China Enterprise IM Agent Frameworks

This page tracks open-source agent systems for ZoOL’s China enterprise IM assistant scenario: Feishu/Lark, WeCom, DingTalk, chat-triggered skills/tools, and scheduled/cron-triggered execution.

Current DeerFlow note

deerflow is a strong long-horizon agent runtime candidate: LangGraph/LangChain based, with sandboxing, memory, skills, MCP, sub-agents, and an IM gateway. Evidence for Feishu/Lark and WeCom is now relatively strong because it appears in README, config examples, and channel code.

However, for ZoOL’s specific enterprise IM requirement, gaps remain:

RequirementDeerFlow evidence as of 2026-08-24ConfidenceChange since 2026-08-08
Feishu / LarkREADME + config + feishu.py; domain config (PR #1535); thread continuity fix (#3285); card update throttling + thread topic fix (#3810); CLI lock fix (#4701); inbound attachment preservation (#4903); Lark app credential switching (#4703)high↑ attachment + credential fix
WeCom / 企业微信README + config + wecom.py; null quote field fix (#4069); websocket shutdown serialization (#4762)high↑ websocket fix
WeChat / 微信wechat.py merged (Tencent iLink/ClawBot protocol)medium-high
Telegramtelegram.py + README + config; streaming reply via placeholder editing (#3534); eventloop identity migration (#4815)high↑ eventloop fix
Slackslack.py + README + confighigh
Discorddiscord.py merged; mention-only mode, thread routing, typing indicators (#2842); typing task prevention after stop (#4752)medium-high↑ typing fix
DingTalk / 钉钉dingtalk.py merged (PR #2628); Stream Push SDK, AI Card streaming; leading mention strip (#4724)high↑ mention fix
Buzz (Nostr)buzz.py merged (PR #4649, 2026-08-05); replay dedup via seen-id store (#4888) — 8th IM channelmedium↑ reconnect fix
Chat-triggered skills/toolsSkills, tools, IM gateway exist; SkillStorage unified (#2613); first-principles workflow skill (#4398); Browser Live (#4719); extensions packaged mgmt + gateway contribution points (#4780)medium-high↑↑ extensions landed
Scheduled skill execution✅ RESOLVED! PR #3898 (scheduled tasks MVP) MERGED; + hardening (#4848 recursion_limit config, #4713 multi-instance recovery, #4785 timestamp)high↑ scheduler hardening
Enterprise auth/securityJWT+bcrypt+CSRF+user isolation merged; 429 bug FIXED; **MCP per-user credential injection (#4868) — resolves 3322; fine-grained RBAC (#3462) still openmedium-high↑↑ MCP credential landed
Memory architecture2 backends landed: OpenViking (#4707) + Honcho (#4730); OpenViking tools (#4745); hybrid fact eviction (#4789); cognitiveStyle (#3182) under reviewhigh↑↑ 2nd backend landed
PersistenceUnified SQLite/PostgreSQL with SQLAlchemy 2.0; stale connection fix; column reflection cache; timezone-aware timestampshigh
ObservabilityBuilt-in LangSmith + Langfuse; Monocle integration (#4024) — third tracing backendhigh
Embedded usageDeerFlowClient Python library; Hermes-like TUI terminal workbench (#3760)medium-high
v2.0.0 releaseOFFICIALLY RELEASED 2026-06-25 — 182 merged PRshigh
2.1.0 milestone48 open / 558 closed (~92.1%, up from 91.7%)high↑ nearing completion
2.2.0 milestoneCreated but empty (0/0) — scope not yet definedmedium
Model ecosystemStepFun reasoning, MiMo reasoning, MiniMax image/video/podcast/music; MiniMax Code as native ACP agent (#4846)medium-high↑ MiniMax Code
Runtime stabilityE2B sandbox capacity (#4575); MCP bring-up timeout (#4083); frontend perf bounds (#4622); run event stream contract (#4342); E2B upload bounds (#4842/#4812); concurrent-run budget (#4769); summarization preservation (#4882)high↑ multiple fixes
Sandbox providersDocker, K8s, local, E2B; + OpenSandbox provider (#4877) — 5thhigh↑↑ 5th provider
FrontendVoice dictation; Browser Live (#4719); code highlight streaming fix; artifact path stabilization; perf bounds (#4622); model loading failure surfacing (#4840); gateway reads auth (#4827)high↑ security + UX fixes

Initial recommendation

With DingTalk channel merged (PR #2628, 2026-04-30), DeerFlow now covers all four major Chinese IM channels (Feishu, WeCom, WeChat, DingTalk) plus 4 additional channels (Telegram, Slack, Discord, Buzz/Nostr) — 8 channels total. v2.0.0 was officially released on 2026-06-25, representing a major stability and feature-completeness milestone (182 merged PRs).

The #1 deployment blocker — scheduled/cron skill execution — is resolved (PR #3898, merged 2026-07-07), now with further hardening (multi-instance recovery #4713, configurable recursion_limit #4848).

The #2 blocker — memory contract — now has two pluggable backends (OpenViking #4707 + Honcho #4730), plus OpenViking tools (#4745) and hybrid fact eviction (#4789). The unified Memory Contract designed since RFC #1898 is now materially implemented.

The #3 gap — MCP per-user credential isolation (#3322) — is now resolved (PR #4868, per-user credential injection for shared MCP servers, merged 2026-08-23). A single HTTP/SSE MCP server can now serve multiple DeerFlow users each authenticated with their own credential.

2.1.0 milestone is at ~92.1% (48 open / 558 closed). The milestone is approaching completion — a 2.1.0 release is likely soon. 2.2.0 milestone exists but is empty (scope not yet defined).

Key remaining gaps: Fine-grained RBAC (#3462) is still open. Pluggable auth RFCs (#2470, #2471) remain in draft. Layered architecture refactoring (#2429) and SkillScan safety scanning (#2634) are still RFC-level.

Weekly delta (2026-08-24): 🚀 MCP per-user credential injection merged (#4868) — #3322 gap CLOSED. 🚀 2nd memory backend: Honcho (#4730). 🚀 5th sandbox provider: OpenSandbox (#4877). 🚀 Extensions packaged mgmt (#4780). 🚀 MiniMax Code ACP agent (#4846). 🚀 MCP durable task runtime (#4665/#4690/#4833). 🚀 中文 README (#4763). Stars 79.5k → 80.7k (+1.2k). 2.1.0 milestone 91.7% → 92.1%. Six-channel fixes (Feishu/WeCom/Telegram/Discord/DingTalk/Buzz). DeerFlow’s enterprise-readiness trajectory continues to accelerate — 2.1.0 release imminent.