dsh-skill-hub 0.1.0 → 0.2.1

package/CONTRIBUTING.md

@@ -14,7 +14,7 @@ Please keep both halves on official APIs — no dsh source patches.
 ```bash
 npm install
 npm run typecheck   # tsc --noEmit
-npm test            # vitest (54 tests across 5 suites)
+npm test            # vitest (152 tests across 8 suites)
 npm run build       # tsc declarations + tsdown bundles (lib/index.js + lib/client.js)
 ```
 

package/README.md

@@ -1,15 +1,44 @@
 # dsh-skill-hub
 
-<details>
-<summary><b>English</b>（英文）— 点击在本页展开 / 收起，无需跳转</summary>
+[中文版](README.zh.md) | [English](README.md)
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/dsh-skill-hub"><img alt="npm version" src="https://img.shields.io/npm/v/dsh-skill-hub?color=2f81f7&label=npm"></a>
+  <img alt="downloads" src="https://img.shields.io/npm/dm/dsh-skill-hub">
+  <img alt="license" src="https://img.shields.io/npm/l/dsh-skill-hub">
+  <img alt="node" src="https://img.shields.io/badge/node-%3E%3D22.19-339933">
+  <a href="https://github.com/cheshireez/dsh-skill-hub/actions"><img alt="CI" src="https://img.shields.io/github/actions/workflow/status/cheshireez/dsh-skill-hub/ci.yml?branch=main"></a>
+</p>
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/cheshireez/dsh-skill-hub/main/promo/real-skill-hub.png" alt="dsh-skill-hub panel" width="640">
+</p>
 
 **In-GUI skill hub for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (dsh).**
 Browse the full local skill catalog from the official `ctx.skills` registry, toggle skills on/off, inspect
-their bodies, understand why a skill is missing, and scaffold new ones — all from the dsh web GUI.
+their bodies, understand why a skill is missing, install from the built-in market, and scaffold new
+ones — all from the dsh web GUI.
 
 > A skill manager beyond the read-only browser. The host half runs in the dsh process and speaks only
 > official SDKs; the browser half renders inside the GUI through official slots. No dsh source changes.
 
+> **Disclaimer** — source tracking, market sync, and the restorable trash are implemented by this
+> plugin; they are not guarantees of the dsh runtime itself. Screenshots may lag the latest UI.
+
+## Table of Contents
+
+- [Why another skill manager?](#why-another-skill-manager)
+- [Features](#features)
+- [Quick start](#quick-start)
+- [How it works](#how-it-works)
+- [Usage](#usage)
+- [Troubleshooting](#troubleshooting)
+- [HTTP API](#http-api)
+- [Development](#development)
+- [Roadmap](#roadmap)
+- [Community](#community)
+- [License](#license)
+
 ## Why another skill manager?
 
 [dsh-skill-manager](https://www.npmjs.com/package/dsh-skill-manager) is a read-only browser,
@@ -20,71 +49,158 @@ their bodies, understand why a skill is missing, and scaffold new ones — all f
 | Capability | dsh-skill-manager (read-only) | **dsh-skill-hub (this plugin)** |
 | --- | --- | --- |
 | Catalog source | self-scans disk, user roots only | official `ctx.skills` registry: project / custom / user / bundled + third-party providers |
-| Browse / search | ✅ | ✅ (group by source **or** by Sets) |
-| Enable / disable | ❌ | ✅ (renames `SKILL.md`; file never deleted, always restorable) |
+| Browse / search | ✅ | ✅ (group by **tags** or by **source repo**, search + filter in one row) |
+| Workspace skills | ❌ | ✅ (enter a project path → its `.dsh/skills` & `.agents/skills` appear, read-only) |
+| Enable / disable | ❌ | ✅ (renames `SKILL.md`; file never deleted, always restorable; per-group tri-state switches) |
 | Inspect skill body | ❌ | ✅ |
 | Discovery diagnostics | ❌ | ✅ (missing frontmatter / missing `name`/`description` / invalid name — each reason listed) |
 | New-skill wizard | ❌ | ✅ (writes to `~/.dsh/skills` or `~/.agents/skills`) |
-| Invocation statistics | ❌ | ✅ (per-skill call counts read from session logs) |
-| Sets grouping | ❌ | ✅ (frontmatter `sets`; skills without sets go to “Uncategorized”) |
+| Invocation statistics | ❌ | ✅ (per-skill call counts read from session logs; group headers summarize) |
+| Upstream source tracking | ❌ | ✅ (repo + commit snapshot; check updates, sync, follow upstream deletion into a restorable trash; delete/restore keeps source + scene membership) |
+| Market | ❌ | ✅ (unified market list: built-in curated catalog + custom repos; scan, one-click import, per-source installed/updatable badges, one-click update-all) |
 | Live updates | — | filesystem-provider watcher, with a 5s panel poll as fallback |
 
 ## Features
 
+### Catalog & switches — manage local skills
+
+> **Browse everything, change anything you own.** The full registry is visible and searchable;
+> writes are confined to your user-level roots and never delete files.
+
 - **Full catalog** — every skill the official registry knows: project `.dsh/skills` & `.agents/skills`,
   custom roots, user `~/.dsh/skills` & `~/.agents/skills`, bundled, and third-party providers.
-- **Search & grouping** — filter by name, group by source or by frontmatter `sets`.
-- **Enable / disable** — disable renames `SKILL.md` out of discovery (tracked in a sidecar file), so the
-  change survives restarts and is trivially reversible. Files are never deleted.
-- **Skill detail** — read a skill’s rendered body straight from disk.
-- **Discovery diagnostics** — the catalog reports *why* a skill was ignored (missing YAML frontmatter,
-  missing `name`/`description`, illegal name), per skill.
+- **Search & grouping** — one row combines search, source filter, and flat/grouped view; groups are
+  user **tags (scenes)** plus **source collections** (auto-aggregated by upstream repo); uncategorized
+  stays visible.
+- **Workspace discovery** — known workspaces (from dsh’s workspace registry) are merged into the
+  default view and grouped in a project-level tree (per project, optionally split into
+  `.dsh`/`.agents`); the header path field pins the view to one workspace.
+- **Group switches** — every group header carries a sliding switch: enable/disable the whole group in
+  one click. Closing a group whose member is also enabled elsewhere opens a conflict dialog (close all /
+  keep on → the group falls into a half-filled mixed state). Read-only skills are skipped with
+  per-name reports.
+- **Enable / disable** — disable renames `SKILL.md` out of discovery (tracked in a sidecar file), so
+  the change survives restarts and is trivially reversible. Files are never deleted.
+- **Skill detail** — read a skill’s body straight from disk, with its source card (repo, commit,
+  check/sync/follow-delete actions).
 - **New-skill wizard** — scaffold a valid skill into `~/.dsh/skills` or `~/.agents/skills` from the GUI.
-- **Invocation statistics** — the panel shows how many times each skill was actually called, read from
-  session logs (optional; absent session-query deployments simply omit the data).
-- **Settings card** — enable the plugin and toggle the agent announcement from **Settings → 插件 → Skill Hub**.
+
+### Market & updates
+
+> **Add a repo, install in one click, stay updated forever.** Imports are tracked upstream
+> automatically; updates surface per source and can be applied all at once.
+
+- **Unified market list** — one list on the Market tab: built-in catalog entries show a description
+  and an **Add** button until added; once added (or custom sources entered by hand) the same row
+  becomes a full source row. No duplicate entries.
+- **Scan → install** — scan any repo’s `skills/` and `design-templates/` roots, tick the skills you
+  want, import with one click. Imports record the upstream repo/commit automatically.
+- **State badges** — every source row aggregates its state: installed count, updatable count, and
+  deleted-upstream count.
+- **Check all / update all** — “Check all” refreshes every source (release + skill diffs); “Update
+  all” syncs every source with pending updates in one pass (per-source failures are reported, never
+  fatal). A daily auto-check (24h, timestamped in localStorage) covers the “forgot to click” case;
+  manual buttons are never throttled.
+- **Source tracking** — per-source check (1–2 GitHub API requests, 5-minute server throttle), sync
+  selected skills (overwrite confirm), and follow upstream deletion into a restorable trash.
+  Deleting and restoring a tracked skill keeps its source and scene membership (snapshotted in the
+  trash entry). Personal skills (no source) are never tracked.
+- **Self-update check** — the panel header checks the plugin’s own latest GitHub release.
+
+### Stats & diagnostics
+
+> **Know what your agents actually use.** Invocation counts come from your own session logs —
+> no telemetry leaves the machine.
+
+- **Invocation statistics** — per-skill call counts and last-used times read from session logs
+  (optional; absent session-query deployments simply omit the data); group headers summarize.
+- **Discovery diagnostics** — the catalog reports *why* a skill was ignored (missing YAML
+  frontmatter, missing `name`/`description`, illegal name), per skill.
+- **Settings card** — enable the plugin, toggle the agent announcement, and adjust panel display
+  preferences from **Settings → 插件 → Skill Hub**.
+
+## Quick start
+
+```bash
+dsh plugin --profile web add dsh-skill-hub
+```
+
+Restart `dsh web`, open **Settings → 技能**, and on the **Market** tab pick a repo from the
+built-in catalog (or paste an `owner/repo`), scan it, tick the skills you want, and import. They are
+tracked upstream from then on: check for updates and sync with one click.
+
+A skill is just a directory with a `SKILL.md` — the panel can also scaffold one for you:
+
+```markdown
+---
+name: my-skill
+description: One line describing when the agent should use this skill.
+---
+# my-skill
+
+What the skill does, when to use it, and what output is expected.
+```
+
+Requires Node `^22.19.0 || >=24.0.0` and a dsh web deployment (`0.1.0-rc.7` SDK family).
 
 ## How it works
 
 ```text
-src/
-├── index.ts            host entry: inject [webServer, skills, systemPrompt]; system-prompt announcement
-├── routes.ts           /api/skill-hub/{catalog,skill,toggle,create,stats,config} (loopback-only fence)
-├── store.ts            sidecar state ~/.dsh/dsh-skill-hub.json (disabled list + runtime config, atomic write)
-├── skillfs.ts          root resolution / toggle rename / scaffold / diagnostics / frontmatter parsing
-├── stats.ts            invocation stats: session logs → per-skill call counts (optional sessionQuery)
-├── protocol.ts         host ↔ browser shared API contract (types + endpoint table)
-└── client/             browser half: settings card + skill hub panel (React, CSS Modules)
+ GitHub repo ──scan / import──▶ ~/.dsh/skills (user level)
+      ▲                            │
+      │ check / sync / delete      ▼
+      │                ctx.skills registry ◀── skill-hub provider (registers user + project roots)
+      │                            │ snapshot / get
+      └────── daily auto-check     ▼
+                      /api/skill-hub/* routes ──▶ Browser panel (Settings → 技能)
 ```
 
+| File | Responsibility |
+| --- | --- |
+| `src/index.ts` | host entry: inject `[webServer, skills, systemPrompt, settings]`; registers the `dsh-skill-hub` settings namespace; system-prompt announcement |
+| `src/routes.ts` | declarative route wrapper: `/api/skill-hub/*` (loopback / method / master-switch / JSON-body fences handled once; handlers stay business-only) |
+| `src/store.ts` | sidecar state `~/.dsh/dsh-skill-hub.json` v3 (disabled, tags, sources, market sources, trash; versioned v1→v2→v3 migrations) |
+| `src/repo.ts` | GitHub discovery/import + source tracking (latest commit, tree diff, manifest) |
+| `src/skillfs.ts` | root resolution / toggle rename / trash & restore / scaffold / diagnostics |
+| `src/stats.ts` | invocation stats: session logs → per-skill call counts (optional sessionQuery) |
+| `src/protocol.ts` | host ↔ browser shared API contract (types + endpoint table) |
+| `src/client/` | browser half: settings card + skill hub panel. State and flows live in `useSkillHub.ts`; views are thin components (`SourcesView` / `ScenesView` / `MarketView` / `SkillRow` / dialogs / …). CSS Modules, Apple-style |
+
 - **Host half** uses only official SDKs: `ctx.skills.snapshot()/get()`, `ctx.webServer.register()`,
   `ctx.systemPrompt.section()`. No dsh source is modified.
 - **Browser half** mounts through official slots: a **Settings → 技能** section and a
   **Settings → 插件 → Skill Hub** configuration card.
-- **Configuration** is plugin-owned. The host’s settings service refuses to expose third-party
-  namespaces to the web client, so the settings card reads/writes the plugin’s own
-  `/api/skill-hub/config` route instead of the settings transport — no namespace mounting required.
+- **Configuration** is dsh-native. Since rc.7 the host serves every registered settings namespace to
+  the web client (the old namespace allowlist is gone), so the plugin registers a `dsh-skill-hub`
+  settings namespace and the card reads/writes it through the official settings transport — the
+  configurable-plugins tab dispatches the card by that namespace, and the host consumes the same
+  resolved value (single source of truth). Installations upgraded from the older sidecar-configured
+  build migrate their saved config into the namespace once.
 
-## Installation
+## Usage
 
-From the dsh web profile:
+Open **Settings → 技能** (Skill Hub) in the dsh web GUI. Three tabs:
 
-```bash
-dsh plugin --profile web add dsh-skill-hub
-```
+- **来源 (Sources)** — the skill list, flat or grouped: a project-level tree (workspaces merged by
+  default, per project optionally split into `.dsh`/`.agents`) plus source collections and
+  uncategorized. Search, source filter and sort share one row; group headers carry tri-state
+  switches; the source-group badge doubles as the re-check entry. *(see the screenshot at the top)*
+- **场景 (Scenes)** — your own enable/disable units (e.g. a “Godot” scene vs a “Java” scene): create
+  tags, assign members, and flip a whole scene on/off with one switch.
 
-Requires Node `^22.19.0 || >=24.0.0` and a dsh web deployment (`0.1.0-rc.6` SDK family).
-
-## Usage
+  <p align="center">
+    <img src="https://raw.githubusercontent.com/cheshireez/dsh-skill-hub/main/promo/real-skill-hub-scenes.png" alt="场景 tab" width="560">
+  </p>
+- **市场 (Market)** — one unified list: built-in curated repos (Add button until added) and your
+  custom sources; scan to install, check for updates, update all in one pass.
 
-Open **Settings → 技能** (Skill Hub) in the dsh web GUI:
+  <p align="center">
+    <img src="https://raw.githubusercontent.com/cheshireez/dsh-skill-hub/main/promo/real-skill-hub-catalog.png" alt="市场 tab" width="560">
+  </p>
 
-- **Browse** — the full catalog, searchable and grouped by source or Sets.
-- **Toggle** — enable/disable any skill from a user-writable root; disabled skills list separately and
-  can be re-enabled any time.
-- **Diagnose** — the discovery diagnostics explain why a skill is not showing up.
-- **New skill** — scaffold a new skill from the form and start writing.
-- **Statistics** — per-skill invocation counts when session-query data is available.
+Everywhere: **work space field** in the header (enter a project path to see its read-only project
+skills), **trash** section (restorable, restores source + scene membership), **diagnostics** section
+(why a skill is missing), and the **new-skill** form.
 
 The plugin’s own switches live on the **Settings → 插件 → Skill Hub** card:
 
@@ -92,6 +208,23 @@ The plugin’s own switches live on the **Settings → 插件 → Skill Hub** ca
 | --- | --- |
 | Enable plugin | Master switch: routes, provider, and announcement all go live with this. |
 | Announce to agent | Adds a system-prompt section so agents know how to collaborate when users mention skill management. |
+| Model / user dot colors | Override the blue/green invocation dot colors used in the panel. |
+| Show invocation count | Show per-skill call-count chips when session stats are available. |
+| Show last-used time | Show relative last-used time on each skill row. |
+| Show group summaries | Show count/last-used summaries after group titles. |
+
+## Troubleshooting
+
+- **⚠️ `duplicate loader entry id: skill-hub`** — the plugin was mounted twice (for example both
+  through `dsh plugin add` and a local `file:` install). Keep exactly one installation method; on
+  upgrade, replace rather than add.
+- **A skill is not in the catalog** — open the **发现诊断** (diagnostics) section: missing
+  frontmatter, a name mismatch with the directory, or an over-short description are each listed with
+  their reason.
+- **Update check shows nothing** — the server throttles checks (5 min per source) and the panel
+  auto-checks once per day; manual buttons are never throttled.
+- **Read-only boundary** — only user-level skills (`~/.dsh/skills`, `~/.agents/skills`) are writable;
+  project, bundled, and runtime skills are displayed read-only.
 
 ## HTTP API
 
@@ -99,158 +232,70 @@ All endpoints are **loopback-only** (`127.0.0.1`/`localhost`) and JSON.
 
 | Endpoint | Method | Purpose |
 | --- | --- | --- |
-| `/api/skill-hub/catalog` | GET | Full catalog: skills, disabled list, discovery diagnostics, Sets. |
-| `/api/skill-hub/skill?name=` | GET | One skill’s detail (path, provider, body). |
+| `/api/skill-hub/catalog?cwd=` | GET | Full catalog: skills, disabled list, discovery diagnostics (`cwd` adds project skills). |
+| `/api/skill-hub/skill?name=&cwd=` | GET | One skill’s detail (path, provider, body). |
+| `/api/skill-hub/skill/delete` | POST | Move a skill into the restorable trash (snapshots source + scenes). |
 | `/api/skill-hub/toggle` | POST | Enable/disable a writable skill (`{name, enabled}`). |
+| `/api/skill-hub/toggle-batch` | POST | Enable/disable a whole group in one write (`{names, enabled}`). |
 | `/api/skill-hub/create` | POST | Scaffold a new skill (`{name, description?, root?}`). |
 | `/api/skill-hub/stats` | GET | Per-skill invocation counts (unavailable when session-query is absent). |
 | `/api/skill-hub/config` | GET/POST | Plugin runtime config (`{enabled, announceToAgent}`); `null` clears an override. |
+| `/api/skill-hub/groups` | GET | User tags + source collections + origin map. |
+| `/api/skill-hub/tag` | POST | Create/rename a tag group. |
+| `/api/skill-hub/tag/delete` | POST | Delete a tag group. |
+| `/api/skill-hub/tag/members` | POST | Set a tag’s member list. |
+| `/api/skill-hub/market` | GET | The user’s market source repos. |
+| `/api/skill-hub/market/source` | POST | Add a market source (`{repo}`). |
+| `/api/skill-hub/market/source/delete` | POST | Remove a market source. |
+| `/api/skill-hub/market/source/ref` | POST | Pin a market source to a release/branch ref. |
+| `/api/skill-hub/market/check` | GET | Check market sources for newer releases (throttled). |
+| `/api/skill-hub/market/source/sync` | POST | Align a market source to its pinned ref; returns tracked skills. |
+| `/api/skill-hub/repo?repo=` | GET | Discover importable skills in a GitHub repo. |
+| `/api/skill-hub/repo/import` | POST | Import selected repo skills (records the source + default scene). |
+| `/api/skill-hub/sources` | GET | Source records, derived origins/collections, trash. |
+| `/api/skill-hub/sources/check` | POST | Check upstream updates (throttled, 5 min). |
+| `/api/skill-hub/sources/sync` | POST | Sync selected (or all) skills of a source. |
+| `/api/skill-hub/sources/delete` | POST | Follow upstream deletion (moves to trash). |
+| `/api/skill-hub/sources/restore` | POST | Restore a trashed skill (re-attaches source + scenes). |
+| `/api/skill-hub/sources/trash/clear` | POST | Permanently clear the trash. |
+| `/api/skill-hub/update` | GET | Check the plugin’s own latest release. |
 
 ## Development
 
 ```bash
 npm install
 npm run typecheck   # tsc --noEmit
-npm test            # vitest (54 tests across 5 suites)
+npm test            # vitest (152 tests across 8 suites)
 npm run build       # tsc declarations + tsdown bundles (lib/index.js + lib/client.js)
 npm pack            # build the installable tarball (dsh-skill-hub-<version>.tgz)
 ```
 
+> **Local testing:** do not run two `dsh web` instances against the same
+> `$DSH_HOME` and the same project directory at the same time. dsh rc releases have no
+> cross-process session-log lock, and a second instance resuming the same
+> session can write duplicate `seq` rows (`corrupt session log: seq gap in
+> committed region`). Stop the old instance first, or give the preview its own
+> `DSH_HOME`.
+
 The test suites cover the route family (including the config route and the disabled gate), the sidecar
 store, skill filesystem operations, the registry provider, and invocation statistics.
 
 ## Roadmap
 
-- **v0.1.0** — full catalog, enable/disable, diagnostics, new-skill wizard, settings card.
-- **v0.2.0** — invocation statistics ✅ · Sets grouping ✅ · recycle-bin delete (pending).
-- **v0.3.0** — SSE realtime push to replace polling.
-
-## License
-
-MIT — see [LICENSE](LICENSE).
-
-</details>
-
-**面向 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)（dsh）的图形化技能中枢。**
-在 dsh Web GUI 里浏览官方 `ctx.skills` 注册表提供的完整本地技能目录，启用/禁用技能、查看正文、
-排查技能为什么没出现、并新建技能。
-
-> 一个不止于只读浏览器的技能管理器。宿主半边运行在 dsh 进程内，只使用官方 SDK；浏览器半边通过
-> 官方槽位渲染进 GUI。不改任何 dsh 源码。
+- **v0.1.0** *(released)* — full catalog, enable/disable, diagnostics, new-skill wizard, settings card.
+- **v0.2.0** *(released)* — invocation statistics · tags/scenes + source-collection grouping with
+  tri-state switches · upstream source tracking (check / sync / follow-delete into a restorable
+  trash) · unified market with built-in catalog, per-source state badges, and one-click
+  update-all · delete/restore keeps source + scene membership.
+- **Built, pending release** — workspace discovery (project-path field → read-only project skills).
+- **Planned** — SSE realtime push to replace polling · market catalog expansion · optional
+  auto-update.
 
-## 为什么还需要一个技能管理器？
+## Community
 
-[dsh-skill-manager](https://www.npmjs.com/package/dsh-skill-manager) 是只读浏览器；
-[dsh-skill-importer](https://github.com/saitamahang/dsh-skill-importer) 和
-[dsh-find-skill](https://github.com/Moximxxx/dsh-find-skill) 专注导入与市场式安装。
-**dsh-skill-hub 补上两者之间的空白：一份你可以真正管理的完整目录。**
-
-| 能力 | dsh-skill-manager（只读版） | **dsh-skill-hub（本插件）** |
-| --- | --- | --- |
-| 目录来源 | 自扫盘，仅用户根 | 官方 `ctx.skills` 注册表：项目 / 自定义 / 用户 / 内置 + 第三方 provider |
-| 浏览 / 搜索 | ✅ | ✅（按来源或按 Sets 分组） |
-| 启用 / 禁用 | ❌ | ✅（重命名 `SKILL.md`；文件不删除，可随时恢复） |
-| 查看技能正文 | ❌ | ✅ |
-| 发现诊断 | ❌ | ✅（缺 frontmatter / 缺 `name`/`description` / 非法名称，逐项列明原因） |
-| 新建技能向导 | ❌ | ✅（写入 `~/.dsh/skills` 或 `~/.agents/skills`） |
-| 触发统计 | ❌ | ✅（从会话日志读每技能实际调用次数） |
-| Sets 分组 | ❌ | ✅（frontmatter `sets`；无 sets 归入「未归类」） |
-| 实时更新 | — | 文件系统 provider 的 watcher 驱动，面板 5s 轮询兜底 |
-
-## 功能
-
-- **完整目录** —— 官方注册表知道的每个技能：项目 `.dsh/skills` 与 `.agents/skills`、自定义根、
-  用户 `~/.dsh/skills` 与 `~/.agents/skills`、内置、以及第三方 provider。
-- **搜索与分组** —— 按名称过滤，按来源或 frontmatter `sets` 分组。
-- **启用 / 禁用** —— 禁用时把 `SKILL.md` 重命名移出发现范围（记录在 sidecar 文件中），重启后仍然
-  生效且可一键恢复。文件从不删除。
-- **技能详情** —— 直接从磁盘读取技能的渲染正文。
-- **发现诊断** —— 目录会逐项报告技能被忽略的原因（缺 YAML frontmatter、缺 `name`/`description`、
-  非法名称）。
-- **新建技能向导** —— 在 GUI 里把合法技能脚手架写入 `~/.dsh/skills` 或 `~/.agents/skills`。
-- **触发统计** —— 面板显示每个技能被实际调用的次数，数据来自会话日志（可选；没有 session-query
-  的部署直接省略该数据）。
-- **设置卡片** —— 在 **设置 → 插件 → Skill Hub** 启用插件、开关向 Agent 的公告。
-
-## 工作原理
-
-```text
-src/
-├── index.ts            host 入口：inject [webServer, skills, systemPrompt]；系统提示公告
-├── routes.ts           /api/skill-hub/{catalog,skill,toggle,create,stats,config}（仅回环访问）
-├── store.ts            sidecar 状态 ~/.dsh/dsh-skill-hub.json（禁用清单 + 运行时配置，原子写）
-├── skillfs.ts          根目录解析 / 开关重命名 / 脚手架 / 诊断扫描 / frontmatter 解析
-├── stats.ts            触发统计：会话日志 → 每技能调用次数（可选 sessionQuery）
-├── protocol.ts         host ↔ browser 共享 API 契约（类型 + 端点表）
-└── client/             browser 半边：设置卡片 + 技能中枢面板（React，CSS Modules）
-```
-
-- **宿主半边** 只用官方 SDK：`ctx.skills.snapshot()/get()`、`ctx.webServer.register()`、
-  `ctx.systemPrompt.section()`。不修改 dsh 源码。
-- **浏览器半边** 通过官方槽位挂载：一个 **设置 → 技能** 分区，和一个
-  **设置 → 插件 → Skill Hub** 配置卡片。
-- **配置为插件自有**。宿主 settings 服务拒绝向 Web 客户端暴露第三方命名空间，因此设置卡片读写插件
-  自己的 `/api/skill-hub/config` 路由，而不走 settings 传输——无需挂载命名空间。
-
-## 安装
-
-在 dsh web profile 中：
-
-```bash
-dsh plugin --profile web add dsh-skill-hub
-```
-
-要求 Node `^22.19.0 || >=24.0.0` 与 dsh web 部署（`0.1.0-rc.6` SDK 家族）。
-
-## 使用
-
-在 dsh Web GUI 打开 **设置 → 技能**（Skill Hub）：
-
-- **浏览** —— 完整目录，可搜索，按来源或 Sets 分组。
-- **开关** —— 启用/禁用任意用户可写根下的技能；被禁用的技能单独列出，可随时重新启用。
-- **诊断** —— 发现诊断解释某个技能为什么没有出现。
-- **新建** —— 从表单脚手架一个新技能，立即开始编写。
-- **统计** —— 有 session-query 数据时显示每个技能的调用次数。
-
-插件自身的开关在 **设置 → 插件 → Skill Hub** 卡片上：
-
-| 字段 | 含义 |
-| --- | --- |
-| Enable plugin | 总开关：路由、provider 与公告随之启用。 |
-| Announce to agent | 在系统提示中加入本插件说明，用户提到技能管理时 Agent 知道如何协作。 |
-
-## HTTP API
-
-所有端点**仅限回环**（`127.0.0.1`/`localhost`），返回 JSON。
-
-| 端点 | 方法 | 用途 |
-| --- | --- | --- |
-| `/api/skill-hub/catalog` | GET | 完整目录：技能、禁用列表、发现诊断、Sets。 |
-| `/api/skill-hub/skill?name=` | GET | 单个技能详情（路径、provider、正文）。 |
-| `/api/skill-hub/toggle` | POST | 启用/禁用可写技能（`{name, enabled}`）。 |
-| `/api/skill-hub/create` | POST | 脚手架新技能（`{name, description?, root?}`）。 |
-| `/api/skill-hub/stats` | GET | 每技能调用次数（无 session-query 时不可用）。 |
-| `/api/skill-hub/config` | GET/POST | 插件运行时配置（`{enabled, announceToAgent}`）；`null` 清除覆盖。 |
-
-## 开发
-
-```bash
-npm install
-npm run typecheck   # tsc --noEmit
-npm test            # vitest（5 个套件，54 个用例）
-npm run build       # tsc 声明 + tsdown 双半边产物（lib/index.js + lib/client.js）
-npm pack            # 生成可安装的 tgz（dsh-skill-hub-<version>.tgz）
-```
-
-测试套件覆盖路由家族（含 config 路由与禁用闸门）、sidecar 存储、技能文件系统操作、注册表
-provider 与触发统计。
-
-## 路线图
-
-- **v0.1.0** —— 完整目录、启用/禁用、诊断、新建向导、设置卡片。
-- **v0.2.0** —— 触发统计 ✅ · Sets 分组 ✅ · 回收站删除（待做）。
-- **v0.3.0** —— SSE 实时推送替代轮询。
+- [Issues](https://github.com/cheshireez/dsh-skill-hub/issues) — bug reports and feature requests.
+- [Contributing](CONTRIBUTING.md) — development setup and contribution guidelines.
 
 ## License
 
-MIT —— 见 [LICENSE](LICENSE)。
+MIT — see [LICENSE](LICENSE).