dsh-skill-importer 0.2.3 → 0.2.5

package/lib/index.js

@@ -107,17 +107,29 @@ function dshHomeDir() {
 /** Absolute skill root for one target under one workspace. */
 function skillRoot(target, workspacePath) {
 	switch (target) {
-		case "user": return join(dshHomeDir(), "skills");
+		case "project-dsh": return join(workspacePath, ".dsh", "skills");
 		case "project-agents": return join(workspacePath, ".agents", "skills");
+		case "user-dsh": return join(dshHomeDir(), "skills");
+		case "user-agents": return join(process.env.DSH_AGENTS_HOME ?? join(homedir(), ".agents"), "skills");
 	}
 }
 /** Discovery rank per root (lower wins), mirroring dsh-skill-filesystem. */
 const ROOT_RANK = {
+	"project-dsh": 100,
 	"project-agents": 200,
-	user: 400
+	"user-dsh": 400,
+	"user-agents": 500
 };
-/** Scan order: project roots first so project skills win duplicate names. */
-const SCAN_ORDER = ["project-agents", "user"];
+/** Official default-root order (custom rank 300 is not a stable import destination). */
+const SCAN_ORDER = [
+	"project-dsh",
+	"project-agents",
+	"user-dsh",
+	"user-agents"
+];
+function isProjectTarget(target) {
+	return target === "project-dsh" || target === "project-agents";
+}
 /**
 * Quote one frontmatter string value when plain YAML would mis-parse it:
 * a value containing `: ` (or any colon), leading/trailing whitespace, a
@@ -163,7 +175,7 @@ function normalizeSkillText(text) {
 function writeSkillFile(name, target, content, workspacePath) {
 	if (!KEBAB_CASE.test(name)) throw new Error("技能名必须是 kebab-case（小写字母、数字、短横线）");
 	if (Buffer.byteLength(content, "utf8") > 262144) throw new Error(`内容超过 ${MAX_CONTENT_BYTES / 1024} KB`);
-	if (target !== "user" && workspacePath === void 0) throw new Error("项目目标需要 workspacePath（当前工作区路径）");
+	if (isProjectTarget(target) && workspacePath === void 0) throw new Error("项目目标需要 workspacePath（当前工作区路径）");
 	const normalized = normalizeSkillText(content);
 	const directory = join(skillRoot(target, workspacePath ?? ""), name);
 	mkdirSync(directory, { recursive: true });
@@ -174,28 +186,47 @@ function writeSkillFile(name, target, content, workspacePath) {
 	return file;
 }
 /** Scan one skill root and fold its skills into the name-keyed map (rank-aware). */
-function scanRoot(root, source, out) {
-	if (!existsSync(root)) return;
-	for (const entry of readdirSync(root, { withFileTypes: true })) {
-		const entryPath = join(root, entry.name);
-		let file;
-		if (entry.isDirectory()) {
-			const candidate = join(entryPath, "SKILL.md");
-			if (existsSync(candidate)) file = candidate;
-		} else if (entry.isFile() && entry.name.endsWith(".md")) file = entryPath;
-		if (file === void 0) continue;
-		const { frontmatter } = parseSkillFile(readFileSync(file, "utf8"));
-		if (frontmatter.name === void 0 || frontmatter.description === void 0) continue;
-		if (!isValidSkillName(frontmatter.name)) continue;
-		const existing = out.get(frontmatter.name);
-		if (existing !== void 0 && ROOT_RANK[existing.source] <= ROOT_RANK[source]) continue;
-		out.set(frontmatter.name, {
-			name: frontmatter.name,
-			description: frontmatter.description,
-			...frontmatter.whenToUse !== void 0 ? { whenToUse: frontmatter.whenToUse } : {},
-			modelInvocable: frontmatter.disableModelInvocation !== true,
-			userInvocable: frontmatter.userInvocable !== false,
-			source
+function scanRoot(root, source, workspacePath, out, issues) {
+	try {
+		if (!existsSync(root)) return;
+		for (const entry of readdirSync(root, { withFileTypes: true })) {
+			const entryPath = join(root, entry.name);
+			let file;
+			if (entry.isDirectory()) {
+				const candidate = join(entryPath, "SKILL.md");
+				if (existsSync(candidate)) file = candidate;
+			} else if (entry.isFile() && entry.name.endsWith(".md")) file = entryPath;
+			if (file === void 0) continue;
+			try {
+				const { frontmatter } = parseSkillFile(readFileSync(file, "utf8"));
+				if (frontmatter.name === void 0 || frontmatter.description === void 0) continue;
+				if (!isValidSkillName(frontmatter.name)) continue;
+				const existing = out.get(frontmatter.name);
+				if (existing !== void 0 && ROOT_RANK[existing.source] <= ROOT_RANK[source]) continue;
+				out.set(frontmatter.name, {
+					name: frontmatter.name,
+					description: frontmatter.description,
+					...frontmatter.whenToUse !== void 0 ? { whenToUse: frontmatter.whenToUse } : {},
+					modelInvocable: frontmatter.disableModelInvocation !== true,
+					userInvocable: frontmatter.userInvocable !== false,
+					source,
+					...workspacePath === void 0 ? {} : { workspacePath }
+				});
+			} catch (error) {
+				issues.push({
+					source,
+					path: file,
+					...workspacePath === void 0 ? {} : { workspacePath },
+					message: error instanceof Error ? error.message : String(error)
+				});
+			}
+		}
+	} catch (error) {
+		issues.push({
+			source,
+			path: root,
+			...workspacePath === void 0 ? {} : { workspacePath },
+			message: error instanceof Error ? error.message : String(error)
 		});
 	}
 }
@@ -208,12 +239,24 @@ function scanRoot(root, source, out) {
 */
 function listSkills(workspacePaths) {
 	const rows = [];
+	const issues = [];
 	for (const target of SCAN_ORDER) {
-		const out = /* @__PURE__ */ new Map();
-		for (const path of target === "user" ? [dshHomeDir()] : workspacePaths) scanRoot(skillRoot(target, path), target, out);
-		rows.push(...out.values());
+		if (!isProjectTarget(target)) {
+			const out = /* @__PURE__ */ new Map();
+			scanRoot(skillRoot(target, ""), target, void 0, out, issues);
+			rows.push(...out.values());
+			continue;
+		}
+		for (const workspacePath of workspacePaths) {
+			const out = /* @__PURE__ */ new Map();
+			scanRoot(skillRoot(target, workspacePath), target, workspacePath, out, issues);
+			rows.push(...out.values());
+		}
 	}
-	return rows.sort((a, b) => a.name.localeCompare(b.name));
+	return {
+		skills: rows.sort((a, b) => a.name.localeCompare(b.name)),
+		issues
+	};
 }
 /**
 * Delete one installed skill (its whole bundle directory `<root>/<name>/`,
@@ -225,7 +268,7 @@ function listSkills(workspacePaths) {
 */
 function deleteSkillFile(name, source, workspacePath) {
 	if (!KEBAB_CASE.test(name)) throw new Error("技能名必须是 kebab-case（小写字母、数字、短横线）");
-	if (source !== "user" && workspacePath === void 0) throw new Error("项目来源需要 workspacePath（当前工作区路径）");
+	if (isProjectTarget(source) && workspacePath === void 0) throw new Error("项目来源需要 workspacePath（当前工作区路径）");
 	const root = skillRoot(source, workspacePath ?? "");
 	const directory = join(root, name);
 	if (existsSync(directory)) {
@@ -308,7 +351,7 @@ function scanBatch(request) {
 	const leaf = basename(sourcePath).toLowerCase();
 	const parent = basename(dirname(sourcePath)).toLowerCase();
 	if (!(leaf === "skills") && !(parent === "skills")) throw new Error("批量导入仅支持名为 skills 的目录或其中的单个技能目录");
-	if (request.target !== "user" && request.workspacePath === void 0) throw new Error("项目目标需要 workspacePath（当前工作区路径）");
+	if (isProjectTarget(request.target) && request.workspacePath === void 0) throw new Error("项目目标需要 workspacePath（当前工作区路径）");
 	const sources = batchSources(sourcePath);
 	if (sources.length === 0) throw new Error("所选目录中没有找到可导入的技能");
 	if (sources.length > 200) throw new Error(`一次最多扫描 200 个技能`);
@@ -621,6 +664,80 @@ function sendError(res, status, error) {
 	});
 }
 //#endregion
+//#region src/update.ts
+const REGISTRY_URL = "https://registry.npmjs.org/dsh-skill-importer/latest";
+const CACHE_TTL_MS = 216e5;
+const REQUEST_TIMEOUT_MS = 5e3;
+let cachedLatest;
+function parseVersion(value) {
+	const match = /^(?:v)?(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?(?:\+[0-9A-Za-z.-]+)?$/.exec(value);
+	if (match === null) return void 0;
+	const prerelease = match[4] === void 0 ? [] : match[4].split(".").map((part) => /^\d+$/.test(part) ? Number(part) : part);
+	return {
+		core: [
+			Number(match[1]),
+			Number(match[2]),
+			Number(match[3])
+		],
+		prerelease
+	};
+}
+/** SemVer ordering used to avoid offering a downgrade or an older prerelease. */
+function compareVersions(left, right) {
+	const a = parseVersion(left);
+	const b = parseVersion(right);
+	if (a === void 0 || b === void 0) throw new Error("npm 返回了无效版本号");
+	for (const index of [
+		0,
+		1,
+		2
+	]) if (a.core[index] !== b.core[index]) return a.core[index] < b.core[index] ? -1 : 1;
+	if (a.prerelease.length === 0 || b.prerelease.length === 0) {
+		if (a.prerelease.length === b.prerelease.length) return 0;
+		return a.prerelease.length === 0 ? 1 : -1;
+	}
+	const length = Math.max(a.prerelease.length, b.prerelease.length);
+	for (let index = 0; index < length; index += 1) {
+		const av = a.prerelease[index];
+		const bv = b.prerelease[index];
+		if (av === void 0) return -1;
+		if (bv === void 0) return 1;
+		if (av === bv) continue;
+		if (typeof av === "number" && typeof bv === "string") return -1;
+		if (typeof av === "string" && typeof bv === "number") return 1;
+		return av < bv ? -1 : 1;
+	}
+	return 0;
+}
+/** Read from package metadata in both src and built lib layouts. */
+function currentVersion() {
+	const metadata = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
+	if (typeof metadata.version !== "string" || parseVersion(metadata.version) === void 0) throw new Error("package.json 缺少有效版本号");
+	return metadata.version;
+}
+async function latestVersion(now = Date.now()) {
+	if (cachedLatest !== void 0 && cachedLatest.expiresAt > now) return cachedLatest.version;
+	const response = await fetch(REGISTRY_URL, {
+		headers: {
+			accept: "application/json",
+			"user-agent": "dsh-skill-importer-update-check"
+		},
+		signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+	});
+	if (!response.ok) throw new Error(`npm registry 返回 ${response.status}`);
+	const metadata = await response.json();
+	if (typeof metadata.version !== "string" || parseVersion(metadata.version) === void 0) throw new Error("npm registry 返回了无效版本信息");
+	cachedLatest = {
+		version: metadata.version,
+		expiresAt: now + CACHE_TTL_MS
+	};
+	return metadata.version;
+}
+function updateCommand(version) {
+	if (parseVersion(version) === void 0) throw new Error("无法为无效版本生成更新命令");
+	return `npx @deepseek-ai/dsh plugin --profile web add dsh-skill-importer@${version}`;
+}
+//#endregion
 //#region src/index.ts
 /** Route paths this plugin owns (exact matches; the client fetches the same literals). */
 const ROUTES = {
@@ -630,10 +747,20 @@ const ROUTES = {
 	importUrl: "/skill-importer/import-url",
 	delete: "/skill-importer/delete",
 	batchScan: "/skill-importer/batch/scan",
-	batchCommit: "/skill-importer/batch/commit"
+	batchCommit: "/skill-importer/batch/commit",
+	updateStatus: "/skill-importer/update-status"
 };
 /** Required services: the harness web server's route registry and the workspace registry. */
 const inject = ["webServer", "workspaceRegistry"];
+const IMPORT_TARGETS = /* @__PURE__ */ new Set([
+	"project-dsh",
+	"project-agents",
+	"user-dsh",
+	"user-agents"
+]);
+function isImportTarget(value) {
+	return typeof value === "string" && IMPORT_TARGETS.has(value);
+}
 const handle = (fn) => (req, res) => {
 	fn(req, res).catch((error) => {
 		if (res.writableEnded) return;
@@ -660,13 +787,40 @@ function apply(ctx) {
 		{
 			kind: "exact",
 			path: ROUTES.list,
-			handler: handle(async (_req, res) => {
+			handler: handle(async (req, res) => {
+				const url = new URL(req.url ?? ROUTES.list, "http://localhost");
+				const requested = url.searchParams.get("workspacePath");
 				sendJson(res, 200, {
 					ok: true,
-					skills: listSkills(projectPaths())
+					...listSkills(url.searchParams.get("scope") === "global" ? [] : requested === null ? projectPaths() : [requireRegisteredWorkspace(requested)])
 				});
 			})
 		},
+		{
+			kind: "exact",
+			path: ROUTES.updateStatus,
+			handler: handle(async (_req, res) => {
+				const installed = currentVersion();
+				try {
+					const latest = await latestVersion();
+					const updateAvailable = compareVersions(installed, latest) < 0;
+					sendJson(res, 200, {
+						ok: true,
+						currentVersion: installed,
+						latestVersion: latest,
+						updateAvailable,
+						command: updateAvailable ? updateCommand(latest) : void 0
+					});
+				} catch (error) {
+					sendJson(res, 200, {
+						ok: true,
+						currentVersion: installed,
+						updateAvailable: false,
+						error: error instanceof Error ? error.message : String(error)
+					});
+				}
+			})
+		},
 		{
 			kind: "exact",
 			path: ROUTES.import,
@@ -676,7 +830,7 @@ function apply(ctx) {
 					return;
 				}
 				const body = await readJsonBody(req);
-				if (typeof body.name !== "string" || typeof body.content !== "string" || body.target !== "user" && body.target !== "project-agents") {
+				if (typeof body.name !== "string" || typeof body.content !== "string" || !isImportTarget(body.target)) {
 					sendError(res, 400, "请求缺少 name / content / target 字段");
 					return;
 				}
@@ -701,7 +855,7 @@ function apply(ctx) {
 					return;
 				}
 				const body = await readJsonBody(req);
-				if (typeof body.name !== "string" || typeof body.url !== "string" || body.target !== "user" && body.target !== "project-agents") {
+				if (typeof body.name !== "string" || typeof body.url !== "string" || !isImportTarget(body.target)) {
 					sendError(res, 400, "请求缺少 name / url / target 字段");
 					return;
 				}
@@ -726,7 +880,7 @@ function apply(ctx) {
 					return;
 				}
 				const body = await readJsonBody(req);
-				if (typeof body.name !== "string" || body.source !== "user" && body.source !== "project-agents") {
+				if (typeof body.name !== "string" || !isImportTarget(body.source)) {
 					sendError(res, 400, "请求缺少 name / source 字段");
 					return;
 				}
@@ -746,7 +900,7 @@ function apply(ctx) {
 					return;
 				}
 				const body = await readJsonBody(req);
-				if (typeof body.sourcePath !== "string" || body.target !== "user" && body.target !== "project-agents") {
+				if (typeof body.sourcePath !== "string" || !isImportTarget(body.target)) {
 					sendError(res, 400, "请求缺少 sourcePath / target 字段");
 					return;
 				}
@@ -806,11 +960,15 @@ function apply(ctx) {
 	* from the host process cwd, which may differ from the user's workspace).
 	*/
 	function requireWorkspace(target, candidate) {
-		if (target === "user") return void 0;
+		if (!isProjectTarget(target)) return void 0;
 		if (typeof candidate !== "string") throw new Error("项目目标需要 workspacePath（当前工作区路径）");
 		if (!projectPaths().includes(candidate)) throw new Error("workspacePath 不是已注册的工作区");
 		return candidate;
 	}
+	function requireRegisteredWorkspace(candidate) {
+		if (!projectPaths().includes(candidate)) throw new Error("workspacePath 不是已注册的工作区");
+		return candidate;
+	}
 	ctx.effect(() => {
 		const disposers = routes.map((route) => ctx.webServer.register(route));
 		return () => {

package/lib/types/client/SkillImporterSection.d.ts

@@ -13,4 +13,4 @@ import type { SkillImporterInjected } from './index.ts';
 /** Props the renderer binds for the section. */
 export type SkillImporterProps = PropsRuntime<'settings.section'> & PropsLocale<'skills.importer'> & InjectFace<SkillImporterInjected>;
 /** The settings section's page body. */
-export declare function SkillImporterSection({ t, useSkills, useWorkspaces, actions }: SkillImporterProps): ReactNode;
+export declare function SkillImporterSection({ t, useSkills, useSkillIssues, useWorkspaces, actions }: SkillImporterProps): ReactNode;

package/lib/types/client/SkillsPicker.d.ts

@@ -13,4 +13,4 @@ import type { SkillImporterInjected } from './index.ts';
 /** Props the renderer binds for the picker. */
 export type SkillsPickerProps = PropsRuntime<'conversation.input.left'> & PropsLocale<'skills.importer'> & InjectFace<SkillImporterInjected>;
 /** One row of the composer skill picker. */
-export declare function SkillsPicker({ t, sessionId, useSkills, useInput, inputActions, actions }: SkillsPickerProps): ReactNode;
+export declare function SkillsPicker({ t, sessionId, useInput, inputActions, actions }: SkillsPickerProps): ReactNode;

package/lib/types/client/effectiveSkills.d.ts

@@ -0,0 +1,3 @@
+import type { SkillListEntry } from '../types.ts';
+/** Mirror DSH's name-based winner selection for one session-scoped catalog. */
+export declare function effectiveSkills(rows: readonly SkillListEntry[]): readonly SkillListEntry[];

package/lib/types/client/index.d.ts

@@ -1,26 +1,32 @@
 import type { ClientContext } from '@deepseek-ai/dsh-client-runtime/client';
+import type { SessionId } from '@deepseek-ai/dsh-api-remotes/client';
 import type { HostObservable } from '@deepseek-ai/dsh-client-ui-slots';
 import type { SkillImporterProps } from './SkillImporterSection.tsx';
 import type { SkillsPickerProps } from './SkillsPicker.tsx';
 import { type SkillImporterKey } from './locales.ts';
-import type { BatchCommitRequest, BatchCommitResponse, BatchScanRequest, BatchScanResponse, DeleteRequest, ImportRequest, ImportUrlRequest, SkillListResponse } from '../types.ts';
+import type { BatchCommitRequest, BatchCommitResponse, BatchScanRequest, BatchScanResponse, DeleteRequest, ImportRequest, ImportUrlRequest, SkillListResponse, UpdateStatusResponse } from '../types.ts';
 declare module '@deepseek-ai/dsh-client-ui-slots' {
     interface LocaleNamespaceMap {
         /** The skill importer section's copy. */
         'skills.importer': SkillImporterKey;
     }
 }
-/** Installed skill catalog snapshot (global — not per-session anymore). */
+/** Installed skill catalog snapshot used by the all-workspace settings view. */
 export type SkillCatalogSnapshot = SkillListResponse["skills"];
+export type SkillIssueSnapshot = SkillListResponse["issues"];
 /** Registration-side business face for the section. */
 export interface SkillImporterInjected {
     hooks: {
         /** Last successful `/skill-importer/list` result. */
         skills: HostObservable<SkillCatalogSnapshot>;
+        /** Non-fatal filesystem failures from the last catalog refresh. */
+        skillIssues: HostObservable<SkillIssueSnapshot>;
     };
     actions: {
         /** Re-fetch the installed catalog; resolves to the fresh rows. */
-        refreshSkills: () => Promise<SkillCatalogSnapshot>;
+        refreshSkills: (workspacePath?: string) => Promise<SkillCatalogSnapshot>;
+        /** Load the effective catalog for one conversation without mutating the settings catalog. */
+        refreshSkillsForSession: (sessionId: SessionId) => Promise<SkillCatalogSnapshot>;
         /** Write one skill file via the host route; resolves to the written path. */
         importSkill: (request: ImportRequest) => Promise<string>;
         /** Fetch a URL and write the skill via the host route; resolves to the written path. */
@@ -33,9 +39,11 @@ export interface SkillImporterInjected {
         scanBatch: (request: BatchScanRequest) => Promise<BatchScanResponse>;
         /** Commit one preflight once, replacing only explicitly confirmed names. */
         commitBatch: (request: BatchCommitRequest) => Promise<BatchCommitResponse>;
+        /** Return the installed version and the latest npm version when reachable. */
+        checkForUpdates: () => Promise<UpdateStatusResponse>;
     };
 }
-/** Required services (cordis fiber inject). */
+/** Every client service used during apply is explicit; alpha DSH no longer tolerates load-order access. */
 export declare const inject: string[];
 /**
  * Client plugin body: register the section and its dictionaries.

package/lib/types/client/locales.d.ts

@@ -13,7 +13,12 @@ export declare const zh: {
     pickerLabel: string;
     pickerPlaceholder: string;
     pickerSearchPlaceholder: string;
+    pickerLoading: string;
     pickerEmpty: string;
+    pickerSourceProjectDsh: string;
+    pickerSourceProjectAgents: string;
+    pickerSourceUserDsh: string;
+    pickerSourceUserAgents: string;
     commandDescription: string;
     entryTitle: string;
     entryDescription: string;
@@ -29,6 +34,7 @@ export declare const zh: {
     deleteFailed: string;
     deleted: string;
     installedFailed: string;
+    installedPartial: string;
     userOnly: string;
     modelOnly: string;
     importTitle: string;
@@ -79,8 +85,29 @@ export declare const zh: {
     batchStatusSkipped: string;
     batchStatusError: string;
     targetLabel: string;
-    targetUser: string;
+    targetProjectDsh: string;
     targetProjectAgents: string;
+    targetUserDsh: string;
+    targetUserAgents: string;
+    locationChange: string;
+    locationTitle: string;
+    locationProject: string;
+    locationGlobal: string;
+    workspaceSearch: string;
+    workspaceNoMatch: string;
+    chooseRootHint: string;
+    rootProjectDsh: string;
+    rootProjectAgents: string;
+    rootUserDsh: string;
+    rootUserAgents: string;
+    priorityHighest: string;
+    priorityHigher: string;
+    priorityLower: string;
+    priorityLowest: string;
+    locationSummaryProjectDsh: string;
+    locationSummaryProjectAgents: string;
+    locationSummaryUserDsh: string;
+    locationSummaryUserAgents: string;
     targetProjectNoWorkspace: string;
     noWorkspace: string;
     import: string;
@@ -88,6 +115,18 @@ export declare const zh: {
     imported: string;
     importFailed: string;
     hostUnreachable: string;
+    versionChecking: string;
+    versionCurrent: string;
+    versionLatest: string;
+    versionAvailable: string;
+    versionCheckFailed: string;
+    versionRetry: string;
+    versionUpdate: string;
+    updateTitle: string;
+    updateDescription: string;
+    copyCommand: string;
+    commandCopied: string;
+    restartHint: string;
 };
 /** The skill importer namespace key union. */
 export type SkillImporterKey = keyof typeof zh;
@@ -97,7 +136,12 @@ export declare const en: {
     pickerLabel: string;
     pickerPlaceholder: string;
     pickerSearchPlaceholder: string;
+    pickerLoading: string;
     pickerEmpty: string;
+    pickerSourceProjectDsh: string;
+    pickerSourceProjectAgents: string;
+    pickerSourceUserDsh: string;
+    pickerSourceUserAgents: string;
     commandDescription: string;
     entryTitle: string;
     entryDescription: string;
@@ -113,6 +157,7 @@ export declare const en: {
     deleteFailed: string;
     deleted: string;
     installedFailed: string;
+    installedPartial: string;
     userOnly: string;
     modelOnly: string;
     importTitle: string;
@@ -163,8 +208,29 @@ export declare const en: {
     batchStatusSkipped: string;
     batchStatusError: string;
     targetLabel: string;
-    targetUser: string;
+    targetProjectDsh: string;
     targetProjectAgents: string;
+    targetUserDsh: string;
+    targetUserAgents: string;
+    locationChange: string;
+    locationTitle: string;
+    locationProject: string;
+    locationGlobal: string;
+    workspaceSearch: string;
+    workspaceNoMatch: string;
+    chooseRootHint: string;
+    rootProjectDsh: string;
+    rootProjectAgents: string;
+    rootUserDsh: string;
+    rootUserAgents: string;
+    priorityHighest: string;
+    priorityHigher: string;
+    priorityLower: string;
+    priorityLowest: string;
+    locationSummaryProjectDsh: string;
+    locationSummaryProjectAgents: string;
+    locationSummaryUserDsh: string;
+    locationSummaryUserAgents: string;
     targetProjectNoWorkspace: string;
     noWorkspace: string;
     import: string;
@@ -172,4 +238,16 @@ export declare const en: {
     imported: string;
     importFailed: string;
     hostUnreachable: string;
+    versionChecking: string;
+    versionCurrent: string;
+    versionLatest: string;
+    versionAvailable: string;
+    versionCheckFailed: string;
+    versionRetry: string;
+    versionUpdate: string;
+    updateTitle: string;
+    updateDescription: string;
+    copyCommand: string;
+    commandCopied: string;
+    restartHint: string;
 };

package/lib/types/index.d.ts

@@ -28,6 +28,7 @@ export declare const ROUTES: {
     readonly delete: "/skill-importer/delete";
     readonly batchScan: "/skill-importer/batch/scan";
     readonly batchCommit: "/skill-importer/batch/commit";
+    readonly updateStatus: "/skill-importer/update-status";
 };
 /** Required services: the harness web server's route registry and the workspace registry. */
 export declare const inject: string[];

package/lib/types/server.d.ts

@@ -8,7 +8,7 @@
  * and the skill-filesystem watcher discovers it in place.
  */
 import type { IncomingMessage, ServerResponse } from 'node:http';
-import type { BatchCommitEntry, BatchScanEntry, BatchScanRequest, ImportRequest, ImportTarget, ImportUrlRequest, SkillListEntry } from './types.ts';
+import type { BatchCommitEntry, BatchScanEntry, BatchScanRequest, ImportRequest, ImportTarget, ImportUrlRequest, SkillListEntry, SkillListIssue } from './types.ts';
 /** Hard cap for one imported skill body (matches the client preview limit). */
 export declare const MAX_CONTENT_BYTES: number;
 /** Cap for one request body read (JSON overhead above the content cap). */
@@ -22,6 +22,7 @@ export declare const BATCH_SCAN_TTL_MS: number;
 export declare function dshHomeDir(): string;
 /** Absolute skill root for one target under one workspace. */
 export declare function skillRoot(target: ImportTarget, workspacePath: string): string;
+export declare function isProjectTarget(target: ImportTarget): boolean;
 /**
  * Rebuild a skill file's frontmatter in the canonical, strictly-YAML-valid
  * form the harness's provider parses. Unknown keys are dropped (the harness
@@ -48,7 +49,10 @@ export declare function writeSkillFile(name: string, target: ImportTarget, conte
  * rank at discovery time). Display order groups by source, then name.
  * @param workspacePaths - canonical paths of the registered workspaces.
  */
-export declare function listSkills(workspacePaths: readonly string[]): SkillListEntry[];
+export declare function listSkills(workspacePaths: readonly string[]): {
+    skills: SkillListEntry[];
+    issues: SkillListIssue[];
+};
 /**
  * Delete one installed skill (its whole bundle directory `<root>/<name>/`,
  * or the flat `<root>/<name>.md`), scoped to the skill roots only.

package/lib/types/types.d.ts

@@ -4,7 +4,7 @@
  * browser bundle can reference them safely.
  */
 /** Where the imported skill file should land. */
-export type ImportTarget = 'user' | 'project-agents';
+export type ImportTarget = 'project-dsh' | 'project-agents' | 'user-dsh' | 'user-agents';
 /** One installed skill row served by `/skill-importer/list`. */
 export interface SkillListEntry {
     /** Kebab-case skill name (frontmatter `name`). */
@@ -17,8 +17,17 @@ export interface SkillListEntry {
     readonly modelInvocable: boolean;
     /** False marks a model-only skill (`user-invocable: false`). */
     readonly userInvocable: boolean;
-    /** Skill root (`'project-agents'` or `'user'`). */
+    /** Writable DSH skill root that owns this copy. */
     readonly source: ImportTarget;
+    /** Exact registered workspace that owns a project-scoped copy. */
+    readonly workspacePath?: string;
+}
+/** One skill root or entry that could not be inspected without failing the whole list. */
+export interface SkillListIssue {
+    readonly source: ImportTarget;
+    readonly path: string;
+    readonly workspacePath?: string;
+    readonly message: string;
 }
 /** File-import request body. */
 export interface ImportRequest {
@@ -32,7 +41,7 @@ export interface ImportRequest {
 /** Delete-request body. */
 export interface DeleteRequest {
     readonly name: string;
-    /** Which root the copy lives in (`'project-agents'` or `'user'`). */
+    /** Which writable DSH root owns this copy. */
     readonly source: ImportTarget;
     /** Canonical workspace path for project sources (host-validated). */
     readonly workspacePath?: string;
@@ -95,6 +104,17 @@ export interface BatchCommitResponse {
 export interface SkillListResponse {
     readonly ok: true;
     readonly skills: readonly SkillListEntry[];
+    readonly issues: readonly SkillListIssue[];
+}
+/** `/skill-importer/update-status` response. */
+export interface UpdateStatusResponse {
+    readonly ok: true;
+    readonly currentVersion: string;
+    readonly latestVersion?: string;
+    readonly updateAvailable: boolean;
+    readonly command?: string;
+    /** A failed registry check is non-fatal: the installed version is still useful. */
+    readonly error?: string;
 }
 /** Success response of an import. */
 export interface ImportResponse {

package/lib/types/update.d.ts

@@ -0,0 +1,6 @@
+/** SemVer ordering used to avoid offering a downgrade or an older prerelease. */
+export declare function compareVersions(left: string, right: string): number;
+/** Read from package metadata in both src and built lib layouts. */
+export declare function currentVersion(): string;
+export declare function latestVersion(now?: number): Promise<string>;
+export declare function updateCommand(version: string): string;