@jackwener/opencli 1.5.4 → 1.5.6

package/docs/adapters/browser/band.md

@@ -0,0 +1,63 @@
+# Band
+
+**Mode**: 🔐 Browser · **Domain**: `www.band.us`
+
+Read posts, comments, and notifications from [Band](https://www.band.us), a private community platform. Authentication uses your logged-in Chrome session (cookie-based).
+
+## Commands
+
+| Command | Description |
+|---------|-------------|
+| `opencli band bands` | List all Bands you belong to |
+| `opencli band posts <band_no>` | List posts from a Band |
+| `opencli band post <band_no> <post_no>` | Export full post content including nested comments |
+| `opencli band mentions` | Show notifications where you were @mentioned |
+
+## Usage Examples
+
+```bash
+# List all your bands (get band_no from here)
+opencli band bands
+
+# List recent posts in a band
+opencli band posts 12345678 --limit 10
+
+# Export a post with comments
+opencli band post 12345678 987654321
+
+# Export post body only (skip comments)
+opencli band post 12345678 987654321 --comments false
+
+# Export post and download attached photos
+opencli band post 12345678 987654321 --output ./band-photos
+
+# Show recent @mention notifications
+opencli band mentions --limit 20
+
+# Show only unread mentions
+opencli band mentions --unread true
+
+# Show all notification types
+opencli band mentions --filter all
+```
+
+### `band mentions` filter options
+
+| Filter | Description |
+|--------|-------------|
+| `mentioned` | Only notifications where you were @mentioned (default) |
+| `all` | All notifications |
+| `post` | Post-related notifications |
+| `comment` | Comment-related notifications |
+
+## Prerequisites
+
+- Chrome running and **logged into** [band.us](https://www.band.us)
+- [Browser Bridge extension](/guide/browser-bridge) installed
+
+## Notes
+
+- `band_no` is the numeric ID in the Band URL: `band.us/band/{band_no}/post`
+- `band bands` lists all your bands with their `band_no` values
+- `band post` output rows: `type=post` (the post itself), `type=comment` (top-level comment), `type=reply` (nested reply)
+- Photo downloads use the full-resolution URL (thumbnail query params are stripped automatically)

package/docs/adapters/browser/ones.md

@@ -0,0 +1,59 @@
+# ONES
+
+**Mode**: 🔐 Browser Bridge · **Domain**: `ones.cn` (self-hosted via `ONES_BASE_URL`)
+
+## Commands
+
+| Command | Description |
+|---------|-------------|
+| `opencli ones login` | Login via Project API (`auth/login`) |
+| `opencli ones me` | Current user profile (`users/me`) |
+| `opencli ones token-info` | Token/user/team summary (`auth/token_info`) |
+| `opencli ones tasks` | Team task list with status/project labels and hours |
+| `opencli ones my-tasks` | My tasks (`assign`/`field004`/`owner`/`both`) |
+| `opencli ones task` | Task detail by UUID (`team/:team/task/:id/info`) |
+| `opencli ones worklog` | Log/backfill hours (GraphQL `addManhour` first, then REST fallbacks) |
+| `opencli ones logout` | Logout (`auth/logout`) |
+
+## Usage Examples
+
+```bash
+# Required: your ONES base URL
+export ONES_BASE_URL=https://your-instance.example.com
+
+# Optional if your deployment requires auth headers
+# export ONES_USER_ID=...
+# export ONES_AUTH_TOKEN=...
+
+# Login/profile
+opencli ones login --email you@company.com --password 'your-password'
+opencli ones me
+opencli ones token-info
+
+# Task lists
+opencli ones tasks <teamUUID> --limit 20
+opencli ones tasks <teamUUID> --project <projectUUID> --assign <userUUID>
+opencli ones my-tasks <teamUUID> --limit 100
+opencli ones my-tasks <teamUUID> --mode both
+
+# Task detail
+opencli ones task <taskUUID> --team <teamUUID>
+
+# Worklog: today / backfill
+opencli ones worklog <taskUUID> 2 --team <teamUUID>
+opencli ones worklog <taskUUID> 1.5 --team <teamUUID> --date 2026-03-23 --note "integration"
+
+opencli ones logout
+```
+
+## Prerequisites
+
+- Chrome running and logged into your ONES instance
+- [Browser Bridge extension](/guide/browser-bridge) installed
+- `ONES_BASE_URL` set to the same origin opened in Chrome
+
+## Notes
+
+- This adapter targets legacy ONES Project API deployments.
+- `ONES_TEAM_UUID` can be set to omit `--team` in `tasks` / `my-tasks` / `task`.
+- Hours display and input use `ONES_MANHOUR_SCALE` (default `100000`).

package/docs/adapters/browser/sinafinance.md

@@ -1,15 +1,19 @@
 # 新浪财经 (Sina Finance)
 
-**Mode**: 🌐 Public · **Domain**: `finance.sina.com.cn`
+**Mode**: 🌐 Public / 🔐 Browser · **Domain**: `finance.sina.com.cn`
 
 ## Commands
 
-| Command | Description |
-|---------|-------------|
-| `opencli sinafinance news` | 新浪财经 7×24 小时实时快讯 |
+| Command | Description | Mode |
+|---------|-------------|------|
+| `opencli sinafinance news` | 新浪财经 7×24 小时实时快讯 | 🌐 Public |
+| `opencli sinafinance rolling-news` | 新浪财经滚动新闻 | 🔐 Browser |
+| `opencli sinafinance stock` | 新浪财经行情（A股/港股/美股） | 🌐 Public |
 
 ## Usage Examples
 
+### news - 7×24 实时快讯
+
 ```bash
 # Latest financial news
 opencli sinafinance news --limit 20
@@ -23,13 +27,59 @@ opencli sinafinance news --type 6   # 国际
 opencli sinafinance news -f json
 ```
 
-### Options
+### rolling-news - 滚动新闻
+
+```bash
+# Rolling news feed
+opencli sinafinance rolling-news
+
+# JSON output
+opencli sinafinance rolling-news -f json
+```
+
+### stock - 股票行情
+
+```bash
+# Search and view A-share stock
+opencli sinafinance stock 贵州茅台 --market cn
+
+# Search and view HK stock
+opencli sinafinance stock 腾讯控股 --market hk
+
+# Search and view US stock
+opencli sinafinance stock aapl --market us
+
+# Auto-detect market (searches cn, hk, us in order)
+opencli sinafinance stock 招商证券
+
+# JSON output
+opencli sinafinance stock 贵州茅台 -f json
+```
+
+## Options
+
+### news
 
 | Option | Description |
 |--------|-------------|
 | `--limit` | Max results, up to 50 (default: 20) |
 | `--type` | News type: `0`=全部, `1`=A股, `2`=宏观, `3`=公司, `4`=数据, `5`=市场, `6`=国际, `7`=观点, `8`=央行, `9`=其它 |
 
+### stock
+
+| Option | Description |
+|--------|-------------|
+| `--market` | Market: `cn`, `hk`, `us`, `auto` (default: auto). When `auto`, searches in cn, hk, us order |
+
 ## Prerequisites
 
-- No browser required — uses public API
+- `news` & `stock`: No browser required — uses public API
+- `rolling-news`: Chrome running and **logged into** `finance.sina.com.cn`
+- For `rolling-news`: [Browser Bridge extension](/guide/browser-bridge) installed
+
+## Notes
+
+- `news` and `stock` use public APIs — no browser or login needed
+- `stock` supports Chinese names, Chinese codes, and ticker symbols; auto-detects market
+- Market priority for auto-detection: cn (A股) → hk (港股) → us (美股)
+- US stock `High`/`Low` columns show 52-week range; A股/港股 show today's range

package/docs/adapters/browser/spotify.md

@@ -0,0 +1,62 @@
+# Spotify
+
+**Mode**: 🔑 OAuth API · **Domains**: `accounts.spotify.com`, `api.spotify.com`
+
+## Commands
+
+| Command | Description |
+|---------|-------------|
+| `opencli spotify auth` | Authenticate with Spotify and store tokens locally |
+| `opencli spotify status` | Show current playback status |
+| `opencli spotify play [query]` | Resume playback or search-and-play a track |
+| `opencli spotify pause` | Pause playback |
+| `opencli spotify next` | Skip to the next track |
+| `opencli spotify prev` | Skip to the previous track |
+| `opencli spotify volume <0-100>` | Set playback volume |
+| `opencli spotify search <query>` | Search Spotify tracks |
+| `opencli spotify queue <query>` | Add a track to the playback queue |
+| `opencli spotify shuffle <on|off>` | Toggle shuffle |
+| `opencli spotify repeat <off|track|context>` | Set repeat mode |
+
+## Usage Examples
+
+```bash
+# First-time setup
+opencli spotify auth
+
+# What is playing right now?
+opencli spotify status
+
+# Resume playback
+opencli spotify play
+
+# Search and immediately play a track
+opencli spotify play "Numb Linkin Park"
+
+# Search without playing
+opencli spotify search "Daft Punk" --limit 5 -f json
+
+# Queue a track
+opencli spotify queue "Get Lucky"
+
+# Playback controls
+opencli spotify pause
+opencli spotify next
+opencli spotify prev
+opencli spotify volume 35
+opencli spotify shuffle on
+opencli spotify repeat track
+```
+
+## Setup
+
+1. Create a Spotify app at <https://developer.spotify.com/dashboard>
+2. Add `http://127.0.0.1:8888/callback` to the app's Redirect URIs
+3. Fill in `SPOTIFY_CLIENT_ID` and `SPOTIFY_CLIENT_SECRET` in `~/.opencli/spotify.env`
+4. Run `opencli spotify auth`
+
+## Notes
+
+- Browser Bridge is not required.
+- Tokens are stored locally at `~/.opencli/spotify-tokens.json`.
+- Playback commands work best when you already have an active Spotify device/session.

package/docs/adapters/browser/tieba.md

@@ -0,0 +1,45 @@
+# Tieba
+
+**Mode**: 🔐 Browser · **Domain**: `tieba.baidu.com`
+
+## Commands
+
+| Command | Description |
+|---------|-------------|
+| `opencli tieba hot` | Read Tieba trending topics |
+| `opencli tieba posts <forum>` | List threads in one forum |
+| `opencli tieba search <keyword>` | Search threads across Tieba |
+| `opencli tieba read <thread-id>` | Read one thread page |
+
+## Usage Examples
+
+```bash
+# Trending topics
+opencli tieba hot --limit 5
+
+# List forum threads
+opencli tieba posts 李毅 --limit 10
+
+# Search Tieba
+opencli tieba search 编程 --limit 10
+
+# Read one thread
+opencli tieba read 10163164720 --limit 10
+
+# Read page 2 of a thread
+opencli tieba read 10163164720 --page 2 --limit 10
+
+# JSON output
+opencli tieba hot -f json
+```
+
+## Notes
+
+- `tieba search` currently supports only `--page 1`
+- `tieba read --limit` counts reply rows; page 1 may also include the main post
+
+## Prerequisites
+
+- Chrome running and able to open `tieba.baidu.com`
+- [Browser Bridge extension](/guide/browser-bridge) installed
+- For `posts`, `search`, and `read`, a valid Tieba login session in Chrome is recommended

package/docs/adapters/browser/xueqiu.md

@@ -12,6 +12,7 @@
 | `opencli xueqiu hot` | 获取雪球热门动态 |
 | `opencli xueqiu search` | 搜索雪球股票（代码或名称） |
 | `opencli xueqiu stock` | 获取雪球股票实时行情 |
+| `opencli xueqiu comments` | 获取单只股票的讨论动态（按时间排序） |
 | `opencli xueqiu watchlist` | 获取雪球自选股列表 |
 | `opencli xueqiu fund-holdings` | 获取蛋卷基金持仓明细（可用 `--account` 按子账户过滤） |
 | `opencli xueqiu fund-snapshot` | 获取蛋卷基金快照（总资产、子账户、持仓，推荐 `-f json`） |
@@ -28,6 +29,9 @@ opencli xueqiu search 茅台
 # View one stock
 opencli xueqiu stock SH600519
 
+# View recent discussions for one stock
+opencli xueqiu comments SH600519 --limit 5
+
 # Upcoming earnings dates
 opencli xueqiu earnings-date SH600519 --next
 
@@ -57,4 +61,5 @@ opencli xueqiu feed -v
 
 - `fund-holdings` exposes both market value and share fields (`volume`, `usableRemainShare`)
 - `fund-snapshot -f json` is the easiest way to persist a full account snapshot for later analysis or diffing
+- `comments` returns stock-scoped discussion posts from the symbol page, not reply threads under one parent post
 - If the commands return empty data, first confirm the logged-in browser can directly see the Danjuan asset page

package/docs/adapters/browser/zsxq.md

@@ -0,0 +1,49 @@
+# 知识星球 (ZSXQ)
+
+**Mode**: 🔐 Browser · **Domain**: `wx.zsxq.com`
+
+Read groups, topics, search results, dynamics, and single-topic details from [知识星球](https://wx.zsxq.com) using your logged-in Chrome session.
+
+## Commands
+
+| Command | Description |
+|---------|-------------|
+| `opencli zsxq groups` | List the groups your account has joined |
+| `opencli zsxq topics` | List topics in the active group |
+| `opencli zsxq topic <id>` | Fetch a single topic with comments |
+| `opencli zsxq search <keyword>` | Search topics inside a group |
+| `opencli zsxq dynamics` | List recent dynamics across groups |
+
+## Usage Examples
+
+```bash
+# List your groups
+opencli zsxq groups
+
+# List topics from the active group in Chrome
+opencli zsxq topics --limit 20
+
+# Search inside the active group
+opencli zsxq search "opencli"
+
+# Search inside a specific group explicitly
+opencli zsxq search "opencli" --group_id 123456789
+
+# Export a single topic with comments
+opencli zsxq topic 987654321 --comment_limit 20
+
+# Read recent dynamics across all joined groups
+opencli zsxq dynamics --limit 20
+```
+
+## Prerequisites
+
+- Chrome running and **logged into** [wx.zsxq.com](https://wx.zsxq.com)
+- [Browser Bridge extension](/guide/browser-bridge) installed
+
+## Notes
+
+- `zsxq topics` and `zsxq search` use the current active group context from Chrome by default
+- If there is no active group context, pass `--group_id <id>` or open the target group in Chrome first
+- `zsxq groups` returns `group_id`, which you can reuse with `--group_id`
+- `zsxq topic` surfaces a missing topic as `NOT_FOUND` instead of a generic fetch error

package/docs/adapters/index.md

@@ -8,10 +8,11 @@ Run `opencli list` for the live registry.
 |------|----------|------|
 | **[twitter](/adapters/browser/twitter)** | `trending` `bookmarks` `profile` `search` `timeline` `thread` `following` `followers` `notifications` `post` `reply` `delete` `like` `article` `follow` `unfollow` `bookmark` `unbookmark` `download` `accept` `reply-dm` `block` `unblock` `hide-reply` | 🔐 Browser |
 | **[reddit](/adapters/browser/reddit)** | `hot` `frontpage` `popular` `search` `subreddit` `read` `user` `user-posts` `user-comments` `upvote` `save` `comment` `subscribe` `saved` `upvoted` | 🔐 Browser |
+| **[tieba](/adapters/browser/tieba)** | `hot` `posts` `search` `read` | 🔐 Browser |
 | **[bilibili](/adapters/browser/bilibili)** | `hot` `search` `me` `favorite` `history` `feed` `subtitle` `dynamic` `ranking` `following` `user-videos` `download` | 🔐 Browser |
 | **[zhihu](/adapters/browser/zhihu)** | `hot` `search` `question` `download` | 🔐 Browser |
 | **[xiaohongshu](/adapters/browser/xiaohongshu)** | `search` `notifications` `feed` `user` `download` `publish` `creator-notes` `creator-note-detail` `creator-notes-summary` `creator-profile` `creator-stats` | 🔐 Browser |
-| **[xueqiu](/adapters/browser/xueqiu)** | `feed` `hot-stock` `hot` `search` `stock` `watchlist` `earnings-date` `fund-holdings` `fund-snapshot` | 🔐 Browser |
+| **[xueqiu](/adapters/browser/xueqiu)** | `feed` `hot-stock` `hot` `search` `stock` `comments` `watchlist` `earnings-date` `fund-holdings` `fund-snapshot` | 🔐 Browser |
 | **[youtube](/adapters/browser/youtube)** | `search` `video` `transcript` | 🔐 Browser |
 | **[v2ex](/adapters/browser/v2ex)** | `hot` `latest` `topic` `node` `user` `member` `replies` `nodes` `daily` `me` `notifications` | 🌐 / 🔐 |
 | **[bloomberg](/adapters/browser/bloomberg)** | `main` `markets` `economics` `industries` `tech` `politics` `businessweek` `opinions` `feeds` `news` | 🌐 / 🔐 |
@@ -28,7 +29,7 @@ Run `opencli list` for the live registry.
 | **[linux-do](/adapters/browser/linux-do)** | `feed` `categories` `tags` `search` `topic` `user-topics` `user-posts` | 🔐 Browser |
 | **[chaoxing](/adapters/browser/chaoxing)** | `assignments` `exams` | 🔐 Browser |
 | **[grok](/adapters/browser/grok)** | `ask` | 🔐 Browser |
-| **[doubao](/adapters/browser/doubao)** | `status` `new` `send` `read` `ask` | 🔐 Browser |
+| **[doubao](/adapters/browser/doubao)** | `status` `new` `send` `read` `ask` `history` `detail` `meeting-summary` `meeting-transcript` | 🔐 Browser |
 | **[weread](/adapters/browser/weread)** | `shelf` `search` `book` `ranking` `notebooks` `highlights` `notes` | 🔐 Browser |
 | **[douban](/adapters/browser/douban)** | `search` `top250` `subject` `photos` `download` `marks` `reviews` `movie-hot` `book-hot` | 🔐 Browser |
 | **[facebook](/adapters/browser/facebook)** | `feed` `profile` `search` `friends` `groups` `events` `notifications` `memories` `add-friend` `join-group` | 🔐 Browser |
@@ -45,6 +46,7 @@ Run `opencli list` for the live registry.
 | **[weixin](/adapters/browser/weixin)** | `download` | 🔐 Browser |
 | **[36kr](/adapters/browser/36kr)** | `news` `hot` `search` `article` | 🌐 / 🔐 |
 | **[producthunt](/adapters/browser/producthunt)** | `posts` `today` `hot` `browse` | 🌐 / 🔐 |
+| **[ones](/adapters/browser/ones)** | `login` `me` `token-info` `tasks` `my-tasks` `task` `worklog` `logout` | 🔐 Browser Bridge + `ONES_BASE_URL` |
 
 ## Public API Adapters
 
@@ -62,6 +64,7 @@ Run `opencli list` for the live registry.
 | **[barchart](/adapters/browser/barchart)** | `quote` `options` `greeks` `flow` | 🌐 Public |
 | **[hf](/adapters/browser/hf)** | `top` | 🌐 Public |
 | **[sinafinance](/adapters/browser/sinafinance)** | `news` | 🌐 Public |
+| **[spotify](/adapters/browser/spotify)** | `auth` `status` `play` `pause` `next` `prev` `volume` `search` `queue` `shuffle` `repeat` | 🔑 OAuth API |
 | **[stackoverflow](/adapters/browser/stackoverflow)** | `hot` `search` `bounties` `unanswered` | 🌐 Public |
 | **[wikipedia](/adapters/browser/wikipedia)** | `search` `summary` `random` `trending` | 🌐 Public |
 | **[lobsters](/adapters/browser/lobsters)** | `hot` `newest` `active` `tag` | 🌐 Public |

package/docs/adapters-doc/ones.md

@@ -0,0 +1,32 @@
+# ONES 项目管理平台（OpenCLI）
+
+基于官方 [ONES Project API](https://developer.ones.cn/zh-CN/docs/api/readme/)，经 **Chrome + Browser Bridge** 在页面里 `fetch`（`credentials: 'include'`）。
+
+## 环境变量
+
+| 变量 | 必填 | 说明 |
+|------|------|------|
+| `ONES_BASE_URL` | 是 | 与 Chrome 中访问的 ONES 根 URL 一致 |
+| `ONES_USER_ID` / `ONES_AUTH_TOKEN` | 视部署 | 若接口强制要文档中的 Header，再设置（可先只依赖浏览器登录） |
+| `ONES_EMAIL` / `ONES_PHONE` / `ONES_PASSWORD` | 否 | 供 `ones login` 脚本化 |
+
+## 命令
+
+```bash
+export ONES_BASE_URL=https://your-host
+# 安装扩展，Chrome 已登录 ONES
+
+opencli ones me
+opencli ones token-info              # teams column includes name(uuid), useful for tasks
+opencli ones tasks <teamUUID> --limit 20 --project <optional>
+opencli ones my-tasks <teamUUID> --limit 100              # default assignee=self
+opencli ones my-tasks <teamUUID> --mode field004         # deployments using field004 as assignee
+opencli ones my-tasks <teamUUID> --mode both             # assignee OR creator
+opencli ones task <taskUUID> --team <teamUUID>           # single task (URL .../task/<uuid>)
+opencli ones worklog <taskUUID> 2 --team <teamUUID>      # log hours for today
+opencli ones worklog <taskUUID> 1 --team <teamUUID> --date 2026-03-01  # backfill
+opencli ones login --email you@corp.com --password '***'   # optional; stderr prints header export hints
+opencli ones logout
+```
+
+更完整的说明见 [docs/adapters/browser/ones.md](../adapters/browser/ones.md)。

package/extension/dist/background.js

@@ -238,8 +238,7 @@ async function getAutomationWindow(workspace) {
     focused: false,
     width: 1280,
     height: 900,
-    type: "normal",
-    state: "normal"
+    type: "normal"
   });
   const session = {
     windowId: win.id,

package/extension/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "OpenCLI",
-  "version": "1.5.4",
+  "version": "1.5.5",
   "description": "Browser automation bridge for the OpenCLI CLI tool. Executes commands in isolated Chrome windows via a local daemon.",
   "permissions": [
     "debugger",

package/extension/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencli-extension",
-  "version": "1.5.4",
+  "version": "1.5.5",
   "private": true,
   "type": "module",
   "scripts": {

package/extension/src/background.ts

@@ -160,13 +160,14 @@ async function getAutomationWindow(workspace: string): Promise<number> {
 
   // Create a new window with a data: URI that New Tab Override extensions cannot intercept.
   // Using about:blank would be hijacked by extensions like "New Tab Override".
+  // Note: Do NOT set `state` parameter here. Chrome 146+ rejects 'normal' as an invalid
+  // state value for windows.create(). The window defaults to 'normal' state anyway.
   const win = await chrome.windows.create({
     url: BLANK_PAGE,
     focused: false,
     width: 1280,
     height: 900,
     type: 'normal',
-    state: 'normal',
   });
   const session: AutomationSession = {
     windowId: win.id!,
@@ -251,6 +252,8 @@ async function handleCommand(cmd: Command): Promise<Result> {
         return await handleCloseWindow(cmd, workspace);
       case 'sessions':
         return await handleSessions(cmd);
+      case 'set-file-input':
+        return await handleSetFileInput(cmd, workspace);
       default:
         return { id: cmd.id, ok: false, error: `Unknown action: ${cmd.action}` };
     }
@@ -578,6 +581,19 @@ async function handleCloseWindow(cmd: Command, workspace: string): Promise<Resul
   return { id: cmd.id, ok: true, data: { closed: true } };
 }
 
+async function handleSetFileInput(cmd: Command, workspace: string): Promise<Result> {
+  if (!cmd.files || !Array.isArray(cmd.files) || cmd.files.length === 0) {
+    return { id: cmd.id, ok: false, error: 'Missing or empty files array' };
+  }
+  const tabId = await resolveTabId(cmd.tabId, workspace);
+  try {
+    await executor.setFileInputFiles(tabId, cmd.files, cmd.selector);
+    return { id: cmd.id, ok: true, data: { count: cmd.files.length } };
+  } catch (err) {
+    return { id: cmd.id, ok: false, error: err instanceof Error ? err.message : String(err) };
+  }
+}
+
 async function handleSessions(cmd: Command): Promise<Result> {
   const now = Date.now();
   const data = await Promise.all([...automationSessions.entries()].map(async ([workspace, session]) => ({

package/extension/src/cdp.ts

@@ -147,6 +147,48 @@ export async function screenshot(
   }
 }
 
+/**
+ * Set local file paths on a file input element via CDP DOM.setFileInputFiles.
+ * This bypasses the need to send large base64 payloads through the message channel —
+ * Chrome reads the files directly from the local filesystem.
+ *
+ * @param tabId - Target tab ID
+ * @param files - Array of absolute local file paths
+ * @param selector - CSS selector to find the file input (optional, defaults to first file input)
+ */
+export async function setFileInputFiles(
+  tabId: number,
+  files: string[],
+  selector?: string,
+): Promise<void> {
+  await ensureAttached(tabId);
+
+  // Enable DOM domain (required for DOM.querySelector and DOM.setFileInputFiles)
+  await chrome.debugger.sendCommand({ tabId }, 'DOM.enable');
+
+  // Get the document root
+  const doc = await chrome.debugger.sendCommand({ tabId }, 'DOM.getDocument') as {
+    root: { nodeId: number };
+  };
+
+  // Find the file input element
+  const query = selector || 'input[type="file"]';
+  const result = await chrome.debugger.sendCommand({ tabId }, 'DOM.querySelector', {
+    nodeId: doc.root.nodeId,
+    selector: query,
+  }) as { nodeId: number };
+
+  if (!result.nodeId) {
+    throw new Error(`No element found matching selector: ${query}`);
+  }
+
+  // Set files directly via CDP — Chrome reads from local filesystem
+  await chrome.debugger.sendCommand({ tabId }, 'DOM.setFileInputFiles', {
+    files,
+    nodeId: result.nodeId,
+  });
+}
+
 export async function detach(tabId: number): Promise<void> {
   if (!attached.has(tabId)) return;
   attached.delete(tabId);

package/extension/src/protocol.ts

@@ -5,7 +5,7 @@
  * Everything else is just JS code sent via 'exec'.
  */
 
-export type Action = 'exec' | 'navigate' | 'tabs' | 'cookies' | 'screenshot' | 'close-window' | 'sessions';
+export type Action = 'exec' | 'navigate' | 'tabs' | 'cookies' | 'screenshot' | 'close-window' | 'sessions' | 'set-file-input';
 
 export interface Command {
   /** Unique request ID */
@@ -32,6 +32,10 @@ export interface Command {
   quality?: number;
   /** Whether to capture full page (not just viewport) */
   fullPage?: boolean;
+  /** Local file paths for set-file-input action */
+  files?: string[];
+  /** CSS selector for file input element (set-file-input action) */
+  selector?: string;
 }
 
 export interface Result {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jackwener/opencli",
-  "version": "1.5.4",
+  "version": "1.5.6",
   "publishConfig": {
     "access": "public"
   },

package/scripts/postinstall.js

@@ -196,6 +196,22 @@ function main() {
     }
   }
 
+  // ── Spotify credentials template ────────────────────────────────────
+  const opencliDir = join(home, '.opencli');
+  const spotifyEnvFile = join(opencliDir, 'spotify.env');
+  ensureDir(opencliDir);
+  if (!existsSync(spotifyEnvFile)) {
+    writeFileSync(spotifyEnvFile,
+      `# Spotify credentials — get them at https://developer.spotify.com/dashboard\n` +
+      `# Add http://127.0.0.1:8888/callback as a Redirect URI in your Spotify app\n` +
+      `SPOTIFY_CLIENT_ID=your_spotify_client_id_here\n` +
+      `SPOTIFY_CLIENT_SECRET=your_spotify_client_secret_here\n`,
+      'utf8'
+    );
+    console.log(`✓ Spotify credentials template created at ${spotifyEnvFile}`);
+    console.log(`  Edit the file and add your Client ID and Secret, then run: opencli spotify auth`);
+  }
+
   // ── Browser Bridge setup hint ───────────────────────────────────────
   console.log('');
   console.log('  \x1b[1mNext step — Browser Bridge setup\x1b[0m');

package/src/browser/daemon-client.ts

@@ -19,7 +19,7 @@ function generateId(): string {
 
 export interface DaemonCommand {
   id: string;
-  action: 'exec' | 'navigate' | 'tabs' | 'cookies' | 'screenshot' | 'close-window' | 'sessions';
+  action: 'exec' | 'navigate' | 'tabs' | 'cookies' | 'screenshot' | 'close-window' | 'sessions' | 'set-file-input';
   tabId?: number;
   code?: string;
   workspace?: string;
@@ -30,6 +30,10 @@ export interface DaemonCommand {
   format?: 'png' | 'jpeg';
   quality?: number;
   fullPage?: boolean;
+  /** Local file paths for set-file-input action */
+  files?: string[];
+  /** CSS selector for file input element (set-file-input action) */
+  selector?: string;
 }
 
 export interface DaemonResult {