@modesto_ma/dsh-channels 0.5.0-beta.3 → 0.5.0-beta.5

package/lib/client.js

@@ -11,7 +11,7 @@ window.__ModuleLoader__.load({
 		* Web 设置面板的线上契约：Host 半侧的路由/面板数据与 Browser 半侧的渲染共用。
 		*
 		* 本模块**没有运行时依赖**：Host 与 Client bundle 都直接内联它。因此这里只放
-		* 常量、字段清单与可序列化的 wire 类型，不 import zod / node / DSH 内部包。
+		* 常量、字段清单、可序列化的 wire 类型与无依赖的纯文案函数，不 import zod / node / DSH 内部包。
 		*
 		* @module dsh-channels/settings/contract
 		*/
@@ -32,6 +32,8 @@ window.__ModuleLoader__.load({
 		const ACCESS_GROUPS_ROUTE = "/dsh-channels/access/groups";
 		/** 用户白名单增删（POST/DELETE，body `{ userId, name? }` / `{ userId }`）。 */
 		const ACCESS_USERS_ROUTE = "/dsh-channels/access/users";
+		/** 知识库白名单增删（POST/DELETE，body `{ userId, name? }` / `{ userId }`）。 */
+		const ACCESS_WIKI_USERS_ROUTE = "/dsh-channels/access/wiki-users";
 		/** 结算一条待处理授权申请（POST，body `{ token, decision }`）。 */
 		const ACCESS_REQUESTS_ROUTE = "/dsh-channels/access/requests";
 		/**
@@ -54,108 +56,114 @@ window.__ModuleLoader__.load({
 			},
 			{
 				id: "sessions",
-				label: "会话与行为"
+				label: "会话"
 			},
 			{
 				id: "model",
 				label: "模型"
 			},
 			{
-				id: "workspace",
-				label: "工作区"
+				id: "attachments",
+				label: "附件与工具"
 			},
 			{
 				id: "access",
 				label: "访问授权"
 			},
+			{
+				id: "wiki",
+				label: "知识库"
+			},
 			{
 				id: "advanced",
 				label: "高级"
 			}
 		];
-		/** Which editable field groups each tab renders (the tabs own one or two). */
+		/** Which editable field groups each tab renders, in section order. */
 		const TAB_FIELD_GROUPS = {
 			connection: [],
 			sessions: [
-				"behavior",
-				"content",
-				"tools"
+				"trigger",
+				"workspace",
+				"cards",
+				"features"
 			],
 			model: ["model"],
-			workspace: ["workspace"],
+			attachments: [
+				"attachments",
+				"tools",
+				"limits"
+			],
 			access: ["access"],
-			advanced: ["streaming"]
+			wiki: ["wiki"],
+			advanced: ["analyze", "logging"]
 		};
 		/** Section heading for one field group inside its tab. */
 		const FIELD_GROUP_LABELS = {
-			workspace: "工作区与文件",
-			behavior: "行为",
-			content: "内容与附件",
-			tools: "模型工具",
-			model: "模型与推理",
-			streaming: "流式卡片与日志",
-			access: "准入与授权"
+			trigger: "触发",
+			workspace: "工作区",
+			cards: "话题与卡片",
+			features: "飞书侧功能",
+			model: "模型",
+			attachments: "入站附件",
+			tools: "模型可用的飞书工具",
+			limits: "限额与超时",
+			access: "准入",
+			wiki: "知识库工具",
+			analyze: "日志分析接口",
+			logging: "日志"
 		};
+		/** Groups rendered collapsed behind one summary row (rarely changed values). */
+		const COLLAPSED_FIELD_GROUPS = ["limits"];
 		/** Display labels for the panel header/cards (kept on the wire so the client owns no copy). */
 		const PANEL_COPY = {
 			title: "飞书渠道",
-			description: "飞书长连接、应用凭据与渠道配置。凭据只写入 DSH 凭据库且不回显；标注「需重连」的项在连接建立时读取。",
-			statusCard: "连接状态",
 			phaseUnconfigured: "待配置",
 			phaseIdle: "未连接",
 			phaseConnecting: "连接中",
 			phaseConnected: "已连接",
 			phaseError: "连接失败",
-			configuredBadge: "凭据已配置",
-			unconfiguredBadge: "凭据未配置",
-			statusSummaryConnected: "飞书长连接已建立，机器人可以收发消息。",
-			statusSummaryUnconfigured: "尚未配置飞书应用凭据：插件已加载，但不会连接飞书。填写凭据并保存后会自动连接。",
-			statusSummaryIdle: "飞书应用凭据已就绪，但当前没有建立长连接。",
-			statusSummaryConnecting: "正在连接飞书长连接…",
-			statusSummaryError: "最近一次连接飞书失败，请检查凭据与网络后重试。",
+			statusSummaryConnected: "机器人在线，可以收发消息",
+			statusSummaryUnconfigured: "还没有填写飞书应用凭据，插件不会连接飞书",
+			statusSummaryIdle: "凭据已就绪，还没有建立连接",
+			statusSummaryConnecting: "正在连接飞书…",
+			statusSummaryError: "连接飞书失败，请检查凭据与网络后重试",
+			uptimePrefix: "运行",
 			lastError: "最近一次连接失败",
-			scopeCheckTitle: "权限自检",
-			scopeCheckOk: "已开通插件需要的全部飞书权限。",
-			scopeCheckMissing: "以下飞书权限未开通，开通后需在开发者后台发布新版本：",
-			scopeCheckOpenAll: "在开发者后台开通全部缺失权限",
+			checksTitle: "自检",
+			scopeCheckOk: "插件需要的飞书权限都已开通",
+			scopeCheckMissing: "{n} 项权限未开通",
+			scopeCheckMissingRequired: "{n} 项必需权限未开通，相关功能无法使用",
+			scopeCheckMissingOptional: "不影响收发消息，只有相关功能不可用。开通后需在开发者后台发布新版本。",
+			scopeCheckPublish: "开通后需在开发者后台发布新版本。",
+			scopeCheckOpenAll: "全部开通",
 			scopeCheckOpenOne: "去开通",
-			scopeCheckOptional: "可选",
 			scopeCheckRequired: "必需",
-			scopeCheckError: "无法读取应用的权限授予状态：",
+			scopeCheckError: "无法读取权限开通情况",
 			slashCommandSyncTitle: "斜杠指令面板",
-			slashCommandSyncOk: "插件命令已同步到飞书原生斜杠指令面板，在聊天框输入 / 即可选择（飞书客户端约 5 分钟后刷新）。",
-			slashCommandSyncTotal: "命令数",
-			slashCommandSyncCreated: "本次新增",
-			slashCommandSyncUpdated: "本次更新",
-			slashCommandSyncRemoved: "本次删除",
-			slashCommandSyncError: "同步飞书原生斜杠指令面板失败（不影响直接输入命令）：",
+			slashCommandSyncOk: "已同步 {total} 条命令，飞书客户端约 5 分钟后刷新",
+			slashCommandSyncError: "同步失败，直接输入命令不受影响",
 			missingConfig: "缺少配置",
-			statusHintUnconfigured: "配置完成后插件会自动连接；也可以稍后在本页手动连接。",
-			connectionInfo: "连接信息",
-			connectionStateLabel: "飞书长连接",
-			botOpenId: "Bot open_id",
-			uptime: "运行时长",
 			routeCount: "话题路由",
 			liveAgentCount: "活动会话",
 			inflightTurnCount: "在途回复",
+			botOpenId: "Bot open_id",
 			healthReasons: "健康判定",
 			unknownValue: "—",
 			connect: "连接飞书",
 			connecting: "连接中…",
 			onboardingTitle: "开始使用飞书渠道",
-			onboardingIntro: "只需三步：在飞书开放平台创建自建应用，把 App ID / App Secret 填入本页，保存后自动连接。",
 			onboardingStep1Title: "创建飞书自建应用",
-			onboardingStep1Text: "在飞书开放平台创建企业自建应用，开启机器人能力；事件订阅选择「长连接」，订阅 im.message.receive_v1（接收消息）。",
+			onboardingStep1Text: "在 open.feishu.cn/app 创建企业自建应用，开启机器人能力；事件订阅选「长连接」，订阅 im.message.receive_v1。",
 			onboardingStep2Title: "填写应用凭据",
-			onboardingStep2Text: "把应用的 App ID（cli_ 开头）与 App Secret 填入下方「飞书应用凭据」，值会写入 DSH 凭据库。",
-			onboardingStep3Title: "保存并等待连接",
-			onboardingStep3Text: "两项凭据都保存后插件会自动连接；状态变为「已连接」即可在飞书里私聊机器人。",
-			onboardingDocsHint: "开放平台地址：open.feishu.cn/app；应用需要开通 im:message、im:message:send_as_bot 等消息权限。",
-			credentialsCard: "飞书应用凭据",
-			credentialsCardHelp: "凭据值经 DSH 凭据服务写入本机凭据库；面板只显示「已配置 / 未配置」，永不回显已存值。两项都配置后才会连接飞书。",
-			appIdLabel: "飞书 App ID",
-			appSecretLabel: "飞书 App Secret",
-			credentialsRef: "凭据引用",
+			onboardingStep2Text: "把 App ID（cli_ 开头）和 App Secret 填到下方「应用凭据」。",
+			onboardingStep3Title: "保存后自动连接",
+			onboardingStep3Text: "两项都保存后插件会自动连接，状态变成「已连接」就能在飞书里私聊机器人。",
+			credentialsTitle: "应用凭据",
+			credentialsHint: "值只存在本机凭据库，面板不回显。",
+			appIdLabel: "App ID",
+			appSecretLabel: "App Secret",
+			credentialStore: "凭据库",
 			saveCredentials: "保存凭据",
 			savingCredentials: "保存中…",
 			credentialSaved: "凭据已保存",
@@ -165,26 +173,29 @@ window.__ModuleLoader__.load({
 			credentialAutoConnectFailed: "凭据已保存，但自动连接失败",
 			credentialRemoved: "已移除存储的凭据",
 			credentialRemovedPending: "已移除存储的凭据，重启飞书连接后生效",
-			removeCredential: "移除已存值",
+			replaceCredential: "更换",
+			setCredential: "设置",
+			cancel: "取消",
+			removeCredential: "移除",
 			removingCredential: "移除中…",
 			credentialConfigured: "已配置",
 			credentialMissing: "未配置",
 			credentialReadOnly: "当前凭据存储不可写",
 			appIdPlaceholder: "输入 App ID（cli_…）",
 			appSecretPlaceholder: "输入 App Secret",
-			credentialsPendingHint: "填写后点「保存凭据」；两项齐全时插件会自动连接飞书。",
-			connectionTabHelp: "连接状态与飞书应用凭据。凭据不完整时不会连接飞书。",
-			sessionsTabHelp: "私聊、群聊触发方式与入站内容：附件存储/预取、模型工具开关与读取预算；「需重连」项在下次连接时读取。",
-			modelTabHelp: "飞书会话使用的模型服务商、模型、推理档位与 Agent 预设；下拉选项来自宿主机实时目录，保存后对新会话生效。",
-			workspaceTabHelp: "每个用户一个工作区（模型/工具产生文件的落点），每个话题在其中拥有独立工作目录；只影响之后新建的话题。入站附件默认存于 DSH 原生附件库，不占用话题目录。插件不会自动删除工作区或话题目录；过期目录可手动删除，话题下次对话时会重建空目录。",
-			accessTabHelp: "准入采用 fail-closed：管理员不受白名单限制，非管理员私聊会被拒绝，群聊需要「群已授权 + 用户在白名单」两层同时命中。",
-			advancedTabHelp: "流式刷新等低层参数、Web 覆盖文件与只读信息。",
-			save: "保存更改",
+			credentialRemoveConfirm: "确定移除已存储的凭据值？移除后不会回显，需要时须重新填写。",
+			save: "保存",
 			saving: "保存中…",
-			saveHintDirty: "只保存改动过的字段；标注「需重连」的项在下次连接时生效。",
-			discardTab: "放弃本页更改",
-			saveHintClean: "没有未保存的更改。",
-			dirtyCount: "未保存项",
+			discard: "放弃",
+			dirtyCount: "{n} 项未保存",
+			dirtyRestart: "，其中 {n} 项需要重连后生效",
+			details: "详情",
+			expand: "展开",
+			collapse: "收起",
+			collapsedCount: "{n} 项",
+			collapsedClean: "一般不用改",
+			collapsedChanged: "{n} 项已在面板修改",
+			restartTag: "需重连",
 			listAdd: "添加",
 			listRemove: "移除",
 			listEntry: "第 {n} 项",
@@ -196,55 +207,55 @@ window.__ModuleLoader__.load({
 			directoryPicked: "已选择目录",
 			directoryPickFailed: "无法打开系统目录选择器",
 			saved: "已保存",
-			cleared: "已清除 Web 覆盖，恢复为 profile 配置",
-			clear: "清除 Web 覆盖",
-			clearing: "清除中…",
-			noOverrides: "当前没有 Web 覆盖",
-			overridden: "Web 覆盖",
-			inherited: "继承 profile",
-			restartTag: "需重连",
-			restartBanner: "以下配置需重启飞书连接后生效：",
-			restartWarning: "重启会断开当前飞书长连接并中断进行中的回复，请确认空闲时操作。",
-			reconnect: "重启飞书连接",
+			saveInvalid: "请先修正标红的配置项",
+			numberInvalid: "请输入数字",
+			numberMin: "不得小于 {n}",
+			numberMax: "不得大于 {n}",
+			modelFootnote: "对之后新建的会话生效。",
+			catalogFailed: "模型目录加载失败，已退回手填。",
+			catalogLoading: "正在读取宿主机选项…",
+			catalogUnavailable: "宿主机未提供可选项，请手填。",
+			restartBanner: "以下配置要重启飞书连接后生效：",
+			restartWarning: "重启会断开当前飞书连接并中断进行中的回复，确定现在重启？",
+			reconnect: "重启连接",
 			reconnecting: "重连中…",
-			refresh: "刷新状态",
+			refresh: "刷新",
 			retry: "重试",
 			pollFailed: "状态刷新失败",
 			connectDone: "已连接飞书",
 			reconnectDone: "已重启飞书连接",
-			saveInvalid: "请先修正标红的配置项",
-			enabled: "已启用",
-			disabled: "已关闭",
-			credentialRemoveConfirm: "确定移除已存储的凭据值？移除后不会回显，需要时须重新填写。",
-			accessNotLoaded: "飞书连接建立后加载授权列表",
 			loading: "加载中…",
 			loadFailed: "设置面板加载失败",
-			catalogFailed: "模型目录加载失败，已退回手填。",
-			catalogLoading: "正在读取宿主机选项…",
-			catalogUnavailable: "宿主机未提供可选项，请手填。",
-			version: "插件版本",
+			analyzeTokenLabel: "访问令牌",
+			analyzeTokenSummary: "请求头 Authorization: Bearer 的值，保存后立即生效；未配置时接口拒绝所有请求",
+			analyzeTokenPlaceholder: "填写新令牌（建议 32 位以上随机串）",
+			analyzeTokenSaved: "令牌已保存，下一次请求生效",
+			analyzeTokenRemoved: "令牌已移除，接口将拒绝所有请求",
+			overlayTitle: "Web 覆盖",
 			overlayPath: "覆盖文件",
-			overlayPathHelp: "可以直接编辑该 JSON 文件；面板保存会整体重写它，「清除 Web 覆盖」会删除它并回落到 profile 配置。",
-			advancedCard: "只读与高级信息",
-			advancedHelp: "这些值来自 profile 配置，不能在面板里编辑。",
-			readOnlyCard: "部署级参数",
-			accessCard: "访问与授权",
-			accessCardHelp: "准入采用 fail-closed：管理员不受白名单限制（私聊、任意群聊都可直接对话）；非管理员私聊会被拒绝，群聊需要「群已授权 + 用户在白名单」两层同时命中。管理员与准入模式在上方「准入与授权」中编辑；私聊机器人发送 /userid 获取自己的 user_id。",
-			accessModeOpenWarning: "当前准入模式为开放（open）：应用可用范围内的任何人都能开启对话。该模式不安全，仅建议调试时使用。",
-			accessAdminMissingWarning: "当前准入=guarded 但未配置管理员，也无法自动使用应用所有者，所有对话都会被拒绝。请在上方「准入与授权」填写管理员 user_id（私聊机器人发送 /userid 获取；私聊模式关闭时 /userid 不可用，可在飞书管理后台的成员详情里查看用户 ID）。",
-			accessAdminOwnerNotice: "未配置管理员，已自动使用应用所有者作为管理员：",
+			overlayCount: "{n} 项配置由面板覆盖",
+			noOverrides: "当前没有面板覆盖的配置",
+			overlayPathHelp: "面板保存的配置写在这个 JSON 文件里，优先级高于 profile。可以直接编辑；面板保存会整体重写它。",
+			clear: "恢复 profile 配置",
+			clearing: "恢复中…",
+			clearConfirm: "确定删除所有面板覆盖，恢复为 profile 配置？",
+			cleared: "已恢复为 profile 配置",
+			debugModeWarning: "调试模式已打开：应用可用范围内的任何人都能和机器人对话。用完请在「访问授权」关闭。",
+			accessAdminMissingWarning: "没有可用的管理员，所有对话都会被拒绝。请在下方填写管理员 user_id（私聊机器人发送 /userid 获取）。",
+			accessAdminOwnerSummary: "未单独设置，正在使用应用所有者 {id}",
+			accessNotLoaded: "飞书连接建立后加载授权列表",
+			accessRequestsTitle: "待处理申请",
 			accessGroupsTitle: "已授权群",
-			accessGroupsEmpty: "尚未授权任何群。机器人被拉进群后，管理员会收到带 chat_id 的群信息卡；也可在群内发送 /groupid 获取。",
 			accessUsersTitle: "已授权用户",
-			accessUsersEmpty: "尚未授权任何用户。已授权用户可在所有已授权群里与机器人对话（私聊仍只开给管理员）。",
-			accessRequestsTitle: "待处理申请",
-			accessRequestsEmpty: "没有待处理的授权申请。",
-			accessGroupChatIdPlaceholder: "群 chat_id（oc_…）",
+			accessGroupsEmpty: "还没有授权任何群",
+			accessUsersEmpty: "还没有授权任何用户",
+			accessGroupChatIdPlaceholder: "chat_id（oc_…，群里发 /groupid 获取）",
 			accessGroupNamePlaceholder: "群名（可选）",
-			accessUserIdPlaceholder: "用户 user_id",
+			accessUserIdPlaceholder: "user_id（私聊机器人发 /userid 获取）",
 			accessUserNamePlaceholder: "昵称（可选）",
 			accessAddGroup: "添加群",
 			accessAddUser: "添加用户",
+			accessAdd: "添加",
 			accessRemove: "移除",
 			accessAllow: "授权",
 			accessDeny: "忽略",
@@ -252,19 +263,36 @@ window.__ModuleLoader__.load({
 			accessSourceCommand: "对话命令",
 			accessSourceCard: "授权卡",
 			accessSourcePanel: "设置面板",
-			accessRequestGroup: "群申请",
-			accessRequestUser: "用户申请",
-			accessRequestRequester: "申请人",
-			accessRequestExpires: "有效期至",
+			accessRequestGroup: "申请授权群",
+			accessRequestUser: "申请使用",
+			accessRequestIn: "在「{group}」",
+			accessRequestExpires: "{date} 前有效",
 			accessGroupAdded: "已添加群授权",
 			accessGroupRemoved: "已移除群授权",
 			accessUserAdded: "已添加用户授权",
 			accessUserRemoved: "已移除用户授权",
 			accessRequestAllowed: "已授权",
 			accessRequestDenied: "已忽略",
-			accessHints: "三种授权入口：群内 /auth 命令、入群与用户授权卡、本面板。撤销立即生效；白名单只约束非管理员（管理员在任何私聊/群聊都直接放行），非管理员需要群和用户两层同时命中。",
-			accessChatIdHint: "chat_id 可从入群群信息卡或群内 /groupid 获取；user_id 可私聊机器人发送 /userid 获取。"
+			wikiUsersTitle: "可使用的人",
+			wikiUsersAdminPlus: "管理员 + {n}",
+			wikiUsersEmpty: "目前只有管理员发起的话题能用知识库工具",
+			wikiUsersHint: "也可以在飞书发 /auth wiki add @用户",
+			wikiUserAdded: "已加入知识库白名单",
+			wikiUserRemoved: "已移出知识库白名单"
 		};
+		/**
+		* Fill `{name}` placeholders of one `PANEL_COPY` template.
+		*
+		* @param template - Copy containing `{name}` placeholders.
+		* @param values - Replacement per placeholder name.
+		* @returns The filled string; unknown placeholders stay as written.
+		*/
+		function fillCopy(template, values) {
+			return template.replace(/\{(\w+)\}/g, (match, name) => {
+				const value = values[name];
+				return value === void 0 ? match : String(value);
+			});
+		}
 		//#endregion
 		//#region src/client/api.ts
 		/**
@@ -469,6 +497,17 @@ window.__ModuleLoader__.load({
 		async function removeAccessUser(userId) {
 			return mutateAccess(ACCESS_USERS_ROUTE, "DELETE", { userId });
 		}
+		/** Add one user `user_id` to the wiki whitelist. */
+		async function addWikiUser(userId, name) {
+			return mutateAccess(ACCESS_WIKI_USERS_ROUTE, "POST", name === void 0 || name === "" ? { userId } : {
+				userId,
+				name
+			});
+		}
+		/** Remove one user from the wiki whitelist (takes effect on the next wiki tool call). */
+		async function removeWikiUser(userId) {
+			return mutateAccess(ACCESS_WIKI_USERS_ROUTE, "DELETE", { userId });
+		}
 		/** Settle one pending authorization request (same resolver as the Feishu card). */
 		async function resolveAccessRequest(token, decision) {
 			return mutateAccess(ACCESS_REQUESTS_ROUTE, "POST", {
@@ -570,6 +609,110 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region src/client/number-field.ts
+		/**
+		* 浏览器半区的 `number` 字段辅助：按 Host 描述的 `scale` 在显示单位与存储
+		* 单位之间换算、保存前校验上下界，以及字节数的 MiB 读数。
+		*
+		* 不含 JSX/React，便于单测。Host 保存时按 config schema 复核。
+		*
+		* @module dsh-channels/client/number-field
+		*/
+		/** Drop float noise from `stored / scale` (e.g. 0.30000000000000004). */
+		function tidy(value) {
+			return Number(value.toPrecision(12));
+		}
+		/**
+		* Value the input shows for one field.
+		*
+		* @param field - The Host descriptor (`kind: 'number'`).
+		* @param value - Draft (the typed string) or effective value (stored units).
+		* @returns The input text.
+		*/
+		function numberInputValue(field, value) {
+			if (typeof value === "string") return value;
+			if (typeof value !== "number") return "";
+			return String(field.scale === void 0 ? value : tidy(value / field.scale));
+		}
+		/**
+		* Input `step` in display units.
+		*
+		* @param field - The Host descriptor (`kind: 'number'`).
+		* @returns The step, or `undefined` when the Host gives none.
+		*/
+		function numberInputStep(field) {
+			if (field.step === void 0) return void 0;
+			return field.scale === void 0 ? field.step : tidy(field.step / field.scale);
+		}
+		/** One bound in display units with the field's unit appended. */
+		function boundLabel(field, stored) {
+			const shown = field.scale === void 0 ? stored : tidy(stored / field.scale);
+			return field.unit === void 0 ? String(shown) : `${shown} ${field.unit}`;
+		}
+		/**
+		* Turn one number draft into its save payload, checking the Host bounds.
+		*
+		* @param field - The Host descriptor (`kind: 'number'`).
+		* @param raw - The draft: the typed string, or a stored-unit number.
+		* @returns The stored-unit value (`''` clears an optional field), or the reason it is rejected.
+		*/
+		function numberDraftValue(field, raw) {
+			let stored;
+			if (typeof raw === "number") stored = raw;
+			else {
+				const text = typeof raw === "string" ? raw.trim() : "";
+				if (text === "") return field.optional === true ? {
+					ok: true,
+					value: ""
+				} : {
+					ok: false,
+					message: PANEL_COPY.numberInvalid
+				};
+				const parsed = Number(text);
+				if (!Number.isFinite(parsed)) return {
+					ok: false,
+					message: PANEL_COPY.numberInvalid
+				};
+				stored = field.scale === void 0 ? parsed : Math.round(parsed * field.scale);
+			}
+			if (field.min !== void 0 && stored < field.min) return {
+				ok: false,
+				message: fillCopy(PANEL_COPY.numberMin, { n: boundLabel(field, field.min) })
+			};
+			if (field.max !== void 0 && stored > field.max) return {
+				ok: false,
+				message: fillCopy(PANEL_COPY.numberMax, { n: boundLabel(field, field.max) })
+			};
+			return {
+				ok: true,
+				value: stored
+			};
+		}
+		/**
+		* Human reading of a byte count, e.g. `20 MiB`.
+		*
+		* @param text - The input text (bytes).
+		* @returns The reading, or `undefined` when the text is not a positive number.
+		*/
+		function bytesReading(text) {
+			const bytes = Number(text);
+			if (text.trim() === "" || !Number.isFinite(bytes) || bytes <= 0) return void 0;
+			const units = [
+				"B",
+				"KiB",
+				"MiB",
+				"GiB",
+				"TiB"
+			];
+			let value = bytes;
+			let unit = 0;
+			while (value >= 1024 && unit < units.length - 1) {
+				value /= 1024;
+				unit += 1;
+			}
+			return `${Number(value.toFixed(value >= 100 || unit === 0 ? 0 : 1))} ${units[unit]}`;
+		}
+		//#endregion
 		//#region src/feishu/wiki/links.ts
 		/**
 		* Feishu wiki (知识库) link parsing: the `wikiRoots` allow-list entries and
@@ -769,8 +912,8 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/client/panel/shared.tsx
 		/**
-		* 设置面板共享层：页面状态类型、Host 字段渲染原语（FieldRow / FieldsCard /
-		* SaveBar）、生命周期徽标与纯格式化工具。
+		* 设置面板共享层：页面状态类型、Host 字段渲染原语（SettingRow /
+		* FieldSections / SaveBar）、分区与列表原语、生命周期徽标与纯格式化工具。
 		*
 		* 这一层不发请求、不持有页面状态，只把 Host 下发的 wire 数据渲染成控件；
 		* 页面外壳在 `index.tsx`，各 tab 只组合这些原语。
@@ -780,7 +923,7 @@ window.__ModuleLoader__.load({
 		function messageOf(error) {
 			return error instanceof Error ? error.message : String(error);
 		}
-		/** Compact duration for the connection card. */
+		/** Compact duration for the page header. */
 		function formatUptime(ms) {
 			if (ms === void 0 || !Number.isFinite(ms)) return PANEL_COPY.unknownValue;
 			const totalSeconds = Math.max(0, Math.floor(ms / 1e3));
@@ -800,21 +943,9 @@ window.__ModuleLoader__.load({
 		function fieldLabel(fields, key) {
 			return fields.find((field) => field.key === key)?.label ?? key;
 		}
-		/** Effective access-mode label, reusing the Host field options for consistency. */
-		function accessModeLabel(panel, mode) {
-			return panel.config.fields.find((item) => item.key === "accessMode")?.options?.find((option) => option.value === mode)?.label ?? mode;
-		}
-		/** Numeric draft kept as the raw input string; parsed on save. */
-		function numericDraft(field, raw) {
-			if (typeof raw === "number") return raw;
-			if (typeof raw !== "string" || raw.trim() === "") return void 0;
-			const parsed = Number(raw);
-			return Number.isFinite(parsed) ? parsed : void 0;
-		}
 		/**
 		* Turn the dirty draft into the wire payload, keeping the Host-descriptor
-		* bounds check client-side. Field messages stay technical (the Host re-validates
-		* every value on save).
+		* bounds check client-side (the Host re-validates every value on save).
 		*/
 		function validateDraft(panel, draft) {
 			const values = {};
@@ -823,29 +954,12 @@ window.__ModuleLoader__.load({
 				if (!(field.key in draft)) continue;
 				const raw = draft[field.key];
 				if (field.kind === "number") {
-					const parsed = numericDraft(field, raw);
-					if (parsed === void 0) {
-						issues.push({
-							key: field.key,
-							message: "请输入数字"
-						});
-						continue;
-					}
-					if (field.min !== void 0 && parsed < field.min) {
-						issues.push({
-							key: field.key,
-							message: `不得小于 ${field.min}`
-						});
-						continue;
-					}
-					if (field.max !== void 0 && parsed > field.max) {
-						issues.push({
-							key: field.key,
-							message: `不得大于 ${field.max}`
-						});
-						continue;
-					}
-					values[field.key] = parsed;
+					const parsed = numberDraftValue(field, raw);
+					if (parsed.ok) values[field.key] = parsed.value;
+					else issues.push({
+						key: field.key,
+						message: parsed.message
+					});
 					continue;
 				}
 				if (field.kind === "boolean") {
@@ -865,7 +979,7 @@ window.__ModuleLoader__.load({
 				issues
 			};
 		}
-		/** Header badge for the Host-derived lifecycle phase. */
+		/** Header pill for the Host-derived lifecycle phase. */
 		function phaseBadge(phase) {
 			switch (phase) {
 				case "connected": return {
@@ -890,7 +1004,7 @@ window.__ModuleLoader__.load({
 				};
 			}
 		}
-		/** One-line explanation shown under the page title for the current phase. */
+		/** One-line explanation of the current phase (connection tab status block). */
 		function phaseSummary(phase) {
 			switch (phase) {
 				case "connected": return PANEL_COPY.statusSummaryConnected;
@@ -900,6 +1014,99 @@ window.__ModuleLoader__.load({
 				default: return PANEL_COPY.statusSummaryUnconfigured;
 			}
 		}
+		/** Small rounded status pill. */
+		function Pill(props) {
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+				className: `dsh-channels-cfg__pill dsh-channels-cfg__pill--${props.tone}`,
+				children: [props.dot === true ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "dsh-channels-cfg__dot" }) : null, props.children]
+			});
+		}
+		/** One titled section: a muted heading above a bordered row list. */
+		function Section(props) {
+			const { title, footnote, tone, children } = props;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				className: "dsh-channels-cfg__sec",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+						className: "dsh-channels-cfg__secTitle",
+						children: title
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: `dsh-channels-cfg__list${tone === "warn" ? " dsh-channels-cfg__list--warn" : ""}`,
+						children
+					}),
+					footnote === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dsh-channels-cfg__secFoot",
+						children: footnote
+					})
+				]
+			});
+		}
+		/**
+		* One setting row: label (with tags and the「详情」toggle) and a one-line
+		* summary on the left, the control on the right. `details` renders below the
+		* row once expanded; `wide` puts the control under the text.
+		*/
+		function Row(props) {
+			const { label, tags, summary, details, control, error, wide = false, leading } = props;
+			const [open, setOpen] = (0, react.useState)(false);
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dsh-channels-cfg__rowWrap",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: `dsh-channels-cfg__row${wide ? " dsh-channels-cfg__row--wide" : ""}`,
+						children: [
+							leading,
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dsh-channels-cfg__rowText",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									className: "dsh-channels-cfg__rowLabel",
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: label }),
+										tags,
+										details === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											className: "dsh-channels-cfg__more",
+											"aria-expanded": open,
+											onClick: () => setOpen(!open),
+											children: PANEL_COPY.details
+										})
+									]
+								}), summary === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+									className: "dsh-channels-cfg__rowSummary",
+									children: summary
+								})]
+							}),
+							control === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: "dsh-channels-cfg__rowCtl",
+								children: control
+							})
+						]
+					}),
+					open && details !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dsh-channels-cfg__details",
+						children: details
+					}) : null,
+					error === void 0 || error === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dsh-channels-cfg__rowError",
+						children: error
+					})
+				]
+			});
+		}
+		/** Accessible on/off switch. */
+		function Switch(props) {
+			const { checked, label, disabled = false, onChange } = props;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+				type: "button",
+				role: "switch",
+				className: "dsh-channels-cfg__switch",
+				"aria-checked": checked,
+				"aria-label": label,
+				disabled,
+				onClick: () => onChange(!checked)
+			});
+		}
 		/**
 		* Text input paired with the host-native「选择目录…」button. The button owns
 		* its own busy state: the OS dialog can stay open for a long time, so the
@@ -928,7 +1135,7 @@ window.__ModuleLoader__.load({
 					onChange: (event) => onChange(field.key, event.target.value)
 				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 					type: "button",
-					className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--browse",
+					className: "dsh-channels-cfg__btn",
 					disabled: disabled || picking,
 					onClick: () => {
 						pick();
@@ -939,7 +1146,7 @@ window.__ModuleLoader__.load({
 		}
 		/**
 		* `string-list` control: one single-line input per entry, each with a remove
-		* button, and an add button below (disabled at `maxItems` inputs). An empty
+		* button, and an add link below (disabled at `maxItems` inputs). An empty
 		* list renders one blank input so the first entry can be typed directly.
 		* Issues carrying an `index` mark that input and show the reason under it.
 		*/
@@ -948,12 +1155,12 @@ window.__ModuleLoader__.load({
 			const empty = listItems(value).length === 0;
 			const rows = listRows(value);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: "dsh-channels-cfg__list",
+				className: "dsh-channels-cfg__stringList",
 				children: [rows.map((item, index) => {
 					const issue = issues.find((entry) => entry.index === index);
 					const position = PANEL_COPY.listEntry.replace("{n}", String(index + 1));
 					return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__listItem",
+						className: "dsh-channels-cfg__stringListItem",
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 							className: "dsh-channels-cfg__inputRow",
 							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
@@ -967,7 +1174,7 @@ window.__ModuleLoader__.load({
 								onChange: (event) => onChange(field.key, withListEntry(rows, index, event.target.value))
 							}), empty ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
-								className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--listRemove",
+								className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--remove",
 								"aria-label": `${PANEL_COPY.listRemove} ${position}`,
 								disabled,
 								onClick: () => onChange(field.key, withoutListEntry(rows, index)),
@@ -978,861 +1185,703 @@ window.__ModuleLoader__.load({
 							children: issue.message
 						})]
 					}, index);
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
 					type: "button",
-					className: "dsh-channels-cfg__btn",
+					className: "dsh-channels-cfg__link",
 					disabled: disabled || listIsFull(field, rows),
 					onClick: () => onChange(field.key, withBlankListEntry(rows)),
-					children: PANEL_COPY.listAdd
+					children: ["＋ ", PANEL_COPY.listAdd]
 				}) })]
 			});
 		}
-		/** One generic form control driven by the Host field descriptor. */
-		function FieldRow(props) {
-			const { field, value, issues, disabled = false, onChange, onPickDirectory } = props;
-			const issue = issues.find((item) => item.key === field.key && item.index === void 0);
-			const entryIssues = issues.filter((item) => item.key === field.key && item.index !== void 0);
-			const inputClass = `dsh-channels-cfg__input${issue === void 0 ? "" : " dsh-channels-cfg__input--invalid"}`;
+		/** Number input with its unit (and a MiB reading for byte counts). */
+		function NumberInput(props) {
+			const { field, value, inputClass, disabled, onChange } = props;
+			const text = numberInputValue(field, value);
+			const reading = field.unit === "字节" ? bytesReading(text) : void 0;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: `dsh-channels-cfg__field${field.wide === true ? " dsh-channels-cfg__field--wide" : ""}`,
+				className: "dsh-channels-cfg__inputRow",
 				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__labelRow",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__label",
-							children: field.label
-						}), field.restartRequired ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__tag dsh-channels-cfg__tag--restart",
-							children: PANEL_COPY.restartTag
-						}) : null]
+					reading === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-channels-cfg__bytes",
+						children: reading
 					}),
-					field.kind === "boolean" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
-						className: "dsh-channels-cfg__check",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-							type: "checkbox",
-							className: "dsh-channels-cfg__checkbox",
-							checked: value === true,
-							"aria-label": field.label,
-							disabled,
-							onChange: (event) => onChange(field.key, event.target.checked)
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: value === true ? PANEL_COPY.enabled : PANEL_COPY.disabled })]
-					}) : null,
-					field.kind === "select" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("select", {
-						className: inputClass,
-						value: String(value ?? ""),
-						disabled: disabled || field.disabled === true,
-						"aria-label": field.label,
-						onChange: (event) => onChange(field.key, event.target.value),
-						children: (field.options ?? []).map((option) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
-							value: option.value,
-							children: option.label
-						}, option.value))
-					}) : null,
-					field.kind === "number" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
 						type: "number",
-						className: inputClass,
-						value: value === void 0 || value === "" ? "" : String(value),
-						min: field.min,
-						max: field.max,
-						step: field.step,
-						"aria-label": field.label,
-						disabled,
-						onChange: (event) => onChange(field.key, event.target.value)
-					}) : null,
-					field.kind === "text" ? field.browse === "directory" && onPickDirectory !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(DirectoryTextInput, {
-						field,
-						value,
-						inputClass,
-						disabled,
-						onChange,
-						onPick: onPickDirectory
-					}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-						type: "text",
-						className: inputClass,
-						value: String(value ?? ""),
+						className: `${inputClass} dsh-channels-cfg__input--num`,
+						value: text,
 						placeholder: field.placeholder,
+						step: numberInputStep(field),
 						"aria-label": field.label,
 						disabled,
 						onChange: (event) => onChange(field.key, event.target.value)
-					}) : null,
-					field.kind === "string-list" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(StringListInput, {
-						field,
-						value,
-						issues: entryIssues,
-						disabled,
-						onChange
-					}) : null,
-					field.help === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__help",
-						children: field.help
 					}),
-					issue === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__fieldError",
-						children: issue.message
+					field.unit === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: "dsh-channels-cfg__unit",
+						children: field.unit
 					})
 				]
 			});
 		}
+		/** The control for one Host field descriptor. */
+		function FieldControl(props) {
+			const { field, value, issues, invalid, disabled, onChange, onPickDirectory } = props;
+			const inputClass = `dsh-channels-cfg__input${invalid ? " dsh-channels-cfg__input--invalid" : ""}`;
+			switch (field.kind) {
+				case "boolean": return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Switch, {
+					checked: value === true,
+					label: field.label,
+					disabled,
+					onChange: (next) => onChange(field.key, next)
+				});
+				case "select": {
+					const toggle = field.toggle;
+					if (toggle !== void 0) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Switch, {
+						checked: value === toggle.on,
+						label: field.label,
+						disabled,
+						onChange: (next) => onChange(field.key, next ? toggle.on : toggle.off)
+					});
+					return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("select", {
+						className: `${inputClass} dsh-channels-cfg__select`,
+						value: String(value ?? ""),
+						disabled: disabled || field.disabled === true,
+						"aria-label": field.label,
+						onChange: (event) => onChange(field.key, event.target.value),
+						children: (field.options ?? []).map((option) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+							value: option.value,
+							children: option.label
+						}, option.value))
+					});
+				}
+				case "number": return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(NumberInput, {
+					field,
+					value,
+					inputClass,
+					disabled,
+					onChange
+				});
+				case "text": return field.browse === "directory" && onPickDirectory !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(DirectoryTextInput, {
+					field,
+					value,
+					inputClass,
+					disabled,
+					onChange,
+					onPick: onPickDirectory
+				}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+					type: "text",
+					className: `${inputClass}${field.wide === true ? "" : " dsh-channels-cfg__input--text"}`,
+					value: String(value ?? ""),
+					placeholder: field.placeholder,
+					"aria-label": field.label,
+					disabled,
+					onChange: (event) => onChange(field.key, event.target.value)
+				});
+				case "string-list": return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(StringListInput, {
+					field,
+					value,
+					issues,
+					disabled,
+					onChange
+				});
+				default: return null;
+			}
+		}
+		/** One Host field rendered as a setting row. */
+		function SettingRow(props) {
+			const { field, value, issues, disabled = false, onChange, onPickDirectory } = props;
+			const issue = issues.find((item) => item.key === field.key && item.index === void 0);
+			const entryIssues = issues.filter((item) => item.key === field.key && item.index !== void 0);
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+				label: field.label,
+				tags: field.restartRequired ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					className: "dsh-channels-cfg__tag",
+					children: PANEL_COPY.restartTag
+				}) : void 0,
+				summary: field.summary,
+				details: field.help,
+				wide: field.wide === true,
+				error: issue?.message,
+				control: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(FieldControl, {
+					field,
+					value,
+					issues: entryIssues,
+					invalid: issue !== void 0,
+					disabled,
+					onChange,
+					onPickDirectory
+				})
+			});
+		}
+		/** Rows for every field of one group. */
+		function GroupRows(props) {
+			const { form, fields } = props;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(react_jsx_runtime.Fragment, { children: fields.map((field) => {
+				const onPick = form.onPickDirectory;
+				return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SettingRow, {
+					field,
+					value: form.draft[field.key] ?? effectiveValue(form.panel, field.key),
+					issues: form.issues,
+					disabled: form.locked,
+					onChange: form.onChange,
+					onPickDirectory: onPick === void 0 ? void 0 : () => onPick(field.key)
+				}, field.key);
+			}) });
+		}
 		/**
-		* One tab's editable fields, partitioned by the Host field groups that the tab
-		* owns (`TAB_FIELD_GROUPS`). Empty groups render nothing, so a Host that moves
-		* every key out of a group does not leave a stray heading behind.
+		* A group of rarely changed fields behind one summary row. It opens on its
+		* own when one of its fields has a validation issue.
 		*/
-		function FieldsCard(props) {
-			const { form, groups } = props;
-			const sections = groups.map((group) => ({
-				group,
-				label: FIELD_GROUP_LABELS[group],
-				fields: form.fields.filter((field) => field.group === group)
-			})).filter((section) => section.fields.length > 0);
-			if (sections.length === 0) return null;
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("section", {
-				className: "dsh-channels-cfg__card",
-				children: sections.map((section) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-					className: "dsh-channels-cfg__group",
-					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-						className: "dsh-channels-cfg__labelRow",
-						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__cardTitle",
-							children: section.label
-						})
-					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-						className: "dsh-channels-cfg__grid",
-						children: section.fields.map((field) => {
-							const onPick = form.onPickDirectory;
-							return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(FieldRow, {
-								field,
-								value: form.draft[field.key] ?? effectiveValue(form.panel, field.key),
-								issues: form.issues,
-								disabled: form.locked,
-								onChange: form.onChange,
-								onPickDirectory: onPick === void 0 ? void 0 : () => onPick(field.key)
-							}, field.key);
-						})
-					})]
-				}, section.group))
-			});
+		function CollapsedGroup(props) {
+			const { form, fields } = props;
+			const [open, setOpen] = (0, react.useState)(false);
+			const keys = new Set(fields.map((field) => field.key));
+			const changed = fields.filter((field) => form.panel.config.overriddenKeys.includes(field.key) || field.key in form.draft).length;
+			const expanded = open || form.issues.some((issue) => keys.has(issue.key));
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+				label: fillCopy(PANEL_COPY.collapsedCount, { n: fields.length }),
+				summary: changed === 0 ? PANEL_COPY.collapsedClean : fillCopy(PANEL_COPY.collapsedChanged, { n: changed }),
+				control: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+					type: "button",
+					className: "dsh-channels-cfg__more",
+					"aria-expanded": expanded,
+					onClick: () => setOpen(!expanded),
+					children: expanded ? PANEL_COPY.collapse : PANEL_COPY.expand
+				})
+			}), expanded ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(GroupRows, {
+				form,
+				fields
+			}) : null] });
+		}
+		/**
+		* One tab's editable fields as titled sections, one per Host field group, in
+		* the given order. Empty groups render nothing, so a Host that moves every key
+		* out of a group does not leave a stray heading behind. `extra` appends rows
+		* that are not Host fields (e.g. a credential) to one group's list.
+		*/
+		function FieldSections(props) {
+			const { form, groups, extra = {}, footnotes = {} } = props;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(react_jsx_runtime.Fragment, { children: groups.map((group) => {
+				const fields = form.fields.filter((field) => field.group === group);
+				const more = extra[group];
+				if (fields.length === 0 && more === void 0) return null;
+				return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Section, {
+					title: FIELD_GROUP_LABELS[group],
+					footnote: footnotes[group],
+					children: [COLLAPSED_FIELD_GROUPS.includes(group) ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CollapsedGroup, {
+						form,
+						fields
+					}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(GroupRows, {
+						form,
+						fields
+					}), more]
+				}, group);
+			}) });
 		}
-		/** The unified per-tab action bar: save every dirty field or drop the draft. */
+		/**
+		* Sticky bar shown only while the draft has unsaved keys. Saving submits the
+		* whole draft (every tab); discarding drops it.
+		*/
 		function SaveBar(props) {
-			const { form, tab } = props;
-			const groups = new Set(TAB_FIELD_GROUPS[tab]);
-			const pageDirty = form.fields.filter((field) => groups.has(field.group) && field.key in form.draft).length;
-			const dirty = form.dirtyCount > 0;
-			const disabled = !dirty || form.busy !== null || form.locked;
+			const { dirtyCount, restartCount, busy, locked, onSave, onDiscard } = props;
+			if (dirtyCount === 0) return null;
+			const disabled = busy !== null || locked;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: "dsh-channels-cfg__footer",
+				className: "dsh-channels-cfg__saveBar",
+				role: "region",
+				"aria-label": PANEL_COPY.save,
 				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+						className: "dsh-channels-cfg__saveMsg",
+						children: [fillCopy(PANEL_COPY.dirtyCount, { n: dirtyCount }), restartCount === 0 ? "" : fillCopy(PANEL_COPY.dirtyRestart, { n: restartCount })]
+					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 						type: "button",
-						className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
-						onClick: form.onSave,
+						className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--ghost",
+						onClick: onDiscard,
 						disabled,
-						children: form.busy === "save" ? PANEL_COPY.saving : PANEL_COPY.save
+						children: PANEL_COPY.discard
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 						type: "button",
-						className: "dsh-channels-cfg__btn",
-						onClick: () => form.onDiscardTab(tab),
-						disabled: pageDirty === 0 || form.busy !== null || form.locked,
-						children: PANEL_COPY.discardTab
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "dsh-channels-cfg__spacer" }),
-					pageDirty > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-						className: "dsh-channels-cfg__tag dsh-channels-cfg__tag--dirty",
-						children: [
-							PANEL_COPY.dirtyCount,
-							" ",
-							pageDirty
-						]
-					}) : dirty ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-						className: "dsh-channels-cfg__tag dsh-channels-cfg__tag--dirty",
-						children: [
-							PANEL_COPY.dirtyCount,
-							" ",
-							form.dirtyCount,
-							"（其他标签页）"
-						]
-					}) : null,
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__help",
-						children: dirty ? PANEL_COPY.saveHintDirty : PANEL_COPY.saveHintClean
+						className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
+						onClick: onSave,
+						disabled,
+						children: busy === "save" ? PANEL_COPY.saving : PANEL_COPY.save
 					})
 				]
 			});
 		}
-		/** Muted help paragraph introducing one tab. */
-		function TabHelp(props) {
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-				className: "dsh-channels-cfg__tabHelp",
-				children: props.text
-			});
-		}
-		/** Transient page-level banner (save / credentials / reconnect / catalog). */
+		/** Transient banner (save / credentials / reconnect / catalog / access). */
 		function NoticeBar(props) {
-			const { notice } = props;
+			const { kind, text } = props;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-				className: `dsh-channels-cfg__notice dsh-channels-cfg__notice--${notice.kind === "ok" ? "ok" : "error"}`,
-				role: "status",
+				className: `dsh-channels-cfg__notice dsh-channels-cfg__notice--${kind}`,
+				role: kind === "error" ? "alert" : "status",
 				"aria-live": "polite",
-				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: notice.text })
+				children: text
 			});
 		}
-		/** Muted empty/blocked state (e.g. access lists before the channel connects). */
-		function EmptyState(props) {
+		/** Muted row inside a list (empty or not-yet-loaded state). */
+		function EmptyRow(props) {
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-				className: "dsh-channels-cfg__emptyState",
+				className: "dsh-channels-cfg__emptyRow",
 				children: props.text
 			});
 		}
-		/** Human label for the official SDK's WebSocket lifecycle state. */
-		function connectionStateLabel(state) {
-			switch (state) {
-				case "connected": return {
-					text: PANEL_COPY.phaseConnected,
-					tone: "ok"
-				};
-				case "connecting": return {
-					text: PANEL_COPY.phaseConnecting,
-					tone: "warn"
-				};
-				case "reconnecting": return {
-					text: PANEL_COPY.phaseConnecting,
-					tone: "warn"
-				};
-				case "failed": return {
-					text: PANEL_COPY.phaseError,
-					tone: "bad"
-				};
-				case "idle": return {
-					text: PANEL_COPY.phaseIdle,
-					tone: "muted"
-				};
-				default: return {
-					text: state ?? PANEL_COPY.unknownValue,
-					tone: "muted"
-				};
-			}
-		}
 		//#endregion
-		//#region src/client/panel/access-card.tsx
+		//#region src/client/panel/whitelist.tsx
 		/**
-		* 访问与授权卡：fail-closed 警告、群/用户白名单增删、待处理申请处理。
-		*
-		* `access.loaded === false`（飞书未连接、插件 storage 域未打开）时白名单与
-		* 申请列表是「未知」而不是「空」，因此只渲染连接提示并禁用全部写操作。
-		* 管理员与准入模式由同 tab 上方「准入与授权」字段表单编辑，这里不再重复。
+		* 白名单列表：群白名单、用户白名单与知识库白名单共用的条目行、添加表单
+		* （点「＋ 添加」才展开）与待处理申请行。
 		*
-		* @module dsh-channels/client/panel/access-card
+		* @module dsh-channels/client/panel/whitelist
 		*/
-		/** Local `YYYY-MM-DD HH:mm` rendering for authorization timestamps. */
+		/** Local `MM-DD HH:mm` rendering for authorization timestamps. */
 		function formatAccessDate(ms) {
 			if (!Number.isFinite(ms) || ms <= 0) return PANEL_COPY.unknownValue;
 			const date = new Date(ms);
 			const pad = (value) => String(value).padStart(2, "0");
-			return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())} ${pad(date.getHours())}:${pad(date.getMinutes())}`;
+			return `${pad(date.getMonth() + 1)}-${pad(date.getDate())} ${pad(date.getHours())}:${pad(date.getMinutes())}`;
 		}
 		/** Which authorization entry produced one grant. */
-		function accessSourceLabel(source) {
+		function sourceLabel(source) {
 			switch (source) {
 				case "command": return PANEL_COPY.accessSourceCommand;
 				case "card": return PANEL_COPY.accessSourceCard;
 				default: return PANEL_COPY.accessSourcePanel;
 			}
 		}
-		function AccessCard(props) {
-			const { panel, busy, locked, notice, error, onAddGroup, onRemoveGroup, onAddUser, onRemoveUser, onResolveRequest } = props;
-			const { access } = panel;
-			const [groupChatId, setGroupChatId] = (0, react.useState)("");
-			const [groupName, setGroupName] = (0, react.useState)("");
-			const [userUserId, setUserUserId] = (0, react.useState)("");
-			const [userName, setUserName] = (0, react.useState)("");
-			const groups = access.groups;
-			const users = access.users;
-			const requests = access.requests;
-			const working = busy === "access";
-			const disabled = busy !== null || locked || !access.loaded;
-			const submitGroup = async () => {
-				if (groupChatId.trim() === "") return;
-				if (await onAddGroup(groupChatId, groupName)) {
-					setGroupChatId("");
-					setGroupName("");
-				}
-			};
-			const submitUser = async () => {
-				if (userUserId.trim() === "") return;
-				if (await onAddUser(userUserId, userName)) {
-					setUserUserId("");
-					setUserName("");
+		/** Round initial badge in front of a whitelist entry. */
+		function Avatar(props) {
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+				className: "dsh-channels-cfg__avatar",
+				"aria-hidden": "true",
+				children: Array.from(props.text)[0] ?? "?"
+			});
+		}
+		/**
+		* One titled whitelist with remove buttons and a collapsed add form.
+		* `onAdd` resolves true when the entry was added (the form then closes).
+		*/
+		function Whitelist(props) {
+			const { title, countLabel, entries, avatar, empty, loaded, addLabel, idPlaceholder, namePlaceholder, footnote, disabled, working, onAdd, onRemove } = props;
+			const [adding, setAdding] = (0, react.useState)(false);
+			const [id, setId] = (0, react.useState)("");
+			const [name, setName] = (0, react.useState)("");
+			const submit = async () => {
+				if (id.trim() === "") return;
+				if (await onAdd(id, name)) {
+					setId("");
+					setName("");
+					setAdding(false);
 				}
 			};
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
-				className: "dsh-channels-cfg__card",
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Section, {
+				title: loaded ? `${title} · ${countLabel ?? entries.length}` : title,
+				footnote,
 				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__cardHead",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__cardTitle",
-							children: PANEL_COPY.accessCard
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__cardMeta",
-							children: accessModeLabel(panel, access.mode)
-						})]
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__help",
-						children: PANEL_COPY.accessCardHelp
-					}),
-					access.mode === "open" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-						className: "dsh-channels-cfg__banner",
-						children: PANEL_COPY.accessModeOpenWarning
-					}) : null,
-					access.loaded && access.mode === "guarded" && !access.admin.configured ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--error",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: PANEL_COPY.accessAdminMissingWarning }), access.admin.ownerLookupError === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: access.admin.ownerLookupError })]
-					}) : null,
-					access.mode === "guarded" && access.admin.source === "owner" && access.admin.userId !== void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--ok",
-						children: [PANEL_COPY.accessAdminOwnerNotice, /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__mono",
-							children: access.admin.userId
-						})]
-					}) : null,
-					!access.loaded ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(EmptyState, { text: PANEL_COPY.accessNotLoaded }) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
-						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: "dsh-channels-cfg__accessSection",
-							children: [
-								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-									className: "dsh-channels-cfg__labelRow",
-									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										className: "dsh-channels-cfg__label",
-										children: PANEL_COPY.accessGroupsTitle
-									}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-										className: "dsh-channels-cfg__cardMeta",
-										children: [groups.length, " 个"]
-									})]
-								}),
-								groups.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									className: "dsh-channels-cfg__help",
-									children: PANEL_COPY.accessGroupsEmpty
-								}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
-									className: "dsh-channels-cfg__accessList",
-									children: groups.map((group) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
-										className: "dsh-channels-cfg__accessRow",
-										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-											className: "dsh-channels-cfg__accessMain",
-											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: group.name ?? group.chatId }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-												className: "dsh-channels-cfg__accessMeta",
-												children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-													className: "dsh-channels-cfg__mono",
-													children: group.chatId
-												}), ` · ${accessSourceLabel(group.source)} · ${formatAccessDate(group.addedAt)}`]
-											})]
-										}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-											type: "button",
-											className: "dsh-channels-cfg__btn",
-											disabled,
-											onClick: () => onRemoveGroup(group.chatId),
-											children: working ? PANEL_COPY.accessWorking : PANEL_COPY.accessRemove
-										})]
-									}, group.chatId))
-								}),
-								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-									className: "dsh-channels-cfg__accessAdd",
-									children: [
-										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-											type: "text",
-											className: "dsh-channels-cfg__input dsh-channels-cfg__accessInput",
-											value: groupChatId,
-											placeholder: PANEL_COPY.accessGroupChatIdPlaceholder,
-											"aria-label": PANEL_COPY.accessGroupChatIdPlaceholder,
-											disabled,
-											onChange: (event) => setGroupChatId(event.target.value)
-										}),
-										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-											type: "text",
-											className: "dsh-channels-cfg__input dsh-channels-cfg__accessInput",
-											value: groupName,
-											placeholder: PANEL_COPY.accessGroupNamePlaceholder,
-											"aria-label": PANEL_COPY.accessGroupNamePlaceholder,
-											disabled,
-											onChange: (event) => setGroupName(event.target.value)
-										}),
-										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-											type: "button",
-											className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
-											disabled: disabled || groupChatId.trim() === "",
-											onClick: () => {
-												submitGroup();
-											},
-											children: working ? PANEL_COPY.accessWorking : PANEL_COPY.accessAddGroup
-										})
-									]
-								})
-							]
-						}),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: "dsh-channels-cfg__accessSection",
-							children: [
-								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-									className: "dsh-channels-cfg__labelRow",
-									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										className: "dsh-channels-cfg__label",
-										children: PANEL_COPY.accessUsersTitle
-									}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-										className: "dsh-channels-cfg__cardMeta",
-										children: [users.length, " 个"]
-									})]
-								}),
-								users.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									className: "dsh-channels-cfg__help",
-									children: PANEL_COPY.accessUsersEmpty
-								}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
-									className: "dsh-channels-cfg__accessList",
-									children: users.map((user) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
-										className: "dsh-channels-cfg__accessRow",
-										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-											className: "dsh-channels-cfg__accessMain",
-											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: user.name ?? user.userId }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-												className: "dsh-channels-cfg__accessMeta",
-												children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-													className: "dsh-channels-cfg__mono",
-													children: user.userId
-												}), ` · ${accessSourceLabel(user.source)} · ${formatAccessDate(user.addedAt)}`]
-											})]
-										}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-											type: "button",
-											className: "dsh-channels-cfg__btn",
-											disabled,
-											onClick: () => onRemoveUser(user.userId),
-											children: working ? PANEL_COPY.accessWorking : PANEL_COPY.accessRemove
-										})]
-									}, user.userId))
-								}),
-								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-									className: "dsh-channels-cfg__accessAdd",
-									children: [
-										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-											type: "text",
-											className: "dsh-channels-cfg__input dsh-channels-cfg__accessInput",
-											value: userUserId,
-											placeholder: PANEL_COPY.accessUserIdPlaceholder,
-											"aria-label": PANEL_COPY.accessUserIdPlaceholder,
-											disabled,
-											onChange: (event) => setUserUserId(event.target.value)
-										}),
-										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-											type: "text",
-											className: "dsh-channels-cfg__input dsh-channels-cfg__accessInput",
-											value: userName,
-											placeholder: PANEL_COPY.accessUserNamePlaceholder,
-											"aria-label": PANEL_COPY.accessUserNamePlaceholder,
-											disabled,
-											onChange: (event) => setUserName(event.target.value)
-										}),
-										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-											type: "button",
-											className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
-											disabled: disabled || userUserId.trim() === "",
-											onClick: () => {
-												submitUser();
-											},
-											children: working ? PANEL_COPY.accessWorking : PANEL_COPY.accessAddUser
-										})
-									]
-								})
-							]
-						}),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: "dsh-channels-cfg__accessSection",
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-								className: "dsh-channels-cfg__labelRow",
-								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									className: "dsh-channels-cfg__label",
-									children: PANEL_COPY.accessRequestsTitle
-								}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-									className: "dsh-channels-cfg__cardMeta",
-									children: [requests.length, " 条"]
-								})]
-							}), requests.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-								className: "dsh-channels-cfg__help",
-								children: PANEL_COPY.accessRequestsEmpty
-							}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
-								className: "dsh-channels-cfg__accessList",
-								children: requests.map((request) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
-									className: "dsh-channels-cfg__accessRow",
-									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-										className: "dsh-channels-cfg__accessMain",
-										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
-											request.kind === "group" ? PANEL_COPY.accessRequestGroup : PANEL_COPY.accessRequestUser,
-											"：",
-											request.name ?? request.targetId
-										] }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-											className: "dsh-channels-cfg__accessMeta",
-											children: [
-												/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-													className: "dsh-channels-cfg__mono",
-													children: request.targetId
-												}),
-												` · ${formatAccessDate(request.createdAt)} · ${PANEL_COPY.accessRequestExpires} ${formatAccessDate(request.expiresAt)}`,
-												request.kind === "user" && request.requester !== void 0 ? ` · ${PANEL_COPY.accessRequestRequester} ${request.requester}` : "",
-												request.kind === "user" && request.groupName !== void 0 ? ` · ${request.groupName}` : request.kind === "user" && request.chatId !== void 0 ? ` · ${request.chatId}` : ""
-											]
-										})]
-									}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-										className: "dsh-channels-cfg__accessActions",
-										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-											type: "button",
-											className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
-											disabled,
-											onClick: () => onResolveRequest(request.token, "allow"),
-											children: working ? PANEL_COPY.accessWorking : PANEL_COPY.accessAllow
-										}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-											type: "button",
-											className: "dsh-channels-cfg__btn",
-											disabled,
-											onClick: () => onResolveRequest(request.token, "deny"),
-											children: working ? PANEL_COPY.accessWorking : PANEL_COPY.accessDeny
-										})]
-									})]
-								}, request.token))
-							})]
+					!loaded ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(EmptyRow, { text: PANEL_COPY.accessNotLoaded }) : null,
+					loaded && entries.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(EmptyRow, { text: empty }) : null,
+					entries.map((entry) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+						leading: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Avatar, { text: avatar ?? entry.name ?? entry.id }),
+						label: entry.name ?? entry.id,
+						summary: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-channels-cfg__mono",
+								children: entry.id
+							}),
+							" · ",
+							sourceLabel(entry.source)
+						] }),
+						control: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--remove",
+							disabled,
+							onClick: () => onRemove(entry.id),
+							children: working ? PANEL_COPY.accessWorking : PANEL_COPY.accessRemove
+						})
+					}, entry.id)),
+					!loaded ? null : adding ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-channels-cfg__addRow",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								type: "text",
+								className: "dsh-channels-cfg__input",
+								value: id,
+								placeholder: idPlaceholder,
+								"aria-label": idPlaceholder,
+								disabled,
+								onChange: (event) => setId(event.target.value)
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								type: "text",
+								className: "dsh-channels-cfg__input",
+								value: name,
+								placeholder: namePlaceholder,
+								"aria-label": namePlaceholder,
+								disabled,
+								onChange: (event) => setName(event.target.value)
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
+								disabled: disabled || id.trim() === "",
+								onClick: () => {
+									submit();
+								},
+								children: working ? PANEL_COPY.accessWorking : PANEL_COPY.accessAdd
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--ghost",
+								onClick: () => setAdding(false),
+								children: PANEL_COPY.cancel
+							})
+						]
+					}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dsh-channels-cfg__addRow",
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+							type: "button",
+							className: "dsh-channels-cfg__link",
+							disabled,
+							onClick: () => setAdding(true),
+							children: ["＋ ", addLabel]
 						})
-					] }),
-					notice === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--ok",
-						role: "status",
-						"aria-live": "polite",
-						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: notice })
-					}),
-					error === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__fieldError",
-						role: "alert",
-						children: error
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__help",
-						children: PANEL_COPY.accessHints
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__help",
-						children: PANEL_COPY.accessChatIdHint
 					})
 				]
 			});
 		}
+		/** Pending authorization requests, settled with the same resolver as the DM card. */
+		function RequestList(props) {
+			const { requests, disabled, working, onResolve } = props;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Section, {
+				title: `${PANEL_COPY.accessRequestsTitle} · ${requests.length}`,
+				tone: "warn",
+				children: requests.map((request) => {
+					const target = request.name ?? request.targetId;
+					const where = request.kind === "user" && (request.groupName ?? request.chatId) !== void 0 ? fillCopy(PANEL_COPY.accessRequestIn, { group: request.groupName ?? request.chatId ?? "" }) : "";
+					return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+						leading: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Avatar, { text: target }),
+						label: `${target} ${where}${request.kind === "group" ? PANEL_COPY.accessRequestGroup : PANEL_COPY.accessRequestUser}`,
+						summary: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsh-channels-cfg__mono",
+							children: request.targetId
+						}), ` · ${formatAccessDate(request.createdAt)} · ${fillCopy(PANEL_COPY.accessRequestExpires, { date: formatAccessDate(request.expiresAt) })}`] }),
+						control: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "dsh-channels-cfg__inputRow",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--ghost",
+								disabled,
+								onClick: () => onResolve(request.token, "deny"),
+								children: working ? PANEL_COPY.accessWorking : PANEL_COPY.accessDeny
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
+								disabled,
+								onClick: () => onResolve(request.token, "allow"),
+								children: working ? PANEL_COPY.accessWorking : PANEL_COPY.accessAllow
+							})]
+						})
+					}, request.token);
+				})
+			});
+		}
 		//#endregion
 		//#region src/client/panel/access-tab.tsx
 		/**
-		* 「访问授权」tab：准入与授权字段表单（管理员 user_id / 准入模式 /
-		* 申请有效期）+ 白名单与待处理申请卡。表单保存走全局 draft，白名单
-		* 增删是独立即时 mutation。
+		* 「访问授权」tab：待处理申请（有才显示，置顶）、准入字段（调试模式 /
+		* 管理员 / 申请有效期）与群、用户白名单。字段保存走全局 draft，白名单增删
+		* 与申请处理是独立即时 mutation。
+		*
+		* `access.loaded === false`（飞书未连接、插件 storage 域未打开）时白名单与
+		* 申请列表是「未知」而不是「空」，因此只渲染连接提示并禁用全部写操作。
 		*
 		* @module dsh-channels/client/panel/access-tab
 		*/
 		function AccessTab(props) {
 			const { form, accessNotice, accessError, onAddGroup, onRemoveGroup, onAddUser, onRemoveUser, onResolveRequest } = props;
+			const { access } = form.panel;
+			const working = form.busy === "access";
+			const disabled = form.busy !== null || form.locked || !access.loaded;
+			const ownerAdmin = access.mode === "guarded" && access.admin.source === "owner" ? access.admin.userId : void 0;
+			const fields = ownerAdmin === void 0 ? form.fields : form.fields.map((field) => field.key === "adminUserId" ? {
+				...field,
+				summary: fillCopy(PANEL_COPY.accessAdminOwnerSummary, { id: ownerAdmin })
+			} : field);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "dsh-channels-cfg__tabBody",
 				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(TabHelp, { text: PANEL_COPY.accessTabHelp }),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(FieldsCard, {
-						form,
+					accessNotice === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(NoticeBar, {
+						kind: "ok",
+						text: accessNotice
+					}),
+					accessError === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(NoticeBar, {
+						kind: "error",
+						text: accessError
+					}),
+					access.loaded && access.mode === "guarded" && !access.admin.configured ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(NoticeBar, {
+						kind: "error",
+						text: access.admin.ownerLookupError === void 0 ? PANEL_COPY.accessAdminMissingWarning : `${PANEL_COPY.accessAdminMissingWarning}（${access.admin.ownerLookupError}）`
+					}) : null,
+					access.loaded && access.requests.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(RequestList, {
+						requests: access.requests,
+						disabled,
+						working,
+						onResolve: onResolveRequest
+					}) : null,
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(FieldSections, {
+						form: {
+							...form,
+							fields
+						},
 						groups: TAB_FIELD_GROUPS.access
 					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SaveBar, {
-						form,
-						tab: "access"
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Whitelist, {
+						title: PANEL_COPY.accessGroupsTitle,
+						entries: access.groups.map((group) => ({
+							id: group.chatId,
+							name: group.name,
+							source: group.source
+						})),
+						avatar: "群",
+						empty: PANEL_COPY.accessGroupsEmpty,
+						loaded: access.loaded,
+						addLabel: PANEL_COPY.accessAddGroup,
+						idPlaceholder: PANEL_COPY.accessGroupChatIdPlaceholder,
+						namePlaceholder: PANEL_COPY.accessGroupNamePlaceholder,
+						disabled,
+						working,
+						onAdd: onAddGroup,
+						onRemove: onRemoveGroup
 					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccessCard, {
-						panel: form.panel,
-						busy: form.busy,
-						locked: form.locked,
-						notice: accessNotice,
-						error: accessError,
-						onAddGroup,
-						onRemoveGroup,
-						onAddUser,
-						onRemoveUser,
-						onResolveRequest
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Whitelist, {
+						title: PANEL_COPY.accessUsersTitle,
+						entries: access.users.map((user) => ({
+							id: user.userId,
+							name: user.name,
+							source: user.source
+						})),
+						empty: PANEL_COPY.accessUsersEmpty,
+						loaded: access.loaded,
+						addLabel: PANEL_COPY.accessAddUser,
+						idPlaceholder: PANEL_COPY.accessUserIdPlaceholder,
+						namePlaceholder: PANEL_COPY.accessUserNamePlaceholder,
+						disabled,
+						working,
+						onAdd: onAddUser,
+						onRemove: onRemoveUser
 					})
 				]
 			});
 		}
 		//#endregion
-		//#region src/client/panel/advanced-tab.tsx
+		//#region src/client/panel/credentials-card.tsx
 		/**
-		* 「高级」tab：流式刷新等低层字段 + 只读部署信息（overlayPath / version /
-		* 部署级参数）+ 「清除 Web 覆盖」。清除覆盖是整体动作，不走 draft。
+		* 凭据行：值经 Host 的 DSH 凭据服务写入本机凭据库，面板只显示「已配置 /
+		* 未配置」，两个方向都不回显已存值。已配置时只显示「更换 / 移除」，点「更换」
+		* 才出现输入框。保存动作由页面外壳持有（凭据保存独立于配置 draft）。
 		*
-		* @module dsh-channels/client/panel/advanced-tab
+		* @module dsh-channels/client/panel/credentials-card
 		*/
-		function AdvancedTab(props) {
-			const { form, onClear } = props;
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: "dsh-channels-cfg__tabBody",
-				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(TabHelp, { text: PANEL_COPY.advancedTabHelp }),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(FieldsCard, {
-						form,
-						groups: TAB_FIELD_GROUPS.advanced
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SaveBar, {
-						form,
-						tab: "advanced"
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(AdvancedCard, {
-						panel: form.panel,
-						busy: form.busy,
-						locked: form.locked,
-						onClear
-					})
-				]
+		/** One credential slot as a setting row with its own input and actions. */
+		function CredentialRow(props) {
+			const { label, summary, state, value, secret, placeholder, issue, busy, disabled, onChange, onSave, onClear } = props;
+			const [editing, setEditing] = (0, react.useState)(false);
+			const previousBusy = (0, react.useRef)(busy);
+			(0, react.useEffect)(() => {
+				if (previousBusy.current === "credentials" && busy === null) setEditing(false);
+				previousBusy.current = busy;
+			}, [busy]);
+			const showInput = !state.configured || editing || value !== "";
+			const source = `${PANEL_COPY.credentialStore} · ${state.ref}${state.source === void 0 ? "" : ` · ${state.source}`}`;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+				label,
+				tags: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Pill, {
+					tone: state.configured ? "ok" : "muted",
+					children: state.configured ? PANEL_COPY.credentialConfigured : PANEL_COPY.credentialMissing
+				}),
+				summary: summary === void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					className: "dsh-channels-cfg__mono",
+					children: source
+				}) : summary,
+				error: issue?.message ?? (state.writable ? void 0 : PANEL_COPY.credentialReadOnly),
+				control: showInput ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dsh-channels-cfg__inputRow",
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+							type: secret ? "password" : "text",
+							className: `dsh-channels-cfg__input dsh-channels-cfg__input--text${issue === void 0 ? "" : " dsh-channels-cfg__input--invalid"}`,
+							value,
+							placeholder,
+							autoComplete: "new-password",
+							"aria-label": label,
+							disabled,
+							onChange: (event) => onChange(event.target.value)
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
+							disabled: disabled || value.trim() === "",
+							onClick: onSave,
+							children: busy === "credentials" ? PANEL_COPY.savingCredentials : PANEL_COPY.saveCredentials
+						}),
+						state.configured ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--ghost",
+							disabled: busy !== null,
+							onClick: () => {
+								setEditing(false);
+								onChange("");
+							},
+							children: PANEL_COPY.cancel
+						}) : null
+					]
+				}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dsh-channels-cfg__inputRow",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						className: "dsh-channels-cfg__btn",
+						disabled,
+						onClick: () => setEditing(true),
+						children: PANEL_COPY.replaceCredential
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--remove",
+						disabled,
+						onClick: onClear,
+						children: busy === "credentials-clear" ? PANEL_COPY.removingCredential : PANEL_COPY.removeCredential
+					})]
+				})
 			});
 		}
-		/** Read-only deployment facts; the only write action here drops the overlay file. */
-		function AdvancedCard(props) {
-			const { panel, busy, locked, onClear } = props;
-			const { readOnly } = panel.config;
-			const overridden = panel.config.overriddenKeys.length;
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
-				className: "dsh-channels-cfg__card",
-				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__cardHead",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__cardTitle",
-							children: PANEL_COPY.advancedCard
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__cardMeta",
-							children: overridden === 0 ? PANEL_COPY.inherited : `${PANEL_COPY.overridden} ${overridden} 项`
-						})]
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__help",
-						children: PANEL_COPY.advancedHelp
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-						className: "dsh-channels-cfg__labelRow",
-						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__cardTitle",
-							children: PANEL_COPY.readOnlyCard
-						})
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__readOnly",
-						children: [
-							readOnly.map((field) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-								className: "dsh-channels-cfg__kv",
-								children: [
-									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										className: "dsh-channels-cfg__kvKey",
-										children: field.label
-									}),
-									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										className: "dsh-channels-cfg__kvValue",
-										children: field.value
-									}),
-									field.help === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										className: "dsh-channels-cfg__help",
-										children: field.help
-									})
-								]
-							}, field.key)),
-							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-								className: "dsh-channels-cfg__kv",
-								children: [
-									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										className: "dsh-channels-cfg__kvKey",
-										children: PANEL_COPY.overlayPath
-									}),
-									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										className: "dsh-channels-cfg__kvValue dsh-channels-cfg__mono",
-										children: panel.status.overlayPath
-									}),
-									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										className: "dsh-channels-cfg__help",
-										children: PANEL_COPY.overlayPathHelp
-									})
-								]
-							}),
-							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-								className: "dsh-channels-cfg__kv",
-								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									className: "dsh-channels-cfg__kvKey",
-									children: PANEL_COPY.version
-								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									className: "dsh-channels-cfg__kvValue dsh-channels-cfg__mono",
-									children: panel.status.version
-								})]
-							})
-						]
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__actions",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-							type: "button",
-							className: "dsh-channels-cfg__btn",
-							onClick: onClear,
-							disabled: overridden === 0 || busy !== null || locked,
-							children: busy === "clear" ? PANEL_COPY.clearing : PANEL_COPY.clear
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__help",
-							children: overridden === 0 ? PANEL_COPY.noOverrides : `${PANEL_COPY.overridden} ${overridden} 项`
-						})]
-					})
-				]
+		/** The Feishu application pair (App ID / App Secret). */
+		function CredentialsSection(props) {
+			const { panel, credentials } = props;
+			const { appId, appSecret, issues, busy, locked, onAppIdChange, onAppSecretChange, onSave, onClear } = credentials;
+			const appIdState = panel.config.credentials.appId;
+			const appSecretState = panel.config.credentials.appSecret;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Section, {
+				title: PANEL_COPY.credentialsTitle,
+				footnote: PANEL_COPY.credentialsHint,
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(CredentialRow, {
+					label: PANEL_COPY.appIdLabel,
+					state: appIdState,
+					value: appId,
+					secret: false,
+					placeholder: PANEL_COPY.appIdPlaceholder,
+					issue: issues.find((item) => item.key === "appId"),
+					busy,
+					disabled: busy !== null || locked || !appIdState.writable,
+					onChange: onAppIdChange,
+					onSave,
+					onClear: () => onClear("appId")
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CredentialRow, {
+					label: PANEL_COPY.appSecretLabel,
+					state: appSecretState,
+					value: appSecret,
+					secret: true,
+					placeholder: PANEL_COPY.appSecretPlaceholder,
+					issue: issues.find((item) => item.key === "appSecret"),
+					busy,
+					disabled: busy !== null || locked || !appSecretState.writable,
+					onChange: onAppSecretChange,
+					onSave,
+					onClear: () => onClear("appSecret")
+				})]
 			});
 		}
 		//#endregion
-		//#region src/client/panel/credentials-card.tsx
+		//#region src/client/panel/advanced-tab.tsx
 		/**
-		* 飞书应用凭据编辑器：值经 Host 的 DSH 凭据服务写入本机凭据库，面板只显示
-		* 「已配置 / 未配置」，两个方向都不回显已存值。保存动作由页面外壳持有
-		* （凭据保存独立于配置 draft）。
+		* 「高级」tab：日志分析接口（监听地址字段 + 访问令牌凭据行）、SDK 日志级别
+		* 与 Web 覆盖文件（「恢复 profile 配置」删除整个覆盖层，不走 draft）。
 		*
-		* @module dsh-channels/client/panel/credentials-card
+		* @module dsh-channels/client/panel/advanced-tab
 		*/
-		function CredentialsCard(props) {
-			const { panel, credentials } = props;
-			const { appId, appSecret, issues, busy, locked, onAppIdChange, onAppSecretChange, onSave, onClear } = credentials;
-			const appIdState = panel.config.credentials.appId;
-			const appSecretState = panel.config.credentials.appSecret;
-			const configured = appIdState.configured && appSecretState.configured;
-			const writable = appIdState.writable || appSecretState.writable;
-			const disabled = busy !== null || locked || !writable;
-			const pending = appId.trim() !== "" || appSecret.trim() !== "";
-			const row = (field, label, state, value, type, placeholder, onChange) => {
-				const issue = issues.find((item) => item.key === field);
-				const inputClass = `dsh-channels-cfg__input${issue === void 0 ? "" : " dsh-channels-cfg__input--invalid"}`;
-				return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-					className: "dsh-channels-cfg__field",
-					children: [
-						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: "dsh-channels-cfg__labelRow",
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-								className: "dsh-channels-cfg__label",
-								children: label
-							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-								className: `dsh-channels-cfg__badge dsh-channels-cfg__badge--${state.configured ? "ok" : "bad"}`,
-								children: state.configured ? PANEL_COPY.credentialConfigured : PANEL_COPY.credentialMissing
-							})]
-						}),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: "dsh-channels-cfg__cred",
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-								type,
-								className: inputClass,
-								value,
-								placeholder,
-								autoComplete: "new-password",
-								"aria-label": label,
-								disabled,
-								onChange: (event) => onChange(event.target.value)
-							}), state.configured ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-								type: "button",
-								className: "dsh-channels-cfg__btn",
-								disabled,
-								onClick: () => onClear(field),
-								children: busy === "credentials-clear" ? PANEL_COPY.removingCredential : PANEL_COPY.removeCredential
-							}) : null]
-						}),
-						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-							className: "dsh-channels-cfg__help",
-							children: [
-								PANEL_COPY.credentialsRef,
-								"：",
-								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									className: "dsh-channels-cfg__mono",
-									children: state.ref
-								}),
-								state.source === void 0 ? "" : ` · ${state.source}`
-							]
-						}),
-						issue === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__fieldError",
-							children: issue.message
-						})
-					]
-				}, field);
-			};
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
-				className: "dsh-channels-cfg__card",
-				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__cardHead",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__cardTitle",
-							children: PANEL_COPY.credentialsCard
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: `dsh-channels-cfg__badge dsh-channels-cfg__badge--${configured ? "ok" : "muted"}`,
-							children: configured ? PANEL_COPY.configuredBadge : PANEL_COPY.unconfiguredBadge
-						})]
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__help",
-						children: PANEL_COPY.credentialsCardHelp
-					}),
-					row("appId", PANEL_COPY.appIdLabel, appIdState, appId, "text", PANEL_COPY.appIdPlaceholder, onAppIdChange),
-					row("appSecret", PANEL_COPY.appSecretLabel, appSecretState, appSecret, "password", PANEL_COPY.appSecretPlaceholder, onAppSecretChange),
-					writable ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__fieldError",
-						children: PANEL_COPY.credentialReadOnly
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__footer",
-						children: [
-							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-								type: "button",
-								className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
-								onClick: onSave,
-								disabled: disabled || !pending,
-								children: busy === "credentials" ? PANEL_COPY.savingCredentials : PANEL_COPY.saveCredentials
-							}),
-							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "dsh-channels-cfg__spacer" }),
-							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-								className: "dsh-channels-cfg__help",
-								children: PANEL_COPY.credentialsPendingHint
-							})
-						]
+		function AdvancedTab(props) {
+			const { form, analyzeToken, onClear } = props;
+			const { panel, busy, locked } = form;
+			const tokenState = panel.config.credentials.analyzeToken;
+			const overridden = panel.config.overriddenKeys.length;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dsh-channels-cfg__tabBody",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(FieldSections, {
+					form,
+					groups: TAB_FIELD_GROUPS.advanced,
+					extra: { analyze: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CredentialRow, {
+						label: PANEL_COPY.analyzeTokenLabel,
+						summary: PANEL_COPY.analyzeTokenSummary,
+						state: tokenState,
+						value: analyzeToken.value,
+						secret: true,
+						placeholder: PANEL_COPY.analyzeTokenPlaceholder,
+						issue: analyzeToken.issues.find((item) => item.key === "analyzeToken"),
+						busy: analyzeToken.busy,
+						disabled: analyzeToken.busy !== null || analyzeToken.locked || !tokenState.writable,
+						onChange: analyzeToken.onChange,
+						onSave: analyzeToken.onSave,
+						onClear: analyzeToken.onClear
+					}) }
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Section, {
+					title: PANEL_COPY.overlayTitle,
+					children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+						label: PANEL_COPY.overlayPath,
+						summary: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsh-channels-cfg__mono",
+							children: panel.status.overlayPath
+						}),
+						details: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+							PANEL_COPY.overlayPathHelp,
+							" ",
+							overridden === 0 ? PANEL_COPY.noOverrides : fillCopy(PANEL_COPY.overlayCount, { n: overridden })
+						] }),
+						control: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--danger",
+							onClick: onClear,
+							disabled: overridden === 0 || busy !== null || locked,
+							children: busy === "clear" ? PANEL_COPY.clearing : PANEL_COPY.clear
+						})
 					})
-				]
+				})]
 			});
 		}
 		//#endregion
 		//#region src/client/panel/connection-tab.tsx
 		/**
-		* 「连接」tab：按 Host 派生的生命周期阶段渲染连接引导。
+		* 「连接」tab：按 Host 派生的生命周期阶段渲染。
 		*
-		* - unconfigured：onboarding 三步 + 凭据卡（不渲染可用的「连接」按钮）
-		* - idle：连接信息卡 + 「连接飞书」
-		* - error：连接信息卡 + 最近一次连接失败 + 「重试」
-		* - connected：连接信息卡 + 「重启飞书连接」+ 凭据卡
-		* - connecting：禁用按钮显示「连接中…」
-		* - 已连接且权限自检完成：权限自检卡（缺失权限红字 + 开发者后台深链）
+		* - unconfigured：上手三步 + 应用凭据
+		* - idle / error / connecting / connected：状态块（当前阶段的唯一操作 + 运行数字）
+		* - 连接后：自检（权限缺口可展开、斜杠指令面板同步结果）
+		* - 有需重连才生效的已保存配置：顶部「重启连接」横幅
 		*
 		* @module dsh-channels/client/panel/connection-tab
 		*/
 		function ConnectionTab(props) {
 			const { panel, status, busy, credentials, onReconnect } = props;
+			const checks = status.scopeCheck !== void 0 || status.slashCommandSync !== void 0;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "dsh-channels-cfg__tabBody",
 				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(TabHelp, { text: PANEL_COPY.connectionTabHelp }),
 					panel.config.restartPendingKeys.length === 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(RestartBanner, {
 						panel,
 						busy,
 						locked: status.busy,
 						onReconnect
 					}),
-					status.phase === "unconfigured" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(OnboardingCard, { status }) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ConnectionInfoCard, {
+					status.phase === "unconfigured" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(OnboardingSection, { status }) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(StatusBlock, {
 						status,
 						busy,
 						onReconnect
 					}),
-					status.scopeCheck === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ScopeCheckCard, { check: status.scopeCheck }),
-					status.slashCommandSync === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SlashCommandSyncCard, { sync: status.slashCommandSync }),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(CredentialsCard, {
+					checks ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Section, {
+						title: PANEL_COPY.checksTitle,
+						children: [status.scopeCheck === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ScopeCheckRow, { check: status.scopeCheck }), status.slashCommandSync === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SlashCommandSyncRow, { sync: status.slashCommandSync })]
+					}) : null,
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(CredentialsSection, {
 						panel,
 						credentials
 					})
@@ -1840,7 +1889,7 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/** First-run guide: create the app, fill the credentials, save and wait. */
-		function OnboardingCard(props) {
+		function OnboardingSection(props) {
 			const { status } = props;
 			const steps = [
 				{
@@ -1856,22 +1905,12 @@ window.__ModuleLoader__.load({
 					text: PANEL_COPY.onboardingStep3Text
 				}
 			];
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
-				className: "dsh-channels-cfg__card",
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dsh-channels-cfg__hero",
 				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__cardHead",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__cardTitle",
-							children: PANEL_COPY.onboardingTitle
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__badge dsh-channels-cfg__badge--muted",
-							children: PANEL_COPY.phaseUnconfigured
-						})]
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__help",
-						children: PANEL_COPY.onboardingIntro
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dsh-channels-cfg__heroTop",
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: PANEL_COPY.onboardingTitle })
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("ol", {
 						className: "dsh-channels-cfg__steps",
@@ -1886,50 +1925,29 @@ window.__ModuleLoader__.load({
 									className: "dsh-channels-cfg__stepTitle",
 									children: step.title
 								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-									className: "dsh-channels-cfg__help",
+									className: "dsh-channels-cfg__rowSummary",
 									children: step.text
 								})]
 							})]
 						}, step.title))
 					}),
-					status.missingConfig.length === 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__banner",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("strong", { children: [PANEL_COPY.missingConfig, "："] }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: status.missingConfig.join("、") })]
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__help",
-						children: PANEL_COPY.statusHintUnconfigured
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__help",
-						children: PANEL_COPY.onboardingDocsHint
+					status.missingConfig.length === 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+						className: "dsh-channels-cfg__rowSummary",
+						children: [
+							PANEL_COPY.missingConfig,
+							"：",
+							status.missingConfig.join("、")
+						]
 					})
 				]
 			});
 		}
-		/** Runtime facts plus the one lifecycle action available in the current phase. */
-		function ConnectionInfoCard(props) {
+		/** Phase, the one lifecycle action available in it, and the runtime counters. */
+		function StatusBlock(props) {
 			const { status, busy, onReconnect } = props;
 			const badge = phaseBadge(status.phase);
 			const actionBusy = busy !== null || status.busy;
-			const connection = connectionStateLabel(status.connection?.state);
-			const facts = [
-				{
-					label: PANEL_COPY.statusCard,
-					value: badge.text
-				},
-				{
-					label: PANEL_COPY.connectionStateLabel,
-					value: connection.text
-				},
-				{
-					label: PANEL_COPY.botOpenId,
-					value: status.botOpenIdTail ?? PANEL_COPY.unknownValue
-				},
-				{
-					label: PANEL_COPY.uptime,
-					value: formatUptime(status.uptimeMs)
-				},
+			const stats = [
 				{
 					label: PANEL_COPY.routeCount,
 					value: String(status.routeCount)
@@ -1941,188 +1959,167 @@ window.__ModuleLoader__.load({
 				{
 					label: PANEL_COPY.inflightTurnCount,
 					value: String(status.inflightTurnCount)
+				},
+				{
+					label: PANEL_COPY.botOpenId,
+					value: status.botOpenIdTail ?? PANEL_COPY.unknownValue,
+					mono: true
 				}
 			];
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
-				className: "dsh-channels-cfg__card",
+			let action = null;
+			if (status.phase === "connecting") action = /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+				type: "button",
+				className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
+				disabled: true,
+				children: PANEL_COPY.connecting
+			});
+			else if (status.phase === "idle" || status.phase === "error") action = /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+				type: "button",
+				className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
+				onClick: onReconnect,
+				disabled: actionBusy,
+				children: busy === "reconnect" ? PANEL_COPY.connecting : status.phase === "idle" ? PANEL_COPY.connect : PANEL_COPY.retry
+			});
+			else if (status.phase === "connected") action = /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+				type: "button",
+				className: "dsh-channels-cfg__btn",
+				onClick: onReconnect,
+				disabled: actionBusy,
+				children: busy === "reconnect" ? PANEL_COPY.reconnecting : PANEL_COPY.reconnect
+			});
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dsh-channels-cfg__hero",
 				children: [
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__cardHead",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__cardTitle",
-							children: PANEL_COPY.connectionInfo
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: `dsh-channels-cfg__badge dsh-channels-cfg__badge--${status.configured ? "ok" : "bad"}`,
-							children: status.configured ? PANEL_COPY.configuredBadge : PANEL_COPY.unconfiguredBadge
-						})]
+						className: "dsh-channels-cfg__heroTop",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Pill, {
+								tone: badge.tone,
+								dot: true,
+								children: badge.text
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: phaseSummary(status.phase) }),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "dsh-channels-cfg__spacer" }),
+							action
+						]
 					}),
 					status.lastStartError === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--error",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: PANEL_COPY.lastError }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__mono",
-							children: status.lastStartError
-						})]
+						children: [
+							PANEL_COPY.lastError,
+							"：",
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-channels-cfg__mono",
+								children: status.lastStartError
+							})
+						]
 					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-						className: "dsh-channels-cfg__facts",
-						children: facts.map((fact) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: "dsh-channels-cfg__fact",
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-								className: "dsh-channels-cfg__factLabel",
-								children: fact.label
-							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-								className: "dsh-channels-cfg__factValue",
-								children: fact.value
+					status.phase === "connected" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dsh-channels-cfg__stats",
+						children: stats.map((stat) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "dsh-channels-cfg__stat",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: stat.label }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", {
+								className: stat.mono === true ? "dsh-channels-cfg__mono" : void 0,
+								children: stat.value
 							})]
-						}, fact.label))
-					}),
+						}, stat.label))
+					}) : null,
 					status.reasons.length === 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-						className: `dsh-channels-cfg__help${status.level === "unhealthy" ? " dsh-channels-cfg__reasonBad" : ""}`,
+						className: `dsh-channels-cfg__rowSummary${status.level === "unhealthy" ? " dsh-channels-cfg__textBad" : ""}`,
 						children: [
 							PANEL_COPY.healthReasons,
 							"：",
 							status.reasons.join("；")
 						]
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__actions",
-						children: [
-							status.phase === "connecting" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-								type: "button",
-								className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
-								disabled: true,
-								children: PANEL_COPY.connecting
-							}) : null,
-							status.phase === "idle" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-								type: "button",
-								className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
-								onClick: onReconnect,
-								disabled: actionBusy,
-								children: busy === "reconnect" ? PANEL_COPY.connecting : PANEL_COPY.connect
-							}) : null,
-							status.phase === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-								type: "button",
-								className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--primary",
-								onClick: onReconnect,
-								disabled: actionBusy,
-								children: busy === "reconnect" ? PANEL_COPY.connecting : PANEL_COPY.retry
-							}) : null,
-							status.phase === "connected" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-								type: "button",
-								className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--danger",
-								onClick: onReconnect,
-								disabled: actionBusy,
-								children: busy === "reconnect" ? PANEL_COPY.reconnecting : PANEL_COPY.reconnect
-							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-								className: "dsh-channels-cfg__help",
-								children: PANEL_COPY.restartWarning
-							})] }) : null
-						]
 					})
 				]
 			});
 		}
-		/** Post-connect scope self-check: missing scopes in red, each with a console deep link. */
-		function ScopeCheckCard(props) {
+		/** Status icon in front of one check row. */
+		function CheckIcon(props) {
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+				className: `dsh-channels-cfg__checkIcon dsh-channels-cfg__checkIcon--${props.tone}`,
+				"aria-hidden": "true",
+				children: props.tone === "ok" ? "✓" : "!"
+			});
+		}
+		/** Post-connect scope self-check: the gap count, expandable to each scope with its console link. */
+		function ScopeCheckRow(props) {
 			const { check } = props;
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
-				className: "dsh-channels-cfg__card",
-				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-						className: "dsh-channels-cfg__cardHead",
-						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__cardTitle",
-							children: PANEL_COPY.scopeCheckTitle
-						})
+			const [open, setOpen] = (0, react.useState)(false);
+			if (check.state === "ok") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+				leading: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CheckIcon, { tone: "ok" }),
+				label: PANEL_COPY.scopeCheckOk
+			});
+			if (check.state === "error") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+				leading: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CheckIcon, { tone: "bad" }),
+				label: PANEL_COPY.scopeCheckError,
+				summary: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					className: "dsh-channels-cfg__mono",
+					children: check.error
+				})
+			});
+			const required = check.missing.filter((item) => item.level === "required").length;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+				leading: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CheckIcon, { tone: required > 0 ? "bad" : "warn" }),
+				label: required > 0 ? fillCopy(PANEL_COPY.scopeCheckMissingRequired, { n: required }) : fillCopy(PANEL_COPY.scopeCheckMissing, { n: check.missing.length }),
+				summary: required > 0 ? PANEL_COPY.scopeCheckPublish : PANEL_COPY.scopeCheckMissingOptional,
+				control: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dsh-channels-cfg__inputRow",
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						className: "dsh-channels-cfg__more",
+						"aria-expanded": open,
+						onClick: () => setOpen(!open),
+						children: open ? PANEL_COPY.collapse : PANEL_COPY.expand
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+						className: "dsh-channels-cfg__btn",
+						href: check.consoleUrl,
+						target: "_blank",
+						rel: "noreferrer noopener",
+						children: PANEL_COPY.scopeCheckOpenAll
+					})]
+				})
+			}), open ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+				className: "dsh-channels-cfg__scopeList",
+				children: check.missing.map((item) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", { children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+						className: "dsh-channels-cfg__mono",
+						children: item.scopes.join(" / ")
 					}),
-					check.state === "ok" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--ok",
-						children: PANEL_COPY.scopeCheckOk
-					}) : null,
-					check.state === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--error",
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: PANEL_COPY.scopeCheckError }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__mono",
-							children: check.error
-						})]
+					item.level === "required" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Pill, {
+						tone: "bad",
+						children: PANEL_COPY.scopeCheckRequired
 					}) : null,
-					check.state === "missing" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--error",
-						children: [
-							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: PANEL_COPY.scopeCheckMissing }),
-							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
-								className: "dsh-channels-cfg__scopeList",
-								children: check.missing.map((item) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", { children: [
-									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
-										"[",
-										item.level === "required" ? PANEL_COPY.scopeCheckRequired : PANEL_COPY.scopeCheckOptional,
-										"] "
-									] }),
-									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										className: "dsh-channels-cfg__mono",
-										children: item.scopes.join(" / ")
-									}),
-									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
-										"：",
-										item.purpose,
-										" "
-									] }),
-									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
-										href: item.consoleUrl,
-										target: "_blank",
-										rel: "noreferrer noopener",
-										children: PANEL_COPY.scopeCheckOpenOne
-									})
-								] }, item.scopes.join(",")))
-							}),
-							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
-								href: check.consoleUrl,
-								target: "_blank",
-								rel: "noreferrer noopener",
-								children: PANEL_COPY.scopeCheckOpenAll
-							})
-						]
-					}) : null
-				]
-			});
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: item.purpose }),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+						className: "dsh-channels-cfg__link",
+						href: item.consoleUrl,
+						target: "_blank",
+						rel: "noreferrer noopener",
+						children: PANEL_COPY.scopeCheckOpenOne
+					})
+				] }, item.scopes.join(",")))
+			}) : null] });
 		}
-		/** Post-connect native slash-command panel sync: counts on success, the Feishu reason on failure. */
-		function SlashCommandSyncCard(props) {
+		/** Post-connect native slash-command panel sync: the command count, or the Feishu reason. */
+		function SlashCommandSyncRow(props) {
 			const { sync } = props;
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
-				className: "dsh-channels-cfg__card",
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-					className: "dsh-channels-cfg__cardHead",
-					children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__cardTitle",
-						children: PANEL_COPY.slashCommandSyncTitle
-					})
-				}), sync.state === "ok" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-					className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--ok",
-					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [PANEL_COPY.slashCommandSyncOk, " "] }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
-						PANEL_COPY.slashCommandSyncTotal,
-						" ",
-						sync.total,
-						" · ",
-						PANEL_COPY.slashCommandSyncCreated,
-						" ",
-						sync.created,
-						" · ",
-						PANEL_COPY.slashCommandSyncUpdated,
-						" ",
-						sync.updated,
-						" · ",
-						PANEL_COPY.slashCommandSyncRemoved,
-						" ",
-						sync.removed
-					] })]
-				}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-					className: "dsh-channels-cfg__notice dsh-channels-cfg__notice--error",
-					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: PANEL_COPY.slashCommandSyncError }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+			return sync.state === "ok" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+				leading: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CheckIcon, { tone: "ok" }),
+				label: PANEL_COPY.slashCommandSyncTitle,
+				summary: fillCopy(PANEL_COPY.slashCommandSyncOk, { total: sync.total })
+			}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Row, {
+				leading: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(CheckIcon, { tone: "warn" }),
+				label: PANEL_COPY.slashCommandSyncTitle,
+				summary: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+					PANEL_COPY.slashCommandSyncError,
+					"：",
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 						className: "dsh-channels-cfg__mono",
 						children: sync.error
-					})]
-				})]
+					})
+				] })
 			});
 		}
 		/** Config saved but only applied on the next connect: offer the one-click restart. */
@@ -2131,97 +2128,82 @@ window.__ModuleLoader__.load({
 			const keys = panel.config.restartPendingKeys.map((key) => fieldLabel(panel.config.fields, key)).join("、");
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "dsh-channels-cfg__banner",
-				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [PANEL_COPY.restartBanner, keys] }),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-						type: "button",
-						className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--danger",
-						onClick: onReconnect,
-						disabled: busy !== null || locked,
-						children: busy === "reconnect" ? PANEL_COPY.reconnecting : PANEL_COPY.reconnect
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__help",
-						children: PANEL_COPY.restartWarning
-					})
-				]
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+					className: "dsh-channels-cfg__bannerText",
+					children: [PANEL_COPY.restartBanner, keys]
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+					type: "button",
+					className: "dsh-channels-cfg__btn",
+					onClick: onReconnect,
+					disabled: busy !== null || locked,
+					children: busy === "reconnect" ? PANEL_COPY.reconnecting : PANEL_COPY.reconnect
+				})]
 			});
 		}
 		//#endregion
-		//#region src/client/panel/model-tab.tsx
-		/**
-		* 「模型」tab：模型服务商 / 模型 id / 推理档位 / Agent 预设四个选择器。
-		* 选项来自 Host 实时目录（页面外壳负责 provider→model→effort 级联刷新），
-		* 目录读取中时在表单上方提示。
-		*
-		* @module dsh-channels/client/panel/model-tab
-		*/
-		function ModelTab(props) {
-			const { form, catalogBusy } = props;
+		//#region src/client/panel/fields-tab.tsx
+		/** Footnotes under one group's section, per group. */
+		const FOOTNOTES = { model: PANEL_COPY.modelFootnote };
+		function FieldsTab(props) {
+			const { form, tab, note } = props;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "dsh-channels-cfg__tabBody",
-				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(TabHelp, { text: PANEL_COPY.modelTabHelp }),
-					catalogBusy ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-						className: "dsh-channels-cfg__help",
-						children: PANEL_COPY.catalogLoading
-					}) : null,
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(FieldsCard, {
-						form,
-						groups: TAB_FIELD_GROUPS.model
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SaveBar, {
-						form,
-						tab: "model"
-					})
-				]
+				children: [note === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+					className: "dsh-channels-cfg__secFoot",
+					children: note
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(FieldSections, {
+					form,
+					groups: TAB_FIELD_GROUPS[tab],
+					footnotes: FOOTNOTES
+				})]
 			});
 		}
 		//#endregion
-		//#region src/client/panel/sessions-tab.tsx
+		//#region src/client/panel/wiki-tab.tsx
 		/**
-		* 「会话与行为」tab：行为 + 内容与附件两组字段（私聊/群聊触发方式、
-		* 首次引导、权限切换、附件接收）。表单字段完全由 Host 描述驱动。
+		* 「知识库」tab：知识库工具字段（读取 / 编辑开关、可访问范围）+ 知识库
+		* 白名单（「可使用的人」）。字段保存走全局 draft，白名单增删是独立即时
+		* mutation。
 		*
-		* @module dsh-channels/client/panel/sessions-tab
+		* @module dsh-channels/client/panel/wiki-tab
 		*/
-		function SessionsTab(props) {
-			const { form } = props;
+		function WikiTab(props) {
+			const { form, accessNotice, accessError, onAddUser, onRemoveUser } = props;
+			const { access } = form.panel;
+			const disabled = form.busy !== null || form.locked || !access.loaded;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "dsh-channels-cfg__tabBody",
 				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(TabHelp, { text: PANEL_COPY.sessionsTabHelp }),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(FieldsCard, {
-						form,
-						groups: TAB_FIELD_GROUPS.sessions
+					accessNotice === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(NoticeBar, {
+						kind: "ok",
+						text: accessNotice
 					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SaveBar, {
-						form,
-						tab: "sessions"
-					})
-				]
-			});
-		}
-		//#endregion
-		//#region src/client/panel/workspace-tab.tsx
-		/**
-		* 「工作区」tab：工作区根目录字段与保存栏。
-		*
-		* @module dsh-channels/client/panel/workspace-tab
-		*/
-		function WorkspaceTab(props) {
-			const { form } = props;
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: "dsh-channels-cfg__tabBody",
-				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(TabHelp, { text: PANEL_COPY.workspaceTabHelp }),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(FieldsCard, {
-						form,
-						groups: TAB_FIELD_GROUPS.workspace
+					accessError === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(NoticeBar, {
+						kind: "error",
+						text: accessError
 					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SaveBar, {
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(FieldSections, {
 						form,
-						tab: "workspace"
+						groups: TAB_FIELD_GROUPS.wiki
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Whitelist, {
+						title: PANEL_COPY.wikiUsersTitle,
+						countLabel: fillCopy(PANEL_COPY.wikiUsersAdminPlus, { n: access.wikiUsers.length }),
+						entries: access.wikiUsers.map((user) => ({
+							id: user.userId,
+							name: user.name,
+							source: user.source
+						})),
+						empty: PANEL_COPY.wikiUsersEmpty,
+						loaded: access.loaded,
+						addLabel: PANEL_COPY.accessAddUser,
+						idPlaceholder: PANEL_COPY.accessUserIdPlaceholder,
+						namePlaceholder: PANEL_COPY.accessUserNamePlaceholder,
+						footnote: PANEL_COPY.wikiUsersHint,
+						disabled,
+						working: form.busy === "access",
+						onAdd: onAddUser,
+						onRemove: onRemoveUser
 					})
 				]
 			});
@@ -2229,8 +2211,8 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/client/panel/index.tsx
 		/**
-		* 设置 →「飞书渠道」页面：数据加载、5 秒状态轮询、全局 draft 与顶部状态头 /
-		* tab 导航的外壳。
+		* 设置 →「飞书渠道」页面：数据加载、5 秒状态轮询、全局 draft、顶部状态头 /
+		* tab 导航与底部保存条的外壳。
 		*
 		* 所有 Host 交互（panel / status / catalog / config / credentials / access /
 		* pick-directory）都集中在这里；tab 组件只接收渲染所需的数据与
@@ -2250,6 +2232,7 @@ window.__ModuleLoader__.load({
 			const [pollError, setPollError] = (0, react.useState)(null);
 			const [appIdInput, setAppIdInput] = (0, react.useState)("");
 			const [appSecretInput, setAppSecretInput] = (0, react.useState)("");
+			const [analyzeTokenInput, setAnalyzeTokenInput] = (0, react.useState)("");
 			const [catalog, setCatalog] = (0, react.useState)(null);
 			const [catalogBusy, setCatalogBusy] = (0, react.useState)(false);
 			const [accessNotice, setAccessNotice] = (0, react.useState)(null);
@@ -2278,6 +2261,7 @@ window.__ModuleLoader__.load({
 					setDraft({});
 					setAppIdInput("");
 					setAppSecretInput("");
+					setAnalyzeTokenInput("");
 				} catch (error) {
 					setLoad({
 						phase: "error",
@@ -2494,22 +2478,14 @@ window.__ModuleLoader__.load({
 					setBusy(null);
 				}
 			}, [draft, panel]);
-			/** Drop the draft keys owned by one tab (nothing is written). */
-			const discardTab = (0, react.useCallback)((tab) => {
+			/** Drop the whole draft (nothing is written). */
+			const discardDraft = (0, react.useCallback)(() => {
 				if (panel === null) return;
-				const groups = new Set(TAB_FIELD_GROUPS[tab]);
-				const keys = new Set(panel.config.fields.filter((field) => groups.has(field.group)).map((field) => field.key));
-				setDraft((previous) => {
-					const next = { ...previous };
-					for (const key of keys) delete next[key];
-					return next;
-				});
+				setDraft({});
 				setNotice(null);
-				if (tab === "model") {
-					catalogTicket.current += 1;
-					setCatalog(catalogFromFields(panel.config.fields));
-					setCatalogBusy(false);
-				}
+				catalogTicket.current += 1;
+				setCatalog(catalogFromFields(panel.config.fields));
+				setCatalogBusy(false);
 			}, [panel]);
 			/**
 			* Open the host's native directory chooser (workspace root「选择目录…」) and
@@ -2545,6 +2521,7 @@ window.__ModuleLoader__.load({
 			}, []);
 			/** Drop every Web override and return the refreshed panel. */
 			const onClear = (0, react.useCallback)(async () => {
+				if (!(typeof window.confirm === "function" ? window.confirm(PANEL_COPY.clearConfirm) : true)) return;
 				setBusy("clear");
 				setNotice(null);
 				try {
@@ -2664,18 +2641,19 @@ window.__ModuleLoader__.load({
 					setBusy(null);
 				}
 			}, [applyAccess]);
-			const onAddAccessUser = (0, react.useCallback)(async (userId, name) => {
+			/** Add one user to a whitelist; resolves true when the input should clear. */
+			const addUser = (0, react.useCallback)(async (add, userId, name, notice) => {
 				setBusy("access");
 				setAccessError(null);
 				setAccessNotice(null);
 				try {
-					const result = await addAccessUser(userId, name);
+					const result = await add(userId, name);
 					if (!result.ok) {
 						setAccessError(result.error);
 						return false;
 					}
 					applyAccess(result.access);
-					setAccessNotice(PANEL_COPY.accessUserAdded);
+					setAccessNotice(notice);
 					return true;
 				} catch (error) {
 					setAccessError(messageOf(error));
@@ -2684,18 +2662,18 @@ window.__ModuleLoader__.load({
 					setBusy(null);
 				}
 			}, [applyAccess]);
-			const onRemoveAccessUser = (0, react.useCallback)(async (userId) => {
+			const removeUser = (0, react.useCallback)(async (remove, userId, notice) => {
 				setBusy("access");
 				setAccessError(null);
 				setAccessNotice(null);
 				try {
-					const result = await removeAccessUser(userId);
+					const result = await remove(userId);
 					if (!result.ok) {
 						setAccessError(result.error);
 						return;
 					}
 					applyAccess(result.access);
-					setAccessNotice(PANEL_COPY.accessUserRemoved);
+					setAccessNotice(notice);
 				} catch (error) {
 					setAccessError(messageOf(error));
 				} finally {
@@ -2759,6 +2737,40 @@ window.__ModuleLoader__.load({
 					setBusy(null);
 				}
 			}, [appIdInput, appSecretInput]);
+			/** Save the analyze API token; it applies to the next request, no reconnect. */
+			const onSaveAnalyzeToken = (0, react.useCallback)(async () => {
+				if (analyzeTokenInput.trim() === "") return;
+				setBusy("credentials");
+				setNotice(null);
+				try {
+					const result = await saveCredentials({ analyzeToken: analyzeTokenInput });
+					if (!result.ok) {
+						setNotice({
+							kind: "error",
+							text: result.error,
+							issues: result.issues
+						});
+						return;
+					}
+					setLoad({
+						phase: "ready",
+						panel: result.panel
+					});
+					setStatus(result.panel.status);
+					setAnalyzeTokenInput("");
+					setNotice({
+						kind: "ok",
+						text: PANEL_COPY.analyzeTokenSaved
+					});
+				} catch (error) {
+					setNotice({
+						kind: "error",
+						text: messageOf(error)
+					});
+				} finally {
+					setBusy(null);
+				}
+			}, [analyzeTokenInput]);
 			const onClearCredential = (0, react.useCallback)(async (field) => {
 				if (!(typeof window.confirm === "function" ? window.confirm(PANEL_COPY.credentialRemoveConfirm) : true)) return;
 				setBusy("credentials-clear");
@@ -2780,7 +2792,7 @@ window.__ModuleLoader__.load({
 					setStatus(result.panel.status);
 					setNotice({
 						kind: "ok",
-						text: result.reconnect === "pending" ? PANEL_COPY.credentialRemovedPending : PANEL_COPY.credentialRemoved
+						text: field === "analyzeToken" ? PANEL_COPY.analyzeTokenRemoved : result.reconnect === "pending" ? PANEL_COPY.credentialRemovedPending : PANEL_COPY.credentialRemoved
 					});
 				} catch (error) {
 					setNotice({
@@ -2793,6 +2805,7 @@ window.__ModuleLoader__.load({
 			}, []);
 			const issues = (0, react.useMemo)(() => notice?.kind === "error" ? notice.issues ?? [] : [], [notice]);
 			const dirtyCount = Object.keys(draft).length;
+			const restartCount = (0, react.useMemo)(() => (panel?.config.fields ?? []).filter((field) => field.restartRequired && field.key in draft).length, [draft, panel]);
 			/** Which tabs currently own a dirty key (the dot is per tab, not global). */
 			const dirtyTabs = (0, react.useMemo)(() => {
 				const tabs = /* @__PURE__ */ new Set();
@@ -2818,23 +2831,15 @@ window.__ModuleLoader__.load({
 					issues,
 					busy,
 					locked: hostBusy,
-					dirtyCount,
 					onChange: updateDraft,
-					onSave: () => {
-						onSave();
-					},
-					onDiscardTab: discardTab,
 					onPickDirectory
 				};
 			}, [
 				busy,
-				discardTab,
-				dirtyCount,
 				draft,
 				hostBusy,
 				issues,
 				onPickDirectory,
-				onSave,
 				panel,
 				renderedFields,
 				updateDraft
@@ -2862,6 +2867,26 @@ window.__ModuleLoader__.load({
 				onClearCredential,
 				onSaveCredentials
 			]);
+			const analyzeToken = (0, react.useMemo)(() => ({
+				value: analyzeTokenInput,
+				issues,
+				busy,
+				locked: hostBusy,
+				onChange: setAnalyzeTokenInput,
+				onSave: () => {
+					onSaveAnalyzeToken();
+				},
+				onClear: () => {
+					onClearCredential("analyzeToken");
+				}
+			}), [
+				analyzeTokenInput,
+				busy,
+				hostBusy,
+				issues,
+				onClearCredential,
+				onSaveAnalyzeToken
+			]);
 			if (load.phase === "loading") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 				className: "dsh-channels-cfg",
 				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
@@ -2904,9 +2929,17 @@ window.__ModuleLoader__.load({
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(TabNav, {
 						activeTab,
 						dirtyTabs,
+						counts: { access: load.panel.access.loaded ? load.panel.access.requests.length : 0 },
 						onChange: setActiveTab
 					}),
-					notice === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(NoticeBar, { notice }),
+					load.panel.access.mode === "open" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dsh-channels-cfg__banner",
+						children: PANEL_COPY.debugModeWarning
+					}) : null,
+					notice === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(NoticeBar, {
+						kind: notice.kind,
+						text: notice.text
+					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						role: "tabpanel",
 						id: `dsh-channels-tabpanel-${activeTab}`,
@@ -2921,12 +2954,19 @@ window.__ModuleLoader__.load({
 									onReconnect();
 								}
 							}) : null,
-							activeTab === "sessions" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SessionsTab, { form }) : null,
-							activeTab === "model" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ModelTab, {
+							activeTab === "sessions" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(FieldsTab, {
+								form,
+								tab: "sessions"
+							}) : null,
+							activeTab === "model" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(FieldsTab, {
 								form,
-								catalogBusy
+								tab: "model",
+								note: catalogBusy ? PANEL_COPY.catalogLoading : void 0
+							}) : null,
+							activeTab === "attachments" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(FieldsTab, {
+								form,
+								tab: "attachments"
 							}) : null,
-							activeTab === "workspace" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(WorkspaceTab, { form }) : null,
 							activeTab === "access" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccessTab, {
 								form,
 								accessNotice,
@@ -2935,74 +2975,100 @@ window.__ModuleLoader__.load({
 								onRemoveGroup: (chatId) => {
 									onRemoveAccessGroup(chatId);
 								},
-								onAddUser: onAddAccessUser,
+								onAddUser: (userId, name) => addUser(addAccessUser, userId, name, PANEL_COPY.accessUserAdded),
 								onRemoveUser: (userId) => {
-									onRemoveAccessUser(userId);
+									removeUser(removeAccessUser, userId, PANEL_COPY.accessUserRemoved);
 								},
 								onResolveRequest: (token, decision) => {
 									onResolveAccessRequest(token, decision);
 								}
 							}) : null,
+							activeTab === "wiki" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(WikiTab, {
+								form,
+								accessNotice,
+								accessError,
+								onAddUser: (userId, name) => addUser(addWikiUser, userId, name, PANEL_COPY.wikiUserAdded),
+								onRemoveUser: (userId) => {
+									removeUser(removeWikiUser, userId, PANEL_COPY.wikiUserRemoved);
+								}
+							}) : null,
 							activeTab === "advanced" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AdvancedTab, {
 								form,
+								analyzeToken,
 								onClear: () => {
 									onClear();
 								}
 							}) : null
 						]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(SaveBar, {
+						dirtyCount,
+						restartCount,
+						busy,
+						locked: hostBusy,
+						onSave: () => {
+							onSave();
+						},
+						onDiscard: discardDraft
 					})
 				]
 			});
 		}
-		/** Page header: title + phase badge + refresh, visible on every tab. */
+		/** Page header: title, phase pill, version and uptime, refresh; visible on every tab. */
 		function PanelHeader(props) {
 			const { status, pollError, busy, locked, onRefresh } = props;
 			const badge = phaseBadge(status.phase);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("header", {
 				className: "dsh-channels-cfg__panelHead",
-				title: PANEL_COPY.description,
-				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: "dsh-channels-cfg__headRow",
-						children: [
-							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h2", {
-								className: "dsh-channels-cfg__title",
-								children: PANEL_COPY.title
-							}),
-							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-								className: `dsh-channels-cfg__badge dsh-channels-cfg__badge--${badge.tone}`,
-								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "dsh-channels-cfg__dot" }), badge.text]
-							}),
-							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "dsh-channels-cfg__spacer" }),
-							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-								type: "button",
-								className: "dsh-channels-cfg__btn",
-								onClick: onRefresh,
-								disabled: busy !== null || locked,
-								children: PANEL_COPY.refresh
-							})
-						]
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						className: "dsh-channels-cfg__summary",
-						children: phaseSummary(status.phase)
-					}),
-					pollError === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-						className: "dsh-channels-cfg__fieldError",
-						role: "status",
-						"aria-live": "polite",
-						children: [
-							PANEL_COPY.pollFailed,
-							"：",
-							pollError
-						]
-					})
-				]
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dsh-channels-cfg__headRow",
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h2", {
+							className: "dsh-channels-cfg__title",
+							children: PANEL_COPY.title
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Pill, {
+							tone: badge.tone,
+							dot: true,
+							children: badge.text
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+							className: "dsh-channels-cfg__meta dsh-channels-cfg__mono",
+							children: ["v", status.version]
+						}),
+						status.uptimeMs === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+							className: "dsh-channels-cfg__meta",
+							children: [
+								"· ",
+								PANEL_COPY.uptimePrefix,
+								" ",
+								formatUptime(status.uptimeMs)
+							]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "dsh-channels-cfg__spacer" }),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dsh-channels-cfg__btn dsh-channels-cfg__btn--ghost",
+							onClick: onRefresh,
+							disabled: busy !== null || locked,
+							children: PANEL_COPY.refresh
+						})
+					]
+				}), pollError === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+					className: "dsh-channels-cfg__fieldError",
+					role: "status",
+					"aria-live": "polite",
+					children: [
+						PANEL_COPY.pollFailed,
+						"：",
+						pollError
+					]
+				})]
 			});
 		}
 		/** Top-level tab navigation; the dirty dot keeps unsaved work visible per tab. */
 		function TabNav(props) {
-			const { activeTab, dirtyTabs, onChange } = props;
+			const { activeTab, dirtyTabs, counts, onChange } = props;
 			const refs = (0, react.useRef)([]);
 			/** Roving-focus keyboard navigation between tabs (WAI-ARIA tabs pattern). */
 			const onKeyDown = (index, event) => {
@@ -3047,11 +3113,17 @@ window.__ModuleLoader__.load({
 						className: "dsh-channels-cfg__tab",
 						onClick: () => onChange(tab.id),
 						onKeyDown: (event) => onKeyDown(index, event),
-						children: [tab.label, dirty ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsh-channels-cfg__tabDot",
-							title: PANEL_COPY.dirtyCount,
-							"aria-label": PANEL_COPY.dirtyCount
-						}) : null]
+						children: [
+							tab.label,
+							(counts[tab.id] ?? 0) > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-channels-cfg__tabCount",
+								children: counts[tab.id]
+							}) : null,
+							dirty ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-channels-cfg__tabDot",
+								"aria-hidden": "true"
+							}) : null
+						]
 					}, tab.id);
 				})
 			});
@@ -3060,108 +3132,125 @@ window.__ModuleLoader__.load({
 		//#region src/client/styles.ts
 		/**
 		* Settings panel styling. DSH semantic tokens (`--dsw-alias-*`) with neutral
-		* fallbacks so the page follows the active theme; only pseudo-classes and
-		* responsive rules live here (everything else is inline in the component).
+		* fallbacks, aliased once to local `--dc-*` variables, so the page follows
+		* the active theme.
 		*
 		* @module dsh-channels/client/styles
 		*/
 		const STYLE_ATTRIBUTE = "data-dsh-channels-css";
 		const CSS = `
-.dsh-channels-cfg{container-type:inline-size;display:flex;flex-direction:column;gap:12px;width:100%;max-width:720px;color:var(--dsw-alias-label-primary,#1f2328);font-size:13px;line-height:20px}
-.dsh-channels-cfg__panelHead{position:sticky;top:0;z-index:2;display:flex;flex-direction:column;gap:4px;padding:10px 0 8px;background:var(--dsw-alias-bg-base,#fff);border-bottom:1px solid var(--dsw-alias-border-l2,rgba(0,0,0,.12))}
+.dsh-channels-cfg{--dc-fg:var(--dsw-alias-label-primary,#1f2328);--dc-fg2:var(--dsw-alias-label-secondary,#5c6169);--dc-fg3:var(--dsw-alias-label-tertiary,#8a8f98);--dc-dim:var(--dsw-alias-label-dimmed,#b0b4ba);--dc-bg:var(--dsw-alias-bg-base,#fff);--dc-line:var(--dsw-alias-border-l2,rgba(0,0,0,.12));--dc-hover:var(--dsw-alias-interactive-bg-hover,rgba(0,0,0,.05));--dc-accent:var(--dsw-alias-state-business-primary,#0a67d3);--dc-ok:var(--dsw-alias-state-success-primary,#0a7d33);--dc-warn:var(--dsw-alias-state-warn-primary,#a15c00);--dc-bad:var(--dsw-alias-state-error-primary,#c62828);--dc-mono:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;container-type:inline-size;display:flex;flex-direction:column;gap:14px;width:100%;max-width:720px;color:var(--dc-fg);font-size:13px;line-height:20px}
+.dsh-channels-cfg__panelHead{position:sticky;top:0;z-index:2;display:flex;flex-direction:column;gap:4px;padding:10px 0 6px;background:var(--dc-bg)}
 .dsh-channels-cfg__headRow{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
-.dsh-channels-cfg__title{margin:0;font-size:16px;font-weight:500;line-height:24px}
-.dsh-channels-cfg__summary{margin:0;color:var(--dsw-alias-label-tertiary,#8a8f98);font-size:12px;line-height:18px}
-.dsh-channels-cfg__tabs{display:flex;align-items:center;gap:2px;flex-wrap:wrap;border-bottom:1px solid var(--dsw-alias-border-l2,rgba(0,0,0,.12))}
-.dsh-channels-cfg__tab{display:inline-flex;align-items:center;gap:5px;min-height:32px;padding:0 10px;border:0;border-bottom:2px solid transparent;background:transparent;color:var(--dsw-alias-label-secondary,#5c6169);font:inherit;font-size:13px;cursor:pointer;white-space:nowrap}
-.dsh-channels-cfg__tab:hover{color:var(--dsw-alias-label-primary,#1f2328)}
-.dsh-channels-cfg__tab:focus-visible{outline:2px solid var(--dsw-alias-state-business-primary,#0a67d3);outline-offset:-2px}
-.dsh-channels-cfg__tab[aria-selected="true"]{color:var(--dsw-alias-state-business-primary,#0a67d3);border-bottom-color:currentColor;font-weight:500}
-.dsh-channels-cfg__tabDot{width:6px;height:6px;border-radius:50%;background:var(--dsw-alias-state-warning-primary,#a15c00);flex:none}
-.dsh-channels-cfg__tabBody{display:flex;flex-direction:column;gap:12px}
-.dsh-channels-cfg__tabHelp{margin:0;color:var(--dsw-alias-label-tertiary,#8a8f98);font-size:12px;line-height:18px}
-.dsh-channels-cfg__card{display:flex;flex-direction:column;gap:10px;padding:12px 14px;border:1px solid var(--dsw-alias-border-l2,rgba(0,0,0,.12));border-radius:12px}
-.dsh-channels-cfg__cardHead{display:flex;align-items:center;gap:8px;min-height:20px;flex-wrap:wrap}
-.dsh-channels-cfg__cardTitle{font-size:13px;font-weight:500}
-.dsh-channels-cfg__cardMeta{margin-left:auto;color:var(--dsw-alias-label-tertiary,#8a8f98);font-size:12px}
-.dsh-channels-cfg__group{display:flex;flex-direction:column;gap:8px}
-.dsh-channels-cfg__badge{display:inline-flex;align-items:center;gap:5px;padding:1px 8px;border-radius:999px;border:1px solid var(--dsw-alias-border-l2,rgba(0,0,0,.12));font-size:12px;line-height:18px;white-space:nowrap}
-.dsh-channels-cfg__dot{width:7px;height:7px;border-radius:50%;background:currentColor;flex:none}
-.dsh-channels-cfg__badge--ok{color:var(--dsw-alias-state-business-primary,#0a7d33);border-color:currentColor}
-.dsh-channels-cfg__badge--warn{color:var(--dsw-alias-state-warning-primary,#a15c00);border-color:currentColor}
-.dsh-channels-cfg__badge--bad{color:var(--dsw-alias-state-danger-primary,#c62828);border-color:currentColor}
-.dsh-channels-cfg__badge--muted{color:var(--dsw-alias-label-tertiary,#8a8f98)}
-.dsh-channels-cfg__facts{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:8px 16px}
-.dsh-channels-cfg__fact{display:flex;flex-direction:column;gap:2px;min-width:0}
-.dsh-channels-cfg__factLabel{color:var(--dsw-alias-label-tertiary,#8a8f98);font-size:12px;line-height:16px}
-.dsh-channels-cfg__factValue{font-variant-numeric:tabular-nums;overflow-wrap:anywhere}
-.dsh-channels-cfg__actions{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
-.dsh-channels-cfg__btn{display:inline-flex;align-items:center;justify-content:center;gap:4px;min-height:28px;padding:0 12px;border:1px solid var(--dsw-alias-border-l2,rgba(0,0,0,.12));border-radius:8px;background:transparent;color:inherit;font:inherit;font-size:13px;cursor:pointer;white-space:nowrap}
-.dsh-channels-cfg__btn:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover,rgba(0,0,0,.05))}
-.dsh-channels-cfg__btn:focus-visible{outline:2px solid var(--dsw-alias-state-business-primary,#0a67d3);outline-offset:2px}
-.dsh-channels-cfg__btn:disabled{color:var(--dsw-alias-label-dimmed,#b0b4ba);cursor:default}
-.dsh-channels-cfg__btn--primary{background:var(--dsw-alias-button-primary-fill,#0a67d3);border-color:transparent;color:var(--dsw-alias-label-primary-foreground,#fff)}
-.dsh-channels-cfg__btn--primary:hover:not(:disabled){background:var(--dsw-alias-button-primary-hover,#0b5cba)}
-.dsh-channels-cfg__btn--danger{color:var(--dsw-alias-state-danger-primary,#c62828);border-color:currentColor}
-.dsh-channels-cfg__grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:12px 20px;align-items:start}
-.dsh-channels-cfg__field{display:flex;flex-direction:column;gap:4px;min-width:0}
-.dsh-channels-cfg__field--wide{grid-column:1/-1}
-.dsh-channels-cfg__labelRow{display:flex;align-items:center;gap:6px;flex-wrap:wrap;min-width:0}
-.dsh-channels-cfg__label{font-size:12px;color:var(--dsw-alias-label-secondary,#5c6169)}
-.dsh-channels-cfg__tag{display:inline-flex;align-items:center;padding:0 5px;border-radius:4px;border:1px dashed currentColor;font-size:11px;line-height:16px;color:var(--dsw-alias-label-tertiary,#8a8f98);white-space:nowrap}
-.dsh-channels-cfg__tag--restart{color:var(--dsw-alias-state-warning-primary,#a15c00)}
-.dsh-channels-cfg__tag--dirty{color:var(--dsw-alias-state-warning-primary,#a15c00);border-style:solid}
-.dsh-channels-cfg__help{color:var(--dsw-alias-label-tertiary,#8a8f98);font-size:11px;line-height:16px}
-.dsh-channels-cfg__reasonBad{color:var(--dsw-alias-state-danger-primary,#c62828)}
-.dsh-channels-cfg__input{box-sizing:border-box;width:100%;min-height:28px;padding:3px 10px;border:1px solid var(--dsw-alias-border-l2,rgba(0,0,0,.12));border-radius:8px;background:var(--dsw-alias-bg-layer-1,transparent);color:inherit;font:inherit;font-size:13px;outline:none}
-.dsh-channels-cfg__inputRow{display:flex;align-items:center;gap:8px;min-width:0}
-.dsh-channels-cfg__inputRow .dsh-channels-cfg__input{flex:1 1 auto;width:auto;min-width:0}
-.dsh-channels-cfg__btn--browse{flex:none}
-.dsh-channels-cfg__list{display:flex;flex-direction:column;gap:6px;min-width:0}
-.dsh-channels-cfg__listItem{display:flex;flex-direction:column;gap:2px;min-width:0}
-.dsh-channels-cfg__btn--listRemove{flex:none}
-.dsh-channels-cfg__input:focus{border-color:var(--dsw-alias-state-business-primary,#0a67d3)}
-.dsh-channels-cfg__input--invalid{border-color:var(--dsw-alias-state-danger-primary,#c62828)}
-select.dsh-channels-cfg__input{appearance:auto;cursor:pointer}
-.dsh-channels-cfg__check{display:inline-flex;align-items:center;gap:6px;min-height:28px;cursor:pointer;font-size:13px}
-.dsh-channels-cfg__checkbox{width:15px;height:15px;margin:0;accent-color:var(--dsw-alias-state-business-primary,#0a67d3);cursor:pointer}
-.dsh-channels-cfg__fieldError{color:var(--dsw-alias-state-danger-primary,#c62828);font-size:11px;line-height:16px}
-.dsh-channels-cfg__notice{display:flex;flex-direction:column;gap:2px;padding:8px 10px;border-radius:8px;font-size:12px;line-height:18px;overflow-wrap:anywhere}
-.dsh-channels-cfg__notice--ok{color:var(--dsw-alias-state-business-primary,#0a7d33);background:color-mix(in srgb,currentColor 8%,transparent)}
-.dsh-channels-cfg__notice--error{color:var(--dsw-alias-state-danger-primary,#c62828);background:color-mix(in srgb,currentColor 8%,transparent)}
-.dsh-channels-cfg__notice a{color:inherit;text-decoration:underline}
-.dsh-channels-cfg__scopeList{margin:2px 0;padding-left:18px;display:flex;flex-direction:column;gap:2px}
-.dsh-channels-cfg__banner{display:flex;align-items:center;gap:8px;flex-wrap:wrap;padding:8px 10px;border-radius:8px;border:1px dashed var(--dsw-alias-state-warning-primary,#a15c00);color:var(--dsw-alias-state-warning-primary,#a15c00);font-size:12px;line-height:18px}
-.dsh-channels-cfg__footer{display:flex;align-items:center;gap:8px;flex-wrap:wrap;padding-top:2px}
+.dsh-channels-cfg__title{margin:0 2px 0 0;font-size:17px;font-weight:600;line-height:26px}
+.dsh-channels-cfg__meta{color:var(--dc-fg3);font-size:12px}
 .dsh-channels-cfg__spacer{flex:1}
+.dsh-channels-cfg__mono{font-family:var(--dc-mono);font-size:12px}
+.dsh-channels-cfg__pill{display:inline-flex;align-items:center;gap:5px;padding:0 8px;border-radius:999px;font-size:12px;line-height:20px;font-weight:400;white-space:nowrap;color:var(--dc-fg3);background:color-mix(in srgb,currentColor 10%,transparent)}
+.dsh-channels-cfg__pill--ok{color:var(--dc-ok)}
+.dsh-channels-cfg__pill--warn{color:var(--dc-warn)}
+.dsh-channels-cfg__pill--bad{color:var(--dc-bad)}
+.dsh-channels-cfg__dot{width:6px;height:6px;border-radius:50%;background:currentColor;flex:none}
+.dsh-channels-cfg__tabs{display:flex;align-items:center;gap:18px;border-bottom:1px solid var(--dc-line);overflow-x:auto;scrollbar-width:none}
+.dsh-channels-cfg__tab{display:inline-flex;align-items:center;gap:5px;min-height:34px;padding:0;border:0;border-bottom:2px solid transparent;background:transparent;color:var(--dc-fg2);font:inherit;font-size:13px;cursor:pointer;white-space:nowrap}
+.dsh-channels-cfg__tab:hover{color:var(--dc-fg)}
+.dsh-channels-cfg__tab[aria-selected="true"]{color:var(--dc-fg);border-bottom-color:currentColor;font-weight:600}
+.dsh-channels-cfg__tabCount{padding:0 5px;border-radius:8px;font-size:11px;line-height:16px;font-weight:500;color:var(--dc-warn);background:color-mix(in srgb,var(--dc-warn) 12%,transparent)}
+.dsh-channels-cfg__tabDot{width:6px;height:6px;border-radius:50%;background:var(--dc-accent);flex:none}
+.dsh-channels-cfg__tabBody{display:flex;flex-direction:column;gap:22px;padding:4px 0 8px}
+.dsh-channels-cfg__sec{display:flex;flex-direction:column;gap:6px;margin:0}
+.dsh-channels-cfg__secTitle{margin:0;font-size:12px;font-weight:600;line-height:18px;color:var(--dc-fg3);letter-spacing:.02em}
+.dsh-channels-cfg__secFoot{margin:0;color:var(--dc-fg3);font-size:12px;line-height:18px}
+.dsh-channels-cfg__list{display:flex;flex-direction:column;border:1px solid var(--dc-line);border-radius:10px}
+.dsh-channels-cfg__list>*+*{border-top:1px solid var(--dc-line)}
+.dsh-channels-cfg__list--warn{border-color:color-mix(in srgb,var(--dc-warn) 45%,transparent);background:color-mix(in srgb,var(--dc-warn) 7%,transparent)}
+.dsh-channels-cfg__row{display:flex;align-items:center;gap:16px;padding:11px 14px;min-height:28px}
+.dsh-channels-cfg__row--wide{flex-direction:column;align-items:stretch;gap:8px}
+.dsh-channels-cfg__rowText{display:flex;flex-direction:column;gap:1px;flex:1 1 auto;min-width:0}
+.dsh-channels-cfg__rowLabel{display:flex;align-items:center;gap:6px;flex-wrap:wrap;overflow-wrap:anywhere}
+.dsh-channels-cfg__rowSummary{color:var(--dc-fg3);font-size:12px;line-height:18px;overflow-wrap:anywhere}
+.dsh-channels-cfg__rowCtl{flex:none;display:flex;align-items:center;justify-content:flex-end;min-width:0;max-width:62%}
+.dsh-channels-cfg__row--wide .dsh-channels-cfg__rowCtl{max-width:none;justify-content:stretch}
+.dsh-channels-cfg__row--wide .dsh-channels-cfg__rowCtl>*{flex:1 1 auto}
+.dsh-channels-cfg__details{padding:0 14px 12px;color:var(--dc-fg2);font-size:12px;line-height:19px;overflow-wrap:anywhere}
+.dsh-channels-cfg__rowError{padding:0 14px 10px;color:var(--dc-bad);font-size:12px;line-height:18px}
+.dsh-channels-cfg__list>.dsh-channels-cfg__rowWrap{border-top-width:0}
+.dsh-channels-cfg__list>.dsh-channels-cfg__rowWrap+*{border-top-width:1px}
+.dsh-channels-cfg__tag{display:inline-flex;align-items:center;padding:0 5px;border-radius:4px;font-size:11px;line-height:16px;white-space:nowrap;color:var(--dc-warn);background:color-mix(in srgb,var(--dc-warn) 12%,transparent)}
+.dsh-channels-cfg__more{padding:0;border:0;background:none;color:var(--dc-fg3);font:inherit;font-size:12px;line-height:18px;cursor:pointer;text-decoration:underline dotted;text-underline-offset:3px;white-space:nowrap}
+.dsh-channels-cfg__more:hover{color:var(--dc-fg2)}
+.dsh-channels-cfg__link{padding:0;border:0;background:none;color:var(--dc-accent);font:inherit;font-size:13px;cursor:pointer;text-decoration:none;white-space:nowrap}
+.dsh-channels-cfg__link:disabled{color:var(--dc-dim);cursor:default}
+.dsh-channels-cfg__switch{position:relative;flex:none;width:34px;height:20px;padding:0;border:0;border-radius:10px;background:var(--dc-dim);cursor:pointer;transition:background .15s}
+.dsh-channels-cfg__switch::after{content:"";position:absolute;top:2px;left:2px;width:16px;height:16px;border-radius:50%;background:#fff;box-shadow:0 1px 2px rgba(0,0,0,.25);transition:transform .15s}
+.dsh-channels-cfg__switch[aria-checked="true"]{background:var(--dc-accent)}
+.dsh-channels-cfg__switch[aria-checked="true"]::after{transform:translateX(14px)}
+.dsh-channels-cfg__switch:disabled{opacity:.5;cursor:default}
+.dsh-channels-cfg__input{box-sizing:border-box;width:100%;min-width:0;height:30px;padding:0 10px;border:1px solid var(--dc-line);border-radius:7px;background:var(--dsw-alias-bg-layer-1,transparent);color:inherit;font:inherit;font-size:13px;outline:none}
+.dsh-channels-cfg__input:focus{border-color:var(--dc-accent)}
+.dsh-channels-cfg__input--invalid{border-color:var(--dc-bad)}
+.dsh-channels-cfg__input--num{width:120px;text-align:right;font-variant-numeric:tabular-nums}
+.dsh-channels-cfg__input--text{width:260px}
+.dsh-channels-cfg__select{width:220px;appearance:auto;cursor:pointer}
+.dsh-channels-cfg__unit{min-width:36px;color:var(--dc-fg3);font-size:12px}
+.dsh-channels-cfg__bytes{color:var(--dc-fg3);font-size:12px;white-space:nowrap}
+.dsh-channels-cfg__inputRow{display:flex;align-items:center;gap:8px;min-width:0}
+.dsh-channels-cfg__inputRow>.dsh-channels-cfg__input:not(.dsh-channels-cfg__input--num){flex:1 1 auto;width:auto}
+.dsh-channels-cfg__stringList{display:flex;flex-direction:column;gap:6px;min-width:0}
+.dsh-channels-cfg__stringListItem{display:flex;flex-direction:column;gap:2px;min-width:0}
+.dsh-channels-cfg__fieldError{color:var(--dc-bad);font-size:12px;line-height:18px}
+.dsh-channels-cfg__textBad{color:var(--dc-bad)}
+.dsh-channels-cfg__btn{box-sizing:border-box;display:inline-flex;align-items:center;justify-content:center;gap:4px;height:28px;padding:0 12px;border:1px solid var(--dc-line);border-radius:7px;background:transparent;color:inherit;font:inherit;font-size:13px;cursor:pointer;white-space:nowrap;text-decoration:none}
+.dsh-channels-cfg__btn:hover:not(:disabled){background:var(--dc-hover)}
+.dsh-channels-cfg__btn:disabled{color:var(--dc-dim);cursor:default}
+.dsh-channels-cfg__btn--primary{background:var(--dsw-alias-button-primary-fill,var(--dc-accent));border-color:transparent;color:var(--dsw-alias-label-primary-foreground,#fff)}
+.dsh-channels-cfg__btn--primary:hover:not(:disabled){background:var(--dsw-alias-button-primary-hover,#0b5cba)}
+.dsh-channels-cfg__btn--primary:disabled{opacity:.45;color:var(--dsw-alias-label-primary-foreground,#fff)}
+.dsh-channels-cfg__btn--ghost{border-color:transparent;color:var(--dc-fg2)}
+.dsh-channels-cfg__btn--danger{color:var(--dc-bad)}
+.dsh-channels-cfg__btn--remove{color:var(--dc-bad);border-color:color-mix(in srgb,var(--dc-bad) 55%,transparent);background:color-mix(in srgb,var(--dc-bad) 8%,transparent)}
+.dsh-channels-cfg__btn--remove:hover:not(:disabled){background:color-mix(in srgb,var(--dc-bad) 15%,transparent)}
+.dsh-channels-cfg__btn--remove:disabled{opacity:.5;color:var(--dc-bad)}
+.dsh-channels-cfg__btn:focus-visible,.dsh-channels-cfg__tab:focus-visible,.dsh-channels-cfg__switch:focus-visible,.dsh-channels-cfg__link:focus-visible,.dsh-channels-cfg__more:focus-visible{outline:2px solid var(--dc-accent);outline-offset:2px}
+.dsh-channels-cfg__notice{padding:8px 12px;border-radius:8px;font-size:12px;line-height:18px;overflow-wrap:anywhere}
+.dsh-channels-cfg__notice--ok{color:var(--dc-ok);background:color-mix(in srgb,var(--dc-ok) 9%,transparent)}
+.dsh-channels-cfg__notice--error{color:var(--dc-bad);background:color-mix(in srgb,var(--dc-bad) 8%,transparent)}
+.dsh-channels-cfg__banner{display:flex;align-items:center;gap:10px;flex-wrap:wrap;padding:9px 12px;border-radius:8px;background:color-mix(in srgb,var(--dc-warn) 12%,transparent);color:var(--dc-fg);font-size:12px;line-height:18px}
+.dsh-channels-cfg__bannerText{flex:1;min-width:0}
+.dsh-channels-cfg__hero{display:flex;flex-direction:column;gap:12px;padding:14px 16px;border:1px solid var(--dc-line);border-radius:10px}
+.dsh-channels-cfg__heroTop{display:flex;align-items:center;gap:10px;flex-wrap:wrap}
+.dsh-channels-cfg__heroTop strong{font-size:14px;font-weight:600}
+.dsh-channels-cfg__stats{display:flex;gap:28px;flex-wrap:wrap}
+.dsh-channels-cfg__stat{display:flex;flex-direction:column}
+.dsh-channels-cfg__stat span{color:var(--dc-fg3);font-size:12px}
+.dsh-channels-cfg__stat strong{font-size:18px;font-weight:600;line-height:26px;font-variant-numeric:tabular-nums}
+.dsh-channels-cfg__stat strong.dsh-channels-cfg__mono{font-size:14px}
+.dsh-channels-cfg__checkIcon{display:grid;place-items:center;flex:none;width:18px;height:18px;border-radius:50%;font-size:11px;font-weight:700;align-self:flex-start;margin-top:1px}
+.dsh-channels-cfg__checkIcon--ok{color:var(--dc-ok);background:color-mix(in srgb,var(--dc-ok) 12%,transparent)}
+.dsh-channels-cfg__checkIcon--warn{color:var(--dc-warn);background:color-mix(in srgb,var(--dc-warn) 14%,transparent)}
+.dsh-channels-cfg__checkIcon--bad{color:var(--dc-bad);background:color-mix(in srgb,var(--dc-bad) 12%,transparent)}
+.dsh-channels-cfg__scopeList{margin:0;padding:0 14px 12px 46px;list-style:none;display:flex;flex-direction:column;gap:6px;font-size:12px;color:var(--dc-fg2)}
+.dsh-channels-cfg__scopeList li{display:flex;align-items:baseline;gap:8px;flex-wrap:wrap}
+.dsh-channels-cfg__scopeList .dsh-channels-cfg__link{font-size:12px}
+.dsh-channels-cfg__list>.dsh-channels-cfg__scopeList{border-top-width:0}
+.dsh-channels-cfg__avatar{display:grid;place-items:center;flex:none;width:26px;height:26px;border-radius:50%;background:var(--dc-hover);color:var(--dc-fg2);font-size:12px}
+.dsh-channels-cfg__addRow{display:flex;align-items:center;gap:8px;flex-wrap:wrap;padding:10px 14px}
+.dsh-channels-cfg__addRow .dsh-channels-cfg__input{flex:1 1 160px;width:auto}
+.dsh-channels-cfg__emptyRow{padding:11px 14px;color:var(--dc-fg3);font-size:12px}
+.dsh-channels-cfg__saveBar{position:sticky;bottom:0;z-index:2;display:flex;align-items:center;gap:8px;flex-wrap:wrap;padding:10px 0;border-top:1px solid var(--dc-line);background:var(--dc-bg)}
+.dsh-channels-cfg__saveMsg{flex:1;min-width:0;color:var(--dc-fg2);font-size:12px}
 .dsh-channels-cfg__steps{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:10px}
 .dsh-channels-cfg__step{display:flex;align-items:flex-start;gap:10px}
-.dsh-channels-cfg__stepIndex{display:inline-flex;align-items:center;justify-content:center;flex:none;width:20px;height:20px;border-radius:50%;border:1px solid currentColor;color:var(--dsw-alias-state-business-primary,#0a67d3);font-size:12px;line-height:18px;font-variant-numeric:tabular-nums}
+.dsh-channels-cfg__stepIndex{display:grid;place-items:center;flex:none;width:20px;height:20px;border-radius:50%;color:var(--dc-accent);background:color-mix(in srgb,var(--dc-accent) 12%,transparent);font-size:12px;font-variant-numeric:tabular-nums}
 .dsh-channels-cfg__stepBody{display:flex;flex-direction:column;gap:2px;min-width:0}
-.dsh-channels-cfg__stepTitle{font-size:13px;font-weight:500}
-.dsh-channels-cfg__emptyState{display:flex;align-items:center;gap:8px;padding:10px 12px;border:1px dashed var(--dsw-alias-border-l2,rgba(0,0,0,.12));border-radius:8px;color:var(--dsw-alias-label-tertiary,#8a8f98);font-size:12px;line-height:18px}
-.dsh-channels-cfg__readOnly{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:8px 20px}
-.dsh-channels-cfg__kv{display:flex;flex-direction:column;gap:2px;min-width:0}
-.dsh-channels-cfg__kvKey{color:var(--dsw-alias-label-tertiary,#8a8f98);font-size:12px;line-height:16px}
-.dsh-channels-cfg__kvValue{overflow-wrap:anywhere}
-.dsh-channels-cfg__mono{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:12px}
-.dsh-channels-cfg__cred{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
-.dsh-channels-cfg__cred .dsh-channels-cfg__input{flex:1 1 240px;min-width:0;width:auto}
-.dsh-channels-cfg__accessSection{display:flex;flex-direction:column;gap:6px}
-.dsh-channels-cfg__accessList{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:6px}
-.dsh-channels-cfg__accessRow{display:flex;align-items:center;gap:8px;flex-wrap:wrap;padding:6px 8px;border:1px solid var(--dsw-alias-border-l2,rgba(0,0,0,.12));border-radius:8px}
-.dsh-channels-cfg__accessMain{display:flex;flex-direction:column;gap:1px;min-width:0;flex:1 1 200px;overflow-wrap:anywhere}
-.dsh-channels-cfg__accessMeta{color:var(--dsw-alias-label-tertiary,#8a8f98);font-size:11px;line-height:16px;overflow-wrap:anywhere}
-.dsh-channels-cfg__accessActions{display:flex;align-items:center;gap:6px;flex-wrap:wrap}
-.dsh-channels-cfg__accessAdd{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
-.dsh-channels-cfg__accessInput{flex:1 1 140px;min-width:0;width:auto}
-.dsh-channels-cfg__error{padding:10px 12px;border:1px solid var(--dsw-alias-state-danger-primary,#c62828);border-radius:10px;color:var(--dsw-alias-state-danger-primary,#c62828);font-size:12px;line-height:18px;display:flex;flex-direction:column;gap:8px}
-.dsh-channels-cfg__loading{padding:16px 0;color:var(--dsw-alias-label-tertiary,#8a8f98);font-size:12px}
-.dsh-channels-cfg__issues{margin:0;padding-left:18px}
+.dsh-channels-cfg__stepTitle{font-weight:500}
+.dsh-channels-cfg__error{padding:10px 12px;border:1px solid var(--dc-bad);border-radius:10px;color:var(--dc-bad);font-size:12px;line-height:18px;display:flex;flex-direction:column;gap:8px}
+.dsh-channels-cfg__loading{padding:16px 0;color:var(--dc-fg3);font-size:12px}
+@media (prefers-reduced-motion:reduce){.dsh-channels-cfg__switch,.dsh-channels-cfg__switch::after{transition:none}}
 @container (max-width:560px){
-.dsh-channels-cfg__facts{grid-template-columns:repeat(2,minmax(0,1fr))}
-.dsh-channels-cfg__grid,.dsh-channels-cfg__readOnly{grid-template-columns:minmax(0,1fr)}
-.dsh-channels-cfg__tabs{flex-wrap:nowrap;overflow-x:auto}
+.dsh-channels-cfg__row:not(.dsh-channels-cfg__row--wide){flex-wrap:wrap}
+.dsh-channels-cfg__rowCtl{max-width:100%}
+.dsh-channels-cfg__select,.dsh-channels-cfg__input--text{width:100%}
 }
 `;
 		/** Append the panel stylesheet once (idempotent across HMR / remounts). */