@ai-wendao/ant 0.5.11 → 0.5.12

package/README.md

@@ -2,10 +2,24 @@
 
 ANT (AI-native Teams) connects a DeepSeek Harness Desktop profile to its team's membership and approved models.
 
+## 安装包与更新通道
+
+ANT 同一份源码可发布为 `@ai-wendao/ant` 和 `dsh-ant`，DSH 添加插件时直接输入其中一个包名。两者连接同一 ANT 服务并使用相同业务协议；同一 DSH profile 只安装并启用其中一份，不同时启用两个包，也不使用 npm alias。选择新包不代表自动迁移旧包；需要跨包切换时先另行验证凭证和本机配置的保留流程。
+
+每个包只查询和安装自己的已审核更新。缺省更新指引 `/ant-update` 对应原包；`dsh-ant` 使用 `/ant-update?package_name=dsh-ant`，该指引分发以 `.tgz` 结尾、不带查询参数的 `/api/ant-bundles/dsh-ant/<版本>/package.tgz` 安装地址。服务端须先升级到支持双包的版本；旧服务端返回原包信息时，新包拒绝安装，不跨包回退。历史 `ant` alias 的迁移工具仍只处理 `@ai-wendao/ant`，不用于切换包名。
+
+## DSH 客户端兼容性
+
+当前 Bundle 声明的 DSH 最低版本是 `0.2.1-rc.3`。DSH 会在安装和启动 profile 时检查此范围；低于最低版本时，DSH 插件管理器会报告并跳过 ANT Bundle。高于最低版本的 DSH 不会被版本上限拦截；ANT 只把 `0.2.1-rc.3` 标为已记录的验收基线，其他版本显示为“未验收”。ANT 的“关于”页会检查当前 DSH 与候选 ANT 制品的兼容状态；低于最低版本、版本未知或候选制品未提供范围时，不提供自动更新操作。
+
+`0.2.1-rc.3` 是仓库当前有记录的 DSH 基线。更高的稳定版和预发布版都可以通过最低版本门禁，但在完成对应 Desktop/DSH-IM 验证前仍标为“未验收”。ANT 协作会话还会在实际调用前检查 Session 事件接口；缺少该接口时会提示检查 DSH 兼容状态，不发送协作 prompt。
+
 ## 团队模型默认值
 
 团队管理员在 ANT 控制台设置团队默认模型，并授权成员可用模型。成员第一次在 ANT 插件中同步模型时，团队默认会写入 DSH 的全局默认模型；成员之后可在“团队模型”页选另一项已获准模型。成员也可按 provider 选择同步到本机 DSH 的模型路由；首次升级保留已有路由，关闭某项并刷新后会从本机 Profile 移除，保存了该路由的历史会话可能暂时无法调用，重新启用并刷新可恢复。普通同步保留成员默认选择；若模型被撤销，插件会回到仍获准的团队默认。该默认写入 DSH profile，因此也影响同一 profile 新建的普通 DSH 会话。ANT 对话和任务会额外校验当前用户的获准模型；Codex 与 Claude Code 使用各自执行器的默认模型。
 
+图片输入能力由管理员按团队模型配置；成员默认继承。成员可在“团队模型”页关闭当前 DSH Profile 中单个模型的图片输入，并通过刷新应用；这只限制本机同步，不修改团队设置或授权。管理员未开放图片输入时，成员不能自行打开。
+
 每个 OpenAI 兼容模型可配置 Chat Completions 或 Responses API。旧模型记录在升级后按 Chat Completions 解释；ANT 服务端继续使用原配置的 `/chat/completions` URL，并从相同 API 根路径派生 `/responses` 上游路径。
 
 ## 企业品牌
@@ -36,7 +50,7 @@ ANT Host 只代取 ANT 自己管理的资源。当前 Host Connector 使用成
 
 ## 企业精选技能
 
-团队管理员可在 ANT 管理台从 GitHub 目录、ZIP、TAR、TAR.GZ／TGZ 或单份 `SKILL.md` 导入技能，核对来源、文件和依赖后发布，并为企业技能和插件指定主要用途类别。成员从 DSH 左侧“企业扩展”进入目录，可组合筛选办公文档、编程开发、设计与多媒体、数据分析、协作沟通、写作与营销、自动化与效率、运维与安全或其他类别，同时按来源范围、技能/插件类型和安装状态筛选或搜索。类别只用于发现内容；“本企业”“全市场精选”和“DSH 官方”是独立来源范围。ANT 插件设置页只处理连接、模型和更新。ANT Host 将固定版本的完整文件集放进 DSH 的用户技能目录，并重新核对本机文件；启用本地技能的 DSH 会话随后由原生技能提供者发现和使用。ANT 不用 Host 全局技能列表判断会话是否已发现技能。
+团队管理员可在 ANT 管理台从 GitHub 目录、ZIP、TAR、TAR.GZ／TGZ 或单份 `SKILL.md` 导入技能，核对来源、文件和依赖后发布，并为企业技能和插件指定主要用途类别。成员可从 DSH 主侧栏“ANT”或 ANT Bundle 配置页直接进入团队设置；DSH“设置”中的 ANT 项提供打开 ANT 主页面的快捷入口。主侧栏“企业扩展”继续进入统一目录，可组合筛选办公文档、编程开发、设计与多媒体、数据分析、协作沟通、写作与营销、自动化与效率、运维与安全或其他类别，同时按来源范围、技能/插件类型和安装状态筛选或搜索。类别只用于发现内容；“本企业”“全市场精选”和“DSH 官方”是独立来源范围。ANT Host 将固定版本的完整文件集放进 DSH 的用户技能目录，并重新核对本机文件；启用本地技能的 DSH 会话随后由原生技能提供者发现和使用。ANT 不用 Host 全局技能列表判断会话是否已发现技能。
 
 安装不会自动运行技能脚本或安装 Python、Node 等系统依赖。ANT 只更新或卸载自己管理且本机内容未被修改的技能目录；发现同名个人技能或本机改动时会停止覆盖。
 

package/client.js

@@ -16,9 +16,12 @@ window.__ModuleLoader__.load({
     const BRANDING_SYNC_PATH = '/api/ant-teams/branding'
     const PROVIDER_ROUTES_STORAGE_KEY = 'ant-team-provider-routes'
     const PROVIDER_SYNC_EXCLUSIONS_KEY = 'ant-team-provider-sync-exclusions'
+    const IMAGE_INPUT_OPT_OUTS_KEY = 'ant-team-image-input-opt-outs'
     const DEVICE_ID_STORAGE_KEY = 'ant-team-device-id'
     const DEFAULT_MODEL_INITIALIZED_KEY = 'ant-team-default-model-initialized'
     const ANT_BUNDLE_PACKAGE_NAME = '@ai-wendao/ant'
+    const ANT_SETTINGS_PANEL_ID = 'ant-settings'
+    const ANT_SETTINGS_SECTION_ID = 'ant-team'
     const ANT_API_PROTOCOL_VERSIONS = [1]
     const PLUGIN_INSTALL_RECORD_PREFIX = 'ant-reviewed-plugin-install:'
     const ANT_SETTINGS_TAB_STORAGE_KEY = 'ant-settings-tab'
@@ -259,7 +262,7 @@ window.__ModuleLoader__.load({
     }
 
     function approvedArtifactUrl(release) {
-      const expectedPath = `/api/ant-bundles/${release?.version}/package.tgz`
+      const expectedPath = `/api/ant-bundles/${ANT_BUNDLE_PACKAGE_NAME === 'dsh-ant' ? 'dsh-ant/' : ''}${release?.version}/package.tgz`
       let url
       try { url = new URL(release?.artifact_url) } catch { return null }
       return normalizeServiceUrl(url.origin) === url.origin
@@ -312,6 +315,26 @@ window.__ModuleLoader__.load({
       return deviceId
     }
 
+    function imageInputOptOutPreferenceKey(rawServiceUrl) {
+      const normalized = normalizeServiceUrl(rawServiceUrl)
+      return normalized ? `${IMAGE_INPUT_OPT_OUTS_KEY}:${normalized}:${savedDeviceId() || ''}` : null
+    }
+
+    function readImageInputOptOuts(rawServiceUrl) {
+      const key = imageInputOptOutPreferenceKey(rawServiceUrl)
+      if (!key) return []
+      try {
+        const value = JSON.parse(localStorage.getItem(key) || '[]')
+        return Array.isArray(value) ? value.filter((item) => typeof item === 'string') : []
+      } catch { return [] }
+    }
+
+    function saveImageInputOptOuts(rawServiceUrl, modelKeys) {
+      const key = imageInputOptOutPreferenceKey(rawServiceUrl)
+      if (!key) return
+      try { localStorage.setItem(key, JSON.stringify([...new Set(modelKeys)])) } catch {}
+    }
+
     function TeamServiceConfig({ remote, openInstalledPlugin }) {
       const [activeTab, setActiveTab] = useState(loadAntSettingsTab)
       const [serviceUrl, setServiceUrl] = useState(loadServiceUrl)
@@ -339,6 +362,7 @@ window.__ModuleLoader__.load({
       }
       const updateNeedsAttention = ['available', 'artifact-missing', 'revoked', 'migration-required',
         'unknown', 'failed', 'installing', 'done'].includes(updateSummary?.state)
+        || ['incompatible', 'unknown', 'untested'].includes(updateSummary?.dshCompatibility?.state)
       useEffect(() => {
         let disposed = false
         const revision = bindingRevision.current
@@ -465,24 +489,32 @@ window.__ModuleLoader__.load({
         updateNeedsAttention ? h('section', { role: 'status', 'aria-live': 'polite', style: {
           ...panelStyle, display: 'flex', alignItems: 'center', justifyContent: 'space-between', flexWrap: 'wrap',
           gap: 12, padding: 12, borderColor: updateSummary.state === 'revoked'
+            || updateSummary.dshCompatibility?.state === 'incompatible'
             ? 'var(--dsw-alias-state-error-primary)' : 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-border-l2))',
-          backgroundColor: updateSummary.state === 'revoked'
+          backgroundColor: updateSummary.state === 'revoked' || updateSummary.dshCompatibility?.state === 'incompatible'
             ? 'var(--dsw-alias-state-error-secondary, var(--dsw-alias-bg-module-platform))'
             : 'var(--dsw-alias-state-warning-secondary, var(--dsw-alias-bg-module-platform))',
         } },
         h('div', { style: { display: 'grid', gap: 3, flex: '1 1 300px' } },
-          h('strong', null, updateSummary.state === 'available'
-            ? `有新版 ANT：${updateSummary.currentVersion || '当前版本未知'} → ${updateSummary.version}`
-            : updateSummary.state === 'done' ? `ANT ${updateSummary.version} 已安装，需重启 DSH`
-              : updateSummary.state === 'revoked' ? '当前 ANT 安装包已撤回' : 'ANT 更新需要处理'),
-          h('span', { style: mutedTextStyle }, updateSummary.state === 'available'
-            ? '查看“关于”中的更新说明与兼容要求；安装后需重启 DSH。'
-            : updateSummary.state === 'done' ? '请完全退出并重新启动 DSH 后生效。'
-              : updateSummary.state === 'revoked' ? '打开“关于”查看安全处置方式。'
-                : updateSummary.state === 'artifact-missing' ? '新版安装包尚未审核，请联系管理员。'
-                  : '打开“关于”查看处理方式。')),
+          h('strong', null, updateSummary.dshCompatibility?.state === 'incompatible'
+            ? `当前 DSH ${updateSummary.dshCompatibility.runtime_version || ''} 与 ANT 不兼容`
+            : updateSummary.dshCompatibility?.state === 'unknown' ? '无法确认当前 DSH 与 ANT 的兼容性'
+              : updateSummary.dshCompatibility?.state === 'untested'
+                ? `当前 DSH ${updateSummary.dshCompatibility.runtime_version} 尚未完成 ANT 兼容验收`
+                : updateSummary.state === 'available'
+                  ? `有新版 ANT：${updateSummary.currentVersion || '当前版本未知'} → ${updateSummary.version}`
+                  : updateSummary.state === 'done' ? `ANT ${updateSummary.version} 已安装，需重启 DSH`
+                    : updateSummary.state === 'revoked' ? '当前 ANT 安装包已撤回' : 'ANT 更新需要处理'),
+          h('span', { style: mutedTextStyle }, ['incompatible', 'unknown', 'untested'].includes(updateSummary.dshCompatibility?.state)
+            ? updateSummary.dshCompatibility.message
+            : updateSummary.state === 'available'
+              ? '查看“关于”中的更新说明与兼容要求；安装后需重启 DSH。'
+              : updateSummary.state === 'done' ? '请完全退出并重新启动 DSH 后生效。'
+                : updateSummary.state === 'revoked' ? '打开“关于”查看安全处置方式。'
+                  : updateSummary.state === 'artifact-missing' ? '新版安装包尚未审核，请联系管理员。'
+                    : '打开“关于”查看处理方式。')),
         h('button', { type: 'button', onClick: () => selectSettingsTab('updates'), style: primaryButtonStyle },
-          updateSummary.state === 'available' ? '查看并更新' : '查看处理方式')) : null,
+          updateSummary.state === 'available' ? '查看更新与兼容性' : '查看兼容详情')) : null,
         h('nav', { role: 'tablist', 'aria-label': 'ANT 插件设置', style: {
           display: 'flex', gap: 4, overflowX: 'auto', borderBottom: '1px solid var(--dsw-alias-border-l2)',
         } },
@@ -494,7 +526,9 @@ window.__ModuleLoader__.load({
             borderRadius: '8px 8px 0 0', color: activeTab === tab ? 'var(--dsw-alias-state-business-primary)' : secondaryButtonStyle.color,
             border: '0', borderBottom: activeTab === tab ? '2px solid var(--dsw-alias-state-business-primary)' : '2px solid transparent',
             backgroundColor: 'transparent',
-          } }, tab === 'updates' && updateNeedsAttention ? `${label} · ${updateSummary.state === 'available' ? '有新版' : '需处理'}` : label)))),
+          } }, tab === 'updates' && updateNeedsAttention
+            ? `${label} · ${['incompatible', 'unknown', 'untested'].includes(updateSummary.dshCompatibility?.state)
+              ? '兼容性需处理' : updateSummary.state === 'available' ? '有新版' : '需处理'}` : label)))),
         h('div', { id: 'ant-settings-content', role: 'tabpanel', 'aria-labelledby': `ant-settings-tab-${activeTab}`,
           style: { display: 'grid', gap: activeTab === 'connection' ? 12 : 0 } },
           teamServicePanel,
@@ -2362,10 +2396,18 @@ window.__ModuleLoader__.load({
       const [allowLocalCleanup, setAllowLocalCleanup] = useState(false)
       const [bundleRelease, setBundleRelease] = useState(null)
       const [bundleUpdate, setBundleUpdate] = useState({ state: 'idle', currentVersion: '', message: '' })
+      const [dshCompatibility, setDshCompatibility] = useState({ state: 'checking', runtime_version: null,
+        required_range: null, validated_baseline: null, message: '正在读取 DSH 客户端版本…' })
+      const dshCompatibilityCheckRevision = useRef(0)
       const [authorizedModels, setAuthorizedModels] = useState([])
       const [providerSyncGroups, setProviderSyncGroups] = useState([])
       const [appliedProviderSyncExclusions, setAppliedProviderSyncExclusions] = useState([])
       const [providerSyncDraft, setProviderSyncDraft] = useState([])
+      const [imageInputOptOuts, setImageInputOptOuts] = useState(() => ({
+        serviceUrl: normalizeServiceUrl(serviceUrl),
+        modelKeys: readImageInputOptOuts(serviceUrl),
+      }))
+      const [appliedImageInputOptOuts, setAppliedImageInputOptOuts] = useState(() => readImageInputOptOuts(serviceUrl))
       const [serverDefaultModel, setServerDefaultModel] = useState(null)
       const [dshDefaultSelection, setDshDefaultSelection] = useState(null)
       const [defaultModelDraft, setDefaultModelDraft] = useState('')
@@ -2376,8 +2418,54 @@ window.__ModuleLoader__.load({
       const [pinnedServiceUrl, setPinnedServiceUrl] = useState(null)
 
       useEffect(() => {
-        onUpdateStateChange?.({ ...bundleUpdate, version: bundleRelease?.version || '' })
-      }, [bundleUpdate, bundleRelease, onUpdateStateChange])
+        onUpdateStateChange?.({ ...bundleUpdate, version: bundleRelease?.version || '', dshCompatibility })
+      }, [bundleUpdate, bundleRelease, dshCompatibility, onUpdateStateChange])
+
+      useEffect(() => {
+        const saved = readImageInputOptOuts(serviceUrl)
+        setImageInputOptOuts({ serviceUrl: normalizeServiceUrl(serviceUrl), modelKeys: saved })
+        setAppliedImageInputOptOuts(saved)
+      }, [serviceUrl])
+
+      const inspectDshCompatibility = async (requiredRange = null) => {
+        const revision = ++dshCompatibilityCheckRevision.current
+        try {
+          const response = await fetch('/api/ant-teams/dsh-compatibility', {
+            cache: 'no-store',
+            ...(requiredRange ? { method: 'POST', headers: { 'content-type': 'application/json' },
+              body: JSON.stringify({ required_range: requiredRange }) } : {}),
+          })
+          const result = await readLocalJsonResponse(response)
+          if (!response.ok || !['incompatible', 'range-met', 'untested', 'unknown'].includes(result.state)
+            || typeof result.required_range !== 'string' || typeof result.message !== 'string'
+            || (result.runtime_version !== null && typeof result.runtime_version !== 'string')) {
+            throw new Error('DSH 客户端兼容状态响应无效。')
+          }
+          if (revision === dshCompatibilityCheckRevision.current) setDshCompatibility(result)
+          return result
+        } catch {
+          const result = {
+            state: 'unknown', runtime_version: null,
+            required_range: typeof requiredRange === 'string' ? requiredRange : null, validated_baseline: null,
+            message: '无法读取 DSH 客户端版本；当前不能确认 ANT 与 DSH 兼容。',
+          }
+          if (revision === dshCompatibilityCheckRevision.current) setDshCompatibility(result)
+          return result
+        }
+      }
+
+      const markDshCompatibilityUnknown = (message) => {
+        dshCompatibilityCheckRevision.current += 1
+        const result = { state: 'unknown', runtime_version: null, required_range: null,
+          validated_baseline: null, message }
+        setDshCompatibility(result)
+        return result
+      }
+
+      useEffect(() => {
+        void inspectDshCompatibility()
+        return () => { dshCompatibilityCheckRevision.current += 1 }
+      }, [])
 
       const connectionErrorMessage = (result, status) => {
         const message = result?.message || `请求失败（${status}）`
@@ -2452,6 +2540,19 @@ window.__ModuleLoader__.load({
       const modelSelectionKey = (model) => JSON.stringify({ provider_id: model.provider_id || '', protocol: model.protocol, model_id: model.model_id })
       const defaultPreferenceKey = (rawServiceUrl) => `${DEFAULT_MODEL_INITIALIZED_KEY}:${normalizeServiceUrl(rawServiceUrl)}:${savedDeviceId() || ''}`
       const providerSyncPreferenceKey = (rawServiceUrl) => `${PROVIDER_SYNC_EXCLUSIONS_KEY}:${normalizeServiceUrl(rawServiceUrl)}:${savedDeviceId() || ''}`
+      const toggleModelImageInput = (model, enabled) => {
+        if (model.supports_images !== true) return
+        const normalized = normalizeServiceUrl(serviceUrl)
+        setImageInputOptOuts((current) => {
+          const currentValues = current.serviceUrl === normalized
+            ? current.modelKeys : readImageInputOptOuts(normalized)
+          const next = new Set(currentValues)
+          const key = modelSelectionKey(model)
+          if (enabled) next.delete(key)
+          else next.add(key)
+          return { serviceUrl: normalized, modelKeys: [...next] }
+        })
+      }
       const readDefaultPreference = (rawServiceUrl) => {
         try { return JSON.parse(localStorage.getItem(defaultPreferenceKey(rawServiceUrl)) || 'null') } catch { return null }
       }
@@ -2554,6 +2655,9 @@ window.__ModuleLoader__.load({
         const normalized = normalizeServiceUrl(rawServiceUrl)
         if (!normalized || !Array.isArray(models)) throw new Error('ANT 返回的团队模型目录格式无效。')
         if (typeof remote?.settings?.mutate !== 'function') throw new Error('当前 DSH 版本未提供模型设置接口。')
+        const imageOptOuts = imageInputOptOuts.serviceUrl === normalized
+          ? imageInputOptOuts.modelKeys : readImageInputOptOuts(normalized)
+        const imageOptOutSet = new Set(imageOptOuts)
         const grouped = new Map()
         for (const model of models) {
           const protocol = model.protocol
@@ -2596,6 +2700,12 @@ window.__ModuleLoader__.load({
         const routeConfigurations = new Map()
         const compatibilityRoutes = []
         const providerGroups = []
+        const dshModelConfig = (model) => ({
+          id: model.model_id,
+          name: model.display_name,
+          ...(model.supports_images === true && !imageOptOutSet.has(modelSelectionKey(model))
+            ? { input: ['text', 'image'] } : {}),
+        })
         for (const provider of providers) {
           const route = routeForProvider(provider)
           const api = provider.protocol === 'openai'
@@ -2611,7 +2721,7 @@ window.__ModuleLoader__.load({
             apiKeyEnv: 'ANT_MODEL_API_KEY',
             api,
             baseURL,
-            models: provider.models.map((model) => ({ id: model.model_id, name: model.display_name })),
+            models: provider.models.map(dshModelConfig),
           })
           providerGroups.push({
             key: route,
@@ -2632,7 +2742,7 @@ window.__ModuleLoader__.load({
               apiKeyEnv: 'ANT_MODEL_API_KEY',
               api: 'openai-completions',
               baseURL: new URL('/model-gateway/openai/v1', normalized).toString(),
-              models: defaultOpenaiModels.map((model) => ({ id: model.model_id, name: model.display_name })),
+              models: defaultOpenaiModels.map(dshModelConfig),
             }
             for (const alias of aliases) routeConfigurations.set(alias, legacyChat)
           }
@@ -2729,6 +2839,9 @@ window.__ModuleLoader__.load({
         }
         const settingsWrite = await remote.settings.mutate('llm-pi-ai', ops, undefined)
         if (!settingsWrite.ok) throw new Error(settingsWrite.error?.message || 'DSH 无法更新团队模型设置。')
+        saveImageInputOptOuts(normalized, imageOptOuts)
+        setImageInputOptOuts({ serviceUrl: normalized, modelKeys: imageOptOuts })
+        setAppliedImageInputOptOuts(imageOptOuts)
         try { localStorage.setItem(PROVIDER_ROUTES_STORAGE_KEY, JSON.stringify(routes)) } catch {}
         try { localStorage.setItem(providerSyncPreferenceKey(normalized), JSON.stringify(excludedGroups)) } catch {}
         setProviderSyncGroups(allGroups)
@@ -2843,7 +2956,10 @@ window.__ModuleLoader__.load({
           const validPackageName = release.package_name === ANT_BUNDLE_PACKAGE_NAME
           const validVersion = typeof release.version === 'string'
             && (release.version === '' || /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$/u.test(release.version))
-          if (release.bundle_name !== 'ant' || !validPackageName || !validVersion
+          const validDshRange = release.dsh_engine_range === undefined
+            || (typeof release.dsh_engine_range === 'string' && release.dsh_engine_range.length <= 128
+              && (!release.dsh_engine_range || /^[0-9A-Za-z .+*|,<>=~^\-]+$/u.test(release.dsh_engine_range)))
+          if (release.bundle_name !== 'ant' || !validPackageName || !validVersion || !validDshRange
             || typeof release.install_spec !== 'string' || typeof release.release_notes !== 'string'
             || (release.version && release.install_spec !== legacyInstallSpec)
             || (!release.version && release.install_spec !== '')
@@ -2879,13 +2995,34 @@ window.__ModuleLoader__.load({
                 : `发布版本 ${release.version} 的安装包已因安全问题停用，请等待管理员发布修复版本。` })
             return
           }
+          let compatibility = null
+          if (available && release.dsh_engine_range) {
+            compatibility = await inspectDshCompatibility(release.dsh_engine_range)
+            if (compatibility.state === 'incompatible') {
+              setBundleUpdate({ state: 'incompatible', currentVersion: installed.version,
+                message: `已暂停更新：${compatibility.message}` })
+              return
+            }
+            if (!['range-met', 'untested'].includes(compatibility.state)) {
+              setBundleUpdate({ state: 'unknown', currentVersion: installed.version,
+                message: `无法确认候选版本与当前 DSH 的兼容性，已暂停更新。${compatibility.message}` })
+              return
+            }
+          } else if (available) {
+            const unknown = markDshCompatibilityUnknown(
+              'ANT 服务端没有提供这份候选制品的 DSH 兼容范围，已暂停更新。请管理员发布带有 DSH 兼容声明的制品。')
+            setBundleUpdate({ state: 'unknown', currentVersion: installed.version, message: unknown.message })
+            return
+          }
           const artifactUrl = approvedArtifactUrl(release)
           setBundleUpdate({
             state: available ? artifactUrl ? 'available' : 'artifact-missing' : 'current',
             currentVersion: installed.version,
             message: available
               ? artifactUrl
-                ? `发现新版本 ${release.version}，可直接更新。`
+                ? compatibility?.state === 'untested'
+                  ? `发现新版本 ${release.version}。当前 DSH 版本尚未验收，请核对上方兼容提示后再更新。`
+                  : `发现新版本 ${release.version}，当前 DSH 在兼容范围内。`
                 : `发现新版本 ${release.version}，但管理员尚未提供已审核安装包。请联系管理员。`
               : `当前已是最新发布版本（${installed.version}）。`,
           })
@@ -2896,6 +3033,12 @@ window.__ModuleLoader__.load({
 
       const installBundleUpdate = async () => {
         if (bundleUpdate.state !== 'available') return
+        if (!bundleRelease?.dsh_engine_range) {
+          markDshCompatibilityUnknown('当前 ANT 更新缺少 DSH 兼容范围，已暂停安装。请联系管理员补全发布制品信息。')
+          return
+        }
+        const compatibility = await inspectDshCompatibility(bundleRelease.dsh_engine_range)
+        if (!['range-met', 'untested'].includes(compatibility.state)) return
         const artifactUrl = approvedArtifactUrl(bundleRelease)
         if (!artifactUrl) return
         const manager = remote?.pluginManager
@@ -2943,6 +3086,12 @@ window.__ModuleLoader__.load({
           const outcome = result.value
           if (outcome.application === 'failed' || outcome.application === 'cancelled') {
             const reason = outcome.error?.diagnostic || outcome.packageResult?.output || '安装未完成。'
+            if (outcome.error?.code === 'incompatible-version') {
+              setDshCompatibility((current) => ({ ...current, state: 'incompatible',
+                runtime_version: outcome.error?.runtimeVersion || current.runtime_version,
+                message: `DSH 安装器判定当前客户端${typeof outcome.error?.runtimeVersion === 'string'
+                  && outcome.error.runtimeVersion ? ` ${outcome.error.runtimeVersion} ` : ''}与此 ANT 版本不兼容：${reason}` }))
+            }
             setBundleUpdate((current) => ({ ...current, state: 'failed', message: `更新失败：${reason}` }))
             return
           }
@@ -3249,6 +3398,12 @@ window.__ModuleLoader__.load({
       const appliedExcludedRouteSet = new Set(providerSyncGroups.filter((group) => appliedExcludedGroupSet.has(group.key))
         .flatMap((group) => group.routes))
       const syncedModels = authorizedModels.filter((model) => !appliedExcludedRouteSet.has(modelProvider(model)))
+      const currentImageInputOptOuts = imageInputOptOuts.serviceUrl === normalizeServiceUrl(serviceUrl)
+        ? imageInputOptOuts.modelKeys : readImageInputOptOuts(serviceUrl)
+      const imageInputOptOutSet = new Set(currentImageInputOptOuts)
+      const appliedImageInputOptOutSet = new Set(appliedImageInputOptOuts)
+      const hasPendingImageInputChanges = authorizedModels.some((model) => model.supports_images === true
+        && imageInputOptOutSet.has(modelSelectionKey(model)) !== appliedImageInputOptOutSet.has(modelSelectionKey(model)))
       const hasPendingSyncChanges = [...new Set([...providerSyncDraft, ...appliedProviderSyncExclusions])]
         .some((key) => excludedGroupSet.has(key) !== appliedExcludedGroupSet.has(key))
       const activePrimaryGroupCount = providerSyncGroups.filter((group) => !group.legacy && !excludedGroupSet.has(group.key)).length
@@ -3270,16 +3425,25 @@ window.__ModuleLoader__.load({
           ? compactOpenaiProviderName(model.provider_name)
           : model.provider_name
         const isSynced = !excludedRouteSet.has(modelProvider(model))
+        const imageInputEnabled = model.supports_images === true && !imageInputOptOutSet.has(modelSelectionKey(model))
         return h('div', { key: `${model.provider_id || ''}:${model.protocol}:${model.model_id}`, role: 'listitem',
-          style: { display: 'grid', gridTemplateColumns: 'minmax(0, 1fr) minmax(120px, auto) minmax(130px, auto)',
+          style: { display: 'grid', gridTemplateColumns: 'minmax(0, 1fr) minmax(120px, auto) minmax(190px, auto)',
             gap: 12, alignItems: 'center', padding: '10px 2px', borderBottom: '1px solid var(--dsw-alias-border-l2)' } },
           h('strong', { style: { minWidth: 0, overflowWrap: 'anywhere' } }, `${providerName ? `${providerName} · ` : ''}${model.display_name || model.model_id}`),
           h('span', { style: { display: 'inline-flex', justifySelf: 'start', padding: '3px 8px', borderRadius: 999,
             backgroundColor: 'var(--dsw-alias-bg-layer-2)', color: 'var(--dsw-alias-label-secondary)', fontSize: 12 } },
           model.protocol === 'anthropic' ? 'Anthropic Messages' : `OpenAI · ${model.openai_api_mode === 'responses' ? 'Responses' : 'Chat Completions'}`),
-          h('span', { style: { ...mutedTextStyle, textAlign: 'right' } }, hasPendingSyncChanges
-            ? isSynced ? '刷新后同步到 DSH' : '刷新后从 DSH 移除'
-            : isSynced ? '已同步到 DSH' : '未同步到 DSH'))
+          h('div', { style: { display: 'grid', justifyItems: 'end', gap: 5 } },
+            h('span', { style: mutedTextStyle }, hasPendingSyncChanges
+              ? isSynced ? '刷新后同步到 DSH' : '刷新后从 DSH 移除'
+              : isSynced ? '已同步到 DSH' : '未同步到 DSH'),
+            model.supports_images === true
+              ? h('label', { style: { display: 'flex', alignItems: 'center', gap: 6, cursor: busy ? 'default' : 'pointer' } },
+                h('input', { type: 'checkbox', 'aria-label': `允许 ${model.display_name || model.model_id} 在本机 DSH 接收图片`,
+                  checked: imageInputEnabled, disabled: busy,
+                  onChange: (event) => toggleModelImageInput(model, event.target.checked) }),
+                h('span', { style: mutedTextStyle }, imageInputEnabled ? '本机允许图片输入' : '本机已关闭图片输入'))
+              : h('span', { style: mutedTextStyle }, '团队未开放图片输入')))
       })
       const legacyCompatibilityGroup = providerSyncGroups.find((group) => group.legacy)
       const legacyCompatibilityModels = legacyCompatibilityGroup
@@ -3360,6 +3524,7 @@ window.__ModuleLoader__.load({
           h('div', null,
             h('h3', { style: sectionTitleStyle }, '团队模型'),
             h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '每个获准模型单独列出；刷新后同步到 DSH 模型选择器。'),
+            h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '图片输入默认继承管理员设置；可为本机关闭单个模型的图片输入，不影响团队其他成员。刷新团队模型后生效。'),
             h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '协议与 API 模式按团队模型配置。DSH 的本机设置只影响当前 Profile，不会修改服务器；刷新团队模型会重新同步各模型路由。')),
           h('span', { style: { flexShrink: 0, padding: '4px 9px', borderRadius: 999,
             color: credentialConfigured === true && bindingReady ? 'var(--dsw-alias-state-success-primary)' : 'var(--dsw-alias-label-secondary)',
@@ -3413,6 +3578,8 @@ window.__ModuleLoader__.load({
               onChange: (event) => toggleProviderSyncGroup(group, event.target.checked) }),
             h('span', null, `${label} · ${group.modelCount} 个模型`))
           })) : null,
+        hasPendingImageInputChanges ? h('p', { role: 'status', style: mutedTextStyle },
+          '本机图片输入偏好尚未同步；点击“刷新团队模型”后生效。') : null,
         h('div', { role: 'list', 'aria-label': '获准模型', style: { display: 'grid', gap: 0, borderTop: '1px solid var(--dsw-alias-border-l2)' } },
           modelRows.length ? modelRows : h('div', { style: { display: 'grid', gap: 8, padding: '12px 0' } },
             h('p', { style: mutedTextStyle }, credentialConfigured === true && modelMessage.startsWith('正在') ? modelMessage
@@ -3433,10 +3600,14 @@ window.__ModuleLoader__.load({
 
       const updateStatusLabels = {
         available: '有新版', 'artifact-missing': '等待发布制品', revoked: '安装包已撤回',
-        'migration-required': '需要迁移', unknown: '状态待确认', failed: '检查失败',
+        'migration-required': '需要迁移', incompatible: 'DSH 不兼容', unknown: '状态待确认', failed: '检查失败',
         installing: '正在安装', done: '需重启 DSH', current: '已是最新', checking: '正在检查', none: '尚未发布',
       }
-      const updateStatusNeedsDetails = ['artifact-missing', 'revoked', 'migration-required', 'unknown', 'failed', 'installing', 'done']
+      const dshCompatibilityLabels = {
+        checking: '正在检查 DSH', incompatible: 'DSH 不兼容', 'range-met': '在声明范围内',
+        untested: '版本尚未验收', unknown: 'DSH 版本未知',
+      }
+      const updateStatusNeedsDetails = ['artifact-missing', 'revoked', 'migration-required', 'incompatible', 'unknown', 'failed', 'installing', 'done']
       const updateVersionSummary = bundleUpdate.state === 'available'
         ? `可更新至 ${bundleRelease?.version || '最新版本'}`
         : updateStatusNeedsDetails.includes(bundleUpdate.state) ? '' : bundleUpdate.currentVersion && bundleRelease?.version
@@ -3447,6 +3618,16 @@ window.__ModuleLoader__.load({
           : bundleRelease?.version ? `最新版本 ${bundleRelease.version}` : ''
       const showReleaseNotes = canCheckUpdate && bundleRelease?.version && bundleRelease.release_notes
         && ['current', 'available', 'artifact-missing'].includes(bundleUpdate.state)
+      const dshCompatibilityCard = h('section', { role: 'status', style: {
+        ...feedbackNoticeStyle,
+        color: dshCompatibility.state === 'incompatible' ? 'var(--dsw-alias-state-error-primary)'
+          : dshCompatibility.state === 'range-met' ? 'var(--dsw-alias-state-success-primary)'
+            : 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-label-secondary))',
+      } },
+      h('strong', null, `DSH 客户端兼容性：${dshCompatibilityLabels[dshCompatibility.state] || '状态未知'}`),
+      h('p', { style: mutedTextStyle }, dshCompatibility.message),
+      dshCompatibility.required_range ? h('p', { style: mutedTextStyle },
+        `ANT 要求 ${dshCompatibility.required_range}；已记录基线 ${dshCompatibility.validated_baseline || '未知'}。`) : null)
       const updatePanel = h('section', { style: { ...settingsPanelStyle, display: activeTab === 'updates' ? 'grid' : 'none' } },
         h('div', { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'flex-start', gap: 12 } },
           h('div', null,
@@ -3454,9 +3635,11 @@ window.__ModuleLoader__.load({
             h('p', { style: { ...mutedTextStyle, marginTop: 4 } }, '查看版本、更新说明和兼容状态。')),
           h('span', { style: { ...mutedTextStyle, flexShrink: 0,
             color: bundleUpdate.state === 'revoked' || serviceCompatibility.state === 'incompatible'
+              || dshCompatibility.state === 'incompatible'
               ? 'var(--dsw-alias-state-error-primary)' : mutedTextStyle.color } },
           updateStatusLabels[bundleUpdate.state] || '等待检查')),
         updateVersionSummary ? h('p', { style: { ...mutedTextStyle, color: 'var(--dsw-alias-label-primary)', fontWeight: 550 } }, updateVersionSummary) : null,
+        dshCompatibilityCard,
         showReleaseNotes ? h('section', { style: { ...infoNoticeStyle, padding: 12 } },
         h('strong', { style: { fontSize: 14, lineHeight: 1.4 } }, '本版更新'),
         h('p', { style: mutedTextStyle }, bundleRelease.release_notes)) : null,
@@ -3473,7 +3656,9 @@ window.__ModuleLoader__.load({
         !canCheckUpdate ? h('button', { type: 'button', onClick: () => onSelectTab('connection'), style: secondaryButtonStyle },
           '前往团队连接') : null,
         canCheckUpdate && bundleUpdate.state === 'available'
-          ? h('button', { type: 'button', disabled: busy, onClick: () => void installBundleUpdate(), style: primaryButtonStyle }, busy ? '更新中…' : '更新 ANT') : null,
+          ? h('button', { type: 'button', disabled: busy || !bundleRelease?.dsh_engine_range
+            || !['range-met', 'untested'].includes(dshCompatibility.state),
+            onClick: () => void installBundleUpdate(), style: primaryButtonStyle }, busy ? '更新中…' : '更新 ANT') : null,
         h('button', { type: 'button', disabled: busy || !canCheckUpdate || bundleUpdate.state === 'checking',
           onClick: () => void checkBundleUpdate(), style: secondaryButtonStyle }, bundleUpdate.state === 'checking' ? '正在检查…' : '检查更新'))
 
@@ -3489,6 +3674,13 @@ window.__ModuleLoader__.load({
       } }, '✦')
     }
 
+    function AntSettingsPanelIcon({ size }) {
+      return h('span', { 'aria-hidden': true, style: {
+        display: 'inline-grid', placeItems: 'center', width: size, height: size,
+        color: 'var(--dsw-alias-brand-primary)', fontSize: size * 0.82, fontWeight: 700, lineHeight: 1,
+      } }, 'A')
+    }
+
     function EnterpriseExtensionsPage({ remote, onBack, openBundle }) {
       const [tab, setTab] = useState('all')
       const [query, setQuery] = useState('')
@@ -3698,15 +3890,41 @@ window.__ModuleLoader__.load({
         settings: ctx.remote.settings,
         pluginManager: ctx.remote.pluginManager,
       }
+      const openAntSettings = () => ctx.layout.selectPanel(ANT_SETTINGS_PANEL_ID)
+      const renderAntSettings = () => h(TeamServiceConfig, {
+        remote,
+        openInstalledPlugin: (name) => ctx.pluginNavigation.openBundle(name),
+      })
+      const renderAntPanel = () => h('section', { 'aria-label': 'ANT 团队设置', style: {
+        height: '100%', overflowY: 'auto', boxSizing: 'border-box',
+        padding: 'calc(var(--dsh-frame-top-clearance, 0px) + 20px) clamp(16px, 3vw, 36px) 48px',
+      } }, h('div', { style: { maxWidth: 1120, margin: '0 auto' } }, renderAntSettings()))
+      const renderAntSettingsShortcut = ({ close } = {}) => h('section', { style: {
+        display: 'grid', gap: 10, width: '100%', maxWidth: 620,
+      } },
+      h('h2', { style: sectionTitleStyle }, 'ANT 团队设置'),
+      h('p', { style: mutedTextStyle }, '团队连接、模型、协作与本机任务在左侧 ANT 页面中统一管理。'),
+      h('button', { type: 'button', onClick: () => {
+        close?.()
+        openAntSettings()
+      }, style: primaryButtonStyle }, '打开 ANT 设置'))
+      ctx.slots.inject('main', () => ctx.slots.register({ name: 'main', key: ANT_SETTINGS_PANEL_ID }, renderAntPanel))
+      ctx.slots.inject('sidebar.panellist', () => ctx.slots.register({
+        name: 'sidebar.panellist', id: ANT_SETTINGS_PANEL_ID, order: 4, label: 'ANT',
+      }, AntSettingsPanelIcon))
       ctx.slots.inject('main', () => ctx.slots.register({ name: 'main', key: 'ant-skills' },
         () => h(EnterpriseExtensionsPage, {
           remote,
-          onBack: () => ctx.pluginNavigation.openBundle(ANT_BUNDLE_PACKAGE_NAME),
+          onBack: openAntSettings,
           openBundle: (name) => ctx.pluginNavigation.openBundle(name),
         })))
       ctx.slots.inject('sidebar.panellist', () => ctx.slots.register({
         name: 'sidebar.panellist', id: 'ant-skills', order: 5, label: '企业扩展',
       }, EnterpriseExtensionsPanelIcon))
+      ctx.slots.inject('settings.section', () => ctx.slots.register({
+        name: 'settings.section', id: ANT_SETTINGS_SECTION_ID, order: 40,
+        label: `ANT (${ANT_BUNDLE_PACKAGE_NAME})`,
+      }, renderAntSettingsShortcut))
       ctx.slots.inject('plugins.bundle.config', () => ctx.slots.register({
           name: 'plugins.bundle.config',
           key: ANT_BUNDLE_PACKAGE_NAME,

package/conversation.js

@@ -258,25 +258,76 @@ function registerConversationTool(agent, sessionId, name, description, parameter
   })
 }
 
-async function prompt(ctx, sessionId, content, signal) {
+export async function promptAndCollectSessionTurn(ctx, sessionId, signal, timeoutMs,
+  timeoutMessage, submitPrompt, abortMessage = null) {
   signal.throwIfAborted()
-  const before = ctx.sessions.get(sessionId)?.snapshotEvents?.().length || 0
-  await ctx.sessionController.prompt({ sessionId, requestId: randomUUID(), mode: 'queue',
-    content: [{ type: 'text', text: content }] }, signal)
-  const deadline = Date.now() + MODEL_TIMEOUT_MS
-  while (Date.now() < deadline) {
-    signal.throwIfAborted()
-    const events = ctx.sessions.get(sessionId)?.snapshotEvents?.().slice(before) || []
-    const ended = events.findLast((event) => event.type === 'turn/end')
-    if (ended) {
-      if (ended.data?.reason?.kind !== 'completed') throw new Error('DSH 未完成这次对话。')
-      const result = assistantText(events)
-      if (!result) throw new Error('DSH 没有返回内容。')
-      return result
+  const agent = ctx.agents?.get?.(sessionId)
+  const session = agent?.session
+  if (session?.id !== sessionId || typeof agent?.ctx?.on !== 'function') {
+    throw new Error('当前 DSH 未提供 ANT 协作会话所需的本机会话事件接口。请查看 ANT“关于”中的 DSH 兼容状态并更新客户端。')
+  }
+
+  const requestId = randomUUID()
+  const events = []
+  let inputAccepted = false
+  let settled = false
+  let resolveTurn
+  let rejectTurn
+  const turn = new Promise((resolve, reject) => {
+    resolveTurn = resolve
+    rejectTurn = reject
+  })
+  void turn.catch(() => {})
+
+  const resolve = (value) => {
+    if (settled) return
+    settled = true
+    resolveTurn(value)
+  }
+  const reject = (error) => {
+    if (settled) return
+    settled = true
+    rejectTurn(error)
+  }
+  const onSessionEvent = (observedSession, event) => {
+    if (observedSession !== session) return
+    if (!inputAccepted) {
+      if (event.type === 'user/message' && event.data?.source?.rpcId === requestId) {
+        inputAccepted = true
+        events.push(event)
+      }
+      return
     }
-    await new Promise((resolve) => setTimeout(resolve, 500))
+    events.push(event)
+    if (event.type === 'turn/end') resolve(events)
+  }
+
+  const dispose = agent.ctx.on('session/event', onSessionEvent)
+  const onAbort = () => reject(abortMessage ? new Error(abortMessage)
+    : signal.reason ?? new Error('DSH 对话已取消。'))
+  let timeout
+  signal.addEventListener('abort', onAbort, { once: true })
+  try {
+    signal.throwIfAborted()
+    await submitPrompt(requestId)
+    if (!settled) timeout = setTimeout(() => reject(new Error(timeoutMessage)), timeoutMs)
+    return await turn
+  } finally {
+    clearTimeout(timeout)
+    signal.removeEventListener('abort', onAbort)
+    if (typeof dispose === 'function') dispose()
   }
-  throw new Error('DSH 对话等待超时。')
+}
+
+async function prompt(ctx, sessionId, content, signal) {
+  const events = await promptAndCollectSessionTurn(ctx, sessionId, signal, MODEL_TIMEOUT_MS,
+    'DSH 对话等待超时。', (requestId) => ctx.sessionController.prompt({ sessionId, requestId, mode: 'queue',
+      content: [{ type: 'text', text: content }] }, signal))
+  const ended = events.findLast((event) => event.type === 'turn/end')
+  if (ended?.data?.reason?.kind !== 'completed') throw new Error('DSH 未完成这次对话。')
+  const result = assistantText(events)
+  if (!result) throw new Error('DSH 没有返回内容。')
+  return result
 }
 
 export function teamModelProvider(model) {

package/delegation.js

@@ -5,7 +5,8 @@ import { dirname, join, resolve } from 'node:path'
 import { spawn } from 'node:child_process'
 import { CONVERSATION_TOOL_NAMES, TASK_DRAFT_TTL_MS, cancelSession, conversationKey,
   buildTaskContext, cardReviewers, createConversationEngine, giteaPullRequestContext, isHelpRequest,
-  modelFor, requestsPrivateReply, teamModelProvider, truncateTaskOutput } from './conversation.js'
+  modelFor, requestsPrivateReply, teamModelProvider, truncateTaskOutput,
+  promptAndCollectSessionTurn } from './conversation.js'
 
 const MAX_DIFF_BYTES = 240_000
 const MAX_GITEA_JSON_BYTES = 64_000
@@ -949,35 +950,24 @@ export async function runDshPrReview(ctx, grant, material, model, sessionIds, si
     agent.ctx.tools.restrict({ allow: [] })
     agent.ctx.tools.guard(() => 'ANT 委托任务不能调用 DSH 工具。')
     await ctx.sessionController.selectModel({ sessionId, provider: teamModelProvider(model), model: model.model_id })
-    await ctx.sessionController.prompt({ sessionId, requestId: randomUUID(), mode: 'queue',
-      content: [{ type: 'text', text: buildTaskContext(task || legacyPrReviewTask(grant), {
+    const events = await promptAndCollectSessionTurn(ctx, sessionId, signal, MODEL_TIMEOUT_MS,
+      'DSH 任务等待超时。', (requestId) => ctx.sessionController.prompt({ sessionId, requestId, mode: 'queue',
+        content: [{ type: 'text', text: buildTaskContext(task || legacyPrReviewTask(grant), {
         parameters: task?.parameters || {},
         resources: [giteaPullRequestContext(grant, material, false)],
         runtime: { filesystem: '不可用', git: '不可用', network: 'disabled', tools: [] },
-      }) }] }, signal)
-    const deadline = Date.now() + MODEL_TIMEOUT_MS
-    while (Date.now() < deadline) {
-      if (signal.aborted) throw new Error('任务已取消。')
-      const session = ctx.sessions.get(sessionId)
-      const events = session?.snapshotEvents?.() || []
-      const ended = events.findLast((event) => event.type === 'turn/end')
-      if (ended) {
-        if (ended.data?.reason?.kind !== 'completed') {
-          throw new Error('DSH 未完成这项任务。')
-        }
-        const response = events.filter((event) => event.type === 'assistant/message')
-          .flatMap((event) => event.data?.message?.content || [])
-          .filter((block) => block.type === 'text')
-          .map((block) => block.text)
-          .join('\n').trim()
-        if (!response) throw new Error('DSH 没有返回可展示的任务结果。')
-        completed = true
-        const heading = task?.card?.title || `PR #${grant.pr_number} 资源任务`
-        return truncateTaskOutput(`${heading}（${material.sha.slice(0, 8)}）\n${response}`, MAX_REPLY_LENGTH)
-      }
-      await new Promise((resolve) => setTimeout(resolve, 500))
-    }
-    throw new Error('DSH 任务等待超时。')
+      }) }] }, signal), '任务已取消。')
+    const ended = events.findLast((event) => event.type === 'turn/end')
+    if (ended?.data?.reason?.kind !== 'completed') throw new Error('DSH 未完成这项任务。')
+    const response = events.filter((event) => event.type === 'assistant/message')
+      .flatMap((event) => event.data?.message?.content || [])
+      .filter((block) => block.type === 'text')
+      .map((block) => block.text)
+      .join('\n').trim()
+    if (!response) throw new Error('DSH 没有返回可展示的任务结果。')
+    completed = true
+    const heading = task?.card?.title || `PR #${grant.pr_number} 资源任务`
+    return truncateTaskOutput(`${heading}（${material.sha.slice(0, 8)}）\n${response}`, MAX_REPLY_LENGTH)
   } finally {
     if (!completed) await cancelSession(ctx, sessionId)
     sessionIds.delete(sessionId)

package/index.js

@@ -11,6 +11,7 @@ export const inject = []
 const MODEL_SYNC_PATH = '/api/ant-teams/models'
 const BRANDING_PATH = '/api/ant-teams/branding'
 const SERVICE_INFO_PATH = '/api/ant-teams/service-info'
+const DSH_COMPATIBILITY_PATH = '/api/ant-teams/dsh-compatibility'
 const BUNDLE_RELEASE_PATH = '/api/ant-teams/bundle-release'
 const CONNECTION_ORIGIN_PATH = '/api/ant-teams/connection-origin'
 const DISCONNECT_PATH = '/api/ant-teams/disconnect'
@@ -34,7 +35,10 @@ const DELEGATION_EXECUTORS_PATH = '/api/ant-teams/delegation/executors'
 const DELEGATION_LOCAL_SETTINGS_PATH = '/api/ant-teams/delegation/local-settings'
 const DELEGATION_CANCEL_PATH = '/api/ant-teams/delegation/cancel'
 const ANT_NPM_PACKAGE_NAME = '@ai-wendao/ant'
-const BUNDLE_VERSION = createRequire(import.meta.url)('./package.json').version
+const BUNDLE_MANIFEST = createRequire(import.meta.url)('./package.json')
+const BUNDLE_VERSION = BUNDLE_MANIFEST.version
+const DSH_ENGINE_RANGE = BUNDLE_MANIFEST.engines?.dsh
+const DSH_VALIDATED_BASELINE = '0.2.1-rc.3'
 const MAX_MODEL_RESPONSE_BYTES = 1024 * 1024
 const MODEL_TOKEN_REF = 'ANT_MODEL_API_KEY'
 const SERVICE_RECORD_KEY = 'ant/team-service'
@@ -48,6 +52,71 @@ function jsonResponse(status, value) {
   })
 }
 
+export async function readDshCompatibility(requiredRange = DSH_ENGINE_RANGE,
+  loadAppBoot = () => import('@deepseek-ai/dsh-app-boot')) {
+  try {
+    const appBoot = await loadAppBoot()
+    if (typeof appBoot.getDshRuntimeVersion !== 'function'
+      || typeof appBoot.evaluatePluginCompatibility !== 'function'
+      || typeof requiredRange !== 'string' || !requiredRange) throw new Error('DSH 兼容检查接口不可用。')
+    const runtimeVersion = appBoot.getDshRuntimeVersion()
+    if (typeof runtimeVersion !== 'string' || !runtimeVersion || runtimeVersion.length > 64) {
+      throw new Error('DSH 客户端版本无效。')
+    }
+    const candidateManifest = {
+      ...BUNDLE_MANIFEST,
+      engines: { ...BUNDLE_MANIFEST.engines, dsh: requiredRange },
+    }
+    const issue = appBoot.evaluatePluginCompatibility(candidateManifest, {}, runtimeVersion)
+    if (issue) {
+      return {
+        state: 'incompatible', runtime_version: runtimeVersion,
+        required_range: requiredRange, validated_baseline: DSH_VALIDATED_BASELINE,
+        message: `当前 DSH ${runtimeVersion} 不满足 ANT 要求 ${requiredRange}。请先更新 DSH，再安装或启用 ANT。`,
+      }
+    }
+    if (runtimeVersion === DSH_VALIDATED_BASELINE) {
+      return {
+        state: 'range-met', runtime_version: runtimeVersion,
+        required_range: requiredRange, validated_baseline: DSH_VALIDATED_BASELINE,
+        message: `当前 DSH ${runtimeVersion} 满足 ANT 声明范围；本次 Session 事件改动尚未做真机验收。`,
+      }
+    }
+    return {
+      state: 'untested', runtime_version: runtimeVersion,
+      required_range: requiredRange, validated_baseline: DSH_VALIDATED_BASELINE,
+      message: `当前 DSH ${runtimeVersion} 满足 ANT 声明范围 ${requiredRange}，但不是项目已记录的验收基线 ${DSH_VALIDATED_BASELINE}。`,
+    }
+  } catch {
+    return {
+      state: 'unknown', runtime_version: null,
+      required_range: typeof requiredRange === 'string' ? requiredRange : null,
+      validated_baseline: DSH_VALIDATED_BASELINE,
+      message: '无法读取 DSH 客户端版本；当前不能确认 ANT 与 DSH 兼容。',
+    }
+  }
+}
+
+async function fetchDshCompatibility(request) {
+  let requiredRange = DSH_ENGINE_RANGE
+  if (request.method === 'POST') {
+    let body
+    try {
+      const text = await request.text()
+      if (text.length > 4096) return jsonResponse(413, { message: 'DSH 兼容检查请求过大。' })
+      body = JSON.parse(text)
+    } catch {
+      return jsonResponse(400, { message: 'DSH 兼容检查请求格式无效。' })
+    }
+    requiredRange = body?.required_range
+    if (typeof requiredRange !== 'string' || requiredRange.length > 128
+      || !/^[0-9A-Za-z .+*|,<>=~^\-]+$/u.test(requiredRange)) {
+      return jsonResponse(400, { message: 'ANT 制品的 DSH 兼容范围无效。' })
+    }
+  }
+  return jsonResponse(200, await readDshCompatibility(requiredRange))
+}
+
 function modelProviderConfigHeader(request) {
   const version = request.headers.get('x-ant-model-provider-config')
   return version === '1' || version === '2' ? { 'x-ant-model-provider-config': version } : {}
@@ -130,7 +199,10 @@ async function readMemberConnection(credentials, settings) {
 
 async function updateModelSession(serviceUrl, token, action) {
   const headers = { authorization: `Bearer ${token}`, accept: 'application/json' }
-  if (action === 'heartbeat') headers['x-ant-bundle-version'] = BUNDLE_VERSION
+  if (action === 'heartbeat') {
+    headers['x-ant-bundle-version'] = BUNDLE_VERSION
+    headers['x-ant-bundle-package'] = ANT_NPM_PACKAGE_NAME
+  }
   return fetch(new URL(`/auth/dsh-session/${action}`, serviceUrl), {
     method: 'POST',
     headers,
@@ -649,7 +721,9 @@ async function fetchBundleRelease(request, credentials, settings) {
     if (request.headers.get('x-ant-bundle-update-mode') === 'check-only') {
       headers['x-ant-bundle-update-mode'] = 'check-only'
     }
-    const upstream = await fetch(new URL('/api/me/bundle-release', connection.serviceUrl), {
+    const releaseUrl = new URL('/api/me/bundle-release', connection.serviceUrl)
+    if (ANT_NPM_PACKAGE_NAME === 'dsh-ant') releaseUrl.searchParams.set('package_name', ANT_NPM_PACKAGE_NAME)
+    const upstream = await fetch(releaseUrl, {
       headers,
       redirect: 'manual',
       signal: AbortSignal.timeout(10_000),
@@ -666,17 +740,20 @@ async function fetchBundleRelease(request, credentials, settings) {
     const validPackageName = release?.package_name === ANT_NPM_PACKAGE_NAME
     const validVersion = typeof release?.version === 'string'
       && (release.version === '' || /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$/u.test(release.version))
+    const validDshRange = release?.dsh_engine_range === undefined
+      || (typeof release.dsh_engine_range === 'string' && release.dsh_engine_range.length <= 128
+        && (!release.dsh_engine_range || /^[0-9A-Za-z .+*|,<>=~^\-]+$/u.test(release.dsh_engine_range)))
     const installSpec = release?.package_name === 'ant'
       ? `ant@${release?.version}`
       : `ant@npm:${release?.package_name}@${release?.version}`
     const directInstallSpec = release?.package_name && release?.version
       ? `${release.package_name}@${release.version}`
       : ''
-    const artifactPath = release?.version ? `/api/ant-bundles/${release.version}/package.tgz` : ''
+    const artifactPath = release?.version ? `/api/ant-bundles/${ANT_NPM_PACKAGE_NAME === 'dsh-ant' ? 'dsh-ant/' : ''}${release.version}/package.tgz` : ''
     const hasArtifact = release?.artifact_path === artifactPath
       && /^[a-f0-9]{64}$/u.test(release?.artifact_sha256 || '')
     const noArtifact = !release?.artifact_path && !release?.artifact_sha256
-    if (release?.bundle_name !== 'ant' || !validPackageName || !validVersion
+    if (release?.bundle_name !== 'ant' || !validPackageName || !validVersion || !validDshRange
       || typeof release?.install_spec !== 'string' || typeof release?.release_notes !== 'string'
       || (release.version && release.install_spec !== installSpec)
       || (!release.version && release.install_spec !== '')
@@ -1001,6 +1078,12 @@ export function apply(ctx) {
       requestBody: 'buffered',
       fetch: (request) => fetchServiceInfo(request, connectionCtx.credentials, connectionCtx.settings),
     }), 'ant-teams: ANT client-server version handshake')
+    connectionCtx.effect(() => connectionCtx.connection.fetch.register({
+      path: DSH_COMPATIBILITY_PATH,
+      methods: ['GET', 'POST'],
+      requestBody: 'buffered',
+      fetch: fetchDshCompatibility,
+    }), 'ant-teams: DSH runtime compatibility check')
     connectionCtx.effect(() => connectionCtx.connection.fetch.register({
       path: MODEL_SYNC_PATH,
       methods: ['POST'],

package/package.json

@@ -1,8 +1,14 @@
 {
   "name": "@ai-wendao/ant",
-  "version": "0.5.11",
+  "version": "0.5.12",
   "description": "ANT (AI-native Teams) connects a DeepSeek Harness Desktop profile to team identity and approved models.",
   "type": "module",
+  "engines": {
+    "dsh": ">=0.2.1-rc.3"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/dsh-app-boot": ">=0.2.1-rc.3"
+  },
   "scripts": {
     "test": "node --test client.test.js delegation.test.js index.test.js skill-install.test.js tools/migrate-legacy.test.mjs"
   },
@@ -26,7 +32,8 @@
       "inject": [
         "@deepseek-ai/dsh-api-remotes",
         "@deepseek-ai/dsh-client-ui-layout",
-        "@deepseek-ai/dsh-client-ui-plugin-manager"
+        "@deepseek-ai/dsh-client-ui-plugin-manager",
+        "@deepseek-ai/dsh-client-ui-settings"
       ]
     }
   }