@mrrisega/dsh-remote 0.7.12-beta.5 → 0.7.12-beta.6

package/clients/dsh-remote/test/im-commands.test.mjs

@@ -0,0 +1,283 @@
+/**
+ * im-commands — 三家 IM 机器人共用命令层单测（2026-11-08）。
+ *
+ * 纯函数 + 注入式执行器，覆盖：解析（大小写/参数/未知）、/help 全命令、未知命令不转发、
+ * 免费档 /ls /use 被拦 + 升级文案、/stop 免费立即生效、/use 越界/缺参、/status 与快照同源、
+ * /unbind 免费、命令回复不含裸表格、写配置 sessionId（保留其它段）。
+ */
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import test from "node:test";
+
+import {
+  IM_COMMANDS,
+  commandAllowed,
+  executeImCommand,
+  helpText,
+  lsText,
+  parseImCommand,
+  writeImBotsSession
+} from "../im-commands.mjs";
+import { freeCaps, paidCaps } from "./im-caps-fixture.mjs";
+import { fileMode } from "../wecom-bot.mjs";
+
+function tmpDir() { return fs.mkdtempSync(path.join(os.tmpdir(), "dsh-imcmd-")); }
+
+function sessionsFixture() {
+  const rows = [
+    { sessionId: "session-alpha", title: "重构支付回调链路（很长的标题会被截断到二十四字以内）", updatedAt: Date.UTC(2026, 10, 8, 1, 30), running: true },
+    { sessionId: "session-beta", title: "修端口探测", updatedAt: Date.UTC(2026, 10, 7, 22, 0) },
+    { sessionId: "session-gamma", title: "写测试", updatedAt: 0 }
+  ];
+  return async () => rows;
+}
+
+/** 一个记录调用的 ctx（各用例按需覆盖）。 */
+function makeCtx(over = {}) {
+  const calls = { switch: [], cancel: [], unbind: 0 };
+  const ctx = {
+    caps: freeCaps(),
+    tier: "free",
+    appUrl: "https://app.test/",
+    channelLabel: "钉钉",
+    sessions: sessionsFixture(),
+    currentSessionId: () => "session-alpha",
+    currentSessionTitle: "重构支付回调链路",
+    switchSession: async (arg) => { calls.switch.push(arg); return { ok: true }; },
+    cancelSession: async (arg) => { calls.cancel.push(arg); return { ok: true }; },
+    unbind: async () => { calls.unbind += 1; return { ok: true }; },
+    statusSnapshot: async () => ({
+      connected: true, authenticated: true, state: "connected", lastError: "",
+      tier: "free", usage: { month: "2026-11", messages: 3 }, messagesPerMonth: 20, remainingMessages: 17,
+      currentSessionId: "session-alpha", currentSessionTitle: "重构支付回调链路"
+    }),
+    ...over
+  };
+  return { ctx, calls };
+}
+
+const run = (text, ctx) => executeImCommand({ text, ctx });
+const assertNoRawTable = (text) => {
+  assert.ok(!/\|\s*-{2,}/.test(text), `不得含表格分隔行：${text}`);
+  assert.ok(!/^\s*\|.*\|\s*$/m.test(text), `不得含裸表格行：${text}`);
+};
+
+// ─────────────────────────── 解析 ───────────────────────────
+
+test("parseImCommand：命令/大小写/参数/未知；普通文本返回 null", () => {
+  assert.deepEqual(parseImCommand("/help"), { name: "/help", arg: "", rest: "", unknown: false, raw: "/help" });
+  assert.equal(parseImCommand("/HELP").name, "/help", "大小写不敏感");
+  assert.equal(parseImCommand("  /Status  ").name, "/status");
+  assert.equal(parseImCommand("/use 3").arg, "3");
+  assert.equal(parseImCommand("/use").arg, "");
+  assert.equal(parseImCommand("/use   abc").arg, "abc");
+  assert.equal(parseImCommand("/ls 额外 参数").arg, "额外");
+  assert.equal(parseImCommand("/").unknown, true, "光一个 / 算未知命令");
+  assert.equal(parseImCommand("/wat").unknown, false);
+  assert.equal(parseImCommand("hello"), null, "普通文本不是命令");
+  assert.equal(parseImCommand("ls"), null);
+  assert.equal(parseImCommand("  /help 看下  ").arg, "看下");
+});
+
+// ─────────────────────────── /help / 未知 ───────────────────────────
+
+test("★ /help：列出全部命令（免费/会员标注），免费档看到会员命令标注", async () => {
+  const { ctx } = makeCtx();
+  const r = await run("/help", ctx);
+  assert.equal(r.handled, true);
+  assert.equal(r.ok, true);
+  for (const c of IM_COMMANDS) assert.ok(r.text.includes(c.usage), `/help 必须包含 ${c.usage}`);
+  assert.match(r.text, /命令不会发给模型/);
+  assert.match(r.text, /\/stop/);
+  assert.match(r.text, /\/unbind/);
+  assert.match(r.text, /会员/, "免费档要标注会员命令");
+  assertNoRawTable(r.text);
+});
+
+test("★ 未知命令：不转发给模型（handled=true），回「未知命令 + 帮助」", async () => {
+  let promptCalls = 0;
+  const { ctx } = makeCtx();
+  const r = await run("/deploy now", ctx);
+  assert.equal(r.handled, true, "★ 未知 /xxx 必须被命令层拦下");
+  assert.ok(promptCalls === 0);
+  assert.match(r.text, /未知命令：\/deploy/);
+  assert.match(r.text, /\/help/);
+  assertNoRawTable(r.text);
+  // 非命令文本仍返回 handled:false（照旧进模型）
+  const normal = await run("帮我改一下代码", ctx);
+  assert.deepEqual(normal, { handled: false });
+});
+
+// ─────────────────────────── 能力门禁 ───────────────────────────
+
+test("★ 免费档 /ls、/use 被拦：回会员文案 + /app/promo；命令不进模型", async () => {
+  const { ctx } = makeCtx();
+  const ls = await run("/ls", ctx);
+  assert.equal(ls.handled, true);
+  assert.equal(ls.gated, true);
+  assert.match(ls.text, /会员功能/);
+  assert.match(ls.text, /https:\/\/app\.test\/promo/);
+  assert.match(ls.text, /免费可用/);
+  assertNoRawTable(ls.text);
+  const use = await run("/use 1", ctx);
+  assert.equal(use.gated, true);
+  assert.match(use.text, /\/use 是会员功能/);
+  // 免费命令不受影响
+  for (const cmd of ["/help", "/status", "/stop", "/unbind"]) {
+    const r = await run(cmd, ctx);
+    assert.equal(r.gated, undefined, `${cmd} 必须免费可用`);
+    assert.equal(r.handled, true);
+  }
+});
+
+// ─────────────────────────── /ls ───────────────────────────
+
+test("★ /ls（会员）：≤10 条、标题截断 24、索引 + 当前标记 + 更新时间；不含裸表格", async () => {
+  const many = Array.from({ length: 15 }, (_, i) => ({ sessionId: `session-${i}`, title: `会话 ${i} 号很长的标题需要被截断处理一下`, updatedAt: Date.UTC(2026, 10, 8, 10, i % 60) }));
+  const { ctx } = makeCtx({ caps: paidCaps(), sessions: async () => many, currentSessionId: () => "session-3" });
+  const r = await run("/ls", ctx);
+  assert.equal(r.ok, true);
+  const lines = r.text.split("\n").filter((l) => /^\d+\. /.test(l));
+  assert.equal(lines.length, 10, "最多 10 条");
+  assert.match(r.text, /1\. 会话 0 号/);
+  assert.match(r.text, /4\. 会话 3 号[^\n]*（当前）/, "当前会话要有标记");
+  assert.match(r.text, /· \d{2}-\d{2} \d{2}:\d{2}/, "带更新时间");
+  for (const line of lines) {
+    const titlePart = line.replace(/^\d+\. /, "").split(" ")[0];
+    assert.ok(Array.from(titlePart.replace(/…$/, "")).length <= 24, `标题超过 24 字：${line}`);
+  }
+  assert.match(r.text, /\/use <序号>/);
+  assertNoRawTable(r.text);
+});
+
+test("/ls：没有会话时给可操作提示", async () => {
+  const { ctx } = makeCtx({ caps: paidCaps(), sessions: async () => [] });
+  const r = await run("/ls", ctx);
+  assert.equal(r.ok, true);
+  assert.match(r.text, /最近没有可列出的会话/);
+  assert.match(r.text, /打开\/运行一个会话/);
+});
+
+// ─────────────────────────── /use ───────────────────────────
+
+test("★ /use <N>：合法序号切换（写配置由 ctx.switchSession 完成）+ 回执", async () => {
+  const { ctx, calls } = makeCtx({ caps: paidCaps() });
+  const r = await run("/use 2", ctx);
+  assert.equal(r.ok, true);
+  assert.deepEqual(calls.switch, [{ sessionId: "session-beta", title: "修端口探测" }]);
+  assert.match(r.text, /已切换到 #2 修端口探测/);
+});
+
+test("★ /use 越界 / 缺参 / 无会话：给可操作提示，不崩", async () => {
+  const { ctx, calls } = makeCtx({ caps: paidCaps() });
+  const out = await run("/use 99", ctx);
+  assert.equal(out.ok, true, "越界是提示不是崩溃");
+  assert.match(out.text, /序号超出范围：当前列表是 1-3/);
+  assert.match(out.text, /\/ls/);
+  assert.equal(calls.switch.length, 0);
+  const missing = await run("/use", ctx);
+  assert.match(missing.text, /用法：\/use <序号>/);
+  const none = await run("/use 1", makeCtx({ caps: paidCaps(), sessions: async () => [] }).ctx);
+  assert.match(none.text, /没有可切换的会话/);
+  const failing = await run("/use 1", makeCtx({ caps: paidCaps(), switchSession: async () => ({ ok: false, reason: "写配置失败" }) }).ctx);
+  assert.match(failing.text, /切换失败：写配置失败/);
+});
+
+// ─────────────────────────── /stop / /status / /unbind ───────────────────────────
+
+test("★ /stop：免费可用、立即调 cancelSession、回执明确（没会话给说明）", async () => {
+  const { ctx, calls } = makeCtx();
+  const r = await run("/stop", ctx);
+  assert.equal(r.ok, true);
+  assert.deepEqual(calls.cancel, [{ sessionId: "session-alpha" }]);
+  assert.match(r.text, /已急停：重构支付回调链路/);
+  // 无会话
+  const none = await run("/stop", makeCtx({ currentSessionId: () => "" }).ctx);
+  assert.match(none.text, /没有正在运行的会话/);
+  // 取消失败要给"没收到确认"
+  const fail = await run("/stop", makeCtx({ cancelSession: async () => ({ ok: false, message: "通道断开" }) }).ctx);
+  assert.match(fail.text, /没收到确认：通道断开/);
+});
+
+test("★ /status：连接状态 + 当前会话 + 本月剩余（与状态快照同源；不限量显示不限）", async () => {
+  const { ctx } = makeCtx();
+  const r = await run("/status", ctx);
+  assert.equal(r.ok, true);
+  assert.match(r.text, /连接状态/);
+  assert.match(r.text, /✅ 已连接/);
+  assert.match(r.text, /当前会话：重构支付回调链路/);
+  assert.match(r.text, /本月指令：已用 3\/20/);
+  assert.match(r.text, /剩余：17 条/);
+  assertNoRawTable(r.text);
+  // 付费不限量
+  const pro = await run("/status", makeCtx({
+    caps: paidCaps(), tier: "pro",
+    statusSnapshot: async () => ({ connected: false, state: "reconnecting", tier: "pro", usage: { messages: 0 }, messagesPerMonth: 0, currentSessionId: "" })
+  }).ctx);
+  assert.match(pro.text, /未连接（reconnecting/);
+  assert.match(pro.text, /本月指令：不限（pro）/);
+  assert.match(pro.text, /当前会话：未选择/);
+});
+
+test("★ /unbind：免费可用、任何人可退订（调 unbind + 明确回执）", async () => {
+  const { ctx, calls } = makeCtx();
+  const r = await run("/unbind", ctx);
+  assert.equal(r.ok, true);
+  assert.equal(calls.unbind, 1);
+  assert.match(r.text, /已解绑/);
+  assert.match(r.text, /重新绑定/);
+});
+
+// ─────────────────────────── 执行器健壮性 / 配置写入 ───────────────────────────
+
+test("执行器：ctx 抛错也返回 handled:true（命令层绝不把异常漏给模型）", async () => {
+  const r = await run("/ls", makeCtx({ caps: paidCaps(), sessions: async () => { throw new Error("订阅器挂了"); } }).ctx);
+  assert.equal(r.handled, true);
+  assert.match(r.text, /命令执行失败：订阅器挂了/);
+});
+
+test("★ writeImBotsSession：写对应通道的 sessionId/sessionTitle（保留其它段，0600）", () => {
+  const dir = tmpDir();
+  try {
+    fs.writeFileSync(path.join(dir, "im-bots.json"), JSON.stringify({
+      version: 1,
+      wecom: { enabled: true, botId: "b" },
+      dingtalk: { enabled: true, clientId: "c" },
+      feishu: { enabled: false }
+    }), { mode: 0o600 });
+    const r = writeImBotsSession(dir, "dingtalk", { sessionId: "session-beta", sessionTitle: "修端口探测" });
+    assert.equal(r.ok, true);
+    const disk = JSON.parse(fs.readFileSync(path.join(dir, "im-bots.json"), "utf8"));
+    assert.equal(disk.dingtalk.sessionId, "session-beta");
+    assert.equal(disk.dingtalk.sessionTitle, "修端口探测");
+    assert.equal(disk.dingtalk.clientId, "c", "其它字段保留");
+    assert.equal(disk.wecom.botId, "b", "其它通道段保留");
+    if (process.platform !== "win32") assert.equal(fileMode(path.join(dir, "im-bots.json")) & 0o777, 0o600);
+    // 非法参数
+    assert.equal(writeImBotsSession(dir, "", {}).ok, false);
+    assert.equal(writeImBotsSession(dir, "dingtalk", { sessionId: "" }).ok, false);
+  } finally { fs.rmSync(dir, { recursive: true, force: true }); }
+});
+
+test("helpText/commandAllowed：能力表判断与 /help 文案一致（单一真相源）", () => {
+  assert.equal(commandAllowed(IM_COMMANDS.find((c) => c.name === "/stop"), []), true, "急停不需要能力");
+  assert.equal(commandAllowed(IM_COMMANDS.find((c) => c.name === "/ls"), freeCaps()), false);
+  assert.equal(commandAllowed(IM_COMMANDS.find((c) => c.name === "/ls"), paidCaps()), true);
+  const paidHelp = helpText({ caps: paidCaps(), appUrl: "https://a/" });
+  assert.match(paidHelp, /你的档位已包含会话管理/);
+  const freeHelp = helpText({ caps: freeCaps() });
+  assert.ok(!/已包含会话管理/.test(freeHelp));
+});
+
+test("三家接线（源级契约）：wecom/dingtalk/feishu 都在进模型前调用命令层", () => {
+  for (const file of ["wecom-bot.mjs", "dingtalk-bot.mjs", "feishu-bot.mjs"]) {
+    const src = fs.readFileSync(new URL(`../${file}`, import.meta.url), "utf8");
+    assert.ok(/from "\.\/im-commands\.mjs"/.test(src), `${file} 必须 import im-commands.mjs`);
+    assert.ok(/executeImCommand\(/.test(src), `${file} 必须调用 executeImCommand`);
+    const cmdAt = src.indexOf("executeImCommand(");
+    const promptAt = src.indexOf("promptSession(");
+    assert.ok(cmdAt > -1 && (promptAt === -1 || cmdAt < promptAt), `${file} 命令层必须出现在 promptSession 之前（cmdAt=${cmdAt}, promptAt=${promptAt}）`);
+  }
+});

package/clients/dsh-remote/test/wecom-bot.test.mjs

@@ -152,6 +152,8 @@ function fakeSubscriber(over = {}) {
   sub.started = false;
   sub.closed = false;
   sub.promptCalls = [];
+  sub.cancelCalls = [];
+  sub.cancelSession = async ({ sessionId } = {}) => { sub.cancelCalls.push({ sessionId }); return { ok: true }; };
   sub.sessionDetails = Array.isArray(over.sessions) ? over.sessions.slice() : [];
   sub.start = () => { sub.started = true; };
   sub.close = () => { sub.closed = true; };
@@ -1716,3 +1718,38 @@ test("atomicWriteJson：覆盖写、目录自动创建、0600、失败不留临
     fs.rmSync(dir, { recursive: true, force: true });
   }
 });
+
+// ─────────────────────── 命令层（2026-11-08：/ls 不再转给模型）───────────────────────
+
+test("★ 命令层：/help /status 直接回复、/ls 免费档被拦、/stop 免费急停；命中命令**不进 promptSession**", async () => {
+  const rt = await setupRelayBot();
+  try {
+    rt.bot.start();
+    await waitFor(() => rt.bot.status().authenticated, { label: "认证" });
+    const replies = () => rt.server.state.frames.filter((f) => f.cmd === "aibot_respond_msg");
+    const sendCmd = async (msgid, content) => {
+      const before = replies().length;
+      rt.server.push({ cmd: "aibot_msg_callback", headers: { req_id: `cmd-${msgid}` }, body: { msgid: `m-${msgid}`, msgtype: "text", text: { content }, from: { userid: "user-a" } } });
+      await waitFor(() => replies().length > before, { label: `命令 ${msgid} 回复` });
+      return String(replies()[before].body.stream.content || "");
+    };
+    const help = await sendCmd("help", "/help");
+    assert.match(help, /可用命令/);
+    assert.match(help, /\/ls/);
+    assert.match(help, /\/unbind/);
+    assert.equal(rt.sub.promptCalls.length, 0, "★ 命令不得进模型");
+    const status = await sendCmd("status", "/status");
+    assert.match(status, /连接状态/);
+    assert.match(status, /当前会话/);
+    const ls = await sendCmd("ls", "/ls");
+    assert.match(ls, /会员功能/, "免费档 /ls 必须被拦");
+    assert.equal(rt.sub.promptCalls.length, 0);
+    const stop = await sendCmd("stop", "/stop");
+    assert.match(stop, /已急停|没有正在运行/);
+    assert.deepEqual(rt.sub.cancelCalls, [{ sessionId: "session-abc" }], "★ /stop 调 cancelSession");
+    assert.equal(rt.sub.promptCalls.length, 0, "★ 全部命令都不进模型");
+    // 普通文本照旧进模型
+    await rt.inbound("normal-1", "帮我改一下代码");
+    assert.equal(rt.sub.promptCalls.length, 1);
+  } finally { await rt.close(); }
+});

package/clients/dsh-remote/wecom-bot.mjs

@@ -53,6 +53,9 @@ import WebSocket from "ws";
 import { createEventSubscriber, NODE_KINDS } from "./dsh-events.mjs";
 // 通道感知格式化（2026-11-08：企微/钉钉 markdown 不支持表格，发前统一适配；飞书/微信各有分支）
 import { formatForChannel } from "./im-format.mjs";
+// 命令层（2026-11-08）：/help /status /stop /ls /use /unbind 在**进模型前**拦下执行；
+// 解析/文案/能力门禁三家共用（与会员升级文案同口径）。
+import { executeImCommand, writeImBotsSession } from "./im-commands.mjs";
 // 会员能力表 = **单一真相源**：直接复用微信通道那套（WECHAT_CAPABILITY_TABLE / limitsFor / grantsCap），
 // 不另造一套。企微/飞书/钉钉将来都套同一套判定（见 research/.../im-channel-membership-design.md）。
 import {
@@ -716,8 +719,8 @@ export function createWecomBot(options = {}) {
   const approvalCardTtlMs = positiveNumber(options.approvalCardTtlMs, APPROVAL_CARD_TTL_MS);
   const onApprovalDecision = typeof options.onApprovalDecision === "function" ? options.onApprovalDecision : null;
   // 会话可选绑定（task-24）：配置固定的会话（空 = 跟随活跃会话）
-  const configuredSessionId = String(options.configuredSessionId || "").trim();
-  const configuredSessionTitle = truncateText(options.configuredSessionTitle || "", 60);
+  let configuredSessionId = String(options.configuredSessionId || "").trim();
+  let configuredSessionTitle = truncateText(options.configuredSessionTitle || "", 60);
   // ── 会员判定（2026-11-07 业主拍板：通知免费、审批免费、互动半阉割）──
   // capsProvider 由 bridge 注入（复用微信通道的 resolveWechatTier：字符串档位或 {plan,caps,limits,rev}）；
   // 拿不到 / 未注入 → **按 free fail-closed**。
@@ -1367,8 +1370,87 @@ export function createWecomBot(options = {}) {
   }
 
   /** 把入站文本转给 DSH 会话（尽力，失败给用户一句人话）。 */
+  /**
+   * 命令层（三家共用 `im-commands.mjs`）：命中返回 true（已回复，调用方直接 return）。
+   * 回复走被动回复/主动推送（replyText），不经过模型、不计额度。
+   */
+  async function handleCommand(frame, info) {
+    const text = String((info && info.text) || "");
+    if (!/^\s*\//.test(text)) return false; // 快路径：非命令不构造 ctx
+    const cmd = await executeImCommand({
+      text,
+      ctx: {
+        caps: capsNow(),
+        tier: tierNow(),
+        appUrl,
+        channelLabel: "企业微信",
+        sessions: async () => {
+          try { await refreshSessions({ force: true }); } catch { /* 忽略 */ }
+          return sessionList.map((x) => ({ sessionId: x.id, title: x.title, updatedAt: x.updatedAt, running: false }));
+        },
+        currentSessionId: () => {
+          const known = boundSessionId || activeSession.id || "";
+          if (known) return known;
+          if (configuredSessionId && canCap("sessions")) return configuredSessionId;
+          if (sessionList.length) return sessionList[0].id;
+          const sub = subscriber;
+          try {
+            if (sub && typeof sub.sessions === "function") {
+              const ids = sub.sessions();
+              if (Array.isArray(ids) && ids.length) return String(ids[0]);
+            }
+          } catch { /* 忽略 */ }
+          return "";
+        },
+        currentSessionTitle: () => titleOfSession(boundSessionId || activeSession.id, activeSession.title || ""),
+        cancelSession: async ({ sessionId }) => {
+          const sub = subscriber;
+          if (!sub || typeof sub.cancelSession !== "function") return { ok: false, message: "订阅器未就绪" };
+          try {
+            const r = await sub.cancelSession({ sessionId });
+            return r && typeof r === "object" ? r : { ok: Boolean(r) };
+          } catch (e) { return { ok: false, message: e && e.message ? e.message : String(e) }; }
+        },
+        switchSession: async ({ sessionId, title }) => {
+          const r = writeImBotsSession(relayDir, "wecom", { sessionId, sessionTitle: title });
+          if (r.ok) {
+            configuredSessionId = sessionId;
+            configuredSessionTitle = truncateText(title || "", 60);
+            writeStatus();
+          }
+          return r;
+        },
+        unbind: async () => {
+          state.boundChatId = "";
+          writeStatus();
+          return { ok: true };
+        },
+        statusSnapshot: async () => ({
+          connected: state.connected === true,
+          authenticated: state.authenticated === true,
+          state: state.connected ? "connected" : "idle",
+          lastError: state.lastError || "",
+          tier: tierNow(),
+          usage: { month: monthKey(), messages: usageThisMonth() },
+          messagesPerMonth: messageLimitNow(),
+          remainingMessages: messageLimitNow() ? Math.max(0, messageLimitNow() - usageThisMonth()) : null,
+          currentSessionId: boundSessionId || activeSession.id || "",
+          currentSessionTitle: titleOfSession(boundSessionId || activeSession.id, activeSession.title || "")
+        })
+      }
+    });
+    if (!cmd || !cmd.handled) return false;
+    replyText(frame, cmd.text);
+    emitter.emit("command", { ...info, command: cmd.command, ok: cmd.ok === true, gated: cmd.gated === true });
+    log.info(`命令 ${cmd.command}${cmd.gated ? "（会员闸拦截）" : ""} 已回复（不转模型）`);
+    return true;
+  }
+
   async function dispatchInbound(frame, info) {
     const sub = subscriber;
+    // ⓪ 命令层：命中即执行并回复，**绝不进模型**，也不计入额度（/stop、/unbind 永远免费）
+    const cmd = await handleCommand(frame, info);
+    if (cmd) return;
     // ① 会员闸（通知/审批免费；派活受能力与月度额度约束，fail-closed）
     const gated = await membershipGate(frame, info);
     if (gated) return;

package/dsh-setup.mjs

@@ -149,7 +149,7 @@ function findDepWs(startDir) {
  * 漏同步就会出现「入口脚本在、依赖不在」的半装运行时（插件半据此判定「运行环境已就绪」，
  * 却永远起不来 bridge —— 2026-09-23 用户反馈的现场）。`src/channel-ref.mjs` 同理（本安装器也 import）。
  */
-const RUNTIME_CLIENT_FILES = ["mobile-adapter.mjs", "dsh-bridge.mjs", "e2ee-shim.mjs", "e2ee-client.mjs", "e2ee-shim-script.js", "mobile-adapter.test.mjs", "wechat-channel.mjs", "dsh-events.mjs", "wechat-runtime.mjs", "wecom-bot.mjs", "im-format.mjs", "dingtalk-bot.mjs", "dingtalk-auth.mjs", "feishu-bot.mjs", "src/lifecycle.mjs", "src/channel-ref.mjs"];
+const RUNTIME_CLIENT_FILES = ["mobile-adapter.mjs", "dsh-bridge.mjs", "e2ee-shim.mjs", "e2ee-client.mjs", "e2ee-shim-script.js", "mobile-adapter.test.mjs", "wechat-channel.mjs", "dsh-events.mjs", "wechat-runtime.mjs", "wecom-bot.mjs", "im-format.mjs", "dingtalk-bot.mjs", "dingtalk-auth.mjs", "im-commands.mjs", "feishu-bot.mjs", "src/lifecycle.mjs", "src/channel-ref.mjs"];
 
 /**
  * 把"客户端脚本"补齐到配置目录。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrisega/dsh-remote",
-  "version": "0.7.12-beta.5",
+  "version": "0.7.12-beta.6",
   "description": "手机远程控制 DeepSeek Harness · Remote control DeepSeek Harness (dsh web) from any phone browser — 100% 全功能 App 级体验：发消息、看工具执行、审批权限、改设置、管凭据，含特权操作，免内网穿透。一条命令安装 npx @mrrisega/dsh-remote。Mobile remote control for DSH, self-host or SaaS, no server needed on LAN.",
   "keywords": [
     "deepseek-harness",
@@ -56,7 +56,7 @@
     "test:plugin": "DSH_PROFILE_DIR= DSH_REMOTE_TELEMETRY=0 DSH_RELAY_SKIP_SERVICE=1 DSH_RELAY_DEFAULT_API=http://127.0.0.1:1 DSH_RELAY_BUNDLED_RUNTIME=/nonexistent-dsh-bundled NODE_OPTIONS=\"--require $PWD/scripts/test-net-guard.cjs ${NODE_OPTIONS:-}\" node --test --test-concurrency=1 packages/dsh-remote-web/test/*.test.mjs",
     "_comment:test:bridge": "⚠️ 必须 --test-concurrency=1（与 test:plugin 对齐）：tunnel-auth 有一条「bridge 5 秒内必须重连」的硬期限，并行跑时新增用例抢 CPU 会把它撞破 → 偶发假红（实测单独跑 2/2 通过、并发跑偶发 0/2）。假红比慢更贵。",
     "test:bridge": "DSH_PROFILE_DIR= DSH_RELAY_DEFAULT_API=http://127.0.0.1:1 NODE_OPTIONS=\"--require $PWD/scripts/test-net-guard.cjs ${NODE_OPTIONS:-}\" node --test --test-concurrency=1 clients/dsh-remote/test/*.test.mjs",
-    "check": "node --check scripts/check-profile-activation.mjs && node --check clients/dsh-remote/dsh-bridge.mjs && node --check clients/dsh-remote/wechat-channel.mjs && node --check clients/dsh-remote/wechat-runtime.mjs && node --check clients/dsh-remote/dsh-events.mjs && node --check clients/dsh-remote/agent/index.mjs && node --check clients/dsh-remote/agent/version.mjs && node --check clients/dsh-remote/agent/detect.mjs && node --check clients/dsh-remote/agent/permission-bridge.mjs && node --check clients/dsh-remote/agent/proc.mjs && node --check clients/dsh-remote/agent/events.mjs && node --check clients/dsh-remote/agent/codex.mjs && node --check clients/dsh-remote/agent/gemini.mjs && node --check clients/dsh-remote/agent/opencode.mjs && node --check clients/dsh-remote/agent/agent-e2e-codex.mjs && node --check clients/dsh-remote/agent/agent-e2e-real.mjs && node --check clients/dsh-remote/push-reporter.mjs && node --check clients/dsh-remote/decision-poller.mjs && node --check clients/dsh-remote/approval-coordinator.mjs && node --check clients/dsh-remote/wecom-bot.mjs && node --check clients/dsh-remote/im-format.mjs && node --check clients/dsh-remote/dingtalk-bot.mjs && node --check clients/dsh-remote/feishu-bot.mjs && node --check clients/dsh-remote/dingtalk-auth.mjs && node --check clients/dsh-remote/e2ee-shim.mjs && node --check dsh-setup.mjs && node --check packages/dsh-remote-web/lib/index.js && node --check packages/dsh-remote-web/lib/client.js && node --check packages/relay-router/src/index.mjs && node --check packages/relay-router/src/logger.mjs && bash -n deploy/install-open.sh && grep -q 'command -v setsid' deploy/install-open.sh && grep -q 'command -v ss' deploy/install-open.sh",
+    "check": "node --check scripts/check-profile-activation.mjs && node --check clients/dsh-remote/dsh-bridge.mjs && node --check clients/dsh-remote/wechat-channel.mjs && node --check clients/dsh-remote/wechat-runtime.mjs && node --check clients/dsh-remote/dsh-events.mjs && node --check clients/dsh-remote/agent/index.mjs && node --check clients/dsh-remote/agent/version.mjs && node --check clients/dsh-remote/agent/detect.mjs && node --check clients/dsh-remote/agent/permission-bridge.mjs && node --check clients/dsh-remote/agent/proc.mjs && node --check clients/dsh-remote/agent/events.mjs && node --check clients/dsh-remote/agent/codex.mjs && node --check clients/dsh-remote/agent/gemini.mjs && node --check clients/dsh-remote/agent/opencode.mjs && node --check clients/dsh-remote/agent/agent-e2e-codex.mjs && node --check clients/dsh-remote/agent/agent-e2e-real.mjs && node --check clients/dsh-remote/push-reporter.mjs && node --check clients/dsh-remote/decision-poller.mjs && node --check clients/dsh-remote/approval-coordinator.mjs && node --check clients/dsh-remote/wecom-bot.mjs && node --check clients/dsh-remote/im-format.mjs && node --check clients/dsh-remote/dingtalk-bot.mjs && node --check clients/dsh-remote/feishu-bot.mjs && node --check clients/dsh-remote/dingtalk-auth.mjs && node --check clients/dsh-remote/im-commands.mjs && node --check clients/dsh-remote/e2ee-shim.mjs && node --check dsh-setup.mjs && node --check packages/dsh-remote-web/lib/index.js && node --check packages/dsh-remote-web/lib/client.js && node --check packages/relay-router/src/index.mjs && node --check packages/relay-router/src/logger.mjs && bash -n deploy/install-open.sh && grep -q 'command -v setsid' deploy/install-open.sh && grep -q 'command -v ss' deploy/install-open.sh",
     "release:tarballs": "bash scripts/release-tarballs.sh",
     "sync:local": "node scripts/sync-local.mjs"
   },

package/packages/dsh-remote-web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-remote-web",
-  "version": "0.7.12-beta.5",
+  "version": "0.7.12-beta.6",
   "description": "公网远程控制 DeepSeek Harness（dsh web）：安装即得专属加密地址，人在外面也能用手机访问电脑上的 dsh——无需同一局域网/WiFi、无需公网 IP 与内网穿透，全程加密；手机端 100% 还原电脑体验（对话/工具/审批/设置）。技术用户可选自建服务，流量走自己的服务器。Remote control DeepSeek Harness (dsh web) from anywhere over the public internet — install, get an encrypted URL, use it from your phone on any network (dual-half cordis plugin: Settings panel + same-origin /dsh-remote routes). (2026-09 由 dsh-remote-ui 更名 / renamed from dsh-remote-ui; dsh-remote 的 dsh web 插件半，不是纯 UI/皮肤插件)",
   "type": "module",
   "main": "lib/index.js",