llm-cli-gateway 2.15.0 → 2.17.0

package/dist/resources.js

@@ -4,6 +4,9 @@ import { getRequestContext, principalCanAccess, resolveOwnerPrincipal } from "./
 import { getAvailableCliInfo } from "./model-registry.js";
 import { computeGlobalCacheStats, computePrefixCacheStats, computeSessionCacheStats, computeTtlRemaining, } from "./cache-stats.js";
 import { enabledApiProviders, } from "./config.js";
+import { computeLcrPriorsFromDb } from "./lcr-priors.js";
+import { telemetryTierFor } from "./lcr-telemetry.js";
+import { PRICING_AS_OF, API_CATALOG_AS_OF } from "./pricing.js";
 import { apiContinuityForKind } from "./api-provider.js";
 import { apiProviderCatalogEntry } from "./api-request.js";
 import { buildProviderSubcommandsCompactCatalog, getCliSubcommandContract, serializeCliSubcommandContract, } from "./upstream-contracts.js";
@@ -20,7 +23,8 @@ export class ResourceProvider {
     providers;
     capabilityPeek;
     acpConfig;
-    constructor(sessionManager, performanceMetrics, flightRecorder = { queryRequests: () => [] }, cacheAwareness = null, providers = null, capabilityPeek = peekProviderCapabilitySet, acpConfig = null) {
+    leastCost;
+    constructor(sessionManager, performanceMetrics, flightRecorder = { queryRequests: () => [] }, cacheAwareness = null, providers = null, capabilityPeek = peekProviderCapabilitySet, acpConfig = null, leastCost = undefined) {
         this.sessionManager = sessionManager;
         this.performanceMetrics = performanceMetrics;
         this.flightRecorder = flightRecorder;
@@ -28,6 +32,10 @@ export class ResourceProvider {
         this.providers = providers;
         this.capabilityPeek = capabilityPeek;
         this.acpConfig = acpConfig;
+        this.leastCost = leastCost;
+    }
+    routingResourcesEnabled() {
+        return this.leastCost?.enabled === true;
     }
     getFlightRecorderQuery() {
         return this.flightRecorder;
@@ -172,8 +180,79 @@ export class ResourceProvider {
                     priority: 0.7,
                 },
             })),
+            ...(this.routingResourcesEnabled()
+                ? [
+                    {
+                        uri: "routing://decisions",
+                        name: "Routing Decisions",
+                        title: "Least-Cost Routing Decisions",
+                        description: "Recent redacted least-cost routing decisions (provider/model/tier/est cost/confidence)",
+                        mimeType: "application/json",
+                        annotations: {
+                            audience: ["user", "assistant"],
+                            priority: 0.7,
+                        },
+                    },
+                    {
+                        uri: "routing://priors",
+                        name: "Routing Priors",
+                        title: "Least-Cost Routing Priors",
+                        description: "Learned output-token priors + input-token calibration (k, samples, quality) + price asOf",
+                        mimeType: "application/json",
+                        annotations: {
+                            audience: ["user", "assistant"],
+                            priority: 0.7,
+                        },
+                    },
+                ]
+                : []),
         ];
     }
+    readRoutingDecisions() {
+        const rows = this.flightRecorder.queryRequests(`SELECT r.cli, r.model, r.datetime_utc, r.cost_basis,
+              m.route_est_cost_usd, m.route_est_confidence, m.route_reason,
+              m.route_considered, m.route_reroutes
+       FROM requests r
+       LEFT JOIN gateway_metadata m ON m.request_id = r.id
+       WHERE m.routed = 1
+       ORDER BY r.datetime_utc DESC
+       LIMIT 50`);
+        return rows.map(row => ({
+            provider: row.cli,
+            model: row.model,
+            tier: telemetryTierFor(row.cli),
+            estCostUsd: row.route_est_cost_usd ?? null,
+            costBasis: row.cost_basis ?? null,
+            confidence: row.route_est_confidence ?? null,
+            reason: row.route_reason ?? null,
+            considered: row.route_considered ?? null,
+            reroutes: row.route_reroutes ?? null,
+            at: row.datetime_utc,
+        }));
+    }
+    readRoutingPriors() {
+        const scope = this.leastCost?.priorsScope ?? "off";
+        const priors = computeLcrPriorsFromDb(this.flightRecorder, {
+            priorsScope: scope,
+            ownerPrincipal: resolveOwnerPrincipal(getRequestContext()),
+        });
+        return {
+            priorsScope: scope,
+            priceAsOf: { table: PRICING_AS_OF, apiCatalog: API_CATALOG_AS_OF },
+            outputPriors: Array.from(priors.outputPriors, ([key, prior]) => ({
+                candidate: key,
+                median: prior.median,
+                p90: prior.p90,
+                samples: prior.samples,
+            })),
+            calibration: Array.from(priors.calibration, ([key, bucket]) => ({
+                bucket: key,
+                k: bucket.k,
+                samples: bucket.samples,
+                confidence: bucket.confidence,
+            })),
+        };
+    }
     ownedSessions(sessions) {
         const caller = resolveOwnerPrincipal(getRequestContext());
         const owned = sessions.filter(s => principalCanAccess(s.ownerPrincipal, caller));
@@ -256,6 +335,22 @@ export class ResourceProvider {
                 };
             }
         }
+        if (this.routingResourcesEnabled()) {
+            if (uri === "routing://decisions") {
+                return {
+                    uri,
+                    mimeType: "application/json",
+                    text: JSON.stringify({ decisions: this.readRoutingDecisions() }, null, 2),
+                };
+            }
+            if (uri === "routing://priors") {
+                return {
+                    uri,
+                    mimeType: "application/json",
+                    text: JSON.stringify(this.readRoutingPriors(), null, 2),
+                };
+            }
+        }
         if (uri === "metrics://performance") {
             return {
                 uri,

package/dist/retry.d.ts

@@ -19,6 +19,7 @@ export interface RetryOptions {
     isTransient: (error: any) => boolean;
     onRetry: (error: any, attempt: number, delay: number) => void;
 }
+export declare const isDefaultTransient: (error: any) => boolean;
 export declare function createCircuitBreaker(options?: {
     resetTimeout?: number;
     failureThreshold?: number;

package/dist/retry.js

@@ -4,7 +4,7 @@ export var CircuitBreakerState;
     CircuitBreakerState["OPEN"] = "OPEN";
     CircuitBreakerState["HALF_OPEN"] = "HALF_OPEN";
 })(CircuitBreakerState || (CircuitBreakerState = {}));
-const isDefaultTransient = (error) => {
+export const isDefaultTransient = (error) => {
     if (!error) {
         return false;
     }

package/dist/spawn-env-isolation.d.ts

@@ -0,0 +1,10 @@
+import type { Logger } from "./logger.js";
+export declare function isRedirectionEnvKey(key: string): boolean;
+export declare function isSpawnEnvIsolationEnabled(env?: NodeJS.ProcessEnv): boolean;
+export interface SpawnEnvSanitizeResult {
+    env: NodeJS.ProcessEnv;
+    stripped: string[];
+}
+export declare function sanitizeSpawnEnv(baseEnv: NodeJS.ProcessEnv): SpawnEnvSanitizeResult;
+export declare function resetSpawnEnvIsolationWarning(): void;
+export declare function applySpawnEnvIsolation(finalEnv: NodeJS.ProcessEnv, logger?: Logger, env?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;

package/dist/spawn-env-isolation.js

@@ -0,0 +1,55 @@
+import { logWarn } from "./logger.js";
+const REDIRECTION_SUFFIXES = [
+    /_BASE_URL$/,
+    /_API_URL$/,
+    /_API_BASE$/,
+    /_ENDPOINT$/,
+    /_ENDPOINT_URL$/,
+    /_SERVER_URL$/,
+];
+const REDIRECTION_EXACT = new Set([
+    "ANTHROPIC_UNIX_SOCKET",
+    "GROK_LEADER_SOCKET",
+]);
+export function isRedirectionEnvKey(key) {
+    const upper = key.toUpperCase();
+    if (upper === "NO_PROXY")
+        return false;
+    if (upper.endsWith("_PROXY"))
+        return true;
+    if (REDIRECTION_EXACT.has(upper))
+        return true;
+    return REDIRECTION_SUFFIXES.some(re => re.test(upper));
+}
+export function isSpawnEnvIsolationEnabled(env = process.env) {
+    const raw = (env.LLM_GATEWAY_ISOLATE_SPAWN_ENV ?? "").trim().toLowerCase();
+    return raw === "1" || raw === "true" || raw === "on" || raw === "yes";
+}
+export function sanitizeSpawnEnv(baseEnv) {
+    const env = {};
+    const stripped = [];
+    for (const key of Object.keys(baseEnv)) {
+        if (isRedirectionEnvKey(key)) {
+            stripped.push(key);
+            continue;
+        }
+        env[key] = baseEnv[key];
+    }
+    return { env, stripped };
+}
+let warnedOnce = false;
+export function resetSpawnEnvIsolationWarning() {
+    warnedOnce = false;
+}
+export function applySpawnEnvIsolation(finalEnv, logger, env = process.env) {
+    if (!isSpawnEnvIsolationEnabled(env))
+        return finalEnv;
+    const { env: sanitized, stripped } = sanitizeSpawnEnv(finalEnv);
+    if (stripped.length > 0 && logger && !warnedOnce) {
+        warnedOnce = true;
+        logWarn(logger, `spawn-env isolation: withheld ${stripped.length} endpoint/proxy redirection variable(s) ` +
+            `from provider child processes (${stripped.join(", ")}). ` +
+            `Unset LLM_GATEWAY_ISOLATE_SPAWN_ENV to disable.`);
+    }
+    return sanitized;
+}

package/dist/token-estimator.d.ts

@@ -0,0 +1,6 @@
+export type ContentType = "prose" | "code" | "cjk";
+export declare function classifyContent(text: string): ContentType;
+export declare function estimateInputTokens(text: string, opts?: {
+    family?: string;
+    calibrationK?: number;
+}): number;

package/dist/token-estimator.js

@@ -0,0 +1,59 @@
+const CJK_RE = /[\u3000-\u303f\u3040-\u309f\u30a0-\u30ff\u3400-\u4dbf\u4e00-\u9fff\uf900-\ufaff\uff00-\uffef\uac00-\ud7af]/g;
+const CODE_SYMBOL_RE = /[{}[\]()<>;=+\-*/\\|&%$#@`~]/g;
+const CODE_KEYWORD_RE = /\b(function|const|let|var|return|import|export|class|def|public|private|static|void|for|while|switch|case)\b/;
+const DIVISOR_BY_TYPE = new Map([
+    ["prose", 4],
+    ["code", 3],
+    ["cjk", 1.5],
+]);
+const FAMILY_MULTIPLIERS = new Map([
+    ["openai", 1.0],
+    ["o200k", 1.0],
+    ["cl100k", 1.02],
+    ["claude", 1.08],
+    ["gemini", 0.98],
+    ["sentencepiece", 0.98],
+    ["grok", 1.0],
+    ["mistral", 1.05],
+]);
+export function classifyContent(text) {
+    if (!text)
+        return "prose";
+    const nonSpace = text.replace(/\s+/g, "").length;
+    if (nonSpace === 0)
+        return "prose";
+    const cjkMatches = text.match(CJK_RE);
+    const cjkCount = cjkMatches ? cjkMatches.length : 0;
+    if (cjkCount / nonSpace >= 0.2)
+        return "cjk";
+    const trimmed = text.trim();
+    const looksJson = /^[[{]/.test(trimmed) && /[}\]]/.test(trimmed) && /[:,]/.test(trimmed);
+    const symbolMatches = trimmed.match(CODE_SYMBOL_RE);
+    const symbolCount = symbolMatches ? symbolMatches.length : 0;
+    const symbolRatio = symbolCount / nonSpace;
+    const hasKeyword = CODE_KEYWORD_RE.test(trimmed);
+    if (looksJson || symbolRatio >= 0.08 || (hasKeyword && symbolRatio >= 0.03)) {
+        return "code";
+    }
+    return "prose";
+}
+function familyMultiplier(family) {
+    if (!family)
+        return 1;
+    const f = family.toLowerCase();
+    for (const [key, multiplier] of FAMILY_MULTIPLIERS) {
+        if (f === key || f.includes(key))
+            return multiplier;
+    }
+    return 1;
+}
+export function estimateInputTokens(text, opts) {
+    if (!text)
+        return 0;
+    const type = classifyContent(text);
+    const divisor = DIVISOR_BY_TYPE.get(type) ?? 4;
+    const base = text.length / divisor;
+    const familyMult = familyMultiplier(opts?.family);
+    const k = opts?.calibrationK ?? 1;
+    return Math.ceil(base * familyMult * k);
+}

package/dist/upstream-contracts.js

@@ -1,6 +1,6 @@
 import { spawnSync } from "node:child_process";
 import { createHash } from "node:crypto";
-import { getProviderDefinition } from "./provider-definitions.js";
+import { getProviderDefinition, PROVIDER_TARGET_VERSIONS, } from "./provider-definitions.js";
 import { envWithExtendedPath, getExtendedPath, resolveCommandForSpawn } from "./executor.js";
 export const ACP_ENTRYPOINT_CONTRACTS = {
     mistral: {
@@ -9,7 +9,7 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "native",
         executable: "vibe-acp",
         entrypointArgs: [],
-        targetVersion: "vibe 2.18.3",
+        targetVersion: PROVIDER_TARGET_VERSIONS.mistral,
         probeArgs: [["--version"], ["--help"]],
         evidence: "Native ACP executable vibe-acp; manual initialize + session/new smoke passed. First runtime pilot.",
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.mistral",
@@ -20,9 +20,9 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "native",
         executable: "grok",
         entrypointArgs: ["agent", "stdio"],
-        targetVersion: "grok 0.2.77 (44e77bec3a)",
+        targetVersion: PROVIDER_TARGET_VERSIONS.grok,
         probeArgs: [["agent", "stdio", "--help"]],
-        evidence: "Native ACP via `grok agent stdio`; initialize + session/new smoke passed with isolated leader socket. Second runtime pilot. Entrypoint re-probed clean at 0.2.77.",
+        evidence: `Native ACP via \`grok agent stdio\`; initialize + session/new smoke passed with isolated leader socket. Second runtime pilot. Entrypoint re-probed clean at ${PROVIDER_TARGET_VERSIONS.grok}.`,
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.grok",
     },
     codex: {
@@ -31,10 +31,10 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "adapter_mediated_deferred",
         executable: "codex",
         entrypointArgs: [],
-        targetVersion: "codex-cli 0.142.4",
+        targetVersion: PROVIDER_TARGET_VERSIONS.codex,
         probeArgs: [],
         adapterCandidates: ["zed-industries/codex-acp", "agentclientprotocol/codex-acp"],
-        evidence: "No native ACP entrypoint at codex-cli 0.142.4. Adapter evidence tracked as documentation only; not native gateway ACP support.",
+        evidence: `No native ACP entrypoint at ${PROVIDER_TARGET_VERSIONS.codex}. Adapter evidence tracked as documentation only; not native gateway ACP support.`,
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.codex",
     },
     claude: {
@@ -43,10 +43,10 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "adapter_mediated_deferred",
         executable: "claude",
         entrypointArgs: [],
-        targetVersion: "claude 2.1.198",
+        targetVersion: PROVIDER_TARGET_VERSIONS.claude,
         probeArgs: [],
         adapterCandidates: ["Claude Agent SDK ACP adapter"],
-        evidence: "No native Claude Code CLI ACP entrypoint at claude 2.1.198. Adapter ownership/permission bridging unresolved; deferred.",
+        evidence: `No native Claude Code CLI ACP entrypoint at ${PROVIDER_TARGET_VERSIONS.claude}. Adapter ownership/permission bridging unresolved; deferred.`,
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.claude",
     },
     gemini: {
@@ -55,9 +55,9 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "absent_watchlist",
         executable: "agy",
         entrypointArgs: [],
-        targetVersion: "agy 1.0.14",
+        targetVersion: PROVIDER_TARGET_VERSIONS.gemini,
         probeArgs: [],
-        evidence: "agy 1.0.14 has no ACP flag or subcommand. Legacy Gemini CLI ACP evidence does not transfer. Watchlist item.",
+        evidence: `${PROVIDER_TARGET_VERSIONS.gemini} has no ACP flag or subcommand. Legacy Gemini CLI ACP evidence does not transfer. Watchlist item.`,
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.gemini",
     },
     devin: {
@@ -66,7 +66,7 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "native",
         executable: "devin",
         entrypointArgs: ["acp"],
-        targetVersion: "devin 2026.8.18 (16737566)",
+        targetVersion: PROVIDER_TARGET_VERSIONS.devin,
         probeArgs: [["--version"]],
         evidence: 'Native ACP entrypoint `devin acp` (stdio JSON-RPC). Slice D1 manual initialize + session/new smoke passed (protocolVersion 1, agent "Affogato", session created). Third native runtime pilot; routing stays config-gated.',
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.devin",
@@ -77,7 +77,7 @@ export const ACP_ENTRYPOINT_CONTRACTS = {
         status: "native",
         executable: "cursor-agent",
         entrypointArgs: ["acp"],
-        targetVersion: "cursor-agent 2026.06.29-2ad2186",
+        targetVersion: PROVIDER_TARGET_VERSIONS.cursor,
         probeArgs: [["acp", "--help"]],
         evidence: "Native hidden ACP entrypoint `cursor-agent acp` (stdio JSON-RPC). `cursor-agent acp --help` was verified locally; manual initialize + session/new smoke passed locally (protocolVersion 1, session created; no agentInfo returned). Runtime routing stays config-gated.",
         docsRef: "docs/plans/first-class-acp-gateway-extension.dag.toml#provider_matrix.cursor",
@@ -326,10 +326,12 @@ export const UPSTREAM_CLI_CONTRACTS = {
             "--system-prompt-file": {
                 arity: "one",
                 description: "Replacement system prompt read from a file path",
+                hiddenFromHelp: true,
             },
             "--append-system-prompt-file": {
                 arity: "one",
                 description: "Appended system prompt read from a file path",
+                hiddenFromHelp: true,
             },
             "--name": { arity: "one", description: "Session name label" },
             "--plugin-dir": {
@@ -494,7 +496,7 @@ export const UPSTREAM_CLI_CONTRACTS = {
             },
             {
                 id: "claude-background-acknowledged-not-emitted",
-                description: "Claude 2.1.198 advertises --bg/--background (background agent), but the gateway acknowledges them without emitting; caller argv is rejected",
+                description: "Claude 2.1.204 advertises --bg/--background (background agent), but the gateway acknowledges them without emitting; caller argv is rejected",
                 args: ["-p", "hello", "--background"],
                 expect: "fail",
             },
@@ -658,8 +660,11 @@ export const UPSTREAM_CLI_CONTRACTS = {
                 "--disable",
                 "--enable",
                 "--include-managed-config",
-                "--permissions-profile",
+                "--permission-profile",
                 "--profile",
+                "--sandbox-state-disable-network",
+                "--sandbox-state-json",
+                "--sandbox-state-readable-root",
             ], { exposure: "not_exposed" }),
             debug: subcommand(["debug"], "Run Codex debugging utilities.", "read_only", ["--config", "--disable", "--enable"], { tier: "diagnostic" }),
             apply: subcommand(["apply"], "Apply a Codex patch to the workspace.", "destructive", ["--config", "--disable", "--enable"], { exposure: "not_exposed" }),
@@ -1028,7 +1033,7 @@ export const UPSTREAM_CLI_CONTRACTS = {
                 description: "Print-mode wait timeout as a Go duration string (e.g. 5m0s)",
             },
         },
-        acknowledgedUpstreamFlags: ["--log-file", "--prompt-interactive"],
+        acknowledgedUpstreamFlags: ["--log-file", "--mode", "--prompt-interactive"],
         env: {},
         conformanceFixtures: [
             {
@@ -1109,6 +1114,7 @@ export const UPSTREAM_CLI_CONTRACTS = {
                 "--leader-socket",
                 "--model",
                 "--no-leader",
+                "--plugin-dir",
                 "--reasoning-effort",
                 "--reauth",
                 "--xai-api-base-url",
@@ -1189,11 +1195,11 @@ export const UPSTREAM_CLI_CONTRACTS = {
                     "--deny",
                     "--disable-web-search",
                     "--disallowed-tools",
-                    "--effort",
                     "--experimental-memory",
                     "--fork-session",
                     "--json-schema",
                     "--max-turns",
+                    "--minimal",
                     "--model",
                     "--no-alt-screen",
                     "--no-memory",
@@ -1233,7 +1239,7 @@ export const UPSTREAM_CLI_CONTRACTS = {
             worktree: subcommand(["worktree"], "Manage Grok worktree sessions.", "writes_local_config", ["--leader-socket"]),
         }, GROK_DEBUG_HELP_FLAGS),
         maxPositionals: 0,
-        acknowledgedUpstreamFlags: [...GROK_DEBUG_HELP_FLAGS, "--session-id"],
+        acknowledgedUpstreamFlags: [...GROK_DEBUG_HELP_FLAGS, "--minimal", "--session-id"],
         mcpTools: ["grok_request", "grok_request_async"],
         mcpParameters: [
             "prompt",
@@ -1675,11 +1681,17 @@ export const UPSTREAM_CLI_CONTRACTS = {
                 description: "Additional writable workspace directory (Phase 4 slice ζ; repeat once per directory)",
             },
         },
-        acknowledgedUpstreamFlags: ["--auto-approve", "--check-upgrade", "--yolo"],
+        acknowledgedUpstreamFlags: [
+            "--auto-approve",
+            "--check-upgrade",
+            "--disabled-tools",
+            "--worktree",
+            "--yolo",
+        ],
         env: {
             VIBE_ACTIVE_MODEL: {
                 arity: "one",
-                pattern: /^[^\s\u0000-\u001f\u007f]+$/,
+                pattern: /^[^\s\p{Cc}]+$/u,
                 description: "Active model selector; Vibe uses env instead of a --model flag",
             },
         },
@@ -1774,25 +1786,39 @@ export const UPSTREAM_CLI_CONTRACTS = {
             },
             {
                 id: "mistral-current-help-surface",
-                description: "Vibe 2.18.3 request-time help surface: --prompt, -v, --version, --setup accepted",
+                description: "Vibe 2.19.1 request-time help surface: --prompt, -v, --version, --setup accepted",
                 args: ["--prompt", "hello", "--agent", "auto-approve", "-v", "--version", "--setup"],
                 env: { VIBE_ACTIVE_MODEL: "mistral-medium-3.5" },
                 expect: "pass",
             },
             {
                 id: "mistral-yolo-shortcut-rejected",
-                description: "Vibe 2.18.3 advertises --yolo as a shortcut, but the gateway keeps using explicit --agent auto-approve",
+                description: "Vibe 2.19.0 advertises --yolo as a shortcut, but the gateway keeps using explicit --agent auto-approve",
                 args: ["-p", "hello", "--yolo"],
                 env: { VIBE_ACTIVE_MODEL: "mistral-medium-3.5" },
                 expect: "fail",
             },
             {
                 id: "mistral-check-upgrade-rejected",
-                description: "Vibe 2.18.3 advertises --check-upgrade, but gateway request validation rejects update-prompt flags",
+                description: "Vibe 2.19.0 advertises --check-upgrade, but gateway request validation rejects update-prompt flags",
                 args: ["--check-upgrade"],
                 env: { VIBE_ACTIVE_MODEL: "mistral-medium-3.5" },
                 expect: "fail",
             },
+            {
+                id: "mistral-worktree-rejected",
+                description: "Vibe 2.19.0 advertises --worktree (native worktree); the gateway uses slice-λ worktree (spawns with cwd) and rejects raw --worktree as caller argv",
+                args: ["-p", "hello", "--worktree", "feature"],
+                env: { VIBE_ACTIVE_MODEL: "mistral-medium-3.5" },
+                expect: "fail",
+            },
+            {
+                id: "mistral-disabled-tools-rejected",
+                description: "Vibe 2.19.1 adds --disabled-tools (denylist counterpart to --enabled-tools); the gateway does not emit it (disallowedTools is accepted but ignored) and rejects raw --disabled-tools as caller argv",
+                args: ["-p", "hello", "--disabled-tools", "shell"],
+                env: { VIBE_ACTIVE_MODEL: "mistral-medium-3.5" },
+                expect: "fail",
+            },
             {
                 id: "mistral-resume-bare",
                 description: "Vibe --resume without session ID is accepted (optional arity)",
@@ -2031,22 +2057,16 @@ export const UPSTREAM_CLI_CONTRACTS = {
         acknowledgedUpstreamFlags: [
             "--api-key",
             "--header",
-            "-H",
-            "-p",
             "--plan",
             "--yolo",
             "--approve-mcps",
             "--plugin-dir",
             "--worktree",
-            "-w",
             "--worktree-base",
             "--skip-worktree-setup",
             "--stream-partial-output",
             "--list-models",
             "--version",
-            "-v",
-            "--help",
-            "-h",
         ],
         env: {
             CURSOR_API_KEY: {

package/dist/validation-receipt.js

@@ -230,7 +230,7 @@ export function eagerMintFromJobId(deps, jobId) {
     const store = deps.validationRunStore;
     if (!store)
         return;
-    let validationId = null;
+    let validationId;
     try {
         validationId = store.getValidationRunIdByJobId(jobId);
     }

package/dist/validation-tools.d.ts

@@ -1,9 +1,15 @@
 import { z } from "zod/v3";
 import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import type { AsyncJobManager } from "./async-job-manager.js";
+import { PerformanceMetrics } from "./metrics.js";
+import { type LeastCostConfig } from "./config.js";
+import type { FlightRecorderQuery } from "./flight-recorder.js";
 import { type ValidationOrchestratorDeps } from "./validation-orchestrator.js";
 export interface ValidationToolDeps extends ValidationOrchestratorDeps {
     asyncJobManager: AsyncJobManager;
+    leastCost?: LeastCostConfig;
+    performanceMetrics?: PerformanceMetrics;
+    flightRecorder?: FlightRecorderQuery;
 }
 export declare function buildValidationSchemas(deps: ValidationToolDeps): {
     providerSchema: z.ZodEnum<[string, ...string[]]>;