@xmanrui/dsh-im 4.21.2 → 4.23.0

package/src/channels/shared/harness-client.mjs

@@ -1,8 +1,10 @@
 import { spawn } from 'node:child_process';
 import { randomUUID } from 'node:crypto';
+import { mkdir } from 'node:fs/promises';
 import { isAbsolute } from 'node:path';
 
 import { adoptRegisteredWorkspaceSession } from './harness-session-binding.mjs';
+import { sameWorkspacePath } from './default-workspace.mjs';
 import {
   appendInboundFilesToPrompt,
   InboundFileError,
@@ -13,6 +15,8 @@ import {
   imageFileSourcesFromContent,
   isModelImageRejection,
 } from './image-prompt.mjs';
+import { imageInputLimits } from './image-input-policy.mjs';
+import { inboundImagesAsFiles, imageContentFromStaged, isImageAdmissionRejection, IMAGE_HOST_LIMIT_FALLBACK_PROMPT } from './image-input.mjs';
 import { imSourceGuidance } from './im-source-guidance.mjs';
 import { outboundArtifactRegistry } from './semantic/artifact.mjs';
 import { t } from './i18n.mjs';
@@ -704,7 +708,6 @@ function harnessTurnError(reason) {
     return new HarnessTurnError('turn-interrupted', { reason });
   }
   if (kind === 'aborted') return new HarnessTurnError('turn-aborted', { reason });
-  if (kind === 'completed') return new HarnessTurnError('model-empty-response', { reason });
   return new HarnessTurnError('harness-turn-failed', { reason });
 }
 
@@ -717,6 +720,7 @@ export class HarnessClient {
   #baseUrl;
   #apiProxy;
   #workspace;
+  #ungroupedWorkspace;
   #agentPreset;
   #autostart;
   #dshBin;
@@ -729,6 +733,7 @@ export class HarnessClient {
   #controlExecutor;
   #sessionMaintenanceExecutor;
   #fileIngressExecutor;
+  #imageInputPolicy;
   #managedProcess = null;
   #interactionRegistry;
   #interactionOwnerships;
@@ -740,6 +745,7 @@ export class HarnessClient {
     apiProxy,
     interactionScope = apiProxy,
     workspace,
+    ungroupedWorkspace,
     agentPreset,
     autostart = false,
     dshBin = 'dsh',
@@ -752,6 +758,7 @@ export class HarnessClient {
     controlExecutor,
     sessionMaintenanceExecutor,
     fileIngressExecutor,
+    imageInputPolicy = () => undefined,
   }) {
     if (typeof createWebSocket !== 'function') {
       throw new TypeError('createWebSocket must be a function');
@@ -788,6 +795,8 @@ export class HarnessClient {
       throw new TypeError('interactionScope must identify the current Host');
     }
     this.#workspace = workspace;
+    // Only the reserved IM directory bypasses grouping, even after /ws switches.
+    this.#ungroupedWorkspace = ungroupedWorkspace;
     // Keep an omitted preset absent so session.create resolves the Host's current default.
     this.#agentPreset = agentPreset ?? undefined;
     this.#autostart = Boolean(this.#baseUrl && autostart);
@@ -801,6 +810,7 @@ export class HarnessClient {
     this.#controlExecutor = controlExecutor;
     this.#sessionMaintenanceExecutor = sessionMaintenanceExecutor;
     this.#fileIngressExecutor = fileIngressExecutor;
+    this.#imageInputPolicy = imageInputPolicy;
     this.#interactionRegistry = interactionRegistry(this.#baseUrl?.origin ?? interactionScope);
     this.#interactionOwnerships = this.#interactionRegistry.ownerships;
     this.#interactionClaims = this.#interactionRegistry.claims;
@@ -921,6 +931,38 @@ export class HarnessClient {
     await this.ensureRunning(options);
     const workspaceList = await this.rpc('workspace.list', {}, 30_000, options);
     const workspace = workspaceFromList(workspacePath, workspaceList);
+    if (await this.isUngroupedWorkspace(workspacePath)) {
+      const sessionList = await this.rpc('session.list', {}, 30_000, options);
+      if (!Array.isArray(sessionList?.items)) {
+        throw new Error('Harness returned an invalid response for session.list');
+      }
+      const registered = new Set();
+      const selected = new Set();
+      for (const item of workspaceList.items) {
+        if (!Array.isArray(item?.sessionIds)
+          || item.sessionIds.some((id) => typeof id !== 'string' || !id)) {
+          throw new Error('Harness returned invalid session IDs for workspace.list');
+        }
+        for (const id of item.sessionIds) registered.add(id);
+        if (await sameWorkspacePath(item.path, workspacePath)) {
+          for (const id of item.sessionIds) selected.add(id);
+        }
+      }
+      for (const item of sessionList.items) {
+        if (typeof item?.sessionId !== 'string' || !item.sessionId) {
+          throw new Error('Harness returned an invalid response for session.list');
+        }
+        // A matching cwd never overrides an explicit group assignment.
+        if (!registered.has(item.sessionId) && await this.isUngroupedWorkspace(item.cwd)) {
+          selected.add(item.sessionId);
+        }
+      }
+      return workspaceSessions(
+        { path: workspacePath, sessionIds: [...selected] },
+        workspaceList.archivedSessionIds,
+        sessionList,
+      );
+    }
     if (!workspace) return { workspace: workspacePath, sessions: [] };
     const sessionList = await this.rpc('session.list', {}, 30_000, options);
     return workspaceSessions(workspace, workspaceList.archivedSessionIds, sessionList);
@@ -988,6 +1030,10 @@ export class HarnessClient {
     return adoptRegisteredWorkspaceSession(this, value, options);
   }
 
+  async isUngroupedWorkspace(workspace) {
+    return sameWorkspacePath(workspace, this.#ungroupedWorkspace);
+  }
+
   async workspaceId(options = {}) {
     const { workspace = this.#workspace, ...rpcOptions } = options;
     const { items } = await this.rpc('workspace.list', {}, 30_000, rpcOptions);
@@ -999,9 +1045,13 @@ export class HarnessClient {
 
   async createSession(options = {}) {
     const { agentPreset: requestedPreset, ...rpcOptions } = options;
+    const workspace = rpcOptions.workspace ?? this.#workspace;
+    const ungrouped = await this.isUngroupedWorkspace(workspace);
+    if (ungrouped) await mkdir(workspace, { recursive: true });
     await this.ensureRunning(rpcOptions);
-    const workspaceId = await this.workspaceId(rpcOptions);
-    const payload = { workspaceId };
+    const payload = ungrouped
+      ? { cwd: workspace }
+      : { workspaceId: await this.workspaceId(rpcOptions) };
     const agentPreset = requestedPreset !== undefined ? requestedPreset : this.#agentPreset;
     if (agentPreset != null) payload.agentPreset = agentPreset;
     const created = await this.rpc('session.create', payload, 30_000, rpcOptions);
@@ -1390,6 +1440,10 @@ export class HarnessClient {
     });
   }
 
+  async getImageInputLimits() {
+    return imageInputLimits(await this.#imageInputPolicy());
+  }
+
   async ask(sessionId, prompt, options = {}) {
     if (typeof options === 'number') options = { timeoutMs: options };
     const timeoutMs = options.timeoutMs ?? 600_000;
@@ -1405,6 +1459,7 @@ export class HarnessClient {
       : undefined;
     const control = normalizeControl(options.control);
     const inboundFiles = Array.isArray(options.files) ? options.files.filter(Boolean) : [];
+    const inboundImages = Array.isArray(options.images) ? options.images.filter(Boolean) : [];
     await this.ensureRunning({ signal });
     const before = await this.rpc(
       'session.history',
@@ -1447,6 +1502,7 @@ export class HarnessClient {
     let interactionTask = null;
     let artifactsDelivered = false;
     let deliveredArtifactCount = 0;
+    let artifactHandoffError = null;
     const stagedBatches = [];
     let promptAccepted = false;
     let turnFinished = false;
@@ -1462,6 +1518,7 @@ export class HarnessClient {
           await onArtifact(artifact);
           deliveredArtifactCount += 1;
         } catch (error) {
+          artifactHandoffError ??= error;
           outboundArtifactRegistry.release(artifact);
           console.warn('[dsh-im] ignored an artifact handoff failure:', this.#logPrefix, error.message);
         }
@@ -1484,6 +1541,26 @@ export class HarnessClient {
         stagedBatches.push(staged);
         prompt = appendInboundFilesToPrompt(prompt, staged);
       }
+      if (inboundImages.length > 0) {
+        const limits = await this.getImageInputLimits();
+        const sources = inboundImagesAsFiles(inboundImages, limits);
+        let staged;
+        try {
+          staged = await this.#stageWorkspaceFiles(sessionId, sources, signal);
+        } catch (error) {
+          // Ingress wraps loader errors; retain the original image diagnostic.
+          if (signal?.aborted) throw signal.reason ?? error;
+          if (error?.cause?.name === 'ImagePromptError') throw error.cause;
+          throw error;
+        }
+        stagedBatches.push(staged);
+        const images = await imageContentFromStaged(staged, limits, { signal });
+        const originalContent = typeof basePrompt === 'string'
+          ? [{ type: 'text', text: basePrompt }] : basePrompt;
+        prompt = appendInboundFilesToPrompt([...originalContent, ...images], {
+          files: stagedBatches.flatMap((batch) => batch.files),
+        });
+      }
       if (interactionSignal) {
         let markOpen;
         const opened = new Promise((resolve) => { markOpen = resolve; });
@@ -1531,29 +1608,32 @@ export class HarnessClient {
         // Session workspace and named in a text manifest — then retry once
         // with a text-only prompt. The retry reuses promptRpcId so reply
         // tracking, control and interaction ownership stay bound to this ask.
-        const imageSources = isModelImageRejection(error)
-          ? imageFileSourcesFromContent(content)
-          : [];
-        if (imageSources.length === 0) throw error;
-        let stagedImages;
-        try {
-          stagedImages = await this.#stageWorkspaceFiles(sessionId, imageSources, signal);
-        } catch (stagingError) {
-          if (signal?.aborted) throw signal.reason ?? stagingError;
-          console.warn(
-            '[dsh-im] unable to restage rejected images as workspace files:',
-            this.#logPrefix,
-            stagingError?.message ?? String(stagingError),
-          );
-          throw error;
+        const originalsStaged = inboundImages.length > 0 && isImageAdmissionRejection(error)
+          && content.some((part) => part.type === 'image');
+        const imageSources = !originalsStaged && isModelImageRejection(error)
+          ? imageFileSourcesFromContent(content) : [];
+        if (!originalsStaged && imageSources.length === 0) throw error;
+        if (!originalsStaged) {
+          let stagedImages;
+          try {
+            stagedImages = await this.#stageWorkspaceFiles(sessionId, imageSources, signal);
+          } catch (stagingError) {
+            if (signal?.aborted) throw signal.reason ?? stagingError;
+            console.warn(
+              '[dsh-im] unable to restage rejected images as workspace files:',
+              this.#logPrefix,
+              stagingError?.message ?? String(stagingError),
+            );
+            throw error;
+          }
+          stagedBatches.push(stagedImages);
         }
-        stagedBatches.push(stagedImages);
         const baseContent = typeof basePrompt === 'string'
           ? [{ type: 'text', text: basePrompt }]
           : basePrompt;
         const fallbackPrompt = appendInboundFilesToPrompt([
           ...contentWithoutImages(baseContent),
-          { type: 'text', text: t(IMAGE_FILE_FALLBACK_PROMPT) },
+          { type: 'text', text: t(isModelImageRejection(error) ? IMAGE_FILE_FALLBACK_PROMPT : IMAGE_HOST_LIMIT_FALLBACK_PROMPT) },
         ], { files: stagedBatches.flatMap((batch) => batch?.files ?? []) });
         await sendPrompt(fallbackPrompt);
       }
@@ -1613,6 +1693,12 @@ export class HarnessClient {
             }
             if (artifactCount > 0) return '';
             if (ownership?.stopRequested) throw turnStoppedError();
+            if (artifactHandoffError) throw artifactHandoffError;
+            // A completed turn can do all its work through tools without text.
+            // Missing end reasons retain the existing empty-reply failure.
+            if (tracker.reason != null && harnessTurnSucceeded(tracker.reason)) {
+              return t('本轮处理已结束，没有文本回复。');
+            }
             throw harnessTurnError(tracker.reason);
           }
 
@@ -1635,6 +1721,11 @@ export class HarnessClient {
           throw timeoutError;
         }
       } catch (error) {
+        if (error instanceof HarnessTurnError) {
+          error.details ??= {
+            sessionId, promptRpcId, baselineSeq, turn: tracker.turn, lastSeq: tracker.lastSeq,
+          };
+        }
         // Once cancellation was accepted, transport/poll failures and timeouts
         // describe the convergence of that stop, not an unrelated ask failure.
         if (!ownership?.stopRequested) throw error;

package/src/channels/shared/harness-session-binding.mjs

@@ -37,16 +37,13 @@ function sessionWorkspace(sessionId, value) {
     }
   }
 
-  if (owners.length === 0) {
-    throw bindingError('session-not-registered', 'The session is not registered to a Harness workspace');
-  }
-  if (owners.length !== 1) {
+  if (owners.length > 1) {
     throw bindingError(
       'session-workspace-ambiguous',
       'The session is registered to more than one Harness workspace',
     );
   }
-  if (UNSAFE_WORKSPACE_PATH.test(owners[0].path)) {
+  if (owners.length && UNSAFE_WORKSPACE_PATH.test(owners[0].path)) {
     throw new Error('Harness returned an unsafe workspace path for the session');
   }
   return {
@@ -82,20 +79,28 @@ function sessionSummary(sessionId, value) {
   if (title !== undefined && title !== null && typeof title !== 'string') {
     throw new Error('Harness returned an invalid session title for session.list');
   }
-  return { title: typeof title === 'string' ? title : null };
+  return { cwd: summary.cwd, title: typeof title === 'string' ? title : null };
 }
 
 export async function adoptRegisteredWorkspaceSession(client, value, options = {}, timeoutMs = 30_000) {
   const sessionId = validatedSessionId(value);
   await client.ensureRunning(options);
   const workspaceList = await client.rpc('workspace.list', {}, timeoutMs, options);
-  const { workspace, archived } = sessionWorkspace(sessionId, workspaceList);
+  let { workspace, archived } = sessionWorkspace(sessionId, workspaceList);
   const summary = sessionSummary(
     sessionId,
     await client.rpc('session.list', {}, timeoutMs, options),
   );
+  if (!workspace) {
+    if (typeof summary.cwd !== 'string' || !isAbsolute(summary.cwd)
+      || UNSAFE_WORKSPACE_PATH.test(summary.cwd)
+      || !await client.isUngroupedWorkspace?.(summary.cwd)) {
+      throw bindingError('session-not-registered', 'The session is not registered to a Harness workspace');
+    }
+    workspace = { path: summary.cwd };
+  }
   const adopted = await client.rpc('session.create', {
-    workspaceId: workspace.workspaceId,
+    ...(workspace.workspaceId ? { workspaceId: workspace.workspaceId } : { cwd: workspace.path }),
     sessionId,
   }, timeoutMs, options);
   if (!adopted || adopted.sessionId !== sessionId) {

package/src/channels/shared/i18n-en/diagnostics.mjs

@@ -0,0 +1,55 @@
+export default Object.freeze({
+  "DSH 版本": "DSH version",
+  "依赖版本": "Dependency versions",
+  "代理已配置": "Proxy configured",
+  "原因链已截断": "Cause chain truncated",
+  "请在 macOS 系统设置中授予 DSH 完全磁盘访问权限，以读取 Messages 数据库。": "Grant DSH Full Disk Access in macOS System Settings to read the Messages database.",
+  "请在 macOS 系统设置中允许 DSH 自动控制 Messages。": "Allow DSH to control Messages in macOS System Settings.",
+  "先在 macOS 系统设置中授予 Messages 权限。": "Grant Messages permissions in macOS System Settings first.",
+
+  "加载渠道配置": "Load channel configuration",
+  "激活账号": "Activate account",
+  "启动连接": "Start connection",
+  "监测连接与消息": "Monitor connection and messages",
+  "停止连接": "Stop connection",
+  "服务返回码": "Provider code",
+  "验证凭据": "Verify credentials",
+  "检查权限": "Check permissions",
+  "加载渠道组件": "Load channel component",
+  "执行渠道操作": "Perform channel operation",
+  "接收消息": "Receive message",
+  "发送消息": "Send message",
+  "发送测试消息": "Send test message",
+  "暂未识别": "Unknown",
+  "操作已取消。": "The operation was cancelled.",
+  "本地会话状态清理失败，请查看诊断详情。": "Local session state cleanup failed. See the diagnostic details.",
+  "账号已移除，但本地状态清理失败。": "The account was removed, but local state cleanup failed.",
+  "账号已移除，但登录凭据清理失败。": "The account was removed, but credential cleanup failed.",
+  "连接已移除，但登录凭据清理失败。": "The connection was removed, but credential cleanup failed.",
+
+  "操作失败，请查看原因和诊断详情。": "The operation failed. See the cause and diagnostic details.",
+  "检测到多个底层原因，请展开诊断详情逐项检查。": "Multiple underlying causes were detected. Expand the diagnostic details to inspect them.",
+  "服务域名解析失败，请检查运行 DSH 的机器的 DNS 和网络设置。": "Service DNS resolution failed. Check DNS and network settings on the machine running DSH.",
+  "目标拒绝连接，请检查服务地址、端口和访问限制。": "The connection was refused. Check the service address, port, and access restrictions.",
+  "连接已中断，请检查网络和目标服务状态。": "The connection was interrupted. Check the network and target service.",
+  "目标网络不可达，请检查运行 DSH 的机器的网络出口和访问限制。": "The target network is unreachable. Check network routing and access restrictions on the machine running DSH.",
+  "TLS 或证书校验失败，请检查系统时间、证书链和网络设置。": "TLS or certificate validation failed. Check the system clock, certificate chain, and network settings.",
+  "请求超时，请检查目标服务和网络；诊断详情中可查看已知的耗时。": "The request timed out. Check the service and network; available timings are in the diagnostic details.",
+  "代理连接或认证失败，请检查 DSH 进程使用的代理配置。": "Proxy connection or authentication failed. Check the proxy configuration used by the DSH process.",
+  "服务认证失败，请检查账号和授权信息。": "Service authentication failed. Check the account and credentials.",
+  "操作权限不足，请检查对应资源的访问权限。": "Permission was denied. Check access to the affected resource.",
+  "所需文件或本地工具不存在，请检查安装和配置。": "A required file or local tool is missing. Check installation and configuration.",
+  "服务正在限流，请稍后重试。": "The service is rate limiting requests. Try again later.",
+  "服务拒绝了请求，请检查凭据、权限或访问限制；HTTP 状态本身不能确认登录失效。": "The service rejected the request. Check credentials, permissions, or access restrictions; the HTTP status alone does not prove that the login expired.",
+  "目标服务暂时异常，请稍后重试。": "The target service is temporarily unavailable. Try again later.",
+  "目标服务返回了 HTTP 错误，请查看诊断详情。": "The target service returned an HTTP error. See the diagnostic details.",
+  "数据格式无效，请按失败阶段检查服务响应或本地配置。": "The data format is invalid. Check the service response or local configuration indicated by the failing stage.",
+  "暂未识别具体原因，请复制诊断信息，并查看相同参考号的 DSH 日志。": "The underlying cause is unknown. Copy the diagnostics and find the matching reference in the DSH logs.",
+  "多个原因": "Multiple causes",
+  "服务域名": "Service host",
+  "请求耗时（毫秒）": "Request duration (ms)",
+  "超时阈值（毫秒）": "Timeout (ms)",
+  "Node 版本": "Node version",
+  "运行平台": "Platform",
+  "无法访问 DSH 管理接口，请检查 DSH 连接或重新登录后重试。": "Cannot access the DSH management API. Check the DSH connection or sign in again."
+});

package/src/channels/shared/i18n-en/email.mjs

@@ -0,0 +1,25 @@
+/** English projections for host-side Email channel text. */
+export default Object.freeze({
+  '邮箱': 'Email',
+  '邮箱地址格式不正确': 'The email address format is invalid',
+  '邮箱地址与应用密码均为必填': 'Both the email address and the app password are required',
+  '请选择邮箱服务商或填写 IMAP/SMTP 服务器地址':
+    'Choose a mail provider or fill in the IMAP/SMTP server addresses',
+  '必须至少配置一个允许发件人':
+    'At least one allowed sender must be configured',
+  '邮箱连接失败，请检查地址、应用密码与服务器设置':
+    'Could not connect to the mailbox; check the address, app password, and server settings',
+  '未找到该邮箱配置': 'No mailbox configuration was found',
+  '邮箱凭据已丢失，请重新绑定':
+    'The mailbox credential is missing; please bind the mailbox again',
+  '邮箱尚未连接': 'The mailbox is not connected yet',
+  '邮箱通道连接正常。': 'The Email channel is connected.',
+  '邮箱通道运行正常': 'The Email channel is running normally',
+  '邮箱通道尚未连接': 'The Email channel is not connected yet',
+  '邮箱访问策略同步失败，请重试': 'Failed to sync the mailbox access policy; please retry',
+  '当前环境不支持会话绑定': 'Session binding is not supported in this environment',
+  '该接入方式不需要扫码授权': 'This access method does not use QR authorization',
+  '授权信息缺失，请重新扫码授权': 'The authorization is missing; please scan again',
+  '扫码授权尚未开始': 'QR authorization has not been started',
+  '扫码授权已超时，请重新发起': 'QR authorization timed out; please start it again',
+});

package/src/channels/shared/i18n-en/image-input.mjs

@@ -0,0 +1,17 @@
+export default {
+  "图片原文件已保存到工作区，文件清单中的图片序号与本条消息一致。图片内容块可能经过缩放或压缩；需要查看细节时可用工具读取原文件。": "Original images are saved in the workspace. Image numbers in the file list match this message. Image blocks may be resized or compressed; use tools to read originals for details.",
+  "部分图片未直接提供给模型，图片序号：{indexes}。原文件已保存，请使用可用工具读取或分析；不要假设自己已看到这些图片。": "Some images were not provided directly to the model: {indexes}. Originals are saved; use available tools to read or analyze them. Do not assume you have seen these images.",
+  "宿主拒绝了本次图片输入。原图已保存到工作区，请根据文件清单使用可用工具读取或分析，不要假设自己已看到图片。": "The Host rejected the image input. Originals are saved in the workspace; use the file list and available tools to read or analyze them. Do not assume you have seen the images.",
+  "图片超过原图接收上限 {maxMb} MB，请压缩后重试，或在通用设置的附件中调整上限。": "The image exceeds the original-image receipt limit of {maxMb} MB. Compress it and retry, or adjust the limit in General settings > Attachments.",
+  "图片 {index}（原图文件：{name}）": "Image {index} (original file: {name})",
+  "图片限制无效：请输入正整数，原图接收上限和总量上限不能小于单图上限。": "Invalid image limits: enter positive integers. The receipt and total limits must be at least the per-image limit.",
+  "无法读取或保存图片设置，请稍后重试。": "Could not read or save image settings. Try again later.",
+  "原图接收上限 (MB)": "Original-image receipt limit (MB)",
+  "模型单图上限 (MB)": "Model per-image limit (MB)",
+  "模型图片总量上限 (MB)": "Model total image limit (MB)",
+  "每条消息最多图片数": "Maximum images per message",
+  "图片输入": "Image input",
+  "适用于支持图片的聊天渠道。原图按附件保留时长保存，发送给模型的副本会自动缩放或压缩；无法直接发送时交给模型按文件处理。": "Applies to chat channels that support images. Originals follow attachment retention settings. Model copies are resized or compressed automatically; images that cannot be sent directly are provided as files.",
+  "保存图片设置": "Save image settings",
+  "正在读取图片设置…": "Loading image settings…"
+};

package/src/channels/shared/i18n-en/shared-a.mjs

@@ -3,6 +3,7 @@ export default {
   '这个问题已在其他客户端处理，无需再次回答。':
     'This question has already been answered from another client; no further reply is needed.',
   '任务已完成。': 'Task completed.',
+  '本轮处理已结束，没有文本回复。': 'This turn has ended with no text reply.',
   '结果文件': 'result file',
   '结果文件「{name}」的发送结果未能确认，请先检查聊天内是否已收到，不要立即重试。':
     'The delivery result of the result file "{name}" could not be confirmed. Please check whether it already arrived in the chat before retrying.',

package/src/channels/shared/i18n-en/shared-c.mjs

@@ -8,7 +8,7 @@ export default {
   '{channel}配置格式错误。请检查其数据目录中的 config.json 和 workspaces.json，修复后重启 DSH。详细原因请查看启动日志。': 'The {channel} configuration is invalid. Check config.json and workspaces.json in its data directory, then restart DSH. See the startup log for details.',
   '{channel}配置格式错误。请检查其数据目录中的 config.json，修复后重启 DSH。详细原因请查看启动日志。': 'The {channel} configuration is invalid. Check config.json in its data directory, then restart DSH. See the startup log for details.',
   '无法读取或写入{channel}配置。请检查其数据目录的访问权限，修复后重启 DSH。详细原因请查看启动日志。': 'The {channel} configuration could not be read or written. Check access to its data directory, then restart DSH. See the startup log for details.',
-  '{channel}初始化失败。请查看 DSH 启动日志中 failed to activate {id} 后的错误，修复后重启 DSH。': '{channel} initialization failed. Check the error after "failed to activate {id}" in the DSH startup log, fix it, then restart DSH.',
+  '{channel}初始化失败。请展开诊断详情，并通过参考号查找 DSH 启动日志，修复后重启 DSH。': '{channel} initialization failed. Expand the diagnostic details and find the reference in the DSH startup log, fix the issue, then restart DSH.',
   // history-command.mjs / command help
   '/history [数量]  查看最近历史消息（默认 3 条，最多 5 条）':
     '/history [count]  Preview recent messages (default 3, maximum 5)',

package/src/channels/shared/i18n-en.mjs

@@ -1,3 +1,5 @@
+import imageInput from './i18n-en/image-input.mjs';
+import diagnostics from './i18n-en/diagnostics.mjs';
 // English translations for host-side user-facing text.
 // Keys are the exact Chinese literals passed to t() in src/channels/**.
 // Chinese output is the identity default and needs no entries here.
@@ -17,9 +19,12 @@ import telegram from './i18n-en/telegram.mjs';
 import discord from './i18n-en/discord.mjs';
 import whatsapp from './i18n-en/whatsapp.mjs';
 import office from './i18n-en/office.mjs';
+import email from './i18n-en/email.mjs';
 
 export const EN = Object.freeze(Object.assign(
   {},
+  diagnostics,
+  imageInput,
   sharedA,
   sharedB,
   sharedC,
@@ -34,4 +39,5 @@ export const EN = Object.freeze(Object.assign(
   discord,
   whatsapp,
   office,
+  email,
 ));

package/src/channels/shared/image-input-policy.mjs

@@ -0,0 +1,35 @@
+export const IMAGE_MEGABYTE = 1024 * 1024;
+
+export const DEFAULT_IMAGE_INPUT_SETTINGS = Object.freeze({
+  maxDownloadMb: 30,
+  maxImageMb: 5,
+  maxTotalMb: 20,
+  maxImages: 20,
+});
+
+/** Shared by the settings form and Host; reject incomplete or unsafe values. */
+export function normalizeImageInputSettings(value) {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return null;
+  const result = {};
+  for (const key of Object.keys(DEFAULT_IMAGE_INPUT_SETTINGS)) {
+    const input = value[key];
+    const number = typeof input === 'string' && /^\d+$/.test(input.trim())
+      ? Number(input.trim()) : input;
+    if (!Number.isSafeInteger(number) || number < 1
+      || !Number.isSafeInteger(number * IMAGE_MEGABYTE)) return null;
+    result[key] = number;
+  }
+  if (result.maxDownloadMb < result.maxImageMb || result.maxTotalMb < result.maxImageMb) return null;
+  return Object.freeze(result);
+}
+
+export function imageInputLimits(settings = DEFAULT_IMAGE_INPUT_SETTINGS) {
+  const normalized = normalizeImageInputSettings(settings);
+  if (!normalized) throw new TypeError('Invalid image input settings');
+  return Object.freeze({
+    maxDownloadBytes: normalized.maxDownloadMb * IMAGE_MEGABYTE,
+    maxImageBytes: normalized.maxImageMb * IMAGE_MEGABYTE,
+    maxTotalImageBytes: normalized.maxTotalMb * IMAGE_MEGABYTE,
+    maxImages: normalized.maxImages,
+  });
+}

package/src/channels/shared/image-input-settings-store.mjs

@@ -0,0 +1,60 @@
+import { randomUUID } from 'node:crypto';
+import { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+
+import { DEFAULT_IMAGE_INPUT_SETTINGS, normalizeImageInputSettings } from './image-input-policy.mjs';
+
+const stores = new Map();
+
+export class ImageInputSettingsStore {
+  #path;
+  #settings = DEFAULT_IMAGE_INPUT_SETTINGS;
+  #ready;
+  #writes = Promise.resolve();
+
+  constructor(path) { this.#path = path; }
+
+  async get() {
+    this.#ready ??= this.#load().catch((error) => { this.#ready = null; throw error; });
+    await this.#ready;
+    return { ...this.#settings };
+  }
+
+  async #load() {
+    let raw;
+    try { raw = await readFile(this.#path, 'utf8'); }
+    catch (error) { if (error.code === 'ENOENT') return; throw error; }
+    const document = JSON.parse(raw);
+    const settings = document.version === 1 && normalizeImageInputSettings(document.imageInput);
+    if (!settings) throw new Error('Invalid image input settings document');
+    this.#settings = settings;
+  }
+
+  async set(value) {
+    const settings = normalizeImageInputSettings(value);
+    if (!settings) throw new TypeError('Invalid image input settings');
+    const operation = this.#writes.catch(() => {}).then(async () => {
+      await this.get();
+      await mkdir(dirname(this.#path), { recursive: true, mode: 0o700 });
+      const temporary = `${this.#path}.${randomUUID()}.tmp`;
+      try {
+        await writeFile(temporary, `${JSON.stringify({ version: 1, imageInput: settings }, null, 2)}\n`,
+          { mode: 0o600, flag: 'wx' });
+        await rename(temporary, this.#path);
+        this.#settings = settings;
+      } finally { await rm(temporary, { force: true }); }
+      return { ...settings };
+    });
+    this.#writes = operation;
+    return operation;
+  }
+}
+
+/** One settings owner per DSH home, shared by the UI and channel Harness clients. */
+export function getImageInputSettingsStore(config = {}) {
+  const root = resolve(config.dshHome ?? process.env.DSH_HOME ?? join(homedir(), '.dsh'));
+  const path = join(root, 'integrations', 'dsh-im', 'image-input-settings.json');
+  if (!stores.has(path)) stores.set(path, new ImageInputSettingsStore(path));
+  return stores.get(path);
+}