dsh-skill-hub 0.3.6 → 0.3.7

package/lib/index.js

@@ -46,7 +46,9 @@ const SKILL_HUB_API = {
 	sourceSync: "/api/skill-hub/sources/sync",
 	sourceDelete: "/api/skill-hub/sources/delete",
 	sourceRestore: "/api/skill-hub/sources/restore",
-	sourceTrashClear: "/api/skill-hub/sources/trash/clear"
+	sourceTrashClear: "/api/skill-hub/sources/trash/clear",
+	diagnosticFix: "/api/skill-hub/diagnostic/fix",
+	marketSourceVersions: "/api/skill-hub/market/source/versions"
 };
 /**
 * Hub config defaults — the single source every layer reads: the cordis
@@ -867,10 +869,18 @@ function parseFrontmatter(text) {
 	const match = /^---\s*\r?\n([\s\S]*?)\r?\n---\s*(?:\r?\n([\s\S]*))?$/.exec(text);
 	if (match === null) return { error: "missing YAML frontmatter (--- block)" };
 	let data;
+	let rawFrontmatter = match[1];
 	try {
-		data = load(match[1]);
+		data = load(rawFrontmatter);
 	} catch (error) {
-		return { error: "invalid YAML frontmatter: " + (error instanceof Error ? error.message : String(error)) };
+		const repaired = repairFrontmatterScalarFields(rawFrontmatter);
+		if (repaired !== null) try {
+			data = load(repaired);
+			rawFrontmatter = repaired;
+		} catch {
+			return { error: "invalid YAML frontmatter: " + (error instanceof Error ? error.message : String(error)) };
+		}
+		else return { error: "invalid YAML frontmatter: " + (error instanceof Error ? error.message : String(error)) };
 	}
 	if (typeof data !== "object" || data === null || Array.isArray(data)) return { error: "frontmatter must be a YAML mapping" };
 	const record = data;
@@ -902,6 +912,111 @@ function parseFrontmatter(text) {
 		content: (match[2] ?? "").trim()
 	} };
 }
+/**
+* Repair bare scalar fields that contain an unquoted colon (e.g. `description: Build for AWS: ECS`)
+* or an invalid flow-like scalar (`@`, `` ` ``, `[`, `{`). Mirrors codex `repair_frontmatter_scalar_fields`:
+* line-oriented, only touches lines where quoting makes the YAML valid, and preserves block scalars.
+* Returns the repaired frontmatter string when at least one line was quoted, otherwise null.
+*/
+function repairFrontmatterScalarFields(frontmatter) {
+	let changed = false;
+	let blockScalarIndent = null;
+	const repairedLines = [];
+	for (const line of frontmatter.split("\n")) {
+		const indent = line.search(/[^ ]/);
+		const effectiveIndent = indent === -1 ? line.length : indent;
+		if (blockScalarIndent !== null) {
+			if (line.trim() === "" || effectiveIndent > blockScalarIndent) {
+				repairedLines.push(line);
+				continue;
+			}
+			blockScalarIndent = null;
+		}
+		const colonIndex = line.indexOf(":");
+		if (colonIndex === -1) {
+			repairedLines.push(line);
+			continue;
+		}
+		const key = line.slice(0, colonIndex);
+		const value = line.slice(colonIndex + 1);
+		if (key.trim() === "" || value.length === 0 || !/^\s/.test(value)) {
+			repairedLines.push(line);
+			continue;
+		}
+		const trimmedStart = value.trimStart();
+		const leadingWhitespace = value.slice(0, value.length - trimmedStart.length);
+		let scalar = trimmedStart;
+		let comment = "";
+		for (let idx = 0; idx < trimmedStart.length; idx += 1) if (trimmedStart[idx] === "#") {
+			const prev = idx === 0 ? " " : trimmedStart[idx - 1];
+			const next = idx + 1 < trimmedStart.length ? trimmedStart[idx + 1] : " ";
+			if (/\s/.test(prev) && /\s/.test(next)) {
+				const commentStart = trimmedStart.slice(0, idx).trimEnd().length;
+				scalar = trimmedStart.slice(0, commentStart);
+				comment = trimmedStart.slice(commentStart);
+				break;
+			}
+		}
+		scalar = scalar.trimEnd();
+		if (scalar === "") {
+			repairedLines.push(line);
+			continue;
+		}
+		const firstChar = scalar[0];
+		if (firstChar === "|" || firstChar === ">") {
+			blockScalarIndent = effectiveIndent;
+			repairedLines.push(line);
+			continue;
+		}
+		if (firstChar === "'" || firstChar === "\"") {
+			repairedLines.push(line);
+			continue;
+		}
+		let hasColonSeparator = false;
+		for (let i = 0; i < scalar.length - 1; i += 1) if (scalar[i] === ":" && /\s/.test(scalar[i + 1])) {
+			hasColonSeparator = true;
+			break;
+		}
+		let invalidFlowLike = false;
+		if (firstChar === "[" || firstChar === "{" || firstChar === "@" || firstChar === "`") try {
+			load(scalar);
+		} catch {
+			invalidFlowLike = true;
+		}
+		if (!hasColonSeparator && !invalidFlowLike) {
+			repairedLines.push(line);
+			continue;
+		}
+		const quotedScalar = "'" + scalar.replace(/'/g, "''") + "'";
+		repairedLines.push(key + ":" + leadingWhitespace + quotedScalar + comment);
+		changed = true;
+	}
+	return changed ? repairedLines.join("\n") : null;
+}
+/** Try to repair a SKILL.md's frontmatter in place (unquoted colon etc.). Returns the new file text or null when not fixable. */
+function repairFrontmatterFileText(text) {
+	const match = /^---\s*\r?\n([\s\S]*?)\r?\n---\s*(?:\r?\n([\s\S]*))?$/.exec(text);
+	if (match === null) return null;
+	const repaired = repairFrontmatterScalarFields(match[1]);
+	if (repaired === null) return null;
+	try {
+		load(repaired);
+	} catch {
+		return null;
+	}
+	const body = match[2] ?? "";
+	return "---\n" + repaired + "\n---" + (body !== "" ? "\n" + body : "");
+}
+/** Repair one file on disk when its frontmatter is auto-fixable. Returns the new text. */
+async function fixDiagnosticFile(path, home = dshHome()) {
+	if (rootOfPath(path, home) === void 0) throw new TypeError("not a hub writable skill path: " + path);
+	const repairedText = repairFrontmatterFileText(await readFile(path, "utf8"));
+	if (repairedText === null) throw new TypeError("diagnostic is not auto-fixable: " + path);
+	const parsed = parseFrontmatter(repairedText);
+	if ("error" in parsed) throw new TypeError("repaired frontmatter still invalid: " + parsed.error);
+	await writeFile(path, repairedText, "utf8");
+	return path;
+}
 /** Official boolean grammar: true/false, 1/0, and the common string spellings. */
 function frontmatterBoolean(data, key) {
 	if (!Object.hasOwn(data, key)) return void 0;
@@ -959,6 +1074,59 @@ async function scanRoot(base) {
 function listSkillEntries(root, home = dshHome()) {
 	return scanRoot(rootPath(root, home));
 }
+/** Read UI metadata from `agents/openai.yaml` beside a directory skill (mirrors codex SkillInterface). */
+async function readSkillInterface(directory) {
+	const yamlPath = join(directory, "agents", "openai.yaml");
+	let text;
+	try {
+		text = await readFile(yamlPath, "utf8");
+	} catch {
+		return;
+	}
+	let data;
+	try {
+		data = load(text);
+	} catch {
+		return;
+	}
+	if (typeof data !== "object" || data === null || Array.isArray(data)) return void 0;
+	const record = data;
+	const iface = record.interface ?? record;
+	const ifaceObj = typeof record.interface === "object" && record.interface !== null && !Array.isArray(record.interface) ? record.interface : iface;
+	const cleanStr = (value, maxLen) => {
+		if (typeof value !== "string") return void 0;
+		const cleaned = value.split(/\s+/).join(" ").trim();
+		if (cleaned === "" || cleaned.length > maxLen) return void 0;
+		return cleaned;
+	};
+	const hexColor = (value) => {
+		if (typeof value !== "string") return void 0;
+		const trimmed = value.trim();
+		return /^#[0-9a-fA-F]{6}$/.test(trimmed) ? trimmed : void 0;
+	};
+	const iconPath = (value) => {
+		if (typeof value !== "string" || value.trim() === "") return void 0;
+		const trimmed = value.trim().replace(/\\/g, "/");
+		if (trimmed.startsWith("/") || trimmed.includes("..")) return void 0;
+		if (!trimmed.startsWith("assets/")) return void 0;
+		return trimmed;
+	};
+	const displayName = cleanStr(ifaceObj.display_name, 64);
+	const shortDescription = cleanStr(ifaceObj.short_description, 1024);
+	const brandColor = hexColor(ifaceObj.brand_color);
+	const defaultPrompt = cleanStr(ifaceObj.default_prompt, 1024);
+	const iconSmall = iconPath(ifaceObj.icon_small);
+	const iconLarge = iconPath(ifaceObj.icon_large);
+	if (!(displayName !== void 0 || shortDescription !== void 0 || brandColor !== void 0 || iconSmall !== void 0 || iconLarge !== void 0 || defaultPrompt !== void 0)) return void 0;
+	return {
+		...displayName !== void 0 ? { displayName } : {},
+		...shortDescription !== void 0 ? { shortDescription } : {},
+		...brandColor !== void 0 ? { brandColor } : {},
+		...iconSmall !== void 0 ? { iconSmall } : {},
+		...iconLarge !== void 0 ? { iconLarge } : {},
+		...defaultPrompt !== void 0 ? { defaultPrompt } : {}
+	};
+}
 /**
 * Walk up from cwd (max 32 levels) for a project marker (.dsh or .git);
 * falls back to cwd itself. The provider roots project skills here.
@@ -995,13 +1163,21 @@ async function scanDiagnostics(root, home = dshHome()) {
 		}
 		const parsed = parseFrontmatter(text);
 		if ("error" in parsed) {
+			const fixable = repairFrontmatterFileText(text) !== null;
 			diagnostics.push({
 				path: entry.path,
 				root,
-				reason: parsed.error
+				reason: parsed.error,
+				...fixable ? { fixable: true } : {}
 			});
 			continue;
 		}
+		if (repairFrontmatterFileText(text) !== null) diagnostics.push({
+			path: entry.path,
+			root,
+			reason: "frontmatter contains unquoted colon/bracket (auto-repaired in memory; click Fix to persist)",
+			fixable: true
+		});
 		const { value } = parsed;
 		const pathName = entry.kind === "directory" ? basename(entry.directory) : basename(entry.path, ".md");
 		if (value.name !== pathName) diagnostics.push({
@@ -1203,6 +1379,22 @@ let githubToken = process.env.GITHUB_TOKEN ?? process.env.GH_TOKEN ?? "";
 function githubAuthHeaders() {
 	return githubToken === "" ? {} : { authorization: "Bearer " + githubToken };
 }
+/** ETag cache for GitHub API JSON (mirrors codex lib.rs marker+fingerprint). In-memory only, saves 304 for daily checks. */
+const etagCache = /* @__PURE__ */ new Map();
+const ETAG_MAX = 200;
+function etagCacheGet(url) {
+	return etagCache.get(url);
+}
+function etagCacheSet(url, etag, json) {
+	if (etagCache.size >= ETAG_MAX) {
+		const first = etagCache.keys().next().value;
+		if (first !== void 0) etagCache.delete(first);
+	}
+	etagCache.set(url, {
+		etag,
+		json
+	});
+}
 /**
 * Build a RepoFetchError; when the response shows an exhausted rate limit,
 * report the reset time instead of a bare HTTP status.
@@ -1257,47 +1449,50 @@ function normalizeRepoInput(input) {
 * tree is fetched at `ref ?? default_branch` so an explicit branch/tag scans
 * the exact same content a later download would fetch.
 */
-async function loadRepoTree(repo, ref, fetchImpl = fetch) {
-	let metaResponse;
+async function fetchJsonCached(url, fetchImpl, context) {
+	const cached = etagCacheGet(url);
+	const headers = {
+		accept: "application/vnd.github+json",
+		...githubAuthHeaders()
+	};
+	if (cached !== void 0) headers["if-none-match"] = cached.etag;
+	let response;
 	try {
-		metaResponse = await fetchImpl(`https://api.github.com/repos/${repo}`, { headers: {
-			accept: "application/vnd.github+json",
-			...githubAuthHeaders()
-		} });
+		response = await fetchImpl(url, { headers });
 	} catch (error) {
-		throw new RepoFetchError("github request failed: " + (error instanceof Error ? error.message : String(error)));
+		throw new RepoFetchError(context + ": " + (error instanceof Error ? error.message : String(error)));
 	}
-	if (!metaResponse.ok) throw fetchError("github repo not found or unavailable", metaResponse);
-	let meta;
+	if (response.status === 304 && cached !== void 0) return {
+		json: cached.json,
+		response
+	};
+	if (!response.ok) throw fetchError(context, response);
+	let json;
 	try {
-		meta = await metaResponse.json();
+		json = await response.json();
 	} catch {
-		throw new RepoFetchError("invalid github repo response");
+		throw new RepoFetchError("invalid github response for " + url);
 	}
+	const etag = response.headers.get("etag");
+	if (etag !== null && etag !== "") etagCacheSet(url, etag, json);
+	return {
+		json,
+		response
+	};
+}
+async function loadRepoTree(repo, ref, fetchImpl = fetch) {
+	const { json: metaJson } = await fetchJsonCached(`https://api.github.com/repos/${repo}`, fetchImpl, "github repo not found or unavailable");
+	let meta = metaJson;
 	const record = typeof meta === "object" && meta !== null ? meta : {};
 	const defaultBranch = typeof record.default_branch === "string" && record.default_branch !== "" ? record.default_branch : "main";
 	const treeRef = ref !== void 0 && ref !== "" ? ref : defaultBranch;
-	let treeResponse;
-	try {
-		treeResponse = await fetchImpl(`https://api.github.com/repos/${repo}/git/trees/${encodeURIComponent(treeRef)}?recursive=1`, { headers: {
-			accept: "application/vnd.github+json",
-			...githubAuthHeaders()
-		} });
-	} catch (error) {
-		throw new RepoFetchError("github tree request failed: " + (error instanceof Error ? error.message : String(error)));
-	}
-	if (!treeResponse.ok) throw fetchError("github tree not found", treeResponse);
-	let payload;
-	try {
-		payload = await treeResponse.json();
-	} catch {
-		throw new RepoFetchError("invalid github tree response");
-	}
+	const { json: payload } = await fetchJsonCached(`https://api.github.com/repos/${repo}/git/trees/${encodeURIComponent(treeRef)}?recursive=1`, fetchImpl, "github tree not found");
 	const treeRecord = typeof payload === "object" && payload !== null ? payload : {};
-	if (treeRecord.truncated === true) throw new RepoFetchError("repo tree is too large to scan");
+	const truncated = treeRecord.truncated === true;
 	return {
 		ref: treeRef,
-		tree: Array.isArray(treeRecord.tree) ? treeRecord.tree : []
+		tree: Array.isArray(treeRecord.tree) ? treeRecord.tree : [],
+		truncated
 	};
 }
 /** Collect every file inside a skill directory, including SKILL.md itself. */
@@ -1525,6 +1720,27 @@ async function getLatestReleaseTag(repo, fetchImpl = fetch) {
 	const tag = typeof payload === "object" && payload !== null ? payload.tag_name : void 0;
 	return typeof tag === "string" && tag !== "" ? tag : void 0;
 }
+/** Release tags of a repo, newest first (skips drafts, keeps prereleases). */
+async function listRepoReleases(repo, fetchImpl = fetch) {
+	let response;
+	try {
+		response = await fetchImpl(`https://api.github.com/repos/${repo}/releases?per_page=20`, { headers: {
+			accept: "application/vnd.github+json",
+			...githubAuthHeaders()
+		} });
+	} catch (error) {
+		throw new RepoFetchError("github releases request failed: " + (error instanceof Error ? error.message : String(error)));
+	}
+	if (!response.ok) throw fetchError("github releases lookup failed", response);
+	let payload;
+	try {
+		payload = await response.json();
+	} catch {
+		throw new RepoFetchError("invalid github releases response");
+	}
+	if (!Array.isArray(payload)) return [];
+	return payload.filter((item) => typeof item === "object" && item !== null && item.draft !== true).map((item) => item.tag_name).filter((tag) => typeof tag === "string" && tag !== "");
+}
 /** Branch names of a repo, default branch first (one GitHub API request). */
 async function listRepoBranches(repo, fetchImpl = fetch) {
 	let response;
@@ -2045,15 +2261,23 @@ async function buildCatalog(deps, cwd) {
 			title: ""
 		}];
 	}
-	const byName = /* @__PURE__ */ new Map();
+	const byKey = /* @__PURE__ */ new Map();
+	const identitiesByKey = /* @__PURE__ */ new Map();
 	let complete = true;
 	for (const ws of workspaces) {
 		const lookup = ws.path !== "" ? { cwd: ws.path } : void 0;
 		const snapshot = await deps.skills.snapshot(lookup);
 		if (!snapshot.complete) complete = false;
 		for (const skill of snapshot.skills) {
-			if (byName.has(skill.name)) continue;
-			byName.set(skill.name, {
+			const logicalKey = isProjectSource(skill.source) && ws.path !== "" ? `${skill.name}\0${ws.path}\0${skill.source}` : skill.name;
+			let identities = identitiesByKey.get(logicalKey);
+			if (identities === void 0) {
+				identities = /* @__PURE__ */ new Set();
+				identitiesByKey.set(logicalKey, identities);
+			}
+			identities.add(skill.source + "\0" + skill.provider);
+			if (byKey.has(logicalKey)) continue;
+			byKey.set(logicalKey, {
 				skill,
 				...isProjectSource(skill.source) && ws.path !== "" ? {
 					workspace: ws.path,
@@ -2062,6 +2286,17 @@ async function buildCatalog(deps, cwd) {
 			});
 		}
 	}
+	const disabled = await deps.store.listDisabled();
+	const byName = byKey;
+	for (const d of disabled) {
+		let identities = identitiesByKey.get(d.name);
+		if (identities === void 0) {
+			identities = /* @__PURE__ */ new Set();
+			identitiesByKey.set(d.name, identities);
+		}
+		identities.add("hub-disabled\0" + d.root);
+	}
+	const duplicateNames = [...identitiesByKey.entries()].filter(([, identities]) => identities.size > 1).map(([key]) => key.split("\0")[0]).filter((name, idx, arr) => arr.indexOf(name) === idx).sort((a, b) => a.localeCompare(b));
 	const timesByName = /* @__PURE__ */ new Map();
 	await Promise.all([...byName.values()].map(async ({ skill }) => {
 		if (!isWritableSource(skill.source)) return;
@@ -2079,6 +2314,22 @@ async function buildCatalog(deps, cwd) {
 			return;
 		} catch {}
 	}));
+	const interfaceByName = /* @__PURE__ */ new Map();
+	await Promise.all([...byName.values()].map(async ({ skill, workspace }) => {
+		const candidates = [];
+		if (isWritableSource(skill.source)) candidates.push(join(rootPath(skill.source, home), skill.name));
+		else if (isProjectSource(skill.source) && workspace !== void 0) candidates.push(join(workspace, skill.source === "project-dsh" ? ".dsh/skills" : ".agents/skills", skill.name));
+		else if (isProjectSource(skill.source)) {
+			for (const ws of workspaces) if (ws.path !== "") candidates.push(join(ws.path, skill.source === "project-dsh" ? ".dsh/skills" : ".agents/skills", skill.name));
+		}
+		for (const dir of candidates) try {
+			const iface = await readSkillInterface(dir);
+			if (iface !== void 0) {
+				interfaceByName.set(skill.name, iface);
+				return;
+			}
+		} catch {}
+	}));
 	const skills = [...byName.values()].map(({ skill, workspace, workspaceTitle }) => {
 		const row = {
 			name: skill.name,
@@ -2101,9 +2352,17 @@ async function buildCatalog(deps, cwd) {
 			row.addedAt = times.addedAt;
 			row.updatedAt = times.updatedAt;
 		}
+		const iface = interfaceByName.get(skill.name);
+		if (iface !== void 0) {
+			if (iface.displayName !== void 0) row.displayName = iface.displayName;
+			if (iface.shortDescription !== void 0) row.shortDescription = iface.shortDescription;
+			if (iface.brandColor !== void 0) row.brandColor = iface.brandColor;
+			if (iface.iconSmall !== void 0) row.iconSmall = iface.iconSmall;
+			if (iface.iconLarge !== void 0) row.iconLarge = iface.iconLarge;
+			if (iface.defaultPrompt !== void 0) row.defaultPrompt = iface.defaultPrompt;
+		}
 		return row;
 	});
-	const disabled = await deps.store.listDisabled();
 	const diagnostics = [...await scanDiagnostics("user-dsh", home), ...await scanDiagnostics("user-agents", home)];
 	return {
 		ok: true,
@@ -2111,7 +2370,8 @@ async function buildCatalog(deps, cwd) {
 		complete,
 		skills,
 		disabled,
-		diagnostics
+		diagnostics,
+		...duplicateNames.length > 0 ? { duplicateNames } : {}
 	};
 }
 /** Map a loaded definition onto the wire shape. */
@@ -2235,15 +2495,57 @@ function makeRoutes(deps) {
 					if (skill === void 0) skill = await deps.skills.get(name);
 				}
 				if (skill === void 0) {
+					const record = await deps.store.getDisabled(name);
+					if (record !== void 0) try {
+						const parsed = parseFrontmatter(await readFile(record.path, "utf8"));
+						if (!("error" in parsed)) {
+							const disabledDetail = {
+								name: record.name,
+								description: parsed.value.description,
+								...parsed.value.whenToUse !== void 0 ? { whenToUse: parsed.value.whenToUse } : {},
+								invocation: { ...parsed.value.invocation },
+								provider: "skill-hub (disabled)",
+								path: record.path,
+								content: parsed.value.content
+							};
+							try {
+								const times = await stat(record.path);
+								disabledDetail.addedAt = times.birthtimeMs;
+								disabledDetail.updatedAt = times.mtimeMs;
+							} catch {}
+							writeJson(res, 200, {
+								ok: true,
+								skill: disabledDetail
+							});
+							return;
+						}
+					} catch {}
 					writeError(res, 404, "skill not found: " + name);
 					return;
 				}
 				const detail = toDetail(skill);
-				if (skill.path !== void 0) try {
-					const times = await stat(skill.path);
-					detail.addedAt = times.birthtimeMs;
-					detail.updatedAt = times.mtimeMs;
-				} catch {}
+				if (skill.path !== void 0) {
+					try {
+						const times = await stat(skill.path);
+						detail.addedAt = times.birthtimeMs;
+						detail.updatedAt = times.mtimeMs;
+					} catch {}
+					try {
+						const rb = skill.resourceBase;
+						const dir = rb?.kind === "directory" && typeof rb.path === "string" ? rb.path : skill.path.endsWith("SKILL.md") ? dirname(skill.path) : void 0;
+						if (dir !== void 0) {
+							const iface = await readSkillInterface(dir);
+							if (iface !== void 0) {
+								if (iface.displayName !== void 0) detail.displayName = iface.displayName;
+								if (iface.shortDescription !== void 0) detail.shortDescription = iface.shortDescription;
+								if (iface.brandColor !== void 0) detail.brandColor = iface.brandColor;
+								if (iface.iconSmall !== void 0) detail.iconSmall = iface.iconSmall;
+								if (iface.iconLarge !== void 0) detail.iconLarge = iface.iconLarge;
+								if (iface.defaultPrompt !== void 0) detail.defaultPrompt = iface.defaultPrompt;
+							}
+						}
+					} catch {}
+				}
 				writeJson(res, 200, {
 					ok: true,
 					skill: detail
@@ -2610,6 +2912,31 @@ function makeRoutes(deps) {
 				});
 			}
 		}),
+		route({
+			path: SKILL_HUB_API.marketSourceVersions,
+			methods: ["GET"],
+			handler: async ({ res, url }) => {
+				const parsed = normalizeRepoInput(queryParam(url, "repo") ?? "");
+				if (parsed === null) {
+					writeError(res, 400, "repo must be owner/repo or a github.com URL");
+					return;
+				}
+				const repo = repoSlug(parsed);
+				const source = await deps.store.getMarketSource(repo);
+				if (source === void 0) {
+					writeError(res, 404, "market source not found: " + repo);
+					return;
+				}
+				const [releases, branches] = await Promise.all([listRepoReleases(repo), listRepoBranches(repo)]);
+				writeJson(res, 200, {
+					ok: true,
+					repo,
+					...source.ref !== void 0 && source.ref !== "" ? { current: source.ref } : {},
+					releases,
+					branches
+				});
+			}
+		}),
 		route({
 			path: SKILL_HUB_API.marketCheck,
 			methods: ["GET"],
@@ -2725,8 +3052,11 @@ function makeRoutes(deps) {
 				}
 				if (ref === void 0 || ref === "") {
 					const releaseTag = await getLatestReleaseTag(repo);
-					if (releaseTag !== void 0) ref = releaseTag;
-					else {
+					if (releaseTag !== void 0) {
+						ref = releaseTag;
+						const existing = await deps.store.getMarketSource(repo);
+						if (existing !== void 0 && (existing.ref === void 0 || existing.ref === "")) await deps.store.setMarketSourceRef(repo, releaseTag);
+					} else {
 						const branches = await listRepoBranches(repo);
 						if (branches.length === 0) {
 							writeError(res, 404, "repo has no branches to scan");
@@ -2742,12 +3072,13 @@ function makeRoutes(deps) {
 						return;
 					}
 				}
-				const { ref: resolvedRef, tree } = await loadRepoTree(repo, ref);
+				const { ref: resolvedRef, tree, truncated } = await loadRepoTree(repo, ref);
 				writeJson(res, 200, {
 					ok: true,
 					repo,
 					ref: resolvedRef,
-					entries: discoverRepoEntries(tree, repo, await knownSkillNames(deps))
+					entries: discoverRepoEntries(tree, repo, await knownSkillNames(deps)),
+					...truncated ? { truncated: true } : {}
 				});
 			}
 		}),
@@ -3412,6 +3743,29 @@ function makeRoutes(deps) {
 					failed
 				});
 			}
+		}),
+		route({
+			path: SKILL_HUB_API.diagnosticFix,
+			methods: ["POST"],
+			jsonBody: true,
+			handler: async ({ res, body }) => {
+				const request = body;
+				const rawPath = typeof request.path === "string" ? request.path.trim() : "";
+				if (rawPath === "") {
+					writeError(res, 400, "path is required");
+					return;
+				}
+				try {
+					await fixDiagnosticFile(rawPath, homeOf(deps));
+					deps.invalidate?.();
+					writeJson(res, 200, {
+						ok: true,
+						path: rawPath
+					});
+				} catch (error) {
+					writeRouteError(res, error);
+				}
+			}
 		})
 	];
 }

package/lib/types/client/SkillHubSettingsCard.d.ts

@@ -9,8 +9,6 @@ import { type ReactElement } from 'react';
 import type { SnapshotStore } from '@deepseek-ai/dsh-client-store';
 import type { InjectFace, PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
 import { type CardShell, type FieldState, type FormScope } from './settings-form.ts';
-import { DEFAULT_DOT_MODEL_COLOR, DEFAULT_DOT_USER_COLOR } from './panel/format.ts';
-export { DEFAULT_DOT_MODEL_COLOR, DEFAULT_DOT_USER_COLOR };
 /** The card's projected state. */
 export interface SkillHubSettingsState extends CardShell {
     enabled: FieldState;

package/lib/types/client/api.d.ts

@@ -2,7 +2,7 @@
  * Browser-side API client for the /api/skill-hub route family. The only
  * data access path the panel uses — plain fetch, same origin.
  */
-import { type CatalogResponse, type CollectionGroup, type ConfigRequest, type ConfigResponse, type CreateRequest, type CreateResponse, type MarketCheckResponse, type MarketSourcesResponse, type MarketSyncResponse, type RepoDiscoverResponse, type RepoImportCancelResponse, type RepoImportProgressResponse, type RepoImportResponse, type SkillDetail, type SkillDeleteResponse, type SkillTag, type SourceCheckResponse, type SourceDeleteResponse, type SourceRestoreResponse, type SourceTrashClearResponse, type SourcesResponse, type SourceSyncResponse, type StatsResponse, type ToggleBatchResponse, type UpdateCheckResponse } from '../protocol.ts';
+import { type CatalogResponse, type CollectionGroup, type ConfigRequest, type ConfigResponse, type CreateRequest, type CreateResponse, type MarketCheckResponse, type MarketSourcesResponse, type MarketSourceVersionsResponse, type MarketSyncResponse, type RepoDiscoverResponse, type RepoImportCancelResponse, type RepoImportProgressResponse, type RepoImportResponse, type SkillDetail, type SkillDeleteResponse, type SkillTag, type SourceCheckResponse, type SourceDeleteResponse, type SourceRestoreResponse, type SourceTrashClearResponse, type SourcesResponse, type SourceSyncResponse, type StatsResponse, type ToggleBatchResponse, type UpdateCheckResponse } from '../protocol.ts';
 /** Error carrying the route's JSON error message. */
 export declare class SkillHubApiError extends Error {
     constructor(message: string);
@@ -35,6 +35,8 @@ export declare class SkillHubApi {
     marketCheck(): Promise<MarketCheckResponse>;
     /** Align a market source to its pinned ref; resolves with tracked skills. */
     marketSync(repo: string): Promise<MarketSyncResponse>;
+    /** Releases + branches of a market source for the version picker. */
+    marketSourceVersions(repo: string): Promise<MarketSourceVersionsResponse>;
     /** Pin a market source to an explicit ref (branch picker). */
     setMarketSourceRef(repo: string, ref: string): Promise<MarketSourcesResponse>;
     /** Check the hub's own latest GitHub release. */
@@ -77,4 +79,6 @@ export declare class SkillHubApi {
     restoreSource(name: string): Promise<SourceRestoreResponse>;
     /** Permanently delete every skill currently in the trash. */
     clearTrash(): Promise<SourceTrashClearResponse>;
+    /** Auto-fix a fixable diagnostic (e.g. unquoted colon). */
+    fixDiagnostic(path: string): Promise<import('../protocol.ts').DiagnosticFixResponse>;
 }

package/lib/types/client/helpers.d.ts

@@ -9,3 +9,13 @@ export declare function dictionary(): Record<string, string>;
 export declare function tt(key: HubKey, values?: TranslateValues): string;
 /** Human-readable error text from an unknown thrown value. */
 export declare function errorMessage(error: unknown): string;
+/**
+ * Whether a displayName is worth showing beside the kebab-case name.
+ * Pure case/punctuation variants (e.g. "Code Review" vs "code-review") are redundant.
+ */
+export declare function isDisplayNameDistinct(name: string, displayName: string | undefined): displayName is string;
+/**
+ * Copy text to the clipboard. Uses the async API with a positioned-textarea
+ * fallback for insecure contexts. Resolves true only when the copy succeeded.
+ */
+export declare function copyTextToClipboard(text: string): Promise<boolean>;