[ryota-murakami]

Summary

The owner's direction (2026-10-22): sign-ins the work needs are the agent's job, done without asking, because handing a login to the owner only stops the work. AGENTS.md's macOS Space paragraph (from #109) said the opposite, so every session would hand Copilot and Cursor sign-ins to the owner.

• macOS Space: the agent signs in to what the trials need (Copilot, Cursor, GitHub) itself, without asking. The paragraph keeps the two facts about sign-ins in the Space:
  • Cua Teleport carries the Mac Chrome's cookies into the Space's Chrome, the agent keeps only the needed sites, and it clicks through each app's sign-in. Only the Mac's Chrome Safe Storage prompt waits for the owner. This route was proven on 2026-10-22: Cursor and Copilot are both signed in inside local:codebook-qa.
  • A guest sign-in can be lost when the VM boots again; the teleported cookies stay.
• Owner directions, "Never without the owner": it now names "new or changed credentials", and it says that signing in with the owner's existing sessions is the agent's job.

Review

• Local CodeRabbit CLI: 1 major finding, declined. It asked for the site-scoped teleport_browser_session or a Keyvault site login instead of sending the Cookies item.
  • That route goes through the Cua Keyvault. The Keyvault is not set up here, and it needs an approval in the Cua app for every transfer.
  • It keeps a session for at most 1,440 minutes, so a persistent QA Space would need the owner again every day.
  • The owner directed sign-ins with no owner steps. The rule already keeps only the needed sites in the guest right after the transfer; on 2026-10-22 that was 85 cookies of github.com, Cursor and its WorkOS sign-in.
• open-code-review-delegate: no eligible file. AGENTS.md is a default exclusion (unsupported_ext), so the host reviewed it.
• node --test .codex/restore-product-context.test.mjs: 6 of 6 pass. The compaction hook restores 6,405 characters, within its 10,000-character limit, with the new rule.
• Required CI on the exact head.