@modesto_ma/dsh-channels 0.5.0-beta.1 → 0.5.0-beta.3

package/lib/index.js

@@ -295,7 +295,7 @@ function standaloneInfoCard(title, lines) {
 * @module dsh-channels/access/cards
 */
 /** Truncate one display string so the card stays far below the size budget. */
-function clip$1(value, max = 120) {
+function clip$2(value, max = 120) {
 	const trimmed = value.trim();
 	return trimmed.length <= max ? trimmed : `${trimmed.slice(0, max)}…`;
 }
@@ -339,7 +339,7 @@ function field(label, value) {
 * group). Unauthorized groups with a pending request carry「授权本群 / 忽略」.
 */
 function buildGroupInfoCard(input) {
-	const name = input.name === void 0 ? void 0 : clip$1(input.name);
+	const name = input.name === void 0 ? void 0 : clip$2(input.name);
 	const elements = [];
 	elements.push(field("群名", name === void 0 || name === "" ? "（未知）" : name));
 	elements.push(field("群 ID", `\`${input.chatId}\``));
@@ -361,8 +361,8 @@ function buildGroupInfoCard(input) {
 * from the DM card.
 */
 function buildUserRequestCard(input) {
-	const display = clip$1(input.name ?? input.requesterName ?? "");
-	const groupName = input.groupName === void 0 ? void 0 : clip$1(input.groupName);
+	const display = clip$2(input.name ?? input.requesterName ?? "");
+	const groupName = input.groupName === void 0 ? void 0 : clip$2(input.groupName);
 	const elements = [field("用户", display === "" ? "（未知昵称）" : display), field("user_id", `\`${input.userId}\``)];
 	if (groupName !== void 0 && groupName !== "") {
 		const group = input.chatId === void 0 ? groupName : `${groupName}（\`${input.chatId}\`）`;
@@ -396,7 +396,7 @@ const SETTLED_PRESENTATION = {
 function buildRequestSettledCard(input) {
 	const presentation = SETTLED_PRESENTATION[input.status];
 	const kindLabel = input.kind === "group" ? "群" : "用户";
-	const name = input.targetName === void 0 ? void 0 : clip$1(input.targetName);
+	const name = input.targetName === void 0 ? void 0 : clip$2(input.targetName);
 	const elements = [
 		field(kindLabel, name === void 0 || name === "" ? `\`${input.targetId}\`` : `${name}（\`${input.targetId}\`）`),
 		field("处理时间", formatTime(input.now)),
@@ -857,6 +857,8 @@ var AccessStore = class {
 	groups = /* @__PURE__ */ new Map();
 	users = /* @__PURE__ */ new Map();
 	requests = /* @__PURE__ */ new Map();
+	/** Wiki whitelist (`/auth wiki add`), independent of the user whitelist. */
+	wikiUsers = /* @__PURE__ */ new Map();
 	/** Cached key sets so `snapshot()` can stay allocation-free per message. */
 	groupKeys = /* @__PURE__ */ new Set();
 	userKeys = /* @__PURE__ */ new Set();
@@ -880,12 +882,14 @@ var AccessStore = class {
 			this.userKeys.add(key);
 		}
 		for (const [key, record] of domain.accessRequests.entries()) this.requests.set(key, record);
+		for (const [key, record] of domain.accessWikiUsers.entries()) this.wikiUsers.set(key, record);
 	}
 	/** Drop every in-memory record (shutdown). The domain owns durability. */
 	clear() {
 		this.groups.clear();
 		this.users.clear();
 		this.requests.clear();
+		this.wikiUsers.clear();
 		this.groupKeys.clear();
 		this.userKeys.clear();
 	}
@@ -941,6 +945,25 @@ var AccessStore = class {
 		this.userKeys.delete(userId);
 		return true;
 	}
+	/** Whether `userId` is on the wiki whitelist (the administrator is not implied). */
+	hasWikiUser(userId) {
+		return this.wikiUsers.has(userId);
+	}
+	/** Every wiki-whitelisted user, oldest first. */
+	wikiUserRecords() {
+		return [...this.wikiUsers.values()].sort((left, right) => left.addedAt - right.addedAt);
+	}
+	async addWikiUser(record) {
+		await this.requireDomain("add wiki user").accessWikiUsers.put(record.userId, record);
+		this.wikiUsers.set(record.userId, record);
+		return record;
+	}
+	async removeWikiUser(userId) {
+		if (!this.wikiUsers.has(userId)) return false;
+		await this.requireDomain("remove wiki user").accessWikiUsers.delete(userId);
+		this.wikiUsers.delete(userId);
+		return true;
+	}
 	/** Every authorization request, including settled ones (audit). */
 	requestRecords() {
 		return [...this.requests.values()].sort((left, right) => left.createdAt - right.createdAt);
@@ -1262,7 +1285,8 @@ const feishuDomain = {
 		expired_routes: { valueSchema: expiredRouteRecordSchema },
 		access_groups: { valueSchema: accessGroupRecordSchema },
 		access_users: { valueSchema: accessUserRecordSchema },
-		access_requests: { valueSchema: accessRequestRecordSchema }
+		access_requests: { valueSchema: accessRequestRecordSchema },
+		access_wiki_users: { valueSchema: accessUserRecordSchema }
 	}
 };
 /**
@@ -1348,7 +1372,7 @@ function approvalTimeoutLabel(timeoutMs) {
 	return `${Math.max(1, Math.round(timeoutMs / 6e4))} 分钟`;
 }
 /** Clip to `max` chars and report how many were dropped. */
-function clip(value, max) {
+function clip$1(value, max) {
 	return value.length <= max ? {
 		shown: value,
 		hidden: 0
@@ -1395,12 +1419,12 @@ function approvalActions(question) {
 function approvalQuestionElements(question) {
 	const elements = [markdown(question.escalateTo === void 0 ? `工具 \`${question.toolName}\` 请求执行一个需要授权的操作。` : `工具 \`${question.toolName}\` 请求把本次调用提升到 \`${question.escalateTo}\` 权限。`)];
 	if (question.command !== void 0 && question.command !== "") {
-		const command = clip(question.command, APPROVAL_COMMAND_MAX_CHARS);
+		const command = clip$1(question.command, APPROVAL_COMMAND_MAX_CHARS);
 		elements.push(markdown(`**将执行**\n\`\`\`\n${command.shown.replace(/```/gu, "`​``")}\n\`\`\``));
 		if (command.hidden > 0) elements.push(note(`已截断 ${command.hidden} 个字符`));
 	}
 	if (question.reason !== void 0 && question.reason !== "") {
-		const reason = clip(question.reason, APPROVAL_REASON_MAX_CHARS);
+		const reason = clip$1(question.reason, APPROVAL_REASON_MAX_CHARS);
 		elements.push(markdown(`> ${reason.shown.replace(/\s+/gu, " ")}${reason.hidden > 0 ? "…" : ""}`));
 	}
 	return elements;
@@ -1849,7 +1873,7 @@ function questionOptionButton(input, question, option) {
 		}
 	});
 }
-function questionElements(input) {
+function questionElements$1(input) {
 	const elements = [markdown("**❓ 需要你的回答**")];
 	input.questions.forEach((question, index) => {
 		const heading = question.header === void 0 || question.header === "" ? `**问题 ${index + 1}**` : `**问题 ${index + 1} · ${clipQuestionText(question.header, 80)}**`;
@@ -1881,7 +1905,7 @@ function questionElements(input) {
 }
 /** The pending structured-question card (one card carries every question). */
 function buildQuestionCard(input) {
-	return card(questionElements(input));
+	return card(questionElements$1(input));
 }
 const QUESTION_SETTLED_LINES = {
 	answered: "✅ 已回答",
@@ -2578,7 +2602,8 @@ function buildOnboardingCard() {
 *
 * A click carries the command and its argument back to the service, which
 * runs it exactly like the typed `/<command> <arg>` line, so admission,
-* ownership and validation stay in one place.
+* ownership and validation stay in one place; the result replaces the picker
+* card in place.
 *
 * @module dsh-channels/cards/picker
 */
@@ -2601,33 +2626,23 @@ function pickButton(input, label, arg) {
 	return textButton({
 		label: active ? `✅ ${label}` : label,
 		type: active ? "primary" : "default",
-		width: "fill",
-		margin: "0px",
 		value
 	});
 }
-/** Choices in two-column rows. */
-function optionRows(input, options) {
-	const rows = [];
-	for (let index = 0; index < options.length; index += 2) {
-		const pair = options.slice(index, index + 2).map((option) => pickButton(input, option.label, option.arg));
-		rows.push(columnSet(pair));
-	}
-	return rows;
-}
 /** Whether a value can be appended to a command line as one argument. */
 function isPickerArg(value) {
 	return value !== "" && !/\s/u.test(value);
 }
 /**
-* The picker card. Options whose argument cannot form one command-line token
+* The picker card: one full-width button per choice, in a single column.
+* Options whose argument cannot form one command-line token
 * are skipped; when more than `MAX_PICKER_OPTIONS` remain the rest are
 * reported as typed-only.
 */
 function buildPickerCard(input) {
 	const usable = input.options.filter((option) => isPickerArg(option.arg));
 	const shown = usable.slice(0, 12);
-	const elements = [markdown(input.text), ...optionRows(input, shown)];
+	const elements = [markdown(input.text), ...shown.map((option) => pickButton(input, option.label, option.arg))];
 	if (usable.length > shown.length) elements.push(note(`另有 ${usable.length - shown.length} 项未展示，可直接输入 /${input.command} <id>。`));
 	if (input.reset === true) elements.push(textButton({
 		label: "恢复默认",
@@ -2684,7 +2699,7 @@ const CHANNEL_COMMANDS = [
 		group: "基础",
 		description: "显示当前支持的斜杠命令",
 		routeFree: true,
-		directReply: false
+		directReply: true
 	},
 	{
 		name: "userid",
@@ -2710,7 +2725,8 @@ const CHANNEL_COMMANDS = [
 		name: "health",
 		group: "基础",
 		description: "显示 Harness 与飞书通道健康状态",
-		sessionOptional: true
+		sessionOptional: true,
+		directReply: true
 	},
 	{
 		name: "status",
@@ -3384,6 +3400,72 @@ const SEND_FILE_REQUIREMENT = {
 	level: "optional",
 	purpose: "上传图片/文件，让模型用 feishu_send_file 把生成的文件发给用户"
 };
+/** Spreadsheet and Base read needs, shared by the wiki read and write sets. */
+const SHEET_BASE_READ_REQUIREMENTS = [{
+	anyOf: [
+		"sheets:spreadsheet",
+		"sheets:spreadsheet:readonly",
+		"sheets:spreadsheet:read"
+	],
+	level: "optional",
+	purpose: "读取知识库电子表格（feishu_wiki_sheet_read）"
+}, {
+	anyOf: [
+		"bitable:app",
+		"bitable:app:readonly",
+		"base:record:read"
+	],
+	level: "optional",
+	purpose: "读取知识库多维表格（feishu_wiki_base_read）"
+}];
+/** Wiki read needs (`feishu_wiki_list` / `feishu_wiki_read` and the sheet/base read tools). */
+const WIKI_READ_REQUIREMENTS = [
+	{
+		anyOf: ["wiki:wiki", "wiki:wiki:readonly"],
+		level: "optional",
+		purpose: "浏览知识库节点（feishu_wiki_list / feishu_wiki_read）"
+	},
+	{
+		anyOf: ["docx:document", "docx:document:readonly"],
+		level: "optional",
+		purpose: "读取知识库中的文档内容（feishu_wiki_read）"
+	},
+	...SHEET_BASE_READ_REQUIREMENTS
+];
+/** Wiki write needs (`feishu_wiki_create` / `feishu_wiki_edit`). */
+const WIKI_WRITE_REQUIREMENTS = [
+	{
+		anyOf: ["wiki:wiki"],
+		level: "optional",
+		purpose: "在知识库中新建节点（feishu_wiki_create）"
+	},
+	{
+		anyOf: ["docx:document"],
+		level: "optional",
+		purpose: "写入与修改知识库文档内容（feishu_wiki_create / feishu_wiki_edit）"
+	},
+	{
+		anyOf: ["sheets:spreadsheet", "sheets:spreadsheet:write_only"],
+		level: "optional",
+		purpose: "写入知识库电子表格（feishu_wiki_sheet_edit）"
+	},
+	{
+		anyOf: ["bitable:app", "base:record:create"],
+		level: "optional",
+		purpose: "新增知识库多维表格记录（feishu_wiki_base_edit）"
+	},
+	{
+		anyOf: ["bitable:app", "base:record:update"],
+		level: "optional",
+		purpose: "修改本应用创建的多维表格中的记录（feishu_wiki_base_edit）"
+	},
+	{
+		anyOf: ["bitable:app", "base:record:delete"],
+		level: "optional",
+		purpose: "删除本应用创建的多维表格中的记录（feishu_wiki_base_edit）"
+	},
+	...SHEET_BASE_READ_REQUIREMENTS
+];
 /** Group receive needs while ordinary group messages require an @ mention. */
 const MENTION_GROUP_REQUIREMENTS = [{
 	anyOf: ["im:message.group_at_msg:readonly", "im:message.group_msg"],
@@ -3444,9 +3526,15 @@ function scopeRequirements(context) {
 		...context.requireMention ? MENTION_GROUP_REQUIREMENTS : [ALL_GROUP_REQUIREMENT],
 		...BASE_REQUIREMENTS,
 		...context.sendFile ? [SEND_FILE_REQUIREMENT] : [],
+		...wikiRequirements(context),
 		...context.slashCommandPanel ? SLASH_COMMAND_REQUIREMENTS : []
 	];
 }
+/** Wiki needs; the write set subsumes the read set's preferred scopes. */
+function wikiRequirements(context) {
+	if (context.wikiWrite) return WIKI_WRITE_REQUIREMENTS;
+	return context.wikiRead ? WIKI_READ_REQUIREMENTS : [];
+}
 /**
 * Compare `grants` with the applicable requirements. Only tenant (or untyped)
 * grants count: the plugin always calls with the app identity.
@@ -3473,6 +3561,486 @@ function checkScopes(grants, appId, context) {
 	};
 }
 //#endregion
+//#region src/feishu/wiki/api.ts
+/**
+* Feishu wiki (知识库) and docx OpenAPI calls used by the wiki tools, made
+* with the app identity (tenant access token).
+*
+* Structure calls use `wiki/v2` (`spaces/get_node`, `spaces/:id`,
+* `spaces/:id/nodes`); document content uses the `docs_ai/v1` document
+* endpoints, which read and write Markdown or Feishu document XML directly
+* (block ids are exported only in XML); the revision check uses
+* `docx/v1/documents/:id`. Every call maps a thrown transport error or a
+* non-zero Feishu `code` to {@link FeishuApiError}.
+*
+* @module dsh-channels/feishu/wiki/api
+*/
+const OBJ_TYPES = /* @__PURE__ */ new Set([
+	"doc",
+	"docx",
+	"sheet",
+	"mindnote",
+	"bitable",
+	"file",
+	"slides"
+]);
+/** Feishu's per-page maximum for `spaces/:id/nodes`. */
+const LIST_PAGE_SIZE = 50;
+function thrownError(error) {
+	if (error instanceof FeishuApiError) return error;
+	const data = error?.response?.data;
+	const code = typeof data?.code === "number" ? data.code : void 0;
+	const msg = typeof data?.msg === "string" ? data.msg : void 0;
+	if (code === void 0 && msg === void 0) return new FeishuApiError(error instanceof Error ? error.message : String(error));
+	return new FeishuApiError([code === void 0 ? void 0 : `code=${code}`, msg].filter(Boolean).join(" "), code);
+}
+/**
+* One Feishu OpenAPI call: unwraps `data` and maps a transport error or a
+* non-zero `code` to {@link FeishuApiError}.
+*
+* @param request The SDK's generic request.
+* @param input Method, URL, query, and body.
+* @returns The response `data`.
+*/
+async function call(request, input) {
+	let response;
+	try {
+		response = await request(input);
+	} catch (error) {
+		throw thrownError(error);
+	}
+	if (response.code !== void 0 && response.code !== 0) throw new FeishuApiError(`code=${response.code}${response.msg === void 0 ? "" : ` ${response.msg}`}`, response.code);
+	if (response.data === void 0) throw new FeishuApiError(`${input.url}: response has no data`);
+	return response.data;
+}
+function wikiNode(raw, where) {
+	if (raw?.space_id === void 0 || raw.node_token === void 0 || raw.obj_token === void 0 || raw.obj_type === void 0 || !OBJ_TYPES.has(raw.obj_type)) throw new FeishuApiError(`${where}: response node is incomplete`);
+	return {
+		spaceId: raw.space_id,
+		nodeToken: raw.node_token,
+		objToken: raw.obj_token,
+		objType: raw.obj_type,
+		...raw.parent_node_token === void 0 || raw.parent_node_token === "" ? {} : { parentNodeToken: raw.parent_node_token },
+		nodeType: raw.node_type === "shortcut" ? "shortcut" : "origin",
+		title: raw.title ?? "",
+		hasChild: raw.has_child === true,
+		...raw.owner === void 0 || raw.owner === "" ? {} : { owner: raw.owner },
+		...raw.url === void 0 || raw.url === "" ? {} : { url: raw.url }
+	};
+}
+/**
+* Encode one URL path segment.
+*
+* @param value Raw segment.
+* @returns The encoded segment.
+*/
+function segment(value) {
+	return encodeURIComponent(value);
+}
+/**
+* {@link WikiApi} over the SDK's generic authenticated request.
+*
+* @param request `Client.request` of the connected SDK client.
+* @returns The API.
+*/
+function createWikiApi(request) {
+	return {
+		async getNode(token, objType) {
+			const url = "/open-apis/wiki/v2/spaces/get_node";
+			return wikiNode((await call(request, {
+				method: "GET",
+				url,
+				params: {
+					token,
+					obj_type: objType
+				}
+			})).node, url);
+		},
+		async spaceName(spaceId) {
+			return (await call(request, {
+				method: "GET",
+				url: `/open-apis/wiki/v2/spaces/${segment(spaceId)}`
+			})).space?.name ?? "";
+		},
+		async listChildren(spaceId, parentNodeToken, pageToken) {
+			const url = `/open-apis/wiki/v2/spaces/${segment(spaceId)}/nodes`;
+			const data = await call(request, {
+				method: "GET",
+				url,
+				params: {
+					page_size: LIST_PAGE_SIZE,
+					...parentNodeToken === void 0 ? {} : { parent_node_token: parentNodeToken },
+					...pageToken === void 0 ? {} : { page_token: pageToken }
+				}
+			});
+			return {
+				items: (data.items ?? []).map((item) => wikiNode(item, url)),
+				...data.has_more === true && data.page_token !== void 0 && data.page_token !== "" ? { pageToken: data.page_token } : {}
+			};
+		},
+		async createNode(spaceId, parentNodeToken, title, objType) {
+			const url = `/open-apis/wiki/v2/spaces/${segment(spaceId)}/nodes`;
+			return wikiNode((await call(request, {
+				method: "POST",
+				url,
+				data: {
+					obj_type: objType,
+					node_type: "origin",
+					title,
+					...parentNodeToken === void 0 ? {} : { parent_node_token: parentNodeToken }
+				}
+			})).node, url);
+		},
+		async documentRevision(documentId) {
+			const url = `/open-apis/docx/v1/documents/${segment(documentId)}`;
+			const revision = (await call(request, {
+				method: "GET",
+				url
+			})).document?.revision_id;
+			if (typeof revision !== "number") throw new FeishuApiError(`${url}: response has no revision_id`);
+			return revision;
+		},
+		async fetchDocument(documentId, fetch) {
+			const url = `/open-apis/docs_ai/v1/documents/${segment(documentId)}/fetch`;
+			const ids = fetch.format === "xml" && fetch.withBlockIds;
+			const readOption = fetch.scope === "full" ? void 0 : {
+				read_mode: fetch.scope,
+				...fetch.startBlockId === void 0 ? {} : { start_block_id: fetch.startBlockId },
+				...fetch.endBlockId === void 0 ? {} : { end_block_id: fetch.endBlockId },
+				...fetch.keyword === void 0 ? {} : { keyword: fetch.keyword },
+				...fetch.maxDepth === void 0 ? {} : { max_depth: String(fetch.maxDepth) }
+			};
+			const document = (await call(request, {
+				method: "POST",
+				url,
+				data: {
+					format: fetch.format,
+					export_option: {
+						export_block_id: ids,
+						export_style_attrs: false,
+						export_cite_extra_data: false
+					},
+					...readOption === void 0 ? {} : { read_option: readOption }
+				}
+			})).document;
+			if (document === void 0 || typeof document.content !== "string") throw new FeishuApiError(`${url}: response has no document content`);
+			return {
+				revisionId: document.revision_id ?? 0,
+				content: document.content
+			};
+		},
+		async updateDocument(documentId, update) {
+			const data = await call(request, {
+				method: "PUT",
+				url: `/open-apis/docs_ai/v1/documents/${segment(documentId)}`,
+				data: {
+					format: update.format,
+					command: update.command,
+					...update.content === void 0 ? {} : { content: update.content },
+					...update.pattern === void 0 ? {} : { pattern: update.pattern },
+					...update.blockId === void 0 ? {} : { block_id: update.blockId },
+					...update.startBlockId === void 0 ? {} : { start_block_id: update.startBlockId },
+					...update.endBlockId === void 0 ? {} : { end_block_id: update.endBlockId },
+					...update.revisionId === void 0 ? {} : { revision_id: update.revisionId }
+				}
+			});
+			const warnings = Array.isArray(data.warnings) ? data.warnings.filter((item) => typeof item === "string" && item !== "") : [];
+			return {
+				result: data.result ?? "success",
+				...data.document?.revision_id === void 0 ? {} : { revisionId: data.document.revision_id },
+				...data.updated_blocks_count === void 0 ? {} : { updatedBlocks: data.updated_blocks_count },
+				warnings
+			};
+		}
+	};
+}
+//#endregion
+//#region src/feishu/wiki/base-api.ts
+/**
+* Feishu Base (多维表格) calls used by the wiki base tools, made with the app
+* identity (tenant access token).
+*
+* Everything goes through `base/v3/bases/:base_token/...` (the legacy
+* `bitable/v1` API is not used). Record reads return a column matrix that
+* this module turns into one field map per record; record writes take flat
+* maps keyed by field name or field id. Writes carry no precondition, are
+* applied asynchronously (a read straight after a write may not show it), and
+* must not run in parallel on one table.
+*
+* @module dsh-channels/feishu/wiki/base-api
+*/
+function stringArray(value) {
+	return Array.isArray(value) && value.every((item) => typeof item === "string") ? value : void 0;
+}
+function ignoredFieldsOf(value) {
+	if (!Array.isArray(value)) return [];
+	return value.flatMap((item) => {
+		if (typeof item !== "object" || item === null) return [];
+		const { name, id, reason } = item;
+		const label = typeof name === "string" && name !== "" ? name : typeof id === "string" ? id : "?";
+		return [typeof reason === "string" && reason !== "" ? `${label}: ${reason}` : label];
+	});
+}
+function recordPage(raw, where) {
+	const names = stringArray(raw.fields) ?? [];
+	const ids = stringArray(raw.record_id_list) ?? [];
+	const rows = Array.isArray(raw.data) ? raw.data : [];
+	if (rows.length !== ids.length) throw new FeishuApiError(`${where}: record ids and rows differ in length`);
+	return {
+		records: ids.map((recordId, index) => {
+			const row = rows[index];
+			if (!Array.isArray(row) || row.length !== names.length) throw new FeishuApiError(`${where}: row ${index} does not match the field list`);
+			return {
+				recordId,
+				fields: Object.fromEntries(names.map((name, column) => [name, row[column] ?? null]))
+			};
+		}),
+		hasMore: raw.has_more === true,
+		...typeof raw.rev === "number" ? { rev: raw.rev } : {},
+		...typeof raw.timezone === "string" && raw.timezone !== "" ? { timezone: raw.timezone } : {},
+		ignoredFields: ignoredFieldsOf(raw.ignored_fields)
+	};
+}
+/**
+* {@link BaseApi} over the SDK's generic authenticated request.
+*
+* @param request `Client.request` of the connected SDK client.
+* @returns The API.
+*/
+function createBaseApi(request) {
+	const tablePath = (baseToken, tableId) => `/open-apis/base/v3/bases/${segment(baseToken)}/tables/${segment(tableId)}`;
+	return {
+		async listTables(baseToken) {
+			const data = await call(request, {
+				method: "GET",
+				url: `/open-apis/base/v3/bases/${segment(baseToken)}/tables`,
+				params: {
+					offset: 0,
+					limit: 300
+				}
+			});
+			return (Array.isArray(data.tables) ? data.tables : Array.isArray(data.items) ? data.items : []).flatMap((item) => {
+				if (typeof item !== "object" || item === null) return [];
+				const { id, table_id, name, table_name } = item;
+				const tableId = typeof id === "string" ? id : typeof table_id === "string" ? table_id : void 0;
+				if (tableId === void 0) return [];
+				return [{
+					tableId,
+					name: typeof name === "string" ? name : typeof table_name === "string" ? table_name : ""
+				}];
+			});
+		},
+		async listFields(baseToken, tableId) {
+			const data = await call(request, {
+				method: "GET",
+				url: `${tablePath(baseToken, tableId)}/fields`,
+				params: {
+					offset: 0,
+					limit: 300
+				}
+			});
+			return (Array.isArray(data.fields) ? data.fields : Array.isArray(data.items) ? data.items : []).flatMap((item) => {
+				if (typeof item !== "object" || item === null) return [];
+				const { id, field_id, name, field_name, type, ...properties } = item;
+				const fieldId = typeof id === "string" ? id : typeof field_id === "string" ? field_id : void 0;
+				if (fieldId === void 0) return [];
+				return [{
+					fieldId,
+					name: typeof name === "string" ? name : typeof field_name === "string" ? field_name : "",
+					type: typeof type === "string" ? type : "not_support",
+					properties
+				}];
+			});
+		},
+		async listRecords(baseToken, tableId, query) {
+			const url = `${tablePath(baseToken, tableId)}/records`;
+			const params = new URLSearchParams({
+				offset: String(query.offset),
+				limit: String(query.limit)
+			});
+			for (const field of query.fields ?? []) params.append("field_id", field);
+			if (query.viewId !== void 0) params.set("view_id", query.viewId);
+			if (query.filter !== void 0) params.set("filter", JSON.stringify(query.filter));
+			if (query.sort !== void 0) params.set("sort", JSON.stringify(query.sort));
+			return recordPage(await call(request, {
+				method: "GET",
+				url: `${url}?${params.toString()}`
+			}), url);
+		},
+		async searchRecords(baseToken, tableId, search) {
+			const url = `${tablePath(baseToken, tableId)}/records/search`;
+			return recordPage(await call(request, {
+				method: "POST",
+				url,
+				data: {
+					keyword: search.keyword,
+					search_fields: search.searchFields,
+					...search.fields === void 0 ? {} : { select_fields: search.fields },
+					...search.viewId === void 0 ? {} : { view_id: search.viewId },
+					...search.filter === void 0 ? {} : { filter: search.filter },
+					...search.sort === void 0 ? {} : { sort: search.sort },
+					offset: search.offset,
+					limit: search.limit
+				}
+			}), url);
+		},
+		async createRecords(baseToken, tableId, records) {
+			return stringArray((await call(request, {
+				method: "POST",
+				url: `${tablePath(baseToken, tableId)}/records/batch_create`,
+				data: { create_records: records }
+			})).record_id_list) ?? [];
+		},
+		async updateRecords(baseToken, tableId, updates) {
+			return ignoredFieldsOf((await call(request, {
+				method: "POST",
+				url: `${tablePath(baseToken, tableId)}/records/batch_update`,
+				data: { update_records: updates }
+			})).ignored_fields);
+		},
+		async deleteRecords(baseToken, tableId, recordIds) {
+			await call(request, {
+				method: "POST",
+				url: `${tablePath(baseToken, tableId)}/records/batch_delete`,
+				data: { record_id_list: recordIds }
+			});
+		}
+	};
+}
+//#endregion
+//#region src/feishu/wiki/sheet-api.ts
+/**
+* Feishu spreadsheet (电子表格) calls used by the wiki sheet tools, made with
+* the app identity (tenant access token).
+*
+* Everything goes through the `sheet_ai/v2` tool endpoints: `POST
+* spreadsheets/:token/tools/invoke_read` (or `invoke_write`) with body
+* `{tool_name, input}`, where `input` is a JSON string that also carries
+* `excel_id`, and the result is the JSON string `data.output`. Read tools sent
+* to `invoke_write` (or the reverse) are rejected by the gateway. Writes carry
+* no base revision and no idempotency key; callers check the workbook
+* revision before writing.
+*
+* @module dsh-channels/feishu/wiki/sheet-api
+*/
+function invokePath(token, kind) {
+	return `/open-apis/sheet_ai/v2/spreadsheets/${segment(token)}/tools/invoke_${kind}`;
+}
+async function invoke(request, token, kind, toolName, input) {
+	const data = await call(request, {
+		method: "POST",
+		url: invokePath(token, kind),
+		data: {
+			tool_name: toolName,
+			input: JSON.stringify({
+				excel_id: token,
+				...input
+			})
+		}
+	});
+	if (typeof data.output !== "string" || data.output === "") return {};
+	let output;
+	try {
+		output = JSON.parse(data.output);
+	} catch (error) {
+		throw new FeishuApiError(`${toolName}: output is not JSON: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	if (Array.isArray(output)) return { sheets: output };
+	if (typeof output !== "object" || output === null) throw new FeishuApiError(`${toolName}: output is not an object`);
+	return output;
+}
+function optionalString(value) {
+	return typeof value === "string" && value !== "" ? value : void 0;
+}
+function optionalNumber(value) {
+	return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function sheetInfo(raw, position) {
+	const sheetId = optionalString(raw.sheet_id);
+	if (sheetId === void 0) return void 0;
+	const rowCount = optionalNumber(raw.row_count);
+	const columnCount = optionalNumber(raw.column_count);
+	return {
+		sheetId,
+		title: optionalString(raw.title) ?? optionalString(raw.sheet_name) ?? "",
+		index: optionalNumber(raw.index) ?? position,
+		resourceType: optionalString(raw.resource_type) ?? "sheet",
+		hidden: raw.hidden === true || raw.is_hidden === true,
+		...rowCount === void 0 ? {} : { rowCount },
+		...columnCount === void 0 ? {} : { columnCount }
+	};
+}
+function cellOf(value) {
+	if (value === null) return {};
+	if (typeof value === "string" && value.startsWith("=")) return { formula: value };
+	return { value };
+}
+/**
+* {@link SheetApi} over the SDK's generic authenticated request.
+*
+* @param request `Client.request` of the connected SDK client.
+* @returns The API.
+*/
+function formulaError(raw) {
+	if (typeof raw !== "object" || raw === null) return [];
+	const entry = raw;
+	const cell = optionalString(entry.cell);
+	if (cell === void 0) return [];
+	const formula = optionalString(entry.formula);
+	const errorType = optionalString(entry.error_type);
+	const detail = optionalString(entry.detail);
+	return [{
+		cell,
+		...formula === void 0 ? {} : { formula },
+		...errorType === void 0 ? {} : { errorType },
+		...detail === void 0 ? {} : { detail }
+	}];
+}
+function createSheetApi(request) {
+	return {
+		async workbook(token) {
+			const output = await invoke(request, token, "read", "get_workbook_structure", {});
+			const sheets = (Array.isArray(output.sheets) ? output.sheets : []).flatMap((raw, position) => {
+				const info = typeof raw === "object" && raw !== null ? sheetInfo(raw, position) : void 0;
+				return info === void 0 ? [] : [info];
+			});
+			const revision = optionalNumber(output.revision);
+			return {
+				...revision === void 0 ? {} : { revision },
+				sheets
+			};
+		},
+		async readCsv(token, read) {
+			const output = await invoke(request, token, "read", "get_range_as_csv", {
+				sheet_id: read.sheetId,
+				range: read.range,
+				max_chars: read.maxChars,
+				max_rows: 1e9,
+				skip_hidden: false
+			});
+			const actualRange = optionalString(output.actual_range);
+			const currentRegion = optionalString(output.current_region);
+			const warning = optionalString(output.warning_message);
+			return {
+				csv: typeof output.annotated_csv === "string" ? output.annotated_csv : "",
+				...actualRange === void 0 ? {} : { actualRange },
+				...currentRegion === void 0 ? {} : { currentRegion },
+				hasMore: output.has_more === true,
+				...warning === void 0 ? {} : { warning }
+			};
+		},
+		async writeCells(token, write) {
+			const output = await invoke(request, token, "write", "set_cell_range", {
+				sheet_id: write.sheetId,
+				range: write.range,
+				cells: write.rows.map((row) => row.map(cellOf)),
+				...write.allowOverwrite === false ? { allow_overwrite: false } : {}
+			});
+			return { formulaErrors: (Array.isArray(output.formula_errors) ? output.formula_errors : []).flatMap(formulaError) };
+		}
+	};
+}
+//#endregion
 //#region src/feishu-channel.ts
 /**
 * Thin wrapper over the official SDK's `createLarkChannel` high-level module.
@@ -3665,6 +4233,9 @@ var LarkChannelAdapter = class {
 	requireMention;
 	dmMode;
 	slashCommands;
+	wiki;
+	sheets;
+	bases;
 	constructor(options) {
 		this.channel = createLarkChannel({
 			appId: options.appId,
@@ -3683,6 +4254,10 @@ var LarkChannelAdapter = class {
 		this.dmMode = options.dmMode;
 		const rawClient = this.channel.rawClient;
 		this.slashCommands = slashCommandApi(async (input) => await rawClient.request(input));
+		const wikiRequest = async (input) => await rawClient.request(input);
+		this.wiki = createWikiApi(wikiRequest);
+		this.sheets = createSheetApi(wikiRequest);
+		this.bases = createBaseApi(wikiRequest);
 	}
 	onMessage(handler) {
 		return this.channel.on("message", (message) => {
@@ -4830,7 +5405,7 @@ function resolveAttachmentService(ctx) {
 		if (isAttachmentStore(viaGet)) return viaGet;
 	} catch {}
 }
-const FAILURE_REASONS$1 = {
+const FAILURE_REASONS$2 = {
 	TOO_MANY_IMAGES: "图片数量超过单条消息上限",
 	IMAGES_TOO_LARGE: "图片总字节超过单条消息上限",
 	UNSUPPORTED_IMAGE_TYPE: "不支持的图片格式（仅支持 PNG/JPEG/WebP/GIF）",
@@ -4878,7 +5453,7 @@ function isAttachmentErrorCode(code) {
 }
 /** User/model-facing wording for one stable failure code. */
 function attachmentFailureReason(code) {
-	return FAILURE_REASONS$1[code];
+	return FAILURE_REASONS$2[code];
 }
 /**
 * Extract a host attachment failure code from an arbitrary thrown value.
@@ -4993,7 +5568,7 @@ var NativeAttachmentStore = class {
 		if (mediaType === void 0) return {
 			ok: false,
 			code: "UNSUPPORTED_IMAGE_TYPE",
-			reason: FAILURE_REASONS$1.UNSUPPORTED_IMAGE_TYPE
+			reason: FAILURE_REASONS$2.UNSUPPORTED_IMAGE_TYPE
 		};
 		const limits = mounted.limits;
 		if (limits !== void 0) try {
@@ -5007,7 +5582,7 @@ var NativeAttachmentStore = class {
 			if (mediaTypes !== void 0 && mediaTypes.length > 0 && !mediaTypes.includes(mediaType)) return {
 				ok: false,
 				code: "UNSUPPORTED_IMAGE_TYPE",
-				reason: FAILURE_REASONS$1.UNSUPPORTED_IMAGE_TYPE
+				reason: FAILURE_REASONS$2.UNSUPPORTED_IMAGE_TYPE
 			};
 		} catch {}
 		const name = sanitizeFileName$1(input.name);
@@ -5048,7 +5623,7 @@ var NativeAttachmentStore = class {
 		if (input.signal?.aborted === true) return {
 			ok: false,
 			code: "ABORTED",
-			reason: FAILURE_REASONS$1.ABORTED
+			reason: FAILURE_REASONS$2.ABORTED
 		};
 		const name = sanitizeFileName$1(input.name) ?? "file.bin";
 		try {
@@ -5126,18 +5701,18 @@ var NativeAttachmentStore = class {
 		if (signal?.aborted === true || isAbortError$2(error)) return {
 			ok: false,
 			code: "ABORTED",
-			reason: FAILURE_REASONS$1.ABORTED
+			reason: FAILURE_REASONS$2.ABORTED
 		};
 		const code = attachmentErrorCodeOf(error, service);
 		if (code !== void 0) return {
 			ok: false,
 			code,
-			reason: FAILURE_REASONS$1[code]
+			reason: FAILURE_REASONS$2[code]
 		};
 		return {
 			ok: false,
 			code: "ATTACHMENT_STORE_ERROR",
-			reason: `${FAILURE_REASONS$1.ATTACHMENT_STORE_ERROR}：${errorMessage(error)}`
+			reason: `${FAILURE_REASONS$2.ATTACHMENT_STORE_ERROR}：${errorMessage(error)}`
 		};
 	}
 };
@@ -5162,7 +5737,7 @@ function readPathOf(ref, kind, service) {
 		if (code !== void 0) return {
 			ok: false,
 			code,
-			reason: FAILURE_REASONS$1[code]
+			reason: FAILURE_REASONS$2[code]
 		};
 		return {
 			ok: false,
@@ -5361,7 +5936,7 @@ var InboundAttachmentStore = class {
 			if (resource.folder === true) {
 				failures.push({
 					name,
-					reason: FAILURE_REASONS$1.FOLDER_UNSUPPORTED
+					reason: FAILURE_REASONS$2.FOLDER_UNSUPPORTED
 				});
 				continue;
 			}
@@ -6290,9 +6865,26 @@ var SessionManager = class {
 const EXPIRED_ROUTE_TEXT = "该话题已超过路由保留时间，并已与原 Session 解绑。为避免误接续上下文，插件不会在此话题创建新 Session；请从私聊或群聊主会话发起新消息（群聊请 @ 机器人）创建新话题。";
 var CardDelivery = class {
 	deps;
+	/** Open `replacingCard` scopes per message id; overlapping clicks nest. */
+	inPlace = /* @__PURE__ */ new Map();
 	constructor(deps) {
 		this.deps = deps;
 	}
+	/**
+	* Run `operation` with every `standaloneReply` anchored to `messageId`
+	* patched into that (bot-sent card) message instead of replying to it.
+	* Used for picker clicks, whose synthetic message id is the picker card.
+	*/
+	async replacingCard(messageId, operation) {
+		this.inPlace.set(messageId, (this.inPlace.get(messageId) ?? 0) + 1);
+		try {
+			await operation();
+		} finally {
+			const remaining = (this.inPlace.get(messageId) ?? 1) - 1;
+			if (remaining === 0) this.inPlace.delete(messageId);
+			else this.inPlace.set(messageId, remaining);
+		}
+	}
 	/** The live channel; throws instead of silently dropping a delivery. */
 	requireChannel() {
 		const channel = this.deps.channel();
@@ -6326,13 +6918,22 @@ var CardDelivery = class {
 	/**
 	* Shared delivery policy for command-plane cards: reply in a new topic by
 	* default, then degrade to a plain reply when Feishu refuses the topic.
+	* `createThread: false` replies in the chat timeline, or inside the topic
+	* the message already belongs to. Inside `replacingCard` the card patches
+	* the anchored card instead, and falls back to a reply if the patch fails.
 	*/
 	async standaloneReply(msg, card, options = {}) {
 		const channel = this.deps.channel();
 		if (!this.deps.started() || channel === void 0) return;
+		if (this.inPlace.has(msg.messageId)) try {
+			await channel.updateCard(msg.messageId, card);
+			return;
+		} catch (error) {
+			this.deps.warn("dsh-channels: in-place update of card %s failed, replying instead: %s", msg.messageId, String(error));
+		}
 		const createThread = options.createThread ?? true;
 		try {
-			await channel.send(msg.chatId, { card }, createThread ? {
+			await channel.send(msg.chatId, { card }, createThread || msg.threadId !== void 0 ? {
 				replyTo: msg.messageId,
 				replyInThread: true
 			} : { replyTo: msg.messageId });
@@ -6437,7 +7038,7 @@ function messageReadFailureReason(code) {
 		default: return "读取飞书消息失败";
 	}
 }
-function failure$2(code, reason = messageReadFailureReason(code)) {
+function failure$3(code, reason = messageReadFailureReason(code)) {
 	return {
 		ok: false,
 		code,
@@ -6770,7 +7371,10 @@ function messageTextOf(item) {
 			return name === void 0 ? "[文件夹]" : `[文件夹 ${name}]`;
 		}
 		case "merge_forward": return "[合并转发]";
-		case "interactive": return "[卡片消息]";
+		case "interactive": {
+			const text = content === void 0 ? "" : cardText(content);
+			return text === "" ? "[卡片消息]" : `[卡片] ${text}`;
+		}
 		case "audio": return "[语音]";
 		case "video": return "[视频]";
 		case "sticker": return "[表情]";
@@ -6778,6 +7382,84 @@ function messageTextOf(item) {
 		default: return item.rawContent === void 0 || item.rawContent === "" ? `[${item.msgType} 消息]` : sanitizeExcerpt(item.rawContent);
 	}
 }
+/** Deepest card node visited by {@link cardText}; real cards nest far less. */
+const MAX_CARD_DEPTH = 12;
+/**
+* Card keys whose values are never reader-visible text: callback payloads,
+* link targets, and layout/style settings.
+*/
+const CARD_SKIPPED_KEYS = /* @__PURE__ */ new Set([
+	"value",
+	"behaviors",
+	"url",
+	"href",
+	"multi_url",
+	"image_key",
+	"img_key",
+	"icon",
+	"style",
+	"config",
+	"confirm",
+	"i18n_elements",
+	"i18n_header",
+	"user_id",
+	"open_id"
+]);
+/**
+* Flatten one card body into text. Handles both the simplified structure the
+* message read APIs return by default (`{ title, elements: [[...]] }`) and a
+* sent card's JSON 1.0/2.0 (`header.title`, `elements` or `body.elements`):
+* every `text`/`content` string and `plain_text`/`lark_md` object in reading
+* order, images as `[图片]`. A Card 1.0 localized only through
+* `i18n_header`/`i18n_elements` renders one locale. Returns `''` when no text
+* is found.
+*/
+function cardText(content) {
+	const parts = [];
+	const title = stringField$1(content, "title");
+	if (title !== void 0) parts.push(title);
+	collectCardText(asRecord$2(content.header) ?? localizedBranch(content.i18n_header), parts, 0);
+	collectCardText(content.elements ?? asRecord$2(content.body)?.elements ?? localizedBranch(content.i18n_elements), parts, 0);
+	return parts.map((part) => part.trim()).filter((part) => part !== "").join(" ");
+}
+/**
+* One locale branch of a Card 1.0 `i18n_*` map: `zh_cn` when present,
+* otherwise the first branch, so a card localized only through `i18n_*`
+* still renders once instead of once per locale.
+*/
+function localizedBranch(value) {
+	const branches = asRecord$2(value);
+	if (branches === void 0) return void 0;
+	return branches.zh_cn ?? Object.values(branches)[0];
+}
+/** Append the reader-visible text of one card node to `parts`. */
+function collectCardText(node, parts, depth) {
+	if (depth > MAX_CARD_DEPTH) return;
+	if (Array.isArray(node)) {
+		for (const child of node) collectCardText(child, parts, depth + 1);
+		return;
+	}
+	const record = asRecord$2(node);
+	if (record === void 0) return;
+	const tag = stringField$1(record, "tag");
+	if (tag === "img" || tag === "image") {
+		parts.push("[图片]");
+		return;
+	}
+	if (tag === "at") {
+		const name = stringField$1(record, "user_name");
+		parts.push(name === void 0 ? "@" : `@${name}`);
+		return;
+	}
+	for (const [key, value] of Object.entries(record)) {
+		if (CARD_SKIPPED_KEYS.has(key)) continue;
+		if (typeof value === "string") {
+			if (key === "text" || key === "content") parts.push(value);
+			continue;
+		}
+		collectCardText(value, parts, depth + 1);
+	}
+}
 /** Flatten one post body into text; inline images/files become placeholders. */
 function postText(content) {
 	const lines = [];
@@ -7030,7 +7712,7 @@ var MessageReader = class {
 	* flat container + children list the P0 probe documented.
 	*/
 	async readMessage(messageId, options = {}) {
-		if (messageId === "") return failure$2("INVALID_ARGUMENT", "message_id 不能为空");
+		if (messageId === "") return failure$3("INVALID_ARGUMENT", "message_id 不能为空");
 		return await this.readWith((channel) => {
 			const get = channel.messageGet;
 			if (get === void 0) throw new Error("当前飞书通道不支持读取消息内容（message.get 不可用）");
@@ -7043,19 +7725,19 @@ var MessageReader = class {
 	* calls so the same public behavior is available everywhere.
 	*/
 	async readMessages(messageIds, options = {}) {
-		if (messageIds.length === 0) return failure$2("INVALID_ARGUMENT", "message_ids 不能为空");
-		if (messageIds.length > 50) return failure$2("INVALID_ARGUMENT", `一次最多批量读取 50 条消息（本次 ${messageIds.length} 条）`);
+		if (messageIds.length === 0) return failure$3("INVALID_ARGUMENT", "message_ids 不能为空");
+		if (messageIds.length > 50) return failure$3("INVALID_ARGUMENT", `一次最多批量读取 50 条消息（本次 ${messageIds.length} 条）`);
 		const deduped = [...new Set(messageIds)];
-		if (options.signal?.aborted === true) return failure$2("ABORTED");
+		if (options.signal?.aborted === true) return failure$3("ABORTED");
 		const scope = createReadScope(options);
 		try {
 			const channel = this.channelOrUndefined();
-			if (channel === void 0) return failure$2("CHANNEL_UNAVAILABLE");
-			if (scope.signal.aborted) return failure$2("ABORTED");
+			if (channel === void 0) return failure$3("CHANNEL_UNAVAILABLE");
+			if (scope.signal.aborted) return failure$3("ABORTED");
 			if (channel.messageMget !== void 0) {
 				const response = await cancellable$1(Promise.resolve(channel.messageMget.call(channel, deduped)), scope.signal);
 				const items = parseMessageItems(response);
-				if (items === void 0) return failureFromResponse(response) ?? failure$2("MESSAGE_READ_FAILED", "飞书批量读取消息返回了无法识别的结果");
+				if (items === void 0) return failureFromResponse(response) ?? failure$3("MESSAGE_READ_FAILED", "飞书批量读取消息返回了无法识别的结果");
 				return {
 					ok: true,
 					value: items
@@ -7063,12 +7745,12 @@ var MessageReader = class {
 			}
 			const items = [];
 			for (const id of deduped) {
-				if (scope.signal.aborted) return failure$2("ABORTED");
+				if (scope.signal.aborted) return failure$3("ABORTED");
 				const get = channel.messageGet;
-				if (get === void 0) return failure$2("MESSAGE_READ_FAILED", "当前飞书通道不支持读取消息内容（message.get 不可用）");
+				if (get === void 0) return failure$3("MESSAGE_READ_FAILED", "当前飞书通道不支持读取消息内容（message.get 不可用）");
 				const response = await cancellable$1(Promise.resolve(get.call(channel, id)), scope.signal);
 				const parsed = parseMessageItems(response);
-				if (parsed === void 0) return failureFromResponse(response) ?? failure$2("MESSAGE_READ_FAILED", "飞书读取消息返回了无法识别的结果");
+				if (parsed === void 0) return failureFromResponse(response) ?? failure$3("MESSAGE_READ_FAILED", "飞书读取消息返回了无法识别的结果");
 				items.push(...parsed);
 			}
 			return {
@@ -7083,12 +7765,12 @@ var MessageReader = class {
 	}
 	/** List one topic's messages (`container_id_type=thread`). */
 	async listThread(threadId, options = {}) {
-		if (threadId === "") return failure$2("INVALID_ARGUMENT", "thread id 不能为空");
+		if (threadId === "") return failure$3("INVALID_ARGUMENT", "thread id 不能为空");
 		return await this.listContainer("thread", threadId, options);
 	}
 	/** List one chat's main timeline (`container_id_type=chat`). */
 	async listChat(chatId, options = {}) {
-		if (chatId === "") return failure$2("INVALID_ARGUMENT", "chat id 不能为空");
+		if (chatId === "") return failure$3("INVALID_ARGUMENT", "chat id 不能为空");
 		return await this.listContainer("chat", chatId, options);
 	}
 	/**
@@ -7129,14 +7811,14 @@ var MessageReader = class {
 	}
 	/** Shared call/parse/failure plumbing of every wrapper. */
 	async readWith(operation, parse, options) {
-		if (options.signal?.aborted === true) return failure$2("ABORTED");
+		if (options.signal?.aborted === true) return failure$3("ABORTED");
 		const channel = this.channelOrUndefined();
-		if (channel === void 0) return failure$2("CHANNEL_UNAVAILABLE");
+		if (channel === void 0) return failure$3("CHANNEL_UNAVAILABLE");
 		const scope = createReadScope(options);
 		try {
 			const response = await cancellable$1(operation(channel), scope.signal);
 			const parsed = parse(response);
-			if (parsed === void 0) return failureFromResponse(response) ?? failure$2("MESSAGE_READ_FAILED", "飞书消息接口返回了无法识别的结果");
+			if (parsed === void 0) return failureFromResponse(response) ?? failure$3("MESSAGE_READ_FAILED", "飞书消息接口返回了无法识别的结果");
 			return {
 				ok: true,
 				value: parsed
@@ -7296,8 +7978,8 @@ function failureFromResponse(response) {
 	const msg = stringField$1(root, "msg") ?? stringField$1(body, "msg");
 	const permission = code === 99991672 || code === 99991679 || code === 99991663 || msg !== void 0 && /permission|scope|forbidden|not authorized|无权限/iu.test(msg);
 	const detail = sanitizePlainText(`code=${code}${msg === void 0 ? "" : ` ${msg}`}`);
-	if (permission) return failure$2("PERMISSION_DENIED", `${messageReadFailureReason("PERMISSION_DENIED")}（${detail}）`);
-	return failure$2("MESSAGE_READ_FAILED", `${messageReadFailureReason("MESSAGE_READ_FAILED")}：${detail}`);
+	if (permission) return failure$3("PERMISSION_DENIED", `${messageReadFailureReason("PERMISSION_DENIED")}（${detail}）`);
+	return failure$3("MESSAGE_READ_FAILED", `${messageReadFailureReason("MESSAGE_READ_FAILED")}：${detail}`);
 }
 /**
 * Map one thrown Feishu/HTTP error into a structured failure. Permission
@@ -7305,8 +7987,8 @@ function failureFromResponse(response) {
 * without treating the turn as failed (AC6).
 */
 function classifyReadError(error, timedOut = false) {
-	if (timedOut) return failure$2("TIMEOUT", messageReadFailureReason("TIMEOUT"));
-	if (isAbortError$1(error)) return failure$2("ABORTED", messageReadFailureReason("ABORTED"));
+	if (timedOut) return failure$3("TIMEOUT", messageReadFailureReason("TIMEOUT"));
+	if (isAbortError$1(error)) return failure$3("ABORTED", messageReadFailureReason("ABORTED"));
 	const record = asRecord$2(error);
 	const response = asRecord$2(record?.response);
 	const responseData = asRecord$2(response?.data);
@@ -7316,8 +7998,8 @@ function classifyReadError(error, timedOut = false) {
 	const message = apiMessage ?? (error instanceof Error ? error.message : void 0);
 	const permission = status === 403 || status === 401 || code === 99991672 || code === 99991679 || code === 99991663 || message !== void 0 && /permission|scope|forbidden|not authorized|无权限/iu.test(message);
 	const detail = code !== void 0 || apiMessage !== void 0 ? sanitizePlainText([code === void 0 ? void 0 : `code=${code}`, apiMessage].filter(Boolean).join(" ")) : describeReadError(error);
-	if (permission) return failure$2("PERMISSION_DENIED", `${messageReadFailureReason("PERMISSION_DENIED")}（${detail}）`);
-	return failure$2("MESSAGE_READ_FAILED", `${messageReadFailureReason("MESSAGE_READ_FAILED")}：${detail}`);
+	if (permission) return failure$3("PERMISSION_DENIED", `${messageReadFailureReason("PERMISSION_DENIED")}（${detail}）`);
+	return failure$3("MESSAGE_READ_FAILED", `${messageReadFailureReason("MESSAGE_READ_FAILED")}：${detail}`);
 }
 //#endregion
 //#region src/feishu/tools.ts
@@ -7460,7 +8142,7 @@ function attachmentFetchFailureReason(code) {
 	const host = attachmentFailureReason(code);
 	return typeof host === "string" && host.length > 0 ? host : FETCH_FAILURE_REASONS.INTERNAL_ERROR ?? "附件获取失败";
 }
-function failure$1(code, reason) {
+function failure$2(code, reason) {
 	return {
 		ok: false,
 		code,
@@ -7692,9 +8374,9 @@ var AttachmentFetchToolRuntime = class {
 		}
 		const args = parsed.data;
 		const messageId = args.message_id;
-		if (!this.enabled()) return callFailure(messageId, failure$1("TOOL_DISABLED"));
+		if (!this.enabled()) return callFailure(messageId, failure$2("TOOL_DISABLED"));
 		const route = this.deps.routeOfSession(sessionId);
-		if (route === void 0) return callFailure(messageId, failure$1("ROUTE_NOT_FOUND"));
+		if (route === void 0) return callFailure(messageId, failure$2("ROUTE_NOT_FOUND"));
 		const config = this.deps.config().feishuTools;
 		const scope = createAbortScope(exec.signal, config.attachmentFetchTimeoutMs);
 		const budget = {
@@ -7716,8 +8398,8 @@ var AttachmentFetchToolRuntime = class {
 		try {
 			return await this.fetch(call);
 		} catch (error) {
-			if (budget.exceeded) return callFailure(messageId, failure$1("BYTES_LIMIT"));
-			if (scope.signal.aborted) return callFailure(messageId, failure$1(scope.timeout.value ? "TIMEOUT" : "ABORTED"));
+			if (budget.exceeded) return callFailure(messageId, failure$2("BYTES_LIMIT"));
+			if (scope.signal.aborted) return callFailure(messageId, failure$2(scope.timeout.value ? "TIMEOUT" : "ABORTED"));
 			const reason = `${attachmentFetchFailureReason("INTERNAL_ERROR")}：${describeUnexpectedError(error)}`;
 			this.deps.warn("dsh-channels: %s failed unexpectedly: %s", ATTACHMENT_FETCH_TOOL_NAME, reason);
 			return callFailure(messageId, {
@@ -7731,11 +8413,11 @@ var AttachmentFetchToolRuntime = class {
 	}
 	async fetch(call) {
 		const messageId = call.args.message_id;
-		if (call.signal.aborted) return callFailure(messageId, failure$1(call.timeout.value ? "TIMEOUT" : "ABORTED"));
+		if (call.signal.aborted) return callFailure(messageId, failure$2(call.timeout.value ? "TIMEOUT" : "ABORTED"));
 		const known = await this.resolveKnownMessage(call, messageId);
 		if (known === void 0) {
-			if (call.signal.aborted) return callFailure(messageId, failure$1(call.timeout.value ? "TIMEOUT" : "ABORTED"));
-			return callFailure(messageId, failure$1("AUTHORIZATION_DENIED"));
+			if (call.signal.aborted) return callFailure(messageId, failure$2(call.timeout.value ? "TIMEOUT" : "ABORTED"));
+			return callFailure(messageId, failure$2("AUTHORIZATION_DENIED"));
 		}
 		let resources = [...known.resources];
 		if (resources.length === 0) {
@@ -7752,11 +8434,11 @@ var AttachmentFetchToolRuntime = class {
 				const shown = knownKeys.slice(0, 10);
 				const hidden = knownKeys.length - shown.length;
 				const available = knownKeys.length === 0 ? "" : `（可用：${shown.join("、")}${hidden > 0 ? ` 等 ${knownKeys.length} 个` : ""}）`;
-				return callFailure(messageId, failure$1("UNKNOWN_FILE_KEY", `${attachmentFetchFailureReason("UNKNOWN_FILE_KEY")}：${displayText$1(key)}${available}`));
+				return callFailure(messageId, failure$2("UNKNOWN_FILE_KEY", `${attachmentFetchFailureReason("UNKNOWN_FILE_KEY")}：${displayText$1(key)}${available}`));
 			}
 		}
-		if (resources.length === 0) return callFailure(messageId, failure$1("NO_RESOURCES"));
-		if (resources.length > call.limits.maxResources) return callFailure(messageId, failure$1("RESOURCE_LIMIT", `${attachmentFetchFailureReason("RESOURCE_LIMIT")}（本消息 ${resources.length} 个，单次上限 ${call.limits.maxResources} 个；请用 file_key 分批获取）`));
+		if (resources.length === 0) return callFailure(messageId, failure$2("NO_RESOURCES"));
+		if (resources.length > call.limits.maxResources) return callFailure(messageId, failure$2("RESOURCE_LIMIT", `${attachmentFetchFailureReason("RESOURCE_LIMIT")}（本消息 ${resources.length} 个，单次上限 ${call.limits.maxResources} 个；请用 file_key 分批获取）`));
 		this.rememberKnownMessage(call, known, allResources);
 		const results = [];
 		for (let index = 0; index < resources.length; index += 1) {
@@ -7768,12 +8450,12 @@ var AttachmentFetchToolRuntime = class {
 				break;
 			}
 			if (call.budget.exceeded) {
-				results.push(failedItem(resource, failure$1("BYTES_LIMIT")));
-				for (const rest of resources.slice(index + 1)) results.push(failedItem(rest, failure$1("BYTES_LIMIT")));
+				results.push(failedItem(resource, failure$2("BYTES_LIMIT")));
+				for (const rest of resources.slice(index + 1)) results.push(failedItem(rest, failure$2("BYTES_LIMIT")));
 				break;
 			}
 			if (call.channel === void 0) {
-				results.push(failedItem(resource, failure$1("CHANNEL_UNAVAILABLE")));
+				results.push(failedItem(resource, failure$2("CHANNEL_UNAVAILABLE")));
 				continue;
 			}
 			results.push(await this.fetchResource(call, known, resource));
@@ -7825,18 +8507,18 @@ var AttachmentFetchToolRuntime = class {
 	*/
 	async expandMessageResources(call, message) {
 		const channel = call.channel;
-		if (channel === void 0) return failure$1("CHANNEL_UNAVAILABLE");
+		if (channel === void 0) return failure$2("CHANNEL_UNAVAILABLE");
 		const messageGet = channel.messageGet;
-		if (messageGet === void 0) return failure$1("MESSAGE_READ_FAILED", `${attachmentFetchFailureReason("MESSAGE_READ_FAILED")}：当前飞书通道不支持读取消息内容，无法展开附件`);
+		if (messageGet === void 0) return failure$2("MESSAGE_READ_FAILED", `${attachmentFetchFailureReason("MESSAGE_READ_FAILED")}：当前飞书通道不支持读取消息内容，无法展开附件`);
 		let response;
 		try {
 			response = await cancellable(Promise.resolve(messageGet.call(channel, message.messageId)), call.signal);
 		} catch (error) {
 			if (isAbortError(error)) throw error;
-			return failure$1("MESSAGE_READ_FAILED", `${attachmentFetchFailureReason("MESSAGE_READ_FAILED")}：${describeFetchError(error)}`);
+			return failure$2("MESSAGE_READ_FAILED", `${attachmentFetchFailureReason("MESSAGE_READ_FAILED")}：${describeFetchError(error)}`);
 		}
 		const items = rawMessageItems(response);
-		if (items === void 0) return failure$1("MESSAGE_READ_FAILED", `${attachmentFetchFailureReason("MESSAGE_READ_FAILED")}：返回内容无法识别`);
+		if (items === void 0) return failure$2("MESSAGE_READ_FAILED", `${attachmentFetchFailureReason("MESSAGE_READ_FAILED")}：返回内容无法识别`);
 		return {
 			ok: true,
 			resources: message.kind === "merge_forward" ? mergedForwardResources(items) : messageResourcesOfItems(items)
@@ -7844,17 +8526,17 @@ var AttachmentFetchToolRuntime = class {
 	}
 	async fetchResource(call, message, resource) {
 		const downloadId = resource.containerMessageId ?? message.messageId;
-		if (resource.folder === true) return failedItem(resource, failure$1("FOLDER_UNSUPPORTED"));
+		if (resource.folder === true) return failedItem(resource, failure$2("FOLDER_UNSUPPORTED"));
 		if (resource.type === "image") return await this.fetchImage(call, downloadId, resource);
 		return await this.fetchFile(call, downloadId, resource);
 	}
 	async fetchImage(call, downloadId, resource) {
 		const channel = call.channel;
-		if (channel === void 0) return failedItem(resource, failure$1("CHANNEL_UNAVAILABLE"));
+		if (channel === void 0) return failedItem(resource, failure$2("CHANNEL_UNAVAILABLE"));
 		const remaining = call.budget.maxBytes - call.budget.usedBytes;
 		if (remaining <= 0) {
 			call.budget.exceeded = true;
-			return failedItem(resource, failure$1("BYTES_LIMIT"));
+			return failedItem(resource, failure$2("BYTES_LIMIT"));
 		}
 		const imageCap = call.imageCap;
 		const limit = Math.min(imageCap, remaining);
@@ -7870,9 +8552,9 @@ var AttachmentFetchToolRuntime = class {
 		} catch (error) {
 			if (error instanceof BudgetExceededError) {
 				call.budget.exceeded = true;
-				return failedItem(resource, failure$1("BYTES_LIMIT"));
+				return failedItem(resource, failure$2("BYTES_LIMIT"));
 			}
-			if (error instanceof ImageTooLargeError) return failedItem(resource, failure$1("IMAGE_TOO_LARGE"));
+			if (error instanceof ImageTooLargeError) return failedItem(resource, failure$2("IMAGE_TOO_LARGE"));
 			return downloadFailureItem(resource, error, call);
 		}
 		let saved;
@@ -7902,10 +8584,10 @@ var AttachmentFetchToolRuntime = class {
 	}
 	async fetchFile(call, downloadId, resource) {
 		const channel = call.channel;
-		if (channel === void 0) return failedItem(resource, failure$1("CHANNEL_UNAVAILABLE"));
+		if (channel === void 0) return failedItem(resource, failure$2("CHANNEL_UNAVAILABLE"));
 		if (call.budget.maxBytes <= call.budget.usedBytes) {
 			call.budget.exceeded = true;
-			return failedItem(resource, failure$1("BYTES_LIMIT"));
+			return failedItem(resource, failure$2("BYTES_LIMIT"));
 		}
 		let stream;
 		try {
@@ -7922,11 +8604,11 @@ var AttachmentFetchToolRuntime = class {
 				...resource.fileName === void 0 ? {} : { name: resource.fileName }
 			}), call.signal);
 		} catch (error) {
-			if (call.budget.exceeded) return failedItem(resource, failure$1("BYTES_LIMIT"));
+			if (call.budget.exceeded) return failedItem(resource, failure$2("BYTES_LIMIT"));
 			return downloadFailureItem(resource, error, call);
 		}
 		if (!saved.ok) {
-			if (call.budget.exceeded) return failedItem(resource, failure$1("BYTES_LIMIT"));
+			if (call.budget.exceeded) return failedItem(resource, failure$2("BYTES_LIMIT"));
 			if (call.signal.aborted) return cancelledItem(resource, call.timeout.value);
 			return failedItem(resource, saved);
 		}
@@ -7943,9 +8625,9 @@ var AttachmentFetchToolRuntime = class {
 };
 /** Map one thrown download/store error into a structured item. */
 function downloadFailureItem(resource, error, call) {
-	if (call.budget.exceeded) return failedItem(resource, failure$1("BYTES_LIMIT"));
+	if (call.budget.exceeded) return failedItem(resource, failure$2("BYTES_LIMIT"));
 	if (call.signal.aborted) return cancelledItem(resource, call.timeout.value);
-	return failedItem(resource, failure$1("DOWNLOAD_FAILED", `${attachmentFetchFailureReason("DOWNLOAD_FAILED")}：${describeFetchError(error)}`));
+	return failedItem(resource, failure$2("DOWNLOAD_FAILED", `${attachmentFetchFailureReason("DOWNLOAD_FAILED")}：${describeFetchError(error)}`));
 }
 /**
 * Run one promise with cooperative cancellation: an aborted signal rejects the
@@ -8076,7 +8758,7 @@ function failedItem(resource, result) {
 	};
 }
 function cancelledItem(resource, timedOut) {
-	return failedItem(resource, failure$1(timedOut ? "TIMEOUT" : "ABORTED"));
+	return failedItem(resource, failure$2(timedOut ? "TIMEOUT" : "ABORTED"));
 }
 function callFailure(messageId, result) {
 	return {
@@ -9006,7 +9688,7 @@ const SEND_FILE_PARAMETERS = {
 	required: ["path"],
 	additionalProperties: false
 };
-const FAILURE_REASONS = {
+const FAILURE_REASONS$1 = {
 	TOOL_DISABLED: "feishu_send_file 已在插件配置中关闭",
 	ROUTE_NOT_FOUND: "当前会话没有绑定飞书话题或会话，无法确定发送目标",
 	CHANNEL_UNAVAILABLE: "飞书连接当前不可用，请稍后重试",
@@ -9099,7 +9781,7 @@ var SendFileToolRuntime = class {
 		try {
 			tools.register(this.definitionFor(sessionId));
 		} catch (error) {
-			this.warnMountFailure(`dsh-channels: registering ${SEND_FILE_TOOL_NAME} failed: ${describeError(error)}`);
+			this.warnMountFailure(`dsh-channels: registering ${SEND_FILE_TOOL_NAME} failed: ${describeError$1(error)}`);
 		}
 	}
 	warnMountFailure(message) {
@@ -9130,14 +9812,14 @@ var SendFileToolRuntime = class {
 			throw new Error(`${SEND_FILE_TOOL_NAME}: invalid ${where}: ${issue?.message ?? "invalid arguments"}`);
 		}
 		const args = parsed.data;
-		if (!this.enabled()) return failure("TOOL_DISABLED");
+		if (!this.enabled()) return failure$1("TOOL_DISABLED");
 		const target = this.deps.targetOfSession(sessionId);
-		if (target === void 0) return failure("ROUTE_NOT_FOUND");
+		if (target === void 0) return failure$1("ROUTE_NOT_FOUND");
 		const loaded = await loadWorkspaceFile(target.rootDir, args);
 		if (!loaded.ok) return loaded;
-		if (exec.signal.aborted) return failure("ABORTED");
+		if (exec.signal.aborted) return failure$1("ABORTED");
 		const channel = this.deps.channel();
-		if (channel === void 0) return failure("CHANNEL_UNAVAILABLE");
+		if (channel === void 0) return failure$1("CHANNEL_UNAVAILABLE");
 		const { kind, fileName, data } = loaded;
 		const media = kind === "image" ? {
 			kind,
@@ -9161,14 +9843,14 @@ var SendFileToolRuntime = class {
 			};
 		} catch (error) {
 			if (exec.signal.aborted) {
-				sent?.catch((late) => this.deps.warn("dsh-channels: %s failed after abort: %s", SEND_FILE_TOOL_NAME, describeError(late)));
-				return failure("ABORTED");
+				sent?.catch((late) => this.deps.warn("dsh-channels: %s failed after abort: %s", SEND_FILE_TOOL_NAME, describeError$1(late)));
+				return failure$1("ABORTED");
 			}
-			const detail = describeError(error);
-			if (isPermissionError(error)) return failure("PERMISSION_DENIED", `${FAILURE_REASONS.PERMISSION_DENIED}（${detail}）`);
-			if (error instanceof FeishuApiError && error.code !== void 0 && REPLY_TARGET_GONE_CODES.has(error.code)) return failure("REPLY_TARGET_GONE");
+			const detail = describeError$1(error);
+			if (isPermissionError(error)) return failure$1("PERMISSION_DENIED", `${FAILURE_REASONS$1.PERMISSION_DENIED}（${detail}）`);
+			if (error instanceof FeishuApiError && error.code !== void 0 && REPLY_TARGET_GONE_CODES.has(error.code)) return failure$1("REPLY_TARGET_GONE");
 			this.deps.warn("dsh-channels: %s failed: %s", SEND_FILE_TOOL_NAME, detail);
-			return failure("SEND_FAILED", `${FAILURE_REASONS.SEND_FAILED}：${detail}`);
+			return failure$1("SEND_FAILED", `${FAILURE_REASONS$1.SEND_FAILED}：${detail}`);
 		}
 	}
 };
@@ -9184,41 +9866,41 @@ async function loadWorkspaceFile(rootDir, args) {
 	try {
 		root = await realpath(rootDir);
 	} catch (error) {
-		return failure("FILE_NOT_FOUND", `当前话题工作目录不可用：${describeError(error)}`);
+		return failure$1("FILE_NOT_FOUND", `当前话题工作目录不可用：${describeError$1(error)}`);
 	}
 	let real;
 	try {
 		real = await realpath(path.resolve(root, args.path));
 	} catch {
-		return isInside(root, path.resolve(root, args.path)) ? failure("FILE_NOT_FOUND") : failure("PATH_OUTSIDE_WORKSPACE");
+		return isInside(root, path.resolve(root, args.path)) ? failure$1("FILE_NOT_FOUND") : failure$1("PATH_OUTSIDE_WORKSPACE");
 	}
-	if (!isInside(root, real)) return failure("PATH_OUTSIDE_WORKSPACE");
+	if (!isInside(root, real)) return failure$1("PATH_OUTSIDE_WORKSPACE");
 	const requested = args.kind ?? "auto";
 	const ceiling = requested === "image" ? FEISHU_IMAGE_MAX_BYTES : FEISHU_FILE_MAX_BYTES;
 	let handle;
 	try {
 		handle = await open(real, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
 	} catch (error) {
-		return failure("FILE_NOT_FOUND", `${FAILURE_REASONS.FILE_NOT_FOUND}：${describeError(error)}`);
+		return failure$1("FILE_NOT_FOUND", `${FAILURE_REASONS$1.FILE_NOT_FOUND}：${describeError$1(error)}`);
 	}
 	let data;
 	try {
 		const info = await handle.stat();
-		if (!info.isFile()) return failure("NOT_A_FILE");
+		if (!info.isFile()) return failure$1("NOT_A_FILE");
 		const recheck = await realpath(real).then((again) => isInside(root, again) ? stat(again) : void 0, () => void 0);
-		if (recheck === void 0 || recheck.dev !== info.dev || recheck.ino !== info.ino) return failure("PATH_OUTSIDE_WORKSPACE");
-		if (info.size === 0) return failure("EMPTY_FILE");
+		if (recheck === void 0 || recheck.dev !== info.dev || recheck.ino !== info.ino) return failure$1("PATH_OUTSIDE_WORKSPACE");
+		if (info.size === 0) return failure$1("EMPTY_FILE");
 		if (info.size > ceiling) return tooLarge(requested === "image" ? "image" : "file", info.size);
 		data = await handle.readFile();
 	} catch (error) {
-		return failure("FILE_NOT_FOUND", `${FAILURE_REASONS.FILE_NOT_FOUND}：${describeError(error)}`);
+		return failure$1("FILE_NOT_FOUND", `${FAILURE_REASONS$1.FILE_NOT_FOUND}：${describeError$1(error)}`);
 	} finally {
 		await handle.close().catch(() => void 0);
 	}
-	if (data.length === 0) return failure("EMPTY_FILE");
+	if (data.length === 0) return failure$1("EMPTY_FILE");
 	if (data.length > ceiling) return tooLarge(requested === "image" ? "image" : "file", data.length);
 	const isImage = isFeishuImage(data);
-	if (requested === "image" && !isImage) return failure("NOT_AN_IMAGE");
+	if (requested === "image" && !isImage) return failure$1("NOT_AN_IMAGE");
 	return {
 		ok: true,
 		kind: requested === "file" ? "file" : requested === "image" ? "image" : isImage && data.length <= 10485760 ? "image" : "file",
@@ -9248,19 +9930,19 @@ function sanitizeFileName(value) {
 function tooLarge(kind, bytes) {
 	const limit = kind === "image" ? FEISHU_IMAGE_MAX_BYTES : FEISHU_FILE_MAX_BYTES;
 	const hint = kind === "image" ? "；可用 kind=file 以文件发送（上限 30 MB）" : "；请压缩或拆分后再发送";
-	return failure("FILE_TOO_LARGE", `${FAILURE_REASONS.FILE_TOO_LARGE}：${formatBytes(bytes)} > ${kind === "image" ? "图片" : "文件"}上限 ${formatBytes(limit)}${hint}`);
+	return failure$1("FILE_TOO_LARGE", `${FAILURE_REASONS$1.FILE_TOO_LARGE}：${formatBytes(bytes)} > ${kind === "image" ? "图片" : "文件"}上限 ${formatBytes(limit)}${hint}`);
 }
-function failure(code, reason) {
+function failure$1(code, reason) {
 	return {
 		ok: false,
 		code,
-		reason: reason ?? FAILURE_REASONS[code]
+		reason: reason ?? FAILURE_REASONS$1[code]
 	};
 }
 /** Feishu codes for a recalled/deleted reply target (the SDK's `target_revoked`). */
 const REPLY_TARGET_GONE_CODES = /* @__PURE__ */ new Set([230020, 230017]);
 /** Feishu codes for a missing app scope. */
-const PERMISSION_CODES = /* @__PURE__ */ new Set([
+const PERMISSION_CODES$1 = /* @__PURE__ */ new Set([
 	99991672,
 	99991679,
 	230027
@@ -9295,13 +9977,13 @@ function feishuBody(error) {
 function isPermissionError(error) {
 	return errorChain(error).some((item) => {
 		const body = feishuBody(item);
-		if (body?.code !== void 0 && PERMISSION_CODES.has(body.code)) return true;
+		if (body?.code !== void 0 && PERMISSION_CODES$1.has(body.code)) return true;
 		const text = `${body?.msg ?? ""} ${item instanceof Error ? item.message : ""}`;
 		return /status code 403|access denied|scope|permission/iu.test(text);
 	});
 }
 /** Readable, bounded text for a thrown value and its Feishu cause. */
-function describeError(error) {
+function describeError$1(error) {
 	const parts = [];
 	for (const item of errorChain(error)) {
 		const body = feishuBody(item);
@@ -9370,33 +10052,2321 @@ function presentSendFileResult(value) {
 	return `发送失败（${value.code}）：${value.reason}`;
 }
 //#endregion
-//#region src/routing/inbound.ts
+//#region src/cards/wiki.ts
 /**
-* Inbound routing: dedup, admission, the route decision tree, and the
-* session-establishment / continuation flow.
-*
-* Everything here is channel-plane policy; the command plane (slash commands)
-* and the answerers stay in the service and are reached through narrow ports.
-* Dependency reads go through accessors so the moved logic stays readable.
+* Wiki (知识库) authorization cards: the topic owner's consent before the
+* model opens, creates, or edits a wiki document.
 *
-* @module dsh-channels/routing/inbound
+* @module dsh-channels/cards/wiki
 */
-/** Confirmation line for each keyword approval reply. */
-const APPROVAL_TEXT_REPLIES = {
-	allowed: "已允许本次操作。",
-	remembered: "已允许，本话题内同类操作不再询问。",
-	denied: "已拒绝本次操作。"
+/** Cap on one rendered detail block so the card stays readable on a phone. */
+const DETAIL_MAX_CHARS = 800;
+const ACTION_LABELS = {
+	read: "读取文档",
+	create: "新建文档",
+	edit: "修改文档"
 };
-/**
-* User-facing text for attachments that could not be archived. Delivered as a
-* plain reply (never a card) so the user learns why the Agent cannot read a
-* file instead of silently getting an answer about older attachments.
-*/
-function buildAttachmentFailureNotice(failures) {
-	return [
-		"⚠️ 附件保存失败，Agent 无法读取：",
-		...failures.map((failure) => `• ${failure.name}：${failure.reason}`),
-		"可尝试压缩/拆分后重发，或把文件直接放到工作区目录。"
+const SETTLED_LINES = {
+	allowed: "✅ 已允许",
+	denied: "❌ 已拒绝",
+	expired: "⏱ 已超时未处理，自动拒绝",
+	cancelled: "↩️ 请求已取消"
+};
+/** Clip one value to `max` characters, marking the cut. */
+function clip(value, max) {
+	return value.length <= max ? value : `${value.slice(0, max)}…（已截断 ${value.length - max} 个字符）`;
+}
+/** One line of Markdown text with link/markup characters neutralized. */
+function plain(value) {
+	return value.replace(/[\u0000-\u001f\u007f]+/gu, " ").replace(/([[\]()*_`~<>])/gu, "\\$1").trim();
+}
+/** The question summary shared by the pending and settled variants. */
+function questionElements(question) {
+	const title = question.title === "" ? "（无标题）" : plain(question.title);
+	const titleLine = question.url === void 0 || question.action === "create" ? title : `[${title}](${question.url})`;
+	const elements = [markdown([
+		`机器人请求以应用身份**${ACTION_LABELS[question.action]}**。`,
+		`**文档**：${titleLine}`,
+		`**位置**：${plain(question.location)}`
+	].join("\n"))];
+	for (const detail of question.details) elements.push(markdown(clip(detail, DETAIL_MAX_CHARS)));
+	return elements;
+}
+function consentButton(question, decision) {
+	return textButton({
+		label: decision === "allow" ? "✅ 允许" : "❌ 拒绝",
+		type: decision === "allow" ? "primary" : "danger",
+		width: "fill",
+		value: {
+			decision,
+			token: question.token
+		}
+	});
+}
+/**
+* The pending consent card, sent as a reply in the session's topic.
+*
+* @param question The consent asked for.
+* @param options Rendering options.
+* @returns Card JSON 2.0.
+*/
+function buildWikiConsentCard(question, options = {}) {
+	const minutes = Math.max(1, Math.round(question.timeoutMs / 6e4));
+	const scope = question.action === "read" ? "允许后，本话题内再次读取这篇文档不再询问" : "仅对这一次操作生效";
+	const elements = [
+		...questionElements(question),
+		divider(),
+		note(`⏱ ${minutes} 分钟内有效，超时自动拒绝 · ${scope}`)
+	];
+	if (options.unauthorizedNote === true) elements.push(note("ℹ️ 仅发起该话题的用户可操作此卡片"));
+	elements.push(columnSet([consentButton(question, "allow"), consentButton(question, "deny")]));
+	return standaloneCard("**📚 知识库授权**", elements);
+}
+/**
+* The terminal replacement after the consent settles; no controls.
+*
+* @param question The consent that was asked for.
+* @param state How it settled.
+* @returns Card JSON 2.0.
+*/
+function buildWikiConsentSettledCard(question, state) {
+	return standaloneCard(`**${SETTLED_LINES[state]}**`, [
+		...questionElements(question),
+		divider(),
+		note(`📚 知识库${ACTION_LABELS[question.action]}`)
+	]);
+}
+//#endregion
+//#region src/feishu/wiki/consent.ts
+/**
+* Topic-owner consent for wiki tool calls.
+*
+* A wiki tool that opens, creates, or edits a document asks the topic owner
+* on a consent card in the topic and waits for the answer. Only the topic
+* owner (`route.senderUserId`) can decide; a click by anyone else adds the
+* owner-only notice once. An unanswered card is denied after the configured
+* window (`approvalTimeoutMs`). A read consent is remembered per Session and
+* document, in memory only: it ends with the Session (`/renew`) or the
+* process. Create and edit consents are never remembered.
+*
+* @module dsh-channels/feishu/wiki/consent
+*/
+/** Consent cards for the wiki tools. */
+var WikiConsent = class {
+	deps;
+	/** One table per channel instance (cards are patched through their channel). */
+	table;
+	/** sessionId → document ids with a standing read consent. */
+	readGrants = /* @__PURE__ */ new Map();
+	constructor(deps) {
+		this.deps = deps;
+	}
+	/**
+	* Whether the Session already holds a read consent for one document.
+	* @param sessionId The Session.
+	* @param documentId Docx document id.
+	* @returns True when reading needs no new card.
+	*/
+	hasReadGrant(sessionId, documentId) {
+		return this.readGrants.get(sessionId)?.has(documentId) === true;
+	}
+	/**
+	* Record a standing read consent (after an allowed read, or for a document
+	* the topic owner just approved creating).
+	* @param sessionId The Session.
+	* @param documentId Docx document id.
+	*/
+	grantRead(sessionId, documentId) {
+		let grants = this.readGrants.get(sessionId);
+		if (grants === void 0) {
+			grants = /* @__PURE__ */ new Set();
+			this.readGrants.set(sessionId, grants);
+		}
+		grants.add(documentId);
+	}
+	/**
+	* Ask the topic owner and wait for the decision. Never rejects.
+	* @param request What to ask.
+	* @returns The outcome; `unavailable` when no card could be delivered.
+	*/
+	request(request) {
+		if (request.signal.aborted) return Promise.resolve("cancelled");
+		const channel = this.deps.channel();
+		if (channel === void 0) return Promise.resolve("unavailable");
+		const table = this.tableFor(channel);
+		const timeoutMs = this.deps.timeoutMs();
+		const question = {
+			token: randomUUID(),
+			action: request.action,
+			title: request.title,
+			...request.url === void 0 ? {} : { url: request.url },
+			location: request.location,
+			details: request.details,
+			timeoutMs
+		};
+		return new Promise((resolve) => {
+			const entry = {
+				token: question.token,
+				sessionId: request.sessionId,
+				route: request.route,
+				messageId: void 0,
+				settled: false,
+				timer: void 0,
+				signal: request.signal,
+				onAbort: void 0,
+				unauthorizedNoted: false,
+				question,
+				resolve
+			};
+			const onAbort = () => this.settle(table, entry, "cancelled", "cancelled");
+			entry.onAbort = onAbort;
+			request.signal.addEventListener("abort", onAbort, { once: true });
+			table.add(entry);
+			table.deliver(entry, {
+				card: buildWikiConsentCard(question),
+				onWithdrawn: (e) => table.patch(e, buildWikiConsentSettledCard(e.question, "cancelled")),
+				onDelivered: (e) => table.armTimeout(e, timeoutMs, () => this.settle(table, e, "expired", "expired")),
+				onFailure: (e) => this.settle(table, e, "unavailable")
+			});
+		});
+	}
+	/**
+	* Route one card button callback to its pending consent; unknown cards are
+	* ignored.
+	* @param event The card action.
+	*/
+	onCardAction(event) {
+		const table = this.table?.entries;
+		if (table === void 0) return;
+		const entry = table.resolveAction(event, (candidate) => {
+			if (candidate.unauthorizedNoted) return;
+			candidate.unauthorizedNoted = true;
+			table.patch(candidate, buildWikiConsentCard(candidate.question, { unauthorizedNote: true }));
+		});
+		if (entry === void 0) return;
+		const decision = event.action.value?.decision;
+		if (decision === "allow") this.settle(table, entry, "allowed", "allowed");
+		else if (decision === "deny") this.settle(table, entry, "denied", "denied");
+	}
+	/** Withdraw every pending card and forget every read consent (shutdown). */
+	dispose() {
+		const table = this.table?.entries;
+		table?.withdrawAll((entry) => this.settle(table, entry, "cancelled", "cancelled"));
+		this.table = void 0;
+		this.readGrants.clear();
+	}
+	/** Pending consent count (diagnostics/tests). */
+	pendingCount() {
+		return this.table?.entries.count() ?? 0;
+	}
+	tableFor(channel) {
+		if (this.table?.channel !== channel) this.table = {
+			channel,
+			entries: new PendingCardTable(channel, this.deps.onError)
+		};
+		return this.table.entries;
+	}
+	settle(table, entry, outcome, cardState) {
+		if (table.close(entry, () => {
+			if (cardState !== void 0) table.patch(entry, buildWikiConsentSettledCard(entry.question, cardState));
+		})) entry.resolve(outcome);
+	}
+};
+const FAILURE_REASONS = {
+	TOOL_DISABLED: "知识库工具已在插件配置中关闭",
+	ROUTE_NOT_FOUND: "当前会话没有绑定飞书话题，无法确定授权人",
+	NOT_AUTHORIZED: "当前话题的发起人不在知识库白名单中；请管理员发送 /auth wiki add @该用户 后重试",
+	CHANNEL_UNAVAILABLE: "飞书连接当前不可用，请稍后重试",
+	INVALID_REFERENCE: "无法识别的知识库引用：请传知识库节点链接 https://<租户>.feishu.cn/wiki/<node_token>、node_token，或知识空间链接 https://<租户>.feishu.cn/wiki/space/<space_id>",
+	INVALID_OPERATION: "操作参数不正确",
+	OUTSIDE_ROOTS: "该位置不在插件配置的知识库范围（wikiRoots）内，不能访问",
+	NOT_FOUND: "知识库节点不存在或已被删除",
+	NO_ACCESS: "机器人对该知识库节点没有访问权限；请知识库管理员把应用（或包含机器人的群）加为该空间成员",
+	UNSUPPORTED_TYPE: "这个工具不支持该类型的节点：飞书文档（docx）用 feishu_wiki_read / feishu_wiki_edit，电子表格（sheet）用 feishu_wiki_sheet_read / feishu_wiki_sheet_edit，多维表格（bitable）用 feishu_wiki_base_read / feishu_wiki_base_edit；其他类型暂不支持",
+	NOT_OWNED: "只能修改由本应用创建（所有者是本应用）的文档",
+	REVISION_CONFLICT: "文档在你读取之后被修改过；请重新用 feishu_wiki_read 读取最新内容，基于新的 revision_id 再修改",
+	CONSENT_DENIED: "话题发起人拒绝了这次知识库操作",
+	CONSENT_EXPIRED: "话题发起人没有在授权卡有效期内确认，已自动拒绝",
+	CONSENT_UNAVAILABLE: "授权卡发送失败，无法征得话题发起人同意，已取消操作",
+	PERMISSION_DENIED: "飞书拒绝调用：应用缺少知识库或文档权限（wiki:wiki、docx:document），请管理员在开发者后台开通并发布版本",
+	CONTENT_FAILED: "文档已创建，但写入内容失败",
+	EDIT_FAILED: "修改失败",
+	EDIT_PARTIAL: "飞书报告操作只部分生效；已停止后续操作，请用 feishu_wiki_read 读取最新内容核验后再继续",
+	API_FAILED: "飞书接口调用失败",
+	ABORTED: "已取消"
+};
+function failure(code, reason) {
+	return {
+		ok: false,
+		code,
+		reason: reason ?? FAILURE_REASONS[code]
+	};
+}
+function parseArgs(tool, schema, rawArgs) {
+	const parsed = schema.safeParse(rawArgs);
+	if (parsed.success) return parsed.data;
+	const issue = parsed.error.issues[0];
+	const where = issue === void 0 || issue.path.length === 0 ? "arguments" : issue.path.join(".");
+	throw new Error(`${tool}: invalid ${where}: ${issue?.message ?? "invalid arguments"}`);
+}
+/** Run one gated call body, mapping thrown Feishu errors to failures. */
+async function guarded$1(deps, tool, body) {
+	try {
+		return await body();
+	} catch (error) {
+		const mapped = failureOf(error);
+		if (mapped.code === "API_FAILED") deps.warn("dsh-channels: %s failed: %s", tool, mapped.reason);
+		return mapped;
+	}
+}
+/** Feishu codes: node missing/deleted, no resource access, missing app scope. */
+const NOT_FOUND_CODES = /* @__PURE__ */ new Set([
+	131005,
+	131012,
+	131013,
+	131014,
+	131016
+]);
+const NO_ACCESS_CODES = /* @__PURE__ */ new Set([
+	131006,
+	1770032,
+	1770002
+]);
+const PERMISSION_CODES = /* @__PURE__ */ new Set([99991672, 99991679]);
+function failureOf(error) {
+	const detail = describeError(error);
+	if (error instanceof FeishuApiError && error.code !== void 0) {
+		if (NOT_FOUND_CODES.has(error.code)) return failure("NOT_FOUND", `${FAILURE_REASONS.NOT_FOUND}（${detail}）`);
+		if (NO_ACCESS_CODES.has(error.code)) return failure("NO_ACCESS", `${FAILURE_REASONS.NO_ACCESS}（${detail}）`);
+		if (PERMISSION_CODES.has(error.code)) return failure("PERMISSION_DENIED", `${FAILURE_REASONS.PERMISSION_DENIED}（${detail}）`);
+	}
+	return failure("API_FAILED", `${FAILURE_REASONS.API_FAILED}：${detail}`);
+}
+function consentFailure(outcome) {
+	switch (outcome) {
+		case "allowed": return;
+		case "denied": return failure("CONSENT_DENIED");
+		case "expired": return failure("CONSENT_EXPIRED");
+		case "cancelled": return failure("ABORTED");
+		case "unavailable": return failure("CONSENT_UNAVAILABLE");
+	}
+}
+/** Whether the app owns a node: Feishu reports the bot open_id as the owner. */
+function ownedByApp(node, botOpenId) {
+	return botOpenId !== void 0 && botOpenId !== "" && node.owner === botOpenId;
+}
+/** A node's web link; falls back to the first root's origin. */
+function nodeUrl(roots, node) {
+	if (node.url !== void 0) return node.url;
+	const first = roots[0];
+	return `${first === void 0 ? "https://feishu.cn" : new URL(first.link).origin}/wiki/${node.nodeToken}`;
+}
+/** One-line clipped preview with Markdown control characters neutralized. */
+function preview(value, max = 80) {
+	const flat = value.replace(/\s+/gu, " ").trim().replace(/([[\]()*_`~<>])/gu, "\\$1");
+	return flat.length <= max ? flat : `${flat.slice(0, max)}…`;
+}
+/** A fenced preview of the first characters of a content. */
+function previewBlock(content) {
+	return `\`\`\`\n${(content.length <= 300 ? content : `${content.slice(0, 300)}\n…`).replace(/```/gu, "`​``")}\n\`\`\``;
+}
+function display(value) {
+	return typeof value === "string" ? preview(value, 120) : "?";
+}
+/** Readable, bounded text for a thrown value. */
+function describeError(error) {
+	const cleaned = (error instanceof FeishuApiError ? error.detail : error instanceof Error ? error.message : String(error)).replace(/[\u0000-\u001f\u007f]+/gu, " ").trim();
+	return cleaned.length <= 300 ? cleaned : `${cleaned.slice(0, 300)}…`;
+}
+//#endregion
+//#region src/feishu/wiki/links.ts
+/**
+* Feishu wiki (知识库) link parsing: the `wikiRoots` allow-list entries and
+* the document references the model passes to the wiki tools.
+*
+* Pure module: no I/O. Hosts are not checked because tenants use their own
+* subdomains (`<tenant>.feishu.cn`) and the API never uses the link host.
+*
+* @module dsh-channels/feishu/wiki/links
+*/
+/** Feishu wiki space id: decimal digits. */
+const SPACE_ID_PATTERN = /^\d{1,32}$/u;
+/** Feishu wiki node / docx token: letters and digits. */
+const TOKEN_PATTERN = /^[A-Za-z0-9]{8,64}$/u;
+/** Readable reasons for {@link WikiRootLinkError}. */
+const WIKI_ROOT_LINK_ERRORS = {
+	"not-a-url": "不是有效的链接",
+	"not-https": "必须是 https 链接",
+	"not-a-wiki-link": "只支持知识空间链接 https://<租户>.feishu.cn/wiki/space/<space_id> 或节点链接 https://<租户>.feishu.cn/wiki/<node_token>"
+};
+/**
+* Parse one `wikiRoots` entry.
+*
+* @param link Link as configured (surrounding whitespace is ignored).
+* @returns The root, or the reason it is invalid.
+*/
+function parseWikiRootLink(link) {
+	const trimmed = link.trim();
+	let url;
+	try {
+		url = new URL(trimmed);
+	} catch {
+		return {
+			ok: false,
+			error: "not-a-url"
+		};
+	}
+	if (url.protocol !== "https:") return {
+		ok: false,
+		error: "not-https"
+	};
+	const segments = url.pathname.split("/").filter((segment) => segment !== "");
+	if (segments[0] !== "wiki") return {
+		ok: false,
+		error: "not-a-wiki-link"
+	};
+	if (segments.length === 3 && segments[1] === "space" && SPACE_ID_PATTERN.test(segments[2])) return {
+		ok: true,
+		root: {
+			kind: "space",
+			spaceId: segments[2],
+			link: trimmed
+		}
+	};
+	if (segments.length === 2 && segments[1] !== "space" && TOKEN_PATTERN.test(segments[1])) return {
+		ok: true,
+		root: {
+			kind: "node",
+			nodeToken: segments[1],
+			link: trimmed
+		}
+	};
+	return {
+		ok: false,
+		error: "not-a-wiki-link"
+	};
+}
+/**
+* Parse every configured root. Callers validate the config first, so an
+* invalid entry here is a programming error.
+*
+* @param links Validated `wikiRoots` entries.
+* @returns The parsed roots, in configuration order.
+*/
+function parseWikiRoots(links) {
+	return links.map((link) => {
+		const parsed = parseWikiRootLink(link);
+		if (!parsed.ok) throw new Error(`dsh-channels: invalid wikiRoots entry ${link}: ${WIKI_ROOT_LINK_ERRORS[parsed.error]}`);
+		return parsed.root;
+	});
+}
+/**
+* Parse a model-supplied reference: a wiki node link, a docx link, a space
+* link, or a bare node token.
+*
+* @param input Raw tool argument.
+* @returns The reference, or `undefined` when it names nothing recognizable.
+*/
+function parseWikiRef(input) {
+	const trimmed = input.trim();
+	if (TOKEN_PATTERN.test(trimmed)) return {
+		kind: "node",
+		token: trimmed
+	};
+	let url;
+	try {
+		url = new URL(trimmed);
+	} catch {
+		return;
+	}
+	if (url.protocol !== "https:") return void 0;
+	const segments = url.pathname.split("/").filter((segment) => segment !== "");
+	if (segments[0] === "wiki" && segments.length === 3 && segments[1] === "space" && SPACE_ID_PATTERN.test(segments[2])) return {
+		kind: "space",
+		spaceId: segments[2]
+	};
+	if (segments.length === 2 && TOKEN_PATTERN.test(segments[1])) {
+		if (segments[0] === "wiki" && segments[1] !== "space") return {
+			kind: "node",
+			token: segments[1]
+		};
+		if (segments[0] === "docx") return {
+			kind: "docx",
+			token: segments[1]
+		};
+	}
+}
+//#endregion
+//#region src/feishu/wiki/scope.ts
+/**
+* Longest parent chain walked for a node root. Feishu limits wiki depth well
+* below this; a longer chain is treated as outside.
+*/
+const MAX_PARENT_DEPTH = 64;
+/**
+* Find the configured root containing `node`.
+*
+* @param api Wiki endpoints (for parent lookups).
+* @param roots Configured roots.
+* @param node The node to check.
+* @returns The containing root, or `undefined` when none contains it.
+*/
+async function containingRoot(api, roots, node) {
+	for (const root of roots) if (root.kind === "space" && root.spaceId === node.spaceId) return { root };
+	const nodeRoots = roots.filter((root) => root.kind === "node");
+	if (nodeRoots.length === 0) return void 0;
+	const byToken = new Map(nodeRoots.map((root) => [root.nodeToken, root]));
+	let current = node;
+	for (let depth = 0; depth <= MAX_PARENT_DEPTH; depth += 1) {
+		const match = byToken.get(current.nodeToken);
+		if (match !== void 0) return { root: match };
+		if (current.parentNodeToken === void 0) return void 0;
+		current = await api.getNode(current.parentNodeToken, "wiki");
+	}
+}
+/**
+* Whether a whole space (its top level) is inside the roots: only a space
+* root covers a space's top level.
+*
+* @param roots Configured roots.
+* @param spaceId The space.
+* @returns True when a space root names it.
+*/
+function spaceIsRoot(roots, spaceId) {
+	return roots.some((root) => root.kind === "space" && root.spaceId === spaceId);
+}
+//#endregion
+//#region src/feishu/wiki/base-tools.ts
+/**
+* Wiki Base (多维表格) tools: `feishu_wiki_base_read` (switch
+* `feishuTools.wikiRead`) and `feishu_wiki_base_edit` (switch
+* `feishuTools.wikiWrite`).
+*
+* Both run through the same gates as the docx tools (whitelist, `wikiRoots`
+* containment, consent cards). Reading shares the docx read grant per Session
+* and document. Editing changes records only (no table or field structure):
+* on a base the app owns it may create, update, and delete records; on any
+* other base it may only create records, so existing data written by people
+* is never changed. Every edit asks on a consent card. Feishu offers no
+* revision precondition for record writes, and applies them asynchronously.
+*
+* @module dsh-channels/feishu/wiki/base-tools
+*/
+/** Model-facing tool names; stable across releases (session history references them). */
+const WIKI_BASE_READ_TOOL_NAME = "feishu_wiki_base_read";
+const WIKI_BASE_EDIT_TOOL_NAME = "feishu_wiki_base_edit";
+/** Record page size bounds of `feishu_wiki_base_read`. */
+const READ_DEFAULT_LIMIT = 50;
+const READ_MAX_LIMIT = 200;
+/** Records of each operation shown on a consent card. */
+const CARD_PREVIEW_RECORDS = 3;
+const refSchema$2 = z.string().trim().min(1).max(2048);
+const nameSchema = z.string().trim().min(1).max(200);
+const recordIdSchema = z.string().trim().min(1).max(64);
+const fieldMapSchema = z.record(z.string().min(1).max(200), z.unknown()).refine((map) => Object.keys(map).length > 0, "至少包含一个字段");
+const wikiBaseReadArgsSchema = z.object({
+	doc: refSchema$2,
+	table: nameSchema.optional(),
+	filter: z.object({
+		logic: z.enum(["and", "or"]).optional(),
+		conditions: z.array(z.array(z.unknown()).min(2).max(3)).min(1).max(50)
+	}).strict().optional(),
+	sort: z.array(z.object({
+		field: nameSchema,
+		desc: z.boolean().optional()
+	}).strict()).min(1).max(10).optional(),
+	keyword: z.string().trim().min(1).max(200).optional(),
+	search_fields: z.array(nameSchema).min(1).max(20).optional(),
+	fields: z.array(nameSchema).min(1).max(100).optional(),
+	view_id: nameSchema.optional(),
+	offset: z.number().int().min(0).optional(),
+	limit: z.number().int().min(1).max(READ_MAX_LIMIT).optional()
+}).strict();
+const baseOperationSchema = z.discriminatedUnion("command", [
+	z.object({
+		command: z.literal("create"),
+		records: z.array(fieldMapSchema).min(1).max(200)
+	}).strict(),
+	z.object({
+		command: z.literal("update"),
+		records: z.array(z.object({
+			record_id: recordIdSchema,
+			fields: fieldMapSchema
+		}).strict()).min(1).max(200)
+	}).strict(),
+	z.object({
+		command: z.literal("delete"),
+		record_ids: z.array(recordIdSchema).min(1).max(200)
+	}).strict()
+]);
+const wikiBaseEditArgsSchema = z.object({
+	doc: refSchema$2,
+	table: nameSchema,
+	operations: z.array(baseOperationSchema).min(1).max(10)
+}).strict();
+const READ_DESCRIPTION$2 = `读取知识库中的飞书多维表格（bitable）。doc 传知识库节点链接或 node_token。第一次读取某个多维表格会在话题里弹出授权卡，由话题发起人确认，确认后本话题内再次读取不再询问；等待期间不要重复调用。不传 table 时只返回数据表列表；传 table（table_id 或表名）时返回字段列表和记录。filter 形如 {"logic":"and","conditions":[["状态","intersects",["进行中"]],["金额",">=",100],["备注","non_empty"]]}，运算符有 == != > >= < <= intersects（包含）disjoint（不包含）empty non_empty；日期条件用 "ExactDate(2026-08-07)"，日期不支持 >=。sort 形如 [{"field":"更新时间","desc":true}]；keyword 为关键词搜索，search_fields 指定搜索的字段（默认主字段）；fields 只返回指定字段。分页用 offset/limit（limit 默认 ${READ_DEFAULT_LIMIT}，最多 ${READ_MAX_LIMIT}），has_more 为 true 时用 next_offset 继续。writable 说明能做哪些修改：all 表示可增改删记录（本应用创建的表），create 表示只能新增记录，none 表示不能修改。`;
+const EDIT_DESCRIPTION$2 = `修改知识库中飞书多维表格（bitable）某个数据表的记录。先用 feishu_wiki_base_read 读取字段列表，按字段名写入。operations 按顺序执行（最多 10 个，每个最多 200 条记录）：create（records 为字段名→值的对象数组）、update（records 为 {record_id, fields} 数组，只改给出的字段）、delete（record_ids）。本应用创建的多维表格可以增改删；其他多维表格只能新增记录，不能修改或删除已有记录。不会修改数据表和字段结构。单元格取值：文本为字符串；数字为数字；单选/多选为选项名数组（如 ["进行中"]，单选也是数组）；日期为 "2026-03-24 10:00" 或毫秒时间戳；复选框为布尔；人员为 [{"id":"ou_xxx"}]；关联为 [{"id":"rec_xxx"}]；null 清空。公式、查找引用、创建时间等字段只读。写入是异步生效的，立刻读取可能还看不到。每次修改都会在话题里弹出授权卡，由话题发起人确认后才执行；等待期间不要重复调用。`;
+const REF_DESCRIPTION$2 = "知识库节点链接 https://<租户>.feishu.cn/wiki/<node_token> 或 node_token";
+const TABLE_PROPERTY = {
+	type: "string",
+	description: "数据表 table_id 或表名"
+};
+const FIELD_MAP_PROPERTY = {
+	type: "object",
+	description: "字段名（或字段 id）→ 值",
+	additionalProperties: true
+};
+const READ_PARAMETERS$2 = {
+	type: "object",
+	properties: {
+		doc: {
+			type: "string",
+			description: REF_DESCRIPTION$2
+		},
+		table: {
+			...TABLE_PROPERTY,
+			description: "数据表 table_id 或表名；不传只列出数据表"
+		},
+		filter: {
+			type: "object",
+			properties: {
+				logic: {
+					type: "string",
+					enum: ["and", "or"]
+				},
+				conditions: {
+					type: "array",
+					items: {
+						type: "array",
+						description: "[字段, 运算符, 值]；empty / non_empty 不带值"
+					}
+				}
+			},
+			required: ["conditions"],
+			additionalProperties: false
+		},
+		sort: {
+			type: "array",
+			items: {
+				type: "object",
+				properties: {
+					field: { type: "string" },
+					desc: { type: "boolean" }
+				},
+				required: ["field"],
+				additionalProperties: false
+			}
+		},
+		keyword: {
+			type: "string",
+			description: "关键词搜索"
+		},
+		search_fields: {
+			type: "array",
+			items: { type: "string" },
+			description: "keyword 搜索的字段，默认主字段"
+		},
+		fields: {
+			type: "array",
+			items: { type: "string" },
+			description: "只返回这些字段"
+		},
+		view_id: {
+			type: "string",
+			description: "按视图读取（应用视图的筛选与排序）"
+		},
+		offset: {
+			type: "integer",
+			minimum: 0
+		},
+		limit: {
+			type: "integer",
+			minimum: 1,
+			maximum: READ_MAX_LIMIT
+		}
+	},
+	required: ["doc"],
+	additionalProperties: false
+};
+const EDIT_PARAMETERS$2 = {
+	type: "object",
+	properties: {
+		doc: {
+			type: "string",
+			description: REF_DESCRIPTION$2
+		},
+		table: TABLE_PROPERTY,
+		operations: {
+			type: "array",
+			minItems: 1,
+			maxItems: 10,
+			items: {
+				type: "object",
+				properties: {
+					command: {
+						type: "string",
+						enum: [
+							"create",
+							"update",
+							"delete"
+						]
+					},
+					records: {
+						type: "array",
+						maxItems: 200,
+						description: "create：字段映射数组；update：{record_id, fields} 数组",
+						items: {
+							type: "object",
+							properties: {
+								record_id: { type: "string" },
+								fields: FIELD_MAP_PROPERTY
+							},
+							additionalProperties: true
+						}
+					},
+					record_ids: {
+						type: "array",
+						maxItems: 200,
+						items: { type: "string" },
+						description: "delete 的记录 id"
+					}
+				},
+				required: ["command"],
+				additionalProperties: false
+			}
+		}
+	},
+	required: [
+		"doc",
+		"table",
+		"operations"
+	],
+	additionalProperties: false
+};
+async function baseTarget(kit, context, doc) {
+	const bases = context.bases;
+	if (bases === void 0) return failure("CHANNEL_UNAVAILABLE");
+	const ref = parseWikiRef(doc);
+	if (ref === void 0) return failure("INVALID_REFERENCE");
+	const node = await kit.containedNode(context, ref);
+	if ("ok" in node) return node;
+	if (node.objType !== "bitable") return failure("UNSUPPORTED_TYPE", `${failure("UNSUPPORTED_TYPE").reason}（该节点类型：${node.objType}）`);
+	return {
+		context,
+		bases,
+		node,
+		url: nodeUrl(context.roots, node)
+	};
+}
+function writableOf(kit, target) {
+	if (!kit.writeEnabled()) return "none";
+	return ownedByApp(target.node, target.context.botOpenId) ? "all" : "create";
+}
+function pickTable(tables, wanted) {
+	const match = tables.find((table) => table.tableId === wanted) ?? tables.find((table) => table.name === wanted);
+	if (match !== void 0) return match;
+	return `找不到数据表「${wanted}」；可用数据表：${tables.map((table) => `${table.name}（${table.tableId}）`).join("、") || "无"}`;
+}
+function fieldView(field) {
+	return {
+		...field.properties,
+		field_id: field.fieldId,
+		name: field.name,
+		type: field.type
+	};
+}
+async function read$1(kit, sessionId, rawArgs, signal) {
+	const args = parseArgs(WIKI_BASE_READ_TOOL_NAME, wikiBaseReadArgsSchema, rawArgs);
+	const gate = kit.gate(sessionId, WIKI_BASE_READ_TOOL_NAME);
+	if (!gate.ok) return gate;
+	return await guarded$1(kit, WIKI_BASE_READ_TOOL_NAME, async () => {
+		const target = await baseTarget(kit, gate.context, args.doc);
+		if ("ok" in target) return target;
+		const denied = await kit.readConsent(sessionId, target.context, target.node, signal);
+		if (denied !== void 0) return denied;
+		if (signal.aborted) return failure("ABORTED");
+		const token = target.node.objToken;
+		const tables = await target.bases.listTables(token);
+		const base = {
+			ok: true,
+			title: target.node.title,
+			node_token: target.node.nodeToken,
+			url: target.url,
+			tables: tables.map((table) => ({
+				table_id: table.tableId,
+				name: table.name
+			})),
+			writable: writableOf(kit, target)
+		};
+		if (args.table === void 0) return base;
+		const table = pickTable(tables, args.table);
+		if (typeof table === "string") return failure("INVALID_OPERATION", table);
+		const fields = await target.bases.listFields(token, table.tableId);
+		const offset = args.offset ?? 0;
+		const query = {
+			...args.filter === void 0 ? {} : { filter: args.filter },
+			...args.sort === void 0 ? {} : { sort: args.sort },
+			...args.fields === void 0 ? {} : { fields: args.fields },
+			...args.view_id === void 0 ? {} : { viewId: args.view_id },
+			offset,
+			limit: args.limit ?? READ_DEFAULT_LIMIT
+		};
+		let page;
+		if (args.keyword === void 0) page = await target.bases.listRecords(token, table.tableId, query);
+		else {
+			const primary = fields[0]?.name;
+			const searchFields = args.search_fields ?? (primary === void 0 ? [] : [primary]);
+			if (searchFields.length === 0) return failure("INVALID_OPERATION", "keyword 搜索需要 search_fields");
+			page = await target.bases.searchRecords(token, table.tableId, {
+				...query,
+				keyword: args.keyword,
+				searchFields
+			});
+		}
+		return {
+			...base,
+			table_id: table.tableId,
+			fields: fields.map(fieldView),
+			records: page.records.map((record) => ({
+				record_id: record.recordId,
+				fields: record.fields
+			})),
+			has_more: page.hasMore,
+			...page.hasMore ? { next_offset: offset + page.records.length } : {},
+			...page.timezone === void 0 ? {} : { timezone: page.timezone },
+			...page.ignoredFields.length === 0 ? {} : { ignored_fields: page.ignoredFields }
+		};
+	});
+}
+function json(value) {
+	return preview(JSON.stringify(value) ?? "null", 120);
+}
+function cardLines$1(operations, tableName) {
+	const lines = operations.map((operation, index) => {
+		const n = `${index + 1}.`;
+		switch (operation.command) {
+			case "create": {
+				const sample = operation.records.slice(0, CARD_PREVIEW_RECORDS).map((record) => `　${json(record)}`);
+				const more = operation.records.length > CARD_PREVIEW_RECORDS ? [`　…（共 ${operation.records.length} 条）`] : [];
+				return [
+					`${n} 新增 ${operation.records.length} 条记录`,
+					...sample,
+					...more
+				].join("\n");
+			}
+			case "update": {
+				const sample = operation.records.slice(0, CARD_PREVIEW_RECORDS).map((record) => `　${preview(record.record_id, 40)}：${json(record.fields)}`);
+				const more = operation.records.length > CARD_PREVIEW_RECORDS ? [`　…（共 ${operation.records.length} 条）`] : [];
+				return [
+					`${n} 修改 ${operation.records.length} 条记录`,
+					...sample,
+					...more
+				].join("\n");
+			}
+			case "delete": return `${n} ⚠️ 删除 ${operation.record_ids.length} 条记录：${preview(operation.record_ids.join("、"), 160)}`;
+		}
+	});
+	return [
+		`**数据表**：${preview(tableName, 60)}`,
+		`**将执行 ${operations.length} 个操作**`,
+		...lines
+	];
+}
+async function edit$1(kit, sessionId, rawArgs, signal) {
+	const args = parseArgs(WIKI_BASE_EDIT_TOOL_NAME, wikiBaseEditArgsSchema, rawArgs);
+	const gate = kit.gate(sessionId, WIKI_BASE_EDIT_TOOL_NAME);
+	if (!gate.ok) return gate;
+	return await guarded$1(kit, WIKI_BASE_EDIT_TOOL_NAME, async () => {
+		const target = await baseTarget(kit, gate.context, args.doc);
+		if ("ok" in target) return target;
+		const { node, bases } = target;
+		if (writableOf(kit, target) !== "all") {
+			const changing = args.operations.find((operation) => operation.command !== "create");
+			if (changing !== void 0) return failure("NOT_OWNED", `这个多维表格不是本应用创建的，只能新增记录，不能${changing.command === "update" ? "修改" : "删除"}已有记录（所有者：${node.owner ?? "未知"}）`);
+		}
+		const table = pickTable(await bases.listTables(node.objToken), args.table);
+		if (typeof table === "string") return failure("INVALID_OPERATION", table);
+		const denied = await kit.consent(sessionId, target.context, "edit", {
+			title: node.title,
+			url: target.url,
+			location: await kit.locationOf(target.context.api, node),
+			details: cardLines$1(args.operations, table.name)
+		}, signal);
+		if (denied !== void 0) return denied;
+		const created = [];
+		const ignored = [];
+		let updated = 0;
+		let deleted = 0;
+		for (const [index, operation] of args.operations.entries()) {
+			if (signal.aborted) return {
+				...failure("ABORTED", `已取消；前 ${index} 个操作已执行`),
+				applied: index
+			};
+			try {
+				switch (operation.command) {
+					case "create":
+						created.push(...await bases.createRecords(node.objToken, table.tableId, operation.records));
+						break;
+					case "update":
+						ignored.push(...await bases.updateRecords(node.objToken, table.tableId, Object.fromEntries(operation.records.map((record) => [record.record_id, record.fields]))));
+						updated += operation.records.length;
+						break;
+					case "delete":
+						await bases.deleteRecords(node.objToken, table.tableId, operation.record_ids);
+						deleted += operation.record_ids.length;
+						break;
+				}
+			} catch (error) {
+				const reason = failureOf(error).reason;
+				return {
+					...failure("EDIT_FAILED", `第 ${index + 1} 个操作失败：${reason}；前 ${index} 个操作已执行`),
+					applied: index
+				};
+			}
+		}
+		return {
+			ok: true,
+			title: node.title,
+			node_token: node.nodeToken,
+			url: target.url,
+			table_id: table.tableId,
+			applied: args.operations.length,
+			created_record_ids: created,
+			updated,
+			deleted,
+			ignored_fields: [...new Set(ignored)]
+		};
+	});
+}
+/** The Base tool family. */
+const BASE_TOOL_SPECS = [{
+	name: WIKI_BASE_READ_TOOL_NAME,
+	access: "read",
+	description: READ_DESCRIPTION$2,
+	parameters: READ_PARAMETERS$2,
+	execute: read$1,
+	presentCall: (args) => `读取知识库多维表格：${display(args.doc)}`
+}, {
+	name: WIKI_BASE_EDIT_TOOL_NAME,
+	access: "write",
+	description: EDIT_DESCRIPTION$2,
+	parameters: EDIT_PARAMETERS$2,
+	execute: edit$1,
+	presentCall: (args) => `修改知识库多维表格：${display(args.doc)}`
+}];
+//#endregion
+//#region src/feishu/wiki/a1.ts
+/**
+* A1 notation helpers for the wiki sheet tools: column letters, single cells,
+* and rectangle end rows. Ranges never carry a sheet prefix (`Sheet1!`); the
+* sub-sheet is selected separately.
+*
+* @module dsh-channels/feishu/wiki/a1
+*/
+/** Largest column the helpers accept (`ZZZ`). */
+const MAX_COLUMN = 18278;
+/** Largest row the helpers accept. */
+const MAX_ROW = 1e7;
+/**
+* Column letters to a 1-based index (`A` → 1, `AA` → 27).
+*
+* @param letters Column letters, any case.
+* @returns The index, or undefined when invalid or beyond `ZZZ`.
+*/
+function columnIndex(letters) {
+	if (!/^[A-Za-z]{1,3}$/u.test(letters)) return void 0;
+	let index = 0;
+	for (const char of letters.toUpperCase()) index = index * 26 + (char.charCodeAt(0) - 64);
+	return index <= MAX_COLUMN ? index : void 0;
+}
+/**
+* A 1-based column index to letters (1 → `A`, 27 → `AA`).
+*
+* @param index Column index, at least 1.
+* @returns The letters.
+*/
+function columnLetters(index) {
+	let letters = "";
+	let rest = index;
+	while (rest > 0) {
+		const digit = (rest - 1) % 26;
+		letters = String.fromCharCode(65 + digit) + letters;
+		rest = Math.floor((rest - 1) / 26);
+	}
+	return letters;
+}
+/**
+* Parse one cell (`B3`).
+*
+* @param value Cell reference.
+* @returns The position, or undefined when it is not a single valid cell.
+*/
+function parseCell(value) {
+	const match = /^([A-Za-z]{1,3})([1-9]\d{0,7})$/u.exec(value.trim());
+	if (match === null) return void 0;
+	const column = columnIndex(match[1] ?? "");
+	const row = Number(match[2]);
+	return column === void 0 || row > MAX_ROW ? void 0 : {
+		column,
+		row
+	};
+}
+/**
+* The rectangle that starts at `start` and spans `rows` × `columns` cells.
+*
+* @param start Top-left cell.
+* @param rows Row count, at least 1.
+* @param columns Column count, at least 1.
+* @returns The range (`B3:D10`).
+*/
+function rectangle(start, rows, columns) {
+	return `${columnLetters(start.column)}${start.row}:${columnLetters(start.column + columns - 1)}${start.row + rows - 1}`;
+}
+/**
+* Last row of a range (`A1:B5` → 5, `C7` → 7); undefined for whole-column ranges (`A:C`).
+*
+* @param range A1 range.
+* @returns The row, or undefined.
+*/
+function rangeEndRow(range) {
+	const end = range.split(":").at(-1) ?? "";
+	const match = /(\d+)$/u.exec(end.trim());
+	return match === null ? void 0 : Number(match[1]);
+}
+/**
+* Whether a range is plain A1 (`A1`, `A1:F30`, `A:C`, `3:5`) without a sheet prefix.
+*
+* @param range Candidate range.
+* @returns True when acceptable.
+*/
+function isA1Range(range) {
+	return /^(?:[A-Za-z]{1,3}\d{0,8}|\d{1,8})(?::(?:[A-Za-z]{1,3}\d{0,8}|\d{1,8}))?$/u.test(range);
+}
+//#endregion
+//#region src/feishu/wiki/sheet-tools.ts
+/**
+* Wiki spreadsheet (电子表格) tools: `feishu_wiki_sheet_read` (switch
+* `feishuTools.wikiRead`) and `feishu_wiki_sheet_edit` (switch
+* `feishuTools.wikiWrite`).
+*
+* Both run through the same gates as the docx tools (whitelist, `wikiRoots`
+* containment, consent cards). Reading shares the docx read grant per Session
+* and document. Editing writes cell values and formulas only (no styles,
+* charts, or row/column structure), only on spreadsheets the app owns, and
+* only when the workbook revision still equals the one the model read, checked
+* before and after the consent card; Feishu offers no revision precondition on
+* the write itself.
+*
+* @module dsh-channels/feishu/wiki/sheet-tools
+*/
+/** Model-facing tool names; stable across releases (session history references them). */
+const WIKI_SHEET_READ_TOOL_NAME = "feishu_wiki_sheet_read";
+const WIKI_SHEET_EDIT_TOOL_NAME = "feishu_wiki_sheet_edit";
+/** Most cells one `feishu_wiki_sheet_edit` call may write in total. */
+const WIKI_SHEET_EDIT_MAX_CELLS = 5e4;
+/** Read size bounds (characters of CSV returned to the model). */
+const READ_DEFAULT_CHARS = 2e4;
+const READ_MAX_CHARS = 1e5;
+/** CSV characters requested when only the data extent of a sheet is needed. */
+const EXTENT_PROBE_CHARS = 2e3;
+/** CSV characters per page while scanning below the first data region for later rows. */
+const EXTENT_SCAN_CHARS = 2e5;
+/** Pages the append row scan reads before giving up. */
+const EXTENT_SCAN_PAGES = 20;
+/** Scan bounds when the workbook does not report the grid size. */
+const MAX_SCAN_COLUMN = 18278;
+const MAX_SCAN_ROW = 1e7;
+/** Rows of each written block shown on a consent card. */
+const CARD_PREVIEW_ROWS = 3;
+const refSchema$1 = z.string().trim().min(1).max(2048);
+const sheetSchema = z.string().trim().min(1).max(200);
+const cellValueSchema = z.union([
+	z.string().max(5e4),
+	z.number().finite(),
+	z.boolean(),
+	z.null()
+]);
+const valuesSchema = z.array(z.array(cellValueSchema).min(1).max(1e3)).min(1).max(1e4);
+const wikiSheetReadArgsSchema = z.object({
+	doc: refSchema$1,
+	sheet: sheetSchema.optional(),
+	range: z.string().trim().min(1).max(40).refine(isA1Range, "需要不带子表前缀的 A1 范围，例如 A1:F30").optional(),
+	max_chars: z.number().int().min(1e3).max(READ_MAX_CHARS).optional()
+}).strict();
+const sheetOperationSchema = z.discriminatedUnion("command", [z.object({
+	command: z.literal("write"),
+	sheet: sheetSchema.optional(),
+	start_cell: z.string().trim().min(2).max(12),
+	values: valuesSchema
+}).strict(), z.object({
+	command: z.literal("append"),
+	sheet: sheetSchema.optional(),
+	start_column: z.string().trim().min(1).max(3).optional(),
+	values: valuesSchema
+}).strict()]);
+const wikiSheetEditArgsSchema = z.object({
+	doc: refSchema$1,
+	revision_id: z.number().int().min(0),
+	operations: z.array(sheetOperationSchema).min(1).max(20)
+}).strict();
+const READ_DESCRIPTION$1 = `读取知识库中的飞书电子表格（sheet）。doc 传知识库节点链接或 node_token。第一次读取某个表格会在话题里弹出授权卡，由话题发起人确认，确认后本话题内再次读取不再询问；等待期间不要重复调用。返回 sheets（子表列表）；sheet 传子表 sheet_id 或标题选择子表，只有一个可见子表时可省略，有多个而未指定时只返回子表列表。range 为不带子表前缀的 A1 范围（如 A1:F30、A:C），省略时读整张子表。内容为 CSV（显示值），每行前缀 [row=N] 是真实行号，引用行号时以它为准，不要自己数行。max_chars 默认 ${READ_DEFAULT_CHARS}；has_more 为 true 时表示被截断，从 actual_range 末行之后接着读。返回的 revision_id 用于 feishu_wiki_sheet_edit；editable 表示能否修改（只有本应用创建的表格可以修改）。`;
+const EDIT_DESCRIPTION$1 = `修改知识库中由本应用创建的飞书电子表格（sheet）的单元格值。先用 feishu_wiki_sheet_read 读取，把读到的 revision_id 原样传入；表格在此之后被改过会被拒绝，需要重新读取。operations 按顺序执行（最多 20 个，合计不超过 ${WIKI_SHEET_EDIT_MAX_CELLS} 个单元格）：write（从 start_cell 如 B3 开始写入二维数组 values）、append（在子表现有数据的最后一行之后追加 values，start_column 默认 A；目标单元格非空时失败，不会覆盖）。返回 formula_errors 时，这些公式没有编译成功、已按文本写入，需要修正后重写。values 每个元素是一行；单元格可以是字符串、数字、布尔或 null（null 表示保持原值不变）；以 = 开头的字符串作为公式写入。数字、金额、百分比（0.4 表示 40%）写成数字；编号、前导零、身份证号写成字符串。不会修改样式、图表、行列结构。sheet 传子表 sheet_id 或标题，只有一个可见子表时可省略。每次修改都会在话题里弹出授权卡，由话题发起人确认后才执行；等待期间不要重复调用。`;
+const REF_DESCRIPTION$1 = "知识库节点链接 https://<租户>.feishu.cn/wiki/<node_token> 或 node_token";
+const SHEET_PROPERTY = {
+	type: "string",
+	description: "子表 sheet_id 或标题；只有一个可见子表时可省略"
+};
+const VALUES_PROPERTY = {
+	type: "array",
+	description: "二维数组，每个元素是一行；单元格为字符串、数字、布尔或 null（保持原值），以 = 开头的字符串是公式",
+	items: {
+		type: "array",
+		items: { type: [
+			"string",
+			"number",
+			"boolean",
+			"null"
+		] }
+	}
+};
+const READ_PARAMETERS$1 = {
+	type: "object",
+	properties: {
+		doc: {
+			type: "string",
+			description: REF_DESCRIPTION$1
+		},
+		sheet: SHEET_PROPERTY,
+		range: {
+			type: "string",
+			description: "不带子表前缀的 A1 范围，如 A1:F30；省略读整张子表"
+		},
+		max_chars: {
+			type: "integer",
+			minimum: 1e3,
+			maximum: READ_MAX_CHARS,
+			description: `返回 CSV 的字符上限，默认 ${READ_DEFAULT_CHARS}`
+		}
+	},
+	required: ["doc"],
+	additionalProperties: false
+};
+const EDIT_PARAMETERS$1 = {
+	type: "object",
+	properties: {
+		doc: {
+			type: "string",
+			description: REF_DESCRIPTION$1
+		},
+		revision_id: {
+			type: "integer",
+			description: "feishu_wiki_sheet_read 返回的 revision_id"
+		},
+		operations: {
+			type: "array",
+			minItems: 1,
+			maxItems: 20,
+			items: {
+				type: "object",
+				properties: {
+					command: {
+						type: "string",
+						enum: ["write", "append"]
+					},
+					sheet: SHEET_PROPERTY,
+					start_cell: {
+						type: "string",
+						description: "write 的起始单元格，如 B3"
+					},
+					start_column: {
+						type: "string",
+						description: "append 的起始列，默认 A"
+					},
+					values: VALUES_PROPERTY
+				},
+				required: ["command", "values"],
+				additionalProperties: false
+			}
+		}
+	},
+	required: [
+		"doc",
+		"revision_id",
+		"operations"
+	],
+	additionalProperties: false
+};
+async function sheetTarget(kit, context, doc) {
+	const sheets = context.sheets;
+	if (sheets === void 0) return failure("CHANNEL_UNAVAILABLE");
+	const ref = parseWikiRef(doc);
+	if (ref === void 0) return failure("INVALID_REFERENCE");
+	const node = await kit.containedNode(context, ref);
+	if ("ok" in node) return node;
+	if (node.objType !== "sheet") return failure("UNSUPPORTED_TYPE", `${failure("UNSUPPORTED_TYPE").reason}（该节点类型：${node.objType}）`);
+	return {
+		context,
+		sheets,
+		node,
+		url: nodeUrl(context.roots, node)
+	};
+}
+function sheetView(sheet) {
+	return {
+		sheet_id: sheet.sheetId,
+		title: sheet.title,
+		index: sheet.index,
+		resource_type: sheet.resourceType,
+		hidden: sheet.hidden,
+		...sheet.rowCount === void 0 ? {} : { row_count: sheet.rowCount },
+		...sheet.columnCount === void 0 ? {} : { column_count: sheet.columnCount }
+	};
+}
+/** The named grid sheet, the only visible grid sheet, or why neither applies. */
+function pickSheet(workbook, wanted) {
+	const grids = workbook.sheets.filter((sheet) => sheet.resourceType === "sheet");
+	if (wanted !== void 0) {
+		const match = workbook.sheets.find((sheet) => sheet.sheetId === wanted) ?? workbook.sheets.find((sheet) => sheet.title === wanted);
+		if (match === void 0) return `找不到子表「${wanted}」；可用子表：${sheetList(workbook)}`;
+		if (match.resourceType !== "sheet") return `子表「${match.title}」是 ${match.resourceType}，不是单元格表格，不能按单元格读写`;
+		return match;
+	}
+	const visible = grids.filter((sheet) => !sheet.hidden);
+	if (visible.length === 1 && visible[0] !== void 0) return visible[0];
+	return `表格有多个子表，请用 sheet 指定：${sheetList(workbook)}`;
+}
+function sheetList(workbook) {
+	return workbook.sheets.map((sheet) => `${sheet.title}（${sheet.sheetId}）`).join("、") || "无";
+}
+function wholeSheetRange(sheet) {
+	return sheet.rowCount !== void 0 && sheet.columnCount !== void 0 && sheet.rowCount > 0 && sheet.columnCount > 0 ? `A1:${columnLetters(sheet.columnCount)}${sheet.rowCount}` : "A:ZZZ";
+}
+async function read(kit, sessionId, rawArgs, signal) {
+	const args = parseArgs(WIKI_SHEET_READ_TOOL_NAME, wikiSheetReadArgsSchema, rawArgs);
+	const gate = kit.gate(sessionId, WIKI_SHEET_READ_TOOL_NAME);
+	if (!gate.ok) return gate;
+	return await guarded$1(kit, WIKI_SHEET_READ_TOOL_NAME, async () => {
+		const target = await sheetTarget(kit, gate.context, args.doc);
+		if ("ok" in target) return target;
+		const denied = await kit.readConsent(sessionId, target.context, target.node, signal);
+		if (denied !== void 0) return denied;
+		if (signal.aborted) return failure("ABORTED");
+		const workbook = await target.sheets.workbook(target.node.objToken);
+		const base = {
+			ok: true,
+			title: target.node.title,
+			node_token: target.node.nodeToken,
+			url: target.url,
+			...workbook.revision === void 0 ? {} : { revision_id: workbook.revision },
+			sheets: workbook.sheets.map(sheetView),
+			editable: kit.writeEnabled() && ownedByApp(target.node, target.context.botOpenId)
+		};
+		const sheet = pickSheet(workbook, args.sheet);
+		if (typeof sheet === "string") {
+			if (args.sheet !== void 0) return failure("INVALID_OPERATION", sheet);
+			return {
+				...base,
+				warning: sheet,
+				content: ""
+			};
+		}
+		const csv = await target.sheets.readCsv(target.node.objToken, {
+			sheetId: sheet.sheetId,
+			range: args.range ?? wholeSheetRange(sheet),
+			maxChars: args.max_chars ?? READ_DEFAULT_CHARS
+		});
+		return {
+			...base,
+			sheet_id: sheet.sheetId,
+			...csv.actualRange === void 0 ? {} : { actual_range: csv.actualRange },
+			...csv.currentRegion === void 0 ? {} : { current_region: csv.currentRegion },
+			has_more: csv.hasMore,
+			...csv.warning === void 0 ? {} : { warning: csv.warning },
+			content: csv.csv
+		};
+	});
+}
+/** Rows padded with `null` (unchanged) to one rectangle. */
+function rectangular(values) {
+	const columns = Math.max(...values.map((row) => row.length));
+	return {
+		rows: values.map((row) => [...row, ...Array(columns - row.length).fill(null)]),
+		columns
+	};
+}
+function plan(workbook, operations) {
+	const planned = [];
+	let cells = 0;
+	for (const [index, operation] of operations.entries()) {
+		const where = `第 ${index + 1} 个操作（${operation.command}）`;
+		const sheet = pickSheet(workbook, operation.sheet);
+		if (typeof sheet === "string") return failure("INVALID_OPERATION", `${where}：${sheet}`);
+		let start;
+		if (operation.command === "write") {
+			start = parseCell(operation.start_cell);
+			if (start === void 0) return failure("INVALID_OPERATION", `${where}：start_cell 需要单个单元格，例如 B3`);
+		} else {
+			const column = parseCell(`${operation.start_column ?? "A"}1`);
+			if (column === void 0) return failure("INVALID_OPERATION", `${where}：start_column 需要列字母，例如 A`);
+			start = column;
+		}
+		const { rows, columns } = rectangular(operation.values);
+		cells += rows.length * columns;
+		if (cells > 5e4) return failure("INVALID_OPERATION", `一次最多写入 ${WIKI_SHEET_EDIT_MAX_CELLS} 个单元格，请拆成多次调用`);
+		planned.push({
+			operation,
+			sheet,
+			start,
+			rows,
+			columns
+		});
+	}
+	return planned;
+}
+function cardLines(planned) {
+	const lines = planned.map((write, index) => {
+		const size = `${write.rows.length} 行 × ${write.columns} 列`;
+		const where = write.operation.command === "write" ? `写入子表「${preview(write.sheet.title, 40)}」的 ${rectangle(write.start, write.rows.length, write.columns)}（${size}）` : `在子表「${preview(write.sheet.title, 40)}」末尾追加 ${size}（从 ${columnLetters(write.start.column)} 列开始）`;
+		const sample = write.rows.slice(0, CARD_PREVIEW_ROWS).map((row) => `　${preview(row.map((cell) => cell === null ? "" : String(cell)).join(" | "), 80)}`);
+		const more = write.rows.length > CARD_PREVIEW_ROWS ? [`　…（共 ${write.rows.length} 行）`] : [];
+		return [
+			`${index + 1}. ${where}`,
+			...sample,
+			...more
+		].join("\n");
+	});
+	return [`**将执行 ${planned.length} 个操作**`, ...lines];
+}
+/** First empty row after the sheet's data (1 for an empty sheet), or undefined when it cannot be determined. */
+async function appendRow(sheets, token, sheet) {
+	const probe = await sheets.readCsv(token, {
+		sheetId: sheet.sheetId,
+		range: wholeSheetRange(sheet),
+		maxChars: EXTENT_PROBE_CHARS
+	});
+	const region = probe.currentRegion ?? (probe.hasMore ? void 0 : probe.actualRange);
+	let last = region === void 0 ? probe.csv.trim() === "" && !probe.hasMore ? 0 : void 0 : rangeEndRow(region);
+	if (last === void 0) return void 0;
+	const lastColumn = columnLetters(sheet.columnCount !== void 0 && sheet.columnCount > 0 ? sheet.columnCount : MAX_SCAN_COLUMN);
+	const lastRow = sheet.rowCount !== void 0 && sheet.rowCount > 0 ? sheet.rowCount : MAX_SCAN_ROW;
+	let from = last + 1;
+	for (let page = 0; from <= lastRow; page++) {
+		if (page === EXTENT_SCAN_PAGES) return void 0;
+		const scan = await sheets.readCsv(token, {
+			sheetId: sheet.sheetId,
+			range: `A${from}:${lastColumn}${lastRow}`,
+			maxChars: EXTENT_SCAN_CHARS
+		});
+		last = Math.max(last, lastFilledRow(scan.csv));
+		if (!scan.hasMore) break;
+		const end = scan.actualRange === void 0 ? void 0 : rangeEndRow(scan.actualRange);
+		if (end === void 0 || end < from) return void 0;
+		from = end + 1;
+	}
+	return last + 1;
+}
+/** Largest `[row=N]` whose record has a non-empty cell, or 0. */
+function lastFilledRow(csv) {
+	let last = 0;
+	for (const match of csv.matchAll(/^\[row=(\d+)\] ?(.*)$/gmu)) if (/[^,\s"]/u.test(match[2] ?? "")) last = Math.max(last, Number(match[1]));
+	return last;
+}
+async function edit(kit, sessionId, rawArgs, signal) {
+	const args = parseArgs(WIKI_SHEET_EDIT_TOOL_NAME, wikiSheetEditArgsSchema, rawArgs);
+	const gate = kit.gate(sessionId, WIKI_SHEET_EDIT_TOOL_NAME);
+	if (!gate.ok) return gate;
+	return await guarded$1(kit, WIKI_SHEET_EDIT_TOOL_NAME, async () => {
+		const target = await sheetTarget(kit, gate.context, args.doc);
+		if ("ok" in target) return target;
+		const { node, sheets } = target;
+		if (!ownedByApp(node, target.context.botOpenId)) return failure("NOT_OWNED", `${failure("NOT_OWNED").reason}（该表格所有者：${node.owner ?? "未知"}）`);
+		const workbook = await sheets.workbook(node.objToken);
+		if (workbook.revision !== void 0 && workbook.revision !== args.revision_id) return {
+			...failure("REVISION_CONFLICT", `${failure("REVISION_CONFLICT").reason}（读取时 ${args.revision_id}，当前 ${workbook.revision}）`),
+			revision_id: workbook.revision
+		};
+		const planned = plan(workbook, args.operations);
+		if (!Array.isArray(planned)) return planned;
+		const denied = await kit.consent(sessionId, target.context, "edit", {
+			title: node.title,
+			url: target.url,
+			location: await kit.locationOf(target.context.api, node),
+			details: cardLines(planned)
+		}, signal);
+		if (denied !== void 0) return denied;
+		const after = await sheets.workbook(node.objToken);
+		if (after.revision !== void 0 && after.revision !== args.revision_id) return {
+			...failure("REVISION_CONFLICT", `${failure("REVISION_CONFLICT").reason}（等待授权期间表格被修改）`),
+			revision_id: after.revision
+		};
+		const written = [];
+		const formulaErrors = [];
+		for (const [index, write] of planned.entries()) {
+			if (signal.aborted) return {
+				...failure("ABORTED", `已取消；前 ${index} 个操作已执行`),
+				applied: index
+			};
+			try {
+				let start = write.start;
+				if (write.operation.command === "append") {
+					const row = await appendRow(sheets, node.objToken, write.sheet);
+					if (row === void 0) return {
+						...failure("EDIT_FAILED", `第 ${index + 1} 个操作失败：无法确定子表「${write.sheet.title}」的数据末行，请改用 write 指定 start_cell；前 ${index} 个操作已执行`),
+						applied: index
+					};
+					start = {
+						column: write.start.column,
+						row
+					};
+				}
+				const range = rectangle(start, write.rows.length, write.columns);
+				const result = await sheets.writeCells(node.objToken, {
+					sheetId: write.sheet.sheetId,
+					range,
+					rows: write.rows,
+					...write.operation.command === "append" ? { allowOverwrite: false } : {}
+				});
+				written.push({
+					sheet_id: write.sheet.sheetId,
+					range
+				});
+				for (const error of result.formulaErrors) formulaErrors.push({
+					sheet_id: write.sheet.sheetId,
+					cell: error.cell,
+					...error.formula === void 0 ? {} : { formula: error.formula },
+					...error.errorType === void 0 ? {} : { error_type: error.errorType },
+					...error.detail === void 0 ? {} : { detail: error.detail }
+				});
+			} catch (error) {
+				const reason = failureOf(error).reason;
+				return {
+					...failure("EDIT_FAILED", `第 ${index + 1} 个操作失败：${reason}；前 ${index} 个操作已执行`),
+					applied: index
+				};
+			}
+		}
+		const revision = await sheets.workbook(node.objToken).then((final) => final.revision, (error) => {
+			kit.warn("dsh-channels: reading the revision after %s failed: %s", WIKI_SHEET_EDIT_TOOL_NAME, describeError(error));
+		});
+		return {
+			ok: true,
+			title: node.title,
+			node_token: node.nodeToken,
+			url: target.url,
+			applied: planned.length,
+			written,
+			...revision === void 0 ? {} : { revision_id: revision },
+			...formulaErrors.length === 0 ? {} : { formula_errors: formulaErrors }
+		};
+	});
+}
+/** The spreadsheet tool family. */
+const SHEET_TOOL_SPECS = [{
+	name: WIKI_SHEET_READ_TOOL_NAME,
+	access: "read",
+	description: READ_DESCRIPTION$1,
+	parameters: READ_PARAMETERS$1,
+	execute: read,
+	presentCall: (args) => `读取知识库表格：${display(args.doc)}`
+}, {
+	name: WIKI_SHEET_EDIT_TOOL_NAME,
+	access: "write",
+	description: EDIT_DESCRIPTION$1,
+	parameters: EDIT_PARAMETERS$1,
+	execute: edit,
+	presentCall: (args) => `修改知识库表格：${display(args.doc)}`
+}];
+//#endregion
+//#region src/feishu/wiki/tools.ts
+/**
+* Model-facing wiki (知识库) tools: `feishu_wiki_list`, `feishu_wiki_read`
+* (switch `feishuTools.wikiRead`), `feishu_wiki_create`, and
+* `feishu_wiki_edit` (switch `feishuTools.wikiWrite`).
+*
+* Every call acts with the app identity and is gated, in order, by:
+* - the switch and a non-empty `wikiRoots` (otherwise nothing is mounted);
+* - the topic owner being the administrator or on the wiki whitelist
+*   (`/auth wiki add`), checked per call so revocation applies at once;
+* - `wikiRoots` containment of the node (see `scope.ts`);
+* - docx only for reading and editing;
+* - edits only on documents the app owns (wiki node `owner` equals the bot
+*   open_id) whose current revision equals the `revision_id` the model read;
+* - the topic owner's consent card for opening a document (remembered per
+*   Session and document), for every create, and for every edit.
+*
+* Browsing (`feishu_wiki_list`) needs no card. Every failure is a structured
+* value with a stable code and a readable reason.
+*
+* @module dsh-channels/feishu/wiki/tools
+*/
+/** Model-facing tool names; stable across releases (session history references them). */
+const WIKI_LIST_TOOL_NAME = "feishu_wiki_list";
+const WIKI_READ_TOOL_NAME = "feishu_wiki_read";
+const WIKI_CREATE_TOOL_NAME = "feishu_wiki_create";
+const WIKI_EDIT_TOOL_NAME = "feishu_wiki_edit";
+/** Longest accepted document title (characters). */
+const MAX_TITLE_CHARS = 200;
+/** Longest content one create/edit operation may carry (characters). */
+const MAX_CONTENT_CHARS = 2e5;
+const refSchema = z.string().trim().min(1).max(2048);
+const blockIdSchema = z.string().trim().min(1).max(128);
+const contentSchema = z.string().max(MAX_CONTENT_CHARS);
+const formatSchema = z.enum(["markdown", "xml"]);
+const wikiListArgsSchema = z.object({
+	parent: refSchema.optional(),
+	page_token: z.string().trim().min(1).max(512).optional()
+}).strict();
+const wikiReadArgsSchema = z.object({
+	doc: refSchema,
+	format: formatSchema.optional(),
+	scope: z.enum([
+		"full",
+		"outline",
+		"section",
+		"range",
+		"keyword"
+	]).optional(),
+	start_block_id: blockIdSchema.optional(),
+	end_block_id: blockIdSchema.optional(),
+	keyword: z.string().trim().min(1).max(500).optional(),
+	max_depth: z.number().int().min(-1).max(20).optional()
+}).strict();
+const wikiCreateArgsSchema = z.object({
+	parent: refSchema,
+	title: z.string().trim().min(1).max(MAX_TITLE_CHARS),
+	type: z.enum([
+		"docx",
+		"sheet",
+		"bitable"
+	]).optional(),
+	content: contentSchema.optional(),
+	format: formatSchema.optional()
+}).strict();
+const rangeFields = {
+	block_id: blockIdSchema.optional(),
+	start_block_id: blockIdSchema.optional(),
+	end_block_id: blockIdSchema.optional()
+};
+const wikiEditOperationSchema = z.discriminatedUnion("command", [
+	z.object({
+		command: z.literal("append"),
+		content: contentSchema.min(1)
+	}).strict(),
+	z.object({
+		command: z.literal("insert_after"),
+		block_id: blockIdSchema,
+		content: contentSchema.min(1)
+	}).strict(),
+	z.object({
+		command: z.literal("replace"),
+		...rangeFields,
+		content: contentSchema.min(1)
+	}).strict(),
+	z.object({
+		command: z.literal("delete"),
+		...rangeFields
+	}).strict(),
+	z.object({
+		command: z.literal("str_replace"),
+		pattern: z.string().min(1).max(1e4),
+		content: contentSchema
+	}).strict(),
+	z.object({
+		command: z.literal("overwrite"),
+		content: contentSchema.min(1)
+	}).strict()
+]);
+const wikiEditArgsSchema = z.object({
+	doc: refSchema,
+	revision_id: z.number().int().min(0),
+	format: formatSchema.optional(),
+	operations: z.array(wikiEditOperationSchema).min(1).max(20)
+}).strict();
+const OUTPUT_SCHEMA = {
+	type: "object",
+	properties: {
+		ok: { type: "boolean" },
+		code: { type: "string" },
+		reason: { type: "string" }
+	},
+	required: ["ok"]
+};
+const LIST_DESCRIPTION = "浏览飞书知识库（只能访问插件配置的知识库范围 wikiRoots）。不传 parent 时列出可访问的根（知识空间或节点）；传 parent（知识库节点链接、node_token，或知识空间链接）时列出它的直接子节点，has_child 为 true 的节点可以继续往下浏览。结果分页，带 page_token 时用它取下一页。返回的 node_token 可直接传给其他知识库工具。";
+const READ_DESCRIPTION = "读取知识库中的一篇飞书文档（docx；电子表格用 feishu_wiki_sheet_read，多维表格用 feishu_wiki_base_read）。doc 传知识库节点链接或 node_token。第一次读取某篇文档会在话题里弹出授权卡，由话题发起人确认，确认后本话题内再次读取同一篇不再询问；等待期间不要重复调用。scope 默认 full（整篇）；大文档先用 outline 看目录，再用 section（start_block_id 为标题块 id）、range（start/end_block_id）或 keyword（关键词，支持 a|b）读取局部；max_depth 在 outline 中表示标题层级上限。format 默认 markdown；xml 为飞书文档 XML（类 HTML 标签：<p> <h1>-<h6> <ul>/<ol><li> <pre><code> <table> <callout> 等），只有 xml 读取会给每个块带上 id 属性（block id），需要按块修改时用 xml 读取。返回的 revision_id 用于 feishu_wiki_edit；editable 表示这篇文档能否被修改（只有本应用创建的文档可以修改）。";
+const CREATE_DESCRIPTION = "在知识库中新建一篇飞书文档（docx，默认）、电子表格（type=sheet）或多维表格（type=bitable）。parent 传父节点（知识库节点链接或 node_token）或知识空间链接（建在空间顶层），必须位于插件配置的知识库范围内；新节点本身也可以作为目录，之后把它的 node_token 作为 parent 在下面继续新建子节点。title 为标题；content 为文档正文（仅 docx，可选，不要在正文里重复标题），电子表格和多维表格建好后是空白的，再用 feishu_wiki_sheet_edit / feishu_wiki_base_edit 写入。format 默认 markdown；xml 为飞书文档 XML（类 HTML 标签：<p> <h1>-<h6> <ul>/<ol><li> <pre><code> <table> <callout> 等），只有 xml 读取会给每个块带上 id 属性（block id），需要按块修改时用 xml 读取。每次新建都会在话题里弹出授权卡，由话题发起人确认后才执行；等待期间不要重复调用。";
+const EDIT_DESCRIPTION = `修改知识库中由本应用创建的飞书文档（docx）。先用 feishu_wiki_read 读取（按块修改时用 format=xml 拿到 block id），把读到的 revision_id 原样传入；文档在此之后被他人改过会被拒绝，需要重新读取。operations 按顺序执行（最多 20 个）：append（文末追加 content）、insert_after（在 block_id 之后插入 content）、replace（用 content 替换 block_id，或同一父块下 start_block_id 到 end_block_id 的连续块）、delete（删除 block_id，或 start_block_id 到 end_block_id）、str_replace（把文本 pattern 替换为 content，content 为空表示删除）、overwrite（清空后用 content 重写整篇，会丢失评论与不支持的内容，尽量少用）。替换和删除会使涉及的旧 block id 失效，同一个块的多处修改请合并成一次 replace。format 默认 markdown；xml 为飞书文档 XML（类 HTML 标签：<p> <h1>-<h6> <ul>/<ol><li> <pre><code> <table> <callout> 等），只有 xml 读取会给每个块带上 id 属性（block id），需要按块修改时用 xml 读取。每次修改都会在话题里弹出授权卡，由话题发起人确认后才执行；等待期间不要重复调用。`;
+const CREATE_TYPE_LABELS = {
+	docx: "飞书文档",
+	sheet: "电子表格",
+	bitable: "多维表格"
+};
+/** The spreadsheet and Base tool families, mounted with the docx tools under the same switches. */
+const FAMILY_SPECS = [...SHEET_TOOL_SPECS, ...BASE_TOOL_SPECS];
+/**
+* The wiki tool runtime: mounts the enabled tools into Agent scopes and runs
+* each call through the gates in the module contract.
+*/
+var WikiToolRuntime = class {
+	deps;
+	mountAttempts = /* @__PURE__ */ new WeakMap();
+	spaceNames = /* @__PURE__ */ new Map();
+	warnedUnavailable = false;
+	warnedMountFailure = false;
+	constructor(deps) {
+		this.deps = deps;
+	}
+	/** Tool names the current configuration mounts. */
+	enabledTools() {
+		const config = this.deps.config();
+		if (config.wikiRoots.length === 0) return [];
+		const family = (access) => FAMILY_SPECS.filter((spec) => spec.access === access).map((spec) => spec.name);
+		return [...config.feishuTools.wikiRead ? [
+			WIKI_LIST_TOOL_NAME,
+			WIKI_READ_TOOL_NAME,
+			...family("read")
+		] : [], ...config.feishuTools.wikiWrite ? [
+			WIKI_CREATE_TOOL_NAME,
+			WIKI_EDIT_TOOL_NAME,
+			...family("write")
+		] : []];
+	}
+	/**
+	* Register the enabled tools inside one Agent scope; same mount policy as
+	* the other channel tools (a missing or slow `tools` service never blocks
+	* session creation).
+	*
+	* @param agentCtx Agent scope to register in.
+	* @param sessionId Session the tools act for.
+	*/
+	async mount(agentCtx, sessionId) {
+		if (this.enabledTools().length === 0) return;
+		const existing = this.mountAttempts.get(agentCtx);
+		if (existing !== void 0) return await existing;
+		const attempt = this.mountAttempt(agentCtx, sessionId);
+		this.mountAttempts.set(agentCtx, attempt);
+		await attempt;
+	}
+	async mountAttempt(agentCtx, sessionId) {
+		let injected = false;
+		if (await waitForAvailability(Promise.resolve(agentCtx.inject(["tools"], (ctx) => {
+			injected = true;
+			this.registerInScope(ctx, sessionId);
+		})), this.warnedUnavailable ? 250 : 2e3) === "failed") {
+			this.warnMountFailure("dsh-channels: mounting the wiki tools failed");
+			return;
+		}
+		if (!injected && !this.warnedUnavailable) {
+			this.warnedUnavailable = true;
+			this.deps.warn("dsh-channels: 知识库工具未挂载：宿主 tools 服务不可用（会话继续）");
+		}
+	}
+	registerInScope(agentCtx, sessionId) {
+		const tools = agentCtx.tools;
+		if (tools === void 0 || typeof tools.register !== "function") {
+			this.warnMountFailure("dsh-channels: 知识库工具未注册：宿主 tools 服务不可用");
+			return;
+		}
+		for (const name of this.enabledTools()) try {
+			tools.register(this.definitionFor(name, sessionId));
+		} catch (error) {
+			this.warnMountFailure(`dsh-channels: registering ${name} failed: ${describeError(error)}`);
+		}
+	}
+	warnMountFailure(message) {
+		if (this.warnedMountFailure) return;
+		this.warnedMountFailure = true;
+		this.deps.warn(message);
+	}
+	definitionFor(name, sessionId) {
+		const base = {
+			output: {
+				schema: OUTPUT_SCHEMA,
+				render: (_args, value) => renderWikiResult(value)
+			},
+			presentResult: (_args, value) => presentWikiResult(value)
+		};
+		const spec = FAMILY_SPECS.find((candidate) => candidate.name === name);
+		if (spec !== void 0) return {
+			...base,
+			name,
+			description: spec.description,
+			parameters: spec.parameters,
+			execute: async (rawArgs, exec) => await spec.execute(this, sessionId, rawArgs, exec.signal),
+			presentCall: (args) => spec.presentCall(args),
+			isConcurrencySafe: () => false
+		};
+		switch (name) {
+			case WIKI_LIST_TOOL_NAME: return {
+				...base,
+				name,
+				description: LIST_DESCRIPTION,
+				parameters: LIST_PARAMETERS,
+				execute: async (rawArgs) => await this.list(sessionId, rawArgs),
+				presentCall: () => "浏览知识库",
+				isConcurrencySafe: () => true
+			};
+			case WIKI_READ_TOOL_NAME: return {
+				...base,
+				name,
+				description: READ_DESCRIPTION,
+				parameters: READ_PARAMETERS,
+				execute: async (rawArgs, exec) => await this.read(sessionId, rawArgs, exec),
+				presentCall: (args) => `读取知识库文档：${display(args.doc)}`,
+				isConcurrencySafe: () => false
+			};
+			case WIKI_CREATE_TOOL_NAME: return {
+				...base,
+				name,
+				description: CREATE_DESCRIPTION,
+				parameters: CREATE_PARAMETERS,
+				execute: async (rawArgs, exec) => await this.create(sessionId, rawArgs, exec),
+				presentCall: (args) => `新建知识库文档：${display(args.title)}`,
+				isConcurrencySafe: () => false
+			};
+			default: return {
+				...base,
+				name,
+				description: EDIT_DESCRIPTION,
+				parameters: EDIT_PARAMETERS,
+				execute: async (rawArgs, exec) => await this.edit(sessionId, rawArgs, exec),
+				presentCall: (args) => `修改知识库文档：${display(args.doc)}`,
+				isConcurrencySafe: () => false
+			};
+		}
+	}
+	gate(sessionId, tool) {
+		if (!this.enabledTools().includes(tool)) return failure("TOOL_DISABLED");
+		const route = this.deps.routeOfSession(sessionId);
+		if (route === void 0) return failure("ROUTE_NOT_FOUND");
+		if (!this.deps.mayUseWiki(route.senderUserId)) return failure("NOT_AUTHORIZED");
+		const channel = this.deps.channel();
+		const api = channel?.wiki;
+		if (channel === void 0 || api === void 0) return failure("CHANNEL_UNAVAILABLE");
+		return {
+			ok: true,
+			context: {
+				route,
+				api,
+				...channel.sheets === void 0 ? {} : { sheets: channel.sheets },
+				...channel.bases === void 0 ? {} : { bases: channel.bases },
+				roots: parseWikiRoots(this.deps.config().wikiRoots),
+				botOpenId: channel.botOpenId()
+			}
+		};
+	}
+	/** Resolve a node/docx reference and check containment. */
+	async containedNode(context, ref) {
+		if (ref.kind === "space") return failure("INVALID_REFERENCE", "这里需要一个文档或节点，而不是整个知识空间");
+		const node = await context.api.getNode(ref.token, ref.kind === "docx" ? "docx" : "wiki");
+		return await containingRoot(context.api, context.roots, node) === void 0 ? failure("OUTSIDE_ROOTS") : node;
+	}
+	async consent(sessionId, context, action, fields, signal) {
+		return consentFailure(await this.deps.consent.request({
+			sessionId,
+			route: context.route,
+			action,
+			...fields,
+			signal
+		}));
+	}
+	async spaceName(api, spaceId) {
+		const cached = this.spaceNames.get(spaceId);
+		if (cached !== void 0) return cached;
+		const name = await api.spaceName(spaceId).catch(() => "");
+		const label = name === "" ? `知识空间 ${spaceId}` : name;
+		this.spaceNames.set(spaceId, label);
+		return label;
+	}
+	/** `空间 / 父节点` for a node (one parent lookup). */
+	async readConsent(sessionId, context, node, signal) {
+		if (this.deps.consent.hasReadGrant(sessionId, node.objToken)) return void 0;
+		const denied = await this.consent(sessionId, context, "read", {
+			title: node.title,
+			url: nodeUrl(context.roots, node),
+			location: await this.locationOf(context.api, node),
+			details: []
+		}, signal);
+		if (denied === void 0) this.deps.consent.grantRead(sessionId, node.objToken);
+		return denied;
+	}
+	grantRead(sessionId, documentId) {
+		this.deps.consent.grantRead(sessionId, documentId);
+	}
+	writeEnabled() {
+		return this.deps.config().feishuTools.wikiWrite;
+	}
+	warn(message, ...args) {
+		this.deps.warn(message, ...args);
+	}
+	async locationOf(api, node) {
+		const space = await this.spaceName(api, node.spaceId);
+		if (node.parentNodeToken === void 0) return space;
+		const parent = await api.getNode(node.parentNodeToken, "wiki").catch(() => void 0);
+		return parent === void 0 || parent.title === "" ? space : `${space} / ${parent.title}`;
+	}
+	nodeView(context, node) {
+		return {
+			title: node.title,
+			node_token: node.nodeToken,
+			obj_type: node.objType,
+			node_type: node.nodeType,
+			has_child: node.hasChild,
+			url: nodeUrl(context.roots, node),
+			owned_by_app: ownedByApp(node, context.botOpenId)
+		};
+	}
+	async list(sessionId, rawArgs) {
+		const args = parseArgs(WIKI_LIST_TOOL_NAME, wikiListArgsSchema, rawArgs);
+		const gate = this.gate(sessionId, WIKI_LIST_TOOL_NAME);
+		if (!gate.ok) return gate;
+		const { context } = gate;
+		return await guarded$1(this.deps, WIKI_LIST_TOOL_NAME, async () => {
+			if (args.parent === void 0) return {
+				ok: true,
+				kind: "roots",
+				items: await Promise.all(context.roots.map((root) => this.rootView(context, root)))
+			};
+			const ref = parseWikiRef(args.parent);
+			if (ref === void 0) return failure("INVALID_REFERENCE");
+			let spaceId;
+			let parentToken;
+			if (ref.kind === "space") {
+				if (!spaceIsRoot(context.roots, ref.spaceId)) return failure("OUTSIDE_ROOTS");
+				spaceId = ref.spaceId;
+			} else {
+				const node = await this.containedNode(context, ref);
+				if ("ok" in node) return node;
+				spaceId = node.spaceId;
+				parentToken = node.nodeToken;
+			}
+			const page = await context.api.listChildren(spaceId, parentToken, args.page_token);
+			return {
+				ok: true,
+				kind: "children",
+				parent: args.parent,
+				items: page.items.map((node) => this.nodeView(context, node)),
+				...page.pageToken === void 0 ? {} : { page_token: page.pageToken }
+			};
+		});
+	}
+	async rootView(context, root) {
+		try {
+			if (root.kind === "space") return {
+				root: "space",
+				title: await this.spaceName(context.api, root.spaceId),
+				link: root.link,
+				space_id: root.spaceId
+			};
+			const node = await context.api.getNode(root.nodeToken, "wiki");
+			return {
+				root: "node",
+				title: node.title,
+				link: root.link,
+				node_token: node.nodeToken,
+				has_child: node.hasChild
+			};
+		} catch (error) {
+			return {
+				...root.kind === "space" ? {
+					root: "space",
+					space_id: root.spaceId
+				} : {
+					root: "node",
+					node_token: root.nodeToken
+				},
+				title: "",
+				link: root.link,
+				error: failureOf(error).reason
+			};
+		}
+	}
+	async read(sessionId, rawArgs, exec) {
+		const args = parseArgs(WIKI_READ_TOOL_NAME, wikiReadArgsSchema, rawArgs);
+		const gate = this.gate(sessionId, WIKI_READ_TOOL_NAME);
+		if (!gate.ok) return gate;
+		const { context } = gate;
+		return await guarded$1(this.deps, WIKI_READ_TOOL_NAME, async () => {
+			const ref = parseWikiRef(args.doc);
+			if (ref === void 0) return failure("INVALID_REFERENCE");
+			const node = await this.containedNode(context, ref);
+			if ("ok" in node) return node;
+			if (node.objType !== "docx") return failure("UNSUPPORTED_TYPE", `${FAILURE_REASONS.UNSUPPORTED_TYPE}（该节点类型：${node.objType}）`);
+			const url = nodeUrl(context.roots, node);
+			const denied = await this.readConsent(sessionId, context, node, exec.signal);
+			if (denied !== void 0) return denied;
+			if (exec.signal.aborted) return failure("ABORTED");
+			const format = args.format ?? "markdown";
+			const document = await context.api.fetchDocument(node.objToken, {
+				format,
+				withBlockIds: true,
+				scope: args.scope ?? "full",
+				...args.start_block_id === void 0 ? {} : { startBlockId: args.start_block_id },
+				...args.end_block_id === void 0 ? {} : { endBlockId: args.end_block_id },
+				...args.keyword === void 0 ? {} : { keyword: args.keyword },
+				...args.max_depth === void 0 ? {} : { maxDepth: args.max_depth }
+			});
+			return {
+				ok: true,
+				title: node.title,
+				node_token: node.nodeToken,
+				url,
+				revision_id: document.revisionId,
+				format,
+				editable: this.deps.config().feishuTools.wikiWrite && ownedByApp(node, context.botOpenId),
+				content: document.content
+			};
+		});
+	}
+	async create(sessionId, rawArgs, exec) {
+		const args = parseArgs(WIKI_CREATE_TOOL_NAME, wikiCreateArgsSchema, rawArgs);
+		const gate = this.gate(sessionId, WIKI_CREATE_TOOL_NAME);
+		if (!gate.ok) return gate;
+		const { context } = gate;
+		return await guarded$1(this.deps, WIKI_CREATE_TOOL_NAME, async () => {
+			const ref = parseWikiRef(args.parent);
+			if (ref === void 0) return failure("INVALID_REFERENCE");
+			let spaceId;
+			let parentToken;
+			let location;
+			let parentUrl;
+			if (ref.kind === "space") {
+				if (!spaceIsRoot(context.roots, ref.spaceId)) return failure("OUTSIDE_ROOTS");
+				spaceId = ref.spaceId;
+				location = `${await this.spaceName(context.api, spaceId)}（顶层）`;
+			} else {
+				const parent = await this.containedNode(context, ref);
+				if ("ok" in parent) return parent;
+				spaceId = parent.spaceId;
+				parentToken = parent.nodeToken;
+				parentUrl = nodeUrl(context.roots, parent);
+				location = `${await this.spaceName(context.api, spaceId)} / ${parent.title === "" ? parent.nodeToken : parent.title}`;
+			}
+			const type = args.type ?? "docx";
+			const format = args.format ?? "markdown";
+			const content = args.content === void 0 || args.content.trim() === "" ? void 0 : args.content;
+			if (type !== "docx" && content !== void 0) return failure("INVALID_OPERATION", "content 只用于飞书文档；新建电子表格或多维表格后，用 feishu_wiki_sheet_edit / feishu_wiki_base_edit 写入数据");
+			const details = type !== "docx" ? [`**类型**：${CREATE_TYPE_LABELS[type]}（空白）`] : content === void 0 ? ["**内容**：空文档"] : [`**内容预览**（${format === "xml" ? "XML" : "Markdown"}，共 ${content.length} 字）\n${previewBlock(content)}`];
+			const denied = await this.consent(sessionId, context, "create", {
+				title: args.title,
+				...parentUrl === void 0 ? {} : { url: parentUrl },
+				location,
+				details
+			}, exec.signal);
+			if (denied !== void 0) return denied;
+			if (exec.signal.aborted) return failure("ABORTED");
+			const node = await context.api.createNode(spaceId, parentToken, args.title, type);
+			const url = nodeUrl(context.roots, node);
+			this.grantRead(sessionId, node.objToken);
+			if (content === void 0) return {
+				ok: true,
+				title: node.title || args.title,
+				node_token: node.nodeToken,
+				url,
+				warnings: []
+			};
+			try {
+				const written = await context.api.updateDocument(node.objToken, {
+					command: "block_insert_after",
+					format,
+					content,
+					blockId: "-1"
+				});
+				if (written.result === "failed") return {
+					...failure("CONTENT_FAILED", `${FAILURE_REASONS.CONTENT_FAILED}：${written.warnings.join("；") || "飞书返回 failed"}；可用 feishu_wiki_edit 重新写入`),
+					node_token: node.nodeToken,
+					url
+				};
+				if (written.result === "partial_success") return {
+					...failure("CONTENT_FAILED", `文档已创建，但内容只部分写入：${written.warnings.join("；") || "飞书返回 partial_success"}；请先用 feishu_wiki_read 核验，再用 feishu_wiki_edit 补齐`),
+					node_token: node.nodeToken,
+					url
+				};
+				return {
+					ok: true,
+					title: node.title || args.title,
+					node_token: node.nodeToken,
+					url,
+					...written.revisionId === void 0 ? {} : { revision_id: written.revisionId },
+					warnings: written.warnings
+				};
+			} catch (error) {
+				const reason = failureOf(error).reason;
+				return {
+					...failure("CONTENT_FAILED", `${FAILURE_REASONS.CONTENT_FAILED}：${reason}；可用 feishu_wiki_edit 重新写入`),
+					node_token: node.nodeToken,
+					url
+				};
+			}
+		});
+	}
+	async edit(sessionId, rawArgs, exec) {
+		const args = parseArgs(WIKI_EDIT_TOOL_NAME, wikiEditArgsSchema, rawArgs);
+		const gate = this.gate(sessionId, WIKI_EDIT_TOOL_NAME);
+		if (!gate.ok) return gate;
+		const { context } = gate;
+		const format = args.format ?? "markdown";
+		const requests = [];
+		for (const [index, operation] of args.operations.entries()) {
+			const request = updateRequestOf(operation, format);
+			if (typeof request === "string") return failure("INVALID_OPERATION", `第 ${index + 1} 个操作（${operation.command}）：${request}`);
+			requests.push(request);
+		}
+		return await guarded$1(this.deps, WIKI_EDIT_TOOL_NAME, async () => {
+			const ref = parseWikiRef(args.doc);
+			if (ref === void 0) return failure("INVALID_REFERENCE");
+			const node = await this.containedNode(context, ref);
+			if ("ok" in node) return node;
+			if (node.objType !== "docx") return failure("UNSUPPORTED_TYPE", `${FAILURE_REASONS.UNSUPPORTED_TYPE}（该节点类型：${node.objType}）`);
+			if (!ownedByApp(node, context.botOpenId)) return failure("NOT_OWNED", `${FAILURE_REASONS.NOT_OWNED}（该文档所有者：${node.owner ?? "未知"}）`);
+			const current = await context.api.documentRevision(node.objToken);
+			if (current !== args.revision_id) return {
+				...failure("REVISION_CONFLICT", `${FAILURE_REASONS.REVISION_CONFLICT}（读取时 ${args.revision_id}，当前 ${current}）`),
+				revision_id: current
+			};
+			const url = nodeUrl(context.roots, node);
+			const denied = await this.consent(sessionId, context, "edit", {
+				title: node.title,
+				url,
+				location: await this.locationOf(context.api, node),
+				details: operationLines(args.operations)
+			}, exec.signal);
+			if (denied !== void 0) return denied;
+			if (await context.api.documentRevision(node.objToken) !== args.revision_id) return failure("REVISION_CONFLICT", `${FAILURE_REASONS.REVISION_CONFLICT}（等待授权期间文档被修改）`);
+			const warnings = [];
+			let revision = args.revision_id;
+			for (const [index, request] of requests.entries()) {
+				if (exec.signal.aborted) return {
+					...failure("ABORTED", `已取消；前 ${index} 个操作已执行`),
+					applied: index
+				};
+				let result;
+				try {
+					result = await context.api.updateDocument(node.objToken, {
+						...request,
+						revisionId: revision
+					});
+				} catch (error) {
+					const reason = failureOf(error).reason;
+					return {
+						...failure("EDIT_FAILED", `第 ${index + 1} 个操作失败：${reason}；前 ${index} 个操作已执行`),
+						applied: index
+					};
+				}
+				warnings.push(...result.warnings);
+				if (result.revisionId !== void 0) revision = result.revisionId;
+				if (result.result === "failed") return {
+					...failure("EDIT_FAILED", `第 ${index + 1} 个操作失败：${result.warnings.join("；") || "飞书返回 failed"}；前 ${index} 个操作已执行`),
+					applied: index
+				};
+				if (result.result === "partial_success") return {
+					...failure("EDIT_PARTIAL", `第 ${index + 1} 个操作只部分生效（${result.warnings.join("；") || "飞书返回 partial_success"}）；前 ${index} 个操作已执行，已停止后续操作；请用 feishu_wiki_read 读取核验后再继续`),
+					applied: index,
+					revision_id: revision
+				};
+			}
+			return {
+				ok: true,
+				title: node.title,
+				node_token: node.nodeToken,
+				url,
+				applied: requests.length,
+				revision_id: revision,
+				warnings
+			};
+		});
+	}
+};
+/** Map one validated operation to a `docs_ai` update, or the reason it is incomplete. */
+function updateRequestOf(operation, format) {
+	switch (operation.command) {
+		case "append": return {
+			command: "block_insert_after",
+			format,
+			content: operation.content,
+			blockId: "-1"
+		};
+		case "insert_after": return {
+			command: "block_insert_after",
+			format,
+			content: operation.content,
+			blockId: operation.block_id
+		};
+		case "replace": {
+			const range = rangeOf(operation);
+			return typeof range === "string" ? range : {
+				command: "block_replace",
+				format,
+				content: operation.content,
+				...range
+			};
+		}
+		case "delete": {
+			const range = rangeOf(operation);
+			return typeof range === "string" ? range : {
+				command: "block_delete",
+				format,
+				...range
+			};
+		}
+		case "str_replace": return {
+			command: "str_replace",
+			format,
+			pattern: operation.pattern,
+			content: operation.content
+		};
+		case "overwrite": return {
+			command: "overwrite",
+			format,
+			content: operation.content
+		};
+	}
+}
+/** `block_id` alone, or `start_block_id` + `end_block_id` together. */
+function rangeOf(operation) {
+	const hasRange = operation.start_block_id !== void 0 || operation.end_block_id !== void 0;
+	if (operation.block_id !== void 0 && !hasRange) return { blockId: operation.block_id };
+	if (operation.block_id === void 0 && operation.start_block_id !== void 0 && operation.end_block_id !== void 0) return {
+		startBlockId: operation.start_block_id,
+		endBlockId: operation.end_block_id
+	};
+	return "需要 block_id，或成对的 start_block_id 与 end_block_id（二者不能同时使用）";
+}
+/** The consent card's operation list. */
+/** Consent-card details: a header, then one entry per operation so every operation stays visible. */
+function operationLines(operations) {
+	const lines = operations.map((operation, index) => {
+		const n = `${index + 1}.`;
+		switch (operation.command) {
+			case "append": return `${n} 在文末追加 ${operation.content.length} 字：${preview(operation.content)}`;
+			case "insert_after": return `${n} 在块 \`${operation.block_id}\` 后插入 ${operation.content.length} 字：${preview(operation.content)}`;
+			case "replace": return `${n} 替换${blockRangeLabel(operation)}为 ${operation.content.length} 字：${preview(operation.content)}`;
+			case "delete": return `${n} 删除${blockRangeLabel(operation)}`;
+			case "str_replace": return `${n} 把文本「${preview(operation.pattern)}」替换为「${preview(operation.content)}」`;
+			case "overwrite": return `${n} ⚠️ 清空整篇并重写为 ${operation.content.length} 字：${preview(operation.content)}`;
+		}
+	});
+	return [`**将执行 ${operations.length} 个操作**`, ...lines];
+}
+function blockRangeLabel(operation) {
+	return operation.block_id !== void 0 ? `块 \`${operation.block_id}\`` : `块 \`${operation.start_block_id ?? "?"}\` 到 \`${operation.end_block_id ?? "?"}\``;
+}
+function isValue(value) {
+	return typeof value === "object" && value !== null && typeof value.ok === "boolean";
+}
+/**
+* Model-visible content of one call: a read returns its document content as
+* plain text after a short header; everything else is JSON.
+*
+* @param value The tool value.
+* @returns One text block.
+*/
+function renderWikiResult(value) {
+	if (!isValue(value)) return [{
+		type: "text",
+		text: "知识库工具结果不可用"
+	}];
+	if (value.ok && "content" in value) {
+		const { content, ...meta } = value;
+		return [{
+			type: "text",
+			text: `${JSON.stringify(meta)}\n\n${content}`
+		}];
+	}
+	return [{
+		type: "text",
+		text: JSON.stringify(value)
+	}];
+}
+/**
+* One-line result presentation.
+*
+* @param value The tool value.
+* @returns Display text.
+*/
+function presentWikiResult(value) {
+	if (!isValue(value)) return "知识库工具结果不可用";
+	if (!value.ok) return `失败（${value.code}）：${value.reason}`;
+	if ("items" in value) return `列出 ${value.items.length} 项`;
+	if ("records" in value && value.records !== void 0) return `已读取《${value.title}》（${value.records.length} 条记录）`;
+	if ("tables" in value) return `已读取《${value.title}》（${value.tables.length} 个数据表）`;
+	if ("content" in value) return `已读取《${value.title}》（${value.content.length} 字）`;
+	if ("applied" in value) return `已修改《${value.title}》（${value.applied} 个操作）`;
+	return `已新建《${value.title}》`;
+}
+const REF_DESCRIPTION = "知识库节点链接 https://<租户>.feishu.cn/wiki/<node_token> 或 node_token";
+const FORMAT_PROPERTY = {
+	type: "string",
+	enum: ["markdown", "xml"],
+	description: "内容格式，默认 markdown；xml 读取时带 block id"
+};
+const BLOCK_ID_PROPERTY = {
+	type: "string",
+	description: "块 id（xml 读取结果中的 id 属性）"
+};
+const LIST_PARAMETERS = {
+	type: "object",
+	properties: {
+		parent: {
+			type: "string",
+			description: `要列出子节点的位置：${REF_DESCRIPTION}，或知识空间链接 https://<租户>.feishu.cn/wiki/space/<space_id>；不传则列出可访问的根`
+		},
+		page_token: {
+			type: "string",
+			description: "上一页返回的 page_token"
+		}
+	},
+	additionalProperties: false
+};
+const READ_PARAMETERS = {
+	type: "object",
+	properties: {
+		doc: {
+			type: "string",
+			description: REF_DESCRIPTION
+		},
+		format: FORMAT_PROPERTY,
+		scope: {
+			type: "string",
+			enum: [
+				"full",
+				"outline",
+				"section",
+				"range",
+				"keyword"
+			],
+			description: "读取范围，默认 full"
+		},
+		start_block_id: {
+			...BLOCK_ID_PROPERTY,
+			description: "section 的标题块 id，或 range 的起点"
+		},
+		end_block_id: {
+			...BLOCK_ID_PROPERTY,
+			description: "range 的终点，-1 表示到文末"
+		},
+		keyword: {
+			type: "string",
+			description: "keyword 模式的关键词，多个用 | 分隔"
+		},
+		max_depth: {
+			type: "integer",
+			description: "outline：标题层级上限；其他：子树深度，-1 不限"
+		}
+	},
+	required: ["doc"],
+	additionalProperties: false
+};
+const CREATE_PARAMETERS = {
+	type: "object",
+	properties: {
+		parent: {
+			type: "string",
+			description: `父位置：${REF_DESCRIPTION}，或知识空间链接（建在空间顶层）`
+		},
+		title: {
+			type: "string",
+			description: "标题"
+		},
+		type: {
+			type: "string",
+			enum: [
+				"docx",
+				"sheet",
+				"bitable"
+			],
+			description: "节点类型：docx 飞书文档（默认）、sheet 电子表格、bitable 多维表格"
+		},
+		content: {
+			type: "string",
+			description: "文档正文（仅 docx，可选）"
+		},
+		format: FORMAT_PROPERTY
+	},
+	required: ["parent", "title"],
+	additionalProperties: false
+};
+const EDIT_PARAMETERS = {
+	type: "object",
+	properties: {
+		doc: {
+			type: "string",
+			description: REF_DESCRIPTION
+		},
+		revision_id: {
+			type: "integer",
+			description: "feishu_wiki_read 返回的 revision_id"
+		},
+		format: FORMAT_PROPERTY,
+		operations: {
+			type: "array",
+			minItems: 1,
+			maxItems: 20,
+			items: {
+				type: "object",
+				properties: {
+					command: {
+						type: "string",
+						enum: [
+							"append",
+							"insert_after",
+							"replace",
+							"delete",
+							"str_replace",
+							"overwrite"
+						]
+					},
+					block_id: BLOCK_ID_PROPERTY,
+					start_block_id: BLOCK_ID_PROPERTY,
+					end_block_id: BLOCK_ID_PROPERTY,
+					pattern: {
+						type: "string",
+						description: "str_replace 要查找的文本"
+					},
+					content: {
+						type: "string",
+						description: "写入的内容"
+					}
+				},
+				required: ["command"],
+				additionalProperties: false
+			}
+		}
+	},
+	required: [
+		"doc",
+		"revision_id",
+		"operations"
+	],
+	additionalProperties: false
+};
+//#endregion
+//#region src/routing/inbound.ts
+/**
+* Inbound routing: dedup, admission, the route decision tree, and the
+* session-establishment / continuation flow.
+*
+* Everything here is channel-plane policy; the command plane (slash commands)
+* and the answerers stay in the service and are reached through narrow ports.
+* Dependency reads go through accessors so the moved logic stays readable.
+*
+* @module dsh-channels/routing/inbound
+*/
+/** Confirmation line for each keyword approval reply. */
+const APPROVAL_TEXT_REPLIES = {
+	allowed: "已允许本次操作。",
+	remembered: "已允许，本话题内同类操作不再询问。",
+	denied: "已拒绝本次操作。"
+};
+/**
+* User-facing text for attachments that could not be archived. Delivered as a
+* plain reply (never a card) so the user learns why the Agent cannot read a
+* file instead of silently getting an answer about older attachments.
+*/
+function buildAttachmentFailureNotice(failures) {
+	return [
+		"⚠️ 附件保存失败，Agent 无法读取：",
+		...failures.map((failure) => `• ${failure.name}：${failure.reason}`),
+		"可尝试压缩/拆分后重发，或把文件直接放到工作区目录。"
 	].join("\n");
 }
 /** Build one durable user message from inbound Feishu text. */
@@ -11892,6 +14862,8 @@ const ATTACHMENT_STORE_MODES = ["native", "archive"];
 const DEFAULT_ATTACHMENT_FETCH_MAX_BYTES = 100 * 1024 * 1024;
 /** Default whole-call timeout of `feishu_attachment_fetch` (120 s). */
 const DEFAULT_ATTACHMENT_FETCH_TIMEOUT_MS = 12e4;
+/** Largest delay Node's `setTimeout` honors (2^31 − 1 ms, about 24.8 days); longer delays fire at once. */
+const MAX_TIMER_DELAY_MS = 2147483647;
 /** Default per-image byte cap for trigger-message prefetch (20 MiB). */
 const DEFAULT_PREFETCH_IMAGE_MAX_BYTES = 20 * 1024 * 1024;
 /** Default total byte budget for one trigger-message image prefetch (50 MiB). */
@@ -12090,10 +15062,12 @@ const configSchema = z.object({
 	*   fetch (1–50). A message with more attachments is refused with a readable
 	*   reason so the model can retry per `file_key`.
 	* - `attachmentFetchMaxBytes`: total download budget of one tool call
-	*   (default 100 MiB). Files stream to the native attachment library, so the
-	*   limit is enforced while streaming rather than buffered first.
-	* - `attachmentFetchTimeoutMs`: whole-call timeout (default 120 s). On expiry
-	*   the in-flight download is cancelled and reported per attachment.
+	*   (default 100 MiB, no upper bound). Files stream to the native attachment
+	*   library, so the limit is enforced while streaming rather than buffered
+	*   first, and multi-GiB files need only disk space.
+	* - `attachmentFetchTimeoutMs`: whole-call timeout (default 120 s, at most
+	*   {@link MAX_TIMER_DELAY_MS}). On expiry the in-flight download is
+	*   cancelled and reported per attachment.
 	* - `topicMessages` (default on): register `feishu_topic_messages` in
 	*   channel sessions so the model can read the quoted message / earlier
 	*   topic messages on demand and authorize their attachments for fetch.
@@ -12113,16 +15087,40 @@ const configSchema = z.object({
 	*   `im:resource` (or `im:resource:upload`) scope; without it a call returns
 	*   a readable failure and the turn continues.
 	*
+	* - `wikiRead` (default off): register `feishu_wiki_list`,
+	*   `feishu_wiki_read`, `feishu_wiki_sheet_read`, and
+	*   `feishu_wiki_base_read` so the model can browse the wiki nodes under
+	*   `wikiRoots` and read docx documents, spreadsheets, and Bases there.
+	*   Needs `wiki:wiki` (or `wiki:wiki:readonly`), `docx:document` (or
+	*   `docx:document:readonly`), `sheets:spreadsheet` (or a read-only
+	*   spreadsheet scope), and `bitable:app` (or a read-only Base scope).
+	* - `wikiWrite` (default off): register `feishu_wiki_create`,
+	*   `feishu_wiki_edit`, `feishu_wiki_sheet_edit`, and
+	*   `feishu_wiki_base_edit` so the model can create docx documents,
+	*   spreadsheets, and Bases under `wikiRoots`, edit documents and
+	*   spreadsheets this app owns, and change records of Bases this app owns
+	*   (other Bases accept new records only). Needs `wiki:wiki`,
+	*   `docx:document`, `sheets:spreadsheet`, and `bitable:app` (or the
+	*   matching write-only scopes).
+	*
+	* The wiki tools act with the app identity and are mounted only while
+	* `wikiRoots` is non-empty. Each call is limited to topics whose owner is
+	* the administrator or on the wiki whitelist (`/auth wiki add`); opening a
+	* document, creating one, and editing one each need the topic owner's
+	* consent on an authorization card (a read consent lasts for the topic).
+	*
 	* The Web panel/metrics ship with `panel_docs_release`.
 	*/
 	feishuTools: z.object({
 		attachmentFetch: z.boolean().default(true),
 		attachmentFetchMaxResources: z.number().int().min(1).max(50).default(10),
-		attachmentFetchMaxBytes: z.number().int().min(1).max(1024 * 1024 * 1024).default(DEFAULT_ATTACHMENT_FETCH_MAX_BYTES),
-		attachmentFetchTimeoutMs: z.number().int().min(1e3).max(6e5).default(DEFAULT_ATTACHMENT_FETCH_TIMEOUT_MS),
+		attachmentFetchMaxBytes: z.number().int().min(1).default(DEFAULT_ATTACHMENT_FETCH_MAX_BYTES),
+		attachmentFetchTimeoutMs: z.number().int().min(1e3).max(MAX_TIMER_DELAY_MS).default(DEFAULT_ATTACHMENT_FETCH_TIMEOUT_MS),
 		topicMessages: z.boolean().default(true),
 		topicMessagesTimeoutMs: z.number().int().min(1e3).max(12e4).default(DEFAULT_TOPIC_MESSAGES_TIMEOUT_MS),
-		sendFile: z.boolean().default(true)
+		sendFile: z.boolean().default(true),
+		wikiRead: z.boolean().default(false),
+		wikiWrite: z.boolean().default(false)
 	}).default({
 		attachmentFetch: true,
 		attachmentFetchMaxResources: 10,
@@ -12130,9 +15128,26 @@ const configSchema = z.object({
 		attachmentFetchTimeoutMs: DEFAULT_ATTACHMENT_FETCH_TIMEOUT_MS,
 		topicMessages: true,
 		topicMessagesTimeoutMs: DEFAULT_TOPIC_MESSAGES_TIMEOUT_MS,
-		sendFile: true
+		sendFile: true,
+		wikiRead: false,
+		wikiWrite: false
 	}),
 	/**
+	* Wiki (知识库) locations the wiki tools may touch: whole spaces
+	* (`https://<tenant>.feishu.cn/wiki/space/<space_id>`) or single nodes with
+	* everything below them (`https://<tenant>.feishu.cn/wiki/<node_token>`).
+	* Browsing, reading, creating, and editing outside these roots fail. Empty
+	* (default) mounts no wiki tool even when `feishuTools.wikiRead`/`wikiWrite`
+	* is on.
+	*/
+	wikiRoots: z.array(z.string().trim().superRefine((link, issue) => {
+		const parsed = parseWikiRootLink(link);
+		if (!parsed.ok) issue.addIssue({
+			code: "custom",
+			message: WIKI_ROOT_LINK_ERRORS[parsed.error]
+		});
+	})).max(20).default([]),
+	/**
 	* Send a one-time onboarding card on the first private message of a chat
 	* (facts + command cheat sheet). Persisted per chat; never repeats.
 	*/
@@ -12285,6 +15300,9 @@ const EDITABLE_KEYS = [
 	"feishuTools.topicMessages",
 	"feishuTools.topicMessagesTimeoutMs",
 	"feishuTools.sendFile",
+	"feishuTools.wikiRead",
+	"feishuTools.wikiWrite",
+	"wikiRoots",
 	"promptContextTimeoutMs",
 	"provider",
 	"model",
@@ -12395,6 +15413,12 @@ const PANEL_COPY = {
 	discardTab: "放弃本页更改",
 	saveHintClean: "没有未保存的更改。",
 	dirtyCount: "未保存项",
+	listAdd: "添加",
+	listRemove: "移除",
+	listEntry: "第 {n} 项",
+	listTooMany: "最多 {max} 项（空输入框不计）",
+	listNotArray: "必须是字符串列表",
+	listEntryNotString: "必须是字符串",
 	browseDirectory: "选择目录…",
 	browsingDirectory: "选择中…",
 	directoryPicked: "已选择目录",
@@ -12750,6 +15774,7 @@ async function openFeishuDomain(ctx) {
 	const accessGroupsRaw = domain.table("access_groups");
 	const accessUsersRaw = domain.table("access_users");
 	const accessRequestsRaw = domain.table("access_requests");
+	const accessWikiUsersRaw = domain.table("access_wiki_users");
 	return {
 		routes: {
 			get: (key) => table.get(key),
@@ -12793,11 +15818,19 @@ async function openFeishuDomain(ctx) {
 			delete: (key) => accessRequestsRaw.delete(key),
 			entries: () => accessRequestsRaw.entries()
 		},
+		accessWikiUsers: {
+			get: (key) => accessWikiUsersRaw.get(key),
+			put: (key, value) => accessWikiUsersRaw.put(key, value),
+			delete: (key) => accessWikiUsersRaw.delete(key),
+			entries: () => accessWikiUsersRaw.entries()
+		},
 		getGlobal: () => domain.global.get() ?? {},
 		setGlobal: (value) => domain.global.set(value),
 		close: () => domain.close()
 	};
 }
+/** `/auth wiki` usage line (input-error card). */
+const AUTH_WIKI_USAGE = "用法：/auth wiki add <@用户|user_id> 或 /auth wiki remove <@用户|user_id>。知识库白名单里的用户（以及管理员）发起的话题可以使用知识库工具。";
 /**
 * Resolve one credential reference through the host credentials seam.
 *
@@ -12866,6 +15899,8 @@ var FeishuService = class {
 	attachmentFetchTools;
 	topicMessagesTools;
 	sendFileTools;
+	wikiConsent;
+	wikiTools;
 	/** FIFO admission for ordinary turns and commands targeting one route. */
 	routeOperations = new RouteOperationQueue();
 	/** Active Host command executions, aborted before shutdown tears peers down. */
@@ -12956,6 +15991,7 @@ var FeishuService = class {
 				if (this.effectiveAttachmentBackend() === "native") mounts.push(this.attachmentFetchTools.mount(agentCtx, sessionId));
 				mounts.push(this.topicMessagesTools.mount(agentCtx, sessionId));
 				mounts.push(this.sendFileTools.mount(agentCtx, sessionId));
+				mounts.push(this.wikiTools.mount(agentCtx, sessionId));
 				return Promise.all(mounts).then(() => void 0);
 			},
 			warn: (message, ...args) => this.ctx.logger?.warn?.(message, ...args)
@@ -13010,6 +16046,21 @@ var FeishuService = class {
 			fetchAvailable: () => this.effectiveAttachmentBackend() === "native",
 			warn: (message, ...args) => this.ctx.logger?.warn?.(message, ...args)
 		});
+		this.wikiConsent = new WikiConsent({
+			channel: () => this.started ? this.channel : void 0,
+			timeoutMs: () => this.config.approvalTimeoutMs,
+			onError: (sessionId, error) => {
+				this.ctx.logger?.warn?.("dsh-channels wiki consent error (session %s): %s", sessionId, String(error));
+			}
+		});
+		this.wikiTools = new WikiToolRuntime({
+			config: () => this.config,
+			channel: () => this.started ? this.channel : void 0,
+			routeOfSession: (sessionId) => this.approvalRouteFor(sessionId),
+			mayUseWiki: (userId) => this.accessController.isAdmin(userId) || this.accessStore.hasWikiUser(userId),
+			consent: this.wikiConsent,
+			warn: (message, ...args) => this.ctx.logger?.warn?.(message, ...args)
+		});
 		this.sendFileTools = new SendFileToolRuntime({
 			config: () => this.config,
 			channel: () => this.started ? this.channel : void 0,
@@ -13696,7 +16747,9 @@ var FeishuService = class {
 				requireMention: this.config.requireMention,
 				ownerLookupFailed: this.config.accessMode === "guarded" && this.configuredAdminUserId() === void 0 && this.appOwner !== void 0 && "error" in this.appOwner && this.appOwner.apiRejected,
 				slashCommandPanel: this.config.slashCommandPanel,
-				sendFile: this.config.feishuTools.sendFile
+				sendFile: this.config.feishuTools.sendFile,
+				wikiRead: this.config.feishuTools.wikiRead && this.config.wikiRoots.length > 0,
+				wikiWrite: this.config.feishuTools.wikiWrite && this.config.wikiRoots.length > 0
 			});
 			state = result.consoleUrl === void 0 ? {
 				state: "ok",
@@ -13890,6 +16943,7 @@ var FeishuService = class {
 			accessRequests.onCardAction(event);
 			answerer.onCardAction(event);
 			questions.onCardAction(event);
+			this.wikiConsent.onCardAction(event);
 			this.onStopAction(event);
 			this.onPickAction(event).catch((error) => {
 				this.ctx.logger?.warn?.("dsh-channels: picker card action failed: %s", String(error));
@@ -13968,6 +17022,7 @@ var FeishuService = class {
 		this.approvalAnswerer?.dispose();
 		this.approvalAnswerer = void 0;
 		this.questionAnswerer?.dispose();
+		this.wikiConsent.dispose();
 		this.questionAnswerer = void 0;
 		if (this.gcTimer !== void 0) {
 			clearInterval(this.gcTimer);
@@ -14097,8 +17152,8 @@ var FeishuService = class {
 					`**准入模式**：\`${this.config.accessMode}\``,
 					`**管理员**：${this.adminStatusLine()}`,
 					...msg.chatType === "group" ? [`**本群**：${this.accessStore.hasGroup(msg.chatId) ? "已授权" : "未授权"}（\`${msg.chatId}\`）`] : [],
-					`**白名单**：群 ${groups.length} 个 · 用户 ${users.length} 个 · 待处理申请 ${pending.length} 个`,
-					"群授权：`/auth allow` 或 `/auth revoke`（在目标群内发）；用户授权：`/auth user add @用户` 或 `/auth user add <user_id>`。"
+					`**白名单**：群 ${groups.length} 个 · 用户 ${users.length} 个 · 知识库 ${this.accessStore.wikiUserRecords().length} 个 · 待处理申请 ${pending.length} 个`,
+					"群授权：`/auth allow` 或 `/auth revoke`（在目标群内发）；用户授权：`/auth user add @用户` 或 `/auth user add <user_id>`；知识库授权：`/auth wiki add @用户`。"
 				]), direct);
 				return;
 			}
@@ -14195,17 +17250,68 @@ var FeishuService = class {
 				}, direct);
 				return;
 			}
+			if (action === "wiki") {
+				const sub = words[1];
+				const target = sub === "add" || sub === "remove" ? resolveAuthUserTarget(words.slice(2).join(" "), msg.mentions, this.channel?.botOpenId()) : {
+					ok: false,
+					reason: "usage"
+				};
+				if (!target.ok) {
+					await this.delivery.commandCard(msg, {
+						kind: "input-error",
+						command: "auth",
+						text: target.reason === "usage" ? AUTH_WIKI_USAGE : AUTH_USER_TARGET_ERRORS[target.reason]
+					}, direct);
+					return;
+				}
+				const { userId } = target;
+				const label = target.name === void 0 ? `\`${userId}\`` : `${target.name}（\`${userId}\`）`;
+				if (sub === "add") {
+					if (this.accessStore.hasWikiUser(userId)) {
+						await this.delivery.commandCard(msg, {
+							kind: "success",
+							command: "auth",
+							text: `该用户已在知识库白名单中：${label}。`
+						}, direct);
+						return;
+					}
+					await this.accessStore.addWikiUser({
+						userId,
+						...target.name === void 0 ? {} : { name: target.name },
+						source: "command",
+						addedBy: msg.senderId,
+						addedAt: now
+					});
+					await this.delivery.commandCard(msg, {
+						kind: "success",
+						command: "auth",
+						text: `✅ 已把 ${label} 加入知识库白名单：他发起的话题里可以使用知识库工具（每次读取、新建、修改仍需他在授权卡上确认）。`
+					}, direct);
+					return;
+				}
+				const removed = await this.accessStore.removeWikiUser(userId);
+				await this.delivery.commandCard(msg, {
+					kind: removed ? "success" : "unavailable",
+					command: "auth",
+					text: removed ? `已把 ${label} 移出知识库白名单，立即生效。` : `用户 ${label} 不在知识库白名单中。`
+				}, direct);
+				return;
+			}
 			if (action === "list") {
 				const groups = this.accessStore.groupRecords();
 				const users = this.accessStore.userRecords();
 				const pending = this.accessStore.pendingRequests();
 				const groupLines = groups.length === 0 ? ["（暂无）"] : groups.slice(0, 30).map((group) => `- ${group.name ?? group.chatId} \`${group.chatId}\``);
 				const userLines = users.length === 0 ? ["（暂无）"] : users.slice(0, 30).map((user) => `- ${user.name ?? user.userId} \`${user.userId}\``);
+				const wikiUsers = this.accessStore.wikiUserRecords();
+				const wikiLines = wikiUsers.length === 0 ? ["（暂无；管理员始终可用）"] : wikiUsers.slice(0, 30).map((user) => `- ${user.name ?? user.userId} \`${user.userId}\``);
 				await this.delivery.standaloneReply(msg, standaloneInfoCard("**🔐 访问授权清单**", [
 					`**已授权群（${groups.length}）**`,
 					...groupLines,
 					`**已授权用户（${users.length}）**`,
 					...userLines,
+					`**知识库白名单（${wikiUsers.length}）**`,
+					...wikiLines,
 					`**待处理申请**：${pending.length} 个（可在 Web 设置面板处理）`
 				]), direct);
 				return;
@@ -14213,7 +17319,7 @@ var FeishuService = class {
 			await this.delivery.commandCard(msg, {
 				kind: "input-error",
 				command: "auth",
-				text: "用法：/auth [status|allow|revoke|list|user add <@用户|user_id>|user remove <@用户|user_id>]"
+				text: "用法：/auth [status|allow|revoke|list|user add <@用户|user_id>|user remove <@用户|user_id>|wiki add <@用户|user_id>|wiki remove <@用户|user_id>]"
 			}, direct);
 		} catch (error) {
 			this.ctx.logger?.warn?.("dsh-channels: /auth failed: %s", String(error));
@@ -14359,7 +17465,8 @@ var FeishuService = class {
 	/**
 	* Picker-card click: run the chosen `/<command> <arg>` exactly as if the
 	* operator had typed it under the picker card, so access admission, route
-	* ownership and validation are the typed command's. Stale pickers (the
+	* ownership and validation are the typed command's. The result replaces
+	* the picker card in place instead of arriving as a new card. Stale pickers (the
 	* topic was rebound, or the card was forwarded elsewhere) and non-owner
 	* clicks are ignored.
 	*/
@@ -14371,7 +17478,7 @@ var FeishuService = class {
 		const userId = event.operator.userId;
 		if (route === void 0 || route.chatId !== event.chatId || userId !== route.senderUserId) return;
 		const line = `/${action.command} ${action.arg}`;
-		await this.handleSlashMessage({
+		await this.delivery.replacingCard(event.messageId, () => this.handleSlashMessage({
 			messageId: event.messageId,
 			chatId: route.chatId,
 			chatType: route.chatType,
@@ -14384,7 +17491,7 @@ var FeishuService = class {
 			mentionedBot: true,
 			...route.kind === "thread" ? { threadId: route.key } : {},
 			createTime: Date.now()
-		}, line);
+		}, line));
 	}
 	/**
 	* `/permissions`: show this Session's effective sandbox+approval preset and
@@ -14565,7 +17672,7 @@ var FeishuService = class {
 			return;
 		}
 		if (spec.name === "health" && result.kind === "success") {
-			await this.delivery.standaloneReply(msg, buildHealthCard(this.healthSnapshot()));
+			await this.delivery.standaloneReply(msg, buildHealthCard(this.healthSnapshot()), { createThread: false });
 			return;
 		}
 		if (spec.name === "status" && result.kind === "success") {
@@ -15488,8 +18595,81 @@ const BOOLEAN_KEYS = /* @__PURE__ */ new Set([
 	"prefetchImages",
 	"feishuTools.attachmentFetch",
 	"feishuTools.topicMessages",
-	"feishuTools.sendFile"
+	"feishuTools.sendFile",
+	"feishuTools.wikiRead",
+	"feishuTools.wikiWrite"
 ]);
+/** Editable keys rendered as `string-list` (one input per entry). */
+const STRING_LIST_FIELDS = { wikiRoots: {
+	maxItems: 20,
+	itemFormat: "wiki-root-link"
+} };
+/** Entry checks per item format: the readable reason, or `undefined` when valid. */
+const ITEM_FORMAT_CHECKS = { "wiki-root-link": (entry) => {
+	const parsed = parseWikiRootLink(entry);
+	return parsed.ok ? void 0 : WIKI_ROOT_LINK_ERRORS[parsed.error];
+} };
+/** `第 N 项「entry」：reason`, shared wording with the Client check. */
+function listEntryMessage(index, entry, reason) {
+	const position = PANEL_COPY.listEntry.replace("{n}", String(index + 1));
+	return entry === void 0 ? `${position}${reason}` : `${position}「${entry}」：${reason}`;
+}
+/**
+* Normalize one submitted `string-list` value: entries are trimmed, empty
+* entries dropped, the count bounded by `maxItems`, and every remaining entry
+* checked against `itemFormat`. Issue indexes refer to the submitted array
+* (empty inputs included), so the panel can mark the exact input.
+*
+* @param key - The editable key the issues are reported under.
+* @param raw - The untrusted submitted value.
+* @param spec - The field's bounds and entry format.
+* @returns The cleaned entries, or every per-entry / whole-field issue.
+*/
+function normalizeStringList(key, raw, spec) {
+	if (!Array.isArray(raw)) return {
+		ok: false,
+		issues: [{
+			key,
+			message: PANEL_COPY.listNotArray
+		}]
+	};
+	const issues = [];
+	const value = [];
+	const check = spec.itemFormat === void 0 ? void 0 : ITEM_FORMAT_CHECKS[spec.itemFormat];
+	raw.forEach((item, index) => {
+		if (typeof item !== "string") {
+			issues.push({
+				key,
+				index,
+				message: listEntryMessage(index, void 0, PANEL_COPY.listEntryNotString)
+			});
+			return;
+		}
+		const entry = item.trim();
+		if (entry === "") return;
+		const reason = check?.(entry);
+		if (reason !== void 0) {
+			issues.push({
+				key,
+				index,
+				message: listEntryMessage(index, entry, reason)
+			});
+			return;
+		}
+		value.push(entry);
+	});
+	if (raw.filter((item) => typeof item !== "string" || item.trim() !== "").length > spec.maxItems) issues.push({
+		key,
+		message: PANEL_COPY.listTooMany.replace("{max}", String(spec.maxItems))
+	});
+	return issues.length > 0 ? {
+		ok: false,
+		issues
+	} : {
+		ok: true,
+		value
+	};
+}
 const SELECT_OPTIONS = {
 	attachmentStore: [{
 		value: "native",
@@ -15646,16 +18826,15 @@ const FIELD_META = {
 	},
 	"feishuTools.attachmentFetchMaxBytes": {
 		label: "单次取回字节预算（字节）",
-		help: "一次工具调用的总下载字节预算（默认 104857600 = 100 MiB）；文件流式写入原生库，不整文件缓冲。",
+		help: "一次工具调用的总下载字节预算（默认 104857600 = 100 MiB，不设上限）；文件流式写入原生库，不整文件缓冲，几 GiB 的文件只占磁盘。",
 		min: 1,
-		max: 1024 * 1024 * 1024,
 		step: 1
 	},
 	"feishuTools.attachmentFetchTimeoutMs": {
 		label: "单次取回超时（ms）",
-		help: "一次 feishu_attachment_fetch 的整段超时（默认 120000 ms，1000–600000）；到期取消下载并逐项报告可读原因。",
+		help: "一次 feishu_attachment_fetch 的整段超时（默认 120000 ms，最小 1000，最大 2147483647 ≈ 24.8 天）；到期取消下载并逐项报告可读原因。大文件请按带宽同步调大。",
 		min: 1e3,
-		max: 6e5,
+		max: MAX_TIMER_DELAY_MS,
 		step: 1e3
 	},
 	"feishuTools.topicMessages": {
@@ -15673,6 +18852,20 @@ const FIELD_META = {
 		label: "启用 feishu_send_file 工具",
 		help: "让模型把当前话题工作目录里生成的图片/文件发回当前会话（图片 ≤10 MB，文件 ≤30 MB）。需开通 im:resource 权限。对新会话生效。"
 	},
+	"feishuTools.wikiRead": {
+		label: "启用知识库读取工具",
+		help: "让模型浏览「知识库范围」内的知识库节点，并读取 docx 文档、电子表格和多维表格（feishu_wiki_list / feishu_wiki_read / feishu_wiki_sheet_read / feishu_wiki_base_read），以应用身份访问。需开通 wiki:wiki、docx:document、sheets:spreadsheet、bitable:app 权限（或对应的只读权限）。只有话题所有者是管理员或在知识库白名单（/auth wiki add @成员）中才能使用；打开文档前会在授权卡上征得话题所有者同意，每个话题一次。知识库范围为空时不挂载。对新会话生效。"
+	},
+	"feishuTools.wikiWrite": {
+		label: "启用知识库写入工具",
+		help: "让模型在「知识库范围」内新建 docx 文档、电子表格和多维表格，编辑本应用拥有的文档和电子表格，增改删本应用拥有的多维表格记录、向其他多维表格新增记录（feishu_wiki_create / feishu_wiki_edit / feishu_wiki_sheet_edit / feishu_wiki_base_edit），以应用身份访问；每次新建或编辑都需话题所有者在审批卡上同意。需开通 wiki:wiki、docx:document、sheets:spreadsheet、bitable:app 权限；使用条件同读取工具（管理员或知识库白名单）。知识库范围为空时不挂载。对新会话生效。"
+	},
+	wikiRoots: {
+		label: "知识库范围（wikiRoots）",
+		help: "知识库工具只能访问这些位置，每个输入框填一个链接：整个知识空间 https://<租户>.feishu.cn/wiki/space/<space_id>，或节点 https://<租户>.feishu.cn/wiki/<node_token>（该节点及其下所有节点）；最多 20 项，空输入框保存时忽略。留空 = 不挂载任何知识库工具（即使上面的开关已开启）。对新会话生效。",
+		placeholder: "https://<租户>.feishu.cn/wiki/space/<space_id>",
+		wide: true
+	},
 	provider: {
 		label: "模型服务商",
 		help: "留空 = 使用部署默认；例如 deepseek-official。",
@@ -15738,6 +18931,9 @@ const GROUP_OF = {
 	"feishuTools.topicMessages": "tools",
 	"feishuTools.topicMessagesTimeoutMs": "tools",
 	"feishuTools.sendFile": "tools",
+	"feishuTools.wikiRead": "tools",
+	"feishuTools.wikiWrite": "tools",
+	wikiRoots: "tools",
 	provider: "model",
 	model: "model",
 	reasoningEffort: "model",
@@ -15750,10 +18946,11 @@ const GROUP_OF = {
 const FIELD_DESCRIPTORS = EDITABLE_KEYS.map((key) => {
 	const meta = FIELD_META[key];
 	const options = SELECT_OPTIONS[key];
+	const list = STRING_LIST_FIELDS[key];
 	return {
 		key,
 		label: meta.label,
-		kind: BOOLEAN_KEYS.has(key) ? "boolean" : options !== void 0 ? "select" : meta.min !== void 0 ? "number" : "text",
+		kind: list !== void 0 ? "string-list" : BOOLEAN_KEYS.has(key) ? "boolean" : options !== void 0 ? "select" : meta.min !== void 0 ? "number" : "text",
 		group: GROUP_OF[key],
 		help: meta.help,
 		...options === void 0 ? {} : { options },
@@ -15761,6 +18958,8 @@ const FIELD_DESCRIPTORS = EDITABLE_KEYS.map((key) => {
 		...meta.max === void 0 ? {} : { max: meta.max },
 		...meta.step === void 0 ? {} : { step: meta.step },
 		...meta.placeholder === void 0 ? {} : { placeholder: meta.placeholder },
+		...list === void 0 ? {} : { maxItems: list.maxItems },
+		...list?.itemFormat === void 0 ? {} : { itemFormat: list.itemFormat },
 		...meta.wide === void 0 ? {} : { wide: meta.wide },
 		restartRequired: RESTART_SET.has(key)
 	};
@@ -16166,6 +19365,7 @@ var SettingsSurface = class {
 		};
 		const raw = {};
 		const clearedKeys = [];
+		const listIssues = [];
 		for (const key of EDITABLE_KEYS) {
 			const value = values[key];
 			if (value === void 0) continue;
@@ -16173,16 +19373,23 @@ var SettingsSurface = class {
 				clearedKeys.push(key);
 				continue;
 			}
+			const list = STRING_LIST_FIELDS[key];
+			if (list !== void 0) {
+				const normalized = normalizeStringList(key, value, list);
+				if (normalized.ok) setOverlayValue(raw, key, normalized.value);
+				else listIssues.push(...normalized.issues);
+				continue;
+			}
 			setOverlayValue(raw, key, value);
 		}
 		const parsed = parseOverlay(raw);
-		if (!parsed.ok) return {
+		if (!parsed.ok || listIssues.length > 0) return {
 			ok: false,
 			error: "配置校验失败",
-			issues: parsed.issues.map((issue) => ({
+			issues: [...listIssues, ...parsed.ok ? [] : parsed.issues.map((issue) => ({
 				key: issue.path,
 				message: issue.message
-			}))
+			}))]
 		};
 		if (parsed.patch.baseDir !== void 0) {
 			const problem = await prepareWorkspaceBaseDir(parsed.patch.baseDir);