llm-cli-gateway 1.17.7 → 1.17.8

package/CHANGELOG.md

@@ -4,6 +4,43 @@ All notable changes to the llm-cli-gateway project.
 
 ## Unreleased
 
+## [1.17.8] - 2026-06-04: release-audit integrity fix + shrinkwrap groundwork
+
+Patch release fixing a masking bug in the release security audit and documenting
+the consumer-side tar-stream@2.2.0 exposure honestly: `package.json#overrides`
+only pins tar-stream 3.1.7 in this repo's own tree — npm overrides never
+propagate to dependents, so `npm install llm-cli-gateway` still resolves
+tar-stream@2.2.0 under better-sqlite3 → prebuild-install → tar-fs in the
+consumer's tree. The canonical remedy, a published `npm-shrinkwrap.json`, is
+currently **ignored by npm itself** (npm/cli#7977, verified empirically against
+npm 11.12.1 with lockfileVersion 2 and 3): no mechanism available to this
+package can pin a dependent's transitive resolution today.
+
+### Fixed
+
+- `scripts/release-security-audit.sh`: lockfile package names were derived with
+  `path.split('/node_modules/')`, which never matches top-level
+  `node_modules/<pkg>` entries — the packed-consumer-install check silently
+  passed 1.17.7 despite tar-stream@2.2.0 in the consumer tree. Names now derive
+  from a `node_modules/` split that handles top-level and nested entries.
+
+### Added
+
+- Ship `npm-shrinkwrap.json` (byte-identical copy of `package-lock.json`,
+  regenerated by `scripts/pre-release.sh`; the audit fails the release if the
+  two diverge). Inert today because of npm/cli#7977, but it becomes effective
+  the moment npm honours published shrinkwraps again — the audit detects that
+  flip and says so.
+- Consumer-tree tar-stream 2.x is now a **documented advisory** in the audit
+  (warn, not fail): the exposure is upstream (better-sqlite3's install path),
+  install-time only (extracting the prebuilt binding fetched over HTTPS from
+  better-sqlite3's GitHub releases), and unfixable from this package until
+  npm/cli#7977 is resolved or better-sqlite3 drops `prebuild-install`. Any
+  other blocked version in the consumer tree still hard-fails.
+- `scripts/pre-release.sh`: better-sqlite3 native-binding sanity check
+  (auto-`npm rebuild` when `npm install` re-lays the subtree without running
+  its install script) and deterministic shrinkwrap regeneration.
+
 ## [1.17.7] - 2026-06-04: Socket supply-chain score restoration
 
 Patch release restoring the npm Socket supply-chain posture from 1.17.5

package/dist/index.js

@@ -1444,9 +1444,7 @@ export function prepareGrokRequest(params, runtime = resolveGatewayServerRuntime
         args.push("--prompt-file", params.promptFile);
     }
     if (params.promptJson !== undefined) {
-        const promptJsonValue = typeof params.promptJson === "string"
-            ? params.promptJson
-            : JSON.stringify(params.promptJson);
+        const promptJsonValue = typeof params.promptJson === "string" ? params.promptJson : JSON.stringify(params.promptJson);
         if (!promptJsonValue.trim()) {
             return createErrorResponse(params.operation, 1, "", corrId, new Error("promptJson: must be a non-empty JSON string or serializable value"));
         }
@@ -3454,10 +3452,7 @@ export function createGatewayServer(deps = {}) {
             .optional()
             .describe("Grok --verbatim: send the prompt exactly as given. Also skips gateway optimizePrompt when true."),
         agents: z
-            .union([
-            z.string().min(1),
-            z.record(z.string(), z.record(z.string(), z.unknown())),
-        ])
+            .union([z.string().min(1), z.record(z.string(), z.record(z.string(), z.unknown()))])
             .optional()
             .describe("Grok --agents <JSON>: inline subagent definitions (JSON string or name → { description, prompt, … } map)."),
         promptFile: z
@@ -3478,10 +3473,16 @@ export function createGatewayServer(deps = {}) {
             .boolean()
             .optional()
             .describe("Grok --experimental-memory: enable cross-session memory."),
-        noAltScreen: z.boolean().optional().describe("Grok --no-alt-screen: run inline without alt screen."),
+        noAltScreen: z
+            .boolean()
+            .optional()
+            .describe("Grok --no-alt-screen: run inline without alt screen."),
         noMemory: z.boolean().optional().describe("Grok --no-memory: disable cross-session memory."),
         noPlan: z.boolean().optional().describe("Grok --no-plan: disable plan mode."),
-        noSubagents: z.boolean().optional().describe("Grok --no-subagents: disable subagent spawning."),
+        noSubagents: z
+            .boolean()
+            .optional()
+            .describe("Grok --no-subagents: disable subagent spawning."),
         oauth: z.boolean().optional().describe("Grok --oauth: use OAuth during authentication."),
         restoreCode: z
             .boolean()
@@ -4258,10 +4259,7 @@ export function createGatewayServer(deps = {}) {
                 .optional()
                 .describe("Grok --verbatim: send the prompt exactly as given. Also skips gateway optimizePrompt when true."),
             agents: z
-                .union([
-                z.string().min(1),
-                z.record(z.string(), z.record(z.string(), z.unknown())),
-            ])
+                .union([z.string().min(1), z.record(z.string(), z.record(z.string(), z.unknown()))])
                 .optional()
                 .describe("Grok --agents <JSON>: inline subagent definitions (JSON string or name → { description, prompt, … } map)."),
             promptFile: z
@@ -4286,7 +4284,10 @@ export function createGatewayServer(deps = {}) {
                 .boolean()
                 .optional()
                 .describe("Grok --no-alt-screen: run inline without alt screen."),
-            noMemory: z.boolean().optional().describe("Grok --no-memory: disable cross-session memory."),
+            noMemory: z
+                .boolean()
+                .optional()
+                .describe("Grok --no-memory: disable cross-session memory."),
             noPlan: z.boolean().optional().describe("Grok --no-plan: disable plan mode."),
             noSubagents: z
                 .boolean()