@panorama-ai/gateway 2.28.50 → 2.30.176

package/dist/local-runtime/shutdown-supervisor.js

@@ -0,0 +1,110 @@
+import { resolveJobSubagentId, } from '../gateway-jobs.js';
+import { requestGatewayActiveWorkShutdown, waitForGatewayActiveWorkToDrain, } from '../gateway-lifecycle.js';
+import { sleep } from '../gateway-run-helpers.js';
+import { cancelSubagentRunOnGatewayShutdown } from '../subagent-shutdown-cancellation.js';
+import { PROCESS_KILL_GRACE_MS, SUBAGENT_CANCEL_KILL_TIMEOUT_MS, } from './runtime-utils.js';
+export function createGatewayShutdownCoordinator(params) {
+    let shutdownInProgress = false;
+    let shutdownPromise = null;
+    const runShutdownStep = async (step, action) => {
+        try {
+            await action();
+        }
+        catch (error) {
+            params.logError('Gateway shutdown step failed', {
+                step,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    };
+    const requestActiveWorkShutdown = (mode, reason) => {
+        requestGatewayActiveWorkShutdown({
+            mode,
+            reason,
+            registries: params.activeWorkRegistries,
+            terminateChild: params.requestChildTermination,
+            subagentGraceMs: SUBAGENT_CANCEL_KILL_TIMEOUT_MS,
+            processGraceMs: PROCESS_KILL_GRACE_MS,
+        });
+    };
+    const waitForActiveJobsToDrain = async () => {
+        await waitForGatewayActiveWorkToDrain({
+            jobController: params.jobController,
+            registries: params.activeWorkRegistries,
+            sleep,
+        });
+    };
+    const cancelSubagentRunOnShutdown = async (subagentId, runId, reason) => {
+        await cancelSubagentRunOnGatewayShutdown({
+            supabase: params.supabase,
+            subagentId,
+            runId,
+            reason,
+            getNextSubagentRunEventSequence: params.getNextSubagentRunEventSequence,
+            insertSubagentRunEvent: params.insertSubagentRunEvent,
+            logError: params.logError,
+        });
+    };
+    const finalizeResidualGatewayJobs = async (reason) => {
+        for (const [jobId, jobRow] of params.jobController.activeClaimedJobEntries()) {
+            if (jobRow.job_type === 'subagent_run') {
+                const subagentId = resolveJobSubagentId(jobRow);
+                const activeRun = subagentId ? params.runtimeState.activeSubagentRuns.get(subagentId) : null;
+                if (subagentId && activeRun) {
+                    await cancelSubagentRunOnShutdown(subagentId, activeRun.runId, reason);
+                }
+                await params.completeJob(params.supabase, jobId, 'cancelled', { message: reason, cancelled: true }, reason);
+                continue;
+            }
+            await params.completeJob(params.supabase, jobId, 'cancelled', { message: reason, cancelled: true }, reason);
+        }
+    };
+    const performShutdown = async (signal, mode = 'drain') => {
+        if (shutdownPromise)
+            return await shutdownPromise;
+        shutdownPromise = (async () => {
+            if (shutdownInProgress)
+                return;
+            shutdownInProgress = true;
+            params.jobController.beginShutdown();
+            params.logInfo('Gateway shutting down', { signal, mode });
+            params.stopHeartbeat();
+            params.stopRestart();
+            await runShutdownStep('sync_operational_heartbeat', params.syncOperationalHeartbeatIfChanged);
+            requestActiveWorkShutdown(mode, `Gateway shutting down (${signal})`);
+            await runShutdownStep('wait_for_active_jobs', waitForActiveJobsToDrain);
+            if (mode === 'terminate') {
+                await runShutdownStep('finalize_residual_gateway_jobs', () => finalizeResidualGatewayJobs(`Gateway shutting down (${signal})`));
+            }
+            params.runtimeState.currentJobIngressState = {
+                pending: false,
+                ready: false,
+            };
+            await runShutdownStep('send_offline_heartbeat', params.sendOfflineHeartbeat);
+            await runShutdownStep('disconnect_job_channel', () => params.jobController.disconnect());
+            await runShutdownStep('remove_pid_file', () => params.removePidFile(params.options));
+            params.runtimeState.currentRuntimeOptions = null;
+        })();
+        return await shutdownPromise;
+    };
+    const shutdown = async (signal) => {
+        try {
+            await performShutdown(signal);
+        }
+        catch (error) {
+            params.logError('Gateway shutdown failed unexpectedly', {
+                signal,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+        finally {
+            params.exitProcess(0);
+        }
+    };
+    return {
+        performShutdown,
+        shutdown,
+        isShutdownInProgress: () => shutdownInProgress,
+    };
+}
+//# sourceMappingURL=shutdown-supervisor.js.map

package/dist/local-runtime/shutdown-supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown-supervisor.js","sourceRoot":"","sources":["../../src/local-runtime/shutdown-supervisor.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,oBAAoB,GAGrB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,gCAAgC,EAChC,+BAA+B,GAIhC,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AAEjD,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAA;AACzF,OAAO,EACL,qBAAqB,EACrB,+BAA+B,GAChC,MAAM,oBAAoB,CAAA;AAS3B,MAAM,UAAU,gCAAgC,CAAC,MA2BhD;IACC,IAAI,kBAAkB,GAAG,KAAK,CAAA;IAC9B,IAAI,eAAe,GAAyB,IAAI,CAAA;IAEhD,MAAM,eAAe,GAAG,KAAK,EAAE,IAAY,EAAE,MAA2B,EAAiB,EAAE;QACzF,IAAI,CAAC;YACH,MAAM,MAAM,EAAE,CAAA;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,QAAQ,CAAC,8BAA8B,EAAE;gBAC9C,IAAI;gBACJ,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CAAA;IAED,MAAM,yBAAyB,GAAG,CAAC,IAAyB,EAAE,MAAc,EAAE,EAAE;QAC9E,gCAAgC,CAAC;YAC/B,IAAI;YACJ,MAAM;YACN,UAAU,EAAE,MAAM,CAAC,oBAAoB;YACvC,cAAc,EAAE,MAAM,CAAC,uBAAuB;YAC9C,eAAe,EAAE,+BAA+B;YAChD,cAAc,EAAE,qBAAqB;SACtC,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,MAAM,wBAAwB,GAAG,KAAK,IAAI,EAAE;QAC1C,MAAM,+BAA+B,CAAC;YACpC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,UAAU,EAAE,MAAM,CAAC,oBAAoB;YACvC,KAAK;SACN,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,MAAM,2BAA2B,GAAG,KAAK,EACvC,UAAkB,EAClB,KAAa,EACb,MAAc,EACd,EAAE;QACF,MAAM,kCAAkC,CAAC;YACvC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU;YACV,KAAK;YACL,MAAM;YACN,+BAA+B,EAAE,MAAM,CAAC,+BAA+B;YACvE,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;YACrD,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,MAAM,2BAA2B,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QAC3D,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,uBAAuB,EAAE,EAAE,CAAC;YAC7E,IAAK,MAAwB,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gBAC1D,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAA;gBAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;gBAC5F,IAAI,UAAU,IAAI,SAAS,EAAE,CAAC;oBAC5B,MAAM,2BAA2B,CAAC,UAAU,EAAE,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;gBACxE,CAAC;gBACD,MAAM,MAAM,CAAC,WAAW,CACtB,MAAM,CAAC,QAAQ,EACf,KAAK,EACL,WAAW,EACX,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EACpC,MAAM,CACP,CAAA;gBACD,SAAQ;YACV,CAAC;YAED,MAAM,MAAM,CAAC,WAAW,CACtB,MAAM,CAAC,QAAQ,EACf,KAAK,EACL,WAAW,EACX,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EACpC,MAAM,CACP,CAAA;QACH,CAAC;IACH,CAAC,CAAA;IAED,MAAM,eAAe,GAAG,KAAK,EAAE,MAAc,EAAE,OAA4B,OAAO,EAAE,EAAE;QACpF,IAAI,eAAe;YAAE,OAAO,MAAM,eAAe,CAAA;QACjD,eAAe,GAAG,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,kBAAkB;gBAAE,OAAM;YAC9B,kBAAkB,GAAG,IAAI,CAAA;YACzB,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE,CAAA;YACpC,MAAM,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YACzD,MAAM,CAAC,aAAa,EAAE,CAAA;YACtB,MAAM,CAAC,WAAW,EAAE,CAAA;YACpB,MAAM,eAAe,CAAC,4BAA4B,EAAE,MAAM,CAAC,iCAAiC,CAAC,CAAA;YAC7F,yBAAyB,CAAC,IAAI,EAAE,0BAA0B,MAAM,GAAG,CAAC,CAAA;YACpE,MAAM,eAAe,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAA;YACvE,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBACzB,MAAM,eAAe,CAAC,gCAAgC,EAAE,GAAG,EAAE,CAC3D,2BAA2B,CAAC,0BAA0B,MAAM,GAAG,CAAC,CACjE,CAAA;YACH,CAAC;YACD,MAAM,CAAC,YAAY,CAAC,sBAAsB,GAAG;gBAC3C,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK;aACb,CAAA;YACD,MAAM,eAAe,CAAC,wBAAwB,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAA;YAC5E,MAAM,eAAe,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAA;YACxF,MAAM,eAAe,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;YACpF,MAAM,CAAC,YAAY,CAAC,qBAAqB,GAAG,IAAI,CAAA;QAClD,CAAC,CAAC,EAAE,CAAA;QACJ,OAAO,MAAM,eAAe,CAAA;IAC9B,CAAC,CAAA;IAED,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,MAAM,CAAC,CAAA;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,QAAQ,CAAC,sCAAsC,EAAE;gBACtD,MAAM;gBACN,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAA;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;QACvB,CAAC;IACH,CAAC,CAAA;IAED,OAAO;QACL,eAAe;QACf,QAAQ;QACR,oBAAoB,EAAE,GAAG,EAAE,CAAC,kBAAkB;KAC/C,CAAA;AACH,CAAC"}

package/dist/local-runtime/types.d.ts

@@ -0,0 +1,26 @@
+import type { SupabaseClient } from '@supabase/supabase-js';
+import type { SpawnOptions } from 'node:child_process';
+import type { ParsedArgs } from '../cli-args.js';
+import type { CliDetail } from '../cli-output.js';
+import type { Database } from '../database.types.js';
+export type GatewaySupabaseClient = SupabaseClient<Database>;
+export type GatewayStatus = 'pending' | 'ready' | 'offline' | 'error';
+export type GatewayEventLevel = 'info' | 'warn' | 'error';
+export interface GatewayLocalRuntimeEventPayload {
+    level: GatewayEventLevel;
+    code?: string;
+    message: string;
+    provider?: string;
+    details?: Record<string, unknown>;
+}
+export interface GatewayLocalRuntimeConfigResolution {
+    configDir: string;
+    configPath: string;
+    migratedFrom?: string;
+}
+export type CliReporter = (message: string, options?: ParsedArgs['options'], details?: CliDetail[]) => void;
+export type SpawnProcess = (command: string, args: string[], options: SpawnOptions) => {
+    pid?: number;
+    unref: () => void;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/local-runtime/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/local-runtime/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAEpD,MAAM,MAAM,qBAAqB,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;AAC5D,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAA;AACrE,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;AAEzD,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,iBAAiB,CAAA;IACxB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAED,MAAM,WAAW,mCAAmC;IAClD,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,MAAM,WAAW,GAAG,CACxB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,EAC/B,OAAO,CAAC,EAAE,SAAS,EAAE,KAClB,IAAI,CAAA;AAET,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,KAAK;IACrF,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,IAAI,CAAA;CAClB,CAAA"}

package/dist/local-runtime/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/local-runtime/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/local-runtime/types.ts"],"names":[],"mappings":""}

package/dist/managed-runtime/config.d.ts

@@ -0,0 +1,20 @@
+export type ManagedGatewayRuntimeConfig = {
+    agentId: string;
+    hostId: string;
+    hostAttemptGeneration: number;
+    runtimeId: string;
+    supabaseUrl: string;
+    supabaseAnonKey: string;
+    hostControlUrl: string;
+    hostControlToken: string;
+    toolExecutionUrl: string;
+    toolExecutionToken: string;
+    retryBackoffMs: number;
+    controlTimeoutMs: number;
+    execTimeoutMs: number;
+    outputCaptureBytes: number;
+    heartbeatIntervalMs: number;
+    maxConsecutiveHeartbeatFailures: number;
+};
+export declare function resolveManagedGatewayRuntimeConfig(env?: NodeJS.ProcessEnv): ManagedGatewayRuntimeConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/managed-runtime/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/managed-runtime/config.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,qBAAqB,EAAE,MAAM,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,MAAM,CAAA;IACxB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,aAAa,EAAE,MAAM,CAAA;IACrB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,mBAAmB,EAAE,MAAM,CAAA;IAC3B,+BAA+B,EAAE,MAAM,CAAA;CACxC,CAAA;AAiCD,wBAAgB,kCAAkC,CAChD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,2BAA2B,CAsE7B"}

package/dist/managed-runtime/config.js

@@ -0,0 +1,80 @@
+import { buildLinuxHostControlUrl } from '@panorama/shared/linux-host-control/contract';
+import { buildToolExecutionUrl } from '@panorama/shared/tools/execution-contract';
+import { hostname } from 'node:os';
+import process from 'node:process';
+const DEFAULT_RETRY_BACKOFF_MS = 2_000;
+const DEFAULT_CONTROL_TIMEOUT_MS = 30_000;
+const DEFAULT_EXEC_TIMEOUT_MS = 300_000;
+const DEFAULT_HEARTBEAT_INTERVAL_MS = 15_000;
+const DEFAULT_MAX_CONSECUTIVE_HEARTBEAT_FAILURES = 3;
+const DEFAULT_OUTPUT_CAPTURE_BYTES = 5_000_000;
+function requireEnv(name, env = process.env) {
+    const value = env[name]?.trim();
+    if (!value) {
+        throw new Error(`${name} is required`);
+    }
+    return value;
+}
+function readPositiveInt(name, fallback, env = process.env) {
+    const raw = env[name]?.trim();
+    if (!raw)
+        return fallback;
+    const parsed = Number(raw);
+    if (!Number.isFinite(parsed) || parsed <= 0) {
+        throw new Error(`${name} must be a positive number`);
+    }
+    return Math.floor(parsed);
+}
+function requirePositiveInt(name, env = process.env) {
+    const raw = requireEnv(name, env);
+    const parsed = Number(raw);
+    if (!Number.isFinite(parsed) || parsed <= 0) {
+        throw new Error(`${name} must be a positive number`);
+    }
+    return Math.floor(parsed);
+}
+export function resolveManagedGatewayRuntimeConfig(env = process.env) {
+    const agentId = requireEnv('PANORAMA_AGENT_ID', env);
+    const hostId = requireEnv('PANORAMA_LINUX_HOST_ID', env);
+    const hostAttemptGeneration = requirePositiveInt('PANORAMA_LINUX_HOST_ATTEMPT_GENERATION', env);
+    const supabaseUrl = env.PANORAMA_SUPABASE_URL?.trim() || env.SUPABASE_URL?.trim() || null;
+    const supabaseAnonKey = env.PANORAMA_SUPABASE_ANON_KEY?.trim() ||
+        env.SUPABASE_ANON_KEY?.trim() ||
+        env.SUPABASE_PUBLISHABLE_KEY?.trim() ||
+        null;
+    const hostControlUrl = env.PANORAMA_LINUX_HOST_CONTROL_URL?.trim() ||
+        (supabaseUrl ? buildLinuxHostControlUrl(supabaseUrl) : null);
+    const toolExecutionUrl = env.PANORAMA_TOOL_EXECUTION_URL?.trim() ||
+        (supabaseUrl ? buildToolExecutionUrl(supabaseUrl) : null);
+    if (!hostControlUrl) {
+        throw new Error('PANORAMA_LINUX_HOST_CONTROL_URL is required');
+    }
+    if (!toolExecutionUrl) {
+        throw new Error('PANORAMA_TOOL_EXECUTION_URL is required');
+    }
+    if (!supabaseUrl) {
+        throw new Error('PANORAMA_SUPABASE_URL or SUPABASE_URL is required');
+    }
+    if (!supabaseAnonKey) {
+        throw new Error('PANORAMA_SUPABASE_ANON_KEY, SUPABASE_ANON_KEY, or SUPABASE_PUBLISHABLE_KEY is required');
+    }
+    return {
+        agentId,
+        hostId,
+        hostAttemptGeneration,
+        runtimeId: env.PANORAMA_MANAGED_RUNTIME_ID?.trim() || `${hostname()}:${process.pid}`,
+        supabaseUrl,
+        supabaseAnonKey,
+        hostControlUrl,
+        hostControlToken: requireEnv('PANORAMA_LINUX_HOST_CONTROL_TOKEN', env),
+        toolExecutionUrl,
+        toolExecutionToken: requireEnv('PANORAMA_TOOL_EXECUTION_TOKEN', env),
+        retryBackoffMs: readPositiveInt('PANORAMA_MANAGED_RUNTIME_RETRY_BACKOFF_MS', DEFAULT_RETRY_BACKOFF_MS, env),
+        controlTimeoutMs: readPositiveInt('PANORAMA_MANAGED_RUNTIME_CONTROL_TIMEOUT_MS', DEFAULT_CONTROL_TIMEOUT_MS, env),
+        execTimeoutMs: readPositiveInt('PANORAMA_AGENT_EXEC_TIMEOUT_MS', DEFAULT_EXEC_TIMEOUT_MS, env),
+        outputCaptureBytes: readPositiveInt('PANORAMA_MANAGED_RUNTIME_OUTPUT_CAPTURE_BYTES', DEFAULT_OUTPUT_CAPTURE_BYTES, env),
+        heartbeatIntervalMs: readPositiveInt('PANORAMA_MANAGED_RUNTIME_HEARTBEAT_INTERVAL_MS', DEFAULT_HEARTBEAT_INTERVAL_MS, env),
+        maxConsecutiveHeartbeatFailures: readPositiveInt('PANORAMA_MANAGED_RUNTIME_MAX_CONSECUTIVE_HEARTBEAT_FAILURES', DEFAULT_MAX_CONSECUTIVE_HEARTBEAT_FAILURES, env),
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/managed-runtime/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/managed-runtime/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAA;AACvF,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAA;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAClC,OAAO,OAAO,MAAM,cAAc,CAAA;AAElC,MAAM,wBAAwB,GAAG,KAAK,CAAA;AACtC,MAAM,0BAA0B,GAAG,MAAM,CAAA;AACzC,MAAM,uBAAuB,GAAG,OAAO,CAAA;AACvC,MAAM,6BAA6B,GAAG,MAAM,CAAA;AAC5C,MAAM,0CAA0C,GAAG,CAAC,CAAA;AACpD,MAAM,4BAA4B,GAAG,SAAS,CAAA;AAqB9C,SAAS,UAAU,CAAC,IAAY,EAAE,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAA;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,CAAC,CAAA;IACxC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,QAAgB,EAChB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAA;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAA;IACzB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;AAC3B,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC5E,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,UAAU,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAA;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAA;IACxD,MAAM,qBAAqB,GAAG,kBAAkB,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAA;IAC/F,MAAM,WAAW,GAAG,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,IAAI,CAAA;IACzF,MAAM,eAAe,GACnB,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE;QACtC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE;QAC7B,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE;QACpC,IAAI,CAAA;IACN,MAAM,cAAc,GAClB,GAAG,CAAC,+BAA+B,EAAE,IAAI,EAAE;QAC3C,CAAC,WAAW,CAAC,CAAC,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC9D,MAAM,gBAAgB,GACpB,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE;QACvC,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAE3D,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAChE,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC5D,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,MAAM;QACN,qBAAqB;QACrB,SAAS,EAAE,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,IAAI,GAAG,QAAQ,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE;QACpF,WAAW;QACX,eAAe;QACf,cAAc;QACd,gBAAgB,EAAE,UAAU,CAAC,mCAAmC,EAAE,GAAG,CAAC;QACtE,gBAAgB;QAChB,kBAAkB,EAAE,UAAU,CAAC,+BAA+B,EAAE,GAAG,CAAC;QACpE,cAAc,EAAE,eAAe,CAC7B,2CAA2C,EAC3C,wBAAwB,EACxB,GAAG,CACJ;QACD,gBAAgB,EAAE,eAAe,CAC/B,6CAA6C,EAC7C,0BAA0B,EAC1B,GAAG,CACJ;QACD,aAAa,EAAE,eAAe,CAAC,gCAAgC,EAAE,uBAAuB,EAAE,GAAG,CAAC;QAC9F,kBAAkB,EAAE,eAAe,CACjC,+CAA+C,EAC/C,4BAA4B,EAC5B,GAAG,CACJ;QACD,mBAAmB,EAAE,eAAe,CAClC,gDAAgD,EAChD,6BAA6B,EAC7B,GAAG,CACJ;QACD,+BAA+B,EAAE,eAAe,CAC9C,6DAA6D,EAC7D,0CAA0C,EAC1C,GAAG,CACJ;KACF,CAAA;AACH,CAAC"}

package/dist/managed-runtime/control-client.d.ts

@@ -0,0 +1,66 @@
+import { type LinuxHostSessionExchangeResponse } from '@panorama/shared/linux-host-session/contract';
+import type { LinuxHostClaimedExecution, LinuxHostControlHostEnvelope, LinuxHostControlRequest, LinuxHostControlResponse } from '@panorama/shared/linux-host-control/contract';
+export declare function postLinuxHostControlRequest(params: {
+    controlUrl: string;
+    controlToken: string;
+    body: LinuxHostControlRequest;
+    timeoutMs: number;
+    signal?: AbortSignal;
+}): Promise<LinuxHostControlResponse>;
+export declare function exchangeLinuxHostSession(params: {
+    supabaseUrl: string;
+    supabaseAnonKey: string;
+    hostControlToken: string;
+    timeoutMs: number;
+}): Promise<LinuxHostSessionExchangeResponse>;
+export declare function heartbeatLinuxHost(params: {
+    controlUrl: string;
+    controlToken: string;
+    runtimeId: string;
+    controlTimeoutMs: number;
+}): Promise<LinuxHostControlHostEnvelope>;
+export declare function dispatchLinuxExecution(params: {
+    controlUrl: string;
+    controlToken: string;
+    runtimeId: string;
+    claimToken: string;
+    controlTimeoutMs: number;
+}): Promise<LinuxHostClaimedExecution | null>;
+export declare function startLinuxExecution(params: {
+    controlUrl: string;
+    controlToken: string;
+    runtimeId: string;
+    executionId: string;
+    claimToken: string;
+    controlTimeoutMs: number;
+}): Promise<LinuxHostClaimedExecution | null>;
+export declare function completeLinuxExecution(params: {
+    controlUrl: string;
+    controlToken: string;
+    runtimeId: string;
+    executionId: string;
+    claimToken: string;
+    executionStatus: 'succeeded' | 'failed' | 'timed_out' | 'cancelled';
+    exitCode?: number | null;
+    durationMs?: number | null;
+    stdout?: string | null;
+    stderr?: string | null;
+    error?: string | null;
+    executionMetadata?: Record<string, unknown> | null;
+    stepStatus?: 'completed' | 'failed' | 'skipped' | 'uncertain' | null;
+    stepResult?: Record<string, unknown> | null;
+    stepError?: string | null;
+    stepUncertaintyReason?: string | null;
+    controlSignal?: 'continue' | 'pause' | 'stop' | null;
+    controlTimeoutMs: number;
+}): Promise<LinuxHostControlResponse['completion']>;
+export declare function reconcileExecutionLifecycle(params: {
+    controlUrl: string;
+    controlToken: string;
+    runtimeId: string;
+    controlTimeoutMs: number;
+}): Promise<{
+    recoveredCount: number;
+    requeuedCount: number;
+}>;
+//# sourceMappingURL=control-client.d.ts.map

package/dist/managed-runtime/control-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-client.d.ts","sourceRoot":"","sources":["../../src/managed-runtime/control-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,8CAA8C,CAAA;AACrD,OAAO,KAAK,EACV,yBAAyB,EACzB,4BAA4B,EAC5B,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,8CAA8C,CAAA;AAGrD,wBAAsB,2BAA2B,CAAC,MAAM,EAAE;IACxD,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,uBAAuB,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAmCpC;AAED,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAqC5C;AAED,wBAAsB,kBAAkB,CAAC,MAAM,EAAE;IAC/C,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAYxC;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAa5C;AAED,wBAAsB,mBAAmB,CAAC,MAAM,EAAE;IAChD,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAc5C;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAA;IACnE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAClD,UAAU,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,IAAI,CAAA;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAC3C,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,aAAa,CAAC,EAAE,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,IAAI,CAAA;IACpD,gBAAgB,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,CA0BlD;AAED,wBAAsB,2BAA2B,CAAC,MAAM,EAAE;IACxD,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC,CAe7D"}

package/dist/managed-runtime/control-client.js

@@ -0,0 +1,142 @@
+import { buildLinuxHostSessionExchangeUrl, } from '@panorama/shared/linux-host-session/contract';
+import { withAbortTimeout } from './runtime-utils.js';
+export async function postLinuxHostControlRequest(params) {
+    return await withAbortTimeout(params.timeoutMs, `Linux host control request timed out after ${params.timeoutMs}ms`, async (signal) => {
+        const response = await fetch(params.controlUrl, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${params.controlToken}`,
+                'Content-Type': 'application/json',
+                'X-Request-Source': 'gateway_managed',
+            },
+            body: JSON.stringify(params.body),
+            signal,
+        });
+        let payload;
+        try {
+            payload = await response.json();
+        }
+        catch {
+            payload = null;
+        }
+        if (!response.ok) {
+            const message = payload && typeof payload === 'object' && 'error' in payload
+                ? String(payload.error ?? 'Linux host control request failed')
+                : `Linux host control request failed with status ${response.status}`;
+            throw new Error(message);
+        }
+        return payload;
+    }, params.signal);
+}
+export async function exchangeLinuxHostSession(params) {
+    return await withAbortTimeout(params.timeoutMs, `Linux host session exchange timed out after ${params.timeoutMs}ms`, async (signal) => {
+        const response = await fetch(buildLinuxHostSessionExchangeUrl(params.supabaseUrl), {
+            method: 'POST',
+            headers: {
+                apikey: params.supabaseAnonKey,
+                Authorization: `Bearer ${params.supabaseAnonKey}`,
+                'Content-Type': 'application/json',
+                'X-Request-Source': 'gateway_managed',
+            },
+            body: JSON.stringify({
+                host_control_token: params.hostControlToken,
+            }),
+            signal,
+        });
+        let payload;
+        try {
+            payload = await response.json();
+        }
+        catch {
+            payload = null;
+        }
+        if (!response.ok) {
+            const message = payload && typeof payload === 'object' && 'error' in payload
+                ? String(payload.error ?? 'Linux host session exchange failed')
+                : `Linux host session exchange failed with status ${response.status}`;
+            throw new Error(message);
+        }
+        return payload;
+    });
+}
+export async function heartbeatLinuxHost(params) {
+    const response = await postLinuxHostControlRequest({
+        controlUrl: params.controlUrl,
+        controlToken: params.controlToken,
+        timeoutMs: params.controlTimeoutMs,
+        body: {
+            action: 'heartbeat',
+            runtime_id: params.runtimeId,
+        },
+    });
+    return response.host;
+}
+export async function dispatchLinuxExecution(params) {
+    const response = await postLinuxHostControlRequest({
+        controlUrl: params.controlUrl,
+        controlToken: params.controlToken,
+        timeoutMs: params.controlTimeoutMs,
+        body: {
+            action: 'claim_execution',
+            runtime_id: params.runtimeId,
+            claim_token: params.claimToken,
+        },
+    });
+    return response.execution ?? null;
+}
+export async function startLinuxExecution(params) {
+    const response = await postLinuxHostControlRequest({
+        controlUrl: params.controlUrl,
+        controlToken: params.controlToken,
+        timeoutMs: params.controlTimeoutMs,
+        body: {
+            action: 'start_execution',
+            runtime_id: params.runtimeId,
+            execution_id: params.executionId,
+            claim_token: params.claimToken,
+        },
+    });
+    return response.execution ?? null;
+}
+export async function completeLinuxExecution(params) {
+    const response = await postLinuxHostControlRequest({
+        controlUrl: params.controlUrl,
+        controlToken: params.controlToken,
+        timeoutMs: params.controlTimeoutMs,
+        body: {
+            action: 'complete_execution',
+            runtime_id: params.runtimeId,
+            execution_id: params.executionId,
+            claim_token: params.claimToken,
+            execution_status: params.executionStatus,
+            exit_code: params.exitCode ?? null,
+            duration_ms: params.durationMs ?? null,
+            stdout: params.stdout ?? null,
+            stderr: params.stderr ?? null,
+            error: params.error ?? null,
+            execution_metadata: params.executionMetadata ?? undefined,
+            step_status: params.stepStatus ?? null,
+            step_result: params.stepResult ?? undefined,
+            step_error: params.stepError ?? null,
+            step_uncertainty_reason: params.stepUncertaintyReason ?? null,
+            control_signal: params.controlSignal ?? null,
+        },
+    });
+    return response.completion ?? null;
+}
+export async function reconcileExecutionLifecycle(params) {
+    const response = await postLinuxHostControlRequest({
+        controlUrl: params.controlUrl,
+        controlToken: params.controlToken,
+        timeoutMs: params.controlTimeoutMs,
+        body: {
+            action: 'reconcile_execution_lifecycle',
+            runtime_id: params.runtimeId,
+        },
+    });
+    return {
+        recoveredCount: response.recovered_count ?? 0,
+        requeuedCount: response.requeued_count ?? 0,
+    };
+}
+//# sourceMappingURL=control-client.js.map

package/dist/managed-runtime/control-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-client.js","sourceRoot":"","sources":["../../src/managed-runtime/control-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gCAAgC,GAEjC,MAAM,8CAA8C,CAAA;AAOrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAErD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,MAMjD;IACC,OAAO,MAAM,gBAAgB,CAC3B,MAAM,CAAC,SAAS,EAChB,8CAA8C,MAAM,CAAC,SAAS,IAAI,EAClE,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,CAAC,YAAY,EAAE;gBAC9C,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,iBAAiB;aACtC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;YACjC,MAAM;SACP,CAAC,CAAA;QAEF,IAAI,OAAgB,CAAA;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,IAAI,CAAA;QAChB,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GACX,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,OAAO;gBAC1D,CAAC,CAAC,MAAM,CAAE,OAA8B,CAAC,KAAK,IAAI,mCAAmC,CAAC;gBACtF,CAAC,CAAC,iDAAiD,QAAQ,CAAC,MAAM,EAAE,CAAA;YACxE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;QAC1B,CAAC;QAED,OAAO,OAAmC,CAAA;IAC5C,CAAC,EACD,MAAM,CAAC,MAAM,CACd,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAK9C;IACC,OAAO,MAAM,gBAAgB,CAC3B,MAAM,CAAC,SAAS,EAChB,+CAA+C,MAAM,CAAC,SAAS,IAAI,EACnE,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gCAAgC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE;YACjF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,MAAM,CAAC,eAAe;gBAC9B,aAAa,EAAE,UAAU,MAAM,CAAC,eAAe,EAAE;gBACjD,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,iBAAiB;aACtC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,kBAAkB,EAAE,MAAM,CAAC,gBAAgB;aAC5C,CAAC;YACF,MAAM;SACP,CAAC,CAAA;QAEF,IAAI,OAAgB,CAAA;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,IAAI,CAAA;QAChB,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GACX,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,OAAO;gBAC1D,CAAC,CAAC,MAAM,CAAE,OAA8B,CAAC,KAAK,IAAI,oCAAoC,CAAC;gBACvF,CAAC,CAAC,kDAAkD,QAAQ,CAAC,MAAM,EAAE,CAAA;YACzE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;QAC1B,CAAC;QAED,OAAO,OAA2C,CAAA;IACpD,CAAC,CACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAKxC;IACC,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC;QACjD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,gBAAgB;QAClC,IAAI,EAAE;YACJ,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,MAAM,CAAC,SAAS;SAC7B;KACF,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAC,IAAI,CAAA;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAM5C;IACC,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC;QACjD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,gBAAgB;QAClC,IAAI,EAAE;YACJ,MAAM,EAAE,iBAAiB;YACzB,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,WAAW,EAAE,MAAM,CAAC,UAAU;SAC/B;KACF,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAA;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAOzC;IACC,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC;QACjD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,gBAAgB;QAClC,IAAI,EAAE;YACJ,MAAM,EAAE,iBAAiB;YACzB,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,WAAW,EAAE,MAAM,CAAC,UAAU;SAC/B;KACF,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAA;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAmB5C;IACC,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC;QACjD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,gBAAgB;QAClC,IAAI,EAAE;YACJ,MAAM,EAAE,oBAAoB;YAC5B,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,gBAAgB,EAAE,MAAM,CAAC,eAAe;YACxC,SAAS,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;YAClC,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;YACtC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;YAC7B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;YAC3B,kBAAkB,EAAE,MAAM,CAAC,iBAAiB,IAAI,SAAS;YACzD,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;YACtC,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS;YAC3C,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;YACpC,uBAAuB,EAAE,MAAM,CAAC,qBAAqB,IAAI,IAAI;YAC7D,cAAc,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI;SAC7C;KACF,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAA;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,MAKjD;IACC,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC;QACjD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,gBAAgB;QAClC,IAAI,EAAE;YACJ,MAAM,EAAE,+BAA+B;YACvC,UAAU,EAAE,MAAM,CAAC,SAAS;SAC7B;KACF,CAAC,CAAA;IAEF,OAAO;QACL,cAAc,EAAE,QAAQ,CAAC,eAAe,IAAI,CAAC;QAC7C,aAAa,EAAE,QAAQ,CAAC,cAAc,IAAI,CAAC;KAC5C,CAAA;AACH,CAAC"}

package/dist/managed-runtime/dependencies.d.ts

@@ -0,0 +1,17 @@
+import { completeLinuxExecution, dispatchLinuxExecution, heartbeatLinuxHost, reconcileExecutionLifecycle, startLinuxExecution } from './control-client.js';
+import { createManagedRealtimeClient, startManagedRealtimeWakeLoop } from './realtime.js';
+import { executeCommand } from './shell-execution.js';
+export type ResolvedManagedGatewayRuntimeDependencies = {
+    heartbeatLinuxHost: typeof heartbeatLinuxHost;
+    dispatchLinuxExecution: typeof dispatchLinuxExecution;
+    startLinuxExecution: typeof startLinuxExecution;
+    completeLinuxExecution: typeof completeLinuxExecution;
+    reconcileExecutionLifecycle: typeof reconcileExecutionLifecycle;
+    executeCommand: typeof executeCommand;
+    createRealtimeClient: typeof createManagedRealtimeClient;
+    startRealtimeWakeLoop: typeof startManagedRealtimeWakeLoop;
+    registerSignalHandlers: (onSignal: (signal: NodeJS.Signals) => void) => () => void;
+};
+export type ManagedGatewayRuntimeDependencies = Partial<ResolvedManagedGatewayRuntimeDependencies>;
+export declare function resolveManagedGatewayRuntimeDependencies(dependencies?: ManagedGatewayRuntimeDependencies): ResolvedManagedGatewayRuntimeDependencies;
+//# sourceMappingURL=dependencies.d.ts.map

package/dist/managed-runtime/dependencies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependencies.d.ts","sourceRoot":"","sources":["../../src/managed-runtime/dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,2BAA2B,EAC3B,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AACzF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAErD,MAAM,MAAM,yCAAyC,GAAG;IACtD,kBAAkB,EAAE,OAAO,kBAAkB,CAAA;IAC7C,sBAAsB,EAAE,OAAO,sBAAsB,CAAA;IACrD,mBAAmB,EAAE,OAAO,mBAAmB,CAAA;IAC/C,sBAAsB,EAAE,OAAO,sBAAsB,CAAA;IACrD,2BAA2B,EAAE,OAAO,2BAA2B,CAAA;IAC/D,cAAc,EAAE,OAAO,cAAc,CAAA;IACrC,oBAAoB,EAAE,OAAO,2BAA2B,CAAA;IACxD,qBAAqB,EAAE,OAAO,4BAA4B,CAAA;IAC1D,sBAAsB,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,KAAK,MAAM,IAAI,CAAA;CACnF,CAAA;AAED,MAAM,MAAM,iCAAiC,GAAG,OAAO,CAAC,yCAAyC,CAAC,CAAA;AAqBlG,wBAAgB,wCAAwC,CACtD,YAAY,GAAE,iCAAsC,GACnD,yCAAyC,CAK3C"}

package/dist/managed-runtime/dependencies.js

@@ -0,0 +1,28 @@
+import { completeLinuxExecution, dispatchLinuxExecution, heartbeatLinuxHost, reconcileExecutionLifecycle, startLinuxExecution, } from './control-client.js';
+import { createManagedRealtimeClient, startManagedRealtimeWakeLoop } from './realtime.js';
+import { executeCommand } from './shell-execution.js';
+const defaultManagedGatewayRuntimeDependencies = {
+    heartbeatLinuxHost,
+    dispatchLinuxExecution,
+    startLinuxExecution,
+    completeLinuxExecution,
+    reconcileExecutionLifecycle,
+    executeCommand,
+    createRealtimeClient: createManagedRealtimeClient,
+    startRealtimeWakeLoop: startManagedRealtimeWakeLoop,
+    registerSignalHandlers(onSignal) {
+        process.once('SIGINT', onSignal);
+        process.once('SIGTERM', onSignal);
+        return () => {
+            process.off('SIGINT', onSignal);
+            process.off('SIGTERM', onSignal);
+        };
+    },
+};
+export function resolveManagedGatewayRuntimeDependencies(dependencies = {}) {
+    return {
+        ...defaultManagedGatewayRuntimeDependencies,
+        ...dependencies,
+    };
+}
+//# sourceMappingURL=dependencies.js.map

package/dist/managed-runtime/dependencies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependencies.js","sourceRoot":"","sources":["../../src/managed-runtime/dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AACzF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAgBrD,MAAM,wCAAwC,GAA8C;IAC1F,kBAAkB;IAClB,sBAAsB;IACtB,mBAAmB;IACnB,sBAAsB;IACtB,2BAA2B;IAC3B,cAAc;IACd,oBAAoB,EAAE,2BAA2B;IACjD,qBAAqB,EAAE,4BAA4B;IACnD,sBAAsB,CAAC,QAAQ;QAC7B,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAChC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QACjC,OAAO,GAAG,EAAE;YACV,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;YAC/B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QAClC,CAAC,CAAA;IACH,CAAC;CACF,CAAA;AAED,MAAM,UAAU,wCAAwC,CACtD,eAAkD,EAAE;IAEpD,OAAO;QACL,GAAG,wCAAwC;QAC3C,GAAG,YAAY;KAChB,CAAA;AACH,CAAC"}

package/dist/managed-runtime/execution-dispatcher.d.ts

@@ -0,0 +1,25 @@
+import type { ControlSignal } from '@panorama/shared/control-signals';
+import type { LinuxHostClaimedExecution } from '@panorama/shared/linux-host-control/contract';
+import type { ManagedGatewayRuntimeConfig } from './config.js';
+import type { completeLinuxExecution, startLinuxExecution } from './control-client.js';
+import { executeCommand, type CommandExecutionResult } from './shell-execution.js';
+import { type LinuxExecutionCompletion } from './step-result.js';
+export type ManagedExecutionOutcome = {
+    reconciliationRequired: boolean;
+    wakeReason?: string;
+};
+export interface ExecuteManagedLinuxExecutionDependencies {
+    startLinuxExecution: typeof startLinuxExecution;
+    completeLinuxExecution: typeof completeLinuxExecution;
+    executeCommand: typeof executeCommand;
+}
+export declare function resolveLinuxExecutionCompletion(result: CommandExecutionResult, controlSignal: ControlSignal | null): LinuxExecutionCompletion;
+export declare function executeManagedLinuxExecution(params: {
+    config: ManagedGatewayRuntimeConfig;
+    execution: LinuxHostClaimedExecution;
+    registerCancellation: (cancel: (() => void) | null) => void;
+    onExecutionStarted?: (executionId: string) => void;
+    onExecutionFinished?: () => void;
+    dependencies: ExecuteManagedLinuxExecutionDependencies;
+}): Promise<ManagedExecutionOutcome>;
+//# sourceMappingURL=execution-dispatcher.d.ts.map

package/dist/managed-runtime/execution-dispatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-dispatcher.d.ts","sourceRoot":"","sources":["../../src/managed-runtime/execution-dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAA;AACrE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAA;AAE7F,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAA;AAC9D,OAAO,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACtF,OAAO,EAGL,cAAc,EAEd,KAAK,sBAAsB,EAC5B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAIL,KAAK,wBAAwB,EAC9B,MAAM,kBAAkB,CAAA;AAGzB,MAAM,MAAM,uBAAuB,GAAG;IACpC,sBAAsB,EAAE,OAAO,CAAA;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,MAAM,WAAW,wCAAwC;IACvD,mBAAmB,EAAE,OAAO,mBAAmB,CAAA;IAC/C,sBAAsB,EAAE,OAAO,sBAAsB,CAAA;IACrD,cAAc,EAAE,OAAO,cAAc,CAAA;CACtC;AAED,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,sBAAsB,EAC9B,aAAa,EAAE,aAAa,GAAG,IAAI,GAClC,wBAAwB,CAiC1B;AAED,wBAAsB,4BAA4B,CAAC,MAAM,EAAE;IACzD,MAAM,EAAE,2BAA2B,CAAA;IACnC,SAAS,EAAE,yBAAyB,CAAA;IACpC,oBAAoB,EAAE,CAAC,MAAM,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,KAAK,IAAI,CAAA;IAC3D,kBAAkB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,IAAI,CAAA;IAClD,mBAAmB,CAAC,EAAE,MAAM,IAAI,CAAA;IAChC,YAAY,EAAE,wCAAwC,CAAA;CACvD,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAqInC"}