dsh-skill-hub 0.3.13 → 0.3.15

package/lib/types/store/store.d.ts

@@ -97,6 +97,10 @@ export declare class SkillHubStore {
      * When `dir` is given, every baseline path under that skill directory is
      * dropped first, so files the upstream removed never linger in the
      * baseline and skew later update diffs.
+     *
+     * `dir` may be '' — a skill whose SKILL.md sits at the repo root. Its prefix
+     * is empty, so the whole baseline is replaced: that skill owns the tree, and
+     * keeping stale paths would make every later diff report "changed" forever.
      */
     mergeSourceManifest(repo: string, manifest: Record<string, number>, dir?: string): Promise<void>;
     /** skillName → collection name for every recorded origin (derived from sources). */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-skill-hub",
-  "version": "0.3.13",
+  "version": "0.3.15",
   "description": "In-GUI skill hub for DeepSeek Harness (dsh): browse the full local skill catalog from the official ctx.skills registry (every root + third-party providers), toggle skills on/off, inspect bodies, surface frontmatter diagnostics, and scaffold new skills — plus a codex-style skill market (built-in catalog, upstream update checks, one-click update-all) with tracked source sync. The full manager beyond the read-only dsh-skill-manager browser.",
   "type": "module",
   "engines": {
@@ -61,19 +61,7 @@
     ],
     "compatibility": {
       "dshVersions": [
-        "0.1.0-rc.7",
-        "0.1.1-rc.2",
-        "0.1.2-alpha.2",
-        "0.1.2-alpha.3",
-        "0.1.2-alpha.4",
-        "0.1.2-alpha.5",
-        "0.1.2-rc.1",
-        "0.1.3-alpha.2",
-        "0.1.5-alpha.1",
-        "0.1.5-alpha.2",
-        "0.1.5-rc.1",
-        "0.1.5-rc.2",
-        "0.1.6-alpha.1"
+        "0.1.7-alpha.1"
       ]
     },
     "capability": {
@@ -95,19 +83,20 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1 || ^4.0.2",
-    "@deepseek-ai/dsh-client-connection": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.2 <0.2.0-0 || >=0.1.2-alpha.2 <0.2.0-0 || >=0.1.2-alpha.3 <0.2.0-0 || >=0.1.2-alpha.4 <0.2.0-0 || >=0.1.2-alpha.5 <0.2.0-0 || >=0.1.2-rc.1 <0.2.0-0 || >=0.1.3-alpha.2 <0.2.0-0 || >=0.1.5-alpha.1 <0.2.0-0 || >=0.1.5-alpha.2 <0.2.0-0 || >=0.1.5-rc.1 <0.2.0-0 || >=0.1.5-rc.2 <0.2.0-0 || >=0.1.6-alpha.1 <0.2.0-0",
-    "@deepseek-ai/dsh-client-locale": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.2 <0.2.0-0 || >=0.1.2-alpha.2 <0.2.0-0 || >=0.1.2-alpha.3 <0.2.0-0 || >=0.1.2-alpha.4 <0.2.0-0 || >=0.1.2-alpha.5 <0.2.0-0 || >=0.1.2-rc.1 <0.2.0-0 || >=0.1.3-alpha.2 <0.2.0-0 || >=0.1.5-alpha.1 <0.2.0-0 || >=0.1.5-alpha.2 <0.2.0-0 || >=0.1.5-rc.1 <0.2.0-0 || >=0.1.5-rc.2 <0.2.0-0 || >=0.1.6-alpha.1 <0.2.0-0",
-    "@deepseek-ai/dsh-client-runtime": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.2 <0.2.0-0 || >=0.1.2-alpha.3 <0.2.0-0 || >=0.1.2-alpha.4 <0.2.0-0 || >=0.1.2-alpha.5 <0.2.0-0 || >=0.1.3-alpha.2 <0.2.0-0 || >=0.1.5-alpha.1 <0.2.0-0 || >=0.1.5-alpha.2 <0.2.0-0 || >=0.1.5-rc.1 <0.2.0-0 || >=0.1.5-rc.2 <0.2.0-0 || >=0.1.6-alpha.1 <0.2.0-0",
-    "@deepseek-ai/dsh-client-store": ">=0.1.2-alpha.2 <0.2.0-0 || >=0.1.2-alpha.3 <0.2.0-0 || >=0.1.2-alpha.4 <0.2.0-0 || >=0.1.2-alpha.5 <0.2.0-0 || >=0.1.2-rc.1 <0.2.0-0 || >=0.1.3-alpha.2 <0.2.0-0 || >=0.1.5-alpha.1 <0.2.0-0 || >=0.1.5-alpha.2 <0.2.0-0 || >=0.1.5-rc.1 <0.2.0-0 || >=0.1.5-rc.2 <0.2.0-0 || >=0.1.6-alpha.1 <0.2.0-0",
-    "@deepseek-ai/dsh-client-ui-input-trigger": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.2 <0.2.0-0 || >=0.1.2-alpha.2 <0.2.0-0 || >=0.1.2-alpha.3 <0.2.0-0 || >=0.1.2-alpha.4 <0.2.0-0 || >=0.1.2-alpha.5 <0.2.0-0 || >=0.1.2-rc.1 <0.2.0-0 || >=0.1.3-alpha.2 <0.2.0-0 || >=0.1.5-alpha.1 <0.2.0-0 || >=0.1.5-alpha.2 <0.2.0-0 || >=0.1.5-rc.1 <0.2.0-0 || >=0.1.5-rc.2 <0.2.0-0 || >=0.1.6-alpha.1 <0.2.0-0",
-    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.2 <0.2.0-0 || >=0.1.2-alpha.2 <0.2.0-0 || >=0.1.2-alpha.3 <0.2.0-0 || >=0.1.2-alpha.4 <0.2.0-0 || >=0.1.2-alpha.5 <0.2.0-0 || >=0.1.2-rc.1 <0.2.0-0 || >=0.1.3-alpha.2 <0.2.0-0 || >=0.1.5-alpha.1 <0.2.0-0 || >=0.1.5-alpha.2 <0.2.0-0 || >=0.1.5-rc.1 <0.2.0-0 || >=0.1.5-rc.2 <0.2.0-0 || >=0.1.6-alpha.1 <0.2.0-0",
-    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.2 <0.2.0-0 || >=0.1.2-alpha.2 <0.2.0-0 || >=0.1.2-alpha.3 <0.2.0-0 || >=0.1.2-alpha.4 <0.2.0-0 || >=0.1.2-alpha.5 <0.2.0-0 || >=0.1.2-rc.1 <0.2.0-0 || >=0.1.3-alpha.2 <0.2.0-0 || >=0.1.5-alpha.1 <0.2.0-0 || >=0.1.5-alpha.2 <0.2.0-0 || >=0.1.5-rc.1 <0.2.0-0 || >=0.1.5-rc.2 <0.2.0-0 || >=0.1.6-alpha.1 <0.2.0-0",
-    "@deepseek-ai/dsh-host-webserver": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.2 <0.2.0-0 || >=0.1.2-alpha.2 <0.2.0-0 || >=0.1.2-alpha.3 <0.2.0-0 || >=0.1.2-alpha.4 <0.2.0-0 || >=0.1.2-alpha.5 <0.2.0-0 || >=0.1.2-rc.1 <0.2.0-0 || >=0.1.3-alpha.2 <0.2.0-0 || >=0.1.5-alpha.1 <0.2.0-0 || >=0.1.5-alpha.2 <0.2.0-0 || >=0.1.5-rc.1 <0.2.0-0 || >=0.1.5-rc.2 <0.2.0-0 || >=0.1.6-alpha.1 <0.2.0-0",
-    "@deepseek-ai/dsh-session": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.2 <0.2.0-0 || >=0.1.2-alpha.2 <0.2.0-0 || >=0.1.2-alpha.3 <0.2.0-0 || >=0.1.2-alpha.4 <0.2.0-0 || >=0.1.2-alpha.5 <0.2.0-0 || >=0.1.2-rc.1 <0.2.0-0 || >=0.1.3-alpha.2 <0.2.0-0 || >=0.1.5-alpha.1 <0.2.0-0 || >=0.1.5-alpha.2 <0.2.0-0 || >=0.1.5-rc.1 <0.2.0-0 || >=0.1.5-rc.2 <0.2.0-0 || >=0.1.6-alpha.1 <0.2.0-0",
-    "@deepseek-ai/dsh-session-query": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.2 <0.2.0-0 || >=0.1.2-alpha.2 <0.2.0-0 || >=0.1.2-alpha.3 <0.2.0-0 || >=0.1.2-alpha.4 <0.2.0-0 || >=0.1.2-alpha.5 <0.2.0-0 || >=0.1.2-rc.1 <0.2.0-0 || >=0.1.3-alpha.2 <0.2.0-0 || >=0.1.5-alpha.1 <0.2.0-0 || >=0.1.5-alpha.2 <0.2.0-0 || >=0.1.5-rc.1 <0.2.0-0 || >=0.1.5-rc.2 <0.2.0-0 || >=0.1.6-alpha.1 <0.2.0-0",
-    "@deepseek-ai/dsh-settings": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.2 <0.2.0-0 || >=0.1.2-alpha.2 <0.2.0-0 || >=0.1.2-alpha.3 <0.2.0-0 || >=0.1.2-alpha.4 <0.2.0-0 || >=0.1.2-alpha.5 <0.2.0-0 || >=0.1.2-rc.1 <0.2.0-0 || >=0.1.3-alpha.2 <0.2.0-0 || >=0.1.5-alpha.1 <0.2.0-0 || >=0.1.5-alpha.2 <0.2.0-0 || >=0.1.5-rc.1 <0.2.0-0 || >=0.1.5-rc.2 <0.2.0-0 || >=0.1.6-alpha.1 <0.2.0-0",
-    "@deepseek-ai/dsh-skill": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.2 <0.2.0-0 || >=0.1.2-alpha.2 <0.2.0-0 || >=0.1.2-alpha.3 <0.2.0-0 || >=0.1.2-alpha.4 <0.2.0-0 || >=0.1.2-alpha.5 <0.2.0-0 || >=0.1.2-rc.1 <0.2.0-0 || >=0.1.3-alpha.2 <0.2.0-0 || >=0.1.5-alpha.1 <0.2.0-0 || >=0.1.5-alpha.2 <0.2.0-0 || >=0.1.5-rc.1 <0.2.0-0 || >=0.1.5-rc.2 <0.2.0-0 || >=0.1.6-alpha.1 <0.2.0-0",
-    "@deepseek-ai/dsh-system-prompt": ">=0.1.0-rc.7 <0.2.0-0 || >=0.1.1-rc.2 <0.2.0-0 || >=0.1.2-alpha.2 <0.2.0-0 || >=0.1.2-alpha.3 <0.2.0-0 || >=0.1.2-alpha.4 <0.2.0-0 || >=0.1.2-alpha.5 <0.2.0-0 || >=0.1.2-rc.1 <0.2.0-0 || >=0.1.3-alpha.2 <0.2.0-0 || >=0.1.5-alpha.1 <0.2.0-0 || >=0.1.5-alpha.2 <0.2.0-0 || >=0.1.5-rc.1 <0.2.0-0 || >=0.1.5-rc.2 <0.2.0-0 || >=0.1.6-alpha.1 <0.2.0-0",
+    "@deepseek-ai/dsh-client-connection": ">=0.1.7-alpha.1 <0.2.0-0",
+    "@deepseek-ai/dsh-client-locale": ">=0.1.7-alpha.1 <0.2.0-0",
+    "@deepseek-ai/dsh-client-runtime": ">=0.1.7-alpha.1 <0.2.0-0",
+    "@deepseek-ai/dsh-client-store": ">=0.1.7-alpha.1 <0.2.0-0",
+    "@deepseek-ai/dsh-client-ui-input-trigger": ">=0.1.7-alpha.1 <0.2.0-0",
+    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.7-alpha.1 <0.2.0-0",
+    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.7-alpha.1 <0.2.0-0",
+    "@deepseek-ai/dsh-host-webserver": ">=0.1.7-alpha.1 <0.2.0-0",
+    "@deepseek-ai/dsh-session": ">=0.1.7-alpha.1 <0.2.0-0",
+    "@deepseek-ai/dsh-session-query": ">=0.1.7-alpha.1 <0.2.0-0",
+    "@deepseek-ai/dsh-settings": ">=0.1.7-alpha.1 <0.2.0-0",
+    "@deepseek-ai/dsh-skill": ">=0.1.7-alpha.1 <0.2.0-0",
+    "@deepseek-ai/dsh-system-prompt": ">=0.1.7-alpha.1 <0.2.0-0",
+    "@deepseek-ai/schemastery": "^3.18.3",
     "react": "^18.2.0",
     "react-dom": "^18.2.0"
   },
@@ -121,19 +110,21 @@
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-client-connection": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-locale": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-store": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-input-trigger": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-settings-plugins": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-session-query": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-settings": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-skill": "^0.1.6-alpha.1",
-    "@deepseek-ai/dsh-system-prompt": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-client-connection": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-locale": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-store": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-input-trigger": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-plugin-manager": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-session": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-session-query": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-settings": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-skill": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-system-prompt": "^0.1.7-alpha.1",
+    "@deepseek-ai/schemastery": "^3.18.3",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.20.0",
     "@types/react": "~18.3.1",
@@ -142,7 +133,6 @@
     "lightningcss": "1.32.0",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
-    "schemastery": "^3.18.0",
     "tsdown": "0.22.2",
     "typescript": "~5.7.2",
     "vitest": "^3.0.0",

package/src/client/SkillHubSettingsCard.tsx

@@ -2,8 +2,10 @@
  * The dsh-skill-hub plugin settings card: bridges the hub's settings
  * namespace (bound through the official settings transport) onto the
  * family-style staged card form (enabled master switch + agent announcement).
- * Registered into the official `settings.plugin.item` slot keyed by that
- * namespace, so the plugin shows up in Settings → 插件 on dsh rc.7+.
+ * Registered into `plugins.bundle.config` under the bundle's package name, so
+ * the Plugins manager renders it on dsh-skill-hub's own page. That slot is
+ * dispatched with `view: 'page'` only, so the card always renders its full
+ * form (no `summary` one-liner variant).
  */
 
 import { useEffect, useState, type ReactElement } from 'react'
@@ -54,7 +56,7 @@ export interface SkillHubSettingsCardFace {
 
 /** Props the slot renderer binds (locale copy + injected form actions). */
 export type SkillHubSettingsCardProps =
-  PropsRuntime<'settings.plugin.item'> & PropsLocale<'dsh-skill-hub'> & InjectFace<SkillHubSettingsCardFace>
+  PropsRuntime<'plugins.bundle.config'> & PropsLocale<'dsh-skill-hub'> & InjectFace<SkillHubSettingsCardFace>
 
 /** Bridges the hub's config scope onto the card's staged form. */
 export class SkillHubSettingsCardController {

package/src/client/icons.tsx

@@ -2,11 +2,10 @@
  * Vendored UI icons for dsh-skill-hub.
  *
  * These were originally imported from `@deepseek-ai/dsh-client-ui-primitives`.
- * That package is still published for the rc.7/rc.2 SDK families, but newer dsh
- * web builds no longer expose it as a standalone plugin module — they keep a
- * static compatibility module instead. Vendoring the few tiny outline icons the
- * hub uses makes the browser half self-contained and equally compatible with
- * older and newer dsh hosts.
+ * That package is not exposed as a standalone plugin module by the dsh web
+ * build this plugin targets — dsh keeps a static compatibility module instead.
+ * Vendoring the few tiny outline icons the hub uses keeps the browser half
+ * self-contained and independent of how that module is packaged.
  *
  * SVG paths are copied verbatim from dsh-client-ui-primitives (MIT licensed)
  * so the visuals remain pixel-identical to the dsh icon family.

package/src/client/index.tsx

@@ -2,16 +2,17 @@
  * Browser-half entry for the dsh-skill-hub plugin — runs inside the dsh
  * web GUI.
  *
- * Registers the dsh-skill-hub locale dictionaries and mounts two Settings
- * surfaces, both through official slots (no DOM injection):
- *  - a plugin-management card in the `settings.plugin.item` slot (Settings →
- *    插件 → 可配置插件列表), keyed by the hub's settings namespace and bound
- *    through the official settings transport (dsh rc.7 serves every
- *    registered namespace to the web client, and the tab dispatches cards by
- *    namespace) — the family-bucket card pattern (PluginSettingsCard +
- *    CardForm vendored from dsh-task-board);
+ * Registers the dsh-skill-hub locale dictionaries and mounts:
  *  - a top-level Settings section (Settings → 技能) hosting the skill hub
- *    panel: catalog, search, enable/disable, diagnostics, new-skill form.
+ *    panel: catalog, search, enable/disable, diagnostics, new-skill form;
+ *  - the chat "/" menu skill dots, colored from the same config the panel reads.
+ *
+ *  - a configuration card in the `plugins.bundle.config` slot, keyed by the
+ *    BUNDLE PACKAGE NAME, rendered on the plugin's own page in the Plugins
+ *    manager (sidebar → 插件 → dsh-skill-hub). dsh 0.1.7 has no auto-generated
+ *    config page: the manager only renders that section for bundles that
+ *    register this slot, and the card writes through the shared config form
+ *    (`ctx.configForms.get(skill-hub)`), the same form the host routes read.
  *
  * Failure policy: mounting problems are logged, never thrown — the web
  * shell fails the whole boot when a plugin apply throws, and an external
@@ -25,24 +26,25 @@
 import type { Context as ClientContext } from '@deepseek-ai/cordis'
 // Type-only: pulls the locale plugin's Context merge (ctx.locale).
 import type {} from '@deepseek-ai/dsh-client-locale/client'
-// Type-only: pulls the settings-scope service merge and the settings.section slot.
+// Type-only: pulls the configForms service merge and the settings.section slot.
 import type {} from '@deepseek-ai/dsh-client-ui-settings/client'
 // Type-only: pulls the LocaleNamespaceMap merge table.
 import type {} from '@deepseek-ai/dsh-client-ui-slots'
-// Type-only: pulls the settings-plugins SlotMap merge (settings.plugin.item).
-import type {} from '@deepseek-ai/dsh-client-ui-settings-plugins/client'
 // Type-only: pulls the Context merge for ctx.inputTriggers (slash-dots wiring).
 import type {} from '@deepseek-ai/dsh-client-ui-input-trigger/client'
+// Type-only: pulls the plugin-manager SlotMap merge (plugins.bundle.config).
+import type {} from '@deepseek-ai/dsh-client-ui-plugin-manager/client'
 // Type-only: pulls the connection/reset event.
 import type {} from '@deepseek-ai/dsh-client-connection/client'
 
-// 0.1.2-alpha.2: slots service moved to ui-renderer; provide local augmentation for build.
+// The slots service is owned by ui-renderer, which this build does not depend
+// on; augment the Context locally so the browser half typechecks.
 declare module '@deepseek-ai/cordis' {
   interface Context {
     slots: any
   }
 }
-import type { HubSettingsValue } from '../protocol.ts'
+import { HUB_ENTRY_ID, type HubSettingsValue } from '../protocol.ts'
 import { SkillHubApi } from './api.ts'
 import { en, zh, type HubKey } from './locales.ts'
 import { applySettingsNavIcon } from './settings-nav-icon.ts'
@@ -63,11 +65,11 @@ declare module '@deepseek-ai/dsh-client-ui-slots' {
 /**
  * Required services (fiber inject waiting — the runtime must be up first).
  * `connection`/`remote` are the settings transport's own prerequisites
- * (`ctx.settingsScope.bind` resolves them on the caller's fiber), and
- * `settingsScope` is the namespace-scope binder itself; mirror the official
- * settings-plugins inject list.
+ * (`ctx.configForms.get` resolves them on the caller's fiber), and
+ * `configForms` is the shared settings-form service itself; mirror the
+ * official settings-plugins inject list.
  */
-export const inject = ['slots', 'locale', 'connection', 'remote', 'settingsScope', 'inputTriggers']
+export const inject = ['slots', 'locale', 'connection', 'remote', 'configForms', 'inputTriggers']
 
 /** Type-only surface (export discipline: no value exports beyond the plugin contract). */
 export type { SkillHubPanelProps } from './panel/SkillHubPanel.tsx'
@@ -83,30 +85,29 @@ export function apply(ctx: ClientContext): void {
   const t = ctx.locale.bind(NS)
   const api = new SkillHubApi()
 
-  // The card edits the hub's settings namespace through the official
-  // settings transport — the configurable-plugins tab only dispatches cards
-  // whose key the Host serves, and the Host serves every registered namespace
-  // since rc.7, so this is what makes the card appear (and stay in sync).
-  // Single scope instance reused for both the card and slash-dots to avoid
-  // duplicate subscriptions (review #3).
-  const scope = ctx.settingsScope.bind<HubSettingsValue>({ namespace: NS })
+  // The hub's config form is the same Loader entry the host writes and the
+  // Plugins manager renders; the browser half reads it only to color the dots
+  // (single form instance, so slash-dots keeps one subscription).
+  const scope = ctx.configForms.get<HubSettingsValue>(HUB_ENTRY_ID)
   const settingsCard = new SkillHubSettingsCardController(scope)
 
   // Chat `/` 菜单技能圆点：为每个候选行加可调用性圆点（蓝=模型可调，绿=仅用户），颜色与面板图例同步；仅装饰，不自动预填 "/"
   // inject 含 inputTriggers 保证 fiber 就绪后再 wrap，slash-dots 内的 undefined 防御仅用于单元测试 mock
   ctx.effect(() => setupSkillSlashDots(ctx, api, scope), 'dsh-skill-hub: slash dots')
 
-  // Plugin-management card: Settings → 插件 → 可配置插件列表.
-  // rc.7's slot contract declares this keyed slot with options `key`
-  // (the settings namespace the card edits), so registration is fully typed.
+  // The plugin's own configuration page. It must be registered here: the
+  // Plugins manager only renders the config section for bundles that appear in
+  // `plugins.bundle.config` (`ledger.bundles.has(openPkg.name)`), and its key is
+  // the BUNDLE PACKAGE NAME — not the settings entry id (`skill-hub`). There is
+  // no auto-generated fallback page in dsh 0.1.7.
   ctx.effect(
-    () => ctx.slots.inject('settings.plugin.item', () => ctx.slots.register({
-      name: 'settings.plugin.item',
-      key: NS,
+    () => ctx.slots.inject('plugins.bundle.config', () => ctx.slots.register({
+      name: 'plugins.bundle.config',
+      key: 'dsh-skill-hub',
       locale: NS,
       inject: () => settingsCard.inject(),
     }, SkillHubSettingsCard)),
-    'dsh-skill-hub: settings card',
+    'dsh-skill-hub: plugin config',
   )
 
   // Top-level Settings section: the skill management page.

package/src/client/locales/market.ts

@@ -74,6 +74,7 @@ export const zhMarket = {
   'repo.cancel': '取消',
   'repo.cancelled': '已取消 · 已导入 {imported}/{total} 已保留，临时文件已清理',
   'repo.importingCurrent': '正在导入: {name} ({done}/{total})',
+  'repo.root.self': '仓库根',
   'repo.root.skills': 'skills',
   'repo.root.designTemplates': 'design-templates',
   'repo.root.generic': '{root}',
@@ -154,6 +155,7 @@ export const enMarket: Record<keyof typeof zhMarket, string> = {
   'repo.cancel': 'Cancel',
   'repo.cancelled': 'Cancelled · {imported}/{total} kept, temp files cleaned',
   'repo.importingCurrent': 'Importing: {name} ({done}/{total})',
+  'repo.root.self': 'Repo root',
   'repo.root.skills': 'Skills',
   'repo.root.designTemplates': 'Templates',
   'repo.root.generic': '{root}',

package/src/client/panel/RepoScanCard.tsx

@@ -14,8 +14,11 @@ import css from './panel.module.css'
 /**
  * 已知技能根的显示名键；未知根直接显示目录名。
  * zh 字典里这两项就是目录名本身（与接线前的硬编码文本一致）。
+ * 空串是「技能就在仓库根」的哨兵根（host 侧 REPO_ROOT），目录名无从显示，
+ * 给它一个可读标签，否则筛选按钮会是一片空白。
  */
-function rootLabelKey(root: string): 'repo.root.skills' | 'repo.root.designTemplates' | 'repo.root.generic' {
+function rootLabelKey(root: string): 'repo.root.self' | 'repo.root.skills' | 'repo.root.designTemplates' | 'repo.root.generic' {
+  if (root === '') return 'repo.root.self'
   if (root === 'skills') return 'repo.root.skills'
   if (root === 'design-templates') return 'repo.root.designTemplates'
   return 'repo.root.generic'
@@ -94,7 +97,7 @@ export function RepoScanCard(props: { hub: SkillHubState }): JSX.Element | null
                   />
                   <button type='button' className={css.button + (repoFilter === 'all' ? ' ' + css.primary : '')} style={{ padding:'6px 10px', fontSize:12 }} onClick={() => setRepoFilter('all')}>{tt('repo.allRoots', { count: entries.length })}</button>
                   {roots.map((root) => (
-                    <button key={root} type='button' className={css.button + (repoFilter === root ? ' ' + css.primary : '')} style={{ padding:'6px 10px', fontSize:12 }} onClick={() => setRepoFilter(root)}>{tt(rootLabelKey(root), { root })} {counts.get(root) ?? 0}</button>
+                    <button key={root === '' ? 'repo-root' : root} type='button' className={css.button + (repoFilter === root ? ' ' + css.primary : '')} style={{ padding:'6px 10px', fontSize:12 }} onClick={() => setRepoFilter(root)}>{tt(rootLabelKey(root), { root })} {counts.get(root) ?? 0}</button>
                   ))}
                 </div>
               )
@@ -122,7 +125,7 @@ export function RepoScanCard(props: { hub: SkillHubState }): JSX.Element | null
                   />
                   <div className={css.rowMain}>
                     <div className={css.rowName}>{entry.name}</div>
-                    <div className={css.rowDesc}>{entry.dir} · {tt('repo.files', { count: entry.fileCount, size: formatBytes(entry.totalBytes) })}</div>
+                    <div className={css.rowDesc}>{entry.dir === '' ? tt('repo.root.self') : entry.dir} · {tt('repo.files', { count: entry.fileCount, size: formatBytes(entry.totalBytes) })}</div>
                   </div>
                   {existing
                     ? <span className={css.badge + ' ' + css.badgeReadonly}>{tt('repo.existing')}</span>

package/src/client/panel/SkillHubPanel.tsx

@@ -43,7 +43,7 @@ export function SkillHubPanel(props: SkillHubPanelProps): React.JSX.Element {
     catalog, loading, loadError, successBanner, updateState, detail, detailLoading, showForm, formName, formDesc,
     formRoot, formBusy, formMessage, hubConfig, tab, skillView, sourceFilter, sortKey, search,
     workspace, setWorkspace,
-    sourcesState, tagBusy, batchBusy, busyNames, normalized, origins, sourceOptions, filtered,
+    sourcesState, tagBusy, batchBusy, sourceOptions, filtered,
     conflictDialog, confirmDialog, deleteSkillDialog, deleteGroupDialog, confirmClearTrash, branchChoice, branchBusy, marketSyncDialog,
     syncBusy, editingTag, editName, membersDraft, editSearch, uses, groupsState, sourceCheck, checkingSource, syncingSource,
     showLegend, editMode,

package/src/client/panel/SourcesView.tsx

@@ -38,7 +38,7 @@ export function SourcesView(props: { hub: SkillHubState }): JSX.Element {
   const uncategorized = sourceFiltered.filter((skill) => origins[skill.name] === undefined && !isProjectSource(skill.source))
   const personalDisabled = (catalog?.disabled ?? []).filter((record) => origins[record.name] === undefined)
     .filter((record) => normalized.length === 0 || record.name.toLocaleLowerCase().includes(normalized) || record.description.toLocaleLowerCase().includes(normalized))
-    .filter((record) => sourceFilter === 'all' || sourceFilter === PRIVATE_SOURCE)
+    .filter(() => sourceFilter === 'all' || sourceFilter === PRIVATE_SOURCE)
   const allPersonalNames = [...uncategorized.map((s) => s.name), ...personalDisabled.map((r) => r.name)]
   const hasPersonal = allPersonalNames.length > 0
   const defaultTopKeys: string[] = [

package/src/client/panel/hooks/useGroupFlow.ts

@@ -5,14 +5,7 @@
  */
 
 import { useCallback, useState, type FormEvent } from 'react'
-import type {
-  GroupsResponse,
-  SkillTag,
-  SourceGroupReorderRequest,
-  TagDeleteRequest,
-  TagMembersRequest,
-  TagReorderRequest,
-} from '../../../protocol.ts'
+import type { GroupsResponse, SkillTag } from '../../../protocol.ts'
 import type { SkillHubApi } from '../../api.ts'
 import { errorMessage } from '../../helpers.ts'
 import { conflictsOnClose, type GroupSwitchState } from '../../grouping.ts'

package/src/client/settings-form.ts

@@ -10,7 +10,6 @@
  */
 
 import { createSnapshotStore } from '@deepseek-ai/dsh-client-store'
-import type { SettingsScope } from '@deepseek-ai/dsh-client-ui-settings/client'
 
 /** One staged field: its draft text plus the clear/reset marker. */
 interface StagedEdit {
@@ -107,12 +106,18 @@ export interface FieldState {
   invalid: boolean
 }
 
-/** The settings scope face the form consumes (subset of SettingsScope<T>). */
+/**
+ * The settings-form face this card consumes. Declared structurally rather than
+ * imported so the card stays independent of the settings package's generics:
+ * the browser half passes it `ctx.configForms.get<HubSettingsValue>(HUB_ENTRY_ID)`,
+ * which satisfies this shape (ConfigForm<T>).
+ */
 export interface FormScope {
   subscribe(listener: () => void): () => void
   getSnapshot(): { status: string; writable: boolean; value?: Record<string, unknown>; base?: unknown; user?: unknown }
-  set(field: string, value: unknown): Promise<void>
-  unset(field: string): Promise<void>
+  /** Both write paths report host acceptance (ConfigForm.set/unset contract). */
+  set(field: string, value: unknown): Promise<boolean>
+  unset(field: string): Promise<boolean>
 }
 
 /** Stages one card's edits and writes them through the settings transport. */

package/src/client/slash-dots.test.ts

@@ -1,12 +1,14 @@
 /**
  * Slash-menu skill dots: source lookup + candidates wrapping. The wrapper's
  * contract is pure and injectable — fake api (catalog) and fake settings scope
- * (getSnapshot), no DOM — so it tests cleanly in the node vitest environment.
- * The module caches the catalog map; resetModelCache keeps tests independent.
+ * (getSnapshot) — so it tests cleanly in the node vitest environment. The dot
+ * itself is injected into the rendered DOM, which does not exist here, so these
+ * tests assert that candidate rows pass through untouched. The module caches
+ * the catalog map; resetModelCache keeps tests independent.
  */
 
 import { beforeEach, describe, expect, it } from 'vitest'
-import type { SettingsScope } from '@deepseek-ai/dsh-client-ui-settings/client'
+import type { ConfigForm } from '@deepseek-ai/dsh-client-ui-settings/client'
 import type { InputTriggerCandidate, InputTriggerServiceContract, InputTriggerSource } from '@deepseek-ai/dsh-client-ui-input-trigger/client'
 import type { HubSettingsValue } from '../protocol.ts'
 import type { SkillHubApi } from './api.ts'
@@ -33,14 +35,14 @@ function registry(...sources: InputTriggerSource[]): InputTriggerServiceContract
 }
 
 /** Fake settings scope snapshotting a fixed HubSettingsValue. */
-function scopeWith(value: HubSettingsValue): SettingsScope<HubSettingsValue> {
+function scopeWith(value: HubSettingsValue): ConfigForm<HubSettingsValue> {
   return {
     getSnapshot: () => ({ status: 'ready', value, base: undefined, user: undefined, revision: 1, writable: true, mode: 'host' }),
     subscribe: () => () => {},
     set: async () => {},
     unset: async () => {},
     mutate: async () => {},
-  } as unknown as SettingsScope<HubSettingsValue>
+  } as unknown as ConfigForm<HubSettingsValue>
 }
 
 /** Fake hub api whose catalog lists the given skills. */
@@ -85,11 +87,10 @@ describe('findSkillSource', () => {
 })
 
 describe('wrapSkillSource', () => {
-  it('adds a model-colored dot to model-callable skills and a user-colored dot to user-only ones (old host, no drilled)', async () => {
+  it('leaves candidate rows untouched — the dot goes to the DOM, not the icon slot', async () => {
     const source = skillSource(async () => [
       { name: 'code-review', description: 'review code' },
       { name: 'personal-note', description: 'only me' },
-      { name: 'known-default', description: 'fallback unknown' },
     ])
     const api = apiWith([
       { name: 'code-review', modelInvocable: true },
@@ -99,16 +100,13 @@ describe('wrapSkillSource', () => {
 
     const restore = wrapSkillSource(source, api, scope)
     try {
-      // Old host: CandidateRequest 无 drilled 字段，注入彩色点
-      const rows = await source.candidates({ sessionId: 's1' as never }, { query: '', position: 'leading', signal: new AbortController().signal } as unknown as import('@deepseek-ai/dsh-client-ui-input-trigger/client').CandidateRequest)
-
-      expect(rows).toHaveLength(3)
-      // Model-callable → model color.
-      expect((rows[0].icon as unknown as { props: { style: { background: string } } }).props.style.background).toBe('#112233')
-      // User-only → user color.
-      expect((rows[1].icon as unknown as { props: { style: { background: string } } }).props.style.background).toBe('#445566')
-      // Unknown name → model default (still a dot, safer than no dot).
-      expect(rows[2].icon).toBeDefined()
+      const rows = await source.candidates({ sessionId: 's1' as never }, { query: '', position: 'leading', drilled: false, signal: new AbortController().signal })
+
+      expect(rows).toHaveLength(2)
+      // MenuView renders `icon` through ReferenceIcon (enum-narrowed), so a
+      // custom element would never show — rows must carry no icon at all.
+      expect(rows[0].icon).toBeUndefined()
+      expect(rows[1].icon).toBeUndefined()
       // Original fields pass through untouched.
       expect(rows[0].name).toBe('code-review')
       expect(rows[0].description).toBe('review code')
@@ -117,33 +115,18 @@ describe('wrapSkillSource', () => {
     }
   })
 
-  it('falls back to the default colors when settings omit them and catalog fails (old host)', async () => {
+  it('still returns the rows when the catalog route is down', async () => {
     const source = skillSource(async () => [{ name: 'lonely', description: '' }])
     const api = { catalog: async () => { throw new Error('route down') } } as unknown as SkillHubApi
     const scope = scopeWith({ enabled: true, announceToAgent: true, showUseCount: true, showUseTime: true, showGroupSummary: true })
 
-    const restore = wrapSkillSource(source, api, scope)
-    try {
-      const rows = await source.candidates({ sessionId: 's1' as never }, { query: '', position: 'leading', signal: new AbortController().signal } as unknown as import('@deepseek-ai/dsh-client-ui-input-trigger/client').CandidateRequest)
-      // Catalog failed → unknown name → model default dot still renders.
-      expect(rows[0].icon).toBeDefined()
-      expect((rows[0].icon as unknown as { props: { style: { background: string } } }).props.style.background).toBe('#2f81f7')
-    } finally {
-      restore()
-    }
-  })
-
-  it('skips dot injection on new host (alpha.2, drilled present) for ReferenceIcon compat', async () => {
-    const source = skillSource(async () => [{ name: 'code-review', description: 'review code' }])
-    const api = apiWith([{ name: 'code-review', modelInvocable: true }])
-    const scope = scopeWith({ enabled: true, announceToAgent: true, showUseCount: true, showUseTime: true, showGroupSummary: true, dotModelColor: '#112233', dotUserColor: '#445566' })
-
     const restore = wrapSkillSource(source, api, scope)
     try {
       const rows = await source.candidates({ sessionId: 's1' as never }, { query: '', position: 'leading', drilled: false, signal: new AbortController().signal })
+      // A failed catalog only means no dots (unknown names are skipped); the
+      // menu itself must keep working.
       expect(rows).toHaveLength(1)
-      expect(rows[0].icon).toBeUndefined()
-      expect(rows[0].name).toBe('code-review')
+      expect(rows[0].name).toBe('lonely')
     } finally {
       restore()
     }