dsh-astrbot-ingress

AstrBot is built to be an IM gateway—QQ groups, official Bot, OneBot, all fine—but it does not write code. DeepSeek Harness is a local AI coding agent with real capability but no natural entry point for people who live in chat. dsh-astrbot-ingress bridges the two: AstrBot stays the front door, you drop /dsh hello into a group, DSH runs in the background, and the result, files, and errors come straight back into the conversation.

The plugin is deliberately low-friction to deploy. On the same host, both the token and the URL can be left blank; the plugin reads a beacon file written by DSH to complete the handshake. In Docker it auto-discovers host.docker.internal, and no shared volume is required—large inbound attachments travel over one-time URLs, and outbound files the plugin cannot see locally are fetched back from ingress via a short-lived credential. Progress reporting comes in three modes (digest, full, minimal), DSH's ask-user questions are mirrored into the chat window with parallel answer support on QQ and the web side, and security defaults are conservative: bind to 127.0.0.1 only, confine outbound files to the workspace, and reject sensitive path segments such as .ssh and .env.

It is aimed at users who already run AstrBot under any channel (QQ group, official Bot, OneBot) and have DeepSeek Harness deployed on the same machine or in Docker. No framework swap, no extra gateway—install the plugin, reload, send one /dsh, and your group's coding brain is live.