@deepseek-ai/dsh-lark-bridge

⚙️ Configuration

Field	Default	Meaning
appId, appSecret	first-boot QR registration	Feishu/Lark app credentials
domain	Feishu	Open-platform domain; Lark: https://open.larksuite.com
locale	auto	Command language: auto (Lark→en, Feishu→zh) / zh / en
cwd	host process cwd	Absolute workspace directory for chat agents
provider, model	host agentDefaultModel	Model routing for chat agents
preset	roster default	Agent preset chat agents join
sessionScope	chat	chat / chat-thread / chat-sender
output	cot	cot (native thinking process) or stream (typewriter card)
showProcess	true	Show reasoning and tool calls
reactionFeedback	true	Live reaction feedback
hideProcessWhenDone	false	Hide finished process (cot only)
attachImages	false	Pass chat images to the model
syncSlashCommands	true	Publish commands to bot's / panel (reconciles: creates missing, removes stale, refreshes drifted descriptions)
autoResumeGoals	false	Re-arm an active goal when a session returns after a restart
approvalReminderMs	0	Nudge the chat when an approval card is unanswered this many ms (0 = off)
denyTools	[]	Tools chat agents may not call
requireMention	true	In groups, only respond when @-mentioned
senderAllowlist	[]	Open ids allowed to DM
groupAllowlist	[]	Only these oc_… group chats when non-empty
approvers	[]	Open ids allowed to answer approvals
outbound.allowedFileDirs	unset → file sending disabled	Directories send_file may read local paths from. Required for delivering generated artifacts (HTML reports, screenshots, documents). Example: outbound: { allowedFileDirs: ['/home/user/work'] }

⚠️ File delivery is default-deny. Without outbound.allowedFileDirs, send_file with a local path fails with local file source requires outbound.allowedFileDirs to be configured — the agent appears to send, nothing arrives. URLs and raw buffers always work.

Credentials resolve in three layers, later wins: bundle patch config → settings document plugin section → first-boot QR registration.