npm - @botharness/core - Versions diffs - 1.3.0 → 1.4.0 - Mend

@botharness/core 1.3.0 → 1.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (6) hide show

package/CHANGELOG.md CHANGED Viewed

@@ -6,11 +6,149 @@ Unreleased entries arrive as [change fragments](changes/README.md) and are folde
 ## [Unreleased]
-No changes since 1.3.0 yet.
+No changes since 1.4.0 yet.
+## [1.4.0] - 2026-10-19
+Tob and a simpler Home bring Bot management into conversation, a persistent panel workspace makes room for each Channel, and expanded CLI, approvals and DSH compatibility support everyday work.
+Mobile app and Cloud entries below describe independently versioned development/UAT work; this npm release does not publish a mobile app or enable production Cloud services. Back up your Profile before upgrading; restoring an older binary can require the pre-upgrade backup.
+### Added
+- Home introduces Tob, the protected local steward, with model setup, a shared chat composer, an editable greeting and suggestions that fill a draft; below it, borderless Token history and Bot activity cards form two columns or stack in narrow panels, and Bot rows reopen the existing DM without disturbing saved layouts or shortcuts ([#2082](https://github.com/BotHarness/DeepSeekBot/issues/2082), [#2184](https://github.com/BotHarness/DeepSeekBot/issues/2184)).
+- Tob discovers and uses the installed DeepSeekBot CLI to manage models, presets, Assignment concurrency and runtime preferences, create and configure Bots with personality and Memory, and create groups, invite or remove Bots, change group settings and handle pending membership requests. Existing Human authority, approval and stale-write checks remain in force; operation keys recover lost responses without duplicating resources, and invitations auto-accept by default unless the Human disabled the Profile-wide setting ([#2088](https://github.com/BotHarness/DeepSeekBot/issues/2088), [CLI guide](docs/bot-cli.md#tob-model-and-runtime-management), [#2089](https://github.com/BotHarness/DeepSeekBot/issues/2089), [CLI guide](docs/bot-cli.md#tob-bot-creation-profiles-and-lifecycle), [#2090](https://github.com/BotHarness/DeepSeekBot/issues/2090), [CLI guide](docs/bot-cli.md#tob-group-creation-and-invitations), [CLI guide](docs/bot-cli.md#tob-invitation-cancellation-and-join-decisions), [CLI guide](docs/bot-cli.md#tob-group-settings-and-member-removal), [#2087](https://github.com/BotHarness/DeepSeekBot/issues/2087), [CLI guide](docs/bot-cli.md#home-and-tob)).
+- The CLI can inspect Bot traces and directly list or run Bot, Browser and Computer tools through the same authorization and audit paths, without a model; session-only operations are explicitly refused and secret tools are omitted from trace output ([#1682](https://github.com/BotHarness/DeepSeekBot/issues/1682), [#1695](https://github.com/BotHarness/DeepSeekBot/issues/1695)).
+- Live Host CLI commands cover Memory history, diffs, checkpoints and guarded restore; schedules and run history; Human Inbox decisions, session inspection, approval-rule revocation, Workspace Grants and private MCP lifecycle, with confirmation required for destructive operations ([#1690](https://github.com/BotHarness/DeepSeekBot/issues/1690), [#1696](https://github.com/BotHarness/DeepSeekBot/issues/1696), [#1699](https://github.com/BotHarness/DeepSeekBot/issues/1699)).
+- The CLI exposes Host-owned channel/group membership and policies, messaging and IM bindings, model plans and presets, Bot appearance and wake settings, Browser/Computer diagnostics and archives, Marketplace, usage/activity, releases and pairing review. Commands retain the UI permission checks and coded refusals, with explicit confirmation for installation, removal and other dangerous changes ([#1697](https://github.com/BotHarness/DeepSeekBot/issues/1697), [#1698](https://github.com/BotHarness/DeepSeekBot/issues/1698), [#1700](https://github.com/BotHarness/DeepSeekBot/issues/1700), [#1701](https://github.com/BotHarness/DeepSeekBot/issues/1701), [#1702](https://github.com/BotHarness/DeepSeekBot/issues/1702), [#1703](https://github.com/BotHarness/DeepSeekBot/issues/1703)).
+- Choose or author an Approval Template and optionally a shared reviewer model; a tool-free Approval Review Session allows, rejects or escalates eligible operations, including masked secret-tool and Browser/Computer requests, while keeping decisions visible. Rejections enter the Human Inbox for an exact one-time override, repeated rejections pause auto approval, and active-template or reviewer-setting changes still require Human approval ([#1823](https://github.com/BotHarness/DeepSeekBot/issues/1823), [#1824](https://github.com/BotHarness/DeepSeekBot/issues/1824), [#1825](https://github.com/BotHarness/DeepSeekBot/issues/1825), [#1826](https://github.com/BotHarness/DeepSeekBot/issues/1826), [#1827](https://github.com/BotHarness/DeepSeekBot/issues/1827), [#1822](https://github.com/BotHarness/DeepSeekBot/issues/1822), [#1871](https://github.com/BotHarness/DeepSeekBot/pull/1871)).
+- Opt-in Group send review can hold stale replies, incorporate new context, yield to observed peer answers and explicitly complete Inbox work, with two rechecks and bounded continuation or snooze. Interrupted drafts recover from fresh observations and duplicate-safe receipts across restart; changed attachments, revoked membership and uncertain side effects cannot silently produce a stale or duplicate reply ([#2053](https://github.com/BotHarness/DeepSeekBot/issues/2053), [#2054](https://github.com/BotHarness/DeepSeekBot/issues/2054), [#2055](https://github.com/BotHarness/DeepSeekBot/issues/2055), [#2056](https://github.com/BotHarness/DeepSeekBot/issues/2056)).
+- Pair a phone with a ten-minute QR/link, retain access across Host restarts and revoke it with its live connections; the mobile full-client view opens Bot mode, DMs, private input and Browser/Computer viewers using that paired identity ([ADR-0199](docs/adr/0199-paired-devices-reach-the-host-through-a-same-listener-device-gateway.md), [#1652](https://github.com/BotHarness/DeepSeekBot/issues/1652), [#1654](https://github.com/BotHarness/DeepSeekBot/issues/1654), [#1687](https://github.com/BotHarness/DeepSeekBot/issues/1687), [#1845](https://github.com/BotHarness/DeepSeekBot/issues/1845)).
+- Paired phones can receive request and reply notifications, open the exact pending item and decide eligible tool approvals from notification actions; private input stays content-free, revocation removes notification access, and reconnect repairs registration ([ADR-0202](docs/adr/0202-phone-push-is-a-content-free-projection-of-the-human-inbox.md), [#1655](https://github.com/BotHarness/DeepSeekBot/issues/1655)).
+- Mobile Browser and Computer viewers support direct or trackpad input, sticky modifier keys, keyboard entry and handing control back to the Bot; local Computer takeover begins on input and expires after idle time. Qualified container viewers can use tailnet-only WebRTC, falling back to WebSocket, with CLI probes and revocation checks ([#1798](https://github.com/BotHarness/DeepSeekBot/issues/1798), [#1799](https://github.com/BotHarness/DeepSeekBot/issues/1799), [#1832](https://github.com/BotHarness/DeepSeekBot/issues/1832), [#1862](https://github.com/BotHarness/DeepSeekBot/pull/1862), [#1865](https://github.com/BotHarness/DeepSeekBot/pull/1865)).
+- Mobile profiles can manage group membership and routines, inspect usage and Memory activity across time ranges, and configure global or per-Bot models and complete Assignment presets; usage details retain reported counts when some calls are unknown ([#1894](https://github.com/BotHarness/DeepSeekBot/issues/1894), [#1895](https://github.com/BotHarness/DeepSeekBot/issues/1895), [#1897](https://github.com/BotHarness/DeepSeekBot/issues/1897), [#1899](https://github.com/BotHarness/DeepSeekBot/pull/1899), [#1911](https://github.com/BotHarness/DeepSeekBot/pull/1911), [#1912](https://github.com/BotHarness/DeepSeekBot/issues/1912), [#2086](https://github.com/BotHarness/DeepSeekBot/issues/2086)).
+- Development/UAT Cloud services add WorkOS sign-in, workspaces, durable text Channels, member/guest invitations and scoped Agent health requests, with a mobile drawer that distinguishes local Computers from Cloud and keeps drafts and navigation bound to their source. These are development capabilities, not a production Cloud or app-store launch ([#2101](https://github.com/BotHarness/DeepSeekBot/issues/2101), [#2120](https://github.com/BotHarness/DeepSeekBot/issues/2120), [#2130](https://github.com/BotHarness/DeepSeekBot/issues/2130), [#2137](https://github.com/BotHarness/DeepSeekBot/issues/2137), [#2145](https://github.com/BotHarness/DeepSeekBot/issues/2145), [#2148](https://github.com/BotHarness/DeepSeekBot/issues/2148), [#2151](https://github.com/BotHarness/DeepSeekBot/issues/2151), [#2153](https://github.com/BotHarness/DeepSeekBot/issues/2153), [#2155](https://github.com/BotHarness/DeepSeekBot/issues/2155), [#2161](https://github.com/BotHarness/DeepSeekBot/issues/2161), [#2179](https://github.com/BotHarness/DeepSeekBot/issues/2179), [#2174](https://github.com/BotHarness/DeepSeekBot/issues/2174)).
+- Show checked Lark/Feishu parent files in their Channel request bubble, with bounded original download, retry feedback and existing Host application choices when available; Human access preserves current source authorization without waking a Bot ([#1022](https://github.com/BotHarness/DeepSeekBot/issues/1022)).
+- Keep the installed `deepseekbot` CLI independent of Host-only DSH modules so authorized media commands also start outside a running Host process ([#1022](https://github.com/BotHarness/DeepSeekBot/issues/1022)).
+- QQ can explicitly post a retained delayed result through an authorized saved group target using the shared Outbox, current app identity, final authorization and hourly quota; expired replies and uncertain sends remain separate outcomes, with real QQ qualification tracked independently ([#1154](https://github.com/BotHarness/DeepSeekBot/issues/1154)).
+- QQ's checked consumer can forward ordinary group text for fresh receiver qualification and explicit per-conversation collection. Existing Observation and count/time harvest keep collection separate from intentional own-app posting; old events from blocked intake intervals do not qualify a newly allowed conversation. The product includes the qualified Provider as independently versioned `4.32.0-botharness.21`; real application and Client acceptance remain separately tracked ([#1155](https://github.com/BotHarness/DeepSeekBot/issues/1155)).
+- Stop a PersonaBot from the Web Client too. While a Bot in the DM or Group Channel is thinking or working and the composer is empty, the Send button becomes **Stop**; pressing it ends that Bot's current turn, the same as the mobile Stop. In a Group Channel it stops every Bot that is working there. Start typing and the button turns back into Send, so you can still steer the Bot instead ([#1721](https://github.com/BotHarness/DeepSeekBot/issues/1721)).
+- Drag files anywhere onto a conversation to attach them; a drop target appears while files hover ([#1725](https://github.com/BotHarness/DeepSeekBot/issues/1725)).
+- Settings → Messaging → Send messages offers Enter, Shift+Enter and ⌘/Ctrl+Enter, with keycap labels and the matching newline behavior ([#1726](https://github.com/BotHarness/DeepSeekBot/issues/1726)).
+- New composer slash commands: `/memory` and `/sessions` in a DM, plus `/profile`, `/settings` and `/sidebar` in DMs and Group Channels ([#1727](https://github.com/BotHarness/DeepSeekBot/issues/1727)).
+- Your own messages that use Markdown (code blocks, inline code, bold, lists, headings, quotes, links, tables) now render formatted, keeping the line breaks you typed ([#1728](https://github.com/BotHarness/DeepSeekBot/issues/1728)).
+- In Bot mode, Ctrl+K (⌘K on macOS) opens a quick switcher: type part of a PersonaBot, group chat or channel name — Chinese names included — then use the arrow keys and Enter to open it the same way its sidebar row does. An empty search lists recent conversations, hidden channels rank last, and the shortcut also works while typing in the composer ([#1740](https://github.com/BotHarness/DeepSeekBot/issues/1740)).
+- Hovering or keyboard-focusing a Bot's avatar or name in a DM or group conversation now opens a small profile card with its roles, description and current status (thinking, working on what, waiting or blocked), plus Message and Profile buttons; a Human author's card shows just the name. The card replaces the browser's plain tooltip ([#1744](https://github.com/BotHarness/DeepSeekBot/issues/1744)).
+- The browser tab title now shows the Human Inbox unread count, with a ● mark while something waits for your decision, for example `● (3) DeepSeek Harness` ([#1746](https://github.com/BotHarness/DeepSeekBot/issues/1746)).
+- Desktop notifications: turn on **Desktop notifications** in Bot settings › Notifications, and while the page is in the background this browser shows a system notification when a Bot needs your approval or an answer, mentions or replies to you, or finishes replying in a DM. Clicking it opens the message ([#1747](https://github.com/BotHarness/DeepSeekBot/issues/1747)).
+- Press `?` or Ctrl+/ (⌘+/ on Mac) in Bot mode to see every keyboard shortcut; the list is also under Bot settings › Keyboard shortcuts ([#1748](https://github.com/BotHarness/DeepSeekBot/issues/1748)).
+- Tool approval and question cards use compact, borderless controls with visible outcomes, expandable details and file diffs, expiry feedback and keyboard actions; single-choice questions can be answered directly while higher-risk always-allow choices keep their confirmation ([#1749](https://github.com/BotHarness/DeepSeekBot/issues/1749), [#1752](https://github.com/BotHarness/DeepSeekBot/issues/1752), [#1753](https://github.com/BotHarness/DeepSeekBot/issues/1753)).
+- The Human Inbox moves with `J`/`K`, opens the source with Enter, marks an item handled with `E`, selects with `X` and snoozes with `S`. Selected items can be marked handled together, and selected tool approvals allowed once or rejected together. **Remind me later** hides an item until a chosen time; the **Snoozed** filter lists them and brings one back, and `deepseekbot inbox-snooze` does the same from the CLI ([#1750](https://github.com/BotHarness/DeepSeekBot/issues/1750), [#1751](https://github.com/BotHarness/DeepSeekBot/issues/1751), [#1754](https://github.com/BotHarness/DeepSeekBot/issues/1754)).
+- In a group Channel, right-clicking a Bot's avatar opens a menu to send it a message, @mention it in the composer, or view its profile ([#1757](https://github.com/BotHarness/DeepSeekBot/pull/1757)).
+- The Bot mode sidebar now shows how many unread Bot messages each DM and group has. Right-click a conversation for **Mark as read** or **Mute**, or pick **Mark all as read** from the sidebar's **⋯** menu; a muted conversation turns grey and stays out of the Activity unread total. Hiding or moving conversations shows a toast with **Undo**. Alt+↑/↓ moves to the previous or next conversation and Alt+Shift+↑/↓ jumps to the previous or next unread one. `deepseekbot channel-unread` and `deepseekbot channel-mute` do the same from the CLI ([#1738](https://github.com/BotHarness/DeepSeekBot/issues/1738), [#1739](https://github.com/BotHarness/DeepSeekBot/issues/1739), [#1741](https://github.com/BotHarness/DeepSeekBot/issues/1741), [#1742](https://github.com/BotHarness/DeepSeekBot/issues/1742), [#1743](https://github.com/BotHarness/DeepSeekBot/issues/1743)).
+- Opening a conversation with unread replies now shows a New messages divider at your last-read point, switching conversations keeps the message you were reading, long messages fold behind Show all, each grouped message shows its own time on hover, images open in an in-page preview you can step through with the arrow keys, you can react to a message with an emoji from its hover bar or, on a phone, its long-press menu, and Bots can react too by passing `react_to` and `reaction` to `channel_send`, with or without a reply in the same call (Bots see the reactions when they read the Channel, and `deepseekbot channel-react` adds yours), and Ctrl/⌘+F searches the open conversation and jumps to a match (`deepseekbot channel-search` runs the same search) ([#1769](https://github.com/BotHarness/DeepSeekBot/pull/1769)).
+- When creating a Bot, **Advanced settings → Memory location** lets you keep its memory files in a folder you choose, such as another drive, instead of the default DSH data folder. `deepseekbot create --memory-location <dir>` does the same from the command line ([#1772](https://github.com/BotHarness/DeepSeekBot/issues/1772)).
+- You can now move an existing Bot's memory files to another folder, or back to the default one, from the Bot's **Workspace Grants → Memory Repository** row. The Bot starts a new main session in the new folder; chats and Memory history stay. `deepseekbot memory-move <id> --memory-location <dir>` does the same from the command line ([#1772](https://github.com/BotHarness/DeepSeekBot/issues/1772)).
+- Navigation shortcuts can be changed: open the shortcut list (`?` or Ctrl/⌘+/), choose **Change** next to Bot mode, quick switcher, previous/next (unread) conversation or the list itself, and press the new keys. A shortcut needs Ctrl/⌘ or Alt, cannot reuse one that is taken or reserved, and **Reset** brings back the default. On macOS the list shows ⌘ ⌥ ⇧ ([#1775](https://github.com/BotHarness/DeepSeekBot/issues/1775)).
+- Other plugins can now add their own panels to the desktop Bot mode layout through the `dockPanels` Service. A panel either follows the active Channel or stays the same across Channels, and it appears in the Panels menu next to the built-in ones ([#1791](https://github.com/BotHarness/DeepSeekBot/issues/1791)).
+- Added the to-do example plugin's Host part, `@botharness/todo`: a shared to-do list kept in DSH storage, Bot tools (`todos_list`, `todos_add`, `todos_update`, `todos_remove`) that let a PersonaBot track things for the Human, and `deepseekbot todos` / `todo-*` commands that read and change the list or run a tool without the model. Its To-do Dock panel follows in a later release ([ADR-0203](docs/adr/0203-bot-mode-is-a-dockable-layout-that-plugins-extend-with-dock-panels.md), [#1792](https://github.com/BotHarness/DeepSeekBot/issues/1792)).
+- In the DeepSeekBot mobile app, long-press a DM message to copy its whole text, and the phone gives a light tap of feedback when you send a message, allow or deny a Tool approval, or submit an answer. Chat photos now stay cached on the phone, so they reopen offline and no longer flash an earlier photo while you scroll ([#1807](https://github.com/BotHarness/DeepSeekBot/issues/1807)).
+- Ask a PersonaBot in chat to create another PersonaBot. It fills in the name, Bio, Tags, Avatar, Soul and Core Memory from the conversation and can place the new Bot's Memory in a folder you name. The call follows the same tool approval and saved rules as other Bot tools; when it asks you, the card previews the new Bot and its Memory folder. The new Bot appears in the sidebar with its DM, and `deepseekbot create` gains `--avatar-file` and `--core-memory` ([#1858](https://github.com/BotHarness/DeepSeekBot/issues/1858)).
+- Host-wide token usage on the Overview page can now cover the last 4 weeks and the last 12 weeks, not only today and the last 7 days; `deepseekbot overview-usage --period month|quarter` reads the same ranges ([#1898](https://github.com/BotHarness/DeepSeekBot/issues/1898)).
+- Bot Marketplace search and topic filters include the Bot's own `.botharness/bot.json` tags (including legacy `roles`) alongside GitHub topics, counting each Bot once per tag ([#1907](https://github.com/BotHarness/DeepSeekBot/issues/1907)).
+- Mobile chats now show single-line Bot activity aligned with message bubbles, with consistent gaps and contextual avatars. Long-press reveals full details and an explicit action to open the related conversation, memory files or new Bot; two device-local switches in the Bot profile control posts and memory updates mirrored into its Human DM ([#1919](https://github.com/BotHarness/DeepSeekBot/issues/1919)).
+- Settings → About in the Web Client and in the DeepSeekBot mobile app shows a build id: the short git commit and the local build time (the mobile app also shows its version and branch), so a test build can be told apart at a glance; tapping the mobile row copies it ([#1923](https://github.com/BotHarness/DeepSeekBot/pull/1923)).
+- Added default-on optional phone statistics at the bottom of Settings with collapsed details, with anonymous pairing, connection and first-chat results through the official PostHog React Native SDK; a first-use notice follows the Web client, and production enablement awaits public privacy copy, device and Human QA ([#1935](https://github.com/BotHarness/DeepSeekBot/issues/1935)).
+- Customize the composer footer’s model, Workspace, usage and optional generation-speed controls through its context menu, drag ordering or keyboard alternatives; preferences stay device-local, narrow panels keep controls readable, and hidden metrics do not fetch history ([#1958](https://github.com/BotHarness/DeepSeekBot/issues/1958)).
+- Add a "Model" submenu to a Bot's right-click menu in the roster: pick from the models and efforts the Bot may use, with the current choice marked; selecting one applies it as the Bot's default without opening the profile ([#1959](https://github.com/BotHarness/DeepSeekBot/issues/1959)).
+- The chat’s right dock gains a Bot files panel with per-Bot attachment history, including older messages. Files open through the existing attachment viewer and can be referenced through the composer. Selections survive timeline navigation and draft recovery, share the ten-file upload limit, and can be removed without deleting the file ([#1960](https://github.com/BotHarness/DeepSeekBot/issues/1960)).
+- WeChat paired-owner conversations can be mirrored into the Bot’s local DM, with a separate option to forward local DM messages back to that account. Both switches default off and include clickable help. Mirroring reuses original content, follows content purge, and adds no second wake. Local approval, private-input and other control cards are not forwarded. Forwarding preserves the exact account boundary and stops unsent work when disabled ([#1983](https://github.com/BotHarness/DeepSeekBot/issues/1983), [spec #1990](https://github.com/BotHarness/DeepSeekBot/issues/1990)).
+- Added a collapsible DeepSeekBot section with Bot/persona subgroups to the DSH Session list, keeping each Bot's Orchestrator and Assignment Sessions together across execution directories and using the configured Bot icon for the outer header ([#1997](https://github.com/BotHarness/DeepSeekBot/issues/1997)).
+- Bot subgroup headers show their owning PersonaBot avatars instead of disclosure chevrons, while the whole header still toggles the group ([#1997](https://github.com/BotHarness/DeepSeekBot/issues/1997)).
+- Added inline `/model <text>` and `/effort <text>` pickers to a Bot DM composer: they list the same catalog models and reasoning efforts as the Bot's right-click menu, filter by the typed text, mark the current choice, and change only this Bot’s Orchestrator at the next turn, preserving fixed or inherited Assignment settings ([#2000](https://github.com/BotHarness/DeepSeekBot/issues/2000)).
+- Answer Hermes-style slash commands sent as a whole DM message directly in the IM chat without starting a Bot turn: `/commands`, `/help`, `/status`, `/model`, `/effort`, `/stop` and `/new`, with Chinese aliases and full-width `／` accepted ([#2005](https://github.com/BotHarness/DeepSeekBot/issues/2005)).
+- Read-only replies are open to any admitted DM sender; model, effort, stop and fresh-session changes stay limited to admitted senders on Weixin and current management pairings with approval capability elsewhere. Commands run in order per Bot, recheck revoked authority, preserve Assignment model settings, and retain reply outcomes in the existing Outbox; group and attachment messages keep their normal path ([#2005](https://github.com/BotHarness/DeepSeekBot/issues/2005)).
+- Add `deepseekbot bot-new-session <Bot ID>` to retire an idle Orchestrator Session through the same Host runtime as `/new` ([#2005](https://github.com/BotHarness/DeepSeekBot/issues/2005)).
+- Added a Mention shortcut and icons to Channel sidebar member menus; selecting a member keeps the current draft and focuses the composer ([#2009](https://github.com/BotHarness/DeepSeekBot/issues/2009)).
+- Mobile chats can preview and save a device-local photo or solid background, with Fill/Fit, image position and background fade. Set a default in Settings or customize a DM/group; cancel and failed saves retain the saved choice ([#2118](https://github.com/BotHarness/DeepSeekBot/issues/2118)).
+### Changed
+- Existing CLI scripts that update Bots must supply `--expected-profile`; `bot-delete-confirm` and `bot-delete-retry` now require `--confirm`, preserving reviewed snapshots and explicit destructive confirmation ([#2089](https://github.com/BotHarness/DeepSeekBot/issues/2089)).
+- DeepSeekBot supports DSH `>=0.2.0-rc.2 <0.3.0-0`, retaining the existing minimum while adapting Owner identity, tools and foreground/background Subagent delegation to DSH 0.2.1-rc.2; development stays pinned and future 0.2.x admission does not imply runtime qualification ([#2167](https://github.com/BotHarness/DeepSeekBot/issues/2167), [compatibility policy #423](https://github.com/BotHarness/DeepSeekBot/issues/423)).
+- Desktop onboarding now guides model setup, creating a Bot and group through Tob, arranging panels, and clicking the Home title to close it and enter the conversation; existing approvals, histories and layouts survive migration, and new Bots start without an automatic welcome letter ([#2192](https://github.com/BotHarness/DeepSeekBot/issues/2192)).
+- The desktop workspace uses an independent Channel list, Messages and Activity panels with a full-height Control Rail, draggable placement, persistent sizing, configurable gaps and shortcuts, and context menus for visibility. Settings gains cross-page search and dedicated Appearance, Messaging, Notifications and Keyboard pages; panel headers, centered empty states, light/dark surfaces, zoom-safe menus and fading scrollbars are unified, and Channel switching preserves unrelated panels and drafts ([#1829](https://github.com/BotHarness/DeepSeekBot/issues/1829), [#2017](https://github.com/BotHarness/DeepSeekBot/issues/2017), [#1789](https://github.com/BotHarness/DeepSeekBot/issues/1789), [#1790](https://github.com/BotHarness/DeepSeekBot/issues/1790), [#2016](https://github.com/BotHarness/DeepSeekBot/issues/2016), [#2042](https://github.com/BotHarness/DeepSeekBot/issues/2042), [#2014](https://github.com/BotHarness/DeepSeekBot/issues/2014)).
+- Sessions, Memory files, Memory evolution, Schedules, Browser and Computer live inside Messages with freely nested rows and columns, per-Channel placement, proportions and visibility; reopening or resizing preserves the layout, narrow titles truncate while actions remain available, and old layouts and shortcuts migrate. Bot-only panels stay out of Groups; Channel files and the Bot Inbox open on demand from the Messages header ([#2033](https://github.com/BotHarness/DeepSeekBot/issues/2033), [#2034](https://github.com/BotHarness/DeepSeekBot/issues/2034), [#2036](https://github.com/BotHarness/DeepSeekBot/issues/2036), [#2049](https://github.com/BotHarness/DeepSeekBot/issues/2049), [#2067](https://github.com/BotHarness/DeepSeekBot/issues/2067), [#2069](https://github.com/BotHarness/DeepSeekBot/issues/2069), [#2076](https://github.com/BotHarness/DeepSeekBot/issues/2076), [#2071](https://github.com/BotHarness/DeepSeekBot/issues/2071), [#2074](https://github.com/BotHarness/DeepSeekBot/issues/2074), [#2048](https://github.com/BotHarness/DeepSeekBot/issues/2048)).
+- The independently released mobile development client gains native DM and Group chats with streaming Markdown, attachments, image viewing, reactions, speech-to-text, in-chat approvals and questions, mentions and stop controls. Floating headers and composers, grouped bubbles, contextual activity and compact decided cards share the desktop design; Bot profiles expose personality, Memory, schedules, models and Workspace Grants ([#1643](https://github.com/BotHarness/DeepSeekBot/issues/1643), [#1721](https://github.com/BotHarness/DeepSeekBot/issues/1721), [#1718](https://github.com/BotHarness/DeepSeekBot/issues/1718), [#1838](https://github.com/BotHarness/DeepSeekBot/issues/1838), [#1804](https://github.com/BotHarness/DeepSeekBot/issues/1804), [#1875](https://github.com/BotHarness/DeepSeekBot/pull/1875), [#1879](https://github.com/BotHarness/DeepSeekBot/pull/1879), [#1880](https://github.com/BotHarness/DeepSeekBot/pull/1880), [#1881](https://github.com/BotHarness/DeepSeekBot/pull/1881), [#1886](https://github.com/BotHarness/DeepSeekBot/pull/1886), [#1890](https://github.com/BotHarness/DeepSeekBot/pull/1890), [#1892](https://github.com/BotHarness/DeepSeekBot/pull/1892), [#1900](https://github.com/BotHarness/DeepSeekBot/issues/1900), [#1920](https://github.com/BotHarness/DeepSeekBot/pull/1920)).
+- Mobile Activity separates Needs you, personal updates and other unread conversations, with in-place decisions, search, filtering, handled history and swipeable tabs; list positions and loaded data survive navigation, and returning refreshes the visible page window ([#1653](https://github.com/BotHarness/DeepSeekBot/issues/1653), [#1954](https://github.com/BotHarness/DeepSeekBot/issues/1954), [#2057](https://github.com/BotHarness/DeepSeekBot/issues/2057), [#2111](https://github.com/BotHarness/DeepSeekBot/issues/2111)).
+- Mobile Chats gains search, desktop Channel sections and unread counts, creation shortcuts and a computer drawer with connection status and per-computer appearance; settings and notifications remain directly reachable, while Android navigation adapts to pending counts and large text ([#1853](https://github.com/BotHarness/DeepSeekBot/issues/1853), [#1854](https://github.com/BotHarness/DeepSeekBot/issues/1854), [#1861](https://github.com/BotHarness/DeepSeekBot/pull/1861), [#1866](https://github.com/BotHarness/DeepSeekBot/pull/1866), [#1888](https://github.com/BotHarness/DeepSeekBot/issues/1888), [#1850](https://github.com/BotHarness/DeepSeekBot/issues/1850), [#1852](https://github.com/BotHarness/DeepSeekBot/issues/1852), [#1878](https://github.com/BotHarness/DeepSeekBot/pull/1878), [#2077](https://github.com/BotHarness/DeepSeekBot/issues/2077)).
+- A Bot now runs Shell and tools from other installed plugins, such as `ops_bash`, under its Session's own DeepSeek Harness permission mode, with no extra approval card for each call. When DeepSeek Harness itself asks for permission, for example a Shell command that needs to leave the sandbox, the request appears as an approval card in the Bot's chat. Secret tools, editing an original attachment, Browser and Computer still ask as before ([#1731](https://github.com/BotHarness/DeepSeekBot/issues/1731)).
+- Channel settings are easier to find: right-click a Channel in the Messages sidebar for Channel settings, My nickname and the DM's "Show what this Bot did elsewhere" toggles, or click the conversation header chip for the Profile and the same options. The ⋯ button at the top right of the conversation is gone ([#1761](https://github.com/BotHarness/DeepSeekBot/pull/1761)).
+- On desktop, a message's react, reply and copy actions now float in a small toolbar over the bubble's top-right edge on hover instead of beside the bubble, so the layout no longer shifts ([#1843](https://github.com/BotHarness/DeepSeekBot/pull/1843)).
+- Bot and Assignment prompts now say where new files belong: scratch, logs, bundles and generated results go under `<workspacePath>/.botharness/<short-task-slug>/` inside the Grant unless the Human names a destination (or the system temp directory), never the Grant root, the Human's home directory or a new sibling folder, and existing project files are edited in place. Assignment terminal reports list the files created ([#1957](https://github.com/BotHarness/DeepSeekBot/issues/1957)).
+- Upgraded the mobile app to Expo SDK 58 while preserving synchronous local settings and cache writes, and kept iOS permission translations out of Android resources so release builds pass localization checks; developers must rebuild their native development client ([#2020](https://github.com/BotHarness/BotHarness/issues/2020)).
+- Activity Center now opens the personal Inbox directly on the page and in Dock, filling the available Panel width with cards styled like the Channel list, matching Panel insets and independently collapsible Needs you, For you and Other unread sections, plus header search across eligible results and a menu for filters, history and sorting, with inline Tool approval buttons, expandable context, retryable failures, and batch actions behind an explicit selection mode. Retired Overview navigation, state, styles and duplicate legacy UI tests are removed; open reply drafts survive read-state refreshes ([#2026](https://github.com/BotHarness/DeepSeekBot/issues/2026)).
+- Android settings use spacious rounded groups, accent headings, inset separators and clearer selected rows; their switches now use native Material 3 controls while retaining existing saved preferences ([#2072](https://github.com/BotHarness/DeepSeekBot/issues/2072)).
+### Fixed
+- Restored macOS Desktop window dragging from unused Control Rail space and Panel header whitespace; only the content-sized icon and title close or rearrange a Panel, with Channel identity and actions outside that handle ([#2205](https://github.com/BotHarness/DeepSeekBot/issues/2205)).
+- Mobile streaming batches draft updates, sends appended text, reuses parsed Markdown and windows measured blocks while keeping history-reading position stable; Android adds paced native text fade, improved sheet/keyboard behavior and streaming or complete-bubble preferences, with a native rebuild required for the native fade ([#1803](https://github.com/BotHarness/DeepSeekBot/issues/1803), [#1808](https://github.com/BotHarness/DeepSeekBot/issues/1808), [#2028](https://github.com/BotHarness/DeepSeekBot/issues/2028), [#2183](https://github.com/BotHarness/DeepSeekBot/issues/2183), [#1873](https://github.com/BotHarness/DeepSeekBot/pull/1873)).
+- Mobile forms and pairing stay above the keyboard, follow system language and text size, and keep navigation, titles and actions reachable; missing conversations offer a working return path, Android dialogs and sheets use consistent themed controls, and cloud navigation dismisses obsolete pairing UI ([#2171](https://github.com/BotHarness/DeepSeekBot/issues/2171), [#1806](https://github.com/BotHarness/DeepSeekBot/issues/1806), [#1872](https://github.com/BotHarness/DeepSeekBot/pull/1872), [#1926](https://github.com/BotHarness/DeepSeekBot/pull/1926), [#1938](https://github.com/BotHarness/DeepSeekBot/issues/1938), [#2004](https://github.com/BotHarness/DeepSeekBot/issues/2004), [mobile contribution contract](apps/mobile/DESIGN.md#system-text-and-large-text-acceptance), [#2021](https://github.com/BotHarness/DeepSeekBot/issues/2021), [#2083](https://github.com/BotHarness/DeepSeekBot/issues/2083), [#2106](https://github.com/BotHarness/DeepSeekBot/issues/2106), [#2186](https://github.com/BotHarness/DeepSeekBot/issues/2186)).
+- On Windows, a Bot's Orchestrator now runs its Shell as `pwsh`, the Shell its preset provides, instead of a `bash` tool that ran through PowerShell; `pwsh` commands in a writable Workspace Grant use that Grant. Bot role prompts no longer name `bash` as the only Shell, so a Bot also uses a Shell that another installed plugin adds, such as `ops_bash` ([#1731](https://github.com/BotHarness/DeepSeekBot/issues/1731)).
+- A PersonaBot that writes `@` and a colleague's display name in a Group message now really mentions that colleague: the name shows as a mention badge and wakes it, even when it wakes only on mentions. Several colleagues answering the same Human request can each report to one coordinator; two Bots that keep mentioning each other still stop after one round. A report that answers a new Human task, sent in a turn that was still busy with an earlier exchange, wakes the coordinator again instead of being taken for that earlier exchange, and a colleague that an earlier unmentioned message only reached as ordinary Group delivery still wakes when it is mentioned later ([#1764](https://github.com/BotHarness/DeepSeekBot/issues/1764)).
+- Profile and Overview usage now show cache-read and cache-write tokens for PersonaBots on routes that leave a zero cache count out of a response, such as DeepSeek through OpenCode Go, instead of marking them unknown and the total partial. A bucket is filled in only when the response's total proves its value; usage recorded before this update is unchanged ([#1787](https://github.com/BotHarness/DeepSeekBot/issues/1787)).
+- Fixed the Workspace Grants dialog opened from the DM composer, which showed folders as Read-only with no way to change it since 1.3; each folder row now shows its write switch and open-folder button in the header, and newly added folders are writable by default ([#1855](https://github.com/BotHarness/DeepSeekBot/pull/1855)).
+- A Bot DM no longer fails with "invalid channelTimeline response" when one of its messages cannot be read by the client; that message now shows as plain text and the rest of the Channel loads ([#1887](https://github.com/BotHarness/DeepSeekBot/pull/1887)).
+- A Bot's @mention chip in the message composer, the @mention picker and Group activity rows now show the same avatar as the Bot's own messages, instead of a name-generated face when the Bot has a customised avatar ([#1906](https://github.com/BotHarness/DeepSeekBot/pull/1906)).
+- The Overview's token usage no longer shows "Unknown" for the whole week when some usage went unreported, for example rows kept from before an upgrade. The total now counts what was reported and is marked with **+**, and each day's bar shows its reported usage ([#1908](https://github.com/BotHarness/DeepSeekBot/pull/1908)).
+- The Linux Docker Computer now starts on Docker hosts without IPv6. Before, its desktop never answered and the Computer stayed on "Waiting for the desktop…". Taking over the Docker Computer to see and drive its desktop works again too: its picture no longer fails with "unknown field `max_image_dimension`" ([#1924](https://github.com/BotHarness/DeepSeekBot/pull/1924)).
+- Fixed the phone statistics switch retaining its previous visual state after a saved change by publishing loaded preference changes within the switch event ([#1935](https://github.com/BotHarness/DeepSeekBot/issues/1935)).
+- Client startup diagnostics no longer report a lost shell when entering Bot mode replaces the native sidebar. A visible Bot mode main surface now counts as a mounted shell; actual disappearance and earlier errors still report failure ([#1947](https://github.com/BotHarness/DeepSeekBot/issues/1947)).
+- Sender permission lookups on Weixin and other platforms without a sender Role policy now report `role-policy-not-supported-for-platform` instead of a false `binding-replaced`, so a Bot no longer refuses work over an unchanged binding; disabled/replaced identities and revoked Grants are rejected before platform support is checked; connected-group sources retain their ingress Binding, while legacy group sources without that evidence require a fresh message ([#1951](https://github.com/BotHarness/DeepSeekBot/issues/1951)).
+- Scrolling the Sessions panel no longer makes every row slide on the next update, and the activity chevron above the composer now points the way the panel opens ([#1952](https://github.com/BotHarness/DeepSeekBot/issues/1952)).
+- Fixed authorized WeChat paired-owner reports staying reply-only with the published IM Provider: proactive posting now qualifies against the account's exported `proactive-text-checked`, `proactive-receipt-checked` and `proactive-fence-checked` capabilities, matching QQ ([#1955](https://github.com/BotHarness/DeepSeekBot/issues/1955)).
+- About distinguishes source builds and unknown release metadata instead of presenting `0.0.0` as a software release; the authenticated CLI exposes the same identity, and restart polling waits for the exact staged version ([#1980](https://github.com/BotHarness/DeepSeekBot/issues/1980)).
+- Fixed an early local Browser viewer URL that could request a frame before its Bot owned a tab; first-frame waits and failures now remain distinct from a stopped Browser, with bounded requests and explicit reconnection ([#2012](https://github.com/BotHarness/DeepSeekBot/issues/2012)).
+- Fixed message file attachments in narrow panels: bubbles fit their content with left-aligned, prettier text wrapping, while file names remain visible and Open and download controls wrap inside the card ([#2037](https://github.com/BotHarness/DeepSeekBot/issues/2037)).
+- Mobile chats retain structured Bot mentions and display body-sized inline avatars and current names using each Bot's primary color. Tap a mention to open that Bot's DM; renamed or missing Bots are resolved by ID rather than display name ([#2160](https://github.com/BotHarness/DeepSeekBot/issues/2160)).
+- Automatically check for compatible DeepSeekBot updates when entering Bot mode, remember dismissed versions per local Profile, and expose real refresh through `release-check --force` ([#2173](https://github.com/BotHarness/DeepSeekBot/issues/2173)).
 ### Documentation
-- Documented how a paired phone keeps reaching the Host across restarts: a device gateway on the same `dsh web` listener verifies a per-device credential, forwards to the native carriers, and revokes one device at once, including its open streams; runtime behavior is unchanged ([ADR-0199](../docs/adr/0199-paired-devices-reach-the-host-through-a-same-listener-device-gateway.md), [#1649](https://github.com/BotHarness/DeepSeekBot/issues/1649)).
+- Published repeatable Activity, Workspace Grant, Memory and Browser verification paths with CLI correlation, source-bound evidence and explicit coverage limits ([#1972](https://github.com/BotHarness/DeepSeekBot/issues/1972), [#1973](https://github.com/BotHarness/DeepSeekBot/issues/1973), [#1974](https://github.com/BotHarness/DeepSeekBot/issues/1974), [#1975](https://github.com/BotHarness/DeepSeekBot/issues/1975), [#1976](https://github.com/BotHarness/DeepSeekBot/issues/1976)).
+- The GitHub README and installation guides now install `deepseekbot@1.3.1` and list its highlights ([#1771](https://github.com/BotHarness/DeepSeekBot/pull/1771)).
+- Documented one DSB software/npm release identity, immutable QA artifacts, independent mobile/dependency versions and explicit channel/retry gates; runtime enforcement remains planned ([#1979](https://github.com/BotHarness/DeepSeekBot/issues/1979), [policy](https://github.com/BotHarness/DeepSeekBot/blob/main/docs/agents/version-policy.md), [ADR-0216](https://github.com/BotHarness/DeepSeekBot/blob/main/docs/adr/0216-dsb-product-versions-identify-immutable-package-sets.md)).
+## [1.3.1] - 2026-10-14
+Entering `deepseekbot` on the DSH Plugins page installs it in one step again, now on DSH 0.2.0-rc.2 only; the `deepseekbot` CLI can configure a Host, operate a Bot's Browser and Computer and manage token-based IM apps; the Bot Browser panel streams page changes live; and a development build of the mobile app shows the Roster and native PersonaBot DMs.
+### Breaking Changes
+- DeepSeekBot 1.3.1 needs exactly DSH 0.2.0-rc.2, the only release its bundled Computer runtime works with. DSH 0.2.0-rc.1 and the 0.2.1 alphas refuse it at installation with a message naming DeepSeekBot; upgrade DSH to 0.2.0-rc.2 first, or stay on DeepSeekBot 1.3.0 ([#1672](https://github.com/BotHarness/DeepSeekBot/pull/1672)).
+### Added
+- The getting-started checklist adds "See how it works in DSH", a short walkthrough from the Bot's Sessions tab into the same session in DSH and back to the Bot DM ([#1496](https://github.com/BotHarness/DeepSeekBot/issues/1496)).
+- Added a development build of the DeepSeekBot mobile app that connects to the Human's Host over Tailscale HTTPS and shows the Roster of PersonaBots and Channels with live state, and recorded why it reads live state over DSH's Remote stream socket in [ADR-0200](docs/adr/0200-the-mobile-app-reads-live-state-over-the-dsh-remote-stream-socket.md) ([#1650](https://github.com/BotHarness/DeepSeekBot/issues/1650)).
+- Added a native PersonaBot DM to the mobile app's development build: tap a Bot in the Roster to read the DM from an on-device cache and then the Host, page back through older history, send with visible sending, sent and not-sent states (a retry never sends twice), watch the reply stream in, and resume after the app returns from the background without lost or repeated messages; replies render as selectable Markdown in system dark mode and zh/en ([#1651](https://github.com/BotHarness/DeepSeekBot/issues/1651)).
+- The `deepseekbot` CLI can now configure what the Web UI configures, so an agent can set up and test a Host on its own: `browser-access-set`, `computer-access-set`, `access` and `access-set` (full access needs `--acknowledge-risk`), `settings` and `settings-set`, `workspace-create` and `group-create` ([#1677](https://github.com/BotHarness/DeepSeekBot/issues/1677)).
+- The `deepseekbot` CLI can now operate a Bot's Browser and the Computer: `browser-open`, `browser-frame` (save the current picture to a file), `browser-takeover`, `browser-stop`, `computer-start`, `computer-status` and `computer-stop`. `grants` now also works against a live Host ([#1677](https://github.com/BotHarness/DeepSeekBot/issues/1677)).
+- The `deepseekbot` CLI can now add, inspect and remove token-based IM apps (Discord, Slack, QQ, DingTalk, WeCom, Matrix), bind and unbind them to a Bot, show each binding's reception, and connect an external group conversation to a Channel: `im-app-add`, `im-app-status`, `im-app-remove`, `im-bind`, `im-unbind`, `im-status`, `channel-connect` and `channel-ingests`. Credentials are read from stdin only and never printed ([#1677](https://github.com/BotHarness/DeepSeekBot/issues/1677)).
+### Changed
+- The Bot Browser panel in the Host web page now follows the page as it changes instead of refreshing once per second. Chrome pushes a new picture whenever the page repaints, so typing, scrolling and clicking show up in about a quarter of a second, and a page that does not change costs nothing. Runtimes that cannot stream keep the once-per-second picture ([#1636](https://github.com/BotHarness/DeepSeekBot/issues/1636)).
+### Documentation
+- Documented how a paired phone keeps reaching the Host across restarts: a device gateway on the same `dsh web` listener verifies a per-device credential, forwards to the native carriers, and revokes one device at once, including its open streams; runtime behavior is unchanged ([ADR-0199](docs/adr/0199-paired-devices-reach-the-host-through-a-same-listener-device-gateway.md), [#1649](https://github.com/BotHarness/DeepSeekBot/issues/1649)).
+- The GitHub README and installation guides now install `deepseekbot@1.3.0` and list its highlights, and the npm package README states the DSH 0.2.0 minimum ([#1667](https://github.com/BotHarness/DeepSeekBot/pull/1667)).
+### Fixed
+- Entering `deepseekbot` on the DSH Plugins page installs it in one step again; 1.3.0 first stopped to ask for `agent-browser` build approval. The Browser trial driver's `agent-browser` is now an optional add-on. DeepSeekBot now declares that it needs DSH 0.2.0-rc.2, the only release its bundled Computer runtime works with, so other DSH versions get a clear refusal naming DeepSeekBot. Every release is now installed into a fresh Profile before it is published ([#1672](https://github.com/BotHarness/DeepSeekBot/pull/1672)).
 ## [1.3.0] - 2026-10-14
@@ -100,7 +238,7 @@ Bot mode moves onto one StyleX design system with a Channel settings dialog and
 - The same CLI now covers Bot lifecycle and human naming: `pause`/`resume`, `update` for name, description, and roles, `human-name-set` for the Human display name, and `channel-human-name-set` for the per-channel Human nickname, all offline with coded errors. See the [bot CLI guide](docs/bot-cli.md) ([#1312](https://github.com/BotHarness/DeepSeekBot/issues/1312)).
 - The same CLI now reads channels, manages grants and schedules, and lists pairings: `channels` and `channel-messages` for history, grant list/revoke/write-set, schedule list/create/update/delete/history/run-now/preview, and `pairings` for IM pairing status; grant creation stays Host-side. See the [bot CLI guide](docs/bot-cli.md) ([#1313](https://github.com/BotHarness/DeepSeekBot/issues/1313)).
 - The same CLI now configures secrets without clicking: `secret-put` reads the value from stdin only and line-edits it into `$DSH_HOME/.credentials.yaml` with backup plus re-read validation, `secret-list` reports names without values, and `secret-unset` deletes the entry. See the [bot CLI guide](docs/bot-cli.md) ([#1314](https://github.com/BotHarness/DeepSeekBot/issues/1314), [ADR-0158](docs/adr/0158-secret-put-writes-credential-refs-by-line-edit.md)).
-- Live CLI verbs will ride the DSH HTTP unary carrier with per-invocation token-to-cookie login and never touch the operational database directly; bridge and gateway error codes pass through. See [ADR-0160](docs/adr/0159-live-cli-verbs-ride-the-dsh-http-carrier.md) ([#1315](https://github.com/BotHarness/DeepSeekBot/issues/1315)).
+- Live CLI verbs will ride the DSH HTTP unary carrier with per-invocation token-to-cookie login and never touch the operational database directly; bridge and gateway error codes pass through. See [ADR-0159](docs/adr/0159-live-cli-verbs-ride-the-dsh-http-carrier.md) ([#1315](https://github.com/BotHarness/DeepSeekBot/issues/1315)).
 - The same CLI is now self-discoverable: `search` finds commands by words against the dispatched verb table, and `--compact` condenses stdout JSON to one line for agents. See the [bot CLI guide](docs/bot-cli.md) ([#1316](https://github.com/BotHarness/DeepSeekBot/issues/1316)).
 - The same CLI now reads and writes Bot Memory headlessly: `memory-snapshot`, `memory-file`, `memory-history`, and `memory-diff` read the memory store, and `memory-save` writes one file and commits it with compare-and-swap heads and idempotent edit ids; conflicts and bad shas fail coded. See the [bot CLI guide](docs/bot-cli.md) ([#1311](https://github.com/BotHarness/DeepSeekBot/issues/1311)).
 - The local Bot Browser now offers human takeover like the Computer viewer: a live Host-served view with click, scroll, and keyboard entry (small screens default to trackpad mode), and an ask-permission handoff where the bot mints a single-use link with instructions, waits for Done or Could-not-finish, verifies the page state, and resumes. Typed secrets stay in the live view and never reach chat or logs; every handoff leaves an audit trail with its session recording ([#1322](https://github.com/BotHarness/DeepSeekBot/issues/1322), [ADR-0163](docs/adr/0163-local-browser-takeover-reuses-computer-viewer-family.md)).

package/CHANGELOG.zh.md CHANGED Viewed

@@ -6,11 +6,149 @@
 ## [Unreleased]
-1.3.0 之后暂无变化。
+1.4.0 之后暂无变更。
+## [1.4.0] - 2026-10-19
+托布与精简 Home 将 Bot 管理带入对话，持久化面板工作区为每个频道保留布局，扩展 CLI、审批及 DSH 兼容支持日常工作。
+下方移动应用和云服务条目描述独立版本的开发／UAT 工作；本次 npm 发版不发布移动应用，也不启用生产云服务。升级前请备份 Profile；恢复旧二进制可能需要升级前备份。
+### Added
+- Home 引入受保护的本地总管托布，提供模型配置、复用聊天输入框、可编辑问候语和仅填入草稿的快捷提问；下方无边框 Token 历史与 Bot 活跃卡片宽屏两列、窄屏堆叠，点击 Bot 回到原私聊，并保留已有布局和快捷键 ([#2082](https://github.com/BotHarness/DeepSeekBot/issues/2082), [#2184](https://github.com/BotHarness/DeepSeekBot/issues/2184)).
+- 托布发现并使用随插件安装的 DeepSeekBot CLI，管理模型、预设、Assignment 并发与运行偏好，创建及配置人格和记忆完整的 Bot，创建群聊、邀请或移除 Bot、修改群设置和处理待决入群请求。操作保留现有人类权限、审批及过期写入校验；操作键支持丢失响应后的原结果恢复，邀请默认自动接受，但尊重人类已有的 Profile 全局关闭设置 ([#2088](https://github.com/BotHarness/DeepSeekBot/issues/2088), [CLI guide](docs/bot-cli.md#tob-model-and-runtime-management), [#2089](https://github.com/BotHarness/DeepSeekBot/issues/2089), [CLI guide](docs/bot-cli.md#tob-bot-creation-profiles-and-lifecycle), [#2090](https://github.com/BotHarness/DeepSeekBot/issues/2090), [CLI guide](docs/bot-cli.md#tob-group-creation-and-invitations), [CLI guide](docs/bot-cli.md#tob-invitation-cancellation-and-join-decisions), [CLI guide](docs/bot-cli.md#tob-group-settings-and-member-removal), [#2087](https://github.com/BotHarness/DeepSeekBot/issues/2087), [CLI guide](docs/bot-cli.md#home-and-tob)).
+- CLI 可查看 Bot 工具轨迹，并绕过模型直接列出或运行 Bot、浏览器和电脑工具，复用相同授权与审计；仅限会话的操作明确拒绝，轨迹输出不展示秘密工具 ([#1682](https://github.com/BotHarness/DeepSeekBot/issues/1682), [#1695](https://github.com/BotHarness/DeepSeekBot/issues/1695)).
+- 在线 Host CLI 覆盖记忆历史、差异、检查点及受保护恢复，定时任务与运行历史，以及人类收件箱处理、会话查询、审批规则撤销、工作区授权和私有 MCP 生命周期；破坏性操作要求确认 ([#1690](https://github.com/BotHarness/DeepSeekBot/issues/1690), [#1696](https://github.com/BotHarness/DeepSeekBot/issues/1696), [#1699](https://github.com/BotHarness/DeepSeekBot/issues/1699)).
+- CLI 覆盖 Host 所有的频道／群成员及策略、消息与 IM 绑定、模型计划和预设、Bot 外观与唤醒设置、浏览器／电脑诊断与归档、市场、用量／活跃、版本升级及配对审核。命令保留 UI 权限校验和明确拒绝码，安装、移除等危险变更要求显式确认 ([#1697](https://github.com/BotHarness/DeepSeekBot/issues/1697), [#1698](https://github.com/BotHarness/DeepSeekBot/issues/1698), [#1700](https://github.com/BotHarness/DeepSeekBot/issues/1700), [#1701](https://github.com/BotHarness/DeepSeekBot/issues/1701), [#1702](https://github.com/BotHarness/DeepSeekBot/issues/1702), [#1703](https://github.com/BotHarness/DeepSeekBot/issues/1703)).
+- 可选择或编写自动审批模板，并指定共享审核模型；无工具的审批会话对符合条件的操作（包括脱敏秘密工具与浏览器／电脑请求）允许、拒绝或交回人类，决策保留可查看记录。拒绝进入人类收件箱，支持针对原调用的一次性放行；连续拒绝暂停自动审批，修改生效模板或审核模型仍需人类批准 ([#1823](https://github.com/BotHarness/DeepSeekBot/issues/1823), [#1824](https://github.com/BotHarness/DeepSeekBot/issues/1824), [#1825](https://github.com/BotHarness/DeepSeekBot/issues/1825), [#1826](https://github.com/BotHarness/DeepSeekBot/issues/1826), [#1827](https://github.com/BotHarness/DeepSeekBot/issues/1827), [#1822](https://github.com/BotHarness/DeepSeekBot/issues/1822), [#1871](https://github.com/BotHarness/DeepSeekBot/pull/1871)).
+- 可选群聊发送复核能暂缓过时回复、吸收新上下文、让已观察到的同伴答案先行并明确完成收件箱工作，最多两次复核后选择受限续发或稍后处理。中断草稿跨重启通过新观察及防重复回执恢复；附件变化、成员权限撤销和不确定副作用不能静默产生过时或重复回复 ([#2053](https://github.com/BotHarness/DeepSeekBot/issues/2053), [#2054](https://github.com/BotHarness/DeepSeekBot/issues/2054), [#2055](https://github.com/BotHarness/DeepSeekBot/issues/2055), [#2056](https://github.com/BotHarness/DeepSeekBot/issues/2056)).
+- 通过有效十分钟的二维码／链接配对手机，Host 重启后继续访问，并可连同实时连接一起撤销；移动端完整客户端使用配对身份打开 Bot 模式、私聊、私密输入及浏览器／电脑查看器 ([ADR-0199](docs/adr/0199-paired-devices-reach-the-host-through-a-same-listener-device-gateway.md), [#1652](https://github.com/BotHarness/DeepSeekBot/issues/1652), [#1654](https://github.com/BotHarness/DeepSeekBot/issues/1654), [#1687](https://github.com/BotHarness/DeepSeekBot/issues/1687), [#1845](https://github.com/BotHarness/DeepSeekBot/issues/1845)).
+- 配对手机可接收请求与回复通知、打开对应待办，并通过通知操作处理符合条件的工具审批；私密输入不包含内容，撤销配对即撤销通知访问，重新连接可修复注册 ([ADR-0202](docs/adr/0202-phone-push-is-a-content-free-projection-of-the-human-inbox.md), [#1655](https://github.com/BotHarness/DeepSeekBot/issues/1655)).
+- 移动浏览器和电脑查看器支持直接触控或触控板、修饰键、键盘输入以及交还 Bot 控制；本机电脑在输入时接管，空闲后自动交还。符合条件的容器查看器可使用仅限 tailnet 的 WebRTC，并保留 WebSocket 回退、CLI 探测与撤销校验 ([#1798](https://github.com/BotHarness/DeepSeekBot/issues/1798), [#1799](https://github.com/BotHarness/DeepSeekBot/issues/1799), [#1832](https://github.com/BotHarness/DeepSeekBot/issues/1832), [#1862](https://github.com/BotHarness/DeepSeekBot/pull/1862), [#1865](https://github.com/BotHarness/DeepSeekBot/pull/1865)).
+- 移动资料页支持管理群成员和定时任务、跨时间范围查看用量及记忆动态，并配置全局或单 Bot 模型与完整 Assignment 预设；部分调用未知时，用量详情仍保留已报告计数 ([#1894](https://github.com/BotHarness/DeepSeekBot/issues/1894), [#1895](https://github.com/BotHarness/DeepSeekBot/issues/1895), [#1897](https://github.com/BotHarness/DeepSeekBot/issues/1897), [#1899](https://github.com/BotHarness/DeepSeekBot/pull/1899), [#1911](https://github.com/BotHarness/DeepSeekBot/pull/1911), [#1912](https://github.com/BotHarness/DeepSeekBot/issues/1912), [#2086](https://github.com/BotHarness/DeepSeekBot/issues/2086)).
+- 开发／UAT 云服务增加 WorkOS 登录、工作区、持久化文本频道、成员／访客邀请及限定范围 Agent 健康检查，移动抽屉区分本机电脑与云端，并按来源隔离草稿和导航。这些是开发能力，不代表生产云服务或应用商店正式上线 ([#2101](https://github.com/BotHarness/DeepSeekBot/issues/2101), [#2120](https://github.com/BotHarness/DeepSeekBot/issues/2120), [#2130](https://github.com/BotHarness/DeepSeekBot/issues/2130), [#2137](https://github.com/BotHarness/DeepSeekBot/issues/2137), [#2145](https://github.com/BotHarness/DeepSeekBot/issues/2145), [#2148](https://github.com/BotHarness/DeepSeekBot/issues/2148), [#2151](https://github.com/BotHarness/DeepSeekBot/issues/2151), [#2153](https://github.com/BotHarness/DeepSeekBot/issues/2153), [#2155](https://github.com/BotHarness/DeepSeekBot/issues/2155), [#2161](https://github.com/BotHarness/DeepSeekBot/issues/2161), [#2179](https://github.com/BotHarness/DeepSeekBot/issues/2179), [#2174](https://github.com/BotHarness/DeepSeekBot/issues/2174)).
+- Lark/飞书经核验的引用文件可在 Channel 请求气泡中显示，支持有界原件下载、失败重试及可用时的既有 Host 应用菜单；Human 访问仍核对当前来源授权，不唤醒 Bot（[#1022](https://github.com/BotHarness/DeepSeekBot/issues/1022)）。
+- 安装后的 `deepseekbot` CLI 使用独立于 Host 专用 DSH 模块的入口，使授权媒体命令可在 Host 进程外正常启动（[#1022](https://github.com/BotHarness/DeepSeekBot/issues/1022)）。
+- QQ 可通过已授权的保存群目标显式发送本地保留的延迟结果，沿用共享 Outbox、当前应用身份、最终授权与每小时限额；过期回复和不确定发送仍是独立结果，真实 QQ 验收单独记录（[#1154](https://github.com/BotHarness/DeepSeekBot/issues/1154)）。
+- QQ 受检消费者可转交普通群文字，用于当前接收器的真实资格核验和按会话显式收集。现有 Observation 与条数／时间聚合将收集和同 App 主动参与分开；屏蔽接收期间的旧事件不会证明重新允许会话后的收件资格。产品以独立版本 `4.32.0-botharness.21` 集成已核验的 Provider，真实应用与 Client 验收单独记录（[#1155](https://github.com/BotHarness/DeepSeekBot/issues/1155)）。
+- Web 客户端也能停止 PersonaBot。私聊或群组频道里有 Bot 在思考或工作、且输入框为空时，发送按钮会变成 **停止**，按下后结束该 Bot 当前这一轮，与手机端的停止相同。在群组频道里会停止所有正在工作的 Bot。开始输入后按钮变回发送，你仍可以改为发消息引导 Bot（[#1721](https://github.com/BotHarness/DeepSeekBot/issues/1721)）。
+- 把文件拖到会话任意位置即可添加附件，拖动时会出现放置区域（[#1725](https://github.com/BotHarness/DeepSeekBot/issues/1725)）。
+- 设置 → 消息 → 发送消息提供 Enter、Shift+Enter 及 ⌘/Ctrl+Enter，使用键帽显示，并匹配相应的换行行为（[#1726](https://github.com/BotHarness/DeepSeekBot/issues/1726)）。
+- 输入框新增 / 命令：私聊里的 `/memory`、`/sessions`，以及私聊和群聊都有的 `/profile`、`/settings`、`/sidebar`（[#1727](https://github.com/BotHarness/DeepSeekBot/issues/1727)）。
+- 你发的消息如果用了 Markdown（代码块、行内代码、粗体、列表、标题、引用、链接、表格），现在会按格式显示，并保留你输入的换行（[#1728](https://github.com/BotHarness/DeepSeekBot/issues/1728)）。
+- Bot 模式下按 Ctrl+K（macOS 为 ⌘K）可打开快速切换：输入 PersonaBot、群聊或频道名称的一部分（支持中文名），用方向键选择、回车打开，效果与点击侧边栏对应行相同。搜索为空时列出最近的会话，隐藏的频道排在最后；在输入框里打字时也可使用该快捷键（[#1740](https://github.com/BotHarness/DeepSeekBot/issues/1740)）。
+- 在私聊或群聊中悬停或用键盘聚焦 Bot 的头像或名字时，会弹出一张小资料卡，显示它的角色、简介和当前状态（思考中、正在做什么、等待中或受阻），并提供「私聊」和「资料」按钮；Human 发送者的资料卡只显示名字。资料卡取代了浏览器原生的提示文字（[#1744](https://github.com/BotHarness/DeepSeekBot/issues/1744)）。
+- 浏览器标签页标题会显示 Human Inbox 的未读数，有事等你决定时前面加 ●，例如 `● (3) DeepSeek Harness`（[#1746](https://github.com/BotHarness/DeepSeekBot/issues/1746)）。
+- 桌面通知：在 Bot 设置 › 通知里打开「桌面通知」后，页面在后台时，Bot 需要你审批或回答、@你、回复你，或在私聊里回复完成，这个浏览器会弹出系统通知，点击即跳到对应消息（[#1747](https://github.com/BotHarness/DeepSeekBot/issues/1747)）。
+- 在 Bot mode 按 `?` 或 Ctrl+/（Mac 上 ⌘+/）查看全部键盘快捷键，也可以在 Bot 设置 › 键盘快捷键里打开（[#1748](https://github.com/BotHarness/DeepSeekBot/issues/1748)）。
+- 工具审批和提问卡采用紧凑无边框操作，提供清晰处理结果、可展开详情与文件差异、到期提示及键盘操作；单选问题可直接回答，风险更高的始终允许选项保留确认。 ([#1749](https://github.com/BotHarness/DeepSeekBot/issues/1749), [#1752](https://github.com/BotHarness/DeepSeekBot/issues/1752), [#1753](https://github.com/BotHarness/DeepSeekBot/issues/1753)).
+- Human Inbox 可以用 `J`/`K` 上下移动，Enter 跳到来源消息，`E` 标为已处理，`X` 选择，`S` 稍后提醒。选中的条目可以一起标为已处理，选中的工具审批可以一起批准一次或一起拒绝。「稍后提醒」把条目隐藏到选定的时间；「已延后」筛选列出它们并可取消延后，`deepseekbot inbox-snooze` 在命令行里做同样的事（[#1750](https://github.com/BotHarness/DeepSeekBot/issues/1750)、[#1751](https://github.com/BotHarness/DeepSeekBot/issues/1751)、[#1754](https://github.com/BotHarness/DeepSeekBot/issues/1754)）。
+- 在群聊 Channel 中右键点击 Bot 头像，可以打开菜单：发送消息、在输入框中 @ TA，或查看资料（[#1757](https://github.com/BotHarness/DeepSeekBot/pull/1757)）。
+- Bot 模式侧边栏现在会在每个私聊和群聊上显示 Bot 未读消息数。右键会话可以**标为已读**或设为**免打扰**，侧边栏 **⋯** 菜单里可以**全部标为已读**；免打扰的会话变灰，未读不计入活动中心的总数。隐藏或移动会话后会弹出带**撤销**的提示。Alt+↑/↓ 切到上一个或下一个会话，Alt+Shift+↑/↓ 跳到上一个或下一个有未读的会话。CLI 里用 `deepseekbot channel-unread` 和 `deepseekbot channel-mute` 做同样的事（[#1738](https://github.com/BotHarness/DeepSeekBot/issues/1738), [#1739](https://github.com/BotHarness/DeepSeekBot/issues/1739), [#1741](https://github.com/BotHarness/DeepSeekBot/issues/1741), [#1742](https://github.com/BotHarness/DeepSeekBot/issues/1742), [#1743](https://github.com/BotHarness/DeepSeekBot/issues/1743)）。
+- 打开有未读回复的会话时，会在上次读到的位置显示「以下为新消息」分隔线；切换会话后回来仍停在原来读到的消息；过长的消息默认折叠，可点「展开全部」；同组的每条消息悬停时显示自己的时间；图片在页面内预览，可用左右方向键切换；可以从消息的悬停操作栏添加表情回应，手机上长按消息也能回应，Bot 也能在 `channel_send` 里传 `react_to` 和 `reaction` 回应，可以同一次调用里顺带回复（Bot 读取会话时能看到这些回应，`deepseekbot channel-react` 可以添加你的回应）；按 Ctrl/⌘+F 可搜索当前会话并跳到匹配的消息（`deepseekbot channel-search` 执行同样的搜索）（[#1769](https://github.com/BotHarness/DeepSeekBot/pull/1769)）。
+- 创建 Bot 时，可以在 **进阶设置 → 记忆文件位置** 选择记忆文件存放的文件夹（例如另一块磁盘），不必放在默认的 DSH 数据目录。命令行用 `deepseekbot create --memory-location <目录>` 达到同样效果（[#1772](https://github.com/BotHarness/DeepSeekBot/issues/1772)）。
+- 现在可以在 Bot 的 **工作区授权 → Memory Repository** 一栏，把已有 Bot 的记忆文件移到别的文件夹，或移回默认位置。移动后 Bot 会在新文件夹里开启新的主会话，聊天记录和记忆历史都会保留。命令行用 `deepseekbot memory-move <id> --memory-location <目录>` 达到同样效果（[#1772](https://github.com/BotHarness/DeepSeekBot/issues/1772)）。
+- 导航快捷键可以修改：打开快捷键列表（`?` 或 Ctrl/⌘+/），在 Bot 模式、快速切换、上/下一个（未读）会话或快捷键列表旁点「修改」，再按下新的组合键。组合需要包含 Ctrl/⌘ 或 Alt，不能和已占用或保留的组合重复，点「恢复默认」可还原。macOS 上显示 ⌘ ⌥ ⇧（[#1775](https://github.com/BotHarness/DeepSeekBot/issues/1775)）。
+- 其他插件现在可以通过 `dockPanels` Service 往桌面 Bot 模式布局里添加自己的面板。面板可以跟随当前 Channel，也可以在切换 Channel 时保持不变，并和内置面板一起出现在「面板」菜单中（[#1791](https://github.com/BotHarness/DeepSeekBot/issues/1791)）。
+- 新增待办示例插件 `@botharness/todo` 的 Host 部分：一个保存在 DSH 存储中的共享待办列表；Bot 工具（`todos_list`、`todos_add`、`todos_update`、`todos_remove`），让 PersonaBot 替 Human 记录和跟进事项；以及 `deepseekbot todos` / `todo-*` 命令，用于读取和修改列表，或绕过模型直接运行工具。待办 Dock 面板将在后续版本提供（[ADR-0203](docs/adr/0203-bot-mode-is-a-dockable-layout-that-plugins-extend-with-dock-panels.md)，[#1792](https://github.com/BotHarness/DeepSeekBot/issues/1792)）。
+- DeepSeekBot 手机 App 的私聊里，长按一条消息即可复制全文；发送消息、允许或拒绝工具审批、提交回答时，手机会有轻微的触感反馈。聊天图片现在会缓存在手机上，离线也能再次打开，滚动时也不会先闪出别的图片（[#1807](https://github.com/BotHarness/DeepSeekBot/issues/1807)）。
+- 现在可以在聊天中让 PersonaBot 帮你创建另一个 PersonaBot。它会根据对话填好名称、简介、标签、头像、Soul 和核心记忆，也可以把新 Bot 的记忆放在你指定的文件夹。这次调用与其他 Bot 工具一样遵循工具审批和已保存的规则；需要你确认时，卡片会预览新 Bot 及其记忆文件夹。新 Bot 会带着私聊出现在侧边栏，`deepseekbot create` 也新增了 `--avatar-file` 和 `--core-memory`（[#1858](https://github.com/BotHarness/DeepSeekBot/issues/1858)）。
+- 总览页的 Host 整体 token 用量现在除了今日和近 7 天，还可以查看近 4 周和近 12 周；`deepseekbot overview-usage --period month|quarter` 读取相同的范围（[#1898](https://github.com/BotHarness/DeepSeekBot/issues/1898)）。
+- Bot 市场的搜索与话题筛选同时覆盖 GitHub topics 和 Bot 自身 `.botharness/bot.json` 的 tags（兼容旧 `roles`），同一 Bot 的同名标签只计数一次（[#1907](https://github.com/BotHarness/DeepSeekBot/issues/1907)）。
+- 手机聊天现在显示与消息气泡对齐、等间隔的单行 Bot 活动，并按场景展示头像；长按查看完整内容，再从菜单打开相关会话、记忆文件或新 Bot，避免点按误跳转。Bot 资料页的两个设备本地开关可控制镜像到 Human 私聊中的发言和记忆更新（[#1919](https://github.com/BotHarness/DeepSeekBot/issues/1919)）。
+- Web Client 和 DeepSeekBot 手机 App 的「设置 → 关于」会显示构建号：git 短提交号和本地构建时间（手机 App 还显示版本号和分支），测试时一眼就能分辨装的是哪个包；手机上点一下即可复制（[#1923](https://github.com/BotHarness/DeepSeekBot/pull/1923)）。
+- 在手机设置页底部新增默认开启、说明可折叠的匿名统计开关，通过官方 PostHog React Native SDK 记录配对、连接和首次聊天结果；首次说明沿用 Web 客户端，生产启用仍需公开隐私说明、设备验收和 Human QA（[#1935](https://github.com/BotHarness/DeepSeekBot/issues/1935)）。
+- 输入框页脚的模型、工作区、用量及可选生成速度支持右键显隐、拖拽排序和键盘替代操作；偏好保存在当前设备，窄面板控件保持可读，隐藏指标不读取历史。 ([#1958](https://github.com/BotHarness/DeepSeekBot/issues/1958)).
+- Bot 右键菜单新增「模型与推理强度」子菜单：列出该 Bot 可用的模型与思考强度并标记当前选项，选择后直接设为 Bot 默认，无需打开资料页（[#1959](https://github.com/BotHarness/DeepSeekBot/issues/1959)）。
+- 聊天右侧 Dock 新增「Bot 文件」面板，按 Bot 展示附件历史，包括较早的消息。文件沿用既有附件查看器打开，并可在输入框中引用。所选文件在切换历史窗口和恢复草稿后保留，与上传文件共用十个文件的上限；取消引用不会删除文件（[#1960](https://github.com/BotHarness/DeepSeekBot/issues/1960)）。
+- 微信扫码绑定者的私聊可镜像到 Bot 的本地私聊，并可单独选择将本地私聊转发回该账户。两个开关均默认关闭，旁边提供可点击的说明。镜像复用原始内容、参与内容清除，不重复唤醒 Bot；本地审批、私密输入等交互卡片不会外发；转发保留具体账户边界，关闭后停止尚未发送的操作（[#1983](https://github.com/BotHarness/DeepSeekBot/issues/1983)，[规格 #1990](https://github.com/BotHarness/DeepSeekBot/issues/1990)）。
+- DSH 会话列表新增可折叠的 DeepSeekBot 分组，按 Bot／角色建立子组，集中收纳其 Orchestrator 与 Assignment 会话，支持不同执行目录；最外层标题使用用户设置的 Bot 图标（[#1997](https://github.com/BotHarness/DeepSeekBot/issues/1997)）。
+- Bot 子组标题以所属 PersonaBot 的头像替换折叠箭头，点击整个标题仍可展开或折叠分组（[#1997](https://github.com/BotHarness/DeepSeekBot/issues/1997)）。
+- Bot DM 输入框新增内联 `/model <文本>` 与 `/effort <文本>` 选择器：列出与 Bot 右键菜单相同的模型和思考强度，按输入过滤、标记当前项，仅修改此 Bot 的 Orchestrator，在下一轮生效，保留 Assignment 固定配置或全局继承（[#2000](https://github.com/BotHarness/DeepSeekBot/issues/2000)）。
+- 在 IM 私聊中整条消息为斜杠命令时，由 Host 直接回复，不再启动 Bot 轮次：`/commands`、`/help`、`/status`、`/model`、`/effort`、`/stop`、`/new`，支持中文别名与全角 `／`（[#2005](https://github.com/BotHarness/DeepSeekBot/issues/2005)）。
+- 只读回复向已准入私聊发送者开放；模型、强度、停止与新会话操作在微信上限已准入发送者，其他平台需要当前具有批准能力的管理配对。命令按 Bot 顺序执行、复核权限撤销、保留任务模型设置，并沿用既有 Outbox 记录回复结果；群消息与带附件消息继续走原有路径（[#2005](https://github.com/BotHarness/DeepSeekBot/issues/2005)）。
+- 新增 `deepseekbot bot-new-session <Bot ID>`，通过与 `/new` 相同的 Host 运行时退役空闲的编排会话（[#2005](https://github.com/BotHarness/DeepSeekBot/issues/2005)）。
+- Channel sidebar 成员菜单新增「@ TA」快捷操作，各项采用图标加文字；选择成员后保留当前草稿并聚焦输入框（[#2009](https://github.com/BotHarness/DeepSeekBot/issues/2009)）。
+- 移动端聊天可预览并保存仅在本机使用的照片或纯色背景，支持填充/适应、图片位置与背景淡化。可在设置中选择默认背景，或单独设置私信和群聊；取消和保存失败时保留原选择（[#2118](https://github.com/BotHarness/DeepSeekBot/issues/2118)）。
+### Changed
+- 现有 CLI 脚本修改 Bot 时须提供 `--expected-profile`；`bot-delete-confirm` 和 `bot-delete-retry` 现要求 `--confirm`，以保留已审阅快照及明确的破坏性操作确认（[#2089](https://github.com/BotHarness/DeepSeekBot/issues/2089)）。
+- DeepSeekBot 支持 DSH `>=0.2.0-rc.2 <0.3.0-0`，保留现有最低版本，并适配 DSH 0.2.1-rc.2 的 Owner 身份、工具及前台／后台 Subagent 委派；开发依赖仍固定版本，允许未来 0.2.x 安装不代表已完成其运行验证 ([#2167](https://github.com/BotHarness/DeepSeekBot/issues/2167), [compatibility policy #423](https://github.com/BotHarness/DeepSeekBot/issues/423)).
+- Desktop 新手引导依次完成模型配置、通过托布创建 Bot 和群聊、调整面板，以及点击 Home 标题关闭首页进入对话；迁移保留已有审批、历史和布局，新 Bot 不再自动插入欢迎信 ([#2192](https://github.com/BotHarness/DeepSeekBot/issues/2192)).
+- 桌面工作区采用独立频道列表、消息和 Activity 面板及全高控制栏，支持拖拽布局、持久化尺寸、可调间距与快捷键，并通过右键管理显隐。设置支持跨页搜索及界面、消息、通知、快捷键独立页面；统一面板标题、居中空状态、明暗背景、缩放下菜单定位和自动淡出滚动条，切换频道保留其他面板与草稿 ([#1829](https://github.com/BotHarness/DeepSeekBot/issues/1829), [#2017](https://github.com/BotHarness/DeepSeekBot/issues/2017), [#1789](https://github.com/BotHarness/DeepSeekBot/issues/1789), [#1790](https://github.com/BotHarness/DeepSeekBot/issues/1790), [#2016](https://github.com/BotHarness/DeepSeekBot/issues/2016), [#2042](https://github.com/BotHarness/DeepSeekBot/issues/2042), [#2014](https://github.com/BotHarness/DeepSeekBot/issues/2014)).
+- 会话、记忆文件、记忆演化、定时任务、浏览器和电脑迁入消息面板，支持自由嵌套行列，按频道记住位置、比例和显隐；重新打开或缩放保持布局，窄标题单行省略且操作按钮可用，并迁移旧布局与快捷键。群聊不显示 Bot 专属面板；频道文件和 Bot 收件箱从消息标题按需打开 ([#2033](https://github.com/BotHarness/DeepSeekBot/issues/2033), [#2034](https://github.com/BotHarness/DeepSeekBot/issues/2034), [#2036](https://github.com/BotHarness/DeepSeekBot/issues/2036), [#2049](https://github.com/BotHarness/DeepSeekBot/issues/2049), [#2067](https://github.com/BotHarness/DeepSeekBot/issues/2067), [#2069](https://github.com/BotHarness/DeepSeekBot/issues/2069), [#2076](https://github.com/BotHarness/DeepSeekBot/issues/2076), [#2071](https://github.com/BotHarness/DeepSeekBot/issues/2071), [#2074](https://github.com/BotHarness/DeepSeekBot/issues/2074), [#2048](https://github.com/BotHarness/DeepSeekBot/issues/2048)).
+- 独立发版的移动开发客户端新增原生私聊和群聊，支持流式 Markdown、附件、图片查看、回应、语音转文字、聊天内审批及提问、提及和停止操作。悬浮标题与输入框、连续气泡、上下文动态和紧凑已处理卡片与桌面设计一致；Bot 资料提供人格、记忆、定时任务、模型及工作区授权入口 ([#1643](https://github.com/BotHarness/DeepSeekBot/issues/1643), [#1721](https://github.com/BotHarness/DeepSeekBot/issues/1721), [#1718](https://github.com/BotHarness/DeepSeekBot/issues/1718), [#1838](https://github.com/BotHarness/DeepSeekBot/issues/1838), [#1804](https://github.com/BotHarness/DeepSeekBot/issues/1804), [#1875](https://github.com/BotHarness/DeepSeekBot/pull/1875), [#1879](https://github.com/BotHarness/DeepSeekBot/pull/1879), [#1880](https://github.com/BotHarness/DeepSeekBot/pull/1880), [#1881](https://github.com/BotHarness/DeepSeekBot/pull/1881), [#1886](https://github.com/BotHarness/DeepSeekBot/pull/1886), [#1890](https://github.com/BotHarness/DeepSeekBot/pull/1890), [#1892](https://github.com/BotHarness/DeepSeekBot/pull/1892), [#1900](https://github.com/BotHarness/DeepSeekBot/issues/1900), [#1920](https://github.com/BotHarness/DeepSeekBot/pull/1920)).
+- 移动 Activity 将需要处理、个人动态和其他未读分开，支持原地处理、搜索筛选、已处理历史和滑动切页；导航保留列表位置与已加载数据，返回时刷新已加载分页 ([#1653](https://github.com/BotHarness/DeepSeekBot/issues/1653), [#1954](https://github.com/BotHarness/DeepSeekBot/issues/1954), [#2057](https://github.com/BotHarness/DeepSeekBot/issues/2057), [#2111](https://github.com/BotHarness/DeepSeekBot/issues/2111)).
+- 移动聊天增加搜索、桌面频道分组与未读数、创建快捷入口及显示连接状态的电脑抽屉，支持按电脑定制外观；设置和通知可直接访问，Android 导航适配待办数和大字体 ([#1853](https://github.com/BotHarness/DeepSeekBot/issues/1853), [#1854](https://github.com/BotHarness/DeepSeekBot/issues/1854), [#1861](https://github.com/BotHarness/DeepSeekBot/pull/1861), [#1866](https://github.com/BotHarness/DeepSeekBot/pull/1866), [#1888](https://github.com/BotHarness/DeepSeekBot/issues/1888), [#1850](https://github.com/BotHarness/DeepSeekBot/issues/1850), [#1852](https://github.com/BotHarness/DeepSeekBot/issues/1852), [#1878](https://github.com/BotHarness/DeepSeekBot/pull/1878), [#2077](https://github.com/BotHarness/DeepSeekBot/issues/2077)).
+- Bot 现在按其 Session 自身的 DeepSeek Harness 权限模式运行 Shell 以及其他已安装插件提供的工具（例如 `ops_bash`），不再为每次调用额外弹出审批卡。DeepSeek Harness 自己请求权限时（例如 Shell 命令需要离开沙箱），该请求会以审批卡出现在 Bot 的聊天中。密钥工具、编辑原始附件、浏览器与电脑操作仍按原方式请求批准（[#1731](https://github.com/BotHarness/DeepSeekBot/issues/1731)）。
+- 频道设置更好找了：在消息侧边栏右键频道即可打开「频道设置」「我的昵称」以及私聊的「显示 Bot 在别处的动作」开关；点击对话顶部的名称胶囊也能打开资料和同样的选项。对话区右上角的 ⋯ 按钮已移除（[#1761](https://github.com/BotHarness/DeepSeekBot/pull/1761)）。
+- 桌面端悬停消息时，表情回应、回复和复制操作改为浮在气泡右上边缘的小工具栏里，不再显示在气泡侧边，布局不会跳动（[#1843](https://github.com/BotHarness/DeepSeekBot/pull/1843)）。
+- Bot 与 Assignment 提示词现在说明新文件应放在哪里：临时文件、日志、打包产物和生成结果除非 Human 指定位置，否则放在 Grant 内的 `<workspacePath>/.botharness/<短任务标识>/`（或系统临时目录），绝不放在 Grant 根目录、Human 主目录或新的同级文件夹；已有项目文件就地修改。Assignment 的终态报告会列出创建的文件（[#1957](https://github.com/BotHarness/DeepSeekBot/issues/1957)）。
+- 移动端升级至 Expo SDK 58，保留本地设置与缓存的同步写入行为，并将 iOS 权限译文限定在 iOS，避免 Android 正式包的语言资源检查失败；开发者需要重新构建原生开发客户端（[#2020](https://github.com/BotHarness/BotHarness/issues/2020)）。
+- 活动中心的完整页面与 Dock 直接进入个人收件箱，随所在面板宽度铺满，卡片圆角、颜色和面板内边距与频道列表一致，默认展示可独立折叠的「需要你处理／与你有关／其他未读」三组，标题栏支持搜索全部合资格通知，筛选、历史与排序收进菜单，支持卡片内工具审批、下方展开上下文和失败重试，批量操作收进显式选择模式；同时清理旧总览导航、状态、样式和重复界面测试，已读刷新保留正在输入的回复草稿（[#2026](https://github.com/BotHarness/DeepSeekBot/issues/2026)）。
+- Android 设置采用更舒展的大圆角分组、强调色标题、内缩分隔线和清晰的选中状态；开关改用原生 Material 3 控件，继续保留已有偏好设置（[#2072](https://github.com/BotHarness/DeepSeekBot/issues/2072)）。
+### Fixed
+- 恢复从控制列空白区域拖动 macOS Desktop 窗口，及面板标题栏空白区域拖动窗口；关闭和移动面板仅由图标与标题区域触发，频道信息与操作按钮独立（[#2205](https://github.com/BotHarness/DeepSeekBot/issues/2205)）。
+- 移动流式回复合并草稿更新、传输追加文字、复用 Markdown 解析并按测量块渲染，保留阅读历史的位置；Android 增加原生渐进文字淡入、改进抽屉／键盘交互及流式或完整气泡偏好，原生淡入需重建客户端 ([#1803](https://github.com/BotHarness/DeepSeekBot/issues/1803), [#1808](https://github.com/BotHarness/DeepSeekBot/issues/1808), [#2028](https://github.com/BotHarness/DeepSeekBot/issues/2028), [#2183](https://github.com/BotHarness/DeepSeekBot/issues/2183), [#1873](https://github.com/BotHarness/DeepSeekBot/pull/1873)).
+- 移动表单与配对界面保持在键盘上方，跟随系统语言和字号，保证导航、标题与操作可用；缺失会话提供有效返回路径，Android 对话框和抽屉统一主题控件，进入云服务时关闭遗留配对界面 ([#2171](https://github.com/BotHarness/DeepSeekBot/issues/2171), [#1806](https://github.com/BotHarness/DeepSeekBot/issues/1806), [#1872](https://github.com/BotHarness/DeepSeekBot/pull/1872), [#1926](https://github.com/BotHarness/DeepSeekBot/pull/1926), [#1938](https://github.com/BotHarness/DeepSeekBot/issues/1938), [#2004](https://github.com/BotHarness/DeepSeekBot/issues/2004), [mobile contribution contract](apps/mobile/DESIGN.md#system-text-and-large-text-acceptance), [#2021](https://github.com/BotHarness/DeepSeekBot/issues/2021), [#2083](https://github.com/BotHarness/DeepSeekBot/issues/2083), [#2106](https://github.com/BotHarness/DeepSeekBot/issues/2106), [#2186](https://github.com/BotHarness/DeepSeekBot/issues/2186)).
+- 在 Windows 上，Bot 的 Orchestrator 现在使用其预设提供的 `pwsh` 作为 Shell，不再出现实际经由 PowerShell 运行的 `bash` 工具；在可写的 Workspace Grant 中运行的 `pwsh` 命令会使用该 Grant。Bot 的角色提示词不再把 `bash` 说成唯一的 Shell，因此 Bot 也会使用其他已安装插件添加的 Shell，例如 `ops_bash`（[#1731](https://github.com/BotHarness/DeepSeekBot/issues/1731)）。
+- PersonaBot 在群消息里写 `@` 加同事显示名时，现在会真正提及该同事：名字显示为提及标记并唤醒对方，即使对方只在被 @ 时唤醒。多位同事回应同一条 Human 请求时，可以各自向同一位总控汇报；两个 Bot 互相 @ 仍会在一轮后停止。Bot 在仍处理上一轮交流的回合中收到新的 Human 任务并汇报时，汇报会再次唤醒总控，不再被当作上一轮交流而丢弃；之前未 @ 的消息只以普通群投递送达的同事，之后被 @ 时仍会被唤醒（[#1764](https://github.com/BotHarness/DeepSeekBot/issues/1764)）。
+- 对于在响应里省略为 0 的缓存计数的路由（例如通过 OpenCode Go 使用 DeepSeek），PersonaBot 的资料页和概览用量现在会显示缓存读取和缓存写入 Token，不再标为未知、总数也不再显示为部分。只有当响应里的总数能证明某项的值时才会补上；本次更新之前记录的用量保持不变（[#1787](https://github.com/BotHarness/DeepSeekBot/issues/1787)）。
+- 修复了从私聊输入框打开的工作区授权对话框自 1.3 起只显示「只读」、无法开启写入的问题；文件夹行的标题栏直接显示写入开关和打开文件夹按钮，新添加的文件夹默认允许写入（[#1855](https://github.com/BotHarness/DeepSeekBot/pull/1855)）。
+- 修复了某条消息客户端无法解析时整个 Bot 私信报“invalid channelTimeline response”的问题：该消息现以纯文本显示，频道其余消息正常加载（[#1887](https://github.com/BotHarness/DeepSeekBot/pull/1887)）。
+- 输入框里的 Bot @chip、@ 候选列表和群聊活动行，现在显示的头像与该 Bot 发消息时的头像一致；之前自定义过头像的 Bot 在这些位置会显示按名字生成的默认头像（[#1906](https://github.com/BotHarness/DeepSeekBot/pull/1906)）。
+- 总览的 token 用量不再因为部分用量未上报（例如升级前保留的旧记录）而整周显示“未知”。总量现在只计入已上报的部分并标记 **+**，每天的柱子也显示已上报的用量（[#1908](https://github.com/BotHarness/DeepSeekBot/pull/1908)）。
+- 在没有 IPv6 的 Docker 主机上，Linux Docker 电脑现在也能启动。之前桌面始终没有响应，电脑会一直停在「正在等待桌面响应…」。接管 Docker 电脑查看并操作桌面也恢复正常，画面不再因「unknown field `max_image_dimension`」失败（[#1924](https://github.com/BotHarness/DeepSeekBot/pull/1924)）。
+- 修复手机统计开关保存后仍显示旧状态的问题，已加载的偏好会在同一次开关事件内更新（[#1935](https://github.com/BotHarness/DeepSeekBot/issues/1935)）。
+- 修复进入 Bot mode 替换原生侧栏后，客户端诊断误报界面丢失的问题。可见的 Bot mode 主界面现在也计为已挂载；界面真正消失或此前发生错误时，仍报告失败（[#1947](https://github.com/BotHarness/DeepSeekBot/issues/1947)）。
+- 在微信等没有发送者角色策略的平台上，发送者权限查询现在返回 `role-policy-not-supported-for-platform`，不再误报 `binding-replaced`，Bot 不会因未变化的绑定而拒绝工作；平台支持判断前先拒绝已禁用／替换身份和已撤销授权；连接群消息保留原始接收绑定，缺少该证据的旧群消息需要发送新消息后再查询（[#1951](https://github.com/BotHarness/DeepSeekBot/issues/1951)）。
+- 滚动会话面板后，下一次更新不再让每一行都滑动；输入框上方活动状态的箭头现在与面板展开方向一致（[#1952](https://github.com/BotHarness/DeepSeekBot/issues/1952)）。
+- 修复使用已发布 IM Provider 时，已授权的微信扫码绑定者私聊一直只能回复、无法主动发送的问题：主动发送现在与 QQ 一致，按账号导出的 `proactive-text-checked`、`proactive-receipt-checked` 与 `proactive-fence-checked` 能力判定（[#1955](https://github.com/BotHarness/DeepSeekBot/issues/1955)）。
+- 关于页面区分源码构建和未知发布元数据，不再把 `0.0.0` 当作软件发布版本；已认证 CLI 提供相同身份，重启轮询等待精确的待生效版本（[#1980](https://github.com/BotHarness/DeepSeekBot/issues/1980)）。
+- 修复本地 Browser 在 Bot 尚未取得标签页时过早发布画面地址的问题；首帧等待和失败现与浏览器停止明确区分，请求有时限，失败后可显式重连（[#2012](https://github.com/BotHarness/DeepSeekBot/issues/2012)）。
+- 修复窄消息面板中的文件附件布局：气泡按内容收紧、正文左对齐并优化换行，文件名保持可见，打开和下载按钮在卡片内自动换行（[#2037](https://github.com/BotHarness/DeepSeekBot/issues/2037)）。
+- 移动端聊天保留结构化 Bot 提及，以正文大小的行内头像和当前姓名显示，并使用对应 Bot 的 primary 颜色。点击可打开对应 Bot 的私聊；改名或缺失的 Bot 按 ID 识别，不通过显示名称匹配（[#2160](https://github.com/BotHarness/DeepSeekBot/issues/2160)）。
+- 进入 Bot 模式时自动检查兼容的 DeepSeekBot 更新，按本地 Profile 记住已关闭的版本提醒，并支持 `release-check --force` 真正刷新检查（[#2173](https://github.com/BotHarness/DeepSeekBot/issues/2173)）。
 ### Documentation
-- 记录配对手机如何在 Host 重启后继续访问：同一 `dsh web` 监听器上的设备网关校验每台设备的凭据，转发到原生通道，并可立即撤销单台设备及其已打开的数据流；运行时行为不变（[ADR-0199](../docs/adr/0199-paired-devices-reach-the-host-through-a-same-listener-device-gateway.md)，[#1649](https://github.com/BotHarness/DeepSeekBot/issues/1649)）。
+- 发布可重复执行的 Activity、工作区授权、记忆和浏览器验证路径，关联 CLI 与源码版本证据，并明确覆盖范围限制 ([#1972](https://github.com/BotHarness/DeepSeekBot/issues/1972), [#1973](https://github.com/BotHarness/DeepSeekBot/issues/1973), [#1974](https://github.com/BotHarness/DeepSeekBot/issues/1974), [#1975](https://github.com/BotHarness/DeepSeekBot/issues/1975), [#1976](https://github.com/BotHarness/DeepSeekBot/issues/1976)).
+- GitHub README 和安装指南改为安装 `deepseekbot@1.3.1`，并列出它的亮点（[#1771](https://github.com/BotHarness/DeepSeekBot/pull/1771)）。
+- 明确 DSB 软件与 npm 共用发布身份、QA 产物不可替换、手机／依赖独立版本及渠道／重试门槛；运行校验仍待实现（[#1979](https://github.com/BotHarness/DeepSeekBot/issues/1979)、[规范](https://github.com/BotHarness/DeepSeekBot/blob/main/docs/agents/version-policy.md)、[ADR-0216](https://github.com/BotHarness/DeepSeekBot/blob/main/docs/adr/0216-dsb-product-versions-identify-immutable-package-sets.md)）。
+## [1.3.1] - 2026-10-14
+在 DSH 插件页输入 `deepseekbot` 重新一步装好，现在只支持 DSH 0.2.0-rc.2；`deepseekbot` 命令行可以配置 Host、操作 Bot 的浏览器和 Computer、管理基于 token 的 IM 应用；Bot 浏览器面板随页面变化实时刷新；手机 App 开发版可以查看 Bot 列表并使用原生 PersonaBot 私信。
+### Breaking Changes
+- DeepSeekBot 1.3.1 只支持 DSH 0.2.0-rc.2（随包的 Computer 运行时只兼容这个版本）。DSH 0.2.0-rc.1 和 0.2.1 alpha 安装时会拒绝它，并给出点名 DeepSeekBot 的提示；请先把 DSH 升级到 0.2.0-rc.2，或继续使用 DeepSeekBot 1.3.0（[#1672](https://github.com/BotHarness/DeepSeekBot/pull/1672)）。
+### Added
+- 上手清单新增「看看它在 DSH 里怎么干活」：一段小导览，从 Bot 的「会话」标签跳到 DSH 里的同一个会话，再回到 Bot 私聊（[#1496](https://github.com/BotHarness/DeepSeekBot/issues/1496)）。
+- 新增 DeepSeekBot 手机 App 的开发版：通过 Tailscale HTTPS 连接用户自己的 Host，显示 PersonaBot 与频道列表及其实时状态；并在 [ADR-0200](docs/adr/0200-the-mobile-app-reads-live-state-over-the-dsh-remote-stream-socket.md) 记录了它通过 DSH Remote stream socket 读取实时状态的原因（[#1650](https://github.com/BotHarness/DeepSeekBot/issues/1650)）。
+- 手机 App 开发版新增原生 PersonaBot 私信：在列表中点开 Bot，先显示设备上的缓存再与 Host 对齐，可向上翻看更早的历史；发送时可见"发送中/已送达/未发送"，重试不会重复发送；Bot 回复实时流入；App 从后台回来后续接，不丢失也不重复消息；回复以可选中的 Markdown 显示，跟随系统深色模式与中英文（[#1651](https://github.com/BotHarness/DeepSeekBot/issues/1651)）。
+- `deepseekbot` 命令行现在可以完成 Web 界面里的这些配置，Agent 能独立搭建和测试 Host：`browser-access-set`、`computer-access-set`、`access` 与 `access-set`（完全访问需加 `--acknowledge-risk`）、`settings` 与 `settings-set`、`workspace-create` 和 `group-create`（[#1677](https://github.com/BotHarness/DeepSeekBot/issues/1677)）。
+- `deepseekbot` 命令行现在可以操作 Bot 的浏览器和 Computer：`browser-open`、`browser-frame`（把当前画面保存到文件）、`browser-takeover`、`browser-stop`、`computer-start`、`computer-status` 和 `computer-stop`。`grants` 现在也支持在线 Host（[#1677](https://github.com/BotHarness/DeepSeekBot/issues/1677)）。
+- `deepseekbot` 命令行现在可以添加、查看和移除基于 token 的 IM 应用（Discord、Slack、QQ、钉钉、企业微信、Matrix），把它们绑定到 Bot 或解绑，查看每个绑定的接收状态，并把外部群聊接入 Channel：`im-app-add`、`im-app-status`、`im-app-remove`、`im-bind`、`im-unbind`、`im-status`、`channel-connect` 和 `channel-ingests`。凭证只从标准输入读取，绝不打印（[#1677](https://github.com/BotHarness/DeepSeekBot/issues/1677)）。
+### Changed
+- Host 网页里的 Bot 浏览器面板现在随页面变化实时刷新，不再每秒刷新一次。页面每次重绘时 Chrome 都会推送新画面，所以输入、滚动和点击大约四分之一秒就能看到，页面不变时不产生额外开销。无法推流的运行方式仍保持每秒一张画面（[#1636](https://github.com/BotHarness/DeepSeekBot/issues/1636)）。
+### Documentation
+- 记录配对手机如何在 Host 重启后继续访问：同一 `dsh web` 监听器上的设备网关校验每台设备的凭据，转发到原生通道，并可立即撤销单台设备及其已打开的数据流；运行时行为不变（[ADR-0199](docs/adr/0199-paired-devices-reach-the-host-through-a-same-listener-device-gateway.md)，[#1649](https://github.com/BotHarness/DeepSeekBot/issues/1649)）。
+- GitHub README 和安装指南改为安装 `deepseekbot@1.3.0` 并列出它的亮点，npm 包说明写明最低需要 DSH 0.2.0（[#1667](https://github.com/BotHarness/DeepSeekBot/pull/1667)）。
+### Fixed
+- 在 DSH 插件页输入 `deepseekbot` 重新一步装好；1.3.0 会先停下来要求批准 `agent-browser` 构建。Browser 试用驱动用的 `agent-browser` 改为可选加装。DeepSeekBot 现在明确声明需要 DSH 0.2.0-rc.2（随包的 Computer 运行时只兼容这个版本），其他 DSH 版本会直接看到点名 DeepSeekBot 的不兼容提示。每次发版前都会先在全新 Profile 里实装验证（[#1672](https://github.com/BotHarness/DeepSeekBot/pull/1672)）。
 ## [1.3.0] - 2026-10-14
@@ -100,7 +238,7 @@ Bot 模式整体迁移到统一的 StyleX 设计系统，Channel 配置移入设
 - 同一 CLI 现在覆盖 Bot 生命周期与人类命名：`pause`/`resume` 开关执行，`update` 改名/简介/标签，`human-name-set` 写人类显示名，`channel-human-name-set` 写分 channel 人类昵称，全离线可用、错误按码返回。见 [Bot 命令行指南](docs/bot-cli.md)（[#1312](https://github.com/BotHarness/DeepSeekBot/issues/1312)）。
 - 同一 CLI 现在可读 Channel、管理授权与计划、查看配对：`channels` 与 `channel-messages` 看历史，授权的列出/撤销/写开关，计划的增删改查、历史、手动触发与预渲染，`pairings` 看 IM 配对状态；新建授权仍是 Host 侧动作。见 [Bot 命令行指南](docs/bot-cli.md)（[#1313](https://github.com/BotHarness/DeepSeekBot/issues/1313)）。
 - 同一 CLI 现在可零点击配置密钥：`secret-put` 只从标准输入读值，以行级编辑写入 `$DSH_HOME/.credentials.yaml`（备份加回读校验），`secret-list` 只列名字不返回值，`secret-unset` 删除条目。见 [Bot 命令行指南](docs/bot-cli.md)（[#1314](https://github.com/BotHarness/DeepSeekBot/issues/1314)，[ADR-0158](docs/adr/0158-secret-put-writes-credential-refs-by-line-edit.md)）。
-- 在线 CLI 动词将走 DSH HTTP 单次调用通道（每次调用做 token 到 cookie 登录），永不直连 operational database；bridge 与 gateway 错误码原样透出。见 [ADR-0160](docs/adr/0159-live-cli-verbs-ride-the-dsh-http-carrier.md)（[#1315](https://github.com/BotHarness/DeepSeekBot/issues/1315)）。
+- 在线 CLI 动词将走 DSH HTTP 单次调用通道（每次调用做 token 到 cookie 登录），永不直连 operational database；bridge 与 gateway 错误码原样透出。见 [ADR-0159](docs/adr/0159-live-cli-verbs-ride-the-dsh-http-carrier.md)（[#1315](https://github.com/BotHarness/DeepSeekBot/issues/1315)）。
 - 同一 CLI 现在可自发现：`search` 按词在实际分发的动词表里找命令，`--compact` 把标准输出 JSON 压成一行供智能体使用。见 [Bot 命令行指南](docs/bot-cli.md)（[#1316](https://github.com/BotHarness/DeepSeekBot/issues/1316)）。
 - 同一 CLI 现在可无界面读写 Bot 记忆：`memory-snapshot`、`memory-file`、`memory-history`、`memory-diff` 读取记忆库，`memory-save` 写一个文件并提交（支持 compare-and-swap head 与幂等 edit id）；冲突与非法 sha 按错误码失败。见 [Bot 命令行指南](docs/bot-cli.md)（[#1311](https://github.com/BotHarness/DeepSeekBot/issues/1311)）。
 - 本机 Bot 浏览器现在像 Computer 一样支持人工接管：Host 直供的实时画面支持点击、滚动和键盘输入（小屏幕默认触控板模式），需要验证时 Bot 按 ask-permission 流程发起接管——生成带说明的一次性链接，等待完成后校验页面状态再继续。输入的密码只留在实时画面里，不会进入聊天或日志；每次接管都留下审计记录与会话录制（[#1322](https://github.com/BotHarness/DeepSeekBot/issues/1322)，[ADR-0163](docs/adr/0163-local-browser-takeover-reuses-computer-viewer-family.md)）。