@bowong/clawshow-gateway 2026.3.13 → 2026.3.16-10

package/README.md

@@ -1,6 +1,6 @@
-# @sker-pro/openclaw-channel-web
+# @bowong/clawshow-gateway
 
-OpenClaw Web 频道插件 —— 通过 WebSocket 中继服务器实现浏览器端聊天。
+OpenClaw Clawshow 频道插件 —— 通过 WebSocket 中继服务器实现浏览器端聊天。
 
 ## 安装到 OpenClaw
 
@@ -39,14 +39,14 @@ openclaw plugins install ./packages/openclaw-channel-web
 
 ### 配置频道
 
-这个插件是 channel plugin，配置写在 `channels.web`，不是 `plugins.entries.web.config`。
+这个插件是 channel plugin，配置写在 `channels.clawshow`，不是 `plugins.entries.clawshow-gateway.config`。
 
 编辑 `~/.openclaw/openclaw.json`，添加：
 
 ```json5
 {
   channels: {
-    web: {
+    clawshow: {
       enabled: true,
       relayUrl: "wss://your-relay-server.example.com",
       authToken: "your-secret-token",
@@ -71,7 +71,7 @@ openclaw plugins install ./packages/openclaw-channel-web
 WEB_RELAY_AUTH_TOKEN=your-secret-token
 ```
 
-对应代码里会优先读取 `channels.web.authToken`，否则回退到 `WEB_RELAY_AUTH_TOKEN`。
+对应代码里会优先读取 `channels.clawshow.authToken`，否则回退到 `WEB_RELAY_AUTH_TOKEN`。
 
 ### 本地 relay 联调示例
 
@@ -87,7 +87,7 @@ npm run dev
 ```json5
 {
   channels: {
-    web: {
+    clawshow: {
       enabled: true,
       relayUrl: "ws://192.168.0.117:8787",
       authToken: "your-secret-token",
@@ -117,7 +117,7 @@ node -e "console.log(require('crypto').randomBytes(32).toString('base64'))"
 
 然后把同一个值配置到：
 
-- `channels.web.authToken` 或 `WEB_RELAY_AUTH_TOKEN`
+- `channels.clawshow.authToken` 或 `WEB_RELAY_AUTH_TOKEN`
 - `apps/web-relay` 的 `OPENCLAW_AUTH_TOKEN`
 
 ### 多账户配置
@@ -125,7 +125,7 @@ node -e "console.log(require('crypto').randomBytes(32).toString('base64'))"
 ```json5
 {
   channels: {
-    web: {
+    clawshow: {
       enabled: true,
       relayUrl: "wss://relay-1.example.com",
       authToken: "token-1",
@@ -155,4 +155,4 @@ openclaw plugins list
 openclaw plugins info web
 ```
 
-如果 `web` 频道显示为已配置并且连接成功，说明安装完成。
+如果 `clawshow` 频道显示为已配置并且连接成功，说明安装完成。

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import type { OpenClawPluginApi } from "openclaw/plugin-sdk/core";
+import type { OpenClawPluginApi } from 'openclaw/plugin-sdk';
 declare const plugin: {
     id: string;
     name: string;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAKlE,QAAA,MAAM,MAAM;;;;;kBAKI,iBAAiB;CAIhC,CAAC;AAEF,eAAe,MAAM,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAI5D,QAAA,MAAM,MAAM;;;;;kBAKI,iBAAiB;CAGhC,CAAA;AAED,eAAe,MAAM,CAAA"}

package/dist/index.js

@@ -1,13 +1,11 @@
-import { emptyPluginConfigSchema } from "openclaw/plugin-sdk/core";
-import { webChannelPlugin } from "./src/plugin.js";
-import { setWebRuntime } from "./src/runtime.js";
+import { emptyPluginConfigSchema } from 'openclaw/plugin-sdk';
+import { webChannelPlugin } from './src/plugin.js';
 const plugin = {
-    id: "web",
-    name: "Web",
-    description: "Web channel plugin — browser chat via WebSocket relay",
+    id: 'clawshow-gateway',
+    name: 'clawshow-gateway',
+    description: 'Web channel plugin — browser chat via WebSocket relay',
     configSchema: emptyPluginConfigSchema(),
     register(api) {
-        setWebRuntime(api.runtime);
         api.registerChannel({ plugin: webChannelPlugin });
     },
 };

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,MAAM,GAAG;IACb,EAAE,EAAE,KAAK;IACT,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,uDAAuD;IACpE,YAAY,EAAE,uBAAuB,EAAE;IACvC,QAAQ,CAAC,GAAsB;QAC7B,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,GAAG,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACpD,CAAC;CACF,CAAC;AAEF,eAAe,MAAM,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAElD,MAAM,MAAM,GAAG;IACb,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,uDAAuD;IACpE,YAAY,EAAE,uBAAuB,EAAE;IACvC,QAAQ,CAAC,GAAsB;QAC7B,GAAG,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAA;IACnD,CAAC;CACF,CAAA;AAED,eAAe,MAAM,CAAA"}

package/dist/src/config.d.ts

@@ -2,8 +2,8 @@
  * Web channel configuration adapter.
  * Resolves account configuration from OpenClaw config.
  */
-import type { ChannelConfigAdapter, OpenClawConfig } from "openclaw/plugin-sdk";
-import type { ResolvedWebAccount } from "./types.js";
+import type { ChannelConfigAdapter, OpenClawConfig } from 'openclaw/plugin-sdk';
+import type { ResolvedWebAccount } from './types.js';
 export declare function listWebAccountIds(cfg: OpenClawConfig): string[];
 export declare function resolveWebAccount(cfg: OpenClawConfig, accountId?: string | null): ResolvedWebAccount;
 export declare function isWebConfigured(account: ResolvedWebAccount): boolean;

package/dist/src/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAEV,oBAAoB,EACpB,cAAc,EACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,kBAAkB,EAAoB,MAAM,YAAY,CAAC;AAQvE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,EAAE,CAkB/D;AAED,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,cAAc,EACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB,kBAAkB,CAwBpB;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAET;AAED,eAAO,MAAM,gBAAgB,EAAE,oBAAoB,CAAC,kBAAkB,CAiBrE,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAEV,oBAAoB,EACpB,cAAc,EACf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,kBAAkB,EAAoB,MAAM,YAAY,CAAA;AAQtE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,EAAE,CAkB/D;AAED,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,cAAc,EACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB,kBAAkB,CAgCpB;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAEpE;AAED,eAAO,MAAM,gBAAgB,EAAE,oBAAoB,CAAC,kBAAkB,CAuBrE,CAAA"}

package/dist/src/config.js

@@ -2,9 +2,9 @@
  * Web channel configuration adapter.
  * Resolves account configuration from OpenClaw config.
  */
-const DEFAULT_ACCOUNT_ID = "default";
+const DEFAULT_ACCOUNT_ID = 'default';
 export function listWebAccountIds(cfg) {
-    const webConfig = cfg.channels?.web;
+    const webConfig = cfg.channels?.clawshow;
     if (!webConfig)
         return [];
     const ids = [];
@@ -24,20 +24,29 @@ export function listWebAccountIds(cfg) {
 }
 export function resolveWebAccount(cfg, accountId) {
     const id = accountId ?? DEFAULT_ACCOUNT_ID;
-    const webConfig = cfg.channels?.web;
+    const webConfig = cfg.channels?.clawshow;
     const accountConfig = id !== DEFAULT_ACCOUNT_ID ? webConfig?.accounts?.[id] : undefined;
-    const base = webConfig ? { enabled: webConfig.enabled, relayUrl: webConfig.relayUrl, authToken: webConfig.authToken, dmPolicy: webConfig.dmPolicy, allowFrom: webConfig.allowFrom, name: webConfig.name } : {};
+    const base = webConfig
+        ? {
+            enabled: webConfig.enabled,
+            relayUrl: webConfig.relayUrl,
+            authToken: webConfig.authToken,
+            dmPolicy: webConfig.dmPolicy,
+            allowFrom: webConfig.allowFrom,
+            name: webConfig.name,
+        }
+        : {};
     const merged = {
-        relayUrl: "",
+        relayUrl: '',
         ...base,
         ...accountConfig,
     };
-    const authToken = merged.authToken ?? process.env.WEB_RELAY_AUTH_TOKEN ?? "";
+    const authToken = merged.authToken ?? process.env.WEB_RELAY_AUTH_TOKEN ?? '';
     return {
         accountId: id,
         name: merged.name,
         enabled: merged.enabled !== false,
-        relayUrl: merged.relayUrl ?? "",
+        relayUrl: merged.relayUrl ?? '',
         authToken,
         config: merged,
     };
@@ -53,10 +62,10 @@ export const webConfigAdapter = {
     isConfigured: (account, _cfg) => isWebConfigured(account),
     unconfiguredReason: (account, _cfg) => {
         if (!account.relayUrl)
-            return "relayUrl not configured";
+            return 'relayUrl not configured';
         if (!account.authToken)
-            return "authToken not configured (set WEB_RELAY_AUTH_TOKEN or channels.web.authToken)";
-        return "not configured";
+            return 'authToken not configured (set WEB_RELAY_AUTH_TOKEN or channels.clawshow.authToken)';
+        return 'not configured';
     },
     describeAccount: (account, _cfg) => ({
         accountId: account.accountId,

package/dist/src/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAMrC,MAAM,UAAU,iBAAiB,CAAC,GAAmB;IACnD,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAmC,CAAC;IACpE,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAE1B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,oDAAoD;IACpD,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC/B,CAAC;IACD,4BAA4B;IAC5B,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACvB,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBACtB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,GAAmB,EACnB,SAAyB;IAEzB,MAAM,EAAE,GAAG,SAAS,IAAI,kBAAkB,CAAC;IAC3C,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAmC,CAAC;IACpE,MAAM,aAAa,GACjB,EAAE,KAAK,kBAAkB,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEpE,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/M,MAAM,MAAM,GAAqB;QAC/B,QAAQ,EAAE,EAAE;QACZ,GAAG,IAAI;QACP,GAAG,aAAa;KACjB,CAAC;IAEF,MAAM,SAAS,GACb,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC;IAE7D,OAAO;QACL,SAAS,EAAE,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,KAAK;QACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;QAC/B,SAAS;QACT,MAAM,EAAE,MAAM;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAA2B;IAE3B,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAA6C;IACxE,cAAc,EAAE,iBAAiB;IACjC,cAAc,EAAE,iBAAiB;IACjC,gBAAgB,EAAE,CAAC,IAAoB,EAAE,EAAE,CAAC,kBAAkB;IAC9D,SAAS,EAAE,CAAC,OAA2B,EAAE,IAAoB,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO;IACjF,YAAY,EAAE,CAAC,OAA2B,EAAE,IAAoB,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC;IAC7F,kBAAkB,EAAE,CAAC,OAA2B,EAAE,IAAoB,EAAE,EAAE;QACxE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,OAAO,yBAAyB,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO,+EAA+E,CAAC;QAC/G,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,eAAe,EAAE,CAAC,OAA2B,EAAE,IAAoB,EAA0B,EAAE,CAAC,CAAC;QAC/F,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC;KACrC,CAAC;CACH,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,MAAM,kBAAkB,GAAG,SAAS,CAAA;AAMpC,MAAM,UAAU,iBAAiB,CAAC,GAAmB;IACnD,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,EAAE,QAAwC,CAAA;IACxE,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAA;IAEzB,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,oDAAoD;IACpD,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;IAC9B,CAAC;IACD,4BAA4B;IAC5B,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACvB,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBACtB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACd,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,GAAmB,EACnB,SAAyB;IAEzB,MAAM,EAAE,GAAG,SAAS,IAAI,kBAAkB,CAAA;IAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,EAAE,QAAwC,CAAA;IACxE,MAAM,aAAa,GACjB,EAAE,KAAK,kBAAkB,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAEnE,MAAM,IAAI,GAAG,SAAS;QACpB,CAAC,CAAC;YACE,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,IAAI,EAAE,SAAS,CAAC,IAAI;SACrB;QACH,CAAC,CAAC,EAAE,CAAA;IACN,MAAM,MAAM,GAAqB;QAC/B,QAAQ,EAAE,EAAE;QACZ,GAAG,IAAI;QACP,GAAG,aAAa;KACjB,CAAA;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAA;IAE5E,OAAO;QACL,SAAS,EAAE,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,KAAK;QACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;QAC/B,SAAS;QACT,MAAM,EAAE,MAAM;KACf,CAAA;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAA2B;IACzD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,CAAA;AACvD,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAA6C;IACxE,cAAc,EAAE,iBAAiB;IACjC,cAAc,EAAE,iBAAiB;IACjC,gBAAgB,EAAE,CAAC,IAAoB,EAAE,EAAE,CAAC,kBAAkB;IAC9D,SAAS,EAAE,CAAC,OAA2B,EAAE,IAAoB,EAAE,EAAE,CAC/D,OAAO,CAAC,OAAO;IACjB,YAAY,EAAE,CAAC,OAA2B,EAAE,IAAoB,EAAE,EAAE,CAClE,eAAe,CAAC,OAAO,CAAC;IAC1B,kBAAkB,EAAE,CAAC,OAA2B,EAAE,IAAoB,EAAE,EAAE;QACxE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,OAAO,yBAAyB,CAAA;QACvD,IAAI,CAAC,OAAO,CAAC,SAAS;YACpB,OAAO,oFAAoF,CAAA;QAC7F,OAAO,gBAAgB,CAAA;IACzB,CAAC;IACD,eAAe,EAAE,CACf,OAA2B,EAC3B,IAAoB,EACI,EAAE,CAAC,CAAC;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC;KACrC,CAAC;CACH,CAAA"}

package/dist/src/gateway.d.ts

@@ -6,10 +6,11 @@
  * - Listens for browser messages → dispatches AI reply
  * - Auto-reconnects with exponential backoff
  * - Responds to AbortSignal for graceful shutdown
+ * - Detects zombie connections via pong timeout
  */
-import WebSocket from "ws";
-import type { ChannelGatewayAdapter, ChannelGatewayContext } from "openclaw/plugin-sdk";
-import type { ResolvedWebAccount } from "./types.js";
+import WebSocket from 'ws';
+import type { ChannelGatewayAdapter, ChannelGatewayContext } from 'openclaw/plugin-sdk';
+import type { ResolvedWebAccount } from './types.js';
 export declare function getActiveWebSocket(accountId?: string): WebSocket | null;
 export declare function startWebGateway(ctx: ChannelGatewayContext<ResolvedWebAccount>): Promise<void>;
 export declare function sendTextToSession(sessionId: string, text: string, accountId?: string): boolean;

package/dist/src/gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,SAAS,MAAM,IAAI,CAAC;AAC3B,OAAO,KAAK,EAEV,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,qBAAqB,CAAC;AAS7B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAUrD,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAOvE;AAED,wBAAsB,eAAe,CAAC,GAAG,EAAE,qBAAqB,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAkKnG;AA8CD,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAe9F;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAarG;AAED,eAAO,MAAM,iBAAiB,EAAE,qBAAqB,CAAC,kBAAkB,CAIvE,CAAC"}
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,SAAS,MAAM,IAAI,CAAA;AAC1B,OAAO,KAAK,EAEV,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,qBAAqB,CAAA;AAQ5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAYpD,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAOvE;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,qBAAqB,CAAC,kBAAkB,CAAC,GAC7C,OAAO,CAAC,IAAI,CAAC,CA0Pf;AAyGD,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAmBT;AAED,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,OAAO,EACjB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAiBT;AAED,eAAO,MAAM,iBAAiB,EAAE,qBAAqB,CAAC,kBAAkB,CAIvE,CAAA"}

package/dist/src/gateway.js

@@ -6,13 +6,16 @@
  * - Listens for browser messages → dispatches AI reply
  * - Auto-reconnects with exponential backoff
  * - Responds to AbortSignal for graceful shutdown
+ * - Detects zombie connections via pong timeout
  */
-import WebSocket from "ws";
-import { generateMessageId, HEARTBEAT_INTERVAL_MS, parseRelayMessage, serializeRelayMessage, } from "./protocol.js";
+import WebSocket from 'ws';
+import { generateMessageId, HEARTBEAT_INTERVAL_MS, parseRelayMessage, serializeRelayMessage, } from './protocol.js';
 const MAX_RECONNECT_ATTEMPTS = 10;
 const INITIAL_RECONNECT_MS = 2_000;
 const MAX_RECONNECT_MS = 60_000;
 const BACKOFF_FACTOR = 2;
+const PONG_TIMEOUT_MS = HEARTBEAT_INTERVAL_MS * 2.5; // 75s — allow 2 missed pongs
+const COOLDOWN_MS = 5 * 60_000; // 5 min cooldown after max reconnect attempts
 /** Per-account gateway WebSocket references for outbound message sending. */
 const activeWsMap = new Map();
 export function getActiveWebSocket(accountId) {
@@ -29,17 +32,21 @@ export async function startWebGateway(ctx) {
     const { account, abortSignal, log } = ctx;
     let reconnectAttempts = 0;
     let reconnectMs = INITIAL_RECONNECT_MS;
+    let reconnectTimer = null; // [R3] track timer for abort cleanup
     const connect = () => new Promise((resolve, reject) => {
         if (abortSignal.aborted) {
             resolve();
             return;
         }
-        const baseUrl = account.relayUrl.replace(/\/+$/, "");
-        const wsUrl = baseUrl.endsWith("/openclaw") ? baseUrl : `${baseUrl}/openclaw`;
+        const baseUrl = account.relayUrl.replace(/\/+$/, '');
+        const wsUrl = baseUrl.endsWith('/openclaw')
+            ? baseUrl
+            : `${baseUrl}/openclaw`;
         log?.info(`[web:${account.accountId}] connecting to relay: ${wsUrl}`);
         const ws = new WebSocket(wsUrl);
         let heartbeatTimer = null;
         let authenticated = false;
+        let lastPongAt = Date.now(); // [H1] track last pong for zombie detection
         const cleanup = () => {
             activeWsMap.delete(account.accountId);
             if (heartbeatTimer) {
@@ -53,74 +60,114 @@ export async function startWebGateway(ctx) {
                 lastStopAt: Date.now(),
             });
         };
-        ws.on("open", () => {
+        ws.on('open', () => {
             log?.info(`[web:${account.accountId}] connected, authenticating...`);
             // Send auth handshake
             ws.send(serializeRelayMessage({
-                type: "auth",
-                role: "openclaw",
+                type: 'auth',
+                role: 'openclaw',
                 token: account.authToken,
             }));
         });
-        ws.on("message", async (data) => {
-            const raw = typeof data === "string" ? data : data.toString("utf-8");
-            const msg = parseRelayMessage(raw);
-            if (!msg)
-                return;
-            switch (msg.type) {
-                case "auth_result": {
-                    if (msg.ok) {
-                        log?.info(`[web:${account.accountId}] authenticated successfully`);
-                        authenticated = true;
-                        activeWsMap.set(account.accountId, ws);
-                        reconnectAttempts = 0;
-                        reconnectMs = INITIAL_RECONNECT_MS;
-                        ctx.setStatus({
-                            ...ctx.getStatus(),
-                            connected: true,
-                            running: true,
-                            lastStartAt: Date.now(),
-                            lastError: null,
-                        });
-                        // Start heartbeat
-                        heartbeatTimer = setInterval(() => {
-                            if (ws.readyState === WebSocket.OPEN) {
-                                ws.send(serializeRelayMessage({ type: "ping", timestamp: Date.now() }));
+        // [E1] Wrap entire message handler in void async IIFE with try/catch
+        // to prevent unhandled promise rejections from crashing the process
+        ws.on('message', (data) => {
+            void (async () => {
+                try {
+                    const raw = typeof data === 'string' ? data : data.toString('utf-8');
+                    const msg = parseRelayMessage(raw);
+                    if (!msg)
+                        return;
+                    switch (msg.type) {
+                        case 'auth_result': {
+                            if (msg.ok) {
+                                log?.info(`[web:${account.accountId}] authenticated successfully`);
+                                authenticated = true;
+                                activeWsMap.set(account.accountId, ws);
+                                reconnectAttempts = 0;
+                                reconnectMs = INITIAL_RECONNECT_MS;
+                                lastPongAt = Date.now(); // [H1] reset pong timer on fresh connection
+                                ctx.setStatus({
+                                    ...ctx.getStatus(),
+                                    connected: true,
+                                    running: true,
+                                    lastStartAt: Date.now(),
+                                    lastError: null,
+                                    restartPending: false, // [M2] clear restartPending on successful reconnect
+                                });
+                                // [H1] Start heartbeat with pong timeout detection
+                                heartbeatTimer = setInterval(() => {
+                                    if (ws.readyState !== WebSocket.OPEN)
+                                        return;
+                                    // Check if pong timed out — zombie connection detection
+                                    const elapsed = Date.now() - lastPongAt;
+                                    if (elapsed > PONG_TIMEOUT_MS) {
+                                        log?.error(`[web:${account.accountId}] pong timeout (${elapsed}ms elapsed, limit ${PONG_TIMEOUT_MS}ms), forcing reconnect`);
+                                        ws.close(4000, 'Pong timeout');
+                                        return;
+                                    }
+                                    ws.send(serializeRelayMessage({
+                                        type: 'ping',
+                                        timestamp: Date.now(),
+                                    }));
+                                }, HEARTBEAT_INTERVAL_MS);
                             }
-                        }, HEARTBEAT_INTERVAL_MS);
-                    }
-                    else {
-                        log?.error(`[web:${account.accountId}] auth failed: ${msg.error}`);
-                        ws.close(4001, "Authentication failed");
+                            else {
+                                log?.error(`[web:${account.accountId}] auth failed: ${msg.error}`);
+                                ws.close(4001, 'Authentication failed');
+                            }
+                            break;
+                        }
+                        case 'message': {
+                            if (!authenticated)
+                                break;
+                            // Incoming message from browser → dispatch to AI
+                            await handleIncomingMessage(ctx, msg);
+                            break;
+                        }
+                        case 'typing': {
+                            // Browser typing indicator — can log or pass through
+                            break;
+                        }
+                        case 'pong': {
+                            // [H1] Update last pong timestamp for zombie detection
+                            lastPongAt = Date.now();
+                            break;
+                        }
+                        case 'user_status': {
+                            // Browser user online/offline notification
+                            log?.info(`[web:${account.accountId}] user_status: ${msg.action} userId=${msg.userId} sessionId=${msg.sessionId}${msg.userName ? ` name=${msg.userName}` : ''}`);
+                            break;
+                        }
+                        default:
+                            break;
                     }
-                    break;
-                }
-                case "message": {
-                    if (!authenticated)
-                        break;
-                    // Incoming message from browser → dispatch to AI
-                    await handleIncomingMessage(ctx, msg);
-                    break;
-                }
-                case "typing": {
-                    // Browser typing indicator — can log or pass through
-                    break;
                 }
-                case "pong": {
-                    // Heartbeat response — connection is alive
-                    break;
+                catch (err) {
+                    // [E1] Catch all async errors to prevent unhandled promise rejection
+                    log?.error(`[web:${account.accountId}] message handler error: ${err instanceof Error ? err.message : String(err)}`);
                 }
-                default:
-                    break;
-            }
+            })();
         });
-        ws.on("close", (code, reason) => {
-            log?.warn(`[web:${account.accountId}] disconnected (code=${code}, reason=${reason.toString("utf-8")})`);
+        ws.on('close', (code, reason) => {
+            log?.warn(`[web:${account.accountId}] disconnected (code=${code}, reason=${reason.toString('utf-8')})`);
             cleanup();
             if (abortSignal.aborted) {
                 resolve();
                 return;
             }
+            // [R1] Authentication failure is unrecoverable — do not reconnect
+            if (code === 4001) {
+                const errMessage = 'Authentication failed — not reconnecting';
+                log?.error(`[web:${account.accountId}] ${errMessage}`);
+                ctx.setStatus({
+                    ...ctx.getStatus(),
+                    lastError: errMessage,
+                    running: false,
+                });
+                reject(new Error(errMessage));
+                return;
+            }
             // Schedule reconnect
             if (reconnectAttempts < MAX_RECONNECT_ATTEMPTS) {
                 reconnectAttempts++;
@@ -132,36 +179,58 @@ export async function startWebGateway(ctx) {
                     restartPending: true,
                     reconnectAttempts,
                 });
-                setTimeout(() => {
+                reconnectTimer = setTimeout(() => {
+                    reconnectTimer = null;
                     reconnectMs = Math.min(reconnectMs * BACKOFF_FACTOR, MAX_RECONNECT_MS);
                     connect().then(resolve, reject);
                 }, delay);
             }
             else {
-                const err = new Error(`Max reconnect attempts (${MAX_RECONNECT_ATTEMPTS}) exceeded`);
-                log?.error(`[web:${account.accountId}] ${err.message}`);
+                // [R2] Max attempts reached — cooldown then retry instead of permanent failure
+                log?.warn(`[web:${account.accountId}] max reconnect attempts (${MAX_RECONNECT_ATTEMPTS}) reached, cooling down for ${COOLDOWN_MS / 1000}s`);
                 ctx.setStatus({
                     ...ctx.getStatus(),
-                    lastError: err.message,
-                    running: false,
+                    lastError: `Max reconnect attempts reached, cooling down for ${COOLDOWN_MS / 1000}s`,
+                    restartPending: true,
                 });
-                reject(err);
+                reconnectTimer = setTimeout(() => {
+                    reconnectTimer = null;
+                    if (abortSignal.aborted) {
+                        resolve();
+                        return;
+                    }
+                    log?.info(`[web:${account.accountId}] cooldown complete, resetting reconnect counter`);
+                    reconnectAttempts = 0;
+                    reconnectMs = INITIAL_RECONNECT_MS;
+                    connect().then(resolve, reject);
+                }, COOLDOWN_MS);
             }
         });
-        ws.on("error", (err) => {
+        // [M1] Update lastError status in error handler
+        ws.on('error', err => {
             log?.error(`[web:${account.accountId}] WebSocket error: ${err.message}`);
+            ctx.setStatus({
+                ...ctx.getStatus(),
+                lastError: err.message,
+            });
             // Error triggers close event, so reconnect logic runs there
         });
         // Listen for abort signal
         const onAbort = () => {
             log?.info(`[web:${account.accountId}] shutting down (abort signal)`);
             cleanup();
-            if (ws.readyState === WebSocket.OPEN || ws.readyState === WebSocket.CONNECTING) {
-                ws.close(1000, "Shutting down");
+            // [R3] Clear pending reconnect timer on abort
+            if (reconnectTimer) {
+                clearTimeout(reconnectTimer);
+                reconnectTimer = null;
+            }
+            if (ws.readyState === WebSocket.OPEN ||
+                ws.readyState === WebSocket.CONNECTING) {
+                ws.close(1000, 'Shutting down');
             }
             resolve();
         };
-        abortSignal.addEventListener("abort", onAbort, { once: true });
+        abortSignal.addEventListener('abort', onAbort, { once: true });
     });
     return connect();
 }
@@ -173,61 +242,103 @@ async function handleIncomingMessage(ctx, msg) {
         ...ctx.getStatus(),
         lastInboundAt: Date.now(),
     });
-    // channelRuntime is injected by OpenClaw with a dispatch wrapper that accepts
-    // the inbound message shape. Cast required because the SDK type exposes the
-    // internal dispatch-from-config signature, not the plugin-facing wrapper.
-    const dispatch = channelRuntime?.reply
-        ?.dispatchReplyFromConfig;
-    if (!dispatch) {
+    if (!channelRuntime) {
         log?.warn(`[web:${ctx.account.accountId}] channelRuntime not available — cannot dispatch AI reply`);
-        // Send a fallback reply
-        sendTextToSession(msg.sessionId, "AI is not available at the moment. Please try again later.", ctx.accountId);
+        void sendTextToSession(msg.sessionId, 'AI is not available at the moment. Please try again later.', ctx.accountId);
         return;
     }
+    const core = channelRuntime;
     try {
-        await dispatch({
+        // 1. Resolve agent routing
+        const route = core.routing.resolveAgentRoute({
             cfg: ctx.cfg,
-            channel: "web",
-            chatType: "direct",
-            from: msg.sessionId,
-            to: msg.sessionId,
-            text: msg.text,
+            channel: 'clawshow',
             accountId: ctx.accountId,
-            messageId: msg.id,
+            peer: { kind: 'direct', id: msg.sessionId },
+        });
+        log?.info(`[web:${ctx.account.accountId}] route: agent=${route.agentId} session=${route.sessionKey}`);
+        // 2. Build MsgContext with PascalCase fields (will be finalized by dispatchInboundMessageWithBufferedDispatcher)
+        const ctxPayload = {
+            Body: msg.text,
+            BodyForAgent: msg.text,
+            RawBody: msg.text,
+            CommandBody: msg.text,
+            From: `web:${msg.sessionId}`,
+            To: msg.sessionId,
+            SessionKey: route.sessionKey,
+            AccountId: ctx.accountId,
+            ChatType: 'direct',
+            Provider: 'clawshow',
+            Surface: 'clawshow',
+            MessageSid: msg.id,
+            Timestamp: msg.timestamp || Date.now(),
+            CommandAuthorized: false,
+        };
+        // 3. Use the high-level dispatch API that handles all lifecycle internally
+        sendTypingToSession(msg.sessionId, true, ctx.accountId);
+        const result = await core.reply.dispatchReplyWithBufferedBlockDispatcher({
+            ctx: ctxPayload,
+            cfg: ctx.cfg,
+            dispatcherOptions: {
+                deliver: async (payload, _info) => {
+                    if (payload.text) {
+                        void sendTextToSession(msg.sessionId, payload.text, ctx.accountId);
+                    }
+                },
+                onError: (err, info) => {
+                    log?.error(`[web:${ctx.account.accountId}] reply delivery error (${info.kind}): ${err}`);
+                },
+            },
         });
+        sendTypingToSession(msg.sessionId, false, ctx.accountId);
+        log?.info(`[web:${ctx.account.accountId}] dispatch complete (queuedFinal=${result.queuedFinal}, replies=${result.counts.final})`);
     }
     catch (err) {
-        log?.error(`[web:${ctx.account.accountId}] dispatch error: ${err}`);
-        sendTextToSession(msg.sessionId, "An error occurred processing your message.", ctx.accountId);
+        sendTypingToSession(msg.sessionId, false, ctx.accountId);
+        // [M3] Log full stack trace but only send generic error to user
+        const fullMsg = err instanceof Error ? `${err.message}\n${err.stack}` : String(err);
+        log?.error(`[web:${ctx.account.accountId}] dispatch error: ${fullMsg}`);
+        void sendTextToSession(msg.sessionId, `Sorry, an error occurred while processing your message. Please try again.`, ctx.accountId);
     }
 }
 // ── Outbound Helpers ────────────────────────────────────────────────
+// [E2] Try/catch around ws.send to handle race between readyState check and send
 export function sendTextToSession(sessionId, text, accountId) {
     const ws = getActiveWebSocket(accountId);
     if (!ws || ws.readyState !== WebSocket.OPEN)
         return false;
-    const msg = {
-        type: "message",
-        id: generateMessageId(),
-        sessionId,
-        from: "ai",
-        text,
-        timestamp: Date.now(),
-    };
-    ws.send(serializeRelayMessage(msg));
-    return true;
+    try {
+        const msg = {
+            type: 'message',
+            id: generateMessageId(),
+            sessionId,
+            from: 'ai',
+            text,
+            timestamp: Date.now(),
+        };
+        ws.send(serializeRelayMessage(msg));
+        return true;
+    }
+    catch {
+        return false;
+    }
 }
 export function sendTypingToSession(sessionId, isTyping, accountId) {
     const ws = getActiveWebSocket(accountId);
     if (!ws || ws.readyState !== WebSocket.OPEN)
         return false;
-    ws.send(serializeRelayMessage({
-        type: "typing",
-        sessionId,
-        from: "ai",
-        isTyping,
-    }));
-    return true;
+    try {
+        ws.send(serializeRelayMessage({
+            type: 'typing',
+            sessionId,
+            from: 'ai',
+            isTyping,
+        }));
+        return true;
+    }
+    catch {
+        return false;
+    }
 }
 export const webGatewayAdapter = {
     startAccount: async (ctx) => {