release: prepare v1.20.9 remote management fixes

Author: arch3rPro

CHANGELOG-zh.md

@@ -5,6 +5,19 @@
 格式基于 [Keep a Changelog](https://keepachangelog.com/zh-CN/1.1.0/)，
 版本号遵循 [语义化版本](https://semver.org/lang/zh-CN/)。
 
+## [1.20.9] - 2026-05-23
+
+### 发布概览
+- **远程管理稳定性与 QwenPaw 支持** — 将“远程工作区”统一更名为“远程管理”，修复远程 Skills 发现链路，使已检测到的 Agent 能稳定展示真实 Skills，并将 QwenPaw 作为内置 Lobster 智能体接入。
+
+### 用户可见更新
+- **远程 Skill 发现修复** — 远程管理现在会在重新进入主机时加载已缓存的远程 Skill 快照，扫描时校验标准 `SKILL.md` 标记，并正确识别 Lobster 类嵌套 Skill 目录，不再只显示空的 Agent 外壳。
+- **远程管理交互对齐** — 统一新远程模块命名，补齐主机与详情页的数据回填行为，并保持与全局工作区一致的概览/详情交互模型。
+- **QwenPaw 内置智能体** — 新增 QwenPaw 内置 Lobster 智能体，默认 Skill 根目录为 `~/.qwenpaw/skill_pool`，并补充本地图标资源。
+
+### 开发者与治理更新
+- **远程扫描 API 补全** — 新增 `remote_list_skill_snapshots` 命令，使前端可以直接读取已持久化的远程扫描结果，而不必每次强制重新走 SSH 扫描。
+- **扫描一致性回归覆盖** — 扩展远程工作区测试，覆盖 `SKILL.md` 校验、额外扫描根目录和 Lobster 递归目录发现，确保远程扫描规则与本地扫描器保持一致。
 ## [1.20.8] - 2026-05-23
 
 ### 发布概览

CHANGELOG.md

@@ -5,6 +5,19 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.20.9] - 2026-05-23
+
+### Release Overview
+- **Remote Management Stabilization and QwenPaw Support** — Renamed Remote Workspace to Remote Management, fixed remote Skill discovery so detected agents surface their real Skills reliably, and added built-in QwenPaw support under the Lobster agent group.
+
+### User-facing
+- **Remote Skill Discovery Fixes** — Remote Management now reloads cached remote Skill snapshots when you re-open a host, verifies standard `SKILL.md` markers during scans, and correctly discovers nested Lobster-style Skill directories instead of showing empty agent shells.
+- **Remote Management UX Alignment** — Updated the new remote section naming, refined host/detail loading behavior, and kept the page model aligned with the Global Workspace overview/detail flow.
+- **QwenPaw Built-in Agent** — Added QwenPaw as a built-in Lobster agent with the default Skill root `~/.qwenpaw/skill_pool` and a bundled local icon asset.
+
+### Developer & Governance
+- **Remote Scan API Completion** — Added a dedicated `remote_list_skill_snapshots` command so the frontend can reload persisted remote scan results without forcing a fresh SSH scan.
+- **Scanner Parity Coverage** — Extended remote workspace tests to cover `SKILL.md` validation, additional scan roots, and recursive Lobster directory discovery so remote scanning now follows the same compatibility rules as local scanning.
 ## [1.20.8] - 2026-05-23
 
 ### Release Overview

package.json

@@ -1,7 +1,7 @@
 {
   "name": "skills-manager-plus",
   "private": true,
-  "version": "1.20.8",
+  "version": "1.20.9",
   "type": "module",
   "scripts": {
     "dev": "vite",

public/agent-icons/qwenpaw.png

@@ -1,6 +1,6 @@
 [package]
 name = "skills-manager-plus"
-version = "1.20.8"
+version = "1.20.9"
 description = "Skills-Manager-Plus - AI Agent Skills Central Manager"
 authors = ["tianliang"]
 license = "MIT"

src-tauri/Cargo.lock

@@ -15,10 +15,11 @@ use crate::core::{
     remote_workspace::{
         create_remote_host, delete_remote_host, delete_remote_skill, get_remote_host,
         insert_remote_operation_log, install_center_skill_to_remote, list_remote_agent_paths,
-        list_remote_hosts, list_remote_operation_logs, parse_ssh_config, scan_remote_host,
-        update_remote_host, update_remote_skill_from_center, RemoteAgentPathRecord, RemoteAuthType,
-        RemoteHostInput, RemoteHostRecord, RemoteOperationLogRecord, RemoteSkillSnapshot,
-        SshConfigHost,
+        list_remote_hosts, list_remote_operation_logs, list_remote_skill_snapshots,
+        parse_ssh_config, scan_remote_host, update_remote_host,
+        update_remote_skill_from_center, CredentialRefUpdate, RemoteAgentPathRecord,
+        RemoteAuthType, RemoteHostInput, RemoteHostRecord, RemoteOperationLogRecord,
+        RemoteSkillSnapshot, SshConfigHost,
     },
     skill_store::SkillStore,
 };
@@ -43,18 +44,25 @@ pub async fn remote_create_host(
     let store = store.inner().clone();
     tauri::async_runtime::spawn_blocking(move || {
         let host = create_remote_host(&store, input.clone(), None).map_err(AppError::db)?;
-        let Some(saved_ref) = save_host_secret(
+        let credential_ref_update = save_host_secret(
             &host.id,
             &input.auth_type,
+            &input.auth_type,
             password,
             passphrase,
             save_secret,
-        )?
-        else {
-            return Ok(host);
-        };
+        )?;
 
-        update_remote_host(&store, &host.id, input, Some(saved_ref)).map_err(AppError::db)
+        match credential_ref_update {
+            CredentialRefUpdate::Replace(Some(saved_ref)) => update_remote_host(
+                &store,
+                &host.id,
+                input,
+                CredentialRefUpdate::Replace(Some(saved_ref)),
+            )
+            .map_err(AppError::db),
+            CredentialRefUpdate::Replace(None) | CredentialRefUpdate::Preserve => Ok(host),
+        }
     })
     .await?
 }
@@ -70,9 +78,18 @@ pub async fn remote_update_host(
 ) -> Result<RemoteHostRecord, AppError> {
     let store = store.inner().clone();
     tauri::async_runtime::spawn_blocking(move || {
-        let credential_ref =
-            save_host_secret(&id, &input.auth_type, password, passphrase, save_secret)?;
-        update_remote_host(&store, &id, input, credential_ref).map_err(AppError::db)
+        let existing_host = get_remote_host(&store, &id)
+            .map_err(AppError::db)?
+            .ok_or_else(|| AppError::not_found("Remote host not found"))?;
+        let credential_ref_update = save_host_secret(
+            &id,
+            &existing_host.auth_type,
+            &input.auth_type,
+            password,
+            passphrase,
+            save_secret,
+        )?;
+        update_remote_host(&store, &id, input, credential_ref_update).map_err(AppError::db)
     })
     .await?
 }
@@ -311,6 +328,18 @@ pub async fn remote_list_agent_paths(
     .await?
 }
 
+#[tauri::command]
+pub async fn remote_list_skill_snapshots(
+    store: State<'_, Arc<SkillStore>>,
+    host_id: String,
+) -> Result<Vec<RemoteSkillSnapshot>, AppError> {
+    let store = store.inner().clone();
+    tauri::async_runtime::spawn_blocking(move || {
+        list_remote_skill_snapshots(&store, &host_id).map_err(AppError::db)
+    })
+    .await?
+}
+
 #[tauri::command]
 pub async fn remote_list_operation_logs(
     store: State<'_, Arc<SkillStore>>,
@@ -327,31 +356,56 @@ pub async fn remote_list_operation_logs(
 
 fn save_host_secret(
     host_id: &str,
+    previous_auth_type: &RemoteAuthType,
     auth_type: &RemoteAuthType,
     password: Option<String>,
     passphrase: Option<String>,
     save_secret_requested: bool,
-) -> Result<Option<String>, AppError> {
+) -> Result<CredentialRefUpdate, AppError> {
+    let auth_type_changed = previous_auth_type != auth_type;
+
+    if auth_type_changed {
+        delete_secret(&credential_ref(host_id, RemoteSecretKind::Password))
+            .map_err(AppError::internal)?;
+        delete_secret(&credential_ref(
+            host_id,
+            RemoteSecretKind::PrivateKeyPassphrase,
+        ))
+        .map_err(AppError::internal)?;
+    }
+
     if !save_secret_requested {
-        return Ok(None);
+        return Ok(if auth_type_changed {
+            CredentialRefUpdate::Replace(None)
+        } else {
+            CredentialRefUpdate::Preserve
+        });
     }
 
     match auth_type {
         RemoteAuthType::Password => {
             let Some(password) = non_empty_secret(password) else {
-                return Ok(None);
+                return Ok(if auth_type_changed {
+                    CredentialRefUpdate::Replace(None)
+                } else {
+                    CredentialRefUpdate::Preserve
+                });
             };
             let reference = credential_ref(host_id, RemoteSecretKind::Password);
             save_secret(&reference, &password).map_err(AppError::internal)?;
-            Ok(Some(reference))
+            Ok(CredentialRefUpdate::Replace(Some(reference)))
         }
         RemoteAuthType::PrivateKey => {
             let Some(passphrase) = non_empty_secret(passphrase) else {
-                return Ok(None);
+                return Ok(if auth_type_changed {
+                    CredentialRefUpdate::Replace(None)
+                } else {
+                    CredentialRefUpdate::Preserve
+                });
             };
             let reference = credential_ref(host_id, RemoteSecretKind::PrivateKeyPassphrase);
             save_secret(&reference, &passphrase).map_err(AppError::internal)?;
-            Ok(Some(reference))
+            Ok(CredentialRefUpdate::Replace(Some(reference)))
         }
     }
 }

src-tauri/Cargo.toml

@@ -6,18 +6,34 @@ use crate::core::tool_adapters::default_tool_adapters;
 pub struct RemoteAgentCandidate {
     pub agent_id: String,
     pub display_name: String,
+    pub detect_path: String,
     pub skills_path: String,
+    pub additional_scan_paths: Vec<String>,
     pub recursive_scan: bool,
 }
 
 pub fn remote_agent_candidates(home_dir: &str) -> Vec<RemoteAgentCandidate> {
     default_tool_adapters()
         .into_iter()
-        .map(|adapter| RemoteAgentCandidate {
-            agent_id: adapter.key,
-            display_name: adapter.display_name,
-            skills_path: join_remote_home(home_dir, &adapter.relative_skills_dir),
-            recursive_scan: adapter.recursive_scan,
+        .map(|adapter| {
+            let mut additional_scan_paths = Vec::new();
+            for path in adapter.additional_scan_dirs {
+                let normalized = join_remote_home(home_dir, &path);
+                if normalized != join_remote_home(home_dir, &adapter.relative_skills_dir)
+                    && !additional_scan_paths.contains(&normalized)
+                {
+                    additional_scan_paths.push(normalized);
+                }
+            }
+
+            RemoteAgentCandidate {
+                agent_id: adapter.key,
+                display_name: adapter.display_name,
+                detect_path: join_remote_home(home_dir, &adapter.relative_detect_dir),
+                skills_path: join_remote_home(home_dir, &adapter.relative_skills_dir),
+                additional_scan_paths,
+                recursive_scan: adapter.recursive_scan,
+            }
         })
         .collect()
 }
@@ -71,10 +87,16 @@ mod tests {
         let candidates = remote_agent_candidates("/home/dev/");
 
         assert!(candidates.iter().any(|candidate| {
-            candidate.agent_id == "codex" && candidate.skills_path == "/home/dev/.agents/skills"
+            candidate.agent_id == "codex"
+                && candidate.detect_path == "/home/dev/.codex"
+                && candidate.skills_path == "/home/dev/.agents/skills"
+                && candidate
+                    .additional_scan_paths
+                    .contains(&"/home/dev/.codex/skills".to_string())
         }));
         assert!(candidates.iter().any(|candidate| {
             candidate.agent_id == "claude_code"
+                && candidate.detect_path == "/home/dev/.claude"
                 && candidate.skills_path == "/home/dev/.claude/skills"
         }));
     }