@shipit-ai/cli 1.171.0 → 1.172.0-pr16.66b2a70

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations/056-add-litellm-proxy-multi-agent.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Migration 056: Add LiteLLM proxy per-agent routing for Gemini CLI and Codex CLI.
+ *
+ * Columns (settings table):
+ *  - litellm_proxy_gc_routing_mode TEXT (default NULL — treated as "direct")
+ *  - litellm_proxy_cx_routing_mode TEXT (default NULL — treated as "direct")
+ */
+import type { MigrationParams } from 'umzug';
+import type Database from 'better-sqlite3';
+export declare function up({ context: db }: MigrationParams<Database.Database>): Promise<void>;
+export declare function down({ context: db }: MigrationParams<Database.Database>): Promise<void>;
+//# sourceMappingURL=056-add-litellm-proxy-multi-agent.d.ts.map

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations/056-add-litellm-proxy-multi-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"056-add-litellm-proxy-multi-agent.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/persistence/sqlite/migrations/056-add-litellm-proxy-multi-agent.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAC7C,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,wBAAsB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAU3F;AAED,wBAAsB,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7F"}

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations/056-add-litellm-proxy-multi-agent.js

@@ -0,0 +1,20 @@
+/**
+ * Migration 056: Add LiteLLM proxy per-agent routing for Gemini CLI and Codex CLI.
+ *
+ * Columns (settings table):
+ *  - litellm_proxy_gc_routing_mode TEXT (default NULL — treated as "direct")
+ *  - litellm_proxy_cx_routing_mode TEXT (default NULL — treated as "direct")
+ */
+export async function up({ context: db }) {
+    const columns = db.pragma('table_info(settings)');
+    const names = new Set(columns.map((c) => c.name));
+    if (!names.has('litellm_proxy_gc_routing_mode')) {
+        db.exec('ALTER TABLE settings ADD COLUMN litellm_proxy_gc_routing_mode TEXT');
+    }
+    if (!names.has('litellm_proxy_cx_routing_mode')) {
+        db.exec('ALTER TABLE settings ADD COLUMN litellm_proxy_cx_routing_mode TEXT');
+    }
+}
+export async function down({ context: db }) {
+    void db;
+}

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations/057-add-mcp-servers-flag.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Migration 057: Add MCP servers feature flag.
+ *
+ * Columns (settings table):
+ *  - feature_flag_mcp_servers INTEGER (default 0)
+ */
+import type { MigrationParams } from 'umzug';
+import type Database from 'better-sqlite3';
+export declare function up({ context: db }: MigrationParams<Database.Database>): Promise<void>;
+export declare function down({ context: db }: MigrationParams<Database.Database>): Promise<void>;
+//# sourceMappingURL=057-add-mcp-servers-flag.d.ts.map

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations/057-add-mcp-servers-flag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"057-add-mcp-servers-flag.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/persistence/sqlite/migrations/057-add-mcp-servers-flag.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAC7C,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,wBAAsB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAO3F;AAED,wBAAsB,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7F"}

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations/057-add-mcp-servers-flag.js

@@ -0,0 +1,16 @@
+/**
+ * Migration 057: Add MCP servers feature flag.
+ *
+ * Columns (settings table):
+ *  - feature_flag_mcp_servers INTEGER (default 0)
+ */
+export async function up({ context: db }) {
+    const columns = db.pragma('table_info(settings)');
+    const names = new Set(columns.map((c) => c.name));
+    if (!names.has('feature_flag_mcp_servers')) {
+        db.exec('ALTER TABLE settings ADD COLUMN feature_flag_mcp_servers INTEGER DEFAULT 0');
+    }
+}
+export async function down({ context: db }) {
+    void db;
+}

package/dist/packages/core/src/infrastructure/repositories/sqlite-settings.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sqlite-settings.repository.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/src/infrastructure/repositories/sqlite-settings.repository.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AACxH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAOjE;;;GAGG;AACH,qBACa,wBAAyB,YAAW,mBAAmB;IACtD,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAElD;;;;;;OAMG;IACG,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA2FnD;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAgBtC;;;;;OAKG;IACG,MAAM,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAyGhD"}
+{"version":3,"file":"sqlite-settings.repository.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/src/infrastructure/repositories/sqlite-settings.repository.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AACxH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAOjE;;;GAGG;AACH,qBACa,wBAAyB,YAAW,mBAAmB;IACtD,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAElD;;;;;;OAMG;IACG,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA6FnD;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAgBtC;;;;;OAKG;IACG,MAAM,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CA4GhD"}

package/dist/packages/core/src/infrastructure/repositories/sqlite-settings.repository.js

@@ -74,10 +74,11 @@ let SQLiteSettingsRepository = class SQLiteSettingsRepository {
         fab_position_swapped,
         agent_perm_claude_code, agent_perm_cursor, agent_perm_gemini_cli,
         agent_perm_codex_cli, agent_perm_copilot_cli, agent_perm_rovo_dev,
-        feature_flag_plugins,
+        feature_flag_plugins, feature_flag_mcp_servers,
         litellm_proxy_base_url, litellm_proxy_api_key, litellm_proxy_marketplace_enabled,
         litellm_proxy_cc_routing_mode, litellm_proxy_cc_custom_headers,
-        litellm_proxy_cc_sonnet_model, litellm_proxy_cc_haiku_model, litellm_proxy_cc_opus_model
+        litellm_proxy_cc_sonnet_model, litellm_proxy_cc_haiku_model, litellm_proxy_cc_opus_model,
+        litellm_proxy_gc_routing_mode, litellm_proxy_cx_routing_mode
       ) VALUES (
         @id, @created_at, @updated_at,
         @model_analyze, @model_requirements, @model_plan, @model_implement, @model_default,
@@ -110,10 +111,11 @@ let SQLiteSettingsRepository = class SQLiteSettingsRepository {
         @fab_position_swapped,
         @agent_perm_claude_code, @agent_perm_cursor, @agent_perm_gemini_cli,
         @agent_perm_codex_cli, @agent_perm_copilot_cli, @agent_perm_rovo_dev,
-        @feature_flag_plugins,
+        @feature_flag_plugins, @feature_flag_mcp_servers,
         @litellm_proxy_base_url, @litellm_proxy_api_key, @litellm_proxy_marketplace_enabled,
         @litellm_proxy_cc_routing_mode, @litellm_proxy_cc_custom_headers,
-        @litellm_proxy_cc_sonnet_model, @litellm_proxy_cc_haiku_model, @litellm_proxy_cc_opus_model
+        @litellm_proxy_cc_sonnet_model, @litellm_proxy_cc_haiku_model, @litellm_proxy_cc_opus_model,
+        @litellm_proxy_gc_routing_mode, @litellm_proxy_cx_routing_mode
       )
     `);
         // Execute with named parameters (safe from SQL injection)
@@ -226,6 +228,7 @@ let SQLiteSettingsRepository = class SQLiteSettingsRepository {
         agent_perm_copilot_cli = @agent_perm_copilot_cli,
         agent_perm_rovo_dev = @agent_perm_rovo_dev,
         feature_flag_plugins = @feature_flag_plugins,
+        feature_flag_mcp_servers = @feature_flag_mcp_servers,
         litellm_proxy_base_url = @litellm_proxy_base_url,
         litellm_proxy_api_key = @litellm_proxy_api_key,
         litellm_proxy_marketplace_enabled = @litellm_proxy_marketplace_enabled,
@@ -233,7 +236,9 @@ let SQLiteSettingsRepository = class SQLiteSettingsRepository {
         litellm_proxy_cc_custom_headers = @litellm_proxy_cc_custom_headers,
         litellm_proxy_cc_sonnet_model = @litellm_proxy_cc_sonnet_model,
         litellm_proxy_cc_haiku_model = @litellm_proxy_cc_haiku_model,
-        litellm_proxy_cc_opus_model = @litellm_proxy_cc_opus_model
+        litellm_proxy_cc_opus_model = @litellm_proxy_cc_opus_model,
+        litellm_proxy_gc_routing_mode = @litellm_proxy_gc_routing_mode,
+        litellm_proxy_cx_routing_mode = @litellm_proxy_cx_routing_mode
       WHERE id = @id
     `);
         // Execute with named parameters (safe from SQL injection)

package/dist/packages/core/src/infrastructure/services/agents/common/agent-executor-provider.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-executor-provider.service.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/common/agent-executor-provider.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kFAAkF,CAAC;AAC/H,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iFAAiF,CAAC;AAC7H,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yEAAyE,CAAC;AAC9G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oFAAoF,CAAC;AAG9H,qBAAa,qBAAsB,YAAW,sBAAsB;IAEhE,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;gBADlB,OAAO,EAAE,qBAAqB,EAC9B,kBAAkB,EAAE,mBAAmB;IAGpD,WAAW,IAAI,OAAO,CAAC,cAAc,CAAC;CAc7C"}
+{"version":3,"file":"agent-executor-provider.service.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/common/agent-executor-provider.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kFAAkF,CAAC;AAC/H,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iFAAiF,CAAC;AAC7H,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yEAAyE,CAAC;AAC9G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oFAAoF,CAAC;AAK9H,qBAAa,qBAAsB,YAAW,sBAAsB;IAEhE,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;gBADlB,OAAO,EAAE,qBAAqB,EAC9B,kBAAkB,EAAE,mBAAmB;IAGpD,WAAW,IAAI,OAAO,CAAC,cAAc,CAAC;CAkB7C"}

package/dist/packages/core/src/infrastructure/services/agents/common/agent-executor-provider.service.js

@@ -1,4 +1,6 @@
 import { ClaudeCodeExecutorService } from './executors/claude-code-executor.service.js';
+import { GeminiCliExecutorService } from './executors/gemini-cli-executor.service.js';
+import { CodexCliExecutorService } from './executors/codex-cli-executor.service.js';
 export class AgentExecutorProvider {
     factory;
     settingsRepository;
@@ -16,6 +18,12 @@ export class AgentExecutorProvider {
         if (executor instanceof ClaudeCodeExecutorService) {
             executor.updateProxyConfig(settings.litellmProxy);
         }
+        else if (executor instanceof GeminiCliExecutorService) {
+            executor.updateProxyConfig(settings.litellmProxy);
+        }
+        else if (executor instanceof CodexCliExecutorService) {
+            executor.updateProxyConfig(settings.litellmProxy);
+        }
         return executor;
     }
 }

package/dist/packages/core/src/infrastructure/services/agents/common/executors/codex-cli-executor.service.d.ts

@@ -7,7 +7,7 @@
  * Uses constructor dependency injection for the spawn function
  * to enable testability without mocking node:child_process directly.
  */
-import type { AgentType, AgentFeature, AgentConfig } from '../../../../../domain/generated/output.js';
+import type { AgentType, AgentFeature, AgentConfig, LiteLLMProxyConfig } from '../../../../../domain/generated/output.js';
 import type { AgentExecutionOptions, AgentExecutionResult, AgentExecutionStreamEvent } from '../../../../../application/ports/output/agents/agent-executor.interface.js';
 import type { SpawnFunction } from '../types.js';
 import { ExecutorBase } from './executor-base.js';
@@ -18,7 +18,9 @@ import { ExecutorBase } from './executor-base.js';
 export declare class CodexCliExecutorService extends ExecutorBase {
     readonly agentType: AgentType;
     private readonly authConfig?;
+    private proxyConfig?;
     constructor(spawn: SpawnFunction, authConfig?: AgentConfig);
+    updateProxyConfig(config?: LiteLLMProxyConfig): void;
     supportsFeature(feature: AgentFeature): boolean;
     execute(prompt: string, options?: AgentExecutionOptions): Promise<AgentExecutionResult>;
     executeStream(prompt: string, options?: AgentExecutionOptions): AsyncIterable<AgentExecutionStreamEvent>;

package/dist/packages/core/src/infrastructure/services/agents/common/executors/codex-cli-executor.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex-cli-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/codex-cli-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EAEZ,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EAEpB,yBAAyB,EAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAsBlD;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,YAAY;IACvD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAA4B;IAEzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAc;gBAE9B,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,EAAE,WAAW;IAK1D,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO;IAIzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAuItF,aAAa,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,yBAAyB,CAAC;IAoM3C;;;;OAIG;IACH,wDAAwD;IACxD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAyC;IAEnF,OAAO,CAAC,cAAc;IAkJtB;;;;;OAKG;IACH,OAAO,CAAC,SAAS;cA+BE,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAQtE;;OAEG;IACH,OAAO,CAAC,YAAY;IAUpB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAgBxB;;;OAGG;IACH,OAAO,CAAC,eAAe;IAkBvB;;;OAGG;IACH,OAAO,CAAC,sBAAsB;CAU/B"}
+{"version":3,"file":"codex-cli-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/codex-cli-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EAEX,kBAAkB,EACnB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EAEpB,yBAAyB,EAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAsBlD;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,YAAY;IACvD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAA4B;IAEzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAc;IAC1C,OAAO,CAAC,WAAW,CAAC,CAAqB;gBAE7B,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,EAAE,WAAW;IAK1D,iBAAiB,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,IAAI;IAIpD,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO;IAIzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAuItF,aAAa,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,yBAAyB,CAAC;IAoM3C;;;;OAIG;IACH,wDAAwD;IACxD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAyC;IAEnF,OAAO,CAAC,cAAc;IAkJtB;;;;;OAKG;IACH,OAAO,CAAC,SAAS;cA+BE,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IA2BtE;;OAEG;IACH,OAAO,CAAC,YAAY;IAUpB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAgBxB;;;OAGG;IACH,OAAO,CAAC,eAAe;IAkBvB;;;OAGG;IACH,OAAO,CAAC,sBAAsB;CAU/B"}

package/dist/packages/core/src/infrastructure/services/agents/common/executors/codex-cli-executor.service.js

@@ -10,6 +10,7 @@
 import * as fs from 'node:fs';
 import * as os from 'node:os';
 import * as path from 'node:path';
+import { LiteLLMProxyRoutingMode } from '../../../../../domain/generated/output.js';
 import { ExecutorBase } from './executor-base.js';
 /** Features supported by Codex CLI */
 const SUPPORTED_FEATURES = new Set([
@@ -36,10 +37,14 @@ const FATAL_STDERR_PATTERNS = [
 export class CodexCliExecutorService extends ExecutorBase {
     agentType = 'codex-cli';
     authConfig;
+    proxyConfig;
     constructor(spawn, authConfig) {
         super(spawn);
         this.authConfig = authConfig;
     }
+    updateProxyConfig(config) {
+        this.proxyConfig = config;
+    }
     supportsFeature(feature) {
         return SUPPORTED_FEATURES.has(feature);
     }
@@ -491,8 +496,22 @@ export class CodexCliExecutorService extends ExecutorBase {
     }
     buildSpawnEnv() {
         const env = super.buildSpawnEnv();
+        // Proxy mode: use OPENAI_BASE_URL + OPENAI_API_KEY (not CODEX_API_KEY)
+        const cx = this.proxyConfig?.codexCli;
+        if (cx?.routingMode === LiteLLMProxyRoutingMode.proxy && this.proxyConfig?.baseUrl) {
+            env.OPENAI_BASE_URL = this.proxyConfig.baseUrl;
+            if (this.proxyConfig.apiKey) {
+                env.OPENAI_API_KEY = this.proxyConfig.apiKey;
+            }
+            return env;
+        }
+        // Guard against unrecognized routing modes
+        if (cx?.routingMode && cx.routingMode !== LiteLLMProxyRoutingMode.direct) {
+            this.log(`WARNING: Unsupported routing mode "${cx.routingMode}" for Codex CLI, falling back to direct`);
+        }
+        // Direct mode: existing authConfig token injection
         if (this.authConfig?.authMethod === 'token' && this.authConfig.token) {
-            return { ...env, CODEX_API_KEY: this.authConfig.token };
+            env.CODEX_API_KEY = this.authConfig.token;
         }
         return env;
     }

package/dist/packages/core/src/infrastructure/services/agents/common/executors/gemini-cli-executor.service.d.ts

@@ -7,7 +7,7 @@
  * Uses constructor dependency injection for the spawn function
  * to enable testability without mocking node:child_process directly.
  */
-import type { AgentType, AgentFeature, AgentConfig } from '../../../../../domain/generated/output.js';
+import type { AgentType, AgentFeature, AgentConfig, LiteLLMProxyConfig } from '../../../../../domain/generated/output.js';
 import type { AgentExecutionOptions, AgentExecutionResult, AgentExecutionStreamEvent } from '../../../../../application/ports/output/agents/agent-executor.interface.js';
 import type { SpawnFunction } from '../types.js';
 import { ExecutorBase } from './executor-base.js';
@@ -18,7 +18,9 @@ import { ExecutorBase } from './executor-base.js';
 export declare class GeminiCliExecutorService extends ExecutorBase {
     readonly agentType: AgentType;
     private readonly authConfig?;
+    private proxyConfig?;
     constructor(spawn: SpawnFunction, authConfig?: AgentConfig);
+    updateProxyConfig(config?: LiteLLMProxyConfig): void;
     supportsFeature(feature: AgentFeature): boolean;
     execute(prompt: string, options?: AgentExecutionOptions): Promise<AgentExecutionResult>;
     executeStream(prompt: string, options?: AgentExecutionOptions): AsyncIterable<AgentExecutionStreamEvent>;

package/dist/packages/core/src/infrastructure/services/agents/common/executors/gemini-cli-executor.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gemini-cli-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/gemini-cli-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EAEZ,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD;;;GAGG;AACH,qBAAa,wBAAyB,SAAQ,YAAY;IACxD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAA6B;IAE1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAc;gBAE9B,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,EAAE,WAAW;IAK1D,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO;IAIzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAsFtF,aAAa,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,yBAAyB,CAAC;IAgF3C;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAmDxB;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAI3C;IAEF;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAY9B;;;OAGG;IACH,OAAO,CAAC,YAAY;IAgBpB,OAAO,CAAC,SAAS;cAyBE,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAOvE"}
+{"version":3,"file":"gemini-cli-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/gemini-cli-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EAEX,kBAAkB,EACnB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD;;;GAGG;AACH,qBAAa,wBAAyB,SAAQ,YAAY;IACxD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAA6B;IAE1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAc;IAC1C,OAAO,CAAC,WAAW,CAAC,CAAqB;gBAE7B,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,EAAE,WAAW;IAK1D,iBAAiB,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,IAAI;IAIpD,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO;IAIzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAsFtF,aAAa,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,yBAAyB,CAAC;IAgF3C;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAmDxB;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAI3C;IAEF;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAY9B;;;OAGG;IACH,OAAO,CAAC,YAAY;IAgBpB,OAAO,CAAC,SAAS;cAyBE,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CA8BvE"}

package/dist/packages/core/src/infrastructure/services/agents/common/executors/gemini-cli-executor.service.js

@@ -7,6 +7,7 @@
  * Uses constructor dependency injection for the spawn function
  * to enable testability without mocking node:child_process directly.
  */
+import { LiteLLMProxyRoutingMode } from '../../../../../domain/generated/output.js';
 import { ExecutorBase } from './executor-base.js';
 /** Features supported by Gemini CLI */
 const SUPPORTED_FEATURES = new Set(['session-resume', 'streaming', 'tool-scoping']);
@@ -17,10 +18,14 @@ const SUPPORTED_FEATURES = new Set(['session-resume', 'streaming', 'tool-scoping
 export class GeminiCliExecutorService extends ExecutorBase {
     agentType = 'gemini-cli';
     authConfig;
+    proxyConfig;
     constructor(spawn, authConfig) {
         super(spawn);
         this.authConfig = authConfig;
     }
+    updateProxyConfig(config) {
+        this.proxyConfig = config;
+    }
     supportsFeature(feature) {
         return SUPPORTED_FEATURES.has(feature);
     }
@@ -279,8 +284,25 @@ export class GeminiCliExecutorService extends ExecutorBase {
     }
     buildSpawnEnv() {
         const env = super.buildSpawnEnv();
+        // Proxy mode takes precedence — never leak user's personal key to proxy
+        const gc = this.proxyConfig?.geminiCli;
+        if (gc?.routingMode === LiteLLMProxyRoutingMode.proxy && this.proxyConfig?.baseUrl) {
+            env.GOOGLE_GEMINI_BASE_URL = this.proxyConfig.baseUrl;
+            if (this.proxyConfig.apiKey) {
+                env.GEMINI_API_KEY = this.proxyConfig.apiKey;
+            }
+            else {
+                this.log('WARNING: Proxy mode active but no proxy API key configured — proxy may reject requests');
+            }
+            return env;
+        }
+        // Guard against unrecognized routing modes
+        if (gc?.routingMode && gc.routingMode !== LiteLLMProxyRoutingMode.direct) {
+            this.log(`WARNING: Unsupported routing mode "${gc.routingMode}" for Gemini CLI, falling back to direct`);
+        }
+        // Direct mode: existing authConfig token injection
         if (this.authConfig?.authMethod === 'token' && this.authConfig.token) {
-            return { ...env, GEMINI_API_KEY: this.authConfig.token };
+            env.GEMINI_API_KEY = this.authConfig.token;
         }
         return env;
     }

package/dist/packages/core/src/infrastructure/services/agents/feature-agent/feature-agent-worker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"feature-agent-worker.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/feature-agent/feature-agent-worker.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG;AAEH,OAAO,kBAAkB,CAAC;AAiB1B,OAAO,EAAiC,KAAK,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAW7F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAyF1D;AAgCD;;;GAGG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA8S/D"}
+{"version":3,"file":"feature-agent-worker.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/feature-agent/feature-agent-worker.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG;AAEH,OAAO,kBAAkB,CAAC;AAmB1B,OAAO,EAAiC,KAAK,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAW7F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAyF1D;AAgCD;;;GAGG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAkT/D"}

package/dist/packages/core/src/infrastructure/services/agents/feature-agent/feature-agent-worker.js

@@ -17,6 +17,8 @@ import { createFeatureAgentGraph } from './feature-agent-graph.js';
 import { createFastFeatureAgentGraph } from './fast-feature-agent-graph.js';
 import { createCheckpointer } from '../common/checkpointer.js';
 import { ClaudeCodeExecutorService } from '../../../services/agents/common/executors/claude-code-executor.service.js';
+import { GeminiCliExecutorService } from '../../../services/agents/common/executors/gemini-cli-executor.service.js';
+import { CodexCliExecutorService } from '../../../services/agents/common/executors/codex-cli-executor.service.js';
 import { AgentRunStatus, SdlcLifecycle } from '../../../../domain/generated/output.js';
 import { initializeSettings } from '../../../services/settings.service.js';
 import { InitializeSettingsUseCase } from '../../../../application/use-cases/settings/initialize-settings.use-case.js';
@@ -188,6 +190,12 @@ export async function runWorker(args) {
         if (executor instanceof ClaudeCodeExecutorService) {
             executor.updateProxyConfig(settings.litellmProxy);
         }
+        else if (executor instanceof GeminiCliExecutorService) {
+            executor.updateProxyConfig(settings.litellmProxy);
+        }
+        else if (executor instanceof CodexCliExecutorService) {
+            executor.updateProxyConfig(settings.litellmProxy);
+        }
     }
     else {
         log('Creating executor from configured agent settings...');

package/dist/packages/core/src/infrastructure/services/mcp-server-browser/index.d.ts

@@ -0,0 +1,2 @@
+export { McpServerBrowserService } from './mcp-server-browser.service.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/packages/core/src/infrastructure/services/mcp-server-browser/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/src/infrastructure/services/mcp-server-browser/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC"}

package/dist/packages/core/src/infrastructure/services/mcp-server-browser/index.js

@@ -0,0 +1 @@
+export { McpServerBrowserService } from './mcp-server-browser.service.js';

package/dist/packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.schema.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Zod Schemas for MCP Server Browser Data Validation
+ *
+ * Validates all external data boundaries:
+ * 1. LiteLLM proxy GET /public/mcp_hub response
+ * 2. LiteLLM proxy GET /mcp-rest/tools/list response
+ *
+ * All data from external sources is untrusted. Strings are capped
+ * to prevent excessive memory use in UI rendering.
+ */
+import { z } from 'zod';
+declare const McpServerInfoSchema: z.ZodObject<{
+    server_id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    name: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    alias: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    server_name: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    url: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    transport: z.ZodDefault<z.ZodString>;
+    spec_path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    auth_type: z.ZodDefault<z.ZodString>;
+    mcp_info: z.ZodOptional<z.ZodObject<{
+        server_name: z.ZodOptional<z.ZodString>;
+        description: z.ZodPipe<z.ZodDefault<z.ZodString>, z.ZodTransform<string, string>>;
+        mcp_server_cost_info: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$loose>>;
+}, z.core.$strip>;
+export declare const McpServerListSchema: z.ZodArray<z.ZodObject<{
+    server_id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    name: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    alias: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    server_name: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    url: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    transport: z.ZodDefault<z.ZodString>;
+    spec_path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    auth_type: z.ZodDefault<z.ZodString>;
+    mcp_info: z.ZodOptional<z.ZodObject<{
+        server_name: z.ZodOptional<z.ZodString>;
+        description: z.ZodPipe<z.ZodDefault<z.ZodString>, z.ZodTransform<string, string>>;
+        mcp_server_cost_info: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$loose>>;
+}, z.core.$strip>>;
+declare const McpToolInfoSchema: z.ZodObject<{
+    name: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    title: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    description: z.ZodPipe<z.ZodDefault<z.ZodString>, z.ZodTransform<string, string>>;
+    inputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export declare const McpToolListResponseSchema: z.ZodObject<{
+    tools: z.ZodArray<z.ZodObject<{
+        name: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        title: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+        description: z.ZodPipe<z.ZodDefault<z.ZodString>, z.ZodTransform<string, string>>;
+        inputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const McpToolListFallbackSchema: z.ZodArray<z.ZodObject<{
+    name: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    title: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    description: z.ZodPipe<z.ZodDefault<z.ZodString>, z.ZodTransform<string, string>>;
+    inputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>>;
+export type ValidatedMcpServerInfo = z.infer<typeof McpServerInfoSchema>;
+export type ValidatedMcpToolInfo = z.infer<typeof McpToolInfoSchema>;
+export {};
+//# sourceMappingURL=mcp-server-browser.schema.d.ts.map

package/dist/packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server-browser.schema.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;iBAavB,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;kBAA+B,CAAC;AAEhE,QAAA,MAAM,iBAAiB;;;;;iBAWrB,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;iBAEpC,CAAC;AAGH,eAAO,MAAM,yBAAyB;;;;;kBAA6B,CAAC;AAEpE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACzE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.schema.js

@@ -0,0 +1,53 @@
+/**
+ * Zod Schemas for MCP Server Browser Data Validation
+ *
+ * Validates all external data boundaries:
+ * 1. LiteLLM proxy GET /public/mcp_hub response
+ * 2. LiteLLM proxy GET /mcp-rest/tools/list response
+ *
+ * All data from external sources is untrusted. Strings are capped
+ * to prevent excessive memory use in UI rendering.
+ */
+import { z } from 'zod';
+const McpServerMcpInfoSchema = z
+    .object({
+    server_name: z.string().optional(),
+    description: z
+        .string()
+        .default('')
+        .transform((s) => s.slice(0, 2000)),
+    mcp_server_cost_info: z.record(z.string(), z.unknown()).optional(),
+})
+    .passthrough();
+const McpServerInfoSchema = z.object({
+    server_id: z.string().transform((s) => s.slice(0, 200)),
+    name: z.string().transform((s) => s.slice(0, 100)),
+    alias: z.string().nullable().optional(),
+    server_name: z.string().transform((s) => s.slice(0, 100)),
+    url: z
+        .string()
+        .transform((s) => s.slice(0, 500))
+        .optional(),
+    transport: z.string().default('http'),
+    spec_path: z.string().nullable().optional(),
+    auth_type: z.string().default('none'),
+    mcp_info: McpServerMcpInfoSchema.optional(),
+});
+export const McpServerListSchema = z.array(McpServerInfoSchema);
+const McpToolInfoSchema = z.object({
+    name: z.string().transform((s) => s.slice(0, 200)),
+    title: z
+        .string()
+        .transform((s) => s.slice(0, 200))
+        .optional(),
+    description: z
+        .string()
+        .default('')
+        .transform((s) => s.slice(0, 2000)),
+    inputSchema: z.record(z.string(), z.unknown()).optional(),
+});
+export const McpToolListResponseSchema = z.object({
+    tools: z.array(McpToolInfoSchema),
+});
+// Fallback: tools/list may return a bare array in some LiteLLM versions
+export const McpToolListFallbackSchema = z.array(McpToolInfoSchema);

package/dist/packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.service.d.ts

@@ -0,0 +1,17 @@
+/**
+ * MCP Server Browser Service
+ *
+ * Implements IMcpServerBrowserService using Node 22+ native fetch for
+ * read-only HTTP retrieval from LiteLLM proxy endpoints:
+ * - GET /public/mcp_hub — list accessible MCP servers
+ * - GET /mcp-rest/tools/list — list available MCP tools
+ *
+ * Pattern: AbortController timeout, redirect rejection, size limit, Zod validation.
+ * Silent failure to empty arrays on any error.
+ */
+import type { IMcpServerBrowserService, McpServerInfo, McpToolInfo } from '../../../application/ports/output/services/mcp-server-browser.interface.js';
+export declare class McpServerBrowserService implements IMcpServerBrowserService {
+    fetchServers(proxyBaseUrl: string, apiKey?: string): Promise<McpServerInfo[]>;
+    fetchTools(proxyBaseUrl: string, apiKey?: string): Promise<McpToolInfo[]>;
+}
+//# sourceMappingURL=mcp-server-browser.service.d.ts.map

package/dist/packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server-browser.service.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EACV,wBAAwB,EACxB,aAAa,EACb,WAAW,EACZ,MAAM,4EAA4E,CAAC;AAUpF,qBACa,uBAAwB,YAAW,wBAAwB;IAChE,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAoB7E,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;CAwBhF"}

package/dist/packages/core/src/infrastructure/services/mcp-server-browser/mcp-server-browser.service.js

@@ -0,0 +1,113 @@
+/**
+ * MCP Server Browser Service
+ *
+ * Implements IMcpServerBrowserService using Node 22+ native fetch for
+ * read-only HTTP retrieval from LiteLLM proxy endpoints:
+ * - GET /public/mcp_hub — list accessible MCP servers
+ * - GET /mcp-rest/tools/list — list available MCP tools
+ *
+ * Pattern: AbortController timeout, redirect rejection, size limit, Zod validation.
+ * Silent failure to empty arrays on any error.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { injectable } from 'tsyringe';
+import { McpServerListSchema, McpToolListResponseSchema, McpToolListFallbackSchema, } from './mcp-server-browser.schema.js';
+const FETCH_TIMEOUT_MS = 10_000;
+const MAX_RESPONSE_SIZE = 5_000_000;
+let McpServerBrowserService = class McpServerBrowserService {
+    async fetchServers(proxyBaseUrl, apiKey) {
+        try {
+            const url = parseAndValidateUrl(proxyBaseUrl);
+            if (!url)
+                return [];
+            const endpoint = `${url}/public/mcp_hub`;
+            const headers = buildHeaders(apiKey);
+            const json = await fetchJson(endpoint, headers);
+            if (json === null)
+                return [];
+            const parsed = McpServerListSchema.safeParse(json);
+            if (!parsed.success)
+                return [];
+            return parsed.data;
+        }
+        catch {
+            return [];
+        }
+    }
+    async fetchTools(proxyBaseUrl, apiKey) {
+        try {
+            const url = parseAndValidateUrl(proxyBaseUrl);
+            if (!url)
+                return [];
+            const endpoint = `${url}/mcp-rest/tools/list`;
+            const headers = buildHeaders(apiKey);
+            const json = await fetchJson(endpoint, headers);
+            if (json === null)
+                return [];
+            // Try wrapped format first: { tools: [...] }
+            const wrapped = McpToolListResponseSchema.safeParse(json);
+            if (wrapped.success)
+                return wrapped.data.tools;
+            // Fallback: bare array [...]
+            const bare = McpToolListFallbackSchema.safeParse(json);
+            if (bare.success)
+                return bare.data;
+            return [];
+        }
+        catch {
+            return [];
+        }
+    }
+};
+McpServerBrowserService = __decorate([
+    injectable()
+], McpServerBrowserService);
+export { McpServerBrowserService };
+function parseAndValidateUrl(proxyBaseUrl) {
+    try {
+        const url = new URL(proxyBaseUrl);
+        if (url.protocol !== 'http:' && url.protocol !== 'https:')
+            return null;
+        return url.toString().replace(/\/$/, '');
+    }
+    catch {
+        return null;
+    }
+}
+function buildHeaders(apiKey) {
+    const headers = {};
+    if (apiKey) {
+        headers['Authorization'] = `Bearer ${apiKey}`;
+    }
+    return headers;
+}
+async function fetchJson(endpoint, headers) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+    try {
+        const res = await fetch(endpoint, {
+            signal: controller.signal,
+            redirect: 'error',
+            headers,
+        });
+        if (!res.ok)
+            return null;
+        const text = await res.text();
+        if (text.length > MAX_RESPONSE_SIZE)
+            return null;
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            return null;
+        }
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}

package/dist/src/presentation/web/app/actions/fetch-mcp-server-tools.d.ts

@@ -0,0 +1,5 @@
+import type { FetchMcpServerToolsResult } from '../../../../../packages/core/src/application/use-cases/mcp-servers/fetch-mcp-server-tools.use-case.js';
+export declare function fetchMcpServerToolsAction(): Promise<FetchMcpServerToolsResult & {
+    error?: string;
+}>;
+//# sourceMappingURL=fetch-mcp-server-tools.d.ts.map

package/dist/src/presentation/web/app/actions/fetch-mcp-server-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-mcp-server-tools.d.ts","sourceRoot":"","sources":["../../../../../../src/presentation/web/app/actions/fetch-mcp-server-tools.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mFAAmF,CAAC;AAEnI,wBAAsB,yBAAyB,IAAI,OAAO,CACxD,yBAAyB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAC/C,CAOA"}