@kosuke-ai/kosuke 1.0.31 → 1.0.33

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 1.0.33
+
+- `user profile get` no longer returns `replyStyle` or `plainLanguage`: the Agent replies preference is gone, and Sensei now fits its explanations to the member by itself.
+- `kosuke projects merge-agent get` takes `--live false` to read Kosuke's own data only, without waiting for GitHub: each waiting pull request's head and review decision and the merge queue are then null.
+- `kosuke sensei cards set` says a reply's text is written without the Sign as Sensei marker, which Kosuke adds at send when the member has it on.
+
+## 1.0.32
+
+- `kosuke sensei cards set --sign-in` names the site, Chrome profile ID, Mac and wall URL of a sign-in card on the member's Mac, so its Approve allows exactly one tapped `kosuke mac browser login`. A card keyed `mac-sign-in:` without it is refused.
+- A `messages` block row on a Sensei card can name its `connection` and `conversation`, so the member can open that conversation on the FYI messages card and read its unread messages there.
+- Cron Runs on Claude, Codex and Meta models run as root in their own sandbox, as a coding session does, so builds that write tool settings under the home (such as Wrangler's) and commits in their clones work. Grok and Gemini Cron Runs keep their own user.
+
 ## 1.0.31
 
 - `kosuke sensei tickets merge` and `kosuke sensei messages move` are no longer offered to session sandbox or Cron agents: only you and your Sensei run them.

package/dist/generated/commands/mac/browser-login.js

@@ -6,7 +6,7 @@ export const operation = {
         "browser",
         "login"
     ],
-    "summary": "Get a site signed in in this Sensei Thread's browser from the member's everyday Chrome: pass the browser call's profile and deviceId, and the site as a bare hostname (twitter.com is x.com; Google's sites are refused). --reuse picks up the sign-in that profile in their Chrome holds by itself, with no tap: once per site and profile in a Turn, with the profile's exact ID. It never opens Chrome or waits for anyone, and answers opened false and signedIn false with chrome none (their Chrome holds no sign-in for the site, so nothing changed), same (the one this thread's browser already holds) or different (taken into this thread's browser, taken true). Then, unless it answered none or same, open the site with browser and check the account. On SIGN_IN_NEEDS_TAP or UPDATE_REQUIRED, put the sign-in card. A --reuse spends no tap, so it gives no card back. Every tapped mode (`sign-in`, `take`, `waitNew`) needs the member's tap on the sign-in card in this thread; `--forget` and `--reuse` need none. A sign-in takes the sign-in that profile in their Chrome holds when it differs from this thread's, without opening anything, and answers taken true, opened false and signedIn false, since the site has not confirmed it; or else it opens --url, or the site's page, in their Chrome and waits up to 8 minutes for the member to sign in. On LinkedIn and X it answers signedIn true and opened true. On any other site a change of the site's cookies is taken and answered taken true and signedIn false, since a change is not a sign-in, and an end with no change answers taken false; a desktop app too old to watch the site opens it and answers at once, with no taken. Every answer with taken true carries waitNewLeft: while it is above 0 and the site is still signed out, --wait-new (with the same --url), in the same Turn and with no new tap, waits for a newer sign-in, never taking the one taken already, and opens the site only when this Turn has not; once the tap's time has run out it fails with SIGN_IN_WINDOW_ENDED, and no card comes back. After the member's I'm signed in tap, --take takes that site's cookies, never Google's, and answers taken. --forget removes a sign-in this Turn took, a --reuse's included, for an account other than the one expected, and needs no tap. Each tap allows one call: a call without one, or a --wait-new that no take armed, fails with SIGN_IN_NEEDS_TAP. Then open the site with browser and check the account before account-specific work. On DEVICE_OFFLINE, TIMEOUT, SIGN_IN_TIMEOUT and KEYCHAIN_UNAVAILABLE Kosuke gives the member's card back by itself. Fails with SIGN_IN_TIMEOUT when Kosuke saw no new sign-in to LinkedIn or X within 8 minutes, PROFILE_DISCONNECTED for a profile turned off in Settings → Devices, KEYCHAIN_UNAVAILABLE when macOS did not let Kosuke read Chrome's sign-ins, STALE_TURN when the Turn stopped, and UPDATE_REQUIRED on a desktop app too old for it. Only Sensei calls it.",
+    "summary": "Get a site signed in in this Sensei Thread's browser from the member's everyday Chrome: pass the browser call's profile and deviceId, and the site as a bare hostname (twitter.com is x.com; Google's sites are refused). --reuse picks up the sign-in that profile in their Chrome holds by itself, with no tap: once per site and profile in a Turn, with the profile's exact ID. It never opens Chrome or waits for anyone, and answers opened false and signedIn false with chrome none (their Chrome holds no sign-in for the site, so nothing changed), same (the one this thread's browser already holds) or different (taken into this thread's browser, taken true). Then, unless it answered none or same, open the site with browser and check the account. On SIGN_IN_NEEDS_TAP or UPDATE_REQUIRED, put the sign-in card: `kosuke sensei cards set` with --sign-in naming this site, profile and deviceId. A --reuse spends no tap, so it gives no card back. Every tapped mode (`sign-in`, `take`, `waitNew`) needs the member's tap on the sign-in card in this thread; `--forget` and `--reuse` need none. A sign-in takes the sign-in that profile in their Chrome holds when it differs from this thread's, without opening anything, and answers taken true, opened false and signedIn false, since the site has not confirmed it; or else it opens --url, or the site's page, in their Chrome and waits up to 8 minutes for the member to sign in. On LinkedIn and X it answers signedIn true and opened true. On any other site a change of the site's cookies is taken and answered taken true and signedIn false, since a change is not a sign-in, and an end with no change answers taken false; a desktop app too old to watch the site opens it and answers at once, with no taken. Every answer with taken true carries waitNewLeft: while it is above 0 and the site is still signed out, --wait-new (with the same --url), in the same Turn and with no new tap, waits for a newer sign-in, never taking the one taken already, and opens the site only when this Turn has not; once the tap's time has run out it fails with SIGN_IN_WINDOW_ENDED, and no card comes back. After the member's I'm signed in tap, --take takes that site's cookies, never Google's, and answers taken. --forget removes a sign-in this Turn took, a --reuse's included, for an account other than the one expected, and needs no tap. Each tap allows one call: a call without one, or a --wait-new that no take armed, fails with SIGN_IN_NEEDS_TAP. Then open the site with browser and check the account before account-specific work. On DEVICE_OFFLINE, TIMEOUT, SIGN_IN_TIMEOUT and KEYCHAIN_UNAVAILABLE Kosuke gives the member's card back by itself. Fails with SIGN_IN_TIMEOUT when Kosuke saw no new sign-in to LinkedIn or X within 8 minutes, PROFILE_DISCONNECTED for a profile turned off in Settings → Devices, KEYCHAIN_UNAVAILABLE when macOS did not let Kosuke read Chrome's sign-ins, STALE_TURN when the Turn stopped, and UPDATE_REQUIRED on a desktop app too old for it. Only Sensei calls it.",
     "pathParams": [],
     "query": [],
     "body": {

package/dist/generated/commands/projects/merge-agent-get.js

@@ -6,11 +6,22 @@ export const operation = {
         "merge-agent",
         "get"
     ],
-    "summary": "Read the project's Merge agent: its mode (train or batch), the base and whether it has GitHub's merge queue, the go-ahead pull requests waiting with their QA and GitHub's review decision now, and the open run and earlier runs.",
+    "summary": "Read the project's Merge agent: its mode (train or batch), the base and whether it has GitHub's merge queue, the go-ahead pull requests waiting with their QA and GitHub's review decision now, and the open run and earlier runs. --live false reads Kosuke's own data only: no GitHub call, and GitHub's facts (each pull request's head and review decision, the merge queue) are null.",
     "pathParams": [
         "projectId"
     ],
-    "query": [],
+    "query": [
+        {
+            "name": "live",
+            "flag": "live",
+            "kind": "string",
+            "required": false,
+            "choices": [
+                "true",
+                "false"
+            ]
+        }
+    ],
     "body": null,
     "multipart": null,
     "attachments": false,

package/dist/generated/commands/sensei/cards-set.js

@@ -138,6 +138,13 @@ export const operation = {
                 "kind": "json",
                 "required": false
             },
+            {
+                "name": "signIn",
+                "flag": "sign-in",
+                "kind": "json",
+                "required": false,
+                "description": "A sign-in card on the member's Mac: the site, the Chrome profile ID, the Mac and, on the Sign in card of a site other than LinkedIn and X, the wall's url. Its Approve allows one tapped `kosuke mac browser login` for exactly these. Key it mac-sign-in:<site>:<profile> (the profile ID lowercase, spaces as hyphens: Profile 6 is profile-6) for Sign in, with :done for I'm signed in and :account for Continue as, both of which run --take. Only a card keyed mac-sign-in: takes it, and such a card needs it. A Sign in card for LinkedIn or X marks that connection signed out."
+            },
             {
                 "name": "covers",
                 "flag": "covers",

package/dist/generated/commands/user/profile-get.js

@@ -6,7 +6,7 @@ export const operation = {
         "profile",
         "get"
     ],
-    "summary": "Read your account: id, email, name, onboarding state, default model, Reply Style and FYI digest interval.",
+    "summary": "Read your account: id, email, name, onboarding state, default model and FYI digest interval.",
     "pathParams": [],
     "query": [],
     "body": null,

package/openapi.json

@@ -1561,7 +1561,7 @@
     "/api/devices/mac/browser-sign-in": {
       "post": {
         "operationId": "macBrowserLogin",
-        "summary": "Get a site signed in in this Sensei Thread's browser from the member's everyday Chrome: pass the browser call's profile and deviceId, and the site as a bare hostname (twitter.com is x.com; Google's sites are refused). --reuse picks up the sign-in that profile in their Chrome holds by itself, with no tap: once per site and profile in a Turn, with the profile's exact ID. It never opens Chrome or waits for anyone, and answers opened false and signedIn false with chrome none (their Chrome holds no sign-in for the site, so nothing changed), same (the one this thread's browser already holds) or different (taken into this thread's browser, taken true). Then, unless it answered none or same, open the site with browser and check the account. On SIGN_IN_NEEDS_TAP or UPDATE_REQUIRED, put the sign-in card. A --reuse spends no tap, so it gives no card back. Every tapped mode (`sign-in`, `take`, `waitNew`) needs the member's tap on the sign-in card in this thread; `--forget` and `--reuse` need none. A sign-in takes the sign-in that profile in their Chrome holds when it differs from this thread's, without opening anything, and answers taken true, opened false and signedIn false, since the site has not confirmed it; or else it opens --url, or the site's page, in their Chrome and waits up to 8 minutes for the member to sign in. On LinkedIn and X it answers signedIn true and opened true. On any other site a change of the site's cookies is taken and answered taken true and signedIn false, since a change is not a sign-in, and an end with no change answers taken false; a desktop app too old to watch the site opens it and answers at once, with no taken. Every answer with taken true carries waitNewLeft: while it is above 0 and the site is still signed out, --wait-new (with the same --url), in the same Turn and with no new tap, waits for a newer sign-in, never taking the one taken already, and opens the site only when this Turn has not; once the tap's time has run out it fails with SIGN_IN_WINDOW_ENDED, and no card comes back. After the member's I'm signed in tap, --take takes that site's cookies, never Google's, and answers taken. --forget removes a sign-in this Turn took, a --reuse's included, for an account other than the one expected, and needs no tap. Each tap allows one call: a call without one, or a --wait-new that no take armed, fails with SIGN_IN_NEEDS_TAP. Then open the site with browser and check the account before account-specific work. On DEVICE_OFFLINE, TIMEOUT, SIGN_IN_TIMEOUT and KEYCHAIN_UNAVAILABLE Kosuke gives the member's card back by itself. Fails with SIGN_IN_TIMEOUT when Kosuke saw no new sign-in to LinkedIn or X within 8 minutes, PROFILE_DISCONNECTED for a profile turned off in Settings → Devices, KEYCHAIN_UNAVAILABLE when macOS did not let Kosuke read Chrome's sign-ins, STALE_TURN when the Turn stopped, and UPDATE_REQUIRED on a desktop app too old for it. Only Sensei calls it.",
+        "summary": "Get a site signed in in this Sensei Thread's browser from the member's everyday Chrome: pass the browser call's profile and deviceId, and the site as a bare hostname (twitter.com is x.com; Google's sites are refused). --reuse picks up the sign-in that profile in their Chrome holds by itself, with no tap: once per site and profile in a Turn, with the profile's exact ID. It never opens Chrome or waits for anyone, and answers opened false and signedIn false with chrome none (their Chrome holds no sign-in for the site, so nothing changed), same (the one this thread's browser already holds) or different (taken into this thread's browser, taken true). Then, unless it answered none or same, open the site with browser and check the account. On SIGN_IN_NEEDS_TAP or UPDATE_REQUIRED, put the sign-in card: `kosuke sensei cards set` with --sign-in naming this site, profile and deviceId. A --reuse spends no tap, so it gives no card back. Every tapped mode (`sign-in`, `take`, `waitNew`) needs the member's tap on the sign-in card in this thread; `--forget` and `--reuse` need none. A sign-in takes the sign-in that profile in their Chrome holds when it differs from this thread's, without opening anything, and answers taken true, opened false and signedIn false, since the site has not confirmed it; or else it opens --url, or the site's page, in their Chrome and waits up to 8 minutes for the member to sign in. On LinkedIn and X it answers signedIn true and opened true. On any other site a change of the site's cookies is taken and answered taken true and signedIn false, since a change is not a sign-in, and an end with no change answers taken false; a desktop app too old to watch the site opens it and answers at once, with no taken. Every answer with taken true carries waitNewLeft: while it is above 0 and the site is still signed out, --wait-new (with the same --url), in the same Turn and with no new tap, waits for a newer sign-in, never taking the one taken already, and opens the site only when this Turn has not; once the tap's time has run out it fails with SIGN_IN_WINDOW_ENDED, and no card comes back. After the member's I'm signed in tap, --take takes that site's cookies, never Google's, and answers taken. --forget removes a sign-in this Turn took, a --reuse's included, for an account other than the one expected, and needs no tap. Each tap allows one call: a call without one, or a --wait-new that no take armed, fails with SIGN_IN_NEEDS_TAP. Then open the site with browser and check the account before account-specific work. On DEVICE_OFFLINE, TIMEOUT, SIGN_IN_TIMEOUT and KEYCHAIN_UNAVAILABLE Kosuke gives the member's card back by itself. Fails with SIGN_IN_TIMEOUT when Kosuke saw no new sign-in to LinkedIn or X within 8 minutes, PROFILE_DISCONNECTED for a profile turned off in Settings → Devices, KEYCHAIN_UNAVAILABLE when macOS did not let Kosuke read Chrome's sign-ins, STALE_TURN when the Turn stopped, and UPDATE_REQUIRED on a desktop app too old for it. Only Sensei calls it.",
         "tags": ["mac"],
         "x-kosuke-command": ["mac", "browser", "login"],
         "x-kosuke-answer-timeout-ms": 590000,
@@ -17046,7 +17046,7 @@
     "/api/projects/{projectId}/merge-agent": {
       "get": {
         "operationId": "projectsMergeAgentGet",
-        "summary": "Read the project's Merge agent: its mode (train or batch), the base and whether it has GitHub's merge queue, the go-ahead pull requests waiting with their QA and GitHub's review decision now, and the open run and earlier runs.",
+        "summary": "Read the project's Merge agent: its mode (train or batch), the base and whether it has GitHub's merge queue, the go-ahead pull requests waiting with their QA and GitHub's review decision now, and the open run and earlier runs. --live false reads Kosuke's own data only: no GitHub call, and GitHub's facts (each pull request's head and review decision, the merge queue) are null.",
         "tags": ["projects"],
         "x-kosuke-command": ["projects", "merge-agent", "get"],
         "x-kosuke-sandbox-token": true,
@@ -17062,6 +17062,15 @@
               "format": "uuid",
               "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
             }
+          },
+          {
+            "name": "live",
+            "in": "query",
+            "required": false,
+            "schema": {
+              "type": "string",
+              "enum": ["true", "false"]
+            }
           }
         ],
         "responses": {
@@ -21104,6 +21113,16 @@
                                   "link": {
                                     "type": "string",
                                     "maxLength": 2000
+                                  },
+                                  "connection": {
+                                    "type": "string",
+                                    "format": "uuid",
+                                    "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
+                                  },
+                                  "conversation": {
+                                    "type": "string",
+                                    "minLength": 1,
+                                    "maxLength": 512
                                   }
                                 },
                                 "required": ["network", "sender", "subject", "count", "at"]
@@ -21858,7 +21877,8 @@
                           "text": {
                             "type": "string",
                             "minLength": 1,
-                            "maxLength": 4000
+                            "maxLength": 4000,
+                            "description": "The reply as written, without the Sign as Sensei marker: Kosuke adds it at send when the member has it on."
                           }
                         },
                         "required": ["type", "connection", "conversation", "messageId", "text"],
@@ -21909,6 +21929,38 @@
                       }
                     ]
                   },
+                  "signIn": {
+                    "description": "A sign-in card on the member's Mac: the site, the Chrome profile ID, the Mac and, on the Sign in card of a site other than LinkedIn and X, the wall's url. Its Approve allows one tapped `kosuke mac browser login` for exactly these. Key it mac-sign-in:<site>:<profile> (the profile ID lowercase, spaces as hyphens: Profile 6 is profile-6) for Sign in, with :done for I'm signed in and :account for Continue as, both of which run --take. Only a card keyed mac-sign-in: takes it, and such a card needs it. A Sign in card for LinkedIn or X marks that connection signed out.",
+                    "type": "object",
+                    "properties": {
+                      "site": {
+                        "type": "string",
+                        "pattern": "^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\\.)+[a-z]{2,63}$",
+                        "description": "The site, as a bare hostname such as linkedin.com. twitter.com is x.com."
+                      },
+                      "profile": {
+                        "type": "string",
+                        "minLength": 1,
+                        "maxLength": 255,
+                        "pattern": "^[^`\\u0000-\\u001f\\u007f]+$",
+                        "description": "The Chrome profile directory ID from `kosuke mac browser profiles list`, such as \"Profile 6\", exactly as the browser call names it."
+                      },
+                      "deviceId": {
+                        "type": "string",
+                        "format": "uuid",
+                        "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
+                        "description": "The Mac, by the ID `kosuke mac browser profiles list` returns with the profile."
+                      },
+                      "url": {
+                        "description": "Only on the Sign in card of a site other than LinkedIn and X: the https page on that site that showed the sign-in wall, which the call opens in the member’s Chrome.",
+                        "type": "string",
+                        "maxLength": 2048,
+                        "format": "uri"
+                      }
+                    },
+                    "required": ["site", "profile", "deviceId"],
+                    "additionalProperties": false
+                  },
                   "covers": {
                     "description": "The ids of the incoming_message events of this thread that this card answers: a reply covers the message it answers, a task or calendar card the message in its evidence, an FYI the event of every row. An FYI update keeps unread commitments and the events in its current evidence, discarding processed history; name at most 50 events per write. The open FYI keeps a reference to every message it has covered, which its Mark read marks, and its card read gives their count and the newest.",
                     "minItems": 1,
@@ -26650,7 +26702,7 @@
     "/api/user/profile": {
       "get": {
         "operationId": "userProfileGet",
-        "summary": "Read your account: id, email, name, onboarding state, default model, Reply Style and FYI digest interval.",
+        "summary": "Read your account: id, email, name, onboarding state, default model and FYI digest interval.",
         "tags": ["user"],
         "x-kosuke-command": ["user", "profile", "get"],
         "x-kosuke-sandbox-token": true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kosuke-ai/kosuke",
-  "version": "1.0.31",
+  "version": "1.0.33",
   "description": "Kosuke platform CLI. The client customers install to drive app.kosuke.ai from their own machine.",
   "license": "MIT",
   "repository": {
@@ -40,10 +40,12 @@
     "vitest": "^4.1.12"
   },
   "kosukeRelease": {
-    "sourceCommit": "bd9029c68466df2c6c91c2a72e081cbb42d58ad8",
-    "sourceIdentity": "d07d5e2696d17ece82fe762e770cbde753caf3454e506d1b53cf82c37571ab16",
+    "sourceCommit": "8034f374ac00927174a1a52fa0b5c3958539f2cf",
+    "sourceIdentity": "32f854131338b85afbc2556bb9b76262a69450a67c97984e9449e6838215239e",
     "fragments": [
-      "sensei-card-commands-sensei-only.json"
+      "remove-reply-style-0fdhwb.json",
+      "merge-agent-live-paoigd.json",
+      "sign-as-sensei-reply-text.json"
     ]
   }
 }