llm-cli-gateway 1.5.22 → 1.5.23

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 All notable changes to the llm-cli-gateway project.
 
+## [1.5.23] - 2026-05-25
+
+### Fixed
+
+- Add a ChatGPT-specific connector URL that uses a generated high-entropy no-auth path, while keeping the normal `/mcp` endpoint bearer-protected for clients that support Authorization headers.
+- Make `tunnel start`, `public-url`, `print-client-config`, and the new `chatgpt-url` command report the ChatGPT URL with `Authentication: No Authentication` guidance.
+- Teach the HTTP transport to serve explicitly configured no-auth connector paths without weakening auth on the default `/mcp` endpoint.
+
 ## [1.5.22] - 2026-05-24
 
 ### Added

package/dist/doctor.d.ts

@@ -67,6 +67,7 @@ export interface DoctorReport {
             path: string;
             public_url_configured: boolean;
             public_url: string | null;
+            chatgpt_connector_url: string | null;
         };
     };
     auth: {

package/dist/doctor.js

@@ -172,6 +172,24 @@ function defaultTransport(env) {
         return "http";
     return "stdio";
 }
+function chatGPTConnectorUrl(env, rawPublicUrl) {
+    const path = (env.LLM_GATEWAY_NO_AUTH_PATHS || "")
+        .split(/[,;\s]+/)
+        .map(value => value.trim())
+        .find(value => value.startsWith("/") && !value.includes("?") && !value.includes("#"));
+    if (!rawPublicUrl || !path)
+        return null;
+    try {
+        const url = new URL(rawPublicUrl);
+        url.pathname = path;
+        url.search = "";
+        url.hash = "";
+        return redactDiagnosticUrl(url.toString());
+    }
+    catch {
+        return null;
+    }
+}
 export function createDoctorReport(env = process.env) {
     const auth = loadAuthConfig(env);
     const transport = defaultTransport(env);
@@ -202,6 +220,7 @@ export function createDoctorReport(env = process.env) {
                 path: env.LLM_GATEWAY_HTTP_PATH || "/mcp",
                 public_url_configured: Boolean(publicUrl),
                 public_url: publicUrl,
+                chatgpt_connector_url: chatGPTConnectorUrl(env, rawPublicUrl),
             },
         },
         auth: {

package/dist/http-transport.js

@@ -36,10 +36,26 @@ function jsonError(res, status, message) {
     res.writeHead(status, { "content-type": "application/json" });
     res.end(JSON.stringify({ error: message }));
 }
+function parseNoAuthPaths(raw, protectedPath) {
+    const paths = new Set();
+    for (const value of (raw ?? "").split(/[,;\s]+/)) {
+        const path = value.trim();
+        if (path &&
+            path.startsWith("/") &&
+            path !== protectedPath &&
+            !path.includes("?") &&
+            !path.includes("#") &&
+            !path.includes("..")) {
+            paths.add(path);
+        }
+    }
+    return paths;
+}
 export async function startHttpGateway(options) {
     const host = options.host ?? process.env.LLM_GATEWAY_HTTP_HOST ?? "127.0.0.1";
     const port = options.port ?? Number(process.env.LLM_GATEWAY_HTTP_PORT ?? 3333);
     const path = options.path ?? process.env.LLM_GATEWAY_HTTP_PATH ?? "/mcp";
+    const noAuthPaths = parseNoAuthPaths(process.env.LLM_GATEWAY_NO_AUTH_PATHS, path);
     const logger = options.logger ?? noopLogger;
     const sessions = new Map();
     const token = getRequiredBearerToken();
@@ -78,14 +94,17 @@ export async function startHttpGateway(options) {
                 res.end(JSON.stringify({ ok: true, sessions: sessions.size }));
                 return;
             }
-            if (url.pathname !== path) {
+            const noAuthPath = noAuthPaths.has(url.pathname);
+            if (url.pathname !== path && !noAuthPath) {
                 jsonError(res, 404, "Not found");
                 return;
             }
-            const auth = authorizeBearerRequest(req, token);
-            if (!auth.ok) {
-                writeAuthFailure(res, auth);
-                return;
+            if (!noAuthPath) {
+                const auth = authorizeBearerRequest(req, token);
+                if (!auth.ok) {
+                    writeAuthFailure(res, auth);
+                    return;
+                }
             }
             if (req.method !== "GET" && req.method !== "POST" && req.method !== "DELETE") {
                 methodNotAllowed(res);
@@ -150,6 +169,9 @@ export async function startHttpGateway(options) {
     const actualPort = typeof address === "object" && address ? address.port : port;
     const url = `http://${host}:${actualPort}${path}`;
     logger.info(`HTTP MCP transport listening at ${url}`);
+    if (noAuthPaths.size > 0) {
+        logger.info(`HTTP MCP transport also serving ${noAuthPaths.size} no-auth connector path(s)`);
+    }
     return {
         server: httpServer,
         url,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "llm-cli-gateway",
-  "version": "1.5.22",
+  "version": "1.5.23",
   "mcpName": "io.github.verivus-oss/llm-cli-gateway",
   "description": "MCP server providing unified access to Claude Code, Codex, Gemini, Grok, and Mistral Vibe CLIs with session management, retry logic, async job orchestration, durable job results, and cross-LLM validation.",
   "license": "MIT",

package/setup/status.schema.json

@@ -54,7 +54,8 @@
             "port": { "type": "integer", "minimum": 1, "maximum": 65535 },
             "path": { "type": "string" },
             "public_url_configured": { "type": "boolean" },
-            "public_url": { "type": ["string", "null"] }
+            "public_url": { "type": ["string", "null"] },
+            "chatgpt_connector_url": { "type": ["string", "null"] }
           },
           "additionalProperties": false
         }