dsh-dingtalk-channel

Drive a full AI agent right from DingTalk without a public IP, webhook endpoint, or extra server. dsh-dingtalk-channel connects a DingTalk enterprise bot into DeepSeek Harness via the official Stream mode (WebSocket long-lived connection). A private message or an @-mention in a group triggers a complete agent session equipped with bash, file read/write, and skill loading. The intermediate tool invocations stay silent in the thread; only the final Markdown answer lands in the conversation.

The design philosophy favors light feedback and heavy results: each incoming message gets an instant thinking emoji to acknowledge receipt, tool calls (bash, read, edit) never flood the chat, and the emoji is auto-removed once the reply arrives. Access control is handled through sender allowlists for private chats, group allowlists, and an optional requireMention gate. When the agent needs approval you simply reply Allow once or Deny right in the conversation. Session commands like /stop, /new, and /status keep you inside the IM client, the SDK auto-reconnects on drops, and all errors are surfaced in host logs and process stderr for easy debugging.

Built for developers and small teams who already run DeepSeek Harness locally and want to invoke agent capabilities from their daily IM workflow without switching windows. The entire setup is a one-time DingTalk developer-console app (ClientID plus ClientSecret), followed by adding the bot to a trusted group or DM. Because the chat agent inherits the full local permissions of the host session—shell, filesystem, network—limit the bot to people and groups you trust.