Add OpenRouter Kimi K3 support

[rgarcia]

summary

• add OpenRouter Kimi K3 model resolution, auth, listing, and streaming support
• share Kimi capability metadata across direct Moonshot and OpenRouter
• preserve native-provider validation and make harness refs resolve through supplied Models
• prepare @onkernel/cua-ai 0.9.0, @onkernel/cua-agent 0.9.0, and @onkernel/cua-cli 0.7.0 release metadata

tests

• npm run typecheck
• npm test --workspace @onkernel/cua-ai
• npm test --workspace @onkernel/cua-agent
• npm test --workspace @onkernel/cua-cli

---

Note

Medium Risk
Touches model resolution, tool-catalog compatibility, and harness streaming paths; behavior changes are mostly additive but incorrect capability metadata could reject or mis-serialize tools for new models.

Overview
Adds OpenRouter as a CUA provider for openrouter:moonshotai/kimi-k3, with OPENROUTER_API_KEY auth, model listing, and the same browser-primitives-only default catalog as direct Moonshot (no browser_act).

@onkernel/cua-ai 0.9.0 introduces CuaModelCapabilities on model annotations and cuaModelCapabilities(), so tool-catalog validation (complex/large schemas, serialized state-mutating calls) is driven by per-model metadata instead of provider-wide allowlists. Kimi K3 shares capability metadata across moonshotai:kimi-k3 and the OpenRouter route.

CuaAgentHarness resolves string model refs through the injected Models collection (with CUA annotation gating) during construction and setModel(); CuaToolManager uses the same resolver when compiling catalogs from refs.

CLI 0.7.0 wires OpenRouter into cua models -p openrouter, env docs, and defaultInteractionTools. Example/provider-matrix tests cover both Kimi transports.

^{Reviewed by Cursor Bugbot for commit 5e355c7. Bugbot is set up for automated code reviews on this repo. Configure here.}

[rgarcia]

bugbot run

[rgarcia]

bugbot run

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit c364c01. Configure here.}

[rgarcia]

bugbot run

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 10a9808. Configure here.}

[rgarcia]

@cursor review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 10a9808. Configure here.}

[rgarcia]

bugbot run

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 5e355c7. Configure here.}