@openclaw/gateway-client 2026.10.1-beta.2 → 2026.10.5-beta.1

package/README.md

@@ -9,9 +9,9 @@ The current wire protocol is version 4. General clients must advertise exactly v
 `minProtocol: 4` and `maxProtocol: 4`. See the
 [Gateway protocol specification](https://docs.openclaw.ai/gateway/protocol) for
 the complete handshake, authentication, role, scope, and method contracts.
-Exact node identities (`role: "node"` plus `mode: "node"`) and probe clients
+Exact node identities (`role: "node"` plus `mode: "node"`) and diagnostic clients
 can use v3. The built-in node host starts with an exact v4 envelope, then retries
-an exact v3 envelope after a v3 Gateway rejects v4. If that legacy probe reaches
+an exact v3 envelope after a v3 Gateway rejects v4. If that legacy connection attempt reaches
 an upgraded v4 Gateway, the client reconnects with the full v4 envelope before
 reporting readiness. Other exact node identities default to `[3, 4]`. Explicit
 bounds override these defaults; `[3, 4]` on the built-in node host selects the
@@ -187,10 +187,19 @@ pre-handshake values are documented in the
 
 Use the `./timeouts` entry point when a host must align readiness or watchdog
 budgets with these defaults. Use the `./readiness` entry point when startup must
-wait for an event-loop probe before opening the socket.
+wait for an event-loop check before opening the socket.
 
 ## Streaming chat
 
+The `runId` returned by `chat.send` identifies the submitted input even when a
+steer falls back to a followup. Queue admission is nonterminal: keep observing
+that ID until the consuming execution completes, or the input is rejected,
+canceled, or dropped before consumption. Collected inputs each receive the
+batch execution's terminal outcome under their original IDs. SDK run handles
+use the same IDs for events, `wait()`, and cancellation; canceling an input before
+consumption withdraws only that input. A steer accepted into the active turn
+continues to complete after its transcript receipt while that turn remains active.
+
 Event callbacks receive the wire payload unchanged. A `chat` delta's optional
 `message` is an authoritative snapshot that already includes `deltaText`.
 Without `message`, append `deltaText` to the run's existing text. `replace: true`
@@ -229,7 +238,7 @@ reports `rebaselined`, `recovered`, or `unavailable`; unavailable full text omit
 have finite retention, and sessionless or unavailable transcript occurrences
 cannot be reconstructed; unknown outcomes remain unsettled with a recovery
 notice. Automatic recovery stops after four consecutive unavailable observations
-(initial probe plus three waits), releases retention protection, and stays stopped
+(initial check plus three waits), releases retention protection, and stays stopped
 across reconnects. Confirmed activity resets that budget; late terminal frames can
 still settle the run. Queued replies use exponential backoff with the Gateway
 client's positive 20% jitter and a 25–30 second cap. ACP reports unavailable full

package/dist/browser.d.mts

@@ -1,7 +1,7 @@
 import { A as normalizeSessionProjectionRunId, C as reduceSessionProjectionRunEvent, D as SessionMessageIdentity, E as SessionMessageEnvelope, F as gatewayOriginScope, I as mergeChatStreamMessage, L as buildDeviceAuthPayload, M as readSessionMessageIdentity, N as readSessionMessageSequence, O as SessionProjectionEntry, P as gatewayCredentialScope, R as buildDeviceAuthPayloadV3, S as SessionProjectionRunTransition, T as readSessionProjectionFinalMessageIdentity, _ as reconcileSessionProjectionSnapshot, a as GatewaySessionMessageSubscriptionOptions, b as projectSessionTerminalReplyMessage, c as resetGatewaySessionMessageSubscriptionCoordinator, d as SessionProjectionRunStatus, f as SessionProjectionScope, g as projectLiveSessionMessage, h as createSessionProjection, i as GatewaySessionMessageSubscriptionCoordinatorOptions, j as readAssistantStreamSegmentIdentity, k as isLocallyOptimisticSessionMessage, l as SessionProjectionEvent, m as SessionProjectionState, n as GatewaySessionMessageSubscription, o as getGatewaySessionMessageSubscriptionCoordinator, p as SessionProjectionSnapshotOptions, r as GatewaySessionMessageSubscriptionCoordinator, s as releaseGatewaySessionMessageSubscription, t as GatewaySessionMessageRequestClient, u as SessionProjectionRun, v as reduceSessionProjection, w as hasSessionProjectionAcceptedFinal, x as SessionProjectionGatewayRunEvent, y as isSessionProjectionErrorMessage, z as normalizeDeviceMetadataForAuth } from "./session-subscriptions-Bcq6_wtR.mjs";
 import { a as GatewayBrowserDeviceTokenStore, c as resolveGatewayConnectScopes, i as GatewayBrowserDeviceTokenRecord, l as selectGatewayConnectAuth, n as GatewayBrowserDeviceAuthPlan, o as GatewayConnectAuthSelection, r as GatewayBrowserDeviceIdentity, s as buildGatewayConnectAuth, t as GatewayBrowserDeviceAuthLifecycle, u as shouldRetryGatewayWithDeviceToken } from "./browser-device-auth-_UweR4aN.mjs";
 import { i as isGatewayProtocolResponseError, n as GatewayProtocolRequestOptions, r as GatewayProtocolRequestTimeoutError, t as GatewayProtocolRequestError } from "./protocol-request-CtVhe3Bj.mjs";
-import { a as GatewayProtocolConnectAuthority, c as GatewayProtocolTiming, i as GatewayProtocolCloseContext, l as GatewayProtocolRequestTiming, o as GatewayProtocolSocket, s as GatewayProtocolSocketHandlers, t as GatewayProtocolClient } from "./protocol-client-DT451Msj.mjs";
+import { a as GatewayProtocolConnectAuthority, c as GatewayProtocolTiming, i as GatewayProtocolCloseContext, l as GatewayProtocolRequestTiming, o as GatewayProtocolSocket, s as GatewayProtocolSocketHandlers, t as GatewayProtocolClient } from "./protocol-client-CKMLpN-S.mjs";
 import { DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, resolveSafeTimeoutDelayMs } from "./timeouts.mjs";
 import { ConnectParams as ConnectParams$1, GATEWAY_SERVER_CAPS } from "@openclaw/gateway-protocol/frame-guards";
 import { ChannelsStatusResult, ConnectParams, ErrorShape, EventFrame, HelloOk, QuestionRecord } from "@openclaw/gateway-protocol";

package/dist/browser.mjs

@@ -1,5 +1,5 @@
-import { A as resolveGatewayConnectScopes, B as buildDeviceAuthPayloadV3, C as isGatewayProtocolResponseError, D as gatewayOriginScope, E as gatewayCredentialScope, F as mergeChatStreamMessage, I as asNullableRecord, M as shouldRetryGatewayWithDeviceToken, O as GatewayBrowserDeviceAuthLifecycle, S as GatewayProtocolRequestTimeoutError, T as resolveModelCatalogConnect, V as normalizeDeviceMetadataForAuth, _ as readSessionMessageIdentity, a as createSessionProjection, b as GatewayProtocolClient, c as reduceSessionProjection, d as readSessionProjectionFinalMessageIdentity, f as isSessionProjectionErrorMessage, g as readAssistantStreamSegmentIdentity, h as normalizeSessionProjectionRunId, i as resetGatewaySessionMessageSubscriptionCoordinator, j as selectGatewayConnectAuth, k as buildGatewayConnectAuth, l as reduceSessionProjectionRunEvent, m as isLocallyOptimisticSessionMessage, n as getGatewaySessionMessageSubscriptionCoordinator, o as projectLiveSessionMessage, p as projectSessionTerminalReplyMessage, r as releaseGatewaySessionMessageSubscription, s as reconcileSessionProjectionSnapshot, t as GatewaySessionMessageSubscriptionCoordinator, u as hasSessionProjectionAcceptedFinal, v as readSessionMessageSequence, x as GatewayProtocolRequestError, y as shouldPauseGatewayReconnect, z as buildDeviceAuthPayload } from "./session-subscriptions-D5CpDUGt.mjs";
-import { DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, resolveSafeTimeoutDelayMs } from "./timeouts.mjs";
+import { A as buildGatewayConnectAuth, B as normalizeDeviceMetadataForAuth, C as isGatewayProtocolResponseError, D as gatewayCredentialScope, E as resolveModelCatalogConnect, F as asNullableRecord, M as selectGatewayConnectAuth, N as shouldRetryGatewayWithDeviceToken, O as gatewayOriginScope, P as mergeChatStreamMessage, R as buildDeviceAuthPayload, S as GatewayProtocolRequestTimeoutError, _ as isSessionProjectionErrorMessage, a as createSessionProjection, b as GatewayProtocolClient, c as reduceSessionProjection, d as readSessionProjectionFinalMessageIdentity, f as isLocallyOptimisticSessionMessage, g as readSessionMessageSequence, h as readSessionMessageIdentity, i as resetGatewaySessionMessageSubscriptionCoordinator, j as resolveGatewayConnectScopes, k as GatewayBrowserDeviceAuthLifecycle, l as reduceSessionProjectionRunEvent, m as readAssistantStreamSegmentIdentity, n as getGatewaySessionMessageSubscriptionCoordinator, o as projectLiveSessionMessage, p as normalizeSessionProjectionRunId, r as releaseGatewaySessionMessageSubscription, s as reconcileSessionProjectionSnapshot, t as GatewaySessionMessageSubscriptionCoordinator, u as hasSessionProjectionAcceptedFinal, v as projectSessionTerminalReplyMessage, x as GatewayProtocolRequestError, y as shouldPauseGatewayReconnect, z as buildDeviceAuthPayloadV3 } from "./session-subscriptions-DE0w2upu.mjs";
+import { n as DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, p as resolveSafeTimeoutDelayMs, t as DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS } from "./timeouts-CQTCye5U.mjs";
 import { GATEWAY_SERVER_CAPS } from "@openclaw/gateway-protocol/frame-guards";
 export * from "@openclaw/gateway-protocol/connect-error-details";
 export * from "@openclaw/gateway-protocol/gateway-error-details";

package/dist/index.d.mts

@@ -1,9 +1,9 @@
 import { A as normalizeSessionProjectionRunId, C as reduceSessionProjectionRunEvent, D as SessionMessageIdentity, E as SessionMessageEnvelope, F as gatewayOriginScope, I as mergeChatStreamMessage, L as buildDeviceAuthPayload, M as readSessionMessageIdentity, N as readSessionMessageSequence, O as SessionProjectionEntry, P as gatewayCredentialScope, R as buildDeviceAuthPayloadV3, S as SessionProjectionRunTransition, T as readSessionProjectionFinalMessageIdentity, _ as reconcileSessionProjectionSnapshot, a as GatewaySessionMessageSubscriptionOptions, b as projectSessionTerminalReplyMessage, c as resetGatewaySessionMessageSubscriptionCoordinator, d as SessionProjectionRunStatus, f as SessionProjectionScope, g as projectLiveSessionMessage, h as createSessionProjection, i as GatewaySessionMessageSubscriptionCoordinatorOptions, j as readAssistantStreamSegmentIdentity, k as isLocallyOptimisticSessionMessage, l as SessionProjectionEvent, m as SessionProjectionState, n as GatewaySessionMessageSubscription, o as getGatewaySessionMessageSubscriptionCoordinator, p as SessionProjectionSnapshotOptions, r as GatewaySessionMessageSubscriptionCoordinator, s as releaseGatewaySessionMessageSubscription, t as GatewaySessionMessageRequestClient, u as SessionProjectionRun, v as reduceSessionProjection, w as hasSessionProjectionAcceptedFinal, x as SessionProjectionGatewayRunEvent, y as isSessionProjectionErrorMessage, z as normalizeDeviceMetadataForAuth } from "./session-subscriptions-Bcq6_wtR.mjs";
 import { a as GatewayBrowserDeviceTokenStore, c as resolveGatewayConnectScopes, i as GatewayBrowserDeviceTokenRecord, l as selectGatewayConnectAuth, n as GatewayBrowserDeviceAuthPlan, o as GatewayConnectAuthSelection, r as GatewayBrowserDeviceIdentity, s as buildGatewayConnectAuth, t as GatewayBrowserDeviceAuthLifecycle, u as shouldRetryGatewayWithDeviceToken } from "./browser-device-auth-_UweR4aN.mjs";
 import { i as isGatewayProtocolResponseError } from "./protocol-request-CtVhe3Bj.mjs";
-import { n as GatewayClientCloseInfo, r as GatewayClientConnectionMetadata } from "./protocol-client-DT451Msj.mjs";
+import { n as GatewayClientCloseInfo, r as GatewayClientConnectionMetadata } from "./protocol-client-CKMLpN-S.mjs";
 import { DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, MAX_CONNECT_CHALLENGE_TIMEOUT_MS, MAX_SAFE_TIMEOUT_DELAY_MS, MIN_CONNECT_CHALLENGE_TIMEOUT_MS, addSafeTimeoutDelayGraceMs, clampConnectChallengeTimeoutMs, clearGatewayConnectTimeout, getConnectChallengeTimeoutMsFromEnv, resolveConnectChallengeTimeoutMs, resolveFiniteTimeoutDelayMs, resolvePreauthHandshakeTimeoutMs, resolveSafeTimeoutDelayMs, startGatewayConnectTimeout } from "./timeouts.mjs";
-import { _ as isGatewayConnectAssemblyError, a as startGatewayClientWithReadinessWait, c as waitForEventLoopReady, d as GatewayClientHostDeps, f as GatewayClientOptions, g as GatewayClientRequestError, h as GatewayReconnectPausedInfo, i as startGatewayClientWhenEventLoopReady, l as DeviceIdentity, m as GatewayClientRequestTimeoutError, n as GatewayClientStartReadinessOptions, o as EventLoopReadyOptions, p as GatewayClientRequestOptions, r as GatewayClientStartable, s as EventLoopReadyResult, t as EventLoopReadyWaiter, u as GatewayClient, v as DeviceAuthTokenRecord } from "./readiness-CLaFwfd4.mjs";
+import { _ as isGatewayConnectAssemblyError, a as startGatewayClientWithReadinessWait, c as waitForEventLoopReady, d as GatewayClientHostDeps, f as GatewayClientOptions, g as GatewayClientRequestError, h as GatewayReconnectPausedInfo, i as startGatewayClientWhenEventLoopReady, l as DeviceIdentity, m as GatewayClientRequestTimeoutError, n as GatewayClientStartReadinessOptions, o as EventLoopReadyOptions, p as GatewayClientRequestOptions, r as GatewayClientStartable, s as EventLoopReadyResult, t as EventLoopReadyWaiter, u as GatewayClient, v as DeviceAuthTokenRecord } from "./readiness-BbuB7IzG.mjs";
 import { GatewayScopeUpgrade, ScopeUpgradeBinding, ScopeUpgradeOptions, ScopeUpgradeOutcome } from "./scope-upgrade.mjs";
 //#region packages/gateway-client/src/run-recovery-text.d.ts
 export type RecoveryRequest = (method: string, params: Record<string, unknown>, signal: AbortSignal) => Promise<unknown>;

package/dist/index.mjs

@@ -1,7 +1,7 @@
-import { A as resolveGatewayConnectScopes, B as buildDeviceAuthPayloadV3, C as isGatewayProtocolResponseError, D as gatewayOriginScope, E as gatewayCredentialScope, F as mergeChatStreamMessage, L as asRecord, M as shouldRetryGatewayWithDeviceToken, N as normalizeLowercaseStringOrEmpty, O as GatewayBrowserDeviceAuthLifecycle, P as normalizeOptionalString, R as isRecord, S as GatewayProtocolRequestTimeoutError, T as resolveModelCatalogConnect, V as normalizeDeviceMetadataForAuth, _ as readSessionMessageIdentity, a as createSessionProjection, b as GatewayProtocolClient, c as reduceSessionProjection, d as readSessionProjectionFinalMessageIdentity, f as isSessionProjectionErrorMessage, g as readAssistantStreamSegmentIdentity, h as normalizeSessionProjectionRunId, i as resetGatewaySessionMessageSubscriptionCoordinator, j as selectGatewayConnectAuth, k as buildGatewayConnectAuth, l as reduceSessionProjectionRunEvent, m as isLocallyOptimisticSessionMessage, n as getGatewaySessionMessageSubscriptionCoordinator, o as projectLiveSessionMessage, p as projectSessionTerminalReplyMessage, r as releaseGatewaySessionMessageSubscription, s as reconcileSessionProjectionSnapshot, t as GatewaySessionMessageSubscriptionCoordinator, u as hasSessionProjectionAcceptedFinal, v as readSessionMessageSequence, w as raceWithTimeout, x as GatewayProtocolRequestError, y as shouldPauseGatewayReconnect, z as buildDeviceAuthPayload } from "./session-subscriptions-D5CpDUGt.mjs";
-import { DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, MAX_CONNECT_CHALLENGE_TIMEOUT_MS, MAX_SAFE_TIMEOUT_DELAY_MS, MIN_CONNECT_CHALLENGE_TIMEOUT_MS, addSafeTimeoutDelayGraceMs, clampConnectChallengeTimeoutMs, clearGatewayConnectTimeout, getConnectChallengeTimeoutMsFromEnv, resolveConnectChallengeTimeoutMs, resolveFiniteTimeoutDelayMs, resolvePreauthHandshakeTimeoutMs, resolveSafeTimeoutDelayMs, startGatewayConnectTimeout } from "./timeouts.mjs";
+import { A as buildGatewayConnectAuth, B as normalizeDeviceMetadataForAuth, C as isGatewayProtocolResponseError, D as gatewayCredentialScope, E as resolveModelCatalogConnect, I as asRecord, L as isRecord, M as selectGatewayConnectAuth, N as shouldRetryGatewayWithDeviceToken, O as gatewayOriginScope, P as mergeChatStreamMessage, R as buildDeviceAuthPayload, S as GatewayProtocolRequestTimeoutError, T as raceWithTimeout, _ as isSessionProjectionErrorMessage, a as createSessionProjection, b as GatewayProtocolClient, c as reduceSessionProjection, d as readSessionProjectionFinalMessageIdentity, f as isLocallyOptimisticSessionMessage, g as readSessionMessageSequence, h as readSessionMessageIdentity, i as resetGatewaySessionMessageSubscriptionCoordinator, j as resolveGatewayConnectScopes, k as GatewayBrowserDeviceAuthLifecycle, l as reduceSessionProjectionRunEvent, m as readAssistantStreamSegmentIdentity, n as getGatewaySessionMessageSubscriptionCoordinator, o as projectLiveSessionMessage, p as normalizeSessionProjectionRunId, r as releaseGatewaySessionMessageSubscription, s as reconcileSessionProjectionSnapshot, t as GatewaySessionMessageSubscriptionCoordinator, u as hasSessionProjectionAcceptedFinal, v as projectSessionTerminalReplyMessage, w as createAbortError, x as GatewayProtocolRequestError, y as shouldPauseGatewayReconnect, z as buildDeviceAuthPayloadV3 } from "./session-subscriptions-DE0w2upu.mjs";
+import { _ as normalizeOptionalString, a as MIN_CONNECT_CHALLENGE_TIMEOUT_MS, c as clearGatewayConnectTimeout, d as resolveFiniteTimeoutDelayMs, f as resolvePreauthHandshakeTimeoutMs, h as normalizeLowercaseStringOrEmpty, i as MAX_SAFE_TIMEOUT_DELAY_MS, l as getConnectChallengeTimeoutMsFromEnv, m as startGatewayConnectTimeout, n as DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, o as addSafeTimeoutDelayGraceMs, p as resolveSafeTimeoutDelayMs, r as MAX_CONNECT_CHALLENGE_TIMEOUT_MS, s as clampConnectChallengeTimeoutMs, t as DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, u as resolveConnectChallengeTimeoutMs } from "./timeouts-CQTCye5U.mjs";
 import { rawDataToString } from "./websocket-data.mjs";
-import { n as startGatewayClientWithReadinessWait, r as waitForEventLoopReady, t as startGatewayClientWhenEventLoopReady } from "./readiness-DnB0NLBq.mjs";
+import { n as startGatewayClientWithReadinessWait, r as waitForEventLoopReady, t as startGatewayClientWhenEventLoopReady } from "./readiness-rG6_5Ynk.mjs";
 import { GatewayScopeUpgrade } from "./scope-upgrade.mjs";
 import { createRequire } from "node:module";
 import { ConnectErrorDetailCodes, formatConnectErrorMessage, readConnectErrorDetailCode } from "@openclaw/gateway-protocol/connect-error-details";
@@ -78,9 +78,7 @@ function normalizeUrlQueryParamName(name) {
 }
 function looksLikeNestedUrlValue(value) {
 	if (URL_SCHEME_RE.test(value)) return true;
-	const forwardAuthorityIndex = value.indexOf("//");
-	const backwardAuthorityIndex = value.indexOf("\\\\");
-	const authorityIndex = forwardAuthorityIndex < 0 ? backwardAuthorityIndex : backwardAuthorityIndex < 0 ? forwardAuthorityIndex : Math.min(forwardAuthorityIndex, backwardAuthorityIndex);
+	const authorityIndex = value.search(/\/\/|\\\\/u);
 	if (authorityIndex >= 0 && value.includes("@", authorityIndex + 2)) return true;
 	const queryIndex = value.search(/[?&]/u);
 	if (queryIndex >= 0 && value.includes("=", queryIndex + 1)) return true;
@@ -89,7 +87,7 @@ function looksLikeNestedUrlValue(value) {
 	return /%[\da-f]{2}/iu.test(value);
 }
 /** True for auth-like URL query parameter names that should be redacted. */
-function isSensitiveUrlQueryParamName$1(name) {
+function isSensitiveUrlQueryParamName(name) {
 	const normalized = normalizeUrlQueryParamName(name);
 	return normalized.unresolvedEncoding || SENSITIVE_URL_QUERY_PARAM_NAMES.has(normalized.value) || SUFFIXED_OR_SCOPED_TOKEN_QUERY_PARAM_RE.test(normalized.value);
 }
@@ -107,7 +105,7 @@ function redactDirectSensitiveUrl(value) {
 			parsed.password = parsed.password ? "***" : "";
 			mutated = true;
 		}
-		for (const key of Array.from(parsed.searchParams.keys())) if (isSensitiveUrlQueryParamName$1(key)) {
+		for (const key of Array.from(parsed.searchParams.keys())) if (isSensitiveUrlQueryParamName(key)) {
 			parsed.searchParams.set(key, "***");
 			mutated = true;
 		}
@@ -118,12 +116,11 @@ function redactDirectSensitiveUrl(value) {
 }
 function redactQueryString(value, depth) {
 	const params = new URLSearchParams(value);
-	const entries = Array.from(params.entries());
 	const redactedEntries = [];
 	const seenSensitiveKeys = /* @__PURE__ */ new Set();
 	let mutated = false;
-	for (const [key, entryValue] of entries) {
-		if (isSensitiveUrlQueryParamName$1(key)) {
+	for (const [key, entryValue] of params) {
+		if (isSensitiveUrlQueryParamName(key)) {
 			mutated = true;
 			if (!seenSensitiveKeys.has(key)) {
 				seenSensitiveKeys.add(key);
@@ -140,7 +137,7 @@ function redactQueryString(value, depth) {
 	return new URLSearchParams(redactedEntries).toString();
 }
 function redactUrlLikeFallback(value) {
-	return redactSensitiveUrlPath(redactEmbeddedUrlUserInfo(value).replace(/([?&])([^=&]+)=([^&]*)/g, (match, prefix, key) => isSensitiveUrlQueryParamName$1(key) ? `${prefix}${key}=***` : match));
+	return redactSensitiveUrlPath(redactEmbeddedUrlUserInfo(value).replace(/([?&])([^=&]+)=([^&]*)/g, (match, prefix, key) => isSensitiveUrlQueryParamName(key) ? `${prefix}${key}=***` : match));
 }
 function redactAuthorityUserInfo(candidate, authorityStart) {
 	const authority = candidate.slice(authorityStart);
@@ -312,10 +309,6 @@ function redactSensitiveUrlLikeString(value) {
 	return redactSensitiveUrlLikeStringAtDepth(value, 0).value;
 }
 ipaddr.IPv4.parse("198.18.0.0");
-function stripIpv6Brackets(value) {
-	if (value.startsWith("[") && value.endsWith("]")) return value.slice(1, -1);
-	return value;
-}
 /** Type guard for parsed IPv6 addresses. */
 function isIpv6Address(address) {
 	return address.kind() === "ipv6";
@@ -326,7 +319,7 @@ function normalizeIpv4MappedAddress(address) {
 function normalizeIpParseInput(raw) {
 	const trimmed = normalizeOptionalString(raw);
 	if (!trimmed) return;
-	return stripIpv6Brackets(trimmed);
+	return trimmed.startsWith("[") && trimmed.endsWith("]") ? trimmed.slice(1, -1) : trimmed;
 }
 /** Parses canonical IPv4/IPv6 literals, rejecting legacy IPv4 shorthand forms. */
 function parseCanonicalIpAddress(raw) {
@@ -349,18 +342,12 @@ function isLoopbackIpAddress(raw) {
 }
 //#endregion
 //#region packages/gateway-client/src/client-address-utils.ts
-function normalizeGatewayErrorText(value) {
-	return typeof value === "string" ? value.trim().toLowerCase() : "";
-}
-function isSensitiveUrlQueryParamName(key) {
-	return /(?:token|password|secret|key|auth|credential)/iu.test(key);
-}
 function isGatewayClientStoppedError(err) {
 	const message = err instanceof Error ? err.message : String(err);
 	return message === "gateway client stopped" || message === "Error: gateway client stopped";
 }
 function formatGatewayClientErrorForLog(err) {
-	return String(err).replace(/\/\/([^@/?#\s]+)@/g, "//***:***@").replace(/(Authorization:\s*Bearer\s+)[^\s]+/giu, "$1***").replace(/([?&])([^=&\s]+)=([^&#\s"'<>)]*)/g, (match, prefix, key) => isSensitiveUrlQueryParamName(key) ? `${prefix}${key}=***` : match);
+	return String(err).replace(/\/\/([^@/?#\s]+)@/g, "//***:***@").replace(/(Authorization:\s*Bearer\s+)[^\s]+/giu, "$1***").replace(/([?&])([^=&\s]+)=([^&#\s"'<>)]*)/g, (match, prefix, key) => /(?:token|password|secret|key|auth|credential)/iu.test(key) ? `${prefix}${key}=***` : match);
 }
 const SHA256_HEX_FINGERPRINT = /^[a-fA-F0-9]{64}$/u;
 const SHA256_COLON_FINGERPRINT = /^(?:[a-fA-F0-9]{2}:){31}[a-fA-F0-9]{2}$/u;
@@ -523,12 +510,7 @@ function isGatewayConnectAssemblyError(value) {
 //#endregion
 //#region packages/net-policy/src/url-protocol.ts
 function parseUrl(value) {
-	if (value instanceof URL) return value;
-	try {
-		return new URL(value);
-	} catch {
-		return null;
-	}
+	return value instanceof URL ? value : URL.parse(value);
 }
 function isWssUrl(value) {
 	return parseUrl(value)?.protocol === "wss:";
@@ -567,17 +549,14 @@ function isTrustedPlaintextWebSocketHost(hostname) {
 	return normalized.endsWith(".local") || normalized.endsWith(".ts.net");
 }
 function isSecureWebSocketUrl(rawUrl, options) {
-	try {
-		const url = new URL(rawUrl);
-		const protocol = url.protocol === "https:" ? "wss:" : url.protocol === "http:" ? "ws:" : url.protocol;
-		if (protocol === "wss:") return true;
-		if (protocol !== "ws:") return false;
-		if (isTrustedPlaintextWebSocketHost(url.hostname)) return true;
-		if (options?.allowPrivateWs === true) return parseGatewayIpAddress(url.hostname.startsWith("[") && url.hostname.endsWith("]") ? url.hostname.slice(1, -1) : url.hostname) === void 0;
-		return false;
-	} catch {
-		return false;
-	}
+	const url = URL.parse(rawUrl);
+	if (!url) return false;
+	const protocol = url.protocol === "https:" ? "wss:" : url.protocol === "http:" ? "ws:" : url.protocol;
+	if (protocol === "wss:") return true;
+	if (protocol !== "ws:") return false;
+	if (isTrustedPlaintextWebSocketHost(url.hostname)) return true;
+	if (options?.allowPrivateWs === true) return parseGatewayIpAddress(url.hostname.startsWith("[") && url.hostname.endsWith("]") ? url.hostname.slice(1, -1) : url.hostname) === void 0;
+	return false;
 }
 var GatewayWebSocketTransportConfigurationError = class extends Error {};
 var GatewayWebSocketTlsPinError = class extends Error {};
@@ -585,13 +564,7 @@ function resolveGatewayWebSocketTransport(params) {
 	const usesTls = isWssUrl(params.url);
 	if (params.tlsFingerprint && !usesTls) throw new GatewayWebSocketTransportConfigurationError("gateway tls fingerprint requires wss:// gateway url");
 	const allowPrivateWs = (params.env ?? process.env).OPENCLAW_ALLOW_INSECURE_PRIVATE_WS === "1";
-	if (!isSecureWebSocketUrl(params.url, { allowPrivateWs })) {
-		let displayHost = params.url;
-		try {
-			displayHost = new URL(params.url).hostname || params.url;
-		} catch {}
-		throw new GatewayWebSocketTransportConfigurationError(`SECURITY ERROR: Cannot connect to "${displayHost}" over plaintext ws://. Both credentials and chat data would be exposed to network interception. Use wss:// for remote URLs. Safe defaults: keep gateway.bind=loopback and connect via SSH tunnel (ssh -N -L 18789:127.0.0.1:18789 user@gateway-host), or use Tailscale Serve/Funnel. ` + (allowPrivateWs ? "" : "Break-glass (trusted private networks only): set OPENCLAW_ALLOW_INSECURE_PRIVATE_WS=1. ") + "Run `openclaw doctor --fix` for guidance.");
-	}
+	if (!isSecureWebSocketUrl(params.url, { allowPrivateWs })) throw new GatewayWebSocketTransportConfigurationError(`SECURITY ERROR: Cannot connect to "${URL.parse(params.url)?.hostname || params.url}" over plaintext ws://. Both credentials and chat data would be exposed to network interception. Use wss:// for remote URLs. Safe defaults: keep gateway.bind=loopback and connect via SSH tunnel (ssh -N -L 18789:127.0.0.1:18789 user@gateway-host), or use Tailscale Serve/Funnel. ` + (allowPrivateWs ? "" : "Break-glass (trusted private networks only): set OPENCLAW_ALLOW_INSECURE_PRIVATE_WS=1. ") + "Run `openclaw doctor --fix` for guidance.");
 	const normalize = params.normalizeTlsFingerprint ?? normalizeTlsFingerprint;
 	const expectedFingerprint = params.tlsFingerprint ? normalizeTlsFingerprint(params.tlsFingerprint) : void 0;
 	if (params.tlsFingerprint && !expectedFingerprint) throw new GatewayWebSocketTransportConfigurationError("gateway tls fingerprint must be a SHA-256 fingerprint");
@@ -719,7 +692,7 @@ var GatewayClient = class {
 				timeoutMs,
 				requestSent
 			}),
-			createRequestAbortError: createGatewayRequestAbortError,
+			createRequestAbortError: (method) => createAbortError(`gateway request aborted for ${method}`),
 			buildConnectPlan: ({ nonce, challengeTs, serverCapabilities, generation, ...authority }) => {
 				if (!nonce) throw new Error("gateway connect challenge missing nonce");
 				if (this.opts.deviceIdentity && challengeTs == null) throw new Error("gateway connect challenge timestamp invalid");
@@ -954,7 +927,15 @@ var GatewayClient = class {
 		const ws = this.ws;
 		this.ws = null;
 		if (ws) {
-			const pendingStop = this.createPendingStop(ws);
+			let resolve = () => {};
+			const pendingStop = {
+				ws,
+				promise: new Promise((done) => {
+					resolve = done;
+				}),
+				resolve
+			};
+			this.pendingStop = pendingStop;
 			const forceTerminateTimer = setTimeout(() => {
 				try {
 					ws.terminate();
@@ -975,18 +956,6 @@ var GatewayClient = class {
 		this.protocol.stop();
 		return null;
 	}
-	createPendingStop(ws) {
-		let resolve = () => {};
-		const promise = new Promise((done) => {
-			resolve = done;
-		});
-		this.pendingStop = {
-			ws,
-			promise,
-			resolve
-		};
-		return this.pendingStop;
-	}
 	resolvePendingStop(ws) {
 		if (this.pendingStop?.ws !== ws) return;
 		const { resolve, terminateTimer } = this.pendingStop;
@@ -1076,7 +1045,7 @@ var GatewayClient = class {
 	shouldRetryWithAlternateNodeProtocol(error) {
 		if (!this.shouldNegotiateLegacyNodeProtocol() || !(error instanceof GatewayClientRequestError)) return false;
 		const detailCode = readConnectErrorDetailCode(error.details);
-		return error.details?.expectedProtocol === (this.useLegacyNodeProtocolEnvelope ? PROTOCOL_VERSION : MIN_NODE_PROTOCOL_VERSION) && (detailCode === ConnectErrorDetailCodes.PROTOCOL_MISMATCH || normalizeGatewayErrorText(error.message).includes("protocol mismatch"));
+		return error.details?.expectedProtocol === (this.useLegacyNodeProtocolEnvelope ? PROTOCOL_VERSION : MIN_NODE_PROTOCOL_VERSION) && (detailCode === ConnectErrorDetailCodes.PROTOCOL_MISMATCH || normalizeLowercaseStringOrEmpty(error.message).includes("protocol mismatch"));
 	}
 	buildDeviceConnectParams(params) {
 		if (!this.opts.deviceIdentity) return;
@@ -1292,7 +1261,7 @@ var GatewayClient = class {
 	}
 	clearStaleDeviceTokenForClose(context) {
 		const { code, reason, generation } = context;
-		if (code !== 1008 || !normalizeGatewayErrorText(reason).includes("device token mismatch") || !this.opts.deviceIdentity) return;
+		if (code !== 1008 || !normalizeLowercaseStringOrEmpty(reason).includes("device token mismatch") || !this.opts.deviceIdentity) return;
 		const observation = this.connectionStoredToken?.generation === generation ? this.connectionStoredToken : { token: void 0 };
 		this.clearDeviceToken(this.opts.deviceIdentity.deviceId, observation, () => !this.opts.token && !this.opts.password);
 	}
@@ -1334,7 +1303,7 @@ var GatewayClient = class {
 	}
 	isUnsupportedConnectAuthField(error, field) {
 		if (!(error instanceof GatewayClientRequestError) || error.gatewayCode !== "INVALID_REQUEST") return false;
-		const message = normalizeGatewayErrorText(error.message);
+		const message = normalizeLowercaseStringOrEmpty(error.message);
 		return message.includes("invalid connect params") && message.includes(field);
 	}
 	isTrustedDeviceRetryEndpoint() {
@@ -1389,11 +1358,6 @@ var GatewayClient = class {
 		});
 	}
 };
-function createGatewayRequestAbortError(method) {
-	const err = /* @__PURE__ */ new Error(`gateway request aborted for ${method}`);
-	err.name = "AbortError";
-	return err;
-}
 //#endregion
 //#region packages/gateway-client/src/run-recovery-text.ts
 async function recoverTerminalReply(params) {

package/dist/{protocol-client-DT451Msj.d.mts → protocol-client-CKMLpN-S.d.mts}

@@ -65,6 +65,7 @@ type GatewayProtocolConnectDecision = {
   closeReason: string;
   reconnectDelayMs?: number;
   stop?: boolean;
+  keepOpen?: boolean;
   error?: Error;
 };
 type GatewayProtocolCloseDecision = {

package/dist/{readiness-CLaFwfd4.d.mts → readiness-BbuB7IzG.d.mts}

@@ -1,5 +1,5 @@
 import { n as GatewayProtocolRequestOptions, r as GatewayProtocolRequestTimeoutError, t as GatewayProtocolRequestError } from "./protocol-request-CtVhe3Bj.mjs";
-import { l as GatewayProtocolRequestTiming, n as GatewayClientCloseInfo, r as GatewayClientConnectionMetadata } from "./protocol-client-DT451Msj.mjs";
+import { l as GatewayProtocolRequestTiming, n as GatewayClientCloseInfo, r as GatewayClientConnectionMetadata } from "./protocol-client-CKMLpN-S.mjs";
 import { ConnectParams, ErrorShape, EventFrame, HelloOk } from "@openclaw/gateway-protocol/frame-guards";
 import { GatewayClientMode, GatewayClientName } from "@openclaw/gateway-protocol/client-info";
 import "ws";
@@ -171,7 +171,6 @@ declare class GatewayClient {
     timeoutMs?: number;
   }): Promise<void>;
   private beginStop;
-  private createPendingStop;
   private resolvePendingStop;
   private logDebug;
   private logError;

package/dist/{readiness-DnB0NLBq.mjs → readiness-rG6_5Ynk.mjs}

@@ -1,4 +1,4 @@
-import { resolveConnectChallengeTimeoutMs, resolveFiniteTimeoutDelayMs } from "./timeouts.mjs";
+import { d as resolveFiniteTimeoutDelayMs, u as resolveConnectChallengeTimeoutMs } from "./timeouts-CQTCye5U.mjs";
 //#region packages/gateway-client/src/event-loop-ready.ts
 const DEFAULT_MAX_WAIT_MS = 1e4;
 const DEFAULT_INTERVAL_MS = 1;

package/dist/readiness.d.mts

@@ -1,2 +1,2 @@
-import { a as startGatewayClientWithReadinessWait, i as startGatewayClientWhenEventLoopReady, n as GatewayClientStartReadinessOptions, r as GatewayClientStartable, t as EventLoopReadyWaiter } from "./readiness-CLaFwfd4.mjs";
+import { a as startGatewayClientWithReadinessWait, i as startGatewayClientWhenEventLoopReady, n as GatewayClientStartReadinessOptions, r as GatewayClientStartable, t as EventLoopReadyWaiter } from "./readiness-BbuB7IzG.mjs";
 export { EventLoopReadyWaiter, GatewayClientStartReadinessOptions, GatewayClientStartable, startGatewayClientWhenEventLoopReady, startGatewayClientWithReadinessWait };

package/dist/readiness.mjs

@@ -1,3 +1,2 @@
-import "./timeouts.mjs";
-import { n as startGatewayClientWithReadinessWait, t as startGatewayClientWhenEventLoopReady } from "./readiness-DnB0NLBq.mjs";
+import { n as startGatewayClientWithReadinessWait, t as startGatewayClientWhenEventLoopReady } from "./readiness-rG6_5Ynk.mjs";
 export { startGatewayClientWhenEventLoopReady, startGatewayClientWithReadinessWait };

package/dist/{session-subscriptions-D5CpDUGt.mjs → session-subscriptions-DE0w2upu.mjs}

@@ -1,7 +1,7 @@
-import { DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, clearGatewayConnectTimeout, resolveSafeTimeoutDelayMs, startGatewayConnectTimeout } from "./timeouts.mjs";
+import { _ as normalizeOptionalString, c as clearGatewayConnectTimeout, g as normalizeNullableString, m as startGatewayConnectTimeout, p as resolveSafeTimeoutDelayMs, t as DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS } from "./timeouts-CQTCye5U.mjs";
 import { ConnectErrorDetailCodes, readConnectErrorDetailCode, readConnectErrorRecoveryAdvice, readPairingConnectErrorDetails } from "@openclaw/gateway-protocol/connect-error-details";
 import { isGatewayEventFrame, isGatewayResponseFrame } from "@openclaw/gateway-protocol/frame-guards";
-import { GATEWAY_SUSPEND_IDENTITY_RETRY_AFTER_MS, isGatewaySuspendUnavailableError } from "@openclaw/gateway-protocol/restart-unavailable";
+import { GATEWAY_SUSPEND_IDENTITY_RETRY_AFTER_MS, isGatewayRestartUnavailableError, isGatewaySuspendUnavailableError } from "@openclaw/gateway-protocol/restart-unavailable";
 import { GATEWAY_ASSISTANT_ERROR_FALLBACK_TEXT } from "@openclaw/gateway-protocol/gateway-error-details";
 //#region packages/gateway-client/src/device-auth.ts
 function normalizeDeviceMetadataForAuth(value) {
@@ -100,26 +100,6 @@ function mergeChatStreamMessage(previous, payload) {
 	};
 }
 //#endregion
-//#region packages/normalization-core/src/string-coerce.ts
-/** Trims string input and returns null for non-strings or empty strings. */
-function normalizeNullableString(value) {
-	if (typeof value !== "string") return null;
-	const trimmed = value.trim();
-	return trimmed ? trimmed : null;
-}
-/** Trims string input and returns undefined for non-strings or empty strings. */
-function normalizeOptionalString(value) {
-	return normalizeNullableString(value) ?? void 0;
-}
-/** Lowercases a normalized optional string. */
-function normalizeOptionalLowercaseString(value) {
-	return normalizeOptionalString(value)?.toLowerCase();
-}
-/** Lowercases a normalized string or returns an empty string when absent. */
-function normalizeLowercaseStringOrEmpty(value) {
-	return normalizeOptionalLowercaseString(value) ?? "";
-}
-//#endregion
 //#region packages/gateway-client/src/connect-auth.ts
 function selectGatewayConnectAuth(params) {
 	const authToken = normalizeOptionalString(params.token);
@@ -267,15 +247,12 @@ var GatewayBrowserDeviceAuthLifecycle = class {
 function normalizeGatewayScope(gatewayUrl, includeSearch) {
 	const trimmed = gatewayUrl.trim();
 	if (!trimmed) return "default";
-	try {
-		const browserLocation = globalThis.location;
-		const base = browserLocation ? `${browserLocation.protocol}//${browserLocation.host}${browserLocation.pathname || "/"}` : void 0;
-		const parsed = base ? new URL(trimmed, base) : new URL(trimmed);
-		const pathname = parsed.pathname === "/" ? "" : parsed.pathname.replace(/\/+$/, "") || parsed.pathname;
-		return `${parsed.protocol}//${parsed.host}${pathname}${includeSearch ? parsed.search : ""}`;
-	} catch {
-		return trimmed;
-	}
+	const browserLocation = globalThis.location;
+	const base = browserLocation ? `${browserLocation.protocol}//${browserLocation.host}${browserLocation.pathname || "/"}` : void 0;
+	const parsed = URL.parse(trimmed, base);
+	if (!parsed) return trimmed;
+	const pathname = parsed.pathname === "/" ? "" : parsed.pathname.replace(/\/+$/, "") || parsed.pathname;
+	return `${parsed.protocol}//${parsed.host}${pathname}${includeSearch ? parsed.search : ""}`;
 }
 /** Normalizes the gateway URL scope used for origin-bound device tokens. */
 function gatewayOriginScope(gatewayUrl) {
@@ -309,20 +286,39 @@ function createAbortError(message, options) {
 /** Bounds observation without cancelling work; a factory starts only after the timer is armed. */
 async function raceWithTimeout(operation, timeoutMs, onTimeout, options = {}) {
 	let timer;
+	let onAbort;
 	try {
 		const deadline = new Promise((resolve, reject) => {
-			timer = setTimeout(() => {
+			const settle = (result) => {
 				try {
-					resolve(onTimeout());
+					resolve(result());
 				} catch (error) {
 					reject(error);
 				}
-			}, timeoutMs);
+			};
+			timer = setTimeout(() => settle(onTimeout), timeoutMs);
 			if (options.ref === false) timer.unref?.();
+			const signal = options.signal;
+			if (signal) {
+				onAbort = () => settle(() => {
+					if (options.onAbort) return options.onAbort(signal);
+					throw createAbortError("Operation aborted", { cause: signal.reason });
+				});
+				signal.addEventListener("abort", onAbort, { once: true });
+				if (signal.aborted) onAbort();
+			}
 		});
-		return await Promise.race([typeof operation === "function" ? operation() : operation, deadline]);
+		let source;
+		try {
+			source = typeof operation === "function" ? operation() : operation;
+		} catch (error) {
+			deadline.catch(() => {});
+			throw error;
+		}
+		return await Promise.race([source, deadline]);
 	} finally {
 		clearTimeout(timer);
+		if (onAbort) options.signal?.removeEventListener("abort", onAbort);
 	}
 }
 function computeBackoff(policy, attempt) {
@@ -577,17 +573,35 @@ var GatewayPendingRequests = class {
 		this.requestSequence = 0;
 	}
 	setSuspensionPhase(phase) {
-		if (phase === "accepting") this.resumeIdentityRequests();
-		else if (phase === "preparing" || phase === "draining" || phase === "prepared") this.pauseIdentityRequests();
-	}
-	pauseIdentityRequests(retryAfterMs = GATEWAY_SUSPEND_IDENTITY_RETRY_AFTER_MS) {
-		clearTimeout(this.suspensionTimer);
-		this.suspensionTimer = setTimeout(() => this.resumeIdentityRequests(), resolveSafeTimeoutDelayMs(Number.isFinite(retryAfterMs) && retryAfterMs > 0 ? retryAfterMs : GATEWAY_SUSPEND_IDENTITY_RETRY_AFTER_MS));
-		this.suspensionTimer.unref?.();
-	}
-	resumeIdentityRequests() {
-		clearTimeout(this.suspensionTimer);
-		this.suspensionTimer = void 0;
+		if (phase === "accepting") this.resumeBootstrapRequests();
+		else if (phase === "preparing" || phase === "draining" || phase === "prepared") this.pauseBootstrapRequests(void 0, true);
+	}
+	pauseBootstrapRequests(retryAfterMs = GATEWAY_SUSPEND_IDENTITY_RETRY_AFTER_MS, announced = false) {
+		const nowMs = this.opts.nowMs();
+		const delayMs = resolveSafeTimeoutDelayMs(Number.isFinite(retryAfterMs) && retryAfterMs > 0 ? retryAfterMs : GATEWAY_SUSPEND_IDENTITY_RETRY_AFTER_MS);
+		const pause = this.bootstrapPause ??= {
+			retryAtMs: nowMs,
+			revision: 0,
+			announced
+		};
+		pause.announced ||= announced;
+		pause.revision += 1;
+		pause.retryAtMs = Math.max(pause.retryAtMs, nowMs + delayMs);
+		clearTimeout(pause.timer);
+		pause.timer = void 0;
+		if (pause.announced) return;
+		pause.timer = setTimeout(() => {
+			pause.timer = void 0;
+			this.drainBootstrapRequests();
+		}, resolveSafeTimeoutDelayMs(pause.retryAtMs - nowMs));
+		pause.timer.unref?.();
+	}
+	resumeBootstrapRequests() {
+		clearTimeout(this.bootstrapPause?.timer);
+		this.bootstrapPause = void 0;
+		this.drainBootstrapRequests();
+	}
+	drainBootstrapRequests() {
 		for (const pending of this.pending.values()) if (pending.waitingForResume) pending.resend?.();
 	}
 	get hasPending() {
@@ -622,6 +636,10 @@ var GatewayPendingRequests = class {
 			const cleanup = () => {
 				if (timeout !== void 0) clearTimeout(timeout);
 				options?.signal?.removeEventListener("abort", onAbort);
+				if (this.bootstrapPause?.probe?.pending === pending) {
+					this.bootstrapPause.probe = void 0;
+					this.drainBootstrapRequests();
+				}
 			};
 			const retire = (errorCode) => {
 				if (this.pending.get(id) !== pending) return false;
@@ -660,8 +678,13 @@ var GatewayPendingRequests = class {
 					params
 				});
 				const send = () => {
-					if (this.pending.get(id) !== pending) return;
-					pending.waitingForResume = Boolean(pending.resend && this.suspensionTimer);
+					if (this.pending.get(id) !== pending || options?.signal?.aborted || pending.waitingForResume && timeoutMs !== void 0 && this.opts.nowMs() - pending.startedAtMs >= timeoutMs) return;
+					const pause = pending.resend ? this.bootstrapPause : void 0;
+					if (pause && !pause.announced && !pause.timer && !pause.probe) pause.probe = {
+						pending,
+						revision: pause.revision
+					};
+					pending.waitingForResume = Boolean(pause && (pause.announced || pause.probe?.pending !== pending));
 					if (pending.waitingForResume) return;
 					try {
 						sender.send(frame);
@@ -672,7 +695,7 @@ var GatewayPendingRequests = class {
 						if (retire("CLIENT_SEND_ERROR")) reject(error instanceof Error ? error : new Error(String(error)));
 					}
 				};
-				if (method === "agent.identity.get") pending.resend = send;
+				if (method === "agent.identity.get" || method === "sessions.subscribe" || method === "sessions.groups.list" || method === "question.list" || method === "sessions.list") pending.resend = send;
 				send();
 			} catch (error) {
 				if (retire("CLIENT_SEND_ERROR")) reject(error instanceof Error ? error : new Error(String(error)));
@@ -690,12 +713,14 @@ var GatewayPendingRequests = class {
 			}
 			return;
 		}
-		if (!frame.ok && pending.resend && !pending.acceptedNotified && frame.error?.code === "UNAVAILABLE" && frame.error.retryable === true && isGatewaySuspendUnavailableError(frame.error)) {
-			this.pauseIdentityRequests(frame.error.retryAfterMs);
+		if (!frame.ok && pending.resend && !pending.acceptedNotified && frame.error?.code === "UNAVAILABLE" && frame.error.retryable === true && (isGatewaySuspendUnavailableError(frame.error) || isGatewayRestartUnavailableError(frame.error))) {
+			if (this.bootstrapPause?.probe?.pending === pending) this.bootstrapPause.probe = void 0;
+			this.pauseBootstrapRequests(isGatewayRestartUnavailableError(frame.error) ? Math.ceil(Math.max(GATEWAY_SUSPEND_IDENTITY_RETRY_AFTER_MS, frame.error.retryAfterMs ?? 0) * (1 + Math.random() * .2)) : frame.error.retryAfterMs);
 			pending.waitingForResume = true;
 			return;
 		}
 		this.pending.delete(frame.id);
+		if (frame.ok && this.bootstrapPause?.probe?.pending === pending && this.bootstrapPause.probe.revision === this.bootstrapPause.revision) this.resumeBootstrapRequests();
 		pending.cleanup?.();
 		if (frame.ok) {
 			this.finishTiming(frame.id, pending, true);
@@ -708,8 +733,8 @@ var GatewayPendingRequests = class {
 		pending.reject(error);
 	}
 	flush(error) {
-		clearTimeout(this.suspensionTimer);
-		this.suspensionTimer = void 0;
+		clearTimeout(this.bootstrapPause?.timer);
+		this.bootstrapPause = void 0;
 		const retired = this.pending;
 		this.pending = /* @__PURE__ */ new Map();
 		this.requestSequence = 0;
@@ -1004,6 +1029,10 @@ var GatewayProtocolClient = class {
 					error: requestError,
 					reconnectDelayMs: decision.reconnectDelayMs
 				};
+				if (decision.keepOpen) {
+					this.clearHandshakeTimer();
+					return;
+				}
 				if (decision.stop) this.stopped = true;
 				this.connectionAbort?.abort();
 				socket.close(decision.closeCode, decision.closeReason);
@@ -1046,8 +1075,8 @@ var GatewayProtocolClient = class {
 				this.sendConnect(socket, generation);
 				return;
 			}
-			const seq = typeof parsed.seq === "number" ? parsed.seq : null;
-			if (seq !== null) {
+			const seq = parsed.seq;
+			if (seq !== void 0) {
 				if (this.lastSeq !== null && seq > this.lastSeq + 1) {
 					const expected = this.lastSeq + 1;
 					const state = asRecord(parsed.payload).state;
@@ -1072,6 +1101,7 @@ var GatewayProtocolClient = class {
 	dispatchEvent(socket, generation, event) {
 		const listeners = this.listeners.snapshot();
 		if (event.event === "gateway.suspension" && typeof event.payload === "object" && event.payload !== null && "phase" in event.payload) this.requests.setSuspensionPhase(event.payload.phase);
+		else if (event.event === "shutdown" && typeof asRecord(event.payload).restartExpectedMs === "number") this.requests.setSuspensionPhase("draining");
 		this.invoke("event", () => this.opts.onEvent?.(event));
 		for (const [listener, subscription] of listeners) {
 			if (!this.isActive(socket, generation) || this.connectionAbort?.signal.aborted) return;
@@ -1195,6 +1225,8 @@ const NON_RECOVERABLE_AUTH_ERRORS = /* @__PURE__ */ new Set([
 	ConnectErrorDetailCodes.AUTH_VERIFIED_USER_REQUIRED,
 	ConnectErrorDetailCodes.CONTROL_UI_BUILD_MISMATCH,
 	ConnectErrorDetailCodes.PAIRING_REQUIRED,
+	ConnectErrorDetailCodes.PAIRING_REJECTED,
+	ConnectErrorDetailCodes.PAIRING_EXPIRED,
 	ConnectErrorDetailCodes.CONTROL_UI_DEVICE_IDENTITY_REQUIRED,
 	ConnectErrorDetailCodes.DEVICE_IDENTITY_REQUIRED
 ]);
@@ -1290,10 +1322,59 @@ function compareStableStrings(left, right) {
 	return left < right ? -1 : left > right ? 1 : 0;
 }
 //#endregion
-//#region packages/gateway-client/src/session-projection-message-identity.ts
-function readSessionProjectionString(value) {
-	return normalizeNullableString(value);
+//#region packages/gateway-client/src/session-projection-message-content.ts
+function readSessionMessageDisplayContent(message) {
+	const record = asNullableRecord(message);
+	const content = typeof message === "string" ? message : record?.content;
+	const media = asNullableRecord(record?.["__openclaw"])?.media;
+	let hasNonText = Array.isArray(media) && media.length > 0;
+	const texts = [];
+	for (const block of Array.isArray(content) ? content : [content]) {
+		const entry = asNullableRecord(block);
+		if (entry && entry.type !== "text" && entry.type !== "input_text" && entry.type !== "output_text") {
+			hasNonText ||= entry.type !== "thinking" && entry.type !== "reasoning" && entry.type !== "redacted_thinking";
+			continue;
+		}
+		const text = normalizeNullableString(entry ? entry.text : block);
+		if (text) texts.push(text);
+	}
+	const fallback = texts.length === 0 ? normalizeNullableString(record?.text) : null;
+	return {
+		text: fallback ?? texts.join("\n"),
+		hasNonText,
+		usesFallbackText: fallback !== null
+	};
+}
+/** Status notices remain visible but do not define the terminal reply they accompany. */
+function projectSessionTerminalReplyMessage(message) {
+	const record = asNullableRecord(message);
+	if (!record || !Array.isArray(record.content)) return message;
+	const content = record.content.filter((block) => asNullableRecord(block)?.openclawStatusNotice !== true);
+	if (content.length === record.content.length || content.length === 0) return message;
+	return {
+		...record,
+		content,
+		text: void 0
+	};
+}
+/** Check whether a projected message has text or another displayable block. */
+function hasDisplayableSessionMessage(message) {
+	const { text, hasNonText } = readSessionMessageDisplayContent(message);
+	return Boolean(text) || hasNonText;
+}
+function normalizeChatErrorComparisonText(text) {
+	return text.trim().replace(/^⚠️\s*/u, "").replace(/^Error:\s*/iu, "").replace(/\s+/gu, " ").trim();
+}
+/** Diagnostic-only error projections can be retired when their run resumes. */
+function isSessionProjectionErrorMessage(message, errorMessage) {
+	const role = asNullableRecord(message)?.role;
+	if (typeof role === "string" && role.trim().toLowerCase() !== "assistant") return false;
+	const { text, hasNonText } = readSessionMessageDisplayContent(message);
+	const normalizedText = normalizeChatErrorComparisonText(text);
+	return !hasNonText && (!normalizedText || normalizedText === "[assistant turn failed before producing content]" || normalizedText === GATEWAY_ASSISTANT_ERROR_FALLBACK_TEXT || normalizedText === normalizeChatErrorComparisonText(errorMessage ?? ""));
 }
+//#endregion
+//#region packages/gateway-client/src/session-projection-message-identity.ts
 function readPositiveSafeInteger(value) {
 	return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : null;
 }
@@ -1303,33 +1384,33 @@ function readSessionMessageSequence(message, envelope) {
 }
 /** Run ownership normalizes a user-turn suffix without changing its persisted send key. */
 function normalizeSessionProjectionRunId(value) {
-	const runId = readSessionProjectionString(value);
+	const runId = normalizeNullableString(value);
 	return runId?.endsWith(":user") ? runId.slice(0, -5) || null : runId;
 }
 /** Persisted row facts win; assistant run ownership comes from its authoritative producer. */
 function readSessionMessageIdentity(message, envelope) {
 	const record = asNullableRecord(message);
-	const role = readSessionProjectionString(record?.role)?.toLowerCase();
+	const role = normalizeNullableString(record?.role)?.toLowerCase();
 	if (!record || !role) return null;
 	const metadata = asNullableRecord(record["__openclaw"]);
-	const importedFrom = readSessionProjectionString(metadata?.importedFrom);
-	const cliSessionId = readSessionProjectionString(metadata?.cliSessionId);
-	const externalId = readSessionProjectionString(metadata?.externalId);
+	const importedFrom = normalizeNullableString(metadata?.importedFrom);
+	const cliSessionId = normalizeNullableString(metadata?.cliSessionId);
+	const externalId = normalizeNullableString(metadata?.externalId);
 	const position = asNullableRecord(metadata?.transcriptPosition);
-	const positionSource = readSessionProjectionString(position?.source);
+	const positionSource = normalizeNullableString(position?.source);
 	const isImported = !(positionSource !== null && positionSource.length <= 128 && typeof position?.rawSeq === "number" && Number.isSafeInteger(position.rawSeq) && position.rawSeq >= 0) && Boolean(importedFrom || cliSessionId || externalId);
-	const idempotencyKey = readSessionProjectionString(metadata?.idempotencyKey) ?? readSessionProjectionString(record.idempotencyKey) ?? readSessionProjectionString(envelope?.idempotencyKey) ?? readSessionProjectionString(envelope?.clientRunId);
+	const idempotencyKey = normalizeNullableString(metadata?.idempotencyKey) ?? normalizeNullableString(record.idempotencyKey) ?? normalizeNullableString(envelope?.idempotencyKey) ?? normalizeNullableString(envelope?.clientRunId);
 	const persistedRunId = normalizeSessionProjectionRunId(idempotencyKey);
 	const envelopeRunId = normalizeSessionProjectionRunId(envelope?.runId);
 	const metadataRunId = normalizeSessionProjectionRunId(metadata?.runId);
 	const fallbackRunId = normalizeSessionProjectionRunId(asNullableRecord(record.openclawStreamFallback)?.runId);
-	const mirroredMessage = readSessionProjectionString(metadata?.mirrorOrigin) !== null;
-	const isCliAssistant = role === "assistant" && readSessionProjectionString(record.api)?.toLowerCase() === "cli";
-	const canonicalPersistedRunId = isCliAssistant && persistedRunId?.startsWith("cli-assistant:") ? readSessionProjectionString(persistedRunId.slice(14)) : persistedRunId;
+	const mirroredMessage = normalizeNullableString(metadata?.mirrorOrigin) !== null;
+	const isCliAssistant = role === "assistant" && normalizeNullableString(record.api)?.toLowerCase() === "cli";
+	const canonicalPersistedRunId = isCliAssistant && persistedRunId?.startsWith("cli-assistant:") ? normalizeNullableString(persistedRunId.slice(14)) : persistedRunId;
 	const runId = role === "assistant" ? metadataRunId ?? envelopeRunId ?? fallbackRunId ?? (isCliAssistant || !mirroredMessage ? canonicalPersistedRunId : null) : metadataRunId ?? canonicalPersistedRunId ?? envelopeRunId;
 	return {
 		role,
-		id: readSessionProjectionString(metadata?.id) ?? readSessionProjectionString(envelope?.messageId),
+		id: normalizeNullableString(metadata?.id) ?? normalizeNullableString(envelope?.messageId),
 		sequence: readSessionMessageSequence(message, envelope),
 		idempotencyKey,
 		sendId: role === "user" ? persistedRunId ?? runId : null,
@@ -1345,11 +1426,11 @@ function readSessionMessageIdentity(message, envelope) {
 /** A commentary item's display identity is separate from the transcript row that later owns it. */
 function readAssistantStreamSegmentIdentity(message) {
 	const record = asNullableRecord(message);
-	if (readSessionProjectionString(record?.role)?.toLowerCase() !== "assistant") return;
+	if (normalizeNullableString(record?.role)?.toLowerCase() !== "assistant") return;
 	const fallback = asNullableRecord(record?.openclawStreamFallback);
-	const itemId = readSessionProjectionString(fallback?.itemId);
+	const itemId = normalizeNullableString(fallback?.itemId);
 	if (!itemId) return;
-	const runId = readSessionMessageIdentity(message)?.runId ?? readSessionProjectionString(record?.runId) ?? readSessionProjectionString(fallback?.runId);
+	const runId = readSessionMessageIdentity(message)?.runId ?? normalizeNullableString(record?.runId) ?? normalizeNullableString(fallback?.runId);
 	return {
 		itemId,
 		...runId ? { runId } : {}
@@ -1362,7 +1443,7 @@ function sameAssistantPersistenceReceipt(left, right) {
 /** Local turns have no durable transcript metadata beyond their own optional send key. */
 function isLocallyOptimisticSessionMessage(message) {
 	const record = asNullableRecord(message);
-	const role = readSessionProjectionString(record?.role)?.toLowerCase();
+	const role = normalizeNullableString(record?.role)?.toLowerCase();
 	if (role !== "user" && role !== "assistant") return false;
 	if (asNullableRecord(record?.openclawStreamFallback)) return false;
 	const metadata = asNullableRecord(record?.["__openclaw"]);
@@ -1395,58 +1476,6 @@ function createSessionProjectionEntry(message, options) {
 	};
 }
 //#endregion
-//#region packages/gateway-client/src/session-projection-message-content.ts
-function readSessionMessageDisplayContent(message) {
-	const record = asNullableRecord(message);
-	const content = typeof message === "string" ? message : record?.content;
-	const media = asNullableRecord(record?.["__openclaw"])?.media;
-	let hasNonText = Array.isArray(media) && media.length > 0;
-	const texts = [];
-	for (const block of Array.isArray(content) ? content : [content]) {
-		const entry = asNullableRecord(block);
-		if (entry && entry.type !== "text" && entry.type !== "input_text" && entry.type !== "output_text") {
-			hasNonText ||= entry.type !== "thinking" && entry.type !== "reasoning" && entry.type !== "redacted_thinking";
-			continue;
-		}
-		const text = readSessionProjectionString(entry ? entry.text : block);
-		if (text) texts.push(text);
-	}
-	const fallback = texts.length === 0 ? readSessionProjectionString(record?.text) : null;
-	return {
-		text: fallback ?? texts.join("\n"),
-		hasNonText,
-		usesFallbackText: fallback !== null
-	};
-}
-/** Status notices remain visible but do not define the terminal reply they accompany. */
-function projectSessionTerminalReplyMessage(message) {
-	const record = asNullableRecord(message);
-	if (!record || !Array.isArray(record.content)) return message;
-	const content = record.content.filter((block) => asNullableRecord(block)?.openclawStatusNotice !== true);
-	if (content.length === record.content.length || content.length === 0) return message;
-	return {
-		...record,
-		content,
-		text: void 0
-	};
-}
-/** Check whether a projected message has text or another displayable block. */
-function hasDisplayableSessionMessage(message) {
-	const { text, hasNonText } = readSessionMessageDisplayContent(message);
-	return Boolean(text) || hasNonText;
-}
-function normalizeChatErrorComparisonText(text) {
-	return text.trim().replace(/^⚠️\s*/u, "").replace(/^Error:\s*/iu, "").replace(/\s+/gu, " ").trim();
-}
-/** Diagnostic-only error projections can be retired when their run resumes. */
-function isSessionProjectionErrorMessage(message, errorMessage) {
-	const role = asNullableRecord(message)?.role;
-	if (typeof role === "string" && role.trim().toLowerCase() !== "assistant") return false;
-	const { text, hasNonText } = readSessionMessageDisplayContent(message);
-	const normalizedText = normalizeChatErrorComparisonText(text);
-	return !hasNonText && (!normalizedText || normalizedText === "[assistant turn failed before producing content]" || normalizedText === GATEWAY_ASSISTANT_ERROR_FALLBACK_TEXT || normalizedText === normalizeChatErrorComparisonText(errorMessage ?? ""));
-}
-//#endregion
 //#region packages/gateway-client/src/session-projection-final-identity.ts
 /** Terminal identity rules used to reconcile live and durable assistant projections. */
 /** A run's selected text reply can inherit its terminal tool stop reason. */
@@ -1586,7 +1615,7 @@ function retainSessionProjectionRuns(runs) {
 //#region packages/gateway-client/src/session-projection-run-event.ts
 /** Normalizes Gateway run envelopes once for every browser and terminal adapter. */
 function reduceSessionProjectionRunEvent(projection, event, scope = {}) {
-	const runId = readSessionProjectionString(event.runId);
+	const runId = normalizeNullableString(event.runId);
 	if (!runId || typeof event.state !== "string" || ![
 		"delta",
 		"final",
@@ -1594,9 +1623,9 @@ function reduceSessionProjectionRunEvent(projection, event, scope = {}) {
 		"aborted"
 	].includes(event.state)) return null;
 	const message = event.state === "delta" ? mergeChatStreamMessage(projection.runs[runId]?.message, event) : event.message;
-	const messageStopReason = isRecord(message) ? readSessionProjectionString(message.stopReason) : null;
-	const stopReason = readSessionProjectionString(event.stopReason) ?? messageStopReason;
-	const errorKind = readSessionProjectionString(event.errorKind);
+	const messageStopReason = isRecord(message) ? normalizeNullableString(message.stopReason) : null;
+	const stopReason = normalizeNullableString(event.stopReason) ?? messageStopReason;
+	const errorKind = normalizeNullableString(event.errorKind);
 	const base = {
 		runId,
 		seq: typeof event.seq === "number" ? event.seq : void 0,
@@ -1675,7 +1704,7 @@ function entryMatches(left, right, allowSnapshotPromotion = false) {
 		const durableSegment = durableEntry === left ? leftSegment : rightSegment;
 		const provisionalSegment = durableEntry === left ? rightSegment : leftSegment;
 		if (provisionalEntry.identity.sequence === null && durableSegment?.runId && durableSegment.runId === provisionalSegment?.runId && durableSegment.itemId === provisionalSegment.itemId) return true;
-		if (provisionalEntry.live && !durableSegment && !isSessionProjectionToolContinuation(durableEntry.message) && (!isToolUsePersistedFinalRow(durableEntry.message) || readFinalContentIdentity(durableEntry.message) === readFinalContentIdentity(provisionalEntry.message)) && provisionalEntry.identity.sequence === null && (provisionalEntry.afterSequence === void 0 || provisionalEntry.afterSequence !== null && durableEntry.identity.sequence !== null && durableEntry.identity.sequence > provisionalEntry.afterSequence) && durableEntry.identity.runId && durableEntry.identity.runId === provisionalEntry.identity.runId && (readSessionProjectionString(durableMetadata?.mirrorOrigin) === null || durableMetadata?.runTerminal === true)) return true;
+		if (provisionalEntry.live && !durableSegment && !isSessionProjectionToolContinuation(durableEntry.message) && (!isToolUsePersistedFinalRow(durableEntry.message) || readFinalContentIdentity(durableEntry.message) === readFinalContentIdentity(provisionalEntry.message)) && provisionalEntry.identity.sequence === null && (provisionalEntry.afterSequence === void 0 || provisionalEntry.afterSequence !== null && durableEntry.identity.sequence !== null && durableEntry.identity.sequence > provisionalEntry.afterSequence) && durableEntry.identity.runId && durableEntry.identity.runId === provisionalEntry.identity.runId && (normalizeNullableString(durableMetadata?.mirrorOrigin) === null || durableMetadata?.runTerminal === true)) return true;
 	}
 	const persisted = left.identity;
 	const observed = right.identity;
@@ -1819,7 +1848,7 @@ function reconcileSessionProjectionSnapshot(state, messages, scope = {}, options
 	};
 }
 function updateRun(state, incoming) {
-	const incomingErrorMessage = readSessionProjectionString(incoming.errorMessage);
+	const incomingErrorMessage = normalizeNullableString(incoming.errorMessage);
 	const incomingSeq = typeof incoming.seq === "number" && Number.isSafeInteger(incoming.seq) && incoming.seq >= 0 ? incoming.seq : void 0;
 	const normalizedIncoming = {
 		...incoming,
@@ -1836,7 +1865,7 @@ function updateRun(state, incoming) {
 		const canAcceptFinal = currentHasDisplayableMessage ? current.status === incoming.status || (current.acceptedFinalMessageIdentities?.length ?? 0) > 0 : canRecoverSessionProjectionFinal(current.message, incoming.message);
 		const acceptFinal = incomingIsFinal && canAcceptFinal && incomingFinalIdentity !== null && !hasSessionProjectionAcceptedFinal(current, incoming.message);
 		const recoverMessage = acceptFinal && !currentHasDisplayableMessage;
-		const recoverError = readSessionProjectionString(current.errorMessage) === null && incomingErrorMessage !== null;
+		const recoverError = normalizeNullableString(current.errorMessage) === null && incomingErrorMessage !== null;
 		const updateTerminalSequence = incoming.status !== "streaming" && (incomingSeq === void 0 ? current.seq !== void 0 : current.seq === void 0 || incomingSeq > current.seq);
 		if (!acceptFinal && !recoverError && !updateTerminalSequence) return state;
 		const firstFinalIdentity = readSessionProjectionFinalMessageIdentity(current.message);
@@ -2280,4 +2309,4 @@ function releaseGatewaySessionMessageSubscription(subscription) {
 	return sessionMessageSubscriptionOwners.get(subscription)?.coordinator.release(subscription) ?? Promise.resolve();
 }
 //#endregion
-export { resolveGatewayConnectScopes as A, buildDeviceAuthPayloadV3 as B, isGatewayProtocolResponseError as C, gatewayOriginScope as D, gatewayCredentialScope as E, mergeChatStreamMessage as F, asNullableRecord as I, asRecord as L, shouldRetryGatewayWithDeviceToken as M, normalizeLowercaseStringOrEmpty as N, GatewayBrowserDeviceAuthLifecycle as O, normalizeOptionalString as P, isRecord as R, GatewayProtocolRequestTimeoutError as S, resolveModelCatalogConnect as T, normalizeDeviceMetadataForAuth as V, readSessionMessageIdentity as _, createSessionProjection as a, GatewayProtocolClient as b, reduceSessionProjection as c, readSessionProjectionFinalMessageIdentity as d, isSessionProjectionErrorMessage as f, readAssistantStreamSegmentIdentity as g, normalizeSessionProjectionRunId as h, resetGatewaySessionMessageSubscriptionCoordinator as i, selectGatewayConnectAuth as j, buildGatewayConnectAuth as k, reduceSessionProjectionRunEvent as l, isLocallyOptimisticSessionMessage as m, getGatewaySessionMessageSubscriptionCoordinator as n, projectLiveSessionMessage as o, projectSessionTerminalReplyMessage as p, releaseGatewaySessionMessageSubscription as r, reconcileSessionProjectionSnapshot as s, GatewaySessionMessageSubscriptionCoordinator as t, hasSessionProjectionAcceptedFinal as u, readSessionMessageSequence as v, raceWithTimeout as w, GatewayProtocolRequestError as x, shouldPauseGatewayReconnect as y, buildDeviceAuthPayload as z };
+export { buildGatewayConnectAuth as A, normalizeDeviceMetadataForAuth as B, isGatewayProtocolResponseError as C, gatewayCredentialScope as D, resolveModelCatalogConnect as E, asNullableRecord as F, asRecord as I, isRecord as L, selectGatewayConnectAuth as M, shouldRetryGatewayWithDeviceToken as N, gatewayOriginScope as O, mergeChatStreamMessage as P, buildDeviceAuthPayload as R, GatewayProtocolRequestTimeoutError as S, raceWithTimeout as T, isSessionProjectionErrorMessage as _, createSessionProjection as a, GatewayProtocolClient as b, reduceSessionProjection as c, readSessionProjectionFinalMessageIdentity as d, isLocallyOptimisticSessionMessage as f, readSessionMessageSequence as g, readSessionMessageIdentity as h, resetGatewaySessionMessageSubscriptionCoordinator as i, resolveGatewayConnectScopes as j, GatewayBrowserDeviceAuthLifecycle as k, reduceSessionProjectionRunEvent as l, readAssistantStreamSegmentIdentity as m, getGatewaySessionMessageSubscriptionCoordinator as n, projectLiveSessionMessage as o, normalizeSessionProjectionRunId as p, releaseGatewaySessionMessageSubscription as r, reconcileSessionProjectionSnapshot as s, GatewaySessionMessageSubscriptionCoordinator as t, hasSessionProjectionAcceptedFinal as u, projectSessionTerminalReplyMessage as v, createAbortError as w, GatewayProtocolRequestError as x, shouldPauseGatewayReconnect as y, buildDeviceAuthPayloadV3 as z };

package/dist/timeouts-CQTCye5U.mjs

@@ -0,0 +1,116 @@
+//#region packages/normalization-core/src/string-coerce.ts
+/** Trims string input and returns null for non-strings or empty strings. */
+function normalizeNullableString(value) {
+	if (typeof value !== "string") return null;
+	const trimmed = value.trim();
+	return trimmed ? trimmed : null;
+}
+/** Trims string input and returns undefined for non-strings or empty strings. */
+function normalizeOptionalString(value) {
+	return normalizeNullableString(value) ?? void 0;
+}
+/** Lowercases a normalized optional string. */
+function normalizeOptionalLowercaseString(value) {
+	return normalizeOptionalString(value)?.toLowerCase();
+}
+/** Lowercases a normalized string or returns an empty string when absent. */
+function normalizeLowercaseStringOrEmpty(value) {
+	return normalizeOptionalLowercaseString(value) ?? "";
+}
+//#endregion
+//#region packages/normalization-core/src/number-coercion.ts
+/** Parses only safe integer numbers or base-10 integer strings. */
+function parseStrictInteger(value) {
+	if (typeof value === "number") return Number.isSafeInteger(value) ? value : void 0;
+	const normalized = normalizeOptionalString(value);
+	if (!normalized || !/^[+-]?\d+$/.test(normalized)) return;
+	const parsed = Number(normalized);
+	return Number.isSafeInteger(parsed) ? parsed : void 0;
+}
+function parseStrictPositiveInteger(value) {
+	const parsed = parseStrictInteger(value);
+	return parsed !== void 0 && parsed > 0 ? parsed : void 0;
+}
+//#endregion
+//#region packages/gateway-client/src/timeouts.ts
+function isTestRuntimeEnv(env) {
+	return env.VITEST === "true" || env.VITEST === "1" || env.VITEST_POOL_ID !== void 0 || env.VITEST_WORKER_ID !== void 0 || env.NODE_ENV === "test" || env !== process.env && isTestRuntimeEnv(process.env);
+}
+/** Maximum delay Node timers can represent without overflow warnings. */
+const MAX_SAFE_TIMEOUT_DELAY_MS = 2147483647;
+/** Default server-side window for gateway preauth handshakes. */
+const DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS = 15e3;
+/** Starts the browser-safe deadline that covers Gateway connect preparation and hello. */
+function startGatewayConnectTimeout(onTimeout) {
+	const timer = setTimeout(onTimeout, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS);
+	timer.unref?.();
+	return timer;
+}
+/** Clears either pending Gateway handshake phase without retaining its timer. */
+function clearGatewayConnectTimeout(timer) {
+	if (timer !== null) clearTimeout(timer);
+	return null;
+}
+/** Default deadline for a single non-streaming Gateway request. */
+const DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS = 3e4;
+/** Minimum client watchdog delay for connect challenge setup. */
+const MIN_CONNECT_CHALLENGE_TIMEOUT_MS = 250;
+/** Default maximum client watchdog delay, aligned with the preauth server timeout. */
+const MAX_CONNECT_CHALLENGE_TIMEOUT_MS = DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS;
+/** Clamps arbitrary timer delays to Node's safe range and an optional floor. */
+function resolveSafeTimeoutDelayMs(delayMs, opts) {
+	const rawMinMs = opts?.minMs ?? 1;
+	const minMs = Math.min(MAX_SAFE_TIMEOUT_DELAY_MS, Math.max(0, Number.isFinite(rawMinMs) ? Math.floor(rawMinMs) : 1));
+	return Math.min(MAX_SAFE_TIMEOUT_DELAY_MS, Math.max(minMs, Number.isFinite(delayMs) ? Math.floor(delayMs) : minMs));
+}
+/** Adds grace time while preserving safe timer bounds if inputs overflow or are invalid. */
+function addSafeTimeoutDelayGraceMs(delayMs, graceMs, opts) {
+	if (!Number.isFinite(delayMs) || !Number.isFinite(graceMs)) return resolveSafeTimeoutDelayMs(MAX_SAFE_TIMEOUT_DELAY_MS, opts);
+	const withGrace = delayMs + graceMs;
+	return resolveSafeTimeoutDelayMs(Number.isFinite(withGrace) ? withGrace : MAX_SAFE_TIMEOUT_DELAY_MS, opts);
+}
+/** Resolves optional timeout values through a fallback and safe timer clamp. */
+function resolveFiniteTimeoutDelayMs(delayMs, fallbackMs, opts) {
+	return resolveSafeTimeoutDelayMs(typeof delayMs === "number" && Number.isFinite(delayMs) ? delayMs : fallbackMs, opts);
+}
+/** Clamps connect challenge watchdog timeouts to the gateway-supported range. */
+function clampConnectChallengeTimeoutMs(timeoutMs, maxTimeoutMs = MAX_CONNECT_CHALLENGE_TIMEOUT_MS) {
+	return Math.max(250, Math.min(Math.max(250, maxTimeoutMs), timeoutMs));
+}
+/** Reads the connect challenge watchdog override from the process environment. */
+function getConnectChallengeTimeoutMsFromEnv(env = process.env) {
+	const raw = env.OPENCLAW_CONNECT_CHALLENGE_TIMEOUT_MS;
+	if (raw) {
+		const parsed = parseStrictPositiveInteger(raw);
+		if (parsed !== void 0) return resolveSafeTimeoutDelayMs(parsed);
+	}
+}
+function normalizePositiveTimeoutMs(timeoutMs) {
+	return typeof timeoutMs === "number" && Number.isFinite(timeoutMs) && timeoutMs > 0 ? resolveSafeTimeoutDelayMs(timeoutMs) : void 0;
+}
+/** Resolves the client watchdog timeout using explicit, env, then preauth defaults. */
+function resolveConnectChallengeTimeoutMs(timeoutMs, params) {
+	const configuredPreauthTimeoutMs = resolvePreauthHandshakeTimeoutMs({
+		env: params?.env,
+		configuredTimeoutMs: params?.configuredTimeoutMs
+	});
+	const maxTimeoutMs = Math.max(DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, configuredPreauthTimeoutMs);
+	if (typeof timeoutMs === "number" && Number.isFinite(timeoutMs)) return clampConnectChallengeTimeoutMs(timeoutMs, maxTimeoutMs);
+	const envOverride = getConnectChallengeTimeoutMsFromEnv(params?.env);
+	if (envOverride !== void 0) return clampConnectChallengeTimeoutMs(envOverride, Math.max(maxTimeoutMs, envOverride));
+	return clampConnectChallengeTimeoutMs(configuredPreauthTimeoutMs, maxTimeoutMs);
+}
+/** Resolves the server preauth timeout from env, explicit config, or default. */
+function resolvePreauthHandshakeTimeoutMs(params) {
+	const env = params?.env ?? process.env;
+	const configuredTimeout = env.OPENCLAW_HANDSHAKE_TIMEOUT_MS || (isTestRuntimeEnv(env) ? env.OPENCLAW_TEST_HANDSHAKE_TIMEOUT_MS : void 0);
+	if (configuredTimeout) {
+		const parsed = parseStrictPositiveInteger(configuredTimeout);
+		if (parsed !== void 0) return resolveSafeTimeoutDelayMs(parsed);
+	}
+	const configured = normalizePositiveTimeoutMs(params?.configuredTimeoutMs);
+	if (configured !== void 0) return configured;
+	return DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS;
+}
+//#endregion
+export { normalizeOptionalString as _, MIN_CONNECT_CHALLENGE_TIMEOUT_MS as a, clearGatewayConnectTimeout as c, resolveFiniteTimeoutDelayMs as d, resolvePreauthHandshakeTimeoutMs as f, normalizeNullableString as g, normalizeLowercaseStringOrEmpty as h, MAX_SAFE_TIMEOUT_DELAY_MS as i, getConnectChallengeTimeoutMsFromEnv as l, startGatewayConnectTimeout as m, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS as n, addSafeTimeoutDelayGraceMs as o, resolveSafeTimeoutDelayMs as p, MAX_CONNECT_CHALLENGE_TIMEOUT_MS as r, clampConnectChallengeTimeoutMs as s, DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS as t, resolveConnectChallengeTimeoutMs as u };

package/dist/timeouts.mjs

@@ -1,88 +1,2 @@
-//#region packages/gateway-client/src/timeouts.ts
-function parsePositiveTimeoutSetting(value) {
-	const trimmed = value.trim();
-	if (!/^\+?\d+$/u.test(trimmed)) return;
-	const parsed = Number(trimmed);
-	return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : void 0;
-}
-function isTestRuntimeEnv(env) {
-	return env.VITEST === "true" || env.VITEST === "1" || env.VITEST_POOL_ID !== void 0 || env.VITEST_WORKER_ID !== void 0 || env.NODE_ENV === "test" || env !== process.env && isTestRuntimeEnv(process.env);
-}
-/** Maximum delay Node timers can represent without overflow warnings. */
-const MAX_SAFE_TIMEOUT_DELAY_MS = 2147483647;
-/** Default server-side window for gateway preauth handshakes. */
-const DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS = 15e3;
-/** Starts the browser-safe deadline that covers Gateway connect preparation and hello. */
-function startGatewayConnectTimeout(onTimeout) {
-	const timer = setTimeout(onTimeout, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS);
-	timer.unref?.();
-	return timer;
-}
-/** Clears either pending Gateway handshake phase without retaining its timer. */
-function clearGatewayConnectTimeout(timer) {
-	if (timer !== null) clearTimeout(timer);
-	return null;
-}
-/** Default deadline for a single non-streaming Gateway request. */
-const DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS = 3e4;
-/** Minimum client watchdog delay for connect challenge setup. */
-const MIN_CONNECT_CHALLENGE_TIMEOUT_MS = 250;
-/** Default maximum client watchdog delay, aligned with the preauth server timeout. */
-const MAX_CONNECT_CHALLENGE_TIMEOUT_MS = DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS;
-/** Clamps arbitrary timer delays to Node's safe range and an optional floor. */
-function resolveSafeTimeoutDelayMs(delayMs, opts) {
-	const rawMinMs = opts?.minMs ?? 1;
-	const minMs = Math.min(MAX_SAFE_TIMEOUT_DELAY_MS, Math.max(0, Number.isFinite(rawMinMs) ? Math.floor(rawMinMs) : 1));
-	return Math.min(MAX_SAFE_TIMEOUT_DELAY_MS, Math.max(minMs, Number.isFinite(delayMs) ? Math.floor(delayMs) : minMs));
-}
-/** Adds grace time while preserving safe timer bounds if inputs overflow or are invalid. */
-function addSafeTimeoutDelayGraceMs(delayMs, graceMs, opts) {
-	if (!Number.isFinite(delayMs) || !Number.isFinite(graceMs)) return resolveSafeTimeoutDelayMs(MAX_SAFE_TIMEOUT_DELAY_MS, opts);
-	const withGrace = delayMs + graceMs;
-	return resolveSafeTimeoutDelayMs(Number.isFinite(withGrace) ? withGrace : MAX_SAFE_TIMEOUT_DELAY_MS, opts);
-}
-/** Resolves optional timeout values through a fallback and safe timer clamp. */
-function resolveFiniteTimeoutDelayMs(delayMs, fallbackMs, opts) {
-	return resolveSafeTimeoutDelayMs(typeof delayMs === "number" && Number.isFinite(delayMs) ? delayMs : fallbackMs, opts);
-}
-/** Clamps connect challenge watchdog timeouts to the gateway-supported range. */
-function clampConnectChallengeTimeoutMs(timeoutMs, maxTimeoutMs = MAX_CONNECT_CHALLENGE_TIMEOUT_MS) {
-	return Math.max(250, Math.min(Math.max(250, maxTimeoutMs), timeoutMs));
-}
-/** Reads the connect challenge watchdog override from the process environment. */
-function getConnectChallengeTimeoutMsFromEnv(env = process.env) {
-	const raw = env.OPENCLAW_CONNECT_CHALLENGE_TIMEOUT_MS;
-	if (raw) {
-		const parsed = parsePositiveTimeoutSetting(raw);
-		if (parsed !== void 0) return resolveSafeTimeoutDelayMs(parsed);
-	}
-}
-function normalizePositiveTimeoutMs(timeoutMs) {
-	return typeof timeoutMs === "number" && Number.isFinite(timeoutMs) && timeoutMs > 0 ? resolveSafeTimeoutDelayMs(timeoutMs) : void 0;
-}
-/** Resolves the client watchdog timeout using explicit, env, then preauth defaults. */
-function resolveConnectChallengeTimeoutMs(timeoutMs, params) {
-	const configuredPreauthTimeoutMs = resolvePreauthHandshakeTimeoutMs({
-		env: params?.env,
-		configuredTimeoutMs: params?.configuredTimeoutMs
-	});
-	const maxTimeoutMs = Math.max(DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, configuredPreauthTimeoutMs);
-	if (typeof timeoutMs === "number" && Number.isFinite(timeoutMs)) return clampConnectChallengeTimeoutMs(timeoutMs, maxTimeoutMs);
-	const envOverride = getConnectChallengeTimeoutMsFromEnv(params?.env);
-	if (envOverride !== void 0) return clampConnectChallengeTimeoutMs(envOverride, Math.max(maxTimeoutMs, envOverride));
-	return clampConnectChallengeTimeoutMs(configuredPreauthTimeoutMs, maxTimeoutMs);
-}
-/** Resolves the server preauth timeout from env, explicit config, or default. */
-function resolvePreauthHandshakeTimeoutMs(params) {
-	const env = params?.env ?? process.env;
-	const configuredTimeout = env.OPENCLAW_HANDSHAKE_TIMEOUT_MS || (isTestRuntimeEnv(env) ? env.OPENCLAW_TEST_HANDSHAKE_TIMEOUT_MS : void 0);
-	if (configuredTimeout) {
-		const parsed = parsePositiveTimeoutSetting(configuredTimeout);
-		if (parsed !== void 0) return resolveSafeTimeoutDelayMs(parsed);
-	}
-	const configured = normalizePositiveTimeoutMs(params?.configuredTimeoutMs);
-	if (configured !== void 0) return configured;
-	return DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS;
-}
-//#endregion
+import { a as MIN_CONNECT_CHALLENGE_TIMEOUT_MS, c as clearGatewayConnectTimeout, d as resolveFiniteTimeoutDelayMs, f as resolvePreauthHandshakeTimeoutMs, i as MAX_SAFE_TIMEOUT_DELAY_MS, l as getConnectChallengeTimeoutMsFromEnv, m as startGatewayConnectTimeout, n as DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, o as addSafeTimeoutDelayGraceMs, p as resolveSafeTimeoutDelayMs, r as MAX_CONNECT_CHALLENGE_TIMEOUT_MS, s as clampConnectChallengeTimeoutMs, t as DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, u as resolveConnectChallengeTimeoutMs } from "./timeouts-CQTCye5U.mjs";
 export { DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, MAX_CONNECT_CHALLENGE_TIMEOUT_MS, MAX_SAFE_TIMEOUT_DELAY_MS, MIN_CONNECT_CHALLENGE_TIMEOUT_MS, addSafeTimeoutDelayGraceMs, clampConnectChallengeTimeoutMs, clearGatewayConnectTimeout, getConnectChallengeTimeoutMsFromEnv, resolveConnectChallengeTimeoutMs, resolveFiniteTimeoutDelayMs, resolvePreauthHandshakeTimeoutMs, resolveSafeTimeoutDelayMs, startGatewayConnectTimeout };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/gateway-client",
-  "version": "2026.10.1-beta.2",
+  "version": "2026.10.5-beta.1",
   "description": "Reference WebSocket client for the OpenClaw Gateway protocol",
   "keywords": [
     "client",
@@ -62,9 +62,9 @@
     }
   },
   "dependencies": {
-    "@openclaw/gateway-protocol": "2026.10.1-beta.2",
+    "@openclaw/gateway-protocol": "2026.10.5-beta.1",
     "ipaddr.js": "2.5.0",
-    "ws": "8.21.3"
+    "ws": "8.22.0"
   },
   "devDependencies": {
     "@openclaw/normalization-core": "0.0.0-private"