@kosuke-ai/cli 6.9.0 → 6.10.0

package/dist/generated/commands/integrations/execute.js

@@ -5,7 +5,7 @@ export const operation = {
         "integrations",
         "execute"
     ],
-    "summary": "Run one integration tool. An agent runs it for its own workspace, or on the member’s personal connection when that member started the turn. With an API key, name a workspace you belong to: the call runs only on your own personal connections, and one on a workspace connection is refused. The answer names the connection it ran on, or lists the connections to choose from when the call needs one. A tool failure answers 200 with isError true. A Connector Token or a browser session is refused.",
+    "summary": "Run one integration tool. An agent runs it for its own workspace, or on the member’s personal connection when that member started the turn; the Slack Bot’s agent runs only the workspace’s. With an API key, name a workspace you belong to: the call runs only on your own personal connections, and one on a workspace connection is refused. The answer names the connection it ran on, or lists the connections to choose from when the call needs one. A tool failure answers 200 with isError true. A Connector Token or a browser session is refused.",
     "pathParams": [],
     "query": [
         {
@@ -46,7 +46,7 @@ export const operation = {
     "attachments": false,
     "anonymous": false,
     "sandboxToken": true,
-    "orchestratorToken": false,
+    "orchestratorToken": true,
     "cronToken": true,
     "leadToken": true
 };

package/dist/generated/commands/integrations/tools.js

@@ -5,7 +5,7 @@ export const operation = {
         "integrations",
         "tools"
     ],
-    "summary": "List the integration tools you can run now, with the connections that run them. An agent reads its own workspace. With an API key, name a workspace you belong to: it shows that workspace’s connections and your own personal ones. A Connector Token or a browser session is refused.",
+    "summary": "List the integration tools you can run now, with the connections that run them. An agent reads its own workspace; the Slack Bot’s agent sees the workspace’s connections only. With an API key, name a workspace you belong to: it shows that workspace’s connections and your own personal ones. A Connector Token or a browser session is refused.",
     "pathParams": [],
     "query": [
         {
@@ -67,7 +67,7 @@ export const operation = {
     "attachments": false,
     "anonymous": false,
     "sandboxToken": true,
-    "orchestratorToken": false,
+    "orchestratorToken": true,
     "cronToken": true,
     "leadToken": true
 };

package/dist/program.js

@@ -56,11 +56,8 @@ export function createProgram(options = {}) {
     // member's own key and their Lead may mark Activity seen, so the others
     // read it with `--peek`.
     attachAgentCommands(program, lazy, options.agent);
-    // Beside the generated `integrations tools` and `execute`, which stay raw passthroughs. The
-    // orchestrator token reaches neither: Slack triage has no integration tools.
-    if (narrowedTo !== 'orchestratorToken') {
-        attachIntegrationsCommands(program, lazy, options.integrations);
-    }
+    // Beside the generated `integrations tools` and `execute`, which stay raw passthroughs.
+    attachIntegrationsCommands(program, lazy, options.integrations);
     // The job stream admits a member's API key only; it closes 4401 on every narrower token.
     if (narrowedTo === null)
         attachWatchCommand(program, lazy, options.watch);

package/dist/runtime/credentials.js

@@ -37,12 +37,10 @@ const LEAD_TOKEN_PREFIX = 'kosuke_lead_';
 export function isLeadToken(token) {
     return token?.startsWith(LEAD_TOKEN_PREFIX) ?? false;
 }
-/**
- * A credential that decides its own workspace: a sandbox, cron or Lead token.
- * The orchestrator token is left out because it reaches no integration tools.
- */
+/** A credential that decides its own workspace: any of the four agent tokens. */
 export function isTurnToken(token) {
     return (isSandboxAgentToken(token ?? undefined) ||
+        isOrchestratorToken(token ?? undefined) ||
         isCronToken(token ?? undefined) ||
         isLeadToken(token ?? undefined));
 }

package/openapi.json

@@ -144,10 +144,11 @@
     "/api/agent-integrations/execute": {
       "post": {
         "operationId": "integrationsExecute",
-        "summary": "Run one integration tool. An agent runs it for its own workspace, or on the member’s personal connection when that member started the turn. With an API key, name a workspace you belong to: the call runs only on your own personal connections, and one on a workspace connection is refused. The answer names the connection it ran on, or lists the connections to choose from when the call needs one. A tool failure answers 200 with isError true. A Connector Token or a browser session is refused.",
+        "summary": "Run one integration tool. An agent runs it for its own workspace, or on the member’s personal connection when that member started the turn; the Slack Bot’s agent runs only the workspace’s. With an API key, name a workspace you belong to: the call runs only on your own personal connections, and one on a workspace connection is refused. The answer names the connection it ran on, or lists the connections to choose from when the call needs one. A tool failure answers 200 with isError true. A Connector Token or a browser session is refused.",
         "tags": ["integrations"],
         "x-kosuke-command": ["integrations", "execute"],
         "x-kosuke-sandbox-token": true,
+        "x-kosuke-orchestrator-token": true,
         "x-kosuke-cron-token": true,
         "x-kosuke-lead-token": true,
         "parameters": [
@@ -235,10 +236,11 @@
     "/api/agent-integrations/tools": {
       "get": {
         "operationId": "integrationsTools",
-        "summary": "List the integration tools you can run now, with the connections that run them. An agent reads its own workspace. With an API key, name a workspace you belong to: it shows that workspace’s connections and your own personal ones. A Connector Token or a browser session is refused.",
+        "summary": "List the integration tools you can run now, with the connections that run them. An agent reads its own workspace; the Slack Bot’s agent sees the workspace’s connections only. With an API key, name a workspace you belong to: it shows that workspace’s connections and your own personal ones. A Connector Token or a browser session is refused.",
         "tags": ["integrations"],
         "x-kosuke-command": ["integrations", "tools"],
         "x-kosuke-sandbox-token": true,
+        "x-kosuke-orchestrator-token": true,
         "x-kosuke-cron-token": true,
         "x-kosuke-lead-token": true,
         "parameters": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kosuke-ai/cli",
-  "version": "6.9.0",
+  "version": "6.10.0",
   "description": "Kosuke platform CLI. The client customers install to drive app.kosuke.ai from their own machine.",
   "license": "MIT",
   "repository": {