refactor: split cli backend live helpers

src/cli/command-catalog.ts

@@ -56,10 +56,6 @@ export const cliCommandCatalog: readonly CliCommandCatalogEntry[] = [
     policy: { routeConfigGuard: "always" },
     route: { id: "gateway-status" },
   },
-  {
-    commandPath: ["cron"],
-    policy: { bypassConfigGuard: true },
-  },
   {
     commandPath: ["sessions"],
     exact: true,

src/cli/command-path-policy.ts

@@ -1,3 +1,4 @@
+import { isGatewayConfigBypassCommandPath } from "../gateway/explicit-connection-policy.js";
 import { cliCommandCatalog, type CliCommandPathPolicy } from "./command-catalog.js";
 import { matchesCommandPath } from "./command-path-matches.js";
 
@@ -23,5 +24,11 @@ export function resolveCliCommandPathPolicy(commandPath: string[]): CliCommandPa
       ...entry.policy,
     };
   }
+  if (isGatewayConfigBypassCommandPath(commandPath)) {
+    resolvedPolicy = {
+      ...resolvedPolicy,
+      bypassConfigGuard: true,
+    };
+  }
   return resolvedPolicy;
 }