@rezti/dsh-rez-suite 0.1.48 → 0.1.50

package/src/protocol.ts

@@ -123,11 +123,25 @@ export interface RezServerStatus {
   startedAt?: number
 }
 
+/** Official @wecom/cli office APIs. Not mcp__wechat__*. */
+export interface RezWecomCliModule {
+  id: string
+  label: string
+}
+
+export interface RezWecomCliStatus {
+  installed: boolean
+  authorized: boolean
+  modules: RezWecomCliModule[]
+  hint: string
+}
+
 /** Complete /api/dsh-rez-suite/status response. */
 export interface RezStatusResponse {
   role: RezRoleId
   servers: RezServerStatus[]
   totalRegisteredTools: number
+  wecomCli: RezWecomCliStatus
 }
 
 /** QClaw-style WeChat channel status (scan QR, then talk in WeChat). */
@@ -142,6 +156,28 @@ export interface RezWeixinStatus {
   hint: string
 }
 
+/** Accio-style WeCom AI bot: one BotID+Secret per Harness room. */
+export type RezWecomBindingPhase = 'idle' | 'connecting' | 'authenticated' | 'error'
+
+export interface RezWecomBotPublic {
+  room: string
+  botId: string
+  secretConfigured: boolean
+}
+
+export interface RezWecomBindingStatus {
+  room: string
+  botId: string
+  phase: RezWecomBindingPhase
+  hint: string
+}
+
+export interface RezWecomChannelsResponse {
+  rooms: string[]
+  bots: RezWecomBotPublic[]
+  status: RezWecomBindingStatus[]
+}
+
 /** One audit ledger row. */
 export interface RezAuditRecord {
   id: number
@@ -197,5 +233,6 @@ export const REZ_API = {
   auditReset: REZ_API_BASE + '/audit/reset',
   weixin: REZ_API_BASE + '/weixin',
   weixinVerify: REZ_API_BASE + '/weixin/verify',
+  wecomChannels: REZ_API_BASE + '/wecom/channels',
   update: REZ_API_BASE + '/update',
 } as const

package/src/routes.ts

@@ -18,6 +18,7 @@ import { isRezRoleId, REZ_API } from './protocol.ts'
 import type { McpHost } from './mcp-host.ts'
 import type { TokenManager } from './token-manager.ts'
 import { publicConfig } from './store.ts'
+import { probeWecomCli } from './wecom-cli.ts'
 
 const MAX_JSON_BODY_BYTES = 256 * 1024
 const SECRET_MASK = '********'
@@ -200,7 +201,12 @@ export function makeRoutes(deps: RezRoutesDeps): WebRoute[] {
         if (!guard(req, res, 'GET')) return
         const servers = host.status()
         const totalRegisteredTools = servers.reduce((sum, server) => sum + server.registeredTools, 0)
-        writeJson(res, 200, { role: getConfig().role, servers, totalRegisteredTools })
+        writeJson(res, 200, {
+          role: getConfig().role,
+          servers,
+          totalRegisteredTools,
+          wecomCli: probeWecomCli(),
+        })
       },
     },
     {

package/src/tools.ts

@@ -8,12 +8,13 @@ import { defineTool as defineToolOriginal } from '@deepseek-ai/dsh-tools'
 /** Loosen the typed helper for the suite's small fixed tools. */
 const defineTool = defineToolOriginal as unknown as (options: any) => any
 import type { ContentBlock } from '@deepseek-ai/dsh-llm'
-import type { RezConfig, RezTestResult } from './protocol.ts'
+import type { RezConfig, RezTestResult, RezWecomCliStatus } from './protocol.ts'
 import type { McpHost } from './mcp-host.ts'
 import type { TokenManager } from './token-manager.ts'
 import { publicConfig } from './store.ts'
 import { cwdFromExecution } from './rooms.ts'
 import { compileEsphomeFirmware } from './esphome-lab.ts'
+import { probeWecomCli } from './wecom-cli.ts'
 
 function text(value: string): ContentBlock[] {
   return [{ type: 'text', text: value }]
@@ -30,10 +31,25 @@ function renderTest(results: RezTestResult[]): string {
   }).join('\n')
 }
 
-export function rezStatusTool(host: McpHost, config: () => RezConfig) {
+function renderWecomCli(cli: RezWecomCliStatus | undefined): string {
+  const row = cli ?? { installed: false, authorized: false, modules: [], hint: '' }
+  const modules = (row.modules ?? []).map((item) => `${item.label}(${item.id})`).join('、')
+  return [
+    'wecom-cli（企微办公能力，不是 MCP）: installed=' + (row.installed ? 'yes' : 'no')
+      + ' authorized=' + (row.authorized ? 'yes' : 'no'),
+    modules.length > 0 ? 'modules: ' + modules : 'modules: (官方目录见 wecomcli-* 技能)',
+    row.hint,
+  ].join('\n')
+}
+
+export function rezStatusTool(
+  host: McpHost,
+  config: () => RezConfig,
+  wecomCli: () => RezWecomCliStatus = probeWecomCli,
+) {
   return defineTool({
     name: 'rez_status',
-    description: 'List the dsh-rez-suite MCP server statuses and how many tools each server registered for the current role. Triggers: rez, MCP, 连接状态.',
+    description: 'List MCP server statuses plus WeCom office APIs (official wecom-cli, not mcp__wechat__). Triggers: rez, MCP, 连接状态, 企业微信, 企微能力.',
     parameters: {},
     output: {
       schema: {
@@ -57,10 +73,36 @@ export function rezStatusTool(host: McpHost, config: () => RezConfig) {
               },
             },
           },
+          wecomCli: {
+            type: 'object',
+            required: true,
+            additionalProperties: false,
+            properties: {
+              installed: { type: 'boolean', required: true },
+              authorized: { type: 'boolean', required: true },
+              hint: { type: 'string', required: true },
+              modules: {
+                type: 'array',
+                required: true,
+                items: {
+                  type: 'object',
+                  additionalProperties: false,
+                  properties: {
+                    id: { type: 'string', required: true },
+                    label: { type: 'string', required: true },
+                  },
+                },
+              },
+            },
+          },
         },
         additionalProperties: false,
       },
-      render: (_args: any, value: { role?: string; servers?: Array<Record<string, unknown>> }) => {
+      render: (_args: any, value: {
+        role?: string
+        servers?: Array<Record<string, unknown>>
+        wecomCli?: RezWecomCliStatus
+      }) => {
         const rows = (value.servers ?? []).map(server => [
           server.server,
           server.state,
@@ -68,7 +110,8 @@ export function rezStatusTool(host: McpHost, config: () => RezConfig) {
           server.registeredTools,
           server.lastError ?? '',
         ].join(' | '))
-        return text('role: ' + (value.role ?? '') + '\n' + ['server | state | discovered | registered | error', '--- | --- | --- | --- | ---', ...rows].join('\n'))
+        const mcp = 'role: ' + (value.role ?? '') + '\n' + ['server | state | discovered | registered | error', '--- | --- | --- | --- | ---', ...rows].join('\n')
+        return text(mcp + '\n\n' + renderWecomCli(value.wecomCli))
       },
     },
     async execute(_args: unknown, exec?: { agent?: unknown }) {
@@ -78,7 +121,7 @@ export function rezStatusTool(host: McpHost, config: () => RezConfig) {
         if (clean.startedAt === undefined) delete clean.startedAt
         return clean
       })
-      return { role: config().role, servers }
+      return { role: config().role, servers, wecomCli: wecomCli() }
     },
   })
 }

package/src/wecom-cli.ts

@@ -0,0 +1,125 @@
+/**
+ * Official WeCom office APIs are @wecom/cli, not mcp__wechat__*.
+ * TAPD bug 1154488930001000054: missing MCP row was treated as “no WeCom”.
+ * Official CLI v1.1+ opened 通讯录 / 在线文档 etc. for every company size
+ * (https://github.com/WecomTeam/wecom-cli). Kelvin enabled those modules.
+ */
+
+import { spawnSync } from 'node:child_process'
+
+export interface WecomCliModule {
+  id: string
+  label: string
+}
+
+export interface WecomCliStatus {
+  installed: boolean
+  authorized: boolean
+  modules: WecomCliModule[]
+  hint: string
+}
+
+export interface WecomCliRunResult {
+  status: number | null
+  stdout: string
+  stderr: string
+  errorCode?: string
+}
+
+export type WecomCliRunner = (argv: string[]) => WecomCliRunResult
+
+/** Official @wecom/cli >=1.1 catalog. Do not invent extra HTTP APIs. */
+export const WECOM_CLI_CATALOG: readonly WecomCliModule[] = [
+  { id: 'contact', label: '通讯录' },
+  { id: 'doc', label: '在线文档' },
+  { id: 'doc-manage', label: '文档管理' },
+  { id: 'sheet', label: '在线表格' },
+  { id: 'smartsheet', label: '智能表格' },
+  { id: 'smartpage', label: '智能文档' },
+  { id: 'todo', label: '待办' },
+  { id: 'calendar', label: '日程' },
+  { id: 'meeting', label: '会议' },
+  { id: 'email', label: '邮件' },
+  { id: 'disk', label: '微盘' },
+  { id: 'message', label: '消息' },
+  { id: 'media', label: '媒体文件' },
+]
+
+const MODULE_LABELS = WECOM_CLI_CATALOG.map((row) => row.label).join('/')
+
+const HINT_MISSING = [
+  `未安装官方 wecom-cli（@wecom/cli >=1.1）。企微办公能力（${MODULE_LABELS}）走 CLI，不是 MCP。`,
+  '安装：npm i -g @wecom/cli ，然后 wecom-cli auth init。',
+  '官方已面向各规模企业开放通讯录等能力，不要再说「超过 10 人只能用文档」。',
+  '不要因为 rez_status 没有 wechat MCP 行就说没有企微能力。',
+].join('')
+
+const HINT_UNAUTH = [
+  '已安装 wecom-cli，尚未授权。跑 wecom-cli auth init。',
+  `授权后可用：${MODULE_LABELS}。本企业已开通这些品类。`,
+  'CLI 报某模块未授权才说该能力未开通；不要说「没有企微 MCP」，也不要说 10 人限制。',
+].join('')
+
+const HINT_OK = [
+  `企微办公能力走 wecom-cli >=1.1（${MODULE_LABELS}）。本企业已开通。`,
+  '按房间里官方 wecomcli-* 技能执行，命令以 wecom-cli <模块> --help 为准。',
+  '不要用旧帮助中心「超过 10 人只能用文档」的说法。CLI 报未授权才说该模块未开通。',
+  '设置页 BotID+Secret 只是房间消息通道。不要把没有 mcp__wechat__* 当成没有企微能力。',
+].join('')
+
+export function wecomCliCatalog(): WecomCliModule[] {
+  return WECOM_CLI_CATALOG.map((row) => ({ ...row }))
+}
+
+export function parseWecomCliHelpModules(helpText: string): WecomCliModule[] {
+  const text = helpText.toLowerCase()
+  return WECOM_CLI_CATALOG.filter((row) => {
+    const token = row.id.replace(/-/g, '[-_ ]?')
+    return new RegExp(`(?:^|[^a-z])${token}(?:[^a-z]|$)`).test(text)
+  })
+}
+
+export function defaultWecomCliRunner(argv: string[]): WecomCliRunResult {
+  const result = spawnSync('wecom-cli', argv, {
+    encoding: 'utf8',
+    timeout: 4000,
+    env: process.env,
+  })
+  const error = result.error as NodeJS.ErrnoException | undefined
+  return {
+    status: result.status,
+    stdout: typeof result.stdout === 'string' ? result.stdout : '',
+    stderr: typeof result.stderr === 'string' ? result.stderr : '',
+    errorCode: error?.code,
+  }
+}
+
+function looksUnauthorized(text: string, status: number | null): boolean {
+  if (status !== 0) return true
+  return /未授权|未登录|未初始化|not (logged|auth)|unauthorized|请先.*auth|auth init/i.test(text)
+}
+
+function withCatalog(partial: Omit<WecomCliStatus, 'modules'>): WecomCliStatus {
+  return { ...partial, modules: wecomCliCatalog() }
+}
+
+export function probeWecomCli(run: WecomCliRunner = defaultWecomCliRunner): WecomCliStatus {
+  const help = run(['--help'])
+  if (help.errorCode === 'ENOENT') {
+    return withCatalog({ installed: false, authorized: false, hint: HINT_MISSING })
+  }
+  const helpText = help.stdout + help.stderr
+  if (help.status !== 0 && helpText.trim().length === 0) {
+    return withCatalog({ installed: false, authorized: false, hint: HINT_MISSING })
+  }
+
+  const auth = run(['auth', 'show'])
+  const text = auth.stdout + auth.stderr
+  if (auth.errorCode === 'ENOENT') {
+    return withCatalog({ installed: false, authorized: false, hint: HINT_MISSING })
+  }
+  if (looksUnauthorized(text, auth.status)) {
+    return withCatalog({ installed: true, authorized: false, hint: HINT_UNAUTH })
+  }
+  return withCatalog({ installed: true, authorized: true, hint: HINT_OK })
+}

package/templates/boss/ops/AGENTS.md

@@ -41,6 +41,8 @@
 - Odoo 只读采购在途 / 库存 / 逾期；TAPD 只看迭代红灯。
 - 禁止改库存、群发、自动上架、在这里控 HA。企微只出「需要老板出面」的摘要。
 - 拍图入库不在本室：运营岗去「设计」房间；终审在产品室。
+- 商品上架预览不在本室：运营岗去「电商」房间（一期阿里；Amazon 等有号）。
+- 媒体分发预览不在本室：运营岗去「发布」房间。
 - 工商查询请切到法务助理，避免串房间。
 
 ## 公司

package/templates/shared/wecom-cli.SOURCE.md

@@ -0,0 +1,5 @@
+# 官方 wecom-cli Skills 来源
+
+`wecomcli-*` 目录里的 `SKILL.md` 来自 [WecomTeam/wecom-cli](https://github.com/WecomTeam/wecom-cli)（MIT）。不要手改这些文件；升级时重新拉取。
+
+雷泽自己的索引是 `wecom-office/SKILL.md`。

package/templates/shared/wecom-office/SKILL.md

@@ -0,0 +1,31 @@
+---
+name: wecom-office
+description: 企业微信办公能力索引。官方 wecom-cli v1.1+ 已面向各规模企业开放通讯录、在线文档、在线表格、智能表格、智能文档、待办、日程、会议、邮件、微盘、消息。Triggers: 企微、企业微信、通讯录、在线文档、待办、日程、会议、邮件、微盘、智能表格。
+---
+
+不要看 `rez_status` 的 MCP 表里有没有「wechat」。企微办公能力是官方 CLI（https://github.com/WecomTeam/wecom-cli，MIT），不是 mcp__wechat__*，不是自写 HTTP/WebSocket，也不是旧群 webhook MCP。
+
+官方 **@wecom/cli >= 1.1** 已面向各规模企业开放通讯录等能力（不再受旧帮助中心「超过 10 人只能用文档」限制）。**本企业已开通这些品类。** 命令与工作流以同目录官方 `wecomcli-*` 技能为准，不要自己编 API。
+
+| 技能 | 品类 |
+|---|---|
+| `wecomcli-shared` | 安装 / 授权前置检查（先读这个） |
+| `wecomcli-contact` | 通讯录（按姓名/拼音/别名搜 userid） |
+| `wecomcli-doc` | 在线文档 |
+| `wecomcli-doc-manage` | 文档搜索、权限、加入规则 |
+| `wecomcli-sheet` | 在线表格 |
+| `wecomcli-smartsheet` | 智能表格 |
+| `wecomcli-smartpage` | 智能文档 |
+| `wecomcli-todo` | 待办 |
+| `wecomcli-calendar` | 日程 |
+| `wecomcli-meeting` | 会议 |
+| `wecomcli-email` | 邮件 |
+| `wecomcli-disk` | 微盘 |
+| `wecomcli-message` | 消息 |
+| `wecomcli-media` | 媒体文件 |
+
+1. 先看 `rez_status` 的 `wecomCli.modules`，或跑 `wecom-cli auth show`。
+2. 先读 `wecomcli-shared`，再读对应 `wecomcli-*`。子命令以 `wecom-cli <模块> --help` 为准。
+3. CLI 返回未授权 / 无权限，才说**该模块未开通**。不要总结成「当前系统没有企业微信 MCP」，也不要说「超过 10 人没有通讯录」。
+4. 设置页 BotID + Secret 只是房间**消息通道**。办公 API 用 `wecom-cli auth init` 那套凭证，不要混成一回事。
+5. 未另批前不要群发、不要改通讯录结构、不要对外发邮件。