@rezti/dsh-rez-wechat 0.1.14 → 0.1.15

package/README.md

@@ -1,16 +1,17 @@
 # @rezti/dsh-rez-wechat
 
-企业微信走现成 `wecom-mcp`；个人微信走 QClaw 同款 `dsh-wechat-bridge`（腾讯 iLink）。都不自写长连接。
+企业微信走官方 `@wecom/aibot-node-sdk`（智能机器人 BotID + Secret 长连接）；个人微信走 QClaw 同款 `dsh-wechat-bridge`（腾讯 iLink）。都不自写长连接。
 
 ```bash
 dsh plugin --profile web add @rezti/dsh-rez-suite
 ```
 
-以后升级只记：`dsh plugin --profile web update @rezti/dsh-rez-suite`。不要再单独 add 本包。
+以后升级只记：`dsh plugin --profile web add @rezti/dsh-rez-suite@latest`。不要再单独 add 本包。
 
 | 能力 | 做法 |
 |---|---|
-| 企业微信发到群 | `wecom-mcp`（`mcp__wechat__*`）+ `REZ_WECHAT_WEBHOOK` |
+| 企业微信智能机器人 | 官方 `@wecom/aibot-node-sdk`。设置页给每个 Harness 房间绑一个 BotID + Secret。同事在企微跟哪个 bot 说话，消息进网页左侧那个房间。密钥 `~/.dsh/wecom-channels.json`（mode 600），不进 compose。 |
+| 旧群机器人 Webhook（兼容） | 一个 bot 都没绑、且仍配置了 `REZ_WECHAT_WEBHOOK` 时，才拉起 `wecom-mcp` |
 | 个人微信（QClaw / ClawBot） | dsh Web 设置面板扫码，之后直接在微信里说话。消息进左侧 **微信** 文件夹的同一会话，模型跟网页默认。 |
 
 个人微信桥接到正在跑的 `dsh web`（不是 `dsh --profile headless`）：
@@ -23,6 +24,13 @@ dsh plugin --profile web add @rezti/dsh-rez-suite
 - 思考过程不会发到微信；多段正文会保留换行
 - 通道断了点「重新连接」，已登录不必再扫码
 
+企微智能机器人（Accio 同款按房间绑定）：
+
+- 可绑房间：搞钱、产品、运营、人事助理、财务助理、法务助理、设计、实验室（不要绑「微信」个人通道）
+- 会话标题是房间名；网页必须开着
+- 收文本 / 混排文字、流式回复、进入会话欢迎语；图片/文件/语音请走网页端或 Nextcloud
+- BotID / Secret 在企业微信管理后台 → 智能机器人（[开发前必读](https://developer.work.weixin.qq.com/document/path/101805) / [长连接](https://developer.work.weixin.qq.com/document/path/101463)）
+
 扫码 UI 在 suite 面板；通道本身在本包。不要对同一 profile 既 add suite 又 add wechat，会重复注册。
 
 这是 ClawBot 客服会话，不是用个人微信号管好友/群，也不是客户层 WhatsApp/邮件通道。

package/lib/index.js

@@ -1,11 +1,13 @@
 import { startMcpWhenSecret } from '@rezti/dsh-rez-sso';
 import { WeixinChannel } from './channel.js';
+import { WecomChannel, shouldStartWecomWebhook } from './wecom-channel.js';
 import { revealSessionInRegistry } from './unarchive.js';
+import { WECOM_BINDABLE_ROOMS } from './wecom-store.js';
 export const name = 'rez-wechat';
 export const inject = ['systemPrompt', 'webServer', 'rezSso'];
 const GUIDANCE = [
-    '企业微信群发送走官方 dsh-mcp-client + wecom-mcp（mcp__wechat__*），密钥 REZ_WECHAT_WEBHOOK。未配置时不拉起 wecom-mcp。Webhook 在 设置 → 插件 → ReZ-TI 里填。',
-    '个人微信是 QClaw 同款 ClawBot 通道：在 Rez 面板「微信」页扫码一次，然后直接在微信里说话。消息进入网页左侧「微信」文件夹并延续同一会话，模型跟网页默认（在网页里选了 Kimi 就会走 Kimi）。网页端归档了也能从微信自动恢复到侧栏（空白会话网页会藏起来，所以新开的会话会先打一句招呼再出现）。网页端出现选择题时会编成纯文本发到微信，回复数字或选项原文即可；思考过程不会转发。发「重启对话」会新开一条可见的网页会话并把旧的归档。通道断了点「重新连接」（已登录不必再扫码）。不要再跑 npx weixin-mcp login，也不要调用 mcp__weixin__*。网页端必须开着。',
+    '企业微信智能机器人走官方 @wecom/aibot-node-sdk（BotID + Secret 长连接）。设置页按 Harness 房间各绑一个 bot：同事在企微跟哪个机器人说话，消息就进网页左侧那个房间（人事/财务/法务/设计/实验室/老板三室）。密钥写在 ~/.dsh/wecom-channels.json，不要写进 compose。没有绑定任何 bot 且仍配置了 REZ_WECHAT_WEBHOOK 时，才兼容旧的 wecom-mcp 群发。不要自写 WebSocket，也不要引导去填群 Webhook。',
+    '个人微信是 QClaw 同款 ClawBot 通道：在 Rez 面板「微信」页扫码一次，然后直接在微信里说话。消息进入网页左侧「微信」文件夹并延续同一会话，模型跟网页默认（在网页里选了 Kimi 就会走 Kimi）。网页端归档了也能从微信自动恢复到侧栏（空白会话网页会藏起来，所以新开的会话会先打一句招呼再出现）。网页端出现选择题时会编成纯文本发到微信，回复数字或选项原文即可；思考过程不会转发。发「重启对话」会新开一条可见的网页会话并把旧的归档。通道断了点「重新连接」（已登录不必再扫码）。不要再跑 npx weixin-mcp login，也不要调用 mcp__weixin__*。网页端必须开着。工商查询请切到法务助理，避免串房间。',
     '这是 ClawBot 客服会话，不是用个人微信号管好友/群。对外发消息必须先征得用户批准。',
 ].join('');
 function isLoopbackRequest(request) {
@@ -118,6 +120,43 @@ function weixinRoutes(channel, ctx) {
         },
     ];
 }
+function wecomRoutes(channel) {
+    const path = '/api/dsh-rez-suite/wecom/channels';
+    const guard = (req, res, method) => {
+        if (!isLoopbackRequest(req)) {
+            writeJson(res, 403, { error: 'forbidden: loopback-only' });
+            return false;
+        }
+        if (req.method !== method) {
+            writeJson(res, 405, { error: 'method not allowed' });
+            return false;
+        }
+        return true;
+    };
+    return [
+        {
+            kind: 'exact',
+            path,
+            handler: async (req, res) => {
+                if (req.method === 'GET') {
+                    if (!guard(req, res, 'GET'))
+                        return;
+                    writeJson(res, 200, { ...channel.publicState(), rooms: [...WECOM_BINDABLE_ROOMS] });
+                    return;
+                }
+                if (req.method === 'PUT') {
+                    if (!guard(req, res, 'PUT'))
+                        return;
+                    const body = await readJsonBody(req);
+                    const incoming = body?.bots ?? body;
+                    writeJson(res, 200, await channel.applyBots(incoming));
+                    return;
+                }
+                writeJson(res, 405, { error: 'method not allowed' });
+            },
+        },
+    ];
+}
 function getWorkspaceRegistry(ctx) {
     try {
         return ctx.get('workspaceRegistry');
@@ -129,28 +168,35 @@ function getWorkspaceRegistry(ctx) {
 export async function apply(ctx) {
     const channel = new WeixinChannel();
     channel.startIfLoggedIn();
+    const wecom = new WecomChannel();
+    wecom.start();
     ctx.effect(() => ctx.systemPrompt.section({
         name: 'plugin:dsh-rez-wechat',
         order: 162,
         text: GUIDANCE,
     }), 'dsh-rez-wechat: prompt');
-    const routes = weixinRoutes(channel, ctx);
+    const routes = [...weixinRoutes(channel, ctx), ...wecomRoutes(wecom)];
     ctx.effect(() => {
         const disposers = routes.map(route => ctx.webServer.register(route));
         return () => { for (const dispose of disposers)
             dispose(); };
     }, 'dsh-rez-wechat: weixin routes');
-    ctx.effect(() => () => { channel.dispose(); }, 'dsh-rez-wechat: weixin channel');
-    await startMcpWhenSecret(ctx, {
-        system: 'wechat',
-        label: '企业微信',
-        config: (secret) => ({
-            serverName: 'wechat',
-            transport: 'stdio',
-            command: 'npx',
-            args: ['-y', 'wecom-mcp'],
-            env: { WECOM_WEBHOOK_URL: secret },
-            failOnStartupError: false,
-        }),
-    });
+    ctx.effect(() => () => {
+        channel.dispose();
+        wecom.dispose();
+    }, 'dsh-rez-wechat: channels');
+    if (shouldStartWecomWebhook()) {
+        await startMcpWhenSecret(ctx, {
+            system: 'wechat',
+            label: '企业微信',
+            config: (secret) => ({
+                serverName: 'wechat',
+                transport: 'stdio',
+                command: 'npx',
+                args: ['-y', 'wecom-mcp'],
+                env: { WECOM_WEBHOOK_URL: secret },
+                failOnStartupError: false,
+            }),
+        });
+    }
 }

package/lib/web-shim.d.ts

@@ -9,6 +9,8 @@
  */
 export declare const WECHAT_WORKSPACE_NAME = "\u5FAE\u4FE1";
 export declare const DEFAULT_WEB_URL = "http://127.0.0.1:3080";
+/** Seeded only when the inbox folder has no AGENTS.md yet. */
+export declare const WECHAT_INBOX_AGENTS: string;
 export interface ModelRef {
     provider?: string;
     model: string;
@@ -53,6 +55,8 @@ export declare function turnIsBlocked(events: unknown[]): boolean;
 export declare function extractLatestUserText(task: string): string;
 export declare function dshHomeDir(env?: NodeJS.ProcessEnv, home?: string): string;
 export declare function wechatWorkspaceDir(env?: NodeJS.ProcessEnv, home?: string): string;
+/** Write a short inbox AGENTS.md once; never overwrite a living file. Skip non-微信 rooms (企微按房间绑定). */
+export declare function ensureWechatInboxAgents(cwd: string): void;
 export declare function sessionStorePath(env?: NodeJS.ProcessEnv, home?: string): string;
 export declare function webBaseUrl(env?: NodeJS.ProcessEnv): string;
 export declare function loadSessionStore(path: string): SessionStore;

package/lib/web-shim.js

@@ -8,11 +8,18 @@
  * (Kimi if that is what the user selected).
  */
 import { randomUUID } from 'node:crypto';
-import { chmodSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { basename, dirname, join } from 'node:path';
 export const WECHAT_WORKSPACE_NAME = '微信';
 export const DEFAULT_WEB_URL = 'http://127.0.0.1:3080';
+/** Seeded only when the inbox folder has no AGENTS.md yet. */
+export const WECHAT_INBOX_AGENTS = [
+    '# 微信',
+    '',
+    '收件箱。工商查询请切到法务助理，避免串房间。',
+    '',
+].join('\n');
 export const ASK_USER_QUESTION_TOOL = 'ask_user_question';
 export function parseHeadlessArgv(argv) {
     const args = argv[0]?.endsWith('node') || argv[0]?.includes('node.exe') ? argv.slice(1) : argv;
@@ -118,6 +125,16 @@ export function wechatWorkspaceDir(env = process.env, home = homedir()) {
         return env.REZ_WECHAT_WORKSPACE;
     return join(dshHomeDir(env, home), 'workspaces', WECHAT_WORKSPACE_NAME);
 }
+/** Write a short inbox AGENTS.md once; never overwrite a living file. Skip non-微信 rooms (企微按房间绑定). */
+export function ensureWechatInboxAgents(cwd) {
+    mkdirSync(cwd, { recursive: true });
+    if (basename(cwd) !== WECHAT_WORKSPACE_NAME)
+        return;
+    const file = join(cwd, 'AGENTS.md');
+    if (existsSync(file))
+        return;
+    writeFileSync(file, WECHAT_INBOX_AGENTS);
+}
 export function sessionStorePath(env = process.env, home = homedir()) {
     if (env.REZ_WECHAT_SESSION_STORE !== undefined && env.REZ_WECHAT_SESSION_STORE !== '')
         return env.REZ_WECHAT_SESSION_STORE;
@@ -728,6 +745,7 @@ export async function postRpc(baseUrl, method, params, timeoutMs = RPC_TIMEOUT_M
 }
 async function ensureWorkspace(rpc, cwd) {
     mkdirSync(cwd, { recursive: true });
+    ensureWechatInboxAgents(cwd);
     try {
         const created = await rpc('workspace.create', { path: cwd });
         const id = extractWorkspaceId(created) ?? findWorkspaceId(created, cwd);
@@ -832,7 +850,8 @@ export async function ensureSessionVisible(rpc, sessionId, env = process.env, wo
         await tryRpc(rpc, 'workspace.attachSession', { workspaceId, sessionId });
         await tryRpc(rpc, 'workspace.insertSessionBefore', { workspaceId, sessionId });
     }
-    await tryRpc(rpc, 'session.rename', { sessionId, title: WECHAT_WORKSPACE_NAME });
+    const title = basename(wechatWorkspaceDir(env)) || WECHAT_WORKSPACE_NAME;
+    await tryRpc(rpc, 'session.rename', { sessionId, title });
 }
 async function archiveSession(rpc, sessionId) {
     await tryRpc(rpc, 'workspace.archiveSession', { sessionId });

package/lib/wecom-channel.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Accio-style WeCom AI bots: one official WSClient per Harness room.
+ * Uses @wecom/aibot-node-sdk (botId + secret). Do not hand-roll the WS.
+ */
+import { type WecomBotPublic, type WecomBotRecord } from './wecom-store.js';
+export declare const WECOM_NON_TEXT_HINT = "\u8BF7\u53D1\u6587\u5B57\u3002\u56FE\u7247\u3001\u6587\u4EF6\u548C\u8BED\u97F3\u8BF7\u8D70\u7F51\u9875\u7AEF\u6216 Nextcloud\u3002";
+export type WecomBindingPhase = 'idle' | 'connecting' | 'authenticated' | 'error';
+export interface WecomBindingStatus {
+    room: string;
+    botId: string;
+    phase: WecomBindingPhase;
+    hint: string;
+}
+export interface WecomChannelsPublic {
+    rooms: readonly string[];
+    bots: WecomBotPublic[];
+    status: WecomBindingStatus[];
+}
+export interface WecomWsClient {
+    connect: () => unknown;
+    disconnect: () => void;
+    on: (event: string, handler: (...args: unknown[]) => void) => unknown;
+    replyStream: (frame: unknown, streamId: string, content: string, finish?: boolean) => Promise<unknown>;
+    replyWelcome: (frame: unknown, body: {
+        msgtype: string;
+        text: {
+            content: string;
+        };
+    }) => Promise<unknown>;
+}
+export type WecomClientFactory = (opts: {
+    botId: string;
+    secret: string;
+}) => WecomWsClient | Promise<WecomWsClient>;
+export type WecomRunTurn = (room: string, text: string) => Promise<string>;
+export declare function extractWecomText(frame: unknown): string;
+export declare function wecomMsgid(frame: unknown): string;
+export declare function createOfficialWecomClient(opts: {
+    botId: string;
+    secret: string;
+}): Promise<WecomWsClient>;
+export declare function shouldStartWecomWebhook(bots?: WecomBotRecord[]): boolean;
+export declare class WecomChannel {
+    private readonly home;
+    private readonly factory;
+    private readonly runTurn;
+    private readonly bindings;
+    private generation;
+    constructor(opts?: {
+        home?: string;
+        factory?: WecomClientFactory;
+        runTurn?: WecomRunTurn;
+    });
+    start(): void;
+    status(): WecomBindingStatus[];
+    publicState(): WecomChannelsPublic;
+    applyBots(incoming: unknown): Promise<WecomChannelsPublic>;
+    dispose(): void;
+    /** Test seam: wait until inbound handlers finish. */
+    flush(): Promise<void>;
+    reconnect(): Promise<void>;
+    private dropBindings;
+    private bind;
+    private enqueue;
+    private rememberMsgid;
+    private handleText;
+    private handleNonText;
+}

package/lib/wecom-channel.js

@@ -0,0 +1,255 @@
+/**
+ * Accio-style WeCom AI bots: one official WSClient per Harness room.
+ * Uses @wecom/aibot-node-sdk (botId + secret). Do not hand-roll the WS.
+ */
+import { join } from 'node:path';
+import { dshHome } from '@rezti/dsh-rez-sso';
+import { runHeadlessViaWeb } from './web-shim.js';
+import { loadWecomChannels, publicWecomBots, saveWecomChannels, applyWecomBotPatch, WECOM_BINDABLE_ROOMS, } from './wecom-store.js';
+export const WECOM_NON_TEXT_HINT = '请发文字。图片、文件和语音请走网页端或 Nextcloud。';
+const MAX_SEEN_MSGIDS = 200;
+export function extractWecomText(frame) {
+    if (typeof frame !== 'object' || frame === null)
+        return '';
+    const body = frame.body;
+    if (typeof body !== 'object' || body === null)
+        return '';
+    const rec = body;
+    const fromText = textContent(rec.text);
+    if (fromText.length > 0)
+        return fromText;
+    if (typeof rec.content === 'string' && rec.content.trim().length > 0)
+        return rec.content.trim();
+    const mixed = rec.mixed;
+    if (typeof mixed === 'object' && mixed !== null) {
+        const items = mixed.items;
+        if (Array.isArray(items)) {
+            const parts = [];
+            for (const item of items) {
+                if (typeof item !== 'object' || item === null)
+                    continue;
+                const row = item;
+                const nested = textContent(row.text) || (typeof row.content === 'string' ? row.content.trim() : '');
+                if (nested.length > 0)
+                    parts.push(nested);
+            }
+            return parts.join('\n').trim();
+        }
+    }
+    return '';
+}
+export function wecomMsgid(frame) {
+    if (typeof frame !== 'object' || frame === null)
+        return '';
+    const body = frame.body;
+    if (typeof body !== 'object' || body === null)
+        return '';
+    const id = body.msgid;
+    return typeof id === 'string' ? id : '';
+}
+function textContent(value) {
+    if (typeof value === 'string')
+        return value.trim();
+    if (typeof value === 'object' && value !== null) {
+        const content = value.content;
+        if (typeof content === 'string')
+            return content.trim();
+    }
+    return '';
+}
+function newStreamId() {
+    return `stream-${Date.now().toString(16)}-${Math.random().toString(16).slice(2, 10)}`;
+}
+const quietLogger = {
+    debug() { },
+    info() { },
+    warn(...args) { console.warn('[wecom]', ...args); },
+    error(...args) { console.error('[wecom]', ...args); },
+};
+export async function createOfficialWecomClient(opts) {
+    const mod = await import('@wecom/aibot-node-sdk');
+    const holder = mod.default ?? mod;
+    const WSClient = holder.WSClient;
+    if (typeof WSClient !== 'function') {
+        throw new Error('官方 @wecom/aibot-node-sdk 没有 WSClient');
+    }
+    return new WSClient({
+        botId: opts.botId,
+        secret: opts.secret,
+        maxReconnectAttempts: -1,
+        logger: quietLogger,
+    });
+}
+async function defaultRunTurn(room, text) {
+    const home = dshHome();
+    return runHeadlessViaWeb({
+        task: text,
+        cwd: room,
+        env: {
+            ...process.env,
+            REZ_WECHAT_WORKSPACE: join(home, 'workspaces', room),
+            REZ_WECHAT_SESSION_STORE: join(home, 'dsh-rez-wecom', room, 'web-sessions.json'),
+        },
+    });
+}
+export function shouldStartWecomWebhook(bots = loadWecomChannels().bots) {
+    return bots.length === 0;
+}
+export class WecomChannel {
+    home;
+    factory;
+    runTurn;
+    bindings = new Map();
+    generation = 0;
+    constructor(opts) {
+        this.home = opts?.home ?? dshHome();
+        this.factory = opts?.factory ?? createOfficialWecomClient;
+        this.runTurn = opts?.runTurn ?? defaultRunTurn;
+    }
+    start() {
+        void this.reconnect();
+    }
+    status() {
+        return [...this.bindings.values()].map((row) => ({
+            room: row.bot.room,
+            botId: row.bot.botId,
+            phase: row.phase,
+            hint: row.hint,
+        }));
+    }
+    publicState() {
+        const file = loadWecomChannels(this.home);
+        return {
+            rooms: WECOM_BINDABLE_ROOMS,
+            bots: publicWecomBots(file),
+            status: this.status(),
+        };
+    }
+    async applyBots(incoming) {
+        const next = applyWecomBotPatch(loadWecomChannels(this.home), incoming);
+        saveWecomChannels(next, this.home);
+        await this.reconnect();
+        return this.publicState();
+    }
+    dispose() {
+        this.generation += 1;
+        this.dropBindings();
+    }
+    /** Test seam: wait until inbound handlers finish. */
+    async flush() {
+        await Promise.all([...this.bindings.values()].map((row) => row.queue));
+    }
+    async reconnect() {
+        const gen = ++this.generation;
+        this.dropBindings();
+        const bots = loadWecomChannels(this.home).bots;
+        for (const bot of bots) {
+            if (gen !== this.generation)
+                return;
+            await this.bind(bot);
+        }
+    }
+    dropBindings() {
+        for (const row of this.bindings.values()) {
+            try {
+                row.client.disconnect();
+            }
+            catch { /* already closed */ }
+        }
+        this.bindings.clear();
+    }
+    async bind(bot) {
+        const row = {
+            bot,
+            client: undefined,
+            phase: 'connecting',
+            hint: `正在连接「${bot.room}」企业微信机器人…`,
+            seen: [],
+            queue: Promise.resolve(),
+        };
+        this.bindings.set(bot.room, row);
+        try {
+            const client = await this.factory({ botId: bot.botId, secret: bot.secret });
+            row.client = client;
+            client.on('authenticated', () => {
+                row.phase = 'authenticated';
+                row.hint = `「${bot.room}」已接入。同事在企微跟这个机器人说话，会进网页左侧该房间。`;
+            });
+            client.on('disconnected', (reason) => {
+                if (row.phase === 'authenticated')
+                    row.phase = 'connecting';
+                row.hint = `「${bot.room}」断开（${String(reason ?? '')}），正在重连…`;
+            });
+            client.on('error', (error) => {
+                row.phase = 'error';
+                const why = error instanceof Error ? error.message : String(error);
+                row.hint = `「${bot.room}」连接失败：${why}`;
+            });
+            client.on('message.text', (frame) => { this.enqueue(row, () => this.handleText(row, frame)); });
+            client.on('message.mixed', (frame) => { this.enqueue(row, () => this.handleText(row, frame)); });
+            client.on('message.image', (frame) => { this.enqueue(row, () => this.handleNonText(row, frame)); });
+            client.on('message.file', (frame) => { this.enqueue(row, () => this.handleNonText(row, frame)); });
+            client.on('message.voice', (frame) => { this.enqueue(row, () => this.handleNonText(row, frame)); });
+            client.on('message.video', (frame) => { this.enqueue(row, () => this.handleNonText(row, frame)); });
+            client.on('event.enter_chat', (frame) => {
+                this.enqueue(row, async () => {
+                    await client.replyWelcome(frame, {
+                        msgtype: 'text',
+                        text: { content: `您好，我是「${bot.room}」。直接发文字即可。` },
+                    });
+                });
+            });
+            client.connect();
+        }
+        catch (error) {
+            row.phase = 'error';
+            row.hint = `「${bot.room}」无法启动：${error instanceof Error ? error.message : String(error)}`;
+        }
+    }
+    enqueue(row, work) {
+        row.queue = row.queue.then(work, work).catch((error) => {
+            const why = error instanceof Error ? error.message : String(error);
+            console.error(`[wecom] ${row.bot.room}: ${why}`);
+        });
+    }
+    rememberMsgid(row, frame) {
+        const id = wecomMsgid(frame);
+        if (id.length === 0)
+            return false;
+        if (row.seen.includes(id))
+            return true;
+        row.seen.push(id);
+        if (row.seen.length > MAX_SEEN_MSGIDS)
+            row.seen.splice(0, row.seen.length - MAX_SEEN_MSGIDS);
+        return false;
+    }
+    async handleText(row, frame) {
+        if (this.rememberMsgid(row, frame))
+            return;
+        const text = extractWecomText(frame);
+        const streamId = newStreamId();
+        if (text.length === 0) {
+            await row.client.replyStream(frame, streamId, WECOM_NON_TEXT_HINT, true);
+            return;
+        }
+        try {
+            await row.client.replyStream(frame, streamId, '正在处理…', false);
+            const reply = await this.runTurn(row.bot.room, text);
+            await row.client.replyStream(frame, streamId, reply.length > 0 ? reply : '（空回复）', true);
+        }
+        catch (error) {
+            const why = error instanceof Error ? error.message : String(error);
+            await row.client.replyStream(frame, streamId, `处理失败：${why}`, true);
+        }
+    }
+    async handleNonText(row, frame) {
+        const text = extractWecomText(frame);
+        if (text.length > 0) {
+            await this.handleText(row, frame);
+            return;
+        }
+        if (this.rememberMsgid(row, frame))
+            return;
+        await row.client.replyStream(frame, newStreamId(), WECOM_NON_TEXT_HINT, true);
+    }
+}

package/lib/wecom-store.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Accio-style WeCom AI bot bindings: one botId+secret per Harness room.
+ * Secrets stay in ~/.dsh/wecom-channels.json (mode 600), not compose env.
+ */
+export declare const WECOM_BINDABLE_ROOMS: readonly ["搞钱", "产品", "运营", "人事助理", "财务助理", "法务助理", "设计", "实验室"];
+export type WecomBindableRoom = (typeof WECOM_BINDABLE_ROOMS)[number];
+export interface WecomBotRecord {
+    room: string;
+    botId: string;
+    secret: string;
+}
+export interface WecomBotPublic {
+    room: string;
+    botId: string;
+    secretConfigured: boolean;
+}
+export interface WecomChannelFile {
+    bots: WecomBotRecord[];
+}
+export declare const WECOM_SECRET_MASK = "********";
+export declare function wecomChannelsPath(home?: string): string;
+export declare function isBindableRoom(room: string): boolean;
+export declare function loadWecomChannels(home?: string): WecomChannelFile;
+export declare function publicWecomBots(file: WecomChannelFile): WecomBotPublic[];
+export declare function applyWecomBotPatch(current: WecomChannelFile, incoming: unknown): WecomChannelFile;
+export declare function saveWecomChannels(file: WecomChannelFile, home?: string): void;

package/lib/wecom-store.js

@@ -0,0 +1,98 @@
+/**
+ * Accio-style WeCom AI bot bindings: one botId+secret per Harness room.
+ * Secrets stay in ~/.dsh/wecom-channels.json (mode 600), not compose env.
+ */
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { dshHome } from '@rezti/dsh-rez-sso';
+export const WECOM_BINDABLE_ROOMS = [
+    '搞钱',
+    '产品',
+    '运营',
+    '人事助理',
+    '财务助理',
+    '法务助理',
+    '设计',
+    '实验室',
+];
+export const WECOM_SECRET_MASK = '********';
+export function wecomChannelsPath(home = dshHome()) {
+    return join(home, 'wecom-channels.json');
+}
+export function isBindableRoom(room) {
+    return WECOM_BINDABLE_ROOMS.includes(room);
+}
+export function loadWecomChannels(home = dshHome()) {
+    const file = wecomChannelsPath(home);
+    if (!existsSync(file))
+        return { bots: [] };
+    try {
+        const parsed = JSON.parse(readFileSync(file, 'utf8'));
+        if (typeof parsed !== 'object' || parsed === null)
+            return { bots: [] };
+        const bots = parsed.bots;
+        if (!Array.isArray(bots))
+            return { bots: [] };
+        const out = [];
+        for (const row of bots) {
+            if (typeof row !== 'object' || row === null)
+                continue;
+            const rec = row;
+            const room = typeof rec.room === 'string' ? rec.room.trim() : '';
+            const botId = typeof rec.botId === 'string' ? rec.botId.trim() : '';
+            const secret = typeof rec.secret === 'string' ? rec.secret.trim() : '';
+            if (room.length === 0 || botId.length === 0 || secret.length === 0)
+                continue;
+            if (!isBindableRoom(room))
+                continue;
+            out.push({ room, botId, secret });
+        }
+        return { bots: out };
+    }
+    catch {
+        return { bots: [] };
+    }
+}
+export function publicWecomBots(file) {
+    return file.bots.map((bot) => ({
+        room: bot.room,
+        botId: bot.botId,
+        secretConfigured: bot.secret.length > 0,
+    }));
+}
+export function applyWecomBotPatch(current, incoming) {
+    if (!Array.isArray(incoming))
+        return current;
+    const next = [];
+    const seen = new Set();
+    for (const row of incoming) {
+        if (typeof row !== 'object' || row === null)
+            continue;
+        const rec = row;
+        const room = typeof rec.room === 'string' ? rec.room.trim() : '';
+        const botId = typeof rec.botId === 'string' ? rec.botId.trim() : '';
+        if (room.length === 0 || botId.length === 0 || !isBindableRoom(room))
+            continue;
+        if (seen.has(room))
+            continue;
+        seen.add(room);
+        const secretRaw = typeof rec.secret === 'string' ? rec.secret.trim() : '';
+        const previous = current.bots.find((bot) => bot.room === room);
+        const secret = secretRaw.length > 0 && secretRaw !== WECOM_SECRET_MASK
+            ? secretRaw
+            : (previous?.secret ?? '');
+        if (secret.length === 0)
+            continue;
+        next.push({ room, botId, secret });
+    }
+    return { bots: next };
+}
+export function saveWecomChannels(file, home = dshHome()) {
+    const path = wecomChannelsPath(home);
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, JSON.stringify({ bots: file.bots }, null, 2) + '\n', { mode: 0o600 });
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch { /* Windows 无 POSIX mode */ }
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rezti/dsh-rez-wechat",
-  "version": "0.1.14",
-  "description": "ReZ-TI WeChat/WeCom bridges. Personal WeChat is QClaw/ClawBot scan-and-chat via dsh-wechat-bridge; WeCom group send uses wecom-mcp.",
+  "version": "0.1.15",
+  "description": "ReZ-TI WeChat/WeCom bridges. Personal WeChat is QClaw/ClawBot scan-and-chat via dsh-wechat-bridge; WeCom AI bots use the official @wecom/aibot-node-sdk (BotID + Secret) bound per Harness room.",
   "type": "module",
   "engines": {
     "node": "^22.19.0 || >=24.0.0"
@@ -27,8 +27,9 @@
   ],
   "license": "Apache-2.0",
   "dependencies": {
+    "@wecom/aibot-node-sdk": "^1.0.7",
     "qrcode": "^1.5.4",
-    "@rezti/dsh-rez-sso": "0.1.9"
+    "@rezti/dsh-rez-sso": "0.1.14"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",