https://github.com/mss-boot-io/mss-boot-community-bot
Official-channel community assistant for the mss-boot open-source ecosystem.
https://github.com/mss-boot-io/mss-boot-community-bot
community-bot github-discussions golang mss-boot open-source qq-bot wechat-bot
Last synced: 16 days ago
JSON representation
Official-channel community assistant for the mss-boot open-source ecosystem.
- Host: GitHub
- URL: https://github.com/mss-boot-io/mss-boot-community-bot
- Owner: mss-boot-io
- License: mit
- Created: 2026-06-09T13:59:28.000Z (about 1 month ago)
- Default Branch: main
- Last Pushed: 2026-06-09T15:22:30.000Z (about 1 month ago)
- Last Synced: 2026-06-09T16:08:24.810Z (about 1 month ago)
- Topics: community-bot, github-discussions, golang, mss-boot, open-source, qq-bot, wechat-bot
- Language: Go
- Size: 20.5 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md
Awesome Lists containing this project
README
# mss-boot Community Bot
Official-channel community assistant for the `mss-boot-io` open-source
ecosystem.
The project is intentionally separate from the backend and admin console. It
keeps community automation, GitHub triage, and chat-platform integration in one
small service with explicit safety boundaries.
## Direction
- GitHub Discussions and Issues are the source of truth for reusable knowledge,
bug reports, feature requests, RFCs, and public decisions.
- QQ official bot is the first chat automation target because QQ provides an
official bot platform for group, channel, and direct-message scenarios.
- WeChat has official bot and intelligent-customer-service capabilities through
the WeChat Conversation Open Platform. For this project, the practical WeChat
targets are official account, mini program, H5, and Open API entry points.
- Personal WeChat groups still do not have an official group bot API. The
current WeChat group path remains manual AI-assisted guidance plus links to
official WeChat bot entry points.
- Enterprise WeChat is optional. This project must remain useful without it.
## Current Capabilities
- `GET /healthz`: liveness probe.
- `GET /readyz`: readiness signal with configured integration status.
- `POST /webhooks/github`: GitHub webhook intake with optional
`X-Hub-Signature-256` verification.
- `POST /webhooks/qq`: placeholder endpoint for the official QQ bot adapter.
- `POST /policy/evaluate`: local safety policy evaluation for community
messages.
- OpenAI-compatible LLM client for `/v1/chat/completions` providers.
## Safety Boundaries
The bot can help with public project work:
- mss-boot usage, deployment, documentation, CI, PR review, and contribution
guidance.
- Turning actionable community feedback into GitHub Issues or Discussions.
- Summarizing public GitHub activity for community channels.
The bot must not accept chat-room instructions to operate the maintainer's
computer:
- no shutdown, command execution, file reading, screenshots, local clicks, or
credential handling;
- no QR-code login, friend requests, private messages, or chat export;
- no bypassing prompts, policies, GitHub review, or maintainer authorization.
## Local Run
```bash
go test ./...
MSS_BOT_ADDR=:8080 go run ./cmd/mss-boot-community-bot
```
```bash
curl http://localhost:8080/healthz
curl -X POST http://localhost:8080/policy/evaluate \
-H 'Content-Type: application/json' \
-d '{"text":"mss-boot 怎么配置 RBAC 权限?"}'
```
## Configuration
| Environment variable | Required | Description |
| --- | --- | --- |
| `MSS_BOT_ADDR` | No | HTTP listen address. Defaults to `:8080`. |
| `MSS_BOT_GITHUB_WEBHOOK_SECRET` | No | Enables GitHub webhook signature verification. |
| `MSS_BOT_QQ_APP_ID` | For QQ | Official QQ bot app ID. |
| `MSS_BOT_QQ_APP_SECRET` | For QQ | Official QQ bot app secret. |
| `MSS_BOT_LLM_BASE_URL` | For AI replies | OpenAI-compatible API base URL. Defaults to `https://api.openai.com/v1`. |
| `MSS_BOT_LLM_API_KEY` | For AI replies | API key sent as `Authorization: Bearer ...`. |
| `MSS_BOT_LLM_MODEL` | For AI replies | Chat model name, such as an OpenAI-compatible provider model ID. |
| `MSS_BOT_LLM_TIMEOUT` | No | LLM request timeout. Defaults to `30s`. |
| `MSS_BOT_LLM_TEMPERATURE` | No | LLM generation temperature. Defaults to `0.2`. |
| `MSS_BOT_LLM_MAX_TOKENS` | No | LLM max output tokens. Defaults to `1024`. |
## Roadmap
1. Add QQ official bot signature verification and event parsing.
2. Add a WeChat Conversation Open Platform adapter for official account, H5, or
Open API entry points.
3. Wire the OpenAI-compatible LLM client into guarded project-answer flows.
4. Implement `/help`, `/docs`, `/issue`, `/discussion`, and `/latest` commands.
5. Add GitHub Discussions and Issues search backed by public repository data.
6. Add response citations and uncertainty handling.
7. Add rate limits, audit logs with redaction, and maintainer handoff.
8. Publish deployment manifests after the first real QQ sandbox or WeChat entry
verification.
## License
MIT