@ai-wendao/ant 0.4.1 → 0.4.5

package/client.js

@@ -10,6 +10,17 @@ window.__ModuleLoader__.load({
     const ANT_BUNDLE_PACKAGE_NAME = '@ai-wendao/ant'
     const ANT_API_PROTOCOL_VERSIONS = [1]
     const PLUGIN_INSTALL_RECORD_PREFIX = 'ant-reviewed-plugin-install:'
+    const ANT_SETTINGS_TAB_STORAGE_KEY = 'ant-settings-tab'
+    const ANT_SETTINGS_TABS = [
+      ['connection', '团队连接'], ['models', '团队模型'], ['bot-chat', '机器人与聊天'],
+      ['capability', '能力授权'], ['local', '本机与任务'], ['updates', 'ANT 更新'],
+    ]
+    const loadAntSettingsTab = () => {
+      try {
+        const saved = localStorage.getItem(ANT_SETTINGS_TAB_STORAGE_KEY)
+        return ANT_SETTINGS_TABS.some(([id]) => id === saved) ? saved : 'connection'
+      } catch { return 'connection' }
+    }
     const fileCountFormat = new Intl.NumberFormat('zh-CN')
     const marketSkillCategories = {
       'ant-ppt-master': '演示', 'ant-frontend-slides': '演示', 'ant-slidev': '演示',
@@ -160,6 +171,7 @@ window.__ModuleLoader__.load({
     const inject = ['slots', 'layout', 'pluginNavigation', 'remote', 'remote.credentials', 'remote.settings', 'remote.pluginManager']
 
     async function readLocalJsonResponse(response) {
+      if (response.status === 204) return null
       const contentType = response.headers?.get?.('content-type') || ''
       const isJson = /^(?:application|text)\/(?:[a-z0-9!#$&^_.+-]+\+)?json(?:\s*;|$)/iu.test(contentType.trim())
       if (contentType && !isJson) {
@@ -233,6 +245,7 @@ window.__ModuleLoader__.load({
     }
 
     function TeamServiceConfig({ remote, openInstalledPlugin }) {
+      const [activeTab, setActiveTab] = useState(loadAntSettingsTab)
       const [serviceUrl, setServiceUrl] = useState(loadServiceUrl)
       const [draft, setDraft] = useState(serviceUrl)
       const [binding, setBinding] = useState({ state: 'checking', url: null })
@@ -240,7 +253,24 @@ window.__ModuleLoader__.load({
       const [message, setMessage] = useState('')
       const [pluginAlerts, setPluginAlerts] = useState([])
       const [delegationRevision, setDelegationRevision] = useState(0)
-      const [legacyOpen, setLegacyOpen] = useState(false)
+      const [updateSummary, setUpdateSummary] = useState(null)
+      const selectSettingsTab = (tab) => {
+        setActiveTab(tab)
+        try { localStorage.setItem(ANT_SETTINGS_TAB_STORAGE_KEY, tab) } catch {}
+      }
+      const moveSettingsTabFocus = (event, index) => {
+        const key = event.key
+        if (!['ArrowLeft', 'ArrowRight', 'Home', 'End'].includes(key)) return
+        event.preventDefault()
+        const step = key === 'ArrowLeft' ? -1 : key === 'ArrowRight' ? 1 : 0
+        const next = key === 'Home' ? 0 : key === 'End' ? ANT_SETTINGS_TABS.length - 1
+          : (index + step + ANT_SETTINGS_TABS.length) % ANT_SETTINGS_TABS.length
+        const [tab] = ANT_SETTINGS_TABS[next]
+        selectSettingsTab(tab)
+        event.currentTarget.parentElement?.querySelectorAll('[role="tab"]')?.[next]?.focus()
+      }
+      const updateNeedsAttention = ['available', 'artifact-missing', 'revoked', 'migration-required',
+        'unknown', 'failed', 'installing', 'done'].includes(updateSummary?.state)
       useEffect(() => {
         let disposed = false
         const revision = bindingRevision.current
@@ -312,78 +342,114 @@ window.__ModuleLoader__.load({
         }
       }
       const link = binding.state === 'ready' ? consoleUrl(binding.url || serviceUrl) : null
+      const bindingSummary = binding.state === 'checking' ? '正在确认这台 DSH 的团队连接…'
+        : binding.state === 'error' ? '暂时无法确认团队连接状态'
+          : binding.state === 'unverified' ? '本机有 ANT 凭证，但设备归属待核对'
+            : binding.url ? `团队服务已连接 · ${new URL(binding.url).host}` : '尚未连接团队服务'
+      const bindingReadyForSummary = binding.state === 'ready' && Boolean(binding.url)
       const onConnectionChange = (url) => {
         bindingRevision.current += 1
         setBinding({ state: 'ready', url: url || null })
+        setDelegationRevision((value) => value + 1)
         if (url) {
           setServiceUrl(url)
           setDraft(url)
           try { localStorage.setItem(SERVICE_URL_STORAGE_KEY, url) } catch {}
         }
       }
-      return h('section', { style: { display: 'grid', gap: 16, width: '100%', maxWidth: 1120 } },
-        h('p', { style: mutedTextStyle }, '连接团队服务后，即可同步获准模型并使用团队协作。'),
-        h('section', { style: panelStyle },
-          h('div', null,
-            h('h3', { style: { margin: 0, fontSize: 16, fontWeight: 650 } }, '团队服务'),
-            h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '由团队管理员提供服务地址；管理员可在控制台管理成员、模型和协作设置。')),
-          h('form', { onSubmit: save, style: { display: 'grid', gridTemplateColumns: binding.url ? '1fr' : 'minmax(0, 1fr) auto', alignItems: 'end', gap: 10 } },
+      const teamServicePanel = h('section', { style: { ...panelStyle, display: activeTab === 'connection' ? 'grid' : 'none' } },
+        h('div', null,
+          h('h3', { style: { margin: 0, fontSize: 16, fontWeight: 650 } }, '团队服务'),
+          h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '由团队管理员提供服务地址；管理员可在控制台管理成员、模型和协作设置。')),
+        h('form', { onSubmit: save, style: { display: 'grid', gridTemplateColumns: binding.url ? '1fr' : 'minmax(0, 1fr) auto', alignItems: 'end', gap: 10 } },
           h('label', { htmlFor: 'ant-team-service-url', style: { gridColumn: '1 / -1', fontSize: 13, fontWeight: 550 } }, binding.url ? '当前连接的团队服务地址' : '服务地址'),
-          h('input', {
-            id: 'ant-team-service-url',
-            type: 'url',
-            required: true,
-            value: binding.url || draft,
-            readOnly: binding.state !== 'ready' || Boolean(binding.url),
-            placeholder: 'https://ant.example.com',
-            onChange: (event) => { if (binding.state === 'ready' && !binding.url) setDraft(event.target.value) },
-            style: inputStyle,
-          }),
+          h('input', { id: 'ant-team-service-url', type: 'url', required: true, value: binding.url || draft,
+            readOnly: binding.state !== 'ready' || Boolean(binding.url), placeholder: 'https://ant.example.com',
+            onChange: (event) => { if (binding.state === 'ready' && !binding.url) setDraft(event.target.value) }, style: inputStyle }),
           binding.url ? null : h('button', { type: 'submit', disabled: binding.state !== 'ready', style: primaryButtonStyle }, '保存地址')),
-          binding.url ? h('p', { style: mutedTextStyle }, '若要切换团队，请先在下方断开当前设备，再填写新地址并验证邮箱。') : null,
-          binding.state === 'checking' ? h('p', { role: 'status', style: mutedTextStyle }, '正在核对这台 DSH 绑定的团队…') : null,
-          binding.state === 'unverified' ? h('p', { role: 'status', style: mutedTextStyle }, '本机仍有 ANT 凭证，但无法核对所属团队。请联系原团队管理员核查并撤销旧设备；确认后可在下方断开或仅清理本机。') : null,
-          binding.state === 'error' ? h('p', { role: 'status', style: mutedTextStyle }, '暂时无法核对这台 DSH 的团队绑定，请重新打开 ANT 或联系管理员。') : null,
-          h('div', { style: { display: 'flex', flexWrap: 'wrap', alignItems: 'center', gap: 12 } },
-            message ? h('p', { role: 'status', style: mutedTextStyle }, message) : null,
-            link ? h('a', { href: link, target: '_blank', rel: 'noopener noreferrer', style: { color: 'var(--dsw-alias-link)', fontSize: 13 } }, '打开团队管理 ↗') : null)),
-        pluginAlerts.length ? h('section', { role: 'alert', style: { ...panelStyle, borderColor: 'var(--dsw-alias-label-danger, #d44)' } },
+        binding.url ? h('p', { style: mutedTextStyle }, '若要切换团队，请先在下方断开当前设备，再填写新地址并验证邮箱。') : null,
+        binding.state === 'checking' ? h('p', { role: 'status', style: mutedTextStyle }, '正在核对这台 DSH 绑定的团队…') : null,
+        binding.state === 'unverified' ? h('p', { role: 'status', style: mutedTextStyle }, '本机仍有 ANT 凭证，但无法核对所属团队。请联系原团队管理员核查并撤销旧设备；确认后可在下方断开或仅清理本机。') : null,
+        binding.state === 'error' ? h('p', { role: 'status', style: mutedTextStyle }, '暂时无法核对这台 DSH 的团队绑定，请重新打开 ANT 或联系管理员。') : null,
+        h('div', { style: { display: 'flex', flexWrap: 'wrap', alignItems: 'center', gap: 12 } },
+          message ? h('p', { role: 'status', style: mutedTextStyle }, message) : null,
+          link ? h('a', { href: link, target: '_blank', rel: 'noopener noreferrer', style: { color: 'var(--dsw-alias-link)', fontSize: 13 } }, '打开团队管理 ↗') : null))
+      return h('section', { style: { display: 'grid', gap: 16, width: '100%', maxWidth: 1120 } },
+        h('p', { style: mutedTextStyle }, '连接团队服务后，即可同步获准模型并使用团队协作。'),
+        h('div', { role: 'status', style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between',
+          flexWrap: 'wrap', gap: 10, padding: '10px 12px', borderRadius: 8,
+          backgroundColor: bindingReadyForSummary ? 'var(--dsw-alias-state-success-tertiary)' : 'var(--dsw-alias-bg-layer-2)' } },
+        h('span', null, bindingSummary),
+        !bindingReadyForSummary ? h('button', { type: 'button', onClick: () => selectSettingsTab('connection'),
+          style: secondaryButtonStyle }, binding.state === 'error' ? '检查连接' : '查看连接设置') : null),
+        h('div', { style: { position: 'sticky', top: 0, zIndex: 8, display: 'grid', gap: 8, padding: '6px 0',
+          backgroundColor: 'var(--dsw-alias-bg-module-platform)' } },
+        pluginAlerts.length ? h('section', { role: 'alert', style: { ...panelStyle,
+          borderColor: 'var(--dsw-alias-label-danger, #d44)', maxHeight: '28vh', overflowY: 'auto' } },
           h('h3', { style: { margin: 0, fontSize: 16 } }, '已安装插件存在安全撤回公告'),
           ...pluginAlerts.map((plugin) => h('p', { key: plugin.id, style: mutedTextStyle },
             `${plugin.title} ${plugin.version}${plugin.versionUnknown ? '（本机版本暂无法读取，请核对是否受影响）' : ''}：${plugin.withdrawal_reason}`)),
           ...pluginAlerts.map((plugin) => h('button', { key: `${plugin.id}-open`, type: 'button',
             onClick: () => openInstalledPlugin(plugin.package_name), style: secondaryButtonStyle }, `在 DSH 中查看 ${plugin.title}`))) : null,
-        h(ModelSyncFooter, { remote, serviceUrl, bindingReady: binding.state === 'ready',
-          onServiceUrlChange: setServiceUrl, onConnectionChange }),
-        h(DelegationCards, { remote, revision: delegationRevision,
-          openImSettings: () => openInstalledPlugin('@xmanrui/dsh-im'),
-          openPrReview: () => { setLegacyOpen(true)
-            window.document?.getElementById('ant-pr-review-settings')?.scrollIntoView({ behavior: 'smooth', block: 'start' }) },
-          onGrantChanged: () => setDelegationRevision((value) => value + 1) }),
-        h(DelegationSettings, { remote, revision: delegationRevision, open: legacyOpen, onOpenChange: setLegacyOpen,
-          onChanged: () => setDelegationRevision((value) => value + 1) }))
+        updateNeedsAttention ? h('section', { role: 'status', 'aria-live': 'polite', style: {
+          ...panelStyle, display: 'flex', alignItems: 'center', justifyContent: 'space-between', flexWrap: 'wrap',
+          gap: 12, padding: 12, borderColor: updateSummary.state === 'revoked'
+            ? 'var(--dsw-alias-state-error-primary)' : 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-border-l2))',
+          backgroundColor: updateSummary.state === 'revoked'
+            ? 'var(--dsw-alias-state-error-secondary, var(--dsw-alias-bg-module-platform))'
+            : 'var(--dsw-alias-state-warning-secondary, var(--dsw-alias-bg-module-platform))',
+        } },
+        h('div', { style: { display: 'grid', gap: 3, flex: '1 1 300px' } },
+          h('strong', null, updateSummary.state === 'available'
+            ? `有新版 ANT：${updateSummary.currentVersion || '当前版本未知'} → ${updateSummary.version}`
+            : updateSummary.state === 'done' ? `ANT ${updateSummary.version} 已安装，需重启 DSH`
+              : updateSummary.state === 'revoked' ? '当前 ANT 安装包已撤回' : 'ANT 更新需要处理'),
+          h('span', { style: mutedTextStyle }, updateSummary.message || '打开 ANT 更新查看处理方式。')),
+        h('button', { type: 'button', onClick: () => selectSettingsTab('updates'), style: primaryButtonStyle },
+          updateSummary.state === 'available' ? '查看并更新' : '查看处理方式')) : null,
+        h('nav', { role: 'tablist', 'aria-label': 'ANT 插件设置', style: {
+          display: 'flex', gap: 4, overflowX: 'auto', borderBottom: '1px solid var(--dsw-alias-border-l2)',
+        } },
+        ...ANT_SETTINGS_TABS.map(([tab, label], index) => h('button', { key: tab, id: `ant-settings-tab-${tab}`,
+          type: 'button', role: 'tab', tabIndex: activeTab === tab ? 0 : -1,
+          'aria-controls': 'ant-settings-content', 'aria-selected': String(activeTab === tab),
+          onKeyDown: (event) => moveSettingsTabFocus(event, index), onClick: () => selectSettingsTab(tab),
+          style: { ...secondaryButtonStyle, minHeight: 38, padding: '7px 12px', whiteSpace: 'nowrap',
+            borderRadius: '8px 8px 0 0', color: activeTab === tab ? 'var(--dsw-alias-state-business-primary)' : secondaryButtonStyle.color,
+            borderBottom: activeTab === tab ? '2px solid var(--dsw-alias-state-business-primary)' : secondaryButtonStyle.border,
+            backgroundColor: activeTab === tab ? 'var(--dsw-alias-bg-layer-2)' : secondaryButtonStyle.backgroundColor,
+          } }, tab === 'updates' && updateNeedsAttention ? `${label} · ${updateSummary.state === 'available' ? '有新版' : '需处理'}` : label)))),
+        h('div', { id: 'ant-settings-content', role: 'tabpanel', 'aria-labelledby': `ant-settings-tab-${activeTab}` },
+          teamServicePanel,
+          h(ModelSyncFooter, { remote, serviceUrl, bindingReady: binding.state === 'ready', activeTab,
+            onServiceUrlChange: setServiceUrl, onConnectionChange,
+            onUpdateStateChange: setUpdateSummary, onSelectTab: selectSettingsTab }),
+          h(DelegationCards, { remote, revision: delegationRevision,
+            activeTab, onSelectTab: selectSettingsTab,
+            openImSettings: () => openInstalledPlugin('@xmanrui/dsh-im')})))
     }
 
-    function DelegationCards({ remote, revision, openImSettings, openPrReview, onGrantChanged }) {
+    function DelegationCards({ remote, revision, activeTab, onSelectTab, openImSettings }) {
       const [bots, setBots] = useState([])
       const [enrolled, setEnrolled] = useState([])
       const [groups, setGroups] = useState([])
       const [cards, setCards] = useState([])
-      const [grants, setGrants] = useState([])
       const [tasks, setTasks] = useState([])
       const [executors, setExecutors] = useState([])
       const [defaults, setDefaults] = useState(null)
       const [localConcurrency, setLocalConcurrency] = useState(null)
-      const [prReviewExecutor, setPrReviewExecutor] = useState('dsh')
+      const [repositoryCacheLimitGib, setRepositoryCacheLimitGib] = useState(10)
       const [botId, setBotId] = useState('')
       const [trustedOrigin, setTrustedOrigin] = useState('')
       const [bindingCode, setBindingCode] = useState('')
       const [conversationKind, setConversationKind] = useState('dm')
       const [groupId, setGroupId] = useState('')
+      const [chatGroupId, setChatGroupId] = useState('')
       const [title, setTitle] = useState('')
       const [intent, setIntent] = useState('')
       const [examples, setExamples] = useState('')
       const [taskPrompt, setTaskPrompt] = useState('')
+      const [runner, setRunner] = useState('dsh')
       const [parameters, setParameters] = useState([])
       const [giteaToken, setGiteaToken] = useState('')
       const [tokenConfigured, setTokenConfigured] = useState(false)
@@ -393,48 +459,106 @@ window.__ModuleLoader__.load({
       const [busy, setBusy] = useState(false)
       const [loading, setLoading] = useState(true)
       const [botLoadError, setBotLoadError] = useState(false)
+      const [loadFailures, setLoadFailures] = useState([])
       const [createOpen, setCreateOpen] = useState(false)
       const [message, setMessage] = useState('')
       const load = async () => {
         setLoading(true)
+        setMessage('')
         try {
-          const paths = ['bots', 'enrolled-bots', 'groups', 'cards', 'settings', 'executors', 'local-settings', 'status', 'grants']
-          const responses = await Promise.all(paths.map((path) => fetch(`/api/ant-teams/delegation/${path}`, { cache: 'no-store' })))
-          const data = await Promise.all(responses.map(readLocalJsonResponse))
-          if (!responses[3].ok) throw new Error(data[3]?.message || '暂时无法读取任务卡。')
-          setBots(responses[0].ok ? data[0].bots || [] : [])
-          setBotLoadError(!responses[0].ok)
-          setEnrolled(responses[1].ok && Array.isArray(data[1]) ? data[1] : [])
-          setGroups(responses[2].ok && Array.isArray(data[2]) ? data[2] : [])
-          setCards(Array.isArray(data[3]) ? data[3] : [])
-          setDefaults(responses[4].ok ? data[4] : null)
-          setExecutors(responses[5].ok && Array.isArray(data[5]) ? data[5] : [])
-          setLocalConcurrency(responses[6].ok ? data[6].max_concurrency : null)
-          setPrReviewExecutor(responses[6].ok ? data[6].pr_review_executor || 'dsh' : 'dsh')
-          setTasks(responses[7].ok && Array.isArray(data[7].items) ? data[7].items : [])
-          setGrants(responses[8].ok && Array.isArray(data[8]) ? data[8] : [])
+          const paths = ['bots', 'enrolled-bots', 'groups', 'cards', 'settings', 'executors', 'local-settings', 'status']
+          const responses = await Promise.all(paths.map((path) =>
+            fetch(`/api/ant-teams/delegation/${path}`, { cache: 'no-store',
+              ...(path === 'enrolled-bots' ? { headers: { 'x-ant-include-unbound': 'true' } } : {}) })
+              .catch(() => null)))
+          const data = await Promise.all(responses.map((response) => response
+            ? readLocalJsonResponse(response).catch(() => null) : null))
+          const valid = [
+            (value) => Array.isArray(value?.bots),
+            Array.isArray, Array.isArray, Array.isArray,
+            (value) => value && typeof value === 'object' && !Array.isArray(value),
+            Array.isArray,
+            (value) => value && typeof value === 'object' && !Array.isArray(value),
+            (value) => Array.isArray(value?.items),
+          ]
+          const readable = responses.map((response, index) => Boolean(response?.ok && valid[index](data[index])))
+          setLoadFailures(paths.filter((path, index) => !readable[index]))
+          setBots(readable[0] ? data[0].bots : [])
+          setBotLoadError(!readable[0])
+          setEnrolled(readable[1] ? data[1] : [])
+          setGroups(readable[2] ? data[2] : [])
+          setCards(readable[3] ? data[3] : [])
+          setDefaults(readable[4] ? data[4] : null)
+          setExecutors(readable[5] ? data[5] : [])
+          setLocalConcurrency(readable[6] ? data[6].max_concurrency : null)
+          setRepositoryCacheLimitGib(readable[6] ? data[6].repository_cache_limit_gib ?? 10 : 10)
+          setTasks(readable[7] ? data[7].items : [])
           let credential = null
           try { credential = await remote?.credentials?.describe?.(['ANT_GITEA_API_TOKEN']) } catch {}
           setTokenConfigured(Boolean(credential?.ok && credential.value?.ANT_GITEA_API_TOKEN?.configured))
         } finally { setLoading(false) }
       }
       useEffect(() => { void load().catch((error) => setMessage(error.message)) }, [remote, revision])
+      useEffect(() => { setMessage('') }, [activeTab])
       const selectedBot = bots.find((bot) => bot.bot_id === botId)
       const botConnected = Boolean(selectedBot?.available && selectedBot?.connected)
       const selectedEnrollment = enrolled.find((bot) => bot.bot_fingerprint === selectedBot?.fingerprint)
+      const selectedEnrollmentBound = selectedEnrollment?.device_bound_to_current === true
       const availableGroups = groups.filter((group) => group.bot_fingerprint === selectedBot?.fingerprint)
+      const selectedChatGroup = availableGroups.find((group) => group.group_id === chatGroupId)
       const activeCards = cards.filter((card) => !card.revoked_at && card.expires_at * 1000 > Date.now())
-      const activeGrants = grants.filter((grant) => !grant.revoked_at && grant.expires_at * 1000 > Date.now())
+      const selectedGroupHasTasks = Boolean(selectedBot && chatGroupId && (
+        activeCards.some((card) => card.bot_fingerprint === selectedBot.fingerprint
+          && card.conversation_kind === 'group' && card.conversation_id === chatGroupId)))
       const connectedBots = bots.filter((bot) => bot.available && bot.connected)
-      const enrolledCount = enrolled.filter((item) => connectedBots.some((bot) => bot.fingerprint === item.bot_fingerprint)).length
+      const authorizationLoadError = loadFailures.includes('cards')
+      const enrollmentLoadError = loadFailures.includes('enrolled-bots')
+      const enrolledCount = enrolled.filter((item) => item.device_bound_to_current
+        && connectedBots.some((bot) => bot.fingerprint === item.bot_fingerprint)).length
       const selectedTaskCount = activeCards.filter((card) => card.bot_fingerprint === selectedBot?.fingerprint).length
-        + activeGrants.filter((grant) => grant.bot_fingerprint === selectedBot?.fingerprint).length
-      const cardBlockReason = !botConnected || !selectedEnrollment ? '先在上方连接并启用机器人。'
-        : conversationKind === 'group' && !groupId ? '请先在“更多设置”中选择目标群；若列表为空，让群成员先 @机器人，再刷新群列表。'
-          : senderScope === 'allowlist' && !senderIds.trim() ? '请在“更多设置”中填写可请求的成员 ID。'
-            : parameters.some((rule) => rule.kind === 'gitea_pr') && !tokenConfigured ? '请先在“更多设置”中保存本机 Gitea 只读令牌。'
+      const selectedRunnerNeedsPr = ['codex', 'claude-code'].includes(runner)
+      const codexAvailable = executors.some((item) => item.id === 'codex-readonly' && item.available)
+      const claudeCodeAvailable = executors.some((item) => item.id === 'claude-code' && item.available)
+      const nativePrUnavailableReason = executors.find((item) => item.reason)?.reason || null
+      const requesterSummary = senderScope === 'allowlist'
+        ? `仅指定成员：${senderIds.trim() || '尚未填写成员 ID'}`
+        : conversationKind === 'group' ? `群 ${groupId || '尚未选择'} 的所有成员` : '任何能私聊此机器人的人'
+      const resultRouteSummary = conversationKind === 'group' ? '回复到原群（群内可见）' : '回复到发起任务的私聊'
+      const cardBlockReason = enrollmentLoadError ? '暂时无法核对机器人是否已启用协作，请刷新状态后再试。'
+        : !botConnected || !selectedEnrollmentBound ? '先在上方把机器人绑定到这台 DSH。'
+        : conversationKind === 'group' && loadFailures.includes('groups') ? '暂时无法核对目标群，请刷新状态后再试。'
+        : conversationKind === 'group' && !groupId ? '请在“参数与授权范围”中选择目标群；若列表为空，让群成员先 @机器人，再刷新群列表。'
+          : senderScope === 'allowlist' && !senderIds.trim() ? '请在“参数与授权范围”中填写可请求成员的 IM ID。'
+            : parameters.some((rule) => rule.kind === 'gitea_pr') && !tokenConfigured ? '请先在“本机与任务”中保存本机 Gitea 只读令牌。'
+              : parameters.some((rule) => rule.kind === 'gitea_pr') && !selectedEnrollment?.gitea_origin
+                ? '请先在“机器人与聊天”中登记这个机器人的可信 Gitea 地址。'
+              : parameters.some((rule) => rule.kind === 'gitea_pr')
+                && normalizeServiceUrl(trustedOrigin) !== selectedEnrollment?.gitea_origin
+                ? '请先保存机器人级可信 Gitea 地址；PR 参数会自动使用这个地址。'
+              : selectedRunnerNeedsPr && (parameters.length !== 1 || parameters[0].kind !== 'gitea_pr')
+                ? 'Codex 和 Claude Code 目前只支持单个 Gitea PR 审查任务。'
+                : selectedRunnerNeedsPr && !parameters[0].required
+                  ? '本机代码审查的 Gitea PR 编号必须设为必填。'
+                : runner === 'codex' && !codexAvailable
+                  ? '这台 DSH 尚未找到可用的 Codex CLI，请先安装或检查 DSH 的 PATH。'
+                : runner === 'claude-code' && !claudeCodeAvailable
+                  ? '这台 DSH 尚未注册 Claude Code 子代理，请先在 DSH 中安装并启用它。'
               : ''
+      const loadNames = { bots: '机器人', 'enrolled-bots': '协作启用状态', groups: '群聊列表',
+        cards: '任务授权', settings: '团队默认值', executors: '本机执行器',
+        'local-settings': '本机设置', status: '最近任务' }
       const updateParameter = (index, patch) => setParameters((current) => current.map((rule, i) => i === index ? { ...rule, ...patch } : rule))
+      const preparePrExample = () => {
+        setTitle('审查 Gitea PR 差异')
+        setIntent('同事希望查看指定 Gitea PR 的代码差异并获得审查意见。')
+        setExamples('请帮我审查 123 号 PR\n看看刚才提到的 PR 有什么风险')
+        setTaskPrompt('结合已核验 PR 的完整代码快照和差异，给出可定位的问题；没有足够上下文时说明局限，不修改代码。')
+        setParameters([{ name: 'pr_number', kind: 'gitea_pr', required: true,
+          description: '要审查的 PR 编号', min: '1', max: '', choices: '',
+          gitea_origin: selectedEnrollment?.gitea_origin || trustedOrigin || '', repository: '' }])
+        setRunner(codexAvailable ? 'codex' : claudeCodeAvailable ? 'claude-code' : 'dsh')
+        setCreateOpen(true)
+      }
       const saveGiteaToken = async () => {
         if (!giteaToken.trim()) return
         setBusy(true)
@@ -448,24 +572,32 @@ window.__ModuleLoader__.load({
       }
       const enrollBot = async () => {
         if (!selectedBot) return
+        const requestedOrigin = trustedOrigin
+        const origin = requestedOrigin?.trim() ? normalizeServiceUrl(requestedOrigin) : ''
+        if (requestedOrigin?.trim() && !origin) {
+          setMessage('请填写有效的 HTTPS Gitea 地址后再启用协作。')
+          return
+        }
         setBusy(true)
         try {
           const response = await fetch('/api/ant-teams/delegation/enrolled-bots', {
             method: 'POST', headers: { 'content-type': 'application/json' },
-            body: JSON.stringify({ bot_id: selectedBot.bot_id, bot_fingerprint: selectedBot.fingerprint }),
+            body: JSON.stringify({ bot_id: selectedBot.bot_id, bot_fingerprint: selectedBot.fingerprint,
+              gitea_origin: origin }),
           })
           const result = await readLocalJsonResponse(response)
           if (!response.ok) throw new Error(result.message || '协作机器人启用失败。')
           await load()
-          setMessage('协作机器人已启用。你可以创建任务卡；私聊时也能正常聊天。')
+          if (origin) setTrustedOrigin(origin)
+          setMessage('协作机器人已启用。你可以开放能力；私聊时也能正常聊天。')
         } catch (error) { setMessage(error.message) }
         finally { setBusy(false) }
       }
       const saveTrustedOrigin = async () => {
-        if (!selectedBot || !selectedEnrollment) return
+        if (!selectedBot || !selectedEnrollmentBound) return
         const origin = normalizeServiceUrl(trustedOrigin)
         if (!origin) { setMessage('请填写有效的 HTTPS Gitea 地址。'); return }
-        if (!window.confirm(`将这个机器人的可信 Gitea 地址设为 ${origin}？不匹配的旧版 PR 授权会被撤销，已有任务卡的 PR 参数也需重新核对。`)) return
+        if (!window.confirm(`将这个机器人的可信 Gitea 地址设为 ${origin}？已开放能力中的 PR 参数需要重新核对。`)) return
         setBusy(true)
         try {
           const response = await fetch('/api/ant-teams/delegation/enrolled-bots', {
@@ -480,7 +612,7 @@ window.__ModuleLoader__.load({
         finally { setBusy(false) }
       }
       const issueBindingCode = async () => {
-        if (!selectedBot || !selectedEnrollment) return
+        if (!selectedBot || !selectedEnrollmentBound) return
         setBusy(true)
         try {
           const response = await fetch('/api/ant-teams/delegation/owner-challenge', {
@@ -494,53 +626,62 @@ window.__ModuleLoader__.load({
         } catch (error) { setMessage(error.message) }
         finally { setBusy(false) }
       }
-      const saveConcurrency = async (event) => {
-        event.preventDefault()
+      const saveGroupChat = async () => {
+        if (!selectedBot || !selectedEnrollmentBound || !chatGroupId.trim()) return
+        const enabled = !selectedChatGroup?.chat_enabled
+        if (!enabled && selectedGroupHasTasks) {
+          setMessage('这个群还有开放能力。请先停止这些能力，再关闭群聊。')
+          return
+        }
+        if (!window.confirm(enabled
+          ? selectedGroupHasTasks
+            ? '这个群当前因任务授权可以聊天。要在任务到期后仍允许普通聊天吗？聊天会使用团队模型额度。'
+            : '允许这个群与机器人自然聊天？群成员仍不能执行未开放的能力，聊天会使用团队模型额度。'
+          : '关闭这个群的普通聊天？已有能力不会自动撤销。')) return
         setBusy(true)
         try {
-          const response = await fetch('/api/ant-teams/delegation/local-settings', {
+          const response = await fetch('/api/ant-teams/delegation/groups', {
             method: 'PUT', headers: { 'content-type': 'application/json' },
-            body: JSON.stringify({ max_concurrency: localConcurrency === '' ? null : Number(localConcurrency) }),
+            body: JSON.stringify({ bot_id: selectedBot.bot_id,
+              bot_fingerprint: selectedBot.fingerprint, group_id: chatGroupId.trim(), enabled }),
           })
-          const result = await readLocalJsonResponse(response)
-          if (!response.ok) throw new Error(result.message || '并发设置保存失败。')
-          setLocalConcurrency(result.max_concurrency)
-          setMessage('本机并发设置已保存，稍后会应用于新任务。')
+          if (!response.ok) {
+            const result = await readLocalJsonResponse(response)
+            throw new Error(result.message || '群聊设置保存失败。')
+          }
+          await load()
+          setMessage(enabled ? '这个群现在可以与机器人聊天；可执行能力仍需逐项开放。' : '已关闭这个群的普通聊天。')
         } catch (error) { setMessage(error.message) }
         finally { setBusy(false) }
       }
-      const savePrReviewExecutor = async (event) => {
+      const saveLocalProcessingSettings = async (event) => {
         event.preventDefault()
-        if (prReviewExecutor !== 'dsh') {
-          if (!executors.some((item) => item.id === prReviewExecutor && item.available)) {
-            setMessage('所选执行器尚未在这台 DSH 启用。'); return
-          }
-          if (!window.confirm(`启用 ${prReviewExecutor} 的指定 PR 差异审查试用？这会应用于本机所有现有的指定 PR 授权。同事只能请求已授权的 PR，ANT 会固定审查内容和临时目录；但执行器仍沿用你本机的权限，可能读取或修改其他本机文件。结果会回复原私聊或群。`)) return
-        }
         setBusy(true)
         try {
           const response = await fetch('/api/ant-teams/delegation/local-settings', {
             method: 'PUT', headers: { 'content-type': 'application/json' },
-            body: JSON.stringify({ pr_review_executor: prReviewExecutor,
-              accept_native_permissions: prReviewExecutor !== 'dsh' }),
+            body: JSON.stringify({
+              max_concurrency: localConcurrency === '' ? null : Number(localConcurrency),
+              repository_cache_limit_gib: Number(repositoryCacheLimitGib),
+            }),
           })
           const result = await readLocalJsonResponse(response)
-          if (!response.ok) throw new Error(result.message || '审查执行方保存失败。')
-          setPrReviewExecutor(result.pr_review_executor)
-          setMessage(result.pr_review_executor === 'dsh' ? '已关闭本机执行器试用；新请求继续由受限 DSH 审查。'
-            : `已启用 ${result.pr_review_executor} 的指定 PR 差异审查试用；请先用你自己的机器人验证。`)
+          if (!response.ok) throw new Error(result.message || '本机处理设置保存失败。')
+          setLocalConcurrency(result.max_concurrency)
+          setRepositoryCacheLimitGib(result.repository_cache_limit_gib)
+          setMessage('本机并发与仓库缓存设置已保存。')
         } catch (error) { setMessage(error.message) }
         finally { setBusy(false) }
       }
       const createCard = async (event) => {
         event.preventDefault()
-        if (!selectedBot || !botConnected || !selectedEnrollment) { setMessage('请先连接并启用选中的协作机器人。'); return }
+        if (!selectedBot || !botConnected || !selectedEnrollmentBound) { setMessage('请先在这台 DSH 绑定选中的协作机器人。'); return }
         if (!title.trim() || !intent.trim() || !taskPrompt.trim()) {
-          setMessage('请填写任务名称、什么请求属于这项任务，以及处理要求。'); return
+          setMessage('请填写能力名称、适用请求说明和处理要求。'); return
         }
         const bytes = (value) => new TextEncoder().encode(value).length
         if (bytes(title.trim()) > 100 || bytes(intent.trim()) > 1000 || bytes(taskPrompt.trim()) > 4000) {
-          setMessage('任务名称、请求说明或处理要求过长，请缩短后再提交。'); return
+          setMessage('能力名称、请求说明或处理要求过长，请缩短后再提交。'); return
         }
         const exampleLines = examples.split('\n').map((item) => item.trim()).filter(Boolean)
         if (exampleLines.length > 8 || exampleLines.some((item) => bytes(item) > 500)) {
@@ -551,7 +692,7 @@ window.__ModuleLoader__.load({
           required: rule.required, min: rule.min === '' ? null : Number(rule.min),
           max: rule.max === '' ? null : Number(rule.max),
           choices: rule.kind === 'choice' ? rule.choices.split(/[，,\n]/u).map((item) => item.trim()).filter(Boolean) : null,
-          gitea_origin: rule.kind === 'gitea_pr' ? normalizeServiceUrl(rule.gitea_origin) : null,
+          gitea_origin: rule.kind === 'gitea_pr' ? selectedEnrollment?.gitea_origin || null : null,
           repository: rule.kind === 'gitea_pr' ? rule.repository.trim().toLowerCase() : null }))
         if (normalized.some((rule) => !/^[A-Za-z][A-Za-z0-9_]{0,31}$/u.test(rule.name))) {
           setMessage('参数键请用英文字母开头，只能包含英文字母、数字和下划线；给同事看的中文问题可填在“参数说明”。'); return
@@ -586,50 +727,57 @@ window.__ModuleLoader__.load({
         if (normalized.some((rule) => rule.kind === 'gitea_pr' && !validRepository(rule.repository))) {
           setMessage('Gitea 仓库请填写“团队名/仓库名”，不要包含空格或多余路径。'); return
         }
+        if (['codex', 'claude-code'].includes(runner) && (normalized.length !== 1
+          || normalized[0].kind !== 'gitea_pr' || !normalized[0].required)) {
+          setMessage('Codex 和 Claude Code 目前需要一个必填的 Gitea PR 编号参数。'); return
+        }
+        if (runner === 'codex' && !codexAvailable) {
+          setMessage('这台 DSH 尚未找到可用的 Codex CLI。'); return
+        }
+        if (runner === 'claude-code' && !claudeCodeAvailable) {
+          setMessage('这台 DSH 尚未注册 Claude Code 子代理。'); return
+        }
         const scope = conversationKind === 'group' ? `群 ${groupId}` : '私聊'
-        if (!window.confirm(`开启“${title}”后，${scope}中符合条件的人可请机器人执行这个仅用文字处理的任务。${conversationKind === 'group' ? '结果会公开回复原群。' : '结果回复请求人。'}请确认。`)) return
+        const resultDestination = conversationKind === 'group' ? '原群（群内可见）' : '发起任务的私聊'
+        const executionInfo = runner === 'codex'
+          ? 'ANT 会使用这台电脑已登录的 Codex，在已核验 PR Head 的临时完整代码快照中固定只读权限；会传入所有者要求、请求人原话和 PR 差异，不传 Gitea 令牌。'
+          : runner === 'claude-code'
+            ? 'ANT 会调用这台 DSH 已注册的 Claude Code 子代理，在已核验 PR Head 的临时完整代码快照中审查；会传入所有者要求、请求人原话和 PR 差异，不传 Gitea 令牌。它沿用 DSH 中 Claude Code 的本机权限设置；请确认该设置适合由获准成员请求审查。'
+            : '这项任务仅由受限 DSH 处理已提供的文字。'
+        if (!window.confirm(`开放“${title}”后，${requesterSummary}可在${scope}请求，有效期 ${days} 天；结果${resultDestination}。${executionInfo}请确认。`)) return
         setBusy(true)
         try {
           const response = await fetch('/api/ant-teams/delegation/cards', {
             method: 'POST', headers: { 'content-type': 'application/json' },
             body: JSON.stringify({ bot_id: selectedBot.bot_id, bot_fingerprint: selectedBot.fingerprint,
               title, intent, examples: exampleLines,
-              parameters: normalized, task_prompt: taskPrompt, runner: 'dsh', workspace: null,
+              parameters: normalized, task_prompt: taskPrompt, runner, workspace: null,
               sender_scope: senderScope, sender_ids: senderScope === 'allowlist'
                 ? senderIds.split(/[\s,，]+/u).filter(Boolean) : [], conversation_kind: conversationKind,
               ...(conversationKind === 'group' ? { conversation_id: groupId } : {}),
               expires_at: Math.floor(Date.now() / 1000) + Number(days) * 86400 }),
           })
           const result = await readLocalJsonResponse(response)
-          if (!response.ok) throw new Error(result.message || '任务卡保存失败。')
-          setTitle(''); setIntent(''); setExamples(''); setTaskPrompt(''); setParameters([])
+          if (!response.ok && runner === 'claude-code' && result.code === 'INVALID_REQUEST') {
+            throw new Error('当前团队服务端可能尚不支持 Claude Code 执行方。请管理员升级服务端后刷新重试。')
+          }
+          if (!response.ok) throw new Error(result.message || '能力保存失败。')
+          setTitle(''); setIntent(''); setExamples(''); setTaskPrompt(''); setParameters([]); setRunner('dsh')
           await load()
           setCreateOpen(false)
-          setMessage('任务卡已启用。同事可自然地提出这类请求；参数不完整时机器人会追问。')
+          setMessage('能力已开放。同事可自然地提出这类请求；参数不完整时机器人会追问。')
         } catch (error) { setMessage(error.message) }
         finally { setBusy(false) }
       }
       const revokeCard = async (card) => {
-        if (!window.confirm(`停止“${card.title}”的新请求？正在处理的任务无法撤销已经发生的读取。`)) return
+        if (!window.confirm(`停止开放“${card.title}”？正在处理的任务无法撤销已经发生的读取。`)) return
         setBusy(true)
         try {
           const response = await fetch('/api/ant-teams/delegation/cards', {
             method: 'DELETE', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ id: card.id }),
           })
-          if (!response.ok) throw new Error('停止任务卡失败，请重试。')
-          await load(); setMessage('任务卡已停止。')
-        } catch (error) { setMessage(error.message) }
-        finally { setBusy(false) }
-      }
-      const revokeGrant = async (grant) => {
-        if (!window.confirm(`停止 ${grant.repository} PR #${grant.pr_number} 的新审查请求？正在处理的任务不会因此撤销。`)) return
-        setBusy(true)
-        try {
-          const response = await fetch('/api/ant-teams/delegation/grants', {
-            method: 'DELETE', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ id: grant.id }),
-          })
-          if (!response.ok) throw new Error('停止 PR 授权失败，请重试。')
-          await load(); onGrantChanged?.(); setMessage('已停止这项 PR 授权；其他聊天和任务不受影响。')
+          if (!response.ok) throw new Error('停止能力失败，请重试。')
+          await load(); setMessage('能力已停止开放。')
         } catch (error) { setMessage(error.message) }
         finally { setBusy(false) }
       }
@@ -645,24 +793,41 @@ window.__ModuleLoader__.load({
         } catch (error) { setMessage(error.message) }
         finally { setBusy(false) }
       }
-      return h('section', { style: panelStyle, 'aria-label': '协作机器人和可执行任务' },
-        h('h3', { style: { margin: 0, fontSize: 16 } }, '协作机器人与任务'),
-        h('p', { style: mutedTextStyle }, '同事可以像平常一样聊天。只有你开放的任务才会经过参数与权限检查；群里的任务结果公开回复原群。新建任务卡目前使用无本机工具的 DSH 文字处理。'),
-        h('p', { style: mutedTextStyle }, '机器人用模型判断一句话是否属于某项任务，话题判断可能有误；请求人、群、参数类型和数值范围由 ANT 再次校验。敏感内容请缩小授权范围。'),
+      return h('section', { style: { ...panelStyle,
+        display: ['bot-chat', 'capability', 'local'].includes(activeTab) ? 'grid' : 'none' },
+      'aria-label': '协作机器人与开放能力' },
+        message ? h('p', { role: 'status', style: mutedTextStyle }, message) : null,
+        h('div', { role: 'region', 'aria-label': '机器人连接和聊天范围', style: { display: activeTab === 'bot-chat' ? 'grid' : 'none', gap: 14 } },
+        h('h3', { style: { margin: 0, fontSize: 16 } }, '协作机器人'),
+        h('p', { style: mutedTextStyle }, '同事可以像平常一样和机器人聊天。DSH 负责理解与回答；只有准备执行你开放的能力时，ANT 才核对请求人、群、参数和权限。群里的任务结果会回复原群。'),
+        h('p', { role: 'status', style: mutedTextStyle }, '每项能力都单独设定执行方和请求范围。普通对话不会自动获得读取电脑、调用工具或访问其他群的权限。'),
+        loadFailures.length ? h('p', { role: 'status', style: mutedTextStyle },
+          `部分协作信息暂时无法读取：${loadFailures.map((path) => loadNames[path]).join('、')}。已读取的信息仍显示，请稍后刷新状态。`) : null,
         h('div', { style: { border: '1px solid var(--dsw-alias-border-l2)', borderRadius: 8, padding: 12,
           display: 'grid', gap: 8 } },
-          h('strong', null, '开始使用'),
+          h('strong', null, '机器人和聊天范围'),
+          h('div', { style: { display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 240px), 1fr))', gap: 8 } },
+            h('div', { style: { padding: 10, borderRadius: 8, backgroundColor: 'var(--dsw-alias-bg-layer-2)' } },
+              h('strong', null, '私聊'), h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '默认可用，可正常聊天；执行任务仍需单独授权。')),
+            h('div', { style: { padding: 10, borderRadius: 8, backgroundColor: 'var(--dsw-alias-bg-layer-2)' } },
+              h('strong', null, '群聊'), h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '可同时启用；群成员是否能执行任务由每项能力授权决定。'))),
           h('span', { role: 'status', style: mutedTextStyle }, loading ? '正在读取机器人与任务状态…'
             : botLoadError ? '暂时无法读取机器人状态。请刷新后再试。'
               : connectedBots.length === 0 ? '尚未发现已连接的机器人。请先在 DSH-IM 中连接飞书机器人。'
                 : selectedBot && !botConnected ? `“${selectedBot.name}”当前离线；请先在 DSH-IM 恢复连接。`
-                  : selectedBot && !selectedEnrollment ? `“${selectedBot.name}”已连接；请先启用协作。启用后，它仍能正常聊天。`
+                  : enrollmentLoadError ? selectedBot
+                    ? `“${selectedBot.name}”已连接；暂时无法确认协作是否已启用，请刷新状态。`
+                    : '机器人已连接；协作启用状态暂未读取，请刷新状态。'
+                  : selectedBot && !selectedEnrollmentBound ? selectedEnrollment
+                    ? `“${selectedBot.name}”已连接；原协作配置尚未绑定到这台 DSH，请在本机重新启用。若原设备令牌曾被撤销，旧任务权限已关闭，绑定后需重新开放。`
+                    : `“${selectedBot.name}”已连接；请先启用本机协作。启用后，它仍能正常聊天。`
                   : enrolledCount === 0 ? '机器人已连接；请选择并启用协作。启用后，它仍能正常聊天。'
-                    : !selectedBot ? '已有协作机器人；请选择一台，查看它的任务并私聊自测。'
-                      : selectedTaskCount === 0 ? `“${selectedBot.name}”已启用协作；下一步开放一项任务。你也可以先私聊自测普通聊天。`
-                        : `“${selectedBot.name}”已启用协作 · ${selectedTaskCount} 项有效授权。可以私聊自测。`),
+                      : !selectedBot ? '已有协作机器人；请选择一台，查看已开放的能力并私聊自测。'
+                      : authorizationLoadError ? `“${selectedBot.name}”已启用协作；已开放任务暂未读取，请刷新状态。普通聊天仍可自测。`
+                      : selectedTaskCount === 0 ? `“${selectedBot.name}”已启用协作；下一步开放一项能力。你也可以先私聊自测普通聊天。`
+                        : `“${selectedBot.name}”已启用协作 · ${selectedTaskCount} 项能力已开放。可以私聊自测。`),
           bots.length ? h('label', null, '我的机器人', h('select', { value: botId,
-            onChange: (event) => { setBotId(event.target.value); setGroupId(''); setBindingCode('');
+            onChange: (event) => { setBotId(event.target.value); setGroupId(''); setChatGroupId(''); setBindingCode('');
               setTrustedOrigin(enrolled.find((bot) => bot.bot_id === event.target.value)?.gitea_origin || '') }, style: inputStyle },
             h('option', { value: '' }, '请选择机器人'),
             ...bots.map((bot) => h('option', { key: bot.bot_id, value: bot.bot_id,
@@ -673,62 +838,118 @@ window.__ModuleLoader__.load({
             '若尚未安装 DSH-IM，请先到 DSH 的插件列表安装并连接机器人。') : null,
           selectedBot && !botConnected && connectedBots.length ? h('button', { type: 'button', onClick: openImSettings,
             style: secondaryButtonStyle }, '检查 DSH-IM 连接') : null,
-          selectedBot && !selectedEnrollment ? h('button', { type: 'button', disabled: busy || !botConnected,
-            onClick: () => void enrollBot(), style: secondaryButtonStyle }, '启用这个协作机器人') : null,
-          selectedEnrollment && botConnected ? h('p', { style: mutedTextStyle },
-            `自测：私聊“${selectedBot.name}”发送“你能做什么”；发起任务后可问“刚才的任务怎么样了”。群聊请先在目标群 @机器人，并在下方任务设置中启用该群。`) : null,
+          selectedBot && !selectedEnrollmentBound ? h('button', { type: 'button', disabled: busy || !botConnected || enrollmentLoadError,
+            onClick: () => void enrollBot(), style: secondaryButtonStyle },
+            selectedEnrollment ? '绑定原协作配置到这台 DSH' : '启用并绑定到这台 DSH') : null,
+          selectedEnrollmentBound && botConnected ? h('p', { style: mutedTextStyle },
+            `自测：私聊“${selectedBot.name}”发送“你能做什么”；发起任务后可问“刚才的任务怎么样了”。群聊请先在目标群 @机器人，再开放能力时选择该群。`) : null,
+          selectedBot ? h('div', { style: { display: 'grid', gap: 8, padding: 10,
+            border: '1px solid var(--dsw-alias-border-l2)', borderRadius: 8 } },
+            h('strong', null, `可信 Gitea 地址 · ${selectedBot.name}`),
+            h('p', { style: mutedTextStyle }, '为这个机器人登记一次。PR 能力只需配置仓库和 PR 编号，不必重复填写地址。'),
+            h('div', { style: { display: 'flex', gap: 8, flexWrap: 'wrap' } },
+              h('input', { 'aria-label': '可信 Gitea 地址', type: 'url', value: trustedOrigin,
+                onChange: (event) => setTrustedOrigin(event.target.value), placeholder: 'https://git.example.com',
+                style: { ...inputStyle, flex: '1 1 280px' } }),
+              h('button', { type: 'button', disabled: busy || !trustedOrigin.trim() || (!selectedEnrollmentBound && !botConnected),
+                onClick: () => void (selectedEnrollmentBound ? saveTrustedOrigin() : enrollBot()), style: secondaryButtonStyle },
+                selectedEnrollmentBound ? '保存可信地址' : botConnected ? '绑定机器人并保存地址' : '先连接机器人'))) : null,
+          selectedEnrollmentBound && botConnected ? h('div', { style: { display: 'grid', gap: 8 } },
+            h('strong', null, '允许聊天的群'),
+            h('span', { style: mutedTextStyle }, '群成员可以正常聊天；是否能让机器人办事，由每项能力单独决定。若机器人尚未发现群，可以直接填群 ID。'),
+            h('select', { 'aria-label': '已记录的群', value: availableGroups.some((group) => group.group_id === chatGroupId) ? chatGroupId : '',
+              onChange: (event) => setChatGroupId(event.target.value), style: inputStyle },
+              h('option', { value: '' }, '从已记录的群中选择'),
+              ...availableGroups.map((group) => h('option', { key: group.group_id, value: group.group_id },
+                `${group.group_code} · ${group.chat_enabled ? '已允许聊天' : '未允许聊天'}`))),
+            h('input', { 'aria-label': '群 ID', value: chatGroupId, maxLength: 256,
+              onChange: (event) => setChatGroupId(event.target.value.trim()),
+              placeholder: '也可以手动填写群 ID', style: inputStyle }),
+            h('button', { type: 'button', disabled: busy || !chatGroupId.trim()
+              || (selectedChatGroup?.chat_enabled && selectedGroupHasTasks),
+              onClick: () => void saveGroupChat(), style: secondaryButtonStyle },
+              selectedChatGroup?.chat_enabled ? '关闭此群聊天'
+                : selectedGroupHasTasks ? '能力到期后仍允许聊天' : '允许此群聊天'),
+            selectedChatGroup?.chat_enabled && selectedGroupHasTasks ? h('span', { style: mutedTextStyle },
+              '本群还有开放能力；关闭聊天前请先停止这些能力。') : null) : null,
           h('div', { style: { display: 'flex', gap: 8, flexWrap: 'wrap' } },
-            h('button', { type: 'button', onClick: () => { setCreateOpen(true)
-              window.document?.getElementById('ant-new-task')?.scrollIntoView({ behavior: 'smooth', block: 'start' }) },
-              style: primaryButtonStyle }, '开放文字任务'),
-            h('button', { type: 'button', onClick: openPrReview, style: secondaryButtonStyle }, '开放指定 PR 审查'),
+            h('button', { type: 'button', onClick: () => { setCreateOpen(true); onSelectTab('capability') },
+              style: primaryButtonStyle }, '开放新能力'),
+            h('button', { type: 'button', onClick: () => { preparePrExample(); onSelectTab('capability') }, style: secondaryButtonStyle }, '使用 PR 差异审查示例'),
             h('button', { type: 'button', onClick: () => void load().catch((error) => setMessage(error.message)),
-              style: secondaryButtonStyle }, '刷新状态'))),
-        h('h4', { style: { marginBottom: 0 } }, `我开放的任务 · ${activeCards.length + activeGrants.length}`),
+              style: secondaryButtonStyle }, '刷新状态')))),
+        h('div', { role: 'region', 'aria-label': '已开放能力列表', style: { display: activeTab === 'capability' ? 'grid' : 'none', gap: 12 } },
+        h('h4', { style: { marginBottom: 0 } }, `我开放的能力 · ${authorizationLoadError ? '暂未读取' : activeCards.length}`),
         ...activeCards.map((card) => h('div', { key: card.id, style: { display: 'flex', gap: 12,
           alignItems: 'center', justifyContent: 'space-between', flexWrap: 'wrap', borderTop: '1px solid var(--dsw-alias-border-l2)', paddingTop: 8 } },
-          h('span', { style: { flex: '1 1 280px', minWidth: 0, overflowWrap: 'anywhere' } }, `${card.title} · ${bots.find((bot) => bot.fingerprint === card.bot_fingerprint)?.name || '机器人'} · ${card.conversation_kind === 'group' ? `群 ${groups.find((group) => group.group_id === card.conversation_id)?.group_code || card.conversation_id}` : '私聊'} · ${card.sender_scope === 'allowlist' ? '仅指定成员可请求' : card.conversation_kind === 'group' ? '群成员可请求' : '可私聊者可请求'} · 结果回复原${card.conversation_kind === 'group' ? '群' : '私聊'} · DSH 文字处理 · ${new Date(card.expires_at * 1000).toLocaleString('zh-CN')} 到期`),
+          h('span', { style: { flex: '1 1 280px', minWidth: 0, overflowWrap: 'anywhere' } }, `${card.title} · ${bots.find((bot) => bot.fingerprint === card.bot_fingerprint)?.name || '机器人'} · ${card.conversation_kind === 'group' ? `群 ${groups.find((group) => group.group_id === card.conversation_id)?.group_code || card.conversation_id}` : '私聊'} · ${card.sender_scope === 'allowlist' ? '仅指定成员可请求' : card.conversation_kind === 'group' ? '群成员可请求' : '可私聊者可请求'} · 结果回复原${card.conversation_kind === 'group' ? '群' : '私聊'} · ${card.runner === 'codex' ? 'Codex PR 快照审查试用' : card.runner === 'claude-code' ? 'Claude Code PR 完整快照审查试用' : 'DSH 文字处理'} · ${new Date(card.expires_at * 1000).toLocaleString('zh-CN')} 到期`),
           h('button', { type: 'button', disabled: busy, onClick: () => void revokeCard(card), style: secondaryButtonStyle }, '停止'))),
-        ...activeGrants.map((grant) => h('div', { key: grant.id, style: { display: 'flex', gap: 12,
-          alignItems: 'center', justifyContent: 'space-between', flexWrap: 'wrap', borderTop: '1px solid var(--dsw-alias-border-l2)', paddingTop: 8 } },
-          h('span', { style: { flex: '1 1 280px', minWidth: 0, overflowWrap: 'anywhere' } }, `指定 PR 差异审查 · ${grant.repository} #${grant.pr_number} · ${bots.find((bot) => bot.fingerprint === grant.bot_fingerprint)?.name || '机器人'} · ${grant.sender_scope === 'allowlist' ? '仅指定成员可请求' : grant.conversation_kind === 'group' ? '群成员可请求' : '可私聊者可请求'} · 结果回复原${grant.conversation_kind === 'group' ? '群' : '私聊'} · ${prReviewExecutor === 'dsh' ? 'DSH' : prReviewExecutor + ' 本机试用'} · ${new Date(grant.expires_at * 1000).toLocaleString('zh-CN')} 到期`),
-          h('div', { style: { display: 'flex', gap: 8, flexWrap: 'wrap' } },
-            h('button', { type: 'button', onClick: openPrReview, style: secondaryButtonStyle }, '查看设置'),
-            h('button', { type: 'button', disabled: busy, onClick: () => void revokeGrant(grant),
-              style: secondaryButtonStyle }, '停止')))),
-        activeCards.length + activeGrants.length === 0 ? h('p', { style: mutedTextStyle },
-          '还没有开放任务。先选机器人，再用上方按钮创建文字任务或指定 PR 审查。') : null,
+        activeCards.length === 0 ? h('p', { style: mutedTextStyle },
+          authorizationLoadError ? '暂时无法确认已开放的能力，请刷新状态后再试。'
+            : '还没有开放能力。先选机器人，再开放一项能力；PR 审查只是可选示例。') : null),
+        h('div', { role: 'region', 'aria-label': '最近任务', style: { display: activeTab === 'local' ? 'grid' : 'none', gap: 12 } },
         h('h4', { style: { marginBottom: 0 } }, '最近任务'),
         ...(tasks.filter((task) => task.task_id).length ? tasks.filter((task) => task.task_id)
-          .map((task) => h('div', { key: task.task_id, style: { display: 'flex', gap: 12, alignItems: 'center',
-            justifyContent: 'space-between', flexWrap: 'wrap', borderTop: '1px solid var(--dsw-alias-border-l2)', paddingTop: 8 } },
-            h('span', { style: { flex: '1 1 280px', minWidth: 0, overflowWrap: 'anywhere' } }, `${task.task_id} · ${task.title || (task.pr_number ? `PR #${task.pr_number} 差异审查` : '任务')} · ${task.outcome === 'canceled' ? '已取消' : task.outcome === 'failed' ? '未完成' : ({
+          .map((task) => {
+            const title = task.title || (task.pr_number
+              ? `${task.repository ? `${task.repository} ` : ''}PR #${task.pr_number} 差异审查` : '任务')
+            const status = task.outcome === 'canceled' ? '已取消' : task.outcome === 'failed' ? '未完成' : ({
               pending: '排队中', running: '处理中', reply_pending: '结果待发送', reply_attempted: '回复状态待核对', done: '已回复',
-            }[task.status] || task.status)}`),
-            ['card_task', 'legacy_pr_task'].includes(task.kind) && ['pending', 'running'].includes(task.status) ? h('button', { type: 'button', disabled: busy,
-              onClick: () => void cancelTask(task), style: secondaryButtonStyle }, '取消任务') : null))
-          : [h('p', { key: 'none', style: mutedTextStyle }, '暂无任务。')]),
+            }[task.status] || task.status)
+            const createdAt = task.created_at && Number.isFinite(Date.parse(task.created_at))
+              ? new Date(task.created_at).toLocaleString('zh-CN') : ''
+            return h('div', { key: task.task_id, style: { display: 'flex', gap: 12, alignItems: 'center',
+              justifyContent: 'space-between', flexWrap: 'wrap', borderTop: '1px solid var(--dsw-alias-border-l2)', paddingTop: 8 } },
+              h('div', { style: { flex: '1 1 280px', minWidth: 0, overflowWrap: 'anywhere' } },
+                h('strong', null, title),
+                h('div', { style: mutedTextStyle }, `${status}${createdAt ? ` · ${createdAt}` : ''} · 任务 ${task.task_id}`)),
+              ['card_task', 'legacy_pr_task'].includes(task.kind) && ['pending', 'running'].includes(task.status) ? h('button', { type: 'button', disabled: busy,
+                onClick: () => void cancelTask(task), style: secondaryButtonStyle }, '取消任务') : null)
+          })
+          : [h('p', { key: 'none', style: mutedTextStyle }, loadFailures.includes('status')
+            ? '任务记录暂时无法读取，请刷新状态。' : '暂无任务。')])),
+        h('div', { role: 'region', 'aria-label': '新建能力', style: { display: activeTab === 'capability' ? 'grid' : 'none' } },
         h('details', { id: 'ant-new-task', open: createOpen,
           onToggle: (event) => setCreateOpen(event.currentTarget.open),
           style: { border: '1px solid var(--dsw-alias-border-l2)', borderRadius: 8, padding: 12 } },
-          h('summary', { style: { cursor: 'pointer', fontWeight: 600 } }, '新建文字任务'),
+          h('summary', { style: { cursor: 'pointer', fontWeight: 600 } }, '开放一项能力'),
         h('form', { onSubmit: createCard, style: { display: 'grid', gap: 9, maxWidth: 760 } },
           h('p', { style: mutedTextStyle }, selectedBot
-            ? `当前机器人：${selectedBot.name}${selectedEnrollment ? ' · 协作已启用' : ' · 请先在上方启用协作'}`
+            ? `当前机器人：${selectedBot.name}${selectedEnrollmentBound ? ' · 已绑定此设备' : ' · 请先绑定到此设备'}`
             : '请先在上方选择机器人并启用协作。'),
-          selectedEnrollment ? h('p', { style: mutedTextStyle }, '此机器人已由 ANT 接收协作消息；普通聊天由受限 DSH 对话处理。') : null,
+          selectedEnrollmentBound ? h('p', { style: mutedTextStyle },
+            '机器人及其任务能力只在这台 DSH 设备接收和执行；同一账号的其他设备不会继承本机授权。') : null,
+          selectedEnrollment && !selectedEnrollmentBound ? h('p', { style: mutedTextStyle },
+            '这是尚未绑定到设备的机器人。请在要继续使用它的电脑重新启用；Gitea 地址和配置记录会保留。若旧设备访问曾被撤销，原任务权限不会恢复，需要重新开放。') : null,
           selectedBot && conversationKind === 'group' && !selectedBot.history_available ? h('p', { role: 'status', style: mutedTextStyle },
             '这个机器人当前不能读取平台群历史；群聊只能参考实际送达的消息和本机近期记录。请检查 DSH-IM 权限。') : null,
-          h('label', null, '任务名称', h('input', { required: true, maxLength: 100, value: title,
+          h('label', null, '能力名称', h('input', { required: true, maxLength: 100, value: title,
             onChange: (event) => setTitle(event.target.value), placeholder: '例如：总结项目进度', style: inputStyle })),
-          h('label', null, '什么请求属于这项任务', h('textarea', { required: true, maxLength: 1000, rows: 2, value: intent,
+          h('label', null, '什么请求属于这项能力', h('textarea', { required: true, maxLength: 1000, rows: 2, value: intent,
             onChange: (event) => setIntent(event.target.value), placeholder: '例如：把群里讨论的本周进展整理成摘要', style: inputStyle })),
           h('label', null, '同事可能怎么说（每行一句，可选）', h('textarea', { rows: 2, value: examples,
             onChange: (event) => setExamples(event.target.value), placeholder: '帮我总结一下刚才的讨论', style: inputStyle })),
           h('label', null, '处理要求', h('textarea', { required: true, maxLength: 4000, rows: 3, value: taskPrompt,
             onChange: (event) => setTaskPrompt(event.target.value), placeholder: '只使用当前会话可见的内容，列出结论和待办', style: inputStyle })),
+          h('label', null, '执行方', h('select', { value: runner,
+            onChange: (event) => setRunner(event.target.value), style: inputStyle },
+            h('option', { value: 'dsh' }, 'DSH · 已提供文字'),
+            h('option', { value: 'codex',
+              disabled: !codexAvailable }, 'Codex · 单个 Gitea PR 完整快照审查试用'),
+            h('option', { value: 'claude-code', disabled: !claudeCodeAvailable },
+              'Claude Code · 单个 Gitea PR 完整快照试用'))),
+          nativePrUnavailableReason ? h('p', { role: 'status', style: mutedTextStyle },
+            `${nativePrUnavailableReason}，已禁用 Codex/Claude Code 完整快照选项；可选择 DSH 差异审查。`) : null,
+          runner === 'codex' ? h('p', { role: 'status', style: mutedTextStyle },
+            'Codex 使用这台电脑的登录账号及其用量；ANT 为每项能力维护仓库缓存，每次审查创建固定到 PR Head 的临时代码快照。不会收到 Gitea 令牌；请以这台 DSH 的实际子代理权限为准，只有强制只读隔离已验证时才视为只读。Git LFS 实际文件不会下载。') : null,
+          runner === 'claude-code' ? h('p', { role: 'status', style: mutedTextStyle },
+            'Claude Code 通过 DSH 已注册的子代理运行，可查看本次 PR 的临时代码快照。ANT 不会传 Gitea 令牌；Claude Code 沿用 DSH 提供方的本机权限，不具备 Codex 路径相同的固定只读隔离。Git LFS 实际文件不会下载。') : null,
+          selectedRunnerNeedsPr ? h('p', { role: 'status', style: mutedTextStyle },
+            '本机 PR 执行方需要 Gitea granular token 的只读权限 read:repository 和 read:user；read:user 仅用于这台 DSH 获取 Git HTTPS 登录名。') : null,
+          h('p', { role: 'status', style: mutedTextStyle },
+            `开放后：${requesterSummary}可请求 · 有效期 ${days} 天 · ${resultRouteSummary}`),
           h('details', { style: { border: '1px solid var(--dsw-alias-border-l2)', borderRadius: 8, padding: 10 } },
-            h('summary', { style: { cursor: 'pointer' } }, '更多设置：参数、群聊与请求人'),
+            h('summary', { style: { cursor: 'pointer' } }, '参数与授权范围'),
           h('div', null, h('strong', null, '需要从请求中确认的参数'),
             h('p', { style: mutedTextStyle }, '可不添加参数。参数键使用英文，给同事看的中文问题填在参数说明；需要指定 PR 时选“Gitea PR 编号”，系统会核对它是否存在。自由文本留在本机，服务端只核对长度和摘要。')),
           ...parameters.map((rule, index) => h('div', { key: index, style: { display: 'flex', flexWrap: 'wrap', gap: 8,
@@ -750,8 +971,8 @@ window.__ModuleLoader__.load({
               onChange: (event) => updateParameter(index, { max: event.target.value }), placeholder: '最大值', style: { ...inputStyle, width: 120 } }) : null,
             rule.kind === 'choice' ? h('input', { 'aria-label': '可选值', value: rule.choices,
               onChange: (event) => updateParameter(index, { choices: event.target.value }), placeholder: '用逗号分隔选项', style: { ...inputStyle, flex: '1 1 250px' } }) : null,
-            rule.kind === 'gitea_pr' ? h('input', { 'aria-label': '可信 Gitea 地址', type: 'url', value: rule.gitea_origin,
-              onChange: (event) => updateParameter(index, { gitea_origin: event.target.value }), placeholder: 'https://git.example.com', style: { ...inputStyle, flex: '1 1 220px' } }) : null,
+            rule.kind === 'gitea_pr' ? h('span', { style: mutedTextStyle },
+              `使用机器人的可信 Gitea 地址：${selectedEnrollment?.gitea_origin || trustedOrigin || '请在下方登记一次'}`) : null,
             rule.kind === 'gitea_pr' ? h('input', { 'aria-label': 'Gitea 仓库', value: rule.repository,
               onChange: (event) => updateParameter(index, { repository: event.target.value }), placeholder: '团队/仓库', style: { ...inputStyle, flex: '1 1 180px' } }) : null,
             h('button', { type: 'button', style: secondaryButtonStyle,
@@ -759,20 +980,12 @@ window.__ModuleLoader__.load({
           h('button', { type: 'button', disabled: parameters.length >= 12, style: secondaryButtonStyle,
             onClick: () => setParameters((current) => [...current, { name: '', kind: 'text', required: true,
               description: '', min: '', max: '', choices: '', gitea_origin: '', repository: '' }]) }, '添加参数'),
-          parameters.some((rule) => rule.kind === 'gitea_pr') && selectedEnrollment ? h('div', { style: { display: 'flex', gap: 8, flexWrap: 'wrap' } },
-            h('input', { 'aria-label': '这个机器人的可信 Gitea 地址', type: 'url', value: trustedOrigin,
-              onChange: (event) => setTrustedOrigin(event.target.value), placeholder: '可信 Gitea 地址',
-              style: { ...inputStyle, flex: '1 1 260px' } }),
-            h('button', { type: 'button', disabled: busy || !trustedOrigin.trim(),
-              onClick: () => void saveTrustedOrigin(), style: secondaryButtonStyle }, '保存可信地址')) : null,
-          parameters.some((rule) => rule.kind === 'gitea_pr') ? h('div', { style: { display: 'flex', gap: 8, flexWrap: 'wrap' } },
-            h('input', { 'aria-label': '只读 Gitea 访问令牌', type: 'password', autoComplete: 'off', value: giteaToken,
-              onChange: (event) => setGiteaToken(event.target.value), placeholder: tokenConfigured ? '本机已保存 Gitea 令牌' : '先保存只读 Gitea 令牌',
-              style: { ...inputStyle, flex: '1 1 260px' } }),
-            h('button', { type: 'button', disabled: busy || !giteaToken.trim(),
-              onClick: () => void saveGiteaToken(), style: secondaryButtonStyle }, '保存令牌')) : null,
-          parameters.some((rule) => rule.kind === 'gitea_pr') ? h('p', { style: mutedTextStyle },
-            '执行时会用这台 DSH 保存的只读令牌向你登记的可信 Gitea 地址读取 PR；标题和差异会交给当前团队模型处理。') : null,
+          parameters.some((rule) => rule.kind === 'gitea_pr') ? h('div', { style: { display: 'grid', gap: 6 } },
+            h('p', { style: mutedTextStyle }, selectedEnrollment?.gitea_origin
+              ? `将使用机器人已登记的可信 Gitea 地址：${selectedEnrollment.gitea_origin}`
+              : '请先在“机器人与聊天”中为这个机器人登记可信 Gitea 地址。'),
+            !tokenConfigured ? h('button', { type: 'button', onClick: () => onSelectTab('local'), style: secondaryButtonStyle },
+              '前往本机与任务保存 Gitea 令牌') : h('p', { style: mutedTextStyle }, '本机 Gitea 只读令牌已保存。')) : null,
           h('label', null, '使用场景', h('select', { value: conversationKind,
             onChange: (event) => { setConversationKind(event.target.value); setGroupId('') }, style: inputStyle },
             h('option', { value: 'dm' }, '私聊'), h('option', { value: 'group' }, '指定群聊'))),
@@ -783,7 +996,7 @@ window.__ModuleLoader__.load({
               `识别码 ${group.group_code} · ${group.group_id}`)))) : null,
           conversationKind === 'group' ? h('button', { type: 'button', disabled: busy,
             onClick: () => void load().catch((error) => setMessage(error.message)), style: secondaryButtonStyle }, '刷新群列表') : null,
-          conversationKind === 'group' && selectedEnrollment ? h('div', { style: { display: 'flex', gap: 8, alignItems: 'center', flexWrap: 'wrap' } },
+          conversationKind === 'group' && selectedEnrollmentBound ? h('div', { style: { display: 'flex', gap: 8, alignItems: 'center', flexWrap: 'wrap' } },
             h('span', { style: mutedTextStyle }, selectedEnrollment.owner_bound ? '已绑定你的飞书身份，可在群内批准任务' : '群内批准前需绑定你的飞书身份'),
             h('button', { type: 'button', disabled: busy, onClick: () => void issueBindingCode(), style: secondaryButtonStyle },
               selectedEnrollment.owner_bound ? '重新获取绑定码' : '获取身份绑定码')) : null,
@@ -799,313 +1012,42 @@ window.__ModuleLoader__.load({
             h('option', { value: 1 }, '1 天'), h('option', { value: 7 }, '7 天'), h('option', { value: 30 }, '30 天')))),
           cardBlockReason ? h('p', { role: 'status', style: mutedTextStyle }, cardBlockReason) : null,
           h('button', { disabled: busy || Boolean(cardBlockReason),
-            style: primaryButtonStyle }, '开启这项任务'))),
+            style: primaryButtonStyle }, '保存并开放能力')))),
+        h('div', { role: 'region', 'aria-label': '本机处理设置', style: { display: activeTab === 'local' ? 'grid' : 'none', gap: 12 } },
+        h('section', { style: { ...panelStyle, padding: 14 } },
+          h('strong', null, 'Gitea 本机凭据'),
+          h('p', { style: mutedTextStyle }, tokenConfigured
+            ? '只读访问令牌已保存在这台 DSH 的安全凭据中；不会同步到 ANT 服务端或发送给执行器。'
+            : 'PR 审查能力需要只读访问令牌。令牌只保存到这台 DSH。'),
+          h('div', { style: { display: 'flex', gap: 8, flexWrap: 'wrap' } },
+            h('input', { 'aria-label': 'Gitea 只读访问令牌', type: 'password', autoComplete: 'new-password', value: giteaToken,
+              onChange: (event) => setGiteaToken(event.target.value),
+              placeholder: tokenConfigured ? '已保存；输入新令牌可替换' : '粘贴 Gitea 只读令牌',
+              style: { ...inputStyle, flex: '1 1 280px' } }),
+            h('button', { type: 'button', disabled: busy || !giteaToken.trim(),
+              onClick: () => void saveGiteaToken(), style: secondaryButtonStyle }, tokenConfigured ? '替换本机令牌' : '保存本机令牌'))),
         h('details', { style: { border: '1px solid var(--dsw-alias-border-l2)', borderRadius: 8, padding: 12 } },
-          h('summary', { style: { cursor: 'pointer', fontWeight: 600 } }, '本机与指定 PR 审查设置'),
-          h('p', { style: mutedTextStyle }, '本机并发影响新任务；下方的 Codex／Claude Code 试用仅影响“指定 PR 差异审查授权”，不影响文字任务。'),
+          h('summary', { style: { cursor: 'pointer', fontWeight: 600 } }, '本机处理设置'),
+          h('p', { style: mutedTextStyle }, '本机并发上限只影响这台电脑接收的新任务；PR 仓库缓存上限按这台 DSH 的长期仓库缓存总量计算，不包括任务临时工作目录。'),
         h('div', { style: { display: 'flex', gap: 8, flexWrap: 'wrap', alignItems: 'center' } },
-          h('span', { style: mutedTextStyle }, `团队默认：先看 ${defaults?.context_messages ?? 10} 条前文、最多翻阅 ${defaults?.history_max_records ?? 100} 条平台记录、同时处理 ${defaults?.max_concurrency ?? 3} 项任务。`),
+          h('span', { style: mutedTextStyle }, loadFailures.includes('settings') ? '团队默认值暂未读取。'
+            : `团队默认：先看 ${defaults?.context_messages ?? 10} 条前文、最多翻阅 ${defaults?.history_max_records ?? 100} 条平台记录、同时处理 ${defaults?.max_concurrency ?? 3} 项任务。`),
           h('button', { type: 'button', onClick: () => void load().catch((error) => setMessage(error.message)), style: secondaryButtonStyle }, '刷新')),
-        h('form', { onSubmit: saveConcurrency, style: { display: 'flex', gap: 8, flexWrap: 'wrap', alignItems: 'end' } },
+        loadFailures.includes('local-settings') ? h('p', { role: 'status', style: mutedTextStyle },
+          '本机处理设置暂未读取；请刷新后重试。')
+          : h('form', { onSubmit: saveLocalProcessingSettings, style: { display: 'flex', gap: 8, flexWrap: 'wrap', alignItems: 'end' } },
           h('label', null, '这台电脑最多同时处理',
             h('select', { value: localConcurrency == null ? '' : String(localConcurrency),
               onChange: (event) => setLocalConcurrency(event.target.value), style: inputStyle },
             h('option', { value: '' }, '跟随团队默认'),
             ...Array.from({ length: 8 }, (_, index) => h('option', { key: index + 1, value: index + 1 }, `${index + 1} 项任务`)))),
-          h('button', { disabled: busy, style: secondaryButtonStyle }, '保存本机并发')),
-        h('p', { style: mutedTextStyle }, `DSH 官方执行器：${executors.map((item) => `${item.title}${item.available ? '已接入 DSH' : '本机未启用'}`).join('、') || '暂未读取到'}。通用任务卡仍只使用受限 DSH；Codex／Claude Code 仅可在下方为已授权的指定 PR 审查手动开启试用。`),
-        h('form', { id: 'ant-pr-review-executor-form', onSubmit: savePrReviewExecutor,
-          style: { display: 'flex', gap: 8, flexWrap: 'wrap', alignItems: 'end' } },
-          h('label', null, '指定 PR 差异审查使用',
-            h('select', { id: 'ant-pr-review-executor', value: prReviewExecutor,
-              onChange: (event) => setPrReviewExecutor(event.target.value), style: inputStyle },
-              h('option', { value: 'dsh' }, 'DSH 受限文字审查（默认）'),
-              ...[['codex', 'Codex'], ['claude-code', 'Claude Code']].map(([id, title]) => {
-                const available = executors.some((item) => item.id === id && item.available)
-                return h('option', { key: id, value: id, disabled: !available },
-                  `${title}${available ? ' · 本机权限试用' : ' · 未启用或未读取到'}`)
-              }))),
-          h('button', { disabled: busy, style: secondaryButtonStyle }, '保存审查执行方')),
-        prReviewExecutor !== 'dsh' ? h('p', { role: 'status', style: mutedTextStyle },
-          '选择本机执行器试用后，它沿用你在 Codex／Claude Code 中已有的权限；ANT 固定 PR 和启动参数，但不能保证执行器只读。') : null),
-        message ? h('p', { role: 'status', style: mutedTextStyle }, message) : null)
-    }
-
-    function DelegationSettings({ remote, revision, onChanged, open, onOpenChange }) {
-      const [bots, setBots] = useState([])
-      const [enrolledBots, setEnrolledBots] = useState([])
-      const [groups, setGroups] = useState([])
-      const [grants, setGrants] = useState([])
-      const [tasks, setTasks] = useState([])
-      const [teamReady, setTeamReady] = useState(false)
-      const [botId, setBotId] = useState('')
-      const [conversationKind, setConversationKind] = useState('dm')
-      const [groupId, setGroupId] = useState('')
-      const [bindingCode, setBindingCode] = useState('')
-      const [groupReady, setGroupReady] = useState(false)
-      const [groupError, setGroupError] = useState('')
-      const [origin, setOrigin] = useState('')
-      const [repository, setRepository] = useState('')
-      const [prNumber, setPrNumber] = useState('')
-      const [senderScope, setSenderScope] = useState('any')
-      const [senderIds, setSenderIds] = useState('')
-      const [days, setDays] = useState(7)
-      const [token, setToken] = useState('')
-      const [tokenReady, setTokenReady] = useState(false)
-      const [busy, setBusy] = useState(false)
-      const [message, setMessage] = useState('')
-      const refresh = async () => {
-        const [botResponse, grantResponse, credential, statusResponse, enrolledResponse, groupResponse] = await Promise.all([
-          fetch('/api/ant-teams/delegation/bots', { cache: 'no-store' }),
-          fetch('/api/ant-teams/delegation/grants', { cache: 'no-store' }),
-          remote?.credentials?.describe?.(['ANT_GITEA_API_TOKEN']),
-          fetch('/api/ant-teams/delegation/status', { cache: 'no-store' }),
-          fetch('/api/ant-teams/delegation/enrolled-bots', { cache: 'no-store' }),
-          fetch('/api/ant-teams/delegation/groups', { cache: 'no-store' }),
-        ])
-        const botData = await readLocalJsonResponse(botResponse)
-        const grantData = await readLocalJsonResponse(grantResponse)
-        const statusData = await readLocalJsonResponse(statusResponse)
-        const enrolledData = await readLocalJsonResponse(enrolledResponse)
-        const groupData = await readLocalJsonResponse(groupResponse)
-        if (!grantResponse.ok) { setTeamReady(false); throw new Error(grantData.message || '请先连接 ANT 团队。') }
-        setTeamReady(true)
-        setBots(botResponse.ok && Array.isArray(botData.bots) ? botData.bots : [])
-        setGroupReady(enrolledResponse.ok && groupResponse.ok)
-        setGroupError(enrolledResponse.ok && groupResponse.ok ? ''
-          : enrolledResponse.status === 426 || groupResponse.status === 426
-            ? '团队服务端版本不支持旧版 PR 群聊设置，请联系管理员升级。'
-            : enrolledData?.message || groupData?.message || '暂时无法读取群聊设置，请稍后刷新。')
-        setEnrolledBots(enrolledResponse.ok && Array.isArray(enrolledData) ? enrolledData : [])
-        setGroups(groupResponse.ok && Array.isArray(groupData) ? groupData : [])
-        setGrants(Array.isArray(grantData) ? grantData : [])
-        setTasks(statusResponse.ok && Array.isArray(statusData.items) ? statusData.items : [])
-        setTokenReady(Boolean(credential?.ok && credential.value?.ANT_GITEA_API_TOKEN?.configured))
-        if (!botResponse.ok) setMessage(botData.message || '请先配置 DSH-IM 飞书机器人。')
-        else if (!statusResponse.ok) setMessage(statusData.message || '本机任务记录暂时无法读取。')
-      }
-      useEffect(() => { void refresh().catch((error) => { setTeamReady(false); setMessage(error.message) }) }, [remote, revision])
-      const saveToken = async (event) => {
-        event.preventDefault()
-        if (!token.trim()) return
-        setBusy(true)
-        try {
-          const result = await remote.credentials.set('ANT_GITEA_API_TOKEN', token.trim())
-          if (!result?.ok) throw new Error('DSH 无法安全保存 Gitea 访问令牌。')
-          setToken('')
-          setTokenReady(true)
-          setMessage('Gitea 访问令牌已保存在这台 DSH。')
-        } catch (error) { setMessage(error.message) }
-        finally { setBusy(false) }
-      }
-      const create = async (event) => {
-        event.preventDefault()
-        const bot = bots.find((item) => item.bot_id === botId && item.available && item.connected)
-        if (!teamReady || !bot || !tokenReady) { setMessage('请先连接 ANT 团队，选择可用的专用飞书机器人，并保存 Gitea 访问令牌。'); return }
-        if (!groupReady || !selectedEnrolled) {
-          setMessage('请先为这个专用机器人启用协作收件，并固定可信 Gitea 地址。')
-          return
-        }
-        if (conversationKind === 'group' && !groups.some((item) => item.bot_fingerprint === bot.fingerprint && item.group_id === groupId)) {
-          setMessage('请先让群成员在目标群 @ 机器人一次，然后选择待启用群。')
-          return
-        }
-        if (normalizeServiceUrl(origin) !== selectedEnrollment.gitea_origin) {
-          setMessage('当前地址与机器人已登记的可信 Gitea 地址不同。请先点击“更新可信地址”，或恢复原地址。')
-          return
-        }
-        const trustedOrigin = selectedEnrollment.gitea_origin
-        if (!window.confirm(conversationKind === 'group'
-          ? `确认允许所选群的成员请求 ${trustedOrigin} 上 ${repository} PR #${prNumber} 的差异审查？执行方按上方本机设置运行，结果将公开回复原群／原话题，直到你撤销或授权到期。目前没有每日请求次数上限。`
-          : `开启后，此飞书机器人由 ANT 接收消息并继续处理普通聊天；只有你授权的 PR 才能被请求审查。Gitea 令牌会发送到 ${origin}，请核对地址。目前没有每日请求次数上限。请确认这是专用协作机器人。`)) return
-        setBusy(true)
-        try {
-          const response = await fetch('/api/ant-teams/delegation/grants', {
-            method: 'POST', headers: { 'content-type': 'application/json' },
-            body: JSON.stringify({ bot_id: bot.bot_id, bot_fingerprint: bot.fingerprint,
-              gitea_origin: trustedOrigin, repository, pr_number: Number(prNumber), sender_scope: senderScope,
-              sender_ids: senderScope === 'allowlist' ? senderIds.split(/[\s,，]+/u).filter(Boolean) : [],
-              conversation_kind: conversationKind,
-              ...(conversationKind === 'group' ? { conversation_id: groupId } : {}),
-              expires_at: Math.floor(Date.now() / 1000) + Number(days) * 86400 }),
-          })
-          const result = await readLocalJsonResponse(response)
-          if (!response.ok) throw new Error(result.message || '委托授权未能创建。')
-          setPrNumber('')
-          setMessage(conversationKind === 'group'
-            ? '本群已启用。在群里 @机器人发送“审查 PR 编号”可试一次；结果会公开回复原群／原话题。'
-            : '委托已保存；机器人连接后可私聊发送“审查 PR 编号”试一次，以核对 Gitea 令牌和实际回复。')
-          await refresh()
-          onChanged?.()
-        } catch (error) { setMessage(error.message) }
-        finally { setBusy(false) }
-      }
-      const enrollBot = async () => {
-        const bot = bots.find((item) => item.bot_id === botId && item.available && item.connected)
-        if (!bot || !groupReady) { setMessage('请先选择可用机器人，并确认团队服务端已支持群聊委托。'); return }
-        const trustedOrigin = normalizeServiceUrl(origin)
-        if (!trustedOrigin) { setMessage('请先填写有效的 Gitea 服务地址（HTTPS，或本机测试地址）。'); return }
-        if (!window.confirm('启用后，ANT 会接收这个机器人的消息并继续处理普通聊天；DSH-IM 原有会话桥不再单独回复。只有你开放的任务才可执行。更换机器人账号或可信 Gitea 地址时，不匹配的旧授权会撤销。')) return
-        setBusy(true)
-        try {
-          const response = await fetch('/api/ant-teams/delegation/enrolled-bots', {
-            method: 'POST', headers: { 'content-type': 'application/json' },
-            body: JSON.stringify({ bot_id: bot.bot_id, bot_fingerprint: bot.fingerprint,
-              gitea_origin: trustedOrigin }),
-          })
-          if (!response.ok) {
-            const result = await readLocalJsonResponse(response)
-            throw new Error(result.message || '无法启用机器人。')
-          }
-          setOrigin(trustedOrigin)
-          setMessage('协作机器人已启用，私聊可以正常对话。要开放任务，请先创建授权；要在群里使用，请让群成员先 @它一次。')
-          await refresh()
-          onChanged?.()
-        } catch (error) { setMessage(error.message) }
-        finally { setBusy(false) }
-      }
-      const stopBot = async () => {
-        const bot = enrolledBots.find((item) => item.bot_id === botId)
-        if (!bot || !window.confirm('停止 ANT 接收这个机器人的协作消息，并撤销全部委托授权？ANT 处理的普通聊天也会停止；如需恢复 DSH-IM 原有聊天，还要在 DSH-IM 中切回普通模式。')) return
-        setBusy(true)
-        try {
-          const response = await fetch('/api/ant-teams/delegation/enrolled-bots', {
-            method: 'DELETE', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ bot_id: bot.bot_id }),
-          })
-          if (!response.ok) throw new Error('停止机器人失败，请重试。')
-          setMessage('ANT 已停止接收这个机器人的消息并撤销任务授权。若要恢复 DSH-IM 原有聊天，请到 DSH-IM 切回普通模式。')
-          setBindingCode('')
-          await refresh()
-          onChanged?.()
-        } catch (error) { setMessage(error.message) }
-        finally { setBusy(false) }
-      }
-      const issueBindingCode = async () => {
-        const bot = bots.find((item) => item.bot_id === botId && item.available && item.connected)
-        if (!bot || !enrolledBots.some((item) => item.bot_fingerprint === bot.fingerprint)) return
-        setBusy(true)
-        try {
-          const response = await fetch('/api/ant-teams/delegation/owner-challenge', {
-            method: 'POST', headers: { 'content-type': 'application/json' },
-            body: JSON.stringify({ bot_id: bot.bot_id, bot_fingerprint: bot.fingerprint }),
-          })
-          const result = await readLocalJsonResponse(response)
-          if (!response.ok) throw new Error(result.message || '无法生成绑定码。')
-          setBindingCode(result.code)
-          setMessage('绑定码 5 分钟有效。私聊发送后，点击下方“刷新状态”查看绑定结果。')
-        } catch (error) { setMessage(error.message) }
-        finally { setBusy(false) }
-      }
-      const revoke = async (grant) => {
-        if (!window.confirm(`停止授权 ${grant.repository} 的 PR #${grant.pr_number}？`)) return
-        setBusy(true)
-        try {
-          const response = await fetch('/api/ant-teams/delegation/grants', {
-            method: 'DELETE', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ id: grant.id }),
-          })
-          if (!response.ok) throw new Error('停止授权失败，请重试。')
-          setMessage('已停止这项 PR 授权；机器人其他聊天和任务不受影响。')
-          await refresh()
-          onChanged?.()
-        } catch (error) { setMessage(error.message) }
-        finally { setBusy(false) }
-      }
-      const active = grants.filter((grant) => !grant.revoked_at && grant.expires_at * 1000 > Date.now())
-      const selectedBot = bots.find((bot) => bot.bot_id === botId)
-      const selectedEnrollment = enrolledBots.find((item) => item.bot_fingerprint === selectedBot?.fingerprint)
-      const selectedEnrolled = Boolean(selectedEnrollment)
-      const botGroups = groups.filter((item) => item.bot_fingerprint === selectedBot?.fingerprint)
-      return h('details', { id: 'ant-pr-review-settings', open,
-        onToggle: (event) => onOpenChange?.(event.currentTarget.open),
-        style: panelStyle, 'aria-label': '指定 PR 差异审查授权' },
-        h('summary', { style: { cursor: 'pointer', fontWeight: 600 } }, '指定 PR 差异审查授权'),
-        h('p', { style: mutedTextStyle }, '为指定仓库和 PR 编号开放审查。已有授权继续有效；文字任务请在上方创建。'),
-        h('p', { style: mutedTextStyle }, '这里管理谁能请求指定 PR；执行方在上方“本机与审查设置”选择。PR 标题和差异会交给所选执行方；ANT 不会主动传入 Gitea 令牌，但本机执行器仍沿用它已有的文件权限。'),
-        h('form', { onSubmit: saveToken, style: { display: 'flex', flexWrap: 'wrap', gap: 8 } },
-          h('label', { style: { width: '100%', fontSize: 13 } }, `Gitea 访问令牌（仅保存在本机 DSH）${tokenReady ? ' · 已配置' : ''}`),
-          h('input', { type: 'password', autoComplete: 'off', value: token, onChange: (event) => setToken(event.target.value),
-            placeholder: '只读访问令牌', style: { ...inputStyle, flex: '1 1 260px' } }),
-          h('button', { type: 'submit', disabled: busy || !token.trim(), style: secondaryButtonStyle }, '保存令牌')),
-        h('form', { onSubmit: create, style: { display: 'grid', gap: 9, maxWidth: 640 } },
-          h('label', { htmlFor: 'ant-delegation-bot' }, '专用飞书机器人'),
-          h('select', { id: 'ant-delegation-bot', required: true, value: botId,
-            onChange: (event) => { setBotId(event.target.value); setGroupId(''); setBindingCode('');
-              setOrigin(enrolledBots.find((item) => item.bot_id === event.target.value)?.gitea_origin || '') }, style: inputStyle },
-            h('option', { value: '' }, '选择已连接的机器人'),
-            ...bots.filter((bot) => bot.available && bot.connected).map((bot) => h('option', { key: bot.bot_id, value: bot.bot_id }, bot.name))),
-          h('label', { htmlFor: 'ant-delegation-origin' }, '可信 Gitea 服务地址'),
-          h('input', { id: 'ant-delegation-origin', type: 'url', required: true, value: origin,
-            onChange: (event) => setOrigin(event.target.value), placeholder: 'https://git.example.com', style: inputStyle }),
-          groupReady ? h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8, alignItems: 'center' } },
-            h('span', { style: mutedTextStyle }, selectedEnrolled
-              ? `${selectedEnrollment.owner_bound ? '飞书身份已绑定，可在群内批准' : '协作收件已启用，群内批准需先绑定身份'} · 可信 Gitea：${selectedEnrollment.gitea_origin}`
-              : '协作机器人尚未启用'),
-            !selectedEnrolled ? h('button', { type: 'button', disabled: busy || !botId,
-              onClick: () => void enrollBot(), style: secondaryButtonStyle }, '启用协作机器人') : null,
-            selectedEnrolled ? h('button', { type: 'button', disabled: busy,
-              onClick: () => void enrollBot(), style: secondaryButtonStyle }, '更新可信地址') : null,
-            selectedEnrolled ? h('button', { type: 'button', disabled: busy,
-              onClick: () => void issueBindingCode(), style: secondaryButtonStyle },
-            selectedEnrollment.owner_bound ? '重新绑定飞书身份' : '绑定我的飞书身份') : null,
-            selectedEnrolled ? h('button', { type: 'button', disabled: busy,
-              onClick: () => void stopBot(), style: secondaryButtonStyle }, '停止接收并撤销授权') : null) :
-            h('p', { style: mutedTextStyle }, groupError),
-          bindingCode && selectedEnrolled ? h('p', { role: 'status', style: mutedTextStyle },
-            `请你本人私聊这个机器人发送“绑定身份 ${bindingCode}”；5 分钟内有效，不要把码发在群里。绑定后可在群里 @它发送“在本群启用 <完整 PR 链接> 审查”，再按提示确认。`) : null,
-          h('label', { htmlFor: 'ant-delegation-kind' }, '授权给谁使用'),
-          h('select', { id: 'ant-delegation-kind', value: conversationKind,
-            onChange: (event) => { setConversationKind(event.target.value); setGroupId('') }, style: inputStyle },
-            h('option', { value: 'dm' }, '私聊这个机器人'),
-            groupReady ? h('option', { value: 'group' }, '仅所选飞书群') : null),
-          conversationKind === 'group' ? h('p', { style: mutedTextStyle },
-            '让群成员先在目标群 @机器人一次，然后刷新列表。向群成员核对机器人回复的识别码；启用后，该群成员都能看到审查结果。') : null,
-          conversationKind === 'group' ? h('div', { style: { display: 'flex', gap: 8 } },
-            h('select', { 'aria-label': '待启用群', required: true, value: groupId,
-              onChange: (event) => setGroupId(event.target.value), style: { ...inputStyle, flex: 1 } },
-              h('option', { value: '' }, '选择待启用群'),
-              ...botGroups.map((group) => h('option', { key: group.group_id, value: group.group_id },
-                `识别码 ${group.group_code} · ${new Date(group.last_seen_at * 1000).toLocaleString('zh-CN')} · ${group.group_id}${group.active_grants ? ' · 已有授权' : ' · 待启用'}`))),
-            h('button', { type: 'button', disabled: busy, onClick: () => void refresh().catch((error) => setMessage(error.message)),
-              style: secondaryButtonStyle }, '刷新群列表')) : null,
-          h('label', { htmlFor: 'ant-delegation-repository' }, '仓库'),
-          h('input', { id: 'ant-delegation-repository', required: true, value: repository,
-            onChange: (event) => setRepository(event.target.value), placeholder: '团队名/仓库名', style: inputStyle }),
-          h('label', { htmlFor: 'ant-delegation-pr' }, '允许审查的 PR 编号'),
-          h('input', { id: 'ant-delegation-pr', type: 'number', min: 1, required: true, value: prNumber,
-            onChange: (event) => setPrNumber(event.target.value), style: inputStyle }),
-          h('label', { htmlFor: 'ant-delegation-audience' }, '谁可以请求'),
-          h('select', { id: 'ant-delegation-audience', value: senderScope,
-            onChange: (event) => setSenderScope(event.target.value), style: inputStyle },
-            h('option', { value: 'any' }, conversationKind === 'group' ? '所选群的所有成员' : '任何能私聊这个专用机器人的人'),
-            h('option', { value: 'allowlist' }, '仅指定飞书用户 ID')),
-          senderScope === 'allowlist' ? h('input', { 'aria-label': '飞书用户 ID', required: true, value: senderIds,
-            onChange: (event) => setSenderIds(event.target.value), placeholder: '多个 ID 用逗号分隔', style: inputStyle }) : null,
-          h('label', { htmlFor: 'ant-delegation-days' }, '有效期'),
-          h('select', { id: 'ant-delegation-days', value: days, onChange: (event) => setDays(Number(event.target.value)), style: inputStyle },
-            h('option', { value: 1 }, '1 天'), h('option', { value: 7 }, '7 天'), h('option', { value: 30 }, '30 天')),
-          conversationKind === 'group' ? h('p', { style: mutedTextStyle },
-            '请确认该 PR 的标题、差异和审查结果可以向整个群公开；“指定发送者”只限制谁能发起，不会把结果改成私聊。目前没有每日请求次数上限。')
-            : senderScope === 'any' ? h('p', { style: mutedTextStyle },
-              'PR 审查结果会回复给发信人；请确认该 PR 可以向这些人披露。') : null,
-          h('button', { type: 'submit', disabled: busy || !teamReady || !tokenReady || !selectedEnrolled ||
-            (conversationKind === 'group' && !groupId), style: primaryButtonStyle }, '开启这项委托')),
-        h('h4', { style: { marginBottom: 0 } }, `当前有效授权 · ${active.length}`),
-        ...active.map((grant) => h('div', { key: grant.id, style: { display: 'flex', justifyContent: 'space-between', gap: 12,
-          alignItems: 'center', borderTop: '1px solid var(--dsw-alias-border-l2)', paddingTop: 10 } },
-        h('span', null, `${grant.repository} · PR #${grant.pr_number} · ${grant.conversation_kind === 'group'
-          ? `群 ${grant.conversation_id}（${grant.sender_scope === 'any' ? '全群' : '指定发送者'}）`
-          : (grant.sender_scope === 'any' ? '任何私聊者' : '指定发送者')} · ${new Date(grant.expires_at * 1000).toLocaleString('zh-CN')} 到期`),
-        h('button', { type: 'button', disabled: busy, onClick: () => void revoke(grant), style: secondaryButtonStyle }, '停止授权'))),
-        h('div', { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'center', gap: 8 } },
-          h('h4', { style: { margin: 0 } }, '最近任务'),
-          h('button', { type: 'button', disabled: busy, onClick: () => void refresh().catch((error) => { setTeamReady(false); setMessage(error.message) }),
-            style: secondaryButtonStyle }, '刷新状态')),
-        ...(tasks.length ? tasks.map((task, index) => h('p', { key: `${task.created_at}-${index}`, style: mutedTextStyle },
-          `${task.created_at ? new Date(task.created_at).toLocaleString('zh-CN') + ' · ' : ''}${task.repository || '请求'}${task.pr_number ? ` · PR #${task.pr_number}` : ''} · ${task.outcome === 'canceled' ? '已取消' : task.outcome === 'failed' ? '未完成' : ({
-            pending: '排队中', running: '处理中', reply_pending: '待回复', reply_attempted: '回复状态待核对，请查看飞书原会话',
-            done: '已回复',
-          }[task.status] || task.status)}`)) : [h('p', { style: mutedTextStyle }, '暂无任务记录。')]),
-        message ? h('p', { role: 'status', style: mutedTextStyle }, message) : null)
+          h('label', null, '这台电脑 PR 仓库缓存上限（GiB）',
+            h('input', { type: 'number', min: 1, max: 100, step: 1, required: true,
+              value: repositoryCacheLimitGib,
+              onChange: (event) => setRepositoryCacheLimitGib(event.target.value), style: inputStyle }),
+            h('span', { style: mutedTextStyle }, '默认 10 GiB，范围 1–100 GiB，按长期仓库文件逻辑大小计算（不含临时工作区和文件系统分配开销）。日常不会淘汰仍启用能力的缓存；停用或到期能力会在刷新时回收。单次拉取若实际越界，为恢复预算会清理这项能力的仓库缓存（旧 PR 可重新下载）。')),
+          h('button', { disabled: busy, style: secondaryButtonStyle }, '保存本机处理设置')),
+        h('p', { style: mutedTextStyle }, `本机检测到的执行方：${executors.map((item) => `${item.title}${item.available ? '（可用）' : `（${item.reason || '未启用或未找到'}）`}`).join('、') || '暂未读取到'}。只有能力配置下拉框中列出的执行方能接收委托。`))))
     }
 
     function SkillCenterPage({ remote, onBack, onAll, onSkills, onPlugins, openBundle,
@@ -1598,10 +1540,12 @@ window.__ModuleLoader__.load({
           ? h('p', { style: mutedTextStyle }, noMatches) : null))
     }
 
-    function ModelSyncFooter({ remote, serviceUrl, bindingReady, onServiceUrlChange, onConnectionChange }) {
+    function ModelSyncFooter({ remote, serviceUrl, bindingReady, activeTab, onServiceUrlChange,
+      onConnectionChange, onUpdateStateChange, onSelectTab }) {
       const [email, setEmail] = useState('')
       const [code, setCode] = useState('')
       const [message, setMessage] = useState('')
+      const [modelMessage, setModelMessage] = useState('')
       const [busy, setBusy] = useState(false)
       const [codeRequested, setCodeRequested] = useState(false)
       const [credentialConfigured, setCredentialConfigured] = useState(null)
@@ -1610,9 +1554,15 @@ window.__ModuleLoader__.load({
       const [allowLocalCleanup, setAllowLocalCleanup] = useState(false)
       const [bundleRelease, setBundleRelease] = useState(null)
       const [bundleUpdate, setBundleUpdate] = useState({ state: 'idle', currentVersion: '', message: '' })
+      const [authorizedModels, setAuthorizedModels] = useState([])
+      const [lastModelSync, setLastModelSync] = useState(null)
       const [serviceCompatibility, setServiceCompatibility] = useState({ state: 'idle', message: '' })
       const [pinnedServiceUrl, setPinnedServiceUrl] = useState(null)
 
+      useEffect(() => {
+        onUpdateStateChange?.({ ...bundleUpdate, version: bundleRelease?.version || '' })
+      }, [bundleUpdate, bundleRelease, onUpdateStateChange])
+
       const connectionErrorMessage = (result, status) => {
         const message = result?.message || `请求失败（${status}）`
         if (!['LEGACY_DEVICE_REVOKE_REQUIRED', 'ANT_CONNECTION_CLEANUP_REQUIRED'].includes(result?.code)) return message
@@ -1717,7 +1667,7 @@ window.__ModuleLoader__.load({
           return
         }
         setBusy(true)
-        setMessage('正在从 ANT 刷新获准模型…')
+        setModelMessage('正在从 ANT 刷新获准模型…')
         try {
           await requireCompatibleService(serviceUrl, true)
           const response = await fetch('/api/ant-teams/models', { method: 'POST' })
@@ -1727,12 +1677,14 @@ window.__ModuleLoader__.load({
             throw new Error(result.message || `刷新失败（${response.status}）`)
           }
           const count = await applyAuthorizedModels(result.models, result.service_url)
+          setAuthorizedModels(result.models)
+          setLastModelSync(new Date())
           setCredentialConfigured(true)
           setNeedsReconnect(false)
           setReauthenticate(false)
-          setMessage(`模型目录已刷新，共 ${count} 个获准模型。`)
+          setModelMessage(`模型目录已刷新，共 ${count} 个获准模型。`)
         } catch (error) {
-          setMessage(error instanceof Error ? error.message : '刷新模型失败，请稍后重试。')
+          setModelMessage(error instanceof Error ? error.message : '刷新模型失败，请稍后重试。')
         } finally {
           setBusy(false)
         }
@@ -2073,6 +2025,8 @@ window.__ModuleLoader__.load({
           if (!credentialWrite.ok) throw new Error(credentialWrite.error?.message || 'DSH 无法安全保存 ANT 凭证。')
           credentialSaved = true
           await applyAuthorizedModels(result.models, normalized)
+          setAuthorizedModels(result.models)
+          setLastModelSync(new Date())
           setCode('')
           onServiceUrlChange(normalized)
           setCodeRequested(false)
@@ -2101,86 +2055,117 @@ window.__ModuleLoader__.load({
       const canCheckUpdate = bindingReady && credentialConfigured === true && !needsReconnect
       const updateGuideUrl = pinnedServiceUrl
         ? new URL('/ant-update', pinnedServiceUrl).href : null
-      return h('div', { style: { display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 400px), 1fr))', alignItems: 'start', gap: 16 } },
-        h('section', { style: panelStyle },
-          h('div', { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'flex-start', gap: 12 } },
-            h('div', null,
-              h('h3', { style: { margin: 0, fontSize: 16, fontWeight: 650 } }, '团队模型'),
-              h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '使用上方团队服务地址验证工作邮箱并同步授权模型。连接状态变化时可随时刷新。')),
-            h('span', { style: {
-              flexShrink: 0, padding: '4px 9px', borderRadius: 999,
-              color: credentialConfigured === true && bindingReady ? 'var(--dsw-alias-state-success-primary)' : 'var(--dsw-alias-label-secondary)',
-              backgroundColor: credentialConfigured === true && bindingReady ? 'var(--dsw-alias-state-success-tertiary)' : 'var(--dsw-alias-bg-layer-2)',
-              fontSize: 12,
-            } }, credentialConfigured === true ? bindingReady ? '已连接' : '待核对' : credentialConfigured === false ? '未连接' : '检查中')),
-          h('p', { role: 'status', style: mutedTextStyle }, credentialConfigured === true && !bindingReady
-            ? '本机有 ANT 凭证，但尚未确认它绑定的团队；请先完成上方的绑定检查。'
-            : credentialConfigured === true
-            ? 'DSH 已安全保存此设备的 ANT 团队凭证。'
-            : credentialConfigured === false ? '验证工作邮箱后即可连接团队模型。' : '正在检查 ANT 连接状态…'),
-          serviceCompatibility.state !== 'idle' ? h('p', {
-            role: 'status',
-            style: {
-              ...mutedTextStyle,
-              color: serviceCompatibility.state === 'incompatible' ? 'var(--dsw-alias-state-error-primary)' : mutedTextStyle.color,
-            },
-          }, serviceCompatibility.message) : null,
-          credentialConfigured === true && !showConnectForm ? h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8 } },
-            h('button', { type: 'button', disabled: busy || !bindingReady, onClick: () => void refreshModels(), style: primaryButtonStyle }, busy ? '刷新中…' : '刷新团队模型'),
-            h('button', { type: 'button', disabled: busy || !bindingReady, onClick: () => { setReauthenticate(true); setMessage('') }, style: secondaryButtonStyle }, '重新验证邮箱'),
-            h('button', { type: 'button', disabled: busy, onClick: () => { if (window.confirm('断开当前设备与 ANT 的连接？本机 ANT 凭证和模型设置将被清除，团队服务地址会保留。')) void disconnect() }, style: secondaryButtonStyle }, '断开当前设备')) : null,
-          h('section', { style: { display: 'grid', gap: 8, paddingTop: 12, borderTop: '0.5px solid var(--dsw-alias-border-l2)' } },
-            h('div', { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'center', gap: 12 } },
-              h('h4', { style: { margin: 0, fontSize: 14, fontWeight: 650 } }, 'ANT 插件更新'),
-              h('button', { type: 'button', disabled: busy || !canCheckUpdate || bundleUpdate.state === 'checking', onClick: () => void checkBundleUpdate(), style: secondaryButtonStyle }, bundleUpdate.state === 'checking' ? '检查中…' : '检查更新')),
-            !canCheckUpdate ? h('p', { role: 'status', style: mutedTextStyle }, '连接团队后可在这里检查并安装 ANT 更新；需要先恢复插件时，可打开团队管理台的更新指引。') : null,
-            updateGuideUrl ? h('a', { href: updateGuideUrl, target: '_blank', rel: 'noopener noreferrer', style: { color: 'var(--dsw-alias-link)', fontSize: 13 } }, `打开 ${pinnedServiceUrl} 的更新指引 ↗`)
-              : !canCheckUpdate ? h('p', { style: mutedTextStyle }, '无法核对原团队地址时，请向企业管理员索取更新指引。') : null,
-            bundleUpdate.message ? h('p', { role: 'status', style: bundleUpdate.state === 'revoked'
-              ? { ...mutedTextStyle, color: 'var(--dsw-alias-state-error-primary)' } : mutedTextStyle }, bundleUpdate.message) : null,
-            canCheckUpdate && bundleRelease?.version && ['available', 'artifact-missing'].includes(bundleUpdate.state) ? h('div', { style: { display: 'grid', gap: 8 } },
-              h('p', { style: mutedTextStyle }, `发布版本：${bundleRelease.version} · 精确包名：${directInstallSpec(bundleRelease)}`),
-              bundleRelease.release_notes ? h('p', { style: mutedTextStyle }, bundleRelease.release_notes) : null,
-              bundleUpdate.state === 'available'
-                ? h('button', { type: 'button', disabled: busy, onClick: () => void installBundleUpdate(), style: primaryButtonStyle }, busy ? '更新中…' : '更新 ANT') : null) : null),
-          showConnectForm ? h('form', { onSubmit: requestCode, style: { display: 'grid', gap: 9, maxWidth: 560 } },
-            h('label', { htmlFor: 'ant-team-model-email', style: { fontSize: 13, fontWeight: 550 } }, '工作邮箱'),
-            h('input', {
-              id: 'ant-team-model-email', type: 'email', autoComplete: 'email', required: true, value: email,
-              onChange: (event) => setEmail(event.target.value), style: inputStyle,
-            }),
-            h('button', { type: 'submit', disabled: busy || !bindingReady, style: primaryButtonStyle }, busy ? '发送中…' : '发送验证码')) : null,
-          credentialConfigured === true && showConnectForm ? h('button', {
-            type: 'button', disabled: busy,
+      const modelRows = authorizedModels.map((model) => h('div', { key: `${model.protocol}:${model.model_id}`, role: 'listitem',
+        style: { display: 'flex', flexWrap: 'wrap', justifyContent: 'space-between', gap: 12, alignItems: 'center',
+          padding: '10px 2px', borderBottom: '1px solid var(--dsw-alias-border-l2)' } },
+        h('strong', null, model.display_name || model.model_id),
+        h('span', { style: mutedTextStyle }, model.protocol === 'anthropic' ? 'Anthropic' : 'OpenAI'),
+        h('span', { style: mutedTextStyle }, '已同步到 DSH')))
+      const connectionPanel = h('section', { style: { ...panelStyle, display: activeTab === 'connection' ? 'grid' : 'none' } },
+        h('div', null,
+          h('h3', { style: { margin: 0, fontSize: 16, fontWeight: 650 } }, 'ANT 团队账号'),
+          h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '邮箱验证建立这台 DSH 的成员凭证；断开后会清除此设备凭证和同步的模型设置。')),
+        h('span', { role: 'status', style: mutedTextStyle }, credentialConfigured === true && !bindingReady
+          ? '本机有 ANT 凭证，但尚未确认它绑定的团队；请完成上方的绑定检查。'
+          : credentialConfigured === true ? 'DSH 已安全保存此设备的 ANT 团队凭证。'
+            : credentialConfigured === false ? '验证工作邮箱后即可连接团队服务。' : '正在检查 ANT 连接状态…'),
+        serviceCompatibility.state !== 'idle' ? h('p', { role: 'status', style: { ...mutedTextStyle,
+          color: serviceCompatibility.state === 'incompatible' ? 'var(--dsw-alias-state-error-primary)' : mutedTextStyle.color } },
+        serviceCompatibility.message) : null,
+        credentialConfigured === true && !showConnectForm ? h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8 } },
+          h('button', { type: 'button', disabled: busy || !bindingReady,
+            onClick: () => { setReauthenticate(true); setMessage('') }, style: secondaryButtonStyle }, '重新验证邮箱'),
+          h('button', { type: 'button', disabled: busy,
             onClick: () => { if (window.confirm('断开当前设备与 ANT 的连接？本机 ANT 凭证和模型设置将被清除，团队服务地址会保留。')) void disconnect() },
-            style: secondaryButtonStyle,
-          }, '断开当前设备') : null,
-          showConnectForm && codeRequested ? h('form', { onSubmit: connect, style: { display: 'grid', gap: 9, maxWidth: 560 } },
-            h('label', { htmlFor: 'ant-team-model-code', style: { fontSize: 13, fontWeight: 550 } }, '邮箱验证码'),
-            h('input', {
-              id: 'ant-team-model-code', type: 'text', inputMode: 'numeric', autoComplete: 'one-time-code',
-              required: true, maxLength: 8, value: code, placeholder: '8 位验证码',
-              onChange: (event) => setCode(event.target.value.replace(/\D/gu, '').slice(0, 8)), style: inputStyle,
-            }),
-            h('button', { type: 'submit', disabled: busy || !bindingReady || code.length !== 8, style: primaryButtonStyle }, busy ? '连接中…' : '验证并连接')) : null,
-          allowLocalCleanup ? h('section', { style: { ...panelStyle, padding: 14, gap: 9 } },
-            h('p', { style: mutedTextStyle }, savedDeviceId()
-              ? `已保存的设备编号：${savedDeviceId()}。请交给原团队管理员核对。`
-              : '本机无法确认旧设备编号。请让原团队管理员按成员查看设备清单，勿用新编号猜测。'),
-            h('p', { style: mutedTextStyle }, '仅清理本机不会确认服务端令牌已撤销；请先取得管理员确认。'),
-            h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8 } },
-              h('button', { type: 'button', disabled: busy, onClick: () => void clearOnlyLocal(), style: secondaryButtonStyle }, '仅清理本机'),
-              h('button', { type: 'button', disabled: busy || !savedDeviceId(), onClick: async () => {
-                try {
-                  const deviceId = savedDeviceId()
-                  if (!deviceId) throw new Error('device id unavailable')
-                  if (typeof window.navigator?.clipboard?.writeText !== 'function') throw new Error('clipboard unavailable')
-                  await window.navigator.clipboard.writeText(deviceId)
-                  setMessage('设备编号已复制，请发给原团队管理员。')
-                }
-                catch { setMessage(savedDeviceId() ? `请复制设备编号：${savedDeviceId()}` : '本机无法确认旧设备编号，请联系原团队管理员核查。') }
-              }, style: secondaryButtonStyle }, '复制设备编号'))) : null,
-          message ? h('p', { role: 'status', style: mutedTextStyle }, message) : null))
+            style: secondaryButtonStyle }, '断开当前设备')) : null,
+        showConnectForm ? h('form', { onSubmit: requestCode, style: { display: 'grid', gap: 9, maxWidth: 560 } },
+          h('label', { htmlFor: 'ant-team-model-email', style: { fontSize: 13, fontWeight: 550 } }, '工作邮箱'),
+          h('input', { id: 'ant-team-model-email', type: 'email', autoComplete: 'email', required: true, value: email,
+            onChange: (event) => setEmail(event.target.value), style: inputStyle }),
+          h('button', { type: 'submit', disabled: busy || !bindingReady, style: primaryButtonStyle }, busy ? '发送中…' : '发送验证码')) : null,
+        showConnectForm && codeRequested ? h('form', { onSubmit: connect, style: { display: 'grid', gap: 9, maxWidth: 560 } },
+          h('label', { htmlFor: 'ant-team-model-code', style: { fontSize: 13, fontWeight: 550 } }, '邮箱验证码'),
+          h('input', { id: 'ant-team-model-code', type: 'text', inputMode: 'numeric', autoComplete: 'one-time-code',
+            required: true, maxLength: 8, value: code, placeholder: '8 位验证码',
+            onChange: (event) => setCode(event.target.value.replace(/\D/gu, '').slice(0, 8)), style: inputStyle }),
+          h('button', { type: 'submit', disabled: busy || !bindingReady || code.length !== 8, style: primaryButtonStyle }, busy ? '连接中…' : '验证并连接')) : null,
+        credentialConfigured === true && showConnectForm ? h('button', { type: 'button', disabled: busy,
+          onClick: () => { if (window.confirm('断开当前设备与 ANT 的连接？本机 ANT 凭证和模型设置将被清除，团队服务地址会保留。')) void disconnect() },
+          style: secondaryButtonStyle }, '断开当前设备') : null,
+        allowLocalCleanup ? h('section', { style: { ...panelStyle, padding: 14, gap: 9 } },
+          h('p', { style: mutedTextStyle }, savedDeviceId()
+            ? `已保存的设备编号：${savedDeviceId()}。请交给原团队管理员核对。`
+            : '本机无法确认旧设备编号。请让原团队管理员按成员查看设备清单，勿用新编号猜测。'),
+          h('p', { style: mutedTextStyle }, '仅清理本机不会确认服务端令牌已撤销；请先取得管理员确认。'),
+          h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8 } },
+            h('button', { type: 'button', disabled: busy, onClick: () => void clearOnlyLocal(), style: secondaryButtonStyle }, '仅清理本机'),
+            h('button', { type: 'button', disabled: busy || !savedDeviceId(), onClick: async () => {
+              try {
+                const deviceId = savedDeviceId()
+                if (!deviceId) throw new Error('device id unavailable')
+                if (typeof window.navigator?.clipboard?.writeText !== 'function') throw new Error('clipboard unavailable')
+                await window.navigator.clipboard.writeText(deviceId)
+                setMessage('设备编号已复制，请交给原团队管理员。')
+              } catch { setMessage(savedDeviceId() ? `请复制设备编号：${savedDeviceId()}` : '本机无法确认旧设备编号，请联系原团队管理员核查。') }
+            }, style: secondaryButtonStyle }, '复制设备编号'))) : null,
+        message ? h('p', { role: 'status', style: mutedTextStyle }, message) : null)
+
+      const modelPanel = h('section', { style: { ...panelStyle, display: activeTab === 'models' ? 'grid' : 'none' } },
+        h('div', { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'flex-start', gap: 12 } },
+          h('div', null,
+            h('h3', { style: { margin: 0, fontSize: 16, fontWeight: 650 } }, '团队模型'),
+            h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '每个获准模型单独列出；刷新后同步到 DSH 模型选择器。')),
+          h('span', { style: { flexShrink: 0, padding: '4px 9px', borderRadius: 999,
+            color: credentialConfigured === true && bindingReady ? 'var(--dsw-alias-state-success-primary)' : 'var(--dsw-alias-label-secondary)',
+            backgroundColor: credentialConfigured === true && bindingReady ? 'var(--dsw-alias-state-success-tertiary)' : 'var(--dsw-alias-bg-layer-2)',
+            fontSize: 12,
+          } }, credentialConfigured === true ? bindingReady ? '已连接' : '待核对' : credentialConfigured === false ? '未连接' : '检查中')),
+        h('div', { role: 'list', 'aria-label': '获准模型', style: { display: 'grid', gap: 0, borderTop: '1px solid var(--dsw-alias-border-l2)' } },
+          modelRows.length ? modelRows : h('div', { style: { display: 'grid', gap: 8, padding: '12px 0' } },
+            h('p', { style: mutedTextStyle }, credentialConfigured === true && modelMessage.startsWith('正在') ? modelMessage
+              : credentialConfigured === true ? '当前没有已获准模型，请刷新或联系团队管理员。'
+                : '连接并验证工作邮箱后，这里会列出逐个获准模型。'),
+            credentialConfigured !== true ? h('button', { type: 'button', onClick: () => onSelectTab('connection'),
+              style: secondaryButtonStyle }, '前往团队连接') : null)),
+        h('div', { style: { display: 'flex', flexWrap: 'wrap', alignItems: 'center', gap: 10 } },
+          h('button', { type: 'button', disabled: busy || !bindingReady || credentialConfigured !== true,
+            onClick: () => void refreshModels(), style: primaryButtonStyle }, busy ? '刷新中…' : '刷新团队模型'),
+          lastModelSync ? h('span', { style: mutedTextStyle }, `最近同步：${lastModelSync.toLocaleString('zh-CN')}`) : null),
+        modelMessage && !modelMessage.startsWith('正在') ? h('p', { role: 'status', style: mutedTextStyle }, modelMessage) : null)
+
+      const updatePanel = h('section', { style: { ...panelStyle, display: activeTab === 'updates' ? 'grid' : 'none' } },
+        h('div', { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'flex-start', gap: 12 } },
+          h('div', null,
+            h('h3', { style: { margin: 0, fontSize: 16, fontWeight: 650 } }, 'ANT 插件更新'),
+            h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '团队连接就绪后自动检查；有新版时顶部会持续提醒。')),
+          h('span', { style: { ...mutedTextStyle, color: bundleUpdate.state === 'revoked'
+            ? 'var(--dsw-alias-state-error-primary)' : 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-label-secondary))' } },
+          bundleUpdate.state === 'available' ? '有新版' : bundleUpdate.state === 'done' ? '需重启 DSH'
+            : bundleUpdate.state === 'current' ? '已是最新' : bundleUpdate.state === 'revoked' ? '安装包已撤回' : '更新状态')),
+        bundleUpdate.currentVersion ? h('p', { style: mutedTextStyle }, `当前安装版本：${bundleUpdate.currentVersion}`) : null,
+        bundleRelease?.version ? h('p', { style: mutedTextStyle }, `最新发布版本：${bundleRelease.version} · 精确包名：${directInstallSpec(bundleRelease)}`) : null,
+        serviceCompatibility.state !== 'idle' ? h('p', { role: 'status', style: {
+          ...mutedTextStyle,
+          color: serviceCompatibility.state === 'incompatible' ? 'var(--dsw-alias-state-error-primary)' : mutedTextStyle.color,
+        } }, `当前已安装版本与团队服务端协议：${serviceCompatibility.message}`) : null,
+        bundleUpdate.message ? h('p', { role: 'status', style: bundleUpdate.state === 'revoked'
+          ? { ...mutedTextStyle, color: 'var(--dsw-alias-state-error-primary)' } : mutedTextStyle }, bundleUpdate.message) : null,
+        !canCheckUpdate && updateGuideUrl ? h('a', { href: updateGuideUrl, target: '_blank', rel: 'noopener noreferrer',
+          style: { color: 'var(--dsw-alias-link)', fontSize: 13 } }, `打开 ${pinnedServiceUrl} 的更新指引 ↗`) : null,
+        !canCheckUpdate && !updateGuideUrl ? h('p', { style: mutedTextStyle }, '无法核对原团队地址时，请向企业管理员索取更新指引。') : null,
+        !canCheckUpdate ? h('button', { type: 'button', onClick: () => onSelectTab('connection'), style: secondaryButtonStyle },
+          '前往团队连接') : null,
+        canCheckUpdate && bundleRelease?.version && ['available', 'artifact-missing'].includes(bundleUpdate.state)
+          ? h('div', { style: { display: 'grid', gap: 8 } },
+            bundleRelease.release_notes ? h('div', { style: { ...panelStyle, padding: 12 } },
+              h('strong', null, '更新说明'), h('p', { style: mutedTextStyle }, bundleRelease.release_notes)) : null,
+            bundleUpdate.state === 'available'
+              ? h('button', { type: 'button', disabled: busy, onClick: () => void installBundleUpdate(), style: primaryButtonStyle }, busy ? '更新中…' : '更新 ANT') : null) : null,
+        h('button', { type: 'button', disabled: busy || !canCheckUpdate || bundleUpdate.state === 'checking',
+          onClick: () => void checkBundleUpdate(), style: secondaryButtonStyle }, bundleUpdate.state === 'checking' ? '检查中…' : '重新检查更新'))
+
+      return h('div', { style: { display: 'grid', gap: 16, width: '100%' } },
+        connectionPanel, modelPanel, updatePanel)
 
     }