@keystrokehq/cli 0.0.50 → 0.0.53

package/dist/{dist-CnoekdhF-nc3ePIKw.mjs → dist-CXHSlVhd-CTQzOALD.mjs}

@@ -27,17 +27,561 @@ const ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 (function(ZodFirstPartyTypeKind) {})(ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {}));
 //#endregion
-//#region ../../packages/keystroke/dist/dist-D3ZYp8vx.mjs
-/** URL segment reserved for global (non-org) routes — cannot be used as an org slug. */
-const RESERVED_ORGANIZATION_SLUGS = new Set([
-	"api",
+//#region ../../packages/keystroke/dist/dist-CSBkgefj.mjs
+/** Auth, session, and account-entry URL segments. */
+const AUTH_ACCOUNT_SLUGS = [
+	"2fa",
+	"accept-invite",
+	"auth",
+	"authorize",
+	"callback",
+	"callbacks",
+	"confirm-email",
+	"confirmation",
+	"connect",
 	"device",
+	"email-verification",
+	"forgot-password",
+	"invite",
+	"invites",
 	"login",
+	"logout",
+	"magic-link",
+	"mfa",
+	"oauth",
 	"onboarding",
+	"password",
+	"recovery",
+	"register",
+	"reset-password",
+	"saml",
+	"session",
+	"sessions",
+	"sign-in",
+	"sign-up",
+	"signin",
+	"signout",
+	"signup",
+	"sso",
+	"token",
+	"tokens",
+	"unlink",
+	"verify",
+	"verify-email"
+];
+/** Org, workspace, billing, and account-management URL segments. */
+const ORG_ACCOUNT_SLUGS = [
+	"account",
+	"accounts",
+	"billing",
+	"console",
+	"invoice",
+	"invoices",
+	"member",
+	"members",
+	"me",
+	"org",
 	"organization",
-	"signup"
+	"organizations",
+	"orgs",
+	"payment",
+	"payments",
+	"plan",
+	"plans",
+	"portal",
+	"preferences",
+	"profile",
+	"settings",
+	"subscription",
+	"subscriptions",
+	"team",
+	"teams",
+	"upgrade",
+	"usage",
+	"user",
+	"users",
+	"workspace",
+	"workspaces"
+];
+/** Product surfaces, resource types, and in-app navigation segments. */
+const PRODUCT_SLUGS = [
+	"action",
+	"actions",
+	"activity",
+	"agent",
+	"agents",
+	"analytics",
+	"app",
+	"apps",
+	"artifact",
+	"artifacts",
+	"assistant",
+	"assistants",
+	"audit",
+	"audit-log",
+	"automation",
+	"automations",
+	"branch",
+	"branches",
+	"canvas",
+	"chat",
+	"chats",
+	"connection",
+	"connections",
+	"create",
+	"credential",
+	"credentials",
+	"dashboard",
+	"deployment",
+	"deployments",
+	"examples",
+	"execute",
+	"execution",
+	"executions",
+	"explore",
+	"get-started",
+	"history",
+	"inbox",
+	"inspector",
+	"integration",
+	"integrations",
+	"library",
+	"logs",
+	"marketplace",
+	"mcp",
+	"mcps",
+	"new",
+	"notifications",
+	"observe",
+	"plugin",
+	"plugins",
+	"primitive",
+	"primitives",
+	"project",
+	"projects",
+	"recents",
+	"registry",
+	"reports",
+	"run",
+	"runs",
+	"runtime",
+	"runtimes",
+	"sandbox",
+	"sandboxes",
+	"search",
+	"skill",
+	"skills",
+	"templates",
+	"thread",
+	"threads",
+	"trigger",
+	"triggers",
+	"version",
+	"versions",
+	"workflow",
+	"workflows"
+];
+/** Marketing, docs, company, and go-to-market URL segments. */
+const MARKETING_SITE_SLUGS = [
+	"about",
+	"affiliates",
+	"ai",
+	"announcements",
+	"anthropic",
+	"blog",
+	"book-demo",
+	"brand",
+	"campaigns",
+	"career",
+	"careers",
+	"case-studies",
+	"casestudies",
+	"changelog",
+	"chatgpt",
+	"chrome-extension",
+	"claude",
+	"codex",
+	"community",
+	"company",
+	"compare",
+	"contact",
+	"contribute",
+	"creators",
+	"customers",
+	"demo",
+	"demos",
+	"discord",
+	"docs",
+	"documentation",
+	"download",
+	"downloads",
+	"dust",
+	"emerging-talent",
+	"engineering-blog",
+	"enterprise",
+	"events",
+	"experts",
+	"extension",
+	"faq",
+	"faqs",
+	"features",
+	"forum",
+	"glean",
+	"grok",
+	"guide",
+	"guides",
+	"gumloop",
+	"handbook",
+	"help",
+	"help-center",
+	"home",
+	"how-it-works",
+	"howitworks",
+	"inspo",
+	"intern",
+	"investors",
+	"jobs",
+	"keystroke",
+	"legal",
+	"lindy",
+	"llm",
+	"llms",
+	"love",
+	"make",
+	"manifesto",
+	"media",
+	"merch",
+	"mission",
+	"mobile",
+	"models",
+	"n8n",
+	"news",
+	"newsroom",
+	"open",
+	"open-claw",
+	"open-source",
+	"openai",
+	"our-story",
+	"overview",
+	"partners",
+	"pi",
+	"pipedream",
+	"platform",
+	"press",
+	"press-kit",
+	"pricing",
+	"privacy",
+	"product",
+	"products",
+	"provider",
+	"providers",
+	"quick-start",
+	"quickstart",
+	"refer",
+	"relay",
+	"relay-app",
+	"reporting",
+	"request-demo",
+	"resources",
+	"roadmap",
+	"schedule-demo",
+	"security",
+	"solutions",
+	"stack-ai",
+	"stackai",
+	"startup",
+	"startups",
+	"status",
+	"stories",
+	"story",
+	"students",
+	"support",
+	"swag",
+	"switch",
+	"talent",
+	"terms",
+	"testimonials",
+	"thesis",
+	"tines",
+	"trust",
+	"tutorials",
+	"university",
+	"use-case",
+	"use-cases",
+	"usecases",
+	"versus",
+	"vellum",
+	"vs",
+	"webinars",
+	"workato",
+	"xai",
+	"yc",
+	"zapier"
+];
+/** Integrations, competitors, and partner brand slugs (marketing / integration pages). */
+const INTEGRATION_BRAND_SLUGS = [
+	"airtable",
+	"asana",
+	"aws",
+	"azure",
+	"bun",
+	"confluence",
+	"copilot",
+	"cursor",
+	"databricks",
+	"figma",
+	"firebase",
+	"fly",
+	"gcp",
+	"gemini",
+	"github",
+	"gitlab",
+	"gmail",
+	"heroku",
+	"hubspot",
+	"huggingface",
+	"jira",
+	"linear",
+	"mailchimp",
+	"meta",
+	"mistral",
+	"mixmax",
+	"monday",
+	"netlify",
+	"neon",
+	"notion",
+	"npm",
+	"outlook",
+	"outreach",
+	"perplexity",
+	"planetscale",
+	"pnpm",
+	"postmark",
+	"ramp",
+	"railway",
+	"render",
+	"resend",
+	"salesforce",
+	"segment",
+	"sendgrid",
+	"shopify",
+	"slack",
+	"snowflake",
+	"stripe",
+	"supabase",
+	"terraform",
+	"trello",
+	"turso",
+	"twilio",
+	"typeform",
+	"vercel",
+	"vscode",
+	"windsurf",
+	"yarn"
+];
+/** Company, team, and department landing-page segments. */
+const COMPANY_TEAM_SLUGS = [
+	"engineers",
+	"engineering",
+	"executives",
+	"hc",
+	"intern",
+	"it",
+	"leadership",
+	"marketing",
+	"ops",
+	"revops",
+	"sales",
+	"services",
+	"tech"
+];
+/** Legal, trust, compliance, and policy URL segments. */
+const LEGAL_TRUST_SLUGS = [
+	"accessibility",
+	"agreement",
+	"a11y",
+	"bug-bounty",
+	"compliance",
+	"cookie-policy",
+	"cookies",
+	"disclose",
+	"dpa",
+	"eula",
+	"gdpr",
+	"hipaa",
+	"iso",
+	"msa",
+	"pci",
+	"responsible-disclosure",
+	"sla",
+	"soc2",
+	"tos",
+	"trust-center",
+	"trustcenter",
+	"vulnerability"
+];
+/** Developer, API, CLI, and technical URL segments. */
+const DEVELOPER_TECH_SLUGS = [
+	"api",
+	"api-docs",
+	"cli",
+	"code",
+	"config",
+	"developer",
+	"developer-tools",
+	"developers",
+	"dev-tools",
+	"devtools",
+	"dev",
+	"dev-states",
+	"graphql",
+	"graphql-playground",
+	"mcp-server",
+	"mcp-servers",
+	"openapi",
+	"sdk",
+	"swagger"
+];
+/** Infra, ops, static assets, and system URL segments. */
+const INFRA_SYSTEM_SLUGS = [
+	"acme-challenge",
+	"admin",
+	"apple-app-site-association",
+	"assets",
+	"batch",
+	"cache",
+	"cdn",
+	"cron",
+	"debug",
+	"error",
+	"errors",
+	"favicon",
+	"feed",
+	"files",
+	"health",
+	"healthcheck",
+	"healthz",
+	"hooks",
+	"internal",
+	"item",
+	"manifest",
+	"metrics",
+	"null",
+	"ping",
+	"prod",
+	"public",
+	"redirect",
+	"robots",
+	"rpc",
+	"rss",
+	"sharer",
+	"sitemap",
+	"staging",
+	"static",
+	"storage",
+	"test",
+	"undefined",
+	"universal",
+	"webhooks",
+	"well-known",
+	"www"
+];
+/** Reserved slugs that are valid org names in theory but blocked for routing safety. */
+const ROUTING_SAFETY_SLUGS = [
+	"alpha",
+	"anonymous",
+	"archive",
+	"archived",
+	"beta",
+	"clone",
+	"copy",
+	"default",
+	"deleted",
+	"demo-org",
+	"draft",
+	"drafts",
+	"duplicate",
+	"early-access",
+	"embed",
+	"embedded",
+	"export",
+	"fork",
+	"free",
+	"guest",
+	"import",
+	"index",
+	"list",
+	"manage",
+	"moderator",
+	"newsletter",
+	"owner",
+	"preview",
+	"previews",
+	"private",
+	"pro",
+	"public-api",
+	"publish",
+	"published",
+	"queue",
+	"remove",
+	"root",
+	"sample",
+	"samples",
+	"selection",
+	"share",
+	"shared",
+	"sponsor",
+	"sponsors",
+	"sponsorship",
+	"subscribe",
+	"super",
+	"superuser",
+	"system",
+	"sys",
+	"test-org",
+	"trash",
+	"unpublish",
+	"unsubscribe",
+	"upload",
+	"uploads",
+	"waitlist",
+	"widget",
+	"widgets",
+	"worker",
+	"workers"
+];
+/**
+* URL segments reserved for global (non-org) routes — cannot be used as an org slug.
+* Prefer adding new entries to the category arrays above; the Set is the enforcement surface.
+*/
+const RESERVED_ORGANIZATION_SLUGS = new Set([
+	...AUTH_ACCOUNT_SLUGS,
+	...ORG_ACCOUNT_SLUGS,
+	...PRODUCT_SLUGS,
+	...MARKETING_SITE_SLUGS,
+	...INTEGRATION_BRAND_SLUGS,
+	...COMPANY_TEAM_SLUGS,
+	...LEGAL_TRUST_SLUGS,
+	...DEVELOPER_TECH_SLUGS,
+	...INFRA_SYSTEM_SLUGS,
+	...ROUTING_SAFETY_SLUGS
 ]);
-const OrganizationSlugSchema = string().trim().toLowerCase().min(2, "Slug must be at least 2 characters").max(64, "Slug must be at most 64 characters").regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/, "Use lowercase letters, numbers, and dashes only").refine((slug) => !RESERVED_ORGANIZATION_SLUGS.has(slug), "This slug is reserved");
+/**
+* Base slug format: lowercase, 2-64 chars, alphanumeric + dashes.
+*
+* IMPORTANT: this is the schema for *reading* slugs (persisted rows, API
+* responses). It intentionally does NOT enforce the reserved-name list — an org
+* created before a name became reserved must still parse on read. Use
+* `ClaimableOrganizationSlugSchema` to validate slugs a user is trying to claim.
+*/
+const OrganizationSlugSchema = string().trim().toLowerCase().min(2, "Slug must be at least 2 characters").max(64, "Slug must be at most 64 characters").regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/, "Use lowercase letters, numbers, and dashes only");
+/**
+* Slug validation for *claiming* a slug (organization create/rename). Adds the
+* reserved-name check on top of the base format. Never use this to parse
+* existing org data, or pre-existing orgs whose slug later became reserved would
+* fail to load.
+*/
+const ClaimableOrganizationSlugSchema = OrganizationSlugSchema.refine((slug) => !RESERVED_ORGANIZATION_SLUGS.has(slug), "This slug is reserved");
 /** How a credential instance is stored (`credential_instances.auth_kind`). */
 const CredentialAuthKindSchema = _enum(["api_key", "oauth_managed"]);
 /** Where a credential instance is stored (`credential_instances.scope_type`). */
@@ -107,12 +651,80 @@ function defineCredential(input) {
 	if ("schema" in input) return credential.static(input.key, input.schema);
 	return credential.static(input.key, input.fields);
 }
+const OrganizationSlugErrorCodeSchema = _enum([
+	"slug_taken",
+	"slug_reserved",
+	"slug_invalid"
+]);
+const SlugAvailabilityReasonSchema = _enum([
+	"taken",
+	"reserved",
+	"invalid"
+]);
+object({
+	slug: string(),
+	available: boolean$1(),
+	reason: SlugAvailabilityReasonSchema.optional(),
+	suggestion: OrganizationSlugSchema.optional()
+});
+object({
+	slug: string().trim().min(1),
+	excludeOrganizationId: string().min(1).optional()
+});
+const ProjectStatusSchema = _enum([
+	"inactive",
+	"starting",
+	"active",
+	"failed"
+]);
+const OrganizationUserRoleSchema = _enum(["admin"]);
+const isoDateTime$1 = string().datetime();
+const OrganizationSchema = object({
+	id: string(),
+	name: string(),
+	slug: OrganizationSlugSchema,
+	createdAt: isoDateTime$1,
+	updatedAt: isoDateTime$1
+});
+const ProjectSchema = object({
+	id: string(),
+	organizationId: string(),
+	name: string(),
+	status: ProjectStatusSchema,
+	baseUrl: string().nullable(),
+	runtimeId: string().nullable(),
+	lastError: string().nullable(),
+	createdAt: isoDateTime$1,
+	updatedAt: isoDateTime$1
+});
+const UserOrganizationSchema = object({
+	organization: OrganizationSchema,
+	role: OrganizationUserRoleSchema
+});
+object({ organization: UserOrganizationSchema.nullable() });
+object({ organizations: array(UserOrganizationSchema) });
+object({ organizationId: string().min(1) });
+object({
+	name: string().trim().min(1),
+	/** Format-only at the wire boundary; reserved-name checks run in platform-database. */
+	slug: OrganizationSlugSchema.optional()
+});
+object({ slug: ClaimableOrganizationSlugSchema });
+object({ organization: UserOrganizationSchema });
+object({ projects: array(ProjectSchema) });
+object({ name: string().trim().min(1) });
+object({ project: ProjectSchema });
+object({ project: ProjectSchema });
+object({ reachable: boolean$1() });
 const ValidationErrorDetailSchema = object({
 	path: string(),
 	message: string()
 });
+/** Machine-readable codes returned in standard API error bodies. */
+const ErrorResponseCodeSchema = OrganizationSlugErrorCodeSchema.or(_enum(["needs_org_selection"]));
 object({
 	error: string(),
+	code: ErrorResponseCodeSchema.optional(),
 	message: string().optional(),
 	details: array(ValidationErrorDetailSchema).optional()
 });
@@ -487,50 +1099,6 @@ object({ triggers: array(object({
 	webhookUrl: string().url().optional(),
 	workflowKey: string()
 })) });
-const ProjectStatusSchema = _enum([
-	"inactive",
-	"starting",
-	"active",
-	"failed"
-]);
-const OrganizationUserRoleSchema = _enum(["admin"]);
-const isoDateTime$1 = string().datetime();
-const OrganizationSchema = object({
-	id: string(),
-	name: string(),
-	slug: OrganizationSlugSchema,
-	createdAt: isoDateTime$1,
-	updatedAt: isoDateTime$1
-});
-const ProjectSchema = object({
-	id: string(),
-	organizationId: string(),
-	name: string(),
-	status: ProjectStatusSchema,
-	baseUrl: string().nullable(),
-	runtimeId: string().nullable(),
-	lastError: string().nullable(),
-	createdAt: isoDateTime$1,
-	updatedAt: isoDateTime$1
-});
-const UserOrganizationSchema = object({
-	organization: OrganizationSchema,
-	role: OrganizationUserRoleSchema
-});
-object({ organization: UserOrganizationSchema.nullable() });
-object({ organizations: array(UserOrganizationSchema) });
-object({ organizationId: string().min(1) });
-object({
-	name: string().trim().min(1),
-	slug: OrganizationSlugSchema.optional()
-});
-object({ slug: OrganizationSlugSchema });
-object({ organization: UserOrganizationSchema });
-object({ projects: array(ProjectSchema) });
-object({ name: string().trim().min(1) });
-object({ project: ProjectSchema });
-object({ project: ProjectSchema });
-object({ reachable: boolean$1() });
 const ProjectArtifactStatusSchema = _enum(["pending", "ready"]);
 const isoDateTime = string().datetime();
 const ProjectArtifactSchema = object({
@@ -562,7 +1130,7 @@ object({
 });
 new AsyncLocalStorage();
 //#endregion
-//#region ../../packages/keystroke/dist/dist-CnoekdhF.mjs
+//#region ../../packages/keystroke/dist/dist-CXHSlVhd.mjs
 const RELATED_TASK_META_KEY = "io.modelcontextprotocol/related-task";
 /**
 * Assert 'object' type schema.
@@ -13941,4 +14509,4 @@ async function withSpan(input, fn) {
 //#endregion
 export { createSession as a, isCredentialError as c, withSpan as d, zodToJsonSchema as f, captureConsole as i, listMessageEvents as l, ZodIssueCode as m, appendEvent as n, getSession as o, defineCredential as p, buildCredentialRunContext as r, getTraceContext as s, MESSAGE_EVENT_TYPE as t, touchSession as u };
 
-//# sourceMappingURL=dist-CnoekdhF-nc3ePIKw.mjs.map
+//# sourceMappingURL=dist-CXHSlVhd-CTQzOALD.mjs.map