From 9002abfe61fa821497c1782aff248d8b6d588d06 Mon Sep 17 00:00:00 2001
From: baiyanyun <baiyanyun@baiyanyundeMacBook-Air.local>
Date: Tue, 14 Jul 2026 16:39:40 +0800
Subject: [PATCH] =?UTF-8?q?=E5=AE=8C=E5=96=84=E7=9F=A5=E8=AF=86=E5=BA=93?=
 =?UTF-8?q?=E5=AE=B9=E9=87=8F=E6=9D=83=E9=99=90=E4=B8=8E=E7=95=8C=E9=9D=A2?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../agent/core/adapter/dto/ComponentDto.java  |   3 +
 .../ComponentApplicationServiceImpl.java      |   2 +
 .../mapper/KnowledgeDocumentMapper.xml        |   8 +-
 .../man/ui/web/KnowledgeConfigController.java |  10 +
 .../ui/web/KnowledgeDocumentController.java   |  12 +
 .../man/ui/web/KnowledgeQaController.java     |   8 +
 .../ui/web/KnowledgeRawSegmentController.java |   7 +
 .../KnowledgeDocumentCustomAddRequest.java    |   4 +
 .../KnowledgeWritePermissionChecker.java      |  70 +++
 ...KnowledgeDocumentCustomAddRequestTest.java |  34 ++
 .../KnowledgeWritePermissionCheckerTest.java  | 116 +++++
 .../components/pages/KnowledgePage.tsx        | 422 ++++++++++++------
 .../src/renderer/services/core/auth.ts        |   4 +
 .../src/renderer/services/core/knowledge.ts   |   9 +
 .../src/renderer/services/core/setup.ts       |   2 +-
 .../components/KnowledgePage.module.css       | 118 ++++-
 16 files changed, 669 insertions(+), 160 deletions(-)
 create mode 100644 qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/permission/KnowledgeWritePermissionChecker.java
 create mode 100644 qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/test/java/com/xspaceagi/knowledge/man/ui/web/dto/document/KnowledgeDocumentCustomAddRequestTest.java
 create mode 100644 qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/test/java/com/xspaceagi/knowledge/man/ui/web/permission/KnowledgeWritePermissionCheckerTest.java

diff --git a/qiming-backend/app-platform-modules/app-platform-agent/app-platform-agent-core-adapter/src/main/java/com/xspaceagi/agent/core/adapter/dto/ComponentDto.java b/qiming-backend/app-platform-modules/app-platform-agent/app-platform-agent-core-adapter/src/main/java/com/xspaceagi/agent/core/adapter/dto/ComponentDto.java
index c67cebc3..240c7341 100644
--- a/qiming-backend/app-platform-modules/app-platform-agent/app-platform-agent-core-adapter/src/main/java/com/xspaceagi/agent/core/adapter/dto/ComponentDto.java
+++ b/qiming-backend/app-platform-modules/app-platform-agent/app-platform-agent-core-adapter/src/main/java/com/xspaceagi/agent/core/adapter/dto/ComponentDto.java
@@ -42,6 +42,9 @@ public class ComponentDto implements Serializable {
     @Schema(description = "创建时间")
     private Date created;
 
+    @Schema(description = "资源占用空间，单位字节，知识库有效")
+    private Long fileSize;
+
     private Long creatorId;
 
     @Schema(description = "创建者信息")
diff --git a/qiming-backend/app-platform-modules/app-platform-agent/app-platform-agent-core-application/src/main/java/com/xspaceagi/agent/core/application/service/ComponentApplicationServiceImpl.java b/qiming-backend/app-platform-modules/app-platform-agent/app-platform-agent-core-application/src/main/java/com/xspaceagi/agent/core/application/service/ComponentApplicationServiceImpl.java
index e0bd82b6..3c8b08fb 100644
--- a/qiming-backend/app-platform-modules/app-platform-agent/app-platform-agent-core-application/src/main/java/com/xspaceagi/agent/core/application/service/ComponentApplicationServiceImpl.java
+++ b/qiming-backend/app-platform-modules/app-platform-agent/app-platform-agent-core-application/src/main/java/com/xspaceagi/agent/core/application/service/ComponentApplicationServiceImpl.java
@@ -105,6 +105,8 @@ public class ComponentApplicationServiceImpl implements ComponentApplicationServ
                 componentDto.setType(ComponentTypeEnum.Knowledge);
                 componentDto.setExt(knowledgeConfigModel.getDataType());
                 componentDto.setIcon(knowledgeConfigModel.getIcon());
+                Long fileSize = iKnowledgeConfigApplicationService.queryTotalFileSize(knowledgeConfigModel.getId());
+                componentDto.setFileSize(fileSize == null ? 0L : fileSize);
                 componentDto.setCreatorId(knowledgeConfigModel.getCreatorId());
                 UserDto userDto = userDtoMap.get(knowledgeConfigModel.getCreatorId());
                 if (userDto != null) {
diff --git a/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-infra/src/main/resources/mapper/KnowledgeDocumentMapper.xml b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-infra/src/main/resources/mapper/KnowledgeDocumentMapper.xml
index a13950f5..a1873604 100644
--- a/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-infra/src/main/resources/mapper/KnowledgeDocumentMapper.xml
+++ b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-infra/src/main/resources/mapper/KnowledgeDocumentMapper.xml
@@ -103,7 +103,13 @@
     </select>
 
     <select id="queryTotalFileSize" resultType="java.lang.Long">
-        select sum(file_size)
+        select coalesce(sum(
+            case
+                when coalesce(file_size, 0) > 0 then file_size
+                when data_type = 2 then octet_length(coalesce(file_content, ''))
+                else 0
+            end
+        ), 0)
         from knowledge_document
         where kb_id = #{kbId}
         and yn = 1
diff --git a/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/KnowledgeConfigController.java b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/KnowledgeConfigController.java
index 4d1b4e56..8a54a60a 100644
--- a/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/KnowledgeConfigController.java
+++ b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/KnowledgeConfigController.java
@@ -8,6 +8,7 @@ import com.xspaceagi.knowledge.domain.repository.IKnowledgeConfigRepository;
 import com.xspaceagi.knowledge.domain.vectordb.VectorDBService;
 import com.xspaceagi.knowledge.man.ui.web.base.BaseController;
 import com.xspaceagi.knowledge.man.ui.web.dto.config.*;
+import com.xspaceagi.knowledge.man.ui.web.permission.KnowledgeWritePermissionChecker;
 import com.xspaceagi.system.application.dto.SpaceDto;
 import com.xspaceagi.system.application.service.SpaceApplicationService;
 import com.xspaceagi.system.application.service.SysDataPermissionApplicationService;
@@ -71,6 +72,9 @@ public class KnowledgeConfigController extends BaseController {
     @Resource
     private SysDataPermissionApplicationService sysDataPermissionApplicationService;
 
+    @Resource
+    private KnowledgeWritePermissionChecker knowledgeWritePermissionChecker;
+
     /**
      * 知识库的列表查询接口，合并为详情的权限（需要权限）
      *
@@ -132,6 +136,7 @@ public class KnowledgeConfigController extends BaseController {
 
         var id = request.getId();
         var userContext = this.getUser();
+        knowledgeWritePermissionChecker.checkKnowledge(id);
         knowledgeConfigApplicationService.deleteById(id, userContext);
         return ReqResult.success();
 
@@ -151,6 +156,9 @@ public class KnowledgeConfigController extends BaseController {
     public ReqResult<KnowledgeConfigVo> detailById(@Schema(description = "知识库ID") Long id) {
 
         var model = knowledgeConfigApplicationService.queryOneInfoById(id);
+        if (model != null) {
+            model.setFileSize(knowledgeConfigApplicationService.queryTotalFileSize(id));
+        }
         var knowledgeConfigVo = KnowledgeConfigVo.convert2Dto(model);
         if (knowledgeConfigVo != null) {
             knowledgeConfigVo.setIcon(DefaultIconUrlUtil.setDefaultIconUrl(knowledgeConfigVo.getIcon(), knowledgeConfigVo.getName(), "knowledge"));
@@ -185,6 +193,7 @@ public class KnowledgeConfigController extends BaseController {
     public ReqResult<Long> update(@RequestBody KnowledgeConfigUpdateRequest updateDto) {
 
         var userContext = this.getUser();
+        knowledgeWritePermissionChecker.checkKnowledge(updateDto.getId());
         var model = KnowledgeConfigUpdateRequest.convert2Model(updateDto);
         var id = knowledgeConfigApplicationService.updateInfo(model, userContext);
         return ReqResult.success(id);
@@ -239,6 +248,7 @@ public class KnowledgeConfigController extends BaseController {
     @RequestMapping(path = "/initVectorDb", method = RequestMethod.POST)
     public ReqResult<Long> add(Long id) {
 
+        knowledgeWritePermissionChecker.checkKnowledge(id);
         var model = this.knowledgeConfigApplicationService.queryOneInfoById(id);
         Long embeddingModelId = null;
         if (model != null) {
diff --git a/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/KnowledgeDocumentController.java b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/KnowledgeDocumentController.java
index 4e4424ea..2b390215 100644
--- a/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/KnowledgeDocumentController.java
+++ b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/KnowledgeDocumentController.java
@@ -10,6 +10,7 @@ import com.xspaceagi.knowledge.domain.repository.IKnowledgeDocumentRepository;
 import com.xspaceagi.knowledge.man.ui.web.base.BaseController;
 import com.xspaceagi.knowledge.man.ui.web.dto.config.KnowledgeConfigDeleteRequest;
 import com.xspaceagi.knowledge.man.ui.web.dto.document.*;
+import com.xspaceagi.knowledge.man.ui.web.permission.KnowledgeWritePermissionChecker;
 import com.xspaceagi.system.application.dto.SpaceDto;
 import com.xspaceagi.system.application.dto.UserDto;
 import com.xspaceagi.system.application.service.SpaceApplicationService;
@@ -78,6 +79,9 @@ public class KnowledgeDocumentController extends BaseController {
     @Resource
     private IKnowledgeConfigApplicationService knowledgeConfigApplicationService;
 
+    @Resource
+    private KnowledgeWritePermissionChecker knowledgeWritePermissionChecker;
+
     @RequireResource(COMPONENT_LIB_QUERY_DETAIL)
     @OperationLogReporter(actionType = ActionType.QUERY, action = "数据列表查询", objectName = "知识库文档", systemCode = SystemEnum.KNOWLEDGE_CONFIG)
     @LogPrint(step = "知识库[知识库文档]-数据列表查询")
@@ -161,6 +165,7 @@ public class KnowledgeDocumentController extends BaseController {
         var id = request.getId();
 
         var userContext = getUser();
+        knowledgeWritePermissionChecker.checkDocument(id);
         knowledgeDocumentApplicationService.deleteById(id, userContext);
         return ReqResult.success();
 
@@ -200,6 +205,7 @@ public class KnowledgeDocumentController extends BaseController {
         }
 
         var userContext = this.getUser();
+        knowledgeWritePermissionChecker.checkDocument(updateDto.getDocId());
 
         var model = KnowledgeDocumentUpdateRequest.convert2Model(updateDto);
 
@@ -218,6 +224,7 @@ public class KnowledgeDocumentController extends BaseController {
 
         var userContext = this.getUser();
         var docId = updateDto.getDocId();
+        knowledgeWritePermissionChecker.checkDocument(docId);
         var name = updateDto.getName();
         var id = knowledgeDocumentApplicationService.updateDocName(docId, name, userContext);
         return ReqResult.success(id);
@@ -236,6 +243,7 @@ public class KnowledgeDocumentController extends BaseController {
         }
 
         var userContext = this.getUser();
+        knowledgeWritePermissionChecker.checkKnowledge(addDto.getKbId());
 
         //新增权限内容
         //知识库大小验证
@@ -291,6 +299,7 @@ public class KnowledgeDocumentController extends BaseController {
         }
 
         var userContext = this.getUser();
+        knowledgeWritePermissionChecker.checkKnowledge(addDto.getKbId());
         var model = KnowledgeDocumentCustomAddRequest.convert2ModelForCustom(addDto);
 
         var ids = knowledgeDocumentApplicationService.customAddInfo(model, userContext);
@@ -306,6 +315,7 @@ public class KnowledgeDocumentController extends BaseController {
     public ReqResult<Void> generateQAs(@PathVariable Long docId) {
         var userContext = this.getUser();
 
+        knowledgeWritePermissionChecker.checkDocument(docId);
         knowledgeDocumentApplicationService.generateForQa(docId, userContext);
         return ReqResult.success();
     }
@@ -318,6 +328,7 @@ public class KnowledgeDocumentController extends BaseController {
     public ReqResult<Void> generateEmbeddings(@PathVariable Long docId) {
         var userContext = this.getUser();
 
+        knowledgeWritePermissionChecker.checkDocument(docId);
         knowledgeDocumentApplicationService.generateEmbeddings(docId, userContext);
         return ReqResult.success();
     }
@@ -340,6 +351,7 @@ public class KnowledgeDocumentController extends BaseController {
     public ReqResult<Void> autoRetryTaskByDocId(@PathVariable Long docId) {
         var userContext = this.getUser();
         var userId = userContext.getUserId();
+        knowledgeWritePermissionChecker.checkDocument(docId);
 
         UserDto userDto = (UserDto) RequestContext.get().getUser();
         TenantRunnable tenantRunnable = new TenantRunnable(() -> {
diff --git a/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/KnowledgeQaController.java b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/KnowledgeQaController.java
index 1a4a632c..1c1d0fe7 100644
--- a/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/KnowledgeQaController.java
+++ b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/KnowledgeQaController.java
@@ -33,6 +33,7 @@ import com.xspaceagi.knowledge.man.ui.web.dto.qa.KnowledgeQaSegmentAddRequest;
 import com.xspaceagi.knowledge.man.ui.web.dto.qa.KnowledgeQaSegmentQueryRequest;
 import com.xspaceagi.knowledge.man.ui.web.dto.qa.KnowledgeQaSegmentUpdateRequest;
 import com.xspaceagi.knowledge.man.ui.web.dto.qa.KnowledgeQaSegmentVo;
+import com.xspaceagi.knowledge.man.ui.web.permission.KnowledgeWritePermissionChecker;
 import com.xspaceagi.system.sdk.operate.ActionType;
 import com.xspaceagi.system.sdk.operate.OperationLogReporter;
 import com.xspaceagi.system.sdk.operate.SystemEnum;
@@ -68,6 +69,9 @@ public class KnowledgeQaController extends BaseController {
     @Resource
     private SpaceApplicationService spaceApplicationService;
 
+    @Resource
+    private KnowledgeWritePermissionChecker knowledgeWritePermissionChecker;
+
     @RequireResource(COMPONENT_LIB_QUERY_DETAIL)
     @OperationLogReporter(actionType = ActionType.QUERY, action = "数据列表查询", objectName = "知识库问答", systemCode = SystemEnum.KNOWLEDGE_CONFIG)
     @LogPrint(step = "知识库[知识库问答]-数据列表查询")
@@ -114,6 +118,7 @@ public class KnowledgeQaController extends BaseController {
             throws IntrospectionException, InvocationTargetException, IllegalAccessException {
 
         var id = request.getId();
+        knowledgeWritePermissionChecker.checkQa(id);
         knowledgeQaSegmentApplicationService.deleteById(id);
         return ReqResult.success();
 
@@ -141,6 +146,7 @@ public class KnowledgeQaController extends BaseController {
     public ReqResult<Long> update(@RequestBody KnowledgeQaSegmentUpdateRequest updateDto)
             throws IntrospectionException, InvocationTargetException, IllegalAccessException {
         var userContext = this.getUser();
+        knowledgeWritePermissionChecker.checkQa(updateDto.getId());
         var model = KnowledgeQaSegmentUpdateRequest.convert2Model(updateDto);
         var id = knowledgeQaSegmentApplicationService.updateInfo(model, userContext);
         return ReqResult.success(id);
@@ -156,6 +162,7 @@ public class KnowledgeQaController extends BaseController {
             throws IntrospectionException, InvocationTargetException, IllegalAccessException {
 
         var userContext = this.getUser();
+        knowledgeWritePermissionChecker.checkKnowledge(addDto.getKbId());
         var model = KnowledgeQaSegmentAddRequest.convert2Model(addDto);
         var id = knowledgeQaSegmentApplicationService.addInfo(model, userContext);
         return ReqResult.success(id);
@@ -195,6 +202,7 @@ public class KnowledgeQaController extends BaseController {
             @RequestParam("kbId") Long kbId) {
 
         var userContext = this.getUser();
+        knowledgeWritePermissionChecker.checkKnowledge(kbId);
 
         knowledgeQaSegmentApplicationService.importQaFromExcel(kbId, file, userContext);
 
diff --git a/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/KnowledgeRawSegmentController.java b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/KnowledgeRawSegmentController.java
index 3bef0395..49461868 100644
--- a/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/KnowledgeRawSegmentController.java
+++ b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/KnowledgeRawSegmentController.java
@@ -10,6 +10,7 @@ import com.xspaceagi.knowledge.man.ui.web.dto.segment.KnowledgeRawSegmentAddRequ
 import com.xspaceagi.knowledge.man.ui.web.dto.segment.KnowledgeRawSegmentQueryRequest;
 import com.xspaceagi.knowledge.man.ui.web.dto.segment.KnowledgeRawSegmentUpdateRequest;
 import com.xspaceagi.knowledge.man.ui.web.dto.segment.KnowledgeRawSegmentVo;
+import com.xspaceagi.knowledge.man.ui.web.permission.KnowledgeWritePermissionChecker;
 import com.xspaceagi.system.application.dto.SpaceDto;
 import com.xspaceagi.system.application.service.SpaceApplicationService;
 import com.xspaceagi.system.domain.log.LogPrint;
@@ -56,6 +57,9 @@ public class KnowledgeRawSegmentController extends BaseController {
     @Resource
     private SpaceApplicationService spaceApplicationService;
 
+    @Resource
+    private KnowledgeWritePermissionChecker knowledgeWritePermissionChecker;
+
     @RequireResource(COMPONENT_LIB_QUERY_DETAIL)
     @OperationLogReporter(actionType = ActionType.QUERY, action = "数据列表查询", objectName = "知识库分段", systemCode = SystemEnum.KNOWLEDGE_CONFIG)
     @LogPrint(step = "知识库[知识库分段]-数据列表查询")
@@ -104,6 +108,7 @@ public class KnowledgeRawSegmentController extends BaseController {
 
         var id = request.getId();
         var userContext = this.getUser();
+        knowledgeWritePermissionChecker.checkRawSegment(id);
         knowledgeRawSegmentApplicationService.deleteById(id, userContext);
         return ReqResult.success();
 
@@ -132,6 +137,7 @@ public class KnowledgeRawSegmentController extends BaseController {
             throws IntrospectionException, InvocationTargetException, IllegalAccessException {
 
         var userContext = this.getUser();
+        knowledgeWritePermissionChecker.checkRawSegment(updateDto.getRawSegmentId());
         var model = KnowledgeRawSegmentUpdateRequest.convert2Model(updateDto);
         var id = knowledgeRawSegmentApplicationService.updateInfo(model, userContext);
         return ReqResult.success(id);
@@ -147,6 +153,7 @@ public class KnowledgeRawSegmentController extends BaseController {
             throws IntrospectionException, InvocationTargetException, IllegalAccessException {
 
         var userContext = this.getUser();
+        knowledgeWritePermissionChecker.checkDocument(addDto.getDocId());
         var model = KnowledgeRawSegmentAddRequest.convert2Model(addDto);
 
         var id = knowledgeRawSegmentApplicationService.addInfo(model, userContext);
diff --git a/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/dto/document/KnowledgeDocumentCustomAddRequest.java b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/dto/document/KnowledgeDocumentCustomAddRequest.java
index 29db74c4..2328594b 100644
--- a/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/dto/document/KnowledgeDocumentCustomAddRequest.java
+++ b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/dto/document/KnowledgeDocumentCustomAddRequest.java
@@ -9,6 +9,7 @@ import lombok.Getter;
 import lombok.Setter;
 
 import java.io.Serializable;
+import java.nio.charset.StandardCharsets;
 import java.util.Objects;
 
 @Schema(description = "知识库文档-手动自定义新增")
@@ -51,6 +52,9 @@ public class KnowledgeDocumentCustomAddRequest implements Serializable {
         knowledgeDocumentModel.setName(addDto.getName());
         //dataType = 2,自定义文本,才生效
         knowledgeDocumentModel.setFileContent(addDto.getFileContent());
+        knowledgeDocumentModel.setFileSize(addDto.getFileContent() == null
+                ? 0L
+                : (long) addDto.getFileContent().getBytes(StandardCharsets.UTF_8).length);
         //docUrl 给个空字符串,满足数据库非空要求
         knowledgeDocumentModel.setDocUrl("");
         knowledgeDocumentModel.setPubStatus(KnowledgePubStatusEnum.Waiting);
diff --git a/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/permission/KnowledgeWritePermissionChecker.java b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/permission/KnowledgeWritePermissionChecker.java
new file mode 100644
index 00000000..c9b98716
--- /dev/null
+++ b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/main/java/com/xspaceagi/knowledge/man/ui/web/permission/KnowledgeWritePermissionChecker.java
@@ -0,0 +1,70 @@
+package com.xspaceagi.knowledge.man.ui.web.permission;
+
+import com.xspaceagi.knowledge.core.application.service.IKnowledgeConfigApplicationService;
+import com.xspaceagi.knowledge.core.application.service.IKnowledgeDocumentApplicationService;
+import com.xspaceagi.knowledge.core.application.service.IKnowledgeQaSegmentApplicationService;
+import com.xspaceagi.knowledge.core.application.service.IKnowledgeRawSegmentApplicationService;
+import com.xspaceagi.knowledge.domain.model.KnowledgeConfigModel;
+import com.xspaceagi.system.spec.common.RequestContext;
+import com.xspaceagi.system.spec.enums.ErrorCodeEnum;
+import com.xspaceagi.system.spec.exception.BizException;
+import com.xspaceagi.system.spec.exception.BizExceptionCodeEnum;
+import com.xspaceagi.system.spec.exception.KnowledgeException;
+import jakarta.annotation.Resource;
+import org.springframework.stereotype.Component;
+
+import java.util.Objects;
+
+@Component
+public class KnowledgeWritePermissionChecker {
+
+    @Resource
+    private IKnowledgeConfigApplicationService knowledgeConfigApplicationService;
+
+    @Resource
+    private IKnowledgeDocumentApplicationService knowledgeDocumentApplicationService;
+
+    @Resource
+    private IKnowledgeRawSegmentApplicationService knowledgeRawSegmentApplicationService;
+
+    @Resource
+    private IKnowledgeQaSegmentApplicationService knowledgeQaSegmentApplicationService;
+
+    public void checkKnowledge(Long knowledgeId) {
+        KnowledgeConfigModel knowledge = knowledgeConfigApplicationService.queryOneInfoById(knowledgeId);
+        if (knowledge == null) {
+            throw KnowledgeException.build(BizExceptionCodeEnum.resourceDataNotFound);
+        }
+        RequestContext<?> requestContext = RequestContext.get();
+        Long currentUserId = requestContext == null ? null : requestContext.getUserId();
+        if (knowledge.getCreatorId() == null
+                || currentUserId == null
+                || !Objects.equals(knowledge.getCreatorId(), currentUserId)) {
+            throw BizException.of(ErrorCodeEnum.PERMISSION_DENIED, BizExceptionCodeEnum.permissionDenied);
+        }
+    }
+
+    public void checkDocument(Long documentId) {
+        var document = knowledgeDocumentApplicationService.queryOneInfoById(documentId);
+        if (document == null) {
+            throw KnowledgeException.build(BizExceptionCodeEnum.resourceDataNotFound);
+        }
+        checkKnowledge(document.getKbId());
+    }
+
+    public void checkRawSegment(Long rawSegmentId) {
+        var segment = knowledgeRawSegmentApplicationService.queryOneInfoById(rawSegmentId);
+        if (segment == null) {
+            throw KnowledgeException.build(BizExceptionCodeEnum.resourceDataNotFound);
+        }
+        checkKnowledge(segment.getKbId());
+    }
+
+    public void checkQa(Long qaId) {
+        var qa = knowledgeQaSegmentApplicationService.queryOneInfoById(qaId);
+        if (qa == null) {
+            throw KnowledgeException.build(BizExceptionCodeEnum.resourceDataNotFound);
+        }
+        checkKnowledge(qa.getKbId());
+    }
+}
diff --git a/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/test/java/com/xspaceagi/knowledge/man/ui/web/dto/document/KnowledgeDocumentCustomAddRequestTest.java b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/test/java/com/xspaceagi/knowledge/man/ui/web/dto/document/KnowledgeDocumentCustomAddRequestTest.java
new file mode 100644
index 00000000..3173a834
--- /dev/null
+++ b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/test/java/com/xspaceagi/knowledge/man/ui/web/dto/document/KnowledgeDocumentCustomAddRequestTest.java
@@ -0,0 +1,34 @@
+package com.xspaceagi.knowledge.man.ui.web.dto.document;
+
+import org.junit.jupiter.api.Test;
+
+import java.nio.charset.StandardCharsets;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+class KnowledgeDocumentCustomAddRequestTest {
+
+    @Test
+    void calculatesUtf8ByteSizeForCustomText() {
+        KnowledgeDocumentCustomAddRequest request = new KnowledgeDocumentCustomAddRequest();
+        request.setKbId(1L);
+        request.setName("测试文档");
+        request.setFileContent("知识库 text");
+
+        var model = KnowledgeDocumentCustomAddRequest.convert2ModelForCustom(request);
+
+        assertThat(model.getFileSize())
+                .isEqualTo((long) request.getFileContent().getBytes(StandardCharsets.UTF_8).length);
+    }
+
+    @Test
+    void usesZeroSizeWhenCustomTextIsEmpty() {
+        KnowledgeDocumentCustomAddRequest request = new KnowledgeDocumentCustomAddRequest();
+        request.setKbId(1L);
+        request.setName("空文档");
+
+        var model = KnowledgeDocumentCustomAddRequest.convert2ModelForCustom(request);
+
+        assertThat(model.getFileSize()).isZero();
+    }
+}
diff --git a/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/test/java/com/xspaceagi/knowledge/man/ui/web/permission/KnowledgeWritePermissionCheckerTest.java b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/test/java/com/xspaceagi/knowledge/man/ui/web/permission/KnowledgeWritePermissionCheckerTest.java
new file mode 100644
index 00000000..e8266194
--- /dev/null
+++ b/qiming-backend/app-platform-modules/app-platform-knowledge/app-platform-knowledge-core-ui/src/test/java/com/xspaceagi/knowledge/man/ui/web/permission/KnowledgeWritePermissionCheckerTest.java
@@ -0,0 +1,116 @@
+package com.xspaceagi.knowledge.man.ui.web.permission;
+
+import com.xspaceagi.knowledge.core.application.service.IKnowledgeConfigApplicationService;
+import com.xspaceagi.knowledge.core.application.service.IKnowledgeDocumentApplicationService;
+import com.xspaceagi.knowledge.core.application.service.IKnowledgeQaSegmentApplicationService;
+import com.xspaceagi.knowledge.core.application.service.IKnowledgeRawSegmentApplicationService;
+import com.xspaceagi.knowledge.domain.model.KnowledgeConfigModel;
+import com.xspaceagi.knowledge.domain.model.KnowledgeDocumentModel;
+import com.xspaceagi.knowledge.domain.model.KnowledgeQaSegmentModel;
+import com.xspaceagi.knowledge.domain.model.KnowledgeRawSegmentModel;
+import com.xspaceagi.system.spec.common.RequestContext;
+import com.xspaceagi.system.spec.exception.BizException;
+import com.xspaceagi.system.spec.exception.KnowledgeException;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+
+import static org.junit.jupiter.api.Assertions.assertDoesNotThrow;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.mockito.Mockito.when;
+
+@ExtendWith(MockitoExtension.class)
+class KnowledgeWritePermissionCheckerTest {
+
+    private static final Long CURRENT_USER_ID = 10L;
+    private static final Long KNOWLEDGE_ID = 20L;
+
+    @Mock
+    private IKnowledgeConfigApplicationService knowledgeConfigApplicationService;
+
+    @Mock
+    private IKnowledgeDocumentApplicationService knowledgeDocumentApplicationService;
+
+    @Mock
+    private IKnowledgeRawSegmentApplicationService knowledgeRawSegmentApplicationService;
+
+    @Mock
+    private IKnowledgeQaSegmentApplicationService knowledgeQaSegmentApplicationService;
+
+    @InjectMocks
+    private KnowledgeWritePermissionChecker permissionChecker;
+
+    @BeforeEach
+    void setUpRequestContext() {
+        RequestContext<Object> requestContext = new RequestContext<>();
+        requestContext.setUserId(CURRENT_USER_ID);
+        RequestContext.set(requestContext);
+    }
+
+    @AfterEach
+    void clearRequestContext() {
+        RequestContext.remove();
+    }
+
+    @Test
+    void allowsKnowledgeCreatorToWrite() {
+        when(knowledgeConfigApplicationService.queryOneInfoById(KNOWLEDGE_ID))
+                .thenReturn(knowledge(CURRENT_USER_ID));
+
+        assertDoesNotThrow(() -> permissionChecker.checkKnowledge(KNOWLEDGE_ID));
+    }
+
+    @Test
+    void deniesOtherUsersEvenWhenKnowledgeIsAccessible() {
+        when(knowledgeConfigApplicationService.queryOneInfoById(KNOWLEDGE_ID))
+                .thenReturn(knowledge(99L));
+
+        assertThrows(BizException.class, () -> permissionChecker.checkKnowledge(KNOWLEDGE_ID));
+    }
+
+    @Test
+    void deniesWriteWhenOwnershipCannotBeConfirmed() {
+        when(knowledgeConfigApplicationService.queryOneInfoById(KNOWLEDGE_ID))
+                .thenReturn(knowledge(null));
+
+        assertThrows(BizException.class, () -> permissionChecker.checkKnowledge(KNOWLEDGE_ID));
+    }
+
+    @Test
+    void rejectsMissingKnowledge() {
+        when(knowledgeConfigApplicationService.queryOneInfoById(KNOWLEDGE_ID)).thenReturn(null);
+
+        assertThrows(KnowledgeException.class, () -> permissionChecker.checkKnowledge(KNOWLEDGE_ID));
+    }
+
+    @Test
+    void resolvesDocumentSegmentAndQaToOwningKnowledge() {
+        KnowledgeDocumentModel document = new KnowledgeDocumentModel();
+        document.setKbId(KNOWLEDGE_ID);
+        KnowledgeRawSegmentModel segment = new KnowledgeRawSegmentModel();
+        segment.setKbId(KNOWLEDGE_ID);
+        KnowledgeQaSegmentModel qa = new KnowledgeQaSegmentModel();
+        qa.setKbId(KNOWLEDGE_ID);
+
+        when(knowledgeDocumentApplicationService.queryOneInfoById(1L)).thenReturn(document);
+        when(knowledgeRawSegmentApplicationService.queryOneInfoById(2L)).thenReturn(segment);
+        when(knowledgeQaSegmentApplicationService.queryOneInfoById(3L)).thenReturn(qa);
+        when(knowledgeConfigApplicationService.queryOneInfoById(KNOWLEDGE_ID))
+                .thenReturn(knowledge(CURRENT_USER_ID));
+
+        assertDoesNotThrow(() -> permissionChecker.checkDocument(1L));
+        assertDoesNotThrow(() -> permissionChecker.checkRawSegment(2L));
+        assertDoesNotThrow(() -> permissionChecker.checkQa(3L));
+    }
+
+    private KnowledgeConfigModel knowledge(Long creatorId) {
+        KnowledgeConfigModel knowledge = new KnowledgeConfigModel();
+        knowledge.setId(KNOWLEDGE_ID);
+        knowledge.setCreatorId(creatorId);
+        return knowledge;
+    }
+}
diff --git a/qimingclaw/crates/agent-electron-client/src/renderer/components/pages/KnowledgePage.tsx b/qimingclaw/crates/agent-electron-client/src/renderer/components/pages/KnowledgePage.tsx
index e8c2bb36..90c97b74 100644
--- a/qimingclaw/crates/agent-electron-client/src/renderer/components/pages/KnowledgePage.tsx
+++ b/qimingclaw/crates/agent-electron-client/src/renderer/components/pages/KnowledgePage.tsx
@@ -21,7 +21,6 @@ import {
 } from "antd";
 import {
   ArrowLeftOutlined,
-  BookOutlined,
   CheckOutlined,
   CloudUploadOutlined,
   DatabaseOutlined,
@@ -39,6 +38,7 @@ import {
 } from "@ant-design/icons";
 import type { ColumnsType } from "antd/es/table";
 import ImageWithFallback from "../common/ImageWithFallback";
+import { getCurrentAuth } from "../../services/core/auth";
 import {
   AiAgentContext,
   AiManualComponent,
@@ -183,6 +183,7 @@ function getPublishedWorkflowId(workflow: PublishedWorkflow): number {
 }
 
 export default function KnowledgePage() {
+  const [currentUserId, setCurrentUserId] = useState<number | null>(null);
   const [spaces, setSpaces] = useState<SpaceInfo[]>([]);
   const [selectedSpaceId, setSelectedSpaceId] = useState<number | null>(null);
   const [knowledges, setKnowledges] = useState<KnowledgeComponent[]>([]);
@@ -280,6 +281,26 @@ export default function KnowledgePage() {
     [knowledges, selectedKnowledgeId],
   );
 
+  const isKnowledgeOwner = useCallback(
+    (knowledge?: KnowledgeComponent | KnowledgeInfo | null) => {
+      if (!knowledge) return false;
+      const creator = (knowledge as KnowledgeComponent).creator;
+      const creatorId = Number(knowledge.creatorId || creator?.id || 0);
+      return Boolean(currentUserId && creatorId && currentUserId === creatorId);
+    },
+    [currentUserId],
+  );
+
+  const canManageSelectedKnowledge = isKnowledgeOwner(
+    knowledgeInfo || selectedKnowledgeComponent,
+  );
+
+  const ensureCanManageSelectedKnowledge = useCallback(() => {
+    if (canManageSelectedKnowledge) return true;
+    message.warning("该知识库由其他用户创建，仅支持查看和加入对话");
+    return false;
+  }, [canManageSelectedKnowledge]);
+
   const loadAgentComponents = useCallback(async () => {
     try {
       const context = await resolveAiAgentContext();
@@ -489,6 +510,9 @@ export default function KnowledgePage() {
   useEffect(() => {
     loadSpaces();
     loadAgentComponents();
+    void getCurrentAuth().then((auth) => {
+      setCurrentUserId(auth.userInfo?.userId || null);
+    });
   }, [loadAgentComponents, loadSpaces]);
 
   useEffect(() => {
@@ -530,6 +554,10 @@ export default function KnowledgePage() {
   const openKnowledgeForm = async (
     knowledge?: KnowledgeComponent | KnowledgeInfo,
   ) => {
+    if (knowledge && !isKnowledgeOwner(knowledge)) {
+      message.warning("该知识库由其他用户创建，不能编辑");
+      return;
+    }
     setKnowledgeModalOpen(true);
     void (async () => {
       const spaceId =
@@ -591,6 +619,10 @@ export default function KnowledgePage() {
   };
 
   const saveKnowledge = async () => {
+    if (editingKnowledge && !isKnowledgeOwner(editingKnowledge)) {
+      message.warning("该知识库由其他用户创建，不能编辑");
+      return;
+    }
     let values: KnowledgeFormValues;
     try {
       values = await knowledgeForm.validateFields();
@@ -643,6 +675,10 @@ export default function KnowledgePage() {
   };
 
   const confirmDeleteKnowledge = (knowledge: KnowledgeComponent) => {
+    if (!isKnowledgeOwner(knowledge)) {
+      message.warning("该知识库由其他用户创建，不能删除");
+      return;
+    }
     const knowledgeId = getKnowledgeId(knowledge);
     Modal.confirm({
       title: "删除知识库",
@@ -767,6 +803,7 @@ export default function KnowledgePage() {
     const files = Array.from(event.target.files || []);
     event.target.value = "";
     if (!files.length || !selectedKnowledgeId) return;
+    if (!ensureCanManageSelectedKnowledge()) return;
 
     const validationError = files.map(validateKnowledgeFile).find(Boolean);
     if (validationError) {
@@ -792,6 +829,7 @@ export default function KnowledgePage() {
 
   const saveCustomDocument = async () => {
     if (!selectedKnowledgeId) return;
+    if (!ensureCanManageSelectedKnowledge()) return;
     const values = await customDocForm.validateFields();
     setSavingCustomDoc(true);
     try {
@@ -812,6 +850,7 @@ export default function KnowledgePage() {
   };
 
   const openRenameDocument = (doc: KnowledgeDocumentInfo) => {
+    if (!ensureCanManageSelectedKnowledge()) return;
     setRenamingDoc(doc);
     renameDocForm.setFieldsValue({ name: doc.name });
     setRenameDocModalOpen(true);
@@ -819,6 +858,7 @@ export default function KnowledgePage() {
 
   const saveDocumentName = async () => {
     if (!renamingDoc) return;
+    if (!ensureCanManageSelectedKnowledge()) return;
     const values = await renameDocForm.validateFields();
     setSavingRename(true);
     try {
@@ -856,6 +896,7 @@ export default function KnowledgePage() {
   };
 
   const confirmDeleteDocument = (doc: KnowledgeDocumentInfo) => {
+    if (!ensureCanManageSelectedKnowledge()) return;
     Modal.confirm({
       title: "删除文档",
       content: `确认删除「${doc.name}」吗？`,
@@ -874,6 +915,7 @@ export default function KnowledgePage() {
     doc: KnowledgeDocumentInfo,
     action: "qa" | "embedding" | "retry",
   ) => {
+    if (!ensureCanManageSelectedKnowledge()) return;
     try {
       if (action === "qa") {
         await generateKnowledgeDocumentQa(doc.id);
@@ -892,6 +934,7 @@ export default function KnowledgePage() {
   };
 
   const openSegmentModal = (segment?: KnowledgeRawSegmentInfo) => {
+    if (!ensureCanManageSelectedKnowledge()) return;
     setEditingSegment(segment || null);
     segmentForm.setFieldsValue({
       rawTxt: segment?.rawTxt || "",
@@ -901,6 +944,7 @@ export default function KnowledgePage() {
   };
 
   const saveSegment = async () => {
+    if (!ensureCanManageSelectedKnowledge()) return;
     const spaceId =
       selectedDocument?.spaceId || knowledgeInfo?.spaceId || selectedSpaceId;
     if (!selectedDocument || !spaceId) return;
@@ -932,6 +976,7 @@ export default function KnowledgePage() {
   };
 
   const confirmDeleteSegment = (segment: KnowledgeRawSegmentInfo) => {
+    if (!ensureCanManageSelectedKnowledge()) return;
     Modal.confirm({
       title: "删除分段",
       content: "确认删除该分段吗？",
@@ -947,6 +992,7 @@ export default function KnowledgePage() {
   };
 
   const openQaModal = (qa?: KnowledgeQaInfo) => {
+    if (!ensureCanManageSelectedKnowledge()) return;
     setEditingQa(qa || null);
     qaForm.setFieldsValue({
       question: qa?.question || "",
@@ -957,6 +1003,7 @@ export default function KnowledgePage() {
 
   const saveQa = async () => {
     if (!selectedKnowledgeId) return;
+    if (!ensureCanManageSelectedKnowledge()) return;
     const values = await qaForm.validateFields();
     try {
       if (editingQa) {
@@ -983,6 +1030,7 @@ export default function KnowledgePage() {
   };
 
   const confirmDeleteQa = (qa: KnowledgeQaInfo) => {
+    if (!ensureCanManageSelectedKnowledge()) return;
     Modal.confirm({
       title: "删除 QA",
       content: "确认删除该问答吗？",
@@ -1001,6 +1049,7 @@ export default function KnowledgePage() {
     const file = event.target.files?.[0];
     event.target.value = "";
     if (!file || !selectedKnowledgeId) return;
+    if (!ensureCanManageSelectedKnowledge()) return;
     try {
       await importKnowledgeQaExcel({ kbId: selectedKnowledgeId, file });
       message.success("QA 已导入");
@@ -1068,7 +1117,7 @@ export default function KnowledgePage() {
     },
     {
       title: "操作",
-      width: 260,
+      width: canManageSelectedKnowledge ? 260 : 120,
       fixed: "right",
       render: (_, record) => (
         <div className={styles.tableActions}>
@@ -1082,34 +1131,38 @@ export default function KnowledgePage() {
           >
             分段
           </Button>
-          <Button
-            type="link"
-            size="small"
-            onClick={() => runDocumentAction(record, "qa")}
-          >
-            生成 QA
-          </Button>
-          <Button
-            type="link"
-            size="small"
-            onClick={() => runDocumentAction(record, "embedding")}
-          >
-            向量化
-          </Button>
-          <Button
-            type="link"
-            size="small"
-            onClick={() => runDocumentAction(record, "retry")}
-          >
-            重试
-          </Button>
-          <Button
-            type="link"
-            size="small"
-            onClick={() => openRenameDocument(record)}
-          >
-            重命名
-          </Button>
+          {canManageSelectedKnowledge && (
+            <>
+              <Button
+                type="link"
+                size="small"
+                onClick={() => runDocumentAction(record, "qa")}
+              >
+                生成 QA
+              </Button>
+              <Button
+                type="link"
+                size="small"
+                onClick={() => runDocumentAction(record, "embedding")}
+              >
+                向量化
+              </Button>
+              <Button
+                type="link"
+                size="small"
+                onClick={() => runDocumentAction(record, "retry")}
+              >
+                重试
+              </Button>
+              <Button
+                type="link"
+                size="small"
+                onClick={() => openRenameDocument(record)}
+              >
+                重命名
+              </Button>
+            </>
+          )}
           {record.docUrl && (
             <Button
               type="link"
@@ -1119,14 +1172,16 @@ export default function KnowledgePage() {
               打开
             </Button>
           )}
-          <Button
-            type="link"
-            size="small"
-            danger
-            onClick={() => confirmDeleteDocument(record)}
-          >
-            删除
-          </Button>
+          {canManageSelectedKnowledge && (
+            <Button
+              type="link"
+              size="small"
+              danger
+              onClick={() => confirmDeleteDocument(record)}
+            >
+              删除
+            </Button>
+          )}
         </div>
       ),
     },
@@ -1149,29 +1204,33 @@ export default function KnowledgePage() {
       width: 170,
       render: (_, record) => formatDateTime(record.modified || record.created),
     },
-    {
-      title: "操作",
-      width: 120,
-      render: (_, record) => (
-        <div className={styles.tableActions}>
-          <Button
-            type="link"
-            size="small"
-            onClick={() => openSegmentModal(record)}
-          >
-            编辑
-          </Button>
-          <Button
-            type="link"
-            size="small"
-            danger
-            onClick={() => confirmDeleteSegment(record)}
-          >
-            删除
-          </Button>
-        </div>
-      ),
-    },
+    ...(canManageSelectedKnowledge
+      ? [
+          {
+            title: "操作",
+            width: 120,
+            render: (_: unknown, record: KnowledgeRawSegmentInfo) => (
+              <div className={styles.tableActions}>
+                <Button
+                  type="link"
+                  size="small"
+                  onClick={() => openSegmentModal(record)}
+                >
+                  编辑
+                </Button>
+                <Button
+                  type="link"
+                  size="small"
+                  danger
+                  onClick={() => confirmDeleteSegment(record)}
+                >
+                  删除
+                </Button>
+              </div>
+            ),
+          },
+        ]
+      : []),
   ];
 
   const qaColumns: ColumnsType<KnowledgeQaInfo> = [
@@ -1191,25 +1250,33 @@ export default function KnowledgePage() {
       width: 170,
       render: (_, record) => formatDateTime(record.modified || record.created),
     },
-    {
-      title: "操作",
-      width: 120,
-      render: (_, record) => (
-        <div className={styles.tableActions}>
-          <Button type="link" size="small" onClick={() => openQaModal(record)}>
-            编辑
-          </Button>
-          <Button
-            type="link"
-            size="small"
-            danger
-            onClick={() => confirmDeleteQa(record)}
-          >
-            删除
-          </Button>
-        </div>
-      ),
-    },
+    ...(canManageSelectedKnowledge
+      ? [
+          {
+            title: "操作",
+            width: 120,
+            render: (_: unknown, record: KnowledgeQaInfo) => (
+              <div className={styles.tableActions}>
+                <Button
+                  type="link"
+                  size="small"
+                  onClick={() => openQaModal(record)}
+                >
+                  编辑
+                </Button>
+                <Button
+                  type="link"
+                  size="small"
+                  danger
+                  onClick={() => confirmDeleteQa(record)}
+                >
+                  删除
+                </Button>
+              </div>
+            ),
+          },
+        ]
+      : []),
   ];
 
   const renderKnowledgeIcon = (
@@ -1295,6 +1362,12 @@ export default function KnowledgePage() {
             <div className={styles.grid}>
               {filteredKnowledges.map((knowledge) => {
                 const knowledgeId = getKnowledgeId(knowledge);
+                const owned = isKnowledgeOwner(knowledge);
+                const creatorName =
+                  knowledge.creator?.nickName ||
+                  knowledge.creator?.userName ||
+                  knowledge.creatorName ||
+                  "未知创建人";
                 const joinedComponent = joinedKnowledgeMap.get(knowledgeId);
                 const joined =
                   !!joinedComponent &&
@@ -1311,7 +1384,19 @@ export default function KnowledgePage() {
                       </div>
                       <div className={styles.cardTitle}>
                         <h3>{knowledge.name}</h3>
-                        <span>知识库资源</span>
+                        <div className={styles.cardOwnerRow}>
+                          <Tag
+                            color={owned ? "cyan" : "default"}
+                            className={styles.ownerTag}
+                          >
+                            {owned ? "我的知识库" : "只读"}
+                          </Tag>
+                          {!owned && (
+                            <span title={creatorName}>
+                              创建人：{creatorName}
+                            </span>
+                          )}
+                        </div>
                       </div>
                     </div>
                     <p className={styles.cardDescription}>
@@ -1319,9 +1404,14 @@ export default function KnowledgePage() {
                     </p>
                     <div className={styles.cardMeta}>
                       <span>
-                        {formatBytes(Number(knowledge.fileSize || 0))}
+                        容量 {formatBytes(Number(knowledge.fileSize || 0))}
                       </span>
-                      <span>
+                      <span
+                        title={formatDateTime(
+                          knowledge.modified || knowledge.created,
+                        )}
+                      >
+                        更新{" "}
                         {formatDateTime(
                           knowledge.modified || knowledge.created,
                         )}
@@ -1329,6 +1419,7 @@ export default function KnowledgePage() {
                     </div>
                     <div className={styles.cardActions}>
                       <Button
+                        type="primary"
                         size="small"
                         icon={joined ? <CheckOutlined /> : <TeamOutlined />}
                         loading={joiningIds.has(knowledgeId)}
@@ -1339,25 +1430,33 @@ export default function KnowledgePage() {
                       >
                         {joined ? "已加入" : "加入对话"}
                       </Button>
-                      <Button
-                        size="small"
-                        icon={<EditOutlined />}
-                        onClick={(event) => {
-                          event.stopPropagation();
-                          openKnowledgeForm(knowledge);
-                        }}
-                      >
-                        编辑
-                      </Button>
-                      <Button
-                        size="small"
-                        danger
-                        icon={<DeleteOutlined />}
-                        onClick={(event) => {
-                          event.stopPropagation();
-                          confirmDeleteKnowledge(knowledge);
-                        }}
-                      />
+                      {owned && (
+                        <div className={styles.cardOwnerActions}>
+                          <Tooltip title="编辑知识库">
+                            <Button
+                              size="small"
+                              icon={<EditOutlined />}
+                              aria-label="编辑知识库"
+                              onClick={(event) => {
+                                event.stopPropagation();
+                                openKnowledgeForm(knowledge);
+                              }}
+                            />
+                          </Tooltip>
+                          <Tooltip title="删除知识库">
+                            <Button
+                              size="small"
+                              danger
+                              icon={<DeleteOutlined />}
+                              aria-label="删除知识库"
+                              onClick={(event) => {
+                                event.stopPropagation();
+                                confirmDeleteKnowledge(knowledge);
+                              }}
+                            />
+                          </Tooltip>
+                        </div>
+                      )}
                     </div>
                   </article>
                 );
@@ -1376,7 +1475,11 @@ export default function KnowledgePage() {
           allowClear
           placeholder="搜索文档"
           value={documentKeyword}
-          onChange={(event) => setDocumentKeyword(event.target.value)}
+          onChange={(event) => {
+            const value = event.target.value;
+            setDocumentKeyword(value);
+            if (!value) void loadDocuments("");
+          }}
           onSearch={(value) => loadDocuments(value)}
           className={styles.innerSearch}
         />
@@ -1387,22 +1490,26 @@ export default function KnowledgePage() {
           className={styles.hiddenInput}
           onChange={handleDocumentFiles}
         />
-        <Button
-          icon={<CloudUploadOutlined />}
-          loading={uploadingDocs}
-          onClick={() => documentFileInputRef.current?.click()}
-        >
-          上传文档
-        </Button>
-        <Button
-          icon={<FileAddOutlined />}
-          onClick={() => {
-            customDocForm.resetFields();
-            setCustomDocModalOpen(true);
-          }}
-        >
-          自定义文本
-        </Button>
+        {canManageSelectedKnowledge && (
+          <>
+            <Button
+              icon={<CloudUploadOutlined />}
+              loading={uploadingDocs}
+              onClick={() => documentFileInputRef.current?.click()}
+            >
+              上传文档
+            </Button>
+            <Button
+              icon={<FileAddOutlined />}
+              onClick={() => {
+                customDocForm.resetFields();
+                setCustomDocModalOpen(true);
+              }}
+            >
+              自定义文本
+            </Button>
+          </>
+        )}
         <Tooltip title="刷新文档状态">
           <Button icon={<ReloadOutlined />} onClick={refreshDocumentStatus} />
         </Tooltip>
@@ -1443,13 +1550,15 @@ export default function KnowledgePage() {
           }}
           options={documents.map((doc) => ({ label: doc.name, value: doc.id }))}
         />
-        <Button
-          icon={<PlusOutlined />}
-          disabled={!selectedDocument}
-          onClick={() => openSegmentModal()}
-        >
-          新增分段
-        </Button>
+        {canManageSelectedKnowledge && (
+          <Button
+            icon={<PlusOutlined />}
+            disabled={!selectedDocument}
+            onClick={() => openSegmentModal()}
+          >
+            新增分段
+          </Button>
+        )}
         <Button
           icon={<ReloadOutlined />}
           disabled={!selectedDocument}
@@ -1498,13 +1607,19 @@ export default function KnowledgePage() {
           allowClear
           placeholder="搜索问题"
           value={qaKeyword}
-          onChange={(event) => setQaKeyword(event.target.value)}
+          onChange={(event) => {
+            const value = event.target.value;
+            setQaKeyword(value);
+            if (!value) void loadQaList("");
+          }}
           onSearch={(value) => loadQaList(value)}
           className={styles.innerSearch}
         />
-        <Button icon={<PlusOutlined />} onClick={() => openQaModal()}>
-          新增 QA
-        </Button>
+        {canManageSelectedKnowledge && (
+          <Button icon={<PlusOutlined />} onClick={() => openQaModal()}>
+            新增 QA
+          </Button>
+        )}
         <input
           ref={qaFileInputRef}
           type="file"
@@ -1512,12 +1627,14 @@ export default function KnowledgePage() {
           className={styles.hiddenInput}
           onChange={handleQaImport}
         />
-        <Button
-          icon={<CloudUploadOutlined />}
-          onClick={() => qaFileInputRef.current?.click()}
-        >
-          导入 Excel
-        </Button>
+        {canManageSelectedKnowledge && (
+          <Button
+            icon={<CloudUploadOutlined />}
+            onClick={() => qaFileInputRef.current?.click()}
+          >
+            导入 Excel
+          </Button>
+        )}
         <Button icon={<DownloadOutlined />} onClick={handleDownloadQaTemplate}>
           下载模板
         </Button>
@@ -1563,6 +1680,13 @@ export default function KnowledgePage() {
     const joining =
       selectedKnowledgeId !== null && joiningIds.has(selectedKnowledgeId);
     const knowledgeForAction = knowledgeInfo || selectedKnowledgeComponent;
+    const owned = isKnowledgeOwner(knowledgeForAction);
+    const creator = (knowledgeForAction as KnowledgeComponent | null)?.creator;
+    const creatorName =
+      creator?.nickName ||
+      creator?.userName ||
+      knowledgeForAction?.creatorName ||
+      "未知创建人";
 
     return (
       <>
@@ -1584,6 +1708,12 @@ export default function KnowledgePage() {
                 <strong>{knowledgeForAction?.name || "知识库详情"}</strong>
               </div>
               <h1>{knowledgeForAction?.name || "知识库详情"}</h1>
+              <div className={styles.detailOwnerRow}>
+                <Tag color={owned ? "cyan" : "default"}>
+                  {owned ? "我的知识库" : "只读知识库"}
+                </Tag>
+                {!owned && <span>创建人：{creatorName}</span>}
+              </div>
               <p>{knowledgeForAction?.description || "暂无描述"}</p>
             </div>
           </div>
@@ -1598,15 +1728,17 @@ export default function KnowledgePage() {
             >
               {joined ? "已加入对话" : "加入对话"}
             </Button>
-            <Button
-              icon={<EditOutlined />}
-              disabled={!knowledgeForAction}
-              onClick={() =>
-                knowledgeForAction && openKnowledgeForm(knowledgeForAction)
-              }
-            >
-              编辑
-            </Button>
+            {owned && (
+              <Button
+                icon={<EditOutlined />}
+                disabled={!knowledgeForAction}
+                onClick={() =>
+                  knowledgeForAction && openKnowledgeForm(knowledgeForAction)
+                }
+              >
+                编辑
+              </Button>
+            )}
           </div>
         </header>
         <main className={styles.detailContent}>
diff --git a/qimingclaw/crates/agent-electron-client/src/renderer/services/core/auth.ts b/qimingclaw/crates/agent-electron-client/src/renderer/services/core/auth.ts
index 1a15eca2..24285472 100644
--- a/qimingclaw/crates/agent-electron-client/src/renderer/services/core/auth.ts
+++ b/qimingclaw/crates/agent-electron-client/src/renderer/services/core/auth.ts
@@ -30,6 +30,7 @@ import { t } from "./i18n";
 // ========== 类型定义 ===
 export interface AuthUserInfo {
   id?: number;
+  userId?: number;
   username: string;
   displayName?: string;
   avatar?: string;
@@ -333,6 +334,7 @@ export async function loginAndRegister(
 
     await setUserInfo({
       id: response.id,
+      userId: response.userId,
       username,
       displayName: response.name,
       currentDomain: domain,
@@ -509,6 +511,7 @@ export async function reRegisterClient(): Promise<ClientRegisterResponse | null>
     await setUserInfo({
       ...currentUserInfo,
       id: response.id,
+      userId: response.userId,
       username: username || "",
       displayName: response.name,
       currentDomain: domain || currentUserInfo?.currentDomain,
@@ -675,6 +678,7 @@ export async function syncConfigToServer(options?: {
     await setUserInfo({
       ...currentUserInfo,
       id: response.id,
+      userId: response.userId,
       username: username || "",
       displayName: response.name,
       currentDomain: preservedCurrentDomain,
diff --git a/qimingclaw/crates/agent-electron-client/src/renderer/services/core/knowledge.ts b/qimingclaw/crates/agent-electron-client/src/renderer/services/core/knowledge.ts
index d6037ab3..55b5e033 100644
--- a/qimingclaw/crates/agent-electron-client/src/renderer/services/core/knowledge.ts
+++ b/qimingclaw/crates/agent-electron-client/src/renderer/services/core/knowledge.ts
@@ -74,7 +74,15 @@ export interface KnowledgeComponent {
   spaceId?: number;
   created?: string;
   modified?: string;
+  creatorId?: number;
   creatorName?: string;
+  creator?: {
+    id?: number;
+    userName?: string;
+    nickName?: string;
+    avatar?: string;
+  };
+  permissions?: string[];
   [key: string]: unknown;
 }
 
@@ -91,6 +99,7 @@ export interface KnowledgeInfo {
   pubStatus?: string;
   created?: string;
   modified?: string;
+  creatorId?: number;
   creatorName?: string;
   workflowId?: string | number;
   workflowName?: string;
diff --git a/qimingclaw/crates/agent-electron-client/src/renderer/services/core/setup.ts b/qimingclaw/crates/agent-electron-client/src/renderer/services/core/setup.ts
index b8d1103f..e0c4a975 100644
--- a/qimingclaw/crates/agent-electron-client/src/renderer/services/core/setup.ts
+++ b/qimingclaw/crates/agent-electron-client/src/renderer/services/core/setup.ts
@@ -37,7 +37,7 @@ export interface AuthUserInfo {
   username: string;
   displayName?: string;
   token?: string;
-  userId?: string;
+  userId?: number;
   email?: string;
   currentDomain?: string;
   agentId?: number;
diff --git a/qimingclaw/crates/agent-electron-client/src/renderer/styles/components/KnowledgePage.module.css b/qimingclaw/crates/agent-electron-client/src/renderer/styles/components/KnowledgePage.module.css
index 088d158c..ac20874d 100644
--- a/qimingclaw/crates/agent-electron-client/src/renderer/styles/components/KnowledgePage.module.css
+++ b/qimingclaw/crates/agent-electron-client/src/renderer/styles/components/KnowledgePage.module.css
@@ -82,19 +82,20 @@
   flex-wrap: wrap;
 }
 
-.search,
-.innerSearch {
+.search {
   width: min(420px, 100%);
 }
 
+.innerSearch {
+  width: min(360px, 100%);
+}
+
 .toolbarCreateButton {
   flex: 0 0 auto;
 }
 
 .search :global(.ant-input-affix-wrapper),
-.search:global(.ant-input-affix-wrapper),
-.innerSearch :global(.ant-input-affix-wrapper),
-.innerSearch:global(.ant-input-affix-wrapper) {
+.search:global(.ant-input-affix-wrapper) {
   height: 42px;
   border-radius: 8px;
   border-color: #dcd9d1;
@@ -102,6 +103,35 @@
   box-shadow: none;
 }
 
+.innerSearch :global(.ant-input-group) {
+  display: flex;
+}
+
+.innerSearch :global(.ant-input-affix-wrapper) {
+  height: 38px;
+  border-color: #dcd9d1;
+  border-radius: 7px 0 0 7px;
+  background: #ffffff;
+  box-shadow: none;
+}
+
+.innerSearch :global(.ant-input-search-button) {
+  width: 42px;
+  height: 38px;
+  padding: 0;
+  border-color: #dcd9d1;
+  border-radius: 0 7px 7px 0 !important;
+  color: #5e625c;
+  background: #ffffff;
+  box-shadow: none;
+}
+
+.innerSearch :global(.ant-input-affix-wrapper-focused),
+.innerSearch :global(.ant-input-affix-wrapper:focus-within),
+.innerSearch :global(.ant-input-search-button:hover) {
+  border-color: #74aaa5;
+}
+
 .count {
   margin-left: auto;
   color: #888b85;
@@ -132,15 +162,17 @@
 
 .grid {
   display: grid;
-  grid-template-columns: repeat(auto-fill, minmax(280px, 1fr));
+  grid-template-columns: repeat(3, minmax(0, 340px));
   gap: 16px;
+  justify-content: start;
 }
 
 .card {
-  min-height: 202px;
+  min-width: 0;
+  min-height: 218px;
   display: flex;
   flex-direction: column;
-  padding: 18px;
+  padding: 16px;
   background: #ffffff;
   border: 1px solid #e8e4dc;
   border-radius: 8px;
@@ -210,11 +242,28 @@
   white-space: nowrap;
 }
 
-.cardTitle span {
-  display: block;
-  margin-top: 4px;
+.cardOwnerRow {
+  min-width: 0;
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  margin-top: 5px;
+}
+
+.cardOwnerRow span {
+  min-width: 0;
+  overflow: hidden;
   color: #8a8d89;
   font-size: 12px;
+  line-height: 18px;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.ownerTag {
+  flex: 0 0 auto;
+  margin-inline-end: 0;
+  line-height: 18px;
 }
 
 .cardDescription {
@@ -235,7 +284,7 @@
   justify-content: space-between;
   gap: 12px;
   margin-top: auto;
-  padding-top: 14px;
+  padding-top: 12px;
   color: #8a8d89;
   font-size: 12px;
 }
@@ -251,10 +300,19 @@
   display: flex;
   align-items: center;
   gap: 8px;
-  margin-top: 14px;
+  margin-top: 12px;
+  padding-top: 12px;
+  border-top: 1px solid #efede7;
   flex-wrap: wrap;
 }
 
+.cardOwnerActions {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  margin-left: auto;
+}
+
 .detailHeader {
   align-items: flex-start;
 }
@@ -274,6 +332,20 @@
   white-space: nowrap;
 }
 
+.detailOwnerRow {
+  min-width: 0;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  margin-top: 7px;
+  color: #777b75;
+  font-size: 12px;
+}
+
+.detailOwnerRow :global(.ant-tag) {
+  margin-inline-end: 0;
+}
+
 .detailActions {
   flex: 0 0 auto;
   display: flex;
@@ -504,6 +576,10 @@
 }
 
 @media (max-width: 1180px) {
+  .grid {
+    grid-template-columns: repeat(2, minmax(0, 340px));
+  }
+
   .statRow {
     grid-template-columns: repeat(2, minmax(0, 1fr));
   }
@@ -533,4 +609,20 @@
   .statRow {
     grid-template-columns: minmax(0, 1fr);
   }
+
+  .grid {
+    grid-template-columns: minmax(0, 340px);
+  }
+}
+
+@media (max-width: 420px) {
+  .grid {
+    grid-template-columns: minmax(0, 1fr);
+  }
+
+  .cardMeta {
+    align-items: flex-start;
+    flex-direction: column;
+    gap: 4px;
+  }
 }