llm-cli-gateway 2.13.1 → 2.14.0-rc.1

package/dist/http-transport.js

@@ -57,6 +57,27 @@ function isLocalHost(host) {
     const hostname = host.split(":")[0]?.toLowerCase() ?? "";
     return hostname === "localhost" || hostname === "127.0.0.1" || hostname === "::1";
 }
+function isLoopbackHostname(hostname) {
+    const h = hostname.toLowerCase().replace(/^\[|\]$/g, "");
+    return h === "localhost" || h === "::1" || /^127\./.test(h);
+}
+function isPubliclyExposed(env, host) {
+    if (!isLocalHost(host))
+        return true;
+    if (env.LLM_GATEWAY_TUNNEL_PROVIDER && env.LLM_GATEWAY_TUNNEL_PROVIDER.trim().length > 0) {
+        return true;
+    }
+    const publicUrl = env.LLM_GATEWAY_PUBLIC_URL;
+    if (publicUrl && publicUrl.trim().length > 0) {
+        try {
+            if (!isLoopbackHostname(new URL(publicUrl).hostname))
+                return true;
+        }
+        catch {
+        }
+    }
+    return false;
+}
 function requestBaseUrl(req) {
     const configured = process.env.LLM_GATEWAY_PUBLIC_URL;
     if (configured) {
@@ -85,9 +106,12 @@ export async function startHttpGateway(options) {
     const oauthConfig = loadRemoteOAuthConfig(logger);
     if (oauthConfig.enabled &&
         (oauthConfig.allowPublicClients || oauthConfig.registrationPolicy === "open_dev") &&
-        !isLocalHost(host)) {
-        throw new Error(`Refusing to start: remote OAuth with ${oauthConfig.allowPublicClients ? "public clients" : "open_dev registration"} is exposed on a non-loopback bind (host=${host}). Bind LLM_GATEWAY_HTTP_HOST to 127.0.0.1 ` +
-            `and front the gateway with an authenticating proxy, or switch to ` +
+        isPubliclyExposed(process.env, host)) {
+        const exposure = !isLocalHost(host)
+            ? `a non-loopback bind (host=${host})`
+            : "a public URL / tunnel (LLM_GATEWAY_PUBLIC_URL or LLM_GATEWAY_TUNNEL_PROVIDER)";
+        throw new Error(`Refusing to start: remote OAuth with ${oauthConfig.allowPublicClients ? "public clients" : "open_dev registration"} is exposed via ${exposure}. A loopback bind fronted by a public tunnel is still ` +
+            `publicly reachable. Front the gateway with an authenticating proxy, or switch to ` +
             `registration_policy=static_clients with confidential client secrets.`);
     }
     const oauthServer = oauthConfig.enabled

package/dist/index.d.ts

@@ -4,13 +4,14 @@ import { z } from "zod/v3";
 import { ISessionManager, type CliType, type ProviderType } from "./session-manager.js";
 import { ResourceProvider } from "./resources.js";
 import { PerformanceMetrics } from "./metrics.js";
-import { type PersistenceConfig, type CacheAwarenessConfig, type ProvidersConfig, type ApiProviderRuntime, type AcpConfig } from "./config.js";
+import { type PersistenceConfig, type CacheAwarenessConfig, type ProvidersConfig, type ApiProviderRuntime, type AcpConfig, type AdminConfig } from "./config.js";
 import { DatabaseConnection } from "./db.js";
+import { type DevinAcpAgentType } from "./provider-definitions.js";
 import { AsyncJobManager } from "./async-job-manager.js";
 import { ApprovalManager, ApprovalPolicy, ApprovalRecord } from "./approval-manager.js";
 import { ReviewIntegrityResult } from "./review-integrity.js";
 import { ClaudeMcpConfigResult, ClaudeMcpServerName } from "./claude-mcp-config.js";
-import { type MistralAgentMode, type ClaudePermissionMode, type CodexSandboxMode, type CodexAskForApproval, type ClaudeEffortLevel } from "./request-helpers.js";
+import { type MistralAgentMode, type ClaudePermissionMode, type CodexSandboxMode, type CodexAskForApproval, type CodexLocalProvider, type CodexColorMode, type ClaudeEffortLevel } from "./request-helpers.js";
 import { FlightRecorderLike } from "./flight-recorder.js";
 import { type PromptParts } from "./prompt-parts.js";
 import { type WorkspaceRegistry } from "./workspace-registry.js";
@@ -77,6 +78,7 @@ export interface GatewayServerDeps {
     cacheAwareness?: CacheAwarenessConfig;
     providers?: ProvidersConfig;
     acpConfig?: AcpConfig;
+    adminConfig?: AdminConfig;
     workspaces?: WorkspaceRegistry;
 }
 export interface GatewayServerRuntime {
@@ -92,6 +94,7 @@ export interface GatewayServerRuntime {
     cacheAwareness: CacheAwarenessConfig;
     providers: ProvidersConfig;
     acpConfig: AcpConfig;
+    adminConfig: AdminConfig;
     workspaces: WorkspaceRegistry;
 }
 export declare function resolveGatewayServerRuntime(deps?: GatewayServerDeps, options?: {
@@ -104,6 +107,7 @@ export declare function runAcpTransport(deps: HandlerDeps, params: {
     model?: string;
     sessionId?: string;
     correlationId?: string;
+    agentType?: string;
 }): Promise<ExtendedToolResponse>;
 export interface ResolvedWorktree {
     cwd?: string;
@@ -120,6 +124,7 @@ export declare function resolveWorktreeForRequest(worktreeOpt: boolean | {
     workspaceRoot?: string;
 }): Promise<ResolvedWorktree>;
 export declare function formatWorktreePrefix(worktreePath?: string): string;
+export declare function remoteSafeWorktreePath(worktreePath?: string, workspaceRoot?: string): string | undefined;
 export declare function createErrorResponse(cli: string, code: number, stderr: string, correlationId?: string, error?: Error, apiError?: {
     httpStatus?: number | null;
     responseBody?: string;
@@ -164,6 +169,7 @@ export declare function extractUsageAndCost(cli: CliType, output: string, output
     cacheCreationTokens?: number;
     costUsd?: number;
 };
+export declare function registerBaseResources(server: McpServer, runtime: GatewayServerRuntime): void;
 interface CliRequestPrep {
     corrId: string;
     effectivePrompt: string;
@@ -212,6 +218,17 @@ export declare function prepareClaudeRequest(params: {
     settingSources?: string;
     settings?: string;
     tools?: string[];
+    includeHookEvents?: boolean;
+    replayUserMessages?: boolean;
+    systemPromptFile?: string;
+    appendSystemPromptFile?: string;
+    name?: string;
+    pluginDir?: string[];
+    pluginUrl?: string[];
+    safeMode?: boolean;
+    bare?: boolean;
+    debug?: string | boolean;
+    debugFile?: string;
 }, runtime?: GatewayServerRuntime): CliRequestPrep | ExtendedToolResponse;
 export interface CodexRequestPrep extends CliRequestPrep {
     cleanup?: () => void;
@@ -245,6 +262,14 @@ export declare function prepareCodexRequest(params: {
     ignoreRules?: boolean;
     workingDir?: string;
     addDir?: string[];
+    enable?: string[];
+    disable?: string[];
+    strictConfig?: boolean;
+    oss?: boolean;
+    localProvider?: CodexLocalProvider;
+    color?: CodexColorMode;
+    outputLastMessage?: string;
+    dangerouslyBypassHookTrust?: boolean;
 }, runtime?: GatewayServerRuntime): CodexRequestPrep | ExtendedToolResponse;
 export declare function prepareGeminiRequest(params: {
     prompt?: string;
@@ -268,6 +293,7 @@ export declare function prepareGeminiRequest(params: {
     yolo?: boolean;
     project?: string;
     newProject?: boolean;
+    printTimeout?: string;
 }, runtime?: GatewayServerRuntime): CliRequestPrep | ExtendedToolResponse;
 export declare function prepareGrokRequest(params: {
     prompt?: string;
@@ -412,6 +438,7 @@ export interface GeminiRequestParams {
     yolo?: boolean;
     project?: string;
     newProject?: boolean;
+    printTimeout?: string;
     workspace?: string;
     worktree?: boolean | {
         name?: string;
@@ -501,6 +528,12 @@ export interface DevinRequestParams {
     model?: string;
     permissionMode?: "auto" | "smart" | "dangerous";
     promptFile?: string;
+    config?: string;
+    sandbox?: boolean;
+    exportSession?: boolean | string;
+    respectWorkspaceTrust?: boolean;
+    agentConfig?: string;
+    agentType?: DevinAcpAgentType;
     transport?: "cli" | "acp";
     sessionId?: string;
     resumeLatest?: boolean;
@@ -516,6 +549,11 @@ export declare function prepareDevinRequest(params: {
     model?: string;
     permissionMode?: DevinRequestParams["permissionMode"];
     promptFile?: string;
+    config?: string;
+    sandbox?: boolean;
+    exportSession?: boolean | string;
+    respectWorkspaceTrust?: boolean;
+    agentConfig?: string;
     correlationId?: string;
     optimizePrompt: boolean;
     operation: string;
@@ -628,6 +666,14 @@ export declare function handleCodexRequestAsync(deps: AsyncHandlerDeps, params:
     ignoreRules?: boolean;
     workingDir?: string;
     addDir?: string[];
+    enable?: string[];
+    disable?: string[];
+    strictConfig?: boolean;
+    oss?: boolean;
+    localProvider?: CodexLocalProvider;
+    color?: CodexColorMode;
+    outputLastMessage?: string;
+    dangerouslyBypassHookTrust?: boolean;
     workspace?: string;
     worktree?: boolean | {
         name?: string;