dsh-remote-wecom 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Luke
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/NOTICE.md

@@ -0,0 +1,11 @@
+# Source notices
+
+DSH Remote WeCom is distributed under the [MIT License](LICENSE), copyright 2026 Luke.
+
+## Included source
+
+- `lib/core/` (session engine, commands, cards, WeCom transport, configuration, directory aliases and artifact filtering) was adapted from [pi-remote-wecom](https://github.com/lukeinx/pi-remote-wecom) `0.3.17` (npm `pi-remote-wecom@0.3.17`), also copyright 2026 Luke under MIT. Its own included-source notices (pi-remote, pi-tab-title) apply to the parts carried over; the tab-title module itself is not included here.
+
+## Dependencies
+
+The WeCom transport uses the official [@wecom/aibot-node-sdk](https://github.com/WecomTeam/aibot-node-sdk), installed as a dependency. DeepSeek Harness modules are supplied by the host at runtime; `@deepseek-ai/dsh` is a development dependency used only by the end-to-end test. Dependency packages retain their own licenses; see their installed package contents and the lockfile metadata.

package/README.md

@@ -1,3 +1,115 @@
-# Temporary Holding Version
+# dsh-remote-wecom
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+[![npm](https://img.shields.io/npm/v/dsh-remote-wecom)](https://www.npmjs.com/package/dsh-remote-wecom)
+
+> Control DeepSeek Harness Desktop sessions from WeCom (企业微信) on your phone. Docs and commands are in Chinese.
+
+在手机企业微信里遥控 DeepSeek Harness Desktop：发消息、收结果、切会话和模型、审批与回答提问、取回产物。插件跑在 Desktop 里，自己持有企微智能机器人的长连接。
+
+## 要求
+
+- DeepSeek Harness Desktop（DSH `>=0.2.0-rc.2`）
+- Node.js `>=22.19.0`（命令行用）
+- 一个专用的企业微信智能机器人。同一个机器人只能有一条长连接，不要与其他程序共用
+
+## 安装
+
+Desktop 运行时会锁住 `desktop` profile，`dsh plugin add` 用不了，需要手动加：
+
+1. 退出 Desktop。
+2. 在 `~/.dsh/profiles/desktop/package.json` 里追加（保留已有条目）：
+
+   ```json
+   {
+     "dependencies": { "dsh-remote-wecom": "^0.1.0" },
+     "dsh": { "profile": { "bundles": ["…", "dsh-remote-wecom"] } }
+   }
+   ```
+
+3. 安装并启动：
+
+   ```sh
+   cd ~/.dsh/profiles/desktop
+   node "/Applications/DeepSeek Harness.app/Contents/Resources/runtime/primary-runtime/dependencies/pnpm/bin/pnpm.mjs" install
+   open -a "DeepSeek Harness"
+   ```
+
+升级时改版本号，再重复第 3 步。
+
+## 绑定
+
+打开 Desktop「设置 → 企微远程」：
+
+1. 用企业微信扫码，自动创建机器人并连接。
+2. 10 分钟内给机器人发一条单聊消息，发送人即成为主人；过了窗口就发页面上的 6 位绑定码。之后只接主人的单聊。
+
+同一页可以换机器人、解绑、选新会话位置、设置手机审批超时。扫不了码时可以手动填 BotID / Secret。
+
+## 手机上用
+
+选中会话后直接发消息；引用某条推送回复，消息会发给该推送所属的会话。图片和文件可以先发，5 分钟内再补说明。任务完成后自动推送结果；审批和提问同时出现在手机和 Desktop，谁先答用谁的。
+
+| 命令 | 作用 |
+|---|---|
+| `活跃会话` / `ls` | 切换到运行中、置顶或最近活跃的会话 |
+| `历史会话 [关键词]` / `h` | 查找并继续历史会话 |
+| `创建会话 [工作区] [消息]` / `n` | 新建会话并发送首条消息 |
+| `工作区 [名称]` / `cd` | 选择新会话的默认位置 |
+| `插话 内容` / `steer` | 插进正在运行的这一轮 |
+| `目标 [描述]` / `goal` | 设置长期目标，自动续跑到完成 |
+| `模型 [关键词]` / `model` | 切换模型 |
+| `思考强度 [强度]` / `think` | 切换思考强度 |
+| `权限模式 [模式]` / `perm` | 切换当前会话的权限模式 |
+| `压缩` / `compact` | 压缩当前会话上下文 |
+| `产物` / `art` | 取回当前会话生成的文件 |
+| `关注` / `取关` | 电脑上发起的任务也推到手机 / 只推手机发起的 |
+| `状态` / `停止` / `重启` / `帮助` | 查看状态、中断任务、重连、查看全部命令 |
+
+中文命令和参数之间要有空格：`模型 high` 是命令，`模型high` 会当普通消息发出。
+
+## 离线看门狗（可选，macOS）
+
+插件随 Desktop 启停，Desktop 退出后就没人接企微了。看门狗是一个独立的 launchd 进程：发现插件不在线时暂存消息、在后台拉起 Desktop，插件上线后自动处理。
+
+```sh
+alias dsh-remote-wecom='node ~/.dsh/profiles/desktop/node_modules/dsh-remote-wecom/bin/dsh-remote.mjs'
+dsh-remote-wecom watchdog install     # 升级插件或换 Node 后要重新执行
+dsh-remote-wecom watchdog status
+dsh-remote-wecom watchdog uninstall
+```
+
+## 命令行
+
+设置页之外的备用入口（`dsh-remote-wecom` 即上面的 alias）：
+
+| 命令 | 作用 |
+|---|---|
+| `setup [--bot-id ID --secret S]` | 写入机器人凭证并生成绑定码 |
+| `bind` | 解除当前主人，生成新绑定码 |
+| `status` | 查看配置、绑定状态和最近日志 |
+| `alias [名称 目录 \| rm 名称]` | 管理目录别名，供「创建会话」「工作区」使用 |
+| `watchdog install\|uninstall\|status` | 离线看门狗 |
+
+数据在 `~/.dsh/integrations/dsh-remote-wecom/`，`config.json` 权限为 600。可选配置和实现细节见 [docs/DESIGN.md](docs/DESIGN.md)。
+
+## 让 Agent 代装
+
+- 改 profile 前先退出 Desktop，只追加条目，不动已有的 `dependencies` 和 `bundles`。
+- 扫码和绑定由用户在手机上完成；不读取、不打印 Secret。
+- 用 `dsh-remote-wecom status` 验证：出现 `Secret：已配置` 和 `主人：已绑定` 即完成。
+- 改本仓库代码前先读 [AGENTS.md](AGENTS.md)。
+
+## 开发
+
+```sh
+git clone https://github.com/lukeinx/dsh-remote-wecom.git && cd dsh-remote-wecom
+npm install
+npm run check      # 打包设置页 + 语法检查 + 单元测试
+npm run test:e2e   # 隔离的 DSH + 假企微，约 30 秒
+```
+
+本地调试时把 profile 里的依赖改成 `"dsh-remote-wecom": "link:<仓库绝对路径>"`，改完代码重启 Desktop。
+
+## 许可
+
+MIT，见 [LICENSE](LICENSE) 与 [NOTICE.md](NOTICE.md)。

package/bin/dsh-remote.mjs

@@ -0,0 +1,217 @@
+#!/usr/bin/env node
+// 电脑端配置工具：只读写数据目录，运行中的插件约 5 秒内发现配置变化并重连。
+import fs from 'node:fs';
+import path from 'node:path';
+import readline from 'node:readline/promises';
+import {parseArgs} from 'node:util';
+import {BIND_FILE, BIND_TTL_MS, CONFIG_FILE, VERSION, applyCredentials, defaultDataDir, hasCredentials, loadConfig, readUserConfig, resetOwner} from '../lib/core/config.mjs';
+import {checkName, expandDir, loadAliases, missingDirs, saveAliases, tildeDir} from '../lib/core/aliases.mjs';
+import {execFileSync} from 'node:child_process';
+import {fileURLToPath} from 'node:url';
+import {createWatchdog, heartbeatAge, heartbeatFresh, spoolCount, watchdogState} from '../lib/core/watchdog.mjs';
+
+const USAGE = `dsh-remote-wecom ${VERSION}
+
+用法：
+  dsh-remote-wecom setup [--bot-id ID --secret SECRET]   写入机器人凭证并生成绑定码（不带参数则交互输入）
+  dsh-remote-wecom bind                                  重新生成绑定码（解除当前主人）
+  dsh-remote-wecom status                                查看配置与最近日志
+  dsh-remote-wecom alias [名称 目录 | rm 名称]           查看或修改目录别名
+  dsh-remote-wecom watchdog install|uninstall|status     Desktop 离线看门狗（launchd）：暂存消息并后台拉起 Desktop
+
+选项：
+  --dir 目录   数据目录，默认 $DSH_HOME/integrations/dsh-remote-wecom（DSH_HOME 默认 ~/.dsh）`;
+
+const LOG_TAIL = 20;
+
+function printCode(code) {
+  console.log(`\n绑定码：${code}（${BIND_TTL_MS / 60000} 分钟内有效）`);
+  console.log('在企业微信里打开与该机器人的单聊，发送这 6 位数字完成绑定。');
+}
+async function prompt(question, {secret = false} = {}) {
+  const rl = readline.createInterface({input: process.stdin, output: process.stdout, terminal: true});
+  if (secret) rl._writeToOutput = s => { if (/\n|\r/.test(s) || s.startsWith(question)) process.stdout.write(s.startsWith(question) ? question : s); };
+  try { return (await rl.question(question)).trim(); } finally { rl.close(); }
+}
+
+async function setup(dir, values) {
+  const user = readUserConfig(dir);
+  let botId = values['bot-id'];
+  let secret = values.secret;
+  if (!botId && !secret) {
+    if (!process.stdin.isTTY) throw new Error('非交互环境请用 setup --bot-id ID --secret SECRET');
+    botId = await prompt(`BotID${user.botId ? `（回车沿用 ${user.botId}）` : ''}：`) || user.botId;
+    secret = await prompt('Secret：', {secret: true});
+    process.stdout.write('\n');
+  }
+  if (!botId || !secret) throw new Error('BotID 和 Secret 都需要提供');
+  const {bound, code} = applyCredentials(dir, {botId, secret});
+  console.log(`配置已保存：${path.join(dir, CONFIG_FILE)}`);
+  if (bound) {
+    console.log('已绑定主人，保持不变；需要换绑时执行 dsh-remote-wecom bind。');
+    return;
+  }
+  printCode(code);
+  console.log('运行中的 DeepSeek Harness 会在约 5 秒内自动连接；若未安装插件，请先按 README 安装并重启 Desktop。');
+}
+
+function bind(dir) {
+  const {unbound, code} = resetOwner(dir);
+  if (unbound) console.log('已解除原主人的绑定。');
+  printCode(code);
+}
+
+function status(dir) {
+  console.log(`dsh-remote-wecom ${VERSION}`);
+  console.log(`数据目录：${dir}`);
+  let cfg;
+  try { cfg = loadConfig(dir); }
+  catch (e) { console.log(`配置：无效（${e.message}）`); return; }
+  if (!hasCredentials(cfg)) console.log('配置：未配置机器人，运行 dsh-remote-wecom setup');
+  else {
+    console.log(`BotID：${cfg.botId}`);
+    console.log('Secret：已配置');
+    console.log(`主人：${cfg.ownerUserId ? '已绑定' : '未绑定'}`);
+  }
+  try {
+    const b = JSON.parse(fs.readFileSync(path.join(dir, BIND_FILE), 'utf8'));
+    const left = b.expiresAt - Date.now();
+    console.log(`绑定码：${left > 0 ? `有效，剩余 ${Math.ceil(left / 60000)} 分钟` : '已过期，运行 dsh-remote-wecom bind 重新生成'}`);
+  } catch {}
+  console.log(`审批超时：${Math.round(cfg.remoteConfirmTimeoutMs / 1000)} 秒后${cfg.remoteConfirm === 'ask' ? '拒绝' : '允许'}${cfg.remoteConfirm === 'allow' ? '（remoteConfirm=allow，不询问）' : ''}`);
+  let pending = 0;
+  try { pending = fs.readdirSync(path.join(dir, 'outbox')).filter(f => f.endsWith('.json')).length; } catch {}
+  if (pending) console.log(`待发消息：${pending} 条`);
+  let lines = [];
+  try { lines = fs.readFileSync(path.join(dir, 'bridge.log'), 'utf8').trimEnd().split('\n').slice(-LOG_TAIL); } catch {}
+  console.log(lines.length ? `\n最近日志：\n${lines.join('\n')}` : '\n还没有日志：插件未运行过，或 Desktop 未重启。');
+}
+
+function alias(dir, args) {
+  let table = loadAliases(dir);
+  if (args[0] === 'rm' && args[1]) {
+    const name = checkName(args[1]);
+    if (!(name in table)) throw new Error(`没有别名「${name}」`);
+    delete table[name];
+    table = saveAliases(dir, table);
+  } else if (args.length === 2) {
+    const name = checkName(args[0]);
+    table = saveAliases(dir, {...table, [name]: tildeDir(expandDir(args[1]))});
+  } else if (args.length) throw new Error('用法：dsh-remote-wecom alias 名称 目录 | alias rm 名称');
+  const rows = Object.entries(table);
+  const missing = new Set(missingDirs(table));
+  console.log(rows.length ? rows.map(([n, d]) => `${n} → ${d}${missing.has(n) ? '（目录不存在）' : ''}`).join('\n') : '还没有目录别名。');
+}
+
+const WATCHDOG_LABEL = 'com.dsh-remote-wecom.watchdog';
+const WATCHDOG_TICK_MS = 2000;
+const WATCHDOG_LOG = 'watchdog.log';
+const WATCHDOG_LOG_MAX = 1024 * 1024;
+const plistFile = () => path.join(process.env.HOME, 'Library', 'LaunchAgents', `${WATCHDOG_LABEL}.plist`);
+const domain = () => `gui/${process.getuid()}`;
+const xml = s => String(s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+
+function watchdogRun(dir) {
+  const file = path.join(dir, WATCHDOG_LOG);
+  const log = line => {
+    try {
+      if (fs.statSync(file, {throwIfNoEntry: false})?.size > WATCHDOG_LOG_MAX) fs.renameSync(file, `${file}.1`);
+      fs.appendFileSync(file, `${new Date().toISOString()} ${line}\n`, {mode: 0o600});
+    } catch {}
+  };
+  const dog = createWatchdog({dir, log});
+  log('看门狗启动');
+  const tick = () => { try { dog.tick(); } catch (e) { log(`tick 失败：${e?.message || e}`); } };
+  tick();
+  const timer = setInterval(tick, WATCHDOG_TICK_MS);
+  const quit = () => { clearInterval(timer); dog.stop(); setTimeout(() => process.exit(0), 300); };
+  process.on('SIGTERM', quit);
+  process.on('SIGINT', quit);
+}
+
+function desktopRunning() {
+  try { execFileSync('pgrep', ['-x', 'DeepSeek Harness'], {stdio: 'ignore'}); return true; } catch { return false; }
+}
+
+function watchdogInstall(dir, force) {
+  // 旧版插件不写心跳：此时装上看门狗会把正在运行的插件踢下线。
+  if (!force && desktopRunning() && !heartbeatFresh(dir))
+    throw new Error('DSH Desktop 正在运行，但插件没有心跳（可能是旧版本插件或插件未启用）。请先重启 Desktop 加载新版插件再安装；确认无误可加 --force。');
+  const args = [process.execPath, fileURLToPath(import.meta.url), 'watchdog', 'run', '--dir', dir];
+  const env = {PATH: '/usr/bin:/bin:/usr/sbin:/sbin', ...(process.env.DSH_HOME ? {DSH_HOME: process.env.DSH_HOME} : {})};
+  const plist = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key><string>${WATCHDOG_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+${args.map(a => `    <string>${xml(a)}</string>`).join('\n')}
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+${Object.entries(env).map(([k, v]) => `    <key>${k}</key><string>${xml(v)}</string>`).join('\n')}
+  </dict>
+  <key>RunAtLoad</key><true/>
+  <key>KeepAlive</key><true/>
+  <key>ProcessType</key><string>Background</string>
+  <key>StandardErrorPath</key><string>${xml(path.join(dir, 'watchdog.err'))}</string>
+</dict>
+</plist>
+`;
+  fs.mkdirSync(path.dirname(plistFile()), {recursive: true});
+  fs.mkdirSync(dir, {recursive: true, mode: 0o700});
+  try { execFileSync('launchctl', ['bootout', `${domain()}/${WATCHDOG_LABEL}`], {stdio: 'ignore'}); } catch {}
+  fs.writeFileSync(plistFile(), plist);
+  execFileSync('launchctl', ['bootstrap', domain(), plistFile()]);
+  console.log(`看门狗已安装并启动：${plistFile()}`);
+  console.log(`Node：${process.execPath}（升级或切换 Node 后请重新执行 watchdog install）`);
+}
+
+function watchdogUninstall() {
+  try { execFileSync('launchctl', ['bootout', `${domain()}/${WATCHDOG_LABEL}`], {stdio: 'ignore'}); } catch {}
+  fs.rmSync(plistFile(), {force: true});
+  console.log('看门狗已卸载。');
+}
+
+function watchdogStatus(dir) {
+  let loaded = false;
+  try { execFileSync('launchctl', ['print', `${domain()}/${WATCHDOG_LABEL}`], {stdio: 'ignore'}); loaded = true; } catch {}
+  console.log(`看门狗：${loaded ? '已安装并运行' : fs.existsSync(plistFile()) ? '已安装但未加载' : '未安装'}`);
+  const age = heartbeatAge(dir);
+  console.log(`插件心跳：${Number.isFinite(age) ? `${Math.round(age / 1000)} 秒前` : '无'}`);
+  const wd = watchdogState(dir);
+  if (wd) console.log(`企微连接：${wd.connected ? '看门狗持有' : '看门狗未连接'}（${new Date(wd.at).toLocaleString()}）`);
+  const n = spoolCount(dir);
+  if (n) console.log(`暂存消息：${n} 条`);
+  let lines = [];
+  try { lines = fs.readFileSync(path.join(dir, WATCHDOG_LOG), 'utf8').trimEnd().split('\n').slice(-LOG_TAIL); } catch {}
+  if (lines.length) console.log(`\n最近日志：\n${lines.join('\n')}`);
+}
+
+function watchdog(dir, [sub = 'status'], force) {
+  if (process.platform !== 'darwin' && sub !== 'run') throw new Error('看门狗仅支持 macOS（launchd）');
+  if (sub === 'run') watchdogRun(dir);
+  else if (sub === 'install') watchdogInstall(dir, force);
+  else if (sub === 'uninstall') watchdogUninstall();
+  else if (sub === 'status') watchdogStatus(dir);
+  else throw new Error('用法：dsh-remote-wecom watchdog install|uninstall|status');
+}
+
+try {
+  const {values, positionals} = parseArgs({allowPositionals: true, options: {
+    'bot-id': {type: 'string'}, secret: {type: 'string'}, dir: {type: 'string'}, force: {type: 'boolean'}, help: {type: 'boolean', short: 'h'},
+  }});
+  const [command = 'help', ...rest] = positionals;
+  const dir = values.dir ? path.resolve(expandDir(values.dir)) : defaultDataDir();
+  if (values.help || command === 'help') console.log(USAGE);
+  else if (command === 'setup') await setup(dir, values);
+  else if (command === 'bind') bind(dir);
+  else if (command === 'status') status(dir);
+  else if (command === 'alias') alias(dir, rest);
+  else if (command === 'watchdog') watchdog(dir, rest, values.force);
+  else { console.log(USAGE); process.exitCode = 2; }
+} catch (e) {
+  console.error(e.message);
+  process.exitCode = 1;
+}

package/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: dsh-remote-wecom
+      name: dsh-remote-wecom