@ai-wendao/ant 0.3.12 → 0.3.13

package/MIGRATION.md

@@ -13,7 +13,7 @@
 此方式适用于 DSH Desktop RC2 使用默认、启用 HMR 的 Desktop profile，且目标 ANT 版本已发布到 npm：
 
 1. 打开 **插件 → ANT**，点击 **卸载** 并确认。
-2. 回到插件列表，点击 **添加插件**，输入目标版本的直接包名（正式发布后例如 `@ai-wendao/ant@0.3.12`），然后点击 **安装**。
+2. 回到插件列表，点击 **添加插件**，输入目标版本的直接包名（正式发布后例如 `@ai-wendao/ant@0.3.13`），然后点击 **安装**。
 3. 安装完成后启用 ANT，打开设置页，检查服务连接与获准模型。
 
 RC2 的 Desktop 基础 profile 默认启用 HMR；官方管理器在该模式下会先卸载 Bundle，再用随 DSH 提供的包管理器移除依赖。包卸载本身不会调用 ANT 的“断开设备”操作，也不会清空 DSH 凭证存储。若 profile 禁用了 HMR，管理器会提示先停止 profile；此时改用下方 CLI 备用流程。真实成员 profile 的凭证保留仍需在目标 RC2 客户端上验收。
@@ -59,14 +59,14 @@ node packages/ant-bundle/tools/migrate-legacy.mjs migrate --apply
 安装了系统 Node.js 的成员也可以从已发布 npm 包运行：
 
 ```sh
-npm exec --yes --package @ai-wendao/ant@0.3.12 -- ant-migrate inspect
-npm exec --yes --package @ai-wendao/ant@0.3.12 -- ant-migrate migrate
+npm exec --yes --package @ai-wendao/ant@0.3.13 -- ant-migrate inspect
+npm exec --yes --package @ai-wendao/ant@0.3.13 -- ant-migrate migrate
 ```
 
 退出 DSH 后执行变更：
 
 ```sh
-npm exec --yes --package @ai-wendao/ant@0.3.12 -- ant-migrate migrate --apply
+npm exec --yes --package @ai-wendao/ant@0.3.13 -- ant-migrate migrate --apply
 ```
 
 若 CLI 不在 PATH，可追加 `--dsh-cli "<Desktop CLI 完整路径>"`；若 DSH 使用自定义数据目录，可追加 `--dsh-home "<DSH_HOME 路径>"`。
@@ -76,8 +76,8 @@ npm exec --yes --package @ai-wendao/ant@0.3.12 -- ant-migrate migrate --apply
 `migrate --apply` 会输出受限权限的备份目录，备份包含 profile 的 `package.json`、`pnpm-lock.yaml`、`pnpm-workspace.yaml`（若存在）及其 SHA-256 校验值，不包含密钥库。备份仅用于迁移状态核验和保留原始清单，不等于离线恢复包。确认 DSH 已退出后，通过同一工具调用：
 
 ```sh
-npm exec --yes --package @ai-wendao/ant@0.3.12 -- ant-migrate rollback --backup "<备份目录>"
-npm exec --yes --package @ai-wendao/ant@0.3.12 -- ant-migrate rollback --backup "<备份目录>" --apply
+npm exec --yes --package @ai-wendao/ant@0.3.13 -- ant-migrate rollback --backup "<备份目录>"
+npm exec --yes --package @ai-wendao/ant@0.3.13 -- ant-migrate rollback --backup "<备份目录>" --apply
 ```
 
 回退只在 scoped 包已安装、旧 alias 尚未移除的中间态工作；它会卸载 scoped 包并保留旧 alias。已完成迁移的 profile 不接受该回退，避免自动恢复已知有加载问题的 alias。若安装包时 npm registry 不可用，保持 DSH 关闭，稍后重新运行 `migrate --apply`。

package/README.md

@@ -6,10 +6,16 @@ ANT (AI-native Teams) connects a DeepSeek Harness Desktop profile to its team's
 
 ## 企业精选技能
 
-团队管理员可在 ANT 管理台从 GitHub 目录、ZIP、TAR、TAR.GZ／TGZ 或单份 `SKILL.md` 导入技能，核对来源、文件和依赖后发布。已连接团队的成员在 DSH 的 ANT 插件设置页点击“打开技能中心”，进入独立目录页面浏览并安装。ANT Host 将固定版本的完整文件集放进 DSH 的用户技能目录；随后由 DSH 原生技能提供者发现和使用。
+团队管理员可在 ANT 管理台从 GitHub 目录、ZIP、TAR、TAR.GZ／TGZ 或单份 `SKILL.md` 导入技能，核对来源、文件和依赖后发布。已连接团队的成员在 DSH 的 ANT 插件设置页点击“打开扩展中心”，进入“技能”页面浏览并安装。ANT Host 将固定版本的完整文件集放进 DSH 的用户技能目录，并重新核对本机文件；启用本地技能的 DSH 会话随后由原生技能提供者发现和使用。ANT 不用 Host 全局技能列表判断会话是否已发现技能。
 
 安装不会自动运行技能脚本或安装 Python、Node 等系统依赖。ANT 只更新或卸载自己管理且本机内容未被修改的技能目录；发现同名个人技能或本机改动时会停止覆盖。
 
+## 企业精选插件
+
+管理员可从 npm 官方源的 DSH Bundle 精确版本创建草稿，填写源码、许可证、依赖和安装脚本的审核记录后发布。成员在“扩展中心 → 插件”查看审核信息和本机状态。当前 DSH RC2 无法让 ANT 在安装脚本运行前确认实际下载制品与审核制品一致，因此插件一键安装暂停；需要使用时请联系企业管理员安排。安全撤回版本会在扩展中心标明；本机安装受影响版本或无法读取本机版本时，ANT 设置页也显示相应风险公告。
+
+企业精选是团队推荐目录，不是强制白名单；ANT 不能阻止成员从 DSH 原生插件管理页自行安装其他包。当前 DSH RC2 接口无法让 ANT 强制校验成员安装的包字节与审核时的摘要一致，也不能保证 profile 的依赖范围始终为精确版本；上线边界见 [待决策记录](../../docs/decisions/2026-10-15-plugin-center-rollout.md)。
+
 ## Existing `ant` alias installations
 
 DSH RC2 requires a Bundle's client module identity to match its npm package name. Profiles that installed `ant` as an npm alias for `@ai-wendao/ant` need a one-time package-key migration. Use DSH's Plugins page for the normal Desktop profile; the cross-platform migration CLI is a fallback.

package/client.js

@@ -33,6 +33,15 @@ window.__ModuleLoader__.load({
       border: '0.5px solid var(--dsw-alias-border-l2)', borderRadius: 8,
       cursor: 'pointer',
     }
+    function ExtensionRequestNotice() {
+      return h('aside', { role: 'note', style: {
+        ...panelStyle,
+        borderColor: 'var(--dsw-alias-state-business-primary)',
+        gap: 5,
+      } },
+        h('h2', { style: { margin: 0, fontSize: 16 } }, '没有找到想用的技能或插件？'),
+        h('p', { style: mutedTextStyle }, '请联系企业管理员，说明你希望完成的任务或提供扩展地址。管理员审核后会将合适的版本加入扩展中心。技能可在这里安装；插件请由管理员安排，勿自行安装未经审核的扩展。'))
+    }
     const normalizeServiceUrl = (value) => {
       let url
       try { url = new URL(value.trim()) } catch { return null }
@@ -92,18 +101,48 @@ window.__ModuleLoader__.load({
       try { return normalizeServiceUrl(localStorage.getItem(SERVICE_URL_STORAGE_KEY) || '') || '' } catch { return '' }
     }
 
+    function savedDeviceId() {
+      try {
+        const existing = localStorage.getItem(DEVICE_ID_STORAGE_KEY)
+        return existing && /^[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/iu.test(existing) ? existing : null
+      } catch { return null }
+    }
+
     function loadDeviceId() {
-      const existing = localStorage.getItem(DEVICE_ID_STORAGE_KEY)
-      if (existing && /^[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/iu.test(existing)) return existing
+      const existing = savedDeviceId()
+      if (existing) return existing
       const deviceId = crypto.randomUUID()
       localStorage.setItem(DEVICE_ID_STORAGE_KEY, deviceId)
       return deviceId
     }
 
-    function TeamServiceConfig({ remote, openSkillCenter }) {
+    function TeamServiceConfig({ remote, openSkillCenter, openPluginCenter }) {
       const [serviceUrl, setServiceUrl] = useState(loadServiceUrl)
       const [draft, setDraft] = useState(serviceUrl)
       const [message, setMessage] = useState('')
+      const [pluginAlerts, setPluginAlerts] = useState([])
+      useEffect(() => {
+        let disposed = false
+        const inspect = async () => {
+          try {
+            const response = await fetch('/api/ant-teams/plugins', { cache: 'no-store' })
+            if (!response.ok) return
+            const catalog = await readLocalJsonResponse(response)
+            const listed = await remote?.pluginManager?.listBundles?.()
+            if (!listed?.ok || !Array.isArray(catalog.plugins)) return
+            const affected = catalog.plugins.flatMap((plugin) => {
+              if (plugin.status !== 'security_withdrawn') return []
+              const local = listed.value.find((bundle) => bundle.installed && bundle.name === plugin.package_name)
+              if (!local || (local.version && local.version !== plugin.version)) return []
+              return [{ ...plugin, versionUnknown: !local.version }]
+            })
+            if (!disposed) setPluginAlerts(affected)
+          } catch {}
+        }
+        void inspect()
+        const timer = setInterval(() => void inspect(), 5 * 60 * 1000)
+        return () => { disposed = true; clearInterval(timer) }
+      }, [remote])
       const save = (event) => {
         event.preventDefault()
         const normalized = normalizeServiceUrl(draft)
@@ -144,13 +183,18 @@ window.__ModuleLoader__.load({
             link ? h('a', { href: link, target: '_blank', rel: 'noopener noreferrer', style: { color: 'var(--dsw-alias-link)', fontSize: 13 } }, '打开团队管理 ↗') : null)),
         h('section', { style: { ...panelStyle, display: 'flex', flexWrap: 'wrap', alignItems: 'center', justifyContent: 'space-between' } },
           h('div', null,
-            h('h3', { style: { margin: 0, fontSize: 16, fontWeight: 650 } }, '企业精选技能'),
-            h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '浏览团队审核发布的技能，在独立页面查看说明并安装到这台 DSH。')),
-          h('button', { type: 'button', onClick: openSkillCenter, style: primaryButtonStyle }, '打开技能中心 →')),
+            h('h3', { style: { margin: 0, fontSize: 16, fontWeight: 650 } }, '企业精选扩展'),
+            h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '浏览团队审核发布的技能与插件；技能可在这里安装，插件安全安装暂未开放。没有找到需要的扩展时，请联系企业管理员上架。')),
+          h('button', { type: 'button', onClick: openSkillCenter, style: primaryButtonStyle }, '打开扩展中心 →')),
+        pluginAlerts.length ? h('section', { role: 'alert', style: { ...panelStyle, borderColor: 'var(--dsw-alias-label-danger, #d44)' } },
+          h('h3', { style: { margin: 0, fontSize: 16 } }, '已安装插件存在安全撤回公告'),
+          ...pluginAlerts.map((plugin) => h('p', { key: plugin.id, style: mutedTextStyle },
+            `${plugin.title} ${plugin.version}${plugin.versionUnknown ? '（本机版本暂无法读取，请核对是否受影响）' : ''}：${plugin.withdrawal_reason}`)),
+          h('button', { type: 'button', onClick: openPluginCenter, style: secondaryButtonStyle }, '查看插件并打开 DSH 管理 →')) : null,
         h(ModelSyncFooter, { remote, serviceUrl, onServiceUrlChange: setServiceUrl }))
     }
 
-    function SkillCenterPage({ onBack }) {
+    function SkillCenterPage({ onBack, onPlugins }) {
       const [skills, setSkills] = useState([])
       const [loading, setLoading] = useState(false)
       const [workingId, setWorkingId] = useState('')
@@ -191,7 +235,8 @@ window.__ModuleLoader__.load({
           const result = await readLocalJsonResponse(response)
           if (!response.ok) throw new Error(result.message || `${action}失败（${response.status}）。`)
           await refresh()
-          setMessage(`${skill.title} 已${action}。DSH 将从本机技能目录发现它。`)
+          setMessage(remove ? `${skill.title} 已从 ANT 管理的本机目录卸载。`
+            : `${skill.title} 的文件已${action}到 DSH 用户技能目录。DSH 会在后续会话或模型步骤中读取；若不可用，请检查当前预设是否启用了本地技能。`)
         } catch (error) { setMessage(error instanceof Error ? error.message : `${action}失败。`) }
         finally { setWorkingId('') }
       }
@@ -200,17 +245,20 @@ window.__ModuleLoader__.load({
         const matchesQuery = !query.trim() || `${skill.title} ${skill.description} ${skill.dsh_name}`.toLowerCase().includes(query.trim().toLowerCase())
         return matchesFilter && matchesQuery
       })
-      const statusLabel = { installed: '已安装', 'update-available': '可更新', 'not-installed': '未安装', 'not-discovered': 'DSH 未发现', conflict: '本机冲突' }
+      const statusLabel = { installed: '已放入本机目录', 'update-available': '可更新', 'not-installed': '未安装', conflict: '本机冲突' }
       return h('section', { 'aria-label': '企业精选技能', style: {
         height: '100%', overflowY: 'auto', boxSizing: 'border-box',
         padding: 'calc(var(--dsh-frame-top-clearance, 0px) + 20px) clamp(16px, 3vw, 36px) 48px',
       } }, h('div', { style: { maxWidth: 1440, margin: '0 auto', display: 'grid', gap: 22 } },
-        h('button', { type: 'button', onClick: onBack, style: { ...secondaryButtonStyle, justifySelf: 'start' } }, '← 返回 ANT 插件设置'),
+        h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8 } },
+          h('button', { type: 'button', onClick: onBack, style: secondaryButtonStyle }, '← 返回 ANT 插件设置'),
+          h('button', { type: 'button', onClick: onPlugins, style: secondaryButtonStyle }, '查看企业精选插件 →')),
         h('div', { style: { display: 'flex', flexWrap: 'wrap', alignItems: 'end', justifyContent: 'space-between', gap: 16 } },
           h('div', null,
             h('h1', { style: { margin: 0, fontSize: 28 } }, '企业精选技能'),
             h('p', { style: { ...mutedTextStyle, marginTop: 6 } }, '团队管理员审核后发布；安装到这台 DSH 后，由 DSH 原生技能系统发现和使用。')),
           h('button', { type: 'button', disabled: loading || Boolean(workingId), onClick: () => void refresh(), style: secondaryButtonStyle }, loading ? '读取中…' : '刷新目录')),
+        h(ExtensionRequestNotice),
         h('div', { style: { ...panelStyle, gap: 12 } },
           h('input', { type: 'search', value: query, onChange: (event) => setQuery(event.target.value), placeholder: '搜索技能名称或说明', 'aria-label': '搜索企业精选技能', style: inputStyle }),
           h('div', { style: { display: 'flex', flexWrap: 'wrap', alignItems: 'center', gap: 8 } },
@@ -234,19 +282,107 @@ window.__ModuleLoader__.load({
               h('p', { style: mutedTextStyle }, `本机依赖：${skill.requirements}`),
               skill.local_status === 'conflict'
                 ? h('p', { role: 'status', style: mutedTextStyle }, '本机同名技能有未受 ANT 管理的内容、文件已被修改或备份损坏；请联系管理员处理。')
-                : skill.local_status === 'not-discovered'
-                  ? h('div', { style: { display: 'grid', gap: 10 } },
-                    h('p', { role: 'status', style: mutedTextStyle }, '文件已在本机，但 DSH 技能服务没有发现它；请检查 DSH 技能目录配置。'),
-                    h('button', { type: 'button', disabled: Boolean(workingId), onClick: () => void changeInstall(skill, true), style: { ...secondaryButtonStyle, justifySelf: 'start' } }, '卸载本机副本'))
-                  : h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8, marginTop: 'auto' } },
+                : h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8, marginTop: 'auto' } },
                     h('button', { type: 'button', disabled: Boolean(workingId) || skill.local_status === 'installed',
                       onClick: () => void changeInstall(skill), style: primaryButtonStyle },
-                    skill.local_status === 'installed' ? '已安装' : skill.local_status === 'update-available' ? '更新技能' : '安装到这台 DSH'),
+                    skill.local_status === 'installed' ? '文件已安装' : skill.local_status === 'update-available' ? '更新技能' : '安装到这台 DSH'),
                     skill.local_status !== 'not-installed' ? h('button', { type: 'button', disabled: Boolean(workingId),
                       onClick: () => void changeInstall(skill, true), style: secondaryButtonStyle }, '卸载') : null))
           })) : !loading && skills.length ? h('p', { style: mutedTextStyle }, '没有符合筛选条件的技能。') : null))
     }
 
+    function PluginCenterPage({ remote, onBack, onSkills, openBundle }) {
+      const [plugins, setPlugins] = useState([])
+      const [bundles, setBundles] = useState([])
+      const [loading, setLoading] = useState(false)
+      const [message, setMessage] = useState('')
+      const [query, setQuery] = useState('')
+      const [filter, setFilter] = useState('all')
+      const refresh = async () => {
+        setLoading(true)
+        try {
+          const manager = remote?.pluginManager
+          if (typeof manager?.listBundles !== 'function') throw new Error('当前 DSH 未提供插件管理接口。')
+          const [response, listed] = await Promise.all([
+            fetch('/api/ant-teams/plugins', { cache: 'no-store' }), manager.listBundles(),
+          ])
+          const result = await readLocalJsonResponse(response)
+          if (!response.ok) throw new Error(result.message || `读取插件目录失败（${response.status}）。`)
+          if (!Array.isArray(result.plugins)) throw new Error('企业插件目录格式无效。')
+          if (!listed.ok) throw new Error(listed.error?.message || '无法读取 DSH 本机插件。')
+          setPlugins(result.plugins)
+          setBundles(listed.value)
+          setMessage(result.plugins.length ? '' : '团队暂未发布精选插件。')
+        } catch (error) {
+          setPlugins([])
+          setBundles([])
+          setMessage(error instanceof Error ? error.message : '无法读取企业精选插件。')
+        } finally { setLoading(false) }
+      }
+      useEffect(() => { void refresh() }, [])
+      const visible = plugins.filter((plugin) => {
+        const installed = bundles.find((bundle) => bundle.name === plugin.package_name && bundle.installed)
+        const matches = !query.trim() || `${plugin.title} ${plugin.description} ${plugin.package_name}`.toLowerCase().includes(query.trim().toLowerCase())
+        return matches && (filter === 'all' || filter === 'installed' && installed?.version === plugin.version
+          || filter === 'available' && plugin.status === 'published' && !installed
+          || filter === 'retired' && plugin.status !== 'published')
+      })
+      return h('section', { 'aria-label': '企业精选插件', style: {
+        height: '100%', overflowY: 'auto', boxSizing: 'border-box',
+        padding: 'calc(var(--dsh-frame-top-clearance, 0px) + 20px) clamp(16px, 3vw, 36px) 48px',
+      } }, h('div', { style: { maxWidth: 1440, margin: '0 auto', display: 'grid', gap: 22 } },
+        h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8 } },
+          h('button', { type: 'button', onClick: onBack, style: secondaryButtonStyle }, '← 返回 ANT 插件设置'),
+          h('button', { type: 'button', onClick: onSkills, style: secondaryButtonStyle }, '查看企业精选技能 →')),
+        h('div', { style: { display: 'flex', flexWrap: 'wrap', justifyContent: 'space-between', gap: 16 } },
+          h('div', null,
+            h('h1', { style: { margin: 0, fontSize: 28 } }, '企业精选插件'),
+            h('p', { style: { ...mutedTextStyle, marginTop: 6 } }, '这里展示团队审核过的插件版本及本机状态。')),
+          h('button', { type: 'button', disabled: loading, onClick: () => void refresh(), style: secondaryButtonStyle }, loading ? '读取中…' : '刷新目录')),
+        h('aside', { role: 'note', style: { ...panelStyle, borderColor: 'var(--dsw-alias-label-danger, #d44)' } },
+          h('strong', null, '插件一键安装暂未开放'),
+          h('p', { style: mutedTextStyle }, '当前 DSH 无法让 ANT 在运行代码前核对实际下载的插件及其依赖。需要使用某个插件时，请联系企业管理员安排审核与安全安装；请勿自行从其他来源安装。')),
+        h(ExtensionRequestNotice),
+        h('div', { style: panelStyle },
+          h('input', { type: 'search', value: query, onChange: (event) => setQuery(event.target.value), placeholder: '搜索插件名称或用途', 'aria-label': '搜索企业精选插件', style: inputStyle }),
+          h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8 } },
+            ...[['all', '全部'], ['available', '已审核'], ['installed', '已安装'], ['retired', '已废弃']].map(([value, label]) =>
+              h('button', { key: value, type: 'button', onClick: () => setFilter(value), 'aria-pressed': filter === value,
+                style: { ...secondaryButtonStyle, minHeight: 34, backgroundColor: filter === value ? 'var(--dsw-alias-bg-layer-2)' : secondaryButtonStyle.backgroundColor } }, label)))),
+        message ? h('p', { role: 'status', style: mutedTextStyle }, message) : null,
+        visible.length ? h('div', { style: { display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 420px), 1fr))', gap: 16 } },
+          ...visible.map((plugin) => {
+            const local = bundles.find((bundle) => bundle.name === plugin.package_name && bundle.installed)
+            const sameVersion = local?.version === plugin.version
+            const security = plugin.status === 'security_withdrawn'
+            const status = security ? '已废弃（安全风险）'
+              : plugin.status === 'deprecated' ? '已废弃' : sameVersion
+                ? local.error ? '加载异常' : local.enabled ? '已安装（配置已启用）' : '已安装未启用'
+                : local ? `本机版本 ${local.version || '暂无法读取'}` : '已审核，等待安全安装'
+            return h('article', { key: plugin.id, style: security
+              ? { ...panelStyle, borderColor: 'var(--dsw-alias-label-danger, #d44)' } : panelStyle },
+              h('div', { style: { display: 'flex', flexWrap: 'wrap', justifyContent: 'space-between', gap: 8 } },
+                h('h2', { style: { margin: 0, fontSize: 19 } }, plugin.title),
+                h('span', { style: security
+                  ? { ...mutedTextStyle, color: 'var(--dsw-alias-label-danger, #d44)', fontWeight: 650 } : mutedTextStyle }, status)),
+              h('p', { style: mutedTextStyle }, plugin.description),
+              h('p', { style: mutedTextStyle }, `${plugin.package_name}@${plugin.version} · 许可证：${plugin.license || '未声明'}`),
+              h('p', { style: mutedTextStyle }, `来源：${plugin.source_url || '未提供'} · DSH 版本要求：${plugin.peer_range || '包未声明'}`),
+              h('p', { style: mutedTextStyle }, `额外配置：${plugin.requirements || '无'}`),
+              plugin.scripts ? h('p', { style: mutedTextStyle }, `包自身的安装脚本：${plugin.scripts}`) : null,
+              plugin.status !== 'published' ? h('p', { role: 'status', style: security
+                ? { ...mutedTextStyle, color: 'var(--dsw-alias-label-danger, #d44)' } : mutedTextStyle },
+                plugin.withdrawal_reason || '团队已停止推荐此版本。') : null,
+              local?.error ? h('p', { role: 'status', style: mutedTextStyle }, local.error.message || String(local.error)) : null,
+              h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8 } },
+                plugin.status === 'published' && !local
+                  ? h('p', { style: mutedTextStyle }, '如需安装，请联系企业管理员安排。') : null,
+                local ? h('button', { type: 'button', onClick: () => openBundle(plugin.package_name), style: secondaryButtonStyle }, '打开 DSH 插件管理') : null,
+                local && !sameVersion && plugin.status === 'published'
+                  ? h('p', { style: mutedTextStyle }, '本机版本与团队审核版本不同；请联系企业管理员核对。') : null))
+          })) : !loading && plugins.length ? h('p', { style: mutedTextStyle }, '没有符合筛选条件的插件。') : null))
+    }
+
     function ModelSyncFooter({ remote, serviceUrl, onServiceUrlChange }) {
       const [email, setEmail] = useState('')
       const [code, setCode] = useState('')
@@ -256,11 +392,21 @@ window.__ModuleLoader__.load({
       const [credentialConfigured, setCredentialConfigured] = useState(null)
       const [reauthenticate, setReauthenticate] = useState(false)
       const [needsReconnect, setNeedsReconnect] = useState(false)
+      const [allowLocalCleanup, setAllowLocalCleanup] = useState(false)
       const [bundleRelease, setBundleRelease] = useState(null)
       const [bundleUpdate, setBundleUpdate] = useState({ state: 'idle', currentVersion: '', message: '' })
-      const [approvedBuilds, setApprovedBuilds] = useState([])
       const [serviceCompatibility, setServiceCompatibility] = useState({ state: 'idle', message: '' })
 
+      const connectionErrorMessage = (result, status) => {
+        const message = result?.message || `请求失败（${status}）`
+        if (!['LEGACY_DEVICE_REVOKE_REQUIRED', 'ANT_CONNECTION_CLEANUP_REQUIRED'].includes(result?.code)) return message
+        setAllowLocalCleanup(true)
+        const deviceId = savedDeviceId()
+        return deviceId
+          ? `${message} 设备编号：${deviceId}。请把编号提供给原团队管理员。`
+          : `${message} 本机无法确认旧设备编号；请让原团队管理员按成员查看设备清单，勿用新编号猜测。`
+      }
+
       const inspectServiceCompatibility = async (rawServiceUrl, useSavedConnection = false) => {
         const normalized = normalizeServiceUrl(rawServiceUrl)
         if (!normalized && !useSavedConnection) {
@@ -374,10 +520,12 @@ window.__ModuleLoader__.load({
 
       const checkBundleUpdate = async () => {
         setBundleUpdate({ state: 'checking', currentVersion: '', message: '正在检查 ANT 更新…' })
-        setApprovedBuilds([])
         try {
           const response = await fetch('/api/ant-teams/bundle-release', {
-            cache: 'no-store', headers: { 'x-ant-bundle-capabilities': 'direct-package-install' },
+            cache: 'no-store', headers: {
+              'x-ant-bundle-capabilities': 'direct-package-install',
+              'x-ant-bundle-update-mode': 'check-only',
+            },
           })
           const release = await readLocalJsonResponse(response)
           if (!response.ok) throw new Error(release.message || `检查失败（${response.status}）`)
@@ -425,99 +573,55 @@ window.__ModuleLoader__.load({
         }
       }
 
-      const installBundleUpdate = async (allowScripts = false) => {
-        const installSpec = directInstallSpec(bundleRelease)
-        if (!installSpec
-          || (!allowScripts && bundleUpdate.state !== 'available')
-          || (allowScripts && approvedBuilds.length === 0)) return
-        const manager = remote?.pluginManager
-        if (typeof manager?.installBundle !== 'function') {
-          setBundleUpdate((current) => ({ ...current, state: 'failed', message: '当前 DSH 版本未提供官方 Bundle 安装接口。' }))
-          return
-        }
-        const scripts = allowScripts ? approvedBuilds : []
-        if (scripts.length && !window.confirm(`DSH 安装需要运行以下依赖的安装脚本：\n\n${scripts.join('\n')}\n\n仅在信任这些依赖时继续。`)) return
-        setBusy(true)
-        setApprovedBuilds([])
-        setBundleUpdate((current) => ({ ...current, state: 'installing', message: '正在委托 DSH 官方管理器安装更新…' }))
-        try {
-          const result = await manager.installBundle(installSpec, {
-            enabled: true,
-            ...(scripts.length ? { approvedBuilds: scripts } : {}),
-          })
-          if (!result.ok) throw new Error(result.error?.message || 'DSH 安装请求未返回结果。')
-          const outcome = result.value
-          if (outcome.application === 'failed') {
-            const pending = Array.isArray(outcome.pendingBuilds) ? outcome.pendingBuilds : []
-            setApprovedBuilds(pending)
-            const reason = outcome.error?.diagnostic || outcome.packageResult?.output || 'DSH 未能安装该版本。'
-            setBundleUpdate({
-              state: 'failed', currentVersion: bundleUpdate.currentVersion,
-              message: pending.length
-                ? `DSH 暂停了安装，因为以下依赖需要明确授权运行安装脚本：${pending.join('、')}`
-                : reason,
-            })
-            return
-          }
-          if (outcome.application === 'cancelled') {
-            setBundleUpdate({ state: 'failed', currentVersion: bundleUpdate.currentVersion, message: 'DSH 已取消更新，当前运行版本未切换。' })
-            return
-          }
-          if (outcome.application === 'overridden') {
-            setBundleUpdate({ state: 'failed', currentVersion: bundleUpdate.currentVersion, message: 'DSH 已记录更新，但其他插件配置覆盖了 ANT。请检查 DSH 插件配置后再重启。' })
-            return
-          }
-          if (outcome.bundle !== bundleRelease.package_name) {
-            setBundleUpdate({ state: 'failed', currentVersion: bundleUpdate.currentVersion, message: 'DSH 返回的安装包名称与 ANT 发布信息不一致。请联系管理员核对发布包。' })
-            return
-          }
-          setBundleUpdate({
-            state: 'done', currentVersion: bundleRelease.version,
-            message: outcome.application === 'restart-required'
-              ? `DSH 已安装 ${installSpec}。请完全退出并重新启动 DSH 后生效。`
-              : `DSH 已安装 ${installSpec}。`,
-          })
-        } catch (error) {
-          setBundleUpdate({ state: 'failed', currentVersion: bundleUpdate.currentVersion, message: error instanceof Error ? error.message : 'DSH 未能安装 ANT 更新。' })
-        } finally {
-          setBusy(false)
-        }
+      const clearLocalConnection = async () => {
+        if (typeof remote?.settings?.mutate !== 'function') throw new Error('DSH 未提供模型设置接口。')
+        const settingsResult = await remote.settings.mutate('llm-pi-ai', [
+          { op: 'unset', path: ['providers', 'ant-team-openai'] },
+          { op: 'unset', path: ['providers', 'ant-team-anthropic'] },
+        ], undefined)
+        if (!settingsResult.ok) throw new Error(settingsResult.error?.message || 'ANT 模型设置未能清除。')
+        if (typeof remote?.credentials?.unset !== 'function') throw new Error('DSH 未提供凭证删除接口。')
+        const credentialResult = await remote.credentials.unset('ANT_MODEL_API_KEY')
+        if (!credentialResult.ok) throw new Error(credentialResult.error?.message || 'ANT 成员凭证未能清除。')
+        setCredentialConfigured(false)
+        setNeedsReconnect(false)
+        setReauthenticate(false)
+        setAllowLocalCleanup(false)
       }
 
       const disconnect = async () => {
         setBusy(true)
         setMessage('正在断开此设备的 ANT 连接…')
         try {
-          if (typeof remote?.settings?.mutate !== 'function') throw new Error('DSH 未提供模型设置接口。')
-          const result = await remote.settings.mutate('llm-pi-ai', [
-            { op: 'unset', path: ['providers', 'ant-team-openai'] },
-            { op: 'unset', path: ['providers', 'ant-team-anthropic'] },
-          ], undefined)
-          if (!result.ok) throw new Error(result.error?.message || 'ANT 模型设置未能清除。')
+          const response = await fetch('/api/ant-teams/disconnect', { method: 'POST' })
+          const result = await readLocalJsonResponse(response)
+          if (!response.ok || result.revoked !== true) {
+            throw new Error(connectionErrorMessage(result, response.status))
+          }
         } catch (error) {
+          setAllowLocalCleanup(true)
           setBusy(false)
-          setMessage(`无法清除本机 ANT 模型设置，因此连接仍保留。${error instanceof Error ? error.message : '请稍后重试。'}`)
+          setMessage(`未清除本机凭证和模型设置：${error instanceof Error ? error.message : '请稍后重试。'}`)
           return
         }
-        let serverRevoked = false
         try {
-          const response = await fetch('/api/ant-teams/disconnect', { method: 'POST' })
-          const result = await readLocalJsonResponse(response)
-          serverRevoked = response.ok && result.revoked === true
-        } catch {}
-        let credentialRemoved = false
+          await clearLocalConnection()
+          setMessage('此设备的 ANT 凭证已撤销，ANT 模型设置已清除。团队服务地址已保留。')
+        } catch (error) {
+          setAllowLocalCleanup(true)
+          setMessage(`服务端已撤销设备令牌，但本机清理失败：${error instanceof Error ? error.message : '请稍后重试'}。可选择仅清理本机。`)
+        } finally { setBusy(false) }
+      }
+
+      const clearOnlyLocal = async () => {
+        if (!window.confirm('仅清理这台 DSH 的 ANT 凭证和模型设置，不保证服务端设备令牌已撤销。请先让原团队管理员确认远端撤销；否则令牌可能仍可被使用。确定继续吗？')) return
+        setBusy(true)
         try {
-          if (typeof remote?.credentials?.unset !== 'function') throw new Error('DSH 未提供凭证删除接口。')
-          const result = await remote.credentials.unset('ANT_MODEL_API_KEY')
-          if (!result.ok) throw new Error(result.error?.message || 'ANT 成员凭证未能清除。')
-          credentialRemoved = true
-          setCredentialConfigured(false)
+          await clearLocalConnection()
+          setMessage('已仅清理本机 ANT 凭证和模型设置。此操作未确认服务端撤销，请向原团队管理员核对。')
         } catch (error) {
-          setMessage(`本机 ANT 模型设置已清除，但成员凭证未能移除：${error instanceof Error ? error.message : '请稍后重试。'}`)
-        }
-        setBusy(false)
-        if (credentialRemoved && serverRevoked) setMessage('此设备的 ANT 凭证已撤销，ANT 模型设置已清除。团队服务地址已保留。')
-        else if (credentialRemoved) setMessage('本机 ANT 凭证与模型设置已清除；服务端未确认撤销，活动会话会在 90 秒内到期。团队服务地址已保留。')
+          setMessage(`本机清理未完成：${error instanceof Error ? error.message : '请稍后重试。'}`)
+        } finally { setBusy(false) }
       }
 
       useEffect(() => {
@@ -555,6 +659,13 @@ window.__ModuleLoader__.load({
           setMessage('请填写工作邮箱。')
           return
         }
+        if (credentialConfigured !== false && !savedDeviceId()) {
+          if (credentialConfigured === true) setAllowLocalCleanup(true)
+          setMessage(credentialConfigured === true
+            ? '旧 ANT 凭证仍在，但本机无法确认它绑定的设备编号。请让原团队管理员按成员核查并撤销旧设备，再仅清理本机。'
+            : '尚未确认本机凭证状态，也没有已保存的设备编号。请等待检查完成，或修复 DSH 凭证接口后重试。')
+          return
+        }
         setBusy(true)
         setMessage('正在发送邮箱验证码…')
         try {
@@ -566,7 +677,7 @@ window.__ModuleLoader__.load({
             body: JSON.stringify({ service_url: normalized, email: normalizedEmail }),
           })
           const result = await readLocalJsonResponse(response)
-          if (!response.ok) throw new Error(result.message || `请求失败（${response.status}）`)
+          if (!response.ok) throw new Error(connectionErrorMessage(result, response.status))
           setEmail(normalizedEmail)
           setCodeRequested(true)
           setMessage(result.message || '如果该邮箱符合团队规则，验证码将发送至邮箱。')
@@ -586,6 +697,13 @@ window.__ModuleLoader__.load({
           setMessage('请填写有效的服务地址、工作邮箱和 8 位验证码。')
           return
         }
+        if (credentialConfigured !== false && !savedDeviceId()) {
+          if (credentialConfigured === true) setAllowLocalCleanup(true)
+          setMessage(credentialConfigured === true
+            ? '旧 ANT 凭证仍在，但本机无法确认旧设备编号。请先联系原团队管理员撤销旧设备，再仅清理本机。'
+            : '尚未确认本机凭证状态，也没有已保存的设备编号。请等待检查完成，或修复 DSH 凭证接口后重试。')
+          return
+        }
         setBusy(true)
         setMessage('正在验证邮箱并同步团队模型…')
         try {
@@ -602,7 +720,7 @@ window.__ModuleLoader__.load({
             }),
           })
           const result = await readLocalJsonResponse(response)
-          if (!response.ok) throw new Error(result.message || `请求失败（${response.status}）`)
+          if (!response.ok) throw new Error(connectionErrorMessage(result, response.status))
           if (typeof result.token !== 'string' || !result.token.startsWith('antm_') || !Array.isArray(result.models)) {
             throw new Error('ANT 返回的连接信息格式无效。')
           }
@@ -616,6 +734,7 @@ window.__ModuleLoader__.load({
           onServiceUrlChange(normalized)
           setCodeRequested(false)
           setCredentialConfigured(true)
+          setAllowLocalCleanup(false)
           setNeedsReconnect(false)
           setReauthenticate(false)
           setMessage(`已连接 ${result.email || normalizedEmail}，同步 ${result.models.length} 个获准模型。它们现已出现在 DSH 模型选择器中。`)
@@ -659,12 +778,9 @@ window.__ModuleLoader__.load({
               h('button', { type: 'button', disabled: busy || bundleUpdate.state === 'checking', onClick: () => void checkBundleUpdate(), style: secondaryButtonStyle }, bundleUpdate.state === 'checking' ? '检查中…' : '检查更新')),
             bundleUpdate.message ? h('p', { role: 'status', style: mutedTextStyle }, bundleUpdate.message) : null,
             bundleRelease?.version && bundleUpdate.state === 'available' ? h('div', { style: { display: 'grid', gap: 8 } },
-              h('p', { style: mutedTextStyle }, `发布版本：${bundleRelease.version} · npm：${directInstallSpec(bundleRelease)}`),
+              h('p', { style: mutedTextStyle }, `发布版本：${bundleRelease.version} · 精确包名：${directInstallSpec(bundleRelease)}`),
               bundleRelease.release_notes ? h('p', { style: mutedTextStyle }, bundleRelease.release_notes) : null,
-              h('button', { type: 'button', disabled: busy, onClick: () => void installBundleUpdate(), style: primaryButtonStyle }, busy ? '安装中…' : '由 DSH 安装并更新')) : null,
-            approvedBuilds.length ? h('div', { style: { display: 'grid', gap: 8 } },
-              h('p', { style: mutedTextStyle }, `DSH 暂停安装，等待授权运行以下依赖的安装脚本：${approvedBuilds.join('、')}。`),
-              h('button', { type: 'button', disabled: busy, onClick: () => void installBundleUpdate(true), style: secondaryButtonStyle }, '信任这些依赖并继续安装')) : null) : null,
+              h('p', { style: mutedTextStyle }, 'ANT 暂停一键安装更新：当前 DSH 无法在执行安装脚本前核对审核制品。请联系团队管理员确认升级方式。')) : null) : null,
           showConnectForm ? h('form', { onSubmit: requestCode, style: { display: 'grid', gap: 9, maxWidth: 560 } },
             h('label', { htmlFor: 'ant-team-model-email', style: { fontSize: 13, fontWeight: 550 } }, '工作邮箱'),
             h('input', {
@@ -685,6 +801,23 @@ window.__ModuleLoader__.load({
               onChange: (event) => setCode(event.target.value.replace(/\D/gu, '').slice(0, 8)), style: inputStyle,
             }),
             h('button', { type: 'submit', disabled: busy || code.length !== 8, style: primaryButtonStyle }, busy ? '连接中…' : '验证并连接')) : null,
+          allowLocalCleanup ? h('section', { style: { ...panelStyle, padding: 14, gap: 9 } },
+            h('p', { style: mutedTextStyle }, savedDeviceId()
+              ? `已保存的设备编号：${savedDeviceId()}。请交给原团队管理员核对。`
+              : '本机无法确认旧设备编号。请让原团队管理员按成员查看设备清单，勿用新编号猜测。'),
+            h('p', { style: mutedTextStyle }, '仅清理本机不会确认服务端令牌已撤销；请先取得管理员确认。'),
+            h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8 } },
+              h('button', { type: 'button', disabled: busy, onClick: () => void clearOnlyLocal(), style: secondaryButtonStyle }, '仅清理本机'),
+              h('button', { type: 'button', disabled: busy || !savedDeviceId(), onClick: async () => {
+                try {
+                  const deviceId = savedDeviceId()
+                  if (!deviceId) throw new Error('device id unavailable')
+                  if (typeof window.navigator?.clipboard?.writeText !== 'function') throw new Error('clipboard unavailable')
+                  await window.navigator.clipboard.writeText(deviceId)
+                  setMessage('设备编号已复制，请发给原团队管理员。')
+                }
+                catch { setMessage(savedDeviceId() ? `请复制设备编号：${savedDeviceId()}` : '本机无法确认旧设备编号，请联系原团队管理员核查。') }
+              }, style: secondaryButtonStyle }, '复制设备编号'))) : null,
           message ? h('p', { role: 'status', style: mutedTextStyle }, message) : null))
 
     }
@@ -696,14 +829,28 @@ window.__ModuleLoader__.load({
         pluginManager: ctx.remote.pluginManager,
       }
       ctx.slots.inject('main', () => ctx.slots.register({ name: 'main', key: 'ant-skills' },
-        () => h(SkillCenterPage, { onBack: () => ctx.pluginNavigation.openBundle(ANT_BUNDLE_PACKAGE_NAME) })))
+        () => h(SkillCenterPage, {
+          onBack: () => ctx.pluginNavigation.openBundle(ANT_BUNDLE_PACKAGE_NAME),
+          onPlugins: () => ctx.layout.selectPanel('ant-plugins'),
+        })))
+      ctx.slots.inject('main', () => ctx.slots.register({ name: 'main', key: 'ant-plugins' },
+        () => h(PluginCenterPage, {
+          remote,
+          onBack: () => ctx.pluginNavigation.openBundle(ANT_BUNDLE_PACKAGE_NAME),
+          onSkills: () => ctx.layout.selectPanel('ant-skills'),
+          openBundle: (name) => ctx.pluginNavigation.openBundle(name),
+        })))
       ctx.slots.inject('plugins.bundle.config', () => ctx.slots.register({
           name: 'plugins.bundle.config',
           key: ANT_BUNDLE_PACKAGE_NAME,
           inject: () => ({ remote }),
         }, ({ view, remote: injectedRemote }) => view === 'summary'
           ? h('p', null, 'ANT 团队服务入口。')
-          : h(TeamServiceConfig, { remote: injectedRemote, openSkillCenter: () => ctx.layout.selectPanel('ant-skills') })))
+          : h(TeamServiceConfig, {
+            remote: injectedRemote,
+            openSkillCenter: () => ctx.layout.selectPanel('ant-skills'),
+            openPluginCenter: () => ctx.layout.selectPanel('ant-plugins'),
+          })))
     }
 
     Object.assign(exports, { inject, apply })

package/index.js

@@ -1,5 +1,6 @@
 export const name = 'ant'
 
+import { createHash } from 'node:crypto'
 import { installSkill, listSkills, uninstallSkill } from './skill-install.js'
 
 export const inject = []
@@ -13,6 +14,7 @@ const CONNECT_PATH = '/api/ant-teams/connect'
 const SKILLS_PATH = '/api/ant-teams/skills'
 const SKILL_INSTALL_PATH = '/api/ant-teams/skills/install'
 const SKILL_UNINSTALL_PATH = '/api/ant-teams/skills/uninstall'
+const PLUGINS_PATH = '/api/ant-teams/plugins'
 const ANT_NPM_PACKAGE_NAME = '@ai-wendao/ant'
 const MAX_MODEL_RESPONSE_BYTES = 1024 * 1024
 const MODEL_TOKEN_REF = 'ANT_MODEL_API_KEY'
@@ -34,28 +36,50 @@ function normalizeServiceUrl(value) {
   return url.origin
 }
 
-function serviceUrlFromModelSettings(settings) {
+function modelServiceBinding(settings) {
   const descriptor = settings.describe().find((entry) => entry.ns === 'llm-pi-ai')
   const providers = descriptor?.value?.providers
-  if (!providers || typeof providers !== 'object') return null
+  if (!providers || typeof providers !== 'object') return { configured: false, serviceUrl: null }
   const origins = new Set()
+  let configured = false
   for (const provider of Object.values(providers)) {
-    if (provider?.apiKeyEnv !== MODEL_TOKEN_REF || typeof provider.baseURL !== 'string') continue
+    if (provider?.apiKeyEnv !== MODEL_TOKEN_REF) continue
+    configured = true
+    if (typeof provider.baseURL !== 'string') return { configured, serviceUrl: null }
     let url
-    try { url = new URL(provider.baseURL) } catch { return null }
+    try { url = new URL(provider.baseURL) } catch { return { configured, serviceUrl: null } }
     const localHttp = url.protocol === 'http:' && ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname)
     if ((url.protocol !== 'https:' && !localHttp) || url.username || url.password || url.search || url.hash
-      || !['/model-gateway/openai/v1', '/model-gateway/anthropic'].includes(url.pathname)) return null
+      || !['/model-gateway/openai/v1', '/model-gateway/anthropic'].includes(url.pathname)) {
+      return { configured, serviceUrl: null }
+    }
     origins.add(url.origin)
   }
-  return origins.size === 1 ? [...origins][0] : null
+  return { configured, serviceUrl: origins.size === 1 ? [...origins][0] : null }
+}
+
+function tokenHash(token) {
+  return createHash('sha256').update(token).digest('hex')
 }
 
-async function pinServiceUrl(credentials, serviceUrl) {
-  await credentials.modifyRecord(SERVICE_RECORD_KEY, async () => ({
-    kind: 'grant',
-    payload: { service_url: serviceUrl },
-  }))
+async function pinServiceUrl(credentials, serviceUrl, token, previousToken = null) {
+  const previousHash = previousToken ? tokenHash(previousToken) : null
+  await credentials.modifyRecord(SERVICE_RECORD_KEY, async (current) => {
+    if (previousHash && (current?.kind !== 'grant'
+      || normalizeServiceUrl(current.payload?.service_url) !== serviceUrl
+      || (current.payload?.token_sha256 && current.payload.token_sha256 !== previousHash
+        && current.payload?.previous_token_sha256 !== previousHash))) {
+      throw new Error('当前 ANT 凭证绑定已变化，请重试。')
+    }
+    return {
+      kind: 'grant',
+      payload: {
+        service_url: serviceUrl,
+        token_sha256: tokenHash(token),
+        ...(previousHash && previousHash !== tokenHash(token) ? { previous_token_sha256: previousHash } : {}),
+      },
+    }
+  })
 }
 
 async function readMemberConnection(credentials, settings) {
@@ -66,8 +90,15 @@ async function readMemberConnection(credentials, settings) {
   const pinnedUrl = record?.kind === 'grant' && typeof record.payload?.service_url === 'string'
     ? normalizeServiceUrl(record.payload.service_url)
     : null
-  const serviceUrl = pinnedUrl || serviceUrlFromModelSettings(settings)
-  return serviceUrl ? { serviceUrl, token } : null
+  if (!pinnedUrl) return null
+  const binding = modelServiceBinding(settings)
+  if (pinnedUrl && binding.configured && binding.serviceUrl !== pinnedUrl) return null
+  if (pinnedUrl && typeof record.payload?.token_sha256 === 'string') {
+    const currentHash = tokenHash(token)
+    if (record.payload.token_sha256 !== currentHash
+      && record.payload.previous_token_sha256 !== currentHash) return null
+  } else if (pinnedUrl && binding.serviceUrl !== pinnedUrl) return null
+  return { serviceUrl: pinnedUrl, token }
 }
 
 async function updateModelSession(serviceUrl, token, action) {
@@ -109,29 +140,23 @@ async function readLimitedBody(response) {
 
 async function fetchMemberModels(request, credentials, settings) {
   if (request.method !== 'POST') return jsonResponse(405, { message: '只支持 POST 请求' })
-  let token
-  let pinnedUrl
-  let serviceUrl
+  let connection
   try {
-    token = await credentials.resolve(MODEL_TOKEN_REF)
-    const record = await credentials.readRecord(SERVICE_RECORD_KEY)
-    pinnedUrl = record?.kind === 'grant' && typeof record.payload?.service_url === 'string'
-      ? normalizeServiceUrl(record.payload.service_url)
-      : null
-    serviceUrl = pinnedUrl || serviceUrlFromModelSettings(settings)
+    connection = await readMemberConnection(credentials, settings)
   } catch {
     return jsonResponse(500, { message: 'DSH 无法读取 ANT 连接配置。' })
   }
-  if (!token || !serviceUrl) return jsonResponse(401, { message: '当前 DSH 未连接 ANT，请验证工作邮箱。' })
+  if (!connection) return jsonResponse(401, { message: '当前 DSH 未连接 ANT，请验证工作邮箱。' })
+  const { serviceUrl, token } = connection
 
   try {
-    const session = await updateModelSession(serviceUrl, token.value, 'heartbeat')
+    const session = await updateModelSession(serviceUrl, token, 'heartbeat')
     if (session.status === 401 || session.status === 403) {
       return jsonResponse(401, { message: 'ANT 成员凭证已失效，请重新验证工作邮箱。' })
     }
     if (!session.ok) return jsonResponse(502, { message: '无法激活 ANT 模型会话。' })
     const upstream = await fetch(new URL('/api/me/models', serviceUrl), {
-      headers: { authorization: `Bearer ${token.value}`, accept: 'application/json' },
+      headers: { authorization: `Bearer ${token}`, accept: 'application/json' },
       redirect: 'manual',
       signal: AbortSignal.timeout(10_000),
     })
@@ -146,11 +171,6 @@ async function fetchMemberModels(request, credentials, settings) {
     if (!Array.isArray(result?.models) || normalizeServiceUrl(result.service_url) !== serviceUrl) {
       return jsonResponse(502, { message: 'ANT 团队模型目录与已连接服务不匹配。' })
     }
-    if (!pinnedUrl) {
-      try { await pinServiceUrl(credentials, serviceUrl) } catch {
-        return jsonResponse(500, { message: 'DSH 无法保存已连接的 ANT 服务地址' })
-      }
-    }
     return jsonResponse(200, { service_url: serviceUrl, models: result.models })
   } catch {
     return jsonResponse(502, { message: '无法连接 ANT 团队服务' })
@@ -246,6 +266,9 @@ async function fetchBundleRelease(request, credentials, settings) {
     if (request.headers.get('x-ant-bundle-capabilities') === 'direct-package-install') {
       headers['x-ant-bundle-capabilities'] = 'direct-package-install'
     }
+    if (request.headers.get('x-ant-bundle-update-mode') === 'check-only') {
+      headers['x-ant-bundle-update-mode'] = 'check-only'
+    }
     const upstream = await fetch(new URL('/api/me/bundle-release', connection.serviceUrl), {
       headers,
       redirect: 'manual',
@@ -255,7 +278,7 @@ async function fetchBundleRelease(request, credentials, settings) {
     if (text === null) return jsonResponse(502, { message: 'ANT 更新信息响应过大。' })
     if (upstream.status === 401 || upstream.status === 403) return jsonResponse(401, { message: 'ANT 成员凭证已失效。' })
     if (upstream.status === 426) {
-      return jsonResponse(426, { message: '当前 ANT 插件版本不能安全自动安装 scoped Bundle。请通过 DSH 官方插件管理器完成一次包名迁移。' })
+      return jsonResponse(426, { message: '当前 ANT 插件仍可能自动安装未经核验的制品。请联系团队管理员采用受控升级方式；旧 alias 还需在 DSH 插件管理器中迁移。' })
     }
     if (!upstream.ok) return jsonResponse(502, { message: 'ANT 暂时无法提供插件更新信息。' })
     let release
@@ -288,7 +311,10 @@ async function disconnectMember(request, credentials, settings) {
   try { connection = await readMemberConnection(credentials, settings) } catch {
     return jsonResponse(500, { message: 'DSH 无法读取 ANT 连接配置。' })
   }
-  if (!connection) return jsonResponse(200, { revoked: false })
+  if (!connection) return jsonResponse(409, {
+    code: 'LEGACY_DEVICE_REVOKE_REQUIRED',
+    message: '无法确认旧凭证所属服务或当前设备令牌。请先让原团队管理员撤销此设备，再仅清理本机。',
+  })
   try {
     const response = await fetch(new URL('/auth/dsh-session/disconnect', connection.serviceUrl), {
       method: 'POST',
@@ -296,12 +322,13 @@ async function disconnectMember(request, credentials, settings) {
       redirect: 'manual',
       signal: AbortSignal.timeout(10_000),
     })
-    if (response.status === 204 || response.status === 401 || response.status === 403) {
-      return jsonResponse(200, { revoked: response.status === 204 })
+    if (response.status === 204) return jsonResponse(200, { revoked: true })
+    if (response.status === 401 || response.status === 403) {
+      return jsonResponse(409, { message: '服务端未确认撤销当前令牌。它可能已被停用或更换；请让原团队管理员确认远端状态，再选择仅清理本机。' })
     }
-    return jsonResponse(200, { revoked: false })
+    return jsonResponse(502, { message: '服务端未确认永久撤销，本机凭证仍保留。请稍后重试。' })
   } catch {
-    return jsonResponse(200, { revoked: false })
+    return jsonResponse(502, { message: '无法连接团队服务确认永久撤销，本机凭证仍保留。请稍后重试。' })
   }
 }
 
@@ -313,18 +340,18 @@ async function memberSkillConnection(credentials, settings) {
   return connection
 }
 
-async function fetchMemberSkills(request, credentials, settings, registry) {
+async function fetchMemberSkills(request, credentials, settings) {
   if (request.method !== 'GET') return jsonResponse(405, { message: '只支持 GET 请求' })
   try {
     const connection = await memberSkillConnection(credentials, settings)
     if (!connection) return jsonResponse(401, { message: '请先连接 ANT 团队，或重新验证工作邮箱。' })
-    return jsonResponse(200, { skills: await listSkills(connection, registry) })
+    return jsonResponse(200, { skills: await listSkills(connection) })
   } catch (error) {
     return jsonResponse(502, { message: error instanceof Error ? error.message : '无法读取企业精选技能。' })
   }
 }
 
-async function installMemberSkill(request, credentials, settings, registry) {
+async function installMemberSkill(request, credentials, settings) {
   if (request.method !== 'POST') return jsonResponse(405, { message: '只支持 POST 请求' })
   let body
   try {
@@ -335,7 +362,7 @@ async function installMemberSkill(request, credentials, settings, registry) {
   try {
     const connection = await memberSkillConnection(credentials, settings)
     if (!connection) return jsonResponse(401, { message: '请先连接 ANT 团队，或重新验证工作邮箱。' })
-    return jsonResponse(200, await installSkill(connection, body?.skill_id, registry))
+    return jsonResponse(200, await installSkill(connection, body?.skill_id))
   } catch (error) {
     return jsonResponse(409, { message: error instanceof Error ? error.message : '技能安装失败。' })
   }
@@ -355,7 +382,28 @@ async function uninstallMemberSkill(request) {
   }
 }
 
-async function fetchAuthRequest(request, endpoint, credentials) {
+async function fetchMemberPlugins(request, credentials, settings) {
+  if (request.method !== 'GET') return jsonResponse(405, { message: '只支持 GET 请求' })
+  try {
+    const connection = await memberSkillConnection(credentials, settings)
+    if (!connection) return jsonResponse(401, { message: '请先连接 ANT 团队，或重新验证工作邮箱。' })
+    const upstream = await fetch(new URL('/api/me/plugins', connection.serviceUrl), {
+      headers: { authorization: `Bearer ${connection.token}`, accept: 'application/json' },
+      redirect: 'manual', signal: AbortSignal.timeout(10_000),
+    })
+    const text = await readLimitedBody(upstream)
+    if (text === null) return jsonResponse(502, { message: '插件目录响应过大。' })
+    if (!upstream.ok) return jsonResponse(upstream.status === 401 || upstream.status === 403 ? 401 : 502,
+      { message: '无法读取企业精选插件目录。' })
+    const plugins = JSON.parse(text)
+    if (!Array.isArray(plugins)) throw new Error('插件目录格式无效。')
+    return jsonResponse(200, { plugins })
+  } catch {
+    return jsonResponse(502, { message: '无法读取企业精选插件目录。' })
+  }
+}
+
+async function fetchAuthRequest(request, endpoint, credentials, settings) {
   if (request.method !== 'POST') return jsonResponse(405, { message: '只支持 POST 请求' })
   let body
   try { body = await request.json() } catch { return jsonResponse(400, { message: '请求格式无效' }) }
@@ -369,6 +417,33 @@ async function fetchAuthRequest(request, endpoint, credentials) {
     return jsonResponse(400, { message: '团队服务地址或邮箱验证信息无效' })
   }
 
+  let previousToken = null
+  try {
+    const existing = await credentials.resolve(MODEL_TOKEN_REF)
+    const current = existing?.value ? await readMemberConnection(credentials, settings) : null
+    const binding = modelServiceBinding(settings)
+    const record = existing?.value ? await credentials.readRecord(SERVICE_RECORD_KEY) : null
+    const pinnedUrl = record?.kind === 'grant' && typeof record.payload?.service_url === 'string'
+      ? normalizeServiceUrl(record.payload.service_url) : null
+    if (existing?.value && !pinnedUrl && !binding.configured) {
+      return jsonResponse(409, {
+        code: 'LEGACY_DEVICE_REVOKE_REQUIRED',
+        message: '旧 ANT 凭证没有可核实的团队服务地址。请先让原团队管理员撤销此设备，再仅清理本机并连接新团队。',
+      })
+    }
+    if ((existing?.value && pinnedUrl && pinnedUrl !== serviceUrl)
+      || (current && current.serviceUrl !== serviceUrl)
+      || (binding.configured && binding.serviceUrl !== serviceUrl)) {
+      return jsonResponse(409, {
+        code: 'ANT_CONNECTION_CLEANUP_REQUIRED',
+        message: '本机仍有旧团队的凭证或模型设置。请先让原团队管理员确认旧设备已撤销，再清理本机配置后连接。',
+      })
+    }
+    if (endpoint === 'dsh-connect' && current?.serviceUrl === serviceUrl) previousToken = existing.value
+  } catch {
+    return jsonResponse(500, { message: 'DSH 无法确认当前 ANT 凭证和服务地址。' })
+  }
+
   try {
     const upstream = await fetch(new URL(`/auth/${endpoint}`, serviceUrl), {
       method: 'POST',
@@ -389,17 +464,17 @@ async function fetchAuthRequest(request, endpoint, credentials) {
       if (typeof result?.token !== 'string' || !result.token.startsWith('antm_') || !Array.isArray(result.models)) {
         return jsonResponse(502, { message: 'ANT 连接响应格式无效' })
       }
-      try {
-        await pinServiceUrl(credentials, serviceUrl)
-      } catch {
-        return jsonResponse(500, { message: 'DSH 无法保存已连接的 ANT 服务地址' })
-      }
       try {
         const session = await updateModelSession(serviceUrl, result.token, 'heartbeat')
         if (!session.ok) return jsonResponse(502, { message: '无法激活 ANT 模型会话。' })
       } catch {
         return jsonResponse(502, { message: '无法连接 ANT 模型会话服务。' })
       }
+      try {
+        await pinServiceUrl(credentials, serviceUrl, result.token, previousToken)
+      } catch {
+        return jsonResponse(500, { message: 'DSH 无法保存已连接的 ANT 服务地址' })
+      }
     }
     return new Response(text, {
       status: upstream.status,
@@ -411,8 +486,6 @@ async function fetchAuthRequest(request, endpoint, credentials) {
 }
 
 export function apply(ctx) {
-  let skillRegistry
-  ctx.inject(['skills'], (skillCtx) => { skillRegistry = skillCtx.skills })
   ctx.inject(['connection', 'credentials', 'settings'], (connectionCtx) => {
     connectionCtx.effect(() => connectionCtx.connection.fetch.register({
       path: SERVICE_INFO_PATH,
@@ -434,16 +507,20 @@ export function apply(ctx) {
     }), 'ant-teams: authenticated Bundle release relay')
     connectionCtx.effect(() => connectionCtx.connection.fetch.register({
       path: SKILLS_PATH, methods: ['GET'], requestBody: 'buffered',
-      fetch: (request) => fetchMemberSkills(request, connectionCtx.credentials, connectionCtx.settings, skillRegistry),
+      fetch: (request) => fetchMemberSkills(request, connectionCtx.credentials, connectionCtx.settings),
     }), 'ant-teams: enterprise skill catalog')
     connectionCtx.effect(() => connectionCtx.connection.fetch.register({
       path: SKILL_INSTALL_PATH, methods: ['POST'], requestBody: 'buffered',
-      fetch: (request) => installMemberSkill(request, connectionCtx.credentials, connectionCtx.settings, skillRegistry),
+      fetch: (request) => installMemberSkill(request, connectionCtx.credentials, connectionCtx.settings),
     }), 'ant-teams: install approved skill into DSH')
     connectionCtx.effect(() => connectionCtx.connection.fetch.register({
       path: SKILL_UNINSTALL_PATH, methods: ['POST'], requestBody: 'buffered',
       fetch: (request) => uninstallMemberSkill(request),
     }), 'ant-teams: remove managed DSH skill')
+    connectionCtx.effect(() => connectionCtx.connection.fetch.register({
+      path: PLUGINS_PATH, methods: ['GET'], requestBody: 'buffered',
+      fetch: (request) => fetchMemberPlugins(request, connectionCtx.credentials, connectionCtx.settings),
+    }), 'ant-teams: enterprise plugin catalog')
     connectionCtx.effect(() => connectionCtx.connection.fetch.register({
       path: DISCONNECT_PATH,
       methods: ['POST'],
@@ -453,13 +530,13 @@ export function apply(ctx) {
       path: REQUEST_CODE_PATH,
       methods: ['POST'],
       requestBody: 'buffered',
-      fetch: (request) => fetchAuthRequest(request, 'request-code', connectionCtx.credentials),
+      fetch: (request) => fetchAuthRequest(request, 'request-code', connectionCtx.credentials, connectionCtx.settings),
     }), 'ant-teams: relay email verification code request')
     connectionCtx.effect(() => connectionCtx.connection.fetch.register({
       path: CONNECT_PATH,
       methods: ['POST'],
       requestBody: 'buffered',
-      fetch: (request) => fetchAuthRequest(request, 'dsh-connect', connectionCtx.credentials),
+      fetch: (request) => fetchAuthRequest(request, 'dsh-connect', connectionCtx.credentials, connectionCtx.settings),
     }), 'ant-teams: relay DSH account connection')
     connectionCtx.effect(() => {
       let stopped = false

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-wendao/ant",
-  "version": "0.3.12",
+  "version": "0.3.13",
   "description": "ANT (AI-native Teams) connects a DeepSeek Harness Desktop profile to team identity and approved models.",
   "type": "module",
   "scripts": {

package/skill-install.js

@@ -12,19 +12,6 @@ const MAX_PACKAGE_BYTES = 80 * 1024 * 1024
 const MAX_JSON_BYTES = 4 * 1024 * 1024
 const activeSkills = new Set()
 
-async function assertDiscovered(registry, root, name) {
-  if (typeof registry?.list !== 'function') throw new Error('DSH 技能服务不可用，无法确认安装结果。')
-  const expected = resolve(root, name, 'SKILL.md')
-  for (let attempt = 0; attempt < 6; attempt++) {
-    const entries = await registry.list()
-    if (Array.isArray(entries) && entries.some((entry) => entry.name === name
-      && typeof entry.path === 'string'
-      && (process.platform === 'win32' ? resolve(entry.path).toLowerCase() === expected.toLowerCase() : resolve(entry.path) === expected))) return
-    if (attempt < 5) await new Promise((done) => setTimeout(done, 300))
-  }
-  throw new Error('DSH 没有发现此技能；请检查 DSH 技能目录配置。')
-}
-
 const hash = (bytes) => createHash('sha256').update(bytes).digest('hex')
 const safeName = (name) => typeof name === 'string' && /^ant-[a-z0-9]+(?:-[a-z0-9]+)*$/u.test(name) && name.length <= 64
 const safePath = (name) => typeof name === 'string' && name.length > 0 && name.length <= 1024
@@ -164,7 +151,7 @@ async function fetchJson(url, token) {
   try { return JSON.parse(bytes.toString('utf8')) } catch { throw new Error('团队技能目录格式无效。') }
 }
 
-export async function listSkills(connection, registry) {
+export async function listSkills(connection) {
   const skills = await fetchJson(new URL('/api/me/skills', connection.serviceUrl), connection.token)
   if (!Array.isArray(skills)) throw new Error('团队技能目录格式无效。')
   const { root, conflicts } = await safeRoot()
@@ -180,10 +167,6 @@ export async function listSkills(connection, registry) {
         local_status = marker.content_sha256 === skill.content_sha256 ? 'installed' : 'update-available'
       }
     } catch { local_status = 'conflict' }
-    if (local_status === 'installed' || local_status === 'update-available') {
-      try { await assertDiscovered(registry, root, skill.dsh_name) }
-      catch { local_status = 'not-discovered' }
-    }
     return { ...skill, local_status }
   }))
 }
@@ -220,7 +203,7 @@ function contentDigest(files) {
   return digest.digest('hex')
 }
 
-export async function installSkill(connection, skillId, registry) {
+export async function installSkill(connection, skillId) {
   if (typeof skillId !== 'string' || !/^[0-9a-f-]{36}$/iu.test(skillId)) throw new Error('技能编号无效。')
   const manifest = await fetchJson(new URL(`/api/me/skills/${skillId}/files`, connection.serviceUrl), connection.token)
   validateManifest(manifest, skillId)
@@ -228,18 +211,17 @@ export async function installSkill(connection, skillId, registry) {
   if (conflicts.has(manifest.dsh_name)) throw new Error('本机技能备份已损坏；请联系管理员处理，ANT 不会覆盖。')
   if (activeSkills.has(manifest.dsh_name)) throw new Error('这个技能正在安装或卸载，请稍后重试。')
   activeSkills.add(manifest.dsh_name)
-  try { return await installValidatedSkill(connection, skillId, manifest, root, registry) }
+  try { return await installValidatedSkill(connection, skillId, manifest, root) }
   finally { activeSkills.delete(manifest.dsh_name) }
 }
 
-async function installValidatedSkill(connection, skillId, manifest, root, registry) {
+async function installValidatedSkill(connection, skillId, manifest, root) {
   const target = join(root, manifest.dsh_name)
   const oldMarker = await readManaged(root, manifest.dsh_name)
   if (oldMarker) {
     if (oldMarker.service_url !== connection.serviceUrl) throw new Error('同名技能属于另一个 ANT 服务，无法覆盖。')
     await verifyManagedTree(root, manifest.dsh_name, oldMarker)
     if (oldMarker.content_sha256 === manifest.content_sha256) {
-      await assertDiscovered(registry, root, manifest.dsh_name)
       return { status: 'installed', dsh_name: manifest.dsh_name }
     }
   }
@@ -268,8 +250,10 @@ async function installValidatedSkill(connection, skillId, manifest, root, regist
   const stagingStat = await isPresent(stagingRoot)
   if (stagingStat && (!stagingStat.isDirectory() || stagingStat.isSymbolicLink())) throw new Error('ANT 暂存目录不是普通目录。')
   await mkdir(stagingRoot, { recursive: true, mode: 0o700 })
-  const staging = join(stagingRoot, `new-${randomUUID()}`)
+  const stagingName = `new-${randomUUID()}`
+  const staging = join(stagingRoot, stagingName)
   const backup = join(stagingRoot, `old-${manifest.dsh_name}-${randomUUID()}`)
+  const managedFiles = manifest.files.map(({ path, sha256, executable }) => ({ path, sha256, executable }))
   await mkdir(staging, { mode: 0o700 })
   let backedUp = false
   let installedNew = false
@@ -283,29 +267,25 @@ async function installValidatedSkill(connection, skillId, manifest, root, regist
     await writeFile(join(staging, MARKER), JSON.stringify({
       dsh_name: manifest.dsh_name, skill_id: skillId, service_url: connection.serviceUrl,
       content_sha256: manifest.content_sha256,
-      files: manifest.files.map(({ path, sha256, executable }) => ({ path, sha256, executable })),
+      files: managedFiles,
     }), { flag: 'wx', mode: 0o600 })
+    await verifyManagedTree(stagingRoot, stagingName, { files: managedFiles })
     if (oldMarker) { await verifyManagedTree(root, manifest.dsh_name, oldMarker); await rename(target, backup); backedUp = true }
     else if (await isPresent(target)) throw new Error('同名技能已经存在，ANT 不会覆盖。')
     await rename(staging, target)
     installedNew = true
-    await assertDiscovered(registry, root, manifest.dsh_name)
     if (backedUp) await rm(backup, { recursive: true }).catch(() => {})
     return { status: oldMarker ? 'updated' : 'installed', dsh_name: manifest.dsh_name }
   } catch (error) {
     if (backedUp && await isPresent(backup)) {
       if (await isPresent(target)) {
-        await verifyManagedTree(root, manifest.dsh_name, {
-          dsh_name: manifest.dsh_name,
-          files: manifest.files.map(({ path, sha256, executable }) => ({ path, sha256, executable })),
-        }).then(() => rename(target, staging)).catch(() => {})
+        await verifyManagedTree(root, manifest.dsh_name, { files: managedFiles })
+          .then(() => rename(target, staging)).catch(() => {})
       }
       if (!(await isPresent(target))) await rename(backup, target).catch(() => {})
     } else if (installedNew) {
-      await verifyManagedTree(root, manifest.dsh_name, {
-        dsh_name: manifest.dsh_name,
-        files: manifest.files.map(({ path, sha256, executable }) => ({ path, sha256, executable })),
-      }).then(() => rm(target, { recursive: true })).catch(() => {})
+      await verifyManagedTree(root, manifest.dsh_name, { files: managedFiles })
+        .then(() => rm(target, { recursive: true })).catch(() => {})
     }
     throw error
   } finally { await rm(staging, { recursive: true, force: true }).catch(() => {}) }

package/tools/migrate-legacy.mjs

@@ -443,11 +443,13 @@ async function invokeDsh(cli, args, label, dshHome) {
   if (result.status !== 0) throw new Error(`${label}失败，退出码 ${String(result.status)}`)
 }
 
-async function rollbackWithCli(cli, profile, aliasSpec) {
+async function rollbackWithCli(cli, profile, aliasSpec, targetVersion) {
   let current = await readProfile(profile.dshHome)
-  if (current.state === 'both') {
-    await invokeDsh(cli, ['remove', PACKAGE_NAME], '移除未完成的 scoped Bundle', profile.dshHome)
+  if (current.state !== 'both' || current.aliasSpec !== aliasSpec
+    || !directSpecMatchesTarget(current.directSpec, targetVersion)) {
+    throw new Error('scoped ANT 已与迁移记录目标不同；工具不会删除现有版本。')
   }
+  await invokeDsh(cli, ['remove', PACKAGE_NAME], '移除未完成的 scoped Bundle', profile.dshHome)
   current = await readProfile(profile.dshHome)
   if (current.aliasSpec === undefined) {
     await invokeDsh(cli, ['add', `${ALIAS_NAME}@${aliasSpec}`], '恢复旧 ANT alias', profile.dshHome)
@@ -595,6 +597,9 @@ async function rollback(options) {
     if (profile.state !== 'both' || profile.aliasSpec !== record.originalAliasSpec) {
       throw new Error('当前状态无法无损取消迁移；该工具不会重建旧 alias 或覆盖现有依赖。优先继续 migrate --apply。')
     }
+    if (!directSpecMatchesTarget(profile.directSpec, record.targetVersion)) {
+      throw new Error('scoped ANT 已与迁移记录目标不同；工具不会删除现有版本。')
+    }
     if (!options.apply) {
       process.stdout.write(`预检完成。确认 DSH 已完全退出后运行：ant-migrate rollback --backup "${absolute}" --apply\n`)
       return
@@ -607,10 +612,11 @@ async function rollback(options) {
     showDshOutput(listResult)
     if (listResult.error || listResult.status !== 0) throw new Error('DSH Desktop CLI 未能读取 desktop profile。')
     const beforeRollback = await readProfile(dshHome)
-    if (beforeRollback.state !== 'both' || beforeRollback.aliasSpec !== record.originalAliasSpec) {
+    if (beforeRollback.state !== 'both' || beforeRollback.aliasSpec !== record.originalAliasSpec
+      || !directSpecMatchesTarget(beforeRollback.directSpec, record.targetVersion)) {
       throw new Error('执行回退前 profile 已变化；工具不会继续。')
     }
-    await rollbackWithCli(cli, { dshHome }, record.originalAliasSpec)
+    await rollbackWithCli(cli, { dshHome }, record.originalAliasSpec, record.targetVersion)
     record.status = 'rolled-back'
     record.phase = 'rolled-back'
     await saveBackupRecord(absolute, record)