@panorama-ai/gateway 2.29.14 → 2.30.181

package/README.md

@@ -1,6 +1,12 @@
 # Panorama Gateway
 
-Gateway service for connecting CLI capabilities on a host machine to a Panorama team. A team can pair multiple gateways from different machines; each gateway instance is identified by its own `gateway_id`.
+Gateway service for connecting host-side runtime capabilities to Panorama.
+
+In local mode, a team can pair multiple gateways from different machines; each
+gateway instance is identified by its own `gateway_id`.
+
+In managed mode, Panorama provisions the host and starts the gateway with scoped
+managed-runtime credentials.
 
 ## Usage
 
@@ -30,6 +36,16 @@ Start this gateway and begin listening for jobs (foreground in dev, background f
 pnpm --filter @panorama-ai/gateway dev -- start
 ```
 
+Run as a Panorama-managed host runtime:
+
+```bash
+panorama-gateway start --mode managed
+```
+
+Managed mode is only intended for Panorama-provisioned hosts with the managed
+runtime environment contract described below. It is not a replacement for
+locally paired user gateways.
+
 Force this gateway into the background (built binary only):
 
 ```bash
@@ -55,7 +71,8 @@ Check this gateway's status:
 pnpm --filter @panorama-ai/gateway dev -- status
 ```
 
-Manage install-level full-control on this host:
+Manage host machine control on this host (the CLI command is still `full-control`
+for compatibility):
 
 ```bash
 pnpm --filter @panorama-ai/gateway dev -- full-control status
@@ -75,6 +92,7 @@ Optional flags:
 - `--verbose`, `-v` (show technical details like paths, IDs, and PIDs)
 - `--env local|dev|test|stage|prod`
 - `--env-file /path/to/.env`
+- `--mode local|managed` (`start` only; default `local`)
 - `--foreground` (run in the foreground)
 - `--daemon` (force background for built CLI)
 - `--config-dir /path/to/dir`
@@ -102,24 +120,108 @@ You can always point to a specific env file with `--env-file`.
 
 The gateway runs CLI providers using the current user environment (HOME, PATH, etc.) so it matches what you see when running the CLIs directly.
 
-## Execution and Security Model
+Managed mode is for Panorama-provisioned runtimes. It reads the managed Linux
+host environment contract:
+
+- `PANORAMA_AGENT_ID`
+- `PANORAMA_LINUX_HOST_ID`
+- `PANORAMA_LINUX_HOST_ATTEMPT_GENERATION`
+- `PANORAMA_SUPABASE_URL`
+- `PANORAMA_SUPABASE_ANON_KEY`
+- `PANORAMA_LINUX_HOST_CONTROL_URL`
+- `PANORAMA_LINUX_HOST_CONTROL_TOKEN`
+- `PANORAMA_TOOL_EXECUTION_URL`
+- `PANORAMA_TOOL_EXECUTION_TOKEN`
+- `PANORAMA_MANAGED_RUNTIME_ID` (optional)
+- `PANORAMA_MANAGED_RUNTIME_RETRY_BACKOFF_MS` (optional)
+- `PANORAMA_MANAGED_RUNTIME_CONTROL_TIMEOUT_MS` (optional, default `30000`)
+- `PANORAMA_MANAGED_RUNTIME_OUTPUT_CAPTURE_BYTES` (optional, default `5000000`)
+- `PANORAMA_MANAGED_RUNTIME_HEARTBEAT_INTERVAL_MS` (optional)
+- `PANORAMA_MANAGED_RUNTIME_MAX_CONSECUTIVE_HEARTBEAT_FAILURES` (optional)
+
+## Runtime Structure
+
+The gateway package is published to NPM as a single CLI, but internally it has
+separate runtime boundaries for local and managed execution.
+
+Local runtime modules:
+
+- `src/gateway-local-runtime.ts` owns local startup orchestration: paired
+  session loading, provider validation, job controller wiring, signal handling,
+  and lifecycle coordination.
+- `src/local-runtime/heartbeat-supervisor.ts` owns local capability refreshes
+  and heartbeat reporting.
+- `src/local-runtime/restart-supervisor.ts` owns package/probe watching and
+  drain-before-restart behavior.
+- `src/local-runtime/shutdown-supervisor.ts` owns drain, termination, offline
+  heartbeat, and residual job cleanup behavior.
+
+Managed runtime modules:
+
+- `src/managed-runtime.ts` owns managed startup orchestration and dependency
+  wiring.
+- `src/managed-runtime/control-client.ts` owns managed host-control HTTP calls.
+- `src/managed-runtime/realtime.ts` owns Supabase session setup and wake-signal
+  subscription behavior.
+- `src/managed-runtime/execution-dispatcher.ts` owns managed shell execution
+  dispatch, result capture, and completion reporting.
+- `src/managed-runtime/heartbeat.ts`, `src/managed-runtime/host-state.ts`, and
+  `src/managed-runtime/wake-signal.ts` own managed heartbeat, host identity
+  derivation, and wake-signal parsing helpers.
+
+Shared runtime helpers:
+
+- `src/process-output-capture.ts` owns bounded stdout/stderr capture for shell
+  execution, provider streaming, and managed command execution.
+- `src/provider-runtime-utils.ts` owns provider environment construction and
+  command/result parsing helpers used by CLI provider adapters.
+- `src/subagent-adapters/output-format.ts` owns shared subagent output format
+  normalization.
+
+The key split is not "VM versus non-VM"; it is which control surface drives the
+host. Local mode is driven by a paired gateway session and user-delegated host
+capabilities. Managed mode is driven by Panorama-scoped runtime credentials and
+managed host control.
+
+## Execution Bridge and Trust Model
+
+The gateway has two runtime modes:
+
+- Local mode connects Panorama's control plane to a machine/account the team
+  controls.
+- Managed mode connects Panorama's control plane to a Panorama-provisioned host
+  using scoped runtime credentials.
+
+Local mode:
 
 - Gateway processes run as the logged-in user and are designed to behave like direct local CLI usage.
-- Provider child processes inherit user environment semantics, but gateway-internal secrets are scrubbed before launch.
-- Provider/runtime isolation relies on built-in provider controls (for example Codex read-only sandbox + tool flags), not heavyweight host isolation.
+- Gateway hosts are a **user-delegated host** trust zone. Treat gateway access
+  as equivalent to local CLI access for that user account.
+- Provider child processes inherit user environment semantics, but
+  gateway-internal secrets are scrubbed before launch.
+- Provider-side execution controls rely on built-in provider flags (for example
+  Codex read-only sandbox + tool flags), not heavyweight host isolation.
 - Machine-control capabilities are layered:
-  - install-level host toggle (`panorama-gateway full-control enable`)
-  - team-level gateway toggle (Team Integrations UI / `set-gateway-full-control`)
+  - host machine-control toggle (`panorama-gateway full-control enable`)
+  - team-level gateway machine-control toggle (Team Integrations UI / `set-gateway-full-control`)
   - resource-level opt-in (`config.full_control=true` for gateway subagents, `metadata.full_control=true` for `remote_shell` resources)
 - Gateway state is stored locally under `~/.panorama/gateway` by default and includes pairing/session tokens needed for reconnects.
 - On POSIX platforms, gateway state directories/files are enforced as owner-only (`0700` for dirs, `0600` for files).
 
+Managed mode:
+
+- Gateway processes run as Panorama-managed runtime participants.
+- Managed hosts use scoped control and tool execution tokens.
+- Shell child processes receive the tool execution token, not the host control
+  token.
+- Managed mode does not use paired-user gateway session material.
+
 Recommended deployment model:
 
 - Use a machine/account you control (for example a dedicated cloud VM user) for each gateway instance.
 - A team can pair multiple gateways (e.g. different developer machines, CI hosts, or VMs). Each gateway gets its own `gateway_id` and reports status independently.
 - Treat gateway host access as equivalent to local CLI access for that user account.
-- For Panorama-managed VM guest images, start from `packages/gateway/vm-template/Dockerfile` and keep the guest runtime scoped to its linked VM identity.
+- For Panorama-managed VM guest images, start from `packages/gateway/vm-template/Dockerfile` and keep the guest gateway bridge scoped to its linked VM identity.
 
 If you hit a permission hardening error, fix ownership/permissions on the gateway state path and re-run `pair` or `start`.
 
@@ -145,11 +247,66 @@ Gateway currently handles:
 
 - `diagnostic` jobs for host/provider validation
 - `model_run` jobs for provider model execution
-- `subagent_run` and `subagent_cancel` jobs for delegated gateway subagents
-- `shell_session` jobs for remote shell sessions (`open`, `write`, `read`, `status`, `close`) via remote shell resources
+- `subagent_run` and `subagent_cancel` jobs for delegated provider harnesses on
+  gateway hosts
+- `shell_exec` jobs for remote shell execution via remote shell resources
 
 For JSON model runs, the worker prefers providers that support explicit output schema mode. JSON streaming support is optional and used as a compatibility path when schema mode is unavailable.
 
+Existing capability names map to these product surfaces:
+
+- `model_execution` means the gateway can run local Claude/Codex/Gemini model
+  calls and gateway subagents. Gateway subagents default to restricted provider
+  sandboxes unless `config.full_control=true` explicitly requests elevated
+  provider mode.
+- `remote_shell` means the gateway can receive `shell_exec` jobs through a
+  `remote_shell` resource.
+- `machine_control` means direct host-control authority is available for
+  elevated gateway subagents and remote shell command execution.
+- `linux_agent_executions` is separate from gateway jobs; it is the
+  embodied/Linux-agent command-execution queue used by Linux-runtime agents.
+
+Remote shell execution contract:
+
+- `shell_exec` runs one foreground shell command through the host shell with
+  `-lc`.
+- Commands start from `/`; callers must include `cd /path && ...` when they
+  want another working directory.
+- The default timeout is 30 seconds and the maximum accepted timeout is 10
+  minutes.
+- Stdout/stderr are returned inline with truncation flags. Remote shell exec
+  does not create overflow artifacts.
+- The gateway does not track background processes after the foreground command
+  exits. Callers may start background work intentionally, but they must manage
+  it with later shell commands.
+
 ## CLI Provider Notes
 
 See `packages/gateway/CLI_PROVIDERS.md` for current findings on Claude Code, Codex CLI, and Gemini CLI usage patterns.
+
+## Packaging and Smoke Checks
+
+The gateway is expected to remain publishable to NPM. The package publishes
+only the built `dist` output and this README; source files are not part of the
+runtime package.
+
+Run these checks before shipping gateway runtime changes:
+
+```bash
+pnpm --filter @panorama-ai/gateway test
+pnpm --filter @panorama-ai/gateway build
+pnpm --filter @panorama-ai/gateway verify:packaged-cli
+```
+
+Use targeted smoke tests when changing one runtime surface:
+
+```bash
+pnpm --filter @panorama-ai/gateway exec tsx --test test/gateway-start-command.test.ts test/gateway-local-runtime.test.ts test/local-runtime-heartbeat-supervisor.test.ts test/local-runtime-restart-supervisor.test.ts test/local-runtime-shutdown-supervisor.test.ts
+pnpm --filter @panorama-ai/gateway exec tsx --test test/managed-runtime.test.ts test/managed-runtime-helpers.test.ts
+```
+
+`panorama-gateway start` requires paired local gateway state. `panorama-gateway
+start --mode managed` requires Panorama-managed runtime credentials. Prefer the
+packaged CLI check plus targeted runtime tests for local development smoke
+validation unless you are intentionally testing against a live paired gateway or
+managed host.

package/dist/child-process-env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"child-process-env.d.ts","sourceRoot":"","sources":["../src/child-process-env.ts"],"names":[],"mappings":"AAoBA,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAI5D;AAED,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,MAAM,CAAC,UAAwB,GACvC,MAAM,CAAC,UAAU,CAQnB;AAED,wBAAgB,2BAA2B,CAAC,MAAM,CAAC,EAAE;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAC9B,GAAG,MAAM,CAAC,UAAU,CAoBpB"}
+{"version":3,"file":"child-process-env.d.ts","sourceRoot":"","sources":["../src/child-process-env.ts"],"names":[],"mappings":"AAqBA,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAI5D;AAED,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,MAAM,CAAC,UAAwB,GACvC,MAAM,CAAC,UAAU,CAQnB;AAED,wBAAgB,2BAA2B,CAAC,MAAM,CAAC,EAAE;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAC9B,GAAG,MAAM,CAAC,UAAU,CAoBpB"}

package/dist/child-process-env.js

@@ -6,6 +6,7 @@ const GATEWAY_CHILD_ENV_BLOCKED_KEYS = new Set([
     'SUPABASE_ANON_KEY',
     'SUPABASE_PUBLISHABLE_KEY',
     'SUPABASE_SERVICE_ROLE_KEY',
+    'SUPABASE_SECRET_KEY',
     'PANORAMA_SUPABASE_URL',
     'PANORAMA_SUPABASE_ANON_KEY',
     'PANORAMA_ENV',

package/dist/child-process-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"child-process-env.js","sourceRoot":"","sources":["../src/child-process-env.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAA;AAElC,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC;IAC7C,cAAc;IACd,kBAAkB;IAClB,cAAc;IACd,mBAAmB;IACnB,0BAA0B;IAC1B,2BAA2B;IAC3B,uBAAuB;IACvB,4BAA4B;IAC5B,cAAc;IACd,mBAAmB;IACnB,mBAAmB;IACnB,oBAAoB;IACpB,sBAAsB;CACvB,CAAC,CAAA;AAEF,MAAM,kCAAkC,GAAG,CAAC,mBAAmB,CAAC,CAAA;AAEhE,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAA;IACtB,IAAI,8BAA8B,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACxD,OAAO,kCAAkC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;AACpF,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,UAA6B,OAAO,CAAC,GAAG;IAExC,MAAM,GAAG,GAAsB,EAAE,CAAA;IACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAQ;QACjC,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC1C,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IAClB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAI3C;IACC,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAA;IAC9C,MAAM,GAAG,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAA;IAC7B,IAAI,MAAM,EAAE,CAAC;QACX,GAAG,CAAC,MAAM,GAAG,MAAM,CAAA;QACnB,GAAG,CAAC,GAAG,GAAG,MAAM,CAAA;QAChB,GAAG,CAAC,IAAI,GAAG,MAAM,CAAA;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,CAAA;IACnC,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAA;YACjB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}
+{"version":3,"file":"child-process-env.js","sourceRoot":"","sources":["../src/child-process-env.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAA;AAElC,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC;IAC7C,cAAc;IACd,kBAAkB;IAClB,cAAc;IACd,mBAAmB;IACnB,0BAA0B;IAC1B,2BAA2B;IAC3B,qBAAqB;IACrB,uBAAuB;IACvB,4BAA4B;IAC5B,cAAc;IACd,mBAAmB;IACnB,mBAAmB;IACnB,oBAAoB;IACpB,sBAAsB;CACvB,CAAC,CAAA;AAEF,MAAM,kCAAkC,GAAG,CAAC,mBAAmB,CAAC,CAAA;AAEhE,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAA;IACtB,IAAI,8BAA8B,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACxD,OAAO,kCAAkC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;AACpF,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,UAA6B,OAAO,CAAC,GAAG;IAExC,MAAM,GAAG,GAAsB,EAAE,CAAA;IACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAQ;QACjC,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC1C,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IAClB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAI3C;IACC,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAA;IAC9C,MAAM,GAAG,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAA;IAC7B,IAAI,MAAM,EAAE,CAAC;QACX,GAAG,CAAC,MAAM,GAAG,MAAM,CAAA;QACnB,GAAG,CAAC,GAAG,GAAG,MAAM,CAAA;QAChB,GAAG,CAAC,IAAI,GAAG,MAAM,CAAA;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,CAAA;IACnC,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAA;YACjB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/cli-args.d.ts

@@ -0,0 +1,11 @@
+export interface ParsedArgs {
+    command: string | null;
+    positional: string[];
+    options: Record<string, string | boolean>;
+}
+export type GatewayRuntimeMode = 'local' | 'managed';
+export declare function parseArgs(argv: string[]): ParsedArgs;
+export declare function getStringOption(options: ParsedArgs['options'], key: string): string | undefined;
+export declare function resolveGatewayRuntimeMode(options: ParsedArgs['options'], env?: NodeJS.ProcessEnv): GatewayRuntimeMode;
+export declare function parseBooleanInput(value: unknown): boolean | null;
+//# sourceMappingURL=cli-args.d.ts.map

package/dist/cli-args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-args.d.ts","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAA;CAC1C;AAED,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,SAAS,CAAA;AAEpD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAyCpD;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAI/F;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,EAC9B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,kBAAkB,CAOpB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,CAsBhE"}

package/dist/cli-args.js

@@ -0,0 +1,72 @@
+export function parseArgs(argv) {
+    const normalizedArgv = argv[0] === '--' ? argv.slice(1) : argv;
+    const positional = [];
+    const options = {};
+    for (let i = 0; i < normalizedArgv.length; i += 1) {
+        const arg = normalizedArgv[i];
+        if (!arg)
+            continue;
+        if (arg === '--') {
+            positional.push(...normalizedArgv.slice(i + 1));
+            break;
+        }
+        if (arg.startsWith('--')) {
+            const [flag, inlineValue] = arg.slice(2).split('=');
+            if (inlineValue !== undefined) {
+                options[flag] = inlineValue;
+                continue;
+            }
+            const next = normalizedArgv[i + 1];
+            if (next && !next.startsWith('--')) {
+                options[flag] = next;
+                i += 1;
+            }
+            else {
+                options[flag] = true;
+            }
+            continue;
+        }
+        if (arg.startsWith('-') && arg.length > 1) {
+            options[arg.slice(1)] = true;
+            continue;
+        }
+        positional.push(arg);
+    }
+    const command = positional.shift() ?? null;
+    return { command, positional, options };
+}
+export function getStringOption(options, key) {
+    const value = options[key];
+    if (typeof value === 'string')
+        return value;
+    return undefined;
+}
+export function resolveGatewayRuntimeMode(options, env = process.env) {
+    const rawMode = getStringOption(options, 'mode') || env.PANORAMA_GATEWAY_MODE || 'local';
+    const mode = rawMode.trim().toLowerCase();
+    if (mode === 'local' || mode === 'managed') {
+        return mode;
+    }
+    throw new Error(`Unsupported gateway mode: ${rawMode}`);
+}
+export function parseBooleanInput(value) {
+    if (typeof value === 'boolean')
+        return value;
+    if (typeof value === 'string') {
+        const normalized = value.trim().toLowerCase();
+        if (normalized === 'true' ||
+            normalized === '1' ||
+            normalized === 'yes' ||
+            normalized === 'on') {
+            return true;
+        }
+        if (normalized === 'false' ||
+            normalized === '0' ||
+            normalized === 'no' ||
+            normalized === 'off') {
+            return false;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=cli-args.js.map

package/dist/cli-args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-args.js","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,cAAc,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC9D,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,MAAM,OAAO,GAAqC,EAAE,CAAA;IAEpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,GAAG;YAAE,SAAQ;QAElB,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YAC/C,MAAK;QACP,CAAC;QAED,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACnD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAAA;gBAC3B,SAAQ;YACV,CAAC;YAED,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YAClC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;gBACpB,CAAC,IAAI,CAAC,CAAA;YACR,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;YACtB,CAAC;YACD,SAAQ;QACV,CAAC;QAED,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;YAC5B,SAAQ;QACV,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACtB,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,IAAI,CAAA;IAC1C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAA8B,EAAE,GAAW;IACzE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAA8B,EAC9B,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,qBAAqB,IAAI,OAAO,CAAA;IACxF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACzC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAA;AACzD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC7C,IACE,UAAU,KAAK,MAAM;YACrB,UAAU,KAAK,GAAG;YAClB,UAAU,KAAK,KAAK;YACpB,UAAU,KAAK,IAAI,EACnB,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IACE,UAAU,KAAK,OAAO;YACtB,UAAU,KAAK,GAAG;YAClB,UAAU,KAAK,IAAI;YACnB,UAAU,KAAK,KAAK,EACpB,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/cli-command-discovery.d.ts

@@ -0,0 +1,17 @@
+export interface CommandDiscoveryOptions {
+    env?: NodeJS.ProcessEnv;
+    homeDir?: string;
+    platform?: NodeJS.Platform;
+    maxClaudeWrapperBytes?: number;
+}
+export declare function expandHomePath(value: string, homeDir?: string): string;
+export declare function extractClaudeWrapperTarget(commandPath: string, options?: CommandDiscoveryOptions): string | null;
+export declare function isBrokenClaudeWrapper(commandPath: string, options?: CommandDiscoveryOptions): boolean;
+export declare function isExecutableCandidate(candidate: string, platform?: NodeJS.Platform): boolean;
+export declare function collectBinDirs(options?: CommandDiscoveryOptions): string[];
+export declare function expandCommandExtensions(command: string, options?: Pick<CommandDiscoveryOptions, 'env' | 'platform'>): string[];
+export declare function collectCommandCandidates(command: string, extraCandidates: string[], options?: CommandDiscoveryOptions): string[];
+export declare function resolveClaudeFallbackCommand(commandPath: string, options?: CommandDiscoveryOptions): string | null;
+export declare function extractVersion(text: string): string | null;
+export declare function compareVersions(a: string, b: string): number;
+//# sourceMappingURL=cli-command-discovery.d.ts.map

package/dist/cli-command-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-command-discovery.d.ts","sourceRoot":"","sources":["../src/cli-command-discovery.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,uBAAuB;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAA;CAC/B;AAWD,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,MAAqB,GAAG,MAAM,CAKpF;AAED,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,uBAA4B,GACpC,MAAM,GAAG,IAAI,CAaf;AAED,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAQT;AAED,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,OAAO,CAUT;AAED,wBAAgB,cAAc,CAAC,OAAO,GAAE,uBAA4B,GAAG,MAAM,EAAE,CAyD9E;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,GAAG,UAAU,CAAM,GAC9D,MAAM,EAAE,CASV;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM,EAAE,EACzB,OAAO,GAAE,uBAA4B,GACpC,MAAM,EAAE,CA0BV;AAED,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,uBAA4B,GACpC,MAAM,GAAG,IAAI,CAiCf;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ1D;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CA4B5D"}

package/dist/cli-command-discovery.js

@@ -0,0 +1,229 @@
+import fsSync from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+const DEFAULT_MAX_CLAUDE_WRAPPER_BYTES = 4096;
+function resolveOptions(options = {}) {
+    return {
+        env: options.env ?? process.env,
+        homeDir: options.homeDir ?? os.homedir(),
+        platform: options.platform ?? process.platform,
+        maxClaudeWrapperBytes: options.maxClaudeWrapperBytes ?? DEFAULT_MAX_CLAUDE_WRAPPER_BYTES,
+    };
+}
+export function expandHomePath(value, homeDir = os.homedir()) {
+    if (value.startsWith('~/')) {
+        return path.join(homeDir, value.slice(2));
+    }
+    return value;
+}
+export function extractClaudeWrapperTarget(commandPath, options = {}) {
+    const { homeDir, maxClaudeWrapperBytes } = resolveOptions(options);
+    try {
+        const stat = fsSync.statSync(commandPath);
+        if (!stat.isFile() || stat.size > maxClaudeWrapperBytes)
+            return null;
+        const raw = fsSync.readFileSync(commandPath, 'utf8');
+        const match = raw.match(/exec\s+(?:"([^"]+)"|'([^']+)'|([^\s]+))/);
+        const target = match?.[1] ?? match?.[2] ?? match?.[3];
+        if (!target)
+            return null;
+        return expandHomePath(target, homeDir);
+    }
+    catch {
+        return null;
+    }
+}
+export function isBrokenClaudeWrapper(commandPath, options = {}) {
+    const target = extractClaudeWrapperTarget(commandPath, options);
+    if (!target)
+        return false;
+    try {
+        return !fsSync.existsSync(target);
+    }
+    catch {
+        return false;
+    }
+}
+export function isExecutableCandidate(candidate, platform = process.platform) {
+    try {
+        const stat = fsSync.statSync(candidate);
+        if (!stat.isFile())
+            return false;
+        if (platform === 'win32')
+            return true;
+        fsSync.accessSync(candidate, fsSync.constants.X_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export function collectBinDirs(options = {}) {
+    const { env, homeDir, platform } = resolveOptions(options);
+    const dirs = new Set();
+    const addDir = (dir) => {
+        if (!dir)
+            return;
+        const resolved = expandHomePath(dir, homeDir);
+        if (!resolved)
+            return;
+        dirs.add(path.resolve(resolved));
+    };
+    const addPrefixBin = (prefix) => {
+        if (!prefix)
+            return;
+        const resolved = expandHomePath(prefix, homeDir);
+        if (!resolved)
+            return;
+        dirs.add(path.resolve(resolved, 'bin'));
+    };
+    addDir(env.PNPM_HOME);
+    addPrefixBin(env.NPM_CONFIG_PREFIX);
+    addPrefixBin(env.npm_config_prefix);
+    addDir(env.VOLTA_HOME ? path.join(env.VOLTA_HOME, 'bin') : null);
+    addDir(env.BUN_INSTALL ? path.join(env.BUN_INSTALL, 'bin') : null);
+    addPrefixBin(env.HOMEBREW_PREFIX);
+    addPrefixBin(env.BREW_PREFIX);
+    if (env.ASDF_DATA_DIR) {
+        addDir(path.join(env.ASDF_DATA_DIR, 'shims'));
+    }
+    if (platform === 'darwin') {
+        addDir('/opt/homebrew/bin');
+        addDir('/usr/local/bin');
+        addDir(path.join(homeDir, 'Library', 'pnpm'));
+    }
+    if (platform !== 'win32') {
+        addDir('/usr/local/bin');
+        addDir('/usr/bin');
+        addDir('/bin');
+        addDir(path.join(homeDir, '.local', 'bin'));
+        addDir(path.join(homeDir, 'bin'));
+        addDir(path.join(homeDir, '.npm-global', 'bin'));
+        addDir(path.join(homeDir, '.nvm', 'versions', 'node', 'current', 'bin'));
+        addDir(path.join(homeDir, '.asdf', 'shims'));
+        addDir(path.join(homeDir, '.nix-profile', 'bin'));
+    }
+    const pathDelimiter = platform === 'win32' ? ';' : ':';
+    const pathEntries = (env.PATH ?? '')
+        .split(pathDelimiter)
+        .map((entry) => entry.trim())
+        .filter(Boolean);
+    for (const entry of pathEntries) {
+        addDir(entry);
+    }
+    return Array.from(dirs);
+}
+export function expandCommandExtensions(command, options = {}) {
+    const env = options.env ?? process.env;
+    const platform = options.platform ?? process.platform;
+    if (platform !== 'win32')
+        return [command];
+    const extList = (env.PATHEXT ?? '.EXE;.CMD;.BAT')
+        .split(';')
+        .map((entry) => entry.trim())
+        .filter(Boolean);
+    return extList.map((ext) => `${command}${ext.toLowerCase()}`);
+}
+export function collectCommandCandidates(command, extraCandidates, options = {}) {
+    const resolvedOptions = resolveOptions(options);
+    const candidates = new Set();
+    const addCandidate = (value) => {
+        if (!value)
+            return;
+        const resolved = expandHomePath(value, resolvedOptions.homeDir);
+        candidates.add(resolved);
+    };
+    extraCandidates.forEach(addCandidate);
+    const binDirs = collectBinDirs(resolvedOptions);
+    const extensions = expandCommandExtensions(command, resolvedOptions);
+    for (const dir of binDirs) {
+        for (const extCommand of extensions) {
+            const candidate = path.join(dir, extCommand);
+            if (isExecutableCandidate(candidate, resolvedOptions.platform)) {
+                candidates.add(candidate);
+            }
+        }
+    }
+    candidates.add(command);
+    return Array.from(candidates);
+}
+export function resolveClaudeFallbackCommand(commandPath, options = {}) {
+    const resolvedOptions = resolveOptions(options);
+    if (!isBrokenClaudeWrapper(commandPath, resolvedOptions))
+        return null;
+    const excluded = new Set();
+    const addExcluded = (value) => {
+        if (!value)
+            return;
+        excluded.add(path.resolve(value));
+        try {
+            excluded.add(fsSync.realpathSync(value));
+        }
+        catch {
+            // ignore realpath errors
+        }
+    };
+    addExcluded(commandPath);
+    const candidates = [path.join(resolvedOptions.homeDir, '.claude', 'claude')];
+    for (const candidate of candidates) {
+        if (excluded.has(path.resolve(candidate)))
+            continue;
+        if (isExecutableCandidate(candidate, resolvedOptions.platform))
+            return candidate;
+    }
+    const extensions = expandCommandExtensions('claude', resolvedOptions);
+    for (const dir of collectBinDirs(resolvedOptions)) {
+        for (const extCommand of extensions) {
+            const candidate = path.join(dir, extCommand);
+            if (excluded.has(path.resolve(candidate)))
+                continue;
+            if (isExecutableCandidate(candidate, resolvedOptions.platform))
+                return candidate;
+        }
+    }
+    return null;
+}
+export function extractVersion(text) {
+    const normalized = text.trim();
+    if (!normalized)
+        return null;
+    const match = normalized.match(/v?(\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?)/);
+    if (match?.[1])
+        return match[1];
+    const fallback = normalized.match(/v?(\d+\.\d+)/);
+    if (fallback?.[1])
+        return `${fallback[1]}.0`;
+    return null;
+}
+export function compareVersions(a, b) {
+    const parse = (value) => {
+        const cleaned = value.replace(/^v/i, '');
+        const [main, pre] = cleaned.split('-', 2);
+        const parts = main.split('.').map((part) => Number.parseInt(part, 10));
+        if (parts.some((part) => Number.isNaN(part)))
+            return null;
+        return { parts, pre: pre ?? null };
+    };
+    const parsedA = parse(a);
+    const parsedB = parse(b);
+    if (!parsedA || !parsedB)
+        return 0;
+    const length = Math.max(parsedA.parts.length, parsedB.parts.length);
+    for (let i = 0; i < length; i += 1) {
+        const left = parsedA.parts[i] ?? 0;
+        const right = parsedB.parts[i] ?? 0;
+        if (left !== right)
+            return left > right ? 1 : -1;
+    }
+    if (parsedA.pre && !parsedB.pre)
+        return -1;
+    if (!parsedA.pre && parsedB.pre)
+        return 1;
+    if (parsedA.pre && parsedB.pre) {
+        if (parsedA.pre === parsedB.pre)
+            return 0;
+        return parsedA.pre > parsedB.pre ? 1 : -1;
+    }
+    return 0;
+}
+//# sourceMappingURL=cli-command-discovery.js.map

package/dist/cli-command-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-command-discovery.js","sourceRoot":"","sources":["../src/cli-command-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,MAAM,gCAAgC,GAAG,IAAI,CAAA;AAS7C,SAAS,cAAc,CAAC,UAAmC,EAAE;IAC3D,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;QAC/B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE;QACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAC9C,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,IAAI,gCAAgC;KACzF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,UAAkB,EAAE,CAAC,OAAO,EAAE;IAC1E,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,WAAmB,EACnB,UAAmC,EAAE;IAErC,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IAClE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACzC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,qBAAqB;YAAE,OAAO,IAAI,CAAA;QACpE,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QACpD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAClE,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAA;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,OAAO,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,WAAmB,EACnB,UAAmC,EAAE;IAErC,MAAM,MAAM,GAAG,0BAA0B,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IAC/D,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QACvC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,KAAK,CAAA;QAChC,IAAI,QAAQ,KAAK,OAAO;YAAE,OAAO,IAAI,CAAA;QACrC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACnD,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAAmC,EAAE;IAClE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IAC1D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAE9B,MAAM,MAAM,GAAG,CAAC,GAAmB,EAAE,EAAE;QACrC,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC7C,IAAI,CAAC,QAAQ;YAAE,OAAM;QACrB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;IAClC,CAAC,CAAA;IAED,MAAM,YAAY,GAAG,CAAC,MAAsB,EAAE,EAAE;QAC9C,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAChD,IAAI,CAAC,QAAQ;YAAE,OAAM;QACrB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;IACzC,CAAC,CAAA;IAED,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACrB,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IACnC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IACnC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAChE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAClE,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IACjC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IAC7B,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAA;IAC/C,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,mBAAmB,CAAC,CAAA;QAC3B,MAAM,CAAC,gBAAgB,CAAC,CAAA;QACxB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;IAC/C,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,CAAC,gBAAgB,CAAC,CAAA;QACxB,MAAM,CAAC,UAAU,CAAC,CAAA;QAClB,MAAM,CAAC,MAAM,CAAC,CAAA;QACd,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;QAC3C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;QACjC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAA;QAChD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAA;QACxE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;QAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,CAAA;IACnD,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAA;IACtD,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;SACjC,KAAK,CAAC,aAAa,CAAC;SACpB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAA;IAClB,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,CAAA;IACf,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,UAA6D,EAAE;IAE/D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAA;IACrD,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC;SAC9C,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAA;IAClB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;AAC/D,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAe,EACf,eAAyB,EACzB,UAAmC,EAAE;IAErC,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IAC/C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IAEpC,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,EAAE;QACrC,IAAI,CAAC,KAAK;YAAE,OAAM;QAClB,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,CAAA;QAC/D,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC1B,CAAC,CAAA;IAED,eAAe,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;IAErC,MAAM,OAAO,GAAG,cAAc,CAAC,eAAe,CAAC,CAAA;IAC/C,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;IACpE,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,KAAK,MAAM,UAAU,IAAI,UAAU,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;YAC5C,IAAI,qBAAqB,CAAC,SAAS,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/D,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAEvB,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,WAAmB,EACnB,UAAmC,EAAE;IAErC,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IAC/C,IAAI,CAAC,qBAAqB,CAAC,WAAW,EAAE,eAAe,CAAC;QAAE,OAAO,IAAI,CAAA;IAErE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,EAAE;QACpC,IAAI,CAAC,KAAK;YAAE,OAAM;QAClB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;QACjC,IAAI,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC,CAAA;IAED,WAAW,CAAC,WAAW,CAAC,CAAA;IAExB,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC5E,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAAE,SAAQ;QACnD,IAAI,qBAAqB,CAAC,SAAS,EAAE,eAAe,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAA;IAClF,CAAC;IAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;IACrE,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC;QAClD,KAAK,MAAM,UAAU,IAAI,UAAU,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;YAC5C,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAAE,SAAQ;YACnD,IAAI,qBAAqB,CAAC,SAAS,EAAE,eAAe,CAAC,QAAQ,CAAC;gBAAE,OAAO,SAAS,CAAA;QAClF,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC9B,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC1E,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAA;IAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IACjD,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;IAC5C,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;QACtE,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QACzD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,IAAI,EAAE,CAAA;IACpC,CAAC,CAAA;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACxB,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,CAAA;IAElC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAClD,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC,CAAA;IAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;QAAE,OAAO,CAAC,CAAA;IACzC,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;YAAE,OAAO,CAAC,CAAA;QACzC,OAAO,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3C,CAAC;IAED,OAAO,CAAC,CAAA;AACV,CAAC"}

package/dist/cli-env.d.ts

@@ -0,0 +1,7 @@
+import { type ParsedArgs } from './cli-args.js';
+export declare function applyOptionEnvOverrides(options: ParsedArgs['options'], env?: NodeJS.ProcessEnv): void;
+export declare function buildGatewayEnvOverrides(options: ParsedArgs['options']): NodeJS.ProcessEnv;
+export declare function normalizeEnvName(raw: string | undefined): string | null;
+export declare function parseBooleanEnv(value: string | undefined, fallback: boolean): boolean;
+export declare function parseNumberEnv(value: string | undefined, fallback: number): number;
+//# sourceMappingURL=cli-env.d.ts.map

package/dist/cli-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-env.d.ts","sourceRoot":"","sources":["../src/cli-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,eAAe,CAAA;AAIhE,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,EAC9B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,IAAI,CAaN;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,UAAU,CAuB1F;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAQvE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CAUrF;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKlF"}