@rezti/dsh-rez-suite 0.1.47 → 0.1.49

package/CHANGELOG.md

@@ -5,12 +5,20 @@
 升级：
 
 ```bash
-dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.47
+dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.49
 ```
 
 不要用裸 `plugin update`，不要写 `latest`（新 profile 有 24 小时发布冷却，当天可能装不上）。不要装 **0.1.46**（GitHub 子依赖会被 DSH 拦住）。
 
-发版顺序：`sso@0.1.14` → `nextcloud@0.1.11` → `@rezti/dsh-web-file-uploader@0.2.2` → `suite@0.1.47`。
+发版顺序：`wechat@0.1.15` → `suite@0.1.49`。
+
+## 0.1.49 — 2026-08-19
+
+- **企业微信智能机器人**：设置页按房间填 BotID + Secret。同事在企微跟哪个机器人说话，消息进网页左侧那个房间。密钥只存本机 `~/.dsh/wecom-channels.json`，不进 compose。旧群 Webhook 仅在一个 bot 都没绑时兼容。
+
+## 0.1.48 — 2026-08-19
+
+- **启动修复**：0.1.47 网页 `Failed to load plugins`，因为客户端还按 `dsh-web-file-uploader` 注册，DSH 要的是 `@rezti/dsh-web-file-uploader`。回形针升到 `0.2.3`。
 
 ## 0.1.47 — 2026-08-19
 

package/README.md

@@ -2,17 +2,17 @@
 
 雷泽插件的**唯一安装入口**。Odoo / 企微 / HA / TAPD / GSC / 企查查（仅法务助理房间） / 天眼查（仅老板） / 工作区（老板三室 + 全员助理）都由这一包拉齐，不要再逐个 `plugin add`，**不要**再装 `@rezti/dsh-rez-boss-desk`。
 
-发版顺序（必做）：先发 `@rezti/dsh-rez-sso@0.1.14` → `@rezti/dsh-rez-nextcloud@0.1.11` → `@rezti/dsh-web-file-uploader@0.2.2` → `@rezti/dsh-rez-suite@0.1.47`。只发 suite 没有 SSO 0.1.14，实验室连接字段不会上 npm。suite 读取 SSO 的 `REZ_DEFAULT_CONNECTIONS.qcc`；缺字段时用官方 URL 兜底，避免插件加载失败把微信面板一起拖垮。
+发版顺序（必做）：先发 `@rezti/dsh-rez-wechat@0.1.15` → `@rezti/dsh-rez-suite@0.1.49`。员工机安装包仍钉已发布的 suite，不要顺手改审批镜像 `SUITE_VERSION`。
 
 设置里选身份后，左侧自己出现对应房间（全员三助理；工程师另加实验室；运营另加设计；老板另加搞钱/产品/运营），不必手动添加工作区。实验室：大模型写 YAML、调 MCP、给下载链接。
 
-回形针走 npm 包 `@rezti/dsh-web-file-uploader@0.2.2`（不要 GitHub：DSH 会拦子依赖 git，0.1.46 因此装不上）。
+回形针走 npm 包 `@rezti/dsh-web-file-uploader@0.2.3`（不要 GitHub：DSH 会拦子依赖 git，0.1.46 因此装不上）。
 
-员工机不要 `SUITE_VERSION=latest`：新 profile 默认 `minimumReleaseAge: 1440`，当天发的包可能装不到。钉死 `0.1.47`，或把 profile 的 `minimumReleaseAge` 改成 `0`。
+员工机不要 `SUITE_VERSION=latest`：新 profile 默认 `minimumReleaseAge: 1440`，当天发的包可能装不到。钉死 `0.1.48`，或把 profile 的 `minimumReleaseAge` 改成 `0`。
 
 ```bash
 # 第一次 / 升级（钉死版本，避开 24h 发布冷却）
-dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.47
+dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.49
 ```
 
 本版改了什么：见 [CHANGELOG.md](./CHANGELOG.md)。

package/README.zh.md

@@ -1,6 +1,6 @@
 # dsh-rez-suite
 
-**用户只装这一包。** 升级只记：`dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.47`（不要用裸 `update`；不要 latest；不要 0.1.46，那一版 GitHub 子依赖会被 DSH 拦住）。本版改了什么见 [CHANGELOG.md](./CHANGELOG.md)。拆分包给开发改代码；不要对同一 profile 再单独 add 子包。
+**用户只装这一包。** 升级只记：`dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.49`（不要用裸 `update`；不要 latest；不要 0.1.46 / 0.1.47）。本版改了什么见 [CHANGELOG.md](./CHANGELOG.md)。拆分包给开发改代码；不要对同一 profile 再单独 add 子包。
 
 说明书 / 规格书用输入栏**回形针**上传原 PDF（官方对话只收图，不要拖文件；不要用微信发 PDF）。先入 `Marketing/Inbox` + TAPD 测试中，凯文跟 Harness 说审批了哪份后，再写入 `Marketing/Publish/…`。
 

package/cordis.patch.yml

@@ -1,5 +1,5 @@
 # 用户只装这一包：`dsh plugin --profile web add @rezti/dsh-rez-suite`
-# 升级只记这一条：`dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.47`
+# 升级只记这一条：`dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.49`
 # 不要再单独 add 子包，会重复注册。
 #
 # MCP rows are started by the domain plugins after rezSso resolves secrets.

package/lib/client.d.ts

@@ -7255,7 +7255,7 @@ declare const zh: {
   readonly 'entry.label': "Rez";
   readonly 'entry.tooltip': "Rez Suite 配置与审计面板";
   readonly 'settings.title': "ReZ-TI";
-  readonly 'settings.description': "公司 MCP（Odoo / Nextcloud / HA / TAPD / GSC）。企业微信栏暂隐。个人微信在「微信」页签扫码。";
+  readonly 'settings.description': "公司 MCP（Odoo / Nextcloud / HA / TAPD / GSC）和企业微信智能机器人。个人微信在「微信」页签扫码。";
   readonly 'panel.title': "Rez Suite";
   readonly 'tab.config': "配置";
   readonly 'tab.weixin': "微信";
@@ -7291,6 +7291,12 @@ declare const zh: {
   readonly 'config.wecom.botId': "Bot ID";
   readonly 'config.wecom.secret': "Secret";
   readonly 'config.wecom.webhook': "群机器人 Webhook";
+  readonly 'config.wecom.hint': "Accio 同款：一个房间绑一个智能机器人。同事在企微跟哪个 bot 说话，就进网页左侧那个房间。密钥只存本机 ~/.dsh/wecom-channels.json，不要写进 compose。BotID / Secret 在企业微信管理后台 → 智能机器人。";
+  readonly 'config.wecom.room': "房间";
+  readonly 'config.wecom.add': "添加绑定";
+  readonly 'config.wecom.remove': "删除";
+  readonly 'config.wecom.empty': "还没有绑定。给人事/财务/法务等房间各建一个企微智能机器人，就能变成不同角色。";
+  readonly 'config.wecom.status': "通道";
   readonly 'config.ha': "Home Assistant";
   readonly 'config.ha.url': "HA MCP URL";
   readonly 'config.ha.token': "长期访问令牌";

package/lib/client.js

@@ -4,7 +4,7 @@ window.__ModuleLoader__.load({
 		var module = { exports: {} };
 		var exports = module.exports;
 		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-(function(){var id="dsh-rez-suite-css";if(typeof document==="undefined"||document.getElementById(id))return;var s=document.createElement("style");s.id=id;s.textContent=".r9dlUa_wordmark {\n  min-width: 0;\n  color: inherit;\n  align-items: center;\n  gap: 8px;\n  display: inline-flex;\n  overflow: hidden;\n}\n\n.r9dlUa_mark {\n  object-fit: contain;\n  flex: none;\n  width: 28px;\n  height: 28px;\n  display: block;\n}\n\n.r9dlUa_markOnly {\n  object-fit: contain;\n  width: 100%;\n  max-width: 28px;\n  height: 100%;\n  max-height: 28px;\n  display: block;\n}\n\n.r9dlUa_name {\n  letter-spacing: .02em;\n  white-space: nowrap;\n  text-overflow: ellipsis;\n  font-size: 15px;\n  font-weight: 650;\n  overflow: hidden;\n}\n\n.r9dlUa_badge {\n  letter-spacing: .06em;\n  opacity: .72;\n  white-space: nowrap;\n  border: 1px solid;\n  border-radius: 4px;\n  flex: none;\n  padding: 2px 6px;\n  font-size: 10px;\n  font-weight: 700;\n  line-height: 1.2;\n}\n.LOjPTW_shell {\n  flex-direction: column;\n  gap: 12px;\n  min-width: 0;\n  display: flex;\n}\n\n.LOjPTW_card {\n  border: 1px solid var(--dsw-alias-border-l2);\n  background: var(--dsw-alias-bg-layer-3);\n  border-radius: 12px;\n  list-style: none;\n  transition: border-color .16s, background .16s;\n}\n\n.LOjPTW_card:hover {\n  border-color: var(--dsw-alias-label-dimmed);\n}\n\n.LOjPTW_cardOpen {\n  background: var(--dsw-alias-bg-layer-2);\n  border-color: var(--dsw-alias-label-dimmed);\n}\n\n.LOjPTW_header {\n  appearance: none;\n  width: 100%;\n  font: inherit;\n  color: inherit;\n  text-align: left;\n  cursor: pointer;\n  background: none;\n  border: 0;\n  border-radius: 12px;\n  align-items: center;\n  gap: 12px;\n  padding: 14px 16px;\n  display: flex;\n}\n\n.LOjPTW_header:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: -2px;\n}\n\n.LOjPTW_headText {\n  flex-direction: column;\n  flex: 1;\n  gap: 4px;\n  min-width: 0;\n  display: flex;\n}\n\n.LOjPTW_name {\n  color: var(--dsw-alias-label-primary);\n  font-size: 15px;\n  font-weight: 600;\n  line-height: 1.4;\n}\n\n.LOjPTW_description {\n  color: var(--dsw-alias-label-tertiary);\n  font-size: 13px;\n  line-height: 1.5;\n}\n\n.LOjPTW_chevron {\n  color: var(--dsw-alias-label-tertiary);\n  flex: none;\n  transition: transform .16s;\n}\n\n.LOjPTW_chevronOpen {\n  transform: rotate(180deg);\n}\n\n.LOjPTW_body {\n  border-top: 1px solid var(--dsw-alias-border-l2);\n  margin: 0 16px 12px;\n  padding-top: 8px;\n}\n\n.LOjPTW_tabBar {\n  border-bottom: 1px solid var(--dsw-alias-border-l1);\n  flex: none;\n  gap: 2px;\n  display: flex;\n}\n\n.LOjPTW_tab {\n  color: var(--dsw-alias-label-secondary);\n  cursor: pointer;\n  background: none;\n  border: none;\n  border-bottom: 2px solid #0000;\n  border-radius: 6px 6px 0 0;\n  padding: 7px 14px;\n  font-size: 13px;\n}\n\n.LOjPTW_tab:hover {\n  color: var(--dsw-alias-label-primary);\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.LOjPTW_tab[data-active] {\n  color: var(--dsw-alias-label-primary);\n  border-bottom-color: var(--dsw-alias-state-business-primary);\n  font-weight: 600;\n}\n\n.LOjPTW_tabBody {\n  flex-direction: column;\n  gap: 12px;\n  min-width: 0;\n  padding: 12px 0 4px;\n  display: flex;\n}\n\n.LOjPTW_section {\n  border: 1px solid var(--dsw-alias-border-l1);\n  background: var(--dsw-alias-bg-layer-1, var(--dsw-alias-bg-base));\n  border-radius: 10px;\n  flex-direction: column;\n  gap: 8px;\n  padding: 12px;\n  display: flex;\n}\n\n.LOjPTW_sectionTitle {\n  color: var(--dsw-alias-label-primary);\n  margin: 0;\n  font-size: 13px;\n  font-weight: 600;\n}\n\n.LOjPTW_field {\n  flex-direction: column;\n  align-items: stretch;\n  gap: 4px;\n  display: flex;\n}\n\n.LOjPTW_label {\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12.5px;\n}\n\n.LOjPTW_input, .LOjPTW_select {\n  color: var(--dsw-alias-label-primary);\n  background: var(--dsw-specific-input-major, var(--dsw-alias-bg-layer-3));\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  outline: none;\n  padding: 6px 8px;\n  font-size: 13px;\n}\n\n.LOjPTW_checkbox {\n  justify-self: start;\n  width: 15px;\n  height: 15px;\n}\n\n.LOjPTW_toolbar {\n  flex-wrap: wrap;\n  flex: none;\n  align-items: center;\n  gap: 8px;\n  display: flex;\n}\n\n.LOjPTW_button {\n  border: 1px solid var(--dsw-alias-border-l2);\n  background: var(--dsw-specific-input-major, var(--dsw-alias-bg-layer-3));\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n  border-radius: 8px;\n  padding: 7px 12px;\n  font-size: 13px;\n}\n\n.LOjPTW_button:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.LOjPTW_button:disabled {\n  opacity: .4;\n  cursor: default;\n}\n\n.LOjPTW_primaryButton {\n  background: var(--dsw-alias-label-primary);\n  border-color: var(--dsw-alias-label-primary);\n  color: var(--dsw-alias-bg-layer-3);\n}\n\n.LOjPTW_dangerButton {\n  background: var(--dsw-alias-state-danger, #c62828);\n  border-color: var(--dsw-alias-state-danger, #c62828);\n  color: #fff;\n}\n\n.LOjPTW_qr {\n  background: #fff;\n  border-radius: 8px;\n  width: 200px;\n  height: 200px;\n  margin: 8px 0;\n  display: block;\n}\n\n.LOjPTW_message {\n  color: var(--dsw-alias-label-secondary);\n  margin: 0;\n  font-size: 12.5px;\n  line-height: 1.5;\n}\n\n.LOjPTW_error {\n  color: var(--dsw-alias-state-danger, #c62828);\n}\n\n.LOjPTW_tableWrap {\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  overflow: auto;\n}\n\n.LOjPTW_table {\n  border-collapse: collapse;\n  width: 100%;\n  font-size: 12.5px;\n}\n\n.LOjPTW_table th {\n  z-index: 1;\n  text-align: left;\n  background: var(--dsw-alias-bg-layer-2, var(--dsw-alias-bg-layer-1));\n  padding: 8px 10px;\n  position: sticky;\n  top: 0;\n}\n\n.LOjPTW_table td {\n  border-top: 1px solid var(--dsw-alias-border-l1);\n  vertical-align: top;\n  padding: 8px 10px;\n}\n\n.LOjPTW_badge {\n  border-radius: 999px;\n  padding: 2px 8px;\n  font-size: 11px;\n  display: inline-block;\n}\n\n.LOjPTW_badgeOk {\n  color: #229a55;\n  background: #229a5524;\n}\n\n.LOjPTW_badgeFail {\n  color: #c62828;\n  background: #c6282824;\n}\n\n.LOjPTW_cards {\n  grid-template-columns: repeat(auto-fill, minmax(140px, 1fr));\n  gap: 8px;\n  display: grid;\n}\n\n.LOjPTW_stat {\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  padding: 10px;\n}\n\n.LOjPTW_cardLabel {\n  color: var(--dsw-alias-label-tertiary);\n  font-size: 11px;\n}\n\n.LOjPTW_cardValue {\n  color: var(--dsw-alias-label-primary);\n  font-size: 15px;\n  font-weight: 600;\n}\n\n.LOjPTW_upgradeLayer {\n  flex: none;\n  align-items: center;\n  width: 100%;\n  height: 42px;\n  margin: 8px 0 0;\n  display: flex;\n  position: relative;\n}\n\n.LOjPTW_upgradeLayerRail {\n  width: 36px;\n  height: 36px;\n  margin: 0;\n}\n\n.LOjPTW_upgradeButton {\n  width: calc(100% + 4px);\n  height: 42px;\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n  background: none;\n  border: none;\n  border-radius: 12px;\n  align-items: center;\n  gap: 8px;\n  margin: 0 -2px;\n  padding: 0 10px 0 8px;\n  font-family: inherit;\n  font-size: 14px;\n  display: inline-flex;\n  overflow: hidden;\n}\n\n.LOjPTW_upgradeButton:hover, .LOjPTW_upgradeButton[data-outdated] {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.LOjPTW_upgradeButton:disabled {\n  cursor: progress;\n  opacity: .72;\n}\n\n.LOjPTW_upgradeButton:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: -2px;\n}\n\n.LOjPTW_upgradeLayerRail .LOjPTW_upgradeButton {\n  border-radius: 50%;\n  justify-content: center;\n  gap: 0;\n  width: 36px;\n  height: 36px;\n  padding: 0;\n}\n\n.LOjPTW_upgradeLabel {\n  text-overflow: ellipsis;\n  white-space: nowrap;\n  min-width: 0;\n  overflow: hidden;\n}\n\n.LOjPTW_upgradeMeta {\n  color: var(--dsw-alias-label-tertiary);\n  font-variant-numeric: tabular-nums;\n  flex: none;\n  margin-left: auto;\n  font-size: 12px;\n  line-height: 16px;\n}\n\n.LOjPTW_upgradeDot {\n  background: var(--dsw-alias-brand-primary);\n  border-radius: 50%;\n  flex: none;\n  width: 7px;\n  height: 7px;\n}\n\n.LOjPTW_changelogDate {\n  font-variant-numeric: tabular-nums;\n  color: var(--dsw-alias-label-tertiary);\n  margin-left: 8px;\n  font-weight: 500;\n}\n\n.LOjPTW_changelogBlock {\n  flex-direction: column;\n  gap: 6px;\n  display: flex;\n}\n\n.LOjPTW_changelogHeading {\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12.5px;\n  font-weight: 600;\n}\n\n.LOjPTW_changelogList {\n  color: var(--dsw-alias-label-primary);\n  flex-direction: column;\n  gap: 6px;\n  margin: 0;\n  padding-left: 18px;\n  font-size: 13px;\n  line-height: 1.55;\n  display: flex;\n}\n\n.LOjPTW_changelogList li + li {\n  margin: 0;\n}\n\n.LOjPTW_changelogCode {\n  background: var(--dsw-alias-bg-layer-3);\n  border: 1px solid var(--dsw-alias-border-l2);\n  word-break: break-all;\n  border-radius: 6px;\n  padding: 1px 6px;\n  font-size: 12px;\n}\n";document.head.appendChild(s);})();
+(function(){var id="dsh-rez-suite-css";if(typeof document==="undefined"||document.getElementById(id))return;var s=document.createElement("style");s.id=id;s.textContent=".r9dlUa_wordmark {\n  min-width: 0;\n  color: inherit;\n  align-items: center;\n  gap: 8px;\n  display: inline-flex;\n  overflow: hidden;\n}\n\n.r9dlUa_mark {\n  object-fit: contain;\n  flex: none;\n  width: 28px;\n  height: 28px;\n  display: block;\n}\n\n.r9dlUa_markOnly {\n  object-fit: contain;\n  width: 100%;\n  max-width: 28px;\n  height: 100%;\n  max-height: 28px;\n  display: block;\n}\n\n.r9dlUa_name {\n  letter-spacing: .02em;\n  white-space: nowrap;\n  text-overflow: ellipsis;\n  font-size: 15px;\n  font-weight: 650;\n  overflow: hidden;\n}\n\n.r9dlUa_badge {\n  letter-spacing: .06em;\n  opacity: .72;\n  white-space: nowrap;\n  border: 1px solid;\n  border-radius: 4px;\n  flex: none;\n  padding: 2px 6px;\n  font-size: 10px;\n  font-weight: 700;\n  line-height: 1.2;\n}\n.LOjPTW_shell {\n  flex-direction: column;\n  gap: 12px;\n  min-width: 0;\n  display: flex;\n}\n\n.LOjPTW_card {\n  border: 1px solid var(--dsw-alias-border-l2);\n  background: var(--dsw-alias-bg-layer-3);\n  border-radius: 12px;\n  list-style: none;\n  transition: border-color .16s, background .16s;\n}\n\n.LOjPTW_card:hover {\n  border-color: var(--dsw-alias-label-dimmed);\n}\n\n.LOjPTW_cardOpen {\n  background: var(--dsw-alias-bg-layer-2);\n  border-color: var(--dsw-alias-label-dimmed);\n}\n\n.LOjPTW_header {\n  appearance: none;\n  width: 100%;\n  font: inherit;\n  color: inherit;\n  text-align: left;\n  cursor: pointer;\n  background: none;\n  border: 0;\n  border-radius: 12px;\n  align-items: center;\n  gap: 12px;\n  padding: 14px 16px;\n  display: flex;\n}\n\n.LOjPTW_header:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: -2px;\n}\n\n.LOjPTW_headText {\n  flex-direction: column;\n  flex: 1;\n  gap: 4px;\n  min-width: 0;\n  display: flex;\n}\n\n.LOjPTW_name {\n  color: var(--dsw-alias-label-primary);\n  font-size: 15px;\n  font-weight: 600;\n  line-height: 1.4;\n}\n\n.LOjPTW_description {\n  color: var(--dsw-alias-label-tertiary);\n  font-size: 13px;\n  line-height: 1.5;\n}\n\n.LOjPTW_chevron {\n  color: var(--dsw-alias-label-tertiary);\n  flex: none;\n  transition: transform .16s;\n}\n\n.LOjPTW_chevronOpen {\n  transform: rotate(180deg);\n}\n\n.LOjPTW_body {\n  border-top: 1px solid var(--dsw-alias-border-l2);\n  margin: 0 16px 12px;\n  padding-top: 8px;\n}\n\n.LOjPTW_tabBar {\n  border-bottom: 1px solid var(--dsw-alias-border-l1);\n  flex: none;\n  gap: 2px;\n  display: flex;\n}\n\n.LOjPTW_tab {\n  color: var(--dsw-alias-label-secondary);\n  cursor: pointer;\n  background: none;\n  border: none;\n  border-bottom: 2px solid #0000;\n  border-radius: 6px 6px 0 0;\n  padding: 7px 14px;\n  font-size: 13px;\n}\n\n.LOjPTW_tab:hover {\n  color: var(--dsw-alias-label-primary);\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.LOjPTW_tab[data-active] {\n  color: var(--dsw-alias-label-primary);\n  border-bottom-color: var(--dsw-alias-state-business-primary);\n  font-weight: 600;\n}\n\n.LOjPTW_tabBody {\n  flex-direction: column;\n  gap: 12px;\n  min-width: 0;\n  padding: 12px 0 4px;\n  display: flex;\n}\n\n.LOjPTW_section {\n  border: 1px solid var(--dsw-alias-border-l1);\n  background: var(--dsw-alias-bg-layer-1, var(--dsw-alias-bg-base));\n  border-radius: 10px;\n  flex-direction: column;\n  gap: 8px;\n  padding: 12px;\n  display: flex;\n}\n\n.LOjPTW_sectionTitle {\n  color: var(--dsw-alias-label-primary);\n  margin: 0;\n  font-size: 13px;\n  font-weight: 600;\n}\n\n.LOjPTW_field {\n  flex-direction: column;\n  align-items: stretch;\n  gap: 4px;\n  display: flex;\n}\n\n.LOjPTW_label {\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12.5px;\n}\n\n.LOjPTW_input, .LOjPTW_select {\n  color: var(--dsw-alias-label-primary);\n  background: var(--dsw-specific-input-major, var(--dsw-alias-bg-layer-3));\n  border: 1px solid var(--dsw-alias-border-l2);\n  border-radius: 8px;\n  outline: none;\n  padding: 6px 8px;\n  font-size: 13px;\n}\n\n.LOjPTW_checkbox {\n  justify-self: start;\n  width: 15px;\n  height: 15px;\n}\n\n.LOjPTW_wecomRow {\n  grid-template-columns: minmax(7rem, .8fr) minmax(8rem, 1fr) minmax(8rem, 1fr) auto;\n  align-items: end;\n  gap: 8px;\n  display: grid;\n}\n\n.LOjPTW_wecomRow .LOjPTW_message {\n  grid-column: 1 / -1;\n}\n\n.LOjPTW_toolbar {\n  flex-wrap: wrap;\n  flex: none;\n  align-items: center;\n  gap: 8px;\n  display: flex;\n}\n\n.LOjPTW_button {\n  border: 1px solid var(--dsw-alias-border-l2);\n  background: var(--dsw-specific-input-major, var(--dsw-alias-bg-layer-3));\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n  border-radius: 8px;\n  padding: 7px 12px;\n  font-size: 13px;\n}\n\n.LOjPTW_button:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.LOjPTW_button:disabled {\n  opacity: .4;\n  cursor: default;\n}\n\n.LOjPTW_primaryButton {\n  background: var(--dsw-alias-label-primary);\n  border-color: var(--dsw-alias-label-primary);\n  color: var(--dsw-alias-bg-layer-3);\n}\n\n.LOjPTW_dangerButton {\n  background: var(--dsw-alias-state-danger, #c62828);\n  border-color: var(--dsw-alias-state-danger, #c62828);\n  color: #fff;\n}\n\n.LOjPTW_qr {\n  background: #fff;\n  border-radius: 8px;\n  width: 200px;\n  height: 200px;\n  margin: 8px 0;\n  display: block;\n}\n\n.LOjPTW_message {\n  color: var(--dsw-alias-label-secondary);\n  margin: 0;\n  font-size: 12.5px;\n  line-height: 1.5;\n}\n\n.LOjPTW_error {\n  color: var(--dsw-alias-state-danger, #c62828);\n}\n\n.LOjPTW_tableWrap {\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  overflow: auto;\n}\n\n.LOjPTW_table {\n  border-collapse: collapse;\n  width: 100%;\n  font-size: 12.5px;\n}\n\n.LOjPTW_table th {\n  z-index: 1;\n  text-align: left;\n  background: var(--dsw-alias-bg-layer-2, var(--dsw-alias-bg-layer-1));\n  padding: 8px 10px;\n  position: sticky;\n  top: 0;\n}\n\n.LOjPTW_table td {\n  border-top: 1px solid var(--dsw-alias-border-l1);\n  vertical-align: top;\n  padding: 8px 10px;\n}\n\n.LOjPTW_badge {\n  border-radius: 999px;\n  padding: 2px 8px;\n  font-size: 11px;\n  display: inline-block;\n}\n\n.LOjPTW_badgeOk {\n  color: #229a55;\n  background: #229a5524;\n}\n\n.LOjPTW_badgeFail {\n  color: #c62828;\n  background: #c6282824;\n}\n\n.LOjPTW_cards {\n  grid-template-columns: repeat(auto-fill, minmax(140px, 1fr));\n  gap: 8px;\n  display: grid;\n}\n\n.LOjPTW_stat {\n  border: 1px solid var(--dsw-alias-border-l1);\n  border-radius: 10px;\n  padding: 10px;\n}\n\n.LOjPTW_cardLabel {\n  color: var(--dsw-alias-label-tertiary);\n  font-size: 11px;\n}\n\n.LOjPTW_cardValue {\n  color: var(--dsw-alias-label-primary);\n  font-size: 15px;\n  font-weight: 600;\n}\n\n.LOjPTW_upgradeLayer {\n  flex: none;\n  align-items: center;\n  width: 100%;\n  height: 42px;\n  margin: 8px 0 0;\n  display: flex;\n  position: relative;\n}\n\n.LOjPTW_upgradeLayerRail {\n  width: 36px;\n  height: 36px;\n  margin: 0;\n}\n\n.LOjPTW_upgradeButton {\n  width: calc(100% + 4px);\n  height: 42px;\n  color: var(--dsw-alias-label-primary);\n  cursor: pointer;\n  background: none;\n  border: none;\n  border-radius: 12px;\n  align-items: center;\n  gap: 8px;\n  margin: 0 -2px;\n  padding: 0 10px 0 8px;\n  font-family: inherit;\n  font-size: 14px;\n  display: inline-flex;\n  overflow: hidden;\n}\n\n.LOjPTW_upgradeButton:hover, .LOjPTW_upgradeButton[data-outdated] {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.LOjPTW_upgradeButton:disabled {\n  cursor: progress;\n  opacity: .72;\n}\n\n.LOjPTW_upgradeButton:focus-visible {\n  outline: 2px solid var(--dsw-alias-brand-primary);\n  outline-offset: -2px;\n}\n\n.LOjPTW_upgradeLayerRail .LOjPTW_upgradeButton {\n  border-radius: 50%;\n  justify-content: center;\n  gap: 0;\n  width: 36px;\n  height: 36px;\n  padding: 0;\n}\n\n.LOjPTW_upgradeLabel {\n  text-overflow: ellipsis;\n  white-space: nowrap;\n  min-width: 0;\n  overflow: hidden;\n}\n\n.LOjPTW_upgradeMeta {\n  color: var(--dsw-alias-label-tertiary);\n  font-variant-numeric: tabular-nums;\n  flex: none;\n  margin-left: auto;\n  font-size: 12px;\n  line-height: 16px;\n}\n\n.LOjPTW_upgradeDot {\n  background: var(--dsw-alias-brand-primary);\n  border-radius: 50%;\n  flex: none;\n  width: 7px;\n  height: 7px;\n}\n\n.LOjPTW_changelogDate {\n  font-variant-numeric: tabular-nums;\n  color: var(--dsw-alias-label-tertiary);\n  margin-left: 8px;\n  font-weight: 500;\n}\n\n.LOjPTW_changelogBlock {\n  flex-direction: column;\n  gap: 6px;\n  display: flex;\n}\n\n.LOjPTW_changelogHeading {\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12.5px;\n  font-weight: 600;\n}\n\n.LOjPTW_changelogList {\n  color: var(--dsw-alias-label-primary);\n  flex-direction: column;\n  gap: 6px;\n  margin: 0;\n  padding-left: 18px;\n  font-size: 13px;\n  line-height: 1.55;\n  display: flex;\n}\n\n.LOjPTW_changelogList li + li {\n  margin: 0;\n}\n\n.LOjPTW_changelogCode {\n  background: var(--dsw-alias-bg-layer-3);\n  border: 1px solid var(--dsw-alias-border-l2);\n  word-break: break-all;\n  border-radius: 6px;\n  padding: 1px 6px;\n  font-size: 12px;\n}\n";document.head.appendChild(s);})();
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 let react = require("react");
 let react_jsx_runtime = require("react/jsx-runtime");
@@ -139,7 +139,7 @@ const zh = {
 	"entry.label": "Rez",
 	"entry.tooltip": "Rez Suite 配置与审计面板",
 	"settings.title": "ReZ-TI",
-	"settings.description": "公司 MCP（Odoo / Nextcloud / HA / TAPD / GSC）。企业微信栏暂隐。个人微信在「微信」页签扫码。",
+	"settings.description": "公司 MCP（Odoo / Nextcloud / HA / TAPD / GSC）和企业微信智能机器人。个人微信在「微信」页签扫码。",
 	"panel.title": "Rez Suite",
 	"tab.config": "配置",
 	"tab.weixin": "微信",
@@ -175,6 +175,12 @@ const zh = {
 	"config.wecom.botId": "Bot ID",
 	"config.wecom.secret": "Secret",
 	"config.wecom.webhook": "群机器人 Webhook",
+	"config.wecom.hint": "Accio 同款：一个房间绑一个智能机器人。同事在企微跟哪个 bot 说话，就进网页左侧那个房间。密钥只存本机 ~/.dsh/wecom-channels.json，不要写进 compose。BotID / Secret 在企业微信管理后台 → 智能机器人。",
+	"config.wecom.room": "房间",
+	"config.wecom.add": "添加绑定",
+	"config.wecom.remove": "删除",
+	"config.wecom.empty": "还没有绑定。给人事/财务/法务等房间各建一个企微智能机器人，就能变成不同角色。",
+	"config.wecom.status": "通道",
 	"config.ha": "Home Assistant",
 	"config.ha.url": "HA MCP URL",
 	"config.ha.token": "长期访问令牌",
@@ -268,7 +274,7 @@ const en = {
 	"entry.label": "Rez",
 	"entry.tooltip": "Rez Suite configuration and audit panel",
 	"settings.title": "ReZ-TI",
-	"settings.description": "Company MCP (Odoo / Nextcloud / HA / TAPD / GSC). WeCom settings are hidden for now. Personal WeChat is the WeChat tab.",
+	"settings.description": "Company MCP (Odoo / Nextcloud / HA / TAPD / GSC) and WeCom AI bots. Personal WeChat is the WeChat tab.",
 	"panel.title": "Rez Suite",
 	"tab.config": "Config",
 	"tab.weixin": "WeChat",
@@ -304,6 +310,12 @@ const en = {
 	"config.wecom.botId": "Bot ID",
 	"config.wecom.secret": "Secret",
 	"config.wecom.webhook": "Group bot webhook",
+	"config.wecom.hint": "Accio-style: one WeCom AI bot per Harness room. Whoever talks to that bot lands in that sidebar folder. Secrets stay in ~/.dsh/wecom-channels.json, not compose. BotID / Secret come from WeCom admin → AI bot.",
+	"config.wecom.room": "Room",
+	"config.wecom.add": "Add binding",
+	"config.wecom.remove": "Remove",
+	"config.wecom.empty": "No bots yet. Bind a WeCom AI bot to HR / finance / legal / … so each room is a different role.",
+	"config.wecom.status": "Channel",
 	"config.ha": "Home Assistant",
 	"config.ha.url": "HA MCP URL",
 	"config.ha.token": "Long-lived access token",
@@ -409,6 +421,7 @@ const REZ_API = {
 	auditReset: "/api/dsh-rez-suite/audit/reset",
 	weixin: "/api/dsh-rez-suite/weixin",
 	weixinVerify: "/api/dsh-rez-suite/weixin/verify",
+	wecomChannels: "/api/dsh-rez-suite/wecom/channels",
 	update: "/api/dsh-rez-suite/update"
 };
 //#endregion
@@ -471,6 +484,16 @@ var RezApi = class {
 	async weixinLogout() {
 		return readJson(await fetch(REZ_API.weixin, { method: "DELETE" }));
 	}
+	async wecomChannels() {
+		return readJson(await fetch(REZ_API.wecomChannels));
+	}
+	async saveWecomChannels(bots) {
+		return readJson(await fetch(REZ_API.wecomChannels, {
+			method: "PUT",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify({ bots })
+		}));
+	}
 	async updateStatus() {
 		return readJson(await fetch(REZ_API.update));
 	}
@@ -550,7 +573,8 @@ var panel_module_default = {
 	"upgradeLabel": "LOjPTW_upgradeLabel",
 	"upgradeLayer": "LOjPTW_upgradeLayer",
 	"upgradeLayerRail": "LOjPTW_upgradeLayerRail",
-	"upgradeMeta": "LOjPTW_upgradeMeta"
+	"upgradeMeta": "LOjPTW_upgradeMeta",
+	"wecomRow": "LOjPTW_wecomRow"
 };
 //#endregion
 //#region src/client/panel/AuditTab.tsx
@@ -718,81 +742,112 @@ function AuditTab({ api }) {
 }
 //#endregion
 //#region src/changelog.ts
-const SUITE_CHANGELOG = [{
-	version: "0.1.47",
-	date: "2026-08-19",
-	sections: [{
-		title: {
-			zh: "安装修复",
-			en: "Install fix"
-		},
-		items: [{
-			zh: "0.1.46 装不上：DSH 禁止插件子依赖走 GitHub。回形针已改成 npm 包 @rezti/dsh-web-file-uploader@0.2.2。请装 0.1.47，不要再装 0.1.46。",
-			en: "0.1.46 cannot install: DSH blocks GitHub git deps as plugin subdependencies. The paperclip plugin is now @rezti/dsh-web-file-uploader@0.2.2 on npm. Install 0.1.47, not 0.1.46."
-		}, {
-			zh: "设置 → 插件 → ReZ-TI → 更新日志：能看到本页说明。",
-			en: "Settings → Plugins → ReZ-TI → Changelog shows these notes."
-		}]
-	}]
-}, {
-	version: "0.1.46",
-	date: "2026-08-19",
-	sections: [{
-		title: {
-			zh: "员工会碰到的",
-			en: "What you will see"
-		},
-		items: [
-			{
-				zh: "回形针上传 PDF：说明书 / 规格书走输入栏回形针，先入 Marketing/Inbox，对应 TAPD 改成测试中并转凯文；凯文说审批了哪份，再进 Marketing/Publish。不要用微信发 PDF。",
-				en: "Paperclip PDF uploads: manuals go to Marketing/Inbox first. TAPD moves to 测试中 and Kelvin; after he names the file, it lands in Marketing/Publish. Do not send PDFs over WeChat."
-			},
-			{
-				zh: "运营多了「设计」房间：拍摄原片 Comfy 只修一次，shot / clean 先入 Inbox；凯文终审后同时写入 Marketing/RAW。",
-				en: "Operations gets a Design room. Retouch shots once in Comfy; shot/clean stay in Inbox until Kelvin dual-saves them to Marketing/RAW."
-			},
-			{
-				zh: "品牌 / VI 走 Marketing/Inbox/Brand/，终审后写入 Marketing/RAW/Brand/，不要写进某个 SKU。",
-				en: "Brand / VI files go Marketing/Inbox/Brand/, then Marketing/RAW/Brand/ after approval — not into a SKU folder."
-			},
-			{
-				zh: "工程师多了「实验室」：对话里给 YAML，立刻拿到下载链接。还在编是说明文件；成功是 firmware.bin；失败是带日志的 README。不要在对话里等 bin，不要默认 OTA。",
-				en: "Engineers get a Lab room. Submit YAML and get a download link immediately. Compiling shows a README; success is firmware.bin; failure includes the log. Do not wait for the bin in chat. Do not OTA by default."
+const SUITE_CHANGELOG = [
+	{
+		version: "0.1.49",
+		date: "2026-08-19",
+		sections: [{
+			title: {
+				zh: "企业微信智能机器人",
+				en: "WeCom AI bots"
 			},
-			{
-				zh: "人事助理可引导新人领本机安装包、自己申请 API Key。",
-				en: "HR assistant can walk new staff through the desktop installer and API key request."
+			items: [{
+				zh: "设置页按房间绑定企微智能机器人（BotID + Secret）。同事在企微跟哪个 bot 说话，就进网页左侧那个房间。密钥只存本机，不进 compose。",
+				en: "Bind a WeCom AI bot (BotID + Secret) per Harness room. Talk to that bot in WeCom and the thread lands in that sidebar folder. Secrets stay on disk, not in compose."
+			}]
+		}]
+	},
+	{
+		version: "0.1.48",
+		date: "2026-08-19",
+		sections: [{
+			title: {
+				zh: "启动修复",
+				en: "Startup fix"
 			},
-			{
-				zh: "设置页暂时不显示企业微信配置栏（已填过的 webhook 不会被擦掉）。",
-				en: "WeCom settings are hidden for now. An existing webhook is left as-is."
+			items: [{
+				zh: "0.1.47 网页报 Failed to load plugins：回形针客户端仍按旧名注册。已发 @rezti/dsh-web-file-uploader@0.2.3，模块 id 与包名一致。请装 0.1.48。",
+				en: "0.1.47 failed to load plugins because the paperclip client still registered under the old package name. @rezti/dsh-web-file-uploader@0.2.3 matches the scoped name. Install 0.1.48."
+			}]
+		}]
+	},
+	{
+		version: "0.1.47",
+		date: "2026-08-19",
+		sections: [{
+			title: {
+				zh: "安装修复",
+				en: "Install fix"
 			},
-			{
-				zh: "运营仍可改 TAPD 状态、写评论、往 Inbox 传文件；不能删 TAPD / Nextcloud。",
-				en: "Operations can still update TAPD and write Inbox files, but cannot delete TAPD or Nextcloud items."
-			}
-		]
-	}, {
-		title: {
-			zh: "安装与审批机",
-			en: "Installers and approver machines"
-		},
-		items: [
-			{
-				zh: "员工 Mac zip / Windows exe、审批人 Docker：每次启动拉钉死的 0.1.46，不要 latest。",
-				en: "Staff Mac zip / Windows exe and approver Docker pin suite 0.1.46. Do not use latest."
+			items: [{
+				zh: "0.1.46 装不上：DSH 禁止插件子依赖走 GitHub。回形针已改成 npm 包 @rezti/dsh-web-file-uploader@0.2.2。请装 0.1.47，不要再装 0.1.46。",
+				en: "0.1.46 cannot install: DSH blocks GitHub git deps as plugin subdependencies. The paperclip plugin is now @rezti/dsh-web-file-uploader@0.2.2 on npm. Install 0.1.47, not 0.1.46."
+			}, {
+				zh: "设置 → 插件 → ReZ-TI → 更新日志：能看到本页说明。",
+				en: "Settings → Plugins → ReZ-TI → Changelog shows these notes."
+			}]
+		}]
+	},
+	{
+		version: "0.1.46",
+		date: "2026-08-19",
+		sections: [{
+			title: {
+				zh: "员工会碰到的",
+				en: "What you will see"
 			},
-			{
-				zh: "安装包只是启动壳，第一次会从外网拉 Node 和 dsh。",
-				en: "The zip/exe is a launcher. The first run downloads Node and dsh."
+			items: [
+				{
+					zh: "回形针上传 PDF：说明书 / 规格书走输入栏回形针，先入 Marketing/Inbox，对应 TAPD 改成测试中并转凯文；凯文说审批了哪份，再进 Marketing/Publish。不要用微信发 PDF。",
+					en: "Paperclip PDF uploads: manuals go to Marketing/Inbox first. TAPD moves to 测试中 and Kelvin; after he names the file, it lands in Marketing/Publish. Do not send PDFs over WeChat."
+				},
+				{
+					zh: "运营多了「设计」房间：拍摄原片 Comfy 只修一次，shot / clean 先入 Inbox；凯文终审后同时写入 Marketing/RAW。",
+					en: "Operations gets a Design room. Retouch shots once in Comfy; shot/clean stay in Inbox until Kelvin dual-saves them to Marketing/RAW."
+				},
+				{
+					zh: "品牌 / VI 走 Marketing/Inbox/Brand/，终审后写入 Marketing/RAW/Brand/，不要写进某个 SKU。",
+					en: "Brand / VI files go Marketing/Inbox/Brand/, then Marketing/RAW/Brand/ after approval — not into a SKU folder."
+				},
+				{
+					zh: "工程师多了「实验室」：对话里给 YAML，立刻拿到下载链接。还在编是说明文件；成功是 firmware.bin；失败是带日志的 README。不要在对话里等 bin，不要默认 OTA。",
+					en: "Engineers get a Lab room. Submit YAML and get a download link immediately. Compiling shows a README; success is firmware.bin; failure includes the log. Do not wait for the bin in chat. Do not OTA by default."
+				},
+				{
+					zh: "人事助理可引导新人领本机安装包、自己申请 API Key。",
+					en: "HR assistant can walk new staff through the desktop installer and API key request."
+				},
+				{
+					zh: "设置页暂时不显示企业微信配置栏（已填过的 webhook 不会被擦掉）。",
+					en: "WeCom settings are hidden for now. An existing webhook is left as-is."
+				},
+				{
+					zh: "运营仍可改 TAPD 状态、写评论、往 Inbox 传文件；不能删 TAPD / Nextcloud。",
+					en: "Operations can still update TAPD and write Inbox files, but cannot delete TAPD or Nextcloud items."
+				}
+			]
+		}, {
+			title: {
+				zh: "安装与审批机",
+				en: "Installers and approver machines"
 			},
-			{
-				zh: "回形针依赖还在 GitHub。装 suite 要能访问 GitHub；公司机禁外网会失败。",
-				en: "The paperclip plugin still comes from GitHub. Installing suite needs GitHub access."
-			}
-		]
-	}]
-}];
+			items: [
+				{
+					zh: "员工 Mac zip / Windows exe、审批人 Docker：每次启动拉钉死的 0.1.46，不要 latest。",
+					en: "Staff Mac zip / Windows exe and approver Docker pin suite 0.1.46. Do not use latest."
+				},
+				{
+					zh: "安装包只是启动壳，第一次会从外网拉 Node 和 dsh。",
+					en: "The zip/exe is a launcher. The first run downloads Node and dsh."
+				},
+				{
+					zh: "回形针依赖还在 GitHub。装 suite 要能访问 GitHub；公司机禁外网会失败。",
+					en: "The paperclip plugin still comes from GitHub. Installing suite needs GitHub access."
+				}
+			]
+		}]
+	}
+];
 function latestSuiteChangelog() {
 	const latest = SUITE_CHANGELOG[0];
 	if (latest === void 0) throw new Error("SUITE_CHANGELOG is empty");
@@ -893,6 +948,128 @@ const EMPTY_SECRETS = {
 	tianyancha: "",
 	esphome: ""
 };
+const WECOM_SECRET_MASK = "********";
+function WecomSection({ rooms, drafts, status, onChange }) {
+	const t = useT();
+	const used = new Set(drafts.map((row) => row.room));
+	const unused = rooms.filter((room) => !used.has(room));
+	const hintFor = (room) => status.find((row) => row.room === room)?.hint ?? "";
+	const add = () => {
+		const room = unused[0];
+		if (room === void 0) return;
+		onChange([...drafts, {
+			key: `new-${room}-${Date.now()}`,
+			room,
+			botId: "",
+			secret: "",
+			secretConfigured: false
+		}]);
+	};
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Section, {
+		title: t("config.wecom"),
+		children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+				className: panel_module_default.message,
+				children: t("config.wecom.hint")
+			}),
+			drafts.length === 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+				className: panel_module_default.message,
+				children: t("config.wecom.empty")
+			}),
+			drafts.map((row, index) => {
+				const options = rooms.filter((room) => room === row.room || !used.has(room));
+				return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: panel_module_default.wecomRow,
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Field, {
+							label: t("config.wecom.room"),
+							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("select", {
+								className: panel_module_default.select,
+								value: row.room,
+								onChange: (event) => {
+									const next = drafts.slice();
+									next[index] = {
+										...row,
+										room: event.target.value
+									};
+									onChange(next);
+								},
+								children: options.map((room) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+									value: room,
+									children: room
+								}, room))
+							})
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Field, {
+							label: t("config.wecom.botId"),
+							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								className: panel_module_default.input,
+								autoComplete: "off",
+								value: row.botId,
+								onChange: (event) => {
+									const next = drafts.slice();
+									next[index] = {
+										...row,
+										botId: event.target.value
+									};
+									onChange(next);
+								}
+							})
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Field, {
+							label: t("config.wecom.secret"),
+							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								className: panel_module_default.input,
+								type: "password",
+								autoComplete: "off",
+								value: row.secret,
+								placeholder: row.secretConfigured ? t("config.secretConfigured") : t("config.secretMissing"),
+								onChange: (event) => {
+									const next = drafts.slice();
+									next[index] = {
+										...row,
+										secret: event.target.value
+									};
+									onChange(next);
+								}
+							})
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: panel_module_default.button,
+							onClick: () => {
+								onChange(drafts.filter((_, i) => i !== index));
+							},
+							children: t("config.wecom.remove")
+						}),
+						hintFor(row.room) !== "" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							className: panel_module_default.message,
+							children: hintFor(row.room)
+						})
+					]
+				}, row.key);
+			}),
+			unused.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: panel_module_default.toolbar,
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+					type: "button",
+					className: panel_module_default.button,
+					onClick: add,
+					children: t("config.wecom.add")
+				})
+			})
+		]
+	});
+}
+function toWecomDrafts(bots) {
+	return bots.map((bot, index) => ({
+		key: `${bot.room}-${index}`,
+		room: bot.room,
+		botId: bot.botId,
+		secret: "",
+		secretConfigured: bot.secretConfigured
+	}));
+}
 function Field({ label, children }) {
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 		className: panel_module_default.field,
@@ -986,9 +1163,38 @@ function ConfigTab({ api }) {
 	const [message, setMessage] = (0, react.useState)("");
 	const [error, setError] = (0, react.useState)("");
 	const [results, setResults] = (0, react.useState)([]);
+	const [wecomRooms, setWecomRooms] = (0, react.useState)([]);
+	const [wecomDrafts, setWecomDrafts] = (0, react.useState)([]);
+	const [wecomStatus, setWecomStatus] = (0, react.useState)([]);
 	const load = async () => {
 		try {
 			setConfig(await api.getConfig());
+			try {
+				const wecom = await api.wecomChannels();
+				setWecomRooms(wecom.rooms.length > 0 ? wecom.rooms : [
+					"搞钱",
+					"产品",
+					"运营",
+					"人事助理",
+					"财务助理",
+					"法务助理",
+					"设计",
+					"实验室"
+				]);
+				setWecomDrafts(toWecomDrafts(wecom.bots));
+				setWecomStatus(wecom.status);
+			} catch {
+				setWecomRooms([
+					"搞钱",
+					"产品",
+					"运营",
+					"人事助理",
+					"财务助理",
+					"法务助理",
+					"设计",
+					"实验室"
+				]);
+			}
 		} catch (err) {
 			setError(errorMessage(err));
 		} finally {
@@ -1075,6 +1281,14 @@ function ConfigTab({ api }) {
 			const saved = await api.saveConfig(payload);
 			setConfig(saved);
 			setSecrets(EMPTY_SECRETS);
+			const wecomSaved = await api.saveWecomChannels(wecomDrafts.map((row) => ({
+				room: row.room,
+				botId: row.botId.trim(),
+				secret: row.secret.trim().length > 0 ? row.secret.trim() : row.secretConfigured ? WECOM_SECRET_MASK : ""
+			})));
+			setWecomRooms(wecomSaved.rooms);
+			setWecomDrafts(toWecomDrafts(wecomSaved.bots));
+			setWecomStatus(wecomSaved.status);
 			setMessage(t("config.saved"));
 		} catch (err) {
 			setError(errorMessage(err));
@@ -1188,6 +1402,12 @@ function ConfigTab({ api }) {
 				usernameLabel: t("config.nextcloud.username"),
 				secretLabel: t("config.nextcloud.appPassword")
 			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(WecomSection, {
+				rooms: wecomRooms,
+				drafts: wecomDrafts,
+				status: wecomStatus,
+				onChange: setWecomDrafts
+			}),
 			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(McpSection, {
 				title: t("config.ha"),
 				row: config.connections.homeassistant,

package/lib/index.js

@@ -2935,7 +2935,7 @@ const COMPOSED_SERVERS = [
 	"tianyancha",
 	"esphome"
 ];
-/** Front panel hides these until install/docs are ready. Backend MCP can still start if a secret exists. TAPD 1154488930001001224. */
+/** Front panel hides webhook MCP wechat status; AI bots live in the Config WeCom bindings. TAPD 1154488930001001231. */
 const FRONT_HIDDEN_SERVERS = /* @__PURE__ */ new Set(["wechat"]);
 function mcpToolPrefix(server) {
 	if (server === "qcc") return "mcp__qcc-";
@@ -3062,6 +3062,7 @@ const REZ_API = {
 	auditReset: "/api/dsh-rez-suite/audit/reset",
 	weixin: "/api/dsh-rez-suite/weixin",
 	weixinVerify: "/api/dsh-rez-suite/weixin/verify",
+	wecomChannels: "/api/dsh-rez-suite/wecom/channels",
 	update: "/api/dsh-rez-suite/update"
 };
 //#endregion
@@ -7719,9 +7720,10 @@ function toolAbortedBeforeDispatchResult(prior) {
 //#endregion
 //#region src/esphome-lab.ts
 /**
-* ESPHome lab: official dsh-mcp-client → lab MCP, plus HTTP fallback.
-* Lab server runs official `esphome compile`. Never puts firmware bytes
-* into the model context; the tool returns a click-later download link.
+* ESPHome lab client in Harness: official dsh-mcp-client → rezti-lab MCP.
+* The compiler lives in Mac Mini Docker (`deploy/lab`, compose name rezti-lab).
+* Missing lab / missing token must not block `dsh web` (failOnStartupError: false).
+* Never puts firmware bytes into the model context; the tool returns a click-later download link.
 */
 const ESPHOME_MCP_URL = "http://127.0.0.1:8100/mcp";
 /** POST /v1/compile 只交 YAML、立刻回链接。真机 `esphome compile` 在后台，最长见实验室 `ESPHOME_COMPILE_TIMEOUT`（默认 20 分钟）。 */

package/lib/style.css

@@ -209,6 +209,17 @@
   height: 15px;
 }
 
+.LOjPTW_wecomRow {
+  grid-template-columns: minmax(7rem, .8fr) minmax(8rem, 1fr) minmax(8rem, 1fr) auto;
+  align-items: end;
+  gap: 8px;
+  display: grid;
+}
+
+.LOjPTW_wecomRow .LOjPTW_message {
+  grid-column: 1 / -1;
+}
+
 .LOjPTW_toolbar {
   flex-wrap: wrap;
   flex: none;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rezti/dsh-rez-suite",
-  "description": "ReZ-TI one-package install for DeepSeek Harness. Update with: dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.47",
-  "version": "0.1.47",
+  "description": "ReZ-TI one-package install for DeepSeek Harness. Update with: dsh plugin --profile web add @rezti/dsh-rez-suite@0.1.49",
+  "version": "0.1.49",
   "type": "module",
   "engines": {
     "node": "^22.19.0 || >=24.0.0"
@@ -45,8 +45,8 @@
     "@rezti/dsh-rez-sso": "^0.1.14",
     "@rezti/dsh-rez-tapd": "^0.1.1",
     "@rezti/dsh-rez-token-manager": "^0.1.4",
-    "@rezti/dsh-rez-wechat": "^0.1.14",
-    "@rezti/dsh-web-file-uploader": "0.2.2",
+    "@rezti/dsh-rez-wechat": "^0.1.15",
+    "@rezti/dsh-web-file-uploader": "0.2.3",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "zod": "^4.4.3"
   },

package/src/changelog.ts

@@ -20,6 +20,36 @@ export interface ChangelogRelease {
 }
 
 export const SUITE_CHANGELOG: readonly ChangelogRelease[] = [
+  {
+    version: '0.1.49',
+    date: '2026-08-19',
+    sections: [
+      {
+        title: { zh: '企业微信智能机器人', en: 'WeCom AI bots' },
+        items: [
+          {
+            zh: '设置页按房间绑定企微智能机器人（BotID + Secret）。同事在企微跟哪个 bot 说话，就进网页左侧那个房间。密钥只存本机，不进 compose。',
+            en: 'Bind a WeCom AI bot (BotID + Secret) per Harness room. Talk to that bot in WeCom and the thread lands in that sidebar folder. Secrets stay on disk, not in compose.',
+          },
+        ],
+      },
+    ],
+  },
+  {
+    version: '0.1.48',
+    date: '2026-08-19',
+    sections: [
+      {
+        title: { zh: '启动修复', en: 'Startup fix' },
+        items: [
+          {
+            zh: '0.1.47 网页报 Failed to load plugins：回形针客户端仍按旧名注册。已发 @rezti/dsh-web-file-uploader@0.2.3，模块 id 与包名一致。请装 0.1.48。',
+            en: '0.1.47 failed to load plugins because the paperclip client still registered under the old package name. @rezti/dsh-web-file-uploader@0.2.3 matches the scoped name. Install 0.1.48.',
+          },
+        ],
+      },
+    ],
+  },
   {
     version: '0.1.47',
     date: '2026-08-19',

package/src/client/api.ts

@@ -12,6 +12,7 @@ import {
   type RezUpdateApplyResult,
   type RezUpdateStatus,
   type RezWeixinStatus,
+  type RezWecomChannelsResponse,
 } from '../protocol.ts'
 
 export class RezApiError extends Error {
@@ -100,6 +101,20 @@ export class RezApi {
     return readJson<RezWeixinStatus>(response)
   }
 
+  async wecomChannels(): Promise<RezWecomChannelsResponse> {
+    const response = await fetch(REZ_API.wecomChannels)
+    return readJson<RezWecomChannelsResponse>(response)
+  }
+
+  async saveWecomChannels(bots: Array<{ room: string; botId: string; secret?: string }>): Promise<RezWecomChannelsResponse> {
+    const response = await fetch(REZ_API.wecomChannels, {
+      method: 'PUT',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ bots }),
+    })
+    return readJson<RezWecomChannelsResponse>(response)
+  }
+
   async updateStatus(): Promise<RezUpdateStatus> {
     const response = await fetch(REZ_API.update)
     return readJson<RezUpdateStatus>(response)

package/src/client/locales.ts

@@ -6,7 +6,7 @@ export const zh = {
   'entry.label': 'Rez',
   'entry.tooltip': 'Rez Suite 配置与审计面板',
   'settings.title': 'ReZ-TI',
-  'settings.description': '公司 MCP（Odoo / Nextcloud / HA / TAPD / GSC）。企业微信栏暂隐。个人微信在「微信」页签扫码。',
+  'settings.description': '公司 MCP（Odoo / Nextcloud / HA / TAPD / GSC）和企业微信智能机器人。个人微信在「微信」页签扫码。',
   'panel.title': 'Rez Suite',
   'tab.config': '配置',
   'tab.weixin': '微信',
@@ -43,6 +43,12 @@ export const zh = {
   'config.wecom.botId': 'Bot ID',
   'config.wecom.secret': 'Secret',
   'config.wecom.webhook': '群机器人 Webhook',
+  'config.wecom.hint': 'Accio 同款：一个房间绑一个智能机器人。同事在企微跟哪个 bot 说话，就进网页左侧那个房间。密钥只存本机 ~/.dsh/wecom-channels.json，不要写进 compose。BotID / Secret 在企业微信管理后台 → 智能机器人。',
+  'config.wecom.room': '房间',
+  'config.wecom.add': '添加绑定',
+  'config.wecom.remove': '删除',
+  'config.wecom.empty': '还没有绑定。给人事/财务/法务等房间各建一个企微智能机器人，就能变成不同角色。',
+  'config.wecom.status': '通道',
   'config.ha': 'Home Assistant',
   'config.ha.url': 'HA MCP URL',
   'config.ha.token': '长期访问令牌',
@@ -142,7 +148,7 @@ export const en: Record<RezKey, string> = {
   'entry.label': 'Rez',
   'entry.tooltip': 'Rez Suite configuration and audit panel',
   'settings.title': 'ReZ-TI',
-  'settings.description': 'Company MCP (Odoo / Nextcloud / HA / TAPD / GSC). WeCom settings are hidden for now. Personal WeChat is the WeChat tab.',
+  'settings.description': 'Company MCP (Odoo / Nextcloud / HA / TAPD / GSC) and WeCom AI bots. Personal WeChat is the WeChat tab.',
   'panel.title': 'Rez Suite',
   'tab.config': 'Config',
   'tab.weixin': 'WeChat',
@@ -178,6 +184,12 @@ export const en: Record<RezKey, string> = {
   'config.wecom.botId': 'Bot ID',
   'config.wecom.secret': 'Secret',
   'config.wecom.webhook': 'Group bot webhook',
+  'config.wecom.hint': 'Accio-style: one WeCom AI bot per Harness room. Whoever talks to that bot lands in that sidebar folder. Secrets stay in ~/.dsh/wecom-channels.json, not compose. BotID / Secret come from WeCom admin → AI bot.',
+  'config.wecom.room': 'Room',
+  'config.wecom.add': 'Add binding',
+  'config.wecom.remove': 'Remove',
+  'config.wecom.empty': 'No bots yet. Bind a WeCom AI bot to HR / finance / legal / … so each room is a different role.',
+  'config.wecom.status': 'Channel',
   'config.ha': 'Home Assistant',
   'config.ha.url': 'HA MCP URL',
   'config.ha.token': 'Long-lived access token',

package/src/client/panel/ConfigTab.tsx

@@ -5,7 +5,7 @@
 
 import { useEffect, useState, type ReactNode } from 'react'
 import type { RezApi } from '../api.ts'
-import type { RezPublicConfig, RezPublicConnection, RezRoleId, RezTestResult } from '../../protocol.ts'
+import type { RezPublicConfig, RezPublicConnection, RezRoleId, RezTestResult, RezWecomBindingStatus, RezWecomBotPublic } from '../../protocol.ts'
 import { errorMessage, useT } from './helpers.ts'
 import css from './panel.module.css'
 
@@ -31,6 +31,115 @@ type SecretDrafts = {
 
 const EMPTY_SECRETS: SecretDrafts = { odoo: '', nextcloud: '', wechat: '', homeassistant: '', tapd: '', gsc: '', qcc: '', tianyancha: '', esphome: '' }
 
+const WECOM_SECRET_MASK = '********'
+
+type WecomDraft = {
+  key: string
+  room: string
+  botId: string
+  secret: string
+  secretConfigured: boolean
+}
+
+function WecomSection({
+  rooms,
+  drafts,
+  status,
+  onChange,
+}: {
+  rooms: string[]
+  drafts: WecomDraft[]
+  status: RezWecomBindingStatus[]
+  onChange: (next: WecomDraft[]) => void
+}) {
+  const t = useT()
+  const used = new Set(drafts.map(row => row.room))
+  const unused = rooms.filter(room => !used.has(room))
+  const hintFor = (room: string): string => status.find(row => row.room === room)?.hint ?? ''
+
+  const add = (): void => {
+    const room = unused[0]
+    if (room === undefined) return
+    onChange([...drafts, { key: `new-${room}-${Date.now()}`, room, botId: '', secret: '', secretConfigured: false }])
+  }
+
+  return (
+    <Section title={t('config.wecom')}>
+      <p className={css.message}>{t('config.wecom.hint')}</p>
+      {drafts.length === 0 && <p className={css.message}>{t('config.wecom.empty')}</p>}
+      {drafts.map((row, index) => {
+        const options = rooms.filter(room => room === row.room || !used.has(room))
+        return (
+          <div key={row.key} className={css.wecomRow}>
+            <Field label={t('config.wecom.room')}>
+              <select
+                className={css.select}
+                value={row.room}
+                onChange={event => {
+                  const next = drafts.slice()
+                  next[index] = { ...row, room: event.target.value }
+                  onChange(next)
+                }}
+              >
+                {options.map(room => <option key={room} value={room}>{room}</option>)}
+              </select>
+            </Field>
+            <Field label={t('config.wecom.botId')}>
+              <input
+                className={css.input}
+                autoComplete="off"
+                value={row.botId}
+                onChange={event => {
+                  const next = drafts.slice()
+                  next[index] = { ...row, botId: event.target.value }
+                  onChange(next)
+                }}
+              />
+            </Field>
+            <Field label={t('config.wecom.secret')}>
+              <input
+                className={css.input}
+                type="password"
+                autoComplete="off"
+                value={row.secret}
+                placeholder={row.secretConfigured ? t('config.secretConfigured') : t('config.secretMissing')}
+                onChange={event => {
+                  const next = drafts.slice()
+                  next[index] = { ...row, secret: event.target.value }
+                  onChange(next)
+                }}
+              />
+            </Field>
+            <button
+              type="button"
+              className={css.button}
+              onClick={() => { onChange(drafts.filter((_, i) => i !== index)) }}
+            >
+              {t('config.wecom.remove')}
+            </button>
+            {hintFor(row.room) !== '' && <p className={css.message}>{hintFor(row.room)}</p>}
+          </div>
+        )
+      })}
+      {unused.length > 0 && (
+        <div className={css.toolbar}>
+          <button type="button" className={css.button} onClick={add}>{t('config.wecom.add')}</button>
+        </div>
+      )}
+    </Section>
+  )
+}
+
+function toWecomDrafts(bots: RezWecomBotPublic[]): WecomDraft[] {
+  return bots.map((bot, index) => ({
+    key: `${bot.room}-${index}`,
+    room: bot.room,
+    botId: bot.botId,
+    secret: '',
+    secretConfigured: bot.secretConfigured,
+  }))
+}
+
 function Field({ label, children }: { label: string; children: ReactNode }) {
   return (
     <div className={css.field}>
@@ -133,10 +242,23 @@ export function ConfigTab({ api }: { api: RezApi }) {
   const [message, setMessage] = useState('')
   const [error, setError] = useState('')
   const [results, setResults] = useState<RezTestResult[]>([])
+  const [wecomRooms, setWecomRooms] = useState<string[]>([])
+  const [wecomDrafts, setWecomDrafts] = useState<WecomDraft[]>([])
+  const [wecomStatus, setWecomStatus] = useState<RezWecomBindingStatus[]>([])
 
   const load = async (): Promise<void> => {
     try {
       setConfig(await api.getConfig())
+      try {
+        const wecom = await api.wecomChannels()
+        setWecomRooms(wecom.rooms.length > 0 ? wecom.rooms : [
+          '搞钱', '产品', '运营', '人事助理', '财务助理', '法务助理', '设计', '实验室',
+        ])
+        setWecomDrafts(toWecomDrafts(wecom.bots))
+        setWecomStatus(wecom.status)
+      } catch {
+        setWecomRooms(['搞钱', '产品', '运营', '人事助理', '财务助理', '法务助理', '设计', '实验室'])
+      }
     } catch (err) {
       setError(errorMessage(err))
     } finally {
@@ -184,6 +306,14 @@ export function ConfigTab({ api }: { api: RezApi }) {
       const saved = await api.saveConfig(payload)
       setConfig(saved)
       setSecrets(EMPTY_SECRETS)
+      const wecomSaved = await api.saveWecomChannels(wecomDrafts.map(row => ({
+        room: row.room,
+        botId: row.botId.trim(),
+        secret: row.secret.trim().length > 0 ? row.secret.trim() : (row.secretConfigured ? WECOM_SECRET_MASK : ''),
+      })))
+      setWecomRooms(wecomSaved.rooms)
+      setWecomDrafts(toWecomDrafts(wecomSaved.bots))
+      setWecomStatus(wecomSaved.status)
       setMessage(t('config.saved'))
     } catch (err) {
       setError(errorMessage(err))
@@ -251,7 +381,12 @@ export function ConfigTab({ api }: { api: RezApi }) {
         usernameLabel={t('config.nextcloud.username')}
         secretLabel={t('config.nextcloud.appPassword')}
       />
-      {/* WeCom (企业微信) 设置栏暂隐：安装用法未定，TAPD 1154488930001001224。保存时仍回写已有 wechat 配置，不擦掉。 */}
+      <WecomSection
+        rooms={wecomRooms}
+        drafts={wecomDrafts}
+        status={wecomStatus}
+        onChange={setWecomDrafts}
+      />
       <McpSection
         title={t('config.ha')}
         row={config.connections.homeassistant}

package/src/client/panel/panel.module.css

@@ -169,6 +169,17 @@
   height: 15px;
 }
 
+.wecomRow {
+  display: grid;
+  grid-template-columns: minmax(7rem, 0.8fr) minmax(8rem, 1fr) minmax(8rem, 1fr) auto;
+  gap: 8px;
+  align-items: end;
+}
+
+.wecomRow .message {
+  grid-column: 1 / -1;
+}
+
 .toolbar {
   display: flex;
   align-items: center;

package/src/esphome-lab.ts

@@ -1,7 +1,8 @@
 /**
- * ESPHome lab: official dsh-mcp-client → lab MCP, plus HTTP fallback.
- * Lab server runs official `esphome compile`. Never puts firmware bytes
- * into the model context; the tool returns a click-later download link.
+ * ESPHome lab client in Harness: official dsh-mcp-client → rezti-lab MCP.
+ * The compiler lives in Mac Mini Docker (`deploy/lab`, compose name rezti-lab).
+ * Missing lab / missing token must not block `dsh web` (failOnStartupError: false).
+ * Never puts firmware bytes into the model context; the tool returns a click-later download link.
  */
 
 import { loadRezConnections, readManagedCredential, REZ_CREDENTIAL_REFS, startMcpWhenSecret } from '@rezti/dsh-rez-sso'

package/src/observe-mcp.ts

@@ -14,7 +14,7 @@ export const COMPOSED_SERVERS = ['odoo', 'nextcloud', 'wechat', 'homeassistant',
 
 export type ComposedServer = (typeof COMPOSED_SERVERS)[number]
 
-/** Front panel hides these until install/docs are ready. Backend MCP can still start if a secret exists. TAPD 1154488930001001224. */
+/** Front panel hides webhook MCP wechat status; AI bots live in the Config WeCom bindings. TAPD 1154488930001001231. */
 export const FRONT_HIDDEN_SERVERS: ReadonlySet<ComposedServer> = new Set(['wechat'])
 
 export function mcpToolPrefix(server: string): string {

package/src/protocol.ts

@@ -142,6 +142,28 @@ export interface RezWeixinStatus {
   hint: string
 }
 
+/** Accio-style WeCom AI bot: one BotID+Secret per Harness room. */
+export type RezWecomBindingPhase = 'idle' | 'connecting' | 'authenticated' | 'error'
+
+export interface RezWecomBotPublic {
+  room: string
+  botId: string
+  secretConfigured: boolean
+}
+
+export interface RezWecomBindingStatus {
+  room: string
+  botId: string
+  phase: RezWecomBindingPhase
+  hint: string
+}
+
+export interface RezWecomChannelsResponse {
+  rooms: string[]
+  bots: RezWecomBotPublic[]
+  status: RezWecomBindingStatus[]
+}
+
 /** One audit ledger row. */
 export interface RezAuditRecord {
   id: number
@@ -197,5 +219,6 @@ export const REZ_API = {
   auditReset: REZ_API_BASE + '/audit/reset',
   weixin: REZ_API_BASE + '/weixin',
   weixinVerify: REZ_API_BASE + '/weixin/verify',
+  wecomChannels: REZ_API_BASE + '/wecom/channels',
   update: REZ_API_BASE + '/update',
 } as const

package/templates/staff/hr/.agents/skills/staff-onboard-keys/SKILL.md

@@ -22,21 +22,23 @@ description: 人事助理。引导员工自己领取本机安装包、申请各
 
 没有 GitHub 权限：找人事要包，不要下未知来源的安装程序。
 
-**发包装时说清楚：** zip/exe 只是启动壳，第一次会从外网下 Node 和 dsh，再装钉死的 suite（现在 `0.1.47`）。不是装完就能离线用。长期分发走 CI artifact，不要把仓里 `deploy/dist/` 当主渠道。
+**发包装时说清楚：** zip/exe 只是启动壳，第一次会从外网下 Node、**pnpm**、dsh，再装钉死的 suite（现在 `0.1.48`）。不是装完就能离线用。长期分发走 CI artifact，不要把仓里 `deploy/dist/` 当主渠道。
 
 回形针上传走 npm `@rezti/dsh-web-file-uploader`，装进 suite 即可。不要再单独从 GitHub add。
 
 ### Mac
 
 1. 解压 zip，把 **ReZ-TI Harness** 拖进「应用程序」。
-2. 第一次：**右键 → 打开**（未签名）。会下载 Node、钉稳定 dsh、拉 **0.1.47** suite（不是 latest：当天发的 latest 可能被 24 小时冷却拦住）。
-3. 浏览器打开 `http://127.0.0.1:3080/`。
+2. 若提示无法打开 / 已损坏：让对方双击包里的 **首次打开.command**，或在终端执行 `xattr -cr "/Applications/ReZ-TI Harness.app"`，再**右键 → 打开**。
+3. 第一次会弹出终端：下载 Node、安装 pnpm 和稳定 dsh、拉 **0.1.48** suite。不是装完就能离线用。
+4. 浏览器打开 `http://127.0.0.1:3080/`。失败看 `~/Library/Application Support/ReZ-TI/harness/logs/harness.log`。
 
 ### Windows
 
 1. 运行 exe（装到 `%LOCALAPPDATA%\ReZ-TI\Harness`，一般不需要管理员）。
-2. 桌面 / 开始菜单点 **ReZ-TI Harness**。第一次同样拉 Node / dsh / 钉死 suite。
-3. 打开 `http://127.0.0.1:3080/`。
+2. 若提示「Windows 已保护你的电脑」：让对方点 **更多信息 → 仍要运行**。未签名，不是病毒。
+3. 桌面 / 开始菜单点 **ReZ-TI Harness**。会弹出黑色命令窗口，不要立刻关掉。第一次拉 Node、**pnpm**、dsh、钉死 suite。
+4. 打开 `http://127.0.0.1:3080/`。窗口一闪而过：看 `%LOCALAPPDATA%\ReZ-TI\harness\logs\harness.log`。ARM 电脑暂不支持。
 
 密钥写在本机 `~/.dsh`（Windows `%USERPROFILE%\.dsh`）。不要删这份目录。
 
@@ -79,7 +81,7 @@ description: 人事助理。引导员工自己领取本机安装包、申请各
 | 用途 | 面板 | 谁要 | 怎么拿 |
 |------|------|------|--------|
 | TAPD Access Token | TAPD → Access Token；项目 ID 默认 `54488930`；**昵称改成自己的 TAPD 显示名**（不要留「凯文智能家居」） | 跟需求/缺陷的岗 | TAPD 个人设置生成 token。昵称必须是 TAPD 里的中文名 |
-| 企微群机器人 Webhook | 企业微信 → 群机器人 Webhook | 需要往指定群推送的岗 | **设置页暂不展示**（安装用法未定）。不要引导员工去申请或填写 Webhook |
+| 企微智能机器人 BotID + Secret | 企业微信 → 智能机器人 | 要在企微里当某个房间角色说话的岗 | 设置页「企业微信」：选房间、填 BotID 和 Secret。一个房间一个 bot。密钥只存本机，不要发群、不要写进 compose。不要再申请群 Webhook |
 | HA 长期访问令牌 | Home Assistant → 长期访问令牌 | 只调试 HA 的岗 | HA 个人资料 → 长期访问令牌。默认 URL `http://homeassistant.local:8123/api/mcp`，现场不同再改 |
 | GSC 服务账号 JSON | GSC → 服务账号 JSON 或密钥文件路径 | 运营/SEO | 向凯文要公司服务账号文件路径，不要个人 Google 帐号硬接 |
 | 企查查 API Key | 企查查（法务助理） | **仅法务助理房间** | 未开通就说法务房间未挂企查查。其他房间不要引导申请 |

package/templates/staff/lab/AGENTS.md

@@ -7,7 +7,7 @@
 ## 每次开场
 
 1. YAML 来源：对方说板型/功能（ESP32-H2 / C3 等）你就写完整 YAML；或回形针 `.yaml` / `.yml`；或把全文贴进对话。缺 `esphome.name` 就补。密钥不要写进 MEMORY，也不要放到公开下载目录。
-2. 调 `mcp__esphome__compile`。没有 MCP 再用 `rez_esphome_compile`。未配置实验室 URL / Token 就说「实验室编译未开通」，指向 `deploy/esphome-lab/README.md`。不要自写编译器，不要自写 Device Builder WebSocket。
+2. 调 `mcp__esphome__compile`。没有 MCP 再用 `rez_esphome_compile`。未配置实验室 URL / Token 就说「实验室编译未开通」，指向 `deploy/lab/README.md`。不要自写编译器，不要自写 Device Builder WebSocket。实验室 Docker 没起时 Harness 仍可用，不要假装已经编完。
 3. 工具立刻返回 **download 链接**。把链接发给对方去点。编译要几分钟：先点开是 `README.md`（编译中或失败日志）；成功后再点/刷新是 `firmware.bin`。有 Nextcloud 时链接是公开目录。**不要把 bin 贴进对话。**
 4. 默认不 OTA、不替对方刷机。对方明确要求刷机再另说，并先征得批准。