@panorama-ai/gateway 2.29.14 → 2.30.176

package/dist/gateway-command-runner.js

@@ -0,0 +1,154 @@
+import { spawn } from 'node:child_process';
+import process from 'node:process';
+import { buildGatewayChildProcessEnv } from './child-process-env.js';
+import { resolveGatewayTmpDir } from './runtime-paths.js';
+import { StreamJsonCollector } from './stream-json-collector.js';
+import { requestChildTermination } from './process-control.js';
+import { BoundedOutputCapture } from './process-output-capture.js';
+export const DEFAULT_GATEWAY_COMMAND_TIMEOUT_MS = 30 * 60_000;
+export const DEFAULT_GATEWAY_COMMAND_OUTPUT_BYTES = 5_000_000;
+export const DEFAULT_GATEWAY_STREAM_EVENTS = 2000;
+export const DEFAULT_GATEWAY_STREAM_BUFFER_CHARS = 200_000;
+export const DEFAULT_GATEWAY_COMMAND_TERMINATION_GRACE_MS = 2_000;
+export function buildGatewayCommandEnv(options = {}) {
+    return buildGatewayChildProcessEnv({
+        baseEnv: options.baseEnv ?? process.env,
+        tmpDir: options.tmpDir ?? resolveGatewayTmpDir(),
+        overrides: options.overrides,
+    });
+}
+function resolveCommandTimeoutMs(timeoutMs) {
+    return timeoutMs ?? DEFAULT_GATEWAY_COMMAND_TIMEOUT_MS;
+}
+function requestTimedOutChildTermination(child, options) {
+    const context = options.timeoutContext ?? 'runGatewayCommand';
+    const terminate = options.terminateChild ?? requestChildTermination;
+    terminate(child, {
+        reason: 'process_timeout',
+        graceMs: options.terminationGraceMs ?? DEFAULT_GATEWAY_COMMAND_TERMINATION_GRACE_MS,
+        onError: (phase, error) => options.onTerminationError?.(phase, error, context),
+    });
+}
+export async function runGatewayCommand(command, args, options = {}) {
+    const start = Date.now();
+    const timeoutMs = resolveCommandTimeoutMs(options.timeoutMs);
+    const outputLimitBytes = options.outputLimitBytes ?? DEFAULT_GATEWAY_COMMAND_OUTPUT_BYTES;
+    return await new Promise((resolve) => {
+        const stdoutOutput = new BoundedOutputCapture(outputLimitBytes);
+        const stderrOutput = new BoundedOutputCapture(outputLimitBytes);
+        let timedOut = false;
+        const child = spawn(command, args, {
+            cwd: options.cwd,
+            env: buildGatewayCommandEnv({
+                baseEnv: options.baseEnv,
+                tmpDir: options.tmpDir,
+                overrides: options.env,
+            }),
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        options.onStart?.(child);
+        child.stdout?.on('data', (chunk) => {
+            stdoutOutput.append(chunk);
+        });
+        child.stderr?.on('data', (chunk) => {
+            stderrOutput.append(chunk);
+        });
+        const timer = timeoutMs && Number.isFinite(timeoutMs)
+            ? setTimeout(() => {
+                timedOut = true;
+                requestTimedOutChildTermination(child, options);
+            }, timeoutMs)
+            : null;
+        const finalize = (exitCode, error) => {
+            if (timer)
+                clearTimeout(timer);
+            const durationMs = Date.now() - start;
+            const stdout = stdoutOutput.readText();
+            const stderr = stderrOutput.readText();
+            const ok = !timedOut && exitCode === 0 && !error;
+            resolve({
+                ok,
+                stdout,
+                stderr,
+                exitCode,
+                durationMs,
+                timedOut,
+                stdoutTruncated: stdoutOutput.truncated,
+                stderrTruncated: stderrOutput.truncated,
+                error,
+            });
+        };
+        child.on('error', (error) => {
+            finalize(null, error.message);
+        });
+        child.on('close', (code) => {
+            finalize(code ?? null);
+        });
+    });
+}
+export async function runGatewayStreamingCommand(command, args, options = {}) {
+    const start = Date.now();
+    const timeoutMs = resolveCommandTimeoutMs(options.timeoutMs);
+    const outputLimitBytes = options.outputLimitBytes ?? DEFAULT_GATEWAY_COMMAND_OUTPUT_BYTES;
+    return await new Promise((resolve) => {
+        const stderrOutput = new BoundedOutputCapture(outputLimitBytes);
+        let timedOut = false;
+        const collector = new StreamJsonCollector({
+            maxOutputBytes: outputLimitBytes,
+            maxEvents: options.maxStreamEvents ?? DEFAULT_GATEWAY_STREAM_EVENTS,
+            maxBufferChars: options.maxStreamBufferChars ?? DEFAULT_GATEWAY_STREAM_BUFFER_CHARS,
+        });
+        const child = spawn(command, args, {
+            cwd: options.cwd,
+            env: buildGatewayCommandEnv({
+                baseEnv: options.baseEnv,
+                tmpDir: options.tmpDir,
+                overrides: options.env,
+            }),
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        options.onStart?.(child);
+        child.stdout?.on('data', (chunk) => {
+            collector.append(chunk);
+        });
+        child.stderr?.on('data', (chunk) => {
+            stderrOutput.append(chunk);
+        });
+        const timer = timeoutMs && Number.isFinite(timeoutMs)
+            ? setTimeout(() => {
+                timedOut = true;
+                requestTimedOutChildTermination(child, {
+                    ...options,
+                    timeoutContext: options.timeoutContext ?? 'runGatewayStreamingCommand',
+                });
+            }, timeoutMs)
+            : null;
+        const finalize = (exitCode, error) => {
+            if (timer)
+                clearTimeout(timer);
+            const streamResult = collector.finalize();
+            const durationMs = Date.now() - start;
+            const stderr = stderrOutput.readText();
+            const ok = !timedOut && exitCode === 0 && !error;
+            resolve({
+                ok,
+                stdout: streamResult.stdout,
+                stderr,
+                exitCode,
+                durationMs,
+                timedOut,
+                stdoutTruncated: streamResult.stdoutTruncated || streamResult.eventsTruncated,
+                stderrTruncated: stderrOutput.truncated,
+                events: streamResult.events,
+                error,
+            });
+        };
+        child.on('error', (error) => {
+            finalize(null, error.message);
+        });
+        child.on('close', (code) => {
+            finalize(code ?? null);
+        });
+    });
+}
+//# sourceMappingURL=gateway-command-runner.js.map

package/dist/gateway-command-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-command-runner.js","sourceRoot":"","sources":["../src/gateway-command-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAA;AAC7D,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAA;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,uBAAuB,EAA2B,MAAM,sBAAsB,CAAA;AACvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAGlE,MAAM,CAAC,MAAM,kCAAkC,GAAG,EAAE,GAAG,MAAM,CAAA;AAC7D,MAAM,CAAC,MAAM,oCAAoC,GAAG,SAAS,CAAA;AAC7D,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAA;AACjD,MAAM,CAAC,MAAM,mCAAmC,GAAG,OAAO,CAAA;AAC1D,MAAM,CAAC,MAAM,4CAA4C,GAAG,KAAK,CAAA;AA2CjE,MAAM,UAAU,sBAAsB,CACpC,UAAoC,EAAE;IAEtC,OAAO,2BAA2B,CAAC;QACjC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG;QACvC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,oBAAoB,EAAE;QAChD,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,SAA6B;IAC5D,OAAO,SAAS,IAAI,kCAAkC,CAAA;AACxD,CAAC;AAED,SAAS,+BAA+B,CACtC,KAAmB,EACnB,OAAiC;IAEjC,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,IAAI,mBAAmB,CAAA;IAC7D,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,IAAI,uBAAuB,CAAA;IACnE,SAAS,CAAC,KAAK,EAAE;QACf,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,OAAO,CAAC,kBAAkB,IAAI,4CAA4C;QACnF,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC;KAC/E,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAe,EACf,IAAc,EACd,UAAoC,EAAE;IAEtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACxB,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC5D,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,oCAAoC,CAAA;IAEzF,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACnC,MAAM,YAAY,GAAG,IAAI,oBAAoB,CAAC,gBAAgB,CAAC,CAAA;QAC/D,MAAM,YAAY,GAAG,IAAI,oBAAoB,CAAC,gBAAgB,CAAC,CAAA;QAC/D,IAAI,QAAQ,GAAG,KAAK,CAAA;QAEpB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,sBAAsB,CAAC;gBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO,CAAC,GAAG;aACvB,CAAC;YACF,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAA;QACF,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAA;QAExB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC5B,CAAC,CAAC,CAAA;QAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC5B,CAAC,CAAC,CAAA;QAEF,MAAM,KAAK,GACT,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YACrC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;gBACd,QAAQ,GAAG,IAAI,CAAA;gBACf,+BAA+B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;YACjD,CAAC,EAAE,SAAS,CAAC;YACf,CAAC,CAAC,IAAI,CAAA;QAEV,MAAM,QAAQ,GAAG,CAAC,QAAuB,EAAE,KAAc,EAAE,EAAE;YAC3D,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAA;YACrC,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAA;YACtC,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAA;YACtC,MAAM,EAAE,GAAG,CAAC,QAAQ,IAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,KAAK,CAAA;YAChD,OAAO,CAAC;gBACN,EAAE;gBACF,MAAM;gBACN,MAAM;gBACN,QAAQ;gBACR,UAAU;gBACV,QAAQ;gBACR,eAAe,EAAE,YAAY,CAAC,SAAS;gBACvC,eAAe,EAAE,YAAY,CAAC,SAAS;gBACvC,KAAK;aACN,CAAC,CAAA;QACJ,CAAC,CAAA;QAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;QAC/B,CAAC,CAAC,CAAA;QAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,CAAA;QACxB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAe,EACf,IAAc,EACd,UAA6C,EAAE;IAE/C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACxB,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC5D,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,oCAAoC,CAAA;IAEzF,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACnC,MAAM,YAAY,GAAG,IAAI,oBAAoB,CAAC,gBAAgB,CAAC,CAAA;QAC/D,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC;YACxC,cAAc,EAAE,gBAAgB;YAChC,SAAS,EAAE,OAAO,CAAC,eAAe,IAAI,6BAA6B;YACnE,cAAc,EAAE,OAAO,CAAC,oBAAoB,IAAI,mCAAmC;SACpF,CAAC,CAAA;QAEF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,sBAAsB,CAAC;gBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO,CAAC,GAAG;aACvB,CAAC;YACF,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAA;QACF,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAA;QAExB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC,CAAC,CAAA;QAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC5B,CAAC,CAAC,CAAA;QAEF,MAAM,KAAK,GACT,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YACrC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;gBACd,QAAQ,GAAG,IAAI,CAAA;gBACf,+BAA+B,CAAC,KAAK,EAAE;oBACrC,GAAG,OAAO;oBACV,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,4BAA4B;iBACvE,CAAC,CAAA;YACJ,CAAC,EAAE,SAAS,CAAC;YACf,CAAC,CAAC,IAAI,CAAA;QAEV,MAAM,QAAQ,GAAG,CAAC,QAAuB,EAAE,KAAc,EAAE,EAAE;YAC3D,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YAC9B,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAA;YACzC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAA;YACrC,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAA;YACtC,MAAM,EAAE,GAAG,CAAC,QAAQ,IAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,KAAK,CAAA;YAChD,OAAO,CAAC;gBACN,EAAE;gBACF,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,MAAM;gBACN,QAAQ;gBACR,UAAU;gBACV,QAAQ;gBACR,eAAe,EAAE,YAAY,CAAC,eAAe,IAAI,YAAY,CAAC,eAAe;gBAC7E,eAAe,EAAE,YAAY,CAAC,SAAS;gBACvC,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,KAAK;aACN,CAAC,CAAA;QACJ,CAAC,CAAA;QAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;QAC/B,CAAC,CAAC,CAAA;QAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,CAAA;QACxB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/gateway-control-plane.d.ts

@@ -0,0 +1,44 @@
+import { type GatewayCapabilitiesV1 } from '@panorama/shared/gateway/capabilities';
+import { type SupabaseClient } from '@supabase/supabase-js';
+import type { ParsedArgs } from './cli-args.js';
+import type { Database } from './database.types.js';
+import type { GatewayRuntimeState } from './gateway-runtime-state.js';
+import type { GatewayConfig } from './gateway-state.js';
+type GatewaySupabaseClient = SupabaseClient<Database>;
+type GatewayStatus = 'pending' | 'ready' | 'offline' | 'error';
+export interface GatewayControlPlaneEventPayload {
+    level: 'info' | 'warn' | 'error';
+    code?: string;
+    message: string;
+    provider?: string;
+    details?: Record<string, unknown>;
+}
+export interface GatewayControlState {
+    full_control_enabled: boolean;
+    status: string;
+    last_seen_at: string | null;
+    capabilities: GatewayCapabilitiesV1 | null;
+}
+export interface GatewayControlPlaneDependencies {
+    runtimeState: GatewayRuntimeState<GatewayControlPlaneEventPayload>;
+    loadConfig: (options?: ParsedArgs['options']) => Promise<GatewayConfig>;
+    createSupabaseClient?: (supabaseUrl: string, supabaseAnonKey: string) => GatewaySupabaseClient;
+    maxEventMessageChars?: number;
+    heartbeatStaleMs?: number;
+    now?: () => number;
+    logInfo: (message: string, data?: Record<string, unknown>) => void;
+    logError: (message: string, data?: Record<string, unknown>) => void;
+}
+export interface GatewayControlPlane {
+    createGatewayEventClient: (config: GatewayConfig) => Promise<GatewaySupabaseClient | null>;
+    emitGatewayEvent: (supabase: GatewaySupabaseClient, config: GatewayConfig, payload: GatewayControlPlaneEventPayload) => Promise<void>;
+    queueGatewayEvent: (payload: GatewayControlPlaneEventPayload) => void;
+    flushGatewayEvents: (supabase: GatewaySupabaseClient, config: GatewayConfig) => Promise<void>;
+    sendHeartbeat: (supabase: GatewaySupabaseClient, status: GatewayStatus, capabilities: GatewayCapabilitiesV1, deviceName?: string | null) => Promise<void>;
+    loadGatewayControlState: (supabase: GatewaySupabaseClient, config: GatewayConfig) => Promise<GatewayControlState | null>;
+    isHeartbeatFresh: (lastSeenAt: string | null) => boolean;
+    refreshRuntimeInstallFullControl: (config: GatewayConfig) => Promise<boolean>;
+}
+export declare function createGatewayControlPlane(dependencies: GatewayControlPlaneDependencies): GatewayControlPlane;
+export {};
+//# sourceMappingURL=gateway-control-plane.d.ts.map

package/dist/gateway-control-plane.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-control-plane.d.ts","sourceRoot":"","sources":["../src/gateway-control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,uCAAuC,CAAA;AAC9C,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAE/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAKvD,KAAK,qBAAqB,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;AACrD,KAAK,aAAa,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAA;AAE9D,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;IAChC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,oBAAoB,EAAE,OAAO,CAAA;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,EAAE,qBAAqB,GAAG,IAAI,CAAA;CAC3C;AAED,MAAM,WAAW,+BAA+B;IAC9C,YAAY,EAAE,mBAAmB,CAAC,+BAA+B,CAAC,CAAA;IAClE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,aAAa,CAAC,CAAA;IACvE,oBAAoB,CAAC,EAAE,CACrB,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,KACpB,qBAAqB,CAAA;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IAClE,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;CACpE;AAED,MAAM,WAAW,mBAAmB;IAClC,wBAAwB,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAA;IAC1F,gBAAgB,EAAE,CAChB,QAAQ,EAAE,qBAAqB,EAC/B,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,+BAA+B,KACrC,OAAO,CAAC,IAAI,CAAC,CAAA;IAClB,iBAAiB,EAAE,CAAC,OAAO,EAAE,+BAA+B,KAAK,IAAI,CAAA;IACrE,kBAAkB,EAAE,CAAC,QAAQ,EAAE,qBAAqB,EAAE,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7F,aAAa,EAAE,CACb,QAAQ,EAAE,qBAAqB,EAC/B,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,qBAAqB,EACnC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,KACvB,OAAO,CAAC,IAAI,CAAC,CAAA;IAClB,uBAAuB,EAAE,CACvB,QAAQ,EAAE,qBAAqB,EAC/B,MAAM,EAAE,aAAa,KAClB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAA;IACxC,gBAAgB,EAAE,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAA;IACxD,gCAAgC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAC9E;AAeD,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,+BAA+B,GAC5C,mBAAmB,CAmKrB"}

package/dist/gateway-control-plane.js

@@ -0,0 +1,147 @@
+import { validateGatewayCapabilitiesV1, } from '@panorama/shared/gateway/capabilities';
+import { createClient } from '@supabase/supabase-js';
+import { truncateText } from './cli-output.js';
+const DEFAULT_MAX_GATEWAY_EVENT_MESSAGE_CHARS = 2000;
+const DEFAULT_GATEWAY_HEARTBEAT_STALE_MS = 90_000;
+function createDefaultSupabaseClient(supabaseUrl, supabaseAnonKey) {
+    return createClient(supabaseUrl, supabaseAnonKey, {
+        auth: {
+            persistSession: false,
+            autoRefreshToken: false,
+            detectSessionInUrl: false,
+        },
+    });
+}
+export function createGatewayControlPlane(dependencies) {
+    const createSupabaseClient = dependencies.createSupabaseClient ?? createDefaultSupabaseClient;
+    const maxEventMessageChars = dependencies.maxEventMessageChars ?? DEFAULT_MAX_GATEWAY_EVENT_MESSAGE_CHARS;
+    const heartbeatStaleMs = dependencies.heartbeatStaleMs ?? DEFAULT_GATEWAY_HEARTBEAT_STALE_MS;
+    const now = dependencies.now ?? Date.now;
+    const createGatewayEventClient = async (config) => {
+        if (!config.supabaseUrl || !config.supabaseAnonKey)
+            return null;
+        const supabase = createSupabaseClient(config.supabaseUrl, config.supabaseAnonKey);
+        const { data: sessionData, error: sessionError } = await supabase.auth.setSession({
+            access_token: config.accessToken,
+            refresh_token: config.refreshToken,
+        });
+        if (sessionError || !sessionData?.session) {
+            dependencies.logError('Failed to authenticate gateway event session', {
+                error: sessionError?.message || 'No session returned',
+            });
+            return null;
+        }
+        return supabase;
+    };
+    const emitGatewayEvent = async (supabase, config, payload) => {
+        if (!config.gatewayId || !config.teamId)
+            return;
+        const message = truncateText(payload.message, maxEventMessageChars);
+        const details = payload.details ?? {};
+        const { error } = await supabase.from('gateway_events').insert({
+            gateway_id: config.gatewayId,
+            team_id: config.teamId,
+            provider: payload.provider ?? null,
+            level: payload.level,
+            code: payload.code ?? null,
+            message,
+            details,
+        });
+        if (error) {
+            dependencies.logError('Failed to record gateway event', {
+                error: error.message,
+                code: payload.code ?? null,
+                provider: payload.provider ?? null,
+            });
+        }
+    };
+    const queueGatewayEvent = (payload) => {
+        dependencies.runtimeState.pendingGatewayEvents.push(payload);
+    };
+    const flushGatewayEvents = async (supabase, config) => {
+        if (dependencies.runtimeState.pendingGatewayEvents.length === 0)
+            return;
+        const queued = dependencies.runtimeState.pendingGatewayEvents.splice(0, dependencies.runtimeState.pendingGatewayEvents.length);
+        for (const payload of queued) {
+            await emitGatewayEvent(supabase, config, payload);
+        }
+    };
+    const sendHeartbeat = async (supabase, status, capabilities, deviceName) => {
+        const { error } = await supabase.functions.invoke('gateway-heartbeat', {
+            body: {
+                status,
+                capabilities,
+                device_name: deviceName,
+            },
+        });
+        if (error) {
+            dependencies.logError('Failed to send gateway heartbeat', { error: error.message });
+        }
+    };
+    const loadGatewayControlState = async (supabase, config) => {
+        const { data, error } = await supabase
+            .from('team_gateways')
+            .select('full_control_enabled, status, last_seen_at, capabilities')
+            .eq('id', config.gatewayId)
+            .eq('team_id', config.teamId)
+            .maybeSingle();
+        if (error) {
+            dependencies.logError('Failed to load gateway control state', {
+                gatewayId: config.gatewayId,
+                teamId: config.teamId,
+                error: error.message,
+            });
+            return null;
+        }
+        if (!data)
+            return null;
+        const parsedCapabilities = validateGatewayCapabilitiesV1(data.capabilities ?? null);
+        return {
+            full_control_enabled: data.full_control_enabled === true,
+            status: typeof data.status === 'string' ? data.status : 'unknown',
+            last_seen_at: typeof data.last_seen_at === 'string' ? data.last_seen_at : null,
+            capabilities: parsedCapabilities.ok ? parsedCapabilities.value : null,
+        };
+    };
+    const isHeartbeatFresh = (lastSeenAt) => {
+        if (!lastSeenAt)
+            return false;
+        const parsed = Date.parse(lastSeenAt);
+        if (!Number.isFinite(parsed))
+            return false;
+        return now() - parsed <= heartbeatStaleMs;
+    };
+    const refreshRuntimeInstallFullControl = async (config) => {
+        const options = dependencies.runtimeState.currentRuntimeOptions ?? undefined;
+        try {
+            const latestConfig = await dependencies.loadConfig(options);
+            const nextValue = latestConfig.full_control_enabled === true;
+            if (config.full_control_enabled !== nextValue) {
+                config.full_control_enabled = nextValue;
+                if (dependencies.runtimeState.currentConfig) {
+                    dependencies.runtimeState.currentConfig.full_control_enabled = nextValue;
+                }
+                dependencies.logInfo('Reloaded gateway host machine-control setting', {
+                    enabled: nextValue,
+                });
+            }
+        }
+        catch (error) {
+            dependencies.logError('Failed to refresh gateway host machine-control setting', {
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+        return config.full_control_enabled === true;
+    };
+    return {
+        createGatewayEventClient,
+        emitGatewayEvent,
+        queueGatewayEvent,
+        flushGatewayEvents,
+        sendHeartbeat,
+        loadGatewayControlState,
+        isHeartbeatFresh,
+        refreshRuntimeInstallFullControl,
+    };
+}
+//# sourceMappingURL=gateway-control-plane.js.map

package/dist/gateway-control-plane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-control-plane.js","sourceRoot":"","sources":["../src/gateway-control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,GAE9B,MAAM,uCAAuC,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAuB,MAAM,uBAAuB,CAAA;AAEzE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAK9C,MAAM,uCAAuC,GAAG,IAAI,CAAA;AACpD,MAAM,kCAAkC,GAAG,MAAM,CAAA;AAyDjD,SAAS,2BAA2B,CAClC,WAAmB,EACnB,eAAuB;IAEvB,OAAO,YAAY,CAAW,WAAW,EAAE,eAAe,EAAE;QAC1D,IAAI,EAAE;YACJ,cAAc,EAAE,KAAK;YACrB,gBAAgB,EAAE,KAAK;YACvB,kBAAkB,EAAE,KAAK;SAC1B;KACF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,YAA6C;IAE7C,MAAM,oBAAoB,GAAG,YAAY,CAAC,oBAAoB,IAAI,2BAA2B,CAAA;IAC7F,MAAM,oBAAoB,GACxB,YAAY,CAAC,oBAAoB,IAAI,uCAAuC,CAAA;IAC9E,MAAM,gBAAgB,GAAG,YAAY,CAAC,gBAAgB,IAAI,kCAAkC,CAAA;IAC5F,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IAExC,MAAM,wBAAwB,GAAG,KAAK,EACpC,MAAqB,EACkB,EAAE;QACzC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,OAAO,IAAI,CAAA;QAC/D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,eAAe,CAAC,CAAA;QAEjF,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;YAChF,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,aAAa,EAAE,MAAM,CAAC,YAAY;SACnC,CAAC,CAAA;QAEF,IAAI,YAAY,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;YAC1C,YAAY,CAAC,QAAQ,CAAC,8CAA8C,EAAE;gBACpE,KAAK,EAAE,YAAY,EAAE,OAAO,IAAI,qBAAqB;aACtD,CAAC,CAAA;YACF,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAA;IAED,MAAM,gBAAgB,GAAG,KAAK,EAC5B,QAA+B,EAC/B,MAAqB,EACrB,OAAwC,EACzB,EAAE;QACjB,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAM;QAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAA;QACnE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAA;QACrC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,gBAAuB,CAAC,CAAC,MAAM,CAAC;YACpE,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,OAAO,EAAE,MAAM,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;YAC1B,OAAO;YACP,OAAO;SACR,CAAC,CAAA;QAEF,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,QAAQ,CAAC,gCAAgC,EAAE;gBACtD,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;aACnC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CAAA;IAED,MAAM,iBAAiB,GAAG,CAAC,OAAwC,EAAQ,EAAE;QAC3E,YAAY,CAAC,YAAY,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC9D,CAAC,CAAA;IAED,MAAM,kBAAkB,GAAG,KAAK,EAC9B,QAA+B,EAC/B,MAAqB,EACN,EAAE;QACjB,IAAI,YAAY,CAAC,YAAY,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QACvE,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,oBAAoB,CAAC,MAAM,CAClE,CAAC,EACD,YAAY,CAAC,YAAY,CAAC,oBAAoB,CAAC,MAAM,CACtD,CAAA;QACD,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,MAAM,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;QACnD,CAAC;IACH,CAAC,CAAA;IAED,MAAM,aAAa,GAAG,KAAK,EACzB,QAA+B,EAC/B,MAAqB,EACrB,YAAmC,EACnC,UAA0B,EACX,EAAE;QACjB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,EAAE;YACrE,IAAI,EAAE;gBACJ,MAAM;gBACN,YAAY;gBACZ,WAAW,EAAE,UAAU;aACxB;SACF,CAAC,CAAA;QAEF,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,QAAQ,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QACrF,CAAC;IACH,CAAC,CAAA;IAED,MAAM,uBAAuB,GAAG,KAAK,EACnC,QAA+B,EAC/B,MAAqB,EACgB,EAAE;QACvC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ;aACnC,IAAI,CAAC,eAAe,CAAC;aACrB,MAAM,CAAC,0DAA0D,CAAC;aAClE,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC;aAC1B,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;aAC5B,WAAW,EAAE,CAAA;QAEhB,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,QAAQ,CAAC,sCAAsC,EAAE;gBAC5D,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,KAAK,CAAC,OAAO;aACrB,CAAC,CAAA;YACF,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAA;QAEtB,MAAM,kBAAkB,GAAG,6BAA6B,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,CAAA;QAEnF,OAAO;YACL,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,KAAK,IAAI;YACxD,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACjE,YAAY,EAAE,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;YAC9E,YAAY,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;SACtE,CAAA;IACH,CAAC,CAAA;IAED,MAAM,gBAAgB,GAAG,CAAC,UAAyB,EAAW,EAAE;QAC9D,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAA;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAA;QAC1C,OAAO,GAAG,EAAE,GAAG,MAAM,IAAI,gBAAgB,CAAA;IAC3C,CAAC,CAAA;IAED,MAAM,gCAAgC,GAAG,KAAK,EAAE,MAAqB,EAAoB,EAAE;QACzF,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,CAAC,qBAAqB,IAAI,SAAS,CAAA;QAC5E,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;YAC3D,MAAM,SAAS,GAAG,YAAY,CAAC,oBAAoB,KAAK,IAAI,CAAA;YAC5D,IAAI,MAAM,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;gBAC9C,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAA;gBACvC,IAAI,YAAY,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;oBAC5C,YAAY,CAAC,YAAY,CAAC,aAAa,CAAC,oBAAoB,GAAG,SAAS,CAAA;gBAC1E,CAAC;gBACD,YAAY,CAAC,OAAO,CAAC,+CAA+C,EAAE;oBACpE,OAAO,EAAE,SAAS;iBACnB,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,QAAQ,CAAC,wDAAwD,EAAE;gBAC9E,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,oBAAoB,KAAK,IAAI,CAAA;IAC7C,CAAC,CAAA;IAED,OAAO;QACL,wBAAwB;QACxB,gBAAgB;QAChB,iBAAiB;QACjB,kBAAkB;QAClB,aAAa;QACb,uBAAuB;QACvB,gBAAgB;QAChB,gCAAgC;KACjC,CAAA;AACH,CAAC"}

package/dist/gateway-daemon.d.ts

@@ -0,0 +1,41 @@
+import { type ChildProcess, type SpawnOptions } from 'node:child_process';
+import fs from 'node:fs/promises';
+import { type ParsedArgs } from './cli-args.js';
+import { buildGatewayEnvOverrides } from './cli-env.js';
+import { formatPathForDisplay, type CliDetail } from './cli-output.js';
+import type { GatewayPaths } from './gateway-state.js';
+import { ensureOwnerOnlyDirectory, ensureOwnerOnlyFile, shouldEnforceOwnerOnlyPermissions } from './local-security.js';
+type CliReporter = (message: string, options?: ParsedArgs['options'], details?: CliDetail[]) => void;
+type SpawnProcess = (command: string, args: string[], options: SpawnOptions) => ChildProcess;
+interface GatewayDaemonDependencies {
+    readPidFile: (options?: ParsedArgs['options']) => number | null;
+    writePidFile: (pid: number, options?: ParsedArgs['options']) => Promise<void>;
+    isProcessAlive: (pid: number) => boolean;
+    cliInfo: CliReporter;
+    cliSuccess: CliReporter;
+    spawnProcess?: SpawnProcess;
+    openLogFile?: typeof fs.open;
+    ensureOwnerOnlyDirectory?: typeof ensureOwnerOnlyDirectory;
+    ensureOwnerOnlyFile?: typeof ensureOwnerOnlyFile;
+    shouldEnforceOwnerOnlyPermissions?: typeof shouldEnforceOwnerOnlyPermissions;
+    buildGatewayEnvOverrides?: typeof buildGatewayEnvOverrides;
+    formatPathForDisplay?: typeof formatPathForDisplay;
+    entryPath?: string;
+    execPath?: string;
+    env?: NodeJS.ProcessEnv;
+}
+interface StartGatewayDaemonParams {
+    options: ParsedArgs['options'];
+    paths: GatewayPaths;
+    foregroundRequested: boolean;
+    explicitDaemon: boolean;
+    dependencies: GatewayDaemonDependencies;
+}
+export type StartGatewayDaemonResult = {
+    started: true;
+} | {
+    started: false;
+};
+export declare function startGatewayDaemonIfRequested(params: StartGatewayDaemonParams): Promise<StartGatewayDaemonResult>;
+export {};
+//# sourceMappingURL=gateway-daemon.d.ts.map

package/dist/gateway-daemon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-daemon.d.ts","sourceRoot":"","sources":["../src/gateway-daemon.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAChF,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAGjC,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,eAAe,CAAA;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAA;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,iCAAiC,EAClC,MAAM,qBAAqB,CAAA;AAE5B,KAAK,WAAW,GAAG,CACjB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,EAC/B,OAAO,CAAC,EAAE,SAAS,EAAE,KAClB,IAAI,CAAA;AAET,KAAK,YAAY,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,KAAK,YAAY,CAAA;AAE5F,UAAU,yBAAyB;IACjC,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,MAAM,GAAG,IAAI,CAAA;IAC/D,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7E,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAA;IACxC,OAAO,EAAE,WAAW,CAAA;IACpB,UAAU,EAAE,WAAW,CAAA;IACvB,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,CAAA;IAC5B,wBAAwB,CAAC,EAAE,OAAO,wBAAwB,CAAA;IAC1D,mBAAmB,CAAC,EAAE,OAAO,mBAAmB,CAAA;IAChD,iCAAiC,CAAC,EAAE,OAAO,iCAAiC,CAAA;IAC5E,wBAAwB,CAAC,EAAE,OAAO,wBAAwB,CAAA;IAC1D,oBAAoB,CAAC,EAAE,OAAO,oBAAoB,CAAA;IAClD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CACxB;AAED,UAAU,wBAAwB;IAChC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;IAC9B,KAAK,EAAE,YAAY,CAAA;IACnB,mBAAmB,EAAE,OAAO,CAAA;IAC5B,cAAc,EAAE,OAAO,CAAA;IACvB,YAAY,EAAE,yBAAyB,CAAA;CACxC;AAED,MAAM,MAAM,wBAAwB,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAA;CAAE,CAAA;AAE7E,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,wBAAwB,CAAC,CAmFnC"}

package/dist/gateway-daemon.js

@@ -0,0 +1,69 @@
+import { spawn } from 'node:child_process';
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import process from 'node:process';
+import { getStringOption } from './cli-args.js';
+import { buildGatewayEnvOverrides } from './cli-env.js';
+import { formatPathForDisplay } from './cli-output.js';
+import { ensureOwnerOnlyDirectory, ensureOwnerOnlyFile, shouldEnforceOwnerOnlyPermissions, } from './local-security.js';
+export async function startGatewayDaemonIfRequested(params) {
+    if (params.foregroundRequested) {
+        return { started: false };
+    }
+    const { readPidFile, writePidFile, isProcessAlive, cliInfo, cliSuccess, spawnProcess = spawn, openLogFile = fs.open, env = process.env, } = params.dependencies;
+    const secureDirectory = params.dependencies.ensureOwnerOnlyDirectory ?? ensureOwnerOnlyDirectory;
+    const secureFile = params.dependencies.ensureOwnerOnlyFile ?? ensureOwnerOnlyFile;
+    const enforceOwnerOnlyPermissions = params.dependencies.shouldEnforceOwnerOnlyPermissions ?? shouldEnforceOwnerOnlyPermissions;
+    const buildEnvOverrides = params.dependencies.buildGatewayEnvOverrides ?? buildGatewayEnvOverrides;
+    const displayPath = params.dependencies.formatPathForDisplay ?? formatPathForDisplay;
+    const existingPid = readPidFile(params.options);
+    if (existingPid && isProcessAlive(existingPid)) {
+        cliInfo('Gateway already running', params.options, [
+            { label: 'PID', value: existingPid, verboseOnly: true },
+        ]);
+        return { started: true };
+    }
+    const entryPath = params.dependencies.entryPath ?? process.argv[1] ?? '';
+    if (entryPath.endsWith('.ts')) {
+        if (!params.explicitDaemon) {
+            cliInfo('Gateway running in foreground (dev mode detected)', params.options);
+            return { started: false };
+        }
+        throw new Error('Daemon mode requires the built gateway. Run "pnpm gateway:start -- --daemon".');
+    }
+    await secureDirectory(path.dirname(params.paths.logPath));
+    await secureFile(params.paths.logPath);
+    const logHandle = await openLogFile(params.paths.logPath, 'a', enforceOwnerOnlyPermissions() ? 0o600 : undefined);
+    await secureFile(params.paths.logPath);
+    const childArgs = [entryPath, 'start', '--foreground'];
+    const deviceName = getStringOption(params.options, 'device-name') || env.PANORAMA_GATEWAY_DEVICE_NAME;
+    if (deviceName) {
+        childArgs.push('--device-name', deviceName);
+    }
+    let child;
+    try {
+        child = spawnProcess(params.dependencies.execPath ?? process.execPath, childArgs, {
+            detached: true,
+            stdio: ['ignore', logHandle.fd, logHandle.fd],
+            env: {
+                ...env,
+                ...buildEnvOverrides(params.options),
+            },
+        });
+        child.unref();
+    }
+    finally {
+        await logHandle.close();
+    }
+    if (!child.pid) {
+        throw new Error('Failed to determine gateway process id');
+    }
+    await writePidFile(child.pid, params.options);
+    cliSuccess('Gateway started', params.options, [
+        { label: 'Logs', value: displayPath(params.paths.logPath) },
+        { label: 'PID', value: child.pid, verboseOnly: true },
+        { label: 'Config', value: displayPath(params.paths.configPath), verboseOnly: true },
+    ]);
+    return { started: true };
+}
+//# sourceMappingURL=gateway-daemon.js.map

package/dist/gateway-daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-daemon.js","sourceRoot":"","sources":["../src/gateway-daemon.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAwC,MAAM,oBAAoB,CAAA;AAChF,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACjC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,eAAe,EAAmB,MAAM,eAAe,CAAA;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAkB,MAAM,iBAAiB,CAAA;AAEtE,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,iCAAiC,GAClC,MAAM,qBAAqB,CAAA;AAsC5B,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,MAAgC;IAEhC,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC3B,CAAC;IAED,MAAM,EACJ,WAAW,EACX,YAAY,EACZ,cAAc,EACd,OAAO,EACP,UAAU,EACV,YAAY,GAAG,KAAK,EACpB,WAAW,GAAG,EAAE,CAAC,IAAI,EACrB,GAAG,GAAG,OAAO,CAAC,GAAG,GAClB,GAAG,MAAM,CAAC,YAAY,CAAA;IACvB,MAAM,eAAe,GACnB,MAAM,CAAC,YAAY,CAAC,wBAAwB,IAAI,wBAAwB,CAAA;IAC1E,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,mBAAmB,IAAI,mBAAmB,CAAA;IACjF,MAAM,2BAA2B,GAC/B,MAAM,CAAC,YAAY,CAAC,iCAAiC,IAAI,iCAAiC,CAAA;IAC5F,MAAM,iBAAiB,GACrB,MAAM,CAAC,YAAY,CAAC,wBAAwB,IAAI,wBAAwB,CAAA;IAC1E,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,oBAAoB,IAAI,oBAAoB,CAAA;IAEpF,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC/C,IAAI,WAAW,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/C,OAAO,CAAC,yBAAyB,EAAE,MAAM,CAAC,OAAO,EAAE;YACjD,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE;SACxD,CAAC,CAAA;QACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC1B,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACxE,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,CAAC,mDAAmD,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;YAC5E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;QAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAA;IAClG,CAAC;IAED,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;IACzD,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,MAAM,WAAW,CACjC,MAAM,CAAC,KAAK,CAAC,OAAO,EACpB,GAAG,EACH,2BAA2B,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAClD,CAAA;IACD,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAEtC,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,CAAA;IACtD,MAAM,UAAU,GACd,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,4BAA4B,CAAA;IACpF,IAAI,UAAU,EAAE,CAAC;QACf,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;IAC7C,CAAC;IAED,IAAI,KAAmB,CAAA;IACvB,IAAI,CAAC;QACH,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE;YAChF,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC;YAC7C,GAAG,EAAE;gBACH,GAAG,GAAG;gBACN,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC;aACrC;SACF,CAAC,CAAA;QAEF,KAAK,CAAC,KAAK,EAAE,CAAA;IACf,CAAC;YAAS,CAAC;QACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAA;IACzB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IAED,MAAM,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAC7C,UAAU,CAAC,iBAAiB,EAAE,MAAM,CAAC,OAAO,EAAE;QAC5C,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;QAC3D,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE;QACrD,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE;KACpF,CAAC,CAAA;IACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AAC1B,CAAC"}

package/dist/gateway-doctor.d.ts

@@ -0,0 +1,45 @@
+import { type ParsedArgs } from './cli-args.js';
+import { type CliDetail } from './cli-output.js';
+import type { GatewayProviderHealth, GatewayProviderId } from './cli-providers/types.js';
+import type { GatewayProviderCapabilityProgressEvent } from './gateway-provider-capabilities.js';
+import type { GatewayConfig, GatewayPaths } from './gateway-state.js';
+type CliReporter = (message: string, options?: ParsedArgs['options'], details?: CliDetail[]) => void;
+export interface GatewayDoctorConfigResolution {
+    configDir: string;
+    configPath: string;
+    migratedFrom?: string;
+}
+export interface GatewayDoctorEventPayload {
+    level: 'info' | 'warn' | 'error';
+    code?: string;
+    message: string;
+    provider?: string;
+    details?: Record<string, unknown>;
+}
+export interface GatewayDoctorDependencies<EventClient = unknown> {
+    resolveGatewayPaths: (options?: ParsedArgs['options']) => GatewayPaths;
+    loadConfig: (options?: ParsedArgs['options']) => Promise<GatewayConfig>;
+    saveConfig: (config: GatewayConfig, options?: ParsedArgs['options']) => Promise<void>;
+    discoverGatewayCliCommands: (options?: ParsedArgs['options']) => Promise<void>;
+    buildCapabilities: (params?: {
+        validationMode?: 'full' | 'light' | 'auto';
+        previousHealth?: Partial<Record<GatewayProviderId, GatewayProviderHealth>>;
+        deviceName?: string | null;
+        installFullControlEnabled?: boolean;
+        onProgress?: (event: GatewayProviderCapabilityProgressEvent) => void;
+    }) => Promise<{
+        providerHealth: Record<GatewayProviderId, GatewayProviderHealth>;
+        anyProviderReady: boolean;
+    }>;
+    createGatewayEventClient: (config: GatewayConfig) => Promise<EventClient | null>;
+    flushGatewayEvents: (client: EventClient, config: GatewayConfig) => Promise<void>;
+    emitGatewayEvent: (client: EventClient, config: GatewayConfig, payload: GatewayDoctorEventPayload) => Promise<void>;
+    emitProviderHealthEvents: (client: EventClient, config: GatewayConfig, providerHealth: Record<GatewayProviderId, GatewayProviderHealth>, context: string) => Promise<void>;
+    outputLine?: (line: string) => void;
+    configExists?: (path: string) => boolean;
+    cliInfo: CliReporter;
+    cliWarn: CliReporter;
+}
+export declare function doctorGatewayCommand<EventClient = unknown>(options: ParsedArgs['options'], configResolution: GatewayDoctorConfigResolution | undefined, dependencies: GatewayDoctorDependencies<EventClient>): Promise<void>;
+export {};
+//# sourceMappingURL=gateway-doctor.d.ts.map

package/dist/gateway-doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-doctor.d.ts","sourceRoot":"","sources":["../src/gateway-doctor.ts"],"names":[],"mappings":"AACA,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,eAAe,CAAA;AAChE,OAAO,EAGL,KAAK,SAAS,EACf,MAAM,iBAAiB,CAAA;AACxB,OAAO,KAAK,EACV,qBAAqB,EACrB,iBAAiB,EAClB,MAAM,0BAA0B,CAAA;AAKjC,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,oCAAoC,CAAA;AAChG,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAErE,KAAK,WAAW,GAAG,CACjB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,EAC/B,OAAO,CAAC,EAAE,SAAS,EAAE,KAClB,IAAI,CAAA;AAET,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;IAChC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAED,MAAM,WAAW,yBAAyB,CAAC,WAAW,GAAG,OAAO;IAC9D,mBAAmB,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,YAAY,CAAA;IACtE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,aAAa,CAAC,CAAA;IACvE,UAAU,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrF,0BAA0B,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9E,iBAAiB,EAAE,CAAC,MAAM,CAAC,EAAE;QAC3B,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAA;QAC1C,cAAc,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC,CAAA;QAC1E,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QAC1B,yBAAyB,CAAC,EAAE,OAAO,CAAA;QACnC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,sCAAsC,KAAK,IAAI,CAAA;KACrE,KAAK,OAAO,CAAC;QACZ,cAAc,EAAE,MAAM,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAA;QAChE,gBAAgB,EAAE,OAAO,CAAA;KAC1B,CAAC,CAAA;IACF,wBAAwB,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;IAChF,kBAAkB,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACjF,gBAAgB,EAAE,CAChB,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,IAAI,CAAC,CAAA;IAClB,wBAAwB,EAAE,CACxB,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,aAAa,EACrB,cAAc,EAAE,MAAM,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,EAChE,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC,IAAI,CAAC,CAAA;IAClB,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACnC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;IACxC,OAAO,EAAE,WAAW,CAAA;IACpB,OAAO,EAAE,WAAW,CAAA;CACrB;AAED,wBAAsB,oBAAoB,CAAC,WAAW,GAAG,OAAO,EAC9D,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,EAC9B,gBAAgB,EAAE,6BAA6B,GAAG,SAAS,EAC3D,YAAY,EAAE,yBAAyB,CAAC,WAAW,CAAC,GACnD,OAAO,CAAC,IAAI,CAAC,CAwFf"}

package/dist/gateway-doctor.js

@@ -0,0 +1,81 @@
+import fsSync from 'node:fs';
+import { formatPathForDisplay, truncateText, } from './cli-output.js';
+import { formatProviderLabel, formatProviderProgressLine, } from './gateway-provider-health.js';
+export async function doctorGatewayCommand(options, configResolution, dependencies) {
+    const { configPath, configDir } = dependencies.resolveGatewayPaths(options);
+    const configExists = dependencies.configExists ?? fsSync.existsSync;
+    const outputLine = dependencies.outputLine ?? console.log;
+    const paired = configExists(configPath);
+    let config = null;
+    if (paired) {
+        try {
+            config = await dependencies.loadConfig(options);
+        }
+        catch (error) {
+            dependencies.cliWarn('Unable to read gateway config.', options, [
+                { label: 'Config path', value: formatPathForDisplay(configPath), verboseOnly: true },
+                {
+                    label: 'Error',
+                    value: error instanceof Error ? error.message : String(error),
+                    verboseOnly: true,
+                },
+            ]);
+        }
+    }
+    dependencies.cliInfo('Gateway doctor report', options, [
+        { label: 'Config dir', value: formatPathForDisplay(configDir) },
+        { label: 'Paired', value: paired ? 'Yes' : 'No' },
+        {
+            label: 'Host machine control',
+            value: config == null ? undefined : config.full_control_enabled ? 'Enabled' : 'Disabled',
+        },
+        { label: 'Gateway ID', value: config?.gatewayId ?? undefined, verboseOnly: true },
+        { label: 'Team ID', value: config?.teamId ?? undefined, verboseOnly: true },
+    ]);
+    dependencies.cliInfo('Validating providers...', options);
+    await dependencies.discoverGatewayCliCommands(options);
+    const { providerHealth, anyProviderReady } = await dependencies.buildCapabilities({
+        validationMode: 'full',
+        previousHealth: config?.providerHealth,
+        installFullControlEnabled: config?.full_control_enabled === true,
+        onProgress: (event) => {
+            if (event.stage === 'start') {
+                dependencies.cliInfo(`  ${formatProviderLabel(event.providerId)}...`, options);
+                return;
+            }
+            dependencies.cliInfo(`  ${formatProviderProgressLine(event)}`, options);
+        },
+    });
+    if (config) {
+        config.providerHealth = providerHealth;
+        await dependencies.saveConfig(config, options);
+    }
+    const providerEntries = Object.entries(providerHealth);
+    outputLine('Provider status:');
+    for (const [providerId, health] of providerEntries) {
+        const error = health.error ? ` (${truncateText(health.error, 200)})` : '';
+        outputLine(`  - ${providerId}: ${health.status}${error}`);
+    }
+    if (!anyProviderReady) {
+        dependencies.cliWarn('No providers passed validation. Install/authenticate a provider before starting the gateway.', options);
+    }
+    if (!config)
+        return;
+    const eventClient = await dependencies.createGatewayEventClient(config);
+    if (!eventClient)
+        return;
+    await dependencies.flushGatewayEvents(eventClient, config);
+    if (configResolution?.migratedFrom) {
+        await dependencies.emitGatewayEvent(eventClient, config, {
+            level: 'warn',
+            code: 'config_dir_fallback',
+            message: 'Gateway config directory was not writable; using fallback location.',
+            details: {
+                previous: configResolution.migratedFrom,
+                current: configResolution.configDir,
+            },
+        });
+    }
+    await dependencies.emitProviderHealthEvents(eventClient, config, providerHealth, 'doctor');
+}
+//# sourceMappingURL=gateway-doctor.js.map

package/dist/gateway-doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-doctor.js","sourceRoot":"","sources":["../src/gateway-doctor.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,SAAS,CAAA;AAE5B,OAAO,EACL,oBAAoB,EACpB,YAAY,GAEb,MAAM,iBAAiB,CAAA;AAKxB,OAAO,EACL,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,8BAA8B,CAAA;AA0DrC,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA8B,EAC9B,gBAA2D,EAC3D,YAAoD;IAEpD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAC3E,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,IAAI,MAAM,CAAC,UAAU,CAAA;IACnE,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAA;IACzD,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAA;IAEvC,IAAI,MAAM,GAAyB,IAAI,CAAA;IACvC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,gCAAgC,EAAE,OAAO,EAAE;gBAC9D,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,oBAAoB,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE;gBACpF;oBACE,KAAK,EAAE,OAAO;oBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC7D,WAAW,EAAE,IAAI;iBAClB;aACF,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,YAAY,CAAC,OAAO,CAAC,uBAAuB,EAAE,OAAO,EAAE;QACrD,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,oBAAoB,CAAC,SAAS,CAAC,EAAE;QAC/D,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;QACjD;YACE,KAAK,EAAE,sBAAsB;YAC7B,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;SACzF;QACD,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE;QACjF,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE;KAC5E,CAAC,CAAA;IAEF,YAAY,CAAC,OAAO,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAA;IACxD,MAAM,YAAY,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAA;IACtD,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC;QAChF,cAAc,EAAE,MAAM;QACtB,cAAc,EAAE,MAAM,EAAE,cAAc;QACtC,yBAAyB,EAAE,MAAM,EAAE,oBAAoB,KAAK,IAAI;QAChE,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;YACpB,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC5B,YAAY,CAAC,OAAO,CAAC,KAAK,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;gBAC9E,OAAM;YACR,CAAC;YACD,YAAY,CAAC,OAAO,CAAC,KAAK,0BAA0B,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;QACzE,CAAC;KACF,CAAC,CAAA;IAEF,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,cAAc,GAAG,cAAc,CAAA;QACtC,MAAM,YAAY,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChD,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAEpD,CAAA;IAED,UAAU,CAAC,kBAAkB,CAAC,CAAA;IAC9B,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QACzE,UAAU,CAAC,OAAO,UAAU,KAAK,MAAM,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC,CAAA;IAC3D,CAAC;IAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,YAAY,CAAC,OAAO,CAClB,8FAA8F,EAC9F,OAAO,CACR,CAAA;IACH,CAAC;IAED,IAAI,CAAC,MAAM;QAAE,OAAM;IAEnB,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAA;IACvE,IAAI,CAAC,WAAW;QAAE,OAAM;IAExB,MAAM,YAAY,CAAC,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;IAC1D,IAAI,gBAAgB,EAAE,YAAY,EAAE,CAAC;QACnC,MAAM,YAAY,CAAC,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE;YACvD,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,qEAAqE;YAC9E,OAAO,EAAE;gBACP,QAAQ,EAAE,gBAAgB,CAAC,YAAY;gBACvC,OAAO,EAAE,gBAAgB,CAAC,SAAS;aACpC;SACF,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,YAAY,CAAC,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAA;AAC5F,CAAC"}