@panorama-ai/gateway 2.29.14 → 2.30.181

package/dist/local-runtime/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/local-runtime/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/local-runtime/types.ts"],"names":[],"mappings":""}

package/dist/managed-runtime/config.d.ts

@@ -0,0 +1,20 @@
+export type ManagedGatewayRuntimeConfig = {
+    agentId: string;
+    hostId: string;
+    hostAttemptGeneration: number;
+    runtimeId: string;
+    supabaseUrl: string;
+    supabaseAnonKey: string;
+    hostControlUrl: string;
+    hostControlToken: string;
+    toolExecutionUrl: string;
+    toolExecutionToken: string;
+    retryBackoffMs: number;
+    controlTimeoutMs: number;
+    execTimeoutMs: number;
+    outputCaptureBytes: number;
+    heartbeatIntervalMs: number;
+    maxConsecutiveHeartbeatFailures: number;
+};
+export declare function resolveManagedGatewayRuntimeConfig(env?: NodeJS.ProcessEnv): ManagedGatewayRuntimeConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/managed-runtime/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/managed-runtime/config.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,qBAAqB,EAAE,MAAM,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,MAAM,CAAA;IACxB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,aAAa,EAAE,MAAM,CAAA;IACrB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,mBAAmB,EAAE,MAAM,CAAA;IAC3B,+BAA+B,EAAE,MAAM,CAAA;CACxC,CAAA;AAiCD,wBAAgB,kCAAkC,CAChD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,2BAA2B,CAsE7B"}

package/dist/managed-runtime/config.js

@@ -0,0 +1,80 @@
+import { buildLinuxHostControlUrl } from '@panorama/shared/linux-host-control/contract';
+import { buildToolExecutionUrl } from '@panorama/shared/tools/execution-contract';
+import { hostname } from 'node:os';
+import process from 'node:process';
+const DEFAULT_RETRY_BACKOFF_MS = 2_000;
+const DEFAULT_CONTROL_TIMEOUT_MS = 30_000;
+const DEFAULT_EXEC_TIMEOUT_MS = 300_000;
+const DEFAULT_HEARTBEAT_INTERVAL_MS = 15_000;
+const DEFAULT_MAX_CONSECUTIVE_HEARTBEAT_FAILURES = 3;
+const DEFAULT_OUTPUT_CAPTURE_BYTES = 5_000_000;
+function requireEnv(name, env = process.env) {
+    const value = env[name]?.trim();
+    if (!value) {
+        throw new Error(`${name} is required`);
+    }
+    return value;
+}
+function readPositiveInt(name, fallback, env = process.env) {
+    const raw = env[name]?.trim();
+    if (!raw)
+        return fallback;
+    const parsed = Number(raw);
+    if (!Number.isFinite(parsed) || parsed <= 0) {
+        throw new Error(`${name} must be a positive number`);
+    }
+    return Math.floor(parsed);
+}
+function requirePositiveInt(name, env = process.env) {
+    const raw = requireEnv(name, env);
+    const parsed = Number(raw);
+    if (!Number.isFinite(parsed) || parsed <= 0) {
+        throw new Error(`${name} must be a positive number`);
+    }
+    return Math.floor(parsed);
+}
+export function resolveManagedGatewayRuntimeConfig(env = process.env) {
+    const agentId = requireEnv('PANORAMA_AGENT_ID', env);
+    const hostId = requireEnv('PANORAMA_LINUX_HOST_ID', env);
+    const hostAttemptGeneration = requirePositiveInt('PANORAMA_LINUX_HOST_ATTEMPT_GENERATION', env);
+    const supabaseUrl = env.PANORAMA_SUPABASE_URL?.trim() || env.SUPABASE_URL?.trim() || null;
+    const supabaseAnonKey = env.PANORAMA_SUPABASE_ANON_KEY?.trim() ||
+        env.SUPABASE_ANON_KEY?.trim() ||
+        env.SUPABASE_PUBLISHABLE_KEY?.trim() ||
+        null;
+    const hostControlUrl = env.PANORAMA_LINUX_HOST_CONTROL_URL?.trim() ||
+        (supabaseUrl ? buildLinuxHostControlUrl(supabaseUrl) : null);
+    const toolExecutionUrl = env.PANORAMA_TOOL_EXECUTION_URL?.trim() ||
+        (supabaseUrl ? buildToolExecutionUrl(supabaseUrl) : null);
+    if (!hostControlUrl) {
+        throw new Error('PANORAMA_LINUX_HOST_CONTROL_URL is required');
+    }
+    if (!toolExecutionUrl) {
+        throw new Error('PANORAMA_TOOL_EXECUTION_URL is required');
+    }
+    if (!supabaseUrl) {
+        throw new Error('PANORAMA_SUPABASE_URL or SUPABASE_URL is required');
+    }
+    if (!supabaseAnonKey) {
+        throw new Error('PANORAMA_SUPABASE_ANON_KEY, SUPABASE_ANON_KEY, or SUPABASE_PUBLISHABLE_KEY is required');
+    }
+    return {
+        agentId,
+        hostId,
+        hostAttemptGeneration,
+        runtimeId: env.PANORAMA_MANAGED_RUNTIME_ID?.trim() || `${hostname()}:${process.pid}`,
+        supabaseUrl,
+        supabaseAnonKey,
+        hostControlUrl,
+        hostControlToken: requireEnv('PANORAMA_LINUX_HOST_CONTROL_TOKEN', env),
+        toolExecutionUrl,
+        toolExecutionToken: requireEnv('PANORAMA_TOOL_EXECUTION_TOKEN', env),
+        retryBackoffMs: readPositiveInt('PANORAMA_MANAGED_RUNTIME_RETRY_BACKOFF_MS', DEFAULT_RETRY_BACKOFF_MS, env),
+        controlTimeoutMs: readPositiveInt('PANORAMA_MANAGED_RUNTIME_CONTROL_TIMEOUT_MS', DEFAULT_CONTROL_TIMEOUT_MS, env),
+        execTimeoutMs: readPositiveInt('PANORAMA_AGENT_EXEC_TIMEOUT_MS', DEFAULT_EXEC_TIMEOUT_MS, env),
+        outputCaptureBytes: readPositiveInt('PANORAMA_MANAGED_RUNTIME_OUTPUT_CAPTURE_BYTES', DEFAULT_OUTPUT_CAPTURE_BYTES, env),
+        heartbeatIntervalMs: readPositiveInt('PANORAMA_MANAGED_RUNTIME_HEARTBEAT_INTERVAL_MS', DEFAULT_HEARTBEAT_INTERVAL_MS, env),
+        maxConsecutiveHeartbeatFailures: readPositiveInt('PANORAMA_MANAGED_RUNTIME_MAX_CONSECUTIVE_HEARTBEAT_FAILURES', DEFAULT_MAX_CONSECUTIVE_HEARTBEAT_FAILURES, env),
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/managed-runtime/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/managed-runtime/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAA;AACvF,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAA;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAClC,OAAO,OAAO,MAAM,cAAc,CAAA;AAElC,MAAM,wBAAwB,GAAG,KAAK,CAAA;AACtC,MAAM,0BAA0B,GAAG,MAAM,CAAA;AACzC,MAAM,uBAAuB,GAAG,OAAO,CAAA;AACvC,MAAM,6BAA6B,GAAG,MAAM,CAAA;AAC5C,MAAM,0CAA0C,GAAG,CAAC,CAAA;AACpD,MAAM,4BAA4B,GAAG,SAAS,CAAA;AAqB9C,SAAS,UAAU,CAAC,IAAY,EAAE,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAA;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,CAAC,CAAA;IACxC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,QAAgB,EAChB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAA;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAA;IACzB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;AAC3B,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC5E,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,UAAU,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAA;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAA;IACxD,MAAM,qBAAqB,GAAG,kBAAkB,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAA;IAC/F,MAAM,WAAW,GAAG,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,IAAI,CAAA;IACzF,MAAM,eAAe,GACnB,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE;QACtC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE;QAC7B,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE;QACpC,IAAI,CAAA;IACN,MAAM,cAAc,GAClB,GAAG,CAAC,+BAA+B,EAAE,IAAI,EAAE;QAC3C,CAAC,WAAW,CAAC,CAAC,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC9D,MAAM,gBAAgB,GACpB,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE;QACvC,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAE3D,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAChE,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC5D,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,MAAM;QACN,qBAAqB;QACrB,SAAS,EAAE,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,IAAI,GAAG,QAAQ,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE;QACpF,WAAW;QACX,eAAe;QACf,cAAc;QACd,gBAAgB,EAAE,UAAU,CAAC,mCAAmC,EAAE,GAAG,CAAC;QACtE,gBAAgB;QAChB,kBAAkB,EAAE,UAAU,CAAC,+BAA+B,EAAE,GAAG,CAAC;QACpE,cAAc,EAAE,eAAe,CAC7B,2CAA2C,EAC3C,wBAAwB,EACxB,GAAG,CACJ;QACD,gBAAgB,EAAE,eAAe,CAC/B,6CAA6C,EAC7C,0BAA0B,EAC1B,GAAG,CACJ;QACD,aAAa,EAAE,eAAe,CAAC,gCAAgC,EAAE,uBAAuB,EAAE,GAAG,CAAC;QAC9F,kBAAkB,EAAE,eAAe,CACjC,+CAA+C,EAC/C,4BAA4B,EAC5B,GAAG,CACJ;QACD,mBAAmB,EAAE,eAAe,CAClC,gDAAgD,EAChD,6BAA6B,EAC7B,GAAG,CACJ;QACD,+BAA+B,EAAE,eAAe,CAC9C,6DAA6D,EAC7D,0CAA0C,EAC1C,GAAG,CACJ;KACF,CAAA;AACH,CAAC"}

package/dist/managed-runtime/control-client.d.ts

@@ -0,0 +1,66 @@
+import { type LinuxHostSessionExchangeResponse } from '@panorama/shared/linux-host-session/contract';
+import type { LinuxHostClaimedExecution, LinuxHostControlHostEnvelope, LinuxHostControlRequest, LinuxHostControlResponse } from '@panorama/shared/linux-host-control/contract';
+export declare function postLinuxHostControlRequest(params: {
+    controlUrl: string;
+    controlToken: string;
+    body: LinuxHostControlRequest;
+    timeoutMs: number;
+    signal?: AbortSignal;
+}): Promise<LinuxHostControlResponse>;
+export declare function exchangeLinuxHostSession(params: {
+    supabaseUrl: string;
+    supabaseAnonKey: string;
+    hostControlToken: string;
+    timeoutMs: number;
+}): Promise<LinuxHostSessionExchangeResponse>;
+export declare function heartbeatLinuxHost(params: {
+    controlUrl: string;
+    controlToken: string;
+    runtimeId: string;
+    controlTimeoutMs: number;
+}): Promise<LinuxHostControlHostEnvelope>;
+export declare function dispatchLinuxExecution(params: {
+    controlUrl: string;
+    controlToken: string;
+    runtimeId: string;
+    claimToken: string;
+    controlTimeoutMs: number;
+}): Promise<LinuxHostClaimedExecution | null>;
+export declare function startLinuxExecution(params: {
+    controlUrl: string;
+    controlToken: string;
+    runtimeId: string;
+    executionId: string;
+    claimToken: string;
+    controlTimeoutMs: number;
+}): Promise<LinuxHostClaimedExecution | null>;
+export declare function completeLinuxExecution(params: {
+    controlUrl: string;
+    controlToken: string;
+    runtimeId: string;
+    executionId: string;
+    claimToken: string;
+    executionStatus: 'succeeded' | 'failed' | 'timed_out' | 'cancelled';
+    exitCode?: number | null;
+    durationMs?: number | null;
+    stdout?: string | null;
+    stderr?: string | null;
+    error?: string | null;
+    executionMetadata?: Record<string, unknown> | null;
+    stepStatus?: 'completed' | 'failed' | 'skipped' | 'uncertain' | null;
+    stepResult?: Record<string, unknown> | null;
+    stepError?: string | null;
+    stepUncertaintyReason?: string | null;
+    controlSignal?: 'continue' | 'pause' | 'stop' | null;
+    controlTimeoutMs: number;
+}): Promise<LinuxHostControlResponse['completion']>;
+export declare function reconcileExecutionLifecycle(params: {
+    controlUrl: string;
+    controlToken: string;
+    runtimeId: string;
+    controlTimeoutMs: number;
+}): Promise<{
+    recoveredCount: number;
+    requeuedCount: number;
+}>;
+//# sourceMappingURL=control-client.d.ts.map

package/dist/managed-runtime/control-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-client.d.ts","sourceRoot":"","sources":["../../src/managed-runtime/control-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,8CAA8C,CAAA;AACrD,OAAO,KAAK,EACV,yBAAyB,EACzB,4BAA4B,EAC5B,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,8CAA8C,CAAA;AAGrD,wBAAsB,2BAA2B,CAAC,MAAM,EAAE;IACxD,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,uBAAuB,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAmCpC;AAED,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAqC5C;AAED,wBAAsB,kBAAkB,CAAC,MAAM,EAAE;IAC/C,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAYxC;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAa5C;AAED,wBAAsB,mBAAmB,CAAC,MAAM,EAAE;IAChD,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAc5C;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAA;IACnE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAClD,UAAU,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,IAAI,CAAA;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAC3C,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,aAAa,CAAC,EAAE,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,IAAI,CAAA;IACpD,gBAAgB,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,CA0BlD;AAED,wBAAsB,2BAA2B,CAAC,MAAM,EAAE;IACxD,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;CACzB,GAAG,OAAO,CAAC;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC,CAe7D"}

package/dist/managed-runtime/control-client.js

@@ -0,0 +1,142 @@
+import { buildLinuxHostSessionExchangeUrl, } from '@panorama/shared/linux-host-session/contract';
+import { withAbortTimeout } from './runtime-utils.js';
+export async function postLinuxHostControlRequest(params) {
+    return await withAbortTimeout(params.timeoutMs, `Linux host control request timed out after ${params.timeoutMs}ms`, async (signal) => {
+        const response = await fetch(params.controlUrl, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${params.controlToken}`,
+                'Content-Type': 'application/json',
+                'X-Request-Source': 'gateway_managed',
+            },
+            body: JSON.stringify(params.body),
+            signal,
+        });
+        let payload;
+        try {
+            payload = await response.json();
+        }
+        catch {
+            payload = null;
+        }
+        if (!response.ok) {
+            const message = payload && typeof payload === 'object' && 'error' in payload
+                ? String(payload.error ?? 'Linux host control request failed')
+                : `Linux host control request failed with status ${response.status}`;
+            throw new Error(message);
+        }
+        return payload;
+    }, params.signal);
+}
+export async function exchangeLinuxHostSession(params) {
+    return await withAbortTimeout(params.timeoutMs, `Linux host session exchange timed out after ${params.timeoutMs}ms`, async (signal) => {
+        const response = await fetch(buildLinuxHostSessionExchangeUrl(params.supabaseUrl), {
+            method: 'POST',
+            headers: {
+                apikey: params.supabaseAnonKey,
+                Authorization: `Bearer ${params.supabaseAnonKey}`,
+                'Content-Type': 'application/json',
+                'X-Request-Source': 'gateway_managed',
+            },
+            body: JSON.stringify({
+                host_control_token: params.hostControlToken,
+            }),
+            signal,
+        });
+        let payload;
+        try {
+            payload = await response.json();
+        }
+        catch {
+            payload = null;
+        }
+        if (!response.ok) {
+            const message = payload && typeof payload === 'object' && 'error' in payload
+                ? String(payload.error ?? 'Linux host session exchange failed')
+                : `Linux host session exchange failed with status ${response.status}`;
+            throw new Error(message);
+        }
+        return payload;
+    });
+}
+export async function heartbeatLinuxHost(params) {
+    const response = await postLinuxHostControlRequest({
+        controlUrl: params.controlUrl,
+        controlToken: params.controlToken,
+        timeoutMs: params.controlTimeoutMs,
+        body: {
+            action: 'heartbeat',
+            runtime_id: params.runtimeId,
+        },
+    });
+    return response.host;
+}
+export async function dispatchLinuxExecution(params) {
+    const response = await postLinuxHostControlRequest({
+        controlUrl: params.controlUrl,
+        controlToken: params.controlToken,
+        timeoutMs: params.controlTimeoutMs,
+        body: {
+            action: 'claim_execution',
+            runtime_id: params.runtimeId,
+            claim_token: params.claimToken,
+        },
+    });
+    return response.execution ?? null;
+}
+export async function startLinuxExecution(params) {
+    const response = await postLinuxHostControlRequest({
+        controlUrl: params.controlUrl,
+        controlToken: params.controlToken,
+        timeoutMs: params.controlTimeoutMs,
+        body: {
+            action: 'start_execution',
+            runtime_id: params.runtimeId,
+            execution_id: params.executionId,
+            claim_token: params.claimToken,
+        },
+    });
+    return response.execution ?? null;
+}
+export async function completeLinuxExecution(params) {
+    const response = await postLinuxHostControlRequest({
+        controlUrl: params.controlUrl,
+        controlToken: params.controlToken,
+        timeoutMs: params.controlTimeoutMs,
+        body: {
+            action: 'complete_execution',
+            runtime_id: params.runtimeId,
+            execution_id: params.executionId,
+            claim_token: params.claimToken,
+            execution_status: params.executionStatus,
+            exit_code: params.exitCode ?? null,
+            duration_ms: params.durationMs ?? null,
+            stdout: params.stdout ?? null,
+            stderr: params.stderr ?? null,
+            error: params.error ?? null,
+            execution_metadata: params.executionMetadata ?? undefined,
+            step_status: params.stepStatus ?? null,
+            step_result: params.stepResult ?? undefined,
+            step_error: params.stepError ?? null,
+            step_uncertainty_reason: params.stepUncertaintyReason ?? null,
+            control_signal: params.controlSignal ?? null,
+        },
+    });
+    return response.completion ?? null;
+}
+export async function reconcileExecutionLifecycle(params) {
+    const response = await postLinuxHostControlRequest({
+        controlUrl: params.controlUrl,
+        controlToken: params.controlToken,
+        timeoutMs: params.controlTimeoutMs,
+        body: {
+            action: 'reconcile_execution_lifecycle',
+            runtime_id: params.runtimeId,
+        },
+    });
+    return {
+        recoveredCount: response.recovered_count ?? 0,
+        requeuedCount: response.requeued_count ?? 0,
+    };
+}
+//# sourceMappingURL=control-client.js.map

package/dist/managed-runtime/control-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-client.js","sourceRoot":"","sources":["../../src/managed-runtime/control-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gCAAgC,GAEjC,MAAM,8CAA8C,CAAA;AAOrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAErD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,MAMjD;IACC,OAAO,MAAM,gBAAgB,CAC3B,MAAM,CAAC,SAAS,EAChB,8CAA8C,MAAM,CAAC,SAAS,IAAI,EAClE,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,CAAC,YAAY,EAAE;gBAC9C,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,iBAAiB;aACtC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;YACjC,MAAM;SACP,CAAC,CAAA;QAEF,IAAI,OAAgB,CAAA;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,IAAI,CAAA;QAChB,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GACX,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,OAAO;gBAC1D,CAAC,CAAC,MAAM,CAAE,OAA8B,CAAC,KAAK,IAAI,mCAAmC,CAAC;gBACtF,CAAC,CAAC,iDAAiD,QAAQ,CAAC,MAAM,EAAE,CAAA;YACxE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;QAC1B,CAAC;QAED,OAAO,OAAmC,CAAA;IAC5C,CAAC,EACD,MAAM,CAAC,MAAM,CACd,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAK9C;IACC,OAAO,MAAM,gBAAgB,CAC3B,MAAM,CAAC,SAAS,EAChB,+CAA+C,MAAM,CAAC,SAAS,IAAI,EACnE,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gCAAgC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE;YACjF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,MAAM,CAAC,eAAe;gBAC9B,aAAa,EAAE,UAAU,MAAM,CAAC,eAAe,EAAE;gBACjD,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,iBAAiB;aACtC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,kBAAkB,EAAE,MAAM,CAAC,gBAAgB;aAC5C,CAAC;YACF,MAAM;SACP,CAAC,CAAA;QAEF,IAAI,OAAgB,CAAA;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,IAAI,CAAA;QAChB,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GACX,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,OAAO;gBAC1D,CAAC,CAAC,MAAM,CAAE,OAA8B,CAAC,KAAK,IAAI,oCAAoC,CAAC;gBACvF,CAAC,CAAC,kDAAkD,QAAQ,CAAC,MAAM,EAAE,CAAA;YACzE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;QAC1B,CAAC;QAED,OAAO,OAA2C,CAAA;IACpD,CAAC,CACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAKxC;IACC,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC;QACjD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,gBAAgB;QAClC,IAAI,EAAE;YACJ,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,MAAM,CAAC,SAAS;SAC7B;KACF,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAC,IAAI,CAAA;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAM5C;IACC,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC;QACjD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,gBAAgB;QAClC,IAAI,EAAE;YACJ,MAAM,EAAE,iBAAiB;YACzB,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,WAAW,EAAE,MAAM,CAAC,UAAU;SAC/B;KACF,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAA;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAOzC;IACC,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC;QACjD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,gBAAgB;QAClC,IAAI,EAAE;YACJ,MAAM,EAAE,iBAAiB;YACzB,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,WAAW,EAAE,MAAM,CAAC,UAAU;SAC/B;KACF,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAA;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAmB5C;IACC,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC;QACjD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,gBAAgB;QAClC,IAAI,EAAE;YACJ,MAAM,EAAE,oBAAoB;YAC5B,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,gBAAgB,EAAE,MAAM,CAAC,eAAe;YACxC,SAAS,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;YAClC,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;YACtC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;YAC7B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;YAC3B,kBAAkB,EAAE,MAAM,CAAC,iBAAiB,IAAI,SAAS;YACzD,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;YACtC,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS;YAC3C,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;YACpC,uBAAuB,EAAE,MAAM,CAAC,qBAAqB,IAAI,IAAI;YAC7D,cAAc,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI;SAC7C;KACF,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAA;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,MAKjD;IACC,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC;QACjD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,gBAAgB;QAClC,IAAI,EAAE;YACJ,MAAM,EAAE,+BAA+B;YACvC,UAAU,EAAE,MAAM,CAAC,SAAS;SAC7B;KACF,CAAC,CAAA;IAEF,OAAO;QACL,cAAc,EAAE,QAAQ,CAAC,eAAe,IAAI,CAAC;QAC7C,aAAa,EAAE,QAAQ,CAAC,cAAc,IAAI,CAAC;KAC5C,CAAA;AACH,CAAC"}

package/dist/managed-runtime/dependencies.d.ts

@@ -0,0 +1,17 @@
+import { completeLinuxExecution, dispatchLinuxExecution, heartbeatLinuxHost, reconcileExecutionLifecycle, startLinuxExecution } from './control-client.js';
+import { createManagedRealtimeClient, startManagedRealtimeWakeLoop } from './realtime.js';
+import { executeCommand } from './shell-execution.js';
+export type ResolvedManagedGatewayRuntimeDependencies = {
+    heartbeatLinuxHost: typeof heartbeatLinuxHost;
+    dispatchLinuxExecution: typeof dispatchLinuxExecution;
+    startLinuxExecution: typeof startLinuxExecution;
+    completeLinuxExecution: typeof completeLinuxExecution;
+    reconcileExecutionLifecycle: typeof reconcileExecutionLifecycle;
+    executeCommand: typeof executeCommand;
+    createRealtimeClient: typeof createManagedRealtimeClient;
+    startRealtimeWakeLoop: typeof startManagedRealtimeWakeLoop;
+    registerSignalHandlers: (onSignal: (signal: NodeJS.Signals) => void) => () => void;
+};
+export type ManagedGatewayRuntimeDependencies = Partial<ResolvedManagedGatewayRuntimeDependencies>;
+export declare function resolveManagedGatewayRuntimeDependencies(dependencies?: ManagedGatewayRuntimeDependencies): ResolvedManagedGatewayRuntimeDependencies;
+//# sourceMappingURL=dependencies.d.ts.map

package/dist/managed-runtime/dependencies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependencies.d.ts","sourceRoot":"","sources":["../../src/managed-runtime/dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,2BAA2B,EAC3B,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AACzF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAErD,MAAM,MAAM,yCAAyC,GAAG;IACtD,kBAAkB,EAAE,OAAO,kBAAkB,CAAA;IAC7C,sBAAsB,EAAE,OAAO,sBAAsB,CAAA;IACrD,mBAAmB,EAAE,OAAO,mBAAmB,CAAA;IAC/C,sBAAsB,EAAE,OAAO,sBAAsB,CAAA;IACrD,2BAA2B,EAAE,OAAO,2BAA2B,CAAA;IAC/D,cAAc,EAAE,OAAO,cAAc,CAAA;IACrC,oBAAoB,EAAE,OAAO,2BAA2B,CAAA;IACxD,qBAAqB,EAAE,OAAO,4BAA4B,CAAA;IAC1D,sBAAsB,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,KAAK,MAAM,IAAI,CAAA;CACnF,CAAA;AAED,MAAM,MAAM,iCAAiC,GAAG,OAAO,CAAC,yCAAyC,CAAC,CAAA;AAqBlG,wBAAgB,wCAAwC,CACtD,YAAY,GAAE,iCAAsC,GACnD,yCAAyC,CAK3C"}

package/dist/managed-runtime/dependencies.js

@@ -0,0 +1,28 @@
+import { completeLinuxExecution, dispatchLinuxExecution, heartbeatLinuxHost, reconcileExecutionLifecycle, startLinuxExecution, } from './control-client.js';
+import { createManagedRealtimeClient, startManagedRealtimeWakeLoop } from './realtime.js';
+import { executeCommand } from './shell-execution.js';
+const defaultManagedGatewayRuntimeDependencies = {
+    heartbeatLinuxHost,
+    dispatchLinuxExecution,
+    startLinuxExecution,
+    completeLinuxExecution,
+    reconcileExecutionLifecycle,
+    executeCommand,
+    createRealtimeClient: createManagedRealtimeClient,
+    startRealtimeWakeLoop: startManagedRealtimeWakeLoop,
+    registerSignalHandlers(onSignal) {
+        process.once('SIGINT', onSignal);
+        process.once('SIGTERM', onSignal);
+        return () => {
+            process.off('SIGINT', onSignal);
+            process.off('SIGTERM', onSignal);
+        };
+    },
+};
+export function resolveManagedGatewayRuntimeDependencies(dependencies = {}) {
+    return {
+        ...defaultManagedGatewayRuntimeDependencies,
+        ...dependencies,
+    };
+}
+//# sourceMappingURL=dependencies.js.map

package/dist/managed-runtime/dependencies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependencies.js","sourceRoot":"","sources":["../../src/managed-runtime/dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AACzF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAgBrD,MAAM,wCAAwC,GAA8C;IAC1F,kBAAkB;IAClB,sBAAsB;IACtB,mBAAmB;IACnB,sBAAsB;IACtB,2BAA2B;IAC3B,cAAc;IACd,oBAAoB,EAAE,2BAA2B;IACjD,qBAAqB,EAAE,4BAA4B;IACnD,sBAAsB,CAAC,QAAQ;QAC7B,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAChC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QACjC,OAAO,GAAG,EAAE;YACV,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;YAC/B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QAClC,CAAC,CAAA;IACH,CAAC;CACF,CAAA;AAED,MAAM,UAAU,wCAAwC,CACtD,eAAkD,EAAE;IAEpD,OAAO;QACL,GAAG,wCAAwC;QAC3C,GAAG,YAAY;KAChB,CAAA;AACH,CAAC"}

package/dist/managed-runtime/execution-dispatcher.d.ts

@@ -0,0 +1,25 @@
+import type { ControlSignal } from '@panorama/shared/control-signals';
+import type { LinuxHostClaimedExecution } from '@panorama/shared/linux-host-control/contract';
+import type { ManagedGatewayRuntimeConfig } from './config.js';
+import type { completeLinuxExecution, startLinuxExecution } from './control-client.js';
+import { executeCommand, type CommandExecutionResult } from './shell-execution.js';
+import { type LinuxExecutionCompletion } from './step-result.js';
+export type ManagedExecutionOutcome = {
+    reconciliationRequired: boolean;
+    wakeReason?: string;
+};
+export interface ExecuteManagedLinuxExecutionDependencies {
+    startLinuxExecution: typeof startLinuxExecution;
+    completeLinuxExecution: typeof completeLinuxExecution;
+    executeCommand: typeof executeCommand;
+}
+export declare function resolveLinuxExecutionCompletion(result: CommandExecutionResult, controlSignal: ControlSignal | null): LinuxExecutionCompletion;
+export declare function executeManagedLinuxExecution(params: {
+    config: ManagedGatewayRuntimeConfig;
+    execution: LinuxHostClaimedExecution;
+    registerCancellation: (cancel: (() => void) | null) => void;
+    onExecutionStarted?: (executionId: string) => void;
+    onExecutionFinished?: () => void;
+    dependencies: ExecuteManagedLinuxExecutionDependencies;
+}): Promise<ManagedExecutionOutcome>;
+//# sourceMappingURL=execution-dispatcher.d.ts.map

package/dist/managed-runtime/execution-dispatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-dispatcher.d.ts","sourceRoot":"","sources":["../../src/managed-runtime/execution-dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAA;AACrE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAA;AAE7F,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAA;AAC9D,OAAO,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACtF,OAAO,EAGL,cAAc,EAEd,KAAK,sBAAsB,EAC5B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAIL,KAAK,wBAAwB,EAC9B,MAAM,kBAAkB,CAAA;AAGzB,MAAM,MAAM,uBAAuB,GAAG;IACpC,sBAAsB,EAAE,OAAO,CAAA;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,MAAM,WAAW,wCAAwC;IACvD,mBAAmB,EAAE,OAAO,mBAAmB,CAAA;IAC/C,sBAAsB,EAAE,OAAO,sBAAsB,CAAA;IACrD,cAAc,EAAE,OAAO,cAAc,CAAA;CACtC;AAED,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,sBAAsB,EAC9B,aAAa,EAAE,aAAa,GAAG,IAAI,GAClC,wBAAwB,CAiC1B;AAED,wBAAsB,4BAA4B,CAAC,MAAM,EAAE;IACzD,MAAM,EAAE,2BAA2B,CAAA;IACnC,SAAS,EAAE,yBAAyB,CAAA;IACpC,oBAAoB,EAAE,CAAC,MAAM,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,KAAK,IAAI,CAAA;IAC3D,kBAAkB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,IAAI,CAAA;IAClD,mBAAmB,CAAC,EAAE,MAAM,IAAI,CAAA;IAChC,YAAY,EAAE,wCAAwC,CAAA;CACvD,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAqInC"}

package/dist/managed-runtime/execution-dispatcher.js

@@ -0,0 +1,155 @@
+import process from 'node:process';
+import { buildControlSignalPath, buildManagedShellExecutionEnv, readCommandControlSignal, } from './shell-execution.js';
+import { buildLinuxStepResultPayload, buildOutputCaptureMetadata, buildPreview, } from './step-result.js';
+import { normalizeRecord, MANAGED_GATEWAY_LOG_PREFIX } from './runtime-utils.js';
+export function resolveLinuxExecutionCompletion(result, controlSignal) {
+    if (result.status === 'succeeded') {
+        return {
+            stepStatus: 'completed',
+            toolCallStatus: 'completed',
+            controlSignal: controlSignal?.nextAction ?? 'continue',
+            pauseDuration: controlSignal?.nextAction === 'pause' ? controlSignal.pauseDuration : undefined,
+        };
+    }
+    if (result.status === 'failed') {
+        return {
+            stepStatus: 'failed',
+            toolCallStatus: 'failed',
+            controlSignal: 'continue',
+        };
+    }
+    if (result.status === 'cancelled') {
+        return {
+            stepStatus: 'uncertain',
+            toolCallStatus: 'failed',
+            controlSignal: 'stop',
+            uncertaintyReason: 'linux_execution_cancelled_after_start',
+        };
+    }
+    return {
+        stepStatus: 'uncertain',
+        toolCallStatus: 'failed',
+        controlSignal: 'stop',
+        uncertaintyReason: 'linux_execution_timed_out_after_start',
+    };
+}
+export async function executeManagedLinuxExecution(params) {
+    const { config } = params;
+    const { dependencies } = params;
+    const claimToken = params.execution.claim_token;
+    if (!claimToken) {
+        throw new Error(`Managed execution ${params.execution.id} is missing claim token`);
+    }
+    const startedExecution = await dependencies.startLinuxExecution({
+        controlUrl: config.hostControlUrl,
+        controlToken: config.hostControlToken,
+        runtimeId: config.runtimeId,
+        executionId: params.execution.id,
+        claimToken,
+        controlTimeoutMs: config.controlTimeoutMs,
+    });
+    if (!startedExecution?.id) {
+        console.warn(`${MANAGED_GATEWAY_LOG_PREFIX} managed execution disappeared before start acknowledgement`, {
+            executionId: params.execution.id,
+        });
+        return {
+            reconciliationRequired: true,
+            wakeReason: 'start_ack_missing',
+        };
+    }
+    const command = startedExecution.command;
+    const controlSignalPath = buildControlSignalPath(startedExecution.id);
+    params.onExecutionStarted?.(startedExecution.id);
+    let result;
+    try {
+        result = await dependencies.executeCommand(command, config.execTimeoutMs, {
+            env: buildManagedShellExecutionEnv({
+                baseEnv: process.env,
+                agentId: config.agentId,
+                cycleId: startedExecution.cycle_id,
+                toolExecutionUrl: config.toolExecutionUrl,
+                toolExecutionToken: config.toolExecutionToken,
+                controlSignalPath,
+            }),
+            outputCaptureBytes: config.outputCaptureBytes,
+            registerCancellation: (cancel) => {
+                params.registerCancellation(cancel);
+            },
+        });
+    }
+    finally {
+        params.registerCancellation(null);
+        params.onExecutionFinished?.();
+    }
+    const controlSignal = await readCommandControlSignal(controlSignalPath);
+    const stdoutPreview = buildPreview(result.stdout);
+    const stderrPreview = buildPreview(result.stderr);
+    const stdoutCaptureMetadata = buildOutputCaptureMetadata('stdout', result);
+    const stderrCaptureMetadata = buildOutputCaptureMetadata('stderr', result);
+    const executionCompletion = resolveLinuxExecutionCompletion(result, controlSignal);
+    const stepResult = buildLinuxStepResultPayload({
+        executionId: startedExecution.id,
+        command,
+        result,
+        completion: executionCompletion,
+        executionMetadata: startedExecution.metadata,
+    });
+    const completion = await dependencies.completeLinuxExecution({
+        controlUrl: config.hostControlUrl,
+        controlToken: config.hostControlToken,
+        runtimeId: config.runtimeId,
+        executionId: startedExecution.id,
+        claimToken,
+        executionStatus: result.status,
+        exitCode: result.exitCode,
+        durationMs: result.durationMs,
+        stdout: result.stdout,
+        stderr: result.stderr,
+        error: result.error,
+        executionMetadata: {
+            ...normalizeRecord(startedExecution.metadata),
+            runtime_id: config.runtimeId,
+            claim_token: claimToken,
+            started_by_gateway_mode: 'managed',
+            stdout_preview_truncated: stdoutPreview.truncated,
+            stderr_preview_truncated: stderrPreview.truncated,
+            ...stdoutCaptureMetadata,
+            ...stderrCaptureMetadata,
+        },
+        stepStatus: executionCompletion.stepStatus,
+        stepResult,
+        stepError: result.error,
+        stepUncertaintyReason: executionCompletion.uncertaintyReason ?? null,
+        controlSignal: executionCompletion.controlSignal,
+        controlTimeoutMs: config.controlTimeoutMs,
+    });
+    if (!completion?.run_id) {
+        console.warn(`${MANAGED_GATEWAY_LOG_PREFIX} execution was no longer active for this gateway when finalizing step; skipping follow-up`, {
+            executionId: startedExecution.id,
+            runId: completion?.run_id ?? null,
+            stepUpdated: completion?.step_updated ?? null,
+        });
+        return {
+            reconciliationRequired: true,
+            wakeReason: 'completion_followup_reconcile',
+        };
+    }
+    if (completion.step_updated === false) {
+        console.warn(`${MANAGED_GATEWAY_LOG_PREFIX} execution completed but the linked step was not updated; control plane recovery was queued`, {
+            executionId: startedExecution.id,
+            runId: completion.run_id,
+            stepUpdated: completion.step_updated,
+        });
+        return {
+            reconciliationRequired: true,
+            wakeReason: 'completion_step_reconcile',
+        };
+    }
+    console.log(`${MANAGED_GATEWAY_LOG_PREFIX} completed managed command`, {
+        executionId: startedExecution.id,
+        status: result.status,
+        runId: completion.run_id,
+    });
+    return { reconciliationRequired: false };
+}
+//# sourceMappingURL=execution-dispatcher.js.map

package/dist/managed-runtime/execution-dispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-dispatcher.js","sourceRoot":"","sources":["../../src/managed-runtime/execution-dispatcher.ts"],"names":[],"mappings":"AAEA,OAAO,OAAO,MAAM,cAAc,CAAA;AAGlC,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAE7B,wBAAwB,GAEzB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,EAC1B,YAAY,GAEb,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAA;AAahF,MAAM,UAAU,+BAA+B,CAC7C,MAA8B,EAC9B,aAAmC;IAEnC,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO;YACL,UAAU,EAAE,WAAW;YACvB,cAAc,EAAE,WAAW;YAC3B,aAAa,EAAE,aAAa,EAAE,UAAU,IAAI,UAAU;YACtD,aAAa,EAAE,aAAa,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;SAC/F,CAAA;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO;YACL,UAAU,EAAE,QAAQ;YACpB,cAAc,EAAE,QAAQ;YACxB,aAAa,EAAE,UAAU;SAC1B,CAAA;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO;YACL,UAAU,EAAE,WAAW;YACvB,cAAc,EAAE,QAAQ;YACxB,aAAa,EAAE,MAAM;YACrB,iBAAiB,EAAE,uCAAuC;SAC3D,CAAA;IACH,CAAC;IAED,OAAO;QACL,UAAU,EAAE,WAAW;QACvB,cAAc,EAAE,QAAQ;QACxB,aAAa,EAAE,MAAM;QACrB,iBAAiB,EAAE,uCAAuC;KAC3D,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,MAOlD;IACC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAA;IACzB,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAA;IAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW,CAAA;IAC/C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,SAAS,CAAC,EAAE,yBAAyB,CAAC,CAAA;IACpF,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,YAAY,CAAC,mBAAmB,CAAC;QAC9D,UAAU,EAAE,MAAM,CAAC,cAAc;QACjC,YAAY,EAAE,MAAM,CAAC,gBAAgB;QACrC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE;QAChC,UAAU;QACV,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,CAAC,CAAA;IAEF,IAAI,CAAC,gBAAgB,EAAE,EAAE,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,GAAG,0BAA0B,6DAA6D,EAAE;YACvG,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE;SACjC,CAAC,CAAA;QACF,OAAO;YACL,sBAAsB,EAAE,IAAI;YAC5B,UAAU,EAAE,mBAAmB;SAChC,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAA;IACxC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACrE,MAAM,CAAC,kBAAkB,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAA;IAEhD,IAAI,MAA8B,CAAA;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE;YACxE,GAAG,EAAE,6BAA6B,CAAC;gBACjC,OAAO,EAAE,OAAO,CAAC,GAAG;gBACpB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,gBAAgB,CAAC,QAAQ;gBAClC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;gBAC7C,iBAAiB;aAClB,CAAC;YACF,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;gBAC/B,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAA;YACrC,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAA;IAChC,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,wBAAwB,CAAC,iBAAiB,CAAC,CAAA;IACvE,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACjD,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACjD,MAAM,qBAAqB,GAAG,0BAA0B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC1E,MAAM,qBAAqB,GAAG,0BAA0B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC1E,MAAM,mBAAmB,GAAG,+BAA+B,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IAClF,MAAM,UAAU,GAAG,2BAA2B,CAAC;QAC7C,WAAW,EAAE,gBAAgB,CAAC,EAAE;QAChC,OAAO;QACP,MAAM;QACN,UAAU,EAAE,mBAAmB;QAC/B,iBAAiB,EAAE,gBAAgB,CAAC,QAAQ;KAC7C,CAAC,CAAA;IAEF,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,sBAAsB,CAAC;QAC3D,UAAU,EAAE,MAAM,CAAC,cAAc;QACjC,YAAY,EAAE,MAAM,CAAC,gBAAgB;QACrC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,gBAAgB,CAAC,EAAE;QAChC,UAAU;QACV,eAAe,EAAE,MAAM,CAAC,MAAM;QAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,iBAAiB,EAAE;YACjB,GAAG,eAAe,CAAC,gBAAgB,CAAC,QAAQ,CAAC;YAC7C,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,WAAW,EAAE,UAAU;YACvB,uBAAuB,EAAE,SAAS;YAClC,wBAAwB,EAAE,aAAa,CAAC,SAAS;YACjD,wBAAwB,EAAE,aAAa,CAAC,SAAS;YACjD,GAAG,qBAAqB;YACxB,GAAG,qBAAqB;SACzB;QACD,UAAU,EAAE,mBAAmB,CAAC,UAAU;QAC1C,UAAU;QACV,SAAS,EAAE,MAAM,CAAC,KAAK;QACvB,qBAAqB,EAAE,mBAAmB,CAAC,iBAAiB,IAAI,IAAI;QACpE,aAAa,EAAE,mBAAmB,CAAC,aAAa;QAChD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,CAAC,CAAA;IAEF,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CACV,GAAG,0BAA0B,2FAA2F,EACxH;YACE,WAAW,EAAE,gBAAgB,CAAC,EAAE;YAChC,KAAK,EAAE,UAAU,EAAE,MAAM,IAAI,IAAI;YACjC,WAAW,EAAE,UAAU,EAAE,YAAY,IAAI,IAAI;SAC9C,CACF,CAAA;QACD,OAAO;YACL,sBAAsB,EAAE,IAAI;YAC5B,UAAU,EAAE,+BAA+B;SAC5C,CAAA;IACH,CAAC;IAED,IAAI,UAAU,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CACV,GAAG,0BAA0B,6FAA6F,EAC1H;YACE,WAAW,EAAE,gBAAgB,CAAC,EAAE;YAChC,KAAK,EAAE,UAAU,CAAC,MAAM;YACxB,WAAW,EAAE,UAAU,CAAC,YAAY;SACrC,CACF,CAAA;QACD,OAAO;YACL,sBAAsB,EAAE,IAAI;YAC5B,UAAU,EAAE,2BAA2B;SACxC,CAAA;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,0BAA0B,4BAA4B,EAAE;QACrE,WAAW,EAAE,gBAAgB,CAAC,EAAE;QAChC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,UAAU,CAAC,MAAM;KACzB,CAAC,CAAA;IAEF,OAAO,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAA;AAC1C,CAAC"}

package/dist/managed-runtime/heartbeat.d.ts

@@ -0,0 +1,7 @@
+export declare function startHostHeartbeatLoop(params: {
+    intervalMs: number;
+    maxConsecutiveFailures: number;
+    heartbeatHost: () => Promise<void>;
+    onFatalFailure: (error: Error) => void;
+}): () => void;
+//# sourceMappingURL=heartbeat.d.ts.map

package/dist/managed-runtime/heartbeat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"heartbeat.d.ts","sourceRoot":"","sources":["../../src/managed-runtime/heartbeat.ts"],"names":[],"mappings":"AAGA,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,UAAU,EAAE,MAAM,CAAA;IAClB,sBAAsB,EAAE,MAAM,CAAA;IAC9B,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;CACvC,GAAG,MAAM,IAAI,CA2Cb"}