middleware('auth.api'); Route::post('/heartbeat', [GatewayController::class, 'heartbeat'])->middleware('auth.api'); // Public endpoints Route::get('/live', [GatewayController::class, 'live']); // Internal dispatch (authenticated — called by proxy module) Route::post('/dispatch', [GatewayController::class, 'dispatch'])->middleware('auth.api');