A bot that runs your secondhand shop while you sleep
Python-based automation system for Xianyu (闲鱼) sellers, handling replies, shipping, and multi-account management through a web dashboard.

What it does This is a headless browser automation suite for Xianyu, Alibaba’s C2C marketplace. It logs into seller accounts via Playwright, monitors messages and orders, then fires back keyword-based or AI-generated replies and triggers automatic shipping confirmations. Everything is controlled through a Bootstrap web UI with multi-user support and per-account data isolation in SQLite.
The interesting bit
The reply system has a clear priority ladder: specific product replies beat product-specific keywords, which beat generic keywords, which beat default replies, which finally fall back to AI. It’s a surprisingly thoughtful escalation chain for what could have been a dumb chatbot. The project also bakes in its own hot-update mechanism—push to main, bump static/version.txt, and GitHub Actions generates a delta release.
Key highlights
- Multi-account management with per-account browser profiles and cookie isolation
- Keyword + AI hybrid reply engine with Excel import/export for bulk keyword management
- Automatic shipping confirmation with multi-SKU matching and duplicate protection
- Docker Compose deployment with separate China-optimized build config
- WebSocket + SSE real-time monitoring and Loguru-based log rotation
- AGPL-3.0 licensed, explicitly tagged “for educational use only”
Caveats
- Requires Node.js for PyExecJS even in Python-native mode; without it, some features silently break
- Default admin credentials are
admin/admin123—the README warns you to change them, but this is 2024 - No actual GitHub Actions CI for multi-arch Docker builds; the script exists but isn’t wired up automatically
- The project sits in a gray zone: automating a marketplace platform against terms of service, however politely the README asks you not to use it commercially
Verdict Worth a look if you’re researching browser automation patterns, multi-tenant FastAPI architectures, or the mechanics of Chinese marketplace bots. Skip it if you want something legally clean, fully maintained, or that doesn’t require babysitting headless Chromium instances.