Connect DeepSeek Harness to Feishu / Lark: dsh-im tutorial

Quick start

If DSH is already installed, start at step 1. The end result is a message entering local DSH, a completed DSH task, and a reply returning to the same platform.

1. Install dsh-im.
2. Restart dsh web and open Settings → IM Bot.
3. Choose Feishu / Lark and complete QR or credential binding.
4. Send /status, then send a read-only task.

Step 1 — install dsh-im

Run this on the same computer where DSH is installed. The author recommends the published npm release.

dsh plugin --profile web add -w @xmanrui/dsh-im

After it finishes, restart the Web Profile:

dsh web

If the terminal cannot find dsh, prefix the command with npx @deepseek-ai/dsh. Do not use the GitHub-source install by default; use it only for unreleased code:

npx -y github:xmanrui/dsh-im install

Refresh the browser and open Settings → IM Bot. Full instructions: dsh-im README.

Step 2 — connect Feishu / Lark

The main Feishu route uses dsh-im's QR or App ID/App Secret binding. Use dsh-lark only if you want a Feishu/Lark-focused alternative.

1. Open DSH Settings → IM Bot → Feishu and choose QR creation or manual binding.
2. For a manual app, enable the bot capability, subscribe to im.message.receive_v1 and choose long-connection event delivery.
3. Publish/install the app, enter its App ID and App Secret in DSH, and confirm the card is online.
4. Require an @mention in groups first; verify with one test account in a DM.

Platform reference: Feishu event subscription. Alternative plugin: dsh-lark.

Step 3 — send the first task

In the Feishu DM with the Bot, send these three messages in order. The first checks the connection, the second clears the old session, and the third runs a read-only task.

/status
/new
只读任务：列出当前工作区根目录的文件名，不要修改任何文件。

1. `/status` should return the connection status between the Bot and DSH.
2. The third message should receive a final reply and create a new Session in DSH Web.
3. Repeat once with an unauthorized account and confirm that it does not trigger a task.

Feishu / Lark troubleshooting

Security

• Tokens, App Secrets, QR sessions and the WhatsApp auth directory are credentials. Never commit or publish them.
• Start with a workspace that has no production secrets and keep access minimal. An IM message can trigger local files, commands and tools.
• dsh-im is a community plugin. Re-read its README and changelog before upgrades; it is not an official platform integration.