[jefft72]

Summary

Requires the hosted server to use gateway credentials and validates the real WebSocket-to-model path, restart behavior, and runtime image inspection.

Reasoning

The optional gateway transport becomes enforceable only when the hosted entry point rejects direct provider credentials and receives a server-controlled output cap.

Acceptance uses the actual SDK and native process with a local gateway fixture so it exercises the deployed protocol without provider keys or paid tokens.

Release remains coordinated with the cloud gateway and a rebuilt runtime snapshot.

Changes

• Requires gateway URL, credential, and output cap at server startup, and removes the credential from the process environment after configuration.
• Replaces the bypassing smoke fixture with real Anthropic SDK requests to the local gateway fixture.
• Adds native WebSocket authentication, prompting, pending-operation, and restart acceptance coverage.
• Copies the required release instruction input into the Docker build stage without expanding the shipped runtime payload.
• Supports compressed OCI layers while inspecting every image layer, including forbidden files hidden by later whiteouts.
• Documents cloud and runtime rollout dependencies.

Testing

• npm run check
• npm run build:offline
• From packages/coding-agent-server: node ../../node_modules/vitest/dist/cli.js --run test/gateway-runtime-process.test.ts
• node --test scripts/runtime-image.test.mjs
• ./test.sh, using the repository's isolated, non-E2E runner.
• Verified the final tree preserves the reviewed gateway and runtime implementation while inheriting the catalog, CI, and dependency security fixes.
• From packages/ai: node ../../node_modules/vitest/dist/cli.js --run test/together-models.test.ts test/generate-models-strict.test.ts: 7 tests passed after incorporating the catalog prerequisite.
• node --test scripts/vendored-braces-security.test.mjs: 11 tests passed against the inherited dependency patch.
• Reviewed native startup, acceptance fixtures, and compressed-layer inspection locally.

[Pepps233]

not appropriate to merge yet. do not force cloud runtime to supply diffex credentials yet. this changes production runtime behavior and should be discussed with the team before modifications. please hold back on merging this pr stack.