Introduction

DeepSeek Harness (DSH) provides an Agent runtime, but connecting to IM platforms requires protocol adaptation. dsh-qqbot-dafeiyu is a plugin that uses QQ messages as a frontend protocol driver for DSH agents.

Core Features

This plugin provides the following capabilities:
* Per-peer sessions: Each QQ direct-chat user or group chat corresponds to an independent Agent, with session isolation.
* Markdown output: Replies are sent in Markdown format, with code-block and table-aware splitting.
* Idle reclamation: After a session is idle for the timeout duration, the Agent is automatically destroyed to prevent memory leaks.
* Slash commands: Supports built-in commands such as /bot-reset and /bot-model.
* Image generation: Supports image generation capabilities.
* TTS voice replies: Supports voice replies.
* Attachment handling: Supports attachment handling.

Installation and Activation

  1. Run the installation command:
    dsh plugin --profile qqbot add github:cheesewoo/dsh-qqbot-dafeiyu
  1. Start DSH:
    dsh --profile qqbot
  1. On first startup, if the plugin detects that credentials are not configured, it automatically enters the QR code onboarding flow. The terminal outputs a QR code; after binding by scanning it with Mobile QQ, the credentials are automatically saved to the profile, so no further QR code scanning is needed on later starts.
  2. You can also preconfigure AppID and AppSecret via environment variables:
    export QQBOT_APPID="你的AppID" QQBOT_SECRET="你的AppSecret"
    dsh --profile qqbot

Typical Usage

  • Credential binding: Automatically enters the QR code onboarding flow on first startup.
  • Configuration options: Controls behavior through configuration options such as appId, appSecret, and model.
  • Slash commands:
    • /bot-reset: Resets the current session (clears context).
    • /bot-model: Views or switches the model.
    • /bot-status: Views the current session status.
    • /bot-help: Views all commands.

Use Cases and Cautions

  • Default policy: The plugin defaults to whitelist mode and rejects everyone when the whitelist is empty. A newly installed bot will not respond to anyone until allowed openid or group_openid values are added to the configuration.
  • Security risks: ⚠️ In open mode, host capabilities (such as shell/file read and write) are exposed, and anyone who can direct-message or @mention the bot can use them. Please be cautious before exposing it externally.
  • Permission scope: The plugin runs in the context of the current dsh process.

Ecosystem Background

The DSH philosophy is that “everything is a plugin.” This plugin is maintained by community developers and is not an official app store product.

Summary

This plugin integrates the QQ platform into DeepSeek Harness, enabling session-isolated bot logic. Developers should note the default whitelist security policy and the risk of exposing host capabilities in open mode.