The self-hosted agent platform for cross-border IT sprawl

What it does

FIM One is a self-hosted agent platform that connects ERP, CRM, databases, and IM platforms into a single orchestration layer. It is built for the specific headache of global enterprises operating in China, where the software stack splits between international SaaS and local services like Feishu, DingTalk, WeCom, and databases such as DM and Kingbase. The platform offers three modes: a standalone assistant, an embedded Copilot, and a central Hub that routes actions across all connected tools.

The interesting bit

Instead of bolting on China connectors later, FIM One treats cross-border plumbing as a first-class citizen, with schema introspection for Chinese enterprise databases and a deterministic Hook system that enforces rules outside the LLM loop. A task is decomposed into a dynamic DAG at runtime, with independent steps executed in parallel and auto-replanning when things go sideways.

Key highlights

• China-stack connectors — Native database support for DM, KingbaseES, GBase, and Highgo, plus IM bridges for Feishu (with WeCom, DingTalk, Slack, and Teams on the v0.9 roadmap).
• Runtime DAG planning — The LLM generates a dependency graph on the fly and runs steps concurrently via asyncio, re-planning up to three rounds if the first attempt stalls.
• Deterministic guardrails — A three-layer safety model plus a Hook system (e.g., FeishuGateHook) that blocks sensitive tool calls until a human approves them via an interactive card, operating outside the agent’s reasoning loop.
• Prompt-cache observability — Surfaces Anthropic prompt-cache token counts per turn so operators can verify they are getting the discount and spot relay stations that quietly ignore it.
• Pluggable execution — Supports Python, Node.js, and shell tools with an optional Docker sandbox, plus a built-in RAG pipeline using Jina embeddings and LanceDB.

Caveats

• The messaging bridge is Feishu-first; broader Slack, Teams, WeCom, and DingTalk support is queued for v0.9.
• The Hook system currently ships with FeishuGateHook; audit logging and rate-limit hooks are also slated for v0.9.
• The repository badge lists a “Source Available” license, distinct from standard open-source licensing—verify before deploying if your legal team cares about OSI definitions.

Verdict

Reach for FIM One if you are self-hosting AI across a split global/China IT environment and need deterministic controls over tool use. Skip it if you want a lightweight, single-tenant chatbot or if your stack never crosses that particular border.