keystone-cli 2.1.6 → 2.1.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "keystone-cli",
-  "version": "2.1.6",
+  "version": "2.1.7",
   "description": "A local-first, declarative, agentic workflow orchestrator built on Bun",
   "type": "module",
   "bin": {
@@ -16,7 +16,13 @@
     "format": "biome format --write .",
     "schema:generate": "bun run src/scripts/generate-schemas.ts"
   },
-  "keywords": ["workflow", "orchestrator", "agentic", "automation", "bun"],
+  "keywords": [
+    "workflow",
+    "orchestrator",
+    "agentic",
+    "automation",
+    "bun"
+  ],
   "author": "Mark Hingston",
   "license": "MIT",
   "repository": {
@@ -24,7 +30,12 @@
     "url": "https://github.com/mhingston/keystone-cli.git"
   },
   "homepage": "https://github.com/mhingston/keystone-cli#readme",
-  "files": ["src", "README.md", "LICENSE", "logo.png"],
+  "files": [
+    "src",
+    "README.md",
+    "LICENSE",
+    "logo.png"
+  ],
   "dependencies": {
     "@ast-grep/cli": "^0.40.3",
     "@ast-grep/napi": "^0.40.3",

package/src/runner/mcp-client-audit.test.ts

@@ -2,6 +2,7 @@ import { afterEach, beforeEach, describe, expect, it, mock, spyOn } from 'bun:te
 import * as child_process from 'node:child_process';
 import { MCPClient } from './mcp-client';
 
+import * as dns from 'node:dns/promises';
 import { Readable, Writable } from 'node:stream';
 
 describe('MCPClient Audit Fixes', () => {
@@ -78,6 +79,24 @@ describe('MCPClient Audit Fixes', () => {
 });
 
 describe('MCPClient SSRF Protection', () => {
+  let lookupSpy: ReturnType<typeof spyOn>;
+  let fetchSpy: ReturnType<typeof spyOn>;
+
+  beforeEach(() => {
+    // Mock DNS lookup to return a public IP for api.example.com
+    lookupSpy = spyOn(dns, 'lookup').mockResolvedValue([
+      { address: '93.184.216.34', family: 4 }, // example.com's actual IP
+    ] as any);
+
+    // Mock fetch to prevent actual network calls
+    fetchSpy = spyOn(global, 'fetch').mockRejectedValue(new Error('Connection timeout'));
+  });
+
+  afterEach(() => {
+    lookupSpy.mockRestore();
+    fetchSpy.mockRestore();
+  });
+
   it('should reject localhost URLs', async () => {
     // Localhost is rejected regardless of protocol
     await expect(MCPClient.createRemote('http://localhost:8080/sse')).rejects.toThrow(

package/src/runner/mcp-client.test.ts

@@ -1,5 +1,6 @@
 import { afterEach, beforeEach, describe, expect, it, mock, spyOn } from 'bun:test';
 import * as child_process from 'node:child_process';
+import * as dns from 'node:dns/promises';
 import { EventEmitter } from 'node:events';
 import { Readable, Writable } from 'node:stream';
 import { MCPClient } from './mcp-client';
@@ -123,6 +124,19 @@ describe('MCPClient', () => {
   });
 
   describe('SSE Transport', () => {
+    let lookupSpy: ReturnType<typeof spyOn>;
+
+    beforeEach(() => {
+      // Mock DNS lookup to return a public IP for api.example.com
+      lookupSpy = spyOn(dns, 'lookup').mockResolvedValue([
+        { address: '93.184.216.34', family: 4 }, // example.com's actual IP
+      ] as any);
+    });
+
+    afterEach(() => {
+      lookupSpy.mockRestore();
+    });
+
     it('should connect and receive endpoint', async () => {
       let controller: ReadableStreamDefaultController;
       const stream = new ReadableStream({