@keystrokehq/cli 0.0.1 → 0.0.3

package/dist/{skills.command-CrjI2dN9.mjs → skills.command-DWxcc3Ui.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-DM4b7KgY.mjs";
-import { t as createTypedCommand } from "./commander-DfTVqQ-3.mjs";
+import { n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-q4KljAhu.mjs";
+import { t as createTypedCommand } from "./commander-DZ3F3CVq.mjs";
 import { z } from "zod";
 //#region src/commands/skills/skills.command.ts
 const SkillsCommandOptionsSchema = JsonOptionSchema.extend({ path: z.string().optional().describe("Project root (default: current directory)") });
@@ -18,13 +18,13 @@ function createSkillsCommand() {
 		description: "Sync Keystroke agent skills (SKILL.md) from @keystroke/skills",
 		schema: SkillsCommandOptionsSchema,
 		optionsConfig: SKILLS_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./skills.handler-Bz8bJKql.mjs")).handleSkillsParent,
+		loadHandler: async () => (await import("./skills.handler-8KCSF7wp.mjs")).handleSkillsParent,
 		subcommands: [createTypedCommand({
 			name: "sync",
 			description: "Copy installed @keystroke/skills into .cursor/skills and .claude/skills",
 			schema: SkillsCommandOptionsSchema,
 			optionsConfig: SKILLS_OPTIONS_CONFIG,
-			loadHandler: async () => (await import("./skills-sync.handler-DIy8GR16.mjs")).handleSkillsSync
+			loadHandler: async () => (await import("./skills-sync.handler-C2faeat-.mjs")).handleSkillsSync
 		})]
 	});
 	cmd.enablePositionalOptions();

package/dist/source-analysis-BspLa3E5.mjs

@@ -0,0 +1,75 @@
+#!/usr/bin/env node
+
+import { z } from "zod";
+//#region ../../packages/core/src/artifacts/source-analysis.ts
+const SourceLocationSchema = z.object({
+	filePath: z.string().min(1),
+	absoluteFilePath: z.string().min(1).optional(),
+	line: z.number().int().positive(),
+	column: z.number().int().positive(),
+	position: z.number().int().nonnegative().optional(),
+	endLine: z.number().int().positive(),
+	endColumn: z.number().int().positive(),
+	endPosition: z.number().int().nonnegative().optional(),
+	synthetic: z.boolean().optional()
+});
+const CallsiteFingerprintSchema = z.string().min(1);
+const ImportSourceSchema = z.object({
+	kind: z.enum([
+		"local",
+		"module-import",
+		"namespace-import",
+		"dynamic"
+	]),
+	moduleSpecifier: z.string().min(1).optional(),
+	importName: z.string().min(1).optional(),
+	localName: z.string().min(1).optional(),
+	resolvedPath: z.string().min(1).optional()
+});
+const CallKindSchema = z.enum([
+	"workflow-step",
+	"agent",
+	"tool",
+	"hook",
+	"child-workflow",
+	"function-call",
+	"method-call",
+	"dynamic-call",
+	"parallel-call",
+	"process-exit",
+	"iife",
+	"expression"
+]);
+const CapturedVariableSourceKindSchema = z.enum([
+	"local-const",
+	"relative-import",
+	"package-import"
+]);
+const CapturedVariableValueTypeSchema = z.enum([
+	"string",
+	"number",
+	"boolean",
+	"object",
+	"array",
+	"function",
+	"unknown"
+]);
+const CapturedVariableSchema = z.object({
+	name: z.string().min(1),
+	value: z.union([
+		z.string(),
+		z.number(),
+		z.boolean()
+	]).optional(),
+	sourceText: z.string().optional(),
+	valueType: CapturedVariableValueTypeSchema,
+	resolvable: z.boolean(),
+	source: CapturedVariableSourceKindSchema,
+	importPath: z.string().optional(),
+	declaration: z.object({
+		filePath: z.string().min(1),
+		line: z.number().int().positive()
+	})
+});
+//#endregion
+export { SourceLocationSchema as a, ImportSourceSchema as i, CallsiteFingerprintSchema as n, CapturedVariableSchema as r, CallKindSchema as t };

package/dist/{source-analysis-Cj-ADyu--BJQcFPCG.mjs → source-analysis-DEEChuND-eixwPnPP.mjs}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 
-import { d as getMetadataRoot } from "./layout-CbMtQ2tm.mjs";
-import { t as BASE_IGNORE_PATTERNS } from "./metadata-layout-GUYIUo0i-_aG2zjue.mjs";
-import { a as literalString, l as unwrapExpression, n as identifierName, r as isNode } from "./oxc-B3KI3rf_-n9d1hKNq.mjs";
+import { d as getMetadataRoot } from "./layout-B95Tku8F.mjs";
+import { t as BASE_IGNORE_PATTERNS } from "./metadata-layout-C6ed-9dl-aBmqqvD5.mjs";
+import { a as literalString, l as unwrapExpression, n as identifierName, r as isNode } from "./oxc-B3KI3rf_-BeimiQ2U.mjs";
 import { readFile, readdir, rm } from "node:fs/promises";
 import path from "node:path";
-//#region ../../packages/workflow-builder/dist/source-analysis-Cj-ADyu-.mjs
+//#region ../../packages/workflow-builder/dist/source-analysis-DEEChuND.mjs
 async function removeAllMetadataArtifacts(outputDir) {
 	await rm(getMetadataRoot(outputDir), {
 		recursive: true,
@@ -41,7 +41,7 @@ const DISCOVERY_GLOB = [
 	"**/*.mts"
 ];
 const DISCOVERY_IGNORE = [...BASE_IGNORE_PATTERNS, "**/dist/**"];
-const WORKFLOW_IMPORT_SOURCES = ["@keystroke/workflow-core"];
+const WORKFLOW_IMPORT_SOURCES = ["@keystrokehq/core"];
 const AGENT_FACTORY_IMPORT_SOURCES = ["@keystroke/integration-ai"];
 const AGENT_FACTORY_NAMES = ["agent"];
 function getLocalModuleSpecifier(moduleSpecifier) {

package/dist/{src-eHwu-Gfw.mjs → src-J09NGJ6Z.mjs}

@@ -1,6 +1,23 @@
 #!/usr/bin/env node
 
-import { a as createKyInstance, i as buildSearchParams, n as auth, r as bundles, s as getClientEnv, t as projects$1 } from "./projects-CHkRE9rS.mjs";
+import { a as createKyInstance, i as buildSearchParams, n as auth, r as bundles, s as getClientEnv, t as projects$1 } from "./projects-Bdl6-Z8l.mjs";
+//#region ../../packages/workflow-sdk/src/v1/admin.ts
+const admin = (api) => ({
+	orgs: {
+		/** Create an organization. Requires system.create_org. */
+		create: (params) => api.post("organizations", { json: params }).json(),
+		/** List all organizations. Requires system.view_orgs. */
+		list: (params) => api.get("admin/orgs", { searchParams: params }).json(),
+		/** Get any organization by ID. Requires system.view_orgs. */
+		get: (id) => api.get(`admin/orgs/${id}`).json()
+	},
+	users: {
+		list: (params) => api.get("admin/users", { searchParams: params }).json(),
+		get: (id) => api.get(`admin/users/${id}`).json(),
+		setRole: (id, params) => api.patch(`admin/users/${id}/system-role`, { json: params }).json()
+	}
+});
+//#endregion
 //#region ../../packages/workflow-sdk/src/v1/agents.ts
 const agents = (api) => ({ list: (params) => api.get("agents", { searchParams: params }).json() });
 //#endregion
@@ -96,7 +113,19 @@ const organizations = (api) => ({
 	/** Update an organization. */
 	update: (id, params) => api.patch(`organizations/${id}`, { json: params }).json(),
 	/** Delete an organization. */
-	remove: (id) => api.delete(`organizations/${id}`).json()
+	remove: (id) => api.delete(`organizations/${id}`).json(),
+	members: {
+		list: (organizationId) => api.get(`organizations/${organizationId}/members`).json(),
+		add: (organizationId, params) => api.post(`organizations/${organizationId}/members`, { json: params }).json(),
+		update: (organizationId, userId, params) => api.patch(`organizations/${organizationId}/members/${userId}`, { json: params }).json(),
+		remove: (organizationId, userId) => api.delete(`organizations/${organizationId}/members/${userId}`).json(),
+		invite: (params) => api.post("users/invite", { json: params }).json()
+	},
+	invites: {
+		list: (organizationId, params) => api.get(`organizations/${organizationId}/invites`, { searchParams: params }).json(),
+		resend: (organizationId, inviteId) => api.post(`organizations/${organizationId}/invites/${inviteId}/resend`).json(),
+		revoke: (organizationId, inviteId) => api.delete(`organizations/${organizationId}/invites/${inviteId}`).json()
+	}
 });
 //#endregion
 //#region ../../packages/workflow-sdk/src/v1/projects.ts
@@ -206,16 +235,22 @@ const userGroups = (api) => ({
 //#endregion
 //#region ../../packages/workflow-sdk/src/v1/users.ts
 const users = (api) => ({
-	/** Create a new user. */
-	create: (params) => api.post("users", { json: params }).json(),
 	/** Get the currently authenticated user. */
 	getMe: () => api.get("users/me").json(),
 	/** List current user's workflow subscriptions across projects. */
 	listSubscriptions: () => api.get("users/me/subscriptions").json(),
 	/** Get a user by ID. */
 	getById: (id) => api.get(`users/${id}`).json(),
-	/** Invite users to the current organization by email. */
-	invite: (params) => api.post("users/invite", { json: params }).json()
+	/**
+	* Invite users to an organization by email. When `organizationId` is omitted
+	* the server falls back to the caller's active org from the
+	* `X-Organization-Id` header. `role` defaults to `builder`.
+	*/
+	invite: (params) => api.post("users/invite", { json: params }).json(),
+	invites: {
+		listPending: () => api.get("users/me/invites").json(),
+		accept: (inviteId) => api.post(`users/me/invites/${inviteId}/accept`).json()
+	}
 });
 //#endregion
 //#region ../../packages/workflow-sdk/src/v1/webhooks.ts
@@ -348,6 +383,7 @@ function createClient(config = {}) {
 	}).extend((options) => ({ prefixUrl: `${options.prefixUrl}/api/v1` }));
 	return {
 		agents: agents(v1),
+		admin: admin(v1),
 		apiKeys: apiKeys(v1),
 		public: publicApi(v1),
 		bundles: bundles(v1),

package/dist/{switch.handler-D_9213Vf.mjs → switch.handler-C4hgbhcH.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 import { D as throwReportedCliExit, t as ui } from "./keystroke.mjs";
-import { u as setActiveOrg } from "./dist-CUK7yBM0.mjs";
-import { i as requireClient } from "./context-T7HZuB97.mjs";
+import { u as setActiveOrg } from "./dist-BF6r1hfv.mjs";
+import { i as requireClient } from "./context-Y1f1hGYy.mjs";
 import { select } from "@clack/prompts";
 //#region src/commands/org/switch.handler.ts
 async function handleOrgSwitch(_options, ctx) {

package/dist/{sync-BL_Mo5st.mjs → sync-CL6zXiiA.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as createTypedCommand } from "./commander-DfTVqQ-3.mjs";
+import { t as createTypedCommand } from "./commander-DZ3F3CVq.mjs";
 import { z } from "zod";
 //#region src/commands/sync/sync.command.ts
 /**
@@ -32,7 +32,7 @@ function createSyncCommand() {
 		description: "Sync local workflows with Keystroke",
 		schema: SyncOptionsSchema,
 		optionsConfig: SYNC_OPTIONS_CONFIG,
-		loadHandler: async () => (await import("./sync.handler-BUFPdzWz.mjs")).handleSync
+		loadHandler: async () => (await import("./sync.handler-D1uF8E8I.mjs")).handleSync
 	});
 }
 //#endregion

package/dist/{sync.handler-BUFPdzWz.mjs → sync.handler-D1uF8E8I.mjs}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 
 import { D as throwReportedCliExit, h as toErrorMessage, i as logger, t as ui } from "./keystroke.mjs";
-import { d as trackProject } from "./dist-CUK7yBM0.mjs";
-import { n as deployFromDir } from "./dist-BkJUoBiG.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-DDJ29sCF.mjs";
-import { a as runWorkflowBuild, n as renderBuildFailure, r as renderBuildHeader } from "./workflow-build-DBQaBfnn.mjs";
-import { r as isLocalMode } from "./env-91KwMKov.mjs";
-import { a as validateApiKey, i as requireClient } from "./context-T7HZuB97.mjs";
-import { t as createBuildProgress } from "./build-progress-DgYKb4hB.mjs";
-import { t as createDeployProgress } from "./deploy-progress-BmGUNFKg.mjs";
+import { d as trackProject } from "./dist-BF6r1hfv.mjs";
+import { r as isLocalMode } from "./env-YTZGKGIu.mjs";
+import { a as validateApiKey, i as requireClient } from "./context-Y1f1hGYy.mjs";
+import { n as deployFromDir } from "./dist-C2Dq_nx3.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-DgfftdPm.mjs";
+import { a as runWorkflowBuild, n as renderBuildFailure, r as renderBuildHeader } from "./workflow-build-BcaIdRR6.mjs";
+import { t as createBuildProgress } from "./build-progress-Cn2j1LqF.mjs";
+import { t as createDeployProgress } from "./deploy-progress-CZ2rPlOj.mjs";
 //#region src/commands/sync/sync.handler.ts
 async function handleSync(options, ctx) {
 	try {

package/dist/{schemas-CDib1RhE.mjs → task-DsrXI6XH.mjs}

@@ -1,44 +1,12 @@
 #!/usr/bin/env node
 
-import { A as idNoSpacesString, C as CredentialSetManifestSchema, I as trimmedNonEmptyString, L as trimmedNonEmptyStringUnbounded, N as optionalDescriptionString, O as createStructuralSchema, V as SHA256HashSchema, f as TriggerTypeSchema, j as jsonSchemaObject, k as descriptionString, s as ExecutionIdentityPolicySchema, t as DurationSchema } from "./schedule-BXx3uXwr.mjs";
+import { n as __exportAll } from "./chunk-CH6r78ws.mjs";
+import { r as SHA256HashSchema } from "./common-BrVAdUyD.mjs";
+import { a as idNoSpacesString, c as optionalDescriptionString, f as trimmedNonEmptyString, n as createStructuralSchema, o as jsonSchemaObject, p as trimmedNonEmptyStringUnbounded } from "./schema-kbMHVnhm.mjs";
+import { t as DurationSchema } from "./schedule-BRN4hzQM.mjs";
+import { n as TriggerRuntimeDescriptorSchema, t as TriggerManifestSchema } from "./schemas-DsvCZfF0.mjs";
 import { z } from "zod";
-//#region ../../packages/workflow-core/src/trigger/schemas.ts
-const credentialSetInstanceSchema = createStructuralSchema([
-	"id",
-	"auth",
-	"needsResolve"
-], "a CredentialSet instance");
-const TriggerModeDefaultSchema = z.enum(["managed", "subscribable"]);
-const TriggerCallbackPresenceSchema = z.object({
-	filter: z.boolean(),
-	idempotencyKey: z.boolean(),
-	poll: z.boolean().optional(),
-	transformAllowed: z.boolean(),
-	verify: z.boolean().optional()
-});
-const TriggerRuntimeDescriptorSchema = z.object({ callbacks: TriggerCallbackPresenceSchema });
-const TriggerManifestSchema = z.object({
-	manifestVersion: z.literal(1),
-	type: z.literal("trigger"),
-	triggerType: TriggerTypeSchema,
-	name: trimmedNonEmptyString("Trigger name"),
-	description: descriptionString("Trigger description"),
-	enabled: z.boolean(),
-	modeDefault: TriggerModeDefaultSchema,
-	executionIdentityPolicy: ExecutionIdentityPolicySchema.optional(),
-	credentialSets: z.array(CredentialSetManifestSchema).optional(),
-	runtime: TriggerRuntimeDescriptorSchema
-});
-const triggerBaseConfigSchema = z.object({
-	credentialSets: z.array(credentialSetInstanceSchema).optional(),
-	description: descriptionString("Trigger description"),
-	enabled: z.boolean().default(true),
-	executionIdentityPolicy: ExecutionIdentityPolicySchema.optional(),
-	modeDefault: TriggerModeDefaultSchema.default("managed"),
-	name: trimmedNonEmptyString("Trigger name")
-});
-//#endregion
-//#region ../../packages/workflow-core/src/task/schemas.ts
+//#region ../../packages/core/src/task/schemas.ts
 const agentInstanceSchema = createStructuralSchema([
 	"id",
 	"name",
@@ -122,4 +90,7 @@ const TaskBuildManifestSchema = z.object({
 	buildInfo: TaskBuildInfoStubSchema
 }).strict();
 //#endregion
-export { TriggerRuntimeDescriptorSchema as n, triggerBaseConfigSchema as r, TaskBuildManifestSchema as t };
+//#region ../../packages/core/src/task/index.ts
+var task_exports = /* @__PURE__ */ __exportAll({ TaskBuildManifestSchema: () => TaskBuildManifestSchema });
+//#endregion
+export { TaskBuildManifestSchema as n, task_exports as t };

package/dist/{task-target-build-CBeCKbu2.mjs → task-target-build-DTzz4fpG.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-KA0Iw0Z1.mjs";
+import { t as readCredentialKeysFromSchemaObject } from "./read-credential-keys-77a91T8M-CAJLnMRi.mjs";
 import { mkdir, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
@@ -109,7 +109,7 @@ async function buildTaskTargetFile(options) {
 	return builtTasks;
 }
 async function bundleTaskTargetModule(options) {
-	const [{ rolldown }, { createEnvAccessPlugin, formatEnvAccessError }] = await Promise.all([import("rolldown"), import("./detect-env-access-CwkOYeYM-D_BCZqV6.mjs").then((n) => n.n).then((n) => n.n)]);
+	const [{ rolldown }, { createEnvAccessPlugin, formatEnvAccessError }] = await Promise.all([import("rolldown"), import("./detect-env-access-CwkOYeYM-h2W05D_Q.mjs").then((n) => n.n).then((n) => n.n)]);
 	const entryId = "\0virtual:task-target-entry";
 	const trackedDependencies = /* @__PURE__ */ new Set();
 	const envViolations = [];
@@ -216,7 +216,7 @@ async function attachTaskTargetTriggers(options) {
 		options.artifact.triggers.push(...buildTaskTriggerArtifactsWithoutBundles(options.entry.taskMetadata.triggers, options.artifact.task.taskId, options.artifact.task.taskName));
 		return [];
 	}
-	const { buildTriggerArtifacts } = await import("./trigger-artifacts-DQPbQNqC-B4yeeFBY.mjs").then((n) => n.n);
+	const { buildTriggerArtifacts } = await import("./trigger-artifacts-B3OCTX9K-DG-FGGJT.mjs").then((n) => n.n);
 	const triggerResult = await buildTriggerArtifacts(options.entry.taskMetadata.triggers, options.artifact.task.taskId, options.artifact.task.taskName, options.projectRoot, {
 		workflowExportName: options.entry.source.localExportName,
 		workflowFilePath: options.entry.runtimeBundlePath
@@ -319,7 +319,7 @@ function createPreparedTaskTarget(artifact, triggers) {
 	};
 }
 async function tryParseTaskBuildManifest(manifest) {
-	const { TaskBuildManifestSchema } = await import("./task-B2sZMaZu.mjs").then((n) => n.t);
+	const { TaskBuildManifestSchema } = await import("./task-DsrXI6XH.mjs").then((n) => n.t);
 	const result = TaskBuildManifestSchema.safeParse(manifest);
 	return result.success ? result.data : null;
 }

package/dist/task-target-deploy-BPLlP__P.mjs

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+
+import { n as deployTaskTargets } from "./task-target-deploy-Bf5i3ox1-BU16VPsE.mjs";
+export { deployTaskTargets };

package/dist/{task-target-deploy-CA6elFpF-BEr4gkol.mjs → task-target-deploy-Bf5i3ox1-BU16VPsE.mjs}

@@ -1,7 +1,6 @@
 #!/usr/bin/env node
 
-import { V as SHA256HashSchema } from "./schedule-BXx3uXwr.mjs";
-import "./_manifest-JSRE3H8k.mjs";
+import { r as SHA256HashSchema } from "./common-BrVAdUyD.mjs";
 import { createHash } from "node:crypto";
 //#region ../../packages/shared-types/src/deployments/api/snapshot-payload.ts
 function sortObjectKeysDeep(value) {
@@ -101,7 +100,7 @@ function buildCanonicalProjectSnapshotPayload(params) {
 	};
 }
 //#endregion
-//#region ../../packages/workflow-deploy/dist/task-target-deploy-CA6elFpF.mjs
+//#region ../../packages/workflow-deploy/dist/task-target-deploy-Bf5i3ox1.mjs
 function computeProjectSnapshotHash(params) {
 	const hex = createHash("sha256").update(JSON.stringify(buildCanonicalProjectSnapshotPayload({
 		workflows: params.workflows,

package/dist/task-target-deploy-runner.mjs

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 
-import { l as resolveAuthOptions } from "./dist-CUK7yBM0.mjs";
-import { n as findProjectRoot, t as assertWorkflowProjectRoot } from "./project-config-D1qsQlO7.mjs";
+import "./default-urls-BS4twrsS.mjs";
+import { l as resolveAuthOptions } from "./dist-BF6r1hfv.mjs";
+import { n as findProjectRoot, t as assertWorkflowProjectRoot } from "./project-config-opj6DsPF.mjs";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
@@ -50,8 +51,8 @@ function parseArgs(argv) {
 		} else if (arg === "--api-key") {
 			options.apiKey = argv[index + 1];
 			index += 1;
-		} else if (arg === "--base-url") {
-			options.baseUrl = argv[index + 1];
+		} else if (arg === "--server-url") {
+			options.serverUrl = argv[index + 1];
 			index += 1;
 		} else if (arg === "--org") {
 			options.org = argv[index + 1];
@@ -103,7 +104,7 @@ function restartStage(options, projectRoot, stage) {
 		...options.force ? ["--force"] : [],
 		...options.disableSourcemaps ? ["--disable-sourcemaps"] : [],
 		...options.apiKey ? ["--api-key", options.apiKey] : [],
-		...options.baseUrl ? ["--base-url", options.baseUrl] : [],
+		...options.serverUrl ? ["--server-url", options.serverUrl] : [],
 		...options.org ? ["--org", options.org] : [],
 		...options.targetFiles.flatMap((targetFile) => ["--target", targetFile])
 	];
@@ -115,7 +116,7 @@ function restartStage(options, projectRoot, stage) {
 }
 async function runBuildPhase(options, projectRoot) {
 	const projectConfig = await assertWorkflowProjectRoot(projectRoot);
-	const { buildTaskTargetEntries } = await import("./task-target-build-CBeCKbu2.mjs");
+	const { buildTaskTargetEntries } = await import("./task-target-build-DTzz4fpG.mjs");
 	await writeBuildDescriptor(projectRoot, {
 		projectRoot,
 		projectConfig,
@@ -128,7 +129,7 @@ async function runBuildPhase(options, projectRoot) {
 }
 async function runPreparePhase(projectRoot) {
 	const buildDescriptor = await readBuildDescriptor(projectRoot);
-	const { prepareTaskTargetBuiltTasks } = await import("./task-target-build-CBeCKbu2.mjs");
+	const { prepareTaskTargetBuiltTasks } = await import("./task-target-build-DTzz4fpG.mjs");
 	const prepareResult = await prepareTaskTargetBuiltTasks({
 		builtTasks: buildDescriptor.builtTasks,
 		projectRoot
@@ -143,25 +144,25 @@ async function runPreparePhase(projectRoot) {
 async function resolveDeployAuthOptions(options) {
 	const resolved = await resolveAuthOptions({
 		apiKey: options.apiKey,
-		baseUrl: options.baseUrl
+		serverUrl: options.serverUrl
 	});
-	const apiKey = options.apiKey ?? resolved.apiKey ?? process.env.KEYSTROKE_API_KEY;
-	const baseUrl = options.baseUrl ?? resolved.baseUrl ?? process.env.SERVER_URL;
+	const apiKey = resolved.apiKey ?? process.env.KEYSTROKE_API_KEY;
+	const serverUrl = resolved.serverUrl ?? process.env.SERVER_URL ?? "https://api.kestroke.ai";
 	const organizationId = options.org ?? process.env.KEYSTROKE_ORG_ID ?? resolved.activeOrg?.organizationId;
-	if (!apiKey || !baseUrl) throw new Error("Not authenticated. Run `keystroke auth` or pass --api-key and --base-url.");
+	if (!apiKey || !serverUrl) throw new Error("Not authenticated. Run `keystroke auth` or pass --api-key and --server-url.");
 	return {
 		apiKey,
-		baseUrl,
+		baseUrl: serverUrl,
 		...organizationId ? { organizationId } : {}
 	};
 }
 async function runDeployPhase(options, projectRoot) {
 	const descriptor = await readDescriptor(projectRoot);
-	const { createDeployClient } = await import("./deploy-7Jjls436.mjs");
+	const { createDeployClient } = await import("./deploy-CdnaZY3s.mjs");
 	const client = createDeployClient(await resolveDeployAuthOptions(options));
 	const auth = await client.public.auth.validate();
 	if (auth.organizationId !== descriptor.projectConfig.organizationId) throw new Error(`Project organization mismatch: config=${descriptor.projectConfig.organizationId} auth=${auth.organizationId}`);
-	const { deployTaskTargets } = await import("./task-target-deploy-C5X-USeR.mjs");
+	const { deployTaskTargets } = await import("./task-target-deploy-BPLlP__P.mjs");
 	const result = await deployTaskTargets({
 		preparedTasks: descriptor.preparedTasks,
 		client,

package/dist/{test-BHTgR3UA.mjs → test-BsTLXIPB.mjs}

@@ -1,25 +1,25 @@
 #!/usr/bin/env node
 
 import { C as CliExitError, D as throwReportedCliExit, h as toErrorMessage, t as ui } from "./keystroke.mjs";
-import { l as resolveAuthOptions } from "./dist-CUK7yBM0.mjs";
-import { t as assertWorkflowProjectRoot } from "./project-config-D1qsQlO7.mjs";
-import { i as writeJson, n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-DM4b7KgY.mjs";
-import { t as createTypedCommand } from "./commander-DfTVqQ-3.mjs";
-import { a as readManifestsFromOutDir } from "./dist-BkJUoBiG.mjs";
-import { t as requireWorkflowsDir } from "./resolve-project-DDJ29sCF.mjs";
-import { _ as getOfficialIntegrationMetadata, a as clearHostedActionDispatcher, c as registerHostedActionExecutionPolicy, d as clearOperationContext, f as registerOperationContext, g as registerRuntime, h as clearRuntime, l as clearOperationCredentialResolver, o as clearHostedActionExecutionPolicy, s as registerHostedActionDispatcher, u as registerOperationCredentialResolver } from "./src-C0X6u_Mw.mjs";
-import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-DBQaBfnn.mjs";
-import { n as getProcessEnv } from "./env-91KwMKov.mjs";
-import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-T7HZuB97.mjs";
-import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-poHt27i3.mjs";
-import { n as WorkflowsRunOptionsSchema, t as RUN_OPTIONS_CONFIG } from "./options-CeaTcFxP.mjs";
-import { a as validateInputOrExit, i as resolveInput, r as pollForCompletion, t as handleWorkflowsTryDeploy } from "./try-deploy.handler-DqybNhXx.mjs";
+import { l as resolveAuthOptions } from "./dist-BF6r1hfv.mjs";
+import { t as assertWorkflowProjectRoot } from "./project-config-opj6DsPF.mjs";
+import { i as writeJson, n as JsonOptionSchema, t as JSON_OPTION_CONFIG } from "./output-q4KljAhu.mjs";
+import { t as createTypedCommand } from "./commander-DZ3F3CVq.mjs";
+import { n as getProcessEnv } from "./env-YTZGKGIu.mjs";
+import { i as requireClient, t as assertProjectConfigMatchesAuthenticatedOrg } from "./context-Y1f1hGYy.mjs";
+import { a as readManifestsFromOutDir } from "./dist-C2Dq_nx3.mjs";
+import { t as requireWorkflowsDir } from "./resolve-project-DgfftdPm.mjs";
+import { a as registerHostedActionDispatcher, c as registerOperationCredentialResolver, f as registerOperationContext, g as getOfficialIntegrationMetadata, h as registerRuntime, n as clearHostedActionExecutionPolicy, o as registerHostedActionExecutionPolicy, p as clearRuntime, s as clearOperationCredentialResolver, t as clearHostedActionDispatcher, u as clearOperationContext } from "./hosted-action-dispatcher-registry-TOVzMhUR.mjs";
+import { a as runWorkflowBuild, n as renderBuildFailure } from "./workflow-build-BcaIdRR6.mjs";
+import { t as lookupCurrentDeploymentWorkflow } from "./current-deployment-workflow-M8GEIHxv.mjs";
+import { n as WorkflowsRunOptionsSchema, t as RUN_OPTIONS_CONFIG } from "./options-Dn9t3K4a.mjs";
+import { a as validateInputOrExit, i as resolveInput, r as pollForCompletion, t as handleWorkflowsTryDeploy } from "./try-deploy.handler-2aX5TmLk.mjs";
 import { mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
 import { z } from "zod";
 import { pathToFileURL } from "node:url";
-//#region ../../packages/workflow-core/src/test-runtime/credentials/env-resolver.ts
+//#region ../../packages/core/src/test-runtime/credentials/env-resolver.ts
 /**
 * Computes the env var name for a credential key.
 * Uses the credential set's namespace as the prefix if present, otherwise the raw id.
@@ -51,7 +51,7 @@ function resolveCredentialsFromEnv(credentialSet, options = {}) {
 	};
 }
 //#endregion
-//#region ../../packages/workflow-core/src/test-runtime/credentials/cache.ts
+//#region ../../packages/core/src/test-runtime/credentials/cache.ts
 function createCredentialCache() {
 	const cache = /* @__PURE__ */ new Map();
 	return { async getOrCreate(key, createValue) {
@@ -66,7 +66,7 @@ function createCredentialCache() {
 	} };
 }
 //#endregion
-//#region ../../packages/workflow-core/src/test-runtime/credentials/server-resolver.ts
+//#region ../../packages/core/src/test-runtime/credentials/server-resolver.ts
 async function createServerCredentialResolver(options, dependencies = {
 	fetch: globalThis.fetch,
 	resolveAuthOptions
@@ -74,16 +74,16 @@ async function createServerCredentialResolver(options, dependencies = {
 	try {
 		const resolvedAuth = await dependencies.resolveAuthOptions({
 			apiKey: options.apiKey,
-			baseUrl: options.baseUrl,
+			serverUrl: options.baseUrl,
 			credentialsPath: options.credentialsPath
 		});
-		if (!resolvedAuth.apiKey || !resolvedAuth.baseUrl) return;
+		if (!resolvedAuth.apiKey || !resolvedAuth.serverUrl) return;
 		const cache = createCredentialCache();
 		return { async resolveCredentialSet(credentialSet, keys) {
 			const resolvedCredentialSetId = credentialSet.resolvedCredentialSetId;
 			const cacheKey = `${resolvedCredentialSetId}:${[...keys].sort().join(",")}`;
 			return cache.getOrCreate(cacheKey, async () => {
-				const response = await dependencies.fetch(new URL("api/v1/credentials/resolve", resolvedAuth.baseUrl).toString(), {
+				const response = await dependencies.fetch(new URL("api/v1/credentials/resolve", resolvedAuth.serverUrl).toString(), {
 					method: "POST",
 					headers: {
 						Authorization: `Bearer ${resolvedAuth.apiKey}`,
@@ -129,7 +129,7 @@ function humanizeCredentialSetLabel(credentialSet) {
 	return credentialSet.id.split(/[-_]/u).filter(Boolean).map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join(" ");
 }
 //#endregion
-//#region ../../packages/workflow-core/src/test-runtime/credentials/create-test-credential-resolver.ts
+//#region ../../packages/core/src/test-runtime/credentials/create-test-credential-resolver.ts
 function pickMissingCredentialSets(credentialSets, existingCredentials) {
 	return credentialSets.filter((credentialSet) => existingCredentials?.[credentialSet.id] === void 0);
 }
@@ -188,10 +188,10 @@ async function createTestCredentialResolver(options, runtimeOptions = {}) {
 	} };
 }
 //#endregion
-//#region ../../packages/workflow-core/src/test-runtime/credentials/options.ts
+//#region ../../packages/core/src/test-runtime/credentials/options.ts
 const DEFAULT_TEST_CREDENTIAL_MODE = "auto";
 //#endregion
-//#region ../../packages/workflow-core/src/shared/create-mock-hook.ts
+//#region ../../packages/core/src/shared/create-mock-hook.ts
 /**
 * Creates a Hook that resolves immediately when awaited.
 *
@@ -216,7 +216,7 @@ function createMockHook() {
 	};
 }
 //#endregion
-//#region ../../packages/workflow-core/src/test-runtime/helpers/create-test-workflow-context.ts
+//#region ../../packages/core/src/test-runtime/helpers/create-test-workflow-context.ts
 function createTestWorkflowContext(options = {}) {
 	return {
 		createHook: options.createHook ?? ((_name) => createMockHook()),
@@ -228,7 +228,7 @@ function createTestWorkflowContext(options = {}) {
 	};
 }
 //#endregion
-//#region ../../packages/workflow-core/src/test-runtime/hosted-actions/create-test-hosted-action-dispatcher.ts
+//#region ../../packages/core/src/test-runtime/hosted-actions/create-test-hosted-action-dispatcher.ts
 function createHostedDispatchError(integrationId, sourceLabel, detail, cause) {
 	const message = `Hosted integration "${integrationId}" failed in ${sourceLabel}. ${detail}`;
 	return cause instanceof Error ? new Error(message, { cause }) : new Error(message);
@@ -245,7 +245,7 @@ async function createTestHostedActionDispatcher(options, dependencies = {
 	try {
 		resolvedAuth = await dependencies.resolveAuthOptions({
 			apiKey: options.apiKey,
-			baseUrl: options.baseUrl,
+			serverUrl: options.baseUrl,
 			credentialsPath: options.credentialsPath
 		});
 	} catch (error) {
@@ -256,11 +256,11 @@ async function createTestHostedActionDispatcher(options, dependencies = {
 		const publicCredentialSetId = (operation.credentialSets ?? [])[0]?.id ?? integrationId;
 		if (authResolutionError) throw createHostedDispatchError(integrationId, sourceLabel, "Run `keystroke auth` and ensure the Keystroke dev server URL is configured before retrying.", authResolutionError);
 		if (!resolvedAuth?.apiKey) throw createHostedDispatchError(integrationId, sourceLabel, "Run `keystroke auth` so the test runtime can authenticate hosted action dispatch.");
-		if (!resolvedAuth.baseUrl) throw createHostedDispatchError(integrationId, sourceLabel, "Configure the Keystroke dev server URL and retry.");
-		const { apiKey, baseUrl } = resolvedAuth;
+		if (!resolvedAuth.serverUrl) throw createHostedDispatchError(integrationId, sourceLabel, "Configure the Keystroke dev server URL and retry.");
+		const { apiKey, serverUrl } = resolvedAuth;
 		const organizationId = resolvedAuth.activeOrg?.organizationId ?? "local";
 		try {
-			const response = await dependencies.fetch(new URL("/api/v1/hosted-actions/dispatch", baseUrl).toString(), {
+			const response = await dependencies.fetch(new URL("/api/v1/hosted-actions/dispatch", serverUrl).toString(), {
 				method: "POST",
 				headers: {
 					Authorization: `Bearer ${apiKey}`,
@@ -299,7 +299,7 @@ async function createTestHostedActionDispatcher(options, dependencies = {
 	} };
 }
 //#endregion
-//#region ../../packages/workflow-core/src/test-runtime/runtime/create-keystroke-test-runtime.ts
+//#region ../../packages/core/src/test-runtime/runtime/create-keystroke-test-runtime.ts
 async function createKeystrokeTestRuntime(options = {}) {
 	clearHostedActionDispatcher();
 	clearHostedActionExecutionPolicy();
@@ -340,7 +340,7 @@ async function createKeystrokeTestRuntime(options = {}) {
 	} };
 }
 //#endregion
-//#region ../../packages/workflow-core/src/test-runtime/tools/create-test-tool-context.ts
+//#region ../../packages/core/src/test-runtime/tools/create-test-tool-context.ts
 /**
 * Builds a minimal `OperationRunContext` for tool/step unit tests.
 *
@@ -357,7 +357,7 @@ function createTestToolContext(options = {}) {
 	};
 }
 //#endregion
-//#region ../../packages/workflow-core/src/test-runtime/tools/run-tool.ts
+//#region ../../packages/core/src/test-runtime/tools/run-tool.ts
 async function runTool(tool, input, options) {
 	const ctx = createTestToolContext(options);
 	return tool.run(input, ctx);

package/dist/{test.handler-BcPQ8b74.mjs → test.handler-D25kziPi.mjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { t as ui } from "./keystroke.mjs";
-import { a as validateApiKey, i as requireClient } from "./context-T7HZuB97.mjs";
+import { a as validateApiKey, i as requireClient } from "./context-Y1f1hGYy.mjs";
 //#region src/commands/auth/test.handler.ts
 async function handleAuthTest(_options, ctx) {
 	const result = await validateApiKey(requireClient(ctx));