fix(manifest): accept gateway_auth_header and gateway_api_format case-insensitively

claude-in-office/commands/setup.md

@@ -186,9 +186,8 @@ the pass-through path, e.g. `https://litellm.acme.com/bedrock` or
 **Auth header scheme.** The add-in sends the token as `x-api-key: <token>` by
 default — this is what LiteLLM, Portkey, and Kong accept out of the box. If
 your gateway expects `Authorization: Bearer <token>` instead (common for
-custom/enterprise gateways), set `gateway_auth_header=authorization`. The
-value is case-sensitive lowercase; anything else silently falls back to
-`x-api-key`. If you're unsure, run the Step 6 smoke test with `x-api-key`
+custom/enterprise gateways), set `gateway_auth_header=authorization`. If
+you're unsure, run the Step 6 smoke test with `x-api-key`
 first — a 401 with "no Authorization header" in your gateway logs means you
 need `authorization`.
 

claude-in-office/scripts/build-manifest.mjs

@@ -36,8 +36,8 @@ const KEYS = {
   },
   gateway_url: { pattern: /^https:\/\//, hint: "HTTPS base URL" },
   gateway_token: { pattern: /./, hint: "gateway API key", secret: true },
-  gateway_auth_header: { pattern: /^(x-api-key|authorization)$/, hint: "auth header scheme (default: x-api-key)" },
-  gateway_api_format: { pattern: /^(anthropic|bedrock|vertex)$/, hint: "anthropic | bedrock | vertex" },
+  gateway_auth_header: { pattern: /^(x-api-key|authorization)$/i, hint: "auth header scheme (default: x-api-key)" },
+  gateway_api_format: { pattern: /^(anthropic|bedrock|vertex)$/i, hint: "anthropic | bedrock | vertex" },
   mcp_servers: { pattern: /^\[.*\]$/, hint: "JSON array of {url, label, headers?, discover?}" },
   bootstrap_url: { pattern: /^https:\/\//, hint: "HTTPS endpoint returning per-user config" },
   otlp_endpoint: { pattern: /^https:\/\//, hint: "OTLP/HTTP traces collector URL" },