llm-cli-gateway 2.10.0 → 2.11.1

package/dist/validation-tools.d.ts

@@ -1,7 +1,68 @@
+import { z } from "zod/v3";
 import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import type { AsyncJobManager } from "./async-job-manager.js";
 import { type ValidationOrchestratorDeps } from "./validation-orchestrator.js";
 export interface ValidationToolDeps extends ValidationOrchestratorDeps {
     asyncJobManager: AsyncJobManager;
 }
+export declare function buildValidationSchemas(deps: ValidationToolDeps): {
+    providerSchema: z.ZodEnum<[string, ...string[]]>;
+    providerListSchema: z.ZodDefault<z.ZodArray<z.ZodEnum<[string, ...string[]]>, "many">>;
+    normalizedProviderResultSchema: z.ZodObject<{
+        provider: z.ZodEnum<[string, ...string[]]>;
+        model: z.ZodNullable<z.ZodString>;
+        status: z.ZodEnum<["running", "completed", "failed", "canceled", "orphaned", "skipped"]>;
+        verdict: z.ZodNullable<z.ZodString>;
+        rationale: z.ZodNullable<z.ZodString>;
+        risks: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        rawJobReference: z.ZodNullable<z.ZodObject<{
+            jobId: z.ZodString;
+            correlationId: z.ZodString;
+            statusTool: z.ZodLiteral<"job_status">;
+            resultTool: z.ZodLiteral<"job_result">;
+        }, "strip", z.ZodTypeAny, {
+            correlationId: string;
+            jobId: string;
+            statusTool: "job_status";
+            resultTool: "job_result";
+        }, {
+            correlationId: string;
+            jobId: string;
+            statusTool: "job_status";
+            resultTool: "job_result";
+        }>>;
+        error: z.ZodNullable<z.ZodString>;
+        warning: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        error: string | null;
+        status: "running" | "completed" | "failed" | "canceled" | "orphaned" | "skipped";
+        model: string | null;
+        provider: string;
+        rawJobReference: {
+            correlationId: string;
+            jobId: string;
+            statusTool: "job_status";
+            resultTool: "job_result";
+        } | null;
+        verdict: string | null;
+        rationale: string | null;
+        risks: string[];
+        warning?: string | undefined;
+    }, {
+        error: string | null;
+        status: "running" | "completed" | "failed" | "canceled" | "orphaned" | "skipped";
+        model: string | null;
+        provider: string;
+        rawJobReference: {
+            correlationId: string;
+            jobId: string;
+            statusTool: "job_status";
+            resultTool: "job_result";
+        } | null;
+        verdict: string | null;
+        rationale: string | null;
+        risks?: string[] | undefined;
+        warning?: string | undefined;
+    }>;
+};
 export declare function registerValidationTools(server: McpServer, deps: ValidationToolDeps): void;

package/dist/validation-tools.js

@@ -1,26 +1,33 @@
 import { z } from "zod/v3";
+import { CLI_TYPES } from "./session-manager.js";
 import { getAvailableCliInfo } from "./model-registry.js";
+import { apiProviderCatalogEntry } from "./api-request.js";
 import { collectValidationJobResult, startJudgeSynthesis, startValidationRun, } from "./validation-orchestrator.js";
-const providerSchema = z.enum(["claude", "codex", "gemini", "grok", "mistral"]);
-const providerListSchema = z.array(providerSchema).min(1).default(["claude", "codex"]);
-const normalizedProviderResultSchema = z.object({
-    provider: providerSchema,
-    model: z.string().nullable(),
-    status: z.enum(["running", "completed", "failed", "canceled", "orphaned", "skipped"]),
-    verdict: z.string().nullable(),
-    rationale: z.string().nullable(),
-    risks: z.array(z.string()).default([]),
-    rawJobReference: z
-        .object({
-        jobId: z.string(),
-        correlationId: z.string(),
-        statusTool: z.literal("job_status"),
-        resultTool: z.literal("job_result"),
-    })
-        .nullable(),
-    error: z.string().nullable(),
-    warning: z.string().optional(),
-});
+export function buildValidationSchemas(deps) {
+    const apiNames = (deps.apiProviders ?? []).map(p => p.name);
+    const allowed = [...CLI_TYPES, ...apiNames];
+    const providerSchema = z.enum(allowed);
+    const providerListSchema = z.array(providerSchema).min(1).default(["claude", "codex"]);
+    const normalizedProviderResultSchema = z.object({
+        provider: providerSchema,
+        model: z.string().nullable(),
+        status: z.enum(["running", "completed", "failed", "canceled", "orphaned", "skipped"]),
+        verdict: z.string().nullable(),
+        rationale: z.string().nullable(),
+        risks: z.array(z.string()).default([]),
+        rawJobReference: z
+            .object({
+            jobId: z.string(),
+            correlationId: z.string(),
+            statusTool: z.literal("job_status"),
+            resultTool: z.literal("job_result"),
+        })
+            .nullable(),
+        error: z.string().nullable(),
+        warning: z.string().optional(),
+    });
+    return { providerSchema, providerListSchema, normalizedProviderResultSchema };
+}
 function textResponse(body) {
     const text = responseText(body);
     return {
@@ -47,6 +54,7 @@ function findHumanReadableReport(value) {
     return null;
 }
 export function registerValidationTools(server, deps) {
+    const { providerSchema, providerListSchema, normalizedProviderResultSchema } = buildValidationSchemas(deps);
     server.tool("validate_with_models", "Ask two or more provider CLIs to independently validate a question. Starts validation jobs — poll with job_status, collect with job_result (not llm_job_*).", {
         question: z.string().min(1).describe("Question or content to validate."),
         models: providerListSchema.describe("Providers to ask. Defaults to Claude and Codex."),
@@ -208,7 +216,14 @@ export function registerValidationTools(server, deps) {
         destructiveHint: false,
         idempotentHint: true,
         openWorldHint: false,
-    }, async () => textResponse({ success: true, models: getAvailableCliInfo() }));
+    }, async () => {
+        const apiProviders = (deps.apiProviders ?? []).map(apiProviderCatalogEntry);
+        return textResponse({
+            success: true,
+            models: getAvailableCliInfo(),
+            ...(apiProviders.length > 0 ? { apiProviders } : {}),
+        });
+    });
     server.tool("job_status", "Check a VALIDATION job's status (jobs started by validate_with_models/ask_model/etc.) — distinct from llm_job_status, which tracks provider request jobs.", {
         jobId: z.string().min(1).describe("Validation job ID."),
     }, {

package/migrations/005_provider_type_open_api_names.sql

@@ -0,0 +1,28 @@
+-- Slice 0.5 (API-endpoint routing, locked decision B: arbitrary provider names).
+--
+-- Relax the closed provider enum on the session tables so that any
+-- `[providers.<name>]` config key (a kind:"api" provider id) is a valid
+-- `cli` value. Migration 003 widened the constraint only as far as the
+-- hard-coded set ('claude','codex','gemini','grok','mistral','grok-api');
+-- arbitrary API provider names had no DB-level home.
+--
+-- Provider-set validation now lives in the application layer (config loading
+-- plus `SESSION_PROVIDER_ENUM` for the registered set). The database keeps a
+-- single *format* guard so empty strings / whitespace / control characters are
+-- still rejected — it no longer enumerates a fixed provider list. The pattern
+-- accepts the existing five CLIs and `grok-api`, and any well-formed provider
+-- identifier (e.g. `ollama`, `openai`, `vllm`, `llama3.3`).
+
+ALTER TABLE sessions DROP CONSTRAINT IF EXISTS sessions_cli_check;
+ALTER TABLE sessions
+  ADD CONSTRAINT sessions_cli_check
+  CHECK (cli ~ '^[A-Za-z][A-Za-z0-9._-]*$');
+
+ALTER TABLE active_sessions DROP CONSTRAINT IF EXISTS active_sessions_cli_check;
+ALTER TABLE active_sessions
+  ADD CONSTRAINT active_sessions_cli_check
+  CHECK (cli ~ '^[A-Za-z][A-Za-z0-9._-]*$');
+
+INSERT INTO schema_migrations (version, name)
+VALUES (5, '005_provider_type_open_api_names')
+ON CONFLICT (version) DO NOTHING;

package/npm-shrinkwrap.json

@@ -1,15 +1,16 @@
 {
   "name": "llm-cli-gateway",
-  "version": "2.10.0",
+  "version": "2.11.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "llm-cli-gateway",
-      "version": "2.10.0",
+      "version": "2.11.1",
       "license": "MIT",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.29.0",
+        "body-parser": "2.2.2",
         "content-type": "1.0.5",
         "smol-toml": "^1.6.1",
         "type-is": "2.0.1",
@@ -587,9 +588,9 @@
       }
     },
     "node_modules/hono": {
-      "version": "4.12.22",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.22.tgz",
-      "integrity": "sha512-7fvVPbB92zNRsQke+uiRGwtTuef0tB2Dg4hWxYfFNvkQhIltWoyi0ONReM5LWA+jJWS3nfT5lTq+qbsIpX0IQw==",
+      "version": "4.12.25",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.25.tgz",
+      "integrity": "sha512-2NFaIyNVgJmBs/ecmtGzlmluTFs5cHEWGTdu0t1HBwYzoGXOL5nUQBRMXsXWla5i4KkG//QMzVP88m1+I3fdAQ==",
       "license": "MIT",
       "engines": {
         "node": ">=16.9.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "llm-cli-gateway",
-  "version": "2.10.0",
+  "version": "2.11.1",
   "mcpName": "io.github.verivus-oss/llm-cli-gateway",
   "description": "MCP server providing unified access to Claude Code, Codex, Gemini, Grok, and Mistral Vibe CLIs with session management, retry logic, async job orchestration, durable job results, and cross-LLM validation.",
   "license": "MIT",
@@ -88,6 +88,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
+    "body-parser": "2.2.2",
     "content-type": "1.0.5",
     "smol-toml": "^1.6.1",
     "type-is": "2.0.1",
@@ -104,24 +105,26 @@
   "devDependencies": {
     "@eslint/js": "^10.0.1",
     "@types/better-sqlite3": "^7.6.0",
-    "better-sqlite3": "^12.10.0",
-    "@types/node": "^25.9.1",
+    "@types/node": "^25.9.3",
     "@types/pg": "^8.11.10",
-    "@typescript-eslint/eslint-plugin": "^8.59.4",
+    "@typescript-eslint/eslint-plugin": "^8.61.1",
     "@typescript-eslint/parser": "^8.59.4",
-    "@vitest/coverage-v8": "^4.1.2",
-    "eslint": "^10.4.1",
+    "@vitest/coverage-v8": "^4.1.9",
+    "better-sqlite3": "^12.11.1",
+    "eslint": "^10.5.0",
     "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-security": "^4.0.0",
+    "eslint-plugin-security": "^4.0.1",
     "fast-check": "^4.8.0",
     "pg": "^8.12.0",
-    "prettier": "^3.0.0",
+    "prettier": "^3.8.4",
     "typescript": "^6.0.3",
     "vitest": "^4.0.18"
   },
   "overrides": {
+    "body-parser": "2.2.2",
     "type-is": "2.0.1",
-    "content-type": "1.0.5"
+    "content-type": "1.0.5",
+    "hono": "^4.12.25"
   },
   "directories": {
     "doc": "docs"