kenso 0.1.10 → 0.1.12

package/docs/auth.md

@@ -27,9 +27,13 @@ kenso auth login
 kenso auth login --no-browser --device-name "build box"
 ```
 
-Browser login is rolling out. Until it is on for your account, `kenso auth login` answers `browser_login_unavailable` (exit 3) with `"next":"kenso auth login --with-key"`: use an API key as above.
+Browser login is available to every workspace. The CLI prints a link and a code on stderr. You open the link, sign in to app.ken.so, check that the code matches the one in your terminal, pick the workspace to start in and approve. The CLI then saves a new API key to the profile and prints:
 
-When your workspace has it, the CLI prints a link and a code on stderr. You open the link, check the code and approve. The CLI then saves a new API key to the profile, the same kind you create in the app: it shows in your API key list, where you can revoke it. The CLI opens the browser itself only when no coding agent is detected and the machine has a display. An agent prints the link and asks you to open it. The login expires after 10 minutes (`login_expired`, exit 3), and a denied login exits 3 with `access_denied`.
+```json
+{"profile":"default","email":"you@acme.io","workspaceId":"1234","keyExpiresAt":"2027-02-02T06:26:59Z"}
+```
+
+The key is the same kind you create in the app. It is named `Kenso CLI - <device name>` (`--device-name`, else `kenso-cli on <hostname>`), lasts 90 days, and shows in your API key list at Settings > Integrations > API keys, where you can revoke it. The CLI opens the browser itself only when no coding agent is detected and the machine has a display. An agent prints the link and asks you to open it. The login expires after 10 minutes (`login_expired`, exit 3), and a denied login exits 3 with `access_denied`. If the API answers that browser login is off (`browser_login_unavailable`, exit 3, `"next":"kenso auth login --with-key"`), log in with an API key as above.
 
 ## CI, scripts and agents: use the environment
 

package/docs/reference.md

@@ -1,6 +1,6 @@
 # Kenso CLI command reference
 
-Generated from kenso 0.1.10 (API contracts 3d429b7be4f5) by `scripts/build-reference.ts`. Do not edit it: `pnpm build` writes it again.
+Generated from kenso 0.1.12 (API contracts 8ce9608dd496) by `scripts/build-reference.ts`. Do not edit it: `pnpm build` writes it again.
 
 1364 commands. Beta commands work only on workspaces with their feature flag; `kenso describe` hides the ones yours cannot use. Every command also takes the global flags below. For the same data as JSON, run `kenso describe <resource> <action>`.
 
@@ -2600,7 +2600,7 @@ kenso api-keys list --all
 
 Change the API version one of the caller's keys is pinned to.
 
-`apiVersion` (DEV-15) is a supported dated version, `1.1`, or `legacy`. A request made with an API key is `forbidden`: change pins signed in to the dashboard, or through the MCP signed in with OAuth. The new pin applies to the key's next request. Needs the Integrations permission in this workspace, like creating a key. A key you do not own is `not_found`. A revoked key is updated too. The change is written to the audit log (`api_key.updated`) of every workspace the key reaches, like creating or revoking it.
+`apiVersion` (DEV-15) is a supported dated version, `1.1`, or `legacy`. A request made with an API key is `forbidden`: change pins signed in to the dashboard, or through the MCP signed in with OAuth. The new pin applies to the key's next request. Needs the Integrations permission in this workspace, and for a key held to a permission template, in that template's workspace (`permission_denied`, DEV-7503). A key whose template was deleted, or whose workspace you left, works nowhere and is `permission_denied` too. A key with no template needs Integrations in this workspace only, like creating one. A key you do not own is `not_found`. A revoked key is updated too. The change is written to the audit log (`api_key.updated`) of every workspace the key reaches, like creating or revoking it.
 
 - API: `PATCH /v1/api-keys/{apiKeyId}`
 - Generated from the API contract
@@ -19503,7 +19503,7 @@ kenso meetings score-call --meeting-id <meeting-id>
 
 Move a meeting to another account, clear its account, make it private or shared, or choose whether the Kenso Notetaker bot joins.
 
-Body: `accountId` (an account you can see, or null to clear it; else `400`; a meeting with no account gets one only from its owner, else `403`), `isPrivate` (true or false; only the meeting's owner and workspace admins, else `403`) and `botMode` (auto, send or skip, else `400`; only the meeting's owner and workspace admins, else `403`; `403` with detail `feature_disabled` while the workspace does not have the Kenso Notetaker bot; skip takes back a bot waiting to join). Absent fields stay unchanged, and an unknown field is `400`. Changing the account moves no stage and stops nothing. Making a meeting private writes one `meeting.made_private` timeline row. `409 conflict` when the meeting kept changing while it was saved: read it again and retry. Returns the meeting with its capture and bot.
+Body: `accountId` (an account you can see, or null to clear it; else `400`; a meeting with no account gets one only from its owner, else `403`), `isPrivate` (true or false; only the meeting's owner and workspace admins, else `403`) and `botMode` (auto, send or skip, else `400`; only the meeting's owner and workspace admins, else `403`; `403` with detail `feature_disabled` while the workspace does not have the Kenso Notetaker bot; skip takes back a bot waiting to join, and one in the lobby or the call leaves it; what it recorded so far is kept). Absent fields stay unchanged, and an unknown field is `400`. Changing the account moves no stage and stops nothing. Making a meeting private writes one `meeting.made_private` timeline row. `409 conflict` when the meeting kept changing while it was saved: read it again and retry. Returns the meeting with its capture and bot.
 
 - Beta: needs the `meetings` feature flag on the workspace.
 - API: `PATCH /v1/meetings/{meetingId}`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kenso",
-  "version": "0.1.10",
+  "version": "0.1.12",
   "description": "The Kenso CLI: bulk lead, CRM and Studio work for people and coding agents",
   "license": "MIT",
   "type": "module",
@@ -44,5 +44,5 @@
     "typescript-eslint": "8.71.1",
     "vitest": "5.0.3"
   },
-  "gitHead": "eca7bd6f91723829c46ea58e72894e325a6f5abc"
+  "gitHead": "e3f99f0ad804362414f0a972e0b352fbae1a0f27"
 }