Known issues
Problems that live assistant runs against Kiosk operators have hit in the assistant's own environment. None is a protocol defect, so none is in the skill.
The helper scripts cannot import cryptography or jwt after pip install succeeded
Cause: pip installed into one Python and the script ran under another; a machine often has several (the system one, Homebrew's, one in ~/.local/bin, the assistant's own).
Fix: create one venv, python3 -m venv ~/.kiosk/venv, and run both ~/.kiosk/venv/bin/pip and every script through ~/.kiosk/venv/bin/python.
The assistant's browser tool fails with Cannot find module …/cli.js
Cause: the assistant runtime's own Node or npx install is broken. Kiosk needs no browser on the assistant's side: every call is plain HTTPS, and the pages for linking an account or saving a card are opened by the human.
Fix: call the API over HTTP (curl, Python) and repair the runtime's Node install separately.