llm-cli-gateway 2.13.1 → 2.14.0-rc.1

package/dist/index.js

@@ -4,21 +4,24 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { randomUUID } from "crypto";
 import { createRequire } from "module";
 import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, unlinkSync, writeFileSync, chmodSync, } from "fs";
-import { dirname, join } from "path";
+import { basename, dirname, isAbsolute, join, relative } from "path";
 import { fileURLToPath } from "url";
 import { z } from "zod/v3";
 import { executeCli, killAllProcessGroups, providerCommandName } from "./executor.js";
 import { parseStreamJson } from "./stream-json-parser.js";
 import { parseCodexJsonStream, codexDisplayText, codexFrResponse } from "./codex-json-parser.js";
+import { grokDisplayText } from "./grok-json-parser.js";
+import { extractProviderOutputMetadata } from "./provider-output-metadata.js";
 import { parseGeminiJson, parseGeminiStreamJson } from "./gemini-json-parser.js";
 import { parseVibeMetaJson } from "./mistral-meta-json-parser.js";
 import { homedir } from "os";
-import { CLI_TYPES, PROVIDER_TYPES, createSessionManager, } from "./session-manager.js";
+import { CLI_TYPES, PROVIDER_TYPES, createSessionManager, callerIsRemote, remoteSafeSession, } from "./session-manager.js";
 import { createWorktree, createWorktreeSessionCleanupHook, } from "./worktree-manager.js";
 import { ResourceProvider } from "./resources.js";
+import { generateResourceDescriptors, generateProviderAcpDescriptors, } from "./provider-surface-generator.js";
 import { PerformanceMetrics } from "./metrics.js";
 import { estimateTokens, optimizePrompt as optimizePromptText, optimizeResponse as optimizeResponseText, } from "./optimizer.js";
-import { loadConfig, loadPersistenceConfig, loadCacheAwarenessConfig, loadProvidersConfig, loadAcpConfig, loadLimitsConfig, defaultGatewayConfigPath, isXaiProviderEnabled, enabledApiProviders, minStableTokensForModel, } from "./config.js";
+import { loadConfig, loadPersistenceConfig, loadCacheAwarenessConfig, loadProvidersConfig, loadAcpConfig, loadAdminConfig, loadLimitsConfig, defaultGatewayConfigPath, isXaiProviderEnabled, enabledApiProviders, minStableTokensForModel, } from "./config.js";
 import { runAcpRequest } from "./acp/runtime.js";
 import { isAcpError } from "./acp/errors.js";
 import { redactSecrets } from "./secret-redaction.js";
@@ -27,12 +30,15 @@ import { prepareApiRequest, apiProviderCatalogEntry, ApiModelNotAllowedError, }
 import { checkHealth } from "./health.js";
 import { clearModelRegistryCache, getAvailableCliInfo, getCliInfo, resolveModelAlias, } from "./model-registry.js";
 import { getProviderToolCapabilities } from "./provider-tool-capabilities.js";
+import { getProviderDefinition, DEVIN_ACP_AGENT_TYPES, } from "./provider-definitions.js";
+import { buildProviderDiscoveredView, peekProviderCapabilitySet, warmProviderCapabilities, } from "./provider-capability-resolver.js";
+import { registerProviderAdminTools } from "./provider-admin-tools.js";
 import { AsyncJobManager, JobSaturationError, isAsyncJobInProgress, extractApiHttpStatus, extractApiErrorBody, } from "./async-job-manager.js";
 import { createJobStore } from "./job-store.js";
 import { ApprovalManager, bypassAllowedByOperator, } from "./approval-manager.js";
 import { checkReviewIntegrity } from "./review-integrity.js";
 import { buildClaudeMcpConfig, CLAUDE_MCP_SERVER_NAMES, } from "./claude-mcp-config.js";
-import { resolveGrokSessionArgs, resolveMistralSessionArgs, resolveCodexSessionArgs, sanitizeCliArgValues, prepareMistralRequest as buildMistralCliInvocation, GATEWAY_SESSION_PREFIX, resolveClaudePermissionFlags, resolveCodexSandboxFlags, CLAUDE_PERMISSION_MODES, GEMINI_APPROVAL_MODES, CODEX_SANDBOX_MODES, CODEX_ASK_FOR_APPROVAL_MODES, CLAUDE_EFFORT_LEVELS, prepareClaudeHighImpactFlags, validateClaudeAgentsMap, prepareCodexHighImpactFlags, prepareCodexForkRequest, CODEX_CONFIG_OVERRIDES_SCHEMA, resolveGeminiSessionPlan, GEMINI_HIGH_IMPACT_PARAMS_SCHEMA, } from "./request-helpers.js";
+import { resolveGrokSessionArgs, resolveMistralSessionArgs, resolveCodexSessionArgs, sanitizeCliArgValues, prepareMistralRequest as buildMistralCliInvocation, GATEWAY_SESSION_PREFIX, resolveClaudePermissionFlags, resolveCodexSandboxFlags, CLAUDE_PERMISSION_MODES, GEMINI_APPROVAL_MODES, CODEX_SANDBOX_MODES, CODEX_ASK_FOR_APPROVAL_MODES, CODEX_LOCAL_PROVIDERS, CODEX_COLOR_MODES, CLAUDE_EFFORT_LEVELS, prepareClaudeHighImpactFlags, validateClaudeAgentsMap, prepareCodexHighImpactFlags, prepareCodexForkRequest, CODEX_CONFIG_OVERRIDES_SCHEMA, resolveGeminiSessionPlan, GEMINI_HIGH_IMPACT_PARAMS_SCHEMA, } from "./request-helpers.js";
 import { createFlightRecorder } from "./flight-recorder.js";
 import { resolvePromptInput, PromptPartsSchema, assembleClaudeCacheBlocks, } from "./prompt-parts.js";
 import { computeSessionCacheStats, computeTtlRemaining, readPersistedRequest, PERSISTED_REQUEST_DEFAULT_MAX_CHARS, } from "./cache-stats.js";
@@ -41,7 +47,9 @@ import { startHttpGateway } from "./http-transport.js";
 import { getRequestContext, resolveOwnerPrincipal, principalCanAccess } from "./request-context.js";
 import { printDoctorJson } from "./doctor.js";
 import { redactDiagnosticUrl } from "./endpoint-exposure.js";
-import { createWorkspace, describeWorkspace, getWorkspace, loadWorkspaceRegistry, registerExistingWorkspace, resolveWorkspaceForProvider, validatePathInsideWorkspace, } from "./workspace-registry.js";
+import { buildRemoteConnectorUrls } from "./remote-url.js";
+import { gatherConnectorSetupPacket, renderConnectorSetupSummary, } from "./connector-setup.js";
+import { createWorkspace, describeWorkspace, describeWorkspaceRemote, getWorkspace, loadWorkspaceRegistry, registerExistingWorkspace, resolveWorkspaceForProvider, validatePathInsideWorkspace, } from "./workspace-registry.js";
 import { generateSecret, hashSecret } from "./oauth.js";
 import { registerValidationTools } from "./validation-tools.js";
 import { currentCaller, resolveValidationReceipt } from "./validation-receipt.js";
@@ -235,6 +243,7 @@ let persistenceConfig = null;
 let cacheAwarenessConfig = null;
 let providersConfig = null;
 let acpConfig = null;
+let adminConfig = null;
 let limitsConfig = null;
 let jobStore = null;
 let jobStoreInitialized = false;
@@ -256,6 +265,10 @@ function getAcpConfig(runtimeLogger = logger) {
     acpConfig ??= loadAcpConfig(runtimeLogger);
     return acpConfig;
 }
+function getAdminConfig(runtimeLogger = logger) {
+    adminConfig ??= loadAdminConfig(runtimeLogger);
+    return adminConfig;
+}
 function getCacheAwarenessConfig(runtimeLogger = logger) {
     cacheAwarenessConfig ??= loadCacheAwarenessConfig(runtimeLogger);
     return cacheAwarenessConfig;
@@ -297,6 +310,91 @@ function mcpServerEnum() {
 }
 const CLI_TYPE_ENUM = z.enum(CLI_TYPES);
 export const MAX_TURNS_SCHEMA = z.number().int().positive().safe().max(10_000);
+const CLAUDE_PART_A_FIELDS = {
+    includeHookEvents: z
+        .boolean()
+        .optional()
+        .describe("Claude --include-hook-events: include all hook lifecycle events in the output stream. Only takes effect with outputFormat=stream-json (the default)."),
+    replayUserMessages: z
+        .boolean()
+        .optional()
+        .describe("Claude --replay-user-messages: re-emit user messages from stdin back on stdout for acknowledgment. Only works with input-format=stream-json and outputFormat=stream-json (the cacheControl path)."),
+    systemPromptFile: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Claude --system-prompt-file: replace the system prompt from a file path (path variant of systemPrompt)."),
+    appendSystemPromptFile: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Claude --append-system-prompt-file: append a system prompt from a file path (path variant of appendSystemPrompt)."),
+    name: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Claude --name: display name for this session (shown in pickers/titles)."),
+    pluginDir: z
+        .array(z.string())
+        .optional()
+        .describe("Claude --plugin-dir: load a plugin from a directory or .zip for this session only. One --plugin-dir instance per entry."),
+    pluginUrl: z
+        .array(z.string())
+        .optional()
+        .describe("Claude --plugin-url: load a plugin .zip from a URL for this session only. One --plugin-url instance per entry."),
+    safeMode: z
+        .boolean()
+        .optional()
+        .describe("Claude --safe-mode: start with all customizations (CLAUDE.md, skills, plugins, hooks, MCP, commands, agents) disabled for troubleshooting. Explicit opt-in."),
+    bare: z
+        .boolean()
+        .optional()
+        .describe("Claude --bare: minimal mode (skip hooks, LSP, plugin sync, attribution, auto-memory, keychain reads, CLAUDE.md auto-discovery). Explicit opt-in."),
+    debug: z
+        .union([z.string(), z.boolean()])
+        .optional()
+        .describe('Claude -d/--debug: enable debug mode. true emits a bare --debug; a string emits --debug <filter> (e.g. "api,hooks"). Debug output goes to stderr only.'),
+    debugFile: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Claude --debug-file: write debug logs to a specific file path (enables debug mode)."),
+};
+const CODEX_PART_A_FIELDS = {
+    enable: z
+        .array(z.string())
+        .optional()
+        .describe("Codex --enable <FEATURE> (repeatable): enable a feature for this run (equivalent to -c features.<name>=true). Accepted on resume."),
+    disable: z
+        .array(z.string())
+        .optional()
+        .describe("Codex --disable <FEATURE> (repeatable): disable a feature for this run (equivalent to -c features.<name>=false). Accepted on resume."),
+    strictConfig: z
+        .boolean()
+        .optional()
+        .describe("Codex --strict-config: error out when config.toml contains fields not recognized by this Codex version. New sessions only."),
+    oss: z
+        .boolean()
+        .optional()
+        .describe("Codex --oss: use the open-source provider. New sessions only."),
+    localProvider: z
+        .enum(CODEX_LOCAL_PROVIDERS)
+        .optional()
+        .describe("Codex --local-provider: local OSS provider (lmstudio|ollama), used with oss. New sessions only."),
+    color: z
+        .enum(CODEX_COLOR_MODES)
+        .optional()
+        .describe("Codex --color: output color mode (always|never|auto). New sessions only."),
+    outputLastMessage: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Codex -o/--output-last-message <FILE>: write the agent's last message to a file. New sessions only."),
+    dangerouslyBypassHookTrust: z
+        .boolean()
+        .optional()
+        .describe("Codex --dangerously-bypass-hook-trust: run enabled hooks without persisted hook trust for this invocation. DANGEROUS. Explicit opt-in; never defaulted on."),
+};
 const GROK_GENERATED_SHAPE = deriveZodShapeFromGeneration(UPSTREAM_CLI_CONTRACTS.grok, GROK_FLAG_GENERATION);
 export const MAX_TOKENS_SCHEMA = z.number().int().positive().safe().max(100_000_000);
 export const MAX_PRICE_SCHEMA = z.number().positive().finite().min(1e-6).max(10_000);
@@ -365,7 +463,7 @@ export function resolveGatewayServerRuntime(deps = {}, options = {}) {
         sessionManager: runtimeSessionManager,
         resourceProvider: deps.resourceProvider ??
             (options.isolateState
-                ? new ResourceProvider(runtimeSessionManager, runtimePerformanceMetrics, runtimeFlightRecorder, deps.cacheAwareness ?? getCacheAwarenessConfig(runtimeLogger), deps.providers ?? getProvidersConfig(runtimeLogger))
+                ? new ResourceProvider(runtimeSessionManager, runtimePerformanceMetrics, runtimeFlightRecorder, deps.cacheAwareness ?? getCacheAwarenessConfig(runtimeLogger), deps.providers ?? getProvidersConfig(runtimeLogger), undefined, deps.acpConfig ?? getAcpConfig(runtimeLogger))
                 : resourceProvider),
         db: "db" in deps ? (deps.db ?? null) : db,
         performanceMetrics: runtimePerformanceMetrics,
@@ -377,6 +475,7 @@ export function resolveGatewayServerRuntime(deps = {}, options = {}) {
         cacheAwareness: deps.cacheAwareness ?? getCacheAwarenessConfig(runtimeLogger),
         providers: deps.providers ?? getProvidersConfig(runtimeLogger),
         acpConfig: deps.acpConfig ?? getAcpConfig(runtimeLogger),
+        adminConfig: deps.adminConfig ?? getAdminConfig(runtimeLogger),
         workspaces: deps.workspaces ?? loadWorkspaceRegistry(runtimeLogger),
     };
 }
@@ -417,12 +516,28 @@ export async function runAcpTransport(deps, params) {
             model: params.model,
             sessionId: params.sessionId,
             correlationId: corrId,
+            agentType: params.agentType,
         });
+        const stop = result.stopReason;
+        const normalStop = stop === null || stop === "end_turn";
+        let warning = null;
+        if (!normalStop) {
+            warning =
+                `provider ended the turn with stop_reason=${stop}` +
+                    (result.text.trim().length === 0 ? " and produced no output" : "") +
+                    "; the response may be partial or refused.";
+        }
+        else if (result.text.trim().length === 0) {
+            warning =
+                "provider produced no assistant output (possible no-op, guardrail, or awaited input).";
+        }
+        const banner = `[gateway] transport=acp session=${result.gatewaySessionId}` +
+            (warning ? `\n[gateway] warning: ${warning}` : "");
         return {
             content: [
                 {
                     type: "text",
-                    text: `[gateway] transport=acp session=${result.gatewaySessionId}\n${result.text}`,
+                    text: `${banner}\n${result.text}`,
                 },
             ],
         };
@@ -738,7 +853,10 @@ async function resolveWorkspaceAndWorktreeForRequest(args) {
             workspaceAlias: workspace?.alias,
             workspaceRoot: workspace?.root,
         });
-        return { cwd: resolved.cwd, worktreePath: resolved.worktreePath, workspace };
+        const displayWorktreePath = isRemoteTransport
+            ? remoteSafeWorktreePath(resolved.worktreePath, workspace?.root)
+            : resolved.worktreePath;
+        return { cwd: resolved.cwd, worktreePath: displayWorktreePath, workspace };
     }
     if (workspace && args.sessionId) {
         await Promise.resolve(args.runtime.sessionManager.updateSessionMetadata(args.sessionId, {
@@ -751,6 +869,16 @@ async function resolveWorkspaceAndWorktreeForRequest(args) {
 export function formatWorktreePrefix(worktreePath) {
     return worktreePath ? `[gateway] worktree=${worktreePath}\n` : "";
 }
+export function remoteSafeWorktreePath(worktreePath, workspaceRoot) {
+    if (!worktreePath)
+        return worktreePath;
+    if (workspaceRoot) {
+        const rel = relative(workspaceRoot, worktreePath);
+        if (rel && !rel.startsWith("..") && !isAbsolute(rel))
+            return rel;
+    }
+    return basename(worktreePath);
+}
 function workspaceAdminEnabled() {
     const scopes = getRequestContext()?.authScopes ?? [];
     return process.env.LLM_GATEWAY_WORKSPACE_ADMIN === "1" && scopes.includes("workspace:admin");
@@ -780,10 +908,9 @@ function registerWorkspaceTools(server, runtime) {
                             success: true,
                             enabled: registry.enabled,
                             default: registry.defaultAlias,
-                            workspaces: registry.repos.map(describeWorkspace),
+                            workspaces: registry.repos.map(describeWorkspaceRemote),
                             allowed_roots: registry.allowedRoots.map(root => ({
                                 alias: root.alias,
-                                path: root.path,
                                 allow_register_existing_git_repos: root.allowRegisterExistingGitRepos,
                                 allow_create_directories: root.allowCreateDirectories,
                                 allow_init_git_repos: root.allowInitGitRepos,
@@ -812,7 +939,10 @@ function registerWorkspaceTools(server, runtime) {
                 content: [
                     {
                         type: "text",
-                        text: JSON.stringify({ success: true, workspace: describeWorkspace(getWorkspace(registry, alias)) }, null, 2),
+                        text: JSON.stringify({
+                            success: true,
+                            workspace: describeWorkspaceRemote(getWorkspace(registry, alias)),
+                        }, null, 2),
                     },
                 ],
             };
@@ -851,7 +981,7 @@ function registerWorkspaceTools(server, runtime) {
                 content: [
                     {
                         type: "text",
-                        text: JSON.stringify({ success: true, workspace: describeWorkspace(repo) }, null, 2),
+                        text: JSON.stringify({ success: true, workspace: describeWorkspaceRemote(repo) }, null, 2),
                     },
                 ],
             };
@@ -889,7 +1019,7 @@ function registerWorkspaceTools(server, runtime) {
                 content: [
                     {
                         type: "text",
-                        text: JSON.stringify({ success: true, workspace: describeWorkspace(repo) }, null, 2),
+                        text: JSON.stringify({ success: true, workspace: describeWorkspaceRemote(repo) }, null, 2),
                     },
                 ],
             };
@@ -1136,7 +1266,7 @@ function resolveClaudeMcpConfig(operation, correlationId, requestedMcpServers, s
     }
     return { config: mcpConfig };
 }
-function registerBaseResources(server, runtime) {
+export function registerBaseResources(server, runtime) {
     for (const skill of loadedSkills) {
         server.registerResource(`skill-${skill.name}`, `skills://${skill.name}`, {
             title: skill.name,
@@ -1162,96 +1292,30 @@ function registerBaseResources(server, runtime) {
         const contents = await runtime.resourceProvider.readResource(uri.href);
         return { contents: contents ? [contents] : [] };
     });
-    server.registerResource("claude-sessions", "sessions://claude", {
-        title: "🤖 Claude Sessions",
-        description: "Claude conversation sessions",
-        mimeType: "application/json",
-    }, async (uri) => {
-        runtime.logger.debug("Reading Claude sessions resource");
-        const contents = await runtime.resourceProvider.readResource(uri.href);
-        return { contents: contents ? [contents] : [] };
-    });
-    server.registerResource("codex-sessions", "sessions://codex", {
-        title: "💻 Codex Sessions",
-        description: "Codex conversation sessions",
-        mimeType: "application/json",
-    }, async (uri) => {
-        runtime.logger.debug("Reading Codex sessions resource");
-        const contents = await runtime.resourceProvider.readResource(uri.href);
-        return { contents: contents ? [contents] : [] };
-    });
-    server.registerResource("gemini-sessions", "sessions://gemini", {
-        title: "✨ Gemini Sessions",
-        description: "Gemini conversation sessions",
-        mimeType: "application/json",
-    }, async (uri) => {
-        runtime.logger.debug("Reading Gemini sessions resource");
-        const contents = await runtime.resourceProvider.readResource(uri.href);
-        return { contents: contents ? [contents] : [] };
-    });
-    server.registerResource("grok-sessions", "sessions://grok", {
-        title: "⚡ Grok Sessions",
-        description: "Grok conversation sessions",
-        mimeType: "application/json",
-    }, async (uri) => {
-        runtime.logger.debug("Reading Grok sessions resource");
-        const contents = await runtime.resourceProvider.readResource(uri.href);
-        return { contents: contents ? [contents] : [] };
-    });
-    server.registerResource("mistral-sessions", "sessions://mistral", {
-        title: "🌬 Mistral Sessions",
-        description: "Mistral Vibe conversation sessions",
-        mimeType: "application/json",
-    }, async (uri) => {
-        runtime.logger.debug("Reading Mistral sessions resource");
-        const contents = await runtime.resourceProvider.readResource(uri.href);
-        return { contents: contents ? [contents] : [] };
-    });
-    server.registerResource("claude-models", "models://claude", {
-        title: "🧠 Claude Models",
-        description: "Claude models and capabilities",
-        mimeType: "application/json",
-    }, async (uri) => {
-        runtime.logger.debug("Reading Claude models resource");
-        const contents = await runtime.resourceProvider.readResource(uri.href);
-        return { contents: contents ? [contents] : [] };
-    });
-    server.registerResource("codex-models", "models://codex", {
-        title: "🔧 Codex Models",
-        description: "Codex models and capabilities",
-        mimeType: "application/json",
-    }, async (uri) => {
-        runtime.logger.debug("Reading Codex models resource");
-        const contents = await runtime.resourceProvider.readResource(uri.href);
-        return { contents: contents ? [contents] : [] };
-    });
-    server.registerResource("gemini-models", "models://gemini", {
-        title: "🌟 Gemini Models",
-        description: "Gemini models and capabilities",
-        mimeType: "application/json",
-    }, async (uri) => {
-        runtime.logger.debug("Reading Gemini models resource");
-        const contents = await runtime.resourceProvider.readResource(uri.href);
-        return { contents: contents ? [contents] : [] };
-    });
-    server.registerResource("grok-models", "models://grok", {
-        title: "⚡ Grok Models",
-        description: "Grok models and capabilities",
-        mimeType: "application/json",
-    }, async (uri) => {
-        runtime.logger.debug("Reading Grok models resource");
-        const contents = await runtime.resourceProvider.readResource(uri.href);
-        return { contents: contents ? [contents] : [] };
-    });
-    server.registerResource("mistral-models", "models://mistral", {
-        title: "🌬 Mistral Models",
-        description: "Mistral Vibe models and capabilities",
-        mimeType: "application/json",
-    }, async (uri) => {
-        runtime.logger.debug("Reading Mistral models resource");
-        const contents = await runtime.resourceProvider.readResource(uri.href);
-        return { contents: contents ? [contents] : [] };
-    });
+    for (const descriptor of generateResourceDescriptors()) {
+        if (descriptor.exposesSessionsResource) {
+            server.registerResource(`${descriptor.provider}-sessions`, descriptor.sessionsUri, {
+                title: `${descriptor.icon} ${descriptor.sessionLabel}s`,
+                description: `${descriptor.displayName} conversation sessions`,
+                mimeType: "application/json",
+            }, async (uri) => {
+                runtime.logger.debug(`Reading ${descriptor.sessionsUri} resource`);
+                const contents = await runtime.resourceProvider.readResource(uri.href);
+                return { contents: contents ? [contents] : [] };
+            });
+        }
+        if (descriptor.exposesModelsResource) {
+            server.registerResource(`${descriptor.provider}-models`, descriptor.modelsUri, {
+                title: `${descriptor.icon} ${descriptor.displayName} Models & Capabilities`,
+                description: `${descriptor.displayName} models and capabilities`,
+                mimeType: "application/json",
+            }, async (uri) => {
+                runtime.logger.debug(`Reading ${descriptor.modelsUri} resource`);
+                const contents = await runtime.resourceProvider.readResource(uri.href);
+                return { contents: contents ? [contents] : [] };
+            });
+        }
+    }
     server.registerResource("performance-metrics", "metrics://performance", {
         title: "📈 Performance Metrics",
         description: "Request counts, latency, success/failure rates",
@@ -1363,9 +1427,30 @@ function registerBaseResources(server, runtime) {
         const contents = await runtime.resourceProvider.readResource(uri.href);
         return { contents: contents ? [contents] : [] };
     });
-    const validationReceiptStore = runtime.persistence.backend === "sqlite"
-        ? runtime.asyncJobManager.getValidationRunStore()
-        : null;
+    for (const descriptor of generateProviderAcpDescriptors()) {
+        server.registerResource(`${descriptor.provider}-provider-acp`, descriptor.acpUri, {
+            title: `${descriptor.icon} ${descriptor.displayName} ACP Capabilities`,
+            description: `Native ACP entrypoint, negotiated capabilities, supported session methods, and host-service policy for ${descriptor.displayName}`,
+            mimeType: "application/json",
+        }, async (uri) => {
+            runtime.logger.debug(`Reading ${descriptor.acpUri} resource`);
+            const contents = await runtime.resourceProvider.readResource(uri.href);
+            return { contents: contents ? [contents] : [] };
+        });
+    }
+    server.registerResource("provider-acp", new ResourceTemplate("provider-acp://{provider}", { list: undefined }), {
+        title: "Provider ACP Capabilities",
+        description: "Read-only negotiated ACP capability record for one provider CLI (native: false for providers with no native ACP entrypoint)",
+        mimeType: "application/json",
+    }, async (uri, variables) => {
+        const provider = Array.isArray(variables.provider)
+            ? variables.provider[0]
+            : variables.provider;
+        runtime.logger.debug(`Reading provider-acp://${provider}`);
+        const contents = await runtime.resourceProvider.readResource(uri.href);
+        return { contents: contents ? [contents] : [] };
+    });
+    const validationReceiptStore = runtime.asyncJobManager?.getValidationRunStore();
     if (validationReceiptStore) {
         server.registerResource("validation-receipt", new ResourceTemplate("validation-receipt://{validationId}", { list: undefined }), {
             title: "Validation Receipt",
@@ -1411,10 +1496,33 @@ function resolvePromptOrPartsForPrep(args) {
         stablePrefixTokens: resolved.stablePrefixTokens,
     };
 }
+function remoteHostPathFieldError(operation, corrId, fields) {
+    const ctx = getRequestContext();
+    const isRemote = ctx?.transport === "http" || ctx?.authKind === "oauth";
+    if (!isRemote)
+        return null;
+    const present = Object.entries(fields)
+        .filter(([, v]) => (Array.isArray(v) ? v.length > 0 : v !== undefined && v !== null))
+        .map(([k]) => k);
+    if (present.length === 0)
+        return null;
+    return createErrorResponse(operation, 1, `Remote HTTP/OAuth requests may not use host-path or plugin fields: ${present.join(", ")}. ` +
+        `These are restricted to local callers; supply content inline or reference a registered workspace.`, corrId);
+}
 export function prepareClaudeRequest(params, runtime = resolveGatewayServerRuntime()) {
     const corrId = params.correlationId || randomUUID();
     const cliInfo = getCliInfo();
     const resolvedModel = resolveModelAlias("claude", params.model, cliInfo);
+    const remoteFieldErr = remoteHostPathFieldError(params.operation, corrId, {
+        settings: params.settings,
+        systemPromptFile: params.systemPromptFile,
+        appendSystemPromptFile: params.appendSystemPromptFile,
+        pluginDir: params.pluginDir,
+        pluginUrl: params.pluginUrl,
+        debugFile: params.debugFile,
+    });
+    if (remoteFieldErr)
+        return remoteFieldErr;
     const inputResolution = resolvePromptOrPartsForPrep({
         prompt: params.prompt,
         promptParts: params.promptParts,
@@ -1634,6 +1742,17 @@ export function prepareClaudeRequest(params, runtime = resolveGatewayServerRunti
         settingSources: params.settingSources,
         settings: params.settings,
         tools: params.tools,
+        includeHookEvents: params.includeHookEvents,
+        replayUserMessages: params.replayUserMessages,
+        systemPromptFile: params.systemPromptFile,
+        appendSystemPromptFile: params.appendSystemPromptFile,
+        name: params.name,
+        pluginDir: params.pluginDir,
+        pluginUrl: params.pluginUrl,
+        safeMode: params.safeMode,
+        bare: params.bare,
+        debug: params.debug,
+        debugFile: params.debugFile,
     }));
     return {
         corrId,
@@ -1656,6 +1775,13 @@ export function prepareCodexRequest(params, runtime = resolveGatewayServerRuntim
     const corrId = params.correlationId || randomUUID();
     const cliInfo = getCliInfo();
     const resolvedModel = resolveModelAlias("codex", params.model, cliInfo);
+    const remoteFieldErr = remoteHostPathFieldError(params.operation, corrId, {
+        outputSchema: typeof params.outputSchema === "string" ? params.outputSchema : undefined,
+        images: params.images,
+        outputLastMessage: params.outputLastMessage,
+    });
+    if (remoteFieldErr)
+        return remoteFieldErr;
     const inputResolution = resolvePromptOrPartsForPrep({
         prompt: params.prompt,
         promptParts: params.promptParts,
@@ -1734,6 +1860,9 @@ export function prepareCodexRequest(params, runtime = resolveGatewayServerRuntim
     if (params.dangerouslyBypassApprovalsAndSandbox) {
         args.push("--dangerously-bypass-approvals-and-sandbox");
     }
+    if (params.dangerouslyBypassHookTrust) {
+        args.push("--dangerously-bypass-hook-trust");
+    }
     args.push("--json");
     args.push("--skip-git-repo-check");
     let highImpactCleanup;
@@ -1746,6 +1875,21 @@ export function prepareCodexRequest(params, runtime = resolveGatewayServerRuntim
                 args.push("--add-dir", dir);
             }
         }
+        if (params.oss) {
+            args.push("--oss");
+        }
+        if (params.localProvider) {
+            args.push("--local-provider", params.localProvider);
+        }
+        if (params.strictConfig) {
+            args.push("--strict-config");
+        }
+        if (params.color) {
+            args.push("--color", params.color);
+        }
+        if (params.outputLastMessage !== undefined) {
+            args.push("--output-last-message", params.outputLastMessage);
+        }
         const high = prepareCodexHighImpactFlags({
             outputSchema: params.outputSchema,
             search: params.search,
@@ -1755,6 +1899,8 @@ export function prepareCodexRequest(params, runtime = resolveGatewayServerRuntim
             images: params.images,
             ignoreUserConfig: params.ignoreUserConfig,
             ignoreRules: params.ignoreRules,
+            enable: params.enable,
+            disable: params.disable,
         });
         if (high.missingImagePath) {
             return createErrorResponse(params.operation, 1, "", corrId, new Error(`images: path does not exist: ${high.missingImagePath}`));
@@ -1778,6 +1924,8 @@ export function prepareCodexRequest(params, runtime = resolveGatewayServerRuntim
             images: params.images,
             ignoreUserConfig: params.ignoreUserConfig,
             ignoreRules: params.ignoreRules,
+            enable: params.enable,
+            disable: params.disable,
         });
         if (high.missingImagePath) {
             return createErrorResponse(params.operation, 1, "", corrId, new Error(`images: path does not exist: ${high.missingImagePath}`));
@@ -1907,6 +2055,9 @@ export function prepareGeminiRequest(params, runtime = resolveGatewayServerRunti
     if (params.newProject) {
         args.push("--new-project");
     }
+    if (params.printTimeout !== undefined && params.printTimeout !== "") {
+        args.push("--print-timeout", params.printTimeout);
+    }
     return {
         corrId,
         effectivePrompt,
@@ -1923,6 +2074,14 @@ export function prepareGrokRequest(params, runtime = resolveGatewayServerRuntime
     const corrId = params.correlationId || randomUUID();
     const cliInfo = getCliInfo();
     const resolvedModel = resolveModelAlias("grok", params.model, cliInfo);
+    const remoteFieldErr = remoteHostPathFieldError(params.operation, corrId, {
+        promptFile: params.promptFile,
+        leaderSocket: params.leaderSocket,
+        rules: params.rules,
+        agent: params.agent,
+    });
+    if (remoteFieldErr)
+        return remoteFieldErr;
     const inputResolution = resolvePromptOrPartsForPrep({
         prompt: params.prompt,
         promptParts: params.promptParts,
@@ -2185,6 +2344,9 @@ export function buildCliResponse(cli, stdout, optimizeResponse, corrId, sessionI
     if (cli === "codex" && outputFormat !== "json") {
         finalStdout = codexDisplayText(stdout);
     }
+    if (cli === "grok") {
+        finalStdout = grokDisplayText(outputFormat, stdout);
+    }
     if (optimizeResponse && outputFormat !== "json") {
         const optimized = optimizeResponseText(finalStdout);
         logOptimizationTokens("response", corrId, finalStdout, optimized);
@@ -2200,11 +2362,11 @@ export function buildCliResponse(cli, stdout, optimizeResponse, corrId, sessionI
     }
     const derivedWarnings = [];
     const extraStructured = {};
-    let claudeResultError = false;
+    let resultError = false;
     if (cli === "claude") {
         const parsedResult = parseStreamJson(stdout);
         if (parsedResult.isError) {
-            claudeResultError = true;
+            resultError = true;
             extraStructured.resultIsError = true;
             derivedWarnings.push({
                 code: "claude_result_error",
@@ -2217,8 +2379,27 @@ export function buildCliResponse(cli, stdout, optimizeResponse, corrId, sessionI
         if (parsedCodex.threadId) {
             extraStructured.codexSessionId = parsedCodex.threadId;
         }
+        if (parsedCodex.error) {
+            resultError = true;
+            extraStructured.resultIsError = true;
+            derivedWarnings.push({
+                code: "codex_result_error",
+                message: `Codex exited 0 but reported a failed turn: ${parsedCodex.error}. The returned text may be partial.`,
+            });
+        }
     }
-    if (!claudeResultError && finalStdout.trim().length === 0) {
+    if (cli === "gemini") {
+        const parsedGemini = outputFormat === "stream-json" ? parseGeminiStreamJson(stdout) : parseGeminiJson(stdout);
+        if (parsedGemini?.stopReason === "error") {
+            resultError = true;
+            extraStructured.resultIsError = true;
+            derivedWarnings.push({
+                code: "gemini_result_error",
+                message: "Gemini exited 0 but the result event reported status:error. The returned text may be partial.",
+            });
+        }
+    }
+    if (!resultError && finalStdout.trim().length === 0) {
         extraStructured.emptyOutput = true;
         derivedWarnings.push({
             code: "empty_output",
@@ -2956,6 +3137,7 @@ export async function handleGeminiRequest(deps, params) {
         yolo: params.yolo,
         project: params.project,
         newProject: params.newProject,
+        printTimeout: params.printTimeout,
     }, runtime);
     if (!("args" in prep))
         return prep;
@@ -3044,6 +3226,7 @@ export async function handleGeminiRequest(deps, params) {
             }
         }
         const geminiUsage = extractUsageAndCost("gemini", stdout, params.outputFormat);
+        const geminiMeta = extractProviderOutputMetadata("gemini", stdout, params.outputFormat);
         safeFlightComplete(corrId, {
             response: stdout,
             durationMs,
@@ -3058,6 +3241,8 @@ export async function handleGeminiRequest(deps, params) {
             cacheReadTokens: geminiUsage.cacheReadTokens,
             cacheCreationTokens: geminiUsage.cacheCreationTokens,
             costUsd: geminiUsage.costUsd,
+            providerSessionId: geminiMeta.sessionId,
+            stopReason: geminiMeta.stopReason,
         }, runtime);
         return response;
     }
@@ -3105,6 +3290,7 @@ export async function handleGeminiRequestAsync(deps, params) {
         yolo: params.yolo,
         project: params.project,
         newProject: params.newProject,
+        printTimeout: params.printTimeout,
     }, runtime);
     if (!("args" in prep))
         return prep;
@@ -3326,6 +3512,7 @@ export async function handleGrokRequest(deps, params) {
                 first.text = formatWorktreePrefix(worktreeResolution.worktreePath) + first.text;
             }
         }
+        const grokMeta = extractProviderOutputMetadata("grok", stdout, params.outputFormat);
         safeFlightComplete(corrId, {
             response: stdout,
             durationMs,
@@ -3335,6 +3522,8 @@ export async function handleGrokRequest(deps, params) {
             optimizationApplied: params.optimizePrompt || (params.optimizeResponse ?? false),
             exitCode: 0,
             status: "completed",
+            providerSessionId: grokMeta.sessionId,
+            stopReason: grokMeta.stopReason,
         }, runtime);
         return response;
     }
@@ -3489,6 +3678,14 @@ export async function handleGrokRequestAsync(deps, params) {
 }
 export function prepareDevinRequest(params, _runtime) {
     const corrId = params.correlationId ?? randomUUID();
+    const remoteFieldErr = remoteHostPathFieldError(params.operation, corrId, {
+        promptFile: params.promptFile,
+        config: params.config,
+        agentConfig: params.agentConfig,
+        exportSession: typeof params.exportSession === "string" ? params.exportSession : undefined,
+    });
+    if (remoteFieldErr)
+        return remoteFieldErr;
     let prompt = (params.prompt ?? "").trim();
     if (!prompt) {
         return createErrorResponse(params.operation, 1, "prompt is required and cannot be empty", corrId);
@@ -3503,6 +3700,21 @@ export function prepareDevinRequest(params, _runtime) {
         args.push("--permission-mode", params.permissionMode);
     if (params.promptFile)
         args.push("--prompt-file", params.promptFile);
+    if (params.config)
+        args.push("--config", params.config);
+    if (params.sandbox)
+        args.push("--sandbox");
+    if (typeof params.exportSession === "string") {
+        args.push("--export", params.exportSession);
+    }
+    else if (params.exportSession === true) {
+        args.push("--export");
+    }
+    if (params.respectWorkspaceTrust !== undefined) {
+        args.push("--respect-workspace-trust", params.respectWorkspaceTrust ? "true" : "false");
+    }
+    if (params.agentConfig)
+        args.push("--agent-config", params.agentConfig);
     return {
         corrId,
         effectivePrompt: prompt,
@@ -3522,6 +3734,7 @@ export async function handleDevinRequest(deps, params) {
             model: params.model,
             sessionId: params.sessionId,
             correlationId: params.correlationId,
+            agentType: params.agentType,
         });
     }
     const runtime = resolveHandlerRuntime(deps);
@@ -3531,6 +3744,11 @@ export async function handleDevinRequest(deps, params) {
         model: params.model,
         permissionMode: params.permissionMode,
         promptFile: params.promptFile,
+        config: params.config,
+        sandbox: params.sandbox,
+        exportSession: params.exportSession,
+        respectWorkspaceTrust: params.respectWorkspaceTrust,
+        agentConfig: params.agentConfig,
         correlationId: params.correlationId,
         optimizePrompt: params.optimizePrompt,
         operation: "devin_request",
@@ -3634,6 +3852,11 @@ export async function handleDevinRequestAsync(deps, params) {
         model: params.model,
         permissionMode: params.permissionMode,
         promptFile: params.promptFile,
+        config: params.config,
+        sandbox: params.sandbox,
+        exportSession: params.exportSession,
+        respectWorkspaceTrust: params.respectWorkspaceTrust,
+        agentConfig: params.agentConfig,
         correlationId: params.correlationId,
         optimizePrompt: params.optimizePrompt,
         operation: "devin_request_async",
@@ -4338,6 +4561,14 @@ export async function handleCodexRequestAsync(deps, params) {
         ignoreRules: params.ignoreRules,
         workingDir: params.workingDir,
         addDir: params.addDir,
+        enable: params.enable,
+        disable: params.disable,
+        strictConfig: params.strictConfig,
+        oss: params.oss,
+        localProvider: params.localProvider,
+        color: params.color,
+        outputLastMessage: params.outputLastMessage,
+        dangerouslyBypassHookTrust: params.dangerouslyBypassHookTrust,
     }, runtime);
     if (!("args" in prep))
         return prep;
@@ -4442,9 +4673,14 @@ export function createGatewayServer(deps = {}) {
     registerValidationTools(server, {
         asyncJobManager,
         apiProviders: enabledApiProviders(providers),
-        validationRunStore: persistence.backend === "sqlite" ? asyncJobManager.getValidationRunStore() : null,
+        validationRunStore: asyncJobManager.getValidationRunStore(),
     });
     registerWorkspaceTools(server, runtime);
+    registerProviderAdminTools(server, {
+        approvalManager: runtime.approvalManager,
+        logger: runtime.logger,
+        allowMutatingCliAdminOps: runtime.adminConfig.allowMutatingCliAdminOps,
+    });
     const apiProviderTools = registerApiProviderTools(server, runtime, providers, asyncJobsEnabled);
     if (apiProviderTools.length > 0) {
         runtime.logger.info(`Registered API provider tools: ${apiProviderTools.join(", ")}`);
@@ -4633,6 +4869,7 @@ export function createGatewayServer(deps = {}) {
             .array(z.string())
             .optional()
             .describe('Claude --tools: restrict the available built-in tool set (distinct from allowedTools permission gating). Pass [""] to disable all tools.'),
+        ...CLAUDE_PART_A_FIELDS,
         workspace: providerWorkspaceAliasSchema(),
         worktree: WORKTREE_SCHEMA.optional(),
         approvalStrategy: z
@@ -4668,7 +4905,7 @@ export function createGatewayServer(deps = {}) {
         destructiveHint: true,
         idempotentHint: false,
         openWorldHint: true,
-    }, async ({ prompt, promptParts, model, outputFormat, sessionId, continueSession, createNewSession, allowedTools, disallowedTools, dangerouslySkipPermissions, permissionMode, agent, agents, forkSession, systemPrompt, appendSystemPrompt, maxBudgetUsd, maxTurns, effort, excludeDynamicSystemPromptSections, fallbackModel, jsonSchema, addDir, noSessionPersistence, settingSources, settings, tools, workspace, worktree, approvalStrategy, approvalPolicy, mcpServers, strictMcpConfig, correlationId, optimizePrompt, optimizeResponse, idleTimeoutMs, forceRefresh, }) => {
+    }, async ({ prompt, promptParts, model, outputFormat, sessionId, continueSession, createNewSession, allowedTools, disallowedTools, dangerouslySkipPermissions, permissionMode, agent, agents, forkSession, systemPrompt, appendSystemPrompt, maxBudgetUsd, maxTurns, effort, excludeDynamicSystemPromptSections, fallbackModel, jsonSchema, addDir, noSessionPersistence, settingSources, settings, tools, includeHookEvents, replayUserMessages, systemPromptFile, appendSystemPromptFile, name, pluginDir, pluginUrl, safeMode, bare, debug, debugFile, workspace, worktree, approvalStrategy, approvalPolicy, mcpServers, strictMcpConfig, correlationId, optimizePrompt, optimizeResponse, idleTimeoutMs, forceRefresh, }) => {
         const startTime = Date.now();
         if (systemPrompt !== undefined && appendSystemPrompt !== undefined) {
             return createErrorResponse("claude", 1, "", correlationId, new Error("systemPrompt and appendSystemPrompt are mutually exclusive; use one or the other (not both)."));
@@ -4705,6 +4942,17 @@ export function createGatewayServer(deps = {}) {
             settingSources,
             settings,
             tools,
+            includeHookEvents,
+            replayUserMessages,
+            systemPromptFile,
+            appendSystemPromptFile,
+            name,
+            pluginDir,
+            pluginUrl,
+            safeMode,
+            bare,
+            debug,
+            debugFile,
         }, runtime);
         if (!("args" in prep))
             return prep;
@@ -4832,6 +5080,8 @@ export function createGatewayServer(deps = {}) {
                     optimizationApplied: optimizePrompt || optimizeResponse,
                     exitCode: 0,
                     status: "completed",
+                    providerSessionId: parsed.sessionId ?? undefined,
+                    stopReason: parsed.stopReason ?? undefined,
                 }, runtime);
                 const streamResponse = buildCliResponse("claude", parsed.text, optimizeResponse, corrId, effectiveSessionId, prep, durationMs, undefined, outputFormat, warnings);
                 if (worktreeResolution.worktreePath) {
@@ -4842,6 +5092,7 @@ export function createGatewayServer(deps = {}) {
                 }
                 return streamResponse;
             }
+            const claudeMeta = extractProviderOutputMetadata("claude", stdout, outputFormat);
             safeFlightComplete(corrId, {
                 response: stdout,
                 durationMs,
@@ -4850,6 +5101,8 @@ export function createGatewayServer(deps = {}) {
                 optimizationApplied: optimizePrompt || optimizeResponse,
                 exitCode: 0,
                 status: "completed",
+                providerSessionId: claudeMeta.sessionId,
+                stopReason: claudeMeta.stopReason,
             }, runtime);
             const nonStreamResponse = buildCliResponse("claude", stdout, optimizeResponse, corrId, effectiveSessionId, prep, durationMs, undefined, outputFormat, warnings);
             if (worktreeResolution.worktreePath) {
@@ -4988,6 +5241,7 @@ export function createGatewayServer(deps = {}) {
             .optional()
             .describe("Codex --add-dir <DIR>: additional writable workspace directories. Emitted once per entry on new sessions only; resume inherits the original session's writable-dir policy." +
             LOCAL_ADD_DIR_FIELD_SUFFIX),
+        ...CODEX_PART_A_FIELDS,
         workspace: providerWorkspaceAliasSchema(),
         worktree: WORKTREE_SCHEMA.optional(),
     }, {
@@ -4996,7 +5250,7 @@ export function createGatewayServer(deps = {}) {
         destructiveHint: true,
         idempotentHint: false,
         openWorldHint: true,
-    }, async ({ prompt, promptParts, model, fullAuto, sandboxMode, askForApproval, useLegacyFullAutoFlag, dangerouslyBypassApprovalsAndSandbox, approvalStrategy, approvalPolicy, mcpServers, sessionId, resumeLatest, createNewSession, correlationId, optimizePrompt, optimizeResponse, idleTimeoutMs, forceRefresh, outputFormat, outputSchema, search, profile, configOverrides, ephemeral, images, ignoreUserConfig, ignoreRules, workingDir, addDir, workspace, worktree, }) => {
+    }, async ({ prompt, promptParts, model, fullAuto, sandboxMode, askForApproval, useLegacyFullAutoFlag, dangerouslyBypassApprovalsAndSandbox, approvalStrategy, approvalPolicy, mcpServers, sessionId, resumeLatest, createNewSession, correlationId, optimizePrompt, optimizeResponse, idleTimeoutMs, forceRefresh, outputFormat, outputSchema, search, profile, configOverrides, ephemeral, images, ignoreUserConfig, ignoreRules, workingDir, addDir, enable, disable, strictConfig, oss, localProvider, color, outputLastMessage, dangerouslyBypassHookTrust, workspace, worktree, }) => {
         const startTime = Date.now();
         const prep = prepareCodexRequest({
             prompt,
@@ -5027,6 +5281,14 @@ export function createGatewayServer(deps = {}) {
             ignoreRules,
             workingDir,
             addDir,
+            enable,
+            disable,
+            strictConfig,
+            oss,
+            localProvider,
+            color,
+            outputLastMessage,
+            dangerouslyBypassHookTrust,
         }, runtime);
         if (!("args" in prep))
             return prep;
@@ -5085,7 +5347,12 @@ export function createGatewayServer(deps = {}) {
                     errorMessage: stderr || `Exit code ${code}`,
                     status: "failed",
                 }, runtime);
-                const codexErrorDetail = stderr && stderr.trim().length > 0 ? stderr : codexDisplayText(stdout);
+                const parsedCodexError = parseCodexJsonStream(stdout).error;
+                const codexErrorDetail = stderr && stderr.trim().length > 0
+                    ? stderr
+                    : parsedCodexError && parsedCodexError.trim().length > 0
+                        ? parsedCodexError
+                        : codexDisplayText(stdout);
                 const codexResumeHint = sessionId &&
                     /not found|no such|unknown session|does not exist|invalid session/i.test(codexErrorDetail)
                     ? `\n\nSession ${sessionId} could not be resumed. Codex session IDs are UUIDs under ~/.codex/sessions/; verify the id, omit sessionId, or set createNewSession:true.`
@@ -5113,6 +5380,7 @@ export function createGatewayServer(deps = {}) {
             }
             logger.info(`[${corrId}] codex_request completed successfully in ${durationMs}ms`);
             const codexUsage = extractUsageAndCost("codex", stdout, outputFormat);
+            const codexMeta = extractProviderOutputMetadata("codex", stdout, outputFormat);
             safeFlightComplete(corrId, {
                 response: codexFrResponse(outputFormat, stdout),
                 durationMs,
@@ -5126,6 +5394,8 @@ export function createGatewayServer(deps = {}) {
                 cacheReadTokens: codexUsage.cacheReadTokens,
                 cacheCreationTokens: codexUsage.cacheCreationTokens,
                 costUsd: codexUsage.costUsd,
+                providerSessionId: codexMeta.sessionId,
+                stopReason: codexMeta.stopReason,
             }, runtime);
             const codexResponse = buildCliResponse("codex", stdout, optimizeResponse, corrId, effectiveSessionId, prep, durationMs, undefined, outputFormat);
             if (worktreeResolution.worktreePath) {
@@ -5247,7 +5517,12 @@ export function createGatewayServer(deps = {}) {
             const { stdout, stderr, code } = result;
             durationMs = Math.max(0, Date.now() - startTime);
             if (code !== 0) {
-                const codexErrorDetail = stderr && stderr.trim().length > 0 ? stderr : codexDisplayText(stdout);
+                const parsedCodexError = parseCodexJsonStream(stdout).error;
+                const codexErrorDetail = stderr && stderr.trim().length > 0
+                    ? stderr
+                    : parsedCodexError && parsedCodexError.trim().length > 0
+                        ? parsedCodexError
+                        : codexDisplayText(stdout);
                 const codexResumeHint = sessionId &&
                     /not found|no such|unknown session|does not exist|invalid session/i.test(codexErrorDetail)
                     ? `\n\nSession ${sessionId} could not be resumed. Codex session IDs are UUIDs under ~/.codex/sessions/; verify the id, omit sessionId, or set createNewSession:true.`
@@ -5351,6 +5626,11 @@ export function createGatewayServer(deps = {}) {
             .boolean()
             .optional()
             .describe("Antigravity 1.0.13 --new-project: create a new project for this session. Mutually exclusive with project."),
+        printTimeout: z
+            .string()
+            .min(1)
+            .optional()
+            .describe("Antigravity --print-timeout <DURATION>: print-mode wait timeout as a Go duration string (e.g. '5m0s', '30s')."),
         workspace: providerWorkspaceAliasSchema(),
         worktree: WORKTREE_SCHEMA.optional(),
     }, {
@@ -5359,7 +5639,7 @@ export function createGatewayServer(deps = {}) {
         destructiveHint: true,
         idempotentHint: false,
         openWorldHint: true,
-    }, async ({ prompt, promptParts, model, sessionId, resumeLatest, createNewSession, approvalMode, approvalStrategy, approvalPolicy, mcpServers, allowedTools, includeDirs, correlationId, optimizePrompt, optimizeResponse, idleTimeoutMs, forceRefresh, outputFormat, sandbox, policyFiles, adminPolicyFiles, attachments, skipTrust, yolo, project, newProject, workspace, worktree, }) => {
+    }, async ({ prompt, promptParts, model, sessionId, resumeLatest, createNewSession, approvalMode, approvalStrategy, approvalPolicy, mcpServers, allowedTools, includeDirs, correlationId, optimizePrompt, optimizeResponse, idleTimeoutMs, forceRefresh, outputFormat, sandbox, policyFiles, adminPolicyFiles, attachments, skipTrust, yolo, project, newProject, printTimeout, workspace, worktree, }) => {
         return handleGeminiRequest({ sessionManager, logger, runtime }, {
             prompt,
             promptParts,
@@ -5387,6 +5667,7 @@ export function createGatewayServer(deps = {}) {
             yolo,
             project,
             newProject,
+            printTimeout,
             workspace,
             worktree,
         });
@@ -5560,6 +5841,27 @@ export function createGatewayServer(deps = {}) {
             .string()
             .optional()
             .describe("Load the initial prompt from a file (--prompt-file)"),
+        config: z.string().optional().describe("Config file path (Devin --config <PATH>)"),
+        sandbox: z
+            .boolean()
+            .optional()
+            .describe("Run the Devin session in a sandbox (Devin --sandbox). Safety control: never defaulted on; pass true to opt in."),
+        exportSession: z
+            .union([z.boolean(), z.string()])
+            .optional()
+            .describe("Export the session (Devin --export [<PATH>]). true emits a bare --export; a string path emits --export <path>."),
+        respectWorkspaceTrust: z
+            .boolean()
+            .optional()
+            .describe("Respect workspace trust (Devin --respect-workspace-trust <bool>). Devin defaults true for interactive and false for print mode; set explicitly to override."),
+        agentConfig: z
+            .string()
+            .optional()
+            .describe("Agent config file path (Devin --agent-config <FILE>)"),
+        agentType: z
+            .enum(DEVIN_ACP_AGENT_TYPES)
+            .optional()
+            .describe("ACP agent variant for transport=acp (`devin acp --agent-type`): 'summarizer' (no tools, text summary) or 'review' (read-only + shell code-review). Ignored for the CLI transport."),
         sessionId: z
             .string()
             .optional()
@@ -5589,13 +5891,19 @@ export function createGatewayServer(deps = {}) {
         destructiveHint: true,
         idempotentHint: false,
         openWorldHint: true,
-    }, async ({ prompt, model, transport, permissionMode, promptFile, sessionId, resumeLatest, createNewSession, correlationId, optimizePrompt, optimizeResponse, idleTimeoutMs, forceRefresh, }) => {
+    }, async ({ prompt, model, transport, permissionMode, promptFile, config, sandbox, exportSession, respectWorkspaceTrust, agentConfig, agentType, sessionId, resumeLatest, createNewSession, correlationId, optimizePrompt, optimizeResponse, idleTimeoutMs, forceRefresh, }) => {
         return handleDevinRequest({ sessionManager, logger, runtime }, {
             prompt,
             model,
             transport,
             permissionMode,
             promptFile,
+            config,
+            sandbox,
+            exportSession,
+            respectWorkspaceTrust,
+            agentConfig,
+            agentType,
             sessionId,
             resumeLatest,
             createNewSession,
@@ -5942,6 +6250,7 @@ export function createGatewayServer(deps = {}) {
                 .array(z.string())
                 .optional()
                 .describe('Claude --tools: restrict the available built-in tool set (distinct from allowedTools permission gating). Pass [""] to disable all tools.'),
+            ...CLAUDE_PART_A_FIELDS,
             workspace: providerWorkspaceAliasSchema(),
             worktree: WORKTREE_SCHEMA.optional(),
             approvalStrategy: z
@@ -5976,7 +6285,7 @@ export function createGatewayServer(deps = {}) {
             destructiveHint: true,
             idempotentHint: false,
             openWorldHint: true,
-        }, async ({ prompt, promptParts, model, outputFormat, sessionId, continueSession, createNewSession, allowedTools, disallowedTools, dangerouslySkipPermissions, permissionMode, agent, agents, forkSession, systemPrompt, appendSystemPrompt, maxBudgetUsd, maxTurns, effort, excludeDynamicSystemPromptSections, fallbackModel, jsonSchema, addDir, noSessionPersistence, settingSources, settings, tools, workspace, worktree, approvalStrategy, approvalPolicy, mcpServers, strictMcpConfig, correlationId, optimizePrompt, idleTimeoutMs, forceRefresh, }) => {
+        }, async ({ prompt, promptParts, model, outputFormat, sessionId, continueSession, createNewSession, allowedTools, disallowedTools, dangerouslySkipPermissions, permissionMode, agent, agents, forkSession, systemPrompt, appendSystemPrompt, maxBudgetUsd, maxTurns, effort, excludeDynamicSystemPromptSections, fallbackModel, jsonSchema, addDir, noSessionPersistence, settingSources, settings, tools, includeHookEvents, replayUserMessages, systemPromptFile, appendSystemPromptFile, name, pluginDir, pluginUrl, safeMode, bare, debug, debugFile, workspace, worktree, approvalStrategy, approvalPolicy, mcpServers, strictMcpConfig, correlationId, optimizePrompt, idleTimeoutMs, forceRefresh, }) => {
             if (systemPrompt !== undefined && appendSystemPrompt !== undefined) {
                 return createErrorResponse("claude", 1, "", correlationId, new Error("systemPrompt and appendSystemPrompt are mutually exclusive; use one or the other (not both)."));
             }
@@ -6012,6 +6321,17 @@ export function createGatewayServer(deps = {}) {
                 settingSources,
                 settings,
                 tools,
+                includeHookEvents,
+                replayUserMessages,
+                systemPromptFile,
+                appendSystemPromptFile,
+                name,
+                pluginDir,
+                pluginUrl,
+                safeMode,
+                bare,
+                debug,
+                debugFile,
             }, runtime);
             if (!("args" in prep))
                 return prep;
@@ -6199,6 +6519,7 @@ export function createGatewayServer(deps = {}) {
                 .optional()
                 .describe("Codex --add-dir <DIR>: additional writable workspace directories (repeat per entry). New sessions only." +
                 LOCAL_ADD_DIR_FIELD_SUFFIX),
+            ...CODEX_PART_A_FIELDS,
             workspace: providerWorkspaceAliasSchema(),
             worktree: WORKTREE_SCHEMA.optional(),
         }, {
@@ -6207,7 +6528,7 @@ export function createGatewayServer(deps = {}) {
             destructiveHint: true,
             idempotentHint: false,
             openWorldHint: true,
-        }, async ({ prompt, promptParts, model, fullAuto, sandboxMode, askForApproval, useLegacyFullAutoFlag, dangerouslyBypassApprovalsAndSandbox, approvalStrategy, approvalPolicy, mcpServers, sessionId, resumeLatest, createNewSession, correlationId, optimizePrompt, idleTimeoutMs, forceRefresh, outputFormat, outputSchema, search, profile, configOverrides, ephemeral, images, ignoreUserConfig, ignoreRules, workingDir, addDir, workspace, worktree, }) => {
+        }, async ({ prompt, promptParts, model, fullAuto, sandboxMode, askForApproval, useLegacyFullAutoFlag, dangerouslyBypassApprovalsAndSandbox, approvalStrategy, approvalPolicy, mcpServers, sessionId, resumeLatest, createNewSession, correlationId, optimizePrompt, idleTimeoutMs, forceRefresh, outputFormat, outputSchema, search, profile, configOverrides, ephemeral, images, ignoreUserConfig, ignoreRules, workingDir, addDir, enable, disable, strictConfig, oss, localProvider, color, outputLastMessage, dangerouslyBypassHookTrust, workspace, worktree, }) => {
             return handleCodexRequestAsync({ sessionManager, asyncJobManager, logger, runtime }, {
                 prompt,
                 promptParts,
@@ -6238,6 +6559,14 @@ export function createGatewayServer(deps = {}) {
                 ignoreRules,
                 workingDir,
                 addDir,
+                enable,
+                disable,
+                strictConfig,
+                oss,
+                localProvider,
+                color,
+                outputLastMessage,
+                dangerouslyBypassHookTrust,
                 workspace,
                 worktree,
             });
@@ -6326,6 +6655,11 @@ export function createGatewayServer(deps = {}) {
                 .boolean()
                 .optional()
                 .describe("Antigravity 1.0.13 --new-project: create a new project for this session. Mutually exclusive with project."),
+            printTimeout: z
+                .string()
+                .min(1)
+                .optional()
+                .describe("Antigravity --print-timeout <DURATION>: print-mode wait timeout as a Go duration string (e.g. '5m0s', '30s')."),
             workspace: providerWorkspaceAliasSchema(),
             worktree: WORKTREE_SCHEMA.optional(),
         }, {
@@ -6334,7 +6668,7 @@ export function createGatewayServer(deps = {}) {
             destructiveHint: true,
             idempotentHint: false,
             openWorldHint: true,
-        }, async ({ prompt, promptParts, model, sessionId, resumeLatest, createNewSession, approvalMode, approvalStrategy, approvalPolicy, mcpServers, allowedTools, includeDirs, correlationId, optimizePrompt, idleTimeoutMs, forceRefresh, outputFormat, sandbox, policyFiles, adminPolicyFiles, attachments, skipTrust, yolo, project, newProject, workspace, worktree, }) => {
+        }, async ({ prompt, promptParts, model, sessionId, resumeLatest, createNewSession, approvalMode, approvalStrategy, approvalPolicy, mcpServers, allowedTools, includeDirs, correlationId, optimizePrompt, idleTimeoutMs, forceRefresh, outputFormat, sandbox, policyFiles, adminPolicyFiles, attachments, skipTrust, yolo, project, newProject, printTimeout, workspace, worktree, }) => {
             return handleGeminiRequestAsync({ sessionManager, asyncJobManager, logger, runtime }, {
                 prompt,
                 promptParts,
@@ -6361,6 +6695,7 @@ export function createGatewayServer(deps = {}) {
                 yolo,
                 project,
                 newProject,
+                printTimeout,
                 workspace,
                 worktree,
             });
@@ -6636,6 +6971,23 @@ export function createGatewayServer(deps = {}) {
                 .string()
                 .optional()
                 .describe("Load the initial prompt from a file (--prompt-file)"),
+            config: z.string().optional().describe("Config file path (Devin --config <PATH>)"),
+            sandbox: z
+                .boolean()
+                .optional()
+                .describe("Run the Devin session in a sandbox (Devin --sandbox). Safety control: never defaulted on; pass true to opt in."),
+            exportSession: z
+                .union([z.boolean(), z.string()])
+                .optional()
+                .describe("Export the session (Devin --export [<PATH>]). true emits a bare --export; a string path emits --export <path>."),
+            respectWorkspaceTrust: z
+                .boolean()
+                .optional()
+                .describe("Respect workspace trust (Devin --respect-workspace-trust <bool>). Devin defaults true for interactive and false for print mode; set explicitly to override."),
+            agentConfig: z
+                .string()
+                .optional()
+                .describe("Agent config file path (Devin --agent-config <FILE>)"),
             sessionId: z
                 .string()
                 .optional()
@@ -6664,12 +7016,17 @@ export function createGatewayServer(deps = {}) {
             destructiveHint: true,
             idempotentHint: false,
             openWorldHint: true,
-        }, async ({ prompt, model, permissionMode, promptFile, sessionId, resumeLatest, createNewSession, correlationId, optimizePrompt, idleTimeoutMs, forceRefresh, }) => {
+        }, async ({ prompt, model, permissionMode, promptFile, config, sandbox, exportSession, respectWorkspaceTrust, agentConfig, sessionId, resumeLatest, createNewSession, correlationId, optimizePrompt, idleTimeoutMs, forceRefresh, }) => {
             return handleDevinRequestAsync({ sessionManager, asyncJobManager, logger, runtime }, {
                 prompt,
                 model,
                 permissionMode,
                 promptFile,
+                config,
+                sandbox,
+                exportSession,
+                respectWorkspaceTrust,
+                agentConfig,
                 sessionId,
                 resumeLatest,
                 createNewSession,
@@ -6972,6 +7329,18 @@ export function createGatewayServer(deps = {}) {
                 result.stdout) {
                 result.stdout = codexDisplayText(result.stdout);
             }
+            if (callerIsRemote()) {
+                const leakedId = result.providerSessionId;
+                delete result.providerSessionId;
+                if (leakedId) {
+                    if (result.stdout && result.stdout.includes(leakedId)) {
+                        result.stdout = result.stdout.split(leakedId).join("[redacted-session-id]");
+                    }
+                    if (result.stderr && result.stderr.includes(leakedId)) {
+                        result.stderr = result.stderr.split(leakedId).join("[redacted-session-id]");
+                    }
+                }
+            }
             return {
                 content: [
                     {
@@ -7215,10 +7584,7 @@ export function createGatewayServer(deps = {}) {
             .max(500)
             .default(50)
             .describe("Max number of approval records"),
-        cli: z
-            .enum(["claude", "codex", "gemini", "grok", "mistral"])
-            .optional()
-            .describe("Optional CLI filter"),
+        cli: CLI_TYPE_ENUM.optional().describe("Optional CLI filter (any gateway CLI provider, derived from CLI_TYPES)"),
     }, {
         title: "Approval decisions",
         readOnlyHint: true,
@@ -7256,9 +7622,19 @@ export function createGatewayServer(deps = {}) {
     }, async ({ cli }) => {
         const cliInfo = getAvailableCliInfo();
         const apiRuntimes = enabledApiProviders(providers);
+        const buildDiscoveredMap = (clis) => {
+            const out = {};
+            for (const c of clis) {
+                out[c] = buildProviderDiscoveredView(getProviderDefinition(c), cliInfo[c], peekProviderCapabilitySet);
+            }
+            return out;
+        };
         let result;
         if (cli && CLI_TYPES.includes(cli)) {
-            result = { [cli]: cliInfo[cli] };
+            result = {
+                [cli]: cliInfo[cli],
+                discovered: buildDiscoveredMap([cli]),
+            };
         }
         else if (cli) {
             const runtime = apiRuntimes.find(p => p.name === cli);
@@ -7266,7 +7642,11 @@ export function createGatewayServer(deps = {}) {
         }
         else {
             const apiProviders = apiRuntimes.map(apiProviderCatalogEntry);
-            result = { ...cliInfo, ...(apiProviders.length > 0 ? { apiProviders } : {}) };
+            result = {
+                ...cliInfo,
+                discovered: buildDiscoveredMap(CLI_TYPES),
+                ...(apiProviders.length > 0 ? { apiProviders } : {}),
+            };
         }
         return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
     });
@@ -7313,6 +7693,7 @@ export function createGatewayServer(deps = {}) {
             includePaths,
             refresh,
             providersConfig: providers,
+            acpConfig: runtime.acpConfig,
         });
         return { content: [{ type: "text", text: JSON.stringify(capabilities, null, 2) }] };
     });
@@ -7789,7 +8170,7 @@ export function createGatewayServer(deps = {}) {
                         text: JSON.stringify({
                             success: true,
                             session: {
-                                ...session,
+                                ...(callerIsRemote() ? remoteSafeSession(session) : session),
                                 isActive: activeSession?.id === session.id,
                                 ...(cacheState ? { cacheState } : {}),
                             },
@@ -7858,7 +8239,7 @@ async function initializeSessionManager() {
         });
         logger.info("File-based session manager initialized");
     }
-    resourceProvider = new ResourceProvider(sessionManager, performanceMetrics, getFlightRecorder(logger), getCacheAwarenessConfig(logger), getProvidersConfig(logger));
+    resourceProvider = new ResourceProvider(sessionManager, performanceMetrics, getFlightRecorder(logger), getCacheAwarenessConfig(logger), getProvidersConfig(logger), undefined, getAcpConfig(logger));
 }
 function registerHealthResource(server) {
     if (db) {
@@ -7981,6 +8362,56 @@ function localBaseUrlForPrint() {
 function printJsonLine(value) {
     process.stdout.write(JSON.stringify(value, null, 2) + "\n");
 }
+const OAUTH_RESTART_NOTE = "Restart the gateway HTTP transport for this change to take effect (OAuth config is loaded at startup).";
+function validateCliRedirectUri(uri) {
+    let parsed;
+    try {
+        parsed = new URL(uri);
+    }
+    catch {
+        throw new Error(`Invalid --redirect-uri "${uri}": it must be an absolute URL with a scheme (e.g. https://chatgpt.com/connector/callback).`);
+    }
+    if (parsed.protocol === "https:")
+        return;
+    if (parsed.protocol === "http:" && hostIsLoopback(parsed.hostname))
+        return;
+    throw new Error(`Invalid --redirect-uri "${uri}": must be https:// (or http:// only for localhost/loopback). The gateway rejects http non-loopback redirect URIs at runtime.`);
+}
+function validateCliClientId(clientId) {
+    if (!/^[A-Za-z0-9._-]{1,128}$/.test(clientId)) {
+        throw new Error(`Invalid client-id "${clientId}": use 1-128 chars of letters, digits, dot, underscore, or hyphen.`);
+    }
+}
+function hostIsLoopback(hostname) {
+    const h = hostname.toLowerCase();
+    return h === "localhost" || h === "127.0.0.1" || h === "::1" || h === "[::1]";
+}
+function redirectLooksLocalhost(uri) {
+    try {
+        return hostIsLoopback(new URL(uri).hostname);
+    }
+    catch {
+        return false;
+    }
+}
+function publicUrlIsRemote(env = process.env) {
+    const publicUrl = env.LLM_GATEWAY_PUBLIC_URL;
+    if (!publicUrl)
+        return false;
+    try {
+        return !hostIsLoopback(new URL(publicUrl).hostname);
+    }
+    catch {
+        return false;
+    }
+}
+function cliConnectorUrls() {
+    return buildRemoteConnectorUrls({
+        baseOrigin: localBaseUrlForPrint(),
+        mcpPath: process.env.LLM_GATEWAY_HTTP_PATH || "/mcp",
+        oauthEnabled: true,
+    });
+}
 function runOAuthCommand(args) {
     const [scope, action] = args;
     const config = readMutableGatewayConfig();
@@ -7992,7 +8423,16 @@ function runOAuthCommand(args) {
             const clientId = args[2];
             if (!clientId)
                 throw new Error("Usage: llm-cli-gateway oauth client add <client-id> --redirect-uri <uri> [--print-once]");
+            validateCliClientId(clientId);
             const redirectUri = requireArg(args, "--redirect-uri");
+            validateCliRedirectUri(redirectUri);
+            if (clients.some(candidate => candidate.client_id === clientId)) {
+                throw new Error(`OAuth client "${clientId}" already exists. Use \`llm-cli-gateway oauth client rotate ${clientId} --print-once\` to issue a new secret, or revoke it first.`);
+            }
+            const warnings = [];
+            if (redirectLooksLocalhost(redirectUri) && publicUrlIsRemote()) {
+                warnings.push("The redirect URI is localhost but a public URL is configured; remote connectors usually need the provider's public callback URL.");
+            }
             const secret = generateSecret();
             clients.push({
                 client_id: clientId,
@@ -8001,18 +8441,26 @@ function runOAuthCommand(args) {
                 scopes: ["mcp"],
             });
             writeMutableGatewayConfig(config);
+            const printOnce = args.includes("--print-once");
+            const urls = cliConnectorUrls();
             printJsonLine({
                 ok: true,
                 client_id: clientId,
-                ...(args.includes("--print-once") ? { client_secret: secret } : {}),
-                oauth: {
-                    issuer: localBaseUrlForPrint(),
-                    authorization_url: `${localBaseUrlForPrint()}/oauth/authorize`,
-                    token_url: `${localBaseUrlForPrint()}/oauth/token`,
+                redirect_uri: redirectUri,
+                ...(printOnce ? { client_secret: secret, client_secret_copy_once: true } : {}),
+                connector: {
+                    mcp_url: urls.mcpUrl,
+                    auth_mode: "oauth",
+                    authorization_url: urls.authorizationUrl,
+                    token_url: urls.tokenUrl,
+                    client_id: clientId,
                 },
-                note: args.includes("--print-once")
-                    ? "client_secret is shown once; it is stored only as a hash."
-                    : "client secret generated and stored only as a hash; rerun rotate --print-once if needed.",
+                ...(warnings.length ? { warnings } : {}),
+                note: printOnce
+                    ? "client_secret is shown once and stored only as a hash. Copy it into the connector UI now; it cannot be recovered later. " +
+                        OAUTH_RESTART_NOTE
+                    : "client secret generated and stored only as a hash. Re-run with --print-once (or `oauth client rotate --print-once`) to reveal a secret. " +
+                        OAUTH_RESTART_NOTE,
             });
             return;
         }
@@ -8022,6 +8470,7 @@ function runOAuthCommand(args) {
                 clients: clients.map(client => ({
                     client_id: client.client_id,
                     redirect_uris: client.allowed_redirect_uris ?? [],
+                    scopes: client.scopes ?? ["mcp"],
                     secret_configured: Boolean(client.client_secret_hash),
                 })),
             });
@@ -8035,11 +8484,21 @@ function runOAuthCommand(args) {
             const secret = generateSecret();
             client.client_secret_hash = hashSecret(secret);
             writeMutableGatewayConfig(config);
+            const printOnce = args.includes("--print-once");
             printJsonLine({
                 ok: true,
                 client_id: clientId,
-                ...(args.includes("--print-once") ? { client_secret: secret } : {}),
-                note: "Future OAuth exchanges use the rotated secret; already-issued opaque access tokens expire by token TTL or server restart.",
+                ...(printOnce ? { client_secret: secret, client_secret_copy_once: true } : {}),
+                client: {
+                    client_id: client.client_id,
+                    redirect_uris: client.allowed_redirect_uris ?? [],
+                    secret_configured: true,
+                },
+                note: (printOnce
+                    ? "New client_secret is shown once; copy it into the connector UI now. "
+                    : "New secret generated and stored only as a hash; re-run with --print-once to reveal it. ") +
+                    "Future OAuth exchanges use the rotated secret; already-issued opaque access tokens expire by token TTL or server restart. " +
+                    OAUTH_RESTART_NOTE,
             });
             return;
         }
@@ -8050,7 +8509,8 @@ function runOAuthCommand(args) {
             printJsonLine({
                 ok: true,
                 client_id: clientId,
-                note: "Future OAuth exchanges are revoked; already-issued opaque access tokens expire by token TTL or server restart.",
+                note: "Future OAuth exchanges are revoked; already-issued opaque access tokens expire by token TTL or server restart. " +
+                    OAUTH_RESTART_NOTE,
             });
             return;
         }
@@ -8068,10 +8528,13 @@ function runOAuthCommand(args) {
             printJsonLine({
                 ok: true,
                 shared_secret_enabled: true,
-                ...(args.includes("--print-once") ? { shared_secret: secret } : {}),
-                note: args.includes("--print-once")
-                    ? "shared_secret is shown once; it is stored only as a hash."
-                    : "shared secret generated and stored only as a hash.",
+                ...(args.includes("--print-once")
+                    ? { shared_secret: secret, shared_secret_copy_once: true }
+                    : {}),
+                note: (args.includes("--print-once")
+                    ? "shared_secret is shown once; it is stored only as a hash. "
+                    : "shared secret generated and stored only as a hash; re-run with --print-once to reveal it. ") +
+                    OAUTH_RESTART_NOTE,
             });
             return;
         }
@@ -8086,6 +8549,19 @@ function runOAuthCommand(args) {
     }
     throw new Error("Usage: llm-cli-gateway oauth client|shared-secret ...");
 }
+function runConnectorCommand(args) {
+    const [action] = args;
+    if (action !== "setup") {
+        throw new Error("Usage: llm-cli-gateway connector setup [--client-id <id>] [--include-legacy-no-auth]");
+    }
+    const options = {
+        clientId: argValue(args, "--client-id"),
+        includeLegacyNoAuth: args.includes("--include-legacy-no-auth"),
+    };
+    const packet = gatherConnectorSetupPacket(options);
+    process.stderr.write(renderConnectorSetupSummary(packet) + "\n");
+    printJsonLine(packet);
+}
 function runWorkspaceCommand(args) {
     const [action] = args;
     if (action === "list") {
@@ -8148,8 +8624,16 @@ async function main() {
             "Usage:",
             "  llm-cli-gateway [doctor --json|contracts --json|--transport=http|--version]",
             "  llm-cli-gateway oauth client add <id> --redirect-uri <uri> [--print-once]",
+            "  llm-cli-gateway connector setup [--client-id <id>] [--include-legacy-no-auth]",
             "  llm-cli-gateway workspace list|add|create",
             "",
+            "Remote connector (recommended OAuth path):",
+            "  1. Set LLM_GATEWAY_PUBLIC_URL to a public https URL (tunnel/reverse proxy).",
+            "  2. oauth client add <id> --redirect-uri <connector-callback> --print-once",
+            "  3. workspace add <alias> <absolute-repo-path> --default",
+            "  4. connector setup      # copy-safe fields to paste into the connector UI",
+            "  Inspect readiness first: doctor --json  ->  remote_http_oauth.stage",
+            "",
             "Doctor:",
             "  doctor --json                     # environment, providers, declared contracts",
             "  doctor --json --probe-upstream    # + expensive installed --help probe for drift",
@@ -8175,6 +8659,10 @@ async function main() {
         runOAuthCommand(args.slice(1));
         return;
     }
+    if (args[0] === "connector") {
+        runConnectorCommand(args.slice(1));
+        return;
+    }
     if (args[0] === "workspace") {
         runWorkspaceCommand(args.slice(1));
         return;
@@ -8207,6 +8695,7 @@ async function main() {
         "stdio";
     logger.info(`Starting llm-cli-gateway MCP server with ${transportMode} transport`);
     await initializeSessionManager();
+    void warmProviderCapabilities({ logger }).catch(() => undefined);
     const serverDeps = {
         sessionManager,
         resourceProvider,