@ai-wendao/ant 0.4.9 → 0.4.11

package/client.js

@@ -7,6 +7,7 @@ window.__ModuleLoader__.load({
     const h = createElement
     const SERVICE_URL_STORAGE_KEY = 'ant-team-service-url'
     const DEVICE_ID_STORAGE_KEY = 'ant-team-device-id'
+    const DEFAULT_MODEL_INITIALIZED_KEY = 'ant-team-default-model-initialized'
     const ANT_BUNDLE_PACKAGE_NAME = '@ai-wendao/ant'
     const ANT_API_PROTOCOL_VERSIONS = [1]
     const PLUGIN_INSTALL_RECORD_PREFIX = 'ant-reviewed-plugin-install:'
@@ -227,6 +228,12 @@ window.__ModuleLoader__.load({
         ? url.href : null
     }
 
+    function pluginInstallSpec(plugin) {
+      if (plugin?.status !== 'published' || typeof plugin.package_name !== 'string'
+        || typeof plugin.version !== 'string' || !plugin.package_name || !plugin.version) return ''
+      return approvedPluginArtifactUrl(plugin) || directInstallSpec(plugin)
+    }
+
     function previouslyInstalledReviewedPlugin(plugin) {
       try { return localStorage.getItem(`${PLUGIN_INSTALL_RECORD_PREFIX}${plugin.id}`) === plugin.artifact_sha256 }
       catch { return false }
@@ -467,12 +474,15 @@ window.__ModuleLoader__.load({
       const [examples, setExamples] = useState('')
       const [taskPrompt, setTaskPrompt] = useState('')
       const [runner, setRunner] = useState('dsh')
+      const [reviewers, setReviewers] = useState(['dsh'])
       const [parameters, setParameters] = useState([])
       const [giteaToken, setGiteaToken] = useState('')
       const [tokenConfigured, setTokenConfigured] = useState(false)
       const [senderScope, setSenderScope] = useState('any')
       const [senderIds, setSenderIds] = useState('')
       const [days, setDays] = useState(7)
+      const [editingCardId, setEditingCardId] = useState(null)
+      const [editingExpiresAt, setEditingExpiresAt] = useState(null)
       const [busy, setBusy] = useState(false)
       const [loading, setLoading] = useState(true)
       const [botLoadError, setBotLoadError] = useState(false)
@@ -548,17 +558,28 @@ window.__ModuleLoader__.load({
       const enrolledCount = enrolled.filter((item) => item.device_bound_to_current
         && connectedBots.some((bot) => bot.fingerprint === item.bot_fingerprint)).length
       const selectedTaskCount = activeCards.filter((card) => card.bot_fingerprint === selectedBot?.fingerprint).length
-      const selectedRunnerNeedsPr = ['codex', 'claude-code'].includes(runner)
+      const nativeReviewerSelected = reviewers.some((item) => ['codex', 'claude-code'].includes(item))
+      const hasPrParameter = parameters.some((item) => item.kind === 'gitea_pr')
       const codexAvailable = executors.some((item) => item.id === 'codex-readonly' && item.available)
       const claudeCodeAvailable = executors.some((item) => item.id === 'claude-code' && item.available)
+      const dshAvailable = executors.some((item) => item.id === 'dsh' && item.available)
       const nativePrUnavailableReason = executors.find((item) => item.reason)?.reason || null
+      const reviewerLabel = (id) => ({ dsh: 'DSH', codex: 'Codex', 'claude-code': 'Claude Code' })[id] || id
+      const cardReviewerSummary = (card) => {
+        const selected = Array.isArray(card.reviewers) && card.reviewers.length ? card.reviewers : [card.runner]
+        return selected.length > 1
+          ? `交叉可用：${selected.map(reviewerLabel).join('、')}；默认 ${reviewerLabel(card.runner)}`
+          : card.runner === 'codex' ? 'Codex PR 快照审查'
+            : card.runner === 'claude-code' ? 'Claude Code PR 快照审查'
+              : 'DSH 文字处理'
+      }
       const requesterSummary = senderScope === 'allowlist'
         ? `仅指定成员：${senderIds.trim() || '尚未填写成员 ID'}`
         : conversationKind === 'group' ? `群 ${groupId || '尚未选择'} 的所有成员` : '任何能私聊此机器人的人'
       const resultRouteSummary = conversationKind === 'group' ? '回复到原群（群内可见）' : '回复到发起任务的私聊'
       const executorSummary = runner === 'codex' ? '本机 Codex · PR 快照'
         : runner === 'claude-code' ? '本机 Claude Code · PR 快照' : 'DSH · 当前授权模型'
-      const resourceSummary = selectedRunnerNeedsPr ? '指定仓库的已核验 PR 快照'
+      const resourceSummary = nativeReviewerSelected ? '指定仓库的已核验 PR 快照'
         : '当前会话中 DSH 实际可见的内容'
       const cardBlockReason = enrollmentLoadError ? '暂时无法核对机器人是否已启用协作，请刷新状态后再试。'
         : !botConnected || !selectedEnrollmentBound ? '先在上方把机器人绑定到这台 DSH。'
@@ -571,20 +592,56 @@ window.__ModuleLoader__.load({
               : parameters.some((rule) => rule.kind === 'gitea_pr')
                 && normalizeServiceUrl(trustedOrigin) !== selectedEnrollment?.gitea_origin
                 ? '请先保存机器人级可信 Gitea 地址；PR 参数会自动使用这个地址。'
-              : selectedRunnerNeedsPr && (parameters.length !== 1 || parameters[0].kind !== 'gitea_pr')
+              : nativeReviewerSelected && (parameters.length !== 1 || parameters[0].kind !== 'gitea_pr')
                 ? 'Codex 和 Claude Code 目前只支持单个 Gitea PR 审查任务。'
-                : selectedRunnerNeedsPr && !parameters[0].required
+                : nativeReviewerSelected && !parameters[0].required
                   ? '本机代码审查的 Gitea PR 编号必须设为必填。'
-                : runner === 'codex' && !codexAvailable
-                  ? '这台 DSH 尚未找到可用的 Codex CLI，请先安装或检查 DSH 的 PATH。'
-                : runner === 'claude-code' && !claudeCodeAvailable
-                  ? '这台 DSH 尚未注册 Claude Code 子代理，请先在 DSH 中安装并启用它。'
+                : reviewers.includes('dsh') && !dshAvailable
+                  ? '这台 DSH 尚未准备好文字审查执行器。'
+                  : reviewers.includes('codex') && !codexAvailable
+                    ? '这台 DSH 尚未找到可用的 Codex CLI，请先安装或检查 DSH 的 PATH。'
+                    : reviewers.includes('claude-code') && !claudeCodeAvailable
+                      ? '这台 DSH 尚未注册 Claude Code 子代理，请先在 DSH 中安装并启用它。'
               : ''
       const loadNames = { bots: '机器人', 'enrolled-bots': '协作启用状态', groups: '群聊列表',
         cards: '任务授权', settings: '团队默认值', executors: '本机执行器',
         'local-settings': '本机设置', status: '最近任务' }
       const updateParameter = (index, patch) => setParameters((current) => current.map((rule, i) => i === index ? { ...rule, ...patch } : rule))
+      const changeReviewer = (id, enabled) => {
+        const next = enabled ? [...reviewers, id] : reviewers.filter((item) => item !== id)
+        if (!next.length) { setMessage('至少保留一位审查 Agent。'); return }
+        setReviewers([...new Set(next)])
+        if (!next.includes(runner)) setRunner(next[0])
+      }
+      const startNewCard = () => {
+        setEditingCardId(null); setEditingExpiresAt(null)
+        setDraftNotice('')
+        setTitle(''); setIntent(''); setExamples(''); setTaskPrompt(''); setRunner('dsh')
+        setReviewers(['dsh'])
+        setParameters([]); setConversationKind('dm'); setGroupId('')
+        setSenderScope('any'); setSenderIds(''); setDays(7); setCreateOpen(true)
+      }
+      const editCard = (card, copy = false) => {
+        setBotId(card.bot_id)
+        setTrustedOrigin(enrolled.find((bot) => bot.bot_id === card.bot_id)?.gitea_origin || '')
+        setEditingCardId(copy ? null : card.id); setEditingExpiresAt(copy ? null : card.expires_at)
+        setTitle(copy ? `${card.title.slice(0, 94)}（副本）` : card.title)
+        if (copy) setDays(7)
+        setIntent(card.intent); setExamples((card.examples || []).join('\n'))
+        setTaskPrompt(card.task_prompt); setRunner(card.runner)
+        setReviewers(Array.isArray(card.reviewers) && card.reviewers.length ? card.reviewers : [card.runner])
+        setParameters((card.parameters || []).map((rule) => ({
+          name: rule.name, kind: rule.kind, required: rule.required,
+          description: rule.description || '', min: rule.min == null ? '' : String(rule.min),
+          max: rule.max == null ? '' : String(rule.max), choices: (rule.choices || []).join(', '),
+          gitea_origin: rule.gitea_origin || '', repository: rule.repository || '',
+        })))
+        setConversationKind(card.conversation_kind); setGroupId(card.conversation_id || '')
+        setSenderScope(card.sender_scope); setSenderIds((card.sender_ids || []).join(', '))
+        setCreateOpen(true)
+      }
       const preparePrExample = () => {
+        setEditingCardId(null); setEditingExpiresAt(null)
         setTitle('审查 Gitea PR 差异')
         setIntent('同事希望查看指定 Gitea PR 的代码差异并获得审查意见。')
         setExamples('请帮我审查 123 号 PR\n看看刚才提到的 PR 有什么风险')
@@ -592,7 +649,13 @@ window.__ModuleLoader__.load({
         setParameters([{ name: 'pr_number', kind: 'gitea_pr', required: true,
           description: '要审查的 PR 编号', min: '1', max: '', choices: '',
           gitea_origin: selectedEnrollment?.gitea_origin || trustedOrigin || '', repository: '' }])
-        setRunner(codexAvailable ? 'codex' : claudeCodeAvailable ? 'claude-code' : 'dsh')
+        const availableReviewers = [
+          ...(codexAvailable ? ['codex'] : []),
+          ...(claudeCodeAvailable ? ['claude-code'] : []),
+        ]
+        const selected = availableReviewers.length ? availableReviewers : ['dsh']
+        setReviewers(selected)
+        setRunner(selected[0])
         setCreateOpen(true)
       }
       const saveGiteaToken = async () => {
@@ -798,6 +861,9 @@ window.__ModuleLoader__.load({
         event.preventDefault()
         setDraftNotice('')
         if (!selectedBot || !botConnected || !selectedEnrollmentBound) { setMessage('请先在这台 DSH 绑定选中的协作机器人。'); return }
+        if (editingCardId && (!editingExpiresAt || editingExpiresAt <= Math.floor(Date.now() / 1000))) {
+          setMessage('这项能力已到期，无法继续编辑；请返回后重新开放一项能力。'); return
+        }
         if (!title.trim() || !intent.trim() || !taskPrompt.trim()) {
           setMessage('请填写能力名称、适用请求说明和处理要求。'); return
         }
@@ -849,45 +915,67 @@ window.__ModuleLoader__.load({
         if (normalized.some((rule) => rule.kind === 'gitea_pr' && !validRepository(rule.repository))) {
           setMessage('Gitea 仓库请填写“团队名/仓库名”，不要包含空格或多余路径。'); return
         }
-        if (['codex', 'claude-code'].includes(runner) && (normalized.length !== 1
-          || normalized[0].kind !== 'gitea_pr' || !normalized[0].required)) {
-          setMessage('Codex 和 Claude Code 目前需要一个必填的 Gitea PR 编号参数。'); return
-        }
-        if (runner === 'codex' && !codexAvailable) {
-          setMessage('这台 DSH 尚未找到可用的 Codex CLI。'); return
+        if (!reviewers.length || !reviewers.includes(runner)) {
+          setMessage('请至少选择一位审查 Agent，并设置普通请求的默认执行方。'); return
         }
-        if (runner === 'claude-code' && !claudeCodeAvailable) {
-          setMessage('这台 DSH 尚未注册 Claude Code 子代理。'); return
+        if (nativeReviewerSelected && (normalized.length !== 1
+          || normalized[0].kind !== 'gitea_pr' || !normalized[0].required)) {
+          setMessage('选择 Codex 或 Claude Code 时，需要一个必填的 Gitea PR 编号参数。'); return
         }
         const scope = conversationKind === 'group' ? `群 ${groupId}` : '私聊'
         const resultDestination = conversationKind === 'group' ? '原群（群内可见）' : '发起任务的私聊'
-        const executionInfo = runner === 'codex'
-          ? 'ANT 会使用这台电脑已登录的 Codex，在已核验 PR Head 的临时完整代码快照中固定只读权限；会传入所有者要求、请求人原话和 PR 差异，不传 Gitea 令牌。'
-          : runner === 'claude-code'
-            ? 'ANT 会调用这台 DSH 已注册的 Claude Code 子代理，在已核验 PR Head 的临时完整代码快照中审查；会传入所有者要求、请求人原话和 PR 差异，不传 Gitea 令牌。它沿用 DSH 中 Claude Code 的本机权限设置；请确认该设置适合由获准成员请求审查。'
-            : '这项任务仅由受限 DSH 处理已提供的文字。'
-        if (!window.confirm(`开放“${title}”后，${requesterSummary}可在${scope}请求，有效期 ${days} 天；结果${resultDestination}。${executionInfo}请确认。`)) return
+        const executionDetails = {
+          dsh: 'DSH 只根据已提供的 PR diff 审查，不读取完整仓库。',
+          codex: 'Codex 使用已核验 PR Head 的临时代码快照，并启用本机固定只读权限；不接收 Gitea 令牌。',
+          'claude-code': 'Claude Code 使用同一份临时代码快照，沿用这台 DSH 的本机权限设置；请确认该权限适合由获准成员请求审查。',
+        }
+        const executionInfo = reviewers.length > 1
+          ? `普通请求默认由 ${reviewerLabel(runner)} 执行；请求人明确说“交叉 review”时，会并行启动 ${reviewers.map(reviewerLabel).join('、')}，分别返回审查结果。${reviewers.map((item) => executionDetails[item]).join(' ')}`
+          : executionDetails[reviewers[0]]
+        const actionDescription = editingCardId
+          ? `更新“${title}”后，${requesterSummary}可在${scope}使用新配置；旧待确认请求将失效，已提交任务继续使用提交时的配置。结果${resultDestination}。到期时间保持为 ${new Date(editingExpiresAt * 1000).toLocaleString('zh-CN')}。`
+          : `开放“${title}”后，${requesterSummary}可在${scope}请求，有效期 ${days} 天；结果${resultDestination}。`
+        if (!window.confirm(`${actionDescription}${executionInfo}请确认。`)) return
         setBusy(true)
         try {
           const response = await fetch('/api/ant-teams/delegation/cards', {
-            method: 'POST', headers: { 'content-type': 'application/json' },
-            body: JSON.stringify({ bot_id: selectedBot.bot_id, bot_fingerprint: selectedBot.fingerprint,
+            method: editingCardId ? 'PUT' : 'POST', headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ ...(editingCardId ? { id: editingCardId } : {}),
+              bot_id: selectedBot.bot_id, bot_fingerprint: selectedBot.fingerprint,
               title, intent, examples: exampleLines,
-              parameters: normalized, task_prompt: taskPrompt, runner, workspace: null,
+              parameters: normalized, task_prompt: taskPrompt, runner, reviewers, workspace: null,
               sender_scope: senderScope, sender_ids: senderScope === 'allowlist'
                 ? senderIds.split(/[\s,，]+/u).filter(Boolean) : [], conversation_kind: conversationKind,
               ...(conversationKind === 'group' ? { conversation_id: groupId } : {}),
-              expires_at: Math.floor(Date.now() / 1000) + Number(days) * 86400 }),
+              expires_at: editingCardId ? editingExpiresAt : Math.floor(Date.now() / 1000) + Number(days) * 86400 }),
           })
           const result = await readLocalJsonResponse(response)
-          if (!response.ok && runner === 'claude-code' && result.code === 'INVALID_REQUEST') {
-            throw new Error('当前团队服务端可能尚不支持 Claude Code 执行方。请管理员升级服务端后刷新重试。')
+          if (!response.ok && reviewers.includes('claude-code') && result.code === 'INVALID_REQUEST') {
+            throw new Error('当前团队服务端可能尚不支持 Claude Code 审查配置。请管理员升级服务端后刷新重试。')
           }
           if (!response.ok) throw new Error(result.message || '能力保存失败。')
-          setTitle(''); setIntent(''); setExamples(''); setTaskPrompt(''); setParameters([]); setRunner('dsh')
+          const savedReviewers = Array.isArray(result.reviewers) && result.reviewers.length
+            ? result.reviewers : [result.runner]
+          if ([...savedReviewers].sort().join('\0') !== [...reviewers].sort().join('\0')) {
+            if (!editingCardId && typeof result.id === 'string') {
+              const cleanup = await fetch('/api/ant-teams/delegation/cards', {
+                method: 'DELETE', headers: { 'content-type': 'application/json' },
+                body: JSON.stringify({ id: result.id }),
+              }).catch(() => null)
+              if (!cleanup?.ok) {
+                await load().catch(() => undefined)
+                throw new Error('团队服务端尚不支持多 Agent 审查配置；旧服务端可能已保存单 Agent 授权，请刷新列表并停止它，再升级 ANT 服务端。')
+              }
+            }
+            throw new Error('当前团队服务端尚不支持多 Agent 审查配置；请管理员升级 ANT 服务端后重试。')
+          }
+          setTitle(''); setIntent(''); setExamples(''); setTaskPrompt(''); setParameters([]); setRunner('dsh'); setReviewers(['dsh'])
+          setEditingCardId(null); setEditingExpiresAt(null)
           await load()
           setCreateOpen(false)
-          setMessage('能力已开放。同事可自然地提出这类请求；参数不完整时机器人会追问。')
+          setMessage(editingCardId
+            ? '能力配置已更新。新请求将使用新配置，已提交任务保留原配置。'
+            : '能力已开放。同事可自然地提出这类请求；参数不完整时机器人会追问。')
         } catch (error) { setMessage(error.message) }
         finally { setBusy(false) }
       }
@@ -904,6 +992,7 @@ window.__ModuleLoader__.load({
         finally { setBusy(false) }
       }
       const copyCardToDraft = (card) => {
+        setEditingCardId(null); setEditingExpiresAt(null)
         const cardBot = bots.find((bot) => bot.fingerprint === card.bot_fingerprint)
         const cardEnrollment = enrolled.find((bot) => bot.bot_fingerprint === card.bot_fingerprint)
         const titleChars = Array.from(`复制：${card.title || '未命名能力'}`)
@@ -915,6 +1004,7 @@ window.__ModuleLoader__.load({
         setExamples(Array.isArray(card.examples) ? card.examples.join('\n') : '')
         setTaskPrompt(card.task_prompt || '')
         setRunner(['dsh', 'codex', 'claude-code'].includes(card.runner) ? card.runner : 'dsh')
+        setReviewers(Array.isArray(card.reviewers) && card.reviewers.length ? card.reviewers : [card.runner || 'dsh'])
         setParameters(Array.isArray(card.parameters) ? card.parameters.map((rule) => ({
           ...rule, min: String(rule.min ?? ''), max: String(rule.max ?? ''), choices: Array.isArray(rule.choices) ? rule.choices.join(',') : String(rule.choices ?? ''),
         })) : [])
@@ -1061,8 +1151,6 @@ window.__ModuleLoader__.load({
             ? `群 ${groups.find((group) => group.group_id === card.conversation_id)?.group_code || card.conversation_id}` : '私聊'
           const requester = card.sender_scope === 'allowlist' ? '指定成员可请求'
             : card.conversation_kind === 'group' ? '群成员可请求' : '可私聊者可请求'
-          const runnerName = card.runner === 'codex' ? '本机 Codex · PR 快照'
-            : card.runner === 'claude-code' ? '本机 Claude Code · PR 快照' : 'DSH 文字处理'
           const parametersText = (card.parameters || []).map((rule) => {
             const constraint = rule.kind === 'gitea_pr' && rule.repository ? `仓库 ${rule.repository}`
               : rule.kind === 'choice' ? `选项 ${(rule.choices || []).join('、')}`
@@ -1081,7 +1169,7 @@ window.__ModuleLoader__.load({
               h('strong', { style: { overflowWrap: 'anywhere' } }, card.title || '未命名能力'),
               h('span', { style: { ...mutedTextStyle, padding: '2px 8px', borderRadius: 999,
                 backgroundColor: 'var(--dsw-alias-bg-layer-2)', color: remainingDaysLabel, whiteSpace: 'nowrap' } }, expiry)),
-            h('span', { style: mutedTextStyle }, `${runnerName} · ${conversation} · ${requester} · 结果回复原${card.conversation_kind === 'group' ? '群' : '私聊'}`),
+          h('span', { style: mutedTextStyle }, `${cardReviewerSummary(card)} · ${conversation} · ${requester} · 结果回复原${card.conversation_kind === 'group' ? '群' : '私聊'}`),
             h('details', null,
               h('summary', { style: { cursor: 'pointer', color: 'var(--dsw-alias-link)', fontSize: 13 } }, '查看配置'),
               h('div', { style: { display: 'grid', gap: 4, paddingTop: 6 } },
@@ -1092,6 +1180,7 @@ window.__ModuleLoader__.load({
                 examplesText ? h('p', { style: mutedTextStyle }, `请求示例：${examplesText}`) : null,
                 card.task_prompt ? h('p', { style: mutedTextStyle }, `处理要求：${card.task_prompt}`) : null))),
           h('div', { style: { display: 'flex', gap: 6, flexWrap: 'wrap', justifyContent: 'flex-end' } },
+            h('button', { type: 'button', disabled: busy, onClick: () => editCard(card), style: secondaryButtonStyle }, '编辑'),
             h('button', { type: 'button', disabled: busy, onClick: () => copyCardToDraft(card), style: secondaryButtonStyle }, '复制'),
             h('button', { type: 'button', disabled: busy, onClick: () => void revokeCard(card), style: secondaryButtonStyle }, '停止')))
         }),
@@ -1127,10 +1216,12 @@ window.__ModuleLoader__.load({
         h('details', { id: 'ant-new-task', open: createOpen,
           onToggle: (event) => setCreateOpen(event.currentTarget.open),
           style: { border: '1px solid var(--dsw-alias-border-l2)', borderRadius: 8, padding: 12 } },
-          h('summary', { id: 'ant-new-task-summary', style: { cursor: 'pointer', fontWeight: 600 } }, '开放一项能力'),
+          h('summary', { id: 'ant-new-task-summary', style: { cursor: 'pointer', fontWeight: 600 } }, editingCardId ? '编辑能力配置' : '开放一项能力'),
         h('div', { style: { display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 320px), 1fr))',
           gap: 16, alignItems: 'start', marginTop: 12 } },
         h('form', { id: 'ant-capability-create-form', onSubmit: createCard, style: { display: 'grid', gap: 9, minWidth: 0 } },
+          editingCardId ? h('p', { role: 'status', style: mutedTextStyle },
+            `保存会生成新的授权版本并停止旧版本；到期时间保持不变：${new Date(editingExpiresAt * 1000).toLocaleString('zh-CN')}。已提交任务继续使用原配置。`) : null,
           h('p', { style: mutedTextStyle }, selectedBot
             ? `当前机器人：${selectedBot.name}${selectedEnrollmentBound ? ' · 已绑定此设备' : ' · 请先绑定到此设备'}`
             : '请先在上方选择机器人并启用协作。'),
@@ -1150,20 +1241,29 @@ window.__ModuleLoader__.load({
             onChange: (event) => setExamples(event.target.value), placeholder: '帮我总结一下刚才的讨论', style: inputStyle })),
           h('label', null, '处理要求', h('textarea', { required: true, maxLength: 4000, rows: 3, value: taskPrompt,
             onChange: (event) => setTaskPrompt(event.target.value), placeholder: '只使用当前会话可见的内容，列出结论和待办', style: inputStyle })),
-          h('label', null, '执行方', h('select', { value: runner,
-            onChange: (event) => setRunner(event.target.value), style: inputStyle },
-            h('option', { value: 'dsh' }, 'DSH · 已提供文字'),
-            h('option', { value: 'codex',
-              disabled: !codexAvailable }, 'Codex · 单个 Gitea PR 完整快照审查试用'),
-            h('option', { value: 'claude-code', disabled: !claudeCodeAvailable },
-              'Claude Code · 单个 Gitea PR 完整快照试用'))),
+          h('fieldset', { style: { ...panelStyle, padding: 10, display: 'grid', gap: 7 } },
+            h('legend', null, '审查 Agent（可多选）'),
+            h('p', { style: mutedTextStyle }, '普通请求使用默认 Agent；明确说“交叉 review”时，所有勾选项会并行审查同一份 PR 快照（至少勾选两位才构成交叉审查，最多三位，并会同时消耗各自的本机或团队模型额度）。'),
+            h('div', { style: { display: 'flex', gap: 14, flexWrap: 'wrap' } },
+              h('label', null, h('input', { type: 'checkbox', 'aria-label': '审查 Agent DSH', checked: reviewers.includes('dsh'), disabled: !dshAvailable && !reviewers.includes('dsh'),
+                onChange: (event) => changeReviewer('dsh', event.target.checked) }), ' DSH · 仅审查已提供的 diff'),
+              h('label', null, h('input', { type: 'checkbox', 'aria-label': '审查 Agent Codex', checked: reviewers.includes('codex'),
+                disabled: (!codexAvailable || !hasPrParameter) && !reviewers.includes('codex'),
+                onChange: (event) => changeReviewer('codex', event.target.checked) }), ' Codex · 完整快照只读审查'),
+              h('label', null, h('input', { type: 'checkbox', 'aria-label': '审查 Agent Claude Code', checked: reviewers.includes('claude-code'),
+                disabled: (!claudeCodeAvailable || !hasPrParameter) && !reviewers.includes('claude-code'),
+                onChange: (event) => changeReviewer('claude-code', event.target.checked) }), ' Claude Code · 使用本机权限审查')),
+            !hasPrParameter ? h('p', { style: mutedTextStyle }, 'Codex 与 Claude Code 需要先添加一个必填的 Gitea PR 编号参数。') : null,
+            reviewers.length > 1 ? h('label', null, '普通请求默认执行方', h('select', { value: runner,
+              onChange: (event) => setRunner(event.target.value), style: inputStyle },
+              ...reviewers.map((item) => h('option', { key: item, value: item }, reviewerLabel(item))))) : null),
           nativePrUnavailableReason ? h('p', { role: 'status', style: mutedTextStyle },
             `${nativePrUnavailableReason}，已禁用 Codex/Claude Code 完整快照选项；可选择 DSH 差异审查。`) : null,
-          runner === 'codex' ? h('p', { role: 'status', style: mutedTextStyle },
-            'Codex 使用这台电脑的登录账号及其用量；ANT 为每项能力维护仓库缓存，每次审查创建固定到 PR Head 的临时代码快照。不会收到 Gitea 令牌；请以这台 DSH 的实际子代理权限为准，只有强制只读隔离已验证时才视为只读。Git LFS 实际文件不会下载。') : null,
-          runner === 'claude-code' ? h('p', { role: 'status', style: mutedTextStyle },
-            'Claude Code 通过 DSH 已注册的子代理运行，可查看本次 PR 的临时代码快照。ANT 不会传 Gitea 令牌；Claude Code 沿用 DSH 提供方的本机权限，不具备 Codex 路径相同的固定只读隔离。Git LFS 实际文件不会下载。') : null,
-          selectedRunnerNeedsPr ? h('p', { role: 'status', style: mutedTextStyle },
+          reviewers.includes('codex') ? h('p', { role: 'status', style: mutedTextStyle },
+            'Codex 使用这台电脑的登录账号及其用量；ANT 为每项能力维护仓库缓存，每次审查创建固定到 PR Head 的临时代码快照。不会收到 Gitea 令牌；Git LFS 实际文件不会下载。') : null,
+          reviewers.includes('claude-code') ? h('p', { role: 'status', style: mutedTextStyle },
+            'Claude Code 通过 DSH 已注册的子代理运行，可查看同一 PR 快照。ANT 不会传 Gitea 令牌；它沿用 DSH 的本机权限设置，不具备 Codex 路径相同的固定只读隔离。Git LFS 实际文件不会下载。') : null,
+          nativeReviewerSelected ? h('p', { role: 'status', style: mutedTextStyle },
             '本机 PR 执行方需要 Gitea granular token 的只读权限 read:repository 和 read:user；read:user 仅用于这台 DSH 获取 Git HTTPS 登录名。') : null,
           h('details', { style: { border: '1px solid var(--dsw-alias-border-l2)', borderRadius: 8, padding: 10 } },
             h('summary', { style: { cursor: 'pointer' } }, '参数与授权范围'),
@@ -1180,7 +1280,7 @@ window.__ModuleLoader__.load({
               onChange: (event) => updateParameter(index, { kind: event.target.value }), style: { ...inputStyle, flex: '1 1 150px' } },
               h('option', { value: 'text' }, '文本'), h('option', { value: 'integer' }, '整数'),
               h('option', { value: 'choice' }, '选项'), h('option', { value: 'gitea_pr' }, 'Gitea PR 编号')),
-            h('label', null, h('input', { type: 'checkbox', checked: rule.required, 'aria-label': '参数必填',
+            h('label', null, h('input', { type: 'checkbox', 'aria-label': '参数必填', checked: rule.required,
               onChange: (event) => updateParameter(index, { required: event.target.checked }) }), ' 必填'),
             ['integer', 'gitea_pr'].includes(rule.kind) ? h('input', { 'aria-label': '最小值', type: 'number', value: rule.min,
               onChange: (event) => updateParameter(index, { min: event.target.value }), placeholder: '最小值', style: { ...inputStyle, width: 120 } }) : null,
@@ -1219,8 +1319,9 @@ window.__ModuleLoader__.load({
             h('option', { value: 'allowlist' }, '指定 IM 用户 ID'))),
           senderScope === 'allowlist' ? h('input', { 'aria-label': '可请求的 IM 用户 ID', required: true, value: senderIds,
             onChange: (event) => setSenderIds(event.target.value), placeholder: '多个 ID 用逗号分隔', style: inputStyle }) : null,
-          h('label', null, '有效期', h('select', { value: days, onChange: (event) => setDays(Number(event.target.value)), style: inputStyle },
-            h('option', { value: 1 }, '1 天'), h('option', { value: 7 }, '7 天'), h('option', { value: 30 }, '30 天')))),
+          editingCardId ? h('p', { style: mutedTextStyle }, `有效期：${new Date(editingExpiresAt * 1000).toLocaleString('zh-CN')}（编辑时保持不变）`)
+            : h('label', null, '有效期', h('select', { value: days, onChange: (event) => setDays(Number(event.target.value)), style: inputStyle },
+              h('option', { value: 1 }, '1 天'), h('option', { value: 7 }, '7 天'), h('option', { value: 30 }, '30 天')))),
         ),
         h('aside', { id: 'ant-authorization-review', role: 'region', 'aria-label': '开放前复核', tabIndex: -1,
           style: { ...settingsPanelStyle, padding: 14, gap: 10,
@@ -1236,7 +1337,7 @@ window.__ModuleLoader__.load({
               ['可请求人', requesterSummary],
               ['执行方', executorSummary],
               ['读取资料', resourceSummary],
-              ['有效期', `${days} 天`],
+              ['有效期', editingCardId ? new Date(editingExpiresAt * 1000).toLocaleString('zh-CN') : `${days} 天`],
               ['回复位置', resultRouteSummary],
             ].map(([label, value]) => h('div', { key: label, style: { display: 'grid', gridTemplateColumns: '84px minmax(0, 1fr)', gap: 8 } },
               h('dt', { style: mutedTextStyle }, label),
@@ -1244,7 +1345,7 @@ window.__ModuleLoader__.load({
           cardBlockReason ? h('p', { role: 'status', style: { ...mutedTextStyle,
             color: 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-label-secondary))' } }, cardBlockReason) : null,
           h('button', { type: 'submit', form: 'ant-capability-create-form', disabled: busy || Boolean(cardBlockReason),
-            style: { ...primaryButtonStyle, width: '100%' } }, '确认并开放能力'))))),
+            style: { ...primaryButtonStyle, width: '100%' } }, editingCardId ? '保存能力修改' : '确认并开放能力'))))),
         h('div', { role: 'region', 'aria-label': '本机处理设置', style: { display: activeTab === 'local' ? 'grid' : 'none', gap: 12 } },
         h('section', { style: { ...settingsPanelStyle, padding: 14 } },
           h('strong', null, 'Gitea 本机凭据'),
@@ -1596,15 +1697,21 @@ window.__ModuleLoader__.load({
       useEffect(() => { void refresh() }, [refreshToken])
       const install = async (plugin) => {
         const artifactUrl = approvedPluginArtifactUrl(plugin)
-        if (!artifactUrl || workingId || uncertainId === plugin.id || completedId === plugin.id) return
+        const installSpec = pluginInstallSpec(plugin)
+        if (!installSpec || workingId || uncertainId === plugin.id || completedId === plugin.id) return
         const manager = remote?.pluginManager
         if (typeof manager?.installBundle !== 'function') {
           setMessage('当前 DSH 未提供插件安装接口，请联系管理员。')
           return
         }
         const local = bundles.find((bundle) => bundle.name === plugin.package_name && bundle.installed)
-        const action = local ? local.version === plugin.version ? '重新安装' : '更新' : '安装'
-        if (!window.confirm(`在这台 DSH ${action}团队审核的 ${plugin.title} ${plugin.version}？插件将在本机运行，完成后需要完全重启 DSH。`)) return
+        const localAhead = local?.version && newerVersion(local.version, plugin.version)
+        const action = localAhead ? '回退到团队版本' : local ? local.version === plugin.version ? '重新安装' : '更新' : '安装'
+        const sourceNotice = artifactUrl
+          ? 'DSH 将安装 ANT 固定的顶层制品。'
+          : `DSH 将优先从 npm 官方源以 ${installSpec} 安装此精确版本，并按其配置回退 registry；依赖版本可能因设备不同。`
+        const updateNotice = 'ANT 不会批准依赖构建脚本；插件自身的更新器或 DSH 原生管理页之后仍可安装其他版本。'
+        if (!window.confirm(`在这台 DSH ${action}团队审核的 ${plugin.title} ${plugin.version}？${sourceNotice}${updateNotice} 插件将在本机运行，完成后需要完全重启 DSH。`)) return
         setWorkingId(plugin.id)
         setMessage(`正在安装 ${plugin.title}，请不要退出 DSH…`)
         try {
@@ -1613,13 +1720,15 @@ window.__ModuleLoader__.load({
           const latest = Array.isArray(catalog?.plugins)
             ? catalog.plugins.find((item) => item.id === plugin.id) : null
           if (!response.ok || latest?.package_name !== plugin.package_name
-            || latest?.version !== plugin.version || latest?.artifact_sha256 !== plugin.artifact_sha256
-            || approvedPluginArtifactUrl(latest) !== artifactUrl) {
+            || latest?.version !== plugin.version || pluginInstallSpec(latest) !== installSpec) {
             throw new Error('插件审核信息已变化，请刷新目录后重试。')
           }
           const requestId = crypto.randomUUID()
           let result
-          try { result = await manager.installBundle(artifactUrl, { enabled: true, requestId }) }
+          const options = artifactUrl
+            ? { enabled: true, requestId }
+            : { enabled: true, requestId, registry: 'https://registry.npmjs.org/' }
+          try { result = await manager.installBundle(installSpec, options) }
           catch { result = null }
           if (!result?.ok) {
             let recovered = null
@@ -1671,7 +1780,9 @@ window.__ModuleLoader__.load({
             return
           }
           await refresh()
-          try { localStorage.setItem(`${PLUGIN_INSTALL_RECORD_PREFIX}${plugin.id}`, plugin.artifact_sha256) } catch {}
+          if (artifactUrl && plugin.artifact_sha256) {
+            try { localStorage.setItem(`${PLUGIN_INSTALL_RECORD_PREFIX}${plugin.id}`, plugin.artifact_sha256) } catch {}
+          }
           setCompletedId(plugin.id)
           setMessage(`${plugin.title} 已安装。请完全退出并重新启动 DSH 后使用。`)
         } catch (error) {
@@ -1682,10 +1793,12 @@ window.__ModuleLoader__.load({
       const visible = plugins.filter((plugin) => {
         const installed = bundles.find((bundle) => bundle.name === plugin.package_name && bundle.installed)
         const artifactUrl = approvedPluginArtifactUrl(plugin)
+        const installSpec = pluginInstallSpec(plugin)
+        const localAhead = installed?.version && newerVersion(installed.version, plugin.version)
         const matches = !query.trim() || `${plugin.title} ${plugin.description} ${plugin.package_name}`.toLowerCase().includes(query.trim().toLowerCase())
         return matches && (activeFilter === 'all' || activeFilter === 'installed' && Boolean(installed)
-          || activeFilter === 'available' && artifactUrl && (!installed || (installed.version && installed.version !== plugin.version))
-          || activeFilter === 'updates' && artifactUrl && installed && installed.version && installed.version !== plugin.version
+          || activeFilter === 'available' && installSpec && !localAhead && (!installed || (installed.version && installed.version !== plugin.version))
+          || activeFilter === 'updates' && installSpec && installed && installed.version && installed.version !== plugin.version && !localAhead
           || activeFilter === 'retired' && plugin.status !== 'published')
       })
       const noMatches = embedded
@@ -1707,7 +1820,7 @@ window.__ModuleLoader__.load({
         embedded ? null : h('div', { style: { display: 'flex', flexWrap: 'wrap', justifyContent: 'space-between', gap: 16 } },
           h('div', null,
             h('h1', { style: { margin: 0, fontSize: 28 } }, '企业精选插件'),
-            h('p', { style: { ...mutedTextStyle, marginTop: 6 } }, '这里展示团队审核过的插件版本及本机状态。')),
+            h('p', { style: { ...mutedTextStyle, marginTop: 6 } }, '这里展示团队审核过的插件版本及本机状态。DSH 0.2.0-rc.2 不会自动更新 Bundle；插件自身的更新器可能绕过此目录安装其他版本。')),
           h('button', { type: 'button', disabled: loading, onClick: () => void refresh(), style: secondaryButtonStyle }, loading ? '读取中…' : '刷新目录')),
         !loading && !plugins.length && !loadError ? embedded
           ? h('p', { role: 'status', style: mutedTextStyle }, '团队暂未发布精选插件。')
@@ -1729,16 +1842,19 @@ window.__ModuleLoader__.load({
             const sameVersion = local?.version === plugin.version
             const security = plugin.status === 'security_withdrawn'
             const artifactUrl = approvedPluginArtifactUrl(plugin)
+            const installSpec = pluginInstallSpec(plugin)
+            const localAhead = local?.version && newerVersion(local.version, plugin.version)
             const sourceKnown = typeof local?.source === 'string'
             const verifiedLocal = sameVersion && artifactUrl && sourceKnown && local.source === artifactUrl
             const recordedInstall = sameVersion && !sourceKnown && previouslyInstalledReviewedPlugin(plugin)
             const status = security ? '已废弃（安全风险）'
-              : plugin.status === 'deprecated' ? '已废弃' : local?.error ? '加载异常' : sameVersion
+              : plugin.status === 'deprecated' ? '已废弃' : local?.error ? '加载异常' : localAhead
+                ? '本机版本高于团队目录版本' : sameVersion
                 ? verifiedLocal ? local.enabled ? '本机已装（团队来源，已启用）' : '本机已装（团队来源，未启用）'
                   : sourceKnown ? '本机同版，来源不同' : recordedInstall
                     ? '本机同版，曾由企业扩展安装；当前 DSH 无法复核来源' : '本机同版，当前 DSH 无法核对来源'
-                : artifactUrl ? local ? local.version ? `可更新 · 本机 ${local.version}` : '本机版本暂无法读取' : '可安装'
-                  : local ? `本机版本 ${local.version || '暂无法读取'}` : '已审核，暂需管理员安装'
+                : installSpec ? local ? local.version ? `可更新 · 本机 ${local.version}` : '本机版本暂无法读取' : artifactUrl ? '可安装' : '可从 npm 安装'
+                  : local ? `本机版本 ${local.version || '暂无法读取'}` : '已发布版本暂不可安装'
             return h('article', { key: plugin.id, style: security
               ? { ...panelStyle, borderColor: 'var(--dsw-alias-label-danger, #d44)' } : panelStyle },
               h('div', { style: { display: 'flex', flexWrap: 'wrap', justifyContent: 'space-between', gap: 8 } },
@@ -1751,6 +1867,10 @@ window.__ModuleLoader__.load({
               h('p', { style: mutedTextStyle }, `${plugin.package_name}@${plugin.version} · 许可证：${plugin.license || '未声明'}`),
               h('p', { style: mutedTextStyle }, `来源：${plugin.source_url || '未提供'} · DSH 版本要求：${plugin.peer_range || '包未声明'}`),
               h('p', { style: mutedTextStyle }, `额外配置：${plugin.requirements || '无'}`),
+              installSpec && !artifactUrl ? h('p', { role: 'note', style: mutedTextStyle },
+                'ANT 通过 DSH 包管理器安装目录中的精确 npm 版本；实际下载和依赖解析由 DSH 执行。ANT 不批准依赖构建脚本；若 DSH 因此拒绝安装，请按 DSH 提示在原生插件管理页处理。插件自身更新器或 DSH 原生管理也可更新到目录外的版本。') : null,
+              plugin.dependencies && artifactUrl ? h('p', { role: 'note', style: mutedTextStyle },
+                '此插件声明了依赖。ANT 固定插件包本身；DSH 会在本机按当前配置解析依赖，不同设备可能得到不同版本。依赖构建脚本由 DSH 单独请求批准。') : null,
               plugin.scripts ? h('p', { style: mutedTextStyle }, `包自身的安装脚本：${plugin.scripts}`) : null,
               plugin.status !== 'published' ? h('p', { role: 'status', style: security
                 ? { ...mutedTextStyle, color: 'var(--dsw-alias-label-danger, #d44)' } : mutedTextStyle },
@@ -1760,16 +1880,17 @@ window.__ModuleLoader__.load({
                 ? '此前曾由企业扩展安装；当前 DSH 无法再次核对来源。正常使用无需重复安装；若后来换过来源，可以重新安装。'
                 : '已装同版且使用正常时无需重复安装；若想改用团队审核包，可自愿安装。') : null,
               h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8 } },
-                artifactUrl && (!local || (local.version && !verifiedLocal))
+                installSpec && (!local || (local.version && local.version !== plugin.version && (!localAhead || artifactUrl))
+                  || (artifactUrl && sameVersion && !verifiedLocal))
                   ? h('button', { type: 'button', disabled: Boolean(workingId) || uncertainId === plugin.id || completedId === plugin.id,
                     onClick: () => void install(plugin), style: primaryButtonStyle },
                   workingId === plugin.id ? '安装中…' : uncertainId === plugin.id ? '先核对安装结果'
                     : completedId === plugin.id ? '重启 DSH 后生效'
-                    : local ? sameVersion ? '按团队审核包重新安装' : '更新到审核版本' : '安装到这台 DSH') : null,
-                plugin.status === 'published' && !local && !artifactUrl
+                    : local ? sameVersion || localAhead ? '按团队审核包重新安装' : '更新到审核版本' : '安装到这台 DSH') : null,
+                plugin.status === 'published' && !local && !installSpec
                   ? h('p', { style: mutedTextStyle }, '如需安装，请联系企业管理员安排。') : null,
                 local || uncertainId === plugin.id ? h('button', { type: 'button', onClick: () => openBundle(plugin.package_name), style: secondaryButtonStyle }, '打开 DSH 插件管理') : null,
-                local && !sameVersion && plugin.status === 'published' && !artifactUrl
+                local && !sameVersion && plugin.status === 'published' && !installSpec
                   ? h('p', { style: mutedTextStyle }, '本机版本与团队审核版本不同；请联系企业管理员核对。') : null))
           })) : !loading && plugins.length && (!embedded || !hasSkillMatches)
           ? h('p', { style: mutedTextStyle }, noMatches) : null))
@@ -1790,6 +1911,11 @@ window.__ModuleLoader__.load({
       const [bundleRelease, setBundleRelease] = useState(null)
       const [bundleUpdate, setBundleUpdate] = useState({ state: 'idle', currentVersion: '', message: '' })
       const [authorizedModels, setAuthorizedModels] = useState([])
+      const [serverDefaultModel, setServerDefaultModel] = useState(null)
+      const [dshDefaultSelection, setDshDefaultSelection] = useState(null)
+      const [defaultModelDraft, setDefaultModelDraft] = useState('')
+      const [defaultModelBusy, setDefaultModelBusy] = useState(false)
+      const [defaultModelMessage, setDefaultModelMessage] = useState('')
       const [lastModelSync, setLastModelSync] = useState(null)
       const [serviceCompatibility, setServiceCompatibility] = useState({ state: 'idle', message: '' })
       const [pinnedServiceUrl, setPinnedServiceUrl] = useState(null)
@@ -1863,27 +1989,87 @@ window.__ModuleLoader__.load({
         return status
       }
 
-      const applyAuthorizedModels = async (models, rawServiceUrl) => {
+      const modelProvider = (model) => model.protocol === 'anthropic' ? 'ant-team-anthropic'
+        : model.openai_api_mode === 'responses' ? 'ant-team-openai-responses' : 'ant-team-openai-chat-completions'
+      const modelSelectionKey = (model) => JSON.stringify({ protocol: model.protocol, model_id: model.model_id })
+      const defaultPreferenceKey = (rawServiceUrl) => `${DEFAULT_MODEL_INITIALIZED_KEY}:${normalizeServiceUrl(rawServiceUrl)}:${savedDeviceId() || ''}`
+      const readDefaultPreference = (rawServiceUrl) => {
+        try { return JSON.parse(localStorage.getItem(defaultPreferenceKey(rawServiceUrl)) || 'null') } catch { return null }
+      }
+      const saveDefaultPreference = (rawServiceUrl, value) => {
+        try { localStorage.setItem(defaultPreferenceKey(rawServiceUrl), JSON.stringify(value)) } catch {}
+      }
+      const modelForProviderSelection = (selection, models) => {
+        if (!selection) return null
+        const exact = models.find((model) => model.model_id === selection.model && modelProvider(model) === selection.provider)
+        if (exact) return exact
+        const legacyProtocol = selection.provider === 'ant-team-openai' || selection.provider?.startsWith('ant-team-openai-')
+          ? 'openai' : selection.provider === 'ant-team-anthropic' ? 'anthropic' : null
+        return legacyProtocol ? models.find((model) => model.protocol === legacyProtocol && model.model_id === selection.model) : null
+      }
+      const readDshDefaultSelection = async () => {
+        if (typeof remote?.settings?.describe !== 'function') throw new Error('当前 DSH 未提供全局默认模型读取接口。')
+        const response = await remote.settings.describe()
+        if (!response?.ok) throw new Error(response?.error?.message || '无法读取这台 DSH 的全局默认模型。')
+        const value = response.value?.namespaces?.find((entry) => entry.ns === 'agent-default-model')?.value
+        return value && typeof value.provider === 'string' && typeof value.model === 'string'
+          ? { provider: value.provider, model: value.model,
+            ...(typeof value.reasoningEffort === 'string' ? { reasoningEffort: value.reasoningEffort } : {}) } : null
+      }
+      const writeDshDefaultModel = async (model) => {
+        const response = await remote.settings.mutate('agent-default-model', [
+          { op: 'set', path: ['provider'], value: modelProvider(model) },
+          { op: 'set', path: ['model'], value: model.model_id },
+          { op: 'unset', path: ['reasoningEffort'] },
+        ], undefined)
+        if (!response?.ok) throw new Error(response?.error?.message || 'DSH 无法保存全局默认模型。')
+        const selection = { provider: modelProvider(model), model: model.model_id }
+        setDshDefaultSelection(selection)
+        setDefaultModelDraft(modelSelectionKey(model))
+        return selection
+      }
+      const applyUserDefaultModel = async (model) => {
+        if (!model || !authorizedModels.some((item) => modelSelectionKey(item) === modelSelectionKey(model))) {
+          setDefaultModelMessage('请选择当前已获准的模型。')
+          return
+        }
+        setDefaultModelBusy(true)
+        try {
+          const selection = await writeDshDefaultModel(model)
+          const preference = readDefaultPreference(serviceUrl) || { initialized: true, serverDefault: '' }
+          const isServerDefault = serverDefaultModel && modelSelectionKey(model) === modelSelectionKey(serverDefaultModel)
+          if (isServerDefault) preference.serverDefault = modelSelectionKey(serverDefaultModel)
+          preference.initialized = true
+          saveDefaultPreference(serviceUrl, preference)
+          setDshDefaultSelection(selection)
+          setDefaultModelMessage(`已将 ${model.display_name || model.model_id} 设为 DSH 全局默认模型。`)
+        } catch (error) {
+          setDefaultModelMessage(error instanceof Error ? error.message : '保存本机默认模型失败。')
+        } finally { setDefaultModelBusy(false) }
+      }
+      const applyAuthorizedModels = async (models, rawServiceUrl, rawDefaultModel = null) => {
         const normalized = normalizeServiceUrl(rawServiceUrl)
         if (!normalized || !Array.isArray(models)) throw new Error('ANT 返回的团队模型目录格式无效。')
         if (typeof remote?.settings?.mutate !== 'function') throw new Error('当前 DSH 版本未提供模型设置接口。')
-        const grouped = {
-          openai: models.filter((model) => model.protocol === 'openai'),
-          anthropic: models.filter((model) => model.protocol === 'anthropic'),
-        }
-        const ops = []
-        for (const protocol of ['openai', 'anthropic']) {
-          const route = protocol === 'openai' ? 'ant-team-openai' : 'ant-team-anthropic'
-          const protocolModels = grouped[protocol]
+        const groups = [
+          { route: 'ant-team-openai-chat-completions', protocol: 'openai', mode: 'chat_completions', api: 'openai-completions' },
+          { route: 'ant-team-openai-responses', protocol: 'openai', mode: 'responses', api: 'openai-responses' },
+          { route: 'ant-team-anthropic', protocol: 'anthropic', api: 'anthropic-messages' },
+        ]
+        const ops = [{ op: 'unset', path: ['providers', 'ant-team-openai'] }]
+        for (const group of groups) {
+          const protocolModels = models.filter((model) => model.protocol === group.protocol
+            && (group.protocol !== 'openai' || (model.openai_api_mode || 'chat_completions') === group.mode))
+          const route = group.route
           if (protocolModels.length === 0) {
             ops.push({ op: 'unset', path: ['providers', route] })
             continue
           }
           ops.push({ op: 'set', path: ['providers', route], value: {
-            displayName: protocol === 'openai' ? 'Lakala (OpenAI)' : 'Lakala (Anthropic)',
+            displayName: group.protocol === 'anthropic' ? 'ANT 团队 · Anthropic' : `ANT 团队 · OpenAI · ${group.mode === 'responses' ? 'Responses' : 'Chat Completions'}`,
             apiKeyEnv: 'ANT_MODEL_API_KEY',
-            api: protocol === 'openai' ? 'openai-completions' : 'anthropic-messages',
-            baseURL: protocol === 'openai'
+            api: group.api,
+            baseURL: group.protocol === 'openai'
               ? new URL('/model-gateway/openai/v1', normalized).toString()
               : new URL('/model-gateway/anthropic', normalized).toString(),
             models: protocolModels.map((model) => ({ id: model.model_id, name: model.display_name })),
@@ -1891,9 +2077,56 @@ window.__ModuleLoader__.load({
         }
         const settingsWrite = await remote.settings.mutate('llm-pi-ai', ops, undefined)
         if (!settingsWrite.ok) throw new Error(settingsWrite.error?.message || 'DSH 无法更新团队模型设置。')
+        const defaultMatch = rawDefaultModel && models.find((model) => model.protocol === rawDefaultModel.protocol
+          && model.model_id === rawDefaultModel.model_id)
+        const serverDefault = defaultMatch || null
+        const initialDefault = defaultMatch || (rawDefaultModel == null ? models[0] : null)
+        setServerDefaultModel(serverDefault)
+        const preference = readDefaultPreference(normalized)
+        let statusMessage = ''
+        let selection
+        if (!preference?.initialized && initialDefault) {
+          const previousDefault = await readDshDefaultSelection()
+          selection = await writeDshDefaultModel(initialDefault)
+          saveDefaultPreference(normalized, { initialized: true, serverDefault: modelSelectionKey(serverDefault || initialDefault), previousDefault })
+          statusMessage = serverDefault
+            ? '已按团队默认模型设置 DSH 全局默认。该 Profile 的新会话会使用此模型；你之后可在此更改，刷新不会覆盖选择。'
+            : '当前无法使用团队默认模型；已用首个获准模型初始化 DSH 全局默认。请管理员检查默认设置和成员授权。'
+        } else {
+          selection = await readDshDefaultSelection()
+          const currentAuthorized = modelForProviderSelection(selection, models)
+          const baseline = models.find((model) => modelSelectionKey(model) === preference?.serverDefault)
+          const stillUsingBaseline = baseline && currentAuthorized && modelSelectionKey(currentAuthorized) === modelSelectionKey(baseline)
+          if (currentAuthorized && selection?.provider !== modelProvider(currentAuthorized)) {
+            selection = await writeDshDefaultModel(currentAuthorized)
+          }
+          if (serverDefault && stillUsingBaseline && modelSelectionKey(serverDefault) !== preference.serverDefault) {
+            selection = await writeDshDefaultModel(serverDefault)
+            saveDefaultPreference(normalized, { ...preference, initialized: true, serverDefault: modelSelectionKey(serverDefault) })
+            statusMessage = '团队默认模型已更新；你尚未设置个人覆盖，因此已同步到 DSH 全局默认。'
+          } else if (selection?.provider?.startsWith('ant-team-') && !currentAuthorized && models.length) {
+            const fallback = serverDefault || models[0]
+            selection = await writeDshDefaultModel(fallback)
+            saveDefaultPreference(normalized, { ...preference, initialized: true,
+              serverDefault: modelSelectionKey(serverDefault || fallback) })
+            statusMessage = serverDefault
+              ? '当前默认模型已失去授权，已恢复为团队默认模型。'
+              : '当前默认模型已失去授权，已改用首个获准模型；请管理员设置团队默认模型。'
+          }
+          const effectiveAuthorized = modelForProviderSelection(selection, models)
+          setDshDefaultSelection(selection)
+          setDefaultModelDraft(effectiveAuthorized ? modelSelectionKey(effectiveAuthorized) : '')
+          if (!serverDefault && !statusMessage) statusMessage = rawDefaultModel
+            ? '团队默认模型不在这台设备的获准范围内；请联系管理员调整模型权限。'
+            : '团队默认模型尚未设置；请联系管理员设置，或在下方选择本机可用的默认模型。'
+          else if (!statusMessage) statusMessage = effectiveAuthorized
+            ? '已保留你选择的 DSH 全局默认模型。'
+            : '当前 DSH 默认不属于 ANT 获准模型；ANT 对话和任务会使用服务端默认模型。'
+        }
+        setDefaultModelMessage(statusMessage)
         try { localStorage.setItem(SERVICE_URL_STORAGE_KEY, normalized) } catch {}
         onServiceUrlChange(normalized)
-        return models.length
+        return { count: models.length, defaultSelection: selection }
       }
 
       const refreshModels = async () => {
@@ -1911,13 +2144,13 @@ window.__ModuleLoader__.load({
             if (response.status === 401) setNeedsReconnect(true)
             throw new Error(result.message || `刷新失败（${response.status}）`)
           }
-          const count = await applyAuthorizedModels(result.models, result.service_url)
+          const sync = await applyAuthorizedModels(result.models, result.service_url, result.default_model)
           setAuthorizedModels(result.models)
           setLastModelSync(new Date())
           setCredentialConfigured(true)
           setNeedsReconnect(false)
           setReauthenticate(false)
-          setModelMessage(`模型目录已刷新，共 ${count} 个获准模型。`)
+          setModelMessage(`模型目录已刷新，共 ${sync.count} 个获准模型。`)
         } catch (error) {
           setModelMessage(error instanceof Error ? error.message : '刷新模型失败，请稍后重试。')
         } finally {
@@ -2071,7 +2304,32 @@ window.__ModuleLoader__.load({
 
       const clearLocalConnection = async () => {
         if (typeof remote?.settings?.mutate !== 'function') throw new Error('DSH 未提供模型设置接口。')
+        const selection = await readDshDefaultSelection()
+        if (selection?.provider?.startsWith('ant-team-')) {
+          const previous = readDefaultPreference(serviceUrl)?.previousDefault
+          const restore = previous && typeof previous.provider === 'string' && typeof previous.model === 'string'
+            && !previous.provider.startsWith('ant-team-')
+          const operations = restore
+            ? [
+              { op: 'set', path: ['provider'], value: previous.provider },
+              { op: 'set', path: ['model'], value: previous.model },
+              previous.reasoningEffort
+                ? { op: 'set', path: ['reasoningEffort'], value: previous.reasoningEffort }
+                : { op: 'unset', path: ['reasoningEffort'] },
+            ]
+            : [
+              { op: 'unset', path: ['provider'] },
+              { op: 'unset', path: ['model'] },
+              { op: 'unset', path: ['reasoningEffort'] },
+            ]
+          const reset = await remote.settings.mutate('agent-default-model', [
+            ...operations,
+          ], undefined)
+          if (!reset.ok) throw new Error(reset.error?.message || 'DSH 全局默认模型未能恢复。')
+        }
         const settingsResult = await remote.settings.mutate('llm-pi-ai', [
+          { op: 'unset', path: ['providers', 'ant-team-openai-chat-completions'] },
+          { op: 'unset', path: ['providers', 'ant-team-openai-responses'] },
           { op: 'unset', path: ['providers', 'ant-team-openai'] },
           { op: 'unset', path: ['providers', 'ant-team-anthropic'] },
         ], undefined)
@@ -2080,6 +2338,8 @@ window.__ModuleLoader__.load({
         const credentialResult = await remote.credentials.unset('ANT_MODEL_API_KEY')
         if (!credentialResult.ok) throw new Error(credentialResult.error?.message || 'ANT 成员凭证未能清除。')
         setCredentialConfigured(false)
+        setAuthorizedModels([]); setServerDefaultModel(null); setDshDefaultSelection(null); setDefaultModelDraft('')
+        try { localStorage.removeItem(`${DEFAULT_MODEL_INITIALIZED_KEY}:${normalizeServiceUrl(serviceUrl)}:${savedDeviceId() || ''}`) } catch {}
         onConnectionChange?.(null)
         setNeedsReconnect(false)
         setReauthenticate(false)
@@ -2259,7 +2519,7 @@ window.__ModuleLoader__.load({
           const credentialWrite = await remote.credentials.set('ANT_MODEL_API_KEY', result.token)
           if (!credentialWrite.ok) throw new Error(credentialWrite.error?.message || 'DSH 无法安全保存 ANT 凭证。')
           credentialSaved = true
-          await applyAuthorizedModels(result.models, normalized)
+          await applyAuthorizedModels(result.models, normalized, result.default_model)
           setAuthorizedModels(result.models)
           setLastModelSync(new Date())
           setCode('')
@@ -2290,13 +2550,14 @@ window.__ModuleLoader__.load({
       const canCheckUpdate = bindingReady && credentialConfigured === true && !needsReconnect
       const updateGuideUrl = pinnedServiceUrl
         ? new URL('/ant-update', pinnedServiceUrl).href : null
+      const currentDshDefaultModel = modelForProviderSelection(dshDefaultSelection, authorizedModels)
       const modelRows = authorizedModels.map((model) => h('div', { key: `${model.protocol}:${model.model_id}`, role: 'listitem',
         style: { display: 'grid', gridTemplateColumns: 'minmax(0, 1fr) minmax(120px, auto) minmax(130px, auto)',
           gap: 12, alignItems: 'center', padding: '10px 2px', borderBottom: '1px solid var(--dsw-alias-border-l2)' } },
         h('strong', { style: { minWidth: 0, overflowWrap: 'anywhere' } }, model.display_name || model.model_id),
         h('span', { style: { display: 'inline-flex', justifySelf: 'start', padding: '3px 8px', borderRadius: 999,
           backgroundColor: 'var(--dsw-alias-bg-layer-2)', color: 'var(--dsw-alias-label-secondary)', fontSize: 12 } },
-        `${model.protocol === 'anthropic' ? 'Anthropic' : 'OpenAI'} 协议`),
+        model.protocol === 'anthropic' ? 'Anthropic Messages' : `OpenAI · ${(model.openai_api_mode || 'chat_completions') === 'responses' ? 'Responses' : 'Chat Completions'}`),
         h('span', { style: { ...mutedTextStyle, textAlign: 'right' } }, '已同步到 DSH')))
       const connectionPanel = h('section', { style: { ...settingsPanelStyle, display: activeTab === 'connection' ? 'grid' : 'none' } },
         h('div', null,
@@ -2360,6 +2621,29 @@ window.__ModuleLoader__.load({
             backgroundColor: credentialConfigured === true && bindingReady ? 'var(--dsw-alias-state-success-tertiary)' : 'var(--dsw-alias-bg-layer-2)',
             fontSize: 12,
           } }, credentialConfigured === true ? bindingReady ? '已连接' : '待核对' : credentialConfigured === false ? '未连接' : '检查中')),
+        h('section', { style: { ...infoNoticeStyle, gap: 8 } },
+          h('div', { style: { display: 'flex', justifyContent: 'space-between', gap: 10, flexWrap: 'wrap', alignItems: 'center' } },
+            h('strong', null, 'ANT 默认模型'),
+            h('span', { style: mutedTextStyle }, serverDefaultModel
+              ? `团队默认：${serverDefaultModel.display_name || serverDefaultModel.model_id}`
+              : '团队默认尚未设置，或当前成员无权使用')),
+          h('p', { style: mutedTextStyle }, '首次同步时，ANT 会用团队默认初始化 DSH 全局默认模型。它会影响该 Profile 的新会话以及 ANT 对话和任务；之后刷新保留你的个人覆盖。'),
+          h('label', { style: { display: 'grid', gap: 5, maxWidth: 720 } }, 'DSH 全局默认模型',
+            h('select', { 'aria-label': 'DSH 全局默认模型', value: defaultModelDraft,
+              disabled: credentialConfigured !== true || !authorizedModels.length || defaultModelBusy || busy,
+              onChange: (event) => setDefaultModelDraft(event.target.value), style: inputStyle },
+              h('option', { value: '' }, '选择获准模型'),
+              ...authorizedModels.map((model) => h('option', { key: modelSelectionKey(model), value: modelSelectionKey(model) },
+                `${model.display_name || model.model_id} · ${model.protocol === 'anthropic' ? 'Anthropic' : (model.openai_api_mode || 'chat_completions') === 'responses' ? 'OpenAI Responses' : 'OpenAI Chat Completions'}`)))),
+          h('div', { style: { display: 'flex', gap: 8, flexWrap: 'wrap', alignItems: 'center' } },
+            h('button', { type: 'button', disabled: defaultModelBusy || !defaultModelDraft,
+              onClick: () => { const chosen = authorizedModels.find((model) => modelSelectionKey(model) === defaultModelDraft); void applyUserDefaultModel(chosen) },
+              style: primaryButtonStyle }, defaultModelBusy ? '保存中…' : '保存为 DSH 全局默认'),
+            h('button', { type: 'button', disabled: defaultModelBusy || !serverDefaultModel
+              || modelSelectionKey(currentDshDefaultModel || {}) === modelSelectionKey(serverDefaultModel),
+              onClick: () => void applyUserDefaultModel(serverDefaultModel), style: secondaryButtonStyle }, '恢复团队默认'),
+            currentDshDefaultModel ? h('span', { style: mutedTextStyle }, `当前 DSH 默认：${currentDshDefaultModel.display_name || currentDshDefaultModel.model_id}`) : null),
+          defaultModelMessage ? h('p', { role: 'status', style: mutedTextStyle }, defaultModelMessage) : null),
         h('div', { role: 'list', 'aria-label': '获准模型', style: { display: 'grid', gap: 0, borderTop: '1px solid var(--dsw-alias-border-l2)' } },
           modelRows.length ? modelRows : h('div', { style: { display: 'grid', gap: 8, padding: '12px 0' } },
             h('p', { style: mutedTextStyle }, credentialConfigured === true && modelMessage.startsWith('正在') ? modelMessage
@@ -2368,7 +2652,7 @@ window.__ModuleLoader__.load({
             credentialConfigured !== true ? h('button', { type: 'button', onClick: () => onSelectTab('connection'),
               style: secondaryButtonStyle }, '前往团队连接') : null)),
         h('div', { style: { display: 'flex', flexWrap: 'wrap', alignItems: 'center', gap: 10 } },
-          h('button', { type: 'button', disabled: busy || !bindingReady || credentialConfigured !== true,
+          h('button', { type: 'button', disabled: busy || defaultModelBusy || !bindingReady || credentialConfigured !== true,
             onClick: () => void refreshModels(), style: primaryButtonStyle }, busy ? '刷新中…' : '刷新团队模型'),
           lastModelSync ? h('span', { style: mutedTextStyle }, `最近同步：${lastModelSync.toLocaleString('zh-CN')}`) : null),
         modelMessage && !modelMessage.startsWith('正在') ? h('p', { role: 'status', style: mutedTextStyle }, modelMessage) : null)