@modesto_ma/dsh-channels 0.5.0-beta.1 → 0.5.0-beta.2

package/lib/index.js

@@ -295,7 +295,7 @@ function standaloneInfoCard(title, lines) {
 * @module dsh-channels/access/cards
 */
 /** Truncate one display string so the card stays far below the size budget. */
-function clip$1(value, max = 120) {
+function clip$2(value, max = 120) {
 	const trimmed = value.trim();
 	return trimmed.length <= max ? trimmed : `${trimmed.slice(0, max)}…`;
 }
@@ -339,7 +339,7 @@ function field(label, value) {
 * group). Unauthorized groups with a pending request carry「授权本群 / 忽略」.
 */
 function buildGroupInfoCard(input) {
-	const name = input.name === void 0 ? void 0 : clip$1(input.name);
+	const name = input.name === void 0 ? void 0 : clip$2(input.name);
 	const elements = [];
 	elements.push(field("群名", name === void 0 || name === "" ? "（未知）" : name));
 	elements.push(field("群 ID", `\`${input.chatId}\``));
@@ -361,8 +361,8 @@ function buildGroupInfoCard(input) {
 * from the DM card.
 */
 function buildUserRequestCard(input) {
-	const display = clip$1(input.name ?? input.requesterName ?? "");
-	const groupName = input.groupName === void 0 ? void 0 : clip$1(input.groupName);
+	const display = clip$2(input.name ?? input.requesterName ?? "");
+	const groupName = input.groupName === void 0 ? void 0 : clip$2(input.groupName);
 	const elements = [field("用户", display === "" ? "（未知昵称）" : display), field("user_id", `\`${input.userId}\``)];
 	if (groupName !== void 0 && groupName !== "") {
 		const group = input.chatId === void 0 ? groupName : `${groupName}（\`${input.chatId}\`）`;
@@ -396,7 +396,7 @@ const SETTLED_PRESENTATION = {
 function buildRequestSettledCard(input) {
 	const presentation = SETTLED_PRESENTATION[input.status];
 	const kindLabel = input.kind === "group" ? "群" : "用户";
-	const name = input.targetName === void 0 ? void 0 : clip$1(input.targetName);
+	const name = input.targetName === void 0 ? void 0 : clip$2(input.targetName);
 	const elements = [
 		field(kindLabel, name === void 0 || name === "" ? `\`${input.targetId}\`` : `${name}（\`${input.targetId}\`）`),
 		field("处理时间", formatTime(input.now)),
@@ -857,6 +857,8 @@ var AccessStore = class {
 	groups = /* @__PURE__ */ new Map();
 	users = /* @__PURE__ */ new Map();
 	requests = /* @__PURE__ */ new Map();
+	/** Wiki whitelist (`/auth wiki add`), independent of the user whitelist. */
+	wikiUsers = /* @__PURE__ */ new Map();
 	/** Cached key sets so `snapshot()` can stay allocation-free per message. */
 	groupKeys = /* @__PURE__ */ new Set();
 	userKeys = /* @__PURE__ */ new Set();
@@ -880,12 +882,14 @@ var AccessStore = class {
 			this.userKeys.add(key);
 		}
 		for (const [key, record] of domain.accessRequests.entries()) this.requests.set(key, record);
+		for (const [key, record] of domain.accessWikiUsers.entries()) this.wikiUsers.set(key, record);
 	}
 	/** Drop every in-memory record (shutdown). The domain owns durability. */
 	clear() {
 		this.groups.clear();
 		this.users.clear();
 		this.requests.clear();
+		this.wikiUsers.clear();
 		this.groupKeys.clear();
 		this.userKeys.clear();
 	}
@@ -941,6 +945,25 @@ var AccessStore = class {
 		this.userKeys.delete(userId);
 		return true;
 	}
+	/** Whether `userId` is on the wiki whitelist (the administrator is not implied). */
+	hasWikiUser(userId) {
+		return this.wikiUsers.has(userId);
+	}
+	/** Every wiki-whitelisted user, oldest first. */
+	wikiUserRecords() {
+		return [...this.wikiUsers.values()].sort((left, right) => left.addedAt - right.addedAt);
+	}
+	async addWikiUser(record) {
+		await this.requireDomain("add wiki user").accessWikiUsers.put(record.userId, record);
+		this.wikiUsers.set(record.userId, record);
+		return record;
+	}
+	async removeWikiUser(userId) {
+		if (!this.wikiUsers.has(userId)) return false;
+		await this.requireDomain("remove wiki user").accessWikiUsers.delete(userId);
+		this.wikiUsers.delete(userId);
+		return true;
+	}
 	/** Every authorization request, including settled ones (audit). */
 	requestRecords() {
 		return [...this.requests.values()].sort((left, right) => left.createdAt - right.createdAt);
@@ -1262,7 +1285,8 @@ const feishuDomain = {
 		expired_routes: { valueSchema: expiredRouteRecordSchema },
 		access_groups: { valueSchema: accessGroupRecordSchema },
 		access_users: { valueSchema: accessUserRecordSchema },
-		access_requests: { valueSchema: accessRequestRecordSchema }
+		access_requests: { valueSchema: accessRequestRecordSchema },
+		access_wiki_users: { valueSchema: accessUserRecordSchema }
 	}
 };
 /**
@@ -1348,7 +1372,7 @@ function approvalTimeoutLabel(timeoutMs) {
 	return `${Math.max(1, Math.round(timeoutMs / 6e4))} 分钟`;
 }
 /** Clip to `max` chars and report how many were dropped. */
-function clip(value, max) {
+function clip$1(value, max) {
 	return value.length <= max ? {
 		shown: value,
 		hidden: 0
@@ -1395,12 +1419,12 @@ function approvalActions(question) {
 function approvalQuestionElements(question) {
 	const elements = [markdown(question.escalateTo === void 0 ? `工具 \`${question.toolName}\` 请求执行一个需要授权的操作。` : `工具 \`${question.toolName}\` 请求把本次调用提升到 \`${question.escalateTo}\` 权限。`)];
 	if (question.command !== void 0 && question.command !== "") {
-		const command = clip(question.command, APPROVAL_COMMAND_MAX_CHARS);
+		const command = clip$1(question.command, APPROVAL_COMMAND_MAX_CHARS);
 		elements.push(markdown(`**将执行**\n\`\`\`\n${command.shown.replace(/```/gu, "`​``")}\n\`\`\``));
 		if (command.hidden > 0) elements.push(note(`已截断 ${command.hidden} 个字符`));
 	}
 	if (question.reason !== void 0 && question.reason !== "") {
-		const reason = clip(question.reason, APPROVAL_REASON_MAX_CHARS);
+		const reason = clip$1(question.reason, APPROVAL_REASON_MAX_CHARS);
 		elements.push(markdown(`> ${reason.shown.replace(/\s+/gu, " ")}${reason.hidden > 0 ? "…" : ""}`));
 	}
 	return elements;
@@ -1849,7 +1873,7 @@ function questionOptionButton(input, question, option) {
 		}
 	});
 }
-function questionElements(input) {
+function questionElements$1(input) {
 	const elements = [markdown("**❓ 需要你的回答**")];
 	input.questions.forEach((question, index) => {
 		const heading = question.header === void 0 || question.header === "" ? `**问题 ${index + 1}**` : `**问题 ${index + 1} · ${clipQuestionText(question.header, 80)}**`;
@@ -1881,7 +1905,7 @@ function questionElements(input) {
 }
 /** The pending structured-question card (one card carries every question). */
 function buildQuestionCard(input) {
-	return card(questionElements(input));
+	return card(questionElements$1(input));
 }
 const QUESTION_SETTLED_LINES = {
 	answered: "✅ 已回答",
@@ -2578,7 +2602,8 @@ function buildOnboardingCard() {
 *
 * A click carries the command and its argument back to the service, which
 * runs it exactly like the typed `/<command> <arg>` line, so admission,
-* ownership and validation stay in one place.
+* ownership and validation stay in one place; the result replaces the picker
+* card in place.
 *
 * @module dsh-channels/cards/picker
 */
@@ -2601,33 +2626,23 @@ function pickButton(input, label, arg) {
 	return textButton({
 		label: active ? `✅ ${label}` : label,
 		type: active ? "primary" : "default",
-		width: "fill",
-		margin: "0px",
 		value
 	});
 }
-/** Choices in two-column rows. */
-function optionRows(input, options) {
-	const rows = [];
-	for (let index = 0; index < options.length; index += 2) {
-		const pair = options.slice(index, index + 2).map((option) => pickButton(input, option.label, option.arg));
-		rows.push(columnSet(pair));
-	}
-	return rows;
-}
 /** Whether a value can be appended to a command line as one argument. */
 function isPickerArg(value) {
 	return value !== "" && !/\s/u.test(value);
 }
 /**
-* The picker card. Options whose argument cannot form one command-line token
+* The picker card: one full-width button per choice, in a single column.
+* Options whose argument cannot form one command-line token
 * are skipped; when more than `MAX_PICKER_OPTIONS` remain the rest are
 * reported as typed-only.
 */
 function buildPickerCard(input) {
 	const usable = input.options.filter((option) => isPickerArg(option.arg));
 	const shown = usable.slice(0, 12);
-	const elements = [markdown(input.text), ...optionRows(input, shown)];
+	const elements = [markdown(input.text), ...shown.map((option) => pickButton(input, option.label, option.arg))];
 	if (usable.length > shown.length) elements.push(note(`另有 ${usable.length - shown.length} 项未展示，可直接输入 /${input.command} <id>。`));
 	if (input.reset === true) elements.push(textButton({
 		label: "恢复默认",
@@ -2684,7 +2699,7 @@ const CHANNEL_COMMANDS = [
 		group: "基础",
 		description: "显示当前支持的斜杠命令",
 		routeFree: true,
-		directReply: false
+		directReply: true
 	},
 	{
 		name: "userid",
@@ -2710,7 +2725,8 @@ const CHANNEL_COMMANDS = [
 		name: "health",
 		group: "基础",
 		description: "显示 Harness 与飞书通道健康状态",
-		sessionOptional: true
+		sessionOptional: true,
+		directReply: true
 	},
 	{
 		name: "status",
@@ -3384,6 +3400,26 @@ const SEND_FILE_REQUIREMENT = {
 	level: "optional",
 	purpose: "上传图片/文件，让模型用 feishu_send_file 把生成的文件发给用户"
 };
+/** Wiki read needs (`feishu_wiki_list` / `feishu_wiki_read`). */
+const WIKI_READ_REQUIREMENTS = [{
+	anyOf: ["wiki:wiki", "wiki:wiki:readonly"],
+	level: "optional",
+	purpose: "浏览知识库节点（feishu_wiki_list / feishu_wiki_read）"
+}, {
+	anyOf: ["docx:document", "docx:document:readonly"],
+	level: "optional",
+	purpose: "读取知识库中的文档内容（feishu_wiki_read）"
+}];
+/** Wiki write needs (`feishu_wiki_create` / `feishu_wiki_edit`). */
+const WIKI_WRITE_REQUIREMENTS = [{
+	anyOf: ["wiki:wiki"],
+	level: "optional",
+	purpose: "在知识库中新建节点（feishu_wiki_create）"
+}, {
+	anyOf: ["docx:document"],
+	level: "optional",
+	purpose: "写入与修改知识库文档内容（feishu_wiki_create / feishu_wiki_edit）"
+}];
 /** Group receive needs while ordinary group messages require an @ mention. */
 const MENTION_GROUP_REQUIREMENTS = [{
 	anyOf: ["im:message.group_at_msg:readonly", "im:message.group_msg"],
@@ -3444,9 +3480,15 @@ function scopeRequirements(context) {
 		...context.requireMention ? MENTION_GROUP_REQUIREMENTS : [ALL_GROUP_REQUIREMENT],
 		...BASE_REQUIREMENTS,
 		...context.sendFile ? [SEND_FILE_REQUIREMENT] : [],
+		...wikiRequirements(context),
 		...context.slashCommandPanel ? SLASH_COMMAND_REQUIREMENTS : []
 	];
 }
+/** Wiki needs; the write set subsumes the read set's preferred scopes. */
+function wikiRequirements(context) {
+	if (context.wikiWrite) return WIKI_WRITE_REQUIREMENTS;
+	return context.wikiRead ? WIKI_READ_REQUIREMENTS : [];
+}
 /**
 * Compare `grants` with the applicable requirements. Only tenant (or untyped)
 * grants count: the plugin always calls with the app identity.
@@ -3473,6 +3515,186 @@ function checkScopes(grants, appId, context) {
 	};
 }
 //#endregion
+//#region src/feishu/wiki/api.ts
+/**
+* Feishu wiki (知识库) and docx OpenAPI calls used by the wiki tools, made
+* with the app identity (tenant access token).
+*
+* Structure calls use `wiki/v2` (`spaces/get_node`, `spaces/:id`,
+* `spaces/:id/nodes`); document content uses the `docs_ai/v1` document
+* endpoints, which read and write Markdown or Feishu document XML directly
+* (block ids are exported only in XML); the revision check uses
+* `docx/v1/documents/:id`. Every call maps a thrown transport error or a
+* non-zero Feishu `code` to {@link FeishuApiError}.
+*
+* @module dsh-channels/feishu/wiki/api
+*/
+const OBJ_TYPES = /* @__PURE__ */ new Set([
+	"doc",
+	"docx",
+	"sheet",
+	"mindnote",
+	"bitable",
+	"file",
+	"slides"
+]);
+/** Feishu's per-page maximum for `spaces/:id/nodes`. */
+const LIST_PAGE_SIZE = 50;
+function thrownError(error) {
+	if (error instanceof FeishuApiError) return error;
+	const data = error?.response?.data;
+	const code = typeof data?.code === "number" ? data.code : void 0;
+	const msg = typeof data?.msg === "string" ? data.msg : void 0;
+	if (code === void 0 && msg === void 0) return new FeishuApiError(error instanceof Error ? error.message : String(error));
+	return new FeishuApiError([code === void 0 ? void 0 : `code=${code}`, msg].filter(Boolean).join(" "), code);
+}
+async function call(request, input) {
+	let response;
+	try {
+		response = await request(input);
+	} catch (error) {
+		throw thrownError(error);
+	}
+	if (response.code !== void 0 && response.code !== 0) throw new FeishuApiError(`code=${response.code}${response.msg === void 0 ? "" : ` ${response.msg}`}`, response.code);
+	if (response.data === void 0) throw new FeishuApiError(`${input.url}: response has no data`);
+	return response.data;
+}
+function wikiNode(raw, where) {
+	if (raw?.space_id === void 0 || raw.node_token === void 0 || raw.obj_token === void 0 || raw.obj_type === void 0 || !OBJ_TYPES.has(raw.obj_type)) throw new FeishuApiError(`${where}: response node is incomplete`);
+	return {
+		spaceId: raw.space_id,
+		nodeToken: raw.node_token,
+		objToken: raw.obj_token,
+		objType: raw.obj_type,
+		...raw.parent_node_token === void 0 || raw.parent_node_token === "" ? {} : { parentNodeToken: raw.parent_node_token },
+		nodeType: raw.node_type === "shortcut" ? "shortcut" : "origin",
+		title: raw.title ?? "",
+		hasChild: raw.has_child === true,
+		...raw.owner === void 0 || raw.owner === "" ? {} : { owner: raw.owner },
+		...raw.url === void 0 || raw.url === "" ? {} : { url: raw.url }
+	};
+}
+function segment(value) {
+	return encodeURIComponent(value);
+}
+/**
+* {@link WikiApi} over the SDK's generic authenticated request.
+*
+* @param request `Client.request` of the connected SDK client.
+* @returns The API.
+*/
+function createWikiApi(request) {
+	return {
+		async getNode(token, objType) {
+			const url = "/open-apis/wiki/v2/spaces/get_node";
+			return wikiNode((await call(request, {
+				method: "GET",
+				url,
+				params: {
+					token,
+					obj_type: objType
+				}
+			})).node, url);
+		},
+		async spaceName(spaceId) {
+			return (await call(request, {
+				method: "GET",
+				url: `/open-apis/wiki/v2/spaces/${segment(spaceId)}`
+			})).space?.name ?? "";
+		},
+		async listChildren(spaceId, parentNodeToken, pageToken) {
+			const url = `/open-apis/wiki/v2/spaces/${segment(spaceId)}/nodes`;
+			const data = await call(request, {
+				method: "GET",
+				url,
+				params: {
+					page_size: LIST_PAGE_SIZE,
+					...parentNodeToken === void 0 ? {} : { parent_node_token: parentNodeToken },
+					...pageToken === void 0 ? {} : { page_token: pageToken }
+				}
+			});
+			return {
+				items: (data.items ?? []).map((item) => wikiNode(item, url)),
+				...data.has_more === true && data.page_token !== void 0 && data.page_token !== "" ? { pageToken: data.page_token } : {}
+			};
+		},
+		async createDocxNode(spaceId, parentNodeToken, title) {
+			const url = `/open-apis/wiki/v2/spaces/${segment(spaceId)}/nodes`;
+			return wikiNode((await call(request, {
+				method: "POST",
+				url,
+				data: {
+					obj_type: "docx",
+					node_type: "origin",
+					title,
+					...parentNodeToken === void 0 ? {} : { parent_node_token: parentNodeToken }
+				}
+			})).node, url);
+		},
+		async documentRevision(documentId) {
+			const url = `/open-apis/docx/v1/documents/${segment(documentId)}`;
+			const revision = (await call(request, {
+				method: "GET",
+				url
+			})).document?.revision_id;
+			if (typeof revision !== "number") throw new FeishuApiError(`${url}: response has no revision_id`);
+			return revision;
+		},
+		async fetchDocument(documentId, fetch) {
+			const url = `/open-apis/docs_ai/v1/documents/${segment(documentId)}/fetch`;
+			const ids = fetch.format === "xml" && fetch.withBlockIds;
+			const readOption = fetch.scope === "full" ? void 0 : {
+				read_mode: fetch.scope,
+				...fetch.startBlockId === void 0 ? {} : { start_block_id: fetch.startBlockId },
+				...fetch.endBlockId === void 0 ? {} : { end_block_id: fetch.endBlockId },
+				...fetch.keyword === void 0 ? {} : { keyword: fetch.keyword },
+				...fetch.maxDepth === void 0 ? {} : { max_depth: String(fetch.maxDepth) }
+			};
+			const document = (await call(request, {
+				method: "POST",
+				url,
+				data: {
+					format: fetch.format,
+					export_option: {
+						export_block_id: ids,
+						export_style_attrs: false,
+						export_cite_extra_data: false
+					},
+					...readOption === void 0 ? {} : { read_option: readOption }
+				}
+			})).document;
+			if (document === void 0 || typeof document.content !== "string") throw new FeishuApiError(`${url}: response has no document content`);
+			return {
+				revisionId: document.revision_id ?? 0,
+				content: document.content
+			};
+		},
+		async updateDocument(documentId, update) {
+			const data = await call(request, {
+				method: "PUT",
+				url: `/open-apis/docs_ai/v1/documents/${segment(documentId)}`,
+				data: {
+					format: update.format,
+					command: update.command,
+					...update.content === void 0 ? {} : { content: update.content },
+					...update.pattern === void 0 ? {} : { pattern: update.pattern },
+					...update.blockId === void 0 ? {} : { block_id: update.blockId },
+					...update.startBlockId === void 0 ? {} : { start_block_id: update.startBlockId },
+					...update.endBlockId === void 0 ? {} : { end_block_id: update.endBlockId },
+					...update.revisionId === void 0 ? {} : { revision_id: update.revisionId }
+				}
+			});
+			const warnings = Array.isArray(data.warnings) ? data.warnings.filter((item) => typeof item === "string" && item !== "") : [];
+			return {
+				result: data.result ?? "success",
+				...data.document?.revision_id === void 0 ? {} : { revisionId: data.document.revision_id },
+				...data.updated_blocks_count === void 0 ? {} : { updatedBlocks: data.updated_blocks_count },
+				warnings
+			};
+		}
+	};
+}
+//#endregion
 //#region src/feishu-channel.ts
 /**
 * Thin wrapper over the official SDK's `createLarkChannel` high-level module.
@@ -3665,6 +3887,7 @@ var LarkChannelAdapter = class {
 	requireMention;
 	dmMode;
 	slashCommands;
+	wiki;
 	constructor(options) {
 		this.channel = createLarkChannel({
 			appId: options.appId,
@@ -3683,6 +3906,7 @@ var LarkChannelAdapter = class {
 		this.dmMode = options.dmMode;
 		const rawClient = this.channel.rawClient;
 		this.slashCommands = slashCommandApi(async (input) => await rawClient.request(input));
+		this.wiki = createWikiApi(async (input) => await rawClient.request(input));
 	}
 	onMessage(handler) {
 		return this.channel.on("message", (message) => {
@@ -4830,7 +5054,7 @@ function resolveAttachmentService(ctx) {
 		if (isAttachmentStore(viaGet)) return viaGet;
 	} catch {}
 }
-const FAILURE_REASONS$1 = {
+const FAILURE_REASONS$2 = {
 	TOO_MANY_IMAGES: "图片数量超过单条消息上限",
 	IMAGES_TOO_LARGE: "图片总字节超过单条消息上限",
 	UNSUPPORTED_IMAGE_TYPE: "不支持的图片格式（仅支持 PNG/JPEG/WebP/GIF）",
@@ -4878,7 +5102,7 @@ function isAttachmentErrorCode(code) {
 }
 /** User/model-facing wording for one stable failure code. */
 function attachmentFailureReason(code) {
-	return FAILURE_REASONS$1[code];
+	return FAILURE_REASONS$2[code];
 }
 /**
 * Extract a host attachment failure code from an arbitrary thrown value.
@@ -4993,7 +5217,7 @@ var NativeAttachmentStore = class {
 		if (mediaType === void 0) return {
 			ok: false,
 			code: "UNSUPPORTED_IMAGE_TYPE",
-			reason: FAILURE_REASONS$1.UNSUPPORTED_IMAGE_TYPE
+			reason: FAILURE_REASONS$2.UNSUPPORTED_IMAGE_TYPE
 		};
 		const limits = mounted.limits;
 		if (limits !== void 0) try {
@@ -5007,7 +5231,7 @@ var NativeAttachmentStore = class {
 			if (mediaTypes !== void 0 && mediaTypes.length > 0 && !mediaTypes.includes(mediaType)) return {
 				ok: false,
 				code: "UNSUPPORTED_IMAGE_TYPE",
-				reason: FAILURE_REASONS$1.UNSUPPORTED_IMAGE_TYPE
+				reason: FAILURE_REASONS$2.UNSUPPORTED_IMAGE_TYPE
 			};
 		} catch {}
 		const name = sanitizeFileName$1(input.name);
@@ -5048,7 +5272,7 @@ var NativeAttachmentStore = class {
 		if (input.signal?.aborted === true) return {
 			ok: false,
 			code: "ABORTED",
-			reason: FAILURE_REASONS$1.ABORTED
+			reason: FAILURE_REASONS$2.ABORTED
 		};
 		const name = sanitizeFileName$1(input.name) ?? "file.bin";
 		try {
@@ -5126,18 +5350,18 @@ var NativeAttachmentStore = class {
 		if (signal?.aborted === true || isAbortError$2(error)) return {
 			ok: false,
 			code: "ABORTED",
-			reason: FAILURE_REASONS$1.ABORTED
+			reason: FAILURE_REASONS$2.ABORTED
 		};
 		const code = attachmentErrorCodeOf(error, service);
 		if (code !== void 0) return {
 			ok: false,
 			code,
-			reason: FAILURE_REASONS$1[code]
+			reason: FAILURE_REASONS$2[code]
 		};
 		return {
 			ok: false,
 			code: "ATTACHMENT_STORE_ERROR",
-			reason: `${FAILURE_REASONS$1.ATTACHMENT_STORE_ERROR}：${errorMessage(error)}`
+			reason: `${FAILURE_REASONS$2.ATTACHMENT_STORE_ERROR}：${errorMessage(error)}`
 		};
 	}
 };
@@ -5162,7 +5386,7 @@ function readPathOf(ref, kind, service) {
 		if (code !== void 0) return {
 			ok: false,
 			code,
-			reason: FAILURE_REASONS$1[code]
+			reason: FAILURE_REASONS$2[code]
 		};
 		return {
 			ok: false,
@@ -5361,7 +5585,7 @@ var InboundAttachmentStore = class {
 			if (resource.folder === true) {
 				failures.push({
 					name,
-					reason: FAILURE_REASONS$1.FOLDER_UNSUPPORTED
+					reason: FAILURE_REASONS$2.FOLDER_UNSUPPORTED
 				});
 				continue;
 			}
@@ -6290,9 +6514,26 @@ var SessionManager = class {
 const EXPIRED_ROUTE_TEXT = "该话题已超过路由保留时间，并已与原 Session 解绑。为避免误接续上下文，插件不会在此话题创建新 Session；请从私聊或群聊主会话发起新消息（群聊请 @ 机器人）创建新话题。";
 var CardDelivery = class {
 	deps;
+	/** Open `replacingCard` scopes per message id; overlapping clicks nest. */
+	inPlace = /* @__PURE__ */ new Map();
 	constructor(deps) {
 		this.deps = deps;
 	}
+	/**
+	* Run `operation` with every `standaloneReply` anchored to `messageId`
+	* patched into that (bot-sent card) message instead of replying to it.
+	* Used for picker clicks, whose synthetic message id is the picker card.
+	*/
+	async replacingCard(messageId, operation) {
+		this.inPlace.set(messageId, (this.inPlace.get(messageId) ?? 0) + 1);
+		try {
+			await operation();
+		} finally {
+			const remaining = (this.inPlace.get(messageId) ?? 1) - 1;
+			if (remaining === 0) this.inPlace.delete(messageId);
+			else this.inPlace.set(messageId, remaining);
+		}
+	}
 	/** The live channel; throws instead of silently dropping a delivery. */
 	requireChannel() {
 		const channel = this.deps.channel();
@@ -6326,13 +6567,22 @@ var CardDelivery = class {
 	/**
 	* Shared delivery policy for command-plane cards: reply in a new topic by
 	* default, then degrade to a plain reply when Feishu refuses the topic.
+	* `createThread: false` replies in the chat timeline, or inside the topic
+	* the message already belongs to. Inside `replacingCard` the card patches
+	* the anchored card instead, and falls back to a reply if the patch fails.
 	*/
 	async standaloneReply(msg, card, options = {}) {
 		const channel = this.deps.channel();
 		if (!this.deps.started() || channel === void 0) return;
+		if (this.inPlace.has(msg.messageId)) try {
+			await channel.updateCard(msg.messageId, card);
+			return;
+		} catch (error) {
+			this.deps.warn("dsh-channels: in-place update of card %s failed, replying instead: %s", msg.messageId, String(error));
+		}
 		const createThread = options.createThread ?? true;
 		try {
-			await channel.send(msg.chatId, { card }, createThread ? {
+			await channel.send(msg.chatId, { card }, createThread || msg.threadId !== void 0 ? {
 				replyTo: msg.messageId,
 				replyInThread: true
 			} : { replyTo: msg.messageId });
@@ -6437,7 +6687,7 @@ function messageReadFailureReason(code) {
 		default: return "读取飞书消息失败";
 	}
 }
-function failure$2(code, reason = messageReadFailureReason(code)) {
+function failure$3(code, reason = messageReadFailureReason(code)) {
 	return {
 		ok: false,
 		code,
@@ -6770,7 +7020,10 @@ function messageTextOf(item) {
 			return name === void 0 ? "[文件夹]" : `[文件夹 ${name}]`;
 		}
 		case "merge_forward": return "[合并转发]";
-		case "interactive": return "[卡片消息]";
+		case "interactive": {
+			const text = content === void 0 ? "" : cardText(content);
+			return text === "" ? "[卡片消息]" : `[卡片] ${text}`;
+		}
 		case "audio": return "[语音]";
 		case "video": return "[视频]";
 		case "sticker": return "[表情]";
@@ -6778,6 +7031,84 @@ function messageTextOf(item) {
 		default: return item.rawContent === void 0 || item.rawContent === "" ? `[${item.msgType} 消息]` : sanitizeExcerpt(item.rawContent);
 	}
 }
+/** Deepest card node visited by {@link cardText}; real cards nest far less. */
+const MAX_CARD_DEPTH = 12;
+/**
+* Card keys whose values are never reader-visible text: callback payloads,
+* link targets, and layout/style settings.
+*/
+const CARD_SKIPPED_KEYS = /* @__PURE__ */ new Set([
+	"value",
+	"behaviors",
+	"url",
+	"href",
+	"multi_url",
+	"image_key",
+	"img_key",
+	"icon",
+	"style",
+	"config",
+	"confirm",
+	"i18n_elements",
+	"i18n_header",
+	"user_id",
+	"open_id"
+]);
+/**
+* Flatten one card body into text. Handles both the simplified structure the
+* message read APIs return by default (`{ title, elements: [[...]] }`) and a
+* sent card's JSON 1.0/2.0 (`header.title`, `elements` or `body.elements`):
+* every `text`/`content` string and `plain_text`/`lark_md` object in reading
+* order, images as `[图片]`. A Card 1.0 localized only through
+* `i18n_header`/`i18n_elements` renders one locale. Returns `''` when no text
+* is found.
+*/
+function cardText(content) {
+	const parts = [];
+	const title = stringField$1(content, "title");
+	if (title !== void 0) parts.push(title);
+	collectCardText(asRecord$2(content.header) ?? localizedBranch(content.i18n_header), parts, 0);
+	collectCardText(content.elements ?? asRecord$2(content.body)?.elements ?? localizedBranch(content.i18n_elements), parts, 0);
+	return parts.map((part) => part.trim()).filter((part) => part !== "").join(" ");
+}
+/**
+* One locale branch of a Card 1.0 `i18n_*` map: `zh_cn` when present,
+* otherwise the first branch, so a card localized only through `i18n_*`
+* still renders once instead of once per locale.
+*/
+function localizedBranch(value) {
+	const branches = asRecord$2(value);
+	if (branches === void 0) return void 0;
+	return branches.zh_cn ?? Object.values(branches)[0];
+}
+/** Append the reader-visible text of one card node to `parts`. */
+function collectCardText(node, parts, depth) {
+	if (depth > MAX_CARD_DEPTH) return;
+	if (Array.isArray(node)) {
+		for (const child of node) collectCardText(child, parts, depth + 1);
+		return;
+	}
+	const record = asRecord$2(node);
+	if (record === void 0) return;
+	const tag = stringField$1(record, "tag");
+	if (tag === "img" || tag === "image") {
+		parts.push("[图片]");
+		return;
+	}
+	if (tag === "at") {
+		const name = stringField$1(record, "user_name");
+		parts.push(name === void 0 ? "@" : `@${name}`);
+		return;
+	}
+	for (const [key, value] of Object.entries(record)) {
+		if (CARD_SKIPPED_KEYS.has(key)) continue;
+		if (typeof value === "string") {
+			if (key === "text" || key === "content") parts.push(value);
+			continue;
+		}
+		collectCardText(value, parts, depth + 1);
+	}
+}
 /** Flatten one post body into text; inline images/files become placeholders. */
 function postText(content) {
 	const lines = [];
@@ -7030,7 +7361,7 @@ var MessageReader = class {
 	* flat container + children list the P0 probe documented.
 	*/
 	async readMessage(messageId, options = {}) {
-		if (messageId === "") return failure$2("INVALID_ARGUMENT", "message_id 不能为空");
+		if (messageId === "") return failure$3("INVALID_ARGUMENT", "message_id 不能为空");
 		return await this.readWith((channel) => {
 			const get = channel.messageGet;
 			if (get === void 0) throw new Error("当前飞书通道不支持读取消息内容（message.get 不可用）");
@@ -7043,19 +7374,19 @@ var MessageReader = class {
 	* calls so the same public behavior is available everywhere.
 	*/
 	async readMessages(messageIds, options = {}) {
-		if (messageIds.length === 0) return failure$2("INVALID_ARGUMENT", "message_ids 不能为空");
-		if (messageIds.length > 50) return failure$2("INVALID_ARGUMENT", `一次最多批量读取 50 条消息（本次 ${messageIds.length} 条）`);
+		if (messageIds.length === 0) return failure$3("INVALID_ARGUMENT", "message_ids 不能为空");
+		if (messageIds.length > 50) return failure$3("INVALID_ARGUMENT", `一次最多批量读取 50 条消息（本次 ${messageIds.length} 条）`);
 		const deduped = [...new Set(messageIds)];
-		if (options.signal?.aborted === true) return failure$2("ABORTED");
+		if (options.signal?.aborted === true) return failure$3("ABORTED");
 		const scope = createReadScope(options);
 		try {
 			const channel = this.channelOrUndefined();
-			if (channel === void 0) return failure$2("CHANNEL_UNAVAILABLE");
-			if (scope.signal.aborted) return failure$2("ABORTED");
+			if (channel === void 0) return failure$3("CHANNEL_UNAVAILABLE");
+			if (scope.signal.aborted) return failure$3("ABORTED");
 			if (channel.messageMget !== void 0) {
 				const response = await cancellable$1(Promise.resolve(channel.messageMget.call(channel, deduped)), scope.signal);
 				const items = parseMessageItems(response);
-				if (items === void 0) return failureFromResponse(response) ?? failure$2("MESSAGE_READ_FAILED", "飞书批量读取消息返回了无法识别的结果");
+				if (items === void 0) return failureFromResponse(response) ?? failure$3("MESSAGE_READ_FAILED", "飞书批量读取消息返回了无法识别的结果");
 				return {
 					ok: true,
 					value: items
@@ -7063,12 +7394,12 @@ var MessageReader = class {
 			}
 			const items = [];
 			for (const id of deduped) {
-				if (scope.signal.aborted) return failure$2("ABORTED");
+				if (scope.signal.aborted) return failure$3("ABORTED");
 				const get = channel.messageGet;
-				if (get === void 0) return failure$2("MESSAGE_READ_FAILED", "当前飞书通道不支持读取消息内容（message.get 不可用）");
+				if (get === void 0) return failure$3("MESSAGE_READ_FAILED", "当前飞书通道不支持读取消息内容（message.get 不可用）");
 				const response = await cancellable$1(Promise.resolve(get.call(channel, id)), scope.signal);
 				const parsed = parseMessageItems(response);
-				if (parsed === void 0) return failureFromResponse(response) ?? failure$2("MESSAGE_READ_FAILED", "飞书读取消息返回了无法识别的结果");
+				if (parsed === void 0) return failureFromResponse(response) ?? failure$3("MESSAGE_READ_FAILED", "飞书读取消息返回了无法识别的结果");
 				items.push(...parsed);
 			}
 			return {
@@ -7083,12 +7414,12 @@ var MessageReader = class {
 	}
 	/** List one topic's messages (`container_id_type=thread`). */
 	async listThread(threadId, options = {}) {
-		if (threadId === "") return failure$2("INVALID_ARGUMENT", "thread id 不能为空");
+		if (threadId === "") return failure$3("INVALID_ARGUMENT", "thread id 不能为空");
 		return await this.listContainer("thread", threadId, options);
 	}
 	/** List one chat's main timeline (`container_id_type=chat`). */
 	async listChat(chatId, options = {}) {
-		if (chatId === "") return failure$2("INVALID_ARGUMENT", "chat id 不能为空");
+		if (chatId === "") return failure$3("INVALID_ARGUMENT", "chat id 不能为空");
 		return await this.listContainer("chat", chatId, options);
 	}
 	/**
@@ -7129,14 +7460,14 @@ var MessageReader = class {
 	}
 	/** Shared call/parse/failure plumbing of every wrapper. */
 	async readWith(operation, parse, options) {
-		if (options.signal?.aborted === true) return failure$2("ABORTED");
+		if (options.signal?.aborted === true) return failure$3("ABORTED");
 		const channel = this.channelOrUndefined();
-		if (channel === void 0) return failure$2("CHANNEL_UNAVAILABLE");
+		if (channel === void 0) return failure$3("CHANNEL_UNAVAILABLE");
 		const scope = createReadScope(options);
 		try {
 			const response = await cancellable$1(operation(channel), scope.signal);
 			const parsed = parse(response);
-			if (parsed === void 0) return failureFromResponse(response) ?? failure$2("MESSAGE_READ_FAILED", "飞书消息接口返回了无法识别的结果");
+			if (parsed === void 0) return failureFromResponse(response) ?? failure$3("MESSAGE_READ_FAILED", "飞书消息接口返回了无法识别的结果");
 			return {
 				ok: true,
 				value: parsed
@@ -7296,8 +7627,8 @@ function failureFromResponse(response) {
 	const msg = stringField$1(root, "msg") ?? stringField$1(body, "msg");
 	const permission = code === 99991672 || code === 99991679 || code === 99991663 || msg !== void 0 && /permission|scope|forbidden|not authorized|无权限/iu.test(msg);
 	const detail = sanitizePlainText(`code=${code}${msg === void 0 ? "" : ` ${msg}`}`);
-	if (permission) return failure$2("PERMISSION_DENIED", `${messageReadFailureReason("PERMISSION_DENIED")}（${detail}）`);
-	return failure$2("MESSAGE_READ_FAILED", `${messageReadFailureReason("MESSAGE_READ_FAILED")}：${detail}`);
+	if (permission) return failure$3("PERMISSION_DENIED", `${messageReadFailureReason("PERMISSION_DENIED")}（${detail}）`);
+	return failure$3("MESSAGE_READ_FAILED", `${messageReadFailureReason("MESSAGE_READ_FAILED")}：${detail}`);
 }
 /**
 * Map one thrown Feishu/HTTP error into a structured failure. Permission
@@ -7305,8 +7636,8 @@ function failureFromResponse(response) {
 * without treating the turn as failed (AC6).
 */
 function classifyReadError(error, timedOut = false) {
-	if (timedOut) return failure$2("TIMEOUT", messageReadFailureReason("TIMEOUT"));
-	if (isAbortError$1(error)) return failure$2("ABORTED", messageReadFailureReason("ABORTED"));
+	if (timedOut) return failure$3("TIMEOUT", messageReadFailureReason("TIMEOUT"));
+	if (isAbortError$1(error)) return failure$3("ABORTED", messageReadFailureReason("ABORTED"));
 	const record = asRecord$2(error);
 	const response = asRecord$2(record?.response);
 	const responseData = asRecord$2(response?.data);
@@ -7316,8 +7647,8 @@ function classifyReadError(error, timedOut = false) {
 	const message = apiMessage ?? (error instanceof Error ? error.message : void 0);
 	const permission = status === 403 || status === 401 || code === 99991672 || code === 99991679 || code === 99991663 || message !== void 0 && /permission|scope|forbidden|not authorized|无权限/iu.test(message);
 	const detail = code !== void 0 || apiMessage !== void 0 ? sanitizePlainText([code === void 0 ? void 0 : `code=${code}`, apiMessage].filter(Boolean).join(" ")) : describeReadError(error);
-	if (permission) return failure$2("PERMISSION_DENIED", `${messageReadFailureReason("PERMISSION_DENIED")}（${detail}）`);
-	return failure$2("MESSAGE_READ_FAILED", `${messageReadFailureReason("MESSAGE_READ_FAILED")}：${detail}`);
+	if (permission) return failure$3("PERMISSION_DENIED", `${messageReadFailureReason("PERMISSION_DENIED")}（${detail}）`);
+	return failure$3("MESSAGE_READ_FAILED", `${messageReadFailureReason("MESSAGE_READ_FAILED")}：${detail}`);
 }
 //#endregion
 //#region src/feishu/tools.ts
@@ -7460,7 +7791,7 @@ function attachmentFetchFailureReason(code) {
 	const host = attachmentFailureReason(code);
 	return typeof host === "string" && host.length > 0 ? host : FETCH_FAILURE_REASONS.INTERNAL_ERROR ?? "附件获取失败";
 }
-function failure$1(code, reason) {
+function failure$2(code, reason) {
 	return {
 		ok: false,
 		code,
@@ -7692,9 +8023,9 @@ var AttachmentFetchToolRuntime = class {
 		}
 		const args = parsed.data;
 		const messageId = args.message_id;
-		if (!this.enabled()) return callFailure(messageId, failure$1("TOOL_DISABLED"));
+		if (!this.enabled()) return callFailure(messageId, failure$2("TOOL_DISABLED"));
 		const route = this.deps.routeOfSession(sessionId);
-		if (route === void 0) return callFailure(messageId, failure$1("ROUTE_NOT_FOUND"));
+		if (route === void 0) return callFailure(messageId, failure$2("ROUTE_NOT_FOUND"));
 		const config = this.deps.config().feishuTools;
 		const scope = createAbortScope(exec.signal, config.attachmentFetchTimeoutMs);
 		const budget = {
@@ -7716,8 +8047,8 @@ var AttachmentFetchToolRuntime = class {
 		try {
 			return await this.fetch(call);
 		} catch (error) {
-			if (budget.exceeded) return callFailure(messageId, failure$1("BYTES_LIMIT"));
-			if (scope.signal.aborted) return callFailure(messageId, failure$1(scope.timeout.value ? "TIMEOUT" : "ABORTED"));
+			if (budget.exceeded) return callFailure(messageId, failure$2("BYTES_LIMIT"));
+			if (scope.signal.aborted) return callFailure(messageId, failure$2(scope.timeout.value ? "TIMEOUT" : "ABORTED"));
 			const reason = `${attachmentFetchFailureReason("INTERNAL_ERROR")}：${describeUnexpectedError(error)}`;
 			this.deps.warn("dsh-channels: %s failed unexpectedly: %s", ATTACHMENT_FETCH_TOOL_NAME, reason);
 			return callFailure(messageId, {
@@ -7731,11 +8062,11 @@ var AttachmentFetchToolRuntime = class {
 	}
 	async fetch(call) {
 		const messageId = call.args.message_id;
-		if (call.signal.aborted) return callFailure(messageId, failure$1(call.timeout.value ? "TIMEOUT" : "ABORTED"));
+		if (call.signal.aborted) return callFailure(messageId, failure$2(call.timeout.value ? "TIMEOUT" : "ABORTED"));
 		const known = await this.resolveKnownMessage(call, messageId);
 		if (known === void 0) {
-			if (call.signal.aborted) return callFailure(messageId, failure$1(call.timeout.value ? "TIMEOUT" : "ABORTED"));
-			return callFailure(messageId, failure$1("AUTHORIZATION_DENIED"));
+			if (call.signal.aborted) return callFailure(messageId, failure$2(call.timeout.value ? "TIMEOUT" : "ABORTED"));
+			return callFailure(messageId, failure$2("AUTHORIZATION_DENIED"));
 		}
 		let resources = [...known.resources];
 		if (resources.length === 0) {
@@ -7752,11 +8083,11 @@ var AttachmentFetchToolRuntime = class {
 				const shown = knownKeys.slice(0, 10);
 				const hidden = knownKeys.length - shown.length;
 				const available = knownKeys.length === 0 ? "" : `（可用：${shown.join("、")}${hidden > 0 ? ` 等 ${knownKeys.length} 个` : ""}）`;
-				return callFailure(messageId, failure$1("UNKNOWN_FILE_KEY", `${attachmentFetchFailureReason("UNKNOWN_FILE_KEY")}：${displayText$1(key)}${available}`));
+				return callFailure(messageId, failure$2("UNKNOWN_FILE_KEY", `${attachmentFetchFailureReason("UNKNOWN_FILE_KEY")}：${displayText$1(key)}${available}`));
 			}
 		}
-		if (resources.length === 0) return callFailure(messageId, failure$1("NO_RESOURCES"));
-		if (resources.length > call.limits.maxResources) return callFailure(messageId, failure$1("RESOURCE_LIMIT", `${attachmentFetchFailureReason("RESOURCE_LIMIT")}（本消息 ${resources.length} 个，单次上限 ${call.limits.maxResources} 个；请用 file_key 分批获取）`));
+		if (resources.length === 0) return callFailure(messageId, failure$2("NO_RESOURCES"));
+		if (resources.length > call.limits.maxResources) return callFailure(messageId, failure$2("RESOURCE_LIMIT", `${attachmentFetchFailureReason("RESOURCE_LIMIT")}（本消息 ${resources.length} 个，单次上限 ${call.limits.maxResources} 个；请用 file_key 分批获取）`));
 		this.rememberKnownMessage(call, known, allResources);
 		const results = [];
 		for (let index = 0; index < resources.length; index += 1) {
@@ -7768,12 +8099,12 @@ var AttachmentFetchToolRuntime = class {
 				break;
 			}
 			if (call.budget.exceeded) {
-				results.push(failedItem(resource, failure$1("BYTES_LIMIT")));
-				for (const rest of resources.slice(index + 1)) results.push(failedItem(rest, failure$1("BYTES_LIMIT")));
+				results.push(failedItem(resource, failure$2("BYTES_LIMIT")));
+				for (const rest of resources.slice(index + 1)) results.push(failedItem(rest, failure$2("BYTES_LIMIT")));
 				break;
 			}
 			if (call.channel === void 0) {
-				results.push(failedItem(resource, failure$1("CHANNEL_UNAVAILABLE")));
+				results.push(failedItem(resource, failure$2("CHANNEL_UNAVAILABLE")));
 				continue;
 			}
 			results.push(await this.fetchResource(call, known, resource));
@@ -7825,18 +8156,18 @@ var AttachmentFetchToolRuntime = class {
 	*/
 	async expandMessageResources(call, message) {
 		const channel = call.channel;
-		if (channel === void 0) return failure$1("CHANNEL_UNAVAILABLE");
+		if (channel === void 0) return failure$2("CHANNEL_UNAVAILABLE");
 		const messageGet = channel.messageGet;
-		if (messageGet === void 0) return failure$1("MESSAGE_READ_FAILED", `${attachmentFetchFailureReason("MESSAGE_READ_FAILED")}：当前飞书通道不支持读取消息内容，无法展开附件`);
+		if (messageGet === void 0) return failure$2("MESSAGE_READ_FAILED", `${attachmentFetchFailureReason("MESSAGE_READ_FAILED")}：当前飞书通道不支持读取消息内容，无法展开附件`);
 		let response;
 		try {
 			response = await cancellable(Promise.resolve(messageGet.call(channel, message.messageId)), call.signal);
 		} catch (error) {
 			if (isAbortError(error)) throw error;
-			return failure$1("MESSAGE_READ_FAILED", `${attachmentFetchFailureReason("MESSAGE_READ_FAILED")}：${describeFetchError(error)}`);
+			return failure$2("MESSAGE_READ_FAILED", `${attachmentFetchFailureReason("MESSAGE_READ_FAILED")}：${describeFetchError(error)}`);
 		}
 		const items = rawMessageItems(response);
-		if (items === void 0) return failure$1("MESSAGE_READ_FAILED", `${attachmentFetchFailureReason("MESSAGE_READ_FAILED")}：返回内容无法识别`);
+		if (items === void 0) return failure$2("MESSAGE_READ_FAILED", `${attachmentFetchFailureReason("MESSAGE_READ_FAILED")}：返回内容无法识别`);
 		return {
 			ok: true,
 			resources: message.kind === "merge_forward" ? mergedForwardResources(items) : messageResourcesOfItems(items)
@@ -7844,17 +8175,17 @@ var AttachmentFetchToolRuntime = class {
 	}
 	async fetchResource(call, message, resource) {
 		const downloadId = resource.containerMessageId ?? message.messageId;
-		if (resource.folder === true) return failedItem(resource, failure$1("FOLDER_UNSUPPORTED"));
+		if (resource.folder === true) return failedItem(resource, failure$2("FOLDER_UNSUPPORTED"));
 		if (resource.type === "image") return await this.fetchImage(call, downloadId, resource);
 		return await this.fetchFile(call, downloadId, resource);
 	}
 	async fetchImage(call, downloadId, resource) {
 		const channel = call.channel;
-		if (channel === void 0) return failedItem(resource, failure$1("CHANNEL_UNAVAILABLE"));
+		if (channel === void 0) return failedItem(resource, failure$2("CHANNEL_UNAVAILABLE"));
 		const remaining = call.budget.maxBytes - call.budget.usedBytes;
 		if (remaining <= 0) {
 			call.budget.exceeded = true;
-			return failedItem(resource, failure$1("BYTES_LIMIT"));
+			return failedItem(resource, failure$2("BYTES_LIMIT"));
 		}
 		const imageCap = call.imageCap;
 		const limit = Math.min(imageCap, remaining);
@@ -7870,9 +8201,9 @@ var AttachmentFetchToolRuntime = class {
 		} catch (error) {
 			if (error instanceof BudgetExceededError) {
 				call.budget.exceeded = true;
-				return failedItem(resource, failure$1("BYTES_LIMIT"));
+				return failedItem(resource, failure$2("BYTES_LIMIT"));
 			}
-			if (error instanceof ImageTooLargeError) return failedItem(resource, failure$1("IMAGE_TOO_LARGE"));
+			if (error instanceof ImageTooLargeError) return failedItem(resource, failure$2("IMAGE_TOO_LARGE"));
 			return downloadFailureItem(resource, error, call);
 		}
 		let saved;
@@ -7902,10 +8233,10 @@ var AttachmentFetchToolRuntime = class {
 	}
 	async fetchFile(call, downloadId, resource) {
 		const channel = call.channel;
-		if (channel === void 0) return failedItem(resource, failure$1("CHANNEL_UNAVAILABLE"));
+		if (channel === void 0) return failedItem(resource, failure$2("CHANNEL_UNAVAILABLE"));
 		if (call.budget.maxBytes <= call.budget.usedBytes) {
 			call.budget.exceeded = true;
-			return failedItem(resource, failure$1("BYTES_LIMIT"));
+			return failedItem(resource, failure$2("BYTES_LIMIT"));
 		}
 		let stream;
 		try {
@@ -7922,11 +8253,11 @@ var AttachmentFetchToolRuntime = class {
 				...resource.fileName === void 0 ? {} : { name: resource.fileName }
 			}), call.signal);
 		} catch (error) {
-			if (call.budget.exceeded) return failedItem(resource, failure$1("BYTES_LIMIT"));
+			if (call.budget.exceeded) return failedItem(resource, failure$2("BYTES_LIMIT"));
 			return downloadFailureItem(resource, error, call);
 		}
 		if (!saved.ok) {
-			if (call.budget.exceeded) return failedItem(resource, failure$1("BYTES_LIMIT"));
+			if (call.budget.exceeded) return failedItem(resource, failure$2("BYTES_LIMIT"));
 			if (call.signal.aborted) return cancelledItem(resource, call.timeout.value);
 			return failedItem(resource, saved);
 		}
@@ -7943,9 +8274,9 @@ var AttachmentFetchToolRuntime = class {
 };
 /** Map one thrown download/store error into a structured item. */
 function downloadFailureItem(resource, error, call) {
-	if (call.budget.exceeded) return failedItem(resource, failure$1("BYTES_LIMIT"));
+	if (call.budget.exceeded) return failedItem(resource, failure$2("BYTES_LIMIT"));
 	if (call.signal.aborted) return cancelledItem(resource, call.timeout.value);
-	return failedItem(resource, failure$1("DOWNLOAD_FAILED", `${attachmentFetchFailureReason("DOWNLOAD_FAILED")}：${describeFetchError(error)}`));
+	return failedItem(resource, failure$2("DOWNLOAD_FAILED", `${attachmentFetchFailureReason("DOWNLOAD_FAILED")}：${describeFetchError(error)}`));
 }
 /**
 * Run one promise with cooperative cancellation: an aborted signal rejects the
@@ -8076,7 +8407,7 @@ function failedItem(resource, result) {
 	};
 }
 function cancelledItem(resource, timedOut) {
-	return failedItem(resource, failure$1(timedOut ? "TIMEOUT" : "ABORTED"));
+	return failedItem(resource, failure$2(timedOut ? "TIMEOUT" : "ABORTED"));
 }
 function callFailure(messageId, result) {
 	return {
@@ -9006,7 +9337,7 @@ const SEND_FILE_PARAMETERS = {
 	required: ["path"],
 	additionalProperties: false
 };
-const FAILURE_REASONS = {
+const FAILURE_REASONS$1 = {
 	TOOL_DISABLED: "feishu_send_file 已在插件配置中关闭",
 	ROUTE_NOT_FOUND: "当前会话没有绑定飞书话题或会话，无法确定发送目标",
 	CHANNEL_UNAVAILABLE: "飞书连接当前不可用，请稍后重试",
@@ -9099,7 +9430,7 @@ var SendFileToolRuntime = class {
 		try {
 			tools.register(this.definitionFor(sessionId));
 		} catch (error) {
-			this.warnMountFailure(`dsh-channels: registering ${SEND_FILE_TOOL_NAME} failed: ${describeError(error)}`);
+			this.warnMountFailure(`dsh-channels: registering ${SEND_FILE_TOOL_NAME} failed: ${describeError$1(error)}`);
 		}
 	}
 	warnMountFailure(message) {
@@ -9130,14 +9461,14 @@ var SendFileToolRuntime = class {
 			throw new Error(`${SEND_FILE_TOOL_NAME}: invalid ${where}: ${issue?.message ?? "invalid arguments"}`);
 		}
 		const args = parsed.data;
-		if (!this.enabled()) return failure("TOOL_DISABLED");
+		if (!this.enabled()) return failure$1("TOOL_DISABLED");
 		const target = this.deps.targetOfSession(sessionId);
-		if (target === void 0) return failure("ROUTE_NOT_FOUND");
+		if (target === void 0) return failure$1("ROUTE_NOT_FOUND");
 		const loaded = await loadWorkspaceFile(target.rootDir, args);
 		if (!loaded.ok) return loaded;
-		if (exec.signal.aborted) return failure("ABORTED");
+		if (exec.signal.aborted) return failure$1("ABORTED");
 		const channel = this.deps.channel();
-		if (channel === void 0) return failure("CHANNEL_UNAVAILABLE");
+		if (channel === void 0) return failure$1("CHANNEL_UNAVAILABLE");
 		const { kind, fileName, data } = loaded;
 		const media = kind === "image" ? {
 			kind,
@@ -9161,14 +9492,14 @@ var SendFileToolRuntime = class {
 			};
 		} catch (error) {
 			if (exec.signal.aborted) {
-				sent?.catch((late) => this.deps.warn("dsh-channels: %s failed after abort: %s", SEND_FILE_TOOL_NAME, describeError(late)));
-				return failure("ABORTED");
+				sent?.catch((late) => this.deps.warn("dsh-channels: %s failed after abort: %s", SEND_FILE_TOOL_NAME, describeError$1(late)));
+				return failure$1("ABORTED");
 			}
-			const detail = describeError(error);
-			if (isPermissionError(error)) return failure("PERMISSION_DENIED", `${FAILURE_REASONS.PERMISSION_DENIED}（${detail}）`);
-			if (error instanceof FeishuApiError && error.code !== void 0 && REPLY_TARGET_GONE_CODES.has(error.code)) return failure("REPLY_TARGET_GONE");
+			const detail = describeError$1(error);
+			if (isPermissionError(error)) return failure$1("PERMISSION_DENIED", `${FAILURE_REASONS$1.PERMISSION_DENIED}（${detail}）`);
+			if (error instanceof FeishuApiError && error.code !== void 0 && REPLY_TARGET_GONE_CODES.has(error.code)) return failure$1("REPLY_TARGET_GONE");
 			this.deps.warn("dsh-channels: %s failed: %s", SEND_FILE_TOOL_NAME, detail);
-			return failure("SEND_FAILED", `${FAILURE_REASONS.SEND_FAILED}：${detail}`);
+			return failure$1("SEND_FAILED", `${FAILURE_REASONS$1.SEND_FAILED}：${detail}`);
 		}
 	}
 };
@@ -9184,41 +9515,41 @@ async function loadWorkspaceFile(rootDir, args) {
 	try {
 		root = await realpath(rootDir);
 	} catch (error) {
-		return failure("FILE_NOT_FOUND", `当前话题工作目录不可用：${describeError(error)}`);
+		return failure$1("FILE_NOT_FOUND", `当前话题工作目录不可用：${describeError$1(error)}`);
 	}
 	let real;
 	try {
 		real = await realpath(path.resolve(root, args.path));
 	} catch {
-		return isInside(root, path.resolve(root, args.path)) ? failure("FILE_NOT_FOUND") : failure("PATH_OUTSIDE_WORKSPACE");
+		return isInside(root, path.resolve(root, args.path)) ? failure$1("FILE_NOT_FOUND") : failure$1("PATH_OUTSIDE_WORKSPACE");
 	}
-	if (!isInside(root, real)) return failure("PATH_OUTSIDE_WORKSPACE");
+	if (!isInside(root, real)) return failure$1("PATH_OUTSIDE_WORKSPACE");
 	const requested = args.kind ?? "auto";
 	const ceiling = requested === "image" ? FEISHU_IMAGE_MAX_BYTES : FEISHU_FILE_MAX_BYTES;
 	let handle;
 	try {
 		handle = await open(real, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
 	} catch (error) {
-		return failure("FILE_NOT_FOUND", `${FAILURE_REASONS.FILE_NOT_FOUND}：${describeError(error)}`);
+		return failure$1("FILE_NOT_FOUND", `${FAILURE_REASONS$1.FILE_NOT_FOUND}：${describeError$1(error)}`);
 	}
 	let data;
 	try {
 		const info = await handle.stat();
-		if (!info.isFile()) return failure("NOT_A_FILE");
+		if (!info.isFile()) return failure$1("NOT_A_FILE");
 		const recheck = await realpath(real).then((again) => isInside(root, again) ? stat(again) : void 0, () => void 0);
-		if (recheck === void 0 || recheck.dev !== info.dev || recheck.ino !== info.ino) return failure("PATH_OUTSIDE_WORKSPACE");
-		if (info.size === 0) return failure("EMPTY_FILE");
+		if (recheck === void 0 || recheck.dev !== info.dev || recheck.ino !== info.ino) return failure$1("PATH_OUTSIDE_WORKSPACE");
+		if (info.size === 0) return failure$1("EMPTY_FILE");
 		if (info.size > ceiling) return tooLarge(requested === "image" ? "image" : "file", info.size);
 		data = await handle.readFile();
 	} catch (error) {
-		return failure("FILE_NOT_FOUND", `${FAILURE_REASONS.FILE_NOT_FOUND}：${describeError(error)}`);
+		return failure$1("FILE_NOT_FOUND", `${FAILURE_REASONS$1.FILE_NOT_FOUND}：${describeError$1(error)}`);
 	} finally {
 		await handle.close().catch(() => void 0);
 	}
-	if (data.length === 0) return failure("EMPTY_FILE");
+	if (data.length === 0) return failure$1("EMPTY_FILE");
 	if (data.length > ceiling) return tooLarge(requested === "image" ? "image" : "file", data.length);
 	const isImage = isFeishuImage(data);
-	if (requested === "image" && !isImage) return failure("NOT_AN_IMAGE");
+	if (requested === "image" && !isImage) return failure$1("NOT_AN_IMAGE");
 	return {
 		ok: true,
 		kind: requested === "file" ? "file" : requested === "image" ? "image" : isImage && data.length <= 10485760 ? "image" : "file",
@@ -9248,19 +9579,19 @@ function sanitizeFileName(value) {
 function tooLarge(kind, bytes) {
 	const limit = kind === "image" ? FEISHU_IMAGE_MAX_BYTES : FEISHU_FILE_MAX_BYTES;
 	const hint = kind === "image" ? "；可用 kind=file 以文件发送（上限 30 MB）" : "；请压缩或拆分后再发送";
-	return failure("FILE_TOO_LARGE", `${FAILURE_REASONS.FILE_TOO_LARGE}：${formatBytes(bytes)} > ${kind === "image" ? "图片" : "文件"}上限 ${formatBytes(limit)}${hint}`);
+	return failure$1("FILE_TOO_LARGE", `${FAILURE_REASONS$1.FILE_TOO_LARGE}：${formatBytes(bytes)} > ${kind === "image" ? "图片" : "文件"}上限 ${formatBytes(limit)}${hint}`);
 }
-function failure(code, reason) {
+function failure$1(code, reason) {
 	return {
 		ok: false,
 		code,
-		reason: reason ?? FAILURE_REASONS[code]
+		reason: reason ?? FAILURE_REASONS$1[code]
 	};
 }
 /** Feishu codes for a recalled/deleted reply target (the SDK's `target_revoked`). */
 const REPLY_TARGET_GONE_CODES = /* @__PURE__ */ new Set([230020, 230017]);
 /** Feishu codes for a missing app scope. */
-const PERMISSION_CODES = /* @__PURE__ */ new Set([
+const PERMISSION_CODES$1 = /* @__PURE__ */ new Set([
 	99991672,
 	99991679,
 	230027
@@ -9295,13 +9626,13 @@ function feishuBody(error) {
 function isPermissionError(error) {
 	return errorChain(error).some((item) => {
 		const body = feishuBody(item);
-		if (body?.code !== void 0 && PERMISSION_CODES.has(body.code)) return true;
+		if (body?.code !== void 0 && PERMISSION_CODES$1.has(body.code)) return true;
 		const text = `${body?.msg ?? ""} ${item instanceof Error ? item.message : ""}`;
 		return /status code 403|access denied|scope|permission/iu.test(text);
 	});
 }
 /** Readable, bounded text for a thrown value and its Feishu cause. */
-function describeError(error) {
+function describeError$1(error) {
 	const parts = [];
 	for (const item of errorChain(error)) {
 		const body = feishuBody(item);
@@ -9370,102 +9701,1393 @@ function presentSendFileResult(value) {
 	return `发送失败（${value.code}）：${value.reason}`;
 }
 //#endregion
-//#region src/routing/inbound.ts
+//#region src/cards/wiki.ts
 /**
-* Inbound routing: dedup, admission, the route decision tree, and the
-* session-establishment / continuation flow.
-*
-* Everything here is channel-plane policy; the command plane (slash commands)
-* and the answerers stay in the service and are reached through narrow ports.
-* Dependency reads go through accessors so the moved logic stays readable.
+* Wiki (知识库) authorization cards: the topic owner's consent before the
+* model opens, creates, or edits a wiki document.
 *
-* @module dsh-channels/routing/inbound
+* @module dsh-channels/cards/wiki
 */
-/** Confirmation line for each keyword approval reply. */
-const APPROVAL_TEXT_REPLIES = {
-	allowed: "已允许本次操作。",
-	remembered: "已允许，本话题内同类操作不再询问。",
-	denied: "已拒绝本次操作。"
+/** Cap on one rendered detail block so the card stays readable on a phone. */
+const DETAIL_MAX_CHARS = 800;
+const ACTION_LABELS = {
+	read: "读取文档",
+	create: "新建文档",
+	edit: "修改文档"
+};
+const SETTLED_LINES = {
+	allowed: "✅ 已允许",
+	denied: "❌ 已拒绝",
+	expired: "⏱ 已超时未处理，自动拒绝",
+	cancelled: "↩️ 请求已取消"
 };
+/** Clip one value to `max` characters, marking the cut. */
+function clip(value, max) {
+	return value.length <= max ? value : `${value.slice(0, max)}…（已截断 ${value.length - max} 个字符）`;
+}
+/** One line of Markdown text with link/markup characters neutralized. */
+function plain(value) {
+	return value.replace(/[\u0000-\u001f\u007f]+/gu, " ").replace(/([[\]()*_`~<>])/gu, "\\$1").trim();
+}
+/** The question summary shared by the pending and settled variants. */
+function questionElements(question) {
+	const title = question.title === "" ? "（无标题）" : plain(question.title);
+	const titleLine = question.url === void 0 || question.action === "create" ? title : `[${title}](${question.url})`;
+	const elements = [markdown([
+		`机器人请求以应用身份**${ACTION_LABELS[question.action]}**。`,
+		`**文档**：${titleLine}`,
+		`**位置**：${plain(question.location)}`
+	].join("\n"))];
+	for (const detail of question.details) elements.push(markdown(clip(detail, DETAIL_MAX_CHARS)));
+	return elements;
+}
+function consentButton(question, decision) {
+	return textButton({
+		label: decision === "allow" ? "✅ 允许" : "❌ 拒绝",
+		type: decision === "allow" ? "primary" : "danger",
+		width: "fill",
+		value: {
+			decision,
+			token: question.token
+		}
+	});
+}
 /**
-* User-facing text for attachments that could not be archived. Delivered as a
-* plain reply (never a card) so the user learns why the Agent cannot read a
-* file instead of silently getting an answer about older attachments.
+* The pending consent card, sent as a reply in the session's topic.
+*
+* @param question The consent asked for.
+* @param options Rendering options.
+* @returns Card JSON 2.0.
 */
-function buildAttachmentFailureNotice(failures) {
-	return [
-		"⚠️ 附件保存失败，Agent 无法读取：",
-		...failures.map((failure) => `• ${failure.name}：${failure.reason}`),
-		"可尝试压缩/拆分后重发，或把文件直接放到工作区目录。"
-	].join("\n");
-}
-/** Build one durable user message from inbound Feishu text. */
-function feishuUserMessage(text) {
-	return {
-		id: randomUUID(),
-		role: "user",
-		content: [{
-			type: "text",
-			text
-		}],
-		source: { kind: "user" }
-	};
+function buildWikiConsentCard(question, options = {}) {
+	const minutes = Math.max(1, Math.round(question.timeoutMs / 6e4));
+	const scope = question.action === "read" ? "允许后，本话题内再次读取这篇文档不再询问" : "仅对这一次操作生效";
+	const elements = [
+		...questionElements(question),
+		divider(),
+		note(`⏱ ${minutes} 分钟内有效，超时自动拒绝 · ${scope}`)
+	];
+	if (options.unauthorizedNote === true) elements.push(note("ℹ️ 仅发起该话题的用户可操作此卡片"));
+	elements.push(columnSet([consentButton(question, "allow"), consentButton(question, "deny")]));
+	return standaloneCard("**📚 知识库授权**", elements);
 }
 /**
-* Whitelist registration input for one triggering message.
+* The terminal replacement after the consent settles; no controls.
 *
-* The fetch tool requires explicit per-route authorization; the trigger
-* message is the one exception the admission layer can vouch for. Resources
-* are copied from the same normalization the manifest uses, and merged-forward
-* containers carry no direct resources (the tool expands them through the
-* container id, per the P0 rule).
+* @param question The consent that was asked for.
+* @param state How it settled.
+* @returns Card JSON 2.0.
 */
-function knownAttachmentMessageOf(msg) {
-	const forwarded = msg.rawContentType === "merge_forward";
-	const resources = attachmentResources(msg).map((resource) => ({
-		type: resource.type,
-		fileKey: resource.fileKey,
-		...resource.fileName === void 0 ? {} : { fileName: resource.fileName },
-		...resource.folder === true ? { folder: true } : {}
-	}));
-	return {
-		messageId: msg.messageId,
-		kind: forwarded ? "merge_forward" : "message",
-		resources,
-		senderUserId: msg.senderId
-	};
+function buildWikiConsentSettledCard(question, state) {
+	return standaloneCard(`**${SETTLED_LINES[state]}**`, [
+		...questionElements(question),
+		divider(),
+		note(`📚 知识库${ACTION_LABELS[question.action]}`)
+	]);
 }
-/** Feishu message-id shape accepted for quote resolution (`om_...`). */
-const QUOTE_MESSAGE_ID = /^om_[A-Za-z0-9_-]{1,128}$/u;
-var InboundRouter = class {
+//#endregion
+//#region src/feishu/wiki/consent.ts
+/**
+* Topic-owner consent for wiki tool calls.
+*
+* A wiki tool that opens, creates, or edits a document asks the topic owner
+* on a consent card in the topic and waits for the answer. Only the topic
+* owner (`route.senderUserId`) can decide; a click by anyone else adds the
+* owner-only notice once. An unanswered card is denied after the configured
+* window (`approvalTimeoutMs`). A read consent is remembered per Session and
+* document, in memory only: it ends with the Session (`/renew`) or the
+* process. Create and edit consents are never remembered.
+*
+* @module dsh-channels/feishu/wiki/consent
+*/
+/** Consent cards for the wiki tools. */
+var WikiConsent = class {
 	deps;
+	/** One table per channel instance (cards are patched through their channel). */
+	table;
+	/** sessionId → document ids with a standing read consent. */
+	readGrants = /* @__PURE__ */ new Map();
+	constructor(deps) {
+		this.deps = deps;
+	}
 	/**
-	* In-process dedup guard: message id → accept timestamp. Set synchronously
-	* at acceptance so a same-process redelivery can never slip through the
-	* window between the persisted dedup check and its `put` landing.
+	* Whether the Session already holds a read consent for one document.
+	* @param sessionId The Session.
+	* @param documentId Docx document id.
+	* @returns True when reading needs no new card.
 	*/
-	accepted = /* @__PURE__ */ new Map();
+	hasReadGrant(sessionId, documentId) {
+		return this.readGrants.get(sessionId)?.has(documentId) === true;
+	}
 	/**
-	* chat-scoped key → in-flight session establishment. Concurrent first
-	* messages of one (chat, user) pair all observe the same promise: they wait
-	* for the establishment to settle, then either continue the just-created
-	* session (same topic, or degraded chat route) or fall through to start
-	* their own — never racing each other into duplicate sessions, route
-	* overwrites, or the "no route, no mention" drop window.
+	* Record a standing read consent (after an allowed read, or for a document
+	* the topic owner just approved creating).
+	* @param sessionId The Session.
+	* @param documentId Docx document id.
 	*/
-	establishing = /* @__PURE__ */ new Map();
+	grantRead(sessionId, documentId) {
+		let grants = this.readGrants.get(sessionId);
+		if (grants === void 0) {
+			grants = /* @__PURE__ */ new Set();
+			this.readGrants.set(sessionId, grants);
+		}
+		grants.add(documentId);
+	}
 	/**
-	* route key → first-turn delivery gate. A new Session persists its route
-	* before the prompt is assembled (image prefetch); a message that observes
-	* the route in that window must wait for the first followup instead of
-	* racing it, otherwise the topic's turns reach the model out of order.
+	* Ask the topic owner and wait for the decision. Never rejects.
+	* @param request What to ask.
+	* @returns The outcome; `unavailable` when no card could be delivered.
 	*/
-	firstDeliveries = /* @__PURE__ */ new Map();
-	constructor(deps) {
-		this.deps = deps;
-	}
-	get ctx() {
-		return this.deps.ctx;
+	request(request) {
+		if (request.signal.aborted) return Promise.resolve("cancelled");
+		const channel = this.deps.channel();
+		if (channel === void 0) return Promise.resolve("unavailable");
+		const table = this.tableFor(channel);
+		const timeoutMs = this.deps.timeoutMs();
+		const question = {
+			token: randomUUID(),
+			action: request.action,
+			title: request.title,
+			...request.url === void 0 ? {} : { url: request.url },
+			location: request.location,
+			details: request.details,
+			timeoutMs
+		};
+		return new Promise((resolve) => {
+			const entry = {
+				token: question.token,
+				sessionId: request.sessionId,
+				route: request.route,
+				messageId: void 0,
+				settled: false,
+				timer: void 0,
+				signal: request.signal,
+				onAbort: void 0,
+				unauthorizedNoted: false,
+				question,
+				resolve
+			};
+			const onAbort = () => this.settle(table, entry, "cancelled", "cancelled");
+			entry.onAbort = onAbort;
+			request.signal.addEventListener("abort", onAbort, { once: true });
+			table.add(entry);
+			table.deliver(entry, {
+				card: buildWikiConsentCard(question),
+				onWithdrawn: (e) => table.patch(e, buildWikiConsentSettledCard(e.question, "cancelled")),
+				onDelivered: (e) => table.armTimeout(e, timeoutMs, () => this.settle(table, e, "expired", "expired")),
+				onFailure: (e) => this.settle(table, e, "unavailable")
+			});
+		});
+	}
+	/**
+	* Route one card button callback to its pending consent; unknown cards are
+	* ignored.
+	* @param event The card action.
+	*/
+	onCardAction(event) {
+		const table = this.table?.entries;
+		if (table === void 0) return;
+		const entry = table.resolveAction(event, (candidate) => {
+			if (candidate.unauthorizedNoted) return;
+			candidate.unauthorizedNoted = true;
+			table.patch(candidate, buildWikiConsentCard(candidate.question, { unauthorizedNote: true }));
+		});
+		if (entry === void 0) return;
+		const decision = event.action.value?.decision;
+		if (decision === "allow") this.settle(table, entry, "allowed", "allowed");
+		else if (decision === "deny") this.settle(table, entry, "denied", "denied");
+	}
+	/** Withdraw every pending card and forget every read consent (shutdown). */
+	dispose() {
+		const table = this.table?.entries;
+		table?.withdrawAll((entry) => this.settle(table, entry, "cancelled", "cancelled"));
+		this.table = void 0;
+		this.readGrants.clear();
+	}
+	/** Pending consent count (diagnostics/tests). */
+	pendingCount() {
+		return this.table?.entries.count() ?? 0;
+	}
+	tableFor(channel) {
+		if (this.table?.channel !== channel) this.table = {
+			channel,
+			entries: new PendingCardTable(channel, this.deps.onError)
+		};
+		return this.table.entries;
+	}
+	settle(table, entry, outcome, cardState) {
+		if (table.close(entry, () => {
+			if (cardState !== void 0) table.patch(entry, buildWikiConsentSettledCard(entry.question, cardState));
+		})) entry.resolve(outcome);
+	}
+};
+//#endregion
+//#region src/feishu/wiki/links.ts
+/**
+* Feishu wiki (知识库) link parsing: the `wikiRoots` allow-list entries and
+* the document references the model passes to the wiki tools.
+*
+* Pure module: no I/O. Hosts are not checked because tenants use their own
+* subdomains (`<tenant>.feishu.cn`) and the API never uses the link host.
+*
+* @module dsh-channels/feishu/wiki/links
+*/
+/** Feishu wiki space id: decimal digits. */
+const SPACE_ID_PATTERN = /^\d{1,32}$/u;
+/** Feishu wiki node / docx token: letters and digits. */
+const TOKEN_PATTERN = /^[A-Za-z0-9]{8,64}$/u;
+/** Readable reasons for {@link WikiRootLinkError}. */
+const WIKI_ROOT_LINK_ERRORS = {
+	"not-a-url": "不是有效的链接",
+	"not-https": "必须是 https 链接",
+	"not-a-wiki-link": "只支持知识空间链接 https://<租户>.feishu.cn/wiki/space/<space_id> 或节点链接 https://<租户>.feishu.cn/wiki/<node_token>"
+};
+/**
+* Parse one `wikiRoots` entry.
+*
+* @param link Link as configured (surrounding whitespace is ignored).
+* @returns The root, or the reason it is invalid.
+*/
+function parseWikiRootLink(link) {
+	const trimmed = link.trim();
+	let url;
+	try {
+		url = new URL(trimmed);
+	} catch {
+		return {
+			ok: false,
+			error: "not-a-url"
+		};
+	}
+	if (url.protocol !== "https:") return {
+		ok: false,
+		error: "not-https"
+	};
+	const segments = url.pathname.split("/").filter((segment) => segment !== "");
+	if (segments[0] !== "wiki") return {
+		ok: false,
+		error: "not-a-wiki-link"
+	};
+	if (segments.length === 3 && segments[1] === "space" && SPACE_ID_PATTERN.test(segments[2])) return {
+		ok: true,
+		root: {
+			kind: "space",
+			spaceId: segments[2],
+			link: trimmed
+		}
+	};
+	if (segments.length === 2 && segments[1] !== "space" && TOKEN_PATTERN.test(segments[1])) return {
+		ok: true,
+		root: {
+			kind: "node",
+			nodeToken: segments[1],
+			link: trimmed
+		}
+	};
+	return {
+		ok: false,
+		error: "not-a-wiki-link"
+	};
+}
+/**
+* Parse every configured root. Callers validate the config first, so an
+* invalid entry here is a programming error.
+*
+* @param links Validated `wikiRoots` entries.
+* @returns The parsed roots, in configuration order.
+*/
+function parseWikiRoots(links) {
+	return links.map((link) => {
+		const parsed = parseWikiRootLink(link);
+		if (!parsed.ok) throw new Error(`dsh-channels: invalid wikiRoots entry ${link}: ${WIKI_ROOT_LINK_ERRORS[parsed.error]}`);
+		return parsed.root;
+	});
+}
+/**
+* Parse a model-supplied reference: a wiki node link, a docx link, a space
+* link, or a bare node token.
+*
+* @param input Raw tool argument.
+* @returns The reference, or `undefined` when it names nothing recognizable.
+*/
+function parseWikiRef(input) {
+	const trimmed = input.trim();
+	if (TOKEN_PATTERN.test(trimmed)) return {
+		kind: "node",
+		token: trimmed
+	};
+	let url;
+	try {
+		url = new URL(trimmed);
+	} catch {
+		return;
+	}
+	if (url.protocol !== "https:") return void 0;
+	const segments = url.pathname.split("/").filter((segment) => segment !== "");
+	if (segments[0] === "wiki" && segments.length === 3 && segments[1] === "space" && SPACE_ID_PATTERN.test(segments[2])) return {
+		kind: "space",
+		spaceId: segments[2]
+	};
+	if (segments.length === 2 && TOKEN_PATTERN.test(segments[1])) {
+		if (segments[0] === "wiki" && segments[1] !== "space") return {
+			kind: "node",
+			token: segments[1]
+		};
+		if (segments[0] === "docx") return {
+			kind: "docx",
+			token: segments[1]
+		};
+	}
+}
+//#endregion
+//#region src/feishu/wiki/scope.ts
+/**
+* Longest parent chain walked for a node root. Feishu limits wiki depth well
+* below this; a longer chain is treated as outside.
+*/
+const MAX_PARENT_DEPTH = 64;
+/**
+* Find the configured root containing `node`.
+*
+* @param api Wiki endpoints (for parent lookups).
+* @param roots Configured roots.
+* @param node The node to check.
+* @returns The containing root, or `undefined` when none contains it.
+*/
+async function containingRoot(api, roots, node) {
+	for (const root of roots) if (root.kind === "space" && root.spaceId === node.spaceId) return { root };
+	const nodeRoots = roots.filter((root) => root.kind === "node");
+	if (nodeRoots.length === 0) return void 0;
+	const byToken = new Map(nodeRoots.map((root) => [root.nodeToken, root]));
+	let current = node;
+	for (let depth = 0; depth <= MAX_PARENT_DEPTH; depth += 1) {
+		const match = byToken.get(current.nodeToken);
+		if (match !== void 0) return { root: match };
+		if (current.parentNodeToken === void 0) return void 0;
+		current = await api.getNode(current.parentNodeToken, "wiki");
+	}
+}
+/**
+* Whether a whole space (its top level) is inside the roots: only a space
+* root covers a space's top level.
+*
+* @param roots Configured roots.
+* @param spaceId The space.
+* @returns True when a space root names it.
+*/
+function spaceIsRoot(roots, spaceId) {
+	return roots.some((root) => root.kind === "space" && root.spaceId === spaceId);
+}
+//#endregion
+//#region src/feishu/wiki/tools.ts
+/**
+* Model-facing wiki (知识库) tools: `feishu_wiki_list`, `feishu_wiki_read`
+* (switch `feishuTools.wikiRead`), `feishu_wiki_create`, and
+* `feishu_wiki_edit` (switch `feishuTools.wikiWrite`).
+*
+* Every call acts with the app identity and is gated, in order, by:
+* - the switch and a non-empty `wikiRoots` (otherwise nothing is mounted);
+* - the topic owner being the administrator or on the wiki whitelist
+*   (`/auth wiki add`), checked per call so revocation applies at once;
+* - `wikiRoots` containment of the node (see `scope.ts`);
+* - docx only for reading and editing;
+* - edits only on documents the app owns (wiki node `owner` equals the bot
+*   open_id) whose current revision equals the `revision_id` the model read;
+* - the topic owner's consent card for opening a document (remembered per
+*   Session and document), for every create, and for every edit.
+*
+* Browsing (`feishu_wiki_list`) needs no card. Every failure is a structured
+* value with a stable code and a readable reason.
+*
+* @module dsh-channels/feishu/wiki/tools
+*/
+/** Model-facing tool names; stable across releases (session history references them). */
+const WIKI_LIST_TOOL_NAME = "feishu_wiki_list";
+const WIKI_READ_TOOL_NAME = "feishu_wiki_read";
+const WIKI_CREATE_TOOL_NAME = "feishu_wiki_create";
+const WIKI_EDIT_TOOL_NAME = "feishu_wiki_edit";
+/** Longest accepted document title (characters). */
+const MAX_TITLE_CHARS = 200;
+/** Longest content one create/edit operation may carry (characters). */
+const MAX_CONTENT_CHARS = 2e5;
+/** Characters of each content shown on a consent card. */
+const PREVIEW_CHARS = 300;
+const refSchema = z.string().trim().min(1).max(2048);
+const blockIdSchema = z.string().trim().min(1).max(128);
+const contentSchema = z.string().max(MAX_CONTENT_CHARS);
+const formatSchema = z.enum(["markdown", "xml"]);
+const wikiListArgsSchema = z.object({
+	parent: refSchema.optional(),
+	page_token: z.string().trim().min(1).max(512).optional()
+}).strict();
+const wikiReadArgsSchema = z.object({
+	doc: refSchema,
+	format: formatSchema.optional(),
+	scope: z.enum([
+		"full",
+		"outline",
+		"section",
+		"range",
+		"keyword"
+	]).optional(),
+	start_block_id: blockIdSchema.optional(),
+	end_block_id: blockIdSchema.optional(),
+	keyword: z.string().trim().min(1).max(500).optional(),
+	max_depth: z.number().int().min(-1).max(20).optional()
+}).strict();
+const wikiCreateArgsSchema = z.object({
+	parent: refSchema,
+	title: z.string().trim().min(1).max(MAX_TITLE_CHARS),
+	content: contentSchema.optional(),
+	format: formatSchema.optional()
+}).strict();
+const rangeFields = {
+	block_id: blockIdSchema.optional(),
+	start_block_id: blockIdSchema.optional(),
+	end_block_id: blockIdSchema.optional()
+};
+const wikiEditOperationSchema = z.discriminatedUnion("command", [
+	z.object({
+		command: z.literal("append"),
+		content: contentSchema.min(1)
+	}).strict(),
+	z.object({
+		command: z.literal("insert_after"),
+		block_id: blockIdSchema,
+		content: contentSchema.min(1)
+	}).strict(),
+	z.object({
+		command: z.literal("replace"),
+		...rangeFields,
+		content: contentSchema.min(1)
+	}).strict(),
+	z.object({
+		command: z.literal("delete"),
+		...rangeFields
+	}).strict(),
+	z.object({
+		command: z.literal("str_replace"),
+		pattern: z.string().min(1).max(1e4),
+		content: contentSchema
+	}).strict(),
+	z.object({
+		command: z.literal("overwrite"),
+		content: contentSchema.min(1)
+	}).strict()
+]);
+const wikiEditArgsSchema = z.object({
+	doc: refSchema,
+	revision_id: z.number().int().min(0),
+	format: formatSchema.optional(),
+	operations: z.array(wikiEditOperationSchema).min(1).max(20)
+}).strict();
+const FAILURE_REASONS = {
+	TOOL_DISABLED: "知识库工具已在插件配置中关闭",
+	ROUTE_NOT_FOUND: "当前会话没有绑定飞书话题，无法确定授权人",
+	NOT_AUTHORIZED: "当前话题的发起人不在知识库白名单中；请管理员发送 /auth wiki add @该用户 后重试",
+	CHANNEL_UNAVAILABLE: "飞书连接当前不可用，请稍后重试",
+	INVALID_REFERENCE: "无法识别的知识库引用：请传知识库节点链接 https://<租户>.feishu.cn/wiki/<node_token>、node_token，或知识空间链接 https://<租户>.feishu.cn/wiki/space/<space_id>",
+	INVALID_OPERATION: "编辑操作参数不完整",
+	OUTSIDE_ROOTS: "该位置不在插件配置的知识库范围（wikiRoots）内，不能访问",
+	NOT_FOUND: "知识库节点不存在或已被删除",
+	NO_ACCESS: "机器人对该知识库节点没有访问权限；请知识库管理员把应用（或包含机器人的群）加为该空间成员",
+	UNSUPPORTED_TYPE: "目前只支持读取和修改飞书文档（docx）；表格、多维表格等类型暂不支持",
+	NOT_OWNED: "只能修改由本应用创建（所有者是本应用）的文档",
+	REVISION_CONFLICT: "文档在你读取之后被修改过；请重新用 feishu_wiki_read 读取最新内容，基于新的 revision_id 再修改",
+	CONSENT_DENIED: "话题发起人拒绝了这次知识库操作",
+	CONSENT_EXPIRED: "话题发起人没有在授权卡有效期内确认，已自动拒绝",
+	CONSENT_UNAVAILABLE: "授权卡发送失败，无法征得话题发起人同意，已取消操作",
+	PERMISSION_DENIED: "飞书拒绝调用：应用缺少知识库或文档权限（wiki:wiki、docx:document），请管理员在开发者后台开通并发布版本",
+	CONTENT_FAILED: "文档已创建，但写入内容失败",
+	EDIT_FAILED: "修改失败",
+	EDIT_PARTIAL: "飞书报告操作只部分生效；已停止后续操作，请用 feishu_wiki_read 读取最新内容核验后再继续",
+	API_FAILED: "飞书接口调用失败",
+	ABORTED: "已取消"
+};
+const OUTPUT_SCHEMA = {
+	type: "object",
+	properties: {
+		ok: { type: "boolean" },
+		code: { type: "string" },
+		reason: { type: "string" }
+	},
+	required: ["ok"]
+};
+const LIST_DESCRIPTION = "浏览飞书知识库（只能访问插件配置的知识库范围 wikiRoots）。不传 parent 时列出可访问的根（知识空间或节点）；传 parent（知识库节点链接、node_token，或知识空间链接）时列出它的直接子节点，has_child 为 true 的节点可以继续往下浏览。结果分页，带 page_token 时用它取下一页。返回的 node_token 可直接传给其他知识库工具。";
+const READ_DESCRIPTION = "读取知识库中的一篇飞书文档（docx）。doc 传知识库节点链接或 node_token。第一次读取某篇文档会在话题里弹出授权卡，由话题发起人确认，确认后本话题内再次读取同一篇不再询问；等待期间不要重复调用。scope 默认 full（整篇）；大文档先用 outline 看目录，再用 section（start_block_id 为标题块 id）、range（start/end_block_id）或 keyword（关键词，支持 a|b）读取局部；max_depth 在 outline 中表示标题层级上限。format 默认 markdown；xml 为飞书文档 XML（类 HTML 标签：<p> <h1>-<h6> <ul>/<ol><li> <pre><code> <table> <callout> 等），只有 xml 读取会给每个块带上 id 属性（block id），需要按块修改时用 xml 读取。返回的 revision_id 用于 feishu_wiki_edit；editable 表示这篇文档能否被修改（只有本应用创建的文档可以修改）。";
+const CREATE_DESCRIPTION = "在知识库中新建一篇飞书文档（docx）。parent 传父节点（知识库节点链接或 node_token）或知识空间链接（建在空间顶层），必须位于插件配置的知识库范围内；新文档本身也可以作为目录，之后把它的 node_token 作为 parent 在下面继续新建子文档。title 为标题；content 为正文（可选，不要在正文里重复标题）。format 默认 markdown；xml 为飞书文档 XML（类 HTML 标签：<p> <h1>-<h6> <ul>/<ol><li> <pre><code> <table> <callout> 等），只有 xml 读取会给每个块带上 id 属性（block id），需要按块修改时用 xml 读取。每次新建都会在话题里弹出授权卡，由话题发起人确认后才执行；等待期间不要重复调用。";
+const EDIT_DESCRIPTION = `修改知识库中由本应用创建的飞书文档（docx）。先用 feishu_wiki_read 读取（按块修改时用 format=xml 拿到 block id），把读到的 revision_id 原样传入；文档在此之后被他人改过会被拒绝，需要重新读取。operations 按顺序执行（最多 20 个）：append（文末追加 content）、insert_after（在 block_id 之后插入 content）、replace（用 content 替换 block_id，或同一父块下 start_block_id 到 end_block_id 的连续块）、delete（删除 block_id，或 start_block_id 到 end_block_id）、str_replace（把文本 pattern 替换为 content，content 为空表示删除）、overwrite（清空后用 content 重写整篇，会丢失评论与不支持的内容，尽量少用）。替换和删除会使涉及的旧 block id 失效，同一个块的多处修改请合并成一次 replace。format 默认 markdown；xml 为飞书文档 XML（类 HTML 标签：<p> <h1>-<h6> <ul>/<ol><li> <pre><code> <table> <callout> 等），只有 xml 读取会给每个块带上 id 属性（block id），需要按块修改时用 xml 读取。每次修改都会在话题里弹出授权卡，由话题发起人确认后才执行；等待期间不要重复调用。`;
+/**
+* The wiki tool runtime: mounts the enabled tools into Agent scopes and runs
+* each call through the gates in the module contract.
+*/
+var WikiToolRuntime = class {
+	deps;
+	mountAttempts = /* @__PURE__ */ new WeakMap();
+	spaceNames = /* @__PURE__ */ new Map();
+	warnedUnavailable = false;
+	warnedMountFailure = false;
+	constructor(deps) {
+		this.deps = deps;
+	}
+	/** Tool names the current configuration mounts. */
+	enabledTools() {
+		const config = this.deps.config();
+		if (config.wikiRoots.length === 0) return [];
+		return [...config.feishuTools.wikiRead ? [WIKI_LIST_TOOL_NAME, WIKI_READ_TOOL_NAME] : [], ...config.feishuTools.wikiWrite ? [WIKI_CREATE_TOOL_NAME, WIKI_EDIT_TOOL_NAME] : []];
+	}
+	/**
+	* Register the enabled tools inside one Agent scope; same mount policy as
+	* the other channel tools (a missing or slow `tools` service never blocks
+	* session creation).
+	*
+	* @param agentCtx Agent scope to register in.
+	* @param sessionId Session the tools act for.
+	*/
+	async mount(agentCtx, sessionId) {
+		if (this.enabledTools().length === 0) return;
+		const existing = this.mountAttempts.get(agentCtx);
+		if (existing !== void 0) return await existing;
+		const attempt = this.mountAttempt(agentCtx, sessionId);
+		this.mountAttempts.set(agentCtx, attempt);
+		await attempt;
+	}
+	async mountAttempt(agentCtx, sessionId) {
+		let injected = false;
+		if (await waitForAvailability(Promise.resolve(agentCtx.inject(["tools"], (ctx) => {
+			injected = true;
+			this.registerInScope(ctx, sessionId);
+		})), this.warnedUnavailable ? 250 : 2e3) === "failed") {
+			this.warnMountFailure("dsh-channels: mounting the wiki tools failed");
+			return;
+		}
+		if (!injected && !this.warnedUnavailable) {
+			this.warnedUnavailable = true;
+			this.deps.warn("dsh-channels: 知识库工具未挂载：宿主 tools 服务不可用（会话继续）");
+		}
+	}
+	registerInScope(agentCtx, sessionId) {
+		const tools = agentCtx.tools;
+		if (tools === void 0 || typeof tools.register !== "function") {
+			this.warnMountFailure("dsh-channels: 知识库工具未注册：宿主 tools 服务不可用");
+			return;
+		}
+		for (const name of this.enabledTools()) try {
+			tools.register(this.definitionFor(name, sessionId));
+		} catch (error) {
+			this.warnMountFailure(`dsh-channels: registering ${name} failed: ${describeError(error)}`);
+		}
+	}
+	warnMountFailure(message) {
+		if (this.warnedMountFailure) return;
+		this.warnedMountFailure = true;
+		this.deps.warn(message);
+	}
+	definitionFor(name, sessionId) {
+		const base = {
+			output: {
+				schema: OUTPUT_SCHEMA,
+				render: (_args, value) => renderWikiResult(value)
+			},
+			presentResult: (_args, value) => presentWikiResult(value)
+		};
+		switch (name) {
+			case WIKI_LIST_TOOL_NAME: return {
+				...base,
+				name,
+				description: LIST_DESCRIPTION,
+				parameters: LIST_PARAMETERS,
+				execute: async (rawArgs) => await this.list(sessionId, rawArgs),
+				presentCall: () => "浏览知识库",
+				isConcurrencySafe: () => true
+			};
+			case WIKI_READ_TOOL_NAME: return {
+				...base,
+				name,
+				description: READ_DESCRIPTION,
+				parameters: READ_PARAMETERS,
+				execute: async (rawArgs, exec) => await this.read(sessionId, rawArgs, exec),
+				presentCall: (args) => `读取知识库文档：${display(args.doc)}`,
+				isConcurrencySafe: () => false
+			};
+			case WIKI_CREATE_TOOL_NAME: return {
+				...base,
+				name,
+				description: CREATE_DESCRIPTION,
+				parameters: CREATE_PARAMETERS,
+				execute: async (rawArgs, exec) => await this.create(sessionId, rawArgs, exec),
+				presentCall: (args) => `新建知识库文档：${display(args.title)}`,
+				isConcurrencySafe: () => false
+			};
+			default: return {
+				...base,
+				name,
+				description: EDIT_DESCRIPTION,
+				parameters: EDIT_PARAMETERS,
+				execute: async (rawArgs, exec) => await this.edit(sessionId, rawArgs, exec),
+				presentCall: (args) => `修改知识库文档：${display(args.doc)}`,
+				isConcurrencySafe: () => false
+			};
+		}
+	}
+	gate(sessionId, tool) {
+		if (!this.enabledTools().includes(tool)) return failure("TOOL_DISABLED");
+		const route = this.deps.routeOfSession(sessionId);
+		if (route === void 0) return failure("ROUTE_NOT_FOUND");
+		if (!this.deps.mayUseWiki(route.senderUserId)) return failure("NOT_AUTHORIZED");
+		const channel = this.deps.channel();
+		const api = channel?.wiki;
+		if (channel === void 0 || api === void 0) return failure("CHANNEL_UNAVAILABLE");
+		return {
+			ok: true,
+			context: {
+				route,
+				api,
+				roots: parseWikiRoots(this.deps.config().wikiRoots),
+				botOpenId: channel.botOpenId()
+			}
+		};
+	}
+	/** Resolve a node/docx reference and check containment. */
+	async containedNode(context, ref) {
+		if (ref.kind === "space") return failure("INVALID_REFERENCE", "这里需要一个文档或节点，而不是整个知识空间");
+		const node = await context.api.getNode(ref.token, ref.kind === "docx" ? "docx" : "wiki");
+		return await containingRoot(context.api, context.roots, node) === void 0 ? failure("OUTSIDE_ROOTS") : node;
+	}
+	async consent(sessionId, context, action, fields, signal) {
+		return consentFailure(await this.deps.consent.request({
+			sessionId,
+			route: context.route,
+			action,
+			...fields,
+			signal
+		}));
+	}
+	async spaceName(api, spaceId) {
+		const cached = this.spaceNames.get(spaceId);
+		if (cached !== void 0) return cached;
+		const name = await api.spaceName(spaceId).catch(() => "");
+		const label = name === "" ? `知识空间 ${spaceId}` : name;
+		this.spaceNames.set(spaceId, label);
+		return label;
+	}
+	/** `空间 / 父节点` for a node (one parent lookup). */
+	async locationOf(api, node) {
+		const space = await this.spaceName(api, node.spaceId);
+		if (node.parentNodeToken === void 0) return space;
+		const parent = await api.getNode(node.parentNodeToken, "wiki").catch(() => void 0);
+		return parent === void 0 || parent.title === "" ? space : `${space} / ${parent.title}`;
+	}
+	nodeView(context, node) {
+		return {
+			title: node.title,
+			node_token: node.nodeToken,
+			obj_type: node.objType,
+			node_type: node.nodeType,
+			has_child: node.hasChild,
+			url: nodeUrl(context.roots, node),
+			owned_by_app: ownedByApp(node, context.botOpenId)
+		};
+	}
+	async list(sessionId, rawArgs) {
+		const args = parseArgs(WIKI_LIST_TOOL_NAME, wikiListArgsSchema, rawArgs);
+		const gate = this.gate(sessionId, WIKI_LIST_TOOL_NAME);
+		if (!gate.ok) return gate;
+		const { context } = gate;
+		return await guarded$1(this.deps, WIKI_LIST_TOOL_NAME, async () => {
+			if (args.parent === void 0) return {
+				ok: true,
+				kind: "roots",
+				items: await Promise.all(context.roots.map((root) => this.rootView(context, root)))
+			};
+			const ref = parseWikiRef(args.parent);
+			if (ref === void 0) return failure("INVALID_REFERENCE");
+			let spaceId;
+			let parentToken;
+			if (ref.kind === "space") {
+				if (!spaceIsRoot(context.roots, ref.spaceId)) return failure("OUTSIDE_ROOTS");
+				spaceId = ref.spaceId;
+			} else {
+				const node = await this.containedNode(context, ref);
+				if ("ok" in node) return node;
+				spaceId = node.spaceId;
+				parentToken = node.nodeToken;
+			}
+			const page = await context.api.listChildren(spaceId, parentToken, args.page_token);
+			return {
+				ok: true,
+				kind: "children",
+				parent: args.parent,
+				items: page.items.map((node) => this.nodeView(context, node)),
+				...page.pageToken === void 0 ? {} : { page_token: page.pageToken }
+			};
+		});
+	}
+	async rootView(context, root) {
+		try {
+			if (root.kind === "space") return {
+				root: "space",
+				title: await this.spaceName(context.api, root.spaceId),
+				link: root.link,
+				space_id: root.spaceId
+			};
+			const node = await context.api.getNode(root.nodeToken, "wiki");
+			return {
+				root: "node",
+				title: node.title,
+				link: root.link,
+				node_token: node.nodeToken,
+				has_child: node.hasChild
+			};
+		} catch (error) {
+			return {
+				...root.kind === "space" ? {
+					root: "space",
+					space_id: root.spaceId
+				} : {
+					root: "node",
+					node_token: root.nodeToken
+				},
+				title: "",
+				link: root.link,
+				error: failureOf(error).reason
+			};
+		}
+	}
+	async read(sessionId, rawArgs, exec) {
+		const args = parseArgs(WIKI_READ_TOOL_NAME, wikiReadArgsSchema, rawArgs);
+		const gate = this.gate(sessionId, WIKI_READ_TOOL_NAME);
+		if (!gate.ok) return gate;
+		const { context } = gate;
+		return await guarded$1(this.deps, WIKI_READ_TOOL_NAME, async () => {
+			const ref = parseWikiRef(args.doc);
+			if (ref === void 0) return failure("INVALID_REFERENCE");
+			const node = await this.containedNode(context, ref);
+			if ("ok" in node) return node;
+			if (node.objType !== "docx") return failure("UNSUPPORTED_TYPE", `${FAILURE_REASONS.UNSUPPORTED_TYPE}（该节点类型：${node.objType}）`);
+			const url = nodeUrl(context.roots, node);
+			if (!this.deps.consent.hasReadGrant(sessionId, node.objToken)) {
+				const denied = await this.consent(sessionId, context, "read", {
+					title: node.title,
+					url,
+					location: await this.locationOf(context.api, node),
+					details: []
+				}, exec.signal);
+				if (denied !== void 0) return denied;
+				this.deps.consent.grantRead(sessionId, node.objToken);
+			}
+			if (exec.signal.aborted) return failure("ABORTED");
+			const format = args.format ?? "markdown";
+			const document = await context.api.fetchDocument(node.objToken, {
+				format,
+				withBlockIds: true,
+				scope: args.scope ?? "full",
+				...args.start_block_id === void 0 ? {} : { startBlockId: args.start_block_id },
+				...args.end_block_id === void 0 ? {} : { endBlockId: args.end_block_id },
+				...args.keyword === void 0 ? {} : { keyword: args.keyword },
+				...args.max_depth === void 0 ? {} : { maxDepth: args.max_depth }
+			});
+			return {
+				ok: true,
+				title: node.title,
+				node_token: node.nodeToken,
+				url,
+				revision_id: document.revisionId,
+				format,
+				editable: this.deps.config().feishuTools.wikiWrite && ownedByApp(node, context.botOpenId),
+				content: document.content
+			};
+		});
+	}
+	async create(sessionId, rawArgs, exec) {
+		const args = parseArgs(WIKI_CREATE_TOOL_NAME, wikiCreateArgsSchema, rawArgs);
+		const gate = this.gate(sessionId, WIKI_CREATE_TOOL_NAME);
+		if (!gate.ok) return gate;
+		const { context } = gate;
+		return await guarded$1(this.deps, WIKI_CREATE_TOOL_NAME, async () => {
+			const ref = parseWikiRef(args.parent);
+			if (ref === void 0) return failure("INVALID_REFERENCE");
+			let spaceId;
+			let parentToken;
+			let location;
+			let parentUrl;
+			if (ref.kind === "space") {
+				if (!spaceIsRoot(context.roots, ref.spaceId)) return failure("OUTSIDE_ROOTS");
+				spaceId = ref.spaceId;
+				location = `${await this.spaceName(context.api, spaceId)}（顶层）`;
+			} else {
+				const parent = await this.containedNode(context, ref);
+				if ("ok" in parent) return parent;
+				spaceId = parent.spaceId;
+				parentToken = parent.nodeToken;
+				parentUrl = nodeUrl(context.roots, parent);
+				location = `${await this.spaceName(context.api, spaceId)} / ${parent.title === "" ? parent.nodeToken : parent.title}`;
+			}
+			const format = args.format ?? "markdown";
+			const content = args.content === void 0 || args.content.trim() === "" ? void 0 : args.content;
+			const details = content === void 0 ? ["**内容**：空文档"] : [`**内容预览**（${format === "xml" ? "XML" : "Markdown"}，共 ${content.length} 字）\n${previewBlock(content)}`];
+			const denied = await this.consent(sessionId, context, "create", {
+				title: args.title,
+				...parentUrl === void 0 ? {} : { url: parentUrl },
+				location,
+				details
+			}, exec.signal);
+			if (denied !== void 0) return denied;
+			if (exec.signal.aborted) return failure("ABORTED");
+			const node = await context.api.createDocxNode(spaceId, parentToken, args.title);
+			const url = nodeUrl(context.roots, node);
+			this.deps.consent.grantRead(sessionId, node.objToken);
+			if (content === void 0) return {
+				ok: true,
+				title: node.title || args.title,
+				node_token: node.nodeToken,
+				url,
+				warnings: []
+			};
+			try {
+				const written = await context.api.updateDocument(node.objToken, {
+					command: "block_insert_after",
+					format,
+					content,
+					blockId: "-1"
+				});
+				if (written.result === "failed") return {
+					...failure("CONTENT_FAILED", `${FAILURE_REASONS.CONTENT_FAILED}：${written.warnings.join("；") || "飞书返回 failed"}；可用 feishu_wiki_edit 重新写入`),
+					node_token: node.nodeToken,
+					url
+				};
+				if (written.result === "partial_success") return {
+					...failure("CONTENT_FAILED", `文档已创建，但内容只部分写入：${written.warnings.join("；") || "飞书返回 partial_success"}；请先用 feishu_wiki_read 核验，再用 feishu_wiki_edit 补齐`),
+					node_token: node.nodeToken,
+					url
+				};
+				return {
+					ok: true,
+					title: node.title || args.title,
+					node_token: node.nodeToken,
+					url,
+					...written.revisionId === void 0 ? {} : { revision_id: written.revisionId },
+					warnings: written.warnings
+				};
+			} catch (error) {
+				const reason = failureOf(error).reason;
+				return {
+					...failure("CONTENT_FAILED", `${FAILURE_REASONS.CONTENT_FAILED}：${reason}；可用 feishu_wiki_edit 重新写入`),
+					node_token: node.nodeToken,
+					url
+				};
+			}
+		});
+	}
+	async edit(sessionId, rawArgs, exec) {
+		const args = parseArgs(WIKI_EDIT_TOOL_NAME, wikiEditArgsSchema, rawArgs);
+		const gate = this.gate(sessionId, WIKI_EDIT_TOOL_NAME);
+		if (!gate.ok) return gate;
+		const { context } = gate;
+		const format = args.format ?? "markdown";
+		const requests = [];
+		for (const [index, operation] of args.operations.entries()) {
+			const request = updateRequestOf(operation, format);
+			if (typeof request === "string") return failure("INVALID_OPERATION", `第 ${index + 1} 个操作（${operation.command}）：${request}`);
+			requests.push(request);
+		}
+		return await guarded$1(this.deps, WIKI_EDIT_TOOL_NAME, async () => {
+			const ref = parseWikiRef(args.doc);
+			if (ref === void 0) return failure("INVALID_REFERENCE");
+			const node = await this.containedNode(context, ref);
+			if ("ok" in node) return node;
+			if (node.objType !== "docx") return failure("UNSUPPORTED_TYPE", `${FAILURE_REASONS.UNSUPPORTED_TYPE}（该节点类型：${node.objType}）`);
+			if (!ownedByApp(node, context.botOpenId)) return failure("NOT_OWNED", `${FAILURE_REASONS.NOT_OWNED}（该文档所有者：${node.owner ?? "未知"}）`);
+			const current = await context.api.documentRevision(node.objToken);
+			if (current !== args.revision_id) return {
+				...failure("REVISION_CONFLICT", `${FAILURE_REASONS.REVISION_CONFLICT}（读取时 ${args.revision_id}，当前 ${current}）`),
+				revision_id: current
+			};
+			const url = nodeUrl(context.roots, node);
+			const denied = await this.consent(sessionId, context, "edit", {
+				title: node.title,
+				url,
+				location: await this.locationOf(context.api, node),
+				details: operationLines(args.operations)
+			}, exec.signal);
+			if (denied !== void 0) return denied;
+			if (await context.api.documentRevision(node.objToken) !== args.revision_id) return failure("REVISION_CONFLICT", `${FAILURE_REASONS.REVISION_CONFLICT}（等待授权期间文档被修改）`);
+			const warnings = [];
+			let revision = args.revision_id;
+			for (const [index, request] of requests.entries()) {
+				if (exec.signal.aborted) return {
+					...failure("ABORTED", `已取消；前 ${index} 个操作已执行`),
+					applied: index
+				};
+				let result;
+				try {
+					result = await context.api.updateDocument(node.objToken, {
+						...request,
+						revisionId: revision
+					});
+				} catch (error) {
+					const reason = failureOf(error).reason;
+					return {
+						...failure("EDIT_FAILED", `第 ${index + 1} 个操作失败：${reason}；前 ${index} 个操作已执行`),
+						applied: index
+					};
+				}
+				warnings.push(...result.warnings);
+				if (result.revisionId !== void 0) revision = result.revisionId;
+				if (result.result === "failed") return {
+					...failure("EDIT_FAILED", `第 ${index + 1} 个操作失败：${result.warnings.join("；") || "飞书返回 failed"}；前 ${index} 个操作已执行`),
+					applied: index
+				};
+				if (result.result === "partial_success") return {
+					...failure("EDIT_PARTIAL", `第 ${index + 1} 个操作只部分生效（${result.warnings.join("；") || "飞书返回 partial_success"}）；前 ${index} 个操作已执行，已停止后续操作；请用 feishu_wiki_read 读取核验后再继续`),
+					applied: index,
+					revision_id: revision
+				};
+			}
+			return {
+				ok: true,
+				title: node.title,
+				node_token: node.nodeToken,
+				url,
+				applied: requests.length,
+				revision_id: revision,
+				warnings
+			};
+		});
+	}
+};
+function failure(code, reason) {
+	return {
+		ok: false,
+		code,
+		reason: reason ?? FAILURE_REASONS[code]
+	};
+}
+function parseArgs(tool, schema, rawArgs) {
+	const parsed = schema.safeParse(rawArgs);
+	if (parsed.success) return parsed.data;
+	const issue = parsed.error.issues[0];
+	const where = issue === void 0 || issue.path.length === 0 ? "arguments" : issue.path.join(".");
+	throw new Error(`${tool}: invalid ${where}: ${issue?.message ?? "invalid arguments"}`);
+}
+/** Run one gated call body, mapping thrown Feishu errors to failures. */
+async function guarded$1(deps, tool, body) {
+	try {
+		return await body();
+	} catch (error) {
+		const mapped = failureOf(error);
+		if (mapped.code === "API_FAILED") deps.warn("dsh-channels: %s failed: %s", tool, mapped.reason);
+		return mapped;
+	}
+}
+/** Feishu codes: node missing/deleted, no resource access, missing app scope. */
+const NOT_FOUND_CODES = /* @__PURE__ */ new Set([
+	131005,
+	131012,
+	131013,
+	131014,
+	131016
+]);
+const NO_ACCESS_CODES = /* @__PURE__ */ new Set([
+	131006,
+	1770032,
+	1770002
+]);
+const PERMISSION_CODES = /* @__PURE__ */ new Set([99991672, 99991679]);
+function failureOf(error) {
+	const detail = describeError(error);
+	if (error instanceof FeishuApiError && error.code !== void 0) {
+		if (NOT_FOUND_CODES.has(error.code)) return failure("NOT_FOUND", `${FAILURE_REASONS.NOT_FOUND}（${detail}）`);
+		if (NO_ACCESS_CODES.has(error.code)) return failure("NO_ACCESS", `${FAILURE_REASONS.NO_ACCESS}（${detail}）`);
+		if (PERMISSION_CODES.has(error.code)) return failure("PERMISSION_DENIED", `${FAILURE_REASONS.PERMISSION_DENIED}（${detail}）`);
+	}
+	return failure("API_FAILED", `${FAILURE_REASONS.API_FAILED}：${detail}`);
+}
+function consentFailure(outcome) {
+	switch (outcome) {
+		case "allowed": return;
+		case "denied": return failure("CONSENT_DENIED");
+		case "expired": return failure("CONSENT_EXPIRED");
+		case "cancelled": return failure("ABORTED");
+		case "unavailable": return failure("CONSENT_UNAVAILABLE");
+	}
+}
+/** Whether the app owns a node: Feishu reports the bot open_id as the owner. */
+function ownedByApp(node, botOpenId) {
+	return botOpenId !== void 0 && botOpenId !== "" && node.owner === botOpenId;
+}
+/** A node's web link; falls back to the first root's origin. */
+function nodeUrl(roots, node) {
+	if (node.url !== void 0) return node.url;
+	const first = roots[0];
+	return `${first === void 0 ? "https://feishu.cn" : new URL(first.link).origin}/wiki/${node.nodeToken}`;
+}
+/** Map one validated operation to a `docs_ai` update, or the reason it is incomplete. */
+function updateRequestOf(operation, format) {
+	switch (operation.command) {
+		case "append": return {
+			command: "block_insert_after",
+			format,
+			content: operation.content,
+			blockId: "-1"
+		};
+		case "insert_after": return {
+			command: "block_insert_after",
+			format,
+			content: operation.content,
+			blockId: operation.block_id
+		};
+		case "replace": {
+			const range = rangeOf(operation);
+			return typeof range === "string" ? range : {
+				command: "block_replace",
+				format,
+				content: operation.content,
+				...range
+			};
+		}
+		case "delete": {
+			const range = rangeOf(operation);
+			return typeof range === "string" ? range : {
+				command: "block_delete",
+				format,
+				...range
+			};
+		}
+		case "str_replace": return {
+			command: "str_replace",
+			format,
+			pattern: operation.pattern,
+			content: operation.content
+		};
+		case "overwrite": return {
+			command: "overwrite",
+			format,
+			content: operation.content
+		};
+	}
+}
+/** `block_id` alone, or `start_block_id` + `end_block_id` together. */
+function rangeOf(operation) {
+	const hasRange = operation.start_block_id !== void 0 || operation.end_block_id !== void 0;
+	if (operation.block_id !== void 0 && !hasRange) return { blockId: operation.block_id };
+	if (operation.block_id === void 0 && operation.start_block_id !== void 0 && operation.end_block_id !== void 0) return {
+		startBlockId: operation.start_block_id,
+		endBlockId: operation.end_block_id
+	};
+	return "需要 block_id，或成对的 start_block_id 与 end_block_id（二者不能同时使用）";
+}
+/** The consent card's operation list. */
+/** Consent-card details: a header, then one entry per operation so every operation stays visible. */
+function operationLines(operations) {
+	const lines = operations.map((operation, index) => {
+		const n = `${index + 1}.`;
+		switch (operation.command) {
+			case "append": return `${n} 在文末追加 ${operation.content.length} 字：${preview(operation.content)}`;
+			case "insert_after": return `${n} 在块 \`${operation.block_id}\` 后插入 ${operation.content.length} 字：${preview(operation.content)}`;
+			case "replace": return `${n} 替换${blockRangeLabel(operation)}为 ${operation.content.length} 字：${preview(operation.content)}`;
+			case "delete": return `${n} 删除${blockRangeLabel(operation)}`;
+			case "str_replace": return `${n} 把文本「${preview(operation.pattern)}」替换为「${preview(operation.content)}」`;
+			case "overwrite": return `${n} ⚠️ 清空整篇并重写为 ${operation.content.length} 字：${preview(operation.content)}`;
+		}
+	});
+	return [`**将执行 ${operations.length} 个操作**`, ...lines];
+}
+function blockRangeLabel(operation) {
+	return operation.block_id !== void 0 ? `块 \`${operation.block_id}\`` : `块 \`${operation.start_block_id ?? "?"}\` 到 \`${operation.end_block_id ?? "?"}\``;
+}
+/** One-line clipped preview with Markdown control characters neutralized. */
+function preview(value, max = 80) {
+	const flat = value.replace(/\s+/gu, " ").trim().replace(/([[\]()*_`~<>])/gu, "\\$1");
+	return flat.length <= max ? flat : `${flat.slice(0, max)}…`;
+}
+/** A fenced preview of the first characters of a content. */
+function previewBlock(content) {
+	return `\`\`\`\n${(content.length <= PREVIEW_CHARS ? content : `${content.slice(0, PREVIEW_CHARS)}\n…`).replace(/```/gu, "`​``")}\n\`\`\``;
+}
+function display(value) {
+	return typeof value === "string" ? preview(value, 120) : "?";
+}
+/** Readable, bounded text for a thrown value. */
+function describeError(error) {
+	const cleaned = (error instanceof FeishuApiError ? error.detail : error instanceof Error ? error.message : String(error)).replace(/[\u0000-\u001f\u007f]+/gu, " ").trim();
+	return cleaned.length <= 300 ? cleaned : `${cleaned.slice(0, 300)}…`;
+}
+function isValue(value) {
+	return typeof value === "object" && value !== null && typeof value.ok === "boolean";
+}
+/**
+* Model-visible content of one call: a read returns its document content as
+* plain text after a short header; everything else is JSON.
+*
+* @param value The tool value.
+* @returns One text block.
+*/
+function renderWikiResult(value) {
+	if (!isValue(value)) return [{
+		type: "text",
+		text: "知识库工具结果不可用"
+	}];
+	if (value.ok && "content" in value) {
+		const { content, ...meta } = value;
+		return [{
+			type: "text",
+			text: `${JSON.stringify(meta)}\n\n${content}`
+		}];
+	}
+	return [{
+		type: "text",
+		text: JSON.stringify(value)
+	}];
+}
+/**
+* One-line result presentation.
+*
+* @param value The tool value.
+* @returns Display text.
+*/
+function presentWikiResult(value) {
+	if (!isValue(value)) return "知识库工具结果不可用";
+	if (!value.ok) return `失败（${value.code}）：${value.reason}`;
+	if ("items" in value) return `列出 ${value.items.length} 项`;
+	if ("content" in value) return `已读取《${value.title}》（${value.content.length} 字）`;
+	if ("applied" in value) return `已修改《${value.title}》（${value.applied} 个操作）`;
+	return `已新建《${value.title}》`;
+}
+const REF_DESCRIPTION = "知识库节点链接 https://<租户>.feishu.cn/wiki/<node_token> 或 node_token";
+const FORMAT_PROPERTY = {
+	type: "string",
+	enum: ["markdown", "xml"],
+	description: "内容格式，默认 markdown；xml 读取时带 block id"
+};
+const BLOCK_ID_PROPERTY = {
+	type: "string",
+	description: "块 id（xml 读取结果中的 id 属性）"
+};
+const LIST_PARAMETERS = {
+	type: "object",
+	properties: {
+		parent: {
+			type: "string",
+			description: `要列出子节点的位置：${REF_DESCRIPTION}，或知识空间链接 https://<租户>.feishu.cn/wiki/space/<space_id>；不传则列出可访问的根`
+		},
+		page_token: {
+			type: "string",
+			description: "上一页返回的 page_token"
+		}
+	},
+	additionalProperties: false
+};
+const READ_PARAMETERS = {
+	type: "object",
+	properties: {
+		doc: {
+			type: "string",
+			description: REF_DESCRIPTION
+		},
+		format: FORMAT_PROPERTY,
+		scope: {
+			type: "string",
+			enum: [
+				"full",
+				"outline",
+				"section",
+				"range",
+				"keyword"
+			],
+			description: "读取范围，默认 full"
+		},
+		start_block_id: {
+			...BLOCK_ID_PROPERTY,
+			description: "section 的标题块 id，或 range 的起点"
+		},
+		end_block_id: {
+			...BLOCK_ID_PROPERTY,
+			description: "range 的终点，-1 表示到文末"
+		},
+		keyword: {
+			type: "string",
+			description: "keyword 模式的关键词，多个用 | 分隔"
+		},
+		max_depth: {
+			type: "integer",
+			description: "outline：标题层级上限；其他：子树深度，-1 不限"
+		}
+	},
+	required: ["doc"],
+	additionalProperties: false
+};
+const CREATE_PARAMETERS = {
+	type: "object",
+	properties: {
+		parent: {
+			type: "string",
+			description: `父位置：${REF_DESCRIPTION}，或知识空间链接（建在空间顶层）`
+		},
+		title: {
+			type: "string",
+			description: "文档标题"
+		},
+		content: {
+			type: "string",
+			description: "正文（可选）"
+		},
+		format: FORMAT_PROPERTY
+	},
+	required: ["parent", "title"],
+	additionalProperties: false
+};
+const EDIT_PARAMETERS = {
+	type: "object",
+	properties: {
+		doc: {
+			type: "string",
+			description: REF_DESCRIPTION
+		},
+		revision_id: {
+			type: "integer",
+			description: "feishu_wiki_read 返回的 revision_id"
+		},
+		format: FORMAT_PROPERTY,
+		operations: {
+			type: "array",
+			minItems: 1,
+			maxItems: 20,
+			items: {
+				type: "object",
+				properties: {
+					command: {
+						type: "string",
+						enum: [
+							"append",
+							"insert_after",
+							"replace",
+							"delete",
+							"str_replace",
+							"overwrite"
+						]
+					},
+					block_id: BLOCK_ID_PROPERTY,
+					start_block_id: BLOCK_ID_PROPERTY,
+					end_block_id: BLOCK_ID_PROPERTY,
+					pattern: {
+						type: "string",
+						description: "str_replace 要查找的文本"
+					},
+					content: {
+						type: "string",
+						description: "写入的内容"
+					}
+				},
+				required: ["command"],
+				additionalProperties: false
+			}
+		}
+	},
+	required: [
+		"doc",
+		"revision_id",
+		"operations"
+	],
+	additionalProperties: false
+};
+//#endregion
+//#region src/routing/inbound.ts
+/**
+* Inbound routing: dedup, admission, the route decision tree, and the
+* session-establishment / continuation flow.
+*
+* Everything here is channel-plane policy; the command plane (slash commands)
+* and the answerers stay in the service and are reached through narrow ports.
+* Dependency reads go through accessors so the moved logic stays readable.
+*
+* @module dsh-channels/routing/inbound
+*/
+/** Confirmation line for each keyword approval reply. */
+const APPROVAL_TEXT_REPLIES = {
+	allowed: "已允许本次操作。",
+	remembered: "已允许，本话题内同类操作不再询问。",
+	denied: "已拒绝本次操作。"
+};
+/**
+* User-facing text for attachments that could not be archived. Delivered as a
+* plain reply (never a card) so the user learns why the Agent cannot read a
+* file instead of silently getting an answer about older attachments.
+*/
+function buildAttachmentFailureNotice(failures) {
+	return [
+		"⚠️ 附件保存失败，Agent 无法读取：",
+		...failures.map((failure) => `• ${failure.name}：${failure.reason}`),
+		"可尝试压缩/拆分后重发，或把文件直接放到工作区目录。"
+	].join("\n");
+}
+/** Build one durable user message from inbound Feishu text. */
+function feishuUserMessage(text) {
+	return {
+		id: randomUUID(),
+		role: "user",
+		content: [{
+			type: "text",
+			text
+		}],
+		source: { kind: "user" }
+	};
+}
+/**
+* Whitelist registration input for one triggering message.
+*
+* The fetch tool requires explicit per-route authorization; the trigger
+* message is the one exception the admission layer can vouch for. Resources
+* are copied from the same normalization the manifest uses, and merged-forward
+* containers carry no direct resources (the tool expands them through the
+* container id, per the P0 rule).
+*/
+function knownAttachmentMessageOf(msg) {
+	const forwarded = msg.rawContentType === "merge_forward";
+	const resources = attachmentResources(msg).map((resource) => ({
+		type: resource.type,
+		fileKey: resource.fileKey,
+		...resource.fileName === void 0 ? {} : { fileName: resource.fileName },
+		...resource.folder === true ? { folder: true } : {}
+	}));
+	return {
+		messageId: msg.messageId,
+		kind: forwarded ? "merge_forward" : "message",
+		resources,
+		senderUserId: msg.senderId
+	};
+}
+/** Feishu message-id shape accepted for quote resolution (`om_...`). */
+const QUOTE_MESSAGE_ID = /^om_[A-Za-z0-9_-]{1,128}$/u;
+var InboundRouter = class {
+	deps;
+	/**
+	* In-process dedup guard: message id → accept timestamp. Set synchronously
+	* at acceptance so a same-process redelivery can never slip through the
+	* window between the persisted dedup check and its `put` landing.
+	*/
+	accepted = /* @__PURE__ */ new Map();
+	/**
+	* chat-scoped key → in-flight session establishment. Concurrent first
+	* messages of one (chat, user) pair all observe the same promise: they wait
+	* for the establishment to settle, then either continue the just-created
+	* session (same topic, or degraded chat route) or fall through to start
+	* their own — never racing each other into duplicate sessions, route
+	* overwrites, or the "no route, no mention" drop window.
+	*/
+	establishing = /* @__PURE__ */ new Map();
+	/**
+	* route key → first-turn delivery gate. A new Session persists its route
+	* before the prompt is assembled (image prefetch); a message that observes
+	* the route in that window must wait for the first followup instead of
+	* racing it, otherwise the topic's turns reach the model out of order.
+	*/
+	firstDeliveries = /* @__PURE__ */ new Map();
+	constructor(deps) {
+		this.deps = deps;
+	}
+	get ctx() {
+		return this.deps.ctx;
 	}
 	get config() {
 		return this.deps.config;
@@ -12113,6 +13735,21 @@ const configSchema = z.object({
 	*   `im:resource` (or `im:resource:upload`) scope; without it a call returns
 	*   a readable failure and the turn continues.
 	*
+	* - `wikiRead` (default off): register `feishu_wiki_list` and
+	*   `feishu_wiki_read` so the model can browse the wiki nodes under
+	*   `wikiRoots` and read docx documents there. Needs `wiki:wiki` (or
+	*   `wiki:wiki:readonly`) and `docx:document` (or `docx:document:readonly`).
+	* - `wikiWrite` (default off): register `feishu_wiki_create` and
+	*   `feishu_wiki_edit` so the model can create docx documents under
+	*   `wikiRoots` and edit documents this app owns. Needs `wiki:wiki` and
+	*   `docx:document`.
+	*
+	* The wiki tools act with the app identity and are mounted only while
+	* `wikiRoots` is non-empty. Each call is limited to topics whose owner is
+	* the administrator or on the wiki whitelist (`/auth wiki add`); opening a
+	* document, creating one, and editing one each need the topic owner's
+	* consent on an authorization card (a read consent lasts for the topic).
+	*
 	* The Web panel/metrics ship with `panel_docs_release`.
 	*/
 	feishuTools: z.object({
@@ -12122,7 +13759,9 @@ const configSchema = z.object({
 		attachmentFetchTimeoutMs: z.number().int().min(1e3).max(6e5).default(DEFAULT_ATTACHMENT_FETCH_TIMEOUT_MS),
 		topicMessages: z.boolean().default(true),
 		topicMessagesTimeoutMs: z.number().int().min(1e3).max(12e4).default(DEFAULT_TOPIC_MESSAGES_TIMEOUT_MS),
-		sendFile: z.boolean().default(true)
+		sendFile: z.boolean().default(true),
+		wikiRead: z.boolean().default(false),
+		wikiWrite: z.boolean().default(false)
 	}).default({
 		attachmentFetch: true,
 		attachmentFetchMaxResources: 10,
@@ -12130,9 +13769,26 @@ const configSchema = z.object({
 		attachmentFetchTimeoutMs: DEFAULT_ATTACHMENT_FETCH_TIMEOUT_MS,
 		topicMessages: true,
 		topicMessagesTimeoutMs: DEFAULT_TOPIC_MESSAGES_TIMEOUT_MS,
-		sendFile: true
+		sendFile: true,
+		wikiRead: false,
+		wikiWrite: false
 	}),
 	/**
+	* Wiki (知识库) locations the wiki tools may touch: whole spaces
+	* (`https://<tenant>.feishu.cn/wiki/space/<space_id>`) or single nodes with
+	* everything below them (`https://<tenant>.feishu.cn/wiki/<node_token>`).
+	* Browsing, reading, creating, and editing outside these roots fail. Empty
+	* (default) mounts no wiki tool even when `feishuTools.wikiRead`/`wikiWrite`
+	* is on.
+	*/
+	wikiRoots: z.array(z.string().trim().superRefine((link, issue) => {
+		const parsed = parseWikiRootLink(link);
+		if (!parsed.ok) issue.addIssue({
+			code: "custom",
+			message: WIKI_ROOT_LINK_ERRORS[parsed.error]
+		});
+	})).max(20).default([]),
+	/**
 	* Send a one-time onboarding card on the first private message of a chat
 	* (facts + command cheat sheet). Persisted per chat; never repeats.
 	*/
@@ -12285,6 +13941,9 @@ const EDITABLE_KEYS = [
 	"feishuTools.topicMessages",
 	"feishuTools.topicMessagesTimeoutMs",
 	"feishuTools.sendFile",
+	"feishuTools.wikiRead",
+	"feishuTools.wikiWrite",
+	"wikiRoots",
 	"promptContextTimeoutMs",
 	"provider",
 	"model",
@@ -12395,6 +14054,12 @@ const PANEL_COPY = {
 	discardTab: "放弃本页更改",
 	saveHintClean: "没有未保存的更改。",
 	dirtyCount: "未保存项",
+	listAdd: "添加",
+	listRemove: "移除",
+	listEntry: "第 {n} 项",
+	listTooMany: "最多 {max} 项（空输入框不计）",
+	listNotArray: "必须是字符串列表",
+	listEntryNotString: "必须是字符串",
 	browseDirectory: "选择目录…",
 	browsingDirectory: "选择中…",
 	directoryPicked: "已选择目录",
@@ -12750,6 +14415,7 @@ async function openFeishuDomain(ctx) {
 	const accessGroupsRaw = domain.table("access_groups");
 	const accessUsersRaw = domain.table("access_users");
 	const accessRequestsRaw = domain.table("access_requests");
+	const accessWikiUsersRaw = domain.table("access_wiki_users");
 	return {
 		routes: {
 			get: (key) => table.get(key),
@@ -12793,11 +14459,19 @@ async function openFeishuDomain(ctx) {
 			delete: (key) => accessRequestsRaw.delete(key),
 			entries: () => accessRequestsRaw.entries()
 		},
+		accessWikiUsers: {
+			get: (key) => accessWikiUsersRaw.get(key),
+			put: (key, value) => accessWikiUsersRaw.put(key, value),
+			delete: (key) => accessWikiUsersRaw.delete(key),
+			entries: () => accessWikiUsersRaw.entries()
+		},
 		getGlobal: () => domain.global.get() ?? {},
 		setGlobal: (value) => domain.global.set(value),
 		close: () => domain.close()
 	};
 }
+/** `/auth wiki` usage line (input-error card). */
+const AUTH_WIKI_USAGE = "用法：/auth wiki add <@用户|user_id> 或 /auth wiki remove <@用户|user_id>。知识库白名单里的用户（以及管理员）发起的话题可以使用知识库工具。";
 /**
 * Resolve one credential reference through the host credentials seam.
 *
@@ -12866,6 +14540,8 @@ var FeishuService = class {
 	attachmentFetchTools;
 	topicMessagesTools;
 	sendFileTools;
+	wikiConsent;
+	wikiTools;
 	/** FIFO admission for ordinary turns and commands targeting one route. */
 	routeOperations = new RouteOperationQueue();
 	/** Active Host command executions, aborted before shutdown tears peers down. */
@@ -12956,6 +14632,7 @@ var FeishuService = class {
 				if (this.effectiveAttachmentBackend() === "native") mounts.push(this.attachmentFetchTools.mount(agentCtx, sessionId));
 				mounts.push(this.topicMessagesTools.mount(agentCtx, sessionId));
 				mounts.push(this.sendFileTools.mount(agentCtx, sessionId));
+				mounts.push(this.wikiTools.mount(agentCtx, sessionId));
 				return Promise.all(mounts).then(() => void 0);
 			},
 			warn: (message, ...args) => this.ctx.logger?.warn?.(message, ...args)
@@ -13010,6 +14687,21 @@ var FeishuService = class {
 			fetchAvailable: () => this.effectiveAttachmentBackend() === "native",
 			warn: (message, ...args) => this.ctx.logger?.warn?.(message, ...args)
 		});
+		this.wikiConsent = new WikiConsent({
+			channel: () => this.started ? this.channel : void 0,
+			timeoutMs: () => this.config.approvalTimeoutMs,
+			onError: (sessionId, error) => {
+				this.ctx.logger?.warn?.("dsh-channels wiki consent error (session %s): %s", sessionId, String(error));
+			}
+		});
+		this.wikiTools = new WikiToolRuntime({
+			config: () => this.config,
+			channel: () => this.started ? this.channel : void 0,
+			routeOfSession: (sessionId) => this.approvalRouteFor(sessionId),
+			mayUseWiki: (userId) => this.accessController.isAdmin(userId) || this.accessStore.hasWikiUser(userId),
+			consent: this.wikiConsent,
+			warn: (message, ...args) => this.ctx.logger?.warn?.(message, ...args)
+		});
 		this.sendFileTools = new SendFileToolRuntime({
 			config: () => this.config,
 			channel: () => this.started ? this.channel : void 0,
@@ -13696,7 +15388,9 @@ var FeishuService = class {
 				requireMention: this.config.requireMention,
 				ownerLookupFailed: this.config.accessMode === "guarded" && this.configuredAdminUserId() === void 0 && this.appOwner !== void 0 && "error" in this.appOwner && this.appOwner.apiRejected,
 				slashCommandPanel: this.config.slashCommandPanel,
-				sendFile: this.config.feishuTools.sendFile
+				sendFile: this.config.feishuTools.sendFile,
+				wikiRead: this.config.feishuTools.wikiRead && this.config.wikiRoots.length > 0,
+				wikiWrite: this.config.feishuTools.wikiWrite && this.config.wikiRoots.length > 0
 			});
 			state = result.consoleUrl === void 0 ? {
 				state: "ok",
@@ -13890,6 +15584,7 @@ var FeishuService = class {
 			accessRequests.onCardAction(event);
 			answerer.onCardAction(event);
 			questions.onCardAction(event);
+			this.wikiConsent.onCardAction(event);
 			this.onStopAction(event);
 			this.onPickAction(event).catch((error) => {
 				this.ctx.logger?.warn?.("dsh-channels: picker card action failed: %s", String(error));
@@ -13968,6 +15663,7 @@ var FeishuService = class {
 		this.approvalAnswerer?.dispose();
 		this.approvalAnswerer = void 0;
 		this.questionAnswerer?.dispose();
+		this.wikiConsent.dispose();
 		this.questionAnswerer = void 0;
 		if (this.gcTimer !== void 0) {
 			clearInterval(this.gcTimer);
@@ -14097,8 +15793,8 @@ var FeishuService = class {
 					`**准入模式**：\`${this.config.accessMode}\``,
 					`**管理员**：${this.adminStatusLine()}`,
 					...msg.chatType === "group" ? [`**本群**：${this.accessStore.hasGroup(msg.chatId) ? "已授权" : "未授权"}（\`${msg.chatId}\`）`] : [],
-					`**白名单**：群 ${groups.length} 个 · 用户 ${users.length} 个 · 待处理申请 ${pending.length} 个`,
-					"群授权：`/auth allow` 或 `/auth revoke`（在目标群内发）；用户授权：`/auth user add @用户` 或 `/auth user add <user_id>`。"
+					`**白名单**：群 ${groups.length} 个 · 用户 ${users.length} 个 · 知识库 ${this.accessStore.wikiUserRecords().length} 个 · 待处理申请 ${pending.length} 个`,
+					"群授权：`/auth allow` 或 `/auth revoke`（在目标群内发）；用户授权：`/auth user add @用户` 或 `/auth user add <user_id>`；知识库授权：`/auth wiki add @用户`。"
 				]), direct);
 				return;
 			}
@@ -14195,17 +15891,68 @@ var FeishuService = class {
 				}, direct);
 				return;
 			}
+			if (action === "wiki") {
+				const sub = words[1];
+				const target = sub === "add" || sub === "remove" ? resolveAuthUserTarget(words.slice(2).join(" "), msg.mentions, this.channel?.botOpenId()) : {
+					ok: false,
+					reason: "usage"
+				};
+				if (!target.ok) {
+					await this.delivery.commandCard(msg, {
+						kind: "input-error",
+						command: "auth",
+						text: target.reason === "usage" ? AUTH_WIKI_USAGE : AUTH_USER_TARGET_ERRORS[target.reason]
+					}, direct);
+					return;
+				}
+				const { userId } = target;
+				const label = target.name === void 0 ? `\`${userId}\`` : `${target.name}（\`${userId}\`）`;
+				if (sub === "add") {
+					if (this.accessStore.hasWikiUser(userId)) {
+						await this.delivery.commandCard(msg, {
+							kind: "success",
+							command: "auth",
+							text: `该用户已在知识库白名单中：${label}。`
+						}, direct);
+						return;
+					}
+					await this.accessStore.addWikiUser({
+						userId,
+						...target.name === void 0 ? {} : { name: target.name },
+						source: "command",
+						addedBy: msg.senderId,
+						addedAt: now
+					});
+					await this.delivery.commandCard(msg, {
+						kind: "success",
+						command: "auth",
+						text: `✅ 已把 ${label} 加入知识库白名单：他发起的话题里可以使用知识库工具（每次读取、新建、修改仍需他在授权卡上确认）。`
+					}, direct);
+					return;
+				}
+				const removed = await this.accessStore.removeWikiUser(userId);
+				await this.delivery.commandCard(msg, {
+					kind: removed ? "success" : "unavailable",
+					command: "auth",
+					text: removed ? `已把 ${label} 移出知识库白名单，立即生效。` : `用户 ${label} 不在知识库白名单中。`
+				}, direct);
+				return;
+			}
 			if (action === "list") {
 				const groups = this.accessStore.groupRecords();
 				const users = this.accessStore.userRecords();
 				const pending = this.accessStore.pendingRequests();
 				const groupLines = groups.length === 0 ? ["（暂无）"] : groups.slice(0, 30).map((group) => `- ${group.name ?? group.chatId} \`${group.chatId}\``);
 				const userLines = users.length === 0 ? ["（暂无）"] : users.slice(0, 30).map((user) => `- ${user.name ?? user.userId} \`${user.userId}\``);
+				const wikiUsers = this.accessStore.wikiUserRecords();
+				const wikiLines = wikiUsers.length === 0 ? ["（暂无；管理员始终可用）"] : wikiUsers.slice(0, 30).map((user) => `- ${user.name ?? user.userId} \`${user.userId}\``);
 				await this.delivery.standaloneReply(msg, standaloneInfoCard("**🔐 访问授权清单**", [
 					`**已授权群（${groups.length}）**`,
 					...groupLines,
 					`**已授权用户（${users.length}）**`,
 					...userLines,
+					`**知识库白名单（${wikiUsers.length}）**`,
+					...wikiLines,
 					`**待处理申请**：${pending.length} 个（可在 Web 设置面板处理）`
 				]), direct);
 				return;
@@ -14213,7 +15960,7 @@ var FeishuService = class {
 			await this.delivery.commandCard(msg, {
 				kind: "input-error",
 				command: "auth",
-				text: "用法：/auth [status|allow|revoke|list|user add <@用户|user_id>|user remove <@用户|user_id>]"
+				text: "用法：/auth [status|allow|revoke|list|user add <@用户|user_id>|user remove <@用户|user_id>|wiki add <@用户|user_id>|wiki remove <@用户|user_id>]"
 			}, direct);
 		} catch (error) {
 			this.ctx.logger?.warn?.("dsh-channels: /auth failed: %s", String(error));
@@ -14359,7 +16106,8 @@ var FeishuService = class {
 	/**
 	* Picker-card click: run the chosen `/<command> <arg>` exactly as if the
 	* operator had typed it under the picker card, so access admission, route
-	* ownership and validation are the typed command's. Stale pickers (the
+	* ownership and validation are the typed command's. The result replaces
+	* the picker card in place instead of arriving as a new card. Stale pickers (the
 	* topic was rebound, or the card was forwarded elsewhere) and non-owner
 	* clicks are ignored.
 	*/
@@ -14371,7 +16119,7 @@ var FeishuService = class {
 		const userId = event.operator.userId;
 		if (route === void 0 || route.chatId !== event.chatId || userId !== route.senderUserId) return;
 		const line = `/${action.command} ${action.arg}`;
-		await this.handleSlashMessage({
+		await this.delivery.replacingCard(event.messageId, () => this.handleSlashMessage({
 			messageId: event.messageId,
 			chatId: route.chatId,
 			chatType: route.chatType,
@@ -14384,7 +16132,7 @@ var FeishuService = class {
 			mentionedBot: true,
 			...route.kind === "thread" ? { threadId: route.key } : {},
 			createTime: Date.now()
-		}, line);
+		}, line));
 	}
 	/**
 	* `/permissions`: show this Session's effective sandbox+approval preset and
@@ -14565,7 +16313,7 @@ var FeishuService = class {
 			return;
 		}
 		if (spec.name === "health" && result.kind === "success") {
-			await this.delivery.standaloneReply(msg, buildHealthCard(this.healthSnapshot()));
+			await this.delivery.standaloneReply(msg, buildHealthCard(this.healthSnapshot()), { createThread: false });
 			return;
 		}
 		if (spec.name === "status" && result.kind === "success") {
@@ -15488,8 +17236,81 @@ const BOOLEAN_KEYS = /* @__PURE__ */ new Set([
 	"prefetchImages",
 	"feishuTools.attachmentFetch",
 	"feishuTools.topicMessages",
-	"feishuTools.sendFile"
+	"feishuTools.sendFile",
+	"feishuTools.wikiRead",
+	"feishuTools.wikiWrite"
 ]);
+/** Editable keys rendered as `string-list` (one input per entry). */
+const STRING_LIST_FIELDS = { wikiRoots: {
+	maxItems: 20,
+	itemFormat: "wiki-root-link"
+} };
+/** Entry checks per item format: the readable reason, or `undefined` when valid. */
+const ITEM_FORMAT_CHECKS = { "wiki-root-link": (entry) => {
+	const parsed = parseWikiRootLink(entry);
+	return parsed.ok ? void 0 : WIKI_ROOT_LINK_ERRORS[parsed.error];
+} };
+/** `第 N 项「entry」：reason`, shared wording with the Client check. */
+function listEntryMessage(index, entry, reason) {
+	const position = PANEL_COPY.listEntry.replace("{n}", String(index + 1));
+	return entry === void 0 ? `${position}${reason}` : `${position}「${entry}」：${reason}`;
+}
+/**
+* Normalize one submitted `string-list` value: entries are trimmed, empty
+* entries dropped, the count bounded by `maxItems`, and every remaining entry
+* checked against `itemFormat`. Issue indexes refer to the submitted array
+* (empty inputs included), so the panel can mark the exact input.
+*
+* @param key - The editable key the issues are reported under.
+* @param raw - The untrusted submitted value.
+* @param spec - The field's bounds and entry format.
+* @returns The cleaned entries, or every per-entry / whole-field issue.
+*/
+function normalizeStringList(key, raw, spec) {
+	if (!Array.isArray(raw)) return {
+		ok: false,
+		issues: [{
+			key,
+			message: PANEL_COPY.listNotArray
+		}]
+	};
+	const issues = [];
+	const value = [];
+	const check = spec.itemFormat === void 0 ? void 0 : ITEM_FORMAT_CHECKS[spec.itemFormat];
+	raw.forEach((item, index) => {
+		if (typeof item !== "string") {
+			issues.push({
+				key,
+				index,
+				message: listEntryMessage(index, void 0, PANEL_COPY.listEntryNotString)
+			});
+			return;
+		}
+		const entry = item.trim();
+		if (entry === "") return;
+		const reason = check?.(entry);
+		if (reason !== void 0) {
+			issues.push({
+				key,
+				index,
+				message: listEntryMessage(index, entry, reason)
+			});
+			return;
+		}
+		value.push(entry);
+	});
+	if (raw.filter((item) => typeof item !== "string" || item.trim() !== "").length > spec.maxItems) issues.push({
+		key,
+		message: PANEL_COPY.listTooMany.replace("{max}", String(spec.maxItems))
+	});
+	return issues.length > 0 ? {
+		ok: false,
+		issues
+	} : {
+		ok: true,
+		value
+	};
+}
 const SELECT_OPTIONS = {
 	attachmentStore: [{
 		value: "native",
@@ -15673,6 +17494,20 @@ const FIELD_META = {
 		label: "启用 feishu_send_file 工具",
 		help: "让模型把当前话题工作目录里生成的图片/文件发回当前会话（图片 ≤10 MB，文件 ≤30 MB）。需开通 im:resource 权限。对新会话生效。"
 	},
+	"feishuTools.wikiRead": {
+		label: "启用知识库读取工具",
+		help: "让模型浏览「知识库范围」内的知识库节点并读取 docx 文档（feishu_wiki_list / feishu_wiki_read），以应用身份访问。需开通 wiki:wiki（或 wiki:wiki:readonly）与 docx:document（或 docx:document:readonly）权限。只有话题所有者是管理员或在知识库白名单（/auth wiki add @成员）中才能使用；打开文档前会在授权卡上征得话题所有者同意，每个话题一次。知识库范围为空时不挂载。对新会话生效。"
+	},
+	"feishuTools.wikiWrite": {
+		label: "启用知识库写入工具",
+		help: "让模型在「知识库范围」内新建 docx 文档，并编辑本应用拥有的文档（feishu_wiki_create / feishu_wiki_edit），以应用身份访问；每次新建或编辑都需话题所有者在审批卡上同意。需开通 wiki:wiki 与 docx:document 权限；使用条件同读取工具（管理员或知识库白名单）。知识库范围为空时不挂载。对新会话生效。"
+	},
+	wikiRoots: {
+		label: "知识库范围（wikiRoots）",
+		help: "知识库工具只能访问这些位置，每个输入框填一个链接：整个知识空间 https://<租户>.feishu.cn/wiki/space/<space_id>，或节点 https://<租户>.feishu.cn/wiki/<node_token>（该节点及其下所有节点）；最多 20 项，空输入框保存时忽略。留空 = 不挂载任何知识库工具（即使上面的开关已开启）。对新会话生效。",
+		placeholder: "https://<租户>.feishu.cn/wiki/space/<space_id>",
+		wide: true
+	},
 	provider: {
 		label: "模型服务商",
 		help: "留空 = 使用部署默认；例如 deepseek-official。",
@@ -15738,6 +17573,9 @@ const GROUP_OF = {
 	"feishuTools.topicMessages": "tools",
 	"feishuTools.topicMessagesTimeoutMs": "tools",
 	"feishuTools.sendFile": "tools",
+	"feishuTools.wikiRead": "tools",
+	"feishuTools.wikiWrite": "tools",
+	wikiRoots: "tools",
 	provider: "model",
 	model: "model",
 	reasoningEffort: "model",
@@ -15750,10 +17588,11 @@ const GROUP_OF = {
 const FIELD_DESCRIPTORS = EDITABLE_KEYS.map((key) => {
 	const meta = FIELD_META[key];
 	const options = SELECT_OPTIONS[key];
+	const list = STRING_LIST_FIELDS[key];
 	return {
 		key,
 		label: meta.label,
-		kind: BOOLEAN_KEYS.has(key) ? "boolean" : options !== void 0 ? "select" : meta.min !== void 0 ? "number" : "text",
+		kind: list !== void 0 ? "string-list" : BOOLEAN_KEYS.has(key) ? "boolean" : options !== void 0 ? "select" : meta.min !== void 0 ? "number" : "text",
 		group: GROUP_OF[key],
 		help: meta.help,
 		...options === void 0 ? {} : { options },
@@ -15761,6 +17600,8 @@ const FIELD_DESCRIPTORS = EDITABLE_KEYS.map((key) => {
 		...meta.max === void 0 ? {} : { max: meta.max },
 		...meta.step === void 0 ? {} : { step: meta.step },
 		...meta.placeholder === void 0 ? {} : { placeholder: meta.placeholder },
+		...list === void 0 ? {} : { maxItems: list.maxItems },
+		...list?.itemFormat === void 0 ? {} : { itemFormat: list.itemFormat },
 		...meta.wide === void 0 ? {} : { wide: meta.wide },
 		restartRequired: RESTART_SET.has(key)
 	};
@@ -16166,6 +18007,7 @@ var SettingsSurface = class {
 		};
 		const raw = {};
 		const clearedKeys = [];
+		const listIssues = [];
 		for (const key of EDITABLE_KEYS) {
 			const value = values[key];
 			if (value === void 0) continue;
@@ -16173,16 +18015,23 @@ var SettingsSurface = class {
 				clearedKeys.push(key);
 				continue;
 			}
+			const list = STRING_LIST_FIELDS[key];
+			if (list !== void 0) {
+				const normalized = normalizeStringList(key, value, list);
+				if (normalized.ok) setOverlayValue(raw, key, normalized.value);
+				else listIssues.push(...normalized.issues);
+				continue;
+			}
 			setOverlayValue(raw, key, value);
 		}
 		const parsed = parseOverlay(raw);
-		if (!parsed.ok) return {
+		if (!parsed.ok || listIssues.length > 0) return {
 			ok: false,
 			error: "配置校验失败",
-			issues: parsed.issues.map((issue) => ({
+			issues: [...listIssues, ...parsed.ok ? [] : parsed.issues.map((issue) => ({
 				key: issue.path,
 				message: issue.message
-			}))
+			}))]
 		};
 		if (parsed.patch.baseDir !== void 0) {
 			const problem = await prepareWorkspaceBaseDir(parsed.patch.baseDir);