@kosuke-ai/kosuke 1.0.28 → 1.0.30

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 1.0.30
+
+- `sensei device-requests update` is refused with 403 to a Chat Session's agent and a Cron: only you, an admin of the device's workspace, or your Sensei after your own yes answer a device request.
+
+## 1.0.29
+
+- Allow Personal Crons with repositories to use Kosuke free when no Subscription is connected.
+
 ## 1.0.28
 
 - Remove `kosuke sensei review context get`: read a pull request's reviews, checks and changed files with `gh`. `kosuke sensei cards set` now takes at most two actions, one primary and one destructive in the negative button's place.

package/dist/generated/commands/crons/create--personal.js

@@ -8,7 +8,7 @@ export const operation = {
     "variant": {
         "scope": "personal"
     },
-    "summary": "Create a Personal Cron, enabled, with you as its owner. A Personal Cron belongs to you and no workspace: with Personal Repositories or Apps it runs in its own sandbox; without, in its Sensei Thread. Repository runs use your own Subscriptions; thread runs use your Subscriptions or Kosuke free when you hold none. Kosuke free cannot run a Cron with repositories yet. The crontab is read in the cron's own timezone, and may not fire more often than every 15 minutes. The model is an encoded id such as anthropic:opus__xhigh; repositories require an explicit Model from any released Provider on one of your Subscriptions. Changing to Free while you hold a Subscription, or to a personal Model without one, is refused. Without repositories, null or left out runs on the thread’s model. From your Sensei it is refused with 409 CRON_ALREADY_EXISTS when you have a Personal Cron by that name: update that one instead. From Sensei, create or change one only when the member asks. To move a workspace Cron here, read it and recreate it with its timezone (its model only when the member's own Subscription runs it); the member deletes the workspace one in the app.",
+    "summary": "Create a Personal Cron, enabled, with you as its owner. A Personal Cron belongs to you and no workspace: with Personal Repositories or Apps it runs in its own sandbox; without, in its Sensei Thread. Both use your Subscriptions or Kosuke free when you hold none. The crontab is read in the cron's own timezone, and may not fire more often than every 15 minutes. The model is an encoded id such as anthropic:opus__xhigh; repositories require an explicit Model from any released Provider on one of your Subscriptions, or kosuke-free when you hold none. Changing to Free while you hold a Subscription, or to a personal Model without one, is refused. Without repositories, null or left out runs on the thread’s model. From your Sensei it is refused with 409 CRON_ALREADY_EXISTS when you have a Personal Cron by that name: update that one instead. From Sensei, create or change one only when the member asks. To move a workspace Cron here, read it and recreate it with its timezone (its model only when the member's own Subscription runs it); the member deletes the workspace one in the app.",
     "pathParams": [],
     "query": [],
     "body": {
@@ -53,7 +53,7 @@ export const operation = {
                 "flag": "model",
                 "kind": "json",
                 "required": false,
-                "description": "An encoded model id such as anthropic:opus__xhigh, one your Sensei runs on your own Subscription, or kosuke-free for Auto - Kosuke free in a thread Cron while you hold no Subscription. With repositories, an explicit Model of a released provider your Subscription runs is required. Without repositories, null runs on the thread's model."
+                "description": "An encoded model id such as anthropic:opus__xhigh, one your Sensei runs on your own Subscription, or kosuke-free for Auto - Kosuke free while you hold no Subscription. With repositories, an explicit Model of a released provider your Subscription runs, or kosuke-free, is required. Without repositories, null runs on the thread's model."
             }
         ],
         "required": true

package/dist/generated/commands/crons/get--personal.js

@@ -8,7 +8,7 @@ export const operation = {
     "variant": {
         "scope": "personal"
     },
-    "summary": "Read one of your Personal Crons: its prompt, schedule, timezone, model, when it runs next, its thread, its last run status, and how many runs in a row failed: five disable it. A Personal Cron belongs to you and no workspace: with Personal Repositories or Apps it runs in its own sandbox; without, in its Sensei Thread. Both use your own Subscription.",
+    "summary": "Read one of your Personal Crons: its prompt, schedule, timezone, model, when it runs next, its thread, its last run status, and how many runs in a row failed: five disable it. A Personal Cron belongs to you and no workspace: with Personal Repositories or Apps it runs in its own sandbox; without, in its Sensei Thread. Both use your Subscriptions or Kosuke free when you hold none.",
     "pathParams": [
         "cronId"
     ],

package/dist/generated/commands/crons/list--personal.js

@@ -8,7 +8,7 @@ export const operation = {
     "variant": {
         "scope": "personal"
     },
-    "summary": "List your Personal Crons, newest first, with each one's thread and last run status. A Personal Cron belongs to you and no workspace: with Personal Repositories or Apps it runs in its own sandbox; without, in its Sensei Thread. Repository runs use your own Subscriptions; thread runs use your Subscriptions or Kosuke free when you hold none. Among agents, only your Sensei reaches them.",
+    "summary": "List your Personal Crons, newest first, with each one's thread and last run status. A Personal Cron belongs to you and no workspace: with Personal Repositories or Apps it runs in its own sandbox; without, in its Sensei Thread. Both use your Subscriptions or Kosuke free when you hold none. Among agents, only your Sensei reaches them.",
     "pathParams": [],
     "query": [
         {

package/dist/generated/commands/crons/update--personal.js

@@ -8,7 +8,7 @@ export const operation = {
     "variant": {
         "scope": "personal"
     },
-    "summary": "Change one of your Personal Crons; only the fields sent change. Any edit sets the cron's failure count back to zero. enabled=false pauses the cron and enabled=true resumes it. No projects left stays until a save picks at least one repository, and Resume is refused meanwhile. Changing repositories rechecks the Model: a sandbox requires an explicit Model from any released Provider on one of your Subscriptions; Kosuke free cannot run it yet. Changing to Free while you hold a Subscription, or to a personal Model without one, is refused. Re-sending the unchanged stored Model is accepted. Without repositories, model=null goes back to the thread’s model. The crontab is read in the cron's own timezone.",
+    "summary": "Change one of your Personal Crons; only the fields sent change. Any edit sets the cron's failure count back to zero. enabled=false pauses the cron and enabled=true resumes it. No projects left stays until a save picks at least one repository, and Resume is refused meanwhile. Changing repositories rechecks the Model: a sandbox requires an explicit Model from any released Provider on one of your Subscriptions, or kosuke-free when you hold none. Changing to Free while you hold a Subscription, or to a personal Model without one, is refused. Re-sending the unchanged stored Model is accepted. Without repositories, model=null goes back to the thread’s model. The crontab is read in the cron's own timezone.",
     "pathParams": [
         "cronId"
     ],
@@ -55,7 +55,7 @@ export const operation = {
                 "flag": "model",
                 "kind": "json",
                 "required": false,
-                "description": "An encoded model id such as anthropic:opus__xhigh, one your Sensei runs on your own Subscription, or kosuke-free for Auto - Kosuke free in a thread Cron while you hold no Subscription. With repositories, an explicit Model of a released provider your Subscription runs is required. Without repositories, null runs on the thread's model."
+                "description": "An encoded model id such as anthropic:opus__xhigh, one your Sensei runs on your own Subscription, or kosuke-free for Auto - Kosuke free while you hold no Subscription. With repositories, an explicit Model of a released provider your Subscription runs, or kosuke-free, is required. Without repositories, null runs on the thread's model."
             },
             {
                 "name": "enabled",

package/dist/generated/commands/sensei/device-requests-update.js

@@ -6,7 +6,7 @@ export const operation = {
         "device-requests",
         "update"
     ],
-    "summary": "Approve or decline one Device Request of a Chat Session as you, the Mac’s owner or an admin of the device’s workspace. Answers the stored status. Refused with 403 when you may not answer it, 404 for a request not of this session, and 409 GRANT_ALREADY_DECIDED with its current status when it is no longer pending: already answered, expired, withdrawn, or closed because the session can no longer use the device.",
+    "summary": "Approve or decline one Device Request of a Chat Session as you, the Mac’s owner or an admin of the device’s workspace, or as your Sensei after your own yes. Answers the stored status. Refused with 403 to a Chat Session’s agent or a Cron, and when you may not answer it, 404 for a request not of this session, and 409 GRANT_ALREADY_DECIDED with its current status when it is no longer pending: already answered, expired, withdrawn, or closed because the session can no longer use the device.",
     "pathParams": [],
     "query": [],
     "body": {
@@ -42,5 +42,7 @@ export const operation = {
     "multipart": null,
     "attachments": false,
     "anonymous": false,
-    "agents": "all"
+    "agents": [
+        "senseiToken"
+    ]
 };

package/openapi.json

@@ -22717,11 +22717,9 @@
     "/api/sensei/device-requests/decide": {
       "post": {
         "operationId": "senseiDeviceRequestsUpdate",
-        "summary": "Approve or decline one Device Request of a Chat Session as you, the Mac’s owner or an admin of the device’s workspace. Answers the stored status. Refused with 403 when you may not answer it, 404 for a request not of this session, and 409 GRANT_ALREADY_DECIDED with its current status when it is no longer pending: already answered, expired, withdrawn, or closed because the session can no longer use the device.",
+        "summary": "Approve or decline one Device Request of a Chat Session as you, the Mac’s owner or an admin of the device’s workspace, or as your Sensei after your own yes. Answers the stored status. Refused with 403 to a Chat Session’s agent or a Cron, and when you may not answer it, 404 for a request not of this session, and 409 GRANT_ALREADY_DECIDED with its current status when it is no longer pending: already answered, expired, withdrawn, or closed because the session can no longer use the device.",
         "tags": ["sensei"],
         "x-kosuke-command": ["sensei", "device-requests", "update"],
-        "x-kosuke-sandbox-token": true,
-        "x-kosuke-cron-token": true,
         "x-kosuke-sensei-token": true,
         "requestBody": {
           "required": true,
@@ -24758,7 +24756,7 @@
     "/api/user/crons": {
       "get": {
         "operationId": "cronsListPersonal",
-        "summary": "List your Personal Crons, newest first, with each one's thread and last run status. A Personal Cron belongs to you and no workspace: with Personal Repositories or Apps it runs in its own sandbox; without, in its Sensei Thread. Repository runs use your own Subscriptions; thread runs use your Subscriptions or Kosuke free when you hold none. Among agents, only your Sensei reaches them.",
+        "summary": "List your Personal Crons, newest first, with each one's thread and last run status. A Personal Cron belongs to you and no workspace: with Personal Repositories or Apps it runs in its own sandbox; without, in its Sensei Thread. Both use your Subscriptions or Kosuke free when you hold none. Among agents, only your Sensei reaches them.",
         "tags": ["crons"],
         "x-kosuke-command": ["crons", "list"],
         "x-kosuke-variant": {
@@ -24838,7 +24836,7 @@
       },
       "post": {
         "operationId": "cronsCreatePersonal",
-        "summary": "Create a Personal Cron, enabled, with you as its owner. A Personal Cron belongs to you and no workspace: with Personal Repositories or Apps it runs in its own sandbox; without, in its Sensei Thread. Repository runs use your own Subscriptions; thread runs use your Subscriptions or Kosuke free when you hold none. Kosuke free cannot run a Cron with repositories yet. The crontab is read in the cron's own timezone, and may not fire more often than every 15 minutes. The model is an encoded id such as anthropic:opus__xhigh; repositories require an explicit Model from any released Provider on one of your Subscriptions. Changing to Free while you hold a Subscription, or to a personal Model without one, is refused. Without repositories, null or left out runs on the thread’s model. From your Sensei it is refused with 409 CRON_ALREADY_EXISTS when you have a Personal Cron by that name: update that one instead. From Sensei, create or change one only when the member asks. To move a workspace Cron here, read it and recreate it with its timezone (its model only when the member's own Subscription runs it); the member deletes the workspace one in the app.",
+        "summary": "Create a Personal Cron, enabled, with you as its owner. A Personal Cron belongs to you and no workspace: with Personal Repositories or Apps it runs in its own sandbox; without, in its Sensei Thread. Both use your Subscriptions or Kosuke free when you hold none. The crontab is read in the cron's own timezone, and may not fire more often than every 15 minutes. The model is an encoded id such as anthropic:opus__xhigh; repositories require an explicit Model from any released Provider on one of your Subscriptions, or kosuke-free when you hold none. Changing to Free while you hold a Subscription, or to a personal Model without one, is refused. Without repositories, null or left out runs on the thread’s model. From your Sensei it is refused with 409 CRON_ALREADY_EXISTS when you have a Personal Cron by that name: update that one instead. From Sensei, create or change one only when the member asks. To move a workspace Cron here, read it and recreate it with its timezone (its model only when the member's own Subscription runs it); the member deletes the workspace one in the app.",
         "tags": ["crons"],
         "x-kosuke-command": ["crons", "create"],
         "x-kosuke-variant": {
@@ -24886,7 +24884,7 @@
                     "description": "The IANA zone the crontab is read in, such as Europe/Rome."
                   },
                   "model": {
-                    "description": "An encoded model id such as anthropic:opus__xhigh, one your Sensei runs on your own Subscription, or kosuke-free for Auto - Kosuke free in a thread Cron while you hold no Subscription. With repositories, an explicit Model of a released provider your Subscription runs is required. Without repositories, null runs on the thread's model.",
+                    "description": "An encoded model id such as anthropic:opus__xhigh, one your Sensei runs on your own Subscription, or kosuke-free for Auto - Kosuke free while you hold no Subscription. With repositories, an explicit Model of a released provider your Subscription runs, or kosuke-free, is required. Without repositories, null runs on the thread's model.",
                     "anyOf": [
                       {
                         "anyOf": [
@@ -24948,7 +24946,7 @@
     "/api/user/crons/{cronId}": {
       "get": {
         "operationId": "cronsGetPersonal",
-        "summary": "Read one of your Personal Crons: its prompt, schedule, timezone, model, when it runs next, its thread, its last run status, and how many runs in a row failed: five disable it. A Personal Cron belongs to you and no workspace: with Personal Repositories or Apps it runs in its own sandbox; without, in its Sensei Thread. Both use your own Subscription.",
+        "summary": "Read one of your Personal Crons: its prompt, schedule, timezone, model, when it runs next, its thread, its last run status, and how many runs in a row failed: five disable it. A Personal Cron belongs to you and no workspace: with Personal Repositories or Apps it runs in its own sandbox; without, in its Sensei Thread. Both use your Subscriptions or Kosuke free when you hold none.",
         "tags": ["crons"],
         "x-kosuke-command": ["crons", "get"],
         "x-kosuke-variant": {
@@ -25004,7 +25002,7 @@
       },
       "patch": {
         "operationId": "cronsUpdatePersonal",
-        "summary": "Change one of your Personal Crons; only the fields sent change. Any edit sets the cron's failure count back to zero. enabled=false pauses the cron and enabled=true resumes it. No projects left stays until a save picks at least one repository, and Resume is refused meanwhile. Changing repositories rechecks the Model: a sandbox requires an explicit Model from any released Provider on one of your Subscriptions; Kosuke free cannot run it yet. Changing to Free while you hold a Subscription, or to a personal Model without one, is refused. Re-sending the unchanged stored Model is accepted. Without repositories, model=null goes back to the thread’s model. The crontab is read in the cron's own timezone.",
+        "summary": "Change one of your Personal Crons; only the fields sent change. Any edit sets the cron's failure count back to zero. enabled=false pauses the cron and enabled=true resumes it. No projects left stays until a save picks at least one repository, and Resume is refused meanwhile. Changing repositories rechecks the Model: a sandbox requires an explicit Model from any released Provider on one of your Subscriptions, or kosuke-free when you hold none. Changing to Free while you hold a Subscription, or to a personal Model without one, is refused. Re-sending the unchanged stored Model is accepted. Without repositories, model=null goes back to the thread’s model. The crontab is read in the cron's own timezone.",
         "tags": ["crons"],
         "x-kosuke-command": ["crons", "update"],
         "x-kosuke-variant": {
@@ -25064,7 +25062,7 @@
                     "description": "The IANA zone the crontab is read in, such as Europe/Rome."
                   },
                   "model": {
-                    "description": "An encoded model id such as anthropic:opus__xhigh, one your Sensei runs on your own Subscription, or kosuke-free for Auto - Kosuke free in a thread Cron while you hold no Subscription. With repositories, an explicit Model of a released provider your Subscription runs is required. Without repositories, null runs on the thread's model.",
+                    "description": "An encoded model id such as anthropic:opus__xhigh, one your Sensei runs on your own Subscription, or kosuke-free for Auto - Kosuke free while you hold no Subscription. With repositories, an explicit Model of a released provider your Subscription runs, or kosuke-free, is required. Without repositories, null runs on the thread's model.",
                     "anyOf": [
                       {
                         "anyOf": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kosuke-ai/kosuke",
-  "version": "1.0.28",
+  "version": "1.0.30",
   "description": "Kosuke platform CLI. The client customers install to drive app.kosuke.ai from their own machine.",
   "license": "MIT",
   "repository": {
@@ -40,10 +40,10 @@
     "vitest": "^4.1.12"
   },
   "kosukeRelease": {
-    "sourceCommit": "cf58837a652eb60c2cdc7ec2532cb5797e0af07a",
-    "sourceIdentity": "30ce0c060a21e0164acb3384a7e501d22e40ce93e9794b3b69ba34cee1d66a74",
+    "sourceCommit": "a2c33be7b58753bea54aaf5c46be3c35011b3398",
+    "sourceIdentity": "d07692f5e91a9308485cfd5acdf2963b79f513cd4908be7dfdc5179d705bfe68",
     "fragments": [
-      "sensei-review-context-removed-r4c7k2.json"
+      "device-request-human-approval-3yk89d.json"
     ]
   }
 }