From 7d8e82c69f2a8eb245cb39e51a3a6943fce64a60 Mon Sep 17 00:00:00 2001
From: liangxu <liangxu0920@qq.com>
Date: Tue, 26 May 2026 01:19:01 +0800
Subject: [PATCH] feat(ops): add object storage management and site-mapping CSV
 import/export
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Ship the Ops backstage 对象存储 page (browse / upload / move / delete /
folder ops) backed by a new object-storage service + handler, with the
shared storage client extended with List/Stat/Copy/Usage/DownloadURL so
both MinIO and Aliyun providers cover the new surface. Add
ForcePathStyle to the object-storage config and treat r2/s3/custom_s3
as external providers so Cloudflare R2 and other S3-compatibles can
share the MinIO client path without spinning up the bundled MinIO.

Also add CSV import/export + template download to the site-domain
mappings page, raise gin MaxMultipartMemory to 8 MiB for the new
multipart endpoints, register Ops swagger routes, and extend the
descriptions-parity test to cover the ops router.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 apps/ops-web/src/layouts/AppShell.vue         |    7 +
 apps/ops-web/src/lib/object-storage.ts        |  107 +
 apps/ops-web/src/main.ts                      |    2 +
 apps/ops-web/src/router/index.ts              |    6 +
 apps/ops-web/src/views/ObjectStorageView.vue  | 2195 +++++++++++++++++
 .../src/views/SiteDomainMappingsView.vue      |  282 ++-
 deploy/OFFLINE_PACKAGE.md                     |    4 +-
 deploy/config.yaml                            |    1 +
 deploy/k3s/README.md                          |    1 +
 deploy/scripts/load-and-start.sh              |    2 +-
 server/cmd/ops-api/main.go                    |   34 +-
 server/configs/config.local.yaml.example      |   10 +
 server/configs/config.yaml                    |    1 +
 server/configs/ops-config.yaml                |    1 +
 server/internal/ops/app/object_storage.go     |  708 ++++++
 .../internal/ops/app/object_storage_test.go   |  267 ++
 .../internal/ops/app/site_domain_mapping.go   |  289 +++
 .../ops/app/site_domain_mapping_test.go       |   54 +
 server/internal/ops/config/config.go          |    5 +
 .../ops/repository/site_domain_mapping.go     |   86 +-
 .../ops/transport/object_storage_handler.go   |  235 ++
 server/internal/ops/transport/router.go       |   55 +-
 .../transport/site_domain_mapping_handler.go  |   56 +
 server/internal/shared/bootstrap/http.go      |    3 +
 server/internal/shared/bootstrap/http_test.go |    1 +
 server/internal/shared/config/config.go       |   26 +-
 server/internal/shared/config/config_test.go  |    5 +
 .../internal/shared/objectstorage/aliyun.go   |  180 +-
 .../internal/shared/objectstorage/client.go   |   76 +-
 server/internal/shared/objectstorage/minio.go |  204 +-
 .../shared/objectstorage/reloadable.go        |   49 +
 server/internal/shared/objectstorage/url.go   |   61 +
 .../internal/shared/objectstorage/url_test.go |   20 +
 .../internal/shared/swagger/descriptions.go   |  104 +
 .../swagger/descriptions_parity_test.go       |   18 +-
 server/internal/shared/swagger/swagger.go     |   18 +-
 .../tenant/transport/asset_handler_test.go    |    4 +
 37 files changed, 5111 insertions(+), 66 deletions(-)
 create mode 100644 apps/ops-web/src/lib/object-storage.ts
 create mode 100644 apps/ops-web/src/views/ObjectStorageView.vue
 create mode 100644 server/internal/ops/app/object_storage.go
 create mode 100644 server/internal/ops/app/object_storage_test.go
 create mode 100644 server/internal/ops/app/site_domain_mapping_test.go
 create mode 100644 server/internal/ops/transport/object_storage_handler.go

diff --git a/apps/ops-web/src/layouts/AppShell.vue b/apps/ops-web/src/layouts/AppShell.vue
index 1ac67c2..bd4f624 100644
--- a/apps/ops-web/src/layouts/AppShell.vue
+++ b/apps/ops-web/src/layouts/AppShell.vue
@@ -53,6 +53,7 @@ import {
   CloudDownloadOutlined,
   ControlOutlined,
   CrownOutlined,
+  DatabaseOutlined,
   FileSearchOutlined,
   GlobalOutlined,
   LineChartOutlined,
@@ -84,6 +85,7 @@ const menuLeaves: MenuLeaf[] = [
   { key: '/admin-users', label: '用户管理', path: '/admin-users' },
   { key: '/kol-subscriptions', label: '订阅包审批', path: '/kol-subscriptions' },
   { key: '/site-domain-mappings', label: '站点映射', path: '/site-domain-mappings' },
+  { key: '/object-storage', label: '对象存储', path: '/object-storage' },
   { key: '/desktop-client/releases', label: '客户端版本', path: '/desktop-client/releases' },
   { key: '/compliance/policy', label: '全局策略', path: '/compliance/policy' },
   { key: '/compliance/dictionaries', label: '合规词库', path: '/compliance/dictionaries' },
@@ -112,6 +114,11 @@ const menuItems = computed<ItemType[]>(() => [
     label: '站点映射',
     icon: () => h(GlobalOutlined),
   },
+  {
+    key: '/object-storage',
+    label: '对象存储',
+    icon: () => h(DatabaseOutlined),
+  },
   {
     key: '/desktop-client/releases',
     label: '客户端版本',
diff --git a/apps/ops-web/src/lib/object-storage.ts b/apps/ops-web/src/lib/object-storage.ts
new file mode 100644
index 0000000..f11d8d9
--- /dev/null
+++ b/apps/ops-web/src/lib/object-storage.ts
@@ -0,0 +1,107 @@
+import { http } from '@/lib/http'
+
+export interface ObjectStorageObject {
+  key: string
+  size: number
+  etag?: string
+  last_modified: string
+  content_type?: string
+  storage_class?: string
+}
+
+export interface ObjectStorageList {
+  objects: ObjectStorageObject[]
+  common_prefixes: string[]
+  continuation_token?: string
+  next_continuation_token?: string
+  is_truncated: boolean
+  prefix: string
+  keyword?: string
+  recursive: boolean
+}
+
+export interface ObjectStorageDetail extends ObjectStorageObject {
+  public_url?: string | null
+  preview_url?: string | null
+}
+
+export interface ObjectStorageUploadResult {
+  object: ObjectStorageObject
+}
+
+export interface ObjectStorageFolderCreateResult {
+  prefix: string
+}
+
+export interface ObjectStorageFolderDeleteResult {
+  prefix: string
+  deleted_count: number
+}
+
+export interface ObjectStorageUsage {
+  available: boolean
+  provider?: string
+  storage_size: number
+  object_count: number
+}
+
+export const objectStorageApi = {
+  list(params: {
+    prefix?: string
+    keyword?: string
+    continuation_token?: string
+    start_after?: string
+    recursive?: boolean
+    size?: number
+  }) {
+    return http.get<ObjectStorageList>('/object-storage/objects', params)
+  },
+  usage() {
+    return http.get<ObjectStorageUsage>('/object-storage/usage')
+  },
+  detail(key: string) {
+    return http.get<ObjectStorageDetail>('/object-storage/objects/detail', { key })
+  },
+  resolveURL(key: string) {
+    return http.get<{ url: string }>('/object-storage/objects/url', { key })
+  },
+  resolveDownloadURL(key: string) {
+    return http.get<{ url: string }>('/object-storage/objects/download-url', { key })
+  },
+  async upload(file: File, target: { key: string; overwrite: boolean; content_type?: string }) {
+    const form = new FormData()
+    form.append('file', file, file.name)
+    form.append('key', target.key)
+    form.append('overwrite', String(target.overwrite))
+    if (target.content_type) form.append('content_type', target.content_type)
+    const response = await http.raw.post<{
+      code: number
+      message: string
+      data: ObjectStorageUploadResult
+    }>('/object-storage/objects/upload', form)
+    return response.data.data
+  },
+  move(payload: {
+    source_key: string
+    destination_key: string
+    overwrite: boolean
+    delete_source: boolean
+  }) {
+    return http.post<ObjectStorageDetail, typeof payload>('/object-storage/objects/move', payload)
+  },
+  delete(key: string) {
+    return http.delete<{ key: string }>(
+      `/object-storage/objects?${new URLSearchParams({ key }).toString()}`,
+    )
+  },
+  createFolder(prefix: string) {
+    return http.post<ObjectStorageFolderCreateResult, { prefix: string }>('/object-storage/folders', {
+      prefix,
+    })
+  },
+  deleteFolder(prefix: string) {
+    return http.delete<ObjectStorageFolderDeleteResult>(
+      `/object-storage/folders?${new URLSearchParams({ prefix }).toString()}`,
+    )
+  },
+}
diff --git a/apps/ops-web/src/main.ts b/apps/ops-web/src/main.ts
index 2bbe2fc..ca0e14b 100644
--- a/apps/ops-web/src/main.ts
+++ b/apps/ops-web/src/main.ts
@@ -25,6 +25,7 @@ import {
   Result,
   Segmented,
   Select,
+  Skeleton,
   Space,
   Spin,
   Statistic,
@@ -98,6 +99,7 @@ bindUnauthorizedHandler(() => {
   Result,
   Select,
   Segmented,
+  Skeleton,
   Space,
   Spin,
   Statistic,
diff --git a/apps/ops-web/src/router/index.ts b/apps/ops-web/src/router/index.ts
index 53a5cab..23af7b7 100644
--- a/apps/ops-web/src/router/index.ts
+++ b/apps/ops-web/src/router/index.ts
@@ -61,6 +61,12 @@ export const router = createRouter({
           component: () => import('@/views/SiteDomainMappingsView.vue'),
           meta: { title: '站点映射' },
         },
+        {
+          path: 'object-storage',
+          name: 'object-storage',
+          component: () => import('@/views/ObjectStorageView.vue'),
+          meta: { title: '对象存储' },
+        },
         {
           path: 'desktop-client/releases',
           name: 'desktop-client-releases',
diff --git a/apps/ops-web/src/views/ObjectStorageView.vue b/apps/ops-web/src/views/ObjectStorageView.vue
new file mode 100644
index 0000000..217760a
--- /dev/null
+++ b/apps/ops-web/src/views/ObjectStorageView.vue
@@ -0,0 +1,2195 @@
+<template>
+  <div class="oss-page">
+    <!-- Beautiful Header with dashboard title and metrics -->
+    <div class="oss-header-section">
+      <div class="header-title-area">
+        <div class="title-with-badge">
+          <h2 class="ops-page-title oss-title">
+            <GlobalOutlined class="title-icon" />
+            对象存储
+          </h2>
+          <span class="oss-env-badge">OSS 控制台</span>
+        </div>
+        <p class="oss-subtitle-desc">面向运营端系统发布与静态资源的高性能文件存储管理器</p>
+      </div>
+
+      <!-- Dashboard Metrics Cards -->
+      <div class="oss-metrics-grid">
+        <div class="metric-card current-path-card">
+          <div class="metric-icon path-icon-bg"><GlobalOutlined /></div>
+          <div class="metric-content">
+            <div class="metric-label">当前位置 (Prefix)</div>
+            <div class="metric-value path-value" :title="currentPrefix || '根目录'">
+              {{ currentPrefix ? `/${currentPrefix}` : 'Bucket 根目录' }}
+            </div>
+          </div>
+        </div>
+        <div class="metric-card folder-card">
+          <div class="metric-icon folder-icon-bg"><FolderOpenOutlined /></div>
+          <div class="metric-content">
+            <div class="metric-label">子文件夹</div>
+            <div class="metric-value">
+              {{ folderRows.length }} <span class="metric-unit">个</span>
+            </div>
+          </div>
+        </div>
+        <div class="metric-card object-card">
+          <div class="metric-icon object-icon-bg"><FileOutlined /></div>
+          <div class="metric-content">
+            <div class="metric-label">对象文件数</div>
+            <div class="metric-value">
+              {{ rows.length }} <span class="metric-unit">个</span>
+            </div>
+          </div>
+        </div>
+        <div v-if="storageUsage?.available" class="metric-card usage-card">
+          <div class="metric-icon usage-icon-bg"><DatabaseOutlined /></div>
+          <div class="metric-content">
+            <div class="metric-label">Bucket 原生用量</div>
+            <div class="metric-value">
+              {{ formatBytes(storageUsage.storage_size) }}
+            </div>
+            <div class="metric-subvalue">{{ storageUsage.object_count }} 个对象</div>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <!-- Breadcrumb Path Bar & Geek Input toggler -->
+    <div class="oss-breadcrumb-bar">
+      <div v-if="!pathEditing" class="breadcrumb-container">
+        <a-button type="text" size="small" class="breadcrumb-home" @click="jumpToPath('')">
+          <template #icon><HomeOutlined /></template>
+          根目录
+        </a-button>
+        <template v-for="(part, index) in breadcrumbs" :key="index">
+          <span class="breadcrumb-separator"><RightOutlined /></span>
+          <a-button type="text" size="small" class="breadcrumb-item" @click="jumpToPath(part.path)">
+            {{ part.name }}
+          </a-button>
+        </template>
+        
+        <div class="path-actions">
+          <a-tooltip title="复制当前目录路径">
+            <a-button type="text" size="small" class="path-action-btn" @click="copyCurrentPath">
+              <template #icon><CopyOutlined /></template>
+            </a-button>
+          </a-tooltip>
+          <a-tooltip title="手动输入路径 (极客模式)">
+            <a-button type="text" size="small" class="path-action-btn" @click="startEditPath">
+              <template #icon><EditOutlined /></template>
+            </a-button>
+          </a-tooltip>
+        </div>
+      </div>
+      
+      <div v-else class="breadcrumb-edit-container">
+        <span class="edit-prefix-label">路径编辑:</span>
+        <a-input
+          ref="pathInputRef"
+          v-model:value="tempPrefix"
+          class="path-edit-input"
+          placeholder="例如: desktop-client/releases/blobs/"
+          size="small"
+          allow-clear
+          @press-enter="saveEditedPath"
+        >
+          <template #prefix>
+            <span class="path-slash-prefix">/</span>
+          </template>
+        </a-input>
+        <a-space size="small">
+          <a-button type="primary" size="small" class="path-save-btn" @click="saveEditedPath">
+            跳转
+          </a-button>
+          <a-button size="small" class="path-cancel-btn" @click="cancelEditedPath">
+            取消
+          </a-button>
+        </a-space>
+      </div>
+    </div>
+
+    <div class="ops-card oss-card">
+      <!-- Toolbar containing Search and Primary Actions -->
+      <div class="ops-toolbar oss-toolbar">
+        <div class="toolbar-left">
+          <a-input
+            v-model:value="filter.keyword"
+            class="oss-search"
+            placeholder="搜索当前路径下的 Object Key..."
+            allow-clear
+            @press-enter="resetAndReload"
+            @change="onKeywordChange"
+          >
+            <template #prefix><SearchOutlined class="search-icon" /></template>
+          </a-input>
+          
+          <a-tooltip title="勾选后将检索当前目录下所有层级的子文件；未勾选则仅展示当前一层。">
+            <a-checkbox v-model:checked="filter.recursive" @change="resetAndReload" class="oss-recursive-checkbox">
+              递归搜索所有子目录
+            </a-checkbox>
+          </a-tooltip>
+        </div>
+        
+        <div class="toolbar-right">
+          <a-space wrap>
+            <a-button @click="openCreateFolder" class="toolbar-secondary-btn">
+              <template #icon><FolderAddOutlined /></template>
+              新建文件夹
+            </a-button>
+            <a-button @click="reload" class="toolbar-secondary-btn">
+              <template #icon><ReloadOutlined /></template>
+              刷新
+            </a-button>
+            <a-button type="primary" class="upload-primary-btn" @click="openUpload">
+              <template #icon><UploadOutlined /></template>
+              上传对象
+            </a-button>
+          </a-space>
+        </div>
+      </div>
+
+      <!-- Sliding Floating Batch Actions Panel -->
+      <div :class="['batch-ops-panel', { 'show': selectedRowKeys.length > 0 }]">
+        <div class="batch-info">
+          <span class="selected-badge">{{ selectedRowKeys.length }}</span>
+          <span class="selected-text">项已选择</span>
+        </div>
+        <div class="batch-divider"></div>
+        <a-space size="small" class="batch-buttons">
+          <a-button
+            type="text"
+            size="small"
+            class="batch-action-btn-styled"
+            :disabled="selectedObjectCount === 0"
+            @click="bulkCopyURLs"
+          >
+            <template #icon><CopyOutlined /></template>
+            批量复制链接
+          </a-button>
+          <a-button
+            type="text"
+            size="small"
+            class="batch-action-btn-styled"
+            :disabled="selectedObjectCount === 0"
+            @click="bulkDownload"
+          >
+            <template #icon><DownloadOutlined /></template>
+            批量下载
+          </a-button>
+          <a-button type="text" danger size="small" class="batch-action-btn-styled batch-delete-btn" @click="confirmBulkDelete">
+            <template #icon><DeleteOutlined /></template>
+            批量删除
+          </a-button>
+          <a-button size="small" type="link" class="batch-cancel-link" @click="clearSelection">取消选择</a-button>
+        </a-space>
+      </div>
+
+      <!-- Advanced Object list table -->
+      <a-table
+        :columns="columns"
+        :data-source="tableRows"
+        :loading="loading"
+        :pagination="false"
+        row-key="rowKey"
+        :scroll="{ x: 1100 }"
+        :row-selection="rowSelection"
+        class="oss-table"
+      >
+        <template #bodyCell="{ column, record }">
+          <!-- Column 1: Object Key / Folder Name -->
+          <template v-if="column.key === 'key'">
+            <!-- Folder representation -->
+            <button v-if="record.kind === 'folder'" class="key-button folder-entry-btn" @click="enterFolder(record.key)">
+              <div class="icon-wrapper folder-icon">
+                <FolderOutlined />
+              </div>
+              <span class="folder-name-text">{{ folderName(record.key) }}</span>
+            </button>
+            
+            <!-- File representation -->
+            <div v-else class="object-key-cell">
+              <div :class="['icon-wrapper', `file-icon-${getFileIconType(record.key)}`]">
+                <FileZipOutlined v-if="getFileIconType(record.key) === 'zip'" />
+                <FileImageOutlined v-else-if="getFileIconType(record.key) === 'image'" />
+                <FilePdfOutlined v-else-if="getFileIconType(record.key) === 'pdf'" />
+                <FileTextOutlined v-else-if="getFileIconType(record.key) === 'doc'" />
+                <FileExcelOutlined v-else-if="getFileIconType(record.key) === 'excel'" />
+                <FileWordOutlined v-else-if="getFileIconType(record.key) === 'word'" />
+                <FileOutlined v-else />
+              </div>
+              <div class="file-name-info">
+                <strong class="file-name-title" :title="fileName(record.key)">{{ fileName(record.key) }}</strong>
+                <span class="file-full-key" :title="record.key">{{ record.key }}</span>
+              </div>
+            </div>
+          </template>
+
+          <!-- Column 2: Size -->
+          <template v-else-if="column.key === 'size'">
+            <span v-if="record.kind === 'folder'" class="table-dash-value">—</span>
+            <span v-else class="file-size-value">{{ formatBytes(record.size) }}</span>
+          </template>
+
+          <!-- Column 3: Storage Type / Class -->
+          <template v-else-if="column.key === 'type'">
+            <span v-if="record.kind === 'folder'" class="folder-type-tag">目录</span>
+            <a-tag v-else :color="getTagColor(record.content_type || record.storage_class)" class="oss-type-tag">
+              {{ record.content_type || record.storage_class || 'object' }}
+            </a-tag>
+          </template>
+
+          <!-- Column 4: Last Modified -->
+          <template v-else-if="column.key === 'last_modified'">
+            <span v-if="record.kind === 'folder'" class="table-dash-value">—</span>
+            <span v-else class="date-modified-value">{{ formatDate(record.last_modified) }}</span>
+          </template>
+
+          <!-- Column 5: Action Column (dropdown + immediate copy/download) -->
+          <template v-else-if="column.key === 'actions'">
+            <div v-if="record.kind === 'object'" class="table-actions-row">
+              <a-tooltip title="复制访问地址">
+                <a-button type="text" shape="circle" size="small" class="action-btn action-btn-primary" @click="copyURL(record.key)">
+                  <template #icon><CopyOutlined /></template>
+                </a-button>
+              </a-tooltip>
+              <a-tooltip title="下载">
+                <a-button
+                  type="text"
+                  shape="circle"
+                  size="small"
+                  class="action-btn action-btn-primary"
+                  :loading="downloadingKey === record.key"
+                  @click="downloadObject(record.key)"
+                >
+                  <template #icon><DownloadOutlined /></template>
+                </a-button>
+              </a-tooltip>
+              
+              <a-dropdown :trigger="['click']" placement="bottomRight">
+                <a-button type="text" shape="circle" size="small" class="action-btn action-btn-more">
+                  <template #icon><EllipsisOutlined /></template>
+                </a-button>
+                <template #overlay>
+                  <a-menu class="oss-action-menu">
+                    <a-menu-item key="detail" @click="openDetail(record.key)">
+                      <template #icon><InfoCircleOutlined /></template>
+                      对象详情
+                    </a-menu-item>
+                    <a-menu-item key="move" @click="openMove(record)">
+                      <template #icon><SwapOutlined /></template>
+                      重命名 / 移动
+                    </a-menu-item>
+                    <a-menu-divider />
+                    <a-menu-item key="delete" @click="confirmDelete(record.key)">
+                      <div class="danger-action-label">
+                        <DeleteOutlined class="danger-icon" />
+                        删除对象
+                      </div>
+                    </a-menu-item>
+                  </a-menu>
+                </template>
+              </a-dropdown>
+            </div>
+            
+            <!-- Folder actions -->
+            <div v-else class="table-actions-row">
+              <a-tooltip title="删除目录">
+                <a-button
+                  type="text"
+                  shape="circle"
+                  size="small"
+                  danger
+                  class="action-btn action-btn-danger"
+                  :loading="deletingFolderKey === record.key"
+                  @click="confirmDeleteFolder(record.key)"
+                >
+                  <template #icon><DeleteOutlined /></template>
+                </a-button>
+              </a-tooltip>
+            </div>
+          </template>
+        </template>
+      </a-table>
+
+      <!-- Empty State -->
+      <div v-if="tableRows.length === 0 && !loading" class="oss-empty-state">
+        <div class="empty-illustration">
+          <InboxOutlined />
+        </div>
+        <h3 class="empty-title">当前目录为空</h3>
+        <p class="empty-desc">您可以上传文件到当前路径，或者返回上一级目录。</p>
+        <div class="empty-actions">
+          <a-button v-if="currentPrefix" @click="goUp" class="empty-btn-secondary">
+            返回上级目录
+          </a-button>
+          <a-button type="primary" @click="openUpload" class="empty-btn-primary">
+            <template #icon><UploadOutlined /></template>
+            上传文件
+          </a-button>
+        </div>
+      </div>
+
+      <!-- Load More Row -->
+      <div v-if="nextToken" class="load-more-row">
+        <a-button :loading="loadingMore" @click="loadMore" class="load-more-btn">加载更多</a-button>
+      </div>
+    </div>
+
+    <!-- Object Details Drawer -->
+    <a-drawer
+      v-model:open="detailOpen"
+      title="对象元数据详情"
+      width="580"
+      :destroy-on-close="true"
+      class="oss-detail-drawer"
+    >
+      <a-skeleton v-if="detailLoading" active :paragraph="{ rows: 8 }" />
+      <div v-else-if="detail" class="detail-drawer-content">
+        <!-- Image Preview if file is an image -->
+        <div v-if="isImageFile(detail.key) && detailPreviewURL" class="image-preview-section">
+          <div class="preview-label">{{ detail.preview_url ? '签名预览' : '资源预览' }}</div>
+          <div class="preview-box">
+            <img :src="detailPreviewURL" class="preview-img" alt="image-preview" />
+          </div>
+        </div>
+
+        <a-descriptions bordered :column="1" size="small" class="detail-desc-list">
+          <a-descriptions-item label="Object Key">
+            <span class="detail-key-text">{{ detail.key }}</span>
+            <a-button type="link" size="small" class="copy-inline-btn" @click="copyText(detail.key)">
+              复制
+            </a-button>
+          </a-descriptions-item>
+          <a-descriptions-item label="文件大小">{{ formatBytes(detail.size) }}</a-descriptions-item>
+          <a-descriptions-item label="Content-Type">
+            <a-tag color="blue" class="mono-tag">{{ optionalText(detail.content_type) }}</a-tag>
+          </a-descriptions-item>
+          <a-descriptions-item label="存储类/等级">
+            <a-tag color="purple" class="mono-tag">{{ optionalText(detail.storage_class) }}</a-tag>
+          </a-descriptions-item>
+          <a-descriptions-item label="ETag">
+            <span class="mono-text">{{ optionalText(detail.etag) }}</span>
+          </a-descriptions-item>
+          <a-descriptions-item label="更新时间">
+            {{ formatDate(detail.last_modified) }}
+          </a-descriptions-item>
+          <a-descriptions-item label="公网访问地址">
+            <div v-if="detail.public_url" class="url-detail-block">
+              <a :href="detail.public_url" target="_blank" class="detail-url-link">{{ detail.public_url }}</a>
+              <a-button type="primary" size="small" class="copy-url-btn" @click="copyText(detail.public_url)">
+                复制公网URL
+              </a-button>
+            </div>
+            <span v-else>—</span>
+          </a-descriptions-item>
+        </a-descriptions>
+      </div>
+    </a-drawer>
+
+    <!-- Upload Object Drawer (Redesigned with Dragger Upload Zone) -->
+    <a-drawer
+      v-model:open="uploadOpen"
+      title="上传对象至当前目录"
+      width="540"
+      :destroy-on-close="true"
+      @close="closeUpload"
+      class="oss-upload-drawer"
+    >
+      <a-form layout="vertical" :model="uploadForm" class="upload-drawer-form">
+        <a-form-item label="目标 Object Key / 目录路径" required extra="默认采用当前面包屑所在目录。如果包含新子目录斜杠（如 images/test.png），将自动创建多级虚拟文件夹。">
+          <a-input v-model:value="uploadForm.key" placeholder="例如: images/example.png 或 example.png" />
+        </a-form-item>
+        
+        <a-form-item label="拖拽或选择文件" required>
+          <a-upload-dragger
+            :before-upload="beforeUpload"
+            :show-upload-list="false"
+            class="oss-drag-uploader"
+          >
+            <p class="ant-upload-drag-icon">
+              <CloudUploadOutlined class="upload-drag-icon-img" />
+            </p>
+            <p class="ant-upload-text">点击或拖拽文件到这里上传</p>
+            <p class="ant-upload-hint">支持单个文件大小不超过 500MB</p>
+          </a-upload-dragger>
+
+          <!-- File Chosen Card -->
+          <transition name="fade">
+            <div v-if="uploadForm.file" class="file-picked-card">
+              <div :class="['file-picked-icon-wrapper', `file-icon-${getFileIconType(uploadForm.file.name)}`]">
+                <FileZipOutlined v-if="getFileIconType(uploadForm.file.name) === 'zip'" />
+                <FileImageOutlined v-else-if="getFileIconType(uploadForm.file.name) === 'image'" />
+                <FilePdfOutlined v-else-if="getFileIconType(uploadForm.file.name) === 'pdf'" />
+                <FileOutlined v-else />
+              </div>
+              <div class="file-picked-info">
+                <strong class="file-picked-name" :title="uploadForm.file.name">{{ uploadForm.file.name }}</strong>
+                <span class="file-picked-size">{{ formatBytes(uploadForm.file.size) }}</span>
+              </div>
+              <a-button type="text" danger size="small" class="file-picked-remove" @click="uploadForm.file = null">
+                清除
+              </a-button>
+            </div>
+          </transition>
+        </a-form-item>
+
+        <a-collapse ghost class="upload-advanced-collapse">
+          <a-collapse-panel key="advanced" header="高级选项设置">
+            <a-form-item label="手动指定 Content-Type (可选)">
+              <a-input v-model:value="uploadForm.content_type" placeholder="例如: image/png，留空将由系统自动识别" />
+            </a-form-item>
+            <a-form-item class="checkbox-form-item">
+              <a-checkbox v-model:checked="uploadForm.overwrite">允许直接覆盖同名对象</a-checkbox>
+            </a-form-item>
+          </a-collapse-panel>
+        </a-collapse>
+      </a-form>
+
+      <template #footer>
+        <div class="drawer-footer">
+          <a-button @click="closeUpload" class="footer-btn-secondary">取消</a-button>
+          <a-button type="primary" :loading="uploading" @click="submitUpload" class="footer-btn-primary">
+            开始上传
+          </a-button>
+        </div>
+      </template>
+    </a-drawer>
+
+    <!-- Create Folder Modal -->
+    <a-modal
+      v-model:open="createFolderOpen"
+      title="新建文件夹"
+      :confirm-loading="creatingFolder"
+      @ok="submitCreateFolder"
+      @cancel="closeCreateFolder"
+      destroy-on-close
+      class="oss-create-folder-modal"
+    >
+      <a-form layout="vertical">
+        <a-form-item label="文件夹名称" required extra="会在 OSS 中真实创建一个以 / 结尾的空目录对象，创建后可立即在当前目录看到。">
+          <a-input v-model:value="newFolderName" placeholder="例如: releases 或 images" allow-clear />
+        </a-form-item>
+      </a-form>
+    </a-modal>
+
+    <!-- Delete Folder Warning Modal -->
+    <a-modal
+      v-model:open="deleteFolderOpen"
+      title="删除目录"
+      ok-text="确认删除目录"
+      cancel-text="取消"
+      ok-type="danger"
+      :confirm-loading="deletingFolder"
+      @ok="submitDeleteFolder"
+      @cancel="closeDeleteFolder"
+      destroy-on-close
+      class="oss-delete-folder-modal"
+    >
+      <a-alert
+        type="warning"
+        show-icon
+        message="此操作会删除该目录下的全部 OSS 对象"
+        description="对象存储的目录是前缀视图，删除目录会递归删除该前缀下所有文件和空目录占位对象，删除后无法恢复。"
+      />
+      <div class="delete-folder-path">
+        <span>目录路径</span>
+        <strong>{{ pendingDeleteFolder || '—' }}</strong>
+      </div>
+    </a-modal>
+
+    <!-- Batch Delete Warning Modal -->
+    <a-modal
+      v-model:open="batchDeleteOpen"
+      title="批量删除"
+      ok-text="确认批量删除"
+      cancel-text="取消"
+      ok-type="danger"
+      :confirm-loading="deletingBatch"
+      @ok="bulkDelete"
+      @cancel="closeBatchDelete"
+      destroy-on-close
+      class="oss-delete-folder-modal"
+    >
+      <a-alert
+        type="warning"
+        show-icon
+        message="此操作会删除选中的 OSS 内容"
+        :description="batchDeleteDescription"
+      />
+      <div class="delete-folder-path">
+        <span>已选择</span>
+        <strong>{{ selectedFolderCount }} 个目录，{{ selectedObjectCount }} 个对象</strong>
+      </div>
+    </a-modal>
+
+    <!-- Rename / Move Modal -->
+    <a-modal
+      v-model:open="moveOpen"
+      title="重命名 / 移动对象"
+      :confirm-loading="moving"
+      @ok="submitMove"
+      @cancel="closeMove"
+      class="oss-move-modal"
+    >
+      <a-form layout="vertical" :model="moveForm">
+        <a-form-item label="源对象绝对路径 (OSS Object Key)">
+          <a-input v-model:value="moveForm.source_key" disabled class="mono-input" />
+        </a-form-item>
+        <a-form-item label="目标对象路径 (支持重命名或更改文件夹路径)" required>
+          <a-input v-model:value="moveForm.destination_key" class="mono-input" />
+        </a-form-item>
+        <a-form-item class="checkbox-form-item">
+          <a-checkbox v-model:checked="moveForm.overwrite">允许覆盖目标重名对象</a-checkbox>
+        </a-form-item>
+      </a-form>
+    </a-modal>
+  </div>
+</template>
+
+<script setup lang="ts">
+import {
+  CloudUploadOutlined,
+  CopyOutlined,
+  DatabaseOutlined,
+  DeleteOutlined,
+  DownloadOutlined,
+  EditOutlined,
+  EllipsisOutlined,
+  FileExcelOutlined,
+  FileImageOutlined,
+  FileOutlined,
+  FilePdfOutlined,
+  FileTextOutlined,
+  FileWordOutlined,
+  FileZipOutlined,
+  FolderAddOutlined,
+  FolderOpenOutlined,
+  FolderOutlined,
+  GlobalOutlined,
+  HomeOutlined,
+  InboxOutlined,
+  InfoCircleOutlined,
+  ReloadOutlined,
+  RightOutlined,
+  SearchOutlined,
+  SwapOutlined,
+  UploadOutlined,
+} from '@ant-design/icons-vue'
+import { Modal, message } from 'ant-design-vue'
+import dayjs from 'dayjs'
+import { computed, nextTick, onMounted, reactive, ref } from 'vue'
+
+import { showOpsError } from '@/lib/errors'
+import {
+  objectStorageApi,
+  type ObjectStorageDetail,
+  type ObjectStorageObject,
+  type ObjectStorageUsage,
+} from '@/lib/object-storage'
+
+type TableRow =
+  | { rowKey: string; kind: 'folder'; key: string }
+  | ({ rowKey: string; kind: 'object' } & ObjectStorageObject)
+
+const bulkConcurrency = 8
+
+const columns = [
+  { title: 'Object Key 名称', key: 'key', width: 480 },
+  { title: '大小', key: 'size', width: 120 },
+  { title: 'Content-Type / 存储类', key: 'type', width: 200 },
+  { title: '更新时间', key: 'last_modified', width: 180 },
+  { title: '操作', key: 'actions', width: 160, align: 'right' as const },
+]
+
+const currentPrefix = ref('')
+const nextToken = ref('')
+const rows = ref<ObjectStorageObject[]>([])
+const folderRows = ref<string[]>([])
+const loading = ref(false)
+const loadingMore = ref(false)
+const detailOpen = ref(false)
+const detailLoading = ref(false)
+const detail = ref<ObjectStorageDetail | null>(null)
+const detailPreviewURL = computed(() => detail.value?.preview_url || detail.value?.public_url || '')
+const storageUsage = ref<ObjectStorageUsage | null>(null)
+const downloadingKey = ref('')
+const deletingFolderKey = ref('')
+
+const filter = reactive({
+  prefix: '',
+  keyword: '',
+  recursive: false,
+})
+
+// Geek Path Editing State
+const pathEditing = ref(false)
+const tempPrefix = ref('')
+const pathInputRef = ref<any>(null)
+
+// Breadcrumbs logic
+const breadcrumbs = computed(() => {
+  if (!currentPrefix.value) return []
+  const parts = currentPrefix.value.split('/').filter(Boolean)
+  let accumulated = ''
+  return parts.map((part) => {
+    accumulated += part + '/'
+    return {
+      name: part,
+      path: accumulated,
+    }
+  })
+})
+
+function startEditPath() {
+  tempPrefix.value = currentPrefix.value
+  pathEditing.value = true
+  nextTick(() => {
+    pathInputRef.value?.focus()
+  })
+}
+
+function saveEditedPath() {
+  currentPrefix.value = normalizePrefix(tempPrefix.value)
+  filter.prefix = currentPrefix.value
+  pathEditing.value = false
+  resetAndReload()
+}
+
+function cancelEditedPath() {
+  pathEditing.value = false
+}
+
+function jumpToPath(path: string) {
+  currentPrefix.value = path
+  filter.prefix = path
+  resetAndReload()
+}
+
+// Row selection & Batch operations
+const selectedRowKeys = ref<string[]>([])
+const selectedRows = ref<TableRow[]>([])
+const selectedObjectCount = computed(() => selectedRows.value.filter((row) => row.kind === 'object').length)
+const selectedFolderCount = computed(() => selectedRows.value.filter((row) => row.kind === 'folder').length)
+const batchDeleteDescription = computed(() => {
+  if (selectedFolderCount.value > 0) {
+    return '选中的目录会按前缀递归删除其下所有文件和空目录占位对象，删除后无法恢复。'
+  }
+  return '选中的对象会从存储桶中永久删除，删除后无法恢复。'
+})
+
+const rowSelection = computed(() => ({
+  selectedRowKeys: selectedRowKeys.value,
+  onChange: (keys: string[], rowsList: TableRow[]) => {
+    selectedRowKeys.value = keys
+    selectedRows.value = rowsList
+  },
+  getCheckboxProps: (record: TableRow) => ({
+    name: record.rowKey,
+  }),
+}))
+
+type BulkResult<T, R> = { key: T; ok: true; value: R } | { key: T; ok: false; error: unknown }
+
+async function mapWithConcurrency<T, R>(
+  items: T[],
+  concurrency: number,
+  worker: (item: T) => Promise<R>,
+): Promise<BulkResult<T, R>[]> {
+  const results = new Array<BulkResult<T, R>>(items.length)
+  let cursor = 0
+  const workerCount = Math.min(Math.max(1, concurrency), items.length)
+  await Promise.all(
+    Array.from({ length: workerCount }, async () => {
+      while (cursor < items.length) {
+        const index = cursor++
+        const item = items[index]
+        try {
+          results[index] = { key: item, ok: true, value: await worker(item) }
+        } catch (error) {
+          results[index] = { key: item, ok: false, error }
+        }
+      }
+    }),
+  )
+  return results
+}
+
+function formatKeyList(keys: string[]): string {
+  const visible = keys.slice(0, 3).map((key) => fileName(key)).join('、')
+  return keys.length > 3 ? `${visible} 等 ${keys.length} 个` : visible
+}
+
+function splitBulkResults<T, R>(results: BulkResult<T, R>[]): { values: R[]; failures: T[] } {
+  const values: R[] = []
+  const failures: T[] = []
+  for (const item of results) {
+    if (item.ok) {
+      values.push(item.value)
+    } else {
+      failures.push(item.key)
+    }
+  }
+  return { values, failures }
+}
+
+function clearSelection() {
+  selectedRowKeys.value = []
+  selectedRows.value = []
+}
+
+async function copyCurrentPath() {
+  try {
+    await navigator.clipboard.writeText(currentPrefix.value)
+    message.success('已复制当前路径到剪贴板')
+  } catch (err) {
+    message.error('路径复制失败')
+  }
+}
+
+async function copyText(text: string) {
+  try {
+    await navigator.clipboard.writeText(text)
+    message.success('复制成功')
+  } catch (err) {
+    message.error('复制失败')
+  }
+}
+
+// Bulk Actions Implementation
+async function bulkCopyURLs() {
+  const keys = selectedRows.value
+    .filter((row) => row.kind === 'object')
+    .map((row) => row.key)
+  
+  if (keys.length === 0) return
+  
+  try {
+    const results = await mapWithConcurrency(keys, bulkConcurrency, async (key) => {
+      const result = await objectStorageApi.resolveDownloadURL(key)
+      return result.url
+    })
+    const { values: urls, failures } = splitBulkResults(results)
+    if (urls.length === 0) {
+      message.error(`访问地址生成失败：${formatKeyList(failures)}`)
+      return
+    }
+    await navigator.clipboard.writeText(urls.join('\n'))
+    if (failures.length > 0) {
+      message.warning(`已复制 ${urls.length} 个访问地址，失败 ${failures.length} 个：${formatKeyList(failures)}`)
+    } else {
+      message.success(`已复制全部 ${urls.length} 个对象的访问地址到剪贴板`)
+    }
+    clearSelection()
+  } catch (error) {
+    showOpsError(error)
+  }
+}
+
+async function bulkDownload() {
+  const keys = selectedRows.value
+    .filter((row) => row.kind === 'object')
+    .map((row) => row.key)
+  
+  if (keys.length === 0) return
+  message.info(`正在交给浏览器下载 ${keys.length} 个文件...`)
+  
+  let successCount = 0
+  const failures: string[] = []
+  try {
+    const urls = await mapWithConcurrency(keys, bulkConcurrency, async (key) => {
+      const result = await objectStorageApi.resolveDownloadURL(key)
+      return result.url
+    })
+    for (const item of urls) {
+      if (!item.ok) {
+        failures.push(item.key)
+        continue
+      }
+      try {
+        triggerBrowserDownloadURL(item.value, item.key)
+        successCount++
+        await new Promise((resolve) => window.setTimeout(resolve, 300))
+      } catch (error) {
+        failures.push(item.key)
+      }
+    }
+    
+    if (failures.length > 0) {
+      message.warning(`批量下载已提交 ${successCount} 个，失败 ${failures.length} 个：${formatKeyList(failures)}`)
+    } else {
+      message.success('批量下载任务已就绪')
+    }
+    clearSelection()
+  } catch (error) {
+    showOpsError(error)
+  }
+}
+
+async function bulkDelete() {
+  if (deletingBatch.value) return
+  const folderPrefixes = selectedRows.value
+    .filter((row) => row.kind === 'folder')
+    .map((row) => row.key)
+  const objectKeys = selectedRows.value
+    .filter((row) => row.kind === 'object')
+    .map((row) => row.key)
+    .filter((key) => !folderPrefixes.some((prefix) => key.startsWith(prefix)))
+  
+  if (folderPrefixes.length === 0 && objectKeys.length === 0) return
+  
+  let shouldReload = false
+  try {
+    loading.value = true
+    deletingBatch.value = true
+    const deleteTasks = [
+      ...folderPrefixes.map((key) => ({
+        key,
+        run: async () => {
+          await objectStorageApi.deleteFolder(key)
+        },
+      })),
+      ...objectKeys.map((key) => ({
+        key,
+        run: async () => {
+          await objectStorageApi.delete(key)
+        },
+      })),
+    ]
+    const results = await mapWithConcurrency(deleteTasks, bulkConcurrency, (item) => item.run())
+    const { values, failures: failedTasks } = splitBulkResults(results)
+    const successCount = values.length
+    const failures = failedTasks.map((item) => item.key)
+    
+    if (failures.length === 0) {
+      message.success(`成功删除选中的全部 ${successCount} 项`)
+    } else {
+      message.warning(`批量删除完毕：成功 ${successCount} 个，失败 ${failures.length} 个：${formatKeyList(failures)}`)
+    }
+    shouldReload = successCount > 0
+    closeBatchDelete()
+    clearSelection()
+  } finally {
+    loading.value = false
+    deletingBatch.value = false
+    if (shouldReload) resetAndReload()
+  }
+}
+
+function confirmDelete(key: string) {
+  Modal.confirm({
+    title: '确认删除该对象吗？',
+    content: `对象路径: ${key}\n删除后将从存储桶中永久移除，此操作不可恢复！`,
+    okText: '确认删除',
+    okType: 'danger',
+    cancelText: '取消',
+    onOk() {
+      return deleteObject(key)
+    },
+  })
+}
+
+function confirmBulkDelete() {
+  const count = selectedRowKeys.value.length
+  if (count === 0) return
+  batchDeleteOpen.value = true
+}
+
+function closeBatchDelete() {
+  batchDeleteOpen.value = false
+}
+
+// Create Virtual Folder
+const createFolderOpen = ref(false)
+const creatingFolder = ref(false)
+const newFolderName = ref('')
+const deleteFolderOpen = ref(false)
+const deletingFolder = ref(false)
+const pendingDeleteFolder = ref('')
+const batchDeleteOpen = ref(false)
+const deletingBatch = ref(false)
+
+function openCreateFolder() {
+  newFolderName.value = ''
+  createFolderOpen.value = true
+}
+
+function closeCreateFolder() {
+  createFolderOpen.value = false
+}
+
+async function submitCreateFolder() {
+  const name = newFolderName.value.trim().replace(/^\/+|\/+$/g, '')
+  if (!name) {
+    message.warning('请输入有效的文件夹名称')
+    return
+  }
+  if (name.includes('/')) {
+    message.warning('文件夹名称不能包含层级斜杠 /')
+    return
+  }
+  
+  const newPath = currentPrefix.value ? `${currentPrefix.value}${name}/` : `${name}/`
+  creatingFolder.value = true
+  try {
+    await objectStorageApi.createFolder(newPath)
+    message.success(`文件夹 ${name} 已创建`)
+    createFolderOpen.value = false
+    resetAndReload()
+  } catch (error) {
+    showOpsError(error)
+  } finally {
+    creatingFolder.value = false
+  }
+}
+
+function confirmDeleteFolder(prefix: string) {
+  pendingDeleteFolder.value = prefix
+  deleteFolderOpen.value = true
+}
+
+function closeDeleteFolder() {
+  deleteFolderOpen.value = false
+  pendingDeleteFolder.value = ''
+}
+
+async function submitDeleteFolder() {
+  if (!pendingDeleteFolder.value) {
+    message.warning('请选择要删除的目录')
+    return
+  }
+  deletingFolder.value = true
+  deletingFolderKey.value = pendingDeleteFolder.value
+  try {
+    const result = await objectStorageApi.deleteFolder(pendingDeleteFolder.value)
+    message.success(`目录已删除，共删除 ${result.deleted_count} 个对象`)
+    closeDeleteFolder()
+    resetAndReload()
+  } catch (error) {
+    showOpsError(error)
+  } finally {
+    deletingFolder.value = false
+    deletingFolderKey.value = ''
+  }
+}
+
+// Custom file icons getter
+function getFileIconType(key: string): 'zip' | 'image' | 'pdf' | 'doc' | 'excel' | 'word' | 'file' {
+  const ext = key.split('.').pop()?.toLowerCase() || ''
+  if (['zip', 'rar', 'tar', 'gz', '7z'].includes(ext)) return 'zip'
+  if (['png', 'jpg', 'jpeg', 'gif', 'svg', 'webp', 'bmp', 'ico'].includes(ext)) return 'image'
+  if (['pdf'].includes(ext)) return 'pdf'
+  if (['txt', 'md', 'html', 'css', 'js', 'ts', 'vue', 'json', 'yaml', 'xml'].includes(ext)) return 'doc'
+  if (['xls', 'xlsx', 'csv'].includes(ext)) return 'excel'
+  if (['doc', 'docx'].includes(ext)) return 'word'
+  return 'file'
+}
+
+function isImageFile(key: string): boolean {
+  return getFileIconType(key) === 'image'
+}
+
+function getTagColor(typeStr: string | null | undefined): string {
+  if (!typeStr) return 'default'
+  const lower = typeStr.toLowerCase()
+  if (lower.includes('image')) return 'green'
+  if (lower.includes('zip') || lower.includes('compressed')) return 'purple'
+  if (lower.includes('pdf')) return 'red'
+  if (lower.includes('json') || lower.includes('javascript') || lower.includes('text')) return 'blue'
+  if (lower.includes('standard')) return 'geekblue'
+  return 'default'
+}
+
+const tableRows = computed<TableRow[]>(() => [
+  ...folderRows.value.map((key) => ({ rowKey: `folder:${key}`, kind: 'folder' as const, key })),
+  ...rows.value.map((row) => ({ ...row, rowKey: `object:${row.key}`, kind: 'object' as const })),
+])
+
+let keywordTimer: number | null = null
+
+function onKeywordChange() {
+  if (keywordTimer) window.clearTimeout(keywordTimer)
+  keywordTimer = window.setTimeout(() => resetAndReload(), 300)
+}
+
+function goPrefix() {
+  currentPrefix.value = normalizePrefix(filter.prefix)
+  filter.prefix = currentPrefix.value
+  resetAndReload()
+}
+
+function enterFolder(prefix: string) {
+  currentPrefix.value = prefix
+  filter.prefix = prefix
+  filter.keyword = ''
+  clearSelection()
+  resetAndReload()
+}
+
+function goUp() {
+  const trimmed = currentPrefix.value.replace(/\/$/, '')
+  const index = trimmed.lastIndexOf('/')
+  currentPrefix.value = index >= 0 ? `${trimmed.slice(0, index)}/` : ''
+  filter.prefix = currentPrefix.value
+  clearSelection()
+  resetAndReload()
+}
+
+function resetAndReload() {
+  nextToken.value = ''
+  clearSelection()
+  void reload()
+}
+
+async function reload() {
+  loading.value = true
+  try {
+    const result = await objectStorageApi.list({
+      prefix: currentPrefix.value,
+      keyword: filter.keyword || undefined,
+      recursive: filter.recursive,
+      size: 100,
+    })
+    rows.value = result.objects
+    folderRows.value = result.common_prefixes
+    nextToken.value = result.next_continuation_token ?? ''
+  } catch (error) {
+    showOpsError(error)
+  } finally {
+    loading.value = false
+  }
+}
+
+async function loadUsage() {
+  try {
+    const result = await objectStorageApi.usage()
+    storageUsage.value = result.available ? result : null
+  } catch (error) {
+    storageUsage.value = null
+  }
+}
+
+async function loadMore() {
+  if (!nextToken.value) return
+  loadingMore.value = true
+  try {
+    const result = await objectStorageApi.list({
+      prefix: currentPrefix.value,
+      keyword: filter.keyword || undefined,
+      recursive: filter.recursive,
+      continuation_token: nextToken.value,
+      size: 100,
+    })
+    rows.value = [...rows.value, ...result.objects]
+    folderRows.value = [...folderRows.value, ...result.common_prefixes]
+    nextToken.value = result.next_continuation_token ?? ''
+  } catch (error) {
+    showOpsError(error)
+  } finally {
+    loadingMore.value = false
+  }
+}
+
+const uploadOpen = ref(false)
+const uploading = ref(false)
+const uploadForm = reactive({
+  key: '',
+  content_type: '',
+  overwrite: false,
+  file: null as File | null,
+})
+
+function openUpload() {
+  uploadForm.key = currentPrefix.value
+  uploadForm.content_type = ''
+  uploadForm.overwrite = false
+  uploadForm.file = null
+  uploadOpen.value = true
+}
+
+function closeUpload() {
+  uploadOpen.value = false
+}
+
+function beforeUpload(file: File) {
+  uploadForm.file = file
+  if (!uploadForm.key || uploadForm.key.endsWith('/')) {
+    uploadForm.key = `${uploadForm.key || currentPrefix.value}${file.name}`
+  }
+  return false
+}
+
+async function submitUpload() {
+  if (!uploadForm.file) {
+    message.warning('请选择或拖入要上传的文件')
+    return
+  }
+  if (!uploadForm.key.trim()) {
+    message.warning('请输入 Object Key')
+    return
+  }
+  uploading.value = true
+  try {
+    await objectStorageApi.upload(uploadForm.file, {
+      key: uploadForm.key.trim(),
+      overwrite: uploadForm.overwrite,
+      content_type: uploadForm.content_type.trim() || undefined,
+    })
+    message.success('文件对象上传成功！')
+    uploadOpen.value = false
+    resetAndReload()
+  } catch (error) {
+    showOpsError(error)
+  } finally {
+    uploading.value = false
+  }
+}
+
+const moveOpen = ref(false)
+const moving = ref(false)
+const moveForm = reactive({
+  source_key: '',
+  destination_key: '',
+  overwrite: false,
+})
+
+function openMove(row: ObjectStorageObject) {
+  moveForm.source_key = row.key
+  moveForm.destination_key = row.key
+  moveForm.overwrite = false
+  moveOpen.value = true
+}
+
+function closeMove() {
+  moveOpen.value = false
+}
+
+async function submitMove() {
+  if (!moveForm.destination_key.trim()) {
+    message.warning('请输入目标 Object Key')
+    return
+  }
+  moving.value = true
+  try {
+    await objectStorageApi.move({
+      source_key: moveForm.source_key,
+      destination_key: moveForm.destination_key.trim(),
+      overwrite: moveForm.overwrite,
+      delete_source: true,
+    })
+    message.success('文件重命名/移动成功')
+    moveOpen.value = false
+    resetAndReload()
+  } catch (error) {
+    showOpsError(error)
+  } finally {
+    moving.value = false
+  }
+}
+
+async function copyURL(key: string) {
+  try {
+    const result = await objectStorageApi.resolveDownloadURL(key)
+    await navigator.clipboard.writeText(result.url)
+    message.success('访问地址已成功复制到剪贴板')
+  } catch (error) {
+    showOpsError(error)
+  }
+}
+
+async function openDetail(key: string) {
+  detailOpen.value = true
+  detailLoading.value = true
+  detail.value = null
+  try {
+    detail.value = await objectStorageApi.detail(key)
+  } catch (error) {
+    showOpsError(error)
+  } finally {
+    detailLoading.value = false
+  }
+}
+
+async function downloadObject(key: string) {
+  downloadingKey.value = key
+  try {
+    await triggerBrowserDownload(key)
+  } catch (error) {
+    showOpsError(error)
+  } finally {
+    downloadingKey.value = ''
+  }
+}
+
+async function triggerBrowserDownload(key: string) {
+  const result = await objectStorageApi.resolveDownloadURL(key)
+  triggerBrowserDownloadURL(result.url, key)
+}
+
+function triggerBrowserDownloadURL(url: string, key: string) {
+  const anchor = document.createElement('a')
+  anchor.href = url
+  anchor.download = fileName(key)
+  anchor.rel = 'noopener'
+  document.body.appendChild(anchor)
+  anchor.click()
+  anchor.remove()
+}
+
+async function deleteObject(key: string) {
+  try {
+    await objectStorageApi.delete(key)
+    message.success('已成功删除对象')
+    resetAndReload()
+  } catch (error) {
+    showOpsError(error)
+  }
+}
+
+function normalizePrefix(value: string): string {
+  const trimmed = value.trim().replace(/^\/+/, '')
+  return trimmed && !trimmed.endsWith('/') ? `${trimmed}/` : trimmed
+}
+
+// Extract folder name from prefix path
+function folderName(key: string): string {
+  const trimmed = key.replace(/\/$/, '')
+  return trimmed.split('/').pop() || key
+}
+
+function fileName(key: string): string {
+  return key.split('/').pop() || key
+}
+
+function formatDate(value: string | null | undefined): string {
+  return value ? dayjs(value).format('YYYY-MM-DD HH:mm:ss') : '—'
+}
+
+function optionalText(value: string | null | undefined): string {
+  return value?.trim() || '—'
+}
+
+function formatBytes(value: number | null | undefined): string {
+  if (!value) return '0 B'
+  const units = ['B', 'KB', 'MB', 'GB', 'TB']
+  let size = Math.abs(value)
+  let unitIndex = 0
+  while (size >= 1024 && unitIndex < units.length - 1) {
+    size /= 1024
+    unitIndex++
+  }
+  const sign = value < 0 ? '-' : ''
+  if (unitIndex === 0) return `${sign}${Math.round(size)} ${units[unitIndex]}`
+  return `${sign}${size.toFixed(size >= 100 ? 0 : 1)} ${units[unitIndex]}`
+}
+
+onMounted(() => {
+  void reload()
+  void loadUsage()
+})
+</script>
+
+<style scoped>
+/* Page Layout */
+.oss-page {
+  display: flex;
+  flex-direction: column;
+  gap: 16px;
+  max-width: 100%;
+}
+
+/* Header Section */
+.oss-header-section {
+  display: flex;
+  flex-direction: column;
+  gap: 16px;
+  background: #ffffff;
+  border-radius: 12px;
+  padding: 20px 24px;
+  border: 1px solid #f1f5f9;
+  box-shadow: 0 1px 3px rgba(15, 23, 42, 0.04);
+}
+
+.header-title-area {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+}
+
+.title-with-badge {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.oss-title.ops-page-title {
+  margin: 0;
+  font-size: 20px;
+  font-weight: 700;
+  color: #0f172a;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.title-icon {
+  color: #1677ff;
+  font-size: 20px;
+}
+
+.oss-env-badge {
+  background: linear-gradient(135deg, #1677ff 0%, #3b82f6 100%);
+  color: #ffffff;
+  font-size: 10px;
+  font-weight: 700;
+  padding: 2px 6px;
+  border-radius: 4px;
+  text-transform: uppercase;
+  letter-spacing: 0.5px;
+}
+
+.oss-subtitle-desc {
+  color: #64748b;
+  font-size: 13px;
+  margin: 0;
+}
+
+/* Dashboard Metrics Grid */
+.oss-metrics-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(240px, 1fr));
+  gap: 16px;
+  width: 100%;
+}
+
+.metric-card {
+  display: flex;
+  align-items: center;
+  gap: 16px;
+  background: #ffffff;
+  border: 1px solid #e2e8f0;
+  border-radius: 8px;
+  padding: 16px;
+  transition: all 0.3s cubic-bezier(0.4, 0, 0.2, 1);
+  box-shadow: 0 1px 2px rgba(15, 23, 42, 0.02);
+}
+
+.metric-card:hover {
+  transform: translateY(-2px);
+  box-shadow: 0 10px 15px -3px rgba(15, 23, 42, 0.08);
+  border-color: #cbd5e1;
+}
+
+.metric-icon {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  width: 48px;
+  height: 48px;
+  border-radius: 8px;
+  font-size: 20px;
+}
+
+.path-icon-bg {
+  background: rgba(22, 119, 255, 0.08);
+  color: #1677ff;
+}
+
+.folder-icon-bg {
+  background: rgba(217, 119, 6, 0.08);
+  color: #d97706;
+}
+
+.object-icon-bg {
+  background: rgba(5, 150, 105, 0.08);
+  color: #059669;
+}
+
+.usage-icon-bg {
+  background: rgba(124, 58, 237, 0.08);
+  color: #7c3aed;
+}
+
+.metric-content {
+  flex: 1;
+  min-width: 0;
+}
+
+.metric-label {
+  font-size: 12px;
+  color: #64748b;
+  margin-bottom: 4px;
+}
+
+.metric-value {
+  font-size: 18px;
+  font-weight: 700;
+  color: #0f172a;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.metric-subvalue {
+  color: #64748b;
+  font-size: 11px;
+  margin-top: 2px;
+}
+
+.metric-unit {
+  font-size: 12px;
+  font-weight: normal;
+  color: #94a3b8;
+  margin-left: 2px;
+}
+
+.path-value {
+  font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+  font-size: 13px;
+  font-weight: 600;
+  color: #334155;
+}
+
+/* Breadcrumbs Bar */
+.oss-breadcrumb-bar {
+  background: #ffffff;
+  border-radius: 8px;
+  padding: 10px 16px;
+  border: 1px solid #f1f5f9;
+  display: flex;
+  align-items: center;
+  min-height: 44px;
+  box-shadow: 0 1px 3px rgba(15, 23, 42, 0.02);
+}
+
+.breadcrumb-container {
+  display: flex;
+  align-items: center;
+  flex-wrap: wrap;
+  width: 100%;
+}
+
+.breadcrumb-home {
+  font-weight: 600;
+  color: #475569;
+  padding: 0 6px !important;
+  height: 24px;
+  display: inline-flex;
+  align-items: center;
+}
+
+.breadcrumb-home:hover {
+  color: #1677ff;
+  background: #f1f5f9 !important;
+}
+
+.breadcrumb-separator {
+  color: #94a3b8;
+  font-size: 10px;
+  margin: 0 4px;
+  display: inline-flex;
+  align-items: center;
+}
+
+.breadcrumb-item {
+  color: #64748b;
+  padding: 0 6px !important;
+  height: 24px;
+  font-weight: 500;
+  display: inline-flex;
+  align-items: center;
+}
+
+.breadcrumb-item:hover {
+  color: #1677ff;
+  background: #f1f5f9 !important;
+}
+
+.path-actions {
+  display: inline-flex;
+  align-items: center;
+  gap: 2px;
+  margin-left: auto;
+  border-left: 1px solid #e2e8f0;
+  padding-left: 8px;
+}
+
+.path-action-btn {
+  color: #64748b;
+  width: 24px;
+  height: 24px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+}
+
+.path-action-btn:hover {
+  color: #1677ff;
+  background: #f1f5f9 !important;
+}
+
+/* Breadcrumb Edit Mode */
+.breadcrumb-edit-container {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  width: 100%;
+}
+
+.edit-prefix-label {
+  font-size: 12px;
+  color: #64748b;
+  font-weight: 600;
+  white-space: nowrap;
+}
+
+.path-edit-input {
+  flex: 1;
+  max-width: 600px;
+  font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+}
+
+.path-slash-prefix {
+  color: #94a3b8;
+  font-weight: 600;
+  font-size: 13px;
+}
+
+.path-save-btn,
+.path-cancel-btn {
+  height: 24px;
+  padding: 0 10px;
+  font-size: 12px;
+}
+
+/* Card layout wrapper */
+.oss-card {
+  padding: 24px;
+}
+
+/* Toolbar adjustments */
+.oss-toolbar {
+  margin-bottom: 20px;
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  width: 100%;
+}
+
+.toolbar-left {
+  display: flex;
+  align-items: center;
+  gap: 16px;
+  flex: 1;
+}
+
+.oss-search {
+  width: 320px;
+}
+
+.search-icon {
+  color: #94a3b8;
+}
+
+.oss-recursive-checkbox {
+  color: #475569;
+  font-size: 13px;
+}
+
+.toolbar-right {
+  display: flex;
+  align-items: center;
+}
+
+.toolbar-secondary-btn {
+  color: #475569;
+}
+
+.toolbar-secondary-btn:hover {
+  color: #1677ff;
+  border-color: #1677ff;
+}
+
+.upload-primary-btn {
+  background: linear-gradient(135deg, #1677ff 0%, #2563eb 100%);
+  border: none;
+  font-weight: 600;
+  box-shadow: 0 4px 6px -1px rgba(37, 99, 235, 0.2);
+}
+
+.upload-primary-btn:hover {
+  background: linear-gradient(135deg, #2563eb 0%, #1d4ed8 100%);
+  box-shadow: 0 6px 8px -1px rgba(37, 99, 235, 0.3);
+}
+
+/* Floating Batch Action Panel (Slides down elegantly) */
+.batch-ops-panel {
+  position: fixed;
+  bottom: 24px;
+  left: 50%;
+  transform: translateX(-50%) translateY(100px);
+  z-index: 1000;
+  display: flex;
+  align-items: center;
+  background: rgba(15, 23, 42, 0.95);
+  backdrop-filter: blur(8px);
+  border: 1px solid rgba(255, 255, 255, 0.15);
+  border-radius: 100px;
+  padding: 10px 24px;
+  box-shadow: 
+    0 20px 25px -5px rgba(0, 0, 0, 0.3),
+    0 8px 10px -6px rgba(0, 0, 0, 0.3),
+    inset 0 1px 0 rgba(255, 255, 255, 0.1);
+  opacity: 0;
+  pointer-events: none;
+  transition: all 0.3s cubic-bezier(0.34, 1.56, 0.64, 1);
+}
+
+.batch-ops-panel.show {
+  transform: translateX(-50%) translateY(0);
+  opacity: 1;
+  pointer-events: auto;
+}
+
+.batch-info {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.selected-badge {
+  background: #1677ff;
+  color: #ffffff;
+  font-size: 11px;
+  font-weight: 750;
+  padding: 2px 8px;
+  border-radius: 10px;
+  min-width: 20px;
+  text-align: center;
+  box-shadow: 0 0 10px rgba(22, 119, 255, 0.5);
+}
+
+.selected-text {
+  font-size: 13px;
+  color: #f8fafc;
+  font-weight: 600;
+}
+
+.batch-divider {
+  width: 1px;
+  height: 16px;
+  background: rgba(255, 255, 255, 0.2);
+  margin: 0 16px;
+}
+
+.batch-buttons {
+  display: flex;
+  align-items: center;
+}
+
+.batch-action-btn-styled {
+  color: #cbd5e1;
+  font-size: 12px;
+  font-weight: 600;
+  padding: 0 10px !important;
+  height: 28px;
+  border-radius: 9999px;
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+}
+
+.batch-action-btn-styled:hover {
+  background: rgba(255, 255, 255, 0.08) !important;
+  color: #ffffff;
+}
+
+.batch-delete-btn {
+  color: #f87171;
+}
+
+.batch-delete-btn:hover {
+  background: rgba(239, 68, 68, 0.15) !important;
+  color: #fca5a5;
+}
+
+.batch-cancel-link {
+  color: #94a3b8;
+  font-size: 12px;
+  font-weight: 500;
+  padding: 0 8px !important;
+}
+
+.batch-cancel-link:hover {
+  color: #cbd5e1;
+}
+
+/* Custom Object Storage Table layout */
+.oss-table :deep(.ant-table-row) {
+  transition: all 0.2s ease;
+}
+
+.oss-table :deep(.ant-table-row:hover) {
+  background-color: #f8fafc !important;
+}
+
+/* Custom cell structure */
+.key-button.folder-entry-btn {
+  display: inline-flex;
+  align-items: center;
+  max-width: 100%;
+  border: 0;
+  background: transparent;
+  color: #d97706;
+  cursor: pointer;
+  font: inherit;
+  gap: 12px;
+  padding: 0;
+  transition: color 0.2s ease;
+}
+
+.key-button.folder-entry-btn:hover {
+  color: #b45309;
+}
+
+.folder-name-text {
+  font-weight: 600;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.object-key-cell {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  min-width: 0;
+}
+
+.icon-wrapper {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  width: 32px;
+  height: 32px;
+  border-radius: 6px;
+  font-size: 16px;
+  flex-shrink: 0;
+}
+
+/* Colorful Icon badging for specific file classes */
+.folder-icon {
+  background-color: rgba(245, 158, 11, 0.08);
+  color: #d97706;
+}
+
+.file-icon-zip {
+  background-color: rgba(139, 92, 246, 0.08);
+  color: #8b5cf6;
+}
+
+.file-icon-image {
+  background-color: rgba(16, 185, 129, 0.08);
+  color: #10b981;
+}
+
+.file-icon-pdf {
+  background-color: rgba(239, 68, 68, 0.08);
+  color: #ef4444;
+}
+
+.file-icon-doc {
+  background-color: rgba(59, 130, 246, 0.08);
+  color: #3b82f6;
+}
+
+.file-icon-excel {
+  background-color: rgba(5, 150, 105, 0.08);
+  color: #059669;
+}
+
+.file-icon-word {
+  background-color: rgba(29, 78, 216, 0.08);
+  color: #1d4ed8;
+}
+
+.file-icon-file {
+  background-color: rgba(100, 116, 139, 0.08);
+  color: #64748b;
+}
+
+.file-name-info {
+  display: flex;
+  flex-direction: column;
+  min-width: 0;
+}
+
+.file-name-title {
+  color: #0f172a;
+  font-weight: 600;
+  font-size: 13px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.file-full-key {
+  color: #94a3b8;
+  font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+  font-size: 11px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  margin-top: 1px;
+}
+
+/* Other columns styling */
+.table-dash-value {
+  color: #cbd5e1;
+}
+
+.file-size-value {
+  color: #475569;
+  font-weight: 500;
+}
+
+.folder-type-tag {
+  color: #d97706;
+  font-weight: 600;
+  font-size: 12px;
+}
+
+.oss-type-tag {
+  border-radius: 4px;
+  font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+  font-size: 11px;
+}
+
+.date-modified-value {
+  color: #64748b;
+}
+
+.folder-action-placeholder {
+  color: #cbd5e1;
+  padding-right: 24px;
+}
+
+/* Refined row action buttons */
+.action-btn-primary {
+  color: #64748b !important;
+}
+
+.action-btn-primary:hover {
+  color: #1677ff !important;
+  background-color: #e6f4ff !important;
+}
+
+.action-btn-more {
+  color: #64748b !important;
+}
+
+.action-btn-more:hover {
+  color: #0f172a !important;
+  background-color: #f1f5f9 !important;
+}
+
+/* Action Dropdown Menu customization */
+.danger-action-label {
+  color: #ff4d4f;
+  display: flex;
+  align-items: center;
+  font-weight: 500;
+}
+
+.danger-icon {
+  margin-right: 8px;
+}
+
+/* Custom Empty State Illustration */
+.oss-empty-state {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  padding: 60px 20px;
+  text-align: center;
+  background: #ffffff;
+}
+
+.empty-illustration {
+  font-size: 56px;
+  color: #cbd5e1;
+  margin-bottom: 16px;
+  animation: float-anim 3s ease-in-out infinite;
+}
+
+@keyframes float-anim {
+  0%, 100% {
+    transform: translateY(0);
+  }
+  50% {
+    transform: translateY(-8px);
+  }
+}
+
+.empty-title {
+  color: #1e293b;
+  font-size: 16px;
+  font-weight: 600;
+  margin: 0 0 8px;
+}
+
+.empty-desc {
+  color: #64748b;
+  font-size: 13px;
+  margin: 0 0 20px;
+  max-width: 320px;
+}
+
+.empty-actions {
+  display: flex;
+  gap: 12px;
+}
+
+.empty-btn-secondary {
+  color: #475569;
+}
+
+.empty-btn-primary {
+  font-weight: 600;
+}
+
+.load-more-row {
+  display: flex;
+  justify-content: center;
+  padding-top: 24px;
+}
+
+.load-more-btn {
+  border-radius: 6px;
+  font-weight: 500;
+}
+
+/* Object details drawer layout */
+.detail-drawer-content {
+  display: flex;
+  flex-direction: column;
+  gap: 20px;
+}
+
+.image-preview-section {
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+}
+
+.preview-label {
+  font-weight: 600;
+  font-size: 13px;
+  color: #334155;
+}
+
+.preview-box {
+  border: 1px dashed #cbd5e1;
+  border-radius: 8px;
+  padding: 8px;
+  background: #f8fafc;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  max-height: 240px;
+  overflow: hidden;
+}
+
+.preview-img {
+  max-width: 100%;
+  max-height: 220px;
+  object-fit: contain;
+  border-radius: 4px;
+}
+
+.detail-key-text {
+  font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+  font-size: 12px;
+  color: #1e293b;
+  word-break: break-all;
+}
+
+.copy-inline-btn {
+  padding: 0;
+  height: auto;
+  font-size: 12px;
+  margin-left: 8px;
+}
+
+.mono-tag {
+  font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+  font-size: 11px;
+}
+
+.mono-text {
+  font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+  font-size: 11px;
+  color: #64748b;
+}
+
+.url-detail-block {
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  align-items: flex-start;
+}
+
+.detail-url-link {
+  font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+  font-size: 11px;
+  word-break: break-all;
+  color: #1677ff;
+}
+
+.copy-url-btn {
+  height: 24px;
+  font-size: 11px;
+  padding: 0 10px;
+}
+
+/* Upload Drawer Improvements */
+.oss-drag-uploader {
+  display: block;
+  background: #fafafa;
+}
+
+.oss-drag-uploader :deep(.ant-upload-drag) {
+  border: 2px dashed #d9d9d9;
+  border-radius: 8px;
+  background: #fafafa;
+  transition: border-color 0.2s ease;
+}
+
+.oss-drag-uploader :deep(.ant-upload-drag:hover) {
+  border-color: #1677ff;
+}
+
+.upload-drag-icon-img {
+  color: #4096ff;
+  font-size: 40px;
+}
+
+.file-picked-card {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  border: 1px solid #e2e8f0;
+  border-radius: 8px;
+  padding: 10px 16px;
+  margin-top: 12px;
+  background: #f8fafc;
+}
+
+.file-picked-icon-wrapper {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  width: 36px;
+  height: 36px;
+  border-radius: 6px;
+  font-size: 18px;
+  flex-shrink: 0;
+}
+
+.file-picked-info {
+  display: flex;
+  flex-direction: column;
+  min-width: 0;
+  flex: 1;
+}
+
+.file-picked-name {
+  color: #1e293b;
+  font-size: 13px;
+  font-weight: 600;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.file-picked-size {
+  color: #64748b;
+  font-size: 11px;
+}
+
+.file-picked-remove {
+  font-size: 12px;
+}
+
+.upload-advanced-collapse {
+  margin-top: 16px;
+  border: none;
+  background: transparent;
+}
+
+.upload-advanced-collapse :deep(.ant-collapse-header) {
+  padding: 0 !important;
+  color: #64748b !important;
+  font-size: 13px !important;
+  font-weight: 500 !important;
+}
+
+.checkbox-form-item {
+  margin-bottom: 8px;
+}
+
+.drawer-footer {
+  display: flex;
+  justify-content: flex-end;
+  gap: 12px;
+}
+
+.footer-btn-secondary {
+  color: #475569;
+}
+
+.footer-btn-primary {
+  font-weight: 600;
+}
+
+/* Modals monospace override */
+.mono-input {
+  font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+}
+
+/* Fade animation definitions */
+.fade-enter-active,
+.fade-leave-active {
+  transition: opacity 0.2s ease;
+}
+
+.fade-enter-from,
+.fade-leave-to {
+  opacity: 0;
+}
+
+@media (max-width: 768px) {
+  .oss-header-section {
+    padding: 16px;
+  }
+
+  .oss-metrics-grid {
+    grid-template-columns: 1fr;
+  }
+
+  .toolbar-left {
+    flex-direction: column;
+    align-items: stretch;
+  }
+
+  .oss-search {
+    width: 100%;
+  }
+
+  .toolbar-right {
+    justify-content: flex-end;
+    width: 100%;
+  }
+}
+</style>
diff --git a/apps/ops-web/src/views/SiteDomainMappingsView.vue b/apps/ops-web/src/views/SiteDomainMappingsView.vue
index de947d8..2c6bd71 100644
--- a/apps/ops-web/src/views/SiteDomainMappingsView.vue
+++ b/apps/ops-web/src/views/SiteDomainMappingsView.vue
@@ -9,10 +9,27 @@
           <span>本页停用 {{ inactiveRows }}</span>
         </div>
       </div>
-      <a-button type="primary" @click="openCreate">
-        <template #icon><PlusOutlined /></template>
-        新增映射
-      </a-button>
+      <div class="site-domain-header-actions">
+        <a-upload
+          accept=".csv,text/csv"
+          :before-upload="beforeImportUpload"
+          :show-upload-list="false"
+          :disabled="importing"
+        >
+          <a-button :loading="importing">
+            <template #icon><UploadOutlined /></template>
+            导入
+          </a-button>
+        </a-upload>
+        <a-button :loading="exporting" @click="exportMappings">
+          <template #icon><DownloadOutlined /></template>
+          导出
+        </a-button>
+        <a-button type="primary" @click="openCreate">
+          <template #icon><PlusOutlined /></template>
+          新增映射
+        </a-button>
+      </div>
     </div>
 
     <div class="ops-card site-domain-card">
@@ -37,6 +54,10 @@
           <template #icon><ReloadOutlined /></template>
           刷新
         </a-button>
+        <a-button @click="downloadTemplate">
+          <template #icon><FileTextOutlined /></template>
+          下载模板
+        </a-button>
       </div>
 
       <a-table
@@ -133,11 +154,73 @@
         </div>
       </template>
     </a-drawer>
+
+    <a-modal
+      v-model:open="importResultOpen"
+      title="导入结果"
+      width="560px"
+      :footer="null"
+      :destroy-on-close="true"
+    >
+      <div v-if="importResult" class="import-result">
+        <div class="import-result-grid">
+          <div>
+            <span>读取</span>
+            <strong>{{ importResult.total }}</strong>
+          </div>
+          <div>
+            <span>新增</span>
+            <strong>{{ importResult.created }}</strong>
+          </div>
+          <div>
+            <span>更新</span>
+            <strong>{{ importResult.updated }}</strong>
+          </div>
+          <div>
+            <span>跳过</span>
+            <strong>{{ importResult.skipped }}</strong>
+          </div>
+          <div>
+            <span>失败</span>
+            <strong>{{ importResult.failed }}</strong>
+          </div>
+          <div>
+            <span>重复</span>
+            <strong>{{ importResult.duplicate ?? 0 }}</strong>
+          </div>
+          <div>
+            <span>未导入</span>
+            <strong>{{ importResult.skipped + importResult.failed }}</strong>
+          </div>
+        </div>
+        <a-alert
+          v-if="importResult.errors.length"
+          type="warning"
+          show-icon
+          message="以下行未导入"
+          class="import-result-alert"
+        />
+        <div v-if="importResult.errors.length" class="import-error-list">
+          <div v-for="item in importResult.errors" :key="`${item.row}-${item.message}`">
+            <span>第 {{ item.row }} 行</span>
+            <p>{{ item.message }}</p>
+          </div>
+        </div>
+      </div>
+    </a-modal>
   </div>
 </template>
 
 <script setup lang="ts">
-import { DeleteOutlined, EditOutlined, PlusOutlined, ReloadOutlined } from '@ant-design/icons-vue'
+import {
+  DeleteOutlined,
+  DownloadOutlined,
+  EditOutlined,
+  FileTextOutlined,
+  PlusOutlined,
+  ReloadOutlined,
+  UploadOutlined,
+} from '@ant-design/icons-vue'
 import type { TablePaginationConfig } from 'ant-design-vue'
 import { message } from 'ant-design-vue'
 import dayjs from 'dayjs'
@@ -163,6 +246,21 @@ interface ListResult {
   size: number
 }
 
+interface SiteDomainMappingImportError {
+  row: number
+  message: string
+}
+
+interface SiteDomainMappingImportResult {
+  total: number
+  created: number
+  updated: number
+  skipped: number
+  failed: number
+  duplicate: number
+  errors: SiteDomainMappingImportError[]
+}
+
 const filter = reactive({
   keyword: '',
   status: undefined as string | undefined,
@@ -183,10 +281,14 @@ const columns = [
 
 const rows = ref<SiteDomainMappingRow[]>([])
 const loading = ref(false)
+const importing = ref(false)
+const exporting = ref(false)
 const page = ref(1)
 const size = ref(20)
 const total = ref(0)
 const statusLoadingId = ref<number | null>(null)
+const importResultOpen = ref(false)
+const importResult = ref<SiteDomainMappingImportResult | null>(null)
 
 const activeRows = computed(() => rows.value.filter((row) => row.is_active).length)
 const inactiveRows = computed(() => rows.value.length - activeRows.value)
@@ -338,6 +440,96 @@ async function deleteMapping(row: SiteDomainMappingRow) {
   }
 }
 
+function beforeImportUpload(file: File) {
+  void importMappings(file)
+  return false
+}
+
+async function importMappings(file: File) {
+  if (!file.name.toLowerCase().endsWith('.csv')) {
+    message.warning('请选择 CSV 文件')
+    return
+  }
+  importing.value = true
+  try {
+    const formData = new FormData()
+    formData.append('file', file)
+    importResult.value = await http.post<SiteDomainMappingImportResult, FormData>(
+      '/site-domain-mappings/import',
+      formData,
+    )
+    importResultOpen.value = true
+    message.success(
+      `导入完成：新增 ${importResult.value?.created ?? 0}，更新 ${importResult.value?.updated ?? 0}`,
+    )
+    page.value = 1
+    void reload()
+  } catch (error) {
+    handleError(error)
+  } finally {
+    importing.value = false
+  }
+}
+
+async function exportMappings() {
+  exporting.value = true
+  try {
+    const response = await http.raw.get('/site-domain-mappings/export', {
+      params: {
+        keyword: filter.keyword || undefined,
+        is_active: filter.status || undefined,
+      },
+      responseType: 'blob',
+    })
+    const blob = new Blob([response.data], { type: 'text/csv;charset=utf-8' })
+    const fileName = resolveDownloadFileName(response.headers['content-disposition'])
+    downloadBlob(blob, fileName)
+    message.success('已导出 CSV')
+  } catch (error) {
+    handleError(error)
+  } finally {
+    exporting.value = false
+  }
+}
+
+function downloadTemplate() {
+  const csv = [
+    ['registrable_domain', 'site_key', 'site_name', 'is_active'],
+    ['zhihu.com', 'zhihu.com', '知乎', 'true'],
+  ]
+  downloadBlob(
+    new Blob([toCsv(csv)], { type: 'text/csv;charset=utf-8' }),
+    'site-domain-mappings-template.csv',
+  )
+}
+
+function toCsv(rowsForCsv: string[][]) {
+  return `\uFEFF${rowsForCsv.map((row) => row.map(escapeCsvCell).join(',')).join('\n')}\n`
+}
+
+function escapeCsvCell(value: string) {
+  if (/[",\n\r]/.test(value)) {
+    return `"${value.replace(/"/g, '""')}"`
+  }
+  return value
+}
+
+function resolveDownloadFileName(contentDisposition: string | undefined) {
+  const matched = contentDisposition?.match(/filename="?([^"]+)"?/i)
+  return matched?.[1] || `site-domain-mappings-${dayjs().format('YYYYMMDDHHmmss')}.csv`
+}
+
+function downloadBlob(blob: Blob, fileName: string) {
+  const url = URL.createObjectURL(blob)
+  const link = document.createElement('a')
+  link.href = url
+  link.download = fileName
+  document.body.appendChild(link)
+  link.click()
+  link.remove()
+  URL.revokeObjectURL(url)
+}
+
 function formatDate(value: string | null | undefined): string {
   return value ? dayjs(value).format('YYYY-MM-DD HH:mm:ss') : '—'
 }
@@ -384,6 +576,14 @@ onMounted(() => {
   padding: 4px 8px;
 }
 
+.site-domain-header-actions {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: center;
+  justify-content: flex-end;
+  gap: 8px;
+}
+
 .site-domain-card {
   padding-top: 20px;
 }
@@ -430,15 +630,87 @@ onMounted(() => {
   gap: 8px;
 }
 
+.import-result {
+  display: flex;
+  flex-direction: column;
+  gap: 14px;
+}
+
+.import-result-grid {
+  display: grid;
+  grid-template-columns: repeat(4, minmax(0, 1fr));
+  gap: 10px;
+}
+
+.import-result-grid div {
+  border: 1px solid #e2e8f0;
+  border-radius: 6px;
+  background: #f8fafc;
+  padding: 10px 12px;
+}
+
+.import-result-grid span {
+  display: block;
+  color: #64748b;
+  font-size: 12px;
+}
+
+.import-result-grid strong {
+  display: block;
+  margin-top: 4px;
+  color: #0f172a;
+  font-size: 20px;
+  line-height: 1.2;
+}
+
+.import-result-alert {
+  margin-top: 2px;
+}
+
+.import-error-list {
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  max-height: 240px;
+  overflow: auto;
+}
+
+.import-error-list div {
+  border: 1px solid #fee2e2;
+  border-radius: 6px;
+  background: #fff7f7;
+  padding: 8px 10px;
+}
+
+.import-error-list span {
+  color: #b91c1c;
+  font-size: 12px;
+  font-weight: 650;
+}
+
+.import-error-list p {
+  margin: 3px 0 0;
+  color: #334155;
+  font-size: 13px;
+}
+
 @media (max-width: 768px) {
   .site-domain-header {
     align-items: stretch;
     flex-direction: column;
   }
 
+  .site-domain-header-actions {
+    justify-content: flex-start;
+  }
+
   .site-domain-search,
   .site-domain-status {
     width: 100%;
   }
+
+  .import-result-grid {
+    grid-template-columns: repeat(2, minmax(0, 1fr));
+  }
 }
 </style>
diff --git a/deploy/OFFLINE_PACKAGE.md b/deploy/OFFLINE_PACKAGE.md
index 2825e51..e7cd0f0 100644
--- a/deploy/OFFLINE_PACKAGE.md
+++ b/deploy/OFFLINE_PACKAGE.md
@@ -23,7 +23,9 @@ docker compose -f docker-compose.yaml -f docker-compose.offline.yaml --env-file
 Object storage is selected from `config.yaml` / `config.yml`, with `config.local.yaml` / `config.local.yml` as an override:
 
 - `object_storage.provider: minio` or `mino` deploys MinIO and `minio-init`
-- `object_storage.provider: aliyun`, `aliyun_oss`, `aliyun-oss`, or `oss` skips MinIO and uses the Aliyun OSS config from the same config files
+- `object_storage.provider: aliyun`, `aliyun_oss`, `aliyun-oss`, `oss`, `r2`, `cloudflare_r2`, `s3`, `aws_s3`, or `custom_s3` skips MinIO and uses the external object storage config from the same config files
+
+For Cloudflare R2, set `object_storage.region: auto` and `object_storage.force_path_style: true`.
 
 Runtime services connect to Postgres through PgBouncer in `session` pooling mode. The one-shot `migrate` job still connects directly to `postgres` and `monitoring-postgres` so DDL and seed work do not go through the pooler.
 
diff --git a/deploy/config.yaml b/deploy/config.yaml
index eedbf96..d986497 100644
--- a/deploy/config.yaml
+++ b/deploy/config.yaml
@@ -157,6 +157,7 @@ object_storage:
   use_ssl: false
   public_base_url: ""
   region: ""
+  force_path_style: false
 
 cache:
   driver: redis
diff --git a/deploy/k3s/README.md b/deploy/k3s/README.md
index 9d07968..b083d62 100644
--- a/deploy/k3s/README.md
+++ b/deploy/k3s/README.md
@@ -11,6 +11,7 @@
 
 - `provider: minio` 或 `provider: mino`：部署 MinIO 和 `minio-init`
 - `provider: aliyun` / `aliyun_oss` / `aliyun-oss` / `oss`：使用 `deploy/k3s-aliyun-oss` overlay，不部署 MinIO 和 `minio-init`
+- `provider: r2` / `s3` / `custom_s3`：复用 S3 兼容客户端，不部署自建 MinIO；Cloudflare R2 建议配置 `region: auto` 和 `force_path_style: true`
 
 ## 1. 准备镜像
 
diff --git a/deploy/scripts/load-and-start.sh b/deploy/scripts/load-and-start.sh
index bf75f22..d0f9362 100755
--- a/deploy/scripts/load-and-start.sh
+++ b/deploy/scripts/load-and-start.sh
@@ -115,7 +115,7 @@ use_minio_for_object_storage() {
     ""|minio|mino)
       return 0
       ;;
-    aliyun|aliyun_oss|aliyun-oss|oss)
+    aliyun|aliyun_oss|aliyun-oss|oss|r2|cloudflare_r2|cloudflare-r2|s3|aws_s3|aws-s3|custom|custom_s3|custom-s3)
       return 1
       ;;
     *)
diff --git a/server/cmd/ops-api/main.go b/server/cmd/ops-api/main.go
index f5ddeb4..bbdf5a3 100644
--- a/server/cmd/ops-api/main.go
+++ b/server/cmd/ops-api/main.go
@@ -122,6 +122,7 @@ func main() {
 	siteDomainMappingSvc := app.NewSiteDomainMappingService(siteDomainMappingsRepo, auditSvc)
 	objectStorageClient := objectstorage.New(cfg.ObjectStorage, logger)
 	desktopClientReleaseSvc := app.NewDesktopClientReleaseService(desktopClientReleasesRepo, objectStorageClient, auditSvc)
+	objectStorageSvc := app.NewObjectStorageService(objectStorageClient, auditSvc).WithLogger(logger)
 	complianceSvc := app.NewComplianceService(pool, auditSvc, logger)
 	schedulerSvc := app.NewSchedulerService(schedulerRepo, auditSvc)
 
@@ -157,22 +158,23 @@ func main() {
 	}
 
 	transport.RegisterRoutes(transport.Deps{
-		Engine:       engine,
-		Server:       cfg.Server,
-		Logger:       logger,
-		DB:           pool,
-		MonitoringDB: monitoringPool,
-		Issuer:       issuer,
-		Auth:         authSvc,
-		Accounts:     accountSvc,
-		AdminUsers:   adminUserSvc,
-		Jobs:         jobSvc,
-		KolSubs:      kolSubscriptionSvc,
-		Audits:       auditSvc,
-		SiteDomains:  siteDomainMappingSvc,
-		Releases:     desktopClientReleaseSvc,
-		Compliance:   complianceSvc,
-		Scheduler:    schedulerSvc,
+		Engine:        engine,
+		Server:        cfg.Server,
+		Logger:        logger,
+		DB:            pool,
+		MonitoringDB:  monitoringPool,
+		Issuer:        issuer,
+		Auth:          authSvc,
+		Accounts:      accountSvc,
+		AdminUsers:    adminUserSvc,
+		Jobs:          jobSvc,
+		KolSubs:       kolSubscriptionSvc,
+		Audits:        auditSvc,
+		SiteDomains:   siteDomainMappingSvc,
+		Releases:      desktopClientReleaseSvc,
+		ObjectStorage: objectStorageSvc,
+		Compliance:    complianceSvc,
+		Scheduler:     schedulerSvc,
 	})
 
 	addr := fmt.Sprintf(":%d", cfg.Server.Port)
diff --git a/server/configs/config.local.yaml.example b/server/configs/config.local.yaml.example
index 59eae53..74cb416 100644
--- a/server/configs/config.local.yaml.example
+++ b/server/configs/config.local.yaml.example
@@ -143,6 +143,7 @@ object_storage:
   use_ssl: false
   public_base_url: ""
   region: ""
+  force_path_style: false
   # Prefer environment override for secrets:
   # export OBJECT_STORAGE_ACCESS_KEY=minioadmin
   # export OBJECT_STORAGE_SECRET_KEY=minioadmin
@@ -151,6 +152,15 @@ object_storage:
   # endpoint: localhost:9000
   # bucket: geo-private
   # use_ssl: false
+  # force_path_style: true
+  #
+  # Cloudflare R2 / S3-compatible example:
+  # provider: r2
+  # endpoint: <account-id>.r2.cloudflarestorage.com
+  # bucket: your-bucket
+  # region: auto
+  # use_ssl: true
+  # force_path_style: true
   #
   # Aliyun OSS example:
   # provider: aliyun
diff --git a/server/configs/config.yaml b/server/configs/config.yaml
index 06dcddf..5891c34 100644
--- a/server/configs/config.yaml
+++ b/server/configs/config.yaml
@@ -167,6 +167,7 @@ object_storage:
   object_acl: default
   signed_url_ttl: 30m
   region: cn-shanghai
+  force_path_style: false
 
 cache:
   driver: redis
diff --git a/server/configs/ops-config.yaml b/server/configs/ops-config.yaml
index fe9ad15..803c2a6 100644
--- a/server/configs/ops-config.yaml
+++ b/server/configs/ops-config.yaml
@@ -52,6 +52,7 @@ object_storage:
   object_acl: default
   signed_url_ttl: 30m
   region: cn-shanghai
+  force_path_style: false
 
 log:
   level: info
diff --git a/server/internal/ops/app/object_storage.go b/server/internal/ops/app/object_storage.go
new file mode 100644
index 0000000..be5e736
--- /dev/null
+++ b/server/internal/ops/app/object_storage.go
@@ -0,0 +1,708 @@
+package app
+
+import (
+	"context"
+	"errors"
+	"net/http"
+	"path/filepath"
+	"strings"
+	"time"
+
+	"github.com/geo-platform/tenant-api/internal/shared/objectstorage"
+	"github.com/geo-platform/tenant-api/internal/shared/response"
+	"go.uber.org/zap"
+)
+
+const (
+	ActionObjectStorageUpload       = "object_storage.upload"
+	ActionObjectStorageMove         = "object_storage.move"
+	ActionObjectStorageDelete       = "object_storage.delete"
+	ActionObjectStorageFolderCreate = "object_storage.folder.create"
+	ActionObjectStorageFolderDelete = "object_storage.folder.delete"
+)
+
+type ObjectStorageService struct {
+	storage objectstorage.ManagementClient
+	audits  *AuditService
+	logger  *zap.Logger
+}
+
+func NewObjectStorageService(storage objectstorage.Client, audits *AuditService) *ObjectStorageService {
+	management, _ := storage.(objectstorage.ManagementClient)
+	return &ObjectStorageService{storage: management, audits: audits}
+}
+
+func (s *ObjectStorageService) WithLogger(logger *zap.Logger) *ObjectStorageService {
+	if s == nil {
+		return s
+	}
+	s.logger = logger
+	if logger != nil && s.storage == nil {
+		logger.Warn("object storage backend does not implement ManagementClient, OSS console disabled")
+	}
+	return s
+}
+
+type ObjectStorageListInput struct {
+	Prefix            string
+	Keyword           string
+	ContinuationToken string
+	StartAfter        string
+	Recursive         bool
+	Size              int
+}
+
+type ObjectStorageListResult struct {
+	Objects               []objectstorage.ObjectInfo `json:"objects"`
+	CommonPrefixes        []string                   `json:"common_prefixes"`
+	ContinuationToken     string                     `json:"continuation_token,omitempty"`
+	NextContinuationToken string                     `json:"next_continuation_token,omitempty"`
+	IsTruncated           bool                       `json:"is_truncated"`
+	Prefix                string                     `json:"prefix"`
+	Keyword               string                     `json:"keyword,omitempty"`
+	Recursive             bool                       `json:"recursive"`
+}
+
+type ObjectStorageDetailResult struct {
+	objectstorage.ObjectInfo
+	PublicURL  *string `json:"public_url,omitempty"`
+	PreviewURL *string `json:"preview_url,omitempty"`
+}
+
+type ObjectStorageUploadInput struct {
+	ObjectKey   string
+	FileName    string
+	Content     []byte
+	ContentType string
+	Overwrite   bool
+}
+
+type ObjectStorageUploadResult struct {
+	Object objectstorage.ObjectInfo `json:"object"`
+}
+
+type ObjectStorageMoveInput struct {
+	SourceKey      string
+	DestinationKey string
+	Overwrite      bool
+	DeleteSource   bool
+}
+
+type ObjectStorageFolderCreateInput struct {
+	Prefix string
+}
+
+type ObjectStorageFolderCreateResult struct {
+	Prefix string `json:"prefix"`
+}
+
+type ObjectStorageFolderDeleteResult struct {
+	Prefix       string `json:"prefix"`
+	DeletedCount int    `json:"deleted_count"`
+}
+
+type ObjectStorageUsageResult struct {
+	Available   bool   `json:"available"`
+	Provider    string `json:"provider,omitempty"`
+	StorageSize int64  `json:"storage_size"`
+	ObjectCount int64  `json:"object_count"`
+}
+
+func (s *ObjectStorageService) List(ctx context.Context, in ObjectStorageListInput) (*ObjectStorageListResult, error) {
+	if err := s.ensureReady(); err != nil {
+		return nil, err
+	}
+	size := in.Size
+	if size <= 0 || size > 1000 {
+		size = 100
+	}
+	prefix, err := normalizeOSSOptionalPrefix(in.Prefix)
+	if err != nil {
+		return nil, err
+	}
+	keyword := strings.TrimSpace(in.Keyword)
+	if keyword != "" && len([]rune(keyword)) > 200 {
+		return nil, response.ErrBadRequest(40093, "invalid_object_storage_keyword", "搜索关键字不能超过 200 个字")
+	}
+
+	listInput := objectstorage.ListInput{
+		Prefix:            prefix,
+		ContinuationToken: strings.TrimSpace(in.ContinuationToken),
+		StartAfter:        normalizeOSSOptionalToken(in.StartAfter),
+		Recursive:         in.Recursive || keyword != "",
+		Limit:             size,
+	}
+	result, err := s.storage.List(ctx, listInput)
+	if err != nil {
+		return nil, mapObjectStorageError(err, "object_storage_list_failed", "读取 OSS 对象列表失败")
+	}
+	objects := normalizeOSSListedObjects(prefix, result.Objects, in.Recursive || keyword != "")
+	commonPrefixes := normalizeOSSCommonPrefixes(prefix, result.CommonPrefixes, result.Objects, in.Recursive || keyword != "")
+	if shouldFallbackOSSDirectoryList(in, keyword, objects, commonPrefixes) {
+		listInput.Recursive = true
+		result, err = s.storage.List(ctx, listInput)
+		if err != nil {
+			return nil, mapObjectStorageError(err, "object_storage_list_failed", "读取 OSS 对象列表失败")
+		}
+		objects = normalizeOSSListedObjects(prefix, result.Objects, in.Recursive || keyword != "")
+		commonPrefixes = normalizeOSSCommonPrefixes(prefix, result.CommonPrefixes, result.Objects, in.Recursive || keyword != "")
+	}
+
+	if keyword != "" {
+		objects = filterOSSObjectsByKeyword(objects, keyword)
+	}
+	return &ObjectStorageListResult{
+		Objects:               objects,
+		CommonPrefixes:        commonPrefixes,
+		ContinuationToken:     result.ContinuationToken,
+		NextContinuationToken: result.NextContinuationToken,
+		IsTruncated:           result.IsTruncated,
+		Prefix:                prefix,
+		Keyword:               keyword,
+		Recursive:             in.Recursive || keyword != "",
+	}, nil
+}
+
+func (s *ObjectStorageService) Usage(ctx context.Context) (*ObjectStorageUsageResult, error) {
+	if err := s.ensureReady(); err != nil {
+		return nil, err
+	}
+	usageClient, ok := s.storage.(objectstorage.UsageClient)
+	if !ok {
+		return &ObjectStorageUsageResult{Available: false}, nil
+	}
+	info, err := usageClient.Usage(ctx)
+	if errors.Is(err, objectstorage.ErrUsageUnsupported) {
+		return &ObjectStorageUsageResult{Available: false}, nil
+	}
+	if err != nil {
+		return nil, mapObjectStorageError(err, "object_storage_usage_failed", "读取 OSS 存储用量失败")
+	}
+	if info == nil || !info.Available {
+		return &ObjectStorageUsageResult{Available: false}, nil
+	}
+	return &ObjectStorageUsageResult{
+		Available:   true,
+		Provider:    info.Provider,
+		StorageSize: info.StorageSize,
+		ObjectCount: info.ObjectCount,
+	}, nil
+}
+
+func (s *ObjectStorageService) Get(ctx context.Context, key string) (*ObjectStorageDetailResult, error) {
+	if err := s.ensureReady(); err != nil {
+		return nil, err
+	}
+	objectKey, err := normalizeOSSObjectKey(key)
+	if err != nil {
+		return nil, err
+	}
+	info, err := s.storage.Stat(ctx, objectKey)
+	if err != nil {
+		return nil, mapObjectStorageError(err, "object_storage_stat_failed", "读取 OSS 对象详情失败")
+	}
+	publicURL := s.publicReadableURL(objectKey)
+	previewURL, err := s.storage.DownloadURL(objectKey)
+	if err != nil || strings.TrimSpace(previewURL) == "" {
+		previewURL = ""
+	}
+	return &ObjectStorageDetailResult{ObjectInfo: *info, PublicURL: publicURL, PreviewURL: optionalString(previewURL)}, nil
+}
+
+func (s *ObjectStorageService) publicReadableURL(objectKey string) *string {
+	publicClient, ok := s.storage.(objectstorage.PublicReadableClient)
+	if !ok {
+		return nil
+	}
+	urlValue, err := publicClient.PublicReadableURL(objectKey)
+	if err != nil || strings.TrimSpace(urlValue) == "" {
+		return nil
+	}
+	return &urlValue
+}
+
+func (s *ObjectStorageService) Download(ctx context.Context, key string) ([]byte, *objectstorage.ObjectInfo, error) {
+	if err := s.ensureReady(); err != nil {
+		return nil, nil, err
+	}
+	objectKey, err := normalizeOSSObjectKey(key)
+	if err != nil {
+		return nil, nil, err
+	}
+	info, statErr := s.storage.Stat(ctx, objectKey)
+	if statErr != nil && !errors.Is(statErr, objectstorage.ErrObjectNotFound) {
+		return nil, nil, mapObjectStorageError(statErr, "object_storage_stat_failed", "读取 OSS 对象详情失败")
+	}
+	content, err := s.storage.GetBytes(ctx, objectKey)
+	if err != nil {
+		return nil, nil, mapObjectStorageError(err, "object_storage_download_failed", "下载 OSS 对象失败")
+	}
+	return content, info, nil
+}
+
+func (s *ObjectStorageService) ResolvePublicURL(ctx context.Context, key string) (string, error) {
+	if err := s.ensureReady(); err != nil {
+		return "", err
+	}
+	objectKey, err := normalizeOSSObjectKey(key)
+	if err != nil {
+		return "", err
+	}
+	if exists, err := s.storage.Exists(ctx, objectKey); err != nil {
+		return "", mapObjectStorageError(err, "object_storage_stat_failed", "读取 OSS 对象详情失败")
+	} else if !exists {
+		return "", response.ErrNotFound(40441, "object_storage_object_not_found", "OSS 对象不存在")
+	}
+	urlValue, err := s.storage.PublicURL(objectKey)
+	if errors.Is(err, objectstorage.ErrObjectNotPublic) {
+		return s.ResolveDownloadURL(ctx, objectKey)
+	}
+	if err != nil {
+		return "", mapObjectStorageError(err, "object_storage_url_failed", "生成 OSS 访问地址失败")
+	}
+	return urlValue, nil
+}
+
+func (s *ObjectStorageService) ResolveDownloadURL(ctx context.Context, key string) (string, error) {
+	if err := s.ensureReady(); err != nil {
+		return "", err
+	}
+	objectKey, err := normalizeOSSObjectKey(key)
+	if err != nil {
+		return "", err
+	}
+	if exists, err := s.storage.Exists(ctx, objectKey); err != nil {
+		return "", mapObjectStorageError(err, "object_storage_stat_failed", "读取 OSS 对象详情失败")
+	} else if !exists {
+		return "", response.ErrNotFound(40441, "object_storage_object_not_found", "OSS 对象不存在")
+	}
+	urlValue, err := s.storage.DownloadURL(objectKey)
+	if err != nil {
+		return "", mapObjectStorageError(err, "object_storage_url_failed", "生成 OSS 下载地址失败")
+	}
+	return urlValue, nil
+}
+
+func (s *ObjectStorageService) Upload(ctx context.Context, actor *Actor, in ObjectStorageUploadInput) (*ObjectStorageUploadResult, error) {
+	if err := s.ensureReady(); err != nil {
+		return nil, err
+	}
+	if len(in.Content) == 0 {
+		return nil, response.ErrBadRequest(40094, "empty_object_storage_file", "上传文件不能为空")
+	}
+	if len(in.Content) > 500*1024*1024 {
+		return nil, response.ErrBadRequest(40095, "object_storage_file_too_large", "单个对象不能超过 500MB")
+	}
+	objectKey, err := normalizeUploadObjectKey(in.ObjectKey, in.FileName)
+	if err != nil {
+		return nil, err
+	}
+	if !in.Overwrite {
+		if exists, err := s.storage.Exists(ctx, objectKey); err != nil {
+			return nil, mapObjectStorageError(err, "object_storage_stat_failed", "检查 OSS 对象失败")
+		} else if exists {
+			return nil, response.ErrConflict(40941, "object_storage_object_exists", "OSS 对象已存在")
+		}
+	}
+	contentType := strings.TrimSpace(in.ContentType)
+	if contentType == "" {
+		contentType = http.DetectContentType(in.Content)
+	}
+	if err := s.storage.PutBytes(ctx, objectKey, in.Content, contentType); err != nil {
+		return nil, mapObjectStorageError(err, "object_storage_upload_failed", "上传 OSS 对象失败")
+	}
+	info, err := s.storage.Stat(ctx, objectKey)
+	if err != nil {
+		if s.logger != nil {
+			s.logger.Warn("object storage stat failed after upload; returning synthesized metadata",
+				zap.String("object_key", objectKey),
+				zap.Error(err),
+			)
+		}
+		info = &objectstorage.ObjectInfo{
+			Key:          objectKey,
+			Size:         int64(len(in.Content)),
+			ContentType:  contentType,
+			LastModified: time.Now(),
+		}
+	}
+	s.audit(ctx, actor, ActionObjectStorageUpload, objectKey, map[string]any{
+		"object_key": objectKey,
+		"size":       len(in.Content),
+		"overwrite":  in.Overwrite,
+	})
+	return &ObjectStorageUploadResult{Object: *info}, nil
+}
+
+func (s *ObjectStorageService) Move(ctx context.Context, actor *Actor, in ObjectStorageMoveInput) (*ObjectStorageDetailResult, error) {
+	if err := s.ensureReady(); err != nil {
+		return nil, err
+	}
+	sourceKey, err := normalizeOSSObjectKey(in.SourceKey)
+	if err != nil {
+		return nil, err
+	}
+	destinationKey, err := normalizeOSSObjectKey(in.DestinationKey)
+	if err != nil {
+		return nil, err
+	}
+	if sourceKey == destinationKey {
+		return s.Get(ctx, destinationKey)
+	}
+	if exists, err := s.storage.Exists(ctx, sourceKey); err != nil {
+		return nil, mapObjectStorageError(err, "object_storage_stat_failed", "检查源对象失败")
+	} else if !exists {
+		return nil, response.ErrNotFound(40441, "object_storage_object_not_found", "源 OSS 对象不存在")
+	}
+	if !in.Overwrite {
+		if exists, err := s.storage.Exists(ctx, destinationKey); err != nil {
+			return nil, mapObjectStorageError(err, "object_storage_stat_failed", "检查目标对象失败")
+		} else if exists {
+			return nil, response.ErrConflict(40941, "object_storage_object_exists", "目标 OSS 对象已存在")
+		}
+	}
+	if err := s.storage.Copy(ctx, sourceKey, destinationKey); err != nil {
+		return nil, mapObjectStorageError(err, "object_storage_move_failed", "移动 OSS 对象失败")
+	}
+	if in.DeleteSource {
+		if err := s.storage.Delete(ctx, sourceKey); err != nil {
+			return nil, mapObjectStorageError(err, "object_storage_delete_failed", "删除源 OSS 对象失败")
+		}
+	}
+	s.audit(ctx, actor, ActionObjectStorageMove, destinationKey, map[string]any{
+		"source_key":      sourceKey,
+		"destination_key": destinationKey,
+		"overwrite":       in.Overwrite,
+		"delete_source":   in.DeleteSource,
+	})
+	return s.Get(ctx, destinationKey)
+}
+
+func (s *ObjectStorageService) Delete(ctx context.Context, actor *Actor, key string) error {
+	if err := s.ensureReady(); err != nil {
+		return err
+	}
+	objectKey, err := normalizeOSSObjectKey(key)
+	if err != nil {
+		return err
+	}
+	if exists, err := s.storage.Exists(ctx, objectKey); err != nil {
+		return mapObjectStorageError(err, "object_storage_stat_failed", "检查 OSS 对象失败")
+	} else if !exists {
+		return response.ErrNotFound(40441, "object_storage_object_not_found", "OSS 对象不存在")
+	}
+	if err := s.storage.Delete(ctx, objectKey); err != nil {
+		return mapObjectStorageError(err, "object_storage_delete_failed", "删除 OSS 对象失败")
+	}
+	s.audit(ctx, actor, ActionObjectStorageDelete, objectKey, map[string]any{"object_key": objectKey})
+	return nil
+}
+
+func (s *ObjectStorageService) CreateFolder(
+	ctx context.Context,
+	actor *Actor,
+	in ObjectStorageFolderCreateInput,
+) (*ObjectStorageFolderCreateResult, error) {
+	if err := s.ensureReady(); err != nil {
+		return nil, err
+	}
+	prefix, err := normalizeOSSFolderPrefix(in.Prefix)
+	if err != nil {
+		return nil, err
+	}
+	if exists, err := s.folderExists(ctx, prefix); err != nil {
+		return nil, mapObjectStorageError(err, "object_storage_folder_check_failed", "检查 OSS 目录失败")
+	} else if exists {
+		return nil, response.ErrConflict(40942, "object_storage_folder_exists", "OSS 目录已存在")
+	}
+	if err := s.storage.PutBytes(ctx, prefix, nil, "application/octet-stream"); err != nil {
+		return nil, mapObjectStorageError(err, "object_storage_folder_create_failed", "创建 OSS 目录失败")
+	}
+	s.audit(ctx, actor, ActionObjectStorageFolderCreate, prefix, map[string]any{"prefix": prefix})
+	return &ObjectStorageFolderCreateResult{Prefix: prefix}, nil
+}
+
+func (s *ObjectStorageService) DeleteFolder(
+	ctx context.Context,
+	actor *Actor,
+	prefixValue string,
+) (*ObjectStorageFolderDeleteResult, error) {
+	if err := s.ensureReady(); err != nil {
+		return nil, err
+	}
+	prefix, err := normalizeOSSFolderPrefix(prefixValue)
+	if err != nil {
+		return nil, err
+	}
+
+	keys := make([]string, 0)
+	continuationToken := ""
+	for {
+		result, err := s.storage.List(ctx, objectstorage.ListInput{
+			Prefix:            prefix,
+			ContinuationToken: continuationToken,
+			Recursive:         true,
+			Limit:             1000,
+		})
+		if err != nil {
+			return nil, mapObjectStorageError(err, "object_storage_folder_list_failed", "读取 OSS 目录失败")
+		}
+		for _, item := range result.Objects {
+			if strings.TrimSpace(item.Key) == "" || !strings.HasPrefix(item.Key, prefix) {
+				continue
+			}
+			keys = append(keys, item.Key)
+		}
+		if !result.IsTruncated || strings.TrimSpace(result.NextContinuationToken) == "" {
+			break
+		}
+		continuationToken = strings.TrimSpace(result.NextContinuationToken)
+	}
+	if len(keys) == 0 {
+		return nil, response.ErrNotFound(40442, "object_storage_folder_not_found", "OSS 目录不存在或目录为空")
+	}
+
+	deleted := 0
+	for _, key := range keys {
+		if strings.TrimSpace(key) == "" || !strings.HasPrefix(key, prefix) {
+			continue
+		}
+		if err := s.storage.Delete(ctx, key); err != nil {
+			return nil, mapObjectStorageError(err, "object_storage_folder_delete_failed", "删除 OSS 目录失败")
+		}
+		deleted++
+	}
+
+	s.audit(ctx, actor, ActionObjectStorageFolderDelete, prefix, map[string]any{
+		"prefix":        prefix,
+		"deleted_count": deleted,
+	})
+	return &ObjectStorageFolderDeleteResult{Prefix: prefix, DeletedCount: deleted}, nil
+}
+
+func (s *ObjectStorageService) ensureReady() error {
+	if s == nil || s.storage == nil {
+		return response.ErrServiceUnavailable(50303, "object_storage_unavailable", "object storage is not configured")
+	}
+	if err := s.storage.Validate(); err != nil {
+		return response.ErrServiceUnavailable(50303, "object_storage_unavailable", "object storage is not configured")
+	}
+	return nil
+}
+
+func normalizeUploadObjectKey(objectKey string, fileName string) (string, error) {
+	objectKey = strings.TrimSpace(objectKey)
+	if objectKey == "" || strings.HasSuffix(objectKey, "/") {
+		name := sanitizeOSSFileName(fileName)
+		if name == "" {
+			return "", response.ErrBadRequest(40096, "invalid_object_storage_key", "Object Key 不能为空")
+		}
+		objectKey = strings.TrimRight(objectKey, "/")
+		if objectKey != "" {
+			objectKey += "/"
+		}
+		objectKey += name
+	}
+	return normalizeOSSObjectKey(objectKey)
+}
+
+func normalizeOSSObjectKey(value string) (string, error) {
+	key, err := normalizeOSSKey(value, false)
+	if err != nil {
+		return "", err
+	}
+	if key == "" || strings.HasSuffix(key, "/") {
+		return "", response.ErrBadRequest(40096, "invalid_object_storage_key", "Object Key 不能为空且不能是目录")
+	}
+	return key, nil
+}
+
+func normalizeOSSFolderPrefix(value string) (string, error) {
+	prefix, err := normalizeOSSKey(value, false)
+	if err != nil {
+		return "", err
+	}
+	prefix = strings.TrimRight(prefix, "/")
+	if prefix == "" {
+		return "", response.ErrBadRequest(40097, "invalid_object_storage_folder", "目录路径不能为空")
+	}
+	return prefix + "/", nil
+}
+
+func normalizeOSSOptionalPrefix(value string) (string, error) {
+	return normalizeOSSKey(value, true)
+}
+
+func normalizeOSSOptionalToken(value string) string {
+	key, err := normalizeOSSKey(value, true)
+	if err != nil {
+		return ""
+	}
+	return key
+}
+
+func normalizeOSSKey(value string, allowEmpty bool) (string, error) {
+	value = strings.TrimSpace(value)
+	value = strings.TrimLeft(value, "/")
+	if value == "" {
+		if allowEmpty {
+			return "", nil
+		}
+		return "", response.ErrBadRequest(40096, "invalid_object_storage_key", "Object Key 不能为空")
+	}
+	if len(value) > 1024 || strings.Contains(value, "\\") {
+		return "", response.ErrBadRequest(40096, "invalid_object_storage_key", "Object Key 长度或格式无效")
+	}
+	for _, part := range strings.Split(value, "/") {
+		if part == "." || part == ".." {
+			return "", response.ErrBadRequest(40096, "invalid_object_storage_key", "Object Key 不能包含 . 或 .. 路径段")
+		}
+	}
+	return value, nil
+}
+
+func sanitizeOSSFileName(value string) string {
+	name := strings.TrimSpace(filepath.Base(value))
+	if name == "." || name == "/" || name == "\\" {
+		return ""
+	}
+	return strings.ReplaceAll(name, "\\", "")
+}
+
+func filterOSSObjectsByKeyword(items []objectstorage.ObjectInfo, keyword string) []objectstorage.ObjectInfo {
+	if keyword == "" {
+		return items
+	}
+	normalized := strings.ToLower(keyword)
+	filtered := make([]objectstorage.ObjectInfo, 0, len(items))
+	for _, item := range items {
+		if strings.Contains(strings.ToLower(item.Key), normalized) {
+			filtered = append(filtered, item)
+		}
+	}
+	return filtered
+}
+
+func optionalString(value string) *string {
+	value = strings.TrimSpace(value)
+	if value == "" {
+		return nil
+	}
+	return &value
+}
+
+func shouldFallbackOSSDirectoryList(
+	in ObjectStorageListInput,
+	keyword string,
+	objects []objectstorage.ObjectInfo,
+	commonPrefixes []string,
+) bool {
+	if in.Recursive || keyword != "" {
+		return false
+	}
+	return len(objects) == 0 && len(commonPrefixes) == 0
+}
+
+func normalizeOSSListedObjects(prefix string, items []objectstorage.ObjectInfo, recursive bool) []objectstorage.ObjectInfo {
+	if recursive {
+		filtered := make([]objectstorage.ObjectInfo, 0, len(items))
+		for _, item := range items {
+			if strings.HasSuffix(item.Key, "/") {
+				continue
+			}
+			filtered = append(filtered, item)
+		}
+		return filtered
+	}
+	filtered := make([]objectstorage.ObjectInfo, 0, len(items))
+	for _, item := range items {
+		if strings.HasSuffix(item.Key, "/") {
+			continue
+		}
+		if !strings.HasPrefix(item.Key, prefix) {
+			continue
+		}
+		remainder := strings.TrimPrefix(item.Key, prefix)
+		if remainder == "" || strings.Contains(remainder, "/") {
+			continue
+		}
+		filtered = append(filtered, item)
+	}
+	return filtered
+}
+
+func normalizeOSSCommonPrefixes(
+	prefix string,
+	listedPrefixes []string,
+	objects []objectstorage.ObjectInfo,
+	recursive bool,
+) []string {
+	if recursive {
+		return nil
+	}
+	seen := make(map[string]struct{}, len(listedPrefixes)+len(objects))
+	out := make([]string, 0, len(listedPrefixes))
+	add := func(value string, requireNested bool) {
+		value = strings.TrimLeft(strings.TrimSpace(value), "/")
+		if value == "" || value == prefix || !strings.HasPrefix(value, prefix) {
+			return
+		}
+		remainder := strings.TrimPrefix(value, prefix)
+		first, _, hasSlash := strings.Cut(remainder, "/")
+		if first == "" || (requireNested && !hasSlash) {
+			return
+		}
+		next := prefix + first + "/"
+		if _, ok := seen[next]; ok {
+			return
+		}
+		seen[next] = struct{}{}
+		out = append(out, next)
+	}
+
+	for _, value := range listedPrefixes {
+		add(value, false)
+	}
+	for _, item := range objects {
+		add(item.Key, true)
+	}
+	return out
+}
+
+func (s *ObjectStorageService) folderExists(ctx context.Context, prefix string) (bool, error) {
+	if exists, err := s.storage.Exists(ctx, prefix); err != nil {
+		return false, err
+	} else if exists {
+		return true, nil
+	}
+	result, err := s.storage.List(ctx, objectstorage.ListInput{
+		Prefix:    prefix,
+		Recursive: true,
+		Limit:     1,
+	})
+	if err != nil {
+		return false, err
+	}
+	return len(result.Objects) > 0, nil
+}
+
+func mapObjectStorageError(err error, code string, detail string) error {
+	if errors.Is(err, objectstorage.ErrNotConfigured) {
+		return response.ErrServiceUnavailable(50303, "object_storage_unavailable", "object storage is not configured")
+	}
+	if errors.Is(err, objectstorage.ErrObjectNotFound) {
+		return response.ErrNotFound(40441, "object_storage_object_not_found", "OSS 对象不存在")
+	}
+	appErr := response.ErrInternal(50097, code, detail)
+	appErr.Cause = err
+	return appErr
+}
+
+func (s *ObjectStorageService) audit(ctx context.Context, actor *Actor, action string, targetKey string, metadata map[string]any) {
+	if actor == nil || s.audits == nil {
+		return
+	}
+	event := actor.audit(action, "object_storage_object", 0, metadata)
+	event.TargetID = targetKey
+	_ = s.audits.Append(ctx, event)
+}
diff --git a/server/internal/ops/app/object_storage_test.go b/server/internal/ops/app/object_storage_test.go
new file mode 100644
index 0000000..35f3feb
--- /dev/null
+++ b/server/internal/ops/app/object_storage_test.go
@@ -0,0 +1,267 @@
+package app
+
+import (
+	"context"
+	"errors"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/geo-platform/tenant-api/internal/shared/objectstorage"
+	"github.com/stretchr/testify/require"
+)
+
+func TestNormalizeOSSCommonPrefixesDerivesNextLevelFolders(t *testing.T) {
+	t.Parallel()
+
+	objects := []objectstorage.ObjectInfo{
+		{Key: "reports/2026/report.txt"},
+		{Key: "reports/2026/monthly/january.txt"},
+		{Key: "reports/2025/summary.txt"},
+		{Key: "reports/readme.txt"},
+		{Key: "images/logo.png"},
+	}
+
+	require.Equal(t,
+		[]string{"reports/2026/", "reports/2025/"},
+		normalizeOSSCommonPrefixes("reports/", nil, objects, false),
+	)
+	require.Equal(t,
+		[]objectstorage.ObjectInfo{{Key: "reports/readme.txt"}},
+		normalizeOSSListedObjects("reports/", objects, false),
+	)
+}
+
+func TestNormalizeOSSListedObjectsFiltersFolderPlaceholders(t *testing.T) {
+	t.Parallel()
+
+	objects := []objectstorage.ObjectInfo{
+		{Key: "reports/"},
+		{Key: "reports/readme.txt"},
+		{Key: "reports/2026/"},
+		{Key: "reports/2026/report.txt"},
+	}
+
+	require.Equal(t,
+		[]objectstorage.ObjectInfo{{Key: "reports/readme.txt"}},
+		normalizeOSSListedObjects("reports/", objects, false),
+	)
+	require.Equal(t,
+		[]objectstorage.ObjectInfo{{Key: "reports/readme.txt"}, {Key: "reports/2026/report.txt"}},
+		normalizeOSSListedObjects("reports/", objects, true),
+	)
+}
+
+func TestNormalizeOSSCommonPrefixesKeepsProviderPrefixes(t *testing.T) {
+	t.Parallel()
+
+	got := normalizeOSSCommonPrefixes(
+		"reports/",
+		[]string{"reports/2026/", "reports/2025/"},
+		[]objectstorage.ObjectInfo{
+			{Key: "reports/2026/report.txt"},
+			{Key: "reports/2025/summary.txt"},
+		},
+		false,
+	)
+
+	require.Equal(t, []string{"reports/2026/", "reports/2025/"}, got)
+}
+
+func TestNormalizeOSSCommonPrefixesOmitsFoldersInRecursiveMode(t *testing.T) {
+	t.Parallel()
+
+	got := normalizeOSSCommonPrefixes(
+		"reports/",
+		[]string{"reports/2026/"},
+		[]objectstorage.ObjectInfo{{Key: "reports/2026/report.txt"}},
+		true,
+	)
+
+	require.Empty(t, got)
+}
+
+func TestShouldFallbackOSSDirectoryList(t *testing.T) {
+	t.Parallel()
+
+	require.True(t, shouldFallbackOSSDirectoryList(
+		ObjectStorageListInput{Prefix: "desktop-client/"},
+		"",
+		nil,
+		nil,
+	))
+	require.False(t, shouldFallbackOSSDirectoryList(
+		ObjectStorageListInput{Prefix: "desktop-client/", Recursive: true},
+		"",
+		nil,
+		nil,
+	))
+	require.False(t, shouldFallbackOSSDirectoryList(
+		ObjectStorageListInput{Prefix: "desktop-client/"},
+		"release",
+		nil,
+		nil,
+	))
+	require.False(t, shouldFallbackOSSDirectoryList(
+		ObjectStorageListInput{Prefix: "desktop-client/"},
+		"",
+		nil,
+		[]string{"desktop-client/releases/"},
+	))
+}
+
+func TestCreateFolderWritesPlaceholder(t *testing.T) {
+	t.Parallel()
+
+	storage := newFakeObjectStorage()
+	svc := &ObjectStorageService{storage: storage}
+
+	result, err := svc.CreateFolder(context.Background(), nil, ObjectStorageFolderCreateInput{Prefix: "reports/2026"})
+
+	require.NoError(t, err)
+	require.Equal(t, "reports/2026/", result.Prefix)
+	require.Contains(t, storage.objects, "reports/2026/")
+	require.Equal(t, []byte(nil), storage.objects["reports/2026/"])
+	require.Equal(t, "application/octet-stream", storage.contentTypes["reports/2026/"])
+}
+
+func TestCreateFolderRejectsExistingPrefix(t *testing.T) {
+	t.Parallel()
+
+	storage := newFakeObjectStorage()
+	storage.objects["reports/2026/report.txt"] = []byte("content")
+	svc := &ObjectStorageService{storage: storage}
+
+	_, err := svc.CreateFolder(context.Background(), nil, ObjectStorageFolderCreateInput{Prefix: "reports/2026/"})
+
+	require.Error(t, err)
+	require.Contains(t, err.Error(), "object_storage_folder_exists")
+}
+
+func TestDeleteFolderDeletesAllObjectsUnderPrefix(t *testing.T) {
+	t.Parallel()
+
+	storage := newFakeObjectStorage()
+	storage.objects["reports/2026/"] = nil
+	storage.objects["reports/2026/a.txt"] = []byte("a")
+	storage.objects["reports/2026/nested/b.txt"] = []byte("b")
+	storage.objects["reports/2025/a.txt"] = []byte("old")
+	svc := &ObjectStorageService{storage: storage}
+
+	result, err := svc.DeleteFolder(context.Background(), nil, "reports/2026/")
+
+	require.NoError(t, err)
+	require.Equal(t, "reports/2026/", result.Prefix)
+	require.Equal(t, 3, result.DeletedCount)
+	require.NotContains(t, storage.objects, "reports/2026/")
+	require.NotContains(t, storage.objects, "reports/2026/a.txt")
+	require.NotContains(t, storage.objects, "reports/2026/nested/b.txt")
+	require.Contains(t, storage.objects, "reports/2025/a.txt")
+}
+
+func TestGetReturnsPreviewURLAndOmitsNonPublicURL(t *testing.T) {
+	t.Parallel()
+
+	storage := newFakeObjectStorage()
+	storage.objects["reports/secret.png"] = []byte("image")
+	storage.publicReadable = false
+	svc := &ObjectStorageService{storage: storage}
+
+	result, err := svc.Get(context.Background(), "reports/secret.png")
+
+	require.NoError(t, err)
+	require.Nil(t, result.PublicURL)
+	require.NotNil(t, result.PreviewURL)
+	require.Equal(t, "https://example.test/download/reports/secret.png", *result.PreviewURL)
+}
+
+type fakeObjectStorage struct {
+	objects        map[string][]byte
+	contentTypes   map[string]string
+	publicReadable bool
+}
+
+func newFakeObjectStorage() *fakeObjectStorage {
+	return &fakeObjectStorage{
+		objects:        make(map[string][]byte),
+		contentTypes:   make(map[string]string),
+		publicReadable: true,
+	}
+}
+
+func (s *fakeObjectStorage) Validate() error {
+	return nil
+}
+
+func (s *fakeObjectStorage) PutBytes(_ context.Context, objectKey string, content []byte, contentType string) error {
+	s.objects[objectKey] = content
+	s.contentTypes[objectKey] = contentType
+	return nil
+}
+
+func (s *fakeObjectStorage) GetBytes(_ context.Context, objectKey string) ([]byte, error) {
+	content, ok := s.objects[objectKey]
+	if !ok {
+		return nil, objectstorage.ErrObjectNotFound
+	}
+	return content, nil
+}
+
+func (s *fakeObjectStorage) Exists(_ context.Context, objectKey string) (bool, error) {
+	_, ok := s.objects[objectKey]
+	return ok, nil
+}
+
+func (s *fakeObjectStorage) Delete(_ context.Context, objectKey string) error {
+	delete(s.objects, objectKey)
+	return nil
+}
+
+func (s *fakeObjectStorage) PublicURL(objectKey string) (string, error) {
+	return "https://example.test/" + objectKey, nil
+}
+
+func (s *fakeObjectStorage) PublicReadableURL(objectKey string) (string, error) {
+	if !s.publicReadable {
+		return "", objectstorage.ErrObjectNotPublic
+	}
+	return "https://example.test/" + objectKey, nil
+}
+
+func (s *fakeObjectStorage) DownloadURL(objectKey string) (string, error) {
+	return "https://example.test/download/" + objectKey, nil
+}
+
+func (s *fakeObjectStorage) List(_ context.Context, in objectstorage.ListInput) (*objectstorage.ListResult, error) {
+	if in.Limit == 0 {
+		return nil, errors.New("test list limit must be set")
+	}
+	result := &objectstorage.ListResult{}
+	for key, content := range s.objects {
+		if strings.HasPrefix(key, in.Prefix) {
+			result.Objects = append(result.Objects, objectstorage.ObjectInfo{
+				Key:          key,
+				Size:         int64(len(content)),
+				LastModified: time.Now(),
+			})
+		}
+	}
+	return result, nil
+}
+
+func (s *fakeObjectStorage) Stat(_ context.Context, objectKey string) (*objectstorage.ObjectInfo, error) {
+	content, ok := s.objects[objectKey]
+	if !ok {
+		return nil, objectstorage.ErrObjectNotFound
+	}
+	return &objectstorage.ObjectInfo{Key: objectKey, Size: int64(len(content)), LastModified: time.Now()}, nil
+}
+
+func (s *fakeObjectStorage) Copy(_ context.Context, sourceKey, destinationKey string) error {
+	content, ok := s.objects[sourceKey]
+	if !ok {
+		return objectstorage.ErrObjectNotFound
+	}
+	s.objects[destinationKey] = append([]byte(nil), content...)
+	return nil
+}
diff --git a/server/internal/ops/app/site_domain_mapping.go b/server/internal/ops/app/site_domain_mapping.go
index 4886085..d55b525 100644
--- a/server/internal/ops/app/site_domain_mapping.go
+++ b/server/internal/ops/app/site_domain_mapping.go
@@ -1,10 +1,14 @@
 package app
 
 import (
+	"bytes"
 	"context"
+	"encoding/csv"
 	"errors"
+	"fmt"
 	"net"
 	"net/url"
+	"strconv"
 	"strings"
 	"time"
 
@@ -21,6 +25,12 @@ const (
 	ActionSiteDomainMappingEnable  = "site_domain_mapping.enable"
 	ActionSiteDomainMappingDisable = "site_domain_mapping.disable"
 	ActionSiteDomainMappingDelete  = "site_domain_mapping.delete"
+	ActionSiteDomainMappingImport  = "site_domain_mapping.import"
+	ActionSiteDomainMappingExport  = "site_domain_mapping.export"
+
+	siteDomainMappingImportMaxRows   = 5000
+	siteDomainMappingExportMaxRows   = 10000
+	siteDomainMappingImportMaxErrors = 50
 )
 
 type SiteDomainMappingService struct {
@@ -63,6 +73,32 @@ type SiteDomainMappingInput struct {
 	IsActive          bool
 }
 
+type SiteDomainMappingImportInput struct {
+	Content []byte
+}
+
+type SiteDomainMappingImportError struct {
+	Row     int    `json:"row"`
+	Message string `json:"message"`
+}
+
+type SiteDomainMappingImportResult struct {
+	Total     int                            `json:"total"`
+	Created   int                            `json:"created"`
+	Updated   int                            `json:"updated"`
+	Skipped   int                            `json:"skipped"`
+	Failed    int                            `json:"failed"`
+	Duplicate int                            `json:"duplicate"`
+	Errors    []SiteDomainMappingImportError `json:"errors"`
+}
+
+type siteDomainMappingImportColumns struct {
+	Domain int
+	Key    int
+	Name   int
+	Active int
+}
+
 func toSiteDomainMappingView(item *domain.SiteDomainMapping) SiteDomainMappingView {
 	return SiteDomainMappingView{
 		ID:                item.ID,
@@ -102,6 +138,56 @@ func (s *SiteDomainMappingService) List(ctx context.Context, in SiteDomainMappin
 	return &SiteDomainMappingListResult{Items: views, Total: total, Page: page, Size: size}, nil
 }
 
+func (s *SiteDomainMappingService) ExportCSV(ctx context.Context, actor *Actor, in SiteDomainMappingListInput) ([]byte, error) {
+	items, err := s.mappings.Export(ctx, repository.SiteDomainMappingFilter{
+		Keyword:  strings.TrimSpace(in.Keyword),
+		IsActive: in.IsActive,
+		Limit:    siteDomainMappingExportMaxRows + 1,
+	})
+	if err != nil {
+		return nil, err
+	}
+	if len(items) > siteDomainMappingExportMaxRows {
+		return nil, response.ErrBadRequest(
+			40059,
+			"site_domain_mapping_export_too_large",
+			fmt.Sprintf("单次最多导出 %d 行，请缩小筛选范围后重试", siteDomainMappingExportMaxRows),
+		)
+	}
+
+	var buf bytes.Buffer
+	buf.WriteString("\xEF\xBB\xBF")
+	writer := csv.NewWriter(&buf)
+	if err := writer.Write([]string{"registrable_domain", "site_key", "site_name", "is_active", "created_at", "updated_at"}); err != nil {
+		return nil, err
+	}
+	for _, item := range items {
+		if err := writer.Write([]string{
+			item.RegistrableDomain,
+			item.SiteKey,
+			item.SiteName,
+			strconv.FormatBool(item.IsActive),
+			item.CreatedAt.Format(time.RFC3339),
+			item.UpdatedAt.Format(time.RFC3339),
+		}); err != nil {
+			return nil, err
+		}
+	}
+	writer.Flush()
+	if err := writer.Error(); err != nil {
+		return nil, err
+	}
+
+	if actor != nil && s.audits != nil {
+		_ = s.audits.Append(ctx, actor.audit(ActionSiteDomainMappingExport, "site_domain_mapping", 0, map[string]any{
+			"count":     len(items),
+			"keyword":   strings.TrimSpace(in.Keyword),
+			"is_active": in.IsActive,
+		}))
+	}
+	return buf.Bytes(), nil
+}
+
 func (s *SiteDomainMappingService) Create(ctx context.Context, actor *Actor, in SiteDomainMappingInput) (*SiteDomainMappingView, error) {
 	normalized, err := normalizeSiteDomainMappingInput(in)
 	if err != nil {
@@ -126,6 +212,85 @@ func (s *SiteDomainMappingService) Create(ctx context.Context, actor *Actor, in
 	return &view, nil
 }
 
+func (s *SiteDomainMappingService) ImportCSV(ctx context.Context, actor *Actor, in SiteDomainMappingImportInput) (*SiteDomainMappingImportResult, error) {
+	records, err := readSiteDomainMappingCSV(in.Content)
+	if err != nil {
+		return nil, err
+	}
+	if len(records) < 2 {
+		return nil, response.ErrBadRequest(40053, "empty_site_domain_mapping_import", "CSV 至少需要表头和一行数据")
+	}
+	if len(records)-1 > siteDomainMappingImportMaxRows {
+		return nil, response.ErrBadRequest(
+			40054,
+			"site_domain_mapping_import_too_large",
+			fmt.Sprintf("单次最多导入 %d 行", siteDomainMappingImportMaxRows),
+		)
+	}
+
+	columns, err := detectSiteDomainMappingImportColumns(records[0])
+	if err != nil {
+		return nil, err
+	}
+
+	result := &SiteDomainMappingImportResult{
+		Total:  len(records) - 1,
+		Errors: make([]SiteDomainMappingImportError, 0),
+	}
+	seen := map[string]int{}
+	for rowIndex, record := range records[1:] {
+		rowNumber := rowIndex + 2
+		if isBlankCSVRecord(record) {
+			result.Skipped++
+			continue
+		}
+		input, rowErr := siteDomainMappingInputFromCSVRecord(record, columns)
+		if rowErr != nil {
+			appendSiteDomainMappingImportError(result, rowNumber, rowErr.Error())
+			continue
+		}
+		normalized, rowErr := normalizeSiteDomainMappingInput(input)
+		if rowErr != nil {
+			appendSiteDomainMappingImportError(result, rowNumber, response.Normalize(rowErr).Detail)
+			continue
+		}
+		if firstRow, ok := seen[normalized.RegistrableDomain]; ok {
+			result.Duplicate++
+			result.Skipped++
+			appendSiteDomainMappingImportWarning(result, rowNumber, fmt.Sprintf("域名与第 %d 行重复，已跳过", firstRow))
+			continue
+		}
+		seen[normalized.RegistrableDomain] = rowNumber
+
+		upserted, rowErr := s.mappings.Upsert(ctx, repository.UpsertSiteDomainMappingInput{
+			RegistrableDomain: normalized.RegistrableDomain,
+			SiteKey:           normalized.SiteKey,
+			SiteName:          normalized.SiteName,
+			IsActive:          normalized.IsActive,
+		})
+		if rowErr != nil {
+			appendSiteDomainMappingImportError(result, rowNumber, rowErr.Error())
+			continue
+		}
+		if upserted.Created {
+			result.Created++
+		} else {
+			result.Updated++
+		}
+	}
+	if actor != nil && s.audits != nil {
+		_ = s.audits.Append(ctx, actor.audit(ActionSiteDomainMappingImport, "site_domain_mapping", 0, map[string]any{
+			"total":     result.Total,
+			"created":   result.Created,
+			"updated":   result.Updated,
+			"skipped":   result.Skipped,
+			"failed":    result.Failed,
+			"duplicate": result.Duplicate,
+		}))
+	}
+	return result, nil
+}
+
 func (s *SiteDomainMappingService) Update(ctx context.Context, actor *Actor, id int64, in SiteDomainMappingInput) (*SiteDomainMappingView, error) {
 	normalized, err := normalizeSiteDomainMappingInput(in)
 	if err != nil {
@@ -240,6 +405,130 @@ func normalizeDomainName(raw string) string {
 	return strings.Trim(strings.TrimSuffix(value, "."), ".")
 }
 
+func readSiteDomainMappingCSV(content []byte) ([][]string, error) {
+	content = bytes.TrimPrefix(content, []byte("\xEF\xBB\xBF"))
+	reader := csv.NewReader(bytes.NewReader(content))
+	reader.FieldsPerRecord = -1
+	reader.TrimLeadingSpace = true
+	records, err := reader.ReadAll()
+	if err != nil {
+		return nil, response.ErrBadRequest(40055, "invalid_site_domain_mapping_csv", "CSV 文件格式无效："+err.Error())
+	}
+	return records, nil
+}
+
+func detectSiteDomainMappingImportColumns(header []string) (siteDomainMappingImportColumns, error) {
+	columns := siteDomainMappingImportColumns{
+		Domain: -1,
+		Key:    -1,
+		Name:   -1,
+		Active: -1,
+	}
+	for index, raw := range header {
+		switch normalizeSiteDomainMappingCSVHeader(raw) {
+		case "registrable_domain":
+			columns.Domain = index
+		case "site_key":
+			columns.Key = index
+		case "site_name":
+			columns.Name = index
+		case "is_active":
+			columns.Active = index
+		}
+	}
+	if columns.Domain < 0 || columns.Name < 0 {
+		return columns, response.ErrBadRequest(
+			40056,
+			"invalid_site_domain_mapping_csv_header",
+			"CSV 表头至少需要 registrable_domain/site_name，或中文表头：匹配域名/中文名",
+		)
+	}
+	return columns, nil
+}
+
+func normalizeSiteDomainMappingCSVHeader(header string) string {
+	key := strings.ToLower(strings.TrimSpace(strings.TrimPrefix(header, "\ufeff")))
+	key = strings.ReplaceAll(key, " ", "_")
+	key = strings.ReplaceAll(key, "-", "_")
+	switch key {
+	case "registrable_domain", "domain", "matched_domain", "match_domain", "host", "域名", "匹配域名", "站点域名":
+		return "registrable_domain"
+	case "site_key", "key", "sitekey", "站点key", "站点_key":
+		return "site_key"
+	case "site_name", "sitename", "name", "中文名", "站点名", "站点名称", "网站名称":
+		return "site_name"
+	case "is_active", "active", "enabled", "status", "状态", "启用", "是否启用":
+		return "is_active"
+	default:
+		return key
+	}
+}
+
+func siteDomainMappingInputFromCSVRecord(record []string, columns siteDomainMappingImportColumns) (SiteDomainMappingInput, error) {
+	active := true
+	if columns.Active >= 0 {
+		parsed, err := parseSiteDomainMappingActive(csvCell(record, columns.Active))
+		if err != nil {
+			return SiteDomainMappingInput{}, err
+		}
+		active = parsed
+	}
+	return SiteDomainMappingInput{
+		RegistrableDomain: csvCell(record, columns.Domain),
+		SiteKey:           csvCell(record, columns.Key),
+		SiteName:          csvCell(record, columns.Name),
+		IsActive:          active,
+	}, nil
+}
+
+func parseSiteDomainMappingActive(value string) (bool, error) {
+	normalized := strings.ToLower(strings.TrimSpace(value))
+	if normalized == "" {
+		return true, nil
+	}
+	switch normalized {
+	case "true", "1", "yes", "y", "enabled", "enable", "active", "启用", "是":
+		return true, nil
+	case "false", "0", "no", "n", "disabled", "disable", "inactive", "停用", "否":
+		return false, nil
+	default:
+		return false, fmt.Errorf("状态只能填写启用/停用、true/false 或 1/0")
+	}
+}
+
+func csvCell(record []string, index int) string {
+	if index < 0 || index >= len(record) {
+		return ""
+	}
+	return strings.TrimSpace(record[index])
+}
+
+func isBlankCSVRecord(record []string) bool {
+	for _, value := range record {
+		if strings.TrimSpace(value) != "" {
+			return false
+		}
+	}
+	return true
+}
+
+func appendSiteDomainMappingImportError(result *SiteDomainMappingImportResult, row int, message string) {
+	if message == "" {
+		message = "导入失败"
+	}
+	result.Failed++
+	appendSiteDomainMappingImportWarning(result, row, message)
+}
+
+func appendSiteDomainMappingImportWarning(result *SiteDomainMappingImportResult, row int, message string) {
+	if message == "" {
+		message = "导入失败"
+	}
+	if len(result.Errors) < siteDomainMappingImportMaxErrors {
+		result.Errors = append(result.Errors, SiteDomainMappingImportError{Row: row, Message: message})
+	}
+}
+
 func isDuplicateSiteDomainMapping(err error) bool {
 	var pgErr *pgconn.PgError
 	return errors.As(err, &pgErr) && pgErr.Code == "23505"
diff --git a/server/internal/ops/app/site_domain_mapping_test.go b/server/internal/ops/app/site_domain_mapping_test.go
new file mode 100644
index 0000000..32b1595
--- /dev/null
+++ b/server/internal/ops/app/site_domain_mapping_test.go
@@ -0,0 +1,54 @@
+package app
+
+import "testing"
+
+func TestSiteDomainMappingCSVColumnsAcceptChineseHeaders(t *testing.T) {
+	columns, err := detectSiteDomainMappingImportColumns([]string{"匹配域名", "站点 Key", "中文名", "状态"})
+	if err != nil {
+		t.Fatalf("detectSiteDomainMappingImportColumns() error = %v", err)
+	}
+	if columns.Domain != 0 || columns.Key != 1 || columns.Name != 2 || columns.Active != 3 {
+		t.Fatalf("columns = %+v, want domain/key/name/active indexes 0/1/2/3", columns)
+	}
+}
+
+func TestSiteDomainMappingCSVColumnsRequireDomainAndName(t *testing.T) {
+	if _, err := detectSiteDomainMappingImportColumns([]string{"site_key", "is_active"}); err == nil {
+		t.Fatal("detectSiteDomainMappingImportColumns() error = nil, want error")
+	}
+}
+
+func TestSiteDomainMappingInputFromCSVRecordDefaultsAndParsesActive(t *testing.T) {
+	columns := siteDomainMappingImportColumns{
+		Domain: 0,
+		Key:    1,
+		Name:   2,
+		Active: 3,
+	}
+	input, err := siteDomainMappingInputFromCSVRecord([]string{"https://www.example.com/path", "", "示例", "停用"}, columns)
+	if err != nil {
+		t.Fatalf("siteDomainMappingInputFromCSVRecord() error = %v", err)
+	}
+	normalized, err := normalizeSiteDomainMappingInput(input)
+	if err != nil {
+		t.Fatalf("normalizeSiteDomainMappingInput() error = %v", err)
+	}
+	if normalized.RegistrableDomain != "www.example.com" {
+		t.Fatalf("RegistrableDomain = %q, want www.example.com", normalized.RegistrableDomain)
+	}
+	if normalized.SiteKey != "www.example.com" {
+		t.Fatalf("SiteKey = %q, want default domain", normalized.SiteKey)
+	}
+	if normalized.SiteName != "示例" {
+		t.Fatalf("SiteName = %q, want 示例", normalized.SiteName)
+	}
+	if normalized.IsActive {
+		t.Fatal("IsActive = true, want false")
+	}
+}
+
+func TestParseSiteDomainMappingActiveRejectsUnknownStatus(t *testing.T) {
+	if _, err := parseSiteDomainMappingActive("待定"); err == nil {
+		t.Fatal("parseSiteDomainMappingActive() error = nil, want error")
+	}
+}
diff --git a/server/internal/ops/config/config.go b/server/internal/ops/config/config.go
index 753d8e4..7323351 100644
--- a/server/internal/ops/config/config.go
+++ b/server/internal/ops/config/config.go
@@ -504,6 +504,11 @@ func applyOpsObjectStorageEnvOverrides(cfg *Config) {
 	if region := firstNonEmptyEnv("OPS_OBJECT_STORAGE_REGION", "OBJECT_STORAGE_REGION"); region != "" {
 		cfg.ObjectStorage.Region = region
 	}
+	if v := firstNonEmptyEnv("OPS_OBJECT_STORAGE_FORCE_PATH_STYLE", "OBJECT_STORAGE_FORCE_PATH_STYLE"); v != "" {
+		if forcePathStyle, err := parseBoolEnv("OPS_OBJECT_STORAGE_FORCE_PATH_STYLE", v); err == nil {
+			cfg.ObjectStorage.ForcePathStyle = forcePathStyle
+		}
+	}
 	if v := firstNonEmptyEnv("OPS_OBJECT_STORAGE_USE_SSL", "OBJECT_STORAGE_USE_SSL"); v != "" {
 		if useSSL, err := parseBoolEnv("OPS_OBJECT_STORAGE_USE_SSL", v); err == nil {
 			cfg.ObjectStorage.UseSSL = useSSL
diff --git a/server/internal/ops/repository/site_domain_mapping.go b/server/internal/ops/repository/site_domain_mapping.go
index 5dfe285..5c1cc94 100644
--- a/server/internal/ops/repository/site_domain_mapping.go
+++ b/server/internal/ops/repository/site_domain_mapping.go
@@ -44,6 +44,18 @@ type UpdateSiteDomainMappingInput struct {
 	IsActive          bool
 }
 
+type UpsertSiteDomainMappingInput struct {
+	RegistrableDomain string
+	SiteKey           string
+	SiteName          string
+	IsActive          bool
+}
+
+type UpsertSiteDomainMappingResult struct {
+	Item    *domain.SiteDomainMapping
+	Created bool
+}
+
 func scanSiteDomainMapping(row pgx.Row) (*domain.SiteDomainMapping, error) {
 	var item domain.SiteDomainMapping
 	err := row.Scan(
@@ -64,7 +76,29 @@ func scanSiteDomainMapping(row pgx.Row) (*domain.SiteDomainMapping, error) {
 	return &item, nil
 }
 
-func (r *SiteDomainMappingRepository) List(ctx context.Context, f SiteDomainMappingFilter) ([]domain.SiteDomainMapping, int64, error) {
+func scanSiteDomainMappingUpsert(row pgx.Row) (*UpsertSiteDomainMappingResult, error) {
+	var item domain.SiteDomainMapping
+	var created bool
+	err := row.Scan(
+		&item.ID,
+		&item.RegistrableDomain,
+		&item.SiteKey,
+		&item.SiteName,
+		&item.IsActive,
+		&item.CreatedAt,
+		&item.UpdatedAt,
+		&created,
+	)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return nil, ErrSiteDomainMappingNotFound
+		}
+		return nil, err
+	}
+	return &UpsertSiteDomainMappingResult{Item: &item, Created: created}, nil
+}
+
+func buildSiteDomainMappingWhere(f SiteDomainMappingFilter) (string, []any) {
 	args := []any{}
 	where := "1=1"
 
@@ -78,6 +112,12 @@ func (r *SiteDomainMappingRepository) List(ctx context.Context, f SiteDomainMapp
 		where += fmt.Sprintf(" AND is_active = $%d", len(args))
 	}
 
+	return where, args
+}
+
+func (r *SiteDomainMappingRepository) List(ctx context.Context, f SiteDomainMappingFilter) ([]domain.SiteDomainMapping, int64, error) {
+	where, args := buildSiteDomainMappingWhere(f)
+
 	var total int64
 	if err := r.pool.QueryRow(ctx, "SELECT COUNT(*) FROM site_domain_mappings WHERE "+where, args...).Scan(&total); err != nil {
 		return nil, 0, err
@@ -117,6 +157,37 @@ func (r *SiteDomainMappingRepository) List(ctx context.Context, f SiteDomainMapp
 	return items, total, rows.Err()
 }
 
+func (r *SiteDomainMappingRepository) Export(ctx context.Context, f SiteDomainMappingFilter) ([]domain.SiteDomainMapping, error) {
+	where, args := buildSiteDomainMappingWhere(f)
+	limit := f.Limit
+	if limit <= 0 {
+		limit = 10000
+	}
+	args = append(args, limit)
+	limitArg := len(args)
+
+	rows, err := r.pool.Query(ctx, fmt.Sprintf(`
+		SELECT %s
+		FROM site_domain_mappings
+		WHERE %s
+		ORDER BY is_active DESC, registrable_domain ASC, id DESC
+		LIMIT $%d`, siteDomainMappingColumns, where, limitArg), args...)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+
+	items := make([]domain.SiteDomainMapping, 0, limit)
+	for rows.Next() {
+		item, scanErr := scanSiteDomainMapping(rows)
+		if scanErr != nil {
+			return nil, scanErr
+		}
+		items = append(items, *item)
+	}
+	return items, rows.Err()
+}
+
 func (r *SiteDomainMappingRepository) GetByID(ctx context.Context, id int64) (*domain.SiteDomainMapping, error) {
 	return scanSiteDomainMapping(r.pool.QueryRow(ctx, `
 		SELECT `+siteDomainMappingColumns+`
@@ -145,6 +216,19 @@ func (r *SiteDomainMappingRepository) Update(ctx context.Context, id int64, in U
 		in.RegistrableDomain, in.SiteKey, in.SiteName, in.IsActive, id))
 }
 
+func (r *SiteDomainMappingRepository) Upsert(ctx context.Context, in UpsertSiteDomainMappingInput) (*UpsertSiteDomainMappingResult, error) {
+	return scanSiteDomainMappingUpsert(r.pool.QueryRow(ctx, `
+		INSERT INTO site_domain_mappings (registrable_domain, site_key, site_name, is_active)
+		VALUES ($1, $2, $3, $4)
+		ON CONFLICT (registrable_domain) DO UPDATE
+		SET site_key = EXCLUDED.site_key,
+			site_name = EXCLUDED.site_name,
+			is_active = EXCLUDED.is_active,
+			updated_at = NOW()
+		RETURNING `+siteDomainMappingColumns+`, xmax = 0`,
+		in.RegistrableDomain, in.SiteKey, in.SiteName, in.IsActive))
+}
+
 func (r *SiteDomainMappingRepository) SetActive(ctx context.Context, id int64, active bool) (*domain.SiteDomainMapping, error) {
 	return scanSiteDomainMapping(r.pool.QueryRow(ctx, `
 		UPDATE site_domain_mappings
diff --git a/server/internal/ops/transport/object_storage_handler.go b/server/internal/ops/transport/object_storage_handler.go
new file mode 100644
index 0000000..0e048f5
--- /dev/null
+++ b/server/internal/ops/transport/object_storage_handler.go
@@ -0,0 +1,235 @@
+package transport
+
+import (
+	"io"
+	"net/http"
+	"strconv"
+	"strings"
+
+	"github.com/gin-gonic/gin"
+
+	"github.com/geo-platform/tenant-api/internal/ops/app"
+	"github.com/geo-platform/tenant-api/internal/shared/objectstorage"
+	"github.com/geo-platform/tenant-api/internal/shared/response"
+)
+
+const (
+	maxObjectStorageUploadBytes    = 500 * 1024 * 1024
+	maxObjectStorageMultipartBytes = maxObjectStorageUploadBytes + 1*1024*1024
+)
+
+type moveObjectStorageObjectRequest struct {
+	SourceKey      string `json:"source_key" binding:"required"`
+	DestinationKey string `json:"destination_key" binding:"required"`
+	Overwrite      bool   `json:"overwrite"`
+	DeleteSource   *bool  `json:"delete_source"`
+}
+
+type createObjectStorageFolderRequest struct {
+	Prefix string `json:"prefix" binding:"required"`
+}
+
+func listObjectStorageObjectsHandler(svc *app.ObjectStorageService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		size, _ := strconv.Atoi(c.DefaultQuery("size", "100"))
+		result, err := svc.List(c.Request.Context(), app.ObjectStorageListInput{
+			Prefix:            c.Query("prefix"),
+			Keyword:           c.Query("keyword"),
+			ContinuationToken: c.Query("continuation_token"),
+			StartAfter:        c.Query("start_after"),
+			Recursive:         c.Query("recursive") == "true",
+			Size:              size,
+		})
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, result)
+	}
+}
+
+func getObjectStorageUsageHandler(svc *app.ObjectStorageService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		result, err := svc.Usage(c.Request.Context())
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, result)
+	}
+}
+
+func getObjectStorageObjectHandler(svc *app.ObjectStorageService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		result, err := svc.Get(c.Request.Context(), c.Query("key"))
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, result)
+	}
+}
+
+func resolveObjectStorageObjectURLHandler(svc *app.ObjectStorageService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		urlValue, err := svc.ResolvePublicURL(c.Request.Context(), c.Query("key"))
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, gin.H{"url": urlValue})
+	}
+}
+
+func resolveObjectStorageObjectDownloadURLHandler(svc *app.ObjectStorageService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		urlValue, err := svc.ResolveDownloadURL(c.Request.Context(), c.Query("key"))
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, gin.H{"url": urlValue})
+	}
+}
+
+func downloadObjectStorageObjectHandler(svc *app.ObjectStorageService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		key := c.Query("key")
+		content, info, err := svc.Download(c.Request.Context(), key)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		c.Header("Cache-Control", "no-store")
+		c.Header("Content-Disposition", objectStorageDownloadDisposition(key))
+		c.Data(http.StatusOK, objectStorageDownloadContentType(info, content), content)
+	}
+}
+
+func uploadObjectStorageObjectHandler(svc *app.ObjectStorageService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		if c.Request.ContentLength > maxObjectStorageMultipartBytes {
+			response.Error(c, response.ErrBadRequest(40095, "object_storage_file_too_large", "单个对象不能超过 500MB"))
+			return
+		}
+		c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, maxObjectStorageMultipartBytes)
+
+		fileHeader, err := c.FormFile("file")
+		if err != nil {
+			if strings.Contains(err.Error(), "request body too large") {
+				response.Error(c, response.ErrBadRequest(40095, "object_storage_file_too_large", "单个对象不能超过 500MB"))
+				return
+			}
+			response.Error(c, response.ErrBadRequest(40094, "object_storage_file_required", "请选择要上传的文件"))
+			return
+		}
+		file, err := fileHeader.Open()
+		if err != nil {
+			response.Error(c, response.ErrBadRequest(40094, "object_storage_file_open_failed", "文件读取失败"))
+			return
+		}
+		defer file.Close()
+
+		content, err := io.ReadAll(io.LimitReader(file, maxObjectStorageUploadBytes+1))
+		if err != nil {
+			response.Error(c, response.ErrBadRequest(40094, "object_storage_file_read_failed", "文件读取失败"))
+			return
+		}
+		if len(content) > maxObjectStorageUploadBytes {
+			response.Error(c, response.ErrBadRequest(40095, "object_storage_file_too_large", "单个对象不能超过 500MB"))
+			return
+		}
+		result, err := svc.Upload(c.Request.Context(), actorFromGin(c), app.ObjectStorageUploadInput{
+			ObjectKey:   c.PostForm("key"),
+			FileName:    fileHeader.Filename,
+			Content:     content,
+			ContentType: c.PostForm("content_type"),
+			Overwrite:   c.PostForm("overwrite") == "true",
+		})
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, result)
+	}
+}
+
+func moveObjectStorageObjectHandler(svc *app.ObjectStorageService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		var body moveObjectStorageObjectRequest
+		if err := c.ShouldBindJSON(&body); err != nil {
+			response.Error(c, response.ErrBadRequest(40000, "invalid_payload", err.Error()))
+			return
+		}
+		deleteSource := true
+		if body.DeleteSource != nil {
+			deleteSource = *body.DeleteSource
+		}
+		result, err := svc.Move(c.Request.Context(), actorFromGin(c), app.ObjectStorageMoveInput{
+			SourceKey:      body.SourceKey,
+			DestinationKey: body.DestinationKey,
+			Overwrite:      body.Overwrite,
+			DeleteSource:   deleteSource,
+		})
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, result)
+	}
+}
+
+func deleteObjectStorageObjectHandler(svc *app.ObjectStorageService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		key := c.Query("key")
+		if err := svc.Delete(c.Request.Context(), actorFromGin(c), key); err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, gin.H{"key": key})
+	}
+}
+
+func createObjectStorageFolderHandler(svc *app.ObjectStorageService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		var body createObjectStorageFolderRequest
+		if err := c.ShouldBindJSON(&body); err != nil {
+			response.Error(c, response.ErrBadRequest(40000, "invalid_payload", err.Error()))
+			return
+		}
+		result, err := svc.CreateFolder(c.Request.Context(), actorFromGin(c), app.ObjectStorageFolderCreateInput{
+			Prefix: body.Prefix,
+		})
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, result)
+	}
+}
+
+func deleteObjectStorageFolderHandler(svc *app.ObjectStorageService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		prefix := c.Query("prefix")
+		result, err := svc.DeleteFolder(c.Request.Context(), actorFromGin(c), prefix)
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, result)
+	}
+}
+
+func objectStorageDownloadDisposition(key string) string {
+	return objectstorage.DownloadContentDisposition(key)
+}
+
+func objectStorageDownloadContentType(info *objectstorage.ObjectInfo, content []byte) string {
+	if info != nil && strings.TrimSpace(info.ContentType) != "" {
+		return info.ContentType
+	}
+	if len(content) > 0 {
+		return http.DetectContentType(content)
+	}
+	return "application/octet-stream"
+}
diff --git a/server/internal/ops/transport/router.go b/server/internal/ops/transport/router.go
index 97340f8..b1557d9 100644
--- a/server/internal/ops/transport/router.go
+++ b/server/internal/ops/transport/router.go
@@ -9,25 +9,27 @@ import (
 	sharedconfig "github.com/geo-platform/tenant-api/internal/shared/config"
 	"github.com/geo-platform/tenant-api/internal/shared/middleware"
 	"github.com/geo-platform/tenant-api/internal/shared/response"
+	"github.com/geo-platform/tenant-api/internal/shared/swagger"
 )
 
 type Deps struct {
-	Engine       *gin.Engine
-	Server       sharedconfig.ServerConfig
-	Logger       *zap.Logger
-	DB           *pgxpool.Pool
-	MonitoringDB *pgxpool.Pool
-	Issuer       *app.TokenIssuer
-	Auth         *app.AuthService
-	Accounts     *app.AccountService
-	AdminUsers   *app.AdminUserService
-	Jobs         *app.JobService
-	KolSubs      *app.KolSubscriptionService
-	Audits       *app.AuditService
-	SiteDomains  *app.SiteDomainMappingService
-	Releases     *app.DesktopClientReleaseService
-	Compliance   *app.ComplianceService
-	Scheduler    *app.SchedulerService
+	Engine        *gin.Engine
+	Server        sharedconfig.ServerConfig
+	Logger        *zap.Logger
+	DB            *pgxpool.Pool
+	MonitoringDB  *pgxpool.Pool
+	Issuer        *app.TokenIssuer
+	Auth          *app.AuthService
+	Accounts      *app.AccountService
+	AdminUsers    *app.AdminUserService
+	Jobs          *app.JobService
+	KolSubs       *app.KolSubscriptionService
+	Audits        *app.AuditService
+	SiteDomains   *app.SiteDomainMappingService
+	Releases      *app.DesktopClientReleaseService
+	ObjectStorage *app.ObjectStorageService
+	Compliance    *app.ComplianceService
+	Scheduler     *app.SchedulerService
 }
 
 func (d Deps) ServerAllowedOrigins() []string {
@@ -132,11 +134,25 @@ func RegisterRoutes(d Deps) {
 		authed.GET("/scheduler/instances", listSchedulerInstancesHandler(d.Scheduler))
 
 		authed.GET("/site-domain-mappings", listSiteDomainMappingsHandler(d.SiteDomains))
+		authed.GET("/site-domain-mappings/export", exportSiteDomainMappingsHandler(d.SiteDomains))
+		authed.POST("/site-domain-mappings/import", importSiteDomainMappingsHandler(d.SiteDomains))
 		authed.POST("/site-domain-mappings", createSiteDomainMappingHandler(d.SiteDomains))
 		authed.PATCH("/site-domain-mappings/:id", updateSiteDomainMappingHandler(d.SiteDomains))
 		authed.POST("/site-domain-mappings/:id/active", setSiteDomainMappingActiveHandler(d.SiteDomains))
 		authed.DELETE("/site-domain-mappings/:id", deleteSiteDomainMappingHandler(d.SiteDomains))
 
+		authed.GET("/object-storage/objects", listObjectStorageObjectsHandler(d.ObjectStorage))
+		authed.GET("/object-storage/usage", getObjectStorageUsageHandler(d.ObjectStorage))
+		authed.GET("/object-storage/objects/detail", getObjectStorageObjectHandler(d.ObjectStorage))
+		authed.GET("/object-storage/objects/url", resolveObjectStorageObjectURLHandler(d.ObjectStorage))
+		authed.GET("/object-storage/objects/download-url", resolveObjectStorageObjectDownloadURLHandler(d.ObjectStorage))
+		authed.GET("/object-storage/objects/download", downloadObjectStorageObjectHandler(d.ObjectStorage))
+		authed.POST("/object-storage/objects/upload", uploadObjectStorageObjectHandler(d.ObjectStorage))
+		authed.POST("/object-storage/objects/move", moveObjectStorageObjectHandler(d.ObjectStorage))
+		authed.DELETE("/object-storage/objects", deleteObjectStorageObjectHandler(d.ObjectStorage))
+		authed.POST("/object-storage/folders", createObjectStorageFolderHandler(d.ObjectStorage))
+		authed.DELETE("/object-storage/folders", deleteObjectStorageFolderHandler(d.ObjectStorage))
+
 		authed.GET("/desktop-client/releases", listDesktopClientReleasesHandler(d.Releases))
 		authed.POST("/desktop-client/releases/upload", uploadDesktopClientReleaseHandler(d.Releases))
 		authed.POST("/desktop-client/releases", createDesktopClientReleaseHandler(d.Releases))
@@ -166,4 +182,11 @@ func RegisterRoutes(d Deps) {
 		compliance.GET("/stats", complianceStatsHandler(d.Compliance))
 		compliance.GET("/records", listComplianceRecordsHandler(d.Compliance))
 	}
+
+	if swagger.EnabledForMode(d.Server.Mode) {
+		swagger.Register(d.Engine, swagger.Config{
+			Title:   "省心推 Ops API",
+			Version: "dev",
+		})
+	}
 }
diff --git a/server/internal/ops/transport/site_domain_mapping_handler.go b/server/internal/ops/transport/site_domain_mapping_handler.go
index ceb3b83..7931bf5 100644
--- a/server/internal/ops/transport/site_domain_mapping_handler.go
+++ b/server/internal/ops/transport/site_domain_mapping_handler.go
@@ -1,7 +1,11 @@
 package transport
 
 import (
+	"fmt"
+	"io"
+	"net/http"
 	"strconv"
+	"time"
 
 	"github.com/gin-gonic/gin"
 
@@ -38,6 +42,58 @@ func listSiteDomainMappingsHandler(svc *app.SiteDomainMappingService) gin.Handle
 	}
 }
 
+func exportSiteDomainMappingsHandler(svc *app.SiteDomainMappingService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		data, err := svc.ExportCSV(c.Request.Context(), actorFromGin(c), app.SiteDomainMappingListInput{
+			Keyword:  c.Query("keyword"),
+			IsActive: parseOptionalBoolQuery(c.Query("is_active")),
+		})
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		fileName := fmt.Sprintf("site-domain-mappings-%s.csv", time.Now().Format("20060102150405"))
+		c.Header("Content-Type", "text/csv; charset=utf-8")
+		c.Header("Content-Disposition", fmt.Sprintf(`attachment; filename="%s"`, fileName))
+		c.Data(http.StatusOK, "text/csv; charset=utf-8", data)
+	}
+}
+
+func importSiteDomainMappingsHandler(svc *app.SiteDomainMappingService) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		fileHeader, err := c.FormFile("file")
+		if err != nil {
+			response.Error(c, response.ErrBadRequest(40057, "missing_site_domain_mapping_import_file", "请选择 CSV 文件"))
+			return
+		}
+		file, err := fileHeader.Open()
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		defer file.Close()
+
+		content, err := io.ReadAll(io.LimitReader(file, 2*1024*1024+1))
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		if len(content) > 2*1024*1024 {
+			response.Error(c, response.ErrBadRequest(40058, "site_domain_mapping_import_file_too_large", "CSV 文件不能超过 2MB"))
+			return
+		}
+
+		result, err := svc.ImportCSV(c.Request.Context(), actorFromGin(c), app.SiteDomainMappingImportInput{
+			Content: content,
+		})
+		if err != nil {
+			response.Error(c, err)
+			return
+		}
+		response.Success(c, result)
+	}
+}
+
 func createSiteDomainMappingHandler(svc *app.SiteDomainMappingService) gin.HandlerFunc {
 	return func(c *gin.Context) {
 		var body siteDomainMappingRequest
diff --git a/server/internal/shared/bootstrap/http.go b/server/internal/shared/bootstrap/http.go
index e5377d2..601168b 100644
--- a/server/internal/shared/bootstrap/http.go
+++ b/server/internal/shared/bootstrap/http.go
@@ -8,12 +8,15 @@ import (
 	"github.com/geo-platform/tenant-api/internal/shared/config"
 )
 
+const MaxMultipartMemory = 8 << 20
+
 func NewEngine(server config.ServerConfig) (*gin.Engine, error) {
 	config.NormalizeServerConfig(&server)
 	if server.Mode == "release" {
 		gin.SetMode(gin.ReleaseMode)
 	}
 	engine := gin.New()
+	engine.MaxMultipartMemory = MaxMultipartMemory
 	engine.ForwardedByClientIP = true
 	engine.RemoteIPHeaders = []string{"X-Forwarded-For", "X-Real-IP"}
 	if err := engine.SetTrustedProxies(server.TrustedProxies); err != nil {
diff --git a/server/internal/shared/bootstrap/http_test.go b/server/internal/shared/bootstrap/http_test.go
index c2980fb..08587d1 100644
--- a/server/internal/shared/bootstrap/http_test.go
+++ b/server/internal/shared/bootstrap/http_test.go
@@ -20,6 +20,7 @@ func TestNewEngineUsesForwardedClientIPFromTrustedProxy(t *testing.T) {
 		TrustedProxies: []string{"10.42.0.0/16"},
 	})
 	require.NoError(t, err)
+	require.Equal(t, int64(MaxMultipartMemory), engine.MaxMultipartMemory)
 
 	engine.GET("/ip", func(c *gin.Context) {
 		c.String(http.StatusOK, c.ClientIP())
diff --git a/server/internal/shared/config/config.go b/server/internal/shared/config/config.go
index 8ca4b59..6723cfc 100644
--- a/server/internal/shared/config/config.go
+++ b/server/internal/shared/config/config.go
@@ -285,17 +285,18 @@ type QdrantConfig struct {
 }
 
 type ObjectStorageConfig struct {
-	Provider      string        `mapstructure:"provider"`
-	Endpoint      string        `mapstructure:"endpoint"`
-	AccessKey     string        `mapstructure:"access_key"`
-	SecretKey     string        `mapstructure:"secret_key"`
-	Bucket        string        `mapstructure:"bucket"`
-	UseSSL        bool          `mapstructure:"use_ssl"`
-	PublicBaseURL string        `mapstructure:"public_base_url"`
-	BucketACL     string        `mapstructure:"bucket_acl"`
-	ObjectACL     string        `mapstructure:"object_acl"`
-	SignedURLTTL  time.Duration `mapstructure:"signed_url_ttl"`
-	Region        string        `mapstructure:"region"`
+	Provider       string        `mapstructure:"provider"`
+	Endpoint       string        `mapstructure:"endpoint"`
+	AccessKey      string        `mapstructure:"access_key"`
+	SecretKey      string        `mapstructure:"secret_key"`
+	Bucket         string        `mapstructure:"bucket"`
+	UseSSL         bool          `mapstructure:"use_ssl"`
+	PublicBaseURL  string        `mapstructure:"public_base_url"`
+	BucketACL      string        `mapstructure:"bucket_acl"`
+	ObjectACL      string        `mapstructure:"object_acl"`
+	SignedURLTTL   time.Duration `mapstructure:"signed_url_ttl"`
+	Region         string        `mapstructure:"region"`
+	ForcePathStyle bool          `mapstructure:"force_path_style"`
 }
 
 type JWTConfig struct {
@@ -971,6 +972,9 @@ func applyEnvOverrides(cfg *Config) {
 	if region, ok := lookupNonEmptyEnv("OBJECT_STORAGE_REGION"); ok {
 		cfg.ObjectStorage.Region = region
 	}
+	if forcePathStyle, ok := lookupBoolEnv("OBJECT_STORAGE_FORCE_PATH_STYLE"); ok {
+		cfg.ObjectStorage.ForcePathStyle = forcePathStyle
+	}
 	if useSSL, ok := lookupBoolEnv("OBJECT_STORAGE_USE_SSL"); ok {
 		cfg.ObjectStorage.UseSSL = useSSL
 	}
diff --git a/server/internal/shared/config/config_test.go b/server/internal/shared/config/config_test.go
index 040b46c..62c43c9 100644
--- a/server/internal/shared/config/config_test.go
+++ b/server/internal/shared/config/config_test.go
@@ -112,12 +112,14 @@ func TestLoadAppliesObjectStorageEnvOverrides(t *testing.T) {
 	t.Setenv("OBJECT_STORAGE_BUCKET_ACL", "private")
 	t.Setenv("OBJECT_STORAGE_OBJECT_ACL", "public-read")
 	t.Setenv("OBJECT_STORAGE_SIGNED_URL_TTL", "45m")
+	t.Setenv("OBJECT_STORAGE_FORCE_PATH_STYLE", "true")
 
 	configPath := writeTestConfig(t, `
 object_storage:
   bucket_acl: public-read
   object_acl: private
   signed_url_ttl: 10m
+  force_path_style: false
 `)
 
 	cfg, err := Load(configPath)
@@ -134,6 +136,9 @@ object_storage:
 	if cfg.ObjectStorage.SignedURLTTL != 45*time.Minute {
 		t.Fatalf("expected env signed url ttl, got %s", cfg.ObjectStorage.SignedURLTTL)
 	}
+	if !cfg.ObjectStorage.ForcePathStyle {
+		t.Fatal("expected env force path style true")
+	}
 }
 
 func TestLoadAppliesBrandLibraryDefaults(t *testing.T) {
diff --git a/server/internal/shared/objectstorage/aliyun.go b/server/internal/shared/objectstorage/aliyun.go
index 00e45a4..d357129 100644
--- a/server/internal/shared/objectstorage/aliyun.go
+++ b/server/internal/shared/objectstorage/aliyun.go
@@ -5,6 +5,8 @@ import (
 	"context"
 	"fmt"
 	"io"
+	"net/http"
+	"strconv"
 	"strings"
 	"time"
 
@@ -296,6 +298,180 @@ func (c *aliyunClient) PublicURL(objectKey string) (string, error) {
 	return buildPublicURL(c.cfg, objectKey, true)
 }
 
+func (c *aliyunClient) PublicReadableURL(objectKey string) (string, error) {
+	if err := c.Validate(); err != nil {
+		return "", err
+	}
+	publicRead, err := c.isPublicReadable()
+	if err != nil {
+		return "", err
+	}
+	if !publicRead {
+		return "", ErrObjectNotPublic
+	}
+	return buildPublicURL(c.cfg, objectKey, true)
+}
+
+func (c *aliyunClient) DownloadURL(objectKey string) (string, error) {
+	if err := c.Validate(); err != nil {
+		return "", err
+	}
+	return c.signedURL(objectKey, oss.ResponseContentDisposition(downloadContentDisposition(objectKey)))
+}
+
+func (c *aliyunClient) Usage(ctx context.Context) (*UsageInfo, error) {
+	if err := c.Validate(); err != nil {
+		return nil, err
+	}
+	stat, err := c.client.GetBucketStat(c.bucket)
+	if err != nil {
+		c.logError(ctx, "aliyun get bucket stat failed",
+			zap.String("bucket", c.bucket),
+			zap.Error(err),
+		)
+		return nil, fmt.Errorf("get aliyun bucket stat: %w", err)
+	}
+	return &UsageInfo{
+		Available:   true,
+		Provider:    "aliyun",
+		StorageSize: stat.Storage,
+		ObjectCount: stat.ObjectCount,
+	}, nil
+}
+
+func (c *aliyunClient) List(ctx context.Context, in ListInput) (*ListResult, error) {
+	if err := c.Validate(); err != nil {
+		return nil, err
+	}
+	bucket, err := c.client.Bucket(c.bucket)
+	if err != nil {
+		return nil, fmt.Errorf("get aliyun bucket: %w", err)
+	}
+
+	limit := in.Limit
+	if limit <= 0 || limit > 1000 {
+		limit = 100
+	}
+	delimiter := strings.TrimSpace(in.Delimiter)
+	if delimiter == "" && !in.Recursive {
+		delimiter = "/"
+	}
+	options := []oss.Option{
+		oss.Prefix(normalizeObjectKeyPath(in.Prefix)),
+		oss.MaxKeys(limit),
+	}
+	if delimiter != "" {
+		options = append(options, oss.Delimiter(delimiter))
+	}
+	if token := strings.TrimSpace(in.ContinuationToken); token != "" {
+		options = append(options, oss.ContinuationToken(token))
+	}
+	if startAfter := normalizeObjectKeyPath(in.StartAfter); startAfter != "" {
+		options = append(options, oss.StartAfter(startAfter))
+	}
+
+	result, err := bucket.ListObjectsV2(options...)
+	if err != nil {
+		c.logError(ctx, "aliyun list objects failed",
+			zap.String("bucket", c.bucket),
+			zap.String("prefix", in.Prefix),
+			zap.Error(err),
+		)
+		return nil, fmt.Errorf("list aliyun objects: %w", err)
+	}
+
+	out := &ListResult{
+		Objects:               make([]ObjectInfo, 0, len(result.Objects)),
+		CommonPrefixes:        append([]string(nil), result.CommonPrefixes...),
+		ContinuationToken:     result.ContinuationToken,
+		NextContinuationToken: result.NextContinuationToken,
+		IsTruncated:           result.IsTruncated,
+		Prefix:                result.Prefix,
+		Delimiter:             result.Delimiter,
+	}
+	for _, item := range result.Objects {
+		out.Objects = append(out.Objects, ObjectInfo{
+			Key:          item.Key,
+			Size:         item.Size,
+			ETag:         strings.Trim(item.ETag, `"`),
+			LastModified: item.LastModified,
+			StorageClass: item.StorageClass,
+		})
+	}
+	return out, nil
+}
+
+func (c *aliyunClient) Stat(ctx context.Context, objectKey string) (*ObjectInfo, error) {
+	if err := c.Validate(); err != nil {
+		return nil, err
+	}
+	objectKey = normalizeObjectKeyPath(objectKey)
+	if objectKey == "" {
+		return nil, fmt.Errorf("object key is required")
+	}
+	bucket, err := c.client.Bucket(c.bucket)
+	if err != nil {
+		return nil, fmt.Errorf("get aliyun bucket: %w", err)
+	}
+	header, err := bucket.GetObjectDetailedMeta(objectKey)
+	if err != nil {
+		c.logError(ctx, "aliyun stat object failed",
+			zap.String("bucket", c.bucket),
+			zap.String("object_key", objectKey),
+			zap.Error(err),
+		)
+		if isAliyunObjectNotFound(err) {
+			return nil, fmt.Errorf("%w: %s", ErrObjectNotFound, objectKey)
+		}
+		return nil, fmt.Errorf("stat aliyun object: %w", err)
+	}
+	return aliyunHeaderToObjectInfo(objectKey, header), nil
+}
+
+func (c *aliyunClient) Copy(ctx context.Context, sourceKey, destinationKey string) error {
+	if err := c.Validate(); err != nil {
+		return err
+	}
+	sourceKey = normalizeObjectKeyPath(sourceKey)
+	destinationKey = normalizeObjectKeyPath(destinationKey)
+	if sourceKey == "" || destinationKey == "" {
+		return fmt.Errorf("source and destination object keys are required")
+	}
+	if sourceKey == destinationKey {
+		return nil
+	}
+	bucket, err := c.client.Bucket(c.bucket)
+	if err != nil {
+		return fmt.Errorf("get aliyun bucket: %w", err)
+	}
+	if _, err := bucket.CopyObject(sourceKey, destinationKey); err != nil {
+		c.logError(ctx, "aliyun copy object failed",
+			zap.String("bucket", c.bucket),
+			zap.String("source_key", sourceKey),
+			zap.String("destination_key", destinationKey),
+			zap.Error(err),
+		)
+		if isAliyunObjectNotFound(err) {
+			return fmt.Errorf("%w: %s", ErrObjectNotFound, sourceKey)
+		}
+		return fmt.Errorf("copy aliyun object: %w", err)
+	}
+	return nil
+}
+
+func aliyunHeaderToObjectInfo(objectKey string, header http.Header) *ObjectInfo {
+	size, _ := strconv.ParseInt(strings.TrimSpace(header.Get(oss.HTTPHeaderContentLength)), 10, 64)
+	lastModified, _ := http.ParseTime(header.Get(oss.HTTPHeaderLastModified))
+	return &ObjectInfo{
+		Key:          objectKey,
+		Size:         size,
+		ETag:         strings.Trim(header.Get(oss.HTTPHeaderEtag), `"`),
+		LastModified: lastModified,
+		ContentType:  header.Get(oss.HTTPHeaderContentType),
+		StorageClass: header.Get(oss.HTTPHeaderOssStorageClass),
+	}
+}
+
 func (c *aliyunClient) isPublicReadable() (bool, error) {
 	objectACL := strings.ToLower(strings.TrimSpace(c.cfg.ObjectACL))
 	if isPublicReadACL(objectACL) {
@@ -317,7 +493,7 @@ func (c *aliyunClient) isPublicReadable() (bool, error) {
 	return isPublicReadACL(result.ACL), nil
 }
 
-func (c *aliyunClient) signedURL(objectKey string) (string, error) {
+func (c *aliyunClient) signedURL(objectKey string, options ...oss.Option) (string, error) {
 	objectKey = normalizeObjectKeyPath(objectKey)
 	if objectKey == "" {
 		return "", fmt.Errorf("object key is required")
@@ -330,7 +506,7 @@ func (c *aliyunClient) signedURL(objectKey string) (string, error) {
 	if ttl <= 0 {
 		ttl = 30 * time.Minute
 	}
-	return bucket.SignURL(objectKey, oss.HTTPGet, int64(ttl.Seconds()))
+	return bucket.SignURL(objectKey, oss.HTTPGet, int64(ttl.Seconds()), options...)
 }
 
 func isPublicReadACL(acl string) bool {
diff --git a/server/internal/shared/objectstorage/client.go b/server/internal/shared/objectstorage/client.go
index 28e6078..c212e3e 100644
--- a/server/internal/shared/objectstorage/client.go
+++ b/server/internal/shared/objectstorage/client.go
@@ -5,6 +5,7 @@ import (
 	"errors"
 	"fmt"
 	"strings"
+	"time"
 
 	"go.uber.org/zap"
 
@@ -13,6 +14,8 @@ import (
 
 var ErrNotConfigured = errors.New("object storage is not configured")
 var ErrObjectNotFound = errors.New("object storage object not found")
+var ErrObjectNotPublic = errors.New("object storage object is not publicly readable")
+var ErrUsageUnsupported = errors.New("object storage usage stat is not supported")
 
 type Client interface {
 	Validate() error
@@ -21,6 +24,57 @@ type Client interface {
 	Exists(ctx context.Context, objectKey string) (bool, error)
 	Delete(ctx context.Context, objectKey string) error
 	PublicURL(objectKey string) (string, error)
+	DownloadURL(objectKey string) (string, error)
+}
+
+type ManagementClient interface {
+	Client
+	List(ctx context.Context, in ListInput) (*ListResult, error)
+	Stat(ctx context.Context, objectKey string) (*ObjectInfo, error)
+	Copy(ctx context.Context, sourceKey, destinationKey string) error
+}
+
+type UsageClient interface {
+	Usage(ctx context.Context) (*UsageInfo, error)
+}
+
+type PublicReadableClient interface {
+	PublicReadableURL(objectKey string) (string, error)
+}
+
+type ListInput struct {
+	Prefix            string
+	ContinuationToken string
+	StartAfter        string
+	Delimiter         string
+	Limit             int
+	Recursive         bool
+}
+
+type ListResult struct {
+	Objects               []ObjectInfo `json:"objects"`
+	CommonPrefixes        []string     `json:"common_prefixes"`
+	ContinuationToken     string       `json:"continuation_token,omitempty"`
+	NextContinuationToken string       `json:"next_continuation_token,omitempty"`
+	IsTruncated           bool         `json:"is_truncated"`
+	Prefix                string       `json:"prefix"`
+	Delimiter             string       `json:"delimiter"`
+}
+
+type ObjectInfo struct {
+	Key          string    `json:"key"`
+	Size         int64     `json:"size"`
+	ETag         string    `json:"etag,omitempty"`
+	LastModified time.Time `json:"last_modified"`
+	ContentType  string    `json:"content_type,omitempty"`
+	StorageClass string    `json:"storage_class,omitempty"`
+}
+
+type UsageInfo struct {
+	Available   bool   `json:"available"`
+	Provider    string `json:"provider"`
+	StorageSize int64  `json:"storage_size"`
+	ObjectCount int64  `json:"object_count"`
 }
 
 func New(cfg config.ObjectStorageConfig, logger *zap.Logger) Client {
@@ -28,7 +82,7 @@ func New(cfg config.ObjectStorageConfig, logger *zap.Logger) Client {
 	switch provider {
 	case "", "disabled":
 		return disabledClient{reason: "object storage is disabled"}
-	case "minio", "mino":
+	case "minio", "mino", "r2", "cloudflare_r2", "cloudflare-r2", "s3", "aws_s3", "aws-s3", "custom", "custom_s3", "custom-s3":
 		return NewMinIOClient(cfg, logger)
 	case "aliyun", "aliyun_oss", "aliyun-oss", "oss":
 		return NewAliyunClient(cfg, logger)
@@ -67,3 +121,23 @@ func (c disabledClient) Delete(context.Context, string) error {
 func (c disabledClient) PublicURL(string) (string, error) {
 	return "", c.Validate()
 }
+
+func (c disabledClient) DownloadURL(string) (string, error) {
+	return "", c.Validate()
+}
+
+func (c disabledClient) List(context.Context, ListInput) (*ListResult, error) {
+	return nil, c.Validate()
+}
+
+func (c disabledClient) Stat(context.Context, string) (*ObjectInfo, error) {
+	return nil, c.Validate()
+}
+
+func (c disabledClient) Copy(context.Context, string, string) error {
+	return c.Validate()
+}
+
+func (c disabledClient) Usage(context.Context) (*UsageInfo, error) {
+	return nil, c.Validate()
+}
diff --git a/server/internal/shared/objectstorage/minio.go b/server/internal/shared/objectstorage/minio.go
index 159dfec..825f7e6 100644
--- a/server/internal/shared/objectstorage/minio.go
+++ b/server/internal/shared/objectstorage/minio.go
@@ -5,7 +5,9 @@ import (
 	"context"
 	"fmt"
 	"io"
+	"net/url"
 	"strings"
+	"time"
 
 	"github.com/minio/minio-go/v7"
 	"github.com/minio/minio-go/v7/pkg/credentials"
@@ -32,10 +34,17 @@ func NewMinIOClient(cfg config.ObjectStorageConfig, logger *zap.Logger) Client {
 		return disabledClient{reason: "missing object_storage minio endpoint/access_key/secret_key/bucket"}
 	}
 
+	region := normalizeMinIORegion(cfg)
+	bucketLookup := minio.BucketLookupAuto
+	if cfg.ForcePathStyle || isPathStyleProvider(cfg.Provider) {
+		bucketLookup = minio.BucketLookupPath
+	}
+
 	client, err := minio.New(endpoint, &minio.Options{
-		Creds:  credentials.NewStaticV4(accessKey, secretKey, ""),
-		Secure: cfg.UseSSL,
-		Region: strings.TrimSpace(cfg.Region),
+		Creds:        credentials.NewStaticV4(accessKey, secretKey, ""),
+		Secure:       cfg.UseSSL,
+		Region:       region,
+		BucketLookup: bucketLookup,
 	})
 	if err != nil {
 		return disabledClient{reason: fmt.Sprintf("init minio client failed: %v", err)}
@@ -44,12 +53,41 @@ func NewMinIOClient(cfg config.ObjectStorageConfig, logger *zap.Logger) Client {
 	return &minioClient{
 		client: client,
 		bucket: bucket,
-		region: strings.TrimSpace(cfg.Region),
+		region: region,
 		logger: logger,
 		cfg:    cfg,
 	}
 }
 
+func normalizeMinIORegion(cfg config.ObjectStorageConfig) string {
+	region := strings.TrimSpace(cfg.Region)
+	if region != "" {
+		return region
+	}
+	if isR2Provider(cfg.Provider) {
+		return "auto"
+	}
+	return ""
+}
+
+func isR2Provider(provider string) bool {
+	switch strings.ToLower(strings.TrimSpace(provider)) {
+	case "r2", "cloudflare_r2", "cloudflare-r2":
+		return true
+	default:
+		return false
+	}
+}
+
+func isPathStyleProvider(provider string) bool {
+	switch strings.ToLower(strings.TrimSpace(provider)) {
+	case "r2", "cloudflare_r2", "cloudflare-r2":
+		return true
+	default:
+		return false
+	}
+}
+
 func (c *minioClient) Validate() error {
 	if c == nil || c.client == nil {
 		return fmt.Errorf("%w: minio client is not initialized", ErrNotConfigured)
@@ -198,9 +236,167 @@ func (c *minioClient) PublicURL(objectKey string) (string, error) {
 	if err := c.Validate(); err != nil {
 		return "", err
 	}
+	if !c.isPublicReadable() {
+		return c.DownloadURL(objectKey)
+	}
 	return buildPublicURL(c.cfg, objectKey, false)
 }
 
+func (c *minioClient) PublicReadableURL(objectKey string) (string, error) {
+	if err := c.Validate(); err != nil {
+		return "", err
+	}
+	if !c.isPublicReadable() {
+		return "", ErrObjectNotPublic
+	}
+	return buildPublicURL(c.cfg, objectKey, false)
+}
+
+func (c *minioClient) isPublicReadable() bool {
+	return isPublicReadACL(c.cfg.ObjectACL) || isPublicReadACL(c.cfg.BucketACL)
+}
+
+func (c *minioClient) DownloadURL(objectKey string) (string, error) {
+	if err := c.Validate(); err != nil {
+		return "", err
+	}
+	objectKey = normalizeObjectKeyPath(objectKey)
+	if objectKey == "" {
+		return "", fmt.Errorf("object key is required")
+	}
+	ttl := c.cfg.SignedURLTTL
+	if ttl <= 0 {
+		ttl = 30 * time.Minute
+	}
+	params := url.Values{}
+	params.Set("response-content-disposition", downloadContentDisposition(objectKey))
+	u, err := c.client.PresignedGetObject(context.Background(), c.bucket, objectKey, ttl, params)
+	if err != nil {
+		return "", fmt.Errorf("presign minio download url: %w", err)
+	}
+	return u.String(), nil
+}
+
+func (c *minioClient) List(ctx context.Context, in ListInput) (*ListResult, error) {
+	if err := c.Validate(); err != nil {
+		return nil, err
+	}
+
+	limit := in.Limit
+	if limit <= 0 || limit > 1000 {
+		limit = 100
+	}
+	delimiter := strings.TrimSpace(in.Delimiter)
+	if delimiter == "" && !in.Recursive {
+		delimiter = "/"
+	}
+
+	core := minio.Core{Client: c.client}
+	result, err := core.ListObjectsV2(
+		c.bucket,
+		normalizeObjectKeyPath(in.Prefix),
+		normalizeObjectKeyPath(in.StartAfter),
+		strings.TrimSpace(in.ContinuationToken),
+		delimiter,
+		limit,
+	)
+	if err != nil {
+		c.logError(ctx, "minio list objects failed",
+			zap.String("bucket", c.bucket),
+			zap.String("prefix", in.Prefix),
+			zap.Error(err),
+		)
+		return nil, fmt.Errorf("list minio objects: %w", err)
+	}
+
+	out := &ListResult{
+		Objects:               make([]ObjectInfo, 0, len(result.Contents)),
+		CommonPrefixes:        make([]string, 0, len(result.CommonPrefixes)),
+		ContinuationToken:     result.ContinuationToken,
+		NextContinuationToken: result.NextContinuationToken,
+		IsTruncated:           result.IsTruncated,
+		Prefix:                result.Prefix,
+		Delimiter:             result.Delimiter,
+	}
+	for _, item := range result.Contents {
+		out.Objects = append(out.Objects, ObjectInfo{
+			Key:          item.Key,
+			Size:         item.Size,
+			ETag:         strings.Trim(item.ETag, `"`),
+			LastModified: item.LastModified,
+			ContentType:  item.ContentType,
+			StorageClass: item.StorageClass,
+		})
+	}
+	for _, prefix := range result.CommonPrefixes {
+		if prefix.Prefix != "" {
+			out.CommonPrefixes = append(out.CommonPrefixes, prefix.Prefix)
+		}
+	}
+	return out, nil
+}
+
+func (c *minioClient) Stat(ctx context.Context, objectKey string) (*ObjectInfo, error) {
+	if err := c.Validate(); err != nil {
+		return nil, err
+	}
+	objectKey = normalizeObjectKeyPath(objectKey)
+	if objectKey == "" {
+		return nil, fmt.Errorf("object key is required")
+	}
+	item, err := c.client.StatObject(ctx, c.bucket, objectKey, minio.StatObjectOptions{})
+	if err != nil {
+		c.logError(ctx, "minio stat object failed",
+			zap.String("bucket", c.bucket),
+			zap.String("object_key", objectKey),
+			zap.Error(err),
+		)
+		if isMinIOObjectNotFound(err) {
+			return nil, fmt.Errorf("%w: %s", ErrObjectNotFound, objectKey)
+		}
+		return nil, fmt.Errorf("stat minio object: %w", err)
+	}
+	return &ObjectInfo{
+		Key:          item.Key,
+		Size:         item.Size,
+		ETag:         strings.Trim(item.ETag, `"`),
+		LastModified: item.LastModified,
+		ContentType:  item.ContentType,
+		StorageClass: item.StorageClass,
+	}, nil
+}
+
+func (c *minioClient) Copy(ctx context.Context, sourceKey, destinationKey string) error {
+	if err := c.Validate(); err != nil {
+		return err
+	}
+	sourceKey = normalizeObjectKeyPath(sourceKey)
+	destinationKey = normalizeObjectKeyPath(destinationKey)
+	if sourceKey == "" || destinationKey == "" {
+		return fmt.Errorf("source and destination object keys are required")
+	}
+	if sourceKey == destinationKey {
+		return nil
+	}
+	_, err := c.client.CopyObject(ctx,
+		minio.CopyDestOptions{Bucket: c.bucket, Object: destinationKey},
+		minio.CopySrcOptions{Bucket: c.bucket, Object: sourceKey},
+	)
+	if err != nil {
+		c.logError(ctx, "minio copy object failed",
+			zap.String("bucket", c.bucket),
+			zap.String("source_key", sourceKey),
+			zap.String("destination_key", destinationKey),
+			zap.Error(err),
+		)
+		if isMinIOObjectNotFound(err) {
+			return fmt.Errorf("%w: %s", ErrObjectNotFound, sourceKey)
+		}
+		return fmt.Errorf("copy minio object: %w", err)
+	}
+	return nil
+}
+
 func (c *minioClient) logError(ctx context.Context, msg string, fields ...zap.Field) {
 	if c == nil || c.logger == nil {
 		return
diff --git a/server/internal/shared/objectstorage/reloadable.go b/server/internal/shared/objectstorage/reloadable.go
index 3f23095..ce5473c 100644
--- a/server/internal/shared/objectstorage/reloadable.go
+++ b/server/internal/shared/objectstorage/reloadable.go
@@ -47,6 +47,55 @@ func (c *ReloadableClient) PublicURL(objectKey string) (string, error) {
 	return c.snapshot().PublicURL(objectKey)
 }
 
+func (c *ReloadableClient) DownloadURL(objectKey string) (string, error) {
+	return c.snapshot().DownloadURL(objectKey)
+}
+
+func (c *ReloadableClient) List(ctx context.Context, in ListInput) (*ListResult, error) {
+	client := c.snapshot()
+	management, ok := client.(ManagementClient)
+	if !ok {
+		return nil, ErrNotConfigured
+	}
+	return management.List(ctx, in)
+}
+
+func (c *ReloadableClient) Stat(ctx context.Context, objectKey string) (*ObjectInfo, error) {
+	client := c.snapshot()
+	management, ok := client.(ManagementClient)
+	if !ok {
+		return nil, ErrNotConfigured
+	}
+	return management.Stat(ctx, objectKey)
+}
+
+func (c *ReloadableClient) Copy(ctx context.Context, sourceKey, destinationKey string) error {
+	client := c.snapshot()
+	management, ok := client.(ManagementClient)
+	if !ok {
+		return ErrNotConfigured
+	}
+	return management.Copy(ctx, sourceKey, destinationKey)
+}
+
+func (c *ReloadableClient) Usage(ctx context.Context) (*UsageInfo, error) {
+	client := c.snapshot()
+	usageClient, ok := client.(UsageClient)
+	if !ok {
+		return nil, ErrUsageUnsupported
+	}
+	return usageClient.Usage(ctx)
+}
+
+func (c *ReloadableClient) PublicReadableURL(objectKey string) (string, error) {
+	client := c.snapshot()
+	publicClient, ok := client.(PublicReadableClient)
+	if !ok {
+		return "", ErrObjectNotPublic
+	}
+	return publicClient.PublicReadableURL(objectKey)
+}
+
 func (c *ReloadableClient) snapshot() Client {
 	if c == nil {
 		return disabledClient{reason: "object storage client is nil"}
diff --git a/server/internal/shared/objectstorage/url.go b/server/internal/shared/objectstorage/url.go
index 78ed4d3..6d18e9c 100644
--- a/server/internal/shared/objectstorage/url.go
+++ b/server/internal/shared/objectstorage/url.go
@@ -3,6 +3,7 @@ package objectstorage
 import (
 	"fmt"
 	"net/url"
+	"path/filepath"
 	"strings"
 
 	"github.com/geo-platform/tenant-api/internal/shared/config"
@@ -65,6 +66,66 @@ func buildPublicURL(cfg config.ObjectStorageConfig, objectKey string, bucketInHo
 	return endpointURL.String(), nil
 }
 
+func DownloadContentDisposition(objectKey string) string {
+	name := strings.TrimSpace(filepath.Base(strings.TrimRight(objectKey, "/")))
+	if name == "" || name == "." || name == "/" || name == "\\" {
+		name = "object"
+	}
+	name = strings.Map(func(r rune) rune {
+		if r == '"' || r == '\\' || r == '\r' || r == '\n' {
+			return -1
+		}
+		return r
+	}, name)
+	if name == "" {
+		name = "object"
+	}
+	return fmt.Sprintf(
+		`attachment; filename="%s"; filename*=UTF-8''%s`,
+		asciiContentDispositionFileName(name),
+		url.PathEscape(name),
+	)
+}
+
+func downloadContentDisposition(objectKey string) string {
+	return DownloadContentDisposition(objectKey)
+}
+
+func asciiContentDispositionFileName(name string) string {
+	var builder strings.Builder
+	for _, r := range name {
+		if r < 0x20 || r >= 0x7f || r == '"' || r == '\\' {
+			continue
+		}
+		builder.WriteRune(r)
+	}
+
+	fallback := strings.TrimSpace(builder.String())
+	if fallback == "" || fallback == "." || fallback == ".." || strings.HasPrefix(fallback, ".") {
+		return "object" + safeASCIIExtension(name)
+	}
+	return fallback
+}
+
+func safeASCIIExtension(name string) string {
+	ext := filepath.Ext(name)
+	if ext == "" || ext == "." {
+		return ""
+	}
+	var builder strings.Builder
+	for _, r := range ext {
+		if r < 0x20 || r >= 0x7f || r == '"' || r == '\\' {
+			continue
+		}
+		builder.WriteRune(r)
+	}
+	ext = strings.TrimSpace(builder.String())
+	if !strings.HasPrefix(ext, ".") || ext == "." {
+		return ""
+	}
+	return ext
+}
+
 func parseURLWithScheme(raw string, defaultScheme string) (*url.URL, error) {
 	raw = strings.TrimSpace(raw)
 	if raw == "" {
diff --git a/server/internal/shared/objectstorage/url_test.go b/server/internal/shared/objectstorage/url_test.go
index 557e7e4..c7cad19 100644
--- a/server/internal/shared/objectstorage/url_test.go
+++ b/server/internal/shared/objectstorage/url_test.go
@@ -51,3 +51,23 @@ func TestNormalizeObjectKeyPathDecodesEncodedSegments(t *testing.T) {
 		t.Fatalf("object key = %q, want %q", got, want)
 	}
 }
+
+func TestDownloadContentDispositionUsesRFC5987FileName(t *testing.T) {
+	t.Parallel()
+
+	got := DownloadContentDisposition("reports/省心推 安装包.zip")
+	want := `attachment; filename="object.zip"; filename*=UTF-8''%E7%9C%81%E5%BF%83%E6%8E%A8%20%E5%AE%89%E8%A3%85%E5%8C%85.zip`
+	if got != want {
+		t.Fatalf("content disposition = %q, want %q", got, want)
+	}
+}
+
+func TestDownloadContentDispositionKeepsASCIIFileNameFallback(t *testing.T) {
+	t.Parallel()
+
+	got := DownloadContentDisposition(`reports/report "final".csv`)
+	want := `attachment; filename="report final.csv"; filename*=UTF-8''report%20final.csv`
+	if got != want {
+		t.Fatalf("content disposition = %q, want %q", got, want)
+	}
+}
diff --git a/server/internal/shared/swagger/descriptions.go b/server/internal/shared/swagger/descriptions.go
index bde8435..b769291 100644
--- a/server/internal/shared/swagger/descriptions.go
+++ b/server/internal/shared/swagger/descriptions.go
@@ -18,6 +18,110 @@ var routeDocs = map[string]routeDoc{
 	"GET /api/health/live":  {"存活探针", "Kubernetes liveness 探针，永远返回 200。"},
 	"GET /api/health/ready": {"就绪探针", "Kubernetes readiness 探针，依赖（数据库等）就绪后返回 200。"},
 
+	// --- Ops：认证与账号 ---
+	"GET /api/ops/auth/password-key": {"Ops 登录密码加密公钥", "返回 Ops 登录密码前端加密使用的临时公钥与 key_id。"},
+	"POST /api/ops/auth/login":       {"Ops 账号密码登录", "Ops 控制台账号密码登录，返回 access token。"},
+	"GET /api/ops/auth/me":           {"Ops 当前用户", "返回当前 Ops JWT 对应的账号信息。"},
+	"POST /api/ops/auth/password":    {"Ops 修改密码", "当前 Ops 用户修改自己的密码。"},
+
+	"GET /api/ops/accounts":               {"Ops 账号列表", "分页查询 Ops 管理员账号。"},
+	"POST /api/ops/accounts":              {"新建 Ops 账号", "创建新的 Ops 管理员账号。"},
+	"GET /api/ops/accounts/:id":           {"Ops 账号详情", "读取指定 Ops 管理员账号详情。"},
+	"PATCH /api/ops/accounts/:id":         {"更新 Ops 账号", "更新指定 Ops 管理员账号资料。"},
+	"POST /api/ops/accounts/:id/status":   {"切换 Ops 账号状态", "启用或停用指定 Ops 管理员账号。"},
+	"POST /api/ops/accounts/:id/password": {"重置 Ops 账号密码", "为指定 Ops 管理员账号重置登录密码。"},
+
+	"GET /api/ops/plans": {"租户套餐列表", "返回可分配给租户管理员的套餐列表。"},
+	"GET /api/ops/roles": {"Ops 角色列表", "返回 Ops 控制台可用角色列表。"},
+
+	"GET /api/ops/admin-users":                          {"租户管理员列表", "分页查询租户管理员账号。"},
+	"POST /api/ops/admin-users":                         {"新建租户管理员", "创建租户管理员账号。"},
+	"GET /api/ops/admin-users/:id":                      {"租户管理员详情", "读取租户管理员账号详情。"},
+	"PATCH /api/ops/admin-users/:id":                    {"更新租户管理员", "更新租户管理员基础资料。"},
+	"POST /api/ops/admin-users/:id/plan":                {"调整租户套餐", "调整租户管理员账号绑定的套餐。"},
+	"POST /api/ops/admin-users/:id/subscription-expiry": {"调整订阅到期时间", "更新租户管理员账号订阅到期时间。"},
+	"POST /api/ops/admin-users/:id/reset-plan-usage":    {"重置套餐用量", "重置租户管理员账号套餐用量。"},
+	"POST /api/ops/admin-users/:id/role":                {"调整租户角色", "调整租户管理员账号角色。"},
+	"POST /api/ops/admin-users/:id/kol":                 {"设置 KOL 身份", "设置租户管理员账号的 KOL 状态。"},
+	"POST /api/ops/admin-users/:id/status":              {"切换租户管理员状态", "启用或停用租户管理员账号。"},
+	"POST /api/ops/admin-users/:id/password":            {"重置租户管理员密码", "重置租户管理员账号登录密码。"},
+	"POST /api/ops/admin-users/:id/reset-login-lock":    {"解除登录锁定", "解除租户管理员账号的登录失败锁定。"},
+
+	// --- Ops：业务运营 ---
+	"GET /api/ops/kol/packages":                   {"KOL 套餐列表（Ops）", "Ops 查看 KOL 市场套餐。"},
+	"GET /api/ops/kol/subscriptions":              {"KOL 订阅列表（Ops）", "Ops 查看租户 KOL 订阅记录。"},
+	"POST /api/ops/kol/subscriptions/manual-bind": {"手动绑定 KOL 订阅", "Ops 为租户手动绑定 KOL 订阅。"},
+	"POST /api/ops/kol/subscriptions/:id/approve": {"审批 KOL 订阅", "Ops 审批指定 KOL 订阅。"},
+	"POST /api/ops/kol/subscriptions/:id/revoke":  {"撤销 KOL 订阅", "Ops 撤销指定 KOL 订阅。"},
+	"GET /api/ops/audits":                         {"审计日志列表", "分页查询 Ops 审计日志。"},
+	"GET /api/ops/jobs":                           {"任务列表（Ops）", "分页查询后台任务。"},
+	"GET /api/ops/jobs/:source/:id":               {"任务详情（Ops）", "读取指定来源与 ID 的任务详情。"},
+	"POST /api/ops/jobs/:source/:id/retry":        {"重试任务（Ops）", "对失败任务发起重试。"},
+	"POST /api/ops/jobs/:source/:id/cancel":       {"取消任务（Ops）", "取消指定后台任务。"},
+
+	// --- Ops：调度器 ---
+	"GET /api/ops/scheduler/jobs":               {"调度任务列表", "分页查询调度器任务。"},
+	"GET /api/ops/scheduler/jobs/:key":          {"调度任务详情", "读取指定调度任务详情。"},
+	"PATCH /api/ops/scheduler/jobs/:key":        {"更新调度任务", "更新调度任务配置。"},
+	"POST /api/ops/scheduler/jobs/:key/enable":  {"启用调度任务", "启用指定调度任务。"},
+	"POST /api/ops/scheduler/jobs/:key/disable": {"禁用调度任务", "禁用指定调度任务。"},
+	"POST /api/ops/scheduler/jobs/:key/run":     {"手动触发调度任务", "立即触发指定调度任务。"},
+	"POST /api/ops/scheduler/jobs/:key/dry-run": {"试运行调度任务", "以 dry-run 模式触发指定调度任务。"},
+	"GET /api/ops/scheduler/jobs/:key/runs":     {"调度运行历史", "查询指定调度任务运行历史。"},
+	"GET /api/ops/scheduler/instances":          {"调度器实例列表", "查询当前调度器实例状态。"},
+
+	// --- Ops：站点映射 ---
+	"GET /api/ops/site-domain-mappings":             {"站点域名映射列表", "分页查询站点域名映射。"},
+	"GET /api/ops/site-domain-mappings/export":      {"导出站点域名映射", "按筛选条件导出站点域名映射 CSV。"},
+	"POST /api/ops/site-domain-mappings/import":     {"导入站点域名映射", "Multipart 上传 CSV 批量导入站点域名映射。"},
+	"POST /api/ops/site-domain-mappings":            {"新建站点域名映射", "创建站点域名映射。"},
+	"PATCH /api/ops/site-domain-mappings/:id":       {"更新站点域名映射", "更新指定站点域名映射。"},
+	"POST /api/ops/site-domain-mappings/:id/active": {"切换站点域名映射状态", "启用或停用指定站点域名映射。"},
+	"DELETE /api/ops/site-domain-mappings/:id":      {"删除站点域名映射", "删除指定站点域名映射。"},
+
+	// --- Ops：对象存储 ---
+	"GET /api/ops/object-storage/objects":              {"对象存储列表", "按前缀、关键字和递归模式查询对象存储文件。"},
+	"GET /api/ops/object-storage/usage":                {"对象存储用量", "读取对象存储 Bucket 原生用量统计。"},
+	"GET /api/ops/object-storage/objects/detail":       {"对象详情", "读取对象元数据、公开访问地址和预览地址。"},
+	"GET /api/ops/object-storage/objects/url":          {"解析对象访问地址", "生成对象可访问 URL；私有 Bucket 返回短期签名地址。"},
+	"GET /api/ops/object-storage/objects/download-url": {"解析对象下载地址", "生成带下载文件名响应头的短期签名下载地址。"},
+	"GET /api/ops/object-storage/objects/download":     {"下载对象", "通过 Ops API 代理下载对象。"},
+	"POST /api/ops/object-storage/objects/upload":      {"上传对象", "Multipart 上传单个对象，服务端限制 500MB。"},
+	"POST /api/ops/object-storage/objects/move":        {"移动或重命名对象", "复制对象到目标 Key，可选择删除源对象。"},
+	"DELETE /api/ops/object-storage/objects":           {"删除对象", "删除指定 Object Key 的对象。"},
+	"POST /api/ops/object-storage/folders":             {"创建对象存储目录", "创建以 / 结尾的目录占位对象。"},
+	"DELETE /api/ops/object-storage/folders":           {"删除对象存储目录", "按前缀递归删除目录下对象。"},
+
+	// --- Ops：桌面客户端版本 ---
+	"GET /api/ops/desktop-client/releases":                  {"桌面客户端版本列表", "分页查询桌面客户端版本配置。"},
+	"POST /api/ops/desktop-client/releases/upload":          {"上传桌面客户端包", "Multipart 上传桌面客户端安装包或更新包。"},
+	"POST /api/ops/desktop-client/releases":                 {"新建桌面客户端版本", "创建桌面客户端版本配置。"},
+	"PATCH /api/ops/desktop-client/releases/:id":            {"更新桌面客户端版本", "更新桌面客户端版本配置。"},
+	"GET /api/ops/desktop-client/releases/:id/download-url": {"解析桌面客户端下载地址", "解析指定桌面客户端版本的下载地址。"},
+	"POST /api/ops/desktop-client/releases/:id/enabled":     {"切换桌面客户端版本状态", "启用或禁用指定桌面客户端版本。"},
+	"DELETE /api/ops/desktop-client/releases/:id":           {"删除桌面客户端版本", "删除指定桌面客户端版本配置。"},
+
+	// --- Ops：合规 ---
+	"GET /api/ops/compliance/dictionaries":                         {"合规词库列表", "分页查询内容合规词库。"},
+	"POST /api/ops/compliance/dictionaries":                        {"新建合规词库", "创建内容合规词库。"},
+	"PUT /api/ops/compliance/dictionaries/:id":                     {"更新合规词库", "更新内容合规词库。"},
+	"DELETE /api/ops/compliance/dictionaries/:id":                  {"删除合规词库", "删除内容合规词库。"},
+	"GET /api/ops/compliance/dictionaries/:id/terms":               {"合规词条列表", "查询指定词库下的合规词条。"},
+	"POST /api/ops/compliance/dictionaries/:id/terms":              {"新增合规词条", "向指定词库新增合规词条。"},
+	"POST /api/ops/compliance/dictionaries/:id/terms:batch-import": {"批量导入合规词条", "向指定词库批量导入合规词条。"},
+	"DELETE /api/ops/compliance/dictionaries/:id/terms/:term_id":   {"删除合规词条", "删除指定合规词条。"},
+	"POST /api/ops/compliance/dictionaries/:id/publish":            {"发布合规词库", "发布指定合规词库版本。"},
+	"POST /api/ops/compliance/dictionaries/:id/rollback":           {"回滚合规词库", "回滚指定合规词库版本。"},
+	"GET /api/ops/compliance/policy/global":                        {"全局合规策略", "读取全局内容合规策略。"},
+	"PUT /api/ops/compliance/policy/global":                        {"更新全局合规策略", "更新全局内容合规策略。"},
+	"POST /api/ops/compliance/policy/global/master-switch":         {"切换合规总开关", "启用或关闭全局内容合规总开关。"},
+	"GET /api/ops/compliance/manual-reviews":                       {"人工审阅列表", "分页查询内容合规人工审阅。"},
+	"GET /api/ops/compliance/manual-reviews/:id":                   {"人工审阅详情", "读取指定人工审阅详情。"},
+	"POST /api/ops/compliance/manual-reviews/:id/approve":          {"通过人工审阅", "通过指定内容合规人工审阅。"},
+	"POST /api/ops/compliance/manual-reviews/:id/reject":           {"驳回人工审阅", "驳回指定内容合规人工审阅。"},
+	"GET /api/ops/compliance/stats":                                {"合规统计", "读取内容合规统计数据。"},
+	"GET /api/ops/compliance/records":                              {"合规检测记录", "分页查询内容合规检测记录。"},
+
 	// --- Auth ---
 	"GET /api/auth/password-key": {"登录密码加密公钥", "返回登录密码前端加密使用的临时公钥与 key_id。"},
 	"POST /api/auth/login":       {"账号密码登录", "客户后台账号密码登录，返回 access/refresh token。"},
diff --git a/server/internal/shared/swagger/descriptions_parity_test.go b/server/internal/shared/swagger/descriptions_parity_test.go
index ae899c6..bda78a2 100644
--- a/server/internal/shared/swagger/descriptions_parity_test.go
+++ b/server/internal/shared/swagger/descriptions_parity_test.go
@@ -13,14 +13,17 @@ import (
 // TestRouteDocs_CoversEveryRouterEntry parses the tenant-api router source and
 // asserts that every registered route has a corresponding entry in routeDocs.
 // This is a static-analysis safety net: when a new handler is wired up in
-// internal/tenant/transport/router.go, this test fails until a Chinese
+// tenant or ops transport routers, this test fails until a Chinese
 // summary is added.
 func TestRouteDocs_CoversEveryRouterEntry(t *testing.T) {
-	routerPath, bootstrapPath := findRepoSources(t)
+	routerPaths, bootstrapPath := findRepoSources(t)
 
-	routes := append(parseRoutes(t, routerPath), parseEngineRoutes(t, bootstrapPath)...)
+	routes := parseEngineRoutes(t, bootstrapPath)
+	for _, routerPath := range routerPaths {
+		routes = append(routes, parseRoutes(t, routerPath)...)
+	}
 	if len(routes) == 0 {
-		t.Fatalf("could not extract any routes from %s", routerPath)
+		t.Fatalf("could not extract any routes from %s", strings.Join(routerPaths, ", "))
 	}
 
 	missing := make([]string, 0)
@@ -133,7 +136,7 @@ func parseEngineRoutes(t *testing.T, path string) []parsedRoute {
 	return routes
 }
 
-func findRepoSources(t *testing.T) (router, bootstrap string) {
+func findRepoSources(t *testing.T) (routers []string, bootstrap string) {
 	t.Helper()
 	_, file, _, ok := runtime.Caller(0)
 	if !ok {
@@ -142,6 +145,9 @@ func findRepoSources(t *testing.T) (router, bootstrap string) {
 	// .../server/internal/shared/swagger/descriptions_parity_test.go ->
 	// .../server is three levels up from this file's parent dir.
 	serverRoot := filepath.Clean(filepath.Join(filepath.Dir(file), "..", "..", ".."))
-	return filepath.Join(serverRoot, "internal", "tenant", "transport", "router.go"),
+	return []string{
+			filepath.Join(serverRoot, "internal", "tenant", "transport", "router.go"),
+			filepath.Join(serverRoot, "internal", "ops", "transport", "router.go"),
+		},
 		filepath.Join(serverRoot, "internal", "bootstrap", "bootstrap.go")
 }
diff --git a/server/internal/shared/swagger/swagger.go b/server/internal/shared/swagger/swagger.go
index 1c6ce03..c461ec4 100644
--- a/server/internal/shared/swagger/swagger.go
+++ b/server/internal/shared/swagger/swagger.go
@@ -303,6 +303,17 @@ func queryParameterNames(route gin.RouteInfo) []string {
 	}
 
 	switch {
+	case strings.Contains(path, "/ops/site-domain-mappings"):
+		add("page", "size", "keyword", "is_active")
+	case strings.Contains(path, "/ops/object-storage/objects/detail") ||
+		strings.Contains(path, "/ops/object-storage/objects/url") ||
+		strings.Contains(path, "/ops/object-storage/objects/download-url") ||
+		strings.Contains(path, "/ops/object-storage/objects/download"):
+		add("key")
+	case strings.Contains(path, "/ops/object-storage/objects"):
+		add("prefix", "keyword", "continuation_token", "start_after", "recursive", "size", "key")
+	case strings.Contains(path, "/ops/object-storage/folders"):
+		add("prefix")
 	case strings.Contains(path, "/workspace/ai-point-usage"):
 		add("page", "page_size")
 	case strings.Contains(path, "/tenant/articles"):
@@ -357,13 +368,13 @@ func queryParameter(name string) map[string]any {
 
 func schemaForQueryParameter(name string) map[string]any {
 	switch name {
-	case "page", "page_size", "limit", "offset", "days", "period_days":
+	case "page", "page_size", "limit", "offset", "days", "period_days", "size":
 		return map[string]any{"type": "integer"}
 	case "brand_id", "keyword_id", "question_id", "template_id", "kol_prompt_id", "prompt_rule_id", "group_id", "folder_id", "if_sync_version":
 		return map[string]any{"type": "integer", "format": "int64"}
 	case "force":
 		return map[string]any{"type": "string", "enum": []string{"1"}}
-	case "ungrouped", "undo":
+	case "ungrouped", "undo", "recursive", "is_active":
 		return map[string]any{"type": "string", "enum": []string{"true", "false"}}
 	case "created_from", "created_to", "date_from", "date_to", "business_date":
 		return map[string]any{"type": "string", "format": "date"}
@@ -403,6 +414,9 @@ func isMultipartRoute(route gin.RouteInfo) bool {
 	}
 	path := route.Path
 	return path == "/api/tenant/images" ||
+		path == "/api/ops/site-domain-mappings/import" ||
+		path == "/api/ops/object-storage/objects/upload" ||
+		path == "/api/ops/desktop-client/releases/upload" ||
 		path == "/api/tenant/knowledge/items/file" ||
 		path == "/api/tenant/kol/manage/profile/avatar" ||
 		path == "/api/tenant/articles/:id/images"
diff --git a/server/internal/tenant/transport/asset_handler_test.go b/server/internal/tenant/transport/asset_handler_test.go
index 4278a6c..0a0b2a9 100644
--- a/server/internal/tenant/transport/asset_handler_test.go
+++ b/server/internal/tenant/transport/asset_handler_test.go
@@ -45,6 +45,10 @@ func (s *fakeAssetObjectStorage) PublicURL(string) (string, error) {
 	panic("unexpected call")
 }
 
+func (s *fakeAssetObjectStorage) DownloadURL(string) (string, error) {
+	panic("unexpected call")
+}
+
 func TestAssetHandlerServeDesktop_AllowsStaleSignedTenantAsset(t *testing.T) {
 	gin.SetMode(gin.TestMode)