@kosuke-ai/cli 6.4.0 → 6.5.0

package/dist/agent/summary.js

@@ -85,6 +85,23 @@ const obj = (value) => value && typeof value === 'object' && !Array.isArray(valu
 function dataOf(result) {
     return result.response.ok ? obj(obj(result.data)?.data) : null;
 }
+/**
+ * A DeepSeek API key's balance, which it reports instead of windows: `balance 12.40 USD`,
+ * each currency apart, or `balance empty` once it cannot pay for a request.
+ */
+function balanceWords(usage) {
+    const balance = obj(usage?.balance);
+    if (!balance)
+        return null;
+    if (balance.available === false)
+        return 'balance empty';
+    const amounts = (Array.isArray(balance.amounts) ? balance.amounts : []).flatMap((amount) => {
+        const total = str(obj(amount)?.total);
+        const currency = str(obj(amount)?.currency);
+        return total && currency ? [`${total} ${currency}`] : [];
+    });
+    return amounts.length ? `balance ${amounts.join(', ')}` : null;
+}
 /** `session 42%, week 61%` or `session 42%, month 12%`, with only the windows the provider reported. */
 function usageWords(usage) {
     const windows = ['session', 'week', 'month'].flatMap((name) => {
@@ -93,19 +110,23 @@ function usageWords(usage) {
             ? [`${name} ${Math.round(utilization)}% used`]
             : [];
     });
-    return windows.length ? windows.join(', ') : null;
+    const balance = balanceWords(usage);
+    const words = balance ? [...windows, balance] : windows;
+    return words.length ? words.join(', ') : null;
 }
 const SUBSCRIPTIONS = [
     { key: 'anthropic', label: 'Your Claude subscription', usage: 'claude_code' },
     { key: 'openai', label: 'Your Codex subscription', usage: 'codex' },
     { key: 'zai', label: 'Your GLM Coding Plan', usage: 'coding_plan' },
     { key: 'moonshot', label: 'Your Kimi Code', usage: 'kimi_code' },
+    { key: 'deepseek', label: 'Your DeepSeek API key', usage: 'deepseek_api' },
 ];
 const WORKSPACE_PROVIDERS = [
     { key: 'anthropic', name: 'Anthropic' },
     { key: 'openai', name: 'OpenAI' },
     { key: 'zai', name: 'Z.ai' },
     { key: 'moonshot', name: 'Moonshot AI' },
+    { key: 'deepseek', name: 'DeepSeek' },
 ];
 const AUTH_METHOD_NAMES = {
     api_key: 'API key',
@@ -114,8 +135,15 @@ const AUTH_METHOD_NAMES = {
     codex: 'Codex login',
     coding_plan: 'GLM Coding Plan',
     kimi_code: 'Kimi Code',
+    deepseek_api: 'DeepSeek API',
 };
-const USAGE_PLANS = ['claude_code', 'codex', 'coding_plan', 'kimi_code'];
+const USAGE_PLANS = [
+    'claude_code',
+    'codex',
+    'coding_plan',
+    'kimi_code',
+    'deepseek_api',
+];
 function subscriptionEntries(subscriptions) {
     return SUBSCRIPTIONS.flatMap(({ key, label, usage }) => {
         const row = obj(subscriptions[key]);
@@ -181,6 +209,7 @@ async function fetchProviders(client, workspace, signal) {
             codex: '/api/organizations/{workspaceId}/ai-provider/codex-usage',
             coding_plan: '/api/organizations/{workspaceId}/ai-provider/coding-plan-usage',
             kimi_code: '/api/organizations/{workspaceId}/ai-provider/kimi-code-usage',
+            deepseek_api: '/api/organizations/{workspaceId}/ai-provider/deepseek-usage',
         };
         const shared = (settings ? workspaceEntries(settings) : []).map((entry) => ({
             entry,

package/dist/generated/commands/index.js

@@ -109,69 +109,72 @@ import { operation as o107 } from './sessions/steer.js';
 import { operation as o108 } from './sessions/title-generate.js';
 import { operation as o109 } from './sessions/update.js';
 import { operation as o110 } from './user/auth-token-revoke.js';
-import { operation as o111 } from './user/plugins-list.js';
-import { operation as o112 } from './user/plugins-update.js';
-import { operation as o113 } from './user/profile.js';
-import { operation as o114 } from './user/push-devices-register.js';
-import { operation as o115 } from './user/push-devices-remove.js';
-import { operation as o116 } from './user/skills-create.js';
-import { operation as o117 } from './user/skills-delete.js';
-import { operation as o118 } from './user/skills-get.js';
-import { operation as o119 } from './user/skills-list.js';
-import { operation as o120 } from './user/skills-update.js';
-import { operation as o121 } from './user/subscriptions-delete.js';
-import { operation as o122 } from './user/subscriptions-get.js';
-import { operation as o123 } from './user/subscriptions-login-claude-complete.js';
-import { operation as o124 } from './user/subscriptions-login-claude-start.js';
-import { operation as o125 } from './user/subscriptions-login-codex-complete.js';
-import { operation as o126 } from './user/subscriptions-login-codex-start.js';
-import { operation as o127 } from './user/subscriptions-logins-delete.js';
-import { operation as o128 } from './user/subscriptions-logins-reorder.js';
-import { operation as o129 } from './user/subscriptions-set-default-model.js';
-import { operation as o130 } from './user/subscriptions-set-key.js';
-import { operation as o131 } from './user/subscriptions-usage.js';
-import { operation as o132 } from './workspaces/access-status.js';
-import { operation as o133 } from './workspaces/ai-provider-get.js';
-import { operation as o134 } from './workspaces/ai-provider-logins-reorder.js';
-import { operation as o135 } from './workspaces/ai-provider-remove.js';
-import { operation as o136 } from './workspaces/ai-provider-set.js';
-import { operation as o137 } from './workspaces/ai-provider-usage-claude.js';
-import { operation as o138 } from './workspaces/ai-provider-usage-codex.js';
-import { operation as o139 } from './workspaces/ai-provider-usage-coding-plan.js';
-import { operation as o140 } from './workspaces/ai-provider-usage-kimi-code.js';
-import { operation as o141 } from './workspaces/artifacts.js';
-import { operation as o142 } from './workspaces/credits.js';
-import { operation as o143 } from './workspaces/get.js';
-import { operation as o144 } from './workspaces/getting-started-get.js';
-import { operation as o145 } from './workspaces/getting-started-update.js';
-import { operation as o146 } from './workspaces/integrations-get.js';
-import { operation as o147 } from './workspaces/integrations-list.js';
-import { operation as o148 } from './workspaces/integrations-remove.js';
-import { operation as o149 } from './workspaces/integrations-slack-get.js';
-import { operation as o150 } from './workspaces/lead-cards.js';
-import { operation as o151 } from './workspaces/lead-merge.js';
-import { operation as o152 } from './workspaces/lead-notifications-open.js';
-import { operation as o153 } from './workspaces/lead-proposals-create.js';
-import { operation as o154 } from './workspaces/lead-review-request.js';
-import { operation as o155 } from './workspaces/lead-session-send.js';
-import { operation as o156 } from './workspaces/lead-triage.js';
-import { operation as o157 } from './workspaces/list.js';
-import { operation as o158 } from './workspaces/members.js';
-import { operation as o159 } from './workspaces/plugins-list.js';
-import { operation as o160 } from './workspaces/plugins-update.js';
-import { operation as o161 } from './workspaces/provider-login-claude-complete.js';
-import { operation as o162 } from './workspaces/provider-login-claude-start.js';
-import { operation as o163 } from './workspaces/provider-login-codex-complete.js';
-import { operation as o164 } from './workspaces/provider-login-codex-start.js';
-import { operation as o165 } from './workspaces/sandbox-limit.js';
-import { operation as o166 } from './workspaces/skills-create.js';
-import { operation as o167 } from './workspaces/skills-delete.js';
-import { operation as o168 } from './workspaces/skills-get.js';
-import { operation as o169 } from './workspaces/skills-list.js';
-import { operation as o170 } from './workspaces/skills-update.js';
-import { operation as o171 } from './workspaces/stop-sandboxes.js';
-import { operation as o172 } from './workspaces/timezone-set.js';
-import { operation as o173 } from './workspaces/usage.js';
+import { operation as o111 } from './user/integrations-list.js';
+import { operation as o112 } from './user/integrations-remove.js';
+import { operation as o113 } from './user/plugins-list.js';
+import { operation as o114 } from './user/plugins-update.js';
+import { operation as o115 } from './user/profile.js';
+import { operation as o116 } from './user/push-devices-register.js';
+import { operation as o117 } from './user/push-devices-remove.js';
+import { operation as o118 } from './user/skills-create.js';
+import { operation as o119 } from './user/skills-delete.js';
+import { operation as o120 } from './user/skills-get.js';
+import { operation as o121 } from './user/skills-list.js';
+import { operation as o122 } from './user/skills-update.js';
+import { operation as o123 } from './user/subscriptions-delete.js';
+import { operation as o124 } from './user/subscriptions-get.js';
+import { operation as o125 } from './user/subscriptions-login-claude-complete.js';
+import { operation as o126 } from './user/subscriptions-login-claude-start.js';
+import { operation as o127 } from './user/subscriptions-login-codex-complete.js';
+import { operation as o128 } from './user/subscriptions-login-codex-start.js';
+import { operation as o129 } from './user/subscriptions-logins-delete.js';
+import { operation as o130 } from './user/subscriptions-logins-reorder.js';
+import { operation as o131 } from './user/subscriptions-set-default-model.js';
+import { operation as o132 } from './user/subscriptions-set-key.js';
+import { operation as o133 } from './user/subscriptions-usage.js';
+import { operation as o134 } from './workspaces/access-status.js';
+import { operation as o135 } from './workspaces/ai-provider-get.js';
+import { operation as o136 } from './workspaces/ai-provider-logins-reorder.js';
+import { operation as o137 } from './workspaces/ai-provider-remove.js';
+import { operation as o138 } from './workspaces/ai-provider-set.js';
+import { operation as o139 } from './workspaces/ai-provider-usage-claude.js';
+import { operation as o140 } from './workspaces/ai-provider-usage-codex.js';
+import { operation as o141 } from './workspaces/ai-provider-usage-coding-plan.js';
+import { operation as o142 } from './workspaces/ai-provider-usage-deepseek.js';
+import { operation as o143 } from './workspaces/ai-provider-usage-kimi-code.js';
+import { operation as o144 } from './workspaces/artifacts.js';
+import { operation as o145 } from './workspaces/credits.js';
+import { operation as o146 } from './workspaces/get.js';
+import { operation as o147 } from './workspaces/getting-started-get.js';
+import { operation as o148 } from './workspaces/getting-started-update.js';
+import { operation as o149 } from './workspaces/integrations-get.js';
+import { operation as o150 } from './workspaces/integrations-list.js';
+import { operation as o151 } from './workspaces/integrations-remove.js';
+import { operation as o152 } from './workspaces/integrations-slack-get.js';
+import { operation as o153 } from './workspaces/lead-cards.js';
+import { operation as o154 } from './workspaces/lead-merge.js';
+import { operation as o155 } from './workspaces/lead-notifications-open.js';
+import { operation as o156 } from './workspaces/lead-proposals-create.js';
+import { operation as o157 } from './workspaces/lead-review-request.js';
+import { operation as o158 } from './workspaces/lead-session-send.js';
+import { operation as o159 } from './workspaces/lead-triage.js';
+import { operation as o160 } from './workspaces/list.js';
+import { operation as o161 } from './workspaces/members.js';
+import { operation as o162 } from './workspaces/plugins-list.js';
+import { operation as o163 } from './workspaces/plugins-update.js';
+import { operation as o164 } from './workspaces/provider-login-claude-complete.js';
+import { operation as o165 } from './workspaces/provider-login-claude-start.js';
+import { operation as o166 } from './workspaces/provider-login-codex-complete.js';
+import { operation as o167 } from './workspaces/provider-login-codex-start.js';
+import { operation as o168 } from './workspaces/sandbox-limit.js';
+import { operation as o169 } from './workspaces/skills-create.js';
+import { operation as o170 } from './workspaces/skills-delete.js';
+import { operation as o171 } from './workspaces/skills-get.js';
+import { operation as o172 } from './workspaces/skills-list.js';
+import { operation as o173 } from './workspaces/skills-update.js';
+import { operation as o174 } from './workspaces/stop-sandboxes.js';
+import { operation as o175 } from './workspaces/timezone-set.js';
+import { operation as o176 } from './workspaces/usage.js';
 export const operations = [
     o0,
     o1,
@@ -347,4 +350,7 @@ export const operations = [
     o171,
     o172,
     o173,
+    o174,
+    o175,
+    o176,
 ];

package/dist/generated/commands/user/integrations-list.js

@@ -0,0 +1,20 @@
+export const operation = {
+    "method": "get",
+    "path": "/api/user/integrations",
+    "command": [
+        "user",
+        "integrations",
+        "list"
+    ],
+    "summary": "List the integrations you can connect for yourself, such as Gmail or Notion, with your own connections to each: label, status and whether a Reconnect is needed. They belong to you and follow you into every workspace you belong to. Never a credential or a connected-account identifier, and only a signed-in member or their own API key can read them: an agent token, a workspace admin and every other member cannot.",
+    "pathParams": [],
+    "query": [],
+    "body": null,
+    "multipart": null,
+    "attachments": false,
+    "anonymous": false,
+    "sandboxToken": false,
+    "orchestratorToken": false,
+    "cronToken": false,
+    "leadToken": false
+};

package/dist/generated/commands/user/integrations-remove.js

@@ -0,0 +1,23 @@
+export const operation = {
+    "method": "delete",
+    "path": "/api/user/integrations/{toolkit}/connections/{connectionId}",
+    "command": [
+        "user",
+        "integrations",
+        "remove"
+    ],
+    "summary": "Disconnect one of your own integration connections by toolkit slug and connection id, such as gmail and the id `user integrations list` returns: agents lose it at once, then Kosuke deletes the stored authorization, retrying in the background if needed. Revoking the authorization at the toolkit itself is not part of this. A connection that is not yours, or is already gone, answers 404.",
+    "pathParams": [
+        "toolkit",
+        "connectionId"
+    ],
+    "query": [],
+    "body": null,
+    "multipart": null,
+    "attachments": false,
+    "anonymous": false,
+    "sandboxToken": false,
+    "orchestratorToken": false,
+    "cronToken": false,
+    "leadToken": false
+};

package/dist/generated/commands/user/subscriptions-delete.js

@@ -6,7 +6,7 @@ export const operation = {
         "subscriptions",
         "delete"
     ],
-    "summary": "Disconnect every login of your subscription for one provider, anthropic, openai, zai or moonshot, and release the sandboxes running on it. Answers 204.",
+    "summary": "Disconnect every login of your subscription for one provider, anthropic, openai, zai, moonshot or deepseek, and release the sandboxes running on it. Answers 204.",
     "pathParams": [
         "provider"
     ],

package/dist/generated/commands/user/subscriptions-get.js

@@ -6,7 +6,7 @@ export const operation = {
         "subscriptions",
         "get"
     ],
-    "summary": "Read your Claude, Codex, GLM Coding Plan and Kimi Code subscriptions and your default model. Per provider: the login in use (connected, needsReauth, accountEmail, and maskedApiKey for a pasted plan key) and every login in the order it is used (logins).",
+    "summary": "Read your Claude, Codex, GLM Coding Plan, Kimi Code and DeepSeek API subscriptions and your default model. Per provider: the login in use (connected, needsReauth, accountEmail, and maskedApiKey for a pasted key) and every login in the order it is used (logins).",
     "pathParams": [],
     "query": [],
     "body": null,

package/dist/generated/commands/user/subscriptions-set-key.js

@@ -6,7 +6,7 @@ export const operation = {
         "subscriptions",
         "set-key"
     ],
-    "summary": "Add a GLM Coding Plan (zai) or Kimi Code (moonshot) key to your subscriptions: Claude and Codex connect by signing in. With loginId it replaces that key instead. The key is tested with one call before it is kept; 409 when it is already connected or you hold five.",
+    "summary": "Add a GLM Coding Plan (zai), Kimi Code (moonshot) or DeepSeek API (deepseek) key to your subscriptions: Claude and Codex connect by signing in. With loginId it replaces that key instead. The key is tested with one call before it is kept, and a DeepSeek key with an empty balance still passes; 409 when it is already connected or you hold five.",
     "pathParams": [
         "provider"
     ],

package/dist/generated/commands/user/subscriptions-usage.js

@@ -6,7 +6,7 @@ export const operation = {
         "subscriptions",
         "usage"
     ],
-    "summary": "Read the session and weekly utilization of your Claude (claude_code, the default), Codex, GLM Coding Plan (coding_plan) or Kimi Code (kimi_code) subscription: of the login in use, or of the one loginId names. Kimi Code reports a monthly window instead of a weekly one. 400 when it is not connected or needs reconnecting.",
+    "summary": "Read the session and weekly utilization of your Claude (claude_code, the default), Codex, GLM Coding Plan (coding_plan) or Kimi Code (kimi_code) subscription, or the balance of your DeepSeek API (deepseek_api) key: of the login in use, or of the one loginId names. Kimi Code reports a monthly window instead of a weekly one; DeepSeek reports no windows, only a balance per currency. 400 when it is not connected or needs reconnecting.",
     "pathParams": [],
     "query": [
         {
@@ -18,7 +18,8 @@ export const operation = {
                 "claude_code",
                 "codex",
                 "coding_plan",
-                "kimi_code"
+                "kimi_code",
+                "deepseek_api"
             ]
         },
         {

package/dist/generated/commands/workspaces/ai-provider-remove.js

@@ -20,7 +20,8 @@ export const operation = {
                 "anthropic",
                 "openai",
                 "zai",
-                "moonshot"
+                "moonshot",
+                "deepseek"
             ]
         },
         {
@@ -28,14 +29,15 @@ export const operation = {
             "flag": "auth-method",
             "kind": "string",
             "required": true,
-            "description": "Must belong to the provider: anthropic takes api_key, aws_bedrock or claude_code, openai api_key or codex, zai coding_plan, moonshot kimi_code.",
+            "description": "Must belong to the provider: anthropic takes api_key, aws_bedrock or claude_code, openai api_key or codex, zai coding_plan, moonshot kimi_code, deepseek deepseek_api.",
             "choices": [
                 "api_key",
                 "aws_bedrock",
                 "claude_code",
                 "codex",
                 "coding_plan",
-                "kimi_code"
+                "kimi_code",
+                "deepseek_api"
             ]
         },
         {

package/dist/generated/commands/workspaces/ai-provider-usage-deepseek.js

@@ -0,0 +1,23 @@
+export const operation = {
+    "method": "get",
+    "path": "/api/organizations/{workspaceId}/ai-provider/deepseek-usage",
+    "command": [
+        "workspaces",
+        "ai-provider",
+        "usage",
+        "deepseek"
+    ],
+    "summary": "Read the balance of the workspace's DeepSeek API key, one amount per currency, in place of usage windows. 400 when the workspace holds no DeepSeek API key.",
+    "pathParams": [
+        "workspaceId"
+    ],
+    "query": [],
+    "body": null,
+    "multipart": null,
+    "attachments": false,
+    "anonymous": false,
+    "sandboxToken": true,
+    "orchestratorToken": true,
+    "cronToken": true,
+    "leadToken": true
+};

package/dist/generated/commands/workspaces/integrations-get.js

@@ -6,7 +6,7 @@ export const operation = {
         "integrations",
         "get"
     ],
-    "summary": "Read one workspace integration by toolkit slug, such as sentry: status, the tenant it is confined to, whether agents may make changes, requested scopes, who authorized it and whether remote cleanup is pending. Never a credential or a connected-account identifier. A toolkit the workspace never connected and this deployment does not offer is a 404.",
+    "summary": "Read one workspace integration by toolkit slug, such as sentry: status, the tenant it is confined to, requested scopes, who authorized it, whether remote cleanup is pending and each of its connections. Never a credential or a connected-account identifier. A toolkit the workspace never connected and this deployment does not offer is a 404.",
     "pathParams": [
         "workspaceId",
         "toolkit"

package/dist/generated/commands/workspaces/integrations-slack-get.js

@@ -1,13 +1,13 @@
 export const operation = {
     "method": "get",
-    "path": "/api/organizations/{workspaceId}/integrations/slack",
+    "path": "/api/organizations/{workspaceId}/integrations/bots/slack",
     "command": [
         "workspaces",
         "integrations",
         "slack",
         "get"
     ],
-    "summary": "Read the workspace Slack integration: the connected Slack workspace, who authorized it and when. Never the bot token.",
+    "summary": "Read the workspace Slack Bot: the connected Slack workspace, who installed it and when. Never the bot token.",
     "pathParams": [
         "workspaceId"
     ],

package/openapi.json

@@ -905,6 +905,20 @@
                       }
                     },
                     "required": ["operation"]
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "operation": {
+                        "type": "string",
+                        "const": "deepseek_deepseek_api"
+                      },
+                      "deepseekApiKey": {
+                        "type": "string",
+                        "minLength": 1
+                      }
+                    },
+                    "required": ["operation"]
                   }
                 ]
               }
@@ -965,14 +979,14 @@
             "required": true,
             "schema": {
               "type": "string",
-              "enum": ["anthropic", "openai", "zai", "moonshot"]
+              "enum": ["anthropic", "openai", "zai", "moonshot", "deepseek"]
             }
           },
           {
             "name": "authMethod",
             "in": "query",
             "required": true,
-            "description": "Must belong to the provider: anthropic takes api_key, aws_bedrock or claude_code, openai api_key or codex, zai coding_plan, moonshot kimi_code.",
+            "description": "Must belong to the provider: anthropic takes api_key, aws_bedrock or claude_code, openai api_key or codex, zai coding_plan, moonshot kimi_code, deepseek deepseek_api.",
             "schema": {
               "type": "string",
               "enum": [
@@ -981,9 +995,10 @@
                 "claude_code",
                 "codex",
                 "coding_plan",
-                "kimi_code"
+                "kimi_code",
+                "deepseek_api"
               ],
-              "description": "Must belong to the provider: anthropic takes api_key, aws_bedrock or claude_code, openai api_key or codex, zai coding_plan, moonshot kimi_code."
+              "description": "Must belong to the provider: anthropic takes api_key, aws_bedrock or claude_code, openai api_key or codex, zai coding_plan, moonshot kimi_code, deepseek deepseek_api."
             }
           },
           {
@@ -1222,6 +1237,61 @@
         }
       }
     },
+    "/api/organizations/{workspaceId}/ai-provider/deepseek-usage": {
+      "get": {
+        "operationId": "workspacesAiProviderUsageDeepseek",
+        "summary": "Read the balance of the workspace's DeepSeek API key, one amount per currency, in place of usage windows. 400 when the workspace holds no DeepSeek API key.",
+        "tags": ["workspaces"],
+        "x-kosuke-command": ["workspaces", "ai-provider", "usage", "deepseek"],
+        "x-kosuke-sandbox-token": true,
+        "x-kosuke-orchestrator-token": true,
+        "x-kosuke-cron-token": true,
+        "x-kosuke-lead-token": true,
+        "parameters": [
+          {
+            "name": "workspaceId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "minLength": 1
+            }
+          }
+        ],
+        "responses": {
+          "2XX": {
+            "description": "Success envelope",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiSuccess"
+                }
+              }
+            }
+          },
+          "4XX": {
+            "description": "Error envelope",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "5XX": {
+            "description": "Error envelope",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
     "/api/organizations/{workspaceId}/ai-provider/kimi-code-usage": {
       "get": {
         "operationId": "workspacesAiProviderUsageKimiCode",
@@ -2979,7 +3049,7 @@
     "/api/organizations/{workspaceId}/integrations/{toolkit}": {
       "get": {
         "operationId": "workspacesIntegrationsGet",
-        "summary": "Read one workspace integration by toolkit slug, such as sentry: status, the tenant it is confined to, whether agents may make changes, requested scopes, who authorized it and whether remote cleanup is pending. Never a credential or a connected-account identifier. A toolkit the workspace never connected and this deployment does not offer is a 404.",
+        "summary": "Read one workspace integration by toolkit slug, such as sentry: status, the tenant it is confined to, requested scopes, who authorized it, whether remote cleanup is pending and each of its connections. Never a credential or a connected-account identifier. A toolkit the workspace never connected and this deployment does not offer is a 404.",
         "tags": ["workspaces"],
         "x-kosuke-command": ["workspaces", "integrations", "get"],
         "x-kosuke-sandbox-token": true,
@@ -3098,10 +3168,10 @@
         }
       }
     },
-    "/api/organizations/{workspaceId}/integrations/slack": {
+    "/api/organizations/{workspaceId}/integrations/bots/slack": {
       "get": {
         "operationId": "workspacesIntegrationsSlackGet",
-        "summary": "Read the workspace Slack integration: the connected Slack workspace, who authorized it and when. Never the bot token.",
+        "summary": "Read the workspace Slack Bot: the connected Slack workspace, who installed it and when. Never the bot token.",
         "tags": ["workspaces"],
         "x-kosuke-command": ["workspaces", "integrations", "slack", "get"],
         "x-kosuke-sandbox-token": true,
@@ -13039,6 +13109,106 @@
         }
       }
     },
+    "/api/user/integrations": {
+      "get": {
+        "operationId": "userIntegrationsList",
+        "summary": "List the integrations you can connect for yourself, such as Gmail or Notion, with your own connections to each: label, status and whether a Reconnect is needed. They belong to you and follow you into every workspace you belong to. Never a credential or a connected-account identifier, and only a signed-in member or their own API key can read them: an agent token, a workspace admin and every other member cannot.",
+        "tags": ["user"],
+        "x-kosuke-command": ["user", "integrations", "list"],
+        "responses": {
+          "2XX": {
+            "description": "Success envelope",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiSuccess"
+                }
+              }
+            }
+          },
+          "4XX": {
+            "description": "Error envelope",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "5XX": {
+            "description": "Error envelope",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/user/integrations/{toolkit}/connections/{connectionId}": {
+      "delete": {
+        "operationId": "userIntegrationsRemove",
+        "summary": "Disconnect one of your own integration connections by toolkit slug and connection id, such as gmail and the id `user integrations list` returns: agents lose it at once, then Kosuke deletes the stored authorization, retrying in the background if needed. Revoking the authorization at the toolkit itself is not part of this. A connection that is not yours, or is already gone, answers 404.",
+        "tags": ["user"],
+        "x-kosuke-command": ["user", "integrations", "remove"],
+        "parameters": [
+          {
+            "name": "toolkit",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          {
+            "name": "connectionId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "minLength": 1
+            }
+          }
+        ],
+        "responses": {
+          "2XX": {
+            "description": "Success envelope",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiSuccess"
+                }
+              }
+            }
+          },
+          "4XX": {
+            "description": "Error envelope",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "5XX": {
+            "description": "Error envelope",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
     "/api/user/plugins": {
       "get": {
         "operationId": "userPluginsList",
@@ -13524,7 +13694,7 @@
     "/api/user/subscriptions": {
       "get": {
         "operationId": "userSubscriptionsGet",
-        "summary": "Read your Claude, Codex, GLM Coding Plan and Kimi Code subscriptions and your default model. Per provider: the login in use (connected, needsReauth, accountEmail, and maskedApiKey for a pasted plan key) and every login in the order it is used (logins).",
+        "summary": "Read your Claude, Codex, GLM Coding Plan, Kimi Code and DeepSeek API subscriptions and your default model. Per provider: the login in use (connected, needsReauth, accountEmail, and maskedApiKey for a pasted key) and every login in the order it is used (logins).",
         "tags": ["user"],
         "x-kosuke-command": ["user", "subscriptions", "get"],
         "x-kosuke-sandbox-token": true,
@@ -13622,7 +13792,7 @@
     "/api/user/subscriptions/{provider}": {
       "put": {
         "operationId": "userSubscriptionsSetKey",
-        "summary": "Add a GLM Coding Plan (zai) or Kimi Code (moonshot) key to your subscriptions: Claude and Codex connect by signing in. With loginId it replaces that key instead. The key is tested with one call before it is kept; 409 when it is already connected or you hold five.",
+        "summary": "Add a GLM Coding Plan (zai), Kimi Code (moonshot) or DeepSeek API (deepseek) key to your subscriptions: Claude and Codex connect by signing in. With loginId it replaces that key instead. The key is tested with one call before it is kept, and a DeepSeek key with an empty balance still passes; 409 when it is already connected or you hold five.",
         "tags": ["user"],
         "x-kosuke-command": ["user", "subscriptions", "set-key"],
         "parameters": [
@@ -13632,7 +13802,7 @@
             "required": true,
             "schema": {
               "type": "string",
-              "enum": ["anthropic", "openai", "zai", "moonshot"]
+              "enum": ["anthropic", "openai", "zai", "moonshot", "deepseek"]
             }
           }
         ],
@@ -13694,7 +13864,7 @@
       },
       "delete": {
         "operationId": "userSubscriptionsDelete",
-        "summary": "Disconnect every login of your subscription for one provider, anthropic, openai, zai or moonshot, and release the sandboxes running on it. Answers 204.",
+        "summary": "Disconnect every login of your subscription for one provider, anthropic, openai, zai, moonshot or deepseek, and release the sandboxes running on it. Answers 204.",
         "tags": ["user"],
         "x-kosuke-command": ["user", "subscriptions", "delete"],
         "parameters": [
@@ -13704,7 +13874,7 @@
             "required": true,
             "schema": {
               "type": "string",
-              "enum": ["anthropic", "openai", "zai", "moonshot"]
+              "enum": ["anthropic", "openai", "zai", "moonshot", "deepseek"]
             }
           }
         ],
@@ -13755,7 +13925,7 @@
             "required": true,
             "schema": {
               "type": "string",
-              "enum": ["anthropic", "openai", "zai", "moonshot"]
+              "enum": ["anthropic", "openai", "zai", "moonshot", "deepseek"]
             }
           },
           {
@@ -13816,7 +13986,7 @@
             "required": true,
             "schema": {
               "type": "string",
-              "enum": ["anthropic", "openai", "zai", "moonshot"]
+              "enum": ["anthropic", "openai", "zai", "moonshot", "deepseek"]
             }
           }
         ],
@@ -14114,7 +14284,7 @@
     "/api/user/subscriptions/usage": {
       "get": {
         "operationId": "userSubscriptionsUsage",
-        "summary": "Read the session and weekly utilization of your Claude (claude_code, the default), Codex, GLM Coding Plan (coding_plan) or Kimi Code (kimi_code) subscription: of the login in use, or of the one loginId names. Kimi Code reports a monthly window instead of a weekly one. 400 when it is not connected or needs reconnecting.",
+        "summary": "Read the session and weekly utilization of your Claude (claude_code, the default), Codex, GLM Coding Plan (coding_plan) or Kimi Code (kimi_code) subscription, or the balance of your DeepSeek API (deepseek_api) key: of the login in use, or of the one loginId names. Kimi Code reports a monthly window instead of a weekly one; DeepSeek reports no windows, only a balance per currency. 400 when it is not connected or needs reconnecting.",
         "tags": ["user"],
         "x-kosuke-command": ["user", "subscriptions", "usage"],
         "x-kosuke-sandbox-token": true,
@@ -14129,7 +14299,7 @@
             "schema": {
               "default": "claude_code",
               "type": "string",
-              "enum": ["claude_code", "codex", "coding_plan", "kimi_code"]
+              "enum": ["claude_code", "codex", "coding_plan", "kimi_code", "deepseek_api"]
             }
           },
           {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kosuke-ai/cli",
-  "version": "6.4.0",
+  "version": "6.5.0",
   "description": "Kosuke platform CLI. The client customers install to drive app.kosuke.ai from their own machine.",
   "license": "MIT",
   "repository": {