@mrrisega/dsh-remote 0.7.12-beta.5 → 0.8.0

package/clients/dsh-remote/test/dingtalk-bot.test.mjs

@@ -49,6 +49,11 @@ const FAKE_CLIENT = "ding-fake-client-id";
 
 function sleep(ms) { return new Promise((r) => setTimeout(r, ms)); }
 
+/** 读 JSON 文件（不存在/坏 JSON → null）。 */
+function readJson(file) {
+  try { return JSON.parse(fs.readFileSync(file, "utf8")); } catch { return null; }
+}
+
 async function waitFor(fn, { label = "条件", timeout = 5000, interval = 20 } = {}) {
   const t0 = Date.now();
   for (;;) {
@@ -162,7 +167,7 @@ async function startWebhook(payload = { errcode: 0, errmsg: "ok" }, status = 200
 /** 最小 fake 订阅器（与 bridge 里 dsh-events 的对外接口同形）。 */
 function fakeSubscriber({ sessions = [{ sessionId: "session-live", running: true, title: "活跃会话" }], answer = "这是 agent 的最终回答" } = {}) {
   const emitter = new EventEmitter();
-  const calls = { prompt: [], listSessions: 0, lastAssistant: 0 };
+  const calls = { prompt: [], listSessions: 0, lastAssistant: 0, cancel: [] };
   return {
     on(evt, fn) { emitter.on(evt, fn); return this; },
     once(evt, fn) { emitter.once(evt, fn); return this; },
@@ -172,6 +177,7 @@ function fakeSubscriber({ sessions = [{ sessionId: "session-live", running: true
     sessions() { return sessions.map((s) => s.sessionId); },
     async listSessions() { calls.listSessions += 1; return { ok: true, sessions }; },
     async promptSession({ sessionId, text }) { calls.prompt.push({ sessionId, text }); return { ok: true }; },
+    async cancelSession({ sessionId } = {}) { calls.cancel.push({ sessionId }); return { ok: true }; },
     async lastAssistantText() { calls.lastAssistant += 1; return { ok: true, text: answer }; },
     calls
   };
@@ -553,6 +559,185 @@ test("controller：DSH_IM_BOTS=0 全关（env 优先）", async () => {
 
 // ─────────────────────────── 常量/默认值 ───────────────────────────
 
+// ─────────────────── 回复通道三层降级（2026-11-08 实测 bug：回答回传发不出） ───────────────────
+
+/** 包一层 fetch：把 openapi（accessToken / oToMessages / groupMessages）拦成本地假响应并记录。 */
+function makeOpenapiFetch() {
+  const calls = [];
+  const fetchImpl = (url, init) => {
+    const u = String(url);
+    if (u.includes("/oauth2/accessToken")) {
+      calls.push({ kind: "token", url: u, body: init && init.body });
+      return Promise.resolve({ ok: true, status: 200, json: async () => ({ accessToken: "tok-123", expireIn: 7200 }) });
+    }
+    if (u.includes("/robot/oToMessages/batchSend") || u.includes("/robot/groupMessages/send")) {
+      let body = null;
+      try { body = JSON.parse(init && init.body ? init.body : "{}"); } catch { body = null; }
+      calls.push({ kind: "send", url: u, body, headers: init && init.headers });
+      return Promise.resolve({ ok: true, status: 200, json: async () => ({ processQueryKey: "pq-1" }) });
+    }
+    return fetch(url, init);
+  };
+  return { fetchImpl, calls };
+}
+
+test("★ 回复通道①：入站缓存 sessionWebhook → 回答回传直接 POST 它（跨重启保持）", async () => {
+  const relayDir = tmpRelayDir();
+  const hook = await startWebhook();
+  const gateway = await startGateway();
+  const sub = fakeSubscriber({ answer: "重启后也要能回传答案" });
+  const botOptions = {
+    clientId: FAKE_CLIENT, clientSecret: FAKE_SECRET, robotCode: "ding-robot",
+    gatewayUrl: gateway.openUrl, relayDir, subscriber: sub,
+    logger: () => {}, reconnectBaseMs: 40, reconnectMaxMs: 160, tierDenyThrottleMs: 0
+  };
+  const bot1 = createDingtalkBot(botOptions);
+  try {
+    bot1.start();
+    await waitFor(() => bot1.status().connected, { label: "连接1" });
+    gateway.push({
+      type: "CALLBACK", headers: { messageId: "mid-c1", topic: TOPIC_ROBOT },
+      data: JSON.stringify({
+        conversationId: "cid-1", conversationType: "2", senderStaffId: "staff-9",
+        msgtype: "text", msgId: "m-c1", text: { content: "你好" },
+        sessionWebhook: hook.url, sessionWebhookExpiredTime: Date.now() + 5 * 60_000
+      })
+    });
+    await waitFor(() => hook.state.calls.length >= 1, { label: "被动回复" });
+    const st1 = bot1.status();
+    assert.equal(st1.replyChannel.kind, "sessionWebhook");
+    assert.equal(st1.replyChannel.hasWebhook, true);
+    await bot1.stop();
+  } finally {
+    await gateway.close();
+  }
+  // 重启（新进程语义）：只靠磁盘缓存也要能回传
+  const gateway2 = await startGateway();
+  const bot2 = createDingtalkBot({ ...botOptions, gatewayUrl: gateway2.openUrl });
+  try {
+    bot2.start();
+    await waitFor(() => bot2.status().connected, { label: "连接2" });
+    assert.equal(bot2.status().replyChannel.kind, "sessionWebhook", "★ 重启后回复通道来自持久化缓存");
+    const before = hook.state.calls.length;
+    const r = await bot2.sendMarkdown("重启后的回答回传");
+    assert.equal(r.ok, true);
+    assert.equal(r.kind, "sessionWebhook");
+    await waitFor(() => hook.state.calls.length > before, { label: "重启后回传到 webhook" });
+    assert.match(hook.last().body.markdown.text, /重启后的回答回传/);
+  } finally {
+    await bot2.stop();
+    await gateway2.close();
+    await hook.close();
+    fs.rmSync(relayDir, { recursive: true, force: true });
+  }
+});
+
+test("★ 回复通道②：sessionWebhook 过期 → 降级 openapi（userIds=[senderStaffId]）", async () => {
+  const relayDir = tmpRelayDir();
+  const gateway = await startGateway();
+  const hook = await startWebhook();
+  const api = makeOpenapiFetch();
+  const sub = fakeSubscriber({ answer: "x" });
+  const bot = createDingtalkBot({
+    clientId: FAKE_CLIENT, clientSecret: FAKE_SECRET, robotCode: "ding-robot",
+    gatewayUrl: gateway.openUrl, relayDir, subscriber: sub,
+    fetchImpl: api.fetchImpl, logger: () => {},
+    reconnectBaseMs: 40, reconnectMaxMs: 160, tierDenyThrottleMs: 0
+  });
+  try {
+    bot.start();
+    await waitFor(() => bot.status().connected, { label: "连接" });
+    gateway.push({
+      type: "CALLBACK", headers: { messageId: "mid-exp", topic: TOPIC_ROBOT },
+      data: JSON.stringify({
+        conversationId: "cid-exp", conversationType: "1", senderStaffId: "staff-exp",
+        msgtype: "text", msgId: "m-exp", text: { content: "hi" },
+        sessionWebhook: hook.url, sessionWebhookExpiredTime: Date.now() - 1000 // 已过期
+      })
+    });
+    await waitFor(() => bot.status().messages >= 1, { label: "入站" });
+    assert.equal(bot.status().replyChannel.kind, "openapi", "★ webhook 过期 → 显示 openapi 可用");
+    const hookCalls = hook.state.calls.length;
+    const r = await bot.sendMarkdown("降级 openapi 回答");
+    assert.equal(r.ok, true);
+    assert.equal(r.kind, "openapi");
+    const send = api.calls.filter((c) => c.kind === "send");
+    assert.equal(send.length, 1);
+    assert.deepEqual(send[0].body.userIds, ["staff-exp"], "★ 用缓存的 senderStaffId 发单聊");
+    assert.match(send[0].headers["x-acs-dingtalk-access-token"], /tok-123/);
+    assert.equal(hook.state.calls.length, hookCalls, "过期 webhook 不得再被调用");
+  } finally {
+    await bot.stop(); await gateway.close(); await hook.close();
+    fs.rmSync(relayDir, { recursive: true, force: true });
+  }
+});
+
+test("★ 回复通道③：webhook 与 openapi 都不可用 → 明确日志 no_reply_channel + 状态人话（不静默）", async () => {
+  const relayDir = tmpRelayDir();
+  const gateway = await startGateway();
+  const logs = [];
+  const bot = createDingtalkBot({
+    clientId: FAKE_CLIENT, clientSecret: FAKE_SECRET, robotCode: "", // 无 robotCode
+    gatewayUrl: gateway.openUrl, relayDir,
+    logger: (level, line) => logs.push(line),
+    reconnectBaseMs: 40, reconnectMaxMs: 160, tierDenyThrottleMs: 0
+  });
+  try {
+    bot.start();
+    await waitFor(() => bot.status().connected, { label: "连接" });
+    const r = await bot.sendMarkdown("发不出去的");
+    assert.equal(r.ok, false);
+    assert.match(String(r.reason), /no_reply_channel|no_robot_code|no_target_user|no_webhook/);
+    await waitFor(() => logs.join("\n").match(/no_reply_channel|no_robot_code/), { label: "明确日志" });
+    const st = bot.status();
+    assert.equal(st.replyChannel.kind, "none");
+    assert.ok(String(st.replyChannel.lastError || "").length > 0, "状态要有人话原因");
+    const stFile = readJson(path.join(relayDir, IM_BOT_STATUS_FILE));
+    assert.equal(stFile.dingtalk.replyChannel.kind, "none");
+    assert.match(String(stFile.dingtalk.replyChannel.lastError || ""), /回复通道|robotCode/, "面板可显示可操作原因（补 robotCode / 再发一条消息激活）");
+  } finally {
+    await bot.stop(); await gateway.close();
+    fs.rmSync(relayDir, { recursive: true, force: true });
+  }
+});
+
+test("★ 脱敏：日志/状态只出现 webhook host 与哈希，不含整条 webhook URL 或 secret", async () => {
+  const relayDir = tmpRelayDir();
+  const gateway = await startGateway();
+  const logs = [];
+  const sub = fakeSubscriber();
+  const bot = createDingtalkBot({
+    clientId: FAKE_CLIENT, clientSecret: FAKE_SECRET, robotCode: "ding-robot",
+    gatewayUrl: gateway.openUrl, relayDir, subscriber: sub,
+    logger: (level, line) => logs.push(line),
+    reconnectBaseMs: 40, reconnectMaxMs: 160, tierDenyThrottleMs: 0
+  });
+  try {
+    bot.start();
+    await waitFor(() => bot.status().connected, { label: "连接" });
+    const webhookUrl = "https://oapi.dingtalk.test/robot/sendBySession?session=TOKEN-SECRET-AAA";
+    gateway.push({
+      type: "CALLBACK", headers: { messageId: "mid-sec", topic: TOPIC_ROBOT },
+      data: JSON.stringify({
+        conversationId: "cid-sec", conversationType: "1", senderStaffId: "staff-sec",
+        msgtype: "text", msgId: "m-sec", text: { content: "hi" },
+        sessionWebhook: webhookUrl, sessionWebhookExpiredTime: Date.now() + 60_000
+      })
+    });
+    await waitFor(() => bot.status().messages >= 1, { label: "入站" });
+    await waitFor(() => logs.join("\n").includes("oapi.dingtalk.test"), { label: "host 日志" });
+    const joined = logs.join("\n");
+    assert.ok(!joined.includes("TOKEN-SECRET-AAA"), "★ 日志不得含 webhook 会话令牌");
+    assert.ok(!joined.includes(FAKE_SECRET), "★ 日志不得含 clientSecret");
+    const raw = fs.readFileSync(path.join(relayDir, IM_BOT_STATUS_FILE), "utf8");
+    assert.ok(!raw.includes("TOKEN-SECRET-AAA"), "★ 状态文件不得含 webhook 原值");
+    assert.ok(!raw.includes(FAKE_SECRET));
+  } finally {
+    await bot.stop(); await gateway.close();
+    fs.rmSync(relayDir, { recursive: true, force: true });
+  }
+});
+
 // ─────────────────── robotCode 可选（扫码一键创建机器人，2026-11-08） ───────────────────
 
 test("★ robotCode 可选：只给 clientId/clientSecret 也能启动、收/回消息；状态 capabilities 如实降级", async () => {
@@ -628,3 +813,114 @@ test("常量：默认 open 端点 / ticket 90s / 退避 1s→60s", () => {
   assert.equal(TICKET_TTL_MS, 90_000);
   assert.equal(TOPIC_ROBOT, "/v1.0/im/bot/messages/get");
 });
+
+// ─────────────────────── 命令层（2026-11-08：/ls 不再转给模型）───────────────────────
+
+test("★ 命令层：/help 回复、免费档 /ls 被拦（会员文案）、/stop 免费急停；命令不进 promptSession", async () => {
+  const rt = await setupBot();
+  try {
+    await rt.start();
+    const pushCmd = async (msgId, text) => {
+      rt.gateway.push({
+        type: "CALLBACK", headers: { messageId: `mid-${msgId}`, topic: TOPIC_ROBOT },
+        data: JSON.stringify({
+          conversationId: "cid-cmd", conversationType: "2", senderStaffId: "staff-cmd",
+          msgtype: "text", msgId: `m-${msgId}`, text: { content: text },
+          sessionWebhook: rt.hook.url, sessionWebhookExpiredTime: Date.now() + 60_000
+        })
+      });
+    };
+    pushCmd("help", "/help");
+    await waitFor(() => rt.hook.state.calls.find((c) => /可用命令/.test(c.body.markdown.text)), { label: "/help 回复" });
+    assert.equal(rt.sub.calls.prompt.length, 0, "★ 命令不得进模型");
+    pushCmd("ls", "/ls");
+    await waitFor(() => rt.hook.state.calls.find((c) => /会员功能/.test(c.body.markdown.text)), { label: "/ls 会员拦截" });
+    assert.equal(rt.sub.calls.prompt.length, 0);
+    pushCmd("stop", "/stop");
+    await waitFor(() => rt.hook.state.calls.find((c) => /已急停|没有正在运行/.test(c.body.markdown.text)), { label: "/stop 回复" });
+    assert.equal(rt.sub.calls.cancel.length, 1, "★ /stop 调 cancelSession");
+    assert.equal(rt.sub.calls.prompt.length, 0);
+    // 普通文本照旧转发
+    await rt.inbound({ text: "帮我看看日志", msgId: "m-normal-cmd" });
+    await waitFor(() => rt.sub.calls.prompt.length === 1, { label: "普通文本转发" });
+  } finally { await rt.close(); }
+});
+
+// ─────────────────────── 任务通知带总结（2026-11-10：只有"已完成"没有总结）───────────────────────
+
+test("★ 任务通知带总结（钉钉）：turn_done → 一条「✅ 任务完成 + 正文」（表格转列表）；同 turn 去重；正文不进日志", async () => {
+  const answer = "修复完成：\n\n| 文件 | 改动 |\n|---|---|\n| a.mjs | 修端口 |\n| b.mjs | 加缓存 |";
+  const rt = await setupBot({ subOptions: { answer } });
+  try {
+    await rt.start();
+    await rt.inbound({ text: "给我看改动", msgId: "sum-in-1" });
+    await waitFor(() => rt.sub.calls.prompt.length === 1, { label: "入站转发" });
+    const turn = { kind: "turn-end", sessionId: "session-live", turn: 1, seq: 41, reason: "completed", at: Date.now() };
+    rt.sub.emit("event", { ...turn });
+    const call = await waitFor(() => rt.hook.state.calls.find((c) => c.body.markdown.text.includes("任务完成")), { label: "任务通知" });
+    const text = call.body.markdown.text;
+    assert.match(text, /^✅ 任务完成/, "★ 通知带「任务完成」标题行");
+    assert.match(text, /\n\n修复完成：/, "★ 同一条消息带总结正文");
+    assert.match(text, /• 文件：a\.mjs · 改动：修端口/, "★ 表格转可读列表");
+    assert.ok(!/\|\s*-{2,}/.test(text), "★ 不得有裸表格");
+    // 同 turn 重复事件 → 去重
+    const before = rt.hook.state.calls.filter((c) => c.body.markdown.text.includes("任务完成")).length;
+    rt.sub.emit("event", { ...turn });
+    await sleep(60);
+    assert.equal(rt.hook.state.calls.filter((c) => c.body.markdown.text.includes("任务完成")).length, before, "★ 同 turn 只发一条");
+    // 正文不进日志（只打 len）
+    const logs = rt.logs.join("\n");
+    assert.ok(!logs.includes("修复完成"), "★ 总结正文绝不能进日志");
+    assert.ok(logs.split("\n").some((l) => /任务通知 .*len=\d+/.test(l)), "日志只记长度");
+  } finally { await rt.close(); }
+});
+
+test("★ 任务通知边界（钉钉）：缺正文降级仅标题；超长按 1500 字截断+注明；出错带错误摘要；审批不混入总结", async () => {
+  // ① 缺正文 → 仅标题
+  {
+    const rt = await setupBot({ subOptions: { answer: "" } });
+    try {
+      await rt.start();
+      await rt.inbound({ text: "hi", msgId: "sum-2" });
+      await waitFor(() => rt.sub.calls.prompt.length === 1, { label: "入站" });
+      rt.sub.emit("event", { kind: "turn-end", sessionId: "session-live", turn: 1, seq: 51, reason: "completed", at: Date.now() });
+      const call = await waitFor(() => rt.hook.state.calls.find((c) => c.body.markdown.text.includes("任务完成")), { label: "降级标题" });
+      assert.equal(call.body.markdown.text, "✅ 任务完成", "★ 取不到正文 → 仅标题（不多空段）");
+    } finally { await rt.close(); }
+  }
+  // ② 超长 → 截断 + 注明；出错 → ❌ + 摘要
+  {
+    const rt = await setupBot({ subOptions: { answer: "开头" + "长".repeat(3000) + "SECRET-TAIL" } });
+    try {
+      await rt.start();
+      await rt.inbound({ text: "hi", msgId: "sum-3" });
+      await waitFor(() => rt.sub.calls.prompt.length === 1, { label: "入站" });
+      rt.sub.emit("event", { kind: "turn-end", sessionId: "session-live", turn: 1, seq: 61, reason: "completed", at: Date.now() });
+      const call = await waitFor(() => rt.hook.state.calls.find((c) => c.body.markdown.text.includes("任务完成")), { label: "截断通知" });
+      const text = call.body.markdown.text;
+      assert.ok(text.endsWith("…(已截断，完整内容看电脑)"), "超长正文要带截断提示");
+      const body = text.split("\n\n").slice(1).join("\n\n");
+      assert.ok(Array.from(body).length <= 1500 + 20, "正文不超过 1500 字（+提示）");
+      assert.ok(!text.includes("SECRET-TAIL"));
+      assert.ok(!rt.logs.join("\n").includes("SECRET-TAIL"), "★ 正文不进日志");
+      // 出错：❌ 标题 + 摘要
+      rt.sub.emit("event", { kind: "turn-end", sessionId: "session-live", turn: 2, seq: 62, reason: "error", at: Date.now() });
+      const err = await waitFor(() => rt.hook.state.calls.find((c) => c.body.markdown.text.startsWith("❌ 出错了")), { label: "出错通知" });
+      assert.match(err.body.markdown.text, /\n\n开头/, "出错也要带错误摘要");
+    } finally { await rt.close(); }
+  }
+  // ③ 审批事件不混入总结（走普通通知，不是 ✅ 任务完成）——先入站绑定回复通道
+  {
+    const rt = await setupBot({ subOptions: { answer: "审批不该出现的总结" } });
+    try {
+      await rt.start();
+      await rt.inbound({ text: "准备审批", msgId: "sum-apr-bind" });
+      await waitFor(() => rt.sub.calls.prompt.length === 1, { label: "入站绑定" });
+      const before = rt.hook.state.calls.length;
+      rt.sub.emit("event", { kind: "approval-request", eventId: "apr_sum_1", toolName: "Bash", sessionId: "session-live" });
+      const call = await waitFor(() => rt.hook.state.calls.slice(before).find((c) => c.body.markdown.text.includes("拍板") || c.body.markdown.text.includes("审批")), { label: "审批通知" });
+      assert.ok(!/^✅ 任务完成/.test(call.body.markdown.text), "★ 审批类不得混入任务总结");
+      assert.ok(!call.body.markdown.text.includes("审批不该出现的总结"), "★ 审批通知不带总结正文");
+    } finally { await rt.close(); }
+  }
+});

package/clients/dsh-remote/test/feishu-bot.test.mjs

@@ -150,10 +150,11 @@ function makeFetch({ tokenCode = 0, sendCode = 0, sendMsg = "", patchCode = 0 }
 }
 
 // ── 假事件订阅器 ──────────────────────────────────────────────────────────
-function makeSubscriber() {
+function makeSubscriber({ answer = { ok: true, text: "" } } = {}) {
   const emitter = new EventEmitter();
-  const calls = { sessions: [], prompts: [], started: 0, stopped: 0, listenSessions: 0 };
+  const calls = { sessions: [], prompts: [], cancels: [], assistant: [], started: 0, stopped: 0, listenSessions: 0 };
   return {
+    lastAssistantText: async ({ sessionId } = {}) => { calls.assistant.push({ sessionId }); return answer; },
     calls,
     on: (evt, cb) => emitter.on(evt, cb),
     emit: (evt, arg) => emitter.emit(evt, arg),
@@ -161,7 +162,8 @@ function makeSubscriber() {
     stop() { calls.stopped += 1; },
     sessions() { return ["session-abc"]; },
     async listSessions() { calls.listenSessions += 1; return [{ sessionId: "session-abc", title: "t" }]; },
-    async promptSession(req) { calls.prompts.push(req); return { ok: true }; }
+    async promptSession(req) { calls.prompts.push(req); return { ok: true }; },
+    async cancelSession(req) { calls.cancels.push(req); return { ok: true }; }
   };
 }
 
@@ -1087,3 +1089,106 @@ test("向导：主路径只有两件事（填 App ID/Secret + 发一句话自动
   assert.match(FEISHU_SETUP_GUIDE.oneAppOnePc, /一台电脑/);
   assert.match(FEISHU_SETUP_GUIDE.docs.registerApp, /open\.feishu\.cn\/app/);
 });
+
+// ─────────────────────── 命令层（2026-11-08：/ls 不再转给模型）───────────────────────
+
+test("controller：命令层 — /help 直接回复、免费档 /ls 被拦、/stop 急停；命令绝不进模型", async () => {
+  const relayDir = mkRelayDir("ctl-cmd");
+  writeConfig(relayDir, { enabled: true, appId: APP_ID, appSecret: APP_SECRET, receiveId: "oc_chat_1", receiveIdType: "chat_id" });
+  const sub = makeSubscriber();
+  const { controller, fetchCalls } = startController(relayDir, { subscriber: sub, capsProvider: async () => "free" });
+  await controller.start();
+  const lastText = () => {
+    const rows = fetchCalls.filter((c) => c.url.includes("/im/v1/messages") && JSON.parse(c.body).msg_type === "text");
+    return rows.length ? JSON.parse(rows[rows.length - 1].body).content : "";
+  };
+  controller._bot()._dispatch("im.message.receive_v1", inboundText("/help"));
+  await waitFor(() => /可用命令/.test(lastText()));
+  assert.match(lastText(), /可用命令/);
+  assert.equal(sub.calls.prompts.length, 0, "★ 命令不得进模型");
+  controller._bot()._dispatch("im.message.receive_v1", inboundText("/ls"));
+  await waitFor(() => /会员功能/.test(lastText()));
+  assert.match(lastText(), /会员功能/, "免费档 /ls 必须被拦");
+  assert.equal(sub.calls.prompts.length, 0);
+  controller._bot()._dispatch("im.message.receive_v1", inboundText("/stop"));
+  await waitFor(() => /已急停|没有正在运行/.test(lastText()));
+  assert.equal(sub.calls.cancels.length, 1, "★ /stop 调 cancelSession");
+  assert.equal(sub.calls.prompts.length, 0, "★ 全部命令都不进模型");
+  // 普通文本照旧转发
+  controller._bot()._dispatch("im.message.receive_v1", inboundText("继续跑"));
+  await waitFor(() => sub.calls.prompts.length === 1);
+  assert.equal(sub.calls.prompts.length, 1);
+  await controller.stop();
+});
+
+// ─────────────────────── 任务通知带总结（2026-11-10：只有"已完成"没有总结）───────────────────────
+
+test("controller：任务通知带总结 — turn_end → 一条「✅ 任务完成 + 正文」；同 turn 去重；正文不进日志；缺正文降级", async () => {
+  const relayDir = mkRelayDir("ctl-summary");
+  writeConfig(relayDir, { enabled: true, appId: APP_ID, appSecret: APP_SECRET, receiveId: "ou_owner", receiveIdType: "open_id" });
+  const sub = makeSubscriber({ answer: { ok: true, text: "飞书总结正文" } });
+  const { controller, fetchCalls, logs } = startController(relayDir, { subscriber: sub });
+  await controller.start();
+  const texts = () => fetchCalls.filter((c) => c.url.includes("/im/v1/messages") && JSON.parse(c.body).msg_type === "text");
+  const contentOf = (row) => JSON.parse(JSON.parse(row.body).content).text;
+  const ev = { kind: "turn-end", sessionId: "session-abc", turn: 1, seq: 7, reason: "completed", at: NOW };
+  sub.emit("event", ev);
+  await waitFor(() => texts().some((t) => contentOf(t).includes("任务完成")));
+  const row = texts().find((t) => contentOf(t).includes("任务完成"));
+  const text = contentOf(row);
+  assert.match(text, /^✅ 任务完成/, "★ 通知带「任务完成」标题行");
+  assert.match(text, /\n\n飞书总结正文$/, "★ 同一条消息带总结正文");
+  const count = texts().filter((t) => contentOf(t).includes("任务完成")).length;
+  assert.equal(count, 1, "★ 同一次 turn 只发一条（不拆标题+正文两条）");
+  // 重复 turn/end → 去重
+  sub.emit("event", ev);
+  await new Promise((r) => setTimeout(r, 40));
+  assert.equal(texts().filter((t) => contentOf(t).includes("任务完成")).length, 1, "★ 同 turn 重复事件去重");
+  // 正文绝不进日志
+  assert.ok(!logs.join("\n").includes("飞书总结正文"), "★ 总结正文绝不能进日志");
+  assert.ok(logs.some((l) => /任务通知 .*len=\d+/.test(l)), "日志只记长度");
+  await controller.stop();
+});
+
+test("controller：任务通知 — 缺正文降级仅标题；超长按 1500 字截断；出错带错误摘要；审批仍走卡片不混入总结", async () => {
+  // ① 缺正文 → 仅标题
+  {
+    const relayDir = mkRelayDir("ctl-summary-none");
+    writeConfig(relayDir, { enabled: true, appId: APP_ID, appSecret: APP_SECRET, receiveId: "ou_owner", receiveIdType: "open_id" });
+    const sub = makeSubscriber(); // 默认 answer={ok:true,text:""}
+    const { controller, fetchCalls } = startController(relayDir, { subscriber: sub });
+    await controller.start();
+    const texts = () => fetchCalls.filter((c) => c.url.includes("/im/v1/messages") && JSON.parse(c.body).msg_type === "text");
+    const contentOf = (row) => JSON.parse(JSON.parse(row.body).content).text;
+    sub.emit("event", { kind: "turn-end", sessionId: "session-abc", turn: 1, seq: 8, reason: "completed", at: NOW });
+    await waitFor(() => texts().some((t) => contentOf(t).includes("任务完成")));
+    assert.equal(contentOf(texts().find((t) => contentOf(t).includes("任务完成"))), "✅ 任务完成", "★ 缺正文 → 仅标题");
+    await controller.stop();
+  }
+  // ② 超长 → 截断 + 注明；出错 → ❌ + 摘要
+  {
+    const relayDir = mkRelayDir("ctl-summary-long");
+    writeConfig(relayDir, { enabled: true, appId: APP_ID, appSecret: APP_SECRET, receiveId: "ou_owner", receiveIdType: "open_id" });
+    const sub = makeSubscriber({ answer: { ok: true, text: "开头" + "长".repeat(3000) + "SECRET-TAIL" } });
+    const { controller, fetchCalls, logs } = startController(relayDir, { subscriber: sub });
+    await controller.start();
+    const texts = () => fetchCalls.filter((c) => c.url.includes("/im/v1/messages") && JSON.parse(c.body).msg_type === "text");
+    const contentOf = (row) => JSON.parse(JSON.parse(row.body).content).text;
+    sub.emit("event", { kind: "turn-end", sessionId: "session-abc", turn: 1, seq: 9, reason: "completed", at: NOW });
+    await waitFor(() => texts().some((t) => contentOf(t).includes("任务完成")));
+    const text = contentOf(texts().find((t) => contentOf(t).includes("任务完成")));
+    assert.ok(text.endsWith("…(已截断，完整内容看电脑)"), "超长正文带截断提示");
+    assert.ok(!text.includes("SECRET-TAIL"));
+    assert.ok(!logs.join("\n").includes("SECRET-TAIL"), "★ 正文不进日志");
+    sub.emit("event", { kind: "turn-end", sessionId: "session-abc", turn: 2, seq: 10, reason: "error", at: NOW });
+    await waitFor(() => texts().some((t) => contentOf(t).startsWith("❌ 出错了")));
+    assert.match(contentOf(texts().find((t) => contentOf(t).startsWith("❌ 出错了"))), /^❌ 出错了\n\n开头/);
+    // ③ 审批事件：仍走 interactive 卡片（不混入任务总结）
+    sub.emit("event", { kind: "approval-request", eventId: "apr_sum_feishu", toolName: "Bash", sessionId: "session-abc" });
+    await waitFor(() => fetchCalls.some((c) => c.url.includes("/im/v1/messages") && JSON.parse(c.body).msg_type === "interactive"));
+    const card = fetchCalls.filter((c) => c.url.includes("/im/v1/messages") && JSON.parse(c.body).msg_type === "interactive").pop();
+    assert.ok(card, "★ 审批仍走卡片");
+    assert.ok(!JSON.parse(card.body).content.includes("任务完成"), "★ 卡片不混入总结");
+    await controller.stop();
+  }
+});

package/clients/dsh-remote/test/im-caps-fixture.mjs

@@ -0,0 +1,8 @@
+/** 测试共用的能力集夹具（与 wechat-runtime 的 WECHAT_CAPABILITY_TABLE 对齐，避免各测试各抄一份）。 */
+export function freeCaps() {
+  return ["notify", "approve", "status", "stop", "assign.continue"];
+}
+
+export function paidCaps() {
+  return ["notify", "approve", "status", "stop", "assign", "sessions", "summary", "steer", "attach", "multi"];
+}