@rezti/dsh-rez-suite 0.1.48 → 0.1.50

package/src/client/locales.ts

@@ -6,16 +6,17 @@ export const zh = {
   'entry.label': 'Rez',
   'entry.tooltip': 'Rez Suite 配置与审计面板',
   'settings.title': 'ReZ-TI',
-  'settings.description': '公司 MCP（Odoo / Nextcloud / HA / TAPD / GSC）。企业微信栏暂隐。个人微信在「微信」页签扫码。',
+  'settings.description': '公司 MCP（Odoo / Nextcloud / HA / TAPD / GSC）和企业微信智能机器人。个人微信在「微信」页签扫码。',
   'panel.title': 'Rez Suite',
   'tab.config': '配置',
+  'tab.board': '看板',
   'tab.weixin': '微信',
   'tab.status': '状态',
   'tab.audit': '用量',
   'tab.changelog': '更新日志',
   // config
   'config.role': '角色',
-  'config.roleHint': '选身份后左侧自动出现工作区。人事/财务/法务助理全员可见；设计房间仅「运营」；实验室仅「工程师」；搞钱/产品/运营仅「老板」。',
+  'config.roleHint': '选身份后左侧自动出现工作区。人事/财务/法务助理全员可见；设计、发布、电商房间仅「运营」；实验室仅「工程师」；搞钱/产品/运营仅「老板」。',
   'role.all': '全部',
   'role.boss': '老板',
   'role.engineer': '工程师',
@@ -43,6 +44,12 @@ export const zh = {
   'config.wecom.botId': 'Bot ID',
   'config.wecom.secret': 'Secret',
   'config.wecom.webhook': '群机器人 Webhook',
+  'config.wecom.hint': 'Accio 同款：一个房间绑一个智能机器人。同事在企微跟哪个 bot 说话，就进网页左侧那个房间的同一条会话。密钥只存本机 ~/.dsh/wecom-channels.json，不要写进 compose。BotID / Secret 在企业微信管理后台 → 智能机器人。',
+  'config.wecom.room': '房间',
+  'config.wecom.add': '添加绑定',
+  'config.wecom.remove': '删除',
+  'config.wecom.empty': '还没有绑定。给人事/财务/法务等房间各建一个企微智能机器人，就能变成不同角色。',
+  'config.wecom.status': '通道',
   'config.ha': 'Home Assistant',
   'config.ha.url': 'HA MCP URL',
   'config.ha.token': '长期访问令牌',
@@ -78,7 +85,7 @@ export const zh = {
   'config.testOk': '成功（{tools} 个工具, {latency}ms）',
   'config.testFail': '失败：{error}',
   // status
-  'status.hint': '绿标表示本机已注册 mcp__<系统>__* 工具。远端 MCP 通了但这里仍红，说明 dsh-mcp-client 还没挂上。企查查只在法务助理房间可用；其它房间不显示或显示「房间未启用」。',
+  'status.hint': '绿标表示本机已注册 mcp__<系统>__* 工具。远端 MCP 通了但这里仍红，说明 dsh-mcp-client 还没挂上。企微办公能力看下方 wecom-cli，不是 MCP 表。企查查只在法务助理房间可用；其它房间不显示或显示「房间未启用」。',
   'status.total': '当前角色 {role}，共注册 {count} 个 MCP 工具',
   'status.col.server': 'Server',
   'status.col.state': '状态',
@@ -86,6 +93,12 @@ export const zh = {
   'status.col.registered': '已注册',
   'status.col.error': '错误',
   'status.none': '暂无状态',
+  'status.wecomCli': '企业微信办公（官方 wecom-cli，不是 MCP）',
+  'status.wecomCli.installed': 'CLI',
+  'status.wecomCli.authorized': '授权',
+  'status.wecomCli.yes': '已就绪',
+  'status.wecomCli.no': '未就绪',
+  'status.wecomCli.modules': '品类',
   // audit
   'audit.totalCalls': '调用次数',
   'audit.inputTokens': '输入 token',
@@ -108,6 +121,27 @@ export const zh = {
   'audit.empty': '暂无记录',
   'changelog.current': '当前 {version}',
   'changelog.upgrade': '升级：',
+  'board.hint': '合同 Account 拆两室：媒体走「发布」，电商走「电商」（一期只阿里巴巴国际站；Amazon 等有号）。不是独立后台。密钥不在这里。',
+  'board.people': 'People / 权限',
+  'board.peopleHint': '继续 Odoo 员工帐号（公司/记录规则）+ 企业微信一房间一 bot。不新建权限库，不改 Odoo 权限组。',
+  'board.role': '当前 Harness 身份：{role}（只决定侧栏房间）',
+  'board.media': '媒体连接',
+  'board.mediaHint': '内容/社媒在「发布」工作间（Post editor）。不建图库。',
+  'board.ecommerce': '电商平台',
+  'board.ecommerceHint': 'Listing 在「电商」工作间。一期只有阿里巴巴国际站。渠道商品 ID 写回 Odoo，库存从 Odoo 推到阿里。Amazon 没有号，标后续。',
+  'board.rag': 'RAG',
+  'board.ragHint': '基于已有 Dify，知识库对接 Nextcloud 锁死路径（Standards + Marketing/Publish）。Harness 不做推理。',
+  'board.inbox': 'Message inbox',
+  'board.inboxHint': '一期只做 WhatsApp Business，会话落到 Odoo（浙江雷泽，Business 号已有）。不用官方收费模块，走社区 add-on（OCA mail_gateway_whatsapp）。禁止自写 Meta 客户端。生产安装另开窗口。',
+  'board.col.source': '来源',
+  'board.col.state': '状态',
+  'board.col.channel': '渠道',
+  'board.col.room': '房间',
+  'board.col.phase': '阶段',
+  'board.bound': '已绑 bot',
+  'board.unbound': '未绑定',
+  'board.phase1': '一期',
+  'board.phaseLater': '后续',
   // common
   'common.close': '关闭',
   'common.loading': '加载中…',
@@ -142,15 +176,16 @@ export const en: Record<RezKey, string> = {
   'entry.label': 'Rez',
   'entry.tooltip': 'Rez Suite configuration and audit panel',
   'settings.title': 'ReZ-TI',
-  'settings.description': 'Company MCP (Odoo / Nextcloud / HA / TAPD / GSC). WeCom settings are hidden for now. Personal WeChat is the WeChat tab.',
+  'settings.description': 'Company MCP (Odoo / Nextcloud / HA / TAPD / GSC) and WeCom AI bots. Personal WeChat is the WeChat tab.',
   'panel.title': 'Rez Suite',
   'tab.config': 'Config',
+  'tab.board': 'Board',
   'tab.weixin': 'WeChat',
   'tab.status': 'Status',
   'tab.audit': 'Usage',
   'tab.changelog': 'Changelog',
   'config.role': 'Role',
-  'config.roleHint': 'Identity registers workspaces in the sidebar. Staff assistants for every role; 设计 for Operations only; 实验室 for Engineer only; 搞钱 / 产品 / 运营 for Boss only.',
+  'config.roleHint': 'Identity registers workspaces in the sidebar. Staff assistants for every role; 设计 / 发布 / 电商 for Operations only; 实验室 for Engineer only; 搞钱 / 产品 / 运营 for Boss only.',
   'role.all': 'All',
   'role.boss': 'Boss',
   'role.engineer': 'Engineer',
@@ -178,6 +213,12 @@ export const en: Record<RezKey, string> = {
   'config.wecom.botId': 'Bot ID',
   'config.wecom.secret': 'Secret',
   'config.wecom.webhook': 'Group bot webhook',
+  'config.wecom.hint': 'Accio-style: one WeCom AI bot per Harness room. Whoever talks to that bot lands in the same sidebar session. Secrets stay in ~/.dsh/wecom-channels.json, not compose. BotID / Secret come from WeCom admin → AI bot.',
+  'config.wecom.room': 'Room',
+  'config.wecom.add': 'Add binding',
+  'config.wecom.remove': 'Remove',
+  'config.wecom.empty': 'No bots yet. Bind a WeCom AI bot to HR / finance / legal / … so each room is a different role.',
+  'config.wecom.status': 'Channel',
   'config.ha': 'Home Assistant',
   'config.ha.url': 'HA MCP URL',
   'config.ha.token': 'Long-lived access token',
@@ -212,7 +253,7 @@ export const en: Record<RezKey, string> = {
   'config.testResult': '{server}: {status}',
   'config.testOk': 'OK ({tools} tools, {latency}ms)',
   'config.testFail': 'Failed: {error}',
-  'status.hint': 'Green means this host registered mcp__<system>__* tools. A live remote MCP with a red row means dsh-mcp-client has not attached yet. Qichacha is only for the Legal assistant room; other rooms hide the row or show “room not enabled”.',
+  'status.hint': 'Green means this host registered mcp__<system>__* tools. A live remote MCP with a red row means dsh-mcp-client has not attached yet. WeCom office APIs are the wecom-cli row below, not the MCP table. Qichacha is only for the Legal assistant room; other rooms hide the row or show “room not enabled”.',
   'status.total': 'Role {role}, {count} MCP tools registered',
   'status.col.server': 'Server',
   'status.col.state': 'State',
@@ -220,6 +261,12 @@ export const en: Record<RezKey, string> = {
   'status.col.registered': 'Registered',
   'status.col.error': 'Error',
   'status.none': 'No status yet',
+  'status.wecomCli': 'WeCom office APIs (official wecom-cli, not MCP)',
+  'status.wecomCli.installed': 'CLI',
+  'status.wecomCli.authorized': 'Auth',
+  'status.wecomCli.yes': 'Ready',
+  'status.wecomCli.no': 'Not ready',
+  'status.wecomCli.modules': 'Modules',
   'audit.totalCalls': 'Calls',
   'audit.inputTokens': 'Input tokens',
   'audit.outputTokens': 'Output tokens',
@@ -241,6 +288,27 @@ export const en: Record<RezKey, string> = {
   'audit.empty': 'No records',
   'changelog.current': 'Now {version}',
   'changelog.upgrade': 'Upgrade:',
+  'board.hint': 'Account connections split into two rooms: media in 发布, ecommerce in 电商 (phase 1: Alibaba.com only; Amazon waits for an account). Not a separate admin site. Secrets stay off this board.',
+  'board.people': 'People / permissions',
+  'board.peopleHint': 'Keep Odoo employee accounts (company / record rules) plus one WeCom AI bot per room. No new ACL database. Do not change Odoo groups.',
+  'board.role': 'Current Harness identity: {role} (sidebar rooms only)',
+  'board.media': 'Media connections',
+  'board.mediaHint': 'Content / social lives in the 发布 room (Post editor). No media library.',
+  'board.ecommerce': 'Ecommerce platforms',
+  'board.ecommerceHint': 'Listings live in the 电商 room. Phase 1 is Alibaba.com. Write channel product IDs back to Odoo and push stock Odoo → Alibaba. Amazon is later until we have an account.',
+  'board.rag': 'RAG',
+  'board.ragHint': 'Reuse Dify. Index Nextcloud locked paths (Standards + Marketing/Publish). Harness does not run embeddings.',
+  'board.inbox': 'Message inbox',
+  'board.inboxHint': 'Phase 1 is WhatsApp Business into Odoo (Zhejiang ReZ-TI; WABA already exists). Skip the paid official module; reuse OCA mail_gateway_whatsapp. No homemade Meta client. Production install needs a separate window.',
+  'board.col.source': 'Source',
+  'board.col.state': 'State',
+  'board.col.channel': 'Channel',
+  'board.col.room': 'Room',
+  'board.col.phase': 'Phase',
+  'board.bound': 'Bot bound',
+  'board.unbound': 'Unbound',
+  'board.phase1': 'Phase 1',
+  'board.phaseLater': 'Later',
   'common.close': 'Close',
   'common.loading': 'Loading…',
   'common.error': 'Error: {error}',

package/src/client/panel/BoardTab.tsx

@@ -0,0 +1,136 @@
+/**
+ * Account board: media (发布) vs ecommerce (电商; phase 1 Alibaba, Amazon later).
+ * People = Odoo user + WeCom room bots. No new ACL store.
+ */
+
+import { useEffect, useState } from 'react'
+import type { RezApi } from '../api.ts'
+import type { RezPublicConfig, RezWecomBotPublic } from '../../protocol.ts'
+import { ECOMMERCE_ROOM, MEDIA_ROOM, channelsFor, wecomBound } from '../../channel-board.ts'
+import { errorMessage, useT } from './helpers.ts'
+import css from './panel.module.css'
+
+export function BoardTab({ api }: { api: RezApi }) {
+  const t = useT()
+  const [config, setConfig] = useState<RezPublicConfig | null>(null)
+  const [bots, setBots] = useState<RezWecomBotPublic[]>([])
+  const [error, setError] = useState('')
+  const [loading, setLoading] = useState(true)
+
+  const load = async (): Promise<void> => {
+    setLoading(true)
+    setError('')
+    try {
+      const next = await api.getConfig()
+      setConfig(next)
+      try {
+        const wecom = await api.wecomChannels()
+        setBots(wecom.bots)
+      } catch {
+        setBots([])
+      }
+    } catch (err) {
+      setError(errorMessage(err))
+    } finally {
+      setLoading(false)
+    }
+  }
+
+  useEffect(() => { void load() }, [])
+
+  if (loading) return <div className={css.message}>{t('common.loading')}</div>
+  if (config === null) return <div className={css.error}>{error}</div>
+
+  const odooOk = config.connections.odoo.secretConfigured
+  const lang = t('tab.config') === '配置' ? 'zh' : 'en'
+
+  return (
+    <div className={css.tabBody}>
+      <div className={css.toolbar}>
+        <span className={css.message}>{t('board.hint')}</span>
+        <button type="button" className={css.button} onClick={() => { void load() }}>{t('common.refresh')}</button>
+      </div>
+      {error !== '' && <div className={css.error}>{error}</div>}
+
+      <h3 className={css.boardTitle}>{t('board.people')}</h3>
+      <p className={css.message}>{t('board.peopleHint')}</p>
+      <div className={css.tableWrap}>
+        <table className={css.table}>
+          <thead>
+            <tr>
+              <th>{t('board.col.source')}</th>
+              <th>{t('board.col.state')}</th>
+            </tr>
+          </thead>
+          <tbody>
+            <tr>
+              <td>Odoo</td>
+              <td>
+                <span className={css.badge + ' ' + (odooOk ? css.badgeOk : css.badgeFail)}>
+                  {odooOk ? t('config.secretConfigured') : t('config.secretMissing')}
+                </span>
+              </td>
+            </tr>
+            <tr>
+              <td>WeCom · {MEDIA_ROOM}</td>
+              <td>
+                <span className={css.badge + ' ' + (wecomBound(MEDIA_ROOM, bots) ? css.badgeOk : css.badgeFail)}>
+                  {wecomBound(MEDIA_ROOM, bots) ? t('board.bound') : t('board.unbound')}
+                </span>
+              </td>
+            </tr>
+            <tr>
+              <td>WeCom · {ECOMMERCE_ROOM}</td>
+              <td>
+                <span className={css.badge + ' ' + (wecomBound(ECOMMERCE_ROOM, bots) ? css.badgeOk : css.badgeFail)}>
+                  {wecomBound(ECOMMERCE_ROOM, bots) ? t('board.bound') : t('board.unbound')}
+                </span>
+              </td>
+            </tr>
+          </tbody>
+        </table>
+      </div>
+      <p className={css.message}>{t('board.role', { role: config.role })}</p>
+
+      <h3 className={css.boardTitle}>{t('board.media')}</h3>
+      <p className={css.message}>{t('board.mediaHint')}</p>
+      <ChannelTable kind="media" lang={lang} />
+
+      <h3 className={css.boardTitle}>{t('board.ecommerce')}</h3>
+      <p className={css.message}>{t('board.ecommerceHint')}</p>
+      <ChannelTable kind="ecommerce" lang={lang} />
+
+      <h3 className={css.boardTitle}>{t('board.rag')}</h3>
+      <p className={css.message}>{t('board.ragHint')}</p>
+      <h3 className={css.boardTitle}>{t('board.inbox')}</h3>
+      <p className={css.message}>{t('board.inboxHint')}</p>
+    </div>
+  )
+}
+
+function ChannelTable({ kind, lang }: { kind: 'media' | 'ecommerce'; lang: 'zh' | 'en' }) {
+  const t = useT()
+  const rows = channelsFor(kind)
+  return (
+    <div className={css.tableWrap}>
+      <table className={css.table}>
+        <thead>
+          <tr>
+            <th>{t('board.col.channel')}</th>
+            <th>{t('board.col.room')}</th>
+            <th>{t('board.col.phase')}</th>
+          </tr>
+        </thead>
+        <tbody>
+          {rows.map((row) => (
+            <tr key={row.id}>
+              <td>{lang === 'zh' ? row.nameZh : row.nameEn}</td>
+              <td>{row.room}</td>
+              <td>{row.phase === '1' ? t('board.phase1') : t('board.phaseLater')}</td>
+            </tr>
+          ))}
+        </tbody>
+      </table>
+    </div>
+  )
+}

package/src/client/panel/ConfigTab.tsx

@@ -5,7 +5,7 @@
 
 import { useEffect, useState, type ReactNode } from 'react'
 import type { RezApi } from '../api.ts'
-import type { RezPublicConfig, RezPublicConnection, RezRoleId, RezTestResult } from '../../protocol.ts'
+import type { RezPublicConfig, RezPublicConnection, RezRoleId, RezTestResult, RezWecomBindingStatus, RezWecomBotPublic } from '../../protocol.ts'
 import { errorMessage, useT } from './helpers.ts'
 import css from './panel.module.css'
 
@@ -31,6 +31,115 @@ type SecretDrafts = {
 
 const EMPTY_SECRETS: SecretDrafts = { odoo: '', nextcloud: '', wechat: '', homeassistant: '', tapd: '', gsc: '', qcc: '', tianyancha: '', esphome: '' }
 
+const WECOM_SECRET_MASK = '********'
+
+type WecomDraft = {
+  key: string
+  room: string
+  botId: string
+  secret: string
+  secretConfigured: boolean
+}
+
+function WecomSection({
+  rooms,
+  drafts,
+  status,
+  onChange,
+}: {
+  rooms: string[]
+  drafts: WecomDraft[]
+  status: RezWecomBindingStatus[]
+  onChange: (next: WecomDraft[]) => void
+}) {
+  const t = useT()
+  const used = new Set(drafts.map(row => row.room))
+  const unused = rooms.filter(room => !used.has(room))
+  const hintFor = (room: string): string => status.find(row => row.room === room)?.hint ?? ''
+
+  const add = (): void => {
+    const room = unused[0]
+    if (room === undefined) return
+    onChange([...drafts, { key: `new-${room}-${Date.now()}`, room, botId: '', secret: '', secretConfigured: false }])
+  }
+
+  return (
+    <Section title={t('config.wecom')}>
+      <p className={css.message}>{t('config.wecom.hint')}</p>
+      {drafts.length === 0 && <p className={css.message}>{t('config.wecom.empty')}</p>}
+      {drafts.map((row, index) => {
+        const options = rooms.filter(room => room === row.room || !used.has(room))
+        return (
+          <div key={row.key} className={css.wecomRow}>
+            <Field label={t('config.wecom.room')}>
+              <select
+                className={css.select}
+                value={row.room}
+                onChange={event => {
+                  const next = drafts.slice()
+                  next[index] = { ...row, room: event.target.value }
+                  onChange(next)
+                }}
+              >
+                {options.map(room => <option key={room} value={room}>{room}</option>)}
+              </select>
+            </Field>
+            <Field label={t('config.wecom.botId')}>
+              <input
+                className={css.input}
+                autoComplete="off"
+                value={row.botId}
+                onChange={event => {
+                  const next = drafts.slice()
+                  next[index] = { ...row, botId: event.target.value }
+                  onChange(next)
+                }}
+              />
+            </Field>
+            <Field label={t('config.wecom.secret')}>
+              <input
+                className={css.input}
+                type="password"
+                autoComplete="off"
+                value={row.secret}
+                placeholder={row.secretConfigured ? t('config.secretConfigured') : t('config.secretMissing')}
+                onChange={event => {
+                  const next = drafts.slice()
+                  next[index] = { ...row, secret: event.target.value }
+                  onChange(next)
+                }}
+              />
+            </Field>
+            <button
+              type="button"
+              className={css.button}
+              onClick={() => { onChange(drafts.filter((_, i) => i !== index)) }}
+            >
+              {t('config.wecom.remove')}
+            </button>
+            {hintFor(row.room) !== '' && <p className={css.message}>{hintFor(row.room)}</p>}
+          </div>
+        )
+      })}
+      {unused.length > 0 && (
+        <div className={css.toolbar}>
+          <button type="button" className={css.button} onClick={add}>{t('config.wecom.add')}</button>
+        </div>
+      )}
+    </Section>
+  )
+}
+
+function toWecomDrafts(bots: RezWecomBotPublic[]): WecomDraft[] {
+  return bots.map((bot, index) => ({
+    key: `${bot.room}-${index}`,
+    room: bot.room,
+    botId: bot.botId,
+    secret: '',
+    secretConfigured: bot.secretConfigured,
+  }))
+}
+
 function Field({ label, children }: { label: string; children: ReactNode }) {
   return (
     <div className={css.field}>
@@ -133,10 +242,23 @@ export function ConfigTab({ api }: { api: RezApi }) {
   const [message, setMessage] = useState('')
   const [error, setError] = useState('')
   const [results, setResults] = useState<RezTestResult[]>([])
+  const [wecomRooms, setWecomRooms] = useState<string[]>([])
+  const [wecomDrafts, setWecomDrafts] = useState<WecomDraft[]>([])
+  const [wecomStatus, setWecomStatus] = useState<RezWecomBindingStatus[]>([])
 
   const load = async (): Promise<void> => {
     try {
       setConfig(await api.getConfig())
+      try {
+        const wecom = await api.wecomChannels()
+        setWecomRooms(wecom.rooms.length > 0 ? wecom.rooms : [
+          '搞钱', '产品', '运营', '人事助理', '财务助理', '法务助理', '设计', '发布', '电商', '实验室',
+        ])
+        setWecomDrafts(toWecomDrafts(wecom.bots))
+        setWecomStatus(wecom.status)
+      } catch {
+        setWecomRooms(['搞钱', '产品', '运营', '人事助理', '财务助理', '法务助理', '设计', '发布', '电商', '实验室'])
+      }
     } catch (err) {
       setError(errorMessage(err))
     } finally {
@@ -184,6 +306,14 @@ export function ConfigTab({ api }: { api: RezApi }) {
       const saved = await api.saveConfig(payload)
       setConfig(saved)
       setSecrets(EMPTY_SECRETS)
+      const wecomSaved = await api.saveWecomChannels(wecomDrafts.map(row => ({
+        room: row.room,
+        botId: row.botId.trim(),
+        secret: row.secret.trim().length > 0 ? row.secret.trim() : (row.secretConfigured ? WECOM_SECRET_MASK : ''),
+      })))
+      setWecomRooms(wecomSaved.rooms)
+      setWecomDrafts(toWecomDrafts(wecomSaved.bots))
+      setWecomStatus(wecomSaved.status)
       setMessage(t('config.saved'))
     } catch (err) {
       setError(errorMessage(err))
@@ -251,7 +381,12 @@ export function ConfigTab({ api }: { api: RezApi }) {
         usernameLabel={t('config.nextcloud.username')}
         secretLabel={t('config.nextcloud.appPassword')}
       />
-      {/* WeCom (企业微信) 设置栏暂隐：安装用法未定，TAPD 1154488930001001224。保存时仍回写已有 wechat 配置，不擦掉。 */}
+      <WecomSection
+        rooms={wecomRooms}
+        drafts={wecomDrafts}
+        status={wecomStatus}
+        onChange={setWecomDrafts}
+      />
       <McpSection
         title={t('config.ha')}
         row={config.connections.homeassistant}

package/src/client/panel/StatusTab.tsx

@@ -63,6 +63,37 @@ export function StatusTab({ api }: { api: RezApi }) {
           </tbody>
         </table>
       </div>
+      {status.wecomCli !== undefined && (
+        <div className={css.tableWrap}>
+          <p className={css.message}>{t('status.wecomCli')}</p>
+          <table className={css.table}>
+            <thead>
+              <tr>
+                <th>{t('status.wecomCli.installed')}</th>
+                <th>{t('status.wecomCli.authorized')}</th>
+                <th>{t('status.wecomCli.modules')}</th>
+                <th>{t('status.col.error')}</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <span className={css.badge + ' ' + (status.wecomCli.installed ? css.badgeOk : css.badgeFail)}>
+                    {status.wecomCli.installed ? t('status.wecomCli.yes') : t('status.wecomCli.no')}
+                  </span>
+                </td>
+                <td>
+                  <span className={css.badge + ' ' + (status.wecomCli.authorized ? css.badgeOk : css.badgeFail)}>
+                    {status.wecomCli.authorized ? t('status.wecomCli.yes') : t('status.wecomCli.no')}
+                  </span>
+                </td>
+                <td>{(status.wecomCli.modules ?? []).map(row => row.label).join('、')}</td>
+                <td>{status.wecomCli.hint}</td>
+              </tr>
+            </tbody>
+          </table>
+        </div>
+      )}
     </div>
   )
 }

package/src/client/panel/panel.module.css

@@ -169,6 +169,17 @@
   height: 15px;
 }
 
+.wecomRow {
+  display: grid;
+  grid-template-columns: minmax(7rem, 0.8fr) minmax(8rem, 1fr) minmax(8rem, 1fr) auto;
+  gap: 8px;
+  align-items: end;
+}
+
+.wecomRow .message {
+  grid-column: 1 / -1;
+}
+
 .toolbar {
   display: flex;
   align-items: center;
@@ -255,6 +266,13 @@
   vertical-align: top;
 }
 
+.boardTitle {
+  margin: 16px 0 4px;
+  font-size: 13px;
+  font-weight: 600;
+  color: var(--dsw-alias-label-primary);
+}
+
 .badge {
   display: inline-block;
   padding: 2px 8px;

package/src/client/settings-card.tsx

@@ -10,19 +10,21 @@ import type { TranslateNS } from '@deepseek-ai/dsh-client-ui-slots'
 import { RezApi } from './api.ts'
 import { RezT } from './panel/helpers.ts'
 import { AuditTab } from './panel/AuditTab.tsx'
+import { BoardTab } from './panel/BoardTab.tsx'
 import { ChangelogTab } from './panel/ChangelogTab.tsx'
 import { ConfigTab } from './panel/ConfigTab.tsx'
 import { StatusTab } from './panel/StatusTab.tsx'
 import { WeixinTab } from './panel/WeixinTab.tsx'
 import css from './panel/panel.module.css'
 
-export type RezTab = 'config' | 'weixin' | 'status' | 'audit' | 'changelog'
+export type RezTab = 'config' | 'board' | 'weixin' | 'status' | 'audit' | 'changelog'
 
 export function RezSettingsPage({ t }: { t: TranslateNS<'dsh-rez-suite'> }) {
   const api = useMemo(() => new RezApi(), [])
   const [activeTab, setActiveTab] = useState<RezTab>('config')
   const tabs: ReadonlyArray<{ id: RezTab; label: string }> = [
     { id: 'config', label: t('tab.config') },
+    { id: 'board', label: t('tab.board') },
     { id: 'weixin', label: t('tab.weixin') },
     { id: 'status', label: t('tab.status') },
     { id: 'audit', label: t('tab.audit') },
@@ -47,6 +49,7 @@ export function RezSettingsPage({ t }: { t: TranslateNS<'dsh-rez-suite'> }) {
           ))}
         </div>
         {activeTab === 'config' && <ConfigTab api={api} />}
+        {activeTab === 'board' && <BoardTab api={api} />}
         {activeTab === 'weixin' && <WeixinTab api={api} />}
         {activeTab === 'status' && <StatusTab api={api} />}
         {activeTab === 'audit' && <AuditTab api={api} />}

package/src/esphome-lab.ts

@@ -1,7 +1,8 @@
 /**
- * ESPHome lab: official dsh-mcp-client → lab MCP, plus HTTP fallback.
- * Lab server runs official `esphome compile`. Never puts firmware bytes
- * into the model context; the tool returns a click-later download link.
+ * ESPHome lab client in Harness: official dsh-mcp-client → rezti-lab MCP.
+ * The compiler lives in Mac Mini Docker (`deploy/lab`, compose name rezti-lab).
+ * Missing lab / missing token must not block `dsh web` (failOnStartupError: false).
+ * Never puts firmware bytes into the model context; the tool returns a click-later download link.
  */
 
 import { loadRezConnections, readManagedCredential, REZ_CREDENTIAL_REFS, startMcpWhenSecret } from '@rezti/dsh-rez-sso'

package/src/index.ts

@@ -106,8 +106,9 @@ export const Config: z<RezConfig> = z.object({
 const SECTION_ORDER = 150
 
 export const REZ_GUIDANCE_CORE = [
-  '本机已安装 ReZ-TI 拆分包：工作身份由 dsh-rez-sso 提供，MCP 由官方 dsh-mcp-client 接入 Odoo / Nextcloud / 企业微信 / Home Assistant / TAPD / GSC。',
-  '工具名 mcp__odoo__*、mcp__nextcloud__*、mcp__wechat__*、mcp__homeassistant__*、mcp__tapd__*、mcp__gsc__*。',
+  '本机已安装 ReZ-TI 拆分包：工作身份由 dsh-rez-sso 提供，MCP 由官方 dsh-mcp-client 接入 Odoo / Nextcloud / Home Assistant / TAPD / GSC。',
+  '工具名 mcp__odoo__*、mcp__nextcloud__*、mcp__homeassistant__*、mcp__tapd__*、mcp__gsc__*。',
+  '企业微信办公能力不是 MCP：走官方 wecom-cli >=1.1（通讯录/在线文档/在线表格/智能表格/智能文档/待办/日程/会议/邮件/微盘/消息）。本企业已开通这些品类。看 rez_status 的 wecomCli.modules，按房间 wecomcli-* 技能执行。不要因为没有 mcp__wechat__* 就说没有企微能力，也不要说「超过 10 人只能用文档」。CLI 报某模块未授权才说该能力未开通。设置页 BotID+Secret 只是房间消息通道。旧群 webhook 兼容才会出现 mcp__wechat__*。',
   '密钥：REZ_ODOO_TOKEN、REZ_NEXTCLOUD_PASSWORD、REZ_WECHAT_WEBHOOK、REZ_HA_TOKEN、REZ_TAPD_TOKEN、REZ_GSC_KEY。',
   '个人微信（QClaw/ClawBot）：打开 设置 → 插件 → ReZ-TI → 微信 扫码，然后直接在微信里说话。消息进入网页左侧「微信」文件夹并延续同一会话，模型跟网页默认。网页归档了再从微信说话会自动恢复到侧栏。发「重启对话」会新开一条可见会话并把旧会话归档。网页端必须开着。不必再跑命令、也不要调用微信 MCP 工具。',
   '意图用 rez_set_intent（erp/files/chat/home/auto）。审计用 rez_audit。',

package/src/observe-mcp.ts

@@ -14,7 +14,7 @@ export const COMPOSED_SERVERS = ['odoo', 'nextcloud', 'wechat', 'homeassistant',
 
 export type ComposedServer = (typeof COMPOSED_SERVERS)[number]
 
-/** Front panel hides these until install/docs are ready. Backend MCP can still start if a secret exists. TAPD 1154488930001001224. */
+/** Front panel hides webhook MCP wechat status; AI bots live in the Config WeCom bindings. TAPD 1154488930001001231. */
 export const FRONT_HIDDEN_SERVERS: ReadonlySet<ComposedServer> = new Set(['wechat'])
 
 export function mcpToolPrefix(server: string): string {