@modesto_ma/dsh-channels 0.3.0 → 0.5.0-beta.1

package/lib/client.js

@@ -28,11 +28,9 @@ window.__ModuleLoader__.load({
 		const RECONNECT_ROUTE = "/dsh-channels/reconnect";
 		/** 模型/推理档位/预设选择器的宿主目录（provider → model → effort 级联刷新）。 */
 		const CATALOG_ROUTE = "/dsh-channels/catalog";
-		/** 手动执行一次过期目录清理（POST，无请求体）。 */
-		const CLEANUP_ROUTE = "/dsh-channels/cleanup";
 		/** 群白名单增删（POST/DELETE，body `{ chatId, name? }` / `{ chatId }`）。 */
 		const ACCESS_GROUPS_ROUTE = "/dsh-channels/access/groups";
-		/** 用户白名单增删（POST/DELETE，body `{ openId, name? }` / `{ openId }`）。 */
+		/** 用户白名单增删（POST/DELETE，body `{ userId, name? }` / `{ userId }`）。 */
 		const ACCESS_USERS_ROUTE = "/dsh-channels/access/users";
 		/** 结算一条待处理授权申请（POST，body `{ token, decision }`）。 */
 		const ACCESS_REQUESTS_ROUTE = "/dsh-channels/access/requests";
@@ -78,7 +76,11 @@ window.__ModuleLoader__.load({
 		/** Which editable field groups each tab renders (the tabs own one or two). */
 		const TAB_FIELD_GROUPS = {
 			connection: [],
-			sessions: ["behavior", "content"],
+			sessions: [
+				"behavior",
+				"content",
+				"tools"
+			],
 			model: ["model"],
 			workspace: ["workspace"],
 			access: ["access"],
@@ -89,6 +91,7 @@ window.__ModuleLoader__.load({
 			workspace: "工作区与文件",
 			behavior: "行为",
 			content: "内容与附件",
+			tools: "模型工具",
 			model: "模型与推理",
 			streaming: "流式卡片与日志",
 			access: "准入与授权"
@@ -111,6 +114,21 @@ window.__ModuleLoader__.load({
 			statusSummaryConnecting: "正在连接飞书长连接…",
 			statusSummaryError: "最近一次连接飞书失败，请检查凭据与网络后重试。",
 			lastError: "最近一次连接失败",
+			scopeCheckTitle: "权限自检",
+			scopeCheckOk: "已开通插件需要的全部飞书权限。",
+			scopeCheckMissing: "以下飞书权限未开通，开通后需在开发者后台发布新版本：",
+			scopeCheckOpenAll: "在开发者后台开通全部缺失权限",
+			scopeCheckOpenOne: "去开通",
+			scopeCheckOptional: "可选",
+			scopeCheckRequired: "必需",
+			scopeCheckError: "无法读取应用的权限授予状态：",
+			slashCommandSyncTitle: "斜杠指令面板",
+			slashCommandSyncOk: "插件命令已同步到飞书原生斜杠指令面板，在聊天框输入 / 即可选择（飞书客户端约 5 分钟后刷新）。",
+			slashCommandSyncTotal: "命令数",
+			slashCommandSyncCreated: "本次新增",
+			slashCommandSyncUpdated: "本次更新",
+			slashCommandSyncRemoved: "本次删除",
+			slashCommandSyncError: "同步飞书原生斜杠指令面板失败（不影响直接输入命令）：",
 			missingConfig: "缺少配置",
 			statusHintUnconfigured: "配置完成后插件会自动连接；也可以稍后在本页手动连接。",
 			connectionInfo: "连接信息",
@@ -156,9 +174,9 @@ window.__ModuleLoader__.load({
 			appSecretPlaceholder: "输入 App Secret",
 			credentialsPendingHint: "填写后点「保存凭据」；两项齐全时插件会自动连接飞书。",
 			connectionTabHelp: "连接状态与飞书应用凭据。凭据不完整时不会连接飞书。",
-			sessionsTabHelp: "私聊、群聊触发方式与入站内容；「需重连」项在下次连接时读取。",
+			sessionsTabHelp: "私聊、群聊触发方式与入站内容：附件存储/预取、模型工具开关与读取预算；「需重连」项在下次连接时读取。",
 			modelTabHelp: "飞书会话使用的模型服务商、模型、推理档位与 Agent 预设；下拉选项来自宿主机实时目录，保存后对新会话生效。",
-			workspaceTabHelp: "每个用户一个工作区（模型/工具产生文件的落点），每个话题在其中拥有独立工作目录；只影响之后新建的话题。",
+			workspaceTabHelp: "每个用户一个工作区（模型/工具产生文件的落点），每个话题在其中拥有独立工作目录；只影响之后新建的话题。入站附件默认存于 DSH 原生附件库，不占用话题目录。插件不会自动删除工作区或话题目录；过期目录可手动删除，话题下次对话时会重建空目录。",
 			accessTabHelp: "准入采用 fail-closed：管理员不受白名单限制，非管理员私聊会被拒绝，群聊需要「群已授权 + 用户在白名单」两层同时命中。",
 			advancedTabHelp: "流式刷新等低层参数、Web 覆盖文件与只读信息。",
 			save: "保存更改",
@@ -204,35 +222,11 @@ window.__ModuleLoader__.load({
 			advancedCard: "只读与高级信息",
 			advancedHelp: "这些值来自 profile 配置，不能在面板里编辑。",
 			readOnlyCard: "部署级参数",
-			cleanupCard: "目录清理",
-			cleanupCardHelp: "删除超过保留期且不再活跃的飞书话题目录（以及旧版本按话题建立的工作区目录）；用户工作区本身、DSH 会话日志都不会删除。删除不可恢复：相关旧话题会失效并提示已过期。",
-			cleanupRetention: "保留期",
-			cleanupAutoLabel: "自动清理",
-			cleanupCandidates: "可清理目录",
-			cleanupWorkspaces: "插件工作区",
-			cleanupCandidateBytes: "预计释放空间",
-			cleanupRetentionOff: "关闭（不删除）",
-			cleanupAutoOn: "已开启（启动时 + 每天一次）",
-			cleanupAutoOff: "已关闭（仅手动执行）",
-			cleanupAutoInactive: "未执行（保留期为关闭）",
-			cleanupNow: "立即清理",
-			cleanupRunning: "清理中…",
-			cleanupConfirm: "确定清理过期目录吗？该操作不可恢复，会删除这些目录内的全部文件（包括 attachments/ 附件）。",
-			cleanupConfirmHint: "删除前会再次确认；保留期为「关闭」或没有过期目录时按钮不可用。",
-			cleanupDisabledOff: "保留策略为「关闭」：请先在上方「过期目录保留期」中选择保留天数。",
-			cleanupDisabledEmpty: "没有超过保留期的过期目录。",
-			cleanupPreviewFailed: "无法读取清理预览",
-			cleanupDone: "清理完成",
-			cleanupFailed: "清理失败",
-			cleanupDeleted: "已删除工作区",
-			cleanupDeletedDirs: "话题目录",
-			cleanupRetired: "已清理话题路由",
-			cleanupFreed: "释放空间",
-			cleanupFailures: "以下目录未能删除：",
 			accessCard: "访问与授权",
-			accessCardHelp: "准入采用 fail-closed：管理员不受白名单限制（私聊、任意群聊都可直接对话）；非管理员私聊会被拒绝，群聊需要「群已授权 + 用户在白名单」两层同时命中。管理员与准入模式在上方「准入与授权」中编辑；私聊机器人发送 /userid 获取自己的 open_id。",
+			accessCardHelp: "准入采用 fail-closed：管理员不受白名单限制（私聊、任意群聊都可直接对话）；非管理员私聊会被拒绝，群聊需要「群已授权 + 用户在白名单」两层同时命中。管理员与准入模式在上方「准入与授权」中编辑；私聊机器人发送 /userid 获取自己的 user_id。",
 			accessModeOpenWarning: "当前准入模式为开放（open）：应用可用范围内的任何人都能开启对话。该模式不安全，仅建议调试时使用。",
-			accessAdminMissingWarning: "当前准入=guarded 但未配置管理员，所有对话都会被拒绝。请在上方「准入与授权」填写管理员 open_id。",
+			accessAdminMissingWarning: "当前准入=guarded 但未配置管理员，也无法自动使用应用所有者，所有对话都会被拒绝。请在上方「准入与授权」填写管理员 user_id（私聊机器人发送 /userid 获取；私聊模式关闭时 /userid 不可用，可在飞书管理后台的成员详情里查看用户 ID）。",
+			accessAdminOwnerNotice: "未配置管理员，已自动使用应用所有者作为管理员：",
 			accessGroupsTitle: "已授权群",
 			accessGroupsEmpty: "尚未授权任何群。机器人被拉进群后，管理员会收到带 chat_id 的群信息卡；也可在群内发送 /groupid 获取。",
 			accessUsersTitle: "已授权用户",
@@ -241,7 +235,7 @@ window.__ModuleLoader__.load({
 			accessRequestsEmpty: "没有待处理的授权申请。",
 			accessGroupChatIdPlaceholder: "群 chat_id（oc_…）",
 			accessGroupNamePlaceholder: "群名（可选）",
-			accessUserOpenIdPlaceholder: "用户 open_id（ou_…）",
+			accessUserIdPlaceholder: "用户 user_id",
 			accessUserNamePlaceholder: "昵称（可选）",
 			accessAddGroup: "添加群",
 			accessAddUser: "添加用户",
@@ -263,7 +257,7 @@ window.__ModuleLoader__.load({
 			accessRequestAllowed: "已授权",
 			accessRequestDenied: "已忽略",
 			accessHints: "三种授权入口：群内 /auth 命令、入群与用户授权卡、本面板。撤销立即生效；白名单只约束非管理员（管理员在任何私聊/群聊都直接放行），非管理员需要群和用户两层同时命中。",
-			accessChatIdHint: "chat_id 可从入群群信息卡或群内 /groupid 获取；open_id 可私聊机器人发送 /userid 获取。"
+			accessChatIdHint: "chat_id 可从入群群信息卡或群内 /groupid 获取；user_id 可私聊机器人发送 /userid 获取。"
 		};
 		//#endregion
 		//#region src/client/api.ts
@@ -373,24 +367,6 @@ window.__ModuleLoader__.load({
 			return JSON.parse(text);
 		}
 		/**
-		* Run one workspace cleanup. No request body: the Host derives the candidate
-		* set from the effective retention config. Irreversible, so the caller asks
-		* for confirmation first; partial failures come back inside `result.failures`.
-		*/
-		async function runCleanup() {
-			const response = await request(CLEANUP_ROUTE, { method: "POST" });
-			const text = await response.text();
-			if (!response.ok) try {
-				return JSON.parse(text);
-			} catch {
-				return {
-					ok: false,
-					error: errorFromBody(response.status, text)
-				};
-			}
-			return JSON.parse(text);
-		}
-		/**
 		* Ask the Host to open its native directory chooser (the panel's「选择目录…」
 		* button). The request stays open while the OS dialog does; a cancel comes back
 		* as `{ ok: true, canceled: true }`, not as an error.
@@ -476,16 +452,16 @@ window.__ModuleLoader__.load({
 		async function removeAccessGroup(chatId) {
 			return mutateAccess(ACCESS_GROUPS_ROUTE, "DELETE", { chatId });
 		}
-		/** Authorize one user open_id (global across authorized groups). */
-		async function addAccessUser(openId, name) {
-			return mutateAccess(ACCESS_USERS_ROUTE, "POST", name === void 0 || name === "" ? { openId } : {
-				openId,
+		/** Authorize one user `user_id` (global across authorized groups). */
+		async function addAccessUser(userId, name) {
+			return mutateAccess(ACCESS_USERS_ROUTE, "POST", name === void 0 || name === "" ? { userId } : {
+				userId,
 				name
 			});
 		}
 		/** Revoke one user authorization (takes effect on the next message). */
-		async function removeAccessUser(openId) {
-			return mutateAccess(ACCESS_USERS_ROUTE, "DELETE", { openId });
+		async function removeAccessUser(userId) {
+			return mutateAccess(ACCESS_USERS_ROUTE, "DELETE", { userId });
 		}
 		/** Settle one pending authorization request (same resolver as the Feishu card). */
 		async function resolveAccessRequest(token, decision) {
@@ -601,25 +577,6 @@ window.__ModuleLoader__.load({
 		function messageOf(error) {
 			return error instanceof Error ? error.message : String(error);
 		}
-		/** Human-readable byte size for the cleanup preview/result (base-2 units). */
-		function formatBytes(bytes) {
-			if (!Number.isFinite(bytes) || bytes <= 0) return "0 B";
-			const units = [
-				"B",
-				"KB",
-				"MB",
-				"GB",
-				"TB"
-			];
-			let value = bytes;
-			let unit = 0;
-			while (value >= 1024 && unit < units.length - 1) {
-				value /= 1024;
-				unit += 1;
-			}
-			const digits = unit === 0 || value >= 10 ? 0 : 1;
-			return `${value.toFixed(digits)} ${units[unit] ?? "B"}`;
-		}
 		/** Compact duration for the connection card. */
 		function formatUptime(ms) {
 			if (ms === void 0 || !Number.isFinite(ms)) return PANEL_COPY.unknownValue;
@@ -990,10 +947,6 @@ window.__ModuleLoader__.load({
 				};
 			}
 		}
-		/** Retention label, reusing the Host field options so the copy stays on the Host. */
-		function retentionLabel(panel, cleanup) {
-			return panel.config.fields.find((item) => item.key === "workspaceRetention")?.options?.find((option) => option.value === cleanup.retention)?.label ?? (cleanup.retention === "off" ? PANEL_COPY.cleanupRetentionOff : cleanup.retention);
-		}
 		//#endregion
 		//#region src/client/panel/access-card.tsx
 		/**
@@ -1025,7 +978,7 @@ window.__ModuleLoader__.load({
 			const { access } = panel;
 			const [groupChatId, setGroupChatId] = (0, react.useState)("");
 			const [groupName, setGroupName] = (0, react.useState)("");
-			const [userOpenId, setUserOpenId] = (0, react.useState)("");
+			const [userUserId, setUserUserId] = (0, react.useState)("");
 			const [userName, setUserName] = (0, react.useState)("");
 			const groups = access.groups;
 			const users = access.users;
@@ -1040,9 +993,9 @@ window.__ModuleLoader__.load({
 				}
 			};
 			const submitUser = async () => {
-				if (userOpenId.trim() === "") return;
-				if (await onAddUser(userOpenId, userName)) {
-					setUserOpenId("");
+				if (userUserId.trim() === "") return;
+				if (await onAddUser(userUserId, userName)) {
+					setUserUserId("");
 					setUserName("");
 				}
 			};
@@ -1067,9 +1020,16 @@ window.__ModuleLoader__.load({
 						className: "dsh-channels-cfg__banner",
 						children: PANEL_COPY.accessModeOpenWarning
 					}) : null,
-					access.loaded && access.mode === "guarded" && !access.admin.configured ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+					access.loaded && access.mode === "guarded" && !access.admin.configured ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--error",
-						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: PANEL_COPY.accessAdminMissingWarning })
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: PANEL_COPY.accessAdminMissingWarning }), access.admin.ownerLookupError === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: access.admin.ownerLookupError })]
+					}) : null,
+					access.mode === "guarded" && access.admin.source === "owner" && access.admin.userId !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--ok",
+						children: [PANEL_COPY.accessAdminOwnerNotice, /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsh-channels-cfg__mono",
+							children: access.admin.userId
+						})]
 					}) : null,
 					!access.loaded ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(EmptyState, { text: PANEL_COPY.accessNotLoaded }) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
 						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
@@ -1166,21 +1126,21 @@ window.__ModuleLoader__.load({
 										className: "dsh-channels-cfg__accessRow",
 										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
 											className: "dsh-channels-cfg__accessMain",
-											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: user.name ?? user.openId }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: user.name ?? user.userId }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
 												className: "dsh-channels-cfg__accessMeta",
 												children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 													className: "dsh-channels-cfg__mono",
-													children: user.openId
+													children: user.userId
 												}), ` · ${accessSourceLabel(user.source)} · ${formatAccessDate(user.addedAt)}`]
 											})]
 										}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 											type: "button",
 											className: "dsh-channels-cfg__btn",
 											disabled,
-											onClick: () => onRemoveUser(user.openId),
+											onClick: () => onRemoveUser(user.userId),
 											children: working ? PANEL_COPY.accessWorking : PANEL_COPY.accessRemove
 										})]
-									}, user.openId))
+									}, user.userId))
 								}),
 								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 									className: "dsh-channels-cfg__accessAdd",
@@ -1188,11 +1148,11 @@ window.__ModuleLoader__.load({
 										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 											type: "text",
 											className: "dsh-channels-cfg__input dsh-channels-cfg__accessInput",
-											value: userOpenId,
-											placeholder: PANEL_COPY.accessUserOpenIdPlaceholder,
-											"aria-label": PANEL_COPY.accessUserOpenIdPlaceholder,
+											value: userUserId,
+											placeholder: PANEL_COPY.accessUserIdPlaceholder,
+											"aria-label": PANEL_COPY.accessUserIdPlaceholder,
 											disabled,
-											onChange: (event) => setUserOpenId(event.target.value)
+											onChange: (event) => setUserUserId(event.target.value)
 										}),
 										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 											type: "text",
@@ -1206,7 +1166,7 @@ window.__ModuleLoader__.load({
 										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 											type: "button",
 											className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
-											disabled: disabled || userOpenId.trim() === "",
+											disabled: disabled || userUserId.trim() === "",
 											onClick: () => {
 												submitUser();
 											},
@@ -1297,7 +1257,7 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/client/panel/access-tab.tsx
 		/**
-		* 「访问授权」tab：准入与授权字段表单（管理员 open_id / 准入模式 /
+		* 「访问授权」tab：准入与授权字段表单（管理员 user_id / 准入模式 /
 		* 申请有效期）+ 白名单与待处理申请卡。表单保存走全局 draft，白名单
 		* 增删是独立即时 mutation。
 		*
@@ -1582,6 +1542,7 @@ window.__ModuleLoader__.load({
 		* - error：连接信息卡 + 最近一次连接失败 + 「重试」
 		* - connected：连接信息卡 + 「重启飞书连接」+ 凭据卡
 		* - connecting：禁用按钮显示「连接中…」
+		* - 已连接且权限自检完成：权限自检卡（缺失权限红字 + 开发者后台深链）
 		*
 		* @module dsh-channels/client/panel/connection-tab
 		*/
@@ -1602,6 +1563,8 @@ window.__ModuleLoader__.load({
 						busy,
 						onReconnect
 					}),
+					status.scopeCheck === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ScopeCheckCard, { check: status.scopeCheck }),
+					status.slashCommandSync === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SlashCommandSyncCard, { sync: status.slashCommandSync }),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(CredentialsCard, {
 						panel,
 						credentials
@@ -1792,6 +1755,109 @@ window.__ModuleLoader__.load({
 				]
 			});
 		}
+		/** Post-connect scope self-check: missing scopes in red, each with a console deep link. */
+		function ScopeCheckCard(props) {
+			const { check } = props;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				className: "dsh-channels-cfg__card",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dsh-channels-cfg__cardHead",
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsh-channels-cfg__cardTitle",
+							children: PANEL_COPY.scopeCheckTitle
+						})
+					}),
+					check.state === "ok" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--ok",
+						children: PANEL_COPY.scopeCheckOk
+					}) : null,
+					check.state === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--error",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: PANEL_COPY.scopeCheckError }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsh-channels-cfg__mono",
+							children: check.error
+						})]
+					}) : null,
+					check.state === "missing" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--error",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: PANEL_COPY.scopeCheckMissing }),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+								className: "dsh-channels-cfg__scopeList",
+								children: check.missing.map((item) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", { children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
+										"[",
+										item.level === "required" ? PANEL_COPY.scopeCheckRequired : PANEL_COPY.scopeCheckOptional,
+										"] "
+									] }),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "dsh-channels-cfg__mono",
+										children: item.scopes.join(" / ")
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
+										"：",
+										item.purpose,
+										" "
+									] }),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+										href: item.consoleUrl,
+										target: "_blank",
+										rel: "noreferrer noopener",
+										children: PANEL_COPY.scopeCheckOpenOne
+									})
+								] }, item.scopes.join(",")))
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+								href: check.consoleUrl,
+								target: "_blank",
+								rel: "noreferrer noopener",
+								children: PANEL_COPY.scopeCheckOpenAll
+							})
+						]
+					}) : null
+				]
+			});
+		}
+		/** Post-connect native slash-command panel sync: counts on success, the Feishu reason on failure. */
+		function SlashCommandSyncCard(props) {
+			const { sync } = props;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				className: "dsh-channels-cfg__card",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+					className: "dsh-channels-cfg__cardHead",
+					children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-channels-cfg__cardTitle",
+						children: PANEL_COPY.slashCommandSyncTitle
+					})
+				}), sync.state === "ok" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--ok",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [PANEL_COPY.slashCommandSyncOk, " "] }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
+						PANEL_COPY.slashCommandSyncTotal,
+						" ",
+						sync.total,
+						" · ",
+						PANEL_COPY.slashCommandSyncCreated,
+						" ",
+						sync.created,
+						" · ",
+						PANEL_COPY.slashCommandSyncUpdated,
+						" ",
+						sync.updated,
+						" · ",
+						PANEL_COPY.slashCommandSyncRemoved,
+						" ",
+						sync.removed
+					] })]
+				}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--error",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: PANEL_COPY.slashCommandSyncError }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-channels-cfg__mono",
+						children: sync.error
+					})]
+				})]
+			});
+		}
 		/** Config saved but only applied on the next connect: offer the one-click restart. */
 		function RestartBanner(props) {
 			const { panel, busy, locked, onReconnect } = props;
@@ -1870,135 +1936,14 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
-		//#region src/client/panel/cleanup-card.tsx
-		/**
-		* 目录清理卡：展示清理预览（保留期 / 自动清理 / 候选数量与空间），
-		* 执行前二次确认，结果与部分失败逐条展示。`cleanup.error` 非空时
-		* （例如未连接、无法扫描工作区）按钮天然禁用并显示原因。
-		*
-		* @module dsh-channels/client/panel/cleanup-card
-		*/
-		function CleanupCard(props) {
-			const { panel, cleanup, busy, locked, result, error, onRun } = props;
-			const autoText = cleanup.retention === "off" ? PANEL_COPY.cleanupAutoInactive : cleanup.auto ? PANEL_COPY.cleanupAutoOn : PANEL_COPY.cleanupAutoOff;
-			const blocked = cleanup.error !== void 0 ? `${PANEL_COPY.cleanupPreviewFailed}：${cleanup.error}` : cleanup.retention === "off" ? PANEL_COPY.cleanupDisabledOff : cleanup.candidates === 0 ? PANEL_COPY.cleanupDisabledEmpty : null;
-			const facts = [
-				{
-					label: PANEL_COPY.cleanupRetention,
-					value: retentionLabel(panel, cleanup)
-				},
-				{
-					label: PANEL_COPY.cleanupAutoLabel,
-					value: autoText
-				},
-				{
-					label: PANEL_COPY.cleanupCandidates,
-					value: `${cleanup.candidates} 个`
-				},
-				{
-					label: PANEL_COPY.cleanupWorkspaces,
-					value: `${cleanup.workspaces} 个`
-				},
-				{
-					label: PANEL_COPY.cleanupCandidateBytes,
-					value: formatBytes(cleanup.candidateBytes)
-				}
-			];
-			const running = busy === "cleanup";
-			const failed = result !== null && (!result.ok || error !== null);
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
-				className: "dsh-channels-cfg__card",
-				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__cardHead",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__cardTitle",
-							children: PANEL_COPY.cleanupCard
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__cardMeta",
-							children: retentionLabel(panel, cleanup)
-						})]
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__help",
-						children: PANEL_COPY.cleanupCardHelp
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-						className: "dsh-channels-cfg__facts",
-						children: facts.map((fact) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: "dsh-channels-cfg__fact",
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-								className: "dsh-channels-cfg__factLabel",
-								children: fact.label
-							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-								className: "dsh-channels-cfg__factValue",
-								children: fact.value
-							})]
-						}, fact.label))
-					}),
-					blocked === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__help",
-						children: blocked
-					}),
-					result === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: `dsh-channels-cfg__notice dsh-channels-cfg__notice--${failed ? "error" : "ok"}`,
-						children: [result.ok ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
-							PANEL_COPY.cleanupDone,
-							"：",
-							PANEL_COPY.cleanupDeleted,
-							" ",
-							result.deletedWorkspaces,
-							" 个，",
-							PANEL_COPY.cleanupDeletedDirs,
-							" ",
-							result.deletedSessionDirs,
-							" 个，",
-							PANEL_COPY.cleanupRetired,
-							" ",
-							result.retiredRoutes,
-							" 条，",
-							PANEL_COPY.cleanupFreed,
-							" ",
-							formatBytes(result.freedBytes),
-							"。"
-						] }) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [PANEL_COPY.cleanupFailed, result.error === void 0 ? "" : `：${result.error}`] }), result.failures.length === 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: PANEL_COPY.cleanupFailures }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
-							className: "dsh-channels-cfg__issues",
-							children: result.failures.map((failure, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", {
-								className: "dsh-channels-cfg__mono",
-								children: failure
-							}, `${index}-${failure}`))
-						})] })]
-					}),
-					error === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__fieldError",
-						children: error
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__actions",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-							type: "button",
-							className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--danger",
-							onClick: onRun,
-							disabled: running || busy !== null || locked || blocked !== null,
-							children: running ? PANEL_COPY.cleanupRunning : PANEL_COPY.cleanupNow
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__help",
-							children: PANEL_COPY.cleanupConfirmHint
-						})]
-					})
-				]
-			});
-		}
-		//#endregion
 		//#region src/client/panel/workspace-tab.tsx
 		/**
-		* 「工作区」tab：工作区根目录 / 过期保留策略 / 自动清理字段 + 目录清理卡。
-		* 表单保存栏在字段卡正下方，清理卡（独立动作，不走 draft）在其后。
+		* 「工作区」tab：工作区根目录字段与保存栏。
 		*
 		* @module dsh-channels/client/panel/workspace-tab
 		*/
 		function WorkspaceTab(props) {
-			const { form, cleanup, cleanupResult, cleanupError, onRunCleanup } = props;
+			const { form } = props;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "dsh-channels-cfg__tabBody",
 				children: [
@@ -2010,15 +1955,6 @@ window.__ModuleLoader__.load({
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SaveBar, {
 						form,
 						tab: "workspace"
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(CleanupCard, {
-						panel: form.panel,
-						cleanup,
-						busy: form.busy,
-						locked: form.locked,
-						result: cleanupResult,
-						error: cleanupError,
-						onRun: onRunCleanup
 					})
 				]
 			});
@@ -2029,8 +1965,8 @@ window.__ModuleLoader__.load({
 		* 设置 →「飞书渠道」页面：数据加载、5 秒状态轮询、全局 draft 与顶部状态头 /
 		* tab 导航的外壳。
 		*
-		* 所有 Host 交互（panel / status / catalog / config / credentials / cleanup /
-		* access / pick-directory）都集中在这里；tab 组件只接收渲染所需的数据与
+		* 所有 Host 交互（panel / status / catalog / config / credentials / access /
+		* pick-directory）都集中在这里；tab 组件只接收渲染所需的数据与
 		* 回调。页面不 import 任何 DSH 客户端包，只依赖 react 与 `settings.section`
 		* 槽位。
 		*
@@ -2049,8 +1985,6 @@ window.__ModuleLoader__.load({
 			const [appSecretInput, setAppSecretInput] = (0, react.useState)("");
 			const [catalog, setCatalog] = (0, react.useState)(null);
 			const [catalogBusy, setCatalogBusy] = (0, react.useState)(false);
-			const [cleanupResult, setCleanupResult] = (0, react.useState)(null);
-			const [cleanupError, setCleanupError] = (0, react.useState)(null);
 			const [accessNotice, setAccessNotice] = (0, react.useState)(null);
 			const [accessError, setAccessError] = (0, react.useState)(null);
 			const catalogTicket = (0, react.useRef)(0);
@@ -2065,8 +1999,6 @@ window.__ModuleLoader__.load({
 			const loadPanel = (0, react.useCallback)(async () => {
 				setLoad({ phase: "loading" });
 				setNotice(null);
-				setCleanupResult(null);
-				setCleanupError(null);
 				setAccessNotice(null);
 				setAccessError(null);
 				try {
@@ -2227,8 +2159,8 @@ window.__ModuleLoader__.load({
 				}
 			}, []);
 			/**
-			* Manual refresh: reload the whole panel payload so access lists, the cleanup
-			* preview and `restartPendingKeys` catch up with the Host. The dirty draft is
+			* Manual refresh: reload the whole panel payload so access lists and
+			* `restartPendingKeys` catch up with the Host. The dirty draft is
 			* deliberately preserved — refreshing never discards user input.
 			*/
 			const onRefresh = (0, react.useCallback)(async () => {
@@ -2277,8 +2209,6 @@ window.__ModuleLoader__.load({
 						panel: result.panel
 					});
 					setStatus(result.panel.status);
-					setCleanupResult(null);
-					setCleanupError(null);
 					setDraft((previous) => {
 						const next = { ...previous };
 						for (const key of Object.keys(values)) delete next[key];
@@ -2365,8 +2295,6 @@ window.__ModuleLoader__.load({
 					});
 					setStatus(result.panel.status);
 					setDraft({});
-					setCleanupResult(null);
-					setCleanupError(null);
 					setNotice({
 						kind: "ok",
 						text: PANEL_COPY.cleared
@@ -2421,37 +2349,6 @@ window.__ModuleLoader__.load({
 					setBusy(null);
 				}
 			}, [refreshStatus, running]);
-			/**
-			* Delete stale workspaces after an explicit confirmation. The Host refreshes
-			* the panel in the same response, so the preview counts update immediately;
-			* partial failures stay visible in the card instead of being swallowed.
-			*/
-			const onRunCleanup = (0, react.useCallback)(async () => {
-				if (panel === null) return;
-				const { cleanup } = panel;
-				if (!(typeof window.confirm === "function" ? window.confirm(`${PANEL_COPY.cleanupConfirm}\n${PANEL_COPY.cleanupCandidates}：${cleanup.candidates} · ${PANEL_COPY.cleanupCandidateBytes}：${formatBytes(cleanup.candidateBytes)}`) : true)) return;
-				setBusy("cleanup");
-				setNotice(null);
-				setCleanupResult(null);
-				setCleanupError(null);
-				try {
-					const response = await runCleanup();
-					if (!response.ok) {
-						setCleanupError(response.error);
-						return;
-					}
-					setLoad({
-						phase: "ready",
-						panel: response.panel
-					});
-					setStatus(response.panel.status);
-					setCleanupResult(response.result);
-				} catch (error) {
-					setCleanupError(messageOf(error));
-				} finally {
-					setBusy(null);
-				}
-			}, [panel]);
 			/** Replace the embedded access snapshot after a whitelist mutation. */
 			const applyAccess = (0, react.useCallback)((access) => {
 				setLoad((previous) => previous.phase === "ready" ? {
@@ -2500,12 +2397,12 @@ window.__ModuleLoader__.load({
 					setBusy(null);
 				}
 			}, [applyAccess]);
-			const onAddAccessUser = (0, react.useCallback)(async (openId, name) => {
+			const onAddAccessUser = (0, react.useCallback)(async (userId, name) => {
 				setBusy("access");
 				setAccessError(null);
 				setAccessNotice(null);
 				try {
-					const result = await addAccessUser(openId, name);
+					const result = await addAccessUser(userId, name);
 					if (!result.ok) {
 						setAccessError(result.error);
 						return false;
@@ -2520,12 +2417,12 @@ window.__ModuleLoader__.load({
 					setBusy(null);
 				}
 			}, [applyAccess]);
-			const onRemoveAccessUser = (0, react.useCallback)(async (openId) => {
+			const onRemoveAccessUser = (0, react.useCallback)(async (userId) => {
 				setBusy("access");
 				setAccessError(null);
 				setAccessNotice(null);
 				try {
-					const result = await removeAccessUser(openId);
+					const result = await removeAccessUser(userId);
 					if (!result.ok) {
 						setAccessError(result.error);
 						return;
@@ -2762,15 +2659,7 @@ window.__ModuleLoader__.load({
 								form,
 								catalogBusy
 							}) : null,
-							activeTab === "workspace" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(WorkspaceTab, {
-								form,
-								cleanup: form.panel.cleanup,
-								cleanupResult,
-								cleanupError,
-								onRunCleanup: () => {
-									onRunCleanup();
-								}
-							}) : null,
+							activeTab === "workspace" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(WorkspaceTab, { form }) : null,
 							activeTab === "access" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccessTab, {
 								form,
 								accessNotice,
@@ -2780,8 +2669,8 @@ window.__ModuleLoader__.load({
 									onRemoveAccessGroup(chatId);
 								},
 								onAddUser: onAddAccessUser,
-								onRemoveUser: (openId) => {
-									onRemoveAccessUser(openId);
+								onRemoveUser: (userId) => {
+									onRemoveAccessUser(userId);
 								},
 								onResolveRequest: (token, decision) => {
 									onResolveAccessRequest(token, decision);
@@ -2970,6 +2859,8 @@ select.dsh-channels-cfg__input{appearance:auto;cursor:pointer}
 .dsh-channels-cfg__notice{display:flex;flex-direction:column;gap:2px;padding:8px 10px;border-radius:8px;font-size:12px;line-height:18px;overflow-wrap:anywhere}
 .dsh-channels-cfg__notice--ok{color:var(--dsw-alias-state-business-primary,#0a7d33);background:color-mix(in srgb,currentColor 8%,transparent)}
 .dsh-channels-cfg__notice--error{color:var(--dsw-alias-state-danger-primary,#c62828);background:color-mix(in srgb,currentColor 8%,transparent)}
+.dsh-channels-cfg__notice a{color:inherit;text-decoration:underline}
+.dsh-channels-cfg__scopeList{margin:2px 0;padding-left:18px;display:flex;flex-direction:column;gap:2px}
 .dsh-channels-cfg__banner{display:flex;align-items:center;gap:8px;flex-wrap:wrap;padding:8px 10px;border-radius:8px;border:1px dashed var(--dsw-alias-state-warning-primary,#a15c00);color:var(--dsw-alias-state-warning-primary,#a15c00);font-size:12px;line-height:18px}
 .dsh-channels-cfg__footer{display:flex;align-items:center;gap:8px;flex-wrap:wrap;padding-top:2px}
 .dsh-channels-cfg__spacer{flex:1}