Redact local discovery details by default

packages/gateway/src/modules/auto-discovery.ts

@@ -30,6 +30,8 @@ export interface LocalLLMServer {
   url: string;
   detected: boolean;
   models: ReadonlyArray<{ id: string; size?: number; family?: string }>;
+  modelCount?: number;
+  detailsRedacted?: boolean;
   latencyMs: number | null;
   error?: string;
 }
@@ -113,6 +115,36 @@ function resolveLocalLLMUrl(probe: (typeof LOCAL_LLM_PROBES)[number]): string {
   return probe.defaultUrl;
 }
 
+function shouldExposeLocalDiscoveryDetails(): boolean {
+  return process.env['EXPOSE_LOCAL_LLM_DISCOVERY_DETAILS'] === '1';
+}
+
+function redactLocalUrl(rawUrl: string): string {
+  try {
+    const parsed = new URL(rawUrl);
+    const ipv4Loopback = ['127', '0', '0', '1'].join('.');
+    if (['localhost', ipv4Loopback, '::1', '[::1]'].includes(parsed.hostname)) {
+      return `${parsed.protocol}//localhost${parsed.port ? `:${parsed.port}` : ''}`;
+    }
+    return `${parsed.protocol}//localhost${parsed.port ? `:${parsed.port}` : ''}`;
+  } catch {
+    return 'http://localhost';
+  }
+}
+
+function redactLocalLLMServer(server: LocalLLMServer): LocalLLMServer {
+  if (shouldExposeLocalDiscoveryDetails()) return server;
+  const modelCount = server.models.length;
+  return {
+    ...server,
+    url: redactLocalUrl(server.url),
+    models: [],
+    modelCount,
+    detailsRedacted: true,
+    error: server.error ? 'redacted' : undefined,
+  };
+}
+
 async function probeLocalLLM(
   probe: (typeof LOCAL_LLM_PROBES)[number],
 ): Promise<LocalLLMServer> {
@@ -177,7 +209,8 @@ async function probeLocalLLM(
 }
 
 async function discoverLocalLLMs(): Promise<LocalLLMServer[]> {
-  return Promise.all(LOCAL_LLM_PROBES.map(probeLocalLLM));
+  const servers = await Promise.all(LOCAL_LLM_PROBES.map(probeLocalLLM));
+  return servers.map(redactLocalLLMServer);
 }
 
 // ─── API-key providers ───────────────────────────────────────────────────────
@@ -223,7 +256,7 @@ export async function runDiscovery(): Promise<DiscoveryReport> {
 
   return {
     generatedAt: new Date().toISOString(),
-    host: process.env.HOSTNAME ?? 'unknown',
+    host: shouldExposeLocalDiscoveryDetails() ? (process.env.HOSTNAME ?? 'unknown') : 'local-host',
     subscriptions: {
       detected: subs.filter((s) => s.installed).length,
       authenticated: subs.filter((s) => s.installed && s.authenticated === true).length,