keystone-cli 2.1.4 → 2.1.6

package/src/templates/basics/full-feature-demo.yaml

@@ -16,7 +16,7 @@ steps:
   # Test shell execution
   - id: greet
     type: shell
-    run: echo "${{ inputs.message }}"
+    run: echo "${{ escape(inputs.message) }}"
 
   # Test shell with transform
   - id: get_date
@@ -42,7 +42,6 @@ steps:
   - id: count_files
     type: shell
     needs: [write_file]
-    allowInsecure: true
     run: ls ./tmp/keystone-*.txt | wc -l
     transform: parseInt(stdout.trim())
 

package/src/templates/control-flow/fan-out-fan-in.yaml

@@ -18,7 +18,6 @@ steps:
 
   - id: parallel_1
     type: shell
-    allowInsecure: true
     run: sleep 2 && echo "Parallel 1 done"
     needs: [prepare]
     compensate:
@@ -28,7 +27,6 @@ steps:
 
   - id: parallel_2
     type: shell
-    allowInsecure: true
     run: |
       echo "Parallel 2 failing intentionally..."
       exit 1

package/src/templates/control-flow/idempotency-example.yaml

@@ -17,7 +17,6 @@ steps:
     idempotencyScope: global
     # Expire the record after 1 day
     idempotencyTtlSeconds: 86400
-    allowInsecure: true
     run: |
       echo "Processing order ${{ inputs.order_id }}..."
       # Simulate a side effect

package/src/templates/control-flow/loop-parallel.yaml

@@ -11,7 +11,6 @@ steps:
   # Generate test data
   - id: generate_items
     type: shell
-    allowInsecure: true
     run: "echo 'item1\nitem2\nitem3\nitem4\nitem5'"
     transform: "stdout.split('\\n').filter(Boolean)"
 
@@ -21,8 +20,7 @@ steps:
     needs: [generate_items]
     foreach: ${{ steps.generate_items.output }}
     concurrency: 3
-    allowInsecure: true
-    run: "echo 'Processing: ${{ item }}' && sleep 0.1"
+    run: "echo 'Processing: ${{ escape(item) }}' && sleep 0.1"
     transform: "stdout.trim()"
 
   # Test conditional using .every() (tests aggregation fix)

package/src/templates/control-flow/retry-policy.yaml

@@ -6,7 +6,6 @@ steps:
   # Test retry with a command that fails first few times
   - id: flaky_command
     type: shell
-    allowInsecure: true
     run: |
       if [ ! -f /tmp/keystone-retry-test ]; then
         echo "1" > /tmp/keystone-retry-test
@@ -27,7 +26,6 @@ steps:
   # Test timeout (should complete before timeout)
   - id: quick_task
     type: shell
-    allowInsecure: true
     run: sleep 0.1 && echo "Completed"
     timeout: 5000
     needs: [flaky_command]

package/src/templates/features/artifact-example.yaml

@@ -5,7 +5,6 @@ description: "Demonstrate artifact upload and download between steps"
 steps:
   - id: create_content
     type: shell
-    allowInsecure: true
     run: |
       mkdir -p src/templates/features/test-output
       echo "Hello from step 1" > src/templates/features/test-output/file1.txt
@@ -33,7 +32,6 @@ steps:
   - id: verify
     type: shell
     needs: [download_files]
-    allowInsecure: true
     run: |
       ls -R src/templates/features/downloaded
       cat src/templates/features/downloaded/file1.txt

package/src/templates/features/llm-agent.yaml

@@ -1,9 +1,68 @@
 $schema: https://raw.githubusercontent.com/mhingston/keystone-cli/main/schemas/workflow.json
 name: llm-agent
-description: "Test LLM step"
+description: "Interactive LLM workflow with human-in-the-loop collaboration"
+
+inputs:
+  topic:
+    type: string
+    default: "workflow automation"
 
 steps:
-  - id: ask_llm
+  # LLM generates initial suggestions
+  - id: generate_ideas
+    type: llm
+    agent: summarizer
+    prompt: |
+      Generate 3 creative ideas related to "${{ inputs.topic }}".
+      Format your response as a numbered list.
+
+  # Human reviews and selects an idea
+  - id: review_ideas
+    type: human
+    message: |
+      The LLM generated these ideas:
+      
+      ${{ steps.generate_ideas.output }}
+      
+      Press Enter to continue with the first idea, or provide your own selection.
+    inputType: text
+
+  # LLM elaborates on the selected idea
+  - id: elaborate
     type: llm
     agent: summarizer
-    prompt: "Hello, who are you?"
+    prompt: |
+      The user selected this idea: "${{ steps.review_ideas.output || 'Use the first idea from the list' }}"
+      
+      Please provide a detailed explanation of how to implement this idea,
+      including key considerations and potential challenges.
+
+  # Final human confirmation
+  - id: confirm
+    type: human
+    message: |
+      Here's the detailed plan:
+      
+      ${{ steps.elaborate.output }}
+      
+      Press Enter to confirm and save this plan.
+    inputType: confirm
+
+  # Save the plan to a file
+  - id: save_plan
+    type: file
+    if: ${{ steps.confirm.output }}
+    op: write
+    path: ./plan.md
+    content: |
+      # Plan for ${{ inputs.topic }}
+      
+      ## Selected Idea
+      ${{ steps.review_ideas.output || 'First idea from generated list' }}
+      
+      ## Detailed Plan
+      ${{ steps.elaborate.output }}
+
+outputs:
+  plan: ${{ steps.elaborate.output }}
+  saved: ${{ steps.save_plan.outputs.path || 'not saved' }}

package/src/templates/features/memory-service.yaml

@@ -49,7 +49,6 @@ steps:
   - id: summary
     type: shell
     needs: [confirm_memory]
-    allowInsecure: true
     run: |
       echo "Memory Service Demo Complete"
       echo "Recalled: ${{ steps.recall_preference.output[0].content }}"

package/src/templates/features/robust-automation.yaml

@@ -7,7 +7,6 @@ steps:
   # This step attempts to run a broken command, but the agent should fix it
   - id: auto_heal_demo
     type: shell
-    allowInsecure: true
     run: |
       # This command has a typo and should fail
       ech "Hello World"
@@ -40,7 +39,6 @@ steps:
   - id: summary
     type: shell
     needs: [reflexion_demo]
-    allowInsecure: true
     run: |
       echo "Robust automation demo complete."
       echo "Healed Command Output: ${{ steps.auto_heal_demo.output.stdout }}"

package/src/templates/features/script-example.yaml

@@ -5,12 +5,10 @@ description: "Demonstrate sandboxed JavaScript execution"
 steps:
   - id: generate_data
     type: shell
-    allowInsecure: true
     run: echo '{"values":[1,2,3,4,5]}'
 
   - id: process_data
     type: script
-    allowInsecure: true
     needs: [generate_data]
     run: |
       const data = JSON.parse(steps.generate_data.output.stdout);
@@ -22,7 +20,6 @@ steps:
   - id: print_result
     type: shell
     needs: [process_data]
-    allowInsecure: true
     run: |
       echo "Sum: ${{ steps.process_data.output.sum }}"
       echo "Average: ${{ steps.process_data.output.avg }}"

package/src/templates/features/src/templates/features/downloaded/test-output/file1.txt

@@ -0,0 +1 @@
+Hello from step 1

package/src/templates/features/src/templates/features/downloaded/test-output/file2.txt

@@ -0,0 +1 @@
+Hello from step 1 (second file)

package/src/templates/patterns/agent-handoff.yaml

@@ -33,7 +33,6 @@ steps:
         execution:
           id: remember_context
           type: script
-          allowInsecure: true
           run: |
             (function() {
               return {
@@ -48,6 +47,5 @@ steps:
   - id: show_context
     type: shell
     needs: [route]
-    allowInsecure: true
     run: |
       echo "Memory: ${{ memory.user }} on ${{ memory.topic }} (env=${{ env.CURRENT_TOPIC }})"

package/src/templates/patterns/approval-process.yaml

@@ -33,5 +33,5 @@ steps:
   - id: finalize_rejection
     type: shell
     if: ${{ steps.request_approval.output == false }}
-    run: echo "Rejection reason - ${{ steps.get_rejection_reason.output }}"
+    run: echo "Rejection reason - ${{ escape(steps.get_rejection_reason.output) }}"
     needs: [get_rejection_reason]

package/src/templates/patterns/batch-processor.yaml

@@ -15,8 +15,7 @@ steps:
   # 1. Dynamic Input Generation
   - id: list_files
     type: shell
-    allowInsecure: true
-    run: "ls ${{ inputs.target_dir }}/*.txt"
+    run: "ls ${{ escape(inputs.target_dir) }}/*.txt"
     # Extract stdout lines into an array
     transform: "stdout.split('\\n').filter(Boolean)"
 

package/src/templates/patterns/composition-parent.yaml

@@ -14,5 +14,4 @@ steps:
   - id: print_result
     type: shell
     needs: [run_child]
-    allowInsecure: true
     run: echo "Child workflow result - ${{ escape(steps.run_child.outputs.result) }}"

package/src/templates/patterns/data-pipeline.yaml

@@ -21,7 +21,6 @@ steps:
 
   - id: process_data
     type: shell
-    allowInsecure: true
     run: |
       echo "${{ steps.read_data.output }}" | tr '[:lower:]' '[:upper:]'
     transform: "stdout.trim()"

package/src/templates/scaffolding/dev.yaml

@@ -77,7 +77,6 @@ steps:
     agent: software-engineer
     needs: [approve_plan]
     useStandardTools: true
-    allowInsecure: true
     prompt: |
       Implement the following plan for the task:
       ${{ inputs.task }}
@@ -101,7 +100,6 @@ steps:
     agent: tester
     needs: [implement]
     useStandardTools: true
-    allowInsecure: true
     prompt: |
       Verify the changes made for the task:
       ${{ inputs.task }}

package/src/templates/scaffolding/scaffold-feature.yaml

@@ -48,7 +48,6 @@ steps:
   - id: summary
     type: shell
     needs: [write_files]
-    allowInsecure: true
     run: |
       echo "Scaffolding complete. Files created:"
       echo "${{ steps.generate.outputs && steps.generate.outputs.files ? steps.generate.outputs.files.map(f => f.path).join('\n') : '(dry run: no files generated)' }}"