@xmanrui/dsh-im 4.32.0 → 4.34.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmanrui/dsh-im",
-  "version": "4.32.0",
+  "version": "4.34.0",
   "icon": "./assets/logo-plugin-message-link-gradient.webp",
   "description": "把微信、飞书、企微、钉钉、QQ、Telegram、WhatsApp、Slack、Discord、Matrix接入DSH。 Connect Telegram, WhatsApp, Slack, Discord, Matrix, WeChat, Feishu, WeCom, DingTalk, and QQ to DSH.",
   "keywords": [
@@ -26,76 +26,6 @@
     "ai-office"
   ],
   "author": "xmanrui (https://github.com/xmanrui)",
-  "contributors": [
-    {
-      "name": "C3H3-AI",
-      "url": "https://github.com/C3H3-AI"
-    },
-    {
-      "name": "divingleee",
-      "url": "https://github.com/divingleee"
-    },
-    {
-      "name": "Chan-0312",
-      "url": "https://github.com/Chan-0312"
-    },
-    {
-      "name": "BuvkB",
-      "url": "https://github.com/BuvkB"
-    },
-    {
-      "name": "masucc",
-      "url": "https://github.com/masucc"
-    },
-    {
-      "name": "cherryFloris",
-      "url": "https://github.com/cherryFloris"
-    },
-    {
-      "name": "geekyfoxlab",
-      "url": "https://github.com/geekyfoxlab"
-    },
-    {
-      "name": "grloper",
-      "url": "https://github.com/grloper"
-    },
-    {
-      "name": "baijian",
-      "url": "https://github.com/baijian"
-    },
-    {
-      "name": "lyzhu86",
-      "url": "https://github.com/lyzhu86"
-    },
-    {
-      "name": "Librazy",
-      "url": "https://github.com/Librazy"
-    },
-    {
-      "name": "Johnslee1207",
-      "url": "https://github.com/johnslee1207-commits"
-    },
-    {
-      "name": "Dong09",
-      "url": "https://github.com/Dong09"
-    },
-    {
-      "name": "wings1848",
-      "url": "https://github.com/wings1848"
-    },
-    {
-      "name": "Zhe (Phil) Yang",
-      "url": "https://github.com/yangzhe1991"
-    },
-    {
-      "name": "Biertolovisk",
-      "url": "https://github.com/rosalynthompson32-a11y"
-    },
-    {
-      "name": "Tianjun Cai",
-      "url": "https://github.com/Pegasus02"
-    }
-  ],
   "license": "MIT",
   "type": "module",
   "repository": {

package/plugin-src/host/delivery-adapter.mjs

@@ -233,6 +233,14 @@ export function createDeliveryAdapter({ channel, workspaces, coreController, sta
   }
   return Object.freeze({
     channel,
+    describeAccount: (botId) => {
+      if (typeof coreController.describeDeliveryAccount !== 'function') {
+        const error = new Error('Verified account capability unavailable');
+        error.code = 'capability-unavailable';
+        throw error;
+      }
+      return coreController.describeDeliveryAccount(botId);
+    },
     ownsBot: (botId) => workspaces.has(botId),
     listBots: () => workspaces.listBotIds(),
     async listTargets(botId) {

package/plugin-src/host/delivery-service.mjs

@@ -1,3 +1,4 @@
+import { createHash } from 'node:crypto';
 import { normalizeDeliveryTarget } from './delivery-adapter.mjs';
 
 const BOT_ID_PATTERN = /^[A-Za-z0-9_-]{1,128}$/;
@@ -18,6 +19,10 @@ const ADAPTER_METHODS = Object.freeze([
 
 const DELIVERY_ERROR_CODES = new Set([
   'bad-request',
+  'account-unverified',
+  'account-changed',
+  'target-changed',
+  'capability-unavailable',
   'unknown-bot',
   'unknown-target',
   'target-conflict',
@@ -290,6 +295,63 @@ export class DeliveryService {
     }
   }
 
+  #assertRegistered(registration) {
+    if (this.#adapters.get(registration.adapter.channel) !== registration) {
+      throw deliveryError('capability-unavailable');
+    }
+  }
+
+  async describeBot(botId) {
+    const id = botIdOf(botId);
+    const registration = await this.#checkedRegistrationFor(id);
+    const { adapter } = registration;
+    if (typeof adapter.describeAccount !== 'function') throw deliveryError('capability-unavailable');
+    this.#assertRegistered(registration);
+    try {
+      const account = await adapter.describeAccount(id);
+      this.#assertRegistered(registration);
+      return account;
+    } catch (error) { throw publicOperationError(error); }
+  }
+
+  async sendChecked(botId, targetId, text, { expectedFingerprint, expectedTargetDigest, signal, format = 'plain' } = {}) {
+    const id = botIdOf(botId);
+    const key = targetIdOf(targetId);
+    if (typeof text !== 'string' || !text.trim() || !['plain', 'markdown'].includes(format)
+      || !/^[a-f0-9]{64}$/.test(expectedFingerprint ?? '') || !/^[a-f0-9]{64}$/.test(expectedTargetDigest ?? '')) {
+      throw deliveryError('bad-request');
+    }
+    cancellation(signal);
+    const registration = await this.#checkedRegistrationFor(id);
+    const { adapter } = registration;
+    if (typeof adapter.describeAccount !== 'function') throw deliveryError('capability-unavailable');
+    this.#assertRegistered(registration);
+    try {
+      const candidates = await adapter.listTargets(id);
+      const saved = candidates.find((target) => target?.targetId === key);
+      if (!saved) throw deliveryError('unknown-target');
+      const target = normalizeDeliveryTarget(adapter.channel, {
+        targetId: saved.targetId, kind: saved.kind, route: structuredClone(saved.route),
+      });
+      const digest = createHash('sha256').update(JSON.stringify({ kind: target.kind,
+        route: Object.fromEntries(Object.entries(target.route).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)) })).digest('hex');
+      if (digest !== expectedTargetDigest) throw deliveryError('target-changed');
+      const account = await adapter.describeAccount(id);
+      if (account?.version !== 1 || !account.capabilities?.includes('proactive-text-checked')) {
+        throw deliveryError('capability-unavailable');
+      }
+      if (account.account?.fingerprint !== expectedFingerprint) throw deliveryError('account-changed');
+      const beforeSend = () => {
+        cancellation(signal);
+        this.#assertRegistered(registration);
+      };
+      beforeSend();
+      await adapter.sendText(id, target, text, { signal, expectedFingerprint, beforeSend,
+        ...(format === 'markdown' ? { format } : {}) });
+      return { sent: true };
+    } catch (error) { throw publicOperationError(error); }
+  }
+
   async send(botId, targetIdOrDraft, text, { signal, format = 'plain' } = {}) {
     const id = botIdOf(botId);
     const targetKey = typeof targetIdOrDraft === 'string'
@@ -328,6 +390,19 @@ export class DeliveryService {
     }
   }
 
+  async #checkedRegistrationFor(botId) {
+    for (const registration of this.#adapters.values()) {
+      let ownsBot;
+      try { ownsBot = await registration.adapter.ownsBot(botId); }
+      catch (error) { throw publicOperationError(error); }
+      if (ownsBot) {
+        this.#assertRegistered(registration);
+        return registration;
+      }
+    }
+    throw deliveryError('unknown-bot', 'Unknown bot');
+  }
+
   async #adapterFor(botId) {
     for (const { adapter } of this.#adapters.values()) {
       let ownsBot;

package/plugin-src/host/host-language.mjs

@@ -125,33 +125,33 @@ export function installHostLanguage(ctx, config = {}, internals = {}) {
     config: config.language ?? process.env.DSH_IM_LANGUAGE,
     logger,
   });
-  // Read an already-attached settings service synchronously: channels start
-  // inside the same activation, and waiting for the injection callback would
-  // let the first bot register its command menu in the previous language and
-  // then need a second push. The injection below keeps it live afterwards and
-  // covers a provider that attaches later.
-  controller.observeSettings(
-    () => ctx?.settings?.get?.(DSH_LOCALE_NAMESPACE)?.[DSH_LOCALE_PREFERENCE_FIELD],
-  );
-  const ready = Promise.resolve()
+  // Only the injected context may access settings. Waiting for its current
+  // lifecycle work does not wait for an absent provider to arrive.
+  let settingsBinding;
+  const readPreference = (settings) => typeof settings?.describe === 'function'
+    ? settings.describe().find((row) => row.ns === DSH_LOCALE_NAMESPACE)
+      ?.value?.[DSH_LOCALE_PREFERENCE_FIELD]
+    : settings?.get?.(DSH_LOCALE_NAMESPACE)?.[DSH_LOCALE_PREFERENCE_FIELD];
+  if (typeof ctx?.inject === 'function') {
+    settingsBinding = ctx.inject(['settings'], (settingsCtx) => {
+      controller.observeSettings(() => readPreference(settingsCtx.settings));
+      for (const event of ['settings/updated', 'settings/document-updated']) {
+        settingsCtx.on(event, (namespace) => {
+          if (namespace === DSH_LOCALE_NAMESPACE) controller.apply();
+        });
+      }
+      // Do not retain a reader bound to a withdrawn service/context.
+      return () => { controller.observeSettings(); };
+    });
+  }
+  const ready = Promise.resolve(settingsBinding)
     .then(() => store.load?.())
     .then(() => controller.apply(), (error) => {
       logger?.error?.(
-        '[dsh-im] could not read the mirrored DSH interface language; falling back to Chinese',
+        '[dsh-im] could not initialize the DSH interface language; falling back to the available language',
         error,
       );
       return controller.snapshot();
     });
-  if (typeof ctx?.inject === 'function') {
-    ctx.inject(['settings'], (settingsCtx) => {
-      controller.observeSettings(
-        () => settingsCtx.settings?.get?.(DSH_LOCALE_NAMESPACE)?.[DSH_LOCALE_PREFERENCE_FIELD],
-      );
-      settingsCtx.on('settings/updated', (namespace) => {
-        if (namespace !== DSH_LOCALE_NAMESPACE) return;
-        controller.apply();
-      });
-    });
-  }
   return Object.freeze({ ...controller, ready });
 }

package/plugin-src/host/index.mjs

@@ -91,6 +91,9 @@ export function createImHostPlugin(internals = {}) {
       const deliveryService = makeDeliveryService({ unavailableSessionSyncChannels });
       if (typeof ctx?.provide === 'function') {
         ctx.provide('dshIm', Object.freeze({
+          contractVersion: 1,
+          describeBot: (botId) => deliveryService.describeBot(botId),
+          sendChecked: (botId, targetId, text, options) => deliveryService.sendChecked(botId, targetId, text, options),
           send: (botId, targetId, text, options) => (
             deliveryService.send(botId, targetId, text, options)
           ),

package/plugin-src/host/modern-harness-api.mjs

@@ -240,6 +240,9 @@ class ModernHarnessApi {
       models: (request, signal) => rpcResult(request, () => this.#sessionModels(
         request.payload.sessionId, signal,
       )),
+      permissions: (request, signal) => rpcResult(request, () => this.#sessionPermissions(
+        request.payload.sessionId, signal,
+      )),
       selectModel: (request, signal) => rpcResult(request, () => this.#invoke(
         'session', 'selectModel', { request: request.payload }, signal,
       )),
@@ -414,6 +417,25 @@ class ModernHarnessApi {
     return this.#invoke('session', 'modelCatalog', {}, signal);
   }
 
+  async #sessionPermissions(sessionId, signal) {
+    const [catalog, projection] = await Promise.all([
+      this.#invoke('permissionPresets', 'catalog', {}, signal),
+      this.#invoke('session', 'projections', { request: { sessionId } }, signal),
+    ]);
+    if (projection === null) {
+      const error = new Error('Session not found');
+      error.failure = { code: 'session-not-found', message: error.message, details: {} };
+      throw error;
+    }
+    const currentValue = projection?.values?.permissions?.currentValue;
+    if (typeof currentValue !== 'string' || !Array.isArray(catalog?.options)) {
+      const error = new Error('Host permission presets are unavailable');
+      error.failure = { code: 'permissions-unavailable', message: error.message, details: {} };
+      throw error;
+    }
+    return { currentValue, options: catalog.options };
+  }
+
   async #sessionModels(sessionId, signal) {
     const [catalog, list] = await Promise.all([
       this.#modelCatalog(signal),

package/plugin-src/host/session-sync-coordinator.mjs

@@ -23,6 +23,7 @@ function sessionIdOf(session) {
 
 function userInputOrigin(scope, event) {
   const source = event?.data?.source;
+  if (source?.kind === 'schedule') return 'dsh';
   if (source?.kind !== 'user' || typeof source.rpcId !== 'string' || !source.rpcId) {
     return 'other';
   }
@@ -112,12 +113,9 @@ export function createSessionSyncCoordinator({ deliveryService, logger = console
       if (event.surfaceOp !== 'append') return;
       if (state.origin === 'unknown') state.origin = origin;
       if (state.origin !== 'dsh' || origin !== 'dsh') return;
-      // The user echo stays as plain text even when the mirror owns the
-      // turn: the card also quotes the question, but keeping the echo here
-      // guarantees recipients are established so a failed mirror can still
-      // fall back to the final-answer text delivery.
+      const scheduled = event.data?.source?.kind === 'schedule';
       const text = textFromHarnessContent(event.data?.content);
-      if (!text) return;
+      if (!text && !scheduled) return;
 
       let targets;
       try {
@@ -126,17 +124,16 @@ export function createSessionSyncCoordinator({ deliveryService, logger = console
         logFailure('lookup', null, error);
         targets = [];
       }
-      const successful = await deliver(
-        sessionId,
-        targets,
-        `${DSH_USER_PREFIX}${text}`,
-        'user delivery',
-      );
+      // Scheduled framing is internal: select its recipients without echoing it.
+      // Direct DSH input still requires a successful echo before the final answer.
+      const recipients = scheduled
+        ? new Map(targets.filter(validRecipient).map((target) => [recipientKey(target), target]))
+        : await deliver(sessionId, targets, `${DSH_USER_PREFIX}${text}`, 'user delivery');
       if (state.recipients === null) {
-        state.recipients = successful;
+        state.recipients = recipients;
       } else {
         for (const key of [...state.recipients.keys()]) {
-          if (!successful.has(key)) state.recipients.delete(key);
+          if (!recipients.has(key)) state.recipients.delete(key);
         }
       }
       return;

package/src/channels/feishu/bridge.mjs

@@ -1,3 +1,5 @@
+import { isPermissionCommand, runPermissionCommand } from '../shared/permission-command.mjs';
+import { randomUUID } from 'node:crypto';
 import QRCode from 'qrcode';
 import {
   conversationKey,
@@ -297,6 +299,7 @@ function printableText(value) {
 }
 
 function isFeishuLocalCommand(text, { hasImages = false, hasFiles = false } = {}) {
+  if (isPermissionCommand(text)) return true;
   if (hasImages || hasFiles || typeof text !== 'string') return false;
   const command = text.trim();
   return MENU_COMMAND.test(command)
@@ -1233,6 +1236,7 @@ export class FeishuHarnessBridge {
       return processing;
     }
     const commandRunner = isHistoryCommand(commandText) ? runHistoryCommand
+      : isPermissionCommand(commandText) ? runPermissionCommand
       : hasInboundFiles(commandMessage) ? null : isControlCommand(commandText)
       ? runControlCommand
       : (isModelCommand(commandText)
@@ -1689,6 +1693,15 @@ export class FeishuHarnessBridge {
       await this.#handleRepairCommand(event, commandText);
       return;
     }
+    if (isPermissionCommand(text)) {
+      const result = await runPermissionCommand(text, this.#harness, this.#state, key, {
+        signal: this.#signal, hasImages, hasFiles,
+      });
+      for (const reply of result.messages) {
+        await this.#send(event.message.chat_id, reply, { replyTo: event.message.message_id });
+      }
+      return;
+    }
     if (commandText === '/help') {
       await this.#send(event.message.chat_id, menuHelpText(), { replyTo: event.message.message_id });
       return;
@@ -2307,7 +2320,9 @@ export class FeishuHarnessBridge {
     // A used card is recent even if it was first created long ago.
     this.#cardKeys.delete(messageId);
     this.#cardKeys.set(messageId, route);
-    const entry = { ...route, messageId, selections: multiValues, operatorOpenId };
+    const newSessionActionId = nonEmptyString(actionValue.newSessionActionId);
+    if (resolvedAction === 'new' && (!route.menuContext || !newSessionActionId)) return Promise.resolve();
+    const entry = { ...route, messageId, selections: multiValues, operatorOpenId, newSessionActionId };
     const source = nonEmptyString(actionValue.source);
     const formText = nonEmptyString(formValue.steer_text);
     const eventId = nonEmptyString(event?.event_id)
@@ -2316,6 +2331,7 @@ export class FeishuHarnessBridge {
       ?? nonEmptyString(event?.header?.uuid);
     const identity = JSON.stringify({
       messageId,
+      newSessionActionId,
       resolvedAction,
       option,
       multiValues,
@@ -2517,6 +2533,8 @@ export class FeishuHarnessBridge {
     sessionLimit = null,
     selections = [],
     actor = null,
+    menuContext = null,
+    newSessionActionId = null,
   }) {
     // Confirmations triggered by a card interaction stay anchored to the
     // card's message so they land inside the same Feishu topic.
@@ -2666,6 +2684,10 @@ export class FeishuHarnessBridge {
       return;
     }
     if (action === 'new') {
+      if (menuContext || newSessionActionId) {
+        await this.#handleNewSessionMenu({ key, chatId, messageId, menuContext, newSessionActionId });
+        return;
+      }
       if (this.#queues.has(key) || this.#hasPendingInteraction(key)) {
         await reply(t('当前任务仍在运行，请先停止任务或等待任务完成后再开启新会话。'));
         return;
@@ -2799,6 +2821,61 @@ export class FeishuHarnessBridge {
     }
   }
 
+  async #handleNewSessionMenu({ key, chatId, messageId, menuContext, newSessionActionId }) {
+    // The generation belongs to this rendered menu, not the whole conversation.
+    // Check inside the queue as well as consuming the action before any await:
+    // distinct provider events and late callbacks must not clear a later session.
+    const action = menuContext?.newSessionAction;
+    if (!action || this.#cardKeys.get(messageId)?.menuContext !== menuContext
+      || action.id !== newSessionActionId
+      || !['idle', 'failed'].includes(action.status)) return;
+
+    action.status = 'processing';
+    delete action.message;
+    await this.#patchCardMessage(chatId, messageId, menuCard(menuContext));
+
+    const finish = async (status, message = null) => {
+      if (menuContext.currentSession && !this.#state.sessionFor(key)) {
+        menuContext.currentSession = null;
+        // The old menu may show a session-specific model. After unbinding,
+        // refresh the bot default just as opening a fresh menu would.
+        try {
+          menuContext.modelCatalog = await this.#harness.listModels({ signal: this.#cardDataSignal() });
+        } catch {
+          menuContext.modelCatalog = null;
+        }
+      }
+      menuContext.newSessionAction = {
+        id: status === 'failed' ? randomUUID() : action.id,
+        status,
+        message,
+      };
+      const patched = await this.#patchCardMessage(chatId, messageId, menuCard(menuContext));
+      if (!patched) {
+        await this.#send(chatId, t('新会话操作的卡片状态未能更新，请发送 /m 重新打开菜单。'), { replyTo: messageId })
+          .catch((error) => this.#logger.warn?.('[dsh-feishu] menu state notice failed:', error?.message));
+      }
+    };
+    // A task can start while Feishu is updating the processing card.
+    if (this.#queues.has(key) || this.#hasPendingInteraction(key)) {
+      const message = t('当前任务仍在运行，请先停止任务或等待任务完成后再开启新会话。');
+      await finish('failed', message);
+      await this.#send(chatId, message, { replyTo: messageId });
+      return;
+    }
+    try {
+      await this.#state.clearSession(key);
+    } catch (error) {
+      // A persistence error can still leave the in-memory binding cleared.
+      await finish('failed', safeErrorText(error));
+      throw error;
+    }
+    await finish('success');
+    // A receipt delivery failure must not turn a completed reset into a retry.
+    await this.#send(chatId, t('已开启全新 Harness 会话。'), { replyTo: messageId })
+      .catch((error) => this.#logger.warn?.('[dsh-feishu] new session receipt failed:', error?.message));
+  }
+
   #rememberMenu(key, menu) {
     if (this.#menus.size >= MAX_TRACKED_MENUS) {
       const oldest = this.#menus.keys().next().value;
@@ -3002,6 +3079,7 @@ export class FeishuHarnessBridge {
       key: options.key,
       chatId,
       conversationWorkspace: options.conversationWorkspace,
+      menuContext: options.menuContext ?? null,
       sessionWorkspace: typeof options.sessionWorkspace === 'string' && options.sessionWorkspace
         ? options.sessionWorkspace
         : null,
@@ -3213,14 +3291,16 @@ export class FeishuHarnessBridge {
     }
     const archiveVisible = this.#state?.includesArchivedSessions?.() ?? false;
     this.#rememberMenu(key, { kind: 'menu', chatId });
+    const menuContext = {
+      workspaces, currentWorkspace,
+      currentSession: currentSessionId ? { id: currentSessionId, title: currentSessionTitle } : null,
+      sessions, archiveVisible, presetCatalog, modelCatalog,
+      newSessionAction: { id: randomUUID(), status: 'idle' },
+    };
     await this.#sendCard(
       chatId,
-      menuCard({
-        workspaces, currentWorkspace,
-        currentSession: currentSessionId ? { id: currentSessionId, title: currentSessionTitle } : null,
-        sessions, archiveVisible, presetCatalog, modelCatalog,
-      }),
-      { key, updateMessageId, replyTo, conversationWorkspace },
+      menuCard(menuContext),
+      { key, updateMessageId, replyTo, conversationWorkspace, menuContext },
     );
   }
 

package/src/channels/feishu/feishu-cards.mjs

@@ -123,6 +123,7 @@ function backButton() {
  *   - archiveVisible: boolean       (归档显隐开关当前值)
  *   - presetCatalog: object|null    (预设目录, {items,defaultId,_currentId})
  *   - modelCatalog: object|null     (模型目录, {groups,current})
+ *   - newSessionAction: {id,status,message?}|null (新会话按钮的执行状态)
  * Number fallback: 1=续写 2=新会话 3=会话列表 4=状态
  * 5=补全权限 6=帮助.
  */
@@ -135,6 +136,7 @@ export function menuCard(ctx) {
     archiveVisible = false,
     presetCatalog = null,
     modelCatalog = null,
+    newSessionAction = null,
   } = ctx || {};
 
   // currentSession 提供 id/title；为兼容旧调用，也接受 currentSessionTitle
@@ -146,6 +148,19 @@ export function menuCard(ctx) {
   const hasWorkspaces = Array.isArray(workspaces) && workspaces.length > 0;
   const elements = [];
 
+  let newSessionLabel = t('🆕 新会话');
+  if (newSessionAction?.status === 'processing') {
+    newSessionLabel = t('正在开启…');
+    elements.push({ tag: 'div', text: plainText(t('正在开启新会话…')) });
+  } else if (newSessionAction?.status === 'success') {
+    newSessionLabel = t('已执行：新会话');
+    elements.push({ tag: 'div', text: plainText(t('已执行：新会话。发送消息即可开始。')) });
+  } else if (newSessionAction?.status === 'failed') {
+    elements.push({ tag: 'div', text: plainText(t('新会话操作失败：{message}', {
+      message: newSessionAction.message || t('卡片操作失败，请稍后重试。'),
+    })) });
+  }
+
   // ── 设置区 ──────────────────────────────────────────────────
   elements.push({ tag: 'div', text: markdown(t('**设置**')) });
 
@@ -270,7 +285,15 @@ export function menuCard(ctx) {
   });
 
   // 新会话 + 全部会话按钮
-  elements.push(buttonPair(t('🆕 新会话'), 'new', t('📋 会话/关注'), 'sessions'));
+  const sessionButtons = buttonPair(newSessionLabel, 'new', t('📋 会话/关注'), 'sessions');
+  const newSessionButton = sessionButtons.columns[0].elements[0];
+  if (newSessionAction?.id) {
+    newSessionButton.behaviors[0].value.newSessionActionId = newSessionAction.id;
+  }
+  if (newSessionAction?.status === 'processing' || newSessionAction?.status === 'success') {
+    newSessionButton.disabled = true;
+  }
+  elements.push(sessionButtons);
   if (!hasSessions && !hasWorkspaces) {
     elements.push(button(t('🗂 工作区列表'), 'workspaces'));
   }
@@ -512,6 +535,9 @@ export function menuHelpText() {
     '/preset [序号或完整ID]  查看或设置当前机器人 Agent Preset',
     '纯数字 ID：/preset id:<ID>',
     '/preset --default  跟随 Host 默认',
+    '/permissionlist  按序号列出权限档位',
+    '/permission [序号或完整ID]  查看或切换当前会话权限',
+    '纯数字 ID：/permission id:<ID>',
     '/models  列出模型',
     '/reasoninglist 或 /reasonings  按序号列出当前模型可用推理等级',
     '/reasoning [序号、等级ID或 --default]  查看或切换当前推理等级',
@@ -596,6 +622,8 @@ export function helpCard(extraTextLines = []) {
     { tag: 'hr' },
     { tag: 'div', text: markdown([
       t(HELP_TEXT_COMMANDS),
+      t('`/permissionlist` — 按序号列出权限档位'),
+      t('`/permission [序号/ID]` — 查看或切换当前会话权限'),
       t('/ws、/wsl、/workspaces  工作区命令别名'),
       t('`/version` — 查看插件版本'),
       t('/history [数量]  查看最近历史消息（默认 3 条，最多 5 条）'),