@xmanrui/dsh-im 4.3.0 → 4.4.0

package/plugin-src/client/channels/telegram/styles.js

@@ -4,34 +4,6 @@ const CSS = String.raw`
 .dtg-page { --ddt-accent: #229ed9; --ddt-accent-deep: #1687bd; --ddt-accent-wash: #eaf7fd; }
 .dtg-avatar { color: #fff; background: #229ed9; }
 .dtg-avatar svg { display: block; }
-.dtg-access { min-width: 0; width: 100%; max-width: 100%; display: grid; gap: 10px; padding: 12px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 10px; background: var(--dsw-alias-bg-layer-2, #f7f8fa); }
-.dtg-accessHeading { position: relative; min-width: 0; max-width: 100%; display: flex; align-items: center; justify-content: space-between; flex-wrap: wrap; gap: 8px 12px; }
-.dtg-accessHeading > strong { min-width: 0; font-size: 13px; overflow-wrap: anywhere; }
-.dtg-accessStatus { min-width: 0; max-width: 100%; flex: 0 1 auto; display: inline-flex; align-items: center; justify-content: flex-end; flex-wrap: wrap; gap: 6px; }
-.dtg-accessBadge { min-width: 0; max-width: 100%; flex: 0 1 auto; padding: 3px 8px; border-radius: 999px; color: #1687bd; background: #eaf7fd; font-size: 11px; font-weight: 700; overflow-wrap: anywhere; text-align: center; }
-.dtg-accessBadge[data-mode="private-allowlist"] { color: #a15c00; background: #fff3d6; }
-.dtg-accessHelp { position: static; display: inline-flex; flex: none; }
-.dtg-accessHelpButton { width: 20px; height: 20px; display: grid; place-items: center; padding: 0; border: 1px solid color-mix(in srgb, #229ed9 28%, var(--dsw-alias-border-l2, #dfe1e5)); border-radius: 50%; color: #1687bd; background: var(--dsw-alias-bg-layer-1, #fff); font: inherit; font-size: 12px; line-height: 1; font-weight: 750; cursor: help; transition: border-color .15s ease, color .15s ease, background .15s ease, box-shadow .15s ease; }
-.dtg-accessHelpButton:hover { border-color: #229ed9; color: #1178a8; background: #eaf7fd; }
-.dtg-accessHelpButton:focus-visible { outline: none; border-color: #229ed9; box-shadow: 0 0 0 3px color-mix(in srgb, #229ed9 18%, transparent); }
-.dtg-accessTooltip { position: absolute; top: calc(100% + 8px); right: 0; z-index: 30; width: min(300px, 100%); max-width: 100%; display: grid; gap: 8px; padding: 10px 11px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 9px; color: var(--dsw-alias-label-primary, #1f2329); background: var(--dsw-alias-bg-layer-3, #fff); box-shadow: 0 10px 28px rgb(31 35 41 / 16%); opacity: 0; visibility: hidden; transform: translateY(-3px); pointer-events: none; transition: opacity .15s ease, transform .15s ease, visibility .15s ease; }
-.dtg-accessTooltipItem { display: grid; gap: 2px; }
-.dtg-accessTooltipItem + .dtg-accessTooltipItem { padding-top: 8px; border-top: 1px solid var(--dsw-alias-border-l2, #eef0f3); }
-.dtg-accessTooltipItem strong { color: var(--dsw-alias-label-primary, #1f2329); font-size: 12px; line-height: 17px; font-weight: 700; }
-.dtg-accessTooltipItem > span { color: var(--dsw-alias-label-secondary, #646a73); font-size: 11px; line-height: 16px; font-weight: 400; }
-.dtg-accessHelp:hover .dtg-accessTooltip, .dtg-accessHelp:focus-within .dtg-accessTooltip { opacity: 1; visibility: visible; transform: translateY(0); }
-.dtg-accessField { min-width: 0; max-width: 100%; display: grid; gap: 5px; color: var(--dsw-alias-label-primary, #1f2329); font-size: 12px; font-weight: 600; }
-.dtg-accessField select, .dtg-accessField textarea { min-width: 0; width: 100%; max-width: 100%; box-sizing: border-box; border: 1px solid var(--dsw-alias-border-l1, #c9cdd4); border-radius: 7px; color: inherit; background: var(--dsw-alias-bg-layer-1, #fff); font: inherit; font-weight: 400; }
-.dtg-accessField select { height: 34px; padding: 0 9px; }
-.dtg-accessField textarea { min-height: 68px; padding: 8px 9px; resize: vertical; font-family: ui-monospace, SFMono-Regular, Menlo, monospace; }
-.dtg-accessField textarea:disabled { color: var(--dsw-alias-label-tertiary, #8f959e); background: var(--dsw-alias-bg-module-platform, #f2f3f5); cursor: not-allowed; resize: none; opacity: 1; }
-.dtg-accessField > span, .dtg-accessField small { overflow-wrap: anywhere; }
-.dtg-accessField small { color: var(--dsw-alias-label-secondary, #646a73); font-weight: 400; }
-.dtg-accessWarning, .dtg-accessError { margin: 0; font-size: 12px; line-height: 1.5; }
-.dtg-accessWarning { color: #a15c00; }
-.dtg-accessError { color: var(--dsw-alias-state-error-primary, #d83931); }
-.dtg-accessActions { min-width: 0; max-width: 100%; display: flex; justify-content: flex-end; flex-wrap: wrap; }
-.dtg-accessActions .ddt-button { max-width: 100%; white-space: normal; }
 `;
 
 export function installTelegramStyles() {

package/plugin-src/client/channels/wecom/api.js

@@ -1,5 +1,6 @@
 import { normalizeAgentPresetCatalog, normalizeAgentPresetId, SET_AGENT_PRESET_ENDPOINT } from '../../agent-preset.js';
 import { normalizeLastMessageError } from '../../last-message-error.js';
+import { normalizeAccessPolicy } from '../../../../src/channels/shared/access-policy.mjs';
 import { normalizeContextEnhancementConfig } from '../../../../src/channels/shared/context-enhancement.mjs';
 
 export const WECOM_RPC_CHANNEL = '/wecom';
@@ -15,6 +16,7 @@ export const WECOM_ENDPOINTS = Object.freeze({
   setWorkspace: 'bot.workspace.set',
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: 'bot.context-enhancement.set',
+  setAccessPolicy: 'bot.access-policy.set',
 });
 
 const PROVISION_STATES = new Set(['starting', 'pending', 'refreshing', 'connecting', 'connected', 'failed', 'cancelled']);
@@ -99,6 +101,9 @@ function normalizeBot(value) {
     workspace: text(value.workspace, '', 4_096),
     agentPreset: normalizeAgentPresetId(value.agentPreset),
     contextEnhancement: normalizeContextEnhancementConfig(value.contextEnhancement),
+    ...(Object.hasOwn(value, 'accessPolicy')
+      ? { accessPolicy: normalizeAccessPolicy(value.accessPolicy) }
+      : {}),
     bot: {
       name: text(value.bot?.name, '企业微信机器人', 100),
       appIdMasked: text(value.bot?.appIdMasked, '应用标识已安全保存', 140),

package/plugin-src/client/channels/wecom/index.js

@@ -196,6 +196,7 @@ export function AccountCard({
             botId: account.botId,
             botName: account.bot.name,
             connected: account.connected,
+            accessPolicy: account.accessPolicy,
           }))),
       h(WorkspaceEditor, {
         workspace: account.workspace,

package/plugin-src/client/channels/weixin/api.js

@@ -1,5 +1,6 @@
 import { normalizeAgentPresetCatalog, normalizeAgentPresetId, SET_AGENT_PRESET_ENDPOINT } from '../../agent-preset.js';
 import { normalizeLastMessageError } from '../../last-message-error.js';
+import { normalizeAccessPolicy } from '../../../../src/channels/shared/access-policy.mjs';
 import { normalizeContextEnhancementConfig } from '../../../../src/channels/shared/context-enhancement.mjs';
 
 export const WEIXIN_RPC_CHANNEL = '/weixin';
@@ -14,6 +15,7 @@ export const WEIXIN_ENDPOINTS = Object.freeze({
   setWorkspace: 'bot.workspace.set',
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: 'bot.context-enhancement.set',
+  setAccessPolicy: 'bot.access-policy.set',
 });
 
 const ACCOUNT_STATES = new Set(['connected', 'connecting', 'offline', 'error']);
@@ -124,6 +126,9 @@ function normalizeBot(value) {
     workspace: string(value.workspace).slice(0, 4_096),
     agentPreset: normalizeAgentPresetId(value.agentPreset),
     contextEnhancement: normalizeContextEnhancementConfig(value.contextEnhancement),
+    ...(Object.hasOwn(value, 'accessPolicy')
+      ? { accessPolicy: normalizeAccessPolicy(value.accessPolicy) }
+      : {}),
     bot: {
       name: string(value.bot.name, '微信机器人'),
       accountIdMasked: string(value.bot.accountIdMasked, '已安全保存'),

package/plugin-src/client/channels/weixin/index.js

@@ -237,6 +237,7 @@ export function AccountCard({
             botId: account.botId,
             botName: account.bot.name,
             connected: account.connected,
+            accessPolicy: account.accessPolicy,
           }))),
       h(WorkspaceEditor, {
         workspace: account.workspace,

package/plugin-src/client/channels/whatsapp/api.js

@@ -1,5 +1,6 @@
 import { normalizeAgentPresetCatalog, normalizeAgentPresetId, SET_AGENT_PRESET_ENDPOINT } from '../../agent-preset.js';
 import { normalizeLastMessageError } from '../../last-message-error.js';
+import { normalizeAccessPolicy } from '../../../../src/channels/shared/access-policy.mjs';
 import { normalizeContextEnhancementConfig } from '../../../../src/channels/shared/context-enhancement.mjs';
 
 export const WHATSAPP_RPC_CHANNEL = '/whatsapp';
@@ -91,16 +92,9 @@ function normalizeBot(value) {
     workspace: text(value.workspace, '', 4_096),
     agentPreset: normalizeAgentPresetId(value.agentPreset),
     contextEnhancement: normalizeContextEnhancementConfig(value.contextEnhancement),
-    accessPolicy: {
-      accessMode: ['self-only', 'private-allowlist', 'open'].includes(
-        value.accessPolicy?.accessMode,
-      ) ? value.accessPolicy.accessMode : 'self-only',
-      allowedNumbers: Array.isArray(value.accessPolicy?.allowedNumbers)
-        ? [...new Set(value.accessPolicy.allowedNumbers.filter((entry) => (
-            typeof entry === 'string' && /^[1-9]\d{4,14}$/.test(entry)
-          )))]
-        : [],
-    },
+    ...(Object.hasOwn(value, 'accessPolicy')
+      ? { accessPolicy: normalizeAccessPolicy(value.accessPolicy) }
+      : {}),
     bot: {
       name: text(value.bot?.name, 'WhatsApp机器人', 100),
       idMasked: text(value.bot?.idMasked, 'WhatsApp账号', 140),

package/plugin-src/client/channels/whatsapp/index.js

@@ -31,119 +31,6 @@ import { installWhatsappStyles } from './styles.js';
 
 const ACTIVE_STATES = new Set(['pending', 'connecting']);
 
-function accessPolicyFor(account) {
-  const accessMode = ['self-only', 'private-allowlist', 'open'].includes(
-    account?.accessPolicy?.accessMode,
-  ) ? account.accessPolicy.accessMode : 'self-only';
-  return {
-    accessMode,
-    allowedNumbers: Array.isArray(account?.accessPolicy?.allowedNumbers)
-      ? account.accessPolicy.allowedNumbers : [],
-  };
-}
-
-function allowedNumbersFromText(value) {
-  const entries = value.split(/\r?\n/).map((entry) => entry.trim()).filter(Boolean);
-  const normalized = entries.map((entry) => entry.replace(/^\+/, ''));
-  if (normalized.some((entry) => !/^[1-9]\d{4,14}$/.test(entry))) {
-    throw new TypeError('电话号码必须包含国家或地区代码，每行一个。');
-  }
-  return [...new Set(normalized)];
-}
-
-export function WhatsappAccessSettings({ account, busy = false, onSave }) {
-  const policy = accessPolicyFor(account);
-  const sourceNumbers = policy.allowedNumbers.join('\n');
-  const helpId = React.useId();
-  const [accessMode, setAccessMode] = React.useState(policy.accessMode);
-  const [allowedNumbers, setAllowedNumbers] = React.useState(sourceNumbers);
-  const [error, setError] = React.useState(null);
-
-  React.useEffect(() => {
-    setAccessMode(policy.accessMode);
-    setAllowedNumbers(sourceNumbers);
-    setError(null);
-  }, [policy.accessMode, sourceNumbers]);
-
-  const save = async (event) => {
-    event.preventDefault();
-    setError(null);
-    try {
-      const normalized = allowedNumbersFromText(allowedNumbers);
-      if (typeof onSave !== 'function') throw new Error('WhatsApp 访问设置暂不可用。');
-      await onSave({ accessMode, allowedNumbers: normalized });
-    } catch (caught) {
-      setError(caught?.message ?? 'WhatsApp 访问设置保存失败。');
-    }
-  };
-
-  const allowlistEnabled = accessMode === 'private-allowlist';
-  const labels = {
-    'self-only': '仅自己模式',
-    'private-allowlist': '指定联系人模式',
-    open: '开放响应模式',
-  };
-  return h('form', { className: 'dwa-access', onSubmit: save },
-    h('div', { className: 'dwa-accessHeading' },
-      h('strong', null, '访问设置'),
-      h('span', { className: 'dwa-accessStatus' },
-        h('span', { className: 'dwa-accessBadge', 'data-mode': policy.accessMode },
-          ['已生效：', labels[policy.accessMode]]),
-        h('span', { className: 'dwa-accessHelp' },
-          h('button', {
-            type: 'button',
-            className: 'dwa-accessHelpButton',
-            'aria-label': '查看 WhatsApp 访问模式说明',
-            'aria-describedby': helpId,
-          }, h('span', { 'aria-hidden': 'true' }, '?')),
-          h('span', { id: helpId, className: 'dwa-accessTooltip', role: 'tooltip' },
-            h('span', { className: 'dwa-accessTooltipItem' },
-              h('strong', null, '仅自己模式'),
-              h('span', null, '只响应已绑定 WhatsApp 账号的自聊消息。')),
-            h('span', { className: 'dwa-accessTooltipItem' },
-              h('strong', null, '指定联系人模式'),
-              h('span', null, '响应自聊和白名单联系人的私聊，忽略群聊。')),
-            h('span', { className: 'dwa-accessTooltipItem' },
-              h('strong', null, '开放响应模式'),
-              h('span', null, '响应所有私聊、已绑定账号自己发出的群聊消息，以及其他群成员的提及或回复。')))))),
-    h('label', { className: 'dwa-accessField' },
-      h('span', null, '模式'),
-      h('select', {
-        value: accessMode,
-        disabled: busy,
-        'aria-label': 'WhatsApp 访问模式',
-        onChange: (event) => { setAccessMode(event.target.value); setError(null); },
-      },
-      h('option', { value: 'self-only' }, '仅自己模式（默认）'),
-      h('option', { value: 'private-allowlist' }, '指定联系人模式'),
-      h('option', { value: 'open' }, '开放响应模式'))),
-    allowlistEnabled
-      ? h('label', { className: 'dwa-accessField' },
-          h('span', null, '允许私聊的 WhatsApp 电话号码'),
-          h('textarea', {
-            value: allowedNumbers,
-            disabled: busy,
-            rows: 3,
-            placeholder: '每行一个含国家或地区代码的号码',
-            'aria-label': '允许私聊的 WhatsApp 电话号码',
-            onChange: (event) => { setAllowedNumbers(event.target.value); setError(null); },
-          }),
-          h('small', null, '可以包含开头的 +，保存时会自动移除。'))
-      : null,
-    allowlistEnabled && allowedNumbers.trim() === ''
-      ? h('p', { className: 'dwa-accessWarning', role: 'status' },
-          '白名单为空；保存后将只接受自聊消息。')
-      : null,
-    error ? h('p', { className: 'dwa-accessError', role: 'alert' }, error) : null,
-    h('div', { className: 'dwa-accessActions' },
-      h('button', {
-        type: 'submit',
-        className: 'ddt-button',
-        'data-kind': 'secondary',
-        disabled: busy,
-      }, busy ? '正在保存…' : '保存访问设置')));
-}
-
 const Button = React.forwardRef(function Button(
   { children, kind = 'secondary', className = '', ...props },
   ref,
@@ -300,7 +187,6 @@ export function WhatsappAccountCard({
   onWorkspaceSave,
   onAgentPresetSave,
   onContextEnhancementSave,
-  onAccessPolicySave,
   onRequestRemove,
   onConfirmRemove,
   onCancelRemove,
@@ -333,6 +219,7 @@ export function WhatsappAccountCard({
             botId: account.botId,
             botName: account.bot.name,
             connected: account.connected,
+            accessPolicy: account.accessPolicy,
           }))),
       h(WorkspaceEditor, {
         workspace: account.workspace,
@@ -349,11 +236,6 @@ export function WhatsappAccountCard({
         disabled: Boolean(busy),
         onSave: onContextEnhancementSave,
       }),
-      h(WhatsappAccessSettings, {
-        account,
-        busy: Boolean(busy),
-        onSave: onAccessPolicySave,
-      }),
       h('div', { className: 'ddt-accountFooter dim-cardFooter' },
         h('div', { className: 'dim-cardFooterLayout' },
           h('div', { className: 'ddt-actions dim-cardActions' },
@@ -617,12 +499,6 @@ export function WhatsappSettingsTab({ rpcCall }) {
               WHATSAPP_ENDPOINTS.setContextEnhancement,
               { botId: account.botId, config },
             ),
-            onAccessPolicySave: (accessPolicy) => botAction(
-              account,
-              'access',
-              WHATSAPP_ENDPOINTS.setAccessPolicy,
-              { botId: account.botId, ...accessPolicy },
-            ),
             onRequestRemove: () => setRemoveTarget(account.botId),
             onCancelRemove: () => setRemoveTarget(null),
             onConfirmRemove: async () => {

package/plugin-src/client/channels/whatsapp/styles.js

@@ -4,31 +4,6 @@ const CSS = String.raw`
 .dwa-page { --ddt-accent: #25d366; --ddt-accent-deep: #128c7e; --ddt-accent-wash: #eafbf0; }
 .dwa-avatar { color: #fff; background: #25d366; }
 .dwa-avatar svg { display: block; }
-.dwa-access { display: grid; gap: 10px; padding: 12px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 10px; background: var(--dsw-alias-bg-layer-2, #f7f8fa); }
-.dwa-accessHeading { display: flex; align-items: center; justify-content: space-between; gap: 12px; }
-.dwa-accessHeading > strong { font-size: 13px; }
-.dwa-accessStatus { min-width: 0; display: inline-flex; align-items: center; justify-content: flex-end; gap: 6px; }
-.dwa-accessBadge { flex: none; padding: 3px 8px; border-radius: 999px; color: #08785f; background: #eafbf0; font-size: 11px; font-weight: 700; }
-.dwa-accessBadge[data-mode="private-allowlist"] { color: #0f6f8f; background: #eaf7fd; }
-.dwa-accessBadge[data-mode="open"] { color: #a15c00; background: #fff3d6; }
-.dwa-accessHelp { position: relative; display: inline-flex; flex: none; }
-.dwa-accessHelpButton { width: 20px; height: 20px; display: grid; place-items: center; padding: 0; border: 1px solid color-mix(in srgb, #25d366 34%, var(--dsw-alias-border-l2, #dfe1e5)); border-radius: 50%; color: #128c7e; background: var(--dsw-alias-bg-layer-1, #fff); font: inherit; font-size: 12px; line-height: 1; font-weight: 750; cursor: help; }
-.dwa-accessTooltip { position: absolute; top: calc(100% + 8px); right: 0; z-index: 30; width: 270px; max-width: min(290px, calc(100vw - 48px)); display: grid; gap: 8px; padding: 10px 11px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 9px; color: var(--dsw-alias-label-primary, #1f2329); background: var(--dsw-alias-bg-layer-3, #fff); box-shadow: 0 10px 28px rgb(31 35 41 / 16%); opacity: 0; visibility: hidden; transform: translateY(-3px); pointer-events: none; transition: opacity .15s ease, transform .15s ease, visibility .15s ease; }
-.dwa-accessTooltipItem { display: grid; gap: 2px; }
-.dwa-accessTooltipItem + .dwa-accessTooltipItem { padding-top: 8px; border-top: 1px solid var(--dsw-alias-border-l2, #eef0f3); }
-.dwa-accessTooltipItem strong { font-size: 12px; line-height: 17px; }
-.dwa-accessTooltipItem > span { color: var(--dsw-alias-label-secondary, #646a73); font-size: 11px; line-height: 16px; }
-.dwa-accessHelp:hover .dwa-accessTooltip, .dwa-accessHelp:focus-within .dwa-accessTooltip { opacity: 1; visibility: visible; transform: translateY(0); }
-.dwa-accessField { display: grid; gap: 5px; color: var(--dsw-alias-label-primary, #1f2329); font-size: 12px; font-weight: 600; }
-.dwa-accessField select, .dwa-accessField textarea { width: 100%; box-sizing: border-box; border: 1px solid var(--dsw-alias-border-l1, #c9cdd4); border-radius: 7px; color: inherit; background: var(--dsw-alias-bg-layer-1, #fff); font: inherit; font-weight: 400; }
-.dwa-accessField select { height: 34px; padding: 0 9px; }
-.dwa-accessField textarea { min-height: 68px; padding: 8px 9px; resize: vertical; font-family: ui-monospace, SFMono-Regular, Menlo, monospace; }
-.dwa-accessField textarea:disabled { color: var(--dsw-alias-label-tertiary, #8f959e); background: var(--dsw-alias-bg-module-platform, #f2f3f5); cursor: not-allowed; resize: none; opacity: 1; }
-.dwa-accessField small { color: var(--dsw-alias-label-secondary, #646a73); font-weight: 400; }
-.dwa-accessWarning, .dwa-accessError { margin: 0; font-size: 12px; line-height: 1.5; }
-.dwa-accessWarning { color: #a15c00; }
-.dwa-accessError { color: var(--dsw-alias-state-error-primary, #d83931); }
-.dwa-accessActions { display: flex; justify-content: flex-end; }
 `;
 
 export function installWhatsappStyles() {

package/plugin-src/client/delivery-settings.js

@@ -1,5 +1,6 @@
 import * as React from 'react';
 
+import { AccessPolicySettingsPage } from './access-policy-settings.js';
 import { h, isEnglish, localizeText } from './i18n.js';
 
 export const DELIVERY_RPC_CHANNEL = '/dsh-im-delivery';
@@ -18,6 +19,11 @@ export const DELIVERY_ENDPOINTS = Object.freeze({
   test: 'target.test',
 });
 
+export const BOT_SETTINGS_TABS = Object.freeze([
+  Object.freeze({ id: 'delivery', label: '投递设置' }),
+  Object.freeze({ id: 'access', label: '访问设置' }),
+]);
+
 const CHANNEL_DEFINITIONS = Object.freeze({
   weixin: {
     label: '微信',
@@ -532,8 +538,15 @@ function TargetRow({ definition, target, botId, connected, rpcCall, onChanged, o
       : null);
 }
 
-export function DeliveryTargetSettingsPage({ channel, account, rpcCall, onBack }) {
+export function DeliveryTargetSettingsPage({
+  channel,
+  account,
+  rpcCall,
+  accessRpcCall,
+  onBack,
+}) {
   const definition = CHANNEL_DEFINITIONS[channel];
+  const [activeTabId, setActiveTabId] = React.useState(BOT_SETTINGS_TABS[0].id);
   const [phase, setPhase] = React.useState('loading');
   const [targets, setTargets] = React.useState([]);
   const [suggestionPhase, setSuggestionPhase] = React.useState('idle');
@@ -543,8 +556,13 @@ export function DeliveryTargetSettingsPage({ channel, account, rpcCall, onBack }
   const [editor, setEditor] = React.useState(null);
   const [saving, setSaving] = React.useState(false);
   const [botCopyState, setBotCopyState] = React.useState(null);
+  const [accessPolicy, setAccessPolicy] = React.useState(account.accessPolicy);
   const mounted = React.useRef(true);
 
+  React.useEffect(() => {
+    setAccessPolicy(account.accessPolicy);
+  }, [account.botId, account.accessPolicy]);
+
   const invoke = React.useCallback(async (endpoint, payload = {}, signal) => {
     if (typeof rpcCall !== 'function') throw new Error('投递目标设置暂不可用。');
     return unwrapRpcResult(await rpcCall(endpoint, payload, signal));
@@ -654,13 +672,51 @@ export function DeliveryTargetSettingsPage({ channel, account, rpcCall, onBack }
     }
   };
 
+  const activeTab = BOT_SETTINGS_TABS.find((tab) => tab.id === activeTabId)
+    ?? BOT_SETTINGS_TABS[0];
+  const activeTabDomId = `dim-bot-settings-${activeTab.id}-tab`;
+  const activePanelId = `dim-bot-settings-${activeTab.id}-panel`;
+
   return h('section', {
     className: 'dim-deliveryPage',
     'aria-label': `${account.botName || definition.label}机器人设置`,
   },
   h('header', { className: 'dim-deliveryHeader' },
-    h(DeliveryButton, { className: 'dim-deliveryBack', onClick: onBack }, '← 返回机器人列表'),
-    h('div', { className: 'dim-deliveryHeaderMeta' },
+    h(DeliveryButton, { className: 'dim-deliveryBack', onClick: onBack }, '← 返回机器人列表')),
+  h('div', { className: 'dim-botSettingsTabsBar' },
+    h('nav', {
+      className: 'dim-botSettingsTabs',
+      role: 'tablist',
+      'aria-label': '机器人设置页签',
+    }, BOT_SETTINGS_TABS.map((tab) => h('button', {
+      key: tab.id,
+      id: `dim-bot-settings-${tab.id}-tab`,
+      type: 'button',
+      role: 'tab',
+      className: 'dim-botSettingsTab',
+      'aria-selected': tab.id === activeTab.id,
+      'aria-controls': `dim-bot-settings-${tab.id}-panel`,
+      tabIndex: tab.id === activeTab.id ? 0 : -1,
+      onClick: () => setActiveTabId(tab.id),
+    }, tab.label)))),
+  h('div', {
+    id: activePanelId,
+    className: 'dim-botSettingsTabPanel',
+    role: 'tabpanel',
+    'aria-labelledby': activeTabDomId,
+  },
+  activeTab.id === 'access'
+    ? h(AccessPolicySettingsPage, {
+        channel,
+        account: { ...account, accessPolicy },
+        rpcCall: accessRpcCall,
+        onSaved: setAccessPolicy,
+      })
+    : h(React.Fragment, null,
+  h('section', { className: 'dim-deliveryIdentity', 'aria-labelledby': 'dim-delivery-bot-title' },
+    h('div', { className: 'dim-deliveryIdentityHeading' },
+      h('h2', { id: 'dim-delivery-bot-title', className: 'dim-deliveryBotName' },
+        account.botName || '机器人设置'),
       h('a', {
         className: 'dim-deliveryDocsLink',
         href: isEnglish() ? DELIVERY_DOCS_URL.en : DELIVERY_DOCS_URL.zh,
@@ -669,11 +725,7 @@ export function DeliveryTargetSettingsPage({ channel, account, rpcCall, onBack }
         'aria-label': '打开主动投递使用文档',
       },
       h('span', null, '使用文档'),
-      h('span', { 'aria-hidden': 'true' }, '↗')))),
-  h('section', { className: 'dim-deliveryIdentity', 'aria-labelledby': 'dim-delivery-bot-title' },
-    h('div', null,
-      h('h2', { id: 'dim-delivery-bot-title', className: 'dim-deliveryBotName' },
-        account.botName || '机器人设置')),
+      h('span', { 'aria-hidden': 'true' }, '↗'))),
     h('div', { className: 'dim-deliveryBotId' },
       h('span', null, 'Bot ID'),
       h('code', { title: account.botId }, account.botId),
@@ -745,5 +797,5 @@ export function DeliveryTargetSettingsPage({ channel, account, rpcCall, onBack }
               rpcCall: invoke,
               onChanged: () => loadTargets({ silent: true }),
               onEdit: () => setEditor({ mode: 'edit', target, source: 'edit' }),
-            })))));
+            })))))));
 }

package/plugin-src/client/i18n.js

@@ -7,6 +7,62 @@ const EN = Object.freeze({
   'IM机器人': 'IM bots',
   'IM机器人设置': 'IM bot settings',
   '更多机器人设置': 'More bot settings',
+  '机器人设置': 'Bot settings',
+  '机器人设置页签': 'Bot settings tabs',
+  '投递设置': 'Delivery settings',
+  '访问设置': 'Access settings',
+  '查看访问权限说明': 'View access permission details',
+  '允许所有用户': 'Allow all users',
+  '仅白名单用户': 'Allowlisted users only',
+  '默认命令权限': 'Default command permission',
+  '命令权限': 'Command permission',
+  '可以执行命令': 'Can run commands',
+  '不可以执行命令': 'Cannot run commands',
+  '白名单用户': 'Allowlisted users',
+  '查看白名单说明': 'View allowlist details',
+  '命令权限例外': 'Command permission exceptions',
+  '当前没有白名单用户，保存后普通用户将无法使用机器人。': 'There are currently no allowlisted users. After saving, regular users will not be able to use the bot.',
+  '新增用户': 'Add user',
+  '尚未添加用户': 'No users added',
+  '当前渠道不支持群聊': 'Group chat is not supported by this channel',
+  '原所有者或扫码接入者始终可以访问并执行命令；以下设置仅约束其他用户。': 'The original owner or QR-code operator can always access the bot and run commands; the settings below apply only to other users.',
+  '此区域无需配置，保存私聊设置时会保留现有群聊策略。': 'No setup is needed here. Saving direct-message settings keeps the existing group policy.',
+  '访问设置已保存。': 'Access settings saved.',
+  '访问设置暂不可用。': 'Access settings are currently unavailable.',
+  '访问设置保存失败，请稍后重试。': 'Could not save access settings. Try again later.',
+  '服务没有返回已保存的访问策略，请刷新后重试。': 'The service did not return the saved access policy. Refresh and try again.',
+  '访问策略尚未就绪，请返回机器人列表刷新后重试。': 'The access policy is not ready. Return to the bot list, refresh, and try again.',
+  '当前渠道暂不支持访问设置。': 'Access settings are not supported by this channel yet.',
+  '用户标识无效。': 'The user ID is invalid.',
+  '用户标识必须是字符串。': 'The user ID must be a string.',
+  '用户标识不能为空、包含控制字符或超过 256 个字符。': 'The user ID cannot be empty, contain control characters, or exceed 256 characters.',
+  '用户条目必须包含用户标识和命令权限。': 'Each user entry must include a user ID and command permission.',
+  '命令权限必须是布尔值。': 'Command permission must be a boolean.',
+  '访问模式只能是 open 或 allowlist。': 'Access mode must be open or allowlist.',
+  '开放模式设置必须完整。': 'Open-mode settings must be complete.',
+  '开放模式默认命令权限必须是布尔值。': 'The open-mode default command permission must be a boolean.',
+  '开放模式命令权限覆盖用户必须是数组。': 'Open-mode command permission overrides must be an array.',
+  '开放模式命令权限覆盖用户不能包含重复的用户标识。': 'Open-mode command permission overrides cannot contain duplicate user IDs.',
+  '白名单模式设置必须完整。': 'Allowlist-mode settings must be complete.',
+  '白名单模式用户必须是数组。': 'Allowlist-mode users must be an array.',
+  '白名单模式用户不能包含重复的用户标识。': 'Allowlist-mode users cannot contain duplicate user IDs.',
+  '访问场景设置必须同时包含模式、开放模式设置和白名单模式设置。': 'Each access context must include its mode, open-mode settings, and allowlist-mode settings.',
+  '请同时提交完整的私聊和群聊访问设置。': 'Submit complete direct-message and group access settings together.',
+  '填写微信用户 ID': 'Enter a WeChat user ID',
+  '飞书 Open ID': 'Feishu Open ID',
+  '群成员 Open ID': 'Group member Open ID',
+  '钉钉用户 ID': 'DingTalk user ID',
+  '填写 senderStaffId 或 senderId': 'Enter senderStaffId or senderId',
+  '群成员用户 ID': 'Group member user ID',
+  '企业微信用户 ID': 'WeCom user ID',
+  '填写 userid': 'Enter userid',
+  '填写 member_openid': 'Enter member_openid',
+  'QQ User Open ID': 'QQ User Open ID',
+  '群成员 User ID': 'Group member User ID',
+  '填写数字 User ID': 'Enter a numeric user ID',
+  'WhatsApp 电话号码或 JID': 'WhatsApp phone number or JID',
+  '群成员电话号码或 JID': 'Group member phone number or JID',
+  '8613800000000 或完整 JID': '8613800000000 or a full JID',
   'IM 渠道': 'IM channels',
   '让 DeepSeek Harness 触手可及': 'Connecting DeepSeek Harness',
   '当前版本': 'Current version',
@@ -521,7 +577,6 @@ const EN = Object.freeze({
   '先通过 @BotFather 获取 Bot Token，再在这里完成接入。': 'Get a Bot Token from @BotFather, then connect it here.',
   '填写 @BotFather 生成的 Bot Token': 'Enter the Bot Token from @BotFather',
   '访问模式': 'Access mode',
-  '访问设置': 'Access settings',
   'Telegram 访问模式': 'Telegram access mode',
   '查看 Telegram 访问模式说明': 'View Telegram access mode details',
   '群聊全部忽略，私聊仅允许白名单用户。': 'All group messages are ignored; only allowlisted users may send DMs.',

package/plugin-src/client/index.js

@@ -294,6 +294,7 @@ export function IMSettingsTab({
               channel: active.id,
               account: deliverySettings,
               rpcCall: rpcCalls.deliveryRpcCall,
+              accessRpcCall: rpcCalls[`${active.id}RpcCall`],
               onBack: () => setDeliverySettings(null),
             })
           : active.id === 'weixin'

package/plugin-src/client/styles.js

@@ -369,9 +369,18 @@ const CSS = String.raw`
 .dim-botSettingsButton:focus-visible { outline: 2px solid var(--dsw-alias-state-business-primary, #3370ff); outline-offset: 2px; }
 .dim-botSettingsTooltip { position: absolute; top: calc(100% + 6px); right: 0; z-index: 30; width: max-content; padding: 6px 9px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 7px; color: var(--dsw-alias-label-primary, #1f2329); background: var(--dsw-alias-bg-layer-3, #fff); box-shadow: 0 8px 24px rgb(31 35 41 / 14%); font-size: 11px; line-height: 16px; opacity: 0; visibility: hidden; transform: translateY(-3px); pointer-events: none; transition: opacity .15s ease, transform .15s ease, visibility .15s ease; }
 .dim-botSettingsAction:hover .dim-botSettingsTooltip, .dim-botSettingsAction:focus-within .dim-botSettingsTooltip { opacity: 1; visibility: visible; transform: translateY(0); }
-.dim-deliveryPage { min-width: 0; display: grid; gap: 14px; }
+.dim-deliveryPage { min-width: 0; display: grid; }
 .dim-deliveryHeader { min-width: 0; display: flex; align-items: center; justify-content: space-between; gap: 16px; }
-.dim-deliveryHeaderMeta { min-width: 0; display: flex; align-items: center; justify-content: flex-end; gap: 10px; text-align: right; }
+.dim-botSettingsTabsBar { min-width: 0; margin-top: 10px; border-bottom: 1px solid var(--dsw-alias-border-l2, #dfe1e5); }
+.dim-botSettingsTabs { min-width: 0; display: flex; align-items: flex-end; gap: 24px; overflow-x: auto; scrollbar-width: none; }
+.dim-botSettingsTabs::-webkit-scrollbar { display: none; }
+.dim-botSettingsTab { position: relative; min-height: 38px; flex: none; display: inline-flex; align-items: center; justify-content: center; padding: 6px 2px 9px; border: 0; color: var(--dsw-alias-label-secondary, #646a73); background: transparent; font: inherit; font-size: 13px; line-height: 20px; font-weight: 560; white-space: nowrap; cursor: pointer; transition: color .15s ease; }
+.dim-botSettingsTab::after { content: ''; position: absolute; right: 0; bottom: -1px; left: 0; height: 2px; border-radius: 2px 2px 0 0; background: transparent; transform: scaleX(.45); transition: background .15s ease, transform .15s ease; }
+.dim-botSettingsTab:hover:not([aria-selected="true"]) { color: var(--dsw-alias-label-primary, #1f2329); }
+.dim-botSettingsTab[aria-selected="true"] { color: var(--dsw-alias-state-business-primary, #3370ff); font-weight: 650; }
+.dim-botSettingsTab[aria-selected="true"]::after { background: var(--dsw-alias-state-business-primary, #3370ff); transform: scaleX(1); }
+.dim-botSettingsTab:focus-visible { outline: 2px solid var(--dsw-alias-state-business-primary, #3370ff); outline-offset: -2px; border-radius: 5px; }
+.dim-botSettingsTabPanel { min-width: 0; display: grid; gap: 14px; padding-top: 14px; }
 .dim-deliveryDocsLink { min-height: 30px; flex: none; display: inline-flex; align-items: center; gap: 4px; padding: 5px 8px; border-radius: 7px; color: var(--dsw-alias-state-business-primary, #3370ff); font-size: 12px; line-height: 18px; text-decoration: none; white-space: nowrap; }
 .dim-deliveryDocsLink:hover { background: color-mix(in srgb, var(--dsw-alias-state-business-primary, #3370ff) 8%, transparent); }
 .dim-deliveryDocsLink:focus-visible { outline: 2px solid var(--dsw-alias-state-business-primary, #3370ff); outline-offset: 2px; }
@@ -383,6 +392,7 @@ const CSS = String.raw`
 .dim-deliveryButton[data-kind="danger"] { color: var(--dsw-alias-state-error-primary, #d54941); }
 .dim-deliveryBack { flex: none; border-color: transparent; background: transparent; }
 .dim-deliveryIdentity, .dim-deliveryTargets { min-width: 0; padding: 16px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 12px; background: var(--dsw-alias-bg-layer-3, #fff); }
+.dim-deliveryIdentityHeading { min-width: 0; display: flex; align-items: center; justify-content: space-between; gap: 12px; }
 .dim-deliveryBotName, .dim-deliverySectionHeading h3 { min-width: 0; overflow: hidden; margin: 0; font-size: 15px; line-height: 22px; font-weight: 650; text-overflow: ellipsis; white-space: nowrap; }
 .dim-deliveryIdentity > div:first-child p, .dim-deliverySectionHeading p { margin: 2px 0 0; color: var(--dsw-alias-label-secondary, #646a73); font-size: 12px; line-height: 18px; }
 .dim-deliveryBotId { min-width: 0; display: grid; grid-template-columns: max-content minmax(0, 1fr) max-content; align-items: center; gap: 10px; margin-top: 12px; padding: 10px 12px; border-radius: 9px; background: var(--dsw-alias-bg-module-platform, #f7f8fa); }
@@ -425,6 +435,38 @@ const CSS = String.raw`
 .dim-targetField input[readonly] { color: var(--dsw-alias-label-secondary, #646a73); background: var(--dsw-alias-bg-module-platform, #f7f8fa); }
 .dim-targetFormError { margin: 10px 0 0; font-size: 12px; line-height: 18px; }
 .dim-targetFormActions { display: flex; justify-content: flex-end; gap: 7px; margin-top: 12px; }
+.dim-accessPage { min-width: 0; display: grid; gap: 14px; }
+.dim-accessScene { position: relative; min-width: 0; margin: 0; padding: 16px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 12px; background: var(--dsw-alias-bg-layer-3, #fff); }
+.dim-accessScene > legend { padding: 0 6px; color: var(--dsw-alias-label-primary, #1f2329); font-size: 15px; line-height: 22px; font-weight: 650; }
+.dim-accessLegendContent { display: inline-flex; align-items: center; gap: 6px; }
+.dim-panel .dim-accessLegendHelp { position: static; }
+.dim-accessLegendHelp .dim-channelTooltip { top: 20px; right: auto; left: 16px; width: min(320px, calc(100% - 32px)); max-width: none; }
+.dim-accessControls { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 12px; }
+.dim-accessControls[data-mode="allowlist"] { grid-template-columns: minmax(0, 1fr); }
+.dim-accessField { min-width: 0; display: grid; align-content: start; gap: 5px; color: var(--dsw-alias-label-secondary, #646a73); font-size: 11px; line-height: 16px; }
+.dim-accessField input, .dim-accessField select { width: 100%; min-width: 0; height: 36px; padding: 0 9px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 7px; color: var(--dsw-alias-label-primary, #1f2329); background: var(--dsw-alias-bg-layer-1, #fff); font: inherit; font-size: 12px; }
+.dim-accessField input:focus, .dim-accessField select:focus { outline: 2px solid color-mix(in srgb, var(--dsw-alias-state-business-primary, #3370ff) 28%, transparent); border-color: var(--dsw-alias-state-business-primary, #3370ff); }
+.dim-accessUsers { min-width: 0; margin-top: 14px; padding-top: 14px; border-top: 1px solid var(--dsw-alias-border-l1, #eef0f3); }
+.dim-accessUsersHeading { position: relative; min-width: 0; display: flex; align-items: flex-start; justify-content: space-between; gap: 12px; }
+.dim-accessUsersHeading > div { min-width: 0; }
+.dim-accessUsersTitle { display: inline-flex; align-items: center; gap: 6px; }
+.dim-accessUsersHeading strong { color: var(--dsw-alias-label-primary, #1f2329); font-size: 13px; line-height: 20px; font-weight: 620; }
+.dim-accessUsersHeading p { margin: 2px 0 0; color: var(--dsw-alias-label-secondary, #646a73); font-size: 11px; line-height: 17px; }
+.dim-panel .dim-accessUsersHelp { position: static; }
+.dim-accessUsersHelp .dim-channelTooltip { top: calc(100% + 7px); right: auto; left: 0; width: min(320px, 100%); max-width: none; }
+.dim-accessAddUser { width: 32px; height: 32px; min-height: 32px; flex: 0 0 32px; padding: 0; font-size: 20px; line-height: 1; }
+.dim-accessUsersEmpty { margin-top: 10px; padding: 15px 12px; border: 1px dashed var(--dsw-alias-border-l2, #dfe1e5); border-radius: 8px; color: var(--dsw-alias-label-tertiary, #8f959e); font-size: 12px; line-height: 18px; text-align: center; }
+.dim-accessUserList { display: grid; gap: 9px; margin: 10px 0 0; padding: 0; list-style: none; }
+.dim-accessUserRow { min-width: 0; display: grid; grid-template-columns: minmax(0, 1fr) minmax(145px, 180px) max-content; align-items: end; gap: 10px; padding: 11px; border: 1px solid var(--dsw-alias-border-l1, #eef0f3); border-radius: 9px; background: var(--dsw-alias-bg-module-platform, #f7f8fa); }
+.dim-accessDeleteUser { margin-bottom: 1px; }
+.dim-accessUnsupported { padding: 18px 14px; border: 1px dashed var(--dsw-alias-border-l2, #dfe1e5); border-radius: 9px; color: var(--dsw-alias-label-secondary, #646a73); background: var(--dsw-alias-bg-module-platform, #f7f8fa); text-align: center; }
+.dim-accessUnsupported strong { color: var(--dsw-alias-label-primary, #1f2329); font-size: 13px; line-height: 20px; }
+.dim-accessUnsupported p { margin: 4px 0 0; font-size: 12px; line-height: 18px; }
+.dim-accessState { padding: 11px 13px; border: 1px solid color-mix(in srgb, var(--dsw-alias-state-warn-primary, #d97706) 24%, var(--dsw-alias-border-l2, #dfe1e5)); border-radius: 9px; color: var(--dsw-alias-state-warn-primary, #d97706); background: color-mix(in srgb, var(--dsw-alias-state-warn-primary, #d97706) 7%, var(--dsw-alias-bg-layer-1, #fff)); font-size: 12px; line-height: 18px; }
+.dim-accessFeedback { margin: 0; padding: 10px 12px; border-radius: 8px; color: var(--dsw-alias-label-secondary, #646a73); background: var(--dsw-alias-bg-module-platform, #f7f8fa); font-size: 12px; line-height: 18px; }
+.dim-accessFeedback[data-tone="success"] { color: var(--dsw-alias-state-success-primary, #20a162); }
+.dim-accessFeedback[data-tone="error"] { color: var(--dsw-alias-state-error-primary, #d54941); }
+.dim-accessActions { display: flex; justify-content: flex-end; }
 .dim-panel .dim-botCard .dim-cardFooter { margin-top: 0; }
 .dim-panel .ddt-headingCopy { display: none; }
 .dim-panel .ddt-qrFrame, .dim-panel .ddt-countdown { width: min(270px, 100%); }
@@ -448,6 +490,9 @@ const CSS = String.raw`
   .dim-targetActions { justify-content: flex-start; }
   .dim-targetFormGrid { grid-template-columns: minmax(0, 1fr); }
   .dim-targetSuggestionHeading { align-items: stretch; flex-direction: column; }
+  .dim-accessControls { grid-template-columns: minmax(0, 1fr); }
+  .dim-accessUserRow { grid-template-columns: minmax(0, 1fr); }
+  .dim-accessDeleteUser { justify-self: start; }
 }
 @media (max-width: 840px) {
   .dim-title { align-items: flex-start; }
@@ -471,11 +516,12 @@ const CSS = String.raw`
   .dim-rail { grid-template-columns: minmax(0, 1fr); }
   .dim-loopbackRecovery { align-items: stretch; flex-direction: column; gap: 12px; }
   .dim-loopbackRecoveryAction { width: 100%; }
-  .dim-deliveryHeader, .dim-deliverySectionHeading { align-items: stretch; flex-direction: column; }
-  .dim-deliveryHeaderMeta { justify-content: space-between; text-align: left; }
+  .dim-deliverySectionHeading { align-items: stretch; flex-direction: column; }
+  .dim-botSettingsTabs { gap: 18px; }
   .dim-deliveryBotId { grid-template-columns: minmax(0, 1fr) max-content; }
   .dim-deliveryBotId > span { grid-column: 1 / -1; }
   .dim-targetActions .dim-deliveryButton { flex: 1 1 auto; }
+  .dim-accessActions .dim-deliveryButton { width: 100%; }
   .dim-directoryPickerBackdrop { padding: 10px; }
   .dim-directoryPicker { height: calc(100vh - 20px); min-height: 0; border-radius: 14px; }
   .dim-directoryPickerHeader { padding: 18px 17px 14px; }