@xmanrui/dsh-im 4.20.2 → 4.21.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmanrui/dsh-im",
-  "version": "4.20.2",
+  "version": "4.21.1",
   "description": "把十一种 IM 渠道和公网 AI Office 接入本机 DeepSeek Harness。 Connect eleven IM channels and a public AI Office to a local DeepSeek Harness.",
   "keywords": [
     "deepseek-harness",
@@ -64,6 +64,22 @@
     {
       "name": "lyzhu86",
       "url": "https://github.com/lyzhu86"
+    },
+    {
+      "name": "Librazy",
+      "url": "https://github.com/Librazy"
+    },
+    {
+      "name": "Johnslee1207",
+      "url": "https://github.com/johnslee1207-commits"
+    },
+    {
+      "name": "Dong09",
+      "url": "https://github.com/Dong09"
+    },
+    {
+      "name": "wings1848",
+      "url": "https://github.com/wings1848"
     }
   ],
   "license": "MIT",

package/plugin-src/client/channel-logos.js

@@ -109,13 +109,26 @@ export function DiscordLogoGlyph({ size } = {}) {
 export function SlackLogoGlyph({ size } = {}) {
   return h('svg', {
     ...dimensions(size),
-    viewBox: '0 0 24 24',
+    viewBox: '0 0 100 100',
     focusable: 'false',
     'aria-hidden': 'true',
     'data-im-channel-logo': 'slack',
-  }, h('path', {
-    fill: 'currentColor',
-    d: 'M6 15a2 2 0 1 1-2-2h2v2Zm1 0a2 2 0 1 1 4 0v5a2 2 0 1 1-4 0v-5Zm2-8a2 2 0 1 1 2-2v2H9Zm0 1a2 2 0 1 1 0 4H4a2 2 0 1 1 0-4h5Zm8 2a2 2 0 1 1 2 2h-2v-2Zm-1 0a2 2 0 1 1-4 0V5a2 2 0 1 1 4 0v5Zm-2 8a2 2 0 1 1-2 2v-2h2Zm0-1a2 2 0 1 1 0-4h5a2 2 0 1 1 0 4h-5Z',
+  },
+  h('path', {
+    fill: '#36C5F0',
+    d: 'M36.5 0A10.5 10.5 0 0 0 36.5 21H47V10.5A10.5 10.5 0 0 0 36.5 0ZM10.5 26a10.5 10.5 0 0 0 0 21h26a10.5 10.5 0 0 0 0-21Z',
+  }),
+  h('path', {
+    fill: '#2EB67D',
+    d: 'M100 36.5A10.5 10.5 0 0 0 79 36.5V47h10.5A10.5 10.5 0 0 0 100 36.5ZM74 10.5a10.5 10.5 0 0 0-21 0v26a10.5 10.5 0 0 0 21 0Z',
+  }),
+  h('path', {
+    fill: '#ECB22E',
+    d: 'M63.5 100a10.5 10.5 0 0 0 0-21H53v10.5A10.5 10.5 0 0 0 63.5 100ZM89.5 74a10.5 10.5 0 0 0 0-21h-26a10.5 10.5 0 0 0 0 21Z',
+  }),
+  h('path', {
+    fill: '#E01E5A',
+    d: 'M0 63.5a10.5 10.5 0 0 0 21 0V53H10.5A10.5 10.5 0 0 0 0 63.5ZM26 89.5a10.5 10.5 0 0 0 21 0v-26a10.5 10.5 0 0 0-21 0Z',
   }));
 }
 
@@ -138,7 +151,7 @@ export function IMessageLogoGlyph({ size } = {}) {
     'aria-hidden': 'true', 'data-im-channel-logo': 'imessage',
   }, h('path', {
     fill: 'currentColor',
-    d: 'M12 2.2c-5.52 0-10 3.75-10 8.38 0 2.63 1.52 4.98 3.9 6.52l-.92 3.43a.5.5 0 0 0 .72.56l3.54-1.96c.87.23 1.8.35 2.76.35 5.52 0 10-3.75 10-8.9S17.52 2.2 12 2.2Zm-3.4 8.2a1.2 1.2 0 1 1 0 2.4 1.2 1.2 0 0 1 0-2.4Zm3.4 0a1.2 1.2 0 1 1 0 2.4 1.2 1.2 0 0 1 0-2.4Zm3.4 0a1.2 1.2 0 1 1 0 2.4 1.2 1.2 0 0 1 0-2.4Z',
+    d: 'M12 2.5C5.65 2.5.5 6.66.5 11.8c0 2.76 1.49 5.24 3.85 6.94.28 1.34-.35 2.76-1.6 4.01 2.1-.2 3.87-.86 5.26-1.85 1.25.4 2.6.62 3.99.62 6.35 0 11.5-4.35 11.5-9.72S18.35 2.5 12 2.5Z',
   }));
 }
 

package/plugin-src/client/channels/imessage/styles.js

@@ -1,7 +1,7 @@
 export const IMESSAGE_STYLE_ID = 'xmanrui-dsh-im-imessage-settings';
 const CSS = String.raw`
 .dim-pageIMessage { --ddt-accent: #32a852; --ddt-accent-deep: #248a40; --ddt-accent-wash: #edf9f0; }
-.dim-avatarIMessage { color: #fff; background: #32a852; }
+.dim-avatarIMessage { color: #fff; background: linear-gradient(180deg, #5bf675 0%, #28d944 50%, #0fbd2c 100%); box-shadow: inset 0 1px 1px rgb(255 255 255 / 45%), 0 1px 3px rgb(31 35 41 / 12%); }
 .dim-avatarIMessage svg { display: block; }
 .dim-imessagePermissionPanel { padding: 20px; }
 .dim-imessagePermissionPanel p { color: var(--dsw-alias-label-secondary, #646a73); }

package/plugin-src/client/channels/slack/styles.js

@@ -2,7 +2,7 @@ export const SLACK_STYLE_ID = 'xmanrui-dsh-im-slack-settings';
 
 const CSS = String.raw`
 .dsl-page { --ddt-accent: #4a154b; --ddt-accent-deep: #321033; --ddt-accent-wash: #f7eef7; }
-.dsl-avatar { color: #fff; background: #4a154b; }
+.dsl-avatar { background: linear-gradient(145deg, #fff, #f8fafb); border: 1px solid #e5e6eb; }
 .dsl-avatar svg { display: block; }
 .dsl-setup { display: grid; gap: 18px; }
 .dsl-guide { display: grid; grid-template-columns: minmax(0, 1fr) auto; align-items: start; gap: 18px; padding: 16px; border: 1px solid color-mix(in srgb, #4a154b 18%, var(--dsw-alias-border-l2, #e5e6eb)); border-radius: 11px; background: color-mix(in srgb, #4a154b 4%, var(--dsw-alias-bg-layer-1, #fff)); }

package/plugin-src/client/channels/weixin/connection-error.js

@@ -1,6 +1,7 @@
 import * as React from 'react';
 import { h, localizeText } from '../../i18n.js';
 import { normalizeConnectionError } from './api.js';
+import { CONFIG_ISSUE_LABELS } from '../../../../src/channels/weixin/diagnostic-details.mjs';
 
 const STAGE_LABELS = {
   'startup.load': '加载微信配置', 'qr.begin': '申请二维码', 'qr.encode': '生成二维码图片', 'qr.poll': '查询扫码状态',
@@ -27,7 +28,7 @@ export function formatWeixinDiagnostic(value) {
   return [
     localizeText(error.message), details.hint ? localizeText(details.hint) : null,
     localizeText('错误码') + ': ' + error.code,
-    ...['operation', 'stage', 'reason', 'httpStatus', 'providerCode', 'resource', 'referenceId', 'occurredAt', 'rollback', 'pluginVersion']
+    ...['operation', 'stage', 'reason', 'httpStatus', 'providerCode', 'resource', 'file', 'field', 'issue', 'referenceId', 'occurredAt', 'rollback', 'pluginVersion']
       .filter(field => details[field] !== undefined)
       .map(field => `${field}: ${details[field]}`),
   ].filter(Boolean).join('\n');
@@ -48,6 +49,8 @@ export function WeixinConnectionError({ error: value, warning = false }) {
   const fields = [
     ['错误码', error.code], ['失败阶段', localizeText(STAGE_LABELS[details.stage] ?? details.stage ?? '')],
     ['底层原因', details.reason], ['HTTP 状态', details.httpStatus], ['微信返回码', details.providerCode],
+    ['配置文件', details.file], ['配置字段', details.field],
+    ['校验原因', details.issue ? localizeText(CONFIG_ISSUE_LABELS[details.issue]) : undefined],
     ['参考号', details.referenceId], ['发生时间', details.occurredAt], ['插件版本', details.pluginVersion],
   ].filter(([, text]) => text !== undefined && text !== '');
   return h('div', { className: 'dxw-summary dim-cardSummary', 'data-weixin-diagnostic': true, role: warning ? 'status' : undefined },

package/plugin-src/client/i18n.js

@@ -1020,6 +1020,14 @@ function channelName(value) {
 }
 
 function translateDynamic(text) {
+  const configMessage = /^微信配置格式错误：(config\.json|workspaces\.json)。请查看诊断详情，修复后重启 DSH。$/.exec(text);
+  if (configMessage) return EN['微信配置格式错误：{file}。请查看诊断详情，修复后重启 DSH。'].replace('{file}', configMessage[1]);
+  const configHint = /^(.*?)请检查微信渠道数据目录中的 (config\.json|workspaces\.json)，修复后重启 DSH；“重新读取”不会重新加载配置。\s*(字段位置中的序号从 0 开始，按文件中的条目顺序计数，不包含真实账号标识。)?$/.exec(text);
+  if (configHint) return [
+    localizeText(configHint[1].trim()),
+    EN['请检查微信渠道数据目录中的 {file}，修复后重启 DSH；“重新读取”不会重新加载配置。'].replace('{file}', configHint[2]),
+    configHint[3] ? localizeText(configHint[3]) : '',
+  ].filter(Boolean).join(' ');
   const guidanceLimit = /^增强提示词不得超过 (\d+) 个字符。$/.exec(text);
   if (guidanceLimit) return `Guidance must not exceed ${guidanceLimit[1]} characters.`;
   let match = /^(\d+) \/ (\d+) 在线$/.exec(text);

package/plugin-src/client/model-setting.js

@@ -141,6 +141,8 @@ export function ModelEditor({ model = null, disabled = false, onSave }) {
           'aria-label': '查看模型设置说明', 'aria-describedby': `${id}-help` },
         h('span', { 'aria-hidden': true }, '?')),
         h('span', { id: `${id}-help`, className: 'dim-presetTooltip', role: 'tooltip' },
+          effortHint && !effortUnavailable
+            ? h('span', { id: `${id}-hint` }, effortHint, ' ') : null,
           '只影响新建会话；若当前聊天已有会话，先发送 /new，再发送普通消息生效。'))),
     saving ? h('span', { className: 'dim-presetStatus', role: 'status' }, '保存中…') : null),
   row('model', '模型', entry?.name ?? (current ? modelSelectionId(current) : localizeText('跟随默认模型'))),
@@ -163,8 +165,8 @@ export function ModelEditor({ model = null, disabled = false, onSave }) {
     ...(reasoning?.efforts ?? []).map((level) => option(`effort:${level.id}`, level.name, level.description,
       effort === level.id, { ...current, reasoningEffort: level.id })),
   ]) : null,
-  effortHint ? h('p', { id: `${id}-hint`, className: 'dim-modelHint',
-    role: effortUnavailable ? 'status' : undefined }, effortHint) : null,
+  effortHint && effortUnavailable ? h('p', { id: `${id}-hint`, className: 'dim-modelHint',
+    role: 'status' }, effortHint) : null,
   error || !currentAvailable ? h('p', { className: 'dim-presetError', role: error ? 'alert' : 'status' },
     error ?? '当前模型已不可用，请选择其他模型或跟随默认模型。') : null);
 }

package/plugin-src/client/session-channel-logos.js

@@ -26,8 +26,7 @@ const SVG_NS = 'http://www.w3.org/2000/svg';
 const installations = new WeakMap();
 
 function hasClassPart(element, part) {
-  const match = new RegExp(`(?:^|[_-])${part}(?:$|[_-])`, 'u');
-  return [...element.classList].some((token) => match.test(token));
+  return [...element.classList].some((token) => token.split(/[_-]/u).includes(part));
 }
 
 function titleOf(row) {

package/plugin-src/client/styles.js

@@ -126,10 +126,11 @@ const CSS = String.raw`
 .dim-logoOffice svg { width: 23px; height: 23px; }
 .dim-logoDiscord { color: white; background: #5865f2; }
 .dim-logoDiscord svg { width: 21px; height: 21px; }
-.dim-logoSlack { color: white; background: #4a154b; }
+.dim-logoSlack { background: linear-gradient(145deg, #fff, #f8fafb); border: 1px solid #e5e6eb; }
 .dim-logoSlack svg { width: 21px; height: 21px; }
 .dim-logoWhatsapp { color: white; background: #25d366; }
-.dim-logoIMessage { color: white; background: #32a852; }
+.dim-logoIMessage { color: white; background: linear-gradient(180deg, #5bf675 0%, #28d944 50%, #0fbd2c 100%); box-shadow: inset 0 1px 1px rgb(255 255 255 / 45%), 0 1px 3px rgb(31 35 41 / 12%); }
+.dim-logoIMessage svg { width: 23px; height: 23px; }
 .dim-logoWhatsapp svg { width: 21px; height: 21px; }
 .dim-channelCopy { min-width: 0; display: grid; }
 .dim-channelCopy strong { overflow: hidden; color: inherit; font-size: 14px; line-height: 20px; font-weight: 680; text-overflow: ellipsis; white-space: nowrap; }

package/plugin-src/host/channels/qq/production.mjs

@@ -74,7 +74,7 @@ export async function createProductionController(ctx, config = {}, internals = {
   const stateFor = async (botId) => {
     let state = stateStores.get(botId);
     if (!state) {
-      state = await new StateStore(statePath(botId)).load();
+      state = await new StateStore(statePath(botId), { logger }).load();
       stateStores.set(botId, state);
     }
     return state;

package/plugin-src/host/channels/qq/rpc.mjs

@@ -9,6 +9,7 @@ import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from
 import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from '../shared/access-policy-rpc.mjs';
 import { resolveRpcAuthority } from '../../rpc-authority.mjs';
 import { publicWorkspaceError, SET_WORKSPACE_ENDPOINT, validWorkspacePayload } from '../shared/workspace-rpc.mjs';
+import { publicQqStateError } from '../../../../src/channels/qq/state-error.mjs';
 import { SET_AGENT_PRESET_ENDPOINT, validAgentPresetPayload } from '../shared/agent-preset-rpc.mjs';
 import { SET_MODEL_ENDPOINT, validModelPayload } from '../shared/model-setting-rpc.mjs';
 
@@ -232,7 +233,7 @@ export function createQqRpcHandler(controller, { encodeQr = qrDataUrl } = {}) {
       const workspaceError = publicWorkspaceError(error);
       return signal?.aborted
         ? { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.' } }
-        : { ok: false, error: workspaceError
+        : { ok: false, error: publicQqStateError(error) ?? workspaceError
           ?? { code: 'qq-operation-failed', message: 'QQ 操作失败，请稍后重试。' } };
     }
   };

package/plugin-src/host/index.mjs

@@ -17,6 +17,7 @@ import { installDeliveryRpc } from './delivery-rpc.mjs';
 import { installDeliveryHttp } from './delivery-http.mjs';
 import { createDeliveryService } from './delivery-service.mjs';
 import { installInboundTtlRpc } from './inbound-ttl-rpc.mjs';
+import { installInjectedContext } from './injected-context.mjs';
 import { installSessionSyncCoordinator } from './session-sync-coordinator.mjs';
 import { installSessionTitlePrefix } from './session-title-prefix.mjs';
 import { installUpdateRpc } from './update-rpc.mjs';
@@ -41,6 +42,7 @@ export function createImHostPlugin(internals = {}) {
   const startHostLanguageRpc = internals.installHostLanguageRpc ?? installHostLanguageRpc;
   const startUpdate = internals.installUpdateRpc ?? installUpdateRpc;
   const startInboundTtl = internals.installInboundTtlRpc ?? installInboundTtlRpc;
+  const startInjectedContext = internals.installInjectedContext ?? installInjectedContext;
   const startDelivery = internals.installDeliveryRpc ?? installDeliveryRpc;
   const startDeliveryHttp = internals.installDeliveryHttp ?? installDeliveryHttp;
   const startSessionSync = internals.installSessionSyncCoordinator
@@ -139,6 +141,11 @@ export function createImHostPlugin(internals = {}) {
     const logger = typeof ctx?.logger === 'function'
       ? ctx.logger(name)
       : (ctx?.logger ?? console);
+    try {
+      startInjectedContext(ctx, { logger });
+    } catch (error) {
+      logger.error?.('[dsh-im] failed to activate injected-context pairing; prompts keep the inline prefix', error);
+    }
     if (ctx?.connection?.fetch) {
       if (hostLanguage) {
         try {

package/plugin-src/host/injected-context.mjs

@@ -0,0 +1,104 @@
+import { getImHostLanguage } from '../../src/channels/shared/i18n.mjs';
+import { rewriteInjectedContextMessages } from '../../src/channels/shared/injected-context.mjs';
+import {
+  IM_SOURCE_GUIDANCE_CONTEXT,
+  IM_SOURCE_GUIDANCE_ORDER,
+  imSourceGuidance,
+} from '../../src/channels/shared/im-source-guidance.mjs';
+
+/** Row label for a quoted reply, in the mirrored Host interface language. */
+const REPLY_LABELS = Object.freeze({ zh: '\u5f15\u7528', en: 'Quoted' });
+
+/** Row label for a source block that names no readable field of its own. */
+const SOURCE_LABELS = Object.freeze({ zh: '\u6765\u6e90', en: 'Source' });
+
+/** Read the current reply-row label; an unknown language falls back to English. */
+function replyLabel() {
+  try {
+    return getImHostLanguage() === 'en' ? REPLY_LABELS.en : REPLY_LABELS.zh;
+  } catch {
+    return REPLY_LABELS.en;
+  }
+}
+
+/** Read the current nameless-source-row label; unknown languages fall back. */
+function sourceLabel() {
+  try {
+    return getImHostLanguage() === 'en' ? SOURCE_LABELS.en : SOURCE_LABELS.zh;
+  } catch {
+    return SOURCE_LABELS.en;
+  }
+}
+
+/**
+ * Pair every injected context block with the user message that carried it, and
+ * materialize the source guidance as session-level prompt context.
+ *
+ * The prompt RPC cannot carry a message source, so a channel writes its source
+ * block, guidance and quoted reply into the prompt text. `agent/pre-step` is
+ * the one point where the claimed messages are already known and nothing is
+ * committed yet: splitting the blocks there records each as its own
+ * plugin-sourced message next to exactly the user message it belongs to,
+ * whatever the inbox interleaved meanwhile. A Host without the Agent loop never
+ * dispatches the event, and the prompt then keeps its inline blocks.
+ *
+ * Guidance is not per message but per conversation, so it is registered as
+ * dynamic prompt context instead: the Host appends one durable snapshot per
+ * Session and only re-renders it when a channel publishes different guidance.
+ * Deployment policy still decides whether such snapshots exist at all, which is
+ * why the message-side copy is kept until a channel has published a matching
+ * value for that Session.
+ *
+ * @param ctx - owning Host context.
+ * @param options.logger - Host logger for a rewrite that could not be trusted.
+ * @param options.registry - guidance registry; tests inject their own.
+ * @returns the Cordis disposer, or null when the context cannot listen.
+ */
+export function installInjectedContext(ctx, { logger, registry = imSourceGuidance } = {}) {
+  if (typeof ctx?.on !== 'function') return null;
+
+  const startGuidanceContext = (promptCtx) => {
+    if (typeof promptCtx?.systemPrompt?.context !== 'function') return null;
+    return promptCtx.systemPrompt.context({
+      name: IM_SOURCE_GUIDANCE_CONTEXT,
+      order: IM_SOURCE_GUIDANCE_ORDER,
+      text: (assembly) => registry.get(assembly?.agent?.session?.id) ?? '',
+    });
+  };
+  if (typeof ctx.inject === 'function') {
+    // Same gating the outbound artifact tool uses: register once the service
+    // exists instead of requiring it at load time.
+    ctx.inject(['systemPrompt'], startGuidanceContext);
+  } else {
+    startGuidanceContext(ctx);
+  }
+
+  const disposeDisposed = ctx.on('agent/disposed', ({ agent }) => {
+    const sessionId = agent?.session?.id;
+    if (typeof sessionId === 'string') registry.forget(sessionId);
+  }, { global: true });
+
+  const listener = async ({ agent }, next) => {
+    const decision = await next();
+    if (decision === null || typeof decision !== 'object' || decision.kind !== 'enter') {
+      return decision;
+    }
+    try {
+      const rewritten = rewriteInjectedContextMessages(decision.messages, {
+        labels: { reply: replyLabel(), source: sourceLabel() },
+        ownedGuidance: registry.get(agent?.session?.id),
+      });
+      return rewritten === null ? decision : { ...decision, messages: rewritten };
+    } catch (error) {
+      // A failed split must never cost the user their message: the blocks then
+      // stay inline, which is the same fallback a Host without Agents uses.
+      logger?.warn?.('[dsh-im] unable to split the injected context blocks:', error?.message ?? error);
+      return decision;
+    }
+  };
+  const disposePreStep = ctx.on('agent/pre-step', listener, { global: true });
+  return () => {
+    disposePreStep?.();
+    disposeDisposed?.();
+  };
+}

package/plugin-src/host/modern-harness-api.mjs

@@ -474,13 +474,97 @@ class ModernHarnessApi {
   #requestQuestion(request, next) {
     const owner = this.#claimableAgent(request?.agent);
     if (!owner) return next();
-    if (request.signal?.aborted) {
+    const turnSignal = request.signal;
+    if (turnSignal?.aborted) {
       return Promise.reject(questionError(
         'ask_user_question was aborted before the user answered', 'ASK_ABORTED',
       ));
     }
-    return new Promise((resolve, reject) => {
-      const pending = {
+    // Give this question a lifetime of its own instead of lending it the enclosing
+    // turn's. `dsh-agent-loop` mints one abort controller per turn and every tool
+    // call in that turn shares the one signal, and under PTC two consumers of it
+    // react to the abort EVENT rather than to `signal.aborted`: `run_code` flips its
+    // own program controller from an abort listener (dsh-tools `onOuterAbort`) and
+    // the worker code runtime retires the worker the same way
+    // (dsh-code-runtime-worker-thread `onAbort`). Retiring the Web card by firing
+    // that event therefore also killed the program that was merely waiting for this
+    // answer — `code run failed (abort)`. A private controller keeps the retirement
+    // below local: real upstream cancellation is forwarded into it, and every
+    // listener on this waterfall — the Remote/Web forwarder that renders the card,
+    // and our own IM pending — sees a lifetime that ends with this question rather
+    // than with the turn.
+    //
+    // Handing it downstream means replacing `request.signal`, because the Cordis
+    // waterfall passes the same request object to every remaining listener and
+    // `next()` takes no replacement arguments. The object is a per-call copy made by
+    // `UserQuestionService.ask`, and the signal it carried stays reachable here as
+    // `turnSignal`, so the caller's own view of the request is untouched.
+    const question = new AbortController();
+    const forwardTurnAbort = () => question.abort(turnSignal?.reason);
+    turnSignal?.addEventListener('abort', forwardTurnAbort, { once: true });
+    request.signal = question.signal;
+    // Race the IM answer against the host's own answerers (Web/CLI). Claiming the
+    // request exclusively used to keep the question out of Web entirely, leaving
+    // whoever happened to be looking at that Session with a card they could not
+    // answer. Racing keeps both surfaces usable: the first answer wins.
+    const im = this.#askThroughIm(request, owner);
+    let answeredByIm = false;
+    const native = Promise.resolve()
+      .then(() => next())
+      .catch((error) => {
+        // A pure-IM session has no client connected, so the host rejects with
+        // NO_PROVIDER — an expected state rather than a failure — and ASK_ABORTED
+        // is this adapter's own retire signal below. Any other error is real, so
+        // log it instead of swallowing it silently; the question still stays open
+        // for IM rather than being failed outright.
+        if (error?.code !== 'NO_PROVIDER' && error?.code !== 'ASK_ABORTED') {
+          console.warn(
+            '[dsh-im] the host user-question answerer failed; waiting for the IM answer:',
+            error?.message ?? error,
+          );
+        }
+        return new Promise(() => {});
+      });
+    return Promise.race([
+      native,
+      im.promise.then((value) => {
+        answeredByIm = true;
+        return value;
+      }),
+    ]).finally(() => {
+      // Losing side cleanup. A host answer already settled this request, so drop
+      // the IM pending: leaving it registered would let a late press answer a
+      // question the model has moved past. Settling is idempotent.
+      im.dismiss(new Error('another client answered this question'));
+      turnSignal?.removeEventListener('abort', forwardTurnAbort);
+      if (answeredByIm) {
+        // The host's own answerer (DSH Web) keeps its question card until its own
+        // pending settles, and a host-side adapter has no other handle on it. A Web
+        // client holds that pending through the lifetime this question handed
+        // downstream, so ending that lifetime makes the client drop a card whose
+        // answer was already given on IM — otherwise it keeps offering choices for a
+        // question the model has moved past.
+        //
+        // Ending it is `abort`, not a dispatched `abort` event: a listener that
+        // reads `signal.aborted` must see the same thing one that listens for the
+        // event does. Either way it reaches only this question's controller, so the
+        // turn and every other tool call in it — a waiting `run_code` program above
+        // all — keep running. The reason carries `ASK_ABORTED` so the host answerer
+        // rejecting alongside us stays an expected retirement rather than a logged
+        // failure.
+        question.abort(questionError('the question was answered on IM', 'ASK_ABORTED'));
+      }
+    });
+  }
+
+  /**
+   * Present one question to IM clients. Returns the answer promise plus a
+   * `dismiss` used to retire the pending when the host answers first.
+   */
+  #askThroughIm(request, owner) {
+    let pending = null;
+    const promise = new Promise((resolve, reject) => {
+      pending = {
         rpcId: randomUUID(),
         sessionId: owner.sessionId,
         questions: request.questions,
@@ -505,6 +589,10 @@ class ModernHarnessApi {
       request.signal?.addEventListener('abort', onAbort, { once: true });
       this.#broadcast(this.#questionFrame(pending).payload, pending.rpcId);
     });
+    return {
+      promise,
+      dismiss: (reason) => pending?.settle('cancelled', reason),
+    };
   }
 
   #approvalFrame(pending) {

package/scripts/verify-model-setting.mjs

@@ -22,12 +22,15 @@ const built = await build({
   define: { 'process.env.NODE_ENV': '"development"' },
 });
 const htmlPath = join(output, 'preview.html');
+const scriptOpen = '<scr' + 'ipt>';
+const scriptClose = '</scr' + 'ipt>';
+const scriptBody = built.outputFiles[0].text.replace(/<\/script/giu, '<\\/script');
 await writeFile(htmlPath, `<!doctype html><html lang="zh-CN"><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>DSH-IM Model Settings</title>
 <style>
 body{margin:0;padding:24px;background:#fff;color:#1f2329;font:14px/20px -apple-system,BlinkMacSystemFont,sans-serif}#app{max-width:760px;margin:auto}#result{max-width:760px;margin:18px auto;font:11px/17px monospace;white-space:pre-wrap;color:#687380}
 @media(max-width:600px){body{padding:12px}}
 @media(prefers-color-scheme:dark){:root{color-scheme:dark;--dsw-alias-bg-layer-1:#202125;--dsw-alias-bg-layer-3:#282a30;--dsw-specific-menu:#282a30;--dsw-alias-bg-module-platform:#25272c;--dsw-alias-label-primary:#e9ebef;--dsw-alias-label-secondary:#b1b5bf;--dsw-alias-label-tertiary:#9a9faa;--dsw-alias-border-l1:#34363c;--dsw-alias-border-l2:#41434c;--dsw-alias-border-l3:#7b9ff9;--dsw-alias-interactive-bg-hover:#353842}body{background:#202125;color:#e9ebef}}
-</style><body><div id="app"></div><pre id="result">Running browser checks…</pre><script>${built.outputFiles[0].text.replace(/<\/script/giu, '<\\/script')}</script></body></html>`);
+</style><body><div id="app"></div><pre id="result">Running browser checks…</pre>${scriptOpen}${scriptBody}${scriptClose}</body></html>`);
 for (const [name, size, extra, query] of [
   ['desktop', '1100,1100', [], ''],
   ['mobile', '390,1250', [], '?mobile'],

package/scripts/verify-package.mjs

@@ -238,7 +238,9 @@ if (/(?:from\s*|import\s*\(|require\s*\()\s*["'](?:@larksuiteoapi\/node-sdk|@whi
 if (!/(?:from\s*|import\s*\()\s*["']undici["']/.test(host)) {
   throw new Error('host bundle must retain undici as an external runtime dependency');
 }
-if ((executable.mode & 0o111) === 0) throw new Error('dsh-im CLI is not executable');
+if (process.platform !== 'win32' && (executable.mode & 0o111) === 0) {
+  throw new Error('dsh-im CLI is not executable');
+}
 if (/private-bot-token|must-be-rolled-back|DEEPSEEK_API_KEY=/.test(client + host)) {
   throw new Error('built artifacts contain a test or environment secret marker');
 }