@modesto_ma/dsh-channels 0.5.0-beta.4 → 0.5.0-beta.6

package/lib/index.js

@@ -1337,6 +1337,31 @@ const analyzeRequestRecordSchema = z.object({
 	])
 });
 /**
+* Where one Feishu-routed Session came from, keyed by its DSH session id.
+* Written the first time a route record names the Session (new topic,
+* `/renew`, analyze API) and kept after the route retires, so the Web
+* client can still show the origin of an old Session. Names are resolved
+* live when read, never stored.
+*/
+const sessionOriginRecordSchema = z.object({
+	/** DSH session id (also the table key). */
+	key: z.string().min(1),
+	/** Route key the Session was bound under (thread_id or chat:<chatId>). */
+	routeKey: z.string().min(1),
+	/** Topic-scoped (`thread`) or chat-scoped (`chat`) route. */
+	kind: z.enum(["thread", "chat"]),
+	/** Feishu chat the Session was started from. */
+	chatId: z.string().min(1),
+	/** `p2p` or `group`. */
+	chatType: z.enum(["p2p", "group"]),
+	/** `user_id` of the user who started the Session (the requester for analyze topics). */
+	senderUserId: z.string().min(1),
+	/** Epoch ms when the Session was bound to the route. */
+	createdAt: z.number().int().nonnegative(),
+	/** Group-shared route (log-platform analysis topic). */
+	shared: z.literal(true).optional()
+});
+/**
 * Domain declaration for the host's storage facility. Plain data plus zod
 * schemas — deliberately not built with `defineDomain` so this module has no
 * runtime import of `@deepseek-ai/dsh-storage-domain`.
@@ -1364,7 +1389,8 @@ const feishuDomain = {
 		access_users: { valueSchema: accessUserRecordSchema },
 		access_requests: { valueSchema: accessRequestRecordSchema },
 		access_wiki_users: { valueSchema: accessUserRecordSchema },
-		analyze_requests: { valueSchema: analyzeRequestRecordSchema }
+		analyze_requests: { valueSchema: analyzeRequestRecordSchema },
+		session_origins: { valueSchema: sessionOriginRecordSchema }
 	}
 };
 /**
@@ -3367,6 +3393,7 @@ var RouteStore = class {
 			this.expired.set(key, record);
 			this.active.delete(key);
 		}
+		for (const record of this.active.values()) this.recordOrigins(record);
 	}
 	/** One active route by key (cache-first, normalized). */
 	get(key) {
@@ -3390,7 +3417,13 @@ var RouteStore = class {
 	/** Persist one active route and refresh the cache. */
 	async put(key, record) {
 		await this.deps.domain()?.routes.put(key, record);
-		this.active.set(key, normalizeRouteRecord(record));
+		const normalized = normalizeRouteRecord(record);
+		this.active.set(key, normalized);
+		await this.recordOrigins(normalized);
+	}
+	/** Feishu origin of one Session any route ever named, retired routes included. */
+	origin(sessionId) {
+		return this.deps.domain()?.sessionOrigins.get(sessionId);
 	}
 	/** Delete one active route from the medium and the cache. */
 	async remove(key) {
@@ -3418,6 +3451,33 @@ var RouteStore = class {
 		this.active.clear();
 		this.expired.clear();
 	}
+	/**
+	* Write an origin for every Session in the route's history that has none.
+	* Existing origins are never rewritten: the first route naming a Session
+	* is where it started. Failures are logged and never fail the route write.
+	*/
+	async recordOrigins(record) {
+		const table = this.deps.domain()?.sessionOrigins;
+		if (table === void 0) return;
+		for (const entry of normalizeSessionHistory(record)) {
+			if (table.get(entry.sessionId) !== void 0) continue;
+			const origin = {
+				key: entry.sessionId,
+				routeKey: record.key,
+				kind: record.kind,
+				chatId: record.chatId,
+				chatType: record.chatType,
+				senderUserId: record.senderUserId,
+				createdAt: entry.createdAt,
+				...record.shared === true ? { shared: true } : {}
+			};
+			try {
+				await table.put(entry.sessionId, origin);
+			} catch (error) {
+				this.deps.warn("dsh-channels: recording the origin of session %s failed: %s", entry.sessionId, String(error));
+			}
+		}
+	}
 	/** Whether one active route has crossed the configured inactivity deadline. */
 	hasExpired(record, now) {
 		const ttlMs = this.deps.ttlMs();
@@ -3504,7 +3564,12 @@ const BASE_REQUIREMENTS = [
 	{
 		anyOf: ["im:chat:readonly", "im:chat"],
 		level: "optional",
-		purpose: "机器人入群后读取群信息、发送群信息卡"
+		purpose: "机器人入群后读取群信息、发送群信息卡；Web 页面显示群名和群头像"
+	},
+	{
+		anyOf: ["contact:user.base:readonly"],
+		level: "optional",
+		purpose: "Web 页面显示用户真实姓名和头像"
 	}
 ];
 /** Panel sync needs, applicable while `slashCommandPanel` is on. */
@@ -4279,6 +4344,19 @@ function thrownErrorFields(error) {
 function assertFeishuOk(response) {
 	if (response.code !== void 0 && response.code !== 0) throw new FeishuApiError(`code=${response.code}${response.msg === void 0 ? "" : ` ${response.msg}`}`, response.code);
 }
+/** Member-list pages `memberName()` scans before giving up (100 members each). */
+const MEMBER_NAME_PAGES = 5;
+/** `user_ids` per `contact.v3.user.batch` call (the API maximum). */
+const USER_BATCH_SIZE = 50;
+/** Keep a non-blank name and an `https:` avatar URL from one Feishu response. */
+function feishuProfile(name, avatar) {
+	const trimmed = name?.trim();
+	const avatarUrl = avatar !== void 0 && /^https:\/\/[^\s"'<>]+$/u.test(avatar) ? avatar : void 0;
+	return {
+		...trimmed === void 0 || trimmed === "" ? {} : { name: trimmed },
+		...avatarUrl === void 0 ? {} : { avatarUrl }
+	};
+}
 /** Run one raw request, mapping thrown and non-zero-code failures to {@link FeishuApiError}. */
 async function feishuCall(call) {
 	let response;
@@ -4415,6 +4493,49 @@ var LarkChannelAdapter = class {
 	async getChatInfo(chatId) {
 		return this.channel.getChatInfo(chatId);
 	}
+	async userProfiles(userIds) {
+		const client = this.channel.rawClient;
+		const profiles = /* @__PURE__ */ new Map();
+		for (let offset = 0; offset < userIds.length; offset += USER_BATCH_SIZE) {
+			const response = await feishuCall(() => client.contact.v3.user.batch({ params: {
+				user_ids: userIds.slice(offset, offset + USER_BATCH_SIZE),
+				user_id_type: "user_id"
+			} }));
+			for (const item of response.data?.items ?? []) {
+				if (item.user_id === void 0) continue;
+				profiles.set(item.user_id, feishuProfile(item.name, item.avatar?.avatar_72));
+			}
+		}
+		return profiles;
+	}
+	async chatProfile(chatId) {
+		const client = this.channel.rawClient;
+		const response = await feishuCall(() => client.im.v1.chat.get({ path: { chat_id: chatId } }));
+		return feishuProfile(response.data?.name, response.data?.avatar);
+	}
+	async memberName(userId, chatId) {
+		const client = this.channel.rawClient;
+		let pageToken;
+		for (let page = 0; page < MEMBER_NAME_PAGES; page += 1) {
+			let response;
+			try {
+				response = await feishuCall(() => client.im.v1.chatMembers.get({
+					path: { chat_id: chatId },
+					params: {
+						member_id_type: "user_id",
+						page_size: 100,
+						...pageToken === void 0 ? {} : { page_token: pageToken }
+					}
+				}));
+			} catch (_membersUnavailable) {
+				return;
+			}
+			const hit = response.data?.items?.find((item) => item.member_id === userId)?.name?.trim();
+			if (hit !== void 0 && hit !== "") return hit;
+			pageToken = response.data?.page_token;
+			if (response.data?.has_more !== true || pageToken === void 0) return void 0;
+		}
+	}
 	botOpenId() {
 		return this.channel.botIdentity?.openId;
 	}
@@ -6727,7 +6848,7 @@ var InboundRouter = class {
 		} catch (error) {
 			this.ctx.logger?.warn?.("dsh-channels: recording processed message %s failed: %s", msg.messageId, String(error));
 		}
-		if (content.startsWith("/")) {
+		if (content.startsWith("/") && this.deps.commands.owns(content)) {
 			await this.deps.commands.handleSlash(msg, content);
 			return;
 		}
@@ -16221,7 +16342,7 @@ function resolveConfig(raw) {
 * Web 设置面板的线上契约：Host 半侧的路由/面板数据与 Browser 半侧的渲染共用。
 *
 * 本模块**没有运行时依赖**：Host 与 Client bundle 都直接内联它。因此这里只放
-* 常量、字段清单与可序列化的 wire 类型，不 import zod / node / DSH 内部包。
+* 常量、字段清单、可序列化的 wire 类型与无依赖的纯文案函数，不 import zod / node / DSH 内部包。
 *
 * @module dsh-channels/settings/contract
 */
@@ -16256,6 +16377,14 @@ const ACCESS_REQUESTS_ROUTE = "/dsh-channels/access/requests";
 * [`EditableFieldWire.browse`]，保留手写输入。
 */
 const PICK_DIRECTORY_ROUTE = "/dsh-channels/pick-directory";
+/** 会话的飞书来源（GET/HEAD，`?sessionId=`）：对话右侧栏「飞书来源」标签与会话头部入口使用。 */
+const SESSION_ORIGIN_ROUTE = "/dsh-channels/session-origin";
+/**
+* `GET PROFILES_ROUTE?users=<user_id,...>&chats=<chat_id,...>`: live Feishu
+* names and avatars for the users and chats the panel shows. At most
+* {@link PROFILES_MAX_IDS} ids per list.
+*/
+const PROFILES_ROUTE = "/dsh-channels/profiles";
 /**
 * 可由 Web 面板覆盖的配置项。顶层键对应 `src/config.ts` 的字段；`feishuTools.*`
 * 是嵌套字段（覆盖层里仍写成 `{ "feishuTools": { ... } }` 对象）。覆盖值写进
@@ -16269,43 +16398,50 @@ const PICK_DIRECTORY_ROUTE = "/dsh-channels/pick-directory";
 * `baseDir`（工作区根目录 = 模型/工具产生文件的落点）可覆盖，但面板只接受
 * **绝对路径**（`~` 会展开）；已有 Session / 目录不迁移，只影响之后新建的
 * 会话。校验与保存时建目录见 `src/workspaces.ts`。
+*
+* 数组顺序就是面板里同一分组内字段的显示顺序。
 */
 const EDITABLE_KEYS = [
-	"baseDir",
 	"dmMode",
 	"requireMention",
 	"threadFallback",
+	"baseDir",
+	"topicIsolation",
+	"routeTtlMs",
+	"approvalTimeoutMs",
+	"questionTimeoutMs",
+	"refreshMs",
+	"statusRefreshMs",
 	"welcomeOnboarding",
 	"slashCommandPanel",
 	"allowPermissionSwitch",
-	"analyzeListen",
-	"adminUserId",
-	"accessMode",
-	"authRequestTtlDays",
+	"provider",
+	"model",
+	"reasoningEffort",
+	"maxTokens",
+	"agentPreset",
 	"acceptAttachments",
 	"attachmentStore",
 	"prefetchImages",
+	"historyBootstrapLimit",
+	"feishuTools.attachmentFetch",
+	"feishuTools.topicMessages",
+	"feishuTools.sendFile",
 	"prefetchTimeoutMs",
 	"prefetchImageMaxBytes",
 	"prefetchTotalMaxBytes",
-	"historyBootstrapLimit",
-	"feishuTools.attachmentFetch",
 	"feishuTools.attachmentFetchMaxResources",
 	"feishuTools.attachmentFetchMaxBytes",
 	"feishuTools.attachmentFetchTimeoutMs",
-	"feishuTools.topicMessages",
 	"feishuTools.topicMessagesTimeoutMs",
-	"feishuTools.sendFile",
+	"promptContextTimeoutMs",
+	"accessMode",
+	"adminUserId",
+	"authRequestTtlDays",
 	"feishuTools.wikiRead",
 	"feishuTools.wikiWrite",
 	"wikiRoots",
-	"promptContextTimeoutMs",
-	"provider",
-	"model",
-	"reasoningEffort",
-	"agentPreset",
-	"refreshMs",
-	"statusRefreshMs",
+	"analyzeListen",
 	"loggerLevel"
 ];
 /**
@@ -16321,66 +16457,57 @@ const RESTART_KEYS = [
 	"statusRefreshMs",
 	"loggerLevel"
 ];
+/** `unit` of byte-count fields; the panel adds a MiB reading next to them. */
+const BYTES_UNIT = "字节";
 /** Display labels for the panel header/cards (kept on the wire so the client owns no copy). */
 const PANEL_COPY = {
 	title: "飞书渠道",
-	description: "飞书长连接、应用凭据与渠道配置。凭据只写入 DSH 凭据库且不回显；标注「需重连」的项在连接建立时读取。",
-	statusCard: "连接状态",
 	phaseUnconfigured: "待配置",
 	phaseIdle: "未连接",
 	phaseConnecting: "连接中",
 	phaseConnected: "已连接",
 	phaseError: "连接失败",
-	configuredBadge: "凭据已配置",
-	unconfiguredBadge: "凭据未配置",
-	statusSummaryConnected: "飞书长连接已建立，机器人可以收发消息。",
-	statusSummaryUnconfigured: "尚未配置飞书应用凭据：插件已加载，但不会连接飞书。填写凭据并保存后会自动连接。",
-	statusSummaryIdle: "飞书应用凭据已就绪，但当前没有建立长连接。",
-	statusSummaryConnecting: "正在连接飞书长连接…",
-	statusSummaryError: "最近一次连接飞书失败，请检查凭据与网络后重试。",
+	statusSummaryConnected: "机器人在线，可以收发消息",
+	statusSummaryUnconfigured: "还没有填写飞书应用凭据，插件不会连接飞书",
+	statusSummaryIdle: "凭据已就绪，还没有建立连接",
+	statusSummaryConnecting: "正在连接飞书…",
+	statusSummaryError: "连接飞书失败，请检查凭据与网络后重试",
+	uptimePrefix: "运行",
 	lastError: "最近一次连接失败",
-	scopeCheckTitle: "权限自检",
-	scopeCheckOk: "已开通插件需要的全部飞书权限。",
-	scopeCheckMissing: "以下飞书权限未开通，开通后需在开发者后台发布新版本：",
-	scopeCheckOpenAll: "在开发者后台开通全部缺失权限",
+	checksTitle: "自检",
+	scopeCheckOk: "插件需要的飞书权限都已开通",
+	scopeCheckMissing: "{n} 项权限未开通",
+	scopeCheckMissingRequired: "{n} 项必需权限未开通，相关功能无法使用",
+	scopeCheckMissingOptional: "不影响收发消息，只有相关功能不可用。开通后需在开发者后台发布新版本。",
+	scopeCheckPublish: "开通后需在开发者后台发布新版本。",
+	scopeCheckOpenAll: "全部开通",
 	scopeCheckOpenOne: "去开通",
-	scopeCheckOptional: "可选",
 	scopeCheckRequired: "必需",
-	scopeCheckError: "无法读取应用的权限授予状态：",
+	scopeCheckError: "无法读取权限开通情况",
 	slashCommandSyncTitle: "斜杠指令面板",
-	slashCommandSyncOk: "插件命令已同步到飞书原生斜杠指令面板，在聊天框输入 / 即可选择（飞书客户端约 5 分钟后刷新）。",
-	slashCommandSyncTotal: "命令数",
-	slashCommandSyncCreated: "本次新增",
-	slashCommandSyncUpdated: "本次更新",
-	slashCommandSyncRemoved: "本次删除",
-	slashCommandSyncError: "同步飞书原生斜杠指令面板失败（不影响直接输入命令）：",
+	slashCommandSyncOk: "已同步 {total} 条命令，飞书客户端约 5 分钟后刷新",
+	slashCommandSyncError: "同步失败，直接输入命令不受影响",
 	missingConfig: "缺少配置",
-	statusHintUnconfigured: "配置完成后插件会自动连接；也可以稍后在本页手动连接。",
-	connectionInfo: "连接信息",
-	connectionStateLabel: "飞书长连接",
-	botOpenId: "Bot open_id",
-	uptime: "运行时长",
 	routeCount: "话题路由",
 	liveAgentCount: "活动会话",
 	inflightTurnCount: "在途回复",
+	botOpenId: "Bot open_id",
 	healthReasons: "健康判定",
 	unknownValue: "—",
 	connect: "连接飞书",
 	connecting: "连接中…",
 	onboardingTitle: "开始使用飞书渠道",
-	onboardingIntro: "只需三步：在飞书开放平台创建自建应用，把 App ID / App Secret 填入本页，保存后自动连接。",
 	onboardingStep1Title: "创建飞书自建应用",
-	onboardingStep1Text: "在飞书开放平台创建企业自建应用，开启机器人能力；事件订阅选择「长连接」，订阅 im.message.receive_v1（接收消息）。",
+	onboardingStep1Text: "在 open.feishu.cn/app 创建企业自建应用，开启机器人能力；事件订阅选「长连接」，订阅 im.message.receive_v1。",
 	onboardingStep2Title: "填写应用凭据",
-	onboardingStep2Text: "把应用的 App ID（cli_ 开头）与 App Secret 填入下方「飞书应用凭据」，值会写入 DSH 凭据库。",
-	onboardingStep3Title: "保存并等待连接",
-	onboardingStep3Text: "两项凭据都保存后插件会自动连接；状态变为「已连接」即可在飞书里私聊机器人。",
-	onboardingDocsHint: "开放平台地址：open.feishu.cn/app；应用需要开通 im:message、im:message:send_as_bot 等消息权限。",
-	credentialsCard: "飞书应用凭据",
-	credentialsCardHelp: "凭据值经 DSH 凭据服务写入本机凭据库；面板只显示「已配置 / 未配置」，永不回显已存值。两项都配置后才会连接飞书。",
-	appIdLabel: "飞书 App ID",
-	appSecretLabel: "飞书 App Secret",
-	credentialsRef: "凭据引用",
+	onboardingStep2Text: "把 App ID（cli_ 开头）和 App Secret 填到下方「应用凭据」。",
+	onboardingStep3Title: "保存后自动连接",
+	onboardingStep3Text: "两项都保存后插件会自动连接，状态变成「已连接」就能在飞书里私聊机器人。",
+	credentialsTitle: "应用凭据",
+	credentialsHint: "值只存在本机凭据库，面板不回显。",
+	appIdLabel: "App ID",
+	appSecretLabel: "App Secret",
+	credentialStore: "凭据库",
 	saveCredentials: "保存凭据",
 	savingCredentials: "保存中…",
 	credentialSaved: "凭据已保存",
@@ -16390,27 +16517,29 @@ const PANEL_COPY = {
 	credentialAutoConnectFailed: "凭据已保存，但自动连接失败",
 	credentialRemoved: "已移除存储的凭据",
 	credentialRemovedPending: "已移除存储的凭据，重启飞书连接后生效",
-	removeCredential: "移除已存值",
+	replaceCredential: "更换",
+	setCredential: "设置",
+	cancel: "取消",
+	removeCredential: "移除",
 	removingCredential: "移除中…",
 	credentialConfigured: "已配置",
 	credentialMissing: "未配置",
 	credentialReadOnly: "当前凭据存储不可写",
 	appIdPlaceholder: "输入 App ID（cli_…）",
 	appSecretPlaceholder: "输入 App Secret",
-	credentialsPendingHint: "填写后点「保存凭据」；两项齐全时插件会自动连接飞书。",
-	connectionTabHelp: "连接状态与飞书应用凭据。凭据不完整时不会连接飞书。",
-	sessionsTabHelp: "私聊、群聊触发方式与入站内容：附件存储/预取、模型工具开关与读取预算；「需重连」项在下次连接时读取。",
-	modelTabHelp: "飞书会话使用的模型服务商、模型、推理档位与 Agent 预设；下拉选项来自宿主机实时目录，保存后对新会话生效。",
-	workspaceTabHelp: "每个用户一个工作区（模型/工具产生文件的落点），每个话题在其中拥有独立工作目录；只影响之后新建的话题。入站附件默认存于 DSH 原生附件库，不占用话题目录。插件不会自动删除工作区或话题目录；过期目录可手动删除，话题下次对话时会重建空目录。",
-	accessTabHelp: "准入采用 fail-closed：管理员不受白名单限制，非管理员私聊会被拒绝，群聊需要「群已授权 + 用户在白名单」两层同时命中。",
-	wikiTabHelp: "知识库工具以应用身份访问「知识库范围」内的文档、电子表格和多维表格。只有管理员或知识库白名单里的用户发起的话题能用；每次打开、新建、修改仍需话题发起人在授权卡上确认。",
-	advancedTabHelp: "流式刷新等低层参数、Web 覆盖文件与只读信息。",
-	save: "保存更改",
+	credentialRemoveConfirm: "确定移除已存储的凭据值？移除后不会回显，需要时须重新填写。",
+	save: "保存",
 	saving: "保存中…",
-	saveHintDirty: "只保存改动过的字段；标注「需重连」的项在下次连接时生效。",
-	discardTab: "放弃本页更改",
-	saveHintClean: "没有未保存的更改。",
-	dirtyCount: "未保存项",
+	discard: "放弃",
+	dirtyCount: "{n} 项未保存",
+	dirtyRestart: "，其中 {n} 项需要重连后生效",
+	details: "详情",
+	expand: "展开",
+	collapse: "收起",
+	collapsedCount: "{n} 项",
+	collapsedClean: "一般不用改",
+	collapsedChanged: "{n} 项已在面板修改",
+	restartTag: "需重连",
 	listAdd: "添加",
 	listRemove: "移除",
 	listEntry: "第 {n} 项",
@@ -16422,62 +16551,58 @@ const PANEL_COPY = {
 	directoryPicked: "已选择目录",
 	directoryPickFailed: "无法打开系统目录选择器",
 	saved: "已保存",
-	cleared: "已清除 Web 覆盖，恢复为 profile 配置",
-	clear: "清除 Web 覆盖",
-	clearing: "清除中…",
-	noOverrides: "当前没有 Web 覆盖",
-	overridden: "Web 覆盖",
-	inherited: "继承 profile",
-	restartTag: "需重连",
-	restartBanner: "以下配置需重启飞书连接后生效：",
-	restartWarning: "重启会断开当前飞书长连接并中断进行中的回复，请确认空闲时操作。",
-	reconnect: "重启飞书连接",
+	saveInvalid: "请先修正标红的配置项",
+	numberInvalid: "请输入数字",
+	numberMin: "不得小于 {n}",
+	numberMax: "不得大于 {n}",
+	modelFootnote: "对之后新建的会话生效。",
+	catalogFailed: "模型目录加载失败，已退回手填。",
+	catalogLoading: "正在读取宿主机选项…",
+	catalogUnavailable: "宿主机未提供可选项，请手填。",
+	restartBanner: "以下配置要重启飞书连接后生效：",
+	restartWarning: "重启会断开当前飞书连接并中断进行中的回复，确定现在重启？",
+	reconnect: "重启连接",
 	reconnecting: "重连中…",
-	refresh: "刷新状态",
+	refresh: "刷新",
 	retry: "重试",
 	pollFailed: "状态刷新失败",
 	connectDone: "已连接飞书",
 	reconnectDone: "已重启飞书连接",
-	saveInvalid: "请先修正标红的配置项",
-	enabled: "已启用",
-	disabled: "已关闭",
-	credentialRemoveConfirm: "确定移除已存储的凭据值？移除后不会回显，需要时须重新填写。",
-	analyzeTokenCard: "日志分析接口令牌",
-	analyzeTokenCardHelp: "日志平台调用分析接口时 Authorization: Bearer 后面的值。经 DSH 凭据服务写入本机凭据库，面板永不回显；保存或移除后下一次请求即生效，无需重连。未配置时接口对所有请求返回 503。",
+	loading: "加载中…",
+	loadFailed: "设置面板加载失败",
 	analyzeTokenLabel: "访问令牌",
+	analyzeTokenSummary: "请求头 Authorization: Bearer 的值，保存后立即生效；未配置时接口拒绝所有请求",
 	analyzeTokenPlaceholder: "填写新令牌（建议 32 位以上随机串）",
-	saveAnalyzeToken: "保存令牌",
 	analyzeTokenSaved: "令牌已保存，下一次请求生效",
 	analyzeTokenRemoved: "令牌已移除，接口将拒绝所有请求",
-	accessNotLoaded: "飞书连接建立后加载授权列表",
-	loading: "加载中…",
-	loadFailed: "设置面板加载失败",
-	catalogFailed: "模型目录加载失败，已退回手填。",
-	catalogLoading: "正在读取宿主机选项…",
-	catalogUnavailable: "宿主机未提供可选项，请手填。",
-	version: "插件版本",
+	overlayTitle: "Web 覆盖",
 	overlayPath: "覆盖文件",
-	overlayPathHelp: "可以直接编辑该 JSON 文件；面板保存会整体重写它，「清除 Web 覆盖」会删除它并回落到 profile 配置。",
-	advancedCard: "只读与高级信息",
-	advancedHelp: "这些值来自 profile 配置，不能在面板里编辑。",
-	readOnlyCard: "部署级参数",
-	accessCard: "访问与授权",
-	accessCardHelp: "准入采用 fail-closed：管理员不受白名单限制（私聊、任意群聊都可直接对话）；非管理员私聊会被拒绝，群聊需要「群已授权 + 用户在白名单」两层同时命中。管理员与准入模式在上方「准入与授权」中编辑；私聊机器人发送 /userid 获取自己的 user_id。",
-	accessModeOpenWarning: "当前准入模式为开放（open）：应用可用范围内的任何人都能开启对话。该模式不安全，仅建议调试时使用。",
-	accessAdminMissingWarning: "当前准入=guarded 但未配置管理员，也无法自动使用应用所有者，所有对话都会被拒绝。请在上方「准入与授权」填写管理员 user_id（私聊机器人发送 /userid 获取；私聊模式关闭时 /userid 不可用，可在飞书管理后台的成员详情里查看用户 ID）。",
-	accessAdminOwnerNotice: "未配置管理员，已自动使用应用所有者作为管理员：",
+	overlayCount: "{n} 项配置由面板覆盖",
+	noOverrides: "当前没有面板覆盖的配置",
+	overlayPathHelp: "面板保存的配置写在这个 JSON 文件里，优先级高于 profile。可以直接编辑；面板保存会整体重写它。",
+	clear: "恢复 profile 配置",
+	clearing: "恢复中…",
+	clearConfirm: "确定删除所有面板覆盖，恢复为 profile 配置？",
+	cleared: "已恢复为 profile 配置",
+	debugModeWarning: "调试模式已打开：应用可用范围内的任何人都能和机器人对话。用完请在「访问授权」关闭。",
+	accessAdminMissingWarning: "没有可用的管理员，所有对话都会被拒绝。请在下方填写管理员 user_id（私聊机器人发送 /userid 获取）。",
+	accessAdminCurrent: "当前管理员",
+	accessAdminSourceConfig: "已配置",
+	accessAdminSourceOwner: "应用所有者",
+	profilesWarning: "部分飞书名字和头像未能读取：{reason}",
+	accessNotLoaded: "飞书连接建立后加载授权列表",
+	accessRequestsTitle: "待处理申请",
 	accessGroupsTitle: "已授权群",
-	accessGroupsEmpty: "尚未授权任何群。机器人被拉进群后，管理员会收到带 chat_id 的群信息卡；也可在群内发送 /groupid 获取。",
 	accessUsersTitle: "已授权用户",
-	accessUsersEmpty: "尚未授权任何用户。已授权用户可在所有已授权群里与机器人对话（私聊仍只开给管理员）。",
-	accessRequestsTitle: "待处理申请",
-	accessRequestsEmpty: "没有待处理的授权申请。",
-	accessGroupChatIdPlaceholder: "群 chat_id（oc_…）",
+	accessGroupsEmpty: "还没有授权任何群",
+	accessUsersEmpty: "还没有授权任何用户",
+	accessGroupChatIdPlaceholder: "chat_id（oc_…，群里发 /groupid 获取）",
 	accessGroupNamePlaceholder: "群名（可选）",
-	accessUserIdPlaceholder: "用户 user_id",
+	accessUserIdPlaceholder: "user_id（私聊机器人发 /userid 获取）",
 	accessUserNamePlaceholder: "昵称（可选）",
 	accessAddGroup: "添加群",
 	accessAddUser: "添加用户",
+	accessAdd: "添加",
 	accessRemove: "移除",
 	accessAllow: "授权",
 	accessDeny: "忽略",
@@ -16485,23 +16610,22 @@ const PANEL_COPY = {
 	accessSourceCommand: "对话命令",
 	accessSourceCard: "授权卡",
 	accessSourcePanel: "设置面板",
-	accessRequestGroup: "群申请",
-	accessRequestUser: "用户申请",
-	accessRequestRequester: "申请人",
-	accessRequestExpires: "有效期至",
+	accessRequestGroup: "申请授权群",
+	accessRequestUser: "申请使用",
+	accessRequestIn: "在「{group}」",
+	accessRequestExpires: "{date} 前有效",
 	accessGroupAdded: "已添加群授权",
 	accessGroupRemoved: "已移除群授权",
 	accessUserAdded: "已添加用户授权",
 	accessUserRemoved: "已移除用户授权",
 	accessRequestAllowed: "已授权",
 	accessRequestDenied: "已忽略",
-	accessHints: "三种授权入口：群内 /auth 命令、入群与用户授权卡、本面板。撤销立即生效；白名单只约束非管理员（管理员在任何私聊/群聊都直接放行），非管理员需要群和用户两层同时命中。",
-	wikiUsersCard: "知识库白名单",
-	wikiUsersHelp: "与「访问授权」里的用户白名单相互独立：这里的用户（以及管理员）发起的话题可以使用知识库工具。也可以在飞书里发送 /auth wiki add @用户 或 /auth wiki remove @用户；移除立即生效。",
-	wikiUsersEmpty: "知识库白名单为空：目前只有管理员发起的话题能使用知识库工具。",
+	wikiUsersTitle: "可使用的人",
+	wikiUsersAdminPlus: "管理员 + {n}",
+	wikiUsersEmpty: "目前只有管理员发起的话题能用知识库工具",
+	wikiUsersHint: "也可以在飞书发 /auth wiki add @用户",
 	wikiUserAdded: "已加入知识库白名单",
-	wikiUserRemoved: "已移出知识库白名单",
-	accessChatIdHint: "chat_id 可从入群群信息卡或群内 /groupid 获取；user_id 可私聊机器人发送 /userid 获取。"
+	wikiUserRemoved: "已移出知识库白名单"
 };
 //#endregion
 //#region src/settings/overlay.ts
@@ -16774,6 +16898,18 @@ const APP_OWNER_LOOKUP_TIMEOUT_MS = 1e4;
 const SCOPE_CHECK_TIMEOUT_MS = 1e4;
 /** Upper bound on the whole post-connect slash-command panel sync (one list plus per-command writes). */
 const SLASH_COMMAND_SYNC_TIMEOUT_MS = 3e4;
+/**
+* How long one resolved user or chat profile is reused. Short enough that
+* every page entry shows current Feishu data; long enough that the session
+* header and its sidebar tab opening together cost one lookup.
+*/
+const PROFILE_TTL_MS = 30 * 1e3;
+/** The Feishu `code=<n> <msg>` of a failed API call, else the error text. */
+function feishuReason(error) {
+	return error instanceof FeishuApiError ? error.detail : messageOf$3(error);
+}
+/** Feishu `chat_id`s the profile lookup accepts. */
+const FEISHU_CHAT_ID_PATTERN = /^oc_[A-Za-z0-9_-]+$/u;
 /** Wrap the host's storage facility open behind a stable local type. */
 async function openFeishuDomain(ctx) {
 	const domain = await ctx.storageDomain.open(feishuDomain);
@@ -16786,6 +16922,7 @@ async function openFeishuDomain(ctx) {
 	const accessRequestsRaw = domain.table("access_requests");
 	const accessWikiUsersRaw = domain.table("access_wiki_users");
 	const analyzeRequestsRaw = domain.table("analyze_requests");
+	const sessionOriginsRaw = domain.table("session_origins");
 	return {
 		routes: {
 			get: (key) => table.get(key),
@@ -16840,6 +16977,10 @@ async function openFeishuDomain(ctx) {
 			put: (key, value) => analyzeRequestsRaw.put(key, value),
 			entries: () => analyzeRequestsRaw.entries()
 		},
+		sessionOrigins: {
+			get: (key) => sessionOriginsRaw.get(key),
+			put: (key, value) => sessionOriginsRaw.put(key, value)
+		},
 		getGlobal: () => domain.global.get() ?? {},
 		setGlobal: (value) => domain.global.set(value),
 		close: () => domain.close()
@@ -16986,6 +17127,8 @@ var FeishuService = class {
 	* is unset. Cleared on shutdown so a reconnect looks it up again.
 	*/
 	appOwner;
+	/** Live-resolved user and chat profiles, by `user:`/`chat:` key; misses are kept as `{}`. */
+	profileCache = /* @__PURE__ */ new Map();
 	/** Post-connect scope self-check; cleared on shutdown. */
 	scopeCheckState;
 	/** Post-connect slash-command panel sync; cleared on shutdown. */
@@ -17164,7 +17307,13 @@ var FeishuService = class {
 			streamer: () => this.streamer,
 			questionAnswerer: () => this.questionAnswerer,
 			approvalAnswerer: () => this.approvalAnswerer,
-			commands: { handleSlash: (msg, line) => this.handleSlashMessage(msg, line) }
+			commands: {
+				owns: (line) => {
+					const parsed = parseSlashCommand(line);
+					return parsed !== void 0 && commandSpec(parsed.name) !== void 0;
+				},
+				handleSlash: (msg, line) => this.handleSlashMessage(msg, line)
+			}
 		});
 		this.analyzeLauncher = new AnalyzeLauncher({
 			ctx: this.ctx,
@@ -17653,6 +17802,118 @@ var FeishuService = class {
 			};
 		}
 	}
+	/** Panel: Feishu origin of one Session, or null when Feishu never routed it. */
+	async sessionOrigin(sessionId) {
+		const origin = this.routes.origin(sessionId);
+		if (origin === void 0) return null;
+		const route = this.routes.findBySession(sessionId);
+		const bound = route !== void 0;
+		const group = origin.chatType === "group";
+		const profiles = await this.feishuProfiles([origin.senderUserId], group ? [origin.chatId] : []);
+		const chat = profiles.chats[origin.chatId] ?? {};
+		const sender = profiles.users[origin.senderUserId] ?? {};
+		const senderName = sender.name ?? (group ? await this.memberName(origin.senderUserId, origin.chatId) : void 0);
+		return {
+			sessionId,
+			chatType: origin.chatType,
+			kind: origin.kind,
+			chatId: origin.chatId,
+			...chat.name === void 0 ? {} : { chatName: chat.name },
+			...chat.avatarUrl === void 0 ? {} : { chatAvatarUrl: chat.avatarUrl },
+			senderUserId: origin.senderUserId,
+			...senderName === void 0 ? {} : { senderName },
+			...sender.avatarUrl === void 0 ? {} : { senderAvatarUrl: sender.avatarUrl },
+			shared: origin.shared === true,
+			createdAt: origin.createdAt,
+			bound,
+			...bound ? { lastActivityAt: route.lastActivityAt } : {},
+			chatLink: `https://applink.feishu.cn/client/chat/open?openChatId=${encodeURIComponent(origin.chatId)}`
+		};
+	}
+	/**
+	* Live Feishu names and avatars for the panel and the session-origin view,
+	* through a {@link PROFILE_TTL_MS} cache. Ids that are not Feishu
+	* `user_id`s / `chat_id`s are skipped; a disconnected channel and failed
+	* lookups leave ids absent, and failures are reported in `warning` and not
+	* cached.
+	* @param userIds - user `user_id`s to resolve.
+	* @param chatIds - chat `chat_id`s to resolve.
+	* @returns the resolved profiles by id.
+	*/
+	async feishuProfiles(userIds, chatIds) {
+		const result = {
+			users: {},
+			chats: {}
+		};
+		const warnings = [];
+		const now = Date.now();
+		for (const [key, cached] of this.profileCache) if (now - cached.at >= PROFILE_TTL_MS) this.profileCache.delete(key);
+		const fresh = (key) => this.profileCache.get(key)?.profile;
+		const keep = (target, id, profile) => {
+			if (profile.name !== void 0 || profile.avatarUrl !== void 0) target[id] = profile;
+		};
+		const users = [...new Set(userIds)].filter((id) => FEISHU_USER_ID_PATTERN.test(id));
+		const chats = [...new Set(chatIds)].filter((id) => FEISHU_CHAT_ID_PATTERN.test(id));
+		const missingUsers = [];
+		for (const id of users) {
+			const cached = fresh(`user:${id}`);
+			if (cached === void 0) missingUsers.push(id);
+			else keep(result.users, id, cached);
+		}
+		const missingChats = [];
+		for (const id of chats) {
+			const cached = fresh(`chat:${id}`);
+			if (cached === void 0) missingChats.push(id);
+			else keep(result.chats, id, cached);
+		}
+		const channel = this.channel;
+		if (channel === void 0) return result;
+		const lookups = [];
+		if (missingUsers.length > 0 && channel.userProfiles !== void 0) lookups.push(channel.userProfiles(missingUsers).then((found) => {
+			for (const id of missingUsers) {
+				const profile = found.get(id) ?? {};
+				this.profileCache.set(`user:${id}`, {
+					profile,
+					at: now
+				});
+				keep(result.users, id, profile);
+			}
+		}, (error) => {
+			warnings.push(`读取用户资料失败：${feishuReason(error)}`);
+		}));
+		const chatProfile = channel.chatProfile?.bind(channel);
+		if (chatProfile !== void 0) {
+			let chatError;
+			for (const id of missingChats) lookups.push(chatProfile(id).then((profile) => {
+				this.profileCache.set(`chat:${id}`, {
+					profile,
+					at: now
+				});
+				keep(result.chats, id, profile);
+			}, (error) => {
+				if (chatError !== void 0) return;
+				chatError = `读取群信息失败：${feishuReason(error)}`;
+				warnings.push(chatError);
+			}));
+		}
+		await Promise.all(lookups);
+		if (warnings.length > 0) {
+			result.warning = warnings.join("；");
+			this.ctx.logger?.debug?.("dsh-channels: Feishu profile lookup: %s", result.warning);
+		}
+		return result;
+	}
+	/** Chat-member-list name for a user the contact profile cannot name. */
+	async memberName(userId, chatId) {
+		const cached = this.profileCache.get(`member:${chatId}:${userId}`);
+		if (cached !== void 0 && Date.now() - cached.at < PROFILE_TTL_MS) return cached.profile.name;
+		const name = await this.channel?.memberName?.(userId, chatId);
+		this.profileCache.set(`member:${chatId}:${userId}`, {
+			profile: name === void 0 ? {} : { name },
+			at: Date.now()
+		});
+		return name;
+	}
 	/** Panel: decide one pending authorization request (same path as the card). */
 	async resolveAccessRequest(token, decision) {
 		const requests = this.accessRequests;
@@ -19372,6 +19633,11 @@ async function readJsonBody(req) {
 		throw new HttpError(400, "请求体不是合法 JSON");
 	}
 }
+/** Distinct non-empty entries of one comma-separated id query parameter. */
+function idList(raw) {
+	if (raw === null) return [];
+	return [...new Set(raw.split(",").map((id) => id.trim()).filter((id) => id !== ""))];
+}
 /**
 * Parse one JSON-object body for an access write. HttpErrors are answered
 * here (415/413/400); `undefined` means "already responded, stop".
@@ -19477,6 +19743,50 @@ function registerSettingsRoutes(server, gate, surface) {
 				sendJson(res, 200, await surface.catalogFor(url.searchParams.get("provider") ?? void 0, url.searchParams.get("model") ?? void 0));
 			})
 		}),
+		server.register({
+			kind: "exact",
+			path: SESSION_ORIGIN_ROUTE,
+			handler: guarded(async (req, res) => {
+				if (!allowOnly(req, res, ["GET", "HEAD"])) return;
+				if (methodOf(req) === "HEAD") {
+					res.writeHead(200, { "cache-control": "no-store" });
+					res.end();
+					return;
+				}
+				const sessionId = new URL(req.url ?? "/", "http://dsh.local").searchParams.get("sessionId")?.trim();
+				if (sessionId === void 0 || sessionId === "") {
+					sendJson(res, 400, {
+						ok: false,
+						error: "缺少 sessionId 参数"
+					});
+					return;
+				}
+				sendJson(res, 200, await surface.sessionOrigin(sessionId));
+			})
+		}),
+		server.register({
+			kind: "exact",
+			path: PROFILES_ROUTE,
+			handler: guarded(async (req, res) => {
+				if (!allowOnly(req, res, ["GET", "HEAD"])) return;
+				if (methodOf(req) === "HEAD") {
+					res.writeHead(200, { "cache-control": "no-store" });
+					res.end();
+					return;
+				}
+				const params = new URL(req.url ?? "/", "http://dsh.local").searchParams;
+				const userIds = idList(params.get("users"));
+				const chatIds = idList(params.get("chats"));
+				if (userIds.length > 200 || chatIds.length > 200) {
+					sendJson(res, 400, {
+						ok: false,
+						error: `每次最多查询 200 个用户和 200 个群`
+					});
+					return;
+				}
+				sendJson(res, 200, await surface.feishuProfiles(userIds, chatIds));
+			})
+		}),
 		server.register({
 			kind: "exact",
 			path: CONFIG_ROUTE,
@@ -19735,12 +20045,13 @@ const CREDENTIAL_FIELDS = [
 	"appSecret",
 	"analyzeToken"
 ];
-/** Optional text fields: an empty string in the panel clears the override. */
+/** Optional fields: an empty string in the panel clears the override. */
 const OPTIONAL_TEXT_KEYS = /* @__PURE__ */ new Set([
 	"provider",
 	"model",
 	"reasoningEffort",
 	"agentPreset",
+	"maxTokens",
 	"adminUserId",
 	"analyzeListen"
 ]);
@@ -19829,26 +20140,47 @@ function normalizeStringList(key, raw, spec) {
 	};
 }
 const SELECT_OPTIONS = {
-	attachmentStore: [{
-		value: "native",
-		label: "DSH 原生附件库（默认）"
-	}, {
-		value: "archive",
-		label: "工作区 attachments/（旧版）"
-	}],
 	dmMode: [{
 		value: "open",
-		label: "开放私聊"
+		label: "开启"
 	}, {
 		value: "disabled",
-		label: "禁用私聊"
+		label: "关闭"
 	}],
 	threadFallback: [{
 		value: "degrade",
-		label: "话题被拒时降级为会话级"
+		label: "降级为会话级"
 	}, {
 		value: "strict",
-		label: "话题被拒时直接失败"
+		label: "直接失败"
+	}],
+	topicIsolation: [
+		{
+			value: "auto",
+			label: "自动（推荐）"
+		},
+		{
+			value: "subdir",
+			label: "普通子目录"
+		},
+		{
+			value: "worktree",
+			label: "Git worktree"
+		}
+	],
+	attachmentStore: [{
+		value: "native",
+		label: "DSH 原生附件库"
+	}, {
+		value: "archive",
+		label: "话题目录 attachments/"
+	}],
+	accessMode: [{
+		value: "guarded",
+		label: "关闭（管理员与白名单）"
+	}, {
+		value: "open",
+		label: "打开（所有人可聊）"
 	}],
 	loggerLevel: [
 		{
@@ -19867,260 +20199,341 @@ const SELECT_OPTIONS = {
 			value: "error",
 			label: "error"
 		}
-	],
-	accessMode: [{
-		value: "guarded",
-		label: "守卫模式（仅管理员与白名单）"
-	}, {
-		value: "open",
-		label: "开放（不安全，仅调试）"
-	}]
+	]
 };
-/** Panel copy per editable key: label, help, and (for numbers) bounds. */
+/** Two-value selects rendered as switches: the stored value while on / off. */
+const TOGGLES = {
+	dmMode: {
+		on: "open",
+		off: "disabled"
+	},
+	threadFallback: {
+		on: "degrade",
+		off: "strict"
+	},
+	attachmentStore: {
+		on: "native",
+		off: "archive"
+	},
+	accessMode: {
+		on: "open",
+		off: "guarded"
+	}
+};
+const DAY_MS = 864e5;
 const FIELD_META = {
+	dmMode: {
+		label: "私聊",
+		group: "trigger",
+		summary: "关闭后私聊不再触发会话",
+		help: "群聊和已绑定的话题不受影响。"
+	},
+	requireMention: {
+		label: "普通群需要 @ 机器人",
+		group: "trigger",
+		summary: "话题内始终不需要 @",
+		help: "关闭后普通群里的每条消息都会触发会话。"
+	},
+	threadFallback: {
+		label: "话题被拒时降级为会话级",
+		group: "trigger",
+		summary: "飞书不允许建话题时改在会话里回复，关闭则直接报错"
+	},
 	baseDir: {
-		label: "工作区根目录（文件落点）",
-		help: "每个用户/群成员一个工作区：私聊 <baseDir>/p2p/<user_id>/，群聊 <baseDir>/groups/<chat_id>/<user_id>/；每个话题在其中拥有独立工作目录 <工作区>/topics/<话题>/（Git 仓库工作区可自动改用 worktree）。必须是绝对路径（~ 开头按家目录展开），保存时会创建该目录；只影响之后新建立的会话 —— 已有话题即使 /renew 也沿用原目录，旧文件不会迁移。",
+		label: "工作区根目录",
+		group: "workspace",
+		summary: "模型和工具生成文件的位置",
+		help: "每个用户一个工作区：私聊 <根目录>/p2p/<user_id>/，群聊 <根目录>/groups/<chat_id>/<user_id>/，每个话题在里面有独立目录。必须是绝对路径（~ 按家目录展开），保存时会创建该目录。只影响之后新建的话题，旧文件不迁移。",
 		placeholder: "/Users/you/.dsh/dsh-channels/workspaces",
 		wide: true
 	},
-	dmMode: {
-		label: "私聊模式",
-		help: "禁用后私聊消息不再触发会话；群聊与已绑定话题不受影响。"
+	topicIsolation: {
+		label: "话题工作目录",
+		group: "workspace",
+		summary: "每个话题在工作区里怎么隔离",
+		help: "自动：工作区是 Git 仓库时给每个话题建一个 worktree，否则用普通子目录。选 Git worktree 但宿主不支持时退回普通子目录。只影响之后新建的话题，已有话题保持原来的目录。"
 	},
-	requireMention: {
-		label: "普通群需 @ 机器人",
-		help: "已绑定的主题内始终不需要 @；关闭后普通群的每条消息都会触发。"
+	routeTtlMs: {
+		label: "话题过期",
+		group: "cards",
+		summary: "闲置超过这么久的话题不再续聊，0 为永不过期",
+		help: "过期话题里的新消息会被明确拒绝并提示新开话题，而不是悄悄开一个没有上下文的会话；Session 和工作区文件都保留。调小后，下一次清理（启动时和定期）就会让更多旧话题过期。",
+		min: 0,
+		step: DAY_MS,
+		unit: "天",
+		scale: DAY_MS
 	},
-	threadFallback: {
-		label: "话题被拒时的兜底",
-		help: "degrade 降级为会话级路由；strict 直接让回复失败。"
+	approvalTimeoutMs: {
+		label: "审批卡片等待",
+		group: "cards",
+		summary: "超时自动拒绝，等待期间回复暂停",
+		min: 1e4,
+		max: 36e5,
+		step: 1e3,
+		unit: "秒",
+		scale: 1e3
+	},
+	questionTimeoutMs: {
+		label: "提问卡片等待",
+		group: "cards",
+		summary: "模型向用户提问时最多等多久",
+		min: 1e4,
+		max: 36e5,
+		step: 1e3,
+		unit: "秒",
+		scale: 1e3
+	},
+	refreshMs: {
+		label: "流式刷新间隔",
+		group: "cards",
+		summary: "回复卡片多久更新一次",
+		min: 200,
+		max: 1e4,
+		step: 100,
+		unit: "ms"
+	},
+	statusRefreshMs: {
+		label: "状态行保活间隔",
+		group: "cards",
+		summary: "没有文字输出时，计时多久刷新一次",
+		min: 1e3,
+		max: 6e4,
+		step: 500,
+		unit: "ms"
 	},
 	welcomeOnboarding: {
-		label: "首次私聊引导卡",
-		help: "每个私聊会话第一次触达时发送一张命令与用法引导卡，只发一次。"
+		label: "首次私聊发引导卡",
+		group: "features",
+		summary: "每个私聊只发一次"
 	},
 	slashCommandPanel: {
-		label: "同步飞书原生斜杠指令面板",
-		help: "连接时把插件命令同步到飞书输入 / 时弹出的面板；需开通 application:app_slash_command:read 与 write 权限，部分企业不允许应用添加斜杠指令。关闭时不读写面板，直接输入命令不受影响。"
+		label: "同步斜杠指令面板",
+		group: "features",
+		summary: "在飞书输入 / 时列出插件命令",
+		help: "需要 application:app_slash_command:read 和 application:app_slash_command:write 权限。部分企业不允许应用添加斜杠指令；关闭时不读写面板，直接输入命令不受影响。"
 	},
 	allowPermissionSwitch: {
-		label: "允许飞书侧切换权限预设",
-		help: "安全敏感：开启后话题所有者可用 /permissions 切换沙箱与审批预设。"
+		label: "允许在飞书里切换权限预设",
+		group: "features",
+		summary: "话题所有者可以用 /permissions 改沙箱和审批"
 	},
-	analyzeListen: {
-		label: "日志分析接口监听地址",
-		help: "日志平台调用 POST /dsh-channels/analyze 的独立端口，格式 host:port（如 0.0.0.0:3090）；留空 = 关闭接口；需重连生效。请求需带 Authorization: Bearer <令牌>，令牌在本页下方「日志分析接口令牌」卡片填写。",
-		placeholder: "留空 = 关闭"
+	provider: {
+		label: "服务商",
+		group: "model",
+		summary: "留空使用部署默认",
+		placeholder: "留空 = 部署默认"
 	},
-	adminUserId: {
-		label: "管理员 user_id",
-		help: "唯一管理员。私聊机器人发送 /userid 获取（不是 ou_ 开头的 open_id，也不是邮箱）；留空 = 清除 Web 覆盖。未配置时自动使用飞书应用所有者（需可选的「获取应用信息」权限，开不了就在这里手动填写）；两者都没有时 guarded 模式会拒绝所有对话。",
-		placeholder: "user_id"
+	model: {
+		label: "模型",
+		group: "model",
+		summary: "留空使用部署默认",
+		placeholder: "留空 = 部署默认"
 	},
-	accessMode: {
-		label: "准入模式",
-		help: "guarded（默认）：私聊仅管理员，群聊需群授权且发送者是管理员或已授权用户；open：应用可用范围内的任何人都能对话，不安全，仅调试。"
+	reasoningEffort: {
+		label: "推理档位",
+		group: "model",
+		summary: "模型声明的档位 id，留空使用适配器默认",
+		placeholder: "留空 = 适配器默认"
 	},
-	authRequestTtlDays: {
-		label: "授权申请有效期（天）",
-		help: "入群/用户授权申请卡的有效期，1–30 天；过期后卡片需重新触发申请（也可在本页下方「待处理申请」中处理）。",
+	maxTokens: {
+		label: "单次输出上限",
+		group: "model",
+		summary: "留空使用模型默认",
 		min: 1,
-		max: 30,
-		step: 1
+		step: 1,
+		unit: "tokens",
+		optional: true,
+		placeholder: "模型默认"
+	},
+	agentPreset: {
+		label: "Agent 预设",
+		group: "model",
+		summary: "留空使用 roster 默认",
+		placeholder: "留空 = roster 默认"
 	},
 	acceptAttachments: {
-		label: "接收入站附件",
-		help: "接收飞书图片、文件与合并转发记录。native（默认）下入站附件存入 DSH 原生附件库：触发消息的图片预取进首轮、文件保持懒取，纯附件消息不回复、不落地，需要时请引用该消息（多个文件可合并转发后引用）再提问；archive 下按旧版行为下载到工作区 attachments/。关闭后附件消息不保存、不触发模型、也不列入清单。"
+		label: "接收图片和文件",
+		group: "attachments",
+		summary: "关闭后附件消息不保存、不触发模型",
+		help: "纯附件消息不回复；需要时引用该消息再提问，多个文件可以合并转发后引用。也接收合并转发的聊天记录。"
 	},
 	attachmentStore: {
-		label: "入站附件存储后端",
-		help: "native（默认）：图片与文件存入 DSH 原生附件库（不可变、内容寻址去重、读取校验、随 Session 回放；不自动清理）。archive：旧版下载到话题工作区 attachments/（可清理但会阻塞会话）。宿主未挂载附件服务时 native 自动降级 archive。"
+		label: "使用 DSH 原生附件库",
+		group: "attachments",
+		summary: "推荐开启；关闭则下载到话题目录 attachments/",
+		help: "原生附件库：不可变、内容寻址去重、随 Session 回放，不自动清理。话题目录：旧版行为，可以手动清理，但下载会阻塞会话。宿主没有附件服务时自动退回话题目录。"
 	},
 	prefetchImages: {
-		label: "预取触发消息的图片",
-		help: "native 下把触发消息的图片预取为首轮 ImageBlock，会话/话题/卡片不等下载；失败、超限或超时的图片降级为清单中的懒取项。关闭后图片也需用 feishu_attachment_fetch 获取。"
+		label: "预取触发消息里的图片",
+		group: "attachments",
+		summary: "首轮直接带图，失败的留给模型按需取"
+	},
+	historyBootstrapLimit: {
+		label: "首轮带上话题历史",
+		group: "attachments",
+		summary: "新会话自动附带最近几条消息，0 为关闭",
+		help: "更早的消息由模型用 feishu_topic_messages 工具翻页读取。缺权限或读取失败时静默省略。",
+		min: 0,
+		max: 20,
+		step: 1,
+		unit: "条"
+	},
+	"feishuTools.attachmentFetch": {
+		label: "读取附件",
+		group: "tools",
+		summary: "按需下载已授权消息里的图片和文件",
+		help: "工具名 feishu_attachment_fetch。关闭后文件无法按需读取，入站文件直接下载到话题目录。对新会话生效。"
+	},
+	"feishuTools.topicMessages": {
+		label: "读取话题消息",
+		group: "tools",
+		summary: "翻看引用消息和话题里更早的内容",
+		help: "工具名 feishu_topic_messages。只影响模型主动读取；引用摘录和首轮历史不受影响。"
+	},
+	"feishuTools.sendFile": {
+		label: "发送文件",
+		group: "tools",
+		summary: "把生成的图片或文件发回会话，需 im:resource 权限",
+		help: "工具名 feishu_send_file。图片不超过 10 MB，文件不超过 30 MB。对新会话生效。"
 	},
 	prefetchTimeoutMs: {
-		label: "图片预取整段超时（ms）",
-		help: "一次触发消息图片预取的总超时（默认 10000 ms，100–120000）；到期后已取回的图片保留，其余降级为清单，不阻塞回合。",
+		label: "图片预取超时",
+		group: "limits",
 		min: 100,
 		max: 12e4,
-		step: 100
+		step: 100,
+		unit: "ms"
 	},
 	prefetchImageMaxBytes: {
-		label: "单张预取图片上限（字节）",
-		help: "单张图片超过该字节数即不入首轮图片、留在清单懒取（默认 20971520 = 20 MiB）。",
+		label: "单张预取图片上限",
+		group: "limits",
 		min: 1,
 		max: 200 * 1024 * 1024,
-		step: 1
+		step: 1,
+		unit: BYTES_UNIT
 	},
 	prefetchTotalMaxBytes: {
-		label: "单次预取总量上限（字节）",
-		help: "一次触发消息图片预取的总字节预算（默认 52428800 = 50 MiB）；用尽后剩余图片降级为清单懒取。",
+		label: "单次预取总量",
+		group: "limits",
 		min: 1,
 		max: 1024 * 1024 * 1024,
-		step: 1
-	},
-	historyBootstrapLimit: {
-		label: "首轮话题历史条数",
-		help: "新 Session 首轮自动附带本话题最近 N 条消息摘要（0 = 关闭，上限 20）；被动读取使用短预算，缺权限/失败时静默省略。更早的消息用 feishu_topic_messages 工具翻页。",
-		min: 0,
-		max: 20,
-		step: 1
-	},
-	promptContextTimeoutMs: {
-		label: "被动读取预算（ms）",
-		help: "引用摘录与首轮话题历史这类被动 prompt 增强的整段预算（默认 3000 ms，100–10000）；超时即省略对应块、回合照跑。模型主动调用工具的读取超时另由 feishu_tools 超时控制。",
-		min: 100,
-		max: 1e4,
-		step: 100
-	},
-	"feishuTools.attachmentFetch": {
-		label: "启用 feishu_attachment_fetch 工具",
-		help: "让模型按 message_id/file_key 懒取已授权消息的图片/文件。关闭后文件无法懒取，插件整体回退 archive 后端（入站文件直接下载到工作区）。对新会话生效。"
+		step: 1,
+		unit: BYTES_UNIT
 	},
 	"feishuTools.attachmentFetchMaxResources": {
-		label: "单次取回资源数上限",
-		help: "一次工具调用最多取回的附件数量（默认 10，1–50）；超出会返回可读原因，模型可按 file_key 拆分重试。",
+		label: "读取附件：数量上限",
+		group: "limits",
 		min: 1,
 		max: 50,
-		step: 1
+		step: 1,
+		unit: "个"
 	},
 	"feishuTools.attachmentFetchMaxBytes": {
-		label: "单次取回字节预算（字节）",
-		help: "一次工具调用的总下载字节预算（默认 104857600 = 100 MiB，不设上限）；文件流式写入原生库，不整文件缓冲，几 GiB 的文件只占磁盘。",
+		label: "读取附件：总字节",
+		group: "limits",
 		min: 1,
-		step: 1
+		step: 1,
+		unit: BYTES_UNIT
 	},
 	"feishuTools.attachmentFetchTimeoutMs": {
-		label: "单次取回超时（ms）",
-		help: "一次 feishu_attachment_fetch 的整段超时（默认 120000 ms，最小 1000，最大 2147483647 ≈ 24.8 天）；到期取消下载并逐项报告可读原因。大文件请按带宽同步调大。",
+		label: "读取附件：超时",
+		group: "limits",
 		min: 1e3,
 		max: MAX_TIMER_DELAY_MS,
-		step: 1e3
-	},
-	"feishuTools.topicMessages": {
-		label: "启用 feishu_topic_messages 工具",
-		help: "让模型按需读取引用消息与话题内更早的消息/附件。关闭只影响模型工具；被动的引用摘录与首轮历史仍由 historyBootstrapLimit 控制。"
+		step: 1e3,
+		unit: "ms"
 	},
 	"feishuTools.topicMessagesTimeoutMs": {
-		label: "单次话题读取超时（ms）",
-		help: "一次 feishu_topic_messages 的整段超时（默认 20000 ms，1000–120000）；被动摘录使用独立的短预算。",
+		label: "读取话题消息：超时",
+		group: "limits",
 		min: 1e3,
 		max: 12e4,
-		step: 1e3
+		step: 1e3,
+		unit: "ms"
 	},
-	"feishuTools.sendFile": {
-		label: "启用 feishu_send_file 工具",
-		help: "让模型把当前话题工作目录里生成的图片/文件发回当前会话（图片 ≤10 MB，文件 ≤30 MB）。需开通 im:resource 权限。对新会话生效。"
+	promptContextTimeoutMs: {
+		label: "引用摘录与历史：超时",
+		group: "limits",
+		min: 100,
+		max: 1e4,
+		step: 100,
+		unit: "ms"
+	},
+	accessMode: {
+		label: "调试模式",
+		group: "access",
+		summary: "打开后所有人都能聊，不安全，只在调试时用",
+		help: "关闭时（默认）：管理员随时可用；非管理员私聊会被拒绝；群聊要同时满足群已授权、发言人在用户白名单里。授权入口有三个：群里 /auth 命令、授权卡、本页。撤销立即生效。"
+	},
+	adminUserId: {
+		label: "管理员 user_id",
+		group: "access",
+		summary: "私聊机器人发送 /userid 获取；留空使用应用所有者",
+		help: "不是 ou_ 开头的 open_id，也不是邮箱。私聊关闭时 /userid 不可用，可以在飞书管理后台的成员详情里查看。自动使用应用所有者需要可选的「获取应用信息」权限。",
+		placeholder: "user_id"
+	},
+	authRequestTtlDays: {
+		label: "申请有效期",
+		group: "access",
+		summary: "授权申请卡多久内可以处理",
+		min: 1,
+		max: 30,
+		step: 1,
+		unit: "天"
 	},
 	"feishuTools.wikiRead": {
-		label: "启用知识库读取工具",
-		help: "让模型浏览「知识库范围」内的知识库节点，并读取 docx 文档、电子表格和多维表格（feishu_wiki_list / feishu_wiki_read / feishu_wiki_sheet_read / feishu_wiki_base_read），以应用身份访问。需开通 wiki:wiki、docx:document（或对应的只读权限），电子表格需 sheets:spreadsheet:read，多维表格需 base:table:read、base:field:read、base:record:read（旧版 sheets:spreadsheet、bitable:app 不生效）。只有话题所有者是管理员或在知识库白名单（/auth wiki add @成员）中才能使用；打开文档前会在授权卡上征得话题所有者同意，每个话题一次。知识库范围为空时不挂载。对新会话生效。"
+		label: "读取知识库",
+		group: "wiki",
+		summary: "浏览节点，读取文档、电子表格、多维表格",
+		help: "以应用身份访问，工具 feishu_wiki_list / feishu_wiki_read / feishu_wiki_sheet_read / feishu_wiki_base_read。打开文档前在授权卡上征得话题发起人同意，每个话题一次。只有管理员或下方「可使用的人」发起的话题能用（/auth wiki add @成员）。需要权限 wiki:wiki、docx:document（或只读）、sheets:spreadsheet:read、base:table:read、base:field:read、base:record:read；旧版 sheets:spreadsheet、bitable:app 不生效。对新会话生效。"
 	},
 	"feishuTools.wikiWrite": {
-		label: "启用知识库写入工具",
-		help: "让模型在「知识库范围」内新建 docx 文档、电子表格和多维表格，编辑本应用拥有的文档和电子表格，增改删本应用拥有的多维表格记录、向其他多维表格新增记录（feishu_wiki_create / feishu_wiki_edit / feishu_wiki_sheet_edit / feishu_wiki_base_edit），以应用身份访问；每次新建或编辑都需话题所有者在审批卡上同意。需开通 wiki:wiki、docx:document、sheets:spreadsheet:write_only、base:record:create、base:record:update、base:record:delete 权限，以及读取工具的权限；使用条件同读取工具（管理员或知识库白名单）。知识库范围为空时不挂载。对新会话生效。"
+		label: "编辑知识库",
+		group: "wiki",
+		summary: "新建和修改文档、表格，每次都需审批",
+		help: "工具 feishu_wiki_create / feishu_wiki_edit / feishu_wiki_sheet_edit / feishu_wiki_base_edit。只能编辑本应用拥有的文档和表格；其他多维表格只能新增记录。需要读取工具的权限，以及 sheets:spreadsheet:write_only、base:record:create、base:record:update、base:record:delete。对新会话生效。"
 	},
 	wikiRoots: {
-		label: "知识库范围（wikiRoots）",
-		help: "知识库工具只能访问这些位置，每个输入框填一个链接：整个知识空间 https://<租户>.feishu.cn/wiki/space/<space_id>，或节点 https://<租户>.feishu.cn/wiki/<node_token>（该节点及其下所有节点）；最多 20 项，空输入框保存时忽略。留空 = 不挂载任何知识库工具（即使上面的开关已开启）。对新会话生效。",
+		label: "可访问范围",
+		group: "wiki",
+		summary: "每行一个知识空间或节点链接，为空时不挂载知识库工具",
+		help: "整个知识空间 https://<租户>.feishu.cn/wiki/space/<space_id>，或节点 https://<租户>.feishu.cn/wiki/<node_token>（含其下所有节点）。最多 20 项，空行保存时忽略。对新会话生效。",
 		placeholder: "https://<租户>.feishu.cn/wiki/space/<space_id>",
 		wide: true
 	},
-	provider: {
-		label: "模型服务商",
-		help: "留空 = 使用部署默认；例如 deepseek-official。",
-		placeholder: "留空 = 部署默认"
-	},
-	model: {
-		label: "模型 id",
-		help: "留空 = 使用部署默认；例如 deepseek-v4-flash。",
-		placeholder: "留空 = 部署默认"
-	},
-	reasoningEffort: {
-		label: "推理档位",
-		help: "模型声明的精确档位 id（如 high / max）；留空 = 适配器默认。",
-		placeholder: "留空 = 适配器默认"
-	},
-	agentPreset: {
-		label: "Agent 预设",
-		help: "新会话使用的预设 id（如 standard）；留空 = roster 默认。",
-		placeholder: "留空 = roster 默认"
-	},
-	refreshMs: {
-		label: "流式刷新间隔（ms）",
-		help: "流式卡片的 patch 节流间隔，200–10000；需重连生效。",
-		min: 200,
-		max: 1e4,
-		step: 100
-	},
-	statusRefreshMs: {
-		label: "状态行保活间隔（ms）",
-		help: "无文本输出时活动状态行的计时刷新间隔，1000–60000；需重连生效。",
-		min: 1e3,
-		max: 6e4,
-		step: 500
+	analyzeListen: {
+		label: "监听地址",
+		group: "analyze",
+		summary: "日志平台调用分析接口的 host:port，留空关闭",
+		help: "接口路径 POST /dsh-channels/analyze，请求需带 Authorization: Bearer <访问令牌>。",
+		placeholder: "例如 0.0.0.0:3090"
 	},
 	loggerLevel: {
 		label: "SDK 日志级别",
-		help: "官方 SDK 的日志级别；需重连生效。"
+		group: "logging"
 	}
 };
-const GROUP_OF = {
-	baseDir: "workspace",
-	dmMode: "behavior",
-	requireMention: "behavior",
-	threadFallback: "behavior",
-	welcomeOnboarding: "behavior",
-	slashCommandPanel: "behavior",
-	allowPermissionSwitch: "behavior",
-	analyzeListen: "behavior",
-	adminUserId: "access",
-	accessMode: "access",
-	authRequestTtlDays: "access",
-	acceptAttachments: "content",
-	attachmentStore: "content",
-	prefetchImages: "content",
-	prefetchTimeoutMs: "content",
-	prefetchImageMaxBytes: "content",
-	prefetchTotalMaxBytes: "content",
-	historyBootstrapLimit: "content",
-	promptContextTimeoutMs: "tools",
-	"feishuTools.attachmentFetch": "tools",
-	"feishuTools.attachmentFetchMaxResources": "tools",
-	"feishuTools.attachmentFetchMaxBytes": "tools",
-	"feishuTools.attachmentFetchTimeoutMs": "tools",
-	"feishuTools.topicMessages": "tools",
-	"feishuTools.topicMessagesTimeoutMs": "tools",
-	"feishuTools.sendFile": "tools",
-	"feishuTools.wikiRead": "wiki",
-	"feishuTools.wikiWrite": "wiki",
-	wikiRoots: "wiki",
-	provider: "model",
-	model: "model",
-	reasoningEffort: "model",
-	agentPreset: "model",
-	refreshMs: "streaming",
-	statusRefreshMs: "streaming",
-	loggerLevel: "streaming"
-};
 /** One descriptor per editable key, in `EDITABLE_KEYS` order (Host-driven form). */
 const FIELD_DESCRIPTORS = EDITABLE_KEYS.map((key) => {
 	const meta = FIELD_META[key];
 	const options = SELECT_OPTIONS[key];
+	const toggle = TOGGLES[key];
 	const list = STRING_LIST_FIELDS[key];
 	return {
 		key,
 		label: meta.label,
 		kind: list !== void 0 ? "string-list" : BOOLEAN_KEYS.has(key) ? "boolean" : options !== void 0 ? "select" : meta.min !== void 0 ? "number" : "text",
-		group: GROUP_OF[key],
-		help: meta.help,
+		group: meta.group,
+		...meta.summary === void 0 ? {} : { summary: meta.summary },
+		...meta.help === void 0 ? {} : { help: meta.help },
 		...options === void 0 ? {} : { options },
+		...toggle === void 0 ? {} : { toggle },
 		...meta.min === void 0 ? {} : { min: meta.min },
 		...meta.max === void 0 ? {} : { max: meta.max },
 		...meta.step === void 0 ? {} : { step: meta.step },
+		...meta.unit === void 0 ? {} : { unit: meta.unit },
+		...meta.scale === void 0 ? {} : { scale: meta.scale },
+		...meta.optional === void 0 ? {} : { optional: meta.optional },
 		...meta.placeholder === void 0 ? {} : { placeholder: meta.placeholder },
 		...list === void 0 ? {} : { maxItems: list.maxItems },
 		...list?.itemFormat === void 0 ? {} : { itemFormat: list.itemFormat },
@@ -20214,15 +20627,6 @@ function withDirectoryBrowse(fields, available) {
 function messageOf$1(error) {
 	return error instanceof Error ? error.message : String(error);
 }
-function formatDays(ms) {
-	return ms === 0 ? "关闭（不过期）" : `${Math.round(ms / 864e5)} 天`;
-}
-function formatSeconds(ms) {
-	return `${Math.round(ms / 1e3)} 秒`;
-}
-function formatOptional(value, suffix = "") {
-	return value === void 0 ? "未设置" : `${value}${suffix}`;
-}
 /** Credential values are opaque strings; trim, cap length, reject control chars. */
 const MAX_CREDENTIAL_LENGTH = 512;
 function normalizeCredentialValue(raw) {
@@ -20308,39 +20712,6 @@ function normalizeAccessName(raw) {
 		value
 	};
 }
-/** Build the read-only advanced card from the effective config. */
-function readOnlyFields(config) {
-	return [
-		{
-			key: "topicIsolation",
-			label: "话题目录隔离",
-			value: config.topicIsolation === "auto" ? "自动（Git 仓库用 worktree，否则普通子目录）" : config.topicIsolation === "worktree" ? "Git worktree（失败回退子目录）" : "普通子目录",
-			help: "每个话题的独立工作目录形式；在 profile 配置里用 topicIsolation 设置（auto / subdir / worktree）。"
-		},
-		{
-			key: "routeTtlMs",
-			label: "话题路由过期",
-			value: formatDays(config.routeTtlMs),
-			help: "超期话题的后续消息会被明确拒绝，而不是新建 Context-free Session。"
-		},
-		{
-			key: "approvalTimeoutMs",
-			label: "审批卡片等待",
-			value: formatSeconds(config.approvalTimeoutMs)
-		},
-		{
-			key: "questionTimeoutMs",
-			label: "提问卡片等待",
-			value: formatSeconds(config.questionTimeoutMs)
-		},
-		{
-			key: "maxTokens",
-			label: "单次输出上限",
-			value: formatOptional(config.maxTokens, " tokens"),
-			help: "留空/未设置时使用模型适配器默认值。"
-		}
-	];
-}
 /**
 * Derive the panel phase from readiness + runtime facts. The order matters:
 * an incomplete configuration always wins (no connection is attempted), and a
@@ -20441,6 +20812,19 @@ var SettingsSurface = class {
 	* the draft provider/model changes). A broken lookup degrades to the
 	* free-text form instead of failing the panel.
 	*/
+	/** Feishu origin of one Session for the conversation sidebar. */
+	async sessionOrigin(sessionId) {
+		return { origin: await this.target.sessionOrigin(sessionId) };
+	}
+	/**
+	* Live Feishu names and avatars for the panel's users and chats.
+	* @param userIds - user `user_id`s.
+	* @param chatIds - chat `chat_id`s.
+	* @returns the profiles Feishu resolved.
+	*/
+	async feishuProfiles(userIds, chatIds) {
+		return this.target.feishuProfiles(userIds, chatIds);
+	}
 	async catalogFor(provider, model) {
 		if (this.catalog === void 0) return emptyCatalog();
 		try {
@@ -20520,7 +20904,6 @@ var SettingsSurface = class {
 				overriddenKeys,
 				restartPendingKeys,
 				fields,
-				readOnly: readOnlyFields(effective),
 				credentials
 			},
 			access
@@ -21234,6 +21617,6 @@ function apply(ctx, config) {
 	}, "dsh-channels");
 }
 //#endregion
-export { AUTH_USER_TARGET_ERRORS, AccessController, AccessRequests, AccessStore, ApprovalAnswerer, CARD_MAX_BYTES, CARD_TARGET_BYTES, CATALOG_ROUTE, CHANNEL_COMMAND_NAMES, CONFIG_ROUTE, CREDENTIALS_ROUTE, Config, DM_DENY_TEXT, DM_UNCONFIGURED_TEXT, DSH_CHANNELS_VERSION, EDITABLE_KEYS, EMPTY_TOTALS, FIELD_DESCRIPTORS, FeishuService, HEALTH_DEPENDENCY_NAMES, INTERRUPTION_NOTICE, LOGICAL_EXPORT_FORMAT, LOGICAL_EXPORT_FORMAT_VERSION, MAX_QUESTION_OPTIONS, MAX_TABLES_PER_CARD, OverlayStore, PANEL_CHEVRON_TOKEN, PANEL_COPY, PANEL_ROUTE, PANEL_TITLES, PICK_DIRECTORY_ROUTE, QuestionAnswerer, REASONING_MAX_BYTES, RECONNECT_ROUTE, RESTART_KEYS, RouteOperationQueue, SESSION_HISTORY_DISPLAY_LIMIT, STATUS_ROUTE, SUPPORTED_COMMAND_NAMES, SettingsSurface, TRUNCATION_SUFFIX, TurnStreamer, accessGroupRecordSchema, accessRequestRecordSchema, accessUserRecordSchema, addUsage, appendSessionHistory, apply, applyCatalog, applyProjectionViews, armModelCommand, averageDecodeTokensPerSecond, averageTtftMs, buildApprovalCard, buildApprovalSettledCard, buildCard, buildCommandResultCard, buildCompactComparisonCard, buildGroupInfoCard, buildHealthCard, buildInterruptionCard, buildQuestionCard, buildQuestionSettledCard, buildRenewCard, buildRequestSettledCard, buildSessionHistoryCard, buildSessionStatusCard, buildUserRequestCard, buildWorkDirCard, cacheHitPct, cardJsonBytes, chatRouteKey, commandResultCardKind, compactFailureContext, countFiberStates, createHostCatalog, createLogicalSessionExport, createSettingsDirectoryPicker, decideAccess, defaultOverlayPath, emptyCatalog, ensureWorkspace, expiredRouteRecordSchema, feishuDomain, foldAll, foldEvent, foldHealthSnapshot, foldSessionStats, inflightSnapshotSchema, inject, isAdminUserId, isSameOriginRequest, isSupportedCommand, maskOpenIdTail, measureSessionContext, mergeOverlay, mountSettingsRoutes, name, normalizeCredentialValue, normalizeOverlay, normalizeRouteRecord, normalizeSessionHistory, parseOverlay, parseSlashCommand, pickEditable, processedRecordSchema, querySessionHistory, readOnlyFields, readProjectionViews, registerChannelCommands, registerModelCommand, registerSettingsRoutes, resolveAuthUserTarget, resolveDshHome, resolveWorkDir, routeRecordSchema, segmentCardContent, serializeLogicalSession, sessionDirOf, sessionHistoryEntrySchema, splitBodyForCard, stagingPathFor, stagingRoot, stripTables, supportedCommandHelp, supportedCommandList, tableBlocks, topicDirFor, topicTokenFor, usageFromBuckets, withDirectoryBrowse, workspacePathFor, workspaceTitleFor, worktreeBranchFor };
+export { AUTH_USER_TARGET_ERRORS, AccessController, AccessRequests, AccessStore, ApprovalAnswerer, CARD_MAX_BYTES, CARD_TARGET_BYTES, CATALOG_ROUTE, CHANNEL_COMMAND_NAMES, CONFIG_ROUTE, CREDENTIALS_ROUTE, Config, DM_DENY_TEXT, DM_UNCONFIGURED_TEXT, DSH_CHANNELS_VERSION, EDITABLE_KEYS, EMPTY_TOTALS, FIELD_DESCRIPTORS, FeishuService, HEALTH_DEPENDENCY_NAMES, INTERRUPTION_NOTICE, LOGICAL_EXPORT_FORMAT, LOGICAL_EXPORT_FORMAT_VERSION, MAX_QUESTION_OPTIONS, MAX_TABLES_PER_CARD, OverlayStore, PANEL_CHEVRON_TOKEN, PANEL_COPY, PANEL_ROUTE, PANEL_TITLES, PICK_DIRECTORY_ROUTE, QuestionAnswerer, REASONING_MAX_BYTES, RECONNECT_ROUTE, RESTART_KEYS, RouteOperationQueue, SESSION_HISTORY_DISPLAY_LIMIT, STATUS_ROUTE, SUPPORTED_COMMAND_NAMES, SettingsSurface, TRUNCATION_SUFFIX, TurnStreamer, accessGroupRecordSchema, accessRequestRecordSchema, accessUserRecordSchema, addUsage, appendSessionHistory, apply, applyCatalog, applyProjectionViews, armModelCommand, averageDecodeTokensPerSecond, averageTtftMs, buildApprovalCard, buildApprovalSettledCard, buildCard, buildCommandResultCard, buildCompactComparisonCard, buildGroupInfoCard, buildHealthCard, buildInterruptionCard, buildQuestionCard, buildQuestionSettledCard, buildRenewCard, buildRequestSettledCard, buildSessionHistoryCard, buildSessionStatusCard, buildUserRequestCard, buildWorkDirCard, cacheHitPct, cardJsonBytes, chatRouteKey, commandResultCardKind, compactFailureContext, countFiberStates, createHostCatalog, createLogicalSessionExport, createSettingsDirectoryPicker, decideAccess, defaultOverlayPath, emptyCatalog, ensureWorkspace, expiredRouteRecordSchema, feishuDomain, foldAll, foldEvent, foldHealthSnapshot, foldSessionStats, inflightSnapshotSchema, inject, isAdminUserId, isSameOriginRequest, isSupportedCommand, maskOpenIdTail, measureSessionContext, mergeOverlay, mountSettingsRoutes, name, normalizeCredentialValue, normalizeOverlay, normalizeRouteRecord, normalizeSessionHistory, parseOverlay, parseSlashCommand, pickEditable, processedRecordSchema, querySessionHistory, readProjectionViews, registerChannelCommands, registerModelCommand, registerSettingsRoutes, resolveAuthUserTarget, resolveDshHome, resolveWorkDir, routeRecordSchema, segmentCardContent, serializeLogicalSession, sessionDirOf, sessionHistoryEntrySchema, splitBodyForCard, stagingPathFor, stagingRoot, stripTables, supportedCommandHelp, supportedCommandList, tableBlocks, topicDirFor, topicTokenFor, usageFromBuckets, withDirectoryBrowse, workspacePathFor, workspaceTitleFor, worktreeBranchFor };
 
 //# sourceMappingURL=index.js.map