scriptoriumadmin/skillhub
1
0
Fork 0
mirror of https://github.com/iflytek/skillhub.git synced 2026-11-15 09:11:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 5
1860 commits 345 branches 49 tags 113 MiB
Commit graph

645 commits

Author SHA1 Message Date
dongmucat
0c7fdd1b41 fix(deps): resolve Dependabot security alerts 2026-11-03 15:58:54 +08:00
千乘妍 (Xiaoyaner)
facd54575f Replace legacy edge fixtures with production assertions 
Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>
 2026-11-03 00:59:18 +08:00
千乘妍 (Xiaoyaner)
ae62cb0d76 Merge upstream/main into feat/configurable-frontend-analytics-989 
Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>
 2026-11-03 00:24:42 +08:00
千乘妍 (Xiaoyaner)
f436841d86 fix(analytics): generate DataFinder browser IDs on plain-HTTP origins 
crypto.randomUUID only exists in secure contexts and newer browsers, so
fresh browsers on plain-HTTP intranet deployments dropped every event.
Fall back to a getRandomValues v4 UUID with the same format.

Refs #989

Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>
 2026-11-02 15:06:20 +08:00
千乘妍 (Xiaoyaner)
987068cc6f feat(analytics): register configuration-only DataFinder adapter 
Refs #989

Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>
 2026-11-02 14:38:38 +08:00
PerryLink
c4c596e1a3 fix(web): clip the suite version cells that still overflow 
#1040 clipped the pinned version column in the suite member table and the
version ledger's member list. Two cells in the same feature kept rendering
the same 60+ character immutable snapshot versions unclipped:

- the version ledger's own version cell, in an 84px grid column;
- the bundle operation detail's member cell, in a 90px grid column.

Both bleed into the neighbouring status/visibility columns. Clip them with
the truncate + title pattern used elsewhere in these tables, and assert the
clipped cell in the existing operation-detail test.

Regenerate docs/frontend-analytics-manifest.json: the marker in
suite-bundle-operation-detail.tsx moved three lines down.

Signed-off-by: PerryLink <novelnexusai@outlook.com>
 2026-11-01 22:47:18 +08:00
wanting12345
55bd334a00 fix(web): truncate pinned version column in suite detail tables 
The pinned version cells in the suite member table and the version
ledger member list rendered raw member version strings (60+ character
immutable snapshot versions) inside fixed-width grid columns without
any overflow handling, so the text bled into adjacent columns.

Clip them with the same truncate + title pattern already used for the
member coordinate in the same tables; the full version stays available
via hover.

Signed-off-by: wanting12345 <2571039622@qq.com>

Co-Authored-By: Claude Code <noreply@anthropic.com>
 2026-10-30 14:07:00 +08:00
千乘妍 (Xiaoyaner)
7fb74e81b2 feat(deploy): configure same-origin optional analytics 
Safely transport bounded JSON using existing image tools, generate isolated exact proxy routes with verified HTTPS, and wire Compose and Helm with closed defaults.

Refs #989

Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>
 2026-10-29 23:16:31 +08:00
千乘妍 (Xiaoyaner)
427acf21bb feat(web): load optional analytics after application mount 
Move the passive helper and Umami adapter into one product source, retain the existing assertions, and add consent-aware lazy lifecycle control.

Refs #989

Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>
 2026-10-29 23:16:05 +08:00
小妍儿 ✨
6952629eed
feat(web): add passive semantic analytics attributes across frontend workflows (#1010) 
* feat(web): expose passive semantic analytics attributes

Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>

* fix(web): omit disabled non-native analytics intents

Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>

* fix(web): keep docs integration test outside production build inputs

Move the collector example test alongside existing root-level web tests so the web-only Docker context does not require repository documentation. Preserve all assertions and default Vitest discovery; document the boundary.

Verified 1217 tests, focused 12 tests, typecheck, lint, build and a fresh web-only build without repository docs. Original snapshot reproduced TS2307. Independent review passed. Full local image build was blocked by an uncached pnpm download with network disabled; remote image CI remains authoritative.

Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>

* docs(analytics): configure intent rules and add a manual Umami demo

Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>

* fix(analytics): accept product IDs and preserve concurrent intents

Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>

* fix(analytics): guard consent at Umami dispatch boundary

Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>

* fix(analytics): snapshot validated Umami payload primitives

Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>

* docs(analytics): define configurable opt-in integration

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* chore(analytics): refresh manifest line numbers after main merge

The merge of latest main shifted source lines in router and pages. Only
line numbers change; routes, IDs and sites are identical.

Refs #989

Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>

* fix(analytics): preserve release Web defaults in optional edge

Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>

* docs(analytics): add Chinese guide and split delivery scope

Refs #989

Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>

* docs(analytics): keep upstream override and bypass module cache in guide

Export the upstream override so later compose commands keep it, and
tell operators to bypass the immutable module cache when re-checking
an edited local entry.

Refs #989

Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>

---------

Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
Co-authored-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-29 14:56:58 +08:00
XiaoSeS
3271064afd
feat(dsh): add installation activation and simplify skill management (#1025) 
* feat(dsh): manage skill activation and simplify installation flows

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* fix(web): preserve optional skill website URL

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* fix(dsh): bound disabled skill checks on Windows

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

---------

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-28 15:39:35 +08:00
XiaoSeS
8f64d9b5e6 test(i18n): preserve initialization in suite badge mocks 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-26 17:26:47 +08:00
XiaoSeS
754c2ef0b8 fix(i18n): translate related suite badges into Korean 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-26 17:09:05 +08:00
XiaoSeS
6b8e66b38e Merge remote-tracking branch 'refs/remotes/origin/pr/1021' into codex/validate/pr1021-20261026 2026-10-26 17:05:55 +08:00
XiaoSeS
baaba6a1aa feat(suite): show viewer-safe membership hints on skill cards 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-26 15:47:44 +08:00
XiaoSeS
0771f2c14b test(web): cover visible suite membership hints on skill cards 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-26 15:29:00 +08:00
JeonJunYeong
82a8adc199 test(e2e): isolate fixture sessions and client quotas 
Signed-off-by: JeonJunYeong <wnsdud9476@gmail.com>
 2026-10-26 15:40:31 +09:00
JeonJunYeong
d1ea293b1f feat(i18n): add Korean language support to the web client 
Signed-off-by: JeonJunYeong <wnsdud9476@gmail.com>
 2026-10-26 15:03:34 +09:00
XiaoSeS
f9fc339509
fix(web): keep self-hosted fonts within the deployment base path (#1016) 
* fix(web): keep self-hosted fonts within the deployment base path

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* test(web): use a lint-safe font URL matcher

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

---------

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-25 22:38:38 +08:00
XiaoSeS
219dccae2a
fix(release): patch dev dependency and live validation fixtures (#1014) 
* fix(security): patch undici development dependency

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* test(github-sync): align live team and scanner fixtures

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

---------

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-25 18:42:57 +08:00
XiaoSeS
b54b5de519
fix(security): patch Go worker and Vitest tooling (#1013) 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-25 15:54:34 +08:00
XiaoSeS
2c87bdedd2
Merge pull request #1006 from iflytek/fix/vite-dependabot-20261022 
fix(deps): patch Vite vulnerabilities in web and docs
 2026-10-23 11:15:49 +08:00
XiaoSeS
76e9a867f1 Merge remote-tracking branch 'origin/main' into feat/dsh-use-skill 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

# Conflicts:
#	openspec/changes/add-dsh-native-plugin/tasks.md
#	openspec/changes/add-dsh-native-plugin/verification.md
 2026-10-22 17:52:44 +08:00
XiaoSeS
3402c07dbb feat(dsh): add versioned skill examples and native task handoff 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-22 17:50:03 +08:00
FenjuFu
2f7b0c73e3 fix(deps): patch Vite vulnerabilities in web and docs 
Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
 2026-10-22 07:24:13 +00:00
XiaoSeS
c816215ae2 fix(web): align supported Node toolchains and CI gates 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-21 16:33:15 +08:00
XiaoSeS
3217d26598 Merge remote-tracking branch 'origin/pr-992' into fix/pr992-node-toolchain-20261021 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-21 16:24:08 +08:00
zjncs
737ff48b2f fix(dev): pin the web toolchain to Node 20/22 
jsdom-based web unit tests silently break on Node 25 (window.localStorage
degrades to a plain object, see #991) while CI stays green on its pinned
Node 20 — a confusing failure mode for new contributors on bleeding-edge
Node. Pins the local default via .nvmrc, declares engines in
web/package.json, and spells out the supported versions in CONTRIBUTING.

Signed-off-by: zjncs <18910855655@163.com>
 2026-10-21 13:57:18 +08:00
XiaoSeS
53663267df test(review): assert explicit display name in namespace E2E 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-20 19:33:51 +08:00
XiaoSeS
62e215bbd0 fix(ci): prepare Go interop and align review E2E interactions 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-20 19:06:26 +08:00
XiaoSeS
814a180bef fix(review): allow bundled diff worker in page CSP 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-20 18:17:16 +08:00
XiaoSeS
4de9ab79f7 Merge latest main for GitHub sync delivery validation 2026-10-20 17:23:33 +08:00
XiaoSeS
5803b2667f
Merge pull request #969 from Danny5487401/fix/keycloak-oauth-icon-968 
fix(auth): bundle Keycloak, Auth0 and Okta login icons
 2026-10-20 17:02:43 +08:00
XiaoSeS
3e6a0c739f
Merge pull request #983 from iflytek/fix/issue-980-suite-clipboard 
fix(suite): support copying install commands over HTTP
 2026-10-20 17:02:28 +08:00
XiaoSeS
2facedd598 merge: integrate main for github sync delivery 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-20 15:39:13 +08:00
XiaoSeS
c4c3d5b63c
feat(dsh): refine skill lifecycle and release 0.3.0 (#986) 
Refine marketplace actions, scoped installation, native questions, progress, removal and exact-version upgrades; align downloadable version pagination and OpenSpec.\n\nSigned-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-20 15:18:23 +08:00
XiaoSeS
2df4c913cb feat(github-sync): add continuous public repository discovery and skill sync 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-20 14:40:46 +08:00
XiaoSeS
788eccec36 fix(suite): support copying install commands over HTTP 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-20 10:47:14 +08:00
XiaoSeS
87d922896b fix(web): refresh removed owner state on resubmission 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-19 16:27:16 +08:00
XiaoSeS
1826fa6768 fix(web): refresh owner permissions after rejected updates 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-19 16:24:55 +08:00
XiaoSeS
5639605029 fix(auth): enforce read-only ownership after team removal 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-19 16:13:46 +08:00
XiaoSeS
2fe1a44059
fix(web): preserve proxy authority in forwarded redirects (#972) 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-19 15:23:29 +08:00
XiaoSeS
0318b75e03
fix(release): correct avatar security, missing routes and scan refresh (#970) 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-19 13:53:41 +08:00
Danny5487401
be5d4516ec fix(auth): bundle OIDC provider login icons 
Signed-off-by: Danny5487401 <64348131+Danny5487401@users.noreply.github.com>
 2026-10-19 13:44:32 +08:00
XiaoSeS
3560679793
feat(dsh): add native SkillHub plugin for DeepSeek Harness (#956)
Some checks failed
Deploy Docs / build (push) Has been cancelled
Details
Security / Dependency Review (push) Has been cancelled
Details
Security / CodeQL (java-kotlin) (push) Has been cancelled
Details
Security / CodeQL (javascript-typescript) (push) Has been cancelled
Details
Security / CodeQL (python) (push) Has been cancelled
Details
Deploy Docs / Deploy (push) Has been cancelled
Details 
Add the native SkillHub plugin for DeepSeek Harness with a scoped skill center, conversation search/install tools, exact-version installation and protected lifecycle management. Prepare the independently versioned 0.1.0 npm candidate with an empty default Registry and documented compatibility limits.

Keep formal specifications and executable regression tests; remove archived development screenshots and runtime reports from the final tree. Review fixes cover independent scopes, installed references, pre-staging recovery and idempotent discovery.

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-16 19:22:26 +08:00
XiaoSeS
a6dc8eca74
Merge pull request #963 from iflytek/feat/issue-951-visibility-20261015 
feat(skill): change published skill visibility through review
 2026-10-16 12:38:45 +08:00
XiaoSeS
a962a45c02
Merge pull request #962 from iflytek/fix/issue-946-promotion-delete-20261015 
fix(lifecycle): clarify deletion of promoted skills
 2026-10-16 12:38:17 +08:00
XiaoSeS
d238208617 fix(web): consume handled skill deletion failures 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-16 11:44:01 +08:00
XiaoSeS
dd4700bccd fix(web): explain pending scope and linked global skills 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-16 11:32:46 +08:00
XiaoSeS
e41867af9e fix(web): keep long skill card content from overlapping 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-10-16 11:18:03 +08:00