Bonnie gives an agent real hands on your own computer — terminals, files, processes, the screen — with a gate on anything irreversible that the agent cannot open. Nothing is installed to read this page.
Didn't draw? Ask ChatGPT: render the handshake visual
Add the endpoint once. Bonnie is then available in any conversation on this computer.
setup: onceOpen the paired URL on your phone and operate the machine directly. No agent on this path — you are the one driving.
setup: nonePrompt the ChatGPT session on your desktop from your phone. Needs Chrome started with a debugger port, because injecting a turn requires a genuinely trusted click.
setup: advancedThis page has no backend. It talks to a machine you own, over a direct peer connection — nothing of yours passes through a server here.
git clone https://github.com/meshbergio/bonnie cd bonnie && ./install.sh bonnie pair # prints a URL and a QR code — open it here
Runs on your own machine. Clearing site data unpairs it; there is no account to delete.
No staged changes. Ghost edits appear here before anything touches disk.
Opening this view registers its tools; closing removes them.
Granting registers these tools. Until you click, they do not exist in the agent's catalogue — there is no name for it to call.
Grant these once and stop being asked. It holds until you turn it off — no expiry, across reloads. The agent can never turn this on; only you can, and turning it off is one tap from anywhere.