dsh-skill-hub 0.1.0 → 0.2.0

package/README.md

@@ -1,5 +1,12 @@
 # dsh-skill-hub
 
+<p align="center">
+  <a href="https://www.npmjs.com/package/dsh-skill-hub"><img alt="npm version" src="https://img.shields.io/npm/v/dsh-skill-hub?color=2f81f7&label=npm"></a>
+  <img alt="license" src="https://img.shields.io/npm/l/dsh-skill-hub">
+  <img alt="node" src="https://img.shields.io/badge/node-%3E%3D22.19-339933">
+  <a href="https://github.com/cheshireez/dsh-skill-hub/actions"><img alt="CI" src="https://img.shields.io/github/actions/workflow/status/cheshireez/dsh-skill-hub/ci.yml?branch=main"></a>
+</p>
+
 <details>
 <summary><b>English</b>（英文）— 点击在本页展开 / 收起，无需跳转</summary>
 
@@ -20,41 +27,59 @@ their bodies, understand why a skill is missing, and scaffold new ones — all f
 | Capability | dsh-skill-manager (read-only) | **dsh-skill-hub (this plugin)** |
 | --- | --- | --- |
 | Catalog source | self-scans disk, user roots only | official `ctx.skills` registry: project / custom / user / bundled + third-party providers |
-| Browse / search | ✅ | ✅ (group by source **or** by Sets) |
-| Enable / disable | ❌ | ✅ (renames `SKILL.md`; file never deleted, always restorable) |
+| Browse / search | ✅ | ✅ (group by **tags** or by **source repo**, search + filter in one row) |
+| Enable / disable | ❌ | ✅ (renames `SKILL.md`; file never deleted, always restorable; per-group tri-state switches) |
 | Inspect skill body | ❌ | ✅ |
 | Discovery diagnostics | ❌ | ✅ (missing frontmatter / missing `name`/`description` / invalid name — each reason listed) |
 | New-skill wizard | ❌ | ✅ (writes to `~/.dsh/skills` or `~/.agents/skills`) |
-| Invocation statistics | ❌ | ✅ (per-skill call counts read from session logs) |
-| Sets grouping | ❌ | ✅ (frontmatter `sets`; skills without sets go to “Uncategorized”) |
+| Invocation statistics | ❌ | ✅ (per-skill call counts read from session logs; group headers summarize) |
+| Upstream source tracking | ❌ | ✅ (repo + commit snapshot; check updates, sync, follow upstream deletion into a restorable trash; delete/restore keeps source + scene membership) |
+| Codex-style market | ❌ | ✅ (built-in market catalog + custom repo sources, scan, one-click import, per-source installed/updatable badges, one-click update-all) |
 | Live updates | — | filesystem-provider watcher, with a 5s panel poll as fallback |
 
 ## Features
 
 - **Full catalog** — every skill the official registry knows: project `.dsh/skills` & `.agents/skills`,
   custom roots, user `~/.dsh/skills` & `~/.agents/skills`, bundled, and third-party providers.
-- **Search & grouping** — filter by name, group by source or by frontmatter `sets`.
+- **Search & grouping** — one row combines search, source filter, and flat/grouped view; groups are
+  user **tags** plus **source collections** (auto-aggregated by upstream repo); uncategorized stays visible.
+- **Group switches** — every group header carries a sliding switch: enable/disable the whole group in one
+  click. Closing a group whose member is also enabled elsewhere opens a conflict dialog (close all / keep on →
+  the group falls into a half-filled mixed state). Read-only skills are skipped with per-name reports.
 - **Enable / disable** — disable renames `SKILL.md` out of discovery (tracked in a sidecar file), so the
   change survives restarts and is trivially reversible. Files are never deleted.
+- **Source tracking** — skills imported from GitHub (market sources or direct URLs) record the repo, ref,
+  and upstream commit snapshot. Check for updates per source (1–2 GitHub API requests, 5-minute throttle),
+  sync selected skills (overwrite confirm), and follow upstream deletion into a restorable trash.
+  Deleting and restoring a tracked skill keeps its source and scene membership (snapshotted in the
+  trash entry). Personal skills (no source) are never tracked.
+- **Market** — codex-style: a built-in catalog of curated repos (one-click add) plus custom repo
+  sources (owner/repo or a GitHub URL); scan `skills/` and `design-templates/` roots and import with
+  one click. Each source row aggregates its state — installed / updatable / deleted upstream — and
+  one "update all" pass syncs every source with pending updates (per-source failures are reported,
+  never fatal).
 - **Skill detail** — read a skill’s rendered body straight from disk.
 - **Discovery diagnostics** — the catalog reports *why* a skill was ignored (missing YAML frontmatter,
   missing `name`/`description`, illegal name), per skill.
 - **New-skill wizard** — scaffold a valid skill into `~/.dsh/skills` or `~/.agents/skills` from the GUI.
 - **Invocation statistics** — the panel shows how many times each skill was actually called, read from
   session logs (optional; absent session-query deployments simply omit the data).
-- **Settings card** — enable the plugin and toggle the agent announcement from **Settings → 插件 → Skill Hub**.
+- **Settings card** — enable the plugin, toggle the agent announcement, and adjust panel display preferences from **Settings → 插件 → Skill Hub**.
 
 ## How it works
 
 ```text
 src/
 ├── index.ts            host entry: inject [webServer, skills, systemPrompt]; system-prompt announcement
-├── routes.ts           /api/skill-hub/{catalog,skill,toggle,create,stats,config} (loopback-only fence)
-├── store.ts            sidecar state ~/.dsh/dsh-skill-hub.json (disabled list + runtime config, atomic write)
-├── skillfs.ts          root resolution / toggle rename / scaffold / diagnostics / frontmatter parsing
+├── routes.ts           /api/skill-hub/{catalog,skill,toggle,toggle-batch,create,stats,config,
+│                       groups,tag*,market*,repo*,sources*,update} (loopback-only fence)
+├── store.ts            sidecar state ~/.dsh/dsh-skill-hub.json v3 (disabled, tags, sources, market
+│                       sources, trash, runtime config; versioned v1→v2→v3 migrations)
+├── repo.ts             GitHub discovery/import + source tracking (latest commit, tree diff, manifest)
+├── skillfs.ts          root resolution / toggle rename / trash & restore / scaffold / diagnostics
 ├── stats.ts            invocation stats: session logs → per-skill call counts (optional sessionQuery)
 ├── protocol.ts         host ↔ browser shared API contract (types + endpoint table)
-└── client/             browser half: settings card + skill hub panel (React, CSS Modules)
+└── client/             browser half: settings card + skill hub panel (React, CSS Modules, Apple-style)
 ```
 
 - **Host half** uses only official SDKs: `ctx.skills.snapshot()/get()`, `ctx.webServer.register()`,
@@ -79,12 +104,20 @@ Requires Node `^22.19.0 || >=24.0.0` and a dsh web deployment (`0.1.0-rc.6` SDK
 
 Open **Settings → 技能** (Skill Hub) in the dsh web GUI:
 
-- **Browse** — the full catalog, searchable and grouped by source or Sets.
+- **Browse** — the full catalog, searchable; search, source filter, and flat/grouped view share one row.
+- **Groups** — user tags and source collections (upstream repos). Group headers carry tri-state sliding
+  switches (on / off / mixed) with a conflict dialog when closing affects skills enabled elsewhere.
+- **Market** — a built-in catalog of curated repos (one-click add), plus custom sources (add a repo
+  source, scan, one-click install) or direct URLs; every import records the upstream repo/commit.
+  Each source row shows installed / updatable / deleted-upstream counts; "check all" refreshes every
+  source, and "update all" syncs every pending source in one pass.
+- **Trash** — skills removed after upstream deletion (or deleted manually) land in a restorable trash;
+  restoring brings back the skill's source and scene membership.
 - **Toggle** — enable/disable any skill from a user-writable root; disabled skills list separately and
   can be re-enabled any time.
 - **Diagnose** — the discovery diagnostics explain why a skill is not showing up.
 - **New skill** — scaffold a new skill from the form and start writing.
-- **Statistics** — per-skill invocation counts when session-query data is available.
+- **Statistics** — per-skill invocation counts when session-query data is available; group headers summarize.
 
 The plugin’s own switches live on the **Settings → 插件 → Skill Hub** card:
 
@@ -92,6 +125,10 @@ The plugin’s own switches live on the **Settings → 插件 → Skill Hub** ca
 | --- | --- |
 | Enable plugin | Master switch: routes, provider, and announcement all go live with this. |
 | Announce to agent | Adds a system-prompt section so agents know how to collaborate when users mention skill management. |
+| Model / user dot colors | Override the blue/green invocation dot colors used in the panel. |
+| Show invocation count | Show per-skill call-count chips when session stats are available. |
+| Show last-used time | Show relative last-used time on each skill row. |
+| Show group summaries | Show count/last-used summaries after group titles. |
 
 ## HTTP API
 
@@ -99,31 +136,57 @@ All endpoints are **loopback-only** (`127.0.0.1`/`localhost`) and JSON.
 
 | Endpoint | Method | Purpose |
 | --- | --- | --- |
-| `/api/skill-hub/catalog` | GET | Full catalog: skills, disabled list, discovery diagnostics, Sets. |
+| `/api/skill-hub/catalog` | GET | Full catalog: skills, disabled list, discovery diagnostics. |
 | `/api/skill-hub/skill?name=` | GET | One skill’s detail (path, provider, body). |
 | `/api/skill-hub/toggle` | POST | Enable/disable a writable skill (`{name, enabled}`). |
+| `/api/skill-hub/toggle-batch` | POST | Enable/disable a whole group in one write (`{names, enabled}`). |
 | `/api/skill-hub/create` | POST | Scaffold a new skill (`{name, description?, root?}`). |
 | `/api/skill-hub/stats` | GET | Per-skill invocation counts (unavailable when session-query is absent). |
 | `/api/skill-hub/config` | GET/POST | Plugin runtime config (`{enabled, announceToAgent}`); `null` clears an override. |
+| `/api/skill-hub/groups` | GET | User tags + source collections + origin map. |
+| `/api/skill-hub/tag` | POST | Create/rename a tag group. |
+| `/api/skill-hub/tag/delete` | POST | Delete a tag group. |
+| `/api/skill-hub/tag/members` | POST | Set a tag’s member list. |
+| `/api/skill-hub/market` | GET | The user’s market source repos. |
+| `/api/skill-hub/market/source` | POST | Add a market source (`{repo}`). |
+| `/api/skill-hub/market/source/delete` | POST | Remove a market source. |
+| `/api/skill-hub/repo?repo=` | GET | Discover importable skills in a GitHub repo. |
+| `/api/skill-hub/repo/import` | POST | Import selected repo skills (records the source). |
+| `/api/skill-hub/sources` | GET | Source records, derived origins/collections, trash. |
+| `/api/skill-hub/sources/check` | POST | Check upstream updates (throttled, 5 min). |
+| `/api/skill-hub/sources/sync` | POST | Sync selected (or all) skills of a source. |
+| `/api/skill-hub/sources/delete` | POST | Follow upstream deletion (moves to trash). |
+| `/api/skill-hub/sources/restore` | POST | Restore a trashed skill. |
+| `/api/skill-hub/update` | GET | Check the plugin’s own latest release. |
 
 ## Development
 
 ```bash
 npm install
 npm run typecheck   # tsc --noEmit
-npm test            # vitest (54 tests across 5 suites)
+npm test            # vitest (151 tests across 9 suites)
 npm run build       # tsc declarations + tsdown bundles (lib/index.js + lib/client.js)
 npm pack            # build the installable tarball (dsh-skill-hub-<version>.tgz)
 ```
 
+> **Local testing:** do not run two `dsh web` instances against the same
+> `$DSH_HOME` and the same project directory at the same time. dsh rc.6 has no
+> cross-process session-log lock, and a second instance resuming the same
+> session can write duplicate `seq` rows (`corrupt session log: seq gap in
+> committed region`). Stop the old instance first, or give the preview its own
+> `DSH_HOME`.
+
 The test suites cover the route family (including the config route and the disabled gate), the sidecar
 store, skill filesystem operations, the registry provider, and invocation statistics.
 
 ## Roadmap
 
 - **v0.1.0** — full catalog, enable/disable, diagnostics, new-skill wizard, settings card.
-- **v0.2.0** — invocation statistics ✅ · Sets grouping ✅ · recycle-bin delete (pending).
-- **v0.3.0** — SSE realtime push to replace polling.
+- **v0.2.0** — invocation statistics · tags/scenes + source-collection grouping with tri-state
+  switches · upstream source tracking (check / sync / follow-delete into a restorable trash) ·
+  codex-style market with built-in catalog, per-source state badges, and one-click update-all ·
+  delete/restore keeps source + scene membership.
+- **Next** — SSE realtime push to replace polling · market catalog expansion · optional auto-update.
 
 ## License
 
@@ -148,41 +211,56 @@ MIT — see [LICENSE](LICENSE).
 | 能力 | dsh-skill-manager（只读版） | **dsh-skill-hub（本插件）** |
 | --- | --- | --- |
 | 目录来源 | 自扫盘，仅用户根 | 官方 `ctx.skills` 注册表：项目 / 自定义 / 用户 / 内置 + 第三方 provider |
-| 浏览 / 搜索 | ✅ | ✅（按来源或按 Sets 分组） |
-| 启用 / 禁用 | ❌ | ✅（重命名 `SKILL.md`；文件不删除，可随时恢复） |
+| 浏览 / 搜索 | ✅ | ✅（按分组或按来源仓库分组，搜索 + 筛选一行完成） |
+| 启用 / 禁用 | ❌ | ✅（重命名 `SKILL.md`；文件不删除，可随时恢复；分组/来源头部滑动开关一键整组启停） |
 | 查看技能正文 | ❌ | ✅ |
 | 发现诊断 | ❌ | ✅（缺 frontmatter / 缺 `name`/`description` / 非法名称，逐项列明原因） |
 | 新建技能向导 | ❌ | ✅（写入 `~/.dsh/skills` 或 `~/.agents/skills`） |
-| 触发统计 | ❌ | ✅（从会话日志读每技能实际调用次数） |
-| Sets 分组 | ❌ | ✅（frontmatter `sets`；无 sets 归入「未归类」） |
+| 触发统计 | ❌ | ✅（从会话日志读每技能实际调用次数；组头汇总） |
+| 来源跟踪 | ❌ | ✅（记录上游 repo + commit 快照；检查更新 / 同步 / 上游删除跟进进回收站；删除→恢复保留来源与场景归属） |
+| 市场（codex 式） | ❌ | ✅（内置市场目录 + 自定义仓库源；扫描、一键导入、每源显示已装/可更新数量、一键全部更新） |
 | 实时更新 | — | 文件系统 provider 的 watcher 驱动，面板 5s 轮询兜底 |
 
 ## 功能
 
 - **完整目录** —— 官方注册表知道的每个技能：项目 `.dsh/skills` 与 `.agents/skills`、自定义根、
   用户 `~/.dsh/skills` 与 `~/.agents/skills`、内置、以及第三方 provider。
-- **搜索与分组** —— 按名称过滤，按来源或 frontmatter `sets` 分组。
+- **搜索与分组** —— 搜索框、来源筛选、平铺/分组视图合并为一行；分组 = 用户 tag + 来源集合（按上游
+  仓库自动聚合），未归类兜底可见。
+- **组开关（三态）** —— 每个分组头部一个滑动开关，一键启用/禁用整组；关闭时若成员在其他组开启，
+  弹窗询问（全部关闭 / 保留开启 → 该组开关进入半开混合态）。只读技能跳过并逐名报告。
 - **启用 / 禁用** —— 禁用时把 `SKILL.md` 重命名移出发现范围（记录在 sidecar 文件中），重启后仍然
   生效且可一键恢复。文件从不删除。
+- **来源跟踪** —— 从 GitHub 导入（市场源或直接地址）的技能记录上游 repo 与 commit 快照；按来源
+  检查更新（每来源 1–2 次 GitHub API 请求，5 分钟节流）、选择同步（确认覆盖）、上游删除跟进移入
+  可恢复的回收站。删除后再恢复的技能会保留来源与场景归属（回收站条目里存有快照）。
+  个人技能（无来源记录）不跟踪。
+- **市场（codex 式）** —— 内置市场目录（精选仓库一键添加）+ 自定义仓库源（owner/repo 或 GitHub
+  链接），扫描 `skills/` 与 `design-templates/` 根目录，一键导入。每个市场源一行聚合显示
+  「已装 N / 可更新 N / 上游已删 N」，顶部支持「检查全部」与「全部更新」（逐个同步，单个来源
+  失败不影响其他，汇总报告）。
 - **技能详情** —— 直接从磁盘读取技能的渲染正文。
 - **发现诊断** —— 目录会逐项报告技能被忽略的原因（缺 YAML frontmatter、缺 `name`/`description`、
   非法名称）。
 - **新建技能向导** —— 在 GUI 里把合法技能脚手架写入 `~/.dsh/skills` 或 `~/.agents/skills`。
 - **触发统计** —— 面板显示每个技能被实际调用的次数，数据来自会话日志（可选；没有 session-query
   的部署直接省略该数据）。
-- **设置卡片** —— 在 **设置 → 插件 → Skill Hub** 启用插件、开关向 Agent 的公告。
+- **设置卡片** —— 在 **设置 → 插件 → Skill Hub** 启用插件、开关向 Agent 的公告、调整面板显示偏好。
 
 ## 工作原理
 
 ```text
 src/
 ├── index.ts            host 入口：inject [webServer, skills, systemPrompt]；系统提示公告
-├── routes.ts           /api/skill-hub/{catalog,skill,toggle,create,stats,config}（仅回环访问）
-├── store.ts            sidecar 状态 ~/.dsh/dsh-skill-hub.json（禁用清单 + 运行时配置，原子写）
-├── skillfs.ts          根目录解析 / 开关重命名 / 脚手架 / 诊断扫描 / frontmatter 解析
+├── routes.ts           /api/skill-hub/{catalog,skill,toggle,toggle-batch,create,stats,config,
+│                       groups,tag*,market*,repo*,sources*,update}（仅回环访问）
+├── store.ts            sidecar 状态 v3 ~/.dsh/dsh-skill-hub.json（禁用、tag、sources、市场源、
+│                       回收站、运行时配置；v1→v2→v3 版本化迁移）
+├── repo.ts             GitHub 发现/导入 + 来源跟踪（最新 commit、tree 差异、manifest）
+├── skillfs.ts          根目录解析 / 开关重命名 / 回收站 & 恢复 / 脚手架 / 诊断扫描
 ├── stats.ts            触发统计：会话日志 → 每技能调用次数（可选 sessionQuery）
 ├── protocol.ts         host ↔ browser 共享 API 契约（类型 + 端点表）
-└── client/             browser 半边：设置卡片 + 技能中枢面板（React，CSS Modules）
+└── client/             browser 半边：设置卡片 + 技能中枢面板（React，CSS Modules，苹果风）
 ```
 
 - **宿主半边** 只用官方 SDK：`ctx.skills.snapshot()/get()`、`ctx.webServer.register()`、
@@ -206,11 +284,18 @@ dsh plugin --profile web add dsh-skill-hub
 
 在 dsh Web GUI 打开 **设置 → 技能**（Skill Hub）：
 
-- **浏览** —— 完整目录，可搜索，按来源或 Sets 分组。
+- **浏览** —— 完整目录，可搜索；搜索框、来源筛选、平铺/分组视图合并为一行。
+- **分组** —— 用户标签分组与来源组（上游仓库）。分组头部有三态滑动开关（开 / 半开 / 关），关闭时
+  若影响在其他分组开启的技能会弹窗确认（全部关闭 / 保留开启）。
+- **市场** —— 内置市场目录（精选仓库一键添加）+ 自定义来源（添加仓库源 → 扫描 → 一键安装）或直接
+  输入仓库地址；每次导入都记录上游 repo/commit。每个市场源行显示已装 / 可更新 / 上游已删数量；
+  「检查全部」一次刷新所有来源，「全部更新」一次同步所有待更新来源。
+- **回收站** —— 上游删除跟进移除（或手动删除）的技能进入可恢复的回收站；恢复时自动挂回来源与
+  场景分组。
 - **开关** —— 启用/禁用任意用户可写根下的技能；被禁用的技能单独列出，可随时重新启用。
 - **诊断** —— 发现诊断解释某个技能为什么没有出现。
 - **新建** —— 从表单脚手架一个新技能，立即开始编写。
-- **统计** —— 有 session-query 数据时显示每个技能的调用次数。
+- **统计** —— 有 session-query 数据时显示每个技能的调用次数；分组标题汇总。
 
 插件自身的开关在 **设置 → 插件 → Skill Hub** 卡片上：
 
@@ -218,6 +303,10 @@ dsh plugin --profile web add dsh-skill-hub
 | --- | --- |
 | Enable plugin | 总开关：路由、provider 与公告随之启用。 |
 | Announce to agent | 在系统提示中加入本插件说明，用户提到技能管理时 Agent 知道如何协作。 |
+| 模型/用户圆点颜色 | 覆盖面板中蓝色/绿色调用圆点的颜色。 |
+| 显示调用次数 | 有会话统计时显示每个技能的调用次数角标。 |
+| 显示最近调用时间 | 在技能行显示相对最近调用时间。 |
+| 显示分组汇总 | 在分组标题后汇总调用次数与最近调用时间。 |
 
 ## HTTP API
 
@@ -225,31 +314,55 @@ dsh plugin --profile web add dsh-skill-hub
 
 | 端点 | 方法 | 用途 |
 | --- | --- | --- |
-| `/api/skill-hub/catalog` | GET | 完整目录：技能、禁用列表、发现诊断、Sets。 |
+| `/api/skill-hub/catalog` | GET | 完整目录：技能、禁用列表、发现诊断。 |
 | `/api/skill-hub/skill?name=` | GET | 单个技能详情（路径、provider、正文）。 |
 | `/api/skill-hub/toggle` | POST | 启用/禁用可写技能（`{name, enabled}`）。 |
+| `/api/skill-hub/toggle-batch` | POST | 一次写入整组启停（`{names, enabled}`）。 |
 | `/api/skill-hub/create` | POST | 脚手架新技能（`{name, description?, root?}`）。 |
 | `/api/skill-hub/stats` | GET | 每技能调用次数（无 session-query 时不可用）。 |
-| `/api/skill-hub/config` | GET/POST | 插件运行时配置（`{enabled, announceToAgent}`）；`null` 清除覆盖。 |
+| `/api/skill-hub/config` | GET/POST | 插件运行时配置（`{enabled, announceToAgent}` 等）；`null` 清除覆盖。 |
+| `/api/skill-hub/groups` | GET | 用户标签 + 来源组 + origin 映射。 |
+| `/api/skill-hub/tag` | POST | 新建/重命名标签分组。 |
+| `/api/skill-hub/tag/delete` | POST | 删除标签分组。 |
+| `/api/skill-hub/tag/members` | POST | 设置某标签的成员列表。 |
+| `/api/skill-hub/market` | GET | 用户的市场源仓库列表。 |
+| `/api/skill-hub/market/source` | POST | 添加市场源（`{repo}`）。 |
+| `/api/skill-hub/market/source/delete` | POST | 移除市场源。 |
+| `/api/skill-hub/repo?repo=` | GET | 发现 GitHub 仓库中可导入的技能。 |
+| `/api/skill-hub/repo/import` | POST | 导入所选仓库技能（记录来源）。 |
+| `/api/skill-hub/sources` | GET | 来源记录、派生 origin/集合、回收站。 |
+| `/api/skill-hub/sources/check` | POST | 检查上游更新（5 分钟节流）。 |
+| `/api/skill-hub/sources/sync` | POST | 同步某来源所选（或全部）技能。 |
+| `/api/skill-hub/sources/delete` | POST | 跟进上游删除（移入回收站）。 |
+| `/api/skill-hub/sources/restore` | POST | 从回收站恢复技能。 |
+| `/api/skill-hub/sources/trash/clear` | POST | 永久清空回收站。 |
+| `/api/skill-hub/update` | GET | 检查插件自身最新发布。 |
 
 ## 开发
 
 ```bash
 npm install
 npm run typecheck   # tsc --noEmit
-npm test            # vitest（5 个套件，54 个用例）
+npm test            # vitest（9 个套件，151 个用例）
 npm run build       # tsc 声明 + tsdown 双半边产物（lib/index.js + lib/client.js）
 npm pack            # 生成可安装的 tgz（dsh-skill-hub-<version>.tgz）
 ```
 
+> **本地联调注意：** 不要在同一 `$DSH_HOME` 和同一项目目录下同时运行两个
+> `dsh web` 实例。dsh rc.6 没有跨进程会话日志锁，第二个实例恢复同一会话时会
+> 写入重复 `seq`，导致 `corrupt session log: seq gap in committed region`。
+> 需要预览实例时先停旧实例，或使用独立的 `DSH_HOME`。
+
 测试套件覆盖路由家族（含 config 路由与禁用闸门）、sidecar 存储、技能文件系统操作、注册表
 provider 与触发统计。
 
 ## 路线图
 
 - **v0.1.0** —— 完整目录、启用/禁用、诊断、新建向导、设置卡片。
-- **v0.2.0** —— 触发统计 ✅ · Sets 分组 ✅ · 回收站删除（待做）。
-- **v0.3.0** —— SSE 实时推送替代轮询。
+- **v0.2.0** —— 触发统计 · tag/场景与来源集合分组（三态开关）· 上游来源跟踪（检查 / 同步 /
+  跟进删除进回收站）· codex 式市场（内置目录、每源状态徽章、一键全部更新）· 删除→恢复保留
+  来源与场景归属。
+- **Next** —— SSE 实时推送替代轮询 · 内置市场扩充 · 自动更新选项。
 
 ## License