At a glance

What it does

A DSH web settings page for configuring the official Tencent QQ Bot plugin.

Code-evidenced contributions

What it adds to DSH

Web UIQQ Bot Settings panel

Adds Settings → QQ Bot for managing the QQ Bot plugin’s credentials, access controls, workspace, and QR binding.

Mechanism evidence ↗

Before you choose it

This companion bundle adds Settings → QQ Bot to DeepSeek Harness. From the web UI, configure QQ Bot AppID/AppSecret, private-chat and group access modes and allowlists, mention requirements, and the workspace used for bot sessions. It can also generate a QR code to bind a QQ bot and updates the QQ Bot profile’s cordis.patch.yml.

Best for

DSH users who already run, or plan to run, the official @tencent-connect/dsh-qqbot plugin and want to manage its settings in a browser.

Common tasks

Configure QQ Bot credentials without editing the profile patch manually.
Set c2c and group access modes, allowlists, and whether group messages require a mention.
Choose the workspace where QQ Bot agent sessions are created.
Bind a QQ bot by scanning a QR code in the settings panel.

Permissions and data

The panel manages sensitive QQ Bot configuration and communicates through documented loopback-only routes.

Permissions

Read and write the QQ Bot profile’s cordis.patch.yml.
Store AppID and AppSecret returned by the QR binding flow.
Access workspace and session-count information for the workspace picker.

Data handling

AppSecret is documented as masked when returned and not overwritten by an empty value.
QR binding credentials are documented as stored with mode 0600 in the QQ Bot profile configuration.

External services

Uses the QQ Bot connect task for scan-to-bind.
Requires the official @tencent-connect/dsh-qqbot companion plugin.

Credentials

QQ Bot AppID and AppSecret, supplied directly or returned by the QR binding flow.

Limitations

It is only a companion settings panel; the official QQ Bot plugin must be installed and bound for it to be useful.
The supplied evidence does not establish successful installation or runtime behavior.
The documented panel is intentionally minimal and uses inline styles rather than an external UI kit.

What DSHub checked

The immutable source commit and DSH bundle structure were verified.
The manifest declares a web client injection and a bundle patch.
The README documents the settings page, configuration scope, QR binding, and local API restrictions.
The package declares Node ^22.19.0 or >=24.0.0 and specified DSH peer dependencies.

What DSHub did not check

Package contents from the npm registry were not audited.
Installation, QR binding, configuration hot reload, and loopback restrictions were not executed in the supplied evidence.
A DeepSeek Harness version range is not declared in the supplied evidence.

Pinned install

Install QQ Bot Settings Panel

This plugin bundle does not have a DSH Plugin install action. Use its source documentation for the delivery method.

Visit the source project ↗

Maintainer source

Project README

View at commit 6465fea ↗

Maintainer-authored contentCaptured from README.md on Sep 11, 2026. The text and repository-relative media are fixed to commit 6465fea39b9c with content hash 0c342e660916; provider-hosted badges may update independently. README commands are upstream documentation; the DSHub copy action above is the verified, version-pinned install.

dsh-qqbot-panel

English | 中文

A visual settings panel for the official @tencent-connect/dsh-qqbot plugin for DeepSeek Harness (dsh). The official QQ bot plugin is a pure CLI plugin with no Web UI; this companion plugin adds a Settings → QQ Bot page so you can configure everything — and even bind your bot by scanning a QR code — right from the web GUI.

Features

Settings panel — web GUI: Settings → QQ Bot. Manage appId / appSecret, private-chat (c2c) & group access modes (open / allowlist / disabled) and their allowlists, requireMention, and the agent working directory.
Scan-to-bind — one click generates a QR code inside the panel; scan it with the QQ app and the returned appId / appSecret are written back automatically (no browser connect page, no Apple-ID login).
Workspace picker — choose which workspace the QQ bot's agent sessions live in (cwd); the panel lists every workspace that already has sessions and its session count.
Reads/writes the im-qqbot row in the qqbot profile's cordis.patch.yml via a loopback-only /api/dsh-qqbot-panel route family.
appSecret is only ever returned masked and is never overwritten by an empty value.

Companion / dependency

This is a companion panel for the official QQ bot plugin (@tencent-connect/dsh-qqbot). That plugin must be installed and bound to a QQ bot for this panel to be useful — the panel edits the same cordis.patch.yml the QQ bot profile loads.

Runtime dependencies (installed automatically): @tencent-connect/qqbot-connector, qrcode, js-yaml.

Install

# after publishing (repo tagged with the `dsh-plugin` topic)
dsh plugin --profile web add github:zhengjy01/dsh-qqbot-panel

# local development
dsh plugin --profile web add link:/path/to/dsh-qqbot-panel

Then restart dsh web and open Settings → QQ Bot. The plugin needs no build step — lib/index.js is plain ESM.

Used with

# the official QQ bot plugin (required companion), in its own profile
dsh plugin --profile qqbot add @tencent-connect/dsh-qqbot
dsh --profile qqbot          # prints a QR to bind, or use the panel's scan-to-bind

Configuration

Everything is managed from the panel: Settings → QQ Bot. There you can set appId / appSecret, the access modes and allowlists, whether group chats need @bot (requireMention), and the workspace the QQ bot sessions land in.

The panel persists changes to the qqbot profile's cordis.patch.yml (~/.dsh/profiles/qqbot/cordis.patch.yml), which the running QQ bot hot-reloads.

Notes

The /api/dsh-qqbot-panel routes are loopback-only (browser same-origin only).
The scan-to-bind flow uses the QQ bot connect task; the returned appId/appSecret are stored with mode 0600 in the qqbot profile config.
Logo / branding intentionally minimal; the panel uses plain inline styles and no external UI kit.

License

MIT

Operate deliberately

Install and manage

Prerequisites and target Profile

Target： Web Profile, Qqbot Profile

Delivery： Dsh Bundle Git — zhengjy01/dsh-qqbot-panel#6465fea39b9ce95eac211ea0a02f025b17845346。

Verify, update, and remove

Show lifecycle commands

Verify

dsh plugin --profile web list

Compatibility and access

Requires DSH web profile plus official QQ Bot companion： Not declared in supplied evidence。

Review compatibility evidence ↗

Risk facts

Credential Storage

Handles QQ Bot AppID and AppSecret; scan-to-bind writes returned credentials to the QQ Bot profile configuration with mode 0600.

Evidence ↗

Configuration Write

Reads and writes the QQ Bot profile’s cordis.patch.yml, including access modes, allowlists, and workspace selection.

Evidence ↗

Network Surface

Its documented API routes are loopback-only and browser same-origin only.

Evidence ↗

Evidence and editorial reviewManifest, Bundle patch, distribution and freshness

Immutable evidence

Review status and source activity

AI reviewed

Use the immutable Git source for review. This bundle changes QQ Bot credentials and profile access settings; verify it in a controlled DSH setup before relying on it for production messaging.

AI reviewed Sep 11, 2026, 2:29 PM UTC。GitHub facts last checked Sep 11, 2026, 2:29 PM UTC。

No material source change has been recorded since this evidence baseline.

Next step

Follow the Plugin installation workflow →

Subscribe to material changes for QQ Bot Settings Panel →