dsh-skill-picker 0.5.21 → 0.5.23

package/README.md

@@ -26,7 +26,7 @@ DSH Web GUI 的技能选择器：在输入框（composer）工具行右侧加一
 
 English: A skill picker for the DSH Web GUI — a button in the composer's right tool row opens a searchable list of installed skills; picking one inserts the official `/skill-name` gesture into the draft, so DSH's native user-invocation path loads the skill with your message.
 
-当前版本：**v0.5.12**（**修复 `user-invocable: false` 的技能未被隐藏**（issue #10）+ 修复全局安装下 `/` 补全增强静默失效（issue #7）+ ⚡ 面板**置顶分组** + `/` 补全**自动增强补丁** + 拼音搜索 + **搜索结果按匹配相关度排序**）
+当前版本：**v0.5.22**（**「置顶 / 最近使用」在桌面端、网页端和手机之间共用同一份**（存于 `$DSH_HOME/dsh-skill-picker-state.json`，不再各存各的 localStorage）+ **`/` 菜单与 ⚡ 面板排序完全一致**（空查询也走同一套排序，置顶排最前）+ **修掉「打 `/` 菜单开到下面去」**（microtask 竞态：技能组必须 0 个 `await` 才抢得到高亮）+ **文件补丁退休**（`/` 增强改为运行时接管，默认不再改任何官方文件，并会自动把改过的还原）+ 模糊/拼音匹配 + ⚡ 面板置顶分组 + 搜索结果按匹配相关度排序）
 
 ## 为什么用它（vs 官方 `/` 补全）
 
@@ -141,6 +141,8 @@ source.onPick = (args) => { track(args?.candidate?.name); return onPick.call(sou
 
 ## 更新日志
 
+- **v0.5.23**：**⚡ 面板里可以直接管理技能了：关闭 / 开启 · 定位 · 卸载（可撤回）**——起因是国豪视频评论区有人问"能加一个管理 skill 功能吗？实现删除、加、启动、关闭等操作"。查证结论：**官方没有任何技能管理界面**（把 asar 里 289 个官方包全扫了一遍，没有禁用/卸载技能相关代码；评论里说的"专门的插件"指的是 `find-skills` 那种**搜索+安装**的 skill，只解决"加"），所以这块是真空白。**交互方式（国豪的主意，比我的第一版好）**：动作**不占行内 UI**，而是**右键技能行弹出一个小菜单**（置顶 / 关闭 / 定位 / 卸载），手机则**长按 500ms** 弹同一个菜单（滑动即取消，长列表滚动不会误触）；行内只留一个 glyph（📌/📍，兼作"已置顶"状态指示）。**踩到的 UI 坑**：关闭监听最初挂在**捕获阶段**，会在菜单项自己的 `onClick` 之前就把菜单关掉 → 点了没反应；改成**冒泡阶段 + 菜单自身 `stopPropagation`**。**①「关闭」是真关闭，不是障眼法**：读了官方 `dsh-skill-filesystem` 的判定逻辑 —— **一个技能 = 目录下有 `SKILL.md`（大小写严格）**，或技能根下的顶层 `.md`。所以关闭就是把 `SKILL.md` 改名成 **`SKILL.md.disabled`**：provider 直接看不见它，**agent 也不再加载**，要回来只需改回名字。**②「卸载」从不删除**：移进 `$DSH_HOME/skill-backups/<时间戳>-<名字>/`（旁边写 `manifest.json` 记原路径），面板里出现「撤回」；`skill-ops.js` 里**一个破坏性文件调用都没有**，而且有一条**结构性回归测试**盯着这件事（注释里出现过破坏性调用的名字都会让它红 —— 这是它第一次触发时教我的）。跨盘无法 `rename` 时**直接报错**，绝不退化成"复制+删除"。**③ 三道安全闸**（这些路由**不需要鉴权**就能到达，所以不是可选项）：请求必须带 `x-dsh-skill-picker: 1` 自定义头（跨站表单 POST 设不了自定义头，CORS 预检 host 也不应答）；**客户端只报技能名，路径由 host 自己查**（⚡ 面板主数据来自官方 API，那套 DTO 不保证带 `path`；而且浏览器说了不算）；路径必须**恰好落在已知技能根的一层之下**（`../` 逃逸、根目录本身、技能内的文件、任意绝对路径全部拒绝）。**④ 一个必须补的洞**：官方 `skills/list` **不会返回已关闭的技能** → 关掉之后就再也找不到、开不回来了；所以面板额外拉一次 host 扫描，单独渲染「⏻ 已关闭」分组专门用来开回来。**⑤ 真机端到端实测（用我自己建的假技能，全程只动它一个）**：关闭后磁盘上 `SKILL.md`→`SKILL.md.disabled` ✓、**扫描仍能列出它且 `disabled:true`** ✓（这是"能开回来"的前提）、开启还原 ✓、卸载后原位置消失而备份里 `SKILL.md`+`manifest` 完整 ✓、`backups` 能列出 ✓、`restore` 回原位 ✓、不带自定义头 → **403** ✓、`name` 塞 `../../../Windows/System32` → **404** ✓、`GET` → **405** ✓；**测试后你的技能数一个没变、备份目录零残留**。**回归测试**：新增 `test/skill-ops.test.mjs` 13 例（路径闸 9 种情形、关闭/开启往返、重复关闭拒绝、开启未关闭的拒绝、卸载后原位置消失但备份完整且 manifest 正确、撤回后再占用时拒绝覆盖、备份原路径被改成根外后不可撤回、备份 id 不允许带路径、**"模块里不存在破坏性调用"**、无 manifest 的杂目录被忽略、备份目录必须落在 `DSH_HOME` 下）。全量 `npm test`：**88 tests / 87 pass / 0 fail**
+- **v0.5.22**：**「置顶 / 最近使用」改成两端（乃至手机）共用一份**——起因是国豪发现"桌面端和网页端的置顶不一样"，并当场质疑"不就读同一个配置吗，要一个小时？"。**他是对的，而且根因就是"读的不是同一个配置"**：`localStorage` **按源（origin）隔离**，桌面端是 `dsh-app://app`、网页端是 `http://127.0.0.1:3080`、手机连上去又是第三个源 —— **同一份数据被存了三遍**，所以在桌面端钉的技能网页端永远看不到。**修法（约 40 行 host + 一个客户端模块，不是重写数据层）**：host 侧新增 `/dsh-skill-picker/state`（GET 取 / PUT 存），存到 **`$DSH_HOME/dsh-skill-picker-state.json`**（写用 temp+rename，原子）；客户端新增 `src/client/shared-state.js`，把这份**母本镜像进 localStorage**，于是渲染期的**同步**读取一行都不用改（原来的数据路径是同步的，改成异步要动一大片 —— 这个顾虑没必要）。**细节**：① 每次 `savePinned`/`saveUsage`（含 `/` 菜单里的选中记录）都会**自动回推**；② 插件启动时 + **⚡ 面板每次打开时**都会拉取，所以另一端改了立刻能看见；③ **首次同步用并集、之后才跟随**（关键，实测中发现的坑）：host 端 `?migrate=1` 会把收到的状态与已有状态**合并**再返回；客户端用一个 `dsh-skill-picker:shared-synced` 标记区分"这台还没同步过"。**没同步过**且本地有数据 → 走并集迁移（绝不覆盖）；**同步过** → 直接采纳文件（所以"在 A 端取消置顶"能真的传播到 B 端）。**为什么必须有这一步**：如果首次也直接采纳，那么**哪台客户端先启动，文件就被它写成什么样，后面启动的那台就会丢掉自己独有的钉子** —— 桌面端 3 条、网页端 2 条的情况下，网页端先起就会把桌面端的 `ji-zhang` 吃掉。端到端实测时正是这条被暴露出来的；④ 文件不存在 / 为空而本地有数据时，**推送而不是覆盖为空**；⑤ 全程 **best-effort**：host 不可达时行为和以前**完全一样**（纯本地），绝不会因为同步失败把选择器弄坏。**回归测试**：新增 `test/shared-state.test.mjs` 7 例（拉取即镜像、缺文件时以本机播种并带 `migrate=1`、迁移返回的并集被本地采纳、远端为空时不把本机数据清成空、推送内容正确、host 失败时一律返回 false 且不抛、同步后会广播事件让界面重读）。全量 `npm test`：**72 tests / 71 pass / 0 fail**
 - **v0.5.21**：**文件补丁正式退休：默认不再改官方文件，并自动把改过的还原回去**——起因是国豪发现**同一件事桌面端对、网页端不对**，并直接怀疑到"之前魔改过"。**查证结果：他猜对了。** 两端加载的官方 `@deepseek-ai/dsh-client-ui-skill` 根本不是同一份：**桌面端从 `app.asar` 取**（打包只读，永远是原版），**网页端从 `~/.dsh/profiles/node_modules/` 取共享那份 —— 而那份被本插件的老文件补丁改过**（实测：`__dshSkillPickerFuzzy`×2、`order: -1`，旁边躺着 `.bak`）。**这个差异为什么会让排序看起来不一样**：补丁把官方 `candidates` 改成走 `window.__dshSkillPickerFuzzy`，而它返回的**已经是「置顶+使用热度」排好序**的列表；我的包装层再做一次排序时，`groupByPinned` 把「🗂️ 全部」分组的**输入顺序**保留下来（同热度时的稳定排序）——于是网页端的「全部」是**使用热度序**、桌面端是**字母序**。**根因级别的问题**：文件补丁自 v0.5.15 起**已是纯冗余** —— 它只做三件事（技能组置顶 `order: -1`、模糊+拼音匹配、`onPick` 记使用），而**运行时接管三件全都自己做了**。它却仍在改用户的官方包，还让两个 profile 对同一个文件产生分歧。**修法**：① 新增 `revertUiSkillPatches()`，启动时**只针对"仍带我们标记"的文件**从 `.bak` 还原（用 temp+rename，绝不动 pnpm 硬链接的共享 inode；幂等）；② 文件补丁改为**默认关闭**，只有显式设 `DSH_SKILL_PICKER_FILE_PATCH=1` 才走旧的自愈路径（给"触发源注册表里没有 live sources 可接管"的老内核兜底）。**本机已实测还原**：共享那份 `lib/client.js` 现在 `__dshSkillPickerFuzzy`=0、`order: 2`、**hash 与 `.bak` 完全一致**。全量 `npm test`：**65 tests / 64 pass / 0 fail**
 - **v0.5.20**：**`/` 菜单的空查询也走排序，「置顶」技能排到最前面（与 ⚡ 面板一致）**——国豪指出：按 ⚡ 按钮时列表是「📌 置顶（3）」在前、再「📁 全部（57）」，但直接打 `/` 出来的却**是纯字母序、置顶不在前面**，两边排序不一样。**根因**：包装层对**空查询**做了短路 —— `if (query === '') return cached` / `if (query === '' || ...) return everything`，即"空查询把官方列表原封不动返回"。而 ⚡ 面板走的是 `rankPickerItems(items, '')`，它会先 `groupByPinned(...)` 把置顶提到最前。**于是同一个数据源、两套排序。** **修法**：去掉空查询短路，**空查询也交给 `rank()`** —— `rankPickerItems(items, '')` 本就设计为"空查询 = 全部条目、按面板顺序（置顶优先）"，所以两边从此同源同序。**顺带发现一条假通过的测试**：旧的 `an empty query returns the official result untouched` 里 `rank` 是**故意抛错**的，而 `rank` 一抛错就被包装层的 try/catch 兜住、仍然返回官方列表 —— 也就是说那条测试**测的是兜底路径，不是它声称的语义**，所以它在新行为下照样"通过"。已改写为正面断言：空查询**必须**调用 `rank`，且置顶技能排第一。全量 `npm test`：**65 tests / 64 pass / 0 fail**
 - **v0.5.19**：**修掉 v0.5.17 里"预热走错了路"的 bug**（0.5.18 因 npm 发布延迟被误判为"卡住"，实际已发布；两者代码逐字节相同）—— 上一版已经把胜负手找对了（技能组要 **0 个 `await`** 才抢得到高亮），但它预热时调的是**官方 `source.warm()`**：`warm()` 只预热**官方模块自己的**缓存，**插件自己的 `itemCache` 依然是空的** → 菜单打开那次**仍然未命中**、仍然 `await` 官方、仍然比命令组多一跳、**仍然输**。这一条是从运行诊断里确认的：`{"mode":"runtime","installed":true,"took":"candidates+order+onPick"}` 与 `{"servedFromCache":false,"sessionId":"session-de1f2494-…","primed":true,"count":71}` —— 即"接管装上了、缓存也被填过，但菜单那次仍是 `servedFromCache:false`"。**修法**：预热改为**走插件自己的包装路径**（一次空查询 `candidates`），**一次调用同时填满两层**（包装层写快照 + 官方层自然预热）。另：缓存**热重载后不再被清空**，所以重载后的第一次打开也是命中。**桌面端已实测确认修好**。**回归测试**：新增一条直击要害的用例 —— 官方取数故意慢 60ms，预热后菜单调用**必须在 30ms 内返回**；另把"预热走官方 `warm()`"这条反例锁死（断言**不会**只调 `warm()`）。全量 `npm test`：**65 tests / 64 pass / 0 fail**

package/lib/client.js

@@ -25778,6 +25778,112 @@ function useWorkspaceCwd(props) {
   return typeof cwd === "string" ? cwd : "";
 }
 
+// src/client/shared-state.js
+var PINNED_KEY = "dsh-skill-picker:pinned";
+var USAGE_KEY = "dsh-skill-picker:usage";
+var SYNCED_KEY = "dsh-skill-picker:shared-synced";
+var ENDPOINT = "/dsh-skill-picker/state";
+var SHARED_STATE_EVENT = "dsh-skill-picker:shared-state";
+function readLocalPinned() {
+  try {
+    const parsed = JSON.parse(localStorage.getItem(PINNED_KEY) ?? "[]");
+    return Array.isArray(parsed) ? parsed.filter((name) => typeof name === "string") : [];
+  } catch {
+    return [];
+  }
+}
+function readLocalUsage() {
+  try {
+    const parsed = JSON.parse(localStorage.getItem(USAGE_KEY) ?? "{}");
+    return parsed !== null && typeof parsed === "object" ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+function writeLocal(state) {
+  try {
+    localStorage.setItem(PINNED_KEY, JSON.stringify(state?.pinned ?? []));
+    localStorage.setItem(USAGE_KEY, JSON.stringify(state?.usage ?? {}));
+  } catch {
+  }
+}
+function isEmptyState(state) {
+  if (state === null || state === void 0 || typeof state !== "object") return true;
+  const pinned = Array.isArray(state.pinned) ? state.pinned : [];
+  const usage = state.usage !== null && typeof state.usage === "object" ? state.usage : {};
+  return pinned.length === 0 && Object.keys(usage).length === 0;
+}
+function hasSynced() {
+  try {
+    return localStorage.getItem(SYNCED_KEY) === "1";
+  } catch {
+    return false;
+  }
+}
+function markSynced() {
+  try {
+    localStorage.setItem(SYNCED_KEY, "1");
+  } catch {
+  }
+}
+async function pushSharedState({ migrate = false } = {}) {
+  try {
+    const response = await fetch(`${ENDPOINT}${migrate ? "?migrate=1" : ""}`, {
+      method: "PUT",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ pinned: readLocalPinned(), usage: readLocalUsage() })
+    });
+    if (!response.ok) return false;
+    const body = await response.json();
+    if (body?.ok !== true) return false;
+    if (migrate) writeLocal(body.state);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function pullSharedState() {
+  try {
+    const response = await fetch(ENDPOINT, { headers: { accept: "application/json" } });
+    if (!response.ok) return false;
+    const body = await response.json();
+    if (body?.ok !== true) return false;
+    const localHasData = !isEmptyState({ pinned: readLocalPinned(), usage: readLocalUsage() });
+    if (body.state === null || body.state === void 0) {
+      const pushed = await pushSharedState({ migrate: true });
+      if (pushed) markSynced();
+      return true;
+    }
+    if (!hasSynced() && localHasData) {
+      const pushed = await pushSharedState({ migrate: true });
+      if (pushed) {
+        markSynced();
+        return true;
+      }
+    }
+    if (isEmptyState(body.state) && localHasData) {
+      const pushed = await pushSharedState({ migrate: true });
+      if (pushed) markSynced();
+      return true;
+    }
+    writeLocal(body.state);
+    markSynced();
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function syncSharedState() {
+  const pulled = await pullSharedState();
+  if (pulled) {
+    try {
+      window.dispatchEvent(new Event(SHARED_STATE_EVENT));
+    } catch {
+    }
+  }
+  return pulled;
+}
+
 // src/client/slash-source.js
 var WRAPPED = "__dshSkillPickerWrappedCandidates";
 var SKILL_SOURCE = { trigger: "/", name: "skill" };
@@ -26010,11 +26116,11 @@ function installSlashFuzzy(inputTriggers, hooks = {}, options = {}) {
 // src/client/index.jsx
 var import_jsx_runtime = require("react/jsx-runtime");
 var inject = ["slots", "connection", "sessions", "inputTriggers"];
-var USAGE_KEY = "dsh-skill-picker:usage";
-var PINNED_KEY = "dsh-skill-picker:pinned";
+var USAGE_KEY2 = "dsh-skill-picker:usage";
+var PINNED_KEY2 = "dsh-skill-picker:pinned";
 function loadPinned() {
   try {
-    const raw = localStorage.getItem(PINNED_KEY);
+    const raw = localStorage.getItem(PINNED_KEY2);
     if (raw === null) return [];
     const parsed = JSON.parse(raw);
     return Array.isArray(parsed) ? parsed.filter((name) => typeof name === "string") : [];
@@ -26024,13 +26130,14 @@ function loadPinned() {
 }
 function savePinned(pinned) {
   try {
-    localStorage.setItem(PINNED_KEY, JSON.stringify(pinned));
+    localStorage.setItem(PINNED_KEY2, JSON.stringify(pinned));
   } catch {
   }
+  void pushSharedState();
 }
 function loadUsage() {
   try {
-    const raw = localStorage.getItem(USAGE_KEY);
+    const raw = localStorage.getItem(USAGE_KEY2);
     if (raw === null) return {};
     const parsed = JSON.parse(raw);
     return parsed !== null && typeof parsed === "object" ? parsed : {};
@@ -26040,9 +26147,27 @@ function loadUsage() {
 }
 function saveUsage(usage) {
   try {
-    localStorage.setItem(USAGE_KEY, JSON.stringify(usage));
+    localStorage.setItem(USAGE_KEY2, JSON.stringify(usage));
   } catch {
   }
+  void pushSharedState();
+}
+async function skillOp(action, payload = {}) {
+  try {
+    const cwd = typeof payload.cwd === "string" && payload.cwd !== "" ? `?cwd=${encodeURIComponent(payload.cwd)}` : "";
+    const response = await fetch(`/dsh-skill-picker/skill${cwd}`, {
+      method: "POST",
+      headers: { "content-type": "application/json", "x-dsh-skill-picker": "1" },
+      body: JSON.stringify({ action, ...payload })
+    });
+    const body = await response.json().catch(() => void 0);
+    if (body === void 0 || body.ok !== true) {
+      return { ok: false, error: body?.error ?? `host returned ${response.status}` };
+    }
+    return body;
+  } catch (cause) {
+    return { ok: false, error: String(cause?.message ?? cause) };
+  }
 }
 function isUserFacingSkill(skill) {
   const flag = skill?.userInvocable ?? skill?.invocation?.userInvocable;
@@ -26212,6 +26337,59 @@ var statusStyle = {
   color: "var(--dsw-alias-label-tertiary, #8a94a6)",
   fontSize: "13px"
 };
+var actionSpanStyle = {
+  flex: "none",
+  marginLeft: "6px",
+  padding: "2px 4px",
+  borderRadius: "6px",
+  fontSize: "12px",
+  lineHeight: "16px",
+  cursor: "pointer",
+  color: "var(--dsw-alias-label-tertiary, #8a94a6)",
+  opacity: 0.55,
+  userSelect: "none"
+};
+var noticeStyle = {
+  display: "flex",
+  alignItems: "center",
+  gap: "8px",
+  margin: "0 8px 8px",
+  padding: "6px 10px",
+  borderRadius: "8px",
+  fontSize: "12px",
+  lineHeight: "18px",
+  background: "var(--dsw-alias-interactive-bg-hover, rgba(128,128,128,0.12))",
+  color: "var(--dsw-alias-label-secondary, #b6bfcc)"
+};
+var menuStyle = {
+  position: "fixed",
+  zIndex: 2147483e3,
+  minWidth: "196px",
+  padding: "4px",
+  borderRadius: "10px",
+  border: "1px solid var(--dsw-alias-border-secondary, rgba(128,128,128,0.24))",
+  background: "var(--dsw-alias-bg-elevated, #23262e)",
+  boxShadow: "0 8px 28px rgba(0,0,0,0.36)",
+  color: "var(--dsw-alias-label-primary, #e6e9ef)",
+  fontSize: "13px",
+  userSelect: "none"
+};
+var menuHeaderStyle = {
+  padding: "6px 10px 4px",
+  fontSize: "11px",
+  color: "var(--dsw-alias-label-tertiary, #8a94a6)",
+  borderBottom: "1px solid var(--dsw-alias-border-secondary, rgba(128,128,128,0.18))",
+  marginBottom: "4px",
+  overflow: "hidden",
+  textOverflow: "ellipsis",
+  whiteSpace: "nowrap"
+};
+var menuItemStyle = {
+  padding: "6px 10px",
+  borderRadius: "6px",
+  cursor: "pointer",
+  whiteSpace: "nowrap"
+};
 var sourceBadgeStyle = {
   display: "inline-flex",
   alignItems: "center",
@@ -26252,17 +26430,31 @@ function SkillPickerButton(props) {
   const [skills, setSkills] = (0, import_react.useState)(void 0);
   const [error, setError] = (0, import_react.useState)(void 0);
   const [source, setSource] = (0, import_react.useState)(void 0);
+  const [disabledSkills, setDisabledSkills] = (0, import_react.useState)([]);
+  const [busySkill, setBusySkill] = (0, import_react.useState)("");
+  const [notice, setNotice] = (0, import_react.useState)(void 0);
+  const [menu, setMenu] = (0, import_react.useState)(void 0);
   const [query, setQuery] = (0, import_react.useState)("");
   const [usage, setUsage] = (0, import_react.useState)(() => loadUsage());
   const [pinned, setPinned] = (0, import_react.useState)(() => loadPinned());
   const [active, setActive] = (0, import_react.useState)(0);
   const boxRef = (0, import_react.useRef)(null);
   const itemRefs = (0, import_react.useRef)([]);
+  const longPressRef = (0, import_react.useRef)(0);
   (0, import_react.useEffect)(() => {
     const onUsageUpdated = () => setUsage(loadUsage());
     window.addEventListener("dsh-skill-picker:usage-updated", onUsageUpdated);
     return () => window.removeEventListener("dsh-skill-picker:usage-updated", onUsageUpdated);
   }, []);
+  (0, import_react.useEffect)(() => {
+    const onSharedState = () => {
+      setUsage(loadUsage());
+      setPinned(loadPinned());
+    };
+    window.addEventListener(SHARED_STATE_EVENT, onSharedState);
+    void syncSharedState();
+    return () => window.removeEventListener(SHARED_STATE_EVENT, onSharedState);
+  }, []);
   const activeSessionId = sessionIdOf(props);
   (0, import_react.useEffect)(() => {
     if (activeSessionId !== void 0) warmSlashSkill(activeSessionId);
@@ -26277,8 +26469,8 @@ function SkillPickerButton(props) {
   } else if (props.input !== void 0 && typeof props.input.draft === "string") {
     draftRef.current = props.input.draft;
   }
-  const load = (0, import_react.useCallback)(async () => {
-    if (skills !== void 0 || error !== void 0) return;
+  const load = (0, import_react.useCallback)(async (force = false) => {
+    if (!force && (skills !== void 0 || error !== void 0)) return;
     const sessionId = sessionIdOf(props);
     try {
       if (typeof props.listSkills === "function" && sessionId !== void 0) {
@@ -26301,10 +26493,80 @@ function SkillPickerButton(props) {
       setError(String(cause?.message ?? cause));
     }
   }, [skills, error, props.listSkills, props.sessionId, props.session, props.cwd]);
+  const loadDisabled = (0, import_react.useCallback)(async () => {
+    try {
+      const cwd = typeof props.cwd === "string" && props.cwd !== "" ? `?cwd=${encodeURIComponent(props.cwd)}` : "";
+      const res = await fetch(`/dsh-skill-picker/skills${cwd}`, { headers: { accept: "application/json" } });
+      const json = await res.json();
+      if (!json.ok) return;
+      setDisabledSkills((Array.isArray(json.skills) ? json.skills : []).filter((skill) => skill.disabled === true));
+    } catch {
+    }
+  }, [props.cwd]);
+  const runSkillOp = async (action, skill, extra = {}) => {
+    const name = typeof skill?.name === "string" ? skill.name : String(skill ?? "");
+    setBusySkill(name);
+    setNotice(void 0);
+    const result = await skillOp(action, { name, cwd: props.cwd, ...extra });
+    setBusySkill("");
+    if (result.ok !== true) {
+      setNotice({ kind: "err", text: result.error ?? "\u64CD\u4F5C\u5931\u8D25" });
+      return;
+    }
+    if (action === "uninstall") {
+      const id = String(result.backupPath ?? "").split(/[\\/]/).filter(Boolean).pop();
+      setNotice({ kind: "ok", text: `\u5DF2\u5378\u8F7D /${name} \u2014\u2014 \u53EA\u662F\u79FB\u8FDB\u5907\u4EFD\u76EE\u5F55\uFF0C\u6CA1\u5220`, undo: id });
+    } else if (action === "disable") {
+      setNotice({ kind: "ok", text: `\u5DF2\u5173\u95ED /${name} \u2014\u2014 agent \u4E5F\u4E0D\u4F1A\u518D\u52A0\u8F7D\u5B83\u4E86` });
+    } else if (action === "enable") {
+      setNotice({ kind: "ok", text: `\u5DF2\u5F00\u542F /${name}` });
+    } else if (action === "reveal") {
+      setNotice({ kind: "ok", text: `\u5DF2\u5728\u6587\u4EF6\u7BA1\u7406\u5668\u91CC\u5B9A\u4F4D /${name}` });
+    }
+    await Promise.all([load(true), loadDisabled()]);
+  };
+  const undoUninstall = async (id) => {
+    if (typeof id !== "string" || id === "") return;
+    setBusySkill("(undo)");
+    const result = await skillOp("restore", { id, cwd: props.cwd });
+    setBusySkill("");
+    if (result.ok !== true) {
+      setNotice({ kind: "err", text: result.error ?? "\u64A4\u56DE\u5931\u8D25" });
+      return;
+    }
+    setNotice({ kind: "ok", text: "\u5DF2\u64A4\u56DE\uFF0C\u6280\u80FD\u56DE\u5230\u539F\u4F4D\u7F6E" });
+    await Promise.all([load(true), loadDisabled()]);
+  };
+  const openMenu = (event, skill, disabled) => {
+    const width = 208;
+    const height = disabled ? 84 : 168;
+    const x = Math.max(8, Math.min(event.clientX, (window.innerWidth || 1024) - width - 8));
+    const y = Math.max(8, Math.min(event.clientY, (window.innerHeight || 768) - height - 8));
+    setMenu({ x, y, skill, disabled });
+  };
+  (0, import_react.useEffect)(() => {
+    if (menu === void 0) return void 0;
+    const close = () => setMenu(void 0);
+    const onKey = (event) => {
+      if (event.key === "Escape") close();
+    };
+    document.addEventListener("pointerdown", close);
+    document.addEventListener("keydown", onKey);
+    window.addEventListener("blur", close);
+    window.addEventListener("resize", close);
+    return () => {
+      document.removeEventListener("pointerdown", close);
+      document.removeEventListener("keydown", onKey);
+      window.removeEventListener("blur", close);
+      window.removeEventListener("resize", close);
+    };
+  }, [menu]);
   const toggle = () => {
     if (!open) {
+      void syncSharedState();
       setUsage(loadUsage());
       void load();
+      void loadDisabled();
     }
     setOpen(!open);
   };
@@ -26412,6 +26674,21 @@ function SkillPickerButton(props) {
                 itemRefs.current[index] = el;
               },
               onClick: () => pick(skill.name),
+              onContextMenu: (event) => {
+                event.preventDefault();
+                event.stopPropagation();
+                openMenu(event, skill, false);
+              },
+              onTouchStart: (event) => {
+                const touch = event.touches?.[0];
+                if (touch === void 0) return;
+                longPressRef.current = window.setTimeout(
+                  () => openMenu({ clientX: touch.clientX, clientY: touch.clientY }, skill, false),
+                  500
+                );
+              },
+              onTouchEnd: () => window.clearTimeout(longPressRef.current),
+              onTouchMove: () => window.clearTimeout(longPressRef.current),
               onMouseEnter: (event) => {
                 setActive(index);
                 event.currentTarget.style.background = "var(--dsw-alias-interactive-bg-hover, rgba(128,128,128,0.12))";
@@ -26490,6 +26767,87 @@ function SkillPickerButton(props) {
             ] }, group.title);
           });
         })() }),
+        notice !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: noticeStyle, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: { flex: "1", color: notice.kind === "err" ? "var(--dsw-alias-label-error, #ff7b72)" : void 0 }, children: notice.text }),
+          typeof notice.undo === "string" && notice.undo !== "" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+            "span",
+            {
+              role: "button",
+              tabIndex: -1,
+              onClick: () => void undoUninstall(notice.undo),
+              style: { cursor: "pointer", textDecoration: "underline", flex: "none" },
+              children: "\u64A4\u56DE"
+            }
+          )
+        ] }),
+        disabledSkills.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { marginTop: "4px" }, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(
+            "div",
+            {
+              style: {
+                display: "flex",
+                alignItems: "center",
+                justifyContent: "space-between",
+                padding: "6px 10px 2px",
+                color: "var(--dsw-alias-label-tertiary, #8a94a6)",
+                fontSize: "11px",
+                fontWeight: 600,
+                letterSpacing: "0.04em"
+              },
+              children: [
+                /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { children: "\u23FB \u5DF2\u5173\u95ED" }),
+                /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: { opacity: 0.7 }, children: disabledSkills.length })
+              ]
+            }
+          ),
+          disabledSkills.map((skill) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(
+            "div",
+            {
+              onContextMenu: (event) => {
+                event.preventDefault();
+                event.stopPropagation();
+                openMenu(event, skill, true);
+              },
+              style: {
+                ...itemStyle,
+                flexDirection: "row",
+                alignItems: "center",
+                opacity: 0.55
+              },
+              children: [
+                /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { style: { display: "flex", flexDirection: "column", alignItems: "flex-start", gap: "2px", flex: "1", minWidth: "0" }, children: [
+                  /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: nameStyle, children: `/${skill.name}` }),
+                  /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: descStyle, children: skill.description ?? "" })
+                ] }),
+                /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+                  "span",
+                  {
+                    role: "button",
+                    tabIndex: -1,
+                    title: "\u91CD\u65B0\u5F00\u542F\uFF08\u628A SKILL.md.disabled \u6539\u56DE SKILL.md\uFF09",
+                    "aria-label": "\u91CD\u65B0\u5F00\u542F",
+                    onClick: () => void runSkillOp("enable", skill),
+                    style: actionSpanStyle,
+                    children: busySkill === skill.name ? "\u2026" : "\u23FB \u5F00\u542F"
+                  }
+                ),
+                /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+                  "span",
+                  {
+                    role: "button",
+                    tabIndex: -1,
+                    title: "\u5728\u6587\u4EF6\u7BA1\u7406\u5668\u4E2D\u5B9A\u4F4D",
+                    "aria-label": "\u5728\u6587\u4EF6\u7BA1\u7406\u5668\u4E2D\u5B9A\u4F4D",
+                    onClick: () => void runSkillOp("reveal", skill),
+                    style: actionSpanStyle,
+                    children: "\u{1F4C2}"
+                  }
+                )
+              ]
+            },
+            `off-${skill.name}`
+          ))
+        ] }),
         source === "host" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: sourceBadgeStyle, title: "\u5B98\u65B9\u6280\u80FD API \u4E0D\u53EF\u7528\uFF0C\u5217\u8868\u6765\u81EA\u672C\u5730\u76EE\u5F55\u626B\u63CF\uFF08\u4E0E\u5B98\u65B9 / \u8865\u5168\u540C\u6E90\uFF09", children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: sourceBadgeTextStyle, children: "\u672C\u5730\u626B\u63CF" }) }),
         slashEnhancementMode() === "runtime" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
           "div",
@@ -26498,12 +26856,83 @@ function SkillPickerButton(props) {
             title: "`/` \u83DC\u5355\u7684\u6A21\u7CCA+\u62FC\u97F3\u641C\u7D22\u7531\u672C\u63D2\u4EF6\u5728\u8FD0\u884C\u65F6\u63A5\u7BA1\u5B98\u65B9\u6280\u80FD\u6E90\uFF08\u4E0D\u4F9D\u8D56\u6539\u5199\u4EFB\u4F55\u6587\u4EF6\uFF0Cissue #14\uFF09",
             children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { style: sourceBadgeTextStyle, children: "/ \u589E\u5F3A\uFF1A\u8FD0\u884C\u65F6\u63A5\u7BA1" })
           }
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { margin: "0 10px 8px", fontSize: "11px", color: "var(--dsw-alias-label-tertiary, #8a94a6)" }, children: "\u53F3\u952E\u6280\u80FD = \u7F6E\u9876 / \u5173\u95ED / \u5B9A\u4F4D / \u5378\u8F7D\uFF08\u624B\u673A\u957F\u6309\uFF09" }),
+        menu !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(
+          "div",
+          {
+            style: { ...menuStyle, left: `${menu.x}px`, top: `${menu.y}px` },
+            onPointerDown: (event) => event.stopPropagation(),
+            children: [
+              /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: menuHeaderStyle, children: `/${menu.skill.name}` }),
+              !menu.disabled && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+                "div",
+                {
+                  style: menuItemStyle,
+                  role: "button",
+                  tabIndex: -1,
+                  onClick: () => {
+                    setMenu(void 0);
+                    togglePin(menu.skill.name);
+                  },
+                  children: pinned.includes(menu.skill.name) ? "\u{1F4CC} \u53D6\u6D88\u7F6E\u9876" : "\u{1F4CC} \u7F6E\u9876\u5230\u9876\u90E8"
+                }
+              ),
+              /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+                "div",
+                {
+                  style: menuItemStyle,
+                  role: "button",
+                  tabIndex: -1,
+                  onClick: () => {
+                    const target = menu.skill;
+                    const turningOff = !menu.disabled;
+                    setMenu(void 0);
+                    void runSkillOp(turningOff ? "disable" : "enable", target);
+                  },
+                  children: menu.disabled ? "\u23FB \u5F00\u542F" : "\u23FB \u5173\u95ED\uFF08agent \u4E5F\u4E0D\u518D\u52A0\u8F7D\uFF09"
+                }
+              ),
+              /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+                "div",
+                {
+                  style: menuItemStyle,
+                  role: "button",
+                  tabIndex: -1,
+                  onClick: () => {
+                    const target = menu.skill;
+                    setMenu(void 0);
+                    void runSkillOp("reveal", target);
+                  },
+                  children: "\u{1F4C2} \u5728\u6587\u4EF6\u7BA1\u7406\u5668\u4E2D\u5B9A\u4F4D"
+                }
+              ),
+              !menu.disabled && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+                "div",
+                {
+                  style: { ...menuItemStyle, color: "var(--dsw-alias-label-error, #ff7b72)" },
+                  role: "button",
+                  tabIndex: -1,
+                  onClick: () => {
+                    const target = menu.skill;
+                    setMenu(void 0);
+                    if (!window.confirm(`\u5378\u8F7D /${target.name}\uFF1F
+
+\u5B83\u4F1A\u88AB\u79FB\u8FDB\u5907\u4EFD\u76EE\u5F55\uFF08\u4E0D\u662F\u5220\u9664\uFF09\uFF0C\u9762\u677F\u91CC\u53EF\u4EE5\u64A4\u56DE\u3002`)) return;
+                    void runSkillOp("uninstall", target);
+                  },
+                  children: "\u{1F5D1} \u5378\u8F7D\uFF08\u79FB\u5165\u5907\u4EFD\uFF0C\u53EF\u64A4\u56DE\uFF09"
+                }
+              )
+            ]
+          }
         )
       ] })
     ] })
   ] });
 }
 function apply(ctx) {
+  void syncSharedState();
   const listSkills = async (sessionId) => {
     const remoteSkills = ctx.remote?.skills;
     const connectionSkills = ctx.connection?.api?.skills;