dsh-feishu-bot

Feishu (Lark) private-chat frontend for DeepSeek Harness: drive, monitor, and approve local agents from Feishu, sharing live and cold sessions with the Web GUI in the same process.

Status: M0–M5 code and documentation are complete; live Feishu acceptance remains deployment-owner work. Docs: design · milestone record · handoff · M0 verification record · weclaw lessons.

Commands (private chat)

• /new [cwd] — create a session under an allowed workspace and bind it
• /ls — numbered session list grouped by workspace; /use binds by number
• /use — bind an existing session
• /stop — cancel the running turn while retaining queued follow-ups
• /status / /release / /help
• Plain text goes to the bound session; progress is patched into a task card and committed replies return as durable green result cards.

Install (into an existing web profile)

dsh plugin --profile web add /path/to/dsh-feishu-bot
dsh --profile web --dump-config   # expect gateway, bridge, and invariant rows

Credentials: set FEISHU_APP_ID / FEISHU_APP_SECRET where the dsh credentials service reads them. No secrets in this repository.

Feishu console prerequisites (long-connection mode): subscribe the im.message.receive_v1 event with im:message.p2p_msg:readonly, and for approval cards enable the card.action.trigger callback; publish an app version after each change.

The bundle patch is fail-closed until the deployment profile supplies allowedOpenIds and allowedWorkspaces. A configured defaultWorkspace is validated during bridge load and must resolve inside an allowed root.