@keystrokehq/cli 0.1.148 → 0.1.150

package/dist/dist-CSUmvad5.mjs

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import { a as buildApp } from "./dist-DG8fjuMY.mjs";
+export { buildApp };

package/dist/{dist-GDLyM5sd.mjs → dist-CYcxzKHH.mjs}

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
 import "./dist-C6adeAws.mjs";
-import { v as emitStoredRouteManifestForProject } from "./dist-BjwZD7UZ.mjs";
+import { v as emitStoredRouteManifestForProject } from "./dist-CtEL33PB.mjs";
 export { emitStoredRouteManifestForProject };

package/dist/{dist-BjwZD7UZ.mjs → dist-CtEL33PB.mjs}

@@ -2904,7 +2904,7 @@ function registerWorkflowRunGetter(fn) {
 const AGENT_MODEL_ID_PATTERN = /^[a-z0-9-]+\/.+/;
 custom((value) => typeof value === "string" && AGENT_MODEL_ID_PATTERN.test(value), "model must be vendor/model-id");
 //#endregion
-//#region ../../packages/agent/dist/validate-agent-model-ids-Cu6ucgDX.mjs
+//#region ../../packages/agent/dist/validate-agent-model-ids-D2ODPNKe.mjs
 const STATIC_MODEL_IDS = new Set([
 	"alibaba/qwen-3-14b",
 	"alibaba/qwen-3-235b",
@@ -2931,6 +2931,7 @@ const STATIC_MODEL_IDS = new Set([
 	"alibaba/qwen3.5-plus",
 	"alibaba/qwen3.6-27b",
 	"alibaba/qwen3.6-plus",
+	"alibaba/qwen3.7-flash",
 	"alibaba/qwen3.7-max",
 	"alibaba/qwen3.7-plus",
 	"alibaba/wan-v2.5-t2v-preview",
@@ -2939,13 +2940,15 @@ const STATIC_MODEL_IDS = new Set([
 	"alibaba/wan-v2.6-r2v",
 	"alibaba/wan-v2.6-r2v-flash",
 	"alibaba/wan-v2.6-t2v",
+	"alibaba/wan-v2.7-r2v",
+	"alibaba/wan-v2.7-t2v",
 	"amazon/nova-2-lite",
 	"amazon/nova-lite",
 	"amazon/nova-micro",
 	"amazon/nova-pro",
 	"amazon/titan-embed-text-v2",
 	"anthropic/claude-3-haiku",
-	"anthropic/claude-3.5-haiku",
+	"anthropic/claude-fable-5",
 	"anthropic/claude-haiku-4.5",
 	"anthropic/claude-opus-4",
 	"anthropic/claude-opus-4.1",
@@ -2953,10 +2956,13 @@ const STATIC_MODEL_IDS = new Set([
 	"anthropic/claude-opus-4.6",
 	"anthropic/claude-opus-4.7",
 	"anthropic/claude-opus-4.8",
+	"anthropic/claude-opus-4.8-fast",
+	"anthropic/claude-opus-5",
+	"anthropic/claude-opus-5-fast",
 	"anthropic/claude-sonnet-4",
 	"anthropic/claude-sonnet-4.5",
 	"anthropic/claude-sonnet-4.6",
-	"arcee-ai/trinity-large-preview",
+	"anthropic/claude-sonnet-5",
 	"arcee-ai/trinity-large-thinking",
 	"arcee-ai/trinity-mini",
 	"bfl/flux-2-flex",
@@ -2979,6 +2985,7 @@ const STATIC_MODEL_IDS = new Set([
 	"bytedance/seedream-4.0",
 	"bytedance/seedream-4.5",
 	"bytedance/seedream-5.0-lite",
+	"bytedance/seedream-5.0-pro",
 	"cohere/command-a",
 	"cohere/embed-v4.0",
 	"cohere/rerank-v3.5",
@@ -2998,16 +3005,17 @@ const STATIC_MODEL_IDS = new Set([
 	"google/gemini-2.5-pro",
 	"google/gemini-3-flash",
 	"google/gemini-3-pro-image",
-	"google/gemini-3-pro-preview",
 	"google/gemini-3.1-flash-image",
 	"google/gemini-3.1-flash-image-preview",
 	"google/gemini-3.1-flash-lite",
 	"google/gemini-3.1-flash-lite-image",
-	"google/gemini-3.1-flash-lite-preview",
 	"google/gemini-3.1-pro-preview",
 	"google/gemini-3.5-flash",
+	"google/gemini-3.5-flash-lite",
+	"google/gemini-3.6-flash",
 	"google/gemini-embedding-001",
 	"google/gemini-embedding-2",
+	"google/gemini-omni-flash-preview",
 	"google/gemma-4-26b-a4b-it",
 	"google/gemma-4-31b-it",
 	"google/imagen-4.0-fast-generate-001",
@@ -3021,6 +3029,7 @@ const STATIC_MODEL_IDS = new Set([
 	"google/veo-3.1-generate-001",
 	"inception/mercury-2",
 	"inception/mercury-coder-small",
+	"inclusionai/ling-3.0-flash-free",
 	"interfaze/interfaze-beta",
 	"klingai/kling-v2.5-turbo-i2v",
 	"klingai/kling-v2.5-turbo-t2v",
@@ -3030,19 +3039,16 @@ const STATIC_MODEL_IDS = new Set([
 	"klingai/kling-v3.0-i2v",
 	"klingai/kling-v3.0-motion-control",
 	"klingai/kling-v3.0-t2v",
+	"kwaipilot/kat-coder-air-v2.5",
 	"kwaipilot/kat-coder-pro-v1",
 	"kwaipilot/kat-coder-pro-v2",
-	"meituan/longcat-flash-chat",
-	"meituan/longcat-flash-thinking-2601",
+	"kwaipilot/kat-coder-pro-v2.5",
 	"meta/llama-3.1-70b",
 	"meta/llama-3.1-8b",
-	"meta/llama-3.2-11b",
-	"meta/llama-3.2-1b",
-	"meta/llama-3.2-3b",
-	"meta/llama-3.2-90b",
 	"meta/llama-3.3-70b",
 	"meta/llama-4-maverick",
 	"meta/llama-4-scout",
+	"meta/muse-spark-1.1",
 	"minimax/minimax-m2",
 	"minimax/minimax-m2.1",
 	"minimax/minimax-m2.1-lightning",
@@ -3054,7 +3060,6 @@ const STATIC_MODEL_IDS = new Set([
 	"mistral/codestral",
 	"mistral/codestral-embed",
 	"mistral/devstral-2",
-	"mistral/devstral-small",
 	"mistral/devstral-small-2",
 	"mistral/magistral-medium",
 	"mistral/magistral-small",
@@ -3068,13 +3073,14 @@ const STATIC_MODEL_IDS = new Set([
 	"mistral/mistral-nemo",
 	"mistral/mistral-small",
 	"mistral/pixtral-12b",
-	"mistral/pixtral-large",
 	"moonshotai/kimi-k2",
 	"moonshotai/kimi-k2-thinking",
 	"moonshotai/kimi-k2.5",
 	"moonshotai/kimi-k2.6",
 	"moonshotai/kimi-k2.7-code",
 	"moonshotai/kimi-k2.7-code-highspeed",
+	"moonshotai/kimi-k3",
+	"moonshotai/kimi-k3-fast",
 	"morph/morph-v3-fast",
 	"morph/morph-v3-large",
 	"nvidia/nemotron-3-nano-30b-a3b",
@@ -3083,7 +3089,6 @@ const STATIC_MODEL_IDS = new Set([
 	"nvidia/nemotron-nano-12b-v2-vl",
 	"nvidia/nemotron-nano-9b-v2",
 	"openai/gpt-3.5-turbo",
-	"openai/gpt-3.5-turbo-instruct",
 	"openai/gpt-4-turbo",
 	"openai/gpt-4.1",
 	"openai/gpt-4.1-mini",
@@ -3094,7 +3099,6 @@ const STATIC_MODEL_IDS = new Set([
 	"openai/gpt-4o-mini-transcribe",
 	"openai/gpt-4o-transcribe",
 	"openai/gpt-5",
-	"openai/gpt-5-chat",
 	"openai/gpt-5-codex",
 	"openai/gpt-5-mini",
 	"openai/gpt-5-nano",
@@ -3105,7 +3109,6 @@ const STATIC_MODEL_IDS = new Set([
 	"openai/gpt-5.1-instant",
 	"openai/gpt-5.1-thinking",
 	"openai/gpt-5.2",
-	"openai/gpt-5.2-chat",
 	"openai/gpt-5.2-codex",
 	"openai/gpt-5.2-pro",
 	"openai/gpt-5.3-chat",
@@ -3116,6 +3119,9 @@ const STATIC_MODEL_IDS = new Set([
 	"openai/gpt-5.4-pro",
 	"openai/gpt-5.5",
 	"openai/gpt-5.5-pro",
+	"openai/gpt-5.6-luna",
+	"openai/gpt-5.6-sol",
+	"openai/gpt-5.6-terra",
 	"openai/gpt-image-1",
 	"openai/gpt-image-1-mini",
 	"openai/gpt-image-1.5",
@@ -3125,7 +3131,9 @@ const STATIC_MODEL_IDS = new Set([
 	"openai/gpt-oss-safeguard-20b",
 	"openai/gpt-realtime-1.5",
 	"openai/gpt-realtime-2",
+	"openai/gpt-realtime-2.1",
 	"openai/gpt-realtime-mini",
+	"openai/gpt-realtime-whisper",
 	"openai/o1",
 	"openai/o3",
 	"openai/o3-deep-research",
@@ -3141,6 +3149,8 @@ const STATIC_MODEL_IDS = new Set([
 	"perplexity/sonar",
 	"perplexity/sonar-pro",
 	"perplexity/sonar-reasoning-pro",
+	"poolside/laguna-s-2.1",
+	"poolside/laguna-s-2.1-free",
 	"prodia/flux-fast-schnell",
 	"quiverai/arrow-1.1",
 	"recraft/recraft-v2",
@@ -3154,6 +3164,8 @@ const STATIC_MODEL_IDS = new Set([
 	"sakana/fugu-ultra",
 	"stepfun/step-3.5-flash",
 	"stepfun/step-3.7-flash",
+	"tencent/hy3",
+	"thinkingmachines/inkling",
 	"voyage/rerank-2.5",
 	"voyage/rerank-2.5-lite",
 	"voyage/voyage-3-large",
@@ -3175,6 +3187,7 @@ const STATIC_MODEL_IDS = new Set([
 	"xai/grok-4.20-reasoning",
 	"xai/grok-4.20-reasoning-beta",
 	"xai/grok-4.3",
+	"xai/grok-4.5",
 	"xai/grok-build-0.1",
 	"xai/grok-imagine-image",
 	"xai/grok-imagine-video",
@@ -3183,8 +3196,6 @@ const STATIC_MODEL_IDS = new Set([
 	"xai/grok-stt",
 	"xai/grok-tts",
 	"xai/grok-voice-think-fast-1.0",
-	"xiaomi/mimo-v2-flash",
-	"xiaomi/mimo-v2-pro",
 	"xiaomi/mimo-v2.5",
 	"xiaomi/mimo-v2.5-pro",
 	"zai/glm-4.5",
@@ -38066,6 +38077,71 @@ var StreamableHTTPClientTransport = class {
 };
 //#endregion
 //#region ../../packages/mcp/dist/index.mjs
+/** Thrown when a URL is not safe for server-side outbound fetch (SSRF guard). */
+var PublicHttpUrlError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "PublicHttpUrlError";
+	}
+};
+const BLOCKED_HOSTNAMES = new Set([
+	"localhost",
+	"metadata.google.internal",
+	"metadata.goog"
+]);
+function normalizeHostname(hostname) {
+	const trimmed = hostname.trim().toLowerCase();
+	if (trimmed.startsWith("[") && trimmed.endsWith("]")) return trimmed.slice(1, -1);
+	return trimmed;
+}
+function parseIpv4Octets(hostname) {
+	const parts = hostname.split(".");
+	if (parts.length !== 4) return null;
+	const octets = [];
+	for (const part of parts) {
+		if (!/^\d+$/.test(part)) return null;
+		const value = Number(part);
+		if (value > 255) return null;
+		octets.push(value);
+	}
+	return octets;
+}
+function isPrivateIpv4(octets) {
+	const a = octets[0];
+	const b = octets[1];
+	if (a === void 0 || b === void 0) return true;
+	if (a === 0 || a === 10 || a === 127) return true;
+	if (a === 169 && b === 254) return true;
+	if (a === 172 && b >= 16 && b <= 31) return true;
+	if (a === 192 && b === 168) return true;
+	return false;
+}
+function isPrivateIpv6(hostname) {
+	if (hostname === "::1") return true;
+	if (hostname.startsWith("fe80:")) return true;
+	if (hostname.startsWith("fc") || hostname.startsWith("fd")) return true;
+	return false;
+}
+function isBlockedHost(hostname) {
+	if (BLOCKED_HOSTNAMES.has(hostname)) return true;
+	if (hostname.endsWith(".localhost")) return true;
+	const ipv4 = parseIpv4Octets(hostname);
+	if (ipv4) return isPrivateIpv4(ipv4);
+	if (hostname.includes(":")) return isPrivateIpv6(hostname);
+	return false;
+}
+/** Validate that a URL is safe to fetch from the platform (http/https, public hosts only). */
+function assertPublicHttpUrl(urlString) {
+	let url;
+	try {
+		url = new URL(urlString.trim());
+	} catch {
+		throw new PublicHttpUrlError("Invalid URL");
+	}
+	if (url.protocol !== "http:" && url.protocol !== "https:") throw new PublicHttpUrlError("URL must use http or https");
+	if (isBlockedHost(normalizeHostname(url.hostname))) throw new PublicHttpUrlError("URL host is not allowed");
+	return url;
+}
 const DEFAULT_TIMEOUT_MS = 15e3;
 /**
 * Connect a read-only MCP client over Streamable HTTP, run `fn`, and always close.
@@ -46551,6 +46627,6 @@ async function emitStoredRouteManifestForProject(projectRoot) {
 	persistModularRouteManifest(projectRoot, await buildStoredRouteManifestForProject(projectRoot));
 }
 //#endregion
-export { collectArtifactModules as $, schemaToJson as A, validatePollGroups as B, integrationPackagesFingerprint as C, pollGroupRouteFromId as D, pollGroupId as E, toStoredRouteManifest as F, webhookManifestAttachmentSchemasFromBindings as G, validateTriggerAttachments as H, tryReadProjectManifest as I, workflowKeyForAttachment as J, webhookMatchSchemaForBindings as K, validateAttachmentTargets as L, sha256Bytes as M, sha256File as N, pollRouteFromSourceSlug as O, splitStoredRouteManifest as P, artifactIndexFromModules as Q, validateImportedTriggerAttachment as R, importWorkflowDefinition as S, persistModularRouteManifest as T, validateUniqueAttachmentSlugs as U, validateProjectModules as V, validateUniqueTriggerSourceSlugs as W, attachmentSlugFromRecord as X, workflowRouteFromKey as Y, withMcpReadClient as Z, discoverWorkflows as _, event as _t, buildPollGroups as a, diagnoseWorkflowSource as at, importAgentDefinition as b, buildWebhookBindingsByRoute as c, discoverModuleFileEntries as ct, contentHashForModule as d, shouldSkipKeystrokeModuleFile as dt, mapInParallelBatches as et, countAgentCredentials as f, validateUniqueModuleKeys as ft, discoverWorkflowEntries as g, configureTelemetry as gt, discoverTriggerAttachments as h, captureException as ht, agentRouteFromKey as i, computeCallSiteIds as it, serializeRouteManifest as j, projectActionsFingerprint as k, collectAgentAppSlugs as l, entryIdFromFile as lt, discoverSkillManifestEntries as m, alias as mt, agentKeyForAttachment as n, packDirFromDisk as nt, buildStoredRouteManifestForProject as o, locateWorkflow as ot, discoverAgentEntries as p, walkTypeScriptFiles as pt, webhookRouteFromEndpoint as q, agentManifestEntry as r, classifyCall as rt, buildStoredRouteManifestFromContext as s, discoverEntries as st, actionsCatalogFingerprint as t, moduleBlobRefsFromModules as tt, collectAgentToolSlugs as u, readKeystrokeIgnoreDirective as ut, emitStoredRouteManifestForProject as v, flushTelemetry as vt, isModularManifestEmitCacheHit as w, importTriggerAttachments as x, hashDirectoryContents as y, shutdownTelemetry as yt, validateImportedWorkflowDefinition as z };
+export { withMcpReadClient as $, schemaToJson as A, validatePollGroups as B, integrationPackagesFingerprint as C, pollGroupRouteFromId as D, pollGroupId as E, toStoredRouteManifest as F, webhookManifestAttachmentSchemasFromBindings as G, validateTriggerAttachments as H, tryReadProjectManifest as I, workflowKeyForAttachment as J, webhookMatchSchemaForBindings as K, validateAttachmentTargets as L, sha256Bytes as M, sha256File as N, pollRouteFromSourceSlug as O, splitStoredRouteManifest as P, assertPublicHttpUrl as Q, validateImportedTriggerAttachment as R, importWorkflowDefinition as S, persistModularRouteManifest as T, validateUniqueAttachmentSlugs as U, validateProjectModules as V, validateUniqueTriggerSourceSlugs as W, attachmentSlugFromRecord as X, workflowRouteFromKey as Y, PublicHttpUrlError as Z, discoverWorkflows as _, captureException as _t, buildPollGroups as a, classifyCall as at, importAgentDefinition as b, flushTelemetry as bt, buildWebhookBindingsByRoute as c, locateWorkflow as ct, contentHashForModule as d, entryIdFromFile as dt, artifactIndexFromModules as et, countAgentCredentials as f, readKeystrokeIgnoreDirective as ft, discoverWorkflowEntries as g, alias as gt, discoverTriggerAttachments as h, walkTypeScriptFiles as ht, agentRouteFromKey as i, packDirFromDisk as it, serializeRouteManifest as j, projectActionsFingerprint as k, collectAgentAppSlugs as l, discoverEntries as lt, discoverSkillManifestEntries as m, validateUniqueModuleKeys as mt, agentKeyForAttachment as n, mapInParallelBatches as nt, buildStoredRouteManifestForProject as o, computeCallSiteIds as ot, discoverAgentEntries as p, shouldSkipKeystrokeModuleFile as pt, webhookRouteFromEndpoint as q, agentManifestEntry as r, moduleBlobRefsFromModules as rt, buildStoredRouteManifestFromContext as s, diagnoseWorkflowSource as st, actionsCatalogFingerprint as t, collectArtifactModules as tt, collectAgentToolSlugs as u, discoverModuleFileEntries as ut, emitStoredRouteManifestForProject as v, configureTelemetry as vt, isModularManifestEmitCacheHit as w, importTriggerAttachments as x, shutdownTelemetry as xt, hashDirectoryContents as y, event as yt, validateImportedWorkflowDefinition as z };
 
-//# sourceMappingURL=dist-BjwZD7UZ.mjs.map
+//# sourceMappingURL=dist-CtEL33PB.mjs.map