dsh-feishu-bridge: A Feishu Channel Bridge Plugin for DeepSeek Harness

What Does It Do?

dsh-feishu-bridge is a DSH plugin for DeepSeek Harness that bridges Feishu (Lark) chat with the harness, letting you message a bot and get agent turns back in the chat. It solves the problem of securely driving DSH from Feishu, with fail-closed allowlists, one-time pairing codes, webhook signature/timestamp/replay verification, and a daily canary against the latest SDK. This community plugin is not DeepSeek-official; it drives dsh entirely through its public Python SDK via a subprocess boundary, with no forked or patched harness code.

Core Features

• Feishu bot bridge: supports both ws and webhook transports; messages to the bot trigger a dsh agent turn and replies come back to the chat.
• Fail-closed security: with no allowlist configured, the bot answers no one; every message is rejected by design, with per-open_id and per-chat allowlists.
• One-time pairing code (/pair): a code printed at startup lets you add your open_id to the allowlist by sending /pair in a private chat, no restart needed, and the pairing persists to a local file.
• Strict webhook verification: validates signature, timestamp, and replay to prevent forged requests.
• Daily canary: runs daily against the latest SDK releases to catch breaking upstream changes within a day.

How to Use This Plugin?

After enabling it in DSH, set environment variables (such as Feishu app credentials and allowlist), then run the bridge. At startup, a one-time pairing code is printed to the console; send /pair <code> in a private Feishu chat to pair, and you can then chat with the bot. To adjust behavior, change environment variables for transport, allowlist, pairing timeout, and more.