llm-cli-gateway 2.13.0 → 2.13.2

package/dist/workspace-registry.d.ts

@@ -60,4 +60,13 @@ export declare function registerExistingWorkspace(input: {
     logger?: Logger;
 }): WorkspaceRepo;
 export declare function createTempWorkspaceConfig(contents: string): string;
+export interface RemoteSafeWorkspaceSummary {
+    ready: boolean;
+    default: string | null;
+    aliases: string[];
+    repo_count: number;
+    allowed_root_count: number;
+}
+export declare function remoteSafeWorkspaceSummary(registry: WorkspaceRegistry): RemoteSafeWorkspaceSummary;
+export declare function describeWorkspaceRemote(repo: WorkspaceRepo): Record<string, unknown>;
 export declare function describeWorkspace(repo: WorkspaceRepo): Record<string, unknown>;

package/dist/workspace-registry.js

@@ -350,13 +350,19 @@ export function registerExistingWorkspace(input) {
     if (registry.repos.some(repo => repo.alias === alias)) {
         throw new WorkspaceRegistryError(`Workspace alias "${alias}" already exists`);
     }
+    const genericDenied = new WorkspaceRegistryError("No allowed root permits registering a Git repository at the requested path.");
+    if (!path.isAbsolute(input.repoPath))
+        throw genericDenied;
+    const candidateReal = path.resolve(expandHome(input.repoPath));
+    const permittingRoot = registry.allowedRoots.find(candidate => candidate.allowRegisterExistingGitRepos && isUnder(candidate.path, candidateReal));
+    if (!permittingRoot)
+        throw genericDenied;
     const real = realExistingPath(input.repoPath);
     if (!isGitRepo(real))
         throw new WorkspaceRegistryError("Existing workspace must be a Git repo");
-    const root = registry.allowedRoots.find(candidate => isUnder(candidate.path, real));
-    if (!root?.allowRegisterExistingGitRepos) {
-        throw new WorkspaceRegistryError("No allowed root permits registering this Git repo");
-    }
+    const root = registry.allowedRoots.find(candidate => candidate.allowRegisterExistingGitRepos && isUnder(candidate.path, real));
+    if (!root)
+        throw genericDenied;
     const workspaces = (raw.workspaces ?? {});
     const repos = (Array.isArray(workspaces.repos) ? workspaces.repos : []);
     repos.push({
@@ -389,6 +395,20 @@ export function createTempWorkspaceConfig(contents) {
     writeFileSync(configPath, contents, { mode: 0o600 });
     return configPath;
 }
+export function remoteSafeWorkspaceSummary(registry) {
+    return {
+        ready: registry.defaultAlias !== null || registry.repos.length > 0,
+        default: registry.defaultAlias,
+        aliases: registry.repos.map(repo => repo.alias),
+        repo_count: registry.repos.length,
+        allowed_root_count: registry.allowedRoots.length,
+    };
+}
+export function describeWorkspaceRemote(repo) {
+    const full = describeWorkspace(repo);
+    delete full.path;
+    return full;
+}
 export function describeWorkspace(repo) {
     let branch = null;
     let dirty = false;

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "llm-cli-gateway",
-  "version": "2.13.0",
+  "version": "2.13.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "llm-cli-gateway",
-      "version": "2.13.0",
+      "version": "2.13.2",
       "license": "MIT",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.29.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "llm-cli-gateway",
-  "version": "2.13.0",
+  "version": "2.13.2",
   "mcpName": "io.github.verivus-oss/llm-cli-gateway",
   "description": "MCP server providing unified access to Claude Code, Codex, Gemini, Grok, Mistral Vibe, and Devin CLIs with session management, retry logic, async job orchestration, durable job results, and cross-LLM validation.",
   "license": "MIT",

package/setup/status.schema.json

@@ -14,6 +14,7 @@
     "workspaces",
     "providers",
     "endpoint_exposure",
+    "remote_http_oauth",
     "client_config",
     "cache_awareness",
     "provider_capabilities",
@@ -229,6 +230,80 @@
       },
       "additionalProperties": false
     },
+    "remote_http_oauth": {
+      "type": "object",
+      "description": "Stable readiness projection for the preferred remote connector path (public HTTPS URL + /mcp + OAuth + registered/default workspace). Secret-free.",
+      "required": [
+        "ready",
+        "stage",
+        "public_url",
+        "mcp_url",
+        "auth_mode",
+        "oauth",
+        "workspace",
+        "next_actions"
+      ],
+      "properties": {
+        "ready": { "type": "boolean" },
+        "stage": {
+          "enum": [
+            "not_started",
+            "missing_public_url",
+            "endpoint_unreachable",
+            "oauth_disabled",
+            "unsafe_oauth_config",
+            "missing_oauth_client",
+            "missing_workspace",
+            "ready"
+          ]
+        },
+        "public_url": { "type": ["string", "null"] },
+        "mcp_url": { "type": ["string", "null"] },
+        "auth_mode": { "enum": ["oauth", "bearer_token", "none"] },
+        "oauth": {
+          "type": "object",
+          "required": [
+            "enabled",
+            "issuer",
+            "authorization_url",
+            "token_url",
+            "registration_policy",
+            "clients_configured",
+            "consent_required"
+          ],
+          "properties": {
+            "enabled": { "type": "boolean" },
+            "issuer": { "type": ["string", "null"] },
+            "authorization_url": { "type": ["string", "null"] },
+            "token_url": { "type": ["string", "null"] },
+            "registration_policy": {
+              "enum": ["static_clients", "shared_secret", "open_dev"]
+            },
+            "clients_configured": { "type": "integer", "minimum": 0 },
+            "consent_required": { "type": "boolean" }
+          },
+          "additionalProperties": false
+        },
+        "workspace": {
+          "type": "object",
+          "required": ["ready", "default", "aliases"],
+          "properties": {
+            "ready": { "type": "boolean" },
+            "default": { "type": ["string", "null"] },
+            "aliases": {
+              "type": "array",
+              "items": { "type": "string" }
+            }
+          },
+          "additionalProperties": false
+        },
+        "next_actions": {
+          "type": "array",
+          "items": { "type": "string" }
+        }
+      },
+      "additionalProperties": false
+    },
     "client_config": {
       "type": "object",
       "required": [