dsh-ronge-adaptive-skill-archive 3.0.0 → 3.0.1

package/README.md

@@ -181,6 +181,12 @@ GitHub 公开、可检索的 `SKILL.md` 元数据快照（2026-10-28）：**6,39
 | **GitHub tag** | `plugin_manager install_bundle target=git+https://github.com/bugtakue/dsh-ronge-adaptive-skill-archive.git#v3.0.0` | 不用 npm、固定版本、可审源码 |
 | **本地目录** | `plugin_manager install_bundle target="/absolute/path/to/dsh-ronge-adaptive-skill-archive"` | 开发、改代码、离线 |
 
+### DSH 兼容性（已测 0.2.1-rc.3）
+
+- 当前 bundle 在 **DeepSeek Harness Desktop 0.2.1-rc.3** 上验证：Host 路由、Client slot（技能按钮 + 右侧抽屉）、locale 元数据、图标、npm 安装与数据迁移均通过。
+- **替换已安装包后需重启 DSH** 才会加载新的 Host 模块；浏览器刷新加载 Client。
+- 兼容性检查：`npm run check:dsh`；完整说明见 [docs/dsh-compatibility.md](docs/dsh-compatibility.md)。
+
 ### 升级（旧包名 → v3.0.0）
 
 - **v3.0.0 是 breaking rename**：包名、路由、bundle id、数据目录都改为 `dsh-ronge-adaptive-skill-archive`；显示名不变。

package/docs/dsh-compatibility.md

@@ -0,0 +1,52 @@
+# DSH 兼容性与安装边界
+
+测试对象：**DeepSeek Harness Desktop 0.2.1-rc.3**（Web GUI，macOS）。
+测试日期：2026-10-29。插件版本：`dsh-ronge-adaptive-skill-archive` 3.0.1。
+
+## 安装方式
+
+```bash
+# npm（推荐）
+plugin_manager install_bundle target=dsh-ronge-adaptive-skill-archive@3.0.1
+
+# GitHub tag（固定版本、可审源码）
+plugin_manager install_bundle target=git+https://github.com/bugtakue/dsh-ronge-adaptive-skill-archive.git#v3.0.1
+
+# 本地目录（开发）
+plugin_manager install_bundle target=/absolute/path/to/dsh-ronge-adaptive-skill-archive
+```
+
+替换已安装包后，DSH 需要 **restart（重启）** 才会加载新的 Host JavaScript 模块；浏览器端 Client 插件刷新页面即可。仅新装一个尚未启用的 bundle 通常可以通过 HMR 生效，但不要用 slot 未变化来推断新代码已加载。
+
+## 它注册了什么
+
+- Host：`ctx.webServer.register` 下的 `/dsh-ronge-adaptive-skill-archive/*` 路由；`ctx.systemPrompt.section` 注入推荐路由段；`ctx.skills` 读取已安装技能；session 事件用于「正在使用」和完成提示音。
+- Client：`conversation.session.header.utilities` 里的「技能」按钮（id = 包名）；`shell.overlay` 里的右侧抽屉（id = 包名 + `-drawer`）。两者都通过 `ctx.slots.inject` 注册，live Slot 检查显示 active。
+- 显示元数据：`locale/en.json` 与 `locale/zh.json` 的 `meta.title` / `meta.description`，`icon.svg`（631 B，< 256 KiB）通过 `exports["./icon"]` 暴露。
+- 不导出 Host `Config` schema：所有设置都在面板内，DSH 设置页不会出现 Config 分区；这是有意为之，不是加载失败。
+
+## 数据目录与迁移
+
+- 当前：`~/.dsh/dsh-ronge-adaptive-skill-archive/`
+- 自动合并：`~/.dsh/skill-studio/`、`~/.dsh/ronge-adaptive-skill-archive/`
+- 旧目录**不删除**；新目录已存在时，按数据丰富度合并 `experience.json`、`evolution.json`、`rec-feedback.json`、`skills-lock.json` 等，旧值不会覆盖更丰富的新值。
+- 卸载 bundle 不删除数据目录；重新安装后经验/权重/更新记录仍在。
+
+## 网络与代理
+
+安装/预览/更新远端 `SKILL.md` 时，Host 里 Node 的 `fetch` 在系统代理下可能不可用；实现会读取 `HTTPS_PROXY` / `HTTP_PROXY`，在 macOS 上回退到 `scutil --proxy`，并优先用系统 `curl` 经代理抓取，最后才尝试直连。只允许 `raw.githubusercontent.com/**/SKILL.md`，上限 256 KiB，先扫描后落盘。
+
+## 已验证
+
+- `npm test`：55/55（含 DSH 兼容性静态检查）
+- Host E2E：17/17（真实 loopback HTTP + raw.githubusercontent.com）
+- UI E2E：20/20
+- `npm run check:dsh`：manifest / factory id / slots / routes / 数据迁移 / market index 全部通过
+- npm registry 安装 v3.0.0 成功；市场索引 format 1 托管在 `https://bugtakue.github.io/dsh-ronge-adaptive-skill-archive/plugin-market.json`
+
+## 已知边界
+
+- 右侧抽屉是自定义 overlay，不是 DSH 原生 rightbar；DSH 大改布局时可能影响位置，需重跑 UI E2E。
+- 没有 Host Config schema；DSH 设置页无法直接改插件配置。
+- 推荐/检索仍是本地启发式（哈希向量 + 词表 + 信号分），不是神经模型。
+- 安全扫描是正则启发式；安装/更新高风险默认拒绝，但不等同于安全保证。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-ronge-adaptive-skill-archive",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "description": "荣哥技能卷轴收藏馆 / Ronge's Adaptive Skill Cockpit: a context-aware, self-evolving skill cockpit for DeepSeek Harness — recommendations with reasons, 10% exploration quota, category/skill affinity learning, live usage, plan/immersive modes, experience memory, pre-install safety scan, update diff/rollback and a 6,399-skill public index.",
   "type": "module",
   "repository": {
@@ -45,7 +45,8 @@
     "docs/cross-agent.md",
     "docs/eval.md",
     "library/repo-metadata.json",
-    "test/fixtures/discover-cases.json"
+    "test/fixtures/discover-cases.json",
+    "docs/dsh-compatibility.md"
   ],
   "scripts": {
     "check": "node scripts/check.mjs",
@@ -54,7 +55,8 @@
     "build:market-index": "node scripts/build-market-index.mjs",
     "start": "node scripts/cli.mjs",
     "eval:real": "node scripts/eval-real.mjs",
-    "eval:discover": "node scripts/eval-discover.mjs"
+    "eval:discover": "node scripts/eval-discover.mjs",
+    "check:dsh": "node scripts/dsh-compat-check.mjs"
   },
   "dsh": {
     "bundle": {

package/scripts/dsh-compat-check.mjs

@@ -0,0 +1,74 @@
+#!/usr/bin/env node
+/**
+ * Static DSH ecosystem compatibility check. Verifies the bundle manifest,
+ * display metadata, client factory/slots, route namespace, data-dir migration
+ * and the hosted market-index entry, without booting a Harness.
+ *
+ * Tested against DSH Desktop 0.2.1-rc.3.
+ */
+import fs from 'node:fs'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..')
+const pkg = JSON.parse(fs.readFileSync(path.join(ROOT, 'package.json'), 'utf8'))
+const patch = fs.readFileSync(path.join(ROOT, 'cordis.patch.yml'), 'utf8')
+const client = fs.readFileSync(path.join(ROOT, 'client.js'), 'utf8')
+const index = fs.readFileSync(path.join(ROOT, 'index.js'), 'utf8')
+const failures = []
+const check = (ok, message) => { if (!ok) failures.push(message) }
+
+check(pkg.name === 'dsh-ronge-adaptive-skill-archive', 'unexpected package name')
+check(pkg.dsh?.bundle?.patch === './cordis.patch.yml', 'dsh.bundle.patch missing')
+check(pkg.dsh?.client?.platform === 'web', 'dsh.client.platform must be web')
+check(pkg.dsh?.client?.inject?.includes('@deepseek-ai/dsh-client-ui-conversation'), 'client must inject ui-conversation')
+for (const subpath of ['.', './client', './icon', './locale/*.json']) {
+  check(Boolean(pkg.exports?.[subpath]), 'missing export ' + subpath)
+}
+check(patch.includes('id: ' + pkg.name), 'patch row id must equal package name')
+check(patch.includes("name: '" + pkg.name + "'"), 'patch row name must equal package name')
+
+for (const locale of ['en', 'zh']) {
+  const dict = JSON.parse(fs.readFileSync(path.join(ROOT, 'locale', locale + '.json'), 'utf8'))
+  check(typeof dict.meta?.title === 'string' && dict.meta.title.trim(), locale + '.meta.title missing')
+  check(typeof dict.meta?.description === 'string' && dict.meta.description.trim(), locale + '.meta.description missing')
+}
+const icon = fs.readFileSync(path.join(ROOT, 'icon.svg'))
+check(icon.length < 256 * 1024, 'icon must be under 256 KiB')
+check(String(icon).trim().startsWith('<svg'), 'icon.svg is not SVG')
+
+const factoryId = /id:\s*'([^']+)'/.exec(client)?.[1]
+check(factoryId === pkg.name, 'client factory id must equal package name')
+for (const slot of ['conversation.session.header.utilities', 'shell.overlay']) {
+  check(client.includes("ctx.slots.inject('" + slot + "'"), 'missing slot injection ' + slot)
+}
+check(client.includes("id: '" + pkg.name + "'"), 'client button slot id must equal package name')
+
+const legacy = '/ronge-adaptive-skill-archive'
+const routeMatches = [...index.matchAll(/path:\s*'(\/[^']+)'/g)].map((match) => match[1])
+for (const route of routeMatches) {
+  check(route === '/' + pkg.name || route.startsWith('/' + pkg.name + '/'), 'route outside package namespace: ' + route)
+  check(!route.includes(legacy), 'legacy route still registered: ' + route)
+}
+check(index.includes("STUDIO_DIR_NAME = '" + pkg.name + "'"), 'data dir must be the package name')
+check(index.includes("'ronge-adaptive-skill-archive'") && index.includes("'skill-studio'"), 'legacy data dir migration missing')
+
+const market = JSON.parse(fs.readFileSync(path.join(ROOT, 'docs', 'plugin-market.json'), 'utf8'))
+const listed = market.plugins?.find((plugin) => plugin.name === pkg.name)
+check(Boolean(listed), 'market index does not list this plugin')
+if (listed) {
+  check(listed.versions?.some((version) => version.version === pkg.version), 'market index version does not match package')
+  check(listed.versions?.[0]?.source?.type === 'npm', 'market version source must be npm')
+  const target = listed.versions?.[0]?.install?.[0]?.target
+  if (target) check(target === pkg.name + '@' + pkg.version, 'market install target mismatch: ' + target)
+}
+for (const file of ['index.js', 'client.js', 'cordis.patch.yml', 'icon.svg', 'locale/en.json', 'locale/zh.json', 'mcp/server.mjs']) {
+  check(Array.isArray(pkg.files) && pkg.files.some((pattern) => pattern === file || pattern.startsWith(file.split('/')[0] + '/')), 'files[] does not cover ' + file)
+}
+
+if (failures.length) {
+  console.error('DSH compatibility check failed:')
+  for (const failure of failures) console.error(' - ' + failure)
+  process.exit(1)
+}
+console.log('ok: DSH compatibility (' + pkg.name + '@' + pkg.version + ', manifest/slots/routes/migration/market)')