llm-cli-gateway 2.11.0 → 2.11.1

package/CHANGELOG.md

@@ -2,7 +2,29 @@
 
 All notable changes to the llm-cli-gateway project.
 
-## Unreleased
+## [2.11.1] - 2026-06-22: Provider contract refresh and stable upstream scans
+
+### Changed
+
+- **Upstream contracts refreshed for all providers.** Live `--probe-installed` probes were run across the installed provider CLIs. Synced contract surfaces and bumped ACP `targetVersion` pins:
+  - claude → 2.1.185 (added `--ax-screen-reader`, `--safe-mode` to acknowledged flags; `agents --all` to subcommand contract)
+  - codex → 0.141.0 (aligned `exec resume` / `exec review` / top-level `review` flag lists with current advertised surfaces)
+  - gemini (agy) → 1.0.10
+  - grok → 0.2.60 (474c2bbfc)
+  - mistral (vibe) → 2.17.1
+  - devin → 2026.7.23 (3bd47f77) (added new flags to `acknowledgedUpstreamFlags`)
+- **Mistral upstream scan source stabilized.** The scanner now tracks GitHub's latest-release API for Mistral Vibe instead of the volatile HTML releases page, so `--live --fail-on-critical` no longer trips on release-page chrome/hash churn.
+- **Provider skill docs updated.** All five `.agents/skills/provider-*` files bumped to metadata version 1.2. Descriptions now call out `/subcommand` behaviour changes; added current-version "Tested against" notes and usage examples for the cache levers (Grok compaction, Claude `cacheControl`).
+- **Cache usage documentation expanded with concrete examples.** Added exact parameters, emitted CLI flags, and stream-json payload shapes for Grok `compactionMode`/`compactionDetail` and Claude `promptParts.cacheControl` (including the `assembleClaudeCacheBlocks` NDJSON structure with `cache_control: {type:"ephemeral", ttl:"1h"}`) to:
+  - `docs/personal-mcp/PROVIDER_CACHE_SURFACES.md`
+  - `README.md` (updated Cache-aware operation section and matrix)
+  - `.agents/skills/session-workflow/SKILL.md`
+- Cross-LLM reviews (Claude, Codex, Mistral) on the implementation plan were incorporated: kept provider-specific levers (no new unifying `CacheDirective` abstraction); focused on documentation and discoverability.
+- **Internal caching hygiene.** Promoted the ad-hoc capability cache in `provider-tool-capabilities.ts` to a documented reusable TTL structure (`CAPABILITY_CACHE`, helpers, test accessors) for easier future reuse.
+
+### Tests / CI
+
+- `npm run upstream:contracts`, relevant cache/session/provider-tool tests, and build all green.
 
 ## [2.11.0] - 2026-06-18: API providers, Devin, ACP runtime, and a strip-at-publish internal-MCP boundary
 

package/README.md

@@ -188,17 +188,47 @@ Every `*_request` and `*_request_async` tool accepts an optional `promptParts` f
 
 `prompt` and `promptParts` are mutually exclusive — pass exactly one.
 
-Per-CLI capability matrix:
+Per-CLI capability matrix (prefix discipline is automatic via `promptParts` for all; explicit levers are provider-specific):
+
+| CLI     | Prefix discipline | Explicit lever(s) |
+| ------- | ----------------- | ----------------- |
+| claude  | yes               | `promptParts.cacheControl` + `outputFormat: "stream-json"` (Anthropic `cache_control` breakpoints on stable blocks; `ttl="1h"` forced) |
+| codex   | yes               | none (OpenAI implicit) |
+| gemini  | yes               | none (implicit server-side) |
+| grok    | yes               | `compactionMode` / `compactionDetail` (context compaction: `summary|transcript|segments`; `segments` writes per-segment markdown) |
+| mistral | yes               | none (implicit) |
+
+**Claude example (explicit cacheControl)**
+
+```ts
+claude_request({
+  promptParts: {
+    system: "You are a helpful code reviewer.",
+    context: "<long stable file dump>",
+    task: "Review the diff.",
+    cacheControl: { system: true, context: true }  // task is never marked
+  },
+  outputFormat: "stream-json"
+})
+```
+
+Gateway emits the `stream-json` stdin path with `cache_control: {type:"ephemeral", ttl:"1h"}` on marked blocks only.
+
+**Grok example (compaction)**
+
+```ts
+grok_request({
+  promptParts: { system: "...", context: "...", task: "..." },
+  compactionMode: "segments",
+  compactionDetail: "balanced"
+})
+```
+
+Emits `--compaction-mode segments --compaction-detail balanced`.
 
-| CLI     | Prefix discipline (auto via `promptParts`) | Explicit `cache_control` emission                                            |
-| ------- | ------------------------------------------ | ---------------------------------------------------------------------------- |
-| claude  | yes                                        | yes, opt-in via `promptParts.cacheControl` and `outputFormat: "stream-json"` |
-| codex   | yes                                        | n/a (OpenAI implicit cache, no CLI lever)                                    |
-| gemini  | yes                                        | n/a (implicit prefix cache server-side)                                      |
-| grok    | yes                                        | n/a (no surfaced cache lever)                                                |
-| mistral | yes                                        | n/a (no surfaced cache lever)                                                |
+See `docs/personal-mcp/PROVIDER_CACHE_SURFACES.md` for full surfaces, telemetry differences (e.g. Grok `-p` vs ACP), exact stream-json payload shapes, and cross-LLM review notes.
 
-Opt-in flags (all default off) live under `[cache_awareness]` in `~/.llm-cli-gateway/config.toml`. See `docs/personal-mcp/PROVIDER_CACHE_SURFACES.md` for the per-model minimum cacheable token thresholds and field-name divergences.
+Opt-in flags (all default off) live under `[cache_awareness]` in `~/.llm-cli-gateway/config.toml`.
 
 ### Reliability & Performance
 

package/dist/acp/provider-registry.js

@@ -4,7 +4,7 @@ const ACP_PROVIDER_REGISTRY = Object.freeze({
         displayName: "Mistral Vibe",
         status: "native_smoke_passed",
         supportKind: "native",
-        targetVersion: "vibe 2.14.1",
+        targetVersion: "vibe 2.17.1",
         entrypoint: Object.freeze({ command: "vibe-acp", args: Object.freeze([]) }),
         runtimeEnabledDefault: false,
         shipRuntimePilot: true,
@@ -17,7 +17,7 @@ const ACP_PROVIDER_REGISTRY = Object.freeze({
         displayName: "xAI Grok CLI",
         status: "native_smoke_passed",
         supportKind: "native",
-        targetVersion: "grok 0.2.50 (cadf94855)",
+        targetVersion: "grok 0.2.60 (474c2bbfc)",
         entrypoint: Object.freeze({ command: "grok", args: Object.freeze(["agent", "stdio"]) }),
         runtimeEnabledDefault: false,
         shipRuntimePilot: true,
@@ -30,7 +30,7 @@ const ACP_PROVIDER_REGISTRY = Object.freeze({
         displayName: "OpenAI Codex CLI",
         status: "adapter_mediated_deferred",
         supportKind: "adapter_mediated",
-        targetVersion: "codex-cli 0.139.0",
+        targetVersion: "codex-cli 0.141.0",
         entrypoint: null,
         runtimeEnabledDefault: false,
         shipRuntimePilot: false,
@@ -43,7 +43,7 @@ const ACP_PROVIDER_REGISTRY = Object.freeze({
         displayName: "Anthropic Claude Code",
         status: "adapter_mediated_deferred",
         supportKind: "adapter_mediated",
-        targetVersion: "claude 2.1.175",
+        targetVersion: "claude 2.1.185",
         entrypoint: null,
         runtimeEnabledDefault: false,
         shipRuntimePilot: false,
@@ -56,7 +56,7 @@ const ACP_PROVIDER_REGISTRY = Object.freeze({
         displayName: "Google Antigravity",
         status: "absent_watchlist",
         supportKind: "none",
-        targetVersion: "agy 1.0.7",
+        targetVersion: "agy 1.0.10",
         entrypoint: null,
         runtimeEnabledDefault: false,
         shipRuntimePilot: false,
@@ -69,7 +69,7 @@ const ACP_PROVIDER_REGISTRY = Object.freeze({
         displayName: "Cognition Devin CLI",
         status: "native_smoke_passed",
         supportKind: "native",
-        targetVersion: "devin 2026.5.26-8 (1a388fa9)",
+        targetVersion: "devin 2026.7.23 (3bd47f77)",
         entrypoint: Object.freeze({ command: "devin", args: Object.freeze(["acp"]) }),
         runtimeEnabledDefault: false,
         shipRuntimePilot: true,

package/dist/index.d.ts

@@ -448,7 +448,7 @@ export declare function handleGrokRequestAsync(deps: AsyncHandlerDeps, params: O
 export interface DevinRequestParams {
     prompt?: string;
     model?: string;
-    permissionMode?: "normal" | "auto" | "dangerous" | "yolo" | "bypass";
+    permissionMode?: "auto" | "smart" | "dangerous";
     promptFile?: string;
     transport?: "cli" | "acp";
     sessionId?: string;
@@ -463,7 +463,7 @@ export interface DevinRequestParams {
 export declare function prepareDevinRequest(params: {
     prompt?: string;
     model?: string;
-    permissionMode?: string;
+    permissionMode?: DevinRequestParams["permissionMode"];
     promptFile?: string;
     correlationId?: string;
     optimizePrompt: boolean;

package/dist/index.js

@@ -4683,9 +4683,9 @@ export function createGatewayServer(deps = {}) {
             .default("cli")
             .describe("Transport: 'cli' (default) runs the Devin CLI; 'acp' routes through `devin acp` when [acp].enabled and the provider's runtime_enabled are set (fails closed otherwise)."),
         permissionMode: z
-            .enum(["normal", "auto", "dangerous", "yolo", "bypass"])
+            .enum(["auto", "smart", "dangerous"])
             .optional()
-            .describe("Devin CLI permission mode (--permission-mode). normal (alias auto) auto-approves read-only tools; dangerous (aliases yolo, bypass) auto-approves all."),
+            .describe("Devin CLI permission mode (--permission-mode). auto auto-approves read-only tools; smart additionally auto-runs actions a fast model judges safe; dangerous auto-approves all."),
         promptFile: z
             .string()
             .optional()
@@ -5617,9 +5617,9 @@ export function createGatewayServer(deps = {}) {
                 .describe("Prompt text for Devin CLI"),
             model: z.string().optional().describe("Model name or alias (e.g. opus, latest)"),
             permissionMode: z
-                .enum(["normal", "dangerous", "bypass"])
+                .enum(["auto", "smart", "dangerous"])
                 .optional()
-                .describe("Devin CLI permission mode (--permission-mode)"),
+                .describe("Devin CLI permission mode (--permission-mode). auto, smart, or dangerous."),
             promptFile: z
                 .string()
                 .optional()

package/dist/provider-tool-capabilities.d.ts

@@ -133,4 +133,8 @@ export type ProviderToolCapabilitiesMap = Partial<Record<ProviderCapabilityId, P
 export declare function getProviderToolCapabilities(queryOrCli?: ProviderCapabilityQuery | ProviderCapabilityId): ProviderToolCapabilitiesMap;
 export declare function getOneProviderToolCapabilities(cli: ProviderCapabilityId, queryOrCli?: ProviderCapabilityQuery | ProviderCapabilityId): ProviderToolCapabilities;
 export declare function clearProviderToolCapabilitiesCache(): void;
+export declare function _getCapabilityCacheForTest(): Map<string, {
+    loadedAt: number;
+    value: ProviderToolCapabilities;
+}>;
 export declare function providerCapabilityIds(): readonly KnownProviderCapabilityId[];

package/dist/provider-tool-capabilities.js

@@ -49,7 +49,7 @@ export const ACP_CONTRACT = {
         },
         gemini: {
             classification: "absent_watchlist",
-            summary: "Google Antigravity agy 1.0.7 has no ACP surface; watchlist item only.",
+            summary: "Google Antigravity agy 1.0.10 has no ACP surface; watchlist item only.",
         },
         grok_api: {
             classification: "absent_watchlist",
@@ -66,7 +66,7 @@ const ACP_CAPABILITIES = {
     mistral: {
         status: "native_smoke_passed",
         mediation: "native",
-        targetVersion: "vibe 2.14.1",
+        targetVersion: "vibe 2.17.1",
         entrypoint: { command: "vibe-acp", args: [] },
         runtimeEnabled: false,
         smokeSupported: true,
@@ -80,7 +80,7 @@ const ACP_CAPABILITIES = {
     grok: {
         status: "native_smoke_passed",
         mediation: "native",
-        targetVersion: "grok 0.2.50 (cadf94855)",
+        targetVersion: "grok 0.2.60 (474c2bbfc)",
         entrypoint: { command: "grok", args: ["agent", "stdio"] },
         runtimeEnabled: false,
         smokeSupported: true,
@@ -95,7 +95,7 @@ const ACP_CAPABILITIES = {
     codex: {
         status: "adapter_mediated_deferred",
         mediation: "adapter_mediated",
-        targetVersion: "codex-cli 0.139.0",
+        targetVersion: "codex-cli 0.141.0",
         entrypoint: null,
         runtimeEnabled: false,
         smokeSupported: false,
@@ -109,7 +109,7 @@ const ACP_CAPABILITIES = {
     claude: {
         status: "adapter_mediated_deferred",
         mediation: "adapter_mediated",
-        targetVersion: "claude 2.1.175",
+        targetVersion: "claude 2.1.185",
         entrypoint: null,
         runtimeEnabled: false,
         smokeSupported: false,
@@ -123,13 +123,13 @@ const ACP_CAPABILITIES = {
     gemini: {
         status: "absent_watchlist",
         mediation: "none",
-        targetVersion: "agy 1.0.7",
+        targetVersion: "agy 1.0.10",
         entrypoint: null,
         runtimeEnabled: false,
         smokeSupported: false,
         smokeStatus: "unsupported",
         caveats: [
-            "Antigravity agy 1.0.7 has no ACP flag or subcommand.",
+            "Antigravity agy 1.0.10 has no ACP flag or subcommand.",
             "Legacy Gemini CLI ACP evidence does not transfer to agy; kept on the upstream drift watchlist.",
         ],
         docs: ACP_DOCS_REFERENCE,
@@ -148,7 +148,7 @@ const ACP_CAPABILITIES = {
     devin: {
         status: "native_smoke_passed",
         mediation: "native",
-        targetVersion: "devin 2026.5.26-8 (1a388fa9)",
+        targetVersion: "devin 2026.7.23 (3bd47f77)",
         entrypoint: { command: "devin", args: ["acp"] },
         runtimeEnabled: false,
         smokeSupported: true,
@@ -777,7 +777,7 @@ const TOOL_CONTROLS = {
                 supported: true,
                 requestField: "permissionMode",
                 cliFlag: "--permission-mode",
-                behavior: "Maps to Devin CLI --permission-mode: normal (alias auto) auto-approves read-only tools; dangerous (aliases yolo, bypass) auto-approves all.",
+                behavior: "Maps to Devin CLI --permission-mode: auto auto-approves read-only tools; smart additionally auto-runs actions a fast model judges safe; dangerous auto-approves all.",
             },
             promptControl: {
                 supported: true,
@@ -806,7 +806,7 @@ const TOOL_CONTROLS = {
         ],
     },
 };
-let capabilityCache = new Map();
+const CAPABILITY_CACHE = new Map();
 export function getProviderToolCapabilities(queryOrCli = {}) {
     const query = normalizeQuery(queryOrCli);
     const providers = query.cli ? [query.cli] : PROVIDER_CAPABILITY_IDS;
@@ -819,16 +819,19 @@ export function getProviderToolCapabilities(queryOrCli = {}) {
 export function getOneProviderToolCapabilities(cli, queryOrCli = {}) {
     const query = normalizeQuery(typeof queryOrCli === "string" ? { cli: queryOrCli } : queryOrCli);
     const cacheKey = capabilityCacheKey(cli, query);
-    const cached = capabilityCache.get(cacheKey);
+    const cached = CAPABILITY_CACHE.get(cacheKey);
     if (!query.refresh && cached && Date.now() - cached.loadedAt < CAPABILITY_CACHE_TTL_MS) {
         return cached.value;
     }
     const value = buildOneProviderToolCapabilities(cli, query);
-    capabilityCache.set(cacheKey, { loadedAt: Date.now(), value });
+    CAPABILITY_CACHE.set(cacheKey, { loadedAt: Date.now(), value });
     return value;
 }
 export function clearProviderToolCapabilitiesCache() {
-    capabilityCache = new Map();
+    CAPABILITY_CACHE.clear();
+}
+export function _getCapabilityCacheForTest() {
+    return CAPABILITY_CACHE;
 }
 export function providerCapabilityIds() {
     return PROVIDER_CAPABILITY_IDS;

package/dist/upstream-contracts.js

@@ -8,7 +8,7 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "native",
         executable: "vibe-acp",
         entrypointArgs: [],
-        targetVersion: "vibe 2.14.1",
+        targetVersion: "vibe 2.17.1",
         probeArgs: [["--version"], ["--help"]],
         evidence: "Native ACP executable vibe-acp; manual initialize + session/new smoke passed. First runtime pilot.",
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.mistral",
@@ -19,9 +19,9 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "native",
         executable: "grok",
         entrypointArgs: ["agent", "stdio"],
-        targetVersion: "grok 0.2.50 (cadf94855)",
+        targetVersion: "grok 0.2.60 (474c2bbfc)",
         probeArgs: [["agent", "stdio", "--help"]],
-        evidence: "Native ACP via `grok agent stdio`; initialize + session/new smoke passed with isolated leader socket. Second runtime pilot.",
+        evidence: "Native ACP via `grok agent stdio`; initialize + session/new smoke passed with isolated leader socket. Second runtime pilot. Bumped for 0.2.60.",
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.grok",
     },
     codex: {
@@ -30,10 +30,10 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "adapter_mediated_deferred",
         executable: "codex",
         entrypointArgs: [],
-        targetVersion: "codex-cli 0.139.0",
+        targetVersion: "codex-cli 0.141.0",
         probeArgs: [],
         adapterCandidates: ["zed-industries/codex-acp", "agentclientprotocol/codex-acp"],
-        evidence: "No native ACP entrypoint at codex-cli 0.139.0. Adapter evidence tracked as documentation only; not native gateway ACP support.",
+        evidence: "No native ACP entrypoint at codex-cli 0.141.0. Adapter evidence tracked as documentation only; not native gateway ACP support.",
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.codex",
     },
     claude: {
@@ -42,10 +42,10 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "adapter_mediated_deferred",
         executable: "claude",
         entrypointArgs: [],
-        targetVersion: "claude 2.1.175",
+        targetVersion: "claude 2.1.185",
         probeArgs: [],
         adapterCandidates: ["Claude Agent SDK ACP adapter"],
-        evidence: "No native Claude Code CLI ACP entrypoint at claude 2.1.175. Adapter ownership/permission bridging unresolved; deferred.",
+        evidence: "No native Claude Code CLI ACP entrypoint at claude 2.1.185. Adapter ownership/permission bridging unresolved; deferred.",
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.claude",
     },
     gemini: {
@@ -54,9 +54,9 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "absent_watchlist",
         executable: "agy",
         entrypointArgs: [],
-        targetVersion: "agy 1.0.7",
+        targetVersion: "agy 1.0.10",
         probeArgs: [],
-        evidence: "agy 1.0.7 has no ACP flag or subcommand. Legacy Gemini CLI ACP evidence does not transfer. Watchlist item.",
+        evidence: "agy 1.0.10 has no ACP flag or subcommand. Legacy Gemini CLI ACP evidence does not transfer. Watchlist item.",
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.gemini",
     },
     devin: {
@@ -65,10 +65,10 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "native",
         executable: "devin",
         entrypointArgs: ["acp"],
-        targetVersion: "devin 2026.5.26-8 (1a388fa9)",
+        targetVersion: "devin 2026.7.23 (3bd47f77)",
         probeArgs: [["--version"]],
         evidence: 'Native ACP entrypoint `devin acp` (stdio JSON-RPC). Slice D1 manual initialize + session/new smoke passed (protocolVersion 1, agent "Affogato", session created). Third native runtime pilot; routing stays config-gated.',
-        docsRef: "docs/plans/devin-integration-scoping.md",
+        docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.devin",
     },
 };
 const PERMISSION_MODES = [
@@ -147,6 +147,7 @@ export const UPSTREAM_CLI_CONTRACTS = {
             agents: subcommand(["agents"], "Inspect and manage Claude agent definitions.", "writes_local_config", [
                 "--add-dir",
                 "--agent",
+                "--all",
                 "--allow-dangerously-skip-permissions",
                 "--cwd",
                 "--dangerously-skip-permissions",
@@ -305,6 +306,7 @@ export const UPSTREAM_CLI_CONTRACTS = {
         acknowledgedUpstreamFlags: [
             "--allow-dangerously-skip-permissions",
             "--allowed",
+            "--ax-screen-reader",
             "--bare",
             "--betas",
             "--brief",
@@ -329,6 +331,7 @@ export const UPSTREAM_CLI_CONTRACTS = {
             "--remote-control-session-name-prefix",
             "--replay-user-messages",
             "--resume",
+            "--safe-mode",
             "--tmux",
             "--version",
             "--worktree",
@@ -471,33 +474,40 @@ export const UPSTREAM_CLI_CONTRACTS = {
             ], {
                 children: {
                     resume: subcommand(["exec", "resume"], "Resume Codex sessions from the interactive CLI.", "executes_agent", [
-                        "--add-dir",
                         "--all",
-                        "--cd",
                         "--config",
                         "--dangerously-bypass-approvals-and-sandbox",
                         "--dangerously-bypass-hook-trust",
                         "--disable",
                         "--enable",
+                        "--ephemeral",
+                        "--ignore-rules",
+                        "--ignore-user-config",
                         "--image",
-                        "--include-non-interactive",
+                        "--json",
                         "--last",
-                        "--local-provider",
                         "--model",
-                        "--no-alt-screen",
-                        "--oss",
-                        "--profile",
-                        "--remote",
-                        "--remote-auth-token-env",
-                        "--sandbox",
+                        "--output-last-message",
+                        "--output-schema",
+                        "--skip-git-repo-check",
                         "--strict-config",
                     ]),
                     review: subcommand(["exec", "review"], "Run Codex code review workflows.", "executes_agent", [
                         "--base",
                         "--commit",
                         "--config",
+                        "--dangerously-bypass-approvals-and-sandbox",
+                        "--dangerously-bypass-hook-trust",
                         "--disable",
                         "--enable",
+                        "--ephemeral",
+                        "--ignore-rules",
+                        "--ignore-user-config",
+                        "--json",
+                        "--model",
+                        "--output-last-message",
+                        "--output-schema",
+                        "--skip-git-repo-check",
                         "--strict-config",
                         "--title",
                         "--uncommitted",
@@ -1022,6 +1032,17 @@ export const UPSTREAM_CLI_CONTRACTS = {
                 },
             }),
             completions: subcommand(["completions"], "Generate Grok shell completions.", "read_only", ["--leader-socket"], { tier: "inspect" }),
+            dashboard: subcommand(["dashboard"], "Open the Agent Dashboard view at startup.", "read_only", ["--leader-socket"], {
+                tier: "inspect",
+                fixtures: [
+                    {
+                        id: "grok-dashboard",
+                        description: "grok dashboard subcommand (leader socket passthrough)",
+                        args: ["--leader-socket", "/tmp/dash.sock"],
+                        expect: "pass",
+                    },
+                ],
+            }),
             export: subcommand(["export"], "Export Grok session data.", "read_only", ["--clipboard", "--leader-socket"], { tier: "inspect" }),
             import: subcommand(["import"], "Import Grok session data.", "writes_local_config", [
                 "--json",
@@ -1197,7 +1218,11 @@ export const UPSTREAM_CLI_CONTRACTS = {
                 description: "Custom leader socket path (isolated leader, Grok 0.2.32+)",
             },
             "--single": { arity: "one", description: "Single-turn prompt" },
-            "--todo-gate": { arity: "none", description: "Enable runtime turn-end TodoGate" },
+            "--todo-gate": {
+                arity: "none",
+                description: "Enable runtime turn-end TodoGate (accepted at 0.2.60+ but hidden from --help)",
+                hiddenFromHelp: true,
+            },
             "--verbatim": { arity: "none", description: "Send prompt exactly as given" },
             "--version": { arity: "none", description: "Print version" },
             "--worktree": {
@@ -1208,11 +1233,13 @@ export const UPSTREAM_CLI_CONTRACTS = {
                 arity: "one",
                 values: ["summary", "transcript", "segments"],
                 description: "Compaction mode (default summary; sets GROK_COMPACTION_MODE). `segments` persists per-segment markdown.",
+                hiddenFromHelp: true,
             },
             "--compaction-detail": {
                 arity: "one",
                 values: ["none", "minimal", "balanced", "verbose"],
                 description: "Segment verbatim detail (default verbose; sets GROK_COMPACTION_DETAIL). Only affects `--compaction-mode segments`.",
+                hiddenFromHelp: true,
             },
         },
         env: {},
@@ -1377,7 +1404,7 @@ export const UPSTREAM_CLI_CONTRACTS = {
         executable: "vibe",
         upstream: "Mistral Vibe CLI",
         upstreamMetadata: {
-            sourceUrls: ["https://github.com/mistralai/mistral-vibe/releases"],
+            sourceUrls: ["https://api.github.com/repos/mistralai/mistral-vibe/releases/latest"],
             packageName: "mistral-vibe",
             repo: "https://github.com/mistralai/mistral-vibe",
             installDocsUrl: "https://github.com/mistralai/mistral-vibe#installation",
@@ -1459,7 +1486,7 @@ export const UPSTREAM_CLI_CONTRACTS = {
                 description: "Additional writable workspace directory (Phase 4 slice ζ; repeat once per directory)",
             },
         },
-        acknowledgedUpstreamFlags: ["--auto-approve"],
+        acknowledgedUpstreamFlags: ["--auto-approve", "--check-upgrade", "--yolo"],
         env: {
             VIBE_ACTIVE_MODEL: {
                 arity: "one",
@@ -1558,11 +1585,25 @@ export const UPSTREAM_CLI_CONTRACTS = {
             },
             {
                 id: "mistral-current-help-surface",
-                description: "Vibe 2.12.x help surface: --prompt, -v, --version, --setup accepted",
+                description: "Vibe 2.17.1 request-time help surface: --prompt, -v, --version, --setup accepted",
                 args: ["--prompt", "hello", "--agent", "auto-approve", "-v", "--version", "--setup"],
                 env: { VIBE_ACTIVE_MODEL: "mistral-medium-3.5" },
                 expect: "pass",
             },
+            {
+                id: "mistral-yolo-shortcut-rejected",
+                description: "Vibe 2.17.1 advertises --yolo as a shortcut, but the gateway keeps using explicit --agent auto-approve",
+                args: ["-p", "hello", "--yolo"],
+                env: { VIBE_ACTIVE_MODEL: "mistral-medium-3.5" },
+                expect: "fail",
+            },
+            {
+                id: "mistral-check-upgrade-rejected",
+                description: "Vibe 2.17.1 advertises --check-upgrade, but gateway request validation rejects update-prompt flags",
+                args: ["--check-upgrade"],
+                env: { VIBE_ACTIVE_MODEL: "mistral-medium-3.5" },
+                expect: "fail",
+            },
             {
                 id: "mistral-resume-bare",
                 description: "Vibe --resume without session ID is accepted (optional arity)",
@@ -1604,13 +1645,22 @@ export const UPSTREAM_CLI_CONTRACTS = {
             "--model": { arity: "one", description: "AI model for this session" },
             "--permission-mode": {
                 arity: "one",
-                values: ["normal", "auto", "dangerous", "yolo", "bypass"],
-                description: "Permission mode (normal/auto = read-only auto-approve; dangerous/yolo/bypass = approve all)",
+                values: ["auto", "smart", "dangerous"],
+                description: "Permission mode (auto = read-only auto-approve; smart = additionally auto-runs safe actions per fast model; dangerous = approve all)",
             },
             "--prompt-file": { arity: "one", description: "Load the initial prompt from a file" },
             "--resume": { arity: "one", description: "Resume a specific session by ID" },
             "--continue": { arity: "none", description: "Resume the most recent session in cwd" },
         },
+        acknowledgedUpstreamFlags: [
+            "--agent-config",
+            "--config",
+            "--export",
+            "--print",
+            "--respect-workspace-trust",
+            "--sandbox",
+            "--version",
+        ],
         env: {},
         conformanceFixtures: [
             {
@@ -1633,20 +1683,20 @@ export const UPSTREAM_CLI_CONTRACTS = {
             },
             {
                 id: "devin-permission-mode",
-                description: "Valid --permission-mode accepted (dangerous alias bypass)",
-                args: ["-p", "hello", "--permission-mode", "bypass"],
+                description: "Valid --permission-mode 'dangerous' accepted",
+                args: ["-p", "hello", "--permission-mode", "dangerous"],
                 expect: "pass",
             },
             {
                 id: "devin-permission-mode-auto",
-                description: "Valid --permission-mode alias 'auto' (= normal) accepted",
+                description: "Valid --permission-mode 'auto' accepted",
                 args: ["-p", "hello", "--permission-mode", "auto"],
                 expect: "pass",
             },
             {
-                id: "devin-permission-mode-yolo",
-                description: "Valid --permission-mode alias 'yolo' (= dangerous) accepted",
-                args: ["-p", "hello", "--permission-mode", "yolo"],
+                id: "devin-permission-mode-smart",
+                description: "Valid --permission-mode 'smart' accepted",
+                args: ["-p", "hello", "--permission-mode", "smart"],
                 expect: "pass",
             },
             {

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "llm-cli-gateway",
-  "version": "2.10.0",
+  "version": "2.11.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "llm-cli-gateway",
-      "version": "2.10.0",
+      "version": "2.11.1",
       "license": "MIT",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.29.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "llm-cli-gateway",
-  "version": "2.11.0",
+  "version": "2.11.1",
   "mcpName": "io.github.verivus-oss/llm-cli-gateway",
   "description": "MCP server providing unified access to Claude Code, Codex, Gemini, Grok, and Mistral Vibe CLIs with session management, retry logic, async job orchestration, durable job results, and cross-LLM validation.",
   "license": "MIT",