@xmanrui/dsh-im 4.1.0 → 4.2.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmanrui/dsh-im",
-  "version": "4.1.0",
+  "version": "4.2.0",
   "description": "把九种 IM 机器人和公网 AI Office 接入本机 DeepSeek Harness。 Connect nine IM channels and a public AI Office to a local DeepSeek Harness.",
   "keywords": [
     "deepseek-harness",

package/plugin-src/client/channels/feishu/index.js

@@ -305,7 +305,7 @@ function QrPane({ provision, now, onRefresh, onCancel, busy }) {
               ? "使用飞书确认群消息权限"
               : "使用飞书扫码创建机器人"),
         h("p", null, repairing
-          ? "扫码会更新现有飞书应用，最多增量补充卡片按钮回调、读取用户消息内图片或文件所需的 im:message:readonly（飞书显示为“获取单聊、群组消息”），以及上传机器人图片或文件所需的 im:resource；不会创建新应用。确认页只显示当前缺少项，完成后此机器人会短暂重连，其他机器人不受影响。"
+          ? "扫码会更新现有飞书应用，增量补充当前缺少的卡片按钮回调、读取用户消息内图片或文件所需的 im:message:readonly（飞书显示为“获取单聊、群组消息”）、上传机器人图片或文件所需的 im:resource，以及原生命令面板所需的 application:app_slash_command:read / write；不会创建新应用。确认页只显示当前缺少项，完成后此机器人会短暂重连，其他机器人不受影响。"
           : grantingGroupMessages
             ? "扫码会更新现有飞书应用，只增量开通“获取群组中所有消息”权限；不会创建新应用。确认后会自动启用“响应所有群消息”，其他机器人不受影响。"
             : "扫码只会新增一个机器人，已接入的机器人会继续正常收发消息。"),
@@ -666,7 +666,7 @@ export function BotCard({
                 role: "tooltip",
               },
                 h("strong", null, "补全范围"),
-                h("span", null, "最多增量添加卡片回调 card.action.trigger、读取消息内图片或文件所需的 im:message:readonly（飞书显示为“获取单聊、群组消息”），以及上传机器人图片或文件所需的 im:resource；确认页只显示当前缺少项，不会创建新应用。"))),
+                h("span", null, "增量添加当前缺少的卡片回调 card.action.trigger、读取消息内图片或文件所需的 im:message:readonly（飞书显示为“获取单聊、群组消息”）、上传机器人图片或文件所需的 im:resource，以及原生命令面板所需的 application:app_slash_command:read / write；确认页只显示当前缺少项，不会创建新应用。"))),
             h(Button, {
               className: "dim-cardAction", kind: "danger", onClick: onRequestRemove,
               disabled: Boolean(busy), ref: removeButtonRef,

package/plugin-src/client/i18n.js

@@ -357,7 +357,7 @@ const EN = Object.freeze({
   '权限配置已提交，正在启用全部消息模式并重连此机器人；此阶段无法取消，其他机器人不会中断。': 'The permission update was submitted. Enabling all-message mode and reconnecting this bot. This stage cannot be cancelled; other bots will not be interrupted.',
   '正在为现有飞书应用申请群消息权限二维码，请稍候。': 'Requesting a group-message permission QR code for the existing Feishu app…',
   '群消息权限没有开通完成': 'Group-message permission was not granted',
-  '扫码会更新现有飞书应用，最多增量补充卡片按钮回调、读取用户消息内图片或文件所需的 im:message:readonly（飞书显示为“获取单聊、群组消息”），以及上传机器人图片或文件所需的 im:resource；不会创建新应用。确认页只显示当前缺少项，完成后此机器人会短暂重连，其他机器人不受影响。': 'Scanning updates the existing Feishu app with up to three missing items: the card-button callback, im:message:readonly for reading images or files in user messages (shown by Feishu as “Read direct and group messages”), and im:resource for uploading images or files sent by the bot. It does not create a new app. The confirmation page shows only missing items; this bot reconnects briefly afterward, while other bots are unaffected.',
+  '扫码会更新现有飞书应用，增量补充当前缺少的卡片按钮回调、读取用户消息内图片或文件所需的 im:message:readonly（飞书显示为“获取单聊、群组消息”）、上传机器人图片或文件所需的 im:resource，以及原生命令面板所需的 application:app_slash_command:read / write；不会创建新应用。确认页只显示当前缺少项，完成后此机器人会短暂重连，其他机器人不受影响。': 'Scanning updates the existing Feishu app with the missing card-button callback, im:message:readonly for reading images or files in user messages (shown by Feishu as “Read direct and group messages”), im:resource for uploading images or files sent by the bot, and application:app_slash_command:read / write for the native command panel. It does not create a new app. The confirmation page shows only missing items; this bot reconnects briefly afterward, while other bots are unaffected.',
   '核对现有应用名称，并确认只新增当前缺少的上述配置': 'Review the existing app name and confirm that only the missing items described above are added',
   '保持本页打开，等待权限与回调补全完成': 'Keep this page open until permissions and the callback are complete',
   '取消补全': 'Cancel setup',
@@ -368,7 +368,7 @@ const EN = Object.freeze({
   '权限与回调没有补全完成': 'Permissions and callback setup did not finish',
   '补全权限': 'Complete permissions',
   '补全范围': 'Completion scope',
-  '最多增量添加卡片回调 card.action.trigger、读取消息内图片或文件所需的 im:message:readonly（飞书显示为“获取单聊、群组消息”），以及上传机器人图片或文件所需的 im:resource；确认页只显示当前缺少项，不会创建新应用。': 'Adds up to the missing card callback card.action.trigger, im:message:readonly for reading images or files in messages (shown by Feishu as “Read direct and group messages”), and im:resource for uploading images or files sent by the bot. The confirmation page shows only missing items; no new app is created.',
+  '增量添加当前缺少的卡片回调 card.action.trigger、读取消息内图片或文件所需的 im:message:readonly（飞书显示为“获取单聊、群组消息”）、上传机器人图片或文件所需的 im:resource，以及原生命令面板所需的 application:app_slash_command:read / write；确认页只显示当前缺少项，不会创建新应用。': 'Adds the missing card callback card.action.trigger, im:message:readonly for reading images or files in messages (shown by Feishu as “Read direct and group messages”), im:resource for uploading images or files sent by the bot, and application:app_slash_command:read / write for the native command panel. The confirmation page shows only missing items; no new app is created.',
   '等待扫码…': 'Waiting for scan…',
   '飞书服务返回了不匹配的权限补全二维码': 'Feishu returned a permission-completion QR code for a different bot',
   '飞书服务返回了不匹配的群消息权限二维码': 'Feishu returned a group-message permission QR code for a different bot',

package/plugin-src/host/channels/feishu/production.mjs

@@ -172,6 +172,7 @@ export async function createProductionController(ctx, config = {}, internals = {
         state: workspaceScope.state,
         contextEnhancement: { botId: id, getSettings: () => workspaces.contextEnhancementFor(id) },
         replyTimeoutMs: config.replyTimeoutMs ?? 600_000,
+        slashCommands: config.slashCommands !== false,
         ...(wsAgent ? { wsAgent } : {}),
         logger: {
           error: (...args) => logger.error?.(`[${botId ?? botConfig.id}]`, ...args),

package/src/channels/feishu/bridge.mjs

@@ -1399,7 +1399,7 @@ export class FeishuHarnessBridge {
       : t('链接约 {minutes} 分钟后过期', { minutes: Math.max(1, Math.ceil(remaining / 60)) });
     await this.#send(chatId, [
       restarted ? t('旧授权链接已作废，已生成新的修复链接。') : t('🔧 准备补全权限与回调。'),
-      t('本次最多增量添加三项：卡片回调 card.action.trigger；飞书显示为“获取单聊、群组消息”的租户权限 im:message:readonly（用于读取用户消息中的图片或文件）；以及 im:resource（用于上传机器人发送的图片或文件）。确认页只会显示当前缺少的项；若出现上述范围之外的配置，请取消。'),
+      t('本次会增量添加当前缺少项：卡片回调 card.action.trigger；飞书显示为“获取单聊、群组消息”的租户权限 im:message:readonly（用于读取用户消息中的图片或文件）；im:resource（用于上传机器人发送的图片或文件）；以及原生命令面板所需的 application:app_slash_command:read / write。确认页只会显示当前缺少的项；若出现上述范围之外的配置，请取消。'),
       '',
       t('当前设备直接打开：'),
       url,

package/src/channels/feishu/feishu-runtime.mjs

@@ -3,6 +3,10 @@ import { FeishuHarnessBridge } from './bridge.mjs';
 import { cardActionProbeCard } from './feishu-cards.mjs';
 import { VerifiedFeishuChannel } from './feishu-channel.mjs';
 import { normalizeFeishuGroupResponseMode } from './group-response-mode.mjs';
+import {
+  registerSlashCommands,
+  SLASH_COMMAND_MANIFEST,
+} from './slash-command-registry.mjs';
 import {
   connectionTestTargetUnavailable,
   sendRememberedConnectionTest,
@@ -84,6 +88,11 @@ export function createBridgeStatus({ allowedSenderCount = 1 } = {}) {
     agentPreset: 'standard',
     authorizationMode: 'sender-open-id-allowlist',
     allowedSenderCount,
+    slashCommandRegistration: 'idle',
+    slashCommandsRegistered: 0,
+    slashCommandsExisting: 0,
+    slashCommandsFailed: 0,
+    slashCommandsError: null,
   };
 }
 
@@ -119,6 +128,7 @@ export class FeishuRuntime {
   #abortController = null;
   #pendingCardActionProbes = new Map();
   #status;
+  #slashCommands = true;
 
   constructor({
     lark,
@@ -137,6 +147,7 @@ export class FeishuRuntime {
     replyTimeoutMs = 600000,
     connectTimeoutMs = 15000,
     requestTimeoutMs = DEFAULT_REQUEST_TIMEOUT_MS,
+    slashCommands = true,
     wsAgent,
     logger = console,
   }) {
@@ -169,6 +180,7 @@ export class FeishuRuntime {
     this.#replyTimeoutMs = replyTimeoutMs;
     this.#connectTimeoutMs = connectTimeoutMs;
     this.#requestTimeoutMs = requestTimeoutMs;
+    this.#slashCommands = Boolean(slashCommands);
     this.#wsAgent = wsAgent;
     this.#logger = logger;
     this.#status = createBridgeStatus({ allowedSenderCount: normalizedOwners.length });
@@ -368,6 +380,12 @@ export class FeishuRuntime {
         });
       await Promise.all([wsStarted, ready]);
       assertCurrentStart();
+      // Register the native Slash Command panel best-effort and asynchronously
+      // so it never blocks the long-connection startup. The panel is only a
+      // client-side convenience; failure here must not take the bot down.
+      if (this.#slashCommands && httpInstance) {
+        void this.#registerSlashCommands(httpInstance, isCurrentStart, signal);
+      }
       return this.status;
     } catch (error) {
       // stop() owns the terminal idle state for an explicitly aborted start.
@@ -598,6 +616,44 @@ export class FeishuRuntime {
     return { sent: true };
   }
 
+  async #registerSlashCommands(httpInstance, isCurrentStart, signal) {
+    this.#status.slashCommandRegistration = 'registering';
+    this.#status.slashCommandsError = null;
+    try {
+      const result = await registerSlashCommands({
+        appId: this.#appId,
+        appSecret: this.#appSecret,
+        domain: this.#domain,
+        httpInstance,
+        signal,
+        manifest: SLASH_COMMAND_MANIFEST,
+      });
+      if (!isCurrentStart()) return;
+      this.#status.slashCommandRegistration = 'done';
+      this.#status.slashCommandsRegistered = result.created.length;
+      this.#status.slashCommandsExisting = result.existing.length;
+      this.#status.slashCommandsFailed = result.failed.length;
+      this.#status.slashCommandsError = result.failed.length > 0
+        ? result.failed.map((f) => `/${f.command}: ${f.error?.message ?? String(f.error)}`).join('; ')
+        : null;
+      if (result.created.length > 0) {
+        this.#logger.info?.(`[dsh-feishu] registered ${result.created.length} slash command(s)`);
+      }
+      if (result.failed.length > 0) {
+        this.#logger.warn?.(
+          `[dsh-feishu] ${result.failed.length} slash command(s) failed to register: ${this.#status.slashCommandsError}`,
+        );
+      }
+    } catch (error) {
+      if (!isCurrentStart()) return;
+      this.#status.slashCommandRegistration = 'failed';
+      this.#status.slashCommandsError = error?.message ?? String(error);
+      this.#logger.warn?.(
+        `[dsh-feishu] slash command registration skipped: ${this.#status.slashCommandsError}`,
+      );
+    }
+  }
+
   stop(options = {}) {
     if (this.#stopping) return this.#stopping;
 
@@ -642,6 +698,7 @@ export class FeishuRuntime {
     if (bridge) await bridge.waitForIdle();
     this.#client = null;
     this.#status.feishuLongConnectionState = preserveError ? 'failed' : 'idle';
+    this.#status.slashCommandRegistration = 'idle';
     this.#status.lastError = error;
     return this.status;
   }

package/src/channels/feishu/plugin-controller.mjs

@@ -1,4 +1,5 @@
 import { RegistrationManager } from './registration-manager.mjs';
+import { SLASH_COMMAND_TENANT_SCOPES } from './slash-command-registry.mjs';
 
 export const FEISHU_SECRET_REF = 'DSH_FEISHU_APP_SECRET';
 
@@ -11,6 +12,7 @@ export const REQUIRED_TENANT_SCOPES = Object.freeze([
   'im:message:recall',
   'im:resource',
   'cardkit:card:write',
+  ...SLASH_COMMAND_TENANT_SCOPES,
 ]);
 
 function safeConnectionStatus(runtime) {

package/src/channels/feishu/repair-manager.mjs

@@ -1,4 +1,5 @@
 import { RegistrationManager } from './registration-manager.mjs';
+import { SLASH_COMMAND_TENANT_SCOPES } from './slash-command-registry.mjs';
 
 export const CARD_ACTION_CALLBACK = 'card.action.trigger';
 export const FEISHU_MESSAGE_READ_SCOPE = 'im:message:readonly';
@@ -74,9 +75,10 @@ export function assertCallbackRepairUrl(value, expectedAppId, domain = 'feishu')
  * One targeted update attempt for an existing Feishu app.  It intentionally
  * shares RegistrationManager's polling/state implementation while fixing the
  * update manifest in one place so callers can add only the card callback, the
- * message-read scope needed to download user-sent media, and the resource
- * scope needed to upload bot-sent images/files, without adding unrelated
- * scopes, events, presets, or createOnly.
+ * message-read scope needed to download user-sent media, the resource scope
+ * needed to upload bot-sent images/files, and the Slash Command scopes needed
+ * for the native command panel, without adding unrelated scopes, events,
+ * presets, or createOnly.
  */
 export class CallbackRepairManager {
   #manager;
@@ -110,7 +112,13 @@ export class CallbackRepairManager {
       appId: this.#appId,
       addons: {
         preset: false,
-        scopes: { tenant: [FEISHU_MESSAGE_READ_SCOPE, FEISHU_RESOURCE_SCOPE] },
+        scopes: {
+          tenant: [
+            FEISHU_MESSAGE_READ_SCOPE,
+            FEISHU_RESOURCE_SCOPE,
+            ...SLASH_COMMAND_TENANT_SCOPES,
+          ],
+        },
         callbacks: { items: [CARD_ACTION_CALLBACK] },
       },
     });

package/src/channels/feishu/slash-command-registry.mjs

@@ -0,0 +1,259 @@
+/**
+ * Feishu native Slash Command registration for the dsh-im Feishu channel.
+ *
+ * The Feishu client shows a "/" command panel in the chat input box. The
+ * command list is stored server-side per bot application and is NOT pushed
+ * by dsh/Harness. dsh-im holds its own static command manifest and calls the
+ * Feishu OpenAPI to register it, so users can discover commands by typing "/".
+ *
+ * Reference (official):
+ *   https://open.feishu.cn/document/mcp_open_tools/agent-best-practices/agent-supports-slash-commands
+ *
+ * The registered command panel is only a client-side convenience: when a user
+ * taps a command, Feishu sends it to the bot as an ordinary text message via
+ * im.message.receive_v1. The bridge's #handle() command matcher therefore
+ * needs no changes as long as every registered command name matches the
+ * existing "/xxx" text commands.
+ */
+
+const SLASH_ENDPOINT = '/open-apis/application/v7/app_slash_commands';
+const MISSING_PERMISSION_CODES = new Set(['99991640', '99991672']);
+
+export const SLASH_COMMAND_TENANT_SCOPES = Object.freeze([
+  'application:app_slash_command:read',
+  'application:app_slash_command:write',
+]);
+
+// Icon keys are the documented values in the Feishu Slash Command doc.
+const DEFAULT_ICON = 'ai-agent_outlined';
+
+/**
+ * The dsh-im Feishu command manifest. Every entry's `command` is registered
+ * WITHOUT the leading slash; Feishu displays it as "/<command>" in the panel
+ * and sends "/<command>" back as text, which matches the bridge's regexes.
+ *
+ * Descriptions should stay short and match what the command actually does in
+ * bridge.mjs / the shared command modules.
+ */
+export const SLASH_COMMAND_MANIFEST = Object.freeze([
+  { command: 'menu', icon: 'skill_outlined', default: '打开功能菜单', en_us: 'Open the feature menu' },
+  { command: 'new', icon: 'ai-deepthink_outlined', default: '开启全新会话', en_us: 'Start a fresh session' },
+  { command: 'help', icon: 'promptword_outlined', default: '查看帮助', en_us: 'Show help' },
+  { command: 'status', icon: 'ai-functions_outlined', default: '查看机器人状态', en_us: 'Show bot status' },
+  { command: 'compact', icon: 'ai-block_outlined', default: '压缩当前会话上下文', en_us: 'Compact the current session' },
+  { command: 'sessionlist', icon: 'chat-ai_outlined', default: '列出会话', en_us: 'List sessions' },
+  { command: 'workspacelist', icon: 'folder_outlined', default: '列出工作区', en_us: 'List workspaces' },
+  { command: 'watch', icon: 'flag_outlined', default: '关注一个会话', en_us: 'Watch a session' },
+  { command: 'unwatch', icon: 'clear_outlined', default: '取消关注会话', en_us: 'Unwatch a session' },
+  { command: 'watchlist', icon: 'flag_outlined', default: '查看关注列表', en_us: 'List watched sessions' },
+  { command: 'archived', icon: 'folder_outlined', default: '设置归档会话显隐（on/off）', en_us: 'Show or hide archived sessions (on/off)' },
+]);
+
+// Commands that require a parameter are registered too, so the user can type
+// "/watch <session ID>" from the panel. A leading placeholder hint is not part of
+// the registered name; Feishu only allows a plain command token.
+
+function endpointFor(domain, path) {
+  const origin = domain === 'lark' ? 'https://open.larksuite.com' : 'https://open.feishu.cn';
+  return new URL(path, origin);
+}
+
+function jsonResponse(body, operation) {
+  if (!body || typeof body !== 'object' || Array.isArray(body)) {
+    throw new Error(`${operation} returned a non-JSON response`);
+  }
+  if (body.code !== 0) {
+    const error = new Error(`${operation} failed: ${body.msg || `code ${body.code}`}`);
+    error.code = String(body.code);
+    error.msg = body.msg;
+    throw error;
+  }
+  return body;
+}
+
+function requestSignal(signal, timeoutMs) {
+  const timeout = AbortSignal.timeout(timeoutMs);
+  return signal ? AbortSignal.any([signal, timeout]) : timeout;
+}
+
+async function requestJson(httpInstance, options, operation) {
+  try {
+    return jsonResponse(await httpInstance.request(options), operation);
+  } catch (error) {
+    const body = error?.response?.data;
+    if (body && typeof body === 'object' && !Array.isArray(body)
+      && Object.hasOwn(body, 'code')) {
+      return jsonResponse(body, operation);
+    }
+    throw error;
+  }
+}
+
+/** Fetch a tenant_access_token for the app. */
+async function fetchTenantAccessToken({
+  appId, appSecret, domain, httpInstance, timeoutMs, signal,
+}) {
+  if (!appId || !appSecret) throw new Error('Feishu slash registration requires app credentials');
+  if (!httpInstance || typeof httpInstance.request !== 'function') {
+    throw new TypeError('Feishu slash registration requires an HTTP instance');
+  }
+  const body = await requestJson(httpInstance, {
+    method: 'POST',
+    url: endpointFor(domain, '/open-apis/auth/v3/tenant_access_token/internal').href,
+    headers: { 'content-type': 'application/json; charset=utf-8' },
+    data: { app_id: appId, app_secret: appSecret },
+    signal: requestSignal(signal, timeoutMs),
+    timeout: timeoutMs,
+  }, 'Feishu authentication');
+  if (!body.tenant_access_token) {
+    throw new Error('Feishu authentication returned no tenant access token');
+  }
+  return body.tenant_access_token;
+}
+
+async function listSlashCommandsWithToken({
+  tenantAccessToken, domain, httpInstance, timeoutMs, signal,
+}) {
+  const body = await requestJson(httpInstance, {
+    method: 'GET',
+    url: endpointFor(domain, SLASH_ENDPOINT).href,
+    headers: {
+      authorization: `Bearer ${tenantAccessToken}`,
+      'content-type': 'application/json; charset=utf-8',
+    },
+    signal: requestSignal(signal, timeoutMs),
+    timeout: timeoutMs,
+  }, 'Feishu slash command list');
+  return Array.isArray(body.data?.items) ? body.data.items : [];
+}
+
+/** List every slash command currently registered for the app. */
+export async function listSlashCommands({
+  appId, appSecret, domain = 'feishu', httpInstance, timeoutMs = 15000, signal,
+}) {
+  const tenantAccessToken = await fetchTenantAccessToken({
+    appId, appSecret, domain, httpInstance, timeoutMs, signal,
+  });
+  return listSlashCommandsWithToken({
+    tenantAccessToken, domain, httpInstance, timeoutMs, signal,
+  });
+}
+
+async function createSlashCommandWithToken({
+  tenantAccessToken, domain, httpInstance, timeoutMs, signal,
+  command, description, icon = DEFAULT_ICON,
+}) {
+  const data = { command };
+  if (description && (description.default_value || description.i18n)) {
+    data.description = description;
+  } else if (typeof description === 'string' && description.trim()) {
+    data.description = { default_value: description.trim() };
+  }
+  if (icon) data.description = { ...(data.description ?? {}), icon: { icon_key: icon } };
+  const body = await requestJson(httpInstance, {
+    method: 'POST',
+    url: endpointFor(domain, SLASH_ENDPOINT).href,
+    headers: {
+      authorization: `Bearer ${tenantAccessToken}`,
+      'content-type': 'application/json; charset=utf-8',
+    },
+    data,
+    signal: requestSignal(signal, timeoutMs),
+    timeout: timeoutMs,
+  }, `Feishu slash command create (/${command})`);
+  return body.data?.command_id ?? null;
+}
+
+/** Register a single slash command. Returns the server-assigned command_id. */
+export async function createSlashCommand({
+  appId, appSecret, domain = 'feishu', httpInstance, timeoutMs = 15000,
+  signal, command, description, icon = DEFAULT_ICON,
+}) {
+  const tenantAccessToken = await fetchTenantAccessToken({
+    appId, appSecret, domain, httpInstance, timeoutMs, signal,
+  });
+  return createSlashCommandWithToken({
+    tenantAccessToken, domain, httpInstance, timeoutMs, signal,
+    command, description, icon,
+  });
+}
+
+/** Delete a registered slash command by its server command_id. */
+export async function deleteSlashCommand({
+  appId, appSecret, domain = 'feishu', httpInstance, timeoutMs = 15000, signal, commandId,
+}) {
+  const tenantAccessToken = await fetchTenantAccessToken({
+    appId, appSecret, domain, httpInstance, timeoutMs, signal,
+  });
+  await requestJson(httpInstance, {
+    method: 'DELETE',
+    url: endpointFor(domain, `${SLASH_ENDPOINT}/${commandId}`).href,
+    headers: { authorization: `Bearer ${tenantAccessToken}` },
+    signal: requestSignal(signal, timeoutMs),
+    timeout: timeoutMs,
+  }, 'Feishu slash command delete');
+}
+
+/**
+ * Best-effort sync of the manifest into the app's registered slash commands.
+ * Creates any command in the manifest that is not yet registered and returns
+ * a structured report. This is idempotent (the API rejects duplicates with
+ * "command already exists", so we skip existing names).
+ *
+ * @returns {{ created: Array<{command,command_id}>, existing: string[], failed: Array<{command,error}> }}
+ */
+export async function registerSlashCommands({
+  appId, appSecret, domain = 'feishu', httpInstance, timeoutMs = 15000,
+  signal, manifest = SLASH_COMMAND_MANIFEST,
+}) {
+  const tenantAccessToken = await fetchTenantAccessToken({
+    appId, appSecret, domain, httpInstance, timeoutMs, signal,
+  });
+  const existing = new Set((await listSlashCommandsWithToken({
+    tenantAccessToken, domain, httpInstance, timeoutMs, signal,
+  }))
+    .map((item) => item.command));
+
+  const created = [];
+  const failed = [];
+  for (const entry of manifest) {
+    const command = String(entry.command ?? '').replace(/^\//, '');
+    if (!command) continue;
+    if (existing.has(command)) continue;
+    try {
+      const description = {
+        default_value: entry.default ?? entry.en_us ?? command,
+        i18n: {
+          zh_cn: entry.default ?? command,
+          en_us: entry.en_us ?? entry.default ?? command,
+        },
+      };
+      const commandId = await createSlashCommandWithToken({
+        tenantAccessToken, domain, httpInstance, timeoutMs, signal,
+        command, description, icon: entry.icon ?? DEFAULT_ICON,
+      });
+      created.push({ command, command_id: commandId });
+    } catch (error) {
+      // "command already exists" can race with concurrent runs; treat as existing.
+      if (error?.code === '40000000' && /already exists/i.test(error?.msg ?? '')) {
+        existing.add(command);
+        continue;
+      }
+      if (MISSING_PERMISSION_CODES.has(error?.code)
+        || /(?:lacks permission|access denied)/i.test(error?.msg ?? '')) {
+        // Missing app_slash_command:write permission; abort the batch.
+        failed.push({ command, error });
+        break;
+      }
+      failed.push({ command, error: error?.message ?? String(error) });
+    }
+  }
+
+  return {
+    created,
+    existing: [...existing].filter((c) => c !== null && c !== undefined),
+    failed,
+  };
+}
+
+export default registerSlashCommands;

package/src/channels/qq/qq-bridge.mjs

@@ -109,6 +109,15 @@ function conversationKey(message) {
   return `${message.kind}:${message.kind === 'group' ? message.groupOpenid : message.senderId}`;
 }
 
+function senderAllowed(message, ownerUserOpenid) {
+  // QR binding yields a C2C user_openid, while group events identify senders
+  // with a group-scoped member_openid. Treat group membership plus @mention as
+  // the access boundary, and keep the scanner restriction for private chats.
+  return message?.kind === 'group'
+    || ownerUserOpenid === '*'
+    || message?.senderId === ownerUserOpenid;
+}
+
 function safeText(message) {
   return typeof message?.content === 'string' ? message.content.trim() : '';
 }
@@ -442,7 +451,7 @@ export class QqHarnessBridge {
     }
     const pending = this.#pendingInteractions.get(key);
     const commandText = safeText(message);
-    const allowed = this.#ownerUserOpenid === '*' || sender === this.#ownerUserOpenid;
+    const allowed = senderAllowed(message, this.#ownerUserOpenid);
     const addressed = message.kind !== 'group'
       || message.rawEventType === 'GROUP_AT_MESSAGE_CREATE';
     const batchCommand = isBatchInputCommand(commandText);
@@ -569,7 +578,7 @@ export class QqHarnessBridge {
     alreadyRecorded = false,
     batchSubmission = null,
   } = {}) {
-    const allowed = this.#ownerUserOpenid === '*' || message.senderId === this.#ownerUserOpenid;
+    const allowed = senderAllowed(message, this.#ownerUserOpenid);
     const addressed = message.kind !== 'group'
       || message.rawEventType === 'GROUP_AT_MESSAGE_CREATE';
     const preparedMessage = allowed && addressed
@@ -721,7 +730,7 @@ export class QqHarnessBridge {
       await this.#state.markSeen(messageId);
       messageRecorded = true;
     };
-    if (this.#ownerUserOpenid !== '*' && sender !== this.#ownerUserOpenid) {
+    if (!senderAllowed(message, this.#ownerUserOpenid)) {
       this.#status.messagesRejected += 1;
       this.#status.lastRejectedAt = new Date().toISOString();
       return;

package/src/channels/shared/i18n-en/feishu.mjs

@@ -72,8 +72,8 @@ export default {
   '旧授权链接已作废，已生成新的修复链接。':
     'The previous authorization link was invalidated and a new repair link was generated.',
   '🔧 准备补全权限与回调。': '🔧 Preparing to complete permissions and the callback.',
-  '本次最多增量添加三项：卡片回调 card.action.trigger；飞书显示为“获取单聊、群组消息”的租户权限 im:message:readonly（用于读取用户消息中的图片或文件）；以及 im:resource（用于上传机器人发送的图片或文件）。确认页只会显示当前缺少的项；若出现上述范围之外的配置，请取消。':
-    'This may incrementally add up to three items: the card callback card.action.trigger; the tenant scope im:message:readonly, shown by Feishu as “Read direct and group messages” and used to read images or files in user messages; and im:resource, used to upload images or files sent by the bot. The confirmation page shows only items the app is currently missing; cancel if anything outside this scope appears.',
+  '本次会增量添加当前缺少项：卡片回调 card.action.trigger；飞书显示为“获取单聊、群组消息”的租户权限 im:message:readonly（用于读取用户消息中的图片或文件）；im:resource（用于上传机器人发送的图片或文件）；以及原生命令面板所需的 application:app_slash_command:read / write。确认页只会显示当前缺少的项；若出现上述范围之外的配置，请取消。':
+    'This incrementally adds the currently missing items: the card callback card.action.trigger; the tenant scope im:message:readonly, shown by Feishu as “Read direct and group messages” and used to read images or files in user messages; im:resource, used to upload images or files sent by the bot; and application:app_slash_command:read / write for the native command panel. The confirmation page shows only items the app is currently missing; cancel if anything outside this scope appears.',
   '当前设备直接打开：': 'Open directly on this device:',
   '若要用另一台设备扫码，发送 /repair qr。{expiry}。':
     'To scan with another device, send /repair qr. {expiry}.',