@mosse-ai/cli 0.1.2 → 0.1.4

package/dist/index.js

@@ -48,6 +48,9 @@ var exact = {
   "/v1/my/scope-overview": ["GET"],
   "/v1/my/keychain/overview": ["GET"],
   "/v1/connections": ["GET", "POST"],
+  "/v1/github/app/install": ["POST"],
+  "/v1/github/app/bind/start": ["POST"],
+  "/v1/github/app/installations": ["GET"],
   "/v1/connections-maintained": ["GET"],
   "/v1/my/keychain/drops": ["POST"],
   "/v1/my/connectors/oauth/status": ["GET"],
@@ -189,6 +192,36 @@ var patterns = [
     methods: ["GET", "DELETE"],
     sample: "/v1/my/scope-skills/sk-1"
   },
+  {
+    pattern: /^\/v1\/github\/app\/installations\/[A-Za-z0-9_-]+$/,
+    methods: ["DELETE"],
+    sample: "/v1/github/app/installations/c-1"
+  },
+  {
+    pattern: /^\/v1\/github\/app\/repositories\/[A-Za-z0-9_-]+\/branches$/,
+    methods: ["GET"],
+    sample: "/v1/github/app/repositories/r-1/branches"
+  },
+  {
+    pattern: /^\/v1\/github\/app\/repositories\/[A-Za-z0-9_-]+\/policy$/,
+    methods: ["PUT"],
+    sample: "/v1/github/app/repositories/r-1/policy"
+  },
+  {
+    pattern: /^\/v1\/github\/app\/repositories\/[A-Za-z0-9_-]+\/grants$/,
+    methods: ["PUT"],
+    sample: "/v1/github/app/repositories/r-1/grants"
+  },
+  {
+    pattern: /^\/v1\/github\/app\/installations\/[A-Za-z0-9_-]+\/repositories$/,
+    methods: ["GET"],
+    sample: "/v1/github/app/installations/c-1/repositories"
+  },
+  {
+    pattern: /^\/v1\/github\/app\/installations\/[A-Za-z0-9_-]+\/refresh$/,
+    methods: ["POST"],
+    sample: "/v1/github/app/installations/c-1/refresh"
+  },
   {
     pattern: /^\/v1\/connections\/[A-Za-z0-9_-]+\/rotate$/,
     methods: ["POST"],
@@ -21264,7 +21297,7 @@ function actionOf(id) {
   return id.slice(id.indexOf(".") + 1);
 }
 function patScopeOf(spec) {
-  return `${domainOf(spec.id)}:${spec.effect === "read" ? "read" : "write"}`;
+  return spec.patScope ?? `${domainOf(spec.id)}:${spec.effect === "read" ? "read" : "write"}`;
 }
 function mcpToolNameOf(spec) {
   return spec.mcpName ?? spec.id.replace(".", "_");
@@ -21308,6 +21341,14 @@ function registryProblems(specs) {
     if (mcpNames.has(mcp))
       problems6.push(`${s.id}: duplicate MCP tool name ${mcp}`);
     mcpNames.add(mcp);
+    if (s.patScope) {
+      if (!s.patScope.startsWith(`${domainOf(s.id)}:`))
+        problems6.push(`${s.id}: patScope ${s.patScope} must stay in domain ${domainOf(s.id)}`);
+      if (!/^[a-z]+:(read|write|admin)$/.test(s.patScope))
+        problems6.push(`${s.id}: invalid patScope ${s.patScope}`);
+      if (s.effect === "read" && s.patScope !== `${domainOf(s.id)}:read`)
+        problems6.push(`${s.id}: read capabilities cannot use patScope ${s.patScope}`);
+    }
     if (s.principals && s.principals.length < 2 && !s.reason)
       problems6.push(`${s.id}: narrowed principals need a reason`);
     if (s.runScoped && (s.principals?.length !== 1 || s.principals[0] !== "agent"))
@@ -21397,7 +21438,7 @@ var BoardUpdateTask = defineCapability({
   id: "board.update_task",
   summary: "Update task fields.",
   usageRules: [
-    "expectedUpdatedAt guards status/assignee/reviewer/dueDate/todos; always pass it. Others: last-write-wins, reread first. todos/acceptanceChecks REPLACE the whole list (max 50 each): read full/fields; retain items with IDs, new items without IDs; omissions delete. Tick via {{board.check_todo}}. Unchecked todos block review/done. Project completion/review rules apply. Done: {{board.reopen_task}} first.",
+    "expectedUpdatedAt guards status/assignee/reviewer/due fields; always pass it. Others: last-write-wins, reread first. todos/acceptanceChecks REPLACE the whole list (max 50 each): read full/fields; retain items with IDs, new items without IDs; omissions delete. Tick via {{board.check_todo}}. Unchecked todos block review/done. Project completion/review rules apply. Done: {{board.reopen_task}} first. Scheduling: dueTime needs dueDate; durationMin needs dueTime; clearing dueDate clears both.",
     { text: "A project admin other than the assignee can override designated review.", principal: "human" },
     { text: "Cannot mark your assigned task done; a person confirms.", principal: "agent" }
   ],
@@ -21411,6 +21452,18 @@ var BoardUpdateTask = defineCapability({
     assignee: memberRef.nullable().optional(),
     reviewer: memberRef.nullable().optional(),
     dueDate: external_exports.string().nullable().optional(),
+    /** 钟点 "HH:MM"(本地墙上时间;要求 dueDate 非空)。 */
+    dueTime: external_exports.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/).nullable().optional(),
+    /** 预计时长(分钟,1–10080;要求 dueTime 非空)。 */
+    durationMin: external_exports.number().int().min(1).max(10080).nullable().optional(),
+    /** 重复预设:完成时生成下一次(同一套 task,不另建实体)。 */
+    recurrence: external_exports.enum(["daily", "weekly", "monthly"]).nullable().optional(),
+    /** 重复结束日期(YYYY-MM-DD,含当天)。 */
+    recurrenceUntil: external_exports.string().date().nullable().optional(),
+    /** 到点提醒提前量(分钟;0 = 准点,5/10/15/30/60/120)。 */
+    reminderLeadMin: external_exports.union([external_exports.literal(0), external_exports.literal(5), external_exports.literal(10), external_exports.literal(15), external_exports.literal(30), external_exports.literal(60), external_exports.literal(120)]).optional(),
+    /** 跳过一次重复:当前任务置 canceled 并生成下一次(不能与 status 同时给)。 */
+    skipOccurrence: external_exports.boolean().optional(),
     todos: todoItems.optional(),
     acceptanceChecks: acceptanceCheckItems.optional(),
     /** 管理员绕过(完成规则 v2 §3:档 3 只绕过「只有审阅人能通过」;项目管理员、本人不是负责人;原因选填)。Agent 一律拒(策略表)。 */
@@ -21476,7 +21529,7 @@ var BoardCreateTask = defineCapability({
   id: "board.create_task",
   summary: "Create one backlog/todo task.",
   usageRules: [
-    "Reuse clientId. parentTaskId: same-project parent ID, one level. Add todos/checks afterward via {{board.update_task}}; labels/links/dependencies use their actions.",
+    "Reuse clientId. parentTaskId: same-project, one level. Scheduling: dueTime needs dueDate; durationMin needs dueTime; recurrence (daily/weekly/monthly) spawns next on completion; recurrenceUntil caps. Todos/checks/labels/links/deps via their actions.",
     {
       text: "Prefer {{board.create_tasks}} for discussed work; partner confirms.",
       principal: "agent"
@@ -21491,6 +21544,18 @@ var BoardCreateTask = defineCapability({
     reviewer: memberRef.nullable().optional(),
     priority: external_exports.enum(TASK_PRIORITIES).optional(),
     dueDate: external_exports.string().nullable().optional(),
+    /** 钟点 "HH:MM"(本地墙上时间;要求 dueDate 非空)。 */
+    dueTime: external_exports.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/).nullable().optional(),
+    /** 预计时长(分钟,1–10080;要求 dueTime 非空)。 */
+    durationMin: external_exports.number().int().min(1).max(10080).nullable().optional(),
+    /** 重复预设(MD-512 P3):daily / weekly / monthly;完成时生成下一次。 */
+    recurrence: external_exports.enum(["daily", "weekly", "monthly"]).nullable().optional(),
+    /** 重复结束日期(YYYY-MM-DD,含当天)。 */
+    recurrenceUntil: external_exports.string().date().nullable().optional(),
+    /** 到点提醒提前量(分钟;0 = 准点)。 */
+    reminderLeadMin: external_exports.union([external_exports.literal(0), external_exports.literal(5), external_exports.literal(10), external_exports.literal(15), external_exports.literal(30), external_exports.literal(60), external_exports.literal(120)]).optional(),
+    /** 跳过一次重复(当前任务置 canceled 并生成下一次;不能与 status 同时给)。 */
+    skipOccurrence: external_exports.boolean().optional(),
     parentTaskId: uuid8.nullable().optional(),
     clientId: external_exports.string().max(200).nullable().optional(),
     /** 来源消息(任务回链到它,进展回到它的 thread)。系统内 Agent 不给,由会话派生(与 create_tasks 同一规则)。 */
@@ -21536,6 +21601,21 @@ var BoardCreateTasks = defineCapability({
       title: external_exports.string(),
       description: external_exports.string().optional(),
       priority: external_exports.enum(TASK_PRIORITIES).optional(),
+      /** 每张任务各自的时间(与 create_task 同一套字段/约束)。 */
+      dueDate: external_exports.string().nullable().optional(),
+      dueTime: external_exports.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/).nullable().optional(),
+      durationMin: external_exports.number().int().min(1).max(10080).nullable().optional(),
+      recurrence: external_exports.enum(["daily", "weekly", "monthly"]).nullable().optional(),
+      recurrenceUntil: external_exports.string().date().nullable().optional(),
+      reminderLeadMin: external_exports.union([
+        external_exports.literal(0),
+        external_exports.literal(5),
+        external_exports.literal(10),
+        external_exports.literal(15),
+        external_exports.literal(30),
+        external_exports.literal(60),
+        external_exports.literal(120)
+      ]).optional(),
       todos: external_exports.array(external_exports.strictObject({ text: external_exports.string() })).optional(),
       acceptanceChecks: external_exports.array(external_exports.strictObject({ desc: external_exports.string() })).optional(),
       dependsOn: external_exports.array(external_exports.number().int().min(0)).optional(),
@@ -22351,6 +22431,7 @@ var KnowledgePurgeKb = defineCapability({
   summary: "Permanently delete an archived knowledge base with its documents and sharing. This cannot be undone. For in-product agents: this always asks the person you are talking with to confirm.",
   input: external_exports.strictObject({ kbId }),
   effect: "destructive",
+  patScope: "knowledge:admin",
   external: true,
   highRisk: "always"
 });
@@ -22359,6 +22440,7 @@ var KnowledgeGrantKb = defineCapability({
   summary: "Share a knowledge base with a person's personal scope or a channel, for reading or writing. Takes effect immediately; setting it again changes the permission.",
   input: external_exports.strictObject({ kbId, granteeScopeId: scopeId, permission: external_exports.enum(["read", "write"]) }),
   effect: "write",
+  patScope: "knowledge:admin",
   external: true,
   highRisk: "always",
   idempotent: true
@@ -22376,6 +22458,7 @@ var KnowledgeAddManager = defineCapability({
   summary: "Make a person a manager of a shared knowledge base you created. Managers can add files, share it and change its settings; only the creator can add or remove managers, archive or delete it. For in-product agents: this always asks the person you are talking with to confirm.",
   input: external_exports.strictObject({ kbId, userId: external_exports.uuid() }),
   effect: "write",
+  patScope: "knowledge:admin",
   external: true,
   highRisk: "always",
   idempotent: true
@@ -22385,6 +22468,7 @@ var KnowledgeRemoveManager = defineCapability({
   summary: "Stop a person managing a shared knowledge base you created. For in-product agents: this always asks the person you are talking with to confirm.",
   input: external_exports.strictObject({ kbId, userId: external_exports.uuid() }),
   effect: "write",
+  patScope: "knowledge:admin",
   external: true,
   highRisk: "always",
   idempotent: true
@@ -22394,6 +22478,7 @@ var KnowledgeRevokeKb = defineCapability({
   summary: "Stop sharing a knowledge base with a scope. The one it was shared with (yourself, or a channel you manage) can also use this to leave it.",
   input: external_exports.strictObject({ kbId, granteeScopeId: scopeId }),
   effect: "write",
+  patScope: "knowledge:admin",
   external: true,
   highRisk: "always",
   idempotent: true
@@ -22456,6 +22541,7 @@ var KnowledgeSetModels = defineCapability({
     confirmKeyHandoff: external_exports.boolean().optional()
   }),
   effect: "write",
+  patScope: "knowledge:admin",
   external: true,
   highRisk: "always",
   idempotent: true
@@ -22562,6 +22648,84 @@ var ChatSetPinBarVisibility = defineCapability({
   effect: "write",
   idempotent: true
 });
+var ChatListChannels = defineCapability({
+  id: "chat.list_channels",
+  summary: "List the channels and one-to-one DMs you belong to, with unread counts, last activity and your role. Start here when you need a channelId for reading or sending messages.",
+  input: external_exports.strictObject({}),
+  effect: "read",
+  idempotent: true,
+  cli: { path: ["chat", "channels"] }
+});
+var ChatListMessages = defineCapability({
+  id: "chat.list_messages",
+  summary: "Read a page of messages in a conversation you belong to (oldest first). Page backwards with beforeSeq or catch up with afterSeq; excludeDeleted drops tombstones, topLevelOnly hides thread replies.",
+  input: external_exports.strictObject({
+    channelId: channelId2,
+    beforeSeq: external_exports.number().int().min(0).optional(),
+    afterSeq: external_exports.number().int().min(0).optional(),
+    limit: external_exports.number().int().min(1).max(200).optional(),
+    topLevelOnly: external_exports.boolean().optional()
+  }),
+  effect: "read",
+  idempotent: true,
+  cli: { path: ["chat", "messages", "list"] }
+});
+var ChatSearchMessages = defineCapability({
+  id: "chat.search_messages",
+  summary: "Search message text across channels you belong to (optionally limited to one channel). Only messages visible to you are returned; deleted messages are excluded.",
+  input: external_exports.strictObject({
+    q: external_exports.string().trim().min(1).max(200),
+    channelId: channelId2.optional(),
+    limit: external_exports.number().int().min(1).max(100).optional()
+  }),
+  effect: "read",
+  idempotent: true,
+  cli: { path: ["chat", "messages", "search"] }
+});
+var ChatSendMessage = defineCapability({
+  id: "chat.send_message",
+  summary: "Send a text message to a conversation you belong to, as the token owner (or as the in-product Agent). Use replyToId to quote a message and threadRootId to reply in a thread. Reuse clientId after an unknown result so a retry does not post twice.",
+  input: external_exports.strictObject({
+    channelId: channelId2,
+    text: external_exports.string().trim().min(1).max(2e4),
+    replyToId: messageId.optional(),
+    threadRootId: messageId.optional(),
+    clientId: external_exports.uuid().optional()
+  }),
+  effect: "write",
+  idempotent: true,
+  cli: { path: ["chat", "messages", "send"] }
+});
+var ChatThreadList = defineCapability({
+  id: "chat.thread_list",
+  summary: "Read the replies of a message thread you can see, oldest first. Page with beforeSeq / afterSeq; the thread root message is included.",
+  input: external_exports.strictObject({
+    messageId,
+    beforeSeq: external_exports.number().int().min(0).optional(),
+    afterSeq: external_exports.number().int().min(0).optional(),
+    limit: external_exports.number().int().min(1).max(200).optional(),
+    newestFirst: external_exports.boolean().optional()
+  }),
+  effect: "read",
+  idempotent: true,
+  cli: { path: ["chat", "thread", "list"] }
+});
+var ChatAddReaction = defineCapability({
+  id: "chat.add_reaction",
+  summary: "Add an emoji reaction to a visible message as the token owner. Repeating the same reaction is a no-op.",
+  input: external_exports.strictObject({ messageId, emoji: external_exports.string().trim().min(1).max(32) }),
+  effect: "write",
+  idempotent: true,
+  cli: { path: ["chat", "reaction", "add"] }
+});
+var ChatRemoveReaction = defineCapability({
+  id: "chat.remove_reaction",
+  summary: "Remove your own emoji reaction from a visible message.",
+  input: external_exports.strictObject({ messageId, emoji: external_exports.string().trim().min(1).max(32) }),
+  effect: "write",
+  idempotent: true,
+  cli: { path: ["chat", "reaction", "remove"] }
+});
 var ChatResolveMessageContext = defineCapability({
   id: "chat.resolve_message_context",
   summary: "Locate a visible message in a bounded context window (at most 100 messages), including old thread replies. The server resolves its conversation stream and thread root. Follow direction/cursor to extend before or after; never scan every old history page to find the target.",
@@ -22577,6 +22741,13 @@ var ChatResolveMessageContext = defineCapability({
   idempotent: true
 });
 var CHAT_CAPABILITIES = [
+  ChatListChannels,
+  ChatListMessages,
+  ChatSearchMessages,
+  ChatSendMessage,
+  ChatThreadList,
+  ChatAddReaction,
+  ChatRemoveReaction,
   ChatListPins,
   ChatPinMessage,
   ChatUnpinMessage,
@@ -23159,7 +23330,7 @@ function buildCommandTree(options = {}) {
 }
 
 // src/api.ts
-var CLI_VERSION = true ? "0.1.2" : "0.0.0";
+var CLI_VERSION = true ? "0.1.4" : "0.0.0";
 var CLI_USER_AGENT = `mosse-cli/${CLI_VERSION}`;
 async function callApi(request) {
   const headers = {
@@ -23564,7 +23735,13 @@ var SKILL_COMMAND_PATHS = [
   ["board", "task", "dependency-remove"],
   ["board", "task", "link-add"],
   ["board", "activity", "list"],
-  ["knowledge", "search"]
+  ["knowledge", "search"],
+  ["chat", "channels"],
+  ["chat", "messages", "list"],
+  ["chat", "messages", "search"],
+  ["chat", "messages", "send"],
+  ["chat", "thread", "list"],
+  ["chat", "reaction", "add"]
 ];
 function renderSkill(tree) {
   const line = (path, suffix) => {
@@ -23596,7 +23773,7 @@ function renderSkill(tree) {
     ...missing.length ? ["", `[warn] skill references missing commands: ${missing.map((p) => p.join(" ")).join(", ")}`] : []
   ].join("\n");
 }
-var SKILL_DESCRIPTION = "Use the Mosse CLI (mosse) to read and write Mosse boards: tasks and checklists, dependencies, links, activity, projects, and knowledge search. Use when the user asks about Mosse tasks or projects, or when a mosse command is needed.";
+var SKILL_DESCRIPTION = "Use the Mosse CLI (mosse) to read and write Mosse boards and chat: tasks and checklists, dependencies, links, activity, projects, sending and searching messages, reactions and threads, and knowledge search. Use when the user asks about Mosse tasks, projects, channels or messages, or when a mosse command is needed.";
 var skillVersionMark = (version3) => `<!-- mosse-skill-version: ${version3} -->`;
 function renderSkillMd(tree, version3 = CLI_VERSION) {
   return [
@@ -24024,7 +24201,13 @@ var HTTP_ERROR_HINTS = [
     /can't depend on itself/i,
     "dependsOn \u7528\u300C\u6279\u5185\u4E0B\u6807\u300D(0 = \u6279\u91CC\u7B2C\u4E00\u4E2A\u4EFB\u52A1),\u4E0D\u662F\u4EFB\u52A1 id;\u4E24\u4E2A\u5DF2\u6709\u4EFB\u52A1\u4E4B\u95F4\u7528 board task dependency-add\u3002"
   ],
-  [/invalid arguments/i, "\u5165\u53C2\u5F62\u72B6\u4E0D\u5BF9:\u770B\u8BE5\u547D\u4EE4\u7684 --help \u793A\u4F8B;\u6570\u7EC4/\u5BF9\u8C61\u53C2\u6570\u53EF\u4EE5\u5199\u6210 --tasks @file(\u6587\u4EF6\u91CC\u653E JSON)\u3002"]
+  [/invalid arguments/i, "\u5165\u53C2\u5F62\u72B6\u4E0D\u5BF9:\u770B\u8BE5\u547D\u4EE4\u7684 --help \u793A\u4F8B;\u6570\u7EC4/\u5BF9\u8C61\u53C2\u6570\u53EF\u4EE5\u5199\u6210 --tasks @file(\u6587\u4EF6\u91CC\u653E JSON)\u3002"],
+  [
+    /lacks the `?[a-z]+:(read|write|admin)`? permission/i,
+    "\u4EE4\u724C\u7F3A\u8FD9\u4E2A\u6743\u9650\u6863:\u53BB Settings \u2192 Agent access \u65B0\u5EFA\u4E00\u4E2A\u5E26\u8BE5\u6863\u7684\u4EE4\u724C(\u4EE4\u724C\u7684\u6863\u4F4D\u4E0D\u4F1A\u968F\u89D2\u8272\u53D8\u5316)\u3002"
+  ],
+  [/invalid, expired or revoked/i, "\u91CD\u65B0\u767B\u5F55:mosse auth login;\u6216\u6362\u4E00\u628A MOSSE_TOKEN\u3002"],
+  [/not a member of workspace/i, "\u4F60\u4E0D\u5728\u8FD9\u4E2A workspace(\u6216\u88AB\u79FB\u9664):\u8BA9\u7BA1\u7406\u5458\u52A0\u56DE,\u6216\u6362\u4E00\u4E2A --workspace\u3002"]
 ];
 function withHttpHint(message) {
   for (const [pattern, hint] of HTTP_ERROR_HINTS) if (pattern.test(message)) return `${message}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mosse-ai/cli",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "type": "module",
   "bin": {
     "mosse": "./dist/index.js"
@@ -16,8 +16,8 @@
     "typescript": "^5.7.3",
     "esbuild": "^0.25.0",
     "get-east-asian-width": "1.7.0",
-    "@mosse/contract": "0.0.0",
-    "@mosse/tool-surface": "0.0.0"
+    "@mosse/tool-surface": "0.0.0",
+    "@mosse/contract": "0.0.0"
   },
   "description": "Mosse command-line client: boards, tasks, knowledge search, and agent-friendly device login.",
   "license": "UNLICENSED",

package/skill/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: mosse
-description: "Use the Mosse CLI (mosse) to read and write Mosse boards: tasks and checklists, dependencies, links, activity, projects, and knowledge search. Use when the user asks about Mosse tasks or projects, or when a mosse command is needed."
+description: "Use the Mosse CLI (mosse) to read and write Mosse boards and chat: tasks and checklists, dependencies, links, activity, projects, sending and searching messages, reactions and threads, and knowledge search. Use when the user asks about Mosse tasks, projects, channels or messages, or when a mosse command is needed."
 ---
 
 <!-- mosse-skill-version: 0.0.0 -->