@botharness/core 1.3.0 → 1.3.1

package/CHANGELOG.md

@@ -6,11 +6,37 @@ Unreleased entries arrive as [change fragments](changes/README.md) and are folde
 
 ## [Unreleased]
 
-No changes since 1.3.0 yet.
+No changes since 1.3.1 yet.
+
+## [1.3.1] - 2026-10-14
+
+Entering `deepseekbot` on the DSH Plugins page installs it in one step again, now on DSH 0.2.0-rc.2 only; the `deepseekbot` CLI can configure a Host, operate a Bot's Browser and Computer and manage token-based IM apps; the Bot Browser panel streams page changes live; and a development build of the mobile app shows the Roster and native PersonaBot DMs.
+
+### Breaking Changes
+
+- DeepSeekBot 1.3.1 needs exactly DSH 0.2.0-rc.2, the only release its bundled Computer runtime works with. DSH 0.2.0-rc.1 and the 0.2.1 alphas refuse it at installation with a message naming DeepSeekBot; upgrade DSH to 0.2.0-rc.2 first, or stay on DeepSeekBot 1.3.0 ([#1672](https://github.com/BotHarness/DeepSeekBot/pull/1672)).
+
+### Added
+
+- The getting-started checklist adds "See how it works in DSH", a short walkthrough from the Bot's Sessions tab into the same session in DSH and back to the Bot DM ([#1496](https://github.com/BotHarness/DeepSeekBot/issues/1496)).
+- Added a development build of the DeepSeekBot mobile app that connects to the Human's Host over Tailscale HTTPS and shows the Roster of PersonaBots and Channels with live state, and recorded why it reads live state over DSH's Remote stream socket in [ADR-0200](docs/adr/0200-the-mobile-app-reads-live-state-over-the-dsh-remote-stream-socket.md) ([#1650](https://github.com/BotHarness/DeepSeekBot/issues/1650)).
+- Added a native PersonaBot DM to the mobile app's development build: tap a Bot in the Roster to read the DM from an on-device cache and then the Host, page back through older history, send with visible sending, sent and not-sent states (a retry never sends twice), watch the reply stream in, and resume after the app returns from the background without lost or repeated messages; replies render as selectable Markdown in system dark mode and zh/en ([#1651](https://github.com/BotHarness/DeepSeekBot/issues/1651)).
+- The `deepseekbot` CLI can now configure what the Web UI configures, so an agent can set up and test a Host on its own: `browser-access-set`, `computer-access-set`, `access` and `access-set` (full access needs `--acknowledge-risk`), `settings` and `settings-set`, `workspace-create` and `group-create` ([#1677](https://github.com/BotHarness/DeepSeekBot/issues/1677)).
+- The `deepseekbot` CLI can now operate a Bot's Browser and the Computer: `browser-open`, `browser-frame` (save the current picture to a file), `browser-takeover`, `browser-stop`, `computer-start`, `computer-status` and `computer-stop`. `grants` now also works against a live Host ([#1677](https://github.com/BotHarness/DeepSeekBot/issues/1677)).
+- The `deepseekbot` CLI can now add, inspect and remove token-based IM apps (Discord, Slack, QQ, DingTalk, WeCom, Matrix), bind and unbind them to a Bot, show each binding's reception, and connect an external group conversation to a Channel: `im-app-add`, `im-app-status`, `im-app-remove`, `im-bind`, `im-unbind`, `im-status`, `channel-connect` and `channel-ingests`. Credentials are read from stdin only and never printed ([#1677](https://github.com/BotHarness/DeepSeekBot/issues/1677)).
+
+### Changed
+
+- The Bot Browser panel in the Host web page now follows the page as it changes instead of refreshing once per second. Chrome pushes a new picture whenever the page repaints, so typing, scrolling and clicking show up in about a quarter of a second, and a page that does not change costs nothing. Runtimes that cannot stream keep the once-per-second picture ([#1636](https://github.com/BotHarness/DeepSeekBot/issues/1636)).
 
 ### Documentation
 
-- Documented how a paired phone keeps reaching the Host across restarts: a device gateway on the same `dsh web` listener verifies a per-device credential, forwards to the native carriers, and revokes one device at once, including its open streams; runtime behavior is unchanged ([ADR-0199](../docs/adr/0199-paired-devices-reach-the-host-through-a-same-listener-device-gateway.md), [#1649](https://github.com/BotHarness/DeepSeekBot/issues/1649)).
+- Documented how a paired phone keeps reaching the Host across restarts: a device gateway on the same `dsh web` listener verifies a per-device credential, forwards to the native carriers, and revokes one device at once, including its open streams; runtime behavior is unchanged ([ADR-0199](docs/adr/0199-paired-devices-reach-the-host-through-a-same-listener-device-gateway.md), [#1649](https://github.com/BotHarness/DeepSeekBot/issues/1649)).
+- The GitHub README and installation guides now install `deepseekbot@1.3.0` and list its highlights, and the npm package README states the DSH 0.2.0 minimum ([#1667](https://github.com/BotHarness/DeepSeekBot/pull/1667)).
+
+### Fixed
+
+- Entering `deepseekbot` on the DSH Plugins page installs it in one step again; 1.3.0 first stopped to ask for `agent-browser` build approval. The Browser trial driver's `agent-browser` is now an optional add-on. DeepSeekBot now declares that it needs DSH 0.2.0-rc.2, the only release its bundled Computer runtime works with, so other DSH versions get a clear refusal naming DeepSeekBot. Every release is now installed into a fresh Profile before it is published ([#1672](https://github.com/BotHarness/DeepSeekBot/pull/1672)).
 
 ## [1.3.0] - 2026-10-14
 

package/CHANGELOG.zh.md

@@ -6,11 +6,37 @@
 
 ## [Unreleased]
 
-1.3.0 之后暂无变化。
+1.3.1 之后暂无变化。
+
+## [1.3.1] - 2026-10-14
+
+在 DSH 插件页输入 `deepseekbot` 重新一步装好，现在只支持 DSH 0.2.0-rc.2；`deepseekbot` 命令行可以配置 Host、操作 Bot 的浏览器和 Computer、管理基于 token 的 IM 应用；Bot 浏览器面板随页面变化实时刷新；手机 App 开发版可以查看 Bot 列表并使用原生 PersonaBot 私信。
+
+### Breaking Changes
+
+- DeepSeekBot 1.3.1 只支持 DSH 0.2.0-rc.2（随包的 Computer 运行时只兼容这个版本）。DSH 0.2.0-rc.1 和 0.2.1 alpha 安装时会拒绝它，并给出点名 DeepSeekBot 的提示；请先把 DSH 升级到 0.2.0-rc.2，或继续使用 DeepSeekBot 1.3.0（[#1672](https://github.com/BotHarness/DeepSeekBot/pull/1672)）。
+
+### Added
+
+- 上手清单新增「看看它在 DSH 里怎么干活」：一段小导览，从 Bot 的「会话」标签跳到 DSH 里的同一个会话，再回到 Bot 私聊（[#1496](https://github.com/BotHarness/DeepSeekBot/issues/1496)）。
+- 新增 DeepSeekBot 手机 App 的开发版：通过 Tailscale HTTPS 连接用户自己的 Host，显示 PersonaBot 与频道列表及其实时状态；并在 [ADR-0200](docs/adr/0200-the-mobile-app-reads-live-state-over-the-dsh-remote-stream-socket.md) 记录了它通过 DSH Remote stream socket 读取实时状态的原因（[#1650](https://github.com/BotHarness/DeepSeekBot/issues/1650)）。
+- 手机 App 开发版新增原生 PersonaBot 私信：在列表中点开 Bot，先显示设备上的缓存再与 Host 对齐，可向上翻看更早的历史；发送时可见"发送中/已送达/未发送"，重试不会重复发送；Bot 回复实时流入；App 从后台回来后续接，不丢失也不重复消息；回复以可选中的 Markdown 显示，跟随系统深色模式与中英文（[#1651](https://github.com/BotHarness/DeepSeekBot/issues/1651)）。
+- `deepseekbot` 命令行现在可以完成 Web 界面里的这些配置，Agent 能独立搭建和测试 Host：`browser-access-set`、`computer-access-set`、`access` 与 `access-set`（完全访问需加 `--acknowledge-risk`）、`settings` 与 `settings-set`、`workspace-create` 和 `group-create`（[#1677](https://github.com/BotHarness/DeepSeekBot/issues/1677)）。
+- `deepseekbot` 命令行现在可以操作 Bot 的浏览器和 Computer：`browser-open`、`browser-frame`（把当前画面保存到文件）、`browser-takeover`、`browser-stop`、`computer-start`、`computer-status` 和 `computer-stop`。`grants` 现在也支持在线 Host（[#1677](https://github.com/BotHarness/DeepSeekBot/issues/1677)）。
+- `deepseekbot` 命令行现在可以添加、查看和移除基于 token 的 IM 应用（Discord、Slack、QQ、钉钉、企业微信、Matrix），把它们绑定到 Bot 或解绑，查看每个绑定的接收状态，并把外部群聊接入 Channel：`im-app-add`、`im-app-status`、`im-app-remove`、`im-bind`、`im-unbind`、`im-status`、`channel-connect` 和 `channel-ingests`。凭证只从标准输入读取，绝不打印（[#1677](https://github.com/BotHarness/DeepSeekBot/issues/1677)）。
+
+### Changed
+
+- Host 网页里的 Bot 浏览器面板现在随页面变化实时刷新，不再每秒刷新一次。页面每次重绘时 Chrome 都会推送新画面，所以输入、滚动和点击大约四分之一秒就能看到，页面不变时不产生额外开销。无法推流的运行方式仍保持每秒一张画面（[#1636](https://github.com/BotHarness/DeepSeekBot/issues/1636)）。
 
 ### Documentation
 
-- 记录配对手机如何在 Host 重启后继续访问：同一 `dsh web` 监听器上的设备网关校验每台设备的凭据，转发到原生通道，并可立即撤销单台设备及其已打开的数据流；运行时行为不变（[ADR-0199](../docs/adr/0199-paired-devices-reach-the-host-through-a-same-listener-device-gateway.md)，[#1649](https://github.com/BotHarness/DeepSeekBot/issues/1649)）。
+- 记录配对手机如何在 Host 重启后继续访问：同一 `dsh web` 监听器上的设备网关校验每台设备的凭据，转发到原生通道，并可立即撤销单台设备及其已打开的数据流；运行时行为不变（[ADR-0199](docs/adr/0199-paired-devices-reach-the-host-through-a-same-listener-device-gateway.md)，[#1649](https://github.com/BotHarness/DeepSeekBot/issues/1649)）。
+- GitHub README 和安装指南改为安装 `deepseekbot@1.3.0` 并列出它的亮点，npm 包说明写明最低需要 DSH 0.2.0（[#1667](https://github.com/BotHarness/DeepSeekBot/pull/1667)）。
+
+### Fixed
+
+- 在 DSH 插件页输入 `deepseekbot` 重新一步装好；1.3.0 会先停下来要求批准 `agent-browser` 构建。Browser 试用驱动用的 `agent-browser` 改为可选加装。DeepSeekBot 现在明确声明需要 DSH 0.2.0-rc.2（随包的 Computer 运行时只兼容这个版本），其他 DSH 版本会直接看到点名 DeepSeekBot 的不兼容提示。每次发版前都会先在全新 Profile 里实装验证（[#1672](https://github.com/BotHarness/DeepSeekBot/pull/1672)）。
 
 ## [1.3.0] - 2026-10-14
 

package/dist/index.d.mts

@@ -15188,7 +15188,7 @@ interface BotCreateFailure {
     name: string;
   };
 }
-export declare const BOT_CREATE_HELP = "deepseekbot: create PersonaBots without clicking\n\nUsage:\n  deepseekbot create --name <name> [--persona <text> | --persona-stdin]\n                    [--description <text>] [--role <tag> ...]\n                    [--preset <model-preset-id>] [--home <dsh-home>]\n  deepseekbot create --name <name> --from-git <url | owner/repo> [...]\n  deepseekbot create [--name <name>] --from-zip <file> [...]\n  deepseekbot create [--name <name>] --from-dir <directory> [...]\n  deepseekbot list [--home <dsh-home>]\n  deepseekbot show <id> [--home <dsh-home>]\n  deepseekbot model-presets [--home <dsh-home>]\n  deepseekbot model-preset-create --name <preset> --orchestrator-provider <p> --orchestrator-model <m>\n                                  [--orchestrator-effort <e>] --assignment-provider <p>\n                                  --assignment-model <m> [--assignment-effort <e>] [--home <dsh-home>]\n  deepseekbot model-preset-apply <id> --preset <preset-id> [--home <dsh-home>]\n  deepseekbot model-plan <id> [--home <dsh-home>]\n  deepseekbot pause <id> [--home <dsh-home>]\n  deepseekbot resume <id> [--home <dsh-home>]\n  deepseekbot update <id> [--name <name>] [--description <text>] [--role <tag> ...] [--home <dsh-home>]\n  deepseekbot human-name-set (--name <text> | --clear) [--home <dsh-home>]\n  deepseekbot channel-human-name-set <channel> (--nickname <text> | --clear) [--home <dsh-home>]\n  deepseekbot memory-snapshot <id> [--home <dsh-home>]\n  deepseekbot memory-file <id> --path <file> [--home <dsh-home>]\n  deepseekbot memory-history <id> [--limit <n>] [--home <dsh-home>]\n  deepseekbot memory-diff <id> --sha <commit> [--home <dsh-home>]\n  deepseekbot memory-save <id> --path <file> (--body <text> | --body-stdin)\n                             [--expected-head <sha>] [--edit-id <id>] [--home <dsh-home>]\n  deepseekbot channels [--home <dsh-home>]\n  deepseekbot channel-messages <channel> [--limit <n>] [--before <id>] [--home <dsh-home>]\n  deepseekbot grants <id> [--home <dsh-home>]\n  deepseekbot grant-revoke <id> --grant <grant> [--home <dsh-home>]\n  deepseekbot grant-write-set <id> --grant <grant> (--enabled | --disabled) [--home <dsh-home>]\n  deepseekbot schedules <id> [--home <dsh-home>]\n  deepseekbot schedule-create <id> --title <t> --prompt <p> (--every <s> | --daily <HH:MM> |\n                                  --weekly <HH:MM> --weekdays <0-6,..> | --once-date <d> --once-time <t> |\n                                  --cron <expr>) [--timezone <tz>] [--enabled|--disabled] [--locked] [--home <dsh-home>]\n  deepseekbot schedule-update <id> --sid <schedule> [--title ...] [--prompt ...] [trigger ...] [--home <dsh-home>]\n  deepseekbot schedule-delete <id> --sid <schedule> [--home <dsh-home>]\n  deepseekbot schedule-history <id> --sid <schedule> [--home <dsh-home>]\n  deepseekbot schedule-run-now <id> --sid <schedule> [--home <dsh-home>]\n  deepseekbot schedule-preview (--every <s> | --daily ... | ...) [--home <dsh-home>]\n  deepseekbot pairings <id> [--home <dsh-home>]\n  deepseekbot secret-put <NAME> [--home <dsh-home>]            secret value arrives on stdin only\n  deepseekbot secret-list [--home <dsh-home>]                  names, sources, writability; never values\n  deepseekbot secret-unset <NAME> [--home <dsh-home>]\n  deepseekbot search <words>                                   find commands by words\n  deepseekbot send <id> (--body <text> | --body-stdin) [--message-id human-<UUID>] [--timeout <seconds>]\n  deepseekbot send-status <id> --message-id <Human-message-id>\n  deepseekbot tool-approval-status <channel> --message-id <card-id>\n  deepseekbot tool-approval-decide <channel> --message-id <card-id> --outcome allowed-once|rejected\n  deepseekbot user-question-status <channel> --message-id <card-id>\n  deepseekbot user-question-answer <channel> --message-id <card-id> --answer-stdin\n  deepseekbot ask-secret-status <channel> --message-id <card-id>\n  deepseekbot ask-secret-submit <channel> --message-id <card-id> --values-stdin\n  deepseekbot ask-secret-cancel <channel> --message-id <card-id>\n  deepseekbot ask-secret-account-status <channel> --message-id <configured-card-id>\n  deepseekbot ask-secret-replace <channel> --message-id <configured-card-id>\n  deepseekbot ask-secret-revoke <channel> --message-id <configured-card-id>\n  deepseekbot ask-secret-accounts <id>\n  deepseekbot release-info [--since <version>]\n  deepseekbot workspace-options\n  deepseekbot grant-create <id> --workspace <workspace-id>\n  deepseekbot bot-attention <id> [--limit <1-100>] [--cursor <source-id>] [--state <state>]\n  deepseekbot bot-sessions <id> [--limit <1-100>]\n  deepseekbot bot-activity <id> [--limit <1-100>]\n  deepseekbot bot-delete-preview <id>\n  deepseekbot bot-delete-confirm <id> --confirmation-stdin\n  deepseekbot bot-delete-retry <id>\n  deepseekbot im-apps\n  deepseekbot im-authorize <feishu|weixin>\n  deepseekbot im-credentials <attempt-id> --credentials-stdin\n  deepseekbot im-verify <attempt-id> --verification-stdin\n  deepseekbot pairing-status <attempt-id> [--wait] [--timeout <seconds>]\n  deepseekbot im-cancel <attempt-id>\n  deepseekbot --help | deepseekbot create --help\n\nOutput:\n  stdout carries JSON, pretty by default; --compact condenses it to one line\n  for agents. Human-readable lines go to stderr only.\n\nSources (exactly one per create):\n  (none)       blank bot; --preset applies a model preset, otherwise the model\n               step reports no-model-yet and activation stays a Settings task\n  --from-git   clone a Git repository as Memory (HTTPS, SSH, or owner/repo\n               shorthand for https://github.com/owner/repo.git)\n  --from-zip   import a bot bundle zip (same shape as the bot-zip export)\n  --from-dir   import a bot bundle directory (same shape as the bot-zip export;\n               a .git subtree is skipped as files but packed as history)\n\nMachine contract:\n  stdout carries exactly one JSON document. Success exits 0 with the bot id,\n  DM channel, data directory, per-step statuses, and next actions. Failure\n  exits non-zero with {\"error\": {\"code\", \"message\"}} using a stable code\n  (usage, secret-in-argv, bad-zip, bad-bundle, bad-ref, unknown-preset,\n  unknown-bot, unknown-channel, duplicate-preset, git-not-found, git-clone-failed, git-clone-timeout,\n  memory-unavailable, lease-unavailable, bad-credentials, invalid-input). Human-readable lines go to stderr only.\n  Stop the Host before offline database commands: the writer lease is exclusive.\n\nLive Host:\n  Require --host <loopback-origin|tailnet-HTTPS-origin> or DEEPSEEKBOT_HOST.\n  Auth: DEEPSEEKBOT_HOST_TOKEN or --token-file <private-file>, never a token in argv.\n  Login is fresh per call; cookies stay in memory. --timeout defaults to 120 seconds (max 600).\n  send returns its receipt and exact committed replies. Inspect send-status on timeout\n  before retrying; send never automatically resubmits. channel-messages also accepts --host.\n  create (blank, Git, Zip and directory), list/show, model-presets/create/apply/plan\n  and channels use the Host when --host or DEEPSEEKBOT_HOST is set. Do not combine\n  --home with an online target; failures never fall back to local database access.\n  Zip/directory uploads contain local bytes; Git cloning uses the Host environment.\n  Creation errors retain known bot/steps; outcome unknown means inspect before retrying.\n  Bot diagnostics are bounded summaries, not full execution logs or live streams.\n  Deletion requires preview then stdin {\"token\":\"<preview.token>\"}; Memory is retained.\n  Question stdin: {\"answers\":[{\"id\":\"question-id\",\"selected\":[\"option\"],\"custom\":\"optional\"}]}\n  Private input stdin: {\"field_id\":\"confidential value\",...}; only declared fields.\n  Private input commands return status/acceptance only and never retry a submission.\n\nModels:\n  model-presets lists the profile presets; model-preset-create mints one from\n  explicit provider/model routes; model-preset-apply and model-plan read and\n  write through the Host when selected, otherwise directly offline. Routes are shape-checked plus\n  provider-existence-checked offline; catalog liveness and readiness\n  inspection stay Host-side, and model-plan reports readiness deferred.\n\nMemory:\n  memory-snapshot/file/history/diff read the bot memory store; memory-save\n  writes one file and commits it. --expected-head defaults to the current\n  HEAD (pass it explicitly for compare-and-swap); --edit-id defaults to a\n  fresh UUID and makes repeat submissions idempotent. Conflicts, missing\n  files, and bad shas fail coded (memory-conflict, not-found,\n  memory-unknown-commit).\n\nIdentity:\n  The bot name is a label. Every create mints a new bot id, so reusing a name\n  always returns a second bot and still exits 0.\n\nSecrets:\n  Never pass secrets as arguments: any --api-key/--token/--secret/--password\n  style flag is a hard error (secret-in-argv). Model keys and tokens travel in\n  the environment (for example DEEPSEEK_API_KEY, GITHUB_TOKEN) or a stdin pipe\n  (--persona-stdin); result JSON never contains secret values.\n\nHome:\n  --home points at the target DSH_HOME (a fresh directory works with zero\n  clicks); without it, DSH_HOME from the environment is used.\n";
+export declare const BOT_CREATE_HELP = "deepseekbot: create PersonaBots without clicking\n\nUsage:\n  deepseekbot create --name <name> [--persona <text> | --persona-stdin]\n                    [--description <text>] [--role <tag> ...]\n                    [--preset <model-preset-id>] [--home <dsh-home>]\n  deepseekbot create --name <name> --from-git <url | owner/repo> [...]\n  deepseekbot create [--name <name>] --from-zip <file> [...]\n  deepseekbot create [--name <name>] --from-dir <directory> [...]\n  deepseekbot list [--home <dsh-home>]\n  deepseekbot show <id> [--home <dsh-home>]\n  deepseekbot model-presets [--home <dsh-home>]\n  deepseekbot model-preset-create --name <preset> --orchestrator-provider <p> --orchestrator-model <m>\n                                  [--orchestrator-effort <e>] --assignment-provider <p>\n                                  --assignment-model <m> [--assignment-effort <e>] [--home <dsh-home>]\n  deepseekbot model-preset-apply <id> --preset <preset-id> [--home <dsh-home>]\n  deepseekbot model-plan <id> [--home <dsh-home>]\n  deepseekbot pause <id> [--home <dsh-home>]\n  deepseekbot resume <id> [--home <dsh-home>]\n  deepseekbot update <id> [--name <name>] [--description <text>] [--role <tag> ...] [--home <dsh-home>]\n  deepseekbot human-name-set (--name <text> | --clear) [--home <dsh-home>]\n  deepseekbot channel-human-name-set <channel> (--nickname <text> | --clear) [--home <dsh-home>]\n  deepseekbot memory-snapshot <id> [--home <dsh-home>]\n  deepseekbot memory-file <id> --path <file> [--home <dsh-home>]\n  deepseekbot memory-history <id> [--limit <n>] [--home <dsh-home>]\n  deepseekbot memory-diff <id> --sha <commit> [--home <dsh-home>]\n  deepseekbot memory-save <id> --path <file> (--body <text> | --body-stdin)\n                             [--expected-head <sha>] [--edit-id <id>] [--home <dsh-home>]\n  deepseekbot channels [--home <dsh-home>]\n  deepseekbot channel-messages <channel> [--limit <n>] [--before <id>] [--home <dsh-home>]\n  deepseekbot grants <id> [--home <dsh-home>]\n  deepseekbot grant-revoke <id> --grant <grant> [--home <dsh-home>]\n  deepseekbot grant-write-set <id> --grant <grant> (--enabled | --disabled) [--home <dsh-home>]\n  deepseekbot schedules <id> [--home <dsh-home>]\n  deepseekbot schedule-create <id> --title <t> --prompt <p> (--every <s> | --daily <HH:MM> |\n                                  --weekly <HH:MM> --weekdays <0-6,..> | --once-date <d> --once-time <t> |\n                                  --cron <expr>) [--timezone <tz>] [--enabled|--disabled] [--locked] [--home <dsh-home>]\n  deepseekbot schedule-update <id> --sid <schedule> [--title ...] [--prompt ...] [trigger ...] [--home <dsh-home>]\n  deepseekbot schedule-delete <id> --sid <schedule> [--home <dsh-home>]\n  deepseekbot schedule-history <id> --sid <schedule> [--home <dsh-home>]\n  deepseekbot schedule-run-now <id> --sid <schedule> [--home <dsh-home>]\n  deepseekbot schedule-preview (--every <s> | --daily ... | ...) [--home <dsh-home>]\n  deepseekbot pairings <id> [--home <dsh-home>]\n  deepseekbot secret-put <NAME> [--home <dsh-home>]            secret value arrives on stdin only\n  deepseekbot secret-list [--home <dsh-home>]                  names, sources, writability; never values\n  deepseekbot secret-unset <NAME> [--home <dsh-home>]\n  deepseekbot search <words>                                   find commands by words\n  deepseekbot send <id> (--body <text> | --body-stdin) [--message-id human-<UUID>] [--timeout <seconds>]\n  deepseekbot send-status <id> --message-id <Human-message-id>\n  deepseekbot tool-approval-status <channel> --message-id <card-id>\n  deepseekbot tool-approval-decide <channel> --message-id <card-id> --outcome allowed-once|rejected\n  deepseekbot user-question-status <channel> --message-id <card-id>\n  deepseekbot user-question-answer <channel> --message-id <card-id> --answer-stdin\n  deepseekbot ask-secret-status <channel> --message-id <card-id>\n  deepseekbot ask-secret-submit <channel> --message-id <card-id> --values-stdin\n  deepseekbot ask-secret-cancel <channel> --message-id <card-id>\n  deepseekbot ask-secret-account-status <channel> --message-id <configured-card-id>\n  deepseekbot ask-secret-replace <channel> --message-id <configured-card-id>\n  deepseekbot ask-secret-revoke <channel> --message-id <configured-card-id>\n  deepseekbot ask-secret-accounts <id>\n  deepseekbot release-info [--since <version>]\n  deepseekbot workspace-options\n  deepseekbot grant-create <id> --workspace <workspace-id>\n  deepseekbot browser-access-set <id> (--enabled | --disabled)\n  deepseekbot computer-access-set <id> (--enabled | --disabled)\n  deepseekbot access <id>\n  deepseekbot access-set <id> --mode workspace-write|danger-full-access [--scope chat|assignments] [--acknowledge-risk]\n  deepseekbot settings <namespace>\n  deepseekbot settings-set <namespace> --patch-stdin\n  deepseekbot workspace-create <absolute-path>\n  deepseekbot group-create <name> --member <bot-id> [--member <bot-id> ...]\n  deepseekbot im-app-add <discord|slack|qq|dingtalk|wecom|matrix> --credentials-stdin\n  deepseekbot im-app-status <platform>\n  deepseekbot im-app-remove <platform> --app <app-id>\n  deepseekbot im-bind <id> --app <app-id>\n  deepseekbot im-unbind <id> --app <app-id>\n  deepseekbot im-status <id>\n  deepseekbot channel-connect <channel> --bot <id> --conversation <external-id> [--app <app-id>]\n  deepseekbot channel-ingests <channel>\n  deepseekbot browser-open <id>\n  deepseekbot browser-frame <id> --out <absolute-file>\n  deepseekbot browser-takeover <id> (--enabled | --disabled)\n  deepseekbot browser-stop <id>\n  deepseekbot computer-start [--target local|container]\n  deepseekbot computer-status\n  deepseekbot computer-stop\n  deepseekbot bot-attention <id> [--limit <1-100>] [--cursor <source-id>] [--state <state>]\n  deepseekbot bot-sessions <id> [--limit <1-100>]\n  deepseekbot bot-activity <id> [--limit <1-100>]\n  deepseekbot bot-delete-preview <id>\n  deepseekbot bot-delete-confirm <id> --confirmation-stdin\n  deepseekbot bot-delete-retry <id>\n  deepseekbot im-apps\n  deepseekbot im-authorize <feishu|weixin>\n  deepseekbot im-credentials <attempt-id> --credentials-stdin\n  deepseekbot im-verify <attempt-id> --verification-stdin\n  deepseekbot pairing-status <attempt-id> [--wait] [--timeout <seconds>]\n  deepseekbot im-cancel <attempt-id>\n  deepseekbot --help | deepseekbot create --help\n\nOutput:\n  stdout carries JSON, pretty by default; --compact condenses it to one line\n  for agents. Human-readable lines go to stderr only.\n\nSources (exactly one per create):\n  (none)       blank bot; --preset applies a model preset, otherwise the model\n               step reports no-model-yet and activation stays a Settings task\n  --from-git   clone a Git repository as Memory (HTTPS, SSH, or owner/repo\n               shorthand for https://github.com/owner/repo.git)\n  --from-zip   import a bot bundle zip (same shape as the bot-zip export)\n  --from-dir   import a bot bundle directory (same shape as the bot-zip export;\n               a .git subtree is skipped as files but packed as history)\n\nMachine contract:\n  stdout carries exactly one JSON document. Success exits 0 with the bot id,\n  DM channel, data directory, per-step statuses, and next actions. Failure\n  exits non-zero with {\"error\": {\"code\", \"message\"}} using a stable code\n  (usage, secret-in-argv, bad-zip, bad-bundle, bad-ref, unknown-preset,\n  unknown-bot, unknown-channel, duplicate-preset, git-not-found, git-clone-failed, git-clone-timeout,\n  memory-unavailable, lease-unavailable, bad-credentials, invalid-input). Human-readable lines go to stderr only.\n  Stop the Host before offline database commands: the writer lease is exclusive.\n\nLive Host:\n  Require --host <loopback-origin|tailnet-HTTPS-origin> or DEEPSEEKBOT_HOST.\n  Auth: DEEPSEEKBOT_HOST_TOKEN or --token-file <private-file>, never a token in argv.\n  Login is fresh per call; cookies stay in memory. --timeout defaults to 120 seconds (max 600).\n  send returns its receipt and exact committed replies. Inspect send-status on timeout\n  before retrying; send never automatically resubmits. channel-messages also accepts --host.\n  create (blank, Git, Zip and directory), list/show, model-presets/create/apply/plan\n  and channels use the Host when --host or DEEPSEEKBOT_HOST is set. Do not combine\n  --home with an online target; failures never fall back to local database access.\n  Zip/directory uploads contain local bytes; Git cloning uses the Host environment.\n  Creation errors retain known bot/steps; outcome unknown means inspect before retrying.\n  Bot diagnostics are bounded summaries, not full execution logs or live streams.\n  Deletion requires preview then stdin {\"token\":\"<preview.token>\"}; Memory is retained.\n  Question stdin: {\"answers\":[{\"id\":\"question-id\",\"selected\":[\"option\"],\"custom\":\"optional\"}]}\n  Private input stdin: {\"field_id\":\"confidential value\",...}; only declared fields.\n  Private input commands return status/acceptance only and never retry a submission.\n\nModels:\n  model-presets lists the profile presets; model-preset-create mints one from\n  explicit provider/model routes; model-preset-apply and model-plan read and\n  write through the Host when selected, otherwise directly offline. Routes are shape-checked plus\n  provider-existence-checked offline; catalog liveness and readiness\n  inspection stay Host-side, and model-plan reports readiness deferred.\n\nMemory:\n  memory-snapshot/file/history/diff read the bot memory store; memory-save\n  writes one file and commits it. --expected-head defaults to the current\n  HEAD (pass it explicitly for compare-and-swap); --edit-id defaults to a\n  fresh UUID and makes repeat submissions idempotent. Conflicts, missing\n  files, and bad shas fail coded (memory-conflict, not-found,\n  memory-unknown-commit).\n\nIdentity:\n  The bot name is a label. Every create mints a new bot id, so reusing a name\n  always returns a second bot and still exits 0.\n\nSecrets:\n  Never pass secrets as arguments: any --api-key/--token/--secret/--password\n  style flag is a hard error (secret-in-argv). Model keys and tokens travel in\n  the environment (for example DEEPSEEK_API_KEY, GITHUB_TOKEN) or a stdin pipe\n  (--persona-stdin); result JSON never contains secret values.\n\nHome:\n  --home points at the target DSH_HOME (a fresh directory works with zero\n  clicks); without it, DSH_HOME from the environment is used.\n";
 export declare function runBotCreateCli(argv: readonly string[], io: BotCreateCliIo): Promise<number>;
 //#endregion
 //#region packages/core/src/bots/slug.d.ts

package/dist/index.mjs

@@ -108865,8 +108865,58 @@ const LIVE_OPTIONS = {
 	"answer-stdin": { type: "boolean" },
 	"values-stdin": { type: "boolean" },
 	since: { type: "string" },
-	workspace: { type: "string" }
+	workspace: { type: "string" },
+	mode: { type: "string" },
+	scope: { type: "string" },
+	"acknowledge-risk": { type: "boolean" },
+	"patch-stdin": { type: "boolean" },
+	member: {
+		type: "string",
+		multiple: true
+	},
+	app: { type: "string" },
+	bot: { type: "string" },
+	conversation: { type: "string" },
+	out: { type: "string" },
+	target: { type: "string" }
 };
+const DEVICE_COMMANDS = [
+	"browser-open",
+	"browser-frame",
+	"browser-takeover",
+	"browser-stop",
+	"computer-start",
+	"computer-status",
+	"computer-stop"
+];
+const IM_CONTROL_COMMANDS = [
+	"im-app-add",
+	"im-app-status",
+	"im-app-remove",
+	"im-bind",
+	"im-unbind",
+	"im-status",
+	"channel-connect",
+	"channel-ingests"
+];
+const TOKEN_IM_PLATFORMS = /* @__PURE__ */ new Set([
+	"discord",
+	"slack",
+	"qq",
+	"dingtalk",
+	"wecom",
+	"matrix"
+]);
+const CONTROL_COMMANDS = [
+	"browser-access-set",
+	"computer-access-set",
+	"access",
+	"access-set",
+	"settings",
+	"settings-set",
+	"workspace-create",
+	"group-create"
+];
 const LIVE_COMMANDS = [
 	...IM_COMMANDS,
 	{
@@ -108932,6 +108982,98 @@ const LIVE_COMMANDS = [
 	{
 		command: "grant-create",
 		description: "authorize a Bot workspace through the live Host"
+	},
+	{
+		command: "browser-access-set",
+		description: "turn a Bot's Browser Access on or off through the live Host"
+	},
+	{
+		command: "computer-access-set",
+		description: "turn a Bot's Computer Access on or off through the live Host"
+	},
+	{
+		command: "access",
+		description: "read a Bot's access preset (workspace write or full access)"
+	},
+	{
+		command: "access-set",
+		description: "set a Bot's access preset; full access needs --acknowledge-risk"
+	},
+	{
+		command: "settings",
+		description: "read one live Host settings namespace"
+	},
+	{
+		command: "settings-set",
+		description: "patch one live Host settings namespace with JSON from stdin"
+	},
+	{
+		command: "workspace-create",
+		description: "register an absolute folder as a Host workspace"
+	},
+	{
+		command: "group-create",
+		description: "create a group Channel with one or more Bots"
+	},
+	{
+		command: "im-app-add",
+		description: "add a token-based IM app (Discord, Slack, …) with credentials JSON from stdin"
+	},
+	{
+		command: "im-app-status",
+		description: "read a token IM platform's apps and connection state"
+	},
+	{
+		command: "im-app-remove",
+		description: "remove a token IM app from the Provider"
+	},
+	{
+		command: "im-bind",
+		description: "bind a connected IM app to a Bot"
+	},
+	{
+		command: "im-unbind",
+		description: "unbind an IM app from a Bot"
+	},
+	{
+		command: "im-status",
+		description: "read a Bot's IM apps and bindings with reception state"
+	},
+	{
+		command: "channel-connect",
+		description: "connect an external group conversation to a Channel through a Bot's binding"
+	},
+	{
+		command: "channel-ingests",
+		description: "list a Channel's connected external conversations"
+	},
+	{
+		command: "browser-open",
+		description: "start a Bot's Browser and open its tab for viewing"
+	},
+	{
+		command: "browser-frame",
+		description: "save the current picture of a Bot's Browser to a file"
+	},
+	{
+		command: "browser-takeover",
+		description: "pause a Bot's Browser for Human input (--enabled) or hand it back (--disabled)"
+	},
+	{
+		command: "browser-stop",
+		description: "stop a Bot's Browser"
+	},
+	{
+		command: "computer-start",
+		description: "start the profile Computer with explicit authorization"
+	},
+	{
+		command: "computer-status",
+		description: "read the profile Computer target and state"
+	},
+	{
+		command: "computer-stop",
+		description: "stop the profile Computer"
 	}
 ];
 function usage$1(message) {
@@ -109011,7 +109153,7 @@ async function connectLiveHost(values, io, signal) {
 	};
 	const scrub = (value) => value.replaceAll(secret, "[redacted]").replaceAll(encodeURIComponent(secret), "[redacted]");
 	const rpc = async (method, args) => {
-		const name = method === "dsh-im/app-setup" ? method : `botharness/${method}`;
+		const name = method.includes("/") ? method : `botharness/${method}`;
 		const response = await request(new URL(`/api/${name}`, base), {
 			method: "POST",
 			headers: {
@@ -109022,7 +109164,7 @@ async function connectLiveHost(values, io, signal) {
 				type: "client-request",
 				rpcId: randomUUID(),
 				method: name,
-				payload: method === "dsh-im/app-setup" ? args : { args }
+				payload: method.startsWith("dsh-im/") ? args : { args }
 			})
 		});
 		const payload = await readResponse(response);
@@ -109070,9 +109212,40 @@ async function connectLiveHost(values, io, signal) {
 		}
 		return payload;
 	};
+	const http = async (path, body) => {
+		const response = await request(new URL(path, base), {
+			method: body === void 0 ? "GET" : "POST",
+			headers: {
+				cookie,
+				...body === void 0 ? {} : { "content-type": "application/json" }
+			},
+			...body === void 0 ? {} : { body: JSON.stringify(body) }
+		});
+		let bytes;
+		try {
+			bytes = new Uint8Array(await response.arrayBuffer());
+		} catch {
+			throw new CliLiveError("host-unreachable", "The Host response was interrupted before the command deadline.");
+		}
+		if (response.status === 401 || response.status === 403) throw new CliLiveError("host-unauthorized", "Host login was refused; refresh its launch token.");
+		if (!response.ok) {
+			let detail = {};
+			try {
+				detail = record(JSON.parse(new TextDecoder().decode(bytes)));
+			} catch {
+				detail = { error: new TextDecoder().decode(bytes).slice(0, 200) };
+			}
+			throw new CliLiveError(typeof detail["code"] === "string" ? scrub(detail["code"]) : "host-refused", scrub(typeof detail["error"] === "string" && detail["error"] !== "" ? detail["error"] : `The Host refused ${path} with HTTP ${String(response.status)}.`));
+		}
+		return {
+			response,
+			bytes
+		};
+	};
 	return {
 		rpc,
-		importBotZip
+		importBotZip,
+		http
 	};
 }
 async function runLiveCli(command, rest, values, io) {
@@ -109086,6 +109259,13 @@ async function runLiveCli(command, rest, values, io) {
 			throw error;
 		}
 	}
+	if (DEVICE_COMMANDS.some((entry) => entry === command)) return runDeviceCommand(command, rest, values, io);
+	if (command === "grants") {
+		if (rest.length !== 1 || !rest[0]?.trim()) usage$1("grants needs exactly one bot id.");
+		return (await connectLiveHost(values, io, AbortSignal.timeout(timeoutMs(values.timeout)))).rpc("grants", { slug: rest[0].trim() });
+	}
+	if (IM_CONTROL_COMMANDS.some((entry) => entry === command)) return runImControlCommand(command, rest, values, io);
+	if (CONTROL_COMMANDS.some((entry) => entry === command)) return runControlCommand(command, rest, values, io);
 	const noTarget = command === "release-info" || command === "workspace-options";
 	if (rest.length !== (noTarget ? 0 : 1)) usage$1(`${command} ${noTarget ? "takes no positional arguments" : "needs exactly one target id"}.`);
 	const target = rest[0]?.trim() ?? "";
@@ -109307,6 +109487,223 @@ async function runLiveCli(command, rest, values, io) {
 	});
 	return rpc("releaseInfo", values.since === void 0 ? {} : { since: values.since });
 }
+async function runControlCommand(command, rest, values, io) {
+	if (rest.length !== 1 || !rest[0]?.trim()) usage$1(`${command} needs exactly one target.`);
+	const target = rest[0].trim();
+	let patch;
+	if (command === "browser-access-set" || command === "computer-access-set") {
+		if (values.enabled === values.disabled) usage$1(`${command} needs exactly one of --enabled or --disabled.`);
+	}
+	if (command === "access-set") {
+		if (values.mode !== "workspace-write" && values.mode !== "danger-full-access") usage$1("--mode must be workspace-write or danger-full-access.");
+		if (values.scope !== void 0 && values.scope !== "chat" && values.scope !== "assignments") usage$1("--scope must be chat or assignments.");
+		if (values.mode === "danger-full-access" && values["acknowledge-risk"] !== true) usage$1("Full access lets the Bot run any command and use the Browser and Computer without asking. Pass --acknowledge-risk to confirm.");
+	}
+	if (command === "settings-set") {
+		if (values["patch-stdin"] !== true) usage$1("settings-set requires --patch-stdin.");
+		try {
+			const parsed = JSON.parse(await (io.readStdin?.() ?? Promise.resolve("")));
+			if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) throw new Error("not an object");
+			patch = parsed;
+		} catch {
+			usage$1("--patch-stdin must be a JSON object of settings fields.");
+		}
+	}
+	if (command === "workspace-create" && !target.startsWith("/") && !/^[A-Za-z]:[\\/]/u.test(target)) usage$1("workspace-create needs an absolute folder path.");
+	const members = (values.member ?? []).map((member) => member.trim()).filter(Boolean);
+	if (command === "group-create" && members.length === 0) usage$1("group-create needs at least one --member <bot-id>.");
+	const { rpc } = await connectLiveHost(values, io, AbortSignal.timeout(timeoutMs(values.timeout)));
+	if (command === "browser-access-set" || command === "computer-access-set") return rpc(command === "browser-access-set" ? "browserAccessSet" : "computerAccessSet", {
+		slug: target,
+		enabled: values.enabled === true
+	});
+	if (command === "access") return rpc("assignmentAccessGet", { slug: target });
+	if (command === "access-set") return rpc("assignmentAccessSet", {
+		slug: target,
+		mode: values.mode,
+		...values.scope === void 0 ? {} : { scope: values.scope },
+		...values.mode === "danger-full-access" ? { acknowledgeRisk: true } : {}
+	});
+	if (command === "workspace-create") return rpc("workspace/create", { request: { path: target } });
+	if (command === "group-create") return rpc("channelCreate", {
+		name: target,
+		members
+	});
+	const described = record(await rpc("settings/describe", {}));
+	const found = (Array.isArray(described["namespaces"]) ? described["namespaces"] : []).map(record).find((entry) => entry["ns"] === target);
+	if (found === void 0) throw new CliLiveError("unknown-settings", `The Host has no settings namespace ${target}.`);
+	if (command === "settings") return {
+		ns: target,
+		revision: found["revision"],
+		value: found["value"]
+	};
+	const updated = record(await rpc("settings/update", {
+		ns: target,
+		patch,
+		expectedRevision: found["revision"]
+	}));
+	return {
+		ns: target,
+		revision: updated["revision"],
+		value: updated["value"]
+	};
+}
+function appSummary(value) {
+	const app = record(value);
+	const bot = record(app["bot"]);
+	const error = app["error"] === null || app["error"] === void 0 ? null : record(app["error"]);
+	return {
+		id: app["botId"],
+		name: bot["name"] ?? app["name"],
+		state: app["state"],
+		connected: app["connected"] === true,
+		error: error === null ? null : {
+			code: error["code"],
+			message: error["message"]
+		},
+		...app["stats"] === void 0 ? {} : { stats: app["stats"] }
+	};
+}
+function connectionSummary(platform, value) {
+	const status = record(value);
+	return {
+		platform,
+		state: status["state"],
+		apps: (Array.isArray(status["bots"]) ? status["bots"] : []).map(appSummary)
+	};
+}
+async function runImControlCommand(command, rest, values, io) {
+	if (rest.length !== 1 || !rest[0]?.trim()) usage$1(`${command} needs exactly one target.`);
+	const target = rest[0].trim();
+	const app = values.app?.trim() ?? "";
+	if ((command === "im-app-add" || command === "im-app-status" || command === "im-app-remove") && !TOKEN_IM_PLATFORMS.has(target)) usage$1(`${command} supports ${[...TOKEN_IM_PLATFORMS].join(", ")}; use im-authorize for feishu or weixin.`);
+	let credentials;
+	if (command === "im-app-add") {
+		if (values["credentials-stdin"] !== true) usage$1("im-app-add requires --credentials-stdin.");
+		try {
+			const parsed = JSON.parse(await (io.readStdin?.() ?? Promise.resolve("")));
+			if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) throw new Error("not an object");
+			credentials = parsed;
+		} catch {
+			usage$1("--credentials-stdin must be a JSON object, for example {\"token\":\"…\"}.");
+		}
+	}
+	if ((command === "im-app-remove" || command === "im-bind" || command === "im-unbind") && !app) usage$1(`${command} requires --app <app-id>.`);
+	if (command === "channel-connect" && (!values.bot?.trim() || !values.conversation?.trim())) usage$1("channel-connect requires --bot <bot-id> and --conversation <external-id>.");
+	const { rpc } = await connectLiveHost(values, io, AbortSignal.timeout(timeoutMs(values.timeout)));
+	const provider = (method, payload) => rpc(`dsh-im/${target}`, {
+		method,
+		payload
+	});
+	if (command === "im-app-add") return connectionSummary(target, await provider("bot.bind-credentials", credentials));
+	if (command === "im-app-status") return connectionSummary(target, await provider("connection.status", {}));
+	if (command === "im-app-remove") return connectionSummary(target, await provider("bot.delete", {
+		botId: app,
+		confirm: true
+	}));
+	if (command === "channel-ingests") return rpc("channelIngests", { channelId: target });
+	if (command === "im-bind") {
+		const apps = record(await rpc("messagingApps", {}));
+		const found = (Array.isArray(apps["apps"]) ? apps["apps"] : []).map(record).find((entry) => entry["ref"] === app);
+		if (found === void 0) throw new CliLiveError("unknown-app", `The Host has no connected IM app ${app}.`);
+		return rpc("messagingIdentity", {
+			slug: target,
+			input: {
+				kind: "bind",
+				providerId: found["providerId"],
+				accountRef: found["ref"],
+				fingerprint: found["fingerprint"]
+			}
+		});
+	}
+	const slug = command === "channel-connect" ? values.bot.trim() : target;
+	const snapshot = record(await rpc("messagingSnapshot", { slug }));
+	const identities = (Array.isArray(snapshot["identities"]) ? snapshot["identities"] : []).map(record);
+	if (command === "im-status") return {
+		apps: (Array.isArray(snapshot["accounts"]) ? snapshot["accounts"] : []).map(record).map((entry) => ({
+			ref: entry["ref"],
+			platform: entry["platform"],
+			name: entry["name"],
+			connected: entry["connected"] === true
+		})),
+		bindings: identities.map((entry) => ({
+			id: entry["id"],
+			app: entry["accountRef"],
+			platform: entry["platform"],
+			name: entry["name"],
+			enabled: entry["enabled"],
+			availability: entry["availability"],
+			reception: entry["reception"],
+			conversations: entry["grantCount"]
+		}))
+	};
+	const binding = identities.find((entry) => command === "channel-connect" ? app === "" || entry["accountRef"] === app : entry["accountRef"] === app);
+	if (binding === void 0) throw new CliLiveError("unknown-binding", command === "channel-connect" ? `Bot ${slug} has no IM app binding to connect through.` : `Bot ${slug} is not bound to IM app ${app}.`);
+	if (command === "im-unbind") return rpc("messagingIdentity", {
+		slug,
+		input: {
+			kind: "unbind",
+			id: binding["id"],
+			expectedRevision: binding["revision"]
+		}
+	});
+	return rpc("channelIngest", {
+		channelId: target,
+		input: {
+			kind: "add",
+			bindingId: binding["id"],
+			conversation: {
+				kind: "group",
+				id: values.conversation.trim()
+			}
+		}
+	});
+}
+async function runDeviceCommand(command, rest, values, io) {
+	const computer = command.startsWith("computer-");
+	if (computer ? rest.length !== 0 : rest.length !== 1 || !rest[0]?.trim()) usage$1(computer ? `${command} takes no positional arguments.` : `${command} needs exactly one bot id.`);
+	const slug = rest[0]?.trim() ?? "";
+	if (command === "browser-frame") {
+		const out = values.out ?? "";
+		if (!out.startsWith("/") && !/^[A-Za-z]:[\\/]/u.test(out)) usage$1("browser-frame requires --out <absolute-file>.");
+	}
+	if (command === "browser-takeover" && values.enabled === values.disabled) usage$1("browser-takeover needs exactly one of --enabled or --disabled.");
+	if (command === "computer-start" && values.target !== void 0 && values.target !== "local" && values.target !== "container") usage$1("--target must be local or container.");
+	const { http } = await connectLiveHost(values, io, AbortSignal.timeout(timeoutMs(values.timeout)));
+	const json = async (path, body) => {
+		const { bytes } = await http(path, body);
+		try {
+			return JSON.parse(new TextDecoder().decode(bytes));
+		} catch {
+			throw new CliLiveError("host-protocol-error", `The Host returned no JSON for ${path}.`);
+		}
+	};
+	if (command === "browser-open") return json("/api/browser/open", { slug });
+	if (command === "browser-takeover") return json("/api/browser/takeover", {
+		slug,
+		active: values.enabled === true
+	});
+	if (command === "browser-stop") return json("/api/browser/stop", { slug });
+	if (command === "computer-start") return json("/api/computer/start", {
+		authorize: true,
+		...values.target === void 0 ? {} : { target: values.target }
+	});
+	if (command === "computer-status") return json("/api/computer/status");
+	if (command === "computer-stop") return json("/api/computer/stop", { authorize: true });
+	const { response, bytes } = await http(`/botharness-browser/viewer/local/frame?slug=${encodeURIComponent(slug)}`);
+	writeFileSync(values.out, bytes, { mode: 384 });
+	const width = Number(response.headers.get("x-viewport-width"));
+	const height = Number(response.headers.get("x-viewport-height"));
+	return {
+		path: values.out,
+		bytes: bytes.byteLength,
+		mimeType: response.headers.get("content-type"),
+		...width > 0 && height > 0 ? { viewport: {
+			width,
+			height
+		} } : {}
+	};
+}
 //#endregion
 //#region packages/core/src/bots/cli-management.ts
 const ONLINE_MANAGEMENT_COMMANDS = [
@@ -109606,6 +110003,29 @@ Usage:
   deepseekbot release-info [--since <version>]
   deepseekbot workspace-options
   deepseekbot grant-create <id> --workspace <workspace-id>
+  deepseekbot browser-access-set <id> (--enabled | --disabled)
+  deepseekbot computer-access-set <id> (--enabled | --disabled)
+  deepseekbot access <id>
+  deepseekbot access-set <id> --mode workspace-write|danger-full-access [--scope chat|assignments] [--acknowledge-risk]
+  deepseekbot settings <namespace>
+  deepseekbot settings-set <namespace> --patch-stdin
+  deepseekbot workspace-create <absolute-path>
+  deepseekbot group-create <name> --member <bot-id> [--member <bot-id> ...]
+  deepseekbot im-app-add <discord|slack|qq|dingtalk|wecom|matrix> --credentials-stdin
+  deepseekbot im-app-status <platform>
+  deepseekbot im-app-remove <platform> --app <app-id>
+  deepseekbot im-bind <id> --app <app-id>
+  deepseekbot im-unbind <id> --app <app-id>
+  deepseekbot im-status <id>
+  deepseekbot channel-connect <channel> --bot <id> --conversation <external-id> [--app <app-id>]
+  deepseekbot channel-ingests <channel>
+  deepseekbot browser-open <id>
+  deepseekbot browser-frame <id> --out <absolute-file>
+  deepseekbot browser-takeover <id> (--enabled | --disabled)
+  deepseekbot browser-stop <id>
+  deepseekbot computer-start [--target local|container]
+  deepseekbot computer-status
+  deepseekbot computer-stop
   deepseekbot bot-attention <id> [--limit <1-100>] [--cursor <source-id>] [--state <state>]
   deepseekbot bot-sessions <id> [--limit <1-100>]
   deepseekbot bot-activity <id> [--limit <1-100>]
@@ -111506,7 +111926,7 @@ async function runBotCreateCli(argv, io) {
 			out.stdout(JSON.stringify(await runOnlineManagement(command, rest, values, io, input, bundle), null, 2));
 			return 0;
 		}
-		if (LIVE_COMMANDS.some((entry) => entry.command === command) || command === "channel-messages" && (values.host !== void 0 || io.env["DEEPSEEKBOT_HOST"] !== void 0)) {
+		if (LIVE_COMMANDS.some((entry) => entry.command === command) || (command === "channel-messages" || command === "grants") && (values.host !== void 0 || io.env["DEEPSEEKBOT_HOST"] !== void 0)) {
 			if (values.home !== void 0) throw usageError("Do not combine --home and an online Host target.");
 			out.stdout(JSON.stringify(await runLiveCli(command, rest, values, io), null, 2));
 			return 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botharness/core",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "description": "BotHarness core: PersonaBot registry, memory, and state",
   "files": [
     "dist",
@@ -25,7 +25,7 @@
     "@deepseek-ai/dsh-tools": ">=0.2.0-0"
   },
   "engines": {
-    "dsh": ">=0.2.0-0",
+    "dsh": "0.2.0-rc.2",
     "node": ">=22.16"
   },
   "dsh": {