dsh-ant 0.6.1 → 0.6.3

package/client.js

@@ -12,6 +12,37 @@ window.__ModuleLoader__.load({
     let localeMetadata = {}
     let localeTranslate = (key) => key
     let localeMessagePatterns = []
+    const pluginScopeBusyMessage = '本机有一项插件操作仍在完成；结束前不能启动其他插件安装。'
+    const pluginRuntimeState = {
+      uncertainInstalls: new Map(), uncertainInstallsRef: { current: {} },
+      serviceUrl: '', scopeRevision: 0, workingId: '', workingServiceUrl: '', completedId: '',
+      message: '', messagePluginId: { current: '' }, messagePackageName: { current: '' },
+      messageClearOnResolve: { current: false },
+      refreshMessage: '', refreshMessageIsError: false,
+      messageVersion: { current: 0 }, refreshGeneration: { current: 0 }, refreshRevision: 0,
+      listeners: new Set(),
+    }
+    const publishPluginRuntimeState = () => {
+      pluginRuntimeState.uncertainInstallsRef.current = Object.fromEntries(pluginRuntimeState.uncertainInstalls)
+      for (const listener of [...pluginRuntimeState.listeners]) listener()
+    }
+    const setPluginRuntimeServiceScope = (serviceUrl) => {
+      const nextServiceUrl = normalizeServiceUrl(serviceUrl) || ''
+      if (nextServiceUrl === pluginRuntimeState.serviceUrl) return
+      pluginRuntimeState.serviceUrl = nextServiceUrl
+      pluginRuntimeState.scopeRevision += 1
+      pluginRuntimeState.completedId = ''
+      pluginRuntimeState.message = pluginRuntimeState.workingId ? pluginScopeBusyMessage : ''
+      pluginRuntimeState.messagePluginId.current = ''
+      pluginRuntimeState.messagePackageName.current = ''
+      pluginRuntimeState.messageClearOnResolve.current = false
+      pluginRuntimeState.refreshMessage = ''
+      pluginRuntimeState.refreshMessageIsError = false
+      pluginRuntimeState.messageVersion.current += 1
+      pluginRuntimeState.refreshGeneration.current += 1
+      pluginRuntimeState.refreshRevision += 1
+      publishPluginRuntimeState()
+    }
     const escapeRegExp = (value) => value.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&')
     const compileLocalePattern = (source) => {
       const names = []
@@ -54,6 +85,45 @@ window.__ModuleLoader__.load({
       }
       return createElement(type, localizedProps, ...children.map(localizedChild))
     }
+    const releaseNoteBlocks = (value) => {
+      const blocks = []
+      let paragraph = []
+      let list = []
+      let key = 0
+      const flushParagraph = () => {
+        if (!paragraph.length) return
+        blocks.push(h('p', { key: key++, style: { ...mutedTextStyle, whiteSpace: 'pre-line' } },
+          rawLocaleText(paragraph.join('\n'))))
+        paragraph = []
+      }
+      const flushList = () => {
+        if (!list.length) return
+        blocks.push(h('ul', { key: key++, style: { margin: 0, paddingLeft: 22, display: 'grid', gap: 4,
+          color: 'var(--dsw-alias-label-secondary)', fontSize: 13, lineHeight: 1.6 } },
+        ...list.map((item) => h('li', { key: item.key }, rawLocaleText(item.text)))))
+        list = []
+      }
+      for (const line of String(value ?? '').replace(/\r\n?/gu, '\n').split('\n')) {
+        const heading = /^\s{0,3}(#{1,3})\s+(.+)$/u.exec(line)
+        const bullet = /^\s*(?:[-*•]|\d+[.)])\s+(.+)$/u.exec(line)
+        if (heading) {
+          flushParagraph(); flushList()
+          const level = heading[1].length
+          const tag = level === 1 ? 'h3' : level === 2 ? 'h4' : 'h5'
+          blocks.push(h(tag, { key: key++, style: { margin: 0,
+            fontSize: level === 1 ? 15 : 13, lineHeight: 1.45 } }, rawLocaleText(heading[2].trim())))
+        } else if (bullet) {
+          flushParagraph()
+          list.push({ key: key++, text: bullet[1].trim() })
+        } else if (!line.trim()) {
+          flushParagraph(); flushList()
+        } else {
+          flushList(); paragraph.push(line)
+        }
+      }
+      flushParagraph(); flushList()
+      return blocks
+    }
     const confirmLocalized = (message) => window.confirm(translateLocaleText(message))
     const promptLocalized = (message, ...args) => window.prompt(translateLocaleText(message), ...args)
     const useLocaleRevision = () => {
@@ -444,6 +514,7 @@ window.__ModuleLoader__.load({
             if (result.service_url != null && !pinned) throw new Error()
             if (pinned) {
               if (current()) {
+                setPluginRuntimeServiceScope(pinned)
                 setBinding({ state: 'ready', url: pinned })
                 setServiceUrl(pinned)
                 setDraft(pinned)
@@ -494,6 +565,7 @@ window.__ModuleLoader__.load({
         }
         try {
           localStorage.setItem(SERVICE_URL_STORAGE_KEY, normalized)
+          setPluginRuntimeServiceScope(normalized)
           setServiceUrl(normalized)
           setDraft(normalized)
           setMessage('团队服务地址已保存。')
@@ -509,6 +581,7 @@ window.__ModuleLoader__.load({
       const bindingReadyForSummary = binding.state === 'ready' && Boolean(binding.url)
       const onConnectionChange = (url) => {
         bindingRevision.current += 1
+        setPluginRuntimeServiceScope(url || '')
         setBinding({ state: 'ready', url: url || null })
         setDelegationRevision((value) => value + 1)
         if (url) {
@@ -623,14 +696,17 @@ window.__ModuleLoader__.load({
       const [localConcurrency, setLocalConcurrency] = useState(null)
       const [repositoryCacheLimitGib, setRepositoryCacheLimitGib] = useState(10)
       const [ownerChallengeCode, setOwnerChallengeCode] = useState('')
+      const ownerChallengeMetaRef = useRef(null)
+      const ownerChallengeTimerRef = useRef(null)
       const [botId, setBotId] = useState('')
+      const botIdRef = useRef('')
       const [conversationKind, setConversationKind] = useState('dm')
       const [groupId, setGroupId] = useState('')
       const [ruleDescription, setRuleDescription] = useState('')
-      const [triggerPhrases, setTriggerPhrases] = useState('')
       const recognizedBaselineRef = useRef(null)
       const recognizedDescriptionRef = useRef(null)
       const recognitionRequestRef = useRef(0)
+      const recognitionControllerRef = useRef(null)
       const [recognitionBusy, setRecognitionBusy] = useState(false)
       const [recognitionMessage, setRecognitionMessage] = useState('')
       const [missingRequired, setMissingRequired] = useState([])
@@ -641,7 +717,31 @@ window.__ModuleLoader__.load({
       const [taskPrompt, setTaskPrompt] = useState('')
       const [runner, setRunner] = useState('dsh')
       const [reviewers, setReviewers] = useState(['dsh'])
+      const [ownerApprovalRequired, setOwnerApprovalRequired] = useState(true)
       const [parameters, setParameters] = useState([])
+      const cancelRecognitionRequest = () => {
+        recognitionControllerRef.current?.abort()
+        recognitionControllerRef.current = null
+        setRecognitionBusy(false)
+      }
+      const clearOwnerChallenge = () => {
+        if (ownerChallengeTimerRef.current !== null) clearTimeout(ownerChallengeTimerRef.current)
+        ownerChallengeTimerRef.current = null
+        ownerChallengeMetaRef.current = null
+        setOwnerChallengeCode('')
+      }
+      const selectBot = (nextBotId) => {
+        if (nextBotId !== botIdRef.current) {
+          clearOwnerChallenge()
+          botIdRef.current = nextBotId
+        }
+        setBotId(nextBotId)
+      }
+      useEffect(() => () => {
+        recognitionRequestRef.current += 1
+        recognitionControllerRef.current?.abort()
+        if (ownerChallengeTimerRef.current !== null) clearTimeout(ownerChallengeTimerRef.current)
+      }, [])
       const [giteaToken, setGiteaToken] = useState('')
       const [tokenConfigured, setTokenConfigured] = useState(false)
       const [senderScope, setSenderScope] = useState('any')
@@ -661,9 +761,12 @@ window.__ModuleLoader__.load({
         setLoading(true)
         setMessage('')
         try {
-          const paths = ['bots', 'enrolled-bots', 'groups', 'cards', 'settings', 'executors', 'local-settings', 'status']
+          const ownerChallengeAtLoad = ownerChallengeMetaRef.current
+          const paths = ['bots', 'enrolled-bots', 'groups', 'cards', 'settings', 'executors', 'local-settings', 'status',
+            ...(ownerChallengeAtLoad ? ['owner-challenge'] : [])]
           const responses = await Promise.all(paths.map((path) =>
-            fetch(`/api/ant-teams/delegation/${path}`, { cache: 'no-store',
+            fetch(`/api/ant-teams/delegation/${path}${path === 'owner-challenge'
+              ? `?bot_fingerprint=${encodeURIComponent(ownerChallengeAtLoad.fingerprint)}` : ''}`, { cache: 'no-store',
               ...(path === 'enrolled-bots' ? { headers: { 'x-ant-include-unbound': 'true' } } : {}) })
               .catch(() => null)))
           const data = await Promise.all(responses.map((response) => response
@@ -675,12 +778,30 @@ window.__ModuleLoader__.load({
             Array.isArray,
             (value) => value && typeof value === 'object' && !Array.isArray(value),
             (value) => Array.isArray(value?.items),
+            ...(ownerChallengeAtLoad ? [(value) => value && typeof value === 'object'
+              && typeof value.pending === 'boolean'] : []),
           ]
           const readable = responses.map((response, index) => Boolean(response?.ok && valid[index](data[index])))
-          setLoadFailures(paths.filter((path, index) => !readable[index]))
+          setLoadFailures(paths.filter((path, index) => !readable[index] && path !== 'owner-challenge'))
           setBots(readable[0] ? data[0].bots : [])
           setBotLoadError(!readable[0])
-          setEnrolled(readable[1] ? data[1] : [])
+          const nextEnrolled = readable[1] ? data[1] : []
+          setEnrolled(nextEnrolled)
+          const ownerChallenge = ownerChallengeAtLoad
+          if (ownerChallenge) {
+            const selectedFingerprint = readable[0] ? data[0].bots.find((bot) => bot.bot_id === botId)?.fingerprint : null
+            const enrollmentRead = readable[1]
+            const nowBound = enrollmentRead && nextEnrolled.some((enrollment) => enrollment.bot_fingerprint === ownerChallenge.fingerprint
+              && enrollment.owner_bound)
+            const challengeStatusIndex = paths.indexOf('owner-challenge')
+            const challengePending = challengeStatusIndex >= 0 && readable[challengeStatusIndex]
+              ? data[challengeStatusIndex].pending : null
+            if (ownerChallengeMetaRef.current === ownerChallenge
+              && (readable[0] && selectedFingerprint !== ownerChallenge.fingerprint
+                || Date.now() >= ownerChallenge.expiresAt
+                || (!ownerChallenge.ownerWasBound && nowBound)
+                || challengePending === false)) clearOwnerChallenge()
+          }
           setGroups(readable[2] ? data[2] : [])
           setCards(readable[3] ? data[3] : [])
           setDefaults(readable[4] ? data[4] : null)
@@ -696,6 +817,9 @@ window.__ModuleLoader__.load({
       useEffect(() => { void load().catch((error) => setMessage(error.message)) }, [remote, revision])
       useEffect(() => { setMessage('') }, [activeTab])
       const selectedBot = bots.find((bot) => bot.bot_id === botId)
+      const botPlatformLabel = (bot) => bot?.channel === 'feishu' || !bot?.channel
+        ? translateLocaleText('飞书')
+        : bot.channel === 'wecom' ? translateLocaleText('企业微信') : translateLocaleText('其他 IM')
       const botConnected = Boolean(selectedBot?.available && selectedBot?.connected)
       const selectedEnrollment = enrolled.find((bot) => bot.bot_fingerprint === selectedBot?.fingerprint)
       const selectedGiteaOrigin = normalizeServiceUrl(selectedEnrollment?.gitea_origin)
@@ -757,6 +881,7 @@ window.__ModuleLoader__.load({
       const dshAvailable = executors.some((item) => item.id === 'dsh' && item.available)
       const executorUnavailableReason = executors.find((item) => item.reason)?.reason || null
       const reviewerLabel = (id) => ({ dsh: 'DSH', codex: 'Codex', 'claude-code': 'Claude Code' })[id] || id
+      const usesExternalExecutor = reviewers.some((id) => ['codex', 'claude-code'].includes(id))
       const cardReviewerSummary = (card) => {
         const selected = Array.isArray(card.reviewers) && card.reviewers.length ? card.reviewers : [card.runner]
         const unavailable = selected.filter((runner) => !executors.some((item) => item.id === runner && item.available))
@@ -767,9 +892,12 @@ window.__ModuleLoader__.load({
           ? translateLocaleText('默认 {executor}；交叉审查：{reviewers}',
             { executor: reviewerLabel(card.runner), reviewers: additional.map(reviewerLabel).join('、') })
           : translateLocaleText('{executor} 默认执行', { executor: reviewerLabel(card.runner) })
-        return unavailable.length
+        const summary = unavailable.length
           ? `${selectedSummary}；${unavailable.map(reviewerLabel).join('、')} 暂不可用`
           : selectedSummary
+        return card.owner_approval_required !== false
+          && selected.some((id) => ['codex', 'claude-code'].includes(id))
+          ? translateLocaleText('{summary}；启动前需要主人审批', { summary }) : summary
       }
       const requesterSummary = senderScope === 'allowlist'
         ? translateLocaleText('仅指定成员：{member_ids}',
@@ -780,9 +908,8 @@ window.__ModuleLoader__.load({
       const ruleSummaryCurrent = recognizedDescriptionRef.current === ruleDescription.trim()
       const ruleSummaryPending = recognitionBusy
       const ruleSummaryDirty = Boolean(ruleDescription.trim() && !ruleSummaryCurrent)
-      const ruleTriggerSummary = triggerPhrases.split('\n').map((item) => item.trim()).filter(Boolean)
-      const ruleSummaryReady = Boolean(ruleSummaryCurrent
-        && (title || intent || ruleTriggerSummary.length || parameters.length || taskPrompt))
+      const ruleSummaryReady = Boolean(!ruleSummaryPending && ruleSummaryCurrent
+        && (title || intent || parameters.length || taskPrompt))
       const missingHarnessInputs = [...new Set([
         ...missingRequired,
         ...(parameters.some((rule) => rule.kind === 'gitea_pr'
@@ -815,7 +942,7 @@ window.__ModuleLoader__.load({
         ? `请求时还需提供：${parameters.map(parameterSummary).join('；')}`
         : '无需额外参数，按请求中的内容处理'
       const ruleSummaryNarrative = ruleSummaryReady
-        ? `${ruleTriggerSummary.length ? `消息以“${ruleTriggerSummary.join('”或“')}”开头时，` : ''}${intent.trim() || title.trim()}${taskPrompt.trim() ? `；${taskPrompt.trim()}` : ''}；${recognizedInputsSummary}`
+        ? `${intent.trim() || title.trim()}${taskPrompt.trim() ? `；${taskPrompt.trim()}` : ''}；${recognizedInputsSummary}`
         : '识别后会用一段摘要呈现系统理解的任务。'
       const executorSummary = translateLocaleText(runner === 'codex' ? 'DSH Codex 子 Agent'
         : runner === 'claude-code' ? 'DSH Claude Code 子 Agent' : 'DSH · 当前授权模型'
@@ -823,13 +950,14 @@ window.__ModuleLoader__.load({
       const cardBlockReason = enrollmentLoadError ? '暂时无法核对机器人是否已启用协作，请刷新状态后再试。'
         : !botConnected || !selectedEnrollmentBound ? '先在上方把机器人绑定到这台 DSH。'
         : loadFailures.includes('settings') || defaults?.task_rule_schema_version !== 3
-          ? '团队服务端尚未支持任务触发规则与运行时授权核验；请先升级 ANT 服务端。'
+          ? '团队服务端尚未支持 AI 任务 Harness 与运行时授权核验；请先升级 ANT 服务端。'
         : !ruleDescription.trim() ? '请先用自然语言描述要做的任务。'
+        : recognitionBusy ? 'AI 正在检查当前描述；分析完成后再开放。'
         : recognizedDescriptionRef.current !== ruleDescription.trim()
-          ? recognitionBusy ? 'AI 正在检查当前描述；分析完成后再开放。' : '描述已修改，请点击“立即分析”更新任务理解后再开放。'
+          ? '描述已修改，请点击“立即分析”更新任务理解后再开放。'
         : !title.trim() || !intent.trim() || !taskPrompt.trim() ? '等待 AI 生成任务理解和处理要求。'
-        : !ruleTriggerSummary.length ? '任务没有明确触发开头；请在描述中写清楚请求消息以什么短语开头，再重新分析。'
-        : missingHarnessInputs.length ? `任务范围还有必需信息未明确：${missingHarnessInputs.join('、')}。请补充描述。`
+        : usesExternalExecutor && ownerApprovalRequired && !ownerApprovalBound
+          ? '这项任务需要主人审批，请先绑定审批私聊，或取消“启动前需要主人审批”。'
         : conversationKind === 'group' && loadFailures.includes('groups') ? '暂时无法核对目标群，请刷新状态后再试。'
         : conversationKind === 'group' && !groupId ? '请在“请求范围”中选择目标群；若列表为空，让群成员先 @机器人，再刷新群列表。'
           : senderScope === 'allowlist' && !senderIds.trim() ? '请填写可请求成员的 IM ID。'
@@ -867,16 +995,16 @@ window.__ModuleLoader__.load({
         setRecognitionMessage('')
         recognizedBaselineRef.current = null
         recognizedDescriptionRef.current = null
+        cancelRecognitionRequest()
         recognitionRequestRef.current += 1
         setRuleDescription('')
-        setTriggerPhrases('')
         setMissingRequired([]); setSuggestions([]); setRuleExamples([])
         setTitle(''); setIntent(''); setTaskPrompt(''); setRunner('dsh')
-        setReviewers(['dsh'])
+        setReviewers(['dsh']); setOwnerApprovalRequired(true)
         setParameters([]); setConversationKind(context.conversationKind || 'dm')
         setGroupId(context.groupId || '')
         setSenderScope('any'); setSenderIds(''); setDays(7); setCreateOpen(true)
-        if (context.botId) setBotId(context.botId)
+        if (context.botId) selectBot(context.botId)
       }
       const taskRuleDraftFromCard = (card, title) => {
         const rules = (card.parameters || []).map((rule) => ({
@@ -895,32 +1023,31 @@ window.__ModuleLoader__.load({
           else if (headIndex < 0 && rules.length < 12) rules.push(headRule)
         }
         return { title: title || '', intent: card.intent || '', task_prompt: card.task_prompt || '',
-          trigger_phrases: Array.isArray(card.trigger_phrases) ? card.trigger_phrases.map((item) => item.trim()).filter(Boolean) : [],
           parameters: rules, examples: Array.isArray(card.examples) ? card.examples : [],
           missing_required: [], suggestions: [] }
       }
       const editCard = (card, copy = false) => {
         setSubmissionError('')
-        setBotId(card.bot_id)
+        const cardBotId = card.bot_id || bots.find((bot) => bot.fingerprint === card.bot_fingerprint)?.bot_id || ''
+        selectBot(cardBotId)
         setRecognitionMessage('')
+        cancelRecognitionRequest()
         recognitionRequestRef.current += 1
         setEditingCardId(copy ? null : card.id); setEditingExpiresAt(copy ? null : card.expires_at)
         const taskDraft = taskRuleDraftFromCard(card, copy ? `${card.title.slice(0, 94)}（副本）` : card.title)
         recognizedBaselineRef.current = taskDraft
         const existingDescription = card.rule_description || ''
         recognizedDescriptionRef.current = existingDescription.trim() || null
-        setDraftNotice(!taskDraft.trigger_phrases.length
-          ? '这项旧任务没有明确触发短语；新版不会按它启动任务。请重新分析描述并检查生成的触发开头。'
-          : existingDescription.trim() ? ''
-            : '这项旧任务没有自然语言描述。请补充任务描述，让 AI 生成 Harness 后再开放。')
+        setDraftNotice(existingDescription.trim() ? ''
+          : translateLocaleText('这项旧任务没有自然语言描述。请补充任务描述，让 AI 生成 Harness 后再开放。'))
         setRuleDescription(existingDescription)
-        setTriggerPhrases(taskDraft.trigger_phrases.join('\n'))
         setMissingRequired([]); setSuggestions(taskDraft.suggestions); setRuleExamples(taskDraft.examples)
         setTitle(taskDraft.title)
         if (copy) setDays(7)
         setIntent(taskDraft.intent)
         setTaskPrompt(taskDraft.task_prompt); setRunner(card.runner)
         setReviewers(Array.isArray(card.reviewers) && card.reviewers.length ? card.reviewers : [card.runner])
+        setOwnerApprovalRequired(card.owner_approval_required !== false)
         setParameters(taskDraft.parameters)
         setConversationKind(card.conversation_kind); setGroupId(card.conversation_id || '')
         setSenderScope(card.sender_scope); setSenderIds((card.sender_ids || []).join(', '))
@@ -929,7 +1056,6 @@ window.__ModuleLoader__.load({
       const applyRuleDraft = (draft) => {
         setTitle(draft.title)
         setIntent(draft.intent)
-        setTriggerPhrases(draft.trigger_phrases.join('\n'))
         setTaskPrompt(draft.task_prompt)
         setParameters(draft.parameters)
         setMissingRequired(draft.missing_required || [])
@@ -942,19 +1068,24 @@ window.__ModuleLoader__.load({
           setRecognitionMessage('先描述这项任务何时触发、要做什么以及涉及哪些资料。')
           return
         }
+        cancelRecognitionRequest()
         const requestNumber = ++recognitionRequestRef.current
+        const controller = new AbortController()
+        let timedOut = false
+        recognitionControllerRef.current = controller
+        const timeout = setTimeout(() => { timedOut = true; controller.abort() }, 190_000)
         setRecognitionBusy(true); setMessage(''); setRecognitionMessage('AI 正在分析必需范围、可选条件和执行方式…')
         try {
           const response = await fetch('/api/ant-teams/delegation/recognize', {
             method: 'POST', headers: { 'content-type': 'application/json' },
             body: JSON.stringify({ description: requestedDescription }),
+            signal: controller.signal,
           })
           const result = await readLocalJsonResponse(response)
           if (!response.ok) throw new Error(result.message || '规则识别失败。')
           const candidate = {
             title: typeof result.title === 'string' ? result.title : '',
             intent: typeof result.intent === 'string' ? result.intent : '',
-            trigger_phrases: Array.isArray(result.trigger_phrases) ? result.trigger_phrases : [],
             task_prompt: typeof result.task_prompt === 'string' ? result.task_prompt : '',
             missing_required: Array.isArray(result.missing_required) ? result.missing_required : [],
             suggestions: Array.isArray(result.suggestions) ? result.suggestions : [],
@@ -987,8 +1118,8 @@ window.__ModuleLoader__.load({
             }
           }
           if (requestNumber !== recognitionRequestRef.current || requestedDescription !== ruleDescription.trim()) return
-          if (!candidate.title || !candidate.intent || !candidate.task_prompt || !candidate.trigger_phrases.length) {
-            throw new Error('AI 返回的任务理解或触发开头不完整。请补充描述后重试。')
+          if (!candidate.title || !candidate.intent || !candidate.task_prompt) {
+            throw new Error('AI 返回的任务理解不完整。请补充描述后重试。')
           }
           const previous = recognizedBaselineRef.current
           applyRuleDraft(candidate)
@@ -998,8 +1129,11 @@ window.__ModuleLoader__.load({
             ? 'AI 已更新任务理解。请复核必需信息、可选建议和运行方式；任务仍未开放。'
             : 'AI 已生成待复核的任务 Harness。检查摘要和范围后再开放。')
         } catch (error) {
-          if (requestNumber === recognitionRequestRef.current) setRecognitionMessage(error.message)
+          if (requestNumber === recognitionRequestRef.current) setRecognitionMessage(timedOut
+            ? translateLocaleText('AI 分析等待超时，请检查团队模型后重试。') : error.message)
         } finally {
+          clearTimeout(timeout)
+          if (recognitionControllerRef.current === controller) recognitionControllerRef.current = null
           if (requestNumber === recognitionRequestRef.current) setRecognitionBusy(false)
         }
       }
@@ -1033,17 +1167,33 @@ window.__ModuleLoader__.load({
       }
       const requestOwnerApprovalBinding = async () => {
         if (!selectedBot || !selectedEnrollmentBound) return
-        setBusy(true); setOwnerChallengeCode('')
+        const requestedBot = selectedBot
+        setBusy(true); clearOwnerChallenge()
         try {
           const response = await fetch('/api/ant-teams/delegation/owner-challenge', {
             method: 'POST', headers: { 'content-type': 'application/json' },
-            body: JSON.stringify({ bot_id: selectedBot.bot_id, bot_fingerprint: selectedBot.fingerprint }),
+            body: JSON.stringify({ bot_id: requestedBot.bot_id, bot_fingerprint: requestedBot.fingerprint }),
           })
           const result = await readLocalJsonResponse(response)
+          if (botIdRef.current !== requestedBot.bot_id) {
+            await fetch(`/api/ant-teams/delegation/owner-challenge?bot_fingerprint=${encodeURIComponent(requestedBot.fingerprint)}`,
+              { method: 'DELETE', cache: 'no-store' }).catch(() => null)
+            return
+          }
           if (!response.ok || typeof result.code !== 'string') throw new Error(result.message || '审批私聊绑定码获取失败。')
+          // The server owns challenge validity. Use a response-relative local display window so clock skew
+          // cannot make a valid server challenge disappear before the owner can use it.
+          const expiresAt = Date.now() + 5 * 60_000
+          const ownerChallenge = { fingerprint: requestedBot.fingerprint, ownerWasBound: ownerApprovalBound, expiresAt }
+          ownerChallengeMetaRef.current = ownerChallenge
           setOwnerChallengeCode(result.code)
-          setMessage(`请在 5 分钟内私聊此机器人，发送“绑定审批身份 ${result.code}”。绑定成功后，它才能把未配置任务的审批请求发给你。`)
-        } catch (error) { setMessage(error.message) }
+          ownerChallengeTimerRef.current = setTimeout(() => {
+            if (ownerChallengeMetaRef.current !== ownerChallenge) return
+            clearOwnerChallenge()
+            setMessage(translateLocaleText('绑定码已过期，请重新生成。'))
+          }, Math.max(0, expiresAt - Date.now()))
+          setMessage('绑定码已生成；请按“私聊入口”中的提示完成绑定。')
+        } catch (error) { if (botIdRef.current === requestedBot.bot_id) setMessage(error.message) }
         finally { setBusy(false) }
       }
       const saveGroupChat = async (enabled, targetGroupId) => {
@@ -1140,6 +1290,15 @@ window.__ModuleLoader__.load({
         ...collaborationGridStyle, gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 420px), 1fr))',
       }
       const collaborationCardStyle = { ...settingsPanelStyle, padding: 12, gap: 10 }
+      const capabilityStepStyle = { display: 'grid', gap: 12, borderTop: '1px solid var(--dsw-alias-border-l2)', paddingTop: 14 }
+      const capabilityStepHeading = (number, title, description) => h('div', { style: {
+        display: 'flex', gap: 10, alignItems: 'flex-start',
+      } },
+      h('span', { style: { display: 'grid', placeItems: 'center', width: 26, height: 26, flex: '0 0 auto',
+        borderRadius: '50%', backgroundColor: 'var(--dsw-alias-state-business-tertiary)',
+        color: 'var(--dsw-alias-state-business-primary)', fontWeight: 700 } }, number),
+      h('div', { style: { display: 'grid', gap: 3 } },
+        h('strong', null, title), h('p', { style: mutedTextStyle }, description)))
       const setupStepper = h('section', { 'aria-label': '首次设置引导', style: { display: 'grid', gap: 6 } },
         h('p', { style: mutedTextStyle }, '首次设置可按顺序完成；你也可以直接切换页面。普通聊天不需要先开放任务。'),
         h('ol', { 'aria-label': '设置步骤', style: { display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 150px), 1fr))',
@@ -1172,7 +1331,26 @@ window.__ModuleLoader__.load({
             disabled: busy || !selectedBot || !selectedEnrollmentBound || enrollmentLoadError || !dmChatSettingAvailable,
             onChange: (event) => void saveDmChat(event.target.checked), 'aria-label': '允许机器人私聊' }),
           h('strong', null, '允许私聊普通聊天'), h('span', { style: mutedTextStyle }, dmChatStatus)),
-        h('p', { style: mutedTextStyle }, dmChatDescription))
+        h('p', { style: mutedTextStyle }, dmChatDescription),
+        selectedEnrollmentBound && botConnected ? h('section', { role: 'group', 'aria-label': '主人审批私聊', style: {
+          display: 'grid', gap: 9, padding: 12, border: '1px solid var(--dsw-alias-state-business-tertiary)',
+          borderRadius: 10, backgroundColor: 'var(--dsw-alias-state-business-tertiary)',
+        } },
+        h('div', { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'center', gap: 8 } },
+          h('strong', null, '主人审批私聊'),
+          h('span', { style: { ...mutedTextStyle, padding: '3px 8px', borderRadius: 999,
+            backgroundColor: 'var(--dsw-alias-bg-layer-1)' } }, ownerApprovalBound ? '已绑定' : '未绑定')),
+        h('p', { style: mutedTextStyle }, ownerApprovalBound
+          ? '没有匹配任务卡的明确任务会先发给你逐次审批；批准前不会启动执行器。'
+          : '绑定一次后，没有匹配任务卡的明确任务会先发给你审批。发送验证码后，点击“刷新状态”确认绑定。'),
+        h('div', { style: { display: 'flex', gap: 8, alignItems: 'center', flexWrap: 'wrap' } },
+          h('button', { type: 'button', disabled: busy,
+            onClick: () => void requestOwnerApprovalBinding(), style: secondaryButtonStyle },
+          ownerApprovalBound ? '重新绑定审批私聊' : '生成绑定码'),
+          ownerChallengeCode ? h('span', { style: mutedTextStyle }, '有效期 5 分钟') : null),
+        ownerChallengeCode ? h('div', { role: 'status', style: { ...feedbackNoticeStyle, position: 'static' } },
+          translateLocaleText('请在 5 分钟内私聊此机器人发送完整指令：“绑定审批身份 {code}”。如果这台 DSH 未重启，也可直接发送 12 位验证码 {code}。',
+            { code: ownerChallengeCode })) : null) : null)
       const createCard = async (event) => {
         event.preventDefault()
         setDraftNotice('')
@@ -1193,11 +1371,6 @@ window.__ModuleLoader__.load({
           || bytes(intent.trim()) > 1000 || bytes(taskPrompt.trim()) > 4000) {
           reject('任务描述或识别摘要过长，请缩短描述并重新识别。'); return
         }
-        const triggerLines = triggerPhrases.split('\n').map((item) => item.normalize('NFKC').trim()).filter(Boolean)
-        if (!triggerLines.length || triggerLines.length > 8 || triggerLines.some((item) => bytes(item) > 120)
-          || new Set(triggerLines.map((item) => item.toLowerCase())).size !== triggerLines.length) {
-          reject('任务没有明确、唯一的触发开头；请在描述中写清楚消息以什么短语开头，再重新分析。'); return
-        }
         const normalized = parameters.map((rule) => ({ name: rule.name.trim(), kind: rule.kind,
           description: rule.description.trim() || null,
           required: rule.required, min: rule.min == null || rule.min === '' ? null : Number(rule.min),
@@ -1261,8 +1434,6 @@ window.__ModuleLoader__.load({
           : translateLocaleText('私聊')
         const resultDestination = translateLocaleText(conversationKind === 'group'
           ? '原群（群内可见）' : '发起任务的私聊')
-        const triggerSummary = translateLocaleText('只有请求以“{triggers}”开头时才会触发此任务',
-          { triggers: triggerLines.join('”或“') })
         const executionDetails = {
           dsh: translateLocaleText('DSH 使用获准的团队模型处理对话内容和 ANT 已核验后提供的资源。'),
           codex: translateLocaleText('Codex 使用这台 DSH 的 Provider Profile 权限；可访问范围由 Codex/DSH 本机配置决定。任务描述不会限制操作系统权限。'),
@@ -1274,10 +1445,10 @@ window.__ModuleLoader__.load({
               details: reviewers.map((item) => executionDetails[item]).join(' ') })
           : executionDetails[reviewers[0]]
         const actionDescription = editingCardId
-          ? translateLocaleText('更新“{title}”后，{requesterSummary}可在{scope}{triggerSummary}。旧待确认请求将失效，已提交任务继续使用提交时的配置。结果{resultDestination}。到期时间保持为 {expiry}。',
-            { title, requesterSummary, scope, triggerSummary, resultDestination, expiry: formatLocaleDate(editingExpiresAt * 1000) })
-          : translateLocaleText('开放“{title}”后，{requesterSummary}可在{scope}{triggerSummary}有效期 {days} 天；结果{resultDestination}。',
-            { title, requesterSummary, scope, triggerSummary, resultDestination, days: formatLocaleNumber(days) })
+          ? translateLocaleText('更新“{title}”后，{requesterSummary}可在{scope}按任务描述中的规则发起请求。旧待确认请求将失效，已提交任务继续使用提交时的配置。结果{resultDestination}。到期时间保持为 {expiry}。',
+            { title, requesterSummary, scope, resultDestination, expiry: formatLocaleDate(editingExpiresAt * 1000) })
+          : translateLocaleText('开放“{title}”后，{requesterSummary}可在{scope}按任务描述中的规则发起请求，有效期 {days} 天；结果{resultDestination}。',
+            { title, requesterSummary, scope, resultDestination, days: formatLocaleNumber(days) })
         if (!confirmLocalized(`${actionDescription}${executionInfo}${translateLocaleText('请确认。')}`)) return
         setBusy(true)
         try {
@@ -1285,9 +1456,10 @@ window.__ModuleLoader__.load({
             method: editingCardId ? 'PUT' : 'POST', headers: { 'content-type': 'application/json' },
             body: JSON.stringify({ ...(editingCardId ? { id: editingCardId } : {}),
               bot_id: selectedBot.bot_id, bot_fingerprint: selectedBot.fingerprint,
-              title, rule_description: ruleDescription.trim(), trigger_phrases: triggerLines,
+              title, rule_description: ruleDescription.trim(), trigger_phrases: [],
               intent, examples: ruleExamples,
-              parameters: normalized, task_prompt: taskPrompt, runner, reviewers, workspace: null,
+              parameters: normalized, task_prompt: taskPrompt, runner, reviewers,
+              owner_approval_required: ownerApprovalRequired, workspace: null,
               sender_scope: senderScope, sender_ids: senderScope === 'allowlist'
                 ? senderIds.split(/[\s,，]+/u).filter(Boolean) : [], conversation_kind: conversationKind,
               ...(conversationKind === 'group' ? { conversation_id: groupId } : {}),
@@ -1295,7 +1467,7 @@ window.__ModuleLoader__.load({
           })
           const result = await readLocalJsonResponse(response)
           if (!response.ok && result.code === 'IM_TASK_RULE_REQUIRED') {
-            throw new Error('当前 ANT 服务端不支持任务触发规则，请升级服务端后再开放任务。')
+            throw new Error('当前 ANT 服务端版本过旧，请升级服务端后再开放任务。')
           }
           if (!response.ok && reviewers.includes('claude-code') && result.code === 'INVALID_REQUEST') {
             throw new Error('当前团队服务端可能尚不支持 Claude Code 审查配置。请管理员升级服务端后刷新重试。')
@@ -1303,24 +1475,35 @@ window.__ModuleLoader__.load({
           if (!response.ok) throw new Error(result.message || '能力保存失败。')
           const savedReviewers = Array.isArray(result.reviewers) && result.reviewers.length
             ? result.reviewers : [result.runner]
-          if ([...savedReviewers].sort().join('\0') !== [...reviewers].sort().join('\0')) {
-            if (!editingCardId && typeof result.id === 'string') {
+          const reviewersDropped = [...savedReviewers].sort().join('\0') !== [...reviewers].sort().join('\0')
+          const approvalDropped = usesExternalExecutor && ownerApprovalRequired && result.owner_approval_required !== true
+          if (reviewersDropped || approvalDropped) {
+            if ((!editingCardId || approvalDropped) && typeof result.id === 'string') {
               const cleanup = await fetch('/api/ant-teams/delegation/cards', {
                 method: 'DELETE', headers: { 'content-type': 'application/json' },
                 body: JSON.stringify({ id: result.id }),
               }).catch(() => null)
               if (!cleanup?.ok) {
                 await load().catch(() => undefined)
-                throw new Error('团队服务端尚不支持多 Agent 审查配置；旧服务端可能已保存单 Agent 授权，请刷新列表并停止它，再升级 ANT 服务端。')
+                throw new Error(reviewersDropped
+                  ? '团队服务端尚不支持多 Agent 审查配置；旧服务端可能已保存单 Agent 授权，请刷新列表并停止它，再升级 ANT 服务端。'
+                  : '团队服务端尚不支持任务卡主人审批；旧服务端可能已保存不经审批的授权，请刷新列表并停止它，再升级 ANT 服务端。')
+              }
+              if (editingCardId) {
+                setEditingCardId(null); setEditingExpiresAt(null)
+                await load().catch(() => undefined)
               }
             }
-            throw new Error('当前团队服务端尚不支持多 Agent 审查配置；请管理员升级 ANT 服务端后重试。')
+            throw new Error(reviewersDropped
+              ? '当前团队服务端尚不支持多 Agent 审查配置；请管理员升级 ANT 服务端后重试。'
+              : '当前团队服务端尚不支持任务卡主人审批；请管理员升级 ANT 服务端后重试。')
           }
           recognizedBaselineRef.current = null
           recognizedDescriptionRef.current = null
+          cancelRecognitionRequest()
           recognitionRequestRef.current += 1
           setRuleDescription(''); setMissingRequired([]); setSuggestions([]); setRuleExamples([])
-          setTitle(''); setIntent(''); setTaskPrompt(''); setParameters([]); setRunner('dsh'); setReviewers(['dsh'])
+          setTitle(''); setIntent(''); setTaskPrompt(''); setParameters([]); setRunner('dsh'); setReviewers(['dsh']); setOwnerApprovalRequired(true)
           setEditingCardId(null); setEditingExpiresAt(null)
           await load()
           setCreateOpen(false)
@@ -1347,29 +1530,28 @@ window.__ModuleLoader__.load({
         setEditingCardId(null); setEditingExpiresAt(null)
         const copiedDescription = card.rule_description || ''
         recognizedDescriptionRef.current = copiedDescription.trim() || null
+        cancelRecognitionRequest()
         recognitionRequestRef.current += 1
-        const hasTriggerRule = Array.isArray(card.trigger_phrases) && card.trigger_phrases.length > 0
-        setDraftNotice(!hasTriggerRule
-          ? '已复制旧规则。它没有明确触发短语；请重新分析并检查生成的触发开头。'
-          : copiedDescription.trim()
-            ? '已复制到新草稿。复制不保留原有效期；请检查任务描述和请求范围。'
-            : '这项旧任务没有自然语言描述。请补充任务描述，让 AI 生成 Harness 后再开放。')
+        setDraftNotice(copiedDescription.trim()
+          ? translateLocaleText('已复制到新草稿。复制不保留原有效期；请检查任务描述和请求范围。')
+          : translateLocaleText('这项旧任务没有自然语言描述。请补充任务描述，让 AI 生成 Harness 后再开放。'))
         const cardBot = bots.find((bot) => bot.fingerprint === card.bot_fingerprint)
+        const copiedBotId = card.bot_id || cardBot?.bot_id || ''
+        selectBot(copiedBotId)
         const titleChars = Array.from(translateLocaleText('复制：{title}', {
           title: card.title || translateLocaleText('未命名能力'),
         }))
         while (new TextEncoder().encode(titleChars.join('')).length > 100) titleChars.pop()
         const taskDraft = taskRuleDraftFromCard(card, titleChars.join(''))
         recognizedBaselineRef.current = taskDraft
-        setBotId(card.bot_id || cardBot?.bot_id || '')
         setRuleDescription(copiedDescription)
-        setTriggerPhrases(taskDraft.trigger_phrases.join('\n'))
         setMissingRequired([]); setSuggestions(taskDraft.suggestions); setRuleExamples(taskDraft.examples)
         setTitle(taskDraft.title)
         setIntent(taskDraft.intent)
         setTaskPrompt(taskDraft.task_prompt)
         setRunner(['dsh', 'codex', 'claude-code'].includes(card.runner) ? card.runner : 'dsh')
         setReviewers(Array.isArray(card.reviewers) && card.reviewers.length ? card.reviewers : [card.runner || 'dsh'])
+        setOwnerApprovalRequired(card.owner_approval_required !== false)
         setParameters(taskDraft.parameters)
         setConversationKind(card.conversation_kind === 'group' ? 'group' : 'dm')
         setGroupId(card.conversation_id || '')
@@ -1399,10 +1581,10 @@ window.__ModuleLoader__.load({
           loading ? '读取中…' : '刷新状态')),
         h('p', { role: 'status', style: mutedTextStyle }, collaborationStatus),
         bots.length ? h('label', null, '我的机器人', h('select', { id: 'ant-bot-selector', value: botId,
-          onChange: (event) => { setBotId(event.target.value); setGroupId('') }, style: inputStyle },
+          onChange: (event) => { selectBot(event.target.value); setGroupId('') }, style: inputStyle },
           h('option', { value: '' }, '请选择机器人'),
           ...bots.map((bot) => h('option', { key: bot.bot_id, value: bot.bot_id,
-          disabled: !bot.available || !bot.connected }, rawLocaleText(bot.name),
+          disabled: !bot.available || !bot.connected }, rawLocaleText(bot.name), ' · ', botPlatformLabel(bot),
           bot.available && bot.connected ? null : '（未连接）')))) : null,
         connectedBots.length === 0 && !loading && !botLoadError ? h('div', { style: { display: 'flex', gap: 8, alignItems: 'center', flexWrap: 'wrap' } },
           h('button', { type: 'button', onClick: openImSettings, style: secondaryButtonStyle }, '打开 DSH-IM 设置'),
@@ -1412,15 +1594,8 @@ window.__ModuleLoader__.load({
         selectedBot && !selectedEnrollmentBound ? h('button', { type: 'button', disabled: busy || !botConnected || enrollmentLoadError,
           onClick: () => void enrollBot(), style: primaryButtonStyle },
           selectedEnrollment ? '绑定原协作配置到这台 DSH' : '启用并绑定到这台 DSH') : null,
-        selectedEnrollmentBound && botConnected ? h('div', { style: { display: 'grid', gap: 6 } },
-          h('p', { style: mutedTextStyle }, ownerApprovalBound
-            ? '审批私聊已绑定；没有匹配任务卡的明确任务会发给你逐次审批。'
-            : '绑定一次你的 IM 私聊身份后，就能审批没有匹配任务卡的明确任务。'),
-          h('button', { type: 'button', disabled: busy,
-            onClick: () => void requestOwnerApprovalBinding(), style: secondaryButtonStyle },
-            ownerApprovalBound ? '重新绑定审批私聊' : '绑定审批私聊'),
-          ownerChallengeCode ? h('p', { role: 'status', style: feedbackNoticeStyle },
-            `请在 5 分钟内私聊此机器人发送：绑定审批身份 ${ownerChallengeCode}`) : null) : null)
+        selectedEnrollmentBound && botConnected ? h('p', { style: mutedTextStyle },
+          '任务能力和设备绑定状态请在此处查看；主人审批身份在“私聊入口”中管理。') : null)
       const groupTaskStatusPanel = selectedEnrollmentBound && botConnected ? h('section', {
         id: 'ant-group-task-status', role: 'region', 'aria-label': '各群聊天与任务状态', tabIndex: -1,
         style: { ...collaborationCardStyle, gap: 10 } },
@@ -1465,7 +1640,8 @@ window.__ModuleLoader__.load({
             h('h3', { style: sectionTitleStyle }, '协作总览'),
             h('p', { style: mutedTextStyle }, '选择机器人并绑定一次主人审批私聊。任务卡可预授权常用任务；其他请求由主人逐次决定。')),
           h('span', { style: { ...mutedTextStyle, padding: '4px 9px', borderRadius: 999,
-            backgroundColor: 'var(--dsw-alias-bg-layer-2)' } }, selectedBot ? selectedBot.name : '尚未选择机器人')),
+            backgroundColor: 'var(--dsw-alias-bg-layer-2)' } }, selectedBot
+            ? h('span', null, rawLocaleText(selectedBot.name), ' · ', botPlatformLabel(selectedBot)) : '尚未选择机器人')),
         loadFailures.length ? h('p', { role: 'status', style: mutedTextStyle },
           `部分协作信息暂时无法读取：${loadFailures.map((path) => loadNames[path]).join('、')}。已读取的信息仍显示，请稍后刷新状态。`) : null,
           h('div', { id: 'ant-collaboration-settings-grid', style: collaborationSettingsGridStyle },
@@ -1501,14 +1677,12 @@ window.__ModuleLoader__.load({
             : translateLocaleText('私聊')
           const requester = translateLocaleText(card.sender_scope === 'allowlist' ? '指定成员可请求'
             : card.conversation_kind === 'group' ? '群成员可请求' : '可私聊者可请求')
-          const missingTriggerPhrase = !Array.isArray(card.trigger_phrases) || card.trigger_phrases.length === 0
           const configuredCardRunners = Array.isArray(card.reviewers) && card.reviewers.length
             ? card.reviewers : [card.runner]
           const blockedExternalExecutor = !configuredCardRunners.every((runner) =>
             executors.some((executor) => executor.id === runner && executor.available))
           const examplesText = Array.isArray(card.examples) ? card.examples.join('、') : ''
           const requesterIds = card.sender_scope === 'allowlist' && Array.isArray(card.sender_ids) ? card.sender_ids.join('、') : ''
-          const triggerSummary = Array.isArray(card.trigger_phrases) ? card.trigger_phrases.join('、') : ''
           const remainingDaysLabel = remainingDays <= 7 ? 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-label-secondary))'
             : 'var(--dsw-alias-label-secondary)'
           return h('article', { key: card.id, style: { ...collaborationCardStyle, padding: 12, gap: 8 } },
@@ -1526,9 +1700,6 @@ window.__ModuleLoader__.load({
             blockedExternalExecutor ? h('p', { role: 'status', style: { ...mutedTextStyle,
               color: 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-label-secondary))' } },
               '此任务暂不可执行：这台 DSH 尚未启用所选的全部执行器。请启用对应的 DSH 子 Agent 提供方后刷新。') : null,
-            missingTriggerPhrase ? h('p', { role: 'status', style: { ...mutedTextStyle,
-              color: 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-label-secondary))' } },
-              '这项旧任务没有明确触发开头，不会自动启动。点击“编辑”，重新分析并复核触发短语。') : null,
             card.rule_description
               ? h('span', { style: { ...mutedTextStyle, overflowWrap: 'anywhere' } }, rawLocaleText(card.rule_description))
               : h('span', { role: 'status', style: { ...mutedTextStyle, color: 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-label-secondary))' } },
@@ -1537,7 +1708,6 @@ window.__ModuleLoader__.load({
               h('summary', { style: { cursor: 'pointer', color: 'var(--dsw-alias-link)', fontSize: 13 } }, '查看规则说明'),
               h('div', { style: { display: 'grid', gap: 4, paddingTop: 6 } },
               card.rule_description ? h('p', { style: { ...mutedTextStyle, overflowWrap: 'anywhere' } }, rawLocaleText(card.rule_description)) : null,
-                triggerSummary ? h('p', { style: { ...mutedTextStyle, overflowWrap: 'anywhere' } }, '触发开头：', rawLocaleText(triggerSummary)) : null,
                 requesterIds ? h('p', { style: { ...mutedTextStyle, overflowWrap: 'anywhere' } }, '允许请求的 IM 用户：', rawLocaleText(requesterIds)) : null,
                 examplesText ? h('p', { style: mutedTextStyle }, '请求示例：', rawLocaleText(examplesText)) : null,
                 Array.isArray(card.parameters) && card.parameters.length
@@ -1568,9 +1738,10 @@ window.__ModuleLoader__.load({
               ? task.repository
                 ? translateLocaleText('{repository} PR #{pr_number} 差异审查', { repository: task.repository, pr_number: task.pr_number })
                 : translateLocaleText('PR #{pr_number} 差异审查', { pr_number: task.pr_number })
-              : '任务'
+              : translateLocaleText('任务')
             const status = translateLocaleText(task.outcome === 'canceled' ? '已取消' : task.outcome === 'failed' ? '未完成' : ({
-              pending: '排队中', running: '处理中', reply_pending: '结果待发送', reply_attempted: '回复状态待核对', done: '已回复',
+              pending: '排队中', claimed: '排队中', running: '处理中', finishing: '结果待核对', completed: '已完成',
+              reply_pending: '结果待发送', reply_attempted: '回复状态待核对', done: '已回复',
             }[task.status] || task.status))
             const createdAt = task.created_at && Number.isFinite(Date.parse(task.created_at))
               ? formatLocaleDate(task.created_at) : ''
@@ -1584,7 +1755,9 @@ window.__ModuleLoader__.load({
                 h('div', { style: mutedTextStyle }, taskStatusLine),
                 task.failure_reason ? h('div', { role: 'alert', style: warningNoticeStyle },
                   h('span', { style: { ...mutedTextStyle, whiteSpace: 'pre-line' } }, translateLocaleText(
-                    '任务未完成：{reason}\n处理建议：按错误提示修复配置或请求内容后，在原群或私聊重新发起。',
+                    task.status === 'finishing'
+                      ? '结果状态待确认：{reason}\n处理建议：恢复原团队连接或审批私聊权限后刷新状态；不要重复发起相同任务。'
+                      : '任务未完成：{reason}\n处理建议：按错误提示修复配置或请求内容后，在原群或私聊重新发起。',
                     { reason: task.failure_reason }))) : null,
                 task.delivery_error ? h('div', { role: 'alert', style: warningNoticeStyle },
                   h('span', { style: { ...mutedTextStyle, whiteSpace: 'pre-line' } }, translateLocaleText(
@@ -1593,7 +1766,8 @@ window.__ModuleLoader__.load({
                 task.status === 'reply_attempted' && !task.delivery_error ? h('div', { role: 'status', style: warningNoticeStyle },
                   h('span', { style: mutedTextStyle }, translateLocaleText(
                     'ANT 尚未确认消息平台是否收到结果。请先检查原群或私聊，再决定是否重新发起。'))) : null),
-              ['card_task', 'legacy_pr_task'].includes(task.kind) && ['pending', 'running'].includes(task.status) ? h('button', { type: 'button', disabled: busy,
+              ['card_task', 'legacy_pr_task', 'owner_approval'].includes(task.kind)
+                && ['pending', 'claimed', 'running'].includes(task.status) ? h('button', { type: 'button', disabled: busy,
                 onClick: () => void cancelTask(task), style: secondaryButtonStyle }, '取消任务') : null)
           })
           : [h('p', { key: 'none', style: mutedTextStyle }, loadFailures.includes('status')
@@ -1601,11 +1775,21 @@ window.__ModuleLoader__.load({
         h('div', { role: 'region', 'aria-label': '任务规则编辑器', style: { display: activeTab === 'collaboration' ? 'grid' : 'none' } },
         h('details', { id: 'ant-new-task', open: createOpen,
           onToggle: (event) => setCreateOpen(event.currentTarget.open),
-          style: { border: '1px solid var(--dsw-alias-border-l2)', borderRadius: 8, padding: 12 } },
-          h('summary', { id: 'ant-new-task-summary', style: { cursor: 'pointer', fontWeight: 600 } }, editingCardId ? '编辑能力配置' : '开放一项能力'),
+          style: { border: '1px solid var(--dsw-alias-border-l2)', borderRadius: 12, padding: 16,
+            backgroundColor: 'var(--dsw-alias-bg-layer-1)' } },
+          h('summary', { id: 'ant-new-task-summary', style: { display: 'flex', justifyContent: 'space-between',
+            alignItems: 'center', gap: 12, flexWrap: 'wrap', cursor: 'pointer', listStylePosition: 'inside' } },
+          h('span', { 'aria-hidden': 'true', style: { color: 'var(--dsw-alias-label-secondary)', flex: '0 0 auto' } },
+            createOpen ? '▾' : '▸'),
+          h('span', { style: { display: 'grid', gap: 3 } },
+            h('strong', null, editingCardId ? '编辑能力配置' : '开放一项能力'),
+            h('span', { style: mutedTextStyle }, '任务卡可预授权常用任务；其他明确任务由主人逐次审批。')),
+          h('span', { style: { ...mutedTextStyle, padding: '3px 8px', borderRadius: 999,
+            backgroundColor: 'var(--dsw-alias-bg-layer-2)' } }, editingCardId
+            ? translateLocaleText('编辑中 · 尚未保存') : translateLocaleText('草稿 · 未开放'))),
         h('div', { style: { display: 'grid', gridTemplateColumns: 'minmax(0, 1fr)',
-          gap: 12, alignItems: 'start', marginTop: 12 } },
-        h('form', { id: 'ant-capability-create-form', onSubmit: createCard, style: { display: 'grid', gap: 9, minWidth: 0 } },
+          gap: 12, alignItems: 'start', marginTop: 14 } },
+        h('form', { id: 'ant-capability-create-form', onSubmit: createCard, style: { display: 'grid', gap: 15, minWidth: 0 } },
           editingCardId ? h('p', { role: 'status', style: mutedTextStyle },
             `保存会生成新的授权版本并停止旧版本；到期时间保持不变：${formatLocaleDate(editingExpiresAt * 1000)}。已提交任务继续使用原配置。`) : null,
           h('p', { style: mutedTextStyle }, selectedBot
@@ -1613,55 +1797,76 @@ window.__ModuleLoader__.load({
             : '请先在上方选择机器人并启用协作。'),
           draftNotice ? h('p', { role: 'status', style: { ...mutedTextStyle,
             color: 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-label-secondary))' } }, draftNotice) : null,
+          !ruleDescription.trim() && draftNotice
+            === translateLocaleText('这项旧任务没有自然语言描述。请补充任务描述，让 AI 生成 Harness 后再开放。') && title
+            ? h('p', { role: 'status', style: mutedTextStyle }, translateLocaleText('已复制任务标题：{title}', {
+              title,
+            })) : null,
           selectedEnrollmentBound ? h('p', { style: mutedTextStyle },
             '机器人及其任务能力只在这台 DSH 设备接收和执行；同一账号的其他设备不会继承本机授权。') : null,
           selectedEnrollment && !selectedEnrollmentBound ? h('p', { style: mutedTextStyle },
             '这是尚未绑定到设备的机器人。请在要继续使用它的电脑重新启用；原协作配置会保留。若旧设备访问曾被撤销，原任务权限不会恢复，需要重新开放。') : null,
           selectedBot && conversationKind === 'group' && !selectedBot.history_available ? h('p', { role: 'status', style: mutedTextStyle },
             '这个机器人当前不能读取平台群历史；群聊只能参考实际送达的消息和本机近期记录。请检查 DSH-IM 权限。') : null,
-          h('div', { style: { display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 320px), 1fr))',
-            gap: 12, alignItems: 'start' } },
-          h('div', { style: { display: 'grid', gap: 9, minWidth: 0 } },
-          h('label', null, '描述规则', h('textarea', { required: true, maxLength: 4000, rows: 4, value: ruleDescription,
-            onChange: (event) => {
-              recognitionRequestRef.current += 1
-              setRuleDescription(event.target.value)
-              setRecognitionBusy(false)
-              setRecognitionMessage(event.target.value.trim() ? '描述已更新，点击“立即分析”检查任务。' : '')
-            },
-            placeholder: '用日常语言说明要完成什么、可处理哪些资料和希望怎样返回。例如：审查来自 https://gitea.example.com/team/shop 的 PR，指出可定位的问题，不修改代码；请求人可指定 Head SHA，未指定时用最新 Head。', style: inputStyle })),
-          h('p', { style: mutedTextStyle }, 'AI 不会自动分析；点击“立即分析”后才会检查必需范围、缺失信息和可选条件。执行方、请求人、群范围和有效期由下方通用授权控制。'),
-          h('div', { style: { display: 'flex', gap: 10, alignItems: 'center', flexWrap: 'wrap' } },
-            h('button', { type: 'button', disabled: recognitionBusy || busy || !ruleDescription.trim(),
-              onClick: () => void identifyRule(), style: secondaryButtonStyle }, recognitionBusy ? 'AI 正在分析…' : ruleSummaryReady ? '立即重新分析' : '立即分析'),
-            h('span', { style: mutedTextStyle }, '每次点击都会调用当前团队模型并计入用量；只生成建议和待复核草稿，不会开放任务。修改描述后需再次点击。')),
-          recognitionMessage ? h('p', { role: 'status', 'aria-live': 'polite', style: feedbackNoticeStyle }, recognitionMessage) : null),
-          h('section', { role: 'region', 'aria-label': 'AI 任务助手', style: { ...panelStyle, padding: 10, gap: 7, minWidth: 0 } },
+          capabilityStepHeading('1', '描述任务', '写清要完成什么、处理范围和结果形式。'),
+          h('div', { style: { display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 320px), 1.35fr))',
+            gap: 12, alignItems: 'stretch' } },
+          h('label', { style: { display: 'grid', alignContent: 'start', gap: 7, minWidth: 0 } }, '描述规则',
+            h('textarea', { required: true, maxLength: 4000, rows: 5, value: ruleDescription,
+              onChange: (event) => {
+                cancelRecognitionRequest()
+                recognitionRequestRef.current += 1
+                setRuleDescription(event.target.value)
+                setRecognitionBusy(false)
+                setRecognitionMessage(event.target.value.trim() ? '描述已更新，点击“立即分析”检查任务。' : '')
+              },
+              placeholder: '用日常语言说明要完成什么、可处理哪些资料和希望怎样返回。例如：审查来自 https://gitea.example.com/team/shop 的 PR，指出可定位的问题，不修改代码；请求人可指定 Head SHA，未指定时用最新 Head。', style: { ...inputStyle, minHeight: 120, resize: 'vertical' } })),
+          h('section', { role: 'region', 'aria-label': 'AI 任务助手', style: { ...panelStyle, padding: 14,
+            gap: 9, minWidth: 0, border: '1px solid var(--dsw-alias-border-l2)', backgroundColor: 'var(--dsw-alias-bg-layer-2)' } },
             h('div', { style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: 8 } },
-              h('strong', null, ruleSummaryPending ? 'AI 正在检查当前描述' : title || 'AI 任务助手'),
+              h('strong', null, 'AI 任务助手'),
               h('span', { style: mutedTextStyle }, ruleSummaryPending ? '正在分析' : ruleSummaryReady ? '待复核 · 尚未开放'
-                : ruleSummaryDirty ? '描述已更新' : '填写描述后点击分析')),
-            h('p', { style: { ...mutedTextStyle, overflowWrap: 'anywhere' } }, ruleSummaryPending
-              ? 'AI 正在根据当前描述更新任务理解。上一次分析结果暂不用于授权开放。'
-              : ruleSummaryDirty ? '描述已更新。点击“立即分析”生成当前任务理解；旧结果暂不用于授权开放。' : ruleSummaryNarrative),
-            ruleSummaryReady && missingHarnessInputs.length ? h('p', { role: 'status', style: { ...mutedTextStyle,
-              color: 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-label-secondary))' } },
-            `还需要明确：${missingHarnessInputs.join('；')}`) : ruleSummaryReady
-              ? h('p', { role: 'status', style: mutedTextStyle }, 'AI 暂未发现必需信息缺项；请确认任务来源和处理范围符合预期。') : null,
-            ruleSummaryReady && suggestions.length ? h('p', { style: mutedTextStyle }, `可选补充：${suggestions.join('；')}`) : null,
-            ruleSummaryReady && ruleExamples.length ? h('p', { style: mutedTextStyle }, `自然请求示例：${ruleExamples.join('；')}`) : null,
-            h('p', { style: mutedTextStyle }, ruleSummaryReady
-              ? '草稿未开放。检查任务理解、必需范围和建议；有误就改描述，AI 会重新分析。'
-              : ruleSummaryPending ? '分析完成前不能开放任务。'
-                : ruleSummaryDirty ? '点击“立即分析”完成复核后才能开放任务。' : '填写描述后点击“立即分析”生成任务理解；草稿不会自动开放。'))),
-          h('section', { style: { ...panelStyle, padding: 10, gap: 9, display: 'grid',
-            gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 280px), 1fr))' } },
-            h('strong', { style: { gridColumn: '1 / -1' } }, '通用授权'),
-            h('p', { style: { ...mutedTextStyle, gridColumn: '1 / -1' } },
-              '上方描述规则任务要做什么；这里限定谁能请求、在哪里请求、由谁执行和授权多久。'),
+                : ruleSummaryDirty ? '描述已更新' : '待分析')),
+            h('p', { style: mutedTextStyle }, ruleSummaryPending
+              ? 'AI 正在根据当前描述更新任务理解。上一次结果暂不用于授权。'
+              : '分析只生成待复核草稿，不会自动开放能力。修改描述后需重新分析。'),
+            h('div', { style: { display: 'flex', justifyContent: 'flex-end', alignItems: 'center', gap: 10, flexWrap: 'wrap' } },
+              h('span', { style: mutedTextStyle }, '调用团队模型并计入用量'),
+              h('button', { type: 'button', disabled: recognitionBusy || busy || !ruleDescription.trim(),
+                onClick: () => void identifyRule(), style: primaryButtonStyle },
+              recognitionBusy ? 'AI 正在分析…' : ruleSummaryReady ? '立即重新分析' : '立即分析')),
+            recognitionMessage ? h('p', { role: 'status', 'aria-live': 'polite', style: feedbackNoticeStyle }, recognitionMessage) : null)),
+          h('section', { role: 'region', 'aria-label': 'AI 分析结果', style: { display: 'grid', gap: 9, padding: 14,
+            border: '1px solid var(--dsw-alias-border-l2)', borderRadius: 10,
+            backgroundColor: 'var(--dsw-alias-bg-layer-1)', minWidth: 0,
+            height: ruleSummaryReady ? 'min(480px, 55vh)' : undefined,
+            gridTemplateRows: ruleSummaryReady ? 'auto minmax(0, 1fr)' : undefined,
+            overflow: ruleSummaryReady ? 'hidden' : undefined } },
+            h('div', { style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: 8 } },
+              h('strong', null, 'AI 分析结果'),
+              h('span', { style: mutedTextStyle }, ruleSummaryReady ? '草稿 · 未开放' : ruleSummaryPending ? '正在分析' : '等待分析')),
+            ruleSummaryReady ? h('div', { style: { display: 'grid', alignContent: 'start', gap: 8,
+              minHeight: 0, overflowY: 'auto', overscrollBehavior: 'contain', overflowWrap: 'anywhere' } },
+              title ? h('strong', { style: { color: 'var(--dsw-alias-label-primary)' } }, rawLocaleText(title)) : null,
+              h('p', { style: { ...mutedTextStyle, color: 'var(--dsw-alias-label-primary)' } }, ruleSummaryNarrative),
+              missingHarnessInputs.length ? h('p', { role: 'status', style: { ...mutedTextStyle,
+                color: 'var(--dsw-alias-state-warning-primary, var(--dsw-alias-label-secondary))' } },
+              translateLocaleText('待补信息：{items}。一般资料和偏好可留到执行时向请求人追问；PR 来源和仓库仍须先通过资源范围校验。',
+                { items: missingHarnessInputs.join('；') }))
+                : h('p', { role: 'status', style: mutedTextStyle }, translateLocaleText(
+                  'AI 暂未发现运行时待补信息；开放后，执行时如缺少必要资料，机器人仍会向请求人追问。')),
+              suggestions.length ? h('p', { style: mutedTextStyle }, `可选补充：${suggestions.join('；')}`) : null,
+              ruleExamples.length ? h('p', { style: mutedTextStyle }, `自然请求示例：${ruleExamples.join('；')}`) : null,
+              h('p', { style: mutedTextStyle }, translateLocaleText(
+                '待补信息和可选建议仅供复核，不会阻止开放。确定的授权范围与 PR 资源边界仍会单独校验。')))
+              : h('p', { role: 'status', style: mutedTextStyle }, ruleSummaryPending
+                ? '分析完成后，摘要、缺失范围和可选条件会显示在这里。'
+                : '填写任务描述后点击右侧“立即分析”，结果会显示在这里。')),
+          h('section', { style: capabilityStepStyle },
+            capabilityStepHeading('2', '执行方', '选择可用于此任务的执行器，并从已勾选项中设一个默认。'),
+            h('div', { style: { ...panelStyle, padding: 12, gap: 8 } },
+            h('p', { style: mutedTextStyle }, translateLocaleText('普通请求只运行默认执行方；发起人明确要求交叉审查时，会并行运行其他已选执行方。')),
             h('div', { role: 'group', 'aria-label': '执行方', style: { display: 'grid', gap: 7 } },
-              h('strong', null, '执行方 · 可多选'),
-              h('p', { style: mutedTextStyle }, '勾选可用于此任务的执行方，并从已勾选项中设一个默认。普通请求只运行默认项；请求人明确要求交叉审查时并行运行其他已选项。'),
               ...[
                 { id: 'dsh', title: 'DSH', detail: '使用获准的团队模型处理对话内容和 ANT 已核验资源。', available: dshAvailable },
                 { id: 'codex', title: 'Codex', detail: '使用本机 DSH Provider Profile 权限；ANT 不会将文件、Git 和网络权限缩小到单项任务。', available: codexAvailable },
@@ -1685,7 +1890,11 @@ window.__ModuleLoader__.load({
               }),
             ),
             executorUnavailableReason ? h('p', { role: 'status', style: { ...mutedTextStyle, gridColumn: '1 / -1' } },
-              `${executorUnavailableReason} 当前仍可使用 DSH 团队模型。`) : null,
+              `${executorUnavailableReason} 当前仍可使用 DSH 团队模型。`) : null)),
+          h('section', { style: capabilityStepStyle },
+            capabilityStepHeading('3', '请求范围', '限定从哪里请求、哪些人可以请求，以及授权多久。'),
+            h('div', { style: { display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 250px), 1fr))',
+              gap: 12, alignItems: 'start' } },
             h('label', null, '使用场景', h('select', { value: conversationKind,
               onChange: (event) => { setConversationKind(event.target.value); setGroupId('') }, style: inputStyle },
               h('option', { value: 'dm' }, '私聊'), h('option', { value: 'group' }, '指定群聊'))),
@@ -1709,10 +1918,16 @@ window.__ModuleLoader__.load({
               `有效期：${formatLocaleDate(editingExpiresAt * 1000)}（编辑时保持不变）`)
               : h('label', null, '有效期', h('select', { value: days, onChange: (event) => setDays(Number(event.target.value)), style: inputStyle },
                 h('option', { value: 1 }, '1 天'), h('option', { value: 7 }, '7 天'), h('option', { value: 30 }, '30 天'))),
-            (runner === 'codex' || runner === 'claude-code') ? h('p', { style: { ...mutedTextStyle, gridColumn: '1 / -1' } },
-              'Provider Profile 的本机权限由 DSH 管理；ANT 当前不会用 Codex 或 Claude Code 执行协作任务，也不会把 Gitea 凭据交给它们。') : null),
-              !hasPrParameter ? h('p', { style: mutedTextStyle },
-                'Codex 和 Claude Code 即使已在 DSH 注册，目前也不用于任何协作任务。') : null),
+            usesExternalExecutor ? h('p', { style: { ...mutedTextStyle, gridColumn: '1 / -1' } },
+              'Codex 和 Claude Code 沿用本机 DSH Provider Profile 权限；任务授权不会把文件、Git 或网络权限缩小到单项任务。') : null,
+            usesExternalExecutor ? h('label', { style: { gridColumn: '1 / -1' } },
+              h('input', { type: 'checkbox', 'aria-label': '启动前需要主人审批', checked: ownerApprovalRequired,
+                onChange: (event) => setOwnerApprovalRequired(event.target.checked) }),
+              ' ', '启动前需要主人审批') : null,
+            usesExternalExecutor && !ownerApprovalRequired ? h('p', { role: 'note', style: { ...mutedTextStyle, gridColumn: '1 / -1' } },
+              '取消后，模型匹配到这项任务就会直接启动 Codex 或 Claude Code，主人不再逐次确认。') : null)),
+          h('section', { style: capabilityStepStyle },
+            capabilityStepHeading('4', '开放前复核', '确认任务理解、执行方式和请求范围后再开放。'),
         h('aside', { id: 'ant-authorization-review', role: 'region', 'aria-label': '开放前复核', tabIndex: -1,
           style: { ...settingsPanelStyle, padding: 14, gap: 10, alignSelf: 'stretch' } },
           h('div', { style: { display: 'flex', justifyContent: 'space-between', alignItems: 'center', gap: 8 } },
@@ -1750,7 +1965,7 @@ window.__ModuleLoader__.load({
             'aria-describedby': cardBlockReason ? 'ant-capability-block-reason'
               : submissionError ? 'ant-capability-submission-error' : undefined,
             style: { ...primaryButtonStyle, width: '100%' } }, busy ? translateLocaleText('正在处理…')
-              : editingCardId ? '保存能力修改' : '确认并开放能力'))))),
+              : editingCardId ? '保存能力修改' : '确认并开放能力'))))))),
         h('div', { role: 'region', 'aria-label': '本机处理设置', style: { display: activeTab === 'local' ? 'grid' : 'none', gap: 12 } },
         showPrSecuritySettings ? h('section', { style: { ...settingsPanelStyle, padding: 14 } },
           h('strong', null, 'PR 只读凭据（本机）'),
@@ -1810,7 +2025,7 @@ window.__ModuleLoader__.load({
     }
 
     function SkillCenterPage({ remote, onBack, onAll, onSkills, onPlugins, openBundle,
-      includePlugins, query, onQueryChange }) {
+      includePlugins, query, onQueryChange, pluginPageState }) {
       const [skills, setSkills] = useState([])
       const [loading, setLoading] = useState(false)
       const [loadError, setLoadError] = useState(false)
@@ -2159,6 +2374,7 @@ window.__ModuleLoader__.load({
                 style: { color: 'var(--dsw-alias-link)', fontSize: 13, lineHeight: 1.6, padding: '4px 0' } }, '英文原文 ↗'))))) : null,
         includePlugins ? h(PluginCenterPage, { remote, onBack, onAll, onSkills, openBundle,
           embedded: true, query, onQueryChange, externalFilter: filter, externalCategoryFilter: categoryFilter,
+          pluginPageState,
           externalScopeFilter: scopeFilter,
           hasSkillMatches: visible.length + visibleOfficial.length > 0, skillCatalogReady: !loading && !loadError,
           refreshToken }) : null))
@@ -2167,49 +2383,193 @@ window.__ModuleLoader__.load({
     function PluginCenterPage({ remote, onBack, onAll, onSkills, openBundle,
       embedded = false, query, onQueryChange, externalFilter = 'all',
       externalCategoryFilter = 'all', externalScopeFilter = 'all',
-      hasSkillMatches = false, skillCatalogReady = false, refreshToken }) {
+      hasSkillMatches = false, skillCatalogReady = false, refreshToken, pluginPageState }) {
+      const { uncertainInstalls, setUncertainInstalls, uncertainInstallsRef, workingId, setWorkingId,
+        completedId, setCompletedId, message, setMessage, refreshMessage, refreshMessageIsError,
+        setRefreshFeedback, messageVersion, messagePluginId, messagePackageName,
+        messageClearOnResolve, refreshGeneration, refreshRevision, requestPluginRefresh,
+        workingAny } = pluginPageState
       const [plugins, setPlugins] = useState([])
       const [bundles, setBundles] = useState([])
       const [loading, setLoading] = useState(true)
       const [loadError, setLoadError] = useState(false)
-      const [workingId, setWorkingId] = useState('')
-      const [uncertainId, setUncertainId] = useState('')
-      const [completedId, setCompletedId] = useState('')
-      const [message, setMessage] = useState('')
+      const [bundleListReady, setBundleListReady] = useState(false)
       const [filter, setFilter] = useState('all')
       const [categoryFilter, setCategoryFilter] = useState('all')
-      const refreshGeneration = useRef(0)
-      const refresh = async () => {
+      const waitForInstallBeforeDeadline = (manager, requestId) => {
+        let timeoutId
+        const waitPromise = Promise.resolve().then(() => manager.waitForInstall(requestId))
+        const timeoutPromise = new Promise((_, reject) => {
+          timeoutId = setTimeout(() => reject(new Error()), 30_000)
+        })
+        return Promise.race([waitPromise, timeoutPromise])
+          .finally(() => { if (timeoutId !== undefined) clearTimeout(timeoutId) })
+      }
+      const refresh = async (focusPluginId = null) => {
         const generation = ++refreshGeneration.current
+        const uncertaintySnapshot = uncertainInstallsRef.current
+        const messageVersionAtStart = messageVersion.current
         setLoading(true)
+        setBundleListReady(false)
+        let catalogLoaded = false
         try {
           const manager = remote?.pluginManager
           if (typeof manager?.listBundles !== 'function') throw new Error('当前 DSH 未提供插件管理接口。')
-          const [response, listed] = await Promise.all([
-            fetch('/api/ant-teams/plugins', { cache: 'no-store' }), manager.listBundles(),
-          ])
+          const response = await fetch('/api/ant-teams/plugins', { cache: 'no-store' })
           const result = await readLocalJsonResponse(response)
           if (!response.ok) throw new Error(result.message || `读取插件目录失败（${response.status}）。`)
           if (!Array.isArray(result.plugins)) throw new Error('企业插件目录格式无效。')
-          if (!listed.ok) throw new Error(listed.error?.message || '无法读取 DSH 本机插件。')
           if (generation !== refreshGeneration.current) return
           setPlugins(result.plugins)
+          setLoadError(false)
+          catalogLoaded = true
+          const initialListed = await manager.listBundles()
+          if (!initialListed.ok) throw new Error(initialListed.error?.message || '无法读取 DSH 本机插件。')
+          if (generation !== refreshGeneration.current) return
+          setBundles(initialListed.value)
+          setBundleListReady(true)
+          const catalogPackageNames = new Set(result.plugins
+            .map((plugin) => plugin.package_name).filter((name) => typeof name === 'string' && name))
+          const catalogUncertaintySnapshot = Object.fromEntries(Object.entries(uncertaintySnapshot)
+            .filter(([, uncertainInstall]) => catalogPackageNames.has(uncertainInstall.packageName)))
+          const requestIds = [...new Set(Object.values(catalogUncertaintySnapshot)
+            .flatMap((uncertainInstall) => [uncertainInstall.requestId,
+              ...(uncertainInstall.relatedRequestIds || [])])
+            .filter((requestId) => typeof requestId === 'string' && requestId))]
+          if (requestIds.length) {
+            if (typeof manager.waitForInstall !== 'function') {
+              if (generation === refreshGeneration.current) setRefreshFeedback(translateLocaleText(
+                '当前 DSH 无法确认上次安装是否结束；请稍后重新核对，勿重复安装。'), true)
+              return
+            }
+            setRefreshFeedback(translateLocaleText('正在等待 DSH 上一次插件安装请求结束，再读取本机状态。'))
+            for (const requestId of requestIds) {
+              let waitResult
+              try { waitResult = await waitForInstallBeforeDeadline(manager, requestId) }
+              catch {
+                if (generation === refreshGeneration.current) setRefreshFeedback(translateLocaleText(
+                  '无法确认 DSH 上一项插件安装是否已结束；待核对锁保持，请稍后重试。'), true)
+                return
+              }
+              if (!waitResult?.ok) {
+                if (generation === refreshGeneration.current) setRefreshFeedback(translateLocaleText(
+                  '无法确认 DSH 上一项插件安装是否已结束；待核对锁保持，请稍后重试。'), true)
+                return
+              }
+              if (generation !== refreshGeneration.current) return
+            }
+          }
+          if (generation !== refreshGeneration.current) return
+          let listed = initialListed
+          if (requestIds.length) {
+            listed = await manager.listBundles()
+            if (!listed.ok) throw new Error(listed.error?.message || '无法读取 DSH 本机插件。')
+          }
+          if (generation !== refreshGeneration.current) return
+          const canUpdateMessage = messageVersion.current === messageVersionAtStart
+          const currentUncertainties = uncertainInstallsRef.current
+          const currentCatalogUncertainties = Object.fromEntries(Object.entries(currentUncertainties)
+            .filter(([, uncertainInstall]) => catalogPackageNames.has(uncertainInstall.packageName)))
+          const focusPackageName = focusPluginId
+            ? plugins.find((plugin) => plugin.id === focusPluginId)?.package_name : null
+          let nextUncertainties = currentUncertainties
+          const resolvedPluginIds = new Set()
+          for (const [pluginId, uncertainInstall] of Object.entries(catalogUncertaintySnapshot)) {
+            if (currentUncertainties[pluginId] !== uncertainInstall) continue
+            const installed = listed.value.find((bundle) => bundle.name === uncertainInstall.packageName && bundle.installed)
+            const resolved = !installed
+              || (installed.version === uncertainInstall.targetVersion
+                && (!uncertainInstall.expectedSource || installed.source === uncertainInstall.expectedSource))
+              || Boolean(uncertainInstall.previousVersion
+                && installed.version === uncertainInstall.previousVersion
+                && (installed.source === uncertainInstall.previousSource
+                  || installed.source === uncertainInstall.expectedPreviousSource)
+                && installed.enabled === uncertainInstall.previousEnabled)
+              || Boolean(focusPluginId
+                && (pluginId === focusPluginId || uncertainInstall.packageName === focusPackageName)
+                && installed && typeof installed.version === 'string' && installed.version.trim()
+                && installed.version !== uncertainInstall.targetVersion
+                && installed.version !== uncertainInstall.previousVersion)
+            if (!resolved) continue
+            if (nextUncertainties === currentUncertainties) nextUncertainties = { ...currentUncertainties }
+            delete nextUncertainties[pluginId]
+            resolvedPluginIds.add(pluginId)
+          }
+          if (nextUncertainties !== currentUncertainties) {
+            uncertainInstallsRef.current = nextUncertainties
+            setUncertainInstalls(nextUncertainties)
+          }
+          setPlugins(result.plugins)
           setBundles(listed.value)
           setLoadError(false)
-          setMessage(result.plugins.length ? '' : '团队暂未发布精选插件。')
+          if (canUpdateMessage && messageClearOnResolve.current && messagePluginId.current
+            && (resolvedPluginIds.has(messagePluginId.current)
+              || [...resolvedPluginIds].some((pluginId) => uncertaintySnapshot[pluginId]?.packageName
+                === messagePackageName.current))) setMessage('')
+          const focusedUncertainty = focusPluginId
+            ? catalogUncertaintySnapshot[focusPluginId] || Object.values(catalogUncertaintySnapshot)
+              .find((item) => item.packageName === focusPackageName) : null
+          const focusedUncertaintyId = focusedUncertainty?.id
+          const hasFocusedUncertainty = Boolean(focusedUncertainty
+            && currentUncertainties[focusedUncertaintyId] === focusedUncertainty)
+          const refreshSnapshotIsCurrent = Object.keys(currentCatalogUncertainties).length
+            === Object.keys(catalogUncertaintySnapshot).length
+            && Object.entries(catalogUncertaintySnapshot)
+              .every(([pluginId, uncertainInstall]) => currentCatalogUncertainties[pluginId] === uncertainInstall)
+          const hasUncertainInstalls = Object.values(nextUncertainties)
+            .some((uncertainInstall) => catalogPackageNames.has(uncertainInstall.packageName))
+          if (canUpdateMessage && hasFocusedUncertainty && refreshSnapshotIsCurrent) {
+            if (resolvedPluginIds.has(focusedUncertaintyId)) {
+              setRefreshFeedback(hasUncertainInstalls
+                ? translateLocaleText('已重新读取本机列表，但安装状态仍无法确认；请在 DSH 插件管理核对后再操作。')
+                : translateLocaleText('本机状态已确认；可以再次检查或按目录版本操作。'))
+            } else {
+              setRefreshFeedback(translateLocaleText('已重新读取本机列表，但安装状态仍无法确认；请在 DSH 插件管理核对后再操作。'))
+            }
+          } else if (canUpdateMessage && !focusPluginId && refreshSnapshotIsCurrent) {
+            setRefreshFeedback(hasUncertainInstalls
+              ? translateLocaleText('已重新读取本机列表，但安装状态仍无法确认；请在 DSH 插件管理核对后再操作。')
+              : result.plugins.length ? '' : '团队暂未发布精选插件。')
+          }
         } catch (error) {
           if (generation !== refreshGeneration.current) return
-          setPlugins([])
-          setBundles([])
-          setLoadError(true)
-          setMessage(error instanceof Error ? error.message : '无法读取企业精选插件。')
+          setBundleListReady(false)
+          const errorMessage = error instanceof Error ? error.message : '无法读取企业精选插件。'
+          if (!catalogLoaded) {
+            setPlugins([])
+            setBundles([])
+            setLoadError(true)
+          }
+          setRefreshFeedback(errorMessage, true)
         } finally { if (generation === refreshGeneration.current) setLoading(false) }
       }
-      useEffect(() => { void refresh() }, [refreshToken])
+      useEffect(() => { void refresh() }, [refreshToken, refreshRevision])
+      const uncertainInstallFor = (plugin) => uncertainInstalls[plugin.id]
+        || Object.values(uncertainInstallsRef.current).find((item) => item.packageName === plugin.package_name)
+      const markInstallUncertain = (plugin, previous = null, expectedPreviousSource = null,
+        requestId = null, relatedRequestIds = []) => {
+        const uncertainInstall = {
+          id: plugin.id,
+          packageName: plugin.package_name,
+          targetVersion: plugin.version,
+          requestId,
+          relatedRequestIds: [...new Set(relatedRequestIds.filter((value) => typeof value === 'string' && value))],
+          expectedSource: approvedPluginArtifactUrl(plugin),
+          previousVersion: previous?.version || null,
+          previousSource: previous?.source,
+          expectedPreviousSource,
+          previousEnabled: previous ? previous.enabled !== false : null,
+        }
+        const next = { ...uncertainInstallsRef.current, [plugin.id]: uncertainInstall }
+        uncertainInstallsRef.current = next
+        setUncertainInstalls(next)
+      }
       const install = async (plugin) => {
         const artifactUrl = approvedPluginArtifactUrl(plugin)
         const installSpec = pluginInstallSpec(plugin)
-        if (!installSpec || workingId || uncertainId === plugin.id || completedId === plugin.id) return
+        const uncertainInstall = uncertainInstallFor(plugin)
+        if (!installSpec || workingId || pluginRuntimeState.workingId
+          || uncertainInstall || completedId === plugin.id) return
         const manager = remote?.pluginManager
         if (typeof manager?.installBundle !== 'function') {
           setMessage('当前 DSH 未提供插件安装接口，请联系管理员。')
@@ -2229,8 +2589,15 @@ window.__ModuleLoader__.load({
           '在这台 DSH {action}团队审核的 {plugin_title} {version}？{source_notice}{update_notice} 插件将在本机运行，完成后需要完全重启 DSH。',
           { action: translateLocaleText(action), plugin_title: plugin.title, version: plugin.version, source_notice: sourceNotice, update_notice: updateNotice })
         if (!confirmLocalized(installConfirmation)) return
+        const operationScopeRevision = pluginRuntimeState.scopeRevision
+        const isOperationScopeCurrent = () => operationScopeRevision === pluginRuntimeState.scopeRevision
+        const setInstallMessage = (value, staleScopeValue = '本机此前启动的插件操作已结束；请查看当前插件目录和本机状态。') => {
+          setMessage(isOperationScopeCurrent() ? value : staleScopeValue,
+            plugin.id, plugin.package_name, Boolean(uncertainInstallFor(plugin)))
+        }
         setWorkingId(plugin.id)
-        setMessage(translateLocaleText('正在安装 {plugin_title}，请不要退出 DSH…', { plugin_title: plugin.title }))
+        setInstallMessage(translateLocaleText('正在安装 {plugin_title}，请不要退出 DSH…', { plugin_title: plugin.title }),
+          '本机有一项插件操作仍在完成；结束前不能启动其他插件安装。')
         try {
           const response = await fetch('/api/ant-teams/plugins', { cache: 'no-store' })
           const catalog = await readLocalJsonResponse(response)
@@ -2241,6 +2608,9 @@ window.__ModuleLoader__.load({
             throw new Error('插件审核信息已变化，请刷新目录后重试。')
           }
           const requestId = crypto.randomUUID()
+          let relatedRequestIds = []
+          const markCurrentInstallUncertain = (previous = null, expectedPreviousSource = null) =>
+            markInstallUncertain(plugin, previous, expectedPreviousSource, requestId, relatedRequestIds)
           const requestReference = requestId.slice(0, 8).toUpperCase()
           const previousSourceIsRegistry = Boolean(local && (!local.source
             || local.source === plugin.package_name || local.source.startsWith(`${plugin.package_name}@`)))
@@ -2280,17 +2650,26 @@ window.__ModuleLoader__.load({
             if (installed !== null || !previousInstallSpec) return 'unknown'
             if (previousSourceIsRegistry && !previousRegistry) return 'unknown'
             const restoreRequestId = crypto.randomUUID()
-            try {
-              const restoreOptions = {
-                enabled: local.enabled !== false, requestId: restoreRequestId,
-                saveExact: true,
-              }
-              if (previousSourceIsRegistry && previousRegistry) restoreOptions.registry = previousRegistry
-              await manager.installBundle(previousInstallSpec, restoreOptions)
-              if (typeof manager.waitForInstall === 'function') {
-                await manager.waitForInstall(restoreRequestId)
-              }
-            } catch {}
+            const restoreOptions = {
+              enabled: local.enabled !== false, requestId: restoreRequestId,
+              saveExact: true,
+            }
+            if (previousSourceIsRegistry && previousRegistry) restoreOptions.registry = previousRegistry
+            try { await manager.installBundle(previousInstallSpec, restoreOptions) } catch {}
+            if (typeof manager.waitForInstall !== 'function') {
+              relatedRequestIds = [restoreRequestId]
+              return 'unknown'
+            }
+            let restoreWaitResult
+            try { restoreWaitResult = await manager.waitForInstall(restoreRequestId) }
+            catch {
+              relatedRequestIds = [restoreRequestId]
+              return 'unknown'
+            }
+            if (!restoreWaitResult?.ok) {
+              relatedRequestIds = [restoreRequestId]
+              return 'unknown'
+            }
             installed = await currentBundle()
             return isPreviousVersion(installed) && installed.enabled === (local.enabled !== false)
               ? 'restored' : 'unknown'
@@ -2313,7 +2692,7 @@ window.__ModuleLoader__.load({
             } catch (error) { installFailure = error; result = null }
           } else {
             if (replacingInstalled && typeof manager.removeBundle !== 'function') {
-              setMessage('当前 DSH 不支持通过 ANT 安全替换已安装插件。请在 DSH 插件管理查看状态，或联系管理员。')
+              setInstallMessage('当前 DSH 不支持通过 ANT 安全替换已安装插件。请在 DSH 插件管理查看状态，或联系管理员。')
               return
             }
             if (replacingInstalled) {
@@ -2324,7 +2703,7 @@ window.__ModuleLoader__.load({
               if (!removed?.ok || !['applied', 'restart-required'].includes(removed.value?.application)) {
                 const diagnostic = safeInstallDiagnostic(removed?.value?.error || removed?.error || removeFailure)
                 const recovery = await restorePreviousVersion()
-                if (recovery !== 'restored') setUncertainId(plugin.id)
+                if (recovery !== 'restored') markCurrentInstallUncertain(local, expectedPreviousSource)
                 const recoveryNotice = recovery === 'restored'
                   ? translateLocaleText('旧版本号和原启用状态已恢复。{source_notice}', {
                     source_notice: previousSourceIsRegistry
@@ -2332,7 +2711,7 @@ window.__ModuleLoader__.load({
                   : recovery === 'target' ? translateLocaleText(
                     '本机列表显示审核版本 {version} 已安装，请核对后再操作。', { version: plugin.version })
                     : translateLocaleText('无法确认旧版本及启用状态，请先在 DSH 插件管理核对。')
-                setMessage(`无法开始更新 ${plugin.title}：DSH 未能确认旧版本移除完成。${diagnostic
+                setInstallMessage(`无法开始更新 ${plugin.title}：DSH 未能确认旧版本移除完成。${diagnostic
                   ? `DSH 诊断：${diagnostic}。` : ''}${recoveryNotice}`)
                 return
               }
@@ -2353,7 +2732,6 @@ window.__ModuleLoader__.load({
               } catch (error) { waitFailure = error }
             }
             if (!recovered) {
-              setUncertainId(plugin.id)
               let restoreNotice = ''
               if (removedForUpdate) {
                 const restoreState = await restorePreviousVersion()
@@ -2366,23 +2744,27 @@ window.__ModuleLoader__.load({
                     '本机列表显示审核版本 {version} 已安装，但操作结果未确认。', { version: plugin.version })}`
                     : ` ${translateLocaleText('DSH 未能确认旧版本恢复，请先在插件列表核对。')}`
               }
+              markCurrentInstallUncertain(local, expectedPreviousSource)
               const details = [installFailure && `installBundle：${safeInstallDiagnostic(installFailure)}`,
                 waitFailure && `waitForInstall：${safeInstallDiagnostic(waitFailure)}`].filter(Boolean)
-              setMessage(`暂时无法确认 ${plugin.title} 的安装结果（请求编号 ${requestReference}）。${details.length
-                ? `本机诊断：${details.join('；')}。` : ''}${restoreNotice}请先在 DSH 插件列表核对，勿重复点击安装。`)
+              setInstallMessage(`暂时无法确认 ${plugin.title} 的安装结果（请求编号 ${requestReference}）。${details.length
+                ? `本机诊断：${details.join('；')}。` : ''}${restoreNotice}请先在 DSH 插件列表核对，勿重复点击安装。`,
+              '本机插件安装结果待核对，请先确认本机状态，勿重复安装。')
               return
             }
             result = recovered
           }
           const outcome = result.value
           if (!outcome || typeof outcome !== 'object') {
-            setUncertainId(plugin.id)
-            setMessage(`DSH 未返回 ${plugin.title} 的安装结果。请先在插件列表核对，勿重复点击安装。`)
+            markCurrentInstallUncertain(local, expectedPreviousSource)
+            setInstallMessage(`DSH 未返回 ${plugin.title} 的安装结果。请先在插件列表核对，勿重复点击安装。`,
+              '本机插件安装结果待核对，请先确认本机状态，勿重复安装。')
             return
           }
           if (outcome.application === 'failed' || outcome.application === 'cancelled') {
             if (outcome.error?.code === 'ambiguous-install' && local?.version === plugin.version) {
-              setMessage(`DSH 无法确定 ${plugin.title} 本次安装的唯一结果，未确认完成。请先在 DSH 插件列表核对；若已经正常使用同版则无需重复安装，仍需核对来源时请联系管理员。`)
+              setInstallMessage(`DSH 无法确定 ${plugin.title} 本次安装的唯一结果，未确认完成。请先在 DSH 插件列表核对；若已经正常使用同版则无需重复安装，仍需核对来源时请联系管理员。`,
+                '本机插件安装结果待核对，请先确认本机状态，勿重复安装。')
               return
             }
             const diagnostic = safeInstallDiagnostic({ name: outcome.error?.name,
@@ -2390,11 +2772,14 @@ window.__ModuleLoader__.load({
               message: outcome.error?.diagnostic || outcome.error?.message || outcome.packageResult?.output })
             let restoreNotice = ''
             if (updateRestore) {
-              restoreNotice = ['applied', 'restart-required'].includes(updateRestore.application)
+              const restoreConfirmed = ['applied', 'restart-required'].includes(updateRestore.application)
+              if (!restoreConfirmed) markCurrentInstallUncertain(local, expectedPreviousSource)
+              restoreNotice = restoreConfirmed
                 ? ` ${translateLocaleText('DSH 已恢复旧版本 {version}。', { version: local.version })}`
                 : ` ${translateLocaleText('DSH 未能确认旧版本恢复，请先在插件列表核对。')}`
             } else if (removedForUpdate) {
               const restoreState = await restorePreviousVersion()
+              if (restoreState !== 'restored') markCurrentInstallUncertain(local, expectedPreviousSource)
               restoreNotice = restoreState === 'restored'
                 ? translateLocaleText('DSH 已恢复旧版本号 {version}。{source_notice}', {
                   version: local.version,
@@ -2404,14 +2789,15 @@ window.__ModuleLoader__.load({
                   '本机列表显示审核版本 {version} 已安装，但结果未确认。', { version: plugin.version })}`
                   : ` ${translateLocaleText('DSH 未能确认旧版本恢复，请先在插件列表核对。')}`
             }
-            setMessage(`${plugin.title} 安装未完成（请求编号 ${requestReference}）。${diagnostic
+            setInstallMessage(`${plugin.title} 安装未完成（请求编号 ${requestReference}）。${diagnostic
               ? `DSH 诊断：${diagnostic}。` : 'DSH 没有返回失败诊断。'}${restoreNotice}请在 DSH 插件管理查看状态或联系管理员。`)
             return
           }
           if (outcome.bundle !== plugin.package_name
             || !['restart-required', 'applied'].includes(outcome.application)) {
-            setUncertainId(plugin.id)
-            setMessage(`DSH 未确认 ${plugin.title} 已安装。请先在插件列表核对，勿重复点击安装。`)
+            markCurrentInstallUncertain(local, expectedPreviousSource)
+            setInstallMessage(`DSH 未确认 ${plugin.title} 已安装。请先在插件列表核对，勿重复点击安装。`,
+              '本机插件安装结果待核对，请先确认本机状态，勿重复安装。')
             return
           }
           let observed = null
@@ -2422,19 +2808,24 @@ window.__ModuleLoader__.load({
             }
           } catch {}
           if ((outcome.version && outcome.version !== plugin.version) || observed?.version !== plugin.version) {
-            setUncertainId(plugin.id)
-            setMessage(`DSH 未确认 ${plugin.title} 的审核版本已安装。请先在插件列表核对，勿重复点击安装。`)
+            markCurrentInstallUncertain(local, expectedPreviousSource)
+            setInstallMessage(`DSH 未确认 ${plugin.title} 的审核版本已安装。请先在插件列表核对，勿重复点击安装。`,
+              '本机插件安装结果待核对，请先确认本机状态，勿重复安装。')
             return
           }
-          await refresh()
           if (artifactUrl && plugin.artifact_sha256) {
             try { localStorage.setItem(`${PLUGIN_INSTALL_RECORD_PREFIX}${plugin.id}`, plugin.artifact_sha256) } catch {}
           }
-          setCompletedId(plugin.id)
-          setMessage(`${plugin.title} 已安装。请完全退出并重新启动 DSH 后使用。`)
+          if (isOperationScopeCurrent()) setCompletedId(plugin.id)
+          setInstallMessage(`${plugin.title} 已安装。请完全退出并重新启动 DSH 后使用。`,
+            '本机插件已安装或更新；请完全退出并重新启动 DSH 后使用。')
+          requestPluginRefresh()
         } catch (error) {
-          setMessage(error instanceof Error ? error.message : '插件安装未完成，请稍后重试。')
-        } finally { setWorkingId('') }
+          setInstallMessage(error instanceof Error ? error.message : '插件安装未完成，请稍后重试。',
+            '本机此前启动的插件操作已结束；请刷新本机状态后再操作。')
+        } finally {
+          setWorkingId('')
+        }
       }
       const activeFilter = embedded ? externalFilter : filter
       const activeCategoryFilter = embedded ? externalCategoryFilter : categoryFilter
@@ -2493,13 +2884,18 @@ window.__ModuleLoader__.load({
           h('div', null,
             h('h1', { style: { margin: 0, fontSize: 28 } }, '企业精选插件'),
             h('p', { style: { ...mutedTextStyle, marginTop: 6 } }, '这里展示团队审核过的插件版本及本机状态。DSH 0.2.0-rc.2 不会自动更新 Bundle；插件自身的更新器可能绕过此目录安装其他版本。')),
-          h('button', { type: 'button', disabled: loading, onClick: () => void refresh(), style: secondaryButtonStyle }, loading ? '读取中…' : '刷新目录')),
+          h('button', { type: 'button', disabled: loading, onClick: () => {
+            if (!workingAny) setMessage('')
+            void refresh()
+          }, style: secondaryButtonStyle }, loading ? '读取中…' : '刷新目录')),
         !loading && !plugins.length && !loadError ? embedded
           ? h('p', { role: 'status', style: mutedTextStyle }, '团队暂未发布精选插件。')
           : h('section', { role: 'status', style: panelStyle },
               h('h2', { style: { margin: 0, fontSize: 18 } }, '团队暂未发布精选插件'),
               h('p', { style: mutedTextStyle }, '需要某个插件？请联系企业管理员，说明用途或提供插件地址。审核发布后会显示在这里。')) : null,
-        !loading && loadError ? h('p', { role: 'alert', style: feedbackNoticeStyle }, message) : null,
+        refreshMessage && (refreshMessageIsError || plugins.length)
+          ? h('p', { role: refreshMessageIsError ? 'alert' : 'status', style: feedbackNoticeStyle }, refreshMessage) : null,
+        message ? h('p', { role: 'status', style: feedbackNoticeStyle }, message) : null,
         plugins.length && !embedded ? h(ExtensionRequestNotice) : null,
         plugins.length && !embedded ? h('div', { style: panelStyle },
           h('input', { type: 'search', value: query, onChange: (event) => onQueryChange(event.target.value), placeholder: '搜索插件名称或用途', 'aria-label': '搜索企业精选插件', style: inputStyle }),
@@ -2512,7 +2908,6 @@ window.__ModuleLoader__.load({
                 'aria-label': '筛选插件用途类别', style: { ...inputStyle, width: 'auto', minHeight: 34 } },
               h('option', { value: 'all' }, '全部用途'),
               ...extensionCategories.map(([category, label]) => h('option', { key: category, value: category }, label)))))) : null,
-        plugins.length && message ? h('p', { role: 'status', style: feedbackNoticeStyle }, message) : null,
         visible.length ? h('div', { style: { display: 'grid', gridTemplateColumns: 'repeat(auto-fit, minmax(min(100%, 420px), 1fr))', gap: 16 } },
           ...visible.map((plugin) => {
             const local = bundles.find((bundle) => bundle.name === plugin.package_name && bundle.installed)
@@ -2521,11 +2916,13 @@ window.__ModuleLoader__.load({
             const artifactUrl = approvedPluginArtifactUrl(plugin)
             const installSpec = pluginInstallSpec(plugin)
             const localAhead = local?.version && newerVersion(local.version, plugin.version)
+            const uncertainInstall = uncertainInstallFor(plugin)
             const sourceKnown = typeof local?.source === 'string'
             const verifiedLocal = sameVersion && artifactUrl && sourceKnown && local.source === artifactUrl
             const recordedInstall = sameVersion && !sourceKnown && previouslyInstalledReviewedPlugin(plugin)
             const status = security ? '已废弃（安全风险）'
-              : plugin.status === 'deprecated' ? local?.version ? `已废弃 · 本机 ${local.version}` : '已废弃' : local?.error ? '加载异常' : localAhead
+              : !bundleListReady ? loading ? '读取中…' : translateLocaleText('本机状态无法读取')
+                : plugin.status === 'deprecated' ? local?.version ? `已废弃 · 本机 ${local.version}` : '已废弃' : local?.error ? '加载异常' : localAhead
                 ? '本机版本高于团队目录版本' : sameVersion
                 ? verifiedLocal ? local.enabled ? '本机已装（团队来源，已启用）' : '本机已装（团队来源，未启用）'
                   : sourceKnown ? '本机同版，来源不同' : recordedInstall
@@ -2562,14 +2959,18 @@ window.__ModuleLoader__.load({
               h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: 8 } },
                 installSpec && (!local || (local.version && local.version !== plugin.version && (!localAhead || artifactUrl))
                   || (artifactUrl && sameVersion && !verifiedLocal))
-                  ? h('button', { type: 'button', disabled: Boolean(workingId) || uncertainId === plugin.id || completedId === plugin.id,
+                  ? h('button', { type: 'button', disabled: loading || !bundleListReady
+                    || workingAny || Boolean(uncertainInstall) || completedId === plugin.id,
                     onClick: () => void install(plugin), style: primaryButtonStyle },
-                  workingId === plugin.id ? '安装中…' : uncertainId === plugin.id ? '先核对安装结果'
+                  workingId === plugin.id ? '安装中…' : uncertainInstall ? '先核对安装结果'
                     : completedId === plugin.id ? '重启 DSH 后生效'
                     : local ? sameVersion || localAhead ? '按团队审核包重新安装' : '更新到审核版本' : '安装到这台 DSH') : null,
+                uncertainInstall ? h('button', { type: 'button', disabled: loading || workingAny,
+                  onClick: () => { if (!workingAny) setMessage(''); void refresh(plugin.id) },
+                  style: secondaryButtonStyle }, translateLocaleText('重新核对本机状态')) : null,
                 plugin.status === 'published' && !local && !installSpec
                   ? h('p', { style: mutedTextStyle }, '如需安装，请联系企业管理员安排。') : null,
-                local || uncertainId === plugin.id ? h('button', { type: 'button', onClick: () => openBundle(plugin.package_name), style: secondaryButtonStyle }, '打开 DSH 插件管理') : null,
+                local || uncertainInstall ? h('button', { type: 'button', onClick: () => openBundle(plugin.package_name), style: secondaryButtonStyle }, '打开 DSH 插件管理') : null,
                 local && !sameVersion && plugin.status === 'published' && !installSpec
                   ? h('p', { style: mutedTextStyle }, '本机版本与团队审核版本不同；请联系企业管理员核对。') : null))
           })) : !loading && plugins.length && (!embedded || !hasSkillMatches)
@@ -3342,6 +3743,7 @@ window.__ModuleLoader__.load({
           setMessage(`未清除本机凭证和模型设置：${error instanceof Error ? error.message : '请稍后重试。'}`)
           return
         }
+        setPluginRuntimeServiceScope('')
         try {
           await clearLocalConnection()
           setMessage('此设备的 ANT 凭证已撤销，ANT 模型设置已清除。团队服务地址已保留。')
@@ -3764,7 +4166,8 @@ window.__ModuleLoader__.load({
         dshCompatibilityCard,
         showReleaseNotes ? h('section', { style: { ...infoNoticeStyle, padding: 12 } },
         h('strong', { style: { fontSize: 14, lineHeight: 1.4 } }, '本版更新'),
-        h('p', { style: mutedTextStyle }, bundleRelease.release_notes)) : null,
+        h('div', { 'aria-label': '更新说明内容', style: { display: 'grid', gap: 8 } },
+          ...releaseNoteBlocks(bundleRelease.release_notes))) : null,
         ['incompatible', 'unknown'].includes(serviceCompatibility.state) ? h('p', { role: 'status', style: {
           ...feedbackNoticeStyle,
           color: serviceCompatibility.state === 'incompatible' ? 'var(--dsw-alias-state-error-primary)'
@@ -3807,14 +4210,86 @@ window.__ModuleLoader__.load({
       useLocaleRevision()
       const [tab, setTab] = useState('all')
       const [query, setQuery] = useState('')
+      const serviceUrl = loadServiceUrl()
+      const [, forcePluginRuntimeRender] = useState(0)
+      useEffect(() => {
+        const refresh = () => forcePluginRuntimeRender((revision) => revision + 1)
+        pluginRuntimeState.listeners.add(refresh)
+        setPluginRuntimeServiceScope(serviceUrl)
+        return () => pluginRuntimeState.listeners.delete(refresh)
+      }, [serviceUrl])
+      const runtimeScopeMatches = pluginRuntimeState.serviceUrl === serviceUrl
+      const uncertainInstalls = pluginRuntimeState.uncertainInstallsRef.current
+      const uncertainInstallsRef = pluginRuntimeState.uncertainInstallsRef
+      const workingAny = Boolean(pluginRuntimeState.workingId)
+      const workingId = runtimeScopeMatches && pluginRuntimeState.workingServiceUrl === serviceUrl
+        ? pluginRuntimeState.workingId : ''
+      const completedId = runtimeScopeMatches ? pluginRuntimeState.completedId : ''
+      const message = runtimeScopeMatches ? pluginRuntimeState.message : ''
+      const refreshMessage = runtimeScopeMatches ? pluginRuntimeState.refreshMessage : ''
+      const refreshMessageIsError = runtimeScopeMatches && pluginRuntimeState.refreshMessageIsError
+      const setUncertainInstalls = (next) => {
+        const value = typeof next === 'function' ? next(pluginRuntimeState.uncertainInstallsRef.current) : next
+        pluginRuntimeState.uncertainInstalls.clear()
+        for (const [pluginId, uncertainInstall] of Object.entries(value)) {
+          pluginRuntimeState.uncertainInstalls.set(pluginId, uncertainInstall)
+        }
+        publishPluginRuntimeState()
+      }
+      const setWorkingId = (value) => {
+        pluginRuntimeState.workingId = value
+        pluginRuntimeState.workingServiceUrl = value ? serviceUrl : ''
+        if (!value && pluginRuntimeState.message === pluginScopeBusyMessage) {
+          pluginRuntimeState.message = ''
+          pluginRuntimeState.messagePluginId.current = ''
+          pluginRuntimeState.messagePackageName.current = ''
+          pluginRuntimeState.messageClearOnResolve.current = false
+          pluginRuntimeState.messageVersion.current += 1
+        }
+        publishPluginRuntimeState()
+      }
+      const setCompletedId = (value) => {
+        pluginRuntimeState.completedId = value
+        publishPluginRuntimeState()
+      }
+      const setMessage = (value, pluginId = '', packageName = '', clearOnResolve = false) => {
+        pluginRuntimeState.message = value
+        pluginRuntimeState.messagePluginId.current = value ? pluginId : ''
+        pluginRuntimeState.messagePackageName.current = value ? packageName : ''
+        pluginRuntimeState.messageClearOnResolve.current = Boolean(value) && clearOnResolve
+        pluginRuntimeState.messageVersion.current += 1
+        pluginRuntimeState.refreshMessage = ''
+        pluginRuntimeState.refreshMessageIsError = false
+        publishPluginRuntimeState()
+      }
+      const setRefreshFeedback = (value, isError = false) => {
+        pluginRuntimeState.refreshMessage = value
+        pluginRuntimeState.refreshMessageIsError = isError
+        publishPluginRuntimeState()
+      }
+      const requestPluginRefresh = () => {
+        pluginRuntimeState.refreshRevision += 1
+        publishPluginRuntimeState()
+      }
+      const pluginPageState = { uncertainInstalls, setUncertainInstalls, uncertainInstallsRef,
+        workingId, setWorkingId, completedId, setCompletedId, message, setMessage,
+        refreshMessage, refreshMessageIsError, setRefreshFeedback, requestPluginRefresh,
+        workingAny, serviceUrl,
+        messageVersion: pluginRuntimeState.messageVersion,
+        messagePluginId: pluginRuntimeState.messagePluginId,
+        messagePackageName: pluginRuntimeState.messagePackageName,
+        messageClearOnResolve: pluginRuntimeState.messageClearOnResolve,
+        refreshGeneration: pluginRuntimeState.refreshGeneration,
+        refreshRevision: pluginRuntimeState.refreshRevision }
       const navigation = {
         onAll: () => setTab('all'), onSkills: () => setTab('skills'),
         onPlugins: () => setTab('plugins'),
       }
       return tab === 'plugins'
-        ? h(PluginCenterPage, { remote, onBack, openBundle, query, onQueryChange: setQuery, ...navigation })
+        ? h(PluginCenterPage, { remote, onBack, openBundle, query, onQueryChange: setQuery,
+          pluginPageState, ...navigation })
         : h(SkillCenterPage, { remote, onBack, openBundle, query, onQueryChange: setQuery,
-          includePlugins: tab === 'all', ...navigation })
+          pluginPageState, includePlugins: tab === 'all', ...navigation })
     }
 
     function brandingCacheKey() {