dsh-skill-store 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 cxy9204
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,184 @@
+# dsh-skill-store
+
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+[![Listed on dsh-plugin.org](https://dsh-plugin.org/badges/listed.svg)](https://dsh-plugin.org/plugins/cxy9204/dsh-skill-store)
+
+**DeepSeek Harness 社区技能商店** —— 在应用内浏览、搜索并一键安装来自三个数据源的 **14 万+** 个 Agent Skills，按星标 / 下载量排序，中文分类直达。
+
+装了它之后：打开 DSH Web 界面，进入「设置 → 技能商店」，就能直接搜技能、看热度、点一下装到本地，不用再去 GitHub 手动翻仓库、下载 ZIP、解压到 skills 目录。
+
+---
+
+## 三个数据源
+
+> 数量为本机 2026-09-02 实测，源站在持续增长，实际以界面显示为准。
+
+| 数据源 | 技能数 | 星标 | 下载量 | 分类 | 内容下载 |
+|---|---:|:---:|:---:|:---:|:---:|
+| **SkillHub**（默认推荐） | 134,262 | ✅ | ✅ | ✅ 13 个中英双语大类 | ✅ |
+| **ClawHub** | 6,632 | ✅ 最高 3982★ | ✅ 最高 47 万 | ✅ 1694 个 topics | ✅ |
+| **GitHub 镜像**（awesome-skills-cn） | 2,063 | ❌ 目录非仓库 | ❌ | ⚠️ 11 个 collection 级 | ✅ |
+
+三个生态互不重叠（SkillHub 与 ClawHub 名称匹配率仅 0.2%），因此设计为**并列切换**而非合并。
+
+### GitHub 源的分类标签与上游可信度
+
+| Collection | 分类 | 上游仓库 |
+|---|---|---|
+| `anthropics-skills` | Anthropic 官方 | anthropics/skills |
+| `openai-skills` | OpenAI 官方 | openai/skills |
+| `claude-scientific-skills` | 科学研究 | K-Dense-AI/claude-scientific-skills |
+| `huggingface-skills` | HuggingFace | huggingface/skills |
+| `obsidian-skills` | Obsidian | kepano/obsidian-skills |
+| 其余 6 个 | 社区合集 | 见源码 `COLLECTIONS` |
+
+上游仓库 Star 数会显示在卡片上，作为来源可信度参考。
+
+---
+
+## 安装
+
+```bash
+dsh plugin --profile web add dsh-skill-store
+```
+
+安装后**重启 DSH Web** 即可在设置中看到「技能商店」入口。
+
+从源码安装：
+
+```bash
+git clone https://github.com/cxy9204/dsh-skill-store.git
+cd dsh-skill-store
+npm install
+dsh plugin --profile web add file:./path/to/dsh-skill-store
+```
+
+卸载：
+
+```bash
+dsh plugin --profile web remove dsh-skill-store
+```
+
+---
+
+## 功能
+
+- **三源切换** —— 顶部按钮切换 GitHub / ClawHub / SkillHub，切到后两者会出现排序下拉框
+- **热度排序** —— 按星标 / 下载量 / 安装量 / 名称排序，热门技能一目了然
+- **分类筛选** —— 下拉选择分类，每项标注技能数量
+- **全文搜索** —— 同时匹配技能名与描述
+- **一键安装** —— 技能写入 `~/.dsh/skills/<name>/SKILL.md`，装完即可用
+- **详情预览** —— 点卡片看完整 SKILL.md 正文与热度数据
+- **渐进式加载** —— 骨架索引秒开，描述与热度在后台逐步填充，进度可查
+
+## 实机输出
+
+插件挂载后的真实运行状态（DSH Web 默认 `127.0.0.1:3080`）：
+
+```bash
+$ curl -s http://127.0.0.1:3080/api/dsh-skill-store/status
+```
+
+```json
+{
+  "github":  { "total": 2063, "enriched": 0, "pending": 2063,
+               "activeMirror": "https://gcore.jsdelivr.net/gh/lingxling/awesome-skills-cn@main" },
+  "clawhub": { "loaded": true, "count": 6632, "builtAt": "2026-09-02T07:10:44.288Z" },
+  "skillhub":{ "loaded": true, "count": 2005, "builtAt": "2026-09-02T07:08:05.871Z",
+               "progress": { "pages": 20, "fetched": 2005, "total": 134262 } }
+}
+```
+
+`skillhub.count` 小于 `progress.total` 是渐进加载的正常中间态：索引边跑边用，可用技能数持续增长直至全量。
+
+单个技能的真实元数据（SkillHub API 原文截取）：
+
+```json
+{
+  "name": "B站视频分析",
+  "slug": "bilibili-content-research",
+  "canonicalName": "@user_825d9e7e/bilibili-content-research",
+  "category": "content-creation",
+  "subCategories": ["自媒体运营", "选题策划"],
+  "stars": 1, "downloads": 167, "version": "1.0.2"
+}
+```
+
+界面入口：**设置 → 技能商店**。顶部三源切换按钮、搜索框、分类下拉、排序下拉（ClawHub / SkillHub 下出现），卡片显示名称、描述与星标 / 下载量，点击卡片弹出详情预览与安装按钮。
+
+## 设计说明
+
+**为什么 GitHub 源没有星标？** 单个技能在仓库里是一个**目录**而不是一个仓库，本身不存在独立的 star 字段。实测原始仓库 frontmatter 中 `tags` 覆盖率仅 2%、`category` 6%，全仓库只有 8 个不同 tag —— 所以「全是未分类」是数据源缺陷而非 bug。本插件改为按 collection 归类并标注上游仓库 Star 作为替代。
+
+**网络适配（国内可用）**：`raw.githubusercontent.com` 在国内常被 DNS 阻断（报错 `ENOTFOUND`，且**不抛异常、只表现为数据为空**，极难排查）。本插件改用 jsDelivr CDN 多镜像回退，并记忆上次成功的源：
+
+```
+cdn.jsdelivr.net → gcore.jsdelivr.net → fastly.jsdelivr.net → raw.githubusercontent.com
+```
+
+**两阶段加载**：全量抓取 13 万个 SKILL.md 不现实。骨架只遍历目录树（十几秒），详情按需单拉 + 后台渐进填充，每 60 条落盘，重启续跑。
+
+---
+
+## 权限与外部服务
+
+本插件会向以下外部服务发出**只读** HTTPS 请求：
+
+| 服务 | 用途 |
+|---|---|
+| `api.github.com` | 读取 awesome-skills-cn 目录树 |
+| `*.jsdelivr.net` | 读取 SKILL.md 文件内容（CDN 镜像） |
+| `clawhub.ai` | ClawHub 技能注册表与文件内容 |
+| `api.skillhub.cn` | SkillHub 技能注册表与文件内容 |
+
+本地写入仅限：
+- `~/.dsh/skills/` —— 安装技能的目标目录
+- `~/.dsh/skill-store-cache/` —— 索引缓存
+
+**无遥测、无数据上传、不需要任何账号或 Token。** 设置 `GITHUB_TOKEN` 环境变量只是把 GitHub API 限额从 60 次/小时提升到 5000 次/小时，不设置也能正常使用。
+
+## 兼容性
+
+- **Profile**：`web`（需要 web 界面，headless 下 UI 不可用，API 端点仍可用）
+- **注入依赖**：`@deepseek-ai/dsh-client-ui-settings`、`@deepseek-ai/dsh-client-ui-slots`
+- **React**：18.x（可选 peerDependency，由宿主提供）
+- **Node.js**：≥ 20（依赖内置 `fetch` 与 ESM）
+
+## 开发
+
+```bash
+git clone https://github.com/cxy9204/dsh-skill-store.git
+cd dsh-skill-store
+node --check lib/index.js   # 语法检查
+```
+
+源码结构：
+
+```
+lib/index.js      主插件：路由、GitHub 源索引、安装逻辑
+lib/client.js     前端 UI（React，宿主注入）
+lib/clawhub.js    ClawHub 数据源
+lib/skillhub.js   SkillHub 数据源
+cordis.patch.yml  DSH 插件装载声明
+```
+
+调试接口：
+
+```bash
+curl http://localhost:<port>/api/dsh-skill-store/status
+curl "http://localhost:<port>/api/dsh-skill-store/sources"
+```
+
+## 常见问题
+
+**首次打开显示 0 个技能？** SkillHub 源首次索引约需 1-3 分钟在后台跑，刷新即可。访问 `/status` 端点可查看实时进度。
+
+**ClawHub 技能安装失败？** ClawHub 存在同名歧义（如 `github` 有 6 个作者），插件会自动选第一个（通常最热）。若装错，请从详情页确认作者。
+
+**安装后界面没出现？** DSH 插件需要重启 Web 进程才能完成前端注入。
+
+## 许可证
+
+MIT © 2026 cxy9204
+
+本项目为独立社区项目，与 DeepSeek AI 无隶属关系。

package/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: dsh-skill-store
+      name: dsh-skill-store

package/lib/clawhub.js

@@ -0,0 +1,253 @@
+/**
+ * @file ClawHub registry source for dsh-skill-store.
+ *
+ * ClawHub (https://clawhub.ai) exposes a public read API that carries exactly
+ * the metadata the GitHub mirror lacks: per-skill stars, downloads, installs
+ * and a real topic taxonomy (1694 distinct topics observed, including Chinese
+ * ones). Content is retrievable through the `file` endpoint, so skills from
+ * this source can be installed too.
+ *
+ * Endpoints used:
+ *   GET /api/v1/skills?limit=&cursor=&sort=stars|downloads   → list
+ *   GET /api/v1/skills/{slug}[?owner={handle}]               → detail
+ *   GET /api/v1/skills/{slug}/file?owner=&path=&version=     → raw file
+ *
+ * A slug may be ambiguous (several authors published the same name). The API
+ * answers 409 AMBIGUOUS_SKILL_SLUG with a `matches` array; we pick the first
+ * match (the registry orders them by relevance) and remember the owner.
+ */
+
+const BASE = "https://clawhub.ai/api/v1";
+const UA = "dsh-skill-store/0.1.0";
+
+/** In-memory fallback cache; disk cache is managed by the caller. */
+let _cache = null;
+let _fetching = false;
+let _lastError = null;
+
+async function getJson(url) {
+  try {
+    const res = await fetch(url, {
+      headers: { "User-Agent": UA, Accept: "application/json" },
+      signal: AbortSignal.timeout(20000),
+    });
+    const text = await res.text();
+    let json = null;
+    try { json = JSON.parse(text); } catch { /* non-JSON body */ }
+    return { status: res.status, json, text };
+  } catch (e) {
+    return { status: 0, json: null, text: String(e) };
+  }
+}
+
+/**
+ * Resolve the owning handle for a slug. Tries the bare slug first; on 409 the
+ * response enumerates the competing authors and we take the first one.
+ * @returns {Promise<{owner: string|null, detail: object|null}>}
+ */
+async function resolveOwner(slug) {
+  const bare = await getJson(`${BASE}/skills/${encodeURIComponent(slug)}`);
+  if (bare.status === 200 && bare.json?.skill) {
+    return { owner: bare.json.owner?.handle ?? null, detail: bare.json };
+  }
+
+  if (bare.status === 409) {
+    const matches = bare.json?.matches || [];
+    if (matches.length > 0) {
+      const pick = matches[0];
+      const withOwner = await getJson(
+        `${BASE}/skills/${encodeURIComponent(slug)}?owner=${encodeURIComponent(pick.ownerHandle)}`
+      );
+      if (withOwner.status === 200 && withOwner.json?.skill) {
+        return { owner: pick.ownerHandle, detail: withOwner.json };
+      }
+      return { owner: pick.ownerHandle, detail: null };
+    }
+  }
+  return { owner: null, detail: null };
+}
+
+/**
+ * Walk the whole registry with cursor pagination.
+ * @param {{maxPages?: number, sort?: string}} opts
+ */
+async function fetchAll(opts = {}) {
+  const { maxPages = 60, sort = "" } = opts;
+  const out = new Map();
+  let cursor = null;
+  let pages = 0;
+
+  while (pages < maxPages) {
+    const qs = new URLSearchParams({ limit: "100" });
+    if (sort) qs.set("sort", sort);
+    if (cursor) qs.set("cursor", cursor);
+
+    const r = await getJson(`${BASE}/skills?${qs.toString()}`);
+    if (r.status !== 200 || !r.json?.items) {
+      _lastError = `list page ${pages + 1}: HTTP ${r.status}`;
+      break;
+    }
+    for (const item of r.json.items) {
+      if (item?.slug) out.set(item.slug, item);
+    }
+    pages++;
+    if (!r.json.nextCursor || r.json.items.length === 0) break;
+    cursor = r.json.nextCursor;
+  }
+  return out;
+}
+
+/**
+ * Build (or return) the registry index.
+ * @param {boolean} force
+ * @param {{maxPages?: number}} opts
+ */
+async function getRegistry(force = false, opts = {}) {
+  if (!force && _cache) return _cache;
+  if (_fetching) return _cache || emptyRegistry();
+
+  _fetching = true;
+  _lastError = null;
+  try {
+    // Two passes: stars ordering surfaces popular skills even if the walk is
+    // cut short, then a full walk collects everything.
+    const byStars = await fetchAll({ sort: "stars", maxPages: 8, ...opts });
+    const all = await fetchAll(opts);
+    for (const [k, v] of byStars) if (!all.has(k)) all.set(k, v);
+
+    const skills = {};
+    const categories = {};
+    for (const [slug, item] of all) {
+      const st = item.stats || {};
+      const topics = Array.isArray(item.topics) ? item.topics.filter(Boolean) : [];
+      skills[slug] = {
+        name: slug,
+        displayName: item.displayName || slug,
+        description: item.summary || item.description || slug,
+        source: "clawhub",
+        stars: st.stars ?? 0,
+        downloads: st.downloads ?? 0,
+        installs: st.installs ?? 0,
+        comments: st.comments ?? 0,
+        topics,
+        version: item.latestVersion?.version ?? null,
+        updatedAt: item.updatedAt ?? null,
+        slug,
+        owner: null,          // resolved lazily at install time
+        browseUrl: `https://clawhub.ai/skills/${encodeURIComponent(slug)}`,
+        enriched: true,       // metadata comes free with the listing
+      };
+      const cats = topics.length ? topics : ["uncategorized"];
+      for (const c of cats) {
+        (categories[c] = categories[c] || []).push(slug);
+      }
+    }
+
+    _cache = {
+      builtAt: new Date().toISOString(),
+      count: Object.keys(skills).length,
+      skills,
+      categories,
+      _error: _lastError,
+    };
+    return _cache;
+  } catch (e) {
+    _lastError = e.message;
+    return emptyRegistry(e.message);
+  } finally {
+    _fetching = false;
+  }
+}
+
+function emptyRegistry(error) {
+  return {
+    builtAt: new Date().toISOString(),
+    count: 0,
+    skills: {},
+    categories: {},
+    _error: error || _lastError || null,
+  };
+}
+
+function query({ search, category, limit = 50, offset = 0, sort = "stars" } = {}) {
+  const reg = _cache || emptyRegistry();
+  let names = Object.keys(reg.skills);
+
+  if (category && reg.categories[category]) {
+    const inCat = new Set(reg.categories[category]);
+    names = names.filter((n) => inCat.has(n));
+  }
+  if (search) {
+    const q = search.toLowerCase();
+    names = names.filter((n) => {
+      const s = reg.skills[n];
+      return n.toLowerCase().includes(q)
+        || String(s.displayName || "").toLowerCase().includes(q)
+        || String(s.description || "").toLowerCase().includes(q)
+        || (s.topics || []).some((t) => String(t).toLowerCase().includes(q));
+    });
+  }
+
+  if (sort === "downloads") names.sort((a, b) => (reg.skills[b].downloads || 0) - (reg.skills[a].downloads || 0));
+  else if (sort === "installs") names.sort((a, b) => (reg.skills[b].installs || 0) - (reg.skills[a].installs || 0));
+  else if (sort === "recent") names.sort((a, b) => (reg.skills[b].updatedAt || 0) - (reg.skills[a].updatedAt || 0));
+  else names.sort((a, b) => (reg.skills[b].stars || 0) - (reg.skills[a].stars || 0));
+
+  return {
+    entries: names.slice(offset, offset + limit).map((n) => reg.skills[n]).filter(Boolean),
+    total: names.length,
+  };
+}
+
+/**
+ * Download a skill file. Resolves the owning handle when the slug is ambiguous.
+ * @param {string} slug
+ * @param {string} [path]
+ */
+async function fetchFile(slug, path = "SKILL.md") {
+  const reg = _cache;
+  const entry = reg?.skills?.[slug];
+  const version = entry?.version || null;
+
+  const { owner, detail } = await resolveOwner(slug);
+  const qs = new URLSearchParams();
+  if (owner) qs.set("owner", owner);
+  qs.set("path", path);
+  if (version) qs.set("version", version);
+
+  const r = await getJson(`${BASE}/skills/${encodeURIComponent(slug)}/file?${qs.toString()}`);
+  if (r.status === 200 && r.text) {
+    // remember owner for next time
+    if (entry && owner) entry.owner = owner;
+    return { content: r.text, owner, version, detail };
+  }
+
+  // Some skills store the instructions in a differently named file.
+  if (path === "SKILL.md") {
+    for (const alt of ["skill.md", "README.md"]) {
+      const qs2 = new URLSearchParams();
+      if (owner) qs2.set("owner", owner);
+      qs2.set("path", alt);
+      if (version) qs2.set("version", version);
+      const r2 = await getJson(`${BASE}/skills/${encodeURIComponent(slug)}/file?${qs2.toString()}`);
+      if (r2.status === 200 && r2.text) {
+        if (entry && owner) entry.owner = owner;
+        return { content: r2.text, owner, version, path: alt, detail };
+      }
+    }
+  }
+  return { content: null, owner, version, error: `HTTP ${r.status}` };
+}
+
+function status() {
+  const reg = _cache;
+  return {
+    loaded: !!reg,
+    fetching: _fetching,
+    count: reg?.count ?? 0,
+    builtAt: reg?.builtAt ?? null,
+    error: reg?._error ?? _lastError ?? null,
+  };
+}
+
+export { getRegistry, query, fetchFile, resolveOwner, status, BASE };