@kosuke-ai/kosuke 1.0.13 → 1.0.15

package/dist/generated/commands/integrations/uploads-create.js

@@ -0,0 +1,64 @@
+export const operation = {
+    "method": "post",
+    "path": "/api/agent-integrations/file-uploads",
+    "command": [
+        "integrations",
+        "uploads",
+        "create"
+    ],
+    "summary": "Reserve the upload of one file for an integration tool that takes files, on the connection a call would run on. The answer is a file reference and a URL: PUT the file to the URL with the headers given, then pass the reference as the file argument of that tool on that connection. `kosuke integrations call --file` does all of it, and is the command to use. A failure answers 200 with isError true, as a call does. A Connector Token or a browser session is refused.",
+    "pathParams": [],
+    "query": [
+        {
+            "name": "workspace",
+            "flag": "workspace",
+            "kind": "string",
+            "required": false,
+            "description": "The workspace the call is made in. Required with an API key, which is refused with 403 when you are not a member of it. An agent credential reaches its own workspace and refuses another."
+        }
+    ],
+    "body": {
+        "fields": [
+            {
+                "name": "name",
+                "flag": "name",
+                "kind": "string",
+                "required": true,
+                "description": "The tool the file is for, as the tools list names it."
+            },
+            {
+                "name": "account",
+                "flag": "account",
+                "kind": "string",
+                "required": false,
+                "description": "The connection the call will run on: its short id, its alias or scope:label. Needed when several can run the tool."
+            },
+            {
+                "name": "filename",
+                "flag": "filename",
+                "kind": "string",
+                "required": true,
+                "description": "The file name the vendor receives, without a directory."
+            },
+            {
+                "name": "mimetype",
+                "flag": "mimetype",
+                "kind": "string",
+                "required": true,
+                "description": "The MIME type of the file, such as video/mp4."
+            },
+            {
+                "name": "md5",
+                "flag": "md5",
+                "kind": "string",
+                "required": true,
+                "description": "The MD5 digest of the file, in lowercase hex."
+            }
+        ],
+        "required": true
+    },
+    "multipart": null,
+    "attachments": false,
+    "anonymous": false,
+    "agents": "all"
+};

package/dist/generated/commands/sensei/device-requests-list.js

@@ -6,7 +6,7 @@ export const operation = {
         "device-requests",
         "list"
     ],
-    "summary": "List the Device Requests of a Chat Session, oldest first, as you would see them on its cards: id, device, kind, owner, reason, status (pending, approved, declined, expired, withdrawn or closed), who asked and who answered, when, and canApprove, whether you may answer it. A request past its 30 minutes reads expired.",
+    "summary": "List the Device Requests of a Chat Session, oldest first, as you would see them on its cards: id, device, kind, owner, reason, status (pending, approved, declined, expired, withdrawn or closed), who asked and who answered, when, canApprove, whether you may answer it, and occupiedBy, session or sensei when someone else uses the device while it is pending. A request past its 30 minutes reads expired.",
     "pathParams": [],
     "query": [
         {

package/dist/generated/commands/sessions/create.js

@@ -78,6 +78,13 @@ export const operation = {
                 "kind": "string",
                 "required": false
             },
+            {
+                "name": "branch",
+                "flag": "branch",
+                "kind": "string",
+                "required": false,
+                "description": "An existing branch the session works on: it checks it out, pushes to it and opens its pull request from it. Not the default branch, the Target Branch, or a branch another open session works on. Absent: a new branch. Repository projects only; not with startBranch."
+            },
             {
                 "name": "reason",
                 "flag": "reason",
@@ -186,6 +193,13 @@ export const operation = {
             "kind": "string",
             "required": false
         },
+        {
+            "name": "branch",
+            "flag": "branch",
+            "kind": "string",
+            "required": false,
+            "description": "An existing branch the session works on: it checks it out, pushes to it and opens its pull request from it. Not the default branch, the Target Branch, or a branch another open session works on. Absent: a new branch. Repository projects only; not with startBranch."
+        },
         {
             "name": "reason",
             "flag": "reason",

package/dist/generated/commands/tasks/create.js

@@ -64,6 +64,13 @@ export const operation = {
                 "kind": "string",
                 "required": false
             },
+            {
+                "name": "branch",
+                "flag": "branch",
+                "kind": "string",
+                "required": false,
+                "description": "An existing branch the session works on: it checks it out, pushes to it and opens its pull request from it. Not the default branch, the Target Branch, or a branch another open session works on. Absent: a new branch. Repository projects only; not with startBranch."
+            },
             {
                 "name": "reason",
                 "flag": "reason",
@@ -194,6 +201,13 @@ export const operation = {
             "kind": "string",
             "required": false
         },
+        {
+            "name": "branch",
+            "flag": "branch",
+            "kind": "string",
+            "required": false,
+            "description": "An existing branch the session works on: it checks it out, pushes to it and opens its pull request from it. Not the default branch, the Target Branch, or a branch another open session works on. Absent: a new branch. Repository projects only; not with startBranch."
+        },
         {
             "name": "reason",
             "flag": "reason",

package/dist/integrations/file-upload.js

@@ -0,0 +1,153 @@
+import { createHash } from 'node:crypto';
+import { createReadStream } from 'node:fs';
+import { stat } from 'node:fs/promises';
+import { basename, extname } from 'node:path';
+import { Readable } from 'node:stream';
+/**
+ * `kosuke integrations call --file <argument>=<path>`: a local file for a tool's file argument.
+ * The platform reserves the upload and answers a file reference; the file goes straight to the
+ * storage URL it names, never through the platform, so a large video costs the platform nothing.
+ */
+export const FILE_UPLOAD_PATH = '/api/agent-integrations/file-uploads';
+/** The storage takes one PUT of at most 5 GiB. */
+export const MAX_FILE_BYTES = 5 * 1024 ** 3;
+const NAME = /^[A-Za-z_][A-Za-z0-9_-]{0,63}$/;
+const INDEX = /^\d{1,4}$/;
+const UNSAFE = new Set(['__proto__', 'constructor', 'prototype']);
+/** `videoFilePath=./clip.mp4`, or `attachment.0=./a.pdf` for a file inside a list or object. */
+export function parseFileArgument(raw) {
+    const split = raw.indexOf('=');
+    if (split <= 0 || split === raw.length - 1)
+        return null;
+    const at = raw.slice(0, split).split('.');
+    const path = raw.slice(split + 1);
+    if (!NAME.test(at[0]))
+        return null;
+    if (at.some((segment) => UNSAFE.has(segment) || !(NAME.test(segment) || INDEX.test(segment)))) {
+        return null;
+    }
+    return { at, path };
+}
+/** Puts `value` at `at`, making the lists and objects on the way; false when one is in the way. */
+export function setAt(args, at, value) {
+    let parent = args;
+    for (let index = 0; index < at.length; index += 1) {
+        const segment = at[index];
+        const last = index === at.length - 1;
+        const nextIsIndex = !last && INDEX.test(at[index + 1]);
+        if (Array.isArray(parent)) {
+            if (!INDEX.test(segment))
+                return false;
+            const position = Number(segment);
+            if (position > parent.length)
+                return false;
+            if (last) {
+                parent[position] = value;
+                return true;
+            }
+            parent[position] ??= nextIsIndex ? [] : {};
+            const child = parent[position];
+            if (typeof child !== 'object' || child === null)
+                return false;
+            parent = child;
+            continue;
+        }
+        if (INDEX.test(segment))
+            return false;
+        if (last) {
+            parent[segment] = value;
+            return true;
+        }
+        if (!Object.hasOwn(parent, segment))
+            parent[segment] = nextIsIndex ? [] : {};
+        const child = parent[segment];
+        if (typeof child !== 'object' || child === null)
+            return false;
+        if (nextIsIndex !== Array.isArray(child))
+            return false;
+        parent = child;
+    }
+    return false;
+}
+const MIME_TYPES = {
+    '.3gp': 'video/3gpp',
+    '.avi': 'video/x-msvideo',
+    '.flv': 'video/x-flv',
+    '.m4v': 'video/x-m4v',
+    '.mkv': 'video/x-matroska',
+    '.mov': 'video/quicktime',
+    '.mp4': 'video/mp4',
+    '.mpeg': 'video/mpeg',
+    '.mpg': 'video/mpeg',
+    '.webm': 'video/webm',
+    '.wmv': 'video/x-ms-wmv',
+    '.mp3': 'audio/mpeg',
+    '.m4a': 'audio/mp4',
+    '.wav': 'audio/wav',
+    '.ogg': 'audio/ogg',
+    '.srt': 'application/x-subrip',
+    '.vtt': 'text/vtt',
+    '.sbv': 'text/plain',
+    '.ttml': 'application/ttml+xml',
+    '.dfxp': 'application/ttml+xml',
+    '.scc': 'text/plain',
+    '.gif': 'image/gif',
+    '.jpeg': 'image/jpeg',
+    '.jpg': 'image/jpeg',
+    '.png': 'image/png',
+    '.svg': 'image/svg+xml',
+    '.webp': 'image/webp',
+    '.csv': 'text/csv',
+    '.html': 'text/html',
+    '.json': 'application/json',
+    '.md': 'text/markdown',
+    '.txt': 'text/plain',
+    '.xml': 'application/xml',
+    '.pdf': 'application/pdf',
+    '.zip': 'application/zip',
+    '.doc': 'application/msword',
+    '.docx': 'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+    '.xls': 'application/vnd.ms-excel',
+    '.xlsx': 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+    '.ppt': 'application/vnd.ms-powerpoint',
+    '.pptx': 'application/vnd.openxmlformats-officedocument.presentationml.presentation',
+};
+export function mimetypeOf(name) {
+    return MIME_TYPES[extname(name).toLowerCase()] ?? 'application/octet-stream';
+}
+/** The name the vendor receives: the base name, when the platform can take it. */
+export function uploadName(path) {
+    const name = basename(path);
+    return name.length > 0 && name.length <= 255 && !/[/\\\p{Cc}]/u.test(name) ? name : null;
+}
+export async function fileSize(path) {
+    try {
+        const info = await stat(path);
+        return info.isFile() ? info.size : null;
+    }
+    catch {
+        return null;
+    }
+}
+export async function md5Of(path) {
+    const hash = createHash('md5');
+    for await (const chunk of createReadStream(path))
+        hash.update(chunk);
+    return hash.digest('hex');
+}
+/**
+ * One PUT of the whole file. The length is stated because the storage refuses a chunked upload,
+ * and the file is streamed so a large video is never held in memory.
+ */
+export async function putFile(fetch, upload, path, size, mimetype, signal) {
+    const response = await fetch(upload.url, {
+        method: 'PUT',
+        headers: { ...upload.headers, 'content-type': mimetype, 'content-length': String(size) },
+        body: Readable.toWeb(createReadStream(path)),
+        duplex: 'half',
+        redirect: 'error',
+        signal,
+    });
+    await response.body?.cancel().catch(() => undefined);
+    return response.status;
+}

package/openapi.json

@@ -232,6 +232,107 @@
         }
       }
     },
+    "/api/agent-integrations/file-uploads": {
+      "post": {
+        "operationId": "integrationsUploadsCreate",
+        "summary": "Reserve the upload of one file for an integration tool that takes files, on the connection a call would run on. The answer is a file reference and a URL: PUT the file to the URL with the headers given, then pass the reference as the file argument of that tool on that connection. `kosuke integrations call --file` does all of it, and is the command to use. A failure answers 200 with isError true, as a call does. A Connector Token or a browser session is refused.",
+        "tags": ["integrations"],
+        "x-kosuke-command": ["integrations", "uploads", "create"],
+        "x-kosuke-sandbox-token": true,
+        "x-kosuke-cron-token": true,
+        "x-kosuke-sensei-token": true,
+        "parameters": [
+          {
+            "name": "workspace",
+            "in": "query",
+            "required": false,
+            "description": "The workspace the call is made in. Required with an API key, which is refused with 403 when you are not a member of it. An agent credential reaches its own workspace and refuses another.",
+            "schema": {
+              "description": "The workspace the call is made in. Required with an API key, which is refused with 403 when you are not a member of it. An agent credential reaches its own workspace and refuses another.",
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 100
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "name": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 80,
+                    "description": "The tool the file is for, as the tools list names it."
+                  },
+                  "account": {
+                    "description": "The connection the call will run on: its short id, its alias or scope:label. Needed when several can run the tool.",
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 100
+                  },
+                  "filename": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255,
+                    "pattern": "^[^/\\\\\\p{Cc}]+$",
+                    "description": "The file name the vendor receives, without a directory."
+                  },
+                  "mimetype": {
+                    "type": "string",
+                    "maxLength": 255,
+                    "pattern": "^[a-z0-9][a-z0-9!#$&^_.+-]*\\/[a-z0-9][a-z0-9!#$&^_.+-]*$",
+                    "description": "The MIME type of the file, such as video/mp4."
+                  },
+                  "md5": {
+                    "type": "string",
+                    "pattern": "^[a-f0-9]{32}$",
+                    "description": "The MD5 digest of the file, in lowercase hex."
+                  }
+                },
+                "required": ["name", "filename", "mimetype", "md5"],
+                "additionalProperties": false
+              }
+            }
+          }
+        },
+        "responses": {
+          "2XX": {
+            "description": "Success envelope",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiSuccess"
+                }
+              }
+            }
+          },
+          "4XX": {
+            "description": "Error envelope",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "5XX": {
+            "description": "Error envelope",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
     "/api/agent-integrations/tools": {
       "get": {
         "operationId": "integrationsToolsList",
@@ -799,7 +900,7 @@
     "/api/devices/available": {
       "get": {
         "operationId": "devicesList",
-        "summary": "From a Chat Session: the devices it may ask for, the workspace's devices and the session member's own Macs, each with its id, kind, whether it is online, the tools it offers and this session's access: none, pending or approved. Pick an online device with the tools the test needs: a workspace device first, and the member's own Mac only when no workspace device fits, whatever the names or past approvals. Request one with `kosuke devices requests create` before any mac command, and use one only when the test truly needs a real Mac.",
+        "summary": "From a Chat Session: the devices it may ask for, the workspace's devices and the session member's own Macs, each with its id, kind, whether it is online, the tools it offers, this session's access: none, pending or approved, and occupied with occupiedBy (session or sensei) when someone else uses it now. Pick an online device with the tools the test needs: a workspace device first, and the member's own Mac only when no workspace device fits, whatever the names or past approvals. Of those, pick a free one, and ask for an occupied one only when no free device fits. Request one with `kosuke devices requests create` before any mac command, and use one only when the test truly needs a real Mac.",
         "tags": ["devices"],
         "x-kosuke-command": ["devices", "list"],
         "x-kosuke-sandbox-token": true,
@@ -8041,6 +8142,12 @@
                     "minLength": 1,
                     "maxLength": 255
                   },
+                  "branch": {
+                    "description": "An existing branch the session works on: it checks it out, pushes to it and opens its pull request from it. Not the default branch, the Target Branch, or a branch another open session works on. Absent: a new branch. Repository projects only; not with startBranch.",
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255
+                  },
                   "reason": {
                     "description": "Why this session is being filed and what turned it up, in one line. Required from a sandbox or a Cron Run, ignored from anyone else.",
                     "type": "string",
@@ -8123,6 +8230,12 @@
                     "minLength": 1,
                     "maxLength": 255
                   },
+                  "branch": {
+                    "description": "An existing branch the session works on: it checks it out, pushes to it and opens its pull request from it. Not the default branch, the Target Branch, or a branch another open session works on. Absent: a new branch. Repository projects only; not with startBranch.",
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255
+                  },
                   "reason": {
                     "description": "Why this session is being filed and what turned it up, in one line. Required from a sandbox or a Cron Run, ignored from anyone else.",
                     "type": "string",
@@ -10835,6 +10948,12 @@
                     "minLength": 1,
                     "maxLength": 255
                   },
+                  "branch": {
+                    "description": "An existing branch the session works on: it checks it out, pushes to it and opens its pull request from it. Not the default branch, the Target Branch, or a branch another open session works on. Absent: a new branch. Repository projects only; not with startBranch.",
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255
+                  },
                   "reason": {
                     "description": "Why this session is being filed and what turned it up, in one line. Required from a sandbox or a Cron Run, ignored from anyone else.",
                     "type": "string",
@@ -10900,6 +11019,12 @@
                     "minLength": 1,
                     "maxLength": 255
                   },
+                  "branch": {
+                    "description": "An existing branch the session works on: it checks it out, pushes to it and opens its pull request from it. Not the default branch, the Target Branch, or a branch another open session works on. Absent: a new branch. Repository projects only; not with startBranch.",
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 255
+                  },
                   "reason": {
                     "description": "Why this session is being filed and what turned it up, in one line. Required from a sandbox or a Cron Run, ignored from anyone else.",
                     "type": "string",
@@ -22053,7 +22178,7 @@
     "/api/sensei/device-requests": {
       "get": {
         "operationId": "senseiDeviceRequestsList",
-        "summary": "List the Device Requests of a Chat Session, oldest first, as you would see them on its cards: id, device, kind, owner, reason, status (pending, approved, declined, expired, withdrawn or closed), who asked and who answered, when, and canApprove, whether you may answer it. A request past its 30 minutes reads expired.",
+        "summary": "List the Device Requests of a Chat Session, oldest first, as you would see them on its cards: id, device, kind, owner, reason, status (pending, approved, declined, expired, withdrawn or closed), who asked and who answered, when, canApprove, whether you may answer it, and occupiedBy, session or sensei when someone else uses the device while it is pending. A request past its 30 minutes reads expired.",
         "tags": ["sensei"],
         "x-kosuke-command": ["sensei", "device-requests", "list"],
         "x-kosuke-sandbox-token": true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kosuke-ai/kosuke",
-  "version": "1.0.13",
+  "version": "1.0.15",
   "description": "Kosuke platform CLI. The client customers install to drive app.kosuke.ai from their own machine.",
   "license": "MIT",
   "repository": {
@@ -40,10 +40,10 @@
     "vitest": "^4.1.12"
   },
   "kosukeRelease": {
-    "sourceCommit": "6a882d48dc8afd6970071bffe05194bda2efb758",
-    "sourceIdentity": "e21e09139e14ef237ab372758a821554ef499449d0068c261567d4d898925b0c",
+    "sourceCommit": "e8cfc6a10560808a7caeb3459689a40d350802ad",
+    "sourceIdentity": "53826d80538eb10915ea379597ea571039d4144d2b6d95c47bd5b01ef75588f2",
     "fragments": [
-      "sensei-any-turn-acts-q7m2tz.json"
+      "cli-integrations-call-file-k7w2qd.json"
     ]
   }
 }