dsh-feishu-writer
The missing "write" side of Feishu for DeepSeek Harness — let your agent create Feishu docs, spreadsheets, Bitables and wiki spaces.
飞书"读"的插件有了、"聊"的插件也有了，"写"是空白——这个插件让 DeepSeek Harness 的 Agent 把产出直接写进飞书。
What it does
Registers 4 model-facing tools:
| Tool | Capability | Returns |
|---|
feishu_write_doc | Create a Feishu doc (Markdown body) | {"document_id":"...","url":"..."} |
feishu_write_sheet | Create a spreadsheet, optionally pre-filled with a 2D array | sheet info + written range |
feishu_write_bitable | Create a BitTable (BaseApp) in a workspace | {"app_token":"...","url":"..."} |
feishu_write_wiki | Create a wiki space | {"space_id":"...","name":"..."} |
Install
dsh plugin add <owner>/dsh-feishu-writer
Prerequisites (required)
- Install the official Feishu/Lark CLI:
npx @larksuite/cli@latest install
- Log in once:
lark-cli auth login --recommend (opens a browser authorization page)
Windows 可执行文件解析：插件从不经过 shell 执行 lark-cli（注入安全），但 Windows 上 npm 装的
lark-cli 只有 .cmd 垫片、无法被 spawn 直接执行。插件按以下顺序解析真正的 lark-cli.exe：
LARK_CLI_BIN 环境变量（指向 lark-cli.exe 完整路径，最高优先级）；- PATH 中的
lark-cli.exe；
- npm 全局安装位置
%APPDATA%\npm\node_modules\@larksuite\cli\bin\lark-cli.exe。
解析失败时工具返回明确的修复提示，不会崩溃。
If the plugin detects a missing CLI or an expired login, the tool call fails with a clear
fix-up hint instead of crashing.
Usage examples
"帮我写一份本周周报，存到飞书文档"
agent → feishu_write_doc(title="第42周周报", content="# 本周进展\n- 完成 RAG 检索优化\n- 上线评测闭环")
agent → {"document_id":"...","url":"https://xxx.feishu.cn/docx/..."}
"把这些数据整理成飞书表格"
agent → feishu_write_sheet(title="季度数据", values='[["月份","营收"],["Q1",120],["Q2",150]]')
"把研究结果沉淀到知识库"
agent → feishu_write_wiki(name="AI 应用开发笔记", description="RAG/Agent/评测 实战沉淀")
BitTable needs a workspace token（在飞书多维表格工作区 URL 中获取，形如 base/workspace/<token>）:
agent → feishu_write_bitable(name="项目看板", workspaceToken="GUs9soB...")
R2 权限披露（DSH-Store R2 级）
本插件属于 R2 级（外部进程 + 网络 + 凭据），逐项披露如下：
| 能力 | 说明 |
|---|
| 外部进程 | shell out 调用 lark-cli（飞书官方 CLI，MIT）。不使用 shell 解释器：参数数组直传 spawn，模型/用户内容不会被解释为 shell 语法（注入安全） |
| 网络 | 由 lark-cli 发起对飞书 OpenAPI 的 HTTPS 调用 |
| 凭据 | 完全复用 lark-cli 的 OAuth 凭据（存于系统 keychain），本插件不读取、不存储、不转发任何 token |
| 外部依赖 | @larksuite/cli（npm，飞书官方维护）；建议固定版本 |
Security & boundaries
- All tool content is passed as
spawn argv or a temp file — never through a shell.
- Tools only create objects; they do not delete, share, or modify existing content (write-only scope).
- Errors (not installed / expired login / API failure) surface as actionable messages with fix-up hints.
- Review the objects created before sharing: wiki spaces default to private.
Development
npm install
npm run typecheck
npm test
npm run build
npm pack
Local mount & verify:
dsh plugin --profile web add ./dsh-feishu-writer-0.1.0.tgz
dsh --profile web --dump-config | grep feishu_write
dsh run "用 feishu_write_doc 创建一篇标题为测试的文档"
License
MIT. Uses the Feishu/Lark Open Platform via lark-cli — using those APIs requires
compliance with Feishu's terms and privacy policy.
