llm-cli-gateway 2.12.2 → 2.13.1

package/dist/model-registry.d.ts

@@ -1,4 +1,4 @@
-import type { CliType } from "./session-manager.js";
+import { type CliType } from "./provider-types.js";
 type ModelSource = "fallback" | "observed" | "config" | "env";
 type ModelConfidence = "low" | "medium" | "high";
 export interface ModelMetadata {

package/dist/model-registry.js

@@ -2,6 +2,7 @@ import { existsSync, readFileSync, readdirSync, statSync } from "fs";
 import { homedir } from "os";
 import path from "path";
 import { parse as parseToml } from "smol-toml";
+import { CLI_TYPES } from "./provider-types.js";
 const FALLBACK_INFO = {
     claude: {
         description: "Anthropic's Claude Code CLI - best for code generation, analysis, and agentic coding tasks",
@@ -56,6 +57,15 @@ const FALLBACK_INFO = {
         },
         modelOrder: ["opus", "gpt-5.5", "swe-1.6"],
     },
+    cursor: {
+        description: "Cursor Agent CLI - agentic coding and review in Cursor's headless terminal agent",
+        models: {
+            "gpt-5": "OpenAI GPT-5 model accepted by Cursor Agent examples.",
+            "sonnet-4-thinking": "Claude Sonnet thinking model accepted by Cursor Agent examples.",
+            "claude-opus-4-8": "Parameterized Claude Opus model family accepted by Cursor Agent examples.",
+        },
+        modelOrder: ["gpt-5", "sonnet-4-thinking", "claude-opus-4-8"],
+    },
 };
 const MODEL_CACHE_TTL_MS = 2 * 60 * 1000;
 const MAX_GEMINI_HISTORY_FILES = 200;
@@ -77,14 +87,7 @@ export function getCliInfo(forceRefresh = false) {
 }
 export function getAvailableCliInfo(forceRefresh = false) {
     const info = getCliInfo(forceRefresh);
-    return {
-        claude: filterUnverifiedModelHints(info.claude),
-        codex: filterUnverifiedModelHints(info.codex),
-        gemini: filterUnverifiedModelHints(info.gemini),
-        grok: filterUnverifiedModelHints(info.grok),
-        mistral: filterUnverifiedModelHints(info.mistral),
-        devin: filterUnverifiedModelHints(info.devin),
-    };
+    return Object.fromEntries(CLI_TYPES.map(cli => [cli, filterUnverifiedModelHints(info[cli])]));
 }
 export function clearModelRegistryCache() {
     cachedInfo = null;
@@ -115,14 +118,7 @@ export function resolveModelAlias(cli, model, info) {
     return trimmed;
 }
 function buildCliInfo() {
-    const info = {
-        claude: cloneInfo(FALLBACK_INFO.claude),
-        codex: cloneInfo(FALLBACK_INFO.codex),
-        gemini: cloneInfo(FALLBACK_INFO.gemini),
-        grok: cloneInfo(FALLBACK_INFO.grok),
-        mistral: cloneInfo(FALLBACK_INFO.mistral),
-        devin: cloneInfo(FALLBACK_INFO.devin),
-    };
+    const info = Object.fromEntries(CLI_TYPES.map(cli => [cli, cloneInfo(FALLBACK_INFO[cli])]));
     applyClaudeOverrides(info.claude);
     applyCodexOverrides(info.codex);
     applyGeminiOverrides(info.gemini);

package/dist/oauth.js

@@ -77,6 +77,10 @@ function readCookie(req, name) {
     }
     return null;
 }
+function oauthCsrfCookie(csrf) {
+    const maxAgeSeconds = Math.floor(OAUTH_CODE_TTL_MS / 1000);
+    return `gw_oauth_csrf=${csrf}; HttpOnly; Secure; SameSite=Lax; Path=/oauth; Max-Age=${maxAgeSeconds}`;
+}
 function methodNotAllowed(res) {
     res.writeHead(405, { allow: "GET, POST", "content-type": "application/json" });
     res.end(JSON.stringify({ error: "Method not allowed" }));
@@ -466,7 +470,7 @@ ${errorBlock}
 <p class="muted">Only approve if you initiated this connection.</p></div></body></html>`;
         res.writeHead(200, {
             "content-type": "text/html; charset=utf-8",
-            "set-cookie": `gw_oauth_csrf=${csrf}; HttpOnly; SameSite=Lax; Path=/oauth`,
+            "set-cookie": oauthCsrfCookie(csrf),
             "cache-control": "no-store",
         });
         res.end(html);

package/dist/provider-login-guidance.js

@@ -116,6 +116,24 @@ const GUIDANCE = {
             expected: "CLI is installed and `devin auth status` reports an authenticated session",
         },
     },
+    cursor: {
+        provider: "cursor",
+        displayName: "Cursor Agent CLI",
+        install: {
+            summary: "Install Cursor Agent CLI using Cursor's current official installer.",
+            commands: ["cursor-agent update", "cursor-agent --version"],
+            documentationUrl: "https://cursor.com/cli",
+        },
+        login: {
+            summary: "Sign in through Cursor Agent's official login flow, or set CURSOR_API_KEY for headless automation.",
+            commands: ["cursor-agent login", "cursor-agent status"],
+            credentialHandling: "Let Cursor store credentials via `cursor-agent login`, or provide CURSOR_API_KEY in the process environment. Do not paste Cursor API keys into prompts or remote chats.",
+        },
+        verification: {
+            command: "cursor-agent status",
+            expected: "CLI is installed and `cursor-agent status` reports an authenticated account",
+        },
+    },
 };
 export function getProviderLoginGuidance(provider) {
     return GUIDANCE[provider];

package/dist/provider-status.d.ts

@@ -1,4 +1,4 @@
-import type { CliType } from "./session-manager.js";
+import { type CliType } from "./provider-types.js";
 import { type ProviderLoginGuidance } from "./provider-login-guidance.js";
 import { type ApiProviderConfig } from "./config.js";
 export type ProviderLoginStatus = "authenticated" | "not_authenticated" | "unknown" | "not_checked";

package/dist/provider-status.js

@@ -2,6 +2,7 @@ import { existsSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { spawnSync } from "node:child_process";
+import { CLI_TYPES } from "./provider-types.js";
 import { getProviderLoginGuidance } from "./provider-login-guidance.js";
 import { apiProviderKeyPresent, isApiProviderEnabled } from "./config.js";
 import { redactDiagnosticUrl } from "./endpoint-exposure.js";
@@ -18,22 +19,15 @@ export function getApiProviderStatus(provider, env = process.env) {
         enabled: isApiProviderEnabled(provider, env),
     };
 }
-const PROVIDERS = ["claude", "codex", "gemini", "grok", "mistral", "devin"];
-const VERSION_ARGS = {
-    claude: ["--version"],
-    codex: ["--version"],
-    gemini: ["--version"],
-    grok: ["--version"],
-    mistral: ["--version"],
-    devin: ["--version"],
-};
+const VERSION_ARGS = Object.fromEntries(CLI_TYPES.map(provider => [provider, ["--version"]]));
 export const PROVIDER_COMMANDS = {
-    claude: "claude",
-    codex: "codex",
+    claude: providerCommandName("claude"),
+    codex: providerCommandName("codex"),
     gemini: providerCommandName("gemini"),
-    grok: "grok",
+    grok: providerCommandName("grok"),
     mistral: providerCommandName("mistral"),
     devin: providerCommandName("devin"),
+    cursor: providerCommandName("cursor"),
 };
 const LOGIN_CHECKS = {
     claude: ["auth", "status", "--json"],
@@ -41,9 +35,10 @@ const LOGIN_CHECKS = {
     grok: ["inspect", "--json"],
     mistral: ["auth", "status"],
     devin: ["auth", "status"],
+    cursor: ["status"],
 };
 export function listProviderRuntimeStatuses() {
-    return Object.fromEntries(PROVIDERS.map(provider => [provider, getProviderRuntimeStatus(provider)]));
+    return Object.fromEntries(CLI_TYPES.map(provider => [provider, getProviderRuntimeStatus(provider)]));
 }
 export function getProviderRuntimeStatus(provider) {
     const guidance = getProviderLoginGuidance(provider);

package/dist/provider-tool-capabilities.js

@@ -60,6 +60,10 @@ export const ACP_CONTRACT = {
             classification: "native_candidate",
             summary: "Cognition Devin CLI exposes a native ACP server via `devin acp` (stdio); Slice D1 initialize + session/new smoke passed (protocolVersion 1, third runtime pilot). Runtime routing stays config-gated.",
         },
+        cursor: {
+            classification: "native_candidate",
+            summary: "Cursor Agent CLI exposes a hidden native ACP stdio entrypoint via `cursor-agent acp`; initialize + session/new smoke passed locally (protocolVersion 1, session created).",
+        },
     },
 };
 const ACP_DOCS_REFERENCE = "docs/plans/first-class-acp-gateway-extension.dag.toml";
@@ -161,6 +165,20 @@ const ACP_CAPABILITIES = {
         ],
         docs: ACP_DOCS_REFERENCE,
     },
+    cursor: {
+        status: "native_smoke_passed",
+        mediation: "native",
+        targetVersion: "cursor-agent 2026.06.29-2ad2186",
+        entrypoint: { command: "cursor-agent", args: ["acp"] },
+        runtimeEnabled: false,
+        smokeSupported: true,
+        smokeStatus: "passed",
+        caveats: [
+            "Native ACP via hidden `cursor-agent acp` stdio JSON-RPC entrypoint; manual initialize + session/new smoke passed locally (protocolVersion 1, session created; no agentInfo returned).",
+            "Runtime routing stays disabled until ACP is enabled in gateway config.",
+        ],
+        docs: ACP_DOCS_REFERENCE,
+    },
 };
 function cloneAcpCapability(acp) {
     return {
@@ -806,6 +824,71 @@ const TOOL_CONTROLS = {
             },
         ],
     },
+    cursor: {
+        providerKind: "cli",
+        gatewayRequestTools: ["cursor_request", "cursor_request_async"],
+        summary: "Cursor Agent CLI runs a headless agentic coding/review session; the gateway passes prompt, model, mode, sandbox/trust controls, workspace roots, and session resume on the CLI transport, with ACP transport gated and fail-closed.",
+        controls: {
+            allowlist: {
+                supported: false,
+                behavior: "Cursor Agent exposes force/auto-review modes, not per-request allow lists.",
+            },
+            denylist: {
+                supported: false,
+                behavior: "Cursor Agent has no per-request deny-list flag on the tracked surface.",
+            },
+            mcpServers: {
+                supported: false,
+                requestField: "mcpServers",
+                behavior: "Cursor manages its own MCP configuration via `cursor-agent mcp`; the gateway does not mutate Cursor MCP config.",
+            },
+            nativeSkills: {
+                supported: false,
+                behavior: "Cursor owns rules/plugins; the gateway does not discover Cursor-native rules as skills.",
+            },
+            permissionMode: {
+                supported: true,
+                requestField: "mode/force/autoReview/sandbox/trust/approvalStrategy/approvalPolicy",
+                cliFlag: "--mode/--force/--auto-review/--sandbox/--trust",
+                behavior: 'Cursor supports read-only plan/ask modes, Smart Auto-review, force/yolo, sandbox overrides, and workspace trust in headless mode; under approvalStrategy:"mcp_managed", high-impact force/trust/sandbox-disabled requests are gated by the gateway approval manager.',
+            },
+            promptControl: {
+                supported: true,
+                requestField: "prompt",
+                behavior: "Prompt is passed as the positional prompt to `cursor-agent --print`.",
+            },
+            session: {
+                supported: true,
+                requestField: "sessionId/resumeLatest/createNewSession",
+                cliFlag: "--resume/--continue",
+                behavior: "Resumes a Cursor chat/session (--resume <id>) or the most recent chat (--continue); gateway-created gw-* session ids are tracking ids and are not resumable Cursor chat ids.",
+            },
+            workspace: {
+                supported: true,
+                requestField: "workspace/addDir",
+                cliFlag: "--workspace/--add-dir",
+                behavior: "Sets the Cursor workspace and additional workspace roots; remote HTTP/OAuth callers must use registered workspace aliases/roots rather than raw paths.",
+            },
+        },
+        features: baseFeatures({
+            sessionContinuity: true,
+            approvalAndSandboxControls: true,
+            promptControl: true,
+            workspaceControls: true,
+        }),
+        unsupportedInputs: [
+            {
+                input: "mcpServers",
+                behavior: "not_supported",
+                details: "Cursor owns MCP config via `cursor-agent mcp`; gateway request-time MCP server injection is not implemented.",
+            },
+            {
+                input: 'transport:"acp" with CLI-only options',
+                behavior: "reject",
+                details: "Cursor ACP routing currently accepts prompt/model/session inputs only; mode, outputFormat, workspace, addDir, force, autoReview, sandbox, trust, and prompt/response optimization are rejected instead of silently ignored.",
+            },
+        ],
+    },
 };
 const CAPABILITY_CACHE = new Map();
 export function getProviderToolCapabilities(queryOrCli = {}) {
@@ -1113,6 +1196,8 @@ function skillRoots(cli) {
             return [{ path: path.join(home, ".vibe", "skills"), source: "user" }];
         case "devin":
             return [];
+        case "cursor":
+            return [];
     }
 }
 function readSkill(cli, skillPath, fallbackName, source, warnings, query) {

package/dist/provider-types.d.ts

@@ -0,0 +1,4 @@
+export declare const CLI_TYPES: readonly ["claude", "codex", "gemini", "grok", "mistral", "devin", "cursor"];
+export type CliType = (typeof CLI_TYPES)[number];
+export declare const API_PROVIDER_TYPES: readonly ["grok-api"];
+export type KnownApiProviderType = (typeof API_PROVIDER_TYPES)[number];

package/dist/provider-types.js

@@ -0,0 +1,10 @@
+export const CLI_TYPES = [
+    "claude",
+    "codex",
+    "gemini",
+    "grok",
+    "mistral",
+    "devin",
+    "cursor",
+];
+export const API_PROVIDER_TYPES = ["grok-api"];

package/dist/session-manager.d.ts

@@ -1,14 +1,12 @@
 import type { Config } from "./config.js";
 import type { DatabaseConnection } from "./db.js";
 import type { Logger } from "./logger.js";
-export declare const CLI_TYPES: readonly ["claude", "codex", "gemini", "grok", "mistral", "devin"];
-export type CliType = (typeof CLI_TYPES)[number];
-export declare const API_PROVIDER_TYPES: readonly ["grok-api"];
-export type KnownApiProviderType = (typeof API_PROVIDER_TYPES)[number];
+import { API_PROVIDER_TYPES, CLI_TYPES, type CliType, type KnownApiProviderType } from "./provider-types.js";
+export { API_PROVIDER_TYPES, CLI_TYPES, type CliType, type KnownApiProviderType };
 export type ApiProviderType = KnownApiProviderType | (string & {});
 export type ProviderType = CliType | ApiProviderType;
 export type ProviderKind = "cli" | "api";
-export declare const PROVIDER_TYPES: readonly ["claude", "codex", "gemini", "grok", "mistral", "devin", "grok-api"];
+export declare const PROVIDER_TYPES: readonly ["claude", "codex", "gemini", "grok", "mistral", "devin", "cursor", "grok-api"];
 export declare function isCliType(provider: string): provider is CliType;
 export declare function providerKind(provider: ProviderType): ProviderKind;
 export declare function defaultSessionDescription(provider: ProviderType): string;

package/dist/session-manager.js

@@ -5,8 +5,8 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync, renameSync, openSyn
 import { DEFAULT_SESSION_TTL_SECONDS } from "./config.js";
 import { noopLogger } from "./logger.js";
 import { getRequestContext, resolveOwnerPrincipal } from "./request-context.js";
-export const CLI_TYPES = ["claude", "codex", "gemini", "grok", "mistral", "devin"];
-export const API_PROVIDER_TYPES = ["grok-api"];
+import { API_PROVIDER_TYPES, CLI_TYPES, } from "./provider-types.js";
+export { API_PROVIDER_TYPES, CLI_TYPES };
 export const PROVIDER_TYPES = [...CLI_TYPES, ...API_PROVIDER_TYPES];
 export function isCliType(provider) {
     return CLI_TYPES.includes(provider);
@@ -20,6 +20,8 @@ const KNOWN_SESSION_DESCRIPTIONS = {
     gemini: "Gemini Session",
     grok: "Grok Session",
     mistral: "Mistral Session",
+    devin: "Devin Session",
+    cursor: "Cursor Session",
     "grok-api": "Grok API Session",
 };
 export function defaultSessionDescription(provider) {

package/dist/upstream-contracts.js

@@ -70,6 +70,17 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         evidence: 'Native ACP entrypoint `devin acp` (stdio JSON-RPC). Slice D1 manual initialize + session/new smoke passed (protocolVersion 1, agent "Affogato", session created). Third native runtime pilot; routing stays config-gated.',
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.devin",
     },
+    cursor: {
+        cli: "cursor",
+        displayName: "Cursor Agent CLI",
+        status: "native",
+        executable: "cursor-agent",
+        entrypointArgs: ["acp"],
+        targetVersion: "cursor-agent 2026.06.29-2ad2186",
+        probeArgs: [["acp", "--help"]],
+        evidence: "Native hidden ACP entrypoint `cursor-agent acp` (stdio JSON-RPC). `cursor-agent acp --help` was verified locally; manual initialize + session/new smoke passed locally (protocolVersion 1, session created; no agentInfo returned). Runtime routing stays config-gated.",
+        docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.cursor",
+    },
 };
 const PERMISSION_MODES = [
     "default",
@@ -1826,6 +1837,164 @@ export const UPSTREAM_CLI_CONTRACTS = {
             },
         ],
     },
+    cursor: {
+        cli: "cursor",
+        executable: "cursor-agent",
+        upstream: "Cursor Agent CLI",
+        upstreamMetadata: {
+            sourceUrls: [
+                "https://cursor.com/cli",
+                "https://cursor.com/docs/cli/acp",
+                "https://cursor.com/docs/cli/reference/parameters",
+            ],
+            packageName: "cursor-agent",
+            installDocsUrl: "https://cursor.com/cli",
+            releaseChannel: "vendor",
+            watchCategories: [
+                "flags",
+                "subcommands",
+                "session-resume",
+                "execution-modes",
+                "acp-entrypoint",
+            ],
+        },
+        helpArgs: [["--help"]],
+        subcommands: {},
+        maxPositionals: 1,
+        mcpTools: ["cursor_request", "cursor_request_async"],
+        mcpParameters: [
+            "prompt",
+            "model",
+            "mode",
+            "outputFormat",
+            "force",
+            "autoReview",
+            "sandbox",
+            "trust",
+            "workspace",
+            "addDir",
+            "sessionId",
+            "resumeLatest",
+            "createNewSession",
+        ],
+        flags: {
+            "--print": {
+                arity: "none",
+                description: "Print responses to console for scripts/non-interactive use",
+            },
+            "--output-format": {
+                arity: "one",
+                values: ["text", "json", "stream-json"],
+                description: "Output format for --print mode",
+            },
+            "--model": { arity: "one", description: "Model to use for the session" },
+            "--mode": {
+                arity: "one",
+                values: ["plan", "ask"],
+                description: "Execution mode (plan or ask)",
+            },
+            "--force": { arity: "none", description: "Force allow commands unless denied" },
+            "--auto-review": { arity: "none", description: "Use Cursor Smart Auto-review" },
+            "--sandbox": {
+                arity: "one",
+                values: ["enabled", "disabled"],
+                description: "Enable or disable Cursor sandbox mode",
+            },
+            "--trust": { arity: "none", description: "Trust workspace in headless mode" },
+            "--workspace": { arity: "one", description: "Workspace directory or saved workspace" },
+            "--add-dir": { arity: "one", description: "Additional workspace root directory" },
+            "--resume": { arity: "one", description: "Resume a specific Cursor chat/session" },
+            "--continue": { arity: "none", description: "Continue the latest Cursor chat" },
+        },
+        acknowledgedUpstreamFlags: [
+            "--api-key",
+            "--header",
+            "-H",
+            "-p",
+            "--plan",
+            "--yolo",
+            "--approve-mcps",
+            "--plugin-dir",
+            "--worktree",
+            "-w",
+            "--worktree-base",
+            "--skip-worktree-setup",
+            "--stream-partial-output",
+            "--list-models",
+            "--version",
+            "-v",
+            "--help",
+            "-h",
+        ],
+        env: {
+            CURSOR_API_KEY: {
+                arity: "one",
+                description: "Cursor Agent API key for headless authentication",
+            },
+        },
+        conformanceFixtures: [
+            {
+                id: "cursor-minimal",
+                description: "Minimal print-mode prompt request",
+                args: ["--print", "hello"],
+                expect: "pass",
+            },
+            {
+                id: "cursor-output-format",
+                description: "--output-format json is accepted",
+                args: ["--print", "--output-format", "json", "hello"],
+                expect: "pass",
+            },
+            {
+                id: "cursor-mode",
+                description: "--mode plan is accepted",
+                args: ["--print", "--mode", "plan", "hello"],
+                expect: "pass",
+            },
+            {
+                id: "cursor-high-impact-controls",
+                description: "Model, force, auto-review, sandbox, trust, and workspace controls are accepted",
+                args: [
+                    "--print",
+                    "--model",
+                    "gpt-5",
+                    "--force",
+                    "--auto-review",
+                    "--sandbox",
+                    "enabled",
+                    "--trust",
+                    "--workspace",
+                    "/tmp/workspace",
+                    "hello",
+                ],
+                expect: "pass",
+            },
+            {
+                id: "cursor-mode-invalid",
+                description: "Invalid --mode is rejected",
+                args: ["--print", "--mode", "dangerous", "hello"],
+                expect: "fail",
+            },
+            {
+                id: "cursor-resume",
+                description: "Resume by chat id accepted",
+                args: ["--print", "--resume", "chat-123", "hello"],
+                expect: "pass",
+            },
+            {
+                id: "cursor-add-dir",
+                description: "Repeatable --add-dir is accepted",
+                args: ["--print", "--add-dir", "/tmp/extra", "hello"],
+                expect: "pass",
+            },
+            {
+                id: "cursor-unsupported-flag",
+                description: "Unsupported flag is rejected before spawn",
+                args: ["--print", "--not-a-cursor-flag", "hello"],
+                expect: "fail",
+            },
+        ],
+    },
 };
 export function validateUpstreamCliArgs(cli, args) {
     const contract = UPSTREAM_CLI_CONTRACTS[cli];

package/dist/validation-orchestrator.js

@@ -220,6 +220,10 @@ function buildProviderArgs(provider, prompt) {
     if (provider === "claude" || provider === "grok" || provider === "mistral") {
         return ["-p", prompt];
     }
+    if (provider === "devin")
+        return ["-p", prompt];
+    if (provider === "cursor")
+        return ["--print", "--mode", "ask", "--sandbox", "enabled", prompt];
     if (provider === "codex")
         return ["exec", "--skip-git-repo-check", prompt];
     return [prompt];

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "llm-cli-gateway",
-  "version": "2.12.2",
+  "version": "2.13.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "llm-cli-gateway",
-      "version": "2.12.2",
+      "version": "2.13.1",
       "license": "MIT",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.29.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "llm-cli-gateway",
-  "version": "2.12.2",
+  "version": "2.13.1",
   "mcpName": "io.github.verivus-oss/llm-cli-gateway",
   "description": "MCP server providing unified access to Claude Code, Codex, Gemini, Grok, Mistral Vibe, and Devin CLIs with session management, retry logic, async job orchestration, durable job results, and cross-LLM validation.",
   "license": "MIT",

package/setup/status.schema.json

@@ -118,7 +118,7 @@
     },
     "providers": {
       "type": "object",
-      "required": ["claude", "codex", "gemini", "grok", "mistral"],
+      "minProperties": 1,
       "additionalProperties": {
         "type": "object",
         "required": [
@@ -353,7 +353,7 @@
             "catalog": { "const": "provider-tools://catalog" },
             "providers": {
               "type": "object",
-              "required": ["claude", "codex", "gemini", "grok", "grok_api", "mistral"],
+              "minProperties": 1,
               "additionalProperties": { "type": "string" }
             }
           },
@@ -362,7 +362,7 @@
         "cache_ttl_ms": { "type": "integer", "minimum": 0 },
         "providers": {
           "type": "object",
-          "required": ["claude", "codex", "gemini", "grok", "grok_api", "mistral"],
+          "minProperties": 1,
           "additionalProperties": {
             "type": "object",
             "required": [