列表订阅同一条总线，各自重读真值，角标重取带序号守卫，快速连点也不会被乱序回包回滚。装完 / 卸完立刻对新集合，不必切页或重开面板
+- **技能安装可辨识（2.4.0 新增）**：Skill 看板每张卡片 / 列表行显示「装于 …」——7 天内绿色高亮并给相对时间（「3 小时前装」），30 天内显示「N 天前装」，更早给绝对日期。时间优先取安装状态账本登记的首次安装时间，其次目录创建时间，最后目录修改时间；随 DSH 分发 / 运行时注册的技能没有安装事件，不显示徽标。筛选条新增「最近安装」时间线，按安装时间倒序平铺；看板名（取自 `SKILL.md` 的 `name:`）与账本登记的市场名不一致时，卡片出现「来自市场 原名」徽标，详情面板新增「市场原名」行。数据由新增 RPC `skillInstallInfo` 提供（宿主自扫标准技能根目录、只读每个 `SKILL.md` 头部 4KB 解析 `name:`），宿主需重启一次才注册；未注册时看板显式提示，不静默
 - **自定义套件（2.2.0 新增）**：把常一起用的 skill 打包成「套件」——Skill 看板工具栏的「套件」打开管理窗，左侧挑技能、右侧编排（点 **+** 或拖入添加，拖拽排序，删除就地二次确认），一次保存即整集合覆盖落盘到 `~/.dsh/armory/suites.json`（staging + rename 原子写，坏数据拒绝且原文件不动）。输入框召唤菜单的「技能」子菜单顶部会出现套件分组，点一次就按成员顺序把多个 `/name` 一并插进草稿。上限 100 个套件 / 每套 40 个成员；成员按各自的技能名进「最近使用」，不会把套件名记成一条孤立记录
 - **多市场注册表（2.0.0 新增）**：市场源不再硬编码，落 `~/.dsh/armory/marketplaces.json`（`REGISTRY_VERSION = 1`），缺失或损坏回落内置默认项、首读即落盘，支持增删改；写盘一律 staging + rename 原子替换
 - **社区目录秒开（2.0.0 新增）**：上次成功的精简清单镜像进浏览器 `localStorage`（7 天 / 4MB 上限，超配额保留旧快照），首屏先渲染快照再被真实结果静默替换（0 网络 0 IPC）；源不可达时明说「显示的是本地缓存」而非给空列表

package/lib/client.js

@@ -221,6 +221,7 @@ const EN_US_MESSAGES = {
  "仅在本页 {0} 条里筛出已安装的（SkillHub 是远程分页，无法跨页筛选）": "Filters installed ones within this page's {0} entries only (SkillHub pages remotely; cross-page filtering isn't possible)",
  "仅展示": "Display only",
  "仅悬浮按钮": "Floating button only",
+ "悬浮按钮设置": "Floating button settings",
  "从左侧列表点选一台服务器，可以查看它的连接信息、参数与工具清单。": "Pick a server from the list on the left to view its connection info, parameters and tool list.",
  "从左侧选择一个 skill 查看详情": "Pick a skill on the left to see details",
  "从未": "Never",
@@ -246,6 +247,7 @@ const EN_US_MESSAGES = {
  "全局配置": "Global config",
  "全局配置（在「全局」标签页可编辑）": "Global config (editable on the 'Global' tab)",
  "全局面板 + 悬浮按钮（推荐）": "Global panel + floating button (recommended)",
+ "全局面板 + 侧栏底部入口（无悬浮按钮）": "Global panel + sidebar bottom entry (no floating button)",
  "全部": "All",
  "全部传输": "All transports",
  "全部状态": "All states",
@@ -492,7 +494,7 @@ const EN_US_MESSAGES = {
  "技能 / MCP / 专家 快速调用": "Skills / MCPs / Experts quick invoke",
  "技能 · MCP · 专家": "Skills · MCPs · Experts",
  "技能 · MCP · 专家看板": "Skills · MCPs · Experts board",
- "技能 · MCP · 专家看板（可拖拽移动）": "Skills · MCPs · Experts board (draggable)",
+ "技能 · MCP · 专家看板（拖拽移动，右键或长按隐藏）": "Skills · MCPs · Experts board (drag to move; right-click or long-press to hide)",
  "技能·专家": "Skills·Experts",
  "技能按需触发：选择后以 /技能名 插入输入框": "Skills trigger on demand: picking inserts /skill-name into the input box",
  "技能来自 SkillHub 公开 API，可能还没同步下来。": "Skills come from the public SkillHub API and may not have synced yet.",
@@ -749,6 +751,9 @@ const EN_US_MESSAGES = {
  "随 DSH 分发": "Ships with DSH",
  "隐藏 ": "Hide ",
  "隐藏原值：": "Hide value: ",
+ "隐藏悬浮按钮": "Hide floating button",
+ "这是当前唯一入口；先到面板「入口」菜单切换模式。": "This is the only entry right now; switch modes in the panel's \"Entries\" menu first.",
+ "悬浮按钮已隐藏，可从左上角「大肥鱼军械库」或面板「入口」菜单重新打开。": "Floating button hidden. Reopen it from \"Big Fish Armory\" (top-left) or the panel's \"Entries\" menu.",
  "零调用": "Zero-call",
  "零调用工具": "Zero-call tools",
  "零调用的 MCP 工具 · 点击下钻": "Zero-call MCP tools · click to drill down",
@@ -2056,6 +2061,11 @@ body[data-ds-dark-theme]{--mcp-cat-dev:var(--dsw-static-deepseek-400);--mcp-cat-
 .dsh-mcp-fab:hover{transform:scale(1.05);background:var(--dsw-alias-button-primary-hover)}
 .dsh-mcp-fab:active{transform:scale(.97)}
 .dsh-mcp-fab svg{width:22px;height:22px}
+.dsh-mcp-tab-pop.dsh-mcp-fab-menu{position:fixed;right:auto;min-width:196px;max-width:240px;z-index:191}
+.dsh-mcp-fab-menu-item:disabled{opacity:.55;cursor:not-allowed}
+.dsh-mcp-fab-menu-item:disabled:hover{background:transparent}
+.dsh-mcp-fab-menu-note{margin:4px 6px 2px;color:var(--mcp-mut);font-size:11px;line-height:1.5}
+.dsh-mcp-fab-hint{position:fixed;left:50%;bottom:22px;transform:translateX(-50%);z-index:191;max-width:min(440px,82vw);padding:9px 14px;border-radius:999px;background:var(--mcp-bg-2);color:var(--dsw-alias-label-primary);box-shadow:var(--dsw-elevation-panel);font-size:12px;line-height:1.5;text-align:center;pointer-events:none}
 .dsh-mcp-panel-overlay{position:fixed;inset:0;background:var(--dsw-alias-bg-overlay);display:flex;align-items:center;justify-content:center;z-index:180;padding:26px;pointer-events:auto;animation:mcpFade .14s ease-out}
 .dsh-mcp-panel{box-sizing:border-box;width:1000px;max-width:95vw;height:88vh;background:var(--mcp-bg-2);border:0;border-radius:var(--mcp-r-panel);box-shadow:var(--dsw-elevation-prominent);display:flex;flex-direction:column;overflow:hidden;animation:mcpPop .18s cubic-bezier(.2,.9,.3,1.15)}
 .dsh-mcp-panel .dsh-mcp-wrap{height:100%;min-height:0;padding:18px}
@@ -5228,6 +5238,8 @@ const McpTab = (props) => {
 //   left/top 重绘成本可忽略，故保留 left/top 定位以复用现有 :hover/:active 的 transform 缩放反馈。
 const FAB_POS_KEY = 'dsh-armory/fab-pos';
 const DRAG_THRESHOLD = 5;
+// 触屏 / 手写笔长按多久叫出隐藏菜单：与常见长按菜单同一量级，短于拖动判定的误触窗口。
+const FAB_MENU_PRESS_MS = 520;
 
 function fabViewport() {
   const w = typeof window !== 'undefined' ? window.innerWidth : 0;
@@ -5278,6 +5290,9 @@ const ENTRY_KEY = 'dsh-armory/entry';
 const ENTRY_VISIBILITY = {
   both: { panel: true, fab: true, sidebar: false },
   panel: { panel: true, fab: false, sidebar: false },
+  // 「隐藏悬浮按钮」要保留另外两个入口：两种「面板 + 侧栏」组合各有一档，
+  // 否则从 all 隐藏后会连带丢掉侧栏底部入口（issue #4）。
+  panelSidebar: { panel: true, fab: false, sidebar: true },
   fab: { panel: false, fab: true, sidebar: false },
   sidebar: { panel: false, fab: false, sidebar: true },
   all: { panel: true, fab: true, sidebar: true },
@@ -5287,6 +5302,7 @@ const ENTRY_VISIBILITY = {
 const ENTRY_LABELS = {
   get both() { return t('全局面板 + 悬浮按钮（推荐）'); },
   get panel() { return t('仅全局面板（左上角，"插件"旁）'); },
+  get panelSidebar() { return t('全局面板 + 侧栏底部入口（无悬浮按钮）'); },
   get fab() { return t('仅悬浮按钮'); },
   get sidebar() { return t('仅侧栏底部入口'); },
   get all() { return t('三个入口全开'); },
@@ -5299,6 +5315,18 @@ const ENTRY_MODES = Object.keys(ENTRY_VISIBILITY);
 function normalizeEntryMode(value) {
   return Object.prototype.hasOwnProperty.call(ENTRY_VISIBILITY, value) ? value : ENTRY_DEFAULT;
 }
+// 「隐藏悬浮按钮」= 换成同一组其它席位不变的档位，而不是直接写 fab:false。
+// 表里没有对应档位（仅悬浮按钮是唯一入口）时原样返回，调用方据此禁用隐藏项，
+// 「三个入口全关」因此仍然无法表达。
+function entryModeWithoutFab(mode) {
+  const current = normalizeEntryMode(mode);
+  if (!ENTRY_VISIBILITY[current].fab) return current;
+  const target = ENTRY_MODES.find((value) => {
+    const visibility = ENTRY_VISIBILITY[value];
+    return !visibility.fab && visibility.panel === ENTRY_VISIBILITY[current].panel && visibility.sidebar === ENTRY_VISIBILITY[current].sidebar;
+  });
+  return target || current;
+}
 function readEntryMode() {
   try {
     if (typeof localStorage === 'undefined') return ENTRY_DEFAULT;
@@ -5358,6 +5386,12 @@ function overlaySeats(mode) {
 // 两个 id 必须是同一个字符串：侧栏行点击后宿主会先校验 main slot 里存在同 key 的
 // 条目（layout.selectPanel → hasMainPanel），不存在会直接抛错，侧栏就点不动了。
 const PANEL_ID = 'mcp-manager';
+// 悬浮按钮这一帧该不该出现：入口偏好允许 + 当前不在看板页。
+// 看板本身占据中栏时按钮只会盖住列表/详情（issue #4），所以自动收起；
+// 回到会话后 panelInfo 变回别的 id，按钮自然复现。纯函数便于直接断言。
+function fabVisibleFor(mode, activePanelId) {
+  return overlaySeats(mode).fab === true && activePanelId !== PANEL_ID;
+}
 // 入口排序：插件管理器用 0，定时任务用 10；取 5 让本入口正好落在「插件」旁边。
 const PANEL_ORDER = 5;
 // 看板五分类（MCP / Skill / 专家 / 工具裁缝 / 市场）随名称一并示人。
@@ -9432,6 +9466,26 @@ const CommunityPresence = ({ call, repo, owner, avatar, updatedAt, compact }) =>
     ),
   );
 };
+// 详情接口的 homepage 历史上可能是 api.skillhub.cn（JSON 接口，浏览器打开 405）。
+// 数据层已统一成公开页（lib/wb-market.js 的 skillhubHomepage）；渲染层再兜一层，
+// 旧缓存或未来上游变化都不会把接口地址交给浏览器。
+const browsableHomepageUrl = (value) => {
+  const url = String(value || '').trim();
+  if (!/^https?:\/\//i.test(url)) return '';
+  if (/^https?:\/\/api\.skillhub\.cn(?=[/?#]|$)/i.test(url)) return '';
+  return url;
+};
+// 详情回包只覆盖「有值」的字段：上游对缺失字段返回空串 / 空数组时，不能把列表项里
+// 已有的中文名、介绍、上架时间冲掉（issue #4）。0 与 false 是合法值，照常覆盖。
+const mergeSkillDetail = (listItem, detail) => {
+  const merged = { ...(listItem || {}) };
+  for (const [key, value] of Object.entries(detail || {})) {
+    if (value === '' || value === null || value === undefined) continue;
+    if (Array.isArray(value) && value.length === 0) continue;
+    merged[key] = value;
+  }
+  return merged;
+};
 const feedbackKindLabel = (kind) =>
   kind === 'skill' ? t('技能') : kind === 'expert' ? t('专家') : kind === 'plugin' ? t('插件') : kind === 'connector' ? t('连接器') : t('条目');
 const feedbackTemplate = (item, kind, repo, homepage) => {
@@ -9460,8 +9514,8 @@ const FeedbackLinks = ({ item, kind, repo, homepage, sourceLabel }) => {
   const name = String(item?.name || item?.id || item?.plugin || item?.slug || '').trim() || t('未命名条目');
   const repoKey = parseGithubRepoKey(repo || item?.repo || item?.repository);
   const repoUrl = repoKey ? `https://github.com/${repoKey}` : '';
-  const home = String(homepage || item?.homepage || item?.upstreamUrl || '').trim();
-  const homeUrl = /^https?:\/\//i.test(home) && home !== repoUrl ? home : '';
+  const home = browsableHomepageUrl(homepage || item?.homepage || item?.upstreamUrl);
+  const homeUrl = home && home !== repoUrl ? home : '';
   const template = feedbackTemplate(item, kind, repoUrl || homeUrl, homeUrl);
   const title = t('{0} · {1} 的反馈', [feedbackKindLabel(kind), name]);
   const issueUrl = ARMORY_REPO_URL + '/issues/new?title=' + encodeURIComponent(title) + '&body=' + encodeURIComponent(template);
@@ -10434,7 +10488,8 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
     try {
       const res = await call('wbSkillDetail', { slug: skill.slug, namespace: skill.namespace });
       if (!res?.ok) throw new Error(res?.error || t('读取详情失败'));
-      setSkillDetail({ ...skill, ...res, loading: false });
+      // 回包里的空串不能覆盖列表项已有的中文名 / 介绍（issue #4）。
+      setSkillDetail({ ...mergeSkillDetail(skill, res), loading: false });
     } catch (e) {
       setSkillDetail({ ...skill, loading: false, detailError: String(e?.message || e) });
     }
@@ -10989,7 +11044,7 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
                 owner: skill.ownerName || skill.namespace,
                 avatar: skill.iconUrl || githubAvatarUrl(skill.homepage),
                 updatedAt: skill.updatedAt,
-                href: /^https?:\/\//i.test(String(skill.homepage || '')) ? skill.homepage : '',
+                href: browsableHomepageUrl(skill.homepage),
                 className: 'dsh-mcp-presence-card',
               }),
               h('div', { className: 'dsh-mcp-card-tags' },
@@ -11337,15 +11392,20 @@ const WorkBuddyMarket = ({ call, pluginManager }) => {
             }),
             h(FeedbackLinks, {
               item: skillDetail, kind: 'skill',
-              repo: parseGithubRepoKey(skillDetail.homepage || skillDetail.upstreamUrl) ? (skillDetail.homepage || skillDetail.upstreamUrl) : '',
+              // upstream_url（GitHub）优先，其次才是技能公开页：公开页不是仓库时
+              // 不该占掉「去仓库」的位置。
+              repo: parseGithubRepoKey(skillDetail.upstreamUrl)
+                ? skillDetail.upstreamUrl
+                : (parseGithubRepoKey(skillDetail.homepage) ? skillDetail.homepage : ''),
               homepage: skillDetail.homepage || skillDetail.upstreamUrl,
               sourceLabel: skillDetail.ownerName || skillDetail.publisher || t('SkillHub'),
             }),
+            // 介绍先从列表项渲染（不必等详情回来），详情到达后原地替换为完整正文。
+            skillDetail.description ? h('p', { className: 'dsh-mcp-wb-modal-desc' }, skillDetail.description) : null,
             skillDetail.loading
               ? h('p', { className: 'dsh-mcp-wb-modal-note' }, t('正在读取详情…'))
               : h('div', null,
                   skillDetail.detailError ? h('p', { className: 'dsh-mcp-wb-error' }, skillDetail.detailError) : null,
-                  skillDetail.description ? h('p', { className: 'dsh-mcp-wb-modal-desc' }, skillDetail.description) : null,
                   h('div', { className: 'dsh-mcp-card-tags' },
                     skillDetail.version ? h(Badge, null, 'v' + skillDetail.version) : null,
                     skillDetail.publisher ? h(Badge, null, skillDetail.publisher + (skillDetail.verifiedPublisher ? t('（已认证）') : '')) : null,
@@ -12282,24 +12342,120 @@ const WhatsNewModal = ({ call }) => {
   );
 };
 
+// 当前主面板 id：与 openBoardPanel 读同一份 layout.panelInfo 快照。
+// 取不到（旧宿主 / layout 还没装好）就返回 undefined —— 悬浮按钮保持原样，不误隐藏。
+function readActivePanelId() {
+  try {
+    const ctx = MODULE_CTX.ctx;
+    const layout = ctx && typeof ctx.get === 'function' ? ctx.get('layout') : null;
+    const info = layout && layout.panelInfo;
+    const snapshot = info && typeof info.getSnapshot === 'function'
+      ? info.getSnapshot()
+      : (info && typeof info.getState === 'function' ? info.getState() : null);
+    return snapshot && typeof snapshot.activePanelId === 'string' ? snapshot.activePanelId : undefined;
+  } catch {
+    return undefined;
+  }
+}
+// 订阅宿主的面板切换。panelInfo 有 subscribe 就真订阅（zustand 风格 store），
+// 没有就 1 秒轮询兜底——面板开合是低频事件，这个代价可以忽略。
+const useActivePanelId = () => {
+  const [active, setActive] = useState(readActivePanelId);
+  useEffect(() => {
+    let disposed = false;
+    let off = null;
+    let timer = 0;
+    const bind = () => {
+      if (disposed) return;
+      const ctx = MODULE_CTX.ctx;
+      const layout = ctx && typeof ctx.get === 'function' ? ctx.get('layout') : null;
+      const info = layout && layout.panelInfo;
+      if (!info) {
+        timer = setTimeout(bind, 1000);
+        return;
+      }
+      const read = () => { if (!disposed) setActive(readActivePanelId()); };
+      read();
+      if (typeof info.subscribe === 'function') {
+        const stop = info.subscribe(read);
+        if (typeof stop === 'function') off = stop;
+        return;
+      }
+      timer = setInterval(read, 1000);
+    };
+    bind();
+    return () => {
+      disposed = true;
+      clearTimeout(timer);
+      clearInterval(timer);
+      if (typeof off === 'function') off();
+    };
+  }, []);
+  return active;
+};
+
 // ── 悬浮按钮宿主（shell.overlay）：只剩这一个席位 ────────────────────────────────
 const McpOverlay = () => {
   useI18nRevision(); // 宿主切语言后重渲染，模块级 getter 文案即时更新
   const mode = useEntryMode();
-  const seats = overlaySeats(mode);
+  const activePanelId = useActivePanelId();
+  // 看板页打开时自动收起：悬浮按钮固定在中栏之上，会直接盖住列表与详情文字（issue #4）。
+  const fabVisible = fabVisibleFor(mode, activePanelId);
+  const canHideFab = entryModeWithoutFab(mode) !== mode;
   const [pos, setPos] = useState(() => readFabPos() || defaultFabPos());
+  const [menuOpen, setMenuOpen] = useState(false);
+  const [hideHint, setHideHint] = useState(false);
   const fabRef = useRef(null);
+  const menuRef = useRef(null);
   const dragRef = useRef(null);
   const suppressClickRef = useRef(false);
+  const pressTimerRef = useRef(0);
 
   // 窗口尺寸变化时把按钮拉回可视区，避免记忆的位置因分辨率变化而出界。
-  // 悬浮按钮被偏好关掉时不订阅：给一个看不见的按钮算位置只是白渲染。
+  // 悬浮按钮不可见时不订阅：给一个看不见的按钮算位置只是白渲染。
   useEffect(() => {
-    if (!ENTRY_VISIBILITY[mode].fab) return;
+    if (!fabVisible) return;
     const onResize = () => setPos((current) => clampFabPos(current.x, current.y));
     window.addEventListener('resize', onResize);
     return () => window.removeEventListener('resize', onResize);
-  }, [mode]);
+  }, [fabVisible]);
+
+  // 按钮被隐藏（手动 / 看板页自动收起）时，菜单不能留在屏幕上。
+  useEffect(() => {
+    if (!fabVisible) setMenuOpen(false);
+  }, [fabVisible]);
+
+  // 菜单外侧点击 / Esc 关闭。菜单项自己的 click 由 stopPropagation 挡住，不会误关。
+  useEffect(() => {
+    if (!menuOpen) return;
+    const onDocClick = (event) => {
+      if (menuRef.current && menuRef.current.contains(event.target)) return;
+      setMenuOpen(false);
+    };
+    const onKey = (event) => { if (event.key === 'Escape') setMenuOpen(false); };
+    document.addEventListener('click', onDocClick);
+    document.addEventListener('keydown', onKey);
+    return () => {
+      document.removeEventListener('click', onDocClick);
+      document.removeEventListener('keydown', onKey);
+    };
+  }, [menuOpen]);
+
+  // 隐藏后的提示条自动收起（文案在渲染期取 t()，切语言即时变）。
+  useEffect(() => {
+    if (!hideHint) return;
+    const id = setTimeout(() => setHideHint(false), 6000);
+    return () => clearTimeout(id);
+  }, [hideHint]);
+
+  // 长按（触屏 / 手写笔）与右键都能叫出菜单；鼠标拖动与长按互不抢占。
+  const cancelPressMenu = () => {
+    if (pressTimerRef.current) {
+      clearTimeout(pressTimerRef.current);
+      pressTimerRef.current = 0;
+    }
+  };
+  useEffect(() => cancelPressMenu, []);
 
   const handlePointerDown = (event) => {
     if (event.button !== undefined && event.button !== 0) return;
@@ -12316,6 +12472,15 @@ const McpOverlay = () => {
       moved: false,
     };
     try { el.setPointerCapture(event.pointerId); } catch { /* 忽略不支持捕获的环境 */ }
+    if (event.pointerType && event.pointerType !== 'mouse') {
+      cancelPressMenu();
+      pressTimerRef.current = setTimeout(() => {
+        pressTimerRef.current = 0;
+        dragRef.current = null;
+        suppressClickRef.current = true;
+        setMenuOpen(true);
+      }, FAB_MENU_PRESS_MS);
+    }
   };
   const handlePointerMove = (event) => {
     const drag = dragRef.current;
@@ -12325,6 +12490,7 @@ const McpOverlay = () => {
     const dy = event.clientY - drag.startClientY;
     if (!drag.moved && Math.hypot(dx, dy) < DRAG_THRESHOLD) return;
     drag.moved = true;
+    cancelPressMenu();
     drag.live = clampFabPos(drag.startX + dx, drag.startY + dy);
     // 跟手：直接写 DOM，不触发 React 渲染；松手时才 setPos 提交。
     el.style.left = drag.live.x + 'px';
@@ -12332,6 +12498,7 @@ const McpOverlay = () => {
     el.style.cursor = 'grabbing';
   };
   const handlePointerEnd = () => {
+    cancelPressMenu();
     const drag = dragRef.current;
     dragRef.current = null;
     if (fabRef.current) fabRef.current.style.cursor = '';
@@ -12346,24 +12513,53 @@ const McpOverlay = () => {
   };
   const handleClick = () => {
     if (suppressClickRef.current) { suppressClickRef.current = false; return; }
+    // 菜单开着时，点按钮先把菜单收起（否则会同时打开看板 + 留下菜单）。
+    if (menuOpen) { setMenuOpen(false); return; }
     openBoardPanel();
   };
+  const handleContextMenu = (event) => {
+    event.preventDefault();
+    setMenuOpen(true);
+  };
+  const handleHideFab = () => {
+    setMenuOpen(false);
+    const next = entryModeWithoutFab(mode);
+    if (next === mode) return;
+    entryMode.set(next);
+    setHideHint(true);
+  };
 
   const style = { left: pos.x + 'px', top: pos.y + 'px', right: 'auto', bottom: 'auto' };
+  // 菜单贴着按钮，但夹在视口内；下方放不下就翻到按钮上面。
+  const viewportWidth = typeof window === 'undefined' ? 1024 : window.innerWidth;
+  const viewportHeight = typeof window === 'undefined' ? 768 : window.innerHeight;
+  const menuWidth = 216;
+  const menuHeight = canHideFab ? 78 : 112;
+  const menuBelow = pos.y + FAB_SIZE + 8;
+  const menuStyle = {
+    left: Math.max(8, Math.min(pos.x, viewportWidth - menuWidth - 8)) + 'px',
+    top: (menuBelow + menuHeight <= viewportHeight - 8
+      ? menuBelow
+      : Math.max(8, pos.y - menuHeight - 8)) + 'px',
+    width: menuWidth + 'px',
+  };
 
   return h(
     React2.Fragment,
     null,
-    seats.fab ? h(
+    fabVisible ? h(
       'button',
       {
         ref: fabRef,
         type: 'button',
         className: 'dsh-mcp-fab',
-        title: t('技能 · MCP · 专家看板（可拖拽移动）'),
+        title: t('技能 · MCP · 专家看板（拖拽移动，右键或长按隐藏）'),
         'aria-label': t('打开技能 · MCP · 专家看板'),
+        'aria-haspopup': 'menu',
+        'aria-expanded': menuOpen,
         style,
         onClick: handleClick,
+        onContextMenu: handleContextMenu,
         onPointerDown: handlePointerDown,
         onPointerMove: handlePointerMove,
         onPointerUp: handlePointerEnd,
@@ -12371,6 +12567,30 @@ const McpOverlay = () => {
       },
       h(Icon, { d: ICONS.board, size: 22 }),
     ) : null,
+    fabVisible && menuOpen ? h(
+      'div',
+      {
+        ref: menuRef,
+        className: 'dsh-mcp-tab-pop dsh-mcp-fab-menu',
+        role: 'menu',
+        'aria-label': t('悬浮按钮设置'),
+        style: menuStyle,
+        onClick: (event) => event.stopPropagation(),
+        onContextMenu: (event) => event.preventDefault(),
+      },
+      h('button', {
+        type: 'button',
+        role: 'menuitem',
+        className: 'dsh-mcp-entry-item dsh-mcp-fab-menu-item',
+        disabled: !canHideFab,
+        onClick: handleHideFab,
+      }, t('隐藏悬浮按钮')),
+      canHideFab
+        ? null
+        : h('p', { className: 'dsh-mcp-fab-menu-note' }, t('这是当前唯一入口；先到面板「入口」菜单切换模式。')),
+    ) : null,
+    hideHint ? h('div', { className: 'dsh-mcp-fab-hint', role: 'status' },
+      t('悬浮按钮已隐藏，可从左上角「大肥鱼军械库」或面板「入口」菜单重新打开。')) : null,
   );
 };
 

package/lib/wb-market.js

@@ -505,6 +505,33 @@ export async function wbConnectorCachedCount() {
 // 详情：/api/v1/skills/:slug?namespace=<handle>（带 latestVersion、publisher、securityReports）
 // 文件：/api/v1/skills/:slug/files?namespace=<handle>[&version=]；/file 同形 + &path=
 // namespace 用 namespace.handle（列表项里是对象）， 不是 canonicalName。
+const SKILLHUB_PUBLIC_ORIGIN = "https://skillhub.cn";
+/**
+ * 把 SkillHub 的 homepage 归一成「浏览器能打开」的地址（issue #4）。
+ * 上游列表/详情的 homepage 实际是 `https://api.skillhub.cn/<namespace>/<slug>`——那是
+ * JSON 接口，浏览器直接打开只得到 405。人可读页面在 `https://skillhub.cn/<namespace>/<slug>`
+ * （2026-10 实测 200 text/html）。优先用 namespace + slug 自己拼公开页，这样即使上游
+ * 换成别的内部域名也不会把接口地址交给浏览器；GitHub 等其它可浏览地址原样保留。
+ */
+export function skillhubHomepage(rawHomepage, namespace, slug) {
+  const handle = String(namespace || "").trim();
+  const skillSlug = String(slug || "").trim();
+  const publicPage = handle && skillSlug
+    ? `${SKILLHUB_PUBLIC_ORIGIN}/${encodeURIComponent(handle)}/${encodeURIComponent(skillSlug)}`
+    : "";
+  const raw = String(rawHomepage || "").trim();
+  if (!raw) return publicPage;
+  let parsed;
+  try {
+    parsed = new URL(raw);
+  } catch {
+    return raw;
+  }
+  if (parsed.hostname.toLowerCase() === "api.skillhub.cn") {
+    return publicPage || `${SKILLHUB_PUBLIC_ORIGIN}${parsed.pathname}${parsed.search}${parsed.hash}`;
+  }
+  return raw;
+}
 const SKILLHUB_SORTS = new Set(["downloads", "installs", "stars", "score"]);
 // 2026-10 实测（api.skillhub.cn）：`sortBy=downloads` 已不再是可用值——TCP 能连上、
 // 但服务端不回任何字节，一直挂到客户端 AbortSignal 超时；installs / stars / score /
@@ -543,32 +570,39 @@ export async function wbSkillCatalog(payload = {}) {
   if (category) params.set("category", category.slice(0, 64));
   const body = await skillhubJson(`/api/skills?${params.toString()}`);
   const skills = Array.isArray(body?.data?.skills) ? body.data.skills : [];
-  const rows = skills.map((skill) => ({
-    slug: String(skill.slug || ""),
-    name: String(skill.name || skill.slug || ""),
-    namespace: String(skill.namespace?.handle || ""),
-    canonical: String(skill.namespace?.canonicalName || ""),
-    // 「人」的字段：发布方显示名、作品图标、公开详情页、上架时间与认领状态。
-    // 这些字段列表接口本来就有，不额外发请求——卡片上的人味信号零成本。
-    ownerName: String(skill.ownerName || skill.namespace?.displayName || skill.namespace?.handle || ""),
-    iconUrl: String(skill.iconUrl || ""),
-    homepage: String(skill.homepage || ""),
-    createdAt: Number(skill.created_at) || 0,
-    claimState: String(skill.claim_state || ""),
-    source: String(skill.source || ""),
-    description: String(skill.description_zh || skill.description || ""),
-    descriptionEn: String(skill.description_en || ""),
-    downloads: Number(skill.downloads) || 0,
-    installs: Number(skill.installs) || 0,
-    stars: Number(skill.stars) || 0,
-    score: Number(skill.score) || 0,
-    version: String(skill.version || ""),
-    verified: !!skill.verified,
-    updatedAt: Number(skill.updated_at) || 0,
-    category: String(skill.category || ""),
-    tags: Array.isArray(skill.tags) ? skill.tags.slice(0, 6).map(String) : [],
-    upstreamUrl: String(skill.upstream_url || skill.homepage || ""),
-  })).filter((skill) => skill.slug && skill.namespace);
+  const rows = skills.map((skill) => {
+    const slug = String(skill.slug || "");
+    const namespace = String(skill.namespace?.handle || "");
+    const homepage = skillhubHomepage(skill.homepage, namespace, slug);
+    return {
+      slug,
+      name: String(skill.name || skill.slug || ""),
+      namespace,
+      canonical: String(skill.namespace?.canonicalName || ""),
+      // 「人」的字段：发布方显示名、作品图标、公开详情页、上架时间与认领状态。
+      // 这些字段列表接口本来就有，不额外发请求——卡片上的人味信号零成本。
+      ownerName: String(skill.ownerName || skill.namespace?.displayName || skill.namespace?.handle || ""),
+      iconUrl: String(skill.iconUrl || ""),
+      // 上游把 homepage 填成了 api.skillhub.cn 的 JSON 地址（405），换成公开页。
+      homepage,
+      createdAt: Number(skill.created_at) || 0,
+      claimState: String(skill.claim_state || ""),
+      source: String(skill.source || ""),
+      description: String(skill.description_zh || skill.description || ""),
+      descriptionEn: String(skill.description_en || ""),
+      downloads: Number(skill.downloads) || 0,
+      installs: Number(skill.installs) || 0,
+      stars: Number(skill.stars) || 0,
+      score: Number(skill.score) || 0,
+      version: String(skill.version || ""),
+      verified: !!skill.verified,
+      updatedAt: Number(skill.updated_at) || 0,
+      category: String(skill.category || ""),
+      tags: Array.isArray(skill.tags) ? skill.tags.slice(0, 6).map(String) : [],
+      // upstream_url 是真正的外部来源（GitHub / ClawHub）：能打开就保留，缺失回落公开页。
+      upstreamUrl: skillhubHomepage(skill.upstream_url, namespace, slug) || homepage,
+    };
+  }).filter((skill) => skill.slug && skill.namespace);
   // 下载量排序上游已不可用，退化为「当前页内按下载量降序」：跨页顺序仍是上游默认序，
   // 所以这是页内排序而不是全库排序（UI 侧「最多下载」的含义随之收窄，见下）。
   if (!remoteSort) rows.sort((a, b) => b.downloads - a.downloads);
@@ -590,20 +624,32 @@ export async function wbSkillDetail(payload = {}) {
   // 详情端点**没有** {code,data,message} 包装：latestVersion 等字段直接在根上
   // （列表端点才有 data 包装）。两种形状都兼容，避免上游改包装方式时把面板打空。
   const data = body?.latestVersion ? body : (body?.data || {});
+  // 技能本体挂在 data.skill 下，字段名与列表不同（displayName / summary_zh / summary /
+  // iconUrl），根层没有 name、description、homepage。只读根层会得到「标题退化成 slug、
+  // 介绍空白」（issue #4 实测）。下面逐字段回退到列表的旧字段名，两种形状都兼容。
+  const skill = data.skill && typeof data.skill === "object" ? data.skill : {};
+  const handle = String(data.namespace?.handle || namespace);
   const reports = data.securityReports && typeof data.securityReports === "object" ? data.securityReports : {};
   const reportStatus = Object.values(reports).map((report) => String(report?.status || "")).filter(Boolean);
   return {
     slug,
-    namespace,
-    name: String(data.name || slug),
+    namespace: handle,
+    name: String(skill.displayName || data.name || slug),
     version: String(data.latestVersion?.version || ""),
     changelog: String(data.latestVersion?.changelog || ""),
-    description: String(data.description_zh || data.description || ""),
+    description: String(skill.summary_zh || skill.summary || data.description_zh || data.description || ""),
+    iconUrl: String(skill.iconUrl || data.iconUrl || ""),
+    ownerName: String(data.owner?.displayName || data.namespace?.displayName || ""),
     publisher: String(data.publisher?.name || data.owner?.displayName || ""),
     verifiedPublisher: !!data.publisher?.verified,
     certifiedName: String(data.publisher?.certifiedName || ""),
     security: reportStatus.length ? reportStatus : ["unknown"],
-    homepage: String(data.homepage || ""),
+    // 详情根层没有 homepage；公开页由 namespace + slug 拼，绝不把 api.skillhub.cn 交出去。
+    homepage: skillhubHomepage(data.homepage || skill.homepage, handle, slug),
+    // 详情缺 createdAt 时不回 0：列表项自带的上架时间会被 0 覆盖掉。
+    ...(Number(skill.createdAt) ? { createdAt: Number(skill.createdAt) } : {}),
+    category: String(skill.category || ""),
+    source: String(skill.source || ""),
   };
 }
 export async function wbSkillFiles(payload = {}) {

package/lib/whats-new-en.js

@@ -434,6 +434,20 @@ export const WHATS_NEW_EN = {
       where: 'Skill board',
     },
   ],
+  '2.4.1': [
+    {
+      text: '**Skill details no longer go blank and titles no longer fall back to the slug**: SkillHub\'s detail endpoint keeps the name and summary under the `skill` object (`displayName` / `summary_zh`), while the old mapping only read the root level — the title became the slug and the summary was empty. It now falls back `summary_zh -> summary -> legacy fields` and merges the list item\'s existing name, summary and created time into the detail; empty strings from the response no longer overwrite what is already on screen, and the list summary stays visible while the detail loads (issue #4)',
+      where: 'Market -> Skills -> detail',
+    },
+    {
+      text: '**"Source homepage" now opens a readable page**: upstream `homepage` is actually the `api.skillhub.cn` JSON endpoint (405 in a browser). It is now rewritten to the public `https://skillhub.cn/<namespace>/<slug>` page, with a second guard at render time so the API host is never handed to the browser (issue #4)',
+      where: 'Market -> Skills -> Source homepage',
+    },
+    {
+      text: '**The floating button can be hidden and steps aside on the board**: right-click (or a 0.5 s long-press on touch) opens a Hide action with a hint on how to bring it back from the top-left entry or the "Entries" menu; a new "panel + sidebar entry" mode keeps at least two entry points. The button hides automatically while the board occupies the center panel and returns when you go back to the conversation (issue #4)',
+      where: 'Floating button / Panel -> Entries',
+    },
+  ],
 };
 
 /**

package/lib/whats-new.js

@@ -499,4 +499,21 @@ export const WHATS_NEW = [
       },
     ],
   },
+  {
+    version: '2.4.1',
+    items: [
+      {
+        text: '**技能详情不再空白、标题不再退化成 slug**：SkillHub 详情接口把名称与介绍放在 `skill` 子对象（`displayName` / `summary_zh`），旧映射只读根层，于是标题变 slug、介绍全空。现在按 `summary_zh → summary → 旧字段` 逐级回退，并把列表项已有的中文名、介绍、上架时间合并进详情——回包里的空串不再覆盖已显示的内容，加载中也先显示列表里的介绍（issue #4）',
+        where: '市场 → 技能 → 详情',
+      },
+      {
+        text: '**「来源主页」改开可读页面**：上游 `homepage` 实际是 `api.skillhub.cn` 的 JSON 接口（浏览器打开 405）。现在统一改写成 `https://skillhub.cn/<namespace>/<slug>` 公开页，渲染层再拦一道，接口域名不会再被当成网页交出去（issue #4）',
+        where: '市场 → 技能 → 来源主页',
+      },
+      {
+        text: '**悬浮按钮可隐藏，看板打开时自动收起**：右键（触屏长按 0.5 秒）悬浮按钮可隐藏并提示从左上角或「入口」菜单重开；新增「面板 + 侧栏底部入口」档位，隐藏后仍保留至少两个入口。看板占据中栏时按钮自动让位，回到会话再恢复（issue #4）',
+        where: '悬浮按钮 / 面板 → 入口',
+      },
+    ],
+  },
 ]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-armory",
-  "version": "2.4.0",
+  "version": "2.4.1",
   "description": "Unified Skill + MCP + Expert + Plugin board for DeepSeek Harness (desktop app and Web GUI) — custom skill suites, skill install/uninstall with live refresh, global panel page, JSON import, WorkBuddy connector & SkillHub & Expert & DSH community plugin market installs, MCP OAuth authorization, tool-usage tailor with wire-tax trends, and profile-backed Host Remote management.",
   "repository": {
     "type": "git",