scriptoriumadmin/skillhub
1
0
Fork 0
mirror of https://github.com/iflytek/skillhub.git synced 2026-11-15 09:11:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
1847 commits 345 branches 49 tags 113 MiB
Commit graph

693 commits

Author SHA1 Message Date
XiaoSeS
22d8451ec8
fix(auth): handle blank device verification URI configuration (#1034) 
* fix(auth): resolve blank device verification URI safely

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* fix(deploy): align device URI preflight validation

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

---------

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-29 17:14:41 +08:00
XiaoSeS
3271064afd
feat(dsh): add installation activation and simplify skill management (#1025) 
* feat(dsh): manage skill activation and simplify installation flows

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* fix(web): preserve optional skill website URL

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* fix(dsh): bound disabled skill checks on Windows

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

---------

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-28 15:39:35 +08:00
XiaoSeS
baaba6a1aa feat(suite): show viewer-safe membership hints on skill cards 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-26 15:47:44 +08:00
XiaoSeS
219dccae2a
fix(release): patch dev dependency and live validation fixtures (#1014) 
* fix(security): patch undici development dependency

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* test(github-sync): align live team and scanner fixtures

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

---------

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-25 18:42:57 +08:00
XiaoSeS
3402c07dbb feat(dsh): add versioned skill examples and native task handoff 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-22 17:50:03 +08:00
XiaoSeS
6743265a90 fix(storage): preserve private staging and address deployment review 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-21 15:02:39 +08:00
XiaoSeS
8a150e34d3 feat(storage): add S3-compatible deployment options 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-21 14:31:29 +08:00
XiaoSeS
b6b92939ab test(github-sync): read stored archive fixtures through central directory 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-20 16:13:09 +08:00
XiaoSeS
2facedd598 merge: integrate main for github sync delivery 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-20 15:39:13 +08:00
XiaoSeS
c4c3d5b63c
feat(dsh): refine skill lifecycle and release 0.3.0 (#986) 
Refine marketplace actions, scoped installation, native questions, progress, removal and exact-version upgrades; align downloadable version pagination and OpenSpec.\n\nSigned-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-20 15:18:23 +08:00
XiaoSeS
9c4fced593 test(github-sync): align integration fixtures with main contracts 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-20 15:18:17 +08:00
XiaoSeS
7a043fe868 fix(github-sync): retain review targets across content-preserving path moves 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-20 14:52:28 +08:00
XiaoSeS
2df4c913cb feat(github-sync): add continuous public repository discovery and skill sync 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-20 14:40:46 +08:00
XiaoSeS
73d2c412e3 test(auth): seed real membership for owner delete flows 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-19 16:59:14 +08:00
XiaoSeS
bbf53c16a6 fix(auth): keep removed owners in accessible favorites 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-19 16:45:49 +08:00
XiaoSeS
283737d175 test(auth): provide current skill for review withdrawal 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-19 16:36:15 +08:00
XiaoSeS
5639605029 fix(auth): enforce read-only ownership after team removal 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-19 16:13:46 +08:00
XiaoSeS
5ef53f4772 fix(auth): preserve removed skill owners read access 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-19 15:57:59 +08:00
XiaoSeS
0318b75e03
fix(release): correct avatar security, missing routes and scan refresh (#970) 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-19 13:53:41 +08:00
XiaoSeS
3560679793
feat(dsh): add native SkillHub plugin for DeepSeek Harness (#956)
Some checks failed
Deploy Docs / build (push) Has been cancelled
Details
Security / Dependency Review (push) Has been cancelled
Details
Security / CodeQL (java-kotlin) (push) Has been cancelled
Details
Security / CodeQL (javascript-typescript) (push) Has been cancelled
Details
Security / CodeQL (python) (push) Has been cancelled
Details
Deploy Docs / Deploy (push) Has been cancelled
Details 
Add the native SkillHub plugin for DeepSeek Harness with a scoped skill center, conversation search/install tools, exact-version installation and protected lifecycle management. Prepare the independently versioned 0.1.0 npm candidate with an empty default Registry and documented compatibility limits.

Keep formal specifications and executable regression tests; remove archived development screenshots and runtime reports from the final tree. Review fixes cover independent scopes, installed references, pre-staging recovery and idempotent discovery.

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-16 19:22:26 +08:00
XiaoSeS
d31d0cf308
Merge pull request #965 from martindissingmadsen/feat/skill-labels-api-token 
feat(auth): allow API tokens to attach and detach skill labels
 2026-10-16 15:16:02 +08:00
XiaoSeS
e306761d2e test(auth): cover token label permission boundaries 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-16 14:01:35 +08:00
XiaoSeS
a6dc8eca74
Merge pull request #963 from iflytek/feat/issue-951-visibility-20261015 
feat(skill): change published skill visibility through review
 2026-10-16 12:38:45 +08:00
XiaoSeS
a962a45c02
Merge pull request #962 from iflytek/fix/issue-946-promotion-delete-20261015 
fix(lifecycle): clarify deletion of promoted skills
 2026-10-16 12:38:17 +08:00
XiaoSeS
dd4700bccd fix(web): explain pending scope and linked global skills 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-16 11:32:46 +08:00
XiaoSeS
c8007f0524 test(bootstrap): verify built-in upgrades with PostgreSQL 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-16 09:22:29 +08:00
XiaoSeS
ff742b4e5c test(bootstrap): use H2 dialect for built-in upgrade fixture 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-16 09:17:54 +08:00
Martin Dissing-Madsen
d6fba6a403 feat(auth): allow API tokens to attach and detach skill labels 
API tokens could attach and detach labels on suites but not on skills, so CLI and
agent integrations could publish a skill but not label it. Add the matching
PUT/DELETE token policies for /api/v1 and /api/web skill labels, requiring
skill:publish like the suite rules. Label permission checks are unchanged.

Signed-off-by: Martin Dissing-Madsen <179458371+martindissingmadsen@users.noreply.github.com>
 2026-10-15 14:45:03 +02:00
XiaoSeS
6927ecf592 fix(skill): enforce visibility review and distribution boundaries 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-15 19:50:13 +08:00
XiaoSeS
980fa29d81 feat(skill): review independent published visibility changes 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-15 19:28:36 +08:00
XiaoSeS
1319e79124 fix(lifecycle): guide promoted skill deletion and verify revocation 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-15 19:24:14 +08:00
XiaoSeS
0a9fcaef79 fix(social): enforce skill access for stars and ratings 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-15 19:22:47 +08:00
XiaoSeS
e50d54deb5 fix(api): route package preview through authenticated policy chain 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-15 16:47:29 +08:00
XiaoSeS
793a519bdb fix(publish): preserve package preview and version presentation compatibility 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-15 16:10:42 +08:00
XiaoSeS
1c164c8702 feat(publish): support versioned web display names 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-15 15:59:56 +08:00
XiaoSeS
56aae708e7 test(promotion): seed object JSON in H2 approval fixtures 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-15 14:24:18 +08:00
XiaoSeS
6b85e96326 fix(publish): keep version display metadata consistent across lifecycle 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-15 13:52:17 +08:00
Raymond
2bdb83bdb6 feat(publish): support metadata display names independent of skill slugs 
Use optional metadata.display-name for skill titles while preserving stable
slugs and URLs. Keep published titles unchanged until review approval, and
cover localized title display and search with generic example fixtures.

Restore the fallback version title and summary when yanking the latest
published version, with regression coverage for the lifecycle boundaries.

Document the metadata field and retain existing behavior when it is absent.

Signed-off-by: Raymond <21071287+raymondtc@users.noreply.github.com>
 2026-10-15 09:49:27 +08:00
XiaoSeS
3bfd8a322a fix(review): handle metadata inbox without version context 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-14 20:46:51 +08:00
XiaoSeS
57bb09fde7 test: align namespace guard mock after authoring merge 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-14 20:22:09 +08:00
XiaoSeS
71790bc1b8 merge: sync main after authoring prerequisite 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-14 20:07:47 +08:00
XiaoSeS
d8dbd4f0c9 fix(authoring): prevent namespace deletion while drafts remain 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-14 19:46:41 +08:00
XiaoSeS
642e780f1e fix(authoring): protect draft transactions and validation lifecycle 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-14 18:15:44 +08:00
XiaoSeS
ccd171eac9 feat(namespace): retain invitation history and join records 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-14 11:52:19 +08:00
XiaoSeS
71d0598d92 feat(review): unify skill avatar approval and space management 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-13 18:38:30 +08:00
XiaoSeS
14cc3f11eb fix(auth): declare staged avatar uploads session-only 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-13 11:47:11 +08:00
XiaoSeS
1a7ffbe6e2 feat(avatar): stage images before skill publication 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-13 11:15:35 +08:00
XiaoSeS
3b3e5ed27c test(avatar): cover policy and release generation boundaries 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-12 16:39:25 +08:00
XiaoSeS
bc2592c978 test(avatar): verify recovery with PostgreSQL transactions 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-12 16:16:15 +08:00
XiaoSeS
5f2d47968c feat: combine Skill avatars and namespace invitations 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-12 13:42:31 +08:00