llm-cli-gateway 2.15.0 → 2.16.0

package/dist/job-store.d.ts

@@ -10,6 +10,7 @@ export interface JobRecord {
     cli: string;
     argsJson: string;
     outputFormat?: string | null;
+    compressResponse?: boolean | null;
     status: JobStoreStatus;
     exitCode: number | null;
     stdout: string;
@@ -52,6 +53,7 @@ export interface JobStore {
         cli: string;
         args: string[];
         outputFormat?: string;
+        compressResponse?: boolean;
         startedAt: string;
         pid: number | null;
         ownerPrincipal?: string | null;
@@ -173,6 +175,7 @@ export declare class SqliteJobStore implements JobStore, ValidationRunStore {
         cli: string;
         args: string[];
         outputFormat?: string;
+        compressResponse?: boolean;
         startedAt: string;
         pid: number | null;
         ownerPrincipal?: string | null;
@@ -236,6 +239,7 @@ export declare class MemoryJobStore implements JobStore {
         cli: string;
         args: string[];
         outputFormat?: string;
+        compressResponse?: boolean;
         startedAt: string;
         pid: number | null;
         ownerPrincipal?: string | null;

package/dist/job-store.js

@@ -51,6 +51,9 @@ function rowToRecord(row) {
         cli: row.cli,
         argsJson: row.args_json,
         outputFormat: row.output_format ?? null,
+        compressResponse: row.compress_response === null || row.compress_response === undefined
+            ? null
+            : Boolean(row.compress_response),
         status: row.status,
         exitCode: row.exit_code,
         stdout: row.stdout ?? "",
@@ -99,6 +102,13 @@ function ensureJobsLeaseColumns(db) {
         db.exec("ALTER TABLE jobs ADD COLUMN lease_deadline INTEGER");
     }
 }
+function ensureJobsCompressResponseColumn(db) {
+    const cols = db.prepare("PRAGMA table_info(jobs)").all();
+    const names = new Set(cols.map(col => col?.name));
+    if (!names.has("compress_response")) {
+        db.exec("ALTER TABLE jobs ADD COLUMN compress_response INTEGER");
+    }
+}
 export function isValidationRunStore(store) {
     return (typeof store === "object" &&
         store !== null &&
@@ -143,6 +153,7 @@ export class SqliteJobStore {
         cli TEXT NOT NULL,
         args_json TEXT NOT NULL,
         output_format TEXT,
+        compress_response INTEGER,
         status TEXT NOT NULL,
         exit_code INTEGER,
         stdout TEXT,
@@ -216,6 +227,7 @@ export class SqliteJobStore {
         ensureJobsTransportColumns(this.db);
         ensureJobsLeaseColumns(this.db);
         this.db.exec("CREATE INDEX IF NOT EXISTS idx_jobs_owner_status ON jobs(owner_instance, status)");
+        ensureJobsCompressResponseColumn(this.db);
         if (process.platform !== "win32") {
             try {
                 chmodSync(dbPath, 0o600);
@@ -228,10 +240,12 @@ export class SqliteJobStore {
         this.leaseTtlMs = options.leaseTtlMs ?? DEFAULT_INSTANCE_LEASE_TTL_MS;
         this.insertStmt = this.db.prepare(`
       INSERT INTO jobs (id, correlation_id, request_key, cli, args_json, output_format,
+                        compress_response,
                         status, exit_code, stdout, stderr, output_truncated, error,
                         started_at, finished_at, pid, expires_at, owner_principal,
                         transport, http_status, payload_json, owner_instance, lease_deadline)
       VALUES (@id, @correlation_id, @request_key, @cli, @args_json, @output_format,
+              @compress_response,
               'queued', @exit_code, @stdout, @stderr, @output_truncated, @error,
               @started_at, @finished_at, @pid, @expires_at, @owner_principal,
               @transport, @http_status, @payload_json, @owner_instance,
@@ -332,6 +346,7 @@ export class SqliteJobStore {
             cli: input.cli,
             args_json: JSON.stringify(input.args),
             output_format: input.outputFormat ?? null,
+            compress_response: input.compressResponse === undefined ? null : input.compressResponse ? 1 : 0,
             exit_code: null,
             stdout: "",
             stderr: "",
@@ -624,6 +639,7 @@ export class MemoryJobStore {
             cli: input.cli,
             argsJson: JSON.stringify(input.args),
             outputFormat: input.outputFormat ?? null,
+            compressResponse: input.compressResponse ?? null,
             status: "queued",
             exitCode: null,
             stdout: "",

package/dist/provider-definitions.d.ts

@@ -119,6 +119,7 @@ export interface ProviderDefinition {
     readonly upstreamContract: ProviderUpstreamLinkage;
     readonly capabilityScope: CapabilityScope;
 }
+export declare const PROVIDER_TARGET_VERSIONS: Record<CliType, string>;
 export declare const PROVIDER_DEFINITIONS_BY_ID: Readonly<Record<CliType, ProviderDefinition>>;
 export declare function getAllProviderDefinitions(): readonly ProviderDefinition[];
 export declare function getProviderDefinition(id: CliType): ProviderDefinition;

package/dist/provider-definitions.js

@@ -4,6 +4,15 @@ export function adminSurfaceKind(family) {
     return family.kind ?? "cli-subcommand";
 }
 export const DEVIN_ACP_AGENT_TYPES = ["summarizer", "review"];
+export const PROVIDER_TARGET_VERSIONS = {
+    claude: "claude 2.1.206",
+    codex: "codex-cli 0.144.1",
+    gemini: "agy 1.1.0",
+    grok: "grok 0.2.93 (f00f96316d)",
+    mistral: "vibe 2.19.1",
+    devin: "devin 3000.1.27 (0d4bf12e)",
+    cursor: "cursor-agent 2026.07.09-c59fd9a",
+};
 const PROVIDER_DEFINITIONS = {
     claude: {
         id: "claude",
@@ -86,7 +95,7 @@ const PROVIDER_DEFINITIONS = {
             nativeEntrypoint: null,
             entrypoint: null,
             probeArgv: [],
-            evidence: "No native Claude Code ACP subcommand or flag in installed help (claude 2.1.198) or the official CLI reference. Coverage is CLI-first; ACP reporting says no native entrypoint is advertised.",
+            evidence: `No native Claude Code ACP subcommand or flag in installed help (${PROVIDER_TARGET_VERSIONS.claude}) or the official CLI reference. Coverage is CLI-first; ACP reporting says no native entrypoint is advertised.`,
         },
         safetyModes: {
             sandbox: false,
@@ -98,7 +107,10 @@ const PROVIDER_DEFINITIONS = {
         outputFormats: ["text", "json", "stream-json"],
         streamingFormats: ["stream-json"],
         resourcePolicy: { exposesModelsResource: true, exposesSessionsResource: true },
-        upstreamContract: { targetVersion: "Claude Code 2.1.198", helpChecksumRef: "claude--help.txt" },
+        upstreamContract: {
+            targetVersion: PROVIDER_TARGET_VERSIONS.claude,
+            helpChecksumRef: "claude--help.txt",
+        },
         capabilityScope: "full",
     },
     codex: {
@@ -215,7 +227,7 @@ const PROVIDER_DEFINITIONS = {
             nativeEntrypoint: null,
             entrypoint: null,
             probeArgv: [],
-            evidence: "codex-cli 0.142.4 advertises mcp-server and app-server transports, not a native ACP agent entrypoint. Third-party adapters exist but are documentation only and are never treated as native gateway ACP.",
+            evidence: `${PROVIDER_TARGET_VERSIONS.codex} advertises mcp-server and app-server transports, not a native ACP agent entrypoint. Third-party adapters exist but are documentation only and are never treated as native gateway ACP.`,
         },
         safetyModes: {
             sandbox: true,
@@ -233,7 +245,7 @@ const PROVIDER_DEFINITIONS = {
         streamingFormats: ["jsonl"],
         resourcePolicy: { exposesModelsResource: true, exposesSessionsResource: true },
         upstreamContract: {
-            targetVersion: "codex-cli 0.142.4",
+            targetVersion: PROVIDER_TARGET_VERSIONS.codex,
             helpChecksumRef: "codex-exec--help.txt",
         },
         capabilityScope: "full",
@@ -319,7 +331,7 @@ const PROVIDER_DEFINITIONS = {
             nativeEntrypoint: null,
             entrypoint: null,
             probeArgv: [],
-            evidence: "agy 1.0.14 has no ACP flag or subcommand in installed help or the Antigravity CLI docs. Legacy Gemini CLI ACP evidence does not transfer. No native entrypoint advertised.",
+            evidence: `${PROVIDER_TARGET_VERSIONS.gemini} has no ACP flag or subcommand in installed help or the Antigravity CLI docs. Legacy Gemini CLI ACP evidence does not transfer. No native entrypoint advertised.`,
         },
         safetyModes: {
             sandbox: true,
@@ -331,7 +343,10 @@ const PROVIDER_DEFINITIONS = {
         outputFormats: ["text"],
         streamingFormats: [],
         resourcePolicy: { exposesModelsResource: true, exposesSessionsResource: true },
-        upstreamContract: { targetVersion: "agy 1.0.14", helpChecksumRef: "agy--help.txt" },
+        upstreamContract: {
+            targetVersion: PROVIDER_TARGET_VERSIONS.gemini,
+            helpChecksumRef: "agy--help.txt",
+        },
         capabilityScope: "full",
     },
     grok: {
@@ -436,7 +451,7 @@ const PROVIDER_DEFINITIONS = {
         streamingFormats: ["json"],
         resourcePolicy: { exposesModelsResource: true, exposesSessionsResource: true },
         upstreamContract: {
-            targetVersion: "grok 0.2.77 (44e77bec3a)",
+            targetVersion: PROVIDER_TARGET_VERSIONS.grok,
             helpChecksumRef: "grok--help.txt",
         },
         capabilityScope: "full",
@@ -551,7 +566,10 @@ const PROVIDER_DEFINITIONS = {
         outputFormats: ["text", "json"],
         streamingFormats: [],
         resourcePolicy: { exposesModelsResource: true, exposesSessionsResource: true },
-        upstreamContract: { targetVersion: "vibe 2.18.3", helpChecksumRef: "vibe--help.txt" },
+        upstreamContract: {
+            targetVersion: PROVIDER_TARGET_VERSIONS.mistral,
+            helpChecksumRef: "vibe--help.txt",
+        },
         capabilityScope: "full",
     },
     devin: {
@@ -660,7 +678,7 @@ const PROVIDER_DEFINITIONS = {
         streamingFormats: [],
         resourcePolicy: { exposesModelsResource: true, exposesSessionsResource: true },
         upstreamContract: {
-            targetVersion: "devin 2026.8.18 (16737566)",
+            targetVersion: PROVIDER_TARGET_VERSIONS.devin,
             helpChecksumRef: "devin--help.txt",
         },
         capabilityScope: "full",
@@ -734,7 +752,7 @@ const PROVIDER_DEFINITIONS = {
         streamingFormats: ["stream-json"],
         resourcePolicy: { exposesModelsResource: true, exposesSessionsResource: true },
         upstreamContract: {
-            targetVersion: "cursor-agent 2026.06.29-2ad2186",
+            targetVersion: PROVIDER_TARGET_VERSIONS.cursor,
             helpChecksumRef: "cursor-agent--help.txt",
         },
         capabilityScope: "maintain-only",

package/dist/provider-tool-capabilities.js

@@ -4,7 +4,7 @@ import path from "path";
 import { parse as parseToml } from "smol-toml";
 import { CLAUDE_MCP_SERVER_NAMES } from "./claude-mcp-config.js";
 import { getAvailableCliInfo } from "./model-registry.js";
-import { CLI_TYPES, getProviderDefinition } from "./provider-definitions.js";
+import { CLI_TYPES, getProviderDefinition, PROVIDER_TARGET_VERSIONS, } from "./provider-definitions.js";
 import { enabledApiProviders, isXaiProviderEnabled, loadProvidersConfig, } from "./config.js";
 import { apiContinuityForKind } from "./api-provider.js";
 const MAX_SKILLS_PER_DIR = 100;
@@ -50,7 +50,7 @@ export const ACP_CONTRACT = {
         },
         gemini: {
             classification: "absent_watchlist",
-            summary: "Google Antigravity agy 1.0.14 has no ACP surface; watchlist item only.",
+            summary: `Google Antigravity ${PROVIDER_TARGET_VERSIONS.gemini} has no ACP surface; watchlist item only.`,
         },
         grok_api: {
             classification: "absent_watchlist",
@@ -110,7 +110,7 @@ const ACP_RESIDUAL = {
         smokeSupported: false,
         smokeStatus: "unsupported",
         caveats: [
-            "Antigravity agy 1.0.14 has no ACP flag or subcommand.",
+            `Antigravity ${PROVIDER_TARGET_VERSIONS.gemini} has no ACP flag or subcommand.`,
             "Legacy Gemini CLI ACP evidence does not transfer to agy; kept on the upstream drift watchlist.",
         ],
     },

package/dist/request-helpers.js

@@ -99,7 +99,7 @@ export const MISTRAL_BUILTIN_AGENT_MODES = [
     "accept-edits",
     "auto-approve",
 ];
-export const MISTRAL_DEFAULT_AGENT_MODE = "auto-approve";
+export const MISTRAL_DEFAULT_AGENT_MODE = "accept-edits";
 export function prepareMistralRequest(input) {
     const args = ["-p", input.prompt];
     const env = {};

package/dist/spawn-env-isolation.d.ts

@@ -0,0 +1,10 @@
+import type { Logger } from "./logger.js";
+export declare function isRedirectionEnvKey(key: string): boolean;
+export declare function isSpawnEnvIsolationEnabled(env?: NodeJS.ProcessEnv): boolean;
+export interface SpawnEnvSanitizeResult {
+    env: NodeJS.ProcessEnv;
+    stripped: string[];
+}
+export declare function sanitizeSpawnEnv(baseEnv: NodeJS.ProcessEnv): SpawnEnvSanitizeResult;
+export declare function resetSpawnEnvIsolationWarning(): void;
+export declare function applySpawnEnvIsolation(finalEnv: NodeJS.ProcessEnv, logger?: Logger, env?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;

package/dist/spawn-env-isolation.js

@@ -0,0 +1,55 @@
+import { logWarn } from "./logger.js";
+const REDIRECTION_SUFFIXES = [
+    /_BASE_URL$/,
+    /_API_URL$/,
+    /_API_BASE$/,
+    /_ENDPOINT$/,
+    /_ENDPOINT_URL$/,
+    /_SERVER_URL$/,
+];
+const REDIRECTION_EXACT = new Set([
+    "ANTHROPIC_UNIX_SOCKET",
+    "GROK_LEADER_SOCKET",
+]);
+export function isRedirectionEnvKey(key) {
+    const upper = key.toUpperCase();
+    if (upper === "NO_PROXY")
+        return false;
+    if (upper.endsWith("_PROXY"))
+        return true;
+    if (REDIRECTION_EXACT.has(upper))
+        return true;
+    return REDIRECTION_SUFFIXES.some(re => re.test(upper));
+}
+export function isSpawnEnvIsolationEnabled(env = process.env) {
+    const raw = (env.LLM_GATEWAY_ISOLATE_SPAWN_ENV ?? "").trim().toLowerCase();
+    return raw === "1" || raw === "true" || raw === "on" || raw === "yes";
+}
+export function sanitizeSpawnEnv(baseEnv) {
+    const env = {};
+    const stripped = [];
+    for (const key of Object.keys(baseEnv)) {
+        if (isRedirectionEnvKey(key)) {
+            stripped.push(key);
+            continue;
+        }
+        env[key] = baseEnv[key];
+    }
+    return { env, stripped };
+}
+let warnedOnce = false;
+export function resetSpawnEnvIsolationWarning() {
+    warnedOnce = false;
+}
+export function applySpawnEnvIsolation(finalEnv, logger, env = process.env) {
+    if (!isSpawnEnvIsolationEnabled(env))
+        return finalEnv;
+    const { env: sanitized, stripped } = sanitizeSpawnEnv(finalEnv);
+    if (stripped.length > 0 && logger && !warnedOnce) {
+        warnedOnce = true;
+        logWarn(logger, `spawn-env isolation: withheld ${stripped.length} endpoint/proxy redirection variable(s) ` +
+            `from provider child processes (${stripped.join(", ")}). ` +
+            `Unset LLM_GATEWAY_ISOLATE_SPAWN_ENV to disable.`);
+    }
+    return sanitized;
+}

package/dist/upstream-contracts.js

@@ -1,6 +1,6 @@
 import { spawnSync } from "node:child_process";
 import { createHash } from "node:crypto";
-import { getProviderDefinition } from "./provider-definitions.js";
+import { getProviderDefinition, PROVIDER_TARGET_VERSIONS, } from "./provider-definitions.js";
 import { envWithExtendedPath, getExtendedPath, resolveCommandForSpawn } from "./executor.js";
 export const ACP_ENTRYPOINT_CONTRACTS = {
     mistral: {
@@ -9,7 +9,7 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "native",
         executable: "vibe-acp",
         entrypointArgs: [],
-        targetVersion: "vibe 2.18.3",
+        targetVersion: PROVIDER_TARGET_VERSIONS.mistral,
         probeArgs: [["--version"], ["--help"]],
         evidence: "Native ACP executable vibe-acp; manual initialize + session/new smoke passed. First runtime pilot.",
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.mistral",
@@ -20,9 +20,9 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "native",
         executable: "grok",
         entrypointArgs: ["agent", "stdio"],
-        targetVersion: "grok 0.2.77 (44e77bec3a)",
+        targetVersion: PROVIDER_TARGET_VERSIONS.grok,
         probeArgs: [["agent", "stdio", "--help"]],
-        evidence: "Native ACP via `grok agent stdio`; initialize + session/new smoke passed with isolated leader socket. Second runtime pilot. Entrypoint re-probed clean at 0.2.77.",
+        evidence: `Native ACP via \`grok agent stdio\`; initialize + session/new smoke passed with isolated leader socket. Second runtime pilot. Entrypoint re-probed clean at ${PROVIDER_TARGET_VERSIONS.grok}.`,
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.grok",
     },
     codex: {
@@ -31,10 +31,10 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "adapter_mediated_deferred",
         executable: "codex",
         entrypointArgs: [],
-        targetVersion: "codex-cli 0.142.4",
+        targetVersion: PROVIDER_TARGET_VERSIONS.codex,
         probeArgs: [],
         adapterCandidates: ["zed-industries/codex-acp", "agentclientprotocol/codex-acp"],
-        evidence: "No native ACP entrypoint at codex-cli 0.142.4. Adapter evidence tracked as documentation only; not native gateway ACP support.",
+        evidence: `No native ACP entrypoint at ${PROVIDER_TARGET_VERSIONS.codex}. Adapter evidence tracked as documentation only; not native gateway ACP support.`,
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.codex",
     },
     claude: {
@@ -43,10 +43,10 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "adapter_mediated_deferred",
         executable: "claude",
         entrypointArgs: [],
-        targetVersion: "claude 2.1.198",
+        targetVersion: PROVIDER_TARGET_VERSIONS.claude,
         probeArgs: [],
         adapterCandidates: ["Claude Agent SDK ACP adapter"],
-        evidence: "No native Claude Code CLI ACP entrypoint at claude 2.1.198. Adapter ownership/permission bridging unresolved; deferred.",
+        evidence: `No native Claude Code CLI ACP entrypoint at ${PROVIDER_TARGET_VERSIONS.claude}. Adapter ownership/permission bridging unresolved; deferred.`,
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.claude",
     },
     gemini: {
@@ -55,9 +55,9 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "absent_watchlist",
         executable: "agy",
         entrypointArgs: [],
-        targetVersion: "agy 1.0.14",
+        targetVersion: PROVIDER_TARGET_VERSIONS.gemini,
         probeArgs: [],
-        evidence: "agy 1.0.14 has no ACP flag or subcommand. Legacy Gemini CLI ACP evidence does not transfer. Watchlist item.",
+        evidence: `${PROVIDER_TARGET_VERSIONS.gemini} has no ACP flag or subcommand. Legacy Gemini CLI ACP evidence does not transfer. Watchlist item.`,
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.gemini",
     },
     devin: {
@@ -66,7 +66,7 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "native",
         executable: "devin",
         entrypointArgs: ["acp"],
-        targetVersion: "devin 2026.8.18 (16737566)",
+        targetVersion: PROVIDER_TARGET_VERSIONS.devin,
         probeArgs: [["--version"]],
         evidence: 'Native ACP entrypoint `devin acp` (stdio JSON-RPC). Slice D1 manual initialize + session/new smoke passed (protocolVersion 1, agent "Affogato", session created). Third native runtime pilot; routing stays config-gated.',
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.devin",
@@ -77,7 +77,7 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "native",
         executable: "cursor-agent",
         entrypointArgs: ["acp"],
-        targetVersion: "cursor-agent 2026.06.29-2ad2186",
+        targetVersion: PROVIDER_TARGET_VERSIONS.cursor,
         probeArgs: [["acp", "--help"]],
         evidence: "Native hidden ACP entrypoint `cursor-agent acp` (stdio JSON-RPC). `cursor-agent acp --help` was verified locally; manual initialize + session/new smoke passed locally (protocolVersion 1, session created; no agentInfo returned). Runtime routing stays config-gated.",
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.cursor",
@@ -326,10 +326,12 @@ export const UPSTREAM_CLI_CONTRACTS = {
             "--system-prompt-file": {
                 arity: "one",
                 description: "Replacement system prompt read from a file path",
+                hiddenFromHelp: true,
             },
             "--append-system-prompt-file": {
                 arity: "one",
                 description: "Appended system prompt read from a file path",
+                hiddenFromHelp: true,
             },
             "--name": { arity: "one", description: "Session name label" },
             "--plugin-dir": {
@@ -494,7 +496,7 @@ export const UPSTREAM_CLI_CONTRACTS = {
             },
             {
                 id: "claude-background-acknowledged-not-emitted",
-                description: "Claude 2.1.198 advertises --bg/--background (background agent), but the gateway acknowledges them without emitting; caller argv is rejected",
+                description: "Claude 2.1.204 advertises --bg/--background (background agent), but the gateway acknowledges them without emitting; caller argv is rejected",
                 args: ["-p", "hello", "--background"],
                 expect: "fail",
             },
@@ -658,8 +660,11 @@ export const UPSTREAM_CLI_CONTRACTS = {
                 "--disable",
                 "--enable",
                 "--include-managed-config",
-                "--permissions-profile",
+                "--permission-profile",
                 "--profile",
+                "--sandbox-state-disable-network",
+                "--sandbox-state-json",
+                "--sandbox-state-readable-root",
             ], { exposure: "not_exposed" }),
             debug: subcommand(["debug"], "Run Codex debugging utilities.", "read_only", ["--config", "--disable", "--enable"], { tier: "diagnostic" }),
             apply: subcommand(["apply"], "Apply a Codex patch to the workspace.", "destructive", ["--config", "--disable", "--enable"], { exposure: "not_exposed" }),
@@ -1028,7 +1033,7 @@ export const UPSTREAM_CLI_CONTRACTS = {
                 description: "Print-mode wait timeout as a Go duration string (e.g. 5m0s)",
             },
         },
-        acknowledgedUpstreamFlags: ["--log-file", "--prompt-interactive"],
+        acknowledgedUpstreamFlags: ["--log-file", "--mode", "--prompt-interactive"],
         env: {},
         conformanceFixtures: [
             {
@@ -1109,6 +1114,7 @@ export const UPSTREAM_CLI_CONTRACTS = {
                 "--leader-socket",
                 "--model",
                 "--no-leader",
+                "--plugin-dir",
                 "--reasoning-effort",
                 "--reauth",
                 "--xai-api-base-url",
@@ -1189,11 +1195,11 @@ export const UPSTREAM_CLI_CONTRACTS = {
                     "--deny",
                     "--disable-web-search",
                     "--disallowed-tools",
-                    "--effort",
                     "--experimental-memory",
                     "--fork-session",
                     "--json-schema",
                     "--max-turns",
+                    "--minimal",
                     "--model",
                     "--no-alt-screen",
                     "--no-memory",
@@ -1233,7 +1239,7 @@ export const UPSTREAM_CLI_CONTRACTS = {
             worktree: subcommand(["worktree"], "Manage Grok worktree sessions.", "writes_local_config", ["--leader-socket"]),
         }, GROK_DEBUG_HELP_FLAGS),
         maxPositionals: 0,
-        acknowledgedUpstreamFlags: [...GROK_DEBUG_HELP_FLAGS, "--session-id"],
+        acknowledgedUpstreamFlags: [...GROK_DEBUG_HELP_FLAGS, "--minimal", "--session-id"],
         mcpTools: ["grok_request", "grok_request_async"],
         mcpParameters: [
             "prompt",
@@ -1675,7 +1681,13 @@ export const UPSTREAM_CLI_CONTRACTS = {
                 description: "Additional writable workspace directory (Phase 4 slice ζ; repeat once per directory)",
             },
         },
-        acknowledgedUpstreamFlags: ["--auto-approve", "--check-upgrade", "--yolo"],
+        acknowledgedUpstreamFlags: [
+            "--auto-approve",
+            "--check-upgrade",
+            "--disabled-tools",
+            "--worktree",
+            "--yolo",
+        ],
         env: {
             VIBE_ACTIVE_MODEL: {
                 arity: "one",
@@ -1774,25 +1786,39 @@ export const UPSTREAM_CLI_CONTRACTS = {
             },
             {
                 id: "mistral-current-help-surface",
-                description: "Vibe 2.18.3 request-time help surface: --prompt, -v, --version, --setup accepted",
+                description: "Vibe 2.19.1 request-time help surface: --prompt, -v, --version, --setup accepted",
                 args: ["--prompt", "hello", "--agent", "auto-approve", "-v", "--version", "--setup"],
                 env: { VIBE_ACTIVE_MODEL: "mistral-medium-3.5" },
                 expect: "pass",
             },
             {
                 id: "mistral-yolo-shortcut-rejected",
-                description: "Vibe 2.18.3 advertises --yolo as a shortcut, but the gateway keeps using explicit --agent auto-approve",
+                description: "Vibe 2.19.0 advertises --yolo as a shortcut, but the gateway keeps using explicit --agent auto-approve",
                 args: ["-p", "hello", "--yolo"],
                 env: { VIBE_ACTIVE_MODEL: "mistral-medium-3.5" },
                 expect: "fail",
             },
             {
                 id: "mistral-check-upgrade-rejected",
-                description: "Vibe 2.18.3 advertises --check-upgrade, but gateway request validation rejects update-prompt flags",
+                description: "Vibe 2.19.0 advertises --check-upgrade, but gateway request validation rejects update-prompt flags",
                 args: ["--check-upgrade"],
                 env: { VIBE_ACTIVE_MODEL: "mistral-medium-3.5" },
                 expect: "fail",
             },
+            {
+                id: "mistral-worktree-rejected",
+                description: "Vibe 2.19.0 advertises --worktree (native worktree); the gateway uses slice-λ worktree (spawns with cwd) and rejects raw --worktree as caller argv",
+                args: ["-p", "hello", "--worktree", "feature"],
+                env: { VIBE_ACTIVE_MODEL: "mistral-medium-3.5" },
+                expect: "fail",
+            },
+            {
+                id: "mistral-disabled-tools-rejected",
+                description: "Vibe 2.19.1 adds --disabled-tools (denylist counterpart to --enabled-tools); the gateway does not emit it (disallowedTools is accepted but ignored) and rejects raw --disabled-tools as caller argv",
+                args: ["-p", "hello", "--disabled-tools", "shell"],
+                env: { VIBE_ACTIVE_MODEL: "mistral-medium-3.5" },
+                expect: "fail",
+            },
             {
                 id: "mistral-resume-bare",
                 description: "Vibe --resume without session ID is accepted (optional arity)",
@@ -2031,22 +2057,16 @@ export const UPSTREAM_CLI_CONTRACTS = {
         acknowledgedUpstreamFlags: [
             "--api-key",
             "--header",
-            "-H",
-            "-p",
             "--plan",
             "--yolo",
             "--approve-mcps",
             "--plugin-dir",
             "--worktree",
-            "-w",
             "--worktree-base",
             "--skip-worktree-setup",
             "--stream-partial-output",
             "--list-models",
             "--version",
-            "-v",
-            "--help",
-            "-h",
         ],
         env: {
             CURSOR_API_KEY: {

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "llm-cli-gateway",
-  "version": "2.15.0",
+  "version": "2.16.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "llm-cli-gateway",
-      "version": "2.15.0",
+      "version": "2.16.0",
       "license": "MIT",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.29.0",

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "llm-cli-gateway",
-  "version": "2.15.0",
+  "version": "2.16.0",
   "mcpName": "io.github.verivus-oss/llm-cli-gateway",
-  "description": "Local-first MCP gateway for cross-model review across native coding-agent CLIs and API-token LLMs with sessions, durable jobs, and validation receipts.",
+  "description": "Secure local control plane for AI coding agents across supported MCP clients, with workspace-scoped remote access, approval gates, durable jobs, sessions, and audit receipts.",
   "license": "MIT",
   "author": "VerivusAI Labs (https://github.com/verivus-oss)",
   "repository": {
@@ -20,6 +20,7 @@
     "codex",
     "gemini",
     "orchestration",
+    "control-plane",
     "model-context-protocol",
     "ai",
     "cli-gateway"
@@ -84,6 +85,9 @@
     "upstream:contracts": "node scripts/upstream-scan.mjs --contracts-check",
     "upstream:scan": "node scripts/upstream-scan.mjs",
     "provider:surfaces:check": "node scripts/provider-surfaces-check.mjs",
+    "site:generate": "node scripts/generate-site-discovery.mjs",
+    "site:generate:check": "node scripts/generate-site-discovery.mjs --check",
+    "site:validate": "node scripts/validate-site-discovery.mjs",
     "lint": "eslint src/**/*.ts",
     "lint:fix": "eslint src/**/*.ts --fix",
     "format": "prettier --write 'src/**/*.ts'",
@@ -93,7 +97,7 @@
     "search:google:submit:dry-run": "node scripts/submit-google-search-console.mjs --dry-run",
     "search:submit": "node scripts/submit-indexnow.mjs",
     "search:submit:dry-run": "node scripts/submit-indexnow.mjs --dry-run",
-    "check": "npm run build && npm run lint && npm run format:check && npm run provider:surfaces:check && npm test && npm run security:audit",
+    "check": "npm run build && npm run lint && npm run format:check && npm run provider:surfaces:check && npm run site:generate:check && npm run site:validate && npm test && npm run security:audit",
     "release:build": "bash installer/build-release.sh",
     "release:checksums": "cd installer/dist && sha256sum --check SHA256SUMS",
     "release:docker": "docker compose -f docker/personal.compose.yml build"