@modesto_ma/dsh-channels 0.5.0-beta.1 → 0.5.0-beta.2

package/src/feishu-channel.ts

@@ -12,6 +12,8 @@ import { createLarkChannel, LoggerLevel } from '@larksuiteoapi/node-sdk'
 import { SCOPE_GRANTED_STATUS } from './feishu/scopes.ts'
 import type { ScopeGrant } from './feishu/scopes.ts'
 import type { RemoteSlashCommand, SlashCommandApi, SlashCommandEntry } from './feishu/slash-commands.ts'
+import { createWikiApi } from './feishu/wiki/api.ts'
+import type { WikiApi, WikiRawRequest } from './feishu/wiki/api.ts'
 import type {
   BotAddedEvent,
   ChatInfo,
@@ -87,6 +89,12 @@ export interface FeishuChannel {
    * absence skips the panel sync.
    */
   readonly slashCommands?: SlashCommandApi
+  /**
+   * Wiki and docx endpoints used by the wiki tools, called with the app
+   * identity. Optional so stubs can omit it; absence fails wiki calls with
+   * a channel-unavailable result.
+   */
+  readonly wiki?: WikiApi
   /** Current official-SDK WebSocket lifecycle snapshot, when initialized. */
   getConnectionStatus(): FeishuConnectionStatus | undefined
   /** Start the WebSocket long connection (resolves after the handshake). */
@@ -361,6 +369,7 @@ class LarkChannelAdapter implements FeishuChannel {
   private readonly requireMention: boolean
   private readonly dmMode: 'open' | 'disabled'
   readonly slashCommands: SlashCommandApi
+  readonly wiki: WikiApi
 
   constructor(options: ChannelConnectOptions) {
     this.channel = createLarkChannel({
@@ -391,6 +400,7 @@ class LarkChannelAdapter implements FeishuChannel {
     this.dmMode = options.dmMode
     const rawClient = this.channel.rawClient
     this.slashCommands = slashCommandApi(async <T,>(input: Parameters<RawRequest>[0]) => await rawClient.request<T>(input))
+    this.wiki = createWikiApi(async <T,>(input: Parameters<WikiRawRequest>[0]) => await rawClient.request<T>(input))
   }
 
   onMessage(handler: (message: NormalizedMessage) => void | Promise<void>): () => void {

package/src/service.ts

@@ -64,6 +64,8 @@ import { AttachmentIntake } from './feishu/inbound-attachments.ts'
 import { InboundAttachmentStore, effectiveAttachmentMode, resolveAttachmentService } from './feishu/native-attachments.ts'
 import { AttachmentFetchToolRuntime, TopicMessagesToolRuntime } from './feishu/tools.ts'
 import { SendFileToolRuntime } from './feishu/send-file.ts'
+import { WikiConsent } from './feishu/wiki/consent.ts'
+import { WikiToolRuntime } from './feishu/wiki/tools.ts'
 import type { KnownAttachmentMessageInput, KnownAttachmentSource } from './feishu/tools.ts'
 import {
   MessageReader, TOPIC_MESSAGES_MAX_LIMIT, buildHistoryContextBlock,
@@ -146,6 +148,7 @@ async function openFeishuDomain(ctx: HostContext): Promise<FeishuDomainHandle> {
   const accessGroupsRaw = domain.table('access_groups')
   const accessUsersRaw = domain.table('access_users')
   const accessRequestsRaw = domain.table('access_requests')
+  const accessWikiUsersRaw = domain.table('access_wiki_users')
   return {
     routes: {
       get: key => table.get(key) as RouteRecord | undefined,
@@ -189,12 +192,21 @@ async function openFeishuDomain(ctx: HostContext): Promise<FeishuDomainHandle> {
       delete: key => accessRequestsRaw.delete(key),
       entries: () => accessRequestsRaw.entries() as IterableIterator<[string, AccessRequestRecord]>,
     },
+    accessWikiUsers: {
+      get: key => accessWikiUsersRaw.get(key) as AccessUserRecord | undefined,
+      put: (key, value) => accessWikiUsersRaw.put(key, value),
+      delete: key => accessWikiUsersRaw.delete(key),
+      entries: () => accessWikiUsersRaw.entries() as IterableIterator<[string, AccessUserRecord]>,
+    },
     getGlobal: () => (domain.global.get() ?? {}) as FeishuDomainGlobal,
     setGlobal: value => domain.global.set(value),
     close: () => domain.close(),
   }
 }
 
+/** `/auth wiki` usage line (input-error card). */
+const AUTH_WIKI_USAGE = '用法：/auth wiki add <@用户|user_id> 或 /auth wiki remove <@用户|user_id>。知识库白名单里的用户（以及管理员）发起的话题可以使用知识库工具。'
+
 /**
  * Resolve one credential reference through the host credentials seam.
  *
@@ -268,6 +280,8 @@ export class FeishuService {
   private readonly attachmentFetchTools: AttachmentFetchToolRuntime
   private readonly topicMessagesTools: TopicMessagesToolRuntime
   private readonly sendFileTools: SendFileToolRuntime
+  private readonly wikiConsent: WikiConsent
+  private readonly wikiTools: WikiToolRuntime
   /** FIFO admission for ordinary turns and commands targeting one route. */
   private readonly routeOperations = new RouteOperationQueue()
   /** Active Host command executions, aborted before shutdown tears peers down. */
@@ -378,6 +392,7 @@ export class FeishuService {
         }
         mounts.push(this.topicMessagesTools.mount(agentCtx, sessionId))
         mounts.push(this.sendFileTools.mount(agentCtx, sessionId))
+        mounts.push(this.wikiTools.mount(agentCtx, sessionId))
         return Promise.all(mounts).then(() => undefined)
       },
       warn: (message, ...args) => this.ctx.logger?.warn?.(message, ...args),
@@ -437,6 +452,21 @@ export class FeishuService {
       fetchAvailable: () => this.effectiveAttachmentBackend() === 'native',
       warn: (message, ...args) => this.ctx.logger?.warn?.(message, ...args),
     })
+    this.wikiConsent = new WikiConsent({
+      channel: () => (this.started ? this.channel : undefined),
+      timeoutMs: () => this.config.approvalTimeoutMs,
+      onError: (sessionId, error) => {
+        this.ctx.logger?.warn?.('dsh-channels wiki consent error (session %s): %s', sessionId, String(error))
+      },
+    })
+    this.wikiTools = new WikiToolRuntime({
+      config: () => this.config,
+      channel: () => (this.started ? this.channel : undefined),
+      routeOfSession: sessionId => this.approvalRouteFor(sessionId),
+      mayUseWiki: userId => this.accessController.isAdmin(userId) || this.accessStore.hasWikiUser(userId),
+      consent: this.wikiConsent,
+      warn: (message, ...args) => this.ctx.logger?.warn?.(message, ...args),
+    })
     this.sendFileTools = new SendFileToolRuntime({
       config: () => this.config,
       channel: () => (this.started ? this.channel : undefined),
@@ -1168,6 +1198,8 @@ export class FeishuService {
           && this.appOwner !== undefined && 'error' in this.appOwner && this.appOwner.apiRejected,
         slashCommandPanel: this.config.slashCommandPanel,
         sendFile: this.config.feishuTools.sendFile,
+        wikiRead: this.config.feishuTools.wikiRead && this.config.wikiRoots.length > 0,
+        wikiWrite: this.config.feishuTools.wikiWrite && this.config.wikiRoots.length > 0,
       })
       state = result.consoleUrl === undefined
         ? { state: 'ok', checkedAt: Date.now() }
@@ -1383,6 +1415,7 @@ export class FeishuService {
       void accessRequests.onCardAction(event)
       answerer.onCardAction(event)
       questions.onCardAction(event)
+      this.wikiConsent.onCardAction(event)
       this.onStopAction(event)
       void this.onPickAction(event).catch((error: unknown) => {
         this.ctx.logger?.warn?.('dsh-channels: picker card action failed: %s', String(error))
@@ -1504,6 +1537,7 @@ export class FeishuService {
     this.approvalAnswerer?.dispose()
     this.approvalAnswerer = undefined
     this.questionAnswerer?.dispose()
+    this.wikiConsent.dispose()
     this.questionAnswerer = undefined
     if (this.gcTimer !== undefined) {
       clearInterval(this.gcTimer)
@@ -1651,8 +1685,8 @@ export class FeishuService {
           ...(msg.chatType === 'group'
             ? [`**本群**：${this.accessStore.hasGroup(msg.chatId) ? '已授权' : '未授权'}（\`${msg.chatId}\`）`]
             : []),
-          `**白名单**：群 ${groups.length} 个 · 用户 ${users.length} 个 · 待处理申请 ${pending.length} 个`,
-          '群授权：`/auth allow` 或 `/auth revoke`（在目标群内发）；用户授权：`/auth user add @用户` 或 `/auth user add <user_id>`。',
+          `**白名单**：群 ${groups.length} 个 · 用户 ${users.length} 个 · 知识库 ${this.accessStore.wikiUserRecords().length} 个 · 待处理申请 ${pending.length} 个`,
+          '群授权：`/auth allow` 或 `/auth revoke`（在目标群内发）；用户授权：`/auth user add @用户` 或 `/auth user add <user_id>`；知识库授权：`/auth wiki add @用户`。',
         ]), direct)
         return
       }
@@ -1735,6 +1769,45 @@ export class FeishuService {
         }, direct)
         return
       }
+      if (action === 'wiki') {
+        const sub = words[1]
+        const target = sub === 'add' || sub === 'remove'
+          ? resolveAuthUserTarget(words.slice(2).join(' '), msg.mentions, this.channel?.botOpenId())
+          : { ok: false as const, reason: 'usage' as const }
+        if (!target.ok) {
+          await this.delivery.commandCard(msg, {
+            kind: 'input-error', command: 'auth',
+            text: target.reason === 'usage' ? AUTH_WIKI_USAGE : AUTH_USER_TARGET_ERRORS[target.reason],
+          }, direct)
+          return
+        }
+        const { userId } = target
+        const label = target.name === undefined ? `\`${userId}\`` : `${target.name}（\`${userId}\`）`
+        if (sub === 'add') {
+          if (this.accessStore.hasWikiUser(userId)) {
+            await this.delivery.commandCard(msg, {
+              kind: 'success', command: 'auth', text: `该用户已在知识库白名单中：${label}。`,
+            }, direct)
+            return
+          }
+          await this.accessStore.addWikiUser({
+            userId,
+            ...(target.name === undefined ? {} : { name: target.name }),
+            source: 'command', addedBy: msg.senderId, addedAt: now,
+          })
+          await this.delivery.commandCard(msg, {
+            kind: 'success', command: 'auth',
+            text: `✅ 已把 ${label} 加入知识库白名单：他发起的话题里可以使用知识库工具（每次读取、新建、修改仍需他在授权卡上确认）。`,
+          }, direct)
+          return
+        }
+        const removed = await this.accessStore.removeWikiUser(userId)
+        await this.delivery.commandCard(msg, {
+          kind: removed ? 'success' : 'unavailable', command: 'auth',
+          text: removed ? `已把 ${label} 移出知识库白名单，立即生效。` : `用户 ${label} 不在知识库白名单中。`,
+        }, direct)
+        return
+      }
       if (action === 'list') {
         const groups = this.accessStore.groupRecords()
         const users = this.accessStore.userRecords()
@@ -1745,18 +1818,24 @@ export class FeishuService {
         const userLines = users.length === 0
           ? ['（暂无）']
           : users.slice(0, 30).map(user => `- ${user.name ?? user.userId} \`${user.userId}\``)
+        const wikiUsers = this.accessStore.wikiUserRecords()
+        const wikiLines = wikiUsers.length === 0
+          ? ['（暂无；管理员始终可用）']
+          : wikiUsers.slice(0, 30).map(user => `- ${user.name ?? user.userId} \`${user.userId}\``)
         await this.delivery.standaloneReply(msg, standaloneInfoCard('**🔐 访问授权清单**', [
           `**已授权群（${groups.length}）**`,
           ...groupLines,
           `**已授权用户（${users.length}）**`,
           ...userLines,
+          `**知识库白名单（${wikiUsers.length}）**`,
+          ...wikiLines,
           `**待处理申请**：${pending.length} 个（可在 Web 设置面板处理）`,
         ]), direct)
         return
       }
       await this.delivery.commandCard(msg, {
         kind: 'input-error', command: 'auth',
-        text: '用法：/auth [status|allow|revoke|list|user add <@用户|user_id>|user remove <@用户|user_id>]',
+        text: '用法：/auth [status|allow|revoke|list|user add <@用户|user_id>|user remove <@用户|user_id>|wiki add <@用户|user_id>|wiki remove <@用户|user_id>]',
       }, direct)
     } catch (error) {
       this.ctx.logger?.warn?.('dsh-channels: /auth failed: %s', String(error))
@@ -1916,7 +1995,8 @@ export class FeishuService {
   /**
    * Picker-card click: run the chosen `/<command> <arg>` exactly as if the
    * operator had typed it under the picker card, so access admission, route
-   * ownership and validation are the typed command's. Stale pickers (the
+   * ownership and validation are the typed command's. The result replaces
+   * the picker card in place instead of arriving as a new card. Stale pickers (the
    * topic was rebound, or the card was forwarded elsewhere) and non-owner
    * clicks are ignored.
    */
@@ -1928,7 +2008,7 @@ export class FeishuService {
     const userId = event.operator.userId
     if (route === undefined || route.chatId !== event.chatId || userId !== route.senderUserId) return
     const line = `/${action.command} ${action.arg}`
-    await this.handleSlashMessage({
+    await this.delivery.replacingCard(event.messageId, () => this.handleSlashMessage({
       messageId: event.messageId,
       chatId: route.chatId,
       chatType: route.chatType,
@@ -1941,7 +2021,7 @@ export class FeishuService {
       mentionedBot: true,
       ...(route.kind === 'thread' ? { threadId: route.key } : {}),
       createTime: Date.now(),
-    }, line)
+    }, line))
   }
 
   /**
@@ -2157,7 +2237,7 @@ export class FeishuService {
       return
     }
     if (spec.name === 'health' && result.kind === 'success') {
-      await this.delivery.standaloneReply(msg, buildHealthCard(this.healthSnapshot()))
+      await this.delivery.standaloneReply(msg, buildHealthCard(this.healthSnapshot()), { createThread: false })
       return
     }
     if (spec.name === 'status' && result.kind === 'success') {

package/src/settings/contract.ts

@@ -81,6 +81,10 @@ export const EDITABLE_KEYS = [
   'feishuTools.topicMessages',
   'feishuTools.topicMessagesTimeoutMs',
   'feishuTools.sendFile',
+  'feishuTools.wikiRead',
+  'feishuTools.wikiWrite',
+  // 知识库范围（顶层 `wikiRoots` 字符串列表；为空时不挂载任何知识库工具）
+  'wikiRoots',
   'promptContextTimeoutMs',
   // 模型
   'provider',
@@ -110,8 +114,21 @@ export const RESTART_KEYS = [
 
 export type RestartKey = (typeof RESTART_KEYS)[number]
 
-/** Render kinds the generic panel form understands. */
-export type FieldKind = 'boolean' | 'number' | 'text' | 'select'
+/**
+ * Render kinds the generic panel form understands. `string-list` renders one
+ * single-line input per entry with a remove button each and an add button
+ * below; its value is a `readonly string[]`.
+ */
+export type FieldKind = 'boolean' | 'number' | 'text' | 'select' | 'string-list'
+
+/**
+ * Per-entry format of a `string-list` field. Host and Client both map the
+ * format onto the same entry parser, so an invalid entry is marked before
+ * saving and the Host re-validates it on save.
+ *
+ * - `wiki-root-link`: a Feishu wiki space link or wiki node link (`wikiRoots`).
+ */
+export type StringListItemFormat = 'wiki-root-link'
 
 /**
  * Field groups partition the editable form. Each group is rendered inside one
@@ -139,7 +156,12 @@ export interface EditableFieldWire {
   min?: number
   max?: number
   step?: number
+  /** Input placeholder; for `string-list` it applies to every entry input. */
   placeholder?: string
+  /** `string-list` only: most non-empty entries the Host accepts. */
+  maxItems?: number
+  /** `string-list` only: format every non-empty entry must satisfy. */
+  itemFormat?: StringListItemFormat
   /** Render across the whole form width (long paths). */
   wide?: boolean
   /**
@@ -182,8 +204,13 @@ export interface CatalogWire {
   defaultPresetId?: string
 }
 
-/** Values the panel may submit. Empty strings for optional text fields clear the override. */
-export type ConfigValue = string | number | boolean
+/**
+ * Values the panel may submit. Empty strings for optional text fields clear the
+ * override. A `string-list` field submits its entries as typed (untrimmed,
+ * empty inputs included) so Host issue indexes match the rendered inputs; the
+ * Host trims entries and drops empty ones before persisting.
+ */
+export type ConfigValue = string | number | boolean | readonly string[]
 export type EditableValues = Partial<Record<EditableKey, ConfigValue>>
 
 /** Read-only facts shown in the advanced card. */
@@ -418,6 +445,11 @@ export interface SaveConfigRequest {
 export interface FieldIssueWire {
   key: string
   message: string
+  /**
+   * `string-list` only: zero-based position of the rejected entry in the
+   * submitted array (empty inputs included). Absent for a whole-field issue.
+   */
+  index?: number
 }
 
 /** `PUT /dsh-channels/config` response. */
@@ -607,6 +639,12 @@ export const PANEL_COPY = {
   discardTab: '放弃本页更改',
   saveHintClean: '没有未保存的更改。',
   dirtyCount: '未保存项',
+  listAdd: '添加',
+  listRemove: '移除',
+  listEntry: '第 {n} 项',
+  listTooMany: '最多 {max} 项（空输入框不计）',
+  listNotArray: '必须是字符串列表',
+  listEntryNotString: '必须是字符串',
   browseDirectory: '选择目录…',
   browsingDirectory: '选择中…',
   directoryPicked: '已选择目录',

package/src/settings/surface.ts

@@ -13,6 +13,7 @@
 import { DSH_CHANNELS_VERSION } from '../session-export.ts'
 import type { FeishuConfig } from '../config.ts'
 import { FEISHU_USER_ID_PATTERN } from '../domain.ts'
+import { parseWikiRootLink, WIKI_ROOT_LINK_ERRORS } from '../feishu/wiki/links.ts'
 import type { HealthSnapshot } from '../health.ts'
 import { prepareWorkspaceBaseDir } from '../workspaces.ts'
 import {
@@ -45,6 +46,7 @@ import type {
   SaveCredentialsResponse,
   ScopeCheckWire,
   SlashCommandSyncWire,
+  StringListItemFormat,
 } from './contract.ts'
 import {
   configValueOf,
@@ -137,8 +139,77 @@ const BOOLEAN_KEYS = new Set<EditableKey>([
   'feishuTools.attachmentFetch',
   'feishuTools.topicMessages',
   'feishuTools.sendFile',
+  'feishuTools.wikiRead',
+  'feishuTools.wikiWrite',
 ])
 
+/** Bounds and entry format of one `string-list` field. */
+interface StringListSpec {
+  /** Most non-empty entries accepted (mirrors the config schema bound). */
+  maxItems: number
+  itemFormat?: StringListItemFormat
+}
+
+/** Editable keys rendered as `string-list` (one input per entry). */
+const STRING_LIST_FIELDS: Partial<Record<EditableKey, StringListSpec>> = {
+  wikiRoots: { maxItems: 20, itemFormat: 'wiki-root-link' },
+}
+
+/** Entry checks per item format: the readable reason, or `undefined` when valid. */
+const ITEM_FORMAT_CHECKS: Readonly<Record<StringListItemFormat, (entry: string) => string | undefined>> = {
+  'wiki-root-link': (entry) => {
+    const parsed = parseWikiRootLink(entry)
+    return parsed.ok ? undefined : WIKI_ROOT_LINK_ERRORS[parsed.error]
+  },
+}
+
+/** `第 N 项「entry」：reason`, shared wording with the Client check. */
+function listEntryMessage(index: number, entry: string | undefined, reason: string): string {
+  const position = PANEL_COPY.listEntry.replace('{n}', String(index + 1))
+  return entry === undefined ? `${position}${reason}` : `${position}「${entry}」：${reason}`
+}
+
+/**
+ * Normalize one submitted `string-list` value: entries are trimmed, empty
+ * entries dropped, the count bounded by `maxItems`, and every remaining entry
+ * checked against `itemFormat`. Issue indexes refer to the submitted array
+ * (empty inputs included), so the panel can mark the exact input.
+ *
+ * @param key - The editable key the issues are reported under.
+ * @param raw - The untrusted submitted value.
+ * @param spec - The field's bounds and entry format.
+ * @returns The cleaned entries, or every per-entry / whole-field issue.
+ */
+export function normalizeStringList(
+  key: EditableKey,
+  raw: unknown,
+  spec: StringListSpec,
+): { ok: true; value: string[] } | { ok: false; issues: FieldIssueWire[] } {
+  if (!Array.isArray(raw)) return { ok: false, issues: [{ key, message: PANEL_COPY.listNotArray }] }
+  const issues: FieldIssueWire[] = []
+  const value: string[] = []
+  const check = spec.itemFormat === undefined ? undefined : ITEM_FORMAT_CHECKS[spec.itemFormat]
+  raw.forEach((item: unknown, index) => {
+    if (typeof item !== 'string') {
+      issues.push({ key, index, message: listEntryMessage(index, undefined, PANEL_COPY.listEntryNotString) })
+      return
+    }
+    const entry = item.trim()
+    if (entry === '') return
+    const reason = check?.(entry)
+    if (reason !== undefined) {
+      issues.push({ key, index, message: listEntryMessage(index, entry, reason) })
+      return
+    }
+    value.push(entry)
+  })
+  const count = raw.filter(item => typeof item !== 'string' || item.trim() !== '').length
+  if (count > spec.maxItems) {
+    issues.push({ key, message: PANEL_COPY.listTooMany.replace('{max}', String(spec.maxItems)) })
+  }
+  return issues.length > 0 ? { ok: false, issues } : { ok: true, value }
+}
+
 const SELECT_OPTIONS: Partial<Record<EditableKey, ReadonlyArray<{ value: string; label: string }>>> = {
   attachmentStore: [
     { value: 'native', label: 'DSH 原生附件库（默认）' },
@@ -281,6 +352,20 @@ const FIELD_META: Record<EditableKey, { label: string; help: string; min?: numbe
     label: '启用 feishu_send_file 工具',
     help: '让模型把当前话题工作目录里生成的图片/文件发回当前会话（图片 ≤10 MB，文件 ≤30 MB）。需开通 im:resource 权限。对新会话生效。',
   },
+  'feishuTools.wikiRead': {
+    label: '启用知识库读取工具',
+    help: '让模型浏览「知识库范围」内的知识库节点并读取 docx 文档（feishu_wiki_list / feishu_wiki_read），以应用身份访问。需开通 wiki:wiki（或 wiki:wiki:readonly）与 docx:document（或 docx:document:readonly）权限。只有话题所有者是管理员或在知识库白名单（/auth wiki add @成员）中才能使用；打开文档前会在授权卡上征得话题所有者同意，每个话题一次。知识库范围为空时不挂载。对新会话生效。',
+  },
+  'feishuTools.wikiWrite': {
+    label: '启用知识库写入工具',
+    help: '让模型在「知识库范围」内新建 docx 文档，并编辑本应用拥有的文档（feishu_wiki_create / feishu_wiki_edit），以应用身份访问；每次新建或编辑都需话题所有者在审批卡上同意。需开通 wiki:wiki 与 docx:document 权限；使用条件同读取工具（管理员或知识库白名单）。知识库范围为空时不挂载。对新会话生效。',
+  },
+  wikiRoots: {
+    label: '知识库范围（wikiRoots）',
+    help: '知识库工具只能访问这些位置，每个输入框填一个链接：整个知识空间 https://<租户>.feishu.cn/wiki/space/<space_id>，或节点 https://<租户>.feishu.cn/wiki/<node_token>（该节点及其下所有节点）；最多 20 项，空输入框保存时忽略。留空 = 不挂载任何知识库工具（即使上面的开关已开启）。对新会话生效。',
+    placeholder: 'https://<租户>.feishu.cn/wiki/space/<space_id>',
+    wide: true,
+  },
   provider: { label: '模型服务商', help: '留空 = 使用部署默认；例如 deepseek-official。', placeholder: '留空 = 部署默认' },
   model: { label: '模型 id', help: '留空 = 使用部署默认；例如 deepseek-v4-flash。', placeholder: '留空 = 部署默认' },
   reasoningEffort: { label: '推理档位', help: '模型声明的精确档位 id（如 high / max）；留空 = 适配器默认。', placeholder: '留空 = 适配器默认' },
@@ -316,6 +401,9 @@ const GROUP_OF: Record<EditableKey, EditableFieldWire['group']> = {
   'feishuTools.topicMessages': 'tools',
   'feishuTools.topicMessagesTimeoutMs': 'tools',
   'feishuTools.sendFile': 'tools',
+  'feishuTools.wikiRead': 'tools',
+  'feishuTools.wikiWrite': 'tools',
+  wikiRoots: 'tools',
   provider: 'model',
   model: 'model',
   reasoningEffort: 'model',
@@ -329,10 +417,13 @@ const GROUP_OF: Record<EditableKey, EditableFieldWire['group']> = {
 export const FIELD_DESCRIPTORS: readonly EditableFieldWire[] = EDITABLE_KEYS.map(key => {
   const meta = FIELD_META[key]
   const options = SELECT_OPTIONS[key]
+  const list = STRING_LIST_FIELDS[key]
   return {
     key,
     label: meta.label,
-    kind: BOOLEAN_KEYS.has(key) ? 'boolean' : options !== undefined ? 'select' : meta.min !== undefined ? 'number' : 'text',
+    kind: list !== undefined
+      ? 'string-list'
+      : BOOLEAN_KEYS.has(key) ? 'boolean' : options !== undefined ? 'select' : meta.min !== undefined ? 'number' : 'text',
     group: GROUP_OF[key],
     help: meta.help,
     ...(options === undefined ? {} : { options }),
@@ -340,6 +431,8 @@ export const FIELD_DESCRIPTORS: readonly EditableFieldWire[] = EDITABLE_KEYS.map
     ...(meta.max === undefined ? {} : { max: meta.max }),
     ...(meta.step === undefined ? {} : { step: meta.step }),
     ...(meta.placeholder === undefined ? {} : { placeholder: meta.placeholder }),
+    ...(list === undefined ? {} : { maxItems: list.maxItems }),
+    ...(list?.itemFormat === undefined ? {} : { itemFormat: list.itemFormat }),
     ...(meta.wide === undefined ? {} : { wide: meta.wide }),
     restartRequired: RESTART_SET.has(key),
   }
@@ -726,6 +819,7 @@ export class SettingsSurface {
 
     const raw: Record<string, unknown> = {}
     const clearedKeys: EditableKey[] = []
+    const listIssues: FieldIssueWire[] = []
     for (const key of EDITABLE_KEYS) {
       const value = values[key]
       if (value === undefined) continue
@@ -733,15 +827,22 @@ export class SettingsSurface {
         clearedKeys.push(key)
         continue
       }
+      const list = STRING_LIST_FIELDS[key]
+      if (list !== undefined) {
+        const normalized = normalizeStringList(key, value, list)
+        if (normalized.ok) setOverlayValue(raw, key, normalized.value)
+        else listIssues.push(...normalized.issues)
+        continue
+      }
       setOverlayValue(raw, key, value)
     }
 
     const parsed = parseOverlay(raw)
-    if (!parsed.ok) {
-      const issues: FieldIssueWire[] = parsed.issues.map(issue => ({
-        key: issue.path,
-        message: issue.message,
-      }))
+    if (!parsed.ok || listIssues.length > 0) {
+      const issues: FieldIssueWire[] = [
+        ...listIssues,
+        ...(parsed.ok ? [] : parsed.issues.map(issue => ({ key: issue.path, message: issue.message }))),
+      ]
       return { ok: false, error: '配置校验失败', issues }
     }