llm-cli-gateway 2.11.0 → 2.12.0

package/dist/job-store.d.ts

@@ -73,7 +73,46 @@ export interface OrphanedJobSnapshot {
     transport: JobTransport;
     httpStatus: number | null;
 }
-export declare class SqliteJobStore implements JobStore {
+export interface ValidationRunLink {
+    provider: string;
+    jobId: string;
+    correlationId: string;
+}
+export interface ValidationRunRecord {
+    validationId: string;
+    ownerPrincipal: string;
+    intent: string;
+    createdAt: string;
+    requestJson: string;
+    providerLinks: ValidationRunLink[];
+    judgeLink: ValidationRunLink | null;
+    status: "running" | "finalized";
+}
+export interface ValidationReceiptRecord {
+    validationId: string;
+    ownerPrincipal: string;
+    mintedAt: string;
+    schemaVersion: string;
+    reportJson: string;
+    canonicalSha256: string;
+    prevSha256: string | null;
+    seq: number | null;
+    signature: string | null;
+    models: string[];
+    hasMaterialDisagreement: boolean;
+    confidence: string;
+}
+export interface ValidationRunStore {
+    recordValidationRun(run: ValidationRunRecord): void;
+    getValidationRun(validationId: string): ValidationRunRecord | null;
+    setValidationJudgeLink(validationId: string, judgeLink: ValidationRunLink): void;
+    setValidationRunStatus(validationId: string, status: ValidationRunRecord["status"]): void;
+    getValidationRunIdByJobId(jobId: string): string | null;
+    recordValidationReceipt(receipt: ValidationReceiptRecord): void;
+    getValidationReceipt(validationId: string): ValidationReceiptRecord | null;
+}
+export declare function isValidationRunStore(store: unknown): store is ValidationRunStore;
+export declare class SqliteJobStore implements JobStore, ValidationRunStore {
     private logger;
     private db;
     private retentionMs;
@@ -122,6 +161,14 @@ export declare class SqliteJobStore implements JobStore {
         orphaned: Array<OrphanedJobSnapshot>;
     };
     evictExpired(): number;
+    recordValidationRun(run: ValidationRunRecord): void;
+    private linkRunJob;
+    getValidationRunIdByJobId(jobId: string): string | null;
+    getValidationRun(validationId: string): ValidationRunRecord | null;
+    setValidationJudgeLink(validationId: string, judgeLink: ValidationRunLink): void;
+    setValidationRunStatus(validationId: string, status: ValidationRunRecord["status"]): void;
+    recordValidationReceipt(receipt: ValidationReceiptRecord): void;
+    getValidationReceipt(validationId: string): ValidationReceiptRecord | null;
     close(): void;
 }
 export declare const JobStoreClass: typeof SqliteJobStore;

package/dist/job-store.js

@@ -83,6 +83,13 @@ function ensureJobsTransportColumns(db) {
         db.exec("ALTER TABLE jobs ADD COLUMN payload_json TEXT");
     }
 }
+export function isValidationRunStore(store) {
+    return (typeof store === "object" &&
+        store !== null &&
+        typeof store.recordValidationRun === "function" &&
+        typeof store.getValidationRun === "function" &&
+        typeof store.recordValidationReceipt === "function");
+}
 export class SqliteJobStore {
     logger;
     db;
@@ -128,6 +135,42 @@ export class SqliteJobStore {
       CREATE INDEX IF NOT EXISTS idx_jobs_status ON jobs(status);
       CREATE INDEX IF NOT EXISTS idx_jobs_expires_at ON jobs(expires_at);
       CREATE INDEX IF NOT EXISTS idx_jobs_request_key_finished ON jobs(request_key, finished_at);
+    `);
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS validation_runs (
+        validation_id TEXT PRIMARY KEY,
+        owner_principal TEXT NOT NULL,
+        intent TEXT NOT NULL,
+        created_at TEXT NOT NULL,
+        request_json TEXT NOT NULL,
+        provider_links TEXT NOT NULL,
+        judge_link TEXT,
+        status TEXT NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS idx_validation_runs_owner ON validation_runs(owner_principal);
+    `);
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS validation_run_jobs (
+        job_id TEXT PRIMARY KEY,
+        validation_id TEXT NOT NULL,
+        role TEXT NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS idx_validation_run_jobs_run ON validation_run_jobs(validation_id);
+      CREATE TABLE IF NOT EXISTS validation_receipts (
+        validation_id TEXT PRIMARY KEY,
+        owner_principal TEXT NOT NULL,
+        minted_at TEXT NOT NULL,
+        schema_version TEXT NOT NULL,
+        report_json TEXT NOT NULL,
+        canonical_sha256 TEXT NOT NULL,
+        prev_sha256 TEXT,
+        seq INTEGER,
+        signature TEXT,
+        models TEXT NOT NULL,
+        has_material_disagreement INTEGER NOT NULL,
+        confidence TEXT NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS idx_validation_receipts_owner ON validation_receipts(owner_principal);
     `);
         ensureJobsOwnerColumn(this.db);
         ensureJobsTransportColumns(this.db);
@@ -262,6 +305,86 @@ export class SqliteJobStore {
         const result = this.deleteExpiredStmt.run(now);
         return Number(result.changes);
     }
+    recordValidationRun(run) {
+        this.db
+            .prepare(`INSERT OR IGNORE INTO validation_runs
+           (validation_id, owner_principal, intent, created_at, request_json,
+            provider_links, judge_link, status)
+         VALUES (@validation_id, @owner_principal, @intent, @created_at, @request_json,
+                 @provider_links, @judge_link, @status)`)
+            .run({
+            validation_id: run.validationId,
+            owner_principal: run.ownerPrincipal,
+            intent: run.intent,
+            created_at: run.createdAt,
+            request_json: run.requestJson,
+            provider_links: JSON.stringify(run.providerLinks),
+            judge_link: run.judgeLink ? JSON.stringify(run.judgeLink) : null,
+            status: run.status,
+        });
+        for (const link of run.providerLinks) {
+            this.linkRunJob(run.validationId, link.jobId, "provider");
+        }
+    }
+    linkRunJob(validationId, jobId, role) {
+        this.db
+            .prepare(`INSERT OR IGNORE INTO validation_run_jobs (job_id, validation_id, role)
+         VALUES (?, ?, ?)`)
+            .run(jobId, validationId, role);
+    }
+    getValidationRunIdByJobId(jobId) {
+        const row = this.db
+            .prepare(`SELECT validation_id FROM validation_run_jobs WHERE job_id = ?`)
+            .get(jobId);
+        return row?.validation_id ?? null;
+    }
+    getValidationRun(validationId) {
+        const row = this.db
+            .prepare(`SELECT * FROM validation_runs WHERE validation_id = ?`)
+            .get(validationId);
+        return row ? rowToValidationRunRecord(row) : null;
+    }
+    setValidationJudgeLink(validationId, judgeLink) {
+        this.db
+            .prepare(`UPDATE validation_runs SET judge_link = ? WHERE validation_id = ?`)
+            .run(JSON.stringify(judgeLink), validationId);
+        this.linkRunJob(validationId, judgeLink.jobId, "judge");
+    }
+    setValidationRunStatus(validationId, status) {
+        this.db
+            .prepare(`UPDATE validation_runs SET status = ? WHERE validation_id = ?`)
+            .run(status, validationId);
+    }
+    recordValidationReceipt(receipt) {
+        this.db
+            .prepare(`INSERT OR IGNORE INTO validation_receipts
+           (validation_id, owner_principal, minted_at, schema_version, report_json,
+            canonical_sha256, prev_sha256, seq, signature, models,
+            has_material_disagreement, confidence)
+         VALUES (@validation_id, @owner_principal, @minted_at, @schema_version, @report_json,
+                 @canonical_sha256, @prev_sha256, @seq, @signature, @models,
+                 @has_material_disagreement, @confidence)`)
+            .run({
+            validation_id: receipt.validationId,
+            owner_principal: receipt.ownerPrincipal,
+            minted_at: receipt.mintedAt,
+            schema_version: receipt.schemaVersion,
+            report_json: receipt.reportJson,
+            canonical_sha256: receipt.canonicalSha256,
+            prev_sha256: receipt.prevSha256,
+            seq: receipt.seq,
+            signature: receipt.signature,
+            models: JSON.stringify(receipt.models),
+            has_material_disagreement: receipt.hasMaterialDisagreement ? 1 : 0,
+            confidence: receipt.confidence,
+        });
+    }
+    getValidationReceipt(validationId) {
+        const row = this.db
+            .prepare(`SELECT * FROM validation_receipts WHERE validation_id = ?`)
+            .get(validationId);
+        return row ? rowToValidationReceiptRecord(row) : null;
+    }
     close() {
         try {
             this.db.close();
@@ -271,6 +394,67 @@ export class SqliteJobStore {
         }
     }
 }
+function rowToValidationRunRecord(row) {
+    return {
+        validationId: row.validation_id,
+        ownerPrincipal: row.owner_principal,
+        intent: row.intent,
+        createdAt: row.created_at,
+        requestJson: row.request_json,
+        providerLinks: parseLinks(row.provider_links) ?? [],
+        judgeLink: parseLink(row.judge_link),
+        status: row.status,
+    };
+}
+function rowToValidationReceiptRecord(row) {
+    return {
+        validationId: row.validation_id,
+        ownerPrincipal: row.owner_principal,
+        mintedAt: row.minted_at,
+        schemaVersion: row.schema_version,
+        reportJson: row.report_json,
+        canonicalSha256: row.canonical_sha256,
+        prevSha256: row.prev_sha256 ?? null,
+        seq: row.seq ?? null,
+        signature: row.signature ?? null,
+        models: parseStringArray(row.models),
+        hasMaterialDisagreement: Boolean(row.has_material_disagreement),
+        confidence: row.confidence,
+    };
+}
+function parseLinks(value) {
+    if (typeof value !== "string" || value.length === 0)
+        return null;
+    try {
+        const parsed = JSON.parse(value);
+        return Array.isArray(parsed) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+function parseStringArray(value) {
+    if (typeof value !== "string" || value.length === 0)
+        return [];
+    try {
+        const parsed = JSON.parse(value);
+        return Array.isArray(parsed) ? parsed : [];
+    }
+    catch {
+        return [];
+    }
+}
+function parseLink(value) {
+    if (typeof value !== "string" || value.length === 0)
+        return null;
+    try {
+        const parsed = JSON.parse(value);
+        return parsed && typeof parsed === "object" ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
 export const JobStoreClass = SqliteJobStore;
 export class MemoryJobStore {
     rows = new Map();

package/dist/provider-codegen.js

@@ -329,6 +329,9 @@ export const UNGENERATED_GROK_FLAGS = [
     "--agents",
     "--prompt-json",
     "--worktree",
+    "--worktree-ref",
+    "--fork-session",
+    "--json-schema",
     "-p",
     "--resume",
     "--continue",

package/dist/provider-tool-capabilities.d.ts

@@ -133,4 +133,8 @@ export type ProviderToolCapabilitiesMap = Partial<Record<ProviderCapabilityId, P
 export declare function getProviderToolCapabilities(queryOrCli?: ProviderCapabilityQuery | ProviderCapabilityId): ProviderToolCapabilitiesMap;
 export declare function getOneProviderToolCapabilities(cli: ProviderCapabilityId, queryOrCli?: ProviderCapabilityQuery | ProviderCapabilityId): ProviderToolCapabilities;
 export declare function clearProviderToolCapabilitiesCache(): void;
+export declare function _getCapabilityCacheForTest(): Map<string, {
+    loadedAt: number;
+    value: ProviderToolCapabilities;
+}>;
 export declare function providerCapabilityIds(): readonly KnownProviderCapabilityId[];

package/dist/provider-tool-capabilities.js

@@ -49,7 +49,7 @@ export const ACP_CONTRACT = {
         },
         gemini: {
             classification: "absent_watchlist",
-            summary: "Google Antigravity agy 1.0.7 has no ACP surface; watchlist item only.",
+            summary: "Google Antigravity agy 1.0.13 has no ACP surface; watchlist item only.",
         },
         grok_api: {
             classification: "absent_watchlist",
@@ -66,7 +66,7 @@ const ACP_CAPABILITIES = {
     mistral: {
         status: "native_smoke_passed",
         mediation: "native",
-        targetVersion: "vibe 2.14.1",
+        targetVersion: "vibe 2.17.1",
         entrypoint: { command: "vibe-acp", args: [] },
         runtimeEnabled: false,
         smokeSupported: true,
@@ -80,7 +80,7 @@ const ACP_CAPABILITIES = {
     grok: {
         status: "native_smoke_passed",
         mediation: "native",
-        targetVersion: "grok 0.2.50 (cadf94855)",
+        targetVersion: "grok 0.2.73 (9ff14c43bb)",
         entrypoint: { command: "grok", args: ["agent", "stdio"] },
         runtimeEnabled: false,
         smokeSupported: true,
@@ -95,7 +95,7 @@ const ACP_CAPABILITIES = {
     codex: {
         status: "adapter_mediated_deferred",
         mediation: "adapter_mediated",
-        targetVersion: "codex-cli 0.139.0",
+        targetVersion: "codex-cli 0.142.4",
         entrypoint: null,
         runtimeEnabled: false,
         smokeSupported: false,
@@ -109,7 +109,7 @@ const ACP_CAPABILITIES = {
     claude: {
         status: "adapter_mediated_deferred",
         mediation: "adapter_mediated",
-        targetVersion: "claude 2.1.175",
+        targetVersion: "claude 2.1.195",
         entrypoint: null,
         runtimeEnabled: false,
         smokeSupported: false,
@@ -123,13 +123,13 @@ const ACP_CAPABILITIES = {
     gemini: {
         status: "absent_watchlist",
         mediation: "none",
-        targetVersion: "agy 1.0.7",
+        targetVersion: "agy 1.0.13",
         entrypoint: null,
         runtimeEnabled: false,
         smokeSupported: false,
         smokeStatus: "unsupported",
         caveats: [
-            "Antigravity agy 1.0.7 has no ACP flag or subcommand.",
+            "Antigravity agy 1.0.13 has no ACP flag or subcommand.",
             "Legacy Gemini CLI ACP evidence does not transfer to agy; kept on the upstream drift watchlist.",
         ],
         docs: ACP_DOCS_REFERENCE,
@@ -148,7 +148,7 @@ const ACP_CAPABILITIES = {
     devin: {
         status: "native_smoke_passed",
         mediation: "native",
-        targetVersion: "devin 2026.5.26-8 (1a388fa9)",
+        targetVersion: "devin 2026.8.18 (16737566)",
         entrypoint: { command: "devin", args: ["acp"] },
         runtimeEnabled: false,
         smokeSupported: true,
@@ -777,7 +777,7 @@ const TOOL_CONTROLS = {
                 supported: true,
                 requestField: "permissionMode",
                 cliFlag: "--permission-mode",
-                behavior: "Maps to Devin CLI --permission-mode: normal (alias auto) auto-approves read-only tools; dangerous (aliases yolo, bypass) auto-approves all.",
+                behavior: "Maps to Devin CLI --permission-mode: auto auto-approves read-only tools; smart additionally auto-runs actions a fast model judges safe; dangerous auto-approves all.",
             },
             promptControl: {
                 supported: true,
@@ -806,7 +806,7 @@ const TOOL_CONTROLS = {
         ],
     },
 };
-let capabilityCache = new Map();
+const CAPABILITY_CACHE = new Map();
 export function getProviderToolCapabilities(queryOrCli = {}) {
     const query = normalizeQuery(queryOrCli);
     const providers = query.cli ? [query.cli] : PROVIDER_CAPABILITY_IDS;
@@ -819,16 +819,19 @@ export function getProviderToolCapabilities(queryOrCli = {}) {
 export function getOneProviderToolCapabilities(cli, queryOrCli = {}) {
     const query = normalizeQuery(typeof queryOrCli === "string" ? { cli: queryOrCli } : queryOrCli);
     const cacheKey = capabilityCacheKey(cli, query);
-    const cached = capabilityCache.get(cacheKey);
+    const cached = CAPABILITY_CACHE.get(cacheKey);
     if (!query.refresh && cached && Date.now() - cached.loadedAt < CAPABILITY_CACHE_TTL_MS) {
         return cached.value;
     }
     const value = buildOneProviderToolCapabilities(cli, query);
-    capabilityCache.set(cacheKey, { loadedAt: Date.now(), value });
+    CAPABILITY_CACHE.set(cacheKey, { loadedAt: Date.now(), value });
     return value;
 }
 export function clearProviderToolCapabilitiesCache() {
-    capabilityCache = new Map();
+    CAPABILITY_CACHE.clear();
+}
+export function _getCapabilityCacheForTest() {
+    return CAPABILITY_CACHE;
 }
 export function providerCapabilityIds() {
     return PROVIDER_CAPABILITY_IDS;

package/dist/upstream-contracts.d.ts

@@ -62,6 +62,7 @@ export interface CliSubcommandContract {
     tokenCost: CliSubcommandTokenCost;
     summary: string;
     conformanceFixtures: readonly CliContractFixture[];
+    helpProbeExitTolerant?: boolean;
 }
 export interface ContractViolation {
     cli: CliType;