dsh-wechat-plugin

Control DeepSeek Harness from WeChat: chat on your phone, and the DSH agent on your computer does the work.

No OpenClaw, and no public IP required.

Runs on the current DSH desktop app — developed and tested against DSH 0.2.0-rc.2, and kept current as the desktop app moves on. A lot of community plugins quietly stopped working when DSH updated; this one is maintained alongside it, and every change is released through CI.

中文说明

Features

• Text both ways. Your WeChat message becomes a DSH prompt; the reply comes back to WeChat.
• Photos, files, voice, video — both directions. Attachments are saved into the session workspace and handed to the agent; the agent can send files back with send_to_wechat.
• One WeChat chat, many DSH sessions. /new, /list, /switch, /current, /cancel — or just say "switch to the other one".
• Answer permission prompts from your phone. Approvals and multiple-choice questions are sent to WeChat and answered with a number, so being away from the desk does not stall the agent.
• Settings page under Settings → WeChat.

Install

For the DSH desktop app. It needs DSH's workspace, tool and UI services — the standard desktop composition — on a machine that stays on. Tested against 0.2.0-rc.2, and updated alongside the desktop app.

Open the plugin entry in the sidebar and choose 添加插件 (add plugin). The field takes a package name, a Git URL, a tarball, or a local path.

The name to install is dsh-wechat-plugin

The repository is called dsh-wechat, but the package is not: copy dsh-wechat-plugin rather than typing it, and mind the -plugin. There is an unrelated plugin by another author published as dsh-wechat, so installing that name gets you their work rather than this one.

dsh-wechat-plugin

https://github.com/xcisxc29/dsh-wechat

allowBuilds:
  dsh-wechat-workspace@git+file:///…/dsh-wechat#<commit>: true

Wait for the install to finish, click 立即启用 (enable now), and restart DSH.

dsh plugin --profile desktop add dsh-wechat-plugin
dsh plugin --profile desktop add https://github.com/xcisxc29/dsh-wechat

{
  "dsh": {
    "profile": {
      "bundles": [
        "@deepseek-ai/dsh-base",
        "@deepseek-ai/dsh-web-app",
        "dsh-wechat-plugin"
      ]
    }
  }
}

pnpm install && pnpm run dist && pnpm run pack
# → dsh-wechat-plugin-<version>.tgz

dsh plugin --profile desktop add /absolute/path/to/dsh-wechat-plugin-<version>.tgz

Getting started

After restarting DSH, open Settings → WeChat, click 重新扫码 (rescan), and scan the QR code with your phone. Send 你好 from WeChat and you should get a reply.

Optional: voice to text

WeChat voice notes are SILK. Install this codec to transcribe them to WAV locally:

dsh plugin --profile desktop add silk-wasm

Without it voice still works: the raw SILK file is saved and handed to the agent along with the service's own transcription.

Usage

Just send a message and it reaches the agent:

你好

Type these to control which DSH conversation you are talking to:

Spaces are optional: /switch3, /switch 3 and /switch:3 all work.

Plain language works too — "switch to the other one", "what conversations do I have", "stop". The agent judges the intent rather than matching fixed rules, and a switch tells you whether it succeeded or failed.

Read this before you start

Anyone who can message this bot can drive the computer it runs on. The agent can execute commands and read and write files, and the only credential involved is the WeChat message itself.

Conversations from WeChat run with full permissions by default — the agent does not ask before it acts. That is deliberate: a permission prompt is delivered to WeChat and the task then waits there, so on a phone every command would stall until you answered a conversation you had walked away from. Set Permissions for WeChat conversations to Follow the DSH setting in the settings page if you want the same guardrails you have at the desk.

Any session on this machine can push to your WeChat by default. That is what makes "tell me when it is done" work: the session doing the work is usually not the one your WeChat conversation is bound to, and without this it could not report its own result. Turn off Let other sessions push to WeChat to restore the stricter rule, where only the bound session may send.

So the bot's WeChat account, and who can reach it, are the security boundary. There is deliberately no allowlist, and none is planned: choosing to drive a computer over WeChat already means accepting that being able to message it is being able to operate it, and a second gate in front of the same decision would add nothing. If that is not a boundary you want, do not install it.

Put another way: being able to message your bot is the same as being able to operate your computer, without being asked.

Documentation

Development

pnpm install
pnpm build              # compiles only, leaving @dsh-wechat/core imports for pack to rewrite
pnpm run dist           # build + inline core: the loadable form a Git install needs
pnpm typecheck
pnpm test               # 192 tests
pnpm check              # build + typecheck + test
pnpm run pack           # run dist first
pnpm run verify-pack    # unpack, check the manifest's files, mount it as DSH would

Two build outputs, on purpose. build is the compiling step alone, and it keeps @dsh-wechat/core as a package import so pack can redirect it into the vendored dist/core. dist runs that compile and then rewrites the import to a relative path instead, which is what a Git install ends up with — it clones the repository and runs prepare, never pack.

Rebuild core after changing it. Tests resolve @dsh-wechat/core through node_modules to lib/, so source edits without a rebuild test the old code — and pass.

Licence

MIT — see LICENSE.