llm-cli-gateway 1.5.33 → 1.5.35

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to the llm-cli-gateway project.
 
+## [1.5.35] - 2026-05-25
+
+### Fixed
+
+- Keep metadata-only CLI commands quiet by avoiding flight-recorder and job-persistence startup before `--version`, help, `doctor --json`, and `contracts --json`; machine-readable JSON commands now emit JSON without startup log lines.
+
+## [1.5.34] - 2026-05-25
+
+### Security
+
+- Pin the development Redis client fixture back to `ioredis@5.9.2` and reject the Socket-flagged `ioredis@5.10.1` / `@ioredis/commands@1.5.1` lockfile pair in the release security audit. The runtime Redis integration remains an optional peer dependency.
+
 ## [1.5.33] - 2026-05-25
 
 ### Security

package/dist/index.js

@@ -108,6 +108,22 @@ const SYNC_DEADLINE_MS = (() => {
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 const SKILLS_DIR = join(__dirname, "..", ".agents", "skills");
+function packageVersion() {
+    const candidates = [
+        join(__dirname, "..", "package.json"),
+        join(__dirname, "..", "..", "package.json"),
+    ];
+    for (const candidate of candidates) {
+        try {
+            const parsed = JSON.parse(readFileSync(candidate, "utf8"));
+            return parsed.version || "unknown";
+        }
+        catch {
+            // Try next candidate.
+        }
+    }
+    return "unknown";
+}
 function loadSkills() {
     const skills = [];
     try {
@@ -158,29 +174,51 @@ let sessionManager;
 let db = null;
 const performanceMetrics = new PerformanceMetrics();
 let resourceProvider;
-const flightRecorder = createFlightRecorder(logger);
+let flightRecorder = null;
 // Resolved persistence config — single source of truth for the async-job backend.
 // Driven by ~/.llm-cli-gateway/config.toml (+ deprecated env-var overrides).
 // When backend = "none", the JobStore is null AND *_request_async tools are not
 // registered (see createGatewayServer), making silent in-memory loss
 // structurally impossible.
-const persistenceConfig = loadPersistenceConfig(logger);
-const jobStore = (() => {
+let persistenceConfig = null;
+let jobStore = null;
+let jobStoreInitialized = false;
+let asyncJobManager = null;
+let approvalManager = null;
+function getFlightRecorder(runtimeLogger = logger) {
+    flightRecorder ??= createFlightRecorder(runtimeLogger);
+    return flightRecorder;
+}
+function getPersistenceConfig(runtimeLogger = logger) {
+    persistenceConfig ??= loadPersistenceConfig(runtimeLogger);
+    return persistenceConfig;
+}
+function getJobStore(runtimeLogger = logger) {
+    if (jobStoreInitialized)
+        return jobStore;
+    jobStoreInitialized = true;
     try {
-        return createJobStore(persistenceConfig, logger);
+        jobStore = createJobStore(getPersistenceConfig(runtimeLogger), runtimeLogger);
     }
     catch (err) {
-        logger.error("Failed to open durable job store; async tools will be unavailable", err);
-        return null;
+        runtimeLogger.error("Failed to open durable job store; async tools will be unavailable", err);
+        jobStore = null;
     }
-})();
-function newAsyncJobManager(metrics, runtimeLogger, store = jobStore) {
+    return jobStore;
+}
+function newAsyncJobManager(metrics, runtimeLogger, store = getJobStore(runtimeLogger)) {
     return new AsyncJobManager(runtimeLogger, (cli, durationMs, success) => {
         metrics.recordRequest(cli, durationMs, success);
     }, store);
 }
-const asyncJobManager = newAsyncJobManager(performanceMetrics, logger);
-const approvalManager = new ApprovalManager(undefined, logger);
+function getAsyncJobManager(runtimeLogger = logger) {
+    asyncJobManager ??= newAsyncJobManager(performanceMetrics, runtimeLogger);
+    return asyncJobManager;
+}
+function getApprovalManager(runtimeLogger = logger) {
+    approvalManager ??= new ApprovalManager(undefined, runtimeLogger);
+    return approvalManager;
+}
 const MCP_SERVER_ENUM = z.enum(CLAUDE_MCP_SERVER_NAMES);
 // U22: Session-provider enum extended to five providers. The storage layer's
 // CLI_TYPES already includes "mistral"; the MCP-tool layer mirrors that here so
@@ -199,9 +237,11 @@ function resolveGatewayServerRuntime(deps = {}, options = {}) {
             ? // Factory-created test/HTTP session servers must not mark another instance's
                 // durable jobs orphaned. Stdio startup injects the process-global manager.
                 newAsyncJobManager(runtimePerformanceMetrics, runtimeLogger, null)
-            : asyncJobManager);
+            : getAsyncJobManager(runtimeLogger));
     const runtimeApprovalManager = deps.approvalManager ??
-        (options.isolateState ? new ApprovalManager(undefined, runtimeLogger) : approvalManager);
+        (options.isolateState
+            ? new ApprovalManager(undefined, runtimeLogger)
+            : getApprovalManager(runtimeLogger));
     return {
         sessionManager: runtimeSessionManager,
         resourceProvider: deps.resourceProvider ??
@@ -212,9 +252,9 @@ function resolveGatewayServerRuntime(deps = {}, options = {}) {
         performanceMetrics: runtimePerformanceMetrics,
         asyncJobManager: runtimeAsyncJobManager,
         approvalManager: runtimeApprovalManager,
-        flightRecorder: deps.flightRecorder ?? flightRecorder,
+        flightRecorder: deps.flightRecorder ?? getFlightRecorder(runtimeLogger),
         logger: runtimeLogger,
-        persistence: deps.persistence ?? persistenceConfig,
+        persistence: deps.persistence ?? getPersistenceConfig(runtimeLogger),
     };
 }
 // Per-CLI idle timeouts: kill process if no stdout/stderr activity for this duration.
@@ -3944,7 +3984,7 @@ function registerHealthResource(server) {
         description: "Async job health (CPU, memory, zombie detection)",
         mimeType: "application/json",
     }, async (uri) => {
-        const health = asyncJobManager.getJobHealth();
+        const health = getAsyncJobManager().getJobHealth();
         return {
             contents: [
                 {
@@ -3980,8 +4020,10 @@ async function shutdown(signal) {
             await db.disconnect();
             logger.info("Database connections closed");
         }
-        flightRecorder.close();
-        logger.info("Flight recorder closed");
+        if (flightRecorder) {
+            flightRecorder.close();
+            logger.info("Flight recorder closed");
+        }
         process.exit(0);
     }
     catch (error) {
@@ -3997,6 +4039,20 @@ process.on("SIGINT", () => shutdown("SIGINT"));
 async function main() {
     startWindowsBootstrapperSelfHeal();
     const args = process.argv.slice(2);
+    if (args[0] === "--version" || args[0] === "-version" || args[0] === "version") {
+        process.stdout.write(`${packageVersion()}\n`);
+        return;
+    }
+    if (args[0] === "--help" || args[0] === "-help" || args[0] === "/?" || args[0] === "help") {
+        process.stdout.write([
+            "llm-cli-gateway MCP server",
+            "",
+            "Usage:",
+            "  llm-cli-gateway [doctor --json|contracts --json|--transport=http|--version]",
+            "",
+        ].join("\n"));
+        return;
+    }
     if (args[0] === "doctor") {
         if (args.includes("--json")) {
             printDoctorJson();
@@ -4035,9 +4091,9 @@ async function main() {
         resourceProvider,
         db,
         performanceMetrics,
-        asyncJobManager,
-        approvalManager,
-        flightRecorder,
+        asyncJobManager: getAsyncJobManager(logger),
+        approvalManager: getApprovalManager(logger),
+        flightRecorder: getFlightRecorder(logger),
         logger,
     };
     if (transportMode === "http") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "llm-cli-gateway",
-  "version": "1.5.33",
+  "version": "1.5.35",
   "mcpName": "io.github.verivus-oss/llm-cli-gateway",
   "description": "MCP server providing unified access to Claude Code, Codex, Gemini, Grok, and Mistral Vibe CLIs with session management, retry logic, async job orchestration, durable job results, and cross-LLM validation.",
   "license": "MIT",
@@ -109,7 +109,7 @@
     "@vitest/coverage-v8": "^4.1.2",
     "eslint": "^8.57.1",
     "eslint-config-prettier": "^9.0.0",
-    "ioredis": "^5.4.1",
+    "ioredis": "5.9.2",
     "pg": "^8.12.0",
     "prettier": "^3.0.0",
     "typescript": "^5.0.0",