@ai-wendao/ant 0.0.0-stage → 0.3.8

package/client.js

@@ -0,0 +1,680 @@
+window.__ModuleLoader__.load({
+  id: 'ant',
+  factory: (require) => {
+    var module = { exports: {} }
+    var exports = module.exports
+    const { createElement, useEffect, useState } = require('react')
+    const h = createElement
+    const SERVICE_URL_STORAGE_KEY = 'ant-team-service-url'
+    const DEVICE_ID_STORAGE_KEY = 'ant-team-device-id'
+    const ANT_API_PROTOCOL_VERSIONS = [1]
+    const panelStyle = {
+      display: 'grid', alignContent: 'start', gap: 14, padding: 18,
+      border: '0.5px solid var(--dsw-alias-border-l2)', borderRadius: 14,
+      backgroundColor: 'var(--dsw-alias-bg-module-platform)', boxSizing: 'border-box',
+    }
+    const mutedTextStyle = { margin: 0, color: 'var(--dsw-alias-label-secondary)', fontSize: 13, lineHeight: 1.6 }
+    const inputStyle = {
+      width: '100%', boxSizing: 'border-box', padding: '10px 12px',
+      color: 'var(--dsw-alias-label-primary)', backgroundColor: 'var(--dsw-specific-input-major)',
+      border: '0.5px solid var(--dsw-alias-border-l3)', borderRadius: 8,
+    }
+    const primaryButtonStyle = {
+      minHeight: 40, padding: '9px 14px', color: 'var(--dsw-alias-label-primary-foreground)', fontWeight: 600,
+      backgroundColor: 'var(--dsw-alias-state-business-primary)',
+      border: '0.5px solid var(--dsw-alias-state-business-primary)', borderRadius: 8,
+      cursor: 'pointer', whiteSpace: 'nowrap',
+    }
+    const secondaryButtonStyle = {
+      minHeight: 40, padding: '9px 14px', color: 'var(--dsw-alias-label-primary)', fontWeight: 500,
+      backgroundColor: 'var(--dsw-alias-button-primary-dimmed)',
+      border: '0.5px solid var(--dsw-alias-border-l2)', borderRadius: 8,
+      cursor: 'pointer',
+    }
+    const normalizeServiceUrl = (value) => {
+      let url
+      try { url = new URL(value.trim()) } catch { return null }
+      const localHttp = url.protocol === 'http:' && ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname)
+      if ((url.protocol !== 'https:' && !localHttp) || url.username || url.password || url.search || url.hash || (url.pathname !== '/' && url.pathname !== '')) return null
+      return url.origin
+    }
+    const consoleUrl = (value) => {
+      const normalized = normalizeServiceUrl(value)
+      return normalized ? new URL('/console', normalized).toString() : null
+    }
+    const versionParts = (value) => {
+      if (typeof value !== 'string' || !/^\d+\.\d+\.\d+$/u.test(value)) return null
+      return value.split('.')
+    }
+    const newerVersion = (candidate, current) => {
+      const next = versionParts(candidate)
+      const installed = versionParts(current)
+      if (!next || !installed) return false
+      for (let index = 0; index < next.length; index += 1) {
+        if (next[index] !== installed[index]) {
+          return next[index].length === installed[index].length
+            ? next[index] > installed[index]
+            : next[index].length > installed[index].length
+        }
+      }
+      return false
+    }
+    const inject = ['slots', 'remote', 'remote.credentials', 'remote.settings', 'remote.pluginManager']
+
+    function loadServiceUrl() {
+      try { return normalizeServiceUrl(localStorage.getItem(SERVICE_URL_STORAGE_KEY) || '') || '' } catch { return '' }
+    }
+
+    function loadDeviceId() {
+      const existing = localStorage.getItem(DEVICE_ID_STORAGE_KEY)
+      if (existing && /^[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/iu.test(existing)) return existing
+      const deviceId = crypto.randomUUID()
+      localStorage.setItem(DEVICE_ID_STORAGE_KEY, deviceId)
+      return deviceId
+    }
+
+    function TeamServiceConfig({ remote }) {
+      const [serviceUrl, setServiceUrl] = useState(loadServiceUrl)
+      const [draft, setDraft] = useState(serviceUrl)
+      const [message, setMessage] = useState('')
+      const save = (event) => {
+        event.preventDefault()
+        const normalized = normalizeServiceUrl(draft)
+        if (!normalized) {
+          setMessage('请输入 HTTPS 团队服务地址；本机测试可使用 localhost。')
+          return
+        }
+        try {
+          localStorage.setItem(SERVICE_URL_STORAGE_KEY, normalized)
+          setServiceUrl(normalized)
+          setDraft(normalized)
+          setMessage('团队服务地址已保存。')
+        } catch {
+          setMessage('浏览器无法保存此地址，请检查本地存储权限。')
+        }
+      }
+      const link = consoleUrl(serviceUrl)
+      return h('section', { style: { display: 'grid', gap: 16, width: '100%', maxWidth: 1120 } },
+        h('p', { style: mutedTextStyle }, '连接团队服务后，即可同步获准模型并使用团队协作。'),
+        h('section', { style: panelStyle },
+          h('div', null,
+            h('h3', { style: { margin: 0, fontSize: 16, fontWeight: 650 } }, '团队服务'),
+            h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '由团队管理员提供服务地址；管理员可在控制台管理成员、模型和协作设置。')),
+          h('form', { onSubmit: save, style: { display: 'grid', gridTemplateColumns: 'minmax(0, 1fr) auto', alignItems: 'end', gap: 10 } },
+          h('label', { htmlFor: 'ant-team-service-url', style: { gridColumn: '1 / -1', fontSize: 13, fontWeight: 550 } }, '服务地址'),
+          h('input', {
+            id: 'ant-team-service-url',
+            type: 'url',
+            required: true,
+            value: draft,
+            placeholder: 'https://ant.example.com',
+            onChange: (event) => setDraft(event.target.value),
+            style: inputStyle,
+          }),
+          h('button', { type: 'submit', style: primaryButtonStyle }, '保存地址')),
+          h('div', { style: { display: 'flex', flexWrap: 'wrap', alignItems: 'center', gap: 12 } },
+            message ? h('p', { role: 'status', style: mutedTextStyle }, message) : null,
+            link ? h('a', { href: link, target: '_blank', rel: 'noopener noreferrer', style: { color: 'var(--dsw-alias-link)', fontSize: 13 } }, '打开团队管理 ↗') : null)),
+        h(ModelSyncFooter, { remote, serviceUrl, onServiceUrlChange: setServiceUrl }))
+    }
+
+    function ModelSyncFooter({ remote, serviceUrl, onServiceUrlChange }) {
+      const [email, setEmail] = useState('')
+      const [code, setCode] = useState('')
+      const [message, setMessage] = useState('')
+      const [busy, setBusy] = useState(false)
+      const [codeRequested, setCodeRequested] = useState(false)
+      const [credentialConfigured, setCredentialConfigured] = useState(null)
+      const [reauthenticate, setReauthenticate] = useState(false)
+      const [needsReconnect, setNeedsReconnect] = useState(false)
+      const [feishuCode, setFeishuCode] = useState('')
+      const [feishuCodeMessage, setFeishuCodeMessage] = useState('')
+      const [feishuApps, setFeishuApps] = useState([])
+      const [feishuAppId, setFeishuAppId] = useState('')
+      const [feishuAppSecret, setFeishuAppSecret] = useState('')
+      const [feishuVerificationToken, setFeishuVerificationToken] = useState('')
+      const [feishuEncryptKey, setFeishuEncryptKey] = useState('')
+      const [feishuAppStatus, setFeishuAppStatus] = useState('')
+      const [bundleRelease, setBundleRelease] = useState(null)
+      const [bundleUpdate, setBundleUpdate] = useState({ state: 'idle', currentVersion: '', message: '' })
+      const [approvedBuilds, setApprovedBuilds] = useState([])
+      const [serviceCompatibility, setServiceCompatibility] = useState({ state: 'idle', message: '' })
+
+      const inspectServiceCompatibility = async (rawServiceUrl, useSavedConnection = false) => {
+        const normalized = normalizeServiceUrl(rawServiceUrl)
+        if (!normalized && !useSavedConnection) {
+          setServiceCompatibility({ state: 'idle', message: '' })
+          return null
+        }
+        setServiceCompatibility({ state: 'checking', message: '正在识别 ANT 客户端与服务端版本…' })
+        try {
+          const manager = remote?.pluginManager
+          if (typeof manager?.listBundles !== 'function') throw new Error('当前 DSH 未提供 Bundle 版本读取接口。')
+          const listed = await manager.listBundles()
+          if (!listed.ok) throw new Error(listed.error?.message || '无法读取已安装的 ANT Bundle 版本。')
+          const installed = listed.value.find((bundle) => bundle.name === 'ant' && bundle.installed)
+          if (typeof installed?.version !== 'string') throw new Error('无法确定当前 ANT Bundle 版本。')
+          const response = await fetch('/api/ant-teams/service-info', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+              service_url: normalized || '',
+              bundle_version: installed.version,
+              api_protocol_versions: ANT_API_PROTOCOL_VERSIONS,
+            }),
+          })
+          const result = await response.json()
+          if (!response.ok) throw new Error(result.message || `版本检查失败（${response.status}）`)
+          const serverProtocols = Array.isArray(result.server_api_protocol_versions) ? result.server_api_protocol_versions : []
+          const sharedProtocols = Array.isArray(result.shared_api_protocol_versions) ? result.shared_api_protocol_versions : []
+          const compatibility = typeof result.compatibility === 'boolean'
+            ? result.compatibility
+            : serverProtocols.length === 0 ? null : sharedProtocols.length > 0
+          const message = compatibility === true
+            ? `服务端 v${result.server_version} · ANT Bundle v${result.bundle_version} · API 协议 v${sharedProtocols.join(', v')}：兼容。`
+            : compatibility === false
+              ? `服务端 v${result.server_version} · ANT Bundle v${result.bundle_version}：没有共同 API 协议（服务端 v${serverProtocols.join(', v')}，客户端 v${ANT_API_PROTOCOL_VERSIONS.join(', v')}）。请更新 ANT 插件或联系管理员升级服务端。`
+              : `已识别 ANT Bundle v${result.bundle_version} 和服务端 v${result.server_version}；服务端未提供协议能力，兼容性未知，仍允许继续。`
+          const state = compatibility === true ? 'compatible' : compatibility === false ? 'incompatible' : 'unknown'
+          const status = { state, message, ...result }
+          setServiceCompatibility(status)
+          return status
+        } catch (error) {
+          const status = {
+            state: 'unknown',
+            message: `无法确认 ANT 版本兼容性，仍允许继续：${error instanceof Error ? error.message : '连接检查失败。'}`,
+          }
+          setServiceCompatibility(status)
+          return status
+        }
+      }
+
+      const requireCompatibleService = async (rawServiceUrl, useSavedConnection = false) => {
+        const status = await inspectServiceCompatibility(rawServiceUrl, useSavedConnection)
+        if (status?.state === 'incompatible') throw new Error(status.message)
+        return status
+      }
+
+      const applyAuthorizedModels = async (models, rawServiceUrl) => {
+        const normalized = normalizeServiceUrl(rawServiceUrl)
+        if (!normalized || !Array.isArray(models)) throw new Error('ANT 返回的团队模型目录格式无效。')
+        if (typeof remote?.settings?.mutate !== 'function') throw new Error('当前 DSH 版本未提供模型设置接口。')
+        const grouped = {
+          openai: models.filter((model) => model.protocol === 'openai'),
+          anthropic: models.filter((model) => model.protocol === 'anthropic'),
+        }
+        const ops = []
+        for (const protocol of ['openai', 'anthropic']) {
+          const route = protocol === 'openai' ? 'ant-team-openai' : 'ant-team-anthropic'
+          const protocolModels = grouped[protocol]
+          if (protocolModels.length === 0) {
+            ops.push({ op: 'unset', path: ['providers', route] })
+            continue
+          }
+          ops.push({ op: 'set', path: ['providers', route], value: {
+            displayName: protocol === 'openai' ? 'Lakala (OpenAI)' : 'Lakala (Anthropic)',
+            apiKeyEnv: 'ANT_MODEL_API_KEY',
+            api: protocol === 'openai' ? 'openai-completions' : 'anthropic-messages',
+            baseURL: protocol === 'openai'
+              ? new URL('/model-gateway/openai/v1', normalized).toString()
+              : new URL('/model-gateway/anthropic', normalized).toString(),
+            models: protocolModels.map((model) => ({ id: model.model_id, name: model.display_name })),
+          } })
+        }
+        const settingsWrite = await remote.settings.mutate('llm-pi-ai', ops, undefined)
+        if (!settingsWrite.ok) throw new Error(settingsWrite.error?.message || 'DSH 无法更新团队模型设置。')
+        try { localStorage.setItem(SERVICE_URL_STORAGE_KEY, normalized) } catch {}
+        onServiceUrlChange(normalized)
+        return models.length
+      }
+
+      const refreshModels = async () => {
+        setBusy(true)
+        setMessage('正在从 ANT 刷新获准模型…')
+        try {
+          await requireCompatibleService(serviceUrl, true)
+          const response = await fetch('/api/ant-teams/models', { method: 'POST' })
+          const result = await response.json()
+          if (!response.ok) {
+            if (response.status === 401) setNeedsReconnect(true)
+            throw new Error(result.message || `刷新失败（${response.status}）`)
+          }
+          const count = await applyAuthorizedModels(result.models, result.service_url)
+          setCredentialConfigured(true)
+          setNeedsReconnect(false)
+          setReauthenticate(false)
+          setMessage(`模型目录已刷新，共 ${count} 个获准模型。`)
+        } catch (error) {
+          setMessage(error instanceof Error ? error.message : '刷新模型失败，请稍后重试。')
+        } finally {
+          setBusy(false)
+        }
+      }
+
+      const checkBundleUpdate = async () => {
+        setBundleUpdate({ state: 'checking', currentVersion: '', message: '正在检查 ANT 更新…' })
+        setApprovedBuilds([])
+        try {
+          const response = await fetch('/api/ant-teams/bundle-release', { cache: 'no-store' })
+          const release = await response.json()
+          if (!response.ok) throw new Error(release.message || `检查失败（${response.status}）`)
+          setBundleRelease(release)
+          if (!release.version) {
+            setBundleUpdate({ state: 'none', currentVersion: '', message: '管理员尚未发布 ANT 更新。' })
+            return
+          }
+          const manager = remote?.pluginManager
+          if (typeof manager?.listBundles !== 'function') throw new Error('当前 DSH 版本未提供官方 Bundle 管理器。')
+          const listed = await manager.listBundles()
+          if (!listed.ok) throw new Error(listed.error?.message || '无法读取 DSH 已安装 Bundle。')
+          const installed = listed.value.find((bundle) => bundle.name === release.bundle_name && bundle.installed)
+          if (!installed || typeof installed.version !== 'string') {
+            throw new Error(`当前 DSH 未找到已安装的 ${release.bundle_name} Bundle。`)
+          }
+          const available = newerVersion(release.version, installed.version)
+          setBundleUpdate({
+            state: available ? 'available' : 'current',
+            currentVersion: installed.version,
+            message: available ? `发现新版本 ${release.version}。` : `当前已是最新发布版本（${installed.version}）。`,
+          })
+        } catch (error) {
+          setBundleUpdate({ state: 'failed', currentVersion: '', message: error instanceof Error ? error.message : '检查 ANT 更新失败。' })
+        }
+      }
+
+      const installBundleUpdate = async (allowScripts = false) => {
+        if (!bundleRelease?.install_spec
+          || (!allowScripts && bundleUpdate.state !== 'available')
+          || (allowScripts && approvedBuilds.length === 0)) return
+        const manager = remote?.pluginManager
+        if (typeof manager?.installBundle !== 'function') {
+          setBundleUpdate((current) => ({ ...current, state: 'failed', message: '当前 DSH 版本未提供官方 Bundle 安装接口。' }))
+          return
+        }
+        const scripts = allowScripts ? approvedBuilds : []
+        if (scripts.length && !window.confirm(`DSH 安装需要运行以下依赖的安装脚本：\n\n${scripts.join('\n')}\n\n仅在信任这些依赖时继续。`)) return
+        setBusy(true)
+        setApprovedBuilds([])
+        setBundleUpdate((current) => ({ ...current, state: 'installing', message: '正在委托 DSH 官方管理器安装更新…' }))
+        try {
+          const result = await manager.installBundle(bundleRelease.install_spec, {
+            enabled: true,
+            ...(scripts.length ? { approvedBuilds: scripts } : {}),
+          })
+          if (!result.ok) throw new Error(result.error?.message || 'DSH 安装请求未返回结果。')
+          const outcome = result.value
+          if (outcome.application === 'failed') {
+            const pending = Array.isArray(outcome.pendingBuilds) ? outcome.pendingBuilds : []
+            setApprovedBuilds(pending)
+            const reason = outcome.error?.diagnostic || outcome.packageResult?.output || 'DSH 未能安装该版本。'
+            setBundleUpdate({
+              state: 'failed', currentVersion: bundleUpdate.currentVersion,
+              message: pending.length
+                ? `DSH 暂停了安装，因为以下依赖需要明确授权运行安装脚本：${pending.join('、')}`
+                : reason,
+            })
+            return
+          }
+          if (outcome.application === 'cancelled') {
+            setBundleUpdate({ state: 'failed', currentVersion: bundleUpdate.currentVersion, message: 'DSH 已取消更新，当前运行版本未切换。' })
+            return
+          }
+          if (outcome.application === 'overridden') {
+            setBundleUpdate({ state: 'failed', currentVersion: bundleUpdate.currentVersion, message: 'DSH 已记录更新，但其他插件配置覆盖了 ANT。请检查 DSH 插件配置后再重启。' })
+            return
+          }
+          if (outcome.bundle !== bundleRelease.bundle_name) {
+            setBundleUpdate({ state: 'failed', currentVersion: bundleUpdate.currentVersion, message: 'DSH 返回的安装包名称与 ANT 发布信息不一致。请联系管理员核对发布包。' })
+            return
+          }
+          setBundleUpdate({
+            state: 'done', currentVersion: bundleRelease.version,
+            message: outcome.application === 'restart-required'
+              ? `DSH 已安装 ${bundleRelease.install_spec}。请完全退出并重新启动 DSH 后生效。`
+              : `DSH 已安装 ${bundleRelease.install_spec}。`,
+          })
+        } catch (error) {
+          setBundleUpdate({ state: 'failed', currentVersion: bundleUpdate.currentVersion, message: error instanceof Error ? error.message : 'DSH 未能安装 ANT 更新。' })
+        } finally {
+          setBusy(false)
+        }
+      }
+
+      const disconnect = async () => {
+        setBusy(true)
+        setMessage('正在断开此设备的 ANT 连接…')
+        try {
+          if (typeof remote?.settings?.mutate !== 'function') throw new Error('DSH 未提供模型设置接口。')
+          const result = await remote.settings.mutate('llm-pi-ai', [
+            { op: 'unset', path: ['providers', 'ant-team-openai'] },
+            { op: 'unset', path: ['providers', 'ant-team-anthropic'] },
+          ], undefined)
+          if (!result.ok) throw new Error(result.error?.message || 'ANT 模型设置未能清除。')
+        } catch (error) {
+          setBusy(false)
+          setMessage(`无法清除本机 ANT 模型设置，因此连接仍保留。${error instanceof Error ? error.message : '请稍后重试。'}`)
+          return
+        }
+        let serverRevoked = false
+        try {
+          const response = await fetch('/api/ant-teams/disconnect', { method: 'POST' })
+          const result = await response.json()
+          serverRevoked = response.ok && result.revoked === true
+        } catch {}
+        let credentialRemoved = false
+        try {
+          if (typeof remote?.credentials?.unset !== 'function') throw new Error('DSH 未提供凭证删除接口。')
+          const result = await remote.credentials.unset('ANT_MODEL_API_KEY')
+          if (!result.ok) throw new Error(result.error?.message || 'ANT 成员凭证未能清除。')
+          credentialRemoved = true
+          setCredentialConfigured(false)
+        } catch (error) {
+          setMessage(`本机 ANT 模型设置已清除，但成员凭证未能移除：${error instanceof Error ? error.message : '请稍后重试。'}`)
+        }
+        setBusy(false)
+        if (credentialRemoved && serverRevoked) setMessage('此设备的 ANT 凭证已撤销，ANT 模型设置已清除。团队服务地址已保留。')
+        else if (credentialRemoved) setMessage('本机 ANT 凭证与模型设置已清除；服务端未确认撤销，活动会话会在 90 秒内到期。团队服务地址已保留。')
+      }
+
+      useEffect(() => {
+        let current = true
+        const describe = remote?.credentials?.describe
+        if (typeof describe !== 'function') {
+          setCredentialConfigured(null)
+          return () => { current = false }
+        }
+        describe.call(remote.credentials, ['ANT_MODEL_API_KEY']).then((result) => {
+          if (!current) return
+          const configured = result.ok ? Boolean(result.value?.ANT_MODEL_API_KEY?.configured) : null
+          setCredentialConfigured(configured)
+          if (configured) {
+            void refreshModels()
+            void checkBundleUpdate()
+            void refreshFeishuApps().catch((error) => setFeishuAppStatus(error.message))
+          }
+        }).catch(() => { if (current) setCredentialConfigured(null) })
+        return () => { current = false }
+      }, [remote])
+
+      useEffect(() => {
+        void inspectServiceCompatibility(serviceUrl, credentialConfigured === true)
+      }, [remote, serviceUrl, credentialConfigured])
+
+      const requestCode = async (event) => {
+        event.preventDefault()
+        const normalized = normalizeServiceUrl(serviceUrl)
+        const normalizedEmail = email.trim()
+        if (!normalized) {
+          setMessage('请先在上方填写并保存团队服务地址。')
+          return
+        }
+        if (!normalizedEmail) {
+          setMessage('请填写工作邮箱。')
+          return
+        }
+        setBusy(true)
+        setMessage('正在发送邮箱验证码…')
+        try {
+          await requireCompatibleService(normalized)
+          localStorage.setItem(SERVICE_URL_STORAGE_KEY, normalized)
+          const response = await fetch('/api/ant-teams/request-code', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ service_url: normalized, email: normalizedEmail }),
+          })
+          const result = await response.json()
+          if (!response.ok) throw new Error(result.message || `请求失败（${response.status}）`)
+          setEmail(normalizedEmail)
+          setCodeRequested(true)
+          setMessage(result.message || '如果该邮箱符合团队规则，验证码将发送至邮箱。')
+        } catch (error) {
+          setMessage(error instanceof Error ? error.message : '验证码发送失败，请稍后重试。')
+        } finally {
+          setBusy(false)
+        }
+      }
+
+      const connect = async (event) => {
+        event.preventDefault()
+        const normalized = normalizeServiceUrl(serviceUrl)
+        const normalizedEmail = email.trim()
+        const normalizedCode = code.trim()
+        if (!normalized || !normalizedEmail || !/^\d{8}$/u.test(normalizedCode)) {
+          setMessage('请填写有效的服务地址、工作邮箱和 8 位验证码。')
+          return
+        }
+        setBusy(true)
+        setMessage('正在验证邮箱并同步团队模型…')
+        try {
+          await requireCompatibleService(normalized)
+          localStorage.setItem(SERVICE_URL_STORAGE_KEY, normalized)
+          const response = await fetch('/api/ant-teams/connect', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+              service_url: normalized,
+              email: normalizedEmail,
+              code: normalizedCode,
+              device_id: loadDeviceId(),
+            }),
+          })
+          const result = await response.json()
+          if (!response.ok) throw new Error(result.message || `请求失败（${response.status}）`)
+          if (typeof result.token !== 'string' || !result.token.startsWith('antm_') || !Array.isArray(result.models)) {
+            throw new Error('ANT 返回的连接信息格式无效。')
+          }
+          if (typeof remote?.credentials?.set !== 'function' || typeof remote?.settings?.mutate !== 'function') {
+            throw new Error('当前 DSH 版本未提供安全凭证和模型设置接口。')
+          }
+          const credentialWrite = await remote.credentials.set('ANT_MODEL_API_KEY', result.token)
+          if (!credentialWrite.ok) throw new Error(credentialWrite.error?.message || 'DSH 无法安全保存 ANT 凭证。')
+          await applyAuthorizedModels(result.models, normalized)
+          setCode('')
+          onServiceUrlChange(normalized)
+          setCodeRequested(false)
+          setCredentialConfigured(true)
+          setNeedsReconnect(false)
+          setReauthenticate(false)
+          await refreshFeishuApps().catch((error) => setFeishuAppStatus(error.message))
+          setMessage(`已连接 ${result.email || normalizedEmail}，同步 ${result.models.length} 个获准模型。它们现已出现在 DSH 模型选择器中。`)
+        } catch (error) {
+          setMessage(error instanceof Error ? error.message : '连接失败，请稍后重试。')
+        } finally {
+          setBusy(false)
+        }
+      }
+
+      const manageFeishuApps = async (body) => {
+        const response = await fetch('/api/ant-teams/feishu/apps', {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify(body),
+        })
+        const result = await response.json()
+        if (!response.ok) throw new Error(result.message || `飞书操作失败（${response.status}）`)
+        return result
+      }
+
+      const refreshFeishuApps = async () => {
+        const result = await manageFeishuApps({ action: 'list' })
+        if (!Array.isArray(result.apps)) throw new Error('ANT 返回的飞书应用列表格式无效。')
+        setFeishuApps(result.apps)
+      }
+
+      const saveFeishuApp = async (event) => {
+        event.preventDefault()
+        setBusy(true)
+        setFeishuAppStatus('正在验证飞书应用并保存密钥…')
+        setFeishuCode('')
+        setFeishuCodeMessage('')
+        try {
+          const result = await manageFeishuApps({
+            action: 'save',
+            app_id: feishuAppId.trim(),
+            app_secret: feishuAppSecret,
+            verification_token: feishuVerificationToken,
+            encrypt_key: feishuEncryptKey,
+          })
+          if (!result.app?.id || !result.app?.callback_url) throw new Error('ANT 未返回飞书回调信息。')
+          setFeishuAppId('')
+          setFeishuAppSecret('')
+          setFeishuVerificationToken('')
+          setFeishuEncryptKey('')
+          setFeishuApps((apps) => [...apps.filter((app) => app.id !== result.app.id), result.app])
+          setFeishuAppStatus('App ID 和 App Secret 已验证；回调密钥已加密保存。请把下方回调地址填入该飞书应用的事件订阅设置。')
+        } catch (error) {
+          setFeishuAppStatus(error instanceof Error ? error.message : '飞书应用保存失败，请稍后重试。')
+        } finally {
+          setBusy(false)
+        }
+      }
+
+      const createFeishuLinkCode = async (app) => {
+        setBusy(true)
+        setFeishuCode('')
+        setFeishuCodeMessage('正在生成一次性飞书绑定码…')
+        try {
+          const result = await manageFeishuApps({ action: 'link-code', id: app.id })
+          if (typeof result.code !== 'string') throw new Error(result.message || 'ANT 未返回绑定码。')
+          setFeishuCode(result.code)
+          setFeishuCodeMessage(`有效期 ${Math.ceil(result.expires_in_seconds / 60)} 分钟。请在飞书中私聊该机器人，发送：绑定 ${result.code}`)
+        } catch (error) {
+          setFeishuCodeMessage(error instanceof Error ? error.message : '飞书绑定码生成失败，请稍后重试。')
+        } finally {
+          setBusy(false)
+        }
+      }
+
+      const disableFeishuApp = async (app) => {
+        if (!window.confirm(`停用飞书应用 ${app.app_id}？停用后它不能再触发新任务，已接收的任务仍会尝试完成并回复。`)) return
+        setBusy(true)
+        setFeishuAppStatus('正在停用飞书应用…')
+        try {
+          await manageFeishuApps({ action: 'disable', id: app.id })
+          await refreshFeishuApps()
+          setFeishuAppStatus('飞书应用已停用，并解除其成员身份绑定。')
+        } catch (error) {
+          setFeishuAppStatus(error instanceof Error ? error.message : '飞书应用停用失败。')
+        } finally {
+          setBusy(false)
+        }
+      }
+
+      const showConnectForm = credentialConfigured !== true || reauthenticate || needsReconnect
+      return h('div', { style: { display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 400px), 1fr))', alignItems: 'start', gap: 16 } },
+        h('section', { style: panelStyle },
+          h('div', { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'flex-start', gap: 12 } },
+            h('div', null,
+              h('h3', { style: { margin: 0, fontSize: 16, fontWeight: 650 } }, '团队模型'),
+              h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '使用上方团队服务地址验证工作邮箱并同步授权模型。连接状态变化时可随时刷新。')),
+            h('span', { style: {
+              flexShrink: 0, padding: '4px 9px', borderRadius: 999,
+              color: credentialConfigured === true ? 'var(--dsw-alias-state-success-primary)' : 'var(--dsw-alias-label-secondary)',
+              backgroundColor: credentialConfigured === true ? 'var(--dsw-alias-state-success-tertiary)' : 'var(--dsw-alias-bg-layer-2)',
+              fontSize: 12,
+            } }, credentialConfigured === true ? '已连接' : credentialConfigured === false ? '未连接' : '检查中')),
+          h('p', { role: 'status', style: mutedTextStyle }, credentialConfigured === true
+            ? 'DSH 已安全保存此设备的 ANT 团队凭证。'
+            : credentialConfigured === false ? '验证工作邮箱后即可连接团队模型。' : '正在检查 ANT 连接状态…'),
+          serviceCompatibility.state !== 'idle' ? h('p', {
+            role: 'status',
+            style: {
+              ...mutedTextStyle,
+              color: serviceCompatibility.state === 'incompatible' ? 'var(--dsw-alias-state-error-primary)' : mutedTextStyle.color,
+            },
+          }, serviceCompatibility.message) : null,
+          credentialConfigured === true && !showConnectForm ? h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8 } },
+            h('button', { type: 'button', disabled: busy, onClick: () => void refreshModels(), style: primaryButtonStyle }, busy ? '刷新中…' : '刷新团队模型'),
+            h('button', { type: 'button', disabled: busy, onClick: () => { setReauthenticate(true); setMessage('') }, style: secondaryButtonStyle }, '重新验证邮箱'),
+            h('button', { type: 'button', disabled: busy, onClick: () => { if (window.confirm('断开当前设备与 ANT 的连接？本机 ANT 凭证和模型设置将被清除，团队服务地址会保留。')) void disconnect() }, style: secondaryButtonStyle }, '断开当前设备')) : null,
+          credentialConfigured === true && !showConnectForm ? h('section', { style: { ...panelStyle, padding: 14, gap: 10 } },
+            h('div', { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'center', gap: 12 } },
+              h('h4', { style: { margin: 0, fontSize: 14, fontWeight: 650 } }, 'ANT 插件更新'),
+              h('button', { type: 'button', disabled: busy || bundleUpdate.state === 'checking', onClick: () => void checkBundleUpdate(), style: secondaryButtonStyle }, bundleUpdate.state === 'checking' ? '检查中…' : '检查更新')),
+            bundleUpdate.message ? h('p', { role: 'status', style: mutedTextStyle }, bundleUpdate.message) : null,
+            bundleRelease?.version && bundleUpdate.state === 'available' ? h('div', { style: { display: 'grid', gap: 8 } },
+              h('p', { style: mutedTextStyle }, `发布版本：${bundleRelease.version} · npm：${bundleRelease.install_spec}`),
+              bundleRelease.release_notes ? h('p', { style: mutedTextStyle }, bundleRelease.release_notes) : null,
+              h('button', { type: 'button', disabled: busy, onClick: () => void installBundleUpdate(), style: primaryButtonStyle }, busy ? '安装中…' : '由 DSH 安装并更新')) : null,
+            approvedBuilds.length ? h('div', { style: { display: 'grid', gap: 8 } },
+              h('p', { style: mutedTextStyle }, `DSH 暂停安装，等待授权运行以下依赖的安装脚本：${approvedBuilds.join('、')}。`),
+              h('button', { type: 'button', disabled: busy, onClick: () => void installBundleUpdate(true), style: secondaryButtonStyle }, '信任这些依赖并继续安装')) : null) : null,
+          showConnectForm ? h('form', { onSubmit: requestCode, style: { display: 'grid', gap: 9, maxWidth: 560 } },
+            h('label', { htmlFor: 'ant-team-model-email', style: { fontSize: 13, fontWeight: 550 } }, '工作邮箱'),
+            h('input', {
+              id: 'ant-team-model-email', type: 'email', autoComplete: 'email', required: true, value: email,
+              onChange: (event) => setEmail(event.target.value), style: inputStyle,
+            }),
+            h('button', { type: 'submit', disabled: busy, style: primaryButtonStyle }, busy ? '发送中…' : '发送验证码')) : null,
+          credentialConfigured === true && showConnectForm ? h('button', {
+            type: 'button', disabled: busy,
+            onClick: () => { if (window.confirm('断开当前设备与 ANT 的连接？本机 ANT 凭证和模型设置将被清除，团队服务地址会保留。')) void disconnect() },
+            style: secondaryButtonStyle,
+          }, '断开当前设备') : null,
+          showConnectForm && codeRequested ? h('form', { onSubmit: connect, style: { display: 'grid', gap: 9, maxWidth: 560 } },
+            h('label', { htmlFor: 'ant-team-model-code', style: { fontSize: 13, fontWeight: 550 } }, '邮箱验证码'),
+            h('input', {
+              id: 'ant-team-model-code', type: 'text', inputMode: 'numeric', autoComplete: 'one-time-code',
+              required: true, maxLength: 8, value: code, placeholder: '8 位验证码',
+              onChange: (event) => setCode(event.target.value.replace(/\D/gu, '').slice(0, 8)), style: inputStyle,
+            }),
+            h('button', { type: 'submit', disabled: busy || code.length !== 8, style: primaryButtonStyle }, busy ? '连接中…' : '验证并连接')) : null,
+          message ? h('p', { role: 'status', style: mutedTextStyle }, message) : null),
+        credentialConfigured === true && !needsReconnect && !reauthenticate ? h('section', { style: panelStyle },
+          h('div', null,
+            h('h3', { style: { margin: 0, fontSize: 16, fontWeight: 650 } }, '个人飞书应用'),
+            h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '每位成员自行管理飞书应用和身份绑定。群 ID 不参与授权；只有绑定到此应用的本人可以触发自己的 DSH。')),
+          h('form', { onSubmit: saveFeishuApp, style: { display: 'grid', gap: 9 } },
+            h('label', { htmlFor: 'ant-feishu-app-id', style: { fontSize: 13, fontWeight: 550 } }, '飞书 App ID'),
+            h('input', { id: 'ant-feishu-app-id', value: feishuAppId, required: true, maxLength: 128, placeholder: 'cli_…', onChange: (event) => setFeishuAppId(event.target.value), style: inputStyle }),
+            h('p', { style: mutedTextStyle }, '在飞书开放平台的应用凭证页查看，通常以 cli_ 开头。'),
+            h('label', { htmlFor: 'ant-feishu-app-secret', style: { fontSize: 13, fontWeight: 550 } }, 'App Secret'),
+            h('input', { id: 'ant-feishu-app-secret', type: 'password', autoComplete: 'new-password', value: feishuAppSecret, required: true, maxLength: 512, onChange: (event) => setFeishuAppSecret(event.target.value), style: inputStyle }),
+            h('p', { style: mutedTextStyle }, '同一应用凭证页中的密钥；ANT 用它验证 App ID 并读取机器人身份。'),
+            h('label', { htmlFor: 'ant-feishu-verification-token', style: { fontSize: 13, fontWeight: 550 } }, 'Verification Token'),
+            h('input', { id: 'ant-feishu-verification-token', type: 'password', autoComplete: 'new-password', value: feishuVerificationToken, required: true, maxLength: 512, onChange: (event) => setFeishuVerificationToken(event.target.value), style: inputStyle }),
+            h('p', { style: mutedTextStyle }, '在事件订阅设置中生成，用来校验飞书回调是否属于此应用。'),
+            h('label', { htmlFor: 'ant-feishu-encrypt-key', style: { fontSize: 13, fontWeight: 550 } }, 'Encrypt Key'),
+            h('input', { id: 'ant-feishu-encrypt-key', type: 'password', autoComplete: 'new-password', value: feishuEncryptKey, required: true, maxLength: 512, onChange: (event) => setFeishuEncryptKey(event.target.value), style: inputStyle }),
+            h('p', { style: mutedTextStyle }, '在事件订阅设置中生成；启用事件加密时，ANT 用它校验签名并解密回调。'),
+          h('p', { style: mutedTextStyle }, '保存时 ANT 会验证 App ID 和 App Secret，并读取该应用机器人的身份。所有密钥只在服务端加密保存。'),
+            h('button', { type: 'submit', disabled: busy, style: primaryButtonStyle }, busy ? '正在验证并保存…' : '验证并保存应用')),
+          feishuAppStatus ? h('p', { role: 'status', style: mutedTextStyle }, feishuAppStatus) : null,
+          feishuApps.length ? h('div', { style: { display: 'grid', gap: 10 } }, ...feishuApps.map((app) => h('article', { key: app.id, style: { ...panelStyle, padding: 14, gap: 8 } },
+            h('div', { style: { display: 'flex', justifyContent: 'space-between', gap: 12 } },
+              h('strong', null, app.app_id),
+              h('span', { style: mutedTextStyle }, !app.active ? '已停用' : app.linked ? '已绑定飞书身份' : '尚未绑定')),
+            h('p', { style: mutedTextStyle }, '飞书事件回调地址：'),
+            h('code', { style: { overflowWrap: 'anywhere', padding: 8, borderRadius: 6, backgroundColor: 'var(--dsw-alias-bg-layer-2)' } }, app.callback_url),
+            app.active ? h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8 } },
+              h('button', { type: 'button', disabled: busy, onClick: () => void createFeishuLinkCode(app), style: primaryButtonStyle }, '生成此机器人的绑定码'),
+              h('button', { type: 'button', disabled: busy, onClick: () => void disableFeishuApp(app), style: secondaryButtonStyle }, '停用应用'))
+              : h('button', { type: 'button', disabled: busy, onClick: () => { setFeishuAppId(app.app_id); setFeishuAppStatus('请重新填写此应用的三个密钥以启用。') }, style: secondaryButtonStyle }, '重新配置启用')))) : null,
+          feishuCode ? h('code', { style: {
+            display: 'block', padding: '12px 14px', borderRadius: 9,
+            color: 'var(--dsw-alias-label-primary)',
+            backgroundColor: 'var(--dsw-alias-bg-layer-2)', fontSize: 18, letterSpacing: '.12em',
+          } }, feishuCode) : null,
+          feishuCodeMessage ? h('p', { role: 'status', style: mutedTextStyle }, feishuCodeMessage) : null,
+          h('p', { style: mutedTextStyle }, '保存后，把对应应用显示的回调地址填入飞书事件订阅，订阅 im.message.receive_v1。私聊绑定和机器人收发消息需要 im:message；群内 @ 机器人触发还需要 im:message.group_at_msg。验证回调后生成绑定码，再在飞书中私聊该机器人发送“绑定 <验证码>”。之后可在任意群中 @ 该机器人；ANT 会核对机器人和发送者身份，再把任务交给你的 DSH。')) : null)
+    }
+
+    function apply(ctx) {
+      const remote = {
+        credentials: ctx.remote.credentials,
+        settings: ctx.remote.settings,
+        pluginManager: ctx.remote.pluginManager,
+      }
+      ctx.slots.inject('plugins.bundle.config', () => ctx.slots.register({
+          name: 'plugins.bundle.config',
+          key: 'ant',
+          inject: () => ({ remote }),
+        }, ({ view, remote: injectedRemote }) => view === 'summary'
+          ? h('p', null, 'ANT 团队服务入口。')
+          : h(TeamServiceConfig, { remote: injectedRemote })))
+    }
+
+    Object.assign(exports, { inject, apply })
+    return module.exports
+  },
+})