bsk CLI 0.4.2

BrowserSkill CLI 0.4.2 adds MCP access and more reliable updates, cancellation, and action outcomes. Use it with extension 0.4.2 for the browser-side fixes below.

Added

• MCP server: bsk mcp exposes BrowserSkill over stdio through the existing daemon and extension. bsk install-skill --mcp configures Codex, Claude Code, or Cursor. The initial adapter covers its tool schemas; file transfers, recording, and full-page screenshot export remain available through the CLI or DSH plugin.
• Controller identity: session startup accepts an agent name, project, and color, shown in the extension's shared-control overlay and session metadata.
• Date and time inputs: fill supports date, time, datetime-local, month, and week, with format and min/max validation.

Changed

• CLI and daemon updates prefer the official website's domestic download source and fall back to GitHub on download or verification failures. Archive fallback stays on the selected version and retains SHA256 verification. Explicit manifest overrides continue to use only the configured source.
• Borrowed tabs return relative to their original neighbors, with improved pinned-tab and group restoration. Eligible requests can automatically borrow a tab when borrow confirmation is disabled.
• Shared control now waits for two seconds of quiet after the person's last completed action, up from 650 ms.

Fixed

• Timed-out page actions cancel and await bounded cleanup. Errors preserve execution phase, effect state, and operation identity. Missing receipts remain explicitly uncertain; CLI and MCP guidance asks callers to inspect the application result before choosing another action.
• Cancellation arriving before daemon RPC registration is retried within a shared two-second confirmation/response budget, reducing screenshots that keep a session busy after the caller stops.
• Windows remote pairing, credential rotation, and revocation retry authorization snapshot replacement when concurrent readers cause Access is denied.
• Shared-control sync recovers missing frame collectors, reports failed child frames safely, preserves human holds, and retries transient coverage failures within its deadline.
• Recovery guidance identifies the sync reply's top-level observation_id. Borrow guidance explains closed tabs and unavailable confirmation UI.
• DSH fill/select values beginning with - are passed as values instead of being parsed as CLI options.

Coordinated extension fixes

• Restore legacy mousewheel handlers, including Bilibili player volume controls, even when no BrowserSkill task is active.
• Avoid repeated page reloads caused by enabling console capture before it is requested.
• Prevent truncated emoji text from invalidating an entire daemon reply and leaving commands waiting until timeout.
• Let automated clicks reach page controls beneath the shared-control toolbar; preserve successful Enter-triggered navigation receipts.
• Keep scrolling, ineffective keys, and focus alone from unnecessarily taking control; release completed/cancelled gestures and composition holds correctly.
• Preserve main-document target actions across unrelated iframe refreshes, recheck selectors after node replacement, and associate repeated action labels with their own DOM containers.
• Verify actual window and viewport sizes after resizing, and refresh shared-control observations.
• Extend sensitive-field redaction across shared-control state, expectation failures, extraction, recording, and saved HTML debug evidence; recognize compound autocomplete tokens and keep recognized password fields masked after reveal. Redact vendor credential headers in debug evidence.

Upgrade

1. Finish active browser tasks and run bsk update --yes. Restart foreground or supervisor-managed daemons in their owning terminal or process manager; after replacing the executable with an installer, run bsk daemon restart.
2. Install extension 0.4.2 and update the DSH plugin to 0.4.2. Store review may delay availability.
3. Reload the browser-skill instructions. DSH users should restart the profile and invoke /browser-skill again. Restart MCP clients after adding their configuration.
4. Check bsk --version, bsk status, and bsk doctor.

What's Changed

• fix(fill): support date, time, datetime-local, month, and week inputs by @Li-john1021 in #443

• fix(cooperation): recover frame coverage during synchronization by @iuyo5678 in #549

• fix(cooperation): name the top-level observation_id in strict-observation recovery by @LilMGenius in #547

• docs(skill): explain closed and unconfirmable tab borrows by @anhtahaylove in #526

• fix: verify window resize and refresh observations by @NianJiuZst in #559

• fix(extension): invalidate cooperation only on root-frame navigation by @gadzan in #561

• fix: keep Runtime off until console capture is requested by @yaou-li in #558

• fix(dsh-plugin): attach fill/select values to --value by @columbia11 in #570

• fix(extension): redact exact vendor credential headers in debug evidence by @columbia11 in #571

• feat(tabs): anchor borrowed tab return position and support auto-borrow (#331) by @NianJiuZst in #582

• fix(daemon): retry Windows authorization snapshot replacement by @columbia11 in #583

• Add Chinese changelog and enforce bilingual updates by @NianJiuZst in #585

• feat: display session controller identity in browser overlays by @wzxsdf in #584

• fix(extension): keep code and card values out of agent-visible state by @columbia11 in #579

• fix(cooperation): preserve main-page control across iframe refreshes by @NianJiuZst in #599

• fix(cli): prefer domestic update downloads with GitHub fallback by @NianJiuZst in #601

• fix(extension): yield shared control on meaningful user input by @NianJiuZst in #600

• fix(extension): never send lone surrogates to the daemon by @columbia11 in #569

• fix(extension): listen for wheel only while cooperation is collecting by @columbia11 in #568

• fix(extension): match sensitive autocomplete values token by token by @TheeCoderAhmed in #566

• feat: expose BrowserSkill through an MCP server by @NianJiuZst in #590

• fix(cli): handle cancellation before RPC registration by @iuyo5678 in #419

• fix(waits): recheck selectors when matched nodes are replaced by @u7-u7 in #553

• fix: unblock shared-control input and preserve action outcomes by @NianJiuZst in #608

• chore(release): prepare 0.4.2 by @NianJiuZst in #609

Full Changelog: cli-v0.4.1...cli-v0.4.2