@kosuke-ai/kosuke 1.0.29 → 1.0.31

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 1.0.31
+
+- `kosuke sensei tickets merge` and `kosuke sensei messages move` are no longer offered to session sandbox or Cron agents: only you and your Sensei run them.
+
+## 1.0.30
+
+- `sensei device-requests update` is refused with 403 to a Chat Session's agent and a Cron: only you, an admin of the device's workspace, or your Sensei after your own yes answer a device request.
+
 ## 1.0.29
 
 - Allow Personal Crons with repositories to use Kosuke free when no Subscription is connected.

package/dist/generated/commands/sensei/device-requests-update.js

@@ -6,7 +6,7 @@ export const operation = {
         "device-requests",
         "update"
     ],
-    "summary": "Approve or decline one Device Request of a Chat Session as you, the Mac’s owner or an admin of the device’s workspace. Answers the stored status. Refused with 403 when you may not answer it, 404 for a request not of this session, and 409 GRANT_ALREADY_DECIDED with its current status when it is no longer pending: already answered, expired, withdrawn, or closed because the session can no longer use the device.",
+    "summary": "Approve or decline one Device Request of a Chat Session as you, the Mac’s owner or an admin of the device’s workspace, or as your Sensei after your own yes. Answers the stored status. Refused with 403 to a Chat Session’s agent or a Cron, and when you may not answer it, 404 for a request not of this session, and 409 GRANT_ALREADY_DECIDED with its current status when it is no longer pending: already answered, expired, withdrawn, or closed because the session can no longer use the device.",
     "pathParams": [],
     "query": [],
     "body": {
@@ -42,5 +42,7 @@ export const operation = {
     "multipart": null,
     "attachments": false,
     "anonymous": false,
-    "agents": "all"
+    "agents": [
+        "senseiToken"
+    ]
 };

package/dist/generated/commands/sensei/messages-move.js

@@ -31,5 +31,7 @@ export const operation = {
     "multipart": null,
     "attachments": false,
     "anonymous": false,
-    "agents": "all"
+    "agents": [
+        "senseiToken"
+    ]
 };

package/dist/generated/commands/sensei/tickets-merge.js

@@ -45,5 +45,7 @@ export const operation = {
     "multipart": null,
     "attachments": false,
     "anonymous": false,
-    "agents": "all"
+    "agents": [
+        "senseiToken"
+    ]
 };

package/openapi.json

@@ -22717,11 +22717,9 @@
     "/api/sensei/device-requests/decide": {
       "post": {
         "operationId": "senseiDeviceRequestsUpdate",
-        "summary": "Approve or decline one Device Request of a Chat Session as you, the Mac’s owner or an admin of the device’s workspace. Answers the stored status. Refused with 403 when you may not answer it, 404 for a request not of this session, and 409 GRANT_ALREADY_DECIDED with its current status when it is no longer pending: already answered, expired, withdrawn, or closed because the session can no longer use the device.",
+        "summary": "Approve or decline one Device Request of a Chat Session as you, the Mac’s owner or an admin of the device’s workspace, or as your Sensei after your own yes. Answers the stored status. Refused with 403 to a Chat Session’s agent or a Cron, and when you may not answer it, 404 for a request not of this session, and 409 GRANT_ALREADY_DECIDED with its current status when it is no longer pending: already answered, expired, withdrawn, or closed because the session can no longer use the device.",
         "tags": ["sensei"],
         "x-kosuke-command": ["sensei", "device-requests", "update"],
-        "x-kosuke-sandbox-token": true,
-        "x-kosuke-cron-token": true,
         "x-kosuke-sensei-token": true,
         "requestBody": {
           "required": true,
@@ -23047,8 +23045,6 @@
         "summary": "Send a message that reached you on to another member: the one the required memberId names. It opens in their Sensei, and the sender's later updates of it go to them. Your own card on it stays yours to close. Refused with 404 when the message is not with you now, with 409 MESSAGE_CHANGED when it changed since you read it, and with 400 when nobody else is named for it.",
         "tags": ["sensei"],
         "x-kosuke-command": ["sensei", "messages", "move"],
-        "x-kosuke-sandbox-token": true,
-        "x-kosuke-cron-token": true,
         "x-kosuke-sensei-token": true,
         "requestBody": {
           "required": true,
@@ -24103,8 +24099,6 @@
         "summary": "Fold Backlog tickets of one project into one, in one step: the kept ticket takes content as its prompt and the folded tickets are deleted, or nothing changes. revisions holds the promptRevision `sessions get` gave for every ticket content was written from, the kept one included. Refused with 409 TICKET_EDITED when any of them changed since, with 409 NOT_IN_BACKLOG when any of them started, and with 400 when a revision is missing or a ticket is of another project. Pass the body whole with --body or --body-file.",
         "tags": ["sensei"],
         "x-kosuke-command": ["sensei", "tickets", "merge"],
-        "x-kosuke-sandbox-token": true,
-        "x-kosuke-cron-token": true,
         "x-kosuke-sensei-token": true,
         "requestBody": {
           "required": true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kosuke-ai/kosuke",
-  "version": "1.0.29",
+  "version": "1.0.31",
   "description": "Kosuke platform CLI. The client customers install to drive app.kosuke.ai from their own machine.",
   "license": "MIT",
   "repository": {
@@ -40,10 +40,10 @@
     "vitest": "^4.1.12"
   },
   "kosukeRelease": {
-    "sourceCommit": "cff2f85d983b541cb81b67979b53d4ed474ea881",
-    "sourceIdentity": "25e62c06a436497cbad3671ed8194755050595cc913fc4dc4c8bdb5b1f793d4c",
+    "sourceCommit": "bd9029c68466df2c6c91c2a72e081cbb42d58ad8",
+    "sourceIdentity": "d07d5e2696d17ece82fe762e770cbde753caf3454e506d1b53cf82c37571ab16",
     "fragments": [
-      "free-repository-crons.json"
+      "sensei-card-commands-sensei-only.json"
     ]
   }
 }