dsh-ant 0.6.0 → 0.6.3

package/client.js

@@ -12,6 +12,37 @@ window.__ModuleLoader__.load({
     let localeMetadata = {}
     let localeTranslate = (key) => key
     let localeMessagePatterns = []
+    const pluginScopeBusyMessage = '本机有一项插件操作仍在完成；结束前不能启动其他插件安装。'
+    const pluginRuntimeState = {
+      uncertainInstalls: new Map(), uncertainInstallsRef: { current: {} },
+      serviceUrl: '', scopeRevision: 0, workingId: '', workingServiceUrl: '', completedId: '',
+      message: '', messagePluginId: { current: '' }, messagePackageName: { current: '' },
+      messageClearOnResolve: { current: false },
+      refreshMessage: '', refreshMessageIsError: false,
+      messageVersion: { current: 0 }, refreshGeneration: { current: 0 }, refreshRevision: 0,
+      listeners: new Set(),
+    }
+    const publishPluginRuntimeState = () => {
+      pluginRuntimeState.uncertainInstallsRef.current = Object.fromEntries(pluginRuntimeState.uncertainInstalls)
+      for (const listener of [...pluginRuntimeState.listeners]) listener()
+    }
+    const setPluginRuntimeServiceScope = (serviceUrl) => {
+      const nextServiceUrl = normalizeServiceUrl(serviceUrl) || ''
+      if (nextServiceUrl === pluginRuntimeState.serviceUrl) return
+      pluginRuntimeState.serviceUrl = nextServiceUrl
+      pluginRuntimeState.scopeRevision += 1
+      pluginRuntimeState.completedId = ''
+      pluginRuntimeState.message = pluginRuntimeState.workingId ? pluginScopeBusyMessage : ''
+      pluginRuntimeState.messagePluginId.current = ''
+      pluginRuntimeState.messagePackageName.current = ''
+      pluginRuntimeState.messageClearOnResolve.current = false
+      pluginRuntimeState.refreshMessage = ''
+      pluginRuntimeState.refreshMessageIsError = false
+      pluginRuntimeState.messageVersion.current += 1
+      pluginRuntimeState.refreshGeneration.current += 1
+      pluginRuntimeState.refreshRevision += 1
+      publishPluginRuntimeState()
+    }
     const escapeRegExp = (value) => value.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&')
     const compileLocalePattern = (source) => {
       const names = []
@@ -54,6 +85,45 @@ window.__ModuleLoader__.load({
       }
       return createElement(type, localizedProps, ...children.map(localizedChild))
     }
+    const releaseNoteBlocks = (value) => {
+      const blocks = []
+      let paragraph = []
+      let list = []
+      let key = 0
+      const flushParagraph = () => {
+        if (!paragraph.length) return
+        blocks.push(h('p', { key: key++, style: { ...mutedTextStyle, whiteSpace: 'pre-line' } },
+          rawLocaleText(paragraph.join('\n'))))
+        paragraph = []
+      }
+      const flushList = () => {
+        if (!list.length) return
+        blocks.push(h('ul', { key: key++, style: { margin: 0, paddingLeft: 22, display: 'grid', gap: 4,
+          color: 'var(--dsw-alias-label-secondary)', fontSize: 13, lineHeight: 1.6 } },
+        ...list.map((item) => h('li', { key: item.key }, rawLocaleText(item.text)))))
+        list = []
+      }
+      for (const line of String(value ?? '').replace(/\r\n?/gu, '\n').split('\n')) {
+        const heading = /^\s{0,3}(#{1,3})\s+(.+)$/u.exec(line)
+        const bullet = /^\s*(?:[-*•]|\d+[.)])\s+(.+)$/u.exec(line)
+        if (heading) {
+          flushParagraph(); flushList()
+          const level = heading[1].length
+          const tag = level === 1 ? 'h3' : level === 2 ? 'h4' : 'h5'
+          blocks.push(h(tag, { key: key++, style: { margin: 0,
+            fontSize: level === 1 ? 15 : 13, lineHeight: 1.45 } }, rawLocaleText(heading[2].trim())))
+        } else if (bullet) {
+          flushParagraph()
+          list.push({ key: key++, text: bullet[1].trim() })
+        } else if (!line.trim()) {
+          flushParagraph(); flushList()
+        } else {
+          flushList(); paragraph.push(line)
+        }
+      }
+      flushParagraph(); flushList()
+      return blocks
+    }
     const confirmLocalized = (message) => window.confirm(translateLocaleText(message))
     const promptLocalized = (message, ...args) => window.prompt(translateLocaleText(message), ...args)
     const useLocaleRevision = () => {
@@ -444,6 +514,7 @@ window.__ModuleLoader__.load({
             if (result.service_url != null && !pinned) throw new Error()
             if (pinned) {
               if (current()) {
+                setPluginRuntimeServiceScope(pinned)
                 setBinding({ state: 'ready', url: pinned })
                 setServiceUrl(pinned)
                 setDraft(pinned)
@@ -494,6 +565,7 @@ window.__ModuleLoader__.load({
         }
         try {
           localStorage.setItem(SERVICE_URL_STORAGE_KEY, normalized)
+          setPluginRuntimeServiceScope(normalized)
           setServiceUrl(normalized)
           setDraft(normalized)
           setMessage('团队服务地址已保存。')
@@ -509,6 +581,7 @@ window.__ModuleLoader__.load({
       const bindingReadyForSummary = binding.state === 'ready' && Boolean(binding.url)
       const onConnectionChange = (url) => {
         bindingRevision.current += 1
+        setPluginRuntimeServiceScope(url || '')
         setBinding({ state: 'ready', url: url || null })
         setDelegationRevision((value) => value + 1)
         if (url) {
@@ -622,15 +695,18 @@ window.__ModuleLoader__.load({
       const [defaults, setDefaults] = useState(null)
       const [localConcurrency, setLocalConcurrency] = useState(null)
       const [repositoryCacheLimitGib, setRepositoryCacheLimitGib] = useState(10)
+      const [ownerChallengeCode, setOwnerChallengeCode] = useState('')
+      const ownerChallengeMetaRef = useRef(null)
+      const ownerChallengeTimerRef = useRef(null)
       const [botId, setBotId] = useState('')
+      const botIdRef = useRef('')
       const [conversationKind, setConversationKind] = useState('dm')
       const [groupId, setGroupId] = useState('')
       const [ruleDescription, setRuleDescription] = useState('')
       const recognizedBaselineRef = useRef(null)
       const recognizedDescriptionRef = useRef(null)
-      const autoAnalyzeDescriptionRef = useRef(null)
       const recognitionRequestRef = useRef(0)
-      const recognitionTimerRef = useRef(null)
+      const recognitionControllerRef = useRef(null)
       const [recognitionBusy, setRecognitionBusy] = useState(false)
       const [recognitionMessage, setRecognitionMessage] = useState('')
       const [missingRequired, setMissingRequired] = useState([])
@@ -641,8 +717,31 @@ window.__ModuleLoader__.load({
       const [taskPrompt, setTaskPrompt] = useState('')
       const [runner, setRunner] = useState('dsh')
       const [reviewers, setReviewers] = useState(['dsh'])
+      const [ownerApprovalRequired, setOwnerApprovalRequired] = useState(true)
       const [parameters, setParameters] = useState([])
-      const [parallelAgentsOpen, setParallelAgentsOpen] = useState(false)
+      const cancelRecognitionRequest = () => {
+        recognitionControllerRef.current?.abort()
+        recognitionControllerRef.current = null
+        setRecognitionBusy(false)
+      }
+      const clearOwnerChallenge = () => {
+        if (ownerChallengeTimerRef.current !== null) clearTimeout(ownerChallengeTimerRef.current)
+        ownerChallengeTimerRef.current = null
+        ownerChallengeMetaRef.current = null
+        setOwnerChallengeCode('')
+      }
+      const selectBot = (nextBotId) => {
+        if (nextBotId !== botIdRef.current) {
+          clearOwnerChallenge()
+          botIdRef.current = nextBotId
+        }
+        setBotId(nextBotId)
+      }
+      useEffect(() => () => {
+        recognitionRequestRef.current += 1
+        recognitionControllerRef.current?.abort()
+        if (ownerChallengeTimerRef.current !== null) clearTimeout(ownerChallengeTimerRef.current)
+      }, [])
       const [giteaToken, setGiteaToken] = useState('')
       const [tokenConfigured, setTokenConfigured] = useState(false)
       const [senderScope, setSenderScope] = useState('any')
@@ -662,9 +761,12 @@ window.__ModuleLoader__.load({
         setLoading(true)
         setMessage('')
         try {
-          const paths = ['bots', 'enrolled-bots', 'groups', 'cards', 'settings', 'executors', 'local-settings', 'status']
+          const ownerChallengeAtLoad = ownerChallengeMetaRef.current
+          const paths = ['bots', 'enrolled-bots', 'groups', 'cards', 'settings', 'executors', 'local-settings', 'status',
+            ...(ownerChallengeAtLoad ? ['owner-challenge'] : [])]
           const responses = await Promise.all(paths.map((path) =>
-            fetch(`/api/ant-teams/delegation/${path}`, { cache: 'no-store',
+            fetch(`/api/ant-teams/delegation/${path}${path === 'owner-challenge'
+              ? `?bot_fingerprint=${encodeURIComponent(ownerChallengeAtLoad.fingerprint)}` : ''}`, { cache: 'no-store',
               ...(path === 'enrolled-bots' ? { headers: { 'x-ant-include-unbound': 'true' } } : {}) })
               .catch(() => null)))
           const data = await Promise.all(responses.map((response) => response
@@ -676,12 +778,30 @@ window.__ModuleLoader__.load({
             Array.isArray,
             (value) => value && typeof value === 'object' && !Array.isArray(value),
             (value) => Array.isArray(value?.items),
+            ...(ownerChallengeAtLoad ? [(value) => value && typeof value === 'object'
+              && typeof value.pending === 'boolean'] : []),
           ]
           const readable = responses.map((response, index) => Boolean(response?.ok && valid[index](data[index])))
-          setLoadFailures(paths.filter((path, index) => !readable[index]))
+          setLoadFailures(paths.filter((path, index) => !readable[index] && path !== 'owner-challenge'))
           setBots(readable[0] ? data[0].bots : [])
           setBotLoadError(!readable[0])
-          setEnrolled(readable[1] ? data[1] : [])
+          const nextEnrolled = readable[1] ? data[1] : []
+          setEnrolled(nextEnrolled)
+          const ownerChallenge = ownerChallengeAtLoad
+          if (ownerChallenge) {
+            const selectedFingerprint = readable[0] ? data[0].bots.find((bot) => bot.bot_id === botId)?.fingerprint : null
+            const enrollmentRead = readable[1]
+            const nowBound = enrollmentRead && nextEnrolled.some((enrollment) => enrollment.bot_fingerprint === ownerChallenge.fingerprint
+              && enrollment.owner_bound)
+            const challengeStatusIndex = paths.indexOf('owner-challenge')
+            const challengePending = challengeStatusIndex >= 0 && readable[challengeStatusIndex]
+              ? data[challengeStatusIndex].pending : null
+            if (ownerChallengeMetaRef.current === ownerChallenge
+              && (readable[0] && selectedFingerprint !== ownerChallenge.fingerprint
+                || Date.now() >= ownerChallenge.expiresAt
+                || (!ownerChallenge.ownerWasBound && nowBound)
+                || challengePending === false)) clearOwnerChallenge()
+          }
           setGroups(readable[2] ? data[2] : [])
           setCards(readable[3] ? data[3] : [])
           setDefaults(readable[4] ? data[4] : null)
@@ -697,12 +817,16 @@ window.__ModuleLoader__.load({
       useEffect(() => { void load().catch((error) => setMessage(error.message)) }, [remote, revision])
       useEffect(() => { setMessage('') }, [activeTab])
       const selectedBot = bots.find((bot) => bot.bot_id === botId)
+      const botPlatformLabel = (bot) => bot?.channel === 'feishu' || !bot?.channel
+        ? translateLocaleText('飞书')
+        : bot.channel === 'wecom' ? translateLocaleText('企业微信') : translateLocaleText('其他 IM')
       const botConnected = Boolean(selectedBot?.available && selectedBot?.connected)
       const selectedEnrollment = enrolled.find((bot) => bot.bot_fingerprint === selectedBot?.fingerprint)
       const selectedGiteaOrigin = normalizeServiceUrl(selectedEnrollment?.gitea_origin)
       const taskPrOrigins = [...new Set(parameters.filter((item) => item.kind === 'gitea_pr')
         .map((item) => normalizeServiceUrl(item.gitea_origin)).filter(Boolean))]
       const selectedEnrollmentBound = selectedEnrollment?.device_bound_to_current === true
+      const ownerApprovalBound = selectedEnrollment?.owner_bound === true
       const dmChatSettingAvailable = typeof selectedEnrollment?.dm_chat_enabled === 'boolean'
       const dmChatEnabled = selectedEnrollment?.dm_chat_enabled !== false
       const dmChatStatus = !selectedBot ? '先选择机器人'
@@ -714,7 +838,7 @@ window.__ModuleLoader__.load({
           : !selectedEnrollmentBound ? '请先把机器人绑定到这台 DSH，再修改私聊设置。'
             : !dmChatSettingAvailable ? '当前团队服务端尚未提供私聊开关，请先升级服务端。'
               : dmChatEnabled
-                ? '允许此机器人接收私聊；任务仍按已开放的规则执行。'
+              ? '允许此机器人接收私聊。匹配任务卡的请求按预授权执行；没有匹配卡片的明确任务可转给已绑定主人逐次审批。'
                 : '新私聊消息不会交给 DSH；已提交任务仍会在原私聊回复。已开放能力不撤销，重新开启后未过期能力恢复触发。'
       const availableGroups = groups.filter((group) => group.bot_fingerprint === selectedBot?.fingerprint)
       const groupLabel = (group) => {
@@ -744,9 +868,8 @@ window.__ModuleLoader__.load({
                 : !selectedBot ? '已有协作机器人；请选择一台，查看已开放的能力和聊天范围。'
                   : authorizationLoadError ? `“${selectedBot.name}”已启用协作；已开放任务暂未读取，请刷新状态。`
                     : !dmChatEnabled ? `“${selectedBot.name}”已启用协作；私聊已关闭，群聊仍按各自设置工作。`
-                      : selectedTaskCount === 0 ? `“${selectedBot.name}”已启用协作；下一步开放一项能力。你也可以先私聊自测普通聊天。`
-                        : `“${selectedBot.name}”已启用协作 · ${selectedTaskCount} 项能力已开放。可以私聊自测。`
-      const nativeReviewerSelected = reviewers.some((item) => ['codex', 'claude-code'].includes(item))
+                      : selectedTaskCount === 0 ? `“${selectedBot.name}”已启用协作；绑定审批私聊后，未配置的明确任务会先问你。常用任务可建卡直接放行。`
+                        : `“${selectedBot.name}”已启用协作 · ${selectedTaskCount} 项预授权能力。其他明确任务可交给主人逐次审批。`
       const hasPrParameter = parameters.some((item) => item.kind === 'gitea_pr')
       const hasSelectedPrRule = activeCards.some((card) => card.bot_fingerprint === selectedBot?.fingerprint
         && Array.isArray(card.parameters) && card.parameters.some((rule) => rule.kind === 'gitea_pr'))
@@ -756,17 +879,25 @@ window.__ModuleLoader__.load({
       const codexAvailable = executors.some((item) => item.id === 'codex' && item.available)
       const claudeCodeAvailable = executors.some((item) => item.id === 'claude-code' && item.available)
       const dshAvailable = executors.some((item) => item.id === 'dsh' && item.available)
-      const nativePrUnavailableReason = executors.find((item) => item.reason)?.reason || null
+      const executorUnavailableReason = executors.find((item) => item.reason)?.reason || null
       const reviewerLabel = (id) => ({ dsh: 'DSH', codex: 'Codex', 'claude-code': 'Claude Code' })[id] || id
+      const usesExternalExecutor = reviewers.some((id) => ['codex', 'claude-code'].includes(id))
       const cardReviewerSummary = (card) => {
         const selected = Array.isArray(card.reviewers) && card.reviewers.length ? card.reviewers : [card.runner]
-        const unavailable = selected.filter((runner) => runner !== 'dsh')
-        if (card.runner !== 'dsh') return translateLocaleText('{executor} 默认执行方暂不可用',
+        const unavailable = selected.filter((runner) => !executors.some((item) => item.id === runner && item.available))
+        if (unavailable.includes(card.runner)) return translateLocaleText('{executor} 默认执行方暂不可用',
           { executor: reviewerLabel(card.runner) })
-        return unavailable.length
-          ? translateLocaleText('默认 DSH；{executors} 暂不可用',
-            { executors: unavailable.map(reviewerLabel).join('、') })
-          : translateLocaleText('DSH 任务 Agent')
+        const additional = selected.filter((runner) => runner !== card.runner)
+        const selectedSummary = additional.length
+          ? translateLocaleText('默认 {executor}；交叉审查：{reviewers}',
+            { executor: reviewerLabel(card.runner), reviewers: additional.map(reviewerLabel).join('、') })
+          : translateLocaleText('{executor} 默认执行', { executor: reviewerLabel(card.runner) })
+        const summary = unavailable.length
+          ? `${selectedSummary}；${unavailable.map(reviewerLabel).join('、')} 暂不可用`
+          : selectedSummary
+        return card.owner_approval_required !== false
+          && selected.some((id) => ['codex', 'claude-code'].includes(id))
+          ? translateLocaleText('{summary}；启动前需要主人审批', { summary }) : summary
       }
       const requesterSummary = senderScope === 'allowlist'
         ? translateLocaleText('仅指定成员：{member_ids}',
@@ -775,8 +906,10 @@ window.__ModuleLoader__.load({
       const resultRouteSummary = translateLocaleText(conversationKind === 'group'
         ? '回复到原群（群内可见）' : '回复到发起任务的私聊')
       const ruleSummaryCurrent = recognizedDescriptionRef.current === ruleDescription.trim()
-      const ruleSummaryPending = Boolean(ruleDescription.trim() && !ruleSummaryCurrent)
-      const ruleSummaryReady = Boolean(ruleSummaryCurrent && (title || intent || parameters.length || taskPrompt))
+      const ruleSummaryPending = recognitionBusy
+      const ruleSummaryDirty = Boolean(ruleDescription.trim() && !ruleSummaryCurrent)
+      const ruleSummaryReady = Boolean(!ruleSummaryPending && ruleSummaryCurrent
+        && (title || intent || parameters.length || taskPrompt))
       const missingHarnessInputs = [...new Set([
         ...missingRequired,
         ...(parameters.some((rule) => rule.kind === 'gitea_pr'
@@ -814,21 +947,22 @@ window.__ModuleLoader__.load({
       const executorSummary = translateLocaleText(runner === 'codex' ? 'DSH Codex 子 Agent'
         : runner === 'claude-code' ? 'DSH Claude Code 子 Agent' : 'DSH · 当前授权模型'
       )
-      const parallelAgentsSummary = reviewers.filter((item) => item !== runner).map(reviewerLabel).join('、')
       const cardBlockReason = enrollmentLoadError ? '暂时无法核对机器人是否已启用协作，请刷新状态后再试。'
         : !botConnected || !selectedEnrollmentBound ? '先在上方把机器人绑定到这台 DSH。'
         : loadFailures.includes('settings') || defaults?.task_rule_schema_version !== 3
           ? '团队服务端尚未支持 AI 任务 Harness 与运行时授权核验；请先升级 ANT 服务端。'
         : !ruleDescription.trim() ? '请先用自然语言描述要做的任务。'
+        : recognitionBusy ? 'AI 正在检查当前描述；分析完成后再开放。'
         : recognizedDescriptionRef.current !== ruleDescription.trim()
-          ? 'AI 正在根据最新描述检查任务 Harness；分析完成后再开放。'
+          ? '描述已修改，请点击“立即分析”更新任务理解后再开放。'
         : !title.trim() || !intent.trim() || !taskPrompt.trim() ? '等待 AI 生成任务理解和处理要求。'
-        : missingHarnessInputs.length ? `任务范围还有必需信息未明确：${missingHarnessInputs.join('、')}。请补充描述。`
+        : usesExternalExecutor && ownerApprovalRequired && !ownerApprovalBound
+          ? '这项任务需要主人审批，请先绑定审批私聊，或取消“启动前需要主人审批”。'
         : conversationKind === 'group' && loadFailures.includes('groups') ? '暂时无法核对目标群，请刷新状态后再试。'
         : conversationKind === 'group' && !groupId ? '请在“请求范围”中选择目标群；若列表为空，让群成员先 @机器人，再刷新群列表。'
           : senderScope === 'allowlist' && !senderIds.trim() ? '请填写可请求成员的 IM ID。'
-            : reviewers.some((item) => item !== 'dsh')
-              ? '当前只允许 DSH 执行协作任务。请将默认执行方改为 DSH，并移除未获准的外部 Agent。'
+          : reviewers.some((item) => !executors.some((executor) => executor.id === item && executor.available))
+              ? `这台 DSH 尚未启用所选执行器。${executorUnavailableReason || '请先启用对应 DSH 子 Agent 提供方。'}`
             : parameters.some((rule) => rule.kind === 'gitea_pr') && !tokenConfigured ? '请先在“本机与任务”中保存本机 Gitea 只读令牌。'
             : parameters.some((rule) => rule.kind === 'gitea_pr'
               && (typeof rule.gitea_origin !== 'string' || !normalizeServiceUrl(rule.gitea_origin) || !rule.repository))
@@ -838,11 +972,6 @@ window.__ModuleLoader__.load({
                 ? `${translateLocaleText('任务描述中的 Gitea 来源必须与此机器人的连接器主机一致（{origin}）；为保护令牌，ANT 不会向其他主机发送凭据。', { origin: selectedGiteaOrigin })} ${translateLocaleText('请在描述中改用该主机下的 PR 链接并重新分析。')}`
               : taskPrOrigins.length > 1
                 ? '同一任务中的 PR 资源必须来自同一个 Gitea 主机。'
-              : nativeReviewerSelected && (parameters.filter((rule) => rule.kind === 'gitea_pr').length !== 1
-                || parameters.some((rule) => !['gitea_pr', 'git_sha'].includes(rule.kind)))
-                ? 'Codex 和 Claude Code 当前只支持一个 Gitea PR 资源连接器；任务具体做审查、总结或解释仍由自然语言描述决定。'
-                : nativeReviewerSelected && !parameters.find((rule) => rule.kind === 'gitea_pr')?.required
-                  ? '使用本机 Provider 时，Gitea PR 资源必须是必填项。'
               : reviewers.includes('dsh') && !dshAvailable
                   ? '这台 DSH 尚未准备好任务执行器。'
               : ''
@@ -856,10 +985,8 @@ window.__ModuleLoader__.load({
         if (!next.includes(runner)) setRunner(next[0])
       }
       const selectRunner = (id) => {
+        if (!reviewers.includes(id)) return
         setRunner(id)
-        setReviewers((current) => current.length > 1
-          ? [...new Set([...current, id])]
-          : [id])
       }
       const startNewCard = (context = {}) => {
         setEditingCardId(null); setEditingExpiresAt(null)
@@ -868,16 +995,16 @@ window.__ModuleLoader__.load({
         setRecognitionMessage('')
         recognizedBaselineRef.current = null
         recognizedDescriptionRef.current = null
-        autoAnalyzeDescriptionRef.current = null
+        cancelRecognitionRequest()
         recognitionRequestRef.current += 1
         setRuleDescription('')
         setMissingRequired([]); setSuggestions([]); setRuleExamples([])
         setTitle(''); setIntent(''); setTaskPrompt(''); setRunner('dsh')
-        setReviewers(['dsh']); setParallelAgentsOpen(false)
+        setReviewers(['dsh']); setOwnerApprovalRequired(true)
         setParameters([]); setConversationKind(context.conversationKind || 'dm')
         setGroupId(context.groupId || '')
         setSenderScope('any'); setSenderIds(''); setDays(7); setCreateOpen(true)
-        if (context.botId) setBotId(context.botId)
+        if (context.botId) selectBot(context.botId)
       }
       const taskRuleDraftFromCard = (card, title) => {
         const rules = (card.parameters || []).map((rule) => ({
@@ -901,9 +1028,10 @@ window.__ModuleLoader__.load({
       }
       const editCard = (card, copy = false) => {
         setSubmissionError('')
-        setBotId(card.bot_id)
+        const cardBotId = card.bot_id || bots.find((bot) => bot.fingerprint === card.bot_fingerprint)?.bot_id || ''
+        selectBot(cardBotId)
         setRecognitionMessage('')
-        autoAnalyzeDescriptionRef.current = null
+        cancelRecognitionRequest()
         recognitionRequestRef.current += 1
         setEditingCardId(copy ? null : card.id); setEditingExpiresAt(copy ? null : card.expires_at)
         const taskDraft = taskRuleDraftFromCard(card, copy ? `${card.title.slice(0, 94)}（副本）` : card.title)
@@ -911,7 +1039,7 @@ window.__ModuleLoader__.load({
         const existingDescription = card.rule_description || ''
         recognizedDescriptionRef.current = existingDescription.trim() || null
         setDraftNotice(existingDescription.trim() ? ''
-          : '这项旧任务没有自然语言描述。请补充任务描述，让 AI 生成 Harness 后再开放。')
+          : translateLocaleText('这项旧任务没有自然语言描述。请补充任务描述，让 AI 生成 Harness 后再开放。'))
         setRuleDescription(existingDescription)
         setMissingRequired([]); setSuggestions(taskDraft.suggestions); setRuleExamples(taskDraft.examples)
         setTitle(taskDraft.title)
@@ -919,7 +1047,7 @@ window.__ModuleLoader__.load({
         setIntent(taskDraft.intent)
         setTaskPrompt(taskDraft.task_prompt); setRunner(card.runner)
         setReviewers(Array.isArray(card.reviewers) && card.reviewers.length ? card.reviewers : [card.runner])
-        setParallelAgentsOpen(false)
+        setOwnerApprovalRequired(card.owner_approval_required !== false)
         setParameters(taskDraft.parameters)
         setConversationKind(card.conversation_kind); setGroupId(card.conversation_id || '')
         setSenderScope(card.sender_scope); setSenderIds((card.sender_ids || []).join(', '))
@@ -940,13 +1068,18 @@ window.__ModuleLoader__.load({
           setRecognitionMessage('先描述这项任务何时触发、要做什么以及涉及哪些资料。')
           return
         }
-        if (recognitionTimerRef.current) clearTimeout(recognitionTimerRef.current)
+        cancelRecognitionRequest()
         const requestNumber = ++recognitionRequestRef.current
+        const controller = new AbortController()
+        let timedOut = false
+        recognitionControllerRef.current = controller
+        const timeout = setTimeout(() => { timedOut = true; controller.abort() }, 190_000)
         setRecognitionBusy(true); setMessage(''); setRecognitionMessage('AI 正在分析必需范围、可选条件和执行方式…')
         try {
           const response = await fetch('/api/ant-teams/delegation/recognize', {
             method: 'POST', headers: { 'content-type': 'application/json' },
             body: JSON.stringify({ description: requestedDescription }),
+            signal: controller.signal,
           })
           const result = await readLocalJsonResponse(response)
           if (!response.ok) throw new Error(result.message || '规则识别失败。')
@@ -996,19 +1129,14 @@ window.__ModuleLoader__.load({
             ? 'AI 已更新任务理解。请复核必需信息、可选建议和运行方式；任务仍未开放。'
             : 'AI 已生成待复核的任务 Harness。检查摘要和范围后再开放。')
         } catch (error) {
-          if (requestNumber === recognitionRequestRef.current) setRecognitionMessage(error.message)
+          if (requestNumber === recognitionRequestRef.current) setRecognitionMessage(timedOut
+            ? translateLocaleText('AI 分析等待超时，请检查团队模型后重试。') : error.message)
         } finally {
+          clearTimeout(timeout)
+          if (recognitionControllerRef.current === controller) recognitionControllerRef.current = null
           if (requestNumber === recognitionRequestRef.current) setRecognitionBusy(false)
         }
       }
-      useEffect(() => {
-        if (autoAnalyzeDescriptionRef.current !== ruleDescription || !ruleDescription.trim()) return undefined
-        const description = ruleDescription
-        recognitionTimerRef.current = setTimeout(() => {
-          if (autoAnalyzeDescriptionRef.current === description) void identifyRule(description)
-        }, 900)
-        return () => clearTimeout(recognitionTimerRef.current)
-      }, [ruleDescription])
       const saveGiteaToken = async () => {
         if (!giteaToken.trim()) return
         setBusy(true)
@@ -1033,10 +1161,41 @@ window.__ModuleLoader__.load({
           const result = await readLocalJsonResponse(response)
           if (!response.ok) throw new Error(result.message || '协作机器人启用失败。')
           await load()
-          setMessage('协作机器人已启用。你可以分别设置私聊和群聊，再开放需要的能力。')
+          setMessage('协作机器人已启用。任务卡可预授权固定任务；绑定审批私聊后，没有匹配卡片的明确任务会逐次询问主人。')
         } catch (error) { setMessage(error.message) }
         finally { setBusy(false) }
       }
+      const requestOwnerApprovalBinding = async () => {
+        if (!selectedBot || !selectedEnrollmentBound) return
+        const requestedBot = selectedBot
+        setBusy(true); clearOwnerChallenge()
+        try {
+          const response = await fetch('/api/ant-teams/delegation/owner-challenge', {
+            method: 'POST', headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ bot_id: requestedBot.bot_id, bot_fingerprint: requestedBot.fingerprint }),
+          })
+          const result = await readLocalJsonResponse(response)
+          if (botIdRef.current !== requestedBot.bot_id) {
+            await fetch(`/api/ant-teams/delegation/owner-challenge?bot_fingerprint=${encodeURIComponent(requestedBot.fingerprint)}`,
+              { method: 'DELETE', cache: 'no-store' }).catch(() => null)
+            return
+          }
+          if (!response.ok || typeof result.code !== 'string') throw new Error(result.message || '审批私聊绑定码获取失败。')
+          // The server owns challenge validity. Use a response-relative local display window so clock skew
+          // cannot make a valid server challenge disappear before the owner can use it.
+          const expiresAt = Date.now() + 5 * 60_000
+          const ownerChallenge = { fingerprint: requestedBot.fingerprint, ownerWasBound: ownerApprovalBound, expiresAt }
+          ownerChallengeMetaRef.current = ownerChallenge
+          setOwnerChallengeCode(result.code)
+          ownerChallengeTimerRef.current = setTimeout(() => {
+            if (ownerChallengeMetaRef.current !== ownerChallenge) return
+            clearOwnerChallenge()
+            setMessage(translateLocaleText('绑定码已过期，请重新生成。'))
+          }, Math.max(0, expiresAt - Date.now()))
+          setMessage('绑定码已生成；请按“私聊入口”中的提示完成绑定。')
+        } catch (error) { if (botIdRef.current === requestedBot.bot_id) setMessage(error.message) }
+        finally { setBusy(false) }
+      }
       const saveGroupChat = async (enabled, targetGroupId) => {
         if (!selectedBot || !selectedEnrollmentBound || !targetGroupId.trim()) return
         const targetHasTasks = activeCards.some((card) => card.bot_fingerprint === selectedBot.fingerprint
@@ -1131,6 +1290,15 @@ window.__ModuleLoader__.load({
         ...collaborationGridStyle, gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 420px), 1fr))',
       }
       const collaborationCardStyle = { ...settingsPanelStyle, padding: 12, gap: 10 }
+      const capabilityStepStyle = { display: 'grid', gap: 12, borderTop: '1px solid var(--dsw-alias-border-l2)', paddingTop: 14 }
+      const capabilityStepHeading = (number, title, description) => h('div', { style: {
+        display: 'flex', gap: 10, alignItems: 'flex-start',
+      } },
+      h('span', { style: { display: 'grid', placeItems: 'center', width: 26, height: 26, flex: '0 0 auto',
+        borderRadius: '50%', backgroundColor: 'var(--dsw-alias-state-business-tertiary)',
+        color: 'var(--dsw-alias-state-business-primary)', fontWeight: 700 } }, number),
+      h('div', { style: { display: 'grid', gap: 3 } },
+        h('strong', null, title), h('p', { style: mutedTextStyle }, description)))
       const setupStepper = h('section', { 'aria-label': '首次设置引导', style: { display: 'grid', gap: 6 } },
         h('p', { style: mutedTextStyle }, '首次设置可按顺序完成；你也可以直接切换页面。普通聊天不需要先开放任务。'),
         h('ol', { 'aria-label': '设置步骤', style: { display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 150px), 1fr))',
@@ -1163,7 +1331,26 @@ window.__ModuleLoader__.load({
             disabled: busy || !selectedBot || !selectedEnrollmentBound || enrollmentLoadError || !dmChatSettingAvailable,
             onChange: (event) => void saveDmChat(event.target.checked), 'aria-label': '允许机器人私聊' }),
           h('strong', null, '允许私聊普通聊天'), h('span', { style: mutedTextStyle }, dmChatStatus)),
-        h('p', { style: mutedTextStyle }, dmChatDescription))
+        h('p', { style: mutedTextStyle }, dmChatDescription),
+        selectedEnrollmentBound && botConnected ? h('section', { role: 'group', 'aria-label': '主人审批私聊', style: {
+          display: 'grid', gap: 9, padding: 12, border: '1px solid var(--dsw-alias-state-business-tertiary)',
+          borderRadius: 10, backgroundColor: 'var(--dsw-alias-state-business-tertiary)',
+        } },
+        h('div', { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'center', gap: 8 } },
+          h('strong', null, '主人审批私聊'),
+          h('span', { style: { ...mutedTextStyle, padding: '3px 8px', borderRadius: 999,
+            backgroundColor: 'var(--dsw-alias-bg-layer-1)' } }, ownerApprovalBound ? '已绑定' : '未绑定')),
+        h('p', { style: mutedTextStyle }, ownerApprovalBound
+          ? '没有匹配任务卡的明确任务会先发给你逐次审批；批准前不会启动执行器。'
+          : '绑定一次后，没有匹配任务卡的明确任务会先发给你审批。发送验证码后，点击“刷新状态”确认绑定。'),
+        h('div', { style: { display: 'flex', gap: 8, alignItems: 'center', flexWrap: 'wrap' } },
+          h('button', { type: 'button', disabled: busy,
+            onClick: () => void requestOwnerApprovalBinding(), style: secondaryButtonStyle },
+          ownerApprovalBound ? '重新绑定审批私聊' : '生成绑定码'),
+          ownerChallengeCode ? h('span', { style: mutedTextStyle }, '有效期 5 分钟') : null),
+        ownerChallengeCode ? h('div', { role: 'status', style: { ...feedbackNoticeStyle, position: 'static' } },
+          translateLocaleText('请在 5 分钟内私聊此机器人发送完整指令：“绑定审批身份 {code}”。如果这台 DSH 未重启，也可直接发送 12 位验证码 {code}。',
+            { code: ownerChallengeCode })) : null) : null)
       const createCard = async (event) => {
         event.preventDefault()
         setDraftNotice('')
@@ -1173,14 +1360,11 @@ window.__ModuleLoader__.load({
           setSubmissionError(localizedReason); setMessage(localizedReason)
         }
         if (!selectedBot || !botConnected || !selectedEnrollmentBound) { reject('请先在这台 DSH 绑定选中的协作机器人。'); return }
-        if (reviewers.some((item) => item !== 'dsh')) {
-          reject('当前无法核验外部子 Agent 的逐任务文件、Git 和网络权限；请将任务执行方设为 DSH。'); return
-        }
         if (editingCardId && (!editingExpiresAt || editingExpiresAt <= Math.floor(Date.now() / 1000))) {
           reject('这项能力已到期，无法继续编辑；请返回后重新开放一项能力。'); return
         }
         if (!ruleDescription.trim() || !title.trim() || !intent.trim() || !taskPrompt.trim()) {
-          reject('请填写任务描述并点击“识别规则”，检查摘要后再开放。'); return
+          reject('请填写任务描述并点击“立即分析”，检查摘要后再开放。'); return
         }
         const bytes = (value) => new TextEncoder().encode(value).length
         if (bytes(ruleDescription.trim()) > 4000 || bytes(title.trim()) > 100
@@ -1245,12 +1429,6 @@ window.__ModuleLoader__.load({
         if (!reviewers.length || !reviewers.includes(runner)) {
           reject('请至少选择一位任务执行 Agent，并设置普通请求的默认执行方。'); return
         }
-        if (nativeReviewerSelected && !((normalized.length === 1
-          && normalized[0].kind === 'gitea_pr' && normalized[0].required)
-          || (normalized.length === 2 && normalized.some((rule) => rule.kind === 'gitea_pr' && rule.required)
-            && normalized.some((rule) => rule.kind === 'git_sha' && rule.name === 'head_sha' && !rule.required)))) {
-          reject('Codex 和 Claude Code 当前只支持一个必填 Gitea PR 资源连接器；任务行为仍由自然语言描述决定。'); return
-        }
         const scope = conversationKind === 'group'
           ? translateLocaleText('群 {group_id}', { group_id: groupId })
           : translateLocaleText('私聊')
@@ -1258,8 +1436,8 @@ window.__ModuleLoader__.load({
           ? '原群（群内可见）' : '发起任务的私聊')
         const executionDetails = {
           dsh: translateLocaleText('DSH 使用获准的团队模型处理对话内容和 ANT 已核验后提供的资源。'),
-          codex: translateLocaleText('Codex 当前不能用于协作任务，因为 ANT 无法核验其逐任务文件、Git 和网络权限。'),
-          'claude-code': translateLocaleText('Claude Code 当前不能用于协作任务，因为 ANT 无法核验其逐任务文件、Git 和网络权限。'),
+          codex: translateLocaleText('Codex 使用这台 DSH 的 Provider Profile 权限；可访问范围由 Codex/DSH 本机配置决定。任务描述不会限制操作系统权限。'),
+          'claude-code': translateLocaleText('Claude Code 使用这台 DSH 的 Provider Profile 权限；可访问范围由 Claude Code/DSH 本机配置决定。任务描述不会限制操作系统权限。'),
         }
         const executionInfo = reviewers.length > 1
           ? translateLocaleText('普通请求默认由 {runner} 执行；请求人明确要求多 Agent 分别处理时，会并行启动 {reviewers}，分别返回结果。{details}',
@@ -1280,7 +1458,8 @@ window.__ModuleLoader__.load({
               bot_id: selectedBot.bot_id, bot_fingerprint: selectedBot.fingerprint,
               title, rule_description: ruleDescription.trim(), trigger_phrases: [],
               intent, examples: ruleExamples,
-              parameters: normalized, task_prompt: taskPrompt, runner, reviewers, workspace: null,
+              parameters: normalized, task_prompt: taskPrompt, runner, reviewers,
+              owner_approval_required: ownerApprovalRequired, workspace: null,
               sender_scope: senderScope, sender_ids: senderScope === 'allowlist'
                 ? senderIds.split(/[\s,，]+/u).filter(Boolean) : [], conversation_kind: conversationKind,
               ...(conversationKind === 'group' ? { conversation_id: groupId } : {}),
@@ -1288,7 +1467,7 @@ window.__ModuleLoader__.load({
           })
           const result = await readLocalJsonResponse(response)
           if (!response.ok && result.code === 'IM_TASK_RULE_REQUIRED') {
-            throw new Error('当前 ANT 服务端不支持自然语言任务 Harness，请升级 ANT 服务端后再开放任务。')
+            throw new Error('当前 ANT 服务端版本过旧，请升级服务端后再开放任务。')
           }
           if (!response.ok && reviewers.includes('claude-code') && result.code === 'INVALID_REQUEST') {
             throw new Error('当前团队服务端可能尚不支持 Claude Code 审查配置。请管理员升级服务端后刷新重试。')
@@ -1296,26 +1475,35 @@ window.__ModuleLoader__.load({
           if (!response.ok) throw new Error(result.message || '能力保存失败。')
           const savedReviewers = Array.isArray(result.reviewers) && result.reviewers.length
             ? result.reviewers : [result.runner]
-          if ([...savedReviewers].sort().join('\0') !== [...reviewers].sort().join('\0')) {
-            if (!editingCardId && typeof result.id === 'string') {
+          const reviewersDropped = [...savedReviewers].sort().join('\0') !== [...reviewers].sort().join('\0')
+          const approvalDropped = usesExternalExecutor && ownerApprovalRequired && result.owner_approval_required !== true
+          if (reviewersDropped || approvalDropped) {
+            if ((!editingCardId || approvalDropped) && typeof result.id === 'string') {
               const cleanup = await fetch('/api/ant-teams/delegation/cards', {
                 method: 'DELETE', headers: { 'content-type': 'application/json' },
                 body: JSON.stringify({ id: result.id }),
               }).catch(() => null)
               if (!cleanup?.ok) {
                 await load().catch(() => undefined)
-                throw new Error('团队服务端尚不支持多 Agent 审查配置；旧服务端可能已保存单 Agent 授权，请刷新列表并停止它，再升级 ANT 服务端。')
+                throw new Error(reviewersDropped
+                  ? '团队服务端尚不支持多 Agent 审查配置；旧服务端可能已保存单 Agent 授权，请刷新列表并停止它，再升级 ANT 服务端。'
+                  : '团队服务端尚不支持任务卡主人审批；旧服务端可能已保存不经审批的授权，请刷新列表并停止它，再升级 ANT 服务端。')
+              }
+              if (editingCardId) {
+                setEditingCardId(null); setEditingExpiresAt(null)
+                await load().catch(() => undefined)
               }
             }
-            throw new Error('当前团队服务端尚不支持多 Agent 审查配置；请管理员升级 ANT 服务端后重试。')
+            throw new Error(reviewersDropped
+              ? '当前团队服务端尚不支持多 Agent 审查配置；请管理员升级 ANT 服务端后重试。'
+              : '当前团队服务端尚不支持任务卡主人审批；请管理员升级 ANT 服务端后重试。')
           }
           recognizedBaselineRef.current = null
           recognizedDescriptionRef.current = null
-          autoAnalyzeDescriptionRef.current = null
+          cancelRecognitionRequest()
           recognitionRequestRef.current += 1
           setRuleDescription(''); setMissingRequired([]); setSuggestions([]); setRuleExamples([])
-          setTitle(''); setIntent(''); setTaskPrompt(''); setParameters([]); setRunner('dsh'); setReviewers(['dsh'])
-          setParallelAgentsOpen(false)
+          setTitle(''); setIntent(''); setTaskPrompt(''); setParameters([]); setRunner('dsh'); setReviewers(['dsh']); setOwnerApprovalRequired(true)
           setEditingCardId(null); setEditingExpiresAt(null)
           await load()
           setCreateOpen(false)
@@ -1340,22 +1528,22 @@ window.__ModuleLoader__.load({
       }
       const copyCardToDraft = (card) => {
         setEditingCardId(null); setEditingExpiresAt(null)
-        setParallelAgentsOpen(false)
         const copiedDescription = card.rule_description || ''
         recognizedDescriptionRef.current = copiedDescription.trim() || null
-        autoAnalyzeDescriptionRef.current = null
+        cancelRecognitionRequest()
         recognitionRequestRef.current += 1
         setDraftNotice(copiedDescription.trim()
-          ? '已复制到新草稿。复制不保留原有效期；请检查任务描述和请求范围。'
-          : '这项旧任务没有自然语言描述。请补充任务描述，让 AI 生成 Harness 后再开放。')
+          ? translateLocaleText('已复制到新草稿。复制不保留原有效期；请检查任务描述和请求范围。')
+          : translateLocaleText('这项旧任务没有自然语言描述。请补充任务描述，让 AI 生成 Harness 后再开放。'))
         const cardBot = bots.find((bot) => bot.fingerprint === card.bot_fingerprint)
+        const copiedBotId = card.bot_id || cardBot?.bot_id || ''
+        selectBot(copiedBotId)
         const titleChars = Array.from(translateLocaleText('复制：{title}', {
           title: card.title || translateLocaleText('未命名能力'),
         }))
         while (new TextEncoder().encode(titleChars.join('')).length > 100) titleChars.pop()
         const taskDraft = taskRuleDraftFromCard(card, titleChars.join(''))
         recognizedBaselineRef.current = taskDraft
-        setBotId(card.bot_id || cardBot?.bot_id || '')
         setRuleDescription(copiedDescription)
         setMissingRequired([]); setSuggestions(taskDraft.suggestions); setRuleExamples(taskDraft.examples)
         setTitle(taskDraft.title)
@@ -1363,6 +1551,7 @@ window.__ModuleLoader__.load({
         setTaskPrompt(taskDraft.task_prompt)
         setRunner(['dsh', 'codex', 'claude-code'].includes(card.runner) ? card.runner : 'dsh')
         setReviewers(Array.isArray(card.reviewers) && card.reviewers.length ? card.reviewers : [card.runner || 'dsh'])
+        setOwnerApprovalRequired(card.owner_approval_required !== false)
         setParameters(taskDraft.parameters)
         setConversationKind(card.conversation_kind === 'group' ? 'group' : 'dm')
         setGroupId(card.conversation_id || '')
@@ -1392,10 +1581,10 @@ window.__ModuleLoader__.load({
           loading ? '读取中…' : '刷新状态')),
         h('p', { role: 'status', style: mutedTextStyle }, collaborationStatus),
         bots.length ? h('label', null, '我的机器人', h('select', { id: 'ant-bot-selector', value: botId,
-          onChange: (event) => { setBotId(event.target.value); setGroupId('') }, style: inputStyle },
+          onChange: (event) => { selectBot(event.target.value); setGroupId('') }, style: inputStyle },
           h('option', { value: '' }, '请选择机器人'),
           ...bots.map((bot) => h('option', { key: bot.bot_id, value: bot.bot_id,
-          disabled: !bot.available || !bot.connected }, rawLocaleText(bot.name),
+          disabled: !bot.available || !bot.connected }, rawLocaleText(bot.name), ' · ', botPlatformLabel(bot),
           bot.available && bot.connected ? null : '（未连接）')))) : null,
         connectedBots.length === 0 && !loading && !botLoadError ? h('div', { style: { display: 'flex', gap: 8, alignItems: 'center', flexWrap: 'wrap' } },
           h('button', { type: 'button', onClick: openImSettings, style: secondaryButtonStyle }, '打开 DSH-IM 设置'),
@@ -1404,7 +1593,9 @@ window.__ModuleLoader__.load({
           style: secondaryButtonStyle }, '检查 DSH-IM 连接') : null,
         selectedBot && !selectedEnrollmentBound ? h('button', { type: 'button', disabled: busy || !botConnected || enrollmentLoadError,
           onClick: () => void enrollBot(), style: primaryButtonStyle },
-          selectedEnrollment ? '绑定原协作配置到这台 DSH' : '启用并绑定到这台 DSH') : null)
+          selectedEnrollment ? '绑定原协作配置到这台 DSH' : '启用并绑定到这台 DSH') : null,
+        selectedEnrollmentBound && botConnected ? h('p', { style: mutedTextStyle },
+          '任务能力和设备绑定状态请在此处查看；主人审批身份在“私聊入口”中管理。') : null)
       const groupTaskStatusPanel = selectedEnrollmentBound && botConnected ? h('section', {
         id: 'ant-group-task-status', role: 'region', 'aria-label': '各群聊天与任务状态', tabIndex: -1,
         style: { ...collaborationCardStyle, gap: 10 } },
@@ -1415,7 +1606,7 @@ window.__ModuleLoader__.load({
           loading ? '读取中…' : '刷新群列表')),
         h('p', { style: mutedTextStyle }, groupChatLoadFailed
           ? '群列表暂不可用，请刷新状态后重试。'
-          : availableGroups.length ? '每个群分别控制普通聊天和任务；名称取自 DSH-IM 已保存目标，括号内为识别码末两位。未匹配名称时显示完整识别码。'
+          : availableGroups.length ? '此开关只控制普通聊天。任务卡可预授权固定任务；绑定主人审批私聊后，群成员 @机器人发起的其他明确任务也可逐次审批。名称取自 DSH-IM 已保存目标。'
             : '先在目标群 @机器人，再刷新状态发现群。'),
         availableGroups.length ? h('div', { id: 'ant-group-card-grid', style: collaborationGridStyle },
           ...availableGroups.map((group) => {
@@ -1447,9 +1638,10 @@ window.__ModuleLoader__.load({
         h('div', { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'start', gap: 12, flexWrap: 'wrap' } },
           h('div', { style: { display: 'grid', gap: 4 } },
             h('h3', { style: sectionTitleStyle }, '协作总览'),
-            h('p', { style: mutedTextStyle }, '选择机器人，设置聊天入口，再按需要开放任务规则。聊天和任务授权分别控制。')),
+            h('p', { style: mutedTextStyle }, '选择机器人并绑定一次主人审批私聊。任务卡可预授权常用任务；其他请求由主人逐次决定。')),
           h('span', { style: { ...mutedTextStyle, padding: '4px 9px', borderRadius: 999,
-            backgroundColor: 'var(--dsw-alias-bg-layer-2)' } }, selectedBot ? selectedBot.name : '尚未选择机器人')),
+            backgroundColor: 'var(--dsw-alias-bg-layer-2)' } }, selectedBot
+            ? h('span', null, rawLocaleText(selectedBot.name), ' · ', botPlatformLabel(selectedBot)) : '尚未选择机器人')),
         loadFailures.length ? h('p', { role: 'status', style: mutedTextStyle },
           `部分协作信息暂时无法读取：${loadFailures.map((path) => loadNames[path]).join('、')}。已读取的信息仍显示，请稍后刷新状态。`) : null,
           h('div', { id: 'ant-collaboration-settings-grid', style: collaborationSettingsGridStyle },
@@ -1485,7 +1677,10 @@ window.__ModuleLoader__.load({
             : translateLocaleText('私聊')
           const requester = translateLocaleText(card.sender_scope === 'allowlist' ? '指定成员可请求'
             : card.conversation_kind === 'group' ? '群成员可请求' : '可私聊者可请求')
-          const blockedExternalExecutor = card.runner !== 'dsh' || card.cross_review_always === true
+          const configuredCardRunners = Array.isArray(card.reviewers) && card.reviewers.length
+            ? card.reviewers : [card.runner]
+          const blockedExternalExecutor = !configuredCardRunners.every((runner) =>
+            executors.some((executor) => executor.id === runner && executor.available))
           const examplesText = Array.isArray(card.examples) ? card.examples.join('、') : ''
           const requesterIds = card.sender_scope === 'allowlist' && Array.isArray(card.sender_ids) ? card.sender_ids.join('、') : ''
           const remainingDaysLabel = remainingDays <= 7 ? 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-label-secondary))'
@@ -1504,7 +1699,7 @@ window.__ModuleLoader__.load({
             })),
             blockedExternalExecutor ? h('p', { role: 'status', style: { ...mutedTextStyle,
               color: 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-label-secondary))' } },
-              '此任务暂不可执行：当前无法核验外部 Agent 的逐任务权限。点击“编辑”，改用 DSH 并移除外部 Agent 后可重新开放。') : null,
+              '此任务暂不可执行：这台 DSH 尚未启用所选的全部执行器。请启用对应的 DSH 子 Agent 提供方后刷新。') : null,
             card.rule_description
               ? h('span', { style: { ...mutedTextStyle, overflowWrap: 'anywhere' } }, rawLocaleText(card.rule_description))
               : h('span', { role: 'status', style: { ...mutedTextStyle, color: 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-label-secondary))' } },
@@ -1543,9 +1738,10 @@ window.__ModuleLoader__.load({
               ? task.repository
                 ? translateLocaleText('{repository} PR #{pr_number} 差异审查', { repository: task.repository, pr_number: task.pr_number })
                 : translateLocaleText('PR #{pr_number} 差异审查', { pr_number: task.pr_number })
-              : '任务'
+              : translateLocaleText('任务')
             const status = translateLocaleText(task.outcome === 'canceled' ? '已取消' : task.outcome === 'failed' ? '未完成' : ({
-              pending: '排队中', running: '处理中', reply_pending: '结果待发送', reply_attempted: '回复状态待核对', done: '已回复',
+              pending: '排队中', claimed: '排队中', running: '处理中', finishing: '结果待核对', completed: '已完成',
+              reply_pending: '结果待发送', reply_attempted: '回复状态待核对', done: '已回复',
             }[task.status] || task.status))
             const createdAt = task.created_at && Number.isFinite(Date.parse(task.created_at))
               ? formatLocaleDate(task.created_at) : ''
@@ -1559,7 +1755,9 @@ window.__ModuleLoader__.load({
                 h('div', { style: mutedTextStyle }, taskStatusLine),
                 task.failure_reason ? h('div', { role: 'alert', style: warningNoticeStyle },
                   h('span', { style: { ...mutedTextStyle, whiteSpace: 'pre-line' } }, translateLocaleText(
-                    '任务未完成：{reason}\n处理建议：按错误提示修复配置或请求内容后，在原群或私聊重新发起。',
+                    task.status === 'finishing'
+                      ? '结果状态待确认：{reason}\n处理建议：恢复原团队连接或审批私聊权限后刷新状态；不要重复发起相同任务。'
+                      : '任务未完成：{reason}\n处理建议：按错误提示修复配置或请求内容后，在原群或私聊重新发起。',
                     { reason: task.failure_reason }))) : null,
                 task.delivery_error ? h('div', { role: 'alert', style: warningNoticeStyle },
                   h('span', { style: { ...mutedTextStyle, whiteSpace: 'pre-line' } }, translateLocaleText(
@@ -1568,7 +1766,8 @@ window.__ModuleLoader__.load({
                 task.status === 'reply_attempted' && !task.delivery_error ? h('div', { role: 'status', style: warningNoticeStyle },
                   h('span', { style: mutedTextStyle }, translateLocaleText(
                     'ANT 尚未确认消息平台是否收到结果。请先检查原群或私聊，再决定是否重新发起。'))) : null),
-              ['card_task', 'legacy_pr_task'].includes(task.kind) && ['pending', 'running'].includes(task.status) ? h('button', { type: 'button', disabled: busy,
+              ['card_task', 'legacy_pr_task', 'owner_approval'].includes(task.kind)
+                && ['pending', 'claimed', 'running'].includes(task.status) ? h('button', { type: 'button', disabled: busy,
                 onClick: () => void cancelTask(task), style: secondaryButtonStyle }, '取消任务') : null)
           })
           : [h('p', { key: 'none', style: mutedTextStyle }, loadFailures.includes('status')
@@ -1576,11 +1775,21 @@ window.__ModuleLoader__.load({
         h('div', { role: 'region', 'aria-label': '任务规则编辑器', style: { display: activeTab === 'collaboration' ? 'grid' : 'none' } },
         h('details', { id: 'ant-new-task', open: createOpen,
           onToggle: (event) => setCreateOpen(event.currentTarget.open),
-          style: { border: '1px solid var(--dsw-alias-border-l2)', borderRadius: 8, padding: 12 } },
-          h('summary', { id: 'ant-new-task-summary', style: { cursor: 'pointer', fontWeight: 600 } }, editingCardId ? '编辑能力配置' : '开放一项能力'),
+          style: { border: '1px solid var(--dsw-alias-border-l2)', borderRadius: 12, padding: 16,
+            backgroundColor: 'var(--dsw-alias-bg-layer-1)' } },
+          h('summary', { id: 'ant-new-task-summary', style: { display: 'flex', justifyContent: 'space-between',
+            alignItems: 'center', gap: 12, flexWrap: 'wrap', cursor: 'pointer', listStylePosition: 'inside' } },
+          h('span', { 'aria-hidden': 'true', style: { color: 'var(--dsw-alias-label-secondary)', flex: '0 0 auto' } },
+            createOpen ? '▾' : '▸'),
+          h('span', { style: { display: 'grid', gap: 3 } },
+            h('strong', null, editingCardId ? '编辑能力配置' : '开放一项能力'),
+            h('span', { style: mutedTextStyle }, '任务卡可预授权常用任务；其他明确任务由主人逐次审批。')),
+          h('span', { style: { ...mutedTextStyle, padding: '3px 8px', borderRadius: 999,
+            backgroundColor: 'var(--dsw-alias-bg-layer-2)' } }, editingCardId
+            ? translateLocaleText('编辑中 · 尚未保存') : translateLocaleText('草稿 · 未开放'))),
         h('div', { style: { display: 'grid', gridTemplateColumns: 'minmax(0, 1fr)',
-          gap: 12, alignItems: 'start', marginTop: 12 } },
-        h('form', { id: 'ant-capability-create-form', onSubmit: createCard, style: { display: 'grid', gap: 9, minWidth: 0 } },
+          gap: 12, alignItems: 'start', marginTop: 14 } },
+        h('form', { id: 'ant-capability-create-form', onSubmit: createCard, style: { display: 'grid', gap: 15, minWidth: 0 } },
           editingCardId ? h('p', { role: 'status', style: mutedTextStyle },
             `保存会生成新的授权版本并停止旧版本；到期时间保持不变：${formatLocaleDate(editingExpiresAt * 1000)}。已提交任务继续使用原配置。`) : null,
           h('p', { style: mutedTextStyle }, selectedBot
@@ -1588,78 +1797,104 @@ window.__ModuleLoader__.load({
             : '请先在上方选择机器人并启用协作。'),
           draftNotice ? h('p', { role: 'status', style: { ...mutedTextStyle,
             color: 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-label-secondary))' } }, draftNotice) : null,
+          !ruleDescription.trim() && draftNotice
+            === translateLocaleText('这项旧任务没有自然语言描述。请补充任务描述，让 AI 生成 Harness 后再开放。') && title
+            ? h('p', { role: 'status', style: mutedTextStyle }, translateLocaleText('已复制任务标题：{title}', {
+              title,
+            })) : null,
           selectedEnrollmentBound ? h('p', { style: mutedTextStyle },
             '机器人及其任务能力只在这台 DSH 设备接收和执行；同一账号的其他设备不会继承本机授权。') : null,
           selectedEnrollment && !selectedEnrollmentBound ? h('p', { style: mutedTextStyle },
             '这是尚未绑定到设备的机器人。请在要继续使用它的电脑重新启用；原协作配置会保留。若旧设备访问曾被撤销，原任务权限不会恢复，需要重新开放。') : null,
           selectedBot && conversationKind === 'group' && !selectedBot.history_available ? h('p', { role: 'status', style: mutedTextStyle },
             '这个机器人当前不能读取平台群历史；群聊只能参考实际送达的消息和本机近期记录。请检查 DSH-IM 权限。') : null,
-          h('div', { style: { display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 320px), 1fr))',
-            gap: 12, alignItems: 'start' } },
-          h('div', { style: { display: 'grid', gap: 9, minWidth: 0 } },
-          h('label', null, '描述规则', h('textarea', { required: true, maxLength: 4000, rows: 4, value: ruleDescription,
-            onChange: (event) => {
-              autoAnalyzeDescriptionRef.current = event.target.value
-              recognitionRequestRef.current += 1
-              setRuleDescription(event.target.value)
-              setRecognitionBusy(false)
-              setRecognitionMessage(event.target.value.trim() ? '你暂停输入后，AI 会自动检查任务是否完整。' : '')
-            },
-            placeholder: '用日常语言说明要完成什么、可处理哪些资料和希望怎样返回。例如：审查来自 https://gitea.example.com/team/shop 的 PR，指出可定位的问题，不修改代码；请求人可指定 Head SHA，未指定时用最新 Head。', style: inputStyle })),
-          h('p', { style: mutedTextStyle }, 'AI 会在输入停顿后分析必需范围、缺失信息和可选条件。执行方、请求人、群范围和有效期由下方通用授权控制。'),
-          h('div', { style: { display: 'flex', gap: 10, alignItems: 'center', flexWrap: 'wrap' } },
-            h('button', { type: 'button', disabled: recognitionBusy || busy || !ruleDescription.trim(),
-              onClick: () => void identifyRule(), style: secondaryButtonStyle }, recognitionBusy ? 'AI 正在分析…' : ruleSummaryReady ? '立即重新分析' : '立即分析'),
-            h('span', { style: mutedTextStyle }, '自动分析和手动分析都会调用当前团队模型；只生成建议和待复核草稿，不会开放任务。')),
-          recognitionMessage ? h('p', { role: 'status', 'aria-live': 'polite', style: feedbackNoticeStyle }, recognitionMessage) : null),
-          h('section', { role: 'region', 'aria-label': 'AI 任务助手', style: { ...panelStyle, padding: 10, gap: 7, minWidth: 0 } },
+          capabilityStepHeading('1', '描述任务', '写清要完成什么、处理范围和结果形式。'),
+          h('div', { style: { display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 320px), 1.35fr))',
+            gap: 12, alignItems: 'stretch' } },
+          h('label', { style: { display: 'grid', alignContent: 'start', gap: 7, minWidth: 0 } }, '描述规则',
+            h('textarea', { required: true, maxLength: 4000, rows: 5, value: ruleDescription,
+              onChange: (event) => {
+                cancelRecognitionRequest()
+                recognitionRequestRef.current += 1
+                setRuleDescription(event.target.value)
+                setRecognitionBusy(false)
+                setRecognitionMessage(event.target.value.trim() ? '描述已更新，点击“立即分析”检查任务。' : '')
+              },
+              placeholder: '用日常语言说明要完成什么、可处理哪些资料和希望怎样返回。例如：审查来自 https://gitea.example.com/team/shop 的 PR，指出可定位的问题，不修改代码；请求人可指定 Head SHA，未指定时用最新 Head。', style: { ...inputStyle, minHeight: 120, resize: 'vertical' } })),
+          h('section', { role: 'region', 'aria-label': 'AI 任务助手', style: { ...panelStyle, padding: 14,
+            gap: 9, minWidth: 0, border: '1px solid var(--dsw-alias-border-l2)', backgroundColor: 'var(--dsw-alias-bg-layer-2)' } },
             h('div', { style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: 8 } },
-              h('strong', null, ruleSummaryPending ? 'AI 正在检查当前描述' : title || 'AI 任务助手'),
-              h('span', { style: mutedTextStyle }, ruleSummaryPending ? '描述已更新' : ruleSummaryReady ? '待复核 · 尚未开放' : '填写描述后开始分析')),
-            h('p', { style: { ...mutedTextStyle, overflowWrap: 'anywhere' } }, ruleSummaryPending
-              ? 'AI 正在根据当前描述更新任务理解。上一次分析结果暂不用于授权开放。' : ruleSummaryNarrative),
-            ruleSummaryReady && missingHarnessInputs.length ? h('p', { role: 'status', style: { ...mutedTextStyle,
-              color: 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-label-secondary))' } },
-            `还需要明确：${missingHarnessInputs.join('；')}`) : ruleSummaryReady
-              ? h('p', { role: 'status', style: mutedTextStyle }, 'AI 暂未发现必需信息缺项；请确认任务来源和处理范围符合预期。') : null,
-            ruleSummaryReady && suggestions.length ? h('p', { style: mutedTextStyle }, `可选补充：${suggestions.join('；')}`) : null,
-            ruleSummaryReady && ruleExamples.length ? h('p', { style: mutedTextStyle }, `自然请求示例：${ruleExamples.join('；')}`) : null,
-            h('p', { style: mutedTextStyle }, ruleSummaryReady
-              ? '草稿未开放。检查任务理解、必需范围和建议；有误就改描述，AI 会重新分析。'
-              : ruleSummaryPending ? '分析完成前不能开放任务。' : 'AI 会整理任务理解；草稿不会自动开放。'))),
-          h('section', { style: { ...panelStyle, padding: 10, gap: 9, display: 'grid',
-            gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 280px), 1fr))' } },
-            h('strong', { style: { gridColumn: '1 / -1' } }, '通用授权'),
-            h('p', { style: { ...mutedTextStyle, gridColumn: '1 / -1' } },
-              '上方描述规则任务要做什么；这里限定谁能请求、在哪里请求、由谁执行和授权多久。'),
-            h('label', null, '执行方', h('select', { value: runner, onChange: (event) => selectRunner(event.target.value),
-              style: inputStyle },
-              h('option', { value: 'dsh', disabled: !dshAvailable && runner !== 'dsh' }, 'DSH · 当前团队模型'),
-              h('option', { value: 'codex', disabled: runner !== 'codex' }, 'Codex · DSH 子 Agent'),
-              h('option', { value: 'claude-code', disabled: runner !== 'claude-code' }, 'Claude Code · DSH 子 Agent')),
-              h('span', { style: mutedTextStyle }, runner === 'codex'
-                ? 'Codex 暂不可用于协作任务：ANT 无法核验它的逐任务文件、Git 和网络权限。'
-                : runner === 'claude-code' ? 'Claude Code 暂不可用于协作任务：ANT 无法核验它的逐任务文件、Git 和网络权限。'
-                  : 'DSH 使用获准团队模型处理对话内容和 ANT 已核验后提供的资源。')),
-            h('details', { id: 'ant-parallel-agents-details', open: parallelAgentsOpen,
-              onToggle: (event) => setParallelAgentsOpen(event.currentTarget.open),
-              style: { gridColumn: '1 / -1', border: '1px solid var(--dsw-alias-border-l2)', borderRadius: 8, padding: 10 } },
-              h('summary', { style: { cursor: 'pointer', fontWeight: 600 } }, parallelAgentsSummary
-                ? `并行执行：${parallelAgentsSummary}` : '多 Agent 并行（可选）'),
-              h('p', { style: mutedTextStyle }, '当前只开放 DSH。外部 Agent 的逐任务文件、Git 和网络权限无法由 ANT 核验；编辑旧任务时可取消其选择并改用 DSH。'),
-              h('div', { style: { display: 'flex', gap: 14, flexWrap: 'wrap' } },
-                h('label', null, h('input', { type: 'checkbox', 'aria-label': '任务 Agent DSH', checked: reviewers.includes('dsh'),
-                  disabled: !dshAvailable && !reviewers.includes('dsh'),
-                  onChange: (event) => changeReviewer('dsh', event.target.checked) }), ' DSH'),
-                h('label', null, h('input', { type: 'checkbox', 'aria-label': '任务 Agent Codex', checked: reviewers.includes('codex'),
-                  disabled: !reviewers.includes('codex'),
-                  onChange: (event) => changeReviewer('codex', event.target.checked) }), ' Codex'),
-                h('label', null, h('input', { type: 'checkbox', 'aria-label': '任务 Agent Claude Code', checked: reviewers.includes('claude-code'),
-                  disabled: !reviewers.includes('claude-code'),
-                  onChange: (event) => changeReviewer('claude-code', event.target.checked) }), ' Claude Code')),
-              null),
-            nativePrUnavailableReason ? h('p', { role: 'status', style: { ...mutedTextStyle, gridColumn: '1 / -1' } },
-              `${nativePrUnavailableReason}。当前仍可使用 DSH 团队模型处理任务。`) : null,
+              h('strong', null, 'AI 任务助手'),
+              h('span', { style: mutedTextStyle }, ruleSummaryPending ? '正在分析' : ruleSummaryReady ? '待复核 · 尚未开放'
+                : ruleSummaryDirty ? '描述已更新' : '待分析')),
+            h('p', { style: mutedTextStyle }, ruleSummaryPending
+              ? 'AI 正在根据当前描述更新任务理解。上一次结果暂不用于授权。'
+              : '分析只生成待复核草稿，不会自动开放能力。修改描述后需重新分析。'),
+            h('div', { style: { display: 'flex', justifyContent: 'flex-end', alignItems: 'center', gap: 10, flexWrap: 'wrap' } },
+              h('span', { style: mutedTextStyle }, '调用团队模型并计入用量'),
+              h('button', { type: 'button', disabled: recognitionBusy || busy || !ruleDescription.trim(),
+                onClick: () => void identifyRule(), style: primaryButtonStyle },
+              recognitionBusy ? 'AI 正在分析…' : ruleSummaryReady ? '立即重新分析' : '立即分析')),
+            recognitionMessage ? h('p', { role: 'status', 'aria-live': 'polite', style: feedbackNoticeStyle }, recognitionMessage) : null)),
+          h('section', { role: 'region', 'aria-label': 'AI 分析结果', style: { display: 'grid', gap: 9, padding: 14,
+            border: '1px solid var(--dsw-alias-border-l2)', borderRadius: 10,
+            backgroundColor: 'var(--dsw-alias-bg-layer-1)', minWidth: 0,
+            height: ruleSummaryReady ? 'min(480px, 55vh)' : undefined,
+            gridTemplateRows: ruleSummaryReady ? 'auto minmax(0, 1fr)' : undefined,
+            overflow: ruleSummaryReady ? 'hidden' : undefined } },
+            h('div', { style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: 8 } },
+              h('strong', null, 'AI 分析结果'),
+              h('span', { style: mutedTextStyle }, ruleSummaryReady ? '草稿 · 未开放' : ruleSummaryPending ? '正在分析' : '等待分析')),
+            ruleSummaryReady ? h('div', { style: { display: 'grid', alignContent: 'start', gap: 8,
+              minHeight: 0, overflowY: 'auto', overscrollBehavior: 'contain', overflowWrap: 'anywhere' } },
+              title ? h('strong', { style: { color: 'var(--dsw-alias-label-primary)' } }, rawLocaleText(title)) : null,
+              h('p', { style: { ...mutedTextStyle, color: 'var(--dsw-alias-label-primary)' } }, ruleSummaryNarrative),
+              missingHarnessInputs.length ? h('p', { role: 'status', style: { ...mutedTextStyle,
+                color: 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-label-secondary))' } },
+              translateLocaleText('待补信息：{items}。一般资料和偏好可留到执行时向请求人追问；PR 来源和仓库仍须先通过资源范围校验。',
+                { items: missingHarnessInputs.join('；') }))
+                : h('p', { role: 'status', style: mutedTextStyle }, translateLocaleText(
+                  'AI 暂未发现运行时待补信息；开放后，执行时如缺少必要资料，机器人仍会向请求人追问。')),
+              suggestions.length ? h('p', { style: mutedTextStyle }, `可选补充：${suggestions.join('；')}`) : null,
+              ruleExamples.length ? h('p', { style: mutedTextStyle }, `自然请求示例：${ruleExamples.join('；')}`) : null,
+              h('p', { style: mutedTextStyle }, translateLocaleText(
+                '待补信息和可选建议仅供复核，不会阻止开放。确定的授权范围与 PR 资源边界仍会单独校验。')))
+              : h('p', { role: 'status', style: mutedTextStyle }, ruleSummaryPending
+                ? '分析完成后，摘要、缺失范围和可选条件会显示在这里。'
+                : '填写任务描述后点击右侧“立即分析”，结果会显示在这里。')),
+          h('section', { style: capabilityStepStyle },
+            capabilityStepHeading('2', '执行方', '选择可用于此任务的执行器，并从已勾选项中设一个默认。'),
+            h('div', { style: { ...panelStyle, padding: 12, gap: 8 } },
+            h('p', { style: mutedTextStyle }, translateLocaleText('普通请求只运行默认执行方；发起人明确要求交叉审查时，会并行运行其他已选执行方。')),
+            h('div', { role: 'group', 'aria-label': '执行方', style: { display: 'grid', gap: 7 } },
+              ...[
+                { id: 'dsh', title: 'DSH', detail: '使用获准的团队模型处理对话内容和 ANT 已核验资源。', available: dshAvailable },
+                { id: 'codex', title: 'Codex', detail: '使用本机 DSH Provider Profile 权限；ANT 不会将文件、Git 和网络权限缩小到单项任务。', available: codexAvailable },
+                { id: 'claude-code', title: 'Claude Code', detail: '使用本机 DSH Provider Profile 权限；ANT 不会将文件、Git 和网络权限缩小到单项任务。', available: claudeCodeAvailable },
+              ].map((option) => {
+                const checked = reviewers.includes(option.id)
+                return h('div', { key: option.id, style: { display: 'grid', gridTemplateColumns: 'minmax(0, 1fr) auto',
+                  gap: 8, alignItems: 'center', border: '1px solid var(--dsw-alias-border-l2)', borderRadius: 8,
+                  padding: '9px 11px' } },
+                h('label', { style: { display: 'flex', alignItems: 'center', gap: 8, flexWrap: 'wrap' } },
+                  h('input', { type: 'checkbox', 'aria-label': `任务 Agent ${option.title}`, checked,
+                    disabled: !option.available && !checked,
+                    onChange: (event) => changeReviewer(option.id, event.target.checked) }),
+                  h('strong', null, option.title),
+                  h('span', { style: mutedTextStyle }, option.available ? '可用' : '未在本机启用')),
+                h('label', { style: { display: 'flex', alignItems: 'center', gap: 6, color: mutedTextStyle.color } },
+                  h('input', { type: 'radio', name: 'ant-default-runner', 'aria-label': `默认执行方 ${option.title}`,
+                    checked: runner === option.id, disabled: !checked || !option.available,
+                    onChange: () => selectRunner(option.id) }), '默认'),
+                checked ? h('span', { style: { ...mutedTextStyle, gridColumn: '1 / -1' } }, option.detail) : null)
+              }),
+            ),
+            executorUnavailableReason ? h('p', { role: 'status', style: { ...mutedTextStyle, gridColumn: '1 / -1' } },
+              `${executorUnavailableReason} 当前仍可使用 DSH 团队模型。`) : null)),
+          h('section', { style: capabilityStepStyle },
+            capabilityStepHeading('3', '请求范围', '限定从哪里请求、哪些人可以请求，以及授权多久。'),
+            h('div', { style: { display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 250px), 1fr))',
+              gap: 12, alignItems: 'start' } },
             h('label', null, '使用场景', h('select', { value: conversationKind,
               onChange: (event) => { setConversationKind(event.target.value); setGroupId('') }, style: inputStyle },
               h('option', { value: 'dm' }, '私聊'), h('option', { value: 'group' }, '指定群聊'))),
@@ -1683,10 +1918,16 @@ window.__ModuleLoader__.load({
               `有效期：${formatLocaleDate(editingExpiresAt * 1000)}（编辑时保持不变）`)
               : h('label', null, '有效期', h('select', { value: days, onChange: (event) => setDays(Number(event.target.value)), style: inputStyle },
                 h('option', { value: 1 }, '1 天'), h('option', { value: 7 }, '7 天'), h('option', { value: 30 }, '30 天'))),
-            (runner === 'codex' || runner === 'claude-code') ? h('p', { style: { ...mutedTextStyle, gridColumn: '1 / -1' } },
-              'Provider Profile 的本机权限由 DSH 管理；ANT 当前不会用 Codex 或 Claude Code 执行协作任务，也不会把 Gitea 凭据交给它们。') : null),
-              !hasPrParameter ? h('p', { style: mutedTextStyle },
-                'Codex 和 Claude Code 即使已在 DSH 注册，目前也不用于任何协作任务。') : null),
+            usesExternalExecutor ? h('p', { style: { ...mutedTextStyle, gridColumn: '1 / -1' } },
+              'Codex 和 Claude Code 沿用本机 DSH Provider Profile 权限；任务授权不会把文件、Git 或网络权限缩小到单项任务。') : null,
+            usesExternalExecutor ? h('label', { style: { gridColumn: '1 / -1' } },
+              h('input', { type: 'checkbox', 'aria-label': '启动前需要主人审批', checked: ownerApprovalRequired,
+                onChange: (event) => setOwnerApprovalRequired(event.target.checked) }),
+              ' ', '启动前需要主人审批') : null,
+            usesExternalExecutor && !ownerApprovalRequired ? h('p', { role: 'note', style: { ...mutedTextStyle, gridColumn: '1 / -1' } },
+              '取消后，模型匹配到这项任务就会直接启动 Codex 或 Claude Code，主人不再逐次确认。') : null)),
+          h('section', { style: capabilityStepStyle },
+            capabilityStepHeading('4', '开放前复核', '确认任务理解、执行方式和请求范围后再开放。'),
         h('aside', { id: 'ant-authorization-review', role: 'region', 'aria-label': '开放前复核', tabIndex: -1,
           style: { ...settingsPanelStyle, padding: 14, gap: 10, alignSelf: 'stretch' } },
           h('div', { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'center', gap: 8 } },
@@ -1724,14 +1965,14 @@ window.__ModuleLoader__.load({
             'aria-describedby': cardBlockReason ? 'ant-capability-block-reason'
               : submissionError ? 'ant-capability-submission-error' : undefined,
             style: { ...primaryButtonStyle, width: '100%' } }, busy ? translateLocaleText('正在处理…')
-              : editingCardId ? '保存能力修改' : '确认并开放能力'))))),
+              : editingCardId ? '保存能力修改' : '确认并开放能力'))))))),
         h('div', { role: 'region', 'aria-label': '本机处理设置', style: { display: activeTab === 'local' ? 'grid' : 'none', gap: 12 } },
         showPrSecuritySettings ? h('section', { style: { ...settingsPanelStyle, padding: 14 } },
           h('strong', null, 'PR 只读凭据（本机）'),
           h('p', { style: mutedTextStyle }, tokenConfigured
             ? '令牌由 DSH 本机凭据服务保存。ANT Host 在读取已授权 PR 时会使用它；不会同步到 ANT 服务端或写入审查提示词。'
             : '读取 Gitea PR 需要只读访问令牌。保存后由 DSH 本机凭据服务管理，ANT Host 只在读取已授权 PR 时使用。'),
-          h('p', { role: 'note', style: mutedTextStyle }, 'DSH 默认将凭据保存在 DSH Home 的私有文件中，环境变量也可作为回退来源。文件权限只隔离其他 OS 用户；同一用户权限下的 Agent 进程可能读取它。ANT 当前只允许无 DSH 工具的任务会话处理对话内容和 Host 核验后提供的资源。Codex 和 Claude Code 子 Agent 暂停用于协作任务，因为 ANT 无法核验其逐任务文件、Git 和网络权限。ANT Gitea 凭据只由 Host Connector 使用，不会放入 Agent 请求。'),
+          h('p', { role: 'note', style: mutedTextStyle }, 'DSH 默认将凭据保存在 DSH Home 的私有文件中，环境变量也可作为回退来源。文件权限只隔离其他 OS 用户；同一用户权限下的 Agent 进程可能读取它。Codex 和 Claude Code 会使用本机 DSH Provider Profile 的文件、Git、网络及工具权限；任务描述和单次审批不会创建操作系统沙箱，也不会缩小这些权限。ANT Gitea 凭据只由 Host Connector 使用，不会放入 Agent 请求。'),
           h('p', { role: 'note', style: mutedTextStyle }, selectedGiteaOrigin
             ? `这枚只读令牌仅用于已绑定主机 ${selectedGiteaOrigin}；任务来源来自自然语言描述，但必须匹配该主机。`
             : '首次确认并开放包含 PR 来源的任务时，会将该来源绑定到这台机器人；确认前 ANT 不会把只读令牌发送到任务描述中的地址。'),
@@ -1765,26 +2006,26 @@ window.__ModuleLoader__.load({
               style: { ...inputStyle, width: 128, maxWidth: '100%', boxSizing: 'border-box' } })),
           h('button', { disabled: busy, style: secondaryButtonStyle }, '保存本机处理设置'),
           h('p', { style: { ...mutedTextStyle, flex: '1 1 100%', margin: 0 } },
-            '当前不拉取 PR 仓库快照；刷新授权状态时仍会清理已停用或到期能力的旧缓存。')),
+            '需要完整 PR 文件时，ANT 会在本机准备已核验 Head 的临时快照；刷新授权状态时会清理已停用或到期能力的旧缓存。')),
         ),
         h('section', { 'aria-label': '执行方状态与权限边界', style: { ...settingsPanelStyle, padding: 14, gap: 8 } },
           h('strong', null, '执行方状态与权限边界'),
-          h('p', { style: mutedTextStyle }, '这里显示 DSH 本机的执行器状态；Codex 或 Claude Code 已注册，不代表它们获准执行协作任务。'),
+          h('p', { style: mutedTextStyle }, '这里显示 DSH 本机的执行器状态。已注册的 Codex 或 Claude Code 可由主人选入预授权任务卡，或在本次 IM 审批中选择。'),
           loadFailures.includes('executors') ? h('p', { role: 'status', style: mutedTextStyle }, '暂时无法读取执行方状态，请刷新后重试。') : null,
           ...executors.filter((item) => ['dsh', 'codex', 'claude-code'].includes(item.id)).map((item) => h('div', {
             key: item.id, style: { display: 'grid', gap: 3, paddingTop: 8, borderTop: '1px solid var(--dsw-alias-border-l2)' } },
             h('strong', null, item.title + ' · ' + (item.id === 'dsh'
               ? item.available ? '可用' : item.reason || '未就绪'
-              : item.available ? '已注册 · 协作任务暂不可用' : '协作任务暂不可用')),
+              : item.available ? '已注册 · 可用于协作' : '尚未注册')),
             h('span', { style: mutedTextStyle }, item.id === 'codex'
-              ? 'ANT 暂不启动 Codex 子 Agent，因为当前无法核验逐任务文件、Git 和网络权限。'
+              ? 'Codex 使用本机 Provider Profile 权限；ANT 不会把文件、Git 或网络权限缩小到任务范围。'
               : item.id === 'claude-code'
-                ? 'ANT 暂不启动 Claude Code 子 Agent，因为当前无法核验逐任务文件、Git 和网络权限。'
+                ? 'Claude Code 使用本机 Provider Profile 权限；ANT 不会把文件、Git 或网络权限缩小到任务范围。'
                 : '处理授权任务提供的内容，不调用本机工具。'))))))
     }
 
     function SkillCenterPage({ remote, onBack, onAll, onSkills, onPlugins, openBundle,
-      includePlugins, query, onQueryChange }) {
+      includePlugins, query, onQueryChange, pluginPageState }) {
       const [skills, setSkills] = useState([])
       const [loading, setLoading] = useState(false)
       const [loadError, setLoadError] = useState(false)
@@ -2133,6 +2374,7 @@ window.__ModuleLoader__.load({
                 style: { color: 'var(--dsw-alias-link)', fontSize: 13, lineHeight: 1.6, padding: '4px 0' } }, '英文原文 ↗'))))) : null,
         includePlugins ? h(PluginCenterPage, { remote, onBack, onAll, onSkills, openBundle,
           embedded: true, query, onQueryChange, externalFilter: filter, externalCategoryFilter: categoryFilter,
+          pluginPageState,
           externalScopeFilter: scopeFilter,
           hasSkillMatches: visible.length + visibleOfficial.length > 0, skillCatalogReady: !loading && !loadError,
           refreshToken }) : null))
@@ -2141,49 +2383,193 @@ window.__ModuleLoader__.load({
     function PluginCenterPage({ remote, onBack, onAll, onSkills, openBundle,
       embedded = false, query, onQueryChange, externalFilter = 'all',
       externalCategoryFilter = 'all', externalScopeFilter = 'all',
-      hasSkillMatches = false, skillCatalogReady = false, refreshToken }) {
+      hasSkillMatches = false, skillCatalogReady = false, refreshToken, pluginPageState }) {
+      const { uncertainInstalls, setUncertainInstalls, uncertainInstallsRef, workingId, setWorkingId,
+        completedId, setCompletedId, message, setMessage, refreshMessage, refreshMessageIsError,
+        setRefreshFeedback, messageVersion, messagePluginId, messagePackageName,
+        messageClearOnResolve, refreshGeneration, refreshRevision, requestPluginRefresh,
+        workingAny } = pluginPageState
       const [plugins, setPlugins] = useState([])
       const [bundles, setBundles] = useState([])
       const [loading, setLoading] = useState(true)
       const [loadError, setLoadError] = useState(false)
-      const [workingId, setWorkingId] = useState('')
-      const [uncertainId, setUncertainId] = useState('')
-      const [completedId, setCompletedId] = useState('')
-      const [message, setMessage] = useState('')
+      const [bundleListReady, setBundleListReady] = useState(false)
       const [filter, setFilter] = useState('all')
       const [categoryFilter, setCategoryFilter] = useState('all')
-      const refreshGeneration = useRef(0)
-      const refresh = async () => {
+      const waitForInstallBeforeDeadline = (manager, requestId) => {
+        let timeoutId
+        const waitPromise = Promise.resolve().then(() => manager.waitForInstall(requestId))
+        const timeoutPromise = new Promise((_, reject) => {
+          timeoutId = setTimeout(() => reject(new Error()), 30_000)
+        })
+        return Promise.race([waitPromise, timeoutPromise])
+          .finally(() => { if (timeoutId !== undefined) clearTimeout(timeoutId) })
+      }
+      const refresh = async (focusPluginId = null) => {
         const generation = ++refreshGeneration.current
+        const uncertaintySnapshot = uncertainInstallsRef.current
+        const messageVersionAtStart = messageVersion.current
         setLoading(true)
+        setBundleListReady(false)
+        let catalogLoaded = false
         try {
           const manager = remote?.pluginManager
           if (typeof manager?.listBundles !== 'function') throw new Error('当前 DSH 未提供插件管理接口。')
-          const [response, listed] = await Promise.all([
-            fetch('/api/ant-teams/plugins', { cache: 'no-store' }), manager.listBundles(),
-          ])
+          const response = await fetch('/api/ant-teams/plugins', { cache: 'no-store' })
           const result = await readLocalJsonResponse(response)
           if (!response.ok) throw new Error(result.message || `读取插件目录失败（${response.status}）。`)
           if (!Array.isArray(result.plugins)) throw new Error('企业插件目录格式无效。')
-          if (!listed.ok) throw new Error(listed.error?.message || '无法读取 DSH 本机插件。')
           if (generation !== refreshGeneration.current) return
           setPlugins(result.plugins)
+          setLoadError(false)
+          catalogLoaded = true
+          const initialListed = await manager.listBundles()
+          if (!initialListed.ok) throw new Error(initialListed.error?.message || '无法读取 DSH 本机插件。')
+          if (generation !== refreshGeneration.current) return
+          setBundles(initialListed.value)
+          setBundleListReady(true)
+          const catalogPackageNames = new Set(result.plugins
+            .map((plugin) => plugin.package_name).filter((name) => typeof name === 'string' && name))
+          const catalogUncertaintySnapshot = Object.fromEntries(Object.entries(uncertaintySnapshot)
+            .filter(([, uncertainInstall]) => catalogPackageNames.has(uncertainInstall.packageName)))
+          const requestIds = [...new Set(Object.values(catalogUncertaintySnapshot)
+            .flatMap((uncertainInstall) => [uncertainInstall.requestId,
+              ...(uncertainInstall.relatedRequestIds || [])])
+            .filter((requestId) => typeof requestId === 'string' && requestId))]
+          if (requestIds.length) {
+            if (typeof manager.waitForInstall !== 'function') {
+              if (generation === refreshGeneration.current) setRefreshFeedback(translateLocaleText(
+                '当前 DSH 无法确认上次安装是否结束；请稍后重新核对，勿重复安装。'), true)
+              return
+            }
+            setRefreshFeedback(translateLocaleText('正在等待 DSH 上一次插件安装请求结束，再读取本机状态。'))
+            for (const requestId of requestIds) {
+              let waitResult
+              try { waitResult = await waitForInstallBeforeDeadline(manager, requestId) }
+              catch {
+                if (generation === refreshGeneration.current) setRefreshFeedback(translateLocaleText(
+                  '无法确认 DSH 上一项插件安装是否已结束；待核对锁保持，请稍后重试。'), true)
+                return
+              }
+              if (!waitResult?.ok) {
+                if (generation === refreshGeneration.current) setRefreshFeedback(translateLocaleText(
+                  '无法确认 DSH 上一项插件安装是否已结束；待核对锁保持，请稍后重试。'), true)
+                return
+              }
+              if (generation !== refreshGeneration.current) return
+            }
+          }
+          if (generation !== refreshGeneration.current) return
+          let listed = initialListed
+          if (requestIds.length) {
+            listed = await manager.listBundles()
+            if (!listed.ok) throw new Error(listed.error?.message || '无法读取 DSH 本机插件。')
+          }
+          if (generation !== refreshGeneration.current) return
+          const canUpdateMessage = messageVersion.current === messageVersionAtStart
+          const currentUncertainties = uncertainInstallsRef.current
+          const currentCatalogUncertainties = Object.fromEntries(Object.entries(currentUncertainties)
+            .filter(([, uncertainInstall]) => catalogPackageNames.has(uncertainInstall.packageName)))
+          const focusPackageName = focusPluginId
+            ? plugins.find((plugin) => plugin.id === focusPluginId)?.package_name : null
+          let nextUncertainties = currentUncertainties
+          const resolvedPluginIds = new Set()
+          for (const [pluginId, uncertainInstall] of Object.entries(catalogUncertaintySnapshot)) {
+            if (currentUncertainties[pluginId] !== uncertainInstall) continue
+            const installed = listed.value.find((bundle) => bundle.name === uncertainInstall.packageName && bundle.installed)
+            const resolved = !installed
+              || (installed.version === uncertainInstall.targetVersion
+                && (!uncertainInstall.expectedSource || installed.source === uncertainInstall.expectedSource))
+              || Boolean(uncertainInstall.previousVersion
+                && installed.version === uncertainInstall.previousVersion
+                && (installed.source === uncertainInstall.previousSource
+                  || installed.source === uncertainInstall.expectedPreviousSource)
+                && installed.enabled === uncertainInstall.previousEnabled)
+              || Boolean(focusPluginId
+                && (pluginId === focusPluginId || uncertainInstall.packageName === focusPackageName)
+                && installed && typeof installed.version === 'string' && installed.version.trim()
+                && installed.version !== uncertainInstall.targetVersion
+                && installed.version !== uncertainInstall.previousVersion)
+            if (!resolved) continue
+            if (nextUncertainties === currentUncertainties) nextUncertainties = { ...currentUncertainties }
+            delete nextUncertainties[pluginId]
+            resolvedPluginIds.add(pluginId)
+          }
+          if (nextUncertainties !== currentUncertainties) {
+            uncertainInstallsRef.current = nextUncertainties
+            setUncertainInstalls(nextUncertainties)
+          }
+          setPlugins(result.plugins)
           setBundles(listed.value)
           setLoadError(false)
-          setMessage(result.plugins.length ? '' : '团队暂未发布精选插件。')
+          if (canUpdateMessage && messageClearOnResolve.current && messagePluginId.current
+            && (resolvedPluginIds.has(messagePluginId.current)
+              || [...resolvedPluginIds].some((pluginId) => uncertaintySnapshot[pluginId]?.packageName
+                === messagePackageName.current))) setMessage('')
+          const focusedUncertainty = focusPluginId
+            ? catalogUncertaintySnapshot[focusPluginId] || Object.values(catalogUncertaintySnapshot)
+              .find((item) => item.packageName === focusPackageName) : null
+          const focusedUncertaintyId = focusedUncertainty?.id
+          const hasFocusedUncertainty = Boolean(focusedUncertainty
+            && currentUncertainties[focusedUncertaintyId] === focusedUncertainty)
+          const refreshSnapshotIsCurrent = Object.keys(currentCatalogUncertainties).length
+            === Object.keys(catalogUncertaintySnapshot).length
+            && Object.entries(catalogUncertaintySnapshot)
+              .every(([pluginId, uncertainInstall]) => currentCatalogUncertainties[pluginId] === uncertainInstall)
+          const hasUncertainInstalls = Object.values(nextUncertainties)
+            .some((uncertainInstall) => catalogPackageNames.has(uncertainInstall.packageName))
+          if (canUpdateMessage && hasFocusedUncertainty && refreshSnapshotIsCurrent) {
+            if (resolvedPluginIds.has(focusedUncertaintyId)) {
+              setRefreshFeedback(hasUncertainInstalls
+                ? translateLocaleText('已重新读取本机列表，但安装状态仍无法确认；请在 DSH 插件管理核对后再操作。')
+                : translateLocaleText('本机状态已确认；可以再次检查或按目录版本操作。'))
+            } else {
+              setRefreshFeedback(translateLocaleText('已重新读取本机列表，但安装状态仍无法确认；请在 DSH 插件管理核对后再操作。'))
+            }
+          } else if (canUpdateMessage && !focusPluginId && refreshSnapshotIsCurrent) {
+            setRefreshFeedback(hasUncertainInstalls
+              ? translateLocaleText('已重新读取本机列表，但安装状态仍无法确认；请在 DSH 插件管理核对后再操作。')
+              : result.plugins.length ? '' : '团队暂未发布精选插件。')
+          }
         } catch (error) {
           if (generation !== refreshGeneration.current) return
-          setPlugins([])
-          setBundles([])
-          setLoadError(true)
-          setMessage(error instanceof Error ? error.message : '无法读取企业精选插件。')
+          setBundleListReady(false)
+          const errorMessage = error instanceof Error ? error.message : '无法读取企业精选插件。'
+          if (!catalogLoaded) {
+            setPlugins([])
+            setBundles([])
+            setLoadError(true)
+          }
+          setRefreshFeedback(errorMessage, true)
         } finally { if (generation === refreshGeneration.current) setLoading(false) }
       }
-      useEffect(() => { void refresh() }, [refreshToken])
+      useEffect(() => { void refresh() }, [refreshToken, refreshRevision])
+      const uncertainInstallFor = (plugin) => uncertainInstalls[plugin.id]
+        || Object.values(uncertainInstallsRef.current).find((item) => item.packageName === plugin.package_name)
+      const markInstallUncertain = (plugin, previous = null, expectedPreviousSource = null,
+        requestId = null, relatedRequestIds = []) => {
+        const uncertainInstall = {
+          id: plugin.id,
+          packageName: plugin.package_name,
+          targetVersion: plugin.version,
+          requestId,
+          relatedRequestIds: [...new Set(relatedRequestIds.filter((value) => typeof value === 'string' && value))],
+          expectedSource: approvedPluginArtifactUrl(plugin),
+          previousVersion: previous?.version || null,
+          previousSource: previous?.source,
+          expectedPreviousSource,
+          previousEnabled: previous ? previous.enabled !== false : null,
+        }
+        const next = { ...uncertainInstallsRef.current, [plugin.id]: uncertainInstall }
+        uncertainInstallsRef.current = next
+        setUncertainInstalls(next)
+      }
       const install = async (plugin) => {
         const artifactUrl = approvedPluginArtifactUrl(plugin)
         const installSpec = pluginInstallSpec(plugin)
-        if (!installSpec || workingId || uncertainId === plugin.id || completedId === plugin.id) return
+        const uncertainInstall = uncertainInstallFor(plugin)
+        if (!installSpec || workingId || pluginRuntimeState.workingId
+          || uncertainInstall || completedId === plugin.id) return
         const manager = remote?.pluginManager
         if (typeof manager?.installBundle !== 'function') {
           setMessage('当前 DSH 未提供插件安装接口，请联系管理员。')
@@ -2203,8 +2589,15 @@ window.__ModuleLoader__.load({
           '在这台 DSH {action}团队审核的 {plugin_title} {version}？{source_notice}{update_notice} 插件将在本机运行，完成后需要完全重启 DSH。',
           { action: translateLocaleText(action), plugin_title: plugin.title, version: plugin.version, source_notice: sourceNotice, update_notice: updateNotice })
         if (!confirmLocalized(installConfirmation)) return
+        const operationScopeRevision = pluginRuntimeState.scopeRevision
+        const isOperationScopeCurrent = () => operationScopeRevision === pluginRuntimeState.scopeRevision
+        const setInstallMessage = (value, staleScopeValue = '本机此前启动的插件操作已结束；请查看当前插件目录和本机状态。') => {
+          setMessage(isOperationScopeCurrent() ? value : staleScopeValue,
+            plugin.id, plugin.package_name, Boolean(uncertainInstallFor(plugin)))
+        }
         setWorkingId(plugin.id)
-        setMessage(translateLocaleText('正在安装 {plugin_title}，请不要退出 DSH…', { plugin_title: plugin.title }))
+        setInstallMessage(translateLocaleText('正在安装 {plugin_title}，请不要退出 DSH…', { plugin_title: plugin.title }),
+          '本机有一项插件操作仍在完成；结束前不能启动其他插件安装。')
         try {
           const response = await fetch('/api/ant-teams/plugins', { cache: 'no-store' })
           const catalog = await readLocalJsonResponse(response)
@@ -2215,6 +2608,9 @@ window.__ModuleLoader__.load({
             throw new Error('插件审核信息已变化，请刷新目录后重试。')
           }
           const requestId = crypto.randomUUID()
+          let relatedRequestIds = []
+          const markCurrentInstallUncertain = (previous = null, expectedPreviousSource = null) =>
+            markInstallUncertain(plugin, previous, expectedPreviousSource, requestId, relatedRequestIds)
           const requestReference = requestId.slice(0, 8).toUpperCase()
           const previousSourceIsRegistry = Boolean(local && (!local.source
             || local.source === plugin.package_name || local.source.startsWith(`${plugin.package_name}@`)))
@@ -2254,17 +2650,26 @@ window.__ModuleLoader__.load({
             if (installed !== null || !previousInstallSpec) return 'unknown'
             if (previousSourceIsRegistry && !previousRegistry) return 'unknown'
             const restoreRequestId = crypto.randomUUID()
-            try {
-              const restoreOptions = {
-                enabled: local.enabled !== false, requestId: restoreRequestId,
-                saveExact: true,
-              }
-              if (previousSourceIsRegistry && previousRegistry) restoreOptions.registry = previousRegistry
-              await manager.installBundle(previousInstallSpec, restoreOptions)
-              if (typeof manager.waitForInstall === 'function') {
-                await manager.waitForInstall(restoreRequestId)
-              }
-            } catch {}
+            const restoreOptions = {
+              enabled: local.enabled !== false, requestId: restoreRequestId,
+              saveExact: true,
+            }
+            if (previousSourceIsRegistry && previousRegistry) restoreOptions.registry = previousRegistry
+            try { await manager.installBundle(previousInstallSpec, restoreOptions) } catch {}
+            if (typeof manager.waitForInstall !== 'function') {
+              relatedRequestIds = [restoreRequestId]
+              return 'unknown'
+            }
+            let restoreWaitResult
+            try { restoreWaitResult = await manager.waitForInstall(restoreRequestId) }
+            catch {
+              relatedRequestIds = [restoreRequestId]
+              return 'unknown'
+            }
+            if (!restoreWaitResult?.ok) {
+              relatedRequestIds = [restoreRequestId]
+              return 'unknown'
+            }
             installed = await currentBundle()
             return isPreviousVersion(installed) && installed.enabled === (local.enabled !== false)
               ? 'restored' : 'unknown'
@@ -2287,7 +2692,7 @@ window.__ModuleLoader__.load({
             } catch (error) { installFailure = error; result = null }
           } else {
             if (replacingInstalled && typeof manager.removeBundle !== 'function') {
-              setMessage('当前 DSH 不支持通过 ANT 安全替换已安装插件。请在 DSH 插件管理查看状态，或联系管理员。')
+              setInstallMessage('当前 DSH 不支持通过 ANT 安全替换已安装插件。请在 DSH 插件管理查看状态，或联系管理员。')
               return
             }
             if (replacingInstalled) {
@@ -2298,7 +2703,7 @@ window.__ModuleLoader__.load({
               if (!removed?.ok || !['applied', 'restart-required'].includes(removed.value?.application)) {
                 const diagnostic = safeInstallDiagnostic(removed?.value?.error || removed?.error || removeFailure)
                 const recovery = await restorePreviousVersion()
-                if (recovery !== 'restored') setUncertainId(plugin.id)
+                if (recovery !== 'restored') markCurrentInstallUncertain(local, expectedPreviousSource)
                 const recoveryNotice = recovery === 'restored'
                   ? translateLocaleText('旧版本号和原启用状态已恢复。{source_notice}', {
                     source_notice: previousSourceIsRegistry
@@ -2306,7 +2711,7 @@ window.__ModuleLoader__.load({
                   : recovery === 'target' ? translateLocaleText(
                     '本机列表显示审核版本 {version} 已安装，请核对后再操作。', { version: plugin.version })
                     : translateLocaleText('无法确认旧版本及启用状态，请先在 DSH 插件管理核对。')
-                setMessage(`无法开始更新 ${plugin.title}：DSH 未能确认旧版本移除完成。${diagnostic
+                setInstallMessage(`无法开始更新 ${plugin.title}：DSH 未能确认旧版本移除完成。${diagnostic
                   ? `DSH 诊断：${diagnostic}。` : ''}${recoveryNotice}`)
                 return
               }
@@ -2327,7 +2732,6 @@ window.__ModuleLoader__.load({
               } catch (error) { waitFailure = error }
             }
             if (!recovered) {
-              setUncertainId(plugin.id)
               let restoreNotice = ''
               if (removedForUpdate) {
                 const restoreState = await restorePreviousVersion()
@@ -2340,23 +2744,27 @@ window.__ModuleLoader__.load({
                     '本机列表显示审核版本 {version} 已安装，但操作结果未确认。', { version: plugin.version })}`
                     : ` ${translateLocaleText('DSH 未能确认旧版本恢复，请先在插件列表核对。')}`
               }
+              markCurrentInstallUncertain(local, expectedPreviousSource)
               const details = [installFailure && `installBundle：${safeInstallDiagnostic(installFailure)}`,
                 waitFailure && `waitForInstall：${safeInstallDiagnostic(waitFailure)}`].filter(Boolean)
-              setMessage(`暂时无法确认 ${plugin.title} 的安装结果（请求编号 ${requestReference}）。${details.length
-                ? `本机诊断：${details.join('；')}。` : ''}${restoreNotice}请先在 DSH 插件列表核对，勿重复点击安装。`)
+              setInstallMessage(`暂时无法确认 ${plugin.title} 的安装结果（请求编号 ${requestReference}）。${details.length
+                ? `本机诊断：${details.join('；')}。` : ''}${restoreNotice}请先在 DSH 插件列表核对，勿重复点击安装。`,
+              '本机插件安装结果待核对，请先确认本机状态，勿重复安装。')
               return
             }
             result = recovered
           }
           const outcome = result.value
           if (!outcome || typeof outcome !== 'object') {
-            setUncertainId(plugin.id)
-            setMessage(`DSH 未返回 ${plugin.title} 的安装结果。请先在插件列表核对，勿重复点击安装。`)
+            markCurrentInstallUncertain(local, expectedPreviousSource)
+            setInstallMessage(`DSH 未返回 ${plugin.title} 的安装结果。请先在插件列表核对，勿重复点击安装。`,
+              '本机插件安装结果待核对，请先确认本机状态，勿重复安装。')
             return
           }
           if (outcome.application === 'failed' || outcome.application === 'cancelled') {
             if (outcome.error?.code === 'ambiguous-install' && local?.version === plugin.version) {
-              setMessage(`DSH 无法确定 ${plugin.title} 本次安装的唯一结果，未确认完成。请先在 DSH 插件列表核对；若已经正常使用同版则无需重复安装，仍需核对来源时请联系管理员。`)
+              setInstallMessage(`DSH 无法确定 ${plugin.title} 本次安装的唯一结果，未确认完成。请先在 DSH 插件列表核对；若已经正常使用同版则无需重复安装，仍需核对来源时请联系管理员。`,
+                '本机插件安装结果待核对，请先确认本机状态，勿重复安装。')
               return
             }
             const diagnostic = safeInstallDiagnostic({ name: outcome.error?.name,
@@ -2364,11 +2772,14 @@ window.__ModuleLoader__.load({
               message: outcome.error?.diagnostic || outcome.error?.message || outcome.packageResult?.output })
             let restoreNotice = ''
             if (updateRestore) {
-              restoreNotice = ['applied', 'restart-required'].includes(updateRestore.application)
+              const restoreConfirmed = ['applied', 'restart-required'].includes(updateRestore.application)
+              if (!restoreConfirmed) markCurrentInstallUncertain(local, expectedPreviousSource)
+              restoreNotice = restoreConfirmed
                 ? ` ${translateLocaleText('DSH 已恢复旧版本 {version}。', { version: local.version })}`
                 : ` ${translateLocaleText('DSH 未能确认旧版本恢复，请先在插件列表核对。')}`
             } else if (removedForUpdate) {
               const restoreState = await restorePreviousVersion()
+              if (restoreState !== 'restored') markCurrentInstallUncertain(local, expectedPreviousSource)
               restoreNotice = restoreState === 'restored'
                 ? translateLocaleText('DSH 已恢复旧版本号 {version}。{source_notice}', {
                   version: local.version,
@@ -2378,14 +2789,15 @@ window.__ModuleLoader__.load({
                   '本机列表显示审核版本 {version} 已安装，但结果未确认。', { version: plugin.version })}`
                   : ` ${translateLocaleText('DSH 未能确认旧版本恢复，请先在插件列表核对。')}`
             }
-            setMessage(`${plugin.title} 安装未完成（请求编号 ${requestReference}）。${diagnostic
+            setInstallMessage(`${plugin.title} 安装未完成（请求编号 ${requestReference}）。${diagnostic
               ? `DSH 诊断：${diagnostic}。` : 'DSH 没有返回失败诊断。'}${restoreNotice}请在 DSH 插件管理查看状态或联系管理员。`)
             return
           }
           if (outcome.bundle !== plugin.package_name
             || !['restart-required', 'applied'].includes(outcome.application)) {
-            setUncertainId(plugin.id)
-            setMessage(`DSH 未确认 ${plugin.title} 已安装。请先在插件列表核对，勿重复点击安装。`)
+            markCurrentInstallUncertain(local, expectedPreviousSource)
+            setInstallMessage(`DSH 未确认 ${plugin.title} 已安装。请先在插件列表核对，勿重复点击安装。`,
+              '本机插件安装结果待核对，请先确认本机状态，勿重复安装。')
             return
           }
           let observed = null
@@ -2396,19 +2808,24 @@ window.__ModuleLoader__.load({
             }
           } catch {}
           if ((outcome.version && outcome.version !== plugin.version) || observed?.version !== plugin.version) {
-            setUncertainId(plugin.id)
-            setMessage(`DSH 未确认 ${plugin.title} 的审核版本已安装。请先在插件列表核对，勿重复点击安装。`)
+            markCurrentInstallUncertain(local, expectedPreviousSource)
+            setInstallMessage(`DSH 未确认 ${plugin.title} 的审核版本已安装。请先在插件列表核对，勿重复点击安装。`,
+              '本机插件安装结果待核对，请先确认本机状态，勿重复安装。')
             return
           }
-          await refresh()
           if (artifactUrl && plugin.artifact_sha256) {
             try { localStorage.setItem(`${PLUGIN_INSTALL_RECORD_PREFIX}${plugin.id}`, plugin.artifact_sha256) } catch {}
           }
-          setCompletedId(plugin.id)
-          setMessage(`${plugin.title} 已安装。请完全退出并重新启动 DSH 后使用。`)
+          if (isOperationScopeCurrent()) setCompletedId(plugin.id)
+          setInstallMessage(`${plugin.title} 已安装。请完全退出并重新启动 DSH 后使用。`,
+            '本机插件已安装或更新；请完全退出并重新启动 DSH 后使用。')
+          requestPluginRefresh()
         } catch (error) {
-          setMessage(error instanceof Error ? error.message : '插件安装未完成，请稍后重试。')
-        } finally { setWorkingId('') }
+          setInstallMessage(error instanceof Error ? error.message : '插件安装未完成，请稍后重试。',
+            '本机此前启动的插件操作已结束；请刷新本机状态后再操作。')
+        } finally {
+          setWorkingId('')
+        }
       }
       const activeFilter = embedded ? externalFilter : filter
       const activeCategoryFilter = embedded ? externalCategoryFilter : categoryFilter
@@ -2467,13 +2884,18 @@ window.__ModuleLoader__.load({
           h('div', null,
             h('h1', { style: { margin: 0, fontSize: 28 } }, '企业精选插件'),
             h('p', { style: { ...mutedTextStyle, marginTop: 6 } }, '这里展示团队审核过的插件版本及本机状态。DSH 0.2.0-rc.2 不会自动更新 Bundle；插件自身的更新器可能绕过此目录安装其他版本。')),
-          h('button', { type: 'button', disabled: loading, onClick: () => void refresh(), style: secondaryButtonStyle }, loading ? '读取中…' : '刷新目录')),
+          h('button', { type: 'button', disabled: loading, onClick: () => {
+            if (!workingAny) setMessage('')
+            void refresh()
+          }, style: secondaryButtonStyle }, loading ? '读取中…' : '刷新目录')),
         !loading && !plugins.length && !loadError ? embedded
           ? h('p', { role: 'status', style: mutedTextStyle }, '团队暂未发布精选插件。')
           : h('section', { role: 'status', style: panelStyle },
               h('h2', { style: { margin: 0, fontSize: 18 } }, '团队暂未发布精选插件'),
               h('p', { style: mutedTextStyle }, '需要某个插件？请联系企业管理员，说明用途或提供插件地址。审核发布后会显示在这里。')) : null,
-        !loading && loadError ? h('p', { role: 'alert', style: feedbackNoticeStyle }, message) : null,
+        refreshMessage && (refreshMessageIsError || plugins.length)
+          ? h('p', { role: refreshMessageIsError ? 'alert' : 'status', style: feedbackNoticeStyle }, refreshMessage) : null,
+        message ? h('p', { role: 'status', style: feedbackNoticeStyle }, message) : null,
         plugins.length && !embedded ? h(ExtensionRequestNotice) : null,
         plugins.length && !embedded ? h('div', { style: panelStyle },
           h('input', { type: 'search', value: query, onChange: (event) => onQueryChange(event.target.value), placeholder: '搜索插件名称或用途', 'aria-label': '搜索企业精选插件', style: inputStyle }),
@@ -2486,7 +2908,6 @@ window.__ModuleLoader__.load({
                 'aria-label': '筛选插件用途类别', style: { ...inputStyle, width: 'auto', minHeight: 34 } },
               h('option', { value: 'all' }, '全部用途'),
               ...extensionCategories.map(([category, label]) => h('option', { key: category, value: category }, label)))))) : null,
-        plugins.length && message ? h('p', { role: 'status', style: feedbackNoticeStyle }, message) : null,
         visible.length ? h('div', { style: { display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 420px), 1fr))', gap: 16 } },
           ...visible.map((plugin) => {
             const local = bundles.find((bundle) => bundle.name === plugin.package_name && bundle.installed)
@@ -2495,11 +2916,13 @@ window.__ModuleLoader__.load({
             const artifactUrl = approvedPluginArtifactUrl(plugin)
             const installSpec = pluginInstallSpec(plugin)
             const localAhead = local?.version && newerVersion(local.version, plugin.version)
+            const uncertainInstall = uncertainInstallFor(plugin)
             const sourceKnown = typeof local?.source === 'string'
             const verifiedLocal = sameVersion && artifactUrl && sourceKnown && local.source === artifactUrl
             const recordedInstall = sameVersion && !sourceKnown && previouslyInstalledReviewedPlugin(plugin)
             const status = security ? '已废弃（安全风险）'
-              : plugin.status === 'deprecated' ? local?.version ? `已废弃 · 本机 ${local.version}` : '已废弃' : local?.error ? '加载异常' : localAhead
+              : !bundleListReady ? loading ? '读取中…' : translateLocaleText('本机状态无法读取')
+                : plugin.status === 'deprecated' ? local?.version ? `已废弃 · 本机 ${local.version}` : '已废弃' : local?.error ? '加载异常' : localAhead
                 ? '本机版本高于团队目录版本' : sameVersion
                 ? verifiedLocal ? local.enabled ? '本机已装（团队来源，已启用）' : '本机已装（团队来源，未启用）'
                   : sourceKnown ? '本机同版，来源不同' : recordedInstall
@@ -2536,14 +2959,18 @@ window.__ModuleLoader__.load({
               h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8 } },
                 installSpec && (!local || (local.version && local.version !== plugin.version && (!localAhead || artifactUrl))
                   || (artifactUrl && sameVersion && !verifiedLocal))
-                  ? h('button', { type: 'button', disabled: Boolean(workingId) || uncertainId === plugin.id || completedId === plugin.id,
+                  ? h('button', { type: 'button', disabled: loading || !bundleListReady
+                    || workingAny || Boolean(uncertainInstall) || completedId === plugin.id,
                     onClick: () => void install(plugin), style: primaryButtonStyle },
-                  workingId === plugin.id ? '安装中…' : uncertainId === plugin.id ? '先核对安装结果'
+                  workingId === plugin.id ? '安装中…' : uncertainInstall ? '先核对安装结果'
                     : completedId === plugin.id ? '重启 DSH 后生效'
                     : local ? sameVersion || localAhead ? '按团队审核包重新安装' : '更新到审核版本' : '安装到这台 DSH') : null,
+                uncertainInstall ? h('button', { type: 'button', disabled: loading || workingAny,
+                  onClick: () => { if (!workingAny) setMessage(''); void refresh(plugin.id) },
+                  style: secondaryButtonStyle }, translateLocaleText('重新核对本机状态')) : null,
                 plugin.status === 'published' && !local && !installSpec
                   ? h('p', { style: mutedTextStyle }, '如需安装，请联系企业管理员安排。') : null,
-                local || uncertainId === plugin.id ? h('button', { type: 'button', onClick: () => openBundle(plugin.package_name), style: secondaryButtonStyle }, '打开 DSH 插件管理') : null,
+                local || uncertainInstall ? h('button', { type: 'button', onClick: () => openBundle(plugin.package_name), style: secondaryButtonStyle }, '打开 DSH 插件管理') : null,
                 local && !sameVersion && plugin.status === 'published' && !installSpec
                   ? h('p', { style: mutedTextStyle }, '本机版本与团队审核版本不同；请联系企业管理员核对。') : null))
           })) : !loading && plugins.length && (!embedded || !hasSkillMatches)
@@ -3316,6 +3743,7 @@ window.__ModuleLoader__.load({
           setMessage(`未清除本机凭证和模型设置：${error instanceof Error ? error.message : '请稍后重试。'}`)
           return
         }
+        setPluginRuntimeServiceScope('')
         try {
           await clearLocalConnection()
           setMessage('此设备的 ANT 凭证已撤销，ANT 模型设置已清除。团队服务地址已保留。')
@@ -3738,7 +4166,8 @@ window.__ModuleLoader__.load({
         dshCompatibilityCard,
         showReleaseNotes ? h('section', { style: { ...infoNoticeStyle, padding: 12 } },
         h('strong', { style: { fontSize: 14, lineHeight: 1.4 } }, '本版更新'),
-        h('p', { style: mutedTextStyle }, bundleRelease.release_notes)) : null,
+        h('div', { 'aria-label': '更新说明内容', style: { display: 'grid', gap: 8 } },
+          ...releaseNoteBlocks(bundleRelease.release_notes))) : null,
         ['incompatible', 'unknown'].includes(serviceCompatibility.state) ? h('p', { role: 'status', style: {
           ...feedbackNoticeStyle,
           color: serviceCompatibility.state === 'incompatible' ? 'var(--dsw-alias-state-error-primary)'
@@ -3781,14 +4210,86 @@ window.__ModuleLoader__.load({
       useLocaleRevision()
       const [tab, setTab] = useState('all')
       const [query, setQuery] = useState('')
+      const serviceUrl = loadServiceUrl()
+      const [, forcePluginRuntimeRender] = useState(0)
+      useEffect(() => {
+        const refresh = () => forcePluginRuntimeRender((revision) => revision + 1)
+        pluginRuntimeState.listeners.add(refresh)
+        setPluginRuntimeServiceScope(serviceUrl)
+        return () => pluginRuntimeState.listeners.delete(refresh)
+      }, [serviceUrl])
+      const runtimeScopeMatches = pluginRuntimeState.serviceUrl === serviceUrl
+      const uncertainInstalls = pluginRuntimeState.uncertainInstallsRef.current
+      const uncertainInstallsRef = pluginRuntimeState.uncertainInstallsRef
+      const workingAny = Boolean(pluginRuntimeState.workingId)
+      const workingId = runtimeScopeMatches && pluginRuntimeState.workingServiceUrl === serviceUrl
+        ? pluginRuntimeState.workingId : ''
+      const completedId = runtimeScopeMatches ? pluginRuntimeState.completedId : ''
+      const message = runtimeScopeMatches ? pluginRuntimeState.message : ''
+      const refreshMessage = runtimeScopeMatches ? pluginRuntimeState.refreshMessage : ''
+      const refreshMessageIsError = runtimeScopeMatches && pluginRuntimeState.refreshMessageIsError
+      const setUncertainInstalls = (next) => {
+        const value = typeof next === 'function' ? next(pluginRuntimeState.uncertainInstallsRef.current) : next
+        pluginRuntimeState.uncertainInstalls.clear()
+        for (const [pluginId, uncertainInstall] of Object.entries(value)) {
+          pluginRuntimeState.uncertainInstalls.set(pluginId, uncertainInstall)
+        }
+        publishPluginRuntimeState()
+      }
+      const setWorkingId = (value) => {
+        pluginRuntimeState.workingId = value
+        pluginRuntimeState.workingServiceUrl = value ? serviceUrl : ''
+        if (!value && pluginRuntimeState.message === pluginScopeBusyMessage) {
+          pluginRuntimeState.message = ''
+          pluginRuntimeState.messagePluginId.current = ''
+          pluginRuntimeState.messagePackageName.current = ''
+          pluginRuntimeState.messageClearOnResolve.current = false
+          pluginRuntimeState.messageVersion.current += 1
+        }
+        publishPluginRuntimeState()
+      }
+      const setCompletedId = (value) => {
+        pluginRuntimeState.completedId = value
+        publishPluginRuntimeState()
+      }
+      const setMessage = (value, pluginId = '', packageName = '', clearOnResolve = false) => {
+        pluginRuntimeState.message = value
+        pluginRuntimeState.messagePluginId.current = value ? pluginId : ''
+        pluginRuntimeState.messagePackageName.current = value ? packageName : ''
+        pluginRuntimeState.messageClearOnResolve.current = Boolean(value) && clearOnResolve
+        pluginRuntimeState.messageVersion.current += 1
+        pluginRuntimeState.refreshMessage = ''
+        pluginRuntimeState.refreshMessageIsError = false
+        publishPluginRuntimeState()
+      }
+      const setRefreshFeedback = (value, isError = false) => {
+        pluginRuntimeState.refreshMessage = value
+        pluginRuntimeState.refreshMessageIsError = isError
+        publishPluginRuntimeState()
+      }
+      const requestPluginRefresh = () => {
+        pluginRuntimeState.refreshRevision += 1
+        publishPluginRuntimeState()
+      }
+      const pluginPageState = { uncertainInstalls, setUncertainInstalls, uncertainInstallsRef,
+        workingId, setWorkingId, completedId, setCompletedId, message, setMessage,
+        refreshMessage, refreshMessageIsError, setRefreshFeedback, requestPluginRefresh,
+        workingAny, serviceUrl,
+        messageVersion: pluginRuntimeState.messageVersion,
+        messagePluginId: pluginRuntimeState.messagePluginId,
+        messagePackageName: pluginRuntimeState.messagePackageName,
+        messageClearOnResolve: pluginRuntimeState.messageClearOnResolve,
+        refreshGeneration: pluginRuntimeState.refreshGeneration,
+        refreshRevision: pluginRuntimeState.refreshRevision }
       const navigation = {
         onAll: () => setTab('all'), onSkills: () => setTab('skills'),
         onPlugins: () => setTab('plugins'),
       }
       return tab === 'plugins'
-        ? h(PluginCenterPage, { remote, onBack, openBundle, query, onQueryChange: setQuery, ...navigation })
+        ? h(PluginCenterPage, { remote, onBack, openBundle, query, onQueryChange: setQuery,
+          pluginPageState, ...navigation })
         : h(SkillCenterPage, { remote, onBack, openBundle, query, onQueryChange: setQuery,
-          includePlugins: tab === 'all', ...navigation })
+          pluginPageState, includePlugins: tab === 'all', ...navigation })
     }
 
     function brandingCacheKey() {