@modesto_ma/dsh-channels 0.4.0 → 0.5.0-beta.2

package/lib/client.js

@@ -28,11 +28,9 @@ window.__ModuleLoader__.load({
 		const RECONNECT_ROUTE = "/dsh-channels/reconnect";
 		/** 模型/推理档位/预设选择器的宿主目录（provider → model → effort 级联刷新）。 */
 		const CATALOG_ROUTE = "/dsh-channels/catalog";
-		/** 手动执行一次过期目录清理（POST，无请求体）。 */
-		const CLEANUP_ROUTE = "/dsh-channels/cleanup";
 		/** 群白名单增删（POST/DELETE，body `{ chatId, name? }` / `{ chatId }`）。 */
 		const ACCESS_GROUPS_ROUTE = "/dsh-channels/access/groups";
-		/** 用户白名单增删（POST/DELETE，body `{ openId, name? }` / `{ openId }`）。 */
+		/** 用户白名单增删（POST/DELETE，body `{ userId, name? }` / `{ userId }`）。 */
 		const ACCESS_USERS_ROUTE = "/dsh-channels/access/users";
 		/** 结算一条待处理授权申请（POST，body `{ token, decision }`）。 */
 		const ACCESS_REQUESTS_ROUTE = "/dsh-channels/access/requests";
@@ -116,6 +114,21 @@ window.__ModuleLoader__.load({
 			statusSummaryConnecting: "正在连接飞书长连接…",
 			statusSummaryError: "最近一次连接飞书失败，请检查凭据与网络后重试。",
 			lastError: "最近一次连接失败",
+			scopeCheckTitle: "权限自检",
+			scopeCheckOk: "已开通插件需要的全部飞书权限。",
+			scopeCheckMissing: "以下飞书权限未开通，开通后需在开发者后台发布新版本：",
+			scopeCheckOpenAll: "在开发者后台开通全部缺失权限",
+			scopeCheckOpenOne: "去开通",
+			scopeCheckOptional: "可选",
+			scopeCheckRequired: "必需",
+			scopeCheckError: "无法读取应用的权限授予状态：",
+			slashCommandSyncTitle: "斜杠指令面板",
+			slashCommandSyncOk: "插件命令已同步到飞书原生斜杠指令面板，在聊天框输入 / 即可选择（飞书客户端约 5 分钟后刷新）。",
+			slashCommandSyncTotal: "命令数",
+			slashCommandSyncCreated: "本次新增",
+			slashCommandSyncUpdated: "本次更新",
+			slashCommandSyncRemoved: "本次删除",
+			slashCommandSyncError: "同步飞书原生斜杠指令面板失败（不影响直接输入命令）：",
 			missingConfig: "缺少配置",
 			statusHintUnconfigured: "配置完成后插件会自动连接；也可以稍后在本页手动连接。",
 			connectionInfo: "连接信息",
@@ -161,9 +174,9 @@ window.__ModuleLoader__.load({
 			appSecretPlaceholder: "输入 App Secret",
 			credentialsPendingHint: "填写后点「保存凭据」；两项齐全时插件会自动连接飞书。",
 			connectionTabHelp: "连接状态与飞书应用凭据。凭据不完整时不会连接飞书。",
-			sessionsTabHelp: "私聊、群聊触发方式与入站内容：附件存储/预取、静默登记保留、模型工具开关与读取预算；「需重连」项在下次连接时读取。",
+			sessionsTabHelp: "私聊、群聊触发方式与入站内容：附件存储/预取、模型工具开关与读取预算；「需重连」项在下次连接时读取。",
 			modelTabHelp: "飞书会话使用的模型服务商、模型、推理档位与 Agent 预设；下拉选项来自宿主机实时目录，保存后对新会话生效。",
-			workspaceTabHelp: "每个用户一个工作区（模型/工具产生文件的落点），每个话题在其中拥有独立工作目录；只影响之后新建的话题。入站附件默认存于 DSH 原生附件库，不占用话题目录，也不会被这里的目录清理删除。",
+			workspaceTabHelp: "每个用户一个工作区（模型/工具产生文件的落点），每个话题在其中拥有独立工作目录；只影响之后新建的话题。入站附件默认存于 DSH 原生附件库，不占用话题目录。插件不会自动删除工作区或话题目录；过期目录可手动删除，话题下次对话时会重建空目录。",
 			accessTabHelp: "准入采用 fail-closed：管理员不受白名单限制，非管理员私聊会被拒绝，群聊需要「群已授权 + 用户在白名单」两层同时命中。",
 			advancedTabHelp: "流式刷新等低层参数、Web 覆盖文件与只读信息。",
 			save: "保存更改",
@@ -172,6 +185,12 @@ window.__ModuleLoader__.load({
 			discardTab: "放弃本页更改",
 			saveHintClean: "没有未保存的更改。",
 			dirtyCount: "未保存项",
+			listAdd: "添加",
+			listRemove: "移除",
+			listEntry: "第 {n} 项",
+			listTooMany: "最多 {max} 项（空输入框不计）",
+			listNotArray: "必须是字符串列表",
+			listEntryNotString: "必须是字符串",
 			browseDirectory: "选择目录…",
 			browsingDirectory: "选择中…",
 			directoryPicked: "已选择目录",
@@ -209,35 +228,11 @@ window.__ModuleLoader__.load({
 			advancedCard: "只读与高级信息",
 			advancedHelp: "这些值来自 profile 配置，不能在面板里编辑。",
 			readOnlyCard: "部署级参数",
-			cleanupCard: "目录清理",
-			cleanupCardHelp: "只清理工作区与 Agent 产物：删除超过保留期且不再活跃的飞书话题目录、旧版本按话题建立的工作区目录，以及这些目录内 Agent 产生的文件；不影响 Session 附件——入站图片/文件默认存于 DSH 原生附件库，不随目录清理删除。用户工作区本身与 DSH 会话日志也不会删除。删除不可恢复：相关旧话题会失效并提示已过期。",
-			cleanupRetention: "保留期",
-			cleanupAutoLabel: "自动清理",
-			cleanupCandidates: "可清理目录",
-			cleanupWorkspaces: "插件工作区",
-			cleanupCandidateBytes: "预计释放空间",
-			cleanupRetentionOff: "关闭（不删除）",
-			cleanupAutoOn: "已开启（启动时 + 每天一次）",
-			cleanupAutoOff: "已关闭（仅手动执行）",
-			cleanupAutoInactive: "未执行（保留期为关闭）",
-			cleanupNow: "立即清理",
-			cleanupRunning: "清理中…",
-			cleanupConfirm: "确定清理过期目录吗？只清理工作区与 Agent 产物，不影响 Session 附件；但这些目录内未提交的文件会被删除，且操作不可恢复。",
-			cleanupConfirmHint: "删除前会再次确认；保留期为「关闭」或没有过期目录时按钮不可用。",
-			cleanupDisabledOff: "保留策略为「关闭」：请先在上方「过期目录保留期」中选择保留天数。",
-			cleanupDisabledEmpty: "没有超过保留期的过期目录。",
-			cleanupPreviewFailed: "无法读取清理预览",
-			cleanupDone: "清理完成",
-			cleanupFailed: "清理失败",
-			cleanupDeleted: "已删除工作区",
-			cleanupDeletedDirs: "话题目录",
-			cleanupRetired: "已清理话题路由",
-			cleanupFreed: "释放空间",
-			cleanupFailures: "以下目录未能删除：",
 			accessCard: "访问与授权",
-			accessCardHelp: "准入采用 fail-closed：管理员不受白名单限制（私聊、任意群聊都可直接对话）；非管理员私聊会被拒绝，群聊需要「群已授权 + 用户在白名单」两层同时命中。管理员与准入模式在上方「准入与授权」中编辑；私聊机器人发送 /userid 获取自己的 open_id。",
+			accessCardHelp: "准入采用 fail-closed：管理员不受白名单限制（私聊、任意群聊都可直接对话）；非管理员私聊会被拒绝，群聊需要「群已授权 + 用户在白名单」两层同时命中。管理员与准入模式在上方「准入与授权」中编辑；私聊机器人发送 /userid 获取自己的 user_id。",
 			accessModeOpenWarning: "当前准入模式为开放（open）：应用可用范围内的任何人都能开启对话。该模式不安全，仅建议调试时使用。",
-			accessAdminMissingWarning: "当前准入=guarded 但未配置管理员，所有对话都会被拒绝。请在上方「准入与授权」填写管理员 open_id。",
+			accessAdminMissingWarning: "当前准入=guarded 但未配置管理员，也无法自动使用应用所有者，所有对话都会被拒绝。请在上方「准入与授权」填写管理员 user_id（私聊机器人发送 /userid 获取；私聊模式关闭时 /userid 不可用，可在飞书管理后台的成员详情里查看用户 ID）。",
+			accessAdminOwnerNotice: "未配置管理员，已自动使用应用所有者作为管理员：",
 			accessGroupsTitle: "已授权群",
 			accessGroupsEmpty: "尚未授权任何群。机器人被拉进群后，管理员会收到带 chat_id 的群信息卡；也可在群内发送 /groupid 获取。",
 			accessUsersTitle: "已授权用户",
@@ -246,7 +241,7 @@ window.__ModuleLoader__.load({
 			accessRequestsEmpty: "没有待处理的授权申请。",
 			accessGroupChatIdPlaceholder: "群 chat_id（oc_…）",
 			accessGroupNamePlaceholder: "群名（可选）",
-			accessUserOpenIdPlaceholder: "用户 open_id（ou_…）",
+			accessUserIdPlaceholder: "用户 user_id",
 			accessUserNamePlaceholder: "昵称（可选）",
 			accessAddGroup: "添加群",
 			accessAddUser: "添加用户",
@@ -268,7 +263,7 @@ window.__ModuleLoader__.load({
 			accessRequestAllowed: "已授权",
 			accessRequestDenied: "已忽略",
 			accessHints: "三种授权入口：群内 /auth 命令、入群与用户授权卡、本面板。撤销立即生效；白名单只约束非管理员（管理员在任何私聊/群聊都直接放行），非管理员需要群和用户两层同时命中。",
-			accessChatIdHint: "chat_id 可从入群群信息卡或群内 /groupid 获取；open_id 可私聊机器人发送 /userid 获取。"
+			accessChatIdHint: "chat_id 可从入群群信息卡或群内 /groupid 获取；user_id 可私聊机器人发送 /userid 获取。"
 		};
 		//#endregion
 		//#region src/client/api.ts
@@ -378,24 +373,6 @@ window.__ModuleLoader__.load({
 			return JSON.parse(text);
 		}
 		/**
-		* Run one workspace cleanup. No request body: the Host derives the candidate
-		* set from the effective retention config. Irreversible, so the caller asks
-		* for confirmation first; partial failures come back inside `result.failures`.
-		*/
-		async function runCleanup() {
-			const response = await request(CLEANUP_ROUTE, { method: "POST" });
-			const text = await response.text();
-			if (!response.ok) try {
-				return JSON.parse(text);
-			} catch {
-				return {
-					ok: false,
-					error: errorFromBody(response.status, text)
-				};
-			}
-			return JSON.parse(text);
-		}
-		/**
 		* Ask the Host to open its native directory chooser (the panel's「选择目录…」
 		* button). The request stays open while the OS dialog does; a cancel comes back
 		* as `{ ok: true, canceled: true }`, not as an error.
@@ -481,16 +458,16 @@ window.__ModuleLoader__.load({
 		async function removeAccessGroup(chatId) {
 			return mutateAccess(ACCESS_GROUPS_ROUTE, "DELETE", { chatId });
 		}
-		/** Authorize one user open_id (global across authorized groups). */
-		async function addAccessUser(openId, name) {
-			return mutateAccess(ACCESS_USERS_ROUTE, "POST", name === void 0 || name === "" ? { openId } : {
-				openId,
+		/** Authorize one user `user_id` (global across authorized groups). */
+		async function addAccessUser(userId, name) {
+			return mutateAccess(ACCESS_USERS_ROUTE, "POST", name === void 0 || name === "" ? { userId } : {
+				userId,
 				name
 			});
 		}
 		/** Revoke one user authorization (takes effect on the next message). */
-		async function removeAccessUser(openId) {
-			return mutateAccess(ACCESS_USERS_ROUTE, "DELETE", { openId });
+		async function removeAccessUser(userId) {
+			return mutateAccess(ACCESS_USERS_ROUTE, "DELETE", { userId });
 		}
 		/** Settle one pending authorization request (same resolver as the Feishu card). */
 		async function resolveAccessRequest(token, decision) {
@@ -593,6 +570,203 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region src/feishu/wiki/links.ts
+		/**
+		* Feishu wiki (知识库) link parsing: the `wikiRoots` allow-list entries and
+		* the document references the model passes to the wiki tools.
+		*
+		* Pure module: no I/O. Hosts are not checked because tenants use their own
+		* subdomains (`<tenant>.feishu.cn`) and the API never uses the link host.
+		*
+		* @module dsh-channels/feishu/wiki/links
+		*/
+		/** Feishu wiki space id: decimal digits. */
+		const SPACE_ID_PATTERN = /^\d{1,32}$/u;
+		/** Feishu wiki node / docx token: letters and digits. */
+		const TOKEN_PATTERN = /^[A-Za-z0-9]{8,64}$/u;
+		/** Readable reasons for {@link WikiRootLinkError}. */
+		const WIKI_ROOT_LINK_ERRORS = {
+			"not-a-url": "不是有效的链接",
+			"not-https": "必须是 https 链接",
+			"not-a-wiki-link": "只支持知识空间链接 https://<租户>.feishu.cn/wiki/space/<space_id> 或节点链接 https://<租户>.feishu.cn/wiki/<node_token>"
+		};
+		/**
+		* Parse one `wikiRoots` entry.
+		*
+		* @param link Link as configured (surrounding whitespace is ignored).
+		* @returns The root, or the reason it is invalid.
+		*/
+		function parseWikiRootLink(link) {
+			const trimmed = link.trim();
+			let url;
+			try {
+				url = new URL(trimmed);
+			} catch {
+				return {
+					ok: false,
+					error: "not-a-url"
+				};
+			}
+			if (url.protocol !== "https:") return {
+				ok: false,
+				error: "not-https"
+			};
+			const segments = url.pathname.split("/").filter((segment) => segment !== "");
+			if (segments[0] !== "wiki") return {
+				ok: false,
+				error: "not-a-wiki-link"
+			};
+			if (segments.length === 3 && segments[1] === "space" && SPACE_ID_PATTERN.test(segments[2])) return {
+				ok: true,
+				root: {
+					kind: "space",
+					spaceId: segments[2],
+					link: trimmed
+				}
+			};
+			if (segments.length === 2 && segments[1] !== "space" && TOKEN_PATTERN.test(segments[1])) return {
+				ok: true,
+				root: {
+					kind: "node",
+					nodeToken: segments[1],
+					link: trimmed
+				}
+			};
+			return {
+				ok: false,
+				error: "not-a-wiki-link"
+			};
+		}
+		//#endregion
+		//#region src/client/string-list.ts
+		/**
+		* 浏览器半区的 `string-list` 字段辅助：把草稿值读成条目数组，并在保存前
+		* 逐项校验，供面板即时标红。Host 保存时按同一规则复核（见
+		* `settings/surface.ts` 的 `normalizeStringList`）。
+		*
+		* 不含 JSX/React，便于单测。条目格式校验直接复用纯函数模块
+		* `feishu/wiki/links.ts`（无运行时依赖，可内联进 Client bundle）。
+		*
+		* @module dsh-channels/client/string-list
+		*/
+		/** Entry checks per item format: the readable reason, or `undefined` when valid. */
+		const ITEM_FORMAT_CHECKS = { "wiki-root-link": (entry) => {
+			const parsed = parseWikiRootLink(entry);
+			return parsed.ok ? void 0 : WIKI_ROOT_LINK_ERRORS[parsed.error];
+		} };
+		/**
+		* Entries of a `string-list` value; any other value reads as no entries.
+		*
+		* @param value - Draft or effective value of a `string-list` field.
+		* @returns The entries as stored (untrimmed).
+		*/
+		function listItems(value) {
+			return typeof value === "object" ? value : [];
+		}
+		/**
+		* Validate the entries of one `string-list` draft the way the Host will:
+		* empty inputs are ignored, every other entry is trimmed and checked against
+		* the field's `itemFormat`, and the non-empty count is bounded by `maxItems`.
+		*
+		* @param field - The Host descriptor (`kind: 'string-list'`).
+		* @param items - The draft entries, empty inputs included.
+		* @returns Per-entry issues (with `index` into `items`) and a whole-field issue when over `maxItems`.
+		*/
+		function stringListIssues(field, items) {
+			const issues = [];
+			const check = field.itemFormat === void 0 ? void 0 : ITEM_FORMAT_CHECKS[field.itemFormat];
+			let count = 0;
+			items.forEach((item, index) => {
+				const entry = item.trim();
+				if (entry === "") return;
+				count += 1;
+				const reason = check?.(entry);
+				if (reason === void 0) return;
+				const position = PANEL_COPY.listEntry.replace("{n}", String(index + 1));
+				issues.push({
+					key: field.key,
+					index,
+					message: `${position}「${entry}」：${reason}`
+				});
+			});
+			if (field.maxItems !== void 0 && count > field.maxItems) issues.push({
+				key: field.key,
+				message: PANEL_COPY.listTooMany.replace("{max}", String(field.maxItems))
+			});
+			return issues;
+		}
+		/**
+		* Turn one `string-list` draft into its save payload. Entries are submitted as
+		* typed (untrimmed, empty inputs included) so Host issue indexes point at the
+		* same rendered inputs; the Host trims and drops empty inputs.
+		*
+		* @param field - The Host descriptor (`kind: 'string-list'`).
+		* @param raw - The draft value.
+		* @returns The payload entries, or the issues that block the save.
+		*/
+		function stringListDraftValue(field, raw) {
+			const items = listItems(raw);
+			const issues = stringListIssues(field, items);
+			return issues.length > 0 ? {
+				ok: false,
+				issues
+			} : {
+				ok: true,
+				value: [...items]
+			};
+		}
+		/**
+		* Inputs the list control renders: one per entry, or one blank input for an
+		* empty list so the first entry can be typed directly.
+		*
+		* @param value - Draft or effective value.
+		* @returns The input values, in order.
+		*/
+		function listRows(value) {
+			const items = listItems(value);
+			return items.length === 0 ? [""] : items;
+		}
+		/**
+		* Replace the entry at one input position.
+		*
+		* @param rows - Rendered inputs ({@link listRows}).
+		* @param index - Position of the edited input.
+		* @param entry - The typed value.
+		* @returns The next draft entries.
+		*/
+		function withListEntry(rows, index, entry) {
+			return rows.map((item, position) => position === index ? entry : item);
+		}
+		/**
+		* Drop the entry at one input position.
+		*
+		* @param rows - Rendered inputs ({@link listRows}).
+		* @param index - Position of the removed input.
+		* @returns The next draft entries.
+		*/
+		function withoutListEntry(rows, index) {
+			return rows.filter((_, position) => position !== index);
+		}
+		/**
+		* Append one blank input.
+		*
+		* @param rows - Rendered inputs ({@link listRows}).
+		* @returns The next draft entries.
+		*/
+		function withBlankListEntry(rows) {
+			return [...rows, ""];
+		}
+		/**
+		* Whether the add button is disabled: the inputs already reach `maxItems`.
+		*
+		* @param field - The Host descriptor.
+		* @param rows - Rendered inputs ({@link listRows}).
+		* @returns `true` when no further input may be added.
+		*/
+		function listIsFull(field, rows) {
+			return field.maxItems !== void 0 && rows.length >= field.maxItems;
+		}
+		//#endregion
 		//#region src/client/panel/shared.tsx
 		/**
 		* 设置面板共享层：页面状态类型、Host 字段渲染原语（FieldRow / FieldsCard /
@@ -606,25 +780,6 @@ window.__ModuleLoader__.load({
 		function messageOf(error) {
 			return error instanceof Error ? error.message : String(error);
 		}
-		/** Human-readable byte size for the cleanup preview/result (base-2 units). */
-		function formatBytes(bytes) {
-			if (!Number.isFinite(bytes) || bytes <= 0) return "0 B";
-			const units = [
-				"B",
-				"KB",
-				"MB",
-				"GB",
-				"TB"
-			];
-			let value = bytes;
-			let unit = 0;
-			while (value >= 1024 && unit < units.length - 1) {
-				value /= 1024;
-				unit += 1;
-			}
-			const digits = unit === 0 || value >= 10 ? 0 : 1;
-			return `${value.toFixed(digits)} ${units[unit] ?? "B"}`;
-		}
 		/** Compact duration for the connection card. */
 		function formatUptime(ms) {
 			if (ms === void 0 || !Number.isFinite(ms)) return PANEL_COPY.unknownValue;
@@ -697,6 +852,12 @@ window.__ModuleLoader__.load({
 					values[field.key] = raw === true;
 					continue;
 				}
+				if (field.kind === "string-list") {
+					const list = stringListDraftValue(field, raw);
+					if (list.ok) values[field.key] = list.value;
+					else issues.push(...list.issues);
+					continue;
+				}
 				values[field.key] = String(raw ?? "");
 			}
 			return {
@@ -776,10 +937,61 @@ window.__ModuleLoader__.load({
 				})]
 			});
 		}
+		/**
+		* `string-list` control: one single-line input per entry, each with a remove
+		* button, and an add button below (disabled at `maxItems` inputs). An empty
+		* list renders one blank input so the first entry can be typed directly.
+		* Issues carrying an `index` mark that input and show the reason under it.
+		*/
+		function StringListInput(props) {
+			const { field, value, issues, disabled, onChange } = props;
+			const empty = listItems(value).length === 0;
+			const rows = listRows(value);
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dsh-channels-cfg__list",
+				children: [rows.map((item, index) => {
+					const issue = issues.find((entry) => entry.index === index);
+					const position = PANEL_COPY.listEntry.replace("{n}", String(index + 1));
+					return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-channels-cfg__listItem",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "dsh-channels-cfg__inputRow",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								type: "text",
+								className: `dsh-channels-cfg__input${issue === void 0 ? "" : " dsh-channels-cfg__input--invalid"}`,
+								value: item,
+								placeholder: field.placeholder,
+								"aria-label": `${field.label} ${position}`,
+								"aria-invalid": issue === void 0 ? void 0 : true,
+								disabled,
+								onChange: (event) => onChange(field.key, withListEntry(rows, index, event.target.value))
+							}), empty ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--listRemove",
+								"aria-label": `${PANEL_COPY.listRemove} ${position}`,
+								disabled,
+								onClick: () => onChange(field.key, withoutListEntry(rows, index)),
+								children: PANEL_COPY.listRemove
+							})]
+						}), issue === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsh-channels-cfg__fieldError",
+							children: issue.message
+						})]
+					}, index);
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+					type: "button",
+					className: "dsh-channels-cfg__btn",
+					disabled: disabled || listIsFull(field, rows),
+					onClick: () => onChange(field.key, withBlankListEntry(rows)),
+					children: PANEL_COPY.listAdd
+				}) })]
+			});
+		}
 		/** One generic form control driven by the Host field descriptor. */
 		function FieldRow(props) {
 			const { field, value, issues, disabled = false, onChange, onPickDirectory } = props;
-			const issue = issues.find((item) => item.key === field.key);
+			const issue = issues.find((item) => item.key === field.key && item.index === void 0);
+			const entryIssues = issues.filter((item) => item.key === field.key && item.index !== void 0);
 			const inputClass = `dsh-channels-cfg__input${issue === void 0 ? "" : " dsh-channels-cfg__input--invalid"}`;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: `dsh-channels-cfg__field${field.wide === true ? " dsh-channels-cfg__field--wide" : ""}`,
@@ -843,6 +1055,13 @@ window.__ModuleLoader__.load({
 						disabled,
 						onChange: (event) => onChange(field.key, event.target.value)
 					}) : null,
+					field.kind === "string-list" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(StringListInput, {
+						field,
+						value,
+						issues: entryIssues,
+						disabled,
+						onChange
+					}) : null,
 					field.help === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 						className: "dsh-channels-cfg__help",
 						children: field.help
@@ -995,10 +1214,6 @@ window.__ModuleLoader__.load({
 				};
 			}
 		}
-		/** Retention label, reusing the Host field options so the copy stays on the Host. */
-		function retentionLabel(panel, cleanup) {
-			return panel.config.fields.find((item) => item.key === "workspaceRetention")?.options?.find((option) => option.value === cleanup.retention)?.label ?? (cleanup.retention === "off" ? PANEL_COPY.cleanupRetentionOff : cleanup.retention);
-		}
 		//#endregion
 		//#region src/client/panel/access-card.tsx
 		/**
@@ -1030,7 +1245,7 @@ window.__ModuleLoader__.load({
 			const { access } = panel;
 			const [groupChatId, setGroupChatId] = (0, react.useState)("");
 			const [groupName, setGroupName] = (0, react.useState)("");
-			const [userOpenId, setUserOpenId] = (0, react.useState)("");
+			const [userUserId, setUserUserId] = (0, react.useState)("");
 			const [userName, setUserName] = (0, react.useState)("");
 			const groups = access.groups;
 			const users = access.users;
@@ -1045,9 +1260,9 @@ window.__ModuleLoader__.load({
 				}
 			};
 			const submitUser = async () => {
-				if (userOpenId.trim() === "") return;
-				if (await onAddUser(userOpenId, userName)) {
-					setUserOpenId("");
+				if (userUserId.trim() === "") return;
+				if (await onAddUser(userUserId, userName)) {
+					setUserUserId("");
 					setUserName("");
 				}
 			};
@@ -1072,9 +1287,16 @@ window.__ModuleLoader__.load({
 						className: "dsh-channels-cfg__banner",
 						children: PANEL_COPY.accessModeOpenWarning
 					}) : null,
-					access.loaded && access.mode === "guarded" && !access.admin.configured ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+					access.loaded && access.mode === "guarded" && !access.admin.configured ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--error",
-						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: PANEL_COPY.accessAdminMissingWarning })
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: PANEL_COPY.accessAdminMissingWarning }), access.admin.ownerLookupError === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: access.admin.ownerLookupError })]
+					}) : null,
+					access.mode === "guarded" && access.admin.source === "owner" && access.admin.userId !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--ok",
+						children: [PANEL_COPY.accessAdminOwnerNotice, /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsh-channels-cfg__mono",
+							children: access.admin.userId
+						})]
 					}) : null,
 					!access.loaded ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(EmptyState, { text: PANEL_COPY.accessNotLoaded }) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
 						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
@@ -1171,21 +1393,21 @@ window.__ModuleLoader__.load({
 										className: "dsh-channels-cfg__accessRow",
 										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
 											className: "dsh-channels-cfg__accessMain",
-											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: user.name ?? user.openId }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: user.name ?? user.userId }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
 												className: "dsh-channels-cfg__accessMeta",
 												children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 													className: "dsh-channels-cfg__mono",
-													children: user.openId
+													children: user.userId
 												}), ` · ${accessSourceLabel(user.source)} · ${formatAccessDate(user.addedAt)}`]
 											})]
 										}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 											type: "button",
 											className: "dsh-channels-cfg__btn",
 											disabled,
-											onClick: () => onRemoveUser(user.openId),
+											onClick: () => onRemoveUser(user.userId),
 											children: working ? PANEL_COPY.accessWorking : PANEL_COPY.accessRemove
 										})]
-									}, user.openId))
+									}, user.userId))
 								}),
 								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 									className: "dsh-channels-cfg__accessAdd",
@@ -1193,11 +1415,11 @@ window.__ModuleLoader__.load({
 										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 											type: "text",
 											className: "dsh-channels-cfg__input dsh-channels-cfg__accessInput",
-											value: userOpenId,
-											placeholder: PANEL_COPY.accessUserOpenIdPlaceholder,
-											"aria-label": PANEL_COPY.accessUserOpenIdPlaceholder,
+											value: userUserId,
+											placeholder: PANEL_COPY.accessUserIdPlaceholder,
+											"aria-label": PANEL_COPY.accessUserIdPlaceholder,
 											disabled,
-											onChange: (event) => setUserOpenId(event.target.value)
+											onChange: (event) => setUserUserId(event.target.value)
 										}),
 										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 											type: "text",
@@ -1211,7 +1433,7 @@ window.__ModuleLoader__.load({
 										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 											type: "button",
 											className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
-											disabled: disabled || userOpenId.trim() === "",
+											disabled: disabled || userUserId.trim() === "",
 											onClick: () => {
 												submitUser();
 											},
@@ -1302,7 +1524,7 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/client/panel/access-tab.tsx
 		/**
-		* 「访问授权」tab：准入与授权字段表单（管理员 open_id / 准入模式 /
+		* 「访问授权」tab：准入与授权字段表单（管理员 user_id / 准入模式 /
 		* 申请有效期）+ 白名单与待处理申请卡。表单保存走全局 draft，白名单
 		* 增删是独立即时 mutation。
 		*
@@ -1587,6 +1809,7 @@ window.__ModuleLoader__.load({
 		* - error：连接信息卡 + 最近一次连接失败 + 「重试」
 		* - connected：连接信息卡 + 「重启飞书连接」+ 凭据卡
 		* - connecting：禁用按钮显示「连接中…」
+		* - 已连接且权限自检完成：权限自检卡（缺失权限红字 + 开发者后台深链）
 		*
 		* @module dsh-channels/client/panel/connection-tab
 		*/
@@ -1607,6 +1830,8 @@ window.__ModuleLoader__.load({
 						busy,
 						onReconnect
 					}),
+					status.scopeCheck === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ScopeCheckCard, { check: status.scopeCheck }),
+					status.slashCommandSync === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SlashCommandSyncCard, { sync: status.slashCommandSync }),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(CredentialsCard, {
 						panel,
 						credentials
@@ -1797,6 +2022,109 @@ window.__ModuleLoader__.load({
 				]
 			});
 		}
+		/** Post-connect scope self-check: missing scopes in red, each with a console deep link. */
+		function ScopeCheckCard(props) {
+			const { check } = props;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				className: "dsh-channels-cfg__card",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dsh-channels-cfg__cardHead",
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsh-channels-cfg__cardTitle",
+							children: PANEL_COPY.scopeCheckTitle
+						})
+					}),
+					check.state === "ok" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--ok",
+						children: PANEL_COPY.scopeCheckOk
+					}) : null,
+					check.state === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--error",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: PANEL_COPY.scopeCheckError }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsh-channels-cfg__mono",
+							children: check.error
+						})]
+					}) : null,
+					check.state === "missing" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--error",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: PANEL_COPY.scopeCheckMissing }),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+								className: "dsh-channels-cfg__scopeList",
+								children: check.missing.map((item) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", { children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
+										"[",
+										item.level === "required" ? PANEL_COPY.scopeCheckRequired : PANEL_COPY.scopeCheckOptional,
+										"] "
+									] }),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+										className: "dsh-channels-cfg__mono",
+										children: item.scopes.join(" / ")
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
+										"：",
+										item.purpose,
+										" "
+									] }),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+										href: item.consoleUrl,
+										target: "_blank",
+										rel: "noreferrer noopener",
+										children: PANEL_COPY.scopeCheckOpenOne
+									})
+								] }, item.scopes.join(",")))
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+								href: check.consoleUrl,
+								target: "_blank",
+								rel: "noreferrer noopener",
+								children: PANEL_COPY.scopeCheckOpenAll
+							})
+						]
+					}) : null
+				]
+			});
+		}
+		/** Post-connect native slash-command panel sync: counts on success, the Feishu reason on failure. */
+		function SlashCommandSyncCard(props) {
+			const { sync } = props;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				className: "dsh-channels-cfg__card",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+					className: "dsh-channels-cfg__cardHead",
+					children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-channels-cfg__cardTitle",
+						children: PANEL_COPY.slashCommandSyncTitle
+					})
+				}), sync.state === "ok" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--ok",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [PANEL_COPY.slashCommandSyncOk, " "] }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
+						PANEL_COPY.slashCommandSyncTotal,
+						" ",
+						sync.total,
+						" · ",
+						PANEL_COPY.slashCommandSyncCreated,
+						" ",
+						sync.created,
+						" · ",
+						PANEL_COPY.slashCommandSyncUpdated,
+						" ",
+						sync.updated,
+						" · ",
+						PANEL_COPY.slashCommandSyncRemoved,
+						" ",
+						sync.removed
+					] })]
+				}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--error",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: PANEL_COPY.slashCommandSyncError }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-channels-cfg__mono",
+						children: sync.error
+					})]
+				})]
+			});
+		}
 		/** Config saved but only applied on the next connect: offer the one-click restart. */
 		function RestartBanner(props) {
 			const { panel, busy, locked, onReconnect } = props;
@@ -1875,135 +2203,14 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
-		//#region src/client/panel/cleanup-card.tsx
-		/**
-		* 目录清理卡：展示清理预览（保留期 / 自动清理 / 候选数量与空间），
-		* 执行前二次确认，结果与部分失败逐条展示。`cleanup.error` 非空时
-		* （例如未连接、无法扫描工作区）按钮天然禁用并显示原因。
-		*
-		* @module dsh-channels/client/panel/cleanup-card
-		*/
-		function CleanupCard(props) {
-			const { panel, cleanup, busy, locked, result, error, onRun } = props;
-			const autoText = cleanup.retention === "off" ? PANEL_COPY.cleanupAutoInactive : cleanup.auto ? PANEL_COPY.cleanupAutoOn : PANEL_COPY.cleanupAutoOff;
-			const blocked = cleanup.error !== void 0 ? `${PANEL_COPY.cleanupPreviewFailed}：${cleanup.error}` : cleanup.retention === "off" ? PANEL_COPY.cleanupDisabledOff : cleanup.candidates === 0 ? PANEL_COPY.cleanupDisabledEmpty : null;
-			const facts = [
-				{
-					label: PANEL_COPY.cleanupRetention,
-					value: retentionLabel(panel, cleanup)
-				},
-				{
-					label: PANEL_COPY.cleanupAutoLabel,
-					value: autoText
-				},
-				{
-					label: PANEL_COPY.cleanupCandidates,
-					value: `${cleanup.candidates} 个`
-				},
-				{
-					label: PANEL_COPY.cleanupWorkspaces,
-					value: `${cleanup.workspaces} 个`
-				},
-				{
-					label: PANEL_COPY.cleanupCandidateBytes,
-					value: formatBytes(cleanup.candidateBytes)
-				}
-			];
-			const running = busy === "cleanup";
-			const failed = result !== null && (!result.ok || error !== null);
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
-				className: "dsh-channels-cfg__card",
-				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__cardHead",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__cardTitle",
-							children: PANEL_COPY.cleanupCard
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__cardMeta",
-							children: retentionLabel(panel, cleanup)
-						})]
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__help",
-						children: PANEL_COPY.cleanupCardHelp
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-						className: "dsh-channels-cfg__facts",
-						children: facts.map((fact) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: "dsh-channels-cfg__fact",
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-								className: "dsh-channels-cfg__factLabel",
-								children: fact.label
-							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-								className: "dsh-channels-cfg__factValue",
-								children: fact.value
-							})]
-						}, fact.label))
-					}),
-					blocked === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__help",
-						children: blocked
-					}),
-					result === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: `dsh-channels-cfg__notice dsh-channels-cfg__notice--${failed ? "error" : "ok"}`,
-						children: [result.ok ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
-							PANEL_COPY.cleanupDone,
-							"：",
-							PANEL_COPY.cleanupDeleted,
-							" ",
-							result.deletedWorkspaces,
-							" 个，",
-							PANEL_COPY.cleanupDeletedDirs,
-							" ",
-							result.deletedSessionDirs,
-							" 个，",
-							PANEL_COPY.cleanupRetired,
-							" ",
-							result.retiredRoutes,
-							" 条，",
-							PANEL_COPY.cleanupFreed,
-							" ",
-							formatBytes(result.freedBytes),
-							"。"
-						] }) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [PANEL_COPY.cleanupFailed, result.error === void 0 ? "" : `：${result.error}`] }), result.failures.length === 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: PANEL_COPY.cleanupFailures }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
-							className: "dsh-channels-cfg__issues",
-							children: result.failures.map((failure, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", {
-								className: "dsh-channels-cfg__mono",
-								children: failure
-							}, `${index}-${failure}`))
-						})] })]
-					}),
-					error === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__fieldError",
-						children: error
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__actions",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-							type: "button",
-							className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--danger",
-							onClick: onRun,
-							disabled: running || busy !== null || locked || blocked !== null,
-							children: running ? PANEL_COPY.cleanupRunning : PANEL_COPY.cleanupNow
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__help",
-							children: PANEL_COPY.cleanupConfirmHint
-						})]
-					})
-				]
-			});
-		}
-		//#endregion
 		//#region src/client/panel/workspace-tab.tsx
 		/**
-		* 「工作区」tab：工作区根目录 / 过期保留策略 / 自动清理字段 + 目录清理卡。
-		* 表单保存栏在字段卡正下方，清理卡（独立动作，不走 draft）在其后。
+		* 「工作区」tab：工作区根目录字段与保存栏。
 		*
 		* @module dsh-channels/client/panel/workspace-tab
 		*/
 		function WorkspaceTab(props) {
-			const { form, cleanup, cleanupResult, cleanupError, onRunCleanup } = props;
+			const { form } = props;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "dsh-channels-cfg__tabBody",
 				children: [
@@ -2015,15 +2222,6 @@ window.__ModuleLoader__.load({
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SaveBar, {
 						form,
 						tab: "workspace"
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(CleanupCard, {
-						panel: form.panel,
-						cleanup,
-						busy: form.busy,
-						locked: form.locked,
-						result: cleanupResult,
-						error: cleanupError,
-						onRun: onRunCleanup
 					})
 				]
 			});
@@ -2034,8 +2232,8 @@ window.__ModuleLoader__.load({
 		* 设置 →「飞书渠道」页面：数据加载、5 秒状态轮询、全局 draft 与顶部状态头 /
 		* tab 导航的外壳。
 		*
-		* 所有 Host 交互（panel / status / catalog / config / credentials / cleanup /
-		* access / pick-directory）都集中在这里；tab 组件只接收渲染所需的数据与
+		* 所有 Host 交互（panel / status / catalog / config / credentials / access /
+		* pick-directory）都集中在这里；tab 组件只接收渲染所需的数据与
 		* 回调。页面不 import 任何 DSH 客户端包，只依赖 react 与 `settings.section`
 		* 槽位。
 		*
@@ -2054,8 +2252,6 @@ window.__ModuleLoader__.load({
 			const [appSecretInput, setAppSecretInput] = (0, react.useState)("");
 			const [catalog, setCatalog] = (0, react.useState)(null);
 			const [catalogBusy, setCatalogBusy] = (0, react.useState)(false);
-			const [cleanupResult, setCleanupResult] = (0, react.useState)(null);
-			const [cleanupError, setCleanupError] = (0, react.useState)(null);
 			const [accessNotice, setAccessNotice] = (0, react.useState)(null);
 			const [accessError, setAccessError] = (0, react.useState)(null);
 			const catalogTicket = (0, react.useRef)(0);
@@ -2070,8 +2266,6 @@ window.__ModuleLoader__.load({
 			const loadPanel = (0, react.useCallback)(async () => {
 				setLoad({ phase: "loading" });
 				setNotice(null);
-				setCleanupResult(null);
-				setCleanupError(null);
 				setAccessNotice(null);
 				setAccessError(null);
 				try {
@@ -2232,8 +2426,8 @@ window.__ModuleLoader__.load({
 				}
 			}, []);
 			/**
-			* Manual refresh: reload the whole panel payload so access lists, the cleanup
-			* preview and `restartPendingKeys` catch up with the Host. The dirty draft is
+			* Manual refresh: reload the whole panel payload so access lists and
+			* `restartPendingKeys` catch up with the Host. The dirty draft is
 			* deliberately preserved — refreshing never discards user input.
 			*/
 			const onRefresh = (0, react.useCallback)(async () => {
@@ -2282,8 +2476,6 @@ window.__ModuleLoader__.load({
 						panel: result.panel
 					});
 					setStatus(result.panel.status);
-					setCleanupResult(null);
-					setCleanupError(null);
 					setDraft((previous) => {
 						const next = { ...previous };
 						for (const key of Object.keys(values)) delete next[key];
@@ -2370,8 +2562,6 @@ window.__ModuleLoader__.load({
 					});
 					setStatus(result.panel.status);
 					setDraft({});
-					setCleanupResult(null);
-					setCleanupError(null);
 					setNotice({
 						kind: "ok",
 						text: PANEL_COPY.cleared
@@ -2426,37 +2616,6 @@ window.__ModuleLoader__.load({
 					setBusy(null);
 				}
 			}, [refreshStatus, running]);
-			/**
-			* Delete stale workspaces after an explicit confirmation. The Host refreshes
-			* the panel in the same response, so the preview counts update immediately;
-			* partial failures stay visible in the card instead of being swallowed.
-			*/
-			const onRunCleanup = (0, react.useCallback)(async () => {
-				if (panel === null) return;
-				const { cleanup } = panel;
-				if (!(typeof window.confirm === "function" ? window.confirm(`${PANEL_COPY.cleanupConfirm}\n${PANEL_COPY.cleanupCandidates}：${cleanup.candidates} · ${PANEL_COPY.cleanupCandidateBytes}：${formatBytes(cleanup.candidateBytes)}`) : true)) return;
-				setBusy("cleanup");
-				setNotice(null);
-				setCleanupResult(null);
-				setCleanupError(null);
-				try {
-					const response = await runCleanup();
-					if (!response.ok) {
-						setCleanupError(response.error);
-						return;
-					}
-					setLoad({
-						phase: "ready",
-						panel: response.panel
-					});
-					setStatus(response.panel.status);
-					setCleanupResult(response.result);
-				} catch (error) {
-					setCleanupError(messageOf(error));
-				} finally {
-					setBusy(null);
-				}
-			}, [panel]);
 			/** Replace the embedded access snapshot after a whitelist mutation. */
 			const applyAccess = (0, react.useCallback)((access) => {
 				setLoad((previous) => previous.phase === "ready" ? {
@@ -2505,12 +2664,12 @@ window.__ModuleLoader__.load({
 					setBusy(null);
 				}
 			}, [applyAccess]);
-			const onAddAccessUser = (0, react.useCallback)(async (openId, name) => {
+			const onAddAccessUser = (0, react.useCallback)(async (userId, name) => {
 				setBusy("access");
 				setAccessError(null);
 				setAccessNotice(null);
 				try {
-					const result = await addAccessUser(openId, name);
+					const result = await addAccessUser(userId, name);
 					if (!result.ok) {
 						setAccessError(result.error);
 						return false;
@@ -2525,12 +2684,12 @@ window.__ModuleLoader__.load({
 					setBusy(null);
 				}
 			}, [applyAccess]);
-			const onRemoveAccessUser = (0, react.useCallback)(async (openId) => {
+			const onRemoveAccessUser = (0, react.useCallback)(async (userId) => {
 				setBusy("access");
 				setAccessError(null);
 				setAccessNotice(null);
 				try {
-					const result = await removeAccessUser(openId);
+					const result = await removeAccessUser(userId);
 					if (!result.ok) {
 						setAccessError(result.error);
 						return;
@@ -2767,15 +2926,7 @@ window.__ModuleLoader__.load({
 								form,
 								catalogBusy
 							}) : null,
-							activeTab === "workspace" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(WorkspaceTab, {
-								form,
-								cleanup: form.panel.cleanup,
-								cleanupResult,
-								cleanupError,
-								onRunCleanup: () => {
-									onRunCleanup();
-								}
-							}) : null,
+							activeTab === "workspace" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(WorkspaceTab, { form }) : null,
 							activeTab === "access" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccessTab, {
 								form,
 								accessNotice,
@@ -2785,8 +2936,8 @@ window.__ModuleLoader__.load({
 									onRemoveAccessGroup(chatId);
 								},
 								onAddUser: onAddAccessUser,
-								onRemoveUser: (openId) => {
-									onRemoveAccessUser(openId);
+								onRemoveUser: (userId) => {
+									onRemoveAccessUser(userId);
 								},
 								onResolveRequest: (token, decision) => {
 									onResolveAccessRequest(token, decision);
@@ -2966,6 +3117,9 @@ window.__ModuleLoader__.load({
 .dsh-channels-cfg__inputRow{display:flex;align-items:center;gap:8px;min-width:0}
 .dsh-channels-cfg__inputRow .dsh-channels-cfg__input{flex:1 1 auto;width:auto;min-width:0}
 .dsh-channels-cfg__btn--browse{flex:none}
+.dsh-channels-cfg__list{display:flex;flex-direction:column;gap:6px;min-width:0}
+.dsh-channels-cfg__listItem{display:flex;flex-direction:column;gap:2px;min-width:0}
+.dsh-channels-cfg__btn--listRemove{flex:none}
 .dsh-channels-cfg__input:focus{border-color:var(--dsw-alias-state-business-primary,#0a67d3)}
 .dsh-channels-cfg__input--invalid{border-color:var(--dsw-alias-state-danger-primary,#c62828)}
 select.dsh-channels-cfg__input{appearance:auto;cursor:pointer}
@@ -2975,6 +3129,8 @@ select.dsh-channels-cfg__input{appearance:auto;cursor:pointer}
 .dsh-channels-cfg__notice{display:flex;flex-direction:column;gap:2px;padding:8px 10px;border-radius:8px;font-size:12px;line-height:18px;overflow-wrap:anywhere}
 .dsh-channels-cfg__notice--ok{color:var(--dsw-alias-state-business-primary,#0a7d33);background:color-mix(in srgb,currentColor 8%,transparent)}
 .dsh-channels-cfg__notice--error{color:var(--dsw-alias-state-danger-primary,#c62828);background:color-mix(in srgb,currentColor 8%,transparent)}
+.dsh-channels-cfg__notice a{color:inherit;text-decoration:underline}
+.dsh-channels-cfg__scopeList{margin:2px 0;padding-left:18px;display:flex;flex-direction:column;gap:2px}
 .dsh-channels-cfg__banner{display:flex;align-items:center;gap:8px;flex-wrap:wrap;padding:8px 10px;border-radius:8px;border:1px dashed var(--dsw-alias-state-warning-primary,#a15c00);color:var(--dsw-alias-state-warning-primary,#a15c00);font-size:12px;line-height:18px}
 .dsh-channels-cfg__footer{display:flex;align-items:center;gap:8px;flex-wrap:wrap;padding-top:2px}
 .dsh-channels-cfg__spacer{flex:1}