@openclaw/gateway-client 2026.9.2 → 2026.9.4

package/dist/browser.d.mts

@@ -1,12 +1,12 @@
-import { A as readSessionMessageSequence, C as reduceSessionProjection, D as normalizeSessionProjectionRunId, E as SessionMessageIdentity, F as normalizeDeviceMetadataForAuth, M as gatewayOriginScope, N as buildDeviceAuthPayload, O as readAssistantStreamSegmentIdentity, P as buildDeviceAuthPayloadV3, S as reconcileSessionProjectionSnapshot, T as SessionMessageEnvelope, _ as SessionProjectionState, a as GatewaySessionMessageSubscriptionOptions, b as isLocallyOptimisticSessionMessage, c as resetGatewaySessionMessageSubscriptionCoordinator, d as SessionProjectionGatewayRunEvent, f as SessionProjectionRun, g as SessionProjectionSnapshotOptions, h as SessionProjectionScope, i as GatewaySessionMessageSubscriptionCoordinatorOptions, j as gatewayCredentialScope, k as readSessionMessageIdentity, l as SessionProjectionEntry, m as SessionProjectionRunTransition, n as GatewaySessionMessageSubscription, o as getGatewaySessionMessageSubscriptionCoordinator, p as SessionProjectionRunStatus, r as GatewaySessionMessageSubscriptionCoordinator, s as releaseGatewaySessionMessageSubscription, t as GatewaySessionMessageRequestClient, u as SessionProjectionEvent, v as createSessionProjection, w as reduceSessionProjectionRunEvent, x as projectLiveSessionMessage, y as hasSessionProjectionAcceptedFinal } from "./session-subscriptions-D2UdeJ0u.mjs";
+import { A as readAssistantStreamSegmentIdentity, C as SessionProjectionRunTransition, D as SessionMessageEnvelope, E as readSessionProjectionFinalMessageIdentity, F as buildDeviceAuthPayload, I as buildDeviceAuthPayloadV3, L as normalizeDeviceMetadataForAuth, M as readSessionMessageSequence, N as gatewayCredentialScope, O as SessionMessageIdentity, P as gatewayOriginScope, S as SessionProjectionGatewayRunEvent, T as hasSessionProjectionAcceptedFinal, _ as isLocallyOptimisticSessionMessage, a as GatewaySessionMessageSubscriptionOptions, b as reduceSessionProjection, c as resetGatewaySessionMessageSubscriptionCoordinator, d as SessionProjectionRun, f as SessionProjectionRunStatus, g as createSessionProjection, h as SessionProjectionState, i as GatewaySessionMessageSubscriptionCoordinatorOptions, j as readSessionMessageIdentity, k as normalizeSessionProjectionRunId, l as SessionProjectionEntry, m as SessionProjectionSnapshotOptions, n as GatewaySessionMessageSubscription, o as getGatewaySessionMessageSubscriptionCoordinator, p as SessionProjectionScope, r as GatewaySessionMessageSubscriptionCoordinator, s as releaseGatewaySessionMessageSubscription, t as GatewaySessionMessageRequestClient, u as SessionProjectionEvent, v as projectLiveSessionMessage, w as reduceSessionProjectionRunEvent, x as isSessionProjectionErrorMessage, y as reconcileSessionProjectionSnapshot } from "./session-subscriptions-BSQIANvX.mjs";
 import { a as GatewayBrowserDeviceTokenStore, c as resolveGatewayConnectScopes, i as GatewayBrowserDeviceTokenRecord, l as selectGatewayConnectAuth, n as GatewayBrowserDeviceAuthPlan, o as GatewayConnectAuthSelection, r as GatewayBrowserDeviceIdentity, s as buildGatewayConnectAuth, t as GatewayBrowserDeviceAuthLifecycle, u as shouldRetryGatewayWithDeviceToken } from "./browser-device-auth-DoPo-sPB.mjs";
 import { n as GatewayProtocolRequestOptions, r as GatewayProtocolRequestTimeoutError, t as GatewayProtocolRequestError } from "./protocol-request-B5gBmLgq.mjs";
 import { a as GatewayProtocolTiming, i as GatewayProtocolSocketHandlers, n as GatewayProtocolCloseContext, o as GatewayProtocolRequestTiming, r as GatewayProtocolSocket, t as GatewayProtocolClient } from "./protocol-client-DbX7wQED.mjs";
 import { DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, resolveSafeTimeoutDelayMs } from "./timeouts.mjs";
 import { ConnectParams, ErrorShape, EventFrame, HelloOk } from "@openclaw/gateway-protocol";
 export * from "@openclaw/gateway-protocol/connect-error-details";
-export * from "@openclaw/gateway-protocol/client-info";
 export * from "@openclaw/gateway-protocol/gateway-error-details";
+export * from "@openclaw/gateway-protocol/client-info";
 export * from "@openclaw/gateway-protocol/startup-unavailable";
 export * from "@openclaw/gateway-protocol/version";
 //#region packages/gateway-client/src/reconnect-policy.d.ts
@@ -18,4 +18,4 @@ export declare function shouldPauseGatewayReconnect(params: {
   clientVersionMismatchIsTerminal?: boolean;
 }): boolean;
 //#endregion
-export { type ConnectParams, DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, type ErrorShape, type EventFrame, GatewayBrowserDeviceAuthLifecycle, GatewayBrowserDeviceAuthPlan, GatewayBrowserDeviceIdentity, GatewayBrowserDeviceTokenRecord, GatewayBrowserDeviceTokenStore, GatewayConnectAuthSelection, GatewayProtocolClient, type GatewayProtocolCloseContext, GatewayProtocolRequestError, type GatewayProtocolRequestOptions, GatewayProtocolRequestTimeoutError, type GatewayProtocolRequestTiming, type GatewayProtocolSocket, type GatewayProtocolSocketHandlers, type GatewayProtocolTiming, GatewaySessionMessageRequestClient, GatewaySessionMessageSubscription, GatewaySessionMessageSubscriptionCoordinator, GatewaySessionMessageSubscriptionCoordinatorOptions, GatewaySessionMessageSubscriptionOptions, type HelloOk, type SessionMessageEnvelope, type SessionMessageIdentity, SessionProjectionEntry, SessionProjectionEvent, SessionProjectionGatewayRunEvent, SessionProjectionRun, SessionProjectionRunStatus, SessionProjectionRunTransition, SessionProjectionScope, SessionProjectionSnapshotOptions, SessionProjectionState, buildDeviceAuthPayload, buildDeviceAuthPayloadV3, buildGatewayConnectAuth, createSessionProjection, gatewayCredentialScope, gatewayOriginScope, getGatewaySessionMessageSubscriptionCoordinator, hasSessionProjectionAcceptedFinal, isLocallyOptimisticSessionMessage, normalizeDeviceMetadataForAuth, normalizeSessionProjectionRunId, projectLiveSessionMessage, readAssistantStreamSegmentIdentity, readSessionMessageIdentity, readSessionMessageSequence, reconcileSessionProjectionSnapshot, reduceSessionProjection, reduceSessionProjectionRunEvent, releaseGatewaySessionMessageSubscription, resetGatewaySessionMessageSubscriptionCoordinator, resolveGatewayConnectScopes, resolveSafeTimeoutDelayMs, selectGatewayConnectAuth, shouldRetryGatewayWithDeviceToken };
+export { type ConnectParams, DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, type ErrorShape, type EventFrame, GatewayBrowserDeviceAuthLifecycle, GatewayBrowserDeviceAuthPlan, GatewayBrowserDeviceIdentity, GatewayBrowserDeviceTokenRecord, GatewayBrowserDeviceTokenStore, GatewayConnectAuthSelection, GatewayProtocolClient, type GatewayProtocolCloseContext, GatewayProtocolRequestError, type GatewayProtocolRequestOptions, GatewayProtocolRequestTimeoutError, type GatewayProtocolRequestTiming, type GatewayProtocolSocket, type GatewayProtocolSocketHandlers, type GatewayProtocolTiming, GatewaySessionMessageRequestClient, GatewaySessionMessageSubscription, GatewaySessionMessageSubscriptionCoordinator, GatewaySessionMessageSubscriptionCoordinatorOptions, GatewaySessionMessageSubscriptionOptions, type HelloOk, type SessionMessageEnvelope, type SessionMessageIdentity, SessionProjectionEntry, SessionProjectionEvent, type SessionProjectionGatewayRunEvent, SessionProjectionRun, SessionProjectionRunStatus, type SessionProjectionRunTransition, SessionProjectionScope, SessionProjectionSnapshotOptions, SessionProjectionState, buildDeviceAuthPayload, buildDeviceAuthPayloadV3, buildGatewayConnectAuth, createSessionProjection, gatewayCredentialScope, gatewayOriginScope, getGatewaySessionMessageSubscriptionCoordinator, hasSessionProjectionAcceptedFinal, isLocallyOptimisticSessionMessage, isSessionProjectionErrorMessage, normalizeDeviceMetadataForAuth, normalizeSessionProjectionRunId, projectLiveSessionMessage, readAssistantStreamSegmentIdentity, readSessionMessageIdentity, readSessionMessageSequence, readSessionProjectionFinalMessageIdentity, reconcileSessionProjectionSnapshot, reduceSessionProjection, reduceSessionProjectionRunEvent, releaseGatewaySessionMessageSubscription, resetGatewaySessionMessageSubscriptionCoordinator, resolveGatewayConnectScopes, resolveSafeTimeoutDelayMs, selectGatewayConnectAuth, shouldRetryGatewayWithDeviceToken };

package/dist/browser.mjs

@@ -1,8 +1,8 @@
-import { A as buildDeviceAuthPayloadV3, C as gatewayOriginScope, D as selectGatewayConnectAuth, E as resolveGatewayConnectScopes, O as shouldRetryGatewayWithDeviceToken, S as gatewayCredentialScope, T as buildGatewayConnectAuth, _ as shouldPauseGatewayReconnect, a as createSessionProjection, b as GatewayProtocolRequestTimeoutError, c as projectLiveSessionMessage, d as reduceSessionProjectionRunEvent, f as normalizeSessionProjectionRunId, h as readSessionMessageSequence, i as resetGatewaySessionMessageSubscriptionCoordinator, j as normalizeDeviceMetadataForAuth, k as buildDeviceAuthPayload, l as reconcileSessionProjectionSnapshot, m as readSessionMessageIdentity, n as getGatewaySessionMessageSubscriptionCoordinator, o as hasSessionProjectionAcceptedFinal, p as readAssistantStreamSegmentIdentity, r as releaseGatewaySessionMessageSubscription, s as isLocallyOptimisticSessionMessage, t as GatewaySessionMessageSubscriptionCoordinator, u as reduceSessionProjection, v as GatewayProtocolClient, w as GatewayBrowserDeviceAuthLifecycle, y as GatewayProtocolRequestError } from "./session-subscriptions-C0VxZerW.mjs";
+import { A as shouldRetryGatewayWithDeviceToken, D as buildGatewayConnectAuth, E as GatewayBrowserDeviceAuthLifecycle, M as buildDeviceAuthPayloadV3, N as normalizeDeviceMetadataForAuth, O as resolveGatewayConnectScopes, S as GatewayProtocolRequestTimeoutError, T as gatewayOriginScope, _ as readSessionMessageSequence, a as createSessionProjection, b as GatewayProtocolClient, c as reconcileSessionProjectionSnapshot, d as hasSessionProjectionAcceptedFinal, f as readSessionProjectionFinalMessageIdentity, g as readSessionMessageIdentity, h as readAssistantStreamSegmentIdentity, i as resetGatewaySessionMessageSubscriptionCoordinator, j as buildDeviceAuthPayload, k as selectGatewayConnectAuth, l as reduceSessionProjection, m as normalizeSessionProjectionRunId, n as getGatewaySessionMessageSubscriptionCoordinator, o as isLocallyOptimisticSessionMessage, p as isSessionProjectionErrorMessage, r as releaseGatewaySessionMessageSubscription, s as projectLiveSessionMessage, t as GatewaySessionMessageSubscriptionCoordinator, u as reduceSessionProjectionRunEvent, w as gatewayCredentialScope, x as GatewayProtocolRequestError, y as shouldPauseGatewayReconnect } from "./session-subscriptions-DIcpqS8A.mjs";
 import { DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, resolveSafeTimeoutDelayMs } from "./timeouts.mjs";
 export * from "@openclaw/gateway-protocol/connect-error-details";
-export * from "@openclaw/gateway-protocol/client-info";
 export * from "@openclaw/gateway-protocol/gateway-error-details";
+export * from "@openclaw/gateway-protocol/client-info";
 export * from "@openclaw/gateway-protocol/startup-unavailable";
 export * from "@openclaw/gateway-protocol/version";
-export { DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, GatewayBrowserDeviceAuthLifecycle, GatewayProtocolClient, GatewayProtocolRequestError, GatewayProtocolRequestTimeoutError, GatewaySessionMessageSubscriptionCoordinator, buildDeviceAuthPayload, buildDeviceAuthPayloadV3, buildGatewayConnectAuth, createSessionProjection, gatewayCredentialScope, gatewayOriginScope, getGatewaySessionMessageSubscriptionCoordinator, hasSessionProjectionAcceptedFinal, isLocallyOptimisticSessionMessage, normalizeDeviceMetadataForAuth, normalizeSessionProjectionRunId, projectLiveSessionMessage, readAssistantStreamSegmentIdentity, readSessionMessageIdentity, readSessionMessageSequence, reconcileSessionProjectionSnapshot, reduceSessionProjection, reduceSessionProjectionRunEvent, releaseGatewaySessionMessageSubscription, resetGatewaySessionMessageSubscriptionCoordinator, resolveGatewayConnectScopes, resolveSafeTimeoutDelayMs, selectGatewayConnectAuth, shouldPauseGatewayReconnect, shouldRetryGatewayWithDeviceToken };
+export { DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, GatewayBrowserDeviceAuthLifecycle, GatewayProtocolClient, GatewayProtocolRequestError, GatewayProtocolRequestTimeoutError, GatewaySessionMessageSubscriptionCoordinator, buildDeviceAuthPayload, buildDeviceAuthPayloadV3, buildGatewayConnectAuth, createSessionProjection, gatewayCredentialScope, gatewayOriginScope, getGatewaySessionMessageSubscriptionCoordinator, hasSessionProjectionAcceptedFinal, isLocallyOptimisticSessionMessage, isSessionProjectionErrorMessage, normalizeDeviceMetadataForAuth, normalizeSessionProjectionRunId, projectLiveSessionMessage, readAssistantStreamSegmentIdentity, readSessionMessageIdentity, readSessionMessageSequence, readSessionProjectionFinalMessageIdentity, reconcileSessionProjectionSnapshot, reduceSessionProjection, reduceSessionProjectionRunEvent, releaseGatewaySessionMessageSubscription, resetGatewaySessionMessageSubscriptionCoordinator, resolveGatewayConnectScopes, resolveSafeTimeoutDelayMs, selectGatewayConnectAuth, shouldPauseGatewayReconnect, shouldRetryGatewayWithDeviceToken };

package/dist/index.d.mts

@@ -1,8 +1,8 @@
-import { A as readSessionMessageSequence, C as reduceSessionProjection, D as normalizeSessionProjectionRunId, E as SessionMessageIdentity, F as normalizeDeviceMetadataForAuth, M as gatewayOriginScope, N as buildDeviceAuthPayload, O as readAssistantStreamSegmentIdentity, P as buildDeviceAuthPayloadV3, S as reconcileSessionProjectionSnapshot, T as SessionMessageEnvelope, _ as SessionProjectionState, a as GatewaySessionMessageSubscriptionOptions, b as isLocallyOptimisticSessionMessage, c as resetGatewaySessionMessageSubscriptionCoordinator, d as SessionProjectionGatewayRunEvent, f as SessionProjectionRun, g as SessionProjectionSnapshotOptions, h as SessionProjectionScope, i as GatewaySessionMessageSubscriptionCoordinatorOptions, j as gatewayCredentialScope, k as readSessionMessageIdentity, l as SessionProjectionEntry, m as SessionProjectionRunTransition, n as GatewaySessionMessageSubscription, o as getGatewaySessionMessageSubscriptionCoordinator, p as SessionProjectionRunStatus, r as GatewaySessionMessageSubscriptionCoordinator, s as releaseGatewaySessionMessageSubscription, t as GatewaySessionMessageRequestClient, u as SessionProjectionEvent, v as createSessionProjection, w as reduceSessionProjectionRunEvent, x as projectLiveSessionMessage, y as hasSessionProjectionAcceptedFinal } from "./session-subscriptions-D2UdeJ0u.mjs";
+import { A as readAssistantStreamSegmentIdentity, C as SessionProjectionRunTransition, D as SessionMessageEnvelope, E as readSessionProjectionFinalMessageIdentity, F as buildDeviceAuthPayload, I as buildDeviceAuthPayloadV3, L as normalizeDeviceMetadataForAuth, M as readSessionMessageSequence, N as gatewayCredentialScope, O as SessionMessageIdentity, P as gatewayOriginScope, S as SessionProjectionGatewayRunEvent, T as hasSessionProjectionAcceptedFinal, _ as isLocallyOptimisticSessionMessage, a as GatewaySessionMessageSubscriptionOptions, b as reduceSessionProjection, c as resetGatewaySessionMessageSubscriptionCoordinator, d as SessionProjectionRun, f as SessionProjectionRunStatus, g as createSessionProjection, h as SessionProjectionState, i as GatewaySessionMessageSubscriptionCoordinatorOptions, j as readSessionMessageIdentity, k as normalizeSessionProjectionRunId, l as SessionProjectionEntry, m as SessionProjectionSnapshotOptions, n as GatewaySessionMessageSubscription, o as getGatewaySessionMessageSubscriptionCoordinator, p as SessionProjectionScope, r as GatewaySessionMessageSubscriptionCoordinator, s as releaseGatewaySessionMessageSubscription, t as GatewaySessionMessageRequestClient, u as SessionProjectionEvent, v as projectLiveSessionMessage, w as reduceSessionProjectionRunEvent, x as isSessionProjectionErrorMessage, y as reconcileSessionProjectionSnapshot } from "./session-subscriptions-BSQIANvX.mjs";
 import { a as GatewayBrowserDeviceTokenStore, c as resolveGatewayConnectScopes, i as GatewayBrowserDeviceTokenRecord, l as selectGatewayConnectAuth, n as GatewayBrowserDeviceAuthPlan, o as GatewayConnectAuthSelection, r as GatewayBrowserDeviceIdentity, s as buildGatewayConnectAuth, t as GatewayBrowserDeviceAuthLifecycle, u as shouldRetryGatewayWithDeviceToken } from "./browser-device-auth-DoPo-sPB.mjs";
 import { i as isGatewayProtocolResponseError } from "./protocol-request-B5gBmLgq.mjs";
 import { DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, MAX_CONNECT_CHALLENGE_TIMEOUT_MS, MAX_SAFE_TIMEOUT_DELAY_MS, MIN_CONNECT_CHALLENGE_TIMEOUT_MS, addSafeTimeoutDelayGraceMs, clampConnectChallengeTimeoutMs, clearGatewayConnectTimeout, getConnectChallengeTimeoutMsFromEnv, resolveConnectChallengeTimeoutMs, resolveFiniteTimeoutDelayMs, resolvePreauthHandshakeTimeoutMs, resolveSafeTimeoutDelayMs, startGatewayConnectTimeout } from "./timeouts.mjs";
-import { _ as GatewayClientRequestTimeoutError, a as startGatewayClientWithReadinessWait, b as GatewayClientRequestError, c as waitForEventLoopReady, d as GatewayClient, f as GatewayClientCloseInfo, g as GatewayClientRequestOptions, h as GatewayClientOptions, i as startGatewayClientWhenEventLoopReady, l as DeviceAuthTokenRecord, m as GatewayClientHostDeps, n as GatewayClientStartReadinessOptions, o as EventLoopReadyOptions, p as GatewayClientConnectionMetadata, r as GatewayClientStartable, s as EventLoopReadyResult, t as EventLoopReadyWaiter, u as DeviceIdentity, v as GatewayReconnectPausedInfo, y as isGatewayConnectAssemblyError } from "./readiness-uQKoJkl5.mjs";
+import { _ as GatewayClientRequestTimeoutError, a as startGatewayClientWithReadinessWait, b as GatewayClientRequestError, c as waitForEventLoopReady, d as GatewayClient, f as GatewayClientCloseInfo, g as GatewayClientRequestOptions, h as GatewayClientOptions, i as startGatewayClientWhenEventLoopReady, l as DeviceAuthTokenRecord, m as GatewayClientHostDeps, n as GatewayClientStartReadinessOptions, o as EventLoopReadyOptions, p as GatewayClientConnectionMetadata, r as GatewayClientStartable, s as EventLoopReadyResult, t as EventLoopReadyWaiter, u as DeviceIdentity, v as GatewayReconnectPausedInfo, y as isGatewayConnectAssemblyError } from "./readiness-DabX0O0A.mjs";
 import { GatewayScopeUpgrade, ScopeUpgradeBinding, ScopeUpgradeOptions, ScopeUpgradeOutcome } from "./scope-upgrade.mjs";
 //#region packages/gateway-client/src/cloudflare-access.d.ts
 export declare const CF_ACCESS_CLIENT_ID_HEADER = "CF-Access-Client-Id";
@@ -14,4 +14,4 @@ export type CloudflareAccessCredentials = Readonly<{
 /** Build only the two headers Cloudflare Access defines for service-token auth. */
 export declare function buildCloudflareAccessHeaders(credentials: CloudflareAccessCredentials): Record<string, string>;
 //#endregion
-export { DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, DeviceAuthTokenRecord, DeviceIdentity, EventLoopReadyOptions, EventLoopReadyResult, EventLoopReadyWaiter, GatewayBrowserDeviceAuthLifecycle, GatewayBrowserDeviceAuthPlan, GatewayBrowserDeviceIdentity, GatewayBrowserDeviceTokenRecord, GatewayBrowserDeviceTokenStore, GatewayClient, GatewayClientCloseInfo, GatewayClientConnectionMetadata, GatewayClientHostDeps, GatewayClientOptions, GatewayClientRequestError, GatewayClientRequestOptions, GatewayClientRequestTimeoutError, GatewayClientStartReadinessOptions, GatewayClientStartable, GatewayConnectAuthSelection, GatewayReconnectPausedInfo, GatewayScopeUpgrade, GatewaySessionMessageRequestClient, GatewaySessionMessageSubscription, GatewaySessionMessageSubscriptionCoordinator, GatewaySessionMessageSubscriptionCoordinatorOptions, GatewaySessionMessageSubscriptionOptions, MAX_CONNECT_CHALLENGE_TIMEOUT_MS, MAX_SAFE_TIMEOUT_DELAY_MS, MIN_CONNECT_CHALLENGE_TIMEOUT_MS, ScopeUpgradeBinding, ScopeUpgradeOptions, ScopeUpgradeOutcome, type SessionMessageEnvelope, type SessionMessageIdentity, SessionProjectionEntry, SessionProjectionEvent, SessionProjectionGatewayRunEvent, SessionProjectionRun, SessionProjectionRunStatus, SessionProjectionRunTransition, SessionProjectionScope, SessionProjectionSnapshotOptions, SessionProjectionState, addSafeTimeoutDelayGraceMs, buildDeviceAuthPayload, buildDeviceAuthPayloadV3, buildGatewayConnectAuth, clampConnectChallengeTimeoutMs, clearGatewayConnectTimeout, createSessionProjection, gatewayCredentialScope, gatewayOriginScope, getConnectChallengeTimeoutMsFromEnv, getGatewaySessionMessageSubscriptionCoordinator, hasSessionProjectionAcceptedFinal, isGatewayConnectAssemblyError, isGatewayProtocolResponseError, isLocallyOptimisticSessionMessage, normalizeDeviceMetadataForAuth, normalizeSessionProjectionRunId, projectLiveSessionMessage, readAssistantStreamSegmentIdentity, readSessionMessageIdentity, readSessionMessageSequence, reconcileSessionProjectionSnapshot, reduceSessionProjection, reduceSessionProjectionRunEvent, releaseGatewaySessionMessageSubscription, resetGatewaySessionMessageSubscriptionCoordinator, resolveConnectChallengeTimeoutMs, resolveFiniteTimeoutDelayMs, resolveGatewayConnectScopes, resolvePreauthHandshakeTimeoutMs, resolveSafeTimeoutDelayMs, selectGatewayConnectAuth, shouldRetryGatewayWithDeviceToken, startGatewayClientWhenEventLoopReady, startGatewayClientWithReadinessWait, startGatewayConnectTimeout, waitForEventLoopReady };
+export { DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, DeviceAuthTokenRecord, DeviceIdentity, EventLoopReadyOptions, EventLoopReadyResult, EventLoopReadyWaiter, GatewayBrowserDeviceAuthLifecycle, GatewayBrowserDeviceAuthPlan, GatewayBrowserDeviceIdentity, GatewayBrowserDeviceTokenRecord, GatewayBrowserDeviceTokenStore, GatewayClient, GatewayClientCloseInfo, GatewayClientConnectionMetadata, GatewayClientHostDeps, GatewayClientOptions, GatewayClientRequestError, GatewayClientRequestOptions, GatewayClientRequestTimeoutError, GatewayClientStartReadinessOptions, GatewayClientStartable, GatewayConnectAuthSelection, GatewayReconnectPausedInfo, GatewayScopeUpgrade, GatewaySessionMessageRequestClient, GatewaySessionMessageSubscription, GatewaySessionMessageSubscriptionCoordinator, GatewaySessionMessageSubscriptionCoordinatorOptions, GatewaySessionMessageSubscriptionOptions, MAX_CONNECT_CHALLENGE_TIMEOUT_MS, MAX_SAFE_TIMEOUT_DELAY_MS, MIN_CONNECT_CHALLENGE_TIMEOUT_MS, ScopeUpgradeBinding, ScopeUpgradeOptions, ScopeUpgradeOutcome, type SessionMessageEnvelope, type SessionMessageIdentity, SessionProjectionEntry, SessionProjectionEvent, type SessionProjectionGatewayRunEvent, SessionProjectionRun, SessionProjectionRunStatus, type SessionProjectionRunTransition, SessionProjectionScope, SessionProjectionSnapshotOptions, SessionProjectionState, addSafeTimeoutDelayGraceMs, buildDeviceAuthPayload, buildDeviceAuthPayloadV3, buildGatewayConnectAuth, clampConnectChallengeTimeoutMs, clearGatewayConnectTimeout, createSessionProjection, gatewayCredentialScope, gatewayOriginScope, getConnectChallengeTimeoutMsFromEnv, getGatewaySessionMessageSubscriptionCoordinator, hasSessionProjectionAcceptedFinal, isGatewayConnectAssemblyError, isGatewayProtocolResponseError, isLocallyOptimisticSessionMessage, isSessionProjectionErrorMessage, normalizeDeviceMetadataForAuth, normalizeSessionProjectionRunId, projectLiveSessionMessage, readAssistantStreamSegmentIdentity, readSessionMessageIdentity, readSessionMessageSequence, readSessionProjectionFinalMessageIdentity, reconcileSessionProjectionSnapshot, reduceSessionProjection, reduceSessionProjectionRunEvent, releaseGatewaySessionMessageSubscription, resetGatewaySessionMessageSubscriptionCoordinator, resolveConnectChallengeTimeoutMs, resolveFiniteTimeoutDelayMs, resolveGatewayConnectScopes, resolvePreauthHandshakeTimeoutMs, resolveSafeTimeoutDelayMs, selectGatewayConnectAuth, shouldRetryGatewayWithDeviceToken, startGatewayClientWhenEventLoopReady, startGatewayClientWithReadinessWait, startGatewayConnectTimeout, waitForEventLoopReady };

package/dist/index.mjs

@@ -1,16 +1,17 @@
-import { A as buildDeviceAuthPayloadV3, C as gatewayOriginScope, D as selectGatewayConnectAuth, E as resolveGatewayConnectScopes, O as shouldRetryGatewayWithDeviceToken, S as gatewayCredentialScope, T as buildGatewayConnectAuth, _ as shouldPauseGatewayReconnect, a as createSessionProjection, b as GatewayProtocolRequestTimeoutError, c as projectLiveSessionMessage, d as reduceSessionProjectionRunEvent, f as normalizeSessionProjectionRunId, g as isRecord, h as readSessionMessageSequence, i as resetGatewaySessionMessageSubscriptionCoordinator, j as normalizeDeviceMetadataForAuth, k as buildDeviceAuthPayload, l as reconcileSessionProjectionSnapshot, m as readSessionMessageIdentity, n as getGatewaySessionMessageSubscriptionCoordinator, o as hasSessionProjectionAcceptedFinal, p as readAssistantStreamSegmentIdentity, r as releaseGatewaySessionMessageSubscription, s as isLocallyOptimisticSessionMessage, t as GatewaySessionMessageSubscriptionCoordinator, u as reduceSessionProjection, v as GatewayProtocolClient, w as GatewayBrowserDeviceAuthLifecycle, x as isGatewayProtocolResponseError, y as GatewayProtocolRequestError } from "./session-subscriptions-C0VxZerW.mjs";
+import { A as shouldRetryGatewayWithDeviceToken, C as isGatewayProtocolResponseError, D as buildGatewayConnectAuth, E as GatewayBrowserDeviceAuthLifecycle, M as buildDeviceAuthPayloadV3, N as normalizeDeviceMetadataForAuth, O as resolveGatewayConnectScopes, S as GatewayProtocolRequestTimeoutError, T as gatewayOriginScope, _ as readSessionMessageSequence, a as createSessionProjection, b as GatewayProtocolClient, c as reconcileSessionProjectionSnapshot, d as hasSessionProjectionAcceptedFinal, f as readSessionProjectionFinalMessageIdentity, g as readSessionMessageIdentity, h as readAssistantStreamSegmentIdentity, i as resetGatewaySessionMessageSubscriptionCoordinator, j as buildDeviceAuthPayload, k as selectGatewayConnectAuth, l as reduceSessionProjection, m as normalizeSessionProjectionRunId, n as getGatewaySessionMessageSubscriptionCoordinator, o as isLocallyOptimisticSessionMessage, p as isSessionProjectionErrorMessage, r as releaseGatewaySessionMessageSubscription, s as projectLiveSessionMessage, t as GatewaySessionMessageSubscriptionCoordinator, u as reduceSessionProjectionRunEvent, v as isRecord, w as gatewayCredentialScope, x as GatewayProtocolRequestError, y as shouldPauseGatewayReconnect } from "./session-subscriptions-DIcpqS8A.mjs";
 import { DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, MAX_CONNECT_CHALLENGE_TIMEOUT_MS, MAX_SAFE_TIMEOUT_DELAY_MS, MIN_CONNECT_CHALLENGE_TIMEOUT_MS, addSafeTimeoutDelayGraceMs, clampConnectChallengeTimeoutMs, clearGatewayConnectTimeout, getConnectChallengeTimeoutMsFromEnv, resolveConnectChallengeTimeoutMs, resolveFiniteTimeoutDelayMs, resolvePreauthHandshakeTimeoutMs, resolveSafeTimeoutDelayMs, startGatewayConnectTimeout } from "./timeouts.mjs";
 import { rawDataToString } from "./websocket-data.mjs";
 import { n as startGatewayClientWithReadinessWait, r as waitForEventLoopReady, t as startGatewayClientWhenEventLoopReady } from "./readiness-CrWxd4TI.mjs";
 import { GatewayScopeUpgrade } from "./scope-upgrade.mjs";
+import { createRequire } from "node:module";
 import { ConnectErrorDetailCodes, formatConnectErrorMessage, readConnectErrorDetailCode } from "@openclaw/gateway-protocol/connect-error-details";
 import { GATEWAY_CLIENT_MODES, GATEWAY_CLIENT_NAMES } from "@openclaw/gateway-protocol/client-info";
 import { resolveGatewayStartupRetryAfterMs } from "@openclaw/gateway-protocol/startup-unavailable";
 import { MIN_CLIENT_PROTOCOL_VERSION, MIN_NODE_PROTOCOL_VERSION, MIN_PROBE_PROTOCOL_VERSION, PROTOCOL_VERSION } from "@openclaw/gateway-protocol/version";
 import { randomUUID } from "node:crypto";
-import { WebSocket } from "ws";
 import ipaddr from "ipaddr.js";
 import { TLSSocket } from "node:tls";
+import path from "node:path";
 //#region packages/normalization-core/src/string-coerce.ts
 /** Trims string input and returns null for non-strings or empty strings. */
 function normalizeNullableString(value) {
@@ -535,6 +536,10 @@ function applyGatewayWebSocketTlsPin(options, expectedFingerprint, normalize = n
 	};
 }
 //#endregion
+//#region packages/gateway-client/src/websocket.ts
+const require = createRequire(import.meta.url);
+const { WebSocket } = require(path.join(path.dirname(require.resolve("ws/package.json")), "index.js"));
+//#endregion
 //#region packages/gateway-client/src/client.ts
 const DEFAULT_HOST_DEPS = {
 	loadOrCreateDeviceIdentity: () => void 0,
@@ -739,6 +744,11 @@ var GatewayClient = class {
 			rethrowSocketFactoryError: (error) => error instanceof GatewayClientTransportPolicyError
 		});
 	}
+	/** Current transport state, including CLOSING before the close callback fires.
+	* This is not authentication or readiness evidence on its own. */
+	get connected() {
+		return !this.stopped && this.protocol.connected;
+	}
 	getConnectionMetadata() {
 		return {
 			clientName: this.opts.clientName,
@@ -1344,4 +1354,4 @@ function buildCloudflareAccessHeaders(credentials) {
 	};
 }
 //#endregion
-export { CF_ACCESS_CLIENT_ID_HEADER, CF_ACCESS_CLIENT_SECRET_HEADER, DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, GatewayBrowserDeviceAuthLifecycle, GatewayClient, GatewayClientRequestError, GatewayClientRequestTimeoutError, GatewayScopeUpgrade, GatewaySessionMessageSubscriptionCoordinator, MAX_CONNECT_CHALLENGE_TIMEOUT_MS, MAX_SAFE_TIMEOUT_DELAY_MS, MIN_CONNECT_CHALLENGE_TIMEOUT_MS, addSafeTimeoutDelayGraceMs, buildCloudflareAccessHeaders, buildDeviceAuthPayload, buildDeviceAuthPayloadV3, buildGatewayConnectAuth, clampConnectChallengeTimeoutMs, clearGatewayConnectTimeout, createSessionProjection, gatewayCredentialScope, gatewayOriginScope, getConnectChallengeTimeoutMsFromEnv, getGatewaySessionMessageSubscriptionCoordinator, hasSessionProjectionAcceptedFinal, isGatewayConnectAssemblyError, isGatewayProtocolResponseError, isLocallyOptimisticSessionMessage, normalizeDeviceMetadataForAuth, normalizeSessionProjectionRunId, projectLiveSessionMessage, readAssistantStreamSegmentIdentity, readSessionMessageIdentity, readSessionMessageSequence, reconcileSessionProjectionSnapshot, reduceSessionProjection, reduceSessionProjectionRunEvent, releaseGatewaySessionMessageSubscription, resetGatewaySessionMessageSubscriptionCoordinator, resolveConnectChallengeTimeoutMs, resolveFiniteTimeoutDelayMs, resolveGatewayConnectScopes, resolvePreauthHandshakeTimeoutMs, resolveSafeTimeoutDelayMs, selectGatewayConnectAuth, shouldRetryGatewayWithDeviceToken, startGatewayClientWhenEventLoopReady, startGatewayClientWithReadinessWait, startGatewayConnectTimeout, waitForEventLoopReady };
+export { CF_ACCESS_CLIENT_ID_HEADER, CF_ACCESS_CLIENT_SECRET_HEADER, DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, DEFAULT_PREAUTH_HANDSHAKE_TIMEOUT_MS, GatewayBrowserDeviceAuthLifecycle, GatewayClient, GatewayClientRequestError, GatewayClientRequestTimeoutError, GatewayScopeUpgrade, GatewaySessionMessageSubscriptionCoordinator, MAX_CONNECT_CHALLENGE_TIMEOUT_MS, MAX_SAFE_TIMEOUT_DELAY_MS, MIN_CONNECT_CHALLENGE_TIMEOUT_MS, addSafeTimeoutDelayGraceMs, buildCloudflareAccessHeaders, buildDeviceAuthPayload, buildDeviceAuthPayloadV3, buildGatewayConnectAuth, clampConnectChallengeTimeoutMs, clearGatewayConnectTimeout, createSessionProjection, gatewayCredentialScope, gatewayOriginScope, getConnectChallengeTimeoutMsFromEnv, getGatewaySessionMessageSubscriptionCoordinator, hasSessionProjectionAcceptedFinal, isGatewayConnectAssemblyError, isGatewayProtocolResponseError, isLocallyOptimisticSessionMessage, isSessionProjectionErrorMessage, normalizeDeviceMetadataForAuth, normalizeSessionProjectionRunId, projectLiveSessionMessage, readAssistantStreamSegmentIdentity, readSessionMessageIdentity, readSessionMessageSequence, readSessionProjectionFinalMessageIdentity, reconcileSessionProjectionSnapshot, reduceSessionProjection, reduceSessionProjectionRunEvent, releaseGatewaySessionMessageSubscription, resetGatewaySessionMessageSubscriptionCoordinator, resolveConnectChallengeTimeoutMs, resolveFiniteTimeoutDelayMs, resolveGatewayConnectScopes, resolvePreauthHandshakeTimeoutMs, resolveSafeTimeoutDelayMs, selectGatewayConnectAuth, shouldRetryGatewayWithDeviceToken, startGatewayClientWhenEventLoopReady, startGatewayClientWithReadinessWait, startGatewayConnectTimeout, waitForEventLoopReady };

package/dist/{readiness-uQKoJkl5.d.mts → readiness-DabX0O0A.d.mts}

@@ -152,6 +152,9 @@ declare class GatewayClient {
   private transportValidated;
   private suppressedTransientPreHelloCleanCloses;
   constructor(opts: GatewayClientOptions);
+  /** Current transport state, including CLOSING before the close callback fires.
+   * This is not authentication or readiness evidence on its own. */
+  get connected(): boolean;
   getConnectionMetadata(): GatewayClientConnectionMetadata;
   updateNodeManifest(manifest: {
     caps: string[];

package/dist/readiness.d.mts

@@ -1,2 +1,2 @@
-import { a as startGatewayClientWithReadinessWait, i as startGatewayClientWhenEventLoopReady, n as GatewayClientStartReadinessOptions, r as GatewayClientStartable, t as EventLoopReadyWaiter } from "./readiness-uQKoJkl5.mjs";
+import { a as startGatewayClientWithReadinessWait, i as startGatewayClientWhenEventLoopReady, n as GatewayClientStartReadinessOptions, r as GatewayClientStartable, t as EventLoopReadyWaiter } from "./readiness-DabX0O0A.mjs";
 export { EventLoopReadyWaiter, GatewayClientStartReadinessOptions, GatewayClientStartable, startGatewayClientWhenEventLoopReady, startGatewayClientWithReadinessWait };

package/dist/{session-subscriptions-D2UdeJ0u.d.mts → session-subscriptions-BSQIANvX.d.mts}

@@ -57,6 +57,35 @@ declare function readAssistantStreamSegmentIdentity(message: unknown): {
   runId?: string;
 } | undefined;
 //#endregion
+//#region packages/gateway-client/src/session-projection-final-identity.d.ts
+type TerminalProjectionRun = {
+  message?: unknown;
+  status: string;
+  acceptedFinalMessageIdentities?: readonly string[];
+};
+/** Read stable persisted identity first, falling back to canonical display content. */
+declare function readSessionProjectionFinalMessageIdentity(message: unknown): string | null;
+/** Check whether a run has already accepted the same terminal reply. */
+declare function hasSessionProjectionAcceptedFinal(run: TerminalProjectionRun | undefined, message: unknown): boolean;
+//#endregion
+//#region packages/gateway-client/src/session-projection-run-event.d.ts
+type SessionProjectionGatewayRunEvent = {
+  state?: unknown;
+  yielded?: unknown;
+  seq?: unknown;
+} & Partial<Record<"runId" | "message" | "stopReason" | "errorKind" | "errorMessage", unknown>>;
+type SessionProjectionRunTransition = {
+  projection: SessionProjectionState;
+  previousRun: SessionProjectionRun | undefined;
+  currentRun: SessionProjectionRun | undefined;
+};
+/** Normalizes Gateway run envelopes once for every browser and terminal adapter. */
+declare function reduceSessionProjectionRunEvent(projection: SessionProjectionState, event: SessionProjectionGatewayRunEvent, scope?: SessionProjectionScope): SessionProjectionRunTransition | null;
+//#endregion
+//#region packages/gateway-client/src/session-projection-message-content.d.ts
+/** Diagnostic-only error projections can be retired when their run resumes. */
+declare function isSessionProjectionErrorMessage(message: unknown, errorMessage?: string): boolean;
+//#endregion
 //#region packages/gateway-client/src/session-projection.d.ts
 type SessionProjectionScope = {
   sessionKey?: string;
@@ -71,22 +100,18 @@ type SessionProjectionSnapshotOptions = {
 type SessionProjectionRunStatus = "streaming" | "completed" | "error" | "aborted" | "timeout" | "yielded";
 type SessionProjectionRun = {
   runId: string;
+  seq?: number;
   status: SessionProjectionRunStatus;
   message?: unknown;
   acceptedFinalMessageIdentities?: readonly string[];
+  inferredSnapshotTerminal?: {
+    entry: SessionProjectionEntry;
+    matchedIdentity: SessionMessageIdentity;
+  };
   stopReason?: string;
   errorKind?: string;
   errorMessage?: string;
 };
-type SessionProjectionGatewayRunEvent = {
-  state?: unknown;
-  yielded?: unknown;
-} & Partial<Record<"runId" | "message" | "stopReason" | "errorKind" | "errorMessage", unknown>>;
-type SessionProjectionRunTransition = {
-  projection: SessionProjectionState;
-  previousRun: SessionProjectionRun | undefined;
-  currentRun: SessionProjectionRun | undefined;
-};
 type SessionProjectionEntry = {
   message: unknown;
   identity: SessionMessageIdentity | null;
@@ -129,6 +154,7 @@ type SessionProjectionEvent = ScopedSessionProjectionEvent & ({
 } | {
   type: "runDelta";
   runId: string;
+  seq?: number;
   message?: unknown;
 } | (Omit<SessionProjectionRun, "acceptedFinalMessageIdentities"> & {
   type: "runTerminal";
@@ -146,12 +172,8 @@ declare function createSessionProjection(scope?: SessionProjectionScope, message
 declare function projectLiveSessionMessage(state: SessionProjectionState, message: unknown, envelope?: SessionMessageEnvelope, scope?: SessionProjectionScope): SessionProjectionState;
 /** Only observed live events and this client's pending turns may survive an older snapshot. */
 declare function reconcileSessionProjectionSnapshot(state: SessionProjectionState, messages: readonly unknown[], scope?: SessionProjectionScope, options?: SessionProjectionSnapshotOptions): SessionProjectionState;
-/** Replayed finals are recognized against this run's bounded canonical terminal history. */
-declare function hasSessionProjectionAcceptedFinal(run: SessionProjectionRun | undefined, message: unknown): boolean;
 /** Reduces durable events, snapshots, and transport lifecycle without client-specific policy. */
 declare function reduceSessionProjection(state: SessionProjectionState, event: SessionProjectionEvent): SessionProjectionState;
-/** Normalizes Gateway run envelopes once for every browser and terminal adapter. */
-declare function reduceSessionProjectionRunEvent(projection: SessionProjectionState, event: SessionProjectionGatewayRunEvent, scope?: SessionProjectionScope): SessionProjectionRunTransition | null;
 //#endregion
 //#region packages/gateway-client/src/session-subscriptions.d.ts
 type GatewaySessionMessageRequestClient = {
@@ -187,4 +209,4 @@ declare function getGatewaySessionMessageSubscriptionCoordinator(client: Gateway
 declare function resetGatewaySessionMessageSubscriptionCoordinator(client: GatewaySessionMessageRequestClient): void;
 declare function releaseGatewaySessionMessageSubscription(subscription: GatewaySessionMessageSubscription): Promise<void>;
 //#endregion
-export { readSessionMessageSequence as A, reduceSessionProjection as C, normalizeSessionProjectionRunId as D, SessionMessageIdentity as E, normalizeDeviceMetadataForAuth as F, gatewayOriginScope as M, buildDeviceAuthPayload as N, readAssistantStreamSegmentIdentity as O, buildDeviceAuthPayloadV3 as P, reconcileSessionProjectionSnapshot as S, SessionMessageEnvelope as T, SessionProjectionState as _, GatewaySessionMessageSubscriptionOptions as a, isLocallyOptimisticSessionMessage as b, resetGatewaySessionMessageSubscriptionCoordinator as c, SessionProjectionGatewayRunEvent as d, SessionProjectionRun as f, SessionProjectionSnapshotOptions as g, SessionProjectionScope as h, GatewaySessionMessageSubscriptionCoordinatorOptions as i, gatewayCredentialScope as j, readSessionMessageIdentity as k, SessionProjectionEntry as l, SessionProjectionRunTransition as m, GatewaySessionMessageSubscription as n, getGatewaySessionMessageSubscriptionCoordinator as o, SessionProjectionRunStatus as p, GatewaySessionMessageSubscriptionCoordinator as r, releaseGatewaySessionMessageSubscription as s, GatewaySessionMessageRequestClient as t, SessionProjectionEvent as u, createSessionProjection as v, reduceSessionProjectionRunEvent as w, projectLiveSessionMessage as x, hasSessionProjectionAcceptedFinal as y };
+export { readAssistantStreamSegmentIdentity as A, SessionProjectionRunTransition as C, SessionMessageEnvelope as D, readSessionProjectionFinalMessageIdentity as E, buildDeviceAuthPayload as F, buildDeviceAuthPayloadV3 as I, normalizeDeviceMetadataForAuth as L, readSessionMessageSequence as M, gatewayCredentialScope as N, SessionMessageIdentity as O, gatewayOriginScope as P, SessionProjectionGatewayRunEvent as S, hasSessionProjectionAcceptedFinal as T, isLocallyOptimisticSessionMessage as _, GatewaySessionMessageSubscriptionOptions as a, reduceSessionProjection as b, resetGatewaySessionMessageSubscriptionCoordinator as c, SessionProjectionRun as d, SessionProjectionRunStatus as f, createSessionProjection as g, SessionProjectionState as h, GatewaySessionMessageSubscriptionCoordinatorOptions as i, readSessionMessageIdentity as j, normalizeSessionProjectionRunId as k, SessionProjectionEntry as l, SessionProjectionSnapshotOptions as m, GatewaySessionMessageSubscription as n, getGatewaySessionMessageSubscriptionCoordinator as o, SessionProjectionScope as p, GatewaySessionMessageSubscriptionCoordinator as r, releaseGatewaySessionMessageSubscription as s, GatewaySessionMessageRequestClient as t, SessionProjectionEvent as u, projectLiveSessionMessage as v, reduceSessionProjectionRunEvent as w, isSessionProjectionErrorMessage as x, reconcileSessionProjectionSnapshot as y };

package/dist/{session-subscriptions-C0VxZerW.mjs → session-subscriptions-DIcpqS8A.mjs}

@@ -1,6 +1,7 @@
 import { DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS, clearGatewayConnectTimeout, resolveSafeTimeoutDelayMs, startGatewayConnectTimeout } from "./timeouts.mjs";
 import { ConnectErrorDetailCodes, readConnectErrorDetailCode, readConnectErrorRecoveryAdvice, readPairingConnectErrorDetails } from "@openclaw/gateway-protocol/connect-error-details";
 import { isGatewayEventFrame, isGatewayResponseFrame } from "@openclaw/gateway-protocol/frame-guards";
+import { GATEWAY_ASSISTANT_ERROR_FALLBACK_TEXT } from "@openclaw/gateway-protocol/gateway-error-details";
 //#region packages/gateway-client/src/device-auth.ts
 function normalizeDeviceMetadataForAuth(value) {
 	if (typeof value !== "string") return "";
@@ -482,7 +483,8 @@ var GatewayPendingRequests = class {
 		return this.pending.size > 0;
 	}
 	get hasUnboundedPending() {
-		return [...this.pending.values()].some((pending) => pending.unbounded);
+		for (const pending of this.pending.values()) if (pending.unbounded) return true;
+		return false;
 	}
 	request(sender, method, params, options) {
 		let id;
@@ -578,8 +580,8 @@ var GatewayPendingRequests = class {
 		pending.reject(error);
 	}
 	flush(error) {
-		const retired = [...this.pending];
-		this.pending.clear();
+		const retired = this.pending;
+		this.pending = /* @__PURE__ */ new Map();
 		this.requestSequence = 0;
 		for (const [id, pending] of retired) {
 			pending.cleanup?.();
@@ -594,9 +596,7 @@ var GatewayPendingRequests = class {
 	finishTiming(id, pending, ok, errorCode) {
 		const endedAtMs = this.opts.nowMs();
 		try {
-			const onTiming = this.opts.onTiming;
-			if (onTiming === void 0 || onTiming === null) return;
-			Reflect.apply(onTiming, this.opts, [{
+			this.opts.onTiming?.({
 				id,
 				method: pending.method,
 				ok,
@@ -604,7 +604,7 @@ var GatewayPendingRequests = class {
 				startedAtMs: pending.startedAtMs,
 				endedAtMs,
 				errorCode
-			}]);
+			});
 		} catch (error) {
 			this.opts.onCallbackError?.("request timing", error);
 		}
@@ -1032,6 +1032,66 @@ function asNullableRecord(value) {
 	return isRecord(value) ? value : null;
 }
 //#endregion
+//#region packages/normalization-core/src/stable-stringify.ts
+const preserveString = (value) => value;
+/** Deterministically stringifies values, optionally normalizing strings before key ordering. */
+function stableStringify(value, normalizeString = preserveString) {
+	return stringifyStableValue(value, /* @__PURE__ */ new WeakSet(), normalizeString);
+}
+function stringifyStableValue(value, stack, normalizeString) {
+	if (value === null || value === void 0) return String(value);
+	if (typeof value === "number" && !Number.isFinite(value)) return JSON.stringify(String(value));
+	if (typeof value === "bigint") return JSON.stringify(value.toString());
+	if (typeof value === "string") return JSON.stringify(normalizeString(value));
+	if (typeof value !== "object") return JSON.stringify(value) ?? "null";
+	if (stack.has(value)) return JSON.stringify("[Circular]");
+	stack.add(value);
+	try {
+		return stringifyObjectValue(value, stack, normalizeString);
+	} finally {
+		stack.delete(value);
+	}
+}
+function stringifyObjectValue(value, stack, normalizeString) {
+	if (value instanceof Error) return stringifyStableValue({
+		name: value.name,
+		message: value.message,
+		stack: value.stack
+	}, stack, normalizeString);
+	if (value instanceof Uint8Array) return stringifyStableValue({
+		type: "Uint8Array",
+		data: encodeBase64(value)
+	}, stack, normalizeString);
+	if (Array.isArray(value)) {
+		const serializedEntries = [];
+		for (const entry of value) serializedEntries.push(stringifyStableValue(entry, stack, normalizeString));
+		return `[${serializedEntries.join(",")}]`;
+	}
+	const record = value;
+	if (normalizeString === preserveString) {
+		const fields = [];
+		for (const key of Object.keys(record).toSorted()) fields.push(`${JSON.stringify(key)}:${stringifyStableValue(record[key], stack, normalizeString)}`);
+		return `{${fields.join(",")}}`;
+	}
+	const entries = Object.keys(record).map((key) => ({
+		key,
+		normalizedKey: normalizeString(key)
+	})).toSorted((left, right) => {
+		return compareStableStrings(left.normalizedKey, right.normalizedKey) || compareStableStrings(left.key, right.key);
+	});
+	const serializedFields = [];
+	for (const { key, normalizedKey } of entries) serializedFields.push(`${JSON.stringify(normalizedKey)}:${stringifyStableValue(record[key], stack, normalizeString)}`);
+	return `{${serializedFields.join(",")}}`;
+}
+function encodeBase64(value) {
+	let binary = "";
+	for (const byte of value) binary += String.fromCharCode(byte);
+	return btoa(binary);
+}
+function compareStableStrings(left, right) {
+	return left < right ? -1 : left > right ? 1 : 0;
+}
+//#endregion
 //#region packages/gateway-client/src/session-projection-message-identity.ts
 function readSessionProjectionString(value) {
 	return typeof value === "string" ? value.trim() || null : null;
@@ -1057,6 +1117,9 @@ function readSessionMessageIdentity(message, envelope) {
 	const importedFrom = readSessionProjectionString(metadata?.importedFrom);
 	const cliSessionId = readSessionProjectionString(metadata?.cliSessionId);
 	const externalId = readSessionProjectionString(metadata?.externalId);
+	const position = asNullableRecord(metadata?.transcriptPosition);
+	const positionSource = readSessionProjectionString(position?.source);
+	const isImported = !(positionSource !== null && positionSource.length <= 128 && typeof position?.rawSeq === "number" && Number.isSafeInteger(position.rawSeq) && position.rawSeq >= 0) && Boolean(importedFrom || cliSessionId || externalId);
 	const idempotencyKey = readSessionProjectionString(metadata?.idempotencyKey) ?? readSessionProjectionString(record.idempotencyKey) ?? readSessionProjectionString(envelope?.idempotencyKey) ?? readSessionProjectionString(envelope?.clientRunId);
 	const persistedRunId = normalizeSessionProjectionRunId(idempotencyKey);
 	const envelopeRunId = normalizeSessionProjectionRunId(envelope?.runId);
@@ -1073,8 +1136,8 @@ function readSessionMessageIdentity(message, envelope) {
 		idempotencyKey,
 		sendId: role === "user" ? persistedRunId ?? runId : null,
 		runId,
-		isImported: Boolean(importedFrom || cliSessionId || externalId),
-		externalSource: importedFrom && cliSessionId && externalId ? JSON.stringify([
+		isImported,
+		externalSource: isImported && importedFrom && cliSessionId && externalId ? JSON.stringify([
 			importedFrom,
 			cliSessionId,
 			externalId
@@ -1094,11 +1157,157 @@ function readAssistantStreamSegmentIdentity(message) {
 	} : void 0;
 }
 //#endregion
+//#region packages/gateway-client/src/session-projection-message-content.ts
+function readSessionMessageDisplayContent(message) {
+	const record = asNullableRecord(message);
+	const content = typeof message === "string" ? message : record?.content;
+	const media = asNullableRecord(record?.["__openclaw"])?.media;
+	let hasNonText = Array.isArray(media) && media.length > 0;
+	const texts = [];
+	for (const block of Array.isArray(content) ? content : [content]) {
+		const entry = asNullableRecord(block);
+		if (entry && entry.type !== "text" && entry.type !== "input_text" && entry.type !== "output_text") {
+			hasNonText ||= entry.type !== "thinking" && entry.type !== "reasoning" && entry.type !== "redacted_thinking";
+			continue;
+		}
+		const text = readSessionProjectionString(entry ? entry.text : block);
+		if (text) texts.push(text);
+	}
+	const fallback = texts.length === 0 ? readSessionProjectionString(record?.text) : null;
+	return {
+		text: fallback ?? texts.join("\n"),
+		hasNonText,
+		usesFallbackText: fallback !== null
+	};
+}
+/** Check whether a projected message has text or another displayable block. */
+function hasDisplayableSessionMessage(message) {
+	const { text, hasNonText } = readSessionMessageDisplayContent(message);
+	return Boolean(text) || hasNonText;
+}
+function normalizeChatErrorComparisonText(text) {
+	return text.trim().replace(/^⚠️\s*/u, "").replace(/^Error:\s*/iu, "").replace(/\s+/gu, " ").trim();
+}
+/** Diagnostic-only error projections can be retired when their run resumes. */
+function isSessionProjectionErrorMessage(message, errorMessage) {
+	const role = asNullableRecord(message)?.role;
+	if (typeof role === "string" && role.trim().toLowerCase() !== "assistant") return false;
+	const { text, hasNonText } = readSessionMessageDisplayContent(message);
+	const normalizedText = normalizeChatErrorComparisonText(text);
+	return !hasNonText && (!normalizedText || normalizedText === "[assistant turn failed before producing content]" || normalizedText === GATEWAY_ASSISTANT_ERROR_FALLBACK_TEXT || normalizedText === normalizeChatErrorComparisonText(errorMessage ?? ""));
+}
+//#endregion
+//#region packages/gateway-client/src/session-projection-final-identity.ts
+/** Terminal identity rules used to reconcile live and durable assistant projections. */
+function readPersistedFinalIdentity(message) {
+	const identity = readSessionMessageIdentity(message);
+	if (identity?.externalSource) return `import:${identity.role}:${identity.externalSource}`;
+	if (identity?.id && !identity.isImported) return `id:${identity.role}:${identity.id}`;
+	if (identity?.sequence !== null && identity?.sequence !== void 0) return `seq:${identity.role}:${identity.sequence}`;
+	return null;
+}
+function hasCompatiblePersistedFinalIdentity(currentMessage, incomingMessage) {
+	const current = readSessionMessageIdentity(currentMessage);
+	const incoming = readSessionMessageIdentity(incomingMessage);
+	if (!current || !incoming || current.role !== incoming.role) return false;
+	if (current.isImported || incoming.isImported) {
+		if (!current.isImported || !incoming.isImported) return false;
+		if (current.externalSource && incoming.externalSource) return current.externalSource === incoming.externalSource;
+		return current.sequence !== null && incoming.sequence !== null && current.sequence === incoming.sequence;
+	}
+	if (current.id && incoming.id) return current.id === incoming.id;
+	return current.sequence !== null && incoming.sequence !== null && current.sequence === incoming.sequence;
+}
+function readFinalContentIdentity(message) {
+	const display = readSessionMessageDisplayContent(message);
+	if (!display.text && !display.hasNonText) return null;
+	const identity = readSessionMessageIdentity(message);
+	const record = asNullableRecord(message);
+	const metadata = asNullableRecord(record?.["__openclaw"]);
+	try {
+		return `content:${stableStringify([
+			identity?.role ?? "assistant",
+			display.text,
+			display.hasNonText ? record?.content ?? null : null,
+			metadata?.media ?? null,
+			identity?.isImported ? [
+				metadata?.importedFrom ?? null,
+				metadata?.cliSessionId ?? null,
+				metadata?.externalId ?? null
+			] : null
+		])}`;
+	} catch {
+		return null;
+	}
+}
+function hasTerminalStopReason(message) {
+	const stopReason = asNullableRecord(message)?.stopReason;
+	return stopReason === "stop" || stopReason === "length" || stopReason === "error" || stopReason === "aborted" || stopReason === "end_turn";
+}
+function hasCompletedRunSnapshotContext(entry, snapshot, runId) {
+	if (!runId || entry.identity?.runId !== runId) return false;
+	const entryIndex = snapshot.indexOf(entry);
+	if (entryIndex < 0) return false;
+	const hasEarlierUser = snapshot.slice(0, entryIndex).some((candidate) => candidate.identity?.role === "user" && candidate.identity.runId === runId);
+	const hasLaterAssistant = snapshot.slice(entryIndex + 1).some((candidate) => candidate.identity?.role === "assistant" && candidate.identity.runId === runId);
+	return hasEarlierUser && !hasLaterAssistant;
+}
+/** Read stable persisted identity first, falling back to canonical display content. */
+function readSessionProjectionFinalMessageIdentity(message) {
+	if (!hasDisplayableSessionMessage(message)) return null;
+	return readPersistedFinalIdentity(message) ?? readFinalContentIdentity(message);
+}
+/** Check whether a displayable terminal may recover a prior empty terminal. */
+function canRecoverSessionProjectionFinal(currentMessage, incomingMessage) {
+	if (hasDisplayableSessionMessage(currentMessage)) return false;
+	return readPersistedFinalIdentity(currentMessage) === null || hasCompatiblePersistedFinalIdentity(currentMessage, incomingMessage);
+}
+/** Check whether a run has already accepted the same terminal reply. */
+function hasSessionProjectionAcceptedFinal(run, message) {
+	const identity = readSessionProjectionFinalMessageIdentity(message);
+	return Boolean(identity && run && (run.acceptedFinalMessageIdentities?.includes(identity) || readSessionProjectionFinalMessageIdentity(run.message) === identity));
+}
+/** Match an unsequenced live terminal to exactly one durable same-run terminal row. */
+function findUniqueSnapshotTerminalMatch(current, matches, run, snapshot) {
+	if (!current.live || current.identity?.role !== "assistant" || current.identity.id || current.identity.sequence !== null || !run || run.status === "streaming") return null;
+	const terminalContent = readFinalContentIdentity(current.message);
+	if (!terminalContent || readFinalContentIdentity(run.message) !== terminalContent) return null;
+	const durableTerminalMatches = matches.filter((entry) => {
+		return (asNullableRecord(asNullableRecord(entry.message)?.["__openclaw"])?.runTerminal === true || entry.identity?.runId === current.identity?.runId && hasTerminalStopReason(entry.message) || hasCompletedRunSnapshotContext(entry, snapshot, current.identity?.runId ?? null)) && readFinalContentIdentity(entry.message) === terminalContent;
+	});
+	const entry = durableTerminalMatches.length === 1 ? durableTerminalMatches[0] : void 0;
+	if (!entry) return null;
+	return {
+		entry,
+		inferred: asNullableRecord(asNullableRecord(entry.message)?.["__openclaw"])?.runTerminal !== true && !hasTerminalStopReason(entry.message)
+	};
+}
+/** Check whether ordinary single-match promotion needs terminal-content verification. */
+function isUnsequencedLiveTerminal(current, run) {
+	return Boolean(current.live && current.identity?.role === "assistant" && !current.identity.id && current.identity.sequence === null && run && run.status !== "streaming" && readFinalContentIdentity(current.message) === readFinalContentIdentity(run.message));
+}
+//#endregion
+//#region packages/gateway-client/src/session-projection-run-retention.ts
+/** Bounded retention for completed and active session projection runs. */
+const MAX_TRACKED_SESSION_RUNS = 200;
+const RETAINED_SESSION_RUNS = 150;
+/** Retain every active run and the newest completed runs within the projection bound. */
+function retainSessionProjectionRuns(runs) {
+	const entries = Object.entries(runs);
+	if (entries.length <= MAX_TRACKED_SESSION_RUNS) return runs;
+	const active = entries.filter(([, run]) => run.status === "streaming");
+	const terminal = entries.filter(([, run]) => run.status !== "streaming");
+	const terminalLimit = Math.max(0, RETAINED_SESSION_RUNS - active.length);
+	const retainedTerminal = terminalLimit > 0 ? terminal.slice(-terminalLimit) : [];
+	return Object.fromEntries([...active, ...retainedTerminal]);
+}
+//#endregion
 //#region packages/gateway-client/src/session-projection-run-event.ts
 function readNonemptyString(value) {
 	return typeof value === "string" ? value.trim() || null : null;
 }
-function reduceSessionProjectionRunEventImpl(projection, event, scope = {}) {
+/** Normalizes Gateway run envelopes once for every browser and terminal adapter. */
+function reduceSessionProjectionRunEvent(projection, event, scope = {}) {
 	const runId = readNonemptyString(event.runId);
 	if (!runId || typeof event.state !== "string" || ![
 		"delta",
@@ -1112,6 +1321,7 @@ function reduceSessionProjectionRunEventImpl(projection, event, scope = {}) {
 	const errorKind = readNonemptyString(event.errorKind);
 	const base = {
 		runId,
+		seq: typeof event.seq === "number" ? event.seq : void 0,
 		...message === void 0 ? {} : { message },
 		scope
 	};
@@ -1135,8 +1345,6 @@ function reduceSessionProjectionRunEventImpl(projection, event, scope = {}) {
 //#endregion
 //#region packages/gateway-client/src/session-projection.ts
 /** Browser-safe identity and replay rules shared by Gateway conversation clients. */
-const MAX_TRACKED_SESSION_RUNS = 200;
-const RETAINED_SESSION_RUNS = 150;
 const SESSION_PROJECTION_SCOPE_KEYS = [
 	"sessionKey",
 	"sessionId",
@@ -1290,12 +1498,39 @@ function reconcileSessionProjectionSnapshot(state, messages, scope = {}, options
 	const visibleMessages = options.shouldIncludeMessage ? messages.filter(options.shouldIncludeMessage) : messages;
 	if (!scopesMatch(state.scope, scope)) return createSessionProjection(scope, visibleMessages);
 	let entries = createProjectionEntries(visibleMessages);
+	const runs = { ...state.runs };
 	for (const current of state.entries) {
-		if (!current.live && !current.pending || options.shouldIncludeMessage?.(current.message) === false || entries.filter((entry) => entryMatches(entry, current, true)).length === 1) continue;
-		entries = insertEntry(entries, current, state.runs);
+		if (!current.live && !current.pending || options.shouldIncludeMessage?.(current.message) === false) continue;
+		const matches = entries.filter((entry) => entryMatches(entry, current, true));
+		const run = current.identity?.runId ? runs[current.identity.runId] : void 0;
+		const terminalMatch = findUniqueSnapshotTerminalMatch(current, matches, run, entries);
+		if (matches.length === 1 && !isUnsequencedLiveTerminal(current, run) || terminalMatch) {
+			if (terminalMatch?.inferred && terminalMatch.entry.identity && current.identity?.runId && run) runs[current.identity.runId] = {
+				...run,
+				inferredSnapshotTerminal: {
+					entry: current,
+					matchedIdentity: terminalMatch.entry.identity
+				}
+			};
+			continue;
+		}
+		entries = insertEntry(entries, current, runs);
+	}
+	for (const [runId, run] of Object.entries(runs)) {
+		const inferred = run.inferredSnapshotTerminal;
+		if (!inferred) continue;
+		const candidateRemains = entries.some((entry) => sameTranscriptIdentity(entry.identity, inferred.matchedIdentity));
+		const visible = options.shouldIncludeMessage?.(inferred.entry.message) !== false;
+		const matches = entries.filter((entry) => entryMatches(entry, inferred.entry, true));
+		const terminalMatch = findUniqueSnapshotTerminalMatch(inferred.entry, matches, run, entries);
+		if (candidateRemains && visible && terminalMatch?.inferred) continue;
+		if (candidateRemains && visible && !terminalMatch) entries = insertEntry(entries, inferred.entry, runs);
+		const { inferredSnapshotTerminal: _inferred, ...settledRun } = run;
+		runs[runId] = settledRun;
 	}
 	return {
 		...withEntries(state, entries),
+		runs,
 		scope: {
 			...state.scope,
 			...scope
@@ -1303,68 +1538,27 @@ function reconcileSessionProjectionSnapshot(state, messages, scope = {}, options
 		hasTransportGap: false
 	};
 }
-function hasDisplayableSessionMessage(message) {
-	if (typeof message === "string") return message.trim().length > 0;
-	const record = asNullableRecord(message);
-	if (!record) return false;
-	const displayableBlocks = Array.isArray(record.content) && record.content.some((block) => {
-		const entry = asNullableRecord(block);
-		return entry ? entry.type !== "text" || readSessionProjectionString(entry.text) !== null : typeof block === "string" && block.trim().length > 0;
-	});
-	const media = asNullableRecord(record["__openclaw"])?.media;
-	return Boolean(typeof record.content === "string" && record.content.trim() || displayableBlocks || Array.isArray(media) && media.length > 0);
-}
-function readSessionProjectionFinalMessageIdentity(message) {
-	if (!hasDisplayableSessionMessage(message)) return null;
-	const identity = readSessionMessageIdentity(message);
-	if (identity?.externalSource) return `import:${identity.role}:${identity.externalSource}`;
-	if (identity?.id && !identity.isImported) return `id:${identity.role}:${identity.id}`;
-	if (identity?.sequence !== null && identity?.sequence !== void 0) return `seq:${identity.role}:${identity.sequence}`;
-	const record = asNullableRecord(message);
-	const metadata = asNullableRecord(record?.["__openclaw"]);
-	try {
-		return `content:${JSON.stringify([
-			identity?.role ?? "assistant",
-			typeof message === "string" ? message : record?.content ?? null,
-			metadata?.media ?? null,
-			identity?.isImported ? [
-				metadata?.importedFrom ?? null,
-				metadata?.cliSessionId ?? null,
-				metadata?.externalId ?? null
-			] : null
-		])}`;
-	} catch {
-		return null;
-	}
-}
-/** Replayed finals are recognized against this run's bounded canonical terminal history. */
-function hasSessionProjectionAcceptedFinal(run, message) {
-	const identity = readSessionProjectionFinalMessageIdentity(message);
-	return Boolean(identity && run && (run.acceptedFinalMessageIdentities?.includes(identity) || readSessionProjectionFinalMessageIdentity(run.message) === identity));
-}
-function retainSessionProjectionRuns(runs) {
-	const entries = Object.entries(runs);
-	if (entries.length <= MAX_TRACKED_SESSION_RUNS) return runs;
-	const active = entries.filter(([, run]) => run.status === "streaming");
-	const terminal = entries.filter(([, run]) => run.status !== "streaming");
-	const terminalLimit = Math.max(0, RETAINED_SESSION_RUNS - active.length);
-	const retainedTerminal = terminalLimit > 0 ? terminal.slice(-terminalLimit) : [];
-	return Object.fromEntries([...active, ...retainedTerminal]);
-}
 function updateRun(state, incoming) {
 	const incomingErrorMessage = readSessionProjectionString(incoming.errorMessage);
-	const normalizedIncoming = { ...incoming };
+	const incomingSeq = typeof incoming.seq === "number" && Number.isSafeInteger(incoming.seq) && incoming.seq >= 0 ? incoming.seq : void 0;
+	const normalizedIncoming = {
+		...incoming,
+		seq: incomingSeq
+	};
 	if (incomingErrorMessage) normalizedIncoming.errorMessage = incomingErrorMessage;
 	else delete normalizedIncoming.errorMessage;
 	const current = state.runs[incoming.runId];
-	if (current && current.status !== "streaming") {
+	const resumesErrorProjection = current?.status === "error" && incoming.status === "streaming" && current.seq !== void 0 && incomingSeq !== void 0 && incomingSeq > current.seq && isSessionProjectionErrorMessage(current.message, current.errorMessage);
+	if (current && current.status !== "streaming" && !resumesErrorProjection) {
 		const incomingFinalIdentity = readSessionProjectionFinalMessageIdentity(incoming.message);
 		const incomingIsFinal = incoming.status === "completed" || incoming.status === "yielded";
-		const canRecoverFinal = !hasDisplayableSessionMessage(current.message) || (current.acceptedFinalMessageIdentities?.length ?? 0) > 0;
-		const acceptFinal = incomingIsFinal && (current.status === incoming.status || canRecoverFinal) && incomingFinalIdentity !== null && !hasSessionProjectionAcceptedFinal(current, incoming.message);
-		const recoverMessage = acceptFinal && !hasDisplayableSessionMessage(current.message);
+		const currentHasDisplayableMessage = hasDisplayableSessionMessage(current.message);
+		const canAcceptFinal = currentHasDisplayableMessage ? current.status === incoming.status || (current.acceptedFinalMessageIdentities?.length ?? 0) > 0 : canRecoverSessionProjectionFinal(current.message, incoming.message);
+		const acceptFinal = incomingIsFinal && canAcceptFinal && incomingFinalIdentity !== null && !hasSessionProjectionAcceptedFinal(current, incoming.message);
+		const recoverMessage = acceptFinal && !currentHasDisplayableMessage;
 		const recoverError = readSessionProjectionString(current.errorMessage) === null && incomingErrorMessage !== null;
-		if (!acceptFinal && !recoverError) return state;
+		const updateTerminalSequence = incoming.status !== "streaming" && (incomingSeq === void 0 ? current.seq !== void 0 : current.seq === void 0 || incomingSeq > current.seq);
+		if (!acceptFinal && !recoverError && !updateTerminalSequence) return state;
 		const firstFinalIdentity = readSessionProjectionFinalMessageIdentity(current.message);
 		const previousFinalIdentities = current.acceptedFinalMessageIdentities ?? (firstFinalIdentity ? [firstFinalIdentity] : []);
 		return {
@@ -1373,6 +1567,7 @@ function updateRun(state, incoming) {
 				...state.runs,
 				[incoming.runId]: {
 					...current,
+					...updateTerminalSequence ? { seq: incomingSeq } : {},
 					...recoverMessage ? { message: incoming.message } : {},
 					...acceptFinal && incomingFinalIdentity ? { acceptedFinalMessageIdentities: [...previousFinalIdentities, incomingFinalIdentity].slice(-32) } : {},
 					...recoverError && incomingErrorMessage ? {
@@ -1383,17 +1578,18 @@ function updateRun(state, incoming) {
 			}
 		};
 	}
+	const resumedState = resumesErrorProjection ? withEntries(state, state.entries.filter((entry) => !((entry.identity?.runId === incoming.runId || entry.message === current.message) && (asNullableRecord(entry.message)?.stopReason === "error" || entry.message === current.message) && isSessionProjectionErrorMessage(entry.message, current.errorMessage)))) : state;
 	const previousRuns = current && current.status === "streaming" && incoming.status !== "streaming" ? Object.fromEntries(Object.entries(state.runs).filter(([runId]) => runId !== incoming.runId)) : state.runs;
 	const acceptedFinalIdentity = incoming.status === "completed" || incoming.status === "yielded" ? readSessionProjectionFinalMessageIdentity(incoming.message) : null;
 	return {
-		...state,
+		...resumedState,
 		runs: retainSessionProjectionRuns({
 			...previousRuns,
 			[incoming.runId]: {
-				...current,
+				...resumesErrorProjection ? {} : current,
 				...normalizedIncoming,
 				...acceptedFinalIdentity ? { acceptedFinalMessageIdentities: [acceptedFinalIdentity] } : {},
-				...incoming.message === void 0 && current?.message !== void 0 ? { message: current.message } : {}
+				...!resumesErrorProjection && incoming.message === void 0 && current?.message !== void 0 ? { message: current.message } : {}
 			}
 		})
 	};
@@ -1451,11 +1647,13 @@ function reduceSessionProjection(state, event) {
 		}
 		case "runDelta": return updateRun(state, {
 			runId: event.runId,
+			seq: event.seq,
 			status: "streaming",
 			...event.message === void 0 ? {} : { message: event.message }
 		});
 		case "runTerminal": return updateRun(state, {
 			runId: event.runId,
+			seq: event.seq,
 			status: event.status,
 			...event.message === void 0 ? {} : { message: event.message },
 			...event.stopReason === void 0 ? {} : { stopReason: event.stopReason },
@@ -1470,10 +1668,6 @@ function reduceSessionProjection(state, event) {
 		default: return state;
 	}
 }
-/** Normalizes Gateway run envelopes once for every browser and terminal adapter. */
-function reduceSessionProjectionRunEvent(projection, event, scope = {}) {
-	return reduceSessionProjectionRunEventImpl(projection, event, scope);
-}
 //#endregion
 //#region packages/gateway-client/src/session-subscriptions.ts
 function sessionSubscriptionParams(key, agentId) {
@@ -1591,34 +1785,26 @@ var GatewaySessionMessageSubscriptionCoordinator = class {
 			agentId,
 			ready: Promise.resolve({ key }),
 			approvalRequest: null,
-			approvalResponse: null,
 			plainFallback: null,
 			canonicalSettled: false,
 			handles: /* @__PURE__ */ new Set(),
 			pendingOwners: 0,
 			release: null
 		};
-		entry.ready = this.#requestSubscribe(entry, includeApprovals).then((result) => {
-			entry.key = result.key;
-			entry.canonicalSettled = true;
-			if (includeApprovals) entry.approvalResponse = result;
-			return result;
-		});
-		if (includeApprovals) entry.approvalRequest = entry.ready;
+		entry.ready = this.#requestSubscribe(entry, includeApprovals);
+		if (includeApprovals) entry.ready = this.#trackApprovalRequest(entry, entry.ready);
 		entry.ready.catch(() => void 0);
 		this.#entries.add(entry);
 		return entry;
 	}
 	#acquireCapability(entry, includeApprovals) {
 		if (!includeApprovals) {
-			if (entry.approvalRequest === entry.ready && !entry.approvalResponse) {
+			if (entry.approvalRequest === entry.ready) {
 				if (!entry.plainFallback) {
 					const approvalRequest = entry.ready;
 					entry.plainFallback = approvalRequest.catch(async (error) => {
 						if (this.#retired) throw error;
 						const result = await this.#requestSubscribe(entry, false);
-						entry.key = result.key;
-						entry.canonicalSettled = true;
 						entry.ready = Promise.resolve(result);
 						if (entry.approvalRequest === approvalRequest) entry.approvalRequest = null;
 						return result;
@@ -1628,18 +1814,15 @@ var GatewaySessionMessageSubscriptionCoordinator = class {
 			}
 			return entry.ready;
 		}
-		if (entry.approvalResponse) return Promise.resolve(entry.approvalResponse);
 		if (entry.approvalRequest) return entry.approvalRequest;
-		const upgrade = entry.ready.then(() => this.#requestSubscribe(entry, true)).then((result) => {
-			entry.key = result.key;
-			entry.approvalResponse = result;
-			return result;
-		});
-		entry.approvalRequest = upgrade;
-		upgrade.catch(() => {
-			if (entry.approvalRequest === upgrade) entry.approvalRequest = null;
+		return this.#trackApprovalRequest(entry, entry.ready.then(() => this.#requestSubscribe(entry, true)));
+	}
+	#trackApprovalRequest(entry, request) {
+		const tracked = request.finally(() => {
+			if (entry.approvalRequest === tracked) entry.approvalRequest = null;
 		});
-		return upgrade;
+		entry.approvalRequest = tracked;
+		return tracked;
 	}
 	async #requestSubscribe(entry, includeApprovals) {
 		const params = sessionSubscriptionParams(entry.key, entry.agentId);
@@ -1649,7 +1832,11 @@ var GatewaySessionMessageSubscriptionCoordinator = class {
 		} : params, { timeoutMs: DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS }).catch(async (error) => {
 			if (!(error instanceof GatewayProtocolRequestTimeoutError) || !error.requestSent || this.#retired) throw error;
 			try {
-				await this.#client.request(entry.handles.size > 0 ? "sessions.messages.subscribe" : "sessions.messages.unsubscribe", params, { timeoutMs: DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS });
+				const retainedApprovals = [...entry.handles].some((handle) => handle.includeApprovals);
+				await this.#client.request(entry.handles.size > 0 ? "sessions.messages.subscribe" : "sessions.messages.unsubscribe", retainedApprovals ? {
+					...params,
+					includeApprovals: true
+				} : params, { timeoutMs: DEFAULT_GATEWAY_REQUEST_TIMEOUT_MS });
 			} catch (recoveryError) {
 				if (!this.#retired) throw new AggregateError([error, recoveryError], "session message subscription recovery failed", { cause: recoveryError });
 			}
@@ -1657,8 +1844,10 @@ var GatewaySessionMessageSubscriptionCoordinator = class {
 		});
 		const response = result && typeof result === "object" ? result : null;
 		const responseKey = response && "key" in response ? response.key : void 0;
+		entry.key = typeof responseKey === "string" && responseKey.trim() ? responseKey.trim() : entry.key;
+		entry.canonicalSettled = true;
 		return {
-			key: typeof responseKey === "string" && responseKey.trim() ? responseKey.trim() : entry.key,
+			key: entry.key,
 			...response && "approvalReplay" in response ? { approvalReplay: response.approvalReplay } : {}
 		};
 	}
@@ -1694,4 +1883,4 @@ function releaseGatewaySessionMessageSubscription(subscription) {
 	return sessionMessageSubscriptionOwners.get(subscription)?.coordinator.release(subscription) ?? Promise.resolve();
 }
 //#endregion
-export { buildDeviceAuthPayloadV3 as A, gatewayOriginScope as C, selectGatewayConnectAuth as D, resolveGatewayConnectScopes as E, shouldRetryGatewayWithDeviceToken as O, gatewayCredentialScope as S, buildGatewayConnectAuth as T, shouldPauseGatewayReconnect as _, createSessionProjection as a, GatewayProtocolRequestTimeoutError as b, projectLiveSessionMessage as c, reduceSessionProjectionRunEvent as d, normalizeSessionProjectionRunId as f, isRecord as g, readSessionMessageSequence as h, resetGatewaySessionMessageSubscriptionCoordinator as i, normalizeDeviceMetadataForAuth as j, buildDeviceAuthPayload as k, reconcileSessionProjectionSnapshot as l, readSessionMessageIdentity as m, getGatewaySessionMessageSubscriptionCoordinator as n, hasSessionProjectionAcceptedFinal as o, readAssistantStreamSegmentIdentity as p, releaseGatewaySessionMessageSubscription as r, isLocallyOptimisticSessionMessage as s, GatewaySessionMessageSubscriptionCoordinator as t, reduceSessionProjection as u, GatewayProtocolClient as v, GatewayBrowserDeviceAuthLifecycle as w, isGatewayProtocolResponseError as x, GatewayProtocolRequestError as y };
+export { shouldRetryGatewayWithDeviceToken as A, isGatewayProtocolResponseError as C, buildGatewayConnectAuth as D, GatewayBrowserDeviceAuthLifecycle as E, buildDeviceAuthPayloadV3 as M, normalizeDeviceMetadataForAuth as N, resolveGatewayConnectScopes as O, GatewayProtocolRequestTimeoutError as S, gatewayOriginScope as T, readSessionMessageSequence as _, createSessionProjection as a, GatewayProtocolClient as b, reconcileSessionProjectionSnapshot as c, hasSessionProjectionAcceptedFinal as d, readSessionProjectionFinalMessageIdentity as f, readSessionMessageIdentity as g, readAssistantStreamSegmentIdentity as h, resetGatewaySessionMessageSubscriptionCoordinator as i, buildDeviceAuthPayload as j, selectGatewayConnectAuth as k, reduceSessionProjection as l, normalizeSessionProjectionRunId as m, getGatewaySessionMessageSubscriptionCoordinator as n, isLocallyOptimisticSessionMessage as o, isSessionProjectionErrorMessage as p, releaseGatewaySessionMessageSubscription as r, projectLiveSessionMessage as s, GatewaySessionMessageSubscriptionCoordinator as t, reduceSessionProjectionRunEvent as u, isRecord as v, gatewayCredentialScope as w, GatewayProtocolRequestError as x, shouldPauseGatewayReconnect as y };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/gateway-client",
-  "version": "2026.9.2",
+  "version": "2026.9.4",
   "description": "Reference WebSocket client for the OpenClaw Gateway protocol",
   "keywords": [
     "client",
@@ -62,7 +62,7 @@
     }
   },
   "dependencies": {
-    "@openclaw/gateway-protocol": "2026.9.2",
+    "@openclaw/gateway-protocol": "2026.9.4",
     "ipaddr.js": "2.5.0",
     "ws": "8.21.3"
   },