dsh-remote-web 0.7.12-beta.5 → 0.7.12-beta.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-remote-web",
-  "version": "0.7.12-beta.5",
+  "version": "0.7.12-beta.6",
   "description": "公网远程控制 DeepSeek Harness（dsh web）：安装即得专属加密地址，人在外面也能用手机访问电脑上的 dsh——无需同一局域网/WiFi、无需公网 IP 与内网穿透，全程加密；手机端 100% 还原电脑体验（对话/工具/审批/设置）。技术用户可选自建服务，流量走自己的服务器。Remote control DeepSeek Harness (dsh web) from anywhere over the public internet — install, get an encrypted URL, use it from your phone on any network (dual-half cordis plugin: Settings panel + same-origin /dsh-remote routes). (2026-09 由 dsh-remote-ui 更名 / renamed from dsh-remote-ui; dsh-remote 的 dsh web 插件半，不是纯 UI/皮肤插件)",
   "type": "module",
   "main": "lib/index.js",

package/runtime/clients/dsh-remote/dingtalk-bot.mjs

@@ -51,6 +51,8 @@ import WebSocket from "ws";
 
 import { createEventSubscriber, NODE_KINDS } from "./dsh-events.mjs";
 import { formatForChannel } from "./im-format.mjs";
+// 命令层（2026-11-08）：/help /status /stop /ls /use /unbind 在进模型前拦下执行（三家共用）
+import { executeImCommand, writeImBotsSession } from "./im-commands.mjs";
 import {
   WECHAT_CAPABILITY_TABLE,
   WECHAT_TIER_LIMITS,
@@ -91,6 +93,15 @@ export const TOPIC_CARD_CALLBACK = "/v1.0/card/instances/callback";
 export const DEFAULT_SUBSCRIPTIONS = Object.freeze([{ type: "CALLBACK", topic: TOPIC_ROBOT }]);
 /** ticket 有效期（官方：90s / 一次性）。状态文件只记过期时间，不存 ticket。 */
 export const TICKET_TTL_MS = 90_000;
+/**
+ * 回复通道持久化文件（相对 relayDir；0600）：缓存最近一次入站带来的
+ * `{sessionWebhook, sessionWebhookExpiredTime, senderStaffId, conversationId, conversationType, boundChatId, at}`。
+ * 为什么不写状态文件：sessionWebhook 里带会话令牌，状态文件是给面板/浏览器看的（只放元数据）。
+ * 为什么要落盘：进程重启后「回答回传」仍要能发出去（Lead 实测 bug：只存内存会丢，回传直接发不出）。
+ */
+export const REPLY_FILE = "im-dingtalk-reply.json";
+/** webhook 过期后降级 openapi 时给用户/日志的明确原因（面板据此提示"再发一条消息激活"）。 */
+const NO_REPLY_CHANNEL_HINT = "回复通道不可用：请在钉钉里再发一条消息激活（或配置 robotCode 走 OpenAPI）";
 /** 重连退避：1s 起、翻倍、60s 封顶（+0~1s 抖动，照官方 SDK 行为）。 */
 export const RECONNECT_BASE_MS = 1_000;
 export const RECONNECT_MAX_MS = 60_000;
@@ -189,8 +200,8 @@ export function normalizeBotMessage(data) {
     sessionWebhookExpiredTime: Number(d.sessionWebhookExpiredTime) || 0,
     robotCode: String(d.robotCode || ""),
     createAt: Number(d.createAt) || 0,
-    /** 主动发消息/去重用的目标：群=conversationId，单聊=senderStaffId。 */
-    chatId: conversationId || senderStaffId,
+    /** 主动发消息/去重用的目标：群=conversationId，单聊=senderStaffId（单聊 conversationId 不能当 chatId，否则会被误判成群聊）。 */
+    chatId: (conversationType === "2" ? conversationId : senderStaffId) || conversationId || senderStaffId,
     raw: d
   };
 }
@@ -277,8 +288,8 @@ export function createDingtalkBot(options = {}) {
   const relayDir = options.relayDir ? String(options.relayDir) : "";
   const allowFrom = normalizeAllowList(options.allowFrom);
   const targetChatId = String(options.targetChatId || "").trim();
-  const configuredSessionId = String(options.configuredSessionId || "").trim();
-  const configuredSessionTitle = truncateText(options.configuredSessionTitle || "", 60);
+  let configuredSessionId = String(options.configuredSessionId || "").trim();
+  let configuredSessionTitle = truncateText(options.configuredSessionTitle || "", 60);
   const now = typeof options.clock === "function" ? options.clock : () => Date.now();
   const doFetch = typeof options.fetchImpl === "function" ? options.fetchImpl : globalThis.fetch;
   const wsFactory = typeof options.wsFactory === "function" ? options.wsFactory : (url) => new WebSocket(url);
@@ -322,7 +333,9 @@ export function createDingtalkBot(options = {}) {
     boundSessionWebhook: "",
     boundSessionWebhookExpiredAt: 0,
     messages: 0,
-    gated: 0
+    gated: 0,
+    /** 最近一次回复失败原因（人话；写状态 replyChannel.lastError，不覆盖连接错误）。 */
+    replyChannelError: ""
   };
   const membership = { tier: "", entitlements: null, checkedAt: 0, usage: { month: "", count: 0 } };
 
@@ -355,6 +368,19 @@ export function createDingtalkBot(options = {}) {
   // 配置里持久化的 sessionWebhook（插件/上次运行留下的）：首次入站前也能主动发；
   // ⚠️ webhook 里带会话令牌，**绝不写状态文件**，只在内存里用。
   if (options.sessionWebhook) state.boundSessionWebhook = String(options.sessionWebhook || "");
+  // 上次入站缓存的回复通道（跨重启可用）：im-dingtalk-reply.json（0600）
+  if (relayDir) {
+    try {
+      const saved = readJsonFile(path.join(relayDir, REPLY_FILE));
+      if (saved && typeof saved === "object") {
+        if (typeof saved.sessionWebhook === "string" && saved.sessionWebhook) state.boundSessionWebhook = saved.sessionWebhook;
+        if (Number.isFinite(Number(saved.sessionWebhookExpiredTime))) state.boundSessionWebhookExpiredAt = Number(saved.sessionWebhookExpiredTime);
+        if (typeof saved.senderStaffId === "string" && saved.senderStaffId) state.boundUserId = saved.senderStaffId;
+        if (typeof saved.conversationId === "string" && saved.conversationId) state.boundConversationId = saved.conversationId;
+        if (typeof saved.boundChatId === "string" && saved.boundChatId) state.boundChatId = saved.boundChatId;
+      }
+    } catch { /* 忽略坏文件 */ }
+  }
   if (targetChatId && !state.boundChatId) state.boundChatId = targetChatId;
 
   // 重启恢复：用量 / 绑定目标 / 档位快照（均不含凭据）
@@ -502,6 +528,8 @@ export function createDingtalkBot(options = {}) {
       credentialSource,
       robotCodeConfigured: Boolean(robotCode),
       capabilities: capabilitiesNow(),
+      // 回复通道三层降级（面板显示「可用/需重新发一条消息激活」；不含 webhook 原值）
+      replyChannel: replyChannelStatus(),
       // 会员 + 用量（与企微对齐）
       tier: tierNow(),
       caps: capsNow().slice(),
@@ -760,7 +788,30 @@ export function createDingtalkBot(options = {}) {
     }
   }
 
-  /** 更新「回复目标」：sessionWebhook 优先（即时回复），同时记住 openapi 需要的 conversation/user。 */
+  /** 写回复通道缓存到磁盘（0600；含会话令牌，绝不进状态/日志）。 */
+  function persistReplyChannel() {
+    if (!relayDir) return;
+    try {
+      atomicWriteJson(path.join(relayDir, REPLY_FILE), {
+        version: 1,
+        sessionWebhook: state.boundSessionWebhook || "",
+        sessionWebhookExpiredTime: Number(state.boundSessionWebhookExpiredAt) || 0,
+        senderStaffId: state.boundUserId || "",
+        conversationId: state.boundConversationId || "",
+        boundChatId: state.boundChatId || "",
+        at: now()
+      }, { onWarn: (m) => log.warn(m) });
+    } catch (e) {
+      log.warn(`回复通道缓存写入失败（忽略）：${truncateText(e && e.message ? e.message : e, 100)}`);
+    }
+  }
+
+  /** 日志/状态里只用 webhook 的 host（整条 URL 含会话令牌，绝不外泄）。 */
+  function webhookHost(url) {
+    try { return new URL(String(url)).host; } catch { return chatIdHash(String(url)) || "?"; }
+  }
+
+  /** 更新「回复目标」：缓存 sessionWebhook（被动回复）+ senderStaffId/conversationId（openapi 降级用）。 */
   function bindTarget(info) {
     if (info.conversationId) state.boundConversationId = info.conversationId;
     if (info.senderStaffId) state.boundUserId = info.senderStaffId;
@@ -769,9 +820,13 @@ export function createDingtalkBot(options = {}) {
       log.info(`已绑定推送会话 chat=${chatIdHash(info.chatId)}${info.isGroup ? "（群）" : "（单聊）"}`);
     }
     if (info.sessionWebhook) {
+      const changed = info.sessionWebhook !== state.boundSessionWebhook;
       state.boundSessionWebhook = info.sessionWebhook;
       state.boundSessionWebhookExpiredAt = info.sessionWebhookExpiredTime || 0;
+      state.replyChannelError = "";
+      if (changed) log.info(`已缓存回复通道 sessionWebhook（host=${webhookHost(info.sessionWebhook)}，过期=${state.boundSessionWebhookExpiredAt ? new Date(state.boundSessionWebhookExpiredAt).toISOString() : "未知"}）`);
     }
+    persistReplyChannel();
     writeStatus();
   }
 
@@ -803,9 +858,95 @@ export function createDingtalkBot(options = {}) {
     void dispatchInbound(info).catch((e) => log.warn(`入站转发失败（已忽略）：${truncateText(e && e.message ? e.message : e, 120)}`));
   }
 
-  /** 入站 → 会员闸 → 转发到 DSH 会话（尽力、可降级）。 */
+  /** 命令层：命中已回复返回 true（不转模型、不计额度；回复走三层回复通道）。 */
+  async function handleCommand(info) {
+    const text = String((info && info.text) || "");
+    if (!/^\s*\//.test(text)) return false;
+    const cmd = await executeImCommand({
+      text,
+      ctx: {
+        caps: capsNow(),
+        tier: tierNow(),
+        appUrl: String(options.appUrl || ""),
+        channelLabel: "钉钉",
+        sessions: async () => {
+          const sub = subscriber;
+          if (!sub) return [];
+          let rows = [];
+          try {
+            if (typeof sub.listSessions === "function") {
+              const r = await sub.listSessions();
+              rows = Array.isArray(r) ? r : (r && r.ok && Array.isArray(r.sessions) ? r.sessions : []);
+            }
+          } catch { rows = []; }
+          if ((!Array.isArray(rows) || rows.length === 0) && typeof sub.sessions === "function") {
+            try { rows = (sub.sessions() || []).map((id) => ({ sessionId: String(id) })); } catch { rows = []; }
+          }
+          return (Array.isArray(rows) ? rows : []).map((x) => ({
+            sessionId: String(x.sessionId || x.id || ""),
+            title: String(x.title || ""),
+            updatedAt: Number(x.updatedAt) || 0,
+            running: x.running === true
+          })).filter((x) => x.sessionId);
+        },
+        currentSessionId: () => {
+          const known = boundSessionId || lastSeenSessionId || "";
+          if (known) return known;
+          if (configuredSessionId && canCap("sessions")) return configuredSessionId;
+          const sub = subscriber;
+          try {
+            if (sub && typeof sub.sessions === "function") {
+              const ids = sub.sessions();
+              if (Array.isArray(ids) && ids.length) return String(ids[0]);
+            }
+          } catch { /* 忽略 */ }
+          return "";
+        },
+        currentSessionTitle: () => "",
+        cancelSession: async ({ sessionId }) => {
+          const sub = subscriber;
+          if (!sub || typeof sub.cancelSession !== "function") return { ok: false, message: "订阅器未就绪" };
+          try {
+            const r = await sub.cancelSession({ sessionId });
+            return r && typeof r === "object" ? r : { ok: Boolean(r) };
+          } catch (e) { return { ok: false, message: e && e.message ? e.message : String(e) }; }
+        },
+        switchSession: async ({ sessionId, title }) => {
+          const r = writeImBotsSession(relayDir, "dingtalk", { sessionId, sessionTitle: title });
+          if (r.ok) {
+            configuredSessionId = sessionId;
+            configuredSessionTitle = truncateText(title || "", 60);
+            boundSessionId = sessionId;
+            writeStatus();
+          }
+          return r;
+        },
+        unbind: async () => { clearReplyChannel(); return { ok: true }; },
+        statusSnapshot: async () => ({
+          connected: state.connected === true,
+          authenticated: state.authenticated === true,
+          state: state.phase,
+          lastError: state.lastError || "",
+          tier: tierNow(),
+          usage: { month: monthKey(), messages: usageThisMonth() },
+          messagesPerMonth: messageLimitNow(),
+          remainingMessages: messageLimitNow() ? Math.max(0, messageLimitNow() - usageThisMonth()) : null,
+          currentSessionId: boundSessionId || lastSeenSessionId || "",
+          currentSessionTitle: ""
+        })
+      }
+    });
+    if (!cmd || !cmd.handled) return false;
+    reply(info, cmd.text);
+    emitter.emit("command", { ...info, command: cmd.command, ok: cmd.ok === true, gated: cmd.gated === true });
+    log.info(`命令 ${cmd.command}${cmd.gated ? "（会员闸拦截）" : ""} 已回复（不转模型）`);
+    return true;
+  }
+
+  /** 入站 → 命令层 → 会员闸 → 转发到 DSH 会话（尽力、可降级）。 */
   async function dispatchInbound(info) {
     const sub = subscriber;
+    if (await handleCommand(info)) return;
     const gated = await membershipGate(info);
     if (gated) return;
     const sessionId = await resolveSessionId(sub);
@@ -947,42 +1088,114 @@ export function createDingtalkBot(options = {}) {
   }
 
   /**
-   * 发一条 markdown（通知/回答回传/确认文案统一入口）。
-   * 目标选择：① 最近一次入站的 sessionWebhook（未过期，最快、无需 token）
-   *           ② replyMode=openapi（或 webhook 不可用）且有 robotCode → OpenAPI
-   *           ③ 都没有 → 记日志跳过（不抛错）
+   * 当前可用的回复通道（**三层降级**）：
+   *   ① 缓存 sessionWebhook（未过期；被动回复，最快、不需要 token）
+   *   ② openapi（robotCode + senderStaffId/conversationId 都有）
+   *   ③ none（明确原因，面板提示"再发一条消息激活"）
    */
-  async function sendMarkdown(text, opts = {}) {
+  function replyChannelNow() {
+    const expiresAt = Number(state.boundSessionWebhookExpiredAt) || 0;
+    const webhookUsable = Boolean(state.boundSessionWebhook) && (!expiresAt || now() < expiresAt);
+    if (webhookUsable) return { kind: "sessionWebhook", webhook: state.boundSessionWebhook, expiresAt, reason: "" };
+    if (robotCode && (state.boundUserId || state.boundConversationId)) {
+      return {
+        kind: "openapi",
+        webhook: "",
+        expiresAt: 0,
+        reason: state.boundSessionWebhook ? "sessionWebhook_expired" : "no_webhook"
+      };
+    }
+    return {
+      kind: "none",
+      webhook: "",
+      expiresAt,
+      reason: state.boundSessionWebhook ? "sessionWebhook_expired" : (robotCode ? "no_target_user" : "no_robot_code"),
+      lastError: NO_REPLY_CHANNEL_HINT
+    };
+  }
+
+  /** 状态文件里的 replyChannel 元数据（**绝不含 webhook 原值**）。 */
+  function replyChannelStatus() {
+    const ch = replyChannelNow();
+    return {
+      kind: ch.kind,
+      expiresAt: Number(ch.expiresAt) || 0,
+      lastError: truncateText(maskSecrets(state.replyChannelError || "", [clientSecret]), 160),
+      hasWebhook: Boolean(state.boundSessionWebhook)
+    };
+  }
+
+  function markReplyChannelError(detail) {
+    state.replyChannelError = truncateText(String(detail || ""), 160);
+    writeStatus();
+  }
+
+  /**
+   * 统一回复入口（回答回传/通知/命令回复都走这里）。
+   * ① 缓存 sessionWebhook → ② 失败/过期降级 openapi → ③ 都不可用：**明确日志 + 状态人话，绝不静默**。
+   */
+  async function sendViaReplyChannel(text, opts = {}) {
     const title = opts.title || "";
-    const webhook = state.boundSessionWebhook;
-    const webhookOk = Boolean(webhook) && (!state.boundSessionWebhookExpiredAt || now() < state.boundSessionWebhookExpiredAt);
-    if (replyMode !== "openapi" && webhookOk) {
+    const preferredWebhook = String(opts.webhook || "").trim();
+    const channel = replyChannelNow();
+    const webhook = preferredWebhook || (channel.kind === "sessionWebhook" ? channel.webhook : "");
+    if (webhook) {
       const r = await replySessionWebhook(webhook, { title, text });
-      if (r.ok) return r;
-      log.warn(`sessionWebhook 回复失败（${r.reason}），尝试 OpenAPI 兜底`);
+      if (r.ok) {
+        if (state.replyChannelError) { state.replyChannelError = ""; writeStatus(); }
+        return { ...r, kind: "sessionWebhook" };
+      }
+      // JSDoc: 只记 host + 错误原因（整条 URL 带会话令牌，绝不外泄）
+      log.warn(`sessionWebhook 回复失败（host=${webhookHost(webhook)}，${truncateText(r.reason, 60)}）→ 尝试 OpenAPI 兜底`);
+      markReplyChannelError(`sessionWebhook 回复失败：${truncateText(r.reason, 80)}；${NO_REPLY_CHANNEL_HINT}`);
+    }
+    if (robotCode && (state.boundUserId || state.boundConversationId)) {
+      const fb = await sendOpenapi(text, { title });
+      if (fb.ok) return { ...fb, kind: "openapi" };
+      log.warn(`OpenAPI 兜底也失败：${truncateText(fb.reason, 80)}`);
+      markReplyChannelError(`OpenAPI 回复失败：${truncateText(fb.reason, 80)}；${NO_REPLY_CHANNEL_HINT}`);
+      return { ok: false, kind: "none", reason: "no_reply_channel", detail: fb.reason || "" };
+    }
+    // 缺 robotCode：给更具体的可操作错误（与能力降级口径一致，不是笼统的"没通道"）
+    if (!robotCode) {
+      const detail = "未配置 robotCode：openapi 主动发送不可用（接收消息与 sessionWebhook 回复不受影响）。"
+        + "请在插件「钉钉机器人」里补 robotCode。";
+      log.warn(`no_robot_code：${detail}`);
+      markReplyChannelError(`no_robot_code：${detail}`);
+      return { ok: false, kind: "none", reason: "no_robot_code", detail, capabilities: capabilitiesNow() };
     }
-    const fallback = await sendOpenapi(text, { title });
-    if (fallback.ok) return fallback;
     const at = now();
-    if (at - lastNoTargetLogAt > 10 * 60 * 1000) {
+    if (at - lastNoTargetLogAt > 60_000) {
       lastNoTargetLogAt = at;
-      log.info(`没有可用的回复通道（sessionWebhook 未就绪 / openapi 未配置）：${truncateText(fallback.reason || "?", 60)}`);
+      log.warn(`no_reply_channel：${NO_REPLY_CHANNEL_HINT}（detail=${truncateText(channel.reason, 40)}，webhook=${state.boundSessionWebhook ? "expired" : "none"}，robotCode=${robotCode ? "有" : "无"}，userId=${state.boundUserId ? "有" : "无"}）`);
     }
-    return fallback;
+    markReplyChannelError(`no_reply_channel：${NO_REPLY_CHANNEL_HINT}`);
+    return { ok: false, kind: "none", reason: "no_reply_channel", detail: NO_REPLY_CHANNEL_HINT };
+  }
+
+  /** 兼容旧入口：通知/回答回传/命令回复统一走三层回复通道。 */
+  async function sendMarkdown(text, opts = {}) {
+    return sendViaReplyChannel(text, opts);
   }
 
-  /** 回复一句人话：优先 sessionWebhook（即时），失败/缺失时退回主动发。 */
+  /** 回复一句人话：优先本次入站的 webhook，再走三层降级；失败不抛。 */
   function reply(info, text) {
-    const webhook = info && info.sessionWebhook ? info.sessionWebhook : state.boundSessionWebhook;
-    if (webhook) {
-      void replySessionWebhook(webhook, { text }).then((r) => {
-        if (r.ok) return;
-        log.warn(`回复失败（${r.reason}），尝试主动发兜底`);
-        void sendMarkdown(text).catch(() => {});
-      }).catch(() => {});
-      return;
+    const webhook = info && info.sessionWebhook ? info.sessionWebhook : "";
+    void sendViaReplyChannel(text, { webhook }).catch(() => {});
+  }
+
+  /** 解绑推送（/unbind 命令用）：清内存 + 删持久化回复通道 + 清状态绑定字段。 */
+  function clearReplyChannel() {
+    state.boundSessionWebhook = "";
+    state.boundSessionWebhookExpiredAt = 0;
+    state.boundUserId = "";
+    state.boundConversationId = "";
+    state.boundChatId = "";
+    state.replyChannelError = "";
+    if (relayDir) {
+      try { fs.rmSync(path.join(relayDir, REPLY_FILE), { force: true }); } catch { /* 忽略 */ }
     }
-    void sendMarkdown(text).catch(() => {});
+    writeStatus();
   }
 
   // ---------- DSH 事件订阅（通知 + 回答回传 + 活跃会话） ----------
@@ -1131,6 +1344,8 @@ export function createDingtalkBot(options = {}) {
       credentialSource,
       robotCodeConfigured: Boolean(robotCode),
       capabilities: capabilitiesNow(),
+      // 回复通道三层降级（面板显示「可用/需重新发一条消息激活」；不含 webhook 原值）
+      replyChannel: replyChannelStatus(),
       subscriptions: subscriptions.map((s) => String(s.topic || "")).filter(Boolean),
       messages: state.messages,
       gated: state.gated,
@@ -1192,6 +1407,8 @@ export function createDingtalkBot(options = {}) {
     status,
     replySessionWebhook,
     sendMarkdown,
+    sendViaReplyChannel,
+    clearReplyChannel,
     getAccessToken,
     on(event, listener) { emitter.on(event, listener); return () => emitter.off(event, listener); },
     once(event, listener) { emitter.once(event, listener); return () => emitter.off(event, listener); },

package/runtime/clients/dsh-remote/feishu-bot.mjs

@@ -81,6 +81,8 @@ import {
   APPROVAL_CARD_TTL_MS
 } from "./wecom-bot.mjs";
 import { formatForChannel } from "./im-format.mjs";
+// 命令层（2026-11-08）：/help /status /stop /ls /use /unbind 在进模型前拦下执行（三家共用）
+import { executeImCommand, writeImBotsSession } from "./im-commands.mjs";
 import {
   WECHAT_CAPABILITY_TABLE,
   WECHAT_TIER_LIMITS,
@@ -1233,6 +1235,16 @@ export function createFeishuBot({
       return r;
     },
 
+    /** 解绑接收人（/unbind 命令用）：清内存绑定 + 触发状态刷新；之后收到消息会自动重新绑定。 */
+    clearBinding() {
+      state.boundChatId = "";
+      state.boundChatType = "";
+      state.boundChatName = "";
+      state.boundSource = "";
+      emitStatus();
+      return { ok: true };
+    },
+
     /** 发审批卡片（返回值带 messageId，供回执后原地更新）。 */
     async sendCard(to, card, opts = {}) {
       if (!sender) return { ok: false, reason: "发送器未初始化（连接尚未建立）" };
@@ -1565,9 +1577,98 @@ export function createFeishuBotController(options = {}) {
   }
 
   // ── 入站 ────────────────────────────────────────────────────────────────
+  /** 入站命令层：命中返回 true（已回复，调用方直接 return）。 */
+  async function handleInboundCommand(msg) {
+    const text = String((msg && msg.text) || "");
+    if (!/^\s*\//.test(text)) return false;
+    const cmd = await executeImCommand({
+      text,
+      ctx: {
+        caps: capsNow(),
+        tier: tierNow(),
+        appUrl,
+        channelLabel: "飞书",
+        sessions: async () => {
+          const sub = subscriber;
+          if (!sub) return [];
+          let rows = [];
+          try {
+            if (typeof sub.listSessions === "function") {
+              const r = await sub.listSessions();
+              rows = Array.isArray(r) ? r : (r && r.ok && Array.isArray(r.sessions) ? r.sessions : []);
+            }
+          } catch { rows = []; }
+          if ((!Array.isArray(rows) || rows.length === 0) && typeof sub.sessions === "function") {
+            try { rows = (sub.sessions() || []).map((id) => ({ sessionId: String(id) })); } catch { rows = []; }
+          }
+          return (Array.isArray(rows) ? rows : []).map((x) => ({
+            sessionId: String(x.sessionId || x.id || ""),
+            title: String(x.title || ""),
+            updatedAt: Number(x.updatedAt) || 0,
+            running: x.running === true
+          })).filter((x) => x.sessionId);
+        },
+        currentSessionId: () => {
+          const cfgId = String((configNow && configNow.sessionId) || "");
+          if (cfgId) return cfgId;
+          const sub = subscriber;
+          try {
+            if (sub && typeof sub.sessions === "function") {
+              const ids = sub.sessions();
+              if (Array.isArray(ids) && ids.length) return String(ids[0]);
+            }
+          } catch { /* 忽略 */ }
+          return "";
+        },
+        currentSessionTitle: () => String((configNow && configNow.sessionTitle) || ""),
+        cancelSession: async ({ sessionId }) => {
+          const sub = subscriber;
+          if (!sub || typeof sub.cancelSession !== "function") return { ok: false, message: "订阅器未就绪" };
+          try {
+            const r = await sub.cancelSession({ sessionId });
+            return r && typeof r === "object" ? r : { ok: Boolean(r) };
+          } catch (e) { return { ok: false, message: e && e.message ? e.message : String(e) }; }
+        },
+        switchSession: async ({ sessionId, title }) => {
+          const r = writeImBotsSession(relayDir, "feishu", { sessionId, sessionTitle: title });
+          if (r.ok && configNow) configNow = { ...configNow, sessionId, sessionTitle: title || "" };
+          return r;
+        },
+        unbind: async () => {
+          try { if (bot && typeof bot.clearBinding === "function") bot.clearBinding(); } catch { /* 忽略 */ }
+          return { ok: true };
+        },
+        statusSnapshot: async () => {
+          const bs = bot && typeof bot.status === "function" ? bot.status() : null;
+          return {
+            connected: state.connected === true,
+            authenticated: state.authenticated === true,
+            state: state.state,
+            lastError: state.lastError || "",
+            tier: tierNow(),
+            usage: { month: monthKey(clock()), messages: usageThisMonth() },
+            messagesPerMonth: Number(limitsNow().messages_per_month || 0),
+            remainingMessages: Number(limitsNow().messages_per_month || 0) > 0
+              ? Math.max(0, Number(limitsNow().messages_per_month || 0) - usageThisMonth()) : null,
+            currentSessionId: String((configNow && configNow.sessionId) || (bs && bs.boundChatId) || ""),
+            currentSessionTitle: String((configNow && configNow.sessionTitle) || (bs && bs.boundChatName) || "")
+          };
+        }
+      }
+    });
+    if (!cmd || !cmd.handled) return false;
+    try {
+      await bot.sendText(msg.chatId, cmd.text, { receiveIdType: "chat_id" });
+    } catch { /* 回复失败不阻塞 */ }
+    log.info(`命令 ${cmd.command}${cmd.gated ? "（会员闸拦截）" : ""} 已回复（不转模型）`);
+    return true;
+  }
+
   async function onInboundMessage(msg) {
     if (!msg || !msg.text) return;
     const at = Number(clock()) || Date.now();
+    // ⓪ 命令层：命中即执行并回复，**绝不进模型**，也不计入额度（/stop、/unbind 永远免费）
+    if (await handleInboundCommand(msg)) return;
     // 白名单在 bot 层已过滤；这里做会员闸：派活要 assign.continue + 月度额度
     await refreshTier({ minIntervalMs: 30_000 });
     if (!canCap("assign.continue")) {

package/runtime/clients/dsh-remote/im-commands.mjs

@@ -0,0 +1,302 @@
+/**
+ * im-commands — 三家 IM 机器人（企微 / 钉钉 / 飞书）共用的**命令层**（2026-11-08）。
+ *
+ * 业主实测：在钉钉里发 `/ls` 期望列会话，但当时没有命令层 → `/ls` 被当成 prompt 转给了模型。
+ * 命令层把这类「控制类消息」在**进模型之前**拦下、自己执行并回复；解析器/文案/能力门禁三家共用，
+ * 各通道只负责把回复发出去（企微被动回复 / 钉钉 sessionWebhook / 飞书 im/v1/messages）。
+ *
+ * 命令表（能力门禁复用 `WECHAT_CAPABILITY_TABLE`，与会员升级文案同口径）：
+ *   | 命令        | 能力              | 免费 | 说明                                   |
+ *   | /help       | 无                | ✅   | 列出全部命令（含会员命令标注）         |
+ *   | /status     | 无                | ✅   | 连接状态 + 当前会话 + 本月剩余指令     |
+ *   | /stop       | 无                | ✅   | 急停当前任务（安全阀必须免费、立即生效）|
+ *   | /ls         | sessions          | ❌   | 最近 ≤10 个会话（标题/索引/当前标记）  |
+ *   | /use <N>    | sessions          | ❌   | 切换当前绑定会话（写配置 sessionId）   |
+ *   | /unbind     | 无                | ✅   | 解绑/退订本会话推送（合规：随时可退订）|
+ *
+ * 未命中的 `/xxx`：回帮助提示（含"未知命令"），**绝不转给模型**。
+ * 回复一律用纯文本列表（不用 Markdown 表格；各通道发送前还会走 im-format 兜底）。
+ */
+
+import path from "node:path";
+
+import { WECHAT_CAPABILITY_TABLE, grantsCap } from "./wechat-runtime.mjs";
+import { IM_BOTS_FILE, atomicWriteJson, readJsonFile } from "./wecom-bot.mjs";
+
+/** 命令表（顺序即 /help 展示顺序）。`free` 只是文档标记；真正门禁看 caps。 */
+export const IM_COMMANDS = Object.freeze([
+  Object.freeze({ name: "/help", caps: Object.freeze([]), free: true, usage: "/help", summary: "查看命令" }),
+  Object.freeze({ name: "/status", caps: Object.freeze([]), free: true, usage: "/status", summary: "连接状态 / 当前会话 / 本月额度" }),
+  Object.freeze({ name: "/stop", caps: Object.freeze([]), free: true, usage: "/stop", summary: "急停当前任务" }),
+  Object.freeze({ name: "/ls", caps: Object.freeze(["sessions"]), free: false, usage: "/ls", summary: "列出最近会话（会员）" }),
+  Object.freeze({ name: "/use", caps: Object.freeze(["sessions"]), free: false, usage: "/use <序号>", summary: "切换当前会话（会员）" }),
+  Object.freeze({ name: "/unbind", caps: Object.freeze([]), free: true, usage: "/unbind", summary: "解绑本会话推送（随时可退订）" })
+]);
+
+/** 会话标题截断（按码点，避免切坏 emoji/中文）。 */
+export function truncateTitle(title, max = 24) {
+  const s = String(title == null ? "" : title).replace(/\s+/g, " ").trim();
+  if (!s) return "";
+  const chars = Array.from(s);
+  return chars.length <= max ? s : `${chars.slice(0, Math.max(1, max - 1)).join("")}…`;
+}
+
+function pad2(n) { return String(n).padStart(2, "0"); }
+function fmtTime(at) {
+  const n = Number(at) || 0;
+  if (!n) return "";
+  try {
+    const d = new Date(n);
+    return `${pad2(d.getMonth() + 1)}-${pad2(d.getDate())} ${pad2(d.getHours())}:${pad2(d.getMinutes())}`;
+  } catch { return ""; }
+}
+
+/**
+ * 解析一条消息是否为命令。
+ * @returns {{name:string, arg:string, unknown?:boolean, raw:string}|null} null = 普通文本（照旧转给模型）
+ */
+export function parseImCommand(text) {
+  const raw = String(text == null ? "" : text).trim();
+  if (!raw.startsWith("/")) return null;
+  const m = /^\/([a-zA-Z]*)(?:\s+([^\s]+))?(?:\s+([\s\S]*))?$/.exec(raw);
+  if (!m) return { name: "/", arg: "", unknown: true, raw };
+  const word = String(m[1] || "").toLowerCase();
+  return { name: word ? `/${word}` : "/", arg: String(m[2] || "").toLowerCase(), rest: m[3] || "", unknown: !word, raw };
+}
+
+/** 当前 caps 是否具备该命令要求（点号前缀规则，与会员表同源）。 */
+export function commandAllowed(command, caps) {
+  const list = Array.isArray(caps) ? caps : [];
+  return (command.caps || []).every((c) => grantsCap(list, c));
+}
+
+function appPromo(ctx) {
+  const base = String((ctx && ctx.appUrl) || "").trim().replace(/\/+$/, "");
+  if (!base) return "";
+  return `${base}/promo`;
+}
+
+/** /help：列出全部命令（免费/会员标注；免费档会提示哪些需要会员）。 */
+export function helpText(ctx = {}) {
+  const caps = Array.isArray(ctx.caps) ? ctx.caps : [];
+  const lines = ["📋 可用命令（命令不会发给模型，直接执行）", ""];
+  for (const cmd of IM_COMMANDS) {
+    const allowed = commandAllowed(cmd, caps);
+    const mark = cmd.free ? "" : allowed ? "（会员）" : "（会员·当前档不可用）";
+    lines.push(`${cmd.usage} — ${cmd.summary}${mark}`);
+  }
+  lines.push("", "免费档可用的命令：/help /status /stop /unbind（急停与退订永远免费）。");
+  if (caps.includes("sessions")) lines.push("你的档位已包含会话管理（/ls、/use）。");
+  return lines.join("\n");
+}
+
+/** 未知 /xxx：不转给模型，回"未知命令 + 帮助提示"。 */
+export function unknownCommandText(cmd, ctx = {}) {
+  const name = cmd && cmd.name && cmd.name !== "/" ? cmd.name : cmd && cmd.raw ? String(cmd.raw).split(/\s+/)[0] : "/?";
+  return `未知命令：${name}\n\n${helpText(ctx)}`;
+}
+
+/** 会员功能被拦：与现有升级文案同口径（能做什么/去哪升级），只是更简短。 */
+export function upgradeText(commandName, ctx = {}) {
+  const promo = appPromo(ctx);
+  const lines = [
+    `🔒 ${commandName} 是会员功能（列出/切换会话）`,
+    "",
+    "免费可用：/help /status /stop /unbind（急停、退订永远免费）",
+    "升级 Pro：指令不限量、可开新任务、可切换/多会话"
+  ];
+  if (promo) lines.push(`👉 ${promo}`);
+  return lines.join("\n");
+}
+
+/** /status：与状态文件同源的连接/会话/额度摘要。 */
+export async function statusText(ctx = {}) {
+  const snap = typeof ctx.statusSnapshot === "function" ? await ctx.statusSnapshot() : (ctx.status || {});
+  const s = snap && typeof snap === "object" ? snap : {};
+  const channel = String(s.channelLabel || ctx.channelLabel || "IM");
+  const connected = s.connected === true;
+  const authed = s.authenticated === true;
+  const state = String(s.state || (connected ? "connected" : "idle"));
+  const stateLine = connected
+    ? (authed ? "✅ 已连接（认证通过）" : "✅ 已连接（等待认证）")
+    : `⚠️ 未连接（${state}${s.lastError ? `：${truncateTitle(s.lastError, 40)}` : ""}）`;
+  const conv = truncateTitle(s.currentSessionTitle || s.boundSessionTitle || "", 24) || "未选择";
+  const convId = String(s.currentSessionId || s.boundSessionId || "");
+  const shortId = convId ? convId.replace(/^session-/, "").slice(0, 8) : "";
+  const limit = Number(s.messagesPerMonth) || 0;
+  const used = Number(s.usage && s.usage.messages) || 0;
+  const quotaLine = limit > 0
+    ? `本月指令：已用 ${used}/${limit}${s.tier ? `（${s.tier}）` : ""}`
+    : `本月指令：不限${s.tier ? `（${s.tier}）` : ""}`;
+  const lines = [
+    "📊 连接状态",
+    `· 通道：${channel}`,
+    `· 状态：${stateLine}`,
+    `· 当前会话：${conv}${shortId ? `（#${shortId}）` : ""}`,
+    `· ${quotaLine}`
+  ];
+  if (s.remainingMessages !== null && s.remainingMessages !== undefined && limit > 0) {
+    lines.push(`· 剩余：${Number(s.remainingMessages) || 0} 条`);
+  }
+  return lines.join("\n");
+}
+
+/** ctx 的 currentSessionId/currentSessionTitle 允许函数或字符串（各通道实现风格不一）。 */
+function resolveMaybeFn(value) {
+  try { return typeof value === "function" ? String(value() || "") : String(value || ""); } catch { return ""; }
+}
+
+/** 统一取最近会话列表（ctx.sessions 返回 [{sessionId,title,updatedAt,running}]）。 */
+export async function listSessions(ctx = {}) {
+  if (typeof ctx.sessions !== "function") return [];
+  const rows = await ctx.sessions();
+  if (!Array.isArray(rows)) return [];
+  return rows
+    .filter((r) => r && typeof r.sessionId === "string" && r.sessionId)
+    .slice(0, 10)
+    .map((r) => ({
+      sessionId: r.sessionId,
+      title: String(r.title || r.sessionTitle || "").trim() || r.sessionId,
+      updatedAt: Number(r.updatedAt) || 0,
+      running: r.running === true
+    }));
+}
+
+/** /ls：≤10 个会话，标题截断 24 + 索引 + 当前标记 + 更新时间。 */
+export async function lsText(ctx = {}) {
+  const rows = await listSessions(ctx);
+  const current = resolveMaybeFn(ctx.currentSessionId) || String(ctx.activeSessionId || "");
+  if (!rows.length) {
+    return "📂 最近没有可列出的会话。\n\n先在电脑的 DeepSeek Harness 里打开/运行一个会话，再发 /ls。";
+  }
+  const lines = ["📂 最近会话（最多 10 个）", ""];
+  rows.forEach((r, i) => {
+    const isCurrent = r.sessionId === current;
+    const time = fmtTime(r.updatedAt);
+    const marks = [isCurrent ? "（当前）" : "", r.running ? "· 运行中" : "", time ? `· ${time}` : ""].filter(Boolean).join(" ");
+    lines.push(`${i + 1}. ${truncateTitle(r.title, 24)}${marks ? ` ${marks}` : ""}`);
+  });
+  lines.push("", "回复 /use <序号> 切换会话（例如 /use 1）。");
+  return { text: lines.join("\n"), rows };
+}
+
+/** /use <N>：切换当前绑定会话（写配置 sessionId/sessionTitle）。 */
+export async function useText(ctx = {}, arg = "") {
+  const rows = await listSessions(ctx);
+  if (!rows.length) return "现在没有可切换的会话。先在电脑上打开一个会话，再发 /ls 看看。";
+  const raw = String(arg || "").trim();
+  if (!raw) return "用法：/use <序号>（先发 /ls 查看会话列表，例如 /use 1）";
+  const n = Number(raw);
+  if (!Number.isInteger(n) || n < 1 || n > rows.length) {
+    return `序号超出范围：当前列表是 1-${rows.length}。先发 /ls 查看列表，再用 /use <序号> 切换。`;
+  }
+  const pick = rows[n - 1];
+  if (typeof ctx.switchSession !== "function") return "当前通道还不支持切换会话（订阅器未就绪），请在电脑上切换。";
+  const r = await ctx.switchSession({ sessionId: pick.sessionId, title: pick.title });
+  if (!r || r.ok !== true) {
+    return `切换失败：${truncateTitle((r && (r.message || r.reason)) || "未知错误", 60)}。可以到电脑上切换，或稍后再试。`;
+  }
+  return `✅ 已切换到 #${n} ${truncateTitle(pick.title, 24) || pick.sessionId}`;
+}
+
+/** /stop：急停当前任务（免费、立即生效；回执明确）。 */
+export async function stopText(ctx = {}) {
+  const current = resolveMaybeFn(ctx.currentSessionId) || String(ctx.activeSessionId || "");
+  if (!current) return "当前没有正在运行的会话，无需急停。";
+  if (typeof ctx.cancelSession !== "function") return "急停失败：后台还没连上事件通道（订阅器未就绪）。请在电脑上停止任务。";
+  const title = truncateTitle(resolveMaybeFn(ctx.currentSessionTitle) || ctx.activeSessionTitle || current, 24);
+  let r;
+  try { r = await ctx.cancelSession({ sessionId: current }); } catch (e) {
+    r = { ok: false, message: e && e.message ? e.message : String(e) };
+  }
+  if (r && r.ok === true) return `⏹ 已急停：${title}（已发送中止，正在停止当前任务）`;
+  return `⏹ 急停请求已发出，但没收到确认：${truncateTitle((r && (r.message || r.reason)) || "未知错误", 60)}。请到电脑上确认任务是否已停。`;
+}
+
+/** /unbind：解绑本会话推送（免费；合规要求任何人可退订）。 */
+export async function unbindText(ctx = {}) {
+  if (typeof ctx.unbind !== "function") return "解绑失败：当前通道暂不支持解绑，请在电脑的「远程访问」里关闭该通道。";
+  let r;
+  try { r = await ctx.unbind(); } catch (e) { r = { ok: false, message: e && e.message ? e.message : String(e) }; }
+  if (r && r.ok === true) return "✅ 已解绑：这台电脑不再向本会话推送通知。想重新接收，发任意消息即可重新绑定。";
+  return `解绑失败：${truncateTitle((r && (r.message || r.reason)) || "未知错误", 60)}`;
+}
+
+/**
+ * 执行一条命令（**命中即返回 handled:true，调用方直接回复 text 并 return，绝不进模型**）。
+ *
+ * @param {{text:string, ctx:object}} args
+ *   ctx 契约（各通道按自己能力提供，缺的降级）：
+ *   · caps[]、tier、appUrl、channelLabel
+ *   · sessions(): Promise<[{sessionId,title,updatedAt,running}]>
+ *   · currentSessionId(): string、currentSessionTitle?: string、activeSessionId?
+ *   · cancelSession({sessionId})、switchSession({sessionId,title})、unbind()
+ *   · statusSnapshot(): Promise<{connected,authenticated,state,lastError,tier,usage,messagesPerMonth,remainingMessages,currentSessionTitle,currentSessionId}>
+ * @returns {Promise<{handled:boolean, ok?:boolean, gated?:boolean, command?:string, text?:string, rows?:Array}>}
+ */
+export async function executeImCommand({ text, ctx = {} } = {}) {
+  const cmd = parseImCommand(text);
+  if (!cmd) return { handled: false };
+  const caps = Array.isArray(ctx.caps) ? ctx.caps : [];
+  const known = IM_COMMANDS.find((c) => c.name === cmd.name);
+  if (!known) return { handled: true, ok: false, command: cmd.name, text: unknownCommandText(cmd, ctx) };
+  if (!commandAllowed(known, caps)) {
+    return { handled: true, ok: false, gated: true, command: known.name, text: upgradeText(known.name, ctx) };
+  }
+  try {
+    switch (known.name) {
+      case "/help":
+        return { handled: true, ok: true, command: known.name, text: helpText(ctx) };
+      case "/status":
+        return { handled: true, ok: true, command: known.name, text: await statusText(ctx) };
+      case "/stop":
+        return { handled: true, ok: true, command: known.name, text: await stopText(ctx) };
+      case "/unbind":
+        return { handled: true, ok: true, command: known.name, text: await unbindText(ctx) };
+      case "/ls": {
+        const r = await lsText(ctx);
+        return { handled: true, ok: true, command: known.name, text: typeof r === "string" ? r : r.text, rows: typeof r === "string" ? [] : r.rows };
+      }
+      case "/use":
+        return { handled: true, ok: true, command: known.name, text: await useText(ctx, cmd.arg) };
+      default:
+        return { handled: true, ok: false, command: known.name, text: unknownCommandText(cmd, ctx) };
+    }
+  } catch (e) {
+    return {
+      handled: true,
+      ok: false,
+      command: known.name,
+      text: `命令执行失败：${truncateTitle(e && e.message ? e.message : e, 60)}。可以到电脑上看一眼，或稍后再试。`
+    };
+  }
+}
+
+/** 能力表（导出方便各通道显示"会员功能"标记；单一真相源）。 */
+export const IM_COMMAND_CAPABILITY_TABLE = WECHAT_CAPABILITY_TABLE;
+
+/**
+ * 切换会话时写 `im-bots.json` 对应通道的 `sessionId/sessionTitle`（0600 原子写，保留其它段）。
+ * 各通道 controller 会热更新并在下一次入站用新会话。
+ */
+export function writeImBotsSession(relayDir, channel, { sessionId, sessionTitle } = {}) {
+  const dir = String(relayDir || "");
+  const ch = String(channel || "");
+  if (!dir || !ch) return { ok: false, reason: "no_target" };
+  const sid = String(sessionId || "").trim();
+  if (!sid) return { ok: false, reason: "no_session_id" };
+  try {
+    const file = path.join(dir, IM_BOTS_FILE);
+    const prev = readJsonFile(file);
+    const base = prev && typeof prev === "object" && !Array.isArray(prev) ? prev : {};
+    const cur = base[ch] && typeof base[ch] === "object" ? base[ch] : {};
+    atomicWriteJson(file, {
+      ...base,
+      version: 1,
+      [ch]: { ...cur, sessionId: sid, sessionTitle: truncateTitle(sessionTitle || "", 60) }
+    }, { onWarn: () => { /* 静默 */ } });
+    return { ok: true };
+  } catch (e) {
+    return { ok: false, reason: e && e.message ? e.message : String(e) };
+  }
+}

package/runtime/clients/dsh-remote/wecom-bot.mjs

@@ -53,6 +53,9 @@ import WebSocket from "ws";
 import { createEventSubscriber, NODE_KINDS } from "./dsh-events.mjs";
 // 通道感知格式化（2026-11-08：企微/钉钉 markdown 不支持表格，发前统一适配；飞书/微信各有分支）
 import { formatForChannel } from "./im-format.mjs";
+// 命令层（2026-11-08）：/help /status /stop /ls /use /unbind 在**进模型前**拦下执行；
+// 解析/文案/能力门禁三家共用（与会员升级文案同口径）。
+import { executeImCommand, writeImBotsSession } from "./im-commands.mjs";
 // 会员能力表 = **单一真相源**：直接复用微信通道那套（WECHAT_CAPABILITY_TABLE / limitsFor / grantsCap），
 // 不另造一套。企微/飞书/钉钉将来都套同一套判定（见 research/.../im-channel-membership-design.md）。
 import {
@@ -716,8 +719,8 @@ export function createWecomBot(options = {}) {
   const approvalCardTtlMs = positiveNumber(options.approvalCardTtlMs, APPROVAL_CARD_TTL_MS);
   const onApprovalDecision = typeof options.onApprovalDecision === "function" ? options.onApprovalDecision : null;
   // 会话可选绑定（task-24）：配置固定的会话（空 = 跟随活跃会话）
-  const configuredSessionId = String(options.configuredSessionId || "").trim();
-  const configuredSessionTitle = truncateText(options.configuredSessionTitle || "", 60);
+  let configuredSessionId = String(options.configuredSessionId || "").trim();
+  let configuredSessionTitle = truncateText(options.configuredSessionTitle || "", 60);
   // ── 会员判定（2026-11-07 业主拍板：通知免费、审批免费、互动半阉割）──
   // capsProvider 由 bridge 注入（复用微信通道的 resolveWechatTier：字符串档位或 {plan,caps,limits,rev}）；
   // 拿不到 / 未注入 → **按 free fail-closed**。
@@ -1367,8 +1370,87 @@ export function createWecomBot(options = {}) {
   }
 
   /** 把入站文本转给 DSH 会话（尽力，失败给用户一句人话）。 */
+  /**
+   * 命令层（三家共用 `im-commands.mjs`）：命中返回 true（已回复，调用方直接 return）。
+   * 回复走被动回复/主动推送（replyText），不经过模型、不计额度。
+   */
+  async function handleCommand(frame, info) {
+    const text = String((info && info.text) || "");
+    if (!/^\s*\//.test(text)) return false; // 快路径：非命令不构造 ctx
+    const cmd = await executeImCommand({
+      text,
+      ctx: {
+        caps: capsNow(),
+        tier: tierNow(),
+        appUrl,
+        channelLabel: "企业微信",
+        sessions: async () => {
+          try { await refreshSessions({ force: true }); } catch { /* 忽略 */ }
+          return sessionList.map((x) => ({ sessionId: x.id, title: x.title, updatedAt: x.updatedAt, running: false }));
+        },
+        currentSessionId: () => {
+          const known = boundSessionId || activeSession.id || "";
+          if (known) return known;
+          if (configuredSessionId && canCap("sessions")) return configuredSessionId;
+          if (sessionList.length) return sessionList[0].id;
+          const sub = subscriber;
+          try {
+            if (sub && typeof sub.sessions === "function") {
+              const ids = sub.sessions();
+              if (Array.isArray(ids) && ids.length) return String(ids[0]);
+            }
+          } catch { /* 忽略 */ }
+          return "";
+        },
+        currentSessionTitle: () => titleOfSession(boundSessionId || activeSession.id, activeSession.title || ""),
+        cancelSession: async ({ sessionId }) => {
+          const sub = subscriber;
+          if (!sub || typeof sub.cancelSession !== "function") return { ok: false, message: "订阅器未就绪" };
+          try {
+            const r = await sub.cancelSession({ sessionId });
+            return r && typeof r === "object" ? r : { ok: Boolean(r) };
+          } catch (e) { return { ok: false, message: e && e.message ? e.message : String(e) }; }
+        },
+        switchSession: async ({ sessionId, title }) => {
+          const r = writeImBotsSession(relayDir, "wecom", { sessionId, sessionTitle: title });
+          if (r.ok) {
+            configuredSessionId = sessionId;
+            configuredSessionTitle = truncateText(title || "", 60);
+            writeStatus();
+          }
+          return r;
+        },
+        unbind: async () => {
+          state.boundChatId = "";
+          writeStatus();
+          return { ok: true };
+        },
+        statusSnapshot: async () => ({
+          connected: state.connected === true,
+          authenticated: state.authenticated === true,
+          state: state.connected ? "connected" : "idle",
+          lastError: state.lastError || "",
+          tier: tierNow(),
+          usage: { month: monthKey(), messages: usageThisMonth() },
+          messagesPerMonth: messageLimitNow(),
+          remainingMessages: messageLimitNow() ? Math.max(0, messageLimitNow() - usageThisMonth()) : null,
+          currentSessionId: boundSessionId || activeSession.id || "",
+          currentSessionTitle: titleOfSession(boundSessionId || activeSession.id, activeSession.title || "")
+        })
+      }
+    });
+    if (!cmd || !cmd.handled) return false;
+    replyText(frame, cmd.text);
+    emitter.emit("command", { ...info, command: cmd.command, ok: cmd.ok === true, gated: cmd.gated === true });
+    log.info(`命令 ${cmd.command}${cmd.gated ? "（会员闸拦截）" : ""} 已回复（不转模型）`);
+    return true;
+  }
+
   async function dispatchInbound(frame, info) {
     const sub = subscriber;
+    // ⓪ 命令层：命中即执行并回复，**绝不进模型**，也不计入额度（/stop、/unbind 永远免费）
+    const cmd = await handleCommand(frame, info);
+    if (cmd) return;
     // ① 会员闸（通知/审批免费；派活受能力与月度额度约束，fail-closed）
     const gated = await membershipGate(frame, info);
     if (gated) return;

package/runtime/dsh-setup.mjs

@@ -149,7 +149,7 @@ function findDepWs(startDir) {
  * 漏同步就会出现「入口脚本在、依赖不在」的半装运行时（插件半据此判定「运行环境已就绪」，
  * 却永远起不来 bridge —— 2026-09-23 用户反馈的现场）。`src/channel-ref.mjs` 同理（本安装器也 import）。
  */
-const RUNTIME_CLIENT_FILES = ["mobile-adapter.mjs", "dsh-bridge.mjs", "e2ee-shim.mjs", "e2ee-client.mjs", "e2ee-shim-script.js", "mobile-adapter.test.mjs", "wechat-channel.mjs", "dsh-events.mjs", "wechat-runtime.mjs", "wecom-bot.mjs", "im-format.mjs", "dingtalk-bot.mjs", "dingtalk-auth.mjs", "feishu-bot.mjs", "src/lifecycle.mjs", "src/channel-ref.mjs"];
+const RUNTIME_CLIENT_FILES = ["mobile-adapter.mjs", "dsh-bridge.mjs", "e2ee-shim.mjs", "e2ee-client.mjs", "e2ee-shim-script.js", "mobile-adapter.test.mjs", "wechat-channel.mjs", "dsh-events.mjs", "wechat-runtime.mjs", "wecom-bot.mjs", "im-format.mjs", "dingtalk-bot.mjs", "dingtalk-auth.mjs", "im-commands.mjs", "feishu-bot.mjs", "src/lifecycle.mjs", "src/channel-ref.mjs"];
 
 /**
  * 把"客户端脚本"补齐到配置目录。